Dag-Erling Smørgrav 4520e72ebf key_load_private() ignores the passphrase argument if the private key ... is unencrypted. This defeats the nullok check, because it means a non-null passphrase will successfully unlock the key. To address this, try at first to load the key without a passphrase. If this succeeds and the user provided a non-empty passphrase *or* nullok is false, reject the key. MFC after: 1 week Noticed by: Guy Helmer <guy.helmer@palisadesystems.com>		2011-11-20 15:18:49 +00:00
..
Makefile	Build lib/ with WARNS=6 by default.	2010-01-02 09:58:07 +00:00
pam_ssh.8	Load the ECDSA key if there is one.	2011-10-07 12:58:33 +00:00
pam_ssh.c	key_load_private() ignores the passphrase argument if the private key	2011-11-20 15:18:49 +00:00