Age | Commit message (Expand) | Author |
2024-08-15 | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains | Damien Miller |
2024-01-11 | make DSA key support compile-time optional, defaulting to on | Damien Miller |
2023-09-04 | Generate Ed25519 keys when invoked without arguments | Job Snijders |
2023-07-17 | remove vestigal support for KRL signatures | Damien Miller |
2023-07-14 | add defence-in-depth checks for some unreachable integer overflows | Damien Miller |
2023-06-20 | reset comment=NULL for each key in do_fingerprint(); fixes "no comment" | Damien Miller |
2023-04-12 | fix double words | Jonathan Gray |
2023-03-08 | use RSA/SHA256 when testing usability of private key; | Damien Miller |
2023-03-05 | Fix mem and FILE leaks in moduli screening. | Darren Tucker |
2023-03-05 | Plug mem leak in moduli checkpoint option parsing. | Darren Tucker |
2023-02-28 | Explicitly ignore return from fchmod similar to other calls to | Darren Tucker |
2023-02-10 | let ssh-keygen and ssh-keyscan accept -Ohashalg=sha1|sha256 when | Damien Miller |
2022-12-04 | userspace: remove vestigial '?' cases from top-level getopt(3) loops | Scott Soule Cheloha |
2022-11-07 | fix parsing of hex cert expiry time; was checking whether the | Damien Miller |
2022-08-11 | allow certificate validity intervals, sshsig verification times and | Damien Miller |
2022-08-05 | don't prompt for FIDO passphrase before attempting to enroll the | Damien Miller |
2022-07-20 | ssh-keygen: fix touch prompt, pin retries; | Damien Miller |
2022-07-20 | when enrolling a resident key on a security token, check if a | Damien Miller |
2022-07-20 | pull passphrase reading and confirmation into a separate function | Damien Miller |
2022-06-03 | ssh-keygen -A: do not generate DSA keys by default. Based on github PR#303 | Darren Tucker |
2022-05-31 | ssh-keygen: implement "verify-required" certificate option | Christian Weisgerber |
2022-05-09 | Allow existing -U (use agent) flag to work with "-Y sign" operations, | Damien Miller |
2022-05-08 | improve error message when 'ssh-keygen -Y sign' is unable to load a | Damien Miller |
2022-03-18 | helpful comment | Damien Miller |
2022-03-18 | ssh-keygen -Y check-novalidate requires namespace or SEGV will ensue. | Damien Miller |
2022-02-01 | mark const string array contents const too, i.e. | Damien Miller |
2022-01-05 | add a comment so I don't make this mistake again | Damien Miller |
2022-01-05 | fix cut-and-pasto in error message | Damien Miller |
2022-01-05 | allow selection of hash at sshsig signing time; code already supported | Damien Miller |
2022-01-05 | add missing -O option to usage() for ssh-keygen -Y sign; | Damien Miller |
2022-01-05 | move sig_process_opts() to before sig_sign(); no functional code change | Damien Miller |
2021-11-28 | fix indenting in last commit | Damien Miller |
2021-11-27 | Add ssh-keygen -Y match-principals operation to perform matching of | Damien Miller |
2021-10-29 | ssh-keygen: make verify-time argument parsing optional | Damien Miller |
2021-10-28 | When downloading resident keys from a FIDO token, pass back the | Damien Miller |
2021-10-02 | Dynamically allocate encoded HashKnownHosts and free as appropriate. | Darren Tucker |
2021-09-08 | correct my mistake in previous fix; spotted by halex | Damien Miller |
2021-09-07 | avoid NULL deref in -Y find-principals. Report and fix from | Damien Miller |
2021-08-11 | when verifying sshsig signatures, support an option (-Oprint-pubkey) | Damien Miller |
2021-07-24 | Don't omit ssh-keygen -y from usage when built without OpenSSL. It is | Darren Tucker |
2021-07-24 | Exclude key conversion options from usage when built without OpenSSL | Darren Tucker |
2021-07-23 | Let allowed signers files used by ssh-keygen(1) signatures support key | Damien Miller |
2021-07-09 | silence redundant error message; reported by Fabian Stelzer | Damien Miller |
2021-07-05 | Order includes as per style(9). Portable already has these so this | Darren Tucker |
2021-04-03 | highly polished whitespace, mostly fixing spaces-for-tab and bad | Damien Miller |
2021-03-12 | pwcopy() struct passwd that we're going to reuse across a bunch of | Damien Miller |
2020-12-20 | load_hostkeys()/hostkeys_foreach() variants for FILE* | Damien Miller |
2020-11-28 | Include cipher.h for declaration of cipher_by_name. | Darren Tucker |
2020-11-27 | Document ssh-keygen -Z, sanity check its argument earlier and provide | Darren Tucker |
2020-11-08 | when requesting a security key touch on stderr, inform the user once | Damien Miller |