[Bug 2685] New: Case sensitive hostname matching

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Mar 2 01:42:50 AEDT 2017


https://bugzilla.mindrot.org/show_bug.cgi?id=2685

            Bug ID: 2685
           Summary: Case sensitive hostname matching
           Product: Portable OpenSSH
           Version: 7.4p1
          Hardware: Other
                OS: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: pcerny at suse.cz

Created attachment 2951
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2951&action=edit
make host matching in ssh case insensitive

Currently ssh (and possibly sshd) match hostnames in a case sensitive
manner. While recognise there are reasons this can be desired
behaviour, the comments in code (and the generally accepted property of
hostnames being case-instensitive - RFC 4343) suggest otherwise. 

Comment for match_hostname() (in match.c) even mentions explicitly,
that the hostname is expected to be lowercased, which it has been not,
since the d56b44d2dfa093883a5c4e91be3f72d99946b170 +
eb6d870a0ea8661299bb2ea8f013d3ace04e2024 commit combo.

I have no clear position on what to do with originalhost matching,
though I would suggest handling it in the same way to prevent gotcha
(maybe by lowercasing the argument passed to match_host() and not
expecting the caller to do it), so the attached patch only handles
(possibly expanded) hostname matching.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list