Joe Testa
73b669b49d
Fixed parsing of ecdsa-sha2-nistp* CA signatures on host keys. Additionally, they are now flagged as potentially back-doored, just as standard host keys are. ( #239 )
2024-02-16 21:58:51 -05:00
Joe Testa
639f11a5e5
Results from concurrent scans against multiple hosts are no longer improperly combined ( #190 ).
2023-06-19 14:13:32 -04:00
Joe Testa
929652c9b7
Simplified host key test logic.
2023-04-29 11:59:50 -04:00
thecliguy
e172932977
RSA key size comments duplicated for all RSA sig algs ( #182 )
...
* RSA key size comments duplicated for all RSA sig algs
* Save results on completion of testing a hostkey
* Revised list names because they operates against all keys now not just rsa.
* ensure all required fields added for non-rsa keys
* Correction to the saving of comments against non-rsa keys
2023-04-29 11:39:29 -04:00
Joe Testa
263267c5ad
Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) ( #120 ).
2023-04-25 09:17:32 -04:00
Joe Testa
c9dc9a9c10
Now issues a warning when 2048-bit moduli are encountered.
2023-02-06 16:27:30 -05:00
Joe Testa
aa21df29e7
Now handles exceptions during server KEX parsing more gracefully.
2021-05-24 19:50:25 -04:00
Joe Testa
8e9fe20fac
SSH_Socket's constructor now takes an OutputBuffer for verbose & debugging output.
2021-03-02 11:25:37 -05:00
thecliguy
83bd049486
Debug Logging and visibility of SSH Connection errors ( #99 )
...
* Debug Logging and visibility of SSH Connection errors
* Updated date in man page
2021-03-02 11:06:40 -05:00
Joe Testa
c483fe1861
Fixed a crash while doing host key tests.
2021-02-26 16:01:30 -05:00
Joe Testa
c49a0fb22f
Upgraded SHA-1 key signatures from warnings to failures. Added deprecation warning to ssh-rsa-cert-v00@openssh.com, ssh-rsa-cert-v01@openssh.com, x509v3-sign-rsa, and x509v3-ssh-rsa host key types.
2021-02-01 19:19:46 -05:00
Joe Testa
bbb81e24ab
Streamlined sending of KEXINIT messages.
2021-01-21 11:23:40 -05:00
Joe Testa
1ba4c7c7ca
Send KEX before reading server's KEX during host key and GEX tests; this prevents deadlock against certain server implementations.
2021-01-20 15:27:38 -05:00
Joe Testa
338ffc5adb
Fixed crash when receiving unexpected response during host key test.
2020-11-05 20:29:39 -05:00
Joe Testa
8fa3a12057
Parse public key sizes for 'rsa-sha2-256-cert-v01@openssh.com' and 'rsa-sha2-512-cert-v01@openssh.com' host key types. Include expected CA key sizes in built-in policies.
2020-10-19 17:42:12 -04:00
Joe Testa
1a5c0e7fad
Split ssh_audit.py into separate files ( #47 ).
2020-10-15 14:34:23 -04:00
