Thema: SSH/SSL/VPN Tools...

[SiLæncer]

Changelog

    Implemented mitigations for the Minerva attack as discussed in the security notification:

        On Windows 10, Windows Server 2016 and 2019, the algorithms ECDSA/secp256k1 and ECDH/secp256k1 now use Windows cryptography. As a result, these algorithms are now also available when FIPS mode is enabled in Windows.

        On Windows Vista to 8.1, and Windows Server 2008 to 2012 R2, the algorithms ECDSA/secp256k1 and ECDH/secp256k1 now use OpenSSL instead of Crypto++. As a side effect, use of these algorithms on Windows Vista now requires at least Service Pack 1 (OpenSSL will fail to initialize on Vista without service packs).

        On Windows XP and Windows Server 2003, our software continues to use Crypto++ for all algorithms, but implements mitigations to make it harder or impossible to observe signature timing remotely. Continuing support for these Windows versions is increasingly impractical for multiple reasons including cryptography. Like Microsoft and other software vendors have done, we will need to stop supporting these platforms eventually, but we still support them right now.

    When using single-click Remote Desktop forwarding, the SSH Client now runs mstsc.exe using its full system path. Previously, if the SSH Client was run by double-clicking a profile, and there was a copy of mstsc.exe or an impostor executable in the same directory, the potentially unintended executable would be run.

    The SSH Client can now import OpenSSH private keys encrypted using CTR mode algorithms.

[close]

https://www.bitvise.com/ssh-client

[SiLæncer]

Changelog

2019.10.30 -- Version 2.4.8
Antonio Quartulli (1):
      mbedtls: fix segfault by calling mbedtls_cipher_free() in cipher_ctx_free()

Arne Schwabe (1):
      Remove -no-cpp-precomp flag from Darwin builds

David Sommerseth (3):
      cleanup: Remove RPM openvpn.spec build approach
      docs: Update INSTALL
      build: Package missing mock_msg.h

Gert Doering (4):
      repair windows builds (2.4)
      Increase listen() backlog queue to 32
      Force combinationation of --socks-proxy and --proto UDP to use IPv4.
      Fix IPv6 routes on tap interfaces on OpenSolaris/OpenIndiana

Gisle Vanem (1):
      Wrong FILETYPE in .rc files

Hilko Bengen (1):
      Do not set pkcs11-helper 'safe fork mode'

Ilya Shipitsin (2):
      travis-ci: add "linux-ppc64le" to build matrix, change trusty image to xenial, update osx to xcode9.4 and modernize brew management
      travis-ci: fix osx builds

Kyle Evans (1):
      tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.

Lev Stipakov (1):
      Fix various compiler warnings

Matthias Andree (1):
      Fix regression, reinstate LibreSSL support.

Michal Soltys (1):
      man: correct the description of --capath and --crl-verify regarding CRLs

Mykola Baibuz (1):
      Fix typo in NTLM proxy debug message

Richard Bonhomme (1):
      Ignore --pull-filter for --mode server

Rosen Penev (1):
      openssl: Fix compilation without deprecated OpenSSL 1.1 APIs

Selva Nair (3):
      Better error message when script fails due to script-security setting
      Correct the return value of cryptoapi RSA signature callbacks
      Handle PSS padding in cryptoapicert

Steffan Karger (1):
      cmocka: use relative paths

Thomas Quinot (1):
      Fix documentation of tls-verify script argument

[close]

https://openvpn.net/community/

[SiLæncer]

WinSSHTerm helps you to be more productive. Using keyboard shortcuts and intelligent navigation tools allows you to quickly switch between or start new SSH sessions even if you have to manage many systems. It has built-in support for copying files and running X applications. The terminal colors are carefully selected to minimize the stress for your eyes. WinSSHTerm is easy to use, lightweight and stable.

Freeware

Changelog

    New options for manipulating the shared connections file (File->Export shared)
    Copy Files: New default custom arguments (display correct session name / open up each WinSCP session in a new window)
    Minor changes to the GUI

[close]

http://winsshterm.blogspot.com/

[SiLæncer]

KiTTY is a fork of the popular PuTTY telnet and SSH client with additional features packaged as a portable app, so you can connect in to your systems on the go.

Whats new:>>

    new feature: force CRLF on Enter key (see https://github.com/gniemirowski/putty-crlf)
    bug fix: automatic generation of version.h file
    bug fix: save position on exit did not allow negative values (dual monitors)
    cleaning: ACS patch completely removed

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/

[SiLæncer]

Whats new:>>

    New feature: Easy private key conversion from OpenSSH to PuTTY format by using the keygen feature of WinSCP.com (Tools->Convert OpenSSH key)
    Copy Files: session names with white spaces now correctly shown / added user and host to session name (File->Preferences->Copy Files->Set default)
    Bug fix: Loading shared connections from local cache could cause an app crash

http://winsshterm.blogspot.com/

[SiLæncer]

Changelog

    New features:

    Various text files converted to Markdown format.

    Bug fixes:

    Support for realpath(3) implementations incompatible with POSIX.1-2008, such as 4.4BSD or Solaris.
    Support for engines without PRNG seeding methods (thx to Petr Mikhalitsyn).
    Retry unsuccessful port binding on configuration file reload.
    Thread safety fixes in SSL_SESSION object handling.
    Terminate clients on exit in the FORK threading model.

[close]

https://www.stunnel.org/index.html

[SiLæncer]

Changelog

When connecting through a proxy, if the setting Resolve DNS names locally was enabled, the SSH Client would often resolve DNS names remotely (via the proxy) anyway. Fixed.

[close]

https://www.bitvise.com/ssh-client

[SiLæncer]

Generate the files and parameters that are necessary for an OpenVPN server and client to run properly with commands using this app.

Freeware

Whats new:>>

    Adds support for ECDSA keys
    Adds support for EdDSA keys
    Adds option to suffix server file names
    List of available curves can be shown
    Updates OpenSSL to version 1.1.1d
    Various bug fixes and enhancements

https://www.sparklabs.com/blog/openvpn-configuration-generator/

[SiLæncer]

Changelog

    This version contains a minor upgrade access amnesty so that users who would otherwise upgrade to version 8.36 can instead upgrade to the latest version with more fixes. The minimum upgrade access to use this version is October 27, 2019.

    Reliability issue: In SSH Server version 8.21, we introduced difference comparisons to reduce an overwhelming amount of logging that would previously occur when large SSH Server settings were changed. We recently discovered the difference comparison algorithm had corner cases which could cause it to run out of stack and cause the SSH Server to crash. Fixed by using a new difference comparison algorithm which is non-recursive and has better and more consistent performance.

    We received multiple reports indicating that the SSH.com Tectia client, when connecting from a mainframe, intermittently reports an error consistent with the client incorrectly handling global requests during a channel open. Until further news, the SSH Server now treats all versions of the SSH.com Tectia client as incapable of receiving global requests.

    When a proxy profile is configured for client-to-server port forwarding, if the setting Resolve locally was enabled, the SSH Server would often resolve DNS names remotely (via the proxy) anyway. Fixed.

    Terminal:

        In a terminal console, Shift+Tab will now cycle items in reverse direction (opposite of Tab), as expected.

        In BvShell, the command mkdir -p now succeeds if the directory already exists. This brings its behavior in line with mkdir in bash, improving compatibility with SCP clients that send commands like "mkdir -p .", expecting them to succeed.

    FTPS:

        Self-signed certificates for FTPS, as well as certificate signing requests, were previously incorrectly generated using RSA + SHA-1 signing instead of RSA + SHA-256. Fixed (on Windows Vista and newer; limited to SHA-1 on Windows XP and 2003).

        Self-signed certificates for FTPS were previously generated without certificate signing enabled in encoded key usage. This prevented self-signed certificates from working with e.g. curl --cacert. Fixed.

        Re-categorized a type of FTPS disconnect event as an Info which was previously incorrectly a Warning.

[close]

https://www.bitvise.com/ssh-server-version-history

[SiLæncer]

PuTTYTabManager is a handy application that allows you to run multiple PuTTY applications using a single GUI. The application support all the PuTTY protocols, such as SSH, Telnet, Rlogin and Raw.

The tab-based interface makes the application very easy to use, enabling you to manage multiple PuTTY sessions at the same time. Instead of opening multiple PuTTY windows, simply open PuTTYTabManager and initiate every session in a new tab.

Freeware

Whats new:>>

Several minor bugs fixed

https://sites.google.com/site/macdsite/utilidades/puttytabmanager

[SiLæncer]

Changelog

    ADD: Ability to send input `To Visible Tabs` from the compose bar/pane
    ADD: New MAC algorithms (umac-64@openssh.com,umac-128@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com)
    ADD: New host key algorithm (rsa-sha2-256,rsa-sha2-512)
    ADD: True-colored terminal
    MOD: Ctrl+Double click changed to channel duplication
    MOD: Improved Find result visibility
    MOD: Improved product key recognition during installation
    MOD: Users can further classify Xagent`s role: authentication or agent forwarding
    FIX: Color selection window gets smaller on high DPI monitors
    FIX: Crash when opening many sessions in separate windows
    FIX: Incorrect shortcut key in context menu (Ctrl+Pause)
    FIX: Missing information from the "set" command`s help

[close]

http://www.netsarang.com/products/xsh_overview.html

[SiLæncer]

Whats new:>>

    New feature: Integrated PuTTY's feature "Restart session" (Tab->Reconnect gracefully)
    When PuTTY/KiTTY detects a connection loss, the fatal error popup will now automatically be closed
    New shortcuts for reconnecting and closing sessions (Navigate->Shortcuts)

http://winsshterm.blogspot.com/

[SiLæncer]

Whats new:>>

    bug fix: at auto-reconnection automatic command was not sent
    bug fix: add source files for personal dependencies
    new feature: preparing for automatic cross compile (make -e TOOLPATH=/usr/bin/i686-w64-mingw32- -f MAKEFILE.MINGW cross)

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/

[SiLæncer]

Whats new:>>

    New feature: In case there are problems when opening a connection you can now get more verbose output by clicking on "Check connection" in the connections window
    Bug fix: Adding a shared connection/folder when a top level node is selected
    Bug fix: When reconnecting there was a possibility that the tab didn't get marked with "!!"

http://winsshterm.blogspot.com/

[SiLæncer]

Whats new:>>

bugfix: reading buffer size error

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/