mirror of
https://github.com/imthenachoman/How-To-Secure-A-Linux-Server.git
synced 2026-06-12 13:19:29 +02:00
Added RequiredRSASize to sshd_config (#123)
Enforces a minimum RSA key size of 3072, as recommended by various standards bodies, as detailed here: https://www.keylength.com/en/compare/
This commit is contained in:
@@ -582,6 +582,11 @@ SSH is a door into your server. This is especially true if you are opening ports
|
|||||||
# don't allow .rhosts or /etc/hosts.equiv
|
# don't allow .rhosts or /etc/hosts.equiv
|
||||||
HostbasedAuthentication no
|
HostbasedAuthentication no
|
||||||
|
|
||||||
|
# OpenSSH 9.1 and later
|
||||||
|
# Enforce a minimum RSA key size of 3072 bits
|
||||||
|
# https://www.keylength.com/en/compare/
|
||||||
|
RequiredRSASize 3072
|
||||||
|
|
||||||
# https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/issues/115
|
# https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/issues/115
|
||||||
HashKnownHosts yes
|
HashKnownHosts yes
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user