master
tests: Add coverage for the server global request callback path
Fix shellcheck issues
bignum: Make sure the padding is large enough for the number
config_parser: reject trailing garbage in numeric config values
Use ARRAY_SIZE systematically
tests: Avoid warnings about unused arguments
Use calloc instead of zeroizing structure after malloc
CVE-2026-59843 tests: Verify zero max packet size in channel open is rejected
client: add ServerAliveCountMax config option parsing and storage
tests: Skip chacha20-poly1305 tests in FIPS mode
tests:unittests: Fix tests on FreeBSD
tests: Add dedicated unit tests for getopt abstraction
session: Refactor ssh_get_publickey_hash
init: Introduce internal is_ssh_initialized()
torture: Remove unused variable
Remove support for DSA Keys
Reproducer for memory leak from parsing knonw hosts
tests: Added NULL checks in torture_list.c
tests: cover %n and HostName handling
tests: Use fseek instead of rewind to simplify error checking
mbedtls: Initial migration to PSA-Crypto API (v4)
Test Coverage for PING/Pong
pki: add ssh_key_type_and_hash_from_signature_name()
tests: Use the new ssh_pki_generate_key() where possible
tests: Provide minimal openssl configuration file
tests: Negative tests for ssh_pki_ctx_options_set
tests(pki): add torture tests for pki_sk functions
tests(pki): add torture tests for security keys
tests: Introduce functions to change directories
crytpo: Make sure we check return of ssh_get_random() correctly
tests: Fix variable names to avoid codespell issues
tests(fido2): add tests for the usb-hid security key callbacks
tests: add unit tests for ssh_set_counters()
tests(string): add tests for ssh_string_from_data function
tests: Introduce torture_make_temp_dir()
tests: use torture_create_temp_file() in torture_knownhosts_parsing
tests: Make the static ananlyzers happy with the threads
tests: Init cipher structure in thread_crypto_aes256_cbc()
tests: Use UNUSED macros in torture_threads_init
torture_tokens.c: Add tests for new token functions
feat: Handle hostkeys like OpenSSH fix: memory leak fix: add defaults after parsing fix: set defaults in ssh_bind_listen tests: add test for checking default hostkey paths remove: null check for hostkey paths, can't happen since we set defaults now examples: ssh_server remove "no default keys", default hostkeys set in ssh_bind_listen
CVE-2026-0968 tests: Reproducer for invalid longname data