Commit Graph

  • 28d6d10ddc sftp: Initialize pointers Jakub Jelen 2025-12-22 20:05:59 +01:00
  • b3e13b7f0b pki: Discourage comparing private keys Jakub Jelen 2026-01-08 12:55:06 +01:00
  • 5654c593df ed25519: Avoid timing leak when comparing private keys Jakub Jelen 2026-01-08 12:46:56 +01:00
  • b90b7f2451 Reproducer for out of bounds read of SFTP extensions Jakub Jelen 2025-12-11 13:21:23 +01:00
  • 855a0853ad sftp: Fix out-of-bound read from sftp extensions Jakub Jelen 2025-12-11 13:22:44 +01:00
  • f0fdfd4f49 sftp: Reformat sftp_extensions_* API Jakub Jelen 2025-12-10 19:27:58 +01:00
  • dc39902006 connector: Fix sftp aio read/write with ProxyJump Eshan Kelkar 2025-08-14 12:35:43 +05:30
  • 29dd7874cd sftp_aio: Test sftp aio with libssh proxyjump Eshan Kelkar 2025-08-17 23:34:07 +05:30
  • 8a134e03db tests: Check SSH_OPTIONS_NEXT_IDENTITY functionality Jakub Jelen 2026-02-02 19:29:43 +01:00
  • 39d931f7e5 options: Allow listing all identity files Jakub Jelen 2026-02-02 19:29:03 +01:00
  • b4f6d8b800 misc: Rewrite custom getting of port to use options API Jakub Jelen 2026-01-28 15:10:21 +01:00
  • c78d2bb8fb test: Verify expand characters work as expected Jakub Jelen 2026-01-28 14:23:39 +01:00
  • 5b0cee7c1b misc: Add support for %j and %C percent expand Jakub Jelen 2026-01-27 21:39:56 +01:00
  • 59ed66b684 New ssh_get_local_hostname() Jakub Jelen 2026-01-27 21:38:57 +01:00
  • ce0b616bc6 Fix percent expand character %d to home directory Jakub Jelen 2026-01-27 16:21:38 +01:00
  • 31ceec02fe misc: Cache user home directory in session Jakub Jelen 2026-01-27 16:07:25 +01:00
  • a7cf4bb37b misc: Reformat ssh_get_user_home_dir() Jakub Jelen 2026-01-27 15:43:44 +01:00
  • 3dfaa70fcf misc: Reformat ssh_path_expand_escape Jakub Jelen 2026-01-28 14:58:38 +01:00
  • 76b14eaed7 Update list of implemented RFCs and drafts Jakub Jelen 2026-02-03 10:47:25 +01:00
  • 8e8f091aba connector: Simplify handling of out/err channels Jakub Jelen 2026-01-27 10:43:50 +01:00
  • d75a54e206 tests: Log SFTP server messages to stderr Jakub Jelen 2026-01-16 21:39:45 +01:00
  • efb7a7c4e0 tests: Cover three steps jump parsing Jakub Jelen 2026-01-16 19:12:34 +01:00
  • 7342e73d10 sftp: Remove needless newline from log messages Jakub Jelen 2026-01-16 19:10:48 +01:00
  • 832f92e35f socket: Refactor proxyJump connection and log more events and information Jakub Jelen 2026-01-16 16:37:46 +01:00
  • ea3464532e test: Tighten testing to make sure right user and key is used with proxyjumps Jakub Jelen 2026-01-16 16:36:42 +01:00
  • 7e235f8748 auth: Log the username used for authentication Jakub Jelen 2026-01-16 16:35:14 +01:00
  • 052c8217b7 misc: Document ssh_list_append() Jakub Jelen 2026-01-16 11:27:23 +01:00
  • 26b9ba5f8c bugfix: test presence of before_connection before dereferencing Eshan Kelkar 2025-08-18 17:15:57 -05:00
  • 1b3c061aae Reproducer for memory leak from parsing knonw hosts Jakub Jelen 2026-01-15 11:57:23 +01:00
  • 1525ea3dda knownhosts: Avoid memory leaks on invalid entries Jakub Jelen 2026-01-15 11:32:51 +01:00
  • a189c2ef4d gssapi: Sanitize input parameters Jakub Jelen 2026-01-21 11:33:37 +01:00
  • b2abcf8534 cmake: Propagate WITH_FINAL to abimap conditionally Jakub Jelen 2026-01-22 22:47:30 +01:00
  • 809f9b7729 Require abimap 0.4.0 Jakub Jelen 2026-01-22 22:44:41 +01:00
  • d297621c33 tests: Workaround softhsm-2.7.0 bug in hashed ECDSA Jakub Jelen 2026-01-21 17:55:25 +01:00
  • d936b7e81d mlkem: Use fprintf instead of internal logging function Jakub Jelen 2026-01-21 17:13:42 +01:00
  • 971d44107e ci: Test against latest LibreSSL Shreyas Mahajan 2026-01-21 18:40:36 +05:30
  • a1e49728ba crypto: Add support for Poly1305 from LibreSSL Shreyas Mahajan 2026-01-21 17:45:08 +05:30
  • 6c5459e7fc reformat libcrypto.c Shreyas Mahajan 2026-01-21 16:54:44 +05:30
  • f47d1c797a ci: add CLI helper to run GitLab CI jobs locally Shreyas Mahajan 2026-01-22 18:34:51 +05:30
  • da27d23125 docs: document sftp_session public API type Madhav Vasisth 2026-01-21 19:56:05 +00:00
  • 34db488e4d Native ML-KEM768 implementation Jakub Jelen 2025-12-19 12:00:41 +01:00
  • 9780fa2f01 tests: Apply verbosity also for the ssh_bind Jakub Jelen 2025-11-28 22:46:51 +01:00
  • 5a795ce47c Add missing check in ML-KEM implementation of gcrypt Jakub Jelen 2025-11-28 22:46:22 +01:00
  • b33a90d20b tests: Provide minimal openssl configuration file Jakub Jelen 2026-01-09 20:58:03 +01:00
  • ef45b8ae8c options: Fix doc string Jakub Jelen 2026-01-09 18:52:11 +01:00
  • 3c2b254206 config: Pass the right types to OPTIONS_RSA_MIN_SIZE Jakub Jelen 2026-01-09 18:51:21 +01:00
  • 7dea005729 tests: Avoid needless skip in testcases Jakub Jelen 2026-01-09 18:12:03 +01:00
  • ad8d0c1e03 ci: Use pkcs11-provider on c9s Jakub Jelen 2026-01-09 17:47:18 +01:00
  • cb0f7d963e tests: Remove trailing whitespace Jakub Jelen 2026-01-09 16:32:51 +01:00
  • c90b239230 tests: Skip agent forwarding test if we are too deep in filesystem Jakub Jelen 2026-01-09 16:31:29 +01:00
  • 18ec01c980 tests: Authentication with Ed25519 pkcs11 key Jakub Jelen 2026-01-09 16:30:42 +01:00
  • a983142a07 tests: Set explicit kex algorithm Jakub Jelen 2026-01-09 13:26:16 +01:00
  • 89d51ced0d tests: Log server messages to separate files Jakub Jelen 2026-01-09 12:33:59 +01:00
  • 16771cc574 tests: Remove needless goto Jakub Jelen 2026-01-09 12:33:30 +01:00
  • 247ebb4d7f tests: Remove unused variable Jakub Jelen 2026-01-09 12:33:12 +01:00
  • acd5dace66 tests: Print read bytes to debug failures Jakub Jelen 2026-01-08 22:19:45 +01:00
  • 5545b8808b sntrup: Avoid linking issues in external_override tests Jakub Jelen 2026-01-08 22:08:33 +01:00
  • be5a900ed0 tests: Reformat torture_auth_pkcs11 Jakub Jelen 2026-01-09 16:40:08 +01:00
  • 40ba3c6c80 cmake: Download doxygen theme during build not configure run Andreas Schneider 2026-01-07 15:28:43 +01:00
  • 57225a7168 ci: Include internal docs in the docs coverage reports Jakub Jelen 2025-12-18 14:03:35 +01:00
  • 02ae2ace35 cmake: Make the WITH_INTERNAL_DOC function do something Jakub Jelen 2025-12-18 14:02:56 +01:00
  • 76c6ee9ccf Add ML-KEM implementation for gcrypt Jakub Jelen 2025-11-28 22:46:22 +01:00
  • 9a3351934b gssapi: Fix typo Jakub Jelen 2026-01-05 14:24:21 +01:00
  • 1f1309c915 pki: Improve documentation about pubkey import functions Jakub Jelen 2026-01-05 14:13:32 +01:00
  • a8ca282033 dh-gex: Initialize best_size to make the code mode straight-forward Jakub Jelen 2026-01-07 13:56:33 +01:00
  • b61bb3f8ac connector: Avoid possible underflow ... Jakub Jelen 2026-01-07 13:44:59 +01:00
  • c9abf5ebbb connect: Avoid calling close with negative argument Jakub Jelen 2026-01-07 13:25:25 +01:00
  • 48fdf4b80a gssapi: Avoid possible memory leak on error condition Jakub Jelen 2026-01-07 13:20:29 +01:00
  • f5eb3e532b gssapi: Check return value from ssh_gssapi_init() Jakub Jelen 2026-01-07 13:18:23 +01:00
  • 3f0007895c Add Keyboard Interactive anshul agrawal 2026-01-06 22:56:44 +05:30
  • 06186279a8 feat: Add interoperability tests for PuTTY nikhil-nari 2025-12-24 07:27:48 +05:30
  • 39a62cef44 tests: suppress leaks from NSS modules Samir Benmendil 2025-12-22 17:44:56 +00:00
  • 7969b6de3c Suppress remaining OpenSSL 3.5 memory leaks Jakub Jelen 2025-11-05 15:47:32 +01:00
  • b207e39d28 tests: Adjust valgrind supressions for Fedora 43 Jakub Jelen 2025-11-04 18:37:00 +01:00
  • 6230b24ff5 tests: Test proxyjump configuration parsing Jakub Jelen 2025-10-10 13:43:27 +02:00
  • e668b03dd7 tests: Reproducer for missing value to LogLevel Jakub Jelen 2025-12-15 11:07:08 +01:00
  • 77ce02d809 config: Allow setting username from configuration Jakub Jelen 2025-10-14 22:50:45 +02:00
  • c36bd2304a connect: Close possibly leaking socket Jakub Jelen 2025-12-16 17:22:27 +01:00
  • 82db6a7ab3 tests: Test proxyjump configuration parsing Jakub Jelen 2025-10-10 13:43:27 +02:00
  • deffea5ad2 socket: Properly close the proxyjump FD when proxy connection fails Jakub Jelen 2025-10-14 22:52:14 +02:00
  • 320844669a config: Allow setting username from configuration Jakub Jelen 2025-10-14 22:50:45 +02:00
  • d61b0dc7cc tests: Improve test coverage of comparing certificates Jakub Jelen 2025-12-12 17:43:13 +01:00
  • d12eb770ac pki: Fix comparing public key of certificate Jakub Jelen 2025-12-12 16:37:20 +01:00
  • 03b29a6874 pki: Avoild false positive matches when comparing certificates in mbedtls and gcrypt Jakub Jelen 2025-12-12 16:36:43 +01:00
  • 99957fb561 ssh_known_hosts_get_algorithms: Simplify cleanup ... Jakub Jelen 2025-11-24 18:05:36 +01:00
  • 3e9175e66a server: Check strdup allocation failure Jakub Jelen 2025-11-24 17:51:06 +01:00
  • bf295abb5b tests: Remove the -E which is overridden by followed -E on ctest CLI Jakub Jelen 2025-11-05 14:55:03 +01:00
  • 7f14df3eac tests: Avoid needless pthread_exit() Jakub Jelen 2025-11-04 21:49:51 +01:00
  • c206e5d84e client: Reset session packet state on disconnect Pavol Žáčik 2025-10-21 15:34:53 +02:00
  • 274b8f19b3 connector: Fix default connector flags Jakub Jelen 2024-07-22 15:17:39 +02:00
  • 39a88d62c9 connector: Reformat Jakub Jelen 2024-07-22 15:26:19 +02:00
  • 94f12090b5 fix(bind): Remove code duplication in ssh_bind_listen Francesco Rollo 2025-09-17 01:47:59 +03:00
  • d0d45c8915 gssapi: free session->gssapi->user before assigning Pavol Žáčik 2025-12-18 14:25:35 +01:00
  • 65abae059e ci: Add bug links as reasoning why some tests are not run Pavol Žáčik 2025-12-10 13:57:24 +01:00
  • 7c2574682c tests: test pubkey auth after gssapi-keyex with null host key Pavol Žáčik 2025-12-09 14:02:58 +01:00
  • d2bb1ba889 auth: do not prefer hostbound auth if there is no host key Pavol Žáčik 2025-12-09 13:11:06 +01:00
  • 9b4ee9c6d4 gssapi: enable gssapi-keyex in FIPS mode Pavol Žáčik 2025-12-02 10:31:01 +01:00
  • d3e80d9a19 tests: test fallback to regular key exchange from gssapi-keyex Pavol Žáčik 2025-12-04 12:56:55 +01:00
  • 4d3da7819c bind: adjust hostkey error messages to be more precise Pavol Žáčik 2025-12-08 12:29:05 +01:00
  • b79a681ebb auth: check for strdup allocation failure in ssh_userauth_gssapi_keyex Pavol Žáčik 2025-12-08 12:23:11 +01:00