8000 sftp: optional known_hosts host key verification by maratsh · Pull Request #1660 · Altinity/clickhouse-backup · GitHub
[go: up one dir, main page]

Skip to content

sftp: optional known_hosts host key verification - #1660

Open
maratsh wants to merge 1 commit into
Altinity:masterfrom
maratsh:sftp-known-hosts
Open

maratsh wants to merge 1 commit into
Altinity:masterfrom
maratsh:sftp-known-hosts

Conversation

@maratsh
@maratsh maratsh commented Nov 2, 2026
Copy link
Copy Markdown

Adds sftp.known_hosts / SFTP_KNOWN_HOSTS. When set, the SSH client verifies the server key against that file (golang.org/x/crypto/ssh/knownhosts) and limits HostKeyAlgorithms to the pinned key types. Unset keeps the current behaviour (InsecureIgnoreHostKey).

Adds sftp.known_hosts / SFTP_KNOWN_HOSTS. When set, the SSH client verifies
the server key against that file (golang.org/x/crypto/ssh/knownhosts) and
limits HostKeyAlgorithms to the pinned key types. Unset keeps the current
behaviour (InsecureIgnoreHostKey).
@Slach Slach added this to the 2.8.4 milestone Nov 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

0