openssh unix dev - Jun 2003 - experimental DNS fingerprint

Please find attached file "configure.ac+dns.patch".
This patch allow to compile current (30 Jun 2003) with options 
--with-dns on my platform.

Output from "ssh -v -o VerifyHostKeyDNS=yes ..." follow:
...
debug1: found 1 fingerprints in DNS
debug1: matching host key fingerprint found in DNS
...

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: configure.ac+dns.patch
Url:
http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20030630/acaf927d/attachment.ksh

P.S.: libresolv is from glibc 2.2.5. Work with 2.2.4 and 2.2.3 too.


Roumen Petrov wrote:
> Please find attached file "configure.ac+dns.patch".
> This patch allow to compile current (30 Jun 2003) with options 
> --with-dns on my platform.
>
> Output from "ssh -v -o VerifyHostKeyDNS=yes ..." follow:
> ...
> debug1: found 1 fingerprints in DNS
> debug1: matching host key fingerprint found in DNS
> ...
>
>------------------------------------------------------------------------
>
>Index: configure.ac
>==================================================================>RCS
file: /cvs/openssh/configure.ac,v
>retrieving revision 1.129
>diff -u -r1.129 configure.ac
>--- configure.ac	29 Jun 2003 11:30:41 -0000	1.129
>+++ configure.ac	30 Jun 2003 08:57:40 -0000
>@@ -1876,7 +1876,13 @@
> 			DNS_MSG="yes"
> 			AC_DEFINE(DNS)
> 			AC_SEARCH_LIBS(getrrsetbyname, resolv, 
>-				[AC_DEFINE(HAVE_GETRRSETBYNAME)])
>+				[AC_DEFINE(HAVE_GETRRSETBYNAME)],
>+				[
>+				dnl getrrsetbyname implementation need next functions
>+				AC_SEARCH_LIBS(res_query, resolv)
>+				AC_SEARCH_LIBS(dn_expand, resolv)
>+				]
>+			)
> 		fi
> 	]
> )
>  
>

-- 
Get X.509 certificate support in OpenSSH:
http://roumenpetrov.info/openssh

Roumen Petrov wrote:
> Please find attached file "configure.ac+dns.patch".
> This patch allow to compile current (30 Jun 2003) with options 
> --with-dns on my platform.
Applied - thanks.
> AC_SEARCH_LIBS(res_query, resolv)
hmm, there are probably a few places in configure.ac where we should use
AC_SEARCH_LIBS rather than AC_CHECK_LIB.

AC_CHECK_LIB seems to insert duplicate libraries on matching,
AC_SEARCH_LIBS is smarter.

-d