summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2015-12-02Add "cpath" to the ssh-agent pledge so the cleanup handler can unlink().Doug Hogan
2015-12-02ssh-agent pledge needs proc for askpass; spotted by todd@Damien Miller
2015-12-01basic pledge() for ssh-agent, more refinement neededDamien Miller
2015-11-29pledge, better fatal() messages; feedback deraadt@Damien Miller
2015-11-28do not leak temp file if there is no known_hosts fileTheo de Raadt
2015-11-28don't include port number in tcpip-forward replies for requestsDamien Miller
2015-11-27pledge "stdio rpath wpath cpath fattr tty proc exec" except for theTheo de Raadt
2015-11-20allow comment change for all supported formatsAlexander Hall
2015-11-20add cast to make -Werror cleanDamien Miller
2015-11-19ban ConnectionAttempts=0, it makes no sense and would causeDamien Miller
2015-11-19trailing whitespaceDamien Miller
2015-11-19print host certificate contents at debug levelDamien Miller
2015-11-19move the certificate validity formatting code to sshkey.[ch]Damien Miller
2015-11-18fix "ssh-keygen -l" of private key, broken in support forDamien Miller
2015-11-16Replace remaining calls to index(3) with strchr(3). OK jca@ krw@Todd C. Miller
2015-11-16Allow fingerprinting from standard input "ssh-keygen -lf -"Damien Miller
2015-11-16always call privsep_preauth_child() regardless of whether sshdDamien Miller
2015-11-16improve sshkey_read() semantics; only update *cpp when a keyDamien Miller
2015-11-161) Use xcalloc() instead of xmalloc() to check for potential overflow.Loganaden Velvindron
2015-11-16Add a new authorized_keys option "restrict" that includes all currentDamien Miller
2015-11-15correct section number for ssh-agent;Jason McIntyre
2015-11-15do not confuse mandoc by presenting "Dd";Jason McIntyre
2015-11-15Add an AddKeysToAgent client option which can be set to 'yes', 'no',Joshua Stein
2015-11-13send SSH2_MSG_UNIMPLEMENTED replies to unexpected messages duringDamien Miller
2015-11-13Support "none" as an argument for sshd_config ForceCommand andDamien Miller
2015-11-13support multiple certificates (one per line) and reading fromDamien Miller
2015-11-13list a couple more options usable in Match blocks; bz#2489Damien Miller
2015-11-11improve PEEK/POKE macros: better casts, don't multiply evaluateDamien Miller
2015-11-11remove prototypes for long-gone s/key support; ok dtucker@Damien Miller
2015-11-08-c before -H, in SYNOPSIS and usage();Jason McIntyre
2015-11-08Add "ssh-keyscan -c ..." flag to allow fetching certificates insteadDamien Miller
2015-11-08remove slogin links; ok deraadt markus djmJason McIntyre
2015-11-08fix OOB read in packet code caused by missing return statementDamien Miller
2015-11-061. rlogin and rsh are long gonemmcc
2015-11-05"commandline" -> "command line", since there are so few examplesJason McIntyre
2015-10-29Fix "PubkeyAcceptedKeyTypes +..." inside a Match block; ok dtucker@Damien Miller
2015-10-27fix execv arguments in a way less likely to cause grief for -portable;Damien Miller
2015-10-27log certificate serial in verbose() messages to match the mainDamien Miller
2015-10-27avoid de-const warning & shrink; ok dtucker@Damien Miller
2015-10-25Expand tildes in filenames passed to -i before checking whether or not theDarren Tucker
2015-10-25Do not prepend "exec" to the shell command run by "Match exec" in a configDarren Tucker
2015-10-24fix keyscan output for multiple hosts/addrs on one line whenDamien Miller
2015-10-24skip "Could not chdir to home directory" message when chrootedDamien Miller
2015-10-24Handle the split of tun(4) "link0" into tap(4) in ssh tun-forwarding.Stuart Henderson
2015-10-21fix memory leak in error pathGleydson Soares
2015-10-21Remove Diffie-Hellman moduli entries below 2048.Doug Hogan
2015-10-20Compare pointers to NULL rather than 0.mmcc
2015-10-20Replace a function-local allocation with stack memory.mmcc
2015-10-16increase the minimum modulus that we will send or accept inDamien Miller
2015-10-16better handle anchored FQDNs (e.g. 'cvs.openbsd.org.') in hostnameDamien Miller