Just discovered that ssh/dh.c interprets the /etc/moduli file in a slightly different way from the documentation, due to an historic accident (an off by 1 error) by the OpenSSH coder. Easier to change the documention than the installed base ;-) [I'm the original author, as /etc/moduli was originally used in Photuris.]
[The attachment feature didn't work, at least on the web interface.] [NetBSD patch] Index: moduli.5 =================================================================== RCS file: /cvsroot/src/crypto/dist/ssh/moduli.5,v retrieving revision 1.7 diff -r1.7 moduli.5 133c133 < Specifies the number of significant bits. --- > Specifies the number of the most significant bit (0 to M).
thanks, fix for the next release.
Mass change of RESOLVED bugs to CLOSED