| Commit message (Expand) | Author | Age | Files | Lines |
* | don't record hostbased authentication hostkeys as user keys |  djm | 2015-09-04 | 1 | -2/+2 |
* | Fix occurrences of "r = func() != 0" which result in the wrong error |  jsg | 2015-09-02 | 1 | -2/+2 |
* | Improve size == 0, count == 0 checking in mm_zalloc, which is "array" like. |  deraadt | 2015-08-21 | 1 | -8/+3 |
* | Don't count successful partial authentication as failures in monitor; |  djm | 2015-06-22 | 1 | -2/+2 |
* | Remove pattern length argument from match_pattern_list(), |  djm | 2015-05-04 | 1 | -5/+3 |
* | prevent authorized_keys options picked up on public key tests without |  djm | 2015-05-01 | 1 | -4/+7 |
* | fix compilation with OPENSSL=no; ok dtucker@ |  djm | 2015-04-27 | 1 | -1/+3 |
* | don't call record_login() in monitor when UseLogin is enabled; |  djm | 2015-04-17 | 1 | -1/+4 |
* | UpdateHostKeys fixes: |  djm | 2015-02-20 | 1 | -4/+4 |
* | Revise hostkeys@openssh.com hostkey learning extension. |  djm | 2015-02-16 | 1 | -6/+39 |
* | make rekey_limit for sshd w/privsep work; ok djm@ dtucker@ |  markus | 2015-02-13 | 1 | -6/+1 |
* | SIZE_MAX is standard, we should be using it in preference to the |  millert | 2015-02-06 | 1 | -3/+3 |
* | Reduce use of <sys/param.h> and transition to <limits.h> throughout. |  deraadt | 2015-01-20 | 1 | -2/+2 |
* | adapt kex to sshbuf and struct ssh; ok djm@ |  markus | 2015-01-19 | 1 | -2/+2 |
* | update packet.c & isolate, introduce struct ssh |  markus | 2015-01-19 | 1 | -228/+61 |
* | move authfd.c and its tentacles to the new buffer/key API; |  djm | 2015-01-14 | 1 | -18/+24 |
* | add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypes |  djm | 2015-01-13 | 1 | -1/+13 |
* | remember which public keys have been used for authentication and |  djm | 2014-12-22 | 1 | -2/+8 |
* | Add support for Unix domain socket forwarding. A remote TCP port |  millert | 2014-07-15 | 1 | -2/+2 |
* | New key API: refactor key-related functions to be more library-like, |  djm | 2014-06-24 | 1 | -1/+3 |
* | unbreak compression, by re-init-ing the compression code in the |  markus | 2014-05-03 | 1 | -1/+3 |
* | make compiling against OpenSSL optional (make OPENSSL=no); |  markus | 2014-04-29 | 1 | -1/+22 |
* | convert memset of potentially-private data to explicit_bzero() |  djm | 2014-02-02 | 1 | -4/+4 |
* | replace most bzero with explicit_bzero, except a few that cna be memset |  tedu | 2014-01-31 | 1 | -2/+2 |
* | remove experimental, never-enabled JPAKE code; ok markus@ |  djm | 2014-01-29 | 1 | -225/+1 |
* | fix rekeying for KEX_C25519_SHA256; noted by dtucker@ |  markus | 2013-11-04 | 1 | -1/+2 |
* | add ssh-agent(1) support to sshd(8); allows encrypted hostkeys, |  markus | 2013-07-19 | 1 | -4/+14 |
* | for hostbased authentication, print the client host and user on |  djm | 2013-06-21 | 1 | -2/+5 |
* | Standardise logging of supplemental information during userauth. Keys |  djm | 2013-05-19 | 1 | -5/+4 |
* | bye, bye xfree(); ok markus@ |  djm | 2013-05-17 | 1 | -65/+60 |
* | Add RekeyLimit to sshd with the same syntax as the client allowing rekeying |  dtucker | 2013-05-16 | 1 | -1/+5 |
* | add submethod support to AuthenticationMethods; ok and freedback djm@ |  markus | 2013-03-07 | 1 | -5/+6 |
* | reconstruct the original username that was sent by the client, which may |  djm | 2013-03-07 | 1 | -11/+19 |
* | drain the log messages after receiving the keystate from the unpriv |  markus | 2012-12-11 | 1 | -5/+5 |
* | Fixes logging of partial authentication when privsep is enabled |  djm | 2012-12-02 | 1 | -5/+11 |
* | Support multiple required authentication via an AuthenticationMethods |  djm | 2012-11-04 | 1 | -4/+31 |
* | remove dead code following 'for (;;)' loops. |  dtucker | 2012-06-22 | 1 | -4/+1 |
* | memleak on error path |  djm | 2012-01-05 | 1 | -1/+2 |
* | ignore EINTR errors from poll() |  djm | 2011-06-23 | 1 | -2/+5 |
* | make the pre-auth privsep slave log via a socketpair shared with the |  djm | 2011-06-17 | 1 | -15/+108 |
* | allow AuthorizedKeysFile to specify multiple files, separated by spaces. |  djm | 2011-05-23 | 1 | -2/+7 |
* | use a macro to define which string options to copy between configs |  djm | 2011-05-20 | 1 | -3/+10 |
* | use FD_CLOEXEC consistently; patch from zion AT x96.org |  djm | 2011-05-15 | 1 | -2/+2 |
* | ECDH/ECDSA compliance fix: these methods vary the hash function they use |  djm | 2010-09-09 | 1 | -4/+4 |
* | Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and |  djm | 2010-08-31 | 1 | -1/+2 |
* | s/timing_safe_cmp/timingsafe_bcmp/g |  djm | 2010-07-13 | 1 | -6/+6 |
* | implement a timing_safe_cmp() function to compare memory without leaking |  djm | 2010-07-13 | 1 | -8/+8 |
* | Hold authentication debug messages until after successful authentication. |  dtucker | 2010-03-07 | 1 | -17/+1 |
* | Add support for certificate key types for users and hosts. |  djm | 2010-02-26 | 1 | -2/+3 |
* | Fix warnings found by chl@ and djm@ and change roaming_atomicio's |  andreas | 2009-06-12 | 1 | -1/+2 |