[Bug 3980] New: Wish: "reset to default value" for "Match" configuration

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=3980

            Bug ID: 3980
           Summary: Wish: "reset to default value" for "Match"
                    configuration
           Product: Portable OpenSSH
           Version: 10.4p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: steffen at sdaoden.eu

Hello.
Situation:
- only want one sshd server instance (one config etc)
- only want mldsa44 by default
- but have clients which can only ed25519, some even only RSA.

Problem:
- cannot have HostKey specs in Match
- cannot adjust HostKeyAlgorithms in Match
- etc

Solution:
- offer three HostKey directives in global section
- add-in (until default, then needs adjustment) mldsa44 to
HostKeyAlgo..
- restrict PubKeyAcceptedAlgorithms to mldsa44 in global section
  (which should restrict to only that HostKey by default)
- and: use Match directives to add-in more algorithms to
  PubkeyAcceptedAlgorithms, effectively setting free the other
  HostKeys, selectively

Now what would be nice: if i can simply say

  Match Address Xy
    PubkeyAcceptedAlgorithms = 

to choose the default value of PubkeyAcceptedAlgorithms, no more no
less.
I need to write something in order to overwrite the global setting.
But what useful thing could i write?

-- 
You are receiving this mail because:
You are watching the assignee of the bug.