commit 85c73065bd8a8ac4c0679c34ca2d7575de9fb69a
author Kirill Zhdanov <kzhdanov@mirantis.com> Thu May 14 19:27:38 2020 +0200
committer Valery Sakharov <vsakharov@mirantis.com> Mon Jul 27 12:41:19 2020 +0000
tree d8dfbc4965d16916759650cde6f27db0f8125780
parent 274d9832af2cd088f246c78c1e67972f6b5c27ff

Add option to set server key algorithms

  - KexAlgorithms
  - HostKeyAlgorithms

Related: PROD-35275
Change-Id: I82b18ff7cc7583dd1ecf5cc90842369617bcd27a

README.rst

diff --git a/README.rst b/README.rst
index d7fb88a..3a701d4 100644
--- a/README.rst
+++ b/README.rst
@@ -236,7 +236,29 @@
               publickey:
                 enabled: true
 
+* The OpenSSH server configuration with the Key Exchange algorithms list:
 
+  .. code-block:: yaml
+
+  openssh:
+    server:
+      kexalgorithms:
+        curve25519-sha256:
+          enabled: true
+        ecdh-sha2-nistp384:
+          enabled: true
+
+The OpenSSH server configuration with the Host Key algorithms list:
+
+  .. code-block:: yaml
+
+  openssh:
+    server:
+      hostkeyalgorithms:
+        rsa-sha2-256:
+          enabled: true
+        ecdsa-sha2-nistp256:
+          enabled: true
 
 * OpenSSH server configuration supports AllowUsers, DenyUsers, AllowGroup,
 DenyGroups via allow_users, deny_users, allow_groups, deny_groups keys respectively.