Recent change in readconf.c incorrectly prioritises DSA keys - openssh-portable only

Andrew Fyfe andrew at fyfe.gb.net
Sun Feb 20 06:07:59 AEDT 2022


Hi,

There was a recent change on the 4th Feb to readconf.c which moved DSA keys to the end 
of the default list of public keys as they are deprecated. The change was made correctly 
in openssh[1][2], however in openssh-portable[3] the RSA key was incorrectly moved to 
the bottom of the list not the DSA key.

Also the openssh-portable commit references OpenBSD-Commit-ID 
7e5d575cf4971d4e2de92e0b6d6efaba53598bf0. What does this refer to? I couldn't find a 
corresponding commit in either the openbsd or openssh-portable git repositories.

[1] 
https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/readconf.c.diff?r1=1.364&r2=1.365
[2] https://github.com/openbsd/src/commit/4344e82205068a1a91493f87bd6bd7f2fa92b25e
[3] 
https://github.com/openssh/openssh-portable/commit/ad16a84e64a8cf1c69c63de3fb9008320a37009c

Regards
Andrew

-- 
Andrew Fyfe
andrew at fyfe.gb.net


More information about the openssh-unix-dev mailing list