diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-01-17 09:54:08 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-01-17 09:54:08 +0100 |
| commit | 0868f3dc7246ea44a1765cee04649cd08c188982 (patch) | |
| tree | 20d4777afdd5deb059b68649abea063d1555a7f1 /data | |
| parent | 240123722abf90e0d6bbe46efc81895fbc75825b (diff) | |
| parent | 2473e1bfdeeb0ea7cc47a14811c29cc4801c8038 (diff) | |
| download | vyos-1x-0868f3dc7246ea44a1765cee04649cd08c188982.tar.gz vyos-1x-0868f3dc7246ea44a1765cee04649cd08c188982.zip | |
Merge pull request #4852 from scj643/ssh-fido2-options
ssh: T7483: Add fido2 PubkeyAuthOptions
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/ssh/sshd_config.j2 | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/data/templates/ssh/sshd_config.j2 b/data/templates/ssh/sshd_config.j2 index d5d155340..32f7e23e7 100644 --- a/data/templates/ssh/sshd_config.j2 +++ b/data/templates/ssh/sshd_config.j2 @@ -72,6 +72,20 @@ HostKeyAlgorithms {{ hostkey_algorithm | join(',') }} PubkeyAcceptedAlgorithms {{ pubkey_accepted_algorithm | join(',') }} {% endif %} +{% if fido is vyos_defined %} +{% set configured_pubkey_options = [] %} +{% if fido.pin_required is vyos_defined %} +{% do configured_pubkey_options.append('verify-required') %} +{% endif %} +{% if fido.touch_required is vyos_defined %} +{% do configured_pubkey_options.append('touch-required') %} +{% endif %} +{% if configured_pubkey_options | length > 0 %} +# Sets one or more public key authentication options. +PubkeyAuthOptions {{ configured_pubkey_options | join(' ') }} +{% endif %} +{% endif %} + {% if mac is vyos_defined %} # Specifies the available MAC (message authentication code) algorithms MACs {{ mac | join(',') }} |