summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2012-05-13Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust testsDarren Tucker
2012-04-23fix function proto/source mismatchDamien Miller
2012-04-20use "brackets" instead of "braces", for consistency;Jason McIntyre
2012-04-20setlinebuf(3) is more readable than setvbuf(.., _IOLBF, ...)Damien Miller
2012-04-12mention AuthorizedPrincipalsFile=none defaultDamien Miller
2012-04-12VersionAddendum option to allow server operators to append some arbitraryDamien Miller
2012-04-11now that sshd defaults to offering ECDSA keys, ssh-keyscan should alsoDamien Miller
2012-04-11don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for aDamien Miller
2012-04-11Support "none" as an argument for AuthorizedPrincipalsFile to indicateDamien Miller
2012-04-11don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for aDamien Miller
2012-03-29Add PermitOpen none option based on patch from Loganaden VelvindronDarren Tucker
2012-03-28explain certificate extensions/crit split rationale. Mention requirementDamien Miller
2012-03-15root should always be excluded from the test for /etc/nologin insteadPhilip Guenthe
2012-02-29allow conversion of RSA1 keys to public PEM and PKCS8; "nice" markus@Damien Miller
2012-02-09move from 6.0-beta to 6.0Markus Friedl
2012-01-25packet_read_poll() is not used anymore.Markus Friedl
2012-01-25memleak in key_load_file(); from Jan KlemkowMarkus Friedl
2012-01-25do not permit SSH2_MSG_SERVICE_REQUEST/ACCEPT during rekeying;Markus Friedl
2012-01-18Ensure that $DISPLAY contains only valid characters before using it toDarren Tucker
2012-01-16Fix a memory leak in pkcs11_rsa_private_encrypt(), reported by Jan Klemkow.Miod Vallat
2012-01-08Fix memory leak in ssh_ecdsa_verify(); from Loganaden Velvindron, ok markus@Miod Vallat
2012-01-07fix double-free in new session handlerDamien Miller
2012-01-05memleak on error pathDamien Miller
2011-12-07fix some harmless and/or unreachable int overflows;Damien Miller
2011-12-04revert:Damien Miller
2011-12-02fix bz#1934: newer OpenSSL versions will require HMAC_CTX_Init beforeDamien Miller
2011-12-02fix bz#1948: ssh -f doesn't fork for multiplexed connection.Damien Miller
2011-11-16Don't leak list in complete_cmd_parse if there are no commands found.Owain Ainsworth
2011-10-24bz#1859: send tty break to pty master instead of (probably alreadyDamien Miller
2011-10-24bz#1943: unbreak stdio forwarding when ControlPersist is in user - sshDamien Miller
2011-10-19typo in comment; patch from Michael W. BombardieriDamien Miller
2011-10-19s/tmpfile/tmp/ to make this -Wshadow cleanDamien Miller
2011-10-18add -k to usage(); reminded by jmc@Damien Miller
2011-10-18ssh(1): skip attempting to create ~/.ssh when -F is passed; ok markus@Damien Miller
2011-10-18new "ssh-add -k" option to load plain keys (skipping certificates);Damien Miller
2011-10-18remove explict search for \0 in packet strings, this job is now doneDamien Miller
2011-10-16add missing includes to unbreak tree; fix from rpointelStefan Sperling
2011-10-16put -K in the right place (usage());Jason McIntyre
2011-10-16Add optional checkpoints for moduli screening. feedback & ok deraadtDarren Tucker
2011-10-04silence error spam for "ls */foo" in directory with files; bz#1683Damien Miller
2011-09-30fix inverted test that caused logspam; spotted by henning@Damien Miller
2011-09-30don't attempt privsep cleanup when not using privsep; ok markus@Darren Tucker
2011-09-25improve the AuthorizedPrincipalsFile debug log message to includeDamien Miller
2011-09-23unbreak remote portforwarding with dynamic allocated listen ports:Markus Friedl
2011-09-23Add wildcard support to PermitOpen, allowing things like "PermitOpenDarren Tucker
2011-09-22don't let remote_glob() implicitly sort its results in do_globbed_ls() -Damien Miller
2011-09-12fix leak in do_lsreaddir(); ok djmMarkus Friedl
2011-09-11fix leaks in do_hardlink() and do_readlink(); bz#1921Markus Friedl
2011-09-11document new -O cancel command; ok djm@Okan Demirmen
2011-09-10support cancellation of local/dynamic forwardings from ~C commandline;Markus Friedl