summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshconnect.c
AgeCommit message (Expand)Author
2015-04-14Output remote username in debug output since with Host and Match it's notDarren Tucker
2015-03-24fix double-negative error message "ssh1 is not unsupported"Damien Miller
2015-01-28update to new API (key_fingerprint => sshkey_fingerprint)Damien Miller
2015-01-26correctly match ECDSA subtype (== curve) for offered/receviedDamien Miller
2015-01-26Host key rotation support.Damien Miller
2015-01-20Reduce use of <sys/param.h> and transition to <limits.h> throughout.Theo de Raadt
2015-01-19store compat flags in struct ssh; ok djm@Markus Friedl
2014-12-21Add FingerprintHash option to control algorithm used for keyDamien Miller
2014-12-11explicitly include sys/param.h in files that use the howmany() macro;Damien Miller
2014-12-04add RevokedHostKeys option for the clientDamien Miller
2014-07-15Add support for Unix domain socket forwarding. A remote TCP portTodd C. Miller
2014-07-03when rekeying, skip file/DNS lookup if it is the same as the key sentDamien Miller
2014-06-24New key API: refactor key-related functions to be more library-like,Damien Miller
2014-04-29make compiling against OpenSSL optional (make OPENSSL=no);Markus Friedl
2014-04-01When using VerifyHostKeyDNS with a DNSSEC resolver, down-convert anyDamien Miller
2014-02-06in ssh_create_socket(), only do the getaddrinfo for BindAddress whenDamien Miller
2014-02-02convert memset of potentially-private data to explicit_bzero()Damien Miller
2014-01-09ban clients/servers that suffer from SSH_BUG_DERIVEKEY, they are ancient,Damien Miller
2013-12-30refuse RSA keys from old proprietary clients/servers that use theDamien Miller
2013-12-29when showing other hostkeys, don't forget Ed25519 keysDamien Miller
2013-10-16Implement client-side hostname canonicalisation to allow an explicitDamien Miller
2013-09-19bz#1211: make BindAddress work with UsePrivilegedPort=yes; patch fromDamien Miller
2013-08-20Add a ssh_config ProxyUseFDPass option that supports the use ofDamien Miller
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-02-22support ProxyCommand=- (stdin/out already point to the proxy); ok djm@Markus Friedl
2012-09-14remove unused variableMarkus Friedl
2012-08-17Send client banner immediately, rather than waiting for the server toDamien Miller
2011-05-24Remove undocumented legacy options UserKnownHostsFile2 andDamien Miller
2011-05-23remove extra newlineDamien Miller
2011-01-16reset the SIGPIPE handler when forking to execute child processes;Damien Miller
2011-01-06reset SIGCHLD handler to SIG_DFL when execuring LocalCommand;Damien Miller
2010-12-14don't mention key type in key-changed-warning, since we also printMarkus Friedl
2010-11-29automatically order the hostkeys requested by the client based onDamien Miller
2010-10-06swapped args to kill(2)Damien Miller
2010-10-06kill proxy command on fatal() (we already kill it on clean exit);Damien Miller
2010-10-05use default shell /bin/sh if $SHELL is ""; ok markus@Damien Miller
2010-08-31Implement Elliptic Curve Cryptography modes for key exchange (ECDH) andDamien Miller
2010-04-16oops, %r => remote username, not %uDamien Miller
2010-04-16revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with theDamien Miller
2010-04-14expand %r => remote username in ssh_config:ProxyCommand;Damien Miller
2010-04-10fix terminology: we didn't find a certificate in known_hosts, we foundDamien Miller
2010-03-04Add a TrustedUserCAKeys option to sshd_config to specify CA keys thatDamien Miller
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
2010-01-13Fix a couple of typos/mispellings in commentsDarren Tucker
2010-01-09Remove RoutingDomain from ssh since it's now not needed. It can be replacedDarren Tucker
2009-11-10Set close-on-exec on various descriptors so they don't get leaked toDarren Tucker
2009-10-28Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan.Reyk Floeter
2009-05-28Keep track of number of bytes read and written. Needed for upcomingAndreas Gunnarsson
2009-05-27Un-static ssh_exchange_identification(), part of a larger change fromAndreas Gunnarsson
2008-10-14use #define ROQUIET here; no binary change. ok dtucker@Kevin Steves