Converting old F-Secur SSH-keys

Markus Friedl markus at openbsd.org
Mon Oct 22 18:52:36 EST 2001


On Sun, Oct 21, 2001 at 10:13:40PM +0200, Martin Forssen wrote:
> I just tries to convert an old ssh2 dsa-key generated by F-Secure SSH in
> 1998. The problem is that the base64-encoding of this key is bad.

what exactly?

could i get the key for my test suite?

> They
> key works just fine when using F-Secure SSH but openssh will not convert
> it.
> 
> My question now is if people think it is worth fixing this, and if it is
> where should it be fixed? One could either fixed the base64-routines to
> be more tolerant, but that only applies to the portable release and I do
> not know how it would work on openbsd. The other solution is to have
> something which checks the data before decoding it and fixes any
> problems, this is more ugly but would work on all platforms. Opinions?

since openssh 'should' use the base64 API of the platform, i think
the checking at the higher level should be preferred.



More information about the openssh-unix-dev mailing list