[ssh_x509] Segfault with ECDSA

ssh_x509 at roumenpetrov.info ssh_x509 at roumenpetrov.info
Thu Nov 22 19:15:36 EET 2012


Hi,

If I compile openssh 6.1p1 with openssl 1.0.1c and your patch, and use a CA
that has an ECDSA signature, then the client crashes when using an engine.
The problem appears to be that ssh_x509_sign returns with an error and then
X509_free fails on cleanup.

I guess the underlying problem is that you simply do not support ECDSA?  (so I
am not giving a lot of details, as I think this error is "expected").

If so, do you plan to support ECDSA at some point?

Thanks,
Andrew



More information about the ssh_x509 mailing list