From 70444eaf7b07affa832795f7e520c9ef2bd53791 Mon Sep 17 00:00:00 2001
From: Micah <micah@leap.se>
Date: Tue, 9 Feb 2016 16:47:52 -0500
Subject: Allow ecdsa hostkeys (#7642) until we can safely transition providers
 to better key algorithm choices.

Change-Id: I6b9ec83dbfbf15d1b65e14145bf625db6517f6b7
---
 puppet/modules/site_sshd/manifests/init.pp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'puppet/modules/site_sshd')

diff --git a/puppet/modules/site_sshd/manifests/init.pp b/puppet/modules/site_sshd/manifests/init.pp
index be0d3368..a9202da4 100644
--- a/puppet/modules/site_sshd/manifests/init.pp
+++ b/puppet/modules/site_sshd/manifests/init.pp
@@ -76,6 +76,7 @@ MACs hmac-sha2-512,hmac-sha2-256,hmac-ripemd160'
     tcp_forwarding          => $ssh_config['AllowTcpForwarding'],
     manage_client           => false,
     use_storedconfigs       => false,
-    tail_additional_options => $tail_additional_options
+    tail_additional_options => $tail_additional_options,
+    hostkey_type            => [ 'rsa', 'dsa', 'ecdsa' ]
   }
 }
-- 
cgit v1.2.3