aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2019-06-13tests: Fix the glob test on musl libcAndreas Schneider1-4/+4
2019-06-13session: OpenSSH is using SHA256 fingerprints nowJakub Jelen1-1/+1
2019-06-13.gitlab-ci.yml: Add FIPS testsJakub Jelen1-0/+23
2019-06-13tests/pkd: Fix OpenSSH version checkAnderson Toshiyuki Sasaki1-5/+9
2019-06-13tests/pkd: Check OpenSSH version only onceAnderson Toshiyuki Sasaki1-1/+5
2019-06-13tests/torture_server_config: Use only allowed algorithmsAnderson Toshiyuki Sasaki1-58/+63
2019-06-13tests/pkd: Add tests using certificates with SHA2 in signaturesAnderson Toshiyuki Sasaki3-1/+17
2019-06-13tests/pkd: Accept certificates with SHA2 in signaturesAnderson Toshiyuki Sasaki1-1/+1
2019-06-13tests/pkd: Use only allowed algorithms if in FIPS modeAnderson Toshiyuki Sasaki3-185/+218
2019-06-13tests/torture_pki_rsa: Avoid using SHA1 in FIPS modeAnderson Toshiyuki Sasaki1-12/+16
2019-06-13tests: Update negative test cases to use EC instead of ED keysJakub Jelen2-38/+38
2019-06-13tests: There is no 8B block cipher in FIPS ModeJakub Jelen1-6/+20
2019-06-13tests: Use more widely supported RSA key as a hostkeyJakub Jelen1-10/+10
2019-06-13tests: Avoid mixing stderr with stdoutJakub Jelen1-2/+2
2019-06-13tests: Use consistent checking for ssh return codeJakub Jelen1-2/+2
2019-06-13tests: Adjust for FIPS and simplify initializationJakub Jelen1-85/+84
2019-06-13tests/torture_pki_dsa: Skip completely if in FIPS modeAnderson Toshiyuki Sasaki1-2/+14
2019-06-13tests/torture_pki: Skip some tests if in FIPS modeAnderson Toshiyuki Sasaki1-0/+19
2019-06-13tests/torture_options: Use only allowed algorithms if in FIPS modeAnderson Toshiyuki Sasaki1-70/+170
2019-06-13tests/torture_config: Use only allowed algorithms in FIPS modeAnderson Toshiyuki Sasaki1-10/+47
2019-06-13tests/torture_bind_config: Use allowed algorithms in FIPS modeAnderson Toshiyuki Sasaki1-54/+196
2019-06-13tests/torture_hostkey: Skip some tests in FIPS modeAnderson Toshiyuki Sasaki1-0/+12
2019-06-13tests/torture_client_config: Adjust lists in FIPS modeAnderson Toshiyuki Sasaki1-5/+42
2019-06-13tests/torture_algorithms: Skip some tests in FIPS modeAnderson Toshiyuki Sasaki1-0/+120
2019-06-13tests: Use different config if in FIPS modeAnderson Toshiyuki Sasaki1-26/+76
2019-06-13tests: Use the SHA2 extension by default to avoid issues in FIPS modeJakub Jelen1-2/+2
2019-06-13kex: Only advertise allowed signature typesAnderson Toshiyuki Sasaki1-2/+20
2019-06-13server: Send only allowed algorithms in extensionAnderson Toshiyuki Sasaki1-2/+6
2019-06-13pki: Derive correct algorithm identification for certificate authentication w...Jakub Jelen1-13/+28
2019-06-13agent: Use SHA2 signatures also for RSA certificatesJakub Jelen1-1/+1
2019-06-13tests: Use ed25519 keys explicitlyJakub Jelen1-4/+35
2019-06-13tests: The DSA is not available in mbedtlsJakub Jelen1-4/+4
2019-06-13tests/client/torture_auth: Skip some tests if in FIPS modeAnderson Toshiyuki Sasaki1-2/+10
2019-06-13tests: Do not free pcap context while it is in use by the server sessionJakub Jelen1-1/+5
2019-06-13tests: Cover comparison of public keys, which was missingJakub Jelen3-13/+25
2019-06-13pki_gcrypt: Do not compare private parts when comparing public keysJakub Jelen1-2/+4
2019-06-13config: Remove bogus trailing newlines in log messagesJakub Jelen1-3/+3
2019-06-13kex: Reformat ssh_kex_get_supported_method()Jakub Jelen1-5/+6
2019-06-13kex: List also certificate types in list of allowed public key algorithmsJakub Jelen1-10/+35
2019-06-13tests: Add PKCS#8 PEM encrypted private keysAnderson Toshiyuki Sasaki1-7/+109
2019-06-13tests/torture_auth: Workaround OpenSSH agent bugAnderson Toshiyuki Sasaki1-5/+47
2019-06-12dh: Avoid segmentation fault in GEX if fallback to known moduliAnderson Toshiyuki Sasaki1-4/+12
2019-06-12bignum: Define bignum_dup(bignum orig, bignum *dest)Anderson Toshiyuki Sasaki3-0/+23
2019-06-12tests: Verify duplicate items are removed from knownhosts entries listJakub Jelen1-0/+74
2019-06-12tests: Verify duplicate items are removed from knownhosts algorithmsJakub Jelen1-0/+54
2019-06-12ssh_known_hosts_get_algorithms: Avoid returning duplicate key types from know...Jakub Jelen1-3/+20
2019-06-12ssh_known_hosts_read_entries: Avoid returning duplicate knownhowst itemsJakub Jelen1-2/+43
2019-06-12kex, pki, server, options: Filter algorithms in FIPS modeAnderson Toshiyuki Sasaki5-14/+137
2019-06-12torture_hashes: Skip the MD5 tests in FIPS modeJakub Jelen1-0/+4
2019-06-12pki_crypto: Use the new OpenSSL API to read PEM filesJakub Jelen1-100/+65