Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | perform strict ownership and modes checks for ~/.ssh/config files, as these | 2004-04-18 | 1 | -2/+2 | ||
| | | | | | | can be used to execute arbitrary programs; ok markus@ NB. ssh will now exit when it detects a config with poor permissions | |||||
* | fix mem leaks; some fixes from Pete Flugstad; tested dtucker@ | 2004-01-19 | 1 | -1/+2 | ||
| | ||||||
* | return error on msg send/receive failure (rather than fatal); ok markus@ | 2003-11-17 | 1 | -2/+3 | ||
| | ||||||
* | fix AddressFamily option in config file, from brent@graveland.net; ok markus@ | 2003-07-03 | 1 | -2/+1 | ||
| | ||||||
* | add AddressFamily option to ssh_config (like -4, -6 on commandline). | 2003-05-16 | 1 | -2/+4 | ||
| | | | | Portable bug #534; ok markus@ | |||||
* | potential segfault if KEY_UNSPEC; cjwatson@debian.org; bug #526 | 2003-04-02 | 1 | -2/+2 | ||
| | ||||||
* | move RSA_blinding_on to generic key load method | 2003-03-13 | 1 | -8/+1 | ||
| | ||||||
* | s/msg_send/ssh_msg_send/ to avoid namespace clashes in portable; ok markus@ | 2002-12-19 | 1 | -4/+4 | ||
| | ||||||
* | we cannot use HostbasedAuthentication for enabling ssh-keysign(8), | 2002-11-07 | 1 | -3/+3 | ||
| | | | | | | | because HostbasedAuthentication might be enabled based on the target host and ssh-keysign(8) does not know the remote hostname and not trust ssh(1) about the hostname, so we add a new option EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de | |||||
* | re-enable ssh-keysign's sbit, but make ssh-keysign read /etc/ssh/ssh_config | 2002-07-03 | 1 | -1/+15 | ||
| | | | | | and exit if HostbasedAuthentication is disabled globally. based on discussions with deraadt, itojun and sommerfeld; ok itojun@ | |||||
* | use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld) | 2002-07-03 | 1 | -1/+14 | ||
| | | | | | in order to avoid a possible Kocher timing attack pointed out by Charles Hannum; ok provos@ | |||||
* | bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu | 2002-06-26 | 1 | -2/+2 | ||
| | ||||||
* | KNF done automatically while reading.... | 2002-06-19 | 1 | -8/+8 | ||
| | ||||||
* | only accept 20 byte session ids | 2002-06-08 | 1 | -3/+7 | ||
| | ||||||
* | extent ssh-keysign protocol: | 2002-05-31 | 1 | -9/+28 | ||
| | | | | | | pass # of socket-fd to ssh-keysign, keysign verfies locally used ip-address using this socket-fd, restricts fake local hostnames to actual local hostnames; ok stevesk@ | |||||
* | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentication | 2002-05-23 | 1 | -0/+185 | ||
in protocol v2 (needs to access the hostkeys). |