Skip to content

fix: remove ssh server version#249

Merged
aymanbagabas merged 1 commit intomainfrom
version
Mar 8, 2024
Merged

fix: remove ssh server version#249
aymanbagabas merged 1 commit intomainfrom
version

Conversation

@aymanbagabas
Copy link
Member

Golang SSH will set a default version when this is empty, using "OpenSSH_7.6p1" is misleading and causes SSH clients to misidentify the server version.

Reference: https://pkg.go.dev/golang.org/x/crypto/ssh#:~:text=//%20%22SSH%2D2.0%2D%22.-,ServerVersion,-string%0A%0A%09//%20BannerCallback%2C%20if
Fixes: charmbracelet/soft-serve#485

Golang SSH will set a default version when this is empty, using
"OpenSSH_7.6p1" is misleading and causes SSH clients to misidentify the
server version.

Reference: https://pkg.go.dev/golang.org/x/crypto/ssh#:~:text=//%20%22SSH%2D2.0%2D%22.-,ServerVersion,-string%0A%0A%09//%20BannerCallback%2C%20if
Fixes: charmbracelet/soft-serve#485
@aymanbagabas aymanbagabas requested a review from caarlos0 as a code owner March 8, 2024 18:11
@aymanbagabas aymanbagabas merged commit 3d2054d into main Mar 8, 2024
@aymanbagabas aymanbagabas deleted the version branch March 8, 2024 18:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

align soft-serve ssh server [config] with ssh-audits recommendations

2 participants