ncrack-0.7/opensshlib/sshconnect.c

734 check_host_cert(const char *host, const Key *host_key)
738 	if (key_cert_check_authority(host_key, 1, 0, host, &reason) != 0) {
742 	if (buffer_len(host_key->cert->critical) != 0) {
832     Key *host_key, int readonly,
846 	int r, want_cert = key_is_cert(host_key), host_ip_differ = 0;
897 	want_cert = key_is_cert(host_key);
898 	type = key_type(host_key);
904 	host_status = check_key_in_hostkeys(host_hostkeys, host_key,
913 		ip_status = check_key_in_hostkeys(ip_hostkeys, host_key,
930 		if (want_cert && !check_host_cert(hostname, host_key))
938 			    host_key, options.hash_known_hosts))
948 			fp = sshkey_fingerprint(host_key,
950 			ra = sshkey_fingerprint(host_key,
964 			if (check_host_key(hostname, hostaddr, 0, host_key,
986 			if (show_other_keys(host_hostkeys, host_key))
993 			fp = sshkey_fingerprint(host_key,
995 			ra = sshkey_fingerprint(host_key,
1036 				    host, host_key, options.hash_known_hosts) &&
1038 				    host_key, options.hash_known_hosts);
1042 				    hostline, host_key,
1047 			    host_key, options.hash_known_hosts);
1112 		warn_changed_key(host_key);
1244 		raw_key = key_from_private(host_key);
1247 		host_key = raw_key;
1263 verify_host_key(char *host, struct sockaddr *hostaddr, Key *host_key)
1269 	if ((fp = sshkey_fingerprint(host_key,
1277 	    compat20 ? sshkey_ssh_name(host_key) : sshkey_type(host_key), fp);
1279 	if (sshkey_equal(previous_host_key, host_key)) {
1281 		    __func__, sshkey_type(host_key), fp);
1288 		r = sshkey_check_revoked(host_key, options.revoked_host_keys);
1294 			    sshkey_type(host_key), fp,
1300 			    "revoked keys file %s: %s", sshkey_type(host_key),
1312 		if ((r = sshkey_from_private(host_key, &plain)) != 0)
1335 	r = check_host_key(host, hostaddr, options.port, host_key, RDRW,
1342 	if (r == 0 && host_key != NULL) {
1344 		previous_host_key = key_from_private(host_key);
1455 warn_changed_key(Key *host_key)
1459 	fp = sshkey_fingerprint(host_key, options.fingerprint_hash,
1471 	    key_type(host_key), fp);