summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2024-12-03Remove redundant field of definition checkTheo Buehler
2024-12-03Improve description of KbdInteractiveAuthentication. Based on bz#3658,Darren Tucker
2024-12-03support FIDO tokens that return no attestation data, e.g. recentDamien Miller
2024-12-02unbreakDamien Miller
2024-12-02prefer AES-GCM to AES-CTR; ok deraadt markusDamien Miller
2024-11-29Import regenerated moduli.Darren Tucker
2024-11-27fix argument of "Compression" directive in ssh -G config dump,Damien Miller
2024-11-27new name/link for agent I-DDamien Miller
2024-11-27mention that biometrics may be used for FIDO key user verification asDamien Miller
2024-11-26g/c outdated XXX commentsDamien Miller
2024-11-26Explicitly specify the signature algorithm when signing hostkeys-proveDamien Miller
2024-11-26when using RSA keys to sign messages, select the signature algorithmDamien Miller
2024-11-24turn off CDIAGFLAGS and turn back on INSTALL_STRIP accidentallyDamien Miller
2024-11-06ssh-agent implemented an all-or-nothing allow-list of FIDO applicationDamien Miller
2024-11-04Ignore extra groups that don't fit in the buffer passed to getgrouplist(3)Jeremie Courreges-Anglas
2024-10-27explicitly include endian.hDamien Miller
2024-10-27fix ML-KEM768x25519 KEX on big-endian systems;Damien Miller
2024-10-25mlkem768x25519-sha256 has been promoted to default key exchangeChristian Weisgerber
2024-10-25promote mlkem768x25519-sha256 to be the default key exchange;Damien Miller
2024-10-24amake ssh-agent drop all keys when it receives SIGUSR1;Damien Miller
2024-10-24relax valid_domain() checks to allow an underscore as the firstDamien Miller
2024-10-22Add a sshd debug wrapper to run all of the subprograms from the buildDarren Tucker
2024-10-22Make debug call printf("%s", NULL) safe. Prevents problems on platformsDarren Tucker
2024-10-18mention that LocalForward and RemoteForward can accept Unix domain socketDamien Miller
2024-10-18remove duplicate check; GHPR392 from Pedro MartellettoDamien Miller
2024-10-18allow "-" as output file for moduli screeningDamien Miller
2024-10-18ssh-keyscan doesn't need it's own sshfatal() definition, it canDamien Miller
2024-10-18in _ssh_order_hostkeyalgs() consider ECDSA curve type when arrangingDamien Miller
2024-10-18require control-escape character sequences passed via the '-e ^x'Damien Miller
2024-10-18remove addr.[ch] functions that are unused and visbility-restrictDamien Miller
2024-10-18unreachable POLLERR case; from ya0guang via GHPR485Damien Miller
2024-10-18s/Sx/Cm/ for external references; from Domen Puncer Kugler via GHPR501Damien Miller
2024-10-14mention SshdAuthPath option; ok djm@Christian Weisgerber
2024-10-14Split per-connection sshd-session binaryDamien Miller
2024-10-13don't start the ObscureKeystrokeTiming mitigations if there has beenDamien Miller
2024-10-12remove duplicate misc.h includeJonathan Gray
2024-10-06Turn off finite field (a.k.a modp) Diffie-Hellman key exchange in sshdDamien Miller
2024-09-26fix previous change to ssh_config Match, which broken on negatedDamien Miller
2024-09-25remove some unused defines; ok djm@Jonathan Gray
2024-09-25remove some unneeded Xo/Xc calls; from evan silbermanJason McIntyre
2024-09-25fix regression introduced when I switched the "Match" criteria tokeniserDamien Miller
2024-09-24some extra paranoia, reminded by jsg@Damien Miller
2024-09-22remove some unused defines; ok djm@Jonathan Gray
2024-09-20remove unneeded semicolons; checked by millert@Jonathan Gray
2024-09-19openssh-9.9Damien Miller
2024-09-16use 64 bit math to avoid signed underflow. upstream code relies onDamien Miller
2024-09-15minor grammar/sort fixes for refuseconnection; ok djmJason McIntyre
2024-09-15bad whitespace in config dump outputDamien Miller
2024-09-15update the Streamlined NTRU Prime code from the "ref" implementationDamien Miller
2024-09-15document Match invalid-userDamien Miller