summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/ssh-keysign (follow)
Commit message (Collapse)AuthorAgeFilesLines
* give ssh-keygen the ability to dump the contents of a binary keydjm2020-04-031-2/+2
| | | | revocation list: ssh-keygen -lQf /path bz#3132; ok dtucker
* factor out reading/writing sshbufs to dedicated functions;djm2020-01-251-2/+2
| | | | feedback and ok markus@
* Make zlib optional. This adds a "ZLIB" build time option that allowsdtucker2020-01-231-3/+8
| | | | | building without zlib compression and associated options. With feedback from markus@, ok djm@
* use ssh-sk-helper for all security key signing operationsdjm2019-12-131-6/+3
| | | | | | | | | This extracts and refactors the client interface for ssh-sk-helper from ssh-agent and generalises it for use by the other programs. This means that most OpenSSH tools no longer need to link against libfido2 or directly interact with /dev/uhid* requested by, feedback and ok markus@
* directly support U2F/FIDO2 security keys in OpenSSH by linkingdjm2019-11-141-1/+4
| | | | | | against the (previously external) USB HID middleware. The dlopen() capability still exists for alternate middlewares, e.g. for Bluetooth, NFC and test/debugging.
* move client/server SSH-* banners to buffers under ssh->kex and factordjm2018-12-271-2/+2
| | | | | | | | | | | out the banner exchange. This eliminates some common code from the client and server. Also be more strict about handling \r characters - these should only be accepted immediately before \n (pointed out by Jann Horn). Inspired by a patch from Markus Schmidt. (lots of) feedback and ok markus@
* Don't redefine Makefile choices which come correct from bsd.*.mkderaadt2018-07-251-3/+2
| | | | ok markus
* Remove support for running ssh(1) setuid and fatal if attempted.dtucker2018-07-181-1/+2
| | | | | Do not link uidwap.c into ssh any more. Neuters UsePrivilegedPort, which will be marked as deprecated shortly. ok markus@ djm@
* group shared source files (e.g. SRCS_KEX) and allow compilation w/o OPENSSLmarkus2018-01-081-10/+4
| | | | ok djm@
* Replace ED25519's private SHA-512 implementation with a call to thenaddy2017-12-141-2/+2
| | | | | regular digest code. This speeds up compilation considerably. ok markus@
* Create a persistent umac128.c source file: #define the output size andnaddy2017-12-121-10/+1
| | | | | | the name of the entry points for UMAC-128 before including umac.c. Idea from FreeBSD. ok dtucker@
* ssh/lib hasn't worked towards our code-sharing goals for a quit while,deraadt2017-12-101-3/+20
| | | | | | | | | perhaps it is too verbose? Change each */Makefile to specifying exactly what sources that program requires, compiling it seperate. Maybe we'll iterate by sorting those into seperatable chunks, splitting up files which contain common code + server/client specific code, or whatnot. But this isn't one step, or we'd have done it a long time ago.. ok dtucker markus djm
* remove roaming support; ok djm@markus2016-01-141-2/+2
|
* add missing library dependenciesmarkus2013-07-021-2/+2
|
* switch RekeyLimit traffic volume parsing to scan_scaled. ok djm@dtucker2013-05-161-2/+2
|
* Keep track of number of bytes read and written. Needed for upcomingandreas2009-05-281-2/+2
| | | | | changes. Most code from Martin Forssen, maf at appgate dot com. ok markus@
* re-enable ssh-keysign's sbit, but make ssh-keysign read /etc/ssh/ssh_configmarkus2002-07-031-3/+3
| | | | | and exit if HostbasedAuthentication is disabled globally. based on discussions with deraadt, itojun and sommerfeld; ok itojun@
* disable ssh-keysign for now (no sbit); netbsd via itojunmarkus2002-07-011-2/+2
|
* extent ssh-keysign protocol:markus2002-05-311-3/+3
| | | | | | pass # of socket-fd to ssh-keysign, keysign verfies locally used ip-address using this socket-fd, restricts fake local hostnames to actual local hostnames; ok stevesk@
* first version of ssh-keysign manpage, ok deraadt@markus2002-05-251-2/+2
|
* add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authenticationmarkus2002-05-231-0/+18
in protocol v2 (needs to access the hostkeys).
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.