tyler.durden/openssh-portable
1
0
Fork 0
mirror of https://github.com/PowerShell/openssh-portable.git synced 2025-07-28 08:14:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

upstream: document changed default for UpdateHostKeys

Browse Source 
OpenBSD-Commit-ID: 25c390b21d142f78ac0106241d13441c4265fd2c
This commit is contained in:
djm@openbsd.org 2020-01-30 22:25:34 +00:00 committed by Damien Miller
parent d53a518536
commit 771891a044
1 changed files with 13 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
ssh_config.5
View File

@ -33,8 +33,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: ssh_config.5,v 1.319 2020/01/28 01:49:36 djm Exp $ .\" $OpenBSD: ssh_config.5,v 1.320 2020/01/30 22:25:34 djm Exp $
.Dd $Mdocdate: January 28 2020 $ .Dd $Mdocdate: January 30 2020 $
.Dt SSH_CONFIG 5 .Dt SSH_CONFIG 5
.Os .Os
.Sh NAME .Sh NAME
@ -1678,13 +1678,22 @@ after authentication has completed and add them to
The argument must be The argument must be
.Cm yes , .Cm yes ,
.Cm no .Cm no
(the default) or or
.Cm ask . .Cm ask .
Enabling this option allows learning alternate hostkeys for a server This option allows learning alternate hostkeys for a server
and supports graceful key rotation by allowing a server to send replacement and supports graceful key rotation by allowing a server to send replacement
public keys before old ones are removed. public keys before old ones are removed.
Additional hostkeys are only accepted if the key used to authenticate the Additional hostkeys are only accepted if the key used to authenticate the
host was already trusted or explicitly accepted by the user. host was already trusted or explicitly accepted by the user.
.Pp
.Cm UpdateHostKeys
is enabled by default if the user has not overriden the default
.Cm UserKnownHostsFile
setting, otherwise
.Cm UpdateHostKeys
will be set to
.Cm ask .
.Pp
If If
.Cm UpdateHostKeys .Cm UpdateHostKeys
is set to is set to