summaryrefslogtreecommitdiff
path: root/templates/sshd_config/Ubuntu.erb
diff options
context:
space:
mode:
Diffstat (limited to 'templates/sshd_config/Ubuntu.erb')
-rw-r--r--templates/sshd_config/Ubuntu.erb3
1 files changed, 3 insertions, 0 deletions
diff --git a/templates/sshd_config/Ubuntu.erb b/templates/sshd_config/Ubuntu.erb
index d42fac1..28ee5f6 100644
--- a/templates/sshd_config/Ubuntu.erb
+++ b/templates/sshd_config/Ubuntu.erb
@@ -116,6 +116,9 @@ AllowGroups <%= s %>
<%- end -%>
<% if scope.lookupvar('sshd::hardened') == 'yes' -%>
+<% if (scope.function_versioncmp([scope.lookupvar('::ssh_version'),'6.5'])) >= 0 -%>
+KexAlgorithms curve25519-sha256@libssh.org
+<% end -%>
Ciphers aes256-ctr
MACs hmac-sha1
<% end -%>