| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | add an XXX reminder for getting correct key paths from sshd_config |   djm | 2015-07-03 | 1 | -1/+2 |
| | | |||||
| * | consistent check for NULL as noted by Nicholas Lemonias; ok djm@ |   markus | 2015-03-24 | 1 | -2/+2 |
| | | |||||
| * | update to new API (key_fingerprint => sshkey_fingerprint) | djm | 2015-01-28 | 1 | -3/+4 |
| | | | | | | check sshkey_fingerprint return values; ok markus | ||||
| * | sync ssh-keysign, ssh-keygen and some dependencies to the new | djm | 2015-01-15 | 1 | -52/+68 |
| | | | | | buffer/key API; mostly mechanical, ok markus@ | ||||
| * | deprecate key_load_private_pem() and sshkey_load_private_pem() | djm | 2015-01-08 | 1 | -8/+13 |
| | | | | | | | | | | | | | | | | interfaces. Refactor the generic key loading API to not require pathnames to be specified (they weren't really used). Fixes a few other things en passant: Makes ed25519 keys work for hostbased authentication (ssh-keysign previously used the PEM-only routines). Fixes key comment regression bz#2306: key pathnames were being lost as comment fields. ok markus@ | ||||
| * | Add FingerprintHash option to control algorithm used for key | djm | 2014-12-21 | 1 | -2/+3 |
| | | | | | | | | fingerprints. Default changes from MD5 to SHA256 and format from hex to base64. Feedback and ok naddy@ markus@ | ||||
| * | Tweak config reparsing with host canonicalisation | djm | 2014-10-08 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | | Make the second pass through the config files always run when hostname canonicalisation is enabled. Add a "Match canonical" criteria that allows ssh_config Match blocks to trigger only in the second config pass. Add a -G option to ssh that causes it to parse its configuration and dump the result to stdout, similar to "sshd -T" Allow ssh_config Port options set in the second config parse phase to be applied (they were being ignored). bz#2267 bz#2286; ok markus | ||||
| * | make compiling against OpenSSL optional (make OPENSSL=no); | markus | 2014-04-29 | 1 | -1/+4 |
| | | | | | | reduces algorithms to curve25519, aes-ctr, chacha, ed25519; allows us to explore further options; with and ok djm | ||||
| * | Delete futile calls to RAND_seed. ok djm |   tedu | 2014-04-19 | 1 | -5/+1 |
| | | |||||
| * | include fingerprint of key not found | djm | 2014-04-01 | 1 | -6/+8 |
| | | | | | use arc4random_buf() instead of loop+arc4random() | ||||
| * | support ed25519 keys (hostkeys and user identities) using the public domain | markus | 2013-12-06 | 1 | -2/+3 |
| | | | | | | ed25519 reference code from SUPERCOP, see http://ed25519.cr.yp.to/software.html feedback, help & ok djm@ | ||||
| * | add a "Match" keyword to ssh_config that allows matching on hostname, | djm | 2013-10-14 | 1 | -2/+2 |
| | | | | | user and result of arbitrary commands. "nice work" markus@ | ||||
| * | bye, bye xfree(); ok markus@ | djm | 2013-05-17 | 1 | -10/+10 |
| | | |||||
| * | make hostbased auth with ECDSA keys work correctly. Based on patch | djm | 2011-02-16 | 1 | -8/+15 |
| | | | | | by harvey.eneman AT oracle.com in bz#1858; ok markus@ (pre-lock) | ||||
| * | reintroduce commit from tedu@, which I pulled out for release engineering: | djm | 2010-08-31 | 1 | -2/+2 |
| | | | | | | OpenSSL_add_all_algorithms is the name of the function we have a man page for, so use that. ok djm | ||||
| * | backout previous temporarily; discussed with deraadt@ | djm | 2010-08-16 | 1 | -2/+2 |
| | | |||||
| * | OpenSSL_add_all_algorithms is the name of the function we have a man page | tedu | 2010-08-12 | 1 | -2/+2 |
| | | | | | for, so use that. ok djm | ||||
| * | clean for -Wuninitialized | djm | 2010-08-04 | 1 | -2/+2 |
| | | |||||
| * | enable certificates for hostbased authentication, from Iain Morgan; | djm | 2010-08-04 | 1 | -2/+2 |
| | | | | | "looks ok" markus@ | ||||
| * | Make HostBased authentication work with a ProxyCommand. bz #1569, patch |   dtucker | 2010-01-13 | 1 | -2/+2 |
| | | | | | from imorgan at nas nasa gov, ok djm@ | ||||
| * | almost entirely get rid of the culture of ".h files that include .h files" |   deraadt | 2006-08-03 | 1 | -4/+2 |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
| * | move #include <stdlib.h> out of includes.h |   stevesk | 2006-07-26 | 1 | -1/+2 |
| | | |||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -1/+2 |
| | | |||||
| * | move #include <unistd.h> out of includes.h | stevesk | 2006-07-17 | 1 | -1/+2 |
| | | |||||
| * | move #include <fcntl.h> out of includes.h | stevesk | 2006-07-09 | 1 | -1/+2 |
| | | |||||
| * | move #include <pwd.h> out of includes.h; ok markus@ | stevesk | 2006-07-06 | 1 | -2/+5 |
| | | |||||
| * | sessionid can be 32 bytes now too when sha256 kex is used; ok djm@ | dtucker | 2006-04-02 | 1 | -3/+3 |
| | | |||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | ||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 |
| | | |||||
| * | move #include <paths.h> out of includes.h; ok markus@ | stevesk | 2006-02-08 | 1 | -1/+3 |
| | | |||||
| * | ensure that stdio fds are attached; ok deraadt@ | djm | 2005-09-13 | 1 | -1/+8 |
| | | |||||
| * | Remove duplicate getuid(), suggested by & ok markus@ | dtucker | 2004-08-23 | 1 | -3/+3 |
| | | |||||
| * | Use permanently_set_uid() in ssh and ssh-keysign for consistency, matches | dtucker | 2004-08-23 | 1 | -7/+7 |
| | | | | | change in Portable; ok markus@ | ||||
| * | perform strict ownership and modes checks for ~/.ssh/config files, as these | djm | 2004-04-18 | 1 | -2/+2 |
| | | | | | | | can be used to execute arbitrary programs; ok markus@ NB. ssh will now exit when it detects a config with poor permissions | ||||
| * | fix mem leaks; some fixes from Pete Flugstad; tested dtucker@ | markus | 2004-01-19 | 1 | -1/+2 |
| | | |||||
| * | return error on msg send/receive failure (rather than fatal); ok markus@ | djm | 2003-11-17 | 1 | -2/+3 |
| | | |||||
| * | fix AddressFamily option in config file, from brent@graveland.net; ok markus@ | djm | 2003-07-03 | 1 | -2/+1 |
| | | |||||
| * | add AddressFamily option to ssh_config (like -4, -6 on commandline). | djm | 2003-05-16 | 1 | -2/+4 |
| | | | | | Portable bug #534; ok markus@ | ||||
| * | potential segfault if KEY_UNSPEC; cjwatson@debian.org; bug #526 | markus | 2003-04-02 | 1 | -2/+2 |
| | | |||||
| * | move RSA_blinding_on to generic key load method | markus | 2003-03-13 | 1 | -8/+1 |
| | | |||||
| * | s/msg_send/ssh_msg_send/ to avoid namespace clashes in portable; ok markus@ | djm | 2002-12-19 | 1 | -4/+4 |
| | | |||||
| * | we cannot use HostbasedAuthentication for enabling ssh-keysign(8), | markus | 2002-11-07 | 1 | -3/+3 |
| | | | | | | | | because HostbasedAuthentication might be enabled based on the target host and ssh-keysign(8) does not know the remote hostname and not trust ssh(1) about the hostname, so we add a new option EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de | ||||
| * | re-enable ssh-keysign's sbit, but make ssh-keysign read /etc/ssh/ssh_config | markus | 2002-07-03 | 1 | -1/+15 |
| | | | | | | and exit if HostbasedAuthentication is disabled globally. based on discussions with deraadt, itojun and sommerfeld; ok itojun@ | ||||
| * | use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld) | markus | 2002-07-03 | 1 | -1/+14 |
| | | | | | | in order to avoid a possible Kocher timing attack pointed out by Charles Hannum; ok provos@ | ||||
| * | bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu | markus | 2002-06-26 | 1 | -2/+2 |
| | | |||||
| * | KNF done automatically while reading.... | deraadt | 2002-06-19 | 1 | -8/+8 |
| | | |||||
| * | only accept 20 byte session ids | markus | 2002-06-08 | 1 | -3/+7 |
| | | |||||
| * | extent ssh-keysign protocol: | markus | 2002-05-31 | 1 | -9/+28 |
| | | | | | | | pass # of socket-fd to ssh-keysign, keysign verfies locally used ip-address using this socket-fd, restricts fake local hostnames to actual local hostnames; ok stevesk@ | ||||
| * | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentication | markus | 2002-05-23 | 1 | -0/+185 |
| in protocol v2 (needs to access the hostkeys). | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |