tmeneau
63ad14efb1
Fix invalid require_in sshd_config for key states
Change the require_ins used by the key management states in the
config.sls to be conditional based on whether the sshd_config
is managed by the formula
Fixes #130
vor 6 Jahren
Raphaël Hertzog
6ccb9fc87d
Replace deprecated "user" attribute by "runas"
vor 6 Jahren
Andres Montalban
26f2fc8e97
[FIX] When key is present override generating by any way
vor 7 Jahren
Alexander Weidinger
7afea021c6
Fixed key generation
- generate before running check_mk on the sshd_config
- set permissions on private key
- cope with empty keys
vor 7 Jahren
Andres Montalban
c7a97ae72f
Create needed directory for UsePrivilegeSeparation option
vor 7 Jahren
Alexander Weidinger
c71f2ae4fa
minor fix: use keyFile in config.sls
vor 7 Jahren
Alexander Weidinger
162705c7ce
Test config before applying it
vor 7 Jahren
Alexander Weidinger
6b23b28f52
Opt-in to enforce RSA key length
vor 7 Jahren
ek9
038a51cdc8
manage sshd_config and ssh_config only if pillars are defined
vor 7 Jahren
Adam Mendlik
613bea2cac
Add variables for file owner and mode
vor 7 Jahren
Bogdan Radulescu
13cf374efe
Added configuration options for ssh_config
Made a small change to reflect the default sshd_config
vor 9 Jahren
elfixit
18ba94d0fc
add options to give a key size to generate_key
vor 9 Jahren
Niels Abspoel
2a68ccac1a
Add option to remove ssh_host_keys
vor 9 Jahren
Franz Pletz
5d0f69ad2c
Cleanups for host key pillar example
vor 10 Jahren
Franz Pletz
33f21a0976
Add support for ED25519 host keys
vor 10 Jahren
Alan Pearce
6fb57f40bc
Config: Add support for generating keys
vor 10 Jahren
Alan Pearce
73eaef4ea0
Config: Add support for ECDSA host keys
vor 10 Jahren
Alan Pearce
ce46343562
Config: Refactor host key provisioning into loop
vor 10 Jahren
Alan Pearce
2876a691b0
Remove reference to root group
By not specifying it, root user's group should be used.
vor 10 Jahren
Seth House
b44c26cd13
Moved the rsa/dsa key management to config.sls
vor 10 Jahren
Kenny Do
9f70270643
explicitly set the user, group, and mode to match the package's
sshd_config
vor 11 Jahren
Kenny Do
dc53d0c295
fixed the name of the service that the openssh config is watched by
vor 11 Jahren
Kenny Do
07771c0ebf
Split the sshd_config and banner components into sub-states
vor 11 Jahren