upstream: Refactor signing - use sshkey_sign for everything,

including the new U2F signatures.

Don't use sshsk_ecdsa_sign() directly, instead make it reachable via
sshkey_sign() like all other signature operations. This means that
we need to add a provider argument to sshkey_sign(), so most of this
change is mechanically adding that.

Suggested by / ok markus@

OpenBSD-Commit-ID: d5193a03fcfa895085d91b2b83d984a9fde76c8c

1 files changed, 3 insertions, 3 deletions

diff --git a/ssh-keysign.c b/ssh-keysign.c
index 6cfd5b46c..d6aa6361d 100644
--- a/ssh-keysign.c
+++ b/ssh-keysign.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssh-keysign.c,v 1.61 2019/10/02 00:42:30 djm Exp $ */
+/* $OpenBSD: ssh-keysign.c,v 1.62 2019/10/31 21:23:19 djm Exp $ */
 /*
  * Copyright (c) 2002 Markus Friedl.  All rights reserved.
  *
@@ -277,8 +277,8 @@ main(int argc, char **argv)
                     sshkey_type(key), fp ? fp : "");
         }
 
-        if ((r = sshkey_sign(keys[i], &signature, &slen, data, dlen, NULL, 0))
-            != 0)
+        if ((r = sshkey_sign(keys[i], &signature, &slen, data, dlen,
+            NULL, NULL, 0)) != 0)
                 fatal("sshkey_sign failed: %s", ssh_err(r));
         free(data);