openssh bugs - Jun 2010 - [Bug 1777] New: KnownHostsCommand

https://bugzilla.mindrot.org/show_bug.cgi?id=1777

           Summary: KnownHostsCommand
           Product: Portable OpenSSH
           Version: 5.5p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ssh
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: dkg at fifthhorseman.net


A useful feature to have for ssh would be KnownHostsCommand, by analogy
with KnownHostsFile and ProxyCommand.

One possible implementation: if set, KnownHostsCommand would be invoked
as a subprocess immediately after receipt of the host's key, with the
host name as argv[1], and the public key itself (in some canonicalized
form) on stdin.

The parent ssh process would wait() on this subprocess. The subprocess
returns 0 (accept, continue), or non-zero (abort connection),
optionally producing debugging information on stderr.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1777

jchadima at redhat.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jchadima at redhat.com

--- Comment #1 from jchadima at redhat.com  ---
This is solved in patches attached to bz#1663

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1777

--- Comment #2 from Daniel Kahn Gillmor <dkg at fifthhorseman.net>  ---
I don't think this is actually solved in the patches attached to 1663.

https://bugzilla.mindrot.org/attachment.cgi?id=1811 only addresses sshd
(the daemon), but this bug (1777) addresses ssh (the client).

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1777

Anthony DeRobertis <aderobertis at metrics.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |aderobertis at metrics.net

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1777

Daniel Kahn Gillmor <dkg at fifthhorseman.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Alias|                            |KnownHostsCommand

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1777

Jameson Rollins <ssh-bugzilla at finestructure.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ssh-bugzilla at finestructure.
                   |                            |net

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.