[Bug 2799] RSA Signatures using SHA2 provided by different ssh-agent are not properly verified

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Fri Dec 8 17:56:11 AEDT 2017


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
   Attachment #3100|0                           |1
        is obsolete|                            |

--- Comment #5 from Damien Miller <djm at mindrot.org> ---
Created attachment 3104
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3104&action=edit
check signature type at verification time

this checks signature types for RSA non-certificate keys, including in

I'm not sure how best to deal with certificate types. E.g. a
ssh-rsa-cert-v01 at openssh.com key could yield any signature type. I
guess I could add explicit ssh-rsa-shaXXX-cert-v01 at openssh.com types.

You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

More information about the openssh-bugs mailing list