[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Config parser doesn't accept multiple IdentityFile lines


This workaround does not work either:

IdentityFile /path/to/id
Host somehost
    IdentityFile /path/to/other_id

The host-specific IdentityFile is ignored as well if a global one is present. The seen flags should probably be reset when encountering a "Host" or "Match" keyword (in addition to the suggestion below).

Regards
Tilo

Am 28.01.21 um 14:32 schrieb Tilo Eckert:
Hi,

~/.ssh/config can contain multiple lines with the "IdentityFile" keyword to add multiple keys to try in public key authentication.

The libssh config parser ignores all but the first IdentityFile line, resulting in failed authentication if the key that is accepted by the server is not the first.

The issue seems to be the "seen" array in ssh_config_parse_line() which already has Host, Match and Include as exceptions. Probably just need to add IdentityFile.

Regards
Tilo


Follow-Ups:
Re: Config parser doesn't accept multiple IdentityFile linesJakub Jelen <jjelen@xxxxxxxxxx>
References:
Config parser doesn't accept multiple IdentityFile linesTilo Eckert <tilo.eckert@xxxxxxx>
Archive administrator: postmaster@lists.cynapses.org