diff options
author | Pacien TRAN-GIRARD | 2016-11-08 21:47:26 +0100 |
---|---|---|
committer | Pacien TRAN-GIRARD | 2016-11-08 21:47:26 +0100 |
commit | fdca899aa9b44c6aa16000d1273f301c891131d4 (patch) | |
tree | 6baae0720fcf26de698ed96b65b993279ce5f299 /README.md | |
parent | 2d6955720c1857f81d20f982e6bded7e40de6c89 (diff) | |
download | ssh-hardened-fdca899aa9b44c6aa16000d1273f301c891131d4.tar.gz |
Add Debian specific install steps
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 7 |
1 files changed, 6 insertions, 1 deletions
@@ -13,10 +13,15 @@ Installation | |||
13 | - `groupadd ssh-user` and `usermod -a -G ssh-user <username>` for each user allowed to use SSH. | 13 | - `groupadd ssh-user` and `usermod -a -G ssh-user <username>` for each user allowed to use SSH. |
14 | - Deploy user public keys before continuing | 14 | - Deploy user public keys before continuing |
15 | - Clone this repo into `/etc/ssh/` | 15 | - Clone this repo into `/etc/ssh/` |
16 | - Uncomment `KexDHMin 4096` in `ssh{,d}_config` if supported by the installed OpenSSH | ||
17 | - Regenerate `ssh_host_rsa_key{,.pub}` of length 4096 if lower (`ssh-keygen -t rsa -b 4096 -f ssh_host_rsa_key < /dev/null`) | 16 | - Regenerate `ssh_host_rsa_key{,.pub}` of length 4096 if lower (`ssh-keygen -t rsa -b 4096 -f ssh_host_rsa_key < /dev/null`) |
18 | 17 | ||
19 | 18 | ||
19 | ### Debian specific | ||
20 | |||
21 | - Comment unsupported parameter `KexDHMin 4096` in `ssh{,d}_config` | ||
22 | - `ln -s /usr/lib/openssh /usr/lib/ssh` | ||
23 | |||
24 | |||
20 | References | 25 | References |
21 | ---------- | 26 | ---------- |
22 | 27 | ||