Commit Graph

  • 1b3c061aae Reproducer for memory leak from parsing knonw hosts master Jakub Jelen 2026-01-15 11:57:23 +01:00
  • 1525ea3dda knownhosts: Avoid memory leaks on invalid entries Jakub Jelen 2026-01-15 11:32:51 +01:00
  • a189c2ef4d gssapi: Sanitize input parameters Jakub Jelen 2026-01-21 11:33:37 +01:00
  • b2abcf8534 cmake: Propagate WITH_FINAL to abimap conditionally Jakub Jelen 2026-01-22 22:47:30 +01:00
  • 809f9b7729 Require abimap 0.4.0 Jakub Jelen 2026-01-22 22:44:41 +01:00
  • d297621c33 tests: Workaround softhsm-2.7.0 bug in hashed ECDSA Jakub Jelen 2026-01-21 17:55:25 +01:00
  • d936b7e81d mlkem: Use fprintf instead of internal logging function Jakub Jelen 2026-01-21 17:13:42 +01:00
  • 971d44107e ci: Test against latest LibreSSL Shreyas Mahajan 2026-01-21 18:40:36 +05:30
  • a1e49728ba crypto: Add support for Poly1305 from LibreSSL Shreyas Mahajan 2026-01-21 17:45:08 +05:30
  • 6c5459e7fc reformat libcrypto.c Shreyas Mahajan 2026-01-21 16:54:44 +05:30
  • f47d1c797a ci: add CLI helper to run GitLab CI jobs locally Shreyas Mahajan 2026-01-22 18:34:51 +05:30
  • da27d23125 docs: document sftp_session public API type Madhav Vasisth 2026-01-21 19:56:05 +00:00
  • 34db488e4d Native ML-KEM768 implementation Jakub Jelen 2025-12-19 12:00:41 +01:00
  • 9780fa2f01 tests: Apply verbosity also for the ssh_bind Jakub Jelen 2025-11-28 22:46:51 +01:00
  • 5a795ce47c Add missing check in ML-KEM implementation of gcrypt Jakub Jelen 2025-11-28 22:46:22 +01:00
  • b33a90d20b tests: Provide minimal openssl configuration file Jakub Jelen 2026-01-09 20:58:03 +01:00
  • ef45b8ae8c options: Fix doc string Jakub Jelen 2026-01-09 18:52:11 +01:00
  • 3c2b254206 config: Pass the right types to OPTIONS_RSA_MIN_SIZE Jakub Jelen 2026-01-09 18:51:21 +01:00
  • 7dea005729 tests: Avoid needless skip in testcases Jakub Jelen 2026-01-09 18:12:03 +01:00
  • ad8d0c1e03 ci: Use pkcs11-provider on c9s Jakub Jelen 2026-01-09 17:47:18 +01:00
  • cb0f7d963e tests: Remove trailing whitespace Jakub Jelen 2026-01-09 16:32:51 +01:00
  • c90b239230 tests: Skip agent forwarding test if we are too deep in filesystem Jakub Jelen 2026-01-09 16:31:29 +01:00
  • 18ec01c980 tests: Authentication with Ed25519 pkcs11 key Jakub Jelen 2026-01-09 16:30:42 +01:00
  • a983142a07 tests: Set explicit kex algorithm Jakub Jelen 2026-01-09 13:26:16 +01:00
  • 89d51ced0d tests: Log server messages to separate files Jakub Jelen 2026-01-09 12:33:59 +01:00
  • 16771cc574 tests: Remove needless goto Jakub Jelen 2026-01-09 12:33:30 +01:00
  • 247ebb4d7f tests: Remove unused variable Jakub Jelen 2026-01-09 12:33:12 +01:00
  • acd5dace66 tests: Print read bytes to debug failures Jakub Jelen 2026-01-08 22:19:45 +01:00
  • 5545b8808b sntrup: Avoid linking issues in external_override tests Jakub Jelen 2026-01-08 22:08:33 +01:00
  • be5a900ed0 tests: Reformat torture_auth_pkcs11 Jakub Jelen 2026-01-09 16:40:08 +01:00
  • 40ba3c6c80 cmake: Download doxygen theme during build not configure run Andreas Schneider 2026-01-07 15:28:43 +01:00
  • 57225a7168 ci: Include internal docs in the docs coverage reports Jakub Jelen 2025-12-18 14:03:35 +01:00
  • 02ae2ace35 cmake: Make the WITH_INTERNAL_DOC function do something Jakub Jelen 2025-12-18 14:02:56 +01:00
  • 76c6ee9ccf Add ML-KEM implementation for gcrypt Jakub Jelen 2025-11-28 22:46:22 +01:00
  • 9a3351934b gssapi: Fix typo Jakub Jelen 2026-01-05 14:24:21 +01:00
  • 1f1309c915 pki: Improve documentation about pubkey import functions Jakub Jelen 2026-01-05 14:13:32 +01:00
  • a8ca282033 dh-gex: Initialize best_size to make the code mode straight-forward Jakub Jelen 2026-01-07 13:56:33 +01:00
  • b61bb3f8ac connector: Avoid possible underflow ... Jakub Jelen 2026-01-07 13:44:59 +01:00
  • c9abf5ebbb connect: Avoid calling close with negative argument Jakub Jelen 2026-01-07 13:25:25 +01:00
  • 48fdf4b80a gssapi: Avoid possible memory leak on error condition Jakub Jelen 2026-01-07 13:20:29 +01:00
  • f5eb3e532b gssapi: Check return value from ssh_gssapi_init() Jakub Jelen 2026-01-07 13:18:23 +01:00
  • 3f0007895c Add Keyboard Interactive anshul agrawal 2026-01-06 22:56:44 +05:30
  • 06186279a8 feat: Add interoperability tests for PuTTY nikhil-nari 2025-12-24 07:27:48 +05:30
  • 39a62cef44 tests: suppress leaks from NSS modules stable-0.11 Samir Benmendil 2025-12-22 17:44:56 +00:00
  • 7969b6de3c Suppress remaining OpenSSL 3.5 memory leaks Jakub Jelen 2025-11-05 15:47:32 +01:00
  • b207e39d28 tests: Adjust valgrind supressions for Fedora 43 Jakub Jelen 2025-11-04 18:37:00 +01:00
  • 6230b24ff5 tests: Test proxyjump configuration parsing Jakub Jelen 2025-10-10 13:43:27 +02:00
  • e668b03dd7 tests: Reproducer for missing value to LogLevel Jakub Jelen 2025-12-15 11:07:08 +01:00
  • 77ce02d809 config: Allow setting username from configuration Jakub Jelen 2025-10-14 22:50:45 +02:00
  • c36bd2304a connect: Close possibly leaking socket Jakub Jelen 2025-12-16 17:22:27 +01:00
  • 82db6a7ab3 tests: Test proxyjump configuration parsing Jakub Jelen 2025-10-10 13:43:27 +02:00
  • deffea5ad2 socket: Properly close the proxyjump FD when proxy connection fails Jakub Jelen 2025-10-14 22:52:14 +02:00
  • 320844669a config: Allow setting username from configuration Jakub Jelen 2025-10-14 22:50:45 +02:00
  • d61b0dc7cc tests: Improve test coverage of comparing certificates Jakub Jelen 2025-12-12 17:43:13 +01:00
  • d12eb770ac pki: Fix comparing public key of certificate Jakub Jelen 2025-12-12 16:37:20 +01:00
  • 03b29a6874 pki: Avoild false positive matches when comparing certificates in mbedtls and gcrypt Jakub Jelen 2025-12-12 16:36:43 +01:00
  • 99957fb561 ssh_known_hosts_get_algorithms: Simplify cleanup ... Jakub Jelen 2025-11-24 18:05:36 +01:00
  • 3e9175e66a server: Check strdup allocation failure Jakub Jelen 2025-11-24 17:51:06 +01:00
  • bf295abb5b tests: Remove the -E which is overridden by followed -E on ctest CLI Jakub Jelen 2025-11-05 14:55:03 +01:00
  • 7f14df3eac tests: Avoid needless pthread_exit() Jakub Jelen 2025-11-04 21:49:51 +01:00
  • c206e5d84e client: Reset session packet state on disconnect Pavol Žáčik 2025-10-21 15:34:53 +02:00
  • 274b8f19b3 connector: Fix default connector flags Jakub Jelen 2024-07-22 15:17:39 +02:00
  • 39a88d62c9 connector: Reformat Jakub Jelen 2024-07-22 15:26:19 +02:00
  • 94f12090b5 fix(bind): Remove code duplication in ssh_bind_listen Francesco Rollo 2025-09-17 01:47:59 +03:00
  • d0d45c8915 gssapi: free session->gssapi->user before assigning Pavol Žáčik 2025-12-18 14:25:35 +01:00
  • 65abae059e ci: Add bug links as reasoning why some tests are not run Pavol Žáčik 2025-12-10 13:57:24 +01:00
  • 7c2574682c tests: test pubkey auth after gssapi-keyex with null host key Pavol Žáčik 2025-12-09 14:02:58 +01:00
  • d2bb1ba889 auth: do not prefer hostbound auth if there is no host key Pavol Žáčik 2025-12-09 13:11:06 +01:00
  • 9b4ee9c6d4 gssapi: enable gssapi-keyex in FIPS mode Pavol Žáčik 2025-12-02 10:31:01 +01:00
  • d3e80d9a19 tests: test fallback to regular key exchange from gssapi-keyex Pavol Žáčik 2025-12-04 12:56:55 +01:00
  • 4d3da7819c bind: adjust hostkey error messages to be more precise Pavol Žáčik 2025-12-08 12:29:05 +01:00
  • b79a681ebb auth: check for strdup allocation failure in ssh_userauth_gssapi_keyex Pavol Žáčik 2025-12-08 12:23:11 +01:00
  • f7cad4245a tests: reenable wait in torture_gssapi_server_key_exchange_null Pavol Žáčik 2025-12-03 10:35:36 +01:00
  • 11c4b29e20 packet_cb: adjust response to NEWKEYS w.r.t. GSSAPI Pavol Žáčik 2025-12-18 19:37:22 +01:00
  • e04d753ace gssapi: add null checks for session->gssapi before using it Pavol Žáčik 2025-12-18 19:36:42 +01:00
  • 06eea93ded packet: complete GSSAPI packet filter Pavol Žáčik 2025-12-02 14:47:12 +01:00
  • 06edb2db5e options: replace SSH_OPTIONS_GSSAPI_KEY_EXCHANGE_ALGS example Pavol Žáčik 2025-12-02 10:04:30 +01:00
  • ced98d41cf doc: document support for gssapi-keyex and related KEX methods Pavol Žáčik 2025-12-02 10:02:30 +01:00
  • 88c2ea6752 gssapi: Add support for ECDH GSSAPI KEX Pavol Žáčik 2025-11-25 11:52:48 +01:00
  • 5fed1bc8be torture_packet: use SSH2_MSG_IGNORE type of test packet Pavol Žáčik 2025-12-01 15:16:56 +01:00
  • a30ba0091f libgcrypt: make bignum_dup usable with const_bignum Pavol Žáčik 2025-12-01 13:55:00 +01:00
  • ad23fe8c27 curve25519: Make ssh_curve25519_build_k public Pavol Žáčik 2025-11-26 16:04:48 +01:00
  • 3710b31d24 session: Refactor ssh_get_publickey_hash Pavol Žáčik 2025-12-18 10:54:59 +01:00
  • 2c5bb17211 md: Implement one-shot md5 Pavol Žáčik 2025-12-18 10:08:16 +01:00
  • 83ae6b3f0a gssapi: reformat parts Jakub Jelen 2025-08-14 13:48:26 +02:00
  • 06cefe1d67 packet: Implement packet filter for non-implemented GSSAPI messages Jakub Jelen 2025-08-14 13:47:59 +02:00
  • 043b1fb133 Move GSSAPI KEX messages to be numerically sorted Jakub Jelen 2025-08-14 13:47:22 +02:00
  • f1490170f3 tests: add test for gssapi server key exchange with null hostkey and no tgt Gauravsingh Sisodia 2025-08-11 12:12:51 +00:00
  • 4ba0746135 fix: some possible memory leaks Gauravsingh Sisodia 2025-08-11 11:58:43 +00:00
  • e94fd6ccd1 tests: add config tests for SSH_OPTIONS_GSSAPI_KEY_EXCHANGE Gauravsingh Sisodia 2025-08-08 11:49:36 +00:00
  • 83114b636f fix: move ssh_gssapi_check_client_config() from ssh_options_set to ssh_options_apply Gauravsingh Sisodia 2025-08-08 11:48:38 +00:00
  • 5a99cf9c7f refactor: remove extra else if branch for disable_hostkeys Gauravsingh Sisodia 2025-08-07 12:53:04 +00:00
  • 213556ce01 reformat: some nits Gauravsingh Sisodia 2025-08-07 12:16:41 +00:00
  • 5d06ee459b refactor: remove issue link from .gitlab-ci.yml Gauravsingh Sisodia 2025-08-04 05:49:04 +00:00
  • 96807b9313 tests: add valgrind suppressions Gauravsingh Sisodia 2025-08-04 05:48:10 +00:00
  • 6d81ecddbe fix: replace pthread_exit in gssapi tests Gauravsingh Sisodia 2025-07-29 09:12:52 +00:00
  • d0e5cf78d0 fix: use strcmp instead of strncmp to avoid prefix match Gauravsingh Sisodia 2025-07-28 10:23:14 +00:00
  • a0707afc3e reformat: gssapi key exchange Gauravsingh Sisodia 2025-07-14 06:04:04 +00:00
  • 06b61f75fa feat: implement packet filter for SSH2_MSG_KEXGSS_COMPLETE Gauravsingh Sisodia 2025-07-13 10:00:28 +00:00
  • f9d7cadf4b fix: create fopen wrapper and block default hostkey paths Gauravsingh Sisodia 2025-03-17 18:36:42 +00:00