Component: ssh
139 changelog entries across 73 version(s)
Releases by channel (stacked)
- return proper error code from executed command;
- fixed returned output saving to file when "output-to-file" parameter is used;
- skip interactive authentication when not running in interactive mode;
- improved SSH service stability when receiving bogus packets;
- added support for RSA keys with SHA256 hash (RFC8332);
- fixed SHA256 user authentication algorithm checking (introduced in v6.46.4);
- added support for RSA keys with SHA256 hash (RFC8332);
- fixed output printing when "command" parameter used;
- fixed output printing when "command" parameter used;
- accept remote forwarding requests with empty hostnames;
- fixed carriage return presence in subsequent sessions;
- improved remote forwarding handling (introduced in v6.44.3);
- fixed carriage return presence in subsequent sessions;
- fixed non-interactive multiple command execution;
- accept remote forwarding requests with empty hostnames;
- added new "ssh-exec" command for non-interactive command execution;
- fixed non-interactive multiple command execution;
- improved remote forwarding handling (introduced in v6.44.3);
- improved session rekeying process on exchanged data size threshold;
- keep host keys when resetting configuration with "keep-users=yes";
- use correct user when "output-to-file" parameter is used;
- do not generate host key on configuration export;
- added "both", "local" and "remote" options for "forwarding-enabled" parameter;
- do not generate host key on configuration export;
- fixed multiline non-interactive command execution;
- close active SSH connections before IPsec connections on shutdown;
- added "allow-none-crypto" parameter to disable "none" encryption usage (CLI only);
- added error log message when key exchange fails;
- close active SSH connections before IPsec connections on shutdown;
- fixed public key format compatibility with RFC4716;
- disconnect all active connections when device gets rebooted or turned off;
- strengthen strong-crypto (add aes-128-ctr and disallow hmac sha1 and groups with sha1);
- allow to use "diffie-hellman-group1-sha1" on TILE and x86 devices with "strong-crypto" disabled;
- fixed SSH service becoming unavailable;
- fixed SSH service becoming unavailable;
- generate SSH keys only on the first connect attempt instead of the first boot;
- improved key import error messages;
- remove imported public SSH keys when their owner user is removed;
- do not use DH group1 with strong-crypto enabled;
- enforced 2048bit DH group on tile and x86 architectures;
- do not execute command if it starts with "-" symbol;
- do not execute command if it starts with "-" symbol;
- fixed high memory consumption when transferring file over ssh tunnel;