Git/ssh-audit
1
0
Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2025-01-25 17:39:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Updated OPNsense 20.1.2 and newer (markdown)

Immánuel! 2020-06-01 10:04:09 +02:00
parent 2ef7650447
commit 59656e2b89
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
OPNsense-20.1.2-and-newer.md

@ -28,7 +28,7 @@ Since OPNsense 20.1.2, you can tune the algorithms used by SSH directly in the w
- Starting from OPNsense 20.1.2 but not including 20.7 and newer, you need to apply a couple of official OPNsense patches _(see below)_
- For OPNsense 20.7 and newer, these settings will be included in the core by default. The settings were implemented in https://github.com/opnsense/core/issues/3975 and are added to the 20.7 milestone to be released soon.
The provided SSH algorithm selectors are still not the final solution as the selected algorithms' applied order in the generated configuration is defined by their display order on the form (a limitation of the current UI kit). However, for an advanced user, these provide the possibility to select only the most hardened options as to their liking. OPNsense is probably not used as a jump-host by many users - if an administrator can connect with latest `openssh` release over the hardest supported algorithms, it should be fine.
The provided SSH algorithm selectors on the form are still not the final solution as the selected algorithms' applied order in the generated configuration is defined by their display order on the form (a limitation of the current UI kit). However, for an advanced user, these provide the possibility to select only the most hardened options as to their liking. OPNsense is probably not used as a jump-host by many users - if an administrator can connect with latest `openssh` release over the hardest supported algorithms, it should be fine.
## OPNsense 20.1.2+ (until 20.7)
@ -44,4 +44,4 @@ As there are no ordering in the chosen algorithms, advanced users that tune thes
## OPNsense 20.7+
The new algorithm settings will be released with OPNsense 20.7 by default according to the above Github issue. If you have OPNsense 20.7 or newer, these settings should be available for you on the web interface out of the box.
The new algorithm settings will be released with OPNsense 20.7 according to the above Github issue. If you have OPNsense 20.7 or newer, these settings should be available for you on the web interface out of the box.