summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2018-04-26Since the previous commit, ssh regress test sftp-chroot was failing.Alexander Bluhm
2018-04-16Disable SSH2_MSG_DEBUG messages for Twisted Conch clients withoutDamien Miller
2018-04-14don't free the %C expansion, it's used later for LocalCommandDamien Miller
2018-04-13notify user immediately when underlying ssh process dies;Damien Miller
2018-04-13Defend against user enumeration timing attacks.Darren Tucker
2018-04-10lots of typos in comments/docs. Patch from Karsten Weiss after checkingDamien Miller
2018-04-09don't kill ssh-agent's listening socket entriely if we fail to accept aDamien Miller
2018-04-09the UseLogin option was removed, so remove it here too.T.J. Townsend
2018-04-08tweak previous;Jason McIntyre
2018-04-07tweak previous;Jason McIntyre
2018-04-06Allow "SendEnv -PATTERN" to clear environment variables previouslyDamien Miller
2018-04-06relax checking of authorized_keys environment="..." options to allowDamien Miller
2018-04-06add a couple of missed options to the config dump; patch fromDamien Miller
2018-04-06ssh does not accept -oInclude=... on the commandline, the Include keywordDamien Miller
2018-04-05We don't offer CBC cipher by default any more. Spotted by RenaudDamien Miller
2018-04-04Update default IPQoS in ssh(1), sshd(8) to DSCP AF21 for interactive and CS1 ...job
2018-04-03Import regenerated moduli file.Darren Tucker
2018-03-24openssh-7.7Markus Friedl
2018-03-24fix bogus warning when signing cert keys using agent; from djm; ok deraadt dt...Markus Friedl
2018-03-22ssh/xmss: fix build; ok djm@Markus Friedl
2018-03-22ssh/xmss: fix deserialize for certs; ok djm@Markus Friedl
2018-03-14sort expiry-time;Jason McIntyre
2018-03-14rename recently-added "valid-before" key restriction to "expiry-time"Damien Miller
2018-03-12add valid-before="[time]" authorized_keys option. A simple way ofDamien Miller
2018-03-07revert recent strdelim() change, it causes problems with some configs.Damien Miller
2018-03-05move the input format details to -f;Jason McIntyre
2018-03-03Update RSA minimum modulus size to 1024. sshkey.h rev 1.18 bumpedDarren Tucker
2018-03-03switch over to the new authorized_keys options API and remove theDamien Miller
2018-03-03Introduce a new API for handling authorized_keys options. This APIDamien Miller
2018-03-03warn when the agent returns a signature type that was different toDamien Miller
2018-03-02apply a lick of paint; tweaks/ok dtuckerJason McIntyre
2018-03-02Allow escaped quotes \" and \' in ssh_config and sshd_config quotesDamien Miller
2018-03-02refactor sshkey_read() to make it a little more, err, readable.Damien Miller
2018-03-01missing #ifdef for _PATH_HOST_XMSS_KEY_FILE; report by jmc@Markus Friedl
2018-02-26Remove unneeded (local) include. ok markus@Darren Tucker
2018-02-26Add $OpenBSD$ markers to xmss files to help keep synced with portable.Darren Tucker
2018-02-26Add newline at end of file to prevent compiler warnings.Darren Tucker
2018-02-23Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures)Markus Friedl
2018-02-23some cleanup for BindInterface and ssh-keyscan;Jason McIntyre
2018-02-23Add ssh-keyscan -D option to make it print its results in SSHFP formatDamien Miller
2018-02-23Add missing braces.Darren Tucker
2018-02-23Add BindInterface ssh_config directive and -B command-line argumentDamien Miller
2018-02-19emphasise that the hostkey rotation may send key types that the clientDamien Miller
2018-02-16Don't send IUTF8 to servers that don't like them.Darren Tucker
2018-02-16Mention recent DH KEX methods:Damien Miller
2018-02-16stop loading DSA keys by default, remove sshd_config stanza and manpageDamien Miller
2018-02-14Ensure that D mod (P-1) and D mod (Q-1) are calculated in constant time.Joel Sing
2018-02-14Some obvious freezero() conversions.Joel Sing
2018-02-13remove space before tabDamien Miller
2018-02-11Don't reset signal handlers inside handlers.Darren Tucker