Key Exchange Updates?

2022-01-11 Thread Will Bell via libssh2-devel
Hi, Recently a popular sftp server vendor used by several of our production customers ended support for all of the following key exchange methods supported by libssh2, claiming that they are insecure: diffie-hellman-group1-sha1 diffie-hellman-group14-sha1 diffie-hellman-group-exchange-sha1 diffie-

Re: Key Exchange Updates?

2022-01-11 Thread Will Cosgrove via libssh2-devel
Yes, these would be considered weak. If you’re using the OpenSSL backend and the current version of libssh2 there are many other secure options that libssh2 supports. If you’re not using the OpenSSL backend; someone would need to implement them on your preferred backend. Will > On Jan 11, 2

Correct way to free a session _and_ how to do so without blocking or timeout

2022-01-11 Thread Evan M via libssh2-devel
Hi all - apologies for the long email.. I want to make sure I'm explaining things clearly. I am working on a wrapper over libssh2 for the Rust programming language. Rust has RAII similar to C++ where resources for a struct / object are released when the struct is dropped (i.e. goes out of scope).