diff options
| author | Damien Miller <djm@mindrot.org> | 2003-03-15 11:36:18 +1100 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2003-03-15 11:36:18 +1100 |
| commit | ed33d3b4d229b0e815f43d8a3192047ef161dcd7 (patch) | |
| tree | 26aadf53af8d7550a2e9dd8e7252d1aedca2424f /authfile.c | |
| parent | c1365e19b0f5ae8d05b697cd40d1fb4f664112b6 (diff) | |
| download | openssh-git-ed33d3b4d229b0e815f43d8a3192047ef161dcd7.tar.gz | |
- (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/03/13 11:42:19
[authfile.c ssh-keysign.c]
move RSA_blinding_on to generic key load method
Diffstat (limited to 'authfile.c')
| -rw-r--r-- | authfile.c | 13 |
1 files changed, 12 insertions, 1 deletions
@@ -36,7 +36,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: authfile.c,v 1.51 2002/11/15 10:03:09 fgsch Exp $"); +RCSID("$OpenBSD: authfile.c,v 1.52 2003/03/13 11:42:18 markus Exp $"); #include <openssl/err.h> #include <openssl/evp.h> @@ -421,6 +421,12 @@ key_load_private_rsa1(int fd, const char *filename, const char *passphrase, rsa_generate_additional_parameters(prv->rsa); buffer_free(&decrypted); + + /* enable blinding */ + if (RSA_blinding_on(prv->rsa, NULL) != 1) { + error("key_load_private_rsa1: RSA_blinding_on failed"); + goto fail; + } close(fd); return prv; @@ -460,6 +466,11 @@ key_load_private_pem(int fd, int type, const char *passphrase, #ifdef DEBUG_PK RSA_print_fp(stderr, prv->rsa, 8); #endif + if (RSA_blinding_on(prv->rsa, NULL) != 1) { + error("key_load_private_pem: RSA_blinding_on failed"); + key_free(prv); + prv = NULL; + } } else if (pk->type == EVP_PKEY_DSA && (type == KEY_UNSPEC||type==KEY_DSA)) { prv = key_new(KEY_UNSPEC); |