summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshconnect2.c
AgeCommit message (Expand)Author
2014-01-09Introduce digest API and use it to perform all hashing operationsDamien Miller
2013-12-30refuse RSA keys from old proprietary clients/servers that use theDamien Miller
2013-11-02use curve25519 for default key exchange (curve25519-sha256@libssh.org);Markus Friedl
2013-06-05Fix memory leaks found by Zhenbo Xu and the Melton tool. bz#1967, ok djmDarren Tucker
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-05-16Add an optional second argument to RekeyLimit in the client to allowDarren Tucker
2013-05-10fix bzero(ptr_to_struct, sizeof(ptr_to_struct)); bz#2100 fromDamien Miller
2013-04-05hush some {unused, printf type} warningsDamien Miller
2013-03-05reset pubkey order on partial success; ok djm@Markus Friedl
2013-02-17Keep track of which IndentityFile options were manually supplied and whichDarren Tucker
2013-02-15Warn more loudly if an IdentityFile provided by the user cannot be read.Darren Tucker
2012-12-02Make IdentitiesOnly apply to keys obtained from a PKCS11Provider.Damien Miller
2012-06-22remove dead code following 'for (;;)' loops.Darren Tucker
2011-05-24Remove undocumented legacy options UserKnownHostsFile2 andDamien Miller
2011-05-06fix memory leak; bz#1849 ok dtucker@Damien Miller
2010-11-29automatically order the hostkeys requested by the client based onDamien Miller
2010-09-22add a KexAlgorithms knob to the client and server configuration to allowDamien Miller
2010-08-31Implement Elliptic Curve Cryptography modes for key exchange (ECDH) andDamien Miller
2010-04-26bz#1502: authctxt.success is declared as an int, but passed byDamien Miller
2010-04-16revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with theDamien Miller
2010-04-10show the key type that we are offering in debug(), helps distinguishDamien Miller
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
2010-01-13Make HostBased authentication work with a ProxyCommand. bz #1569, patchDarren Tucker
2010-01-11Do not prompt for a passphrase if we fail to open a keyfile, and log theDarren Tucker
2010-01-04Don't escape backslashes in the SSH2 banner. bz#1533, patch fromDarren Tucker
2009-12-06zap unused variable and strlen; from Steve McClellan, ok djmDarren Tucker
2009-11-20Use the HostKeyAlias when prompting for passwords. bz#1039, ok djm@Darren Tucker
2009-11-10Set close-on-exec on various descriptors so they don't get leaked toDarren Tucker
2009-10-24Let the client detect if the server supports roaming by lookingAndreas Gunnarsson
2009-10-23disallow a hostile server from checking jpake auth by sending anDamien Miller
2009-03-05refactor the (disabled) Schnorr proof code to make it a little moreDamien Miller
2008-11-04Add support for an experimental zero-knowledge password authenticationDamien Miller
2008-11-01sprinkle ARGSUSED on dispatch handlersDamien Miller
2008-10-03Repair strnvis() buffersize of 4*n+1, with termination gauranteed by theTheo de Raadt
2008-07-31don't allocate space for empty banners; report t8m at centrum.cz; ok deraadtMarkus Friedl
2008-07-17strnvis preauth banner; pointed out by mpf@ ok markus@Damien Miller
2008-01-19promote rekeylimit to a int64 so it can hold the maximum useful limitDamien Miller
2007-05-17djm owes me a vb and a tism cd for breaking ssh compilationJolan Luff
2007-05-17fall back to gethostname() when the outgoing connection is notDamien Miller
2006-08-30Fix regression where SSH2 banner is printed at loglevels ERROR and FATALDarren Tucker
2006-08-18bz #1218 - disable SPNEGO as per RFC4462; diff from simon AT sxw.org.ukDamien Miller
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-08-01move #include <stdio.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-07-20missed some needed #include <unistd.h> when KERBEROS5=no; issue fromKevin Steves
2006-07-11move #include <errno.h> out of includes.h; ok markus@Kevin Steves
2006-06-08do not set the gid, noted by solar; ok djmMarkus Friedl
2006-06-06replace remaining setuid() calls with permanently_set_uid() andMarkus Friedl
2006-05-08uint32_t -> u_int32_t (which we use everywhere else)Damien Miller
2006-04-25Prevent ssh from trying to open private keys with bad permissions more thanDarren Tucker