Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #37232 Use Enalean's SSHd crypto settings on CI node agents
    Actions
    Infos
    #37232
    Thomas Gerbet (tgerbet)
    2024-03-20 19:20
    2024-03-20 12:05
    38868
    Details
    Use Enalean's SSHd crypto settings on CI node agents

    We currently are using the default parameters which makes the Trilead API Jenkins plugin unhappy because of a potential issue with the Terrapin attack (even if the SSHd we use includes the "strict kex" countermeasure).

    Using the same settings than the one used internally by Enalean avoid the issue.

    Other
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2024-03-20
    Attachments
    Artifact links
    Empty
    Empty
    References
    Referencing request #37232

    Git commit

    tuleap/tools/jenkins-agent-image-builder

    chore: request #37232 Use Enalean's SSHd crypto settings on CI node agents fe17055421
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 12:24
    Adjusting KexAlgorithms so they can be supported by by Trilead plugins 56e9f67c8f
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 14:50
    Allow more KexAlgorithms 60e995b90e
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 15:02
    Adjust MACs used by SSHd 59b53314eb
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 15:28
    chore: Be more lax with KexAlgorithms 9e51cff932
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 16:14
    chore: Ban password auth on SSHd 2549e07fe7
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 16:15
    chore: Be even more lax with KexAlgorithms 16571d9c37
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 16:35
    chore: Only keep diffie-hellman-group-exchange-sha256 kex 889e984d4e
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 16:55
    Adjust SSHd ciphers 6ca6db4078
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 18:32
    Adjust SSHd ciphers master fd9e5a7bec
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 18:37

    Git Pull Request

    tuleap/tools/jenkins-agent-image-builder

    chore: request #37232 Use Enalean's SSHd crypto settings on CI node agents Merged
    User avatar Thomas Gerbet (tgerbet) , 2024-03-20 12:25
    Display settings

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2024-03-20 19:20

    Done (as much as the Trilead API/SSH plugins allow...)

    • Status changed from Under implementation to Closed
    • Close date set to 2024-03-20