Skip to content

Dev minor #159

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rapier1 merged 76 commits into from
Sep 15, 2026
Merged

Dev minor #159

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
76 commits
Select commit Hold shift + click to select a range
c147093
upstream: fix GSSAPI option names, that I somehow screwed up while
djmdjm Jul 7, 2026
c10e049
upstream: unused variables
djmdjm Jul 7, 2026
b9e2a1f
add some parentheses to clarify a && || condition
djmdjm Jul 8, 2026
8e65f99
remove README.tun
djmdjm Jul 8, 2026
4079e45
upstream: Restructure the SSHFP test in preparation for adding
daztucker Jul 11, 2026
9a48bf2
upstream: Add SSHFP tests for ed25519 key type.
daztucker Jul 12, 2026
932212d
upstream: check sshd_config output case insensitively
djmdjm Jul 12, 2026
cadefc7
upstream: Add tests for ecdsa 256, 384 and 521 keys in DNS
daztucker Jul 12, 2026
1bf5871
upstream: prefer fstat to stat when it's trivial to do so
djmdjm Jul 7, 2026
2a13186
upstream: enable the ssh-mldsa44-ed25519@openssh.com signature
djmdjm Jul 9, 2026
e3bdc26
upstream: delete list of ssh_config(5) options under
djmdjm Jul 9, 2026
addd12a
upstream: setproctitle(3) to identify sshd-session when its
djmdjm Jul 9, 2026
df67bca
upstream: when signing hostkey proofs for a client UpdateHostKeys
djmdjm Jul 9, 2026
0e546c6
upstream: document mldsa44-ed25519 host key and public key
Jul 10, 2026
1ae9eeb
upstream: read ~/.ssh/id_mldsa44_ed25519 private key files by
Jul 11, 2026
f6acdce
upstream: in sshd config dump mode, write all directives in mixed
Jul 11, 2026
d322f2c
upstream: make authorized_keys "restrict" keyword apply correctly
djmdjm Jul 14, 2026
76357c4
upstream: use crypto_api.h #define constants for lengths; no
djmdjm Jul 14, 2026
bf268c8
upstream: move to a better place
djmdjm Jul 16, 2026
752b4e3
upstream: s/= - 1/= -1/; from serity---
djmdjm Jul 21, 2026
caa6d7d
upstream: fix ChannelTimeout and RekeyLimit not being applied in
djmdjm Jul 21, 2026
3f44bec
upstream: Use -Ohashalg to restrict output to specfic hash instead
daztucker Jul 16, 2026
dd4556d
upstream: verify that RekeyLimit in a Match block is effective
djmdjm Jul 21, 2026
fed6e6f
upstream: verify that ChannelTimeout in a Match block is effective
djmdjm Jul 21, 2026
d341109
Wording.
daztucker Jul 14, 2026
b6080d8
Add obsd79 target.
daztucker Jul 14, 2026
9e35b38
Sync missed case-insensitivity changes.
daztucker Jul 21, 2026
5e44a8c
upstream: Factor out all of the IPv6 addresses into variables.
daztucker Jul 21, 2026
7e446d3
upstream: Automatically detect IPv6 support
daztucker Jul 22, 2026
1b23e24
upstream: use sshpkt_fatal instead of plain fatal() for errors in
djmdjm Jul 23, 2026
786cb6a
upstream: ssh: implement mlkem768nistp256-sha256; ok djm@
mfriedl Jul 27, 2026
ddbcd8f
upstream: ssh: implement mlkem768brainpoolp256r1-sha256; ok djm@
mfriedl Jul 27, 2026
05000bc
upstream: Fix double frees (impossible to reach outside of a test
Jul 30, 2026
52154c2
upstream: Move check of public key type against allowed algorithms
djmdjm Jul 30, 2026
4b5860e
upstream: pass back errors from ed25519 key generation, which
djmdjm Jul 30, 2026
5279480
upstream: Make mlkem768ecdh build with OPENSSL=no. ok djm@
daztucker Jul 30, 2026
128a4a5
upstream: ssh: update kex unit test
mfriedl Jul 28, 2026
18f5f35
upstream: Fix $OpenBSD marker for easier syncing.
daztucker Jul 30, 2026
d8140f0
upstream: Use ssh_mldsa44_ed25519_cleanup consistently to avoid
brynet Jul 30, 2026
15d1832
Add includes.h for compat interfaces.
daztucker Jul 30, 2026
e416edf
Remove support for libcrypto w/out ECC.
daztucker Jul 31, 2026
ec04856
Require NISTP521 in libcrypto.
daztucker Aug 1, 2026
2aee73e
upstream: fix ML-KEM/ECDH interop problem (does not affect
djmdjm Aug 3, 2026
29f1b46
upstream: Add a "ssh -Z user@host" mode that dumps the pubkeys that
djmdjm Aug 3, 2026
6fe6ab7
upstream: Tweak ordering of certificates tried during pubkey
djmdjm Aug 3, 2026
129f5ac
upstream: regression test for pubkey ordering in the client; ok
djmdjm Aug 3, 2026
e47a744
upstream: crank up MaxAuthTries to avoid failures here
djmdjm Aug 3, 2026
e766b76
Make EC_KEY_METHOD_new optional again.
daztucker Aug 3, 2026
7d6170c
Fix OpenSSL ECC detection message.
daztucker Aug 3, 2026
b5ad8c3
Correct filename in comment.
daztucker Aug 3, 2026
265336a
Don't enable Brainpool on AWS-LC or BoringSSL.
daztucker Aug 3, 2026
d5dc500
upstream: Fix expected output for implicit ordering test. ok djm@
daztucker Aug 3, 2026
b8b12ca
upstream: disable pubkey-priority test until I can fix it to not pick
djmdjm Aug 4, 2026
b1000ab
Run tests on regress Makefile changes too.
daztucker Aug 4, 2026
5adaaa7
Rerun VM tests on regress Makefile change too
daztucker Aug 4, 2026
4c414d9
Re-allow PAMServiceName inside a Match block.
daztucker Aug 6, 2026
e6ece1b
upstream: document existence of
Aug 4, 2026
3883901
upstream: fix up synopsis and tweak wording for -Z
Aug 4, 2026
9910d5e
upstream: avoid potential realloc use-after-free in the client if a
djmdjm Aug 7, 2026
6a57081
upstream: Allow session-bind@openssh.com requests when the agent is
djmdjm Aug 7, 2026
72ed524
upstream: add some options to allow setting or clearing the
djmdjm Aug 7, 2026
08d9155
upstream: move comment to a better place; suggested by markus@
djmdjm Aug 8, 2026
05ec77c
upstream: remove mlkem768brainpoolp256r1-sha256; requested by
djmdjm Aug 8, 2026
64ede79
Use clang-20 when building hardenedmalloc for tests.
daztucker Aug 8, 2026
407a2b7
upstream: make reading server banner non-blocking; prevents one
djmdjm Aug 10, 2026
d535299
upstream: remove ml-dsa/x25519 from the default algorithm list for
djmdjm Aug 10, 2026
7e5b75a
upstream: openssh-10.5
djmdjm Aug 10, 2026
bd714fa
upstream: add regress test for servers that hang durig banner write;
djmdjm Aug 10, 2026
772a5b7
update version
djmdjm Aug 11, 2026
77337b8
depend
djmdjm Aug 11, 2026
b3f7344
autogenerated files for release
djmdjm Aug 11, 2026
ba45235
First pass at porting 10.5P1
rapier1 Sep 9, 2026
42f77a1
regress/integrity.sh crank the offset to 3000.
rapier1 Sep 11, 2026
8a0bdcf
regress/integrity.sh. 3000 was still triggering issues on Ubuntu. Upp…
rapier1 Sep 11, 2026
fa3770f
In fips_enabled() in misc.c I was failing to close the file handle
rapier1 Sep 14, 2026
ed9d42d
Crank version to 18.11.0
rapier1 Sep 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions .depend
View file
Open in desktop

Large diffs are not rendered by default.

4 changes: 0 additions & 4 deletions .github/setup_ci.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -156,10 +156,6 @@ for TARGET in $TARGETS; do
tcmalloc)
PACKAGES="$PACKAGES libgoogle-perftools-dev"
;;
openssl-noec)
INSTALL_OPENSSL=OpenSSL_1_1_1k
SSLCONFOPTS="no-ec"
;;
openssl-*)
INSTALL_OPENSSL=$(echo ${TARGET} | cut -f2 -d-)
case ${INSTALL_OPENSSL} in
Expand Down
1 change: 0 additions & 1 deletion .github/workflows/c-cpp.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -107,7 +107,6 @@ jobs:
- { target: ubuntu-latest, config: libressl-4.2.0 }
- { target: ubuntu-latest, config: libressl-4.3.2 }
- { target: ubuntu-latest, config: openssl-master }
- { target: ubuntu-latest, config: openssl-noec }
- { target: ubuntu-latest, config: openssl-1.1.1 }
- { target: ubuntu-latest, config: openssl-1.1.1t }
- { target: ubuntu-latest, config: openssl-1.1.1w }
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/selfhosted.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ name: CI self-hosted

on:
push:
paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac', '.github/configs', '.github/run_tests.sh', '.github/workflows/selfhosted.yml' ]
paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac','regress/Makefile', '.github/configs', '.github/run_tests.sh', '.github/workflows/selfhosted.yml' ]

jobs:
selfhosted:
Expand Down Expand Up @@ -52,6 +52,7 @@ jobs:
- obsd76
- obsd77
- obsd78
- obsd79
- obsdsnap
- obsdsnap-i386
- omnios
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/vm.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,9 +7,9 @@
name: CI VM
on:
push:
paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac', '.github/configs', '.github/workflows/vm.yml' ]
paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac', 'regress/Makefile', '.github/configs', '.github/workflows/vm.yml' ]
pull_request:
paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac', '.github/configs', '.github/workflows/vm.yml' ]
paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac', 'regress/Makefile', '.github/configs', '.github/workflows/vm.yml' ]

jobs:
dragonflybsd:
Expand Down
2 changes: 1 addition & 1 deletion .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,4 +56,4 @@ hpnsshd-auth
!regress/misc/**/Makefile
!regress/unittests/**/Makefile
tags
*.0
*.0
Loading
Loading