]> git.ipfire.org Git - ipfire-2.x.git/commit
add hardened SSH client configuration
authorPeter Müller <peter.mueller@link38.eu>
Mon, 10 Sep 2018 14:29:08 +0000 (16:29 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Mon, 10 Sep 2018 15:36:39 +0000 (16:36 +0100)
commitedea6ec5a4ee9a75afcf69c65178089f6a928105
tree78ce7dcf116536176e0a274d2fe312aba1c3999b
parent0762dcc4e86937ae2f00d09d449563eb12563b9c
add hardened SSH client configuration

Introduce a custom OpenSSH client configuration file for IPFire.
Some people use it as a jumping host, so applying hardening options
system-wide improves security.

Cryptography setup is the same as for OpenSSH server configuration.

The second version of this patch re-adds some non-AEAD cipher suites
which are needed for connecting to older RHEL systems.

Partially fixes #11751

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/ssh/ssh_config [new file with mode: 0644]