summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/ssh-keygen.c
AgeCommit message (Expand)Author
2019-12-10when acting as a CA and using a security key as the CA key, remind theDamien Miller
2019-11-25Print a key touch reminder when generating a security key. Most keysDamien Miller
2019-11-25allow "ssh-keygen -x no-touch-required" when generating a security keyDamien Miller
2019-11-25add a "no-touch-required" option for authorized_keys and a similarDamien Miller
2019-11-25Add new structure for signature optionsDamien Miller
2019-11-18more missing mentions of ed25519-sk; ok djm@Christian Weisgerber
2019-11-18additional missing stdarg.h includes when built without WITH_OPENSSL; ok djm@Christian Weisgerber
2019-11-18Fix incorrect error message when key certification failsDamien Miller
2019-11-18allow *-sk key types to be turned into certificatesDamien Miller
2019-11-18missing break in getopt switch; spotted by Sebastian KinneDamien Miller
2019-11-14directly support U2F/FIDO2 security keys in OpenSSH by linkingDamien Miller
2019-11-12security keys typically need to be tapped/touched in order to performDamien Miller
2019-11-12enable ed25519 support; ok djmMarkus Friedl
2019-11-08duplicate 'x' character in getopt(3) optstringDamien Miller
2019-11-07Fill in missing man page bits for U2F security key support:Christian Weisgerber
2019-10-31fix -Wshadow warningDamien Miller
2019-10-31Refactor signing - use sshkey_sign for everything, including the newDamien Miller
2019-10-31ssh-keygen support for generating U2F/FIDO keysDamien Miller
2019-10-16free buf before return; reported by krishnaiah bommuDamien Miller
2019-10-03use a more common options order in SYNOPSIS and sync usage();Jason McIntyre
2019-10-02thinko in previous; spotted by Mantas MikulėnasDamien Miller
2019-10-02ban empty namespace strings for sshsig; spotted by Mantas MikulėnasDamien Miller
2019-09-29group and sort single letter options; ok deraadtJason McIntyre
2019-09-24identity_file[] should be PATH_MAX, not the arbitrary number 1024Theo de Raadt
2019-09-16Allow testing signature syntax and validity without verifying thatDamien Miller
2019-09-06key conversion should fail for !openssl builds, not fall through toDamien Miller
2019-09-06fixes for !WITH_OPENSSL compilation; ok dtucker@Damien Miller
2019-09-06lots of things were relying on libcrypto headers to transitivelyDamien Miller
2019-09-03repair typo and editing mishapChristian Weisgerber
2019-09-03sshsig tweaks and improvements from and suggested by MarkusDamien Miller
2019-09-03sshsig: lightweight signature and verification ability for OpenSSHDamien Miller
2019-09-03factor out confirm_overwrite(); ok markus@Damien Miller
2019-09-02constify an argumentDamien Miller
2019-09-01print comment when printing pubkey from privateDamien Miller
2019-08-08Allow the maximimum uint32 value for the argument passed to -b whichDarren Tucker
2019-08-05Many key types are supported now, so take care to check the sizeChristian Weisgerber
2019-07-19Accept the verbose flag when searching for host keys in known hostsDamien Miller
2019-07-16remove mostly vestigal uuencode.[ch]; moving the only uniqueDamien Miller
2019-07-15support PKCS8 as an optional format for storage of private keys,Damien Miller
2019-07-05revert header removal that snuck into previousDamien Miller
2019-07-05add a local implementation of BSD realpath() for sftp-server useDamien Miller
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-06-21Add protection for private keys at rest in RAM against speculationDamien Miller
2019-06-06Replace calls to ssh_malloc_init() by a static init of malloc_options.Otto Moerbeek
2019-05-29Make the standard output messages of both methods of changing a keyMark Lumsden
2019-03-25Expand comment to document rationale for default key sizes.Darren Tucker
2019-03-25Increase the default RSA key size to 3072 bits. Based on the estimatesDarren Tucker
2019-02-10ssh-keygen -D pkcs11.so needs to initialize pkcs11 interactive,Sebastian Benoit
2019-01-23allow auto-incrementing certificate serial number for certs signedDamien Miller
2019-01-23move a bunch of global flag variables to main(); make the rest staticDamien Miller