CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/15 18:16:52
Modified files:
usr.bin/ssh : auth.h auth2-pubkey.c auth2.c servconf.c
servconf.h sshd_config.5
Log message:
Account pubkey checks separately to auth attempts
Add a `PubkeyOptions max-pk-ok:nnnn` option to allow PK_OK tests (asking
whether the server might accept a given public key) that do not count
against MaxAuthTries, defaulting to 6 attempts.
After these attempts are exhausted, futher attempts count as failed
authentications against MaxAuthTries.
ok markus, deraadt
