summaryrefslogtreecommitdiff
path: root/myproposal.h
diff options
context:
space:
mode:
authordjm@openbsd.org <djm@openbsd.org>2019-12-10 22:43:19 +0000
committerDamien Miller <djm@mindrot.org>2019-12-11 19:11:07 +1100
commit75f7f22a43799f6d25dffd9d6683de1601da05a3 (patch)
treeb8d099312c196b56effb067b522564988df75cfd /myproposal.h
parent516605f2d596884cedc2beed6b262716ec76f63d (diff)
upstream: add security key types to list of keys allowed to act as
CAs; spotted by Ron Frederick OpenBSD-Commit-ID: 9bb0dfff927b4f7aa70679f983f84c69d45656c3
Diffstat (limited to 'myproposal.h')
-rw-r--r--myproposal.h6
1 files changed, 4 insertions, 2 deletions
diff --git a/myproposal.h b/myproposal.h
index d6e7977e4..b393db8b0 100644
--- a/myproposal.h
+++ b/myproposal.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: myproposal.h,v 1.61 2019/11/12 19:33:08 markus Exp $ */ 1/* $OpenBSD: myproposal.h,v 1.62 2019/12/10 22:43:19 djm Exp $ */
2 2
3/* 3/*
4 * Copyright (c) 2000 Markus Friedl. All rights reserved. 4 * Copyright (c) 2000 Markus Friedl. All rights reserved.
@@ -145,7 +145,9 @@
145/* Not a KEX value, but here so all the algorithm defaults are together */ 145/* Not a KEX value, but here so all the algorithm defaults are together */
146#define SSH_ALLOWED_CA_SIGALGS \ 146#define SSH_ALLOWED_CA_SIGALGS \
147 HOSTKEY_ECDSA_METHODS \ 147 HOSTKEY_ECDSA_METHODS \
148 USERKEY_ECDSA_SK_METHODS \
148 "ssh-ed25519," \ 149 "ssh-ed25519," \
150 "sk-ssh-ed25519@openssh.com," \
149 "rsa-sha2-512," \ 151 "rsa-sha2-512," \
150 "rsa-sha2-256," \ 152 "rsa-sha2-256," \
151 "ssh-rsa" 153 "ssh-rsa"
@@ -194,7 +196,7 @@
194#define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT 196#define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT
195#define KEX_CLIENT_MAC KEX_SERVER_MAC 197#define KEX_CLIENT_MAC KEX_SERVER_MAC
196 198
197#define SSH_ALLOWED_CA_SIGALGS "ssh-ed25519" 199#define SSH_ALLOWED_CA_SIGALGS "ssh-ed25519,sk-ssh-ed25519@openssh.com"
198 200
199#endif /* WITH_OPENSSL */ 201#endif /* WITH_OPENSSL */
200 202