summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2006-03-15if no key file are given when printing the DNS host record, use theJakob Schlyter
host key file(s) as default. ok djm@
2006-03-14*AliveCountMax applies to protcol v2 only; ok dtucker, djmMarkus Friedl
2006-03-14log the originating address and not just the name when a reverseDamien Miller
mapping check fails, requested by linux AT linuon.com
2006-03-13Make ssh-add check file permissions before attempting to load privateDarren Tucker
key files multiple times; it will fail anyway and this prevents confusing multiple prompts and warnings. mindrot #1138, ok djm@
2006-03-13Allow config directives to contain whitespace by surrounding them by doubleDarren Tucker
quotes. mindrot #482, man page help from jmc@, ok djm@
2006-03-13Make ssh-keygen handle CR and CRLF line termination when converting IETFDarren Tucker
format keys, in adition to vanilla LF. mindrot #1157, tested by Chris Pepper, ok djm@
2006-03-13Set TCP_NODELAY for all connections not just "interactive" ones. FixesDarren Tucker
poor performance and protocol stalls under some network conditions (mindrot bugs #556 and #981). Patch originally from markus@, ok djm@
2006-03-13don't log that we are listening on a socket before the listen() callDamien Miller
actually succeeds, bz #1162 reported by Senthil Kumar; ok dtucker@
2006-03-12knf nitDamien Miller
2006-03-07Implement the diffie-hellman-group-exchange-sha256 key exchange methodDamien Miller
using the SHA256 code in libc (and wrapper to make it into an OpenSSL EVP), interop tested against CVS PuTTY
2006-03-04move a debug() outside of a signal handler; ok markus@ a little while backDamien Miller
2006-02-28fix logout recording when privilege separation is disabled, analysis andDamien Miller
patch from vinschen at redhat.com; tested by dtucker@ ok deraadt@
2006-02-26comma;Jason McIntyre
2006-02-26subsection is pointless here;Jason McIntyre
2006-02-26move PATTERNS to the end of the main body; requested by dtuckerJason McIntyre
2006-02-25document the order in which allow/deny directives are processed;Jason McIntyre
help/ok dtucker
2006-02-25document the possible values for KbdInteractiveDevices;Jason McIntyre
help/ok dtucker
2006-02-24oops - bits i missed;Jason McIntyre
2006-02-24some grammar/wording fixes;Jason McIntyre
2006-02-24some grammar/wording fixes;Jason McIntyre
2006-02-24more consistency fixes;Jason McIntyre
2006-02-24some consistency fixes;Jason McIntyre
2006-02-24signpost to PATTERNS section;Jason McIntyre
2006-02-24tidy up the refs to PATTERNS;Jason McIntyre
2006-02-24signpost to PATTERNS;Jason McIntyre
2006-02-24add section on patterns;Jason McIntyre
from dtucker + myself
2006-02-22move #include <ctype.h> out of includes.h; ok djm@Kevin Steves
2006-02-20move #include <sys/stat.h> out of includes.h; ok markus@Kevin Steves
2006-02-20move #include <signal.h> out of includes.h; ok markus@Kevin Steves
2006-02-20move #include <sys/un.h> out of includes.h; ok djm@Kevin Steves
2006-02-19add some vertical space;Jason McIntyre
2006-02-19grammar;Jason McIntyre
2006-02-19sync the (s)hosts.equiv FILES entries w/ those from ssh.1;Jason McIntyre
2006-02-19move the sshrc stuff out of FILES, and into its own section:Jason McIntyre
FILES is not a good place to document how stuff works;
2006-02-16sync some of the FILES entries w/ ssh.1;Jason McIntyre
2006-02-15remove ietf draft references; RFC list now maintained in ssh.1;Jason McIntyre
2006-02-15remove the IETF draft references and replace them with some updated RFCs;Jason McIntyre
list from markus;
2006-02-15typo in comment; ok djm@David Krause
2006-02-13sort FILES and use a -compact list;Jason McIntyre
2006-02-13- avoid nasty line splitJason McIntyre
- `*' does not need to be escaped
2006-02-13turn this into an example ssh_known_hosts file; ok djmJason McIntyre
2006-02-13small tweaks for the ssh_known_hosts section;Jason McIntyre
2006-02-13no need to subsection the authorized_keys examples - instead, convertJason McIntyre
this to look like an actual file. also use proto 2 keys, and use IETF example addresses; much help from djm; ok markus djm;
2006-02-12sort the list of options permissable w/ authorized_keys;Jason McIntyre
ok djm dtucker
2006-02-12rework the description of authorized_keys a little;Jason McIntyre
2006-02-12slight rewording; ok djmJason McIntyre
2006-02-12raise error when the user specifies a RekeyLimit that is smaller than 16Damien Miller
(the smallest of our cipher's blocksize) or big enough to cause integer wraparound; ok & feedback dtucker@
2006-02-12add a %l expansion code to the ControlPath, which is filled in with theDamien Miller
local hostname at runtime. Requested by henning@ to avoid some problems with /home on NFS; ok dtucker@
2006-02-11type correctness; from Ray Lai in PR 5011; ok millert@Otto Moerbeek
2006-02-10move #include <sys/wait.h> out of includes.h; ok markus@Kevin Steves