mirror of
https://git.tartarus.org/simon/putty.git
synced 2025-01-10 01:48:00 +00:00
21d4754b6a
Now we offer the OpenSSH certificate key types in our KEXINIT host key algorithm list, so that if the server has a certificate, they can send it to us. There's a new storage.h abstraction for representing a list of trusted host CAs, and which ones are trusted to certify hosts for what domains. This is stored outside the normal saved session data, because the whole point of host certificates is to avoid per-host faffing. Configuring this set of trusted CAs is done via a new GUI dialog box, separate from the main PuTTY config box (because it modifies a single set of settings across all saved sessions), which you can launch by clicking a button in the 'Host keys' pane. The GUI is pretty crude for the moment, and very much at a 'just about usable' stage right now. It will want some polishing. If we have no CA configured that matches the hostname, we don't offer to receive certified host keys in the first place. So for existing users who haven't set any of this up yet, nothing will immediately change. Currently, if we do offer to receive certified host keys and the server presents one signed by a CA we don't trust, PuTTY will bomb out unconditionally with an error, instead of offering a confirmation box. That's an unfinished part which I plan to fix before this goes into a release.
74 lines
1.2 KiB
CMake
74 lines
1.2 KiB
CMake
add_sources_from_current_dir(utils
|
|
antispoof.c
|
|
backend_socket_log.c
|
|
base64_decode_atom.c
|
|
base64_decode.c
|
|
base64_encode_atom.c
|
|
base64_encode.c
|
|
bufchain.c
|
|
buildinfo.c
|
|
burnstr.c
|
|
chomp.c
|
|
conf.c
|
|
conf_dest.c
|
|
conf_launchable.c
|
|
ctrlparse.c
|
|
debug.c
|
|
decode_utf8.c
|
|
decode_utf8_to_wchar.c
|
|
default_description.c
|
|
dupcat.c
|
|
dupprintf.c
|
|
dupstr.c
|
|
dup_mb_to_wc.c
|
|
dup_wc_to_mb.c
|
|
encode_utf8.c
|
|
encode_wide_string_as_utf8.c
|
|
fgetline.c
|
|
host_ca_free.c
|
|
host_strchr.c
|
|
host_strchr_internal.c
|
|
host_strcspn.c
|
|
host_strduptrim.c
|
|
host_strrchr.c
|
|
key_components.c
|
|
log_proxy_stderr.c
|
|
make_spr_sw_abort_static.c
|
|
marshal.c
|
|
memory.c
|
|
memxor.c
|
|
null_lp.c
|
|
nullkey.c
|
|
nullseat.c
|
|
nullstrcmp.c
|
|
out_of_memory.c
|
|
parse_blocksize.c
|
|
prompts.c
|
|
ptrlen.c
|
|
read_file_into.c
|
|
seat_connection_fatal.c
|
|
sessprep.c
|
|
sk_free_peer_info.c
|
|
smemclr.c
|
|
smemeq.c
|
|
spr_get_error_message.c
|
|
ssh_key_clone.c
|
|
ssh2_pick_fingerprint.c
|
|
sshutils.c
|
|
strbuf.c
|
|
string_length_for_printf.c
|
|
stripctrl.c
|
|
tempseat.c
|
|
tree234.c
|
|
validate_manual_hostkey.c
|
|
version.c
|
|
wcwidth.c
|
|
wildcard.c
|
|
write_c_string_literal.c
|
|
x11authfile.c
|
|
x11authnames.c
|
|
x11_dehexify.c
|
|
x11_identify_auth_proto.c
|
|
x11_make_greeting.c
|
|
x11_parse_ip.c)
|