summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/ssh-keysign.c
AgeCommit message (Collapse)Author
2002-07-03re-enable ssh-keysign's sbit, but make ssh-keysign read /etc/ssh/ssh_configMarkus Friedl
and exit if HostbasedAuthentication is disabled globally. based on discussions with deraadt, itojun and sommerfeld; ok itojun@
2002-07-03use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)Markus Friedl
in order to avoid a possible Kocher timing attack pointed out by Charles Hannum; ok provos@
2002-06-26bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.eduMarkus Friedl
2002-06-19KNF done automatically while reading....Theo de Raadt
2002-06-08only accept 20 byte session idsMarkus Friedl
2002-05-31extent ssh-keysign protocol:Markus Friedl
pass # of socket-fd to ssh-keysign, keysign verfies locally used ip-address using this socket-fd, restricts fake local hostnames to actual local hostnames; ok stevesk@
2002-05-23add /usr/libexec/ssh-keysign: a setuid helper program for hostbased ↵Markus Friedl
authentication in protocol v2 (needs to access the hostkeys).