From owner-svn-src-head@freebsd.org Sat Feb 6 14:19:22 2016 Return-Path: Delivered-To: svn-src-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 327BFA9F458; Sat, 6 Feb 2016 14:19:22 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id F2CEAE02; Sat, 6 Feb 2016 14:19:21 +0000 (UTC) (envelope-from des@des.no) Received: from desk.des.no (smtp.des.no [194.63.250.102]) by smtp.des.no (Postfix) with ESMTP id 91C4E5CAC; Sat, 6 Feb 2016 14:19:14 +0000 (UTC) Received: by desk.des.no (Postfix, from userid 1001) id 083344B2B4; Sat, 6 Feb 2016 15:19:13 +0100 (CET) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Bryan Drewery Cc: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r294560 - head/etc/rc.d References: <201601221214.u0MCE8Jk054031@repo.freebsd.org> <56B3DE8E.9020603@FreeBSD.org> Date: Sat, 06 Feb 2016 15:19:13 +0100 In-Reply-To: <56B3DE8E.9020603@FreeBSD.org> (Bryan Drewery's message of "Thu, 4 Feb 2016 15:28:14 -0800") Message-ID: <86lh6xsyzi.fsf@desk.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Feb 2016 14:19:22 -0000 Bryan Drewery writes: > I think perhaps you should also remove these as having default paths in > the .c as well and require they be enabled in the config. Otherwise a > warning is given: > > Feb 4 15:25:22 VM sshd[874]: error: Could not load host key: > /etc/ssh/ssh_host_dsa_key > > Or always generate them but only load them if enabled in the config. I did this because I wanted to move away from DSA keys without disabling them in the default config (which can break existing setups). The problem is that apparently OpenSSH doesn't interpret HostKey as "try to load these keys" but as "you must load these keys", even when it wasn't explicitly set; I would have expected the default to be "load whatever is available". I'll see if I can patch OpenSSH to do what I want, and revert this if not. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no