]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Change the default value of VerifyHostKeyDNS to "yes" if compiled with
authordes <des@FreeBSD.org>
Tue, 10 Sep 2013 22:30:22 +0000 (22:30 +0000)
committerdes <des@FreeBSD.org>
Tue, 10 Sep 2013 22:30:22 +0000 (22:30 +0000)
commitc960286445eb68fac5bb495df021d0dcf22ec4de
treef38c99ce2b414f0d4c266e8e44a6ef9114b9c80a
parent2a9ec0fc3edd2edc5766e11fa312e8ab8a128d5f
Change the default value of VerifyHostKeyDNS to "yes" if compiled with
LDNS.  With that setting, OpenSSH will silently accept host keys that
match verified SSHFP records.  If an SSHFP record exists but could not
be verified, OpenSSH will print a message and prompt the user as usual.

Approved by: re (blanket)
crypto/openssh/readconf.c
crypto/openssh/ssh_config
crypto/openssh/ssh_config.5