Weak kex are controlled by wrong variable ?

[gdelafond]

ansible-ssh-hardening/tasks/crypto.yml

Lines 79 to 92 in e6d79fa

	- name: set weak kex according to openssh-version if openssh >= 6.6
	set_fact:
	ssh_kex: '{{ ssh_kex_66_weak }}'
	when: sshd_version.stdout >= '6.6' and ssh_server_weak_hmac and not ssh_kex
	- name: set kex according to openssh-version if openssh >= 6.6
	set_fact:
	ssh_kex: '{{ ssh_kex_66_default }}'
	when: sshd_version.stdout >= '6.6' and not ssh_kex
	- name: set weak kex according to openssh-version
	set_fact:
	ssh_kex: '{{ ssh_kex_59_weak }}'
	when: sshd_version.stdout >= '5.9' and ssh_server_weak_hmac and not ssh_kex

I think there is a problem here: weak kex should be controlled by ssh_server_weak_kex and not ssh_server_weak_hmac.

[rndmh3ro]

Fixed by #153