2 files changed, 10 insertions, 2 deletions

diff --git a/ChangeLog b/ChangeLog
index 6e50b4859..fb0e58dde 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -21,6 +21,9 @@
    - jakob@cvs.openbsd.org 2001/12/18 10:04:21
      [auth.h hostfile.c hostfile.h]
      remove auth_rsa_read_key, make hostfile_ready_key non static; ok markus@
+   - jakob@cvs.openbsd.org 2001/12/18 10:05:15
+     [auth2.c]
+     log fingerprint on successful public key authentication; ok markus@
 
 20011219
  - (stevesk) OpenBSD CVS sync X11 localhost display
@@ -7049,4 +7052,4 @@
  - Wrote replacements for strlcpy and mkdtemp
  - Released 1.0pre1
 
-$Id: ChangeLog,v 1.1698 2001/12/21 01:47:09 djm Exp $
+$Id: ChangeLog,v 1.1699 2001/12/21 01:48:54 djm Exp $
diff --git a/auth2.c b/auth2.c
index 29bbdf4fb..7a52c3b43 100644
--- a/auth2.c
+++ b/auth2.c
@@ -23,7 +23,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: auth2.c,v 1.75 2001/12/09 18:45:56 markus Exp $");
+RCSID("$OpenBSD: auth2.c,v 1.76 2001/12/18 10:05:15 jakob Exp $");
 
 #include <openssl/evp.h>
 
@@ -651,6 +651,7 @@ user_key_allowed2(struct passwd *pw, Key *key, char *file)
         u_long linenum = 0;
         struct stat st;
         Key *found;
+        char *fp;
 
         if (pw == NULL)
                 return 0;
@@ -718,6 +719,10 @@ user_key_allowed2(struct passwd *pw, Key *key, char *file)
                         found_key = 1;
                         debug("matching key found: file %s, line %lu",
                             file, linenum);
+                        fp = key_fingerprint(found, SSH_FP_MD5, SSH_FP_HEX);
+                        verbose("Found matching %s key: %s",
+                             key_type(found), fp);
+                        xfree(fp);
                         break;
                 }
         }