CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2020/10/11 16:14:38
Modified files: usr.bin/ssh : clientloop.c Log message: UpdateHostkeys: check for keys under other names Stop UpdateHostkeys from automatically removing deprecated keys from known_hosts files if the same keys exist under a different name or address to the host that is being connected to. This avoids UpdateHostkeys from making known_hosts inconsistent in some cases. For example, multiple host aliases sharing address-based known_hosts on different lines, or hosts that resolves to multiple addresses. ok markus@