- djm@cvs.openbsd.org 2010/03/05 02:58:11

     [auth.c]
     make the warning for a revoked key louder and more noticable

2 files changed, 6 insertions, 2 deletions

diff --git a/ChangeLog b/ChangeLog
index ee1804fd..25a0f871 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -20,6 +20,9 @@
      [auth-options.c ssh-keygen.c]
      "force-command" is not spelled "forced-command"; spotted by
      imorgan AT nas.nasa.gov
+   - djm@cvs.openbsd.org 2010/03/05 02:58:11
+     [auth.c]
+     make the warning for a revoked key louder and more noticable
  - (tim) [ssh-pkcs11.c] Fix "non-constant initializer" errors in older
    compilers. OK djm@
  - (djm) [ssh-rand-helper.c] declare optind, avoiding compilation failure
diff --git a/auth.c b/auth.c
index e680efbc..e8fbe9fd 100644
--- a/auth.c
+++ b/auth.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth.c,v 1.85 2010/03/04 10:36:03 djm Exp $ */
+/* $OpenBSD: auth.c,v 1.86 2010/03/05 02:58:11 djm Exp $ */
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
  *
@@ -604,7 +604,8 @@ auth_key_is_revoked(Key *key)
 	case 1:
 		/* Key revoked */
 		key_fp = key_fingerprint(key, SSH_FP_MD5, SSH_FP_HEX);
-		error("%s key %s is revoked", key_type(key), key_fp);
+		error("WARNING: authentication attempt with a revoked "
+		    "%s key %s ", key_type(key), key_fp);
 		xfree(key_fp);
 		return 1;
 	}