3 ms·
I was not able to find whether openssh can be exploited with this CVE by presenting malicious client auth certificate. would be glad if someone could clarify w
by slt2021 4y ago
I was not able to find whether openssh can be exploited with this CVE by presenting malicious client auth certificate.
would be glad if someone could clarify whether openssh has this vulnerability?
- formerly_proven 4y agoOpenSSH doesn't support X.509 certificates.
- xorcist 4y agoNor does it call any SSL-related function. OpenSSH only links to OpenSSL for the cryptographic primitives. SSH and SSL are different protocols.