[Bug 3335] New: sshd_config docs for CASignatureAlgorithms don't mention the '+' argument

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Jul 29 01:18:18 AEST 2021


https://bugzilla.mindrot.org/show_bug.cgi?id=3335

            Bug ID: 3335
           Summary: sshd_config docs for CASignatureAlgorithms don't
                    mention the '+' argument
           Product: Portable OpenSSH
           Version: 8.2p1
          Hardware: 68k
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: wgoulet at gmail.com

Hi, 

The CASignatureAlgorithms config line in sshd_config acts the same as
the Ciphers and HostSignatureAlgorithms in that you can add additional
algorithms to the list by prepending the algorithm name with a '+'. But
the documentation does not make this clear.

Suggest adding additional description text like the following:

If the specified list begins with a ‘+’ character, then the specified
algorithms will be appended
             to the default set instead of replacing them.  If the
specified list begins with a ‘-’ character, then the specified
algorithms (including wildcards) will be removed from
             the default set instead of replacing them.  If the
specified list begins with a ‘^’ character, then the specified
algorithms will be placed at the head of the default set.

Thanks,
Walter

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list