GitLab

(spki_pkcs5_decrypt): New function, replacing make_pkcs5_decrypt.

* src/spki.c (spki_sexp_to_signer): New function.
(spki_pkcs5_encrypt): New function.

Rev: src/spki.c:1.34
Rev: src/spki.h:1.24

(spki_pkcs5_encrypt): New function.

Rev: src/spki.c:1.33

(spki_pkcs5_encrypt): New function.

Rev: src/spki.c:1.32
Rev: src/spki.h:1.23

Rev: src/spki.c:1.31
Rev: src/spki.h:1.22

sexp_check_type prototype.
* src/spki.c: Likewise.

Rev: src/spki.c:1.30

* src/spki.c (subject_match_hash): Use const struct lsh_string.
(do_spki_tag_prefix_match): Likewise.
(spki_subject_by_hash): Likewise.
(do_spki_lookup): Likewise.

Rev: src/spki.c:1.29
Rev: src/spki_commands.c:1.21

* src/lshd.c: Likewise.
* src/reaper.c: Likewise.
* src/server_publickey.c: Likewise.
* src/spki.c: Likewise.

Rev: src/server_publickey.c:1.19
Rev: src/spki.c:1.28

Rev: src/algorithms.h:1.8
Rev: src/client.h:1.34
Rev: src/client_keyexchange.c:1.55
Rev: src/client_userauth.c:1.44
Rev: src/connection.c:1.61
Rev: src/format.h:1.32
Rev: src/interact.c:1.5
Rev: src/interact.h:1.5
Rev: src/io.c:1.119
Rev: src/io.h:1.69
Rev: src/lsh-writekey.c:1.9
Rev: src/lsh.c:1.126
Rev: src/lshd.c:1.104
Rev: src/reaper.c:1.16
Rev: src/reaper.h:1.9
Rev: src/server_session.c:1.53
Rev: src/spki.c:1.27
Rev: src/spki_commands.c:1.13
Rev: src/srp-gen.c:1.7
Rev: src/tty.c:1.11
Rev: src/tty.h:1.11

out of spki.c.

Rev: src/spki.c:1.26
Rev: src/spki.h:1.21
Rev: src/spki_commands.c:1.10
Rev: src/spki_commands.h:1.6

(dsa_to_spki_public_key): #if:ed out.
(parse_private_key): Use new publickey-related functions and
methods.

Rev: src/spki.c:1.25
Rev: src/spki.h:1.20

do_spki_sexp2signer() and parse_private_key().
(spki_make_public_key): New function. Used in spki_signer2public()
and parse_private_key().

Rev: src/spki.c:1.24
Rev: src/spki.h:1.19

(do_spki_hash): Use spki_hash_data().

Rev: src/spki.c:1.23
Rev: src/spki.h:1.18

Rev: ChangeLog:1.243
Rev: doc/TODO:1.90
Rev: doc/lsh.texinfo:1.18
Rev: src/spki.c:1.22

* src/gateway_channel.c (make_gateway_channel_open_command): Likewise.
* src/lsh_writekey.c: Likewise.
* src/proxy.c: Likewise.
* src/server_publickey.c: Likewise.
* src/spki.c (spki_get_type):
* src/spki_commands.c (make_pkcs5_encrypt):

Rev: src/spki.c:1.21
Rev: src/spki_commands.c:1.9
Rev: src/spki_commands.h:1.5

src/keyexchange.c, src/keyexchange.h, src/lsh_keygen.c,
src/lshd.c, src/publickey_crypto.h, src/server_session.c,
src/server_userauth.c, src/server_userauth.h, src/sexp.c,
src/sexp_parser.c, src/spki.c, src/spki_commands.c,
src/srp_exchange.c, src/tcpforward.c, src/werror.c: Removed old
dead code.

Rev: src/command.h:1.45
Rev: src/connection.c:1.55
Rev: src/exception.c:1.15
Rev: src/io.c:1.108
Rev: src/keyexchange.c:1.68
Rev: src/keyexchange.h:1.46
Rev: src/lsh_keygen.c:1.21
Rev: src/lshd.c:1.93
Rev: src/publickey_crypto.h:1.37
Rev: src/server_session.c:1.43
Rev: src/server_userauth.c:1.28
Rev: src/server_userauth.h:1.13
Rev: src/sexp.c:1.30
Rev: src/sexp_parser.c:1.16
Rev: src/spki.c:1.20
Rev: src/spki_commands.c:1.8
Rev: src/srp_exchange.c:1.6
Rev: src/tcpforward.c:1.49
Rev: src/werror.c:1.46

function.
(sexp_check_type): Moved and renamed the spki_check_type function.
(sexp2bignum_u): New function.
(sexp_atom_eq): New function.
(sexp_atoms_eq): Renamed the previos sexp_atom_eq function.
(sexp_get_un): Use sexp2bignum_u.

Rev: src/sexp.c:1.28
Rev: src/sexp.h:1.27
Rev: src/spki.c:1.19

Rev: src/channel.c:1.80
Rev: src/channel.h:1.57
Rev: src/channel_commands.c:1.19
Rev: src/channel_commands.h:1.14
Rev: src/client_keyexchange.c:1.42
Rev: src/client_password.c:1.9
Rev: src/connection.h:1.49
Rev: src/connection_commands.c:1.26
Rev: src/daemon.c:1.6
Rev: src/disconnect.c:1.19
Rev: src/dsa.c:1.13
Rev: src/format.c:1.37
Rev: src/gateway_channel.c:1.2
Rev: src/io.c:1.103
Rev: src/io_commands.c:1.33
Rev: src/keyexchange.c:1.63
Rev: src/keyexchange.h:1.43
Rev: src/lsh.c:1.106
Rev: src/lsh_proxy.c:1.11
Rev: src/lsh_writekey.c:1.19
Rev: src/lshd.c:1.88
Rev: src/pkcs5.c:1.3
Rev: src/proxy.c:1.7
Rev: src/read_packet.c:1.47
Rev: src/reaper.c:1.13
Rev: src/server_keyexchange.c:1.37
Rev: src/server_publickey.c:1.14
Rev: src/server_session.c:1.38
Rev: src/server_userauth.h:1.10
Rev: src/sexp_streamed_parser.c:1.23
Rev: src/sexp_test.c:1.13
Rev: src/spki.c:1.18
Rev: src/ssh1_fallback.c:1.9
Rev: src/tcpforward.c:1.48
Rev: src/unix_user.c:1.13

Rev: src/spki.c:1.17
Rev: src/spki.h:1.15

Rev: src/sexp.c:1.25
Rev: src/spki.c:1.16
Rev: src/spki_commands.c:1.5

(spki_sexp2signer_command): New command.
(spki_parse_private_key): Renamed to spki_sexp2keypair.

* src/spki.c (do_spki_lookup): Fixed call to spki_make_verifier().

Rev: src/spki.c:1.15
Rev: src/spki.h:1.13

Rev: src/spki.c:1.14

(spki_sexp_to_tag_list): Bug fix.
(spki_make_verifier): Take an sexp rather than an sexp_iterator as
argument.
(do_spki_lookup): Use the right syntax for public-key-expressions.

Rev: src/spki.c:1.13

* src/spki.c (spki_private2public): New command, that replaces the
private2public command.
(parse_private_key): Use continuations and exceptions.
(do_spki_parse_key): Parse c and e on to parse_private_key.
(spki_parse_private_key_command): New command.
(spki_add_acl): New function. Replaces spki_read_acls.
(do_spki_add_tuple): New function.

Rev: src/spki.c:1.12
Rev: src/spki.h:1.11

Rev: ChangeLog:1.126
Rev: doc/NOTES:1.9
Rev: src/spki.c:1.11

(dsa_to_spki_public_key): New function.
(do_spki_hash): Simplified.
(parse_dsa_private_key): #ifdef'd out.
(parse_private_key): Use an algorithm alist.
(read_spki_key_file): Take algorithm alist as argument.
(make_spki_subject): New function.
(subject_match_hash): New function.
(spki_state): New class.
(spki_subject_by_hash): New function.
(spki_make_verifier): New function.
(do_spki_lookup): New function.
(do_spki_authorize): New function.
(make_spki_context): New function.

Rev: src/spki.c:1.10

(spki_acl_entry_to_5_tuple): New function.
(spki_read_acls): New function.

Rev: src/spki.c:1.9

Added classes for representing authorizations or (tag ...)
expressions, for certificates and acl:s.

Rev: src/spki.c:1.8

Rev: ChangeLog:1.119
Rev: NEWS:1.29
Rev: src/abstract_compress.c:1.4
Rev: src/abstract_compress.h:1.5
Rev: src/client_pty.c:1.11
Rev: src/client_pty.h:1.4
Rev: src/client_userauth.c:1.23
Rev: src/compress.c:1.8
Rev: src/compress.h:1.3
Rev: src/idea.c:1.2
Rev: src/lookup_verifier.c:1.2
Rev: src/lookup_verifier.h:1.4
Rev: src/server_authorization.c:1.6
Rev: src/server_authorization.h:1.3
Rev: src/server_pty.c:1.14
Rev: src/server_pty.h:1.10
Rev: src/server_publickey.c:1.7
Rev: src/sexp_commands.c:1.5
Rev: src/sexp_conv.c:1.11
Rev: src/spki.c:1.7
Rev: src/spki.h:1.6
Rev: src/tcpforward.c:1.34
Rev: src/tcpforward.h:1.11
Rev: src/tcpforward_commands.c:1.15
Rev: src/tcpforward_commands.h:1.5
Rev: src/tty.c:1.7
Rev: src/tty.h:1.7
Rev: src/zlib.c:1.21

(dsa_private2public): Use sexp_assq().
(parse_dsa_private_key): Use make_dsa_spki_signer().

Rev: src/spki.c:1.6

Rev: src/spki.c:1.5
Rev: src/spki.h:1.4

Balázs Scheidler authored Nov 03, 1999 and Niels Möller committed Nov 03, 1999

* src/lshd.c (do_read_key): Moved key reading to spki.c. (Bazsi)

* src/spki.c (parse_dsa_private_key): Moved from lshd.c. (Bazsi)
(parse_private_key): New function (Bazsi).
(do_spki_parse_key): New function (Bazsi).
(make_spki_parse_key): New function (Bazsi).
(read_spki_key_file): New function (Bazsi).

* src/server_publickey.c (do_authenticate): Changed the handling
of PEER_SSH_DSS_KLUDGE. (Bazsi)

* src/server_keyexchange.c (do_init_server_dh): Handle
PEER_SSH_DSS_KLUDGE. (Bazsi)

* src/publickey_crypto.c (make_keypair): Added type argument. (Bazsi)

* src/publickey_crypto.h (keypair): Added type attribute. (Bazsi)

* src/lsh.c (main_options): Added identity argument. (Bazsi)

* src/keyexchange.c (do_handle_kexinit): Don't use
ATOM_SSH_DSS_KLUDGE. (Bazsi)

* src/exception.h (EXC_IO_OPEN_READ): New exception type. (Bazsi)

* src/connection_commands.c (do_line): Fixed detection of ssh2.

* src/client_keyexchange.c (dh_client): Added hostkey_algorithm
attribute. (Bazsi)
(do_handle_dh_reply): Handle the dss kludge here. (Bazsi)
(do_init_client_dh): Don't use ATOM_SSH_DSS_KLUDGE. (Bazsi)

* src/atoms.in: Removed ssh-dss-kludge. (Bazsi)

* src/lshd.c (main): Deal with pid files after forking and
daemonization, to get the right pid.

Rev: src/atoms.in:1.7
Rev: src/client.c:1.80
Rev: src/client_keyexchange.c:1.35
Rev: src/client_userauth.c:1.20
Rev: src/connection_commands.c:1.16
Rev: src/exception.h:1.12
Rev: src/keyexchange.c:1.57
Rev: src/lookup_verifier.h:1.2
Rev: src/lsh.c:1.79
Rev: src/lshd.c:1.71
Rev: src/publickey_crypto.c:1.35
Rev: src/publickey_crypto.h:1.25
Rev: src/server_keyexchange.c:1.34
Rev: src/server_publickey.c:1.4
Rev: src/spki.c:1.4
Rev: src/spki.h:1.3
Rev: src/userauth.h:1.16

and free the dsa_public struct properly.

Rev: src/spki.c:1.3

Rev: src/spki.c:1.2
Rev: src/spki.h:1.2

Rev: ChangeLog:1.93
Rev: src/spki.c:1.1
Rev: src/spki.h:1.1