Jakub Jelen 0acfd81f85 server: Correctly handle extensions ...

If the server had an RSA host key, it provided unconditionally SHA2
signatures without consulting the client proposed list of supported host
keys.

This commit implements more fine-grained detection of the extension
to provide the client with valid signatures according to RFC 8332
Section 3.1.

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
(cherry picked from commit 27fe60954c)

2019-01-09 17:22:48 +01:00

..

agent.h

SHA2 extension in the ssh-agent interface

2018-08-31 14:30:53 +02:00

auth.h

CVE-2018-10933: Introduce SSH_AUTH_STATE_AUTH_NONE_SENT

2018-10-16 09:19:40 +02:00

bignum.h

add mbedtls crypto support

2017-12-28 11:17:39 +01:00

bind.h

server: Add support for ed25519 keys in the server.

2015-02-02 14:45:52 +01:00

blf.h

cleanup: use ssh_ prefix in the blf (non-static) functions

2016-01-19 11:31:07 +01:00

buffer.h

buffer: Use bool for secure buffer

2018-09-03 19:04:13 +02:00

callbacks.h

callbacks: Add support for MSVC

2016-11-05 20:00:02 +01:00

chacha.h

cmake: detect "bounded" compiler attribute

2018-06-28 09:06:30 +02:00

channels.h

channel: Add SSH_CHANNEL_FLAG_CLOSED_LOCAL

2018-12-10 17:50:17 +01:00

CMakeLists.txt

Rest in Peace SSHv1

2018-06-29 14:41:14 +02:00

crc32.h

include: Fix the LGPL header.

2013-01-23 00:22:46 +01:00

crypto.h

dh: Add diffie-hellman-group18-sha512 support

2018-09-20 16:35:05 +02:00

curve25519.h

ecdh: Check if we have ECC support.

2013-11-27 17:38:21 +01:00

dh.h

crypto: Split init and finalize functions

2018-07-05 12:55:23 +02:00

ecdh.h

add mbedtls crypto support

2017-12-28 11:17:39 +01:00

ed25519.h

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

fe25519.h

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

ge25519.h

include: Declare ge25519_base as extern

2018-06-21 17:41:32 +02:00

gssapi.h

server: Fix compilation without WITH_SERVER

2013-07-14 09:30:59 +02:00

kex.h

tests: Verify the hostkey ordering for negotiation is correct

2018-10-19 21:22:21 +02:00

keys.h

add mbedtls crypto support

2017-12-28 11:17:39 +01:00

knownhosts.h

knownhosts: Consult also the global known hosts file

2018-10-19 21:22:21 +02:00

legacy.h

include: Mark functions as deprecated!

2014-01-16 15:27:23 +01:00

libcrypto.h

bignum: Make bignum_free safer

2018-07-05 14:35:13 +02:00

libgcrypt.h

bignum: Make bignum_free safer

2018-07-05 14:35:13 +02:00

libmbedcrypto.h

mbedtls: Use getter for ssh_mbedtls_ctr_drbg

2018-08-20 18:43:04 +02:00

libssh.h

Bump version to 0.8.6

2018-12-24 07:59:04 +01:00

libsshpp.hpp

libsshpp: Initialize the string returned by getIssueBanner()

2018-09-04 20:54:52 +02:00

messages.h

include: Do not make x11 variables const

2015-04-02 16:19:45 +02:00

misc.h

Rest in Peace SSHv1

2018-06-29 14:41:14 +02:00

options.h

options: Use ssh_key_type_e in ssh_options_set_algo()

2017-08-24 18:01:41 +02:00

packet.h

CVE-2018-10933: Introduced packet filtering

2018-10-16 09:19:40 +02:00

pcap.h

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

pki_priv.h

pki: Implement reading public key from OpenSSH private key container

2018-09-18 10:17:32 +02:00

pki.h

pki: Separate signature extraction and verification

2018-11-30 18:57:38 +01:00

poll.h

events: Add functions for poll objects

2016-05-02 16:40:43 +02:00

poly1305.h

cmake: detect "bounded" compiler attribute

2018-06-28 09:06:30 +02:00

priv.h

priv: Add ssize_t if not available with MSVC

2018-10-19 14:05:08 +02:00

sc25519.h

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

scp.h

include: Fix the LGPL header.

2013-01-23 00:22:46 +01:00

server.h

server: expose 'ssh_server_init_kex' API

2017-10-29 15:49:12 +01:00

session.h

server: Correctly handle extensions

2019-01-09 17:22:48 +01:00

sftp.h

priv: Add ssize_t if not available with MSVC

2018-10-19 14:05:08 +02:00

socket.h

socket: Undouble socket fds

2018-10-26 09:03:40 +02:00

ssh2.h

client: Handle the MSG_EXT_INFO packet signalling supported extensions

2018-08-31 14:30:53 +02:00

string.h

include: Fix the LGPL header.

2013-01-23 00:22:46 +01:00

threads.h

threads: use static error check mutex initializer if available

2018-08-13 13:49:24 +02:00

wrapper.h

pki: Support RSA verification using different hash algorithms

2018-08-31 14:30:53 +02:00