Anderson Toshiyuki Sasaki 53ae2502f4 kex: Only advertise allowed signature types ...

Previously, if the client supported rsa-sha2-256 or rsa-sha2-512, the
server would advertise the extensions as supported without checking its
own list of allowed algorithms.  Now the server will only advertise
allowed signature algorithms.

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2019-06-13 16:28:23 +02:00

..

ABI

cmake: Bump API version to 4.7.4

2019-02-07 14:35:35 +01:00

external

chacha: remove re-declared type

2018-10-13 22:08:39 +02:00

threads

libcrypto: Fix access violation in ssh_init()

2018-11-30 18:26:55 +01:00

agent.c

agent: Use SHA2 signatures also for RSA certificates

2019-06-13 11:00:56 +02:00

auth.c

auth, pki: Calculate hash internally when signing/verifying

2019-05-13 16:37:51 +02:00

base64.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

bignum.c

mbedcrypto: Make bignum_bin2bn behave like others

2019-04-04 07:59:58 +02:00

bind_config.c

bind_config: Fail if a known option couldn't be set

2019-06-12 10:17:54 +02:00

bind.c

options: Allow avoiding system-wide configuration

2019-06-12 10:17:54 +02:00

buffer.c

buffer: Fix typo in a comment

2019-02-07 10:30:05 +01:00

callbacks.c

callbacks: Implement list of callbacks for channels

2016-05-02 16:56:54 +02:00

chachapoly.c

libcrypto: Implement OpenSSH-compatible AES-GCM ciphers using OpenSSL

2018-10-09 12:05:40 +02:00

channels.c

channels: Add check if we are authenticated before we create a channel

2019-04-29 13:17:19 +02:00

client.c

client: Add missing break, remove useless return

2019-02-21 10:51:28 +01:00

CMakeLists.txt

token, kex: Add functions to handle tokens lists

2019-06-12 10:17:54 +02:00

config_parser.c

config: Move common parser functions to config_parser.c

2019-04-01 08:25:22 +02:00

config.c

config: Remove bogus trailing newlines in log messages

2019-06-13 11:00:56 +02:00

connect.c

connect: Fix size type for i an j in ssh_select()

2018-12-07 14:08:31 +01:00

connector.c

connector: Stop socket-to-channel EOF flooding

2019-04-29 13:16:54 +02:00

curve25519.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

dh_crypto.c

dh: fix libcrypto leak via ssh_dh_keypair_set_keys

2019-05-09 17:37:33 +02:00

dh_key.c

dh: Move DH key handling into a separate file.

2019-04-04 08:00:23 +02:00

dh-gex.c

dh-gex: Fix memory leak in DH GEX with OpenSSL

2019-05-22 15:31:51 +02:00

dh.c

dh: Avoid segmentation fault in GEX if fallback to known moduli

2019-06-12 12:37:43 +02:00

ecdh_crypto.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

ecdh_gcrypt.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

ecdh_mbedcrypto.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

ecdh.c

kex: use runtime callbacks (server)

2019-01-24 09:19:59 +01:00

error.c

error: Add ssh_reset_error() function

2018-08-27 11:29:18 +02:00

gcrypt_missing.c

dh: Do some basic refactoring

2019-01-24 11:56:23 +01:00

getpass.c

getpass: Use explicit_bzero()

2018-09-04 19:57:31 +02:00

gssapi.c

gssapi: Add missing malloc checks

2019-04-29 13:17:21 +02:00

gzip.c

gzip: Add missing NULL check

2019-05-28 09:18:52 +02:00

init.c

libcrypto: detect non matching headers/shared lib

2018-11-21 16:54:15 +01:00

kdf.c

Use a common KDF function

2019-03-07 12:03:32 +01:00

kex.c

kex: Only advertise allowed signature types

2019-06-13 16:28:23 +02:00

known_hosts.c

kex, known_hosts: Use new tokens functions

2019-06-12 10:17:54 +02:00

knownhosts.c

ssh_known_hosts_get_algorithms: Avoid returning duplicate key types from known hosts algorithms

2019-06-12 11:15:20 +02:00

legacy.c

legacy: Fix possible null pointer dereference

2018-10-24 09:48:35 +02:00

libcrypto-compat.c

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto-compat.h

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libgcrypt.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libmbedcrypto.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libssh.map

cmake: Bump library version

2018-09-20 16:35:13 +02:00

log.c

log: Make sure the buffer for date is big enough

2018-08-20 18:42:03 +02:00

match.c

config: Parse Match keyword

2018-09-05 11:43:05 +02:00

mbedcrypto_missing.c

mbedcrypto: fixed nasty RNG bugs

2019-01-24 11:53:22 +01:00

messages.c

options: Add option to set server accepted pubkey types

2019-06-12 10:17:54 +02:00

misc.c

Reformat ssh_hostport()

2019-05-14 17:26:24 +02:00

options.c

kex, pki, server, options: Filter algorithms in FIPS mode

2019-06-12 11:13:52 +02:00

packet_cb.c

kex: use runtime callbacks (client)

2019-01-24 09:11:30 +01:00

packet_crypt.c

Add tests and implementation for Encrypt-then-MAC mode

2019-02-22 15:31:08 +01:00

packet.c

packet: log when data-based rekeying needed

2019-04-29 14:00:39 +02:00

pcap.c

pcap: Correctly initialize sockaddr_in in ssh_pcap_context_set_file()

2019-01-22 13:12:25 +01:00

pki_container_openssh.c

doc: Update the description of the pki_private_key_decrypt() function to match reality

2019-04-29 13:18:09 +02:00

pki_crypto.c

pki_crypto: Use the new OpenSSL API to read PEM files

2019-06-12 10:41:24 +02:00

pki_ed25519.c

pki: Allow reading keys in new OpenSSH format

2018-09-18 09:53:49 +02:00

pki_gcrypt.c

pki_gcrypt: Do not compare private parts when comparing public keys

2019-06-13 11:00:56 +02:00

pki_mbedcrypto.c

pki: Fail to sign when using wrong hash algorithm

2019-05-13 16:37:51 +02:00

pki.c

pki: Derive correct algorithm identification for certificate authentication with SHA2 extension

2019-06-13 11:00:56 +02:00

poll.c

ssh_event_dopoll can also return SSH_AGAIN

2019-02-27 08:17:53 +01:00

scp.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

server.c

server: Send only allowed algorithms in extension

2019-06-13 14:37:39 +02:00

session.c

session: Do not use MD5 in FIPS mode

2019-06-12 10:27:40 +02:00

sftp.c

sftp: Remove the break statements

2019-05-22 15:35:29 +02:00

sftpserver.c

sftpserver: allocate packet on sftp_server_new

2018-09-25 16:41:54 +02:00

socket.c

socket: Use calloc in ssh_socket_new()

2019-05-22 15:32:41 +02:00

string.c

string: Don't allow to allocate strings bigger than 256M

2018-09-04 12:29:20 +02:00

threads.c

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

token.c

token, kex: Add functions to handle tokens lists

2019-06-12 10:17:54 +02:00

wrapper.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00