summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2012-08-24comment about bsd.own.mk is now false; ok markusTheo de Raadt
2012-08-17Send client banner immediately, rather than waiting for the server toDamien Miller
move first for SSH protocol 2 connections (the default). Patch based on one in bz#1999 by tls AT panix.com, feedback dtucker@ ok markus@
2012-08-17print details of which host lines were deleted when usingDamien Miller
"ssh-keygen -R host"; ok markus@
2012-08-17add some comments about better handling first-KEX-follows notificationsDamien Miller
from the server. Nothing uses these right now. No binary change
2012-08-17Force a clean shutdown of ControlMaster client sessions when the ~. escapeDarren Tucker
sequence is used. This means that ~. should now work in mux clients even if the server is no longer responding. Found by tedu, ok djm.
2012-08-15a little more info on certificate validity;Jason McIntyre
requested by Ross L Richardson, and provided by djm
2012-08-02remove leftover NOLINT, WANTLINT, LINTFLAGS, LOBJ vars and lint targets.Okan Demirmen
ok guenther@
2012-07-22openssh 6.1Markus Friedl
2012-07-13handle long comments in config files better. bz#2025, ok markusDarren Tucker
2012-07-10Turn on systrace sandboxing of pre-auth sshd by default for new installsDamien Miller
by shipping a config that overrides the current UsePrivilegeSeparation=yes default. Make it easier to flip the default in the future by adding too. prodded markus@ feedback dtucker@ "get it in" deraadt@
2012-07-06missing full stop in usage();Jason McIntyre
2012-07-06move setting of tty_flag to after config parsing so RequestTTY optionsDamien Miller
are correctly picked up. bz#1995 patch from przemoc AT gmail.com; ok dtucker@
2012-07-06fix memory leak of passed-in environment variables and connectionDamien Miller
context when new session message is malformed; bz#2003 from Bert.Wesarg AT googlemail.com
2012-07-06Add options to specify starting line number and number of lines to processDarren Tucker
when screening moduli candidates. This allows processing of different parts of a candidate moduli file in parallel. man page help jmc@, ok djm@
2012-07-02fix a couple of "assigned but not used" warnings. ok markus@Darren Tucker
2012-07-02set interactive ToS for forwarded X11 sessions. ok djm@Darren Tucker
2012-06-30fix a during the load of the sandbox policies (child can still makeMarkus Friedl
the read-syscall and wait forever for systrace-answers) by replacing the read/write synchronisation with SIGSTOP/SIGCONT; report and help hshoexer@; ok djm@, dtucker@
2012-06-29match the documented MAC order of preference to the actual one; ok dtucker@Christian Weisgerber
2012-06-28Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs since they were removedDarren Tucker
from draft6 of the spec and will not be in the RFC when published. Patch from mdb at juniper net via bz#2023, ok markus.
2012-06-26Add mquery to the list of allowed syscalls for "UsePrivilegeSeparationDarren Tucker
sandbox" since malloc now uses it. From johnw.mail at gmail com.
2012-06-22Remove unused variable leftover from tab-completion changes.Darren Tucker
From Steve.McClellan at radisys com, ok markus@
2012-06-22remove dead code following 'for (;;)' loops.Darren Tucker
From Steve.McClellan at radisys com, ok markus@
2012-06-21fix strlcpy truncation check. from carsten at debian org, ok markusDarren Tucker
2012-06-20initialise accept() backoff timer to avoid EINVAL from select(2) inDamien Miller
rekeying
2012-06-19tweak previous; ok markusJason McIntyre
2012-06-19sshd_config: extend Match to allow AcceptEnv and {Allow,Deny}{Users,Groups}Markus Friedl
this allows 'Match LocalPort 1022' combined with 'AllowUser bauer' ok djm@ (back in March)
2012-06-18Clarify description of -W. Noted by Steve.McClellan at radisys com, ok jmcDarren Tucker
2012-06-18Remove mention of 'three' key files since there are now four. FromDarren Tucker
Steve.McClellan at radisys com.
2012-06-18RSA instead of DSA twice. From Steve.McClellan at radisys comDarren Tucker
2012-06-18correct sizeof usage. patch from saw at online.de, ok deraadtDarren Tucker
2012-06-01fix memory leak when mux socket creation fails; bz#2002 from bert.wesargDamien Miller
AT googlemail.com
2012-06-01correct types of port numbers (integers, not strings); bz#2004 fromDamien Miller
bert.wesarg AT googlemail.com
2012-05-23add support for RFC6594 SSHFP DNS records for ECDSA key types.Damien Miller
patch from bugzilla-m67 AT nulld.me in bz#1978; ok + tweak markus@
2012-05-19Document PermitOpen none. bz#2001, patch from Loganaden VelvindronDarren Tucker
2012-05-13Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust testsDarren Tucker
to match. Feedback and ok djm@ markus@.
2012-04-23fix function proto/source mismatchDamien Miller
2012-04-20use "brackets" instead of "braces", for consistency;Jason McIntyre
2012-04-20setlinebuf(3) is more readable than setvbuf(.., _IOLBF, ...)Damien Miller
2012-04-12mention AuthorizedPrincipalsFile=none defaultDamien Miller
2012-04-12VersionAddendum option to allow server operators to append some arbitraryDamien Miller
text to the SSH-... banner; ok deraadt@ "don't care" markus@
2012-04-11now that sshd defaults to offering ECDSA keys, ssh-keyscan should alsoDamien Miller
look for them by default; bz#1971
2012-04-11don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for aDamien Miller
while; ok deraadt@ markus@
2012-04-11Support "none" as an argument for AuthorizedPrincipalsFile to indicateDamien Miller
no file should be read.
2012-04-11don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for aDamien Miller
while; ok deraadt@ markus@
2012-03-29Add PermitOpen none option based on patch from Loganaden VelvindronDarren Tucker
(bz #1949). ok djm@
2012-03-28explain certificate extensions/crit split rationale. Mention requirementDamien Miller
that each appear at most once per cert.
2012-03-15root should always be excluded from the test for /etc/nologin insteadPhilip Guenthe
of having it always enforced even when marked as ignorenologin. This regressed when the logic was incompletely flipped around in rev 1.251 ok halex@ millert@
2012-02-29allow conversion of RSA1 keys to public PEM and PKCS8; "nice" markus@Damien Miller
2012-02-09move from 6.0-beta to 6.0Markus Friedl
2012-01-25packet_read_poll() is not used anymore.Markus Friedl
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-13 20:57:03 +0000