diff options
| author | Sebastian Deiss <sdeiss@haw-landshut.de> | 2014-06-11 12:22:45 +0200 |
|---|---|---|
| committer | Anselm Kruis <a.kruis@science-computing.de> | 2014-07-14 11:46:28 +0200 |
| commit | de0d52851a9dc5b3b53fd52298f29c3d79db6910 (patch) | |
| tree | 2b1eb187319933d84b844d0685c344f5559e9be1 /paramiko/ssh_gss.py | |
| parent | f17c2afbe0a98d5c2b80e5f16dbf47b9eb7370d0 (diff) | |
| download | paramiko-de0d52851a9dc5b3b53fd52298f29c3d79db6910.tar.gz | |
Don't check for the qop value at MIC verification
Diffstat (limited to 'paramiko/ssh_gss.py')
| -rw-r--r-- | paramiko/ssh_gss.py | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/paramiko/ssh_gss.py b/paramiko/ssh_gss.py index 58a64a56..03c5dcc0 100644 --- a/paramiko/ssh_gss.py +++ b/paramiko/ssh_gss.py @@ -384,14 +384,16 @@ class _SSH_GSSAPI(_SSH_GSSAuth): self._username, self._service, self._auth_method) - mic_status = self._gss_srv_ctxt.verify_mic(mic_field, - mic_token) + try: + self._gss_srv_ctxt.verify_mic(mic_field, + mic_token) + except gssapi.BadSignature: + raise Exception("GSS-API MIC check failed.") else: # for key exchange with gssapi-keyex # client mode - mic_status = self._gss_ctxt.verify_mic(self._session_id, - mic_token) - return mic_status + self._gss_ctxt.verify_mic(self._session_id, + mic_token) @property def credentials_delegated(self): |