diff --git a/default/serverspec/spec_helper.rb b/default/serverspec/spec_helper.rb
index 6b01caf..ba9b6d3 100644
--- a/default/serverspec/spec_helper.rb
+++ b/default/serverspec/spec_helper.rb
@@ -9,4 +9,3 @@
     c.os = backend(Serverspec::Commands::Base).check_os
   end
 end
-
diff --git a/default/serverspec/ssh_spec.rb b/default/serverspec/ssh_spec.rb
index 7947b68..2d87694 100644
--- a/default/serverspec/ssh_spec.rb
+++ b/default/serverspec/ssh_spec.rb
@@ -1,393 +1,393 @@
 require 'spec_helper'
 
 RSpec.configure do |c|
-    c.filter_run_excluding :skipOn => backend(Serverspec::Commands::Base).check_os[:family]
+  c.filter_run_excluding :skipOn => backend(Serverspec::Commands::Base).check_os[:family]
 end
 
 describe 'SSH owner, group and permissions' do
 
-	describe file('/etc/ssh') do
-  		it { should be_directory }
-	end
+  describe file('/etc/ssh') do
+    it { should be_directory }
+  end
 
-    describe file('/etc/ssh') do
-      it { should be_owned_by 'root' }
-    end
+  describe file('/etc/ssh') do
+    it { should be_owned_by 'root' }
+  end
 
-    describe file('/etc/ssh') do
-      it { should be_mode 555 }
-    end
+  describe file('/etc/ssh') do
+    it { should be_mode 555 }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-      it { should be_owned_by 'root' }
-    end
+  describe file('/etc/ssh/sshd_config') do
+    it { should be_owned_by 'root' }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-      it { should be_mode 400 }
-    end
+  describe file('/etc/ssh/sshd_config') do
+    it { should be_mode 400 }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-      it { should be_mode 444 }
-    end
+  describe file('/etc/ssh/ssh_config') do
+    it { should be_mode 444 }
+  end
 
 end
 
 describe 'check sshd_config' do
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^PermitRootLogin no$|^PermitRootLogin without-password$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^PermitRootLogin no$|^PermitRootLogin without-password$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^Port [0-9]?/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^Port [0-9]?/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^AddressFamily inet|any$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^AddressFamily inet|any$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^ListenAddress*/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^ListenAddress*/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^HostKey*/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^HostKey*/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^Protocol 2$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^Protocol 2$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^StrictModes yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^StrictModes yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^SyslogFacility AUTH$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^SyslogFacility AUTH$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^LogLevel VERBOSE$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^LogLevel VERBOSE$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^Ciphers (aes128-ctr,aes256-ctr,aes192-ctr)|(aes128-ctr,aes256-ctr,aes192-ctr,aes128-cbc,aes256-cbc,aes192-cbc)$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^Ciphers (aes128-ctr,aes256-ctr,aes192-ctr)|(aes128-ctr,aes256-ctr,aes192-ctr,aes128-cbc,aes256-cbc,aes192-cbc)$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^(MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160)|(MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-sha1)|(MACs hmac-ripemd160$)/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^(MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160)|(MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-sha1)|(MACs hmac-ripemd160$)/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^KexAlgorithms (diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1)|(diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1)$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^KexAlgorithms (diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1)|(diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1)$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^KeyRegenerationInterval 1h$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^KeyRegenerationInterval 1h$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^ServerKeyBits 2048$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^ServerKeyBits 2048$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^UseLogin no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^UseLogin no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^UsePrivilegeSeparation yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^UsePrivilegeSeparation yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^PermitUserEnvironment no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^PermitUserEnvironment no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^LoginGraceTime 30s$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^LoginGraceTime 30s$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^MaxAuthTries 2$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^MaxAuthTries 2$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^MaxSessions 10$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^MaxSessions 10$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^MaxStartups 10:30:100$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^MaxStartups 10:30:100$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^RSAAuthentication yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^RSAAuthentication yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^PubkeyAuthentication yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^PubkeyAuthentication yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^IgnoreRhosts yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^IgnoreRhosts yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^IgnoreUserKnownHosts yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^IgnoreUserKnownHosts yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^RhostsRSAAuthentication no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^RhostsRSAAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^HostbasedAuthentication no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^HostbasedAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^PasswordAuthentication no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^PasswordAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^PermitEmptyPasswords no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^PermitEmptyPasswords no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^ChallengeResponseAuthentication no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^ChallengeResponseAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^KerberosAuthentication no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^KerberosAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^KerberosOrLocalPasswd no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^KerberosOrLocalPasswd no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^KerberosTicketCleanup yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^KerberosTicketCleanup yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#KerberosGetAFSToken no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#KerberosGetAFSToken no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^GSSAPIAuthentication no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^GSSAPIAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^GSSAPICleanupCredentials yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^GSSAPICleanupCredentials yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#DenyUsers \*$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#DenyUsers \*$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#AllowUsers user1$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#AllowUsers user1$/) }
+  end
 
-      describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#DenyGroups \*$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#DenyGroups \*$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#AllowGroups group1$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#AllowGroups group1$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^TCPKeepAlive no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^TCPKeepAlive no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^ClientAliveInterval 600$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^ClientAliveInterval 600$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^ClientAliveCountMax 3$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^ClientAliveCountMax 3$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^PermitTunnel no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^PermitTunnel no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^AllowTcpForwarding no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^AllowTcpForwarding no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^AllowAgentForwarding no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^AllowAgentForwarding no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^GatewayPorts no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^GatewayPorts no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^X11Forwarding no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^X11Forwarding no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^X11UseLocalhost yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^X11UseLocalhost yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^PrintMotd no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^PrintMotd no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^PrintLastLog no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^PrintLastLog no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#Banner \/etc\/ssh\/banner\.txt$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(%r(^#Banner /etc/ssh/banner\.txt$)) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#UseDNS yes$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#UseDNS yes$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#PidFile \/var\/run\/sshd\.pid$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(%r(^#PidFile /var/run/sshd\.pid$)) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#MaxStartups 10$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#MaxStartups 10$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#ChrootDirectory none$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#ChrootDirectory none$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#ChrootDirectory \/home\/\%u$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(%r(^#ChrootDirectory /home/\%u$)) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#Subsystem sftp internal-sftp -l VERBOSE$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#Subsystem sftp internal-sftp -l VERBOSE$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#Match Group sftponly$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#Match Group sftponly$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#ForceCommand internal-sftp -l VERBOSE$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#ForceCommand internal-sftp -l VERBOSE$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#ChrootDirectory \/sftpchroot\/home\/\%u$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(%r(^#ChrootDirectory /sftpchroot/home/\%u$)) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#AllowTcpForwarding no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#AllowTcpForwarding no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#PasswordAuthentication no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#PasswordAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#PermitRootLogin no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#PermitRootLogin no$/) }
+  end
 
-    describe file('/etc/ssh/sshd_config') do
-        its(:content) { should match /^#X11Forwarding no$/}
-    end
+  describe file('/etc/ssh/sshd_config') do
+    its(:content) { should match(/^#X11Forwarding no$/) }
+  end
 
 end
 
 describe 'check ssh_config' do
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^AddressFamily inet|any$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^AddressFamily inet|any$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^Host/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^Host/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^Port [0-9]?/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^Port [0-9]?/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^Protocol 2$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^Protocol 2$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^BatchMode no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^BatchMode no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^CheckHostIP yes$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^CheckHostIP yes$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^StrictHostKeyChecking ask$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^StrictHostKeyChecking ask$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^Ciphers (aes128-ctr,aes256-ctr,aes192-ctr)|(aes128-ctr,aes256-ctr,aes192-ctr,aes128-cbc,aes256-cbc,aes192-cbc)$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^Ciphers (aes128-ctr,aes256-ctr,aes192-ctr)|(aes128-ctr,aes256-ctr,aes192-ctr,aes128-cbc,aes256-cbc,aes192-cbc)$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^MACs (hmac-sha2-256,hmac-sha2-512,hmac-ripemd160)|(hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-sha1)|(hmac-ripemd160$)/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^MACs (hmac-sha2-256,hmac-sha2-512,hmac-ripemd160)|(hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-sha1)|(hmac-ripemd160$)/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^KexAlgorithms (ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256)|(ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1)$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^KexAlgorithms (ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256)|(ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1)$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^ForwardAgent no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^ForwardAgent no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^ForwardX11 no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^ForwardX11 no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^HostbasedAuthentication no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^HostbasedAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^RhostsRSAAuthentication no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^RhostsRSAAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^RSAAuthentication yes$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^RSAAuthentication yes$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^PasswordAuthentication no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^PasswordAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^GSSAPIAuthentication no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^GSSAPIAuthentication no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^GSSAPIDelegateCredentials no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^GSSAPIDelegateCredentials no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^Tunnel no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^Tunnel no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^PermitLocalCommand no$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^PermitLocalCommand no$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^Compression yes$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^Compression yes$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^#EscapeChar ~$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^#EscapeChar ~$/) }
+  end
 
-    describe file('/etc/ssh/ssh_config') do
-        its(:content) { should match /^#VisualHostKey yes$/}
-    end
+  describe file('/etc/ssh/ssh_config') do
+    its(:content) { should match(/^#VisualHostKey yes$/) }
+  end
 
 end