From df2573a650ae3b81ae957a6d7c7430ddaba25d25 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Sat, 23 Mar 2024 18:28:23 +0000
Subject: [PATCH] sshd: Fix crypto configs for el8 systems

---
 roles/sshd/tasks/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/sshd/tasks/main.yml b/roles/sshd/tasks/main.yml
index ff28d65..a90c594 100644
--- a/roles/sshd/tasks/main.yml
+++ b/roles/sshd/tasks/main.yml
@@ -28,8 +28,8 @@
     line: "CRYPTO_POLICY="
   notify: Restart sshd
   when:
-    - ansible_distribution == "CentOS"
-    - ansible_distribution_version is version_compare("8", ">=")
+    - ansible_distribution == "Rocky"
+    - ansible_distribution_version | int == 8
 
 - name: Tighten ssh kex algorithm
   ansible.builtin.lineinfile: