| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | fix some signed/unsigned integer type mismatches in format |   djm | 2015-10-15 | 4 | -9/+9 |
| | | | | | strings; reported by Nicholas Lemonias | ||||
| * | argument to sshkey_from_private() and sshkey_demote() can't be NULL | djm | 2015-10-15 | 1 | -7/+3 |
| | | |||||
| * | apply PubkeyAcceptedKeyTypes filtering earlier, so all skipped | djm | 2015-10-13 | 1 | -8/+15 |
| | | | | | keys are noted before pubkey authentication starts. ok dtucker@ | ||||
| * | free the correct IV length, don't assume it's always the cipher | djm | 2015-10-13 | 1 | -2/+2 |
| | | | | | blocksize; ok dtucker@ | ||||
| * | Change all tame callers to namechange to pledge(2). |   deraadt | 2015-10-09 | 2 | -6/+6 |
| | | |||||
| * | include PubkeyAcceptedKeyTypes in ssh -G config dump | djm | 2015-10-07 | 1 | -1/+2 |
| | | |||||
| * | UsePrivilegeSeparation defaults to sandbox now. |   sobrado | 2015-10-07 | 1 | -4/+9 |
| | | | | | ok djm@ | ||||
| * | don't try to change tun device flags if they are already what | djm | 2015-10-07 | 1 | -22/+33 |
| | | | | | | | we need; makes it possible to use tun/tap networking as non- root user if device permissions and interface flags are pre-established; based on patch by Ossi Herrala | ||||
| * | some more bzero->explicit_bzero, from Michael McConville | djm | 2015-10-05 | 2 | -7/+7 |
| | | |||||
| * | switch from using the systrace-based sandbox to the tame-based sandbox. | deraadt | 2015-10-03 | 1 | -2/+2 |
| | | | | | | discussed it at length with djm -- i think it is time to give this a trial in snapshots. | ||||
| * | fix email | deraadt | 2015-10-02 | 1 | -2/+2 |
| | | |||||
| * | a sandbox using tame | deraadt | 2015-10-02 | 1 | -0/+71 |
| | | | | | ok djm | ||||
| * | re-order system calls in order of risk, ok i'll be honest, ordered this | deraadt | 2015-10-02 | 1 | -12/+19 |
| | | | | | | way they look like tame... ok djm | ||||
| * | some certificatefile tweaks; ok djm |   jmc | 2015-09-25 | 3 | -7/+9 |
| | | |||||
| * | add ssh_config CertificateFile option to explicitly list | djm | 2015-09-24 | 7 | -25/+226 |
| | | | | | a certificate; patch from Meghana Bhat on bz#2436; ok markus@ | ||||
| * | fix two typos. | sobrado | 2015-09-22 | 1 | -4/+4 |
| | | |||||
| * | fix possible hang on closed output; bz#2469 reported by Tomas Kuthan | djm | 2015-09-21 | 1 | -2/+3 |
| | | | | | ok markus@ | ||||
| * | - Fix error message: passphrase needs to be at least 5 characters, not 4. |   tim | 2015-09-13 | 5 | -28/+20 |
| | | | | | | | | - Remove unused function argument. - Remove two unnecessary variables. OK djm@ | ||||
| * | When adding keys to the agent, don't ignore the comment of keys for which the | tim | 2015-09-13 | 1 | -9/+8 |
| | | | | | | | user is prompted for a passphrase. Tweak and OK djm@ | ||||
| * | Use explicit_bzero() when zeroing before free() |   guenther | 2015-09-11 | 1 | -1/+1 |
| | | | | | | from Michael McConville (mmcconv1 (at) sccs.swarthmore.edu) ok millert@ djm@ | ||||
| * | sync -Q in usage() to SYNOPSIS; since it's drastically shorter, | jmc | 2015-09-11 | 1 | -6/+4 |
| | | | | | | i've reformatted the block to sync with the man (80 cols) and saved a line; | ||||
| * | tweak previous; | jmc | 2015-09-11 | 1 | -3/+4 |
| | | |||||
| * | Update usage to match man page. |   dtucker | 2015-09-11 | 1 | -2/+2 |
| | | |||||
| * | expand %i in ControlPath to UID; bz#2449 | djm | 2015-09-11 | 2 | -6/+9 |
| | | | | | patch from Christian Hesse w/ feedback from dtucker@ | ||||
| * | mention -Q key-plain and -Q key-cert; | djm | 2015-09-11 | 1 | -5/+9 |
| | | | | | bz#2455 pointed out by Jakub Jelen | ||||
| * | more clarity on what AuthorizedKeysFile=none does; | djm | 2015-09-11 | 2 | -5/+8 |
| | | | | | based on diff by Thiebaud Weksteen | ||||
| * | openssh_RSA_verify return type is int, so don't make it size_t within | djm | 2015-09-09 | 1 | -3/+3 |
| | | | | | | the function itself with only negative numbers or zero assigned to it. bz#2460 | ||||
| * | Plug minor memory leaks when options are used more than once. bz#2182, | dtucker | 2015-09-04 | 2 | -12/+11 |
| | | | | | patch from Tiago Cunha, ok deraadt djm | ||||
| * | full stop belongs outside the brackets, not inside; | jmc | 2015-09-04 | 1 | -2/+2 |
| | | |||||
| * | add a debug2() right before DNS resolution; it's a place where | djm | 2015-09-04 | 1 | -1/+2 |
| | | | | | ssh could previously silently hang for a while. bz#2433 | ||||
| * | correct function name in error messages | djm | 2015-09-04 | 1 | -3/+3 |
| | | |||||
| * | better document ExitOnForwardFailure; bz#2444, ok dtucker@ | djm | 2015-09-04 | 1 | -3/+10 |
| | | |||||
| * | don't record hostbased authentication hostkeys as user keys | djm | 2015-09-04 | 1 | -2/+2 |
| | | | | | in test for multiple authentication with the same key | ||||
| * | remove extra newline in nethack-mode hostkey; | djm | 2015-09-04 | 1 | -2/+2 |
| | | | | | from Christian Hesse bz#2686 | ||||
| * | Fix occurrences of "r = func() != 0" which result in the wrong error |   jsg | 2015-09-02 | 4 | -17/+17 |
| | | | | | | | codes being returned due to != having higher precedence than =. ok deraadt@ markus@ | ||||
| * | Improve printing of KEX offers and decisions | djm | 2015-08-21 | 1 | -19/+38 |
| | | | | | | The debug output now labels the client and server offers and the negotiated options. ok markus@ | ||||
| * | Fix printing (ssh -G ...) of HostKeyAlgorithms=+... | djm | 2015-08-21 | 1 | -2/+6 |
| | | | | | Reported by Bryan Drewery | ||||
| * | Fix expansion of HostkeyAlgorithms=+... | djm | 2015-08-21 | 1 | -3/+3 |
| | | | | | Reported by Bryan Drewery | ||||
| * | Regen moduli | dtucker | 2015-08-21 | 7 | -266/+252 |
| | | |||||
| * | Improve size == 0, count == 0 checking in mm_zalloc, which is "array" like. | deraadt | 2015-08-21 | 1 | -8/+3 |
| | | | | | Discussed with tedu, millert, otto.... and ok djm | ||||
| * | openssh-7.1 | djm | 2015-08-21 | 1 | -2/+2 |
| | | |||||
| * | fix inverted logic that broke PermitRootLogin; | djm | 2015-08-21 | 1 | -2/+2 |
| | | | | | reported by Mantas Mikulenas; ok markus@ | ||||
| * | Do not cast result of malloc/calloc/realloc* if stdlib.h is in scope | deraadt | 2015-08-20 | 7 | -18/+18 |
| | | | | | ok krw millert | ||||
| * | In the certificates section, be consistent about using "host_key" |   naddy | 2015-08-20 | 1 | -4/+4 |
| | | | | | and "user_key" for the respective key types. ok sthen@ deraadt@ | ||||
| * | Better compat matching for WinSCP, add compat matching for | djm | 2015-08-19 | 1 | -2/+13 |
| | | | | | FuTTY (fork of PuTTY); ok markus@ deraadt@ | ||||
| * | fix double-free() in error path of DSA key generation reported by | djm | 2015-08-19 | 1 | -2/+1 |
| | | | | | Mateusz Kocielski; ok markus@ | ||||
| * | fix free() of uninitialised pointer reported by Mateusz Kocielski; | djm | 2015-08-19 | 1 | -1/+5 |
| | | | | | ok markus@ | ||||
| * | fixed unlink([uninitialised memory]) reported by Mateusz Kocielski; | djm | 2015-08-19 | 1 | -2/+3 |
| | | | | | ok markus@ | ||||
| * | match myproposal.h order; from brian conway | jmc | 2015-08-14 | 2 | -8/+8 |
| | | | | | | | (i snuck in a tweak while here) ok dtucker | ||||
| * | add prohibit-password as a synonymn for without-password, since the | deraadt | 2015-08-06 | 4 | -9/+15 |
| | | | | | | | without-password is causing too many questions. Harden it to ban all but pubkey, hostbased, and GSSAPI auth (when the latter is enabled) from djm, ok markus | ||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |