openssh/dist/sshsig.c

70 		error_fr(r, "base64 encode signature");
106 		error("Couldn't parse signature: missing header");
129 		error("Couldn't parse signature: missing footer");
194 	/* If using RSA keys then default to a good signature algorithm */
221 		error_fr(r, "assemble signature object");
247 		error("Couldn't verify signature: invalid format");
270 sshsig_peek_hashalg(struct sshbuf *signature, char **hashalgp)
278 	if ((buf = sshbuf_fromb(signature)) == NULL)
287 		error_fr(r, "parse signature object");
302 sshsig_wrap_verify(struct sshbuf *signature, const char *hashalg,
334 	if ((r = sshsig_parse_preamble(signature)) != 0)
337 	if ((r = sshkey_froms(signature, &key)) != 0 ||
338 	    (r = sshbuf_get_cstring(signature, &got_namespace, NULL)) != 0 ||
339 	    (r = sshbuf_get_string(signature, NULL, NULL)) != 0 ||
340 	    (r = sshbuf_get_cstring(signature, &sig_hashalg, NULL)) != 0 ||
341 	    (r = sshbuf_get_string_direct(signature, &sig, &siglen)) != 0) {
342 		error_fr(r, "parse signature object");
346 	if (sshbuf_len(signature) != 0) {
353 		error("Couldn't verify signature: namespace does not match");
360 		error("Couldn't verify signature: hash algorithm mismatch");
366 	/* Ensure that RSA keys use an acceptable signature algorithm */
369 			error_r(r, "Couldn't verify signature: unable to get "
370 			    "signature type");
374 			error("Couldn't verify signature: unsupported RSA "
375 			    "signature algorithm %s", sigtype);
472 sshsig_verifyb(struct sshbuf *signature, const struct sshbuf *message,
484 	if ((r = sshsig_peek_hashalg(signature, &hashalg)) != 0)
486 	debug_f("signature made with hash \"%s\"", hashalg);
491 	if ((r = sshsig_wrap_verify(signature, hashalg, b, expect_namespace,
600 sshsig_verify_fd(struct sshbuf *signature, int fd,
612 	if ((r = sshsig_peek_hashalg(signature, &hashalg)) != 0)
614 	debug_f("signature made with hash \"%s\"", hashalg);
619 	if ((r = sshsig_wrap_verify(signature, hashalg, b, expect_namespace,
947 		error("%s:%lu: key is not permitted for use in signature "
1144 sshsig_get_pubkey(struct sshbuf *signature, struct sshkey **pubkey)
1151 	if ((r = sshsig_parse_preamble(signature)) != 0)
1153 	if ((r = sshkey_froms(signature, &pk)) != 0)