[Bug 3577] CASignatureAlgorithms supports -cert algorithms when used alongside with other options

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed Jun 21 07:46:32 AEST 2023


https://bugzilla.mindrot.org/show_bug.cgi?id=3577

--- Comment #4 from xspielinbox+mindrot at protonmail.com ---
Thank you for the clarification and the patch!

The patch indeed fixes the configuration-file behavior. It doesn't fix
`ssh -Q CASignatureAlgorithms` still producing the wrong output,
however.

Also: You introduced a new variable ca_only that is true for
CASignatureAlgorithms and false for all others. Shouldn't it then
perhaps be named more something like no_ca, as CASignatureAlgorithms
does not accept only ca alogrithms, but rather the exact opposite or
what did I miss?

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list