Skip to content

Instantly share code, notes, and snippets.

@atiensivu

atiensivu/sshclientconfig

Last active September 10, 2017 03:55
Show Gist options
  • Save atiensivu/f1cd8f5ea2d3a38e0aec79efe0d5e419 to your computer and use it in GitHub Desktop.
Save atiensivu/f1cd8f5ea2d3a38e0aec79efe0d5e419 to your computer and use it in GitHub Desktop.
Download ZIP
OpenSSH client - "better" default cipher orders while still compatible
Raw
sshclientconfig
# Mostly based on https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern
Host *
ServerAliveInterval 60
# Ensure KnownHosts are unreadable if leaked - it is otherwise easier to know which hosts your keys have access to.
HashKnownHosts yes
# Host keys the client accepts - order here is honored by OpenSSH - not sure about DropBear
HostKeyAlgorithms [email protected],[email protected],ssh-ed25519,ssh-rsa,[email protected],[email protected],[email protected],ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256
KexAlgorithms [email protected],ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
MACs [email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,[email protected]
Ciphers [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment