| Age | Commit message (Expand) | Author |
|---|
| 2012-07-13 | handle long comments in config files better. bz#2025, ok markus | Darren Tucker |
| 2012-07-10 | Turn on systrace sandboxing of pre-auth sshd by default for new installs | Damien Miller |
| 2012-06-19 | sshd_config: extend Match to allow AcceptEnv and {Allow,Deny}{Users,Groups} | Markus Friedl |
| 2012-05-13 | Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust tests | Darren Tucker |
| 2012-04-12 | VersionAddendum option to allow server operators to append some arbitrary | Damien Miller |
| 2012-03-29 | Add PermitOpen none option based on patch from Loganaden Velvindron | Darren Tucker |
| 2011-09-23 | Add wildcard support to PermitOpen, allowing things like "PermitOpen | Darren Tucker |
| 2011-06-22 | introduce sandboxing of the pre-auth privsep child using systrace(4). | Damien Miller |
| 2011-06-22 | reuse the multistate option arrays to pretty-print options for "sshd -T" | Damien Miller |
| 2011-06-17 | factor out multi-choice option parsing into a parse_multistate label | Damien Miller |
| 2011-05-23 | allow AuthorizedKeysFile to specify multiple files, separated by spaces. | Damien Miller |
| 2011-05-20 | use a macro to define which string options to copy between configs | Damien Miller |
| 2011-05-20 | Add comment documenting what should be after the preauth check. ok djm | Darren Tucker |
| 2011-05-20 | the options TrustedUserCAKeys, RevokedKeysFile, AuthorizedKeysFile | Damien Miller |
| 2011-05-11 | remove support for authorized_keys2; it is a relic from the early days | Damien Miller |
| 2011-03-29 | print ipqos friendly string for sshd -T; ok markus | Kevin Steves |
| 2010-11-13 | allow ssh and sshd to set arbitrary TOS/DSCP/QoS values instead of | Damien Miller |
| 2010-09-30 | prevent free() of string in .rodata when overriding AuthorizedKeys in | Damien Miller |
| 2010-09-22 | add a KexAlgorithms knob to the client and server configuration to allow | Damien Miller |
| 2010-09-01 | pick up ECDSA host key by default; ok djm@ | Christian Weisgerber |
| 2010-06-22 | expose some more sshd_config options inside Match blocks: | Damien Miller |
| 2010-05-07 | add some optional indirection to matching of principal names listed | Damien Miller |
| 2010-03-25 | from portable: getcwd(NULL, 0) doesn't work on all platforms, so | Damien Miller |
| 2010-03-12 | do not prepend AuthorizedKeysFile with getcwd(), unbreaks relative paths | Markus Friedl |
| 2010-03-12 | unbreak AuthorizedKeys option with a $HOME-relative path; reported by | Damien Miller |
| 2010-03-04 | Add a TrustedUserCAKeys option to sshd_config to specify CA keys that | Damien Miller |
| 2010-02-26 | Add support for certificate key types for users and hosts. | Damien Miller |
| 2010-01-13 | avoid run-time failures when specifying hostkeys via a relative | Damien Miller |
| 2010-01-10 | Add ChrootDirectory to sshd.c test-mode output | Darren Tucker |
| 2010-01-09 | Remove RoutingDomain from ssh since it's now not needed. It can be replaced | Darren Tucker |
| 2009-12-29 | Rename RDomain config option to RoutingDomain to be more clear and | Kevin Steves |
| 2009-12-25 | validate routing domain is in range 0-RT_TABLEID_MAX. | Kevin Steves |
| 2009-10-28 | Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan. | Reyk Floeter |
| 2009-10-08 | disable protocol 1 by default (after a transition period of about 10 years) | Markus Friedl |
| 2009-04-14 | Fixed a few the-the misspellings in comments. Skipped a bunch in binutils,gcc... | Janne Johansson |
| 2009-01-22 | make a2port() return -1 when it encounters an invalid port number | Damien Miller |
| 2008-12-09 | channel_print_adm_permitted_opens() should deal with all the printing | Kevin Steves |
| 2008-11-11 | USE_AFS not referenced so remove #ifdef. fixes sshd -T not printing | Kevin Steves |
| 2008-11-05 | passord -> password; | Jason McIntyre |
| 2008-11-04 | Add support for an experimental zero-knowledge password authentication | Damien Miller |
| 2008-11-03 | include MaxSessions in sshd -T output; patch from imorgan AT nas.nasa.gov | Damien Miller |
| 2008-10-09 | support setting PermitEmptyPasswords in a Match block | Damien Miller |
| 2008-07-23 | do not try to print options that have been compile-time disabled | Damien Miller |
| 2008-07-04 | support negation of groups in "Match group" block (bz#1315); ok dtucker@ | Damien Miller |
| 2008-07-02 | increase default size of ssh protocol 1 ephemeral key from 768 to 1024 | Damien Miller |
| 2008-06-15 | Allow MaxAuthTries within a Match block. ok djm@ | Darren Tucker |
| 2008-06-10 | support CIDR address matching in .ssh/authorized_keys from="..." stanzas | Damien Miller |
| 2008-06-10 | Add extended test mode (-T) and connection parameters for test mode (-C). | Darren Tucker |
| 2008-06-10 | support CIDR address matching in sshd_config "Match address" blocks, with | Damien Miller |
| 2008-05-08 | Make the maximum number of sessions run-time controllable via | Damien Miller |
