pyrox.dev
Merge pull request #101222 from omasanori/ssh-kex
nixos/sshd: update kexAlgorithms, fix links
authored by Maximilian Bosch and committed by GitHub 98170761 d4ed4051
+4
-3
nixos/modules/services/networking/ssh/sshd.nix
+4
-3
nixos/modules/services/networking/ssh/sshd.nix
···
269
269
kexAlgorithms = mkOption {
270
270
type = types.listOf types.str;
271
271
default = [
272
+
"curve25519-sha256"
272
273
"curve25519-sha256@libssh.org"
273
274
"diffie-hellman-group-exchange-sha256"
274
275
];
···
279
280
Defaults to recommended settings from both
280
281
<link xlink:href="https://stribika.github.io/2015/01/04/secure-secure-shell.html" />
281
282
and
282
-
<link xlink:href="https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29" />
283
+
<link xlink:href="https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67" />
283
284
'';
284
285
};
285
286
···
300
301
Defaults to recommended settings from both
301
302
<link xlink:href="https://stribika.github.io/2015/01/04/secure-secure-shell.html" />
302
303
and
303
-
<link xlink:href="https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29" />
304
+
<link xlink:href="https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67" />
304
305
'';
305
306
};
306
307
···
321
322
Defaults to recommended settings from both
322
323
<link xlink:href="https://stribika.github.io/2015/01/04/secure-secure-shell.html" />
323
324
and
324
-
<link xlink:href="https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29" />
325
+
<link xlink:href="https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67" />
325
326
'';
326
327
};
327
328