summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2015-08-21Improve printing of KEX offers and decisionsDamien Miller
2015-08-21Fix printing (ssh -G ...) of HostKeyAlgorithms=+...Damien Miller
2015-08-21Fix expansion of HostkeyAlgorithms=+...Damien Miller
2015-08-21Regen moduliDarren Tucker
2015-08-21Improve size == 0, count == 0 checking in mm_zalloc, which is "array" like.Theo de Raadt
2015-08-21openssh-7.1Damien Miller
2015-08-21fix inverted logic that broke PermitRootLogin;Damien Miller
2015-08-20Do not cast result of malloc/calloc/realloc* if stdlib.h is in scopeTheo de Raadt
2015-08-20In the certificates section, be consistent about using "host_key"Christian Weisgerber
2015-08-19Better compat matching for WinSCP, add compat matching forDamien Miller
2015-08-19fix double-free() in error path of DSA key generation reported byDamien Miller
2015-08-19fix free() of uninitialised pointer reported by Mateusz Kocielski;Damien Miller
2015-08-19fixed unlink([uninitialised memory]) reported by Mateusz Kocielski;Damien Miller
2015-08-14match myproposal.h order; from brian conwayJason McIntyre
2015-08-06add prohibit-password as a synonymn for without-password, since theTheo de Raadt
2015-08-04backout SSH_RSA_MINIMUM_MODULUS_SIZE increase for this release;Damien Miller
2015-08-02openssh 7.0; ok deraadt@Damien Miller
2015-07-31Allow PermitRootLogin to be overridden by configChris Cappuccio
2015-07-30fix pty permissions; patch from Nikolay Edigaryev; ok deraadtDamien Miller
2015-07-30change default: PermitRootLogin without-passwordTheo de Raadt
2015-07-30Allow ssh_config and sshd_config kex parameters options be prefixedDamien Miller
2015-07-29fix bug in previous; was printing incorrect string for failedDamien Miller
2015-07-29include the peer's offer when logging a failure to negotiate aDamien Miller
2015-07-28add Cisco to the list of clients that choke on the hostkeys updateDamien Miller
2015-07-27Permit kbind(2) use in the sandbox now, to ease testing of ld.so work using itPhilip Guenther
2015-07-22Generate new moduli.Darren Tucker
2015-07-20Move .Pp before .Bl, not after to quiet mandoc -Tlint.Todd C. Miller
2015-07-20Sync usage with SYNOPSISTodd C. Miller
2015-07-20Better desciption of Unix domain socket forwarding.Todd C. Miller
2015-07-20mention that the default of UseDNS=no implies that hostnames cannotDamien Miller
2015-07-18don't ignore PKCS#11 hosted keys that return empty CKA_ID;Damien Miller
2015-07-18skip uninitialised PKCS#11 slots; patch from Jakub Jelen in bz#2427Damien Miller
2015-07-18only query each keyboard-interactive device once per authenticationDamien Miller
2015-07-17direct-streamlocal@openssh.com Unix domain foward messages do notDamien Miller
2015-07-17describe magic for setting up Unix domain socket fowards viaDamien Miller
2015-07-17fix incorrect test for SSH1 keys when compiled without SSH1 supportDamien Miller
2015-07-15fix NULL-deref when SSH1 reenabledDamien Miller
2015-07-13Add "PuTTY_Local:" to the clients to which we do not offer DH-GEX.Darren Tucker
2015-07-10Turn off DSA by default; add HostKeyAlgorithms to the server andMarkus Friedl
2015-07-09re-enable ed25519-certs if compiled w/o openssl; ok djmMarkus Friedl
2015-07-08no need to include the old buffer/key APIMarkus Friedl
2015-07-08typedefs for Cipher&CipherContext are unusedMarkus Friedl
2015-07-08xmalloc.h is unusedMarkus Friedl
2015-07-08compress.c is goneMarkus Friedl
2015-07-03another SSH_RSA_MINIMUM_MODULUS_SIZE that needed crankingDamien Miller
2015-07-03add an XXX reminder for getting correct key paths from sshd_configDamien Miller
2015-07-03refuse to generate or accept RSA keys smaller than 1024 bits;Damien Miller
2015-07-03turn off 1024 bit diffie-hellman-group1-sha1 key exchange methodDamien Miller
2015-07-03delete support for legacy v00 certificates; "sure" markus@ dtucker@Damien Miller
2015-07-01Compile-time disable SSH v.1 againDamien Miller