Commit Graph

  • 55a713cb04 bind_config: Support server side configuration Anderson Toshiyuki Sasaki 2019-02-22 17:02:34 +01:00
  • 79049981a5 config: Move common parser functions to config_parser.c Anderson Toshiyuki Sasaki 2019-02-22 13:06:49 +01:00
  • 19e886d6b1 bind: Use calloc instead of malloc Anderson Toshiyuki Sasaki 2019-03-06 11:38:33 +01:00
  • 0bde6b142c tests: Add missing unit tests for bind options Anderson Toshiyuki Sasaki 2019-02-22 17:10:38 +01:00
  • 45c7d07780 misc: Avoid printing full path in debug message Alberto Garcia Illera 2019-03-27 13:00:26 -07:00
  • f05571841b channels: Added function to create channel to UNIX socket pmorris67 2018-12-27 07:07:31 +00:00
  • 55bcefbc56 config: Use size_t instead of u_int Andreas Schneider 2019-03-25 19:16:28 +01:00
  • b0bd05a724 sftp_get_error returns int, not char *. Jan Pazdziora 2019-03-14 10:00:24 +01:00
  • cd8f5ddbc2 Each ssh_channel_request_exec() needs to be run on fresh channel. Jan Pazdziora 2019-03-12 14:35:22 +01:00
  • 3ce9f78fb4 The ssh_channel_callbacks_struct member name is channel_data_function. Jan Pazdziora 2019-03-12 11:32:23 +01:00
  • 5104c86a2b auth: Set buffer used to store password as secure Anderson Toshiyuki Sasaki 2019-03-15 15:51:05 +01:00
  • e981113ee1 doc: Add a note about OpenSSL linking Andreas Schneider 2019-03-13 10:36:03 +01:00
  • 144e551614 doc: Add a note about OpenSSL linking Andreas Schneider 2019-03-13 10:36:03 +01:00
  • 3736a0367b libcrypto: Add missing includes for modes.h Andreas Schneider 2019-03-12 13:11:34 +01:00
  • 65bc24d8a4 libcrypto: Add missing includes for modes.h Andreas Schneider 2019-03-12 13:11:34 +01:00
  • d8fc65ad71 The SSH_LOG_ENTRY is not defined all, match the descriptions to SSH_BIND_OPTIONS_LOG_VERBOSITY*. Jan Pazdziora 2019-03-08 15:48:19 +01:00
  • 81d0f6b6b7 From the context it seems that the function being defined is authenticate_none. Jan Pazdziora 2019-03-07 15:27:12 +01:00
  • bed7dcb3ec ssh_userauth_publickey_auto requires three arguments. Jan Pazdziora 2019-03-07 15:16:27 +01:00
  • 104c9dca3f Use a common KDF function Simo Sorce 2018-10-01 18:00:01 -04:00
  • c180211c6b Clean up code that generates session keys Simo Sorce 2018-10-01 12:56:32 -04:00
  • c235841436 Add unit test for fn that generates session keys Simo Sorce 2018-10-02 11:21:39 -04:00
  • 449954d99a Fix crypto_free zeroing of encryption keys Simo Sorce 2018-10-03 09:14:45 -04:00
  • be73335f8e sftp: Document how to free memory retruned by sftp_canonicalize_path() Andreas Schneider 2019-02-27 08:32:10 +01:00
  • 7c444c09d7 sftp: Document how to free memory retruned by sftp_canonicalize_path() Andreas Schneider 2019-02-27 08:32:10 +01:00
  • 8234df5dec ssh_event_dopoll can also return SSH_AGAIN Till Wimmer 2019-02-25 17:09:45 +01:00
  • 52986115b8 Bump version to 0.8.7 libssh-0.8.7 Andreas Schneider 2019-02-07 14:34:43 +01:00
  • 7a49ee5ffc cmake: Bump API version to 4.7.4 Andreas Schneider 2019-02-07 14:35:35 +01:00
  • c842bc2e8b Remove SHA384 HMAC Dirkjan Bussink 2019-02-21 16:29:21 +00:00
  • 8892577296 Use constant time comparison function for HMAC comparison Dirkjan Bussink 2014-04-23 17:27:10 -07:00
  • 4a67c19118 Add tests and implementation for Encrypt-then-MAC mode Dirkjan Bussink 2019-02-12 08:56:37 +00:00
  • e4c7912b35 Add flag for tracking EtM HMACs Dirkjan Bussink 2019-02-08 19:44:36 +00:00
  • c6608c9211 Refactor ssh_packet_hmac_verify to allow for direct buffer Dirkjan Bussink 2019-02-08 19:37:35 +00:00
  • f055319efe Select ciphers for MAC tests that need a MAC Dirkjan Bussink 2019-02-15 10:16:36 +00:00
  • 369051a5b4 Remove SHA384 HMAC Dirkjan Bussink 2019-02-21 16:29:21 +00:00
  • 46d15b3161 Use constant time comparison function for HMAC comparison Dirkjan Bussink 2014-04-23 17:27:10 -07:00
  • ac7c64a769 pki_gcrypt: Include missing stdbool.h Andreas Schneider 2019-02-22 11:00:31 +01:00
  • 47014eb273 pki: Fix size type for len in privatekey_string_to_buffer() Andreas Schneider 2019-02-21 14:17:45 +01:00
  • 2223106113 connect: Fix size type for i an j in ssh_select() Andreas Schneider 2018-12-07 12:07:13 +01:00
  • 4af77362b0 connector: Fallback on the socket output callback David Wedderwille 2019-02-14 16:14:14 +01:00
  • f4a0fcc85e connector: Don't NULL connector (in|out) channels on event remove Till Wimmer 2019-01-29 12:01:31 +01:00
  • fa150ef8d2 options: Removed outdated param annotations of ssh_options_set() Till Wimmer 2019-01-29 10:21:07 +01:00
  • 810dbd3db1 config: Avoid buffer overflow Jakub Jelen 2019-02-22 11:09:15 +01:00
  • 1af10fcdb3 config: Avoid buffer overflow Jakub Jelen 2019-02-22 11:09:15 +01:00
  • 8a73e48184 pki_gcrypt: Include missing stdbool.h Andreas Schneider 2019-02-22 11:00:31 +01:00
  • 7a8ed6d02b pki: Fix size type for len in privatekey_string_to_buffer() Andreas Schneider 2019-02-21 14:17:45 +01:00
  • b73ffb3f91 connector: Fallback on the socket output callback David Wedderwille 2019-02-14 16:14:14 +01:00
  • 702a6e7695 client: Add missing break, remove useless return Tilo Eckert 2019-02-18 12:47:56 +01:00
  • eb032e0dec socket: Use more portable PF_UNIX instead of PF_LOCAL Tilo Eckert 2019-02-18 12:44:05 +01:00
  • 17df34da96 crypto: Use uint8_t instead of non-standard u_char Tilo Eckert 2019-02-18 12:39:47 +01:00
  • 7caf6d2ab6 buffer: Fix regression introduced by 6c7eaa and c306a6 Tilo Eckert 2019-02-18 15:53:32 +01:00
  • 5a590dfb5f examples: Fix unused parameter warnings in sshd_direct-tcpip Andreas Schneider 2019-02-20 17:13:44 +01:00
  • 881e1b4785 examples: Add direct-tcpip server sample Till Wimmer 2019-02-05 02:03:44 +01:00
  • f890b09edb cmake: fix build problem on ubuntu 18.04 Aris Adamantiadis 2019-02-07 19:16:03 +01:00
  • a1559505a5 cmake: Bump API version to 4.7.4 Andreas Schneider 2019-02-07 14:35:35 +01:00
  • fa6aa125a2 tests/pkd: repro rsa-sha2-{256,512} negotiation bug Jon Simons 2019-02-04 17:39:36 -05:00
  • a4948f6212 kex: honor client preference for rsa-sha2-{256,512} host key algorithms Jon Simons 2019-02-04 18:21:21 -05:00
  • e05e4ae971 pki_crypto: plug pki_signature_from_blob leaks Jon Simons 2019-01-29 16:32:36 -05:00
  • b6d275537e pki: NULL check pki_signature_from_rsa_blob result Jon Simons 2019-01-29 16:16:29 -05:00
  • 5d279a7ad7 kex: honor client preference for rsa-sha2-{256,512} host key algorithms Jon Simons 2019-02-04 18:21:21 -05:00
  • c2077ab775 tests/pkd: repro rsa-sha2-{256,512} negotiation bug Jon Simons 2019-02-04 17:39:36 -05:00
  • e69fb89e98 pki_container_openssh: Add padding to be compatible with OpenSSH Jakub Jelen 2019-02-04 23:02:15 +01:00
  • 128015bb17 pki_container_openssh: Add padding to be compatible with OpenSSH Jakub Jelen 2019-02-04 23:02:15 +01:00
  • 5700477f3e examples: Add simple way to generate key files from libssh Jakub Jelen 2019-02-04 22:40:37 +01:00
  • fffa66698f Allow building without Group Exchange support Jakub Jelen 2019-02-02 16:49:05 +01:00
  • a170580147 kex: Disable diffie-hellman-group-exchange-sha1 by default Jakub Jelen 2019-02-02 15:00:26 +01:00
  • 0833f07c53 options: Allow to configure cryptographic algorithms for server Jakub Jelen 2019-02-06 14:24:21 +01:00
  • 805709dd36 docs: Missing documentation for SSH_OPTIONS_HMAC_* Jakub Jelen 2019-02-06 14:36:32 +01:00
  • fd95b68c0f tests: Fix error message Jakub Jelen 2019-02-02 16:44:04 +01:00
  • 82f4c6c607 buffer: Fix typo in a comment Jakub Jelen 2019-02-04 22:35:23 +01:00
  • c110122fb5 tests: Don't talk to ssh-agent in server authentication tests Jakub Jelen 2019-02-04 23:00:28 +01:00
  • 686cd6e83b Update INSTALL file Andreas Schneider 2019-02-07 10:29:31 +01:00
  • 9f9afab3e6 dh: Add function references to ssh_print_hash() doc Andreas Schneider 2019-02-07 09:48:09 +01:00
  • b84949b32c include: Mark ssh_print_hexa as deprecated Andreas Schneider 2019-02-07 09:46:13 +01:00
  • c0102e6a59 pki_crypto: plug pki_signature_from_blob leaks Jon Simons 2019-01-29 16:32:36 -05:00
  • ccd73db90c pki: NULL check pki_signature_from_rsa_blob result Jon Simons 2019-01-29 16:16:29 -05:00
  • 3760e59c13 dh: harden error handling in 'ssh_dh_init_common' Jon Simons 2019-01-29 20:25:13 -05:00
  • 3334443089 dh: plug pubkey_blob leak in ssh_server_dh_process_init Jon Simons 2019-01-29 20:17:20 -05:00
  • b44987a164 dh-gex: fix double-ssh_dh_init_common memory leak Jon Simons 2019-01-29 20:06:12 -05:00
  • 886681a421 dh-gex: fix moduli file stream leak Jon Simons 2019-01-29 19:43:07 -05:00
  • 04c97c0eaf session: Repects timeout=0 for packets on blocking sessions Till Wimmer 2019-01-29 13:03:35 +01:00
  • d27b817acc options: Removed outdated param annotations of ssh_options_set() Till Wimmer 2019-01-29 10:21:07 +01:00
  • 16a52a8362 connector: Don't NULL connector (in|out) channels on event remove Till Wimmer 2019-01-29 12:01:31 +01:00
  • 5bc7432b10 gitlab-ci: Enable DEBUG build options on Fedora Andreas Schneider 2019-01-26 17:53:54 +01:00
  • 8c7b6bffff bignum: Reformat ssh_make_string_bn and unbreak build with DEBUG_CRYPTO Jakub Jelen 2019-01-25 11:03:50 +01:00
  • 42185fbf6e dh: Reformat ssh_dh_debug, ssh_dh_build_k and unbreak build with DEBUG_CRYPTO Jakub Jelen 2019-01-25 10:59:50 +01:00
  • 303bdc5a4f tests: Initialize ssh_cipher_struct in torture_crypto_aes256_cbc() Andreas Schneider 2019-01-26 14:23:34 +01:00
  • 9b694f396c packet: Add missing error check in packet_send2() Andreas Schneider 2019-01-26 14:21:46 +01:00
  • d41042f92d pki: Avoid a possible segfaults in error paths Andreas Schneider 2019-01-26 14:19:57 +01:00
  • 9b2eefe62c dh-gex: Add error check for ssh_packet_send() in ssh_packet_server_dhgex_request Andreas Schneider 2019-01-26 14:15:01 +01:00
  • 8ec80d1f5d libcrypto: Use size_t for size calculations Andreas Schneider 2019-01-26 14:09:44 +01:00
  • 8ddbe7bec6 sftp: Add NULL check in sftp_ext_free() Anderson Toshiyuki Sasaki 2019-01-15 16:08:31 +01:00
  • 61ad276a87 sftp: Reformat sftp_ext_free() Anderson Toshiyuki Sasaki 2019-01-26 13:50:38 +01:00
  • 9c5a1967c3 tests: Add NULL checks in pki tests Anderson Toshiyuki Sasaki 2019-01-15 14:35:37 +01:00
  • 27caaa000b tests: Prefer assert_non_null() over assert_false() Anderson Toshiyuki Sasaki 2019-01-15 13:45:10 +01:00
  • bdf968c178 tests: Added NULL checks in torture_list.c Anderson Toshiyuki Sasaki 2019-01-15 13:19:36 +01:00
  • 603b6d7222 tests: Prefer assert_non_null over assert_true Anderson Toshiyuki Sasaki 2019-01-15 11:19:49 +01:00
  • 89f58decb6 misc: Add NULL checks before accessing lists Anderson Toshiyuki Sasaki 2019-01-15 10:05:59 +01:00
  • 5ed5e97114 messages: Fix NULL check, preventing SEGFAULT Anderson Toshiyuki Sasaki 2019-01-14 18:27:28 +01:00
  • 6dacc8b26c gitlab-ci: Add (disabled) target with MemorySanitizer Andreas Schneider 2019-01-25 11:36:44 +01:00
  • d41fd0c465 cmake: Add support for MemorySanitizer Andreas Schneider 2019-01-25 11:33:14 +01:00