| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | argument to sshkey_from_private() and sshkey_demote() can't be NULL |   djm | 2015-10-15 | 1 | -7/+3 |
| | | |||||
| * | - Fix error message: passphrase needs to be at least 5 characters, not 4. |   tim | 2015-09-13 | 1 | -13/+7 |
| | | | | | | | | - Remove unused function argument. - Remove two unnecessary variables. OK djm@ | ||||
| * | Fix occurrences of "r = func() != 0" which result in the wrong error |   jsg | 2015-09-02 | 1 | -11/+11 |
| | | | | | | | codes being returned due to != having higher precedence than =. ok deraadt@ markus@ | ||||
| * | fix double-free() in error path of DSA key generation reported by | djm | 2015-08-19 | 1 | -2/+1 |
| | | | | | Mateusz Kocielski; ok markus@ | ||||
| * | delete support for legacy v00 certificates; "sure" markus@ dtucker@ | djm | 2015-07-03 | 1 | -92/+16 |
| | | |||||
| * | refactor: split base64 encoding of pubkey into its own | djm | 2015-05-21 | 1 | -75/+99 |
| | | | | | | sshkey_to_base64() function and out of sshkey_write(); ok markus@ | ||||
| * | don't choke on new-format private keys encrypted with an AEAD cipher; | djm | 2015-05-08 | 1 | -4/+11 |
| | | | | | bz#2366, patch from Ron Frederick; ok markus@ | ||||
| * | Remove pattern length argument from match_pattern_list(), | djm | 2015-05-04 | 1 | -2/+2 |
| | | | | | | | | | | | we only ever use it for strlen(pattern). Prompted by hanno AT hboeck.de pointing an out-of-bound read error caused by an incorrect pattern length found using AFL and his own tools. ok markus@ | ||||
| * | correct return value in pubkey parsing, spotted by Ben Hawkes | djm | 2015-04-03 | 1 | -7/+7 |
| | | | | | ok markus@ | ||||
| * | fix sshkey_certify() return value for unsupported key types; | djm | 2015-03-06 | 1 | -1/+2 |
| | | | | | ok markus@ deraadt@ | ||||
| * | small refactor and add some convenience functions; | djm | 2015-01-26 | 1 | -35/+75 |
| | | | | | ok markus | ||||
| * | Replace <sys/param.h> with <limits.h> and other less dirty headers where |   deraadt | 2015-01-16 | 1 | -2/+3 |
| | | | | | | | | | | possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | ||||
| * | avoid an warning for the !OPENSSL case | djm | 2015-01-14 | 1 | -5/+5 |
| | | |||||
| * | add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypes | djm | 2015-01-13 | 1 | -5/+27 |
| | | | | | | options to allow sshd to control what public key types will be accepted. Currently defaults to all. Feedback & ok markus@ | ||||
| * | unbreak parsing of pubkey comments; with gerhard; ok djm/deraadt |   markus | 2015-01-12 | 1 | -9/+9 |
| | | |||||
| * | allow WITH_OPENSSL w/o WITH_SSH1; ok djm@ | markus | 2015-01-12 | 1 | -3/+7 |
| | | |||||
| * | deprecate key_load_private_pem() and sshkey_load_private_pem() | djm | 2015-01-08 | 1 | -19/+7 |
| | | | | | | | | | | | | | | | | interfaces. Refactor the generic key loading API to not require pathnames to be specified (they weren't really used). Fixes a few other things en passant: Makes ed25519 keys work for hostbased authentication (ssh-keysign previously used the PEM-only routines). Fixes key comment regression bz#2306: key pathnames were being lost as comment fields. ok markus@ | ||||
| * | Add FingerprintHash option to control algorithm used for key | djm | 2014-12-21 | 1 | -38/+76 |
| | | | | | | | | fingerprints. Default changes from MD5 to SHA256 and format from hex to base64. Feedback and ok naddy@ markus@ | ||||
| * | better error value for invalid signature length | djm | 2014-12-10 | 1 | -5/+2 |
| | | |||||
| * | fix NULL pointer dereference crash in key loading | djm | 2014-11-18 | 1 | -5/+3 |
| | | | | | found by Michal Zalewski's AFL fuzzer | ||||
| * | parse cert sections using nested buffers to reduce copies; ok markus | djm | 2014-10-08 | 1 | -51/+47 |
| | | |||||
| * | make Ed25519 keys' title fit properly in the randomart border; bz#2247 | djm | 2014-07-03 | 1 | -8/+17 |
| | | | | | based on patch from Christian Hesse | ||||
| * | fix loading of private keys | markus | 2014-06-27 | 1 | -4/+4 |
| | | |||||
| * | New key API: refactor key-related functions to be more library-like, | djm | 2014-06-24 | 1 | -0/+3789 |
| existing API is offered as a set of wrappers. with and ok markus@ Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew Dempsky and Ron Bowes for a detailed review a few months ago. | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |