version 1.104, 2021/01/22 02:44:58 |
version 1.105, 2021/01/26 00:49:30 |
|
|
reason = "Certificate does not contain an authorized principal"; |
reason = "Certificate does not contain an authorized principal"; |
goto fail_reason; |
goto fail_reason; |
} |
} |
if (sshkey_cert_check_authority(key, 0, 0, |
if (sshkey_cert_check_authority(key, 0, 0, 0, |
keyopts->cert_principals == NULL ? pw->pw_name : NULL, &reason) != 0) |
keyopts->cert_principals == NULL ? pw->pw_name : NULL, &reason) != 0) |
goto fail_reason; |
goto fail_reason; |
|
|
|
|
} |
} |
if (use_authorized_principals && principals_opts == NULL) |
if (use_authorized_principals && principals_opts == NULL) |
fatal_f("internal error: missing principals_opts"); |
fatal_f("internal error: missing principals_opts"); |
if (sshkey_cert_check_authority(key, 0, 1, |
if (sshkey_cert_check_authority(key, 0, 1, 0, |
use_authorized_principals ? NULL : pw->pw_name, &reason) != 0) |
use_authorized_principals ? NULL : pw->pw_name, &reason) != 0) |
goto fail_reason; |
goto fail_reason; |
|
|