summaryrefslogtreecommitdiff
path: root/templates
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2017-12-31 15:34:42 +0100
committerChristian Poessinger <christian@poessinger.com>2017-12-31 15:34:42 +0100
commited9ab6155a9ae94a9b9bb214c42fb8dad6dfbf04 (patch)
tree09b1645f8f66d1b881627059808cb213e0a92bb7 /templates
parent39c3c6b0cb5a2b34cadcad857bc70577f1fefba3 (diff)
downloadvyatta-cfg-system-ed9ab6155a9ae94a9b9bb214c42fb8dad6dfbf04.tar.gz
vyatta-cfg-system-ed9ab6155a9ae94a9b9bb214c42fb8dad6dfbf04.zip
T507: Add support for key exchange algorithms
Diffstat (limited to 'templates')
-rw-r--r--templates/service/ssh/key-exchange/node.def11
1 files changed, 11 insertions, 0 deletions
diff --git a/templates/service/ssh/key-exchange/node.def b/templates/service/ssh/key-exchange/node.def
new file mode 100644
index 00000000..a3c91b0b
--- /dev/null
+++ b/templates/service/ssh/key-exchange/node.def
@@ -0,0 +1,11 @@
+type: txt
+help: Allowed key exchange algorithms
+comp_help: Specifies the available KEX (key exchange) algorithms. The KEX algorithm is used in protocol version 2 for key negotiation upon session creation. Multiple algorithms must be comma-separated. See 'ssh -Q kex' for supported KEX algorithms.
+
+create: sudo sed -i -e '$ a \
+KexAlgorithms $VAR(@)' /etc/ssh/sshd_config
+
+delete: sudo sed -i -e '/^KexAlgorithms $VAR(@)$/d' /etc/ssh/sshd_config
+
+update: sudo sed -i -e '/^KexAlgorithms.*$/c \
+KexAlgorithms $VAR(@)' /etc/ssh/sshd_config