block/ssh: add support for sha256 host key fingerprints
commitbf783261f0aee6e81af3916bff7606d71ccdc153
authorDaniel P. Berrangé <berrange@redhat.com>
Tue, 22 Jun 2021 11:51:56 +0000 (22 12:51 +0100)
committerKevin Wolf <kwolf@redhat.com>
Wed, 30 Jun 2021 10:45:32 +0000 (30 12:45 +0200)
tree5759aec7d24a5cfa48ecf27830ac60c7bd461f8c
parent7170170866f74f3ee9e3a143c959c97c2bc5897e
block/ssh: add support for sha256 host key fingerprints

Currently the SSH block driver supports MD5 and SHA1 for host key
fingerprints. This is a cryptographically sensitive operation and
so these hash algorithms are inadequate by modern standards. This
adds support for SHA256 which has been supported in libssh since
the 0.8.1 release.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
Message-Id: <20210622115156.138458-1-berrange@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Acked-by: Richard W.M. Jones <rjones@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
block/ssh.c
qapi/block-core.json
tests/qemu-iotests/207
tests/qemu-iotests/207.out