| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | unbreak fake authloop for non-existent users (my screwup). Spotted and |   djm | 2003-11-18 | 1 | -1/+2 | |
| | | | | | tested by dtucker@; ok markus@ | |||||
| * | replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; test + ok jakob. |   markus | 2003-11-17 | 1 | -3/+33 | |
| | | ||||||
| * | standardise arguments to auth methods - they should all take authctxt. | djm | 2003-11-04 | 1 | -2/+2 | |
| | | | | | check authctxt->valid rather then pw != NULL; ok markus@ | |||||
| * | replace fatal_cleanup() and linked list of fatal callbacks with static | markus | 2003-09-23 | 1 | -10/+7 | |
| | | | | | | | cleanup_exit() function. re-refine cleanup_exit() where appropriate, allocate sshd's authctxt eary to allow simpler cleanup in sshd. tested by many, ok deraadt@ | |||||
| * | remove kerberos support from ssh1, since it has been replaced with GSSAPI; | markus | 2003-08-28 | 1 | -49/+1 | |
| | | | | | but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ... | |||||
| * | fix passwd auth for 'username leaks via timing'; with djm@, original patches from solar | markus | 2003-08-26 | 1 | -2/+2 | |
| | | ||||||
| * | 64 bit cleanups; markus ok |   deraadt | 2003-08-24 | 1 | -2/+4 | |
| | | ||||||
| * | support GSS API user authentication; patches from Simon Wilkinson, | markus | 2003-08-22 | 1 | -2/+90 | |
| | | | | | stripped down and tested by Jakob and myself. | |||||
| * | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); | markus | 2003-07-22 | 1 | -53/+1 | |
| | | | | | test+ok henning@ | |||||
| * | int -> u_int; ok djm@, deraadt@, mouring@ | markus | 2003-06-24 | 1 | -2/+2 | |
| | | ||||||
| * | typos; dtucker at zip.com.au | markus | 2003-06-12 | 1 | -2/+2 | |
| | | ||||||
| * | deprecate VerifyReverseMapping since it's dangerous if combined | markus | 2003-06-02 | 1 | -2/+2 | |
| | | | | | | | | with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@ | |||||
| * | cast some types for printing; ok markus@ | djm | 2003-05-24 | 1 | -2/+2 | |
| | | ||||||
| * | http://bugzilla.mindrot.org/show_bug.cgi?id=560 | markus | 2003-05-14 | 1 | -1/+18 | |
| | | | | | | Privsep child continues to run after monitor killed. Pass monitor signals through to child; Darren Tucker | |||||
| * | implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@ | markus | 2003-05-14 | 1 | -1/+6 | |
| | | | | | server interops with commercial client; ok jakob@ djm@ | |||||
| * | rename log() into logit() to avoid name conflict. markus ok, from netbsd |   itojun | 2003-04-08 | 1 | -3/+3 | |
| | | ||||||
| * | reapply rekeying chage, tested by henning@, ok djm@ | markus | 2003-04-02 | 1 | -3/+11 | |
| | | ||||||
| * | backout rekeying changes (for 3.6.1) | markus | 2003-04-01 | 1 | -11/+3 | |
| | | ||||||
| * | rekeying bugfixes and automatic rekeying: | markus | 2003-04-01 | 1 | -3/+11 | |
| | | | | | | | | | | | | | * both client and server rekey _automatically_ (a) after 2^31 packets, because after 2^32 packets the sequence number for packets wraps (b) after 2^(blocksize_in_bits/4) blocks (see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt) (a) and (b) are _enabled_ by default, and only disabled for known openssh versions, that don't support rekeying properly. * client option 'RekeyLimit' * do not reply to requests during rekeying | |||||
| * | unbreak rekeying for privsep; ok millert@ | markus | 2003-03-23 | 1 | -1/+3 | |
| | | ||||||
| * | fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@ | markus | 2003-03-05 | 1 | -3/+9 | |
| | | ||||||
| * | fix permitrootlogin forced-commands-only for privsep; bux #387; ok provos@ | markus | 2003-02-16 | 1 | -1/+3 | |
| | | ||||||
| * | skey/bsdauth: use 0 to indicate failure instead of -1, because | markus | 2003-02-04 | 1 | -13/+13 | |
| | | | | | the buffer API only supports unsigned ints. | |||||
| * | handle overflows for size_t larger than u_int; siw@goneko.de, bug #425 | markus | 2002-11-05 | 1 | -2/+2 | |
| | | ||||||
| * | krb4 + privsep; ok dugsong@, deraadt@ | markus | 2002-09-26 | 1 | -1/+52 | |
| | | ||||||
| * | only call kerberos code for authctxt->valid | markus | 2002-09-24 | 1 | -2/+3 | |
| | | ||||||
| * | only call auth_krb5 if kerberos is enabled; ok deraadt@ | markus | 2002-09-23 | 1 | -2/+3 | |
| | | ||||||
| * | signed vs unsigned from -pedantic; ok henning@ | markus | 2002-09-09 | 1 | -8/+9 | |
| | | ||||||
| * | kerberos support for privsep. confirmed to work by lha@stacken.kth.se | itojun | 2002-09-09 | 1 | -1/+44 | |
| | | | | | patch from markus | |||||
| * | pass addrlen with sockaddr *; from Hajimu UMEMOTO <ume@FreeBSD.org> |   stevesk | 2002-08-29 | 1 | -3/+3 | |
| | | | | | NOTE: there are also p-specific parts to this patch. ok markus@ | |||||
| * | Change mm_zalloc() sanity checks to be more in line with what |   millert | 2002-08-02 | 1 | -3/+3 | |
| | | | | | | we do in calloc() and add a check to monitor_mm.c. OK provos@ and markus@ | |||||
| * | u_int here; ok provos@ | stevesk | 2002-07-22 | 1 | -2/+3 | |
| | | ||||||
| * | use xfree() | deraadt | 2002-06-27 | 1 | -2/+2 | |
| | | ||||||
| * | improve mm_zalloc check; markus ok | deraadt | 2002-06-27 | 1 | -2/+2 | |
| | | ||||||
| * | correct %u | deraadt | 2002-06-26 | 1 | -3/+3 | |
| | | ||||||
| * | be careful in mm_zalloc | deraadt | 2002-06-26 | 1 | -2/+6 | |
| | | ||||||
| * | save auth method before monitor_reset_key_state(); bugzilla bug #284; | stevesk | 2002-06-22 | 1 | -3/+3 | |
| | | | | | ok provos@ | |||||
| * | Don't initialise compression buffers when compression=no in sshd_config; | djm | 2002-06-21 | 1 | -8/+13 | |
| | | | | | ok Niels@ | |||||
| * | make the monitor sync the transfer ssh1 session key; | markus | 2002-06-19 | 1 | -6/+9 | |
| | | | | | | transfer keycontext only for RC4 (this is still depends on EVP implementation details and is broken). | |||||
| * | __FUNCTION__ -> __func__ | markus | 2002-06-04 | 1 | -71/+71 | |
| | | ||||||
| * | save the session id (hash) for ssh2 (it will be passed with the initial sign request) | markus | 2002-06-04 | 1 | -7/+31 | |
| | | | | | and verify that this value is used during authentication; ok provos@ | |||||
| * | only allow enabled authentication methods; ok provos@ | markus | 2002-06-04 | 1 | -9/+15 | |
| | | ||||||
| * | 'monitor' variable clashes with at least one lame platform (NeXT). Renamed |   mouring | 2002-05-15 | 1 | -20/+20 | |
| | | | | | to 'pmonitor'. provos@ | |||||
| * | Fix sshd Banner option for privsep; ok markus@ provos@ | djm | 2002-05-12 | 1 | -2/+21 | |
| | | ||||||
| * | check waitpid for EINTR; based on patch from peter@ifm.liu.se | markus | 2002-03-30 | 1 | -3/+4 | |
| | | ||||||
| * | monitor_allowed_key() returns int instead of pointer. ok markus@ | mouring | 2002-03-27 | 1 | -2/+2 | |
| | | ||||||
| * | remove "\n" from fatal() | stevesk | 2002-03-24 | 1 | -2/+2 | |
| | | ||||||
| * | fix NULL %s on debug3(); ok markus@ | stevesk | 2002-03-21 | 1 | -4/+4 | |
| | | ||||||
| * | use SSH_SESSION_KEY_LENGTH for key length | markus | 2002-03-19 | 1 | -3/+4 | |
| | | ||||||
| * | make getpwnamallow() allways call pwcopy() | markus | 2002-03-19 | 1 | -2/+2 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |