lib/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2025-08-08 19:02:06 +03:00
Code Activity

pki: Sanity-check signature matches base key type

Browse Source 
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Jakub Jelen
2018-11-26 15:27:53 +01:00
committed by Andreas Schneider
parent 968fdf4e18
commit c79c33e224
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/pki.c
View File

@@ -1931,6 +1931,12 @@ int ssh_pki_signature_verify(ssh_session session,
"Going to verify a %s type signature", "Going to verify a %s type signature",
sig->type_c); sig->type_c);
if (key->type != sig->type) {
SSH_LOG(SSH_LOG_WARN,
"Can not verify %s signature with %s key",
sig->type_c, key->type_c);
return SSH_ERROR;
}
if (key->type == SSH_KEYTYPE_ECDSA) { if (key->type == SSH_KEYTYPE_ECDSA) {
#if HAVE_ECC #if HAVE_ECC