mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-22 13:45:38 +00:00
rpc: libssh: allow a NULL known_hosts file
Make sure that virNetLibsshSessionSetHostKeyVerification accepts a NULL value for the path to the known_hosts file: - call ssh_options_set(SSH_OPTIONS_KNOWNHOSTS) anyway, using /dev/null, otherwise libssh will use its default path - do not call ssh_write_knownhost when no known hosts file was set Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1406457
This commit is contained in:
parent
97dbf2b604
commit
408a1ce5f8
@ -382,14 +382,16 @@ virNetLibsshCheckHostKey(virNetLibsshSessionPtr sess)
|
||||
VIR_FREE(askKey.result);
|
||||
}
|
||||
|
||||
/* write the host key file */
|
||||
if (ssh_write_knownhost(sess->session) < 0) {
|
||||
errmsg = ssh_get_error(sess->session);
|
||||
virReportError(VIR_ERR_LIBSSH,
|
||||
_("failed to write known_host file '%s': %s"),
|
||||
sess->knownHostsFile,
|
||||
errmsg);
|
||||
return -1;
|
||||
/* write the host key file, if specified */
|
||||
if (sess->knownHostsFile) {
|
||||
if (ssh_write_knownhost(sess->session) < 0) {
|
||||
errmsg = ssh_get_error(sess->session);
|
||||
virReportError(VIR_ERR_LIBSSH,
|
||||
_("failed to write known_host file '%s': %s"),
|
||||
sess->knownHostsFile,
|
||||
errmsg);
|
||||
return -1;
|
||||
}
|
||||
}
|
||||
/* key was accepted and added */
|
||||
return 0;
|
||||
@ -1172,13 +1174,20 @@ virNetLibsshSessionSetHostKeyVerification(virNetLibsshSessionPtr sess,
|
||||
goto error;
|
||||
}
|
||||
|
||||
/* set the known hosts file */
|
||||
if (ssh_options_set(sess->session, SSH_OPTIONS_KNOWNHOSTS, hostsfile) < 0)
|
||||
goto error;
|
||||
/* set the known hosts file, if specified */
|
||||
if (hostsfile) {
|
||||
if (ssh_options_set(sess->session, SSH_OPTIONS_KNOWNHOSTS, hostsfile) < 0)
|
||||
goto error;
|
||||
|
||||
VIR_FREE(sess->knownHostsFile);
|
||||
if (VIR_STRDUP(sess->knownHostsFile, hostsfile) < 0)
|
||||
goto error;
|
||||
VIR_FREE(sess->knownHostsFile);
|
||||
if (VIR_STRDUP(sess->knownHostsFile, hostsfile) < 0)
|
||||
goto error;
|
||||
} else {
|
||||
/* libssh does not support trying no known_host file at all:
|
||||
* hence use /dev/null here, without storing it as file */
|
||||
if (ssh_options_set(sess->session, SSH_OPTIONS_KNOWNHOSTS, "/dev/null") < 0)
|
||||
goto error;
|
||||
}
|
||||
|
||||
virObjectUnlock(sess);
|
||||
return 0;
|
||||
|
Loading…
Reference in New Issue
Block a user