ssh-agent and id_dsa

Lutz Jaenicke Lutz.Jaenicke at aet.TU-Cottbus.DE
Wed Feb 21 09:35:23 EST 2001


On Tue, Feb 20, 2001 at 10:58:37PM +0100, Markus Friedl wrote:
> On Tue, Feb 20, 2001 at 11:35:36AM +0100, Lutz Jaenicke wrote:
> > Hmm, you tend to ask difficult questions...
> 
> well, it does not remember the key.
> 
> however, the problems you see are due to the fact that
> protocol 1 and 2 are different :)
> 
> perhaps i add handling of  SSH2_MSG_USERAUTH_PK_OK to the
> ssh client, but i'm not sure. 

We'll see :-)

> the ssh client uses just the public key to check whether the
> server will accept the 'indentity' file. currently in ssh2 you need
> access to the private key, this is why you will be asked about
> the passphrase. with SSH2_MSG_USERAUTH_PK_OK you need the passphrase
> only if the server accepts the public key.

Ah, thanks for clearing this up. sshconnect1.c:99 says:
			key_free(key);
so it would have been ... "surprising" to find it actually reused...

Best regards,
	Lutz
-- 
Lutz Jaenicke                             Lutz.Jaenicke at aet.TU-Cottbus.DE
BTU Cottbus               http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik                  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus              Fax. +49 355 69-4153





More information about the openssh-unix-dev mailing list