summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/servconf.c
AgeCommit message (Expand)Author
2015-08-21Fix expansion of HostkeyAlgorithms=+...Damien Miller
2015-08-06add prohibit-password as a synonymn for without-password, since theTheo de Raadt
2015-07-31Allow PermitRootLogin to be overridden by configChris Cappuccio
2015-07-30change default: PermitRootLogin without-passwordTheo de Raadt
2015-07-30Allow ssh_config and sshd_config kex parameters options be prefixedDamien Miller
2015-07-10Turn off DSA by default; add HostKeyAlgorithms to the server andMarkus Friedl
2015-07-01twiddle PermitRootLogin backDamien Miller
2015-07-01twiddle; (this commit marks the openssh-6.9 release)Damien Miller
2015-07-01put back default PermitRootLogin=noDamien Miller
2015-07-01reset default PermitRootLogin to 'yes' (momentarily, for release)Damien Miller
2015-05-22add knob to relax GSSAPI host credential check for multihomed hostsDamien Miller
2015-05-21add AuthorizedPrincipalsCommand that allows getting authorized_principalsDamien Miller
2015-05-04Remove pattern length argument from match_pattern_list(),Damien Miller
2015-05-01a couple of parse targets were missing activep checks, causing themDamien Miller
2015-05-01make handling of AuthorizedPrincipalsFile=none more consistentDamien Miller
2015-04-29Allow ListenAddress, Port and AddressFamily in any order. bz#68,Darren Tucker
2015-04-27Make sshd default to PermitRootLogin=no;Damien Miller
2015-04-24rename xrealloc() to xreallocarray() since it follows that form.Theo de Raadt
2015-04-23Two small fixes for sshd -T: ListenAddress'es are added to a list head soDarren Tucker
2015-04-23Check for and reject missing arguments for VersionAddendum and ForceCommand.Darren Tucker
2015-04-17Add some missing options to sshd -T and fix the output of VersionAddendumDarren Tucker
2015-02-02increasing encounters with difficult DNS setups in darknets hasTheo de Raadt
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2015-01-13add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypesDamien Miller
2014-12-22make internal handling of filename arguments of "none" more consistentDamien Miller
2014-12-21Add FingerprintHash option to control algorithm used for keyDamien Miller
2014-11-24Fix crashes in the handling of the sshd config file found with the aflJonathan Gray
2014-10-24Remove unnecessary include: netinet/in_systm.h is not needed by theseLawrence Teo
2014-10-13whitespaceDamien Miller
2014-08-19When dumping the server configuration (sshd -T), print correct KEX,Damien Miller
2014-07-15Add support for Unix domain socket forwarding. A remote TCP portTodd C. Miller
2014-07-03Add a sshd_config PermitUserRC option to control whether ~/.ssh/rc isDamien Miller
2014-01-29remove experimental, never-enabled JPAKE code; ok markus@Damien Miller
2013-12-06support ed25519 keys (hostkeys and user identities) using the public domainMarkus Friedl
2013-12-05bz#2161 - fix AuthorizedKeysCommand inside a Match block andDamien Miller
2013-11-21Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com"Damien Miller
2013-11-07Output the effective values of Ciphers, MACs and KexAlgorithms whenDarren Tucker
2013-10-29shd_config PermitTTY to disallow TTY allocation, mirroring theDamien Miller
2013-10-24Disallow empty Match statements and add "Match all" which matches everything.Darren Tucker
2013-10-23fix commentDarren Tucker
2013-08-06add cast to avoid format warning; from portableDamien Miller
2013-07-19add ssh-agent(1) support to sshd(8); allows encrypted hostkeys,Markus Friedl
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-05-16remove another now-unused variableDarren Tucker
2013-05-16remove now-unused variablesDarren Tucker
2013-05-16switch RekeyLimit traffic volume parsing to scan_scaled. ok djm@Darren Tucker
2013-05-16Add RekeyLimit to sshd with the same syntax as the client allowing rekeyingDarren Tucker
2013-02-06Change default of MaxStartups to 10:30:100 to start doing random earlyDarren Tucker
2012-12-02make AllowTcpForwarding accept "local" and "remote" in addition to itsDamien Miller
2012-11-04Support multiple required authentication via an AuthenticationMethodsDamien Miller