| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | allow some additional control over the use of ssh-askpass |   djm | 2020-07-14 | 1 | -7/+23 |
| | | | | | | via $SSH_ASKPASS_REQUIRE, including force-enable/disable. bz#69 ok markus@ | ||||
| * | allow "ssh-add -d -" to read keys to be deleted from stdin | djm | 2020-06-26 | 1 | -2/+7 |
| | | | | | bz#3180; ok dtucker@ | ||||
| * | sync the description of the $SSH_SK_PROVIDER environment variable with | djm | 2020-02-07 | 1 | -3/+5 |
| | | | | | | that of the SecurityKeyProvider ssh/sshd_config(5) directive, as the latter was more descriptive. | ||||
| * | Document loading of resident keys from a FIDO authenticator. |   naddy | 2020-01-17 | 1 | -3/+5 |
| | | | | | | | | | * Rename -O to -K to keep "-O option" available. * Document -K. * Trim usage() message down to synopsis, like all other commands. ok markus@ | ||||
| * | Replace the term "security key" with "(FIDO) authenticator". | naddy | 2019-12-21 | 1 | -13/+8 |
| | | | | | | The polysemous use of "key" was too confusing. Input from markus@. ok jmc@ | ||||
| * | tweak the Nd lines for a bit of consistency; |   jmc | 2019-11-30 | 1 | -3/+3 |
| | | | | | ok markus | ||||
| * | more missing mentions of ed25519-sk; ok djm@ | naddy | 2019-11-18 | 1 | -3/+6 |
| | | |||||
| * | double word; | jmc | 2019-11-15 | 1 | -3/+3 |
| | | |||||
| * | directly support U2F/FIDO2 security keys in OpenSSH by linking | djm | 2019-11-14 | 1 | -4/+3 |
| | | | | | | | against the (previously external) USB HID middleware. The dlopen() capability still exists for alternate middlewares, e.g. for Bluetooth, NFC and test/debugging. | ||||
| * | Fill in missing man page bits for U2F security key support: | naddy | 2019-11-07 | 1 | -3/+6 |
| | | | | | | | | | | | | Mention the new key types, the ~/.ssh/id_ecdsa_sk file, ssh's SecurityKeyProvider keyword, the SSH_SK_PROVIDER environment variable, and ssh-keygen's new -w and -x options. Copy the ssh-sk-helper man page from ssh-pkcs11-helper with minimal substitutions. ok djm@ | ||||
| * | sort; | jmc | 2019-11-01 | 1 | -6/+6 |
| | | |||||
| * | ssh-add support for U2F/FIDO keys | djm | 2019-10-31 | 1 | -2/+11 |
| | | |||||
| * | add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up debug | djm | 2019-01-21 | 1 | -2/+12 |
| | | | | | | | | | | | verbosity. Make ssh-agent turn on ssh-pkcs11-helper's verbosity when it is run in debug mode ("ssh-agent -d"), so we get to see errors from the PKCS#11 code. ok markus@ | ||||
| * | - -T was added to the first synopsis by mistake | jmc | 2019-01-21 | 1 | -6/+5 |
| | | | | | | | - since "..." denotes optional, no need to surround it in [] ok djm | ||||
| * | add option to test whether keys in an agent are usable, by performing | djm | 2019-01-20 | 1 | -3/+11 |
| | | | | | | | a signature and a verification using each key "ssh-add -T pubkey [...]" work by markus@, ok djm@ | ||||
| * | sort options; | jmc | 2017-08-29 | 1 | -3/+3 |
| | | |||||
| * | add a -q option to ssh-add to make it quiet on success. |   dlg | 2017-08-29 | 1 | -3/+5 |
| | | | | | | | | | if you want to silence ssh-add without this you generally redirect the output to /dev/null, but that can hide error output which you should see. ok djm@ | ||||
| * | remove superfluous protocol 2 mentions; ok jmc@ | naddy | 2017-05-05 | 1 | -6/+6 |
| | | |||||
| * | more protocol 1 stuff to go; ok djm | jmc | 2017-05-03 | 1 | -6/+3 |
| | | |||||
| * | ssh-askpass(1) is the default, overridden by SSH_ASKPASS; | jmc | 2015-03-30 | 1 | -8/+10 |
| | | | | | diff originally from jiri b; | ||||
| * | Add FingerprintHash option to control algorithm used for key | djm | 2014-12-21 | 1 | -2/+11 |
| | | | | | | | | fingerprints. Default changes from MD5 to SHA256 and format from hex to base64. Feedback and ok naddy@ markus@ | ||||
| * | improve capitalization for the Ed25519 public-key signature system. |   sobrado | 2014-08-30 | 1 | -3/+3 |
| | | | | | ok djm@ | ||||
| * | add missing mentions of ed25519; ok djm@ | naddy | 2013-12-07 | 1 | -3/+6 |
| | | |||||
| * | tweak previous; | jmc | 2012-12-03 | 1 | -3/+3 |
| | | |||||
| * | make deleting explicit keys "ssh-add -d" symmetric with adding keys - | djm | 2012-12-02 | 1 | -7/+7 |
| | | | | | | try to delete the corresponding certificate too and respect the -k option to allow deleting of the key only; feedback and ok markus@ | ||||
| * | new "ssh-add -k" option to load plain keys (skipping certificates); | djm | 2011-10-18 | 1 | -3/+6 |
| | | | | | "looks ok" markus@ | ||||
| * | knock out some "-*- nroff -*-" lines; | jmc | 2010-10-28 | 1 | -4/+2 |
| | | |||||
| * | two more EXIT STATUS sections; | jmc | 2010-09-04 | 1 | -3/+3 |
| | | |||||
| * | Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and | djm | 2010-08-31 | 1 | -5/+8 |
| | | | | | | | | | | | | | | | | | | host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer better performance than plain DH and DSA at the same equivalent symmetric key length, as well as much shorter keys. Only the mandatory sections of RFC5656 are implemented, specifically the three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and ECDSA. Point compression (optional in RFC5656 is NOT implemented). Certificate host and user keys using the new ECDSA key types are supported. Note that this code has not been tested for interoperability and may be subject to change. feedback and ok markus@ | ||||
| * | mention loading of certificate files from [private]-cert.pub when | djm | 2010-03-05 | 1 | -2/+9 |
| | | | | | they are present; feedback and ok jmc@ | ||||
| * | pkcs#11 is no longer optional; improve wording; ok jmc@ |   markus | 2010-02-10 | 1 | -4/+4 |
| | | |||||
| * | tweak previous; ok markus | jmc | 2010-02-08 | 1 | -4/+4 |
| | | |||||
| * | replace our obsolete smartcard code with PKCS#11. | markus | 2010-02-08 | 1 | -8/+8 |
| | | | | | | | | | | ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev | ||||
| * | write UNIX-domain in a more consistent way; while here, replace a | sobrado | 2009-10-22 | 1 | -3/+3 |
| | | | | | | | | | few remaining ".Tn UNIX" macros with ".Ux" ones. pointed out by ratchov@, thanks! ok jmc@ | ||||
| * | use the UNIX-related macros (.At and .Ux) where appropriate. | sobrado | 2009-10-22 | 1 | -4/+5 |
| | | | | | ok jmc@ | ||||
| * | identies -> identities; | jmc | 2007-06-12 | 1 | -3/+3 |
| | | |||||
| * | better document ssh-add's -d option (delete identies from agent), bz#1224 | djm | 2007-06-12 | 1 | -3/+14 |
| | | | | | | new text based on some provided by andrewmc-debian AT celt.dias.ie; ok dtucker@ | ||||
| * | convert to new .Dd format; | jmc | 2007-05-31 | 1 | -2/+2 |
| | | |||||
| * | OpenSSH doesn't ever look at the $HOME environment variable, so don't say | djm | 2005-04-21 | 1 | -7/+7 |
| | | | | | that we do (bz #623); ok deraadt@ | ||||
| * | sort options; | jmc | 2005-03-01 | 1 | -22/+23 |
| | | |||||
| * | .Xsession -> .xsession; | jmc | 2004-08-30 | 1 | -2/+2 |
| | | | | | | | originally from a pr from f at obiit dot org, but missed by myself; ok markus@ matthieu@ | ||||
| * | ssh-add doesn't need to be a descendant of ssh-agent. Ok markus@, jmc@. |   matthieu | 2003-11-25 | 1 | -3/+4 |
| | | |||||
| * | - section reorder | jmc | 2003-06-10 | 1 | -20/+20 |
| | | | | | | | | | | - COMPATIBILITY merge - macro cleanup - kill whitespace at EOL - new sentence, new line ssh pages ok markus@ | ||||
| * | - killed whitespace | jmc | 2003-03-28 | 1 | -4/+5 |
| | | | | | | | | - new sentence new line - .Bk for arguments ok markus@ | ||||
| * | xref sshd_config.5 (not sshd.8); mark@summersault.com; bug #490 | markus | 2003-02-10 | 1 | -2/+2 |
| | | |||||
| * | ssh-add -c, prompt user for confirmation (using ssh-askpass) when | markus | 2003-01-23 | 1 | -2/+10 |
| | | | | | private agent key is used; with djm@; test by dugsong@, djm@; ok deraadt@ | ||||
| * | KNF done automatically while reading.... |   deraadt | 2002-06-19 | 1 | -2/+2 |
| | | |||||
| * | use convtime() to parse and validate key lifetime. can now |   stevesk | 2002-06-10 | 1 | -2/+4 |
| | | | | | use '-t 2h' etc. ok markus@ provos@ | ||||
| * | ssh-add -t life, Set lifetime (in seconds) when adding identities; ok provos@ | markus | 2002-06-05 | 1 | -1/+5 |
| | | |||||
| * | ssh-add -x for lock and -X for unlocking the agent. | markus | 2002-06-05 | 1 | -2/+6 |
| | | | | | todo: encrypt private keys with locked... | ||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |