From 94ae0c6f0e35903b695e033bf4beacea1d376bb1 Mon Sep 17 00:00:00 2001 From: "djm@openbsd.org" Date: Sun, 19 Dec 2021 22:12:54 +0000 Subject: upstream: client side of host-bound pubkey authentication Add kex->flags member to enable the publickey-hostbound-v00@openssh.com authentication method. Use the new hostbound method in client if the kex->flags flag was set, and include the inital KEX hostkey in the userauth request. Note: nothing in kex.c actually sets the new flag yet ok markus@ OpenBSD-Commit-ID: 5a6fce8c6c8a77a80ee1526dc467d91036a5910d --- kex.h | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'kex.h') diff --git a/kex.h b/kex.h index 70b8909bc..f644e5994 100644 --- a/kex.h +++ b/kex.h @@ -1,4 +1,4 @@ -/* $OpenBSD: kex.h,v 1.115 2021/12/19 22:08:06 djm Exp $ */ +/* $OpenBSD: kex.h,v 1.116 2021/12/19 22:12:54 djm Exp $ */ /* * Copyright (c) 2000, 2001 Markus Friedl. All rights reserved. @@ -105,8 +105,10 @@ enum kex_exchange { KEX_MAX }; -#define KEX_INIT_SENT 0x0001 -#define KEX_INITIAL 0x0002 +/* kex->flags */ +#define KEX_INIT_SENT 0x0001 +#define KEX_INITIAL 0x0002 +#define KEX_HAS_PUBKEY_HOSTBOUND 0x0004 struct sshenc { char *name; -- cgit v1.2.3