mirror of
https://git.libssh.org/projects/libssh.git
synced 2026-02-05 12:50:30 +09:00
54d76098ed
When in FIPS mode, filter the algorithms to enable only the allowed ones. If any algorithm is explicitly set through options or configuration file, they are kept. Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> Reviewed-by: Jakub Jelen <jjelen@redhat.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
60 lines
2.2 KiB
C
60 lines
2.2 KiB
C
/*
|
|
* This file is part of the SSH Library
|
|
*
|
|
* Copyright (c) 2009 by Aris Adamantiadis
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
#ifndef KEX_H_
|
|
#define KEX_H_
|
|
|
|
#include "libssh/priv.h"
|
|
#include "libssh/callbacks.h"
|
|
|
|
#define SSH_KEX_METHODS 10
|
|
|
|
struct ssh_kex_struct {
|
|
unsigned char cookie[16];
|
|
char *methods[SSH_KEX_METHODS];
|
|
};
|
|
|
|
SSH_PACKET_CALLBACK(ssh_packet_kexinit);
|
|
|
|
int ssh_send_kex(ssh_session session, int server_kex);
|
|
void ssh_list_kex(struct ssh_kex_struct *kex);
|
|
int ssh_set_client_kex(ssh_session session);
|
|
int ssh_kex_select_methods(ssh_session session);
|
|
int ssh_verify_existing_algo(enum ssh_kex_types_e algo, const char *name);
|
|
char *ssh_keep_known_algos(enum ssh_kex_types_e algo, const char *list);
|
|
char *ssh_keep_fips_algos(enum ssh_kex_types_e algo, const char *list);
|
|
char **ssh_space_tokenize(const char *chain);
|
|
int ssh_get_kex1(ssh_session session);
|
|
char *ssh_find_matching(const char *in_d, const char *what_d);
|
|
const char *ssh_kex_get_supported_method(uint32_t algo);
|
|
const char *ssh_kex_get_default_methods(uint32_t algo);
|
|
const char *ssh_kex_get_fips_methods(uint32_t algo);
|
|
const char *ssh_kex_get_description(uint32_t algo);
|
|
char *ssh_client_select_hostkeys(ssh_session session);
|
|
int ssh_send_rekex(ssh_session session);
|
|
int server_set_kex(ssh_session session);
|
|
int ssh_make_sessionid(ssh_session session);
|
|
/* add data for the final cookie */
|
|
int ssh_hashbufin_add_cookie(ssh_session session, unsigned char *cookie);
|
|
int ssh_hashbufout_add_cookie(ssh_session session);
|
|
int ssh_generate_session_keys(ssh_session session);
|
|
|
|
#endif /* KEX_H_ */
|