summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2024-10-25mlkem768x25519-sha256 has been promoted to default key exchangeChristian Weisgerber
2024-10-25promote mlkem768x25519-sha256 to be the default key exchange;Damien Miller
2024-10-24amake ssh-agent drop all keys when it receives SIGUSR1;Damien Miller
2024-10-24relax valid_domain() checks to allow an underscore as the firstDamien Miller
2024-10-22Add a sshd debug wrapper to run all of the subprograms from the buildDarren Tucker
2024-10-22Make debug call printf("%s", NULL) safe. Prevents problems on platformsDarren Tucker
2024-10-18mention that LocalForward and RemoteForward can accept Unix domain socketDamien Miller
2024-10-18remove duplicate check; GHPR392 from Pedro MartellettoDamien Miller
2024-10-18allow "-" as output file for moduli screeningDamien Miller
2024-10-18ssh-keyscan doesn't need it's own sshfatal() definition, it canDamien Miller
2024-10-18in _ssh_order_hostkeyalgs() consider ECDSA curve type when arrangingDamien Miller
2024-10-18require control-escape character sequences passed via the '-e ^x'Damien Miller
2024-10-18remove addr.[ch] functions that are unused and visbility-restrictDamien Miller
2024-10-18unreachable POLLERR case; from ya0guang via GHPR485Damien Miller
2024-10-18s/Sx/Cm/ for external references; from Domen Puncer Kugler via GHPR501Damien Miller
2024-10-14mention SshdAuthPath option; ok djm@Christian Weisgerber
2024-10-14Split per-connection sshd-session binaryDamien Miller
2024-10-13don't start the ObscureKeystrokeTiming mitigations if there has beenDamien Miller
2024-10-12remove duplicate misc.h includeJonathan Gray
2024-10-06Turn off finite field (a.k.a modp) Diffie-Hellman key exchange in sshdDamien Miller
2024-09-26fix previous change to ssh_config Match, which broken on negatedDamien Miller
2024-09-25remove some unused defines; ok djm@Jonathan Gray
2024-09-25remove some unneeded Xo/Xc calls; from evan silbermanJason McIntyre
2024-09-25fix regression introduced when I switched the "Match" criteria tokeniserDamien Miller
2024-09-24some extra paranoia, reminded by jsg@Damien Miller
2024-09-22remove some unused defines; ok djm@Jonathan Gray
2024-09-20remove unneeded semicolons; checked by millert@Jonathan Gray
2024-09-19openssh-9.9Damien Miller
2024-09-16use 64 bit math to avoid signed underflow. upstream code relies onDamien Miller
2024-09-15minor grammar/sort fixes for refuseconnection; ok djmJason McIntyre
2024-09-15bad whitespace in config dump outputDamien Miller
2024-09-15update the Streamlined NTRU Prime code from the "ref" implementationDamien Miller
2024-09-15document Match invalid-userDamien Miller
2024-09-15add a "Match invalid-user" predicate to sshd_config Match options.Damien Miller
2024-09-15Add a "refuseconnection" penalty class to sshd_configDamien Miller
2024-09-15Add a sshd_config "RefuseConnection" optionDamien Miller
2024-09-15switch sshd_config Match processing to the argv tokeniser too;Damien Miller
2024-09-15switch "Match" directive processing over to the argv stringDamien Miller
2024-09-15include pathname in some of the ssh-keygen passphrase prompts. HelpsDamien Miller
2024-09-15Do not apply authorized_keys options when signature verificationDamien Miller
2024-09-12Relax absolute path requirement back to what it was prior to OpenSSH 9.8,Damien Miller
2024-09-09document the mlkem768x25519-sha256 key exchange algorithmChristian Weisgerber
2024-09-09pull post-quantum ML-KEM/x25519 key exchange out from compile-timeDamien Miller
2024-09-06make parsing user@host consistently look for the last '@' in theDamien Miller
2024-09-04be more strict in parsing key type names. Only allow shortnames (e.gDamien Miller
2024-09-04fix RCSID in outputDamien Miller
2024-09-03envrionment -> environment;Jason McIntyre
2024-09-03allow the "Include" directive to expand the same set of %-tokensDamien Miller
2024-09-02missing ifdefDamien Miller
2024-09-02Add experimental support for hybrid post-quantum key exchangeDamien Miller