Simon Tatham 0b00e4ce26 Warn about Terrapin vulnerability for unpatched servers. ...

If the KEXINIT exchange results in a vulnerable cipher mode, we now
give a warning, similar to the 'we selected a crypto primitive below
the warning threshold' one. But there's nothing we can do about it at
that point other than let the user abort the connection.

2023-12-13 18:47:08 +00:00

..

agentf.c

…

bpp1.c

…

bpp2.c

…

bpp-bare.c

…

bpp.h

…

ca-config.c

…

censor1.c

…

censor2.c

…

channel.h

…

CMakeLists.txt

…

common.c

…

connection1-client.c

…

connection1-server.c

…

connection1.c

…

connection1.h

…

connection2-client.c

…

connection2-server.c

…

connection2.c

…

connection2.h

…

crc-attack-detector.c

…

gss.h

…

gssc.c

…

gssc.h

…

kex2-client.c

…

kex2-server.c

…

login1-server.c

…

login1.c

…

mainchan.c

…

nogss.c

…

nosharing.c

…

pgssapi.c

…

pgssapi.h

…

portfwd.c

…

ppl.h

…

scpserver.c

…

server.c

…

server.h

…

sesschan.c

…

sftp.c

…

sftp.h

…

sftpcommon.c

…

sftpserver.c

…

sharing.c

…

signal-list.h

…

ssh.c

…

transient-hostkey-cache.c

…

transport2.c

…

transport2.h

…

ttymode-list.h

…

userauth2-client.c

…

userauth2-server.c

…

verstring.c

…

x11fwd.c

…

zlib.c

…