summaryrefslogtreecommitdiff
path: root/sites
diff options
context:
space:
mode:
authorJeff Forcier <jeff@bitprophet.org>2022-04-22 19:11:03 -0400
committerJeff Forcier <jeff@bitprophet.org>2022-04-22 19:12:32 -0400
commit7a2c84afaada7a513ee482ba36e8848528b6f5f3 (patch)
tree2494ec3ce75a1360800531deb33e3593198e6377 /sites
parent239d2bd7a620be5cdaaa26f981ea72f5f55c9050 (diff)
downloadparamiko-7a2c84afaada7a513ee482ba36e8848528b6f5f3.tar.gz
Add -cert-v01@openssh.com variants to accepted host key algorithms
Solves #2035
Diffstat (limited to 'sites')
-rw-r--r--sites/www/changelog.rst4
1 files changed, 4 insertions, 0 deletions
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst
index 067a73ba..eb1e0704 100644
--- a/sites/www/changelog.rst
+++ b/sites/www/changelog.rst
@@ -2,6 +2,10 @@
Changelog
=========
+- :bug:`2035` Servers offering certificate variants of hostkey algorithms (eg
+ ``ssh-rsa-cert-v01@openssh.com``) could not have their host keys verified by
+ Paramiko clients, as it only ever considered non-cert key types for that part
+ of connection handshaking. This has been fixed.
- :release:`2.10.3 <2022-03-18>`
- :release:`2.9.3 <2022-03-18>`
- :bug:`1963` (via :issue:`1977`) Certificate-based pubkey auth was