Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-09-18 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-18 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-09-18 | Merge branch '2.0' of github.com:paramiko/paramiko into 2.0 | Jeff Forcier | |
2017-09-18 | Migrate changelog release entry from 1.18 | Jeff Forcier | |
2017-09-18 | Changelog re #1065 | Jeff Forcier | |
2017-09-18 | Fix rekeying with GSS-API key exchange | Sebastian Deiss | |
When GSS-API key exchange is used a rekey caused a GSS-API MIC failure and closed the transport. This happened because the MIC of the transport session ID (H of the initial kex) was checked against the MIC of the new H created during rekey. | |||
2017-09-12 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-09-12 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-12 | Changelog re #1061 | Jeff Forcier | |
2017-09-12 | Merge branch '2.0' into 1061-int | Jeff Forcier | |
2017-09-12 | demo_simple: gss_auth and gss_kex are independent of each other. | Anselm Kruis | |
2017-09-12 | Changelog re #1060 | Jeff Forcier | |
2017-09-12 | Merge branch '2.0' into 1060-int | Jeff Forcier | |
2017-09-12 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-09-12 | Master changelog entry re: #1056 #1057 #1058 #1059 | Jeff Forcier | |
2017-09-12 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-09-12 | Master changelog entry re: #1056 #1057 #1058 #1059 | Jeff Forcier | |
2017-09-12 | Pep8 and Sphinx fixes. | Anselm Kruis | |
2017-08-04 | Transport gssapi-keyex: set the gss_kex_used flag late | Anselm Kruis | |
Set the flag gss_kex_used only after a gssapi-keyex has been successfully completed. This change prevents a wrong value in case of exceptions during the gssapi-keyex handshake. | |||
2017-08-04 | Merge branch '2.1-gsskex-hostkeycheck-fix' into 2.2-gsskex-hostkeycheck-fix | Anselm Kruis | |
2017-08-04 | AuthHandler: handle local "gssapi-with-mic" errors in client mode | Anselm Kruis | |
Paramiko now tries other authentication methods, if "gssapi-with-mic" authentication may fails for a local reason (i.e. no kerberos ticket). Befor this change, any exception from the GSSAPI/SSPI caused the transport to be closed. | |||
2017-08-04 | AuthHandler: fix the server-mode "gssapi-with-mic" logic | Anselm Kruis | |
A paramiko server is now able to handle a restart of the user authentication during the GSS-API token exchange. This may occur, if the client detects a local GSSAPI problem (e.g. a missing kerberos ticket) and continues with another authentication method. The added test case test_2_auth_trickledown still fails, because the paramiko client contains a bug too. | |||
2017-08-04 | Added paramiko.GSS_EXCEPTIONS: exception types used by GSSAPI | Anselm Kruis | |
This new constant is a tuple of the exception types used by the underlying GSSAPI/SSPI implementation. | |||
2017-08-04 | Merge branch '2.0-gsskex-hostkeycheck-fix' into 2.1-gsskex-hostkeycheck-fix | Anselm Kruis | |
2017-08-04 | SSHClient: fix the host key test | Anselm Kruis | |
Skip the host key check only, if the transport actually used gssapi-keyex. Add tests for the missing-host-key RejectPolicy. Before this change, a man-in-the-middle attack on the paramiko ssh client with gss_kex=True was possible by having a server that does not support gssapi-keyex and gives any or no host key. | |||
2017-08-03 | Transport: fix the preferred KEX algorithms for gssapi-keyex | Anselm Kruis | |
Add additional KEX algorithms for gssapi-keyex in front of the default preferred KEX algorithms, if gssapi-keyex is enabled. Before this change, Transport used a hard coded (and out-dated) list of algorithms, if gssapi-keyex was enabled. | |||
2017-07-13 | Changelog re #1012, re #1016 | Jeff Forcier | |
2017-07-13 | Enhance SFTP client & server docs re: posix_rename and its relation to rename | Jeff Forcier | |
Fixes #1016, re #1012 | |||
2017-06-15 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-06-15 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-06-15 | Merge pull request #997 from ploxiln/travis_pypy_update | Jeff Forcier | |
travis-ci: update pypy test run | |||
2017-06-14 | travis-ci: update pypy test run to use pypy-5.6.0 | Pierce Lopez | |
2017-06-13 | Cut 2.2.1 | Jeff Forcier | |
2017-06-13 | Whitespace | Jeff Forcier | |
2017-06-13 | Changelog language tweaks | Jeff Forcier | |
2017-06-13 | changelog: update for #990 and #993 | Pierce Lopez | |
2017-06-13 | implement __hash__() method for Ed25519Key | Pierce Lopez | |
makes Ed25519Key objs comparable, needed for host keys | |||
2017-06-13 | need bcrypt >= 3.1.3 for kdf() ignore_few_rounds kwarg | Pierce Lopez | |
2017-06-12 | Merge branch '2.1' into 2.2 | Jeff Forcier | |
2017-06-12 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-06-12 | Add Python 3.6 to classifiers | Felix Yan | |
2017-06-09 | Cut 2.2.0 | Jeff Forcier | |
2017-06-09 | Merge branch '2.1' | Jeff Forcier | |
2017-06-09 | Cut 2.1.3 | Jeff Forcier | |
2017-06-09 | Merge branch '2.0' into 2.1 | Jeff Forcier | |
2017-06-09 | Cut 2.0.6 | Jeff Forcier | |
2017-06-09 | Copy 1.x releases to 2.x changelog | Jeff Forcier | |
2017-06-09 | Merge branch '2.1' | Jeff Forcier | |
2017-06-09 | Clarification language re #865 changelog | Jeff Forcier | |
2017-06-09 | Merge branch '2.1' | Jeff Forcier | |