summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2015-02-13make rekey_limit for sshd w/privsep work; ok djm@ dtucker@Markus Friedl
2015-02-12Prevent sshd spamming syslog with "ssh_dispatch_run_fatal: disconnected".Darren Tucker
2015-02-11Some packet error messages show the address of the peer, but might beDamien Miller
2015-02-09fix some leaks in error pathsJonathan Gray
2015-02-06SIZE_MAX is standard, we should be using it in preference to theTodd C. Miller
2015-02-05Include stdint.h, not limits.h to get SIZE_MAX. OK guenther@Todd C. Miller
2015-02-03missing ;Theo de Raadt
2015-02-03slightly extend the passphrase prompt if running with -c in order toAlexander Hall
2015-02-02handle PKCS#11 C_Login returning CKR_USER_ALREADY_LOGGED_IN;Damien Miller
2015-02-02turn UpdateHostkeys off by default until I figure out mlarkin@'sDamien Miller
2015-02-02increasing encounters with difficult DNS setups in darknets hasTheo de Raadt
2015-01-31Let sshd load public host keys even when private keys are missing.Damien Miller
2015-01-30Add a ssh_config HostbasedKeyType option to control whichDamien Miller
2015-01-30set a timeout to prevent hangs when talking to busted servers;Damien Miller
2015-01-30avoid more fatal/exit in the packet.c paths that ssh-keyscanDamien Miller
2015-01-30permit KRLs that revoke certificates by serial number or key IDDamien Miller
2015-01-30missing parentheses after if in do_convert_from() brokeDamien Miller
2015-01-30fix ssh protocol 1, spotted by miod@Damien Miller
2015-01-28update to new API (key_fingerprint => sshkey_fingerprint)Damien Miller
2015-01-28avoid fatal() calls in packet codeDamien Miller
2015-01-28avoid fatal() calls in packet codeDamien Miller
2015-01-28remove obsolete commentDamien Miller
2015-01-27Since r1.2 removed the use of PRI* macros, inttypes.h is no longerOkan Demirmen
2015-01-26sort previous;Jason McIntyre
2015-01-26properly restore umaskDamien Miller
2015-01-26correct description of UpdateHostKeys in ssh_config.5 andDamien Miller
2015-01-26correctly match ECDSA subtype (== curve) for offered/receviedDamien Miller
2015-01-26Host key rotation support.Damien Miller
2015-01-26small refactor and add some convenience functions;Damien Miller
2015-01-22heirarchy -> hierarchy;Jason McIntyre
2015-01-22Provide a warning about chroot misuses (which sadly, seem to have becomeTheo de Raadt
2015-01-20Reduce use of <sys/param.h> and transition to <limits.h> throughout.Theo de Raadt
2015-01-20kex_setup errors are fatal()Markus Friedl
2015-01-20make this compile with KERBEROS5 enabledDamien Miller
2015-01-20fix hostkeys in agent; ok markus@Damien Miller
2015-01-19switch ssh-keyscan from setjmp to multiple ssh transport layer instancesMarkus Friedl
2015-01-19add experimental api for packet layer; ok djm@Markus Friedl
2015-01-19store compat flags in struct ssh; ok djm@Markus Friedl
2015-01-19adapt kex to sshbuf and struct ssh; ok djm@Markus Friedl
2015-01-19move dispatch to struct ssh; ok djm@Markus Friedl
2015-01-19update packet.c & isolate, introduce struct sshMarkus Friedl
2015-01-19fix format strings in (disabled) debuggingDamien Miller
2015-01-19djm, your /usr/include tree is oldTheo de Raadt
2015-01-18some feedback from markus@: comment hostkeys_foreach()Damien Miller
2015-01-18make ssh-keygen use hostkeys_foreach(). Removes someDamien Miller
2015-01-18convert load_hostkeys() (hostkey ordering and known_hostDamien Miller
2015-01-18introduce hostkeys_foreach() to allow iteration over aDamien Miller
2015-01-18string truncation due to sizeof(size)Theo de Raadt
2015-01-18avoid trailing ',' in host key algorithmsDamien Miller
2015-01-18infer key length correctly when user specified a fully-Damien Miller