summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshd
AgeCommit message (Expand)Author
2024-05-17Start the process of splitting sshd into separate binaries. This stepDamien Miller
2024-04-01new-style relink kit for sshd. The old scheme created a Makefile byTheo de Raadt
2024-02-10clean sshd random relinking kit; ok miod@Christian Weisgerber
2023-01-18delete useless dependencyTheo de Raadt
2023-01-18Create and install sshd random relink kit.Theo de Raadt
2022-05-27split the low-level file handling functions out from auth2-pubkey.cDamien Miller
2021-01-09Add PerSourceMaxStartups and PerSourceNetBlockSize options which provideDarren Tucker
2020-01-25factor out reading/writing sshbufs to dedicated functions;Damien Miller
2020-01-23Make zlib optional. This adds a "ZLIB" build time option that allowsDarren Tucker
2019-12-13use ssh-sk-helper for all security key signing operationsDamien Miller
2019-11-14directly support U2F/FIDO2 security keys in OpenSSH by linkingDamien Miller
2019-07-05add a local implementation of BSD realpath() for sftp-server useDamien Miller
2018-07-25Don't redefine Makefile choices which come correct from bsd.*.mkTheo de Raadt
2018-07-18Remove support for running ssh(1) setuid and fatal if attempted.Darren Tucker
2018-07-11remove legacy key emulation layer; ok djm@Markus Friedl
2018-07-09remove legacy buffer API emulation layer; ok djm@Markus Friedl
2018-01-08group shared source files (e.g. SRCS_KEX) and allow compilation w/o OPENSSLMarkus Friedl
2018-01-08split client/server kex; only ssh-keygen needs uuencode.o;Markus Friedl
2017-12-14Replace ED25519's private SHA-512 implementation with a call to theChristian Weisgerber
2017-12-12Create a persistent umac128.c source file: #define the output size andChristian Weisgerber
2017-12-10ssh/lib hasn't worked towards our code-sharing goals for a quit while,Theo de Raadt
2016-09-28Remove support for pre-authentication compression. Doing compressionDamien Miller
2016-08-13remove ssh1 server code; ok djm@Markus Friedl
2016-01-14remove roaming support; ok djm@Markus Friedl
2015-10-09Change all tame callers to namechange to pledge(2).Theo de Raadt
2015-10-03switch from using the systrace-based sandbox to the tame-based sandbox.Theo de Raadt
2015-03-03add SSH1 Makefile knob to make it easier to build without SSH1 support;Damien Miller
2015-01-19add experimental api for packet layer; ok djm@Markus Friedl
2014-04-29make compiling against OpenSSL optional (make OPENSSL=no);Markus Friedl
2014-03-26remove libwrap support. ok deraadt djm mfriedlTed Unangst
2014-01-29remove experimental, never-enabled JPAKE code; ok markus@Damien Miller
2013-11-02use curve25519 for default key exchange (curve25519-sha256@libssh.org);Markus Friedl
2013-08-10libkafs5 -> libkafs (unused in build, so no functional change)Antoine Jacoutot
2013-07-20fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@Damien Miller
2013-07-02add missing library dependenciesMarkus Friedl
2013-06-19stop doing kerberos in ssh and sshdTheo de Raadt
2013-06-18Shuffle library link order to appease the static arch deities.Miod Vallat
2013-06-17link to the new kerberos librariesRobert Nagy
2011-06-22introduce sandboxing of the pre-auth privsep child using systrace(4).Damien Miller
2010-10-13The heimdal code switched to using DES from libcrypto when 0.7.2Jonathan Gray
2010-08-31Implement Elliptic Curve Cryptography modes for key exchange (ECDH) andDamien Miller
2009-10-24Dummy implementation of wait_for_roaming_reconnect() for the server side.Andreas Gunnarsson
2009-05-28Keep track of number of bytes read and written. Needed for upcomingAndreas Gunnarsson
2008-11-04Add support for an experimental zero-knowledge password authenticationDamien Miller
2008-02-04link sftp-server into sshd; feedback and ok djm@Markus Friedl
2007-09-21unifdef -DBSD_AUTHDamien Miller
2007-08-23unifdef HAVE_LOGIN_CAP; ok deraadt@ millert@Damien Miller
2004-08-23Use permanently_set_uid() in ssh and ssh-keysign for consistency, matchesDarren Tucker
2004-06-13implement session multiplexing in the client (the server has supported thisDamien Miller
2003-12-23implement KerberosGetAFSToken server option. ok markus@, beck@Jakob Schlyter