| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | unbreak build for NOPIC systems; noticed, help and ok deraadt@ |   markus | 2010-02-20 | 1 | -1/+2 |
| | | |||||
| * | remove scard | markus | 2010-02-08 | 1 | -2/+2 |
| | | |||||
| * | replace our obsolete smartcard code with PKCS#11. | markus | 2010-02-08 | 1 | -2/+2 |
| | | | | | | | | | | ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev | ||||
| * | Add support for an experimental zero-knowledge password authentication |   djm | 2008-11-04 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | | method using the J-PAKE protocol described in F. Hao, P. Ryan, "Password Authenticated Key Exchange by Juggling", 16th Workshop on Security Protocols, Cambridge, April 2008. This method allows password-based authentication without exposing the password to the server. Instead, the client and server exchange cryptographic proofs to demonstrate of knowledge of the password while revealing nothing useful to an attacker or compromised endpoint. This is experimental, work-in-progress code and is presently compiled-time disabled (turn on -DJPAKE in Makefile.inc). "just commit it. It isn't too intrusive." deraadt@ | ||||
| * | OpenSSL 0.9.8h supplies a real EVP_sha256 so we do not need our | djm | 2008-09-06 | 1 | -2/+2 |
| | | | | | replacement anymore | ||||
| * | support CIDR address matching in sshd_config "Match address" blocks, with | djm | 2008-06-10 | 1 | -2/+2 |
| | | | | | | | | | | | | | full support for negation and fall-back to classic wildcard matching. For example: Match address 192.0.2.0/24,3ffe:ffff::/32,!10.* PasswordAuthentication yes addrmatch.c code mostly lifted from flowd's addr.c feedback and ok dtucker@ | ||||
| * | Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must |   pvalchev | 2007-06-07 | 1 | -2/+2 |
| | | | | | | | | | | | specify umac-64@openssh.com). Provides about 20% end-to-end speedup compared to hmac-md5. Represents a different approach to message authentication to that of HMAC that may be beneficial if HMAC based on one of its underlying hash algorithms is found to be vulnerable to a new attack. http://www.ietf.org/rfc/rfc4418.txt in conjunction with and OK djm@ | ||||
| * | build a lint library for us to use above |   deraadt | 2006-05-28 | 1 | -1/+2 |
| | | |||||
| * | Move Buffer bignum functions into their own file, bufbn.c. This means that |   dtucker | 2006-04-18 | 1 | -2/+2 |
| | | | | | | sftp and sftp-server (which use the Buffer functions in bufaux.c but not the bignum ones) no longer need to be linked with libcrypto. ok markus@ | ||||
| * | Implement the diffie-hellman-group-exchange-sha256 key exchange method | djm | 2006-03-07 | 1 | -2/+2 |
| | | | | | | using the SHA256 code in libc (and wrapper to make it into an OpenSSL EVP), interop tested against CVS PuTTY | ||||
| * | replace tilde_expand_filename with a simpler implementation, ahead of more | djm | 2005-04-09 | 1 | -2/+2 |
| | | | | | whacking; ok deraadt@ | ||||
| * | remove fallback AES support for old OpenSSL, as OpenBSD has had it for many | djm | 2004-12-22 | 1 | -3/+3 |
| | | | | | years now; ok deraadt@ | ||||
| * | Use permanently_set_uid() in ssh and ssh-keysign for consistency, matches | dtucker | 2004-08-23 | 1 | -2/+2 |
| | | | | | change in Portable; ok markus@ | ||||
| * | implement session multiplexing in the client (the server has supported this | djm | 2004-06-13 | 1 | -2/+3 |
| | | | | | since 2.0); ok markus@ | ||||
| * | kill it here too | djm | 2004-05-09 | 1 | -2/+2 |
| | | |||||
| * | unexpand and delete whitespace at EOL; ok markus@ | djm | 2003-11-21 | 1 | -3/+3 |
| | | |||||
| * | replace fatal_cleanup() and linked list of fatal callbacks with static | markus | 2003-09-23 | 1 | -2/+2 |
| | | | | | | | cleanup_exit() function. re-refine cleanup_exit() where appropriate, allocate sshd's authctxt eary to allow simpler cleanup in sshd. tested by many, ok deraadt@ | ||||
| * | support GSS API user authentication; patches from Simon Wilkinson, | markus | 2003-08-22 | 1 | -1/+4 |
| | | | | | stripped down and tested by Jakob and myself. | ||||
| * | experimental support for aes-ctr modes from | markus | 2003-05-17 | 1 | -2/+2 |
| | | | | | | http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt ok djm@ | ||||
| * | split out custom EVP ciphers | markus | 2003-05-15 | 1 | -2/+3 |
| | | |||||
| * | add experimental support for verifying hos keys using DNS as described |   jakob | 2003-05-14 | 1 | -2/+2 |
| | | | | | | in draft-ietf-secsh-dns-xx.txt. more information in README.dns. ok markus@ and henning@ | ||||
| * | Disable Kerberos 4 support. |   hin | 2003-04-09 | 1 | -9/+1 |
| | | | | | ok markus@ | ||||
| * | move server only kex and monitor code to sshd. | markus | 2003-02-21 | 1 | -3/+2 |
| | | |||||
| * | split kex into client and server code, no need to link | markus | 2003-02-16 | 1 | -1/+2 |
| | | | | | server code into the client; ok provos@ | ||||
| * | move progressmeter.c to libssh; ok djm/fgs@ | markus | 2003-01-12 | 1 | -2/+2 |
| | | |||||
| * | Make sure kerberosV/kafs.h is picked up if kerberosIV/kafs.h is not removed. | hin | 2002-06-11 | 1 | -5/+5 |
| | | | | | ok markus@ | ||||
| * | no longer use uidswap.[ch] from the ssh client | markus | 2002-06-11 | 1 | -2/+2 |
| | | | | | | | run less code with euid==0 if ssh is installed setuid root just switch the euid, don't switch the complete set of groups (this is only needed by sshd). ok provos@ | ||||
| * | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentication | markus | 2002-05-23 | 1 | -2/+2 |
| | | | | | in protocol v2 (needs to access the hostkeys). | ||||
| * | integrate privilege separated openssh; its turned off by default for now. |   provos | 2002-03-18 | 1 | -2/+2 |
| | | | | | work done by me and markus@ | ||||
| * | tabify |   itojun | 2002-03-08 | 1 | -2/+2 |
| | | |||||
| * | overwrite fatal() in ssh-keyscan.c; fixes pr 2354; ok provos@ | markus | 2002-02-22 | 1 | -3/+3 |
| | | |||||
| * | do not build debug version either; markus@ ok |   mickey | 2002-01-25 | 1 | -1/+2 |
| | | |||||
| * | only build Kerberos v5 support with KERBEROS5=yes |   dugsong | 2001-06-26 | 1 | -2/+5 |
| | | |||||
| * | Kerberos v5 support for SSH1, mostly from Assar Westerlund <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok | dugsong | 2001-06-26 | 1 | -1/+2 |
| | | |||||
| * | unbreak | markus | 2001-06-26 | 1 | -5/+1 |
| | | |||||
| * | more smartcard support. | markus | 2001-06-26 | 1 | -1/+6 |
| | | |||||
| * | switch to readpassphrase(3) | markus | 2001-06-24 | 1 | -2/+2 |
| | | | | | 2.7/8-stable needs readpassphrase.[ch] from libc | ||||
| * | undo the .c file split, just merge the header and keep the cvs history | markus | 2001-05-31 | 1 | -5/+3 |
| | | |||||
| * | channel layer cleanup: merge header files and split .c files | markus | 2001-05-30 | 1 | -4/+6 |
| | | |||||
| * | move kex to kex*.c, used dispatch_set() callbacks for kex. should | markus | 2001-04-03 | 1 | -2/+2 |
| | | | | | make rekeying easier. | ||||
| * | prepare for rekeying: move DH code to dh.c | markus | 2001-03-29 | 1 | -2/+2 |
| | | |||||
| * | 1) clean up the MAC support for SSH-2 | markus | 2001-02-11 | 1 | -2/+2 |
| | | | | | | | | 2) allow you to specify the MAC with 'ssh -m' 3) or the 'MACs' keyword in ssh(d)_config 4) add hmac-{md5,sha1}-96 ok stevesk@, provos@ | ||||
| * | $OpenBSD$ |   niklas | 2001-01-29 | 1 | -0/+2 |
| | | |||||
| * | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. | markus | 2001-01-21 | 1 | -1/+1 |
| | | | | | rename util.[ch] -> misc.[ch] | ||||
| * | add support for RSA to SSH2. please test. | markus | 2000-11-12 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | there are now 3 types of keys: RSA1 is used by ssh-1 only, RSA and DSA are used by SSH2. you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA keys for SSH2 and use the RSA keys for hostkeys or for user keys. SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before. IdentityFile2, HostDsaKey and DSAAuthentication are obsolete. you can use multiple IdentityFile and HostKey for all types of keys. the option DSAAuthentication is replaced by PubkeyAuthetication. | ||||
| * | rijndael/aes support | markus | 2000-10-13 | 1 | -1/+1 |
| | | |||||
| * | add support for s/key (kbd-interactive) to ssh2, based on work by mkiernan@avantgo.com and me | markus | 2000-10-11 | 1 | -1/+2 |
| | | |||||
| * | Boring... Add :L modifier to all tweakable variables tests. |   espie | 2000-09-03 | 1 | -2/+2 |
| | | | | | Closes PR 1246 | ||||
| * | add SSH2/DSA support to the agent and some other DSA related cleanups. | markus | 2000-08-19 | 1 | -1/+1 |
| | | | | | (note that we cannot talk to ssh.com's ssh2 agents) | ||||
| * | rename aux.c to util.c to help with cygwin port | provos | 2000-08-01 | 1 | -1/+1 |
| | | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |