Simon Vallet wrote:
> we're currently considering making use of RFC4255 SSHFP records,
> but are hitting a problem with a 4.4p1 client running on Tru64 5.1A:
>
> [...]
> debug3: verify_host_key_dns
> DNS lookup error: out of memory
> [...]
> No matching host key fingerprint found in DNS.
>
> A 4.3p2 linux client gives the following :
> [...]
> debug3: verify_host_key_dns
> debug1: found 1 insecure fingerprints in DNS
> debug1: matching host key fingerprint found in DNS
> [...]
> Matching host key fingerprint found in DNS.
>
> Any idea on the cause of the "out of memory error" ?
A brief look at the code shows that error as occurring when
getrrsetbyname fails. Does Tru64 have its own or is it using the one in
openbsd-compat? (grep GETRRSET config.h)
Also, are ERRSET_SUCCESS and/or ERRSET_NOMEMORY defined in the system
headers?
--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
|