| Summary: | sshd_config docs for CASignatureAlgorithms don't mention the '+' argument | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Portable OpenSSH | Reporter: | Walter <wgoulet> | ||||
| Component: | sshd | Assignee: | Assigned to nobody <unassigned-bugs> | ||||
| Status: | CLOSED FIXED | ||||||
| Severity: | trivial | CC: | djm, dtucker, wgoulet | ||||
| Priority: | P5 | ||||||
| Version: | 8.2p1 | ||||||
| Hardware: | All | ||||||
| OS: | All | ||||||
| Bug Depends on: | |||||||
| Bug Blocks: | 3302 | ||||||
| Attachments: |
|
||||||
Created attachment 3540 [details]
Patched sshd_config file
Adds additional commentary on use of modifiers to CASignatureAlgorithm list.
I have added some text to the manual pages to describe +/- here. Thank you for the fix! closing bugs resolved before openssh-8.9 |
Hi, The CASignatureAlgorithms config line in sshd_config acts the same as the Ciphers and HostSignatureAlgorithms in that you can add additional algorithms to the list by prepending the algorithm name with a '+'. But the documentation does not make this clear. Suggest adding additional description text like the following: If the specified list begins with a ‘+’ character, then the specified algorithms will be appended to the default set instead of replacing them. If the specified list begins with a ‘-’ character, then the specified algorithms (including wildcards) will be removed from the default set instead of replacing them. If the specified list begins with a ‘^’ character, then the specified algorithms will be placed at the head of the default set. Thanks, Walter