stricter UpdateHostkey signature verification logic on the client-
authordjm <djm@openbsd.org>
Thu, 6 Jan 2022 21:57:28 +0000 (21:57 +0000)
committerdjm <djm@openbsd.org>
Thu, 6 Jan 2022 21:57:28 +0000 (21:57 +0000)
commitbf7c6ad40037da668eed9d766d9bd9308b829b3c
tree38173f7b23018825c5e21263dbb82459644000a6
parent3c6a04dd12805e3f29b5b603b3369a343162f698
stricter UpdateHostkey signature verification logic on the client-
side. Require RSA/SHA2 signatures for RSA hostkeys except when
RSA/SHA1 was explicitly negotiated during initial KEX; bz3375

ok markus@
usr.bin/ssh/clientloop.c