summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/auth-rsa.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* do gid/groups-swap in addition to uid-swap, should help if /home/groupmarkus2001-04-061-2/+2
| | | | | is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks to olar@openwall.com is comments. we had many requests for this.
* KNFderaadt2001-03-011-3/+3
|
* split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.markus2001-01-211-7/+7
| | | | rename util.[ch] -> misc.[ch]
* typomarkus2001-01-201-2/+2
|
* pass the filename to auth_parse_options()markus2001-01-201-5/+5
|
* move ssh1 definitions to ssh1.h, pathnames to pathnames.hmarkus2001-01-191-6/+8
|
* replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'markus2000-12-191-6/+6
| | | | with u_char.
* parse options only if key matches; fixes some confusing messages seen by the clientmarkus2000-11-141-7/+7
|
* do not send RSA challenge if key is not allowed by key-options; from eivind@ThinkSec.commarkus2000-10-141-4/+9
|
* clear auth options unless auth sucessfullmarkus2000-10-111-1/+3
|
* move fake-auth from auth1.c to individual auth methods, disables s/key in debug-msgmarkus2000-10-031-2/+9
|
* some more Copyright fixesmarkus2000-09-071-24/+1
|
* cleanup copyright notices on all files. I have attempted to be accurate withderaadt2000-09-071-8/+29
| | | | | | | the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
* clean code is good codetodd2000-07-071-3/+3
|
* OpenBSD tagmarkus2000-06-201-1/+1
|
* split auth-rsa option parsing into auth-optionsmarkus2000-06-181-196/+3
| | | | add options support to authorized_keys2
* fix match_hostname() logic for auth-rsa: deny access if we have a negative match or no match at allmarkus2000-06-061-5/+13
|
* keysize warnings error() -> log()markus2000-04-291-2/+1
|
* missing fclosemarkus2000-04-261-1/+2
|
* whitespace cleanupmarkus2000-04-141-8/+8
|
* #include <ssl/foo.h> -> <openssh/foo.h>markus2000-04-121-3/+3
|
* initial support for DSA keys. ok deraadt@, niels@markus2000-03-231-22/+15
|
* delay MD5 computation until client sends response, free() early, cleanup.markus2000-02-111-15/+12
|
* fix user/1056, sshd keeps restrictions; dbt@meat.netmarkus2000-01-181-1/+16
|
* warn only about mismatch if key is _used_markus1999-12-021-5/+5
|
* warn about keysize-mismatch with log() not error()markus1999-12-021-4/+4
|
* KNF, final part 3markus1999-11-241-41/+54
|
* much more KNFderaadt1999-11-241-16/+16
|
* KNF part 1markus1999-11-231-405/+370
|
* syslog changes:markus1999-11-221-2/+2
| | | | | | | | | | | * Unified Logmessage for all auth-types, for success and for failed * Standard connections get only ONE line in the LOG when level==LOG: Auth-attempts are logged only, if authentication is: a) successfull or b) with passwd or c) we had more than AUTH_FAIL_LOG failues * many log() became verbose() * old behaviour with level=VERBOSE
* more %d vs. %s in fmt-stringsmarkus1999-11-181-2/+2
|
* the keysize of rsa-parameter 'n' is passed implizit,markus1999-11-151-9/+15
| | | | a few more checks and warnings about 'pretended' keysizes.
* make all access to options via 'extern Options options'markus1999-11-111-3/+5
| | | | | | | | and 'extern ServerOptions options' respectively; options are no longer passed as arguments: * make options handling more consistent * remove #include "readconf.h" from ssh.h * readconf.h is only included if necessary
* replace assert() with error, fatal or packet_disconnectmarkus1999-11-021-2/+3
|
* use libssl md5 routinesderaadt1999-10-271-6/+6
|
* the session key is only the least significant 256-bits, mask the rest awayprovos1999-10-181-2/+2
|
* make sure ~/.ssh/authorized_keys is not writable for group/world (sshd)markus1999-10-111-5/+45
| | | | don't load private keys if they are group/world-{rwx} (ssh,sshd and ssh-add)
* use libc md5deraadt1999-09-301-3/+3
|
* numerous sprintf, strncpy, strcpy cleanupsderaadt1999-09-291-2/+3
|
* convert all uses of gmp to SSL bignumprovos1999-09-281-0/+437
convert all used of rsa to SSL rsa functions remove all use of randomstate to OpenBSD arc4random() and arc4_stir() all this done at a long long night in Canada.