I have read and understand the posting from here, https://security.stackexchange.com/questions/39756/secure-configuration-of-ciphers-macs-kex-available-in-ssh. However, I would like to know what the /etc/sshd_config
configuration would look like should I want to accomplish the following goals:
- Disable any 96-bit HMAC Algorithms
- Disable any MD5-based HMAC Algorithms
Would it be the following?
MACs [email protected],[email protected],hmac-sha2-512,hmac-sha2-256,[email protected],hmac-sha1,[email protected],[email protected],[email protected],[email protected],hmac-ripemd160
Note that this question is looking for the configuration setting(s) needed; and not reasons, rationale, or discussion of why this may or may not be a good idea.