summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2001-03-10remove unused sgtty macros; ok markus@Kevin Steves
2001-03-10default to SSH2, now that m68k runs fastTheo de Raadt
2001-03-10ignore nonexisting private keys; report rjmooney@mediaone.netMarkus Friedl
2001-03-09Add a missing newline in debug mode to separate debug output fromTodd C. Miller
line containing command completion; "Brian J. Kifiak" <bk@rt.fm>
2001-03-09Typo in Synopsis; there's a -v option, not -uTodd C. Miller
"Brian J. Kifiak" <bk@rt.fm>
2001-03-09typo; slade@shore.netTheo de Raadt
2001-03-09exit(-#) is wrongTheo de Raadt
2001-03-09create *.pub files with umask 0644, so that you can mv them to authorized_keysTheo de Raadt
2001-03-08implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->Markus Friedl
no need to do enter passphrase or do expensive sign operations if the server does not accept key).
2001-03-08spelling, cleanup; ok deraadt@Kevin Steves
2001-03-08unused; ok markus@Kevin Steves
2001-03-08de-register, use getopt(), prevent a few terribly unlikely bufferPaul Janzen
overflows, improve a few error messages, and avoid a bundle of faults involving the -w option.
2001-03-08Print examples correctlyPaul Janzen
2001-03-08turn off useprivilegedports by default. only rhost-auth needsMarkus Friedl
this. older sshd's may need this, too.
2001-03-07Support for new draft (draft-ietf-secsh-filexfer-01). New symlink handlingDamien Miller
functions and small protocol change.
2001-03-07removed dated commentTheo de Raadt
2001-03-07the name "secure shell" is boring, noone ever uses itTheo de Raadt
2001-03-06order thingsTheo de Raadt
2001-03-06sftp -b batchfile; mouring@etoh.eviladmin.orgTheo de Raadt
2001-03-06appease gccTheo de Raadt
2001-03-06If read() fails with EINTR deal with it the same way we treat EAGAINTodd C. Miller
2001-03-06Don't assume we wil get the version string all in one read().Todd C. Miller
deraadt@ OK'd
2001-03-06EINTR/EAGAIN handling is required in more casesTheo de Raadt
2001-03-05spellingKevin Steves
2001-03-05more ssh_known_hosts2 documentation; ok markus@Kevin Steves
2001-03-05generate a 2*need size (~300 instead of 1024/2048) random privateMarkus Friedl
exponent during the DH key agreement. according to Niels (the great german advisor) this is safe since /etc/primes contains strong primes only. References: P. C. van Oorschot and M. J. Wiener, On Diffie-Hellman key agreement with short exponents, In Advances in Cryptology - EUROCRYPT'96, LNCS 1070, Springer-Verlag, 1996, pp.332-343.
2001-03-05detail default hmac setup tooTheo de Raadt
2001-03-05switch to aes128-cbc/hmac-md5 by default in SSH2 -- faster; provos & markus okTheo de Raadt
2001-03-05sync error message; ok markus@Kevin Steves
2001-03-05skip inlining, why botherTheo de Raadt
2001-03-05inspect MUST take an int to handle EOF issues correctly on unsigned charMarc Espie
machines. Problem reported by naddy.
2001-03-05alpha order; jcs@rt.fmTheo de Raadt
2001-03-04list SSH2 ciphersTheo de Raadt
2001-03-04log functions should not be passed strings that end in newline as theyTodd C. Miller
get passed on to syslog() and when logging to stderr, do_log() appends its own newline.
2001-03-04spellingKevin Steves
2001-03-04kill obsolete RandomSeed; ok markus@ deraadt@Kevin Steves
2001-03-04small cleanup and clarify for PermitRootLogin; ok markus@Kevin Steves
2001-03-04add -m to usage; ok markus@Kevin Steves
2001-03-04Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch] to avoidDamien Miller
header conflicts in portable; ok markus@
2001-03-04don't link unused libsMarkus Friedl
2001-03-04debug1->2Markus Friedl
2001-03-03log*.c -> log.cMarkus Friedl
2001-03-03clean up arg processing. based on work by Christophe_Moret@hp.comMarkus Friedl
2001-03-03KNFTheo de Raadt
2001-03-03Dynamically allocate fd_set; deraadt@ OKTodd C. Miller
2001-03-03Dynamically allocate read_wait and its copies. Since maxfd isTodd C. Miller
baed on resource limits it is often (usually?) larger than FD_SETSIZE.
2001-03-03standard theo sweepTheo de Raadt
2001-03-03drop packets with 127.0.0.0/8 in header field, if the packet is from outside.Jun-ichiro itojun Hagino
under RFC1122 sender rule 127.0.0.8 must not appear on the wire. count incidents by ipstat.ips_badaddr. sync with kame
2001-03-02make copyright lines the same formatTheo de Raadt
2001-03-02Use the ohash_* that's now in libc.Marc Espie