Disable Terrapin sensible ciphers and algorithms
ClosedPublic
Actions

Authored by dereckson on Jan 8 2024, 21:54.

Tags

None

Referenced Files

	F26992592: D3265.id8385.diff
	Tue, Apr 28, 11:00

	F26992590: D3265.id8384.diff
	Tue, Apr 28, 10:59

	F26984445: D3265.diff
	Tue, Apr 28, 09:18

	Unknown Object (File)
	Sun, Apr 26, 01:21

	Unknown Object (File)
	Sat, Apr 25, 05:11

	Unknown Object (File)
	Wed, Apr 15, 09:03

	Unknown Object (File)
	Mar 29 2026, 10:40

	Unknown Object (File)
	Mar 28 2026, 01:25

View All Files

Subscribers

None

Details

Reviewers

DorianWinty

Maniphest Tasks

T1935: OPENSSH 9.6

Commits

rOPS72f249f5686b: Disable Terrapin sensible ciphers and algorithms

Summary

All the servers include this configuration or are updated to a new version
of OpenSSH.

Instead of selecting on which server include this mitigation, we include it
everywhere so legacy clients are also protected.

Ref T1935.

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Jan 8 2024, 21:54

dereckson created this revision.

Harbormaster completed remote builds in B5152: Diff 8384.Jan 8 2024, 21:54

DorianWinty accepted this revision.Jan 8 2024, 21:54

This revision is now accepted and ready to land.Jan 8 2024, 21:54

Closed by commit rOPS72f249f5686b: Disable Terrapin sensible ciphers and algorithms (authored by dereckson). · Explain WhyJan 8 2024, 21:54

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rOPS72f249f5686b: Disable Terrapin sensible ciphers and algorithms.

Revision Contents
Changeset List

Path

Size

roles/

core/

sshd/

files/

sshd_config

7 lines

Diff 8385

View Options

roles/core/sshd/files/sshd_config

Disable Terrapin sensible ciphers and algorithmsClosedPublicActions