diff options
| author | dtucker@openbsd.org <dtucker@openbsd.org> | 2021-03-12 05:08:19 +0100 |
|---|---|---|
| committer | Darren Tucker <dtucker@dtucker.net> | 2021-03-13 03:14:13 +0100 |
| commit | 88057eb6df912abf2678ea5c846d9d9cbc92752c (patch) | |
| tree | 7eae3d98c66cb57b8433b83d2e50aa63a47a3368 /sshd_config.5 | |
| parent | upstream: pwcopy() struct passwd that we're going to reuse across a (diff) | |
| download | openssh-88057eb6df912abf2678ea5c846d9d9cbc92752c.tar.xz openssh-88057eb6df912abf2678ea5c846d9d9cbc92752c.zip | |
upstream: Add ModuliFile keyword to sshd_config to specify the
location of the "moduli" file containing the groups for DH-GEX. This will
allow us to run tests against arbitrary moduli files without having to
install them. ok djm@
OpenBSD-Commit-ID: 8df99d60b14ecaaa28f3469d01fc7f56bff49f66
Diffstat (limited to 'sshd_config.5')
| -rw-r--r-- | sshd_config.5 | 14 |
1 files changed, 12 insertions, 2 deletions
diff --git a/sshd_config.5 b/sshd_config.5 index 3db9353c9..c3a67e186 100644 --- a/sshd_config.5 +++ b/sshd_config.5 @@ -33,8 +33,8 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: sshd_config.5,v 1.328 2021/02/27 23:42:37 djm Exp $ -.Dd $Mdocdate: February 27 2021 $ +.\" $OpenBSD: sshd_config.5,v 1.329 2021/03/12 04:08:19 dtucker Exp $ +.Dd $Mdocdate: March 12 2021 $ .Dt SSHD_CONFIG 5 .Os .Sh NAME @@ -1256,6 +1256,16 @@ will refuse connection attempts with a probability of rate/100 (30%) if there are currently start (10) unauthenticated connections. The probability increases linearly and all connection attempts are refused if the number of unauthenticated connections reaches full (60). +.It Cm ModuliFile +Specifies the +.Xr moduli 5 +file that contains the Diffie-Hellman groups used for the +.Dq diffie-hellman-group-exchange-sha1 +and +.Dq diffie-hellman-group-exchange-sha256 +key exchange methods. +The default is +.Pa /etc/moduli . .It Cm PasswordAuthentication Specifies whether password authentication is allowed. The default is |