Skip to content
This repository has been archived by the owner on Dec 26, 2020. It is now read-only.

Support KEX for OpenSSH 8.0+ & quantum resistant KEX #254

Merged
merged 2 commits into from
Jan 17, 2020
Merged

Support KEX for OpenSSH 8.0+ & quantum resistant KEX #254

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a6e95f3
Support KEX for OpenSSH 8.0+
lunarthegrey Nov 4, 2019
435ee7f
Add `sntrup4591761x25519-sha512@tinyssh.org` KEX
lunarthegrey Nov 4, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions defaults/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -209,6 +209,11 @@ ssh_kex_59_default:
ssh_kex_66_default:
- curve25519-sha256@libssh.org
- diffie-hellman-group-exchange-sha256

ssh_kex_80_default:
- sntrup4591761x25519-sha512@tinyssh.org
- curve25519-sha256@libssh.org
- diffie-hellman-group-exchange-sha256

# directory where to store ssh_password policy
ssh_custom_selinux_dir: '/etc/selinux/local-policies'
Expand Down
5 changes: 5 additions & 0 deletions tasks/crypto.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,11 @@

###

- name: set kex according to openssh-version if openssh >= 8.0
set_fact:
ssh_kex: '{{ ssh_kex_80_default }}'
when: sshd_version.stdout is version('8.0', '>=') and not ssh_kex

- name: set kex according to openssh-version if openssh >= 6.6
set_fact:
ssh_kex: '{{ ssh_kex_66_default }}'
Expand Down