Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PR #8257/af1c5dd7 backport][stable-8] Add accept-new as valid option for ssh_config host key checking #8267

Conversation

patchback[bot]
Copy link

@patchback patchback bot commented Apr 21, 2024

This is a backport of PR #8257 as merged into main (af1c5dd).

SUMMARY

Fixes #8177

ISSUE TYPE
  • Feature Pull Request
COMPONENT NAME

ssh_config

ADDITIONAL INFORMATION

As described in #8177

OpenSSH 7.6 introduced a new value accept-new for StrictHostKeyChecking which allows for automatically adding fingerprints for new hosts in ~/.ssh/know_hosts but still block the connection attempt if the fingerprint changes (eg. MITM attack).

This PR adds this value to the valid settings for strict_host_key_checking

* Add accept-new as valid option for host key checking

* Add changelog fragment for #8257

* Apply suggestions from code review

Co-authored-by: Felix Fontein <felix@fontein.de>

---------

Co-authored-by: Felix Fontein <felix@fontein.de>
(cherry picked from commit af1c5dd)
@ansibullbot
Copy link
Collaborator

@ansibullbot ansibullbot added backport feature This issue/PR relates to a feature request module module new_contributor Help guide this first time contributor plugins plugin (any type) labels Apr 21, 2024
@felixfontein felixfontein merged commit bc829f6 into stable-8 Apr 21, 2024
131 of 132 checks passed
@felixfontein felixfontein deleted the patchback/backports/stable-8/af1c5dd7853df3f99c7ee2dfec13df00e7c2dc74/pr-8257 branch April 21, 2024 18:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature This issue/PR relates to a feature request module module new_contributor Help guide this first time contributor plugins plugin (any type)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants