summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2017-01-06keep the tokens list sorted;Jason McIntyre
2017-01-06fix previousDamien Miller
2017-01-06show a useful error message when included config files can't beDamien Miller
2017-01-06sshd_config is documented to set GSSAPIStrictAcceptorCheck=yes byDamien Miller
2017-01-06Avoid confusing error message when attempting to use ssh-keyscan builtDamien Miller
2017-01-06Re-add '%k' token for AuthorizedKeysCommand which was lost during theDarren Tucker
2017-01-04unbreak Unix domain socket forwarding for root; ok markus@Damien Miller
2017-01-04relax PKCS#11 whitelist a bit to allow libexec as well as libDamien Miller
2017-01-03check number of entries in SSH2_FXP_NAME response; avoidsDamien Miller
2016-12-30fix deadlock when keys/principals command produces a lot of outputDamien Miller
2016-12-19openssh-7.4Damien Miller
2016-12-15Add missing braces in DenyUsers code. Patch from zev at bewilderbeest.net,Darren Tucker
2016-12-15Fix text in error message. Patch from zev at bewilderbeest.net.Darren Tucker
2016-12-14disable Unix-domain socket forwarding when privsep is disabledDamien Miller
2016-12-09log connections dropped in excess of MaxStartups at verbose LogLevel;Damien Miller
2016-12-06make IdentityFile successfully load and use certificates that have noDamien Miller
2016-12-04Fix public key authentication when multiple authentication is in use.Damien Miller
2016-12-04Unlink PidFile on SIGHUP and always recreate it when the new sshd starts.Darren Tucker
2016-11-30tweak previous;Jason McIntyre
2016-11-30add a whitelist of paths from which ssh-agent will load (viaDamien Miller
2016-11-30Add a sshd_config DisableForwaring option that disables X11, agent,Damien Miller
2016-11-30When a forced-command appears in both a certificate and anDamien Miller
2016-11-30On startup, check to see if sshd is already daemonized and if so,Darren Tucker
2016-11-29Factor out code to disconnect from controlling terminal into its ownDarren Tucker
2016-11-25use sshbuf_allocate() to pre-allocate the buffer used for loadingDamien Miller
2016-11-25split allocation out of sshbuf_reserve() into a separateDamien Miller
2016-11-23allow ClientAlive{Interval,CountMax} in Match; ok dtucker, djmMarkus Friedl
2016-11-08unbreak DenyUsers; reported by henning@Damien Miller
2016-11-06Validate address ranges for AllowUser/DenyUsers at configuration loadDamien Miller
2016-10-28Improve pkcs11_add_provider() logging: demote some excessivelyDamien Miller
2016-10-25Fix logic in add_local_forward() that inverted a test when code wasJonathan Gray
2016-10-24Remove dead breaks, found via opencoverage.net. ok deraadt@Darren Tucker
2016-10-23Factor out "can bind to low ports" check into its own function. This will makeDarren Tucker
2016-10-19When tearing down ControlMaster connecctions, don't pollute stderr whenDarren Tucker
2016-10-18Remove channel_input_port_forward_request(); the only caller was theDarren Tucker
2016-10-18Install a signal handler for tty-generated signals and wait for theTodd C. Miller
2016-10-15various formatting fixes, specifically removing Dq;Jason McIntyre
2016-10-11Add a per-packet input hook that is called with the decrypted packetDamien Miller
2016-10-10Unregister the KEXINIT handler after message has been received.Markus Friedl
2016-10-07tidy up the formatting in this file. more specifically, replaceJason McIntyre
2016-10-04add a comment about implicitly-expected checks toDamien Miller
2016-09-30fix some -Wpointer-sign warnings in the new mux proxy; ok markus@Damien Miller
2016-09-30ssh proxy mux mode (-O proxy; idea from Simon Tatham):Markus Friedl
2016-09-28put back some pre-auth zlib bits that I shouldn't have removed -Damien Miller
2016-09-28restore pre-auth compression support in the client -- the previousDamien Miller
2016-09-28use a separate TOKENS section, as we've done for sshd_config(5);Jason McIntyre
2016-09-28Remove support for pre-authentication compression. Doing compressionDamien Miller
2016-09-26Avoid a theoretical signed integer overflow should BN_num_bytes()Damien Miller
2016-09-22missing bit from previous commitDamien Miller
2016-09-22organise the token stuff into a separate section;Jason McIntyre