Anderson Toshiyuki Sasaki e8510043d2 pki: Add workarounds for old OpenSSH ...

When we are talking to old OpenSSH versions which does not support
rsa-sha2-{256,512}-cert-v01@openssh.com or SHA2 in certificates,
fallback to old supported values.

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
(cherry picked from commit 4b7ce75e1f)

2019-06-27 09:56:55 +02:00

..

ABI

Bump SO version to 4.8.1

2019-06-14 15:22:56 +02:00

external

ed25519: Replace unsigned long long with uint64_t

2019-06-14 15:22:45 +02:00

threads

libcrypto: Fix access violation in ssh_init()

2018-11-30 18:26:55 +01:00

agent.c

agent: Use SHA2 signatures also for RSA certificates

2019-06-13 11:00:56 +02:00

auth.c

auth, pki: Calculate hash internally when signing/verifying

2019-05-13 16:37:51 +02:00

base64.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

bignum.c

mbedcrypto: Make bignum_bin2bn behave like others

2019-04-04 07:59:58 +02:00

bind_config.c

bind_config: Fail if a known option couldn't be set

2019-06-12 10:17:54 +02:00

bind.c

options: Allow avoiding system-wide configuration

2019-06-12 10:17:54 +02:00

buffer.c

buffer: Fix typo in a comment

2019-02-07 10:30:05 +01:00

callbacks.c

callbacks: Implement list of callbacks for channels

2016-05-02 16:56:54 +02:00

chachapoly.c

libcrypto: Implement OpenSSH-compatible AES-GCM ciphers using OpenSSL

2018-10-09 12:05:40 +02:00

channels.c

channels: Do not mix integer types

2019-06-14 15:22:45 +02:00

client.c

SSH_LOG: Adjust log level from SSH_LOG_WARNING to SSH_LOG_PROTOCOL

2019-06-13 16:43:44 +02:00

CMakeLists.txt

token, kex: Add functions to handle tokens lists

2019-06-12 10:17:54 +02:00

config_parser.c

config: Move common parser functions to config_parser.c

2019-04-01 08:25:22 +02:00

config.c

config: Replace long long with int64_t

2019-06-14 15:22:45 +02:00

connect.c

connect: Fix size type for i an j in ssh_select()

2018-12-07 14:08:31 +01:00

connector.c

connector: Stop socket-to-channel EOF flooding

2019-04-29 13:16:54 +02:00

curve25519.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

dh_crypto.c

dh: fix libcrypto leak via ssh_dh_keypair_set_keys

2019-05-09 17:37:33 +02:00

dh_key.c

dh: Move DH key handling into a separate file.

2019-04-04 08:00:23 +02:00

dh-gex.c

dh-gex: Fix memory leak in DH GEX with OpenSSL

2019-05-22 15:31:51 +02:00

dh.c

dh: Avoid segmentation fault in GEX if fallback to known moduli

2019-06-12 12:37:43 +02:00

ecdh_crypto.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

ecdh_gcrypt.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

ecdh_mbedcrypto.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00

ecdh.c

kex: use runtime callbacks (server)

2019-01-24 09:19:59 +01:00

error.c

error: Add ssh_reset_error() function

2018-08-27 11:29:18 +02:00

gcrypt_missing.c

dh: Do some basic refactoring

2019-01-24 11:56:23 +01:00

getpass.c

getpass: Use explicit_bzero()

2018-09-04 19:57:31 +02:00

gssapi.c

gssapi: Add missing malloc checks

2019-04-29 13:17:21 +02:00

gzip.c

gzip: Add missing NULL check

2019-05-28 09:18:52 +02:00

init.c

libcrypto: detect non matching headers/shared lib

2018-11-21 16:54:15 +01:00

kdf.c

Use a common KDF function

2019-03-07 12:03:32 +01:00

kex.c

kex: Only advertise allowed signature types

2019-06-13 16:28:23 +02:00

known_hosts.c

kex, known_hosts: Use new tokens functions

2019-06-12 10:17:54 +02:00

knownhosts.c

ssh_known_hosts_get_algorithms: Avoid returning duplicate key types from known hosts algorithms

2019-06-12 11:15:20 +02:00

legacy.c

legacy: Fix possible null pointer dereference

2018-10-24 09:48:35 +02:00

libcrypto-compat.c

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto-compat.h

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libgcrypt.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libmbedcrypto.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libssh.map

Bump SO version to 4.8.1

2019-06-14 15:22:56 +02:00

log.c

log: Make sure the buffer for date is big enough

2018-08-20 18:42:03 +02:00

match.c

config: Parse Match keyword

2018-09-05 11:43:05 +02:00

mbedcrypto_missing.c

mbedcrypto: fixed nasty RNG bugs

2019-01-24 11:53:22 +01:00

messages.c

messages: Reject tcpip-forward requests as client

2019-06-27 09:56:49 +02:00

misc.c

SSH_LOG: Adjust log level from SSH_LOG_WARNING to SSH_LOG_PROTOCOL

2019-06-13 16:43:44 +02:00

options.c

kex, pki, server, options: Filter algorithms in FIPS mode

2019-06-12 11:13:52 +02:00

packet_cb.c

kex: use runtime callbacks (client)

2019-01-24 09:11:30 +01:00

packet_crypt.c

Add tests and implementation for Encrypt-then-MAC mode

2019-02-22 15:31:08 +01:00

packet.c

packet: log when data-based rekeying needed

2019-04-29 14:00:39 +02:00

pcap.c

pcap: Correctly initialize sockaddr_in in ssh_pcap_context_set_file()

2019-01-22 13:12:25 +01:00

pki_container_openssh.c

doc: Update the description of the pki_private_key_decrypt() function to match reality

2019-04-29 13:18:09 +02:00

pki_crypto.c

pki_crypto: Correct error checking after RSA key generation

2019-06-24 15:42:01 +02:00

pki_ed25519.c

ed25519: Replace unsigned long long with uint64_t

2019-06-14 15:22:45 +02:00

pki_gcrypt.c

pki_gcrypt: Do not compare private parts when comparing public keys

2019-06-13 11:00:56 +02:00

pki_mbedcrypto.c

pki: Fail to sign when using wrong hash algorithm

2019-05-13 16:37:51 +02:00

pki.c

pki: Add workarounds for old OpenSSH

2019-06-27 09:56:55 +02:00

poll.c

ssh_event_dopoll can also return SSH_AGAIN

2019-02-27 08:17:53 +01:00

scp.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

server.c

SSH_LOG: Adjust log level from SSH_LOG_WARNING to SSH_LOG_PROTOCOL

2019-06-13 16:43:44 +02:00

session.c

session: OpenSSH is using SHA256 fingerprints now

2019-06-13 16:29:32 +02:00

sftp.c

sftp: Do not mix integer types

2019-06-14 15:22:45 +02:00

sftpserver.c

sftpserver: allocate packet on sftp_server_new

2018-09-25 16:41:54 +02:00

socket.c

socket: Do not process stderr of proxy commands (Fixes T130)

2019-06-24 15:41:53 +02:00

string.c

string: Don't allow to allocate strings bigger than 256M

2018-09-04 12:29:20 +02:00

threads.c

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

token.c

token, kex: Add functions to handle tokens lists

2019-06-12 10:17:54 +02:00

wrapper.c

dh: Rename variables for DH key exchange

2019-04-04 08:00:15 +02:00