If you are using DH kex (RSA), then you probably should regenerate the moduli file instead of just taking the distro’s version and filtering it as outline in yo

If you are using DH kex (RSA), then you probably should regenerate the moduli file instead of just taking the distro’s version and filtering it as outline in your link. To regenerate the moduli, you run: ssh-keygen -M generate \ -O bits=4096 \ moduli.candidates ssh-keygen -M screen \ -f moduli.candidates \ moduli.safe awk '$5 > 3071' moduli.safe \ | tee /etc/ssh/moduli source: https://github.com/egberts/easy-admin/blob/main/490-net-ssh/495-net-ssh-moduli.sh https://github.com/egberts/easy-admin/blob/main/490-net-ssh/...