diff options
author | djm@openbsd.org <djm@openbsd.org> | 2021-12-19 23:12:54 +0100 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2021-12-19 23:28:07 +0100 |
commit | 94ae0c6f0e35903b695e033bf4beacea1d376bb1 (patch) | |
tree | c48d8e1da171f1a9fa4b309944787bfcd8d9045f /kex.h | |
parent | upstream: sshd side of hostbound public key auth (diff) | |
download | openssh-94ae0c6f0e35903b695e033bf4beacea1d376bb1.tar.xz openssh-94ae0c6f0e35903b695e033bf4beacea1d376bb1.zip |
upstream: client side of host-bound pubkey authentication
Add kex->flags member to enable the publickey-hostbound-v00@openssh.com
authentication method.
Use the new hostbound method in client if the kex->flags flag was set,
and include the inital KEX hostkey in the userauth request.
Note: nothing in kex.c actually sets the new flag yet
ok markus@
OpenBSD-Commit-ID: 5a6fce8c6c8a77a80ee1526dc467d91036a5910d
Diffstat (limited to 'kex.h')
-rw-r--r-- | kex.h | 8 |
1 files changed, 5 insertions, 3 deletions
@@ -1,4 +1,4 @@ -/* $OpenBSD: kex.h,v 1.115 2021/12/19 22:08:06 djm Exp $ */ +/* $OpenBSD: kex.h,v 1.116 2021/12/19 22:12:54 djm Exp $ */ /* * Copyright (c) 2000, 2001 Markus Friedl. All rights reserved. @@ -105,8 +105,10 @@ enum kex_exchange { KEX_MAX }; -#define KEX_INIT_SENT 0x0001 -#define KEX_INITIAL 0x0002 +/* kex->flags */ +#define KEX_INIT_SENT 0x0001 +#define KEX_INITIAL 0x0002 +#define KEX_HAS_PUBKEY_HOSTBOUND 0x0004 struct sshenc { char *name; |