[Bug 2501] VerifyHostKeyDNS & StrictHostKeyChecking

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Sep 14 15:29:55 AEST 2017


https://bugzilla.mindrot.org/show_bug.cgi?id=2501

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |---

--- Comment #13 from Darren Tucker <dtucker at zip.com.au> ---
commit aea59a0d9f120f2a87c7f494a0d9c51eaa79b8ba
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Sep 14 04:32:21 2017 +0000

    upstream commit

    Revert commitid: gJtIN6rRTS3CHy9b.

    -------------
    identify the case where SSHFP records are missing but other DNS RR
    types are present and display a more useful error message for this
    case; patch by Thordur Bjornsson; bz#2501; ok dtucker@
    -------------

    This caused unexpected failures when VerifyHostKeyDNS=yes, SSHFP
results
    are missing but the user already has the key in known_hosts

    Spotted by dtucker@

    Upstream-ID: 97e31742fddaf72046f6ffef091ec0d823299920

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list