Re: SSHFP with EDNS0/DNSSEC

2017-09-07 Thread Jeremie Courreges-Anglas
On Thu, Sep 07 2017, Andreas Bartelt wrote: > On 07/12/17 18:49, Jeremie Courreges-Anglas wrote: >> Eric Faurot writes: >> >>> On Wed, Jul 12, 2017 at 07:45:36AM +0200, Christian Barthel wrote: Hi, earlier this year, jca@ worked on support for DNSSEC and the EDNS0 extension [1

Re: SSHFP with EDNS0/DNSSEC

2017-09-07 Thread Andreas Bartelt
On 07/12/17 18:49, Jeremie Courreges-Anglas wrote: Eric Faurot writes: On Wed, Jul 12, 2017 at 07:45:36AM +0200, Christian Barthel wrote: Hi, earlier this year, jca@ worked on support for DNSSEC and the EDNS0 extension [1] and committed this work at [2] (thanks!). I tried this with SSHFP re

Re: SSHFP with EDNS0/DNSSEC

2017-07-12 Thread Jeremie Courreges-Anglas
Eric Faurot writes: > On Wed, Jul 12, 2017 at 07:45:36AM +0200, Christian Barthel wrote: >> Hi, >> >> earlier this year, jca@ worked on support for DNSSEC and the EDNS0 >> extension [1] and committed this work at [2] (thanks!). I tried this >> with SSHFP records to check authenticity of hosts

Re: SSHFP with EDNS0/DNSSEC

2017-07-12 Thread Eric Faurot
On Wed, Jul 12, 2017 at 07:45:36AM +0200, Christian Barthel wrote: > Hi, > > earlier this year, jca@ worked on support for DNSSEC and the EDNS0 > extension [1] and committed this work at [2] (thanks!). I tried this > with SSHFP records to check authenticity of hosts with DNSSEC; but ssh > report

SSHFP with EDNS0/DNSSEC

2017-07-11 Thread Christian Barthel
Hi, earlier this year, jca@ worked on support for DNSSEC and the EDNS0 extension [1] and committed this work at [2] (thanks!). I tried this with SSHFP records to check authenticity of hosts with DNSSEC; but ssh reported that the hostkey fingerprints were insecure. I am using this configurati