639 lines
23 KiB
Mathematica
639 lines
23 KiB
Mathematica
/* 01ssh.cdf - SSH configuration file */
|
|
|
|
/*
|
|
* Copyright (c) 2006,2018 Wind River Systems, Inc.
|
|
*
|
|
* The right to copy, distribute or otherwise make use of this software
|
|
* may be licensed only pursuant to the terms of an applicable Wind River
|
|
* license agreement. No license to Wind River intellectual property rights
|
|
* is granted herein. All rights not licensed by Wind River are reserved
|
|
* by Wind River.
|
|
*/
|
|
|
|
/*
|
|
modification history
|
|
--------------------
|
|
01f,01nov16,l_y Fixed binary compatiblility issue for SHA2.(VXW6-86885)
|
|
01e,01nov16,ljl Add SSH_HOST_KEY_RSA and SSH_HOST_KEY_DSA.(VXW6-85687)
|
|
01d,12sep27,rjq Update SYNOPSIS of SSH_USE_RSA2048_SHA256
|
|
01c,07sep07,rme Replaced SELECTION_IPCOM_FS with SELECT_IPCOM_FS in INCLUDE_SSH
|
|
01b,07feb07,tkf Add IPSSH dependency on SELECTION_IPCOM_FS. Also
|
|
removed trailing ctrl-M characters.
|
|
01a,13nov06,kch Replaced INCLUDE_BSD_SOCKET with INCLUDE_IPNET_SOCKET. Also
|
|
corrected some cdf errors.
|
|
*/
|
|
|
|
#ifdef _WRS_CONFIG_COMPONENT_IPSSH_SUPPORT_SHA2
|
|
Component INCLUDE_SSH
|
|
{
|
|
NAME Secure Shell (SSH)
|
|
SYNOPSIS Secure Shell
|
|
CONFIGLETTES ipssh_config.c
|
|
CFG_PARAMS SSH_PORT \
|
|
SSH_BIND_ADDR \
|
|
SSH_IDLE_TIMEOUT \
|
|
SSH_MAX_CLIENTS \
|
|
SSH_MAX_SHELLS \
|
|
SSH_AUTH_PW_ALLOWED \
|
|
SSH_AUTH_PW_REQUIRED \
|
|
SSH_AUTH_PUB_KEY_ALLOWED \
|
|
SSH_AUTH_PUB_KEY_REQUIRED \
|
|
SSH_AUTH_PUB_KEY_FIRST \
|
|
SSH_AUTH_HOSTBASED_ALLOWED \
|
|
SSH_AUTH_HOSTBASED_REQUIRED \
|
|
SSH_AUTH_MAX_FAIL \
|
|
SSH_USE_AES \
|
|
SSH_USE_DES \
|
|
SSH_USE_3DES \
|
|
SSH_USE_BLOWFISH \
|
|
SSH_USE_CAST \
|
|
SSH_USE_ARCFOUR \
|
|
SSH_USE_ARCFOUR_128 \
|
|
SSH_USE_NO_CIPHER \
|
|
SSH_USE_SHA1 \
|
|
SSH_USE_SHA1_96 \
|
|
SSH_USE_SHA256 \
|
|
SSH_USE_SHA512 \
|
|
SSH_USE_MD5 \
|
|
SSH_USE_MD5_96 \
|
|
SSH_USE_NO_MAC \
|
|
SSH_USE_V1 \
|
|
SSH_USE_V2 \
|
|
SSH_USE_TERMINAL \
|
|
SSH_USE_SFTP \
|
|
SSH_USE_PORT_FWD \
|
|
SSH_DSA_KEY_ID \
|
|
SSH_RSA_KEY_ID \
|
|
SSH_RSA_KEYEX_KEY_ID \
|
|
SSH_SFTP_START_DIR \
|
|
IPSSH_GET_SFTP_FUNC_CB \
|
|
IPSSH_SFTP_CHECK_ACCESS_CB \
|
|
IPSSH_SHELL_CHECK_ACCESS_CB \
|
|
IPSSH_VALIDATE_USERID_PW_CB \
|
|
IPSSH_VALIDATE_PUBKEY_CB \
|
|
IPSSH_VALIDATE_HOSTBASED_CB \
|
|
IPSSH_VALIDATE_RSA_PUBKEY_V1_CB \
|
|
IPSSH_AUTH_COMPLETE_CB \
|
|
IPSSH_VALIDATE_SRV_PUBLIC_KEY_CB \
|
|
IPSSH_LOAD_RSA_KEY_CB \
|
|
IPSSH_LOAD_RSA_KEYEX_KEY_CB \
|
|
IPSSH_LOAD_DSA_KEY_CB \
|
|
SSH_USE_DH_GR1_SHA1 \
|
|
SSH_USE_DH_GR14_SHA1 \
|
|
SSH_USE_DH_GEX_SHA1 \
|
|
SSH_USE_DH_GEX_SHA256 \
|
|
SSH_USE_RSA1024_SHA1 \
|
|
SSH_USE_RSA2048_SHA256 \
|
|
SSH_USE_DH_GEX_CLT_MIN \
|
|
SSH_USE_DH_GEX_CLT_N \
|
|
SSH_USE_DH_GEX_CLT_MAX \
|
|
SSH_MODULI_FILE \
|
|
SSH_HOST_KEY_RSA \
|
|
SSH_HOST_KEY_DSA
|
|
MODULES ipssh.o
|
|
REQUIRES INCLUDE_IPNET_SOCKET INCLUDE_IPCRYPTO \
|
|
SELECT_IPCOM_FS
|
|
}
|
|
|
|
#else
|
|
Component INCLUDE_SSH
|
|
{
|
|
NAME Secure Shell (SSH)
|
|
SYNOPSIS Secure Shell
|
|
CONFIGLETTES ipssh_config.c
|
|
CFG_PARAMS SSH_PORT \
|
|
SSH_BIND_ADDR \
|
|
SSH_IDLE_TIMEOUT \
|
|
SSH_MAX_CLIENTS \
|
|
SSH_MAX_SHELLS \
|
|
SSH_AUTH_PW_ALLOWED \
|
|
SSH_AUTH_PW_REQUIRED \
|
|
SSH_AUTH_PUB_KEY_ALLOWED \
|
|
SSH_AUTH_PUB_KEY_REQUIRED \
|
|
SSH_AUTH_PUB_KEY_FIRST \
|
|
SSH_AUTH_HOSTBASED_ALLOWED \
|
|
SSH_AUTH_HOSTBASED_REQUIRED \
|
|
SSH_AUTH_MAX_FAIL \
|
|
SSH_USE_AES \
|
|
SSH_USE_DES \
|
|
SSH_USE_3DES \
|
|
SSH_USE_BLOWFISH \
|
|
SSH_USE_CAST \
|
|
SSH_USE_ARCFOUR \
|
|
SSH_USE_ARCFOUR_128 \
|
|
SSH_USE_NO_CIPHER \
|
|
SSH_USE_SHA1 \
|
|
SSH_USE_SHA1_96 \
|
|
SSH_USE_MD5 \
|
|
SSH_USE_MD5_96 \
|
|
SSH_USE_NO_MAC \
|
|
SSH_USE_V1 \
|
|
SSH_USE_V2 \
|
|
SSH_USE_TERMINAL \
|
|
SSH_USE_SFTP \
|
|
SSH_USE_PORT_FWD \
|
|
SSH_DSA_KEY_ID \
|
|
SSH_RSA_KEY_ID \
|
|
SSH_RSA_KEYEX_KEY_ID \
|
|
SSH_SFTP_START_DIR \
|
|
IPSSH_GET_SFTP_FUNC_CB \
|
|
IPSSH_SFTP_CHECK_ACCESS_CB \
|
|
IPSSH_SHELL_CHECK_ACCESS_CB \
|
|
IPSSH_VALIDATE_USERID_PW_CB \
|
|
IPSSH_VALIDATE_PUBKEY_CB \
|
|
IPSSH_VALIDATE_HOSTBASED_CB \
|
|
IPSSH_VALIDATE_RSA_PUBKEY_V1_CB \
|
|
IPSSH_AUTH_COMPLETE_CB \
|
|
IPSSH_VALIDATE_SRV_PUBLIC_KEY_CB \
|
|
IPSSH_LOAD_RSA_KEY_CB \
|
|
IPSSH_LOAD_RSA_KEYEX_KEY_CB \
|
|
IPSSH_LOAD_DSA_KEY_CB \
|
|
SSH_USE_DH_GR1_SHA1 \
|
|
SSH_USE_DH_GR14_SHA1 \
|
|
SSH_USE_DH_GEX_SHA1 \
|
|
SSH_USE_DH_GEX_SHA256 \
|
|
SSH_USE_RSA1024_SHA1 \
|
|
SSH_USE_RSA2048_SHA256 \
|
|
SSH_USE_DH_GEX_CLT_MIN \
|
|
SSH_USE_DH_GEX_CLT_N \
|
|
SSH_USE_DH_GEX_CLT_MAX \
|
|
SSH_MODULI_FILE \
|
|
SSH_HOST_KEY_RSA \
|
|
SSH_HOST_KEY_DSA
|
|
MODULES ipssh.o
|
|
REQUIRES INCLUDE_IPNET_SOCKET INCLUDE_IPCRYPTO \
|
|
SELECT_IPCOM_FS
|
|
}
|
|
#endif
|
|
Parameter SSH_PORT
|
|
{
|
|
NAME SSH Port
|
|
SYNOPSIS The TCP port the IPSSH daemon listens on for incoming connections. Additional ports are specified using ipssh.port2, ipssh.port3, etc. in the ipssh_config.c file. Note that ipssh.port1 is not a valid system variable.
|
|
TYPE string
|
|
DEFAULT "22"
|
|
}
|
|
|
|
Parameter SSH_IDLE_TIMEOUT
|
|
{
|
|
NAME SSH Idle Timeout
|
|
SYNOPSIS The number of seconds before an idle client is disconnected. 0 means infinite timeout.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_MAX_CLIENTS
|
|
{
|
|
NAME SSH Max Clients
|
|
SYNOPSIS The maximum number of simultaneous clients.
|
|
TYPE string
|
|
DEFAULT "20"
|
|
}
|
|
|
|
Parameter SSH_MAX_SHELLS
|
|
{
|
|
NAME SSH Max Shells
|
|
SYNOPSIS The maximum number of channels that can be opened per connection. Each shell, sftp or forwarded port requires one channel. Note that the IPCOM SHELL only supports one shell per ssh client.
|
|
TYPE string
|
|
DEFAULT "10"
|
|
}
|
|
|
|
Parameter SSH_USE_AES
|
|
{
|
|
NAME SSH Use AES
|
|
SYNOPSIS Enables the use of the AES cipher. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_USE_DES
|
|
{
|
|
NAME SSH Use DES
|
|
SYNOPSIS Enables the use of the DES cipher. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_USE_3DES
|
|
{
|
|
NAME SSH Use 3DES
|
|
SYNOPSIS Enables the use of the 3DES cipher. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
|
|
Parameter SSH_USE_BLOWFISH
|
|
{
|
|
NAME SSH Use Blowfish
|
|
SYNOPSIS Enables the use of the Blowfish cipher. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_USE_CAST
|
|
{
|
|
NAME SSH Use CAST
|
|
SYNOPSIS Enables the use of the CAST cipher. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
Parameter SSH_USE_ARCFOUR
|
|
{
|
|
NAME SSH Use RC4
|
|
SYNOPSIS Enables the use of the RC4 cipher. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
Parameter SSH_USE_ARCFOUR_128
|
|
{
|
|
NAME SSH Use RC4-128
|
|
SYNOPSIS Enables the use of the RC4-128 cipher. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_USE_NO_CIPHER
|
|
{
|
|
NAME SSH Use No Cipher
|
|
SYNOPSIS Enables the use of no cipher. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_USE_SHA1
|
|
{
|
|
NAME SSH Use SHA1
|
|
SYNOPSIS Enables the use of SHA1 for authentication. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_USE_SHA1_96
|
|
{
|
|
NAME SSH Use SHA1-96
|
|
SYNOPSIS Enables the use of SHA1-96 for authentication. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
#ifdef _WRS_CONFIG_COMPONENT_IPSSH_SUPPORT_SHA2
|
|
Parameter SSH_USE_SHA256
|
|
{
|
|
NAME SSH use of SHA-256
|
|
SYNOPSIS This parameter enables use of Secure Hash Algorithm 2 (SHA2) hash Algorithm, This hash Algorithm output 256 bits of hash data. A value of 1 indicates that the cipher is available, 0 indicates that it is off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_USE_SHA512
|
|
{
|
|
NAME SSH use of SHA-512
|
|
SYNOPSIS This parameter enables use of Secure Hash Algorithm 2 (SHA2) hash Algorithm, This hash Algorithm output 512 bits of hash data. A value of 1 indicates that the cipher is available, 0 indicates that it is off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
#endif
|
|
Parameter SSH_USE_MD5
|
|
{
|
|
NAME SSH Use MD5
|
|
SYNOPSIS Enables the use of MD5 for authentication. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_USE_MD5_96
|
|
{
|
|
NAME SSH Use MD5-96
|
|
SYNOPSIS Enables the use of MD5-96 for authentication. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_USE_NO_MAC
|
|
{
|
|
NAME SSH Use MAC
|
|
SYNOPSIS Enables the use of no authentication. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_USE_V1
|
|
{
|
|
NAME SSH Use V1
|
|
SYNOPSIS Enables SSH v1. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_USE_V2
|
|
{
|
|
NAME SSH Use V2
|
|
SYNOPSIS Enables SSH v2. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_USE_TERMINAL
|
|
{
|
|
NAME SSH Enable Terminal Service
|
|
SYNOPSIS Enables SSH Terminal Service. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_USE_SFTP
|
|
{
|
|
NAME SSH Enable SFTP Service
|
|
SYNOPSIS Enables SSH SFTP Service. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_USE_PORT_FWD
|
|
{
|
|
NAME SSH Enable Port Forwarding Service
|
|
SYNOPSIS Enables SSH Port Forwarding. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_DSA_KEY_ID
|
|
{
|
|
NAME SSH DSA Key ID
|
|
SYNOPSIS Key ID used to fetch the server DSA key from the Secure Key DB
|
|
TYPE string
|
|
DEFAULT "default_dsa"
|
|
}
|
|
|
|
Parameter SSH_RSA_KEY_ID
|
|
{
|
|
NAME SSH RSA Key ID
|
|
SYNOPSIS Key ID used to fetch the server RSA key from the Secure Key DB
|
|
TYPE string
|
|
DEFAULT "default_rsa"
|
|
}
|
|
|
|
Parameter SSH_RSA_KEYEX_KEY_ID
|
|
{
|
|
NAME SSH RSA Keyexchange Key ID
|
|
SYNOPSIS Key ID used to fetch the RSA key from the Secure Key DB used in RSA key exchanges
|
|
TYPE string
|
|
DEFAULT "default_rsa"
|
|
}
|
|
|
|
Parameter SSH_AUTH_PW_ALLOWED
|
|
{
|
|
NAME SSH Auth Password Allowed
|
|
SYNOPSIS Controls whether password authentication can be used. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_AUTH_PW_REQUIRED
|
|
{
|
|
NAME SSH Auth Password Required
|
|
SYNOPSIS Controls whether password authentication must be performed before a client is considered logged in. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_AUTH_PUB_KEY_ALLOWED
|
|
{
|
|
NAME SSH Auth Public Key Allowed
|
|
SYNOPSIS Controls whether public key authentication can be used. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_AUTH_PUB_KEY_REQUIRED
|
|
{
|
|
NAME SSH Auth Public Key Required
|
|
SYNOPSIS Controls whether public key authentication must be performed before a client is considered logged in. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_AUTH_PUB_KEY_FIRST
|
|
{
|
|
NAME SSH Auth Public Key First
|
|
SYNOPSIS Controls whether public key authentication shall be performed first, if both password and public key authentications are required. 1 means that public key authentication must performed first, 0 means that the client can choose in which order to authenticate.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_AUTH_HOSTBASED_ALLOWED
|
|
{
|
|
NAME SSH Auth Hostbased Allowed
|
|
SYNOPSIS Controls whether hostbased authentication can be used. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter SSH_AUTH_HOSTBASED_REQUIRED
|
|
{
|
|
NAME SSH Auth Hostbased Required
|
|
SYNOPSIS Controls whether hostbased authentication must be performed before a client is considered logged in. 1 means on, 0 means off.
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_AUTH_MAX_FAIL
|
|
{
|
|
NAME SSH Auth Max Fail
|
|
SYNOPSIS Controls the maximum number of authentication attempts before a client is disconnected.
|
|
TYPE string
|
|
DEFAULT "3"
|
|
}
|
|
|
|
Parameter SSH_SFTP_START_DIR
|
|
{
|
|
NAME SSH SFTP Start Directory
|
|
SYNOPSIS The initial current working directory when logging in over sftp
|
|
TYPE string
|
|
DEFAULT "/ram"
|
|
}
|
|
|
|
Parameter IPSSH_GET_SFTP_FUNC_CB
|
|
{
|
|
NAME SSH get sftp function callbacks
|
|
SYNOPSIS This parameter sets the function callback that ipssh will call in order to get the file operation function pointer for a particular path
|
|
TYPE string
|
|
DEFAULT ipssh_get_sftp_func_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_SFTP_CHECK_ACCESS_CB
|
|
{
|
|
NAME sftp check access callback
|
|
SYNOPSIS This callback routine checks whether the user is authorized to perform a file operation. It is called whenever the user initiates a file operation.
|
|
TYPE string
|
|
DEFAULT ipssh_sftp_check_access_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_SHELL_CHECK_ACCESS_CB
|
|
{
|
|
NAME shell check access callback
|
|
SYNOPSIS This callback routine checks whether the user is authorized to access the shell. It is called whenever the user initiates a shell request.
|
|
TYPE string
|
|
DEFAULT ipssh_shell_check_access_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_VALIDATE_USERID_PW_CB
|
|
{
|
|
NAME validate user's login ID and password
|
|
SYNOPSIS This callback routine validates a user\'s login ID and password.
|
|
TYPE string
|
|
DEFAULT ipssh_validate_userid_pw_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_VALIDATE_PUBKEY_CB
|
|
{
|
|
NAME validate client's public key in SSH v2
|
|
SYNOPSIS This callback routine validates public keys used for client authentication in
|
|
* SSH v2 connections.
|
|
TYPE string
|
|
DEFAULT ipssh_validate_pubkey_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_VALIDATE_HOSTBASED_CB
|
|
{
|
|
NAME validate client's hostbased public key in SSH v2
|
|
SYNOPSIS This callback routine validates hostbased public keys used for client authentication in
|
|
* SSH v2 connections.
|
|
TYPE string
|
|
DEFAULT ipssh_validate_hostbased_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_VALIDATE_RSA_PUBKEY_V1_CB
|
|
{
|
|
NAME validate client's public key in SSH v1
|
|
SYNOPSIS This callback routine validates public RSA keys used for client authentication in SSH v1 connections.
|
|
TYPE string
|
|
DEFAULT ipssh_validate_rsa_pubkey_v1_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_AUTH_COMPLETE_CB
|
|
{
|
|
NAME authentication complete callback
|
|
SYNOPSIS This callback is called when authentication has been successfully completed.
|
|
TYPE string
|
|
DEFAULT ipssh_auth_complete_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_VALIDATE_SRV_PUBLIC_KEY_CB
|
|
{
|
|
NAME callback for validating the server's public key
|
|
SYNOPSIS This callback is called in order to validate the server's public key. It is only called for client connections, e.g. connections initiated from this system.
|
|
TYPE string
|
|
DEFAULT ipssh_validate_srv_public_key_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_LOAD_RSA_KEY_CB
|
|
{
|
|
NAME callback for loading the server's RSA key
|
|
SYNOPSIS This callback is called at daemon startup in order to load the server's RSA key
|
|
TYPE string
|
|
DEFAULT ipssh_load_rsa_key_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_LOAD_RSA_KEYEX_KEY_CB
|
|
{
|
|
NAME callback for loading the server's RSA key used in RSA key exchanges (RFC 4432)
|
|
SYNOPSIS This callback is called at daemon startup in order to load the server's RSA key
|
|
used in RSA key exchanges (RFC 4432)
|
|
TYPE string
|
|
DEFAULT ipssh_load_rsa_keyex_key_example_cb
|
|
}
|
|
|
|
Parameter IPSSH_LOAD_DSA_KEY_CB
|
|
{
|
|
NAME callback for loading the server's DSA key
|
|
SYNOPSIS This callback is called at daemon startup in order to load the server's DSA key
|
|
TYPE string
|
|
DEFAULT ipssh_load_dsa_key_example_cb
|
|
}
|
|
|
|
|
|
Parameter SSH_USE_DH_GR1_SHA1
|
|
{
|
|
NAME Diffie-Hellman group1 SHA1 key exchange
|
|
SYNOPSIS Controls whether Diffie-Hellman group1 SHA1 key exchange is enabled. 1 means on, 0 means off
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter SSH_USE_DH_GR14_SHA1
|
|
{
|
|
NAME Diffie-Hellman group14 SHA1 key exchange
|
|
SYNOPSIS Controls whether Diffie-Hellman group14 SHA1 key exchange is enabled. 1 means on, 0 means off
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
Parameter SSH_USE_DH_GEX_SHA1
|
|
{
|
|
NAME Diffie-Hellman Group exchange with SHA1
|
|
SYNOPSIS Controls whether Diffie-Hellman group key exchange with SHA1 is enabled. 1 means on, 0 means off
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
Parameter SSH_USE_DH_GEX_SHA256
|
|
{
|
|
NAME Diffie-Hellman Group exchange with SHA256
|
|
SYNOPSIS Controls whether Diffie-Hellman group key exchange with SHA256 is enabled. 1 means on, 0 means off
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
Parameter SSH_USE_RSA1024_SHA1
|
|
{
|
|
NAME RSA key exchange with SHA1
|
|
SYNOPSIS Controls whether RSA key exchange with SHA1 is enabled. Minimum RSA key size is 1024 bits. 1 means on, 0 means off
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
Parameter SSH_USE_RSA2048_SHA256
|
|
{
|
|
NAME RSA key exchange with SHA256
|
|
SYNOPSIS Controls whether RSA key exchange with SHA256 is enabled. Minimum RSA key size is 2048 bits. 1 means on, 0 means off
|
|
TYPE string
|
|
DEFAULT "0"
|
|
}
|
|
Parameter SSH_USE_DH_GEX_CLT_MIN
|
|
{
|
|
NAME Minimum group size for Diffie-Hellman group key exchange
|
|
SYNOPSIS Minimum group size for Diffie-Hellman group key exchange
|
|
TYPE string
|
|
DEFAULT "2048"
|
|
}
|
|
Parameter SSH_USE_DH_GEX_CLT_N
|
|
{
|
|
NAME Normal group size for Diffie-Hellman group key exchange
|
|
SYNOPSIS Normal group size for Diffie-Hellman group key exchange
|
|
TYPE string
|
|
DEFAULT "2048"
|
|
}
|
|
Parameter SSH_USE_DH_GEX_CLT_MAX
|
|
{
|
|
NAME Max group size for Diffie-Hellman group key exchange
|
|
SYNOPSIS Max group size for Diffie-Hellman group key exchange
|
|
TYPE string
|
|
DEFAULT "4096"
|
|
}
|
|
Parameter SSH_MODULI_FILE
|
|
{
|
|
NAME Path to the file with moduli definitions
|
|
SYNOPSIS Path to the file with moduli definitions. Used for Diffie-Hellman group key exchange
|
|
TYPE string
|
|
DEFAULT IPCOM_FILE_ROOT"moduli"
|
|
}
|
|
Parameter SSH_HOST_KEY_RSA
|
|
{
|
|
NAME RSA server host key
|
|
SYNOPSIS Controls whether RSA server host key is enabled. 1 means on, 0 means off
|
|
TYPE string
|
|
DEFAULT "1"
|
|
}
|
|
Parameter SSH_HOST_KEY_DSA
|
|
{
|
|
NAME DSA server host key
|
|
SYNOPSIS Controls whether DSA server host key is enabled. 1 means on, 0 means off
|
|
TYPE string
|
|
DEFAULT "1"
|
|
} |