| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | update to new API (key_fingerprint => sshkey_fingerprint) |   djm | 2015-01-28 | 1 | -5/+7 |
| | | | | | | check sshkey_fingerprint return values; ok markus | ||||
| * | remove obsolete comment | djm | 2015-01-28 | 1 | -2/+1 |
| | | |||||
| * | add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypes | djm | 2015-01-13 | 1 | -1/+10 |
| | | | | | | options to allow sshd to control what public key types will be accepted. Currently defaults to all. Feedback & ok markus@ | ||||
| * | deprecate key_load_private_pem() and sshkey_load_private_pem() | djm | 2015-01-08 | 1 | -1/+2 |
| | | | | | | | | | | | | | | | | interfaces. Refactor the generic key loading API to not require pathnames to be specified (they weren't really used). Fixes a few other things en passant: Makes ed25519 keys work for hostbased authentication (ssh-keysign previously used the PEM-only routines). Fixes key comment regression bz#2306: key pathnames were being lost as comment fields. ok markus@ | ||||
| * | KNF and add a little more debug() | djm | 2014-12-23 | 1 | -5/+13 |
| | | |||||
| * | Add FingerprintHash option to control algorithm used for key | djm | 2014-12-21 | 1 | -3/+4 |
| | | | | | | | | fingerprints. Default changes from MD5 to SHA256 and format from hex to base64. Feedback and ok naddy@ markus@ | ||||
| * | Add support for Unix domain socket forwarding. A remote TCP port |   millert | 2014-07-15 | 1 | -1/+2 |
| | | | | | | | | | may be forwarded to a local Unix domain socket and vice versa or both ends may be a Unix domain socket. This is a reimplementation of the streamlocal patches by William Ahern from: http://www.25thandclement.com/~william/projects/streamlocal.html OK djm@ markus@ | ||||
| * | refuse RSA keys from old proprietary clients/servers that use the | djm | 2013-12-30 | 1 | -1/+7 |
| | | | | | | | obsolete RSA+MD5 signature scheme. it will still be possible to connect with these clients/servers but only DSA keys will be accepted, and we'll deprecate them entirely in a future release. ok markus@ | ||||
| * | for hostbased authentication, print the client host and user on | djm | 2013-06-21 | 1 | -1/+5 |
| | | | | | the auth success/failure line; bz#2064, ok dtucker@ | ||||
| * | bye, bye xfree(); ok markus@ | djm | 2013-05-17 | 1 | -7/+7 |
| | | |||||
| * | enable certificates for hostbased authentication, from Iain Morgan; | djm | 2010-08-04 | 1 | -3/+28 |
| | | | | | "looks ok" markus@ | ||||
| * | Add a TrustedUserCAKeys option to sshd_config to specify CA keys that | djm | 2010-03-04 | 1 | -1/+4 |
| | | | | | | | | | | | | are trusted to authenticate users (in addition than doing it per-user in authorized_keys). Add a RevokedKeys option to sshd_config and a @revoked marker to known_hosts to allow keys to me revoked and banned for user or host authentication. feedback and ok markus@ | ||||
| * | strip trailing '.' from hostname when HostbasedUsesNameFromPacketOnly=yes | djm | 2008-07-17 | 1 | -5/+6 |
| | | | | | report and patch from res AT qoxp.net (bz#1200); ok markus@ | ||||
| * | almost entirely get rid of the culture of ".h files that include .h files" |   deraadt | 2006-08-03 | 1 | -5/+8 |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
| * | move #include <string.h> out of includes.h |   stevesk | 2006-07-22 | 1 | -1/+2 |
| | | |||||
| * | move #include <pwd.h> out of includes.h; ok markus@ | stevesk | 2006-07-06 | 1 | -1/+5 |
| | | |||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | ||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 |
| | | |||||
| * | fix mem leaks; some fixes from Pete Flugstad; tested dtucker@ |   markus | 2004-01-19 | 1 | -2/+2 |
| | | |||||
| * | int -> u_int; ok djm@, deraadt@, mouring@ | markus | 2003-06-24 | 1 | -2/+2 |
| | | |||||
| * | deprecate VerifyReverseMapping since it's dangerous if combined | markus | 2003-06-02 | 1 | -2/+2 |
| | | | | | | | | with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@ | ||||
| * | rename log() into logit() to avoid name conflict. markus ok, from netbsd |   itojun | 2003-04-08 | 1 | -3/+3 |
| | | |||||
| * | move Authmethod definitons to per-method file. | markus | 2002-05-31 | 1 | -2/+8 |
| | | |||||
| * | split auth2.c into one file per method; ok provos@/deraadt@ | markus | 2002-05-25 | 1 | -0/+176 |
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |