diff --git a/templates/sshd_config-RedHat-8.j2 b/templates/sshd_config-RedHat-8.j2 index 638e94d..2ea4c4a 100644 --- a/templates/sshd_config-RedHat-8.j2 +++ b/templates/sshd_config-RedHat-8.j2 @@ -33,14 +33,11 @@ Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh. MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com #RekeyLimit default none -# System-wide Crypto policy: # This system is following system-wide crypto policy. The changes to -# Ciphers, MACs, KexAlgoritms and GSSAPIKexAlgorithsm will not have any -# effect here. They will be overridden by command-line options passed on -# the server start up. -# To opt out, uncomment a line with redefinition of CRYPTO_POLICY= -# variable in /etc/sysconfig/sshd to overwrite the policy. -# For more information, see manual page for update-crypto-policies(8). +# crypto properties (Ciphers, MACs, ...) will not have any effect here. +# They will be overridden by command-line options passed to the server +# on command line. +# Please, check manual pages for update-crypto-policies(8) and sshd_config(5). # Logging #SyslogFacility AUTH