Doc updates

diff --git a/ChangeLog b/ChangeLog
index e5fdd6b0be3bf0915ad61c927d04b09509aff9db..26adf6e687f74827d9a60508c5bb84038279db1e 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -25,6 +25,7 @@
    Niels Kristian Bech Jensen <nkbj@image.dk>
  - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
  - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
+ - Release 1.2pre15
 
 19991124
  - Merged very large OpenBSD source code reformat

diff --git a/UPGRADING b/UPGRADING
index b1c0b9da39592b07663472fb41f77f44b2b6f759..f9732cf5329800d669c89ee90fd520e3dbc22add 100644 (file)
--- a/UPGRADING
+++ b/UPGRADING
@@ -33,3 +33,15 @@ Commercial SSH controlled logging using the "QuietMode" and
 logging options "SyslogFacility" and "LogLevel". See the sshd manual
 page for details.
 
+4. Warning messages about key lengths
+
+Commercial SSH's ssh-keygen program contained a bug which caused it to
+occasionally generate RSA keys which had their Most Significant Bit
+(MSB) unset. Such keys were advertised as being full-length, but are
+actually only half as secure.
+
+OpenSSH will print warning messages when it encounters such keys. To
+rid yourself of these message, edit you known_hosts files and replace
+the incorrect key length (usually "1024") with the correct key length
+(usually "1023").
+