- jakob@cvs.openbsd.org 2001/12/18 10:05:15

     [auth2.c]
     log fingerprint on successful public key authentication; ok markus@

2 files changed, 10 insertions, 2 deletions

diff --git a/ChangeLog b/ChangeLog
index 6e50b485..fb0e58dd 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -21,6 +21,9 @@
    - jakob@cvs.openbsd.org 2001/12/18 10:04:21
      [auth.h hostfile.c hostfile.h]
      remove auth_rsa_read_key, make hostfile_ready_key non static; ok markus@
+   - jakob@cvs.openbsd.org 2001/12/18 10:05:15
+     [auth2.c]
+     log fingerprint on successful public key authentication; ok markus@
 
 20011219
  - (stevesk) OpenBSD CVS sync X11 localhost display
@@ -7049,4 +7052,4 @@
  - Wrote replacements for strlcpy and mkdtemp
  - Released 1.0pre1
 
-$Id: ChangeLog,v 1.1698 2001/12/21 01:47:09 djm Exp $
+$Id: ChangeLog,v 1.1699 2001/12/21 01:48:54 djm Exp $
diff --git a/auth2.c b/auth2.c
index 29bbdf4f..7a52c3b4 100644
--- a/auth2.c
+++ b/auth2.c
@@ -23,7 +23,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: auth2.c,v 1.75 2001/12/09 18:45:56 markus Exp $");
+RCSID("$OpenBSD: auth2.c,v 1.76 2001/12/18 10:05:15 jakob Exp $");
 
 #include <openssl/evp.h>
 
@@ -651,6 +651,7 @@ user_key_allowed2(struct passwd *pw, Key *key, char *file)
 	u_long linenum = 0;
 	struct stat st;
 	Key *found;
+	char *fp;
 
 	if (pw == NULL)
 		return 0;
@@ -718,6 +719,10 @@ user_key_allowed2(struct passwd *pw, Key *key, char *file)
 			found_key = 1;
 			debug("matching key found: file %s, line %lu",
 			    file, linenum);
+			fp = key_fingerprint(found, SSH_FP_MD5, SSH_FP_HEX);
+			verbose("Found matching %s key: %s",
+			     key_type(found), fp);
+			xfree(fp);
 			break;
 		}
 	}