Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-11-07 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-11-07 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-11-07 | Changelog re #1108 | Jeff Forcier | |
[ci skip] | |||
2017-11-07 | Rename an internal-only 'async' method kwarg for Python 3.7 compatibility. | Jeff Forcier | |
Fixes #1108 | |||
2017-10-18 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-10-18 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-10-18 | Include LICENSE in wheels | Jeff Forcier | |
2017-10-10 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-10-10 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-10-10 | Typofix | Jeff Forcier | |
2017-09-26 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-26 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-09-26 | sftp: fix BytesWarning: str() on a bytes instance | Michal Reznik | |
when running the code with python3 we get BytesWarning as what we receive from hexlify() function is bytes. Use u() from py3compat to overcome the issue. Fix: https://github.com/paramiko/paramiko/issues/1074 | |||
2017-09-18 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-18 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-09-18 | Note that #945 is 1.18+ | Jeff Forcier | |
Also pulls in 1.17, 1.18 specific entries to the 2.x line. FML | |||
2017-09-18 | Fix incorrect changelog branch stuff. | Jeff Forcier | |
Really starting to think we oughtta just move to one changelog file per major family :( | |||
2017-09-18 | Cut 2.2.2 | Jeff Forcier | |
2017-09-18 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-18 | Cut 2.1.4 | Jeff Forcier | |
2017-09-18 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-18 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-09-18 | Need new twine for newer pypi | Jeff Forcier | |
2017-09-18 | Cut 2.0.7 | Jeff Forcier | |
2017-09-18 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-18 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-09-18 | Merge branch '2.0' of github.com:paramiko/paramiko into 2.0 | Jeff Forcier | |
2017-09-18 | Migrate changelog release entry from 1.18 | Jeff Forcier | |
2017-09-18 | Changelog re #1065 | Jeff Forcier | |
2017-09-18 | Fix rekeying with GSS-API key exchange | Sebastian Deiss | |
When GSS-API key exchange is used a rekey caused a GSS-API MIC failure and closed the transport. This happened because the MIC of the transport session ID (H of the initial kex) was checked against the MIC of the new H created during rekey. | |||
2017-09-12 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-09-12 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-12 | Changelog re #1061 | Jeff Forcier | |
2017-09-12 | Merge branch '2.0' into 1061-int | Jeff Forcier | |
2017-09-12 | demo_simple: gss_auth and gss_kex are independent of each other. | Anselm Kruis | |
2017-09-12 | Changelog re #1060 | Jeff Forcier | |
2017-09-12 | Merge branch '2.0' into 1060-int | Jeff Forcier | |
2017-09-12 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-12 | Master changelog entry re: #1056 #1057 #1058 #1059 | Jeff Forcier | |
2017-09-12 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-09-12 | Master changelog entry re: #1056 #1057 #1058 #1059 | Jeff Forcier | |
2017-09-12 | Pep8 and Sphinx fixes. | Anselm Kruis | |
2017-08-04 | Transport gssapi-keyex: set the gss_kex_used flag late | Anselm Kruis | |
Set the flag gss_kex_used only after a gssapi-keyex has been successfully completed. This change prevents a wrong value in case of exceptions during the gssapi-keyex handshake. | |||
2017-08-04 | Merge branch '2.1-gsskex-hostkeycheck-fix' into 2.2-gsskex-hostkeycheck-fix | Anselm Kruis | |
2017-08-04 | AuthHandler: handle local "gssapi-with-mic" errors in client mode | Anselm Kruis | |
Paramiko now tries other authentication methods, if "gssapi-with-mic" authentication may fails for a local reason (i.e. no kerberos ticket). Befor this change, any exception from the GSSAPI/SSPI caused the transport to be closed. | |||
2017-08-04 | AuthHandler: fix the server-mode "gssapi-with-mic" logic | Anselm Kruis | |
A paramiko server is now able to handle a restart of the user authentication during the GSS-API token exchange. This may occur, if the client detects a local GSSAPI problem (e.g. a missing kerberos ticket) and continues with another authentication method. The added test case test_2_auth_trickledown still fails, because the paramiko client contains a bug too. | |||
2017-08-04 | Added paramiko.GSS_EXCEPTIONS: exception types used by GSSAPI | Anselm Kruis | |
This new constant is a tuple of the exception types used by the underlying GSSAPI/SSPI implementation. | |||
2017-08-04 | Merge branch '2.0-gsskex-hostkeycheck-fix' into 2.1-gsskex-hostkeycheck-fix | Anselm Kruis | |
2017-08-04 | SSHClient: fix the host key test | Anselm Kruis | |
Skip the host key check only, if the transport actually used gssapi-keyex. Add tests for the missing-host-key RejectPolicy. Before this change, a man-in-the-middle attack on the paramiko ssh client with gss_kex=True was possible by having a server that does not support gssapi-keyex and gives any or no host key. | |||
2017-08-03 | Transport: fix the preferred KEX algorithms for gssapi-keyex | Anselm Kruis | |
Add additional KEX algorithms for gssapi-keyex in front of the default preferred KEX algorithms, if gssapi-keyex is enabled. Before this change, Transport used a hard coded (and out-dated) list of algorithms, if gssapi-keyex was enabled. |