Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Hostname->HostName cleanup; from lauri tirkkonen | 2019-06-12 | 1 | -3/+3 | |
| | | | | ok dtucker | ||||
* | check in scp client that filenames sent during remote->local directory | 2019-01-26 | 1 | -3/+13 | |
| | | | | | | | | | | | | | | copies satisfy the wildcard specified by the user. This checking provides some protection against a malicious server sending unexpected filenames, but it comes at a risk of rejecting wanted files due to differences between client and server wildcard expansion rules. For this reason, this also adds a new -T flag to disable the check. reported by Harry Sintonen fix approach suggested by markus@; has been in snaps for ~1wk courtesy deraadt@ | ||||
* | tweak previous; | 2019-01-22 | 1 | -4/+4 | |
| | |||||
* | Forgot to add -J to the synopsis. | 2019-01-21 | 1 | -1/+2 | |
| | |||||
* | Add a -J option as a shortcut for -o Proxyjump= to scp(1) and sftp(1) | 2019-01-21 | 1 | -2/+15 | |
| | | | | | | to match ssh(1)'s interface. ok djm | ||||
* | reorder CASignatureAlgorithms, and add them to the various -o lists; | 2018-09-20 | 1 | -2/+3 | |
| | | | | ok djm | ||||
* | Deprecate UsePrivilegedPort now that support for running ssh(1) | 2018-07-19 | 1 | -3/+2 | |
| | | | | | | | | | | | setuid has been removed, remove supporting code and clean up references to it in the man pages We have not shipped ssh(1) the setuid bit since 2002. If ayone really needs to make connections from a low port number this can be implemented via a small setuid ProxyCommand. ok markus@ jmc@ djm@ | ||||
* | sort previous; | 2018-06-09 | 1 | -2/+2 | |
| | |||||
* | add a SetEnv directive to ssh_config that allows setting environment | 2018-06-09 | 1 | -2/+3 | |
| | | | | | | | | variables for the remote session (subject to the server accepting them) refactor SendEnv to remove the arbitrary limit of variable names. ok markus@ | ||||
* | some cleanup for BindInterface and ssh-keyscan; | 2018-02-23 | 1 | -2/+3 | |
| | |||||
* | tweak the uri text, specifically removing some markup to make it a | 2017-10-25 | 1 | -11/+12 | |
| | | | | | | bit more readable; issue reported by - and diff ok - millert | ||||
* | Add URI support to ssh, sftp and scp. For example ssh://user@host | 2017-10-21 | 1 | -19/+22 | |
| | | | | | | | or sftp://user@host/path. The connection parameters described in draft-ietf-secsh-scp-sftp-ssh-uri-04 are not implemented since the ssh fingerprint format in the draft uses md5 with no way to specify the hash function type. OK djm@ | ||||
* | restore mistakenly deleted description of the ConnectionAttempts option | 2017-05-03 | 1 | -2/+3 | |
| | | | | ok markus@ | ||||
* | remove now obsolete protocol1 options from the -o lists; | 2017-05-02 | 1 | -8/+2 | |
| | |||||
* | exterminate the -1 flag from scp | 2017-04-30 | 1 | -11/+3 | |
| | | | | ok markus@ | ||||
* | - add proxyjump to the options list | 2016-07-16 | 1 | -2/+3 | |
| | | | | | | | - formatting fixes - update usage() ok djm | ||||
* | sort the -o list; | 2016-06-29 | 1 | -3/+3 | |
| | |||||
* | add IdentityAgent; noticed & ok jmc@ | 2016-05-04 | 1 | -2/+3 | |
| | |||||
* | some certificatefile tweaks; ok djm | 2015-09-25 | 1 | -2/+3 | |
| | |||||
* | Turn off DSA by default; add HostKeyAlgorithms to the server and | 2015-07-10 | 1 | -2/+3 | |
| | | | | | PubkeyAcceptedKeyTypes to the client side, so it still can be tested or turned back on; feedback and ok djm@ | ||||
* | Add a ssh_config HostbasedKeyType option to control which | 2015-01-30 | 1 | -2/+3 | |
| | | | | | | | | | host public key types are tried during hostbased authentication. This may be used to prevent too many keys being sent to the server, and blowing past its MaxAuthTries limit. bz#2211 based on patch by Iain Morgan; ok markus@ | ||||
* | sort previous; | 2015-01-26 | 1 | -2/+2 | |
| | |||||
* | correct description of UpdateHostKeys in ssh_config.5 and | 2015-01-26 | 1 | -2/+3 | |
| | | | | | add it to -o lists for ssh, scp and sftp; pointed out by jmc@ | ||||
* | garbage collect empty .No macros mandoc warns about | 2015-01-16 | 1 | -4/+4 | |
| | |||||
* | there is no need for rcp anymore | 2014-03-19 | 1 | -10/+4 | |
| | | | | ok deraadt millert | ||||
* | add canonicalisation options to -o lists | 2013-10-20 | 1 | -2/+7 | |
| | |||||
* | some Bx/Ox conversion; | 2013-08-14 | 1 | -4/+5 | |
| | | | | From: Jan Stary | ||||
* | use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@ | 2013-07-16 | 1 | -4/+4 | |
| | |||||
* | knock out a useless Ns; | 2011-09-05 | 1 | -2/+2 | |
| | |||||
* | mention ControlPersist and KbdInteractiveAuthentication in the -o | 2011-09-05 | 1 | -2/+4 | |
| | | | | verbiage in these pages too (prompted by jmc@) | ||||
* | scp.1: grammer fix | 2010-12-09 | 1 | -3/+3 | |
| | | | | scp.c: add -3 to usage() | ||||
* | add a new -3 option to scp: Copies between two remote hosts are | 2010-12-08 | 1 | -3/+8 | |
| | | | | | transferred through the local host. Without this option the data is copied directly between the two remote hosts. ok djm@ (bugzilla #1837) | ||||
* | add IPQoS to the various -o lists, and zap some trailing whitespace; | 2010-11-18 | 1 | -2/+3 | |
| | |||||
* | knock out some "-*- nroff -*-" lines; | 2010-10-28 | 1 | -3/+2 | |
| | |||||
* | add KexAlgorithms to the -o list; | 2010-09-23 | 1 | -2/+3 | |
| | |||||
* | add an EXIT STATUS section for /usr/bin; | 2010-09-03 | 1 | -3/+3 | |
| | |||||
* | replace our obsolete smartcard code with PKCS#11. | 2010-02-08 | 1 | -3/+3 | |
| | | | | | | | | | ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev | ||||
* | Remove RoutingDomain from ssh since it's now not needed. It can be replaced | 2010-01-09 | 1 | -3/+2 | |
| | | | | | | | | | | | | | with "route exec" or "nc -V" as a proxycommand. "route exec" also ensures that trafic such as DNS lookups stays withing the specified routingdomain. For example (from reyk): # route -T 2 exec /usr/sbin/sshd or inherited from the parent process $ route -T 2 exec sh $ ssh 10.1.2.3 ok deraadt@ markus@ stevesk@ reyk@ | ||||
* | Rename RDomain config option to RoutingDomain to be more clear and | 2009-12-29 | 1 | -3/+3 | |
| | | | | | | | | | consistent with other options. NOTE: if you currently use RDomain in the ssh client or server config, or ssh/sshd -o, you must update to use RoutingDomain. ok markus@ djm@ | ||||
* | Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan. | 2009-10-28 | 1 | -2/+3 | |
| | | | | ok markus@ | ||||
* | better description for -i flag: | 2008-07-12 | 1 | -3/+3 | |
| | | | | s/RSA authentication/public key authentication/ | ||||
* | Mention that scp follows symlinks during -r. bz #1466, from nectar at apple | 2008-06-14 | 1 | -2/+5 | |
| | |||||
* | explain how to handle local file names containing colons; | 2008-01-31 | 1 | -4/+10 | |
| | | | | | | requested by Tamas TEVESZ ok dtucker | ||||
* | scp -q implies ssh -q for the underlying connection, it doesn't just | 2008-01-19 | 1 | -3/+5 | |
| | | | | hush the progress meter | ||||
* | the ellipsis is not an optional argument; while here, sync the usage | 2007-08-06 | 1 | -3/+3 | |
| | | | | | | | | and synopsis of commands lots of good ideas by jmc@ ok jmc@ | ||||
* | convert to new .Dd format; | 2007-05-31 | 1 | -2/+2 | |
| | |||||
* | replace DIAGNOSTICS with .Ex; | 2006-07-18 | 1 | -4/+3 | |
| | |||||
* | Document RekeyLimit. Based on patch from jan.iven at cern.ch from mindrot #1056 | 2006-01-20 | 1 | -1/+2 | |
| | | | | with feedback from jmc, djm and markus; ok jmc@ djm@ | ||||
* | add HashKnownHosts to -o list; | 2005-03-01 | 1 | -1/+2 | |
| | | | | ok markus@ | ||||
* | document KbdInteractiveDevices; ok markus@ | 2004-10-07 | 1 | -1/+2 | |
| |