Note that there are some explanatory texts on larger screens.

plurals
  1. POSSH RFC User authentication Message SSH_MSG_USERAUTH_REQUEST
    primarykey
    data
    text
    <p>I'm working on some proprietary development on SSH protocol.</p> <p>I want one clarification on message SSH_MSG_USERAUTH_REQUEST</p> <p>As per RFC 4252, client can send this below message to server to just verify the whether publickey would be acceptable or not. </p> <p>byte SSH_MSG_USERAUTH_REQUEST string user name in ISO-10646 UTF-8 encoding [RFC3629] string service name in US-ASCII string "publickey" boolean FALSE string public key algorithm name string public key blob</p> <p>Once above message is replied properly by server with SSH_MSG_USERAUTH_PK_OK. </p> <p>Then client sends actual authentication message described below. </p> <p>byte SSH_MSG_USERAUTH_REQUEST string user name string service name string "publickey" boolean TRUE string public key algorithm name string public key to be used for authentication <strong>string signature</strong> :This extra than first message</p> <p>Now I can see first message (without signature) contains publickey blob. Should I verify the blob in first message or I should always skip that and do verification only during actual authentication message ?</p> <p>I'm asking this because I have implemented my code like it does verification on both messages. But whenever i'm trying test against OpenSSH, it fails on first message for authentication but always get passed with second message. However i have debugged and found out OpenSSH is not sending same publickey blob in both message. so my question is why OpenSSH is doing so ? </p> <p>Is OpenSSH is properly following RFC then seems like i should skip verifying publickey blob in first message. if i do that , am i not breaking the RFC ? doing that is right or not ?</p> <p>Please help me to resolve this query. Please let me know if more information is required. Thanks in advance. </p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload