Bug#481853: [openssh-client] "ssh-vulnkey -a" does not see the weak keys of the user

[Colin Watson <cjwatson@debian.org>]

On Mon, May 19, 2008 at 01:03:45AM +0100, David wrote:
> I have the packages openssh-blacklist and openssh-blacklist-extra installed.
> 
> 
> If I run "ssh-vulnkey -a" I get no output, either by running it as user or
> as root.
> 
> Nevertheless:
> 
> # perl dowkd.pl user
> /home/username/.ssh/known_hosts:1: weak key (OpenSSH/rsa/2048)
> /home/username/.ssh/known_hosts:2: weak key (OpenSSH/rsa/2048)
> summary: keys found: 2, weak keys: 2
> 
> I am deleting the file /home/username/.ssh/known_hosts right now, so I am
> afraid it will not be available for debugging :-(

I'm not sure how I'm supposed to do anything with this bug, then ... it
worked for me. Can you give me any useful information at all?

Cheers,

-- 
Colin Watson                                       [cjwatson@debian.org]