Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-10-17 | tweak previous; | Jason McIntyre | |
2013-10-17 | rearrange check to reduce diff against -portable | Damien Miller | |
2013-10-17 | fsync@openssh.com protocol extension for sftp-server | Damien Miller | |
client support to allow calling fsync() faster successful transfer patch mostly by imorgan AT nas.nasa.gov; bz#1798 "fine" markus@ "grumble OK" deraadt@ "doesn't sound bad to me" millert@ | |||
2013-10-16 | one I missed in previous: s/isation/ization/ | Damien Miller | |
2013-10-16 | s/canonicalise/canonicalize/ for consistency with existing spelling, | Damien Miller | |
e.g. authorized_keys; pointed out by naddy@ | |||
2013-10-16 | tweak previous; | Jason McIntyre | |
2013-10-16 | Implement client-side hostname canonicalisation to allow an explicit | Damien Miller | |
search path of domain suffixes to use to convert unqualified host names to fully-qualified ones for host key matching. This is particularly useful for host certificates, which would otherwise need to list unqualified names alongside fully-qualified ones (and this causes a number of problems). "looks fine" markus@ | |||
2013-10-15 | tweak previous; | Jason McIntyre | |
2013-10-14 | whitespace at EOL; pointed out by markus@ | Damien Miller | |
2013-10-14 | refactor client config code a little: | Damien Miller | |
add multistate option partsing to readconf.c, similar to servconf.c's existing code. move checking of options that accept "none" as an argument to readconf.c add a lowercase() function and use it instead of explicit tolower() in loops part of a larger diff that was ok markus@ | |||
2013-10-14 | add a "Match" keyword to ssh_config that allows matching on hostname, | Damien Miller | |
user and result of arbitrary commands. "nice work" markus@ | |||
2013-10-14 | Add logging of session starts in a useful format; ok markus@ feedback and | Damien Miller | |
ok dtucker@ | |||
2013-10-14 | tweak previous; | Jason McIntyre | |
ok djm | |||
2013-10-14 | add 7.5kbit DH groups | Darren Tucker | |
2013-10-14 | count number of lines in moduli input file and pass to the testing | Darren Tucker | |
ssh-keygen process. this will let it provide an completion time estimate. | |||
2013-10-11 | obsolete comment | Damien Miller | |
2013-10-11 | missed one arg reorder | Damien Miller | |
2013-10-11 | rename flag arguments to be more clear and consistent. | Damien Miller | |
reorder some internal function arguments to make adding additional flags easier. no functional change | |||
2013-10-10 | Regenerate moduli | Darren Tucker | |
2013-10-10 | bz#2139: fix re-exec fallback by ensuring that startup_pipe is correctly | Damien Miller | |
updated; ok dtucker@ | |||
2013-10-10 | Move moduli generation to usr.bin/ssh/moduli-gen and keep track of | Darren Tucker | |
the fragments separately. "No substantive objection" djm@ | |||
2013-10-10 | add -Q, -P and -p to usage() before jmc@ catches me | Damien Miller | |
2013-10-09 | Add ability to whitelist and/or blacklist sftp protocol requests by name. | Damien Miller | |
Refactor dispatch loop and consolidate read-only mode checks. Make global variables static, since sftp-server is linked into sshd(8). ok dtucker@ | |||
2013-10-08 | Increase the size of the Diffie-Hellman groups requested for a each symmetric | Darren Tucker | |
key size. New values from NIST Special Publication 800-57 with the upper limit specified by RFC4419. Pointed out by Peter Backes, ok djm@. | |||
2013-09-19 | bz#1211: make BindAddress work with UsePrivilegedPort=yes; patch from | Damien Miller | |
swp AT swp.pp.ru; ok dtucker@ | |||
2013-09-19 | bz#1297 - tell the client (via packet_send_debug) when their preferred | Damien Miller | |
listen address has been overridden by the server's GatewayPorts; ok dtucker@ | |||
2013-09-19 | fix swapped pflag and printflag in sftp upload_dir; from Iain Morgan | Damien Miller | |
2013-09-19 | store the initial file offset so the progress meter doesn't freak out | Damien Miller | |
when resuming sftp transfers. bz#2137; patch from Iain Morgan; ok dtucker@ | |||
2013-09-16 | Remove gssapi config parts from ssh_config, as was already done for sshd_config. | Stuart Henderson | |
Req by/ok ajacoutot@ | |||
2013-09-13 | avoid unaligned access in code that reused a buffer to send a | Damien Miller | |
struct in_addr in a reply; simpler just use use buffer_put_int(); from portable; spotted by and ok dtucker@ | |||
2013-09-12 | fix connection crash when sending break (~B) on ControlPersist'd session; | Damien Miller | |
ok dtucker@ | |||
2013-09-07 | Remove commented-out kerberos/gssapi config options from sample config, | Stuart Henderson | |
kerberos support is currently not enabled in ssh in OpenBSD. Discussed with various people; ok deraadt@ | |||
2013-09-02 | All the instances of arc4random_stir() are bogus, since arc4random() | Theo de Raadt | |
does this itself, inside itself, and has for a very long time.. Actually, this was probably reducing the entropy available. ok djm | |||
2013-08-31 | make ^w match ksh behaviour (delete previous word instead of entire line) | Damien Miller | |
2013-08-28 | improve batch processing a bit by making use of the quite flag a bit | Mike Belopuhov | |
more often and exit with a non zero code if asked to find a hostname in a known_hosts file and it wasn't there; originally from reyk@, ok djm | |||
2013-08-22 | Stir PRNG after post-accept fork. The child gets a different PRNG state | Damien Miller | |
anyway via rexec and explicit privsep reseeds, but it's good to be sure. ok markus@ | |||
2013-08-20 | some proxyusefdpass tweaks; | Jason McIntyre | |
2013-08-20 | Add a ssh_config ProxyUseFDPass option that supports the use of | Damien Miller | |
ProxyCommands that establish a connection and then pass a connected file descriptor back to ssh(1). This allows the ProxyCommand to exit rather than have to shuffle data back and forth and enables ssh to use getpeername, etc. to obtain address information just like it does with regular directly-connected sockets. ok markus@ | |||
2013-08-14 | some Bx/Ox conversion; | Jason McIntyre | |
From: Jan Stary | |||
2013-08-13 | another of the same typo | Damien Miller | |
2013-08-13 | typo in error message; from Stephan Rickauer | Damien Miller | |
2013-08-10 | libkafs5 -> libkafs (unused in build, so no functional change) | Antoine Jacoutot | |
2013-08-09 | enable ctrl-left-arrow and ctrl-right-arrow to move forward/back a word; | Damien Miller | |
matching ksh's relatively recent change. | |||
2013-08-09 | two problems found by a to-be-committed regress test: 1) msg_id was not | Damien Miller | |
being initialised so was starting at a random value from the heap (harmless, but confusing). 2) some error conditions were not being propagated back to the caller | |||
2013-08-09 | do getopt parsing for all sftp commands (with an empty optstring for | Damien Miller | |
commands without arguments) to ensure consistent behaviour | |||
2013-08-08 | add a "-l" flag for the rename command to force it to use the silly | Damien Miller | |
standard SSH_FXP_RENAME command instead of the POSIX-rename- like posix-rename@openssh.com extension. intended for use in regress tests, so no documentation. | |||
2013-08-08 | fix two year old regression: symlinking a file would incorrectly | Damien Miller | |
canonicalise the target path. bz#2129 report from delphij AT freebsd.org | |||
2013-08-07 | sort -a; | Jason McIntyre | |
2013-08-06 | add cast to avoid format warning; from portable | Damien Miller | |
2013-08-06 | document top-level -a option (the -a option to 'get' was already documented) | Damien Miller | |