summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/sshconnect.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* no longer use uidswap.[ch] from the ssh clientmarkus2002-06-111-27/+16
| | | | | | run less code with euid==0 if ssh is installed setuid root just switch the euid, don't switch the complete set of groups (this is only needed by sshd). ok provos@
* pass salen to sockaddr_ntop so that we are happy on linux/solarisitojun2002-06-091-5/+5
|
* abort() - > fatal()markus2002-06-091-2/+2
|
* always use getnameinfo. (diag message only)itojun2002-06-081-14/+4
|
* add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authenticationmarkus2002-05-231-4/+4
| | | | in protocol v2 (needs to access the hostkeys).
* use read_passphrase+ECHO in confirm(), allows use of ssh-askpassmarkus2002-01-211-46/+38
| | | | for hostkey confirm.
* basic KNF done while i was looking for something elsederaadt2001-12-191-8/+8
|
* shutdown(sock, SHUT_RDWR) not needed here; ok markus@stevesk2001-12-061-2/+1
|
* minor KNFderaadt2001-12-051-11/+11
|
* some more IPv4or6 cleanupmarkus2001-10-081-8/+4
|
* use correct family for -b optionmarkus2001-10-081-2/+2
|
* unify hostkey check error messages, simplify prompt.markus2001-10-061-5/+3
|
* remove unused argumentmarkus2001-10-061-16/+5
|
* add NoHostAuthenticationForLocalhost; note that the hostkey ismarkus2001-10-011-2/+3
| | | | now check for localhost, too.
* cleanup connect(); connection_attempts 4 -> 1; from eivind@freebsd.orgmarkus2001-07-251-7/+49
|
* more strict prototypes. raise warning level in Makefile.inc. markus ok'editojun2001-06-231-6/+6
| | | | TODO; cleanup headers
* get rid of known_hosts2, use it for hostkey lookup, but do not modify.markus2001-06-231-42/+105
|
* use xxx_put_cstring()markus2001-06-071-2/+2
|
* remove some lines, simplify.markus2001-05-281-3/+1
|
* implement 'ssh -b bind_address' like 'telnet -b'markus2001-04-301-12/+36
|
* implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)markus2001-04-121-4/+4
| | | | | similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :)
* do gid/groups-swap in addition to uid-swap, should help if /home/groupmarkus2001-04-061-15/+10
| | | | | is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks to olar@openwall.com is comments. we had many requests for this.
* fix whitespace: unexpand + trailing spaces.markus2001-04-051-2/+2
|
* simpler key load/save interface, see authfile.hmarkus2001-03-261-3/+3
|
* remove old key_fingerprint interface, s/_ex//markus2001-03-121-4/+8
|
* all known netscreen ssh versions, and older versions of OSU ssh cannotderaadt2001-03-101-1/+5
| | | | handle password padding (newer OSU is fixed)
* log functions should not be passed strings that end in newline as theymillert2001-03-041-3/+3
| | | | | get passed on to syslog() and when logging to stderr, do_log() appends its own newline.
* genericize password padding function for SSH1 and SSH2.markus2001-02-151-1/+16
| | | | add stylized echo to 2, too.
* don't connect if batch_mode is true and stricthostkeychecking set to 'ask'markus2001-02-081-1/+5
|
* sync with netbsd tree changes.itojun2001-02-081-3/+3
| | | | | | - more strict prototypes, include necessary headers - use paths.h/pathnames.h decls - size_t typecase to int -> u_long
* %.30s is too short for IPv6 numeric address. use %.128s for now. markus okitojun2001-02-081-4/+4
|
* unexpand and remove end-of-line whitespace; ok markus@stevesk2001-02-041-3/+3
|
* Make warning message a little more consistent. ok markus@djm2001-01-301-2/+3
|
* split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.markus2001-01-211-5/+9
| | | | rename util.[ch] -> misc.[ch]
* split out keepalive from packet_interactive (from dale@accentre.com)markus2001-01-131-5/+12
| | | | set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too.
* consistent use of _PATH_BSHELL; from stevesk@pobox.commarkus2001-01-041-4/+4
|
* strict_host_key_checking for host_status != HOST_CHANGED && ip_status == HOST_CHANGEDmarkus2001-01-021-34/+42
|
* fingerprint for MITM attacks, toomarkus2000-12-281-4/+5
|
* new option: HostKeyAlias: allows the user to record the host keymarkus2000-12-271-4/+19
| | | | | | under a different name. This is useful for ssh tunneling over forwarded connections or if you run multiple sshd's on different ports on the same machine.
* print keyfile:line for changed hostkeys, for deraadt@; ok deraadt@markus2000-12-211-9/+25
|
* cannot get ip for remote host if proxy_command is usedmarkus2000-12-201-5/+9
|
* disable agent/x11/port fwding if hostkey has changed; ok niels@markus2000-11-301-1/+9
|
* show IP address and hostname when new key is encountered. okay markus@provos2000-11-291-11/+9
|
* downgrade client to 1.3 if server is 1.4; help from mdb@juniper.netmarkus2000-11-061-3/+5
|
* do not disabled rhosts(rsa) if server port > 1024; from pekkas@netcore.fimarkus2000-11-061-2/+2
|
* yes no; ok niels@markus2000-09-171-2/+4
|
* cleanup copyright notices on all files. I have attempted to be accurate withderaadt2000-09-071-2/+7
| | | | | | | the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
* print uid/gid as unsignedderaadt2000-08-281-4/+4
|
* missing atomicio, typomarkus2000-06-171-3/+3
|
* allow extended server bannersmarkus2000-06-171-15/+20
|