summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2015-08-06add prohibit-password as a synonymn for without-password, since theTheo de Raadt
2015-08-04backout SSH_RSA_MINIMUM_MODULUS_SIZE increase for this release;Damien Miller
2015-08-02openssh 7.0; ok deraadt@Damien Miller
2015-07-31Allow PermitRootLogin to be overridden by configChris Cappuccio
2015-07-30fix pty permissions; patch from Nikolay Edigaryev; ok deraadtDamien Miller
2015-07-30change default: PermitRootLogin without-passwordTheo de Raadt
2015-07-30Allow ssh_config and sshd_config kex parameters options be prefixedDamien Miller
2015-07-29fix bug in previous; was printing incorrect string for failedDamien Miller
2015-07-29include the peer's offer when logging a failure to negotiate aDamien Miller
2015-07-28add Cisco to the list of clients that choke on the hostkeys updateDamien Miller
2015-07-27Permit kbind(2) use in the sandbox now, to ease testing of ld.so work using itPhilip Guenther
2015-07-22Generate new moduli.Darren Tucker
2015-07-20Move .Pp before .Bl, not after to quiet mandoc -Tlint.Todd C. Miller
2015-07-20Sync usage with SYNOPSISTodd C. Miller
2015-07-20Better desciption of Unix domain socket forwarding.Todd C. Miller
2015-07-20mention that the default of UseDNS=no implies that hostnames cannotDamien Miller
2015-07-18don't ignore PKCS#11 hosted keys that return empty CKA_ID;Damien Miller
2015-07-18skip uninitialised PKCS#11 slots; patch from Jakub Jelen in bz#2427Damien Miller
2015-07-18only query each keyboard-interactive device once per authenticationDamien Miller
2015-07-17direct-streamlocal@openssh.com Unix domain foward messages do notDamien Miller
2015-07-17describe magic for setting up Unix domain socket fowards viaDamien Miller
2015-07-17fix incorrect test for SSH1 keys when compiled without SSH1 supportDamien Miller
2015-07-15fix NULL-deref when SSH1 reenabledDamien Miller
2015-07-13Add "PuTTY_Local:" to the clients to which we do not offer DH-GEX.Darren Tucker
2015-07-10Turn off DSA by default; add HostKeyAlgorithms to the server andMarkus Friedl
2015-07-09re-enable ed25519-certs if compiled w/o openssl; ok djmMarkus Friedl
2015-07-08no need to include the old buffer/key APIMarkus Friedl
2015-07-08typedefs for Cipher&CipherContext are unusedMarkus Friedl
2015-07-08xmalloc.h is unusedMarkus Friedl
2015-07-08compress.c is goneMarkus Friedl
2015-07-03another SSH_RSA_MINIMUM_MODULUS_SIZE that needed crankingDamien Miller
2015-07-03add an XXX reminder for getting correct key paths from sshd_configDamien Miller
2015-07-03refuse to generate or accept RSA keys smaller than 1024 bits;Damien Miller
2015-07-03turn off 1024 bit diffie-hellman-group1-sha1 key exchange methodDamien Miller
2015-07-03delete support for legacy v00 certificates; "sure" markus@ dtucker@Damien Miller
2015-07-01Compile-time disable SSH v.1 againDamien Miller
2015-07-01twiddle PermitRootLogin backDamien Miller
2015-07-01twiddle; (this commit marks the openssh-6.9 release)Damien Miller
2015-07-01better refuse ForwardX11Trusted=no connections attempted afterDamien Miller
2015-07-01put back default PermitRootLogin=noDamien Miller
2015-07-01openssh-6.9Damien Miller
2015-07-01reset default PermitRootLogin to 'yes' (momentarily, for release)Damien Miller
2015-06-30fatal() when a remote window update causes the window value toDamien Miller
2015-06-30Fix math error in remote window calculations that causes eventual stallsDamien Miller
2015-06-29add getpid to sandbox, reachable by grace_alarm_handlerDamien Miller
2015-06-26Fix \-escaping bug that caused forward path parsing to skip twoDamien Miller
2015-06-24correct test to sshkey_sign(); spotted by Albert S.Damien Miller
2015-06-24Revert previous commit. We still want to call setgroups in the case whereDarren Tucker
2015-06-22Don't count successful partial authentication as failures in monitor;Damien Miller
2015-06-22Don't call setgroups if we have zero groups; there's no guarantee that itDarren Tucker