summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2010-05-16mux support for remote forwarding with dynamic port allocation,Markus Friedl
2010-05-14Pause the mux channel while waiting for reply from aynch callbacks.Damien Miller
2010-05-14check that the certificate matches the corresponding private key beforeDamien Miller
2010-05-11don't accept certificates marked as "cert-authority" here; ok markus@Damien Miller
2010-05-07tweak previous;Jason McIntyre
2010-05-07add some optional indirection to matching of principal names listedDamien Miller
2010-05-05restore mput and mget which got lost in the tab-completion changes.Darren Tucker
2010-05-01typo; jmeltzer@Damien Miller
2010-04-26bz#1502: authctxt.success is declared as an int, but passed byDamien Miller
2010-04-23refuse to generate keys longer than OPENSSL_[RD]SA_MAX_MODULUS_BITS,Damien Miller
2010-04-23set stderr to /dev/null for subsystems rather than just closing it.Damien Miller
2010-04-23set "detach_close" flag when registering channel cleanup callbacks.Damien Miller
2010-04-23bz#1740: display a more helpful error message when $HOME isDamien Miller
2010-04-16oops, %r => remote username, not %uDamien Miller
2010-04-16tweak previous; ok djmJason McIntyre
2010-04-16tweak previous; ok djmJason McIntyre
2010-04-16revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with theDamien Miller
2010-04-15retry lookup for private key if there's no matching key with CKA_SIGNMarkus Friedl
2010-04-14expand %r => remote username in ssh_config:ProxyCommand;Damien Miller
2010-04-10fix NULL dereference; from matthew.haub AT alumni.adelaide.edu.auDamien Miller
2010-04-10show the key type that we are offering in debug(), helps distinguishDamien Miller
2010-04-10bz#1698: kill channel when pty allocation requests fail. FixedDamien Miller
2010-04-10fix terminology: we didn't find a certificate in known_hosts, we foundDamien Miller
2010-04-10bz#1746 - suppress spurious tty warning when using -O and stdinDamien Miller
2010-03-27tweak previous; ok dtuckerJason McIntyre
2010-03-26tweak previous;Jason McIntyre
2010-03-26allow buffer_get_int_ret/buffer_get_int64_ret to take a NULL pointerDamien Miller
2010-03-26Reformat default value of PreferredAuthentications entry (current formattingDarren Tucker
2010-03-26mention that -S none disables connection sharing; from Colin WatsonDamien Miller
2010-03-25from portable: getcwd(NULL, 0) doesn't work on all platforms, soDamien Miller
2010-03-16crank version to openssh-5.5 since we have a few fixes since 5.4;Damien Miller
2010-03-16spelling in error message. ok djm kettenisKevin Steves
2010-03-15also print certificate type (user or host) for ssh-keygen -LKevin Steves
2010-03-13fix a formatting error (args need quoted); noted by steveskJason McIntyre
2010-03-13Certificates are named *-cert.pub, not *_cert.pub; committing a diffDamien Miller
2010-03-13protocol conformance fix: send language tag when disconnecting normally;Damien Miller
2010-03-12do not prepend AuthorizedKeysFile with getcwd(), unbreaks relative pathsMarkus Friedl
2010-03-12unbreak AuthorizedKeys option with a $HOME-relative path; reported byDamien Miller
2010-03-10correct certificate logging and make it more consistent betweenDamien Miller
2010-03-10typos; from Ross RichardsonJason McIntyre
2010-03-08sort the list of constraints (to -O); ok djmJason McIntyre
2010-03-08document permit-agent-forwarding certificate constraint; patch fromDamien Miller
2010-03-07make internal strptime string match strftime format;Damien Miller
2010-03-07openssh-5.4Damien Miller
2010-03-07Hold authentication debug messages until after successful authentication.Darren Tucker
2010-03-05mention loading of certificate files from [private]-cert.pub whenDamien Miller
2010-03-05document certificate authentication; help/ok djmJason McIntyre
2010-03-05tweak previous;Jason McIntyre
2010-03-05make the warning for a revoked key louder and more noticableDamien Miller
2010-03-04"force-command" is not spelled "forced-command"; spotted byDamien Miller