summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/ssh-keygen.c
AgeCommit message (Expand)Author
2011-04-18certificate options are supposed to be packed in lexical order of optionDamien Miller
2011-04-12fix -WshadowDamien Miller
2011-03-24use strcasecmp() for "clear" cert permission option also; ok djmKevin Steves
2011-03-23remove -d, documentation removed >10 years ago; ok markusKevin Steves
2011-03-23Add -A option. For each of the key types (rsa1, rsa, dsa and ecdsa)Kevin Steves
2011-01-11some unsigned long long casts that make things a bit easier forDamien Miller
2010-10-28fix a possible NULL deref on loading a corrupt ECDH keyDamien Miller
2010-09-02Switch ECDSA default key size to 256 bits, which according to RFC5656Christian Weisgerber
2010-09-02permit -b 256, 384 or 521 as key size for ECDSA; ok djm@Markus Friedl
2010-08-31reintroduce commit from tedu@, which I pulled out for release engineering:Damien Miller
2010-08-31Implement Elliptic Curve Cryptography modes for key exchange (ECDH) andDamien Miller
2010-08-16backout previous temporarily; discussed with deraadt@Damien Miller
2010-08-12OpenSSL_add_all_algorithms is the name of the function we have a man pageTed Unangst
2010-08-04Support CA keys in PKCS#11 tokens; feedback and ok markus@Damien Miller
2010-08-04tighten the rules for certificate encoding by requiring that optionsDamien Miller
2010-07-16avoid bogus compiler warningDamien Miller
2010-06-30sort usage();Jason McIntyre
2010-06-29allow import (-i) and export (-e) of PEM and PKCS#8 encoded keys;Damien Miller
2010-06-23fix printing of extensions in v01 certificates that I broke in r1.190Damien Miller
2010-06-22standardise error messages when attempting to open private keyDamien Miller
2010-05-20Move the permit-* options to the non-critical "extensions" field for v01Damien Miller
2010-04-23refuse to generate keys longer than OPENSSL_[RD]SA_MAX_MODULUS_BITS,Damien Miller
2010-04-23bz#1740: display a more helpful error message when $HOME isDamien Miller
2010-04-16tweak previous; ok djmJason McIntyre
2010-04-16revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with theDamien Miller
2010-03-15also print certificate type (user or host) for ssh-keygen -LKevin Steves
2010-03-07make internal strptime string match strftime format;Damien Miller
2010-03-04"force-command" is not spelled "forced-command"; spotted byDamien Miller
2010-03-04Add a -L flag to print the contents of a certificate; ok markus@Damien Miller
2010-03-04Add a TrustedUserCAKeys option to sshd_config to specify CA keys thatDamien Miller
2010-03-02POSIX strptime is stricter than OpenBSD's so do a little dance toDamien Miller
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
2010-02-09fix -WallDamien Miller
2010-02-08replace our obsolete smartcard code with PKCS#11.Markus Friedl
2010-01-11when converting keys, truncate key comments at 72 chars as per RFC4716;Damien Miller
2009-08-27force use of correct hash function for random-art signature displayDamien Miller
2009-06-22alphabetize includes; reduces diff vs portable and style(9). ok stevesk djmDarren Tucker
2009-02-21Added missing newlines in error messages.Tobias Stoeckmann
2008-11-07spelling/typo in commentKevin Steves
2008-07-13Change "ssh-keygen -F [host] -l" to not display random art unlessStuart Henderson
2008-06-12make ssh-keygen -lf show the key type just as ssh-add -l would do itAlexander von Gernler
2008-06-11ssh-keygen would write fingerprints to STDOUT, and random art to STDERR,Alexander von Gernler
2008-06-11ssh-keygen -lv -f /etc/ssh/ssh_host_rsa_key.pubAlexander von Gernler
2008-06-11Introduce SSH Fingerprint ASCII Visualization, a technique inspired by theAlexander von Gernler
2008-05-19support -l (print fingerprint) in combination with -F (find host) toDamien Miller
2008-01-19unbreak line numbering (broken in revision 1.164), fix error messageDamien Miller
2008-01-19when hashing individual hosts (ssh-keygen -Hf hostname), make sure weDamien Miller
2007-10-02handles zero-sized strings that fgets can returnCharles Longeau
2007-09-11use strcspn to properly overwrite '\n' in fgets returned bufferGilles Chehade
2007-09-09sort synopsis and options in ssh-agent(1); usage is lowercaseIgor Sobrado