strongswan/testing/hosts/default/etc/ssh/sshd_config

Port 22
Protocol 2
Ciphers aes128-gcm@openssh.com
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
PermitRootLogin yes
StrictModes no
PubkeyAuthentication no
PermitEmptyPasswords yes
PrintMotd no
PrintLastLog no
UsePAM no
AcceptEnv LANG LC_*
AcceptEnv LEAK_DETECTIVE_LOG
Use key(and password-)less SSH authentication 2012-12-05 17:53:20 +00:00			`Port 22`
			`Protocol 2`
testing: Use AES-GCM for SSH connections RC4, which was previously used for performance reasons, is not supported anymore with newer versions of SSH (stretch still supports it, but it requires explicit configuration on the guests when they act as clients too - the version in Ubuntu 18.04 apparently doesn't support it anymore at all). AES-GCM should actually be faster (at least for larger amounts of data and in particular with hardware acceleration). 2018-09-18 14:49:49 +00:00			`Ciphers aes128-gcm@openssh.com`
Use key(and password-)less SSH authentication 2012-12-05 17:53:20 +00:00			`HostKey /etc/ssh/ssh_host_rsa_key`
			`HostKey /etc/ssh/ssh_host_ecdsa_key`
			`PermitRootLogin yes`
			`StrictModes no`
			`PubkeyAuthentication no`
			`PermitEmptyPasswords yes`
			`PrintMotd no`
			`PrintLastLog no`
			`UsePAM no`
testing: Accept LANG and LC_* env variables via SSH on guests The client config already includes SendEnv for them. Without that these variables currently default to POSIX. 2019-11-14 15:10:17 +00:00			`AcceptEnv LANG LC_*`
testing: Log leaks and fail tests if any are detected 2016-09-13 09:50:09 +00:00			`AcceptEnv LEAK_DETECTIVE_LOG`