- markus@cvs.openbsd.org 2002/11/07 22:08:07

     [readconf.c readconf.h ssh-keysign.8 ssh-keysign.c]
     we cannot use HostbasedAuthentication for enabling ssh-keysign(8),
     because HostbasedAuthentication might be enabled based on the
     target host and ssh-keysign(8) does not know the remote hostname
     and not trust ssh(1) about the hostname, so we add a new option
     EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de

1 files changed, 3 insertions, 3 deletions

diff --git a/ssh-keysign.c b/ssh-keysign.c
index 79aee17c0..3288eb182 100644
--- a/ssh-keysign.c
+++ b/ssh-keysign.c
@@ -22,7 +22,7 @@
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 #include "includes.h"
-RCSID("$OpenBSD: ssh-keysign.c,v 1.7 2002/07/03 14:21:05 markus Exp $");
+RCSID("$OpenBSD: ssh-keysign.c,v 1.8 2002/11/07 22:08:07 markus Exp $");
 
 #include <openssl/evp.h>
 #include <openssl/rand.h>
@@ -168,8 +168,8 @@ main(int argc, char **argv)
         initialize_options(&options);
         (void)read_config_file(_PATH_HOST_CONFIG_FILE, "", &options);
         fill_default_options(&options);
-        if (options.hostbased_authentication != 1)
-                fatal("Hostbased authentication not enabled in %s",
+        if (options.enable_ssh_keysign != 1)
+                fatal("ssh-keysign not enabled in %s",
                     _PATH_HOST_CONFIG_FILE);
 
         if (key_fd[0] == -1 && key_fd[1] == -1)