OpenBSD CVS

CVS log for src/usr.bin/ssh/Attic/key.h

[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions

Default branch: MAIN

Revision 1.53, Wed Jul 11 18:53:29 2018 UTC (5 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: HEAD
Changes since 1.52: +1 -1 lines
FILE REMOVED 

remove legacy key emulation layer; ok djm@

Revision 1.52 / (download) - annotate - [select for diffs], Mon Dec 18 02:25:15 2017 UTC (6 years, 4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.51: +1 -2 lines
Diff to previous 1.51 (colored) 

pass negotiated signing algorithm though to sshkey_verify() and
check that the negotiated algorithm matches the type in the
signature (only matters for RSA SHA1/SHA2 sigs). ok markus@

Revision 1.51 / (download) - annotate - [select for diffs], Tue May 30 14:16:41 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.50: +1 -35 lines
Diff to previous 1.50 (colored) 

remove unused wrapper functions from key.[ch]; ok djm@

Revision 1.50 / (download) - annotate - [select for diffs], Mon Sep 12 23:31:27 2016 UTC (7 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.49: +1 -2 lines
Diff to previous 1.49 (colored) 

list all supported signature algorithms in the server-sig-algs
Reported by mb AT smartftp.com in bz#2547 and (independantly)
Ron Frederick; ok markus@

Revision 1.49 / (download) - annotate - [select for diffs], Fri Dec 4 16:41:28 2015 UTC (8 years, 5 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.48: +3 -2 lines
Diff to previous 1.48 (colored) 

implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures (user and host auth)
based on draft-rsa-dsa-sha2-256-03.txt and draft-ssh-ext-info-04.txt;
with & ok djm@

Revision 1.48 / (download) - annotate - [select for diffs], Fri Jul 3 03:43:18 2015 UTC (8 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.47: +2 -3 lines
Diff to previous 1.47 (colored) 

delete support for legacy v00 certificates; "sure" markus@ dtucker@

Revision 1.47 / (download) - annotate - [select for diffs], Wed Jan 28 22:36:00 2015 UTC (9 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.46: +1 -4 lines
Diff to previous 1.46 (colored) 

update to new API (key_fingerprint => sshkey_fingerprint)
check sshkey_fingerprint return values;
ok markus

Revision 1.46 / (download) - annotate - [select for diffs], Tue Jan 13 07:39:19 2015 UTC (9 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.45: +1 -2 lines
Diff to previous 1.45 (colored) 

add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypes
options to allow sshd to control what public key types will be
accepted. Currently defaults to all. Feedback & ok markus@

Revision 1.45 / (download) - annotate - [select for diffs], Thu Jan 8 10:14:08 2015 UTC (9 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.44: +1 -2 lines
Diff to previous 1.44 (colored) 

deprecate key_load_private_pem() and sshkey_load_private_pem()
interfaces. Refactor the generic key loading API to not require
pathnames to be specified (they weren't really used).

Fixes a few other things en passant:

Makes ed25519 keys work for hostbased authentication (ssh-keysign
previously used the PEM-only routines).

Fixes key comment regression bz#2306: key pathnames were being lost as
comment fields.

ok markus@

Revision 1.44 / (download) - annotate - [select for diffs], Sun Dec 21 22:27:56 2014 UTC (9 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.43: +2 -2 lines
Diff to previous 1.43 (colored) 

Add FingerprintHash option to control algorithm used for key
fingerprints. Default changes from MD5 to SHA256 and format
from hex to base64.

Feedback and ok naddy@ markus@

Revision 1.43 / (download) - annotate - [select for diffs], Thu Dec 4 20:47:36 2014 UTC (9 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.42: +1 -2 lines
Diff to previous 1.42 (colored) 

key_in_file() wrapper is no longer used

Revision 1.42 / (download) - annotate - [select for diffs], Tue Jun 24 01:13:21 2014 UTC (9 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.41: +68 -115 lines
Diff to previous 1.41 (colored) 

New key API: refactor key-related functions to be more library-like,
existing API is offered as a set of wrappers.

with and ok markus@

Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew
Dempsky and Ron Bowes for a detailed review a few months ago.

Revision 1.41 / (download) - annotate - [select for diffs], Thu Jan 9 23:20:00 2014 UTC (10 years, 4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.40: +2 -2 lines
Diff to previous 1.40 (colored) 

Introduce digest API and use it to perform all hashing operations
rather than calling OpenSSL EVP_Digest* directly. Will make it easier
to build a reduced-feature OpenSSH without OpenSSL in future;
feedback, ok markus@

Revision 1.40 / (download) - annotate - [select for diffs], Fri Dec 6 13:39:49 2013 UTC (10 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.39: +11 -2 lines
Diff to previous 1.39 (colored) 

support ed25519 keys (hostkeys and user identities) using the public domain
ed25519 reference code from SUPERCOP, see http://ed25519.cr.yp.to/software.html
feedback, help & ok djm@

Revision 1.39 / (download) - annotate - [select for diffs], Fri Dec 6 13:30:08 2013 UTC (10 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.38: +4 -1 lines
Diff to previous 1.38 (colored) 

move private key (de)serialization to key.c; ok djm

Revision 1.38 / (download) - annotate - [select for diffs], Tue Oct 29 09:42:11 2013 UTC (10 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.37: +2 -1 lines
Diff to previous 1.37 (colored) 

fix potential stack exhaustion caused by nested certificates;
report by Mateusz Kocielski; ok dtucker@ markus@

Revision 1.37 / (download) - annotate - [select for diffs], Sun May 19 02:42:42 2013 UTC (11 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.36: +2 -2 lines
Diff to previous 1.36 (colored) 

Standardise logging of supplemental information during userauth. Keys
and ruser is now logged in the auth success/failure message alongside
the local username, remote host/port and protocol in use. Certificates
contents and CA are logged too.

Pushing all logging onto a single line simplifies log analysis as it is
no longer necessary to relate information scattered across multiple log
entries. "I like it" markus@

Revision 1.36 / (download) - annotate - [select for diffs], Fri Apr 19 01:06:50 2013 UTC (11 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.35: +4 -3 lines
Diff to previous 1.35 (colored) 

add the ability to query supported ciphers, MACs, key type and KEX
algorithms to ssh. Includes some refactoring of KEX and key type handling
to be table-driven; ok markus@

Revision 1.35 / (download) - annotate - [select for diffs], Thu Jan 17 23:00:01 2013 UTC (11 years, 4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.34: +3 -3 lines
Diff to previous 1.34 (colored) 

add support for Key Revocation Lists (KRLs). These are a compact way to
represent lists of revoked keys and certificates, taking as little as
a single bit of incremental cost to revoke a certificate by serial number.
KRLs are loaded via the existing RevokedKeys sshd_config option.

feedback and ok markus@

Revision 1.34 / (download) - annotate - [select for diffs], Wed May 23 03:28:28 2012 UTC (11 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2
Changes since 1.33: +3 -2 lines
Diff to previous 1.33 (colored) 

add support for RFC6594 SSHFP DNS records for ECDSA key types.
patch from bugzilla-m67 AT nulld.me in bz#1978; ok + tweak markus@

Revision 1.33 / (download) - annotate - [select for diffs], Thu Oct 28 11:22:09 2010 UTC (13 years, 6 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.32: +2 -2 lines
Diff to previous 1.32 (colored) 

fix a possible NULL deref on loading a corrupt ECDH key

store ECDH group information in private keys files as "named groups"
rather than as a set of explicit group parameters (by setting
the OPENSSL_EC_NAMED_CURVE flag). This makes for shorter key files and
retrieves the group's OpenSSL NID that we need for various things.

Revision 1.32 / (download) - annotate - [select for diffs], Thu Sep 9 10:45:45 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.31: +3 -1 lines
Diff to previous 1.31 (colored) 

ECDH/ECDSA compliance fix: these methods vary the hash function they use
(SHA256/384/512) depending on the length of the curve in use. The previous
code incorrectly used SHA256 in all cases.

This fix will cause authentication failure when using 384 or 521-bit curve
keys if one peer hasn't been upgraded and the other has. (256-bit curve
keys work ok). In particular you may need to specify HostkeyAlgorithms
when connecting to a server that has not been upgraded from an upgraded
client.

ok naddy@

Revision 1.31 / (download) - annotate - [select for diffs], Tue Aug 31 11:54:45 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.30: +22 -1 lines
Diff to previous 1.30 (colored) 

Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and
host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer
better performance than plain DH and DSA at the same equivalent symmetric
key length, as well as much shorter keys.

Only the mandatory sections of RFC5656 are implemented, specifically the
three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and
ECDSA. Point compression (optional in RFC5656 is NOT implemented).

Certificate host and user keys using the new ECDSA key types are supported.

Note that this code has not been tested for interoperability and may be
subject to change.

feedback and ok markus@

Revision 1.30 / (download) - annotate - [select for diffs], Fri Apr 16 01:47:26 2010 UTC (14 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.29: +8 -3 lines
Diff to previous 1.29 (colored) 

revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with the
following changes:

move the nonce field to the beginning of the certificate where it can
better protect against chosen-prefix attacks on the signature hash

Rename "constraints" field to "critical options"

Add a new non-critical "extensions" field

Add a serial number

The older format is still support for authentication and cert generation
(use "ssh-keygen -t v00 -s ca_key ..." to generate a v00 certificate)

ok markus@

Revision 1.29 / (download) - annotate - [select for diffs], Mon Mar 15 19:40:02 2010 UTC (14 years, 2 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.28: +2 -1 lines
Diff to previous 1.28 (colored) 

also print certificate type (user or host) for ssh-keygen -L
ok djm kettenis

Revision 1.28 / (download) - annotate - [select for diffs], Fri Feb 26 20:29:54 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.27: +29 -3 lines
Diff to previous 1.27 (colored) 

Add support for certificate key types for users and hosts.

OpenSSH certificate key types are not X.509 certificates, but a much
simpler format that encodes a public key, identity information and
some validity constraints and signs it with a CA key. CA keys are
regular SSH keys. This certificate style avoids the attack surface
of X.509 certificates and is very easy to deploy.

Certified host keys allow automatic acceptance of new host keys
when a CA certificate is marked as trusted in ~/.ssh/known_hosts.
see VERIFYING HOST KEYS in ssh(1) for details.

Certified user keys allow authentication of users when the signing
CA key is marked as trusted in authorized_keys. See "AUTHORIZED_KEYS
FILE FORMAT" in sshd(8) for details.

Certificates are minted using ssh-keygen(1), documentation is in
the "CERTIFICATES" section of that manpage.

Documentation on the format of certificates is in the file
PROTOCOL.certkeys

feedback and ok markus@

Revision 1.27 / (download) - annotate - [select for diffs], Wed Jun 11 21:01:35 2008 UTC (15 years, 11 months ago) by grunk
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.26: +3 -2 lines
Diff to previous 1.26 (colored) 

Introduce SSH Fingerprint ASCII Visualization, a technique inspired by the
graphical hash visualization schemes known as "random art", and by
Dan Kaminsky's musings on the subject during a BlackOp talk at the
23C3 in Berlin.

Scientific publication (original paper):
"Hash Visualization: a New Technique to improve Real-World Security",
Perrig A. and Song D., 1999, International Workshop on Cryptographic
Techniques and E-Commerce (CrypTEC '99)
http://sparrow.ece.cmu.edu/~adrian/projects/validation/validation.pdf

The algorithm used here is a worm crawling over a discrete plane,
leaving a trace (augmenting the field) everywhere it goes.
Movement is taken from dgst_raw 2bit-wise.  Bumping into walls
makes the respective movement vector be ignored for this turn,
thus switching to the other color of the chessboard.
Graphs are not unambiguous for now, because circles in graphs can be
walked in either direction.

discussions with several people,
help, corrections and ok markus@ djm@

Revision 1.23.8.1 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:32 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.23: +1 -1 lines
Diff to previous 1.23 (colored) next main 1.24 (colored) 

upgrade to OpenSSH 4.4

Revision 1.23.10.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:50 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.23: +1 -1 lines
Diff to previous 1.23 (colored) next main 1.24 (colored) 

upgrade to OpenSSH 4.4

Revision 1.26 / (download) - annotate - [select for diffs], Thu Aug 3 03:34:42 2006 UTC (17 years, 9 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3, OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.25: +1 -3 lines
Diff to previous 1.25 (colored) 

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

Revision 1.25 / (download) - annotate - [select for diffs], Tue Aug 1 23:22:47 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.24: +3 -1 lines
Diff to previous 1.24 (colored) 

move #include <stdio.h> out of includes.h

Revision 1.24 / (download) - annotate - [select for diffs], Sat Mar 25 22:22:43 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.23: +1 -1 lines
Diff to previous 1.23 (colored) 

standardise spacing in $OpenBSD$ tags; requested by deraadt@

Revision 1.20.2.2 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:15 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.20.2.1: +25 -25 lines
Diff to previous 1.20.2.1 (colored) to branchpoint 1.20 (colored) next main 1.21 (colored) 

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.22.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:33 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.22: +25 -25 lines
Diff to previous 1.22 (colored) next main 1.23 (colored) 

upgrade to OpenSSH 3.8

Revision 1.23 / (download) - annotate - [select for diffs], Mon Nov 10 16:23:41 2003 UTC (20 years, 6 months ago) by jakob
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_8_BASE, OPENBSD_3_7_BASE, OPENBSD_3_7, OPENBSD_3_6_BASE, OPENBSD_3_6, OPENBSD_3_5_BASE, OPENBSD_3_5
Branch point for: OPENBSD_3_9, OPENBSD_3_8
Changes since 1.22: +25 -25 lines
Diff to previous 1.22 (colored) 

constify. ok markus@ & djm@

Revision 1.19.4.2 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:26 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.19.4.1: +3 -2 lines
Diff to previous 1.19.4.1 (colored) to branchpoint 1.19 (colored) next main 1.20 (colored) 

upgrade to OpenSSH 3.7

Revision 1.20.2.1 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:43 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.20: +3 -2 lines
Diff to previous 1.20 (colored) 

upgrade to OpenSSH 3.7

Revision 1.22 / (download) - annotate - [select for diffs], Tue Jun 24 08:23:46 2003 UTC (20 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.21: +2 -2 lines
Diff to previous 1.21 (colored) 

int -> u_int; ok djm@, deraadt@, mouring@

Revision 1.21 / (download) - annotate - [select for diffs], Wed May 14 18:16:20 2003 UTC (21 years ago) by jakob
Branch: MAIN
Changes since 1.20: +2 -1 lines
Diff to previous 1.20 (colored) 

add experimental support for verifying hos keys using DNS as described
in draft-ietf-secsh-dns-xx.txt. more information in README.dns.
ok markus@ and henning@

Revision 1.19.2.1 / (download) - annotate - [select for diffs], Thu Apr 3 22:35:17 2003 UTC (21 years, 1 month ago) by miod
Branch: OPENBSD_3_1
Changes since 1.19: +6 -1 lines
Diff to previous 1.19 (colored) next main 1.20 (colored) 

Merge OpenSSH 3.6.1

Revision 1.19.4.1 / (download) - annotate - [select for diffs], Tue Apr 1 00:12:13 2003 UTC (21 years, 1 month ago) by margarida
Branch: OPENBSD_3_2
Changes since 1.19: +6 -1 lines
Diff to previous 1.19 (colored) 

Update to OpenSSH 3.6

Revision 1.20 / (download) - annotate - [select for diffs], Wed Feb 12 09:33:04 2003 UTC (21 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE
Branch point for: OPENBSD_3_3
Changes since 1.19: +6 -1 lines
Diff to previous 1.19 (colored) 

merge ssh-dss.h ssh-rsa.h into key.h; ok deraadt@

Revision 1.12.2.3 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:10 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.12.2.2: +2 -1 lines
Diff to previous 1.12.2.2 (colored) to branchpoint 1.12 (colored) next main 1.13 (colored) 

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.17.2.2 / (download) - annotate - [select for diffs], Fri May 17 00:03:23 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.17.2.1: +2 -1 lines
Diff to previous 1.17.2.1 (colored) to branchpoint 1.17 (colored) next main 1.18 (colored) 

Update OpenSSH to version 3.2.2.

Revision 1.19 / (download) - annotate - [select for diffs], Mon Mar 18 17:23:31 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE, OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_2, OPENBSD_3_1
Changes since 1.18: +2 -1 lines
Diff to previous 1.18 (colored) 

add key_demote() for ssh-privsep

Revision 1.12.2.2 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:44 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.12.2.1: +3 -3 lines
Diff to previous 1.12.2.1 (colored) to branchpoint 1.12 (colored) 

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.5.2.6 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:42 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.5.2.5: +3 -3 lines
Diff to previous 1.5.2.5 (colored) to branchpoint 1.5 (colored) next main 1.6 (colored) 

Merge OpenSSH 3.1.

Revision 1.17.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:46 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.17: +3 -3 lines
Diff to previous 1.17 (colored) 

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.18 / (download) - annotate - [select for diffs], Sun Feb 24 19:14:59 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.17: +3 -3 lines
Diff to previous 1.17 (colored) 

signed vs. unsigned: make size arguments u_int, ok stevesk@

Revision 1.12.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:54 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.12: +29 -33 lines
Diff to previous 1.12 (colored) 

Pull in OpenSSH-2.9.9

Revision 1.5.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:42 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.5.2.4: +29 -33 lines
Diff to previous 1.5.2.4 (colored) to branchpoint 1.5 (colored) 

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.17 / (download) - annotate - [select for diffs], Mon Sep 17 19:27:15 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.16: +2 -2 lines
Diff to previous 1.16 (colored) 

u_char*/char* cleanup; ok markus@

Revision 1.16 / (download) - annotate - [select for diffs], Tue Jun 26 20:14:10 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.15: +7 -2 lines
Diff to previous 1.15 (colored) 

add smartcard support to the client, too (now you can use both
the agent and the client).

Revision 1.15 / (download) - annotate - [select for diffs], Tue Jun 26 17:27:23 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.14: +11 -12 lines
Diff to previous 1.14 (colored) 

remove comments from .h, since they are cut&paste from the .c files
and out of sync

Revision 1.14 / (download) - annotate - [select for diffs], Tue Jun 26 06:32:54 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.13: +23 -31 lines
Diff to previous 1.13 (colored) 

prototype pedant.  not very creative...
- () -> (void)
- no variable names

Revision 1.13 / (download) - annotate - [select for diffs], Mon Jun 25 08:25:38 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (colored) 

update copyright for 2001

Revision 1.5.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:30 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.5.2.3: +2 -1 lines
Diff to previous 1.5.2.3 (colored) to branchpoint 1.5 (colored) 

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.12 / (download) - annotate - [select for diffs], Tue Apr 17 10:53:24 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.11: +2 -1 lines
Diff to previous 1.11 (colored) 

add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@

Revision 1.5.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:25 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.5.2.2: +10 -2 lines
Diff to previous 1.5.2.2 (colored) to branchpoint 1.5 (colored) 

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.3.2.4 / (download) - annotate - [select for diffs], Wed Mar 21 18:52:48 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.3.2.3: +10 -2 lines
Diff to previous 1.3.2.3 (colored) to branchpoint 1.3 (colored) next main 1.4 (colored) 

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.11 / (download) - annotate - [select for diffs], Mon Mar 12 22:02:01 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.10: +2 -3 lines
Diff to previous 1.10 (colored) 

remove old key_fingerprint interface, s/_ex//

Revision 1.3.2.3 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:11 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.3.2.2: +30 -3 lines
Diff to previous 1.3.2.2 (colored) to branchpoint 1.3 (colored) 

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.10 / (download) - annotate - [select for diffs], Sun Mar 11 15:03:16 2001 UTC (23 years, 2 months ago) by jakob
Branch: MAIN
Changes since 1.9: +10 -1 lines
Diff to previous 1.9 (colored) 

add improved fingerprint functions. based on work by Carsten
Raskgaard <cara@int.tele.dk> and modified by me. ok markus@.

Revision 1.5.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:00 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.5.2.1: +0 -0 lines
Diff to previous 1.5.2.1 (colored) to branchpoint 1.5 (colored) 

Pull in OpenSSH-2.5.1

Revision 1.5.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:04 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.5: +30 -3 lines
Diff to previous 1.5 (colored) 

Pull in OpenSSH 2.5.0

Revision 1.9 / (download) - annotate - [select for diffs], Mon Jan 29 01:58:16 2001 UTC (23 years, 3 months ago) by niklas
Branch: MAIN
Changes since 1.8: +2 -0 lines
Diff to previous 1.8 (colored) 

$OpenBSD$

Revision 1.8 / (download) - annotate - [select for diffs], Sun Jan 21 19:05:50 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.7: +3 -0 lines
Diff to previous 1.7 (colored) 

split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.
rename util.[ch] -> misc.[ch]

Revision 1.7 / (download) - annotate - [select for diffs], Tue Dec 19 23:17:57 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.6: +6 -6 lines
Diff to previous 1.6 (colored) 

replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'
with u_char.

Revision 1.6 / (download) - annotate - [select for diffs], Sun Nov 12 19:50:37 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.5: +25 -3 lines
Diff to previous 1.5 (colored) 

add support for RSA to SSH2.  please test.

there are now 3 types of keys: RSA1 is used by ssh-1 only,
RSA and DSA are used by SSH2.

you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
keys for SSH2 and use the RSA keys for hostkeys or for user keys.

SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.

IdentityFile2, HostDsaKey and DSAAuthentication are obsolete.
you can use multiple IdentityFile and HostKey for all types of keys.

the option DSAAuthentication is replaced by PubkeyAuthetication.

Revision 1.3.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 21:30:52 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.3.2.1: +23 -0 lines
Diff to previous 1.3.2.1 (colored) to branchpoint 1.3 (colored) 

openssh-2.3.0 (again) for 2.7 branch

Revision 1.5 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:51 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.4: +23 -0 lines
Diff to previous 1.4 (colored) 

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.3.2.1 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:20 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored) 

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.4 / (download) - annotate - [select for diffs], Sat Aug 19 21:34:43 2000 UTC (23 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored) 

add SSH2/DSA support to the agent and some other DSA related cleanups.
(note that we cannot talk to ssh.com's ssh2 agents)

Revision 1.3 / (download) - annotate - [select for diffs], Thu May 4 09:50:22 2000 UTC (24 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.2: +1 -0 lines
Diff to previous 1.2 (colored) 

print key type when talking about host keys

Revision 1.2 / (download) - annotate - [select for diffs], Wed Apr 26 20:56:29 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.1: +2 -1 lines
Diff to previous 1.1 (colored) 

add DSA pubkey auth and other SSH2 fixes.  use ssh-keygen -[xX]
for trading keys with the real and the original SSH, directly from the
people who invented the SSH protocol.

Revision 1.1 / (download) - annotate - [select for diffs], Thu Mar 23 22:15:33 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN 

initial support for DSA keys. ok deraadt@, niels@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.