@@ -23,7 +23,7 @@ def ssh_version
23
23
inspec . command ( 'ssh -V 2>&1 | cut -f1 -d" " | cut -f2 -d"_"' ) . stdout . to_f
24
24
end
25
25
26
- def valid_ciphers # rubocop:disable Metrics/CyclomaticComplexity, Metrics/MethodLength
26
+ def valid_ciphers # rubocop:disable Metrics/CyclomaticComplexity
27
27
# define a set of default ciphers
28
28
ciphers53 = 'aes256-ctr,aes192-ctr,aes128-ctr'
29
29
@@ -32,12 +32,7 @@ def valid_ciphers # rubocop:disable Metrics/CyclomaticComplexity, Metrics/Method
32
32
# adjust ciphers based on OS + release
33
33
case inspec . os [ :name ]
34
34
when 'ubuntu'
35
- case inspec . os [ :release ]
36
- when '12.04'
37
- ciphers = ciphers53
38
- when '14.04' , '15.10' , '16.04' , '18.04'
39
- ciphers = ciphers66
40
- end
35
+ ciphers = ciphers66 if inspec . os [ :release ] [ 0 , 2 ] > '12'
41
36
when 'debian'
42
37
case inspec . os [ :release ]
43
38
when /^6\. / , /^7\. /
@@ -73,7 +68,7 @@ def valid_ciphers # rubocop:disable Metrics/CyclomaticComplexity, Metrics/Method
73
68
ciphers
74
69
end
75
70
76
- def valid_kexs # rubocop:disable Metrics/CyclomaticComplexity, Metrics/MethodLength
71
+ def valid_kexs # rubocop:disable Metrics/CyclomaticComplexity
77
72
# define a set of default KEXs
78
73
kex66 = '[email protected] ,diffie-hellman-group-exchange-sha256'
79
74
kex59 = 'diffie-hellman-group-exchange-sha256'
@@ -82,12 +77,7 @@ def valid_kexs # rubocop:disable Metrics/CyclomaticComplexity, Metrics/MethodLen
82
77
# adjust KEXs based on OS + release
83
78
case inspec . os [ :name ]
84
79
when 'ubuntu'
85
- case inspec . os [ :release ]
86
- when '12.04'
87
- kex = kex59
88
- when '14.04' , '15.10' , '16.04' , '18.04'
89
- kex = kex66
90
- end
80
+ kex = kex66 if inspec . os [ :release ] [ 0 , 2 ] > '12'
91
81
when 'debian'
92
82
case inspec . os [ :release ]
93
83
when /^6\. /
@@ -136,12 +126,7 @@ def valid_macs # rubocop:disable Metrics/CyclomaticComplexity, Metrics/MethodLen
136
126
# adjust MACs based on OS + release
137
127
case inspec . os [ :name ]
138
128
when 'ubuntu'
139
- case inspec . os [ :release ]
140
- when '12.04'
141
- macs = macs59
142
- when '14.04' , '15.10' , '16.04' , '18.04'
143
- macs = macs66
144
- end
129
+ macs = macs66 if inspec . os [ :release ] [ 0 , 2 ] > '12'
145
130
when 'debian'
146
131
case inspec . os [ :release ]
147
132
when /^6\. /
@@ -225,20 +210,15 @@ def valid_privseparation # rubocop:disable Metrics/CyclomaticComplexity
225
210
end
226
211
227
212
# return a list of valid algoriths for a current platform
228
- def valid_algorithms # rubocop:disable Metrics/CyclomaticComplexity, Metrics/MethodLength
213
+ def valid_algorithms # rubocop:disable Metrics/CyclomaticComplexity
229
214
alg53 = %w[ rsa ]
230
215
alg60 = %w[ rsa ecdsa ]
231
216
alg66 = %w[ rsa ecdsa ed25519 ]
232
217
alg = alg66 # probably its a best suitable set for everything unknown
233
218
234
219
case inspec . os [ :name ]
235
220
when 'ubuntu'
236
- case inspec . os [ :release ]
237
- when '12.04'
238
- alg = alg53
239
- when '14.04' , '15.10' , '16.04' , '18.04'
240
- alg = alg66
241
- end
221
+ alg = alg53 if inspec . os [ :release ] [ 0 , 2 ] < '14'
242
222
when 'debian'
243
223
case inspec . os [ :release ]
244
224
when /^7\. /
0 commit comments