summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshconnect2.c
AgeCommit message (Collapse)Author
2003-05-15cleanup unregister of per-method packet handlers; ok djm@Markus Friedl
2003-05-14implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@Markus Friedl
server interops with commercial client; ok jakob@ djm@
2003-05-12for pubkey authentication try the user keys in the following order:Markus Friedl
1. agent keys that are found in the config file 2. other agent keys 3. keys that are only listed in the config file this helps when an agent has many keys, where the server might close the connection before the correct key is used. report & ok pb@
2003-04-08rename log() into logit() to avoid name conflict. markus ok, from netbsdJun-ichiro itojun Hagino
2003-04-02reapply rekeying chage, tested by henning@, ok djm@Markus Friedl
2003-04-01backout rekeying changes (for 3.6.1)Markus Friedl
2003-04-01rekeying bugfixes and automatic rekeying:Markus Friedl
* both client and server rekey _automatically_ (a) after 2^31 packets, because after 2^32 packets the sequence number for packets wraps (b) after 2^(blocksize_in_bits/4) blocks (see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt) (a) and (b) are _enabled_ by default, and only disabled for known openssh versions, that don't support rekeying properly. * client option 'RekeyLimit' * do not reply to requests during rekeying
2003-03-05fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@Markus Friedl
2003-02-16split kex into client and server code, no need to linkMarkus Friedl
server code into the client; ok provos@
2002-12-19s/msg_send/ssh_msg_send/ to avoid namespace clashes in portable; ok markus@Damien Miller
2002-12-13cleanup debug messages, more useful information for the client user.Markus Friedl
2002-11-21debug->debug2, unify debug messagesMarkus Friedl
2002-07-01for compression=yes, we fallback to no-compression if the server doesMarkus Friedl
not support compression, vice versa for compression=no. ok mouring@
2002-06-30minor KNFTheo de Raadt
2002-06-23various KNF and %d for unsignedTheo de Raadt
2002-06-19KNF done automatically while reading....Theo de Raadt
2002-05-31extent ssh-keysign protocol:Markus Friedl
pass # of socket-fd to ssh-keysign, keysign verfies locally used ip-address using this socket-fd, restricts fake local hostnames to actual local hostnames; ok stevesk@
2002-05-25execlp->execl; from steveskMarkus Friedl
2002-05-24stat ssh-keysign first, print error if stat fails;Markus Friedl
some debug->error; fix comment
2002-05-23add /usr/libexec/ssh-keysign: a setuid helper program for hostbased ↵Markus Friedl
authentication in protocol v2 (needs to access the hostkeys).
2002-03-26client side support for PASSWD_CHANGEREQMarkus Friedl
based on work by johan.andersson@appgate.com; ok provos@
2002-03-19KNF whitespaceMarkus Friedl
2002-02-25more u_* fixesMarkus Friedl
2002-02-24signed vs. unsigned: make size arguments u_int, ok stevesk@Markus Friedl
2002-02-03more cross checking if announced vs. used key type; ok stevesk@Markus Friedl
2002-01-25unused includeMarkus Friedl
2002-01-13use buffer API and avoid static strings of fixed size; ok provos@/mouring@Markus Friedl
2001-12-28remove plen from the dispatch fn. it's no longer used.Markus Friedl
2001-12-28packet_read* no longer return the packet length, since it's not used.Markus Friedl
2001-12-28s/packet_done/packet_check_eom/ (end-of-message); ok djm@Markus Friedl
2001-12-20Conformance fix: we should send failing packet sequence number whenDamien Miller
responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by yakk@yakk.dot.net; ok markus@
2001-12-19basic KNF done while i was looking for something elseTheo de Raadt
2001-12-05minor KNFTheo de Raadt
2001-12-05make it compile with more strict prototype checkingJun-ichiro itojun Hagino
2001-11-07pad using the padding field from the ssh2 packet instead of sendingMarkus Friedl
extra ignore messages. tested against several other ssh servers.
2001-10-29hostbased: check for client hostkey before building chostMarkus Friedl
2001-10-06unify hostkey check error messages, simplify prompt.Markus Friedl
2001-08-31disable kbd-interactive if we don't get SSH2_MSG_USERAUTH_INFO_REQUEST messagesMarkus Friedl
2001-07-23reorder default sequence of userauth methods to match ssh behaviour:Markus Friedl
hostbased,publickey,keyboard-interactive,password
2001-06-26add smartcard support to the client, too (now you can use bothMarkus Friedl
the agent and the client).
2001-06-25prototype cleanup; ok markus@Kevin Steves
2001-06-24oops, missing format stringMarkus Friedl
2001-06-24switch to readpassphrase(3)Markus Friedl
2.7/8-stable needs readpassphrase.[ch] from libc
2001-06-23more strict prototypes. raise warning level in Makefile.inc. markus ok'edJun-ichiro itojun Hagino
TODO; cleanup headers
2001-06-23get rid of known_hosts2, use it for hostkey lookup, but do not modify.Markus Friedl
2001-05-19change preferredauthentication order toMarkus Friedl
publickey,hostbased,password,keyboard-interactive document that hostbased defaults to no, document order
2001-05-18improved kbd-interactive support. work by per@appgate.com and meMarkus Friedl
2001-04-18more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works nowMarkus Friedl
(however the 2.1.0 server seems to work only if debug is enabled...)
2001-04-18use FDQN with trailing dot in the hostbased auth packets, ok deraadt@Markus Friedl
2001-04-17add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@Markus Friedl
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-11 14:02:28 +0000