summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2018-09-21Allow ssh_config ForwardX11Timeout=0 to disable the timeout and allowDamien Miller
2018-09-21when compiled with GSSAPI support, cache supported method OIDs byDamien Miller
2018-09-21In sshkey_in_file(), ignore keys that are considered for being tooDamien Miller
2018-09-21Treat connections with ProxyJump specified the same as ones with aDamien Miller
2018-09-20actually make CASignatureAlgorithms available as a config optionDamien Miller
2018-09-20Import updated moduli.Darren Tucker
2018-09-20reorder CASignatureAlgorithms, and add them to the various -o lists;Jason McIntyre
2018-09-20fix "ssh -Q sig" to show correct signature algorithm list (it wasDamien Miller
2018-09-20add CASignatureAlgorithms option for the client, allowing it to specifyDamien Miller
2018-09-20Add sshd_config CASignatureAlgorithms option to allow control overDamien Miller
2018-09-19Make "ssh-add -q" do what it says on the tin: silence output fromDamien Miller
2018-09-17When choosing a prime from the moduli file, avoid re-using theTodd C. Miller
2018-09-14second try, deals properly with missing and private-only keys:Damien Miller
2018-09-14revert following; deals badly with agent keysDamien Miller
2018-09-14garbage-collect moribund ssh_new_private() API.Damien Miller
2018-09-14Use consistent format in debug log for keys readied, offered andDamien Miller
2018-09-13Fix warnings caused by user_from_uid() and group_from_gid() nowTodd C. Miller
2018-09-13hold our collective noses and use the openssl-1.1.x API in OpenSSH;Damien Miller
2018-09-12fix edit mistake; spotted by jmc@Damien Miller
2018-09-12add SSH_ALLOWED_CA_SIGALGS - the default list of signature algorithmsDamien Miller
2018-09-12add sshkey_check_cert_sigtype() that checks a cert->signature_typeDamien Miller
2018-09-12add cert->signature_type field and keep it in sync with certificateDamien Miller
2018-09-12Add "ssh -Q sig" to allow listing supported signature algorithmsDamien Miller
2018-09-12allow key revocation by SHA256 hash and allow ssh-keygen to create KRLsDamien Miller
2018-09-12log certificate fingerprint in authentication success/failure messageDamien Miller
2018-09-07Add FALLTHROUGH comments where appropriate. Patch from jjelen at redhatDarren Tucker
2018-09-07ssh -MM requires confirmation for all operations that change theDamien Miller
2018-08-28fix misplaced parenthesis inside if-clause. it's harmless and the only issue isRicardo Mestre
2018-08-28fix build with DEBUG_PK enabledRicardo Mestre
2018-08-23memleak introduced in r1.83; from Colin WatsonDamien Miller
2018-08-21AIX reports the CODESET as "ISO8859-1" in the POSIX locale.Ingo Schwarze
2018-08-13revert compat.[ch] section of the following change. It causesDamien Miller
2018-08-12better diagnosics on alg list assembly errors; ok deraadt@ markus@Damien Miller
2018-08-10improveDamien Miller
2018-08-10Describe pubkey format, prompted by bz#2853Damien Miller
2018-08-10fix numberingDamien Miller
2018-08-08Use new private key format by default. This format is suported byDamien Miller
2018-08-04invalidate dh->priv_key after freeing it in error path; avoidsDamien Miller
2018-07-31delay bailout for invalid authenticating user until after the packetDamien Miller
2018-07-31fix some memory leaks spotted by Coverity via Jakub Jelen in bz#2366Damien Miller
2018-07-27avoid expensive channel_open_message() calls; ok djm@Markus Friedl
2018-07-27Now that ssh can't be setuid, remove the original_real_uid andDarren Tucker
2018-07-27Remove uid checks from low port binds. Now that ssh cannot beDarren Tucker
2018-07-27ssh(1) no longer supports being setuid root. Remove reference to crc32Darren Tucker
2018-07-25Don't redefine Makefile choices which come correct from bsd.*.mkTheo de Raadt
2018-07-25fix indent; Clemens GoessnitzerTheo de Raadt
2018-07-25Use the caller provided (copied) pwent struct in load_public_identity_filesBob Beck
2018-07-23oops, failed to notice that SEE ALSO got messed up;Jason McIntyre
2018-07-23Point to glob in section 7 for the actual list of special characters insteadkn
2018-07-22Switch authorized_keys example from ssh-dss to ssh-rsa since the formerDarren Tucker