CVSROOT: /cvs
Module name: src
Changes by: d...@cvs.openbsd.org 2020/10/13 18:55:17
Modified files:
usr.bin/ssh : clientloop.c
Log message:
make UpdateHostkeys still more conservative: refuse to proceed if
one of the keys offered by the server is already in known_hosts under
another name. This avoid collisions between address entries for
different host aliases when CheckHostIP=yes
Also, do not attempt to fix known_hosts with incomplete host/ip matches
when there are no new or deprecated hostkeys.
