freeipa/ipaclient/install
Christian Heimes 97a31e69e8 Use default ssh host key algorithms
ipa-client-install no longer overrides SSH client settings for
HostKeyAlgorithms. It's no longer necessary to configure
HostKeyAlgorithms. The setting was disabling modern algorithms and
enabled a weak algorithm that is blocked in FIPS code.

The ipa-client package removes IPA's custom HostKeyAlgorithm from
/etc/ssh/ssh_config during package update. Non-IPA settings are not
touched.

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1756432
Fixes: https://pagure.io/freeipa/issue/8082
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2019-11-12 12:26:49 +01:00
..
__init__.py ipa-client-install: move client install to module 2016-11-11 12:13:56 +01:00
automount.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
client.py Use default ssh host key algorithms 2019-11-12 12:26:49 +01:00
ipa_certupdate.py Use new LDAPClient constructors 2019-02-05 08:39:13 -05:00
ipa_client_automount.py ipa_client_automount.py: fix typo (idmap.conf => idmapd.conf) 2019-10-14 11:01:40 +02:00
ipa_client_install.py Drop list of return values to be ignored in AdminTool 2019-06-07 11:24:45 +02:00
ipa_client_samba.py ipa-client-samba: remove state on uninstall 2019-07-26 10:49:54 +02:00
ipachangeconf.py Move ipachangeconf from ipaclient.install to ipapython 2019-08-28 22:15:50 -04:00
ipadiscovery.py Make IPADiscovery available in PyPI packages 2019-03-01 11:44:27 +01:00
sssd.py ipaclient: Remove --no-sssd and --no-ac options 2018-08-13 12:23:53 +02:00
timeconf.py Moving prompt for NTP options to install_check 2019-05-22 18:20:22 +02:00