[Bug 1777] New: KnownHostsCommand

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Jun 10 00:55:43 EST 2010


https://bugzilla.mindrot.org/show_bug.cgi?id=1777

           Summary: KnownHostsCommand
           Product: Portable OpenSSH
           Version: 5.5p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ssh
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: dkg at fifthhorseman.net


A useful feature to have for ssh would be KnownHostsCommand, by analogy
with KnownHostsFile and ProxyCommand.

One possible implementation: if set, KnownHostsCommand would be invoked
as a subprocess immediately after receipt of the host's key, with the
host name as argv[1], and the public key itself (in some canonicalized
form) on stdin.

The parent ssh process would wait() on this subprocess. The subprocess
returns 0 (accept, continue), or non-zero (abort connection),
optionally producing debugging information on stderr.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list