Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | 64 bit cleanups; markus ok | 2003-08-24 | 1 | -2/+4 | ||
| | ||||||
* | remove support for "kerberos-2@ssh.com" | 2003-08-22 | 1 | -99/+1 | ||
| | ||||||
* | support GSS API user authentication; patches from Simon Wilkinson, | 2003-08-22 | 1 | -1/+251 | ||
| | | | | stripped down and tested by Jakob and myself. | |||||
* | int -> u_int; ok djm@, deraadt@, mouring@ | 2003-06-24 | 1 | -3/+3 | ||
| | ||||||
* | cleanup unregister of per-method packet handlers; ok djm@ | 2003-05-15 | 1 | -15/+10 | ||
| | ||||||
* | implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@ | 2003-05-14 | 1 | -1/+100 | ||
| | | | | server interops with commercial client; ok jakob@ djm@ | |||||
* | for pubkey authentication try the user keys in the following order: | 2003-05-12 | 1 | -146/+190 | ||
| | | | | | | | | 1. agent keys that are found in the config file 2. other agent keys 3. keys that are only listed in the config file this helps when an agent has many keys, where the server might close the connection before the correct key is used. report & ok pb@ | |||||
* | rename log() into logit() to avoid name conflict. markus ok, from netbsd | 2003-04-08 | 1 | -7/+7 | ||
| | ||||||
* | reapply rekeying chage, tested by henning@, ok djm@ | 2003-04-02 | 1 | -1/+4 | ||
| | ||||||
* | backout rekeying changes (for 3.6.1) | 2003-04-01 | 1 | -4/+1 | ||
| | ||||||
* | rekeying bugfixes and automatic rekeying: | 2003-04-01 | 1 | -1/+4 | ||
| | | | | | | | | | | | | * both client and server rekey _automatically_ (a) after 2^31 packets, because after 2^32 packets the sequence number for packets wraps (b) after 2^(blocksize_in_bits/4) blocks (see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt) (a) and (b) are _enabled_ by default, and only disabled for known openssh versions, that don't support rekeying properly. * client option 'RekeyLimit' * do not reply to requests during rekeying | |||||
* | fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@ | 2003-03-05 | 1 | -1/+2 | ||
| | ||||||
* | split kex into client and server code, no need to link | 2003-02-16 | 1 | -1/+3 | ||
| | | | | server code into the client; ok provos@ | |||||
* | s/msg_send/ssh_msg_send/ to avoid namespace clashes in portable; ok markus@ | 2002-12-19 | 1 | -3/+3 | ||
| | ||||||
* | cleanup debug messages, more useful information for the client user. | 2002-12-13 | 1 | -13/+12 | ||
| | ||||||
* | debug->debug2, unify debug messages | 2002-11-21 | 1 | -8/+6 | ||
| | ||||||
* | for compression=yes, we fallback to no-compression if the server does | 2002-07-01 | 1 | -3/+3 | ||
| | | | | not support compression, vice versa for compression=no. ok mouring@ | |||||
* | minor KNF | 2002-06-30 | 1 | -2/+2 | ||
| | ||||||
* | various KNF and %d for unsigned | 2002-06-23 | 1 | -5/+8 | ||
| | ||||||
* | KNF done automatically while reading.... | 2002-06-19 | 1 | -8/+8 | ||
| | ||||||
* | extent ssh-keysign protocol: | 2002-05-31 | 1 | -5/+8 | ||
| | | | | | | pass # of socket-fd to ssh-keysign, keysign verfies locally used ip-address using this socket-fd, restricts fake local hostnames to actual local hostnames; ok stevesk@ | |||||
* | execlp->execl; from stevesk | 2002-05-25 | 1 | -2/+2 | ||
| | ||||||
* | stat ssh-keysign first, print error if stat fails; | 2002-05-24 | 1 | -14/+15 | ||
| | | | | some debug->error; fix comment | |||||
* | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentication | 2002-05-23 | 1 | -10/+85 | ||
| | | | | in protocol v2 (needs to access the hostkeys). | |||||
* | client side support for PASSWD_CHANGEREQ | 2002-03-26 | 1 | -2/+75 | ||
| | | | | based on work by johan.andersson@appgate.com; ok provos@ | |||||
* | KNF whitespace | 2002-03-19 | 1 | -2/+2 | ||
| | ||||||
* | more u_* fixes | 2002-02-25 | 1 | -3/+3 | ||
| | ||||||
* | signed vs. unsigned: make size arguments u_int, ok stevesk@ | 2002-02-24 | 1 | -11/+13 | ||
| | ||||||
* | more cross checking if announced vs. used key type; ok stevesk@ | 2002-02-03 | 1 | -3/+9 | ||
| | ||||||
* | unused include | 2002-01-25 | 1 | -9/+1 | ||
| | ||||||
* | use buffer API and avoid static strings of fixed size; ok provos@/mouring@ | 2002-01-13 | 1 | -10/+11 | ||
| | ||||||
* | remove plen from the dispatch fn. it's no longer used. | 2001-12-28 | 1 | -13/+13 | ||
| | ||||||
* | packet_read* no longer return the packet length, since it's not used. | 2001-12-28 | 1 | -4/+3 | ||
| | ||||||
* | s/packet_done/packet_check_eom/ (end-of-message); ok djm@ | 2001-12-28 | 1 | -5/+5 | ||
| | ||||||
* | Conformance fix: we should send failing packet sequence number when | 2001-12-20 | 1 | -13/+13 | ||
| | | | | | responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by yakk@yakk.dot.net; ok markus@ | |||||
* | basic KNF done while i was looking for something else | 2001-12-19 | 1 | -4/+4 | ||
| | ||||||
* | minor KNF | 2001-12-05 | 1 | -4/+4 | ||
| | ||||||
* | make it compile with more strict prototype checking | 2001-12-05 | 1 | -13/+13 | ||
| | ||||||
* | pad using the padding field from the ssh2 packet instead of sending | 2001-11-07 | 1 | -3/+3 | ||
| | | | | extra ignore messages. tested against several other ssh servers. | |||||
* | hostbased: check for client hostkey before building chost | 2001-10-29 | 1 | -14/+15 | ||
| | ||||||
* | unify hostkey check error messages, simplify prompt. | 2001-10-06 | 1 | -2/+2 | ||
| | ||||||
* | disable kbd-interactive if we don't get SSH2_MSG_USERAUTH_INFO_REQUEST messages | 2001-08-31 | 1 | -1/+13 | ||
| | ||||||
* | reorder default sequence of userauth methods to match ssh behaviour: | 2001-07-23 | 1 | -9/+9 | ||
| | | | | hostbased,publickey,keyboard-interactive,password | |||||
* | add smartcard support to the client, too (now you can use both | 2001-06-26 | 1 | -1/+6 | ||
| | | | | the agent and the client). | |||||
* | prototype cleanup; ok markus@ | 2001-06-25 | 1 | -3/+4 | ||
| | ||||||
* | oops, missing format string | 2001-06-24 | 1 | -3/+3 | ||
| | ||||||
* | switch to readpassphrase(3) | 2001-06-24 | 1 | -5/+4 | ||
| | | | | 2.7/8-stable needs readpassphrase.[ch] from libc | |||||
* | more strict prototypes. raise warning level in Makefile.inc. markus ok'ed | 2001-06-23 | 1 | -19/+19 | ||
| | | | | TODO; cleanup headers | |||||
* | get rid of known_hosts2, use it for hostkey lookup, but do not modify. | 2001-06-23 | 1 | -5/+5 | ||
| | ||||||
* | change preferredauthentication order to | 2001-05-19 | 1 | -5/+5 | ||
| | | | | | publickey,hostbased,password,keyboard-interactive document that hostbased defaults to no, document order |