tree e3bdc4facef48a89cd76fa793d9e70211b7ff8d2
parent 303af5803bd74bf05d375c04e1a83b40c30b2be5
author djm@openbsd.org <djm@openbsd.org> 1530712171 +0000
committer Damien Miller <djm@mindrot.org> 1530712312 +1000

upstream: repair PubkeyAcceptedKeyTypes (and friends) after RSA

signature work - returns ability to add/remove/specify algorithms by
wildcard.

Algorithm lists are now fully expanded when the server/client configs
are finalised, so errors are reported early and the config dumps
(e.g. "ssh -G ...") now list the actual algorithms selected.

Clarify that, while wildcards are accepted in algorithm lists, they
aren't full pattern-lists that support negation.

(lots of) feedback, ok markus@

OpenBSD-Commit-ID: a8894c5c81f399a002f02ff4fe6b4fa46b1f3207