diff options
| author | djm@openbsd.org <djm@openbsd.org> | 2020-10-07 02:18:45 +0000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2020-10-07 13:34:11 +1100 |
| commit | e79957e877db42c4c68fabcf6ecff2268e53acb5 (patch) | |
| tree | 9c14219f4a9fe59723950b1f248388132c675672 /ssh_config.5 | |
| parent | 3d4c2016bae1a6f14b48c1150a4c79ca4c9968bd (diff) | |
| download | openssh-git-e79957e877db42c4c68fabcf6ecff2268e53acb5.tar.gz | |
upstream: disable UpdateHostkeys by default if VerifyHostKeyDNS is
enabled; suggested by Mark D. Baushke
OpenBSD-Commit-ID: 85a1b88592c81bc85df7ee7787dbbe721a0542bf
Diffstat (limited to 'ssh_config.5')
| -rw-r--r-- | ssh_config.5 | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/ssh_config.5 b/ssh_config.5 index e085efff..2f1886a1 100644 --- a/ssh_config.5 +++ b/ssh_config.5 @@ -33,8 +33,8 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: ssh_config.5,v 1.334 2020/10/03 08:30:47 djm Exp $ -.Dd $Mdocdate: October 3 2020 $ +.\" $OpenBSD: ssh_config.5,v 1.335 2020/10/07 02:18:45 djm Exp $ +.Dd $Mdocdate: October 7 2020 $ .Dt SSH_CONFIG 5 .Os .Sh NAME @@ -1723,7 +1723,9 @@ host was already trusted or explicitly accepted by the user. .Cm UpdateHostKeys is enabled by default if the user has not overridden the default .Cm UserKnownHostsFile -setting, otherwise +setting and has not enabled +.Cm VerifyHostKeyDNS , +otherwise .Cm UpdateHostKeys will be set to .Cm no . |