Hello again,

there are two important lookup calls

  shishi_hostkeys_for_server()

  shishi_hostkeys_for_serverrealm()

used in determining the host key of a server instance.
The documentation of the first one is in dire need of
some words indicating that it completely ignores whatever
value may be assigned to the default realm. Instead the
function only scans the allotted key file database
for the very first match of identical principal name.
The second function adds the identity of realms as
matching condition.

My point is that it is fairly natural to expect
shishi_hostkeys_for_server() to be looking for
the specified principal name paired with the
system default realm.  Since this is not how the
implementation works, the documentation should be
clearified, or the code should possibly be adjusted
to take care of this matter.

Best regards,
  Mats Erik Andersson

_______________________________________________
Help-shishi mailing list
Help-shishi@gnu.org
https://lists.gnu.org/mailman/listinfo/help-shishi

Reply via email to