From: Silvio Rhatto <rhatto@riseup.net>
Date: Sun, 13 Feb 2011 20:42:36 +0000 (-0200)
Subject: Perfect forward secrecy config at squeeze template
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=ac30247bf9d7ea57c01cc5ad743e2788f6e8ea0d;p=puppet-sshd.git

Perfect forward secrecy config at squeeze template
---

diff --git a/templates/sshd_config/Debian_squeeze.erb b/templates/sshd_config/Debian_squeeze.erb
index 56b1cab..d371ed1 100644
--- a/templates/sshd_config/Debian_squeeze.erb
+++ b/templates/sshd_config/Debian_squeeze.erb
@@ -202,3 +202,7 @@ AllowGroups <%= sshd_allowed_groups %>
 <%= sshd_tail_additional_options %>
 <%- end %>
 
+<%- if sshd_perfect_forward_secrecy.to_s == 'yes' then -%>
+Ciphers aes256-ctr
+MACs hmac-sha1
+<%- end %>