summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2021-01-09add a comma to previous;Jason McIntyre
2021-01-09Add PerSourceMaxStartups and PerSourceNetBlockSize options which provideDarren Tucker
2021-01-09Move address handling functions out into their own file in order to reuseDarren Tucker
2021-01-08make CheckHostIP default to 'no'. It doesn't provide any perceptibleDamien Miller
2021-01-08If a signature operation on a FIDO key fails with a "incorrect PIN"Damien Miller
2021-01-08don't try to use timespeccmp(3) directly as a qsort(3) comparisonDamien Miller
2021-01-08Update the sntrup761 creation script and generated code:Darren Tucker
2021-01-08mention that DisableForwarding is valid in a sshd_config Match blockDamien Miller
2021-01-04estructure sntrup761.sh to process all files in a single list, which willDarren Tucker
2021-01-03Prevent redefinition of `crypto_int32' error with gcc3.tobhe
2020-12-30Use int64_t for intermediate values in int32_MINMAX to prevent signedtobhe
2020-12-29Update/replace the experimental post-quantim hybrid key exchangeDamien Miller
2020-12-22tweak the description of KnownHostsCommand in ssh_conf.5, and addJason McIntyre
2020-12-22Remove lines accidentally left behind in the ProxyJump parsing fix r1.345.Theo Buehler
2020-12-22add a ssh_config KnownHostsCommand that allows the client to obtainDamien Miller
2020-12-22move subprocess() from auth.c to misc.cDamien Miller
2020-12-21Remove the pre-standardization cipher rijndael-cbc@lysator.liu.se.Darren Tucker
2020-12-21properly fix ProxyJump parsing; Thanks to tb@ for pointing out my errorDamien Miller
2020-12-20plumb ssh_conn_info through to sshconnect.c; feedback/ok markus@Damien Miller
2020-12-20allow UserKnownHostsFile=none; feedback and ok markus@Damien Miller
2020-12-20load_hostkeys()/hostkeys_foreach() variants for FILE*Damien Miller
2020-12-19Print client kem key with correct length.tobhe
2020-12-17fix possible error("%s", NULL) on error pathsDamien Miller
2020-12-17refactor client percent_expand() argument passing; consolidate theDamien Miller
2020-12-17prepare readconf.c for fuzzing; remove fatal calls and fix someDamien Miller
2020-12-14use _PATH_SSH_USER_DIR instead of hardcoded .ssh in pathDamien Miller
2020-12-04shuffle a few utility functions into sftp-client.c; from Jakub JelenDamien Miller
2020-12-04make ssh_free(NULL) a no-opDamien Miller
2020-12-04memleak of DH public bignum; found with libfuzzerDamien Miller
2020-12-04fix minor memleak of kex->hostkey_alg on rekexDamien Miller
2020-12-04typos: s/hex/kex/ in error messagesDamien Miller
2020-12-04make program name be constDamien Miller
2020-11-30Ignore comments at the end of config lines in ssh_config, similar to whatDarren Tucker
2020-11-28Include cipher.h for declaration of cipher_by_name.Darren Tucker
2020-11-28check result of strchr() against NULL rather than searched-forDamien Miller
2020-11-27Document ssh-keygen -Z, sanity check its argument earlier and provideDarren Tucker
2020-11-27Set the specified TOS/DSCP for interactive use prior to TCP connect.Damien Miller
2020-11-27clean up passing of struct passwd from monitor to preauth privsepDamien Miller
2020-11-22when loading PKCS#11 keys, include the key fingerprints and provider/slotDamien Miller
2020-11-22when mentioning that the host key has changed, don't report the typeDamien Miller
2020-11-20When doing an sftp recursive upload or download of a read-only directory,Darren Tucker
2020-11-20Explicitly initialize all members of the find_by_key_ctx struct. InitializingDarren Tucker
2020-11-19draft-ietf-secsh-architecture is now RFC4251.Darren Tucker
2020-11-17Specify that the KDF function is bcrypt. Based on github PR#214Darren Tucker
2020-11-15revert r1.341; it breaks ProxyJump; reported by sthen@Damien Miller
2020-11-13scrub keyboard-interactive authentication prompts coming from theDamien Miller
2020-11-13prefix keyboard interactive prompts with (user@host) to make it easierDamien Miller
2020-11-12when prompting the user to accept a new hostkey, display any otherDamien Miller
2020-11-12Prevent integer overflow when ridiculously large ConnectTimeout isDarren Tucker
2020-11-11fix logic error that broke URI parsing in ProxyJump directives;Damien Miller