summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshconnect2.c
AgeCommit message (Expand)Author
2024-10-18remove duplicate check; GHPR392 from Pedro MartellettoDamien Miller
2024-09-09pull post-quantum ML-KEM/x25519 key exchange out from compile-timeDamien Miller
2024-09-02Add experimental support for hybrid post-quantum key exchangeDamien Miller
2024-05-17remove externs for removed vars; ok djm@Jonathan Gray
2024-01-08remove ext-info-* in the kex.c code, not in callers; with/ok markus@Damien Miller
2023-12-18add "ext-info-in-auth@openssh.com" extensionDamien Miller
2023-12-18implement "strict key exchange" in ssh and sshdDamien Miller
2023-12-13when invoking KnownHostsCommand to determine the order of host keyDamien Miller
2023-10-12release GSS OIDs only at end of authentication; bz2982, ok dtucker@Damien Miller
2023-08-01remove unnecessary if statement. github PR#422 from eyalasulin999,Darren Tucker
2023-03-09Re-split the merge of the reorder-hostkeys test.Darren Tucker
2023-03-08Delete obsolete /* ARGSUSED */ lint comments.Philip Guenther
2023-03-06Refactor creation of KEX proposal.Darren Tucker
2023-03-03Check return value from fctnl and warn on failure. Spotted by Coverity,Darren Tucker
2023-02-17Remove now-unused compat bit SSH_BUG_RSASIGMD5. The code to set thisDarren Tucker
2022-09-17add a RequiredRSASize for checking RSA key length in ssh(1).Damien Miller
2022-08-19attemp FIDO key signing without PIN and use the error code returnedDamien Miller
2022-07-01Don't leak the strings allocated by order_hostkeyalgs() andDarren Tucker
2022-06-24Roll back previous KEX changes as they aren't safe untilDarren Tucker
2022-06-24Don't leak the strings allocated by order_hostkeyalgs() andDarren Tucker
2022-02-01mark const string array contents const too, i.e.Damien Miller
2022-01-06allow hostbased auth to select RSA keys when only RSA/SHA2 areDamien Miller
2021-12-19PubkeyAuthentication=yes|no|unbound|host-boundDamien Miller
2021-12-19client side of host-bound pubkey authenticationDamien Miller
2021-12-19ssh client side of bindingDamien Miller
2021-07-23note successful authentication method in final "Authenticated to ..."Damien Miller
2021-07-02Remove references to ChallengeResponseAuthentication in favour ofDarren Tucker
2021-06-07fix debug message when finding a private key to match a certificateDamien Miller
2021-06-06Client-side workaround for a bug in OpenSSH 7.4: this release allowsDamien Miller
2021-04-03highly polished whitespace, mostly fixing spaces-for-tab and badDamien Miller
2021-01-27make ssh->kex->session_id a sshbuf instead of u_char*/size_t andDamien Miller
2021-01-27remove global variable used to stash compat flags and use theDamien Miller
2021-01-26Rename HostbasedKeyTypes (ssh) and HostbasedAcceptedKeyTypes (sshd) toDarren Tucker
2021-01-25make ssh hostbased authentication send the signature algorithm inDamien Miller
2021-01-22Rename PubkeyAcceptedKeyTypes keyword to PubkeyAcceptedAlgorithms.Darren Tucker
2021-01-08If a signature operation on a FIDO key fails with a "incorrect PIN"Damien Miller
2020-12-29Update/replace the experimental post-quantim hybrid key exchangeDamien Miller
2020-12-22add a ssh_config KnownHostsCommand that allows the client to obtainDamien Miller
2020-12-20plumb ssh_conn_info through to sshconnect.c; feedback/ok markus@Damien Miller
2020-12-20load_hostkeys()/hostkeys_foreach() variants for FILE*Damien Miller
2020-11-13scrub keyboard-interactive authentication prompts coming from theDamien Miller
2020-11-13prefix keyboard interactive prompts with (user@host) to make it easierDamien Miller
2020-11-08when requesting a security key touch on stderr, inform the user onceDamien Miller
2020-10-30print reason in fatal error message when kex_assemble_namelist() failsDamien Miller
2020-10-29whitespace; no code changeDamien Miller
2020-10-18use the new variant log macros instead of prepending __func__ andDamien Miller
2020-10-16use do_log2 instead of function pointers to different log functionsDamien Miller
2020-10-07revert kex->flags cert hostkey downgrade back to a plain keyDamien Miller
2020-10-04when ordering host key algorithms in the client, consider the ECDSADamien Miller
2020-10-03record when the host key checking code downgrades a certificate hostDamien Miller