| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | mention -Q key-plain and -Q key-cert; |   djm | 2015-09-11 | 1 | -5/+9 |
| | | | | | bz#2455 pointed out by Jakub Jelen | ||||
| * | Move .Pp before .Bl, not after to quiet mandoc -Tlint. |   millert | 2015-07-20 | 1 | -2/+2 |
| | | | | | Noticed by jmc@ | ||||
| * | Better desciption of Unix domain socket forwarding. | millert | 2015-07-20 | 1 | -21/+107 |
| | | | | | bz#2423; ok jmc@ | ||||
| * | Turn off DSA by default; add HostKeyAlgorithms to the server and |   markus | 2015-07-10 | 1 | -2/+3 |
| | | | | | | PubkeyAcceptedKeyTypes to the client side, so it still can be tested or turned back on; feedback and ok djm@ | ||||
| * | mention ssh-keygen -E for comparing legacy MD5 fingerprints; bz#2332 | djm | 2015-05-22 | 1 | -2/+7 |
| | | |||||
| * | Clarify pseudo-terminal request behaviour and use "pseudo-terminal" |   dtucker | 2015-05-06 | 1 | -8/+19 |
| | | | | | consistently. bz#1716, ok jmc@ "I like it" deraadt@. | ||||
| * | Allow "ssh -Q protocol-version" to list supported SSH protocol | djm | 2015-03-03 | 1 | -5/+7 |
| | | | | | | versions. Useful for detecting builds without SSH v.1 support; idea and ok markus@ | ||||
| * | Add a ssh_config HostbasedKeyType option to control which | djm | 2015-01-30 | 1 | -2/+3 |
| | | | | | | | | | | host public key types are tried during hostbased authentication. This may be used to prevent too many keys being sent to the server, and blowing past its MaxAuthTries limit. bz#2211 based on patch by Iain Morgan; ok markus@ | ||||
| * | correct description of UpdateHostKeys in ssh_config.5 and | djm | 2015-01-26 | 1 | -2/+3 |
| | | | | | | add it to -o lists for ssh, scp and sftp; pointed out by jmc@ | ||||
| * | add fingerprinthash to the options list; |   jmc | 2014-12-22 | 1 | -2/+3 |
| | | |||||
| * | Add FingerprintHash option to control algorithm used for key | djm | 2014-12-21 | 1 | -3/+3 |
| | | | | | | | | fingerprints. Default changes from MD5 to SHA256 and format from hex to base64. Feedback and ok naddy@ markus@ | ||||
| * | tweak previous; | jmc | 2014-10-09 | 1 | -3/+3 |
| | | |||||
| * | Tweak config reparsing with host canonicalisation | djm | 2014-10-08 | 1 | -3/+11 |
| | | | | | | | | | | | | | | | | | Make the second pass through the config files always run when hostname canonicalisation is enabled. Add a "Match canonical" criteria that allows ssh_config Match blocks to trigger only in the second config pass. Add a -G option to ssh that causes it to parse its configuration and dump the result to stdout, similar to "sshd -T" Allow ssh_config Port options set in the second config parse phase to be applied (they were being ignored). bz#2267 bz#2286; ok markus | ||||
| * | improve capitalization for the Ed25519 public-key signature system. |   sobrado | 2014-08-30 | 1 | -6/+6 |
| | | | | | ok djm@ | ||||
| * | Mention UNIX-domain socket forwarding too. OK jmc@ deraadt@ | millert | 2014-07-24 | 1 | -5/+8 |
| | | |||||
| * | add the streamlocal* options to ssh's -o list; millert says they're | jmc | 2014-07-16 | 1 | -2/+4 |
| | | | | | | | irrelevant for scp/sftp; ok markus millert | ||||
| * | document that -g will only work in the multiplexed case if applied to | djm | 2014-07-03 | 1 | -2/+4 |
| | | | | | the mux master | ||||
| * | delete .xr to hosts.equiv. there's still an unfortunate amount of |   tedu | 2014-04-19 | 1 | -3/+2 |
| | | | | | documentation referring to rhosts equivalency in here. | ||||
| * | old descriptions of des and blowfish are old. maybe ok deraadt | tedu | 2014-03-17 | 1 | -19/+2 |
| | | |||||
| * | add missing mentions of ed25519; ok djm@ |   naddy | 2013-12-07 | 1 | -6/+14 |
| | | |||||
| * | - put -Q in the right place | jmc | 2013-11-26 | 1 | -5/+4 |
| | | | | | | | | | - Ar was a poor choice for the arguments to -Q. i've chosen an admittedly equally poor Cm, at least consistent with the rest of the docs. also no need for multiple instances - zap a now redundant Nm - usage() sync | ||||
| * | improve -Q usage and such. One usage change is that the option is now |   deraadt | 2013-11-25 | 1 | -13/+11 |
| | | | | | | case-sensitive ok dtucker markus djm | ||||
| * | Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com" | djm | 2013-11-21 | 1 | -2/+4 |
| | | | | | | | | | | | | | | | that combines Daniel Bernstein's ChaCha20 stream cipher and Poly1305 MAC to build an authenticated encryption mode. Inspired by and similar to Adam Langley's proposal for TLS: http://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-03 but differs in layout used for the MAC calculation and the use of a second ChaCha20 instance to separately encrypt packet lengths. Details are in the PROTOCOL.chacha20poly1305 file. Feedback markus@, naddy@; manpage bits Loganden Velvindron @ AfriNIC ok markus@ naddy@ | ||||
| * | s/canonicalise/canonicalize/ for consistency with existing spelling, | djm | 2013-10-16 | 1 | -5/+5 |
| | | | | | e.g. authorized_keys; pointed out by naddy@ | ||||
| * | Implement client-side hostname canonicalisation to allow an explicit | djm | 2013-10-16 | 1 | -2/+7 |
| | | | | | | | | | | | search path of domain suffixes to use to convert unqualified host names to fully-qualified ones for host key matching. This is particularly useful for host certificates, which would otherwise need to list unqualified names alongside fully-qualified ones (and this causes a number of problems). "looks fine" markus@ | ||||
| * | tweak previous; | jmc | 2013-10-15 | 1 | -2/+3 |
| | | |||||
| * | some proxyusefdpass tweaks; | jmc | 2013-08-20 | 1 | -2/+3 |
| | | |||||
| * | some Bx/Ox conversion; | jmc | 2013-08-14 | 1 | -4/+7 |
| | | | | | From: Jan Stary | ||||
| * | be more exact wrt perms for ~/.ssh/config; bz#2078 | djm | 2013-07-18 | 1 | -3/+3 |
| | | |||||
| * | do not use Sx for sections outwith the man page - ingo informs me that | jmc | 2013-06-27 | 1 | -8/+4 |
| | | | | | | | stuff like html will render with broken links; issue reported by Eric S. Raymond, via djm | ||||
| * | add the ability to query supported ciphers, MACs, key type and KEX | djm | 2013-04-19 | 1 | -2/+19 |
| | | | | | | algorithms to ssh. Includes some refactoring of KEX and key type handling to be table-driven; ok markus@ | ||||
| * | Add -E option to ssh and sshd to append debugging logs to a specified file | dtucker | 2013-04-07 | 1 | -2/+7 |
| | | | | | instead of stderr or syslog. ok markus@, man page help jmc@ | ||||
| * | add umac128 variant; ok djm@ at n2k12 | markus | 2012-10-04 | 1 | -3/+3 |
| | | |||||
| * | last stage of rfc changes, using consistent Rs/Re blocks, and moving the | jmc | 2012-09-26 | 1 | -30/+71 |
| | | | | | references into a STANDARDS section; | ||||
| * | missing letter in previous; | jmc | 2012-09-06 | 1 | -2/+2 |
| | | |||||
| * | Add ~v and ~V escape sequences to raise and lower the logging level | dtucker | 2012-09-06 | 1 | -2/+10 |
| | | | | | respectively. Man page help from jmc, ok deraadt jmc | ||||
| * | Clarify description of -W. Noted by Steve.McClellan at radisys com, ok jmc | dtucker | 2012-06-18 | 1 | -3/+3 |
| | | |||||
| * | Remove mention of 'three' key files since there are now four. From | dtucker | 2012-06-18 | 1 | -3/+3 |
| | | | | | Steve.McClellan at radisys com. | ||||
| * | use "brackets" instead of "braces", for consistency; | jmc | 2012-04-20 | 1 | -3/+3 |
| | | |||||
| * | document new -O cancel command; ok djm@ |   okan | 2011-09-11 | 1 | -2/+4 |
| | | |||||
| * | support cancellation of local/dynamic forwardings from ~C commandline; | markus | 2011-09-10 | 1 | -5/+14 |
| | | | | | ok & feedback djm@ | ||||
| * | Add some missing ssh_config(5) options that can be used in ssh(1)'s | djm | 2011-08-26 | 1 | -2/+5 |
| | | | | | -o argument. Patch from duclare AT guu.fi | ||||
| * | Add new SHA256 and SHA512 based HMAC modes from | djm | 2011-08-02 | 1 | -3/+5 |
| | | | | | | | http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt feedback and ok markus@ | ||||
| * | +.It RequestTTY | jmc | 2011-05-07 | 1 | -2/+3 |
| | | |||||
| * | tweak previous; | jmc | 2011-04-18 | 1 | -4/+4 |
| | | |||||
| * | allow graceful shutdown of multiplexing: request that a mux server removes | djm | 2011-04-17 | 1 | -2/+4 |
| | | | | | its listener socket and refuse future multiplexing requests; ok markus@ | ||||
| * | add IPQoS to the various -o lists, and zap some trailing whitespace; | jmc | 2010-11-18 | 1 | -2/+3 |
| | | |||||
| * | knock out some "-*- nroff -*-" lines; | jmc | 2010-10-28 | 1 | -3/+2 |
| | | |||||
| * | ssh.1: add kexalgorithms to the -o list | jmc | 2010-09-22 | 1 | -2/+3 |
| | | | | | | | ssh_config.5: format the kexalgorithms in a more consistent (prettier!) way ok djm | ||||
| * | mention RFC 5656 for ECC stuff | djm | 2010-09-11 | 1 | -2/+7 |
| | | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |