Commit Graph

41 Commits

Author SHA1 Message Date
Aminda Suomalainen 95bcf095df
VerifyHostKeyByDNS is supposed to be yes
fix previous commit, I imagine I changed it by accident.
2019-05-11 00:58:00 +03:00
Aminda Suomalainen e634ee8863
ssh_config: update comment for VerifyHostKeyDNS
OpenSSH is evil and gives you three not-optimal options to this:

A) trust DNSSEC and don't write known_hosts
B) ask whether to trust DNS, but don't bother telling me if it's signed
C) don't even check SSHFP

I see A) as the least evil, but I wish known_hosts was written.
Alternatively B) should tell me whether there is DNSSEC or not, not
only "matching keys found from DNS" or whatever it says always.
2019-05-09 18:44:36 +03:00
Aminda Suomalainen 492cac7158
Revert "ssh_config: controlpersist auto instead of on"
This reverts commit 330e8a80ad.

I got complaining about bad value
2018-10-11 13:45:31 +03:00
Aminda Suomalainen 330e8a80ad
ssh_config: controlpersist auto instead of on
just in case that would be used for tracking and hoping that SSH is
clever enough.
2018-10-07 21:12:08 +03:00
Aminda Suomalainen b8bda9cf49
ssh_config: use more private ControlPath 2018-10-07 20:54:41 +03:00
Aminda Suomalainen 9a662594d2 Fix #87 (explain ssh_config UseRoaming no) 2016-01-14 20:37:51 +02:00
Aminda Suomalainen bbfb63dabd unify the two ssh_config files (fix typos) 2016-01-14 16:59:18 +02:00
Aminda Suomalainen 9d5db7ee3c ssh_config: add "UseRoaming no"
https://twitter.com/msfriedl/status/687635945642967040
2016-01-14 16:47:30 +02:00
Aminda Suomalainen d903ba5985 sshd_config: no instead of No
Permitrootlogin had it for some reason and Jolla's sshd didn't like it.
2016-01-06 10:17:33 +02:00
Aminda Suomalainen c42ae8eb43 ssh: also send EDITOR 2015-09-12 11:45:42 +03:00
Aminda Suomalainen fdf8255372 ssh: send/accept also TZ TERM 2015-09-12 11:42:44 +03:00
Aminda Suomalainen 0f00443a7b sshd_config: mention the LC_ALL anyway
my config files are horrible, too many comments.
2015-09-06 18:42:36 +03:00
Aminda Suomalainen 96ca38818f sshd_config: don't talk so much about locales 2015-09-06 18:40:02 +03:00
Aminda Suomalainen 801e3e0941 sshd_config: AcceptEnv LANG, LANGUAGE LC_*
but not LC_ALL and there is no asterisk, the varibles are allowed
separately. It's very unlikely that someone invents a new locale type.
2015-09-06 18:36:48 +03:00
Aminda Suomalainen a3d5fbd9d7 sshd_config: http://serverfault.com/a/660325 2015-09-06 18:27:50 +03:00
Aminda Suomalainen a0352630fd sshd_config: verbose logging of sftp 2015-09-06 17:37:34 +03:00
Aminda Suomalainen 8d55bc53db sshd_config: use internal sftp & fixes
thanks again @grawity
2015-09-06 17:20:12 +03:00
Aminda Suomalainen c82b706942 fix 7470403158
thanks @DarthGandalf and @grawity on #znc
2015-09-06 17:13:21 +03:00
Aminda Suomalainen 7470403158 sshd_config: add Fedora & Gentoo sftp-server
thanks Conjuro and @DarthGandalf on #znc
2015-09-06 17:09:55 +03:00
Aminda Suomalainen 774346c8d0 fix sshd_config 2015-09-06 08:42:29 +03:00
Aminda Suomalainen 68c6da5aec ssh_config: fix comments 2015-09-06 08:15:17 +03:00
Aminda Suomalainen dc9f8b0ab5 sort sshd_config 2015-09-06 08:12:41 +03:00
Aminda Suomalainen c3f351d21f sshd_config: add commented AcceptEnv
and reason why it's commented, security, ShellShock worked with remotely
sent environent variables even with restricted accounts.
2015-09-06 07:33:32 +03:00
Aminda Suomalainen 90c86466dd ssh_config: also sendenv LANGUAGE 2015-09-06 07:30:41 +03:00
Aminda Suomalainen 6fc4b6a29b ssh_config: add missing dot 2015-09-05 23:50:31 +03:00
Aminda Suomalainen 28c2f0b8d8 ssh_config: SendEnv LANG LC_* 2015-09-05 23:46:00 +03:00
Aminda Suomalainen bd3ee60e61 ssh_config: fix paste fail 2015-09-02 08:33:02 +03:00
Aminda Suomalainen 66f604a6dd ssh_config: add UpdateHostKeys yes 2015-09-02 08:15:16 +03:00
Aminda Suomalainen c05b52354f sshd_config: restore Client*
I am sure I committed them already, but they have disappeared somewhere.
Maybe I accidentally overwrote them.
2015-09-01 17:37:33 +03:00
Aminda Suomalainen 888686ef48 etc/ssh/copy: add verbosity 2015-09-01 17:32:56 +03:00
Aminda Suomalainen c2c0c4fa08 etc/ssh: add copy script 2015-09-01 17:31:42 +03:00
Aminda Suomalainen 25bf96e30a ssh_config: my ssh key is not system-wide 2015-09-01 17:16:37 +03:00
Aminda Suomalainen 96dfc06668 ssh_config: remove unrelated comments 2015-09-01 17:06:33 +03:00
Aminda Suomalainen defa0b9df1 etc/ssh: add ssh_config 2015-09-01 16:48:27 +03:00
Aminda Suomalainen 4cdf8dfe71 sshd_config: add ClientAliveCountMax ClientAliveInterval 2015-09-01 16:40:56 +03:00
Aminda Suomalainen 73e9e99d9c sshd_config: cleaning up 2015-08-30 16:54:21 +03:00
Aminda Suomalainen c922d0aa37 etc/ssh/sshd_config: fix banner 2015-08-28 19:25:26 +03:00
Aminda Suomalainen 7e4bbfba5a sshd_config: also remove ecdsa keys 2015-08-28 14:29:34 +03:00
Aminda Suomalainen 04df2e532b update sshd_config from Arch
OpenSSH 7.1p1-1

Note the sftp subsystem which differs between at least Debian and Arch.
2015-08-28 14:00:25 +03:00
Aminda Suomalainen f69a361ed1 sshd_config: deprecate dsa 2015-08-28 13:54:36 +03:00
Mikaela Suomalainen 938247e19f etc: import from gh-pages 2014-12-27 11:09:00 +02:00