diff options
| author | Ben Lindstrom <mouring@eviladmin.org> | 2001-06-25 04:37:41 +0000 |
|---|---|---|
| committer | Ben Lindstrom <mouring@eviladmin.org> | 2001-06-25 04:37:41 +0000 |
| commit | d6481ea49ab5999e00cc2a2fd7b6a1d779f4c598 (patch) | |
| tree | c89fd81312f3b95fe22bcaad56cdb1b2a2dd822a /kexdh.c | |
| parent | b710f788f173a80a9a24fa041558087b56bb7fac (diff) | |
| download | openssh-git-d6481ea49ab5999e00cc2a2fd7b6a1d779f4c598.tar.gz | |
- markus@cvs.openbsd.org 2001/06/23 02:34:33
[kexdh.c kexgex.c kex.h pathnames.h readconf.c servconf.h ssh.1
sshconnect1.c sshconnect2.c sshconnect.c sshconnect.h sshd.8]
get rid of known_hosts2, use it for hostkey lookup, but do not
modify.
Diffstat (limited to 'kexdh.c')
| -rw-r--r-- | kexdh.c | 9 |
1 files changed, 5 insertions, 4 deletions
@@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: kexdh.c,v 1.4 2001/06/07 20:23:04 markus Exp $"); +RCSID("$OpenBSD: kexdh.c,v 1.5 2001/06/23 02:34:29 markus Exp $"); #include <openssl/crypto.h> #include <openssl/bn.h> @@ -123,9 +123,10 @@ kexdh_client(Kex *kex) if (server_host_key == NULL) fatal("cannot decode server_host_key_blob"); - if (kex->check_host_key == NULL) - fatal("cannot check server_host_key"); - kex->check_host_key(server_host_key); + if (kex->verify_host_key == NULL) + fatal("cannot verify server_host_key"); + if (kex->verify_host_key(server_host_key) == -1) + fatal("server_host_key verification failed"); /* DH paramter f, server public DH key */ dh_server_pub = BN_new(); |