Match host certificates against host public keys, not private keys.
authordjm <djm@openbsd.org>
Sun, 6 Jun 2021 11:34:16 +0000 (11:34 +0000)
committerdjm <djm@openbsd.org>
Sun, 6 Jun 2021 11:34:16 +0000 (11:34 +0000)
commit90e3aeaa49fcbb4cb577ff5d666b4817a0bbc60a
tree76718f8a9d21076635519b2eb3ce2343919ff136
parent3e3c1da1cc368cb04244669e3e236c02ee937806
Match host certificates against host public keys, not private keys.
Allows use of certificates with private keys held in a ssh-agent.
Reported by Miles Zhou in bz3524; ok dtucker@
usr.bin/ssh/sshd.c