[Bug 393] 'known_hosts' file should be indexed by IP:PORT, not just IP

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed Sep 11 08:09:34 EST 2002


http://bugzilla.mindrot.org/show_bug.cgi?id=393





------- Additional Comments From markus at openbsd.org  2002-09-11 08:09 -------
HostKeyAlias does not require more work than an up-to-date known hosts file.

If you use port-forwarding to the 'real' ssh server, then
the entries in the known hosts file should identify the 'real'
ssh server, not just a random port on a gateway host, e.g. if
i want to connect to cvs.openssh.com via a gateway host, i use

Host cvs2
	Hostname gate
	Port 2222
	HostKeyAlias cvs.openssh.com

so 'ssh -v cvs2' will look up the correct hostkey under a
a name that refers to the 'real' server, and not to some
random gate:2222 name, that has nothing to do with
the server we connect to.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the openssh-unix-dev mailing list