diff options
Diffstat (limited to 'auth2-pubkey.c')
-rw-r--r-- | auth2-pubkey.c | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/auth2-pubkey.c b/auth2-pubkey.c index f9e4e2e7f..2fb5950ea 100644 --- a/auth2-pubkey.c +++ b/auth2-pubkey.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: auth2-pubkey.c,v 1.85 2018/08/28 12:25:53 mestre Exp $ */ | 1 | /* $OpenBSD: auth2-pubkey.c,v 1.86 2018/09/20 03:28:06 djm Exp $ */ |
2 | /* | 2 | /* |
3 | * Copyright (c) 2000 Markus Friedl. All rights reserved. | 3 | * Copyright (c) 2000 Markus Friedl. All rights reserved. |
4 | * | 4 | * |
@@ -137,7 +137,13 @@ userauth_pubkey(struct ssh *ssh) | |||
137 | __func__, sshkey_ssh_name(key)); | 137 | __func__, sshkey_ssh_name(key)); |
138 | goto done; | 138 | goto done; |
139 | } | 139 | } |
140 | 140 | if ((r = sshkey_check_cert_sigtype(key, | |
141 | options.ca_sign_algorithms)) != 0) { | ||
142 | logit("%s: certificate signature algorithm %s: %s", __func__, | ||
143 | (key->cert == NULL || key->cert->signature_type == NULL) ? | ||
144 | "(null)" : key->cert->signature_type, ssh_err(r)); | ||
145 | goto done; | ||
146 | } | ||
141 | key_s = format_key(key); | 147 | key_s = format_key(key); |
142 | if (sshkey_is_cert(key)) | 148 | if (sshkey_is_cert(key)) |
143 | ca_s = format_key(key->cert->signature_key); | 149 | ca_s = format_key(key->cert->signature_key); |