Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
0.10.0, 0.10.1
-
server: openssh.
attached test program.
Description
Hello,
Up to 0.9.0 release waiting for WAIT_AUTH was enough to examine server key before proceeding and authenticating.
Since 0.10.0 the WAIT_AUTH happens before ServerKeyVerifier is called, so a simple sequence of acquire host key without authentication is not possible as far as I can see.
bisected to:
commit 03aa3979d47b92ad7b01fcfe1e2833a050b7118d
Author: Guillaume Nodet <gnodet@apache.org>
Date: Wed Jan 29 12:01:53 2014 +0100
SSHD-282 Abstract the SSH Service to make it more pluggable