| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Let the client detect if the server supports roaming by looking |   andreas | 2009-10-24 | 1 | -1/+6 | |
| | | | | | | for the resume@appgate.com kex algorithm. ok markus@ | |||||
| * | disallow a hostile server from checking jpake auth by sending an |   djm | 2009-10-23 | 1 | -1/+20 | |
| | | | | | out-of-sequence success message. (doesn't affect code enabled by default) | |||||
| * | refactor the (disabled) Schnorr proof code to make it a little more | djm | 2009-03-05 | 1 | -1/+2 | |
| | | | | | generally useful | |||||
| * | Add support for an experimental zero-knowledge password authentication | djm | 2008-11-04 | 1 | -2/+301 | |
| | | | | | | | | | | | | | | | | | method using the J-PAKE protocol described in F. Hao, P. Ryan, "Password Authenticated Key Exchange by Juggling", 16th Workshop on Security Protocols, Cambridge, April 2008. This method allows password-based authentication without exposing the password to the server. Instead, the client and server exchange cryptographic proofs to demonstrate of knowledge of the password while revealing nothing useful to an attacker or compromised endpoint. This is experimental, work-in-progress code and is presently compiled-time disabled (turn on -DJPAKE in Makefile.inc). "just commit it. It isn't too intrusive." deraadt@ | |||||
| * | sprinkle ARGSUSED on dispatch handlers | djm | 2008-11-01 | 1 | -2/+13 | |
| | | | | | nuke stale unusued prototype | |||||
| * | Repair strnvis() buffersize of 4*n+1, with termination gauranteed by the |   deraadt | 2008-10-03 | 1 | -3/+3 | |
| | | | | | | | | | function. spotted by des@freebsd, who commited an incorrect fix to the freebsd tree and (as is fairly typical) did not report the problem to us. But this fix is correct. ok djm | |||||
| * | don't allocate space for empty banners; report t8m at centrum.cz; ok deraadt |   markus | 2008-07-31 | 1 | -2/+2 | |
| | | ||||||
| * | strnvis preauth banner; pointed out by mpf@ ok markus@ | djm | 2008-07-17 | 1 | -5/+13 | |
| | | ||||||
| * | promote rekeylimit to a int64 so it can hold the maximum useful limit | djm | 2008-01-19 | 1 | -2/+2 | |
| | | | | | of 2^32; report and patch from Jan.Pechanec AT Sun.COM, ok dtucker@ | |||||
| * | djm owes me a vb and a tism cd for breaking ssh compilation |   jolan | 2007-05-17 | 1 | -1/+2 | |
| | | ||||||
| * | fall back to gethostname() when the outgoing connection is not | djm | 2007-05-17 | 1 | -3/+12 | |
| | | | | | | | on a socket, such as is the case when ProxyCommand is used. Gives hostbased auth an opportunity to work; bz#616, report and feedback stuart AT kaloram.com; ok markus@ | |||||
| * | Fix regression where SSH2 banner is printed at loglevels ERROR and FATAL |   dtucker | 2006-08-30 | 1 | -2/+2 | |
| | | | | | where previously it weren't. bz #1221, found by Dean Kopesky, ok djm@ | |||||
| * | bz #1218 - disable SPNEGO as per RFC4462; diff from simon AT sxw.org.uk | djm | 2006-08-18 | 1 | -11/+4 | |
| | | | | | ok markus@ | |||||
| * | almost entirely get rid of the culture of ".h files that include .h files" | deraadt | 2006-08-03 | 1 | -5/+6 | |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | |||||
| * | move #include <stdio.h> out of includes.h |   stevesk | 2006-08-01 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -1/+2 | |
| | | ||||||
| * | missed some needed #include <unistd.h> when KERBEROS5=no; issue from | stevesk | 2006-07-20 | 1 | -1/+2 | |
| | | | | | massimo@cedoc.mo.it | |||||
| * | move #include <errno.h> out of includes.h; ok markus@ | stevesk | 2006-07-11 | 1 | -1/+3 | |
| | | ||||||
| * | do not set the gid, noted by solar; ok djm | markus | 2006-06-08 | 1 | -2/+2 | |
| | | ||||||
| * | replace remaining setuid() calls with permanently_set_uid() and | markus | 2006-06-06 | 1 | -3/+3 | |
| | | | | | check seteuid() return values; report Marcus Meissner; ok dtucker djm | |||||
| * | uint32_t -> u_int32_t (which we use everywhere else) | djm | 2006-05-08 | 1 | -2/+2 | |
| | | ||||||
| * | Prevent ssh from trying to open private keys with bad permissions more than | dtucker | 2006-04-25 | 1 | -5/+7 | |
| | | | | | | once or prompting for their passphrases (which it subsequently ignores anyway), similar to a previous change in ssh-add. bz #1186, ok djm@ | |||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 | |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | |||||
| * | introduce xcalloc() and xasprintf() failure-checked allocations functions | djm | 2006-03-25 | 1 | -7/+3 | |
| | | | | | | | | | | | and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@ | |||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 | |
| | | ||||||
| * | memory leaks detected by Coverity via elad AT netbsd.org; | djm | 2006-03-19 | 1 | -2/+7 | |
| | | | | | deraadt@ ok | |||||
| * | Implement the diffie-hellman-group-exchange-sha256 key exchange method | djm | 2006-03-07 | 1 | -1/+2 | |
| | | | | | | using the SHA256 code in libc (and wrapper to make it into an OpenSSL EVP), interop tested against CVS PuTTY | |||||
| * | move #include <sys/stat.h> out of includes.h; ok markus@ | stevesk | 2006-02-20 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/wait.h> out of includes.h; ok markus@ | stevesk | 2006-02-10 | 1 | -1/+3 | |
| | | ||||||
| * | move #include <sys/queue.h> out of includes.h; ok markus@ | stevesk | 2006-02-07 | 1 | -1/+3 | |
| | | ||||||
| * | no trailing "\n" for log functions; ok djm@ | stevesk | 2005-10-14 | 1 | -2/+2 | |
| | | ||||||
| * | destroy credentials if krb5_kuserok() call fails. Stops credentials being | djm | 2005-08-30 | 1 | -2/+3 | |
| | | | | | | | | delegated to users who are not authorised for GSSAPIAuthentication when GSSAPIDeletegateCredentials=yes and another authentication mechanism succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@ | |||||
| * | add a new compression method that delays compression until the user | markus | 2005-07-25 | 1 | -3/+3 | |
| | | | | | | | | | | has been authenticated successfully and set compression to 'delayed' for sshd. this breaks older openssh clients (< 3.5) if they insist on compression, so you have to re-enable compression in sshd_config. ok djm@ | |||||
| * | knf says that a 2nd level indent is four (not three or five) spaces | djm | 2005-07-17 | 1 | -3/+3 | |
| | | ||||||
| * | make this -Wsign-compare clean; ok avsm@ markus@ | djm | 2005-06-17 | 1 | -3/+4 | |
| | | ||||||
| * | implement diffie-hellman-group14-sha1 kex method (trivial extension to | djm | 2004-06-13 | 1 | -1/+2 | |
| | | | | | existing diffie-hellman-group1-sha1); ok markus@ | |||||
| * | kill a tiny header; ok deraadt@ | djm | 2004-05-08 | 1 | -2/+2 | |
| | | ||||||
| * | swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what FreeBSD |   henning | 2004-04-08 | 1 | -2/+2 | |
| | | | | | | and NetBSD do. ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@ | |||||
| * | add IdentitiesOnly; ok djm@, pb@ | markus | 2004-03-05 | 1 | -2/+2 | |
| | | ||||||
| * | fix mem leaks; some fixes from Pete Flugstad; tested dtucker@ | markus | 2004-01-19 | 1 | -4/+4 | |
| | | ||||||
| * | unexpand and delete whitespace at EOL; ok markus@ | djm | 2003-11-21 | 1 | -12/+12 | |
| | | ||||||
| * | replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; test + ok jakob. | markus | 2003-11-17 | 1 | -7/+29 | |
| | | ||||||
| * | return error on msg send/receive failure (rather than fatal); ok markus@ | djm | 2003-11-17 | 1 | -2/+3 | |
| | | ||||||
| * | cleanup and minor fixes for the client code; from Simon Wilkinson | markus | 2003-11-14 | 1 | -44/+36 | |
| | | ||||||
| * | remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk | markus | 2003-11-02 | 1 | -24/+16 | |
| | | ||||||
| * | rename 'supported' static var in userauth_gssapi() to 'gss_supported' |   avsm | 2003-10-26 | 1 | -13/+13 | |
| | | | | | to avoid shadowing the global version. markus@ ok | |||||
| * | search keys in reverse order; fixes #684 | markus | 2003-10-11 | 1 | -2/+8 | |
| | | ||||||
| * | set ptr to NULL after free | deraadt | 2003-10-07 | 1 | -4/+9 | |
| | | ||||||
| * | Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 & #707. | dtucker | 2003-10-07 | 1 | -2/+3 | |
| | | | | | ok markus@ | |||||
| * | fprintf->logit to silence login banner with "ssh -q"; ok markus@ | djm | 2003-08-25 | 1 | -2/+2 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |