From 33f21a097637f9b1d84e8ad694ebc882240870a1 Mon Sep 17 00:00:00 2001 From: Franz Pletz Date: Mon, 15 Dec 2014 07:00:17 +0100 Subject: [PATCH] Add support for ED25519 host keys --- openssh/config.sls | 2 +- pillar.example | 10 ++++++++++ 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/openssh/config.sls b/openssh/config.sls index 2f3a29e..66c3625 100644 --- a/openssh/config.sls +++ b/openssh/config.sls @@ -13,7 +13,7 @@ sshd_config: - watch_in: - service: openssh -{% for keyType in ['ecdsa', 'dsa', 'rsa'] %} +{% for keyType in ['ecdsa', 'dsa', 'rsa', 'ed25519'] %} {% if salt['pillar.get']('openssh:generate_' ~ keyType ~ '_keys', False) %} ssh_generate_host_{{ keyType }}_key: cmd.run: diff --git a/pillar.example b/pillar.example index 70ec760..bf82fe9 100644 --- a/pillar.example +++ b/pillar.example @@ -78,3 +78,13 @@ openssh: -----END RSA PRIVATE KEY----- public_key: | ssh-rsa NOT_DEFINED + + generate_ed25519_keys: False + provide_ed25519_keys: False + ed25519: + private_key: | + -----BEGIN OPENSSH PRIVATE KEY----- + NOT_DEFINED + -----END OPENSSH PRIVATE KEY----- + public_key: | + ssh-ed25519 NOT_DEFINED