Reorder Ciphers

JuliusBairaktaris · Jan 6, 2025 · f814fce · f814fce
1 parent e3f951f
commit f814fce
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/files/etc/ssh/sshd_config.d/ssh_hardening.conf b/files/etc/ssh/sshd_config.d/ssh_hardening.conf
@@ -1,9 +1,11 @@
-KexAlgorithms mlkem768x25519-sha256,[email protected],curve25519-sha256,[email protected],diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512
+KexAlgorithms [email protected],curve25519-sha256,[email protected],diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512
 
-Ciphers [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr
+Ciphers [email protected],[email protected],aes256-ctr,aes192-ctr,[email protected],aes128-ctr
 
 MACs [email protected],[email protected],[email protected]
 
+RequiredRSASize 3072
+
 HostKeyAlgorithms [email protected],[email protected],[email protected],[email protected],[email protected],ssh-ed25519,rsa-sha2-512,rsa-sha2-256
 
 CASignatureAlgorithms [email protected],ssh-ed25519,rsa-sha2-512,rsa-sha2-256