Pavol Žáčik f13ecf9d74 knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key ...

Also document that the knownhosts check may alternatively be skipped
with GSS key exchange, since the server is already authenticated
via Kerberos MIC.

Signed-off-by: Pavol Žáčik <pzacik@redhat.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
Merge-Request: <https://gitlab.com/libssh/libssh-mirror/-/merge_requests/842>
(cherry picked from commit d9a31b0932)

2026-07-28 13:40:56 +02:00

..

test_server

CVE-2026-59851 test_server: add a better gssapi auth callback

2026-07-16 11:51:04 +02:00

CMakeLists.txt

tests: test fallback to regular key exchange from gssapi-keyex

2026-01-05 12:24:13 +01:00

torture_gssapi_server_auth_cb.c

CVE-2026-59851 tests: add gssapi authentication tests with user mismatching the principal

2026-07-16 11:51:04 +02:00

torture_gssapi_server_auth.c

fix: replace pthread_exit in gssapi tests

2026-01-05 12:24:13 +01:00

torture_gssapi_server_delegation.c

fix: replace pthread_exit in gssapi tests

2026-01-05 12:24:13 +01:00

torture_gssapi_server_key_exchange_fallback.c

knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key

2026-07-28 13:40:56 +02:00

torture_gssapi_server_key_exchange_null.c

knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key

2026-07-28 13:40:56 +02:00

torture_gssapi_server_key_exchange.c

knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key

2026-07-28 13:40:56 +02:00

torture_server_algorithms.c

kex: Allow MLKEM key exchanges in FIPS mode

2026-07-09 17:46:04 +02:00

torture_server_auth_kbdint.c

tests: Implement code coverage for ssh_userauth_kbdint_getprompt()

2026-07-09 17:52:52 +02:00

torture_server_config.c

kex: Make existing convenience features available

2025-03-30 12:17:42 +02:00

torture_server_default.c

Add Keyboard Interactive

2026-01-06 22:56:44 +05:30

torture_sftpserver.c

CVE-2026-15370 tests: verify the SFTP longname is in expected format

2026-07-16 11:51:04 +02:00