summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2017-09-12Merge branch '2.2'Jeff Forcier
2017-09-12Merge branch '2.1' into 2.2Jeff Forcier
2017-09-12Master changelog entry re: #1056 #1057 #1058 #1059Jeff Forcier
2017-09-12Merge branch '2.0' into 2.1Jeff Forcier
2017-09-12Master changelog entry re: #1056 #1057 #1058 #1059Jeff Forcier
2017-09-05GahJeff Forcier
2017-09-05Changelog re #979Jeff Forcier
2017-09-05Merge branch 'master' into 979-intJeff Forcier
2017-09-05Changelog update for #1026 plus related changesJeff Forcier
2017-09-05Document Ed25519 keys =/Jeff Forcier
I didn't badger people about docs so there were none
2017-09-05Merge branch 'master' into 1026-intJeff Forcier
2017-09-05Really, really gotta get better about enforcing theseJeff Forcier
2017-09-05Changelog re #1013Jeff Forcier
2017-09-05Merge branch 'master' into 1013-intJeff Forcier
2017-09-05Overhaul changelog re #1037, closes #60Jeff Forcier
2017-09-05Merge branch 'master' into 1037-intJeff Forcier
2017-09-02Python 2.6 fixesJeff Forcier
Fixes #1049
2017-08-28Python 3 fixes re #1042Jeff Forcier
2017-08-28flake8Jeff Forcier
2017-08-28This isn't required when one is just calling asbytes()Jeff Forcier
2017-08-28Implement ed25519 certs.Jeff Forcier
God damn it took me ages to notice that frickin self.public_blob = None bit :( :( :( :(
2017-08-28Implement ECDSA certs.Jeff Forcier
So mad at that frickin typo'd specification...
2017-08-28Tweak exceptions to at least have better strings, if not new classes yetJeff Forcier
2017-08-28Implement DSS certsJeff Forcier
2017-08-28Update recent tests to try all main key families.Jeff Forcier
Includes some dummy certificates. Not sure exactly how @radssh generated the RSA one but I'm using ssh-keygen + a randomly made CA key.
2017-08-28Factor out type checking & cert loading into PKeyJeff Forcier
2017-08-28God damn it, really? Whatever.Jeff Forcier
2017-08-28Update first few stub tests + required test-server and PublicBlob impl bitsJeff Forcier
2017-08-28Update changelog re: recent changes re: #1042Jeff Forcier
2017-08-28Overhaul PublicBlob and use it better within RSAKey.Jeff Forcier
This allows server-side Paramiko code to correctly create cert-bearing RSAKey objects and thus verify client signatures, and now the test suite passes again, barring the stub tests. Re #1042
2017-08-28Stub tests and partly-working implementation of 'load certs found alongside ↵Jeff Forcier
key_filenames' behavior re #1042 This actually breaks existing tests due to test server not supporting certs...bah
2017-08-282nd amendment doesn't grant the right to bare exceptsJeff Forcier
2017-08-28Docstring/TODO tweaksJeff Forcier
2017-08-28Refactor and clean up recently tweaked key loading bits in SSHClientJeff Forcier
2017-08-28Changelog and docs re #1042Jeff Forcier
2017-08-28flake8Jeff Forcier
2017-08-23Merge branch 'master' into 1042-intJeff Forcier
2017-08-23Changelog re #1041Jeff Forcier
2017-08-23Pull in count-errors from invocationsJeff Forcier
2017-08-22string slice instead of rstrip, thanks ploxilnPaul Kapp
2017-08-22Add certificate filenames to look_for_keysPaul Kapp
2017-08-22amendmentPaul Kapp
Forgot about AgentKey, and put ECDSA line in wrong __init__. That’s what I get for only screening with test_pkey…
2017-08-22Generic certificate supportPaul Kapp
Roll agnostic certificate support into PKey, and tweak publickey authentication to use it only if set. Requires explicit call to PKey.load_certificate() in order to alter the authentication behavior.
2017-08-18Common up break out of Transport.run() loopPaul Kapp
Can’t seem to reason out any advantage of clearing self.active and calling self.packetizer.close() in these situations instead of simply breaking out of loop and allowing the additional conditional cleanups to be done. Currently looking into tackling some needed cleanup in auth_handler, and not having the auth_handler.abort() called on server disconnect feels like a bug - who knows?
2017-08-08Adding changelog for slow compression improvementDrNeutron
2017-08-08Update compress.pyDrNeutron
The previous setting of the compression level to 9 is a poor trade off in CPU and time used for compression vs the size gain over the default level of compression in zlib which is 6.
2017-08-04Transport gssapi-keyex: set the gss_kex_used flag lateAnselm Kruis
Set the flag gss_kex_used only after a gssapi-keyex has been successfully completed. This change prevents a wrong value in case of exceptions during the gssapi-keyex handshake.
2017-08-04Merge branch '2.1-gsskex-hostkeycheck-fix' into 2.2-gsskex-hostkeycheck-fixAnselm Kruis
2017-08-04Merge branch '2.0-gsskex-hostkeycheck-fix' into 2.1-gsskex-hostkeycheck-fixAnselm Kruis
2017-08-04SSHClient: fix the host key testAnselm Kruis
Skip the host key check only, if the transport actually used gssapi-keyex. Add tests for the missing-host-key RejectPolicy. Before this change, a man-in-the-middle attack on the paramiko ssh client with gss_kex=True was possible by having a server that does not support gssapi-keyex and gives any or no host key.