Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-04-09 | ListenAddress mandoc from aaron@ | Kevin Steves | |
2001-04-09 | ssh-add retries the last passphrase... | Markus Friedl | |
2001-04-09 | passphrase caching: ssh-add tries last passphrase, clears passphrase if | Markus Friedl | |
not successful and after last try. based on discussions with espie@, jakob@, ... and code from jakob@ and wolfgang@wsrcc.com | |||
2001-04-09 | spelling | Kevin Steves | |
2001-04-08 | spelling | Kevin Steves | |
2001-04-08 | do not modify an actual argv[] entry | Theo de Raadt | |
2001-04-08 | document ListenAddress addr:port | Kevin Steves | |
2001-04-08 | init pointers with NULL, thanks to danimal@danimal.org | Markus Friedl | |
2001-04-08 | leave_raw_mode if ssh2 "session" is closed | Markus Friedl | |
2001-04-08 | KNF | Markus Friedl | |
2001-04-07 | allow the ssh client act as a SOCKS4 proxy (dynamic local portforwarding). | Markus Friedl | |
work by Dan Kaminsky <dankamin@cisco.com> and me. thanks to Dan for this great patch: use 'ssh -D 1080 host' and make netscape use localhost:1080 as a socks proxy. | |||
2001-04-06 | in addition to: | Kevin Steves | |
ListenAddress host|ipv4_addr|ipv6_addr permit: ListenAddress [host|ipv4_addr|ipv6_addr]:port ListenAddress host|ipv4_addr:port sshd.8 updates coming. ok markus@ | |||
2001-04-06 | unused; typo in comment | Kevin Steves | |
2001-04-06 | do gid/groups-swap in addition to uid-swap, should help if /home/group | Markus Friedl | |
is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks to olar@openwall.com is comments. we had many requests for this. | |||
2001-04-06 | remove trailing / from source paths; fixes pr#1756 | Theo de Raadt | |
2001-04-05 | keep the ssh session even if there is no active channel. | Markus Friedl | |
this is more in line with the protocol spec and makes ssh -N -L 1234:server:110 host more useful. based on discussion with <mats@mindbright.se> long time ago and recent mail from <res@shore.net> | |||
2001-04-05 | don't request a session for 'ssh -N', pointed out slade@shore.net | Markus Friedl | |
2001-04-05 | better error message | Markus Friedl | |
2001-04-05 | for ~R print message if server does not support rekeying. (and fix ~R). | Markus Friedl | |
2001-04-05 | move get_remote_name_or_ip() to canohost.[ch]; for portable. ok markus@ | Kevin Steves | |
2001-04-05 | ssh defaults to protocol v2; from quisar@quisar.ambre.net | Markus Friedl | |
2001-04-05 | add SSH_BUG_NOREKEY and detect broken (=all old) openssh versions. | Markus Friedl | |
2001-04-05 | fix whitespace: unexpand + trailing spaces. | Markus Friedl | |
2001-04-05 | temporary version 2.5.4 (supports rekeying). | Markus Friedl | |
this is not an official release. | |||
2001-04-05 | reset compress state per direction when rekeying. | Markus Friedl | |
2001-04-05 | 2.3.x does old GEX, too; report jakob@ | Markus Friedl | |
2001-04-04 | clear+free keys,iv for rekeying. | Markus Friedl | |
+ fix DH mem leaks. ok niels@ | |||
2001-04-04 | parse full kexinit packet. | Markus Friedl | |
make server-side more robust, too. | |||
2001-04-04 | we don't care about missing bannerfiles; from tsoome@ut.ee, ok deraadt@ | Markus Friedl | |
2001-04-04 | more robust rekeying | Markus Friedl | |
don't send channel data after rekeying is started. | |||
2001-04-04 | f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov | Markus Friedl | |
2001-04-04 | enable server side rekeying + some rekey related clientup. | Markus Friedl | |
todo: we should not send any non-KEX messages after we send KEXINIT | |||
2001-04-04 | don't sent multiple kexinit-requests. | Markus Friedl | |
send newkeys, block while waiting for newkeys. fix comments. | |||
2001-04-04 | enable client rekeying | Markus Friedl | |
(1) force rekeying with ~R, or (2) if the server requests rekeying. works against ssh-2.0.12/2.0.13/2.1.0/2.2.0/2.3.0/2.3.1/2.4.0 | |||
2001-04-03 | undo parts of recent my changes: main part of keyexchange does not | Markus Friedl | |
need dispatch-callbacks, since application data is delayed until the keyexchange completes (if i understand the drafts correctly). add some infrastructure for re-keying. | |||
2001-04-03 | id_rsa1/2 -> id_rsa; ok markus@ | Todd T. Fries | |
2001-04-03 | move kex to kex*.c, used dispatch_set() callbacks for kex. should | Markus Friedl | |
make rekeying easier. | |||
2001-04-03 | free() -> xfree() | Kevin Steves | |
2001-04-02 | grammar; slade@shore.net | Theo de Raadt | |
2001-04-02 | correct comment; ok markus@ | Kevin Steves | |
2001-04-02 | typo; ok markus@ | Kevin Steves | |
2001-03-29 | Protocol 1 key regeneration log => verbose, some KNF; ok markus@ | Damien Miller | |
2001-03-29 | prepare for rekeying: move DH code to dh.c | Markus Friedl | |
2001-03-29 | need to set both STOC and CTOS for SSH_BUG_BIGENDIANAES; ok markus@ | Kevin Steves | |
2001-03-29 | use recommended defaults | Niels Provos | |
2001-03-28 | check auth_root_allowed for kbd-int auth, too. | Markus Friedl | |
2001-03-28 | more sanity checking on primes file | Niels Provos | |
2001-03-28 | forgot to include min and max params in hash, okay markus@ | Niels Provos | |
2001-03-28 | call refuse() before close(); from olemx@ans.pl | Markus Friedl | |
2001-03-28 | usage more like rcp and add missing -B to usage; ok markus@ | Kevin Steves | |