OpenBSD CVS

CVS log for src/usr.bin/ssh/sshconnect2.c


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN
Current tag: OPENBSD_7_3


Revision 1.366.4.1 / (download) - annotate - [select for diffs], Mon Dec 18 14:57:43 2023 UTC (5 months, 2 weeks ago) by bluhm
Branch: OPENBSD_7_3
Changes since 1.366: +3 -9 lines
Diff to previous 1.366 (colored) next main 1.367 (colored)

implement "strict key exchange" in ssh and sshd

This adds a protocol extension to improve the integrity of the SSH
transport protocol, particular in and around the initial key exchange
(KEX) phase.

Full details of the extension are in the PROTOCOL file.

from djm@; with markus@

this is errata/7.3/024_ssh.patch.sig

Revision 1.366 / (download) - annotate - [select for diffs], Thu Mar 9 07:11:05 2023 UTC (14 months, 4 weeks ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE
Branch point for: OPENBSD_7_3
Changes since 1.365: +13 -10 lines
Diff to previous 1.365 (colored)

Re-split the merge of the reorder-hostkeys test.

In the kex_proposal_populate_entries change I merged the the check for
reordering hostkeys with the actual reordering, but kex_assemble_names
mutates options.hostkeyalgorithms which renders the check ineffective.
Put the check back where it was.  Spotted and tested by jsg@, ok djm@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.