Keys with type sk-* make no sense as host keys, so they should be

disabled
This commit is contained in:
Egor Duda 2022-01-17 18:33:24 +03:00
parent 2ad020ff30
commit 712d529164
No known key found for this signature in database
GPG Key ID: 8610EBBBC18A37F1

View File

@ -668,6 +668,12 @@ void load_all_hostkeys() {
any_keys = 1; any_keys = 1;
} }
#endif #endif
#if DROPBEAR_SK_ECDSA
disablekey(DROPBEAR_SIGNKEY_SK_ECDSA);
#endif
#if DROPBEAR_SK_ED25519
disablekey(DROPBEAR_SIGNKEY_SK_ED25519);
#endif
if (!any_keys) { if (!any_keys) {
dropbear_exit("No hostkeys available. 'dropbear -R' may be useful or run dropbearkey."); dropbear_exit("No hostkeys available. 'dropbear -R' may be useful or run dropbearkey.");