summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2015-12-13unbreak connections with peers that set first_kex_follows;Damien Miller
2015-12-11Add "id" to ssh-agent pledge for subprocess support.Doug Hogan
2015-12-11Remove NULL-checks before sshbuf_free().mmcc
2015-12-11include remote port number in a few more messages; makes tying logDamien Miller
2015-12-11don't try to load SSHv1 private key when compiled without SSHv1Damien Miller
2015-12-11use SSH_MAX_PUBKEY_BYTES consistently as buffer size when reading keyDamien Miller
2015-12-11Remove NULL-checks before sshkey_free().mmcc
2015-12-11fflush stdout so that output is seen even when running in debug mode whenDarren Tucker
2015-12-11correct error messages; from Tomas Kuthan bz#2507Damien Miller
2015-12-11Pass (char *)NULL rather than (char *)0 to execl and execlp.mmcc
2015-12-10Remove NULL-checks before free().mmcc
2015-12-10Fix a couple "the the" typos. ok dtucker@mmcc
2015-12-07stricter encoding type checks for ssh-rsa; ok djm@Markus Friedl
2015-12-05prefer rsa-sha2-512 over -256 for hostkeys, too; noticed by naddy@Markus Friedl
2015-12-04Properly handle invalid %-format by calling fatal.Tobias Stoeckmann
2015-12-04implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures (user and host auth)Markus Friedl
2015-12-04clean up agent_fd handling; properly initialise it to -1 andDamien Miller
2015-12-03pledges ssh client:Sebastien Marie
2015-12-02Add "cpath" to the ssh-agent pledge so the cleanup handler can unlink().Doug Hogan
2015-12-02ssh-agent pledge needs proc for askpass; spotted by todd@Damien Miller
2015-12-01basic pledge() for ssh-agent, more refinement neededDamien Miller
2015-11-29pledge, better fatal() messages; feedback deraadt@Damien Miller
2015-11-28do not leak temp file if there is no known_hosts fileTheo de Raadt
2015-11-28don't include port number in tcpip-forward replies for requestsDamien Miller
2015-11-27pledge "stdio rpath wpath cpath fattr tty proc exec" except for theTheo de Raadt
2015-11-20allow comment change for all supported formatsAlexander Hall
2015-11-20add cast to make -Werror cleanDamien Miller
2015-11-19ban ConnectionAttempts=0, it makes no sense and would causeDamien Miller
2015-11-19trailing whitespaceDamien Miller
2015-11-19print host certificate contents at debug levelDamien Miller
2015-11-19move the certificate validity formatting code to sshkey.[ch]Damien Miller
2015-11-18fix "ssh-keygen -l" of private key, broken in support forDamien Miller
2015-11-16Replace remaining calls to index(3) with strchr(3). OK jca@ krw@Todd C. Miller
2015-11-16Allow fingerprinting from standard input "ssh-keygen -lf -"Damien Miller
2015-11-16always call privsep_preauth_child() regardless of whether sshdDamien Miller
2015-11-16improve sshkey_read() semantics; only update *cpp when a keyDamien Miller
2015-11-161) Use xcalloc() instead of xmalloc() to check for potential overflow.Loganaden Velvindron
2015-11-16Add a new authorized_keys option "restrict" that includes all currentDamien Miller
2015-11-15correct section number for ssh-agent;Jason McIntyre
2015-11-15do not confuse mandoc by presenting "Dd";Jason McIntyre
2015-11-15Add an AddKeysToAgent client option which can be set to 'yes', 'no',Joshua Stein
2015-11-13send SSH2_MSG_UNIMPLEMENTED replies to unexpected messages duringDamien Miller
2015-11-13Support "none" as an argument for sshd_config ForceCommand andDamien Miller
2015-11-13support multiple certificates (one per line) and reading fromDamien Miller
2015-11-13list a couple more options usable in Match blocks; bz#2489Damien Miller
2015-11-11improve PEEK/POKE macros: better casts, don't multiply evaluateDamien Miller
2015-11-11remove prototypes for long-gone s/key support; ok dtucker@Damien Miller
2015-11-08-c before -H, in SYNOPSIS and usage();Jason McIntyre
2015-11-08Add "ssh-keyscan -c ..." flag to allow fetching certificates insteadDamien Miller
2015-11-08remove slogin links; ok deraadt markus djmJason McIntyre