Displaying 2 results from an estimated 2 matches for "thorduri".
2015 Nov 18
2
Missing SSHFP RRs / VerifyHostKeyDNS & StrictHostKeyChecking
...connection should be allowed to proceed; I'm
unsure if this is by design
or not (as presented host key and known host key match), but I'd argue
this violates POLA.
Attached are two na?ve patches to portable (cloned from
anongit at mindrot.org) that attempt
to tackle the above.
--
/ciao, thorduri.
2015 Nov 19
27
[Bug 2501] New: VerifyHostKeyDNS & StrictHostKeyChecking
...rictHostKeyChecking
Product: Portable OpenSSH
Version: 7.1p1
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: P5
Component: ssh
Assignee: unassigned-bugs at mindrot.org
Reporter: thorduri at secnorth.net
Created attachment 2753
--> https://bugzilla.mindrot.org/attachment.cgi?id=2753&action=edit
Two patches for the above.
When SSHFP RR is missing (while there are records available) ssh does
not
distinguish between these two, leading to confusing error messages,
that
is the...