[Bug 251846] sysutils/tmate: Bring back tmate server fingerprints or add a pkg-message explaining how to configure them

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=251846

            Bug ID: 251846
           Summary: sysutils/tmate: Bring back tmate server fingerprints
                    or add a pkg-message explaining how to configure them
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: swills at FreeBSD.org
          Reporter: 0mp at FreeBSD.org
             Flags: maintainer-feedback?(swills at FreeBSD.org)
          Assignee: swills at FreeBSD.org

It turns out that it is somewhat confusing to the users that we remove the
upstream server fingerprints from the source code. I can imagine this is a
security consideration, but we should at least mention in the pkg-message that
in order to bring them back in a user may run the following:

cat > ~/.tmate.conf <<\EOF
set -g tmate-server-rsa-fingerprint  
"SHA256:Hthk2T/M/Ivqfk1YYUn5ijC2Att3+UPzD7Rn72P5VWs"
set -g tmate-server-ecdsa-fingerprint
"SHA256:8GmKHYHEJ6n0TEdciHeEGkKOigQfCFuBULdt6vZIhDc"
EOF

Related issue raised in the upsteam repo:
https://github.com/tmate-io/tmate/issues/219

-- 
You are receiving this mail because:
You are the assignee for the bug.