From: Silvio Rhatto <rhatto@riseup.net>
Date: Tue, 19 Aug 2014 16:57:43 +0000 (-0300)
Subject: Back to hmac-sha1 on lenny/squeeze
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=7259d7ec8940f327d70ebc906e62bb3dc0283e36;p=puppet-sshd.git

Back to hmac-sha1 on lenny/squeeze
---

diff --git a/templates/sshd_config/Debian_lenny.erb b/templates/sshd_config/Debian_lenny.erb
index 3aaf974..75f8dc8 100644
--- a/templates/sshd_config/Debian_lenny.erb
+++ b/templates/sshd_config/Debian_lenny.erb
@@ -119,7 +119,7 @@ PrintMotd <%= scope.lookupvar('sshd::print_motd') %>
 
 <% if scope.lookupvar('sshd::hardened_ssl') == 'yes' -%>
 Ciphers aes256-ctr
-MACs hmac-sha2-512
+MACs MACs hmac-sha1
 <% end -%>
 
 <% unless (s=scope.lookupvar('sshd::tail_additional_options')).empty? -%>
diff --git a/templates/sshd_config/Debian_squeeze.erb b/templates/sshd_config/Debian_squeeze.erb
index 40040d1..ca8f3cc 100644
--- a/templates/sshd_config/Debian_squeeze.erb
+++ b/templates/sshd_config/Debian_squeeze.erb
@@ -115,7 +115,7 @@ AllowGroups <%= s %>
 
 <% if scope.lookupvar('sshd::hardened_ssl') == 'yes' -%>
 Ciphers aes256-ctr
-MACs hmac-sha2-512
+MACs MACs hmac-sha1
 <% end -%>
 
 <% unless (s=scope.lookupvar('sshd::tail_additional_options')).empty? -%>