- djm@cvs.openbsd.org 2010/03/05 02:58:11

     [auth.c]
     make the warning for a revoked key louder and more noticable

2 files changed, 6 insertions, 2 deletions

diff --git a/ChangeLog b/ChangeLog
index ee1804fd8..25a0f8716 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -20,6 +20,9 @@
      [auth-options.c ssh-keygen.c]
      "force-command" is not spelled "forced-command"; spotted by
      imorgan AT nas.nasa.gov
+   - djm@cvs.openbsd.org 2010/03/05 02:58:11
+     [auth.c]
+     make the warning for a revoked key louder and more noticable
  - (tim) [ssh-pkcs11.c] Fix "non-constant initializer" errors in older
    compilers. OK djm@
  - (djm) [ssh-rand-helper.c] declare optind, avoiding compilation failure
diff --git a/auth.c b/auth.c
index e680efbcc..e8fbe9fd5 100644
--- a/auth.c
+++ b/auth.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth.c,v 1.85 2010/03/04 10:36:03 djm Exp $ */
+/* $OpenBSD: auth.c,v 1.86 2010/03/05 02:58:11 djm Exp $ */
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
  *
@@ -604,7 +604,8 @@ auth_key_is_revoked(Key *key)
         case 1:
                 /* Key revoked */
                 key_fp = key_fingerprint(key, SSH_FP_MD5, SSH_FP_HEX);
-                error("%s key %s is revoked", key_type(key), key_fp);
+                error("WARNING: authentication attempt with a revoked "
+                    "%s key %s ", key_type(key), key_fp);
                 xfree(key_fp);
                 return 1;
         }