summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2016-08-13remove ssh1 server code; ok djm@Markus Friedl
2016-08-12Use 2001:db8::/32, the official IPv6 subnet for configuration examples.Jeremie Courreges-Anglas
2016-08-11Update moduli file.Darren Tucker
2016-08-08Improve error message for overlong ControlPath. ok markus@ djm@Darren Tucker
2016-08-03small refactor of cipher.c: make ciphercontext opaque to callersDamien Miller
2016-08-03Fix bug introduced in rev 1.467 which causes "buffer_get_bignum_ret:Darren Tucker
2016-07-27better bounds check on iovcnt (we only ever use fixed, positive values)Damien Miller
2016-07-24openssh-7.3Damien Miller
2016-07-23fix pledge violation with ssh -f; reported by Valentin KozamernikDamien Miller
2016-07-22improve wording; suggested by jmc@Damien Miller
2016-07-22Lower loglevel for "Authenticated with partial success" message similar toDarren Tucker
2016-07-22constify a few functions' arguments; patch from Jakub Jelen bz#2581Damien Miller
2016-07-22move debug("%p", key) to before key is free'd; probable undefinedDamien Miller
2016-07-22reverse the order in which -J/JumpHost proxies are visited to beDamien Miller
2016-07-21Skip passwords longer than 1k in length so clients can't easily DoS sshdDarren Tucker
2016-07-20Do not clobber the global jump_host variables when parsing an inactiveChristian Weisgerber
2016-07-19tweak previous;Jason McIntyre
2016-07-19Allow wildcard for PermitOpen hosts as well as ports. bz#2582, patch fromDarren Tucker
2016-07-18Reduce timing attack against obsolete CBC modes by always computingMarkus Friedl
2016-07-18Add some unsigned overflow checks for extra_pad. None of theseDamien Miller
2016-07-17support UTF-8 characters in ssh(1) banners using schwarze@'sDamien Miller
2016-07-16- add proxyjump to the options listJason McIntyre
2016-07-15Reduce the syslog level of some relatively common protocol eventsDarren Tucker
2016-07-15Add a ProxyJump ssh_config(5) option and corresponding -J ssh(1)Damien Miller
2016-07-11Add missing "recvfd" pledge promise: Raf Czlonka reported ssh coredumpsTheo Buehler
2016-07-11obsolete note about fascistloggin is obsolete. ok djm dtuckerTed Unangst
2016-07-08Improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms.Damien Miller
2016-07-04DEBUGLIBS has been broken since the gcc4 switch, so delete it. CFLAGSPhilip Guenther
2016-06-30Explicitly check for 100% completion to avoid potential floating pointDarren Tucker
2016-06-29sort the -o list;Jason McIntyre
2016-06-23fix AuthenticationMethods during configuration re-parse;Damien Miller
2016-06-19revert 1.34; causes problems loading public keysDamien Miller
2016-06-17grammar fix;Jason McIntyre
2016-06-17translate OpenSSL error codes to something more meaninful;Damien Miller
2016-06-17ban AuthenticationMethods="" and accept AuthenticationMethods=anyDamien Miller
2016-06-16Include stdarg.h for va_copy as per man page.Darren Tucker
2016-06-16keys stored in openssh format can have comments too;Jason McIntyre
2016-06-15Remove "POSSIBLE BREAK-IN ATTEMPT!" from log message about forward andDarren Tucker
2016-06-08Back out rev 1.28 "Check min and max sizes sent by the client" change.Darren Tucker
2016-06-03tweak previous;Jason McIntyre
2016-06-03Allow ExitOnForwardFailure and ClearAllForwardings to be overridden whenDarren Tucker
2016-06-03Move the host and port used by ssh -W into the Options struct.Darren Tucker
2016-06-01Check min and max sizes sent by the client against what we support beforeDarren Tucker
2016-05-31Ensure that the client's proposed DH-GEX max value is at least as bigDarren Tucker
2016-05-30Backout rev. 1.43 for now.Ingo Schwarze
2016-05-30Even when only writing an unescaped character, the dst buffer may need toIngo Schwarze
2016-05-30Fix two rare edge cases:Ingo Schwarze
2016-05-25To prevent screwing up terminal settings when printing to theIngo Schwarze
2016-05-24KNF compression proposal and simplify the client side a little. ok djm@Darren Tucker
2016-05-24Back out 'plug memleak'.Darren Tucker