Click on a directory to enter that directory. Click on a file to display its revision history and to get a chance to display diffs between revisions.
Current directory: [local] / src / usr.bin / ssh
Current tag: OPENBSD_5_8_BASE
| File | Rev. | Age | Author | Last log entry |
|---|---|---|---|---|
![[BACK]](/icons/back.gif){kind=icon} Parent Directory |
||||
![[DIR]](/icons/dir.gif){kind=icon} lib/ |
||||
| moduli-gen/ |
||||
| scard/ |
||||
| scp/ |
||||
| sftp/ |
||||
| sftp-server/ |
||||
| ssh/ |
||||
| ssh-add/ |
||||
| ssh-agent/ |
||||
| ssh-keygen/ |
||||
| ssh-keyscan/ |
||||
| ssh-keysign/ |
||||
| ssh-pkcs11-helper/ |
||||
| ssh-sk-helper/ |
||||
| sshd/ |
||||
| sshd-session/ |
||||
![[TXT]](/icons/text.gif){kind=icon} sshd.c |
1.457 | 8 years | djm | Allow ssh_config and sshd_config kex parameters options be prefixed by a '+' to ... |
| ssh.c |
1.420 | 8 years | djm | branches: 1.420.2; Allow ssh_config and sshd_config kex parameters options be p... |
| ssh.1 |
1.361 | 8 years | millert | Move .Pp before .Bl, not after to quiet mandoc -Tlint. Noticed by jmc@ |
| channels.c |
1.347 | 8 years | djm | better refuse ForwardX11Trusted=no connections attempted after ForwardX11Timeout... |
| servconf.c |
1.280 | 8 years | deraadt | add prohibit-password as a synonymn for without-password, since the without-pass... |
| sshd.8 |
1.280 | 8 years | djm | refuse to generate or accept RSA keys smaller than 1024 bits; feedback and ok dt... |
| session.c |
1.278 | 9 years | deraadt | branches: 1.278.2; rename xrealloc() to xreallocarray() since it follows that f... |
| ssh-keygen.c |
1.276 | 8 years | djm | refuse to generate or accept RSA keys smaller than 1024 bits; feedback and ok dt... |
| clientloop.c |
1.275 | 8 years | markus | branches: 1.275.2; Turn off DSA by default; add HostKeyAlgorithms to the server... |
| sshconnect.c |
1.262 | 9 years | dtucker | Increase the allowed length of the known host file name in the log message to be... |
| readconf.c |
1.239 | 8 years | djm | branches: 1.239.2; Allow ssh_config and sshd_config kex parameters options be p... |
| sshconnect2.c |
1.226 | 8 years | djm | Allow ssh_config and sshd_config kex parameters options be prefixed by a '+' to ... |
| ssh_config.5 |
1.214 | 8 years | djm | Allow ssh_config and sshd_config kex parameters options be prefixed by a '+' to ... |
| packet.c |
1.213 | 8 years | djm | include the peer's offer when logging a failure to negotiate a mutual set of alg... |
| sshd_config.5 |
1.210 | 8 years | deraadt | add prohibit-password as a synonymn for without-password, since the without-pass... |
| ssh-agent.c |
1.204 | 8 years | markus | no need to include the old buffer/key API |
| scp.c |
1.182 | 9 years | deraadt | rename xrealloc() to xreallocarray() since it follows that form. ok djm |
| serverloop.c |
1.178 | 9 years | djm | UpdateHostKeys fixes: I accidentally changed the format of the hostkeys@openssh... |
| sftp.c |
1.170 | 9 years | deraadt | Reduce use of <sys/param.h> and transition to <limits.h> throughout. ok djm mark... |
| monitor.c |
1.150 | 8 years | djm | Don't count successful partial authentication as failures in monitor; this may h... |
| auth2.c |
1.135 | 9 years | markus | move dispatch to struct ssh; ok djm@ |
| ssh-keygen.1 |
1.126 | 8 years | djm | refuse to generate or accept RSA keys smaller than 1024 bits; feedback and ok dt... |
| ssh-add.c |
1.123 | 8 years | djm | delete support for legacy v00 certificates; "sure" markus@ dtucker@ |
| servconf.h |
1.120 | 8 years | markus | Turn off DSA by default; add HostKeyAlgorithms to the server and PubkeyAcceptedK... |
| sftp-client.c |
1.120 | 9 years | djm | add error message on ftruncate failure; bz#2176 |
| channels.h |
1.118 | 8 years | djm | better refuse ForwardX11Trusted=no connections attempted after ForwardX11Timeout... |
| authfile.c |
1.116 | 8 years | markus | re-enable ed25519-certs if compiled w/o openssl; ok djm |
| auth.c |
1.112 | 8 years | deraadt | branches: 1.112.4; add prohibit-password as a synonymn for without-password, si... |
| readconf.h |
1.110 | 8 years | markus | Turn off DSA by default; add HostKeyAlgorithms to the server and PubkeyAcceptedK... |
| kex.c |
1.109 | 8 years | djm | Allow ssh_config and sshd_config kex parameters options be prefixed by a '+' to ... |
| sftp-server.c |
1.106 | 9 years | deraadt | rename xrealloc() to xreallocarray() since it follows that form. ok djm |
| sftp.1 |
1.101 | 9 years | djm | Add a ssh_config HostbasedKeyType option to control which host public key types ... |
| ssh-keyscan.c |
1.101 | 9 years | djm | include port number if a non-default one has been specified; based on patch from... |
| cipher.c |
1.100 | 9 years | djm | make non-OpenSSL aes-ctr work on sshd w/ privsep; ok markus@ |
| authfd.c |
1.98 | 8 years | djm | delete support for legacy v00 certificates; "sure" markus@ dtucker@ |
| misc.c |
1.97 | 9 years | deraadt | rename xrealloc() to xreallocarray() since it follows that form. ok djm |
| sshd_config |
1.97 | 8 years | deraadt | add prohibit-password as a synonymn for without-password, since the without-pass... |
| compat.c |
1.96 | 8 years | djm | add Cisco to the list of clients that choke on the hostkeys update extension. Po... |
| monitor_wrap.c |
1.85 | 9 years | djm | prevent authorized_keys options picked up on public key tests without a correspo... |
| auth.h |
1.84 | 9 years | djm | whitespace at EOL |
| ssh.h |
1.81 | 8 years | djm | backout SSH_RSA_MINIMUM_MODULUS_SIZE increase for this release; problems spotted... |
| version.h |
1.74 | 8 years | djm | openssh 7.0; ok deraadt@ |
| kex.h |
1.73 | 8 years | djm | Allow ssh_config and sshd_config kex parameters options be prefixed by a '+' to ... |
| canohost.c |
1.72 | 9 years | millert | Make sure we only call getnameinfo() for AF_INET or AF_INET6 sockets. getpeernam... |
| auth-options.c |
1.68 | 8 years | djm | delete support for legacy v00 certificates; "sure" markus@ dtucker@ |
| scp.1 |
1.67 | 8 years | markus | Turn off DSA by default; add HostKeyAlgorithms to the server and PubkeyAcceptedK... |
| hostfile.c |
1.66 | 9 years | djm | Remove pattern length argument from match_pattern_list(), we only ever use it fo... |
| packet.h |
1.66 | 9 years | djm | avoid more fatal/exit in the packet.c paths that ssh-keyscan uses; feedback and ... |
| nchan.c |
1.63 | 14 years | djm | rewrite ssh(1) multiplexing code to a more sensible protocol. The new multiplex... |
| ssh-add.1 |
1.62 | 9 years | jmc | ssh-askpass(1) is the default, overridden by SSH_ASKPASS; diff originally from j... |
| ssh-agent.1 |
1.59 | 9 years | jmc | combine -Dd onto one line and update usage(); |
| dh.c |
1.57 | 9 years | dtucker | Add a stronger (4k bit) fallback group that sshd can use when the moduli file is... |
| misc.h |
1.54 | 9 years | millert | Add support for Unix domain socket forwarding. A remote TCP port may be forward... |
| auth2-pubkey.c |
1.53 | 8 years | jsing | If AuthorizedPrincipalsCommand is specified, however AuthorizedPrincipalsFile is... |
| mux.c |
1.53 | 9 years | djm | branches: 1.53.2; remove failed remote forwards established by muliplexing from... |
| ssh-rsa.c |
1.53 | 8 years | djm | return failure on RSA signature error; reported by Albert S |
| Makefile.inc |
1.50 | 8 years | djm | Compile-time disable SSH v.1 again |
| readpass.c |
1.50 | 10 years | djm | convert memset of potentially-private data to explicit_bzero() |
| ssh-keysign.c |
1.49 | 8 years | djm | add an XXX reminder for getting correct key paths from sshd_config |
| cipher.h |
1.48 | 8 years | markus | typedefs for Cipher&CipherContext are unused |
| compat.h |
1.48 | 9 years | dtucker | Cap DH-GEX group size at 4kbits for Cisco implementations. Some of them will ch... |
| myproposal.h |
1.47 | 8 years | markus | Turn off DSA by default; add HostKeyAlgorithms to the server and PubkeyAcceptedK... |
| auth-rhosts.c |
1.46 | 9 years | djm | KNF and add a little more debug() |
| log.c |
1.46 | 8 years | markus | xmalloc.h is unused |
| auth-passwd.c |
1.44 | 9 years | millert | Add support for Unix domain socket forwarding. A remote TCP port may be forward... |
| auth2-chall.c |
1.43 | 8 years | djm | only query each keyboard-interactive device once per authentication request rega... |
| progressmeter.c |
1.41 | 9 years | djm | update sftp client and server to new buffer API. pretty much just mechanical cha... |
| uidswap.c |
1.39 | 8 years | dtucker | Revert previous commit. We still want to call setgroups in the case where there... |
| authfd.h |
1.38 | 9 years | djm | move authfd.c and its tentacles to the new buffer/key API; ok markus@ |
| ssh-keyscan.1 |
1.36 | 9 years | sobrado | improve capitalization for the Ed25519 public-key signature system. ok djm@ |
| dns.c |
1.34 | 9 years | djm | update to new API (key_fingerprint => sshkey_fingerprint) check sshkey_fingerpri... |
| krl.c |
1.33 | 8 years | djm | delete support for legacy v00 certificates; "sure" markus@ dtucker@ |
| mac.c |
1.32 | 9 years | naddy | handle UMAC128 initialization like UMAC; ok djm@ markus@ |
| ssh-dss.c |
1.32 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| xmalloc.c |
1.32 | 9 years | deraadt | rename xrealloc() to xreallocarray() since it follows that form. ok djm |
| clientloop.h |
1.31 | 11 years | dtucker | branches: 1.31.4; 1.31.10; No need for the mux cleanup callback to be visible ... |
| session.h |
1.31 | 10 years | djm | Add logging of session starts in a useful format; ok markus@ feedback and ok dtu... |
| sshlogin.c |
1.31 | 9 years | deraadt | Reduce use of <sys/param.h> and transition to <limits.h> throughout. ok djm mark... |
| match.c |
1.30 | 9 years | djm | Remove pattern length argument from match_pattern_list(), we only ever use it fo... |
| moduli.c |
1.30 | 9 years | deraadt | Reduce use of <sys/param.h> and transition to <limits.h> throughout. ok djm mark... |
| sshpty.c |
1.30 | 8 years | djm | fix pty permissions; patch from Nikolay Edigaryev; ok deraadt |
| PROTOCOL |
1.29 | 8 years | djm | direct-streamlocal@openssh.com Unix domain foward messages do not contain a "res... |
| gss-serv.c |
1.29 | 9 years | djm | add knob to relax GSSAPI host credential check for multihomed hosts bz#928, patc... |
| kexgex.c |
1.29 | 9 years | markus | adapt kex to sshbuf and struct ssh; ok djm@ |
| ttymodes.c |
1.29 | 15 years | stevesk | protocol 2 tty modes support is now 7.5 years old so remove these debug3()s; ok ... |
| sftp-common.c |
1.28 | 9 years | deraadt | Reduce use of <sys/param.h> and transition to <limits.h> throughout. ok djm mark... |
| ssh_config |
1.28 | 10 years | sthen | Remove gssapi config parts from ssh_config, as was already done for sshd_config.... |
| sshconnect.h |
1.28 | 10 years | djm | Implement client-side hostname canonicalisation to allow an explicit search path... |
| atomicio.c |
1.27 | 9 years | deraadt | Replace <sys/param.h> with <limits.h> and other less dirty headers where possibl... |
| dispatch.c |
1.27 | 9 years | djm | refactor ssh_dispatch_run_fatal() to use sshpkt_fatal() to better report error c... |
| monitor_wrap.h |
1.27 | 9 years | djm | prevent authorized_keys options picked up on public key tests without a correspo... |
| sftp-client.h |
1.27 | 9 years | djm | moar whitespace at eol |
| sftp-glob.c |
1.27 | 9 years | djm | update sftp client and server to new buffer API. pretty much just mechanical cha... |
| sftp-server.8 |
1.27 | 9 years | djm | Make manual reflect reality: sftp-server's -d option accepts a "%d" option, not ... |
| auth2-hostbased.c |
1.25 | 9 years | djm | Remove pattern length argument from match_pattern_list(), we only ever use it fo... |
| kexdh.c |
1.25 | 9 years | markus | adapt kex to sshbuf and struct ssh; ok djm@ |
| kexgexs.c |
1.25 | 9 years | djm | deprecate ancient, pre-RFC4419 and undocumented SSH2_MSG_KEX_DH_GEX_REQUEST_OLD ... |
| hostfile.h |
1.24 | 9 years | djm | Refactor hostkeys_foreach() and dependent code Deal with IP addresses (i.e. Chec... |
| pathnames.h |
1.24 | 10 years | markus | support ed25519 keys (hostkeys and user identities) using the public domain ed25... |
| gss-genr.c |
1.23 | 9 years | deraadt | Reduce use of <sys/param.h> and transition to <limits.h> throughout. ok djm mark... |
| auth2-gss.c |
1.22 | 9 years | markus | move dispatch to struct ssh; ok djm@ |
| kexgexc.c |
1.22 | 9 years | dtucker | Cap DH-GEX group size at 4kbits for Cisco implementations. Some of them will ch... |
| auth-options.h |
1.21 | 9 years | markus | swith auth-options to new sshbuf/sshkey; ok djm@ |
| authfile.h |
1.21 | 9 years | djm | deprecate key_load_private_pem() and sshkey_load_private_pem() interfaces. Refac... |
| ssh-pkcs11.c |
1.21 | 8 years | djm | don't ignore PKCS#11 hosted keys that return empty CKA_ID; patch by Jakub Jelen ... |
| auth-krb5.c |
1.20 | 10 years | djm | fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@ |
| log.h |
1.20 | 11 years | dtucker | Add -E option to ssh and sshd to append debugging logs to a specified file inste... |
| monitor_fdpass.c |
1.20 | 9 years | djm | zero cmsgbuf before use; we initialise the bits we use but valgrind still spams ... |
| rijndael.c |
1.20 | 9 years | djm | #if 0 some more arrays used only for decrypting (we don't use since we only need... |
| sshkey.c |
1.20 | 8 years | djm | delete support for legacy v00 certificates; "sure" markus@ dtucker@ |
| LICENCE |
1.19 | 19 years | markus | s/keygen/keyscan/ |
| monitor.h |
1.19 | 9 years | markus | update packet.c & isolate, introduce struct ssh a) switch packet.c to buffer api... |
| auth2-none.c |
1.18 | 9 years | millert | Add support for Unix domain socket forwarding. A remote TCP port may be forward... |
| groupaccess.c |
1.16 | 9 years | djm | Remove pattern length argument from match_pattern_list(), we only ever use it fo... |
| match.h |
1.16 | 9 years | djm | Remove pattern length argument from match_pattern_list(), we only ever use it fo... |
| msg.c |
1.16 | 9 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... |
| Makefile |
1.15 | 14 years | markus | enable PKCS#11 code; ok djm |
| dns.h |
1.15 | 9 years | djm | moar whitespace at eol |
| ssh2.h |
1.15 | 10 years | djm | remove experimental, never-enabled JPAKE code; ok markus@ |
| xmalloc.h |
1.15 | 9 years | deraadt | rename xrealloc() to xreallocarray() since it follows that form. ok djm |
| rijndael.h |
1.14 | 10 years | markus | re-add our own aesctr implementation; ok djm@ |
| ssh-keysign.8 |
1.14 | 10 years | naddy | add missing mentions of ed25519; ok djm@ |
| sshtty.c |
1.14 | 14 years | djm | quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we usually don't... |
| ttymodes.h |
1.14 | 18 years | djm | standardise spacing in $OpenBSD$ tags; requested by deraadt@ |
| auth-bsdauth.c |
1.13 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| dh.h |
1.13 | 9 years | dtucker | Add a stronger (4k bit) fallback group that sshd can use when the moduli file is... |
| uidswap.h |
1.13 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| OVERVIEW |
1.12 | 8 years | markus | compress.c is gone |
| auth2-passwd.c |
1.12 | 9 years | millert | Add support for Unix domain socket forwarding. A remote TCP port may be forward... |
| dispatch.h |
1.12 | 9 years | markus | move dispatch to struct ssh; ok djm@ |
| hmac.c |
1.12 | 9 years | markus | correct fmt-string for size_t as noted by Nicholas Lemonias; ok djm@ |
| sftp-common.h |
1.12 | 9 years | djm | update sftp client and server to new buffer API. pretty much just mechanical cha... |
| sshpty.h |
1.12 | 14 years | djm | quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we usually don't... |
| atomicio.h |
1.11 | 13 years | djm | add an option per-read/write callback to atomicio factor out bandwidth limiting... |
| canohost.h |
1.11 | 15 years | andreas | Add clear_cached_addr(), needed for upcoming changes allowing the peer address t... |
| ssh-ecdsa.c |
1.11 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| ssh-gss.h |
1.11 | 10 years | djm | bz#2107 - cache OIDs of supported GSSAPI mechanisms before privsep sandboxing, a... |
| umac.c |
1.11 | 9 years | guenther | Convert from <sys/endian.h> to the shiney new <endian.h> ok dtucker@, who also ... |
| PROTOCOL.mux |
1.10 | 8 years | djm | describe magic for setting up Unix domain socket fowards via the mux channel; bz... |
| addrmatch.c |
1.10 | 8 years | markus | xmalloc.h is unused |
| ssh-pkcs11-helper.c |
1.10 | 9 years | deraadt | Reduce use of <sys/param.h> and transition to <limits.h> throughout. ok djm mark... |
| PROTOCOL.certkeys |
1.9 | 12 years | djm | explain certificate extensions/crit split rationale. Mention requirement that ea... |
| hmac.h |
1.9 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| kexc25519.c |
1.9 | 9 years | djm | ban all-zero curve25519 keys as recommended by latest CFRG curves draft; ok mark... |
| mac.h |
1.9 | 9 years | markus | adapt mac.c to ssherr.h return codes (de-fatal) and simplify dependencies ok djm... |
| sftp.h |
1.9 | 15 years | dtucker | replace __dead with __attribute__((noreturn)), makes things a little easier to p... |
| sshkey.h |
1.9 | 8 years | djm | backout SSH_RSA_MINIMUM_MODULUS_SIZE increase for this release; problems spotted... |
| PROTOCOL.agent |
1.8 | 9 years | djm | whitespace at EOL |
| groupaccess.h |
1.8 | 15 years | djm | support negation of groups in "Match group" block (bz#1315); ok dtucker@ |
| gss-serv-krb5.c |
1.8 | 10 years | djm | fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@ |
| nchan.ms |
1.8 | 20 years | djm | unexpand and delete whitespace at EOL; ok markus@ |
| sshlogin.h |
1.8 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| README |
1.7 | 18 years | djm | $OpenBSD$ in here too |
| auth2-kbdint.c |
1.7 | 9 years | millert | Add support for Unix domain socket forwarding. A remote TCP port may be forward... |
| cipher-chachapoly.c |
1.7 | 9 years | markus | remove unneeded includes, sync my copyright across files & whitespace; ok djm@ |
| digest.h |
1.7 | 9 years | djm | Add FingerprintHash option to control algorithm used for key fingerprints. Defau... |
| fatal.c |
1.7 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| kexecdh.c |
1.6 | 9 years | markus | adapt kex to sshbuf and struct ssh; ok djm@ |
| serverloop.h |
1.6 | 18 years | djm | standardise spacing in $OpenBSD$ tags; requested by deraadt@ |
| ssh-ed25519.c |
1.6 | 9 years | markus | remove xmalloc, switch to sshbuf |
| cleanup.c |
1.5 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| digest-libc.c |
1.5 | 9 years | jsg | use the sizeof the struct not the sizeof a pointer to the struct in ssh_digest_s... |
| digest-openssl.c |
1.5 | 9 years | djm | Add FingerprintHash option to control algorithm used for key fingerprints. Defau... |
| msg.h |
1.5 | 9 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... |
| ssh-pkcs11-client.c |
1.5 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| cipher-chachapoly.h |
1.4 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| krl.h |
1.4 | 9 years | djm | sync changes from libopenssh; prepared by markus@ mostly debug output tweaks, a ... |
| monitor_fdpass.h |
1.4 | 16 years | djm | make file descriptor passing code return an error rather than call fatal() when ... |
| nchan2.ms |
1.4 | 16 years | djm | document eow message in ssh protocol 2 channel state machine; feedback and ok ma... |
| poly1305.h |
1.4 | 10 years | djm | revert __bounded change; it causes way more problems for portable than it solves... |
| sftp-server-main.c |
1.4 | 15 years | tobias | Added missing newlines in error messages. ok dtucker |
| ssh-pkcs11-helper.8 |
1.4 | 10 years | schwarze | use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@ |
| ssh-pkcs11.h |
1.4 | 9 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... |
| ssh_api.c |
1.4 | 9 years | djm | Revise hostkeys@openssh.com hostkey learning extension. The client will not ask... |
| sshbuf-getput-basic.c |
1.4 | 9 years | djm | avoid BIGNUM in KRL code by using a simple bitmap; feedback and ok markus |
| sshbuf-getput-crypto.c |
1.4 | 9 years | djm | avoid BIGNUM in KRL code by using a simple bitmap; feedback and ok markus |
| sshbuf-misc.c |
1.4 | 9 years | markus | correct fmt-string for size_t as noted by Nicholas Lemonias; ok djm@ |
| sshbuf.h |
1.4 | 9 years | djm | avoid BIGNUM in KRL code by using a simple bitmap; feedback and ok markus |
| ssherr.c |
1.4 | 9 years | djm | Revise hostkeys@openssh.com hostkey learning extension. The client will not ask... |
| PROTOCOL.krl |
1.3 | 9 years | djm | permit KRLs that revoke certificates by serial number or key ID without scoping ... |
| bitmap.c |
1.3 | 9 years | djm | remove commented-out test code now that it has moved to a proper unit test |
| chacha.h |
1.3 | 10 years | djm | revert __bounded change; it causes way more problems for portable than it solves... |
| crypto_api.h |
1.3 | 10 years | markus | I've assempled the header file by cut&pasting from generated headers and the sou... |
| ed25519.c |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| hash.c |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| pkcs11.h |
1.3 | 10 years | deraadt | cleanup 1 << 31 idioms. Resurrection of this issue pointed out by Eitan Adler o... |
| poly1305.c |
1.3 | 10 years | djm | use full name for author, with his permission |
| progressmeter.h |
1.3 | 9 years | djm | update sftp client and server to new buffer API. pretty much just mechanical cha... |
| sandbox-rlimit.c |
1.3 | 12 years | djm | rename sandbox.h => ssh-sandbox.h to make things easier for portable |
| sshbuf.c |
1.3 | 9 years | deraadt | Reduce use of <sys/param.h> and transition to <limits.h> throughout. ok djm mark... |
| ssherr.h |
1.3 | 9 years | djm | avoid more fatal/exit in the packet.c paths that ssh-keyscan uses; feedback and ... |
| umac.h |
1.3 | 10 years | djm | oops, forgot to commit corresponding header change; spotted by jsg and jasper |
| PROTOCOL.chacha20poly1305 |
1.2 | 10 years | djm | typo; from Jon Cave |
| cipher-aesctr.c |
1.2 | 9 years | markus | remove unneeded includes, sync my copyright across files & whitespace; ok djm@ |
| smult_curve25519_ref.c |
1.2 | 10 years | markus | add missing $OpenBSD$ tags |
| PROTOCOL.key |
1.1 | 10 years | markus | new private key format, bcrypt as KDF by default; details in PROTOCOL.key; feedb... |
| bitmap.h |
1.1 | 9 years | djm | avoid BIGNUM in KRL code by using a simple bitmap; feedback and ok markus |
| chacha.c |
1.1 | 10 years | djm | Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com" that combi... |
| cipher-aesctr.h |
1.1 | 10 years | markus | re-add our own aesctr implementation; ok djm@ |
| ssh-sandbox.h |
1.1 | 12 years | djm | rename sandbox.h => ssh-sandbox.h to make things easier for portable |
| ssh_api.h |
1.1 | 9 years | markus | add experimental api for packet layer; ok djm@ |
| auth-chall.c (in the Attic) [Hide] |
1.14 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| auth-rh-rsa.c (in the Attic) [Hide] |
1.44 | 9 years | millert | Add support for Unix domain socket forwarding. A remote TCP port may be forward... |
| auth-rsa.c (in the Attic) [Hide] |
1.90 | 9 years | djm | update to new API (key_fingerprint => sshkey_fingerprint) check sshkey_fingerpri... |
| auth1.c (in the Attic) [Hide] |
1.82 | 9 years | millert | Add support for Unix domain socket forwarding. A remote TCP port may be forward... |
| blocks.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| bufaux.c (in the Attic) [Hide] |
1.60 | 10 years | djm | New buffer API; the first installment of the conversion/replacement of OpenSSH's... |
| bufbn.c (in the Attic) [Hide] |
1.12 | 10 years | djm | New buffer API; the first installment of the conversion/replacement of OpenSSH's... |
| bufec.c (in the Attic) [Hide] |
1.4 | 10 years | djm | New buffer API; the first installment of the conversion/replacement of OpenSSH's... |
| buffer.c (in the Attic) [Hide] |
1.36 | 10 years | djm | New buffer API; the first installment of the conversion/replacement of OpenSSH's... |
| buffer.h (in the Attic) [Hide] |
1.25 | 10 years | djm | New buffer API; the first installment of the conversion/replacement of OpenSSH's... |
| cipher-3des1.c (in the Attic) [Hide] |
1.12 | 9 years | markus | remove unneeded includes, sync my copyright across files & whitespace; ok djm@ |
| cipher-bf1.c (in the Attic) [Hide] |
1.7 | 9 years | markus | remove unneeded includes, sync my copyright across files & whitespace; ok djm@ |
| crc32.c (in the Attic) [Hide] |
1.11 | 18 years | stevesk | remove extra spaces |
| crc32.h (in the Attic) [Hide] |
1.15 | 18 years | djm | standardise spacing in $OpenBSD$ tags; requested by deraadt@ |
| deattack.c (in the Attic) [Hide] |
1.32 | 9 years | deraadt | Reduce use of <sys/param.h> and transition to <limits.h> throughout. ok djm mark... |
| deattack.h (in the Attic) [Hide] |
1.11 | 9 years | markus | update packet.c & isolate, introduce struct ssh a) switch packet.c to buffer api... |
| fe25519.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| fe25519.h (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| ge25519.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| ge25519.h (in the Attic) [Hide] |
1.4 | 9 years | miod | Declare ge25519_base as extern, to prevent it from becoming a common. Gets us ri... |
| ge25519_base.data (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| kexc25519c.c (in the Attic) [Hide] |
1.7 | 9 years | djm | correctly match ECDSA subtype (== curve) for offered/recevied host keys. Fixes c... |
| kexc25519s.c (in the Attic) [Hide] |
1.9 | 9 years | dtucker | Include stdio.h for FILE (used in sshkey.h) so it compiles with OPENSSL=no. |
| kexdhc.c (in the Attic) [Hide] |
1.18 | 9 years | djm | correctly match ECDSA subtype (== curve) for offered/recevied host keys. Fixes c... |
| kexdhs.c (in the Attic) [Hide] |
1.22 | 9 years | djm | correctly match ECDSA subtype (== curve) for offered/recevied host keys. Fixes c... |
| kexecdhc.c (in the Attic) [Hide] |
1.10 | 9 years | djm | correctly match ECDSA subtype (== curve) for offered/recevied host keys. Fixes c... |
| kexecdhs.c (in the Attic) [Hide] |
1.14 | 9 years | djm | correctly match ECDSA subtype (== curve) for offered/recevied host keys. Fixes c... |
| key.c (in the Attic) [Hide] |
1.128 | 8 years | djm | delete support for legacy v00 certificates; "sure" markus@ dtucker@ |
| key.h (in the Attic) [Hide] |
1.48 | 8 years | djm | delete support for legacy v00 certificates; "sure" markus@ dtucker@ |
| monitor_mm.c (in the Attic) [Hide] |
1.21 | 9 years | millert | SIZE_MAX is standard, we should be using it in preference to the obsolete SIZE_T... |
| monitor_mm.h (in the Attic) [Hide] |
1.6 | 10 years | tedu | use standard types and formats for size_t like variables. ok dtucker |
| opacket.c (in the Attic) [Hide] |
1.4 | 9 years | djm | more OPENSSL=no fixes; ok dtucker@ |
| opacket.h (in the Attic) [Hide] |
1.4 | 9 years | markus | make rekey_limit for sshd w/privsep work; ok djm@ dtucker@ |
| roaming.h (in the Attic) [Hide] |
1.6 | 12 years | djm | fix some harmless and/or unreachable int overflows; reported Xi Wang, ok markus@... |
| roaming_client.c (in the Attic) [Hide] |
1.9 | 9 years | okan | Since r1.2 removed the use of PRI* macros, inttypes.h is no longer required. ok... |
| roaming_common.c (in the Attic) [Hide] |
1.13 | 9 years | okan | Since r1.2 removed the use of PRI* macros, inttypes.h is no longer required. ok... |
| roaming_dummy.c (in the Attic) [Hide] |
1.4 | 9 years | markus | update packet.c & isolate, introduce struct ssh a) switch packet.c to buffer api... |
| roaming_serv.c (in the Attic) [Hide] |
1.1 | 14 years | andreas | Dummy implementation of wait_for_roaming_reconnect() for the server side. It doe... |
| rsa.c (in the Attic) [Hide] |
1.32 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| rsa.h (in the Attic) [Hide] |
1.17 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| sandbox-systrace.c (in the Attic) [Hide] |
1.17 | 8 years | guenther | Permit kbind(2) use in the sandbox now, to ease testing of ld.so work using it ... |
| sc25519.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| sc25519.h (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| ssh1.h (in the Attic) [Hide] |
1.6 | 18 years | djm | standardise spacing in $OpenBSD$ tags; requested by deraadt@ |
| sshconnect1.c (in the Attic) [Hide] |
1.77 | 9 years | djm | move authfd.c and its tentacles to the new buffer/key API; ok markus@ |
| uuencode.c (in the Attic) [Hide] |
1.28 | 9 years | deraadt | 2*len -> use xreallocarray() ok djm |
| uuencode.h (in the Attic) [Hide] |
1.14 | 13 years | djm | Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and host/use... |
| verify.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |