-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, Dag-Erling, Here is a patch from OpenBSD which makes ssh-keyscan to fetch ECDSA keys by default, to match the default hostkey algorithm. Cheers, - -- Xin LI <delphij@delphij.net> https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iQEcBAEBCAAGBQJP6KB6AAoJEG80Jeu8UPuz3ksIAJnPmcFBDE0Uc7wW7H9b2ug4 coILQXSBXlXZqHuGd6HqI7ghz3fthe8oKxvNkjhEcrngLGWi3UXIEEVHnJAtHJaT tzUwxLPK6bn2ZiIxTxjKEEmXhbyhlggSRDCLMXKsrrJYltL5VX6pM/jWACeBnegm xh38KZ7yh8AIAaFyZVGZcIbWd9Yw6DXc7gTt4ifVQ537TdFnMlowuqxT/g27tZaq /fbEozwCTXCpBNqkhLyROF7pNqEHvdKbN6BeLf//7gnOuof2h5VDElf9Lacnek92 kRPSw/gboPo6UEEZ1OdGjecUnBlePYxpxIs6np4hDWaniR4VNq+DczIcmTDSnO4=OzCc -----END PGP SIGNATURE----- -------------- next part -------------- Index: crypto/openssh/ssh-keyscan.c ==================================================================--- crypto/openssh/ssh-keyscan.c (revision 237520) +++ crypto/openssh/ssh-keyscan.c (working copy) @@ -57,7 +57,7 @@ int ssh_port = SSH_DEFAULT_PORT; #define KT_RSA 4 #define KT_ECDSA 8 -int get_keytypes = KT_RSA; /* Get only RSA keys by default */ +int get_keytypes = KT_RSA|KT_ECDSA;/* Get RSA and ECDSA keys by default */ int hash_hosts = 0; /* Hash hostname on output */
Dag-Erling Smørgrav
2012-Jun-25 17:46 UTC
[PATCH] Make ssh-keyscan to fetch ECDSA keys by default
Xin Li <delphij@delphij.net> writes:> Here is a patch from OpenBSD which makes ssh-keyscan to fetch ECDSA > keys by default, to match the default hostkey algorithm.Please commit to head with MFC after: 1 week. DES -- Dag-Erling Sm?rgrav - des@des.no
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 The proposed change have been committed as r237567 (for vendor branch) and r237568 (merged to -HEAD with 1 week settle). Thanks! Cheers, - -- Xin LI <delphij@delphij.net> https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iQEcBAEBCAAGBQJP6LbYAAoJEG80Jeu8UPuzYhoH/19O9w06fx3/7/xDERiZJ3j2 ZK26bALk9kysOKG/xD7kFPHfNs8xmAn79IdF7aitN7Xwaxz691Jjmj3YapFTcgIJ VNGqe43wIISQfog+hiISWsMowV8HEuTfM8pCUxDhHWXHlAwVBinMRWX5qXt82sYQ ijGktAR1sJUgESDQ7zEoKP6s3uPvuDYHJg3mHCk1HOtO/Huj5p4hs3nS4Dp+EVxp tM/gYlT712dEDIJNqrDSY5MCXmxUkor4PoAV7wHYVAYooa3FnIivIzXZK66P5DcZ MR3guvToxC+1tJcUVNEPqBubYoPqlV7KGtSOoTNt97u+s2diCIvHq71UG7/Yhkg=d81d -----END PGP SIGNATURE-----