]> git.ipfire.org Git - thirdparty/openssh-portable.git/commit
upstream: better validate CASignatureAlgorithms in ssh_config and
authordjm@openbsd.org <djm@openbsd.org>
Wed, 21 Jun 2023 05:10:26 +0000 (05:10 +0000)
committerDamien Miller <djm@mindrot.org>
Wed, 21 Jun 2023 05:13:56 +0000 (15:13 +1000)
commitc1c2ca1365b3f7b626683690bd2c68265f6d8ffd
treee6a60fdd49b7b57cb35573cbcbbf305b517c0488
parent4e73cd0f4ab3e5b576c56cac9732da62c8fc0565
upstream: better validate CASignatureAlgorithms in ssh_config and

sshd_config.

Previously this directive would accept certificate algorithm names, but
these were unusable in practice as OpenSSH does not support CA chains.

part of bz3577; ok dtucker@

OpenBSD-Commit-ID: a992d410c8a78ec982701bc3f91043dbdb359912
readconf.c
servconf.c
sshkey.c
sshkey.h