summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2016-09-14take fingerprint of correct key for AuthorizedPrincipalsCommandDamien Miller
2016-09-14add %-escapes to AuthorizedPrincipalsCommand to match those supportedDamien Miller
2016-09-12handle certs in rsa_hash_alg_from_ident(), saving an unnecessaryDamien Miller
2016-09-12list all supported signature algorithms in the server-sig-algsDamien Miller
2016-09-12Spaces->tabs.Darren Tucker
2016-09-12Style whitespace fix. Also happens to remove a no-op diff with portable.Darren Tucker
2016-09-12Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitionsTheo de Raadt
2016-09-07sort; from matthew martinJason McIntyre
2016-09-06ssh_set_newkeys: print correct block counters on rekeying; ok djm@Markus Friedl
2016-09-06update ext_info_c every time we receive a kexinit msg; fixes sending ofMarkus Friedl
2016-09-05remove 3des-cbc from the client's default proposal; 64-bit block ciphersDamien Miller
2016-09-05enforce expected request flow for GSSAPI calls; thanks to Jakub JelenDamien Miller
2016-08-30restrict monitor auth calls to be allowed only when theirDamien Miller
2016-08-28fix uninitialised optlen in getsockopt() call; harmless on Unix/BSDDamien Miller
2016-08-27Pull in <sys/time.h> for struct timevalPhilip Guenther
2016-08-27Pull in <stdlib.h> for NULLPhilip Guenther
2016-08-25add a sIgnore opcode that silently ignores options and use it toDamien Miller
2016-08-25remove superfluous NOTREACHED commentDamien Miller
2016-08-23fix previous, a condition was modified incorrectly; ok markus@ deraadt@Otto Moerbeek
2016-08-23downgrade an error() to a debug2() to match similar casesDamien Miller
2016-08-23fix negated address matching where the address list consists of aDamien Miller
2016-08-23fix matching for pattern lists that contain a single negated match,Damien Miller
2016-08-19remove UseLogin option and support for having /bin/login manageDamien Miller
2016-08-15Catch up with the SSH1 code removal and delete all mention ofChristian Weisgerber
2016-08-15Remove more SSH1 server code:Christian Weisgerber
2016-08-13remove ssh1 server code; ok djm@Markus Friedl
2016-08-12Use 2001:db8::/32, the official IPv6 subnet for configuration examples.Jeremie Courreges-Anglas
2016-08-11Update moduli file.Darren Tucker
2016-08-08Improve error message for overlong ControlPath. ok markus@ djm@Darren Tucker
2016-08-03small refactor of cipher.c: make ciphercontext opaque to callersDamien Miller
2016-08-03Fix bug introduced in rev 1.467 which causes "buffer_get_bignum_ret:Darren Tucker
2016-07-27better bounds check on iovcnt (we only ever use fixed, positive values)Damien Miller
2016-07-24openssh-7.3Damien Miller
2016-07-23fix pledge violation with ssh -f; reported by Valentin KozamernikDamien Miller
2016-07-22improve wording; suggested by jmc@Damien Miller
2016-07-22Lower loglevel for "Authenticated with partial success" message similar toDarren Tucker
2016-07-22constify a few functions' arguments; patch from Jakub Jelen bz#2581Damien Miller
2016-07-22move debug("%p", key) to before key is free'd; probable undefinedDamien Miller
2016-07-22reverse the order in which -J/JumpHost proxies are visited to beDamien Miller
2016-07-21Skip passwords longer than 1k in length so clients can't easily DoS sshdDarren Tucker
2016-07-20Do not clobber the global jump_host variables when parsing an inactiveChristian Weisgerber
2016-07-19tweak previous;Jason McIntyre
2016-07-19Allow wildcard for PermitOpen hosts as well as ports. bz#2582, patch fromDarren Tucker
2016-07-18Reduce timing attack against obsolete CBC modes by always computingMarkus Friedl
2016-07-18Add some unsigned overflow checks for extra_pad. None of theseDamien Miller
2016-07-17support UTF-8 characters in ssh(1) banners using schwarze@'sDamien Miller
2016-07-16- add proxyjump to the options listJason McIntyre
2016-07-15Reduce the syslog level of some relatively common protocol eventsDarren Tucker
2016-07-15Add a ProxyJump ssh_config(5) option and corresponding -J ssh(1)Damien Miller
2016-07-11Add missing "recvfd" pledge promise: Raf Czlonka reported ssh coredumpsTheo Buehler