summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/ssh-keygen.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* Replace calls to ssh_malloc_init() by a static init of malloc_options.otto2019-06-061-2/+1
* Make the standard output messages of both methods of changing a keylum2019-05-291-5/+16
* Expand comment to document rationale for default key sizes.dtucker2019-03-251-3/+10
* Increase the default RSA key size to 3072 bits. Based on the estimatesdtucker2019-03-251-3/+6
* ssh-keygen -D pkcs11.so needs to initialize pkcs11 interactive,benno2019-02-101-2/+2
* allow auto-incrementing certificate serial number for certs signeddjm2019-01-231-5/+12
* move a bunch of global flag variables to main(); make the rest staticdjm2019-01-231-94/+82
* add -m to usage(); reminded by jmc@djm2019-01-221-3/+4
* when printing certificate contents "ssh-keygen -Lf /path/certificate",djm2018-10-191-3/+4
* garbage-collect moribund ssh_new_private() API.djm2018-09-141-3/+3
* hold our collective noses and use the openssl-1.1.x API in OpenSSH;djm2018-09-131-16/+47
* allow key revocation by SHA256 hash and allow ssh-keygen to create KRLsdjm2018-09-121-8/+67
* Use new private key format by default. This format is suported bydjm2018-08-081-3/+4
* replace cast with call to sshbuf_mutable_ptr(); ok djm@markus2018-07-091-2/+2
* switch config file parsing to getline(3) as this avoids static limitsmarkus2018-06-061-8/+17
* whitespacedjm2018-06-011-2/+2
* return correct exit code when searching for and hashing known_hostsdjm2018-06-011-5/+4
* add valid-before="[time]" authorized_keys option. A simple way ofdjm2018-03-121-39/+5
* Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures)markus2018-02-231-4/+15
* Refuse to create a certificate with an unusable number of principals;djm2018-02-101-1/+3
* fatal if we're unable to write all the public key; previously wedjm2018-02-101-2/+3
* Remove some #ifdef notyet code from OpenSSL 0.9.8 days.jsing2018-02-071-23/+1
* pass negotiated signing algorithm though to sshkey_verify() anddjm2017-12-181-2/+2
* allow certificate validity intervals that specify only a start ordjm2017-11-031-4/+8
* When generating all hostkeys (ssh-keygen -A), clobber existing keysdjm2017-07-071-34/+72
* remove post-SSHv1 removal dead code from rsa.c and merge thedjm2017-07-011-3/+2
* Allow ssh-keygen to use a key held in ssh-agent as a CA when signingdjm2017-06-281-9/+67
* remove unused wrapper functions from key.[ch]; ok djm@markus2017-05-301-10/+10
* Refuse RSA keys <1024 bits in length. Improve reporting for keys thatdjm2017-05-071-8/+16
* remove KEY_RSA1djm2017-04-301-22/+5
* unifdef WITH_SSH1djm2017-04-301-8/+1
* allow ssh-keygen to include arbitrary string or flag certificatedjm2017-04-291-2/+37
* ensure hostname is lower-case before hashing it; bz#2591 reported bydjm2017-03-101-1/+2
* Check l->hosts before dereferencing; fixes potential null pointer deref.dtucker2017-03-061-2/+2
* linenum is unsigned long so use %lu in log formats. ok deraadt@dtucker2017-03-061-6/+6
* fix ssh-keygen -H accidentally corrupting known_hosts that containeddjm2017-03-031-3/+3
* Do not show rsa1 key type in usage when compiled without SSH1 support.dtucker2017-02-171-3/+9
* Sanitise escape sequences in key comments sent to printf but preservedjm2017-02-101-4/+8
* Avoid printf %s NULL. From semarie@, OK djm@millert2017-02-081-2/+5
* Spaces->tabs.dtucker2016-09-121-3/+3
* Style whitespace fix. Also happens to remove a no-op diff with portable.dtucker2016-09-121-3/+2
* support SHA256 and SHA512 RSA signatures in certificates;djm2016-05-021-3/+9
* fix signed/unsigned errors reported by clang-3.7; adddjm2016-05-021-4/+4
* Add a function to enable security-related malloc_options. With and okdtucker2016-02-151-1/+2
* use SSH_MAX_PUBKEY_BYTES consistently as buffer size when reading keydjm2015-12-111-3/+3
* Remove NULL-checks before sshkey_free().mmcc2015-12-111-3/+2
* implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures (user and host auth)markus2015-12-041-2/+2
* do not leak temp file if there is no known_hosts filederaadt2015-11-281-2/+5
* allow comment change for all supported formatshalex2015-11-201-4/+6
* trailing whitespacedjm2015-11-191-4/+4