pass negotiated signing algorithm though to sshkey_verify() and
authordjm <djm@openbsd.org>
Mon, 18 Dec 2017 02:25:15 +0000 (02:25 +0000)
committerdjm <djm@openbsd.org>
Mon, 18 Dec 2017 02:25:15 +0000 (02:25 +0000)
commit28eeb9e1cbb72b5800aa282450ba52b6aed39e31
tree8886fcc628e61dac3ecb1bf59cefee93d587ac20
parentee642ea0683f74dde437e195e2c25df3f222668f
pass negotiated signing algorithm though to sshkey_verify() and
check that the negotiated algorithm matches the type in the
signature (only matters for RSA SHA1/SHA2 sigs). ok markus@
18 files changed:
usr.bin/ssh/auth2-hostbased.c
usr.bin/ssh/auth2-pubkey.c
usr.bin/ssh/clientloop.c
usr.bin/ssh/kexc25519c.c
usr.bin/ssh/kexdhc.c
usr.bin/ssh/kexecdhc.c
usr.bin/ssh/kexgexc.c
usr.bin/ssh/key.c
usr.bin/ssh/key.h
usr.bin/ssh/krl.c
usr.bin/ssh/monitor.c
usr.bin/ssh/monitor_wrap.c
usr.bin/ssh/monitor_wrap.h
usr.bin/ssh/serverloop.c
usr.bin/ssh/ssh-keygen.c
usr.bin/ssh/ssh-rsa.c
usr.bin/ssh/sshkey.c
usr.bin/ssh/sshkey.h