From b34ee734972429cc16686edc87dd38ad5a2f65aa Mon Sep 17 00:00:00 2001 From: Joe Chen Date: Sun, 12 Feb 2023 13:10:41 +0800 Subject: feat(ssh): support dynamic list of algorithms (#7345) --- conf/app.ini | 2 ++ conf/locale/locale_en-US.ini | 1 + 2 files changed, 3 insertions(+) (limited to 'conf') diff --git a/conf/app.ini b/conf/app.ini index 06c28ed9..955c0072 100644 --- a/conf/app.ini +++ b/conf/app.ini @@ -83,6 +83,8 @@ SSH_LISTEN_PORT = %(SSH_PORT)s SSH_SERVER_CIPHERS = aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm@openssh.com, arcfour256, arcfour128 ; The list of accepted MACs for connections to builtin SSH server. SSH_SERVER_MACS = hmac-sha2-256-etm@openssh.com, hmac-sha2-256, hmac-sha1 +; The list of accepted key exchange algorithms for connections to builtin SSH server. +SSH_SERVER_ALGORITHMS = rsa, ecdsa, ed25519 ; Define allowed algorithms and their minimum key length (use -1 to disable a type). [ssh.minimum_key_sizes] diff --git a/conf/locale/locale_en-US.ini b/conf/locale/locale_en-US.ini index a5a8b648..ff9ada60 100644 --- a/conf/locale/locale_en-US.ini +++ b/conf/locale/locale_en-US.ini @@ -1209,6 +1209,7 @@ config.ssh.listen_host = Listen host config.ssh.listen_port = Listen port config.ssh.server_ciphers = Server ciphers config.ssh.server_macs = Server MACs +config.ssh.server_algorithms = Server algorithms config.repo_config = Repository configuration config.repo.root_path = Root path -- cgit v1.2.3