summaryrefslogtreecommitdiff
path: root/docs/configuration/service/ssh.rst
diff options
context:
space:
mode:
authorrebortg <github@ghlr.de>2024-07-18 21:53:35 +0200
committerrebortg <github@ghlr.de>2024-07-18 21:53:35 +0200
commitd3ad8cc86cf3561788b2c3f0d274453a31c3c2ba (patch)
tree9faadb3a3958c24aca4302d3783173f61131425b /docs/configuration/service/ssh.rst
parent579c5cc953c8f5ac2a17218fd8d58b4a53bab7ca (diff)
parent873a461bdf972ebd815baf50893700b0a2518213 (diff)
downloadvyos-documentation-d3ad8cc86cf3561788b2c3f0d274453a31c3c2ba.tar.gz
vyos-documentation-d3ad8cc86cf3561788b2c3f0d274453a31c3c2ba.zip
Merge branch 'current' of github.com:vyos/vyos-documentation into current
Diffstat (limited to 'docs/configuration/service/ssh.rst')
-rw-r--r--docs/configuration/service/ssh.rst19
1 files changed, 19 insertions, 0 deletions
diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst
index efdbc651..d3ca51b5 100644
--- a/docs/configuration/service/ssh.rst
+++ b/docs/configuration/service/ssh.rst
@@ -109,6 +109,25 @@ Configuration
Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance.
+.. cfgcmd:: set service ssh pubkey-accepted-algorithm <name>
+
+ Specifies the signature algorithms that will be accepted for public key
+ authentication
+
+ List of supported algorithms: ``ssh-ed25519``,
+ ``ssh-ed25519-cert-v01@openssh.com``, ``sk-ssh-ed25519@openssh.com``,
+ ``sk-ssh-ed25519-cert-v01@openssh.com``, ``ecdsa-sha2-nistp256``,
+ ``ecdsa-sha2-nistp256-cert-v01@openssh.com``, ``ecdsa-sha2-nistp384``,
+ ``ecdsa-sha2-nistp384-cert-v01@openssh.com``, ``ecdsa-sha2-nistp521``,
+ ``ecdsa-sha2-nistp521-cert-v01@openssh.com``,
+ ``sk-ecdsa-sha2-nistp256@openssh.com``,
+ ``sk-ecdsa-sha2-nistp256-cert-v01@openssh.com``,
+ ``webauthn-sk-ecdsa-sha2-nistp256@openssh.com``,
+ ``ssh-dss``, ``ssh-dss-cert-v01@openssh.com``, ``ssh-rsa``,
+ ``ssh-rsa-cert-v01@openssh.com``, ``rsa-sha2-256``,
+ ``rsa-sha2-256-cert-v01@openssh.com``, ``rsa-sha2-512``,
+ ``rsa-sha2-512-cert-v01@openssh.com``
+
Dynamic-protection
==================
Protects host from brute-force attacks against