From 90428f403de27fa3a93516e8a1edc34959db5712 Mon Sep 17 00:00:00 2001 From: Andrew Cady Date: Thu, 28 May 2020 13:58:08 -0400 Subject: samizdat-ssh-uid: use SHA2 instead of SHA1 --- src/samizdat-ssh-uid | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/samizdat-ssh-uid b/src/samizdat-ssh-uid index c87232b..2b4b311 100755 --- a/src/samizdat-ssh-uid +++ b/src/samizdat-ssh-uid @@ -9,7 +9,7 @@ PEMFILE="${SSH_USER_AUTH}.tmp" sed -ne 's/^publickey //p' < "${SSH_USER_AUTH}" > "${PEMFILE}" || die "could not rewrite SSH_USER_AUTH file" -SSH_CLIENT_FINGERPRINT=$(ssh-keygen -r . -f "${PEMFILE}" | sed -ne 's/^. IN SSHFP [0-9]* 1 //p') && +SSH_CLIENT_FINGERPRINT=$(ssh-keygen -r . -f "${PEMFILE}" | sed -ne 's/^. IN SSHFP [0-9]* 2 //p') && [ "$SSH_CLIENT_FINGERPRINT" ] || die "could not determine ssh client fingerprint" read keytype keydata < "${PEMFILE}" || die "reading from PEMFILE=$PEMFILE" -- cgit v1.2.3