summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2001-04-04enable server side rekeying + some rekey related clientup.Markus Friedl
todo: we should not send any non-KEX messages after we send KEXINIT
2001-04-04don't sent multiple kexinit-requests.Markus Friedl
send newkeys, block while waiting for newkeys. fix comments.
2001-04-04enable client rekeyingMarkus Friedl
(1) force rekeying with ~R, or (2) if the server requests rekeying. works against ssh-2.0.12/2.0.13/2.1.0/2.2.0/2.3.0/2.3.1/2.4.0
2001-04-03undo parts of recent my changes: main part of keyexchange does notMarkus Friedl
need dispatch-callbacks, since application data is delayed until the keyexchange completes (if i understand the drafts correctly). add some infrastructure for re-keying.
2001-04-03id_rsa1/2 -> id_rsa; ok markus@Todd T. Fries
2001-04-03move kex to kex*.c, used dispatch_set() callbacks for kex. shouldMarkus Friedl
make rekeying easier.
2001-04-03free() -> xfree()Kevin Steves
2001-04-02grammar; slade@shore.netTheo de Raadt
2001-04-02correct comment; ok markus@Kevin Steves
2001-04-02typo; ok markus@Kevin Steves
2001-03-31Make this work again, this might be ugly, but it works; bad mickey.Federico G. Schwindt
2001-03-30Use stashed user_gid when checking against exempt gid since sudoTodd C. Miller
sets its gid to SUDOERS_GID, making getgid() return that, not the real gid. FIxes problem with setting exempt group == SUDOERS_GID. Fix from Paul Kranenburg.
2001-03-29Protocol 1 key regeneration log => verbose, some KNF; ok markus@Damien Miller
2001-03-29prepare for rekeying: move DH code to dh.cMarkus Friedl
2001-03-29need to set both STOC and CTOS for SSH_BUG_BIGENDIANAES; ok markus@Kevin Steves
2001-03-29Pretty.Aaron Campbell
2001-03-29use recommended defaultsNiels Provos
2001-03-28check auth_root_allowed for kbd-int auth, too.Markus Friedl
2001-03-28more sanity checking on primes fileNiels Provos
2001-03-28forgot to include min and max params in hash, okay markus@Niels Provos
2001-03-28call refuse() before close(); from olemx@ans.plMarkus Friedl
2001-03-28usage more like rcp and add missing -B to usage; ok markus@Kevin Steves
2001-03-28start to sync scp closer to rcp; ok markus@Kevin Steves
2001-03-27Get rid of bogus .UC macro, likely an artifact of old mdoc conversions.Aaron Campbell
2001-03-27make dh group exchange more flexible, allow min and max group size,Niels Provos
okay markus@, deraadt@
2001-03-27some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5Markus Friedl
signatures in SSH protocol 2, ok djm@
2001-03-27use EVP_get_digestbynid, reorder some calls and fix missing free.Markus Friedl
2001-03-26try to read private f-secure ssh v2 rsa keys.Markus Friedl
2001-03-26KNFMarkus Friedl
2001-03-26Replacement for original tsort.Marc Espie
The old code suffers from a few defects: - it does not even implement the standard optimal topological sort algorithm. It's much slower. - its longest cycle computation is completely bogus. This is clean-slate code, that does implement the actual standard optimal topological sort, together with a correct graph traversal to find longest cycles. It does also feature a `stable tsort' mode, where it uses a heap to yield the least disturbed permutation of input nodes that satisfies the ordering constraints (in particular, try tsort -f). Thanks to the nature of the problem, the actual output won't exactly match the old one, but it does pass the regression suite (and it is a topological sorter). Ok millert@
2001-03-26document more defaults; misc. cleanup. ok markus@Kevin Steves
2001-03-26simpler key load/save interface, see authfile.hMarkus Friedl
2001-03-25Add -DUVM if we are using UVM. Fixes problem where the "WHAT" fieldTodd C. Miller
was empty on current i386 and alpha kernels.
2001-03-25extern __progname; from bobMichael Shalayeff
2001-03-25PrintLastLog option; from chip@valinux.com with some minorKevin Steves
changes by me. ok markus@
2001-03-25shorten; ok markus@Damien Miller
2001-03-24unused; remove dup comments. ok markus@Kevin Steves
2001-03-23ignore SIGPIPE, restore in child, fixes x11-fwd crashes; with djm@Markus Friedl
2001-03-23fix put, upload to _absolute_ path, ok djm@Markus Friedl
2001-03-23authctxt is now passed to do_authenticatedMarkus Friedl
2001-03-23Compat for OpenSSH with broken Rijndael/AES. ok markus@Damien Miller
2001-03-22do not place linefeeds in bufferTheo de Raadt
2001-03-22_wall, err/warn; dummy hppa part, like othersMichael Shalayeff
2001-03-22use err/warn, space policeMichael Shalayeff
2001-03-21Add printing of pool statistics for -m.Artur Grabowski
From NetBSD.
2001-03-21New compilation scheme, more cross-compiler friendly, less error-prone.Miod Vallat
As a bonus, bring support for mvme88k. millert@ ok
2001-03-21missing init; from mib@unimelb.edu.auMarkus Friedl
2001-03-21add -B flag to usageJakob Schlyter
2001-03-21alpha fixes, from simonb@wasabisystems.comMarkus Friedl
2001-03-21merge common ssh v1/2 codeMarkus Friedl