CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2023/06/20 23:10:26
Modified files:
usr.bin/ssh : readconf.c servconf.c sshkey.c sshkey.h
Log message:
better validate CASignatureAlgorithms in ssh_config and sshd_config.
Previously this directive would accept certificate algorithm names, but
these were unusable in practice as OpenSSH does not support CA chains.
part of bz3577; ok dtucker@
