src - OpenBSD base system

Age	Commit message (Collapse)	Author
2003-11-10	constify. ok markus@ & djm@	Jakob Schlyter

2003-04-08	rename log() into logit() to avoid name conflict. markus ok, from netbsd	Jun-ichiro itojun Hagino

2002-07-24	print out all known keys for a host if we get a unknown host key,	Markus Friedl
	see discussion at http://marc.theaimsgroup.com/?t=101069210100016&r=1&w=4 the ssharp mitm tool attacks users in a similar way, so i'd like to pointed out again: A MITM attack is always possible if the ssh client prints: The authenticity of host 'bla' can't be established. (protocol version 2 with pubkey authentication allows you to detect MITM attacks)
2001-12-18	remove auth_rsa_read_key, make hostfile_ready_key non static; ok markus@	Jakob Schlyter

2001-06-25	update copyright for 2001	Markus Friedl

2001-06-23	more strict prototypes. raise warning level in Makefile.inc. markus ok'ed	Jun-ichiro itojun Hagino
	TODO; cleanup headers
2001-04-12	implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)	Markus Friedl
	similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :)
2001-04-06	unused; typo in comment	Kevin Steves

2001-01-21	split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.	Markus Friedl
	rename util.[ch] -> misc.[ch]
2000-12-21	print keyfile:line for changed hostkeys, for deraadt@; ok deraadt@	Markus Friedl

2000-12-19	replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'	Markus Friedl
	with u_char.
2000-11-12	add support for RSA to SSH2. please test.	Markus Friedl
	there are now 3 types of keys: RSA1 is used by ssh-1 only, RSA and DSA are used by SSH2. you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA keys for SSH2 and use the RSA keys for hostkeys or for user keys. SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before. IdentityFile2, HostDsaKey and DSAAuthentication are obsolete. you can use multiple IdentityFile and HostKey for all types of keys. the option DSAAuthentication is replaced by PubkeyAuthetication.
2000-09-07	cleanup copyright notices on all files. I have attempted to be accurate with	Theo de Raadt
	the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
2000-06-06	fix match_hostname() logic for auth-rsa: deny access if we have a negative ↵	Markus Friedl
	match or no match at all
2000-04-29	keysize warnings error() -> log()	Markus Friedl

2000-04-26	add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX]	Markus Friedl
	for trading keys with the real and the original SSH, directly from the people who invented the SSH protocol.
2000-04-14	whitespace cleanup	Markus Friedl

2000-04-12	#include <ssl/foo.h> -> <openssh/foo.h>	Markus Friedl

2000-03-23	initial support for DSA keys. ok deraadt@, niels@	Markus Friedl

2000-02-18	remove unused variable 'len'. fix comments.	Markus Friedl

2000-02-16	remove unused variable	Markus Friedl

2000-01-04	ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new features:	Markus Friedl
	sshd allows multiple ListenAddress and Port options. note that libwrap is not IPv6-ready. (based on patches from <kick@kyoto.wide.ad.jp> and fujiwara@rcac.tdi.co.jp)
1999-12-02	indent, shorter warning	Markus Friedl

1999-11-24	KNF, final part 3	Markus Friedl

1999-11-24	much more KNF	Theo de Raadt

1999-11-23	KNF part 1	Markus Friedl

1999-11-16	in known_hosts key lookup the entry for the bits does not need to match, all	Niels Provos
	the information is contained in n and e. This solves the problem with buggy servers announcing the wrong modulus length. markus and me.
1999-11-15	the keysize of rsa-parameter 'n' is passed implizit,	Markus Friedl
	a few more checks and warnings about 'pretended' keysizes.
1999-11-02	replace assert() with error, fatal or packet_disconnect	Markus Friedl

1999-10-03	add code to detect DNS spoofing:	Niels Provos
	the main idea is to not only store the host key for the hostname but also for the according IP address. When we check the host key in the known_hosts file, we also check the key against the according IP address. When the server key changes, host_status = HOST_CHANGED. If check_host_in_hostfile() returns differing status for the IP address that means that either DNS was spoofed or that the IP address for the host and the host key changed at the same time.
1999-09-28	convert all uses of gmp to SSL bignum	Niels Provos
	convert all used of rsa to SSL rsa functions remove all use of randomstate to OpenBSD arc4random() and arc4_stir() all this done at a long long night in Canada.
1999-09-26	i bet a lot of people didn't know what ssh 1.2.16 had a nice license.	Theo de Raadt
	well, except for the patent issues. someone in sweden (forget their name at the moment) cleaned out most of the patented code, and now this code removes rsa code. when this is done, it will link against libssl, but the work isn't completely done yet. then we need to bring this up to modern days, featurewise.