OpenSSH 2.3

Markus Friedl markus at openbsd.org
Sat Nov 10 23:47:19 EST 2001


On Fri, Nov 09, 2001 at 03:30:09PM +0100, Michael Mai wrote:
> Am I right to assume that g is part of the counterpart's sent public key, and if it does not match the remainder of the public key,
> the message "signature incorrect" may appear ??

the DSA/DSS pub key consists of
	(p,q,g,pub_key)
and all numbers need to match.

make sure that
the sig->s and sig->r match after dsa_sign and before
dsa_verify on both client and server. same for
(p,q,g,pub_key) on both machines.



More information about the openssh-unix-dev mailing list