| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | typos in comments; GHPR#180 from Ville Skyttä |   djm | 2021-04-03 | 3 | -6/+6 |
| | | |||||
| * | sync CASignatureAlgorithms lists with reality. GHPR#174 from | djm | 2021-04-03 | 2 | -8/+10 |
| | | | | | Matt Hazinski | ||||
| * | highly polished whitespace, mostly fixing spaces-for-tab and bad | djm | 2021-04-03 | 40 | -153/+156 |
| | | | | | indentation on continuation lines. Prompted by GHPR#185 | ||||
| * | whitespace (tab after space) | djm | 2021-04-03 | 4 | -9/+9 |
| | | |||||
| * | fix incorrect plural; from Ville Skyttä via GHPR#181 | djm | 2021-04-03 | 1 | -3/+3 |
| | | |||||
| * | ensure that pkcs11_del_provider() is called before exit - some PKCS#11 | djm | 2021-04-03 | 1 | -1/+5 |
| | | | | | | | providers get upset if C_Initialize is not matched with C_Finalize. From Adithya Baglody via GHPR#234; ok markus | ||||
| * | unused variable | djm | 2021-04-03 | 1 | -2/+2 |
| | | |||||
| * | Fix two problems in string->argv conversion: 1) multiple backslashes | djm | 2021-04-03 | 1 | -7/+4 |
| | | | | | | | | | | were not being dequoted correctly and 2) quoted space in the middle of a string was being incorrectly split. A unit test for these cases has already been committed prompted by and based on GHPR#223 by Eero Häkkinen; ok markus@ | ||||
| * | Use new limits@openssh.com protocol extension to let the client select | djm | 2021-03-31 | 3 | -18/+115 |
| | | | | | | | | | | | | good limits based on what the server supports. Split the download and upload buffer sizes to allow them to be chosen independently. In practice (and assuming upgraded sftp/sftp-server at each end), this increases the download buffer 32->64KiB and the upload buffer 32->255KiB. Patches from Mike Frysinger; ok dtucker@ | ||||
| * | do not advertise protocol extensions that have been disallowed by | djm | 2021-03-31 | 1 | -33/+53 |
| | | | | | the command-line options (e.g. -p/-P/-R); ok dtucker@ | ||||
| * | return non-zero exit status when killed by signal; bz#3281 | djm | 2021-03-19 | 1 | -2/+2 |
| | | | | | ok dtucker@ | ||||
| * | increase maximum SSH2_FXP_READ to match the maximum packet size. | djm | 2021-03-19 | 1 | -24/+38 |
| | | | | | | | Also handle zero-length reads that are borderline nonsensical but not explicitly banned by the spec. Based on patch from Mike Frysinger, feedback deraadt@ ok dtucker@ | ||||
| * | don't let logging clobber errno before use | djm | 2021-03-16 | 1 | -4/+6 |
| | | |||||
| * | spelling |   jsg | 2021-03-12 | 1 | -3/+3 |
| | | |||||
| * | Add ModuliFile keyword to sshd_config to specify the location of the |   dtucker | 2021-03-12 | 6 | -12/+49 |
| | | | | | | | "moduli" file containing the groups for DH-GEX. This will allow us to run tests against arbitrary moduli files without having to install them. ok djm@ | ||||
| * | pwcopy() struct passwd that we're going to reuse across a bunch of | djm | 2021-03-12 | 1 | -1/+2 |
| | | | | | library calls; bz3273 ok dtucker@ | ||||
| * | Import regenerated moduli file. | dtucker | 2021-03-10 | 6 | -405/+445 |
| | | |||||
| * | no need to reset buffer after send_msg() as that is done for us; | djm | 2021-03-10 | 1 | -3/+1 |
| | | | | | patch from Mike Frysinger | ||||
| * | Fix PRINT macro, the suffix param to sshlog() was missing. |   millert | 2021-03-06 | 1 | -21/+20 |
| | | | | | | | Also remove redundant __func__ prefix from PRINT calls as the macro already adds __FILE__, __func__ and __LINE__. From Christos Zoulas. OK dtucker@ | ||||
| * | don't sshbuf_get_u32() into an enum; reported by goetze AT | djm | 2021-03-03 | 1 | -4/+4 |
| | | | | | dovetail.com via bz3269 | ||||
| * | typo in other_hostkeys_message() display output, ok djm |   sthen | 2021-03-03 | 1 | -2/+2 |
| | | |||||
| * | needs FILE*; from Mike Frysinger | djm | 2021-03-03 | 1 | -1/+2 |
| | | |||||
| * | openssh-8.5 | djm | 2021-03-02 | 1 | -2/+2 |
| | | |||||
| * | Add %k to list of keywords. From Eero Häkkinenvia bz#3267 | dtucker | 2021-02-28 | 1 | -3/+3 |
| | | |||||
| * | Do not try to reset signal handler for signal 0 in subprocess. | dtucker | 2021-02-28 | 1 | -2/+2 |
| | | | | | Prevents spurious debug message. ok djm@ | ||||
| * | fix alphabetic ordering of options; spotted by Iain Morgan | djm | 2021-02-27 | 1 | -9/+9 |
| | | |||||
| * | a bit more debugging behind #ifdef DEBUG_SK | djm | 2021-02-26 | 1 | -2/+7 |
| | | |||||
| * | Put obsolete aliases for hostbasedalgorithms and pubkeyacceptedalgorithms | dtucker | 2021-02-24 | 2 | -6/+6 |
| | | | | | | after their current names so that the config-dump mode finds and uses the current names. Spotted by Phil Pennock. | ||||
| * | lots more s/key types/signature algorithms/ mostly in | djm | 2021-02-23 | 2 | -32/+32 |
| | | | | | | HostbasedAcceptedAlgorithms and HostKeyAlgorithms; prompted by Jakub Jelen | ||||
| * | Correct reference to signature algorithms as keys; from Jakub Jelen | djm | 2021-02-23 | 1 | -3/+3 |
| | | |||||
| * | warn when the user specifies a ForwardAgent path that does not exist | djm | 2021-02-23 | 1 | -1/+7 |
| | | | | | and exit if ExitOnForwardFailure is set; bz3264 | ||||
| * | Fix the hostkeys rotation extension documentation | djm | 2021-02-18 | 1 | -1/+2 |
| | | | | | | | | The documentation was lacking the needed want-reply field in the initial global request. https://github.com/openssh/openssh-portable/pull/218 by dbussink | ||||
| * | make names in function prototypes match those in definition | djm | 2021-02-18 | 2 | -4/+4 |
| | | | | | | from https://github.com/openssh/openssh-portable/pull/225 by ZenithalHourlyRate | ||||
| * | unbreak SK_DEBUG builds | djm | 2021-02-18 | 1 | -3/+3 |
| | | | | | | from https://github.com/openssh/openssh-portable/pull/225 by ZenithalHourlyRate | ||||
| * | sftp-server: implement limits@openssh.com extension | djm | 2021-02-18 | 2 | -3/+85 |
| | | | | | | | | | | | This is a simple extension that allows the server to clearly communicate transfer limits it is imposing so the client doesn't have to guess, or force the user to manually tune. This is particularly useful when an attempt to use too large of a value causes the server to abort the connection. Patch from Mike Frysinger; ok dtucker@ | ||||
| * | ssh: add PermitRemoteOpen for remote dynamic forwarding with SOCKS |   markus | 2021-02-15 | 6 | -9/+170 |
| | | | | | ok djm@, dtucker@ | ||||
| * | factor out opt_array_append; ok djm@ | markus | 2021-02-15 | 3 | -43/+51 |
| | | |||||
| * | ProxyJump takes "none" to disable processing like ProxyCommand does |   dlg | 2021-02-15 | 1 | -2/+5 |
| | | | | | ok djm@ jmc@ | ||||
| * | sftp: add missing lsetstat@openssh.com documentation | djm | 2021-02-12 | 3 | -13/+39 |
| | | | | | patch from Mike Frysinger | ||||
| * | factor SSH_AGENT_CONSTRAIN_EXTENSION parsing into its own function | djm | 2021-02-12 | 1 | -41/+59 |
| | | | | | and remove an unused variable; ok dtucker@ | ||||
| * | Remove debug message from sigchld handler. While this works on OpenBSD | dtucker | 2021-02-05 | 1 | -3/+1 |
| | | | | | | it can cause problems on other platforms. From kircherlike at outlook.com via bz#3259, ok djm@ | ||||
| * | whitespace | djm | 2021-02-02 | 1 | -2/+1 |
| | | |||||
| * | fix memleaks in private key deserialisation; enforce more consistency | djm | 2021-02-02 | 1 | -1/+20 |
| | | | | | | between redundant fields in private key certificate and private key body; ok markus@ | ||||
| * | memleak on error path; ok markus@ | djm | 2021-02-02 | 1 | -2/+2 |
| | | |||||
| * | more strictly enforce KEX state-machine by banning packet types | djm | 2021-01-31 | 5 | -9/+25 |
| | | | | | | | | | once they are received. Fixes memleak caused by duplicate SSH2_MSG_KEX_DH_GEX_REQUEST (spotted by portable OpenSSH kex_fuzz via oss-fuzz #30078). ok markus@ | ||||
| * | Set linesize returned by getline to zero when freeing and NULLing the | dtucker | 2021-01-31 | 1 | -1/+3 |
| | | | | | | returned string. OpenBSD's getline handles this just fine, but some implementations used by -portable do not. ok djm@ | ||||
| * | fix the values of enum sock_type | djm | 2021-01-29 | 1 | -4/+4 |
| | | |||||
| * | give typedef'd struct a struct name; makes the fuzzer I'm writing a bit | djm | 2021-01-29 | 1 | -2/+2 |
| | | | | | easier | ||||
| * | fix leak: was double allocating kex->session_id buffer | djm | 2021-01-27 | 1 | -4/+6 |
| | | |||||
| * | this needs kex.h now | djm | 2021-01-27 | 1 | -1/+2 |
| | | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |