3 ms·

I've always just used this guide: https://sshaudit.com/hardening_guides.html#rhel8 https://sshaudit.com/hardening_guides.html#rhel8 Any reason why I shouldn't

• egberts1 5y ago
  If you are using DH kex (RSA), then you probably should regenerate the moduli file instead of just taking the distro’s version and filtering it as outline in your link. To regenerate the moduli, you run: ssh-keygen -M generate \ -O bits=4096 \ moduli.candidates ssh-keygen -M screen \ -f moduli.candidates \ moduli.safe awk '$5 > 3071' moduli.safe \ | tee /etc/ssh/moduli source: https://github.com/egberts/easy-admin/blob/main/490-net-ssh/495-net-ssh-moduli.sh https://github.com/egberts/easy-admin/blob/main/490-net-ssh/...