CRYPTO_POLICY 字段为空,我不知道从哪里开始。
我只读到有关 LEGACY、DEFAULT 和 FUTURE 选项的内容(我不清楚它与 SSHD 有何关系)。
# Ciphers and keying
#RekeyLimit default none
# System-wide Crypto policy:
# This system is following system-wide crypto policy. The changes to
# Ciphers, MACs, KexAlgoritms and GSSAPIKexAlgorithsm will not have any
# effect here. They will be overridden by command-line options passed on
# the server start up.
# To opt out, uncomment a line with redefinition of CRYPTO_POLICY=
# variable in /etc/sysconfig/sshd to overwrite the policy.
# For more information, see manual page for update-crypto-policies(8).
主要思想是将默认加密更改为快速算法(或禁用它)。这是用于测试的本地机器,因此只有性能才是重要的。