summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@vyos.io>2024-07-02 16:14:35 +0200
committerGitHub <noreply@github.com>2024-07-02 16:14:35 +0200
commit1cb9ed755a0b35e7180b21f36d293dd78af2f460 (patch)
tree28fe2fa1f62bd67c54b2b2a782ecd874edb5c5b8
parent8897462851cc9cff64404c5803d254c3b5f58b29 (diff)
parentd595e52be6d2cec07e910628b86f09c0734d6b26 (diff)
downloadvyos-documentation-1cb9ed755a0b35e7180b21f36d293dd78af2f460.tar.gz
vyos-documentation-1cb9ed755a0b35e7180b21f36d293dd78af2f460.zip
Merge pull request #1492 from HollyGurza/T5878
ssh: T5878: Allow changing the PubkeyAcceptedAlgorithms option
-rw-r--r--docs/configuration/service/ssh.rst19
1 files changed, 19 insertions, 0 deletions
diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst
index efdbc651..d3ca51b5 100644
--- a/docs/configuration/service/ssh.rst
+++ b/docs/configuration/service/ssh.rst
@@ -109,6 +109,25 @@ Configuration
Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance.
+.. cfgcmd:: set service ssh pubkey-accepted-algorithm <name>
+
+ Specifies the signature algorithms that will be accepted for public key
+ authentication
+
+ List of supported algorithms: ``ssh-ed25519``,
+ ``ssh-ed25519-cert-v01@openssh.com``, ``sk-ssh-ed25519@openssh.com``,
+ ``sk-ssh-ed25519-cert-v01@openssh.com``, ``ecdsa-sha2-nistp256``,
+ ``ecdsa-sha2-nistp256-cert-v01@openssh.com``, ``ecdsa-sha2-nistp384``,
+ ``ecdsa-sha2-nistp384-cert-v01@openssh.com``, ``ecdsa-sha2-nistp521``,
+ ``ecdsa-sha2-nistp521-cert-v01@openssh.com``,
+ ``sk-ecdsa-sha2-nistp256@openssh.com``,
+ ``sk-ecdsa-sha2-nistp256-cert-v01@openssh.com``,
+ ``webauthn-sk-ecdsa-sha2-nistp256@openssh.com``,
+ ``ssh-dss``, ``ssh-dss-cert-v01@openssh.com``, ``ssh-rsa``,
+ ``ssh-rsa-cert-v01@openssh.com``, ``rsa-sha2-256``,
+ ``rsa-sha2-256-cert-v01@openssh.com``, ``rsa-sha2-512``,
+ ``rsa-sha2-512-cert-v01@openssh.com``
+
Dynamic-protection
==================
Protects host from brute-force attacks against