James Myers 9ef620b9ca ssh: support MaxAuthTries on ServerConfig ...

This change breaks backwards compatibility.

MaxAuthTries specifies the maximum number of authentication attempts
permitted per connection. If set to a negative number, the server will
allow unlimited authentication attempts. MaxAuthTries defaults to 6 if
not specified, which is a backwards incompatible change. On exceeding
maximum authentication attempts, the server will send a disconnect
message to the client.

This configuration property mirrors a similar property in sshd_config
and prevents bad actors from continuously trying authentication.

Change-Id: Ic77d2c29ee2fd2ae5c764becf7df91d29d03131b
Reviewed-on: https://go-review.googlesource.com/35230
Reviewed-by: Han-Wen Nienhuys <hanwen@google.com>
Run-TryBot: Han-Wen Nienhuys <hanwen@google.com>
TryBot-Result: Gobot Gobot <gobot@golang.org>

2017-04-10 10:56:18 +00:00

..

agent

ssh: require host key checking in the ClientConfig

2017-03-30 15:57:35 +00:00

terminal

ssh/terminal: consume data before checking for an error.

2017-01-17 00:48:27 +00:00

test

ssh: support forwarding of Unix domain socket connections

2017-04-10 09:27:34 +00:00

testdata

ssh: Add support for RSA keys stored in OpenSSH's new format

2017-04-05 15:38:54 +00:00

benchmark_test.go

go.crypto/ssh: import gosshnew.

2014-04-09 13:57:52 -07:00

buffer_test.go

go.crypto/ssh: import gosshnew.

2014-04-09 13:57:52 -07:00

buffer.go

go.crypto/ssh: import gosshnew.

2014-04-09 13:57:52 -07:00

certs_test.go

ssh: fix flake in TestHostKeyCert

2015-08-02 23:53:45 +00:00

certs.go

ssh: require host key checking in the ClientConfig

2017-03-30 15:57:35 +00:00

channel.go

ssh: soft code internal channel size for testing purposes

2017-01-23 10:44:52 +00:00

cipher_test.go

ssh: Add the hmac-sha2-256-etm@openssh.com algorithm

2017-02-08 15:25:40 +00:00

cipher.go

ssh: Add the hmac-sha2-256-etm@openssh.com algorithm

2017-02-08 15:25:40 +00:00

client_auth_test.go

ssh: support MaxAuthTries on ServerConfig

2017-04-10 10:56:18 +00:00

client_auth.go

ssh: improve client public key authentication

2017-04-03 15:29:32 +00:00

client_test.go

ssh: fix format string in client_test.go

2017-04-05 14:40:39 +00:00

client.go

ssh: support forwarding of Unix domain socket connections

2017-04-10 09:27:34 +00:00

common.go

ssh: reject RekeyThresholds over MaxInt64

2017-04-04 16:19:47 +00:00

connection.go

crypto/ssh: keep user in ConnMetadata if NoClientAuth is used

2016-08-24 15:16:49 +00:00

doc.go

ssh: require host key checking in the ClientConfig

2017-03-30 15:57:35 +00:00

example_test.go

ssh: require host key checking in the ClientConfig

2017-03-30 15:57:35 +00:00

handshake_test.go

ssh: reject RekeyThresholds over MaxInt64

2017-04-04 16:19:47 +00:00

handshake.go

ssh: handle error from prepareKeyChange.

2017-03-30 16:00:32 +00:00

kex_test.go

x/crypto/ssh: close memPipe after running kex test.

2015-08-17 22:17:06 +00:00

kex.go

ssh: bound DH public values to [2, p-2].

2016-10-10 21:14:46 +00:00

keys_test.go

x/crypto/ssh: Add FingerprintLegacyMD5 and FingerprintSHA256 methods

2016-11-22 14:27:12 +00:00

keys.go

ssh: Add support for RSA keys stored in OpenSSH's new format

2017-04-05 15:38:54 +00:00

mac.go

ssh: Add the hmac-sha2-256-etm@openssh.com algorithm

2017-02-08 15:25:40 +00:00

mempipe_test.go

ssh: fix spelling of test so that it runs

2015-07-15 23:39:58 +00:00

messages_test.go

x/crypto/ssh: support more keytypes in the agent.

2016-04-25 17:01:51 +00:00

messages.go

x/crypto/ssh: support more keytypes in the agent.

2016-04-25 17:01:51 +00:00

mux_test.go

ssh: add debug print at the lowest level

2017-02-02 09:54:18 +00:00

mux.go

ssh: soft code internal channel size for testing purposes

2017-01-23 10:44:52 +00:00

server.go

ssh: support MaxAuthTries on ServerConfig

2017-04-10 10:56:18 +00:00

session_test.go

ssh: require host key checking in the ClientConfig

2017-03-30 15:57:35 +00:00

session.go

x/crypto/ssh: handle missing exit status more gracefully.

2016-07-06 18:05:22 +00:00

streamlocal.go

ssh: support forwarding of Unix domain socket connections

2017-04-10 09:27:34 +00:00

tcpip_test.go

go.crypto/ssh: import gosshnew.

2014-04-09 13:57:52 -07:00

tcpip.go

ssh: support forwarding of Unix domain socket connections

2017-04-10 09:27:34 +00:00

testdata_test.go

x/crypto: fix typos

2016-07-06 16:40:51 +00:00

transport_test.go

go.crypto/ssh: import gosshnew.

2014-04-09 13:57:52 -07:00

transport.go

ssh: Add the hmac-sha2-256-etm@openssh.com algorithm

2017-02-08 15:25:40 +00:00