[ssh_x509] PKIX-SSH release 14.3

[ssh_x509 at roumenpetrov.info]

Hello,

New release 14.3 is available for download.

(x) Features:
(*) generate Ed25519 key by default
Ed25519 public keys are very convenient due to their small size.

(*) run separate pkcs11 helper per module
Allows easily to reload keys from a pkcs11 module.

(*) allow override of subsystem directives in match blocks of daemon configuration


(x) Bugs:
(*) correct checks for ClientAliveInterval
Fix regression from "correct server loop "client alive probing" logic" that caused the probes to be sent less frequently.
(*) set interactive mode for ControlPersist sessions if they originally requested a tty

(*) recursive secure copy in SFTP mode with symbolic links to other directories
In SCP mode, the links are followed, but in SFTP mode they were not. So, fix experimental SFTP mode of secure copy recursive download and upload of directories that contain symbolic links to other directories.

(*) close socket pair if cannot fork for pkcs11 helper
Avoid handle leak on error path.


(x) Misc:
(*) log invalid secsh identification string with debug level
Minimises pre-authentication "log spam".

(*) preserve quoting of subsystem commands and arguments
Potentially incompatible change.

(*) do not exit on duplicate duplicate Subsystem directives

(*) do not delay at all for the "none" authentication mechanism
Also limit login delay to a reasonable maximum (5s).

(*) pkcs11 helper messages
   Improve logging functionality.


Regards,
Roumen Petrov

-- 
Advanced secure shell implementation with X.509 certificate support
http://roumenpetrov.info/secsh/