summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2020-02-03use better markup for challenge and write-attestation,Jason McIntyre
2020-02-02Output (none) in debug in the case in the CheckHostIP=no case asDarren Tucker
2020-02-02Prevent possible null pointer deref of ip_str in debug.Darren Tucker
2020-02-02shuffle the challenge keyword to keep the -O list sorted;Jason McIntyre
2020-02-01tweak previous;Jason McIntyre
2020-01-31whitespaceDamien Miller
2020-01-31force early logging to stderr if debug_flag (-d) is set; avoidsDamien Miller
2020-01-31mistake in previous: filling the incorrect bufferDamien Miller
2020-01-31Add a sshd_config "Include" directive to allow inclusion of files.Damien Miller
2020-01-31spelling fix;Jason McIntyre
2020-01-30document changed default for UpdateHostKeysDamien Miller
2020-01-30enable UpdateKnownHosts=yes if the configuration specifies only theDamien Miller
2020-01-30use sshpkt_fatal() instead of plain fatal() for ssh_packet_write_poll()Damien Miller
2020-01-30check the return value of ssh_packet_write_poll() and callDamien Miller
2020-01-30have sshpkt_fatal() save/restore errno before we potentiallyDamien Miller
2020-01-29markus suggests a simplification to previousDamien Miller
2020-01-29give more context to UpdateHostKeys messages, mentioning that theDamien Miller
2020-01-28changes to support FIDO attestationDamien Miller
2020-01-28disable UpdateHostKeys=ask when in quiet mode;Damien Miller
2020-01-28make IPTOS_DSCP_LE available via IPQoS directive; bz2986, based onDamien Miller
2020-01-27disable UpdateHostKeys=ask if command is specified; ok djm@ sthen@Markus Friedl
2020-01-26for UpdateHostKeys, don't report errors for unsupported key types -Damien Miller
2020-01-26downgrade error() for missing subsequent known_hosts files to debug()Damien Miller
2020-01-25clarify that BatchMode applies to all interactive prompts (e.g. host keyDamien Miller
2020-01-25tidy headers; some junk snuck into sshbuf-misc.c and sshbuf-io.cDamien Miller
2020-01-25improve the error message for u2f enrollment errors by makingDamien Miller
2020-01-25factor out reading/writing sshbufs to dedicated functions;Damien Miller
2020-01-25add a comment describing the ranges of channel IDs that we use;Damien Miller
2020-01-25make sshd_config:ClientAliveCountMax=0 disable the connection killingDamien Miller
2020-01-25clarify order of AllowUsers/DenyUsers vs AllowGroups/DenyGroups;Damien Miller
2020-01-25when AddKeysToAgent=yes is set and the key contains no comment,Damien Miller
2020-01-25group14-sha1 is no longer a default algorithmTed Unangst
2020-01-25reword HashKnownHosts description a little more; some people foundDamien Miller
2020-01-25weaken the language for what HashKnownHosts provides with regardsDamien Miller
2020-01-25the GatewayPorts vs -R listen address selection logic is stillDamien Miller
2020-01-25mention that permitopen=/PermitOpen do no name to addressDamien Miller
2020-01-25unrevert this:Damien Miller
2020-01-25set UpdateKnownHosts=ask by default; bz#2894; ok markus@Damien Miller
2020-01-25allow UpdateKnownHosts=yes to function when multiple known_hosts filesDamien Miller
2020-01-25process security key provider via realpath() in agent, avoidsDamien Miller
2020-01-25expose PKCS#11 key labels/X.509 subjects as commentsDamien Miller
2020-01-24tweak proctitle to include sshd arguments, as these are frequentlyDamien Miller
2020-01-24add xextendf() to extend a string with a format (reallocating asDamien Miller
2020-01-24minor tweaks to ssh-keygen -Y find-principals:Damien Miller
2020-01-24remove ssh-rsa (SHA1) from the list of allowed CA signature algorithmsDamien Miller
2020-01-24when signing a certificate with an RSA key, default to a safe signatureDamien Miller
2020-01-24allow PEM export of DSA and ECDSA keys; bz3091, patch from Jakub JelenDamien Miller
2020-01-23ssh-keygen -Y find-principals fixes based on feedback from Markus:Damien Miller
2020-01-23Fix typo in comment.Darren Tucker
2020-01-23Make zlib optional. This adds a "ZLIB" build time option that allowsDarren Tucker