v0.0.16.0

This is a pre-release (non-production ready)

This release includes the following bug fixes/enhancements:

• Crypto transitioned from OpenSSL to LibreSSL
• Improvements to UtilityScripts (#749, #750, #751, #756, #758)
• Support for SFTP only server for Windows (#757)
• Support for Unicode input in interactive sessions (#711)
• UX issues with warning and passphrase promts (#692)
• Other misc issues listed here

Known issue:

• sshd service failed to start after installation on Win7(#770). See issue details for a work around.
• UtilityScripts does not handle Localized User correctly(#771). See Security protection wiki to manually fix the file permissions if you run on non-English build.

v0.0.15.0

This is a pre-release (non-production ready)

Note: This release added security enhancements that might break existing configurations.
The changes ensure that permissions on OpenSSH file based resources (keys and configuration) would not allow any unauthorized access. UtilityScripts are included to help with fixing permission related issues.

For automated host side upgrades, it is recommended to run the following included utility to prevent possible lockouts due to broken sshd configuration:
FixHostFilePermissions.ps1 -Confirm:$false

Also includes the following bug fixes/enhancements:

• Added initial port of ssh-keyscan.exe (#732)
• Support for binary data over SSH stdin (#658)
• Removed unwanted sshd service account privileges (#726)
• Improved WinSCP experience (#539)
• Fixed regression in ssh-agent - rejecting key sign requests from sshd service. (#734)
• Fixed issues in Docker scenarios (#666)
• Other misc issues listed here

v0.0.14.0

This is a pre-release (non-production ready)

Bug fixes

• Fix for key based authentication for Docker containers. (#677)
• Fix to ssh-agent when the sshd is not installed. (#558)
• Fixed a bug where ssh-keygen would not overwrite an existing file, even if the user confirmed. (#685)
• Fixed a bug where read values in registry would report error. (#645)
• Fixed logging in sshd before loading the private host key files. (#708)
• Fixed ssh client title. (#722)
• Other misc issues listed here

Note on v0.0.13.0 release

You may have noticed that we pulled down the v0.0.13.0 release. With that release, we had an introduced a new requirement to securely ACL certain files.

That design proved somewhat premature, and before requiring everyone to re-ACL files across their environment, we decided to pull the release in order to get the design right. Expect a release in the near future that will require some kind re-ACL'ing (but not just yet). 👍

v0.0.12.0

This is a pre-release (non-production ready)

Includes:

• Fixes to several redirection related issues with ssh.exe and sftp.exe
  • Following will now work
    • ssh ... > out.txt
    • $o = ssh ... (in Powershell)
    • sftp -b .... > out.txt
• Removal of ssh-lsa.dll. There is now no reboot restriction on setup.

and other misc issues listed here

Note
It seems that the key based authentication is not working for docker containers. For docker scenarios, continue using v0.0.11.0 until this issue is fixed.

v0.0.11.0

This is a pre-release (non-production ready)

Includes:

• Latest changes from OpenSSH main repo (synced to 7.5p1)
• Fix to Sshfs issue introduced in 0.0.9.0
• Support for ssh redirection in Powershell ($o = ssh ... )
• Install-sshd.ps1 support for Nano

and other misc issues listed here

NOTE - Breaking Change

• Due to a security issue that got fixed in this release, SSHD account now needs read access to "authorized_keys. Otherwise pubkey authentication will fail. Do the following:

   $authorizedKeyPath = "c:\users\user\.ssh\authorized_keys"
   $acl = get-acl $authorizedKeyPath
   $ar = New-Object  System.Security.AccessControl.FileSystemAccessRule("NT Service\sshd", "Read", "Allow")
   $acl.SetAccessRule($ar)
   Set-Acl  $authorizedKeyPath $acl

v0.0.10.0

This is a pre-release (non-production ready)

Includes:

• Fix to remote commadline issue introduced in 0.0.9.0
• Various terminal related issues

Wiki added to help understand TTY/PTY implementation in Windows

List of closed issues here

v0.0.9.0

This is a pre-release (non-production ready)

Includes :

• Double hop support for password auth
• Support for Allow/Deny Users and Allow/Deny Groups
• Removed restriction on SCP file size
• Fixes to other issues listed here

v0.0.8.0

This is a pre-release (non-production ready)

Includes fixes to intermittent failures with key based authentication, issue with ssh.exe exit code, and other miscellaneous issues listed here

v0.0.7.0

_This is a pre-release (non-production ready)_

Includes fixes to intermittent crashes in sshd, issues in sftp and scp, and other miscellaneous issues listed here

v0.0.6.0

_This is a pre-release (non-production ready)_

Includes fixes to regression in v0.0.5.0 and minor issues in scp and sftp.