tyler.durden/openssh-portable
1
0
Fork 0
mirror of https://github.com/PowerShell/openssh-portable.git synced 2025-07-27 15:54:22 +02:00
Code Issues Packages Projects Releases Wiki Activity

- markus@cvs.openbsd.org 2010/09/02 16:07:25

Browse Source 
[ssh-keygen.c]
     permit -b 256, 384 or 521 as key size for ECDSA; ok djm@
This commit is contained in:
Damien Miller 2010-09-10 11:16:37 +10:00
parent 0f2635884c
commit 5773794d55
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@ -18,6 +18,9 @@
- naddy@cvs.openbsd.org 2010/09/01 15:21:35 - naddy@cvs.openbsd.org 2010/09/01 15:21:35
[servconf.c] [servconf.c]
pick up ECDSA host key by default; ok djm@ pick up ECDSA host key by default; ok djm@
- markus@cvs.openbsd.org 2010/09/02 16:07:25
[ssh-keygen.c]
permit -b 256, 384 or 521 as key size for ECDSA; ok djm@
20100831 20100831
- OpenBSD CVS Sync - OpenBSD CVS Sync

6
ssh-keygen.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: ssh-keygen.c,v 1.201 2010/08/31 12:33:38 djm Exp $ */ /* $OpenBSD: ssh-keygen.c,v 1.202 2010/09/02 16:07:25 markus Exp $ */
/* /*
* Author: Tatu Ylonen <ylo@cs.hut.fi> * Author: Tatu Ylonen <ylo@cs.hut.fi>
* Copyright (c) 1994 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland * Copyright (c) 1994 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@ -1825,7 +1825,7 @@ main(int argc, char **argv)
"O:C:r:g:R:T:G:M:S:s:a:V:W:z:")) != -1) { "O:C:r:g:R:T:G:M:S:s:a:V:W:z:")) != -1) {
switch (opt) { switch (opt) {
case 'b': case 'b':
bits = (u_int32_t)strtonum(optarg, 768, 32768, &errstr); bits = (u_int32_t)strtonum(optarg, 256, 32768, &errstr);
if (errstr) if (errstr)
fatal("Bits has bad value %s (%s)", fatal("Bits has bad value %s (%s)",
optarg, errstr); optarg, errstr);
@ -2125,6 +2125,8 @@ main(int argc, char **argv)
} }
if (type == KEY_DSA && bits != 1024) if (type == KEY_DSA && bits != 1024)
fatal("DSA keys must be 1024 bits"); fatal("DSA keys must be 1024 bits");
else if (type != KEY_ECDSA && bits < 768)
fatal("Key must at least be 768 bits");
else if (type == KEY_ECDSA && key_ecdsa_bits_to_nid(bits) == -1) else if (type == KEY_ECDSA && key_ecdsa_bits_to_nid(bits) == -1)
fatal("Invalid ECDSA key length - valid lengths are " fatal("Invalid ECDSA key length - valid lengths are "
"256, 384 or 521 bits"); "256, 384 or 521 bits");