Skip to content

Instantly share code, notes, and snippets.

@elerch

elerch/sshconfig-stub

Created January 26, 2017 00:42
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save elerch/ce8da3077e1d7bc61eea26b7876f8855 to your computer and use it in GitHub Desktop.
Save elerch/ce8da3077e1d7bc61eea26b7876f8855 to your computer and use it in GitHub Desktop.
Download ZIP
Stub for ~/.ssh/config
Raw
sshconfig-stub
# Sane security defaults for SSH clients. Disables everything old and nasty.
# Explanation: http://mochtu.de/2015/01/06/securing-ssh-connections/
# Background information: https://stribika.github.io/2015/01/04/secure-secure-shell.html
# OSX Users: consider updating your openssh version, or you might see an error.
Host *
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
# delete diffie-hellman-group-exchange-sha1
Ciphers chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,umac-128@openssh.com
ServerAliveInterval 120
TCPKeepAlive no
#Host example.com other.com
# MACs some-other-less-secure-setting-offered-by-your-server
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment