Based on a patch brought by Johnny Luong, libcurl now offers
CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and the curl tool --hostpubmd5. They both make the SCP or SFTP connection verify the remote host's md5 checksum of the public key before doing a connect, to reduce the risk of a man-in-the-middle attack.
This commit is contained in:
@@ -2,8 +2,8 @@ Curl and libcurl 7.17.1
|
||||
|
||||
Public curl release number: 102
|
||||
Releases counted from the very beginning: 128
|
||||
Available command line options: 120
|
||||
Available curl_easy_setopt() options: 144
|
||||
Available command line options: 121
|
||||
Available curl_easy_setopt() options: 145
|
||||
Number of public functions in libcurl: 55
|
||||
Amount of public web site mirrors: 42
|
||||
Number of known libcurl bindings: 36
|
||||
@@ -16,6 +16,7 @@ This release includes the following changes:
|
||||
o added --proxy-negotiate
|
||||
o added --post301 and CURLOPT_POST301
|
||||
o builds with c-ares 1.5.0
|
||||
o added CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and --hostpubmd5
|
||||
|
||||
This release includes the following bugfixes:
|
||||
|
||||
@@ -47,6 +48,6 @@ This release would not have looked like this without help, code, reports and
|
||||
advice from friends like these:
|
||||
|
||||
Dan Fandrich, Michal Marek, G<>nter Knauf, Rob Crittenden, Immanuel Gregoire,
|
||||
Mark Davies, Max Katsev, Philip Langdale, Alex Fishman
|
||||
Mark Davies, Max Katsev, Philip Langdale, Alex Fishman, Johnny Luong
|
||||
|
||||
Thanks! (and sorry if I forgot to mention someone)
|
||||
|
||||
Reference in New Issue
Block a user