Forge Home

Modules

Resources

PuppetEcosystemPuppet CommunityUpdates

ssh

Manage ssh
Project URLRSS FeedReport issues

25,404 downloads

165 latest version

4.6 quality score

We run a couple of automated
scans to help you access a
module's quality. Each module is
given a score based on how well
the author has formatted their
code and documentation and
modules are also checked for
malware using VirusTotal.

Please note, the information below
is for guidance only and neither of
these methods should be considered
an endorsement by Puppet.

Version information

  • 6.18.0 (latest)
  • 6.17.1
  • 6.16.1
  • 6.16.0
  • 6.14.0
  • 6.13.1
  • 6.13.0
  • 6.12.0
  • 6.11.2
  • 6.11.1
  • 6.11.0
  • 6.9.0
  • 6.8.1
  • 6.8.0
  • 6.7.1
  • 6.7.0
  • 6.6.0 (deleted)
  • 6.5.1
  • 6.4.4
  • 6.4.3
  • 6.4.2
  • 6.4.1
  • 6.3.0
  • 6.2.1
  • 6.2.0
  • 6.1.0
  • 4.1.13
  • 4.1.12
  • 4.1.11
released Sep 30th 2016
This version is compatible with:
  • ,

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'simp-ssh', '4.1.12'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add simp-ssh
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install simp-ssh --version 4.1.12

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.

Download
Tags: ssh, ssh-authorized-key, simp, cipher

Documentation

simp/ssh — version 4.1.12 Sep 30th 2016

License Build Status SIMP compatibility

This is a SIMP module

This module is a component of the System Integrity Management Platform, a compliance-management framework built on Puppet.

If you find any issues, they can be submitted to our JIRA.

Please read our Contribution Guide and visit our developer wiki.

Work in Progress

Please excuse us as we transition this code into the public domain.

ssh::server

Ciphers

By default, the sshd::server class will accept a wide range of ciphers.

At the time of 5.1.0, the default ciphers for ssh::server are:

There are also 'fallback' ciphers, which are required in order to communicate with FIPS-140-2 conformant systems. These are also included by default unless the parameter ssh::server::conf::enable_fallback_ciphers is set to false:

  • aes128-cbc
  • aes192-cbc
  • aes256-cbc

Examples

Default parameters
include 'sshd::server'

This will result in a server that accepts the following ciphers:

Disabling fallback ciphers
class{'ssh::config':
  enable_fallback_ciphers => false
}
include 'sshd::server'

This will result in a server that accepts the following ciphers:

ssh::client

The ciphers configured for the ssh client are set to only the strongest ciphers. In order to connect to a system that does not have these ciphers but uses the older ciphers you should use the command line option, ssh -c. See the man pages for further information.

Examples

include 'sshd::client'