[Bug 3552] New: ssh_config option RevokedHostKeys doesn't do tilde expansion on the filename

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Sun Mar 26 00:41:51 AEDT 2023


            Bug ID: 3552
           Summary: ssh_config option RevokedHostKeys doesn't do tilde
                    expansion on the filename
           Product: Portable OpenSSH
           Version: 9.0p1
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: daniel at spatof.org

Thanks to GitHub's private key leak I got to use the RevokedHostKeys
setting in ssh_config, and I realized it doesn't do tilde expansion on
the filename.

Specifically, this doesn't work and gives a "No such file or directory"

  RevokedHostKeys ~/.ssh/revoked_host_keys

but this does work:

  RevokedHostKeys /Users/my_user/.ssh/revoked_host_keys

This was tested on OpenSSH 9.0p1 on macOS 13.2.1; I can't test on the
latest OpenSSH, but I did a quick search on the OpenSSH code on GitHub
and I think this bug is still present.

The IdentityFile option do tilde expansion:

The RevokedHostKeys option does not:

Slightly related, the ssh_config man page doesn't specify that the
plain text version of the RevokedHostKeys file can contain comments.

You are receiving this mail because:
You are watching the assignee of the bug.

More information about the openssh-bugs mailing list