Click on a directory to enter that directory. Click on a file to display its revision history and to get a chance to display diffs between revisions.
Current directory: [local] / src / usr.bin / ssh
File | Rev. | Age | Author | Last log entry |
---|---|---|---|---|
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
||||
![]() |
1.20 | 8 years | djm | remove the (in)famous SSHv1 CRC compensation attack detector. Despite your came... |
![]() |
1.19 | 8 months | djm | Split per-connection sshd-session binary This splits the user authentication co... |
![]() |
1.99 | 2 months | djm | remove ability to enable DSA support. Actual code will be g/c'd separately. ok d... |
![]() |
1.15 | 6 years | djm | refer to OpenSSL not SSLeay; we're old, but we don't have to act it |
![]() |
1.57 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.24 | 6 months | djm | new name/link for agent I-D |
![]() |
1.5 | 5 years | dtucker | Fix some typos and an incorrect word in docs. Patch from itoama at live.jp via g... |
![]() |
1.4 | 14 months | djm | in OpenSSH private key format, correct type for subsequent private keys in blob.... |
![]() |
1.7 | 23 months | djm | remove vestigal support for KRL signatures When the KRL format was originally d... |
![]() |
1.14 | 17 months | djm | Remove outdated note from PROTOCOL.mux Port forward close by control master is ... |
![]() |
1.4 | 4 years | djm | Add RCS IDs to the few files that are missing them; from Pedro Martelletto |
![]() |
1.26 | 4 years | djm | when writing an attestation blob for a FIDO key, record all the data needed to v... |
![]() |
1.7 | 19 years | djm | $OpenBSD$ in here too |
![]() |
1.9 | 8 months | djm | remove addr.[ch] functions that are unused and visbility-restrict ones that are ... |
![]() |
1.3 | 8 months | djm | remove addr.[ch] functions that are unused and visbility-restrict ones that are ... |
![]() |
1.17 | 4 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
![]() |
1.30 | 6 years | dtucker | Check for both EAGAIN and EWOULDBLOCK. This is a no-op in OpenBSD (they are the... |
![]() |
1.12 | 6 years | djm | move client/server SSH-* banners to buffers under ssh->kex and factor out the ba... |
![]() |
1.15 | 6 years | markus | sshd: switch authentication to sshbuf API; ok djm@ |
![]() |
1.24 | 4 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
![]() |
1.101 | 23 months | dtucker | Include stdint.h for SIZE_MAX. Fixes OPENSSL=no build. |
![]() |
1.31 | 3 years | djm | make authorized_keys environment="..." directives first-match-wins and more stri... |
![]() |
1.49 | 6 weeks | tedu | convert a last quad_t to int64_t. ok deraadt djm |
![]() |
1.58 | 13 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... |
![]() |
1.162 | 9 months | djm | add a "Match invalid-user" predicate to sshd_config Match options. This allows ... |
![]() |
1.108 | 13 months | jsg | remove prototypes with no matching function; ok djm@ |
![]() |
1.54 | 4 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
![]() |
1.36 | 13 months | djm | g/c unused variable |
![]() |
1.53 | 13 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... |
![]() |
1.15 | 13 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... |
![]() |
1.3 | 12 months | djm | typos |
![]() |
1.26 | 13 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... |
![]() |
1.22 | 13 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... |
![]() |
1.122 | 6 months | dtucker | Plug leak on error path, spotted by Coverity. ok djm@ |
![]() |
1.4 | 2 years | dtucker | Remove unused compat.h includes. We've previously removed a lot of the really o... |
![]() |
1.170 | 5 months | dtucker | Fix debug logging of user specific delay. Patch from Achim Leitner (fjl5) via g... |
![]() |
1.135 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.52 | 18 months | djm | Make it possible to load certs from PKCS#11 tokens Adds a protocol extension to... |
![]() |
1.146 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.25 | 5 years | djm | factor out reading/writing sshbufs to dedicated functions; feedback and ok marku... |
![]() |
1.9 | 7 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
![]() |
1.2 | 7 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
![]() |
1.77 | 2 years | dtucker | Return immediately from get_sock_port if sock <0 so we don't call getsockname on... |
![]() |
1.12 | 9 years | djm | refactor canohost.c: move functions that cache results closer to the places that... |
![]() |
1.2 | 23 months | djm | move other RCSIDs to before their respective license blocks too no code change |
![]() |
1.5 | 4 years | djm | whitespace (tab after space) |
![]() |
1.446 | 3 weeks | dtucker | Fix x11_channel_used_recently() to return true when channel has been used within... |
![]() |
1.158 | 8 months | djm | don't start the ObscureKeystrokeTiming mitigations if there has been traffic on ... |
![]() |
1.2 | 10 years | markus | remove unneeded includes, sync my copyright across files & whitespace; ok djm@ |
![]() |
1.1 | 11 years | markus | re-add our own aesctr implementation; ok djm@ |
![]() |
1.2 | 23 months | djm | move other RCSIDs to before their respective license blocks too no code change |
![]() |
1.10 | 23 months | djm | move other RCSIDs to before their respective license blocks too no code change |
![]() |
1.5 | 5 years | djm | make Chacha20-POLY1305 context struct opaque; ok tb@ as part of a larger diff at... |
![]() |
1.124 | 3 months | tb | Fix EVP_CIPHER_CTX_ctrl() return checks While this API tries to translate negat... |
![]() |
1.56 | 20 months | tb | Garbage collect cipher_get_keyiv_len() This is a compat20 leftover, unused sinc... |
![]() |
1.5 | 18 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
![]() |
1.412 | 8 days | djm | whitespace |
![]() |
1.38 | 13 months | jsg | remove prototypes with no matching function; ok djm@ |
![]() |
1.126 | 2 years | dtucker | Refactor creation of KEX proposal. This adds kex_proposal_populate_entries (and... |
![]() |
1.62 | 2 years | dtucker | Refactor creation of KEX proposal. This adds kex_proposal_populate_entries (and... |
![]() |
1.9 | 9 months | djm | Add experimental support for hybrid post-quantum key exchange ML-KEM768 with ECD... |
![]() |
1.75 | 6 months | dtucker | Remove fallback to compiled-in gropup for dhgex when the moduli file exists, but... |
![]() |
1.19 | 4 years | dtucker | Add ModuliFile keyword to sshd_config to specify the location of the "moduli" fi... |
![]() |
1.7 | 5 years | jsg | change explicit_bzero();free() to freezero() While freezero() returns early if ... |
![]() |
1.9 | 4 years | djm | whitespace; no code change |
![]() |
1.8 | 8 years | djm | remove hmac-ripemd160; ok dtucker |
![]() |
1.34 | 5 weeks | djm | use logit_f("...") instead of logit("func: ...") |
![]() |
1.15 | 6 years | djm | remove last traces of old packet API! with & ok markus@ |
![]() |
1.45 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.20 | 2 years | djm | let ssh-keygen and ssh-keyscan accept -Ohashalg=sha1|sha256 when outputting SSHF... |
![]() |
1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
![]() |
1.2 | 13 months | jsg | spelling; ok djm@ |
![]() |
1.11 | 4 years | djm | fix SEGV on fatal() errors spotted by dtucker@ |
![]() |
1.18 | 7 months | jca | Ignore extra groups that don't fit in the buffer passed to getgrouplist(3) Our ... |
![]() |
1.8 | 16 years | djm | support negation of groups in "Match group" block (bz#1315); ok dtucker@ |
![]() |
1.29 | 16 months | djm | whitespace |
![]() |
1.9 | 6 years | markus | sshd: switch GSSAPI to sshbuf API; ok djm@ |
![]() |
1.32 | 5 years | djm | spelling errors in comments; no code change from https://fossies.org/linux/misc/... |
![]() |
1.6 | 5 years | djm | perform hashing directly in crypto_hash_sha512() using libcrypto or libc SHA512 ... |
![]() |
1.14 | 5 years | jsg | change explicit_bzero();free() to freezero() While freezero() returns early if ... |
![]() |
1.9 | 11 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
![]() |
1.99 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.29 | 4 years | djm | make struct hostkeys public; I have no idea why I made it opaque originally. ok... |
![]() |
1.4 | 9 months | djm | pull post-quantum ML-KEM/x25519 key exchange out from compile-time flag now than... |
![]() |
1.187 | 10 months | deraadt | As defined in the RFC, the SSH protocol has negotiable compression support (whic... |
![]() |
1.126 | 9 months | djm | Add experimental support for hybrid post-quantum key exchange ML-KEM768 with ECD... |
![]() |
1.18 | 9 months | djm | Add experimental support for hybrid post-quantum key exchange ML-KEM768 with ECD... |
![]() |
1.34 | 4 years | djm | memleak of DH public bignum; found with libfuzzer |
![]() |
1.10 | 6 years | djm | rename kex->kem_client_pub -> kex->client_pub now that KEM has been renamed to k... |
![]() |
1.10 | 9 months | djm | pull post-quantum ML-KEM/x25519 key exchange out from compile-time flag now than... |
![]() |
1.32 | 6 years | djm | pass most arguments to the KEX hash functions as sshbuf rather than pointer+leng... |
![]() |
1.38 | 3 years | djm | Record session ID, host key and sig at intital KEX These will be used later for... |
![]() |
1.47 | 13 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... |
![]() |
1.2 | 7 months | djm | explicitly include endian.h |
![]() |
1.3 | 9 months | djm | update the Streamlined NTRU Prime code from the "ref" implementation in SUPERCOP... |
![]() |
1.60 | 4 months | djm | Fix cases where error codes were not correctly set Reported by the Qualys Secu... |
![]() |
1.10 | 23 months | djm | remove vestigal support for KRL signatures When the KRL format was originally d... |
![]() |
1.2 | 7 months | djm | fix ML-KEM768x25519 KEX on big-endian systems; spotted by jsg@ feedback/ok deraa... |
![]() |
1.64 | 6 months | djm | add infrastructure for ratelimited logging; feedback/ok dtucker |
![]() |
1.35 | 6 months | djm | add infrastructure for ratelimited logging; feedback/ok dtucker |
![]() |
1.35 | 5 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
![]() |
1.10 | 8 years | djm | Improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms. Previou... |
![]() |
1.45 | 9 months | djm | make parsing user@host consistently look for the last '@' in the string rather t... |
![]() |
1.20 | 4 years | djm | some language improvements; ok markus |
![]() |
1.6 | 8 days | djm | fix leak on error path; Coverity CID 481976 |
![]() |
1.200 | 4 weeks | dtucker | Copy arg to be passed to dirname(). POSIX allows dirname() to modify its args a... |
![]() |
1.111 | 7 weeks | djm | Move agent listener sockets from /tmp to under ~/.ssh/agent for both ssh-agent(1... |
![]() |
1.3 | 7 months | djm | fix ML-KEM768x25519 KEX on big-endian systems; spotted by jsg@ feedback/ok deraa... |
![]() |
1.40 | 4 weeks | dtucker | Remove ssh-keygen's moduli screen -Omemory option. This vaguely made sense 20 y... |
![]() |
1.247 | 6 months | jsg | spelling; ok djm@ |
![]() |
1.25 | 8 months | djm | Split per-connection sshd-session binary This splits the user authentication co... |
![]() |
1.22 | 4 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
![]() |
1.4 | 17 years | djm | make file descriptor passing code return an error rather than call fatal() when ... |
![]() |
1.139 | 7 weeks | djm | correct log messages; the reap function is used for more than just the preauth p... |
![]() |
1.52 | 8 months | djm | Split per-connection sshd-session binary This splits the user authentication co... |
![]() |
1.21 | 13 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... |
![]() |
1.5 | 10 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... |
![]() |
1.103 | 8 months | jsg | remove duplicate misc.h include ok dtucker@ |
![]() |
1.77 | 6 months | djm | unbreak |
![]() |
1.76 | 11 months | djm | Fix proxy multiplexing (-O proxy) bug If a mux started with ControlPersist then... |
![]() |
1.8 | 21 years | djm | unexpand and delete whitespace at EOL; ok markus@ |
![]() |
1.4 | 17 years | djm | document eow message in ssh protocol 2 channel state machine; feedback and ok ma... |
![]() |
1.318 | 4 months | djm | Don't reply to PING in preauth phase or during KEX Reported by the Qualys Secur... |
![]() |
1.99 | 10 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... |
![]() |
1.35 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.3 | 11 years | deraadt | cleanup 1 << 31 idioms. Resurrection of this issue pointed out by Eitan Adler o... |
![]() |
1.4 | 23 months | djm | move other RCSIDs to before their respective license blocks too no code change |
![]() |
1.4 | 11 years | djm | revert __bounded change; it causes way more problems for portable than it solves... |
![]() |
1.56 | 2 weeks | dtucker | Remove dead code ternary. We always report at least KB/s, so B/s is never used.... |
![]() |
1.5 | 6 years | dtucker | Have progressmeter force an update at the beginning and end of each transfer. F... |
![]() |
1.400 | 38 hours | djm | make "Match !final" not trigger a 2nd pass ssh_config parsing pass (unless hostn... |
![]() |
1.159 | 4 months | djm | "Match command ..." support for ssh_config to allow matching on the remote comma... |
![]() |
1.72 | 2 weeks | dtucker | Improve termination condition of while loop to compare size_t's. Assuming read(... |
![]() |
1.20 | 10 years | djm | #if 0 some more arrays used only for decrypting (we don't use since we only need... |
![]() |
1.15 | 3 years | dtucker | Make prototype for rijndaelEncrypt match function including the bounds. Fixes er... |
![]() |
1.3 | 8 months | djm | Split per-connection sshd-session binary This splits the user authentication co... |
![]() |
1.6 | 8 months | djm | Split per-connection sshd-session binary This splits the user authentication co... |
![]() |
1.114 | 2 months | jmc | rework the text for -3 to make it clearer what default behaviour is, and adjust ... |
![]() |
1.264 | 4 weeks | dtucker | Don't leak the args list. Coverity CIDs 481569 & 481570, ok job@ tb@. |
![]() |
1.427 | 4 weeks | dtucker | Replace strncmp + byte count with strprefix in Penalty config parsing. ok kn@, d... |
![]() |
1.169 | 8 months | djm | Split per-connection sshd-session binary This splits the user authentication co... |
![]() |
1.241 | 6 months | djm | Explicitly specify the signature algorithm when signing hostkeys-prove requests.... |
![]() |
1.8 | 7 years | djm | refactor channels.c Move static state to a "struct ssh_channels" that is alloca... |
![]() |
1.342 | 7 weeks | djm | Move agent listener sockets from /tmp to under ~/.ssh/agent for both ssh-agent(1... |
![]() |
1.37 | 2 years | djm | Add channel_force_close() This will forcibly close an open channel by simulatin... |
![]() |
1.177 | 3 months | dtucker | Set highwater when resuming a "put". Prevents bogus "server reordered acks" deb... |
![]() |
1.39 | 21 months | djm | the sftp code was one of my first contributions to OpenSSH and it shows - the fu... |
![]() |
1.34 | 2 years | djm | don't attempt to decode a ridiculous number of attributes; harmless because of b... |
![]() |
1.13 | 2 years | djm | extend sftp-common.c:extend ls_file() to support supplied user/group names; ok m... |
![]() |
1.33 | 21 months | djm | rename remote_glob() -> sftp_glob() to match other API |
![]() |
1.2 | 3 years | deraadt | sys/param.h is not needed for any visible reason |
![]() |
1.6 | 6 years | otto | Replace calls to ssh_malloc_init() by a static init of malloc_options. Prepares ... |
![]() |
1.31 | 3 years | jmc | standardise the grammar in the options list; issue reported by debian at helgefj... |
![]() |
1.148 | 13 months | djm | fix home-directory extension implementation, it always returned the current user... |
![]() |
1.2 | 21 months | djm | the sftp code was one of my first contributions to OpenSSH and it shows - the fu... |
![]() |
1.1 | 2 years | djm | use [email protected] sftp-server extension (when available) to fil... |
![]() |
1.144 | 6 months | djm | sync -o option lists with ssh.1; requested jmc@ |
![]() |
1.240 | 2 months | dtucker | Pass "ControlMaster no" to ssh when invoked by scp & sftp. If you have ControlM... |
![]() |
1.9 | 17 years | dtucker | replace __dead with __attribute__((noreturn)), makes things a little easier to p... |
![]() |
1.15 | 2 years | djm | when enrolling a resident key on a security token, check if a credential with ma... |
![]() |
1.48 | 6 weeks | tb | Use EC_POINT_[sg]et_affine_coordinates() It is available in all supported OpenS... |
![]() |
1.2 | 11 years | markus | add missing $OpenBSD$ tags |
![]() |
1.8 | 9 months | djm | use 64 bit math to avoid signed underflow. upstream code relies on using -fwrapv... |
![]() |
1.9 | 9 months | djm | use 64 bit math to avoid signed underflow. upstream code relies on using -fwrapv... |
![]() |
1.11 | 3 months | djm | fix PerSourcePenalty incorrectly using "crash" penalty when LoginGraceTime was e... |
![]() |
1.4 | 9 months | djm | Add a "refuseconnection" penalty class to sshd_config PerSourcePenalties This a... |
![]() |
1.87 | 12 months | djm | disable the DSA signature algorithm by default; ok markus@ (yes, I know this ex... |
![]() |
1.174 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.85 | 5 weeks | djm | Correct FILES section to mention new default path to agent sockets. Spotted by /... |
![]() |
1.312 | 7 weeks | djm | Move agent listener sockets from /tmp to under ~/.ssh/agent for both ssh-agent(1... |
![]() |
1.19 | 10 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... |
![]() |
1.27 | 10 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... |
![]() |
1.15 | 2 years | djm | refactor sshkey_private_deserialize feedback/ok markus@ |
![]() |
1.19 | 2 years | djm | refactor sshkey_private_deserialize feedback/ok markus@ |
![]() |
1.16 | 13 months | jsg | remove prototypes with no matching function; ok djm@ |
![]() |
1.235 | 4 weeks | dtucker | Remove ssh-keygen's moduli screen -Omemory option. This vaguely made sense 20 y... |
![]() |
1.481 | 4 weeks | dtucker | Remove ssh-keygen's moduli screen -Omemory option. This vaguely made sense 20 y... |
![]() |
1.52 | 12 months | djm | disable the DSA signature algorithm by default; ok markus@ (yes, I know this ex... |
![]() |
1.166 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.18 | 12 months | djm | disable the DSA signature algorithm by default; ok markus@ (yes, I know this ex... |
![]() |
1.76 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.20 | 10 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... |
![]() |
1.7 | 3 years | djm | mention that the helpers are used by ssh(1), ssh-agent(1) and ssh-keygen(1). Pre... |
![]() |
1.27 | 10 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... |
![]() |
1.64 | 9 months | jsg | remove unneeded semicolons; checked by millert@ |
![]() |
1.7 | 18 months | djm | Make it possible to load certs from PKCS#11 tokens Adds a protocol extension to... |
![]() |
1.80 | 10 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... |
![]() |
1.2 | 8 months | djm | Split per-connection sshd-session binary This splits the user authentication co... |
![]() |
1.13 | 4 months | djm | Fix cases where error codes were not correctly set Reported by the Qualys Secu... |
![]() |
1.4 | 3 years | djm | mention that the helpers are used by ssh(1), ssh-agent(1) and ssh-keygen(1). Pre... |
![]() |
1.14 | 2 years | dtucker | Remove duplicate includes. Patch from AtariDreams via github PR#364. |
![]() |
1.41 | 10 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... |
![]() |
1.11 | 3 years | djm | When downloading resident keys from a FIDO token, pass back the user ID that was... |
![]() |
1.14 | 2 years | djm | refactor sshkey_private_deserialize feedback/ok markus@ |
![]() |
1.444 | 6 months | djm | sync the list of options accepted by -o with ssh_config.5 prompted by bz3455 |
![]() |
1.614 | 6 days | djm | better debug diagnostics when loading keys. Will now list key fingerprint and al... |
![]() |
1.91 | 8 months | jsg | remove some unused defines; ok djm@ |
![]() |
1.22 | 20 months | djm | Reserve a range of "local extension" message numbers that OpenSSH promises not t... |
![]() |
1.32 | 8 months | djm | in _ssh_order_hostkeyalgs() consider ECDSA curve type when arranging the hostkey... |
![]() |
1.2 | 7 years | djm | lots of typos in comments/docs. Patch from Karsten Weiss after checking with cod... |
![]() |
1.37 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.413 | 3 months | dtucker | Add %-token and environment variable expansion to SetEnv. feedback deraadt@ jmc@... |
![]() |
1.13 | 3 years | djm | revert previous; it was broken (spotted by Theo) |
![]() |
1.12 | 10 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... |
![]() |
1.2 | 5 years | djm | tidy headers; some junk snuck into sshbuf-misc.c and sshbuf-io.c doesn't need SS... |
![]() |
1.20 | 9 days | dtucker | Fix overflow check in sshbuf_dup_string. It's already constrained by SSHBUF_SIZ... |
![]() |
1.23 | 10 months | tobias | Reorder calloc arguments The first argument should be the amount, the second ar... |
![]() |
1.30 | 5 weeks | djm | function to make a sshbuf from a hex string; useful in tests also constify some... |
![]() |
1.371 | 4 weeks | djm | fix punctuation around host key fingerprints to make them easier to copy and pas... |
![]() |
1.49 | 3 months | dtucker | Allow %-token and environment variable expansion in User, with the exception of ... |
![]() |
1.377 | 4 months | djm | Fix cases where error codes were not correctly set Reported by the Qualys Secu... |
![]() |
1.4 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.2 | 6 months | jsg | spelling; ok djm@ |
![]() |
1.13 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.327 | 9 months | djm | document Match invalid-user |
![]() |
1.619 | 4 weeks | dtucker | Plug leak of startup_pollfd in debug and child paths. Coverity CID 405024, ok d... |
![]() |
1.105 | 6 months | dtucker | Improve description of KbdInteractiveAuthentication. Based on bz#3658, fixes jm... |
![]() |
1.381 | 4 months | djm | add "Match version" support to ssh_config. Allows matching on the local version ... |
![]() |
1.10 | 5 years | djm | improve the error message for u2f enrollment errors by making ssh-keygen be sole... |
![]() |
1.8 | 5 years | djm | improve the error message for u2f enrollment errors by making ssh-keygen be sole... |
![]() |
1.12 | 2 years | djm | factor out key generation feedback/ok markus@ |
![]() |
1.4 | 2 years | djm | factor out key generation feedback/ok markus@ |
![]() |
1.150 | 6 weeks | tb | Use EC_POINT_[sg]et_affine_coordinates() It is available in all supported OpenS... |
![]() |
1.67 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.35 | 4 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
![]() |
1.8 | 18 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
![]() |
1.34 | 5 years | deraadt | fatal() if getgrnam() cannot find "tty" |
![]() |
1.13 | 8 years | dtucker | Factor out code to disconnect from controlling terminal into its own function. ... |
![]() |
1.38 | 4 months | djm | Fix cases where error codes were not correctly set Reported by the Qualys Secu... |
![]() |
1.11 | 3 years | djm | Add ssh-keygen -Y match-principals operation to perform matching of principals n... |
![]() |
1.14 | 15 years | djm | quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we usually don't... |
![]() |
1.36 | 4 years | djm | remove global variable used to stash compat flags and use the purpose-built ssh-... |
![]() |
1.16 | 8 years | djm | purge the last traces of SSHv1 from the TTY modes handling code ok markus |
![]() |
1.42 | 5 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
![]() |
1.14 | 6 years | dtucker | Remove support for running ssh(1) setuid and fatal if attempted. Do not link uid... |
![]() |
1.26 | 4 weeks | dtucker | Fix compile error on 32bit platforms. Spotted by & ok tb@ |
![]() |
1.5 | 3 years | jsg | spelling ok dtucker@ |
![]() |
1.2 | 7 years | dtucker | Rename struct umac_ctx to umac128_ctx too. In portable some linkers complain ab... |
![]() |
1.11 | 5 years | djm | expose vasnmprintf(); ok (as part of other commit) markus deraadt |
![]() |
1.4 | 4 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
![]() |
1.105 | 2 months | djm | openssh-10.0 |
![]() |
1.38 | 4 weeks | deraadt | use "const char * const" for malloc_options here also |
![]() |
1.20 | 4 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
![]() |
1.2 | 7 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
![]() |
1.3 | 7 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
![]() |
1.3 | 7 years | markus | ssh/xmss: fix build; ok djm@ |
![]() |
1.2 | 7 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
![]() |
1.4 | 18 months | jsg | spelling; ok markus@ |
![]() |
1.2 | 7 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
![]() |
1.2 | 7 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
![]() |
1.2 | 7 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
![]() |
1.3 | 7 years | djm | lots of typos in comments/docs. Patch from Karsten Weiss after checking with cod... |
![]() |
1.3 | 7 years | dtucker | Remove unneeded (local) include. ok markus@ |
![]() |
1.7 | 24 years | deraadt | cleanup copyright notices on all files. I have attempted to be accurate with th... |
![]() |
1.2 | 25 years | deraadt | noone needs this anymore |
![]() |
1.2 | 25 years | deraadt | correct for our ssh |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.21 | 7 weeks | djm | Now that there's an I-D for certificate keys, refer to that instead of the much ... |
![]() |
1.2 | 25 years | deraadt | noone is going to read this, anything i delete with this command belongs in a ma... |
![]() |
1.2 | 25 years | dugsong | include licensing info |
![]() |
1.3 | 19 years | deraadt | these files should not exist. the developers have been given ample time and war... |
![]() |
1.10 | 24 years | markus | bye bye |
![]() |
1.10 | 15 years | markus | obsolete |
![]() |
1.5 | 19 years | deraadt | these files should not exist. the developers have been given ample time and war... |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.3 | 21 years | markus | bad license; deraadt |
![]() |
1.2 | 25 years | deraadt | trash |
![]() |
1.15 | 8 years | markus | remove ssh1 server code; ok djm@ |
![]() |
1.31 | 21 years | markus | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henn... |
![]() |
1.46 | 8 years | markus | remove ssh1 server code; ok djm@ |
![]() |
1.91 | 8 years | markus | remove ssh1 server code; ok djm@ |
![]() |
1.28 | 17 years | djm | unifdef -DBSD_AUTH unifdef -USKEY These options have been in use for some years... |
![]() |
1.83 | 8 years | markus | remove ssh1 server code; ok djm@ |
![]() |
1.7 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ |
![]() |
1.3 | 21 years | markus | nuke "[email protected]" |
![]() |
1.4 | 24 years | markus | rename *-skey.c *-chall.c since the files are not skey specific |
![]() |
1.5 | 24 years | provos | rename aux.c to util.c to help with cygwin port |
![]() |
1.2 | 25 years | deraadt | remove local blowfish code |
![]() |
1.2 | 25 years | deraadt | remove local blowfish code |
![]() |
1.2 | 25 years | deraadt | remove local blowfish code |
![]() |
1.2 | 25 years | deraadt | remove local blowfish code |
![]() |
1.4 | 7 years | naddy | Replace ED25519's private SHA-512 implementation with a call to the regular dige... |
![]() |
1.2 | 25 years | deraadt | remove local blowfish code |
![]() |
1.61 | 6 years | markus | remove legacy buffer API emulation layer; ok djm@ |
![]() |
1.23 | 18 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
![]() |
1.14 | 6 years | markus | remove legacy buffer API emulation layer; ok djm@ |
![]() |
1.5 | 6 years | markus | remove legacy buffer API emulation layer; ok djm@ |
![]() |
1.37 | 6 years | markus | remove legacy buffer API emulation layer; ok djm@ |
![]() |
1.27 | 6 years | markus | remove legacy buffer API emulation layer; ok djm@ |
![]() |
1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history |
![]() |
1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history |
![]() |
1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history |
![]() |
1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history |
![]() |
1.3 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history |
![]() |
1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history |
![]() |
1.3 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history |
![]() |
1.3 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history |
![]() |
1.2 | 25 years | deraadt | trash |
![]() |
1.13 | 8 years | djm | remove SSHv1 ciphers; ok markus@ |
![]() |
1.3 | 20 years | djm | remove fallback AES support for old OpenSSL, as OpenBSD has had it for many year... |
![]() |
1.8 | 8 years | djm | remove SSHv1 ciphers; ok markus@ |
![]() |
1.12 | 12 years | naddy | use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolled counter... |
![]() |
1.15 | 24 years | markus | switch to readpassphrase(3) 2.7/8-stable needs readpassphrase.[ch] from libc |
![]() |
1.6 | 24 years | markus | switch to readpassphrase(3) 2.7/8-stable needs readpassphrase.[ch] from libc |
![]() |
1.1 | 20 years | brad | branches: 1.1.2; file closefrom.c was initially added on branch OPENBSD_3_4. |
![]() |
1.27 | 10 years | markus | update packet.c & isolate, introduce struct ssh a) switch packet.c to buffer api... |
![]() |
1.13 | 10 years | markus | update packet.c & isolate, introduce struct ssh a) switch packet.c to buffer api... |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.12 | 25 years | deraadt | even smaller |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.12 | 6 years | dtucker | Remove crc32.{c,h} which were only used by the now-gone SSH1 protocol. Patch fro... |
![]() |
1.16 | 6 years | dtucker | Remove crc32.{c,h} which were only used by the now-gone SSH1 protocol. Patch fro... |
![]() |
1.34 | 8 years | djm | don't know why cvs didn't exterminate these the first time around, I use rm -f a... |
![]() |
1.13 | 8 years | djm | don't know why cvs didn't exterminate these the first time around, I use rm -f a... |
![]() |
1.5 | 11 years | markus | rename digest.c to digest-openssl.c and add libc variant; ok djm@ |
![]() |
1.12 | 24 years | markus | add support for RSA to SSH2. please test. there are now 3 types of keys: RSA1 ... |
![]() |
1.4 | 24 years | markus | add support for RSA to SSH2. please test. there are now 3 types of keys: RSA1 ... |
![]() |
1.3 | 25 years | markus | removed AUTH_FD residua. |
![]() |
1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
![]() |
1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
![]() |
1.8 | 24 years | markus | add SSH2/DSA support to the agent and some other DSA related cleanups. (note tha... |
![]() |
1.5 | 24 years | markus | add SSH2/DSA support to the agent and some other DSA related cleanups. (note tha... |
![]() |
1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
![]() |
1.5 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
![]() |
1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
![]() |
1.2 | 25 years | deraadt | more shrinking |
![]() |
1.10 | 19 years | djm | replace {GET,PUT}_XXBIT macros with functionally similar functions, silencing a ... |
![]() |
1.2 | 25 years | deraadt | distribution target |
![]() |
1.59 | 18 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
![]() |
1.2 | 25 years | deraadt | build ssh components using our build model |
![]() |
1.2 | 4 years | dtucker | estructure sntrup761.sh to process all files in a single list, which will make i... |
![]() |
1.9 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ |
![]() |
1.3 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ |
![]() |
1.14 | 6 years | djm | use KEM API for vanilla c25519 KEX |
![]() |
1.17 | 6 years | djm | use KEM API for vanilla c25519 KEX |
![]() |
1.30 | 6 years | djm | use KEM API for vanilla DH KEX from markus@ ok djm@ |
![]() |
1.36 | 6 years | djm | use KEM API for vanilla DH KEX from markus@ ok djm@ |
![]() |
1.17 | 6 years | djm | nothing shall escape this purge |
![]() |
1.22 | 6 years | djm | use KEM API for vanilla ECDH from markus@ ok djm@ |
![]() |
1.6 | 6 years | djm | nothing shall escape this purge |
![]() |
1.6 | 6 years | djm | merge kexkem[cs] into kexgen from markus@ ok djm@ |
![]() |
1.5 | 4 years | djm | Update/replace the experimental post-quantim hybrid key exchange method based on... |
![]() |
1.133 | 6 years | markus | remove legacy key emulation layer; ok djm@ |
![]() |
1.53 | 6 years | markus | remove legacy key emulation layer; ok djm@ |
![]() |
1.16 | 24 years | markus | log*.c -> log.c |
![]() |
1.21 | 24 years | markus | log*.c -> log.c |
![]() |
1.18 | 24 years | djm | Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch] to avoid header c... |
![]() |
1.3 | 24 years | djm | branches: 1.3.2; Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch]... |
![]() |
1.7 | 16 years | djm | gc unused file (obseleted by libcrypto update) |
![]() |
1.3 | 25 years | markus | nuke minfd/AUTH_FD |
![]() |
1.2 | 21 years | djm | zap another tiny header; ok deraadt@ |
![]() |
1.22 | 8 years | djm | Remove support for pre-authentication compression. Doing compression early in th... |
![]() |
1.7 | 8 years | djm | Remove support for pre-authentication compression. Doing compression early in th... |
![]() |
1.17 | 21 years | djm | kill some more tiny files; ok deraadt@ |
![]() |
1.13 | 21 years | djm | kill some more tiny files; ok deraadt@ |
![]() |
1.13 | 24 years | markus | channel layer cleanup: merge header files and split .c files |
![]() |
1.10 | 6 years | djm | remove last traces of old packet API! with & ok markus@ |
![]() |
1.14 | 6 years | djm | remove last traces of old packet API! with & ok markus@ |
![]() |
1.23 | 24 years | djm | Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch] to avoid header c... |
![]() |
1.9 | 24 years | djm | Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch] to avoid header c... |
![]() |
1.23 | 21 years | markus | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henn... |
![]() |
1.5 | 21 years | markus | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henn... |
![]() |
1.2 | 25 years | provos | convert all uses of gmp to SSL bignum convert all used of rsa to SSL rsa functio... |
![]() |
1.2 | 25 years | provos | convert all uses of gmp to SSL bignum convert all used of rsa to SSL rsa functio... |
![]() |
1.2 | 25 years | provos | convert all uses of gmp to SSL bignum convert all used of rsa to SSL rsa functio... |
![]() |
1.2 | 25 years | deraadt | no longer using rc4 |
![]() |
1.2 | 25 years | deraadt | no longer using rc4 |
![]() |
1.8 | 21 years | djm | kill a tiny header; ok deraadt@ |
![]() |
1.1 | 23 years | miod | branches: 1.1.2; 1.1.4; file readpassphrase.c was initially added on branch OP... |
![]() |
1.1 | 23 years | miod | branches: 1.1.2; 1.1.4; file readpassphrase.h was initially added on branch OP... |
![]() |
1.2 | 25 years | deraadt | remove.c |
![]() |
1.2 | 25 years | deraadt | trash |
![]() |
1.2 | 24 years | markus | no longer used |
![]() |
1.7 | 9 years | markus | remove roaming support; ok djm@ |
![]() |
1.10 | 9 years | markus | remove roaming support; ok djm@ |
![]() |
1.14 | 9 years | markus | remove roaming support; ok djm@ |
![]() |
1.5 | 9 years | markus | remove roaming support; ok djm@ |
![]() |
1.2 | 9 years | markus | remove roaming support; ok djm@ |
![]() |
1.34 | 7 years | djm | actually remove these files |
![]() |
1.19 | 7 years | djm | actually remove these files |
![]() |
1.19 | 9 years | deraadt | systrace is dead. long live systrace. |
![]() |
1.3 | 9 years | deraadt | Change all tame callers to namechange to pledge(2). |
![]() |
1.3 | 14 years | djm | rename sandbox.h => ssh-sandbox.h to make things easier for portable |
![]() |
1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
![]() |
1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
![]() |
1.37 | 15 years | markus | remove obsole scard code |
![]() |
1.15 | 15 years | markus | remove obsole scard code |
![]() |
1.11 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ |
![]() |
1.3 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ |
![]() |
1.2 | 24 years | mouring | branches: 1.2.2; Move colon() and cleanhost() to misc.c where I should I have p... |
![]() |
1.2 | 24 years | mouring | branches: 1.2.2; Move colon() and cleanhost() to misc.c where I should I have p... |
![]() |
1.2 | 25 years | deraadt | distribution target |
![]() |
1.10 | 21 years | djm | Remove useless headers; ok deraadt@ |
![]() |
1.70 | 21 years | djm | sftp.c and sftp-int.c, together at last; ok markus@ |
![]() |
1.8 | 21 years | djm | Remove useless headers; ok deraadt@ |
![]() |
1.4 | 4 years | djm | Update/replace the experimental post-quantim hybrid key exchange method based on... |
![]() |
1.4 | 4 years | djm | Update/replace the experimental post-quantim hybrid key exchange method based on... |
![]() |
1.2 | 25 years | provos | convert all uses of gmp to SSL bignum convert all used of rsa to SSL rsa functio... |
![]() |
1.51 | 7 weeks | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... |
![]() |
1.7 | 22 years | markus | merge ssh-dss.h ssh-rsa.h into key.h; ok deraadt@ |
![]() |
1.7 | 22 years | markus | merge ssh-dss.h ssh-rsa.h into key.h; ok deraadt@ |
![]() |
1.2 | 25 years | deraadt | trash |
![]() |
1.9 | 8 years | djm | don't know why cvs didn't exterminate these the first time around, I use rm -f a... |
![]() |
1.3 | 25 years | deraadt | use libc md5 |
![]() |
1.4 | 25 years | deraadt | use libc md5 |
![]() |
1.81 | 8 years | djm | this one I did forget to "cvs rm" |
![]() |
1.2 | 25 years | deraadt | trash |
![]() |
1.4 | 21 years | deraadt | make two tiny header files go away; djm ok |
![]() |
1.16 | 20 years | djm | replace tilde_expand_filename with a simpler implementation, ahead of more whack... |
![]() |
1.5 | 21 years | deraadt | make two tiny header files go away; djm ok |
![]() |
1.1 | 23 years | miod | branches: 1.1.2; 1.1.4; file tree.h was initially added on branch OPENBSD_3_0.... |
![]() |
1.7 | 24 years | markus | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. ... |
![]() |
1.29 | 5 years | djm | remove mostly vestigal uuencode.[ch]; moving the only unique functionality there... |
![]() |
1.15 | 5 years | djm | remove mostly vestigal uuencode.[ch]; moving the only unique functionality there... |
![]() |
1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |