nixos/openssh: allow post-quantum KexAlgorithms introduced in v9.9 (#378875)

`mlkem768x25519-sha256` and the vendor-neutral `sntrup761x25519-sha512`
name are new in OpenSSH 9.9 <https://www.openssh.com/txt/release-9.9>

Co-authored-by: Mynacol <Mynacol@users.noreply.github.com>
This commit is contained in:
Solomon
2025-02-19 14:04:03 -07:00
committed by GitHub
parent aba57ad72a
commit 6cd88104d7

View File

@@ -415,6 +415,8 @@ in
KexAlgorithms = lib.mkOption {
type = lib.types.nullOr (lib.types.listOf lib.types.str);
default = [
"mlkem768x25519-sha256"
"sntrup761x25519-sha512"
"sntrup761x25519-sha512@openssh.com"
"curve25519-sha256"
"curve25519-sha256@libssh.org"