2014-11-10 02:30:27 +00:00
|
|
|
# Changelog
|
|
|
|
|
2024-08-11 16:34:00 +00:00
|
|
|
## 3.0.40 - 2024-08-11
|
|
|
|
|
|
|
|
- SSH2: fix for setTimeout(0) (#2023)
|
|
|
|
- SSH2: fix possible infinite loop on packet timeout
|
|
|
|
- SSH2/Agent: make it so identities include key comments (#2022)
|
|
|
|
- SSH2/Agent: add findIdentityByPublicKey() (#2022)
|
|
|
|
- EC: fix for IEEEE signatures (#2019)
|
|
|
|
- BigInteger/BCMath: bitwise_or() was doing XOR (#2025)
|
|
|
|
|
2024-06-24 06:27:33 +00:00
|
|
|
## 3.0.39 - 2024-06-24
|
|
|
|
|
|
|
|
- SSH2: fix when keep alive packets are sent (#2009)
|
|
|
|
- SSH2: fix for undefined variable when logging is enabled (#2010 / #2011)
|
|
|
|
|
2024-06-17 10:11:32 +00:00
|
|
|
## 3.0.38 - 2024-06-17
|
|
|
|
|
|
|
|
- BigInteger: EvalBarrett / Barrett could sometimes slow to a crawl (#1994)
|
|
|
|
- SSH2: fix bug that prevented RC4 and ChaCha20 from ever being used
|
|
|
|
- SSH2: SSH_MSG_EXT_INFO didn't work during key re-exchange (#2001, #2002)
|
|
|
|
- SSH2: improvements to timeout handling (#2006)
|
|
|
|
- System/SSH/Agent: reset supported_private_key_algorithms for every key (#1995)
|
|
|
|
- Composer: use paragonie/constant_time_encoding (#1998)
|
|
|
|
- Crypt/EC/Formats/PKCS8: fix Ed448 keys (#2003)
|
|
|
|
|
2024-03-03 02:14:58 +00:00
|
|
|
## 3.0.37 - 2024-03-02
|
|
|
|
|
|
|
|
- SSH2: don't set stream timeout if timeout is 0 (#1986)
|
|
|
|
|
2024-02-26 05:12:56 +00:00
|
|
|
## 3.0.36 - 2024-02-25
|
|
|
|
|
|
|
|
- BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354)
|
|
|
|
- ASN1: limit OID length (CVE-2024-27355)
|
|
|
|
- EC: when using openssl to do signing use unencrypted key (#1979)
|
|
|
|
- SSH2: add different options to isConnected() (#1983)
|
|
|
|
|
2023-12-29 01:59:53 +00:00
|
|
|
## 3.0.35 - 2023-12-18
|
|
|
|
|
|
|
|
- SSH2: implement terrapin attack countermeasures (#1972)
|
|
|
|
- SSH2: only capture login info once (#1970)
|
|
|
|
- Crypt/AsymmetricKey: loading hidden custom key plugins didn't work (#1971)
|
|
|
|
|
2023-11-27 11:13:31 +00:00
|
|
|
## 3.0.34 - 2023-11-27
|
|
|
|
|
|
|
|
- SSH2: add support for RFC8308 (#1960)
|
|
|
|
- SSH2: don't use AES GCM for TurboFTP Server (#1957)
|
|
|
|
- SSH2: reset more internal variables when connection is reset (#1961)
|
|
|
|
- PKCS8: PBES1 / RC2 and PBES2 / DES keys didn't work (#1958)
|
|
|
|
- EC/Signature/Format: add new IEEE format (#1956)
|
|
|
|
- Math/BigInteger/Engines/PHP: PHP 8.2.13+ fixes Windows JIT issue
|
|
|
|
- Math/BinaryField: fix for excessively large degrees (CVE-2023-49316)
|
|
|
|
- Math/PrimeField: fix occasional error with squareRoot method
|
|
|
|
|
2023-10-21 14:00:39 +00:00
|
|
|
## 3.0.33 - 2023-10-21
|
|
|
|
|
|
|
|
- SSH2: fix for PHP 7.3 (#1953)
|
|
|
|
- Crypt: improve ARM detection code (#1949)
|
|
|
|
- Rijndael: fix for PHP 8.3+ compatability (#1944)
|
|
|
|
- X509: fix for weird characters in subjaltname (#1943)
|
|
|
|
- move JIT check to BigInteger (#1942)
|
|
|
|
|
2023-09-18 17:22:01 +00:00
|
|
|
## 3.0.23 - 2023-09-18
|
|
|
|
|
|
|
|
- fix "Undefined index: jit" error on Windows (#1940)
|
|
|
|
|
2023-09-16 11:49:37 +00:00
|
|
|
## 3.0.22 - 2023-09-15
|
|
|
|
|
|
|
|
- SFTP: make it so SFTP::RESUME also sets offset of local file (#1921)
|
|
|
|
- SFTP: RESUME_START didn't work as described (#1921)
|
|
|
|
- SFTP: fix SFTPv2 errors when logging errors (#1933)
|
|
|
|
- SFTP: fix issue with get() downloading to files / streams (#1934)
|
|
|
|
- BigInteger: use GMP if available (#1928)
|
|
|
|
- Rijndael: fix E_DEPRECATED (#1935)
|
|
|
|
- improve PHP32 compatibility (#1931)
|
|
|
|
|
2023-07-09 15:24:48 +00:00
|
|
|
## 3.0.21 - 2023-07-09
|
|
|
|
|
|
|
|
- BigInteger: speed up powMod() method (#1919)
|
|
|
|
- SSH2: fix stream_select(): Unable to select [4]: Interrupted system call (max_fd=29) error (#1851)
|
|
|
|
- SSH2: add EOF test isConnected() (#1926)
|
|
|
|
- SFTP: make it so SFTP::RESUME also sets offset of local file (#1921)
|
|
|
|
- SFTP: SFTP::RESUME_START didn't work as described (#1921)
|
|
|
|
|
2023-06-13 06:30:34 +00:00
|
|
|
## 3.0.20 - 2023-06-13
|
|
|
|
|
|
|
|
- SSH2: better support for multiple interactive channels & expose shell functions (#1888)
|
|
|
|
- SFTP: add optional $recursive parameter to filesize() (#1782)
|
|
|
|
- SFTP: fix NET_SFTP_ATTR_EXTENDED (#1907)
|
|
|
|
- ASN1: speed up decodeBER (#1894)
|
|
|
|
- X509: add support for EV DN's (#1916)
|
|
|
|
- X509: getChain() should always return array of X509 objects (#1914)
|
|
|
|
- RSA: setting sig padding broke enc padding and vice versa
|
|
|
|
|
2023-03-05 17:13:09 +00:00
|
|
|
## 3.0.19 - 2023-03-05
|
|
|
|
|
|
|
|
- AsymmetricKey: error out on unsupported operations (#1879)
|
|
|
|
- Blowfish: fix issues on 32-bit PHP installs
|
|
|
|
- BigInteger: fix for hex numbers with new lines in them
|
|
|
|
- SFTP: fix "Creating default object from empty value" error (#1876)
|
|
|
|
- SSH2: add getTimeout() method (#1889)
|
|
|
|
- PrimeField: prevent infinite loop with composite primefields (CVE-2023-27560)
|
|
|
|
|
2022-12-17 17:25:26 +00:00
|
|
|
## 3.0.18 - 2022-12-17
|
|
|
|
|
|
|
|
- fix for PHP 8.2 deprecations (#1869, #1873)
|
|
|
|
- SSH2: if logging in with rsa-sha2-256/512 fails, try ssh-rsa (#1865)
|
|
|
|
- SSH/Agent: add support for named pipes on windows (for pageant) (#1866)
|
|
|
|
- Crypt/Base: add a function to check continuous buffer status (#1870)
|
|
|
|
- OpenSSL 3.0.1+ deprecated some algorithms (RC2, RC4, DES, Blowfish)
|
|
|
|
|
2022-10-24 10:51:50 +00:00
|
|
|
## 3.0.17 - 2022-10-24
|
|
|
|
|
|
|
|
- X509: make it so CRLs, CSRs and SPKACs can support PSS keys (#1837)
|
|
|
|
- X509: make it so PKCS1 X509 certs can create PSS sigs (#1837)
|
|
|
|
- SFTP: fix deprecated implicit float to int on 32-bit PHP 8.1 (#1841)
|
|
|
|
- SFTP: restore orig behavior when deleting non-existant folder (#1847)
|
|
|
|
- Random: fix fallback on PHP 8.1+
|
|
|
|
|
2022-09-05 18:03:08 +00:00
|
|
|
## 3.0.16 - 2022-09-05
|
|
|
|
|
|
|
|
- SSH2: fix type hinting for keyboard_interactive_process (#1836)
|
|
|
|
|
2022-09-02 17:03:58 +00:00
|
|
|
## 3.0.15 - 2022-09-02
|
2022-09-02 16:58:53 +00:00
|
|
|
|
|
|
|
- PublicKeyLoader: add support for OpenSSH encrypted keys (#1737, #1733, #1531, #1490)
|
2022-09-02 17:03:58 +00:00
|
|
|
- PublicKeyLoader: add support for JSON Web Keys (#1817)
|
|
|
|
- SSH2: make login method return false under rare situation (#1790)
|
|
|
|
- SSH2: fix possibly undefined variable error (#1802)
|
|
|
|
- SFTP: fix enableDatePreservation bug w.r.t. mtime (#1670)
|
|
|
|
- SFTP: try to delete dir even if it can't be opened (#1791)
|
|
|
|
- SFTP: try without path canonicalization if initial realpath() fails (#1796)
|
|
|
|
- SFTP: detect if stream metadata has wrapper_type set for put() method (#1792)
|
|
|
|
- BigInteger: tweak to the phpinfo checks (#1726)
|
|
|
|
- BigInteger: fix behavior on 32-bit PHP installs (#1820)
|
|
|
|
- EC/PKCS8: OpenSSL didn't like phpseclib formed Ed25519 public keys (#1819)
|
|
|
|
- don't use dynamic properties, which are deprecated in PHP 8.2 (#1808, #1822)
|
|
|
|
- fix deprecated implicit float to int on 32-bit PHP 8.1
|
|
|
|
|
2022-04-04 05:15:45 +00:00
|
|
|
## 3.0.14 - 2022-04-04
|
|
|
|
|
|
|
|
- RSA: add support for loading PuTTY v3 keys
|
|
|
|
- Crypt/Base: fix CTR mode with continuous buffer with non-eval PHP
|
|
|
|
- Crypt/Base: use sodium_increment in _increment_str
|
|
|
|
- Crypt/Base: fix deprecation notice (#1770)
|
|
|
|
- SSH2/Agent: rm unused parameter (#1757)
|
|
|
|
- BigInteger: add precision to __debugInfo
|
|
|
|
- BigInteger: fix random engine issues
|
|
|
|
- call useBestEngine() when getEngine() is called
|
|
|
|
|
2022-01-30 08:50:05 +00:00
|
|
|
## 3.0.13 - 2022-01-30
|
|
|
|
|
|
|
|
- SSH2: make login() return false if no valid auth methods are found (#1744)
|
|
|
|
- SSH2: show a more helpful error message when logging in with pubkey (#1718)
|
|
|
|
- SSH2: rsa-sha2-256 and rsa-sha2-512 sigs weren't verifying (#1743)
|
|
|
|
- SFTP: fix chgrp() for version < 4 (#1730)
|
|
|
|
- Crypt/Base: add OFB8 as a new mode (phpseclib/mcrypt_compat#33)
|
|
|
|
- Crypt/Salsa20: fix PHP 5.6 error (#1717)
|
|
|
|
- RSA & BigInteger: check phpinfo() available before using it (#1726)
|
|
|
|
- Fixed psalm level 6 errors in phpseclib/Net/ (#1746)
|
|
|
|
|
2021-11-28 23:31:46 +00:00
|
|
|
## 3.0.12 - 2021-11-28
|
|
|
|
|
|
|
|
- SSH2: add "smart multi factor" login mode (enabled by default) (#1648)
|
|
|
|
- SSH2: error out when no data is received from the server (#1647)
|
|
|
|
- SFTP: don't attempt to parse unsupported attributes (#1708)
|
|
|
|
- SFTP: getSupportedVersions() call didn't work
|
|
|
|
- EC: error out when scalar is out of range (#1712)
|
|
|
|
- RSA: add support for raw private keys (#1711)
|
|
|
|
- SymmetricKey: add getMode()
|
|
|
|
|
2021-10-27 03:01:46 +00:00
|
|
|
## 3.0.11 - 2021-10-26
|
|
|
|
|
|
|
|
- SSH2: add support for zlib and zlib@openssh.com compression
|
|
|
|
- SFTP: add support for SFTPv4/5/6
|
|
|
|
- SFTP: add option to allow arbitrary length packets (#1691)
|
|
|
|
- SFTP: errors weren't being logged (#1702)
|
|
|
|
- RSA: ssh-keygen -yf private.key fails if \r is present (#1698)
|
|
|
|
|
2021-08-16 04:24:45 +00:00
|
|
|
## 3.0.10 - 2021-08-15
|
|
|
|
|
|
|
|
- SFTP: don't check SFTP packet size after SFTP initialization (#1606)
|
|
|
|
- SFTP: timeout during SFTP init should return false (#1684)
|
|
|
|
- SFTP: return false if get_channel_packet returns false (#1678)
|
|
|
|
- ASN1: return false when not enough bytes are available (#1676)
|
|
|
|
- BigInteger: Serializable is being deprecated in PHP 8.1 (#1680)
|
|
|
|
- explicitly define methods as being static (#1689)
|
|
|
|
- plug memory leaks (#1672)
|
|
|
|
|
2021-06-14 06:53:51 +00:00
|
|
|
## 3.0.9 - 2021-06-13
|
|
|
|
|
|
|
|
- SSH2: add getAuthMethodsToContinue() method (#1648)
|
|
|
|
- SSH2: timeout would occasionally infinitely loop
|
|
|
|
- SSH2: fix PHP7.4 errors about accessing bool as string (#1656)
|
|
|
|
- SSH2: fix issue with key re-exchange (#1644)
|
|
|
|
- SFTP: reopen channel on channel closure (#1654)
|
|
|
|
- X509: extra characters before cert weren't being removed (#1659)
|
|
|
|
- X509: signing with pw protected PSS keys yielded errors (#1657)
|
|
|
|
- ASN1: fix timezone issue when non-utc time is given (#1562)
|
|
|
|
- ASN1: change how default values are processed for ints and enums (#1665)
|
|
|
|
- RSA: OAEP decryption didn't check labels correctly (#1669)
|
|
|
|
|
2021-04-20 21:21:05 +00:00
|
|
|
## 3.0.8 - 2021-04-20
|
|
|
|
|
|
|
|
- AsymetrticKey: add getComment() method (#1638)
|
|
|
|
- SymmetricKey: cipher_name_openssl_ecb shouldn't be static because of AES (#1636)
|
|
|
|
- X509: don't filter basicConstraints on unique values (#1639)
|
|
|
|
- X509: make it so extensions can be set as critical (#1640)
|
|
|
|
|
2021-04-06 14:00:11 +00:00
|
|
|
## 3.0.7 - 2021-04-06
|
|
|
|
|
|
|
|
- X509: always parse the first cert of a bundle (#1568)
|
|
|
|
- SSH2: behave like putty with broken publickey auth (#1572)
|
|
|
|
- SSH2: don't close channel on unexpected response to channel request (#1631)
|
|
|
|
- RSA: cleanup RSA PKCS#1 v1.5 signature verification (CVE-2021-30130)
|
|
|
|
- Crypt: use a custom error handler for mcrypt to avoid deprecation errors
|
|
|
|
|
2021-03-13 14:24:01 +00:00
|
|
|
## 3.0.6 - 2021-03-13
|
|
|
|
|
|
|
|
- SFTP/Stream: make it so you can write past the end of a file (#1618)
|
|
|
|
- SFTP/Stream: fix undefined index notice in stream touch() (#1615)
|
|
|
|
- SFTP/Stream: mkdir didn't work (#1617)
|
|
|
|
- BigInteger: fix issue with toBits on 32-bit PHP 8 installs
|
|
|
|
- SFTP: digit only filenames were converted to integers by php (#1623)
|
|
|
|
|
2021-02-12 16:18:16 +00:00
|
|
|
## 3.0.5 - 2021-02-12
|
2021-02-12 16:15:17 +00:00
|
|
|
|
|
|
|
- X509: add getCurrentCert method (since $currentCert is now private) (#1602)
|
|
|
|
- PublicKeyLoader: add loadPrivateKey() and loadPublicKey() methods (#1603)
|
|
|
|
- Rijndael: calling setIV() after setBlockLength() can result in err (#1599)
|
|
|
|
- RSA: use OpenSSL for generating private keys (#1596)
|
|
|
|
- BigInteger: big speedups for when OpenSSL is used (#1596)
|
2021-02-12 16:18:16 +00:00
|
|
|
|
|
|
|
## 3.0.4 - 2021-01-25
|
|
|
|
|
|
|
|
- Random: use v9.99.99 of random_compat if appropriate (#1585, #1571)
|
|
|
|
- SSH/Agent: EC keys didn't work with agent (#1593)
|
|
|
|
- X509: fix niche issue with computeKeyIdentifier (#1586)
|
2021-02-12 16:15:17 +00:00
|
|
|
|
2021-01-16 17:35:19 +00:00
|
|
|
## 3.0.3 - 2021-01-16
|
|
|
|
|
|
|
|
- X509: passing DateTime objects to setEndDate produced errors (#1578)
|
|
|
|
- X509: always parse the first cert of a bundle (#1568)
|
|
|
|
- X509: streamline the management of custom extensions (#1573)
|
|
|
|
- EC: fix case sensitivity errors when using Symfony autoloader (#1570)
|
|
|
|
- RSA: improve identification of public / private PKCS1 / PKCS8 keys (#1579)
|
|
|
|
- RSA: add support for PSS keys that don't have parameters present (#1583)
|
|
|
|
- RSA: tweaks to how the salt length works
|
|
|
|
- RSA: throw exceptions instead of returning false
|
|
|
|
- SSH2: behave like putty with broken publickey auth (#1572)
|
|
|
|
|
2020-12-27 17:56:56 +00:00
|
|
|
## 3.0.2 - 2020-12-24
|
|
|
|
|
|
|
|
- EC/PKCS1: throw exception when trying to load non-strings (#1559)
|
|
|
|
- X509: make date methods accept DateTimeInterface instead of DateTime (#1562)
|
|
|
|
- SSH2: suppress errors on stream_select calls (#1560)
|
|
|
|
|
2020-12-19 07:52:34 +00:00
|
|
|
## 3.0.1 - 2020-12-19
|
|
|
|
|
|
|
|
- PKCS8: fix E_WARNING (#1551)
|
|
|
|
- SSH2/Stream: stream_select needs to be able to access $fsock (#1552)
|
|
|
|
- SFTP: resuming uploads didn't work (#1553)
|
|
|
|
|
2020-12-17 06:10:28 +00:00
|
|
|
## 3.0.0 - 2020-12-16
|
|
|
|
|
|
|
|
- drop SSH1 and SCP support
|
|
|
|
- add support for the following crypto algorithms:
|
|
|
|
- Ed25519 / Ed449 / Curve25519 / Curve449
|
|
|
|
- ECDSA / ECDH (66 curves)
|
|
|
|
- DSA / DH
|
|
|
|
- GCM / Poly1305
|
|
|
|
- Salsa20 / ChaCha20
|
2020-12-23 16:27:03 +00:00
|
|
|
- namespace changed from `phpseclib\` to `\phpseclib3` to facilitate phpseclib 2 shim (phpseclib2_compat)
|
2020-12-17 06:10:28 +00:00
|
|
|
|
2024-02-26 04:55:38 +00:00
|
|
|
## 2.0.47 - 2024-02-25
|
|
|
|
|
|
|
|
- BigInteger: add getLength() and getLengthInBytes() methods
|
|
|
|
- BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354)
|
|
|
|
- ASN1: limit OID length (CVE-2024-27355)
|
|
|
|
|
2023-12-29 01:52:43 +00:00
|
|
|
## 2.0.46 - 2023-12-28
|
|
|
|
|
|
|
|
- SSH2: implement terrapin attack countermeasures (#1972)
|
|
|
|
- SSH2: only capture login info once (#1970)
|
|
|
|
- SSH2: add support for RFC8308 (#1960)
|
|
|
|
- Rijndael: fix for PHP 8.3+ compatability (#1944)
|
|
|
|
- Crypt/Base: improve ARM detection code (#1949)
|
|
|
|
- X509: fix for weird characters in subjaltname (#1943)
|
|
|
|
|
2023-09-15 20:55:47 +00:00
|
|
|
## 2.0.45 - 2023-09-15
|
|
|
|
|
|
|
|
- SFTP: make it so SFTP::RESUME also sets offset of local file (#1921)
|
|
|
|
- SFTP: RESUME_START didn't work as described (#1921)
|
|
|
|
- SFTP: fix SFTPv2 errors when logging errors (#1933)
|
|
|
|
- SFTP: fix issue with get() downloading to files / streams (#1934)
|
|
|
|
- Rijndael: fix E_DEPRECATED (#1935)
|
|
|
|
- improve PHP32 compatibility (#1931)
|
|
|
|
|
2023-06-13 08:41:47 +00:00
|
|
|
## 2.0.44 - 2023-06-13
|
|
|
|
|
|
|
|
- SSH2: fix PHP 8.2 E_DEPRECATED errors (#1917)
|
|
|
|
|
2023-06-13 06:28:04 +00:00
|
|
|
## 2.0.43 - 2023-06-13
|
|
|
|
|
|
|
|
- SFTP: fix NET_SFTP_ATTR_EXTENDED (#1907)
|
|
|
|
- SSH2: fix PHP 8.2 E_DEPRECATED errors (#1917)
|
|
|
|
- X509: add support for EV DN's (#1916)
|
|
|
|
|
2023-03-06 12:45:53 +00:00
|
|
|
## 2.0.42 - 2023-03-06
|
|
|
|
|
|
|
|
- Blowfish: fix issues on 32-bit PHP installs
|
|
|
|
- BigInteger: fix for hex numbers with new lines in them
|
|
|
|
- SSH2: add getTimeout() method (#1889)
|
|
|
|
|
2022-12-23 16:44:18 +00:00
|
|
|
## 2.0.41 - 2022-12-23
|
|
|
|
|
|
|
|
- fix for more PHP 8.2 deprecations (#1875)
|
|
|
|
|
2022-12-17 17:22:59 +00:00
|
|
|
## 2.0.40 - 2022-12-17
|
|
|
|
|
|
|
|
- fix for PHP 8.2 deprecations (#1869)
|
|
|
|
- SSH2: if logging in with rsa-sha2-256/512 fails, try ssh-rsa (#1865)
|
|
|
|
- SSH/Agent: add support for named pipes on windows (for pageant) (#1866)
|
|
|
|
- Crypt/Base: add a function to check continuous buffer status (#1870)
|
|
|
|
- OpenSSL 3.0.1+ deprecated some algorithms (RC2, RC4, DES, Blowfish)
|
|
|
|
|
2022-10-24 10:49:03 +00:00
|
|
|
## 2.0.39 - 2022-10-24
|
|
|
|
|
|
|
|
- SFTP: fix deprecated implicit float to int on 32-bit PHP 8.1 (#1841)
|
|
|
|
- SFTP: restore orig behavior when deleting non-existant folder (#1847)
|
|
|
|
- Random: fix fallback on PHP 8.1+
|
|
|
|
|
2022-09-02 17:03:58 +00:00
|
|
|
## 2.0.38 - 2022-09-02
|
|
|
|
|
|
|
|
- RSA: add support for OpenSSH encrypted keys (#1737, #1733, #1531, #1490)
|
2022-09-02 16:58:53 +00:00
|
|
|
- SSH2: fix possibly undefined variable error (#1802)
|
|
|
|
- SFTP: try to delete dir even if it can't be opened (#1791)
|
|
|
|
- SFTP: try without path canonicalization if initial realpath() fails (#1796)
|
|
|
|
- SFTP: detect if stream metadata has wrapper_type set for put() method (#1792)
|
|
|
|
- BigInteger: fix behavior on 32-bit PHP installs (#1820)
|
|
|
|
- don't use dynamic properties, which are deprecated in PHP 8.2 (#1808, #1822)
|
|
|
|
- fix deprecated implicit float to int on 32-bit PHP 8.1
|
|
|
|
|
2022-04-04 04:57:45 +00:00
|
|
|
## 2.0.37 - 2022-04-04
|
|
|
|
|
|
|
|
- RSA: add support for loading PuTTY v3 keys
|
|
|
|
- Crypt/Base: fix CTR mode with continuous buffer with non-eval PHP
|
|
|
|
- Crypt/Base: use sodium_increment in _increment_str
|
|
|
|
- Crypt/Base: fix deprecation notice (#1770)
|
|
|
|
- SSH2/Agent: rm unused parameter (#1757)
|
|
|
|
|
2022-01-30 08:48:36 +00:00
|
|
|
## 2.0.36 - 2022-01-30
|
|
|
|
|
|
|
|
- SSH2: make login() return false if no valid auth methods are found (#1744)
|
|
|
|
- SFTP: fix chgrp() for version < 4 (#1730)
|
|
|
|
- Crypt/Base: add OFB8 as a new mode (phpseclib/mcrypt_compat#33)
|
|
|
|
- RSA & BigInteger: check phpinfo() available before using it (#1726)
|
|
|
|
|
2021-11-28 23:30:39 +00:00
|
|
|
## 2.0.35 - 2021-11-28
|
|
|
|
|
|
|
|
- SSH2: add "smart multi factor" login mode (enabled by default) (#1648)
|
|
|
|
- SSH2: error out when no data is received from the server (#1647)
|
|
|
|
- SFTP: don't attempt to parse unsupported attributes (#1708)
|
|
|
|
- SFTP: getSupportedVersions() call didn't work
|
|
|
|
|
2021-10-27 02:46:30 +00:00
|
|
|
## 2.0.34 - 2021-10-26
|
|
|
|
|
|
|
|
- SSH2: add support for zlib and zlib@openssh.com compression
|
|
|
|
- SFTP: add support for SFTPv4/5/6
|
|
|
|
- SFTP: add option to allow arbitrary length packets (#1691)
|
|
|
|
- RSA: ssh-keygen -yf private.key fails if \r is present (#1698)
|
|
|
|
|
2021-08-16 04:20:12 +00:00
|
|
|
## 2.0.33 - 2021-08-15
|
|
|
|
|
|
|
|
- SFTP: don't check SFTP packet size after SFTP initialization (#1606)
|
|
|
|
- SFTP: timeout during SFTP init should return false (#1684)
|
|
|
|
- SFTP: return false if get_channel_packet returns false (#1678)
|
|
|
|
- ASN1: return false when not enough bytes are available (#1676)
|
|
|
|
|
2021-06-14 06:48:38 +00:00
|
|
|
## 2.0.32 - 2021-06-13
|
|
|
|
|
|
|
|
- SSH2: add getAuthMethodsToContinue() method (#1648)
|
|
|
|
- SSH2: timeout would occasionally infinitely loop
|
|
|
|
- SSH2: fix PHP7.4 errors about accessing bool as string (#1656)
|
2021-06-14 06:53:51 +00:00
|
|
|
- SSH2: fix issue with key re-exchange (#1644)
|
2021-06-14 06:48:38 +00:00
|
|
|
- SFTP: reopen channel on channel closure (#1654)
|
|
|
|
- X509: extra characters before cert weren't being removed (#1659)
|
|
|
|
- ASN1: fix timezone issue when non-utc time is given (#1562)
|
|
|
|
- RSA: OAEP decryption didn't check labels correctly (#1669)
|
|
|
|
|
2021-04-06 13:56:45 +00:00
|
|
|
## 2.0.31 - 2021-04-06
|
|
|
|
|
|
|
|
- X509: always parse the first cert of a bundle (#1568)
|
|
|
|
- SSH2: behave like putty with broken publickey auth (#1572)
|
|
|
|
- SSH2: don't close channel on unexpected response to channel request (#1631)
|
|
|
|
- RSA: support keys with PSS algorithm identifier (#1584)
|
|
|
|
- RSA: cleanup RSA PKCS#1 v1.5 signature verification (CVE-2021-30130)
|
|
|
|
- SFTP/Stream: make it so you can write past the end of a file (#1618)
|
|
|
|
- SFTP: fix undefined index notice in stream touch() (#1615)
|
|
|
|
- SFTP: digit only filenames were converted to integers by php (#1623)
|
|
|
|
- BigInteger: fix issue with toBits on 32-bit PHP 8 installs
|
|
|
|
- Crypt: use a custom error handler for mcrypt to avoid deprecation errors
|
|
|
|
|
2020-12-17 05:42:04 +00:00
|
|
|
## 2.0.30 - 2020-12-16
|
|
|
|
|
|
|
|
- X509: don't attempt to parse multi-cert PEMs (#1542)
|
|
|
|
- SFTP: add stream to get method (#1546)
|
|
|
|
- SFTP: progress callback should report actual downloaded bytes (#1543)
|
|
|
|
- SSH2: end connection faster for algorithm mismatch
|
|
|
|
- SSH2: add setKeepAlive() method (#1529)
|
|
|
|
- ANSI: fix PHP8 compatibility issues
|
|
|
|
|
2020-09-08 04:24:43 +00:00
|
|
|
## 2.0.29 - 2020-09-07
|
|
|
|
|
|
|
|
- SFTP: add enableDatePreservation() / disableDatePreservation() (#1496)
|
|
|
|
- SFTP: uploads on low speed networks could get in infinite loop (#1507)
|
|
|
|
- SSH2: when building algo list look at if crypto engine is set (#1500)
|
|
|
|
- X509: really looong base64 encoded strings broke extractBER() (#1486)
|
|
|
|
|
2020-07-08 09:08:33 +00:00
|
|
|
## 2.0.28 - 2020-07-08
|
2020-07-08 09:05:48 +00:00
|
|
|
|
|
|
|
- SFTP: realpath('') produced an error (#1474)
|
|
|
|
- SFTP: if /path/to/file is a file then /path/to/file/whatever errors (#1475)
|
|
|
|
- SFTP: speed up uploads (by changing SFTP upload packet size from 4KB to 32KB)
|
|
|
|
- ANSI: fix "Number of elements can't be negative" error
|
|
|
|
|
2020-07-08 09:08:33 +00:00
|
|
|
## 2.0.27 - 2020-05-22
|
|
|
|
|
|
|
|
- SFTP: another attempt at speeding up uploads (#1455)
|
|
|
|
- SSH2: try logging in with none as an auth method first (#1454)
|
|
|
|
- ASN1: fix for malformed ASN1 strings (#1456)
|
|
|
|
|
2020-04-04 23:17:33 +00:00
|
|
|
## 2.0.26 - 2020-03-22
|
|
|
|
|
|
|
|
- SFTP: another attempt at speeding up uploads (#1455)
|
|
|
|
- SSH2: try logging in with none as an auth method first (#1454)
|
|
|
|
- ASN1: fix for malformed ASN1 strings (#1456)
|
|
|
|
|
|
|
|
## 2.0.25 - 2020-02-25
|
|
|
|
|
|
|
|
- SFTP: re-add buffering (#1455)
|
|
|
|
|
2020-02-22 23:43:33 +00:00
|
|
|
## 2.0.24 - 2020-02-22
|
|
|
|
|
|
|
|
- X509: fix PHP 5.3 compatability issue
|
|
|
|
- SSH2: arcfour128 / arcfour256 were being included twice
|
|
|
|
- SSH2: make window resizing behave more consistently with PuTTY (#1421)
|
|
|
|
- SSH2: sodium_compat doesn't support memzero (#1432)
|
|
|
|
- SSH2: logging enhancements
|
|
|
|
- SFTP: don't buffer up download requests (PuTTY doesn't) (#1425)
|
|
|
|
- RSA: make PSS verification work for key length that aren't a power of 2 (#1423)
|
|
|
|
|
2019-09-17 03:41:22 +00:00
|
|
|
## 2.0.23 - 2019-09-16
|
|
|
|
|
|
|
|
- SSH2: fix regression for connecting to servers with bad hostnames (#1405)
|
|
|
|
|
2019-09-15 22:48:44 +00:00
|
|
|
## 2.0.22 - 2019-09-15
|
|
|
|
|
|
|
|
- SSH2: backport setPreferredAlgorithms() / getAlgorithmsNegotiated (#1156)
|
|
|
|
- SSH2 / SFTP: fix issues with ping() (#1402)
|
|
|
|
- X509: IPs in nameconstraints extension include netmask (#1387)
|
|
|
|
- X509: fix issue with explicit time tags whose maps expect implicit (#1388)
|
|
|
|
- BigInteger: fix bug with toBytes() with fixed precision negative numbers
|
|
|
|
- fix PHP 7.4 deprecations
|
|
|
|
|
2019-07-15 05:21:54 +00:00
|
|
|
## 2.0.21 - 2019-07-14
|
|
|
|
|
|
|
|
- SSH2: only auto close the channel for exec() timeouts (#1384)
|
|
|
|
|
2019-06-23 16:17:42 +00:00
|
|
|
## 2.0.20 - 2019-06-23
|
|
|
|
|
|
|
|
- BigInteger: lower PHP req back down to PHP 5.3.3 (#1382)
|
|
|
|
|
|
|
|
## 2.0.19 - 2019-06-19
|
|
|
|
|
|
|
|
- BigInteger: fix issues with divide method in pure-PHP mode
|
|
|
|
|
2019-06-13 06:15:54 +00:00
|
|
|
## 2.0.18 - 2019-06-13
|
|
|
|
|
|
|
|
- SSH2: close channel when a timeout occurs (#1378)
|
|
|
|
- SFTP: improve handling of malformed packets (#1371)
|
|
|
|
- RSA: add support for OpenSSH private keys (#1372)
|
|
|
|
|
|
|
|
## 2.0.17 - 2019-05-26
|
|
|
|
|
|
|
|
- BigInteger: new BigInteger('-0') caused issues with GMP
|
|
|
|
|
|
|
|
## 2.0.16 - 2019-05-26
|
|
|
|
|
|
|
|
- BigInteger: new BigInteger('00') caused issues with GMP
|
|
|
|
- BigInteger: GMP engine didn't always return 1 or -1
|
|
|
|
- ASN1: revamp how OIDs are handled (#1367)
|
|
|
|
- ASN1: correctly handle long tags
|
|
|
|
- SSH2: fix issue with reconnecting via ping() (#1353)
|
|
|
|
- RSA: use hash_equals if available
|
|
|
|
|
2019-03-10 16:53:45 +00:00
|
|
|
## 2.0.15 - 2019-03-10
|
2019-03-10 16:51:38 +00:00
|
|
|
|
|
|
|
- SFTP: make it so get() can correctly handle out of order responses (#1343)
|
|
|
|
- Crypt: avoid bogus IV errors in ECB mode with OpenSSL (#1087)
|
|
|
|
- RSA: protect against possible timing attack during OAEP decryption
|
|
|
|
- RSA: fix possible memory leak with XML keys (#1346)
|
2019-03-10 16:53:45 +00:00
|
|
|
- Hash: fix issue with undefined constants (#1347)
|
2019-03-10 16:51:38 +00:00
|
|
|
- Hash: fix issues with the mode
|
|
|
|
- SCP: issue error if remote_file is empty in put() call (#1335)
|
|
|
|
- X509: whitelist OID 1.3.6.1.4.1.11129.2.4.2 (#1341)
|
|
|
|
|
2019-01-27 19:37:29 +00:00
|
|
|
## 2.0.14 - 2019-01-27
|
|
|
|
|
|
|
|
- SSH2: ssh-rsa is sometimes incorrectly used instead of rsa-sha2-256 (#1331)
|
|
|
|
- SSH2: more strictly adhere to RFC8332 for rsa-sha2-256/512 (#1332)
|
|
|
|
|
|
|
|
## 2.0.13 - 2018-12-16
|
|
|
|
|
|
|
|
- SSH2: fix order of user_error() / bitmap reset (#1314)
|
|
|
|
- SSH2: setTimeout(0) didn't work as intended (#1116)
|
|
|
|
- Agent: add support for rsa-sha2-256 / rsa-sha2-512 (#1319)
|
|
|
|
- Agent: add parameter to constructor (#1319)
|
|
|
|
- X509: fix errors with validateDate (#1318)
|
|
|
|
|
2018-11-04 05:45:48 +00:00
|
|
|
## 2.0.12 - 2018-11-04
|
|
|
|
|
|
|
|
- SSH2: fixes relating to delayed global requests (#1271)
|
|
|
|
- SSH2: setEngine -> setPreferredEngine (#1294)
|
|
|
|
- SSH2: reset $this->bitmap when the connection fails (#1298)
|
|
|
|
- SSH2: add ping() method (#1298)
|
|
|
|
- SSH2: add support for rsa-sha2-256 / rsa-sha2-512 (RFC8332)
|
|
|
|
- SFTP: make rawlist give same result regardless of stat cache (#1287)
|
|
|
|
- Hash: save hashed keys for re-use
|
|
|
|
|
2018-04-15 16:55:05 +00:00
|
|
|
## 2.0.11 - 2018-04-15
|
|
|
|
|
|
|
|
- X509: auto download intermediate certs
|
|
|
|
- BigInteger: fix for (new BigInteger(48))->toString(true)) (#1264)
|
|
|
|
- ASN1: class is never set as key in _decode_ber
|
|
|
|
- check if phpinfo() is available before using (#1256)
|
|
|
|
- backport CFB8 support from master to 2.0 (#1257)
|
|
|
|
|
2018-02-19 04:29:13 +00:00
|
|
|
## 2.0.10 - 2018-02-08
|
|
|
|
|
|
|
|
- BigInteger: fix issue with bitwise_xor (#1245)
|
|
|
|
- Crypt: some of the minimum lengths were off
|
|
|
|
- SFTP: update stat cache accordingly when file becomes a directory (#1235)
|
|
|
|
- SFTP: fix issue with extended attributes on 64-bit PHP installs (#1248)
|
|
|
|
- SSH2: more channel handling updates (#1200)
|
|
|
|
- X509: use anonymous functions in PHP >= 5.3.0
|
2018-04-10 23:58:51 +00:00
|
|
|
- X509: revise logic for validateSignature (#1213)
|
2018-02-19 04:29:13 +00:00
|
|
|
- X509: fix 7.2 error when extensions were removed and new ones added (#1243)
|
|
|
|
- fix float to int conversions on ARM CPU's (#1220)
|
|
|
|
|
2017-11-29 11:30:40 +00:00
|
|
|
## 2.0.9 - 2017-11-29
|
|
|
|
|
|
|
|
- 2.0.8 tag was done off of master branch - not 2.0 branch
|
|
|
|
|
2017-11-29 06:38:08 +00:00
|
|
|
## 2.0.8 - 2017-11-29
|
|
|
|
|
|
|
|
- SSH2: fix issue with key re-exchange
|
|
|
|
- SSH2: updates to dealing with extraneous channel packets
|
|
|
|
- X509: URL validation didn't work (#1203)
|
|
|
|
|
2017-10-23 05:04:54 +00:00
|
|
|
## 2.0.7 - 2017-10-22
|
|
|
|
|
|
|
|
- SSH2:
|
|
|
|
- add new READ_NEXT mode (#1140)
|
|
|
|
- add sendIdentificationStringFirst()
|
|
|
|
- add sendKEXINITFirst()
|
|
|
|
- add sendIdentificationStringLast()
|
|
|
|
- add sendKEXINITLast() (#1162)
|
|
|
|
- assume any SSH server >= 1.99 supports SSH2 (#1170)
|
|
|
|
- workaround for bad arcfour256 implementations (#1171)
|
|
|
|
- don't choke when getting response from diff channel in exec() (#1167)
|
|
|
|
- SFTP:
|
|
|
|
- add enablePathCanonicalization()
|
|
|
|
- add disablePathCanonicalization() (#1137)
|
|
|
|
- fix put() with remote file stream resource (#1177)
|
|
|
|
- ANSI: misc fixes (#1150, #1161)
|
|
|
|
- X509: use DateTime instead of unix time (#1166)
|
|
|
|
- Ciphers: use eval() instead of create_function() for >= 5.3
|
|
|
|
|
2017-06-05 06:25:41 +00:00
|
|
|
## 2.0.6 - 2017-06-05
|
|
|
|
|
|
|
|
- Crypt: fix OpenSSL engine on <= PHP 5.3.6 (#1122)
|
|
|
|
- Random: suppress possible E_DEPRECATED errors
|
|
|
|
- RSA: reset variables if bad key was loaded
|
|
|
|
|
2017-05-14 14:44:34 +00:00
|
|
|
## 2.0.5 - 2017-05-07
|
|
|
|
|
|
|
|
- SSH2: don't use timeout value of 0 for fsockopen (#775)
|
|
|
|
- SSH2: make it so disabling PTY closes exec() channel if it's open (#1009)
|
|
|
|
- SSH2: include `<pre>` tags in getLog result when SAPI isn't CLI
|
|
|
|
- SFTP: don't assume current directory when $path parameter for delete is null (#1059)
|
|
|
|
- SFTP: fix put() with php://input as source (#1119)
|
|
|
|
- ASN1: fix UTCTime parsing (#1110)
|
|
|
|
- X509: ignore certificate transparency extension (#1073)
|
|
|
|
- Crypt: OpenSSL apparently supports variable size keys (#1085)
|
|
|
|
|
2016-10-04 13:59:18 +00:00
|
|
|
## 2.0.4 - 2016-10-03
|
|
|
|
|
|
|
|
- fix E_DEPRECATED errors on PHP 7.1 (#1041)
|
|
|
|
- SFTP: speed up downloads (#945)
|
|
|
|
- SFTP: fix infinite loop when uploading empty file (#995)
|
|
|
|
- ASN1: fix possible infinite loop in decode (#1027)
|
|
|
|
|
2016-08-18 18:49:14 +00:00
|
|
|
## 2.0.3 - 2016-08-18
|
|
|
|
|
|
|
|
- BigInteger/RSA: don't compare openssl versions > 1.0 (#946)
|
|
|
|
- RSA: don't attempt to use the CRT when zero value components exist (#980)
|
|
|
|
- RSA: zero salt length RSA signatures don't work (#1002)
|
|
|
|
- ASN1: fix PHP Warning on PHP 7.1 (#1013)
|
|
|
|
- X509: set parameter fields to null for CSR's / RSA (#914)
|
|
|
|
- CRL optimizations (#1000)
|
|
|
|
- SSH2: fix "Expected SSH_FXP_STATUS or ..." error (#999)
|
|
|
|
- SSH2: use stream_get_* instead of fread() / fgets() (#967)
|
|
|
|
- SFTP: make symlinks support relative target's (#1004)
|
|
|
|
- SFTP: fix sending stream resulting in zero byte file (#995)
|
|
|
|
|
2016-06-04 19:56:30 +00:00
|
|
|
## 2.0.2 - 2016-06-04
|
|
|
|
|
|
|
|
- All Ciphers: fix issue with CBC mode / OpenSSL / continuous buffers / decryption (#938)
|
|
|
|
- Random: fix issues with serialize() (#932)
|
|
|
|
- RC2: fix issue with decrypting
|
|
|
|
- RC4: fix issue with key not being truncated correctly
|
2017-11-29 11:30:40 +00:00
|
|
|
- SFTP: nlist() on a non-existent directory resulted in error
|
2016-06-04 19:56:30 +00:00
|
|
|
- SFTP: add is_writable, is_writeable, is_readable
|
|
|
|
- X509: add IPv6 support for subjectaltname extension (#936)
|
|
|
|
|
2016-04-10 16:30:59 +00:00
|
|
|
## 2.0.1 - 2016-01-18
|
|
|
|
|
|
|
|
- RSA: fix regression in PSS mode ([#769](https://github.com/phpseclib/phpseclib/pull/769))
|
|
|
|
- RSA: fix issue loading PKCS8 specific keys ([#861](https://github.com/phpseclib/phpseclib/pull/861))
|
|
|
|
- X509: add getOID() method ([#789](https://github.com/phpseclib/phpseclib/pull/789))
|
|
|
|
- X509: improve base64-encoded detection rules ([#855](https://github.com/phpseclib/phpseclib/pull/855))
|
|
|
|
- SFTP: fix quirky behavior with put() ([#830](https://github.com/phpseclib/phpseclib/pull/830))
|
|
|
|
- SFTP: fix E_NOTICE ([#883](https://github.com/phpseclib/phpseclib/pull/883))
|
|
|
|
- SFTP/Stream: fix issue with filenames with hashes ([#901](https://github.com/phpseclib/phpseclib/pull/901))
|
|
|
|
- SSH2: add isAuthenticated() method ([#897](https://github.com/phpseclib/phpseclib/pull/897))
|
|
|
|
- SSH/Agent: fix possible PHP warning ([#923](https://github.com/phpseclib/phpseclib/issues/923))
|
|
|
|
- BigInteger: add __debugInfo() magic method ([#881](https://github.com/phpseclib/phpseclib/pull/881))
|
|
|
|
- BigInteger: fix issue with doing bitwise not on 0
|
|
|
|
- add getBlockLength() method to symmetric ciphers
|
|
|
|
|
|
|
|
## 2.0.0 - 2015-08-04
|
|
|
|
|
|
|
|
- Classes were renamed and namespaced ([#243](https://github.com/phpseclib/phpseclib/issues/243))
|
|
|
|
- The use of an autoloader is now required (e.g. Composer)
|
|
|
|
|
2024-02-26 04:44:00 +00:00
|
|
|
## 1.0.23 - 2024-02-25
|
|
|
|
|
|
|
|
- BigInteger: add getLength() and getLengthInBytes() methods
|
|
|
|
- BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354)
|
|
|
|
- ASN1: limit OID length (CVE-2024-27355)
|
|
|
|
|
2023-12-29 01:44:43 +00:00
|
|
|
## 1.0.22 - 2023-12-28
|
|
|
|
|
|
|
|
- SFTP: fix issue with get() downloading to files / streams (#1934)
|
|
|
|
- SFTP: fix SFTPv2 errors when logging errors (#1933)
|
|
|
|
- SSH2: implement terrapin attack countermeasures (#1972)
|
|
|
|
- SSH2: only capture login info once (#1970)
|
|
|
|
- SSH2: add support for RFC8308 (#1960)
|
|
|
|
- Rijndael: fix for PHP 8.3+ compatability (#1944)
|
|
|
|
- Crypt/Base: improve ARM detection code (#1949)
|
|
|
|
- X509: fix for weird characters in subjaltname (#1943)
|
|
|
|
- ASN1: fix string conversion code for 32-bit PHP installs (#1931)
|
|
|
|
|
2023-07-09 15:16:21 +00:00
|
|
|
## 1.0.21 - 2023-07-09
|
|
|
|
|
|
|
|
- fix deprecation errors in newer PHP versions
|
|
|
|
- OpenSSL 3.0.1+ deprecated some algorithms
|
2023-12-29 01:44:43 +00:00
|
|
|
- RSA: add support for loading OpenSSH encrypted keys (#1737, #1733, #1531, #1490)
|
|
|
|
- RSA: add support for loading PuTTY v3 keys
|
2023-07-09 15:16:21 +00:00
|
|
|
- SSH2: if logging in with rsa-sha2-256/512 fails, try ssh-rsa (#1865)
|
|
|
|
- SSH2: add EOF test isConnected() (#1926)
|
|
|
|
- SFTP: try without path canonicalization if initial realpath() fails (#1796)
|
|
|
|
- SFTP: fix chgrp() for version < 4 (#1730)
|
|
|
|
- SFTP: try to delete dir even if it can't be opened (#1791)
|
|
|
|
- SFTP: make it so SFTP::RESUME also sets offset of local file (#1921)
|
|
|
|
- SFTP: SFTP::RESUME_START didn't work as described (#1921)
|
|
|
|
- Crypt/Base: fix CTR mode with continuous buffer with non-eval PHP
|
|
|
|
|
2021-12-28 06:26:23 +00:00
|
|
|
## 1.0.20 - 2021-12-28
|
|
|
|
|
|
|
|
SFTP:
|
|
|
|
- speed up uploads (by changing SFTP upload packet size from 4KB to 32KB)
|
|
|
|
- add support for SFTPv4/5/6
|
|
|
|
- add enableDatePreservation() / disableDatePreservation() (#1496)
|
|
|
|
- uploads on low speed networks could get in infinite loop (#1507)
|
|
|
|
- "fix" rare resource not closed error (#1510)
|
|
|
|
- progress callback should report actual downloaded bytes (#1543)
|
|
|
|
- add stream to get method (#1546)
|
|
|
|
- fix undefined index notice in stream touch() (#1615)
|
|
|
|
- digit only filenames were converted to integers by php (#1623)
|
|
|
|
- Stream: make it so you can write past the end of a file (#1618)
|
|
|
|
- reopen channel on channel closure (#1654)
|
|
|
|
- don't check SFTP packet size after SFTP initialization (#1606)
|
|
|
|
- return false if get_channel_packet returns false (#1678)
|
|
|
|
- timeout during SFTP init should return false (#1684)
|
|
|
|
- add option to allow arbitrary length packets (#1691)
|
|
|
|
|
|
|
|
SSH2:
|
|
|
|
- add support for zlib and zlib@openssh.com compression
|
|
|
|
- add "smart multi factor" login mode (enabled by default) (#1648)
|
|
|
|
- don't try to login as none auth method for CoreFTP server (#1488)
|
|
|
|
- when building algo list look at if crypto engine is set (#1500)
|
|
|
|
- suppress 'broken pipe' errors (#1511)
|
|
|
|
- add setKeepAlive() method (#1529)
|
|
|
|
- behave like putty with broken publickey auth (#1572)
|
|
|
|
- don't close channel on unexpected response to channel request (#1631)
|
|
|
|
- add getAuthMethodsToContinue() method (#1648)
|
|
|
|
- fix issue with key re-exchange (#1644)
|
|
|
|
- fix PHP7.4 errors about accessing bool as string (#1656)
|
|
|
|
- end connection faster for algorithm mismatch
|
|
|
|
|
|
|
|
X509:
|
|
|
|
- really looong base64 encoded strings broke extractBER() (#1486)
|
|
|
|
- only parse the first cert of a multi-cert PEMs (#1542, #1568)
|
|
|
|
|
|
|
|
ASN1:
|
|
|
|
- fix timezone issue when non-utc time is given (#1562)
|
|
|
|
- return false when not enough bytes are available (#1676)
|
|
|
|
|
|
|
|
RSA:
|
|
|
|
- ssh-keygen -yf private.key fails if \r is present (#1698)
|
|
|
|
|
|
|
|
BigInteger:
|
|
|
|
- fix issue with toBits on 32-bit PHP 8 installs
|
|
|
|
|
|
|
|
Crypt/Base:
|
|
|
|
- use a custom error handler for mcrypt
|
|
|
|
|
2020-07-08 04:31:58 +00:00
|
|
|
## 1.0.19 - 2020-07-07
|
|
|
|
|
|
|
|
- SSH2: arcfour128 / arcfour256 were being included twice
|
|
|
|
- SSH2: make window resizing behave more consistently with PuTTY (#1421)
|
|
|
|
- SSH2: logging enhancements
|
|
|
|
- SSH2: try logging in with none as an auth method first (#1454)
|
|
|
|
- SFTP: change the mode with a SETSTAT instead of MKDIR (#1463)
|
|
|
|
- SFTP: make it so extending SFTP class doesn't cause a segfault (#1465)
|
|
|
|
- SFTP: realpath('') produced an error (#1474)
|
|
|
|
- SFTP: if /path/to/file is a file then /path/to/file/whatever errors (#1475)
|
|
|
|
- RSA: make PSS verification work for key length that aren't a power of 2 (#1423)
|
|
|
|
- ASN1: fix for malformed ASN1 strings (#1456)
|
|
|
|
- ANSI: fix "Number of elements can't be negative" error
|
|
|
|
|
2019-09-17 04:11:10 +00:00
|
|
|
## 1.0.18 - 2019-09-16
|
|
|
|
|
|
|
|
- SSH2: fix regression for connecting to servers with bad hostnames (#1405)
|
|
|
|
|
2019-09-15 23:22:02 +00:00
|
|
|
## 1.0.17 - 2019-09-15
|
|
|
|
|
|
|
|
- SSH2: backport setPreferredAlgorithms() / getAlgorithmsNegotiated (#1156)
|
|
|
|
- SSH2 / SFTP: fix issues with ping() (#1402)
|
|
|
|
- SSH2: only auto close the channel for exec() timeouts (#1384)
|
|
|
|
- SSH2 / SFTP: fix issues with ping() (#1402)
|
|
|
|
- SFTP: add progress callback to get() (#1375)
|
|
|
|
- SFTP: fix array_merge(): Argument #1 is not an array error (#1379)
|
|
|
|
- X509: IPs in nameconstraints extension include netmask (#1387)
|
|
|
|
- X509: fix issue with explicit time tags whose maps expect implicit (#1388)
|
|
|
|
- BigInteger: fix issues with divide method
|
|
|
|
- BigInteger: fix bug with toBytes() with fixed precision negative numbers
|
|
|
|
- fix PHP 7.4 deprecations
|
|
|
|
|
2019-06-13 06:11:22 +00:00
|
|
|
## 1.0.16 - 2019-06-13
|
|
|
|
|
|
|
|
- BigInteger: new BigInteger('-0') caused issues with GMP
|
|
|
|
- BigInteger: new BigInteger('00') caused issues with GMP
|
|
|
|
- BigInteger: GMP engine didn't always return 1 or -1
|
|
|
|
- ASN1: revamp how OIDs are handled (#1367)
|
|
|
|
- ASN1: correctly handle long tags
|
|
|
|
- SSH2: fix issue with reconnecting via ping() (#1353)
|
|
|
|
- SSH2: close channel when a timeout occurs (#1378)
|
|
|
|
- SFTP: improve handling of malformed packets (#1371)
|
|
|
|
- RSA: add support for OpenSSH private keys (#1372)
|
|
|
|
- RSA: use hash_equals if available
|
|
|
|
|
2019-03-10 16:53:45 +00:00
|
|
|
## 1.0.15 - 2019-03-10
|
|
|
|
|
|
|
|
- SFTP: make it so get() can correctly handle out of order responses (#1343)
|
|
|
|
- Crypt: avoid bogus IV errors in ECB mode with OpenSSL (#1087)
|
|
|
|
- RSA: protect against possible timing attack during OAEP decryption
|
|
|
|
- RSA: fix possible memory leak with XML keys (#1346)
|
|
|
|
- Hash: fix issues with the mode
|
|
|
|
- SCP: issue error if remote_file is empty in put() call (#1335)
|
|
|
|
- X509: whitelist OID 1.3.6.1.4.1.11129.2.4.2 (#1341)
|
2019-03-10 16:51:38 +00:00
|
|
|
|
2019-01-27 19:35:10 +00:00
|
|
|
## 1.0.14 - 2019-01-27
|
|
|
|
|
|
|
|
- SSH2: ssh-rsa is sometimes incorrectly used instead of rsa-sha2-256 (#1331)
|
|
|
|
- SSH2: more strictly adhere to RFC8332 for rsa-sha2-256/512 (#1332)
|
|
|
|
|
|
|
|
## 1.0.13 - 2018-12-16
|
|
|
|
|
|
|
|
- SSH2: fix order of user_error() / bitmap reset (#1314)
|
|
|
|
- SSH2: setTimeout(0) didn't work as intended (#1116)
|
|
|
|
- Agent: add support for rsa-sha2-256 / rsa-sha2-512 (#1319)
|
|
|
|
- Agent: add parameter to constructor (#1319)
|
|
|
|
|
2018-11-04 05:38:52 +00:00
|
|
|
## 1.0.12 - 2018-11-04
|
|
|
|
|
|
|
|
- SSH2: fixes relating to delayed global requests (#1271)
|
|
|
|
- SSH2: setEngine -> setPreferredEngine (#1294)
|
|
|
|
- SSH2: reset $this->bitmap when the connection fails (#1298)
|
|
|
|
- SSH2: add ping() method (#1298)
|
|
|
|
- SSH2: add support for rsa-sha2-256 / rsa-sha2-512 (RFC8332)
|
|
|
|
- SFTP: make rawlist give same result regardless of stat cache (#1287)
|
|
|
|
- Hash: save hashed keys for re-use
|
|
|
|
|
2018-04-15 16:51:35 +00:00
|
|
|
## 1.0.11 - 2018-04-15
|
|
|
|
|
|
|
|
- X509: auto download intermediate certs
|
|
|
|
- BigInteger: fix for (new BigInteger(48))->toString(true)) (#1264)
|
|
|
|
- ASN1: class is never set as key in _decode_ber
|
|
|
|
|
2018-02-19 04:25:41 +00:00
|
|
|
## 1.0.10 - 2018-02-08
|
|
|
|
|
|
|
|
- BigInteger: fix issue with bitwise_xor (#1245)
|
|
|
|
- Crypt: some of the minimum lengths were off
|
|
|
|
- SFTP: update stat cache accordingly when file becomes a directory (#1235)
|
|
|
|
- SFTP: fix issue with extended attributes on 64-bit PHP installs (#1248)
|
|
|
|
- SSH2: more channel handling updates (#1200)
|
|
|
|
- X509: use anonymous functions in PHP >= 5.3.0
|
2018-04-10 23:56:01 +00:00
|
|
|
- X509: revise logic for validateSignature (#1213)
|
2018-02-19 04:25:41 +00:00
|
|
|
- X509: fix 7.2 error when extensions were removed and new ones added (#1243)
|
|
|
|
- fix float to int conversions on ARM CPU's (#1220)
|
|
|
|
|
2017-11-29 06:37:04 +00:00
|
|
|
## 1.0.9 - 2017-11-29
|
|
|
|
|
|
|
|
- SSH2: fix issue with key re-exchange
|
|
|
|
- SSH2: updates to dealing with extraneous channel packets
|
|
|
|
- X509: URL validation didn't work (#1203)
|
|
|
|
|
2017-10-23 05:01:21 +00:00
|
|
|
## 1.0.8 - 2017-10-22
|
|
|
|
|
|
|
|
- SSH2:
|
|
|
|
- add new READ_NEXT mode (#1140)
|
|
|
|
- add sendIdentificationStringFirst()
|
|
|
|
- add sendKEXINITFirst()
|
|
|
|
- add sendIdentificationStringLast()
|
|
|
|
- add sendKEXINITLast() (#1162)
|
|
|
|
- assume any SSH server >= 1.99 supports SSH2 (#1170)
|
|
|
|
- workaround for bad arcfour256 implementations (#1171)
|
|
|
|
- don't choke when getting response from diff channel in exec() (#1167)
|
|
|
|
- SFTP:
|
|
|
|
- add enablePathCanonicalization()
|
|
|
|
- add disablePathCanonicalization() (#1137)
|
|
|
|
- fix put() with remote file stream resource (#1177)
|
|
|
|
- ANSI: misc fixes (#1150, #1161)
|
|
|
|
- X509: use DateTime instead of unix time (#1166)
|
|
|
|
- Ciphers: use eval() instead of create_function() for >= 5.3
|
|
|
|
|
2017-06-05 06:22:53 +00:00
|
|
|
## 1.0.7 - 2017-06-05
|
|
|
|
|
|
|
|
- Crypt: fix OpenSSL engine on <= PHP 5.3.6 (#1122)
|
|
|
|
- Random: suppress possible E_DEPRECATED errors
|
|
|
|
- RSA: reset variables if bad key was loaded
|
|
|
|
|
2017-05-14 14:42:10 +00:00
|
|
|
## 1.0.6 - 2017-05-07
|
|
|
|
|
|
|
|
- SSH2: don't use timeout value of 0 for fsockopen (#775)
|
|
|
|
- SSH2: make it so disabling PTY closes exec() channel if it's open (#1009)
|
|
|
|
- SSH2: include `<pre>` tags in getLog result when SAPI isn't CLI
|
|
|
|
- SFTP: don't assume current directory when $path parameter for delete is null (#1059)
|
|
|
|
- SFTP: fix put() with php://input as source (#1119)
|
|
|
|
- ASN1: fix UTCTime parsing (#1110)
|
|
|
|
- X509: ignore certificate transparency extension (#1073)
|
|
|
|
- Crypt: OpenSSL apparently supports variable size keys (#1085)
|
|
|
|
|
2016-10-22 17:53:16 +00:00
|
|
|
## 1.0.5 - 2016-10-22
|
|
|
|
|
|
|
|
- fix issue preventing installation of 1.0.x via Composer (#1048)
|
|
|
|
|
2016-10-04 13:26:52 +00:00
|
|
|
## 1.0.4 - 2016-10-03
|
|
|
|
|
|
|
|
- fix E_DEPRECATED errors on PHP 7.0 and 7.1 (#1041)
|
|
|
|
- fix float to int conversions on 32-bit Linux pre-PHP 5.3 (#1038, #1034)
|
|
|
|
- SFTP: speed up downloads (#945)
|
|
|
|
- SFTP: fix infinite loop when uploading empty file (#995)
|
|
|
|
- ASN1: fix possible infinite loop in decode (#1027)
|
|
|
|
|
2016-08-18 18:43:04 +00:00
|
|
|
## 1.0.3 - 2016-08-18
|
|
|
|
|
|
|
|
- BigInteger/RSA: don't compare openssl versions > 1.0 (#946)
|
|
|
|
- RSA: don't attempt to use the CRT when zero value components exist (#980)
|
|
|
|
- RSA: zero salt length RSA signatures don't work (#1002)
|
|
|
|
- ASN1: fix PHP Warning on PHP 7.1 (#1013)
|
|
|
|
- X509: set parameter fields to null for CSR's / RSA (#914)
|
|
|
|
- CRL optimizations (#1000)
|
|
|
|
- SSH2: fix "Expected SSH_FXP_STATUS or ..." error (#999)
|
|
|
|
- SFTP: make symlinks support relative target's (#1004)
|
|
|
|
- SFTP: fix sending stream resulting in zero byte file (#995)
|
|
|
|
|
2016-05-13 01:13:11 +00:00
|
|
|
## 1.0.2 - 2016-05-07
|
|
|
|
|
|
|
|
- All Ciphers: fix issue with CBC mode / OpenSSL / continuous buffers / decryption (#938)
|
|
|
|
- Random: fix issues with serialize() (#932)
|
|
|
|
- RC2: fix issue with decrypting
|
|
|
|
- RC4: fix issue with key not being truncated correctly
|
2016-07-31 12:41:23 +00:00
|
|
|
- SFTP: nlist() on a non-existent directory resulted in error
|
2016-05-13 01:13:11 +00:00
|
|
|
- SFTP: add is_writable, is_writeable, is_readable
|
2016-07-31 12:41:23 +00:00
|
|
|
- RSA: fix PHP4 compatibility issue
|
2016-05-13 01:13:11 +00:00
|
|
|
|
2016-04-10 16:30:59 +00:00
|
|
|
## 1.0.1 - 2016-01-18
|
|
|
|
|
|
|
|
- RSA: fix regression in PSS mode ([#769](https://github.com/phpseclib/phpseclib/pull/769))
|
|
|
|
- RSA: fix issue loading PKCS8 specific keys ([#861](https://github.com/phpseclib/phpseclib/pull/861))
|
|
|
|
- X509: add getOID() method ([#789](https://github.com/phpseclib/phpseclib/pull/789))
|
|
|
|
- X509: improve base64-encoded detection rules ([#855](https://github.com/phpseclib/phpseclib/pull/855))
|
|
|
|
- SFTP: fix quirky behavior with put() ([#830](https://github.com/phpseclib/phpseclib/pull/830))
|
|
|
|
- SFTP: fix E_NOTICE ([#883](https://github.com/phpseclib/phpseclib/pull/883))
|
|
|
|
- SFTP/Stream: fix issue with filenames with hashes ([#901](https://github.com/phpseclib/phpseclib/pull/901))
|
|
|
|
- SSH2: add isAuthenticated() method ([#897](https://github.com/phpseclib/phpseclib/pull/897))
|
|
|
|
- SSH/Agent: fix possible PHP warning ([#923](https://github.com/phpseclib/phpseclib/issues/923))
|
|
|
|
- BigInteger: add __debugInfo() magic method ([#881](https://github.com/phpseclib/phpseclib/pull/881))
|
|
|
|
- BigInteger: fix issue with doing bitwise not on 0
|
|
|
|
- add getBlockLength() method to symmetric ciphers
|
|
|
|
|
|
|
|
## 1.0.0 - 2015-08-02
|
|
|
|
|
|
|
|
- OpenSSL support for symmetric ciphers ([#507](https://github.com/phpseclib/phpseclib/pull/507))
|
|
|
|
- rewritten vt100 terminal emulator (File_ANSI) ([#689](https://github.com/phpseclib/phpseclib/pull/689))
|
|
|
|
- agent-forwarding support (System_SSH_Agent) ([#592](https://github.com/phpseclib/phpseclib/pull/592))
|
|
|
|
- Net_SSH2 improvements
|
2017-10-23 05:01:21 +00:00
|
|
|
- diffie-hellman-group-exchange-sha1/sha256 support ([#714](https://github.com/phpseclib/phpseclib/pull/714))
|
|
|
|
- window size handling updates ([#717](https://github.com/phpseclib/phpseclib/pull/717))
|
2016-04-10 16:30:59 +00:00
|
|
|
- Net_SFTP improvements
|
2017-10-23 05:01:21 +00:00
|
|
|
- add callback support to put() ([#655](https://github.com/phpseclib/phpseclib/pull/655))
|
|
|
|
- stat cache fixes ([#743](https://github.com/phpseclib/phpseclib/issues/743), [#730](https://github.com/phpseclib/phpseclib/issues/730), [#709](https://github.com/phpseclib/phpseclib/issues/709), [#726](https://github.com/phpseclib/phpseclib/issues/726))
|
2016-04-10 16:30:59 +00:00
|
|
|
- add "none" encryption mode to Crypt_RSA ([#692](https://github.com/phpseclib/phpseclib/pull/692))
|
|
|
|
- misc ASN.1 / X.509 parsing fixes ([#721](https://github.com/phpseclib/phpseclib/pull/721), [#627](https://github.com/phpseclib/phpseclib/pull/627))
|
|
|
|
- use a random serial number for new X509 certs ([#740](https://github.com/phpseclib/phpseclib/pull/740))
|
|
|
|
- add getPublicKeyFingerprint() to Crypt_RSA ([#677](https://github.com/phpseclib/phpseclib/pull/677))
|
|
|
|
|
2015-02-08 15:31:31 +00:00
|
|
|
## 0.3.10 - 2015-02-04
|
|
|
|
|
2015-02-09 13:56:10 +00:00
|
|
|
- simplify SSH2 window size handling ([#538](https://github.com/phpseclib/phpseclib/pull/538))
|
2015-02-08 15:31:31 +00:00
|
|
|
- slightly relax the conditions under which OpenSSL is used ([#598](https://github.com/phpseclib/phpseclib/pull/598))
|
|
|
|
- fix issue with empty constructed context-specific tags in ASN1 ([#606](https://github.com/phpseclib/phpseclib/pull/606))
|
|
|
|
|
2014-11-10 02:30:27 +00:00
|
|
|
## 0.3.9 - 2014-11-09
|
|
|
|
|
|
|
|
- PHP 5.6 improvements ([#482](https://github.com/phpseclib/phpseclib/pull/482), [#491](https://github.com/phpseclib/phpseclib/issues/491))
|
|
|
|
|
|
|
|
## 0.3.8 - 2014-09-12
|
|
|
|
|
|
|
|
- improve support for indef lengths in File_ASN1
|
|
|
|
- add hmac-sha2-256 support to Net_SSH2
|
|
|
|
- make it so negotiated algorithms can be seen before Net_SSH2 login
|
|
|
|
- add sha256-96 and sha512-96 to Crypt_Hash
|
|
|
|
- window size handling adjustments in Net_SSH2
|
|
|
|
|
|
|
|
## 0.3.7 - 2014-07-05
|
|
|
|
|
|
|
|
- auto-detect public vs private keys
|
|
|
|
- add file_exists, is_dir, is_file, readlink and symlink to Net_SFTP
|
|
|
|
- add support for recursive nlist and rawlist
|
|
|
|
- make it so nlist and rawlist can return pre-sorted output
|
|
|
|
- make it so callback functions can make exec() return early
|
|
|
|
- add signSPKAC and saveSPKAC methods to File_X509
|
|
|
|
- add support for PKCS8 keys in Crypt_RSA
|
|
|
|
- add pbkdf1 support to setPassword() in Crypt_Base
|
|
|
|
- add getWindowColumns, getWindowRows, setWindowColumns, setWindowRows to Net_SSH2
|
|
|
|
- add support for filenames with spaces in them to Net_SCP
|
|
|
|
|
|
|
|
## 0.3.6 - 2014-02-23
|
|
|
|
|
|
|
|
- add preliminary support for custom SSH subsystems
|
|
|
|
- add ssh-agent support
|
|
|
|
|
|
|
|
## 0.3.5 - 2013-07-11
|
|
|
|
|
|
|
|
- numerous SFTP changes:
|
2017-10-23 05:01:21 +00:00
|
|
|
- chown
|
|
|
|
- chgrp
|
|
|
|
- truncate
|
|
|
|
- improved file type detection
|
|
|
|
- put() can write to the middle of a file
|
|
|
|
- mkdir accepts the same parameters that PHP's mkdir does
|
|
|
|
- the ability to upload/download 2GB files
|
2014-11-10 02:30:27 +00:00
|
|
|
- across-the-board speedups for the various encryption algorithms
|
|
|
|
- multi-factor authentication support for Net_SSH2
|
|
|
|
- a $callback parameter for Net_SSH2::exec
|
|
|
|
- new classes:
|
2017-10-23 05:01:21 +00:00
|
|
|
- Net_SFTP_StreamWrapper
|
|
|
|
- Net_SCP
|
|
|
|
- Crypt_Twofish
|
|
|
|
- Crypt_Blowfish
|
2014-11-10 02:30:27 +00:00
|
|
|
|
|
|
|
## 0.3.1 - 2012-11-20
|
|
|
|
|
|
|
|
- add Net_SSH2::enableQuietMode() for suppressing stderr
|
|
|
|
- add Crypt_RSA::__toString() and Crypt_RSA::getSize()
|
|
|
|
- fix problems with File_X509::validateDate(), File_X509::sign() and Crypt_RSA::verify()
|
|
|
|
- use OpenSSL to speed up modular exponention in Math_BigInteger
|
|
|
|
- improved timeout functionality in Net_SSH2
|
|
|
|
- add support for SFTPv2
|
|
|
|
- add support for CRLs in File_X509
|
|
|
|
- SSH-2.0-SSH doesn't implement hmac-*-96 correctly
|
|
|
|
|
|
|
|
## 0.3.0 - 2012-07-08
|
|
|
|
|
|
|
|
- add support for reuming Net_SFTP::put()
|
|
|
|
- add support for recursive deletes and recursive chmods to Net_SFTP
|
|
|
|
- add setTimeout() to Net_SSH2
|
|
|
|
- add support for PBKDF2 to the various Crypt_* classes via setPassword()
|
|
|
|
- add File_X509 and File_ASN1
|
|
|
|
- add the ability to decode various formats in Crypt_RSA
|
|
|
|
- make Net_SSH2::getServerPublicHostKey() return a printer-friendly version of the public key
|
|
|
|
|
|
|
|
## 0.2.2 - 2011-05-09
|
|
|
|
|
|
|
|
- CFB and OFB modes were added to all block ciphers
|
|
|
|
- support for interactive mode was added to Net_SSH2
|
|
|
|
- Net_SSH2 now has limited keyboard_interactive authentication support
|
|
|
|
- support was added for PuTTY formatted RSA private keys and XML formatted RSA private keys
|
|
|
|
- Crypt_RSA::loadKey() will now try all key types automatically
|
2017-10-23 05:01:21 +00:00
|
|
|
- add support for AES-128-CBC and DES-EDE3-CFB encrypted RSA private keys
|
2014-11-10 02:30:27 +00:00
|
|
|
- add Net_SFTP::stat(), Net_SFTP::lstat() and Net_SFTP::rawlist()
|
|
|
|
- logging was added to Net_SSH1
|
2016-04-10 16:30:59 +00:00
|
|
|
- the license was changed to the less restrictive MIT license
|