Commits - rpms/openssh - CentOS Git server

Use FIPS-compatible API for key derivation

Dmitry Belyavskiy • 7 months ago

03eff3

Fix Terrapin attack

Dmitry Belyavskiy • 10 months ago

2c2ea1

Fix Terrapin attack

Dmitry Belyavskiy • 10 months ago

4c4233

Rebuild

Dmitry Belyavskiy • 11 months ago

8a8fae

Forbid shell metasymbols in username/hostname

Dmitry Belyavskiy • 11 months ago

0521bb

Relax OpenSSH build-time checks for OpenSSL version

Dmitry Belyavskiy • 11 months ago

d18e1c

Fix Terrapin attack

Dmitry Belyavskiy • 11 months ago

54fc80

Move users/groups creation logic to sysusers.d fragments

Dmitry Belyavskiy • a year ago

5838d3

Limit artificial delays in sshd while login using AD user

Dmitry Belyavskiy • a year ago

a43be1

Relax OpenSSH checks for OpenSSL version

Dmitry Belyavskiy • a year ago

d8b51e

Avoid remote code execution in ssh-agent PKCS#11 support

Dmitry Belyavskiy • a year ago

edaf6c

Avoid remote code execution in ssh-agent PKCS#11 support

Dmitry Belyavskiy • a year ago

6fa799

Allow specifying validity interval in UTC

Dmitry Belyavskiy • a year ago

c5140c

Clarify rhbz#2068423 on the ssh_config man page

Norbert Pocs • a year ago

415f8e

Fix regression in pkcs11 introduced in the previous patch

Norbert Pocs • 2 years ago

6b2353

Delete unneeded debug messages from fips-compl-dh patch

Norbert Pocs • 2 years ago

48718a

Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch

Norbert Pocs • 2 years ago

1490ff

Add FIPS compliance efforts for dh, ecdh and signing

Norbert Pocs • 2 years ago

587d7b

Eliminating remnants of SHA1 usage in OpenSSH

Dmitry Belyavskiy • 2 years ago

b5ba5a

Some non-terminating processes were listening on ports.

Dmitry Belyavskiy • 2 years ago

cc7d7a

Resolve possible self-DoS with some clients

Dmitry Belyavskiy • 2 years ago

f7003b

Do not try to use SHA1 for host key ownership proof when we don't support it server-side

Dmitry Belyavskiy • 2 years ago

42aa6f

Do not try to use SHA1 for host key ownership proof when we don't support it server-side

Dmitry Belyavskiy • 2 years ago

ebbbfc

Add sk-dummy subpackage for test purposes

Zoltan Fridrich • 2 years ago

5cfb97

Minor cleanups from upstream

Dmitry Belyavskiy • 2 years ago

6f7478

- Build fix after OpenSSL rebase

Dmitry Belyavskiy • 2 years ago

b0f320

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

ad9644

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

d4ff0b

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

d92560

Avoid spirous message on connecting to the machine with ssh-rsa keys

Dmitry Belyavskiy • 2 years ago

a0db6b

IBMCA workaround

Dmitry Belyavskiy • 2 years ago

b53c53

Fix openssh-8.7p1-scp-clears-file.patch

Zoltan Fridrich • 2 years ago

1d30b8

FIX pam_ssh_agent_auth auth for RSA keys

Dmitry Belyavskiy • 2 years ago

9591af

Fix new coverity issues

Zoltan Fridrich • 2 years ago

9697ee

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

d23afa

Don't propose disallowed algorithms during hostkey negotiation

Zoltan Fridrich • 2 years ago

e8622f

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

b17ff3

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

0d823b

Add reference for policy customization in ssh/sshd_config manpages

Zoltan Fridrich • 2 years ago

821045

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

399096

Disable sntrup761x25519-sha512 in FIPS mode

Dmitry Belyavskiy • 2 years ago

32a826

Fix host-based authentication with rsa keys

Zoltan Fridrich • 2 years ago

fd0d5a

Fix gssapi authentication failures

Zoltan Fridrich • 2 years ago

9bf7b4

Fix several memory leaks

Zoltan Fridrich • 2 years ago

585620

Add missing options from ssh_config into ssh manpage

Zoltan Fridrich • 2 years ago

afede7

Fix scp clearing file when src and dest are the same

Zoltan Fridrich • 2 years ago

c958ea

Use EVP functions for RSA and EC key generation

Dmitry Belyavskiy • 2 years ago

d0bf0e

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

4b21ae

Change log level of FIPS specific log message to verbose

Zoltan Fridrich • 2 years ago

e11cd7

Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch

Zoltan Fridrich • 2 years ago

1325e1

Update minimize-sha1-use.patch to use upstream code

Zoltan Fridrich • 2 years ago

abf032

rpms / openssh

Commits 84

rpms / openssh

Source Code

Commits 84