You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Earl Warren 4ab8e56c91 restrict certificate type for builtin SSH server (#26789) ... - While doing some sanity checks over OpenSSH's code for how they handle certificates authentication. I stumbled on an condition that checks the certificate type is really an user certificate on the server-side authentication. This checks seems to be a formality and just for the sake of good domain seperation, because an user and host certificate don't differ in their generation, verification or flags that can be included. - Add this check to the builtin SSH server to stay close to the unwritten SSH specification. - This is an breaking change for setups where the builtin SSH server is being used and for some reason host certificates were being used for authentication. - (cherry picked from commit de35b141b79a3d6efe2127ed2c73fd481515e481) Refs: https://codeberg.org/forgejo/forgejo/pulls/1172 ## ⚠️ BREAKING ⚠️ Like OpenSSH, the built-in SSH server will now only accept SSH user certificates, not server certificates. Co-authored-by: Gusted <postmaster@gusted.xyz> Co-authored-by: Giteabot <teabot@gitea.io>		1 year ago
..
actions	chore(actions): support cron schedule task (#26655)	1 year ago
activitypub	Expanded minimum RSA Keylength to 3072 (#26604)	1 year ago
analyze	Rename code_langauge.go to code_language.go (#26377)	2 years ago
assetfs	Use `Set[Type]` instead of `map[Type]bool/struct{}`. (#26804)	1 year ago
auth	Use a general approach to access custom/static/builtin assets (#24022)	2 years ago
avatar	Remove nfnt/resize and oliamb/cutter (#25999)	2 years ago
base	Replace `interface{}` with `any` (#25686)	2 years ago
cache	improve unit test for caching (#26185)	2 years ago
charset	Replace `interface{}` with `any` (#25686)	2 years ago
container	…
context	Avoid double-unescaping of form value (#26853)	1 year ago
contexttest	Avoid double-unescaping of form value (#26853)	1 year ago
csv	Refactor locale number (#24134)	2 years ago
doctor	Add fix incorrect can_create_org_repo for org owner team (#26683)	1 year ago
emoji	Update emoji set to Unicode 15 (#25595)	2 years ago
eventsource	Less naked returns (#25713)	2 years ago
generate	Handle base64 decoding correctly to avoid panic (#26483)	1 year ago
git	Remove redundant nil check in `WalkGitLog` (#26773)	1 year ago
gitgraph	Add context cache as a request level cache (#22294)	2 years ago
graceful	Allow the use of alternative net.Listener implementations by downstreams (#25855)	2 years ago
hcaptcha	…
highlight	Upgrade go dependencies (#25819)	2 years ago
hostmatcher	…
html	Refactor backend SVG package and add tests (#26335)	2 years ago
httpcache	Less naked returns (#25713)	2 years ago
httplib	Less naked returns (#25713)	2 years ago
indexer	Fix counting and filtering on the dashboard page for issues (#26657)	1 year ago
issue/template	Replace `interface{}` with `any` (#25686)	2 years ago
json	Replace `interface{}` with `any` (#25686)	2 years ago
label	Make label templates have consistent behavior and priority (#23749)	2 years ago
lfs	Rewrite logger system (#24726)	2 years ago
log	Reduce some allocations in type conversion (#26772)	1 year ago
markup	Make `user-content-* ` consistent with github (#26388)	2 years ago
mcaptcha	…
metrics	Use a separate admin page to show global stats, remove `actions` stat (#25062)	2 years ago
migration	Replace `interface{}` with `any` (#25686)	2 years ago
nosql	Update tool dependencies, lock govulncheck and actionlint (#25655)	2 years ago
notification	Move `modules/mirror` to `services` (#26737)	1 year ago
options	Use a general approach to access custom/static/builtin assets (#24022)	2 years ago
packages	Use docs.gitea.com instead of docs.gitea.io (#26739)	1 year ago
paginator	Use more specific test methods (#24265)	2 years ago
pprof	…
private	Replace `interface{}` with `any` (#25686)	2 years ago
process	Less naked returns (#25713)	2 years ago
proxy	Use proxy for pull mirror (#22771)	2 years ago
proxyprotocol	…
public	Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974)	2 years ago
queue	Calculate MAX_WORKERS default value by CPU number (#26177)	2 years ago
recaptcha	…
references	…
regexplru	Upgrade go dependencies (#25819)	2 years ago
repository	Fix bug for ctx usage (#26762)	1 year ago
secret	Improve decryption failure message (#24573)	2 years ago
session	Replace `interface{}` with `any` (#25686)	2 years ago
setting	Fix some slice append usages (#26778)	1 year ago
sitemap	…
ssh	restrict certificate type for builtin SSH server (#26789)	1 year ago
storage	Use correct minio error (#26634)	1 year ago
structs	refactor(API): refactor secret creation and update functionality (#26751)	1 year ago
svg	Refactor backend SVG package and add tests (#26335)	2 years ago
sync	…
system	…
templates	Render code blocks in repo description (#26830)	1 year ago
test	Move web/api context related testing function into a separate package (#26859)	1 year ago
testlogger	Replace `interface{}` with `any` (#25686)	2 years ago
timeutil	Fix incorrect webhook time and use relative-time to display it (#24477)	2 years ago
translation	Replace `interface{}` with `any` (#25686)	2 years ago
turnstile	Add new captcha: cloudflare turnstile (#22369)	2 years ago
typesniffer	Detect ogg mime-type as audio or video (#26494)	1 year ago
updatechecker	…
upload	…
uri	…
user	…
util	Handle base64 decoding correctly to avoid panic (#26483)	1 year ago
validation	Check blocklist for emails when adding them to account (#26812)	1 year ago
web	Update tool dependencies (#26607)	1 year ago
webhook	New webhook trigger for receiving Pull Request review requests (#24481)	2 years ago