summaryrefslogtreecommitdiff
path: root/paramiko/client.py
Commit message (Collapse)AuthorAgeFilesLines
* String format modernization, part 11070-remove-python26-and-33Jeff Forcier2017-10-101-15/+19
| | | | | | | Choosing to skip it in some edge/corner cases where it's more harmful than helpful. Also choosing to replace many non-%s specifiers with regular old {} since I don't see why one would normally care. Again, eschewing that in spots where it seems like it might matter.
* Use set literalsJeff Forcier2017-10-101-1/+1
|
* Use new(er)-style string formatting, {} instead of {0}Jeff Forcier2017-10-101-2/+2
|
* Fix gss_host setting and cleanup its logicSebastian Deiss2017-09-181-2/+4
| | | | | The parameter 'kex_requested' is misleading, since setting 'gss_host' is also required for gssapi-with-mic.
* Attempt to refactor gss_host setting and clean up/document its logicJeff Forcier2017-09-131-6/+5
|
* Formatting yet againJeff Forcier2017-09-131-1/+2
|
* versionchanged for gss_trust_dnsJeff Forcier2017-09-131-0/+2
|
* More formattingJeff Forcier2017-09-131-5/+7
|
* Feels like we do still want set_gss_host gated by whether GSS is in play (as ↵Jeff Forcier2017-09-131-5/+6
| | | | is in master)
* FormattingJeff Forcier2017-09-131-3/+4
|
* Trailing commaJeff Forcier2017-09-131-1/+1
|
* Merge branch 'master' into 1063-intJeff Forcier2017-09-131-15/+58
|\
| * Merge branch '2.2'Jeff Forcier2017-09-121-13/+12
| |\
| * | Overhaul PublicBlob and use it better within RSAKey.Jeff Forcier2017-08-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | This allows server-side Paramiko code to correctly create cert-bearing RSAKey objects and thus verify client signatures, and now the test suite passes again, barring the stub tests. Re #1042
| * | Stub tests and partly-working implementation of 'load certs found alongside ↵Jeff Forcier2017-08-281-9/+21
| | | | | | | | | | | | | | | | | | | | | key_filenames' behavior re #1042 This actually breaks existing tests due to test server not supporting certs...bah
| * | Docstring/TODO tweaksJeff Forcier2017-08-281-1/+2
| | |
| * | Refactor and clean up recently tweaked key loading bits in SSHClientJeff Forcier2017-08-281-20/+26
| | |
| * | Changelog and docs re #1042Jeff Forcier2017-08-281-2/+16
| | |
| * | string slice instead of rstrip, thanks ploxilnPaul Kapp2017-08-221-1/+1
| | |
| * | Add certificate filenames to look_for_keysPaul Kapp2017-08-221-5/+15
| | |
* | | Invent the parameter 'gss_trust_dns' for Kerberos supportAnselm Kruis2017-09-131-9/+11
| |/ |/| | | | | | | | | | | | | | | | | | | | | In response to Paramiko issue #915 the parameter 'gss_trust_dns' was added for Kerberos support. Set by default to 'True' the parameter indicates whether or not the DNS is trusted to securely canonicalize the hostname of the target host. If set to 'False' the hostname entered will be passed to GSSAPI. This option behaves like GSSAPITrustDNS from OpenSSH. Also, the parameter 'gss_host' is now always set, regardless if GSSAPI is used or not. Further, a minor fix was required to make the SFTP test work again.
* | Merge branch '2.1-gsskex-hostkeycheck-fix' into 2.2-gsskex-hostkeycheck-fixAnselm Kruis2017-08-041-13/+12
|\ \ | |/ |/|
| * Merge branch '2.0-gsskex-hostkeycheck-fix' into 2.1-gsskex-hostkeycheck-fixAnselm Kruis2017-08-041-13/+12
| |\
| | * SSHClient: fix the host key testAnselm Kruis2017-08-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | Skip the host key check only, if the transport actually used gssapi-keyex. Add tests for the missing-host-key RejectPolicy. Before this change, a man-in-the-middle attack on the paramiko ssh client with gss_kex=True was possible by having a server that does not support gssapi-keyex and gives any or no host key.
* | | Merge branch '2.1'Jeff Forcier2017-06-091-19/+25
|\ \ \ | |/ /
| * | Re-apply ResourceManager removalJeff Forcier2017-06-091-2/+0
| | |
| * | Merge branch '2.1' into 910-intJeff Forcier2017-06-091-1/+0
| |\ \
| * | | SSHClient: adjust Transport preferred host key types if known hostPierce Lopez2017-06-071-21/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If we have a host keys that will be checked, we need to negotiate for the type we have. Commonly, openssh could have saved an ecdsa key in known_hosts, but SSHClient will let the Transport negotiate for an rsa key. Then it would consider a key of a non-corresponding type to be "missing". That situation is also now a BadHostKeyException. Before this change, a man-in-the-middle attack on the paramiko ssh client was possible by having only a host key type which differs from what the client has in known_hosts (and then giving any key of that type).
* | | | Merge branch '2.1'Jeff Forcier2017-06-091-3/+0
|\ \ \ \ | | |/ / | |/| |
| * | | Merge branch '2.0' into 2.1Jeff Forcier2017-06-091-3/+0
| |\ \ \ | | |/ / | |/| / | | |/
| | * Merge branch '2.0' into 952-intJeff Forcier2017-06-091-9/+11
| | |\
| | * | remove back-reference from Transport to SSHClientPierce Lopez2017-06-021-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | It was only recently added, and it's not really needed after the ResourceManager removal. Removing it allows the SSHClient to be garbage-collected if only the Transport (and Channels) are still in use.
| | * | remove ResourceManager to fix leak of Transport/SSHClientKyle Agronick2017-06-021-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The back-reference from Transport to SSHClient was added because the SSHClient had a destructor that would close the Transport, and some users did not want the Transport closed when the SSHClient was garbage collected. The SSHClient destructor was not a normal destructor, it was implemented with the ResourceManager singleton. Together with the back-reference, this prevented the GC cycle detector from freeing the SSHClient and Transport.
* | | | Trailing commaJeff Forcier2017-06-061-1/+1
| | | |
* | | | Merge branch 'master' into 869-intJeff Forcier2017-06-061-60/+82
|\ \ \ \
| * | | | That was easy. Closes #857Jeff Forcier2017-06-061-0/+3
| | | | |
| * | | | DDD re #857Jeff Forcier2017-06-061-10/+4
| | | | |
| * | | | Merge branch '2.1'Jeff Forcier2017-06-051-9/+11
| |\ \ \ \ | | |/ / /
| | * | | Merge branch '2.0' into 2.1Jeff Forcier2017-06-051-9/+11
| | |\ \ \ | | | | |/ | | | |/|
| | | * | Move to 'inv sites' style doc nitpicking.Jeff Forcier2017-06-051-9/+11
| | | |/ | | | | | | | | | | | | | | | | | | | | | | | | Existing just-warnings setup was old and not as rigorous as my usual. Required a lot of stupid little changes, but now same tooling for all projects, toot toot.
| | * | Merge branch '2.0' into 2.1Jeff Forcier2017-05-311-21/+46
| | |\ \ | | | |/
| * | | fixed long lineAlex Gaynor2017-06-031-2/+4
| | | |
| * | | integration test, with ourselvesAlex Gaynor2017-06-031-1/+1
| | | |
| * | | small cleanupsAlex Gaynor2017-06-031-8/+5
| | | |
| * | | Fixes #325 -- add support for Ed25519 keysAlex Gaynor2017-06-031-19/+16
| | | |
| * | | Merge branch '2.0'Jeff Forcier2017-05-311-21/+46
| |\ \ \ | | |/ / | |/| / | | |/
| | * Flake8 improvements for more of paramiko.Dorian Pula2017-05-311-3/+4
| | |
| | * More flake8 fixes and fix tests.Dorian Pula2017-05-311-18/+42
| | |
| * | Merge branch '2.0' into 2.1Jeff Forcier2017-02-201-0/+1
| |\ \ | | |/
| | * Add back-reference from Transport to the SSHClient that created itOmer Anson2017-02-201-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In some cases, the SSH client is created, the command is executed, the streams are extracted, and the explicit reference to SSHClient is then discarded (since it was e.g. created in a function that only returns the streams). In this case, the SHSClient may be garbage collected, and the connection's state is undefined. This fix adds a reference from Transport to the SSHClient that created it. The streams have a reference to the Channel, which references the Transport. Now that the Transport references the SSHClient, it won't be garbage collected until it is closed. Closes-Bug: #44 Related-Bug: #344
View Lorry Controller Status