upstream: fix reversed test that caused IdentitiesOnly=yes to not

apply to keys loaded from a PKCS11Provider; bz3141, ok dtucker@

OpenBSD-Commit-ID: e3dd6424b94685671fe84c9b9dbe352fb659f677

1 files changed, 2 insertions, 2 deletions

diff --git a/sshconnect2.c b/sshconnect2.c
index af00fb30c..1a6545edf 100644
--- a/sshconnect2.c
+++ b/sshconnect2.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sshconnect2.c,v 1.320 2020/02/06 22:48:23 djm Exp $ */
+/* $OpenBSD: sshconnect2.c,v 1.321 2020/04/17 03:38:47 djm Exp $ */
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
  * Copyright (c) 2008 Damien Miller.  All rights reserved.
@@ -1671,7 +1671,7 @@ pubkey_prepare(Authctxt *authctxt)
                 found = 0;
                 TAILQ_FOREACH(id2, &files, next) {
                         if (id2->key == NULL ||
-                            (id2->key->flags & SSHKEY_FLAG_EXT) == 0)
+                            (id2->key->flags & SSHKEY_FLAG_EXT) != 0)
                                 continue;
                         if (sshkey_equal(id->key, id2->key)) {
                                 TAILQ_REMOVE(&files, id, next);