https://bugs.kde.org/show_bug.cgi?id=470544

            Bug ID: 470544
           Summary: Many SSH config options are not respected
    Classification: Frameworks and Libraries
           Product: kio-extras
           Version: unspecified
          Platform: unspecified
                OS: Linux
            Status: REPORTED
          Severity: wishlist
          Priority: NOR
         Component: SFTP
          Assignee: plasma-b...@kde.org
          Reporter: voidpointertonull+bugskde...@gmail.com
  Target Milestone: ---

This wishlist item is about the generic problem of the user's SSH config file
options often not being respected.
Marked it as a wish only because most of the SFTP logic lives outside of the
project, so technically the problem is with an external project, but the issue
keeps plaguing KDE projects for end users as can be seen from bug reports.

The issue appears to be with libssh either being incredibly slow with
implementing config option support, or simply possibly ignoring what may be
seen as convenience options rarely used outside of interactive environments.
A few examples of options not supported (marked with "SOC_UNSUPPORTED" in
libssh):
- HashKnownHosts
- CheckHostIP
- HostKeyAlias

It seems like that most (easy to notice) issues are with how known_hosts is
handled, both ignoring already present entries, and littering the file with
new, redundant entries. This also presents a security issue as users of related
unsupported options have to go through the trust on first use procedure of
checking the identity of the SSH server again which is tempting to ignore due
to the fatigue of theoretically redundant checks being presented due to already
existing known_host entries not being matched.

A few examples of related bug reports:
- Bug 284643
- Bug 392903
- Bug 432143

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to