summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2017-09-18Merge branch '2.2'Jeff Forcier
2017-09-18Merge branch '2.1' into 2.2Jeff Forcier
2017-09-18Merge branch '2.0' into 2.1Jeff Forcier
2017-09-18Need new twine for newer pypiJeff Forcier
2017-09-18Cut 2.0.7Jeff Forcier
2017-09-18Merge branch '2.2'Jeff Forcier
2017-09-18Merge branch '2.1' into 2.2Jeff Forcier
2017-09-18Merge branch '2.0' into 2.1Jeff Forcier
2017-09-18Merge branch '2.0' of github.com:paramiko/paramiko into 2.0Jeff Forcier
2017-09-18Migrate changelog release entry from 1.18Jeff Forcier
2017-09-18Merge pull request #1064 from SebastianDeiss/fix-set_gss_hostJeff Forcier
Fix gss_host setting and cleanup its logic
2017-09-18Merge branch '2.2'Jeff Forcier
2017-09-18Changelog re #1065Jeff Forcier
2017-09-18Fix rekeying with GSS-API key exchangeSebastian Deiss
When GSS-API key exchange is used a rekey caused a GSS-API MIC failure and closed the transport. This happened because the MIC of the transport session ID (H of the initial kex) was checked against the MIC of the new H created during rekey.
2017-09-18Fix gss_host setting and cleanup its logicSebastian Deiss
The parameter 'kex_requested' is misleading, since setting 'gss_host' is also required for gssapi-with-mic.
2017-09-13LanguageJeff Forcier
2017-09-13Changelog re #1063Jeff Forcier
2017-09-13flake8Jeff Forcier
2017-09-13Attempt to refactor gss_host setting and clean up/document its logicJeff Forcier
2017-09-13Formatting yet againJeff Forcier
2017-09-13versionchanged for gss_trust_dnsJeff Forcier
2017-09-13More formattingJeff Forcier
2017-09-13Feels like we do still want set_gss_host gated by whether GSS is in play (as ↵Jeff Forcier
is in master)
2017-09-13Formatting (old)Jeff Forcier
2017-09-13FormattingJeff Forcier
2017-09-13Trailing commaJeff Forcier
2017-09-13Merge branch 'master' into 1063-intJeff Forcier
2017-09-13Invent the parameter 'gss_trust_dns' for Kerberos supportAnselm Kruis
In response to Paramiko issue #915 the parameter 'gss_trust_dns' was added for Kerberos support. Set by default to 'True' the parameter indicates whether or not the DNS is trusted to securely canonicalize the hostname of the target host. If set to 'False' the hostname entered will be passed to GSSAPI. This option behaves like GSSAPITrustDNS from OpenSSH. Also, the parameter 'gss_host' is now always set, regardless if GSSAPI is used or not. Further, a minor fix was required to make the SFTP test work again.
2017-09-12Merge branch '2.0' into 2.1Jeff Forcier
2017-09-12Merge branch '2.1' into 2.2Jeff Forcier
2017-09-12Merge branch '2.2'Jeff Forcier
2017-09-12Changelog re #1061Jeff Forcier
2017-09-12Merge branch '2.0' into 1061-intJeff Forcier
2017-09-12demo_simple: gss_auth and gss_kex are independent of each other.Anselm Kruis
2017-09-12Changelog re #1060Jeff Forcier
2017-09-12Merge branch '2.0' into 1060-intJeff Forcier
2017-09-12Merge branch '2.2'Jeff Forcier
2017-09-12Merge branch '2.1' into 2.2Jeff Forcier
2017-09-12Master changelog entry re: #1056 #1057 #1058 #1059Jeff Forcier
2017-09-12Merge branch '2.0' into 2.1Jeff Forcier
2017-09-12Master changelog entry re: #1056 #1057 #1058 #1059Jeff Forcier
2017-09-12Pep8 and Sphinx fixes.Anselm Kruis
2017-09-05GahJeff Forcier
2017-09-05Changelog re #979Jeff Forcier
2017-09-05Merge branch 'master' into 979-intJeff Forcier
2017-09-05Changelog update for #1026 plus related changesJeff Forcier
2017-09-05Document Ed25519 keys =/Jeff Forcier
I didn't badger people about docs so there were none
2017-09-05Merge branch 'master' into 1026-intJeff Forcier
2017-09-05Really, really gotta get better about enforcing theseJeff Forcier
2017-09-05Changelog re #1013Jeff Forcier