-
-
Notifications
You must be signed in to change notification settings - Fork 6.1k
Configurable SSH key exchange algorithm and MAC suite #2806
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please add also defaults in code like for chippers here: https://github.com/cumgun/gitea/blob/33711b6a963ee5fc5b836acc6cc1c9f577493a16/modules/setting/setting.go#L114
@lafriks done |
Codecov Report
@@ Coverage Diff @@
## master #2806 +/- ##
=======================================
Coverage 26.84% 26.84%
=======================================
Files 89 89
Lines 17608 17608
=======================================
Hits 4727 4727
Misses 12195 12195
Partials 686 686 Continue to review full report at Codecov.
|
LGTM |
if len(serverCiphers) > 0 { | ||
SSH.ServerCiphers = serverCiphers | ||
} | ||
serverKeyExchanges := sec.Key("SSH_SERVER_KEY_EXCHANGES").Strings(",") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
~~~For example if SSH_SERVER_KEY_EXCHANGES is not set. serverKeyExchanges = "," -> len(serverKeyExchanges) > 0 == true~~~
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry misread ... the .Strings
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM |
Add new configuration keys
SSH_SERVER_KEY_EXCHANGES
andSSH_SERVER_MACS
in order to configure key exchange algorithm and MAC suite.