Method verify_knownhost

src/FTPClientWrapperSSH.cpp:634–708

}

int FTPClientWrapperSSH::verify_knownhost(ssh_session session) {
	int state, rc;
	int result = -1;
	unsigned char *hash = NULL;
	char * hashHex;
	size_t hlen;
	ssh_key srv_pubkey;
	TCHAR errMessage[512];

	state = ssh_session_is_known_server(session);

	rc = ssh_get_server_publickey(session, &srv_pubkey);
	if (rc < 0)
		return -1;

	const char *keytype = ssh_key_type_to_char(ssh_key_type(srv_pubkey));

	rc = ssh_get_publickey_hash(srv_pubkey, SSH_PUBLICKEY_HASH_SHA1, &hash, &hlen);
	ssh_key_free(srv_pubkey);
	if (rc < 0)
		return -1;

	hashHex = ssh_get_hexa(hash, hlen);

	bool askSavekey = false;

	switch(state){
		case SSH_SERVER_KNOWN_OK:
			OutMsg("[SFTP] Host key accepted");
			result = 0;
			break; /* ok */
		case SSH_SERVER_FILE_NOT_FOUND:
			OutMsg("[SFTP] Creating known hosts file.");
			/* fallback to SSH_SERVER_NOT_KNOWN behavior */
		case SSH_SERVER_NOT_KNOWN: {
			SU::TSprintf(errMessage, 512, TEXT("The server is unknown. Do you trust the host key\r\n%s %s ?"), keytype, hashHex);
			askSavekey = true;
			break; }
		case SSH_SERVER_KNOWN_CHANGED: {
			SU::TSprintf(errMessage, 512, TEXT("The host key had changed, and is now: %s %s\r\nDo you trust this new host key?"), keytype, hashHex);
			askSavekey = true;
			break; }
		case SSH_SERVER_FOUND_OTHER:
			SU::TSprintf(errMessage, 512, TEXT("A different type of host key was returned by the server than that was stored, and now reads: %s %s\r\nDo you trust this different host key?"), keytype, hashHex);
			askSavekey = true;
			break;
		case SSH_SERVER_ERROR:
		default:
			OutErr("[SFTP] SSH_SERVER_ERROR: %s",ssh_get_error(session));
			result = -1;
			break;
	}

	if (askSavekey) {
		int res = ::MessageBox(_MainOutputWindow, errMessage, TEXT("SFTP authentication"), MB_YESNO|MB_DEFBUTTON2);
		if (res == IDYES) {
			if (ssh_session_update_known_hosts(session) < 0) {
				OutErr("[SFTP] Writing known hosts file failed: %s", strerror(errno));