Skip to content

Commit

Permalink
Merge pull request dev-sec#37 from hardening-io/fix_hmac_ssh_client
Browse files Browse the repository at this point in the history
Change variable for hmac from server to client
  • Loading branch information
chris-rock committed Sep 1, 2015
2 parents 9b187f0 + 62f5946 commit b6b8fd0
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion roles/ansible-ssh-hardening/templates/openssh.conf.j2
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@ StrictHostKeyChecking ask
# Weak HMAC is sometimes required if older package versions are used
# eg Ruby's Net::SSH at around 2.2.* doesn't support sha2 for hmac, so this will have to be set true in this case.
#
{% if ssh_server_weak_hmac -%}
{% if ssh_client_weak_hmac -%}
{% if ansible_distribution == 'Ubuntu' and ansible_distribution_version >= '14.04' -%}
MACs {{macs_66_weak}}
{% elif ansible_os_family in ['Oracle Linux', 'RedHat'] and ansible_distribution_major_version <= '6' -%}
Expand Down

0 comments on commit b6b8fd0

Please sign in to comment.