summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--ChangeLog4
-rw-r--r--sshconnect.c4
2 files changed, 6 insertions, 2 deletions
diff --git a/ChangeLog b/ChangeLog
index 789e7af47..6cfd29423 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -15,6 +15,10 @@
15 [ssh.c] 15 [ssh.c]
16 bz#1746 - suppress spurious tty warning when using -O and stdin 16 bz#1746 - suppress spurious tty warning when using -O and stdin
17 is not a tty; ok dtucker@ markus@ 17 is not a tty; ok dtucker@ markus@
18 - djm@cvs.openbsd.org 2010/04/10 00:04:30
19 [sshconnect.c]
20 fix terminology: we didn't find a certificate in known_hosts, we found
21 a CA key
18 22
1920100410 2320100410
20 - (dtucker) [configure.ac] Put the check for the existence of getaddrinfo 24 - (dtucker) [configure.ac] Put the check for the existence of getaddrinfo
diff --git a/sshconnect.c b/sshconnect.c
index 9de52224d..effe6dae8 100644
--- a/sshconnect.c
+++ b/sshconnect.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: sshconnect.c,v 1.220 2010/03/04 10:36:03 djm Exp $ */ 1/* $OpenBSD: sshconnect.c,v 1.221 2010/04/10 00:04:30 djm Exp $ */
2/* 2/*
3 * Author: Tatu Ylonen <ylo@cs.hut.fi> 3 * Author: Tatu Ylonen <ylo@cs.hut.fi>
4 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -739,7 +739,7 @@ check_host_key(char *hostname, struct sockaddr *hostaddr, u_short port,
739 debug("Host '%.200s' is known and matches the %s host %s.", 739 debug("Host '%.200s' is known and matches the %s host %s.",
740 host, type, want_cert ? "certificate" : "key"); 740 host, type, want_cert ? "certificate" : "key");
741 debug("Found %s in %s:%d", 741 debug("Found %s in %s:%d",
742 want_cert ? "certificate" : "key", host_file, host_line); 742 want_cert ? "CA key" : "key", host_file, host_line);
743 if (want_cert && !check_host_cert(hostname, host_key)) 743 if (want_cert && !check_host_cert(hostname, host_key))
744 goto fail; 744 goto fail;
745 if (options.check_host_ip && ip_status == HOST_NEW) { 745 if (options.check_host_ip && ip_status == HOST_NEW) {