simon-git: putty (main): Simon Tatham

[Commits to Tartarus hosted VCS]

TL;DR:
  de5f295b Fix handling of RSA + SHA-2 certified host keys.

Repository:     https://git.tartarus.org/simon/putty.git
On the web:     https://git.tartarus.org/?p=simon/putty.git
Branch updated: main
Committer:      Simon Tatham <anakin at pobox.com>
Date:           2022-04-27 09:58:44

commit de5f295b99cb727a663558563d37e819366ed780
web diff https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=de5f295b99cb727a663558563d37e819366ed780;hp=3bb7e6ba9efcea074d44e500769d3ba74828919e
Author: Simon Tatham <anakin at pobox.com>
Date:   Wed Apr 27 07:44:27 2022 +0100

    Fix handling of RSA + SHA-2 certified host keys.
    
    Initial live testing pointed out that the ssh_keyalg corresponding to
    the certified version of rsa-sha2-512 was expecting to see the SSH id
    string "rsa-sha2-512-cert-v01 at openssh.com" at the start of the public
    key blob, whereas in fact, the _key_ type identifier is still
    "ssh-rsa-...", just as the key type for base rsa-sha2-512 is base
    ssh-rsa.
    
    Fixed inside openssh-certs.c, by adding a couple more strings to the
    'extra' structure.

 crypto/openssh-certs.c | 49 ++++++++++++++++++++++++++++++++++---------------
 1 file changed, 34 insertions(+), 15 deletions(-)