flora-6: add back openssh MACs that got removed #233

Merged
b12f merged 1 commit from infra-openssh-mac-defaults into infra 2023-07-07 12:43:52 +00:00

1 commit

Author SHA1 Message Date
teutat3s 6fd2903516
flora-6: add back openssh MACs that got removed
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
from defaults

NixOS default openssh MACs have changed to use "encrypt-then-mac" only.
This breaks compatibilty with clients that do not offer these MACs. For
compatibility reasons, we add back the old defaults.
See: https://github.com/NixOS/nixpkgs/pull/231165

https://blog.stribik.technology/2015/01/04/secure-secure-shell.html
https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67
2023-07-07 12:13:57 +02:00