summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/servconf.c
AgeCommit message (Expand)Author
2014-01-29remove experimental, never-enabled JPAKE code; ok markus@Damien Miller
2013-12-06support ed25519 keys (hostkeys and user identities) using the public domainMarkus Friedl
2013-12-05bz#2161 - fix AuthorizedKeysCommand inside a Match block andDamien Miller
2013-11-21Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com"Damien Miller
2013-11-07Output the effective values of Ciphers, MACs and KexAlgorithms whenDarren Tucker
2013-10-29shd_config PermitTTY to disallow TTY allocation, mirroring theDamien Miller
2013-10-24Disallow empty Match statements and add "Match all" which matches everything.Darren Tucker
2013-10-23fix commentDarren Tucker
2013-08-06add cast to avoid format warning; from portableDamien Miller
2013-07-19add ssh-agent(1) support to sshd(8); allows encrypted hostkeys,Markus Friedl
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-05-16remove another now-unused variableDarren Tucker
2013-05-16remove now-unused variablesDarren Tucker
2013-05-16switch RekeyLimit traffic volume parsing to scan_scaled. ok djm@Darren Tucker
2013-05-16Add RekeyLimit to sshd with the same syntax as the client allowing rekeyingDarren Tucker
2013-02-06Change default of MaxStartups to 10:30:100 to start doing random earlyDarren Tucker
2012-12-02make AllowTcpForwarding accept "local" and "remote" in addition to itsDamien Miller
2012-11-04Support multiple required authentication via an AuthenticationMethodsDamien Miller
2012-10-30new sshd_config option AuthorizedKeysCommand to support fetchingDamien Miller
2012-09-13Fix comment line lengthDarren Tucker
2012-07-13handle long comments in config files better. bz#2025, ok markusDarren Tucker
2012-07-10Turn on systrace sandboxing of pre-auth sshd by default for new installsDamien Miller
2012-06-19sshd_config: extend Match to allow AcceptEnv and {Allow,Deny}{Users,Groups}Markus Friedl
2012-05-13Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust testsDarren Tucker
2012-04-12VersionAddendum option to allow server operators to append some arbitraryDamien Miller
2012-03-29Add PermitOpen none option based on patch from Loganaden VelvindronDarren Tucker
2011-09-23Add wildcard support to PermitOpen, allowing things like "PermitOpenDarren Tucker
2011-06-22introduce sandboxing of the pre-auth privsep child using systrace(4).Damien Miller
2011-06-22reuse the multistate option arrays to pretty-print options for "sshd -T"Damien Miller
2011-06-17factor out multi-choice option parsing into a parse_multistate labelDamien Miller
2011-05-23allow AuthorizedKeysFile to specify multiple files, separated by spaces.Damien Miller
2011-05-20use a macro to define which string options to copy between configsDamien Miller
2011-05-20Add comment documenting what should be after the preauth check. ok djmDarren Tucker
2011-05-20the options TrustedUserCAKeys, RevokedKeysFile, AuthorizedKeysFileDamien Miller
2011-05-11remove support for authorized_keys2; it is a relic from the early daysDamien Miller
2011-03-29print ipqos friendly string for sshd -T; ok markusKevin Steves
2010-11-13allow ssh and sshd to set arbitrary TOS/DSCP/QoS values instead ofDamien Miller
2010-09-30prevent free() of string in .rodata when overriding AuthorizedKeys inDamien Miller
2010-09-22add a KexAlgorithms knob to the client and server configuration to allowDamien Miller
2010-09-01pick up ECDSA host key by default; ok djm@Christian Weisgerber
2010-06-22expose some more sshd_config options inside Match blocks:Damien Miller
2010-05-07add some optional indirection to matching of principal names listedDamien Miller
2010-03-25from portable: getcwd(NULL, 0) doesn't work on all platforms, soDamien Miller
2010-03-12do not prepend AuthorizedKeysFile with getcwd(), unbreaks relative pathsMarkus Friedl
2010-03-12unbreak AuthorizedKeys option with a $HOME-relative path; reported byDamien Miller
2010-03-04Add a TrustedUserCAKeys option to sshd_config to specify CA keys thatDamien Miller
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
2010-01-13avoid run-time failures when specifying hostkeys via a relativeDamien Miller
2010-01-10Add ChrootDirectory to sshd.c test-mode outputDarren Tucker
2010-01-09Remove RoutingDomain from ssh since it's now not needed. It can be replacedDarren Tucker