forked from WillFantom/jumpbox
-
Notifications
You must be signed in to change notification settings - Fork 0
/
policy.txt
31 lines (22 loc) · 1.52 KB
/
policy.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
name = "SSH Jumpbox"
version = 1
# The banner that must match exactly. Commented out to ignore banners, since minor variability in the banner is sometimes normal.
# banner = "SSH-2.0-OpenSSH_9.0"
# The compression options that must match exactly (order matters). Commented out to ignore by default.
# compressions = none, [email protected]
# RSA host key sizes.
hostkey_size_rsa-sha2-256 = 3072
hostkey_size_rsa-sha2-512 = 3072
hostkey_size_ssh-rsa = 3072
# Group exchange DH modulus sizes.
dh_modulus_size_diffie-hellman-group-exchange-sha256 = 4096
# The host key types that must match exactly (order matters).
host keys = ssh-ed25519, rsa-sha2-512, rsa-sha2-256, rsa-sha2-512, rsa-sha2-256
# Host key types that may optionally appear.
#optional host keys = [email protected],[email protected],[email protected],[email protected],[email protected]
# The key exchange algorithms that must match exactly (order matters).
key exchanges = curve25519-sha256, [email protected], diffie-hellman-group-exchange-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group14-sha256, [email protected]
# The ciphers that must match exactly (order matters).
ciphers = [email protected], aes128-ctr, aes192-ctr, aes256-ctr, [email protected], [email protected]
# The MACs that must match exactly (order matters).