openssh bugs - Jul 2021 - [Bug 3335] New: sshd_config docs for CASignatureAlgorithms don't mention the '+' argument

https://bugzilla.mindrot.org/show_bug.cgi?id=3335

            Bug ID: 3335
           Summary: sshd_config docs for CASignatureAlgorithms don't
                    mention the '+' argument
           Product: Portable OpenSSH
           Version: 8.2p1
          Hardware: 68k
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: wgoulet at gmail.com

Hi, 

The CASignatureAlgorithms config line in sshd_config acts the same as
the Ciphers and HostSignatureAlgorithms in that you can add additional
algorithms to the list by prepending the algorithm name with a '+'. But
the documentation does not make this clear.

Suggest adding additional description text like the following:

If the specified list begins with a ?+? character, then the specified
algorithms will be appended
             to the default set instead of replacing them.  If the
specified list begins with a ?-? character, then the specified
algorithms (including wildcards) will be removed from
             the default set instead of replacing them.  If the
specified list begins with a ?^? character, then the specified
algorithms will be placed at the head of the default set.

Thanks,
Walter

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3335

Walter <wgoulet at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|enhancement                 |trivial

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3335

Walter <wgoulet at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |wgoulet at gmail.com

--- Comment #1 from Walter <wgoulet at gmail.com> ---
Created attachment 3540
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3540&action=edit
Patched sshd_config file

Adds additional commentary on use of modifiers to CASignatureAlgorithm
list.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3335

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net
             Blocks|                            |3302


Referenced Bugs:

https://bugzilla.mindrot.org/show_bug.cgi?id=3302
[Bug 3302] Tracking bug for openssh-8.7
-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3335

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Hardware|68k                         |All

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3335

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
                 CC|                            |djm at mindrot.org
             Status|NEW                         |RESOLVED

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
I have added some text to the manual pages to describe +/- here.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3335

--- Comment #3 from Walter <wgoulet at gmail.com> ---
Thank you for the fix!

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3335

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
closing bugs resolved before openssh-8.9

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.