* Backport from upstream:

  - Do not fall back to adding keys without contraints (ssh-add -c / -t
    ...) when the agent refuses the constrained add request. This was a
    useful migration measure back in 2002 when constraints were new, but
    just adds risk now (LP: #209447).

1 files changed, 0 insertions, 1 deletions

diff --git a/authfd.h b/authfd.h
index 3da256112..31b24e173 100644
--- a/authfd.h
+++ b/authfd.h
@@ -75,7 +75,6 @@ void	ssh_close_authentication_connection(AuthenticationConnection *);
 int      ssh_get_num_identities(AuthenticationConnection *, int);
 Key     *ssh_get_first_identity(AuthenticationConnection *, char **, int);
 Key     *ssh_get_next_identity(AuthenticationConnection *, char **, int);
-int      ssh_add_identity(AuthenticationConnection *, Key *, const char *);
 int      ssh_add_identity_constrained(AuthenticationConnection *, Key *,
     const char *, u_int, u_int);
 int      ssh_remove_identity(AuthenticationConnection *, Key *);