Merge pull request #1158 from opencrvs/oni-on1003-patch-1

Fix unsupported unsupported KEX algorithm

Author: adskyiproger

infrastructure/server-setup/files/sshd_audit_hardening.24.04.conf

@@ -1,11 +1,11 @@
 # Source: https://www.ssh-audit.com/hardening_guides.html#ubuntu_24_04_lts
 # Restrict key exchange, cipher, and MAC algorithms, as per sshaudit.com hardening guide.
-KexAlgorithms [email protected],gss-curve25519-sha256-,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha256,gss-group16-sha512-,diffie-hellman-group16-sha512
+KexAlgorithms [email protected],curve25519-sha256,[email protected],diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512
 Ciphers [email protected],[email protected],aes256-ctr,aes192-ctr,[email protected],aes128-ctr
 MACs [email protected],[email protected],[email protected]
 RequiredRSASize 3072
 HostKeyAlgorithms [email protected],[email protected],[email protected],[email protected],[email protected],ssh-ed25519,rsa-sha2-512,rsa-sha2-256
 CASignatureAlgorithms [email protected],ssh-ed25519,rsa-sha2-512,rsa-sha2-256
-GSSAPIKexAlgorithms gss-curve25519-sha256-,gss-group16-sha512-
+#GSSAPIKexAlgorithms gss-curve25519-sha256-,gss-group16-sha512-
 HostbasedAcceptedAlgorithms [email protected],[email protected],[email protected],[email protected],[email protected],ssh-ed25519,rsa-sha2-512,rsa-sha2-256
-PubkeyAcceptedAlgorithms [email protected],[email protected],[email protected],[email protected],[email protected],ssh-ed25519,rsa-sha2-512,rsa-sha2-256
+PubkeyAcceptedAlgorithms [email protected],[email protected],[email protected],[email protected],[email protected],ssh-ed25519,rsa-sha2-512,rsa-sha2-256