Problem with server key verification

[Michal Vaško <mvasko@xxxxxxxxx>]

Hi,

I managed to implement a server with public key verification as one of the supported authentication methods. I set "ssh_server_cb" structure with the "auth_pubkey_function" callback that is correctly called. My problem is that if someone has a valid public key, they can authenticate themselves with any username, because I cannot find the information where the public key came from in the server, only that it is valid (the signature_state argument). Can you suggest, please, an elegant way of solving this? Thank you.

Kind regards,
Michal