From b200285a059c598d73fd4a4a394172a53dbdf1a8 Mon Sep 17 00:00:00 2001
From: Glen Barber <gjb@FreeBSD.org>
Date: Fri, 28 Jul 2017 18:46:02 +0000
Subject: [PATCH] Revert r321659, re-enabling ChallengeResponseAuthentication,
 which was discussed a while back between cperciva@ and so@, and I forgot.

Reported by:	cperciva
Sponsored by:	The FreeBSD Foundation
---
 release/tools/ec2.conf | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/release/tools/ec2.conf b/release/tools/ec2.conf
index e5379ea8e077..4a7a1e809ec7 100644
--- a/release/tools/ec2.conf
+++ b/release/tools/ec2.conf
@@ -81,12 +81,6 @@ vm_extra_pre_umount() {
 	# Load the kernel module for the Amazon "Elastic Network Adapter"
 	echo 'if_ena_load="YES"' >> ${DESTDIR}/boot/loader.conf
 
-	# Disable ChallengeResponseAuthentication according to EC2
-	# requirements.
-	sed -i '' -e \
-		's/^#ChallengeResponseAuthentication yes/ChallengeResponseAuthentication no/' \
-		${DESTDIR}/etc/ssh/sshd_config
-
 	# The first time the AMI boots, the installed "first boot" scripts
 	# should be allowed to run:
 	# * ec2_configinit (download and process EC2 user-data)