Mastering Linux Security and Hardening - Second Edition

Hands-on lab – setting encryption policies on CentOS 8

Start with a fresh CentOS 8 VM and the scanner VM that you've been using. Now, follow these steps:

1. On a CentOS 8 VM, use the update-crypto-policies utility to verify that it's running in DEFAULT mode:

sudo update-crypto-policies --show

2. Scan the CentOS 8 VM in its DEFAULT configuration and save the output to a file:

sudo ssh_scan -t 192.168.0.161 -o ssh_scan-161.json

3. On the CentOS 8 VM, set the system-wide crypto policy to FUTURE and reboot the VM:

sudo update-crypto-policies --set FUTUREsudo shutdown -r now

4. On the scanner VM, open the ~/.ssh/known_hosts file in your text editor. Delete the entry that was previously made for the CentOS 8 VM and save the file. (We have to do this ...