diff options
| author |   djm <djm@openbsd.org> | 2010-05-11 02:58:04 +0000 |
|---|---|---|
| committer | djm <djm@openbsd.org> | 2010-05-11 02:58:04 +0000 |
| commit | 030c06daf9564bc5fdb1ecf4429cd0d151561113 (patch) | |
| tree | 1244d4992b427326d1b45c36b51722c18da11c63 | |
| parent | unifdef INTELDRM_GEM. (diff) | |
| download | wireguard-openbsd-030c06daf9564bc5fdb1ecf4429cd0d151561113.tar.xz wireguard-openbsd-030c06daf9564bc5fdb1ecf4429cd0d151561113.zip | |
don't accept certificates marked as "cert-authority" here; ok markus@
| -rw-r--r-- | usr.bin/ssh/auth-rsa.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/usr.bin/ssh/auth-rsa.c b/usr.bin/ssh/auth-rsa.c index 2c8277dcd7e..43022b00de8 100644 --- a/usr.bin/ssh/auth-rsa.c +++ b/usr.bin/ssh/auth-rsa.c @@ -1,4 +1,4 @@ -/* $OpenBSD: auth-rsa.c,v 1.75 2010/04/16 01:47:26 djm Exp $ */ +/* $OpenBSD: auth-rsa.c,v 1.76 2010/05/11 02:58:04 djm Exp $ */ /* * Author: Tatu Ylonen <ylo@cs.hut.fi> * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland @@ -253,7 +253,8 @@ auth_rsa_key_allowed(struct passwd *pw, BIGNUM *client_n, Key **rkey) */ if (!auth_parse_options(pw, key_options, file, linenum)) continue; - + if (key_is_cert_authority) + continue; /* break out, this key is allowed */ allowed = 1; break; |