Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | no longer use uidswap.[ch] from the ssh client | 2002-06-11 | 1 | -27/+16 | ||
| | | | | | | run less code with euid==0 if ssh is installed setuid root just switch the euid, don't switch the complete set of groups (this is only needed by sshd). ok provos@ | |||||
* | pass salen to sockaddr_ntop so that we are happy on linux/solaris | 2002-06-09 | 1 | -5/+5 | ||
| | ||||||
* | abort() - > fatal() | 2002-06-09 | 1 | -2/+2 | ||
| | ||||||
* | always use getnameinfo. (diag message only) | 2002-06-08 | 1 | -14/+4 | ||
| | ||||||
* | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentication | 2002-05-23 | 1 | -4/+4 | ||
| | | | | in protocol v2 (needs to access the hostkeys). | |||||
* | use read_passphrase+ECHO in confirm(), allows use of ssh-askpass | 2002-01-21 | 1 | -46/+38 | ||
| | | | | for hostkey confirm. | |||||
* | basic KNF done while i was looking for something else | 2001-12-19 | 1 | -8/+8 | ||
| | ||||||
* | shutdown(sock, SHUT_RDWR) not needed here; ok markus@ | 2001-12-06 | 1 | -2/+1 | ||
| | ||||||
* | minor KNF | 2001-12-05 | 1 | -11/+11 | ||
| | ||||||
* | some more IPv4or6 cleanup | 2001-10-08 | 1 | -8/+4 | ||
| | ||||||
* | use correct family for -b option | 2001-10-08 | 1 | -2/+2 | ||
| | ||||||
* | unify hostkey check error messages, simplify prompt. | 2001-10-06 | 1 | -5/+3 | ||
| | ||||||
* | remove unused argument | 2001-10-06 | 1 | -16/+5 | ||
| | ||||||
* | add NoHostAuthenticationForLocalhost; note that the hostkey is | 2001-10-01 | 1 | -2/+3 | ||
| | | | | now check for localhost, too. | |||||
* | cleanup connect(); connection_attempts 4 -> 1; from eivind@freebsd.org | 2001-07-25 | 1 | -7/+49 | ||
| | ||||||
* | more strict prototypes. raise warning level in Makefile.inc. markus ok'ed | 2001-06-23 | 1 | -6/+6 | ||
| | | | | TODO; cleanup headers | |||||
* | get rid of known_hosts2, use it for hostkey lookup, but do not modify. | 2001-06-23 | 1 | -42/+105 | ||
| | ||||||
* | use xxx_put_cstring() | 2001-06-07 | 1 | -2/+2 | ||
| | ||||||
* | remove some lines, simplify. | 2001-05-28 | 1 | -3/+1 | ||
| | ||||||
* | implement 'ssh -b bind_address' like 'telnet -b' | 2001-04-30 | 1 | -12/+36 | ||
| | ||||||
* | implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2) | 2001-04-12 | 1 | -4/+4 | ||
| | | | | | similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :) | |||||
* | do gid/groups-swap in addition to uid-swap, should help if /home/group | 2001-04-06 | 1 | -15/+10 | ||
| | | | | | is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks to olar@openwall.com is comments. we had many requests for this. | |||||
* | fix whitespace: unexpand + trailing spaces. | 2001-04-05 | 1 | -2/+2 | ||
| | ||||||
* | simpler key load/save interface, see authfile.h | 2001-03-26 | 1 | -3/+3 | ||
| | ||||||
* | remove old key_fingerprint interface, s/_ex// | 2001-03-12 | 1 | -4/+8 | ||
| | ||||||
* | all known netscreen ssh versions, and older versions of OSU ssh cannot | 2001-03-10 | 1 | -1/+5 | ||
| | | | | handle password padding (newer OSU is fixed) | |||||
* | log functions should not be passed strings that end in newline as they | 2001-03-04 | 1 | -3/+3 | ||
| | | | | | get passed on to syslog() and when logging to stderr, do_log() appends its own newline. | |||||
* | genericize password padding function for SSH1 and SSH2. | 2001-02-15 | 1 | -1/+16 | ||
| | | | | add stylized echo to 2, too. | |||||
* | don't connect if batch_mode is true and stricthostkeychecking set to 'ask' | 2001-02-08 | 1 | -1/+5 | ||
| | ||||||
* | sync with netbsd tree changes. | 2001-02-08 | 1 | -3/+3 | ||
| | | | | | | - more strict prototypes, include necessary headers - use paths.h/pathnames.h decls - size_t typecase to int -> u_long | |||||
* | %.30s is too short for IPv6 numeric address. use %.128s for now. markus ok | 2001-02-08 | 1 | -4/+4 | ||
| | ||||||
* | unexpand and remove end-of-line whitespace; ok markus@ | 2001-02-04 | 1 | -3/+3 | ||
| | ||||||
* | Make warning message a little more consistent. ok markus@ | 2001-01-30 | 1 | -2/+3 | ||
| | ||||||
* | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. | 2001-01-21 | 1 | -5/+9 | ||
| | | | | rename util.[ch] -> misc.[ch] | |||||
* | split out keepalive from packet_interactive (from dale@accentre.com) | 2001-01-13 | 1 | -5/+12 | ||
| | | | | set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too. | |||||
* | consistent use of _PATH_BSHELL; from stevesk@pobox.com | 2001-01-04 | 1 | -4/+4 | ||
| | ||||||
* | strict_host_key_checking for host_status != HOST_CHANGED && ip_status == HOST_CHANGED | 2001-01-02 | 1 | -34/+42 | ||
| | ||||||
* | fingerprint for MITM attacks, too | 2000-12-28 | 1 | -4/+5 | ||
| | ||||||
* | new option: HostKeyAlias: allows the user to record the host key | 2000-12-27 | 1 | -4/+19 | ||
| | | | | | | under a different name. This is useful for ssh tunneling over forwarded connections or if you run multiple sshd's on different ports on the same machine. | |||||
* | print keyfile:line for changed hostkeys, for deraadt@; ok deraadt@ | 2000-12-21 | 1 | -9/+25 | ||
| | ||||||
* | cannot get ip for remote host if proxy_command is used | 2000-12-20 | 1 | -5/+9 | ||
| | ||||||
* | disable agent/x11/port fwding if hostkey has changed; ok niels@ | 2000-11-30 | 1 | -1/+9 | ||
| | ||||||
* | show IP address and hostname when new key is encountered. okay markus@ | 2000-11-29 | 1 | -11/+9 | ||
| | ||||||
* | downgrade client to 1.3 if server is 1.4; help from mdb@juniper.net | 2000-11-06 | 1 | -3/+5 | ||
| | ||||||
* | do not disabled rhosts(rsa) if server port > 1024; from pekkas@netcore.fi | 2000-11-06 | 1 | -2/+2 | ||
| | ||||||
* | yes no; ok niels@ | 2000-09-17 | 1 | -2/+4 | ||
| | ||||||
* | cleanup copyright notices on all files. I have attempted to be accurate with | 2000-09-07 | 1 | -2/+7 | ||
| | | | | | | | the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate. | |||||
* | print uid/gid as unsigned | 2000-08-28 | 1 | -4/+4 | ||
| | ||||||
* | missing atomicio, typo | 2000-06-17 | 1 | -3/+3 | ||
| | ||||||
* | allow extended server banners | 2000-06-17 | 1 | -15/+20 | ||
| |