golang.org/x/crypto/ssh

New Issue

MaxAuthTries error log overwrite PasswordCallback errorNeedsFix

#69191 opened 2 months ago by Vr00mm

calling http.Hijack over forwarded SSH connection blocks forever

#68621 opened 3 months ago by jeffwilliams

ssh/server_test.go uses "slices", introduced in go 1.21, but go 1.20 supportedNeedsFix

#68469 opened 4 months ago by imirkin

allow unpadded signaturesNeedsFix

#68286 opened 4 months ago by imirkin

wrapping ssh.KeyboardInteractive() into ssh.RetryableAuthMethod() fails to handle early auth errors with Windows OpenSSH serverNeedsFixOS-Windows

#67855 opened 5 months ago by samiponkanen

new API to allow user to get channel close eventProposalProposal-CryptoWaitingForInfo

#67672 opened 5 months ago by RainyBow

Client.ListenTCP should not resolve the bind address locallyProposal

#67295 opened 6 months ago by abakum

client auth loop calls PasswordCallback after receiving disconnect msg from serverNeedsDecision

#66991 opened 7 months ago by samiponkanenssh

SSH Client fails handshake when using publickey methodNeedsInvestigation

#66438 opened 8 months ago by 0x7f

dynamic auth method selection in ServerConfigProposalProposal-Crypto

#64974 opened 10 months ago by awly

add BannerErrorFixPendingProposalProposal-AcceptedProposal-Crypto

#64962 opened 10 months ago by awly

SSH_MSG_USERAUTH_PK_OK handling differs from OpenSSHNeedsInvestigation

#64785 opened 11 months ago by stephenm-stripe

implement strict KEX protocol changesSecurity

#64784 opened 11 months ago by rolandshoemaker

implement CryptoPublicKey on sk keysProposalProposal-AcceptedProposal-Crypto

#62518 opened 1 year ago by maraino

investigate support for ping@openssh.com protocol extensionFrozenDueToAgeNeedsFix

#62390 opened 1 year ago by drakkan

doesn't always return x509.IncorrectPasswordError when it shouldFrozenDueToAgeNeedsInvestigation

#62265 opened 1 year ago by sqweek

server side multi-step authenticationProposalProposal-AcceptedProposal-Crypto

#61447 opened 1 year ago by drakkan

diffie-hellman-group16/18-sha512FrozenDueToAgeNeedsInvestigation

#61381 opened 1 year ago by drakkan

error from ssh.HostKeyCallback is not wrapped during handshakeNeedsFix

#61309 opened 1 year ago by paxan

allow to configure public key authentication algorithms on the server sideFrozenDueToAgeProposalProposal-AcceptedProposal-Crypto

#61244 opened 1 year ago by drakkan

MAC ordersFrozenDueToAgeNeedsFixPerformance

#61138 opened 1 year ago by drakkan

various tests fail on LUCI longtest buildersFrozenDueToAgeNeedsFix

#60981 opened 1 year ago by heschi

unable to authenticate if the first private key fails.FrozenDueToAge

#60587 opened 1 year ago by lonnywong

"ssh-rsa-cert-v01@openssh.com" does not work for sshd OpenSSH 7.2-7.7NeedsFix

#58371 opened 2 years ago by masp

should avoid window adjustment on every Channel.ReadNeedsFixPerformance

#57424 opened 2 years ago by willmo

TestHandshakeRekeyDefault failuresFrozenDueToAgeNeedsInvestigation

#56981 opened 2 years ago by gopherbot

data race in TestHandshakeRekeyDefaultFrozenDueToAgeNeedsInvestigation

#56957 opened 2 years ago by gopherbot

EOF on password expired FrozenDueToAge

#55011 opened 2 years ago by fdefilippo

invalid packet length, packet too largeFrozenDueToAge

#54719 opened 2 years ago by marklaptenok

can't establish ssh connection using signed keyNeedsInvestigation

#54027 opened 2 years ago by kt97679

Consider relaxing public key and signature matching for RSA keys in SSH_MSG_USERAUTH_REQUESTFrozenDueToAgeNeedsFix

#53391 opened 2 years ago by stanhu

SignWithAlgorithm for agentKeyringSigner fails for keys carrying cert algorithm nameFrozenDueToAge

#52930 opened 2 years ago by jgold-stripe

agent-based ecdsa certs no longer workFrozenDueToAgeNeedsFix

#52185 opened 2 years ago by jeffreytolar

add MultiAlgorithmSignerFrozenDueToAgeProposalProposal-AcceptedProposal-Crypto

#52132 opened 2 years ago by drakkan

add ServerConfig.NoClientAuthCallbackFrozenDueToAgeProposalProposal-AcceptedProposal-FinalCommentPeriod

#51994 opened 2 years ago by bradfitz

Client chokes after first key exchange against OpenSSH 7.4p1 serverFrozenDueToAge

#51808 opened 2 years ago by peterverraedt

Unmarshal for SSH_AGENTC_EXTENSIONFrozenDueToAgeNeedsInvestigation

#51689 opened 2 years ago by lpcalisi

chacha20-poly1305@openssh.com without common MAC algorithm.FrozenDueToAgeNeedsInvestigation

#51406 opened 2 years ago by Daedaluz

TestClientAuthMaxAuthTries failures with WSAECONNABORTEDFrozenDueToAgeNeedsDecisionrelease-blocker

#51149 opened 2 years ago by bcmills

TestClientAuthMaxAuthTriesPublicKey failures with WSAECONNABORTEDFrozenDueToAgeNeedsInvestigationOS-Windowsrelease-blocker

#50805 opened 2 years ago by bcmills

Why does the timeout parameter only work on tcp establishment?FrozenDueToAge

#50046 opened 2 years ago by xue8

empty plaintext packet causes panicFrozenDueToAgeSecurity

#49932 opened 3 years ago by rolandshoemaker

Host key to be verified should be choosen based on knownhosts entriesFrozenDueToAge

#49631 opened 3 years ago by cardil

support for server-sig-algs extension (RFC8308)FrozenDueToAgeNeedsFix

#49269 opened 3 years ago by aphistic

OpenSSH 8.8 disabled RSA signatures using the SHA-1 hash algorithmFrozenDueToAge

#48758 opened 3 years ago by fasmide

curve25519-sha256@libssh.org is now curve25519-sha256FrozenDueToAgeNeedsFix

#48756 opened 3 years ago by pasupuletisrinath

goroutine leakFrozenDueToAge

#47541 opened 3 years ago by mei-rune

possible ssh-ed25519 parse bugFrozenDueToAgeNeedsInvestigation

#47192 opened 3 years ago by hongnod

server does not accept rsa-sha2-256 and rsa-sha2-512 signaturesFrozenDueToAgeNeedsInvestigation

#46569 opened 3 years ago by samiponkanen

Dial function with ClientConfig Timeout got stuckFrozenDueToAgeWaitingForInfo

#46536 opened 3 years ago by lindmin

expose supported Kex algorithmsFrozenDueToAgeProposalProposal-Crypto

#46232 opened 3 years ago by jannfis

unexpected empty user field for client connFrozenDueToAgeNeedsFix

#45249 opened 3 years ago by povsister

unable to parse certificatesFrozenDueToAgeNeedsInvestigation

#45010 opened 3 years ago by c00w

stuck in Wait on more than one commandFrozenDueToAgeWaitingForInfo

#44060 opened 3 years ago by Dhvani248

session.Output() run a time-cost command hangs without returningFrozenDueToAgeWaitingForInfo

#42090 opened 4 years ago by danny-wang

Corrupting a byte of a clients private key results in panic, rather than authorization failureFrozenDueToAge

#42014 opened 4 years ago by elansys-kc

*Client Dial() example does not call Close()FrozenDueToAge

#41906 opened 4 years ago by kevinburke1

KeyboardInteractiveChallenge error message is incorrectFrozenDueToAgeNeedsInvestigation

#41823 opened 4 years ago by packrat386

add ssh.ParseHostKeyFrozenDueToAgeProposalProposal-Crypto

#41709 opened 4 years ago by elansys-kc

Use session.Shell() and session.Wait() How to get user input command at Interactive Shell FrozenDueToAge

#41393 opened 4 years ago by shencan

DH SHA256 is extremely slow due to primality check FrozenDueToAgeNeedsFixPerformance

#41151 opened 4 years ago by dacohen

unsupported DSA key size 2048 FrozenDueToAgeNeedsInvestigation

#40691 opened 4 years ago by YohanArnoux

publicKeyCallback cannot handshake using ssh-rsa keys signed using the ssh-rsa-sha2-256 algorithmFrozenDueToAgeNeedsInvestigation

#39885 opened 4 years ago by SwampDragons

nil pointer dereference in transport.goFrozenDueToAgeNeedsFix

#39397 opened 4 years ago by ghost

performance improvementNeedsInvestigationPerformance

#39117 opened 4 years ago by drakkan

mux.onePacket shouldn't err if it receives a message to a closed channelFrozenDueToAgeNeedsInvestigation

#38908 opened 4 years ago by erickt

TestValidTerminalMode fails with some shellsFrozenDueToAgeNeedsFixSecurityTestingrelease-blocker

#38037 opened 4 years ago by RKinsey

AES256-CBC isn't supported for passphrase-protected OpenSSH keysFrozenDueToAgeNeedsFix

#37939 opened 4 years ago by RKinsey

data race in diffie-hellman-group-exchange-sha256FrozenDueToAgeNeedsFixSoon

#37607 opened 4 years ago by KarthikNath

support RSA SHA-2 host key signaturesFrozenDueToAgeNeedsFixProposal-AcceptedProposal-Crypto

#37278 opened 4 years ago by hansnielsen

add methods to marshal private keys to the OpenSSH formatFrozenDueToAgeNeedsFixProposal-AcceptedProposal-Crypto

#37132 opened 4 years ago by maraino

support OpenSSH encoded ECDSA keys in ParsePrivateKeyFrozenDueToAgeNeedsFixhelp wanted

#36722 opened 4 years ago by Fransebas

cannot sign certificate with different algorithmFrozenDueToAgeNeedsInvestigation

#36261 opened 4 years ago by stoggi

timeout needed when requesting session with PTYFrozenDueToAgeNeedsInvestigation

#36227 opened 4 years ago by johnsiilver

improve error message on missing AuthMethodFrozenDueToAge

#33210 opened 5 years ago by philippgille

occasional handshake failures FrozenDueToAge

#32705 opened 5 years ago by songtianyi

failed to connect using keyboard interactive auth methodFrozenDueToAgeNeedsInvestigation

#32108 opened 5 years ago by anannaya

performance issues after #24942 was fixedFrozenDueToAge

#32034 opened 5 years ago by davidrenne

implement ControlMaster transport supportFrozenDueToAgeProposalProposal-Crypto

#31874 opened 5 years ago by y3llowcake

Support sha-2 family hash algorithms for key exchange (RFC 8268)FeatureRequestFrozenDueToAgeNeedsInvestigation

#31731 opened 5 years ago by breml

session remains open if Close is called without sending dataFrozenDueToAgeNeedsInvestigation

#31401 opened 5 years ago by ciys

Client does not wait long enough for reply from server and sends EOFFrozenDueToAge

#29954 opened 5 years ago by sbezverk

Race Conditions on Channel EOF, Closing and Request ProcessingFrozenDueToAgeNeedsInvestigation

#29733 opened 5 years ago by paulquerna-okta

leaks connections?FrozenDueToAge

#28613 opened 6 years ago by FabianGa

Session.Run returns error EOFFrozenDueToAgeWaitingForInfo

#28108 opened 6 years ago by QijingLi

possible missing stdout?FrozenDueToAgeNeedsInvestigationWaitingForInfo

#27014 opened 6 years ago by snoowman

Support GSSAPI AuthMethodFeatureRequestFrozenDueToAge

#25899 opened 6 years ago by quentinmit

revive tests, run by default on trybotsBuildersFrozenDueToAgeTestinghelp wanted

#25386 opened 6 years ago by bradfitz

got error "ssh: short read" on older cipherFrozenDueToAgeNeedsInvestigation

#24859 opened 6 years ago by Greyh4t

TestMuxReadWrite flakeFrozenDueToAgeNeedsFixTestinghelp wanted

#24612 opened 6 years ago by bradfitz

no common algorithm for host key, server offered: [x509v3-sign-rsa x509v3-ssh-rsa]FrozenDueToAgeWaitingForInfo

#24266 opened 6 years ago by lpzgithub

update kex & mac defaults FrozenDueToAge

#24224 opened 6 years ago by wjwoodson

Connections using "chacha20-poly1305@openssh.com" fail with "ssh: MAC failure"FrozenDueToAge

#23510 opened 6 years ago by mark-adams

Client Auth: handle partial success correctly when processing userAuthFailure responsesFrozenDueToAge

#23461 opened 6 years ago by samiponkanen

add SOCKS5 support for ssh clientFrozenDueToAgeWaitingForInfo

#23379 opened 6 years ago by vitreuz

typo in error message in ssh/certs.goFrozenDueToAge

#23266 opened 7 years ago by parsiya

Fix Protocol Version Exchange (for multi-line)FrozenDueToAgeNeedsDecision

#23194 opened 7 years ago by jgracenin

proposal to remove weak (rc4 based) ciphers arcfour{128,256} from default cipher listFrozenDueToAge

#23173 opened 7 years ago by psanford

ssh failed to connect: ssh: handshake failed: agent: failed to list keysFrozenDueToAgeWaitingForInfo

#23119 opened 7 years ago by vitesse-ftian

can not open session to huawei CE5810 switch (got error "ssh: short read")FrozenDueToAgeNeedsInvestigation

#23058 opened 7 years ago by duhaifeng

Is there a way to show detail msg for failed ssh command excu?FrozenDueToAge

#23023 opened 7 years ago by DeathPoem

add package for Key Revocation ListsFrozenDueToAgeProposalProposal-CryptoProposal-FinalCommentPeriod

#22741 opened 7 years ago by micahhausler

when ssh to network switch can not open secondary sessionFrozenDueToAge

#22465 opened 7 years ago by duhaifeng

how do you parse the modelist of a ptyRequestMsg?FrozenDueToAge

#21781 opened 7 years ago by nhooyr

session.Close() should unblock session.Wait()FrozenDueToAge

#21699 opened 7 years ago by nhooyr

allow returning arbitrary data from the server authorization callbacksFrozenDueToAge

#21689 opened 7 years ago by nhooyr

no simple way to implement efficient keep alivesFrozenDueToAge

#21478 opened 7 years ago by nhooyr

ssh.Channel should provide idle timeoutsFrozenDueToAge

#21420 opened 7 years ago by glycerine

docs for SignCert omit mention of nonceDocumentationFrozenDueToAge

#21384 opened 7 years ago by cryslith

inaccurate doc on ServerConfig.PublicKeyCallback methodFrozenDueToAge

#21325 opened 7 years ago by artyom

panic: handshake failed: ssh: host key mismatchFrozenDueToAge

#21166 opened 7 years ago by dgrr

must specify HostKeyCallbackFrozenDueToAge

#20968 opened 7 years ago by ag

ParsePrivateKeyWithPassphrase returns an opaque error in case of wrong passphraseFrozenDueToAge

#20781 opened 7 years ago by mattn

Possible to pass nil publicKeyCallback signerFrozenDueToAge

#20441 opened 7 years ago by krisnova

provide Client.DialContext methodProposalProposal-Accepted

#20288 opened 7 years ago by ydnar

CertChecker incorrectly includes port number in hostname as part of checked principalFrozenDueToAge

#20273 opened 7 years ago by aeijdenberg

handshake failed: ssh: no common algorithm for client to server cipher; client offered: [aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com arcfour256 arcfour128], server offered: [aes256-cbc 3des-cbc aes128-cbc]FrozenDueToAge

#20201 opened 7 years ago by CameronGo

Failed to open ssh connection to the server: ssh: must specify HostKeyCallbackFrozenDueToAge

#20200 opened 7 years ago by CameronGo

interaction between PublicKeyCallback and public key acceptability queries is not obviousFrozenDueToAge

#20094 opened 7 years ago by willmo

add hash support for known_hostsFeatureRequestFrozenDueToAge

#20034 opened 7 years ago by jdoklovic

TestHostKeyCert fails with: netPipe: dial tcp [::]:54283: connectex: The requested address is not valid in its context.FrozenDueToAge

#19996 opened 7 years ago by alexbrainman

OpenSSH hanging on loading shell prompt on 7.3p1+FrozenDueToAge

#19788 opened 7 years ago by caod123

make ClientConfig HostKeyCallback non-permissive by defaultFrozenDueToAgeSecurity

#19767 opened 7 years ago by rsc

unexpected message type 3 (expected 0)FrozenDueToAge

#19639 opened 7 years ago by pquerna

expose channel IDsFrozenDueToAge

#19568 opened 7 years ago by jaksi

Support setting a banner for a server that shows before authenticationFrozenDueToAge

#19567 opened 7 years ago by jaksi

DSA code sometimes generates 32 byte signatures, leading to crash.FrozenDueToAge

#19424 opened 7 years ago by vdice

server gcmCipher appears to do erroneous check for padding sizeFrozenDueToAge

#18953 opened 7 years ago by twitchyliquid64

failed to interact with Windows Powershell OpenSSH serverFrozenDueToAge

#18901 opened 7 years ago by olegdunkan

ssh: handshake failed: ssh: unexpected message type 3 (expected one of [6])FrozenDueToAge

#18861 opened 7 years ago by lucaswxp

msgNewKeys interpreted too soonFrozenDueToAge

#18850 opened 7 years ago by hanwen

Add tools for parsing a user's .ssh/config fileFrozenDueToAge

#18781 opened 7 years ago by kevinburke

bad kexinit during handshakeFrozenDueToAge

#18711 opened 7 years ago by vito

support encrypted private keysFrozenDueToAgeNeedsFix

#18692 opened 7 years ago by pquerna

deadlock during key renegotiationFrozenDueToAge

#18439 opened 8 years ago by vito

add support for multi-step authenticationNeedsFix

#17889 opened 8 years ago by thinxer

support additional MACsFrozenDueToAgeNeedsFix

#17676 opened 8 years ago by rickard-von-essen

support Diffie-Hellman Group Exchange from RFC 4419FrozenDueToAgeNeedsFixProposalProposal-AcceptedProposal-Crypto

#17230 opened 8 years ago by nerdatmath

guessed kex handled improperlyFrozenDueToAge

#16962 opened 8 years ago by belak

ssh_message_ignore (message type 2) causing an error on Dial()FrozenDueToAge

#16927 opened 8 years ago by darethas

Signal method doesn't workFrozenDueToAge

#16597 opened 8 years ago by purpleidea

Doesn't support AES-CBCFrozenDueToAge

#16327 opened 8 years ago by beauhoyt

goroutine leak when ssh.Channel connection is closed earlyFrozenDueToAge

#16287 opened 8 years ago by belak

Session.Run() returns error EOFFrozenDueToAge

#16194 opened 8 years ago by Farioko

ed25519 support for the agentFrozenDueToAge

#16096 opened 8 years ago by corny

allow retrying AuthMethodsFrozenDueToAgeNeedsInvestigation

#16077 opened 8 years ago by jbeverly

ability to get underlying crypto.PublicKey from ssh.PublicKeyFrozenDueToAge

#15989 opened 8 years ago by mjgarton

ssh.Dial can hang indefinitelyFrozenDueToAge

#15113 opened 8 years ago by a-robinson

ssh: handshake failed: ssh: unexpected message type 21 (expected 6)FrozenDueToAge

#15066 opened 8 years ago by jfmyers9

add DialTimeoutFrozenDueToAge

#14941 opened 8 years ago by corny

TCP Forwarding Twice Hangs Second ConnectionFrozenDueToAge

#14598 opened 8 years ago by theonewolf

Return better error message for non-zero exit codesFrozenDueToAgehelp wanted

#14251 opened 8 years ago by variadico

ParsePrivateKey fails to parse BER encoded keyFrozenDueToAge

#14145 opened 8 years ago by rickard-von-essen

Support OpenSSH protocol extension for host key rotationFrozenDueToAge

#14114 opened 8 years ago by tt

no example for server with public key authenticationDocumentationFrozenDueToAge

#13902 opened 8 years ago by mdlayher

permit use of CBC ciphers without needing to fork repoFrozenDueToAge

#13776 opened 9 years ago by egoldschmidt

'no common algorithms' FrozenDueToAge

#13698 opened 9 years ago by tobor

package does not compile with Go 1.3 or earlierFrozenDueToAge

#13137 opened 9 years ago by davecheney

'no common algorithms' against ubnt deviceFrozenDueToAge

#12982 opened 9 years ago by bradfitz

Make SetDefaults disable diffie-hellman-group1-sha1FrozenDueToAge

#12955 opened 9 years ago by jeffallen

login with incorrect credentialsFrozenDueToAge

#12901 opened 9 years ago by tobor

PublicKey FingerprintFrozenDueToAge

#12292 opened 9 years ago by dragon3

library deprecates ciphers over-eagerlyFrozenDueToAge

#12131 opened 9 years ago by wwaites

HostKeyCallback fails for servers with multiple keysFrozenDueToAge

#11722 opened 9 years ago by kankowski

Incorrect doc comment for ConnMetaData.ServerVersion()FrozenDueToAge

#11603 opened 9 years ago by cgt

Server panic on invalid inputFrozenDueToAge

#11348 opened 9 years ago by taruti

support curve25519-sha256@libssh.org and diffie-hellman-group-exchange-sha256FrozenDueToAge

#11004 opened 9 years ago by jhogg41

legacy cipher should implement padding oracle countermeasuresFrozenDueToAge

#10756 opened 9 years ago by hanwen

handshake failed: ssh: no common algorithms with MACs hmac-sha2-256,hmac-sha2-512FrozenDueToAge

#10274 opened 9 years ago by roman-yepishev

Support chacha20-poly1305@openssh.com authenticated encryption cipherFrozenDueToAge

#9489 opened 10 years ago by christophershirk

tcpip.go forward and remove compare on ip and portFrozenDueToAge

#8977 opened 10 years ago by gopherbot

doesn't support ed25519 keysFrozenDueToAge

#8581 opened 10 years ago by gopherbot

running command in session create not closed filesFrozenDueToAge

#8306 opened 10 years ago by gopherbot

ParsePrivateKey gives unintuitive error message for encrypted keysFrozenDueToAge

#6650 opened 11 years ago by rogpeppe

should ParseAuthorizedKey return PublicKey?FrozenDueToAge

#6396 opened 11 years ago by fsouza

EOF is received before all data is readFrozenDueToAge

#6250 opened 11 years ago by gopherbot

does not support ssh-agent forwardingFrozenDueToAge

#6223 opened 11 years ago by gopherbot

unexpected packetFrozenDueToAge

#6169 opened 11 years ago by gopherbot

Session.Wait() hangs while reading from msg channel after sending EOF to os.StdinFrozenDueToAge

#6088 opened 11 years ago by gopherbot

too many private membersFrozenDueToAge

#5826 opened 11 years ago by gopherbot

data race if session.Stdout and Stderr are the same writerFrozenDueToAge

#5582 opened 11 years ago by davecheney

data race on c.remoteIdFrozenDueToAge

#5137 opened 11 years ago by dvyukov