bugzilla-daemon at bugzilla.mindrot.org
2010-Aug-09 18:34 UTC
[Bug 1296] VerifyHostKeyDNS default domain
https://bugzilla.mindrot.org/show_bug.cgi?id=1296
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |djm at mindrot.org
Status|NEW |RESOLVED
Resolution| |FIXED
--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Unfortunately the resolver APIs don't give us any way to find out the
canonical domain that the resolver actually used to find the address.
There is a bit of discussion about this on openssh-unix-dev at mindrot.org
(see the thread "Question about host certificates").
The workaround that I implemented was an easy way to apply a default
domain name to unqualified host names in ssh_config:
Host *.*
Hostname %h
Host *
Hostname %h.my.domain
It is a bit of a hack, but unfortunately it is the best we can do
without changes to the resolver API.
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2010-Aug-27 00:28 UTC
[Bug 1296] VerifyHostKeyDNS default domain
https://bugzilla.mindrot.org/show_bug.cgi?id=1296
Darren Tucker <dtucker at zip.com.au> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |CLOSED
--- Comment #3 from Darren Tucker <dtucker at zip.com.au> ---
With the release of OpenSSH 5.6p1 this bug is now considered closed.
If you have further problems please reopen or file a new bug as
appropriate.
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
Maybe Matching Threads
- [Bug 1296] VerifyHostKeyDNS default domain
- [Bug 1745] New: Matching @cert-authority entries when using unqualified hostnames
- [Bug 1296] VerifyHostKeyDNS default domain
- [Bug 2501] New: VerifyHostKeyDNS & StrictHostKeyChecking
- [Bug 1981] Trying to use ssh with a missing identity file gives no warnings