sshproxy v1.6.3

Changes in v1.6.3:

• make tests more resilient
• Prevent ssh option injection

This is a security fix release, we advise all users of sshproxy to upgrade as soon as possible.

sshproxy v1.6.2

Changes in v1.6.2:

• Update copyright to 2024
• add nodeset capabilities to sshproxyctl
• add get_config function to sshproxyctl

sshproxy v1.6.1

Changes in v1.6.1:

• Add missing documentation for error_banner
• Upgrade of vendors
• disable etcd zap logs, and force etcd blocking connection

sshproxy v1.6.0

Changes in v1.6.0:

• cleanup and upgrade of vendors
• cleanup: stop using obsolete etcd module
• Only define an empty default route if no route is set AND a subconfig is used
• switch docker image from centos to fedora

Warning! The required minimum golang version is now 1.20

sshproxy v1.5.2

Changes in v1.5.2:

• Enhanced logs
• Bugfix: check host syntax for actions "enable", "disable" and "forget"
• Improve documentation, typos
• bugfix: if no route is set, define an empty default route
• ErrorBanner: bugfix when etcd is not configured
• add etcd.mandatory and max_connections_per_user options

sshproxy v1.5.1

Changes in v1.5.1:

• Add possibility to set environment variables for specific services
• Add possibility of persistent connections

sshproxy v1.5.0

Changes in v1.5.0:

Add an option to force the command executed by sshproxy.
Add an option to close the connection when original command does not match de force command.
Add an option to translate the command to something else.

Warning: there is a configuration change! A configuration is needed for SFTP to work as before. Please have a look at config/sshproxy.yaml and add the "translate_commands" block. You may need to change "internal-sftp" to something else if you're using something else than "internal-sftp". The value must be the same as the SFTP subsystem defined in your sshd_config.

sshproxy v1.4.0

Changes in v1.4.0:

• Bugfix: ordering maps of groups and users.

Warning: there is a configuration change! Users and groups are now in a table, so must be prefixed with a "-". Please have a look at the man pages.

sshproxy v1.3.8

Changes in v1.3.8:

• Add the possibility of comma-separated groups and users

sshproxy v1.3.7

Changes in v1.3.7:

• Management of an error banner (in config and etcd) when all backends are down or disabled.
• CI tests are now made with cirrus-ci.