mirror of
https://github.com/imthenachoman/How-To-Secure-A-Linux-Server.git
synced 2026-03-24 05:22:39 +01:00
Added RequiredRSASize to sshd_config (#123)
Enforces a minimum RSA key size of 3072, as recommended by various standards bodies, as detailed here: https://www.keylength.com/en/compare/
This commit is contained in:
@@ -582,6 +582,11 @@ SSH is a door into your server. This is especially true if you are opening ports
|
||||
# don't allow .rhosts or /etc/hosts.equiv
|
||||
HostbasedAuthentication no
|
||||
|
||||
# OpenSSH 9.1 and later
|
||||
# Enforce a minimum RSA key size of 3072 bits
|
||||
# https://www.keylength.com/en/compare/
|
||||
RequiredRSASize 3072
|
||||
|
||||
# https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/issues/115
|
||||
HashKnownHosts yes
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user