Overview
Examples
Screenshots
Comparisons
Applications
Download
Documentation
Tutorials
Bazaar
Status & Roadmap
FAQ
Authors & License
Forums
Funding Ultimate++
Search on this site
Search in forums












SourceForge.net Logo
Home » Community » U++ community news and announcements » SSH package is upgraded to libssh2 v1.9.0
SSH package is upgraded to libssh2 v1.9.0 [message #55507] Tue, 17 November 2020 16:34
Oblivion is currently offline  Oblivion
Messages: 1092
Registered: August 2007
Senior Contributor
Hi,

libssh2, the SSH2 engine of SSH package is upgraded to v1.9
Package is tested with GCC/CLANG/MSVC19, Linux and Windows 7/10.

 o adds ECDSA keys and host key support when using OpenSSL
 o adds ED25519 key and host key support when using OpenSSL 1.1.1
 o adds OpenSSH style key file reading
 o adds AES CTR mode support when using WinCNG
 o adds PEM passphrase protected file support for Libgcrypt and WinCNG
 o adds SHA256 hostkey fingerprint
 o adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
 o adds explicit zeroing of sensitive data in memory
 o adds additional bounds checks to network buffer reads
 o adds the ability to use the server default permissions when creating sftp directories
 o adds support for building with OpenSSL no engine flag
 o adds support for building with LibreSSL
 o increased sftp packet size to 256k
 o fixed oversized packet handling in sftp
 o fixed building with OpenSSL 1.1
 o fixed a possible crash if sftp stat gets an unexpected response
 o fixed incorrect parsing of the KEX preference string value
 o fixed conditional RSA and AES-CTR support
 o fixed a small memory leak during the key exchange process
 o fixed a possible memory leak of the ssh banner string
 o fixed various small memory leaks in the backends
 o fixed possible out of bounds read when parsing public keys from the server
 o fixed possible out of bounds read when parsing invalid PEM files
 o no longer null terminates the scp remote exec command
 o now handle errors when diffie hellman key pair generation fails


Notes:

- Since I don't have a Mac, I couldn't test it on MacOS. Any feedback on that front will be appreciated.

- MSVC19 warns about implicit ssize_t/size_t -> int cast. In our specific case, this is harmless. Still I might supress or try to fix these warnings before the official U++ 2021.1 release.

Best regards,
Oblivion




[Updated on: Tue, 17 November 2020 23:58]

Report message to a moderator

Previous Topic: .lay / .usc namespace
Next Topic: FileSel improvements
Goto Forum:
  


Current Time: Fri Apr 19 02:17:33 CEST 2024

Total time taken to generate the page: 1.07973 seconds