)]}'
{
  "commit": "e2ffffe738fb46531cd8924bab497bdc77d9ecc8",
  "tree": "b1c31ba161d1d87446d4d1fe3235d0b7acfe37a2",
  "parents": [
    "60e158ad30c226555794539d96f0f104f43395f7"
  ],
  "author": {
    "name": "povcfe",
    "email": "povcfe2sec@gmail.com",
    "time": "Mon May 04 03:14:35 2026 +0000"
  },
  "committer": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Tue Jun 02 00:25:39 2026 -0700"
  },
  "message": "ssh: reject incomplete gssapi-with-mic configurations\n\nMake the runtime gssapi-with-mic guard match the existing\nconfiguration and method advertisement checks.\n\nAn incomplete GSSAPIWithMICConfig can be treated as unavailable when\nbuilding the advertised auth method list, while still remaining\nreachable from the runtime auth dispatcher. Treat incomplete\nconfigurations as not configured.\n\nThis change introduces a single internal completeness check for\nGSSAPIWithMICConfig and uses it for the startup authentication\nvalidation, the runtime gssapi-with-mic dispatch guard, and the\nadvertised authentication method list.\n\nThe change also adds a regression test. The test configures a server\nwith a normal PasswordCallback, a GSSAPIWithMICConfig with Server set,\nand AllowLogin intentionally unset. It then uses a custom client auth\nmethod that explicitly sends a USERAUTH_REQUEST with Method set to\ngssapi-with-mic even though the server does not advertise that method,\nand verifies that authentication fails cleanly with\n\"ssh: gssapi-with-mic auth not configured\".\n\nNo golang/go issue reference is available yet.\n\nChange-Id: I9a0c965d3a56192bd68309aa41e2c1f91952036c\nGitHub-Last-Rev: 0267bda8e15e7c258ba3b92cd54f0941534c5fc9\nGitHub-Pull-Request: golang/crypto#345\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/773460\nReviewed-by: Mark Freeman \u003cmarkfreeman@google.com\u003e\nReviewed-by: Nicola Murino \u003cnicola.murino@gmail.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nReviewed-by: Filippo Valsorda \u003cfilippo@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b994b780433db09ad304b073292538b83e5d340e",
      "old_mode": 33188,
      "old_path": "ssh/client_auth_test.go",
      "new_id": "2e48342b8e8a0330f8cb40b1006c06987807f47f",
      "new_mode": 33188,
      "new_path": "ssh/client_auth_test.go"
    },
    {
      "type": "modify",
      "old_id": "9292f0b2c5ccb44caddf7be067aeaf7eb17deed9",
      "old_mode": 33188,
      "old_path": "ssh/server.go",
      "new_id": "3c0fcc953eaa79d1f8d0cb1a7cd730c8ec6c05b1",
      "new_mode": 33188,
      "new_path": "ssh/server.go"
    }
  ]
}