Modifications : etc/ssh/sshd_config

[lhc/admin.git] / srv / ateliers / etc / ssh / sshd_config

diff --git a/srv/ateliers/etc/ssh/sshd_config b/srv/ateliers/etc/ssh/sshd_config
index 9643da1..b6c7534 100644 (file)
--- a/srv/ateliers/etc/ssh/sshd_config
+++ b/srv/ateliers/etc/ssh/sshd_config
@@ -13,12 +13,13 @@ HostbasedAuthentication no
 IgnoreRhosts yes
 IgnoreUserKnownHosts no
 KerberosAuthentication no
-#KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
+KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
 KeyRegenerationInterval 3600
 ListenAddress 0.0.0.0:22
 LogLevel INFO
 LoginGraceTime 120
-MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com
+#Note: hmac-sha1 est pas trop recommandable. Le virer dès que Ouindo$ le permet
+MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha1
 MaxAuthTries 5
 PasswordAuthentication no
 PermitEmptyPasswords no