summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshconnect2.c
AgeCommit message (Expand)Author
2012-06-22remove dead code following 'for (;;)' loops.Darren Tucker
2011-05-24Remove undocumented legacy options UserKnownHostsFile2 andDamien Miller
2011-05-06fix memory leak; bz#1849 ok dtucker@Damien Miller
2010-11-29automatically order the hostkeys requested by the client based onDamien Miller
2010-09-22add a KexAlgorithms knob to the client and server configuration to allowDamien Miller
2010-08-31Implement Elliptic Curve Cryptography modes for key exchange (ECDH) andDamien Miller
2010-04-26bz#1502: authctxt.success is declared as an int, but passed byDamien Miller
2010-04-16revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with theDamien Miller
2010-04-10show the key type that we are offering in debug(), helps distinguishDamien Miller
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
2010-01-13Make HostBased authentication work with a ProxyCommand. bz #1569, patchDarren Tucker
2010-01-11Do not prompt for a passphrase if we fail to open a keyfile, and log theDarren Tucker
2010-01-04Don't escape backslashes in the SSH2 banner. bz#1533, patch fromDarren Tucker
2009-12-06zap unused variable and strlen; from Steve McClellan, ok djmDarren Tucker
2009-11-20Use the HostKeyAlias when prompting for passwords. bz#1039, ok djm@Darren Tucker
2009-11-10Set close-on-exec on various descriptors so they don't get leaked toDarren Tucker
2009-10-24Let the client detect if the server supports roaming by lookingAndreas Gunnarsson
2009-10-23disallow a hostile server from checking jpake auth by sending anDamien Miller
2009-03-05refactor the (disabled) Schnorr proof code to make it a little moreDamien Miller
2008-11-04Add support for an experimental zero-knowledge password authenticationDamien Miller
2008-11-01sprinkle ARGSUSED on dispatch handlersDamien Miller
2008-10-03Repair strnvis() buffersize of 4*n+1, with termination gauranteed by theTheo de Raadt
2008-07-31don't allocate space for empty banners; report t8m at centrum.cz; ok deraadtMarkus Friedl
2008-07-17strnvis preauth banner; pointed out by mpf@ ok markus@Damien Miller
2008-01-19promote rekeylimit to a int64 so it can hold the maximum useful limitDamien Miller
2007-05-17djm owes me a vb and a tism cd for breaking ssh compilationJolan Luff
2007-05-17fall back to gethostname() when the outgoing connection is notDamien Miller
2006-08-30Fix regression where SSH2 banner is printed at loglevels ERROR and FATALDarren Tucker
2006-08-18bz #1218 - disable SPNEGO as per RFC4462; diff from simon AT sxw.org.ukDamien Miller
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-08-01move #include <stdio.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-07-20missed some needed #include <unistd.h> when KERBEROS5=no; issue fromKevin Steves
2006-07-11move #include <errno.h> out of includes.h; ok markus@Kevin Steves
2006-06-08do not set the gid, noted by solar; ok djmMarkus Friedl
2006-06-06replace remaining setuid() calls with permanently_set_uid() andMarkus Friedl
2006-05-08uint32_t -> u_int32_t (which we use everywhere else)Damien Miller
2006-04-25Prevent ssh from trying to open private keys with bad permissions more thanDarren Tucker
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
2006-03-25introduce xcalloc() and xasprintf() failure-checked allocations functionsDamien Miller
2006-03-19RCSID() can dieTheo de Raadt
2006-03-19memory leaks detected by Coverity via elad AT netbsd.org;Damien Miller
2006-03-07Implement the diffie-hellman-group-exchange-sha256 key exchange methodDamien Miller
2006-02-20move #include <sys/stat.h> out of includes.h; ok markus@Kevin Steves
2006-02-10move #include <sys/wait.h> out of includes.h; ok markus@Kevin Steves
2006-02-07move #include <sys/queue.h> out of includes.h; ok markus@Kevin Steves
2005-10-14no trailing "\n" for log functions; ok djm@Kevin Steves
2005-08-30destroy credentials if krb5_kuserok() call fails. Stops credentials beingDamien Miller
2005-07-25add a new compression method that delays compression until the userMarkus Friedl
2005-07-17knf says that a 2nd level indent is four (not three or five) spacesDamien Miller