Jon Simons ee460dc04b kex: also compare host keys for 'first_kex_packet_follows' ...

Also consider the host key type at hand when computing whether a
'first_kex_packet_follows' packet matches the current server settings.
Without this change libssh may incorrectly believe that guessed
settings which match by kex algorithm alone fully match: the host
key types must also match.  Observed when testing with dropbear
clients.

Signed-off-by: Jon Simons <jon@jonsimons.org>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2015-05-05 22:03:47 +02:00

..

external

external: Fix resetting the state

2015-05-04 18:10:30 +02:00

threads

threads: Fix building with POSIX threads in MinGW.

2015-01-20 19:01:15 +01:00

agent.c

src: Rename buffer_add_data() to ssh_buffer_add_data().

2014-01-19 20:55:55 +01:00

auth1.c

src: Remove enter_function() and leave_function().

2013-07-14 13:31:24 +02:00

auth.c

include: We should use __func__ which is C99

2015-04-02 10:58:36 +02:00

base64.c

buffer: fix use-before-nullcheck (coverity #1267979)

2015-02-03 22:21:22 +01:00

bignum.c

bignum: no-op make_string_bn_inplace for LIBGCRYPT

2014-12-09 19:20:46 +01:00

bind.c

bind: Correctly close sockets and invalidate them.

2015-04-10 13:32:09 +02:00

buffer.c

buffer: Cleanup vaargs in ssh_buffer_unpack_va()

2015-05-04 17:54:01 +02:00

callbacks.c

src: Update my mail address.

2014-01-07 16:08:23 +01:00

channels1.c

channels1: Fix pty request state

2015-01-20 18:58:13 +01:00

channels.c

buffers: adapt channels.c to ssh_buffer_(un)pack()

2014-08-06 09:33:03 +02:00

client.c

options: Fix setting the port.

2014-12-25 12:32:16 +01:00

CMakeLists.txt

cmake: Add --enable-stdcall-fixup for MinGW builds

2015-05-05 18:59:30 +02:00

config.c

options: Fix setting the port.

2014-12-25 12:32:16 +01:00

connect.c

connect: Fix a memory leak.

2015-01-14 15:20:52 +01:00

crc32.c

priv: Create crc32.h.

2011-09-18 21:37:17 +02:00

curve25519.c

ec: Fix build on CentOS.

2014-08-18 10:08:00 +02:00

dh.c

dh: Fix packing a pointer into the buffer.

2014-08-25 12:23:17 +02:00

ecdh.c

ec: Fix build on CentOS.

2014-08-18 10:08:00 +02:00

error.c

doc: Fix description of error parameter for ssh_get_error*

2014-01-22 09:45:45 +01:00

gcrypt_missing.c

priv: Move gcrypt functions to gcrypt header.

2011-09-18 21:37:17 +02:00

getpass.c

update copyright information

2014-01-07 15:18:15 +01:00

gssapi.c

gssapi: ssh_gssapi_set_creds() is a client side function

2014-10-12 15:41:15 +02:00

gzip.c

src: Rename buffer_add_data() to ssh_buffer_add_data().

2014-01-19 20:55:55 +01:00

init.c

init: Some initialization fixes.

2011-05-01 19:42:50 +02:00

kex1.c

src: Rename buffer_add_data() to ssh_buffer_add_data().

2014-01-19 20:55:55 +01:00

kex.c

kex: also compare host keys for 'first_kex_packet_follows'

2015-05-05 22:03:47 +02:00

known_hosts.c

options: Fix setting the port.

2014-12-25 12:32:16 +01:00

legacy.c

src: Do not use deprecated functions.

2014-01-16 15:27:46 +01:00

libcrypto.c

libcrypto: Fix Windows build with ssh_reseed().

2014-12-17 19:39:18 +01:00

libgcrypt.c

crypto: check malloc return in ssh_mac_ctx_init

2014-10-02 08:25:53 +02:00

log.c

log: Add check for return value.

2014-06-10 13:52:38 +02:00

match.c

match: Don't dereference 's' directly.

2012-10-09 11:09:34 +02:00

messages.c

messages: Don't leak memory after callback execution

2015-04-02 16:13:20 +02:00

misc.c

src: Define MAX_BUF_SIZE globally and use it.

2014-02-02 22:19:46 +01:00

options.c

server: Add support for ed25519 keys in the server.

2015-02-02 14:45:52 +01:00

packet1.c

log: Fix log levels.

2014-04-22 09:35:33 +02:00

packet_cb.c

CVE-2015-3146: Fix state validation in packet handlers

2015-04-23 10:15:47 +02:00

packet_crypt.c

crypto: fix secure burning, structure members naming

2014-08-06 10:05:19 +02:00

packet.c

packet: Check return value of ssh_buffer_unpack().

2014-08-15 12:29:20 +02:00

pcap.c

buffers: adapt pcap.c to ssh_buffer_(un)pack()

2014-08-06 09:46:14 +02:00

pki_container_openssh.c

pki_container: Fix a memory leak

2015-05-04 17:54:01 +02:00

pki_crypto.c

libcrypto: Make the PEM parser ed25519 aware

2015-02-02 14:45:52 +01:00

pki_ed25519.c

ed25519: fix leak in pki_ed25519_sign

2014-10-02 08:28:51 +02:00

pki_gcrypt.c

Revert "pki_gcrypt: fix warnings for SSH_KEYTYPE_ED25519"

2015-02-03 09:58:28 +01:00

pki.c

ed25519: Add support to export OpenSSH container keys

2015-02-02 14:45:52 +01:00

poll.c

poll: Fix compilation with struct ssh_timestamp

2015-04-02 15:02:29 +02:00

scp.c

Revert f2c2687ca6c6c7e25c9a547227027ab28eb4fc16

2014-02-05 22:29:22 +01:00

server.c

server: return SSH_OK for ignored SSH_MSG_KEXDH_INIT case

2015-05-05 22:03:32 +02:00

session.c

server: Add support for ed25519 keys in the server.

2015-02-02 14:45:52 +01:00

sftp.c

sftp: Fix size check

2015-05-05 11:26:40 +02:00

sftpserver.c

buffers: adapt sftpserver.c to ssh_buffer_(un)pack()

2014-08-06 09:52:29 +02:00

socket.c

socket: Cleanup ssh_socket_close() code.

2015-04-10 13:32:09 +02:00

string.c

string: Improve ssh_string_len() to avoid tainted variables

2015-05-04 17:54:01 +02:00

threads.c

threads: support libgcrypt 1.6 hack

2014-01-08 18:57:31 +01:00

wrapper.c

ed25519: ADd OpenSSH encrypted container import

2015-02-02 14:45:52 +01:00