3
0
Fork 0
forked from mirrors/nixpkgs
nixpkgs/nixos/modules/services
Peter Simons 86d299bc6e nixos: add config.services.openssh.moduliFile option so that users can replace the default file from OpenSSH
The man page for ssh-keygen(1) has a section "MODULI GENERATION" that describes
how to generate your own moduli file. The following script might also be helpful:

 | #! /usr/bin/env bash
 |
 | moduliFiles=()
 |
 | generateModuli()
 | {
 |   ssh-keygen -G "moduli-$1.candidates" -b "$1"
 |   ssh-keygen -T "moduli-$1" -f "moduli-$1.candidates"
 |   rm "moduli-$1.candidates"
 | }
 |
 | for (( i=0 ; i <= 16 ; ++i )); do
 |   let bitSize="2048 + i * 128"
 |   generateModuli "$bitSize" &
 |   moduliFiles+=( "moduli-$bitSize" )
 | done
 | wait
 |
 | echo >moduli "# Time Type Tests Tries Size Generator Modulus"
 | cat >>moduli "${moduliFiles[@]}"
 | rm "${moduliFiles[@]}"

Note that generating moduli takes a long time, i.e. several hours on a fast
machine!

This patch resolves https://github.com/NixOS/nixpkgs/pull/5870.
2015-05-22 16:28:45 +02:00
..
amqp nixos/rabbitmq: fix module 2015-01-26 02:09:04 +01:00
audio nixos: add actkbd module and sound.enableMediaKeys option 2015-04-20 17:11:19 +00:00
backup postgresql-backup: cleanup 2015-05-19 18:35:22 +03:00
cluster nixos/kubernetes: fix module 2015-04-25 14:18:25 +02:00
computing slurm: impl basic configuration 2015-03-07 00:26:57 +03:00
continuous-integration/jenkins Merge recent master into staging 2014-09-13 21:48:29 +02:00
databases mysql: /run/mysql now 0755 (instead 0700) 2015-05-07 01:51:05 +02:00
desktops GNOME 3.16.1, closes #7357 2015-04-25 12:02:33 +02:00
games allow changing minecraft data dir + allow opening firewall 2015-04-07 14:10:13 +00:00
hardware Added BRLTTY package 2015-04-29 23:02:09 +02:00
logging nixos/fluentd: add support for config reload 2015-04-25 14:21:27 +02:00
mail postfix service: description enhancement 2015-05-06 21:53:39 +02:00
misc Merge pull request #7434 from Forkk/plex-media-server 2015-05-11 14:48:30 +03:00
monitoring Merge pull request #7181 from jagajaga/teamviewer 2015-04-06 14:13:07 +02:00
network-filesystems nixos.samba: update required mounts 2015-04-16 20:18:03 +03:00
networking nixos: add config.services.openssh.moduliFile option so that users can replace the default file from OpenSSH 2015-05-22 16:28:45 +02:00
printing Revert "cups: Rename "browsing" config option to "advertise"" 2015-05-10 20:47:50 +02:00
scheduling Merge pull request #6452 from rushmorem/update-chronos-port 2015-02-19 14:13:00 +01:00
search java: More default cleanups 2015-01-07 14:55:41 -08:00
security Add hologram service 2015-04-23 14:30:12 -04:00
system Ensure that nscd, sshd are created as system users 2015-05-13 16:23:36 +02:00
torrent Simplify (and fix) settings for transmission module. 2015-02-26 22:21:27 +00:00
ttys agetty: Add autologinUser config option 2015-04-14 10:45:28 +03:00
web-servers Merge pull request #7605 from ip1981/wiki 2015-04-28 19:00:27 +03:00
x11 nixos/lightdm: Some fixups 2015-05-20 18:32:12 -07:00