summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshconnect2.c
AgeCommit message (Expand)Author
2023-03-09Re-split the merge of the reorder-hostkeys test.Darren Tucker
2023-03-08Delete obsolete /* ARGSUSED */ lint comments.Philip Guenther
2023-03-06Refactor creation of KEX proposal.Darren Tucker
2023-03-03Check return value from fctnl and warn on failure. Spotted by Coverity,Darren Tucker
2023-02-17Remove now-unused compat bit SSH_BUG_RSASIGMD5. The code to set thisDarren Tucker
2022-09-17add a RequiredRSASize for checking RSA key length in ssh(1).Damien Miller
2022-08-19attemp FIDO key signing without PIN and use the error code returnedDamien Miller
2022-07-01Don't leak the strings allocated by order_hostkeyalgs() andDarren Tucker
2022-06-24Roll back previous KEX changes as they aren't safe untilDarren Tucker
2022-06-24Don't leak the strings allocated by order_hostkeyalgs() andDarren Tucker
2022-02-01mark const string array contents const too, i.e.Damien Miller
2022-01-06allow hostbased auth to select RSA keys when only RSA/SHA2 areDamien Miller
2021-12-19PubkeyAuthentication=yes|no|unbound|host-boundDamien Miller
2021-12-19client side of host-bound pubkey authenticationDamien Miller
2021-12-19ssh client side of bindingDamien Miller
2021-07-23note successful authentication method in final "Authenticated to ..."Damien Miller
2021-07-02Remove references to ChallengeResponseAuthentication in favour ofDarren Tucker
2021-06-07fix debug message when finding a private key to match a certificateDamien Miller
2021-06-06Client-side workaround for a bug in OpenSSH 7.4: this release allowsDamien Miller
2021-04-03highly polished whitespace, mostly fixing spaces-for-tab and badDamien Miller
2021-01-27make ssh->kex->session_id a sshbuf instead of u_char*/size_t andDamien Miller
2021-01-27remove global variable used to stash compat flags and use theDamien Miller
2021-01-26Rename HostbasedKeyTypes (ssh) and HostbasedAcceptedKeyTypes (sshd) toDarren Tucker
2021-01-25make ssh hostbased authentication send the signature algorithm inDamien Miller
2021-01-22Rename PubkeyAcceptedKeyTypes keyword to PubkeyAcceptedAlgorithms.Darren Tucker
2021-01-08If a signature operation on a FIDO key fails with a "incorrect PIN"Damien Miller
2020-12-29Update/replace the experimental post-quantim hybrid key exchangeDamien Miller
2020-12-22add a ssh_config KnownHostsCommand that allows the client to obtainDamien Miller
2020-12-20plumb ssh_conn_info through to sshconnect.c; feedback/ok markus@Damien Miller
2020-12-20load_hostkeys()/hostkeys_foreach() variants for FILE*Damien Miller
2020-11-13scrub keyboard-interactive authentication prompts coming from theDamien Miller
2020-11-13prefix keyboard interactive prompts with (user@host) to make it easierDamien Miller
2020-11-08when requesting a security key touch on stderr, inform the user onceDamien Miller
2020-10-30print reason in fatal error message when kex_assemble_namelist() failsDamien Miller
2020-10-29whitespace; no code changeDamien Miller
2020-10-18use the new variant log macros instead of prepending __func__ andDamien Miller
2020-10-16use do_log2 instead of function pointers to different log functionsDamien Miller
2020-10-07revert kex->flags cert hostkey downgrade back to a plain keyDamien Miller
2020-10-04when ordering host key algorithms in the client, consider the ECDSADamien Miller
2020-10-03record when the host key checking code downgrades a certificate hostDamien Miller
2020-09-18tweak the client hostkey preference ordering algorithm to prefer theDamien Miller
2020-08-27support for user-verified FIDO keysDamien Miller
2020-06-27Replace TAILQ concatenation loops with TAILQ_CONCATbket
2020-06-05wrap long lineDamien Miller
2020-05-13when ordering the hostkey algorithms to request from a server,Damien Miller
2020-04-17fix reversed test that caused IdentitiesOnly=yes to not apply to keysDamien Miller
2020-02-06When using HostkeyAlgorithms to merely append or remove algorithmsDamien Miller
2020-02-06Replace "security key" with "authenticator" in program messages.Christian Weisgerber
2020-01-23Make zlib optional. This adds a "ZLIB" build time option that allowsDarren Tucker
2020-01-23Replace all calls to signal(2) with a wrapper around sigaction(2).Darren Tucker