summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshconnect2.c
AgeCommit message (Expand)Author
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
2010-01-13Make HostBased authentication work with a ProxyCommand. bz #1569, patchDarren Tucker
2010-01-11Do not prompt for a passphrase if we fail to open a keyfile, and log theDarren Tucker
2010-01-04Don't escape backslashes in the SSH2 banner. bz#1533, patch fromDarren Tucker
2009-12-06zap unused variable and strlen; from Steve McClellan, ok djmDarren Tucker
2009-11-20Use the HostKeyAlias when prompting for passwords. bz#1039, ok djm@Darren Tucker
2009-11-10Set close-on-exec on various descriptors so they don't get leaked toDarren Tucker
2009-10-24Let the client detect if the server supports roaming by lookingAndreas Gunnarsson
2009-10-23disallow a hostile server from checking jpake auth by sending anDamien Miller
2009-03-05refactor the (disabled) Schnorr proof code to make it a little moreDamien Miller
2008-11-04Add support for an experimental zero-knowledge password authenticationDamien Miller
2008-11-01sprinkle ARGSUSED on dispatch handlersDamien Miller
2008-10-03Repair strnvis() buffersize of 4*n+1, with termination gauranteed by theTheo de Raadt
2008-07-31don't allocate space for empty banners; report t8m at centrum.cz; ok deraadtMarkus Friedl
2008-07-17strnvis preauth banner; pointed out by mpf@ ok markus@Damien Miller
2008-01-19promote rekeylimit to a int64 so it can hold the maximum useful limitDamien Miller
2007-05-17djm owes me a vb and a tism cd for breaking ssh compilationJolan Luff
2007-05-17fall back to gethostname() when the outgoing connection is notDamien Miller
2006-08-30Fix regression where SSH2 banner is printed at loglevels ERROR and FATALDarren Tucker
2006-08-18bz #1218 - disable SPNEGO as per RFC4462; diff from simon AT sxw.org.ukDamien Miller
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-08-01move #include <stdio.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-07-20missed some needed #include <unistd.h> when KERBEROS5=no; issue fromKevin Steves
2006-07-11move #include <errno.h> out of includes.h; ok markus@Kevin Steves
2006-06-08do not set the gid, noted by solar; ok djmMarkus Friedl
2006-06-06replace remaining setuid() calls with permanently_set_uid() andMarkus Friedl
2006-05-08uint32_t -> u_int32_t (which we use everywhere else)Damien Miller
2006-04-25Prevent ssh from trying to open private keys with bad permissions more thanDarren Tucker
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
2006-03-25introduce xcalloc() and xasprintf() failure-checked allocations functionsDamien Miller
2006-03-19RCSID() can dieTheo de Raadt
2006-03-19memory leaks detected by Coverity via elad AT netbsd.org;Damien Miller
2006-03-07Implement the diffie-hellman-group-exchange-sha256 key exchange methodDamien Miller
2006-02-20move #include <sys/stat.h> out of includes.h; ok markus@Kevin Steves
2006-02-10move #include <sys/wait.h> out of includes.h; ok markus@Kevin Steves
2006-02-07move #include <sys/queue.h> out of includes.h; ok markus@Kevin Steves
2005-10-14no trailing "\n" for log functions; ok djm@Kevin Steves
2005-08-30destroy credentials if krb5_kuserok() call fails. Stops credentials beingDamien Miller
2005-07-25add a new compression method that delays compression until the userMarkus Friedl
2005-07-17knf says that a 2nd level indent is four (not three or five) spacesDamien Miller
2005-06-17make this -Wsign-compare clean; ok avsm@ markus@Damien Miller
2004-06-13implement diffie-hellman-group14-sha1 kex method (trivial extension toDamien Miller
2004-05-08kill a tiny header; ok deraadt@Damien Miller
2004-04-08swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what FreeBSDHenning Brauer
2004-03-05add IdentitiesOnly; ok djm@, pb@Markus Friedl
2004-01-19fix mem leaks; some fixes from Pete Flugstad; tested dtucker@Markus Friedl
2003-11-21unexpand and delete whitespace at EOL; ok markus@Damien Miller
2003-11-17replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; test + ok jakob.Markus Friedl
2003-11-17return error on msg send/receive failure (rather than fatal); ok markus@Damien Miller