On Tue, 13 Apr 1999, Willie Wright wrote:
: Does anyone know what the y2k status of ssh v1.2.26 is. Any information
: would be greatly appreciated, before I start going through the code.
: Not a pleasant thought.
The following entry is in the change log; it's not clear which
version was checked, I'll guess 1.2.25 based on the date.
Fri Jan 2 04:51:21 1998 Tero Kivinen <[EMAIL PROTECTED]>
* Confirmed that ssh is Y2K compliant. The HAVE_USERSEC_H code in
login_permitted function in sshd.c file is the only code that has
some Y2K problems. The expiration format returned by getuserattr
is only yymmddhhmm, and when login_permitted converts it to
normalized format that assumes that if yy < 70 then it must be
20yy, otherwise assume it to be 19yy. This means that you cannot
now have users whose account expires after year 2070.