| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | prevent authorized_keys options picked up on public key tests without |   djm | 2015-05-01 | 1 | -3/+3 |
| | | | | | | a corresponding private key authentication being applied to other authentication methods. Reported by halex@, ok markus@ | ||||
| * | Revise hostkeys@openssh.com hostkey learning extension. | djm | 2015-02-16 | 1 | -2/+2 |
| | | | | | | | | | | | The client will not ask the server to prove ownership of the private halves of any hitherto-unseen hostkeys it offers to the client. Allow UpdateHostKeys option to take an 'ask' argument to let the user manually review keys offered. ok markus@ | ||||
| * | update packet.c & isolate, introduce struct ssh |   markus | 2015-01-19 | 1 | -5/+2 |
| | | | | | | | | | a) switch packet.c to buffer api and isolate per-connection info into struct ssh b) (de)serialization of the state is moved from monitor to packet.c c) the old packet.c API is implemented in opacket.[ch] d) compress.c/h is removed and integrated into packet.c with and ok djm@ | ||||
| * | remove experimental, never-enabled JPAKE code; ok markus@ | djm | 2014-01-29 | 1 | -21/+1 |
| | | |||||
| * | make the pre-auth privsep slave log via a socketpair shared with the | djm | 2011-06-17 | 1 | -1/+2 |
| | | | | | monitor rather than /var/empty/dev/log; ok dtucker@ deraadt@ markus@ | ||||
| * | refactor the (disabled) Schnorr proof code to make it a little more | djm | 2009-03-05 | 1 | -5/+5 |
| | | | | | generally useful | ||||
| * | Add support for an experimental zero-knowledge password authentication | djm | 2008-11-04 | 1 | -1/+21 |
| | | | | | | | | | | | | | | | | | method using the J-PAKE protocol described in F. Hao, P. Ryan, "Password Authenticated Key Exchange by Juggling", 16th Workshop on Security Protocols, Cambridge, April 2008. This method allows password-based authentication without exposing the password to the server. Instead, the client and server exchange cryptographic proofs to demonstrate of knowledge of the password while revealing nothing useful to an attacker or compromised endpoint. This is experimental, work-in-progress code and is presently compiled-time disabled (turn on -DJPAKE in Makefile.inc). "just commit it. It isn't too intrusive." deraadt@ | ||||
| * | almost entirely get rid of the culture of ".h files that include .h files" |   deraadt | 2006-08-03 | 1 | -9/+1 |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
| * | don't need incompletely-typed 'struct passwd' now with |   stevesk | 2006-07-14 | 1 | -2/+1 |
| | | | | | #include <pwd.h>; ok markus@ | ||||
| * | typo in comment | stevesk | 2006-07-06 | 1 | -2/+2 |
| | | |||||
| * | move #include <pwd.h> out of includes.h; ok markus@ | stevesk | 2006-07-06 | 1 | -1/+6 |
| | | |||||
| * | standardise spacing in $OpenBSD$ tags; requested by deraadt@ | djm | 2006-03-25 | 1 | -1/+1 |
| | | |||||
| * | sprinkle u_int throughout pty subsystem, ok markus | deraadt | 2006-03-20 | 1 | -2/+2 |
| | | |||||
| * | make ssh -Wshadow clean, no functional changes |   avsm | 2004-06-21 | 1 | -4/+4 |
| | | | | | markus@ ok | ||||
| * | replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; test + ok jakob. | markus | 2003-11-17 | 1 | -1/+2 |
| | | |||||
| * | replace fatal_cleanup() and linked list of fatal callbacks with static | markus | 2003-09-23 | 1 | -2/+4 |
| | | | | | | | cleanup_exit() function. re-refine cleanup_exit() where appropriate, allocate sshd's authctxt eary to allow simpler cleanup in sshd. tested by many, ok deraadt@ | ||||
| * | remove kerberos support from ssh1, since it has been replaced with GSSAPI; | markus | 2003-08-28 | 1 | -8/+1 |
| | | | | | but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ... | ||||
| * | support GSS API user authentication; patches from Simon Wilkinson, | markus | 2003-08-22 | 1 | -1/+9 |
| | | | | | stripped down and tested by Jakob and myself. | ||||
| * | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); | markus | 2003-07-22 | 1 | -4/+1 |
| | | | | | test+ok henning@ | ||||
| * | krb4 + privsep; ok dugsong@, deraadt@ | markus | 2002-09-26 | 1 | -2/+5 |
| | | |||||
| * | kerberos support for privsep. confirmed to work by lha@stacken.kth.se |   itojun | 2002-09-09 | 1 | -1/+8 |
| | | | | | patch from markus | ||||
| * | minor KNF | deraadt | 2002-06-30 | 1 | -2/+2 |
| | | |||||
| * | Fix sshd Banner option for privsep; ok markus@ provos@ | djm | 2002-05-12 | 1 | -1/+2 |
| | | |||||
| * | $OpenBSD$ | stevesk | 2002-03-26 | 1 | -0/+2 |
| | | |||||
| * | make getpwnamallow() allways call pwcopy() | markus | 2002-03-19 | 1 | -3/+0 |
| | | |||||
| * | clean up prototypes | markus | 2002-03-19 | 1 | -0/+1 |
| | | |||||
| * | implementation of the interface between privileged and unprivileged process |   provos | 2002-03-18 | 1 | -0/+87 |
| for ssh-privsep | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |