svn commit: r466577 - in head/security/openssh-portable: . files

[Bryan Drewery]

Sorry I've been super busy. If this is right please commit it with a
PORTREVISION bump.
Other patches had similar problems where fuzz applied them incorrectly.

On 4/11/2018 9:27 PM, Craig Leres wrote:
> On 04/06/18 18:12, Craig Leres wrote:
>> This version breaks sshfp support
> 
> I poked at this and the issue is that a block of code that canonicalizes
> the host supplied on the command teleported from main() to
> ssh_session2(). What the VerifyHostKeyDNS yes path now encounters is
> that the non-canonical version of the hostname is used for the SSHFP
> lookup. The base problem is that files/patch-ssh.c has not been updated
> recently and somehow manages to be applied to the wrong part of ssh.c.
> 
> Attached is an updated patch.ssh.c
> 
>         Craig


-- 
Regards,
Bryan Drewery

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/svn-ports-all/attachments/20180412/ce87b092/attachment.sig>