[ssh_x509] PKIX-SSH release 14.01

[ssh_x509 at roumenpetrov.info]

Dear list members,

I would like to inform you about new regular release 14.0.1.

(x) Features:
(*) x509v3-ssh-ed25519
   implementation of x509v3-ssh-ed25519 public-key algorithm

(*) scan by CIDR address ranges
   allow gather secure shell public keys utility to accept CIDR address ranges

(*) prefer user's umask
   honour user's umask if it is more restrictive then the ssh default

(*) warn if client cannot load public host-keys for host-based authentication


(x) Bugs:
(*) "globs" in sftp mode
   better match scp/rcp's handling of "globs" when secure copy utility runs in experimental sftp mode

(*) handle remote forwarding in escape commandline's processing

(*) properly check for duplicate experimental host-key update


(x) Misc:
(*) use key descriptions
   describe keys into specific compilation with respective functional implementation

(*) modernised signature operations
   unify sign and verify operations for RSA/DSA/EC keys and X.509 certificates and prefer EVP functions from OpenSSL 1.0+ API

(*) deffer seed_rng invocation in daemon
   call after closefrom as work-around for random generator provided by an engine

(*) improve disabled tracing on FreeBSD

(*) code clean-up, unification, readability, compatibility and portability

(*) spelling errors
   correct spelling errors in code and documentation including manual pages

(*) improved logging errors

(*) check for valid canonical domain name when client resolves host-name

(*) do not ever try to write an invalid name to a known-hosts file

(*) add ECDSA on P-256 curve to X.509 "self-issued" test

(*) add new client option EnableEscapeCommandline

(*) more restrictive pledge(if supported) rules after session establishment


Regards,
Roumen Petrov