summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2014-02-07-Wold-style-declaration is not supported by gcc 3.Miod Vallat
2014-02-07remove some logging that makes ssh debugging output very verbose;Damien Miller
2014-02-06in ssh_create_socket(), only do the getaddrinfo for BindAddress whenDamien Miller
2014-02-05tweak synopsis: calling ssh-keygen without any arguments is fine; ok jmc@Christian Weisgerber
2014-02-04delay lowercasing of hostname until right before hostnameDamien Miller
2014-02-03fix memory leak; ECDSA_SIG_new() allocates 'r' and 's' for us, unlikeDamien Miller
2014-02-02convert memset of potentially-private data to explicit_bzero()Damien Miller
2014-01-31replace most bzero with explicit_bzero, except a few that cna be memsetTed Unangst
2014-01-30allow shutdown(2) syscall in sandbox - it may be called by packet_close()Damien Miller
2014-01-29document kbdinteractiveauthentication;Jason McIntyre
2014-01-29remove experimental, never-enabled JPAKE code; ok markus@Damien Miller
2014-01-29In the experimental, never-enabled JPAKE code: clear returned digest andDamien Miller
2014-01-29use kill(0, ...) instead of killpg(0, ...); on most operating systemsDamien Miller
2014-01-28rename digest.c to digest-openssl.c and add libc variant; ok djm@Markus Friedl
2014-01-28kill some bad Pa;Jason McIntyre
2014-01-27replace openssl MD5 with our ssh_digest_*; ok djm@Markus Friedl
2014-01-27replace openssl HMAC with an implementation based on our ssh_digest_*Markus Friedl
2014-01-25dh_need needs to be set to max(seclen, blocksize, ivlen, mac_len)Markus Friedl
2014-01-25Add a special case for the DH group size for 3des-cbc, which has anDarren Tucker
2014-01-20memleak; found by Loganaden Velvindron @ AfriNIC; ok markus@Damien Miller
2014-01-19Cast the sizeof to socklen_t so it'll work even if the supplied len isDarren Tucker
2014-01-19fix inverted meaning of 'no' and 'yes' for CanonicalizeFallbackLocalDamien Miller
2014-01-19Cast socklen_t when comparing to size_t and use socklen_t to iterate overDarren Tucker
2014-01-18explicitly define USE_PIPES to 1 to prevent redefinition warnings in portableDarren Tucker
2014-01-18Remove -Wbounded: it is now the compiler default.Martynas Venckus
2014-01-17fix log message statvfs. ok djmDarren Tucker
2014-01-17remove unused includes. ok djm@Darren Tucker
2014-01-17signed/unsigned comparison warning fix; from portableDamien Miller
2014-01-16openssh-6.5Damien Miller
2014-01-16needless and incorrect cast to size_t can break resumption ofDamien Miller
2014-01-12avoid use of OpenSSL BIGNUM type and functions for KEX withDamien Miller
2014-01-10the /etc/ssh/ssh_host_ed25519_key is loaded by default tooDamien Miller
2014-01-09ban clients/servers that suffer from SSH_BUG_DERIVEKEY, they are ancient,Damien Miller
2014-01-09Introduce digest API and use it to perform all hashing operationsDamien Miller
2014-01-09When formating the time for "ls -l"-style output, show dates in the futurePhilip Guenther
2014-01-04use standard types and formats for size_t like variables. ok dtuckerTed Unangst
2013-12-30refuse RSA keys from old proprietary clients/servers that use theDamien Miller
2013-12-29when showing other hostkeys, don't forget Ed25519 keysDamien Miller
2013-12-29don't forget to load Ed25519 certs tooDamien Miller
2013-12-29don't refuse to load Ed25519 certificatesDamien Miller
2013-12-29allow deletion of ed25519 keys from the agentDamien Miller
2013-12-29to make sure we don't omit any key types as valid CA keys again,Damien Miller
2013-12-29correct comment for key_drop_cert()Damien Miller
2013-12-29correct comment for key_to_certified()Damien Miller
2013-12-29allow ed25519 keys to appear as certificate authoritiesDamien Miller
2013-12-27correct commentDamien Miller
2013-12-27make the original RSA and DSA signing/verification code look more likeDamien Miller
2013-12-21small typoTed Unangst
2013-12-19use full name for author, with his permissionDamien Miller
2013-12-19bz#2186: don't crash (NULL deref) when deleting PKCS#11 keys from an agentDamien Miller