Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-06-13 | implement diffie-hellman-group14-sha1 kex method (trivial extension to | Damien Miller | |
existing diffie-hellman-group1-sha1); ok markus@ | |||
2004-05-08 | kill a tiny header; ok deraadt@ | Damien Miller | |
2004-04-08 | swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what FreeBSD | Henning Brauer | |
and NetBSD do. ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@ | |||
2004-03-05 | add IdentitiesOnly; ok djm@, pb@ | Markus Friedl | |
2004-01-19 | fix mem leaks; some fixes from Pete Flugstad; tested dtucker@ | Markus Friedl | |
2003-11-21 | unexpand and delete whitespace at EOL; ok markus@ | Damien Miller | |
2003-11-17 | replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; test + ok jakob. | Markus Friedl | |
2003-11-17 | return error on msg send/receive failure (rather than fatal); ok markus@ | Damien Miller | |
2003-11-14 | cleanup and minor fixes for the client code; from Simon Wilkinson | Markus Friedl | |
2003-11-02 | remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk | Markus Friedl | |
2003-10-26 | rename 'supported' static var in userauth_gssapi() to 'gss_supported' | Anil Madhavapeddy | |
to avoid shadowing the global version. markus@ ok | |||
2003-10-11 | search keys in reverse order; fixes #684 | Markus Friedl | |
2003-10-07 | set ptr to NULL after free | Theo de Raadt | |
2003-10-07 | Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 & #707. | Darren Tucker | |
ok markus@ | |||
2003-08-25 | fprintf->logit to silence login banner with "ssh -q"; ok markus@ | Damien Miller | |
2003-08-24 | 64 bit cleanups; markus ok | Theo de Raadt | |
2003-08-22 | remove support for "kerberos-2@ssh.com" | Markus Friedl | |
2003-08-22 | support GSS API user authentication; patches from Simon Wilkinson, | Markus Friedl | |
stripped down and tested by Jakob and myself. | |||
2003-06-24 | int -> u_int; ok djm@, deraadt@, mouring@ | Markus Friedl | |
2003-05-15 | cleanup unregister of per-method packet handlers; ok djm@ | Markus Friedl | |
2003-05-14 | implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@ | Markus Friedl | |
server interops with commercial client; ok jakob@ djm@ | |||
2003-05-12 | for pubkey authentication try the user keys in the following order: | Markus Friedl | |
1. agent keys that are found in the config file 2. other agent keys 3. keys that are only listed in the config file this helps when an agent has many keys, where the server might close the connection before the correct key is used. report & ok pb@ | |||
2003-04-08 | rename log() into logit() to avoid name conflict. markus ok, from netbsd | Jun-ichiro itojun Hagino | |
2003-04-02 | reapply rekeying chage, tested by henning@, ok djm@ | Markus Friedl | |
2003-04-01 | backout rekeying changes (for 3.6.1) | Markus Friedl | |
2003-04-01 | rekeying bugfixes and automatic rekeying: | Markus Friedl | |
* both client and server rekey _automatically_ (a) after 2^31 packets, because after 2^32 packets the sequence number for packets wraps (b) after 2^(blocksize_in_bits/4) blocks (see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt) (a) and (b) are _enabled_ by default, and only disabled for known openssh versions, that don't support rekeying properly. * client option 'RekeyLimit' * do not reply to requests during rekeying | |||
2003-03-05 | fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@ | Markus Friedl | |
2003-02-16 | split kex into client and server code, no need to link | Markus Friedl | |
server code into the client; ok provos@ | |||
2002-12-19 | s/msg_send/ssh_msg_send/ to avoid namespace clashes in portable; ok markus@ | Damien Miller | |
2002-12-13 | cleanup debug messages, more useful information for the client user. | Markus Friedl | |
2002-11-21 | debug->debug2, unify debug messages | Markus Friedl | |
2002-07-01 | for compression=yes, we fallback to no-compression if the server does | Markus Friedl | |
not support compression, vice versa for compression=no. ok mouring@ | |||
2002-06-30 | minor KNF | Theo de Raadt | |
2002-06-23 | various KNF and %d for unsigned | Theo de Raadt | |
2002-06-19 | KNF done automatically while reading.... | Theo de Raadt | |
2002-05-31 | extent ssh-keysign protocol: | Markus Friedl | |
pass # of socket-fd to ssh-keysign, keysign verfies locally used ip-address using this socket-fd, restricts fake local hostnames to actual local hostnames; ok stevesk@ | |||
2002-05-25 | execlp->execl; from stevesk | Markus Friedl | |
2002-05-24 | stat ssh-keysign first, print error if stat fails; | Markus Friedl | |
some debug->error; fix comment | |||
2002-05-23 | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased ↵ | Markus Friedl | |
authentication in protocol v2 (needs to access the hostkeys). | |||
2002-03-26 | client side support for PASSWD_CHANGEREQ | Markus Friedl | |
based on work by johan.andersson@appgate.com; ok provos@ | |||
2002-03-19 | KNF whitespace | Markus Friedl | |
2002-02-25 | more u_* fixes | Markus Friedl | |
2002-02-24 | signed vs. unsigned: make size arguments u_int, ok stevesk@ | Markus Friedl | |
2002-02-03 | more cross checking if announced vs. used key type; ok stevesk@ | Markus Friedl | |
2002-01-25 | unused include | Markus Friedl | |
2002-01-13 | use buffer API and avoid static strings of fixed size; ok provos@/mouring@ | Markus Friedl | |
2001-12-28 | remove plen from the dispatch fn. it's no longer used. | Markus Friedl | |
2001-12-28 | packet_read* no longer return the packet length, since it's not used. | Markus Friedl | |
2001-12-28 | s/packet_done/packet_check_eom/ (end-of-message); ok djm@ | Markus Friedl | |
2001-12-20 | Conformance fix: we should send failing packet sequence number when | Damien Miller | |
responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by yakk@yakk.dot.net; ok markus@ |