| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | move #include <unistd.h> out of includes.h |   stevesk | 2006-07-17 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <netdb.h> out of includes.h; ok djm@ | stevesk | 2006-07-12 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <errno.h> out of includes.h; ok markus@ | stevesk | 2006-07-11 | 1 | -1/+2 | |
| | | ||||||
| * | add ExitOnForwardFailure: terminate the connection if ssh(1) |   markus | 2006-07-11 | 1 | -1/+10 | |
| | | | | | | cannot set up all requested dynamic, local, and remote port forwardings. ok djm, dtucker, stevesk, jmc | |||||
| * | move #include <netinet/in.h> out of includes.h; ok deraadt@ | stevesk | 2006-07-05 | 1 | -1/+4 | |
| | | ||||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that |   djm | 2006-03-25 | 1 | -0/+1 | |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | |||||
| * | RCSID() can die |   deraadt | 2006-03-19 | 1 | -1/+0 | |
| | | ||||||
| * | potential NULL pointer dereferences detected by Coverity | djm | 2006-03-19 | 1 | -2/+3 | |
| | | | | | via elad AT netbsd.org; ok deraadt@ | |||||
| * | move #include <ctype.h> out of includes.h; ok djm@ | stevesk | 2006-02-22 | 1 | -1/+3 | |
| | | ||||||
| * | move #include <sys/stat.h> out of includes.h; ok markus@ | stevesk | 2006-02-20 | 1 | -1/+4 | |
| | | ||||||
| * | raise error when the user specifies a RekeyLimit that is smaller than 16 | djm | 2006-02-12 | 1 | -7/+22 | |
| | | | | | | (the smallest of our cipher's blocksize) or big enough to cause integer wraparound; ok & feedback dtucker@ | |||||
| * | two changes to the new ssh tunnel support. this breaks compatibility |   reyk | 2005-12-08 | 1 | -5/+27 | |
| | | | | | | | | | | | | | with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@ | |||||
| * | Add support for tun(4) forwarding over OpenSSH, based on an idea and | reyk | 2005-12-06 | 1 | -3/+49 | |
| | | | | | | | | | | | | | initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others | |||||
| * | listen_hosts initialisation here too; spotted greg AT y2005.nest.cx | djm | 2005-07-30 | 1 | -2/+2 | |
| | | ||||||
| * | knf says that a 2nd level indent is four (not three or five) spaces | djm | 2005-07-17 | 1 | -2/+2 | |
| | | ||||||
| * | add ControlMaster=auto/autoask options to support opportunistic multiplexing; | djm | 2005-06-08 | 1 | -2/+22 | |
| | | | | | tested avsm@ and jakob@, ok markus@ | |||||
| * | check return value from strdelim() for NULL (AddressFamily); mpech | markus | 2005-05-16 | 1 | -1/+4 | |
| | | ||||||
| * | spacing | deraadt | 2005-03-10 | 1 | -2/+2 | |
| | | ||||||
| * | Check listen addresses for null, prevents xfree from dying during |   dtucker | 2005-03-10 | 1 | -3/+5 | |
| | | | | | ClearAllForwardings (bz #996). From Craig Leres, ok markus@ | |||||
| * | fix SendEnv config parsing bug found by Roumen Petrov; ok dtucker@ | djm | 2005-03-04 | 1 | -1/+3 | |
| | | ||||||
| * | add support for hashing host names and addresses added to known_hosts files, | djm | 2005-03-01 | 1 | -2/+10 | |
| | | | | | to improve privacy of which hosts user have been visiting; ok markus@ deraadt@ | |||||
| * | bz#413: allow optional specification of bind address for port forwardings. | djm | 2005-03-01 | 1 | -38/+119 | |
| | | | | | | | | | Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports. ok markus@ | |||||
| * | spaces | deraadt | 2004-07-11 | 1 | -3/+3 | |
| | | ||||||
| * | Add option for confirmation (ControlMaster=ask) via ssh-askpass before opening | djm | 2004-06-17 | 1 | -2/+2 | |
| | | | | | shared connections; ok markus@ | |||||
| * | implement session multiplexing in the client (the server has supported this | djm | 2004-06-13 | 1 | -2/+16 | |
| | | | | | since 2.0); ok markus@ | |||||
| * | Kill dead code after fatal(); ok djm@ | dtucker | 2004-05-27 | 1 | -8/+3 | |
| | | ||||||
| * | bz #815: implement ability to pass specified environment variables from the | djm | 2004-04-27 | 1 | -1/+17 | |
| | | | | | client to the server; ok markus@ | |||||
| * | perform strict ownership and modes checks for ~/.ssh/config files, as these | djm | 2004-04-18 | 1 | -4/+19 | |
| | | | | | | | can be used to execute arbitrary programs; ok markus@ NB. ssh will now exit when it detects a config with poor permissions | |||||
| * | add IdentitiesOnly; ok djm@, pb@ | markus | 2004-03-05 | 1 | -2/+10 | |
| | | ||||||
| * | application layer keep alive (ServerAliveInterval ServerAliveCountMax) | markus | 2003-12-16 | 1 | -2/+19 | |
| | | | | | | for ssh(1), similar to the sshd(8) option; ok beck@; with help from jmc and dtucker@ | |||||
| * | rename keepalive to tcpkeepalive; the old name causes too much | markus | 2003-12-09 | 1 | -9/+10 | |
| | | | | | confusion; ok djm, dtucker; with help from jmc@ | |||||
| * | update SSHFP validation. ok markus@ |   jakob | 2003-11-12 | 1 | -2/+3 | |
| | | ||||||
| * | include SSHFP lookup code (not enabled by default). ok markus@ | jakob | 2003-10-14 | 1 | -5/+1 | |
| | | ||||||
| * | remote x11 clients are now untrusted by default, uses xauth(8) to generate | markus | 2003-10-11 | 1 | -2/+10 | |
| | | | | | | untrusted cookies; ForwardX11Trusted=yes restores old behaviour. ok deraadt; feedback and ok djm/fries | |||||
| * | default GSS API to no in client, too; ok jakob, deraadt@ | markus | 2003-10-08 | 1 | -2/+2 | |
| | | ||||||
| * | remove unused kerberos code; ok henning@ | markus | 2003-09-01 | 1 | -16/+1 | |
| | | ||||||
| * | rm gssapidelegatecreds alias; never supported before | markus | 2003-09-01 | 1 | -2/+1 | |
| | | ||||||
| * | remove kerberos support from ssh1, since it has been replaced with GSSAPI; | markus | 2003-08-28 | 1 | -6/+1 | |
| | | | | | but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ... | |||||
| * | support GSS API user authentication; patches from Simon Wilkinson, | markus | 2003-08-22 | 1 | -2/+24 | |
| | | | | | stripped down and tested by Jakob and myself. | |||||
| * | socks4->socks, since with support both 4 and 5; dtucker@zip.com.au | markus | 2003-08-13 | 1 | -2/+2 | |
| | | ||||||
| * | remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@, | markus | 2003-08-13 | 1 | -12/+3 | |
| | | | | | fgsch@, miod@, henning@, jakob@ and others | |||||
| * | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); | markus | 2003-07-22 | 1 | -14/+3 | |
| | | | | | test+ok henning@ | |||||
| * | fix AddressFamily option in config file, from brent@graveland.net; ok markus@ | djm | 2003-07-03 | 1 | -5/+10 | |
| | | ||||||
| * | do not dump core for 'ssh -o proxycommand host'; ok deraadt@ | markus | 2003-06-26 | 1 | -1/+3 | |
| | | ||||||
| * | add AddressFamily option to ssh_config (like -4, -6 on commandline). | djm | 2003-05-16 | 1 | -1/+16 | |
| | | | | | Portable bug #534; ok markus@ | |||||
| * | add a ConnectTimeout option to ssh, based on patch from | djm | 2003-05-15 | 1 | -2/+18 | |
| | | | | | Jean-Charles Longuet (jclonguet at free.fr); portable #207 ok markus@ | |||||
| * | warn for unsupported config option. ok markus@ | jakob | 2003-05-15 | 1 | -14/+24 | |
| | | ||||||
| * | disable kerberos when not supported. ok markus@ | jakob | 2003-05-15 | 1 | -1/+13 | |
| | | ||||||
| * | always parse kerberos options. ok djm@ markus@ | jakob | 2003-05-15 | 1 | -34/+6 | |
| | | ||||||
| * | add experimental support for verifying hos keys using DNS as described | jakob | 2003-05-14 | 1 | -2/+10 | |
| | | | | | | in draft-ietf-secsh-dns-xx.txt. more information in README.dns. ok markus@ and henning@ | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |