summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2011-07-06bzero the agent address. the kernel was for a while very cranky aboutTed Unangst
2011-06-23ignore EINTR errors from poll()Damien Miller
2011-06-23rename sandbox.h => ssh-sandbox.h to make things easier for portableDamien Miller
2011-06-22$OpenBSD$ makersDamien Miller
2011-06-22hook up a channel confirm callback to warn the user then requested X11Damien Miller
2011-06-22introduce sandboxing of the pre-auth privsep child using systrace(4).Damien Miller
2011-06-22reuse the multistate option arrays to pretty-print options for "sshd -T"Damien Miller
2011-06-17setproctitle for a mux master that has been gracefully stopped;Damien Miller
2011-06-17factor out multi-choice option parsing into a parse_multistate labelDamien Miller
2011-06-17the protocol version should be unsigned; bz#1913 reported by mb ATDamien Miller
2011-06-17make the pre-auth privsep slave log via a socketpair shared with theDamien Miller
2011-06-14make sure key_parse_public/private_rsa1() no longer consumes its input buffer.Markus Friedl
2011-06-04explain IdentifyFile's semantics a little better, prompted by bz#1898Damien Miller
2011-06-03Check current parent process ID against saved one to determine if the parentDarren Tucker
2011-06-03bz#1883 - setproctitle() to identify mux master; patch from Bert.WesargDamien Miller
2011-05-24Remove undocumented legacy options UserKnownHostsFile2 andDamien Miller
2011-05-23read in key comments for v.2 keys (though note that these are notDamien Miller
2011-05-23tweak previous; ok djmJason McIntyre
2011-05-23remove extra newlineDamien Miller
2011-05-23make secure_filename() spam debug logs lessDamien Miller
2011-05-23allow AuthorizedKeysFile to specify multiple files, separated by spaces.Damien Miller
2011-05-20use a macro to define which string options to copy between configsDamien Miller
2011-05-20Add comment documenting what should be after the preauth check. ok djmDarren Tucker
2011-05-20the options TrustedUserCAKeys, RevokedKeysFile, AuthorizedKeysFileDamien Miller
2011-05-17fatal() if asked to generate a legacy ECDSA cert (these don't exist)Damien Miller
2011-05-15use FD_CLOEXEC consistently; patch from zion AT x96.orgDamien Miller
2011-05-13warn on unexpected key type in key_parse_private_type()Damien Miller
2011-05-11remove support for authorized_keys2; it is a relic from the early daysDamien Miller
2011-05-10despam debug() logs by detecting that we are trying to load a private keyDamien Miller
2011-05-08improve our behaviour when TTY allocation fails: if we are inDamien Miller
2011-05-07+.It RequestTTYJason McIntyre
2011-05-07- tweak previousJason McIntyre
2011-05-06fix numbering; from bert.wesarg AT googlemail.comDamien Miller
2011-05-06fix dropping from previous diffDamien Miller
2011-05-06Add a RequestTTY ssh_config option to allow configuration-basedDamien Miller
2011-05-06support negated Host matching, e.g.Damien Miller
2011-05-06add a %L expansion (short-form of the local host name) for ControlPath;Damien Miller
2011-05-06set traffic class for IPv6 traffic as we do for IPv4 TOS;Damien Miller
2011-05-06fix memory leak; bz#1849 ok dtucker@Damien Miller
2011-05-06mention that IPv6 addresses must be enclosed in square brackets;Damien Miller
2011-05-06clarify language about overriding defaults. bz#1892, from Petr CernyDarren Tucker
2011-05-05gracefully fall back when ControlPath is too large for aDamien Miller
2011-05-04allow "ssh-add - < key"; feedback and ok markus@Damien Miller
2011-04-25linting this library is not helping anythingTheo de Raadt
2011-04-18certificate options are supposed to be packed in lexical order of optionDamien Miller
2011-04-18tweak previous;Jason McIntyre
2011-04-17allow graceful shutdown of multiplexing: request that a mux server removesDamien Miller
2011-04-13mention valid -b sizes for ECDSA keys; bz#1862Damien Miller
2011-04-13improve wording; bz#1861Damien Miller
2011-04-12exit with 0 status on SIGTERM; bz#1879Damien Miller