summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2021-12-07better error message for FIDO keys when we can't match them to a tokenDamien Miller
2021-12-05fix unintended sizeof pointer in debug pathJonathan Gray
2021-12-04RSA/SHA-1 is not used by default anymore on the serverChristian Weisgerber
2021-12-02hash full host:port when asked to hash output, fixes hashes for non-Damien Miller
2021-12-02improve the testing of credentials against inserted FIDO keys a littleDamien Miller
2021-12-02move check_sk_options() up so we can use it earlierDamien Miller
2021-12-02ssh-rsa is no longer in the default for PubkeyAcceptedAlgorithms.Darren Tucker
2021-12-02don't put the tty into raw mode when SessionType=none, avoids ^c beingDamien Miller
2021-11-28sshsig: return "key not found" when searching empty files rather thanDamien Miller
2021-11-28ssh-keygen -Y match-principals doesn't accept any -O optionsDamien Miller
2021-11-28fix indenting in last commitDamien Miller
2021-11-28missing initialisation for oerrnoDamien Miller
2021-11-27Add ssh-keygen -Y match-principals operation to perform matching ofDamien Miller
2021-11-25debug("func: ...") -> debug_f("...")Damien Miller
2021-11-18less confusing debug message; bz#3365Damien Miller
2021-11-18avoid xmalloc(0) for PKCS#11 keyid for ECDSA keys (we already did thisDamien Miller
2021-11-18ssh-keygen -Y find-principals was verifying key validity when usingDamien Miller
2021-11-18check for POLLHUP wherever we check for POLLINDamien Miller
2021-11-18fd leak in sshd listen loop error path; from Gleb SmirnoffDamien Miller
2021-11-18check for POLLHUP as well as POLLIN in sshd listen loop;Damien Miller
2021-11-18check for POLLHUP as well as POLLIN, handle transient IO errors as wellDamien Miller
2021-11-17set num_listen_socks to 0 on close-all instead of -1, whichDamien Miller
2021-11-14use ppoll() instead of pselect()Theo de Raadt
2021-11-14match .events with .fd betterTheo de Raadt
2021-11-14convert select() to poll()Theo de Raadt
2021-11-13replace select() with ppoll(), including converting timeval's to timespec'sTheo de Raadt
2021-11-13It really looks like pledge "stdio dns" is possible earlier.Theo de Raadt
2021-11-12aggressively pre-fill the pollfd array with fd=-1Theo de Raadt
2021-11-11Convert from select() to ppoll(). Along the way, I observed that theTheo de Raadt
2021-11-10add the sntrup761x25519-sha512@openssh.com hybrid ECDH/x25519 +Damien Miller
2021-11-10fix ssh-keysign for KEX algorithms that use SHA384/512 exchange hashes;Damien Miller
2021-11-08improve error message when trying to expand a ~user path for aDamien Miller
2021-11-06Plug a couple of minor mem leaks. From beldmit at gmail.com via githubDarren Tucker
2021-11-05move cert_filter_principals() to earlier in the file for reuse;Damien Miller
2021-11-03Many downstreams expect ssh to compile as non-C99...Theo de Raadt
2021-11-02Better handle FIDO keys on tokens that provide user verification (UV)Damien Miller
2021-10-29ssh-keygen: make verify-time argument parsing optionalDamien Miller
2021-10-28When downloading resident keys from a FIDO token, pass back theDamien Miller
2021-10-24For open/openat, if the flags parameter does not contain O_CREAT, theTheo de Raadt
2021-10-22Prevent mem leaks in the (unlikely) event that getaddrinfo returnsDarren Tucker
2021-10-22Remove unnecessary semicolons in case statements. From khaleesicodesDarren Tucker
2021-10-22Fix typos in comments. From khaleesicodes via github PR#280.Darren Tucker
2021-10-15openbsd 7.0 release shipped with the (hopefully last) scp that uses RCPTheo de Raadt
2021-10-09Document that CASignatureAlgorithms, ExposeAuthInfo and PubkeyAuthOptionsDarren Tucker
2021-10-02Dynamically allocate encoded HashKnownHosts and free as appropriate.Darren Tucker
2021-10-01unbreak FIDO sk-ed25519 key enrollment for OPENSSL=no builds;Damien Miller
2021-09-29add some debug output showing how many key file/command linesDamien Miller
2021-09-28Make prototype for rijndaelEncrypt match function including the bounds.Darren Tucker
2021-09-28Import regenerated moduli.Darren Tucker
2021-09-26openssh-8.8Damien Miller