Skip to content
This repository has been archived by the owner on Dec 26, 2020. It is now read-only.

Use sha2 HMACs on RHEL 6 / CentOS 6. #270

Merged
merged 2 commits into from Apr 13, 2020

Conversation

foonix
Copy link
Contributor

@foonix foonix commented Apr 2, 2020

RedHad Enterprise Linux (and family) support SHA2 HMACs as of RHEL 6.5. Please see Detailed notes on the changes implemented in Red Hat Enterprise Linux 6.5 (BZ#969565).

This changes the default HMAC configuration on CentOS/RHEL >= 6.5 to the settings recommended by CIS guidelines.

This also fixes ssh connectivity issues in mixed RHEL6/RHEL7 environments, as the default OpenSSH 5.3 configuration has no overlapping HMACs with 7.4.

@rndmh3ro
Copy link
Member

rndmh3ro commented Apr 2, 2020

Hey @foonix, thanks for this PR.
However before we can merge this, we need to adapt our test-suite to match the new HMACs.

I created an issue for this here: #270

The inspec-tests need to be changed for this - do you want to do that?

Signed-off-by: Jason McNew <foonix@yahoo.com>
tasks/crypto.yml Outdated Show resolved Hide resolved
…m upstream, so use RHEL 6.5 HMACs.

Signed-off-by: Jason McNew <foonix@yahoo.com>
@rndmh3ro rndmh3ro merged commit 4a97d4d into dev-sec:master Apr 13, 2020
@rndmh3ro
Copy link
Member

Thank you!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants