Age | Commit message (Expand) | Author |
2017-04-30 | flense SSHv1 support from ssh-agent, considerably simplifying it | Damien Miller |
2017-04-30 | remove KEY_RSA1 | Damien Miller |
2017-04-30 | unifdef WITH_SSH1 | Damien Miller |
2017-03-15 | accidents happen to the best of us; ok djm | Theo de Raadt |
2017-03-15 | fix regression in 7.4: deletion of PKCS#11-hosted keys would fail | Damien Miller |
2017-01-04 | relax PKCS#11 whitelist a bit to allow libexec as well as lib | Damien Miller |
2016-11-30 | add a whitelist of paths from which ssh-agent will load (via | Damien Miller |
2016-09-12 | Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitions | Theo de Raadt |
2016-05-02 | fix signed/unsigned errors reported by clang-3.7; add | Damien Miller |
2016-02-15 | Add a function to enable security-related malloc_options. With and ok | Darren Tucker |
2015-12-11 | Add "id" to ssh-agent pledge for subprocess support. | Doug Hogan |
2015-12-11 | fflush stdout so that output is seen even when running in debug mode when | Darren Tucker |
2015-12-11 | correct error messages; from Tomas Kuthan bz#2507 | Damien Miller |
2015-12-04 | implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures (user and host auth) | Markus Friedl |
2015-12-02 | Add "cpath" to the ssh-agent pledge so the cleanup handler can unlink(). | Doug Hogan |
2015-12-02 | ssh-agent pledge needs proc for askpass; spotted by todd@ | Damien Miller |
2015-12-01 | basic pledge() for ssh-agent, more refinement needed | Damien Miller |
2015-07-08 | no need to include the old buffer/key API | Markus Friedl |
2015-05-15 | Use a salted hash of the lock passphrase instead of plain text and do | Darren Tucker |
2015-04-24 | combine -Dd onto one line and update usage(); | Jason McIntyre |
2015-04-24 | add ssh-agent -D to leave ssh-agent in foreground without enabling | Damien Miller |
2015-04-24 | rename xrealloc() to xreallocarray() since it follows that form. | Theo de Raadt |
2015-03-04 | make ssh-add -D work with !SSH1 agent | Damien Miller |
2015-03-03 | add SSH1 Makefile knob to make it easier to build without SSH1 support; | Damien Miller |
2015-01-28 | update to new API (key_fingerprint => sshkey_fingerprint) | Damien Miller |
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
2015-01-14 | fix small regression: ssh-agent would return a success message | Damien Miller |
2015-01-14 | switch to sshbuf/sshkey; with & ok djm@ | Markus Friedl |
2014-12-21 | tweak previous; | Jason McIntyre |
2014-12-21 | Add FingerprintHash option to control algorithm used for key | Damien Miller |
2014-11-18 | Nuke more obvious #include duplications. | Kenneth R Westerback |
2014-07-25 | Clear buffer used for handling messages. This prevents keys being | Darren Tucker |
2014-07-18 | restore umask around listener socket creation (dropped in streamlocal patch | Damien Miller |
2014-07-15 | Add support for Unix domain socket forwarding. A remote TCP port | Todd C. Miller |
2014-07-03 | Only cleanup agent socket in the main agent process and not in any | Damien Miller |
2014-06-24 | New key API: refactor key-related functions to be more library-like, | Damien Miller |
2014-04-29 | make compiling against OpenSSL optional (make OPENSSL=no); | Markus Friedl |
2014-03-15 | Improve usage() and documentation towards the standard form. In particular, | Theo de Raadt |
2014-02-02 | convert memset of potentially-private data to explicit_bzero() | Damien Miller |
2014-01-27 | replace openssl MD5 with our ssh_digest_*; ok djm@ | Markus Friedl |
2013-12-19 | bz#2186: don't crash (NULL deref) when deleting PKCS#11 keys from an agent | Damien Miller |
2013-12-06 | support ed25519 keys (hostkeys and user identities) using the public domain | Markus Friedl |
2013-12-06 | new private key format, bcrypt as KDF by default; details in PROTOCOL.key; | Markus Friedl |
2013-12-06 | move private key (de)serialization to key.c; ok djm | Markus Friedl |
2013-07-20 | call cleanup_handler on SIGINT when in debug mode to ensure sockets | Damien Miller |
2013-06-02 | Make parent_alive_interval time_t to avoid signed/unsigned comparison | Darren Tucker |
2013-06-01 | Use clock_gettime(CLOCK_MONOTONIC ...) for ssh timers so that things like | Darren Tucker |
2013-05-31 | Use time_t where appropriate. ok djm | Darren Tucker |
2013-05-17 | bye, bye xfree(); ok markus@ | Damien Miller |
2011-06-03 | Check current parent process ID against saved one to determine if the parent | Darren Tucker |