| Commit message (Expand) | Author | Age | Files | Lines |
* | make ssh->kex->session_id a sshbuf instead of u_char*/size_t and |  djm | 2021-01-27 | 1 | -4/+3 |
* | Rename HostbasedKeyTypes (ssh) and HostbasedAcceptedKeyTypes (sshd) to |  dtucker | 2021-01-26 | 1 | -3/+3 |
* | move check_host_cert() from sshconnect,c to sshkey.c and refactor |  djm | 2021-01-26 | 1 | -2/+2 |
* | use the new variant log macros instead of prepending __func__ and |  djm | 2020-10-18 | 1 | -26/+25 |
* | Add new structure for signature options |  djm | 2019-11-25 | 1 | -2/+2 |
* | lots of things were relying on libcrypto headers to transitively |  djm | 2019-09-06 | 1 | -1/+2 |
* | remove last references to active_state |  djm | 2019-01-19 | 1 | -7/+5 |
* | begin landing remaining refactoring of packet parsing API, started |  djm | 2019-01-19 | 1 | -1/+3 |
* | Add sshd_config CASignatureAlgorithms option to allow control over |  djm | 2018-09-20 | 1 | -1/+8 |
* | fix build with DEBUG_PK enabled |  mestre | 2018-08-28 | 1 | -2/+2 |
* | delay bailout for invalid authenticating user until after the packet |  djm | 2018-07-31 | 1 | -5/+6 |
* | sshd: switch authentication to sshbuf API; ok djm@ |  markus | 2018-07-09 | 1 | -2/+2 |
* | Improve strictness and control over RSA-SHA2 signature types: |  djm | 2018-07-03 | 1 | -3/+2 |
* | Drop compatibility hacks for some ancient SSH implementations, including |  djm | 2018-01-23 | 1 | -5/+3 |
* | pass negotiated signing algorithm though to sshkey_verify() and |  djm | 2017-12-18 | 1 | -2/+2 |
* | refactor authentication logging |  djm | 2017-06-24 | 1 | -4/+4 |
* | switch auth2 to ssh_dispatch API; ok djm@ |  markus | 2017-05-30 | 1 | -3/+3 |
* | switch auth2-hostbased.c to modern APIs; ok djm@ |  markus | 2017-05-30 | 1 | -49/+54 |
* | switch auth2-pubkey.c to modern APIs; with & ok djm@ |  markus | 2017-05-30 | 1 | -3/+3 |
* | switch from Key typedef with struct sshkey; ok djm@ |  markus | 2017-05-30 | 1 | -3/+3 |
* | refactor canohost.c: move functions that cache results closer to the |  djm | 2016-03-07 | 1 | -3/+4 |
* | Remove pattern length argument from match_pattern_list(), |  djm | 2015-05-04 | 1 | -3/+2 |
* | update to new API (key_fingerprint => sshkey_fingerprint) |  djm | 2015-01-28 | 1 | -5/+7 |
* | remove obsolete comment |  djm | 2015-01-28 | 1 | -2/+1 |
* | add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypes |  djm | 2015-01-13 | 1 | -1/+10 |
* | deprecate key_load_private_pem() and sshkey_load_private_pem() |  djm | 2015-01-08 | 1 | -1/+2 |
* | KNF and add a little more debug() |  djm | 2014-12-23 | 1 | -5/+13 |
* | Add FingerprintHash option to control algorithm used for key |  djm | 2014-12-21 | 1 | -3/+4 |
* | Add support for Unix domain socket forwarding. A remote TCP port |  millert | 2014-07-15 | 1 | -1/+2 |
* | refuse RSA keys from old proprietary clients/servers that use the |  djm | 2013-12-30 | 1 | -1/+7 |
* | for hostbased authentication, print the client host and user on |  djm | 2013-06-21 | 1 | -1/+5 |
* | bye, bye xfree(); ok markus@ |  djm | 2013-05-17 | 1 | -7/+7 |
* | enable certificates for hostbased authentication, from Iain Morgan; |  djm | 2010-08-04 | 1 | -3/+28 |
* | Add a TrustedUserCAKeys option to sshd_config to specify CA keys that |  djm | 2010-03-04 | 1 | -1/+4 |
* | strip trailing '.' from hostname when HostbasedUsesNameFromPacketOnly=yes |  djm | 2008-07-17 | 1 | -5/+6 |
* | almost entirely get rid of the culture of ".h files that include .h files" |  deraadt | 2006-08-03 | 1 | -5/+8 |
* | move #include <string.h> out of includes.h |  stevesk | 2006-07-22 | 1 | -1/+2 |
* | move #include <pwd.h> out of includes.h; ok markus@ |  stevesk | 2006-07-06 | 1 | -1/+5 |
* | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that |  djm | 2006-03-25 | 1 | -0/+1 |
* | RCSID() can die |  deraadt | 2006-03-19 | 1 | -1/+0 |
* | fix mem leaks; some fixes from Pete Flugstad; tested dtucker@ |  markus | 2004-01-19 | 1 | -2/+2 |
* | int -> u_int; ok djm@, deraadt@, mouring@ |  markus | 2003-06-24 | 1 | -2/+2 |
* | deprecate VerifyReverseMapping since it's dangerous if combined |  markus | 2003-06-02 | 1 | -2/+2 |
* | rename log() into logit() to avoid name conflict. markus ok, from netbsd |  itojun | 2003-04-08 | 1 | -3/+3 |
* | move Authmethod definitons to per-method file. |  markus | 2002-05-31 | 1 | -2/+8 |
* | split auth2.c into one file per method; ok provos@/deraadt@ |  markus | 2002-05-25 | 1 | -0/+176 |