如何在 Fedora Server 29 中更改 SSHD 的加密?

如何在 Fedora Server 29 中更改 SSHD 的加密?

CRYPTO_POLICY 字段为空,我不知道从哪里开始。

我只读到有关 LEGACY、DEFAULT 和 FUTURE 选项的内容(我不清楚它与 SSHD 有何关系)。

# Ciphers and keying
#RekeyLimit default none

# System-wide Crypto policy:
# This system is following system-wide crypto policy. The changes to
# Ciphers, MACs, KexAlgoritms and GSSAPIKexAlgorithsm will not have any
# effect here. They will be overridden by command-line options passed on
# the server start up.
# To opt out, uncomment a line with redefinition of  CRYPTO_POLICY=
# variable in  /etc/sysconfig/sshd  to overwrite the policy.
# For more information, see manual page for update-crypto-policies(8).

主要思想是将默认加密更改为快速算法(或禁用它)。这是用于测试的本地机器,因此只有性能才是重要的。

相关内容