Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-07-03 | re-enable ssh-keysign's sbit, but make ssh-keysign read /etc/ssh/ssh_config | Markus Friedl | |
and exit if HostbasedAuthentication is disabled globally. based on discussions with deraadt, itojun and sommerfeld; ok itojun@ | |||
2002-07-03 | use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld) | Markus Friedl | |
in order to avoid a possible Kocher timing attack pointed out by Charles Hannum; ok provos@ | |||
2002-06-26 | bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu | Markus Friedl | |
2002-06-19 | KNF done automatically while reading.... | Theo de Raadt | |
2002-06-08 | only accept 20 byte session ids | Markus Friedl | |
2002-05-31 | extent ssh-keysign protocol: | Markus Friedl | |
pass # of socket-fd to ssh-keysign, keysign verfies locally used ip-address using this socket-fd, restricts fake local hostnames to actual local hostnames; ok stevesk@ | |||
2002-05-23 | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased ↵ | Markus Friedl | |
authentication in protocol v2 (needs to access the hostkeys). |