Last active
January 17, 2016 02:23
-
-
Save tribou/cf83ad178683dd694948 to your computer and use it in GitHub Desktop.
ssh_config hardening
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Insert these at the beginning of an existing ssh_config file | |
| # Github needs diffie-hellman-group-exchange-sha1 some of the time but not always. | |
| Host github.com | |
| KexAlgorithms [email protected],diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 | |
| Host * | |
| KexAlgorithms [email protected],diffie-hellman-group-exchange-sha256 | |
| HostKeyAlgorithms [email protected],[email protected],ssh-ed25519,ssh-rsa | |
| Ciphers [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr | |
| MACs [email protected],[email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,[email protected] | |
| PasswordAuthentication no | |
| ChallengeResponseAuthentication no | |
| PubkeyAuthentication yes | |
| # If using Tor hidden services | |
| # Host *.onion | |
| # ProxyCommand socat - SOCKS4A:localhost:%h:%p,socksport=9050 | |
| # Generate client keys: | |
| # ssh-keygen -t ed25519 -o -a 100 | |
| # ssh-keygen -t rsa -b 4096 -o -a 100 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment