Skip to content
This repository was archived by the owner on Dec 26, 2020. It is now read-only.

Commit 1046ede

Browse files
committed
Merge pull request #37 from hardening-io/fix_hmac_ssh_client
Change variable for hmac from server to client
2 parents b069a12 + d3e01b7 commit 1046ede

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

roles/ansible-ssh-hardening/templates/openssh.conf.j2

+1-1
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ StrictHostKeyChecking ask
6464
# Weak HMAC is sometimes required if older package versions are used
6565
# eg Ruby's Net::SSH at around 2.2.* doesn't support sha2 for hmac, so this will have to be set true in this case.
6666
#
67-
{% if ssh_server_weak_hmac -%}
67+
{% if ssh_client_weak_hmac -%}
6868
{% if ansible_distribution == 'Ubuntu' and ansible_distribution_version >= '14.04' -%}
6969
MACs {{macs_66_weak}}
7070
{% elif ansible_os_family in ['Oracle Linux', 'RedHat'] and ansible_distribution_major_version <= '6' -%}

0 commit comments

Comments
 (0)