pam_ssh: pam_ssh: Don't allow a bogus passphrase for unencrypted keys. DragonFly_RELEASE_2_10
authorPeter Avalos <pavalos@dragonflybsd.org>
Sat, 24 Dec 2011 21:21:07 +0000 (13:21 -0800)
committerPeter Avalos <pavalos@dragonflybsd.org>
Sat, 24 Dec 2011 21:21:07 +0000 (13:21 -0800)
commit8fb0265f25056f0ed8876d25b5f4598181ed46c4
treede681196e412721d97aa1ebda2f38563d3b2c2bf
parent75df574506ea14695f2e86f863d312d284086d6d
pam_ssh:  pam_ssh:  Don't allow a bogus passphrase for unencrypted keys.

key_load_private() ignores the passphrase argument if the private
key is unencrypted.  This defeats the nullok check, because it means
a non-null passphrase will successfully unlock the key.

Obtained-From:  FreeBSD
lib/pam_module/pam_ssh/pam_ssh.c