[openssh-commits] [openssh] branch master updated (cadefc724 -> 752b4e3bd)

Tue Jul 21 15:23:29 AEST 2026

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

    from cadefc724 upstream: Add tests for ecdsa 256, 384 and 521 keys in DNS
     new 1bf5871ae upstream: prefer fstat to stat when it's trivial to do so
     new 2a13186b4 upstream: enable the ssh-mldsa44-ed25519 at openssh.com signature
     new e3bdc2689 upstream: delete list of ssh_config(5) options under
     new addd12a5e upstream: setproctitle(3) to identify sshd-session when its
     new df67bcaf5 upstream: when signing hostkey proofs for a client UpdateHostKeys
     new 0e546c658 upstream: document mldsa44-ed25519 host key and public key
     new 1ae9eeb18 upstream: read ~/.ssh/id_mldsa44_ed25519 private key files by
     new f6acdce69 upstream: in sshd config dump mode, write all directives in mixed
     new d322f2ccf upstream: make authorized_keys "restrict" keyword apply correctly
     new 76357c415 upstream: use crypto_api.h #define constants for lengths; no
     new bf268c800 upstream: move to a better place
     new 752b4e3bd upstream: s/= - 1/= -1/; from serity---

The 12 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

Detailed log of new commits:

commit 752b4e3bd958a05ec025d72504fc8938b2be37f9
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Tue Jul 21 05:21:29 2026 +0000

    upstream: s/= - 1/= -1/; from serity---

    OpenBSD-Commit-ID: d003b300b0062d8e5951b84e8e09bd8d98cfe562

commit bf268c800949ecb379ba6c846cf73a0a97be9d85
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Jul 16 04:12:50 2026 +0000

    upstream: move to a better place

    OpenBSD-Commit-ID: 0c70f26de19babb2557a7a95ae7057d996a2c3f8

commit 76357c4155cd521d19558c516a0ec7b5bd49929b
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Tue Jul 14 04:43:13 2026 +0000

    upstream: use crypto_api.h #define constants for lengths; no

    binary change

    OpenBSD-Commit-ID: 6527baa1f07b7fdf42ca84531a13ae3ff2c0dbc8

commit d322f2ccf7da095ce94d1d99cb563246f61487b0
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Tue Jul 14 01:05:05 2026 +0000

    upstream: make authorized_keys "restrict" keyword apply correctly

    to tunnel forwarding (which is administratively disabled by default).

    Reported by Erichen, Institute of Computing Technology,
    Chinese Academy of Sciences

    OpenBSD-Commit-ID: 5b3cc987a64749c94b20e12755db32a83f8f01e6

commit f6acdce6906b7847d4a71fa576b6ba4222d9948e
Author: naddy at openbsd.org <naddy at openbsd.org>
Date:   Sat Jul 11 11:16:47 2026 +0000

    upstream: in sshd config dump mode, write all directives in mixed

    case for consistency

    ok djm@

    OpenBSD-Commit-ID: 55647b13194d0aaa7095b89455d4c44ddeb53e7d

commit 1ae9eeb18d13650f26ccfd9648f46d3a3b6b2b81
Author: naddy at openbsd.org <naddy at openbsd.org>
Date:   Sat Jul 11 11:15:03 2026 +0000

    upstream: read ~/.ssh/id_mldsa44_ed25519 private key files by

    default

    ok djm@

    OpenBSD-Commit-ID: c45683d341d7dce6c126903bf9a37393f2b75839

commit 0e546c658bb3d9c7cf727e43efa4e29bbbafe5a3
Author: naddy at openbsd.org <naddy at openbsd.org>
Date:   Fri Jul 10 17:21:19 2026 +0000

    upstream: document mldsa44-ed25519 host key and public key

    algorithm

    OpenBSD-Commit-ID: c519ba7408cfb2700d184c9441de4ff01ecda726

commit df67bcaf563726f215b1b126872978b88b7d012d
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Jul 9 02:22:10 2026 +0000

    upstream: when signing hostkey proofs for a client UpdateHostKeys

    request, allow each hostkey to perform at most one signature operation. ok
    dtucker@

    OpenBSD-Commit-ID: ad4149015634f8156ba723656035ec26140875e8

commit addd12a5e439f284854aaaa068b7c1947c24613a
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Jul 9 02:20:19 2026 +0000

    upstream: setproctitle(3) to identify sshd-session when its

    acting as a post- authentication monitor; ok dtucker@

    OpenBSD-Commit-ID: a3c36a005a61ccaeb974afd7b9290b826e1620ba

commit e3bdc2689516c46d5f1ce349a6ff7654d6008e01
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Jul 9 01:16:37 2026 +0000

    upstream: delete list of ssh_config(5) options under

    documentation of -o and instead just direct readers to the actual
    ssh_config(5) manpage.

    ok deraadt@

    OpenBSD-Commit-ID: bed2058af847c2149e0e457202a8c4ee7000ad33

commit 2a13186b434f4481d0226a699d424cad1add8437
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Jul 9 01:15:34 2026 +0000

    upstream: enable the ssh-mldsa44-ed25519 at openssh.com signature

    scheme (and its corresponding certificate form) in the lowest-priority
    position.

    "what took you so long" deraadt@

    OpenBSD-Commit-ID: b7be74df494323a7021cf230f11eff824d2810d0

commit 1bf5871aead6d73177d727add15ab0f14c258fdf
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Tue Jul 7 04:04:16 2026 +0000

    upstream: prefer fstat to stat when it's trivial to do so

    OpenBSD-Commit-ID: 3af5548ba2112045db392a14c959ca309605bdb9

Summary of changes:
 authfile.c        |   4 +-
 crypto_api.h      |   6 +--
 monitor.c         |  14 ++++++-
 myproposal.h      |   9 ++--
 readconf.c        |  14 ++++---
 servconf.c        |  32 +++++++-------
 serverloop.c      |   5 ++-
 ssh-add.1         |  13 +++---
 ssh-add.c         |   3 +-
 ssh-keygen.1      |  10 ++---
 ssh-keysign.8     |   6 ++-
 ssh-mldsa-eddsa.c |  38 ++++++++++-------
 ssh.1             | 123 +++++++-----------------------------------------------
 ssh_config.5      |  24 +++++++----
 sshd-session.c    |   4 +-
 sshd.8            |  12 ++++--
 sshd_config       |   3 +-
 sshd_config.5     |  22 ++++++----
 18 files changed, 151 insertions(+), 191 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.