[openssh-commits] [openssh] 01/01: upstream: process agent requests for RSA certificate private keys using

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch V_8_0
in repository openssh.

commit be1da16e49da78a914dc2013cb664c0b4ea07199
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Jun 14 03:51:47 2019 +0000

    upstream: process agent requests for RSA certificate private keys using
    
    correct signature algorithm when requested. Patch from Jakub Jelen in bz3016
    ok dtucker markus
    
    OpenBSD-Commit-ID: 61f86efbeb4a1857a3e91298c1ccc6cf49b79624
---
 ssh-agent.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ssh-agent.c b/ssh-agent.c
index d06ecfd9..8e5550ac 100644
--- a/ssh-agent.c
+++ b/ssh-agent.c
@@ -269,6 +269,11 @@ agent_decode_alg(struct sshkey *key, u_int flags)
 			return "rsa-sha2-256";
 		else if (flags & SSH_AGENT_RSA_SHA2_512)
 			return "rsa-sha2-512";
+	} else if (key->type == KEY_RSA_CERT) {
+		if (flags & SSH_AGENT_RSA_SHA2_256)
+			return "rsa-sha2-256-cert-v01 at openssh.com";
+		else if (flags & SSH_AGENT_RSA_SHA2_512)
+			return "rsa-sha2-512-cert-v01 at openssh.com";
 	}
 	return NULL;
 }

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.