| Commit message (Expand) | Author | Age | Files | Lines |
| * | updated argument name for -P in first synopsis was missed in previous; |  jmc | 2020-06-22 | 1 | -2/+2 |
| * | better terminology for permissions; feedback & ok markus@ |  djm | 2020-06-22 | 1 | -12/+12 |
| * | Correct synopsis and usage for the options accepted when passing a command |  dtucker | 2020-06-19 | 1 | -2/+4 |
| * | Restrict ssh-agent from signing web challenges for FIDO keys. |  djm | 2020-05-26 | 1 | -10/+100 |
| * | initialize seconds for debug message; ok djm |  markus | 2020-03-06 | 1 | -2/+2 |
| * | change explicit_bzero();free() to freezero() |  jsg | 2020-02-26 | 1 | -3/+2 |
| * | Replace "security key" with "authenticator" in program messages. |  naddy | 2020-02-06 | 1 | -3/+3 |
| * | process security key provider via realpath() in agent, avoids |  djm | 2020-01-25 | 1 | -7/+19 |
| * | expose PKCS#11 key labels/X.509 subjects as comments |  djm | 2020-01-25 | 1 | -6/+13 |
| * | Replace all calls to signal(2) with a wrapper around sigaction(2). |  dtucker | 2020-01-23 | 1 | -5/+5 |
| * | use ssh-sk-helper for all security key signing operations |  djm | 2019-12-13 | 1 | -140/+20 |
| * | revert previous: naddy pointed out what's meant to happen. rethink needed... |  jmc | 2019-11-19 | 1 | -3/+4 |
| * | -c and -s do not make sense with -k; reshuffle -k into the main synopsis/usage; |  jmc | 2019-11-19 | 1 | -4/+3 |
| * | additional missing stdarg.h includes when built without WITH_OPENSSL; ok djm@ |  naddy | 2019-11-18 | 1 | -1/+2 |
| * | always use ssh-sk-helper, even for the internal USB HID support. |  djm | 2019-11-16 | 1 | -33/+11 |
| * | unshield security key privkey before attempting signature in |  djm | 2019-11-15 | 1 | -4/+16 |
| * | don't consult dlopen whitelist for internal security key provider; |  djm | 2019-11-15 | 1 | -2/+4 |
| * | show the "please touch your security key" notifier when using the |  djm | 2019-11-15 | 1 | -9/+15 |
| * | directly support U2F/FIDO2 security keys in OpenSSH by linking |  djm | 2019-11-14 | 1 | -1/+6 |
| * | fix shield/unshield for xmss keys: |  markus | 2019-11-13 | 1 | -5/+5 |
| * | security keys typically need to be tapped/touched in order to perform |  djm | 2019-11-12 | 1 | -2/+11 |
| * | enable ed25519 support; ok djm |  markus | 2019-11-12 | 1 | -2/+2 |
| * | Refactor signing - use sshkey_sign for everything, including the new |  djm | 2019-10-31 | 1 | -3/+4 |
| * | ssh-agent support for U2F/FIDO keys |  djm | 2019-10-31 | 1 | -19/+199 |
| * | When system calls indicate an error they return -1, not some arbitrary |  deraadt | 2019-06-28 | 1 | -5/+5 |
| * | Add protection for private keys at rest in RAM against speculation |  djm | 2019-06-21 | 1 | -2/+5 |
| * | process agent requests for RSA certificate private keys using correct |  djm | 2019-06-14 | 1 | -1/+6 |
| * | Replace calls to ssh_malloc_init() by a static init of malloc_options. |  otto | 2019-06-06 | 1 | -2/+1 |
| * | backoff reading messages from active connections when the input buffer |  djm | 2019-01-22 | 1 | -4/+18 |
| * | typo in error message; caught by Debian lintian, via Colin Watson |  djm | 2018-11-09 | 1 | -2/+2 |
| * | implement EMFILE mitigation for ssh-agent: remember the fd rlimit |  djm | 2018-05-11 | 1 | -11/+49 |
| * | lots of typos in comments/docs. Patch from Karsten Weiss after checking |  djm | 2018-04-10 | 1 | -2/+2 |
| * | don't kill ssh-agent's listening socket entriely if we fail to accept a |  djm | 2018-04-09 | 1 | -4/+3 |
| * | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) |  markus | 2018-02-23 | 1 | -5/+19 |
| * | Drop compatibility hacks for some ancient SSH implementations, including |  djm | 2018-01-23 | 1 | -3/+1 |
| * | downgrade a couple more request parsing errors from process-fatal to |  djm | 2017-11-15 | 1 | -10/+23 |
| * | fix regression in 7.6: failure to parse a signature request message |  djm | 2017-11-15 | 1 | -3/+6 |
| * | g/c unused variable; make a little more portable |  djm | 2017-07-24 | 1 | -5/+3 |
| * | switch from select() to poll() for the ssh-agent mainloop; ok markus |  djm | 2017-07-19 | 1 | -125/+183 |
| * | remove post-SSHv1 removal dead code from rsa.c and merge the |  djm | 2017-07-01 | 1 | -2/+1 |
| * | flense SSHv1 support from ssh-agent, considerably simplifying it |  djm | 2017-04-30 | 1 | -162/+90 |
| * | remove KEY_RSA1 |  djm | 2017-04-30 | 1 | -16/+12 |
| * | unifdef WITH_SSH1 |  djm | 2017-04-30 | 1 | -172/+1 |
| * | accidents happen to the best of us; ok djm |  deraadt | 2017-03-15 | 1 | -1/+2 |
| * | fix regression in 7.4: deletion of PKCS#11-hosted keys would fail |  djm | 2017-03-15 | 1 | -4/+11 |
| * | relax PKCS#11 whitelist a bit to allow libexec as well as lib |  djm | 2017-01-04 | 1 | -2/+2 |
| * | add a whitelist of paths from which ssh-agent will load (via |  djm | 2016-11-30 | 1 | -8/+35 |
| * | Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitions |  deraadt | 2016-09-12 | 1 | -5/+4 |
| * | fix signed/unsigned errors reported by clang-3.7; add |  djm | 2016-05-02 | 1 | -7/+8 |
| * | Add a function to enable security-related malloc_options. With and ok |  dtucker | 2016-02-15 | 1 | -1/+2 |