summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2015-07-18don't ignore PKCS#11 hosted keys that return empty CKA_ID;Damien Miller
2015-07-18skip uninitialised PKCS#11 slots; patch from Jakub Jelen in bz#2427Damien Miller
2015-07-18only query each keyboard-interactive device once per authenticationDamien Miller
2015-07-17direct-streamlocal@openssh.com Unix domain foward messages do notDamien Miller
2015-07-17describe magic for setting up Unix domain socket fowards viaDamien Miller
2015-07-17fix incorrect test for SSH1 keys when compiled without SSH1 supportDamien Miller
2015-07-15fix NULL-deref when SSH1 reenabledDamien Miller
2015-07-13Add "PuTTY_Local:" to the clients to which we do not offer DH-GEX.Darren Tucker
2015-07-10Turn off DSA by default; add HostKeyAlgorithms to the server andMarkus Friedl
2015-07-09re-enable ed25519-certs if compiled w/o openssl; ok djmMarkus Friedl
2015-07-08no need to include the old buffer/key APIMarkus Friedl
2015-07-08typedefs for Cipher&CipherContext are unusedMarkus Friedl
2015-07-08xmalloc.h is unusedMarkus Friedl
2015-07-08compress.c is goneMarkus Friedl
2015-07-03another SSH_RSA_MINIMUM_MODULUS_SIZE that needed crankingDamien Miller
2015-07-03add an XXX reminder for getting correct key paths from sshd_configDamien Miller
2015-07-03refuse to generate or accept RSA keys smaller than 1024 bits;Damien Miller
2015-07-03turn off 1024 bit diffie-hellman-group1-sha1 key exchange methodDamien Miller
2015-07-03delete support for legacy v00 certificates; "sure" markus@ dtucker@Damien Miller
2015-07-01Compile-time disable SSH v.1 againDamien Miller
2015-07-01twiddle PermitRootLogin backDamien Miller
2015-07-01twiddle; (this commit marks the openssh-6.9 release)Damien Miller
2015-07-01better refuse ForwardX11Trusted=no connections attempted afterDamien Miller
2015-07-01put back default PermitRootLogin=noDamien Miller
2015-07-01openssh-6.9Damien Miller
2015-07-01reset default PermitRootLogin to 'yes' (momentarily, for release)Damien Miller
2015-06-30fatal() when a remote window update causes the window value toDamien Miller
2015-06-30Fix math error in remote window calculations that causes eventual stallsDamien Miller
2015-06-29add getpid to sandbox, reachable by grace_alarm_handlerDamien Miller
2015-06-26Fix \-escaping bug that caused forward path parsing to skip twoDamien Miller
2015-06-24correct test to sshkey_sign(); spotted by Albert S.Damien Miller
2015-06-24Revert previous commit. We still want to call setgroups in the case whereDarren Tucker
2015-06-22Don't count successful partial authentication as failures in monitor;Damien Miller
2015-06-22Don't call setgroups if we have zero groups; there's no guarantee that itDarren Tucker
2015-06-15If AuthorizedPrincipalsCommand is specified, howeverJoel Sing
2015-06-15Make the arguments to match_principals_command() similar toJoel Sing
2015-06-15return failure on RSA signature error; reported by Albert SDamien Miller
2015-06-05For "ssh -L 12345:/tmp/sock" don't fail with "No forward host name."Todd C. Miller
2015-06-05typo: accidental repetition; bz#2386Damien Miller
2015-06-02mention CheckHostIP adding addresses to known_hosts;Damien Miller
2015-05-29put back SSH1 for now - we want to make sure we don't regressDamien Miller
2015-05-28wrap all moduli-related code in #ifdef WITH_OPENSSL.Damien Miller
2015-05-28Increase the allowed length of the known host file name in the logDarren Tucker
2015-05-28Fix typo (keywork->keyword)Darren Tucker
2015-05-28add error message on ftruncate failure; bz#2176Damien Miller
2015-05-28make ssh-keygen default to ed25519 keys when compiled withoutDamien Miller
2015-05-28Remove intermediate copy of the moduli file. "make" will rebuild anyDarren Tucker
2015-05-28Remove 1k bit groups. ok deraadt@, markus@Darren Tucker
2015-05-27Reorder client proposal to prefer diffie-hellman-group-exchange-sha1 overDarren Tucker
2015-05-27Add a stronger (4k bit) fallback group that sshd can use when the moduliDarren Tucker