Skip to content
This repository has been archived by the owner on Dec 26, 2020. It is now read-only.

Use sha2 HMACs on RHEL 6 / CentOS 6. #270

Merged
merged 2 commits into from
Apr 13, 2020
Merged

Use sha2 HMACs on RHEL 6 / CentOS 6. #270

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
defa6f7
Use sha2 HMACs on RHEL 6 / CentOS 6.
foonix Apr 1, 2020
ffc7fae
Oracle Linux 6.5 release notes indicate no OpenSSH package change fro…
foonix Apr 11, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
4 changes: 4 additions & 0 deletions defaults/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -171,6 +171,10 @@ ssh_macs_53_default:
- hmac-ripemd160
- hmac-sha1

ssh_macs_53_el_6_5_default:
- hmac-sha2-512
- hmac-sha2-256

ssh_macs_59_default:
- hmac-sha2-512
- hmac-sha2-256
Expand Down
8 changes: 8 additions & 0 deletions tasks/crypto.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,14 @@
ssh_macs: '{{ ssh_macs_59_default }}'
when: sshd_version is version('5.9', '>=') and not ssh_macs

- name: set macs for Enterprise Linux >= 6.5 (openssh 5.3 with backports)
set_fact:
ssh_macs: '{{ ssh_macs_53_el_6_5_default }}'
when:
- ansible_distribution in ['CentOS', 'OracleLinux', 'RedHat']
- ansible_distribution_version is version('6.5', '>=')
- not ssh_macs

- name: set macs according to openssh-version
set_fact:
ssh_macs: '{{ ssh_macs_53_default }}'
Expand Down