chef-ssh-hardening icon indicating copy to clipboard operation
chef-ssh-hardening copied to clipboard

Published 20 hours ago • verified publisher icon dev-sec

Add support for Debian 11 "bullseye"

Open infertux opened this issue 4 years ago • 1 comments
trafficstars

Is your feature request related to a problem? Please describe.

The test specs from ssh-baseline are failing with Debian 11 because this repo is missing the logic for handling Debian 11 and the ssh-baseline repo is partially implementing it.

Describe the solution you'd like

Being able to use this repo on Debian 11 with the default attributes. Debian 11 comes with openssh 8.4 (vs openssh 7.9 with Debian 10) so I assume the ciphers/MACs/KEXs need to be upgraded to leverage the new crypto.

infertux avatar Sep 07 '21 05:09 infertux

https://github.com/dev-sec/ssh-baseline/pull/172 added support for openssh 8.X KEXs but it's missing the new ciphers and MACs.

infertux avatar Sep 07 '21 05:09 infertux