openssh-5.5p1

[Iain Morgan]

On Tue, Mar 16, 2010 at 14:04:26 -0500, Damien Miller wrote:
> Hi,                                                                             
>                                                                                 
> We will probably do an openssh-5.5p1 release soon, mainly for the               
> sshd_config:AuthorizedKeysFile bug, but containing a few other small            
> patches too. If you have any portability fixes that need to go in then          
> please send them through at once.                                               
>                                                                                 
> -d                               
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

Hi Damien,

One minor issue that I just spotted with the -L option with ssh-keygen
is that it can yield a misleading error message if the cert is not
readable due to filesystem permissions.

$ ls -l /etc/ssh/ssh_host_rsa_key-cert.pub
-rw------- 1 root root 1151 Mar 23 13:36
/etc/ssh/ssh_host_rsa_key-cert.pub
$ ssh-keygen -Lf /etc/ssh/ssh_host_rsa_key-cert.pub
/etc/ssh/ssh_host_rsa_key-cert.pub is not a public key
$ 

(This was with the 5.4p1 release, but I assume it also holds for recent
snapshots.)

-- 
Iain Morgan