ssh/sshd/sshd.c

199 } sensitive_data;
479 	    sensitive_data.server_key ? "new " : "", options.server_key_bits);
480 	if (sensitive_data.server_key != NULL)
481 		key_free(sensitive_data.server_key);
482 	sensitive_data.server_key = key_generate(KEY_RSA1,
489 		sensitive_data.ssh1_cookie[i] = rnd & 0xff;
647 	if (sensitive_data.server_key) {
648 		key_free(sensitive_data.server_key);
649 		sensitive_data.server_key = NULL;
652 		if (sensitive_data.host_keys[i]) {
653 			key_free(sensitive_data.host_keys[i]);
654 			sensitive_data.host_keys[i] = NULL;
657 	sensitive_data.ssh1_host_key = NULL;
658 	(void) memset(sensitive_data.ssh1_cookie, 0, SSH_SESSION_KEY_LENGTH);
668 	if (sensitive_data.server_key) {
669 		tmp = key_demote(sensitive_data.server_key);
670 		key_free(sensitive_data.server_key);
671 		sensitive_data.server_key = tmp;
675 		if (sensitive_data.host_keys[i]) {
676 			tmp = key_demote(sensitive_data.host_keys[i]);
677 			key_free(sensitive_data.host_keys[i]);
678 			sensitive_data.host_keys[i] = tmp;
680 				sensitive_data.ssh1_host_key = tmp;
696 		Key *key = sensitive_data.host_keys[i];
725 		Key *key = sensitive_data.host_keys[i];
740 	return (sensitive_data.host_keys[ind]);
752 		if (key == sensitive_data.host_keys[i])
1032 		sensitive_data.host_keys =
1035 		sensitive_data.host_keys[i] = NULL;
1036 	sensitive_data.server_key = NULL;
1037 	sensitive_data.ssh1_host_key = NULL;
1038 	sensitive_data.have_ssh1_key = 0;
1039 	sensitive_data.have_ssh2_key = 0;
1043 		sensitive_data.host_keys[i] = key;
1047 			sensitive_data.host_keys[i] = NULL;
1052 			sensitive_data.ssh1_host_key = key;
1053 			sensitive_data.have_ssh1_key = 1;
1057 			sensitive_data.have_ssh2_key = 1;
1063 	if ((options.protocol & SSH_PROTO_1) && !sensitive_data.have_ssh1_key) {
1068 	    !sensitive_data.have_ssh2_key) {
1101 		    BN_num_bits(sensitive_data.ssh1_host_key->rsa->n) -
1103 		    BN_num_bits(sensitive_data.ssh1_host_key->rsa->n) +
1106 			    BN_num_bits(sensitive_data.ssh1_host_key->rsa->n) +
1701 	if (BN_cmp(sensitive_data.server_key->rsa->n, sensitive_data.ssh1_host_key->rsa->n) > 0) {
1703 		if (BN_num_bits(sensitive_data.server_key->rsa->n) <
1704 		    BN_num_bits(sensitive_data.ssh1_host_key->rsa->n) + SSH_KEY_BITS_RESERVED) {
1707 			    BN_num_bits(sensitive_data.server_key->rsa->n),
1708 			    BN_num_bits(sensitive_data.ssh1_host_key->rsa->n),
1712 		    sensitive_data.server_key->rsa) <= 0)
1715 		    sensitive_data.ssh1_host_key->rsa) <= 0)
1719 		if (BN_num_bits(sensitive_data.ssh1_host_key->rsa->n) <
1720 		    BN_num_bits(sensitive_data.server_key->rsa->n) + SSH_KEY_BITS_RESERVED) {
1723 			    BN_num_bits(sensitive_data.ssh1_host_key->rsa->n),
1724 			    BN_num_bits(sensitive_data.server_key->rsa->n),
1728 		    sensitive_data.ssh1_host_key->rsa) < 0)
1731 		    sensitive_data.server_key->rsa) < 0)
1776 	packet_put_int(BN_num_bits(sensitive_data.server_key->rsa->n));
1777 	packet_put_bignum(sensitive_data.server_key->rsa->e);
1778 	packet_put_bignum(sensitive_data.server_key->rsa->n);
1781 	packet_put_int(BN_num_bits(sensitive_data.ssh1_host_key->rsa->n));
1782 	packet_put_bignum(sensitive_data.ssh1_host_key->rsa->e);
1783 	packet_put_bignum(sensitive_data.ssh1_host_key->rsa->n);
1822 	    BN_num_bits(sensitive_data.server_key->rsa->n),
1823 	    BN_num_bits(sensitive_data.ssh1_host_key->rsa->n));
1876 			    sensitive_data.ssh1_host_key->rsa->n,
1877 			    sensitive_data.server_key->rsa->n);
1895 		MD5_Update(&md, sensitive_data.ssh1_cookie, SSH_SESSION_KEY_LENGTH);
1900 		MD5_Update(&md, sensitive_data.ssh1_cookie, SSH_SESSION_KEY_LENGTH);