Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type SSHCryptoSettings ¶
type SSHCryptoSettings struct {
KeyExchanges []string
Ciphers []string
MACs []string
HostKeyAlgorithms []string
}
SSHCryptoSettings contains the SSH crypto algorithm configuration
func GetSSHCryptoSettings ¶
func GetSSHCryptoSettings(cfg *config.Config) SSHCryptoSettings
GetSSHCryptoSettings returns SSH crypto algorithm configuration based on FIPS mode detection and configuration overrides.
The algorithm selection follows this precedence:
- Explicit SSH configuration in cfg.CryptoPolicy.SSH (if provided)
- FIPS-compliant algorithms if FIPS mode is detected or forced
- Empty (golang.org/x/crypto/ssh will use defaults)
This ensures that SSH connections use FIPS-approved algorithms when required while maintaining backward compatibility in non-FIPS environments.
func (*SSHCryptoSettings) ApplyCryptoSettingsToClientConfig ¶
func (s *SSHCryptoSettings) ApplyCryptoSettingsToClientConfig(cfg *ssh.ClientConfig)
ApplyCryptoSettingsToClientConfig applies crypto settings to an ssh.ClientConfig
Source Files
Click to show internal directories.
Click to hide internal directories.