From 5ecefabbafdec2f8868a941834b1e8e8b2d129e0 Mon Sep 17 00:00:00 2001 From: Jakub Jelen Date: Tue, 14 Jul 2020 09:52:06 +0200 Subject: [PATCH] Clarify functionality of moduli file --- .../pages/infrastructure-services/OpenSSH.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/system-administrators-guide/pages/infrastructure-services/OpenSSH.adoc b/modules/system-administrators-guide/pages/infrastructure-services/OpenSSH.adoc index e82945f..b70010a 100644 --- a/modules/system-administrators-guide/pages/infrastructure-services/OpenSSH.adoc +++ b/modules/system-administrators-guide/pages/infrastructure-services/OpenSSH.adoc @@ -140,7 +140,7 @@ System-wide SSH configuration information is stored in the `/etc/ssh/` directory [options="header"] |=== |File|Description -|`/etc/ssh/moduli`|Contains Diffie-Hellman groups used for the Diffie-Hellman key exchange which is critical for constructing a secure transport layer. When keys are exchanged at the beginning of an SSH session, a shared, secret value is created which cannot be determined by either party alone. This value is then used to provide host authentication. +|`/etc/ssh/moduli`|Contains Diffie-Hellman groups used for the "Diffie-Hellman group exchange" key exchange method, which is critical for constructing a secure transport layer. When keys are exchanged at the beginning of an SSH session, a shared, secret value is created which cannot be determined by either party alone. If the file is not available, fixed groups will be used. Other key exchange methods do not need this file. |`/etc/ssh/ssh_config`|The default SSH client configuration file. Note that it is overridden by `~/.ssh/config` if it exists. |`/etc/ssh/sshd_config`|The configuration file for the [command]#sshd# daemon. |`/etc/ssh/ssh_host_ecdsa_key`|The ECDSA private key used by the [command]#sshd# daemon.