https://bugzilla.mindrot.org/show_bug.cgi?id=3351

--- Comment #3 from [email protected] ---
Attached client log.

Certificate rejection happens on the client.
In sshconnect2.c this line is executed:

1857:   sent = send_pubkey_test(ssh, id);

Then in send_pubkey_test function this line is executed:

1503:   if ((alg = key_sig_algorithm(ssh, id->key)) == NULL) {

Then in key_sig_algorithm function this line is executed:

1195:   return match_list(sshkey_ssh_name(key),

Here sshkey_ssh_name returns "[email protected]" and it is
compared against a list which is initialized by KEX_DEFAULT_PK_ALG,
which does not contain "[email protected]".  That check
fails and "no mutual signature supported" error is reported.

I was able to "fix" this problem by adding
"[email protected]," into KEX_DEFAULT_PK_ALG in myproposal.h

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to