From 9efcaaac314c611c6c0326e8bac5b486c424bbd2 Mon Sep 17 00:00:00 2001 From: "markus@openbsd.org" Date: Sat, 24 Mar 2018 19:28:43 +0000 Subject: upstream: fix bogus warning when signing cert keys using agent; from djm; ok deraadt dtucker OpenBSD-Commit-ID: 12e50836ba2040042383a8b71e12d7ea06e9633d --- sshconnect2.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'sshconnect2.c') diff --git a/sshconnect2.c b/sshconnect2.c index 2f0a57fac..1f4a74cf4 100644 --- a/sshconnect2.c +++ b/sshconnect2.c @@ -1,4 +1,4 @@ -/* $OpenBSD: sshconnect2.c,v 1.269 2018/03/03 03:01:50 djm Exp $ */ +/* $OpenBSD: sshconnect2.c,v 1.270 2018/03/24 19:28:43 markus Exp $ */ /* * Copyright (c) 2000 Markus Friedl. All rights reserved. * Copyright (c) 2008 Damien Miller. All rights reserved. @@ -1014,6 +1014,8 @@ check_sigtype(const struct sshkey *key, const u_char *sig, size_t len) char *sigtype = NULL; const char *alg = key_sign_encode(key); + if (sshkey_is_cert(key)) + return 0; if ((r = sshkey_sigtype(sig, len, &sigtype)) != 0) return r; if (strcmp(sigtype, alg) != 0) { -- cgit v1.2.3