classes: | |
- service.openssh.server | |
- service.openssh.server.cis | |
# TODO: Uncomment service.openssh.server.sshd-strong-ciphers | |
# when package with https://gerrit.mcp.mirantis.com/#/c/36220/ | |
# will be published. | |
#- service.openssh.server.sshd-strong-ciphers | |
# TODO: Remove parameters:openssh:server:ciphers completely | |
# when package with https://gerrit.mcp.mirantis.com/#/c/36220/ | |
# will be published. | |
parameters: | |
openssh: | |
server: | |
ciphers: | |
"3des-cbc": | |
enabled: True | |
"aes128-cbc": | |
enabled: True | |
"aes192-cbc": | |
enabled: True | |
"aes256-cbc": | |
enabled: True | |
"aes128-ctr": | |
enabled: True | |
"aes192-ctr": | |
enabled: True | |
"aes256-ctr": | |
enabled: True | |
"aes128-gcm@openssh.com": | |
enabled: True | |
"aes256-gcm@openssh.com": | |
enabled: True | |
"chacha20-poly1305@openssh.com": | |
enabled: True | |
"rijndael-cbc@lysator.liu.se": | |
enabled: True | |