summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshd_config.5
AgeCommit message (Expand)Author
2015-01-13add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypesDamien Miller
2014-12-22mention ssh -Q feature to list supported { MAC, cipher, KEX, key }Damien Miller
2014-12-22tweak previous;Jason McIntyre
2014-12-22correct description of what will happen when a AuthorizedKeysCommand isDamien Miller
2014-12-22remember which public keys have been used for authentication andDamien Miller
2014-12-21tweak previous;Jason McIntyre
2014-12-21Add FingerprintHash option to control algorithm used for keyDamien Miller
2014-12-12revert chunk I didn't mean to commit yet; via jmc@Damien Miller
2014-12-11mention AuthorizedKeysCommandUser must be set forDamien Miller
2014-11-22restore word zapped in previous, and remove some useless "No" macros;Jason McIntyre
2014-11-22/dev/random has created the same effect as /dev/arandom (and /dev/urandom)Theo de Raadt
2014-09-09mention permissions on tun(4) devices in PermitTunnel documentation;Damien Miller
2014-08-30typo.Igor Sobrado
2014-07-28some systems no longer need /dev/log;Ingo Schwarze
2014-07-15Add support for Unix domain socket forwarding. A remote TCP portTodd C. Miller
2014-07-03Add a sshd_config PermitUserRC option to control whether ~/.ssh/rc isDamien Miller
2014-03-28sync available and default algorithms, improve algorithm list formattingChristian Weisgerber
2014-02-27bz#2184 clarify behaviour of a keyword that appears in multipleDamien Miller
2014-01-29document kbdinteractiveauthentication;Jason McIntyre
2013-12-08Use a literal for the default value of KEXAlgorithms. ok deraadt jmcDarren Tucker
2013-12-07add missing mentions of ed25519; ok djm@Christian Weisgerber
2013-11-21no need for .Pp before displays;Jason McIntyre
2013-11-21Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com"Damien Miller
2013-11-02the default kex is now curve25519-sha256@libssh.orgMarkus Friedl
2013-10-29pty(4), not pty(7);Jason McIntyre
2013-10-29shd_config PermitTTY to disallow TTY allocation, mirroring theDamien Miller
2013-10-24Disallow empty Match statements and add "Match all" which matches everything.Darren Tucker
2013-07-19add ssh-agent(1) support to sshd(8); allows encrypted hostkeys,Markus Friedl
2013-06-27do not use Sx for sections outwith the man page - ingo informs me thatJason McIntyre
2013-05-16oops! avoid Xr to self;Jason McIntyre
2013-05-16Add RekeyLimit to sshd with the same syntax as the client allowing rekeyingDarren Tucker
2013-04-19document the requirment that the AuthorizedKeysCommand be owned by root;Damien Miller
2013-03-07add submethod support to AuthenticationMethods; ok and freedback djm@Markus Friedl
2013-02-06Change default of MaxStartups to 10:30:100 to start doing random earlyDarren Tucker
2013-01-18tweak previous;Jason McIntyre
2013-01-17add support for Key Revocation Lists (KRLs). These are a compact way toDamien Miller
2013-01-08support AES-GCM as defined in RFC 5647 (but with simpler KEX handling)Markus Friedl
2012-12-11add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithmsMarkus Friedl
2012-12-03tweak previous;Jason McIntyre
2012-12-02make AllowTcpForwarding accept "local" and "remote" in addition to itsDamien Miller
2012-11-04Support multiple required authentication via an AuthenticationMethodsDamien Miller
2012-11-04Remove default of AuthorizedCommandUser. Administrators are now expectedDamien Miller
2012-10-31tweak previous;Jason McIntyre
2012-10-30new sshd_config option AuthorizedKeysCommand to support fetchingDamien Miller
2012-10-04add umac128 variant; ok djm@ at n2k12Markus Friedl
2012-06-29match the documented MAC order of preference to the actual one; ok dtucker@Christian Weisgerber
2012-06-28Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs since they were removedDarren Tucker
2012-06-19tweak previous; ok markusJason McIntyre
2012-06-19sshd_config: extend Match to allow AcceptEnv and {Allow,Deny}{Users,Groups}Markus Friedl
2012-05-19Document PermitOpen none. bz#2001, patch from Loganaden VelvindronDarren Tucker