summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/ssh-keygen.c
AgeCommit message (Expand)Author
2017-07-07When generating all hostkeys (ssh-keygen -A), clobber existing keysDamien Miller
2017-07-01remove post-SSHv1 removal dead code from rsa.c and merge theDamien Miller
2017-06-28Allow ssh-keygen to use a key held in ssh-agent as a CA when signingDamien Miller
2017-05-30remove unused wrapper functions from key.[ch]; ok djm@Markus Friedl
2017-05-07Refuse RSA keys <1024 bits in length. Improve reporting for keys thatDamien Miller
2017-04-30remove KEY_RSA1Damien Miller
2017-04-30unifdef WITH_SSH1Damien Miller
2017-04-29allow ssh-keygen to include arbitrary string or flag certificateDamien Miller
2017-03-10ensure hostname is lower-case before hashing it; bz#2591 reported byDamien Miller
2017-03-06Check l->hosts before dereferencing; fixes potential null pointer deref.Darren Tucker
2017-03-06linenum is unsigned long so use %lu in log formats. ok deraadt@Darren Tucker
2017-03-03fix ssh-keygen -H accidentally corrupting known_hosts that containedDamien Miller
2017-02-17Do not show rsa1 key type in usage when compiled without SSH1 support.Darren Tucker
2017-02-10Sanitise escape sequences in key comments sent to printf but preserveDamien Miller
2017-02-08Avoid printf %s NULL. From semarie@, OK djm@Todd C. Miller
2016-09-12Spaces->tabs.Darren Tucker
2016-09-12Style whitespace fix. Also happens to remove a no-op diff with portable.Darren Tucker
2016-05-02support SHA256 and SHA512 RSA signatures in certificates;Damien Miller
2016-05-02fix signed/unsigned errors reported by clang-3.7; addDamien Miller
2016-02-15Add a function to enable security-related malloc_options. With and okDarren Tucker
2015-12-11use SSH_MAX_PUBKEY_BYTES consistently as buffer size when reading keyDamien Miller
2015-12-11Remove NULL-checks before sshkey_free().mmcc
2015-12-04implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures (user and host auth)Markus Friedl
2015-11-28do not leak temp file if there is no known_hosts fileTheo de Raadt
2015-11-20allow comment change for all supported formatsAlexander Hall
2015-11-19trailing whitespaceDamien Miller
2015-11-19move the certificate validity formatting code to sshkey.[ch]Damien Miller
2015-11-18fix "ssh-keygen -l" of private key, broken in support forDamien Miller
2015-11-16Allow fingerprinting from standard input "ssh-keygen -lf -"Damien Miller
2015-11-13support multiple certificates (one per line) and reading fromDamien Miller
2015-08-19fixed unlink([uninitialised memory]) reported by Mateusz Kocielski;Damien Miller
2015-07-03refuse to generate or accept RSA keys smaller than 1024 bits;Damien Miller
2015-07-03delete support for legacy v00 certificates; "sure" markus@ dtucker@Damien Miller
2015-05-28wrap all moduli-related code in #ifdef WITH_OPENSSL.Damien Miller
2015-05-28make ssh-keygen default to ed25519 keys when compiled withoutDamien Miller
2015-05-21Support "ssh-keygen -lF hostname" to find search known_hosts andDamien Miller
2015-04-27fix compilation with OPENSSL=no; ok dtucker@Damien Miller
2015-04-24rename xrealloc() to xreallocarray() since it follows that form.Theo de Raadt
2015-04-17use error/logit/fatal instead of fprintf(stderr, ...) and exit(0),Damien Miller
2015-03-31Comments are only supported for RSA1 keys. If a user tried to add one andTobias Stoeckmann
2015-03-23for ssh-keygen -A, don't try (and fail) to generateDamien Miller
2015-02-26don't printf NULL key comments; reported by Tom ChristensenDamien Miller
2015-02-24add -v (show ASCII art) to -l's synopsis; ok djm@Christian Weisgerber
2015-02-23further silence spurious error message even when -v is specifiedDamien Miller
2015-02-23silence a spurious error message when listing fingerprints forDamien Miller
2015-02-16Refactor hostkeys_foreach() and dependent codeDamien Miller
2015-01-30permit KRLs that revoke certificates by serial number or key IDDamien Miller
2015-01-30missing parentheses after if in do_convert_from() brokeDamien Miller
2015-01-28update to new API (key_fingerprint => sshkey_fingerprint)Damien Miller
2015-01-19djm, your /usr/include tree is oldTheo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-21 19:57:51 +0000