mirrors/jgit - jgit - source @ dussan.org

Verlauf

Thomas Wolf fd3edc7bfc sshd: try all configured signature algorithms for a key For RSA keys, there may be several configured signature algorithms: rsa-sha2-512, rsa-sha2-256, and ssh-rsa. Upstream sshd has bug SSHD-1105 [1] and always and unconditionally uses only the first configured algorithm. With the default order, this means that it cannot connect to a server that knows only ssh-rsa, like for instance Apache MINA sshd servers older than 2.6.0. This affects for instance bitbucket.org or also AWS Code Commit. Re-introduce our own pubkey authenticator that fixes this. Note that a server may impose a penalty (back-off delay) for subsequent authentication attempts with signature algorithms unknown to the server. In such cases, users can re-order the signature algorithm list via the PubkeyAcceptedAlgorithms (formerly PubkeyAcceptedKeyTypes) ssh config. [1] https://issues.apache.org/jira/browse/SSHD-1105 Bug: 572056 Change-Id: I7fb9c759ab6532e5f3b6524e9084085ddb2f30d6 Signed-off-by: Thomas Wolf <thomas.wolf@paranor.ch>		vor 3 Jahren
..
auth	Update EDL 1.0 license headers to new short SPDX compliant format	vor 4 Jahren
proxy	Migrate to Apache MINA sshd 2.6.0 and Orbit I20210203173513	vor 3 Jahren
AuthenticationCanceledException.java	sshd: better error report when user cancels authentication	vor 3 Jahren
CachingKeyPairProvider.java	Log stack trace if CachingKeyPairProvider hits unexpected exception	vor 4 Jahren
GssApiMechanisms.java	Update EDL 1.0 license headers to new short SPDX compliant format	vor 4 Jahren
GssApiWithMicAuthFactory.java	Update to org.apache.sshd 2.4.0	vor 4 Jahren
GssApiWithMicAuthentication.java	Update EDL 1.0 license headers to new short SPDX compliant format	vor 4 Jahren
JGitClientSession.java	sshd: implement ssh config PubkeyAcceptedAlgorithms	vor 3 Jahren
JGitHostConfigEntry.java	Update EDL 1.0 license headers to new short SPDX compliant format	vor 4 Jahren
JGitPasswordAuthFactory.java	Update to org.apache.sshd 2.4.0	vor 4 Jahren
JGitPasswordAuthentication.java	Migrate to Apache MINA sshd 2.6.0 and Orbit I20210203173513	vor 3 Jahren
JGitPublicKeyAuthFactory.java	sshd: try all configured signature algorithms for a key	vor 3 Jahren
JGitPublicKeyAuthentication.java	sshd: try all configured signature algorithms for a key	vor 3 Jahren
JGitServerKeyVerifier.java	Update EDL 1.0 license headers to new short SPDX compliant format	vor 4 Jahren
JGitSshClient.java	sshd: implement ssh config PubkeyAcceptedAlgorithms	vor 3 Jahren
JGitSshConfig.java	Migrate to Apache MINA sshd 2.6.0 and Orbit I20210203173513	vor 3 Jahren
JGitUserInteraction.java	Update EDL 1.0 license headers to new short SPDX compliant format	vor 4 Jahren
KnownHostEntryReader.java	Update EDL 1.0 license headers to new short SPDX compliant format	vor 4 Jahren
OpenSshServerKeyDatabase.java	[spotbugs] Fix potential NPE in OpenSshServerKeyDatabase	vor 3 Jahren
PasswordProviderWrapper.java	Migrate to Apache MINA sshd 2.6.0 and Orbit I20210203173513	vor 3 Jahren
ServerKeyLookup.java	Update EDL 1.0 license headers to new short SPDX compliant format	vor 4 Jahren
SshdText.java	sshd: implement ssh config PubkeyAcceptedAlgorithms	vor 3 Jahren