summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2015-04-29Allow ListenAddress, Port and AddressFamily in any order. bz#68,Darren Tucker
2015-04-28enviroment -> environment: apologies to darren for not spotting that firstJason McIntyre
2015-04-28Fix typo in previousDarren Tucker
2015-04-28Document that the TERM environment variable is not subject to SendEnvDarren Tucker
2015-04-27Make sshd default to PermitRootLogin=no;Damien Miller
2015-04-27more OPENSSL=no fixes; ok dtucker@Damien Miller
2015-04-27fix compilation with OPENSSL=no; ok dtucker@Damien Miller
2015-04-27Include stdio.h for FILE (used in sshkey.h) so it compiles with OPENSSL=no.Darren Tucker
2015-04-27allow "sshd -f none" to skip reading the config file, much likeDamien Miller
2015-04-24combine -Dd onto one line and update usage();Jason McIntyre
2015-04-24add ssh-agent -D to leave ssh-agent in foreground without enablingDamien Miller
2015-04-242*len -> use xreallocarray()Theo de Raadt
2015-04-24rename xrealloc() to xreallocarray() since it follows that form.Theo de Raadt
2015-04-23Two small fixes for sshd -T: ListenAddress'es are added to a list head soDarren Tucker
2015-04-23Check for and reject missing arguments for VersionAddendum and ForceCommand.Darren Tucker
2015-04-22unknown certificate extensions are non-fatal, so don't fatalDamien Miller
2015-04-21Add back a backslash removed in rev 1.42 so KEX_SERVER_ENCRYPT willJonathan Gray
2015-04-17s/recommended/required/ that private keys be og-rDamien Miller
2015-04-17don't try to cleanup NULL KEX proposals in kex_prop_free();Damien Miller
2015-04-17use error/logit/fatal instead of fprintf(stderr, ...) and exit(0),Damien Miller
2015-04-17debug log missing DISPLAY environment when X11 forwardingDamien Miller
2015-04-17don't call record_login() in monitor when UseLogin is enabled;Damien Miller
2015-04-17Add some missing options to sshd -T and fix the output of VersionAddendumDarren Tucker
2015-04-16Document "none" for PidFile XAuthLocation TrustedUserCAKeys and RevokedKeys.Darren Tucker
2015-04-15Plug leak of address passed to logging. bz#2373, patch from jjelen at redhat,Darren Tucker
2015-04-14Output remote username in debug output since with Host and Match it's notDarren Tucker
2015-04-13deprecate ancient, pre-RFC4419 and undocumentedDamien Miller
2015-04-10Don't send hostkey advertisments (hostkeys-00@openssh.com) to currentDarren Tucker
2015-04-10include port number if a non-default one has been specified;Damien Miller
2015-04-07treat Protocol=1,2|2,1 as Protocol=2 when compiled without SSH1Damien Miller
2015-04-05Do not use int for sig_atomic_t; spotted by christos@netbsd; ok markus@Miod Vallat
2015-04-03correct return value in pubkey parsing, spotted by Ben HawkesDamien Miller
2015-03-31downgrade error() for known_hosts parse errors to debug() to quietDamien Miller
2015-03-31fd leak for !ssh1 case; found by unittests; ok markus@Damien Miller
2015-03-31don't fatal when a !ssh1 sshd is reexeced from a w/ssh1 listener;Damien Miller
2015-03-31Comments are only supported for RSA1 keys. If a user tried to add one andTobias Stoeckmann
2015-03-30ssh-askpass(1) is the default, overridden by SSH_ASKPASS;Jason McIntyre
2015-03-30fix uninitialised memory read when parsing a config file consistingDamien Miller
2015-03-26sigp and lenp are not optional in ssh_agent_sign(); ok djm@Markus Friedl
2015-03-26don't try to load .ssh/identity by default if SSH1 is disabled; ok markus@Christian Weisgerber
2015-03-26ban all-zero curve25519 keys as recommended by latestDamien Miller
2015-03-26relax bits needed check to allow diffie-hellman-group1-sha1 keyDamien Miller
2015-03-25ignore v1 errors on ssh-add -D; only try v2 keys on -l/-L (unless WITH_SSH1)Markus Friedl
2015-03-25unbreak ssh_agent_sign (lenp vs *lenp)Markus Friedl
2015-03-24don't leak 'setp' on error; noted by Nicholas Lemonias; ok djm@Markus Friedl
2015-03-24consistent check for NULL as noted by Nicholas Lemonias; ok djm@Markus Friedl
2015-03-24correct fmt-string for size_t as noted by Nicholas Lemonias; ok djm@Markus Friedl
2015-03-24promote chacha20-poly1305@openssh.com to be the default cipher;Damien Miller
2015-03-24Compile-time disable SSH protocol 1. You can turn it back on usingDamien Miller
2015-03-24fix double-negative error message "ssh1 is not unsupported"Damien Miller