flora-6: add back openssh MACs that got removed #233

Merged
b12f merged 1 commit from infra-openssh-mac-defaults into infra 2023-07-07 12:43:52 +00:00
Owner

from defaults

NixOS default openssh MACs have changed to use "encrypt-then-mac" only.
This breaks compatibilty with clients that do not offer these MACs. For
compatibility reasons, we add back the old defaults.
See: https://github.com/NixOS/nixpkgs/pull/231165

https://blog.stribik.technology/2015/01/04/secure-secure-shell.html
https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67

from defaults NixOS default openssh MACs have changed to use "encrypt-then-mac" only. This breaks compatibilty with clients that do not offer these MACs. For compatibility reasons, we add back the old defaults. See: https://github.com/NixOS/nixpkgs/pull/231165 https://blog.stribik.technology/2015/01/04/secure-secure-shell.html https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67
teutat3s added 1 commit 2023-07-07 12:37:44 +00:00
flora-6: add back openssh MACs that got removed
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
6fd2903516
from defaults

NixOS default openssh MACs have changed to use "encrypt-then-mac" only.
This breaks compatibilty with clients that do not offer these MACs. For
compatibility reasons, we add back the old defaults.
See: https://github.com/NixOS/nixpkgs/pull/231165

https://blog.stribik.technology/2015/01/04/secure-secure-shell.html
https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67
axeman approved these changes 2023-07-07 12:43:42 +00:00
axeman left a comment
Owner

🚢

🚢
b12f approved these changes 2023-07-07 12:43:46 +00:00
b12f left a comment
Owner

LGTM

LGTM
b12f merged commit a25d399575 into infra 2023-07-07 12:43:51 +00:00
b12f deleted branch infra-openssh-mac-defaults 2023-07-07 12:43:52 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: pub-solar/os#233
No description provided.