summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/readconf.h
AgeCommit message (Collapse)Author
2005-06-08add ControlMaster=auto/autoask options to support opportunistic multiplexing;Damien Miller
tested avsm@ and jakob@, ok markus@
2005-03-01add support for hashing host names and addresses added to known_hosts files,Damien Miller
to improve privacy of which hosts user have been visiting; ok markus@ deraadt@
2005-03-01bz#413: allow optional specification of bind address for port forwardings.Damien Miller
Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports. ok markus@
2004-07-11spacesTheo de Raadt
2004-06-13implement session multiplexing in the client (the server has supported thisDamien Miller
since 2.0); ok markus@
2004-04-27bz #815: implement ability to pass specified environment variables from theDamien Miller
client to the server; ok markus@
2004-04-18perform strict ownership and modes checks for ~/.ssh/config files, as theseDamien Miller
can be used to execute arbitrary programs; ok markus@ NB. ssh will now exit when it detects a config with poor permissions
2004-03-05add IdentitiesOnly; ok djm@, pb@Markus Friedl
2003-12-16application layer keep alive (ServerAliveInterval ServerAliveCountMax)Markus Friedl
for ssh(1), similar to the sshd(8) option; ok beck@; with help from jmc and dtucker@
2003-12-09rename keepalive to tcpkeepalive; the old name causes too muchMarkus Friedl
confusion; ok djm, dtucker; with help from jmc@
2003-11-21unexpand and delete whitespace at EOL; ok markus@Damien Miller
2003-10-11remote x11 clients are now untrusted by default, uses xauth(8) to generateMarkus Friedl
untrusted cookies; ForwardX11Trusted=yes restores old behaviour. ok deraadt; feedback and ok djm/fries
2003-09-01remove unused kerberos code; ok henning@Markus Friedl
2003-08-22support GSS API user authentication; patches from Simon Wilkinson,Markus Friedl
stripped down and tested by Jakob and myself.
2003-08-13remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,Markus Friedl
fgsch@, miod@, henning@, jakob@ and others
2003-07-22remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);Markus Friedl
test+ok henning@
2003-07-03fix AddressFamily option in config file, from brent@graveland.net; ok markus@Damien Miller
2003-05-15add a ConnectTimeout option to ssh, based on patch fromDamien Miller
Jean-Charles Longuet (jclonguet at free.fr); portable #207 ok markus@
2003-05-15always parse kerberos options. ok djm@ markus@Jakob Schlyter
2003-05-14add experimental support for verifying hos keys using DNS as describedJakob Schlyter
in draft-ietf-secsh-dns-xx.txt. more information in README.dns. ok markus@ and henning@
2003-04-02reapply rekeying chage, tested by henning@, ok djm@Markus Friedl
2003-04-01backout rekeying changes (for 3.6.1)Markus Friedl
2003-04-01rekeying bugfixes and automatic rekeying:Markus Friedl
* both client and server rekey _automatically_ (a) after 2^31 packets, because after 2^32 packets the sequence number for packets wraps (b) after 2^(blocksize_in_bits/4) blocks (see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt) (a) and (b) are _enabled_ by default, and only disabled for known openssh versions, that don't support rekeying properly. * client option 'RekeyLimit' * do not reply to requests during rekeying
2002-11-07we cannot use HostbasedAuthentication for enabling ssh-keysign(8),Markus Friedl
because HostbasedAuthentication might be enabled based on the target host and ssh-keysign(8) does not know the remote hostname and not trust ssh(1) about the hostname, so we add a new option EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
2002-06-08deprecate FallBackToRsh and UseRsh; patch from djm@Markus Friedl
2002-03-04$OpenBSD$ and RCSID() cleanup: don't use RCSID() in .h files; addKevin Steves
missing RCSID() to .c files and remove dup /*$OpenBSD$*/ from .c files. ok markus@
2002-02-10more /etc/ssh; openbsd@davidkrause.comTheo de Raadt
2001-10-01add NoHostAuthenticationForLocalhost; note that the hostkey isMarkus Friedl
now check for localhost, too.
2001-09-19add ClearAllForwardings ssh option and set it in scp and sftp; ok markus@Kevin Steves
2001-09-03fatal() for nonexistent -Fssh_config. ok markus@Kevin Steves
2001-08-01use strings instead of ints for smartcard reader idsMarkus Friedl
2001-07-31add 'SmartcardDevice' client option to specify which smartcard device is usedJakob Schlyter
to access a smartcard used for storing the user's private RSA key. ok markus@.
2001-06-26remove comments from .h, since they are cut&paste from the .c filesMarkus Friedl
and out of sync
2001-06-26Kerberos v5 support for SSH1, mostly from Assar Westerlund ↵Dug Song
<assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
2001-06-26prototype pedant. not very creative...Jun-ichiro itojun Hagino
- () -> (void) - no variable names
2001-05-18improved kbd-interactive support. work by per@appgate.com and meMarkus Friedl
2001-04-30implement 'ssh -b bind_address' like 'telnet -b'Markus Friedl
2001-04-17add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@Markus Friedl
2001-04-12implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)Markus Friedl
similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :)
2001-03-10add PreferredAuthenticationsMarkus Friedl
2001-03-08implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->Markus Friedl
no need to do enter passphrase or do expensive sign operations if the server does not accept key).
2001-02-111) clean up the MAC support for SSH-2Markus Friedl
2) allow you to specify the MAC with 'ssh -m' 3) or the 'MACs' keyword in ssh(d)_config 4) add hmac-{md5,sha1}-96 ok stevesk@, provos@
2001-01-22rename skey -> challenge response.Markus Friedl
auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.
2000-12-27new option: HostKeyAlias: allows the user to record the host keyMarkus Friedl
under a different name. This is useful for ssh tunneling over forwarded connections or if you run multiple sshd's on different ports on the same machine.
2000-11-12add support for RSA to SSH2. please test.Markus Friedl
there are now 3 types of keys: RSA1 is used by ssh-1 only, RSA and DSA are used by SSH2. you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA keys for SSH2 and use the RSA keys for hostkeys or for user keys. SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before. IdentityFile2, HostDsaKey and DSAAuthentication are obsolete. you can use multiple IdentityFile and HostKey for all types of keys. the option DSAAuthentication is replaced by PubkeyAuthetication.
2000-10-11add support for s/key (kbd-interactive) to ssh2, based on work by ↵Markus Friedl
mkiernan@avantgo.com and me
2000-09-07cleanup copyright notices on all files. I have attempted to be accurate withTheo de Raadt
the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
2000-06-20OpenBSD tagMarkus Friedl
2000-05-31xauth_location support; pr 1234Markus Friedl
2000-05-08complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)Markus Friedl
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-29 11:04:09 +0000