| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | add back the changes from rev 1.206, djm reverted this by mistake in |   jsg | 2015-03-11 | 1 | -2/+5 | |
| | | | | | rev 1.207 | |||||
| * | fix sshkey_certify() return value for unsupported key types; |   djm | 2015-03-06 | 1 | -1/+2 | |
| | | | | | ok markus@ deraadt@ | |||||
| * | make ssh-add -D work with !SSH1 agent | djm | 2015-03-04 | 1 | -3/+3 | |
| | | ||||||
| * | crank; ok markus, deraadt | djm | 2015-03-04 | 1 | -2/+2 | |
| | | ||||||
| * | add SSH1 Makefile knob to make it easier to build without SSH1 support; | djm | 2015-03-03 | 5 | -9/+24 | |
| | | | | | ok markus@ | |||||
| * | Allow "ssh -Q protocol-version" to list supported SSH protocol | djm | 2015-03-03 | 2 | -6/+15 | |
| | | | | | | versions. Useful for detecting builds without SSH v.1 support; idea and ok markus@ | |||||
| * | Make sure we only call getnameinfo() for AF_INET or AF_INET6 sockets. |   millert | 2015-03-01 | 1 | -12/+17 | |
| | | | | | | | getpeername() of a Unix domain socket may return without error on some systems without actually setting ss_family so getnameinfo() was getting called with ss_family set to AF_UNSPEC. OK djm@ | |||||
| * | don't printf NULL key comments; reported by Tom Christensen | djm | 2015-02-26 | 1 | -2/+3 | |
| | | ||||||
| * | zero cmsgbuf before use; we initialise the bits we use but | djm | 2015-02-25 | 1 | -1/+3 | |
| | | | | | valgrind still spams warning on it | |||||
| * | fix small memory leak when UpdateHostkeys=no | djm | 2015-02-25 | 1 | -4/+4 | |
| | | ||||||
| * | don't leak validity of user in "too many authentication failures" | djm | 2015-02-25 | 1 | -2/+3 | |
| | | | | | disconnect message; reported by Sebastian Reitenbach | |||||
| * | add -v (show ASCII art) to -l's synopsis; ok djm@ |   naddy | 2015-02-24 | 2 | -4/+5 | |
| | | ||||||
| * | further silence spurious error message even when -v is specified | djm | 2015-02-23 | 1 | -2/+2 | |
| | | | | | (e.g. to get visual host keys); reported by naddy@ | |||||
| * | add an XXX to remind me to improve sshkey_load_public | djm | 2015-02-23 | 1 | -1/+4 | |
| | | ||||||
| * | silence a spurious error message when listing fingerprints for | djm | 2015-02-23 | 1 | -2/+2 | |
| | | | | | known_hosts; bz#2342 | |||||
| * | fix setting/clearing of TTY raw mode around UpdateHostKeys=ask | djm | 2015-02-23 | 1 | -4/+9 | |
| | | | | | confirmation question; reported by Herb Goldman | |||||
| * | make "ssh-add -d" properly remove a corresponding certificate, and also |   halex | 2015-02-21 | 1 | -4/+10 | |
| | | | | | | | not whine and fail if there is none ok djm@ | |||||
| * | sort options useable under Match case-insensitively; | djm | 2015-02-20 | 1 | -3/+3 | |
| | | | | | prodded jmc@ | |||||
| * | more options that are available under Match; | djm | 2015-02-20 | 1 | -4/+10 | |
| | | | | | bz#2353 reported by calestyo AT scientia.net | |||||
| * | UpdateHostKeys fixes: | djm | 2015-02-20 | 7 | -30/+42 | |
| | | | | | | | | | | | | | | | I accidentally changed the format of the hostkeys@openssh.com messages last week without changing the extension name, and this has been causing connection failures for people who are running -current. First reported by sthen@ s/hostkeys@openssh.com/hostkeys-00@openssh.com/ Change the name of the proof message too, and reorder it a little. Also, UpdateHostKeys=ask is incompatible with ControlPersist (no TTY available to read the response) so disable UpdateHostKeys if it is in ask mode and ControlPersist is active (and document this) | |||||
| * | Regression: I broke logging of public key fingerprints in 1.46. | djm | 2015-02-17 | 1 | -3/+3 | |
| | | | | | Pointed out by Pontus Lundkvist | |||||
| * | partial backout of: | djm | 2015-02-16 | 1 | -8/+7 | |
| | | | | | | | | | | | | | | revision 1.441 date: 2015/01/31 20:30:05; author: djm; state: Exp; lines: +17 -10; commitid : x8klYPZMJSrVlt3O; Let sshd load public host keys even when private keys are missing. Allows sshd to advertise additional keys for future key rotation. Also log fingerprint of hostkeys loaded; ok markus@ hostkey updates now require access to the private key, so we can't load public keys only. The improved log messages (fingerprints of keys loaded) are kept. | |||||
| * | Revise hostkeys@openssh.com hostkey learning extension. | djm | 2015-02-16 | 14 | -101/+537 | |
| | | | | | | | | | | | The client will not ask the server to prove ownership of the private halves of any hitherto-unseen hostkeys it offers to the client. Allow UpdateHostKeys option to take an 'ask' argument to let the user manually review keys offered. ok markus@ | |||||
| * | Refactor hostkeys_foreach() and dependent code | djm | 2015-02-16 | 4 | -125/+218 | |
| | | | | | | | Deal with IP addresses (i.e. CheckHostIP) Don't clobber known_hosts when nothing changed ok markus@ as part of larger commit | |||||
| * | Declare ge25519_base as extern, to prevent it from becoming a common. Gets us |   miod | 2015-02-16 | 1 | -2/+2 | |
| | | | | | | rid of ``lignment 4 of symbol `crypto_sign_ed25519_ref_ge25519_base' in mod_ge25519.o is smaller than 16 in mod_ed25519.o'' warnings at link time. | |||||
| * | make rekey_limit for sshd w/privsep work; ok djm@ dtucker@ |   markus | 2015-02-13 | 3 | -15/+12 | |
| | | ||||||
| * | Prevent sshd spamming syslog with "ssh_dispatch_run_fatal: disconnected". |   dtucker | 2015-02-12 | 1 | -1/+5 | |
| | | | | | ok markus@ | |||||
| * | Some packet error messages show the address of the peer, but might be | djm | 2015-02-11 | 1 | -5/+7 | |
| | | | | | | | | generated after the socket to the peer has suffered a TCP reset. In these cases, getpeername() won't work so cache the address earlier. spotted in the wild via deraadt@ and tedu@ | |||||
| * | fix some leaks in error paths | jsg | 2015-02-09 | 1 | -2/+5 | |
| | | | | | ok markus@ | |||||
| * | SIZE_MAX is standard, we should be using it in preference to the | millert | 2015-02-06 | 4 | -15/+15 | |
| | | | | | obsolete SIZE_T_MAX. OK miod@ beck@ | |||||
| * | Include stdint.h, not limits.h to get SIZE_MAX. OK guenther@ | millert | 2015-02-05 | 1 | -1/+2 | |
| | | ||||||
| * | missing ; |   deraadt | 2015-02-03 | 1 | -2/+2 | |
| | | | | | djm and mlarkin really having great interactions recently | |||||
| * | slightly extend the passphrase prompt if running with -c in order to | halex | 2015-02-03 | 1 | -4/+5 | |
| | | | | | | | give the user a chance to notice if unintentionally running without it wording tweak and ok djm@ | |||||
| * | handle PKCS#11 C_Login returning CKR_USER_ALREADY_LOGGED_IN; | djm | 2015-02-02 | 1 | -5/+7 | |
| | | | | | based on patch from Yuri Samoilenko; ok markus@ | |||||
| * | turn UpdateHostkeys off by default until I figure out mlarkin@'s | djm | 2015-02-02 | 2 | -6/+6 | |
| | | | | | warning message; requested by deraadt@ | |||||
| * | increasing encounters with difficult DNS setups in darknets has | deraadt | 2015-02-02 | 3 | -7/+7 | |
| | | | | | | convinced me UseDNS off by default is better ok djm | |||||
| * | Let sshd load public host keys even when private keys are missing. | djm | 2015-01-31 | 1 | -10/+17 | |
| | | | | | | Allows sshd to advertise additional keys for future key rotation. Also log fingerprint of hostkeys loaded; ok markus@ | |||||
| * | Add a ssh_config HostbasedKeyType option to control which | djm | 2015-01-30 | 7 | -120/+245 | |
| | | | | | | | | | | host public key types are tried during hostbased authentication. This may be used to prevent too many keys being sent to the server, and blowing past its MaxAuthTries limit. bz#2211 based on patch by Iain Morgan; ok markus@ | |||||
| * | set a timeout to prevent hangs when talking to busted servers; | djm | 2015-01-30 | 1 | -1/+2 | |
| | | | | | ok markus@ | |||||
| * | avoid more fatal/exit in the packet.c paths that ssh-keyscan | djm | 2015-01-30 | 9 | -114/+204 | |
| | | | | | uses; feedback and "looks good" markus@ | |||||
| * | permit KRLs that revoke certificates by serial number or key ID | djm | 2015-01-30 | 3 | -51/+86 | |
| | | | | | without scoping to a particular CA; ok markus@ | |||||
| * | missing parentheses after if in do_convert_from() broke | djm | 2015-01-30 | 1 | -3/+3 | |
| | | | | | | private key conversion from other formats some time in 2010; bz#2345 reported by jjelen AT redhat.com | |||||
| * | fix ssh protocol 1, spotted by miod@ | djm | 2015-01-30 | 1 | -9/+20 | |
| | | ||||||
| * | update to new API (key_fingerprint => sshkey_fingerprint) | djm | 2015-01-28 | 12 | -68/+81 | |
| | | | | | | check sshkey_fingerprint return values; ok markus | |||||
| * | avoid fatal() calls in packet code | djm | 2015-01-28 | 1 | -3/+15 | |
| | | | | | | makes ssh-keyscan more reliable against server failures ok dtucker@ markus@ | |||||
| * | avoid fatal() calls in packet code | djm | 2015-01-28 | 7 | -29/+54 | |
| | | | | | | makes ssh-keyscan more reliable against server failures ok dtucker@ markus@ | |||||
| * | remove obsolete comment | djm | 2015-01-28 | 1 | -2/+1 | |
| | | ||||||
| * | Since r1.2 removed the use of PRI* macros, inttypes.h is no longer |   okan | 2015-01-27 | 2 | -4/+2 | |
| | | | | | | | required. ok djm@ | |||||
| * | sort previous; |   jmc | 2015-01-26 | 1 | -2/+2 | |
| | | ||||||
| * | properly restore umask | djm | 2015-01-26 | 1 | -2/+4 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |