Commits on Jun 8, 2022

1. libgit2: fix ssh host key verification regression …

   Earlier, host key verification could potentially fail if there were
   multiple entries in the known_hosts file and if the intended encryption
   algorithm wasn't the first entry. This happened because we used the same
   hasher object to compute the sum of all the public keys present in the
   known_hosts file, which led to invalid hashes, resulting in a mismatch
   when compared with the hash of the advertised public key. This is fixed,
   by not creating the hasher ourselves and instead delegating that to the
   function actually doing the matching, ensuring that a new hasher is used
   for each comparison.
   
   Regression introduced in v0.25.0 and reported in
   fluxcd/image-automation-controller#378
   
   Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>

   

   aryan9600 committed Jun 8, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for 4769253
   • Browse repository at this point

   Copy the full SHA

   4769253 View commit details

   Browse the repository at this point in the history