summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/auth2-pubkey.c
AgeCommit message (Expand)Author
2024-05-17Start the process of splitting sshd into separate binaries. This stepDamien Miller
2023-07-27make sshd_config AuthorizedPrincipalsCommand and AuthorizedKeysCommandDamien Miller
2023-02-17Remove now-unused compat bit SSH_BUG_RSASIGMD5. The code to set thisDarren Tucker
2022-09-17Add RequiredRSASize for sshd(8); RSA keys that fall beneath this limitDamien Miller
2022-06-15make sure that UseDNS hostname lookup happens in the monitor andDamien Miller
2022-05-27split the low-level file handling functions out from auth2-pubkey.cDamien Miller
2022-05-27refactor authorized_keys/principals handlingDamien Miller
2022-02-27include rejected signature algorithm in error message and not theChristian Weisgerber
2021-12-19sshd side of hostbound public key authDamien Miller
2021-12-19prepare for multiple names for authmethodsDamien Miller
2021-09-29add some debug output showing how many key file/command linesDamien Miller
2021-07-23Let allowed signers files used by ssh-keygen(1) signatures support keyDamien Miller
2021-06-08Allow argv_split() to optionally terminate tokenisation when itDamien Miller
2021-04-03highly polished whitespace, mostly fixing spaces-for-tab and badDamien Miller
2021-01-27make ssh->kex->session_id a sshbuf instead of u_char*/size_t andDamien Miller
2021-01-26move check_host_cert() from sshconnect,c to sshkey.c and refactorDamien Miller
2021-01-22Rename PubkeyAcceptedKeyTypes keyword to PubkeyAcceptedAlgorithms.Darren Tucker
2020-12-22move subprocess() from auth.c to misc.cDamien Miller
2020-12-17fix possible error("%s", NULL) on error pathsDamien Miller
2020-10-18use the new variant log macros instead of prepending __func__ andDamien Miller
2020-08-27support for requiring user verified FIDO keys in sshdDamien Miller
2020-02-06Replace "security key" with "authenticator" in program messages.Christian Weisgerber
2020-01-23Replace all calls to signal(2) with a wrapper around sigaction(2).Darren Tucker
2019-11-25add a "no-touch-required" option for authorized_keys and a similarDamien Miller
2019-11-25Add a sshd_config PubkeyAuthOptions directiveDamien Miller
2019-11-25Add new structure for signature optionsDamien Miller
2019-09-06lots of things were relying on libcrypto headers to transitivelyDamien Miller
2019-09-03move advance_past_options to authfile.c and make it public;Damien Miller
2019-09-03move skip_space() to misc.c and make it public; ok markus@Damien Miller
2019-07-16remove mostly vestigal uuencode.[ch]; moving the only uniqueDamien Miller
2019-06-21print the correct AuthorizedPrincipalsCommand rather than anDamien Miller
2019-06-14for public key authentication, check AuthorizedKeysFiles files beforeDamien Miller
2019-05-20embiggen format buffer size for certificate serial number soDamien Miller
2019-01-22print the full pubkey being attempted at loglevel >= debug2; bz2939Damien Miller
2018-09-20Add sshd_config CASignatureAlgorithms option to allow control overDamien Miller
2018-08-28fix misplaced parenthesis inside if-clause. it's harmless and the only issue isRicardo Mestre
2018-08-23memleak introduced in r1.83; from Colin WatsonDamien Miller
2018-07-31delay bailout for invalid authenticating user until after the packetDamien Miller
2018-07-11treat ssh_packet_write_wait() errors as fatal; ok djm@Markus Friedl
2018-07-09sshd: switch authentication to sshbuf API; ok djm@Markus Friedl
2018-07-03Improve strictness and control over RSA-SHA2 signature types:Damien Miller
2018-06-06switch config file parsing to getline(3) as this avoids static limitsMarkus Friedl
2018-06-01make UID available as a %-expansion everywhere that the username isDamien Miller
2018-03-03switch over to the new authorized_keys options API and remove theDamien Miller
2018-02-07ssh_free checks for and handles NULL args, remove NULL checks from remainingDarren Tucker
2018-01-23Drop compatibility hacks for some ancient SSH implementations, includingDamien Miller
2017-12-21revert stricter key type / signature type checking in userauth path;Damien Miller
2017-12-19include signature type and CA key (if applicable) in some debug messagesDamien Miller
2017-12-18pass negotiated signing algorithm though to sshkey_verify() andDamien Miller
2017-09-07typo in commentDamien Miller