![[BACK]](/icons/back.gif){kind=icon}
Up to [local] / src / usr.bin / ssh
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.32 / (download) - annotate - [select for diffs], Fri May 17 00:30:24 2024 UTC (4 hours, 12 minutes ago) by djm
Branch: MAIN
CVS Tags: HEAD
Changes since 1.31: +4 -1 lines
Diff to previous 1.31 (colored)
Start the process of splitting sshd into separate binaries. This step splits sshd into a listener and a session binary. More splits are planned. After this changes, the listener binary will validate the configuration, load the hostkeys, listen on port 22 and manage MaxStartups only. All session handling will be performed by a new sshd-session binary that the listener fork+execs. This reduces the listener process to the minimum necessary and sets us up for future work on the sshd-session binary. feedback/ok markus@ deraadt@ NB. if you're updating via source, please restart sshd after installing, otherwise you run the risk of locking yourself out.
Revision 1.31 / (download) - annotate - [select for diffs], Tue Nov 12 19:33:08 2019 UTC (4 years, 6 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE,
OPENBSD_7_5,
OPENBSD_7_4_BASE,
OPENBSD_7_4,
OPENBSD_7_3_BASE,
OPENBSD_7_3,
OPENBSD_7_2_BASE,
OPENBSD_7_2,
OPENBSD_7_1_BASE,
OPENBSD_7_1,
OPENBSD_7_0_BASE,
OPENBSD_7_0,
OPENBSD_6_9_BASE,
OPENBSD_6_9,
OPENBSD_6_8_BASE,
OPENBSD_6_8,
OPENBSD_6_7_BASE,
OPENBSD_6_7
Changes since 1.30: +2 -1 lines
Diff to previous 1.30 (colored)
enable ed25519 support; ok djm
Revision 1.30 / (download) - annotate - [select for diffs], Thu Oct 31 21:22:01 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.29: +6 -1 lines
Diff to previous 1.29 (colored)
ssh-agent support for U2F/FIDO keys feedback & ok markus@
Revision 1.29 / (download) - annotate - [select for diffs], Thu Oct 31 21:15:14 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.28: +2 -1 lines
Diff to previous 1.28 (colored)
Initial infrastructure for U2F/FIDO support Key library support: including allocation, marshalling public/private keys and certificates, signature validation. feedback & ok markus@
Revision 1.28 / (download) - annotate - [select for diffs], Fri Feb 23 15:58:37 2018 UTC (6 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE,
OPENBSD_6_6,
OPENBSD_6_5_BASE,
OPENBSD_6_5,
OPENBSD_6_4_BASE,
OPENBSD_6_4,
OPENBSD_6_3_BASE,
OPENBSD_6_3
Changes since 1.27: +3 -1 lines
Diff to previous 1.27 (colored)
Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The code is not compiled in by default (see WITH_XMSS in Makefile.inc) Joint work with stefan-lukas_gazdag at genua.eu See https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-12 ok djm@
Revision 1.27 / (download) - annotate - [select for diffs], Fri May 5 10:42:49 2017 UTC (7 years ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE,
OPENBSD_6_2
Changes since 1.26: +1 -2 lines
Diff to previous 1.26 (colored)
more simplification and removal of SSHv1-related code; ok djm@
Revision 1.26 / (download) - annotate - [select for diffs], Wed May 3 21:08:09 2017 UTC (7 years ago) by naddy
Branch: MAIN
Changes since 1.25: +1 -2 lines
Diff to previous 1.25 (colored)
remove miscellaneous SSH1 leftovers; ok markus@
Revision 1.25 / (download) - annotate - [select for diffs], Thu Mar 31 05:24:06 2016 UTC (8 years, 1 month ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE,
OPENBSD_6_1,
OPENBSD_6_0_BASE,
OPENBSD_6_0
Changes since 1.24: +1 -3 lines
Diff to previous 1.24 (colored)
Remove fallback from moduli to "primes" file that was deprecated in 2001 and fix log messages referring to primes file. Based on patch from xnox at ubuntu.com via bz#2559. "kill it" deraadt@
Revision 1.24 / (download) - annotate - [select for diffs], Fri Dec 6 13:39:49 2013 UTC (10 years, 5 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE,
OPENBSD_5_9,
OPENBSD_5_8_BASE,
OPENBSD_5_8,
OPENBSD_5_7_BASE,
OPENBSD_5_7,
OPENBSD_5_6_BASE,
OPENBSD_5_6,
OPENBSD_5_5_BASE,
OPENBSD_5_5
Changes since 1.23: +3 -1 lines
Diff to previous 1.23 (colored)
support ed25519 keys (hostkeys and user identities) using the public domain ed25519 reference code from SUPERCOP, see http://ed25519.cr.yp.to/software.html feedback, help & ok djm@
Revision 1.23 / (download) - annotate - [select for diffs], Fri Apr 5 00:31:49 2013 UTC (11 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE,
OPENBSD_5_4
Changes since 1.22: +11 -11 lines
Diff to previous 1.22 (colored)
use the existing _PATH_SSH_USER_RC define to construct the other pathnames; bz#2077, ok dtucker@ (no binary change)
Revision 1.22 / (download) - annotate - [select for diffs], Mon May 23 03:30:07 2011 UTC (12 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE,
OPENBSD_5_3,
OPENBSD_5_2_BASE,
OPENBSD_5_2,
OPENBSD_5_1_BASE,
OPENBSD_5_1,
OPENBSD_5_0_BASE,
OPENBSD_5_0
Changes since 1.21: +4 -1 lines
Diff to previous 1.21 (colored)
allow AuthorizedKeysFile to specify multiple files, separated by spaces. Bring back authorized_keys2 as a default search path (to avoid breaking existing users of this file), but override this in sshd_config so it will be no longer used on fresh installs. Maybe in 2015 we can remove it entierly :) feedback and ok markus@ dtucker@
Revision 1.21 / (download) - annotate - [select for diffs], Wed May 11 04:47:06 2011 UTC (13 years ago) by djm
Branch: MAIN
Changes since 1.20: +1 -4 lines
Diff to previous 1.20 (colored)
remove support for authorized_keys2; it is a relic from the early days of protocol v.2 support and has been undocumented for many years; ok markus@
Revision 1.20 / (download) - annotate - [select for diffs], Tue Aug 31 11:54:45 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE,
OPENBSD_4_9
Changes since 1.19: +3 -1 lines
Diff to previous 1.19 (colored)
Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer better performance than plain DH and DSA at the same equivalent symmetric key length, as well as much shorter keys. Only the mandatory sections of RFC5656 are implemented, specifically the three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and ECDSA. Point compression (optional in RFC5656 is NOT implemented). Certificate host and user keys using the new ECDSA key types are supported. Note that this code has not been tested for interoperability and may be subject to change. feedback and ok markus@
Revision 1.19 / (download) - annotate - [select for diffs], Thu Feb 11 20:37:47 2010 UTC (14 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE,
OPENBSD_4_8,
OPENBSD_4_7_BASE,
OPENBSD_4_7
Changes since 1.18: +2 -2 lines
Diff to previous 1.18 (colored)
correct comment
Revision 1.18 / (download) - annotate - [select for diffs], Mon Feb 8 10:50:20 2010 UTC (14 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.17: +4 -1 lines
Diff to previous 1.17 (colored)
replace our obsolete smartcard code with PKCS#11. ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev
Revision 1.17 / (download) - annotate - [select for diffs], Mon Dec 29 02:23:26 2008 UTC (15 years, 4 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE,
OPENBSD_4_6,
OPENBSD_4_5_BASE,
OPENBSD_4_5
Changes since 1.16: +5 -5 lines
Diff to previous 1.16 (colored)
no need to escape single quotes in comments
Revision 1.15.6.1 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:33 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.15: +1 -1 lines
Diff to previous 1.15 (colored) next main 1.16 (colored)
upgrade to OpenSSH 4.4
Revision 1.15.8.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:51 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.15: +1 -1 lines
Diff to previous 1.15 (colored) next main 1.16 (colored)
upgrade to OpenSSH 4.4
Revision 1.16 / (download) - annotate - [select for diffs], Sat Mar 25 22:22:43 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE,
OPENBSD_4_4,
OPENBSD_4_3_BASE,
OPENBSD_4_3,
OPENBSD_4_2_BASE,
OPENBSD_4_2,
OPENBSD_4_1_BASE,
OPENBSD_4_1,
OPENBSD_4_0_BASE,
OPENBSD_4_0
Changes since 1.15: +1 -1 lines
Diff to previous 1.15 (colored)
standardise spacing in $OpenBSD$ tags; requested by deraadt@
Revision 1.13.6.2 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:31 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.13.6.1: +2 -2 lines
Diff to previous 1.13.6.1 (colored) to branchpoint 1.13 (colored) next main 1.14 (colored)
upgrade to OpenSSH 3.9
Revision 1.14.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:26 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.14: +2 -2 lines
Diff to previous 1.14 (colored) next main 1.15 (colored)
upgrade to OpenSSH 3.9
Revision 1.15 / (download) - annotate - [select for diffs], Sun Jul 11 17:48:47 2004 UTC (19 years, 10 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE,
OPENBSD_3_8_BASE,
OPENBSD_3_7_BASE,
OPENBSD_3_7,
OPENBSD_3_6_BASE,
OPENBSD_3_6
Branch point for: OPENBSD_3_9,
OPENBSD_3_8
Changes since 1.14: +2 -2 lines
Diff to previous 1.14 (colored)
spaces
Revision 1.13.4.1 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:16 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.13: +4 -1 lines
Diff to previous 1.13 (colored) next main 1.14 (colored)
upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8
Revision 1.13.6.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:33 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.13: +4 -1 lines
Diff to previous 1.13 (colored)
upgrade to OpenSSH 3.8
Revision 1.14 / (download) - annotate - [select for diffs], Fri Jan 30 09:48:57 2004 UTC (20 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_5
Changes since 1.13: +4 -1 lines
Diff to previous 1.13 (colored)
support for password change; ok dtucker@ (set password-dead=1w in login.conf to use this).
Revision 1.12.2.1 / (download) - annotate - [select for diffs], Wed Jun 26 15:30:38 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.12: +4 -1 lines
Diff to previous 1.12 (colored) next main 1.13 (colored)
Pull in OpenSSH-3.4
Revision 1.9.2.4 / (download) - annotate - [select for diffs], Sat Jun 22 07:23:17 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.9.2.3: +4 -1 lines
Diff to previous 1.9.2.3 (colored) to branchpoint 1.9 (colored) next main 1.10 (colored)
Update OpenSSH to version 3.3 (with local changes, configuration files still living in /etc and privsep user being nobody).
Revision 1.5.2.3 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:10 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.5.2.2: +4 -1 lines
Diff to previous 1.5.2.2 (colored) to branchpoint 1.5 (colored) next main 1.6 (colored)
Upgrade to OpenSSH 3.2.3. Except for improbable compilation error fixes, this should be the last commit made to the 2.9-STABLE branche. Have fun upgrading.
Revision 1.13 / (download) - annotate - [select for diffs], Thu May 23 19:24:30 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE,
OPENBSD_3_3_BASE,
OPENBSD_3_2_BASE,
OPENBSD_3_2
Branch point for: OPENBSD_3_4,
OPENBSD_3_3
Changes since 1.12: +4 -1 lines
Diff to previous 1.12 (colored)
add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentication in protocol v2 (needs to access the hostkeys).
Revision 1.9.2.3 / (download) - annotate - [select for diffs], Fri May 17 00:03:24 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.9.2.2: +4 -1 lines
Diff to previous 1.9.2.2 (colored) to branchpoint 1.9 (colored)
Update OpenSSH to version 3.2.2.
Revision 1.12 / (download) - annotate - [select for diffs], Tue Mar 19 03:03:43 2002 UTC (22 years, 2 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.11: +4 -1 lines
Diff to previous 1.11 (colored)
_PATH_PRIVSEP_CHROOT_DIR; ok provos@
Revision 1.5.2.2 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:44 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.5.2.1: +13 -9 lines
Diff to previous 1.5.2.1 (colored) to branchpoint 1.5 (colored)
Merge OpenSSH 3.1, keeping /etc as configuration files directory. (i.e. OpenSSH 3.1 + openbsd29_3.1.patch)
Revision 1.4.2.6 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:42 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.4.2.5: +13 -9 lines
Diff to previous 1.4.2.5 (colored) next main 1.5 (colored)
Merge OpenSSH 3.1.
Revision 1.9.2.2 / (download) - annotate - [select for diffs], Fri Mar 8 15:17:18 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_3_0
Changes since 1.9.2.1: +2 -2 lines
Diff to previous 1.9.2.1 (colored) to branchpoint 1.9 (colored)
apply the necessary openbsd30_3.1.patch patch. -- Ok'd by markus@
Revision 1.9.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:47 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.9: +13 -9 lines
Diff to previous 1.9 (colored)
Update to OpenSSH-3.1 on 3.0-stable branch
Revision 1.11 / (download) - annotate - [select for diffs], Sat Feb 9 17:37:34 2002 UTC (22 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.10: +10 -9 lines
Diff to previous 1.10 (colored)
move ssh config files to /etc/ssh
Revision 1.10 / (download) - annotate - [select for diffs], Sat Dec 8 17:49:28 2001 UTC (22 years, 5 months ago) by stevesk
Branch: MAIN
Changes since 1.9: +4 -1 lines
Diff to previous 1.9 (colored)
use only one path to X11 UNIX domain socket vs. an array of paths to try. report from djast@cs.toronto.edu. ok markus@
Revision 1.5.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:54 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.5: +10 -1 lines
Diff to previous 1.5 (colored)
Pull in OpenSSH-2.9.9
Revision 1.4.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:42 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.4.2.4: +10 -1 lines
Diff to previous 1.4.2.4 (colored)
Pull in OpenSSH 2.9.9 to the 2.8 branch.
Revision 1.9 / (download) - annotate - [select for diffs], Sat Jun 23 02:34:30 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.8: +3 -1 lines
Diff to previous 1.8 (colored)
get rid of known_hosts2, use it for hostkey lookup, but do not modify.
Revision 1.8 / (download) - annotate - [select for diffs], Fri Jun 22 21:55:49 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.7: +3 -1 lines
Diff to previous 1.7 (colored)
merge authorized_keys2 into authorized_keys. authorized_keys2 is used for backward compat. (just append authorized_keys2 to authorized_keys).
Revision 1.7 / (download) - annotate - [select for diffs], Fri Jun 22 21:27:08 2001 UTC (22 years, 10 months ago) by provos
Branch: MAIN
Changes since 1.6: +3 -1 lines
Diff to previous 1.6 (colored)
use /etc/moduli instead of /etc/primes, okay markus@
Revision 1.6 / (download) - annotate - [select for diffs], Fri Jun 8 15:25:40 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.5: +4 -1 lines
Diff to previous 1.5 (colored)
move the path for xauth to pathnames.h
Revision 1.4.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:32 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.4.2.3: +3 -2 lines
Diff to previous 1.4.2.3 (colored)
Pull in OpenSSH-2.9 to 2.8 branch.
Revision 1.5 / (download) - annotate - [select for diffs], Thu Apr 12 19:15:24 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.4: +3 -2 lines
Diff to previous 1.4 (colored)
implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2) similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :)
Revision 1.4.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:27 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.4.2.2: +0 -0 lines
Diff to previous 1.4.2.2 (colored)
Pull in OpenSSH-2.5.2 for 2.8 branch.
Revision 1.4.4.2 / (download) - annotate - [select for diffs], Wed Mar 21 18:52:56 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.4.4.1: +0 -0 lines
Diff to previous 1.4.4.1 (colored) next main 1.5 (colored)
Pull in OpenSSH-2.5.2 for 2.7 branch.
Revision 1.4.4.1 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:12 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.4: +1 -1 lines
Diff to previous 1.4 (colored)
OpenSSH-2.5.1 for 2.7 patch branch
Revision 1.4.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:10 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.4.2.1: +0 -0 lines
Diff to previous 1.4.2.1 (colored)
Pull in OpenSSH-2.5.1
Revision 1.4.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:09 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.4: +1 -1 lines
Diff to previous 1.4 (colored)
Pull in OpenSSH 2.5.0
Revision 1.4 / (download) - annotate - [select for diffs], Thu Feb 8 22:28:07 2001 UTC (23 years, 3 months ago) by stevesk
Branch: MAIN
Branch point for: OPENBSD_2_8,
OPENBSD_2_7
Changes since 1.3: +2 -1 lines
Diff to previous 1.3 (colored)
_PATH_LS; ok markus@
Revision 1.3 / (download) - annotate - [select for diffs], Thu Feb 8 00:04:52 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.2: +4 -1 lines
Diff to previous 1.2 (colored)
allow sftp over ssh protocol 1; ok djm@
Revision 1.2 / (download) - annotate - [select for diffs], Mon Jan 29 01:58:17 2001 UTC (23 years, 3 months ago) by niklas
Branch: MAIN
Changes since 1.1: +2 -0 lines
Diff to previous 1.1 (colored)
$OpenBSD$
Revision 1.1 / (download) - annotate - [select for diffs], Fri Jan 19 15:55:11 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
move ssh1 definitions to ssh1.h, pathnames to pathnames.h