2023-06-03 13:14:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Jun 3 11:03:46 UTC 2023 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
- Migrate from com.jcraft:jsch to com.github.mwiede:jsch fork
|
|
|
|
(bsc#1211955)
|
|
|
|
* Alias to the old artifact since the new one is drop-in
|
|
|
|
replacement
|
|
|
|
* Keep the old OSGi bundle symbolic name to avoid extensive
|
|
|
|
patching of eclipse stack
|
|
|
|
- Upgrade to version 0.2.9
|
|
|
|
* Changes of 0.2.9
|
|
|
|
+ various improvements, #295
|
|
|
|
~ #293 allow UserAuthNone to be extended.
|
|
|
|
~ Make JGSS module optional.
|
|
|
|
~ Tweak OSGi bundle manifest:
|
|
|
|
~ Avoid self-import.
|
|
|
|
~ Mark JGSS as optional.
|
|
|
|
~ Loosen import versions of dependencies.
|
|
|
|
~ Correctly adhere to the Multi-release JAR spec by ensuring
|
|
|
|
all public classes under versioned directories preside over
|
|
|
|
classes present in the top-level directory.
|
|
|
|
~ Eliminate stray System.err.println() calls.
|
|
|
|
~ Change PageantConnector to use JNA's built-in support for
|
|
|
|
User32.SendMessage().
|
|
|
|
+ Improve error handling in InputStream.close() for SFTP
|
|
|
|
channels, #331
|
|
|
|
* Changes of 0.2.8
|
|
|
|
+ activate sourcecode formatting, #247
|
|
|
|
+ build improvements, #279
|
|
|
|
+ #287 add algorithm type information to algorithm negotiation
|
|
|
|
logs, #290
|
|
|
|
+ wrap NoClassDefFoundError's for invalid private keys, #289 and
|
|
|
|
#290
|
|
|
|
* Changes of 0.2.7
|
|
|
|
+ #265 change buffer_margin computation to be dynamic based upon
|
|
|
|
the MAC to allow connections that advertise small maximum
|
|
|
|
packet sizes.
|
|
|
|
+ #266 fix PuTTY key parsing to work with unix line endings.
|
|
|
|
+ Add support for ECDSA and EdDSA type PuTTY keys.
|
|
|
|
+ #71 add support for PuTTY version 3 format keys.
|
|
|
|
~ Encrypted PuTTY version 3 format keys requires Bouncy
|
|
|
|
Castle (bcprov-jdk18on).
|
|
|
|
+ Eliminate KeyPairDeferred and instead change handling of
|
|
|
|
OpenSSH V1 type keys to be more like other KeyPair types.
|
|
|
|
+ Be more vigilant about clearing private key data.
|
|
|
|
+ Improve PKCS8 key handling and add support for PKCS5 2.1
|
|
|
|
encryption.
|
|
|
|
+ Add support for ECDSA type PKCS8 keys.
|
|
|
|
+ Add support for SCrypt type KDF for PKCS8 keys.
|
|
|
|
~ PKCS8 keys using SCrypt requires Bouncy Castle
|
|
|
|
(bcprov-jdk18on).
|
|
|
|
+ Add support for EdDSA type PKCS8 keys.
|
|
|
|
~ EdDSA type PKCS8 keys requires Bouncy Castle
|
|
|
|
(bcprov-jdk18on).
|
|
|
|
+ Attempt to authenticate using other signature algorithms
|
|
|
|
supported by the same public key.
|
|
|
|
~ Allow this behavior to be disabled via
|
|
|
|
try_additional_pubkey_algorithms config option.
|
|
|
|
° Some servers incorrectly respond with
|
|
|
|
SSH_MSG_USERAUTH_PK_OK to an initial auth query that they
|
|
|
|
don't actually support for RSA keys.
|
|
|
|
+ Add a new config option enable_pubkey_auth_query to allow
|
|
|
|
skipping auth queries and proceed directly to attempting
|
|
|
|
full SSH_MSG_USERAUTH_REQUEST's.
|
|
|
|
+ Add a new config option enable_auth_none to control whether
|
|
|
|
an initial auth request for the method none is sent to detect
|
|
|
|
all supported auth methods available on the server.
|
|
|
|
* Changes of 0.2.6
|
|
|
|
+ Include host alias instead of the real host in messages and
|
|
|
|
exceptions, #257
|
|
|
|
+ Fix missing keySize set when loading V1 RSA keys, #258
|
|
|
|
+ Enhancement to present KeyPair.getKeyTypeString() method, #259
|
|
|
|
* Changes of 0.2.5
|
|
|
|
+ Explictly free resources in Compression implementations, #241
|
|
|
|
+ Fix integration test failures on Apple Silicon by skipping
|
|
|
|
OpenSSH 7.4 tests, #227
|
|
|
|
+ generate osgi bundle manifest data for jar #248, #249
|
|
|
|
* Changes of 0.2.4
|
|
|
|
+ Improved excepton handling by @norrisjeremy in #200
|
|
|
|
* Changes of 0.2.3
|
|
|
|
+ #188 fix private key length checks for ssh-ed25519 and
|
|
|
|
ssh-ed448, #189
|
|
|
|
* Changes of 0.2.2
|
|
|
|
+ setup jdk for code-ql analysis, #151
|
|
|
|
+ misc improvements, #152
|
|
|
|
+ Fixing Issue #131, #134
|
|
|
|
+ Update link to bcrypt, #157
|
|
|
|
* Changes of 0.2.1
|
|
|
|
+ Allow to set a Logger per JSch-instance rather than a VM-wide
|
|
|
|
one, #128
|
|
|
|
+ Preliminary changes prior to Javadoc work, #126
|
|
|
|
+ remove check to allow setting any filename encoding with any
|
|
|
|
server version #137, #142
|
|
|
|
* Changes of 0.2.0
|
|
|
|
+ Disable RSA/SHA1 signature algorithm by default #75
|
|
|
|
+ Add basic Logger implementations that can be optionally
|
|
|
|
utilized with JSch.setLogger():
|
|
|
|
~ JulLogger, using java.util.logging.Logger
|
|
|
|
~ JplLogger, using Java 9's JEP 264
|
|
|
|
~ Log4j2Logger, using Apache Log4j 2
|
|
|
|
~ Slf4jLogger, using SLF4J
|
|
|
|
+ Fix client version to be compliant with RFC 4253 section 4.2
|
|
|
|
by not including minus sign characters #115
|
|
|
|
+ Add java.util.zip based compression implementation #114
|
|
|
|
~ This is based upon the CompressionJUZ implementation posted
|
|
|
|
to the JSch-users mailing list in 2012 by the original JSch
|
|
|
|
author
|
|
|
|
~ The existing JZlib implementation remains the default to
|
|
|
|
maintain strict RFC 4253 section 6.2 compliance
|
|
|
|
° To use the new implementation globally, execute
|
|
|
|
JSch.setConfig("zlib@openssh.com",
|
|
|
|
"com.jcraft.jsch.juz.Compression") +
|
|
|
|
JSch.setConfig("zlib", "com.jcraft.jsch.juz.Compression")
|
|
|
|
° To use the new implementation per session, execute
|
|
|
|
session.setConfig("zlib@openssh.com",
|
|
|
|
"com.jcraft.jsch.juz.Compression")
|
|
|
|
+ session.setConfig("zlib",
|
|
|
|
"com.jcraft.jsch.juz.Compression")
|
|
|
|
* Changes of 0.1.72
|
|
|
|
+ Switch chacha20-poly1305@openssh.com algorithm to a pure
|
|
|
|
Bouncy Castle based implementation
|
|
|
|
+ implement openssh config behavior to handle append, prepend
|
|
|
|
and removal of algorithms #104
|
|
|
|
* Changes of 0.1.71
|
|
|
|
+ Address #98 by restoring JSch.VERSION
|
|
|
|
* Changes of 0.1.70
|
|
|
|
+ Address #89 by fixing rare ECDSA signature validation issue
|
|
|
|
+ Address #93 by always setting the "want reply" flag for "env"
|
|
|
|
type channel requests to false
|
|
|
|
* Changes of 0.1.69
|
|
|
|
+ Address #83 by sending CR LF at the end of the identification
|
|
|
|
string
|
|
|
|
+ Fix earlier change for #76 that failed to correctly make the
|
|
|
|
"Host" keyword case-insensitive
|
|
|
|
+ Fix PageantConnector struct class visibility #86
|
|
|
|
* Changes of 0.1.68
|
|
|
|
+ Added support for the rijndael-cbc@lysator.liu.se algorithm
|
|
|
|
+ Added support for the hmac-ripemd160,
|
|
|
|
hmac-ripemd160@openssh.com and hmac-ripemd160-etm@openssh.com
|
|
|
|
algorithms using Bouncy Castle
|
|
|
|
+ Added support for various algorithms from RFC 4253 and
|
|
|
|
RFC 4344 using Bouncy Castle
|
|
|
|
~ cast128-cbc
|
|
|
|
~ cast128-ctr
|
|
|
|
~ twofish-cbc
|
|
|
|
~ twofish128-cbc
|
|
|
|
~ twofish128-ctr
|
|
|
|
~ twofish192-cbc
|
|
|
|
~ twofish192-ctr
|
|
|
|
~ twofish256-cbc
|
|
|
|
~ twofish256-ctr
|
|
|
|
+ Added support for the seed-cbc@ssh.com algorithm using Bouncy
|
|
|
|
Castle
|
|
|
|
* Changes of 0.1.67
|
|
|
|
+ Added support for the blowfish-ctr algorithm from RFC 4344
|
|
|
|
+ Fix bug where ext-info-c was incorrectly advertised during
|
|
|
|
rekeying
|
|
|
|
~ According to RFC 8308 section 2.1, ext-info-c should only
|
|
|
|
advertised during the first key exchange
|
|
|
|
+ Address #77 by attempting to add compatibility with older
|
|
|
|
Bouncy Castle releases
|
|
|
|
* Changes of 0.1.66
|
|
|
|
+ Added support for RFC 8308 extension negotiation and
|
|
|
|
server-sig-algs extension
|
|
|
|
~ This support is enabled by default, but can be controlled
|
|
|
|
via the enable_server_sig_algs config option (or
|
|
|
|
jsch.enable_server_sig_algs system property)
|
|
|
|
~ When enabled and a server-sig-algs message is received from
|
|
|
|
the server, the algorithms included by the server and also
|
|
|
|
present in the PubkeyAcceptedKeyTypes config option will be
|
|
|
|
attempted first when using publickey authentication
|
|
|
|
~ Additionally if the server is detected as OpenSSH version
|
|
|
|
7.4, the rsa-sha2-256 and rsa-sha2-512 algorithms will be
|
|
|
|
added to the received server-sig-algs as a workaround for
|
|
|
|
OpenSSH bug 2680
|
|
|
|
+ Added support for various algorithms supported by Tectia
|
|
|
|
(ssh.com):
|
|
|
|
~ diffie-hellman-group14-sha224@ssh.com
|
|
|
|
~ diffie-hellman-group14-sha256@ssh.com
|
|
|
|
~ diffie-hellman-group15-sha256@ssh.com
|
|
|
|
~ diffie-hellman-group15-sha384@ssh.com
|
|
|
|
~ diffie-hellman-group16-sha384@ssh.com
|
|
|
|
~ diffie-hellman-group16-sha512@ssh.com
|
|
|
|
~ diffie-hellman-group18-sha512@ssh.com
|
|
|
|
~ diffie-hellman-group-exchange-sha224@ssh.com
|
|
|
|
~ diffie-hellman-group-exchange-sha384@ssh.com
|
|
|
|
~ diffie-hellman-group-exchange-sha512@ssh.com
|
|
|
|
~ hmac-sha224@ssh.com
|
|
|
|
~ hmac-sha256@ssh.com
|
|
|
|
~ hmac-sha256-2@ssh.com
|
|
|
|
~ hmac-sha384@ssh.com
|
|
|
|
~ hmac-sha512@ssh.com
|
|
|
|
~ ssh-rsa-sha224@ssh.com
|
|
|
|
~ ssh-rsa-sha256@ssh.com
|
|
|
|
~ ssh-rsa-sha384@ssh.com
|
|
|
|
~ ssh-rsa-sha512@ssh.com
|
|
|
|
+ Added support for SHA224 to FingerprintHash
|
|
|
|
+ Fixing #52
|
|
|
|
+ Deprecate void setFilenameEncoding(String encoding) in favor
|
|
|
|
of void setFilenameEncoding(Charset encoding) in ChannelSftp
|
|
|
|
+ Added support for rsa-sha2-256 and rsa-rsa2-512 algorithms to
|
|
|
|
ChannelAgentForwarding
|
|
|
|
+ Address #65 by adding ssh-agent support derived from
|
|
|
|
jsch-agent-proxy
|
|
|
|
~ See examples/JSchWithAgentProxy.java for simple example
|
|
|
|
~ ssh-agent support requires either Java 16's JEP 380 or the
|
|
|
|
addition of junixsocket to classpath
|
|
|
|
~ Pageant support is untested and requires the addition of JNA
|
|
|
|
to classpath
|
|
|
|
+ Added support for the following algorithms with older Java
|
|
|
|
releases by using Bouncy Castle:
|
|
|
|
~ ssh-ed25519
|
|
|
|
~ ssh-ed448
|
|
|
|
~ curve25519-sha256
|
|
|
|
~ curve25519-sha256@libssh.org
|
|
|
|
~ curve448-sha512
|
|
|
|
~ chacha20-poly1305@openssh.com
|
|
|
|
* Changes of 0.1.65
|
|
|
|
+ Added system properties to allow manipulation of various
|
|
|
|
crypto algorithms used by default
|
|
|
|
+ Integrated JZlib, allowing use of zlib@openssh.com and zlib
|
|
|
|
compressions without the need to provide the JZlib jar-file
|
|
|
|
+ Modularized the jar-file for use with Java 9 or newer
|
|
|
|
+ Added runtime controls for the min/max/preferred sizes used
|
|
|
|
for diffie-hellman-group-exchange-sha256 and
|
|
|
|
diffie-hellman-group-exchange-sha1
|
|
|
|
+ Renamed PubkeyAcceptedKeyTypes config to
|
|
|
|
PubkeyAcceptedAlgorithms to match recent changes in OpenSSH
|
|
|
|
(PubkeyAcceptedKeyTypes is still accepted for backward
|
|
|
|
compatibility)
|
|
|
|
+ Reduced number of algorithms that are runtime checked by
|
|
|
|
default via CheckCiphers, CheckMacs, CheckKExes and
|
|
|
|
CheckSignatures to improve runtime performance
|
|
|
|
* Changes of 0.1.64
|
|
|
|
+ #55 bug fix
|
|
|
|
* Changes of 0.1.63
|
|
|
|
+ fix for #42
|
|
|
|
* Changes 0.1.62
|
|
|
|
+ #13 reject HostKey with some servers
|
|
|
|
+ #20 Include TestBCrypt.java unit test
|
|
|
|
+ #21 Misc cleanup
|
|
|
|
+ #27 Update Testcontainers to newest version to fix test
|
|
|
|
failures
|
|
|
|
+ #34 NPE with openssh v1 format
|
|
|
|
* Changes 0.1.61
|
|
|
|
+ Add support for chacha20-poly1305@openssh.com, ssh-ed25519,
|
|
|
|
ssh-ed448, curve448-sha512, diffie-hellman-group15-sha512
|
|
|
|
and diffie-hellman-group17-sha512.
|
|
|
|
This makes use of the new EdDSA feature added in Java 15's
|
|
|
|
JEP 339. #17
|
|
|
|
+ added integration test for public key authentication #19
|
|
|
|
* Changes of 0.1.60
|
|
|
|
+ support for openssh-v1-private-key format
|
|
|
|
+ Fix bug with AEAD ciphers when compression is used. #15
|
|
|
|
* Changes of 0.1.59
|
|
|
|
+ fixing issue #6 (originally from
|
|
|
|
https://sourceforge.net/p/jsch/mailman/message/36872566/)
|
|
|
|
* Changes of 0.1.58
|
|
|
|
+ adds support for more algorithms, see #4
|
2023-06-03 13:57:06 +02:00
|
|
|
* Changes of 0.1.57
|
|
|
|
+ support for rsa-sha2-256 and rsa-sha2-512. #1
|
|
|
|
* Changes of 0.1.56
|
|
|
|
+ support for direct-streamlocal@openssh.com
|
|
|
|
(see SocketForwardingL.java)
|
2023-06-03 13:14:25 +02:00
|
|
|
- Removed patches:
|
|
|
|
* jsch-0.1.54-sourcetarget.patch
|
|
|
|
* jsch-osgi-manifest.patch
|
|
|
|
+ both problems are handled differently in the new version
|
|
|
|
- Added patches:
|
|
|
|
* jsch-junixsocket.patch
|
|
|
|
+ disable building with dependency that we don't have
|
|
|
|
* jsch-log4j.patch
|
|
|
|
+ disable building with log4j support in order to avoid a
|
|
|
|
huge build cycle
|
|
|
|
|
2022-03-19 22:52:11 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Mar 19 21:51:39 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
- Modified patch:
|
|
|
|
* jsch-0.1.54-sourcetarget.patch
|
|
|
|
+ build with source/target levels 8
|
|
|
|
|
2020-04-07 16:04:23 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Apr 7 13:56:09 UTC 2020 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
- Version 0.1.55
|
|
|
|
|
2020-04-07 15:53:37 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Apr 7 13:52:31 UTC 2020 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
- Added patch:
|
|
|
|
* jsch-osgi-manifest.patch
|
|
|
|
+ create the osgi manifest during the ant build
|
|
|
|
+ replaces the MANIFEST.MF file
|
|
|
|
- Miscellaneous clean-up
|
|
|
|
|
2017-09-08 10:31:51 +02:00
|
|
|
-------------------------------------------------------------------
|
2019-09-20 15:37:44 +02:00
|
|
|
Fri Sep 20 13:37:00 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
- Remove reference to the parent from pom file, since we are not
|
|
|
|
building with maven
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2017-09-08 10:31:51 +02:00
|
|
|
Fri Sep 8 08:31:01 UTC 2017 - fstrba@suse.com
|
|
|
|
|
|
|
|
- Added patch:
|
|
|
|
* jsch-0.1.54-sourcetarget.patch
|
|
|
|
- Specify java source and target levels to 1.6, in order to
|
|
|
|
allow building with jdk9
|
|
|
|
|
2017-06-09 12:58:07 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jun 9 10:59:34 UTC 2017 - tchvatal@suse.com
|
|
|
|
|
|
|
|
- Build with full java, does not compile with gcj
|
|
|
|
|
2017-05-19 12:12:13 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri May 19 09:59:03 UTC 2017 - dziolkowski@suse.com
|
|
|
|
|
|
|
|
- New build dependency: javapackages-local
|
|
|
|
|
2017-02-13 11:03:28 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Feb 12 21:45:09 UTC 2017 - guoyunhebrave@gmail.com
|
|
|
|
|
|
|
|
- Version 0.1.54
|
|
|
|
|
2015-03-18 11:07:40 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Mar 18 09:46:14 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
- Fix build with new javapackages-tools
|
|
|
|
|
2014-06-17 17:50:49 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jun 17 15:49:57 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
- Version bump to 0.1.51
|
|
|
|
- Cleanup with spec-cleaner
|
|
|
|
- Add maven and osgi things same as in Fedora.
|
|
|
|
|
2013-09-09 13:58:08 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Sep 9 11:06:06 UTC 2013 - tchvatal@suse.com
|
|
|
|
|
|
|
|
- Move from jpackage-utils to javapackage-tools
|
|
|
|
|
2013-05-13 08:19:10 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon May 13 06:15:53 UTC 2013 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
- update to 0.1.50
|
|
|
|
* fixes connection errors with "verify: false" when running on
|
|
|
|
Java 7u6 (and later).
|
|
|
|
* The OpenSSH config file and the key exchange method
|
|
|
|
"diffie-hellman-group-exchange-sha256" are now supported
|
|
|
|
|
2012-10-17 07:13:45 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Oct 16 08:39:25 UTC 2012 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
- update to 0.1.49
|
|
|
|
* Putty's private key files support
|
|
|
|
* hmax-sha2-256 defined in RFC6668 is supported
|
|
|
|
* integration with jsch-agent-proxy
|
|
|
|
* and many bugfixes
|
|
|
|
|
2009-05-01 14:01:21 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Apr 28 11:23:11 CEST 2009 - mvyskocil@suse.cz
|
|
|
|
|
|
|
|
- Initial SUSE packaging of version 0.1.40 (from jpp5)
|
|
|
|
|