From 50aded1cd4bb751cad52c39c4fa1f06ebc5e133e Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Mon, 7 Nov 2016 12:54:40 +0100 Subject: ssh: check md5 fingerprints case insensitively (regression) Revert the change from ce8d09483eea but use the new function Reported-by: Kamil Dudka Bug: https://github.com/curl/curl/commit/ce8d09483eea2fcb1b50e323e1a8ed1f3613b2e3#commitcomment-19666146 --- lib/ssh.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lib/ssh.c') diff --git a/lib/ssh.c b/lib/ssh.c index 43c82839d..0df030d27 100644 --- a/lib/ssh.c +++ b/lib/ssh.c @@ -676,7 +676,7 @@ static CURLcode ssh_check_fingerprint(struct connectdata *conn) * against a known fingerprint, if available. */ if(pubkey_md5 && strlen(pubkey_md5) == 32) { - if(!fingerprint || strcmp(md5buffer, pubkey_md5)) { + if(!fingerprint || !strcasecompare(md5buffer, pubkey_md5)) { if(fingerprint) failf(data, "Denied establishing ssh session: mismatch md5 fingerprint. " -- cgit v1.2.3