I've updated my DNSSEC patch, available at ftp://ftp.tislabs.com/pub/fmeshd as openssh.[portable,openbsd].patch.20010712 The updates include a fix to correctly handle failure of the lookup methods and a new option to ssh-keygen to output the DNS format of the key. Both were supplied by Jakob Schlyter. I've also updated the style to conform better to openbsd's style(9). -- Wesley Griffin NAI Labs wgriffin at tislabs.com 443.259.2388