• Darren Tucker's avatar
    - djm@cvs.openbsd.org 2009/08/27 17:44:52 · 893d7354
    Darren Tucker authored
         [authfd.c ssh-add.c authfd.h]
         Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
         when the agent refuses the constrained add request. This was a useful
         migration measure back in 2002 when constraints were new, but just
         adds risk now.
         bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@
authfd.h 3.12 KB