From: Silvio Rhatto <rhatto@riseup.net>
Date: Sat, 20 Jul 2013 15:43:46 +0000 (-0300)
Subject: Back to hmac-sha1 as hmac-sha2-512 prevented squeeze systems to connect
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=ad030e74efe9249b59ef6fdb58fca8d9d562cc11;p=puppet-sshd.git

Back to hmac-sha1 as hmac-sha2-512 prevented squeeze systems to connect
---

diff --git a/templates/sshd_config/Debian_sid.erb b/templates/sshd_config/Debian_sid.erb
index 60c15fa..70bb4bf 100644
--- a/templates/sshd_config/Debian_sid.erb
+++ b/templates/sshd_config/Debian_sid.erb
@@ -115,7 +115,7 @@ AllowGroups <%= s %>
 
 <% if scope.lookupvar('sshd::hardened_ssl') == 'yes' -%>
 Ciphers aes256-ctr
-MACs hmac-sha2-512
+MACs hmac-sha1
 <% end -%>
 
 <% unless (s=scope.lookupvar('sshd::tail_additional_options')).empty? -%>
diff --git a/templates/sshd_config/Debian_wheezy.erb b/templates/sshd_config/Debian_wheezy.erb
index 60c15fa..70bb4bf 100644
--- a/templates/sshd_config/Debian_wheezy.erb
+++ b/templates/sshd_config/Debian_wheezy.erb
@@ -115,7 +115,7 @@ AllowGroups <%= s %>
 
 <% if scope.lookupvar('sshd::hardened_ssl') == 'yes' -%>
 Ciphers aes256-ctr
-MACs hmac-sha2-512
+MACs hmac-sha1
 <% end -%>
 
 <% unless (s=scope.lookupvar('sshd::tail_additional_options')).empty? -%>