tmeneau
63ad14efb1
Fix invalid require_in sshd_config for key states
Change the require_ins used by the key management states in the
config.sls to be conditional based on whether the sshd_config
is managed by the formula
Fixes #130
pirms 6 gadiem
Raphaël Hertzog
6ccb9fc87d
Replace deprecated "user" attribute by "runas"
pirms 6 gadiem
Andres Montalban
26f2fc8e97
[FIX] When key is present override generating by any way
pirms 7 gadiem
Alexander Weidinger
7afea021c6
Fixed key generation
- generate before running check_mk on the sshd_config
- set permissions on private key
- cope with empty keys
pirms 7 gadiem
Andres Montalban
c7a97ae72f
Create needed directory for UsePrivilegeSeparation option
pirms 7 gadiem
Alexander Weidinger
c71f2ae4fa
minor fix: use keyFile in config.sls
pirms 7 gadiem
Alexander Weidinger
162705c7ce
Test config before applying it
pirms 7 gadiem
Alexander Weidinger
6b23b28f52
Opt-in to enforce RSA key length
pirms 7 gadiem
ek9
038a51cdc8
manage sshd_config and ssh_config only if pillars are defined
pirms 7 gadiem
Adam Mendlik
613bea2cac
Add variables for file owner and mode
pirms 7 gadiem
Bogdan Radulescu
13cf374efe
Added configuration options for ssh_config
Made a small change to reflect the default sshd_config
pirms 9 gadiem
elfixit
18ba94d0fc
add options to give a key size to generate_key
pirms 9 gadiem
Niels Abspoel
2a68ccac1a
Add option to remove ssh_host_keys
pirms 9 gadiem
Franz Pletz
5d0f69ad2c
Cleanups for host key pillar example
pirms 10 gadiem
Franz Pletz
33f21a0976
Add support for ED25519 host keys
pirms 10 gadiem
Alan Pearce
6fb57f40bc
Config: Add support for generating keys
pirms 10 gadiem
Alan Pearce
73eaef4ea0
Config: Add support for ECDSA host keys
pirms 10 gadiem
Alan Pearce
ce46343562
Config: Refactor host key provisioning into loop
pirms 10 gadiem
Alan Pearce
2876a691b0
Remove reference to root group
By not specifying it, root user's group should be used.
pirms 10 gadiem
Seth House
b44c26cd13
Moved the rsa/dsa key management to config.sls
pirms 10 gadiem
Kenny Do
9f70270643
explicitly set the user, group, and mode to match the package's
sshd_config
pirms 11 gadiem
Kenny Do
dc53d0c295
fixed the name of the service that the openssh config is watched by
pirms 11 gadiem
Kenny Do
07771c0ebf
Split the sshd_config and banner components into sub-states
pirms 11 gadiem