From owner-freebsd-stable@FreeBSD.ORG  Thu Apr  9 10:00:14 2015
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 13D43BF3
 for <stable@freebsd.org>; Thu,  9 Apr 2015 10:00:14 +0000 (UTC)
Received: from smtp.des.no (smtp.des.no [194.63.250.102])
 by mx1.freebsd.org (Postfix) with ESMTP id C8DE2AD2
 for <stable@freebsd.org>; Thu,  9 Apr 2015 10:00:13 +0000 (UTC)
Received: from nine.des.no (smtp.des.no [194.63.250.102])
 by smtp-int.des.no (Postfix) with ESMTP id 9B9DEC3FC;
 Thu,  9 Apr 2015 10:00:07 +0000 (UTC)
Received: by nine.des.no (Postfix, from userid 1001)
 id 671097A5; Thu,  9 Apr 2015 12:00:08 +0200 (CEST)
From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To: Eric van Gyzen <eric@vangyzen.net>
Subject: Re: ssh known_hosts in 10.1
References: <54DBD1C2.4000108@vangyzen.net> <54DC1A78.9010500@vangyzen.net>
 <54DC6048.2060902@dssgmbh.de> <54DCCBEC.9040104@vangyzen.net>
Date: Thu, 09 Apr 2015 12:00:08 +0200
In-Reply-To: <54DCCBEC.9040104@vangyzen.net> (Eric van Gyzen's message of
 "Thu, 12 Feb 2015 10:51:08 -0500")
Message-ID: <86oamx39lj.fsf@nine.des.no>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.4 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cc: stable@freebsd.org, Alfred Bartsch <bartsch@dssgmbh.de>
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Apr 2015 10:00:14 -0000

Eric van Gyzen <eric@vangyzen.net> writes:
> Dag-Erling:  The update to OpenSSH 6.5p1 (r261320) removed FreeBSD's
> customization to use the canonical hostname (FQDN) in the known_hosts
> file.  Was this intentional?  Could it be restored?

I'm not sure what I was thinking when I made that change.  I can neither
confirm nor deny that I was sleepwalking at the time...  I probably
removed the code because upstream now supports canonicalization, but did
not realize that it is not 100% equivalent.  I should at the very least
have changed the default setting.

I need to get around to upgrading to 6.7p1, but it requires quite a bit
more work than usual due to major upstream changes such as the removal
of hosts_access(3) (aka "TCP wrappers") support, which therefore has to
be backported.

Sorry for the delay, I was dealing with family issues.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no