git: 232b4f33b435 - main - ssh: add information on hostname canonicalization patch

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Ed Maste <emaste_at_FreeBSD.org>
Date: Tue, 07 Feb 2023 20:34:24 UTC

The branch main has been updated by emaste:

URL: https://cgit.FreeBSD.org/src/commit/?id=232b4f33b4352cc84f3f07721345117d2486b013

commit 232b4f33b4352cc84f3f07721345117d2486b013
Author:     Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2023-02-07 20:09:30 +0000
Commit:     Ed Maste <emaste@FreeBSD.org>
CommitDate: 2023-02-07 20:34:11 +0000

    ssh: add information on hostname canonicalization patch
    
    We introduced hostname canonicalization in 2002, while upstream OpenSSH
    added similar support in 2014.
    
    It would be good to review our handling of CNAMEs in hostname
    canonicalization.
    
    Sponsored by:   The FreeBSD Foundation
---
 crypto/openssh/FREEBSD-upgrade | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/crypto/openssh/FREEBSD-upgrade b/crypto/openssh/FREEBSD-upgrade
index 5f0e399deb04..bc1122768790 100644
--- a/crypto/openssh/FREEBSD-upgrade
+++ b/crypto/openssh/FREEBSD-upgrade
@@ -130,6 +130,10 @@
    reading options but before trying to connect.  This eliminates the
    usual problem with duplicate known_hosts entries.
 
+   We added this support in 2002 (r99054 / bf2e2524a2ce).  In 2014
+   upstream introduced CanonicalDomains and related options to serve a
+   similar purpose but they require environment-specific configuration.
+
 4) setusercontext() environment
 
    Our setusercontext(3) can set environment variables, which we must