Solved ssh generation

[fred974]

Hi,

I haven't generated ssh key for a long time and I was wondering if anyone could tell me what syntax to use for optimum security in FreeBSD 10.2.
In the past I used:
ssh-keygen -b 4096 -f ~/.ssh/id_rsa4096_test -C fred@freebsd_test -o -a 500

 

[shepherdAZ]

https://stribika.github.io/2015/01/04/secure-secure-shell.html

 

[fred974]

Thank you for the link above
I had made a few adjustments to my /ssh/sshd_config file.
Just a quick question... When securing ssh on the server, do I need to do anything with /ssh/ssh_config?
Do I only need to add setting in there is I am going to ssh to other server from it?

 

[shepherdAZ]

In my ssh_config on all servers and workstations I have the following at the top of the file:

Host *
[INDENT]IdentitiesOnly yes
UseRoaming no[/INDENT]

I also have a specification for KexAlgorithms, MACs, and ciphers - you will need to set this according to your environment and the types of systems you are connecting to.

 

[SirDice]

Just a quick question... When securing ssh on the server, do I need to do anything with /ssh/ssh_config?

The /etc/ssh/ssh_config configuration is for ssh(1), /etc/ssh/sshd_config is the configuration for sshd(8). Notice the difference? One is to configure the client, i.e. ssh(1). The other the daemon, i.e. sshd(8).