Page MenuHomeFreeBSD

FreeBSD ssh client default changes
Needs ReviewPublic

Authored by emaste on Feb 15 2021, 8:30 PM.
Tags
None
Referenced Files
F153391821: D28692.diff
Mon, Apr 20, 9:39 PM
F153389473: D28692.id.diff
Mon, Apr 20, 9:21 PM
Unknown Object (File)
Mon, Apr 20, 12:08 AM
Unknown Object (File)
Sat, Apr 18, 5:07 PM
Unknown Object (File)
Sun, Apr 12, 1:25 AM
Unknown Object (File)
Mar 21 2026, 2:15 PM
Unknown Object (File)
Mar 15 2026, 3:00 AM
Unknown Object (File)
Mar 5 2026, 8:18 AM

Details

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

emaste created this revision.
ssh_config
47

Hrm, there's no existing commented out value to change, need to investigate.
See also https://blog.des.no/2013/10/verifyhostkeydns/.

2khramtsov_gmail.com added inline comments.
readconf.c
2244

Should one trust AD bit from a remote resolver? One may configure a 2001:4860:4860::8888 in /etc/resolv.conf. Does FreeBSD installer add "options edns0" if local unbound is selected after install?

emaste added inline comments.
sshd_config
90

See D37411 for this one