Click on a directory to enter that directory. Click on a file to display its revision history and to get a chance to display diffs between revisions.
Current directory: [local] / src / usr.bin / ssh
Current tag: OPENBSD_7_5
| File | Rev. | Age | Author | Last log entry |
|---|---|---|---|---|
![[BACK]](/icons/back.gif){kind=icon} Parent Directory |
||||
![[DIR]](/icons/dir.gif){kind=icon} lib/ |
||||
| moduli-gen/ |
||||
| scard/ |
||||
| scp/ |
||||
| sftp/ |
||||
| sftp-server/ |
||||
| ssh/ |
||||
| ssh-add/ |
||||
| ssh-agent/ |
||||
| ssh-keygen/ |
||||
| ssh-keyscan/ |
||||
| ssh-keysign/ |
||||
| ssh-pkcs11-helper/ |
||||
| ssh-sk-helper/ |
||||
| sshd/ |
||||
![[TXT]](/icons/text.gif){kind=icon} LICENCE |
1.20 | 7 years | djm | remove the (in)famous SSHv1 CRC compensation attack detector. Despite your came... |
| Makefile |
1.17 | 4 years | djm | ssh-agent support for U2F/FIDO keys feedback & ok markus@ |
| Makefile.inc |
1.89 | 4 months | djm | make DSA key support compile-time optional, defaulting to on ok markus@ |
| OVERVIEW |
1.15 | 5 years | djm | refer to OpenSSL not SSLeay; we're old, but we don't have to act it |
| PROTOCOL |
1.55 | 4 months | djm | fix missing field in users-groups-by-id@openssh.com reply documentation GHPR441... |
| PROTOCOL.agent |
1.22 | 4 months | jsg | spelling; ok markus@ |
| PROTOCOL.certkeys |
1.19 | 2 years | naddy | PROTOCOL.certkeys: update reference from IETF draft to RFC Also fix some typos.... |
| PROTOCOL.chacha20poly1305 |
1.5 | 4 years | dtucker | Fix some typos and an incorrect word in docs. Patch from itoama at live.jp via g... |
| PROTOCOL.key |
1.3 | 22 months | djm | use consistent field names (s/char/byte) in format description |
| PROTOCOL.krl |
1.7 | 9 months | djm | remove vestigal support for KRL signatures When the KRL format was originally d... |
| PROTOCOL.mux |
1.14 | 4 months | djm | Remove outdated note from PROTOCOL.mux Port forward close by control master is ... |
| PROTOCOL.sshsig |
1.4 | 3 years | djm | Add RCS IDs to the few files that are missing them; from Pedro Martelletto |
| PROTOCOL.u2f |
1.26 | 3 years | djm | when writing an attestation blob for a FIDO key, record all the data needed to v... |
| README |
1.7 | 18 years | djm | $OpenBSD$ in here too |
| addr.c |
1.7 | 13 months | djm | fix test: getnameinfo returns a non-zero value on error, not (neccessarily) -1. ... |
| addr.h |
1.2 | 18 months | djm | allow ssh-keyscan(1) to accept CIDR address ranges, e.g. ssh-keyscan 192.168.0.0... |
| addrmatch.c |
1.17 | 3 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
| atomicio.c |
1.30 | 5 years | dtucker | Check for both EAGAIN and EWOULDBLOCK. This is a no-op in OpenBSD (they are the... |
| atomicio.h |
1.12 | 5 years | djm | move client/server SSH-* banners to buffers under ssh->kex and factor out the ba... |
| auth-bsdauth.c |
1.15 | 5 years | markus | sshd: switch authentication to sshbuf API; ok djm@ |
| auth-krb5.c |
1.24 | 3 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
| auth-options.c |
1.101 | 10 months | dtucker | Include stdint.h for SIZE_MAX. Fixes OPENSSL=no build. |
| auth-options.h |
1.31 | 2 years | djm | make authorized_keys environment="..." directives first-match-wins and more stri... |
| auth-passwd.c |
1.48 | 3 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
| auth-rhosts.c |
1.57 | 17 months | dtucker | Add some server debugging for hostbased auth. auth_debug_add queues messages ab... |
| auth.c |
1.160 | 14 months | dtucker | Remove unused compat.h includes. We've previously removed a lot of the really o... |
| auth.h |
1.106 | 23 months | djm | make sure that UseDNS hostname lookup happens in the monitor and not in the pled... |
| auth2-chall.c |
1.54 | 3 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
| auth2-gss.c |
1.34 | 13 months | djm | clamp max number of GSSAPI mechanisms to 2048; ok dtucker |
| auth2-hostbased.c |
1.52 | 14 months | dtucker | Remove unused compat.h includes. We've previously removed a lot of the really o... |
| auth2-kbdint.c |
1.14 | 2 years | djm | prepare for multiple names for authmethods allow authentication methods to have... |
| auth2-none.c |
1.25 | 14 months | dtucker | Remove unused compat.h includes. We've previously removed a lot of the really o... |
| auth2-passwd.c |
1.21 | 23 months | dtucker | f sshpkt functions fail, then password is not cleared with freezero. Uncondition... |
| auth2-pubkey.c |
1.119 | 9 months | djm | make sshd_config AuthorizedPrincipalsCommand and AuthorizedKeysCommand accept th... |
| auth2-pubkeyfile.c |
1.4 | 14 months | dtucker | Remove unused compat.h includes. We've previously removed a lot of the really o... |
| auth2.c |
1.168 | 4 months | djm | add "ext-info-in-auth@openssh.com" extension This adds another transport protoc... |
| authfd.c |
1.134 | 4 months | djm | Make it possible to load certs from PKCS#11 tokens Adds a protocol extension to... |
| authfd.h |
1.52 | 4 months | djm | Make it possible to load certs from PKCS#11 tokens Adds a protocol extension to... |
| authfile.c |
1.144 | 14 months | dtucker | Check pointer for NULL before attempting to deref. None of the existing callers... |
| authfile.h |
1.25 | 4 years | djm | factor out reading/writing sshbufs to dedicated functions; feedback and ok marku... |
| bitmap.c |
1.9 | 6 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
| bitmap.h |
1.2 | 6 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
| canohost.c |
1.77 | 13 months | dtucker | Return immediately from get_sock_port if sock <0 so we don't call getsockname on... |
| canohost.h |
1.12 | 8 years | djm | refactor canohost.c: move functions that cache results closer to the places that... |
| chacha.c |
1.2 | 9 months | djm | move other RCSIDs to before their respective license blocks too no code change |
| chacha.h |
1.5 | 3 years | djm | whitespace (tab after space) |
| channels.c |
1.437 | 2 months | djm | fix memory leak in mux proxy mode when requesting forwarding. found by RASU JSC... |
| channels.h |
1.154 | 4 months | djm | stricter handling of channel window limits This makes ssh/sshd more strict in h... |
| cipher-aesctr.c |
1.2 | 9 years | markus | remove unneeded includes, sync my copyright across files & whitespace; ok djm@ |
| cipher-aesctr.h |
1.1 | 10 years | markus | re-add our own aesctr implementation; ok djm@ |
| cipher-chachapoly-libcrypto.c |
1.2 | 9 months | djm | move other RCSIDs to before their respective license blocks too no code change |
| cipher-chachapoly.c |
1.10 | 9 months | djm | move other RCSIDs to before their respective license blocks too no code change |
| cipher-chachapoly.h |
1.5 | 4 years | djm | make Chacha20-POLY1305 context struct opaque; ok tb@ as part of a larger diff at... |
| cipher.c |
1.120 | 7 months | tb | Garbage collect cipher_get_keyiv_len() This is a compat20 leftover, unused sinc... |
| cipher.h |
1.56 | 7 months | tb | Garbage collect cipher_get_keyiv_len() This is a compat20 leftover, unused sinc... |
| cleanup.c |
1.5 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| clientloop.c |
1.403 | 2 months | djm | fix proxy multiplexing mode, broken when keystroke timing obfuscation was added.... |
| clientloop.h |
1.37 | 4 years | djm | make failures when establishing "Tunnel" forwarding terminate the connection whe... |
| compat.c |
1.126 | 14 months | dtucker | Refactor creation of KEX proposal. This adds kex_proposal_populate_entries (and... |
| compat.h |
1.62 | 14 months | dtucker | Refactor creation of KEX proposal. This adds kex_proposal_populate_entries (and... |
| crypto_api.h |
1.8 | 15 months | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
| dh.c |
1.74 | 3 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
| dh.h |
1.19 | 3 years | dtucker | Add ModuliFile keyword to sshd_config to specify the location of the "moduli" fi... |
| digest-libc.c |
1.7 | 4 years | jsg | change explicit_bzero();free() to freezero() While freezero() returns early if ... |
| digest-openssl.c |
1.9 | 3 years | djm | whitespace; no code change |
| digest.h |
1.8 | 7 years | djm | remove hmac-ripemd160; ok dtucker |
| dispatch.c |
1.33 | 14 months | dtucker | Remove unused compat.h includes. We've previously removed a lot of the really o... |
| dispatch.h |
1.15 | 5 years | djm | remove last traces of old packet API! with & ok markus@ |
| dns.c |
1.44 | 14 months | dtucker | Plug mem leak on error path. Coverity CID 405026, ok djm@. |
| dns.h |
1.20 | 15 months | djm | let ssh-keygen and ssh-keyscan accept -Ohashalg=sha1|sha256 when outputting SSHF... |
| ed25519.c |
1.4 | 15 months | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
| ed25519.sh |
1.1 | 15 months | djm | update OpenSSH's Ed25519 code to the last version of SUPERCOP (20221122) and cha... |
| fatal.c |
1.11 | 3 years | djm | fix SEGV on fatal() errors spotted by dtucker@ |
| groupaccess.c |
1.17 | 5 years | dtucker | Move checks for lists of users or groups into their own function. This is a no-o... |
| groupaccess.h |
1.8 | 15 years | djm | support negation of groups in "Match group" block (bz#1315); ok dtucker@ |
| gss-genr.c |
1.29 | 3 months | djm | whitespace |
| gss-serv-krb5.c |
1.9 | 5 years | markus | sshd: switch GSSAPI to sshbuf API; ok djm@ |
| gss-serv.c |
1.32 | 4 years | djm | spelling errors in comments; no code change from https://fossies.org/linux/misc/... |
| hash.c |
1.6 | 4 years | djm | perform hashing directly in crypto_hash_sha512() using libcrypto or libc SHA512 ... |
| hmac.c |
1.14 | 4 years | jsg | change explicit_bzero();free() to freezero() While freezero() returns early if ... |
| hmac.h |
1.9 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| hostfile.c |
1.95 | 14 months | dtucker | fseek to end of known_hosts before writing to it. POSIX and ANSI C require that... |
| hostfile.h |
1.29 | 3 years | djm | make struct hostkeys public; I have no idea why I made it opaque originally. ok... |
| kex.c |
1.185 | 4 months | djm | remove ext-info-* in the kex.c code, not in callers; with/ok markus@ |
| kex.h |
1.122 | 3 months | djm | whitespace |
| kexc25519.c |
1.17 | 5 years | djm | rename kex->kem_client_pub -> kex->client_pub now that KEM has been renamed to k... |
| kexdh.c |
1.34 | 3 years | djm | memleak of DH public bignum; found with libfuzzer |
| kexecdh.c |
1.10 | 5 years | djm | rename kex->kem_client_pub -> kex->client_pub now that KEM has been renamed to k... |
| kexgen.c |
1.8 | 2 years | djm | Record session ID, host key and sig at intital KEX These will be used later for... |
| kexgex.c |
1.32 | 5 years | djm | pass most arguments to the KEX hash functions as sshbuf rather than pointer+leng... |
| kexgexc.c |
1.38 | 2 years | djm | Record session ID, host key and sig at intital KEX These will be used later for... |
| kexgexs.c |
1.46 | 13 months | dtucker | Explicitly ignore return value from sshpkt_disconnect since we set our own retur... |
| kexsntrup761x25519.c |
1.2 | 2 years | jsg | fix unintended sizeof pointer in debug path ok markus@ |
| krl.c |
1.59 | 9 months | djm | Move RCSID to before license block and away from #includes, where it caused merg... |
| krl.h |
1.10 | 9 months | djm | remove vestigal support for KRL signatures When the KRL format was originally d... |
| log.c |
1.61 | 5 months | djm | short circuit debug log processing early if we're not going to log anything. Fro... |
| log.h |
1.33 | 3 years | markus | do not pass file/func to monitor; noted by Ilja van Sprundel; ok djm@ |
| mac.c |
1.35 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| mac.h |
1.10 | 7 years | djm | Improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms. Previou... |
| match.c |
1.44 | 13 months | djm | match_user() shouldn't be called with user==NULL unless host and ipaddr are also... |
| match.h |
1.20 | 3 years | djm | some language improvements; ok markus |
| misc.c |
1.190 | 2 months | djm | Separate parsing of string array options from applying them to the active config... |
| misc.h |
1.107 | 2 months | djm | Separate parsing of string array options from applying them to the active config... |
| moduli.c |
1.39 | 14 months | dtucker | Ensure we always call fclose when writing checkpoints. In the case of an fprin... |
| monitor.c |
1.237 | 8 months | djm | defence-in-depth MaxAuthTries check in monitor; ok markus |
| monitor.h |
1.23 | 5 years | djm | remove last references to active_state with & ok markus@ |
| monitor_fdpass.c |
1.22 | 3 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
| monitor_fdpass.h |
1.4 | 16 years | djm | make file descriptor passing code return an error rather than call fatal() when ... |
| monitor_wrap.c |
1.129 | 4 months | djm | add "ext-info-in-auth@openssh.com" extension This adds another transport protoc... |
| monitor_wrap.h |
1.49 | 23 months | djm | make sure that UseDNS hostname lookup happens in the monitor and not in the pled... |
| msg.c |
1.20 | 3 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
| msg.h |
1.5 | 9 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... |
| mux.c |
1.101 | 5 months | dtucker | Include existing mux path in debug message. |
| myproposal.h |
1.71 | 2 years | djm | select post-quantum KEX sntrup761x25519-sha512@openssh.com as the default; ok ma... |
| nchan.c |
1.75 | 3 months | djm | whitespace |
| nchan.ms |
1.8 | 20 years | djm | unexpand and delete whitespace at EOL; ok markus@ |
| nchan2.ms |
1.4 | 16 years | djm | document eow message in ssh protocol 2 channel state machine; feedback and ok ma... |
| packet.c |
1.313 | 4 months | djm | implement "strict key exchange" in ssh and sshd This adds a protocol extension... |
| packet.h |
1.96 | 4 months | djm | implement "strict key exchange" in ssh and sshd This adds a protocol extension... |
| pathnames.h |
1.31 | 4 years | markus | enable ed25519 support; ok djm |
| pkcs11.h |
1.3 | 10 years | deraadt | cleanup 1 << 31 idioms. Resurrection of this issue pointed out by Eitan Adler o... |
| poly1305.c |
1.4 | 9 months | djm | move other RCSIDs to before their respective license blocks too no code change |
| poly1305.h |
1.4 | 10 years | djm | revert __bounded change; it causes way more problems for portable than it solves... |
| progressmeter.c |
1.53 | 13 months | jsg | remove duplicate signal.h include |
| progressmeter.h |
1.5 | 5 years | dtucker | Have progressmeter force an update at the beginning and end of each transfer. F... |
| readconf.c |
1.386 | 2 months | djm | fix leak of CanonicalizePermittedCNAMEs on error path; spotted by Coverity (CID ... |
| readconf.h |
1.156 | 2 months | djm | Separate parsing of string array options from applying them to the active config... |
| readpass.c |
1.70 | 23 months | dtucker | Avoid kill with -1 argument. The out_ctx label can be reached before fork has be... |
| rijndael.c |
1.20 | 9 years | djm | #if 0 some more arrays used only for decrypting (we don't use since we only need... |
| rijndael.h |
1.15 | 2 years | dtucker | Make prototype for rijndaelEncrypt match function including the bounds. Fixes er... |
| sandbox-pledge.c |
1.2 | 3 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
| sandbox-rlimit.c |
1.5 | 3 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
| scp.1 |
1.112 | 16 months | djm | Mention that scp uses the SFTP protocol and remove reference to legacy flag. Spo... |
| scp.c |
1.260 | 7 months | djm | in olde rcp/scp protocol mode, when rejecting a path from the server as not matc... |
| servconf.c |
1.405 | 2 months | djm | Separate parsing of string array options from applying them to the active config... |
| servconf.h |
1.160 | 8 months | djm | allow override of Sybsystem directives in sshd Match blocks |
| serverloop.c |
1.237 | 8 months | djm | correct math for ClientAliveInterval that caused the probes to be sent less freq... |
| serverloop.h |
1.8 | 6 years | djm | refactor channels.c Move static state to a "struct ssh_channels" that is alloca... |
| session.c |
1.337 | 3 months | djm | whitespace |
| session.h |
1.37 | 16 months | djm | Add channel_force_close() This will forcibly close an open channel by simulatin... |
| sftp-client.c |
1.175 | 6 months | tobhe | Make sure sftp_get_limits() only returns 0 if 'limits' was initialized. This fix... |
| sftp-client.h |
1.39 | 8 months | djm | the sftp code was one of my first contributions to OpenSSH and it shows - the fu... |
| sftp-common.c |
1.34 | 13 months | djm | don't attempt to decode a ridiculous number of attributes; harmless because of b... |
| sftp-common.h |
1.13 | 19 months | djm | extend sftp-common.c:extend ls_file() to support supplied user/group names; ok m... |
| sftp-glob.c |
1.33 | 8 months | djm | rename remote_glob() -> sftp_glob() to match other API |
| sftp-realpath.c |
1.2 | 2 years | deraadt | sys/param.h is not needed for any visible reason |
| sftp-server-main.c |
1.6 | 4 years | otto | Replace calls to ssh_malloc_init() by a static init of malloc_options. Prepares ... |
| sftp-server.8 |
1.31 | 2 years | jmc | standardise the grammar in the options list; issue reported by debian at helgefj... |
| sftp-server.c |
1.147 | 13 months | jsg | fix double words ok dtucker@ |
| sftp-usergroup.c |
1.2 | 8 months | djm | the sftp code was one of my first contributions to OpenSSH and it shows - the fu... |
| sftp-usergroup.h |
1.1 | 19 months | djm | use users-groups-by-id@openssh.com sftp-server extension (when available) to fil... |
| sftp.1 |
1.143 | 16 months | djm | add a -X option to both scp(1) and sftp(1) to allow control over some SFTP proto... |
| sftp.c |
1.237 | 3 months | djm | whitespace |
| sftp.h |
1.9 | 15 years | dtucker | replace __dead with __attribute__((noreturn)), makes things a little easier to p... |
| sk-api.h |
1.15 | 21 months | djm | when enrolling a resident key on a security token, check if a credential with ma... |
| sk-usbhid.c |
1.46 | 13 months | dtucker | Remove compatibility code for OpenSSL versions prior to 1.1.* since -portable no... |
| smult_curve25519_ref.c |
1.2 | 10 years | markus | add missing $OpenBSD$ tags |
| sntrup761.c |
1.6 | 16 months | djm | remove whitespace at EOL from code extracted from SUPERCOP |
| sntrup761.sh |
1.7 | 16 months | djm | remove whitespace at EOL from code extracted from SUPERCOP |
| srclimit.c |
1.2 | 3 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
| srclimit.h |
1.1 | 3 years | dtucker | Add PerSourceMaxStartups and PerSourceNetBlockSize options which provide more fi... |
| ssh-add.1 |
1.86 | 4 months | jmc | sort -C, and add to usage(); ok djm |
| ssh-add.c |
1.172 | 4 months | djm | make DSA key support compile-time optional, defaulting to on ok markus@ |
| ssh-agent.1 |
1.79 | 9 months | naddy | drop a wayward comma, ok jmc@ |
| ssh-agent.c |
1.306 | 2 months | djm | avoid logging in signal handler by converting mainloop to ppoll() bz3670, report... |
| ssh-dss.c |
1.50 | 4 months | djm | make DSA key support compile-time optional, defaulting to on ok markus@ |
| ssh-ecdsa-sk.c |
1.18 | 14 months | guenther | Delete obsolete /* ARGSUSED */ lint comments. ok miod@ millert@ |
| ssh-ecdsa.c |
1.26 | 14 months | guenther | Delete obsolete /* ARGSUSED */ lint comments. ok miod@ millert@ |
| ssh-ed25519-sk.c |
1.15 | 18 months | djm | refactor sshkey_private_deserialize feedback/ok markus@ |
| ssh-ed25519.c |
1.19 | 18 months | djm | refactor sshkey_private_deserialize feedback/ok markus@ |
| ssh-gss.h |
1.15 | 3 years | djm | make ssh->kex->session_id a sshbuf instead of u_char*/size_t and use that instea... |
| ssh-keygen.1 |
1.230 | 8 months | job | Generate Ed25519 keys when invoked without arguments Ed25519 public keys are ve... |
| ssh-keygen.c |
1.472 | 4 months | djm | make DSA key support compile-time optional, defaulting to on ok markus@ |
| ssh-keyscan.1 |
1.49 | 15 months | jmc | space between macro and punctuation; sort usage(); |
| ssh-keyscan.c |
1.155 | 4 months | djm | make DSA key support compile-time optional, defaulting to on ok markus@ |
| ssh-keysign.8 |
1.17 | 2 years | naddy | man pages: add missing commas between subordinate and main clauses jmc@ dislike... |
| ssh-keysign.c |
1.73 | 4 months | djm | ensure key_fd is filled when DSA is disabled; spotted by tb@ |
| ssh-pkcs11-client.c |
1.19 | 4 months | djm | Make it possible to load certs from PKCS#11 tokens Adds a protocol extension to... |
| ssh-pkcs11-helper.8 |
1.7 | 2 years | djm | mention that the helpers are used by ssh(1), ssh-agent(1) and ssh-keygen(1). Pre... |
| ssh-pkcs11-helper.c |
1.26 | 2 years | djm | check for POLLHUP wherever we check for POLLIN |
| ssh-pkcs11.c |
1.59 | 9 months | djm | don't incorrectly truncate logged strings retrieved from PKCS#11 modules; based ... |
| ssh-pkcs11.h |
1.7 | 4 months | djm | Make it possible to load certs from PKCS#11 tokens Adds a protocol extension to... |
| ssh-rsa.c |
1.79 | 14 months | dtucker | Remove unused compat.h includes. We've previously removed a lot of the really o... |
| ssh-sandbox.h |
1.1 | 12 years | djm | rename sandbox.h => ssh-sandbox.h to make things easier for portable |
| ssh-sk-client.c |
1.12 | 2 years | djm | sshsk_load_resident: don't preallocate resp resp is allocated by client_convers... |
| ssh-sk-helper.8 |
1.4 | 2 years | djm | mention that the helpers are used by ssh(1), ssh-agent(1) and ssh-keygen(1). Pre... |
| ssh-sk-helper.c |
1.14 | 17 months | dtucker | Remove duplicate includes. Patch from AtariDreams via github PR#364. |
| ssh-sk.c |
1.40 | 9 months | djm | Ensure FIDO/PKCS11 libraries contain expected symbols This checks via nlist(3) ... |
| ssh-sk.h |
1.11 | 2 years | djm | When downloading resident keys from a FIDO token, pass back the user ID that was... |
| ssh-xmss.c |
1.14 | 18 months | djm | refactor sshkey_private_deserialize feedback/ok markus@ |
| ssh.1 |
1.438 | 7 months | djm | ssh -Q does not make sense with other command-line options, so give it its own l... |
| ssh.c |
1.600 | 4 months | djm | make DSA key support compile-time optional, defaulting to on ok markus@ |
| ssh.h |
1.90 | 3 years | djm | allow some additional control over the use of ssh-askpass via $SSH_ASKPASS_REQUI... |
| ssh2.h |
1.22 | 7 months | djm | Reserve a range of "local extension" message numbers that OpenSSH promises not t... |
| ssh_api.c |
1.28 | 4 months | djm | adapt ssh_api.c code for kex-strict from markus@ ok me |
| ssh_api.h |
1.2 | 6 years | djm | lots of typos in comments/docs. Patch from Karsten Weiss after checking with cod... |
| ssh_config |
1.36 | 9 months | djm | CheckHostIP has defaulted to 'no' for a while; make the commented- out config op... |
| ssh_config.5 |
1.394 | 2 months | djm | fix typo in match directive predicate (s/tagged/tag) GHPR#462 from Tobias Manske... |
| sshbuf-getput-basic.c |
1.13 | 23 months | djm | revert previous; it was broken (spotted by Theo) |
| sshbuf-getput-crypto.c |
1.11 | 3 months | djm | whitespace |
| sshbuf-io.c |
1.2 | 4 years | djm | tidy headers; some junk snuck into sshbuf-misc.c and sshbuf-io.c doesn't need SS... |
| sshbuf-misc.c |
1.18 | 2 years | djm | Add a sshbuf_read() that attempts to read(2) directly in to a sshbuf; ok markus@... |
| sshbuf.c |
1.19 | 17 months | djm | make struct sshbuf private and remove an unused field; ok dtucker |
| sshbuf.h |
1.28 | 17 months | djm | make struct sshbuf private and remove an unused field; ok dtucker |
| sshconnect.c |
1.366 | 4 months | djm | make DSA key support compile-time optional, defaulting to on ok markus@ |
| sshconnect.h |
1.47 | 7 months | djm | add %j token that expands to the configured ProxyJump hostname (or the empty str... |
| sshconnect2.c |
1.372 | 4 months | djm | remove ext-info-* in the kex.c code, not in callers; with/ok markus@ |
| sshd.8 |
1.325 | 7 months | deraadt | typo; from Jim Spath |
| sshd.c |
1.602 | 4 months | djm | remove ext-info-* in the kex.c code, not in callers; with/ok markus@ |
| sshd_config |
1.104 | 2 years | dtucker | Remove references to ChallengeResponseAuthentication in favour of KbdInteractive... |
| sshd_config.5 |
1.355 | 2 months | djm | explain arguments of internal-sftp GHPR#454 from Niklas Hambüchen |
| ssherr.c |
1.10 | 4 years | djm | improve the error message for u2f enrollment errors by making ssh-keygen be sole... |
| ssherr.h |
1.8 | 4 years | djm | improve the error message for u2f enrollment errors by making ssh-keygen be sole... |
| sshkey-xmss.c |
1.12 | 18 months | djm | factor out key generation feedback/ok markus@ |
| sshkey-xmss.h |
1.4 | 18 months | djm | factor out key generation feedback/ok markus@ |
| sshkey.c |
1.142 | 4 months | djm | make DSA key support compile-time optional, defaulting to on ok markus@ |
| sshkey.h |
1.62 | 10 months | djm | better validate CASignatureAlgorithms in ssh_config and sshd_config. Previously... |
| sshlogin.c |
1.35 | 3 years | djm | use the new variant log macros instead of prepending __func__ and appending ssh_... |
| sshlogin.h |
1.8 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| sshpty.c |
1.34 | 4 years | deraadt | fatal() if getgrnam() cannot find "tty" |
| sshpty.h |
1.13 | 7 years | dtucker | Factor out code to disconnect from controlling terminal into its own function. ... |
| sshsig.c |
1.35 | 2 months | djm | skip more whitespace, fixes find-principals on allowed_signers files with blank ... |
| sshsig.h |
1.11 | 2 years | djm | Add ssh-keygen -Y match-principals operation to perform matching of principals n... |
| sshtty.c |
1.14 | 14 years | djm | quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we usually don't... |
| ttymodes.c |
1.36 | 3 years | djm | remove global variable used to stash compat flags and use the purpose-built ssh-... |
| ttymodes.h |
1.16 | 7 years | djm | purge the last traces of SSHv1 from the TTY modes handling code ok markus |
| uidswap.c |
1.42 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| uidswap.h |
1.14 | 5 years | dtucker | Remove support for running ssh(1) setuid and fatal if attempted. Do not link uid... |
| umac.c |
1.23 | 14 months | djm | correct size for array argument when changing UMAC_OUTPUT_LEN Coverity CID 29184... |
| umac.h |
1.5 | 2 years | jsg | spelling ok dtucker@ |
| umac128.c |
1.2 | 6 years | dtucker | Rename struct umac_ctx to umac128_ctx too. In portable some linkers complain ab... |
| utf8.c |
1.11 | 4 years | djm | expose vasnmprintf(); ok (as part of other commit) markus deraadt |
| utf8.h |
1.4 | 3 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
| version.h |
1.101 | 2 months | djm | openssh-9.7 |
| xmalloc.c |
1.37 | 2 years | cheloha | ssh: xstrdup(): use memcpy(3) Copying the given string into the buffer with str... |
| xmalloc.h |
1.20 | 3 years | djm | highly polished whitespace, mostly fixing spaces-for-tab and bad indentation on ... |
| xmss_commons.c |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_commons.h |
1.3 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_fast.c |
1.3 | 6 years | markus | ssh/xmss: fix build; ok djm@ |
| xmss_fast.h |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash.c |
1.4 | 4 months | jsg | spelling; ok markus@ |
| xmss_hash.h |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash_address.c |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash_address.h |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_wots.c |
1.3 | 6 years | djm | lots of typos in comments/docs. Patch from Karsten Weiss after checking with cod... |
| xmss_wots.h |
1.3 | 6 years | dtucker | Remove unneeded (local) include. ok markus@ |