summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--readconf.c27
-rw-r--r--servconf.c28
2 files changed, 29 insertions, 26 deletions
diff --git a/readconf.c b/readconf.c
index 4b11bab5e..db5f2d547 100644
--- a/readconf.c
+++ b/readconf.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: readconf.c,v 1.296 2018/07/27 05:34:42 dtucker Exp $ */ 1/* $OpenBSD: readconf.c,v 1.297 2018/08/12 20:19:13 djm Exp $ */
2/* 2/*
3 * Author: Tatu Ylonen <ylo@cs.hut.fi> 3 * Author: Tatu Ylonen <ylo@cs.hut.fi>
4 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -53,6 +53,7 @@
53 53
54#include "xmalloc.h" 54#include "xmalloc.h"
55#include "ssh.h" 55#include "ssh.h"
56#include "ssherr.h"
56#include "compat.h" 57#include "compat.h"
57#include "cipher.h" 58#include "cipher.h"
58#include "pathnames.h" 59#include "pathnames.h"
@@ -1924,6 +1925,7 @@ void
1924fill_default_options(Options * options) 1925fill_default_options(Options * options)
1925{ 1926{
1926 char *all_cipher, *all_mac, *all_kex, *all_key; 1927 char *all_cipher, *all_mac, *all_kex, *all_key;
1928 int r;
1927 1929
1928 if (options->forward_agent == -1) 1930 if (options->forward_agent == -1)
1929 options->forward_agent = 0; 1931 options->forward_agent = 0;
@@ -2075,17 +2077,18 @@ fill_default_options(Options * options)
2075 all_mac = mac_alg_list(','); 2077 all_mac = mac_alg_list(',');
2076 all_kex = kex_alg_list(','); 2078 all_kex = kex_alg_list(',');
2077 all_key = sshkey_alg_list(0, 0, 1, ','); 2079 all_key = sshkey_alg_list(0, 0, 1, ',');
2078 if (kex_assemble_names(&options->ciphers, 2080#define ASSEMBLE(what, defaults, all) \
2079 KEX_CLIENT_ENCRYPT, all_cipher) != 0 || 2081 do { \
2080 kex_assemble_names(&options->macs, 2082 if ((r = kex_assemble_names(&options->what, \
2081 KEX_CLIENT_MAC, all_mac) != 0 || 2083 defaults, all)) != 0) \
2082 kex_assemble_names(&options->kex_algorithms, 2084 fatal("%s: %s: %s", __func__, #what, ssh_err(r)); \
2083 KEX_CLIENT_KEX, all_kex) != 0 || 2085 } while (0)
2084 kex_assemble_names(&options->hostbased_key_types, 2086 ASSEMBLE(ciphers, KEX_SERVER_ENCRYPT, all_cipher);
2085 KEX_DEFAULT_PK_ALG, all_key) != 0 || 2087 ASSEMBLE(macs, KEX_SERVER_MAC, all_mac);
2086 kex_assemble_names(&options->pubkey_key_types, 2088 ASSEMBLE(kex_algorithms, KEX_SERVER_KEX, all_kex);
2087 KEX_DEFAULT_PK_ALG, all_key) != 0) 2089 ASSEMBLE(hostbased_key_types, KEX_DEFAULT_PK_ALG, all_key);
2088 fatal("%s: kex_assemble_names failed", __func__); 2090 ASSEMBLE(pubkey_key_types, KEX_DEFAULT_PK_ALG, all_key);
2091#undef ASSEMBLE
2089 free(all_cipher); 2092 free(all_cipher);
2090 free(all_mac); 2093 free(all_mac);
2091 free(all_kex); 2094 free(all_kex);
diff --git a/servconf.c b/servconf.c
index f1010b3b9..c0f6af0be 100644
--- a/servconf.c
+++ b/servconf.c
@@ -1,5 +1,5 @@
1 1
2/* $OpenBSD: servconf.c,v 1.339 2018/07/11 18:53:29 markus Exp $ */ 2/* $OpenBSD: servconf.c,v 1.340 2018/08/12 20:19:13 djm Exp $ */
3/* 3/*
4 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
5 * All rights reserved 5 * All rights reserved
@@ -192,24 +192,24 @@ static void
192assemble_algorithms(ServerOptions *o) 192assemble_algorithms(ServerOptions *o)
193{ 193{
194 char *all_cipher, *all_mac, *all_kex, *all_key; 194 char *all_cipher, *all_mac, *all_kex, *all_key;
195 int r;
195 196
196 all_cipher = cipher_alg_list(',', 0); 197 all_cipher = cipher_alg_list(',', 0);
197 all_mac = mac_alg_list(','); 198 all_mac = mac_alg_list(',');
198 all_kex = kex_alg_list(','); 199 all_kex = kex_alg_list(',');
199 all_key = sshkey_alg_list(0, 0, 1, ','); 200 all_key = sshkey_alg_list(0, 0, 1, ',');
200 if (kex_assemble_names(&o->ciphers, 201#define ASSEMBLE(what, defaults, all) \
201 KEX_SERVER_ENCRYPT, all_cipher) != 0 || 202 do { \
202 kex_assemble_names(&o->macs, 203 if ((r = kex_assemble_names(&o->what, defaults, all)) != 0) \
203 KEX_SERVER_MAC, all_mac) != 0 || 204 fatal("%s: %s: %s", __func__, #what, ssh_err(r)); \
204 kex_assemble_names(&o->kex_algorithms, 205 } while (0)
205 KEX_SERVER_KEX, all_kex) != 0 || 206 ASSEMBLE(ciphers, KEX_SERVER_ENCRYPT, all_cipher);
206 kex_assemble_names(&o->hostkeyalgorithms, 207 ASSEMBLE(macs, KEX_SERVER_MAC, all_mac);
207 KEX_DEFAULT_PK_ALG, all_key) != 0 || 208 ASSEMBLE(kex_algorithms, KEX_SERVER_KEX, all_kex);
208 kex_assemble_names(&o->hostbased_key_types, 209 ASSEMBLE(hostkeyalgorithms, KEX_DEFAULT_PK_ALG, all_key);
209 KEX_DEFAULT_PK_ALG, all_key) != 0 || 210 ASSEMBLE(hostbased_key_types, KEX_DEFAULT_PK_ALG, all_key);
210 kex_assemble_names(&o->pubkey_key_types, 211 ASSEMBLE(pubkey_key_types, KEX_DEFAULT_PK_ALG, all_key);
211 KEX_DEFAULT_PK_ALG, all_key) != 0) 212#undef ASSEMBLE
212 fatal("kex_assemble_names failed");
213 free(all_cipher); 213 free(all_cipher);
214 free(all_mac); 214 free(all_mac);
215 free(all_kex); 215 free(all_kex);