summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2017-09-12Merge branch '2.0' into 2.1Jeff Forcier
2017-09-12Changelog re #1061Jeff Forcier
2017-09-12Merge branch '2.0' into 1061-intJeff Forcier
2017-09-12demo_simple: gss_auth and gss_kex are independent of each other.Anselm Kruis
2017-09-12Changelog re #1060Jeff Forcier
2017-09-12Merge branch '2.0' into 1060-intJeff Forcier
2017-09-12Merge branch '2.0' into 2.1Jeff Forcier
2017-09-12Master changelog entry re: #1056 #1057 #1058 #1059Jeff Forcier
2017-09-12Pep8 and Sphinx fixes.Anselm Kruis
2017-08-04AuthHandler: handle local "gssapi-with-mic" errors in client modeAnselm Kruis
Paramiko now tries other authentication methods, if "gssapi-with-mic" authentication may fails for a local reason (i.e. no kerberos ticket). Befor this change, any exception from the GSSAPI/SSPI caused the transport to be closed.
2017-08-04AuthHandler: fix the server-mode "gssapi-with-mic" logicAnselm Kruis
A paramiko server is now able to handle a restart of the user authentication during the GSS-API token exchange. This may occur, if the client detects a local GSSAPI problem (e.g. a missing kerberos ticket) and continues with another authentication method. The added test case test_2_auth_trickledown still fails, because the paramiko client contains a bug too.
2017-08-04Added paramiko.GSS_EXCEPTIONS: exception types used by GSSAPIAnselm Kruis
This new constant is a tuple of the exception types used by the underlying GSSAPI/SSPI implementation.
2017-08-04Merge branch '2.0-gsskex-hostkeycheck-fix' into 2.1-gsskex-hostkeycheck-fixAnselm Kruis
2017-08-04SSHClient: fix the host key testAnselm Kruis
Skip the host key check only, if the transport actually used gssapi-keyex. Add tests for the missing-host-key RejectPolicy. Before this change, a man-in-the-middle attack on the paramiko ssh client with gss_kex=True was possible by having a server that does not support gssapi-keyex and gives any or no host key.
2017-08-03Transport: fix the preferred KEX algorithms for gssapi-keyexAnselm Kruis
Add additional KEX algorithms for gssapi-keyex in front of the default preferred KEX algorithms, if gssapi-keyex is enabled. Before this change, Transport used a hard coded (and out-dated) list of algorithms, if gssapi-keyex was enabled.
2017-06-15Merge branch '2.0' into 2.1Jeff Forcier
2017-06-15Merge pull request #997 from ploxiln/travis_pypy_updateJeff Forcier
travis-ci: update pypy test run
2017-06-14travis-ci: update pypy test run to use pypy-5.6.0Pierce Lopez
2017-06-12Merge branch '2.0' into 2.1Jeff Forcier
2017-06-12Add Python 3.6 to classifiersFelix Yan
2017-06-09Cut 2.1.3Jeff Forcier
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Cut 2.0.6Jeff Forcier
2017-06-09Copy 1.x releases to 2.x changelogJeff Forcier
2017-06-09Clarification language re #865 changelogJeff Forcier
2017-06-09Re-apply ResourceManager removalJeff Forcier
2017-06-09Merge branch '2.1' into 910-intJeff Forcier
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Port #906 changelog to 2.0 re #976Jeff Forcier
2017-06-09Merge branch '2.0' into 976-intJeff Forcier
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Hand-port #984 to 2.0Jeff Forcier
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Merge branch '2.0' into 976-intJeff Forcier
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Port #971 changelog from 1.x to 2.xJeff Forcier
2017-06-09Flake8/etc tweaks re #971 in 2.xJeff Forcier
2017-06-09Tweak comments as suggested in reviewMartin Packman
Thanks to bitprophet and ploxiln.
2017-06-09Allow any buffer type to be written to SFTPFileMartin Packman
Fixes #967 #968 Rollup of earlier branches proposed as #969 and #970 with additional fix inside sftp_client. Includes new tests for SFTPFile usage. Change against the 1.17 branch.
2017-06-09Allow any buffer type to be sent to ChannelMartin Packman
Fixes #968 Changes the behaviour of the underlying asbytes helper to pass along unknown types. Most callers already handle this by passing the bytes along to a file or socket-like object which will raise TypeError anyway. Adds test coverage through the Transport implementation. Change against the 1.17 branch.
2017-06-09Import from py3compat directly in test_clientMartin Packman
2017-06-09Allow any buffer type to written to BufferedFileMartin Packman
Fixes #967 Also adds test coverage for writing various types to BufferedFile which required some small changes to the test LoopbackFile subclass. Change against the 1.17 branch.
2017-06-09Add new skipUnlessBuiltin function for testingMartin Packman
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Unify 1.x and 2.x changelog entries.Jeff Forcier
TBH this might just be the last damn 1.x series of releases. This is still too much work!
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Changelog re #956Jeff Forcier
2017-06-09Replace coveralls with codecov, comments disabledNikolai R Kristiansen
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Merge branch '2.0' into 952-intJeff Forcier