shinys000114/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2026-02-09 18:04:25 +09:00
Code Issues Packages Projects Releases Wiki Activity

session: Reformat ssh_get_publickey_hash

Browse Source 
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Jakub Jelen
2025-04-24 16:19:08 +02:00
committed by Andreas Schneider
parent a85813e6e6
commit 6fc1bf6901
1 changed files with 95 additions and 97 deletions
Download Patch File Download Diff File Expand all files Collapse all files

192
src/session.c
View File

@@ -1238,110 +1238,108 @@ int ssh_get_publickey_hash(const ssh_key key,
} }
switch (type) { switch (type) {
case SSH_PUBLICKEY_HASH_SHA1: case SSH_PUBLICKEY_HASH_SHA1: {
{ SHACTX ctx;
SHACTX ctx;
h = calloc(1, SHA_DIGEST_LEN); h = calloc(1, SHA_DIGEST_LEN);
if (h == NULL) { if (h == NULL) {
rc = -1; rc = -1;
goto out; goto out;
}
ctx = sha1_init();
if (ctx == NULL) {
free(h);
rc = -1;
goto out;
}
rc = sha1_update(ctx, ssh_string_data(blob), ssh_string_len(blob));
if (rc != SSH_OK) {
free(h);
sha1_ctx_free(ctx);
goto out;
}
rc = sha1_final(h, ctx);
if (rc != SSH_OK) {
free(h);
goto out;
}
*hlen = SHA_DIGEST_LEN;
} }
break;
case SSH_PUBLICKEY_HASH_SHA256:
{
SHA256CTX ctx;
h = calloc(1, SHA256_DIGEST_LEN); ctx = sha1_init();
if (h == NULL) { if (ctx == NULL) {
rc = -1; free(h);
goto out; rc = -1;
} goto out;
ctx = sha256_init();
if (ctx == NULL) {
free(h);
rc = -1;
goto out;
}
rc = sha256_update(ctx, ssh_string_data(blob), ssh_string_len(blob));
if (rc != SSH_OK) {
free(h);
sha256_ctx_free(ctx);
goto out;
}
rc = sha256_final(h, ctx);
if (rc != SSH_OK) {
free(h);
goto out;
}
*hlen = SHA256_DIGEST_LEN;
} }
break;
case SSH_PUBLICKEY_HASH_MD5:
{
MD5CTX ctx;
/* In FIPS mode, we cannot use MD5 */ rc = sha1_update(ctx, ssh_string_data(blob), ssh_string_len(blob));
if (ssh_fips_mode()) { if (rc != SSH_OK) {
SSH_LOG(SSH_LOG_TRACE, "In FIPS mode MD5 is not allowed." free(h);
"Try using SSH_PUBLICKEY_HASH_SHA256"); sha1_ctx_free(ctx);
rc = SSH_ERROR; goto out;
goto out;
}
h = calloc(1, MD5_DIGEST_LEN);
if (h == NULL) {
rc = -1;
goto out;
}
ctx = md5_init();
if (ctx == NULL) {
free(h);
rc = -1;
goto out;
}
rc = md5_update(ctx, ssh_string_data(blob), ssh_string_len(blob));
if (rc != SSH_OK) {
free(h);
md5_ctx_free(ctx);
goto out;
}
rc = md5_final(h, ctx);
if (rc != SSH_OK) {
free(h);
goto out;
}
*hlen = MD5_DIGEST_LEN;
} }
rc = sha1_final(h, ctx);
if (rc != SSH_OK) {
free(h);
goto out;
}
*hlen = SHA_DIGEST_LEN;
break; break;
}
case SSH_PUBLICKEY_HASH_SHA256: {
SHA256CTX ctx;
h = calloc(1, SHA256_DIGEST_LEN);
if (h == NULL) {
rc = -1;
goto out;
}
ctx = sha256_init();
if (ctx == NULL) {
free(h);
rc = -1;
goto out;
}
rc = sha256_update(ctx, ssh_string_data(blob), ssh_string_len(blob));
if (rc != SSH_OK) {
free(h);
sha256_ctx_free(ctx);
goto out;
}
rc = sha256_final(h, ctx);
if (rc != SSH_OK) {
free(h);
goto out;
}
*hlen = SHA256_DIGEST_LEN;
break;
}
case SSH_PUBLICKEY_HASH_MD5: {
MD5CTX ctx;
/* In FIPS mode, we cannot use MD5 */
if (ssh_fips_mode()) {
SSH_LOG(SSH_LOG_TRACE,
"In FIPS mode MD5 is not allowed."
"Try using SSH_PUBLICKEY_HASH_SHA256");
rc = SSH_ERROR;
goto out;
}
h = calloc(1, MD5_DIGEST_LEN);
if (h == NULL) {
rc = -1;
goto out;
}
ctx = md5_init();
if (ctx == NULL) {
free(h);
rc = -1;
goto out;
}
rc = md5_update(ctx, ssh_string_data(blob), ssh_string_len(blob));
if (rc != SSH_OK) {
free(h);
md5_ctx_free(ctx);
goto out;
}
rc = md5_final(h, ctx);
if (rc != SSH_OK) {
free(h);
goto out;
}
*hlen = MD5_DIGEST_LEN;
break;
}
default: default:
rc = -1; rc = -1;
goto out; goto out;