Diffusion FreeBSD src repository 83c6a5242c80

Change the default value of VerifyHostKeyDNS to "yes" if compiled with
83c6a5242c80
Actions

Tags

None

Referenced Files

None

Subscribers

None

Description

Change the default value of VerifyHostKeyDNS to "yes" if compiled with
LDNS. With that setting, OpenSSH will silently accept host keys that
match verified SSHFP records. If an SSHFP record exists but could not
be verified, OpenSSH will print a message and prompt the user as usual.

Approved by: re (blanket)

Details

Provenance

des	Authored on Sep 10 2013, 10:30 PM

Parents

rG9cfa8b3fee2f: Clean up the OpenSSH build. It is now possible to build most components

Branches

Unknown

Tags

Unknown

Reverted By

rGd54953d6abc9: ssh: default VerifyHostKeyDNS to no, following upstream
rG43fd77233cd4: ssh: default VerifyHostKeyDNS to no, following upstream
rG41ff5ea22cb9: ssh: default VerifyHostKeyDNS to no, following upstream
D38648: ssh: default VerifyHostKeyDNS to no, following upstream

Event Timeline

emaste added a reverting change: D38648: ssh: default VerifyHostKeyDNS to no, following upstream.Feb 17 2023, 1:35 AM

emaste added a reverting change: rG41ff5ea22cb9: ssh: default VerifyHostKeyDNS to no, following upstream.Mar 1 2023, 2:20 PM

emaste added a reverting change: rG43fd77233cd4: ssh: default VerifyHostKeyDNS to no, following upstream.Mar 2 2023, 3:10 AM

emaste added a reverting change: rGd54953d6abc9: ssh: default VerifyHostKeyDNS to no, following upstream.Mar 2 2023, 5:43 PM

Changes (3)

Path

Size

crypto/

openssh/

rG83c6a5242c80

crypto/openssh/readconf.c

Loading...

crypto/openssh/ssh_config

Loading...

crypto/openssh/ssh_config.5

Loading...