RepoMirrors
/
openssh
mirror of git://anongit.mindrot.org/openssh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Conditionalize ECDH methods in CA algos. 

When building against an OpenSSL configured without ECC, don't include
those algos in CASignatureAlgorithms.  ok djm@
This commit is contained in:
Darren Tucker 2019-05-17 10:50:29 +10:00
parent 5c8d14c512
commit 633703babf
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
myproposal.h
View File

@ -136,9 +136,7 @@
/* Not a KEX value, but here so all the algorithm defaults are together */
#define SSH_ALLOWED_CA_SIGALGS \
"ecdsa-sha2-nistp256," \
"ecdsa-sha2-nistp384," \
"ecdsa-sha2-nistp521," \
KEX_ECDH_METHODS \
"ssh-ed25519," \
"rsa-sha2-512," \
"rsa-sha2-256," \