Package: libssh2-1
Version: 0.18-1
Tags: security
Severity: normal
Unlessed I missed something, libssh2 gives the application no way to
get the hostkey, so even if an application wanted, it could not compare
with the ones stored in known_hosts files (but at most with a hash of
that) and no way at all to store it in that format somewhere.
I considered making this a wishlist report, but not being able to check
host keys in a customary way undermines the whole point of ssh and makes
the library almost useless to write reasonable applications.
Hochachtungsvoll,
Bernhard R. Link
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
