opuppet/module-sshd
5
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Changing parameter name sshd_perfect_forward_secrecy to sshd_use_strong_ciphers as sshd already does PFS

Browse source
This commit is contained in:
Silvio Rhatto 2011-02-23 14:25:18 -03:00
parent 85880085ff
commit 9ac4697eb5
3 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
manifests/init.pp
View file

@ -95,8 +95,8 @@ class sshd {
case $sshd_shared_ip {
'': { $sshd_shared_ip = "no" }
}
case $sshd_perfect_forward_secrecy {
'': { $sshd_perfect_forward_secrecy = "no" }
case $sshd_use_strong_ciphers {
'': { $sshd_use_strong_ciphers = "no" }
}
include sshd::client

2
templates/sshd_config/Debian_lenny.erb
View file

@ -189,7 +189,7 @@ PrintMotd no
<%= sshd_tail_additional_options %>
<%- end %>
<%- if sshd_perfect_forward_secrecy.to_s == 'yes' then -%>
<%- if sshd_use_strong_ciphers.to_s == 'yes' then -%>
Ciphers aes256-ctr
MACs hmac-sha1
<%- end %>

2
templates/sshd_config/Debian_squeeze.erb
View file

@ -203,7 +203,7 @@ AllowGroups <%= sshd_allowed_groups %>
<%= sshd_tail_additional_options %>
<%- end %>
<%- if sshd_perfect_forward_secrecy.to_s == 'yes' then -%>
<%- if sshd_use_strong_ciphers.to_s == 'yes' then -%>
Ciphers aes256-ctr
MACs hmac-sha1
<%- end %>