Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | forwardagent defaults to no, add ssh -A | 2000-05-29 | 1 | -1/+5 | ||
| | ||||||
* | fix usage() | 2000-05-15 | 1 | -2/+3 | ||
| | ||||||
* | complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only) | 2000-05-08 | 1 | -1/+2 | ||
| | ||||||
* | support for x11-fwding, client+server | 2000-04-28 | 1 | -43/+59 | ||
| | ||||||
* | add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX] | 2000-04-26 | 1 | -18/+49 | ||
| | | | | | for trading keys with the real and the original SSH, directly from the people who invented the SSH protocol. | |||||
* | whitespace cleanup | 2000-04-14 | 1 | -31/+8 | ||
| | ||||||
* | ssh -2 | 2000-04-14 | 1 | -1/+6 | ||
| | ||||||
* | add Cipher and Protocol options to ssh/sshd, e.g.: | 2000-04-12 | 1 | -3/+6 | ||
| | | | | ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers arcfour,3des-cbc' | |||||
* | ssh2 client implementation, interops w/ ssh.com and lsh servers. | 2000-04-04 | 1 | -15/+147 | ||
| | ||||||
* | replace big switch() with function tables (prepare for ssh2) | 2000-03-28 | 1 | -1/+2 | ||
| | ||||||
* | switch to raw mode only if he _get_ a pty (not if we _want_ a pty). | 2000-03-23 | 1 | -4/+6 | ||
| | ||||||
* | remove unused cipher_attack_detected code | 2000-03-22 | 1 | -4/+1 | ||
| | ||||||
* | turn off x11-fwd for the client, too. | 2000-02-28 | 1 | -1/+2 | ||
| | ||||||
* | suppress AAAA query host when '-4' is used; from shin@nd.net.fujitsu.co.jp | 2000-02-20 | 1 | -2/+2 | ||
| | ||||||
* | more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo, from itojun@ | 2000-01-04 | 1 | -1/+2 | ||
| | ||||||
* | 'ssh @host' is illegal (null user name), from karsten@gedankenpolizei.de | 2000-01-04 | 1 | -1/+3 | ||
| | ||||||
* | ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new features: | 2000-01-04 | 1 | -15/+36 | ||
| | | | | | | sshd allows multiple ListenAddress and Port options. note that libwrap is not IPv6-ready. (based on patches from <kick@kyoto.wide.ad.jp> and fujiwara@rcac.tdi.co.jp) | |||||
* | type conflict for 'extern Type *options' in channels.c; dot@dotat.at | 1999-12-12 | 1 | -2/+3 | ||
| | ||||||
* | ports are u_short | 1999-12-01 | 1 | -10/+6 | ||
| | ||||||
* | postpone fork_after_authentication until command execution, | 1999-11-24 | 1 | -10/+6 | ||
| | | | | | request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au plus: use daemon() for backgrounding | |||||
* | KNF, final part 3 | 1999-11-24 | 1 | -67/+100 | ||
| | ||||||
* | much more KNF | 1999-11-24 | 1 | -23/+18 | ||
| | ||||||
* | KNF part 1 | 1999-11-23 | 1 | -702/+649 | ||
| | ||||||
* | a note for legay systems about secuity issues with permanently_set_uid(), | 1999-11-15 | 1 | -1/+8 | ||
| | | | | the private hostkey and ptrace() | |||||
* | print _all_ bad config-options in ssh(1), too | 1999-11-14 | 1 | -3/+4 | ||
| | ||||||
* | make all access to options via 'extern Options options' | 1999-11-11 | 1 | -2/+2 | ||
| | | | | | | | | and 'extern ServerOptions options' respectively; options are no longer passed as arguments: * make options handling more consistent * remove #include "readconf.h" from ssh.h * readconf.h is only included if necessary | |||||
* | add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd, | 1999-11-10 | 1 | -7/+9 | ||
| | | | | obsoletes QuietMode and FascistLogging in sshd. | |||||
* | save a few lines when disabling rhosts-{rsa-}auth | 1999-10-28 | 1 | -9/+3 | ||
| | ||||||
* | don't define original_real_uid twice | 1999-10-26 | 1 | -3/+1 | ||
| | ||||||
* | fix old connect() race security-bug for ssh-agent and agent-forwarding | 1999-10-14 | 1 | -2/+2 | ||
| | | | | | | | | | | by removing the connect() junk, with the following restrictions: 1) change the version to "OpenSSH-1.1": agent-forwarding will work only between OpenSSH-1.1 client and OpenSSH-1.1 server 2) renamed the environment variable of OpenSSH-1.1 to "SSH_AUTH_SOCKET", since useing OpenSSH-1.0 ssh-add against the new ssh-agent does not work | |||||
* | -P/UsePrivilegedPort from 1.2.27, it turns of allocation of priv. port | 1999-10-12 | 1 | -2/+14 | ||
| | | | | and disabled rhosts/rhosts-rsa, ok deraadt@ | |||||
* | add code to detect DNS spoofing: | 1999-10-03 | 1 | -3/+6 | ||
| | | | | | | | | | | the main idea is to not only store the host key for the hostname but also for the according IP address. When we check the host key in the known_hosts file, we also check the key against the according IP address. When the server key changes, host_status = HOST_CHANGED. If check_host_in_hostfile() returns differing status for the IP address that means that either DNS was spoofed or that the IP address for the host and the host key changed at the same time. | |||||
* | reorder usage, like real ssh | 1999-09-30 | 1 | -2/+2 | ||
| | ||||||
* | better way to deal with authfile cipher; dugsong@ | 1999-09-30 | 1 | -3/+1 | ||
| | ||||||
* | remove ``none''. | 1999-09-30 | 1 | -11/+4 | ||
| | ||||||
* | "ssh is a very large program" -- anonymous | 1999-09-30 | 1 | -3/+1 | ||
| | ||||||
* | wringing out all the water | 1999-09-30 | 1 | -5/+1 | ||
| | ||||||
* | do not bother with dinosaur pacification | 1999-09-30 | 1 | -3/+1 | ||
| | ||||||
* | cull more ancient garbage from pre-POSIX days | 1999-09-30 | 1 | -7/+1 | ||
| | ||||||
* | more culling | 1999-09-30 | 1 | -6/+1 | ||
| | ||||||
* | rely on paths.h more | 1999-09-30 | 1 | -8/+4 | ||
| | ||||||
* | we have setsid | 1999-09-29 | 1 | -3/+1 | ||
| | ||||||
* | numerous sprintf, strncpy, strcpy cleanups | 1999-09-29 | 1 | -12/+8 | ||
| | ||||||
* | global original_real_uid | 1999-09-29 | 1 | -2/+3 | ||
| | ||||||
* | update krb4/AFS support to ssh-1.2.27-afs-kerberos-pl1 level, clean up unused variables, update manpages | 1999-09-29 | 1 | -11/+10 | ||
| | ||||||
* | -V in usage() | 1999-09-29 | 1 | -1/+2 | ||
| | ||||||
* | correct the usage, disable agent forwarding is -a | 1999-09-29 | 1 | -2/+2 | ||
| | ||||||
* | add -V option | 1999-09-29 | 1 | -1/+4 | ||
| | ||||||
* | test for RSA in the ssl library, real early on | 1999-09-29 | 1 | -1/+11 | ||
| | ||||||
* | GatewayPorts and ssh -g; markus.friedl@informatik.uni-erlangen.de | 1999-09-29 | 1 | -1/+6 | ||
| |