Ben Toews 2f26b5d63c pki: allow certificates to be used in signature verification ...

A number of places checked that the signature type matched the key type. We
losen these checks to, for example, allow an RSA signature with an RSA-cert
key.

Signed-off-by: Ben Toews <mastahyeti@gmail.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>

2019-04-17 10:21:42 +02:00

..

agent.h

SHA2 extension in the ssh-agent interface

2018-08-31 14:18:34 +02:00

auth.h

CVE-2018-10933: Introduce SSH_AUTH_STATE_AUTH_NONE_SENT

2018-10-16 09:19:03 +02:00

bignum.h

bignum: harmonize gcrypt, libcrypto and libmcrypt bignum

2019-01-24 11:04:44 +01:00

bind_config.h

bind_config: Added minimal support for Match keyword

2019-04-01 08:41:53 +02:00

bind.h

options: Add a bind option to set the config directory

2019-04-01 08:38:17 +02:00

blf.h

cleanup: use ssh_ prefix in the blf (non-static) functions

2016-01-19 11:31:07 +01:00

buffer.h

buffer: Convert argc to size_t in ssh_buffer_unpack() as well

2019-01-24 17:48:08 +01:00

bytearray.h

include: Add macros for bytearray handling

2018-10-05 14:38:43 +02:00

callbacks.h

The ssh_channel_callbacks_struct member name is channel_data_function.

2019-03-25 18:50:33 +01:00

chacha.h

cmake: detect "bounded" compiler attribute

2018-06-28 09:06:30 +02:00

channels.h

channel: Add SSH_CHANNEL_FLAG_CLOSED_LOCAL

2018-12-10 14:59:21 +01:00

CMakeLists.txt

Rest in Peace SSHv1

2018-06-29 14:41:14 +02:00

config_parser.h

config: Move common parser functions to config_parser.c

2019-04-01 08:25:22 +02:00

config.h

config: Parse rekey limits and apply them

2019-01-09 10:14:56 +01:00

crypto.h

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

curve25519.h

kex: use runtime callbacks (server)

2019-01-24 09:19:59 +01:00

dh-gex.h

dh-gex: Add server implementation

2019-01-24 13:06:33 +01:00

dh.h

dh: Move DH key handling into a separate file.

2019-04-04 08:00:23 +02:00

ecdh.h

kex: use runtime callbacks (server)

2019-01-24 09:19:59 +01:00

ed25519.h

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

fe25519.h

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

ge25519.h

include: Declare ge25519_base as extern

2018-06-21 17:41:32 +02:00

gssapi.h

server: Fix compilation without WITH_SERVER

2013-07-14 09:30:59 +02:00

kex.h

dh: move unrelated functions out of dh.c

2019-01-24 09:34:18 +01:00

keys.h

add mbedtls crypto support

2017-12-28 11:17:39 +01:00

knownhosts.h

knownhosts: Consult also the global known hosts file

2018-10-19 17:43:20 +02:00

legacy.h

include: Mark functions as deprecated!

2014-01-16 15:27:23 +01:00

libcrypto.h

dh: Confine DH KEX keys handling into fewer functions

2019-04-04 08:00:19 +02:00

libgcrypt.h

dh: Confine DH KEX keys handling into fewer functions

2019-04-04 08:00:19 +02:00

libmbedcrypto.h

dh: Confine DH KEX keys handling into fewer functions

2019-04-04 08:00:19 +02:00

libssh.h

pki: support ECDSA/ED25519 certificates

2019-04-17 10:21:42 +02:00

libsshpp.hpp

libsshpp: Pass username and submethods to ssh_userauth_kbdint()

2018-10-24 09:48:35 +02:00

messages.h

messages: Make ssh_message_queue() static

2018-10-24 09:48:35 +02:00

misc.h

libmbedtls: Support OpenSSH-compatible AES-GCM ciphers using mbedTLS

2018-10-09 13:05:38 +02:00

options.h

options: Use ssh_key_type_e in ssh_options_set_algo()

2017-08-24 18:01:41 +02:00

packet.h

Refactor ssh_packet_hmac_verify to allow for direct buffer

2019-02-22 15:30:59 +01:00

pcap.h

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

pki_priv.h

pki: Implement reading public key from OpenSSH private key container

2018-09-18 09:53:49 +02:00

pki.h

pki: allow certificates to be used in signature verification

2019-04-17 10:21:42 +02:00

poll.h

events: Add functions for poll objects

2016-05-02 16:40:43 +02:00

poly1305.h

cmake: detect "bounded" compiler attribute

2018-06-28 09:06:30 +02:00

priv.h

buffer: Fix regression introduced by 6c7eaa and c306a6

2019-02-21 10:51:17 +01:00

sc25519.h

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

scp.h

include: Fix the LGPL header.

2013-01-23 00:22:46 +01:00

server.h

options: Add a bind option to set the config directory

2019-04-01 08:38:17 +02:00

session.h

dh-gex: Add server implementation

2019-01-24 13:06:33 +01:00

sftp.h

sftp: Document how to free memory retruned by sftp_canonicalize_path()

2019-02-27 08:32:10 +01:00

socket.h

socket: Undouble socket fds

2018-10-25 18:49:29 +02:00

ssh2.h

client: Handle the MSG_EXT_INFO packet signalling supported extensions

2018-08-31 14:18:34 +02:00

string.h

include: Fix the LGPL header.

2013-01-23 00:22:46 +01:00

threads.h

threads: use static error check mutex initializer if available

2018-08-13 12:00:13 +02:00

wrapper.h

Use a common KDF function

2019-03-07 12:03:32 +01:00