RepoMirrors/openssh
1
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2025-03-08 07:38:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

upstream: more debugging for UpdateHostKeys signature failures

Browse Source 
OpenBSD-Commit-ID: 1ee95f03875e1725df15d5e4bea3e73493d57d36
This commit is contained in:
djm@openbsd.org 2021-05-03 00:16:45 +00:00 committed by Damien Miller
parent 8e32e97e78
commit ac31aa3c63
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
clientloop.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: clientloop.c,v 1.360 2021/04/30 04:29:53 djm Exp $ */
/* $OpenBSD: clientloop.c,v 1.361 2021/05/03 00:16:45 djm Exp $ */
/*
* Author: Tatu Ylonen <ylo@cs.hut.fi>
* Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@ -2154,11 +2154,14 @@ client_global_hostkeys_private_confirm(struct ssh *ssh, int type,
*/
use_kexsigtype = kexsigtype == KEY_RSA &&
sshkey_type_plain(ctx->keys[i]->type) == KEY_RSA;
debug3_f("verify %s key %zu using %s sigalg",
sshkey_type(ctx->keys[i]), i,
use_kexsigtype ? ssh->kex->hostkey_alg : NULL);
if ((r = sshkey_verify(ctx->keys[i], sig, siglen,
sshbuf_ptr(signdata), sshbuf_len(signdata),
use_kexsigtype ? ssh->kex->hostkey_alg : NULL, 0,
NULL)) != 0) {
error_f("server gave bad signature for %s key %zu",
error_fr(r, "server gave bad signature for %s key %zu",
sshkey_type(ctx->keys[i]), i);
goto out;
}