| Commit message (Expand) | Author | Age | Files | Lines |
* | UsePrivilegeSeparation defaults to sandbox now. |  sobrado | 2015-10-07 | 1 | -4/+9 |
* | more clarity on what AuthorizedKeysFile=none does; |  djm | 2015-09-11 | 1 | -2/+5 |
* | match myproposal.h order; from brian conway |  jmc | 2015-08-14 | 1 | -5/+5 |
* | add prohibit-password as a synonymn for without-password, since the |  deraadt | 2015-08-06 | 1 | -4/+7 |
* | change default: PermitRootLogin without-password |  deraadt | 2015-07-30 | 1 | -2/+2 |
* | Allow ssh_config and sshd_config kex parameters options be prefixed |  djm | 2015-07-30 | 1 | -2/+24 |
* | mention that the default of UseDNS=no implies that hostnames cannot |  djm | 2015-07-20 | 1 | -5/+14 |
* | Turn off DSA by default; add HostKeyAlgorithms to the server and |  markus | 2015-07-10 | 1 | -9/+51 |
* | refuse to generate or accept RSA keys smaller than 1024 bits; |  djm | 2015-07-03 | 1 | -3/+3 |
* | typo: accidental repetition; bz#2386 |  djm | 2015-06-05 | 1 | -3/+3 |
* | add knob to relax GSSAPI host credential check for multihomed hosts |  djm | 2015-05-22 | 1 | -2/+17 |
* | add AuthorizedPrincipalsCommand that allows getting authorized_principals |  djm | 2015-05-21 | 1 | -1/+37 |
* | support arguments to AuthorizedKeysCommand |  djm | 2015-05-21 | 1 | -5/+17 |
* | Allow ListenAddress, Port and AddressFamily in any order. bz#68, |  dtucker | 2015-04-29 | 1 | -6/+3 |
* | enviroment -> environment: apologies to darren for not spotting that first |  jmc | 2015-04-28 | 1 | -2/+2 |
* | Fix typo in previous |  dtucker | 2015-04-28 | 1 | -2/+2 |
* | Document that the TERM environment variable is not subject to SendEnv |  dtucker | 2015-04-28 | 1 | -3/+7 |
* | Make sshd default to PermitRootLogin=no; |  djm | 2015-04-27 | 1 | -3/+3 |
* | Document "none" for PidFile XAuthLocation TrustedUserCAKeys and RevokedKeys. |  dtucker | 2015-04-16 | 1 | -6/+14 |
* | sort options useable under Match case-insensitively; |  djm | 2015-02-20 | 1 | -3/+3 |
* | more options that are available under Match; |  djm | 2015-02-20 | 1 | -4/+10 |
* | increasing encounters with difficult DNS setups in darknets has |  deraadt | 2015-02-02 | 1 | -3/+3 |
* | heirarchy -> hierarchy; |  jmc | 2015-01-22 | 1 | -2/+2 |
* | Provide a warning about chroot misuses (which sadly, seem to have become |  deraadt | 2015-01-22 | 1 | -4/+13 |
* | add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypes |  djm | 2015-01-13 | 1 | -2/+26 |
* | mention ssh -Q feature to list supported { MAC, cipher, KEX, key } |  djm | 2014-12-22 | 1 | -2/+18 |
* | tweak previous; |  jmc | 2014-12-22 | 1 | -2/+2 |
* | correct description of what will happen when a AuthorizedKeysCommand is |  djm | 2014-12-22 | 1 | -3/+7 |
* | remember which public keys have been used for authentication and |  djm | 2014-12-22 | 1 | -2/+14 |
* | tweak previous; |  jmc | 2014-12-21 | 1 | -2/+1 |
* | Add FingerprintHash option to control algorithm used for key |  djm | 2014-12-21 | 1 | -2/+11 |
* | revert chunk I didn't mean to commit yet; via jmc@ |  djm | 2014-12-12 | 1 | -14/+2 |
* | mention AuthorizedKeysCommandUser must be set for |  djm | 2014-12-11 | 1 | -2/+17 |
* | restore word zapped in previous, and remove some useless "No" macros; |  jmc | 2014-11-22 | 1 | -4/+5 |
* | /dev/random has created the same effect as /dev/arandom (and /dev/urandom) |  deraadt | 2014-11-22 | 1 | -4/+2 |
* | mention permissions on tun(4) devices in PermitTunnel documentation; |  djm | 2014-09-09 | 1 | -2/+6 |
* | typo. |  sobrado | 2014-08-30 | 1 | -3/+3 |
* | some systems no longer need /dev/log; |  schwarze | 2014-07-28 | 1 | -4/+4 |
* | Add support for Unix domain socket forwarding. A remote TCP port |  millert | 2014-07-15 | 1 | -2/+49 |
* | Add a sshd_config PermitUserRC option to control whether ~/.ssh/rc is |  djm | 2014-07-03 | 1 | -2/+9 |
* | sync available and default algorithms, improve algorithm list formatting |  naddy | 2014-03-28 | 1 | -33/+103 |
* | bz#2184 clarify behaviour of a keyword that appears in multiple |  djm | 2014-02-27 | 1 | -2/+6 |
* | document kbdinteractiveauthentication; |  jmc | 2014-01-29 | 1 | -2/+13 |
* | Use a literal for the default value of KEXAlgorithms. ok deraadt jmc |  dtucker | 2013-12-08 | 1 | -10/+10 |
* | add missing mentions of ed25519; ok djm@ |  naddy | 2013-12-07 | 1 | -4/+6 |
* | no need for .Pp before displays; |  jmc | 2013-11-21 | 1 | -2/+1 |
* | Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com" |  djm | 2013-11-21 | 1 | -4/+14 |
* | the default kex is now curve25519-sha256@libssh.org |  markus | 2013-11-02 | 1 | -2/+3 |
* | pty(4), not pty(7); |  jmc | 2013-10-29 | 1 | -2/+2 |
* | shd_config PermitTTY to disallow TTY allocation, mirroring the |  djm | 2013-10-29 | 1 | -2/+9 |