In Ubuntu 22.04 client policy, moved host key types and to the end of all certificate types.

This commit is contained in:
Joe Testa
2023-11-27 20:07:36 -05:00
parent 69e1e121fd
commit bad2c9cd8e
2 changed files with 2 additions and 1 deletions

View File

@ -181,6 +181,7 @@ For convenience, a web front-end on top of the command-line tool is available at
### v3.1.0-dev (???)
- Added Python 3.12 to Tox tests.
- In server policies, reduced expected DH modulus sizes from 4096 to 3072 to match online hardening guides (note that 3072-bit moduli provide the equivalent of 128-bit symmetric security).
- In Ubuntu 22.04 client policy, moved host key types `sk-ssh-ed25519@openssh.com` and `ssh-ed25519` to the end of all certificate types.
### v3.0.0 (2023-09-07)
- Results from concurrent scans against multiple hosts are no longer improperly combined; bug discovered by [Adam Russell](https://github.com/thecliguy).