freebsd-dev/release/tools
Conrad Meyer 858178a142 Remove insecure ciphers from GCE sshd configuration
They were added for unclear reasons in r277263.  The current OpenSSH
defaults (7.5+) are reasonable, and do not include the insecure rc4 cipher:

                   chacha20-poly1305@openssh.com,
                   aes128-ctr,aes192-ctr,aes256-ctr,
                   aes128-gcm@openssh.com,aes256-gcm@openssh.com,
                   aes128-cbc,aes192-cbc,aes256-cbc

I think I recall there being a reason for a specific list of ciphers on GCE
at the time, but I do not recall what it was, and cannot find any
current GCE documentation of such a list.

So, just revert the explicit configuration and use sane openssh defaults.

PR:		230092
Submitted by:	Gustavo Scalet <gustavo.scalet AT collabora.com>
MFC after:	3 days
Security:	yes
2018-07-28 19:35:49 +00:00
..
arm.subr release: Add arm_install_boot to install the commit boot bits 2018-07-22 12:03:17 +00:00
azure.conf Chase r284656 and r284658: 2015-06-21 04:34:57 +00:00
ec2.conf Move debug.{trace,debugger}_on_panic and kern.panic_reboot_wait_time in 2018-04-18 05:58:27 +00:00
gce.conf Remove insecure ciphers from GCE sshd configuration 2018-07-28 19:35:49 +00:00
openstack.conf - Resize FreeBSD to the size of the OpenStack flavor (growfs). 2016-12-14 03:01:15 +00:00
vagrant-virtualbox.conf Remove /etc/resolv.conf from virtual machine images, which is 2017-11-21 18:02:18 +00:00
vagrant-vmware.conf Remove /etc/resolv.conf from virtual machine images, which is 2017-11-21 18:02:18 +00:00
vagrant.conf Fix an out-of-order execution issue regarding pkg(8): 2015-07-21 03:18:53 +00:00
vmimage.subr Fix an indentation nit. 2017-11-30 20:52:01 +00:00