wireguard-openbsd - WireGuard implementation for the OpenBSD kernel

	Commit message (Collapse)	Author	Age	Files	Lines
*	Add support for Unix domain socket forwarding. A remote TCP port	millert	2014-07-15	1	-1/+2
\| \| \| \| \| \| \| \|	may be forwarded to a local Unix domain socket and vice versa or both ends may be a Unix domain socket. This is a reimplementation of the streamlocal patches by William Ahern from: http://www.25thandclement.com/~william/projects/streamlocal.html OK djm@ markus@
*	unifdef -DBSD_AUTH	djm	2007-09-21	1	-25/+1
\| \| \| \| \| \| \|	unifdef -USKEY These options have been in use for some years; ok markus@ "no objection" millert@
*	missed include bits from last commit	djm	2007-08-23	1	-2/+2
\|
*	unifdef HAVE_LOGIN_CAP; ok deraadt@ millert@	djm	2007-08-23	1	-5/+1
\|
*	almost entirely get rid of the culture of ".h files that include .h files"	deraadt	2006-08-03	1	-3/+4
\| \| \| \| \|	ok djm, sort of ok stevesk makes the pain stop in one easy step
*	move #include <stdio.h> out of includes.h	stevesk	2006-08-01	1	-1/+2
\|
*	move #include <string.h> out of includes.h	stevesk	2006-07-22	1	-1/+2
\|
*	move #include <pwd.h> out of includes.h; ok markus@	stevesk	2006-07-06	1	-1/+5
\|
*	Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that	djm	2006-03-25	1	-0/+1
\| \| \| \|	Theo nuked - our scripts to sync -portable need them in the files
*	RCSID() can die	deraadt	2006-03-19	1	-1/+0
\|
*	auth_usercheck(3) can return NULL, so check for that. Report from	otto	2005-07-19	1	-1/+3
\| \| \| \|	mpech@. ok markus@
*	#if -> #ifdef so builds without HAVE_LOGIN_CAP work too; ok djm@ otto@	dtucker	2005-01-24	1	-2/+2
\|
*	Warn in advance for password and account expiry; initialize loginmsg	otto	2005-01-21	1	-1/+50
\| \| \| \|	buffer earlier and clear it after privsep fork. ok and help dtucker@ markus@
*	support for password change; ok dtucker@	markus	2004-01-30	1	-20/+50
\| \| \| \|	(set password-dead=1w in login.conf to use this).
*	standardise arguments to auth methods - they should all take authctxt.	djm	2003-11-04	1	-4/+1
\| \| \| \|	check authctxt->valid rather then pw != NULL; ok markus@
*	fix passwd auth for 'username leaks via timing'; with djm@, original patches from solar	markus	2003-08-26	1	-6/+7
\|
*	remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);	markus	2003-07-22	1	-9/+1
\| \| \| \|	test+ok henning@
*	don't include unused code in the #ifdef BSD_AUTH case; ok markus@	stevesk	2002-05-24	1	-9/+14
\|
*	Reverted from last patch. Breaks AFS/KRBx.	mouring	2002-05-10	1	-2/+2
\|
*	When options.permit_empty_passwd == 0 ensure you are checking pw->passwd not	mouring	2002-05-06	1	-2/+2
\| \| \| \|	password.
*	unused include	markus	2002-03-04	1	-2/+1
\|
*	Kerberos v5 support for SSH1, mostly from Assar Westerlund <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok	dugsong	2001-06-26	1	-10/+16
\|
*	add changes need for BSD_AUTH plus disabled BSD_AUTH code	markus	2001-03-20	1	-3/+13
\|
*	PermitRootLogin={yes,without-password,forced-commands-only,no}	markus	2001-02-12	1	-2/+2
\| \| \| \|	(before this change, root could login even if PermitRootLogin==no)
*	split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.	markus	2001-01-21	1	-4/+3
\| \| \| \|	rename util.[ch] -> misc.[ch]
*	1) removes fake skey from sshd, since this will be much	markus	2001-01-18	1	-32/+3
\| \| \| \| \| \| \|	harder with /usr/libexec/auth/login_XXX 2) share/unify code used in ssh-1 and ssh-2 authentication (server side) 3) make addition of BSD_AUTH and other challenge reponse methods easier.
*	move fake-auth from auth1.c to individual auth methods, disables s/key in debug-msg	markus	2000-10-03	1	-2/+2
\|
*	cleanup copyright notices on all files. I have attempted to be accurate with	deraadt	2000-09-07	1	-2/+53
\| \| \| \| \| \| \|	the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
*	OpenBSD tag	markus	2000-06-20	1	-1/+1
\|
*	whitespace cleanup	markus	2000-04-14	1	-2/+2
\|
*	check for NULL 1st	markus	1999-12-29	1	-4/+4
\|
*	move skey-auth from auth-passwd.c to auth-skey.c, same for krb4	markus	1999-12-01	1	-123/+10
\|
*	KNF, final part 3	markus	1999-11-24	1	-19/+19
\|
*	much more KNF	deraadt	1999-11-24	1	-37/+46
\|
*	KNF part 1	markus	1999-11-23	1	-138/+130
\|
*	remove x11- and krb-cleanup from fatal() + krb-cleanup cleanup	markus	1999-11-10	1	-19/+13
\|
*	stop leak; after branch, builders take note	deraadt	1999-10-19	1	-3/+3
\|
*	PermitRootLogin={yes,no,without-password}, default=yes, ok deraadt,niels	markus	1999-10-14	1	-1/+7
\|
*	add skey to sshd:	markus	1999-10-07	1	-29/+37
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	1) pass *pw to auth_password() not user_name, do_authentication already keeps private copy of struct passwd for current user. 2) limit authentication attemps to 5, otherwise ssh -o 'NumberOfPasswordPrompts 100000' host lets you enter 100000 passwds 3) make s/key a run-time option in /etc/sshd_config 4) generate fake skeys, for s/key for nonexisting users, too limit auth-tries for nonexisting users, too. Note that % ssh -l nonexisting-user -o 'NumberOfPasswordPrompts 100000' host has NO limits in ssh-1.2.27
*	more culling	deraadt	1999-09-30	1	-172/+1
\|
*	don't let pw->pw_{name,passwd} get clobbered	dugsong	1999-09-29	1	-7/+14
\|
*	numerous sprintf, strncpy, strcpy cleanups	deraadt	1999-09-29	1	-10/+9
\|
*	update krb4/AFS support to ssh-1.2.27-afs-kerberos-pl1 level, clean up unused variables, update manpages	dugsong	1999-09-29	1	-106/+94
\|
*	i bet a lot of people didn't know what ssh 1.2.16 had a nice license.	deraadt	1999-09-26	1	-0/+343
	well, except for the patent issues. someone in sweden (forget their name at the moment) cleaned out most of the patented code, and now this code removes rsa code. when this is done, it will link against libssl, but the work isn't completely done yet. then we need to bring this up to modern days, featurewise.