summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/authfile.c
AgeCommit message (Collapse)Author
2002-06-24cat to (void) when output from buffer_get_X is ignoredMarkus Friedl
2002-05-23add /usr/libexec/ssh-keysign: a setuid helper program for hostbased ↵Markus Friedl
authentication in protocol v2 (needs to access the hostkeys).
2002-02-28add some const EVP_MD for openssl-0.9.7Markus Friedl
2002-02-24signed vs. unsigned: make size arguments u_int, ok stevesk@Markus Friedl
2002-02-14hide some more implementation details of cipher.[ch] and prepares for moveMarkus Friedl
to EVP, ok deraadt@
2001-12-29remove unneeded casts and some char->u_char cleanup; ok markus@Kevin Steves
2001-12-27missing includeMarkus Friedl
2001-12-27call fatal() for openssl allocation failuresMarkus Friedl
2001-12-19change the buffer/packet interface to use void* vs. char*; ok markus@Kevin Steves
2001-12-19basic KNF done while i was looking for something elseTheo de Raadt
2001-12-05minor KNFTheo de Raadt
2001-10-07grammer; Matthew_Clarke@mindlink.bc.caMarkus Friedl
2001-09-23relax permission check for private key files.Markus Friedl
2001-06-23more strict prototypes. raise warning level in Makefile.inc. markus ok'edJun-ichiro itojun Hagino
TODO; cleanup headers
2001-06-07use xxx_put_cstring()Markus Friedl
2001-05-29typoMarkus Friedl
2001-05-28key_load_private: set comment to filename for PEM keysMarkus Friedl
2001-05-16return comments for private pem files, too; report from nolan@naic.eduMarkus Friedl
2001-04-18error->debug; noted by fries@Markus Friedl
2001-04-15don't use errno for key_{load,save}_private; discussion w/ solar@openwallMarkus Friedl
2001-03-26KNFMarkus Friedl
2001-03-26simpler key load/save interface, see authfile.hMarkus Friedl
2001-02-21improve fd handlingTheo de Raadt
2001-02-08sync with netbsd tree changes.Jun-ichiro itojun Hagino
- more strict prototypes, include necessary headers - use paths.h/pathnames.h decls - size_t typecase to int -> u_long
2001-01-28spelling. use sizeof vs. strlen(). ok markus@Kevin Steves
2001-01-21split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.Markus Friedl
rename util.[ch] -> misc.[ch]
2000-12-20allow ssh -i userkey for rootMarkus Friedl
2000-12-19replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'Markus Friedl
with u_char.
2000-12-19remove() -> unlink() for consistencyMarkus Friedl
2000-11-12add support for RSA to SSH2. please test.Markus Friedl
there are now 3 types of keys: RSA1 is used by ssh-1 only, RSA and DSA are used by SSH2. you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA keys for SSH2 and use the RSA keys for hostkeys or for user keys. SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before. IdentityFile2, HostDsaKey and DSAAuthentication are obsolete. you can use multiple IdentityFile and HostKey for all types of keys. the option DSAAuthentication is replaced by PubkeyAuthetication.
2000-10-11new cipher frameworkMarkus Friedl
2000-09-07cleanup copyright notices on all files. I have attempted to be accurate withTheo de Raadt
the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
2000-09-05enable ssh-add -d for DSA keysMarkus Friedl
2000-06-20OpenBSD tagMarkus Friedl
2000-04-26split auth/sshconnect in one file per protocol versionMarkus Friedl
2000-04-26add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX]Markus Friedl
for trading keys with the real and the original SSH, directly from the people who invented the SSH protocol.
2000-04-14whitespace cleanupMarkus Friedl
2000-04-12#include <ssl/foo.h> -> <openssh/foo.h>Markus Friedl
2000-04-04remove unused argument, split cipher_mask()Markus Friedl
1999-12-06properly name fd variableTheo de Raadt
1999-11-24KNF, final part 3Markus Friedl
1999-11-24much more KNFTheo de Raadt
1999-11-23KNF part 1Markus Friedl
1999-10-11make sure ~/.ssh/authorized_keys is not writable for group/world (sshd)Markus Friedl
don't load private keys if they are group/world-{rwx} (ssh,sshd and ssh-add)
1999-09-30better way to deal with authfile cipher; dugsong@Niels Provos
1999-09-30off_t, but needs more looking at laterTheo de Raadt
1999-09-30we have to enable SSH_CIPHER_NONE for unprotected host keys, etc...Niels Provos
1999-09-28convert all uses of gmp to SSL bignumNiels Provos
convert all used of rsa to SSL rsa functions remove all use of randomstate to OpenBSD arc4random() and arc4_stir() all this done at a long long night in Canada.
1999-09-26all the idea code goes awayTheo de Raadt
1999-09-26i bet a lot of people didn't know what ssh 1.2.16 had a nice license.Theo de Raadt
well, except for the patent issues. someone in sweden (forget their name at the moment) cleaned out most of the patented code, and now this code removes rsa code. when this is done, it will link against libssl, but the work isn't completely done yet. then we need to bring this up to modern days, featurewise.