summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/readconf.c
AgeCommit message (Expand)Author
2015-07-10Turn off DSA by default; add HostKeyAlgorithms to the server andMarkus Friedl
2015-06-26Fix \-escaping bug that caused forward path parsing to skip twoDamien Miller
2015-05-22Reorder EscapeChar option parsing to avoid a single-byte out-Damien Miller
2015-05-04Remove pattern length argument from match_pattern_list(),Damien Miller
2015-04-24rename xrealloc() to xreallocarray() since it follows that form.Theo de Raadt
2015-03-30fix uninitialised memory read when parsing a config file consistingDamien Miller
2015-02-16Revise hostkeys@openssh.com hostkey learning extension.Damien Miller
2015-02-02turn UpdateHostkeys off by default until I figure out mlarkin@'sDamien Miller
2015-01-30Add a ssh_config HostbasedKeyType option to control whichDamien Miller
2015-01-26Host key rotation support.Damien Miller
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2015-01-15sync ssh-keysign, ssh-keygen and some dependencies to the newDamien Miller
2015-01-13add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypesDamien Miller
2015-01-08fix ssh_config FingerprintHash evaluation order; from Petr LautrbachDamien Miller
2014-12-21Add FingerprintHash option to control algorithm used for keyDamien Miller
2014-12-04add RevokedHostKeys option for the clientDamien Miller
2014-10-24Remove unnecessary include: netinet/in_systm.h is not needed by theseLawrence Teo
2014-10-08Tweak config reparsing with host canonicalisationDamien Miller
2014-07-15Add support for Unix domain socket forwarding. A remote TCP portTodd C. Miller
2014-04-23don't record duplicate IdentityFilesDamien Miller
2014-02-23reparse ssh_config and ~/.ssh/config if hostname canonicalisation changesDamien Miller
2014-02-22when processing Match blocks, skip 'exec' clauses if previous predicatesDamien Miller
2014-01-29remove experimental, never-enabled JPAKE code; ok markus@Damien Miller
2013-12-06support ed25519 keys (hostkeys and user identities) using the public domainMarkus Friedl
2013-11-20unsigned casts for ctype macros where neccessaryTheo de Raadt
2013-10-24Disallow empty Match statements and add "Match all" which matches everything.Darren Tucker
2013-10-23commentDamien Miller
2013-10-23Hostname may have %h sequences that should be expanded prior to MatchDamien Miller
2013-10-20rename "command" subclause of the recently-added "Match" keyword toDamien Miller
2013-10-16s/canonicalise/canonicalize/ for consistency with existing spelling,Damien Miller
2013-10-16Implement client-side hostname canonicalisation to allow an explicitDamien Miller
2013-10-14refactor client config code a little:Damien Miller
2013-10-14add a "Match" keyword to ssh_config that allows matching on hostname,Damien Miller
2013-08-20Add a ssh_config ProxyUseFDPass option that supports the use ofDamien Miller
2013-06-10revert 1.203 while we investigate crashes reported by okan@Darren Tucker
2013-06-05plug another memleak. bz#1967, from Zhenbo Xu, detected by Melton, ok djmDarren Tucker
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-05-16remove now-unused variablesDarren Tucker
2013-05-16switch RekeyLimit traffic volume parsing to scan_scaled. ok djm@Darren Tucker
2013-05-16add the ability to ignore specific unrecognised ssh_config options;Damien Miller
2013-05-16Add an optional second argument to RekeyLimit in the client to allowDarren Tucker
2013-03-06g/c unused variable (-Wunused)Damien Miller
2013-02-22Don't complain if IdentityFiles specified in system-wide configs are missing.Darren Tucker
2013-02-17Keep track of which IndentityFile options were manually supplied and whichDarren Tucker
2011-09-23unbreak remote portforwarding with dynamic allocated listen ports:Markus Friedl
2011-05-24Remove undocumented legacy options UserKnownHostsFile2 andDamien Miller
2011-05-06Add a RequestTTY ssh_config option to allow configuration-basedDamien Miller
2011-05-06support negated Host matching, e.g.Damien Miller
2010-11-13allow ssh and sshd to set arbitrary TOS/DSCP/QoS values instead ofDamien Miller
2010-09-22add a KexAlgorithms knob to the client and server configuration to allowDamien Miller