]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Change the default value of VerifyHostKeyDNS to "yes" if compiled with
authorDag-Erling Smørgrav <des@FreeBSD.org>
Tue, 10 Sep 2013 22:30:22 +0000 (22:30 +0000)
committerDag-Erling Smørgrav <des@FreeBSD.org>
Tue, 10 Sep 2013 22:30:22 +0000 (22:30 +0000)
commit83c6a5242c80160fff76fb85454938761645b0c4
treef38c99ce2b414f0d4c266e8e44a6ef9114b9c80a
parent9cfa8b3fee2f79940b0b9e5a4ffbc5f095861529
Change the default value of VerifyHostKeyDNS to "yes" if compiled with
LDNS.  With that setting, OpenSSH will silently accept host keys that
match verified SSHFP records.  If an SSHFP record exists but could not
be verified, OpenSSH will print a message and prompt the user as usual.

Approved by: re (blanket)
crypto/openssh/readconf.c
crypto/openssh/ssh_config
crypto/openssh/ssh_config.5