[src/trunk]: src/crypto/dist/ssh Bring closer to reality.

[simonb <simonb%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/ecfb2d71a210
branches:  trunk
changeset: 573757:ecfb2d71a210
user:      simonb <simonb%NetBSD.org@localhost>
date:      Mon Feb 07 12:26:56 2005 +0000

description:
Bring closer to reality.

diffstat:

 crypto/dist/ssh/moduli.5 |  11 ++++++++---
 1 files changed, 8 insertions(+), 3 deletions(-)

diffs (36 lines):

diff -r 9d20db918292 -r ecfb2d71a210 crypto/dist/ssh/moduli.5
--- a/crypto/dist/ssh/moduli.5  Mon Feb 07 11:57:38 2005 +0000
+++ b/crypto/dist/ssh/moduli.5  Mon Feb 07 12:26:56 2005 +0000
@@ -1,4 +1,4 @@
-.\"    $NetBSD: moduli.5,v 1.8 2003/07/04 21:56:48 wiz Exp $
+.\"    $NetBSD: moduli.5,v 1.9 2005/02/07 12:26:56 simonb Exp $
 .\" $OpenBSD: moduli.5,v 1.7 2003/03/06 20:48:35 jmc Exp $
 .\"
 .\" Copyright 1997, 2000 William Allen Simpson <wsimpson%greendragon.com@localhost>
@@ -31,7 +31,7 @@
 .\"
 .\" Manual page, using -mandoc macros
 .\"
-.Dd July 28, 1997
+.Dd February 7, 2005
 .Dt MODULI 5
 .Os
 .Sh NAME
@@ -140,11 +140,16 @@
 .Fa Modulus : hex string .
 The prime modulus.
 .Pp
-The file is searched for moduli that meet the appropriate
+The file should be searched for moduli that meet the appropriate
 Time, Size and Generator criteria.
 When more than one meet the criteria,
 the selection should be weighted toward newer moduli,
 without completely disqualifying older moduli.
+.Pp
+Note that
+.Xr sshd 8
+uses only the Size criteria and then selects a modulus at random
+if more than one meet the Size criteria.
 .Sh FILES
 .Bl -tag -width /etc/moduli -compact
 .It Pa /etc/moduli