openstack-ansible-security/doc/source/developer-notes/V-38614.rst

The tasks in sshd.yml will ensure that SSH does not allow empty passwords.