nixos/sshd: Remove obsolete Protocol options #59136
Conversation
OpenSSH removed server side support for the v.1 Protocol in version 7.4: https://www.openssh.com/txt/release-7.4, making this option a no-op.
|
@GrahamcOfBorg test openssh |
|
Question somewhat related to this PR: does someone take responsibility for keeping up to date with the latest security standards for this module? What is considered best practice for kexAlgorithms, etc... is an ever moving target. From the git history it looks like this module is updated whenever someone notices an issue, as opposed to someone keeping on top of it. I'll also mention the Qualys scanner we utilize at work scanned a bunch of the NixOS 18.09 severs and had no issues with ssh configuration, so currently we are up to date with industry recommendations... but I'd like to make sure we stay that way. |
|
There's the NixOS security team: https://nixos.org/nixos/security.html . As for how they work, best ask them 😄 |
|
Also, you can volunteer to be a maintainer of this module if you're interested. |
Motivation for this change
OpenSSH removed server side support for the v.1 Protocol
in version 7.4: https://www.openssh.com/txt/release-7.4,
making this option a no-op.
Things done
sandboxinnix.confon non-NixOS)nix-shell -p nix-review --run "nix-review wip"./result/bin/)nix path-info -Sbefore and after)