[SSHD-1100] Update embedded moduli file

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.1
• Fix Version/s: 2.6.0
• Flags: Important
• Assignee: Lyor Goldstein
• Reporter: Lyor Goldstein
• Created: 02/Nov/20 16:26
• Updated: 12/Nov/20 09:06
• Resolved: 12/Nov/20 09:06

Description

In view of https://security.stackexchange.com/questions/41941/consequences-of-tampered-etc-ssh-moduli and the fact that our current built-in moduli are from 2014 (according to their timestamp) perhaps we should generate some new ones...

See if can also provide an external property indicating which file to load (perhaps /etc/sshd/moduli or similar

Issue Links

• relates to: SSHD-320 The moduli file is embedded in the sshd-core jar and is not externalized at the moment
• links to: Is it considered worth it to replace OpenSSH's moduli file?
• links to: Moduli generation
• links to: moduli(5) — Linux manual page
• links to: Ubuntu 20.04 ssh-keygen unknown option -G unable to generate Diffie-Hellman parameters