Re: SSH cert extensions and authz key options

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



Damien Miller wrote:
> On Wed, 24 Jan 2018, Michael Ströder wrote:
> 
>>>> Are SSH cert extensions and authz key options treated case-insensitive?
>>>> [1] does not say anything about this.
>>>
>>> Cert extensions are case sensitive
>>>
>>> authorized_keys options aren't.
>>
>> Sorry for nitpicking some more:
>>
>> Man page ssh-keygen(1) -O says lower-case "permit-x11-forwarding" [1]
> 
> That's a typo. I'll commit a fix. It should be "permit-X11-forwarding"

I'm not a C programmer so I can't oversee the real impact but even
within ssh-keygen.c (7.6p1) there's mixed use of lower-case x11 and
upper-case X11:

$ grep -n permit-x11-forwarding ssh-keygen.c
1902:	else if (strcasecmp(opt, "permit-x11-forwarding") == 0)
$ grep -n permit-X11-forwarding ssh-keygen.c
1582:		add_flag_option(c, "permit-X11-forwarding");
1969:		    (strcmp(name, "permit-X11-forwarding") == 0 ||

Ciao, Michael.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux