[Bug 1897744] [NEW] VerifyHostKeyDNS not working due to missing trust-ad flag

[Daniel von Obernitz]

Public bug reported:

Hi,

1)
Description:	Ubuntu 20.04.1 LTS
Release:	20.04

2)
systemd:        245.4-4ubuntu3.2

3)
I set VerifyHostKeyDNS to YES and hosts are automatically verified via sshfp.

4)
I still get the security question
Matching host key fingerprint found in DNS.
Are you sure you want to continue connecting (yes/no/[fingerprint])? 

The issue is known and fixed in systemd v246.
https://github.com/systemd/systemd/pull/16072

Best regards
Daniel

** Affects: systemd (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1897744

Title:
  VerifyHostKeyDNS not working due to missing trust-ad flag

Status in systemd package in Ubuntu:
  New

Bug description:
  Hi,

  1)
  Description:	Ubuntu 20.04.1 LTS
  Release:	20.04

  2)
  systemd:        245.4-4ubuntu3.2

  3)
  I set VerifyHostKeyDNS to YES and hosts are automatically verified via sshfp.

  4)
  I still get the security question
  Matching host key fingerprint found in DNS.
  Are you sure you want to continue connecting (yes/no/[fingerprint])? 

  The issue is known and fixed in systemd v246.
  https://github.com/systemd/systemd/pull/16072

  Best regards
  Daniel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1897744/+subscriptions