summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/readconf.c
AgeCommit message (Collapse)Author
2002-11-07we cannot use HostbasedAuthentication for enabling ssh-keysign(8),Markus Friedl
because HostbasedAuthentication might be enabled based on the target host and ssh-keysign(8) does not know the remote hostname and not trust ssh(1) about the hostname, so we add a new option EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
2002-06-19KNF done automatically while reading....Theo de Raadt
2002-06-10change RhostsRSAAuthentication and RhostsAuthentication default to noKevin Steves
since ssh is no longer setuid root by default; ok markus@
2002-06-08silently ignore deprecated options, since FallBackToRsh might be passedMarkus Friedl
by remote scp commands.
2002-06-08just warn about Deprecated options for nowMarkus Friedl
2002-06-08deprecate FallBackToRsh and UseRsh; patch from djm@Markus Friedl
2002-02-04add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1,Markus Friedl
fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@
2002-01-04remove #ifdef _PATH_XAUTH/#endif; ok markus@Kevin Steves
2001-12-19basic KNF done while i was looking for something elseTheo de Raadt
2001-11-17enum/int type cleanup where it made sense to do so; ok markus@Kevin Steves
2001-10-01add NoHostAuthenticationForLocalhost; note that the hostkey isMarkus Friedl
now check for localhost, too.
2001-09-19add ClearAllForwardings ssh option and set it in scp and sftp; ok markus@Kevin Steves
2001-09-03fatal() for nonexistent -Fssh_config. ok markus@Kevin Steves
2001-08-30validate ports for LocalForward/RemoteForward.Kevin Steves
add host/port alternative syntax for IPv6 (like -L/-R). ok markus@
2001-08-28don't set DynamicForward unless Host matchesMarkus Friedl
2001-08-01use strings instead of ints for smartcard reader idsMarkus Friedl
2001-07-31add 'SmartcardDevice' client option to specify which smartcard device is usedJakob Schlyter
to access a smartcard used for storing the user's private RSA key. ok markus@.
2001-07-25cleanup connect(); connection_attempts 4 -> 1; from eivind@freebsd.orgMarkus Friedl
2001-07-22enable challenge-response auth by default; ok millert@Markus Friedl
2001-06-26Kerberos v5 support for SSH1, mostly from Assar Westerlund ↵Dug Song
<assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
2001-06-23get rid of known_hosts2, use it for hostkey lookup, but do not modify.Markus Friedl
2001-06-08move the path for xauth to pathnames.hMarkus Friedl
2001-05-24don't perform escape processing when ``EscapeChar none''; ok markus@Kevin Steves
2001-05-18improved kbd-interactive support. work by per@appgate.com and meMarkus Friedl
2001-04-30implement 'ssh -b bind_address' like 'telnet -b'Markus Friedl
2001-04-17add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@Markus Friedl
2001-04-15use fatal() or error() vs. fprintf(); ok markus@Kevin Steves
2001-04-12robust port validation; ok markus@ jakob@Kevin Steves
2001-04-12typoMarkus Friedl
2001-04-12implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)Markus Friedl
similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :)
2001-04-07allow the ssh client act as a SOCKS4 proxy (dynamic local portforwarding).Markus Friedl
work by Dan Kaminsky <dankamin@cisco.com> and me. thanks to Dan for this great patch: use 'ssh -D 1080 host' and make netscape use localhost:1080 as a socks proxy.
2001-04-02correct comment; ok markus@Kevin Steves
2001-03-20default to SSH protocol version 2Markus Friedl
2001-03-19undo /etc/shell and proto 2,1 change for openssh-2.5.2Markus Friedl
2001-03-10add PreferredAuthenticationsMarkus Friedl
2001-03-10default to SSH2, now that m68k runs fastTheo de Raadt
2001-03-08turn off useprivilegedports by default. only rhost-auth needsMarkus Friedl
this. older sshd's may need this, too.
2001-03-04log functions should not be passed strings that end in newline as theyTodd C. Miller
get passed on to syslog() and when logging to stderr, do_log() appends its own newline.
2001-02-24look for id_rsa by default, before id_dsaTheo de Raadt
2001-02-111) clean up the MAC support for SSH-2Markus Friedl
2) allow you to specify the MAC with 'ssh -m' 3) or the 'MACs' keyword in ssh(d)_config 4) add hmac-{md5,sha1}-96 ok stevesk@, provos@
2001-02-08snprintfTheo de Raadt
2001-01-28``StrictHostKeyChecking ask'' documentation and small cleanup.Kevin Steves
ok markus@
2001-01-22rename skey -> challenge response.Markus Friedl
auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.
2001-01-21split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.Markus Friedl
rename util.[ch] -> misc.[ch]
2001-01-20KNF; ok markusDamien Miller
2001-01-20fix SIGSEGV from -o ""; problem noted by jehsom@togetherweb.comTheo de Raadt
2001-01-19move ssh1 definitions to ssh1.h, pathnames to pathnames.hMarkus Friedl
2001-01-18log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many systemsMarkus Friedl
2001-01-07rename SYSLOG_LEVEL_INFO->SYSLOG_LEVEL_NOTICEMarkus Friedl
syslog priority changes: fatal() LOG_ERR -> LOG_CRIT log() LOG_INFO -> LOG_NOTICE
2000-12-27new option: HostKeyAlias: allows the user to record the host keyMarkus Friedl
under a different name. This is useful for ssh tunneling over forwarded connections or if you run multiple sshd's on different ports on the same machine.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-28 13:13:18 +0000