| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | enable certificates for hostbased authentication, from Iain Morgan; |   djm | 2010-08-04 | 1 | -1/+59 | |
| | | | | | "looks ok" markus@ | |||||
| * | Add a TrustedUserCAKeys option to sshd_config to specify CA keys that | djm | 2010-03-04 | 1 | -1/+63 | |
| | | | | | | | | | | | | are trusted to authenticate users (in addition than doing it per-user in authorized_keys). Add a RevokedKeys option to sshd_config and a @revoked marker to known_hosts to allow keys to me revoked and banned for user or host authentication. feedback and ok markus@ | |||||
| * | Fix bug introduced in r1.78 (incorrect brace location) that broke key auth. |   dtucker | 2010-01-12 | 1 | -2/+2 | |
| | | | | | Patch from joachim joachimschipper nl. | |||||
| * | Do not prompt for a passphrase if we fail to open a keyfile, and log the | dtucker | 2010-01-11 | 1 | -3/+11 | |
| | | | | | | reason the open failed to debug. bz #1693, found by tj AT castaglia org, ok djm@ | |||||
| * | switch from 3DES to AES-128 for encryption of passphrase-protected | djm | 2009-10-22 | 1 | -2/+2 | |
| | | | | | SSH protocol 2 private keys; ok several | |||||
| * | almost entirely get rid of the culture of ".h files that include .h files" |   deraadt | 2006-08-03 | 1 | -4/+3 | |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | |||||
| * | clean extra spaces |   stevesk | 2006-08-01 | 1 | -2/+2 | |
| | | ||||||
| * | move #include <stdio.h> out of includes.h | stevesk | 2006-08-01 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <stdlib.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/param.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <unistd.h> out of includes.h | stevesk | 2006-07-17 | 1 | -1/+2 | |
| | | ||||||
| * | need <errno.h> here also (it's also included in <openssl/err.h>) | stevesk | 2006-07-11 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <fcntl.h> out of includes.h | stevesk | 2006-07-09 | 1 | -1/+3 | |
| | | ||||||
| * | Prevent ssh from trying to open private keys with bad permissions more than | dtucker | 2006-04-25 | 1 | -2/+6 | |
| | | | | | | once or prompting for their passphrases (which it subsequently ignores anyway), similar to a previous change in ssh-add. bz #1186, ok djm@ | |||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 | |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | |||||
| * | whoever thought that break after return was a good idea needs to get their head examimed | deraadt | 2006-03-19 | 1 | -4/+0 | |
| | | ||||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 | |
| | | ||||||
| * | Make ssh-add check file permissions before attempting to load private | dtucker | 2006-03-13 | 1 | -2/+2 | |
| | | | | | | key files multiple times; it will fail anyway and this prevents confusing multiple prompts and warnings. mindrot #1138, ok djm@ | |||||
| * | move #include <sys/stat.h> out of includes.h; ok markus@ | stevesk | 2006-02-20 | 1 | -1/+4 | |
| | | ||||||
| * | make this -Wsign-compare clean; ok avsm@ markus@ | djm | 2005-06-17 | 1 | -7/+9 | |
| | | ||||||
| * | Fix debug call in error path of authorized_keys processing and fix related | dtucker | 2004-12-11 | 1 | -2/+3 | |
| | | | | | warnings; ok djm@ | |||||
| * | Discard over-length authorized_keys entries rather than complaining when | dtucker | 2004-12-06 | 1 | -4/+5 | |
| | | | | | they don't decode. bz #884, with & ok djm@ | |||||
| * | fix error path, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus | djm | 2004-08-23 | 1 | -3/+6 | |
| | | ||||||
| * | make ssh -Wshadow clean, no functional changes |   avsm | 2004-06-21 | 1 | -5/+5 | |
| | | | | | markus@ ok | |||||
| * | improve some code lint did not like; djm millert ok | deraadt | 2004-05-11 | 1 | -5/+11 | |
| | | ||||||
| * | missing buffer_free(&encrypted); #662; zardoz at users.sf.net |   markus | 2003-09-18 | 1 | -1/+2 | |
| | | ||||||
| * | cast some types for printing; ok markus@ | djm | 2003-05-24 | 1 | -2/+2 | |
| | | ||||||
| * | change key_load_public to try to read a public from: | markus | 2003-05-11 | 1 | -1/+10 | |
| | | | | | | | rsa1 private or rsa1 public and ssh2 keys. this makes ssh-keygen -e fail for ssh1 keys more gracefully for example; report from itojun (netbsd pr 20550). | |||||
| * | move RSA_blinding_on to generic key load method | markus | 2003-03-13 | 1 | -1/+12 | |
| | | ||||||
| * | lseek(2) may return -1 when getting the public/private key lenght. |   fgsch | 2002-11-15 | 1 | -5/+16 | |
| | | | | | | | Simplify the code and check for errors using fstat(2). Problem reported by Mauricio Sanchez, markus@ ok. | |||||
| * | cat to (void) when output from buffer_get_X is ignored | markus | 2002-06-24 | 1 | -3/+3 | |
| | | ||||||
| * | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentication | markus | 2002-05-23 | 1 | -2/+2 | |
| | | | | | in protocol v2 (needs to access the hostkeys). | |||||
| * | add some const EVP_MD for openssl-0.9.7 | markus | 2002-02-28 | 1 | -2/+2 | |
| | | ||||||
| * | signed vs. unsigned: make size arguments u_int, ok stevesk@ | markus | 2002-02-24 | 1 | -2/+2 | |
| | | ||||||
| * | hide some more implementation details of cipher.[ch] and prepares for move | markus | 2002-02-14 | 1 | -12/+14 | |
| | | | | | to EVP, ok deraadt@ | |||||
| * | remove unneeded casts and some char->u_char cleanup; ok markus@ | stevesk | 2001-12-29 | 1 | -7/+7 | |
| | | ||||||
| * | missing include | markus | 2001-12-27 | 1 | -1/+2 | |
| | | ||||||
| * | call fatal() for openssl allocation failures | markus | 2001-12-27 | 1 | -14/+2 | |
| | | ||||||
| * | change the buffer/packet interface to use void* vs. char*; ok markus@ | stevesk | 2001-12-19 | 1 | -5/+5 | |
| | | ||||||
| * | basic KNF done while i was looking for something else | deraadt | 2001-12-19 | 1 | -4/+4 | |
| | | ||||||
| * | minor KNF | deraadt | 2001-12-05 | 1 | -2/+2 | |
| | | ||||||
| * | grammer; Matthew_Clarke@mindlink.bc.ca | markus | 2001-10-07 | 1 | -5/+5 | |
| | | ||||||
| * | relax permission check for private key files. | markus | 2001-09-23 | 1 | -7/+10 | |
| | | ||||||
| * | more strict prototypes. raise warning level in Makefile.inc. markus ok'ed |   itojun | 2001-06-23 | 1 | -8/+8 | |
| | | | | | TODO; cleanup headers | |||||
| * | use xxx_put_cstring() | markus | 2001-06-07 | 1 | -2/+2 | |
| | | ||||||
| * | typo | markus | 2001-05-29 | 1 | -2/+2 | |
| | | ||||||
| * | key_load_private: set comment to filename for PEM keys | markus | 2001-05-28 | 1 | -5/+8 | |
| | | ||||||
| * | return comments for private pem files, too; report from nolan@naic.edu | markus | 2001-05-16 | 1 | -2/+3 | |
| | | ||||||
| * | error->debug; noted by fries@ | markus | 2001-04-18 | 1 | -2/+2 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |