* Wed Mar 11 2020 Martin Hauke <mardnh@gmx.de>
- Update to version 2.2.0
* Marked host key type ssh-rsa as weak due to practical SHA-1
collisions.
* Added 10 new host key types:
ecdsa-sha2-1.3.132.0.10, x509v3-sign-dss, x509v3-sign-rsa,
x509v3-sign-rsa-sha256@ssh.com,
x509v3-ssh-dss, x509v3-ssh-rsa,
sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,
sk-ecdsa-sha2-nistp256@openssh.com,
sk-ssh-ed25519-cert-v01@openssh.com,
and sk-ssh-ed25519@openssh.com.
* Added 18 new key exchanges:
diffie-hellman-group14-sha256@ssh.com,
diffie-hellman-group15-sha256@ssh.com,
diffie-hellman-group15-sha384@ssh.com,
diffie-hellman-group16-sha384@ssh.com,
diffie-hellman-group16-sha512@ssh.com,
diffie-hellman-group18-sha512@ssh.com,
ecdh-sha2-curve25519, ecdh-sha2-nistb233,
ecdh-sha2-nistb409, ecdh-sha2-nistk163,
ecdh-sha2-nistk233, ecdh-sha2-nistk283,
ecdh-sha2-nistk409, ecdh-sha2-nistp192,
ecdh-sha2-nistp224, ecdh-sha2-nistt571,
gss-gex-sha1-, and gss-group1-sha1-.
* Added 9 new ciphers:
camellia128-cbc, camellia128-ctr, camellia192-cbc,
camellia192-ctr, camellia256-cbc, camellia256-ctr,
aes128-gcm, aes256-gcm, and chacha20-poly1305.
* Added 2 new MACs:
aes128-gcm and aes256-gcm.
* Mon Feb 03 2020 Martin Hauke <mardnh@gmx.de>
* Remove _service file; use download URL for all files
* Run spec-cleaner
* Don't package ssh-audit with the .py extension
* Run testsuite
* Sun Dec 29 2019 Lars Vogdt <lars@linux-schulserver.de>
- update to 2.1.1:
This maintenance release focuses on improving support for client testing.
The full changelog is:
+ Added 2 new host key types: rsa-sha2-256-cert-v01@openssh.com,
rsa-sha2-512-cert-v01@openssh.com.
+ Added 2 new ciphers: des, 3des.
+ Added 3 new PuTTY vulnerabilities.
+ During client testing, client IP address is now listed in output.
- added _service file
- add signatures for source verification
* Fri Nov 15 2019 Lars Vogdt <lars@linux-schulserver.de>
- update to 2.1.0:
The highlights of this release include client-testing functionality to audit
the protocols accepted by client software, a JSON output format, support for
new algorithms, and bugfixes. Below is the full changelog:
+ Added client software auditing functionality (see -c / --client-audit option).
+ Added JSON output option (see -j / --json option; credit Andreas Jaggi).
+ Fixed crash while scanning Solaris Sun_SSH.