summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshd_config.5
AgeCommit message (Expand)Author
2024-10-25mlkem768x25519-sha256 has been promoted to default key exchangeChristian Weisgerber
2024-10-18s/Sx/Cm/ for external references; from Domen Puncer Kugler via GHPR501Damien Miller
2024-10-14mention SshdAuthPath option; ok djm@Christian Weisgerber
2024-10-06Turn off finite field (a.k.a modp) Diffie-Hellman key exchange in sshdDamien Miller
2024-09-15minor grammar/sort fixes for refuseconnection; ok djmJason McIntyre
2024-09-15add a "Match invalid-user" predicate to sshd_config Match options.Damien Miller
2024-09-15Add a "refuseconnection" penalty class to sshd_configDamien Miller
2024-09-15Add a sshd_config "RefuseConnection" optionDamien Miller
2024-09-09document the mlkem768x25519-sha256 key exchange algorithmChristian Weisgerber
2024-08-22sntrup761x25519-sha512 now has an IANA codepoint assigned,Damien Miller
2024-07-26document the reduced logingrace penaltyChristian Weisgerber
2024-07-10correct keyword; from Yatao Su via GHPR509Damien Miller
2024-07-04fix grammar: "a pattern lists" -> "one or more pattern lists"Damien Miller
2024-06-24- uppercase start of sentenceJason McIntyre
2024-06-24mention SshdSessionPath optionDamien Miller
2024-06-14clarify KEXAlgorithms supported vs available. Inspired by bz3701Damien Miller
2024-06-13separate keywords with commaChristian Weisgerber
2024-06-12split PerSourcePenalties address tracking. Previously it used oneDamien Miller
2024-06-11do not mark up "(default: 20ms)";Jason McIntyre
2024-06-11update to mention that PerSourcePenalties default to being enabledDamien Miller
2024-06-06escape the final dot at eol in "e.g." to avoid double spacing;Jason McIntyre
2024-06-06mention that PerSourcePenalties don't affect concurrent in-progressDamien Miller
2024-06-06Add a facility to sshd(8) to penalise particular problematic clientDamien Miller
2024-02-21explain arguments of internal-sftpDamien Miller
2024-02-21clarify permissions requirements for ChrootDirectoryDamien Miller
2024-02-21.Cm for a keyword. Part of GHPR#454 from Niklas HambüchenDamien Miller
2024-01-10fix incorrect capitalisation;Jason McIntyre
2024-01-09add a "global" ChannelTimeout type to ssh(1) and sshd(8) that watchesDamien Miller
2023-07-28%C is a callable macro in mdoc(7) so, as we do for %D, escape it;Jason McIntyre
2023-07-27make sshd_config AuthorizedPrincipalsCommand and AuthorizedKeysCommandDamien Miller
2023-03-03some options are not first-match-wins. Mention that there areDamien Miller
2023-01-18tweak previous; ok djmJason McIntyre
2023-01-17Add a sshd_config UnusedConnectionTimeout option to terminateDamien Miller
2023-01-06tweak previous; ok djmJason McIntyre
2023-01-06Implement channel inactivity timeoutsDamien Miller
2022-09-17Add RequiredRSASize for sshd(8); RSA keys that fall beneath this limitDamien Miller
2022-06-24make it clear that RekeyLimit applies to both transmitted andDamien Miller
2022-04-12Correct path for system known hosts file in description ofDarren Tucker
2022-03-31ssh: document sntrup761x25519-sha512@openssh.com as default KEXChristian Weisgerber
2021-12-04RSA/SHA-1 is not used by default anymore on the serverChristian Weisgerber
2021-12-02ssh-rsa is no longer in the default for PubkeyAcceptedAlgorithms.Darren Tucker
2021-11-10add the sntrup761x25519-sha512@openssh.com hybrid ECDH/x25519 +Damien Miller
2021-10-09Document that CASignatureAlgorithms, ExposeAuthInfo and PubkeyAuthOptionsDarren Tucker
2021-09-03Refer to KEX "algorithms" instead of "methods" to match other referencesDarren Tucker
2021-08-12mention that CASignatureAlgorithms accepts +/- similarly to theDamien Miller
2021-07-27word fix; reported by debian at helgefjell deJason McIntyre
2021-07-02Remove references to ChallengeResponseAuthentication in favour ofDarren Tucker
2021-04-04remove stray inserts; from matthias schmidtJason McIntyre
2021-04-03sync CASignatureAlgorithms lists with reality. GHPR#174 fromDamien Miller
2021-03-12Add ModuliFile keyword to sshd_config to specify the location of theDarren Tucker