Home GnuPG
Diffusion GnuPG 525f2c482abb

agent: Make digest algorithms for ssh fingerprints configurable.

Description

agent: Make digest algorithms for ssh fingerprints configurable.

* agent/agent.h (opt): New field 'ssh_fingerprint_digest'.
* agent/command-ssh.c (data_sign, ssh_identity_register): Honor the
option for strings used to communicate with the user.
* agent/findkey.c (agent_modify_description): Likewise.
* agent/gpg-agent.c (cmd_and_opt_values): New value.
(opts): New option '--ssh-fingerprint-digest'.
(parse_rereadable_options): Set the default to MD5 for now.
(main): Handle the new option.
* doc/gpg-agent.texi: Document the new option.

OpenSSH has transitioned from using MD5 to compute key fingerprints to
SHA256. This patch makes the digest used when communicating key
fingerprints to the user (e.g. in pinentry dialogs) configurable.
For now this patch conservatively defaults to MD5.

  • GnuPG-bug-id: T2106
  • Signed-off-by: Justus Winter <justus@g10code.com>

Details

Provenance
justusAuthored on May 24 2017, 5:48 PM
Parents
rGa5f046d99a08: agent: Write both ssh fingerprints to 'sshcontrol' file.
Branches
Unknown
Tags
Unknown
Tasks
T2106: Support SHA-256 fingerprints for ssh