Thomas Pike c184b031bd Provide mitigation options for SSH redirection vulnerability ...

The less intrusive options that give most immediate benefit for least
cost are enabled by default:
* Prevent server admins resetting SSH host key
* Block sync if multiple servers have the same SSH host key

An additional option for improved security is included to provide
hostname verification, either based on `hostname -f` or on an explicitly
defined '.hostnames' file.

Resolves: SSH redirection security issue reported by Tobias Josefowitz
of Opera Software

2017-11-08 12:36:26 +01:00

..

ldap_update.php

Set a value for email when creating keys-sync account

2017-08-30 18:27:01 +02:00

pubkey_update.php

Initial public commit

2017-06-06 16:07:08 +02:00

sync-common.php

Initial public commit

2017-06-06 16:07:08 +02:00

sync.php

Provide mitigation options for SSH redirection vulnerability

2017-11-08 12:36:26 +01:00

syncd.php

keys-sync service installation fixes

2017-08-31 01:51:33 +02:00