jtesta
please add support to audit gitlab-sshd
Gitlab offers its own optional SSH daemon written in Go:
https://gitlab.com/gitlab-org/gitlab-shell/-/tree/main/internal/sshd
A basic test against ssh.gitlab.freedesktop.org shows that it supports a number of outdated algoritms.
It might be a good idea to implement a server profile for this.
The custom policy support would be perfect for this scenario. Considering how few people run their own Gitlab server, it wouldn't make sense for me to support it long-term. (Supporting a platform takes much more effort than implementing the policy the first time...).
There's however tons of GitLab users who need to adjust their client config to weed out questionable algorithms and yet still have a few supported ones left.
A Gitlab user on, say, Ubuntu 24, could use the Ubuntu 24-specific client hardening guide, which would help them in all outgoing connections (Gitlab included).
That said, if anyone from the community wanted to create a guide for the wiki (https://github.com/jtesta/ssh-audit/wiki/SSH-Hardening-Guides-Index), I'd certainly point users to it!