search

dev-sec / ssh-baseline

DevSec SSH Baseline - InSpec Profile
https://dev-sec.io/baselines/ssh/
Apache License 2.0
283 stars 78 forks source link

simplify crypto library #209

Closed rndmh3ro closed 2 years ago

rndmh3ro commented 2 years ago

Signed-off-by: Sebastian Gumprich sebastian.gumprich@t-systems.com

rndmh3ro commented 2 years ago

Successfully tested here: https://github.com/dev-sec/ansible-collection-hardening/pull/589/checks

rndmh3ro commented 2 years ago

Successfully tested here: https://github.com/dev-sec/ansible-collection-hardening/pull/589/checks

nice, I like the amount of code we can save here. One small thing regarding the ssh_version function, we are using the ssh client binary but it may be, that a system only has sshd installed.

sshd sadly does not have an option to print its version (you could run sshd with an invalid option to get the version, but this also throws an error).