summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshd.c
AgeCommit message (Expand)Author
2022-07-01Remove extra line leftover from merge conflict. ok djm@Darren Tucker
2022-07-01Don't leak the strings allocated by order_hostkeyalgs() andDarren Tucker
2022-06-24Roll back previous KEX changes as they aren't safe untilDarren Tucker
2022-06-24Don't leak the strings allocated by order_hostkeyalgs() andDarren Tucker
2022-06-17Log an error if pipe() fails while accepting a connection. bz#3447, fromDarren Tucker
2022-03-18don't try to resolve ListenAddress directives in the sshd re-execDamien Miller
2022-03-01pack pollfd array before server_accept_loop() ppoll() call,Damien Miller
2022-02-01Remove explicit kill of privsep preauth child's PID in SIGALRM handler.Darren Tucker
2021-11-18fd leak in sshd listen loop error path; from Gleb SmirnoffDamien Miller
2021-11-18check for POLLHUP as well as POLLIN in sshd listen loop;Damien Miller
2021-11-17set num_listen_socks to 0 on close-all instead of -1, whichDamien Miller
2021-11-14use ppoll() instead of pselect()Theo de Raadt
2021-07-19Put dh_set_moduli_file call inside ifdef WITH_OPENSSL. Fixes build withDarren Tucker
2021-07-02Remove references to ChallengeResponseAuthentication in favour ofDarren Tucker
2021-06-10Continue accept loop when pselect returns -1, eg if it was interruptedDarren Tucker
2021-06-06Match host certificates against host public keys, not private keys.Damien Miller
2021-06-04Switch the listening select loop from select() to pselect() andDarren Tucker
2021-05-07don't sigdie() in signal handler in privsep child process;Damien Miller
2021-04-03highly polished whitespace, mostly fixing spaces-for-tab and badDamien Miller
2021-03-12Add ModuliFile keyword to sshd_config to specify the location of theDarren Tucker
2021-02-05Remove debug message from sigchld handler. While this works on OpenBSDDarren Tucker
2021-01-27make ssh->kex->session_id a sshbuf instead of u_char*/size_t andDamien Miller
2021-01-27remove global variable used to stash compat flags and use theDamien Miller
2021-01-09Add PerSourceMaxStartups and PerSourceNetBlockSize options which provideDarren Tucker
2020-12-29Update/replace the experimental post-quantim hybrid key exchangeDamien Miller
2020-11-08Replace WITH_OPENSSL ifdefs in log calls with a macro. The log callsDarren Tucker
2020-10-18use the new variant log macros instead of prepending __func__ andDamien Miller
2020-10-16LogVerbose keyword for ssh and sshdDamien Miller
2020-10-03There are lots of place where we want to redirect stdin, stdoutDamien Miller
2020-08-27support for user-verified FIDO keysDamien Miller
2020-07-03update setproctitle after re-exec; ok djmMarkus Friedl
2020-07-03keep ignoring HUP after fork+exec; ok djmMarkus Friedl
2020-07-03don't exit the listener on send_rexec_state errors; ok djmMarkus Friedl
2020-06-18check public host key matches private; ok markus@ (as part ofDamien Miller
2020-06-05unbreak "sshd -ddd" - close of config passing fd happened too early.Damien Miller
2020-05-26improve logging for MaxStartups connection throttling: have sshd logDamien Miller
2020-05-15sshd listener must not block if reexecd sshd exits early:Markus Friedl
2020-05-08fix compilation with DEBUG_KEXDH; bz#3160 ok dtucker@Damien Miller
2020-03-13use sshpkt_fatal() for kex_exchange_identification() errors.Damien Miller
2020-03-13Don't clear alarm timers in listening sshd. Previously these timers wereDarren Tucker
2020-03-13spelling errors in comments; no code changeDamien Miller
2020-01-31whitespaceDamien Miller
2020-01-31force early logging to stderr if debug_flag (-d) is set; avoidsDamien Miller
2020-01-31mistake in previous: filling the incorrect bufferDamien Miller
2020-01-31Add a sshd_config "Include" directive to allow inclusion of files.Damien Miller
2020-01-24tweak proctitle to include sshd arguments, as these are frequentlyDamien Miller
2020-01-23Replace all calls to signal(2) with a wrapper around sigaction(2).Darren Tucker
2020-01-21expose the number of currently-authenticating connectionsDamien Miller
2019-12-15allow security keys to act as host keys as well as user keys.Damien Miller
2019-11-18additional missing stdarg.h includes when built without WITH_OPENSSL; ok djm@Christian Weisgerber