Commit Graph

74 Commits

Author SHA1 Message Date
Jon Simons
538f1bc00e server: expose 'ssh_server_init_kex' API
Expose an API 'ssh_server_init_kex' which allows one to change the set of
key exchange, hostkey, ciphers, MACs, and compression algorithms currently
configured for the ssh_session at hand, after having started the
'ssh_handle_key_exchange' process.

One can use this API from the already-existing 'connect_status_function'
callback to dynamically modify the set of algorithms used after having
received the client banner, but before sending out the initial KEXINIT
message.

For example, one might want to prevent advertising the curve25519 key
exchange algorithm for older OpenSSH clients due to interop bugs.

Fixes T25

Signed-off-by: Jon Simons <jon@jonsimons.org>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2017-10-29 15:49:12 +01:00
Alfredo Mazzinghi
9dc650b7fb server: Add option SSH_BIND_OPTIONS_IMPORT_KEY to server
This sets the bind private key directly from an ssh_key struct instead
of reading a file.

Signed-off-by: Alfredo Mazzinghi <am2419@cl.cam.ac.uk>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2017-04-11 10:00:13 +02:00
Andreas Schneider
293ab4bd40 doc: Improve documentation for ssh_set_auth_methods()
Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
2016-11-06 11:29:02 +01:00
Aris Adamantiadis
0701745cbc channels: Move ssh_channel_write_stderr out of server-only
Signed-off-by: Aris Adamantiadis <aris@0xbadc0de.be>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2016-05-02 16:57:13 +02:00
Alan Dunn
47bd0b6d1f doc: Improve and consolidate ssh_bind_options_set docs
Signed-off-by: Alan Dunn <amdunn@gmail.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2014-03-27 10:49:08 +01:00
Alan Dunn
2a1089d607 options: Allow use of host ECDSA key
Signed-off-by: Alan Dunn <amdunn@gmail.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2014-03-27 10:05:23 +01:00
Nicolas Viennot
7b63fe2f22 server: Add a ssh_send_keepalive() function.
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2013-11-24 23:21:04 +01:00
Aris Adamantiadis
37cce98f7e Doc: fix a few broken parameters
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2013-07-13 14:56:14 +02:00
Aris Adamantiadis
65eccf1969 gssapi: retrieve forwarded (delegated) tickets
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2013-07-13 14:50:56 +02:00
Aris Adamantiadis
3b52e38a33 auth: adapt libssh to gssapi-with-mic server
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2013-07-13 14:21:36 +02:00
Andreas Schneider
b2f52799c2 include: Fix the LGPL header.
This has been reported by rpmlint:
libssh-devel.x86_64: W: incorrect-fsf-address libssh.h
2013-01-23 00:22:46 +01:00
Andreas Schneider
2c04994443 pki: Add a ssh_key_cmp() function. 2011-10-29 19:58:28 +02:00
Aris Adamantiadis
551a0c855b server: ssh_bind_accept_fd
This function will not call accept() but use function parameter
instead
2011-10-13 22:23:48 +02:00
Andreas Schneider
5c48438dcb doc: Improve doc of ssh_message_auth_pubkey(). 2011-08-30 23:11:32 +02:00
Andreas Schneider
a9eb0020b8 legacy: Move ssh_private_key and ssh_public_key typedefs. 2011-08-28 14:50:43 +02:00
Andreas Schneider
8c8a91a9b7 server: Migrate more functions to new pki. 2011-08-22 18:41:47 +02:00
milo
7cc4471168 Implemented X11 server side 2011-04-14 14:05:44 +02:00
Andreas Schneider
7e921b7afb messages: Make returned strings const. 2011-03-09 19:45:17 +01:00
Andreas Schneider
7420b0fb83 doc: More doc for messaging functions. 2011-03-09 19:39:34 +01:00
Andreas Schneider
7daa81f3aa doc: Improve the doc of ssh_bind_set_callbacks. 2011-03-09 18:33:03 +01:00
Andreas Schneider
6754c34711 doc: Improved documentation for server options. 2011-03-06 14:25:21 +01:00
Andreas Schneider
dab8f847e6 legacy: Added missing channel_write_stderr. 2011-02-23 12:38:45 +01:00
milo
3c0a4781e4 Added the keyboard-interactive authentication method 2011-02-10 14:39:20 +01:00
Andreas Schneider
038c764055 server: Remove channel_write_stderr. 2010-12-08 10:52:15 +01:00
Andreas Schneider
3ea33f9ab6 doc: Some small fixes in server.h. 2010-12-07 21:43:26 +01:00
Aris Adamantiadis
8e2699e161 start of work to have callbackbased ssh_bind 2010-10-19 23:51:32 +02:00
milo
524302ca7e Added ssh_channel_write_stderr() for the server 2010-10-02 22:52:06 +02:00
milo
2617024136 Added channel features on the server
- ssh_channel_request_send_exit_status()
- ssh_channel_request_send_exit_signal()

- enhanced these features client-side
2010-10-02 22:51:49 +02:00
milo
26d40b5354 Handle global requests and reverse forwarding 2010-10-02 22:51:35 +02:00
Andreas Schneider
2656c6b4ac server: Fixed a shadowed variable. 2010-09-05 12:34:12 +02:00
Milo Jhoran
24b524040b server: Added an API entry for the message callback.
Signed-off-by: Andreas Schneider <asn@cynapses.org>
2010-08-13 11:17:18 +02:00
milo
855b73de87 server: Split ssh_bind_accept and create ssh_handle_key_exchange.
Signed-off-by: Andreas Schneider <asn@cynapses.org>
2010-08-10 00:30:25 +02:00
Andreas Schneider
a6b6a61775 server: Make ssh_accept a depreacted function to not break the API. 2010-08-09 21:39:32 +02:00
Andreas Schneider
39c9a6dfed server: Merge ssh_bind_accept. 2010-08-09 21:28:47 +02:00
Andreas Schneider
561df8d9a2 server: Rename ssh_accept to ssh_bind_accept. 2010-08-09 20:54:43 +02:00
Andreas Schneider
ae64c19f20 Fixed the group of the server functions. 2010-04-04 17:38:50 +02:00
Aris Adamantiadis
43288bc4f2 added ssh_message_auth_reply_pk_ok_simple 2009-12-20 18:51:37 +01:00
Aris Adamantiadis
2e22d6ef99 Add key validation in server side authentication 2009-12-20 18:05:02 +01:00
Aris Adamantiadis
64b72f8d3a Fix some doxygen errors 2009-12-09 19:43:16 +01:00
Aris Adamantiadis
e71c28f6a0 Fix warnings on old gcc's
they don't like variable names having type names
2009-11-03 21:04:07 +01:00
Andreas Schneider
7b7280e728 Added option to set log_verbosity in the server. 2009-10-15 17:17:36 +02:00
Andreas Schneider
2523ed0779 Added an option to set the port as string. 2009-10-15 17:02:51 +02:00
Aris Adamantiadis
71ab0cf6cc No more SSH_BIND SSH_MESSAGE etc. 2009-10-09 22:37:23 +02:00
Aris Adamantiadis
58294442d3 Moved samples into examples directory 2009-10-09 21:44:05 +02:00
Aris Adamantiadis
2e9c13dad0 Modified server API 2009-10-09 21:26:15 +02:00
Andreas Schneider
ab5b4c7cfe Get rid of the options structure. 2009-10-02 20:26:14 +02:00
Aris Adamantiadis
496a8e12d9 Get rid of SSH_MESSAGE 2009-09-23 22:19:11 +02:00
Aris Adamantiadis
0e8e124d20 get rid of SSH_OPTIONS 2009-09-23 22:13:19 +02:00
Aris Adamantiadis
9a8d4cd0fd get rid of SSH_SESSION 2009-09-23 21:55:54 +02:00
Aris Adamantiadis
8bae43876f experimental callback system 2009-08-23 16:33:59 +02:00