Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-04-04 | enable server side rekeying + some rekey related clientup. | Markus Friedl | |
todo: we should not send any non-KEX messages after we send KEXINIT | |||
2001-04-04 | don't sent multiple kexinit-requests. | Markus Friedl | |
send newkeys, block while waiting for newkeys. fix comments. | |||
2001-04-04 | enable client rekeying | Markus Friedl | |
(1) force rekeying with ~R, or (2) if the server requests rekeying. works against ssh-2.0.12/2.0.13/2.1.0/2.2.0/2.3.0/2.3.1/2.4.0 | |||
2001-04-03 | undo parts of recent my changes: main part of keyexchange does not | Markus Friedl | |
need dispatch-callbacks, since application data is delayed until the keyexchange completes (if i understand the drafts correctly). add some infrastructure for re-keying. | |||
2001-04-03 | id_rsa1/2 -> id_rsa; ok markus@ | Todd T. Fries | |
2001-04-03 | move kex to kex*.c, used dispatch_set() callbacks for kex. should | Markus Friedl | |
make rekeying easier. | |||
2001-04-03 | free() -> xfree() | Kevin Steves | |
2001-04-02 | grammar; slade@shore.net | Theo de Raadt | |
2001-04-02 | correct comment; ok markus@ | Kevin Steves | |
2001-04-02 | typo; ok markus@ | Kevin Steves | |
2001-03-31 | Make this work again, this might be ugly, but it works; bad mickey. | Federico G. Schwindt | |
2001-03-30 | Use stashed user_gid when checking against exempt gid since sudo | Todd C. Miller | |
sets its gid to SUDOERS_GID, making getgid() return that, not the real gid. FIxes problem with setting exempt group == SUDOERS_GID. Fix from Paul Kranenburg. | |||
2001-03-29 | Protocol 1 key regeneration log => verbose, some KNF; ok markus@ | Damien Miller | |
2001-03-29 | prepare for rekeying: move DH code to dh.c | Markus Friedl | |
2001-03-29 | need to set both STOC and CTOS for SSH_BUG_BIGENDIANAES; ok markus@ | Kevin Steves | |
2001-03-29 | Pretty. | Aaron Campbell | |
2001-03-29 | use recommended defaults | Niels Provos | |
2001-03-28 | check auth_root_allowed for kbd-int auth, too. | Markus Friedl | |
2001-03-28 | more sanity checking on primes file | Niels Provos | |
2001-03-28 | forgot to include min and max params in hash, okay markus@ | Niels Provos | |
2001-03-28 | call refuse() before close(); from olemx@ans.pl | Markus Friedl | |
2001-03-28 | usage more like rcp and add missing -B to usage; ok markus@ | Kevin Steves | |
2001-03-28 | start to sync scp closer to rcp; ok markus@ | Kevin Steves | |
2001-03-27 | Get rid of bogus .UC macro, likely an artifact of old mdoc conversions. | Aaron Campbell | |
2001-03-27 | make dh group exchange more flexible, allow min and max group size, | Niels Provos | |
okay markus@, deraadt@ | |||
2001-03-27 | some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5 | Markus Friedl | |
signatures in SSH protocol 2, ok djm@ | |||
2001-03-27 | use EVP_get_digestbynid, reorder some calls and fix missing free. | Markus Friedl | |
2001-03-26 | try to read private f-secure ssh v2 rsa keys. | Markus Friedl | |
2001-03-26 | KNF | Markus Friedl | |
2001-03-26 | Replacement for original tsort. | Marc Espie | |
The old code suffers from a few defects: - it does not even implement the standard optimal topological sort algorithm. It's much slower. - its longest cycle computation is completely bogus. This is clean-slate code, that does implement the actual standard optimal topological sort, together with a correct graph traversal to find longest cycles. It does also feature a `stable tsort' mode, where it uses a heap to yield the least disturbed permutation of input nodes that satisfies the ordering constraints (in particular, try tsort -f). Thanks to the nature of the problem, the actual output won't exactly match the old one, but it does pass the regression suite (and it is a topological sorter). Ok millert@ | |||
2001-03-26 | document more defaults; misc. cleanup. ok markus@ | Kevin Steves | |
2001-03-26 | simpler key load/save interface, see authfile.h | Markus Friedl | |
2001-03-25 | Add -DUVM if we are using UVM. Fixes problem where the "WHAT" field | Todd C. Miller | |
was empty on current i386 and alpha kernels. | |||
2001-03-25 | extern __progname; from bob | Michael Shalayeff | |
2001-03-25 | PrintLastLog option; from chip@valinux.com with some minor | Kevin Steves | |
changes by me. ok markus@ | |||
2001-03-25 | shorten; ok markus@ | Damien Miller | |
2001-03-24 | unused; remove dup comments. ok markus@ | Kevin Steves | |
2001-03-23 | ignore SIGPIPE, restore in child, fixes x11-fwd crashes; with djm@ | Markus Friedl | |
2001-03-23 | fix put, upload to _absolute_ path, ok djm@ | Markus Friedl | |
2001-03-23 | authctxt is now passed to do_authenticated | Markus Friedl | |
2001-03-23 | Compat for OpenSSH with broken Rijndael/AES. ok markus@ | Damien Miller | |
2001-03-22 | do not place linefeeds in buffer | Theo de Raadt | |
2001-03-22 | _wall, err/warn; dummy hppa part, like others | Michael Shalayeff | |
2001-03-22 | use err/warn, space police | Michael Shalayeff | |
2001-03-21 | Add printing of pool statistics for -m. | Artur Grabowski | |
From NetBSD. | |||
2001-03-21 | New compilation scheme, more cross-compiler friendly, less error-prone. | Miod Vallat | |
As a bonus, bring support for mvme88k. millert@ ok | |||
2001-03-21 | missing init; from mib@unimelb.edu.au | Markus Friedl | |
2001-03-21 | add -B flag to usage | Jakob Schlyter | |
2001-03-21 | alpha fixes, from simonb@wasabisystems.com | Markus Friedl | |
2001-03-21 | merge common ssh v1/2 code | Markus Friedl | |