[Bug 1765] Error message if key not first in authorized_keys file

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Wed May 12 23:47:24 EST 2010


https://bugzilla.mindrot.org/show_bug.cgi?id=1765

--- Comment #3 from Anders Liljegren <anders.liljegren at uadm.uu.se>  ---
Sorry!
The patch doesn't fix my problem. I had applied a couple of lines in
the wrong order. After I put them in the right order, according to your
patch, the problem the problem is back.

This is how I first patched the file. This version fixes my problem.

                if (key->type == KEY_RSA_CERT || key->type ==
KEY_DSA_CERT) {
                        if (auth_parse_options(pw, key_options, file,
                            linenum) != 1)
                                continue;
                        if (!key_is_cert_authority)
                                continue;
                        if (!key_equal(found,
key->cert->signature_key))
                                continue;
                        fp = key_fingerprint(found, SSH_FP_MD5,
                            SSH_FP_HEX);

This is how it looks after I applied it correctly. This does NOT fix my
problem.

                if (key->type == KEY_RSA_CERT || key->type ==
KEY_DSA_CERT) {
                        if (!key_equal(found,
key->cert->signature_key))
                                continue;
                        if (auth_parse_options(pw, key_options, file,
                            linenum) != 1)
                                continue;
                        if (!key_is_cert_authority)
                                continue;
                        fp = key_fingerprint(found, SSH_FP_MD5,
                            SSH_FP_HEX);

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list