summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2020-01-24Teach openssl s_client a bit about TLSv1.3.Theo Buehler
ok beck jsing
2020-01-24minor tweaks to ssh-keygen -Y find-principals:Damien Miller
emit matched principals one per line to stdout rather than as comma- separated and with a free-text preamble (easy confusion opportunity) emit "not found" error to stderr fix up argument testing for -Y operations and improve error message for unsupported operations
2020-01-24remove ssh-rsa (SHA1) from the list of allowed CA signature algorithmsDamien Miller
ok markus
2020-01-24when signing a certificate with an RSA key, default to a safe signatureDamien Miller
algorithm (rsa-sha-512) if not is explicitly specified by the user; ok markus@
2020-01-24allow PEM export of DSA and ECDSA keys; bz3091, patch from Jakub JelenDamien Miller
ok markus@
2020-01-23ssh-keygen -Y find-principals fixes based on feedback from Markus:Damien Miller
use "principals" instead of principal, as allowed_signers lines may list multiple. When the signing key is a certificate, emit only principals that match the certificate principal list. NB. the command -Y name changes: "find-principal" => "find-principals" ok markus@
2020-01-23Remove unused sys/signal.h include.Alexandre Ratchov
2020-01-23Fix typo in comment.Darren Tucker
2020-01-23Make zlib optional. This adds a "ZLIB" build time option that allowsDarren Tucker
building without zlib compression and associated options. With feedback from markus@, ok djm@
2020-01-23remove trailing period characters from pub/priv key pathnames -Damien Miller
they make them needlessly more difficult to cut and paste without error; ok markus@ & dtucker@
2020-01-23new sentence, new line;Jason McIntyre
2020-01-23Replace all calls to signal(2) with a wrapper around sigaction(2).Darren Tucker
This wrapper blocks all other signals during the handler preventing races between handlers, and sets SA_RESTART which should reduce the potential for short read/write operations.
2020-01-23When opening a device, loop over the alternate devices list in theAlexandre Ratchov
worker process instead of the helper process. It is simpler this way and allows the worker to properly log which device is being used.
2020-01-23Accept MIDI clients that don't reset status during sysex messages.Alexandre Ratchov
The MIDI protocol requires the status byte to be resent after common messages, including system exclusive messages. But, some MIDI clients forget to resend it; we workaround this restoring the status byte after sysex messages.
2020-01-23missing header change from previous; spotted by dtucker@Damien Miller
2020-01-23Make -peekaboo mode also use SSL_pending after peeking, to ensureBob Beck
SSL_pending implementation is correct. annoying jsing@
2020-01-23Remove unsupported algorithms from list of defaults at run time andDarren Tucker
remove ifdef and distinct settings for OPENSSL=no case. This will make things much simpler for -portable where the exact set of algos depends on the configuration of both OpenSSH and the libcrypto it's linked against (if any). ok djm@
2020-01-23add a new signature operations "find-principal" to look up theDamien Miller
principal associated with a signature from an allowed-signers file. Work by Sebastian Kinne; ok dtucker@
2020-01-22delete wasteful ;;Theo de Raadt
ok tedu
2020-01-22Ignore whitespace when checking explict fingerprint. When confirming a hostDarren Tucker
key using the fingerprint itself, ignore leading and trailing whitespace. ok deraadt@ djm@
2020-01-22Simplify the peekaboo code.Joel Sing
ok beck@
2020-01-22remove diffie-hellman-group14-sha1 from default kex to see what happens.Ted Unangst
general mostly ok
2020-01-22For ssh-keygen -lF only add a space after key fingerprint when there is aClaudio Jeker
comment. This makes copy-paste of fingerprints into ssh easier. OK djm@
2020-01-22Add -peekaboo option to s_client, to test SSL_peekBob Beck
peeks data before reading, compares to subsequent read. ok jsing@
2020-01-22some __func__ and strerror(errno) here; no functional changeDamien Miller
2020-01-22reword to avoid second person. ok cheloha deraadtTed Unangst
2020-01-22claudio noticed that "exit" inside the main {} clause still runs the EXITTheo de Raadt
clause, this was poorly documented as "immediately", and "after the last line" which is inaccurate there are other causes. Explain this a bit better. ok millert claudio
2020-01-22factor out parsing of allowed-signers linesDamien Miller
2020-01-21expose the number of currently-authenticating connectionsDamien Miller
along with the MaxStartups limit in the proctitle; suggestion from Philipp Marek, w/ feedback from Craig Miskell ok dtucker@
2020-01-21document the default value of the ControlPersist option; ok dtucker@ djm@Christian Weisgerber
2020-01-21In -C mode, the public key is optional since it can be deduced fromTheo Buehler
the untrusted comment. In this case, don't ignore -t but rather make it work as expected. ok tedu
2020-01-21don't #ifdef out the KRL code when compiling without libcryptoDamien Miller
support; it works just fine and disabling it breaks a few tests. ok dtucker@
2020-01-21check access(ssh-sk-helper, X_OK) to provide friendly error messageDamien Miller
for misconfigured helper paths
2020-01-21remove trailing whitespace;Jason McIntyre
2020-01-21Document sntrup4591761x25519-sha512@tinyssh.org. Patch fromDarren Tucker
jtesta@positronsecurity.com via github PR#151.
2020-01-21fix ssh-keygen not displaying authenticator touch prompt;Damien Miller
reported by jmc@
2020-01-21a little more verbosity in sign_and_send_pubkey() debug messagesDamien Miller
2020-01-21Fix tls_handshake() usage which was added without checking return valuesBob Beck
correctly. This would break ftp when the handshake doesn't complete in one shot. (noticed when making tls 1.3 connections to cloudflare.cdn) ok jsing@
2020-01-20Make the code more readable by introducingIngo Schwarze
symbolic constants for tagging priorities. This review also made me find a minor bug: do not upgrade TAG_FALLBACK to TAG_WEAK when there is trailing whitespace.
2020-01-19Introduce a new mdoc(7) macro .Tg ("tag") to explicitly mark a placeIngo Schwarze
as defining a term. Please only use it when automatic tagging does not work. Manual page authors will not be required to add the new macro; using it remains optional. HTML output is still rudimentary in this version and will be polished later. Thanks to kn@ for reminding me that i have been considering since BSDCan 2014 whether something like this might be useful. Given that possibilities of making automatic tagging better are running out and there are still several situations where automatic tagging cannot do the job, i think the time is now ripe. Feedback and no objection from millert@; OK espie@ inoguchi@ kn@.
2020-01-19Align to the new, sane behaviour of the groff_mdoc(7) .Dd macro:Ingo Schwarze
without an argument, use the empty string, and always concatenate all arguments, no matter their number. This allows reducing the number of arguments of mandoc_normdate() and some other simplifications, at the same time polishing some error messages by adding the name of the macro in question.
2020-01-18kdump(1): give timestamp types real names; ok schwarze@cheloha
2020-01-18one more replacement "(security) key" -> "(FIDO) authenticator"Christian Weisgerber
2020-01-18undo merge error and replace the term "security key" againChristian Weisgerber
2020-01-17Document loading of resident keys from a FIDO authenticator.Christian Weisgerber
* Rename -O to -K to keep "-O option" available. * Document -K. * Trim usage() message down to synopsis, like all other commands. ok markus@
2020-01-17Some minor usage() bits omitted in the original diffs.Martijn van Duren
2020-01-17Implement a df subcommand, this outputs disk and memory information in aMartijn van Duren
df(1) format. OK jan@ General positive sounds from the hackroom and Michael W Lucas
2020-01-17Add better support for exception contexts.Martijn van Duren
Now we can see proper nosuchinstance and endofmibtree messages. OK jan@
2020-01-17Implement a -Cs option for snmp walk and bulkwalk.Martijn van Duren
This option allows you to skip subsections of a tree and allows for faster walking with less (undesired) clutter on screen. OK florian@ jan@ Happy sounds from Michael W. Lucas
2020-01-16Usually, -width Fl (which is 10n) is too wide and hence ugly.Ingo Schwarze
Change several instances, most of them to the usual -width Ds.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-23 15:24:59 +0000