summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshd.c
AgeCommit message (Expand)Author
2024-10-14Split per-connection sshd-session binaryDamien Miller
2024-09-15Add a "refuseconnection" penalty class to sshd_configDamien Miller
2024-09-12Relax absolute path requirement back to what it was prior to OpenSSH 9.8,Damien Miller
2024-08-17fix swapping of source and destination addresses in some sshd log messagesDamien Miller
2024-06-27delete obsolete commentDamien Miller
2024-06-26move child process waitpid() loop out of SIGCHLD handler;Damien Miller
2024-06-06disable stderr redirection before closing fdsDamien Miller
2024-06-06Add a facility to sshd(8) to penalise particular problematic clientDamien Miller
2024-06-01be really strict with fds reserved for communication with the separateDamien Miller
2024-05-31warn when -r (deprecated option to disable re-exec) is passedDamien Miller
2024-05-17Start the process of splitting sshd into separate binaries. This stepDamien Miller
2024-01-08remove ext-info-* in the kex.c code, not in callers; with/ok markus@Damien Miller
2023-12-18add "ext-info-in-auth@openssh.com" extensionDamien Miller
2023-03-08Delete obsolete /* ARGSUSED */ lint comments.Philip Guenther
2023-03-06Refactor creation of KEX proposal.Darren Tucker
2023-03-03Check return values of dup2. Spotted by Coverity, ok djm@Darren Tucker
2023-02-10add a `sshd -G` option that parses and prints the effectiveDamien Miller
2023-01-18Add a -V (version) option to sshd like the ssh client has.Todd C. Miller
2023-01-06Implement channel inactivity timeoutsDamien Miller
2022-12-16Clear signal mask early in main(); sshd may have been started withDamien Miller
2022-12-04userspace: remove vestigial '?' cases from top-level getopt(3) loopsScott Soule Cheloha
2022-10-28refactor sshkey_private_serialize_opt()Damien Miller
2022-09-17Add RequiredRSASize for sshd(8); RSA keys that fall beneath this limitDamien Miller
2022-07-01Remove extra line leftover from merge conflict. ok djm@Darren Tucker
2022-07-01Don't leak the strings allocated by order_hostkeyalgs() andDarren Tucker
2022-06-24Roll back previous KEX changes as they aren't safe untilDarren Tucker
2022-06-24Don't leak the strings allocated by order_hostkeyalgs() andDarren Tucker
2022-06-17Log an error if pipe() fails while accepting a connection. bz#3447, fromDarren Tucker
2022-03-18don't try to resolve ListenAddress directives in the sshd re-execDamien Miller
2022-03-01pack pollfd array before server_accept_loop() ppoll() call,Damien Miller
2022-02-01Remove explicit kill of privsep preauth child's PID in SIGALRM handler.Darren Tucker
2021-11-18fd leak in sshd listen loop error path; from Gleb SmirnoffDamien Miller
2021-11-18check for POLLHUP as well as POLLIN in sshd listen loop;Damien Miller
2021-11-17set num_listen_socks to 0 on close-all instead of -1, whichDamien Miller
2021-11-14use ppoll() instead of pselect()Theo de Raadt
2021-07-19Put dh_set_moduli_file call inside ifdef WITH_OPENSSL. Fixes build withDarren Tucker
2021-07-02Remove references to ChallengeResponseAuthentication in favour ofDarren Tucker
2021-06-10Continue accept loop when pselect returns -1, eg if it was interruptedDarren Tucker
2021-06-06Match host certificates against host public keys, not private keys.Damien Miller
2021-06-04Switch the listening select loop from select() to pselect() andDarren Tucker
2021-05-07don't sigdie() in signal handler in privsep child process;Damien Miller
2021-04-03highly polished whitespace, mostly fixing spaces-for-tab and badDamien Miller
2021-03-12Add ModuliFile keyword to sshd_config to specify the location of theDarren Tucker
2021-02-05Remove debug message from sigchld handler. While this works on OpenBSDDarren Tucker
2021-01-27make ssh->kex->session_id a sshbuf instead of u_char*/size_t andDamien Miller
2021-01-27remove global variable used to stash compat flags and use theDamien Miller
2021-01-09Add PerSourceMaxStartups and PerSourceNetBlockSize options which provideDarren Tucker
2020-12-29Update/replace the experimental post-quantim hybrid key exchangeDamien Miller
2020-11-08Replace WITH_OPENSSL ifdefs in log calls with a macro. The log callsDarren Tucker
2020-10-18use the new variant log macros instead of prepending __func__ andDamien Miller