summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/authfd.c
AgeCommit message (Expand)Author
2019-06-21Add protection for private keys at rest in RAM against speculationDamien Miller
2018-12-27Request RSA-SHA2 signatures for rsa-sha2-{256|512}-cert-v01@openssh.comDamien Miller
2018-11-30don't attempt to connect to empty SSH_AUTH_SOCK; bz#293Damien Miller
2018-07-09replace cast with call to sshbuf_mutable_ptr(); ok djm@Markus Friedl
2018-07-03Improve strictness and control over RSA-SHA2 signature types:Damien Miller
2018-04-10lots of typos in comments/docs. Patch from Karsten Weiss after checkingDamien Miller
2018-02-23Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures)Markus Friedl
2018-02-10constify some private key-related functions; based onDamien Miller
2018-01-23Drop compatibility hacks for some ancient SSH implementations, includingDamien Miller
2017-07-01remove post-SSHv1 removal dead code from rsa.c and merge theDamien Miller
2017-06-28Allow ssh-keygen to use a key held in ssh-agent as a CA when signingDamien Miller
2017-05-05more simplification and removal of SSHv1-related code; ok djm@Christian Weisgerber
2017-05-04since a couple of people have asked, leave a comment explaining why weDamien Miller
2017-04-30unifdef WITH_SSH1Damien Miller
2015-12-04implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures (user and host auth)Markus Friedl
2015-09-02Fix occurrences of "r = func() != 0" which result in the wrong errorJonathan Gray
2015-07-03delete support for legacy v00 certificates; "sure" markus@ dtucker@Damien Miller
2015-03-26sigp and lenp are not optional in ssh_agent_sign(); ok djm@Markus Friedl
2015-03-25unbreak ssh_agent_sign (lenp vs *lenp)Markus Friedl
2015-03-24consistent check for NULL as noted by Nicholas Lemonias; ok djm@Markus Friedl
2015-01-14move authfd.c and its tentacles to the new buffer/key API;Damien Miller
2014-04-29make compiling against OpenSSL optional (make OPENSSL=no);Markus Friedl
2014-01-31replace most bzero with explicit_bzero, except a few that cna be memsetTed Unangst
2013-12-29allow deletion of ed25519 keys from the agentDamien Miller
2013-12-06support ed25519 keys (hostkeys and user identities) using the public domainMarkus Friedl
2013-12-06move private key (de)serialization to key.c; ok djmMarkus Friedl
2013-11-08use calloc for all structure allocations; from markus@Damien Miller
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2011-07-06bzero the agent address. the kernel was for a while very cranky aboutTed Unangst
2011-05-15use FD_CLOEXEC consistently; patch from zion AT x96.orgDamien Miller
2010-08-31Implement Elliptic Curve Cryptography modes for key exchange (ECDH) andDamien Miller
2010-04-16revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with theDamien Miller
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
2009-08-27Do not fall back to adding keys without contraints (ssh-add -c / -t ...)Damien Miller
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-07-26move #include <stdlib.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-07-17move #include <unistd.h> out of includes.hKevin Steves
2006-07-09move #include <fcntl.h> out of includes.hKevin Steves
2006-07-08move #include <sys/socket.h> out of includes.hKevin Steves
2006-03-30replace {GET,PUT}_XXBIT macros with functionally similar functions,Damien Miller
2006-03-25needed casts (always will be needed)Theo de Raadt
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
2006-03-19spacingTheo de Raadt
2006-03-19RCSID() can dieTheo de Raadt
2006-03-17another unreachable found by lintDamien Miller
2006-03-17unreachanble statement, found by lintDamien Miller
2006-02-20move #include <sys/un.h> out of includes.h; ok djm@Kevin Steves
2005-06-17make this -Wsign-compare clean; ok avsm@ markus@Damien Miller
2005-05-24Switch atomicio to use a simpler interface; it now returns a size_tAnil Madhavapeddy