summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/auth.c
AgeCommit message (Expand)Author
2024-09-15add a "Match invalid-user" predicate to sshd_config Match options.Damien Miller
2024-05-17Start the process of splitting sshd into separate binaries. This stepDamien Miller
2023-03-05Remove unused compat.h includes. We've previously removed a lotDarren Tucker
2022-12-09Add some server debugging for hostbased auth.Darren Tucker
2022-06-03move auth_openprincipals() and auth_openkeyfile() over toDamien Miller
2022-05-27split the low-level file handling functions out from auth2-pubkey.cDamien Miller
2022-05-27refactor authorized_keys/principals handlingDamien Miller
2022-04-26Check sshauthopt_new() for NULL. bz#3425, from tessgauthier atDarren Tucker
2022-02-23randomise the password used in fakepwDamien Miller
2021-07-05Remove comment referencing now-removed RhostsRSAAuthentication. ok djm@Darren Tucker
2021-04-03highly polished whitespace, mostly fixing spaces-for-tab and badDamien Miller
2020-12-22move subprocess() from auth.c to misc.cDamien Miller
2020-12-20load_hostkeys()/hostkeys_foreach() variants for FILE*Damien Miller
2020-10-18use the new variant log macros instead of prepending __func__ andDamien Miller
2020-10-16LogVerbose keyword for ssh and sshdDamien Miller
2020-08-27support for requiring user verified FIDO keys in sshdDamien Miller
2020-01-31Add a sshd_config "Include" directive to allow inclusion of files.Damien Miller
2020-01-23Replace all calls to signal(2) with a wrapper around sigaction(2).Darren Tucker
2019-12-16strdup may return NULL if memory allocation fails. Use the safer xstrduptobhe
2019-11-25add a "no-touch-required" option for authorized_keys and a similarDamien Miller
2019-10-16potential NULL dereference for revoked hostkeys; reported byDamien Miller
2019-10-02remove some duplicate #includesDamien Miller
2019-09-06lots of things were relying on libcrypto headers to transitivelyDamien Miller
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-01-19convert auth.c to new packet APIDamien Miller
2019-01-19convert servconf.c to new packet APIDamien Miller
2019-01-19begin landing remaining refactoring of packet parsing API, startedDamien Miller
2019-01-17include time.h for time(3)/nanosleep(2); from Ian McKellarDamien Miller
2018-11-16use path_absolute() for pathname checks; from Manoj AmpalamDamien Miller
2018-09-12log certificate fingerprint in authentication success/failure messageDamien Miller
2018-07-11s/wuth/with/ in commentMartijn van Duren
2018-07-09sshd: switch authentication to sshbuf API; ok djm@Markus Friedl
2018-06-06permitlisten option for authorized_keys; ok markus@Damien Miller
2018-06-01make UID available as a %-expansion everywhere that the username isDamien Miller
2018-05-25Do not ban PTY allocation when a sshd session is restricted becauseDamien Miller
2018-03-12add valid-before="[time]" authorized_keys option. A simple way ofDamien Miller
2018-03-03switch over to the new authorized_keys options API and remove theDamien Miller
2018-01-08move subprocess() so scp/sftp do not need uidswap.o; ok djm@Markus Friedl
2017-09-12refactor channels.cDamien Miller
2017-08-18Move several subprocess-related functions from various locations toDamien Miller
2017-06-24refactor authentication loggingDamien Miller
2017-05-30switch from Key typedef with struct sshkey; ok djm@Markus Friedl
2017-05-17allow LogLevel in sshd_config Match blocks; ok dtucker bz#2717Damien Miller
2016-12-15Add missing braces in DenyUsers code. Patch from zev at bewilderbeest.net,Darren Tucker
2016-11-08unbreak DenyUsers; reported by henning@Damien Miller
2016-11-06Validate address ranges for AllowUser/DenyUsers at configuration loadDamien Miller
2016-08-13remove ssh1 server code; ok djm@Markus Friedl
2016-06-15Remove "POSSIBLE BREAK-IN ATTEMPT!" from log message about forward andDarren Tucker
2016-03-07refactor canohost.c: move functions that cache results closer to theDamien Miller
2015-08-21fix inverted logic that broke PermitRootLogin;Damien Miller