avoiding 'authenticity' prompt

Darren Tucker dtucker at zip.com.au
Wed Nov 10 18:39:28 EST 2004


Dan Kaminsky wrote:
> Heh.  *I* didn't know StrictHostKeyChecking had a "no" option.  I
> thought "no" was the default, not "ask".  When did we get trinary options?

Some time before OpenSSH was forked (September 1999), apparently.  This 
from the OpenBSD tree:

$ cvs up -r 1.1 readconf.c
$ cat readconf.c

     case oStrictHostKeyChecking:
[...]
       else if (strcmp(cp, "ask") == 0)
         value = 2;

$ cvs log readconf.c
[...]
revision 1.1
date: 1999/09/26 20:53:37;  author: deraadt;  state: Exp;

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.




More information about the openssh-unix-dev mailing list