Displaying 1 result from an estimated 1 matches for "ssh_unbound_conf".
2012 May 09
4
feature request: modify getrrsetbyname() to use libunbound
...propose that openssh be modified as follows:
(1) introduce a new ssh_config directive: UnboundConfigurationFile
(2) modify getrrsetbyname() such that, if UnboundConfigurationFile is
set, then the unbound resolver is used; if not, then libc
(3) provide a default unbound configuration in /etc/ssh/ssh_unbound_conf
In this way, the standard mode of operation for ssh remains unchanged by
default. Users who would like to use SSHFP records in a secure manner
would set the configuration directive.
Please find attached a preliminary patch that modifies getrrsetbyname()
to use libunbound rather than libc.
We ha...