| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | include port number if a non-default one has been specified; |   djm | 2015-04-10 | 1 | -3/+6 |
| | | | | | based on patch from Michael Handler | ||||
| * | Do not use int for sig_atomic_t; spotted by christos@netbsd; ok markus@ |   miod | 2015-04-05 | 1 | -2/+2 |
| | | |||||
| * | set a timeout to prevent hangs when talking to busted servers; | djm | 2015-01-30 | 1 | -1/+2 |
| | | | | | ok markus@ | ||||
| * | avoid more fatal/exit in the packet.c paths that ssh-keyscan | djm | 2015-01-30 | 1 | -2/+3 |
| | | | | | uses; feedback and "looks good" markus@ | ||||
| * | avoid fatal() calls in packet code | djm | 2015-01-28 | 1 | -3/+5 |
| | | | | | | makes ssh-keyscan more reliable against server failures ok dtucker@ markus@ | ||||
| * | Reduce use of <sys/param.h> and transition to <limits.h> throughout. |   deraadt | 2015-01-20 | 1 | -2/+1 |
| | | | | | ok djm markus | ||||
| * | switch ssh-keyscan from setjmp to multiple ssh transport layer instances |   markus | 2015-01-19 | 1 | -68/+81 |
| | | | | | ok djm@ | ||||
| * | adapt kex to sshbuf and struct ssh; ok djm@ | markus | 2015-01-19 | 1 | -6/+8 |
| | | |||||
| * | explicitly include sys/param.h in files that use the howmany() macro; | djm | 2014-12-11 | 1 | -1/+2 |
| | | | | | from portable | ||||
| * | make compiling against OpenSSL optional (make OPENSSL=no); | markus | 2014-04-29 | 1 | -1/+7 |
| | | | | | | reduces algorithms to curve25519, aes-ctr, chacha, ed25519; allows us to explore further options; with and ok djm | ||||
| * | disable weak proposals in sshd, but keep them in ssh; ok djm@ | markus | 2014-03-27 | 1 | -1/+2 |
| | | |||||
| * | scan for Ed25519 keys by default too | djm | 2014-03-12 | 1 | -2/+2 |
| | | |||||
| * | support ed25519 keys (hostkeys and user identities) using the public domain | markus | 2013-12-06 | 1 | -5/+11 |
| | | | | | | ed25519 reference code from SUPERCOP, see http://ed25519.cr.yp.to/software.html feedback, help & ok djm@ | ||||
| * | use curve25519 for default key exchange (curve25519-sha256@libssh.org); | markus | 2013-11-02 | 1 | -1/+2 |
| | | | | | initial patch from Aris Adamantiadis; ok djm@ | ||||
| * | bye, bye xfree(); ok markus@ | djm | 2013-05-17 | 1 | -8/+8 |
| | | |||||
| * | now that sshd defaults to offering ECDSA keys, ssh-keyscan should also | djm | 2012-04-11 | 1 | -2/+2 |
| | | | | | look for them by default; bz#1971 | ||||
| * | use timerclear macro |   okan | 2011-03-15 | 1 | -2/+2 |
| | | | | | ok djm@ | ||||
| * | handle ecdsa-sha2 with various key lengths; hint and ok djm@ |   otto | 2011-01-04 | 1 | -3/+4 |
| | | |||||
| * | Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and | djm | 2010-08-31 | 1 | -4/+9 |
| | | | | | | | | | | | | | | | | | | host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer better performance than plain DH and DSA at the same equivalent symmetric key length, as well as much shorter keys. Only the mandatory sections of RFC5656 are implemented, specifically the three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and ECDSA. Point compression (optional in RFC5656 is NOT implemented). Certificate host and user keys using the new ECDSA key types are supported. Note that this code has not been tested for interoperability and may be subject to change. feedback and ok markus@ | ||||
| * | replace verbose and overflow-prone Linebuf code with read_keyfile_line() | djm | 2010-06-22 | 1 | -129/+36 |
| | | | | | based on patch from joachim AT joachimschipper.nl; bz#1565; ok dtucker@ | ||||
| * | Remove RoutingDomain from ssh since it's now not needed. It can be replaced |   dtucker | 2010-01-09 | 1 | -15/+4 |
| | | | | | | | | | | | | | | with "route exec" or "nc -V" as a proxycommand. "route exec" also ensures that trafic such as DNS lookups stays withing the specified routingdomain. For example (from reyk): # route -T 2 exec /usr/sbin/sshd or inherited from the parent process $ route -T 2 exec sh $ ssh 10.1.2.3 ok deraadt@ markus@ stevesk@ reyk@ | ||||
| * | validate routing domain is in range 0-RT_TABLEID_MAX. |   stevesk | 2009-12-25 | 1 | -4/+6 |
| | | | | | 'Looks right' deraadt@ | ||||
| * | Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan. |   reyk | 2009-10-28 | 1 | -4/+13 |
| | | | | | ok markus@ | ||||
| * | make a2port() return -1 when it encounters an invalid port number | djm | 2009-01-22 | 1 | -2/+2 |
| | | | | | | | | | | | | rather than 0, which it will now treat as valid (needed for future work) adjust current consumers of a2port() to check its return value is <= 0, which in turn required some things to be converted from u_short => int make use of int vs. u_short consistent in some other places too feedback & ok markus@ | ||||
| * | the ellipsis is not an optional argument; while here, improve spacing. |   sobrado | 2008-11-01 | 1 | -3/+4 |
| | | |||||
| * | default to rsa (protocol 2) keys, instead of rsa1 keys; spotted by | djm | 2008-04-30 | 1 | -2/+2 |
| | | | | | larsnooden AT openoffice.org | ||||
| * | Add a small helper function to consistently handle the EAI_SYSTEM error | dtucker | 2007-12-27 | 1 | -2/+2 |
| | | | | | | code of getaddrinfo. Prompted by vgiffin at apple com via bz #1417. ok markus@ stevesk@ | ||||
| * | sys/resource.h needs sys/time.h; prompted by brad@ | djm | 2006-10-06 | 1 | -2/+2 |
| | | |||||
| * | almost entirely get rid of the culture of ".h files that include .h files" | deraadt | 2006-08-03 | 1 | -5/+4 |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
| * | move #include <stdio.h> out of includes.h | stevesk | 2006-08-01 | 1 | -1/+2 |
| | | |||||
| * | move #include <stdlib.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 |
| | | |||||
| * | move #include <sys/time.h> out of includes.h | stevesk | 2006-07-25 | 1 | -1/+2 |
| | | |||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -3/+4 |
| | | |||||
| * | move #include <unistd.h> out of includes.h | stevesk | 2006-07-17 | 1 | -1/+2 |
| | | |||||
| * | move #include <netdb.h> out of includes.h; ok djm@ | stevesk | 2006-07-12 | 1 | -1/+2 |
| | | |||||
| * | move #include <stdarg.h> out of includes.h; ok markus@ | stevesk | 2006-07-10 | 1 | -1/+2 |
| | | |||||
| * | move #include <sys/socket.h> out of includes.h | stevesk | 2006-07-08 | 1 | -1/+3 |
| | | |||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | ||||
| * | introduce xcalloc() and xasprintf() failure-checked allocations functions | djm | 2006-03-25 | 1 | -10/+8 |
| | | | | | | | | | | | and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@ | ||||
| * | please lint | deraadt | 2006-03-19 | 1 | -2/+1 |
| | | |||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 |
| | | |||||
| * | Implement the diffie-hellman-group-exchange-sha256 key exchange method | djm | 2006-03-07 | 1 | -1/+2 |
| | | | | | | using the SHA256 code in libc (and wrapper to make it into an OpenSSL EVP), interop tested against CVS PuTTY | ||||
| * | move #include <sys/resource.h> out of includes.h; ok markus@ | stevesk | 2006-02-08 | 1 | -1/+2 |
| | | |||||
| * | move #include <sys/queue.h> out of includes.h; ok markus@ | stevesk | 2006-02-07 | 1 | -2/+3 |
| | | |||||
| * | make ssh-keygen discard junk from server before SSH- ident, spotted by | djm | 2005-10-30 | 1 | -7/+13 |
| | | | | | dave AT cirt.net; ok dtucker@ | ||||
| * | ensure that stdio fds are attached; ok deraadt@ | djm | 2005-09-13 | 1 | -1/+4 |
| | | |||||
| * | make this -Wsign-compare clean; ok avsm@ markus@ | djm | 2005-06-17 | 1 | -6/+6 |
| | | |||||
| * | Switch atomicio to use a simpler interface; it now returns a size_t |   avsm | 2005-05-24 | 1 | -12/+15 |
| | | | | | | | | | | | | (containing number of bytes read/written), and indicates error by returning 0. EOF is signalled by errno==EPIPE. Typical use now becomes: if (atomicio(read, ..., len) != len) err(1,"read"); ok deraadt@, cloder@, djm@ | ||||
| * | add snprintf checks. ok djm@ markus@ |   moritz | 2005-04-28 | 1 | -1/+6 |
| | | |||||
| * | sort options and sync usage(); |   jmc | 2005-03-01 | 1 | -2/+2 |
| | | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |