summary refs log tree commit diff
path: root/nixos/doc/manual
diff options
context:
space:
mode:
authorPeter Simons <simons@cryp.to>2015-06-01 15:20:18 +0200
committerPeter Simons <simons@cryp.to>2015-06-01 15:20:18 +0200
commit789f20eba860b769d7153afab42a70fe50688185 (patch)
treedcc7e568c244fd711833d2393f7e006b5f2ae514 /nixos/doc/manual
parentd4412bf6c45ee5d4f9b00fed58c2ce15b783ce62 (diff)
downloadnixpkgs-789f20eba860b769d7153afab42a70fe50688185.tar
nixpkgs-789f20eba860b769d7153afab42a70fe50688185.tar.gz
nixpkgs-789f20eba860b769d7153afab42a70fe50688185.tar.bz2
nixpkgs-789f20eba860b769d7153afab42a70fe50688185.tar.lz
nixpkgs-789f20eba860b769d7153afab42a70fe50688185.tar.xz
nixpkgs-789f20eba860b769d7153afab42a70fe50688185.tar.zst
nixpkgs-789f20eba860b769d7153afab42a70fe50688185.zip
nixos release notes: document new services.openssh.moduliFile option
Diffstat (limited to 'nixos/doc/manual')
-rw-r--r--nixos/doc/manual/release-notes/rl-unstable.xml11
1 files changed, 11 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-unstable.xml b/nixos/doc/manual/release-notes/rl-unstable.xml
index a7ba1cb1ff5..cf67014a69d 100644
--- a/nixos/doc/manual/release-notes/rl-unstable.xml
+++ b/nixos/doc/manual/release-notes/rl-unstable.xml
@@ -21,6 +21,17 @@
         below, in the list of backwards-incompatible changes.
       </para>
     </listitem>
+
+    <listitem>
+      <para>
+        Users running an SSH server who worry about the quality of their
+        <literal>/etc/ssh/moduli</literal> file with respect to the <link
+        xlink:href="https://stribika.github.io/2015/01/04/secure-secure-shell.html">vulnerabilities
+        discovered in the Diffie-Hellman key exchange</link> can now replace OpenSSH's
+        default version with one they generated themselves using the new
+        <literal>services.openssh.moduliFile</literal> option.
+      </para>
+    </listitem>
   </itemizedlist>
 
 </para>