summaryrefslogtreecommitdiffstats
path: root/src/etc/sshd
diff options
context:
space:
mode:
authorJose Luis Duran <jlduran@users.noreply.github.com>2016-04-15 22:36:33 -0300
committerJose Luis Duran <jlduran@users.noreply.github.com>2016-04-16 03:36:18 -0300
commit971257cbdf687c79943237b6c2f5e37c596318af (patch)
treea9f93cc735ff54472694e0d1c80095049fbd07ba /src/etc/sshd
parentdca77360ffe868327d82c20834eceb1079d5823b (diff)
downloadpfsense-971257cbdf687c79943237b6c2f5e37c596318af.zip
pfsense-971257cbdf687c79943237b6c2f5e37c596318af.tar.gz
Force 4096 RSA keys
Add option `-b 4096` to force the keys to 4096-bit. This parameter is ignored for Ed25519 keys.
Diffstat (limited to 'src/etc/sshd')
-rwxr-xr-xsrc/etc/sshd2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/etc/sshd b/src/etc/sshd
index cd5c647..eebd601 100755
--- a/src/etc/sshd
+++ b/src/etc/sshd
@@ -178,7 +178,7 @@
mark_subsystem_dirty('sshdkeys');
echo " Generating Keys:\n";
foreach ($generate_keys as $key) {
- $_gb = exec("/usr/bin/nice -n20 /usr/bin/ssh-keygen -t {$key['type']} -N '' -f {$sshConfigDir}/ssh_host_{$key['suffix']}key");
+ $_gb = exec("/usr/bin/nice -n20 /usr/bin/ssh-keygen -t {$key['type']} -b 4096 -N '' -f {$sshConfigDir}/ssh_host_{$key['suffix']}key");
}
clear_subsystem_dirty('sshdkeys');
file_notice("SSH", "{$g['product_name']} has completed creating your SSH keys. SSH is now started.", "SSH Startup", "");
OpenPOWER on IntegriCloud