Logging of key fingerprint / comment with v3.4p1

Thomas Binder binder at arago.de
Mon Aug 12 23:00:31 EST 2002


Hi!

On Mon, Aug 12, 2002 at 12:47:20PM +0200, Markus Friedl wrote:
> > --- openssh-3.4p1.orig/auth-rsa.c	Tue Jun 11 17:47:42 2002
> > +++ openssh-3.4p1/auth-rsa.c	Tue Jul  2 12:43:58 2002
> > [...]
> 
> the user is not authenticated at this poit.

Thanks for the hint, but the patch was originally created long
before revision 1.42 of auth-rsa.c, i.e. at a time where the user
/was/ authenticated at that point.

Besides, I just took a look at auth-rsa.c, and judging by the
code, it should definitely log "Found matching key", but it
doesn't.

This seems to be related to privilege separation, because as soon
as I turn it off in sshd_config, the fingerprints of RSA1 keys are
logged.


Ciao

Thomas



More information about the openssh-unix-dev mailing list