libssh2-1.11.0

[Douglas R. Reno]

New minor version

[Xi Ruoyao]

​https://github.com/libssh2/libssh2/issues/1056

[Xi Ruoyao]

We need to at least use --disable-docker-tests because Docker is not a BLFS package. And we need to sed away one remaining problematic test depending on the static library.

[Xi Ruoyao]

Fixed at r11.3-610-g35a47ae8fb.

[Xi Ruoyao]

• Adds support for encrypt-then-mac (ETM) MACs
• Adds support for AES-GCM crypto protocols
• Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
• Adds support for RSA certificate authentication
• Adds FIDO support with *_sk() functions
• Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
• Adds Agent Forwarding and libssh2_agent_sign()
• Adds support for Channel Signal message libssh2_channel_signal_ex()
• Adds support to get the user auth banner message libssh2_userauth_banner()
• Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519, AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
• Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
• Adds wolfSSL support to CMake file
• Adds mbedTLS 3.x support
• Adds LibreSSL 3.5 support
• Adds support for CMake "unity" builds
• Adds CMake support for building shared and static libs in a single pass
• Adds symbol hiding support to CMake
• Adds support for libssh2.rc for all build tools
• Adds .zip, .tar.xz and .tar.bz2 release tarballs
• Enables ed25519 key support for LibreSSL 3.7.0 or higher
• Improves OpenSSL 1.1 and 3 compatibility
• Now requires OpenSSL 1.0.2 or newer
• Now requires CMake 3.1 or newer
• SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
• SFTP: No longer has a packet limit when reading a directory
• SFTP: now parses attribute extensions if they exist
• SFTP: no longer will busy loop if SFTP fails to initialize
• SFTP: now clear various errors as expected
• SFTP: no longer skips files if the line buffer is too small
• SCP: add option to not quote paths
• SCP: Enables 64-bit offset support unconditionally
• Now skips leading \r and \n characters in banner_receive()
• Enables secure memory zeroing with all build tools on all platforms
• No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
• Speed up base64 encoding by 7x
• Assert if there is an attempt to write a value that is too large
• WinCNG: fix memory leak in _libssh2_dh_secret()
• Added protection against possible null pointer dereferences
• Agent now handles overly large comment lengths
• Now ensure KEX replies don't include extra bytes
• Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
• Fixed possible buffer overflow in keyboard interactive code path
• Fixed overlapping memcpy()
• Fixed Windows UWP builds
• Fixed DLL import name
• Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
• Support for building with gcc versions older than 8
• Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
• Restores ANSI C89 compliance
• Enabled new compiler warnings and fixed/silenced them
• Improved error messages
• Now uses CIFuzz
• Numerous minor code improvements
• Improvements to CI builds
• Improvements to unit tests
• Improvements to doc files
• Improvements to example files
• Removed "old gex" build option
• Removed no-encryption/no-mac builds
• Removed support for NetWare and Watcom wmake build files

[Bruce Dubbs]

Milestone renamed