nhyatt/putty-source
1
0
Fork 0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-01-26 09:42:25 +00:00
Code Issues Projects Releases Wiki Activity

Cisco routers apparently have yet another bug: they can't handle RSA

Browse Source 
auth attempts at all without panicking and bombing out. Workaround
added.

[originally from svn r1568]
This commit is contained in:
Simon Tatham 2002-02-27 22:41:31 +00:00
parent a05d76fb1f
commit 84c3ece865
1 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
ssh.c
View File

@ -168,6 +168,7 @@ static const char *const ssh2_disconnect_reasons[] = {
#define BUG_CHOKES_ON_SSH1_IGNORE 1 #define BUG_CHOKES_ON_SSH1_IGNORE 1
#define BUG_SSH2_HMAC 2 #define BUG_SSH2_HMAC 2
#define BUG_NEEDS_SSH1_PLAIN_PASSWORD 4 #define BUG_NEEDS_SSH1_PLAIN_PASSWORD 4
#define BUG_CHOKES_ON_RSA 8
static int ssh_pkt_ctx = 0; static int ssh_pkt_ctx = 0;
@ -1590,6 +1591,16 @@ static void ssh_detect_bugs(char *vstring)
logevent("We believe remote version needs a plain SSH1 password"); logevent("We believe remote version needs a plain SSH1 password");
} }
if (!strcmp(imp, "Cisco-1.25")) {
/*
* These versions apparently have no clue whatever about
* RSA authentication and will panic and die if they see
* an AUTH_RSA message.
*/
ssh_remote_bugs |= BUG_CHOKES_ON_RSA;
logevent("We believe remote version can't handle RSA authentication");
}
if (!strncmp(imp, "2.1.0", 5) || !strncmp(imp, "2.0.", 4) || if (!strncmp(imp, "2.1.0", 5) || !strncmp(imp, "2.0.", 4) ||
!strncmp(imp, "2.2.0", 5) || !strncmp(imp, "2.3.0", 5) || !strncmp(imp, "2.2.0", 5) || !strncmp(imp, "2.3.0", 5) ||
!strncmp(imp, "2.1 ", 4)) { !strncmp(imp, "2.1 ", 4)) {
@ -2191,7 +2202,12 @@ static int do_ssh1_login(unsigned char *in, int inlen, int ispkt)
crWaitUntil(ispkt); crWaitUntil(ispkt);
if ((ssh_remote_bugs & BUG_CHOKES_ON_RSA)) {
/* We must not attempt PK auth. Pretend we've already tried it. */
tried_publickey = tried_agent = 1;
} else {
tried_publickey = tried_agent = 0; tried_publickey = tried_agent = 0;
}
tis_auth_refused = ccard_auth_refused = 0; tis_auth_refused = ccard_auth_refused = 0;
/* Load the public half of cfg.keyfile so we notice if it's in Pageant */ /* Load the public half of cfg.keyfile so we notice if it's in Pageant */
if (*cfg.keyfile) { if (*cfg.keyfile) {