2016-07-04 13:23:25 +02:00
|
|
|
#!/bin/bash
|
|
|
|
|
|
2016-07-04 14:20:42 +02:00
|
|
|
echo $0
|
|
|
|
|
set -e
|
|
|
|
|
|
2016-07-04 13:23:25 +02:00
|
|
|
# Ubuntu trusty 14.04's paramiko does not work with jessie's openssh's default settings
|
|
|
|
|
# https://stackoverflow.com/questions/7286929/paramiko-incompatible-ssh-peer-no-acceptable-kex-algorithm/32691055#32691055
|
|
|
|
|
|
|
|
|
|
if ! grep --quiet ^Ciphers /etc/ssh/sshd_config; then
|
|
|
|
|
echo Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr >> /etc/ssh/sshd_config
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
if ! grep --quiet ^MACs /etc/ssh/sshd_config; then
|
|
|
|
|
echo MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,hmac-sha1 >> /etc/ssh/sshd_config
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
if ! grep --quiet ^KexAlgorithms /etc/ssh/sshd_config; then
|
|
|
|
|
echo KexAlgorithms diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 >> /etc/ssh/sshd_config
|
|
|
|
|
fi
|
