Jakub Jelen 132ed59d3f agent: Use SHA2 signatures also for RSA certificates ...

There is actually a bug in OpenSSH's ssh-agent of handling these
requests [1], but this change follows the way how OpenSSH clients
behave in regards to the communication with agent.

Without this change, the agent is asked to provide SHA1 signature
with certificates, which is not right if we negotiated SHA2 extensions.

[1] https://bugzilla.mindrot.org/show_bug.cgi?id=3016

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2019-06-13 11:00:56 +02:00

..

ABI

cmake: Bump API version to 4.7.4

2019-02-07 14:35:35 +01:00

external

chacha: remove re-declared type

2018-10-13 22:08:39 +02:00

threads

libcrypto: Fix access violation in ssh_init()

2018-11-30 18:26:55 +01:00

agent.c

agent: Use SHA2 signatures also for RSA certificates

2019-06-13 11:00:56 +02:00

auth.c

auth, pki: Calculate hash internally when signing/verifying

2019-05-13 16:37:51 +02:00

base64.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

bignum.c

mbedcrypto: Make bignum_bin2bn behave like others

2019-04-04 07:59:58 +02:00

bind_config.c

bind_config: Fail if a known option couldn't be set

2019-06-12 10:17:54 +02:00

bind.c

options: Allow avoiding system-wide configuration

2019-06-12 10:17:54 +02:00

buffer.c

buffer: Fix typo in a comment

2019-02-07 10:30:05 +01:00

callbacks.c

callbacks: Implement list of callbacks for channels

2016-05-02 16:56:54 +02:00

chachapoly.c

libcrypto: Implement OpenSSH-compatible AES-GCM ciphers using OpenSSL

2018-10-09 12:05:40 +02:00

channels.c

channels: Add check if we are authenticated before we create a channel

2019-04-29 13:17:19 +02:00

client.c

client: Add missing break, remove useless return

2019-02-21 10:51:28 +01:00

CMakeLists.txt

token, kex: Add functions to handle tokens lists

2019-06-12 10:17:54 +02:00

config_parser.c

config: Move common parser functions to config_parser.c

2019-04-01 08:25:22 +02:00

config.c

config: Remove bogus trailing newlines in log messages

2019-06-13 11:00:56 +02:00

connect.c

connect: Fix size type for i an j in ssh_select()

2018-12-07 14:08:31 +01:00

connector.c

connector: Stop socket-to-channel EOF flooding

2019-04-29 13:16:54 +02:00

curve25519.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

dh_crypto.c

dh: fix libcrypto leak via ssh_dh_keypair_set_keys

2019-05-09 17:37:33 +02:00

dh_key.c

dh: Move DH key handling into a separate file.

2019-04-04 08:00:23 +02:00

dh-gex.c

dh-gex: Fix memory leak in DH GEX with OpenSSL

2019-05-22 15:31:51 +02:00

dh.c

dh: Avoid segmentation fault in GEX if fallback to known moduli

2019-06-12 12:37:43 +02:00

ecdh_crypto.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

ecdh_gcrypt.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

ecdh_mbedcrypto.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

ecdh.c

kex: use runtime callbacks (server)

2019-01-24 09:19:59 +01:00

error.c

error: Add ssh_reset_error() function

2018-08-27 11:29:18 +02:00

gcrypt_missing.c

dh: Do some basic refactoring

2019-01-24 11:56:23 +01:00

getpass.c

getpass: Use explicit_bzero()

2018-09-04 19:57:31 +02:00

gssapi.c

gssapi: Add missing malloc checks

2019-04-29 13:17:21 +02:00

gzip.c

gzip: Add missing NULL check

2019-05-28 09:18:52 +02:00

init.c

libcrypto: detect non matching headers/shared lib

2018-11-21 16:54:15 +01:00

kdf.c

Use a common KDF function

2019-03-07 12:03:32 +01:00

kex.c

kex: Reformat ssh_kex_get_supported_method()

2019-06-13 11:00:56 +02:00

known_hosts.c

kex, known_hosts: Use new tokens functions

2019-06-12 10:17:54 +02:00

knownhosts.c

ssh_known_hosts_get_algorithms: Avoid returning duplicate key types from known hosts algorithms

2019-06-12 11:15:20 +02:00

legacy.c

legacy: Fix possible null pointer dereference

2018-10-24 09:48:35 +02:00

libcrypto-compat.c

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto-compat.h

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libgcrypt.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libmbedcrypto.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libssh.map

cmake: Bump library version

2018-09-20 16:35:13 +02:00

log.c

log: Make sure the buffer for date is big enough

2018-08-20 18:42:03 +02:00

match.c

config: Parse Match keyword

2018-09-05 11:43:05 +02:00

mbedcrypto_missing.c

mbedcrypto: fixed nasty RNG bugs

2019-01-24 11:53:22 +01:00

messages.c

options: Add option to set server accepted pubkey types

2019-06-12 10:17:54 +02:00

misc.c

Reformat ssh_hostport()

2019-05-14 17:26:24 +02:00

options.c

kex, pki, server, options: Filter algorithms in FIPS mode

2019-06-12 11:13:52 +02:00

packet_cb.c

kex: use runtime callbacks (client)

2019-01-24 09:11:30 +01:00

packet_crypt.c

Add tests and implementation for Encrypt-then-MAC mode

2019-02-22 15:31:08 +01:00

packet.c

packet: log when data-based rekeying needed

2019-04-29 14:00:39 +02:00

pcap.c

pcap: Correctly initialize sockaddr_in in ssh_pcap_context_set_file()

2019-01-22 13:12:25 +01:00

pki_container_openssh.c

doc: Update the description of the pki_private_key_decrypt() function to match reality

2019-04-29 13:18:09 +02:00

pki_crypto.c

pki_crypto: Use the new OpenSSL API to read PEM files

2019-06-12 10:41:24 +02:00

pki_ed25519.c

pki: Allow reading keys in new OpenSSH format

2018-09-18 09:53:49 +02:00

pki_gcrypt.c

pki_gcrypt: Do not compare private parts when comparing public keys

2019-06-13 11:00:56 +02:00

pki_mbedcrypto.c

pki: Fail to sign when using wrong hash algorithm

2019-05-13 16:37:51 +02:00

pki.c

kex, pki, server, options: Filter algorithms in FIPS mode

2019-06-12 11:13:52 +02:00

poll.c

ssh_event_dopoll can also return SSH_AGAIN

2019-02-27 08:17:53 +01:00

scp.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

server.c

kex, pki, server, options: Filter algorithms in FIPS mode

2019-06-12 11:13:52 +02:00

session.c

session: Do not use MD5 in FIPS mode

2019-06-12 10:27:40 +02:00

sftp.c

sftp: Remove the break statements

2019-05-22 15:35:29 +02:00

sftpserver.c

sftpserver: allocate packet on sftp_server_new

2018-09-25 16:41:54 +02:00

socket.c

socket: Use calloc in ssh_socket_new()

2019-05-22 15:32:41 +02:00

string.c

string: Don't allow to allocate strings bigger than 256M

2018-09-04 12:29:20 +02:00

threads.c

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

token.c

token, kex: Add functions to handle tokens lists

2019-06-12 10:17:54 +02:00

wrapper.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00