[Bug 1213] ssh-keyscan exits in mid-way

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Oct 2 06:39:32 EST 2006


http://bugzilla.mindrot.org/show_bug.cgi?id=1213


paul at cypherpunks.ca changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |paul at cypherpunks.ca




------- Comment #1 from paul at cypherpunks.ca  2006-10-02 06:39 -------
I was going to open a new bug report, but I think I am reporting the
same bug as this one.

ssh-keyscan aborts when it encounters glue without the proper
authoritative data. eg:

hostname.domain.com IN NS hostname.domain.com
hostname.domain.com IN A 1.2.3.4

Where hostname.domain.com is itself not running a namserver.
It is correct in not processing this entry, as the glue is
non-authoritative data, and cannot be confirmed by the nameserver ot
the child zone.
However, ssh-keyscan should just skip this entry, not abort.

I noticed this when writing ftp://ftp.xelerance.com/sshfp/ which is a
python script that can use ssh-keyscan (or known_hosts files) to
generate SSHFP records.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the openssh-bugs mailing list