Borrow patch from Fedora to add DNSSEC support: if glibc 2.11 is

installed, the host key is published in an SSHFP RR secured with DNSSEC,
and VerifyHostKeyDNS=yes, then ssh will no longer prompt for host key
verification (closes: #572049).

1 files changed, 9 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index e2ce33bfb..0ec794b93 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+openssh (1:5.4p1-2) UNRELEASED; urgency=low
+
+  * Borrow patch from Fedora to add DNSSEC support: if glibc 2.11 is
+    installed, the host key is published in an SSHFP RR secured with DNSSEC,
+    and VerifyHostKeyDNS=yes, then ssh will no longer prompt for host key
+    verification (closes: #572049).
+
+ -- Colin Watson <cjwatson@debian.org>  Tue, 06 Apr 2010 23:16:39 +0100
+
 openssh (1:5.4p1-1) unstable; urgency=low
 
   * New upstream release (LP: #535029).