crypto/openssh/ssh_api.c

52  * stubs for the server side implementation of kex.
116 	ssh->kex->server = is_server;
119 		ssh->kex->kex[KEX_DH_GRP1_SHA1] = kex_gen_server;
120 		ssh->kex->kex[KEX_DH_GRP14_SHA1] = kex_gen_server;
121 		ssh->kex->kex[KEX_DH_GRP14_SHA256] = kex_gen_server;
122 		ssh->kex->kex[KEX_DH_GRP16_SHA512] = kex_gen_server;
123 		ssh->kex->kex[KEX_DH_GRP18_SHA512] = kex_gen_server;
124 		ssh->kex->kex[KEX_DH_GEX_SHA1] = kexgex_server;
125 		ssh->kex->kex[KEX_DH_GEX_SHA256] = kexgex_server;
127 		ssh->kex->kex[KEX_ECDH_SHA2] = kex_gen_server;
130 		ssh->kex->kex[KEX_C25519_SHA256] = kex_gen_server;
131 		ssh->kex->kex[KEX_KEM_SNTRUP761X25519_SHA512] = kex_gen_server;
132 		ssh->kex->load_host_public_key=&_ssh_host_public_key;
133 		ssh->kex->load_host_private_key=&_ssh_host_private_key;
134 		ssh->kex->sign=&_ssh_host_key_sign;
137 		ssh->kex->kex[KEX_DH_GRP1_SHA1] = kex_gen_client;
138 		ssh->kex->kex[KEX_DH_GRP14_SHA1] = kex_gen_client;
139 		ssh->kex->kex[KEX_DH_GRP14_SHA256] = kex_gen_client;
140 		ssh->kex->kex[KEX_DH_GRP16_SHA512] = kex_gen_client;
141 		ssh->kex->kex[KEX_DH_GRP18_SHA512] = kex_gen_client;
142 		ssh->kex->kex[KEX_DH_GEX_SHA1] = kexgex_client;
143 		ssh->kex->kex[KEX_DH_GEX_SHA256] = kexgex_client;
145 		ssh->kex->kex[KEX_ECDH_SHA2] = kex_gen_client;
148 		ssh->kex->kex[KEX_C25519_SHA256] = kex_gen_client;
149 		ssh->kex->kex[KEX_KEM_SNTRUP761X25519_SHA512] = kex_gen_client;
150 		ssh->kex->verify_host_key =&_ssh_verify_host_key;
170 		if (ssh->kex && ssh->kex->server)
202 	if (ssh->kex->server) {
233 	if (cb == NULL || ssh->kex == NULL)
236 	ssh->kex->verify_host_key = cb;
259 	if (sshbuf_len(ssh->kex->client_version) == 0 ||
260 	    sshbuf_len(ssh->kex->server_version) == 0)
371 		if (ssh->kex->server || ++n > SSH_MAX_PRE_BANNER_LINES) {
440 	struct kex *kex = ssh->kex;
449 	if (kex->server) {
450 		if (sshbuf_len(ssh->kex->server_version) == 0)
451 			r = _ssh_send_banner(ssh, ssh->kex->server_version);
453 		    sshbuf_len(ssh->kex->server_version) != 0 &&
454 		    sshbuf_len(ssh->kex->client_version) == 0)
455 			r = _ssh_read_banner(ssh, ssh->kex->client_version);
457 		if (sshbuf_len(ssh->kex->server_version) == 0)
458 			r = _ssh_read_banner(ssh, ssh->kex->server_version);
460 		    sshbuf_len(ssh->kex->server_version) != 0 &&
461 		    sshbuf_len(ssh->kex->client_version) == 0)
462 			r = _ssh_send_banner(ssh, ssh->kex->client_version);
466 	/* start initial kex as soon as we have exchanged the banners */
467 	if (sshbuf_len(ssh->kex->server_version) != 0 &&
468 	    sshbuf_len(ssh->kex->client_version) != 0) {
530 	/* XXX we de-serialize ssh->kex->my, modify it, and change it */
531 	if ((r = kex_buf2prop(ssh->kex->my, NULL, &proposal)) != 0)
559 		debug2_f("orig/%d    %s", ssh->kex->server, orig);
560 		debug2_f("replace/%d %s", ssh->kex->server, replace);
564 		r = kex_prop2buf(ssh->kex->my, proposal);