This is an automated email from the ASF dual-hosted git repository. twolf pushed a change to branch dev_3.0 in repository https://gitbox.apache.org/repos/asf/mina-sshd.git
from d04cc4584 An OpenSshCertificate is not a PrivateKey! new a138b8607 Add Window.consumeAll() new 37764a8d6 Remove KeyUtils.cloneKeyPair() new 497853b28 Keep track of already known host keys for a session new d05ff1f9c Fix KnownHostEntry.getKeyEntry() new 8ac246398 Remove unused deprecated items new c1866a48e Update CHANGES new e7baf5dca Finish the "hostkeys...@openssh.com" host key rotation implementation new c9b92ff06 SSH key types are case-sensitive new 55201823e GH-739: prepare code to run with or without SecurityManager new a0d5e02dc GH-622: Improve HostConfigEntry add b58aff8f7 [test] Use ephemeral port in PortForwardingTest add afa48fccb Added commandTimeoutMillis in executeRemoteCommand add 1cccb85e0 Merge pull request #726 from raajeive/master add d454cb1f4 Bump testcontainers.version from 1.20.6 to 1.21.0 (#738) add f411cadb6 Bump pmd.version from 7.12.0 to 7.13.0 (#741) new a1b2a10e3 Merge branch 'master' into 3.0.0 The 11 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: CHANGES.md | 5 + pom.xml | 4 +- .../sshd/client/config/hosts/HostConfigEntry.java | 692 +++++++++++---------- .../sshd/client/config/hosts/KnownHostEntry.java | 9 +- .../common/config/keys/AuthorizedKeyEntry.java | 15 +- .../sshd/common/config/keys/KeyEntryResolver.java | 61 -- .../apache/sshd/common/config/keys/KeyUtils.java | 242 ++----- .../common/config/keys/OpenSshCertificate.java | 119 +--- .../common/config/keys/OpenSshCertificateImpl.java | 60 +- .../sshd/common/config/keys/PublicKeyEntry.java | 17 + .../config/keys/impl/DSSPublicKeyEntryDecoder.java | 30 - .../keys/impl/ECDSAPublicKeyEntryDecoder.java | 38 -- .../keys/impl/OpenSSHCertificateDecoder.java | 19 - .../config/keys/impl/RSAPublicKeyDecoder.java | 35 -- .../keys/impl/SkECDSAPublicKeyEntryDecoder.java | 16 - .../keys/impl/SkED25519PublicKeyEntryDecoder.java | 14 - .../openssh/OpenSSHDSSPrivateKeyEntryDecoder.java | 30 - .../OpenSSHECDSAPrivateKeyEntryDecoder.java | 37 -- .../openssh/OpenSSHRSAPrivateKeyDecoder.java | 34 - .../apache/sshd/common/signature/SignatureRSA.java | 7 +- .../org/apache/sshd/common/util/GenericUtils.java | 2 +- .../org/apache/sshd/common/util/MapEntryUtils.java | 5 + .../apache/sshd/common/util/ReflectionUtils.java | 20 - .../org/apache/sshd/common/util/buffer/Buffer.java | 30 +- .../common/util/security/PrivilegedOperations.java | 149 +++++ .../sshd/common/util/security/SecurityUtils.java | 18 - .../BouncyCastleSecurityProviderRegistrar.java | 10 - .../eddsa/EdDSASecurityProviderRegistrar.java | 7 +- .../generic/GenericEd25519PublicKeyDecoder.java | 18 - ...enericOpenSSHEd25519PrivateKeyEntryDecoder.java | 18 - .../common/util/threads/SshdThreadFactory.java | 20 +- .../hosts/ConfigFileHostEntryResolverTest.java | 8 +- .../client/config/hosts/HostConfigEntryTest.java | 37 +- .../client/config/hosts/KnownHostEntryTest.java | 3 +- .../keys/BuiltinClientIdentitiesWatcherTest.java | 9 +- .../sshd/common/config/keys/KeyUtilsCloneTest.java | 99 --- .../file/root/RootedFileSystemProviderTest.java | 5 +- .../certificate/OpenSshCertificateBuilder.java | 28 - .../java/org/apache/sshd/client/ClientBuilder.java | 13 + .../apache/sshd/client/ClientFactoryManager.java | 5 + .../java/org/apache/sshd/client/SshClient.java | 12 + .../sshd/client/auth/pubkey/UserAuthPublicKey.java | 6 +- .../DefaultNewHostKeysHandler.java} | 22 +- .../sshd/client/config/NewHostKeysHandler.java | 50 ++ .../sshd/client/global/OpenSshHostKeysHandler.java | 155 ++++- .../java/org/apache/sshd/client/kex/DHGClient.java | 16 +- .../keyverifier/KnownHostsServerKeyVerifier.java | 2 +- .../sshd/client/session/AbstractClientSession.java | 79 ++- .../apache/sshd/client/session/ClientSession.java | 144 ++++- .../sshd/common/channel/AbstractChannel.java | 22 +- .../org/apache/sshd/common/channel/Window.java | 15 + .../org/apache/sshd/common/forward/SocksProxy.java | 3 +- .../global/AbstractOpenSshHostKeysHandler.java | 2 +- .../sshd/common/io/nio2/Nio2CompletionHandler.java | 14 +- .../DefaultClientKexExtensionHandler.java | 4 +- .../sshd/server/auth/pubkey/UserAuthPublicKey.java | 20 +- .../sshd/server/global/OpenSshHostKeysHandler.java | 27 +- .../GenerateOpenSSHClientCertificateTest.java | 25 +- ...GenerateOpenSshClientCertificateOracleTest.java | 21 +- .../certificates/OpenSSHCertificateParserTest.java | 9 +- .../auth/pubkey/HostBoundPubKeyAuthTest.java | 29 +- .../KnownHostsServerKeyVerifierTest.java | 5 +- .../keyverifier/KnownHostsUnsupportedKeysTest.java | 6 +- .../sshd/client/session/ClientSessionTest.java | 64 ++ .../sshd/common/forward/PortForwardingTest.java | 25 +- .../common/global/OpenSshHostKeysHandlerTest.java | 4 +- .../sshd/common/session/GlobalRequestTest.java | 8 +- .../fs/SftpFileSystemClientSessionInitializer.java | 22 - 68 files changed, 1349 insertions(+), 1450 deletions(-) create mode 100644 sshd-common/src/main/java/org/apache/sshd/common/util/security/PrivilegedOperations.java delete mode 100644 sshd-common/src/test/java/org/apache/sshd/common/config/keys/KeyUtilsCloneTest.java copy sshd-core/src/main/java/org/apache/sshd/client/{auth/AbstractUserAuthFactory.java => config/DefaultNewHostKeysHandler.java} (66%) create mode 100644 sshd-core/src/main/java/org/apache/sshd/client/config/NewHostKeysHandler.java