summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2003-06-04mop up some more 3/4 license issuesTheo de Raadt
2003-06-04kill ssh process on receipt of signal; ok markus@Damien Miller
2003-06-04kill ssh process upon receipt of signal, bz #241.Damien Miller
based on patch from esb AT hawaii.edu; ok markus@
2003-06-04ansify; ok markus@Damien Miller
2003-06-04remove bitrotten commet; ok markus@Damien Miller
2003-06-04remove duplicated group-dropping code; ok markus@Damien Miller
2003-06-04disable challenge/response and keyboard-interactive auth methods upon hostkeyDamien Miller
mismatch. based on patch from fcusack AT fcusack.com. bz #580; ok markus@
2003-06-03Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
rescinded 22 July 1999. Proofed by myself and Theo.
2003-06-02deprecate VerifyReverseMapping since it's dangerous if combinedMarkus Friedl
with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@
2003-06-02VerifyHostKeyDNS is v2 only. ok markus@Jakob Schlyter
2003-05-29seteuid and setegid; markus okTheo de Raadt
2003-05-26fix format strings; ok markus@Damien Miller
2003-05-24cast some types for printing; ok markus@Damien Miller
2003-05-24pass logged data through strnvis; ok markusDamien Miller
2003-05-23fix leak; ok markus@Damien Miller
2003-05-20new sentence, new lineJason McIntyre
2003-05-20- new sentence, new lineJason McIntyre
- added .Xr's - typos ok djm@
2003-05-18use syslog_r() in a signal handler called place; markus okTheo de Raadt
2003-05-17experimental support for aes-ctr modes fromMarkus Friedl
http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt ok djm@
2003-05-17just in case, put numbers to sscanf %s arg.Jun-ichiro itojun Hagino
2003-05-17Don't link with unneeded kerberos librariesHans Insulander
2003-05-16add AddressFamily option to ssh_config (like -4, -6 on commandline).Damien Miller
Portable bug #534; ok markus@
2003-05-15add a ConnectTimeout option to ssh, based on patch fromDamien Miller
Jean-Charles Longuet (jclonguet at free.fr); portable #207 ok markus@
2003-05-15fix 64bit issue; report itojun@Markus Friedl
2003-05-15warn for unsupported config option. ok markus@Jakob Schlyter
2003-05-15Make "ssh -V" print the OpenSSL version in a human readable form. PatchDamien Miller
from Craig Leres (mindrot at ee.lbl.gov); ok markus@
2003-05-15disable kerberos when not supported. ok markus@Jakob Schlyter
2003-05-15~B is ssh2 onlyMarkus Friedl
2003-05-15Teach ls how to display multiple column display and allow users to returnmouring
to single column format via 'ls -1'. OK @djm
2003-05-15Make put/get (globed and nonglobed) code more consistant. OK djm@mouring
2003-05-15avoid warning; ok jakob@Damien Miller
2003-05-15split out custom EVP ciphersMarkus Friedl
2003-05-15add missing freerrsetJakob Schlyter
2003-05-15always parse kerberos options. ok djm@ markus@Jakob Schlyter
2003-05-15cleanup unregister of per-method packet handlers; ok djm@Markus Friedl
2003-05-14sshfp contains fingerprints, not keysJakob Schlyter
2003-05-14rename enumJakob Schlyter
2003-05-14update license, remove 3rd clause. ok author (me)Jakob Schlyter
2003-05-14allow to send a BREAK to the remote system; ok variousMarkus Friedl
2003-05-14add experimental support for verifying hos keys using DNS as describedJakob Schlyter
in draft-ietf-secsh-dns-xx.txt. more information in README.dns. ok markus@ and henning@
2003-05-14setup -> set up;Jason McIntyre
from wiz@netbsd
2003-05-14http://bugzilla.mindrot.org/show_bug.cgi?id=560Markus Friedl
Privsep child continues to run after monitor killed. Pass monitor signals through to child; Darren Tucker
2003-05-14- better formatting in SYNOPSISJason McIntyre
- whitespace at EOL ok djm@
2003-05-14implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@Markus Friedl
server interops with commercial client; ok jakob@ djm@
2003-05-14emphasise the batchmode functionality and make reference to pubkey auth,Damien Miller
both of which are FAQs; ok markus@
2003-05-14ranges for per auth method messagesMarkus Friedl
2003-05-12typo: DSA keys are of type ssh-dss; Brian PooleMarkus Friedl
2003-05-12for pubkey authentication try the user keys in the following order:Markus Friedl
1. agent keys that are found in the config file 2. other agent keys 3. keys that are only listed in the config file this helps when an agent has many keys, where the server might close the connection before the correct key is used. report & ok pb@
2003-05-11make channel_new() strdup the 'remote_name' (not the caller); ok theoMarkus Friedl
2003-05-11change key_load_public to try to read a public from:Markus Friedl
rsa1 private or rsa1 public and ssh2 keys. this makes ssh-keygen -e fail for ssh1 keys more gracefully for example; report from itojun (netbsd pr 20550).