tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

- markus@cvs.openbsd.org 2003/03/13 11:44:50 

[ssh-agent.c]
     ssh-agent is similar to ssh-keysign (allows other processes to use
     private rsa keys). however, it gets key over socket and not from
     a file, so we have to do blinding here as well.
This commit is contained in:
Damien Miller 2003-03-15 11:37:09 +11:00
parent ed33d3b4d2
commit c51d0735a4
2 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ChangeLog
View File

@ -3,6 +3,11 @@
- markus@cvs.openbsd.org 2003/03/13 11:42:19 - markus@cvs.openbsd.org 2003/03/13 11:42:19
[authfile.c ssh-keysign.c] [authfile.c ssh-keysign.c]
move RSA_blinding_on to generic key load method move RSA_blinding_on to generic key load method
- markus@cvs.openbsd.org 2003/03/13 11:44:50
[ssh-agent.c]
ssh-agent is similar to ssh-keysign (allows other processes to use
private rsa keys). however, it gets key over socket and not from
a file, so we have to do blinding here as well.
20030310 20030310
- (djm) OpenBSD CVS Sync - (djm) OpenBSD CVS Sync
@ -1209,4 +1214,4 @@
save auth method before monitor_reset_key_state(); bugzilla bug #284; save auth method before monitor_reset_key_state(); bugzilla bug #284;
ok provos@ ok provos@
$Id: ChangeLog,v 1.2628 2003/03/15 00:36:18 djm Exp $ $Id: ChangeLog,v 1.2629 2003/03/15 00:37:09 djm Exp $

13
ssh-agent.c
View File

@ -35,7 +35,7 @@
#include "includes.h" #include "includes.h"
#include "openbsd-compat/sys-queue.h" #include "openbsd-compat/sys-queue.h"
RCSID("$OpenBSD: ssh-agent.c,v 1.107 2003/01/23 13:50:27 markus Exp $"); RCSID("$OpenBSD: ssh-agent.c,v 1.108 2003/03/13 11:44:50 markus Exp $");
#include <openssl/evp.h> #include <openssl/evp.h>
#include <openssl/md5.h> #include <openssl/md5.h>
@ -483,6 +483,17 @@ process_add_identity(SocketEntry *e, int version)
} }
break; break;
} }
/* enable blinding */
switch (k->type) {
case KEY_RSA:
case KEY_RSA1:
if (RSA_blinding_on(k->rsa, NULL) != 1) {
error("process_add_identity: RSA_blinding_on failed");
key_free(k);
goto send;
}
break;
}
comment = buffer_get_string(&e->request, NULL); comment = buffer_get_string(&e->request, NULL);
if (k == NULL) { if (k == NULL) {
xfree(comment); xfree(comment);