Age | Commit message (Expand) | Author |
2016-02-08 | refactor activation of rekeying | Damien Miller |
2016-02-04 | printf argument casts to avoid warnings on strict compilers | Damien Miller |
2016-01-29 | include packet type of non-data packets in debug3 output; | Damien Miller |
2016-01-29 | Revert "account for packets buffered but not yet processed" change as it | Darren Tucker |
2016-01-29 | Allow RekeyLimits in excess of 4G up to 2**63 bits (limited by the return | Darren Tucker |
2016-01-29 | Account for packets buffered but not yet processed when computing whether or | Darren Tucker |
2016-01-14 | remove roaming support; ok djm@ | Markus Friedl |
2015-12-11 | Remove NULL-checks before sshbuf_free(). | mmcc |
2015-12-11 | include remote port number in a few more messages; makes tying log | Damien Miller |
2015-12-10 | Remove NULL-checks before free(). | mmcc |
2015-12-04 | implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures (user and host auth) | Markus Friedl |
2015-11-08 | fix OOB read in packet code caused by missing return statement | Damien Miller |
2015-10-21 | fix memory leak in error path | Gleydson Soares |
2015-09-21 | fix possible hang on closed output; bz#2469 reported by Tomas Kuthan | Damien Miller |
2015-08-20 | Do not cast result of malloc/calloc/realloc* if stdlib.h is in scope | Theo de Raadt |
2015-07-29 | include the peer's offer when logging a failure to negotiate a | Damien Miller |
2015-05-01 | refactor ssh_dispatch_run_fatal() to use sshpkt_fatal() to better | Damien Miller |
2015-04-27 | fix compilation with OPENSSL=no; ok dtucker@ | Damien Miller |
2015-03-24 | don't leak 'setp' on error; noted by Nicholas Lemonias; ok djm@ | Markus Friedl |
2015-03-11 | add back the changes from rev 1.206, djm reverted this by mistake in | Jonathan Gray |
2015-02-13 | make rekey_limit for sshd w/privsep work; ok djm@ dtucker@ | Markus Friedl |
2015-02-11 | Some packet error messages show the address of the peer, but might be | Damien Miller |
2015-02-09 | fix some leaks in error paths | Jonathan Gray |
2015-01-30 | avoid more fatal/exit in the packet.c paths that ssh-keyscan | Damien Miller |
2015-01-28 | avoid fatal() calls in packet code | Damien Miller |
2015-01-20 | Reduce use of <sys/param.h> and transition to <limits.h> throughout. | Theo de Raadt |
2015-01-19 | add experimental api for packet layer; ok djm@ | Markus Friedl |
2015-01-19 | update packet.c & isolate, introduce struct ssh | Markus Friedl |
2015-01-13 | adapt mac.c to ssherr.h return codes (de-fatal) and simplify dependencies | Markus Friedl |
2014-10-24 | Remove unnecessary include: netinet/in_systm.h is not needed by these | Lawrence Teo |
2014-07-15 | Add support for Unix domain socket forwarding. A remote TCP port | Todd C. Miller |
2014-06-24 | New key API: refactor key-related functions to be more library-like, | Damien Miller |
2014-05-03 | unbreak compression, by re-init-ing the compression code in the | Markus Friedl |
2014-04-29 | make compiling against OpenSSL optional (make OPENSSL=no); | Markus Friedl |
2014-04-28 | buffer_get_string_ptr's return should be const to remind | Damien Miller |
2014-04-01 | demote a debug3 to PACKET_DEBUG; ok markus@ | Damien Miller |
2014-02-02 | convert memset of potentially-private data to explicit_bzero() | Damien Miller |
2013-12-06 | new private key format, bcrypt as KDF by default; details in PROTOCOL.key; | Markus Friedl |
2013-11-21 | Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com" | Damien Miller |
2013-11-08 | use calloc for all structure allocations; from markus@ | Damien Miller |
2013-07-12 | fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@ | Damien Miller |
2013-06-01 | Use clock_gettime(CLOCK_MONOTONIC ...) for ssh timers so that things like | Darren Tucker |
2013-05-17 | bye, bye xfree(); ok markus@ | Damien Miller |
2013-05-16 | Add RekeyLimit to sshd with the same syntax as the client allowing rekeying | Darren Tucker |
2013-05-16 | Add an optional second argument to RekeyLimit in the client to allow | Darren Tucker |
2013-04-19 | add the ability to query supported ciphers, MACs, key type and KEX | Damien Miller |
2013-04-11 | quiet disconnect notifications on the server from error() back to logit() | Damien Miller |
2013-02-10 | record "Received disconnect" messages at ERROR rather than INFO priority, | Damien Miller |
2013-01-08 | support AES-GCM as defined in RFC 5647 (but with simpler KEX handling) | Markus Friedl |
2012-12-12 | reset incoming_packet buffer for each new packet in EtM-case, too; | Markus Friedl |