From e5b1f0f3dc7a2cc1d2c3dfcd056c7bc184823657 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Tue, 12 Sep 2017 12:55:25 -0700 Subject: Master changelog entry re: #1056 #1057 #1058 #1059 --- sites/www/changelog.rst | 3 +++ 1 file changed, 3 insertions(+) (limited to 'sites') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index cb3ddb67..dbd33923 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,9 @@ Changelog ========= +* :bug:`1055` (also :issue:`1056`, :issue:`1057`, :issue:`1058`, :issue:`1059`) + Fix up host-key checking in our GSSAPI support, which was previously using an + incorrect API call. Thanks to Anselm Kruis for the patches. * :release:`2.0.6 <2017-06-09>` * :release:`1.18.3 <2017-06-09>` * :release:`1.17.5 <2017-06-09>` -- cgit v1.2.3 From 2e774b2bacb7feeca421e5987c7531944b3f35fb Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Tue, 12 Sep 2017 12:55:25 -0700 Subject: Master changelog entry re: #1056 #1057 #1058 #1059 --- sites/www/changelog.rst | 3 +++ 1 file changed, 3 insertions(+) (limited to 'sites') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index 12c8cb03..945217d1 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,9 @@ Changelog ========= +* :bug:`1055` (also :issue:`1056`, :issue:`1057`, :issue:`1058`, :issue:`1059`) + Fix up host-key checking in our GSSAPI support, which was previously using an + incorrect API call. Thanks to Anselm Kruis for the patches. * :support:`1012` (via :issue:`1016`) Enhance documentation around the new `SFTP.posix_rename ` method so it's referenced in the 'standard' ``rename`` method for increased visibility. -- cgit v1.2.3 From ed62913ee6389bccc8b2408bf9ee25bfcdef40a4 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Tue, 12 Sep 2017 13:07:23 -0700 Subject: Changelog re #1060 --- sites/www/changelog.rst | 3 +++ 1 file changed, 3 insertions(+) (limited to 'sites') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index dbd33923..988aedac 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,9 @@ Changelog ========= +* :bug:`1060` Fix key exchange (kex) algorithm list for GSSAPI authentication; + previously, the list used solely out-of-date algorithms, and now contains + newer ones listed preferentially before the old. Credit: Anselm Kruis. * :bug:`1055` (also :issue:`1056`, :issue:`1057`, :issue:`1058`, :issue:`1059`) Fix up host-key checking in our GSSAPI support, which was previously using an incorrect API call. Thanks to Anselm Kruis for the patches. -- cgit v1.2.3 From 89a9b583e46f634792d814c5cff8e0cecdb5fa50 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Tue, 12 Sep 2017 13:11:05 -0700 Subject: Changelog re #1061 --- sites/www/changelog.rst | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'sites') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index 988aedac..a0662704 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,11 @@ Changelog ========= +* :bug:`1061` Clean up GSSAPI authentication procedures so they do not prevent + normal fallback to other authentication methods on failure. (In other words, + presence of GSSAPI functionality on a target server precluded use of _any_ + other auth type if the user was unable to pass GSSAPI auth.) Patch via Anselm + Kruis. * :bug:`1060` Fix key exchange (kex) algorithm list for GSSAPI authentication; previously, the list used solely out-of-date algorithms, and now contains newer ones listed preferentially before the old. Credit: Anselm Kruis. -- cgit v1.2.3 From 61d1297f3c9fc1bb9e8d4f4524d287d38c56c3cf Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Mon, 18 Sep 2017 10:58:57 -0700 Subject: Changelog re #1065 --- sites/www/changelog.rst | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'sites') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index bc88ec64..aebf21f1 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,11 @@ Changelog ========= +* :bug:`1065` Add rekeying support to GSSAPI connections, which was erroneously + missing. Without this fix, any attempt to renegotiate the transport keys for + a ``gss-kex``-authed `~paramiko.transport.Transport` would cause a MIC + failure and terminate the connection. Thanks to Sebastian Deiß and Anselm + Kruis for the patch. * :bug:`1061` Clean up GSSAPI authentication procedures so they do not prevent normal fallback to other authentication methods on failure. (In other words, presence of GSSAPI functionality on a target server precluded use of _any_ -- cgit v1.2.3 From 20b69e7735e8c7e8bf63ee4df2c6a6b34743e646 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Mon, 18 Sep 2017 12:01:33 -0700 Subject: Migrate changelog release entry from 1.18 --- sites/www/changelog.rst | 1 + 1 file changed, 1 insertion(+) (limited to 'sites') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index ebf8253b..49854695 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,7 @@ Changelog ========= +* :release:`1.18.4 <2017-09-18>` * :bug:`741` (also :issue:`809`, :issue:`772`; all via :issue:`912`) Writing encrypted/password-protected private key files was silently broken since 2.0 due to an incorrect API call; this has been fixed. -- cgit v1.2.3 From 2c8262c2487186ce0bb2b8ac5497b4722467f71c Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Mon, 18 Sep 2017 12:07:37 -0700 Subject: Cut 2.0.7 --- paramiko/_version.py | 2 +- sites/www/changelog.rst | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) (limited to 'sites') diff --git a/paramiko/_version.py b/paramiko/_version.py index 98c3cc2d..ec3617a5 100644 --- a/paramiko/_version.py +++ b/paramiko/_version.py @@ -1,2 +1,2 @@ -__version_info__ = (2, 0, 6) +__version_info__ = (2, 0, 7) __version__ = '.'.join(map(str, __version_info__)) diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index ac1ba9ae..daa2749e 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,7 @@ Changelog ========= +* :release:`2.0.7 <2017-09-18>` * :release:`1.18.4 <2017-09-18>` * :bug:`1061` Clean up GSSAPI authentication procedures so they do not prevent normal fallback to other authentication methods on failure. (In other words, -- cgit v1.2.3 From ccad634e8ce8b2f765ea63ac3b93148452e2ab2a Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Mon, 18 Sep 2017 12:14:36 -0700 Subject: Cut 2.1.4 --- paramiko/_version.py | 2 +- sites/www/changelog.rst | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) (limited to 'sites') diff --git a/paramiko/_version.py b/paramiko/_version.py index a6d1392b..b6f413f5 100644 --- a/paramiko/_version.py +++ b/paramiko/_version.py @@ -1,2 +1,2 @@ -__version_info__ = (2, 1, 3) +__version_info__ = (2, 1, 4) __version__ = '.'.join(map(str, __version_info__)) diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index 0f02c3d5..9d14314f 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,7 @@ Changelog ========= +* :release:`2.1.4 <2017-09-18>` * :release:`2.0.7 <2017-09-18>` * :release:`1.18.4 <2017-09-18>` * :bug:`1061` Clean up GSSAPI authentication procedures so they do not prevent -- cgit v1.2.3 From 2deecdf886a91792e47164dd9e39634ba9c65735 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Mon, 18 Sep 2017 12:17:03 -0700 Subject: Cut 2.2.2 --- paramiko/_version.py | 2 +- sites/www/changelog.rst | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) (limited to 'sites') diff --git a/paramiko/_version.py b/paramiko/_version.py index c8ca86d1..cbe430ff 100644 --- a/paramiko/_version.py +++ b/paramiko/_version.py @@ -1,2 +1,2 @@ -__version_info__ = (2, 2, 1) +__version_info__ = (2, 2, 2) __version__ = '.'.join(map(str, __version_info__)) diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index cd192752..cd48032c 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,7 @@ Changelog ========= +* :release:`2.2.2 <2017-09-18>` * :release:`2.1.4 <2017-09-18>` * :release:`2.0.7 <2017-09-18>` * :release:`1.18.4 <2017-09-18>` -- cgit v1.2.3 From d3e2a05d5dcbec1944b6762bfec04547cb1c27e5 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Mon, 18 Sep 2017 12:30:52 -0700 Subject: Fix incorrect changelog branch stuff. Really starting to think we oughtta just move to one changelog file per major family :( --- sites/www/changelog.rst | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) (limited to 'sites') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index daa2749e..01398a71 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -12,9 +12,10 @@ Changelog * :bug:`1060` Fix key exchange (kex) algorithm list for GSSAPI authentication; previously, the list used solely out-of-date algorithms, and now contains newer ones listed preferentially before the old. Credit: Anselm Kruis. -* :bug:`1055` (also :issue:`1056`, :issue:`1057`, :issue:`1058`, :issue:`1059`) - Fix up host-key checking in our GSSAPI support, which was previously using an - incorrect API call. Thanks to Anselm Kruis for the patches. +* :bug:`1055 (1.17+)` (also :issue:`1056`, :issue:`1057`, :issue:`1058`, + :issue:`1059`) Fix up host-key checking in our GSSAPI support, which was + previously using an incorrect API call. Thanks to Anselm Kruis for the + patches. * :release:`2.0.6 <2017-06-09>` * :release:`1.18.3 <2017-06-09>` * :release:`1.17.5 <2017-06-09>` -- cgit v1.2.3 From 04f62f765a03d045f4abaf69f61f835f2af81125 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Mon, 18 Sep 2017 12:31:40 -0700 Subject: Note that #945 is 1.18+ Also pulls in 1.17, 1.18 specific entries to the 2.x line. FML --- sites/www/changelog.rst | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'sites') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index 01398a71..34dd3f70 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -12,6 +12,11 @@ Changelog * :bug:`1060` Fix key exchange (kex) algorithm list for GSSAPI authentication; previously, the list used solely out-of-date algorithms, and now contains newer ones listed preferentially before the old. Credit: Anselm Kruis. +* :bug:`945 (1.18+)` (backport of :issue:`910` and re: :issue:`865`) SSHClient + now requests the type of host key it has (e.g. from known_hosts) and does not + consider a different type to be a "Missing" host key. This fixes a common + case where an ECDSA key is in known_hosts and the server also has an RSA host + key. Thanks to Pierce Lopez. * :bug:`1055 (1.17+)` (also :issue:`1056`, :issue:`1057`, :issue:`1058`, :issue:`1059`) Fix up host-key checking in our GSSAPI support, which was previously using an incorrect API call. Thanks to Anselm Kruis for the -- cgit v1.2.3 From a4b17ac6bc499e97e9227d092e7f002b43d06819 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Wed, 18 Oct 2017 11:55:08 -0700 Subject: Include LICENSE in wheels --- setup.cfg | 3 +++ sites/www/changelog.rst | 1 + 2 files changed, 4 insertions(+) (limited to 'sites') diff --git a/setup.cfg b/setup.cfg index f2c1499d..8cc271fe 100644 --- a/setup.cfg +++ b/setup.cfg @@ -1,6 +1,9 @@ [wheel] universal = 1 +[metadata] +license_file = LICENSE + [coverage:run] omit = paramiko/_winapi.py diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index 34dd3f70..e1cb0d2c 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,7 @@ Changelog ========= +* :support:`- backported` Include LICENSE file in wheel archives. * :release:`2.0.7 <2017-09-18>` * :release:`1.18.4 <2017-09-18>` * :bug:`1061` Clean up GSSAPI authentication procedures so they do not prevent -- cgit v1.2.3 From b85c34559b601199262d654578bb2868f648d159 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Tue, 7 Nov 2017 09:34:15 -0800 Subject: Changelog re #1108 [ci skip] --- sites/www/changelog.rst | 3 +++ 1 file changed, 3 insertions(+) (limited to 'sites') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index e1cb0d2c..af1123c0 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,9 @@ Changelog ========= +* :bug:`1108 (1.17+)` Rename a private method keyword argument (which was named + ``async``) so that we're compatible with the upcoming Python 3.7 release + (where ``async`` is a new keyword.) Thanks to ``@vEpiphyte`` for the report. * :support:`- backported` Include LICENSE file in wheel archives. * :release:`2.0.7 <2017-09-18>` * :release:`1.18.4 <2017-09-18>` -- cgit v1.2.3