security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-01-02 12:01:32 +01:00
Code Activity

agent: SSH support improvement.

Browse Source 
* agent/command-ssh.c (ssh_handler_request_identities): Skip a key with
error, not giving up to handle the request itself.
* agent/cvt-openpgp.c (extract_private_key): Support "ecdsa" key.

--

Note that "ecdsa" key is still in use by old versions of gpg-agent
through its SSH handling (until 2.1.14).  With old versions of
gpg-agent, adding ECDSA key by ssh-add command, "ecdsa" key will be
created.  So, "ecdsa" key should be supported.

For g10/gpg, "ecdsa" and "ecdh" was only used in some experimental
versions of libgcrypt, with parameters.  We now use "ecc" for all cases
in released versions.

Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
This commit is contained in:
NIIBE Yutaka 2016-08-09 11:42:20 +09:00
parent 491d6fdabb
commit ebf24e3b29
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
agent/command-ssh.c
View File

@ -2618,7 +2618,7 @@ ssh_handler_request_identities (ctrl_t ctrl,
if (err) if (err)
{ {
log_error ("failed to read the public key\n"); log_error ("failed to read the public key\n");
goto out; continue;
} }
err = ssh_send_key_public (key_blobs, key_public, NULL); err = ssh_send_key_public (key_blobs, key_public, NULL);

2
agent/cvt-openpgp.c
View File

@ -1271,7 +1271,7 @@ extract_private_key (gcry_sexp_t s_key, int req_private_key_data,
array+0, array+1, array+2, array+3, array+0, array+1, array+2, array+3,
array+4, NULL); array+4, NULL);
} }
else if (!strcmp (name, "ecc")) else if (!strcmp (name, "ecc") || !strcmp (name, "ecdsa"))
{ {
algoname = "ecc"; algoname = "ecc";
format = "qd?"; format = "qd?";