Your message dated Thu, 09 Jun 2016 10:32:47 +0000
with message-id <[email protected]>
and subject line Bug#719442: fixed in sshfp 1.2.2-5
has caused the Debian Bug report #719442,
regarding sshfp: Add support for ECDSA
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
719442: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=719442
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sshfp
Version: 1.2.2-4
Severity: wishlist
Tags: upstream patch
Dear Maintainer,
sshfp does not currently support ECDSA and upstream doesn't seem very
active.
A patch has been added to the devel branch a long time ago but no
release has been made (I've attached the patch, I didn't write it).
See:
https://github.com/xelerance/sshfp/compare/devel
I've tested it and it seems to be working ok and it's a ten line change.
Please consider adding it as a Debian patch given that the Debian
openssh server includes ECDSA support.
--
David Härdeman
--- sshfp 2013-03-07 17:16:00.000000000 +0100
+++ sshfp 2013-02-16 09:11:52.000000000 +0100
@@ -53,10 +53,9 @@
if keytype == "ssh-rsa":
keytype = "1"
- elif keytype == "ssh-dss":
+ else:
+ if keytype == "ssh-dss":
keytype = "2"
- elif keytype == "ecdsa-sha2-nistp256":
- keytype = "3"
else:
return ""
try:
@@ -130,19 +129,19 @@
fingerprints.append(process_records(data, wantedHosts))
return "\n".join(fingerprints)
-def check_keytype(keytype):
+def check_keytype(keytype, hostname):
global algos
for algo in algos:
if "ssh-%s" % algo[:-1] == keytype[:-1]:
return True
- if "ecdsa" == algo and "ecdsa-sha2-nistp256" == keytype:
- return True
+ if not quiet:
+ print >> sys.stderr, "Could only find key type %s for %s" % (keytype, hostname)
return False
def process_record(record, hostname):
(host, keytype, key) = record.split(" ")
key = key.rstrip()
- if check_keytype(keytype):
+ if check_keytype(keytype, hostname):
record = create_sshfp(hostname, keytype, key)
return record
return ""
@@ -169,7 +168,7 @@
if "," in host:
host = host.split(",")[0]
if all_hosts or host in hostnames or host == hostnames:
- if not check_keytype(keytype):
+ if not check_keytype(keytype, host):
continue
all_records.append(create_sshfp(host, keytype, key))
if all_records:
@@ -302,7 +301,7 @@
action="append",
type="choice",
dest="algo",
- choices=["rsa", "dsa", "ecdsa"],
+ choices=["rsa", "dsa"],
default=[],
help="key type to fetch (may be specified more than once, default dsa,rsa)")
parser.add_option("-n", "--nameserver",
@@ -323,7 +322,7 @@
data = ""
trailing = options.trailing_dot
timeout = options.timeout
- algos = options.algo or ["dsa", "rsa", "ecdsa"]
+ algos = options.algo or ["dsa", "rsa"]
all_hosts = options.all_hosts
port = options.port
hostnames = ()
@@ -340,7 +339,7 @@
sys.exit(1)
if not options.scan and options.all_hosts and args:
print >> sys.stderr, "WARNING: -a and hosts both passed, ignoring manual host list"
- if not args and (not all_hosts):
+ if not args:
print >> sys.stderr, "WARNING: Assuming -a"
all_hosts = True
--- End Message ---
--- Begin Message ---
Source: sshfp
Source-Version: 1.2.2-5
We believe that the bug you reported is fixed in the latest version of
sshfp, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jean-Michel Vourgère <[email protected]> (supplier of updated sshfp package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 09 Jun 2016 11:53:24 +0200
Source: sshfp
Binary: sshfp
Architecture: source all
Version: 1.2.2-5
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <[email protected]>
Changed-By: Jean-Michel Vourgère <[email protected]>
Description:
sshfp - DNS SSHFP records generator
Closes: 719442 776133
Changes:
sshfp (1.2.2-5) unstable; urgency=medium
.
* QA upload.
* Set maintainer to QA. See #826630.
* Added support for ecdsa. (Closes: #719442)
* Added support for ed25519. (Closes: #776133)
* Updated d/watch. Thanks Bart Martens.
* Moved Homepage: to github.
* Bumped policy to 3.9.8, no change required.
* Refreshed d/copyright.
* Moved Vcs-*: to collab-maint.
* Bumped compat to 9.
Checksums-Sha1:
323732c2dff529046eeb9bbd67fa87aa26ba0861 1818 sshfp_1.2.2-5.dsc
88611bb980e6dbb655cb8b82d5aa0b64b7a928bf 6120 sshfp_1.2.2-5.debian.tar.xz
537dcbbadd54019117dd89250bf29efebca0854c 24684 sshfp_1.2.2-5_all.deb
Checksums-Sha256:
e69c209bbfb84ef7535b779fb4de1e645f8b377d4a0d325cf38e9f07f89b9699 1818
sshfp_1.2.2-5.dsc
d0ada4229c646a36065ca293b291e4e484b1dcddd1297c68fdabb48e56ecfb1e 6120
sshfp_1.2.2-5.debian.tar.xz
8c4534f35822e8898a1512ce16ca041e7da3307ea7d763eb4fb81b12c813b072 24684
sshfp_1.2.2-5_all.deb
Files:
0235825a5a4d5408686ad5b23f380932 1818 net extra sshfp_1.2.2-5.dsc
46fa11b928e0168e50acb3b498a9dbc1 6120 net extra sshfp_1.2.2-5.debian.tar.xz
acd4bf01131e0802bfa01023ddb03c48 24684 net extra sshfp_1.2.2-5_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=N3ek
-----END PGP SIGNATURE-----
--- End Message ---
