ssh known_hosts in 10.1

Dag-Erling Smørgrav des at des.no
Thu Apr 9 10:00:14 UTC 2015


Eric van Gyzen <eric at vangyzen.net> writes:
> Dag-Erling:  The update to OpenSSH 6.5p1 (r261320) removed FreeBSD's
> customization to use the canonical hostname (FQDN) in the known_hosts
> file.  Was this intentional?  Could it be restored?

I'm not sure what I was thinking when I made that change.  I can neither
confirm nor deny that I was sleepwalking at the time...  I probably
removed the code because upstream now supports canonicalization, but did
not realize that it is not 100% equivalent.  I should at the very least
have changed the default setting.

I need to get around to upgrading to 6.7p1, but it requires quite a bit
more work than usual due to major upstream changes such as the removal
of hosts_access(3) (aka "TCP wrappers") support, which therefore has to
be backported.

Sorry for the delay, I was dealing with family issues.

DES
-- 
Dag-Erling Smørgrav - des at des.no


More information about the freebsd-stable mailing list