| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Keep track of number of bytes read and written. Needed for upcoming |   andreas | 2009-05-28 | 1 | -1/+13 | |
| | | | | | | changes. Most code from Martin Forssen, maf at appgate dot com. ok markus@ | |||||
| * | Put the globals in packet.c into a struct and don't access it directly | andreas | 2009-05-25 | 1 | -6/+6 | |
| | | | | | | from other files. No functional changes. ok markus@ djm@ | |||||
| * | some paranoia: check that the serialised key is really KEY_RSA before |   djm | 2009-02-12 | 1 | -2/+4 | |
| | | | | | diddling its internals | |||||
| * | Add support for an experimental zero-knowledge password authentication | djm | 2008-11-04 | 1 | -1/+226 | |
| | | | | | | | | | | | | | | | | | method using the J-PAKE protocol described in F. Hao, P. Ryan, "Password Authenticated Key Exchange by Juggling", 16th Workshop on Security Protocols, Cambridge, April 2008. This method allows password-based authentication without exposing the password to the server. Instead, the client and server exchange cryptographic proofs to demonstrate of knowledge of the password while revealing nothing useful to an attacker or compromised endpoint. This is experimental, work-in-progress code and is presently compiled-time disabled (turn on -DJPAKE in Makefile.inc). "just commit it. It isn't too intrusive." deraadt@ | |||||
| * | sync v1 and v2 traffic accounting; add it to sshd, too; ok djm@, dtucker@ |   markus | 2008-07-10 | 1 | -4/+6 | |
| | | ||||||
| * | Make debug a little clearer. ok djm@ |   dtucker | 2008-07-04 | 1 | -2/+2 | |
| | | ||||||
| * | Clear key options in the monitor on failed authentication, prevents | dtucker | 2008-06-13 | 1 | -1/+5 | |
| | | | | | | | applying additional restrictions to non-pubkey authentications in the case where pubkey fails but another method subsequently succeeds. bz #1472, found by Colin Watson, ok markus@ djm@ | |||||
| * | Make the maximum number of sessions run-time controllable via | djm | 2008-05-08 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | | | | a sshd_config MaxSessions knob. This is useful for disabling login/shell/subsystem access while leaving port-forwarding working (MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or simply increasing the number of allows multiplexed sessions. Because some bozos are sure to configure MaxSessions in excess of the number of available file descriptors in sshd (which, at peak, might be as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak fds on error paths, and make it fail gracefully on out-of-fd conditions - sending channel errors instead of than exiting with fatal(). bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com ok markus@ | |||||
| * | Implement a channel success/failure status confirmation callback | djm | 2008-05-08 | 1 | -1/+2 | |
| | | | | | | | | | | | | | | mechanism. Each channel maintains a queue of callbacks, which will be drained in order (RFC4253 guarantees confirm messages are not reordered within an channel). Also includes a abandonment callback to clean up if a channel is closed without sending confirmation messages. This probably shouldn't happen in compliant implementations, but it could be abused to leak memory. ok markus@ (as part of a larger diff) | |||||
| * | Send config block back to slave for invalid users too so options | dtucker | 2007-10-29 | 1 | -3/+3 | |
| | | | | | | set by a Match block (eg Banner) behave the same for non-existent users. Found by and ok djm@ | |||||
| * | unifdef -DBSD_AUTH | djm | 2007-09-21 | 1 | -65/+1 | |
| | | | | | | | | unifdef -USKEY These options have been in use for some years; ok markus@ "no objection" millert@ | |||||
| * | make file descriptor passing code return an error rather than call fatal() | djm | 2007-09-04 | 1 | -3/+4 | |
| | | | | | | when it encounters problems, and use this to make session multiplexing masters survive slaves failing to pass all stdio FDs; ok markus@ | |||||
| * | pass received SIGINT from monitor to postauth child so it can clean | djm | 2007-05-17 | 1 | -1/+2 | |
| | | | | | | up properly. bz#1196, patch from senthilkumar_sen AT hotpop.com; ok markus@ | |||||
| * | Teach Match how handle config directives that are used before authentication. | dtucker | 2007-02-19 | 1 | -1/+4 | |
| | | | | | | | This allows configurations such as permitting password authentication from the local net only while requiring pubkey from offsite. ok djm@, man page bits ok jmc@ | |||||
| * | correctly check for bad signatures in the monitor, otherwise the monitor and | markus | 2006-11-07 | 1 | -4/+4 | |
| | | | | | the unpriv process can get out of sync. with dtucker@, ok djm@, dtucker@ | |||||
| * | Revert previous include file ordering change, for ssh to compile under gcc2 |   miod | 2006-08-12 | 1 | -2/+2 | |
| | | | | | | (or until openssl include files are cleaned of parameter names in function prototypes) | |||||
| * | "zlib.h" can be <zlib.h>; ok djm@ markus@ |   stevesk | 2006-08-06 | 1 | -2/+2 | |
| | | ||||||
| * | spaces | stevesk | 2006-08-04 | 1 | -3/+3 | |
| | | ||||||
| * | almost entirely get rid of the culture of ".h files that include .h files" |   deraadt | 2006-08-03 | 1 | -7/+10 | |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | |||||
| * | move #include <stdlib.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/param.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <errno.h> out of includes.h; ok markus@ | stevesk | 2006-07-11 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <fcntl.h> out of includes.h | stevesk | 2006-07-09 | 1 | -1/+2 | |
| | | ||||||
| * | missed these from last commit: | stevesk | 2006-07-08 | 1 | -1/+2 | |
| | | | | | move #include <sys/socket.h> out of includes.h | |||||
| * | move #include <pwd.h> out of includes.h; ok markus@ | stevesk | 2006-07-06 | 1 | -3/+4 | |
| | | ||||||
| * | Prevent duplicate log messages when privsep=yes; ok djm@ | dtucker | 2006-03-30 | 1 | -4/+14 | |
| | | ||||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 | |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | |||||
| * | introduce xcalloc() and xasprintf() failure-checked allocations functions | djm | 2006-03-25 | 1 | -4/+2 | |
| | | | | | | | | | | | and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@ | |||||
| * | spacing | deraadt | 2006-03-20 | 1 | -1/+1 | |
| | | ||||||
| * | annoying spacing fixes getting in the way of real diffs | deraadt | 2006-03-20 | 1 | -1/+1 | |
| | | ||||||
| * | memory leaks detected by Coverity via elad AT netbsd.org; | djm | 2006-03-20 | 1 | -0/+4 | |
| | | | | | | | deraadt@ ok that should be all of them now | |||||
| * | spacing | deraadt | 2006-03-19 | 1 | -1/+1 | |
| | | ||||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 | |
| | | ||||||
| * | Implement the diffie-hellman-group-exchange-sha256 key exchange method | djm | 2006-03-07 | 1 | -2/+7 | |
| | | | | | | using the SHA256 code in libc (and wrapper to make it into an OpenSSL EVP), interop tested against CVS PuTTY | |||||
| * | move #include <signal.h> out of includes.h; ok markus@ | stevesk | 2006-02-20 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/wait.h> out of includes.h; ok markus@ | stevesk | 2006-02-10 | 1 | -1/+4 | |
| | | ||||||
| * | small KNF | stevesk | 2006-02-08 | 1 | -3/+3 | |
| | | ||||||
| * | move #include <paths.h> out of includes.h; ok markus@ | stevesk | 2006-02-08 | 1 | -2/+4 | |
| | | ||||||
| * | KNF; ok djm@ | stevesk | 2005-10-13 | 1 | -5/+5 | |
| | | ||||||
| * | spacing | deraadt | 2005-03-10 | 1 | -2/+2 | |
| | | ||||||
| * | Make code match intent; ok djm@ | dtucker | 2005-01-30 | 1 | -2/+2 | |
| | | ||||||
| * | Move "Last logged in at.." message generation to the monitor, right | dtucker | 2004-07-17 | 1 | -5/+11 | |
| | | | | | | | before recording the new login. Fixes missing lastlog message when /var/log/lastlog is not world-readable and incorrect datestamp when multiple sessions are used (bz #463); much assistance & ok markus@ | |||||
| * | Change login->username, will prevent -Wshadow errors in Portable; ok markus@ | dtucker | 2004-06-22 | 1 | -7/+7 | |
| | | ||||||
| * | make ssh -Wshadow clean, no functional changes |   avsm | 2004-06-21 | 1 | -55/+55 | |
| | | | | | markus@ ok | |||||
| * | implement diffie-hellman-group14-sha1 kex method (trivial extension to | djm | 2004-06-13 | 1 | -1/+2 | |
| | | | | | existing diffie-hellman-group1-sha1); ok markus@ | |||||
| * | improve some code lint did not like; djm millert ok | deraadt | 2004-05-11 | 1 | -2/+2 | |
| | | ||||||
| * | kill some more tiny files; ok deraadt@ | djm | 2004-05-09 | 1 | -2/+1 | |
| | | ||||||
| * | Pass SIGALRM through to privsep child if LoginGraceTime expires. ok markus@ | dtucker | 2004-02-05 | 1 | -1/+2 | |
| | | ||||||
| * | unexpand and delete whitespace at EOL; ok markus@ | djm | 2003-11-21 | 1 | -8/+8 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |