feat(kex): introduce kex for 8.0+, used for alpine and fedora 30+ #155
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR is a second part of dev-sec/ansible-ssh-hardening#281
It also addresses #144 somewhat
From Fedora 30 ( the one which is currently used in
rndmh3ro/docker-fedora-ansible:latest
image for testing ) OpenSSH 8.0p1 is installed. And with changes in dev-sec/ansible-ssh-hardening#254 a separate list of kex was introduced for 8.0 and above in ansible role.So this PR modifies the test to check for correct list of kex for Fedora with version 30 and higher. I've also took the liberty to set the
kex80
for alpine, although currently not used in testingdocker-alpine-ansible
image will fall into same OpenSSH 8.0+ category.This potentially will break other tests
It seems
chef-ssh-hardening
repo does setkex66
list for both Fedora 29 and 30don't know if there are other places to watch out for
What is the best way forward for this one ?