Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | do gid/groups-swap in addition to uid-swap, should help if /home/group | 2001-04-06 | 1 | -2/+2 | ||
| | | | | | is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks to olar@openwall.com is comments. we had many requests for this. | |||||
* | KNF | 2001-03-01 | 1 | -3/+3 | ||
| | ||||||
* | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. | 2001-01-21 | 1 | -7/+7 | ||
| | | | | rename util.[ch] -> misc.[ch] | |||||
* | typo | 2001-01-20 | 1 | -2/+2 | ||
| | ||||||
* | pass the filename to auth_parse_options() | 2001-01-20 | 1 | -5/+5 | ||
| | ||||||
* | move ssh1 definitions to ssh1.h, pathnames to pathnames.h | 2001-01-19 | 1 | -6/+8 | ||
| | ||||||
* | replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned' | 2000-12-19 | 1 | -6/+6 | ||
| | | | | with u_char. | |||||
* | parse options only if key matches; fixes some confusing messages seen by the client | 2000-11-14 | 1 | -7/+7 | ||
| | ||||||
* | do not send RSA challenge if key is not allowed by key-options; from eivind@ThinkSec.com | 2000-10-14 | 1 | -4/+9 | ||
| | ||||||
* | clear auth options unless auth sucessfull | 2000-10-11 | 1 | -1/+3 | ||
| | ||||||
* | move fake-auth from auth1.c to individual auth methods, disables s/key in debug-msg | 2000-10-03 | 1 | -2/+9 | ||
| | ||||||
* | some more Copyright fixes | 2000-09-07 | 1 | -24/+1 | ||
| | ||||||
* | cleanup copyright notices on all files. I have attempted to be accurate with | 2000-09-07 | 1 | -8/+29 | ||
| | | | | | | | the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate. | |||||
* | clean code is good code | 2000-07-07 | 1 | -3/+3 | ||
| | ||||||
* | OpenBSD tag | 2000-06-20 | 1 | -1/+1 | ||
| | ||||||
* | split auth-rsa option parsing into auth-options | 2000-06-18 | 1 | -196/+3 | ||
| | | | | add options support to authorized_keys2 | |||||
* | fix match_hostname() logic for auth-rsa: deny access if we have a negative match or no match at all | 2000-06-06 | 1 | -5/+13 | ||
| | ||||||
* | keysize warnings error() -> log() | 2000-04-29 | 1 | -2/+1 | ||
| | ||||||
* | missing fclose | 2000-04-26 | 1 | -1/+2 | ||
| | ||||||
* | whitespace cleanup | 2000-04-14 | 1 | -8/+8 | ||
| | ||||||
* | #include <ssl/foo.h> -> <openssh/foo.h> | 2000-04-12 | 1 | -3/+3 | ||
| | ||||||
* | initial support for DSA keys. ok deraadt@, niels@ | 2000-03-23 | 1 | -22/+15 | ||
| | ||||||
* | delay MD5 computation until client sends response, free() early, cleanup. | 2000-02-11 | 1 | -15/+12 | ||
| | ||||||
* | fix user/1056, sshd keeps restrictions; dbt@meat.net | 2000-01-18 | 1 | -1/+16 | ||
| | ||||||
* | warn only about mismatch if key is _used_ | 1999-12-02 | 1 | -5/+5 | ||
| | ||||||
* | warn about keysize-mismatch with log() not error() | 1999-12-02 | 1 | -4/+4 | ||
| | ||||||
* | KNF, final part 3 | 1999-11-24 | 1 | -41/+54 | ||
| | ||||||
* | much more KNF | 1999-11-24 | 1 | -16/+16 | ||
| | ||||||
* | KNF part 1 | 1999-11-23 | 1 | -405/+370 | ||
| | ||||||
* | syslog changes: | 1999-11-22 | 1 | -2/+2 | ||
| | | | | | | | | | | | * Unified Logmessage for all auth-types, for success and for failed * Standard connections get only ONE line in the LOG when level==LOG: Auth-attempts are logged only, if authentication is: a) successfull or b) with passwd or c) we had more than AUTH_FAIL_LOG failues * many log() became verbose() * old behaviour with level=VERBOSE | |||||
* | more %d vs. %s in fmt-strings | 1999-11-18 | 1 | -2/+2 | ||
| | ||||||
* | the keysize of rsa-parameter 'n' is passed implizit, | 1999-11-15 | 1 | -9/+15 | ||
| | | | | a few more checks and warnings about 'pretended' keysizes. | |||||
* | make all access to options via 'extern Options options' | 1999-11-11 | 1 | -3/+5 | ||
| | | | | | | | | and 'extern ServerOptions options' respectively; options are no longer passed as arguments: * make options handling more consistent * remove #include "readconf.h" from ssh.h * readconf.h is only included if necessary | |||||
* | replace assert() with error, fatal or packet_disconnect | 1999-11-02 | 1 | -2/+3 | ||
| | ||||||
* | use libssl md5 routines | 1999-10-27 | 1 | -6/+6 | ||
| | ||||||
* | the session key is only the least significant 256-bits, mask the rest away | 1999-10-18 | 1 | -2/+2 | ||
| | ||||||
* | make sure ~/.ssh/authorized_keys is not writable for group/world (sshd) | 1999-10-11 | 1 | -5/+45 | ||
| | | | | don't load private keys if they are group/world-{rwx} (ssh,sshd and ssh-add) | |||||
* | use libc md5 | 1999-09-30 | 1 | -3/+3 | ||
| | ||||||
* | numerous sprintf, strncpy, strcpy cleanups | 1999-09-29 | 1 | -2/+3 | ||
| | ||||||
* | convert all uses of gmp to SSL bignum | 1999-09-28 | 1 | -0/+437 | ||
convert all used of rsa to SSL rsa functions remove all use of randomstate to OpenBSD arc4random() and arc4_stir() all this done at a long long night in Canada. |