Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-01-19 | promote rekeylimit to a int64 so it can hold the maximum useful limit | Damien Miller | |
of 2^32; report and patch from Jan.Pechanec AT Sun.COM, ok dtucker@ | |||
2007-12-31 | Prevent strict-aliasing warnings on newer gcc versions. bz #1355, patch | Darren Tucker | |
from Dmitry V. Levin, ok djm@ | |||
2007-10-22 | make sure that both the local and remote port are correct when | Markus Friedl | |
parsing -L; Jan Pechanec (bz #1378) | |||
2007-03-20 | remove some bogus *p tests from charles longeau | Ted Unangst | |
ok deraadt millert | |||
2007-01-21 | spaces | Kevin Steves | |
2007-01-17 | Honour activep for times (eg ServerAliveInterval) while parsing | Darren Tucker | |
ssh_config and ~/.ssh/config so they work properly with Host directives. From mario.lorenz@wincor-nixdorf.com via bz #1275. ok markus@ | |||
2006-08-03 | almost entirely get rid of the culture of ".h files that include .h files" | Theo de Raadt | |
ok djm, sort of ok stevesk makes the pain stop in one easy step | |||
2006-08-01 | move #include <stdio.h> out of includes.h | Kevin Steves | |
2006-07-22 | move #include <string.h> out of includes.h | Kevin Steves | |
2006-07-17 | move #include <unistd.h> out of includes.h | Kevin Steves | |
2006-07-12 | move #include <netdb.h> out of includes.h; ok djm@ | Kevin Steves | |
2006-07-11 | move #include <errno.h> out of includes.h; ok markus@ | Kevin Steves | |
2006-07-11 | add ExitOnForwardFailure: terminate the connection if ssh(1) | Markus Friedl | |
cannot set up all requested dynamic, local, and remote port forwardings. ok djm, dtucker, stevesk, jmc | |||
2006-07-05 | move #include <netinet/in.h> out of includes.h; ok deraadt@ | Kevin Steves | |
2006-03-25 | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | Damien Miller | |
Theo nuked - our scripts to sync -portable need them in the files | |||
2006-03-19 | RCSID() can die | Theo de Raadt | |
2006-03-19 | potential NULL pointer dereferences detected by Coverity | Damien Miller | |
via elad AT netbsd.org; ok deraadt@ | |||
2006-02-22 | move #include <ctype.h> out of includes.h; ok djm@ | Kevin Steves | |
2006-02-20 | move #include <sys/stat.h> out of includes.h; ok markus@ | Kevin Steves | |
2006-02-12 | raise error when the user specifies a RekeyLimit that is smaller than 16 | Damien Miller | |
(the smallest of our cipher's blocksize) or big enough to cause integer wraparound; ok & feedback dtucker@ | |||
2005-12-08 | two changes to the new ssh tunnel support. this breaks compatibility | Reyk Floeter | |
with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@ | |||
2005-12-06 | Add support for tun(4) forwarding over OpenSSH, based on an idea and | Reyk Floeter | |
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others | |||
2005-07-30 | listen_hosts initialisation here too; spotted greg AT y2005.nest.cx | Damien Miller | |
2005-07-17 | knf says that a 2nd level indent is four (not three or five) spaces | Damien Miller | |
2005-06-08 | add ControlMaster=auto/autoask options to support opportunistic multiplexing; | Damien Miller | |
tested avsm@ and jakob@, ok markus@ | |||
2005-05-16 | check return value from strdelim() for NULL (AddressFamily); mpech | Markus Friedl | |
2005-03-10 | spacing | Theo de Raadt | |
2005-03-10 | Check listen addresses for null, prevents xfree from dying during | Darren Tucker | |
ClearAllForwardings (bz #996). From Craig Leres, ok markus@ | |||
2005-03-04 | fix SendEnv config parsing bug found by Roumen Petrov; ok dtucker@ | Damien Miller | |
2005-03-01 | add support for hashing host names and addresses added to known_hosts files, | Damien Miller | |
to improve privacy of which hosts user have been visiting; ok markus@ deraadt@ | |||
2005-03-01 | bz#413: allow optional specification of bind address for port forwardings. | Damien Miller | |
Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports. ok markus@ | |||
2004-07-11 | spaces | Theo de Raadt | |
2004-06-17 | Add option for confirmation (ControlMaster=ask) via ssh-askpass before opening | Damien Miller | |
shared connections; ok markus@ | |||
2004-06-13 | implement session multiplexing in the client (the server has supported this | Damien Miller | |
since 2.0); ok markus@ | |||
2004-05-27 | Kill dead code after fatal(); ok djm@ | Darren Tucker | |
2004-04-27 | bz #815: implement ability to pass specified environment variables from the | Damien Miller | |
client to the server; ok markus@ | |||
2004-04-18 | perform strict ownership and modes checks for ~/.ssh/config files, as these | Damien Miller | |
can be used to execute arbitrary programs; ok markus@ NB. ssh will now exit when it detects a config with poor permissions | |||
2004-03-05 | add IdentitiesOnly; ok djm@, pb@ | Markus Friedl | |
2003-12-16 | application layer keep alive (ServerAliveInterval ServerAliveCountMax) | Markus Friedl | |
for ssh(1), similar to the sshd(8) option; ok beck@; with help from jmc and dtucker@ | |||
2003-12-09 | rename keepalive to tcpkeepalive; the old name causes too much | Markus Friedl | |
confusion; ok djm, dtucker; with help from jmc@ | |||
2003-11-12 | update SSHFP validation. ok markus@ | Jakob Schlyter | |
2003-10-14 | include SSHFP lookup code (not enabled by default). ok markus@ | Jakob Schlyter | |
2003-10-11 | remote x11 clients are now untrusted by default, uses xauth(8) to generate | Markus Friedl | |
untrusted cookies; ForwardX11Trusted=yes restores old behaviour. ok deraadt; feedback and ok djm/fries | |||
2003-10-08 | default GSS API to no in client, too; ok jakob, deraadt@ | Markus Friedl | |
2003-09-01 | remove unused kerberos code; ok henning@ | Markus Friedl | |
2003-09-01 | rm gssapidelegatecreds alias; never supported before | Markus Friedl | |
2003-08-28 | remove kerberos support from ssh1, since it has been replaced with GSSAPI; | Markus Friedl | |
but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ... | |||
2003-08-22 | support GSS API user authentication; patches from Simon Wilkinson, | Markus Friedl | |
stripped down and tested by Jakob and myself. | |||
2003-08-13 | socks4->socks, since with support both 4 and 5; dtucker@zip.com.au | Markus Friedl | |
2003-08-13 | remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@, | Markus Friedl | |
fgsch@, miod@, henning@, jakob@ and others |