upstream: some magic for RSA-SHA2 checks

OpenBSD-Regress-ID: e5a9b11368ff6d86e7b25ad10ebe43359b471cd4
This commit is contained in:
djm@openbsd.org 2018-07-03 11:43:49 +00:00 committed by Damien Miller
parent 7d68e26294
commit 303af5803b
1 changed files with 8 additions and 1 deletions

View File

@ -1,4 +1,4 @@
# $OpenBSD: cert-hostkey.sh,v 1.15 2017/04/30 23:34:55 djm Exp $
# $OpenBSD: cert-hostkey.sh,v 1.16 2018/07/03 11:43:49 djm Exp $
# Placed in the Public Domain.
tid="certified host keys"
@ -14,6 +14,13 @@ for i in `$SSH -Q key`; do
continue
fi
case "$i" in
# Special treatment for RSA keys.
*rsa*cert*)
types="rsa-sha2-256-cert-v01@openssh.com,$i,$types"
types="rsa-sha2-512-cert-v01@openssh.com,$types";;
*rsa*)
types="$types,rsa-sha2-512,rsa-sha2-256,$i";;
# Prefer certificate to plain keys.
*cert*) types="$i,$types";;
*) types="$types,$i";;
esac