version 1.139, 2003/04/14 14:17:50 |
version 1.140, 2003/05/14 18:16:21 |
|
|
#include "misc.h" |
#include "misc.h" |
#include "readpass.h" |
#include "readpass.h" |
|
|
|
#ifdef DNS |
|
#include "dns.h" |
|
#endif |
|
|
char *client_version_string = NULL; |
char *client_version_string = NULL; |
char *server_version_string = NULL; |
char *server_version_string = NULL; |
|
|
|
|
return -1; |
return -1; |
} |
} |
|
|
|
/* returns 0 if key verifies or -1 if key does NOT verify */ |
int |
int |
verify_host_key(char *host, struct sockaddr *hostaddr, Key *host_key) |
verify_host_key(char *host, struct sockaddr *hostaddr, Key *host_key) |
{ |
{ |
struct stat st; |
struct stat st; |
|
|
|
#ifdef DNS |
|
if (options.verify_host_key_dns) { |
|
switch(verify_host_key_dns(host, hostaddr, host_key)) { |
|
case DNS_VERIFY_OK: |
|
return 0; |
|
case DNS_VERIFY_FAILED: |
|
return -1; |
|
case DNS_VERIFY_ERROR: |
|
break; |
|
default: |
|
debug3("bad return value from verify_host_key_dns"); |
|
break; |
|
} |
|
} |
|
#endif /* DNS */ |
|
|
/* return ok if the key can be found in an old keyfile */ |
/* return ok if the key can be found in an old keyfile */ |
if (stat(options.system_hostfile2, &st) == 0 || |
if (stat(options.system_hostfile2, &st) == 0 || |