4 Commits

Author SHA1 Message Date
Franco Fichtner
17b294b38e system: generic rewrite of ssh advanced opts
o Batch the backend call calling from GUI once and
  only if needed from configuration.
o Turn the configuration into a generic loop.
o Move advanced options to the back of the configuration.
o Warning level for both log messages.
2022-01-18 16:42:16 +01:00
Manuel Faux
3b164749d3
Allow to configure SSH setting PubkeyAcceptedAlgorithms via GUI (#5400)
As OpenSSH 8.8 disables RSA signatures using the SHA-1 hash algorithm
by default some older SSH clients might not be able to connect to
OPNsense anymore. Therefore, it might be needed to manually modify the
PubkeyAcceptedAlgorithms sshd config option.

Prevent generating of invalid configuration values for dynamic
crypto parameters (KexAlgorithms, Ciphers, MACs, HostKeyAlgorithms and
PubkeyAcceptedAlgorithms).
2022-01-18 15:14:59 +01:00
Ad Schellevis
116511910d sshd: add HostKeyAlgorithms for https://github.com/opnsense/core/issues/3975 2020-03-13 09:54:59 +01:00
Ad Schellevis
5df590cd13 SSH: optional KexAlgorithms, Ciphers and MACs to harden security. closes https://github.com/opnsense/core/issues/3975 2020-03-12 13:47:56 +01:00