Please help test recent changes
Damien Miller
djm at mindrot.org
Fri Jan 7 09:52:09 AEDT 2022
Hi,
We've landed some fairly significant changes in OpenSSH recently and
would appreciate your help in testing them. The biggest of the changes
are:
1. Conversion of the ssh and sshd mainloop from select() to poll()
This should be entirely invisible to users, so any behaviour change
is a bug. If you see something and want to help debug it further,
uncomment the DEBUG_CHANNEL_POLL #define in channels.c for helps of
extra debug logging.
2. Restricted agent keys.
This is a large set of changes to add destination- and path-restricted
keys to ssh-agent. A full writeup is at on the website at
https://www.openssh.com/agent-restrict.html - I'm interested to hear
feedback on how this works in practice, UI and things that could be
improved (as well as bug reports).
3. Running down the remaining RSA/SHA2 corner-cases
There has been a fair bit of work to identify and fix the remaining
cases where various things behaved badly wrt RSA signature algorithms.
Recent fixes include hostbased authentication and UpdateHostkeys.
Again, [almost] any change in visible behaviour here is a bug.
All of these changes are in git and will be in tomorrow's snapshot
(20220108).
Thanks!
Damien Miller
More information about the openssh-unix-dev
mailing list