New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: Insecure SSH configuration #7542 #419

Merged

adskyiproger merged 3 commits into develop from ocrvs-7542

Feb 17, 2025

Contributor

adskyiproger commented Feb 14, 2025 •

edited

Loading

This PR aims to fix issue described at opencrvs/opencrvs-core#7542 by using scripted documentation from https://www.ssh-audit.com/hardening_guides.html#ubuntu_24_04_lts

Whats new?

Added files folder to keep files for upload by ansible

Test results:

Test results when /etc/ssh/moduli doesn't have short DH keys:
- Ubuntu 22.04: https://github.com/adskyiproger/opencrvs-countryconfig/actions/runs/13326572681/job/37221022719
- Ubuntu 24.04: https://github.com/adskyiproger/opencrvs-countryconfig/actions/runs/13327065548/job/37222596865
Test results when /etc/ssh/moduli has short DH keys:
- Ubuntu 22.04: https://github.com/adskyiproger/opencrvs-countryconfig/actions/runs/13326711225/job/37221458269
- Ubuntu 24.04: https://github.com/adskyiproger/opencrvs-countryconfig/actions/runs/13328344164/job/37226525928


          fix: Insecure SSH configuration #7542

2e3e9a3

adskyiproger added the bug label

This comment has been minimized.

Sign in to view


          fix: Insecure SSH configuration #7542

3dfdcc1

rikukissa approved these changes

View reviewed changes

Member

rikukissa left a comment

Excellent work :)

CHANGELOG.md Outdated Show resolved Hide resolved


          fix description

e579cea

adskyiproger self-assigned this

adskyiproger merged commit 2bd2ad2 into develop

2 checks passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug