Click on a directory to enter that directory. Click on a file to display its revision history and to get a chance to display diffs between revisions.
Current directory: [local] / src / usr.bin / ssh
| File | Rev. | Age | Author | Last log entry |
|---|---|---|---|---|
| 1.20 | 8 years | djm | remove the (in)famous SSHv1 CRC compensation attack detector. Despite your came... | |
| 1.19 | 14 months | djm | Split per-connection sshd-session binary This splits the user authentication co... | |
| 1.104 | 6 weeks | djm | move crypto_hash_sha512() to be inline in crypto_api.h, saves about 0.5kb per bi... | |
| 1.15 | 7 years | djm | refer to OpenSSL not SSLeay; we're old, but we don't have to act it | |
| 1.59 | 4 months | dtucker | Improve sentence. ok djm@ | |
| 1.25 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.4 | 20 months | djm | in OpenSSH private key format, correct type for subsequent private keys in blob.... | |
| 1.7 | 2 years | djm | remove vestigal support for KRL signatures When the KRL format was originally d... | |
| 1.14 | 23 months | djm | Remove outdated note from PROTOCOL.mux Port forward close by control master is ... | |
| 1.4 | 5 years | djm | Add RCS IDs to the few files that are missing them; from Pedro Martelletto | |
| 1.26 | 5 years | djm | when writing an attestation blob for a FIDO key, record all the data needed to v... | |
| 1.7 | 19 years | djm | $OpenBSD$ in here too | |
| 1.9 | 13 months | djm | remove addr.[ch] functions that are unused and visbility-restrict ones that are ... | |
| 1.3 | 13 months | djm | remove addr.[ch] functions that are unused and visbility-restrict ones that are ... | |
| 1.17 | 4 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... | |
| 1.30 | 6 years | dtucker | Check for both EAGAIN and EWOULDBLOCK. This is a no-op in OpenBSD (they are the... | |
| 1.12 | 6 years | djm | move client/server SSH-* banners to buffers under ssh->kex and factor out the ba... | |
| 1.15 | 7 years | markus | sshd: switch authentication to sshbuf API; ok djm@ | |
| 1.25 | 2 months | dtucker | Include misc.h. Removes diff vs portable. | |
| 1.102 | 2 months | djm | fix memleak when applying certificate options; ok dtucker | |
| 1.31 | 4 years | djm | make authorized_keys environment="..." directives first-match-wins and more stri... | |
| 1.49 | 7 months | tedu | convert a last quad_t to int64_t. ok deraadt djm | |
| 1.58 | 18 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... | |
| 1.163 | 2 months | djm | when merging auth options into the active set, don't leak the old struct sshauth... | |
| 1.108 | 18 months | jsg | remove prototypes with no matching function; ok djm@ | |
| 1.57 | 2 months | dtucker | Relax array check slightly. Prevents compiler warnings in -portable when there ... | |
| 1.36 | 18 months | djm | g/c unused variable | |
| 1.55 | 4 months | dtucker | Cast serial no for %lld to prevent compiler warnings on some platforms. | |
| 1.15 | 18 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... | |
| 1.3 | 18 months | djm | typos | |
| 1.26 | 18 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... | |
| 1.22 | 18 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... | |
| 1.124 | 4 months | dtucker | Cast serial no for %lld to prevent compiler warnings on some platforms. | |
| 1.6 | 4 months | dtucker | Cast serial no for %lld to prevent compiler warnings on some platforms. | |
| 1.170 | 10 months | dtucker | Fix debug logging of user specific delay. Patch from Achim Leitner (fjl5) via g... | |
| 1.136 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.53 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.147 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.25 | 5 years | djm | factor out reading/writing sshbufs to dedicated functions; feedback and ok marku... | |
| 1.9 | 8 years | djm | add RCSIDs to these; they make syncing portable a bit easier | |
| 1.2 | 8 years | djm | add RCSIDs to these; they make syncing portable a bit easier | |
| 1.77 | 2 years | dtucker | Return immediately from get_sock_port if sock <0 so we don't call getsockname on... | |
| 1.12 | 9 years | djm | refactor canohost.c: move functions that cache results closer to the places that... | |
| 1.2 | 2 years | djm | move other RCSIDs to before their respective license blocks too no code change | |
| 1.5 | 4 years | djm | whitespace (tab after space) | |
| 1.452 | 2 months | djm | don't reuse c->isatty for signalling that the remote channel has a tty attached ... | |
| 1.162 | 2 months | djm | don't reuse c->isatty for signalling that the remote channel has a tty attached ... | |
| 1.2 | 10 years | markus | remove unneeded includes, sync my copyright across files & whitespace; ok djm@ | |
| 1.1 | 11 years | markus | re-add our own aesctr implementation; ok djm@ | |
| 1.2 | 2 years | djm | move other RCSIDs to before their respective license blocks too no code change | |
| 1.10 | 2 years | djm | move other RCSIDs to before their respective license blocks too no code change | |
| 1.5 | 5 years | djm | make Chacha20-POLY1305 context struct opaque; ok tb@ as part of a larger diff at... | |
| 1.125 | 3 months | djm | simplify algorithm list functions using xextendf(); ok dtucker@ | |
| 1.56 | 2 years | tb | Garbage collect cipher_get_keyiv_len() This is a compat20 leftover, unused sinc... | |
| 1.5 | 19 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... | |
| 1.418 | 2 weeks | dtucker | Add Escape option ~I that shows information about the current SSH connection. ok... | |
| 1.39 | 9 days | dtucker | Add an ssh -Oconninfo command that shows connection information, similar to the ... | |
| 1.126 | 2 years | dtucker | Refactor creation of KEX proposal. This adds kex_proposal_populate_entries (and... | |
| 1.62 | 2 years | dtucker | Refactor creation of KEX proposal. This adds kex_proposal_populate_entries (and... | |
| 1.10 | 6 weeks | djm | move crypto_hash_sha512() to be inline in crypto_api.h, saves about 0.5kb per bi... | |
| 1.75 | 12 months | dtucker | Remove fallback to compiled-in gropup for dhgex when the moduli file exists, but... | |
| 1.19 | 4 years | dtucker | Add ModuliFile keyword to sshd_config to specify the location of the "moduli" fi... | |
| 1.8 | 3 months | dtucker | Remove unused rmd160.h header. ripemd160 support was removed in 2017. | |
| 1.9 | 5 years | djm | whitespace; no code change | |
| 1.8 | 8 years | djm | remove hmac-ripemd160; ok dtucker | |
| 1.34 | 6 months | djm | use logit_f("...") instead of logit("func: ...") | |
| 1.15 | 6 years | djm | remove last traces of old packet API! with & ok markus@ | |
| 1.46 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.21 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.1 | 6 weeks | djm | support ed25519 signatures via libcrypto. Mostly by Jeremy Allison Feedback tb@,... | |
| 1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... | |
| 1.2 | 18 months | jsg | spelling; ok djm@ | |
| 1.11 | 5 years | djm | fix SEGV on fatal() errors spotted by dtucker@ | |
| 1.18 | 13 months | jca | Ignore extra groups that don't fit in the buffer passed to getgrouplist(3) Our ... | |
| 1.8 | 17 years | djm | support negation of groups in "Match group" block (bz#1315); ok dtucker@ | |
| 1.30 | 2 months | dtucker | Sort headers as per KNF. Removes diff vs portable. | |
| 1.9 | 7 years | markus | sshd: switch GSSAPI to sshbuf API; ok djm@ | |
| 1.34 | 7 days | djm | add a GssDelegateCreds option for the server, controlling whether it accepts del... | |
| 1.15 | 3 months | dtucker | Order headers as per KNF. Also removes diff vs -portable. | |
| 1.9 | 11 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... | |
| 1.100 | 2 weeks | djm | avoid leak of fingerprint on error path; from Lidong Yan via GHPR611 | |
| 1.29 | 4 years | djm | make struct hostkeys public; I have no idea why I made it opaque originally. ok... | |
| 1.6 | 3 months | djm | simplify algorithm list functions using xextendf(); ok dtucker@ | |
| 1.189 | 2 months | djm | memleak of kex->server_sig_algs; ok dtucker@ | |
| 1.127 | 4 months | djm | ssh(1): add a warning when the connection negotiates a non-post quantum safe key... | |
| 1.18 | 15 months | djm | Add experimental support for hybrid post-quantum key exchange ML-KEM768 with ECD... | |
| 1.35 | 2 months | djm | include openssl/bn.h explicitly in files where we use BN_* makes things simpler ... | |
| 1.11 | 2 months | djm | include openssl/bn.h explicitly in files where we use BN_* makes things simpler ... | |
| 1.10 | 15 months | djm | pull post-quantum ML-KEM/x25519 key exchange out from compile-time flag now than... | |
| 1.32 | 6 years | djm | pass most arguments to the KEX hash functions as sshbuf rather than pointer+leng... | |
| 1.39 | 2 months | djm | include openssl/bn.h explicitly in files where we use BN_* makes things simpler ... | |
| 1.49 | 2 months | djm | stray newline | |
| 1.2 | 13 months | djm | explicitly include endian.h | |
| 1.3 | 14 months | djm | update the Streamlined NTRU Prime code from the "ref" implementation in SUPERCOP... | |
| 1.62 | 2 months | djm | memleak of KRL revoked certs struct; ok dtucker | |
| 1.10 | 2 years | djm | remove vestigal support for KRL signatures When the KRL format was originally d... | |
| 1.4 | 4 weeks | djm | sync support for systems that lack __builtin_popcount() from portable unused on... | |
| 1.66 | 3 weeks | djm | don't strnvis() log messages that are going to be logged by sshd-auth via its pa... | |
| 1.35 | 12 months | djm | add infrastructure for ratelimited logging; feedback/ok dtucker | |
| 1.37 | 3 months | dtucker | Order headers as per KNF. | |
| 1.10 | 9 years | djm | Improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms. Previou... | |
| 1.45 | 15 months | djm | make parsing user@host consistently look for the last '@' in the string rather t... | |
| 1.20 | 5 years | djm | some language improvements; ok markus | |
| 1.6 | 5 months | djm | fix leak on error path; Coverity CID 481976 | |
| 1.211 | 9 days | phessler | allow network programs select DSCP_VA for network ToS OK stsp@ | |
| 1.114 | 9 days | djm | Add convtime_double() that converts a string interval, such as "3w2d4h5m10.5s", ... | |
| 1.5 | 4 weeks | djm | sync support for systems that lack __builtin_popcount() from portable unused on... | |
| 1.40 | 6 months | dtucker | Remove ssh-keygen's moduli screen -Omemory option. This vaguely made sense 20 y... | |
| 1.249 | 2 months | djm | wait for the unprivileged sshd-auth process to exit before closing the fd it use... | |
| 1.25 | 14 months | djm | Split per-connection sshd-session binary This splits the user authentication co... | |
| 1.22 | 5 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... | |
| 1.4 | 18 years | djm | make file descriptor passing code return an error rather than call fatal() when ... | |
| 1.143 | 2 months | djm | silence "mm_log_handler: write: Broken pipe" logspam | |
| 1.53 | 5 months | djm | the messaging layer between sshd-session and sshd-auth had a maximum message siz... | |
| 1.21 | 18 months | djm | Start the process of splitting sshd into separate binaries. This step splits ssh... | |
| 1.5 | 10 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... | |
| 1.108 | 9 days | dtucker | Add an ssh -Oconninfo command that shows connection information, similar to the ... | |
| 1.77 | 12 months | djm | unbreak | |
| 1.76 | 16 months | djm | Fix proxy multiplexing (-O proxy) bug If a mux started with ControlPersist then... | |
| 1.8 | 22 years | djm | unexpand and delete whitespace at EOL; ok markus@ | |
| 1.4 | 17 years | djm | document eow message in ssh protocol 2 channel state machine; feedback and ok ma... | |
| 1.327 | 9 days | dtucker | Add an ssh -Oconninfo command that shows connection information, similar to the ... | |
| 1.104 | 2 weeks | dtucker | Add Escape option ~I that shows information about the current SSH connection. ok... | |
| 1.36 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.4 | 4 months | djm | update our PKCS#11 API header to v3.0; feedback/ok tb@ | |
| 1.4 | 2 years | djm | move other RCSIDs to before their respective license blocks too no code change | |
| 1.4 | 11 years | djm | revert __bounded change; it causes way more problems for portable than it solves... | |
| 1.56 | 6 months | dtucker | Remove dead code ternary. We always report at least KB/s, so B/s is never used.... | |
| 1.5 | 6 years | dtucker | Have progressmeter force an update at the beginning and end of each transfer. F... | |
| 1.407 | 3 weeks | dtucker | Plug leaks while parsing Match blocks. Coverity CID 515634, ok miod@ djm@ | |
| 1.161 | 4 months | djm | ssh(1): add a warning when the connection negotiates a non-post quantum safe key... | |
| 1.72 | 6 months | dtucker | Improve termination condition of while loop to compare size_t's. Assuming read(... | |
| 1.20 | 10 years | djm | #if 0 some more arrays used only for decrypting (we don't use since we only need... | |
| 1.15 | 4 years | dtucker | Make prototype for rijndaelEncrypt match function including the bounds. Fixes er... | |
| 1.115 | 2 months | naddy | typos: a ssh* -> an ssh* ok dtucker@ | |
| 1.270 | 11 days | djm | correctly quote filenames in verbose output for local->local copies; from Colin ... | |
| 1.439 | 7 days | djm | add a GssDelegateCreds option for the server, controlling whether it accepts del... | |
| 1.171 | 7 days | djm | add a GssDelegateCreds option for the server, controlling whether it accepts del... | |
| 1.245 | 6 weeks | djm | Activate UnusedConnectionTimeout only after last channel has closed. Previously ... | |
| 1.8 | 8 years | djm | refactor channels.c Move static state to a "struct ssh_channels" that is alloca... | |
| 1.345 | 3 weeks | jca | Export XDG_RUNTIME_DIR to child ssh sessions Currently setusercontext(LOGIN_SET... | |
| 1.37 | 2 years | djm | Add channel_force_close() This will forcibly close an open channel by simulatin... | |
| 1.180 | 2 months | djm | during sftp uploads, avoid a condition where a failed write could be ignored if ... | |
| 1.40 | 2 months | djm | fix leaks of struct sftp_conn in scp; ok dtucker@ | |
| 1.34 | 2 years | djm | don't attempt to decode a ridiculous number of attributes; harmless because of b... | |
| 1.13 | 3 years | djm | extend sftp-common.c:extend ls_file() to support supplied user/group names; ok m... | |
| 1.33 | 2 years | djm | rename remote_glob() -> sftp_glob() to match other API | |
| 1.2 | 4 years | deraadt | sys/param.h is not needed for any visible reason | |
| 1.6 | 6 years | otto | Replace calls to ssh_malloc_init() by a static init of malloc_options. Prepares ... | |
| 1.31 | 4 years | jmc | standardise the grammar in the options list; issue reported by debian at helgefj... | |
| 1.150 | 7 days | djm | increment correct variable when counting group memberships. Reported by Kevin Da... | |
| 1.2 | 2 years | djm | the sftp code was one of my first contributions to OpenSSH and it shows - the fu... | |
| 1.1 | 3 years | djm | use [email protected] sftp-server extension (when available) to fil... | |
| 1.144 | 12 months | djm | sync -o option lists with ssh.1; requested jmc@ | |
| 1.247 | 2 months | djm | similar to scp, fix implicit destination path selection when source path ends wi... | |
| 1.9 | 17 years | dtucker | replace __dead with __attribute__((noreturn)), makes things a little easier to p... | |
| 1.15 | 3 years | djm | when enrolling a resident key on a security token, check if a credential with ma... | |
| 1.48 | 7 months | tb | Use EC_POINT_[sg]et_affine_coordinates() It is available in all supported OpenS... | |
| 1.2 | 12 years | markus | add missing $OpenBSD$ tags | |
| 1.8 | 14 months | djm | use 64 bit math to avoid signed underflow. upstream code relies on using -fwrapv... | |
| 1.9 | 14 months | djm | use 64 bit math to avoid signed underflow. upstream code relies on using -fwrapv... | |
| 1.14 | 9 days | djm | convert PerSourcePenalties to using floating point time, allowing penalties to b... | |
| 1.4 | 14 months | djm | Add a "refuseconnection" penalty class to sshd_config PerSourcePenalties This a... | |
| 1.88 | 3 months | djm | When adding certificates to an agent, set the expiry to the certificate expiry t... | |
| 1.184 | 2 weeks | djm | When loading FIDO2 resident keys, set the comment to the FIDO application string... | |
| 1.86 | 2 months | naddy | typos: a ssh* -> an ssh* ok dtucker@ | |
| 1.315 | 4 weeks | dtucker | Remove calls to OpenSSL_add_all_algorithms() and ERR_load_crypto_strings(). Thes... | |
| 1.19 | 16 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... | |
| 1.28 | 4 months | djm | Help OpenSSH's PKCS#11 support kick its meth habit. The PKCS#11 code in OpenSSH... | |
| 1.15 | 3 years | djm | refactor sshkey_private_deserialize feedback/ok markus@ | |
| 1.20 | 4 months | djm | factor out encoding of a raw ed25519 signature into its ssh form into a separate... | |
| 1.16 | 18 months | jsg | remove prototypes with no matching function; ok djm@ | |
| 1.236 | 2 months | naddy | typos: a ssh* -> an ssh* ok dtucker@ | |
| 1.487 | 4 weeks | dtucker | Remove calls to OpenSSL_add_all_algorithms() and ERR_load_crypto_strings(). Thes... | |
| 1.53 | 2 months | naddy | typos: a ssh* -> an ssh* ok dtucker@ | |
| 1.167 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.18 | 17 months | djm | disable the DSA signature algorithm by default; ok markus@ (yes, I know this ex... | |
| 1.79 | 4 weeks | dtucker | Remove calls to OpenSSL_add_all_algorithms() and ERR_load_crypto_strings(). Thes... | |
| 1.25 | 6 weeks | djm | cleanup file descriptors across PKCS#11 client/helper execution; ok markus | |
| 1.7 | 3 years | djm | mention that the helpers are used by ssh(1), ssh-agent(1) and ssh-keygen(1). Pre... | |
| 1.30 | 6 weeks | djm | cleanup file descriptors across PKCS#11 client/helper execution; ok markus | |
| 1.75 | 3 weeks | tb | pkcs11_fetch_ecdsa_pubkey: use ASN1_STRING accessors In anticipation of davidbe... | |
| 1.10 | 8 weeks | djm | mention this is for both ssh-pkcs11.c and ssh-pkcs11-client.c | |
| 1.82 | 2 months | djm | include openssl/bn.h explicitly in files where we use BN_* makes things simpler ... | |
| 1.13 | 9 months | djm | Fix cases where error codes were not correctly set Reported by the Qualys Secu... | |
| 1.4 | 3 years | djm | mention that the helpers are used by ssh(1), ssh-agent(1) and ssh-keygen(1). Pre... | |
| 1.15 | 4 months | djm | Help OpenSSH's PKCS#11 support kick its meth habit. The PKCS#11 code in OpenSSH... | |
| 1.41 | 16 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... | |
| 1.11 | 4 years | djm | When downloading resident keys from a FIDO token, pass back the user ID that was... | |
| 1.446 | 9 days | dtucker | Add an ssh -Oconninfo command that shows connection information, similar to the ... | |
| 1.621 | 9 days | dtucker | Add an ssh -Oconninfo command that shows connection information, similar to the ... | |
| 1.91 | 14 months | jsg | remove some unused defines; ok djm@ | |
| 1.22 | 2 years | djm | Reserve a range of "local extension" message numbers that OpenSSH promises not t... | |
| 1.33 | 4 weeks | dtucker | Remove calls to OpenSSL_add_all_algorithms() and ERR_load_crypto_strings(). Thes... | |
| 1.2 | 7 years | djm | lots of typos in comments/docs. Patch from Karsten Weiss after checking with cod... | |
| 1.37 | 7 months | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... | |
| 1.420 | 2 months | naddy | typos: a ssh* -> an ssh* ok dtucker@ | |
| 1.14 | 3 weeks | djm | add a sshbuf_get_nulterminated_string() function to pull a \0- terminated string... | |
| 1.12 | 16 months | djm | Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remains unconverted... | |
| 1.2 | 5 years | djm | tidy headers; some junk snuck into sshbuf-misc.c and sshbuf-io.c doesn't need SS... | |
| 1.22 | 3 months | djm | fix sshbuf_dtourlb64() to not choke on empty buffers; previously it incorrectly ... | |
| 1.23 | 16 months | tobias | Reorder calloc arguments The first argument should be the amount, the second ar... | |
| 1.33 | 3 weeks | djm | add a sshbuf_get_nulterminated_string() function to pull a \0- terminated string... | |
| 1.376 | 2 months | jsg | consistently use NULL for null pointer constants found with sparse, ok djm@ | |
| 1.49 | 9 months | dtucker | Allow %-token and environment variable expansion in User, with the exception of ... | |
| 1.378 | 2 months | djm | memleak of keys not used for authentication; ok dtucker@ | |
| 1.10 | 4 weeks | dtucker | Remove calls to OpenSSL_add_all_algorithms() and ERR_load_crypto_strings(). Thes... | |
| 1.2 | 12 months | jsg | spelling; ok djm@ | |
| 1.17 | 4 weeks | dtucker | Remove calls to OpenSSL_add_all_algorithms() and ERR_load_crypto_strings(). Thes... | |
| 1.328 | 2 months | naddy | typos: a ssh* -> an ssh* ok dtucker@ | |
| 1.623 | 4 weeks | dtucker | Remove calls to OpenSSL_add_all_algorithms() and ERR_load_crypto_strings(). Thes... | |
| 1.105 | 12 months | dtucker | Improve description of KbdInteractiveAuthentication. Based on bz#3658, fixes jm... | |
| 1.389 | 7 days | djm | add a GssDelegateCreds option for the server, controlling whether it accepts del... | |
| 1.10 | 5 years | djm | improve the error message for u2f enrollment errors by making ssh-keygen be sole... | |
| 1.8 | 5 years | djm | improve the error message for u2f enrollment errors by making ssh-keygen be sole... | |
| 1.158 | 2 weeks | djm | Support writing ED25519 keys in PKCS8 format. GHPR570 from Josh Brobst | |
| 1.70 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.35 | 5 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... | |
| 1.8 | 19 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... | |
| 1.34 | 6 years | deraadt | fatal() if getgrnam() cannot find "tty" | |
| 1.13 | 9 years | dtucker | Factor out code to disconnect from controlling terminal into its own function. ... | |
| 1.40 | 2 months | jsg | consistently use NULL for null pointer constants found with sparse, ok djm@ | |
| 1.11 | 4 years | djm | Add ssh-keygen -Y match-principals operation to perform matching of principals n... | |
| 1.14 | 15 years | djm | quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we usually don't... | |
| 1.36 | 4 years | djm | remove global variable used to stash compat flags and use the purpose-built ssh-... | |
| 1.16 | 8 years | djm | purge the last traces of SSHv1 from the TTY modes handling code ok markus | |
| 1.42 | 6 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... | |
| 1.14 | 7 years | dtucker | Remove support for running ssh(1) setuid and fatal if attempted. Do not link uid... | |
| 1.27 | 3 months | dtucker | Tabs->spaces. Removes diff vs portable. | |
| 1.5 | 3 years | jsg | spelling ok dtucker@ | |
| 1.2 | 7 years | dtucker | Rename struct umac_ctx to umac128_ctx too. In portable some linkers complain ab... | |
| 1.11 | 5 years | djm | expose vasnmprintf(); ok (as part of other commit) markus deraadt | |
| 1.4 | 4 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... | |
| 1.107 | 2 months | djm | openssh-10.2 The only change since 10.1 is the channels.c fix | |
| 1.38 | 6 months | deraadt | use "const char * const" for malloc_options here also | |
| 1.20 | 4 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... | |
| 1.7 | 25 years | deraadt | cleanup copyright notices on all files. I have attempted to be accurate with th... | |
| 1.2 | 26 years | deraadt | noone needs this anymore | |
| 1.2 | 26 years | deraadt | correct for our ssh | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.21 | 7 months | djm | Now that there's an I-D for certificate keys, refer to that instead of the much ... | |
| 1.6 | 4 months | djm | a bunch of the protocol extensions we support now have RFCs and I-Ds that are mo... | |
| 1.2 | 26 years | deraadt | noone is going to read this, anything i delete with this command belongs in a ma... | |
| 1.2 | 26 years | dugsong | include licensing info | |
| 1.3 | 19 years | deraadt | these files should not exist. the developers have been given ample time and war... | |
| 1.10 | 25 years | markus | bye bye | |
| 1.10 | 15 years | markus | obsolete | |
| 1.5 | 19 years | deraadt | these files should not exist. the developers have been given ample time and war... | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.3 | 22 years | markus | bad license; deraadt | |
| 1.2 | 26 years | deraadt | trash | |
| 1.15 | 9 years | markus | remove ssh1 server code; ok djm@ | |
| 1.31 | 22 years | markus | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henn... | |
| 1.46 | 9 years | markus | remove ssh1 server code; ok djm@ | |
| 1.91 | 9 years | markus | remove ssh1 server code; ok djm@ | |
| 1.28 | 18 years | djm | unifdef -DBSD_AUTH unifdef -USKEY These options have been in use for some years... | |
| 1.83 | 9 years | markus | remove ssh1 server code; ok djm@ | |
| 1.7 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ | |
| 1.3 | 22 years | markus | nuke "[email protected]" | |
| 1.4 | 24 years | markus | rename *-skey.c *-chall.c since the files are not skey specific | |
| 1.5 | 25 years | provos | rename aux.c to util.c to help with cygwin port | |
| 1.2 | 26 years | deraadt | remove local blowfish code | |
| 1.2 | 26 years | deraadt | remove local blowfish code | |
| 1.2 | 26 years | deraadt | remove local blowfish code | |
| 1.2 | 26 years | deraadt | remove local blowfish code | |
| 1.4 | 8 years | naddy | Replace ED25519's private SHA-512 implementation with a call to the regular dige... | |
| 1.2 | 26 years | deraadt | remove local blowfish code | |
| 1.61 | 7 years | markus | remove legacy buffer API emulation layer; ok djm@ | |
| 1.23 | 19 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... | |
| 1.14 | 7 years | markus | remove legacy buffer API emulation layer; ok djm@ | |
| 1.5 | 7 years | markus | remove legacy buffer API emulation layer; ok djm@ | |
| 1.37 | 7 years | markus | remove legacy buffer API emulation layer; ok djm@ | |
| 1.27 | 7 years | markus | remove legacy buffer API emulation layer; ok djm@ | |
| 1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history | |
| 1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history | |
| 1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history | |
| 1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history | |
| 1.3 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history | |
| 1.2 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history | |
| 1.3 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history | |
| 1.3 | 24 years | markus | undo the .c file split, just merge the header and keep the cvs history | |
| 1.2 | 26 years | deraadt | trash | |
| 1.13 | 8 years | djm | remove SSHv1 ciphers; ok markus@ | |
| 1.3 | 20 years | djm | remove fallback AES support for old OpenSSL, as OpenBSD has had it for many year... | |
| 1.8 | 8 years | djm | remove SSHv1 ciphers; ok markus@ | |
| 1.12 | 13 years | naddy | use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolled counter... | |
| 1.15 | 24 years | markus | switch to readpassphrase(3) 2.7/8-stable needs readpassphrase.[ch] from libc | |
| 1.6 | 24 years | markus | switch to readpassphrase(3) 2.7/8-stable needs readpassphrase.[ch] from libc | |
| 1.1 | 21 years | brad | branches: 1.1.2; file closefrom.c was initially added on branch OPENBSD_3_4. | |
| 1.27 | 10 years | markus | update packet.c & isolate, introduce struct ssh a) switch packet.c to buffer api... | |
| 1.13 | 10 years | markus | update packet.c & isolate, introduce struct ssh a) switch packet.c to buffer api... | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.12 | 26 years | deraadt | even smaller | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.12 | 6 years | dtucker | Remove crc32.{c,h} which were only used by the now-gone SSH1 protocol. Patch fro... | |
| 1.16 | 6 years | dtucker | Remove crc32.{c,h} which were only used by the now-gone SSH1 protocol. Patch fro... | |
| 1.34 | 8 years | djm | don't know why cvs didn't exterminate these the first time around, I use rm -f a... | |
| 1.13 | 8 years | djm | don't know why cvs didn't exterminate these the first time around, I use rm -f a... | |
| 1.5 | 11 years | markus | rename digest.c to digest-openssl.c and add libc variant; ok djm@ | |
| 1.12 | 25 years | markus | add support for RSA to SSH2. please test. there are now 3 types of keys: RSA1 ... | |
| 1.4 | 25 years | markus | add support for RSA to SSH2. please test. there are now 3 types of keys: RSA1 ... | |
| 1.3 | 26 years | markus | removed AUTH_FD residua. | |
| 1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... | |
| 1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... | |
| 1.8 | 25 years | markus | add SSH2/DSA support to the agent and some other DSA related cleanups. (note tha... | |
| 1.5 | 25 years | markus | add SSH2/DSA support to the agent and some other DSA related cleanups. (note tha... | |
| 1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... | |
| 1.5 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... | |
| 1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... | |
| 1.2 | 26 years | deraadt | more shrinking | |
| 1.10 | 19 years | djm | replace {GET,PUT}_XXBIT macros with functionally similar functions, silencing a ... | |
| 1.7 | 6 weeks | djm | move crypto_hash_sha512() to be inline in crypto_api.h, saves about 0.5kb per bi... | |
| 1.2 | 26 years | deraadt | distribution target | |
| 1.59 | 19 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... | |
| 1.2 | 26 years | deraadt | build ssh components using our build model | |
| 1.2 | 4 years | dtucker | estructure sntrup761.sh to process all files in a single list, which will make i... | |
| 1.9 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ | |
| 1.3 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ | |
| 1.14 | 6 years | djm | use KEM API for vanilla c25519 KEX | |
| 1.17 | 6 years | djm | use KEM API for vanilla c25519 KEX | |
| 1.30 | 6 years | djm | use KEM API for vanilla DH KEX from markus@ ok djm@ | |
| 1.36 | 6 years | djm | use KEM API for vanilla DH KEX from markus@ ok djm@ | |
| 1.17 | 6 years | djm | nothing shall escape this purge | |
| 1.22 | 6 years | djm | use KEM API for vanilla ECDH from markus@ ok djm@ | |
| 1.6 | 6 years | djm | nothing shall escape this purge | |
| 1.6 | 6 years | djm | merge kexkem[cs] into kexgen from markus@ ok djm@ | |
| 1.5 | 4 years | djm | Update/replace the experimental post-quantim hybrid key exchange method based on... | |
| 1.133 | 7 years | markus | remove legacy key emulation layer; ok djm@ | |
| 1.53 | 7 years | markus | remove legacy key emulation layer; ok djm@ | |
| 1.16 | 24 years | markus | log*.c -> log.c | |
| 1.21 | 24 years | markus | log*.c -> log.c | |
| 1.18 | 24 years | djm | Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch] to avoid header c... | |
| 1.3 | 24 years | djm | branches: 1.3.2; Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch]... | |
| 1.7 | 17 years | djm | gc unused file (obseleted by libcrypto update) | |
| 1.3 | 26 years | markus | nuke minfd/AUTH_FD | |
| 1.2 | 21 years | djm | zap another tiny header; ok deraadt@ | |
| 1.22 | 9 years | djm | Remove support for pre-authentication compression. Doing compression early in th... | |
| 1.7 | 9 years | djm | Remove support for pre-authentication compression. Doing compression early in th... | |
| 1.17 | 21 years | djm | kill some more tiny files; ok deraadt@ | |
| 1.13 | 21 years | djm | kill some more tiny files; ok deraadt@ | |
| 1.13 | 24 years | markus | channel layer cleanup: merge header files and split .c files | |
| 1.10 | 6 years | djm | remove last traces of old packet API! with & ok markus@ | |
| 1.14 | 6 years | djm | remove last traces of old packet API! with & ok markus@ | |
| 1.23 | 24 years | djm | Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch] to avoid header c... | |
| 1.9 | 24 years | djm | Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch] to avoid header c... | |
| 1.23 | 22 years | markus | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henn... | |
| 1.5 | 22 years | markus | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henn... | |
| 1.2 | 26 years | provos | convert all uses of gmp to SSL bignum convert all used of rsa to SSL rsa functio... | |
| 1.2 | 26 years | provos | convert all uses of gmp to SSL bignum convert all used of rsa to SSL rsa functio... | |
| 1.2 | 26 years | provos | convert all uses of gmp to SSL bignum convert all used of rsa to SSL rsa functio... | |
| 1.2 | 26 years | deraadt | no longer using rc4 | |
| 1.2 | 26 years | deraadt | no longer using rc4 | |
| 1.8 | 21 years | djm | kill a tiny header; ok deraadt@ | |
| 1.1 | 24 years | miod | branches: 1.1.2; 1.1.4; file readpassphrase.c was initially added on branch OP... | |
| 1.1 | 24 years | miod | branches: 1.1.2; 1.1.4; file readpassphrase.h was initially added on branch OP... | |
| 1.2 | 26 years | deraadt | remove.c | |
| 1.2 | 26 years | deraadt | trash | |
| 1.2 | 25 years | markus | no longer used | |
| 1.7 | 9 years | markus | remove roaming support; ok djm@ | |
| 1.10 | 9 years | markus | remove roaming support; ok djm@ | |
| 1.14 | 9 years | markus | remove roaming support; ok djm@ | |
| 1.5 | 9 years | markus | remove roaming support; ok djm@ | |
| 1.2 | 9 years | markus | remove roaming support; ok djm@ | |
| 1.34 | 8 years | djm | actually remove these files | |
| 1.19 | 8 years | djm | actually remove these files | |
| 1.4 | 3 months | jsg | remove unused 0-sized files; ok deraadt@ | |
| 1.7 | 3 months | jsg | remove unused 0-sized files; ok deraadt@ | |
| 1.19 | 9 years | deraadt | systrace is dead. long live systrace. | |
| 1.3 | 10 years | deraadt | Change all tame callers to namechange to pledge(2). | |
| 1.3 | 14 years | djm | rename sandbox.h => ssh-sandbox.h to make things easier for portable | |
| 1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... | |
| 1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... | |
| 1.37 | 15 years | markus | remove obsole scard code | |
| 1.15 | 15 years | markus | remove obsole scard code | |
| 1.11 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ | |
| 1.3 | 11 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ | |
| 1.2 | 24 years | mouring | branches: 1.2.2; Move colon() and cleanhost() to misc.c where I should I have p... | |
| 1.2 | 24 years | mouring | branches: 1.2.2; Move colon() and cleanhost() to misc.c where I should I have p... | |
| 1.2 | 26 years | deraadt | distribution target | |
| 1.10 | 21 years | djm | Remove useless headers; ok deraadt@ | |
| 1.70 | 21 years | djm | sftp.c and sftp-int.c, together at last; ok markus@ | |
| 1.8 | 21 years | djm | Remove useless headers; ok deraadt@ | |
| 1.4 | 4 years | djm | Update/replace the experimental post-quantim hybrid key exchange method based on... | |
| 1.4 | 4 years | djm | Update/replace the experimental post-quantim hybrid key exchange method based on... | |
| 1.2 | 26 years | provos | convert all uses of gmp to SSL bignum convert all used of rsa to SSL rsa functio... | |
| 1.51 | 7 months | djm | finally remove DSA signature support from OpenSSH. feedback/ok tb@, ok deraadt@... | |
| 1.7 | 22 years | markus | merge ssh-dss.h ssh-rsa.h into key.h; ok deraadt@ | |
| 1.7 | 22 years | markus | merge ssh-dss.h ssh-rsa.h into key.h; ok deraadt@ | |
| 1.3 | 3 months | jsg | remove unused 0-sized files; ok deraadt@ | |
| 1.15 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.2 | 26 years | deraadt | trash | |
| 1.9 | 8 years | djm | don't know why cvs didn't exterminate these the first time around, I use rm -f a... | |
| 1.3 | 26 years | deraadt | use libc md5 | |
| 1.4 | 26 years | deraadt | use libc md5 | |
| 1.81 | 8 years | djm | this one I did forget to "cvs rm" | |
| 1.2 | 26 years | deraadt | trash | |
| 1.13 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.5 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.4 | 21 years | deraadt | make two tiny header files go away; djm ok | |
| 1.16 | 20 years | djm | replace tilde_expand_filename with a simpler implementation, ahead of more whack... | |
| 1.5 | 21 years | deraadt | make two tiny header files go away; djm ok | |
| 1.1 | 23 years | miod | branches: 1.1.2; 1.1.4; file tree.h was initially added on branch OPENBSD_3_0.... | |
| 1.7 | 24 years | markus | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. ... | |
| 1.29 | 6 years | djm | remove mostly vestigal uuencode.[ch]; moving the only unique functionality there... | |
| 1.15 | 6 years | djm | remove mostly vestigal uuencode.[ch]; moving the only unique functionality there... | |
| 1.4 | 2 years | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... | |
| 1.3 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.4 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.4 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.3 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.5 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.3 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.3 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.3 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.4 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus | |
| 1.4 | 3 months | djm | remove experimental support for XMSS keys; ok deraadt markus |