Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | check for key!=NULL, thanks to costa | 2001-04-17 | 1 | -2/+2 | ||
| | ||||||
* | implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2) | 2001-04-12 | 1 | -10/+10 | ||
| | | | | | similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :) | |||||
* | simpler key load/save interface, see authfile.h | 2001-03-26 | 1 | -15/+15 | ||
| | ||||||
* | implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key -> | 2001-03-08 | 1 | -2/+3 | ||
| | | | | | no need to do enter passphrase or do expensive sign operations if the server does not accept key). | |||||
* | genericize password padding function for SSH1 and SSH2. | 2001-02-15 | 1 | -17/+3 | ||
| | | | | add stylized echo to 2, too. | |||||
* | fix xmalloc(0), ok dugsong@ | 2001-02-12 | 1 | -2/+2 | ||
| | ||||||
* | mitigate SSH1 traffic analysis - from Solar Designer <solar@openwall.com>, ok provos@ | 2001-02-08 | 1 | -3/+17 | ||
| | ||||||
* | sync with netbsd tree changes. | 2001-02-08 | 1 | -5/+5 | ||
| | | | | | | - more strict prototypes, include necessary headers - use paths.h/pathnames.h decls - size_t typecase to int -> u_long | |||||
* | %.30s is too short for IPv6 numeric address. use %.128s for now. markus ok | 2001-02-08 | 1 | -2/+2 | ||
| | ||||||
* | make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@ | 2001-02-03 | 1 | -4/+4 | ||
| | ||||||
* | handle rsa_private_decrypt failures; helps against the Bleichenbacher pkcs#1 attack | 2001-01-29 | 1 | -4/+7 | ||
| | ||||||
* | rename skey -> challenge response. | 2001-01-22 | 1 | -9/+9 | ||
| | | | | auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled. | |||||
* | only AFS needs radix.[ch] | 2001-01-22 | 1 | -2/+2 | ||
| | ||||||
* | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. | 2001-01-21 | 1 | -5/+15 | ||
| | | | | rename util.[ch] -> misc.[ch] | |||||
* | move ssh1 definitions to ssh1.h, pathnames to pathnames.h | 2001-01-19 | 1 | -1/+2 | ||
| | ||||||
* | 1) removes fake skey from sshd, since this will be much | 2001-01-18 | 1 | -2/+3 | ||
| | | | | | | | harder with /usr/libexec/auth/login_XXX 2) share/unify code used in ssh-1 and ssh-2 authentication (server side) 3) make addition of BSD_AUTH and other challenge reponse methods easier. | |||||
* | indent | 2001-01-16 | 1 | -4/+4 | ||
| | ||||||
* | more cleanups and fixes from stevesk@pobox.com: | 2001-01-08 | 1 | -2/+5 | ||
| | | | | | | | | 1) try_agent_authentication() for loop will overwrite key just allocated with key_new(); don't alloc 2) call ssh_close_authentication_connection() before exit try_agent_authentication() 3) free mem on bad passphrase in try_rsa_authentication() | |||||
* | replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned' | 2000-12-19 | 1 | -16/+16 | ||
| | | | | with u_char. | |||||
* | always request new challenge for skey/tis-auth, fixes interop with | 2000-12-10 | 1 | -26/+30 | ||
| | | | | other implementations; report from roth@feep.net | |||||
* | reorder check for illegal ciphers, bugreport from espie@ | 2000-11-25 | 1 | -5/+5 | ||
| | ||||||
* | complain about invalid ciphers for ssh1/ssh2, fall back to reasonable defaults | 2000-11-23 | 1 | -2/+3 | ||
| | ||||||
* | add support for RSA to SSH2. please test. | 2000-11-12 | 1 | -6/+7 | ||
| | | | | | | | | | | | | | | | there are now 3 types of keys: RSA1 is used by ssh-1 only, RSA and DSA are used by SSH2. you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA keys for SSH2 and use the RSA keys for hostkeys or for user keys. SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before. IdentityFile2, HostDsaKey and DSAAuthentication are obsolete. you can use multiple IdentityFile and HostKey for all types of keys. the option DSAAuthentication is replaced by PubkeyAuthetication. | |||||
* | enable DES in SSH-1 clients only | 2000-10-12 | 1 | -2/+2 | ||
| | ||||||
* | new cipher framework | 2000-10-11 | 1 | -10/+3 | ||
| | ||||||
* | cleanup copyright notices on all files. I have attempted to be accurate with | 2000-09-07 | 1 | -2/+6 | ||
| | | | | | | | the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate. | |||||
* | add SSH2/DSA support to the agent and some other DSA related cleanups. | 2000-08-19 | 1 | -21/+19 | ||
| | | | | (note that we cannot talk to ssh.com's ssh2 agents) | |||||
* | make ssh-add accept dsa keys (the agent does not) | 2000-07-16 | 1 | -2/+2 | ||
| | ||||||
* | complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only) | 2000-05-08 | 1 | -4/+8 | ||
| | ||||||
* | replace broken uuencode w/ libc b64_ntop | 2000-05-04 | 1 | -3/+3 | ||
| | ||||||
* | split auth/sshconnect in one file per protocol version | 2000-04-26 | 1 | -0/+1020 | ||