| Age | Commit message (Expand) | Author |
|---|
| 2020-01-21 | In -C mode, the public key is optional since it can be deduced from | Theo Buehler |
| 2019-12-22 | have parseb64file be non-destructive, so we can write the | Marc Espie |
| 2019-12-09 | tweak -z mode verification to save the header and actually output it, | Marc Espie |
| 2019-09-09 | use PATH_MAX instead of 1024; ok tedu | Theo de Raadt |
| 2019-08-10 | move to 6.6-beta | Theo de Raadt |
| 2019-07-03 | snprintf/vsnprintf return < 0 on error, rather than -1. | Theo de Raadt |
| 2019-05-08 | xr to sysupgrade | Ted Unangst |
| 2019-03-23 | allow -n to zero the gzip header timestamp. suggestion from Andre Stoebe. | Ted Unangst |
| 2019-02-26 | crank to 6.5-beta | Theo de Raadt |
| 2019-01-17 | change an error message to be less misleading. | Ted Unangst |
| 2019-01-17 | clean up the user's password even after various errors. | Ted Unangst |
| 2018-08-10 | crank to 6.4-beta | Theo de Raadt |
| 2018-02-28 | move to 6.3-beta | Theo de Raadt |
| 2018-01-16 | g/c unused defines that were only used by nacl's SHA-512 implementation | Christian Weisgerber |
| 2017-08-20 | also crank for 6.2 | Theo de Raadt |
| 2017-07-11 | adjust size to be one less than power of 2, so that doubling will never | Ted Unangst |
| 2017-07-11 | fix style compliance, in the keyname compliance function no less | Ted Unangst |
| 2017-05-28 | when copying curvy files from ssh, an extra one snuck in. | Ted Unangst |
| 2017-04-18 | use freezero() instead of explicit_bzero + free | Theo de Raadt |
| 2017-03-09 | show how to verify the next release after 6.1 | Sebastian Benoit |
| 2016-10-06 | - better check for seckeyname/pubkeyname "equality", remove the path | Marc Espie |
| 2016-10-05 | when generating keys, make sure the names specified adhere to all | Ted Unangst |
| 2016-10-05 | more properly check the secret key extension. from espie | Ted Unangst |
| 2016-10-05 | document the previously hidden keyname detection. urged by espie. | Ted Unangst |
| 2016-10-05 | combining an assignment and *two* tests in one conditional is a bit much. | Ted Unangst |
| 2016-10-04 | typo | Marc Espie |
| 2016-09-27 | can make function static now that it's living in a separate file. | Ted Unangst |
| 2016-09-27 | the keytype checking is logically part of verify, and it's small, so | Ted Unangst |
| 2016-09-27 | no need to copy keypath if we already have one | Ted Unangst |
| 2016-09-26 | have to advance pointer past the / to get basename. | Ted Unangst |
| 2016-09-26 | there's a hidden feature to infer the public key from the signature | Ted Unangst |
| 2016-09-19 | use a shell glob wildcard, that's clearer than an out of scope variable | Ted Unangst |
| 2016-09-10 | spaces found during re-read | Theo de Raadt |
| 2016-09-08 | simplify the extra buffer size copy | Marc Espie |
| 2016-09-04 | well, adding the filename doesn't help... mostly used with pipes anyhow | Marc Espie |
| 2016-09-03 | add the keyname to meta-info that passes thru | Marc Espie |
| 2016-09-03 | switch back to SHA512/256 now that we have the official nist flavor | Ted Unangst |
| 2016-09-03 | naddy@ pointed out that SHA512/256 is slightly different | Marc Espie |
| 2016-09-03 | fix parameters checking | Marc Espie |
| 2016-09-03 | MAJOR tweak: switch to SHA512/256 | Marc Espie |
| 2016-09-03 | nitpicks. all header info is relative. make gzheader freeable. | Marc Espie |
| 2016-09-02 | style polishing | Ted Unangst |
| 2016-09-02 | replace exit() with err() and errx() so user knows what happened | Ted Unangst |
| 2016-09-02 | use err() instead of errx when an errno is set | Ted Unangst |
| 2016-09-02 | the old check for when verify needed to create files (affecting pledge) | Ted Unangst |
| 2016-09-02 | combine the pledge switch with the execution switch. no changes yet, | Ted Unangst |
| 2016-09-02 | -e and -z cannot be combined | Ted Unangst |
| 2016-09-02 | space out the example | Ted Unangst |
| 2016-09-02 | finish the sentence; | Jason McIntyre |
| 2016-09-02 | more jmc tweaks | Marc Espie |
