summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/servconf.c
AgeCommit message (Expand)Author
2016-08-25add a sIgnore opcode that silently ignores options and use it toDamien Miller
2016-08-19remove UseLogin option and support for having /bin/login manageDamien Miller
2016-08-15Remove more SSH1 server code:Christian Weisgerber
2016-06-23fix AuthenticationMethods during configuration re-parse;Damien Miller
2016-06-17ban AuthenticationMethods="" and accept AuthenticationMethods=anyDamien Miller
2016-05-04Fix inverted logic for updating StreamLocalBindMask which would cause theDarren Tucker
2016-05-03fix overriding of StreamLocalBindMask and StreamLocalBindUnlink inDamien Miller
2016-05-03don't forget to include StreamLocalBindUnlink in the configDamien Miller
2016-05-02fix signed/unsigned errors reported by clang-3.7; addDamien Miller
2016-03-07refactor canohost.c: move functions that cache results closer to theDamien Miller
2016-02-17make sandboxed privilege separation the default, not just for newDamien Miller
2016-01-29Allow RekeyLimits in excess of 4G up to 2**63 bits (limited by the returnDarren Tucker
2015-11-13Support "none" as an argument for sshd_config ForceCommand andDamien Miller
2015-10-29Fix "PubkeyAcceptedKeyTypes +..." inside a Match block; ok dtucker@Damien Miller
2015-08-21Fix expansion of HostkeyAlgorithms=+...Damien Miller
2015-08-06add prohibit-password as a synonymn for without-password, since theTheo de Raadt
2015-07-31Allow PermitRootLogin to be overridden by configChris Cappuccio
2015-07-30change default: PermitRootLogin without-passwordTheo de Raadt
2015-07-30Allow ssh_config and sshd_config kex parameters options be prefixedDamien Miller
2015-07-10Turn off DSA by default; add HostKeyAlgorithms to the server andMarkus Friedl
2015-07-01twiddle PermitRootLogin backDamien Miller
2015-07-01twiddle; (this commit marks the openssh-6.9 release)Damien Miller
2015-07-01put back default PermitRootLogin=noDamien Miller
2015-07-01reset default PermitRootLogin to 'yes' (momentarily, for release)Damien Miller
2015-05-22add knob to relax GSSAPI host credential check for multihomed hostsDamien Miller
2015-05-21add AuthorizedPrincipalsCommand that allows getting authorized_principalsDamien Miller
2015-05-04Remove pattern length argument from match_pattern_list(),Damien Miller
2015-05-01a couple of parse targets were missing activep checks, causing themDamien Miller
2015-05-01make handling of AuthorizedPrincipalsFile=none more consistentDamien Miller
2015-04-29Allow ListenAddress, Port and AddressFamily in any order. bz#68,Darren Tucker
2015-04-27Make sshd default to PermitRootLogin=no;Damien Miller
2015-04-24rename xrealloc() to xreallocarray() since it follows that form.Theo de Raadt
2015-04-23Two small fixes for sshd -T: ListenAddress'es are added to a list head soDarren Tucker
2015-04-23Check for and reject missing arguments for VersionAddendum and ForceCommand.Darren Tucker
2015-04-17Add some missing options to sshd -T and fix the output of VersionAddendumDarren Tucker
2015-02-02increasing encounters with difficult DNS setups in darknets hasTheo de Raadt
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2015-01-13add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypesDamien Miller
2014-12-22make internal handling of filename arguments of "none" more consistentDamien Miller
2014-12-21Add FingerprintHash option to control algorithm used for keyDamien Miller
2014-11-24Fix crashes in the handling of the sshd config file found with the aflJonathan Gray
2014-10-24Remove unnecessary include: netinet/in_systm.h is not needed by theseLawrence Teo
2014-10-13whitespaceDamien Miller
2014-08-19When dumping the server configuration (sshd -T), print correct KEX,Damien Miller
2014-07-15Add support for Unix domain socket forwarding. A remote TCP portTodd C. Miller
2014-07-03Add a sshd_config PermitUserRC option to control whether ~/.ssh/rc isDamien Miller
2014-01-29remove experimental, never-enabled JPAKE code; ok markus@Damien Miller
2013-12-06support ed25519 keys (hostkeys and user identities) using the public domainMarkus Friedl
2013-12-05bz#2161 - fix AuthorizedKeysCommand inside a Match block andDamien Miller
2013-11-21Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com"Damien Miller