Subject: Re: known_hosts [early PATCH]

Re: known_hosts [early PATCH]

From: Peter Stuge <peter_at_stuge.se>
Date: Thu, 7 May 2009 09:35:38 +0200

Simon Josefsson wrote:
> What about a function to add entries to the known_host file?

Please don't do that.

Make a createfile or something similar.

On Win32 there are no files.

Simon Josefsson wrote:
> > And I also want to be able to update a host in the known_host
> > file when the key has changed and the user okays this.
>
> Maybe that isn't a good idea, it trains users to just-click-yes to
> make things work.

This is really a policy decision.

> I don't think OpenSSH has any mechanism to replace hostkeys in the
> known_hosts file? Maybe that is because of the just-click-yes
> concern.

Yes indeed. OpenSSH complains quite loudly when a key changes, and
rightly so.

The big difference is that OpenSSH is intended to be an end user
tool, while libssh2 is not really.

I want callbacks, or notifications, or something else, so that my
application can handle these things on it's own, or forward them to
the user per whatever policy is current today.

//Peter

------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
libssh2-devel mailing list
libssh2-devel_at_lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/libssh2-devel
Received on 2009-05-07