openssh bugs - Feb 2023 - [Bug 3532] New: ssh -Q CASignatureAlgorithms not working

https://bugzilla.mindrot.org/show_bug.cgi?id=3532

            Bug ID: 3532
           Summary: ssh -Q CASignatureAlgorithms not working
           Product: Portable OpenSSH
           Version: -current
          Hardware: amd64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: xspielinbox+mindrot at protonmail.com

The ssh man page (ssh(1)) states for the "-Q query_option" option that
"Alternatively, any keyword from ssh_config(5) or sshd_config(5) that
takes an algorithm list may be used as an alias for the corresponding
query_option."

However, even though CASignatureAlgorithms is listed as taking an
algorithm list in ssh_config(5) and sshd_config(5) it does not work
with 'ssh -Q'. This makes it extremely difficult to figure out what
arguments are accepted for a given version of OpenSSH for this
configuration option.

Looking at
https://github.com/openssh/openssh-portable/blob/master/ssh.c#L777 and
the following lines it seems like there is missing a case for
CASignatureAlgorithms.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3532

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |3533
                 CC|                            |dtucker at dtucker.net


Referenced Bugs:

https://bugzilla.mindrot.org/show_bug.cgi?id=3533
[Bug 3533] tracking bug for openssh-9.3
-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3532

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
This has been fixed and will be in the OpenSSH 9.3 release

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3532

--- Comment #2 from xspielinbox+mindrot at protonmail.com ---
Thank you.

Just a question on the implementation: What are the cert algorithms for
as a CASignatureAlgorithms? They aren't enabled by default and as
intermediate Certificates aren't supported I don't understand how this
would work.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3532

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
OpenSSH 9.3 has been released. Close resolved bugs

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.