blob: 0288a21b74e1b8aff9259e520295a1d6a1360ef1 [file] [log] [blame]
Ondrej Smola03ff34e2016-12-01 01:30:33 +01001classes:
2- service.openssh.server
Dmitry Teselkin81745ec2018-04-24 13:02:11 +03003- service.openssh.server.cis
Dmitry Teselkine742eb72019-02-26 13:54:45 +03004# TODO: Uncomment service.openssh.server.sshd-strong-ciphers
5# when package with https://gerrit.mcp.mirantis.com/#/c/36220/
6# will be published.
7#- service.openssh.server.sshd-strong-ciphers
8# TODO: Remove parameters:openssh:server:ciphers completely
9# when package with https://gerrit.mcp.mirantis.com/#/c/36220/
10# will be published.
11parameters:
12 openssh:
13 server:
14 ciphers:
15 "3des-cbc":
16 enabled: True
17 "aes128-cbc":
18 enabled: True
19 "aes192-cbc":
20 enabled: True
21 "aes256-cbc":
22 enabled: True
23 "aes128-ctr":
24 enabled: True
25 "aes192-ctr":
26 enabled: True
27 "aes256-ctr":
28 enabled: True
29 "aes128-gcm@openssh.com":
30 enabled: True
31 "aes256-gcm@openssh.com":
32 enabled: True
33 "chacha20-poly1305@openssh.com":
34 enabled: True
35 "rijndael-cbc@lysator.liu.se":
36 enabled: True
37