Re-organized option host key types for OpenSSH 9.2 to correspond with updated Debian 12 hardening guide.

This commit is contained in:
Joe Testa
2023-11-27 21:33:13 -05:00
parent bad2c9cd8e
commit ba8e8a7e68
2 changed files with 2 additions and 1 deletions

View File

@ -182,6 +182,7 @@ For convenience, a web front-end on top of the command-line tool is available at
- Added Python 3.12 to Tox tests.
- In server policies, reduced expected DH modulus sizes from 4096 to 3072 to match online hardening guides (note that 3072-bit moduli provide the equivalent of 128-bit symmetric security).
- In Ubuntu 22.04 client policy, moved host key types `sk-ssh-ed25519@openssh.com` and `ssh-ed25519` to the end of all certificate types.
- Re-organized option host key types for OpenSSH 9.2 server policy to correspond with updated Debian 12 hardening guide.
### v3.0.0 (2023-09-07)
- Results from concurrent scans against multiple hosts are no longer improperly combined; bug discovered by [Adam Russell](https://github.com/thecliguy).