Component: ssh
292 changelog entries across 174 version(s)
Releases by channel (stacked)
- fixed multiline non-interactive command execution;
- improved session rekeying process on exchanged data size threshold;
- do not generate host key on configuration export;
- close active SSH connections before IPsec connections on shutdown;
- use correct user when "output-to-file" parameter is used;
- added "allow-none-crypto" parameter to disable "none" encryption usage (CLI only);
- added error log message when key exchange fails;
- close active SSH connections before IPsec connections on shutdown;
- fixed public key format compatibility with RFC4716;
- added "allow-none-crypto" parameter to disable "none" encryption usage (CLI only);
- close active SSH connections before IPsec connections on shutdown;
- fixed public key format compatibility with RFC4716;
- fixed public key format compatibility with RFC4716;
- added "allow-none-crypto" parameter to disable "none" encryption usage (CLI only);
- added error log message when key exchange fails;
- fixed non-interactive shell not returning all output (introduced in v6.44);
- fixed single command execution (introduced in v6.44beta9);
- disconnect all active connections when device gets rebooted or turned off;
- strengthen strong-crypto (add aes-128-ctr and disallow hmac sha1 and groups with sha1);
- strengthen strong-crypto (add aes-128-ctr and disallow hmac sha1 and groups with sha1);
- allow to use "diffie-hellman-group1-sha1" on TILE and x86 devices with "strong-crypto" disabled;
- allow to use "diffie-hellman-group1-sha1" on TILE and x86 devices with "strong-crypto" disabled;
- disconnect all active connections when router gets rebooted or turned off;
- fixed SSH service becoming unavailable;
- fixed SSH service becoming unavailable;
- generate SSH keys only on the first connect attempt instead of the first boot;
- improved key import error messages;
- remove imported public SSH keys when their owner user is removed;
- fixed SSH service becoming unavailable;
- generate SSH keys only on the first connect attempt instead of the first boot;
- improved key import error messages;
- do not use DH group1 with strong-crypto enabled;
- enforced 2048bit DH group on tile and x86 architectures;
- do not use DH group1 with strong-crypto enabled;
- enforced 2048bit DH group on tile and x86 architectures;
- do not execute command if it starts with "-" symbol;
- do not execute command if it starts with "-" symbol;