Skip to content

v0.1.66

Compare
Choose a tag to compare
@mwiede mwiede released this 07 Sep 09:15
· 986 commits to master since this release
  • Added support for RFC 8308 extension negotiation and server-sig-algs extension
    • This support is enabled by default, but can be controlled via the enable_server_sig_algs config option (or jsch.enable_server_sig_algs system property)
    • When enabled and a server-sig-algs message is received from the server, the algorithms included by the server and also present in the PubkeyAcceptedKeyTypes config option will be attempted first when using publickey authentication
    • Additionally if the server is detected as OpenSSH version 7.4, the rsa-sha2-256 & rsa-sha2-512 algorithms will be added to the received server-sig-algs as a workaround for OpenSSH bug 2680
  • Added support for various algorithms supported by Tectia (ssh.com):
    • diffie-hellman-group14-sha224@ssh.com
    • diffie-hellman-group14-sha256@ssh.com
    • diffie-hellman-group15-sha256@ssh.com
    • diffie-hellman-group15-sha384@ssh.com
    • diffie-hellman-group16-sha384@ssh.com
    • diffie-hellman-group16-sha512@ssh.com
    • diffie-hellman-group18-sha512@ssh.com
    • diffie-hellman-group-exchange-sha224@ssh.com
    • diffie-hellman-group-exchange-sha384@ssh.com
    • diffie-hellman-group-exchange-sha512@ssh.com
    • hmac-sha224@ssh.com
    • hmac-sha256@ssh.com
    • hmac-sha256-2@ssh.com
    • hmac-sha384@ssh.com
    • hmac-sha512@ssh.com
    • ssh-rsa-sha224@ssh.com
    • ssh-rsa-sha256@ssh.com
    • ssh-rsa-sha384@ssh.com
    • ssh-rsa-sha512@ssh.com
  • Added support for SHA224 to FingerprintHash
  • Fixing #52
  • Deprecate void setFilenameEncoding(String encoding) in favor of void setFilenameEncoding(Charset encoding) in ChannelSftp
  • Added support for rsa-sha2-256 & rsa-rsa2-512 algorithms to ChannelAgentForwarding
  • Address #65 by adding ssh-agent support derived from jsch-agent-proxy
    • See examples/JSchWithAgentProxy.java for simple example
    • ssh-agent support requires either Java 16's JEP 380 or the addition of junixsocket to classpath
    • Pageant support is untested & requires the addition of JNA to classpath
  • Added support for the following algorithms with older Java releases by using Bouncy Castle:
    • ssh-ed25519
    • ssh-ed448
    • curve25519-sha256
    • curve25519-sha256@libssh.org
    • curve448-sha512
    • chacha20-poly1305@openssh.com