• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Issue System-wide crypto policies in Plesk and CentOS 8

themew

Regular Pleskian
I am trying to use an ed25519 ssh key on my CentOS 8 server. No problems uploading the key and using the key with the server, works great, but I when I try to change PasswordAuthentication, ChallengeResponseAuthentication and UsePAM to no I get the error: ExecStart=/usr/sbin/sshd -D $OPTIONS $CRYPTO_POLICY (code=exited, status=255).

According to RHEL, using the command
Code:
update-crypto-policies --show
shows the server is in DEFAULT mode.

They suggest changing the mode to: FUTURE How to customize crypto policies in RHEL 8.2

Policy mode breakdown (there are 4 modes) Chapter 3. Using system-wide cryptographic policies Red Hat Enterprise Linux 8 | Red Hat Customer Portal

I can still log into my Plesk server using the ed25519 key, but can't turn passwords off.

Before I do any damage to my server or lock myself out, has anyone experienced this and if so, how did you remedy it.

I really don't want to use an rsa key since the newer and more secure ed25519 ssh key does work.
 
Last edited:
Back
Top