summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/authfile.c
AgeCommit message (Expand)Author
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-04-19add the ability to query supported ciphers, MACs, key type and KEXDamien Miller
2013-01-08support AES-GCM as defined in RFC 5647 (but with simpler KEX handling)Markus Friedl
2012-12-11add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithmsMarkus Friedl
2012-01-25memleak in key_load_file(); from Jan KlemkowMarkus Friedl
2011-06-14make sure key_parse_public/private_rsa1() no longer consumes its input buffer.Markus Friedl
2011-05-23read in key comments for v.2 keys (though note that these are notDamien Miller
2011-05-13warn on unexpected key type in key_parse_private_type()Damien Miller
2011-05-10despam debug() logs by detecting that we are trying to load a private keyDamien Miller
2011-05-04allow "ssh-add - < key"; feedback and ok markus@Damien Miller
2010-11-29correctly load comment for encrypted rsa1 keys;Markus Friedl
2010-11-21Refactor internals of private key loading and saving to work on memoryDamien Miller
2010-10-28fix a possible NULL deref on loading a corrupt ECDH keyDamien Miller
2010-09-08typoDamien Miller
2010-08-31Implement Elliptic Curve Cryptography modes for key exchange (ECDH) andDamien Miller
2010-08-04commited the wrong version of the hostbased certificate diff; thisDamien Miller
2010-08-04enable certificates for hostbased authentication, from Iain Morgan;Damien Miller
2010-03-04Add a TrustedUserCAKeys option to sshd_config to specify CA keys thatDamien Miller
2010-01-12Fix bug introduced in r1.78 (incorrect brace location) that broke key auth.Darren Tucker
2010-01-11Do not prompt for a passphrase if we fail to open a keyfile, and log theDarren Tucker
2009-10-22switch from 3DES to AES-128 for encryption of passphrase-protectedDamien Miller
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-08-01clean extra spacesKevin Steves
2006-08-01move #include <stdio.h> out of includes.hKevin Steves
2006-07-26move #include <stdlib.h> out of includes.hKevin Steves
2006-07-26move #include <sys/param.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-07-17move #include <unistd.h> out of includes.hKevin Steves
2006-07-11need <errno.h> here also (it's also included in <openssl/err.h>)Kevin Steves
2006-07-09move #include <fcntl.h> out of includes.hKevin Steves
2006-04-25Prevent ssh from trying to open private keys with bad permissions more thanDarren Tucker
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
2006-03-19whoever thought that break after return was a good idea needs to get their he...Theo de Raadt
2006-03-19RCSID() can dieTheo de Raadt
2006-03-13Make ssh-add check file permissions before attempting to load privateDarren Tucker
2006-02-20move #include <sys/stat.h> out of includes.h; ok markus@Kevin Steves
2005-06-17make this -Wsign-compare clean; ok avsm@ markus@Damien Miller
2004-12-11Fix debug call in error path of authorized_keys processing and fix relatedDarren Tucker
2004-12-06Discard over-length authorized_keys entries rather than complaining whenDarren Tucker
2004-08-23fix error path, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markusDamien Miller
2004-06-21make ssh -Wshadow clean, no functional changesAnil Madhavapeddy
2004-05-11improve some code lint did not like; djm millert okTheo de Raadt
2003-09-18missing buffer_free(&encrypted); #662; zardoz at users.sf.netMarkus Friedl
2003-05-24cast some types for printing; ok markus@Damien Miller
2003-05-11change key_load_public to try to read a public from:Markus Friedl
2003-03-13move RSA_blinding_on to generic key load methodMarkus Friedl
2002-11-15lseek(2) may return -1 when getting the public/private key lenght.Federico G. Schwindt
2002-06-24cat to (void) when output from buffer_get_X is ignoredMarkus Friedl
2002-05-23add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentic...Markus Friedl
2002-02-28add some const EVP_MD for openssl-0.9.7Markus Friedl