version 1.7, 2002/07/03 14:21:05 |
version 1.7.2.1, 2003/04/01 00:12:14 |
|
|
initialize_options(&options); |
initialize_options(&options); |
(void)read_config_file(_PATH_HOST_CONFIG_FILE, "", &options); |
(void)read_config_file(_PATH_HOST_CONFIG_FILE, "", &options); |
fill_default_options(&options); |
fill_default_options(&options); |
if (options.hostbased_authentication != 1) |
if (options.enable_ssh_keysign != 1) |
fatal("Hostbased authentication not enabled in %s", |
fatal("ssh-keysign not enabled in %s", |
_PATH_HOST_CONFIG_FILE); |
_PATH_HOST_CONFIG_FILE); |
|
|
if (key_fd[0] == -1 && key_fd[1] == -1) |
if (key_fd[0] == -1 && key_fd[1] == -1) |
|
|
keys[i] = key_load_private_pem(key_fd[i], KEY_UNSPEC, |
keys[i] = key_load_private_pem(key_fd[i], KEY_UNSPEC, |
NULL, NULL); |
NULL, NULL); |
close(key_fd[i]); |
close(key_fd[i]); |
if (keys[i] != NULL && keys[i]->type == KEY_RSA) { |
|
if (RSA_blinding_on(keys[i]->rsa, NULL) != 1) { |
|
error("RSA_blinding_on failed"); |
|
key_free(keys[i]); |
|
keys[i] = NULL; |
|
} |
|
} |
|
if (keys[i] != NULL) |
if (keys[i] != NULL) |
found = 1; |
found = 1; |
} |
} |
|
|
fatal("no hostkey found"); |
fatal("no hostkey found"); |
|
|
buffer_init(&b); |
buffer_init(&b); |
if (msg_recv(STDIN_FILENO, &b) < 0) |
if (ssh_msg_recv(STDIN_FILENO, &b) < 0) |
fatal("msg_recv failed"); |
fatal("ssh_msg_recv failed"); |
if (buffer_get_char(&b) != version) |
if (buffer_get_char(&b) != version) |
fatal("bad version"); |
fatal("bad version"); |
fd = buffer_get_int(&b); |
fd = buffer_get_int(&b); |
|
|
/* send reply */ |
/* send reply */ |
buffer_clear(&b); |
buffer_clear(&b); |
buffer_put_string(&b, signature, slen); |
buffer_put_string(&b, signature, slen); |
msg_send(STDOUT_FILENO, version, &b); |
ssh_msg_send(STDOUT_FILENO, version, &b); |
|
|
return (0); |
return (0); |
} |
} |