summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2013-01-18add -Q to the options list; ok djmJason McIntyre
2013-01-18tweak previous;Jason McIntyre
2013-01-18-u before -V in usage();Jason McIntyre
2013-01-18tweak previous;Jason McIntyre
2013-01-18fix KRL generation bug for list sectionsDamien Miller
2013-01-18RCD IDs help us keep portable in synchDamien Miller
2013-01-17add support for Key Revocation Lists (KRLs). These are a compact way toDamien Miller
2013-01-12improve error message for integrity failure in AES-GCM modes; ok markus@Damien Miller
2013-01-09correctly initialise fingerprint type for fingerprinting PKCS#11 keysDamien Miller
2013-01-08support AES-GCM as defined in RFC 5647 (but with simpler KEX handling)Markus Friedl
2013-01-04sftp-server.8: add argument name to -dJason McIntyre
2013-01-03allow fingerprinting of keys hosted in PKCS#11 tokens: ssh-keygen -lD ...Damien Miller
2013-01-03allow specification of an alternate start directory for sftp-server(8)Damien Miller
2013-01-03fix description of MAC calculation for EtM modes; ok markus@Damien Miller
2013-01-03add a couple of ServerOptions members that should be copied to the privsepDamien Miller
2013-01-02correct format description for SSH_AGENTC_ADD_RSA_ID_CONSTRAINEDDamien Miller
2013-01-02channel_setup_local_fwd_listener() returns 0 on failure, not -veDamien Miller
2012-12-14use correct string in error message; from rustybsd at gmx.frDarren Tucker
2012-12-12use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolledChristian Weisgerber
2012-12-12reset incoming_packet buffer for each new packet in EtM-case, too;Markus Friedl
2012-12-11fix typo, s/tem/etm in hmac-ripemd160-tem. ok markus@Stuart Henderson
2012-12-11add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithmsMarkus Friedl
2012-12-11drain the log messages after receiving the keystate from the unprivMarkus Friedl
2012-12-07Cast signal to int for logging. A no-op on openbsd (they're always ints)Darren Tucker
2012-12-05prevent double-free of comment; ok djm@Markus Friedl
2012-12-03tweak previous;Jason McIntyre
2012-12-03Fix compilation with -Wall -Werror (trivial type fixes)Damien Miller
2012-12-02make AllowTcpForwarding accept "local" and "remote" in addition to itsDamien Miller
2012-12-02make deleting explicit keys "ssh-add -d" symmetric with adding keys -Damien Miller
2012-12-02Fixes logging of partial authentication when privsep is enabledDamien Miller
2012-12-02Make IdentitiesOnly apply to keys obtained from a PKCS11Provider.Damien Miller
2012-11-14allow the full range of unsigned serial numbers; 'fine' deraadt@Damien Miller
2012-11-14fix username passed to helper programDamien Miller
2012-11-04Support multiple required authentication via an AuthenticationMethodsDamien Miller
2012-11-04Remove default of AuthorizedCommandUser. Administrators are now expectedDamien Miller
2012-10-31tweak previous;Jason McIntyre
2012-10-30new sshd_config option AuthorizedKeysCommand to support fetchingDamien Miller
2012-10-05fix signed vs unsigned warning; feedback & ok: djm@Markus Friedl
2012-10-04add umac128 variant; ok djm@ at n2k12Markus Friedl
2012-10-02fix -z option, broken in revision 1.215Damien Miller
2012-10-01pasto; ok djm@Christian Weisgerber
2012-09-26last stage of rfc changes, using consistent Rs/Re blocks, and moving theJason McIntyre
2012-09-21Fix handling of filenames containing escaped globbing characters and escapeDarren Tucker
2012-09-21Fix improper handling of absolute paths when PWD is part of the completedDarren Tucker
2012-09-18Add bounds check on sftp tab-completion. Part of a patch from from Jean-MarcDarren Tucker
2012-09-17clear old keys on rekeing; ok djmMarkus Friedl
2012-09-17an XXX for laterDamien Miller
2012-09-14remove unused variableMarkus Friedl
2012-09-13Fix comment line lengthDarren Tucker
2012-09-07when muxmaster is run with -N, make it shut down gracefully when a clientDarren Tucker