| Age | Commit message (Expand) | Author |
|---|
| 2011-06-23 | rename sandbox.h => ssh-sandbox.h to make things easier for portable | Damien Miller |
| 2011-06-22 | introduce sandboxing of the pre-auth privsep child using systrace(4). | Damien Miller |
| 2011-06-17 | make the pre-auth privsep slave log via a socketpair shared with the | Damien Miller |
| 2011-04-12 | exit with 0 status on SIGTERM; bz#1879 | Damien Miller |
| 2011-01-11 | some unsigned long long casts that make things a bit easier for | Damien Miller |
| 2010-09-22 | add a KexAlgorithms knob to the client and server configuration to allow | Damien Miller |
| 2010-08-31 | reintroduce commit from tedu@, which I pulled out for release engineering: | Damien Miller |
| 2010-08-31 | Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and | Damien Miller |
| 2010-08-16 | backout previous temporarily; discussed with deraadt@ | Damien Miller |
| 2010-08-12 | OpenSSL_add_all_algorithms is the name of the function we have a man page | Ted Unangst |
| 2010-04-16 | revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with the | Damien Miller |
| 2010-03-07 | Hold authentication debug messages until after successful authentication. | Darren Tucker |
| 2010-02-26 | Add support for certificate key types for users and hosts. | Damien Miller |
| 2010-01-29 | set FD_CLOEXEC on sock_in/sock_out; bz#1706 from jchadima AT redhat.com | Damien Miller |
| 2010-01-13 | avoid run-time failures when specifying hostkeys via a relative | Damien Miller |
| 2010-01-09 | Remove RoutingDomain from ssh since it's now not needed. It can be replaced | Darren Tucker |
| 2010-01-09 | Afer sshd receives a SIGHUP, ignore subsequent HUPs while sshd re-execs | Darren Tucker |
| 2009-10-28 | Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan. | Reyk Floeter |
| 2009-05-28 | Keep track of number of bytes read and written. Needed for upcoming | Andreas Gunnarsson |
| 2009-01-22 | make a2port() return -1 when it encounters an invalid port number | Damien Miller |
| 2008-10-30 | don't need to #include "monitor_fdpass.h" | Kevin Steves |
| 2008-07-10 | sync v1 and v2 traffic accounting; add it to sshd, too; ok djm@, dtucker@ | Markus Friedl |
| 2008-07-01 | Send CR LF during protocol banner exchanges, but only for Protocol 2 only, | Darren Tucker |
| 2008-06-14 | ensure default umask disallows at least group and world write; ok djm@ | Darren Tucker |
| 2008-06-14 | wrap long line at 80 chars | Darren Tucker |
| 2008-06-12 | Make keepalive timeouts apply while waiting for a packet, particularly during | Darren Tucker |
| 2008-06-10 | - update usage() | Jason McIntyre |
| 2008-06-10 | Add extended test mode (-T) and connection parameters for test mode (-C). | Darren Tucker |
| 2008-05-08 | Implement a channel success/failure status confirmation callback | Damien Miller |
| 2008-04-13 | Use arc4random_buf() when requesting more than a single word of output | Damien Miller |
| 2008-02-14 | When started in configuration test mode (-t) do not check that sshd is | Marc Balmer |
| 2008-02-13 | rekey arc4random and OpenSSL RNG in postauth child | Damien Miller |
| 2007-12-31 | When in inetd mode, have sshd generate a Protocol 1 ephemeral server | Darren Tucker |
| 2007-12-27 | Add a small helper function to consistently handle the EAI_SYSTEM error | Darren Tucker |
| 2007-05-22 | zap double include; from p_nowaczyk AT o2.pl | Damien Miller |
| 2007-03-09 | Move C/R -> kbdint special case to after the defaults have been | Darren Tucker |
| 2007-02-21 | Clear alarm() before restarting sshd on SIGHUP. Without this, if there's | Darren Tucker |
| 2006-11-06 | add missing checks for openssl return codes; with & ok djm@ | Markus Friedl |
| 2006-08-18 | delay authentication related cleanups until we're authenticated and | Markus Friedl |
| 2006-08-18 | make signal handler termination path shorter; risky code pointed out by | Theo de Raadt |
| 2006-08-16 | factor inetd connection, TCP listen and main TCP accept loop out of main() | Damien Miller |
| 2006-08-05 | Add headers required to build with KERBEROS5=no. ok djm@ | Darren Tucker |
| 2006-08-03 | almost entirely get rid of the culture of ".h files that include .h files" | Theo de Raadt |
| 2006-08-01 | move #include <stdio.h> out of includes.h | Kevin Steves |
| 2006-07-26 | move #include <stdlib.h> out of includes.h | Kevin Steves |
| 2006-07-25 | move #include <sys/time.h> out of includes.h | Kevin Steves |
| 2006-07-22 | move #include <string.h> out of includes.h | Kevin Steves |
| 2006-07-12 | move #include <netdb.h> out of includes.h; ok djm@ | Kevin Steves |
| 2006-07-12 | Add support for conditional directives to sshd_config via a "Match" keyword, | Darren Tucker |
| 2006-07-11 | move #include <errno.h> out of includes.h; ok markus@ | Kevin Steves |
