From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 7 Nov 2016 11:54:40 +0000 (+0100)
Subject: ssh: check md5 fingerprints case insensitively (regression)
X-Git-Tag: curl-7_52_0~150
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=50aded1cd4bb751cad52c39c4fa1f06ebc5e133e;p=thirdparty%2Fcurl.git

ssh: check md5 fingerprints case insensitively (regression)

Revert the change from ce8d09483eea but use the new function

Reported-by: Kamil Dudka
Bug: https://github.com/curl/curl/commit/ce8d09483eea2fcb1b50e323e1a8ed1f3613b2e3#commitcomment-19666146
---

diff --git a/lib/ssh.c b/lib/ssh.c
index 43c82839d3..0df030d27f 100644
--- a/lib/ssh.c
+++ b/lib/ssh.c
@@ -676,7 +676,7 @@ static CURLcode ssh_check_fingerprint(struct connectdata *conn)
    * against a known fingerprint, if available.
    */
   if(pubkey_md5 && strlen(pubkey_md5) == 32) {
-    if(!fingerprint || strcmp(md5buffer, pubkey_md5)) {
+    if(!fingerprint || !strcasecompare(md5buffer, pubkey_md5)) {
       if(fingerprint)
         failf(data,
             "Denied establishing ssh session: mismatch md5 fingerprint. "