Jakub Jelen fcf2cd0d9e kex: Use all supported hostkey algorithms for negotiation ...

Previously, only the algorithms we had a keys for in known_hosts
were used, which could lead to no-matching algorithms errors if the
one key we used to depend on was removed from the server.

This commit adds also the other algorithms, but lists them only after
all the key types we have in known_hosts file.

Resolves: T105

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
(cherry picked from commit 35a6455489)

2018-10-19 21:22:21 +02:00

..

ABI

Bump ABI to 4.7.1

2018-10-16 09:25:01 +02:00

external

chacha: remove re-declared type

2018-10-13 22:09:18 +02:00

threads

threads: Add Windows threads implementation

2018-08-03 16:43:03 +02:00

agent.c

SHA2 extension in the ssh-agent interface

2018-08-31 14:30:53 +02:00

auth.c

CVE-2018-10933: Introduce SSH_AUTH_STATE_AUTH_NONE_SENT

2018-10-16 09:19:40 +02:00

base64.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

bignum.c

add mbedtls crypto support

2017-12-28 11:17:39 +01:00

bind.c

Remove internal calls to ssh_init

2018-08-03 16:43:03 +02:00

buffer.c

buffer: Don't call va_end() twice

2018-09-20 16:35:04 +02:00

callbacks.c

callbacks: Implement list of callbacks for channels

2016-05-02 16:56:54 +02:00

chachapoly.c

chachapoly: Use a function instead of an extern variable

2018-06-30 14:37:04 +02:00

channels.c

CVE-2018-10933: Check channel state when OPEN_FAILURE arrives

2018-10-16 09:19:40 +02:00

client.c

dh: Add diffie-hellman-group18-sha512 support

2018-09-20 16:35:05 +02:00

CMakeLists.txt

cmake: Fix FindABIMap targets

2018-08-27 16:46:59 +02:00

config.c

config: Fix building without globbing support

2018-09-25 16:41:31 +02:00

connect.c

connect: Fix build warning on Windows

2018-09-25 16:41:31 +02:00

connector.c

connector: Add checks if file descriptor is a socket

2018-09-25 16:41:31 +02:00

curve25519.c

crytpo: Make sure we check return of ssh_get_random() correctly

2018-07-05 12:12:14 +02:00

dh.c

dh: Use ssh_get_fingerprint_hash() in ssh_print_hash()

2018-09-20 17:23:41 +02:00

ecdh_crypto.c

ecdh: fix SSH_MSG_KEXDH_REPLY for libcrypto

2018-06-27 21:25:24 +02:00

ecdh_gcrypt.c

ecdh: fix SSH_MSG_KEXDH_REPLY for libgcrypt

2018-06-27 21:25:26 +02:00

ecdh_mbedcrypto.c

mbedtls: Use getter for ssh_mbedtls_ctr_drbg

2018-08-20 18:43:04 +02:00

ecdh.c

crypto: Change the type of server_pubkey to ssh_key

2018-03-21 20:40:02 +01:00

error.c

error: Add ssh_reset_error() function

2018-08-27 12:25:09 +02:00

gcrypt_missing.c

bignum: Make bignum_free safer

2018-07-05 14:35:13 +02:00

getpass.c

getpass: Use explicit_bzero()

2018-09-04 20:00:04 +02:00

gssapi.c

CVE-2018-10933: Set correct state after sending MIC

2018-10-16 09:19:40 +02:00

gzip.c

gzip: Use calloc in initcompress() and initdecompress()

2018-09-04 20:00:04 +02:00

init.c

init: Only add DllMain if we create a shared library

2018-10-09 11:40:54 +02:00

kex.c

kex: Use all supported hostkey algorithms for negotiation

2018-10-19 21:22:21 +02:00

known_hosts.c

knownhosts: Fix invalid read of known_hosts token

2018-10-13 22:09:16 +02:00

knownhosts.c

knownhosts: Use the correct name for ECDSA keys for host key negotiation

2018-10-19 21:22:21 +02:00

legacy.c

Rest in Peace SSHv1

2018-06-29 14:41:14 +02:00

libcrypto-compat.c

libcrypto-compat: fix HMAC_CTX_free for OpenSSL < 1.1.0

2017-07-13 19:28:59 +02:00

libcrypto-compat.h

libcrypto: Introduce a libcrypto compat file

2016-11-07 11:42:06 +01:00

libcrypto.c

crypto: Split init and finalize functions

2018-07-05 12:55:23 +02:00

libgcrypt.c

tests: Add test for RSA PKI running on threads

2018-08-03 16:43:03 +02:00

libmbedcrypto.c

libmbedcrypto: Fix creating evp hash

2018-09-18 10:17:31 +02:00

libssh.map

cmake: Bump library version

2018-09-20 17:23:42 +02:00

log.c

log: Make sure the buffer for date is big enough

2018-08-20 18:43:06 +02:00

match.c

config: Parse Match keyword

2018-09-05 12:39:02 +02:00

mbedcrypto_missing.c

mbedtls: Use getter for ssh_mbedtls_ctr_drbg

2018-08-20 18:43:04 +02:00

messages.c

messages: Check that the requested service is 'ssh-connection'

2018-10-19 14:05:14 +02:00

misc.c

misc: Use C99 initializer to initialize string

2018-09-04 20:00:04 +02:00

options.c

options: Add support for getting the known_hosts locations

2018-10-19 14:05:21 +02:00

packet_cb.c

dh: Add diffie-hellman-group18-sha512 support

2018-09-20 16:35:05 +02:00

packet_crypt.c

Rest in Peace SSHv1

2018-06-29 14:41:14 +02:00

packet.c

packet: Add missing break in ssh_packet_incoming_filter()

2018-10-19 14:05:05 +02:00

pcap.c

buffer: Add and use ssh_buffer_allocate_size()

2018-08-01 11:04:33 +02:00

pki_container_openssh.c

pki: Implement reading public key from OpenSSH private key container

2018-09-18 10:17:32 +02:00

pki_crypto.c

src: Fix typos

2018-10-19 14:05:02 +02:00

pki_ed25519.c

pki: Allow reading keys in new OpenSSH format

2018-09-18 10:17:31 +02:00

pki_gcrypt.c

src: Fix typos

2018-10-19 14:05:02 +02:00

pki_mbedcrypto.c

pki: Allow reading keys in new OpenSSH format

2018-09-18 10:17:31 +02:00

pki.c

pki: Use strndup in ssh_pki_export_privkey_base64()

2018-09-20 17:23:41 +02:00

poll.c

poll: Fix size types in ssh_event_free()

2018-08-30 08:59:56 +02:00

scp.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

server.c

server: Set correct state after sending INFO_REQUEST (Kbd Interactive)

2018-10-19 14:05:12 +02:00

session.c

dh: Add diffie-hellman-group18-sha512 support

2018-09-20 16:35:05 +02:00

sftp.c

sftpserver: allocate packet on sftp_server_new

2018-09-25 16:42:08 +02:00

sftpserver.c

sftpserver: allocate packet on sftp_server_new

2018-09-25 16:42:08 +02:00

socket.c

socket: Pass MSG_NOSIGNAL to send()

2018-09-25 16:41:31 +02:00

string.c

string: Don't allow to allocate strings bigger than 256M

2018-09-04 12:29:41 +02:00

threads.c

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

wrapper.c

wrapper: Use explicit_bzero() in crypto_free()

2018-09-04 20:00:04 +02:00