| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | support ed25519 keys (hostkeys and user identities) using the public domain |   markus | 2013-12-06 | 1 | -5/+11 | |
| | | | | | | ed25519 reference code from SUPERCOP, see http://ed25519.cr.yp.to/software.html feedback, help & ok djm@ | |||||
| * | use curve25519 for default key exchange (curve25519-sha256@libssh.org); | markus | 2013-11-02 | 1 | -1/+2 | |
| | | | | | initial patch from Aris Adamantiadis; ok djm@ | |||||
| * | bye, bye xfree(); ok markus@ |   djm | 2013-05-17 | 1 | -8/+8 | |
| | | ||||||
| * | now that sshd defaults to offering ECDSA keys, ssh-keyscan should also | djm | 2012-04-11 | 1 | -2/+2 | |
| | | | | | look for them by default; bz#1971 | |||||
| * | use timerclear macro |   okan | 2011-03-15 | 1 | -2/+2 | |
| | | | | | ok djm@ | |||||
| * | handle ecdsa-sha2 with various key lengths; hint and ok djm@ |   otto | 2011-01-04 | 1 | -3/+4 | |
| | | ||||||
| * | Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and | djm | 2010-08-31 | 1 | -4/+9 | |
| | | | | | | | | | | | | | | | | | | host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer better performance than plain DH and DSA at the same equivalent symmetric key length, as well as much shorter keys. Only the mandatory sections of RFC5656 are implemented, specifically the three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and ECDSA. Point compression (optional in RFC5656 is NOT implemented). Certificate host and user keys using the new ECDSA key types are supported. Note that this code has not been tested for interoperability and may be subject to change. feedback and ok markus@ | |||||
| * | replace verbose and overflow-prone Linebuf code with read_keyfile_line() | djm | 2010-06-22 | 1 | -129/+36 | |
| | | | | | based on patch from joachim AT joachimschipper.nl; bz#1565; ok dtucker@ | |||||
| * | Remove RoutingDomain from ssh since it's now not needed. It can be replaced |   dtucker | 2010-01-09 | 1 | -15/+4 | |
| | | | | | | | | | | | | | | with "route exec" or "nc -V" as a proxycommand. "route exec" also ensures that trafic such as DNS lookups stays withing the specified routingdomain. For example (from reyk): # route -T 2 exec /usr/sbin/sshd or inherited from the parent process $ route -T 2 exec sh $ ssh 10.1.2.3 ok deraadt@ markus@ stevesk@ reyk@ | |||||
| * | validate routing domain is in range 0-RT_TABLEID_MAX. |   stevesk | 2009-12-25 | 1 | -4/+6 | |
| | | | | | 'Looks right' deraadt@ | |||||
| * | Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan. |   reyk | 2009-10-28 | 1 | -4/+13 | |
| | | | | | ok markus@ | |||||
| * | make a2port() return -1 when it encounters an invalid port number | djm | 2009-01-22 | 1 | -2/+2 | |
| | | | | | | | | | | | | rather than 0, which it will now treat as valid (needed for future work) adjust current consumers of a2port() to check its return value is <= 0, which in turn required some things to be converted from u_short => int make use of int vs. u_short consistent in some other places too feedback & ok markus@ | |||||
| * | the ellipsis is not an optional argument; while here, improve spacing. |   sobrado | 2008-11-01 | 1 | -3/+4 | |
| | | ||||||
| * | default to rsa (protocol 2) keys, instead of rsa1 keys; spotted by | djm | 2008-04-30 | 1 | -2/+2 | |
| | | | | | larsnooden AT openoffice.org | |||||
| * | Add a small helper function to consistently handle the EAI_SYSTEM error | dtucker | 2007-12-27 | 1 | -2/+2 | |
| | | | | | | code of getaddrinfo. Prompted by vgiffin at apple com via bz #1417. ok markus@ stevesk@ | |||||
| * | sys/resource.h needs sys/time.h; prompted by brad@ | djm | 2006-10-06 | 1 | -2/+2 | |
| | | ||||||
| * | almost entirely get rid of the culture of ".h files that include .h files" |   deraadt | 2006-08-03 | 1 | -5/+4 | |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | |||||
| * | move #include <stdio.h> out of includes.h | stevesk | 2006-08-01 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <stdlib.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/time.h> out of includes.h | stevesk | 2006-07-25 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -3/+4 | |
| | | ||||||
| * | move #include <unistd.h> out of includes.h | stevesk | 2006-07-17 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <netdb.h> out of includes.h; ok djm@ | stevesk | 2006-07-12 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <stdarg.h> out of includes.h; ok markus@ | stevesk | 2006-07-10 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/socket.h> out of includes.h | stevesk | 2006-07-08 | 1 | -1/+3 | |
| | | ||||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 | |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | |||||
| * | introduce xcalloc() and xasprintf() failure-checked allocations functions | djm | 2006-03-25 | 1 | -10/+8 | |
| | | | | | | | | | | | and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@ | |||||
| * | please lint | deraadt | 2006-03-19 | 1 | -2/+1 | |
| | | ||||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 | |
| | | ||||||
| * | Implement the diffie-hellman-group-exchange-sha256 key exchange method | djm | 2006-03-07 | 1 | -1/+2 | |
| | | | | | | using the SHA256 code in libc (and wrapper to make it into an OpenSSL EVP), interop tested against CVS PuTTY | |||||
| * | move #include <sys/resource.h> out of includes.h; ok markus@ | stevesk | 2006-02-08 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/queue.h> out of includes.h; ok markus@ | stevesk | 2006-02-07 | 1 | -2/+3 | |
| | | ||||||
| * | make ssh-keygen discard junk from server before SSH- ident, spotted by | djm | 2005-10-30 | 1 | -7/+13 | |
| | | | | | dave AT cirt.net; ok dtucker@ | |||||
| * | ensure that stdio fds are attached; ok deraadt@ | djm | 2005-09-13 | 1 | -1/+4 | |
| | | ||||||
| * | make this -Wsign-compare clean; ok avsm@ markus@ | djm | 2005-06-17 | 1 | -6/+6 | |
| | | ||||||
| * | Switch atomicio to use a simpler interface; it now returns a size_t |   avsm | 2005-05-24 | 1 | -12/+15 | |
| | | | | | | | | | | | | (containing number of bytes read/written), and indicates error by returning 0. EOF is signalled by errno==EPIPE. Typical use now becomes: if (atomicio(read, ..., len) != len) err(1,"read"); ok deraadt@, cloder@, djm@ | |||||
| * | add snprintf checks. ok djm@ markus@ |   moritz | 2005-04-28 | 1 | -1/+6 | |
| | | ||||||
| * | sort options and sync usage(); |   jmc | 2005-03-01 | 1 | -2/+2 | |
| | | ||||||
| * | option to hash hostnames output by ssh-keyscan; ok markus@ deraadt@ | djm | 2005-03-01 | 1 | -4/+14 | |
| | | ||||||
| * | use atomicio instead of homegrown equivalents or read/write. | avsm | 2004-08-11 | 1 | -3/+3 | |
| | | | | | markus@ ok | |||||
| * | set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@ | djm | 2004-06-14 | 1 | -3/+3 | |
| | | ||||||
| * | implement diffie-hellman-group14-sha1 kex method (trivial extension to | djm | 2004-06-13 | 1 | -1/+2 | |
| | | | | | existing diffie-hellman-group1-sha1); ok markus@ | |||||
| * | explicitly initialise remote_major and remote_minor. | djm | 2004-03-08 | 1 | -2/+2 | |
| | | | | | from cjwatson AT debian.org; ok markus@ | |||||
| * | from portable - use sysconf to detect fd limit; ok markus@ | djm | 2003-11-23 | 1 | -2/+2 | |
| | | ||||||
| * | avoid fatal_cleanup, just call exit(); ok deraadt | markus | 2003-09-19 | 1 | -2/+2 | |
| | | ||||||
| * | deal with typing of write vs read in atomicio | deraadt | 2003-06-28 | 1 | -2/+2 | |
| | | ||||||
| * | -t in usage(); rogier@quaak.org | deraadt | 2003-04-26 | 1 | -2/+2 | |
| | | ||||||
| * | avoid hardcoded SOCK_xx; with itojun@; should allow ssh over SCTP | markus | 2003-04-14 | 1 | -2/+2 | |
| | | ||||||
| * | split kex into client and server code, no need to link | markus | 2003-02-16 | 1 | -1/+3 | |
| | | | | | server code into the client; ok provos@ | |||||
| * | unused variable | stevesk | 2002-07-06 | 1 | -2/+1 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |