Pavol Žáčik f13ecf9d74 knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key ...

Also document that the knownhosts check may alternatively be skipped
with GSS key exchange, since the server is already authenticated
via Kerberos MIC.

Signed-off-by: Pavol Žáčik <pzacik@redhat.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
Merge-Request: <https://gitlab.com/libssh/libssh-mirror/-/merge_requests/842>
(cherry picked from commit d9a31b0932)

2026-07-28 13:40:56 +02:00

..

benchmarks

feat: implement proxy jump using libssh

2024-07-11 14:46:13 +02:00

client

knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key

2026-07-28 13:40:56 +02:00

etc

test: Verify expand characters work as expected

2026-02-05 15:43:11 +01:00

external_override

kex: Allow MLKEM key exchanges in FIPS mode

2026-07-09 17:46:04 +02:00

fuzz

tests: Rewrite all fuzzers to LLVMFuzzerInitialize and nalloc

2025-09-25 15:03:07 +02:00

gss

feat: add gssapi server callbacks tests

2024-07-11 16:44:20 +02:00

keys

tests: Authentication with Ed25519 pkcs11 key

2026-01-15 12:22:10 +01:00

pkcs11

tests: Workaround softhsm-2.7.0 bug in hashed ECDSA

2026-02-02 19:32:16 +01:00

pkd

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

server

knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key

2026-07-28 13:40:56 +02:00

suppressions

tests(pki): add torture tests for pki_sk functions

2025-11-13 15:27:48 +05:30

unittests

CVE-2026-59843 tests: Verify zero max packet size in channel open is rejected

2026-07-28 13:40:56 +02:00

chmodtest.c

examples: Support passing port to libssh_scp to simplify testing

2025-10-10 16:20:53 +02:00

chroot_wrapper.c

tests: Temporarily build chroot_wrapper

2017-12-15 12:00:49 +01:00

CMakeLists.txt

test: Tighten testing to make sure right user and key is used with proxyjumps

2026-02-04 18:08:25 +01:00

cmdline.c

tests: allow conditionnal execution on pattern

2015-02-02 17:34:15 +01:00

ctest-default.cmake

Fix various spelling issues reported by codespell

2022-10-12 13:50:38 +02:00

fs_wrapper.c

reformat: gssapi key exchange

2026-01-05 12:24:13 +01:00

generate.py

A few test cases for benchmarks

2009-11-05 18:18:35 +01:00

ssh_ping.c

feat: add null hostkey for server

2026-01-05 12:24:13 +01:00

test_socket.c

struct socket -> struct ssh_socket_struct +typedef

2009-12-06 22:48:56 +01:00

tests_config.h.cmake

feat: Add interoperability tests for PuTTY

2026-01-05 17:28:15 +01:00

torture_cmocka.c

tests: Define LIBSSH_STATIC for torture_cmocka

2018-09-05 11:43:05 +02:00

torture_cmocka.h

torture: Add assert macros for ssh return codes

2018-06-30 14:37:04 +02:00

torture_key.c

tests(pki): add sk type keys to the testing infrastructure

2025-08-01 15:28:41 +05:30

torture_key.h

torture_key: Adds public keys in PEM format - as required by p11tool.

2019-12-20 14:40:38 +01:00

torture_pki.c

priv.h : Add compatibility code for Windows

2023-07-11 17:47:34 +02:00

torture_pki.h

tests: Move helper functions to a common file

2018-01-10 22:24:11 +01:00

torture_sk.c

feat(torture_sk): add functions to validate security key signatures and to create PKI context

2025-11-13 15:27:48 +05:30

torture_sk.h

feat(torture_sk): add functions to validate security key signatures and to create PKI context

2025-11-13 15:27:48 +05:30

torture.c

kex: Allow MLKEM key exchanges in FIPS mode

2026-07-09 17:46:04 +02:00

torture.h

sftp_aio: Test sftp aio with libssh proxyjump

2026-02-05 17:10:51 +01:00

valgrind.supp

Add more krb5-related Valgrind suppressions

2026-07-09 17:41:19 +02:00