OpenBSD CVS

CVS log for src/usr.bin/ssh/ssh-add.c


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.172 / (download) - annotate - [select for diffs], Thu Jan 11 01:45:36 2024 UTC (4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, HEAD
Changes since 1.171: +3 -1 lines
Diff to previous 1.171 (colored)

make DSA key support compile-time optional, defaulting to on

ok markus@

Revision 1.171 / (download) - annotate - [select for diffs], Mon Jan 8 00:30:39 2024 UTC (4 months, 1 week ago) by djm
Branch: MAIN
Changes since 1.170: +2 -2 lines
Diff to previous 1.170 (colored)

fix typo; spotted by Albert Chin

Revision 1.170 / (download) - annotate - [select for diffs], Tue Dec 19 06:57:34 2023 UTC (4 months, 4 weeks ago) by jmc
Branch: MAIN
Changes since 1.169: +3 -3 lines
Diff to previous 1.169 (colored)

sort -C, and add to usage(); ok djm

Revision 1.169 / (download) - annotate - [select for diffs], Mon Dec 18 14:46:56 2023 UTC (4 months, 4 weeks ago) by djm
Branch: MAIN
Changes since 1.168: +64 -28 lines
Diff to previous 1.168 (colored)

Make it possible to load certs from PKCS#11 tokens

Adds a protocol extension to allow grafting certificates supplied by
ssh-add to keys loaded from PKCS#11 tokens in the agent.

feedback/ok markus@

Revision 1.168 / (download) - annotate - [select for diffs], Thu Jul 6 22:17:59 2023 UTC (10 months, 1 week ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_4_BASE, OPENBSD_7_4
Changes since 1.167: +3 -3 lines
Diff to previous 1.167 (colored)

minleft and maxsign are u_int so cast appropriately. Prompted by
github PR#410, ok deraadt.

Revision 1.167 / (download) - annotate - [select for diffs], Wed Mar 8 00:05:58 2023 UTC (14 months, 1 week ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE, OPENBSD_7_3
Changes since 1.166: +6 -3 lines
Diff to previous 1.166 (colored)

use RSA/SHA256 when testing usability of private key in agent;
with/ok dtucker

Revision 1.166 / (download) - annotate - [select for diffs], Sat Jun 18 02:17:16 2022 UTC (22 months, 4 weeks ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2
Changes since 1.165: +3 -3 lines
Diff to previous 1.165 (colored)

Don't attempt to fprintf a null identity comment.  From Martin Vahlensieck
via tech@.

Revision 1.165 / (download) - annotate - [select for diffs], Fri Feb 4 02:49:17 2022 UTC (2 years, 3 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE, OPENBSD_7_1
Changes since 1.164: +2 -2 lines
Diff to previous 1.164 (colored)

Since they are deprecated, move DSA to the end of the default list of
public keys so that they will be tried last.  From github PR#295 from
"ProBackup-nl", ok djm@

Revision 1.164 / (download) - annotate - [select for diffs], Fri Jan 14 03:43:48 2022 UTC (2 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.163: +1 -6 lines
Diff to previous 1.163 (colored)

allow pin-required FIDO keys to be added to ssh-agent(1).
ssh-askpass will be used to request the PIN at authentication time.

From Pedro Martelletto, ok djm

Revision 1.163 / (download) - annotate - [select for diffs], Wed Dec 22 06:56:41 2021 UTC (2 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.162: +3 -3 lines
Diff to previous 1.162 (colored)

sort -H and -h in SYNOPSIS/usage();
tweak the -H text;

ok djm

Revision 1.162 / (download) - annotate - [select for diffs], Sun Dec 19 22:10:24 2021 UTC (2 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.161: +170 -16 lines
Diff to previous 1.161 (colored)

ssh-add side of destination constraints

Have ssh-add accept a list of "destination constraints" that allow
restricting where keys may be used in conjunction with a ssh-agent/ssh
that supports session ID/hostkey binding.

Constraints are specified as either "[user@]host-pattern" or
"host-pattern>[user@]host-pattern".

The first form permits a key to be used to authenticate as the
specified user to the specified host.

The second form permits a key that has previously been permitted
for use at a host to be available via a forwarded agent to an
additional host.

For example, constraining a key with "user1@host_a" and
"host_a>host_b". Would permit authentication as "user1" at
"host_a", and allow the key to be available on an agent forwarded
to "host_a" only for authentication to "host_b". The key would not
be visible on agent forwarded to other hosts or usable for
authentication there.

Internally, destination constraints use host keys to identify hosts.
The host patterns are used to obtain lists of host keys for that
destination that are communicated to the agent. The user/hostkeys are
encoded using a new restrict-destination-v00@openssh.com key
constraint.

host keys are looked up in the default client user/system known_hosts
files. It is possible to override this set on the command-line.

feedback Jann Horn & markus@
ok markus@

Revision 1.161 / (download) - annotate - [select for diffs], Thu Oct 28 02:54:18 2021 UTC (2 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.160: +14 -14 lines
Diff to previous 1.160 (colored)

When downloading resident keys from a FIDO token, pass back the
user ID that was used when the key was created and append it to
the filename the key is written to (if it is not the default).

Avoids keys being clobbered if the user created multiple
resident keys with the same application string but different
user IDs.

feedback Pedro Martelletto; ok markus

NB. increments SSH_SK_VERSION_MAJOR

Revision 1.160 / (download) - annotate - [select for diffs], Sat Apr 3 06:18:41 2021 UTC (3 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.159: +3 -3 lines
Diff to previous 1.159 (colored)

highly polished whitespace, mostly fixing spaces-for-tab and bad
indentation on continuation lines. Prompted by GHPR#185

Revision 1.159 / (download) - annotate - [select for diffs], Mon Jan 11 02:12:58 2021 UTC (3 years, 4 months ago) by dtucker
Branch: MAIN
Changes since 1.158: +5 -5 lines
Diff to previous 1.158 (colored)

Change convtime() from returning long to returning int.  On platforms
where sizeof(int) != sizeof(long), convtime could accept values
>MAX_INT which subsequently truncate when stored in an int during
config parsing.  bz#3250, ok djm@

Revision 1.158 / (download) - annotate - [select for diffs], Sun Oct 18 11:32:02 2020 UTC (3 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.157: +14 -18 lines
Diff to previous 1.157 (colored)

use the new variant log macros instead of prepending __func__ and
appending ssh_err(r) manually; ok markus@

Revision 1.157 / (download) - annotate - [select for diffs], Mon Aug 31 04:33:17 2020 UTC (3 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.156: +16 -7 lines
Diff to previous 1.156 (colored)

refuse to add verify-required (PINful) FIDO keys to ssh-agent until
the agent supports them properly

Revision 1.156 / (download) - annotate - [select for diffs], Fri Jun 26 05:04:07 2020 UTC (3 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.155: +54 -17 lines
Diff to previous 1.155 (colored)

allow "ssh-add -d -" to read keys to be deleted from stdin
bz#3180; ok dtucker@

Revision 1.155 / (download) - annotate - [select for diffs], Mon Mar 16 02:17:02 2020 UTC (4 years, 2 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.154: +2 -2 lines
Diff to previous 1.154 (colored)

Cast lifetime to u_long for comparison to prevent unsigned comparison
warning on 32bit arches.  Spotted by deraadt, ok djm.

Revision 1.154 / (download) - annotate - [select for diffs], Wed Feb 26 13:40:09 2020 UTC (4 years, 2 months ago) by jsg
Branch: MAIN
Changes since 1.153: +4 -7 lines
Diff to previous 1.153 (colored)

change explicit_bzero();free() to freezero()

While freezero() returns early if the pointer is NULL the tests for
NULL in callers are left to avoid warnings about passing an
uninitialised size argument across a function boundry.

ok deraadt@ djm@

Revision 1.153 / (download) - annotate - [select for diffs], Tue Feb 18 08:58:33 2020 UTC (4 years, 2 months ago) by dtucker
Branch: MAIN
Changes since 1.152: +7 -6 lines
Diff to previous 1.152 (colored)

Ensure that the key lifetime provided fits within the values allowed by
the wire format (u32). Prevents integer wraparound of the timeout values.
bz#3119, ok markus@ djm@

Revision 1.152 / (download) - annotate - [select for diffs], Thu Feb 6 22:30:54 2020 UTC (4 years, 3 months ago) by naddy
Branch: MAIN
Changes since 1.151: +4 -4 lines
Diff to previous 1.151 (colored)

Replace "security key" with "authenticator" in program messages.

This replaces "security key" in error/usage/verbose messages and
distinguishes between "authenticator" and "authenticator-hosted key".

ok djm@

Revision 1.151 / (download) - annotate - [select for diffs], Sat Jan 25 23:02:13 2020 UTC (4 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.150: +2 -4 lines
Diff to previous 1.150 (colored)

factor out reading/writing sshbufs to dedicated functions;
feedback and ok markus@

Revision 1.150 / (download) - annotate - [select for diffs], Fri Jan 17 20:13:47 2020 UTC (4 years, 3 months ago) by naddy
Branch: MAIN
Changes since 1.149: +15 -25 lines
Diff to previous 1.149 (colored)

Document loading of resident keys from a FIDO authenticator.

* Rename -O to -K to keep "-O option" available.
* Document -K.
* Trim usage() message down to synopsis, like all other commands.

ok markus@

Revision 1.149 / (download) - annotate - [select for diffs], Mon Jan 6 02:00:46 2020 UTC (4 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.148: +3 -2 lines
Diff to previous 1.148 (colored)

Extends the SK API to accept a set of key/value options for all
operations. These are intended to future-proof the API a little by
making it easier to specify additional fields for without having to
change the API version for each.

At present, only two options are defined: one to explicitly specify
the device for an operation (rather than accepting the middleware's
autoselection) and another to specify the FIDO2 username that may
be used when generating a resident key. These new options may be
invoked at key generation time via ssh-keygen -O

This also implements a suggestion from Markus to avoid "int" in favour
of uint32_t for the algorithm argument in the API, to make implementation
of ssh-sk-client/helper a little easier.

feedback, fixes and ok markus@

Revision 1.148 / (download) - annotate - [select for diffs], Mon Dec 30 09:22:49 2019 UTC (4 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.147: +63 -5 lines
Diff to previous 1.147 (colored)

implement loading resident keys in ssh-add

"ssh-add -O" will load resident keys from a FIDO2 token and add them
to a ssh-agent.

feedback and ok markus@

Revision 1.147 / (download) - annotate - [select for diffs], Mon Nov 25 00:51:37 2019 UTC (4 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.146: +2 -2 lines
Diff to previous 1.146 (colored)

Add new structure for signature options

This is populated during signature verification with additional fields
that are present in and covered by the signature. At the moment, it is
only used to record security key-specific options, especially the flags
field.

with and ok markus@

Revision 1.146 / (download) - annotate - [select for diffs], Mon Nov 18 16:10:05 2019 UTC (4 years, 5 months ago) by naddy
Branch: MAIN
Changes since 1.145: +2 -1 lines
Diff to previous 1.145 (colored)

additional missing stdarg.h includes when built without WITH_OPENSSL; ok djm@

Revision 1.145 / (download) - annotate - [select for diffs], Thu Nov 14 21:27:30 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.144: +4 -1 lines
Diff to previous 1.144 (colored)

directly support U2F/FIDO2 security keys in OpenSSH by linking
against the (previously external) USB HID middleware. The dlopen()
capability still exists for alternate middlewares, e.g. for
Bluetooth, NFC and test/debugging.

Revision 1.144 / (download) - annotate - [select for diffs], Tue Nov 12 19:33:08 2019 UTC (4 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.143: +3 -2 lines
Diff to previous 1.143 (colored)

enable ed25519 support; ok djm

Revision 1.143 / (download) - annotate - [select for diffs], Thu Oct 31 21:19:56 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.142: +27 -10 lines
Diff to previous 1.142 (colored)

ssh-add support for U2F/FIDO keys

Revision 1.142 / (download) - annotate - [select for diffs], Thu Oct 31 21:19:15 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.141: +3 -3 lines
Diff to previous 1.141 (colored)

add new agent key constraint for U2F/FIDO provider

feedback & ok markus@

Revision 1.141 / (download) - annotate - [select for diffs], Fri Sep 6 05:23:55 2019 UTC (4 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.140: +5 -2 lines
Diff to previous 1.140 (colored)

fixes for !WITH_OPENSSL compilation; ok dtucker@

Revision 1.140 / (download) - annotate - [select for diffs], Fri Jun 28 13:35:04 2019 UTC (4 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.139: +3 -3 lines
Diff to previous 1.139 (colored)

When system calls indicate an error they return -1, not some arbitrary
value < 0.  errno is only updated in this case.  Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

Revision 1.139 / (download) - annotate - [select for diffs], Thu Jun 6 05:13:13 2019 UTC (4 years, 11 months ago) by otto
Branch: MAIN
Changes since 1.138: +1 -2 lines
Diff to previous 1.138 (colored)

Replace calls to ssh_malloc_init() by a static init of malloc_options.
Prepares for changes in the way malloc is initialized.  ok guenther@ dtucker@

Revision 1.138 / (download) - annotate - [select for diffs], Mon Jan 21 12:53:35 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.137: +14 -2 lines
Diff to previous 1.137 (colored)

add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up debug
verbosity.

Make ssh-agent turn on ssh-pkcs11-helper's verbosity when it is run
in debug mode ("ssh-agent -d"), so we get to see errors from the
PKCS#11 code.

ok markus@

Revision 1.137 / (download) - annotate - [select for diffs], Sun Jan 20 22:03:29 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.136: +49 -3 lines
Diff to previous 1.136 (colored)

add option to test whether keys in an agent are usable, by performing
a signature and a verification using each key "ssh-add -T pubkey [...]"

work by markus@, ok djm@

Revision 1.136 / (download) - annotate - [select for diffs], Wed Sep 19 02:03:02 2018 UTC (5 years, 7 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.135: +39 -23 lines
Diff to previous 1.135 (colored)

Make "ssh-add -q" do what it says on the tin: silence output from
successful operations.

Based on patch from Thijs van Dijk; ok dtucker@ deraadt@

Revision 1.135 / (download) - annotate - [select for diffs], Fri Feb 23 15:58:37 2018 UTC (6 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.134: +69 -5 lines
Diff to previous 1.134 (colored)

Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures)
The code is not compiled in by default (see WITH_XMSS in Makefile.inc)
Joint work with stefan-lukas_gazdag at genua.eu
See https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-12
ok djm@

Revision 1.134 / (download) - annotate - [select for diffs], Tue Aug 29 09:42:29 2017 UTC (6 years, 8 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.133: +23 -13 lines
Diff to previous 1.133 (colored)

add a -q option to ssh-add to make it quiet on success.

if you want to silence ssh-add without this you generally redirect
the output to /dev/null, but that can hide error output which you
should see.

ok djm@

Revision 1.133 / (download) - annotate - [select for diffs], Sat Jul 1 13:50:45 2017 UTC (6 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.132: +1 -2 lines
Diff to previous 1.132 (colored)

remove post-SSHv1 removal dead code from rsa.c and merge the
remaining bit that it still used into ssh-rsa.c; ok markus

Revision 1.132 / (download) - annotate - [select for diffs], Tue May 30 14:16:41 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.131: +2 -2 lines
Diff to previous 1.131 (colored)

remove unused wrapper functions from key.[ch]; ok djm@

Revision 1.131 / (download) - annotate - [select for diffs], Fri May 5 10:42:49 2017 UTC (7 years ago) by naddy
Branch: MAIN
Changes since 1.130: +25 -35 lines
Diff to previous 1.130 (colored)

more simplification and removal of SSHv1-related code; ok djm@

Revision 1.130 / (download) - annotate - [select for diffs], Thu May 4 06:10:57 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.129: +6 -1 lines
Diff to previous 1.129 (colored)

since a couple of people have asked, leave a comment explaining why we
retain SSH v.1 support in the "delete all keys from agent" path.

Revision 1.129 / (download) - annotate - [select for diffs], Sun Apr 30 23:10:43 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.128: +1 -8 lines
Diff to previous 1.128 (colored)

unifdef WITH_SSH1
ok markus@

Revision 1.128 / (download) - annotate - [select for diffs], Mon Feb 15 09:47:49 2016 UTC (8 years, 3 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1, OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.127: +2 -1 lines
Diff to previous 1.127 (colored)

Add a function to enable security-related malloc_options.  With and ok
deraadt@, something similar has been in the snaps for a while.

Revision 1.127 / (download) - annotate - [select for diffs], Fri Dec 11 02:31:47 2015 UTC (8 years, 5 months ago) by mmcc
Branch: MAIN
Changes since 1.126: +3 -5 lines
Diff to previous 1.126 (colored)

Remove NULL-checks before sshkey_free().

ok djm@

Revision 1.126 / (download) - annotate - [select for diffs], Thu Oct 15 23:51:40 2015 UTC (8 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.125: +2 -2 lines
Diff to previous 1.125 (colored)

fix some signed/unsigned integer type mismatches in format
strings; reported by Nicholas Lemonias

Revision 1.125 / (download) - annotate - [select for diffs], Sun Sep 13 14:39:16 2015 UTC (8 years, 8 months ago) by tim
Branch: MAIN
Changes since 1.124: +6 -7 lines
Diff to previous 1.124 (colored)

- Fix error message: passphrase needs to be at least 5 characters, not 4.
- Remove unused function argument.
- Remove two unnecessary variables.

OK djm@

Revision 1.124 / (download) - annotate - [select for diffs], Sun Sep 13 13:48:19 2015 UTC (8 years, 8 months ago) by tim
Branch: MAIN
Changes since 1.123: +8 -9 lines
Diff to previous 1.123 (colored)

When adding keys to the agent, don't ignore the comment of keys for which the
user is prompted for a passphrase.

Tweak and OK djm@

Revision 1.123 / (download) - annotate - [select for diffs], Fri Jul 3 03:43:18 2015 UTC (8 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.122: +2 -3 lines
Diff to previous 1.122 (colored)

delete support for legacy v00 certificates; "sure" markus@ dtucker@

Revision 1.122 / (download) - annotate - [select for diffs], Thu Mar 26 12:32:38 2015 UTC (9 years, 1 month ago) by naddy
Branch: MAIN
Changes since 1.121: +3 -1 lines
Diff to previous 1.121 (colored)

don't try to load .ssh/identity by default if SSH1 is disabled; ok markus@

Revision 1.121 / (download) - annotate - [select for diffs], Wed Mar 25 19:29:58 2015 UTC (9 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.120: +11 -7 lines
Diff to previous 1.120 (colored)

ignore v1 errors on ssh-add -D; only try v2 keys on -l/-L (unless WITH_SSH1)
ok djm@

Revision 1.120 / (download) - annotate - [select for diffs], Sat Feb 21 21:46:57 2015 UTC (9 years, 2 months ago) by halex
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.119: +10 -4 lines
Diff to previous 1.119 (colored)

make "ssh-add -d" properly remove a corresponding certificate, and also
not whine and fail if there is none

ok djm@

Revision 1.119 / (download) - annotate - [select for diffs], Tue Feb 3 00:34:14 2015 UTC (9 years, 3 months ago) by halex
Branch: MAIN
Changes since 1.118: +5 -4 lines
Diff to previous 1.118 (colored)

slightly extend the passphrase prompt if running with -c in order to
give the user a chance to notice if unintentionally running without it

wording tweak and ok djm@

Revision 1.118 / (download) - annotate - [select for diffs], Wed Jan 28 22:36:00 2015 UTC (9 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.117: +3 -2 lines
Diff to previous 1.117 (colored)

update to new API (key_fingerprint => sshkey_fingerprint)
check sshkey_fingerprint return values;
ok markus

Revision 1.117 / (download) - annotate - [select for diffs], Fri Jan 16 06:40:12 2015 UTC (9 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.116: +3 -3 lines
Diff to previous 1.116 (colored)

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible.  Annotate <sys/param.h> lines with their current reasons.  Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc.  Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution.  These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)

Revision 1.116 / (download) - annotate - [select for diffs], Wed Jan 14 20:05:27 2015 UTC (9 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.115: +151 -108 lines
Diff to previous 1.115 (colored)

move authfd.c and its tentacles to the new buffer/key API;
ok markus@

Revision 1.115 / (download) - annotate - [select for diffs], Sun Dec 21 22:27:56 2014 UTC (9 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.114: +41 -13 lines
Diff to previous 1.114 (colored)

Add FingerprintHash option to control algorithm used for key
fingerprints. Default changes from MD5 to SHA256 and format
from hex to base64.

Feedback and ok naddy@ markus@

Revision 1.114 / (download) - annotate - [select for diffs], Wed Nov 26 18:34:51 2014 UTC (9 years, 5 months ago) by millert
Branch: MAIN
Changes since 1.113: +2 -2 lines
Diff to previous 1.113 (colored)

Prefer setvbuf() to setlinebuf() for portability; ok deraadt@

Revision 1.113 / (download) - annotate - [select for diffs], Wed Jul 9 14:15:56 2014 UTC (9 years, 10 months ago) by benno
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.112: +3 -3 lines
Diff to previous 1.112 (colored)

fix ssh-add crash while loading more than one key
ok markus@

Revision 1.112 / (download) - annotate - [select for diffs], Thu Jul 3 03:15:01 2014 UTC (9 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.111: +3 -1 lines
Diff to previous 1.111 (colored)

make stdout line-buffered; saves partial output getting lost when
ssh-add fatal()s part-way through (e.g. when listing keys from an
agent that supports key types that ssh-add doesn't);
bz#2234, reported by Phil Pennock

Revision 1.111 / (download) - annotate - [select for diffs], Fri Jun 27 18:50:39 2014 UTC (9 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.110: +5 -5 lines
Diff to previous 1.110 (colored)

fix loading of private keys

Revision 1.110 / (download) - annotate - [select for diffs], Tue Jun 24 01:13:21 2014 UTC (9 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.109: +17 -7 lines
Diff to previous 1.109 (colored)

New key API: refactor key-related functions to be more library-like,
existing API is offered as a set of wrappers.

with and ok markus@

Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew
Dempsky and Ron Bowes for a detailed review a few months ago.

Revision 1.109 / (download) - annotate - [select for diffs], Sun Feb 2 03:44:31 2014 UTC (10 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.108: +4 -4 lines
Diff to previous 1.108 (colored)

convert memset of potentially-private data to explicit_bzero()

Revision 1.108 / (download) - annotate - [select for diffs], Thu Dec 19 00:10:30 2013 UTC (10 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.107: +9 -6 lines
Diff to previous 1.107 (colored)

skip requesting smartcard PIN when removing keys from agent; bz#2187
patch from jay AT slushpupie.com; ok dtucker

Revision 1.107 / (download) - annotate - [select for diffs], Sun Dec 15 18:17:26 2013 UTC (10 years, 5 months ago) by pascal
Branch: MAIN
Changes since 1.106: +2 -1 lines
Diff to previous 1.106 (colored)

Make ssh-add also add .ssh/id_ed25519; fixes lie in manual page.

ok markus@

Revision 1.106 / (download) - annotate - [select for diffs], Fri May 17 00:13:14 2013 UTC (11 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.105: +10 -10 lines
Diff to previous 1.105 (colored)

bye, bye xfree(); ok markus@

Revision 1.105 / (download) - annotate - [select for diffs], Wed Dec 5 15:42:52 2012 UTC (11 years, 5 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.104: +2 -1 lines
Diff to previous 1.104 (colored)

prevent double-free of comment; ok djm@

Revision 1.104 / (download) - annotate - [select for diffs], Sun Dec 2 20:42:15 2012 UTC (11 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.103: +31 -7 lines
Diff to previous 1.103 (colored)

make deleting explicit keys "ssh-add -d" symmetric with adding keys -
try to delete the corresponding certificate too and respect the -k option
to allow deleting of the key only; feedback and ok markus@

Revision 1.103 / (download) - annotate - [select for diffs], Tue Oct 18 23:37:42 2011 UTC (12 years, 7 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1
Changes since 1.102: +4 -3 lines
Diff to previous 1.102 (colored)

add -k to usage(); reminded by jmc@

Revision 1.102 / (download) - annotate - [select for diffs], Tue Oct 18 05:00:48 2011 UTC (12 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.101: +17 -10 lines
Diff to previous 1.101 (colored)

new "ssh-add -k" option to load plain keys (skipping certificates);
"looks ok" markus@

Revision 1.101 / (download) - annotate - [select for diffs], Wed May 4 21:15:29 2011 UTC (13 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.100: +25 -8 lines
Diff to previous 1.100 (colored)

allow "ssh-add - < key"; feedback and ok markus@

Revision 1.100 / (download) - annotate - [select for diffs], Tue Aug 31 12:33:38 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.99: +2 -2 lines
Diff to previous 1.99 (colored)

reintroduce commit from tedu@, which I pulled out for release engineering:

  OpenSSL_add_all_algorithms is the name of the function we have a man page
  for, so use that.  ok djm

Revision 1.99 / (download) - annotate - [select for diffs], Tue Aug 31 11:54:45 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.98: +2 -1 lines
Diff to previous 1.98 (colored)

Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and
host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer
better performance than plain DH and DSA at the same equivalent symmetric
key length, as well as much shorter keys.

Only the mandatory sections of RFC5656 are implemented, specifically the
three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and
ECDSA. Point compression (optional in RFC5656 is NOT implemented).

Certificate host and user keys using the new ECDSA key types are supported.

Note that this code has not been tested for interoperability and may be
subject to change.

feedback and ok markus@

Revision 1.98 / (download) - annotate - [select for diffs], Mon Aug 16 04:06:06 2010 UTC (13 years, 9 months ago) by djm
Branch: MAIN
Changes since 1.97: +1 -1 lines
Diff to previous 1.97 (colored)

backout previous temporarily; discussed with deraadt@

Revision 1.97 / (download) - annotate - [select for diffs], Thu Aug 12 23:34:38 2010 UTC (13 years, 9 months ago) by tedu
Branch: MAIN
Changes since 1.96: +2 -2 lines
Diff to previous 1.96 (colored)

OpenSSL_add_all_algorithms is the name of the function we have a man page
for, so use that.  ok djm

Revision 1.96 / (download) - annotate - [select for diffs], Fri May 14 00:47:22 2010 UTC (14 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.95: +29 -21 lines
Diff to previous 1.95 (colored)

check that the certificate matches the corresponding private key before
grafting it on

Revision 1.95 / (download) - annotate - [select for diffs], Fri Apr 16 01:47:26 2010 UTC (14 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.94: +2 -2 lines
Diff to previous 1.94 (colored)

revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with the
following changes:

move the nonce field to the beginning of the certificate where it can
better protect against chosen-prefix attacks on the signature hash

Rename "constraints" field to "critical options"

Add a new non-critical "extensions" field

Add a serial number

The older format is still support for authentication and cert generation
(use "ssh-keygen -t v00 -s ca_key ..." to generate a v00 certificate)

ok markus@

Revision 1.94 / (download) - annotate - [select for diffs], Mon Mar 1 11:07:06 2010 UTC (14 years, 2 months ago) by otto
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.93: +2 -3 lines
Diff to previous 1.93 (colored)

zap what seems to be a left-over debug message; ok markus@

Revision 1.93 / (download) - annotate - [select for diffs], Fri Feb 26 20:29:54 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.92: +31 -3 lines
Diff to previous 1.92 (colored)

Add support for certificate key types for users and hosts.

OpenSSH certificate key types are not X.509 certificates, but a much
simpler format that encodes a public key, identity information and
some validity constraints and signs it with a CA key. CA keys are
regular SSH keys. This certificate style avoids the attack surface
of X.509 certificates and is very easy to deploy.

Certified host keys allow automatic acceptance of new host keys
when a CA certificate is marked as trusted in ~/.ssh/known_hosts.
see VERIFYING HOST KEYS in ssh(1) for details.

Certified user keys allow authentication of users when the signing
CA key is marked as trusted in authorized_keys. See "AUTHORIZED_KEYS
FILE FORMAT" in sshd(8) for details.

Certificates are minted using ssh-keygen(1), documentation is in
the "CERTIFICATES" section of that manpage.

Documentation on the format of certificates is in the file
PROTOCOL.certkeys

feedback and ok markus@

Revision 1.92 / (download) - annotate - [select for diffs], Mon Feb 8 10:50:20 2010 UTC (14 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.91: +9 -11 lines
Diff to previous 1.91 (colored)

replace our obsolete smartcard code with PKCS#11.
	ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf
ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11
provider (shared library) while ssh-agent(1) delegates PKCS#11 to
a forked a ssh-pkcs11-helper process.
PKCS#11 is currently a compile time option.
feedback and ok djm@; inspired by patches from Alon Bar-Lev

Revision 1.91 / (download) - annotate - [select for diffs], Thu Aug 27 17:44:52 2009 UTC (14 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.90: +1 -4 lines
Diff to previous 1.90 (colored)

Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
when the agent refuses the constrained add request. This was a useful
migration measure back in 2002 when constraints were new, but just
adds risk now.

bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@

Revision 1.90 / (download) - annotate - [select for diffs], Sun Sep 9 11:38:01 2007 UTC (16 years, 8 months ago) by sobrado
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4, OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.89: +2 -2 lines
Diff to previous 1.89 (colored)

sort synopsis and options in ssh-agent(1); usage is lowercase

ok jmc@

Revision 1.72.2.2 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:33 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.72.2.1: +26 -10 lines
Diff to previous 1.72.2.1 (colored) to branchpoint 1.72 (colored) next main 1.73 (colored)

upgrade to OpenSSH 4.4

Revision 1.75.2.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:51 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.75: +24 -11 lines
Diff to previous 1.75 (colored) next main 1.76 (colored)

upgrade to OpenSSH 4.4

Revision 1.89 / (download) - annotate - [select for diffs], Thu Aug 3 03:34:42 2006 UTC (17 years, 9 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.88: +3 -4 lines
Diff to previous 1.88 (colored)

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

Revision 1.88 / (download) - annotate - [select for diffs], Tue Aug 1 23:22:47 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.87: +2 -1 lines
Diff to previous 1.87 (colored)

move #include <stdio.h> out of includes.h

Revision 1.87 / (download) - annotate - [select for diffs], Wed Jul 26 13:57:17 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.86: +2 -1 lines
Diff to previous 1.86 (colored)

move #include <stdlib.h> out of includes.h

Revision 1.86 / (download) - annotate - [select for diffs], Wed Jul 26 02:35:17 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.85: +2 -1 lines
Diff to previous 1.85 (colored)

move #include <sys/param.h> out of includes.h

Revision 1.85 / (download) - annotate - [select for diffs], Sat Jul 22 20:48:23 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.84: +2 -1 lines
Diff to previous 1.84 (colored)

move #include <string.h> out of includes.h

Revision 1.84 / (download) - annotate - [select for diffs], Mon Jul 17 01:31:09 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.83: +2 -1 lines
Diff to previous 1.83 (colored)

move #include <unistd.h> out of includes.h

Revision 1.83 / (download) - annotate - [select for diffs], Sun Jul 9 15:27:59 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.82: +2 -2 lines
Diff to previous 1.82 (colored)

use O_RDONLY vs. 0 in open(); no binary change

Revision 1.82 / (download) - annotate - [select for diffs], Sun Jul 9 15:15:11 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.81: +2 -1 lines
Diff to previous 1.81 (colored)

move #include <fcntl.h> out of includes.h

Revision 1.81 / (download) - annotate - [select for diffs], Thu Jul 6 16:03:53 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.80: +3 -1 lines
Diff to previous 1.80 (colored)

move #include <pwd.h> out of includes.h; ok markus@

Revision 1.80 / (download) - annotate - [select for diffs], Tue May 30 11:46:38 2006 UTC (17 years, 11 months ago) by mk
Branch: MAIN
Changes since 1.79: +2 -2 lines
Diff to previous 1.79 (colored)

Sync usage() with man page and reality.

ok deraadt dtucker

Revision 1.79 / (download) - annotate - [select for diffs], Sat Mar 25 13:17:02 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.78: +1 -0 lines
Diff to previous 1.78 (colored)

Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
Theo nuked - our scripts to sync -portable need them in the files

Revision 1.78 / (download) - annotate - [select for diffs], Mon Mar 20 17:10:19 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.77: +0 -3 lines
Diff to previous 1.77 (colored)

in a switch (), break after return or goto is stupid

Revision 1.77 / (download) - annotate - [select for diffs], Sun Mar 19 18:51:18 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.76: +0 -1 lines
Diff to previous 1.76 (colored)

RCSID() can die

Revision 1.76 / (download) - annotate - [select for diffs], Mon Mar 13 10:26:52 2006 UTC (18 years, 2 months ago) by dtucker
Branch: MAIN
Changes since 1.75: +13 -4 lines
Diff to previous 1.75 (colored)

Make ssh-add check file permissions before attempting to load private
key files multiple times; it will fail anyway and this prevents confusing
multiple prompts and warnings.  mindrot #1138, ok djm@

Revision 1.75 / (download) - annotate - [select for diffs], Mon Feb 20 17:19:54 2006 UTC (18 years, 2 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE
Branch point for: OPENBSD_3_9
Changes since 1.74: +4 -1 lines
Diff to previous 1.74 (colored)

move #include <sys/stat.h> out of includes.h; ok markus@

Revision 1.72.2.1 / (download) - annotate - [select for diffs], Fri Feb 3 03:01:57 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.72: +6 -2 lines
Diff to previous 1.72 (colored)

upgrade to OpenSSH 4.3

Revision 1.71.2.2 / (download) - annotate - [select for diffs], Fri Feb 3 02:53:45 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.71.2.1: +6 -2 lines
Diff to previous 1.71.2.1 (colored) to branchpoint 1.71 (colored) next main 1.72 (colored)

upgrade to OpenSSH 4.3

Revision 1.74 / (download) - annotate - [select for diffs], Sat Nov 12 18:37:59 2005 UTC (18 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.73: +3 -2 lines
Diff to previous 1.73 (colored)

space

Revision 1.73 / (download) - annotate - [select for diffs], Tue Sep 13 23:40:07 2005 UTC (18 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.72: +4 -1 lines
Diff to previous 1.72 (colored)

ensure that stdio fds are attached; ok deraadt@

Revision 1.71.2.1 / (download) - annotate - [select for diffs], Sun Sep 4 18:40:08 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.71: +2 -2 lines
Diff to previous 1.71 (colored)

upgrade to OpenSSH 4.2

Revision 1.70.2.2 / (download) - annotate - [select for diffs], Fri Sep 2 03:45:00 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.70.2.1: +2 -2 lines
Diff to previous 1.70.2.1 (colored) to branchpoint 1.70 (colored) next main 1.71 (colored)

upgrade to OpenSSH 4.2

Revision 1.72 / (download) - annotate - [select for diffs], Sun Jul 17 07:17:55 2005 UTC (18 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE
Branch point for: OPENBSD_3_8
Changes since 1.71: +2 -2 lines
Diff to previous 1.71 (colored)

knf says that a 2nd level indent is four (not three or five) spaces

Revision 1.70.2.1 / (download) - annotate - [select for diffs], Sun Jun 5 02:22:39 2005 UTC (18 years, 11 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.70: +3 -3 lines
Diff to previous 1.70 (colored)

upgrade to OpenSSH 4.1

Revision 1.71 / (download) - annotate - [select for diffs], Thu Mar 10 22:01:06 2005 UTC (19 years, 2 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE
Branch point for: OPENBSD_3_7
Changes since 1.70: +3 -3 lines
Diff to previous 1.70 (colored)

spacing

Revision 1.68.2.2 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:32 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.68.2.1: +1 -2 lines
Diff to previous 1.68.2.1 (colored) to branchpoint 1.68 (colored) next main 1.69 (colored)

upgrade to OpenSSH 3.9

Revision 1.69.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:27 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.69: +1 -2 lines
Diff to previous 1.69 (colored) next main 1.70 (colored)

upgrade to OpenSSH 3.9

Revision 1.70 / (download) - annotate - [select for diffs], Sat May 8 00:21:31 2004 UTC (20 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_6
Changes since 1.69: +1 -2 lines
Diff to previous 1.69 (colored)

kill a tiny header; ok deraadt@

Revision 1.66.2.2 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:16 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.66.2.1: +4 -4 lines
Diff to previous 1.66.2.1 (colored) to branchpoint 1.66 (colored) next main 1.67 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.68.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:34 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.68: +4 -4 lines
Diff to previous 1.68 (colored)

upgrade to OpenSSH 3.8

Revision 1.69 / (download) - annotate - [select for diffs], Fri Nov 21 11:57:03 2003 UTC (20 years, 6 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_5
Changes since 1.68: +4 -4 lines
Diff to previous 1.68 (colored)

unexpand and delete whitespace at EOL; ok markus@

Revision 1.63.2.2 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:27 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.63.2.1: +4 -3 lines
Diff to previous 1.63.2.1 (colored) to branchpoint 1.63 (colored) next main 1.64 (colored)

upgrade to OpenSSH 3.7

Revision 1.66.2.1 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:43 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.66: +4 -3 lines
Diff to previous 1.66 (colored)

upgrade to OpenSSH 3.7

Revision 1.68 / (download) - annotate - [select for diffs], Mon Jun 16 10:22:45 2003 UTC (20 years, 11 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.67: +3 -2 lines
Diff to previous 1.67 (colored)

print out key comment on each prompt; make ssh-askpass more useable; ok djm@

Revision 1.67 / (download) - annotate - [select for diffs], Wed Jun 11 11:18:38 2003 UTC (20 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.66: +2 -2 lines
Diff to previous 1.66 (colored)

make agent constraints (lifetime, confirm) work with smartcard keys; ok markus@

Revision 1.53.2.3 / (download) - annotate - [select for diffs], Thu Apr 3 22:35:17 2003 UTC (21 years, 1 month ago) by miod
Branch: OPENBSD_3_1
Changes since 1.53.2.2: +20 -6 lines
Diff to previous 1.53.2.2 (colored) to branchpoint 1.53 (colored) next main 1.54 (colored)

Merge OpenSSH 3.6.1

Revision 1.63.2.1 / (download) - annotate - [select for diffs], Tue Apr 1 00:12:14 2003 UTC (21 years, 1 month ago) by margarida
Branch: OPENBSD_3_2
Changes since 1.63: +20 -6 lines
Diff to previous 1.63 (colored)

Update to OpenSSH 3.6

Revision 1.66 / (download) - annotate - [select for diffs], Wed Mar 5 22:33:43 2003 UTC (21 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE
Branch point for: OPENBSD_3_3
Changes since 1.65: +6 -3 lines
Diff to previous 1.65 (colored)

fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@

Revision 1.65 / (download) - annotate - [select for diffs], Thu Jan 23 13:50:27 2003 UTC (21 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.64: +14 -3 lines
Diff to previous 1.64 (colored)

ssh-add -c, prompt user for confirmation (using ssh-askpass) when
private agent key is used; with djm@; test by dugsong@, djm@; ok deraadt@

Revision 1.64 / (download) - annotate - [select for diffs], Thu Nov 21 23:03:51 2002 UTC (21 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.63: +2 -2 lines
Diff to previous 1.63 (colored)

KNF

Revision 1.46.2.4 / (download) - annotate - [select for diffs], Fri Oct 11 14:53:07 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.46.2.3: +3 -3 lines
Diff to previous 1.46.2.3 (colored) to branchpoint 1.46 (colored) next main 1.47 (colored)

Update to OpenSSH 3.5

Revision 1.53.2.2 / (download) - annotate - [select for diffs], Fri Oct 11 14:51:53 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_1
Changes since 1.53.2.1: +3 -3 lines
Diff to previous 1.53.2.1 (colored) to branchpoint 1.53 (colored)

Update to OpenSSH 3.5

Revision 1.63 / (download) - annotate - [select for diffs], Thu Sep 19 15:51:23 2002 UTC (21 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_2
Changes since 1.62: +2 -2 lines
Diff to previous 1.62 (colored)

typo; cd@kalkatraz.de

Revision 1.53.2.1 / (download) - annotate - [select for diffs], Wed Jun 26 15:30:39 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.53: +59 -4 lines
Diff to previous 1.53 (colored)

Pull in OpenSSH-3.4

Revision 1.62 / (download) - annotate - [select for diffs], Wed Jun 26 14:51:33 2002 UTC (21 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.61: +2 -2 lines
Diff to previous 1.61 (colored)

fix exit code for -X/-x

Revision 1.46.2.3 / (download) - annotate - [select for diffs], Sat Jun 22 07:23:17 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.46.2.2: +59 -4 lines
Diff to previous 1.46.2.2 (colored) to branchpoint 1.46 (colored)

Update OpenSSH to version 3.3 (with local changes, configuration files still
living in /etc and privsep user being nobody).

Revision 1.61 / (download) - annotate - [select for diffs], Wed Jun 19 00:27:55 2002 UTC (21 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.60: +2 -2 lines
Diff to previous 1.60 (colored)

KNF done automatically while reading....

Revision 1.60 / (download) - annotate - [select for diffs], Sat Jun 15 01:27:48 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.59: +10 -14 lines
Diff to previous 1.59 (colored)

remove the CONSTRAIN_IDENTITY messages and introduce a new
ADD_ID message with contraints instead. contraints can be
only added together with the private key.

Revision 1.59 / (download) - annotate - [select for diffs], Sat Jun 15 00:07:38 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.58: +2 -2 lines
Diff to previous 1.58 (colored)

fix stupid typo

Revision 1.58 / (download) - annotate - [select for diffs], Sat Jun 15 00:01:36 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.57: +2 -2 lines
Diff to previous 1.57 (colored)

break agent key lifetime protocol and allow other contraints for key usage.

Revision 1.57 / (download) - annotate - [select for diffs], Mon Jun 10 17:36:23 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.56: +8 -3 lines
Diff to previous 1.56 (colored)

use convtime() to parse and validate key lifetime.  can now
use '-t 2h' etc.  ok markus@ provos@

Revision 1.56 / (download) - annotate - [select for diffs], Wed Jun 5 21:55:44 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.55: +20 -2 lines
Diff to previous 1.55 (colored)

ssh-add -t life,  Set lifetime (in seconds) when adding identities; ok provos@

Revision 1.55 / (download) - annotate - [select for diffs], Wed Jun 5 20:56:39 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.54: +3 -1 lines
Diff to previous 1.54 (colored)

add -x/-X to usage

Revision 1.54 / (download) - annotate - [select for diffs], Wed Jun 5 19:57:12 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.53: +36 -2 lines
Diff to previous 1.53 (colored)

ssh-add -x for lock and -X for unlocking the agent.
todo: encrypt private keys with locked...

Revision 1.36.2.4 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:11 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.36.2.3: +18 -4 lines
Diff to previous 1.36.2.3 (colored) to branchpoint 1.36 (colored) next main 1.37 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.46.2.2 / (download) - annotate - [select for diffs], Fri May 17 00:03:24 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.46.2.1: +18 -4 lines
Diff to previous 1.46.2.1 (colored) to branchpoint 1.46 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.53 / (download) - annotate - [select for diffs], Thu Mar 21 22:44:05 2002 UTC (22 years, 2 months ago) by rees
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.52: +8 -2 lines
Diff to previous 1.52 (colored)

Add PIN-protection for secret key.

Revision 1.52 / (download) - annotate - [select for diffs], Thu Mar 21 10:21:20 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.51: +9 -1 lines
Diff to previous 1.51 (colored)

ignore errors for nonexisting default keys in ssh-add,
fixes http://bugzilla.mindrot.org/show_bug.cgi?id=158

Revision 1.51 / (download) - annotate - [select for diffs], Tue Mar 19 10:49:35 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.50: +3 -3 lines
Diff to previous 1.50 (colored)

KNF whitespace

Revision 1.36.2.3 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:45 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.36.2.2: +51 -31 lines
Diff to previous 1.36.2.2 (colored) to branchpoint 1.36 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.22.2.7 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:43 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.22.2.6: +51 -31 lines
Diff to previous 1.22.2.6 (colored) to branchpoint 1.22 (colored) next main 1.23 (colored)

Merge OpenSSH 3.1.

Revision 1.46.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:47 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.46: +51 -31 lines
Diff to previous 1.46 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.50 / (download) - annotate - [select for diffs], Tue Jan 29 14:27:57 2002 UTC (22 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.49: +9 -5 lines
Diff to previous 1.49 (colored)

exit 2 if no agent, exit 1 if list fails; debian#61078; ok djm@

Revision 1.49 / (download) - annotate - [select for diffs], Mon Dec 24 07:29:43 2001 UTC (22 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.48: +2 -2 lines
Diff to previous 1.48 (colored)

try all listed keys.. how did this get broken?

Revision 1.48 / (download) - annotate - [select for diffs], Fri Dec 21 10:06:43 2001 UTC (22 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.47: +35 -19 lines
Diff to previous 1.47 (colored)

Try all standard key files (id_rsa, id_dsa, identity) when invoked with
no arguments; ok markus@

Revision 1.47 / (download) - annotate - [select for diffs], Wed Dec 19 07:18:56 2001 UTC (22 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.46: +9 -9 lines
Diff to previous 1.46 (colored)

basic KNF done while i was looking for something else

Revision 1.36.2.2 / (download) - annotate - [select for diffs], Thu Nov 15 00:15:19 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.36.2.1: +57 -34 lines
Diff to previous 1.36.2.1 (colored) to branchpoint 1.36 (colored)

Merge OpenSSH 3.0

Revision 1.22.2.6 / (download) - annotate - [select for diffs], Thu Nov 15 00:15:00 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.22.2.5: +57 -34 lines
Diff to previous 1.22.2.5 (colored) to branchpoint 1.22 (colored)

Merge OpenSSH 3.0

Revision 1.46 / (download) - annotate - [select for diffs], Tue Oct 2 08:38:50 2001 UTC (22 years, 7 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.45: +57 -34 lines
Diff to previous 1.45 (colored)

return non-zero exit code on error; ok markus@

Revision 1.36.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:55 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.36: +82 -34 lines
Diff to previous 1.36 (colored)

Pull in OpenSSH-2.9.9

Revision 1.22.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:42 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.22.2.4: +82 -34 lines
Diff to previous 1.22.2.4 (colored) to branchpoint 1.22 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.45 / (download) - annotate - [select for diffs], Fri Aug 3 10:31:30 2001 UTC (22 years, 9 months ago) by jakob
Branch: MAIN
Changes since 1.44: +14 -7 lines
Diff to previous 1.44 (colored)

improve usage(). ok markus@

Revision 1.44 / (download) - annotate - [select for diffs], Wed Aug 1 22:03:33 2001 UTC (22 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.43: +10 -9 lines
Diff to previous 1.43 (colored)

use strings instead of ints for smartcard reader ids

Revision 1.43 / (download) - annotate - [select for diffs], Wed Jun 27 06:26:36 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.42: +40 -49 lines
Diff to previous 1.42 (colored)

convert to getopt(3)

Revision 1.42 / (download) - annotate - [select for diffs], Tue Jun 26 04:59:59 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.41: +51 -1 lines
Diff to previous 1.41 (colored)

initial support for smartcards in the agent

Revision 1.41 / (download) - annotate - [select for diffs], Mon Jun 25 08:25:40 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.40: +2 -2 lines
Diff to previous 1.40 (colored)

update copyright for 2001

Revision 1.40 / (download) - annotate - [select for diffs], Sun Jun 24 05:35:33 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.39: +2 -2 lines
Diff to previous 1.39 (colored)

switch to readpassphrase(3)
2.7/8-stable needs readpassphrase.[ch] from libc

Revision 1.39 / (download) - annotate - [select for diffs], Sat Jun 23 15:12:20 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.38: +6 -6 lines
Diff to previous 1.38 (colored)

more strict prototypes.  raise warning level in Makefile.inc.  markus ok'ed
TODO; cleanup headers

Revision 1.38 / (download) - annotate - [select for diffs], Wed Jun 6 23:19:35 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.37: +1 -2 lines
Diff to previous 1.37 (colored)

remove debug message; Darren.Moffat@eng.sun.com

Revision 1.22.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:35 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.22.2.3: +42 -101 lines
Diff to previous 1.22.2.3 (colored) to branchpoint 1.22 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.37 / (download) - annotate - [select for diffs], Wed May 2 16:41:20 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.36: +3 -3 lines
Diff to previous 1.36 (colored)

fix prompt for ssh-add.

Revision 1.36 / (download) - annotate - [select for diffs], Wed Apr 18 21:57:42 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.35: +7 -63 lines
Diff to previous 1.35 (colored)

call askpass from ssh, too, based on work by roth@feep.net, ok deraadt

Revision 1.35 / (download) - annotate - [select for diffs], Sat Apr 14 16:27:57 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.34: +2 -3 lines
Diff to previous 1.34 (colored)

use clear_pass instead of xfree()

Revision 1.34 / (download) - annotate - [select for diffs], Sat Apr 14 04:31:01 2001 UTC (23 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.33: +2 -1 lines
Diff to previous 1.33 (colored)

do not double free

Revision 1.33 / (download) - annotate - [select for diffs], Mon Apr 9 15:12:23 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.32: +21 -4 lines
Diff to previous 1.32 (colored)

passphrase caching: ssh-add tries last passphrase, clears passphrase if
not successful and after last try.
based on discussions with espie@, jakob@, ... and code from jakob@ and
wolfgang@wsrcc.com

Revision 1.32 / (download) - annotate - [select for diffs], Sun Apr 8 13:03:00 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.31: +3 -3 lines
Diff to previous 1.31 (colored)

init pointers with NULL, thanks to danimal@danimal.org

Revision 1.31 / (download) - annotate - [select for diffs], Mon Mar 26 08:07:08 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.30: +18 -38 lines
Diff to previous 1.30 (colored)

simpler key load/save interface, see authfile.h

Revision 1.22.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:29 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.22.2.2: +9 -7 lines
Diff to previous 1.22.2.2 (colored) to branchpoint 1.22 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.16.2.4 / (download) - annotate - [select for diffs], Wed Mar 21 18:53:08 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.16.2.3: +9 -7 lines
Diff to previous 1.16.2.3 (colored) to branchpoint 1.16 (colored) next main 1.17 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.30 / (download) - annotate - [select for diffs], Mon Mar 12 22:02:02 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.29: +8 -6 lines
Diff to previous 1.29 (colored)

remove old key_fingerprint interface, s/_ex//

Revision 1.16.2.3 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:15 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.16.2.2: +20 -25 lines
Diff to previous 1.16.2.2 (colored) to branchpoint 1.16 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.29 / (download) - annotate - [select for diffs], Fri Mar 2 18:54:31 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.28: +2 -2 lines
Diff to previous 1.28 (colored)

make copyright lines the same format

Revision 1.22.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:26 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.22.2.1: +0 -0 lines
Diff to previous 1.22.2.1 (colored) to branchpoint 1.22 (colored)

Pull in OpenSSH-2.5.1

Revision 1.22.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:16 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.22: +20 -25 lines
Diff to previous 1.22 (colored)

Pull in OpenSSH 2.5.0

Revision 1.28 / (download) - annotate - [select for diffs], Sun Feb 4 15:32:25 2001 UTC (23 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.27: +2 -2 lines
Diff to previous 1.27 (colored)

unexpand and remove end-of-line whitespace; ok markus@

Revision 1.27 / (download) - annotate - [select for diffs], Sun Jan 21 19:05:56 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.26: +4 -4 lines
Diff to previous 1.26 (colored)

split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.
rename util.[ch] -> misc.[ch]

Revision 1.26 / (download) - annotate - [select for diffs], Sat Jan 20 21:33:42 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.25: +3 -1 lines
Diff to previous 1.25 (colored)

do not loop forever if askpass does not exist; from andrew@pimlott.ne.mediaone.net

Revision 1.25 / (download) - annotate - [select for diffs], Fri Jan 19 15:55:11 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.24: +4 -3 lines
Diff to previous 1.24 (colored)

move ssh1 definitions to ssh1.h, pathnames to pathnames.h

Revision 1.24 / (download) - annotate - [select for diffs], Sat Jan 13 18:14:13 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.23: +2 -2 lines
Diff to previous 1.23 (colored)

typo, from stevesk@sweden.hp.com

Revision 1.23 / (download) - annotate - [select for diffs], Sun Nov 12 19:50:38 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.22: +10 -18 lines
Diff to previous 1.22 (colored)

add support for RSA to SSH2.  please test.

there are now 3 types of keys: RSA1 is used by ssh-1 only,
RSA and DSA are used by SSH2.

you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
keys for SSH2 and use the RSA keys for hostkeys or for user keys.

SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.

IdentityFile2, HostDsaKey and DSAAuthentication are obsolete.
you can use multiple IdentityFile and HostKey for all types of keys.

the option DSAAuthentication is replaced by PubkeyAuthetication.

Revision 1.16.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 21:31:19 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.16.2.1: +33 -4 lines
Diff to previous 1.16.2.1 (colored) to branchpoint 1.16 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.22 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:54 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.21: +27 -2 lines
Diff to previous 1.21 (colored)

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.21 / (download) - annotate - [select for diffs], Tue Sep 5 19:18:48 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.20: +7 -3 lines
Diff to previous 1.20 (colored)

enable ssh-add -d for DSA keys

Revision 1.16.2.1 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:23 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.16: +54 -44 lines
Diff to previous 1.16 (colored)

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.20 / (download) - annotate - [select for diffs], Mon Aug 28 03:50:54 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.19: +3 -2 lines
Diff to previous 1.19 (colored)

print uid/gid as unsigned

Revision 1.19 / (download) - annotate - [select for diffs], Sat Aug 19 21:34:43 2000 UTC (23 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.18: +42 -39 lines
Diff to previous 1.18 (colored)

add SSH2/DSA support to the agent and some other DSA related cleanups.
(note that we cannot talk to ssh.com's ssh2 agents)

Revision 1.18 / (download) - annotate - [select for diffs], Sun Jul 16 08:27:21 2000 UTC (23 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.17: +12 -6 lines
Diff to previous 1.17 (colored)

make ssh-add accept dsa keys (the agent does not)

Revision 1.17 / (download) - annotate - [select for diffs], Tue Jun 20 01:39:44 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.16: +1 -1 lines
Diff to previous 1.16 (colored)

OpenBSD tag

Revision 1.16 / (download) - annotate - [select for diffs], Wed Apr 26 20:56:29 2000 UTC (24 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.15: +21 -16 lines
Diff to previous 1.15 (colored)

add DSA pubkey auth and other SSH2 fixes.  use ssh-keygen -[xX]
for trading keys with the real and the original SSH, directly from the
people who invented the SSH protocol.

Revision 1.15 / (download) - annotate - [select for diffs], Thu Dec 2 20:05:40 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.14: +7 -3 lines
Diff to previous 1.14 (colored)

document $SSH_ASKPASS, reasonable default

Revision 1.14 / (download) - annotate - [select for diffs], Wed Nov 24 16:13:45 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.13: +56 -6 lines
Diff to previous 1.13 (colored)

SSH_ASKPASS support

Revision 1.13 / (download) - annotate - [select for diffs], Wed Nov 24 00:26:03 1999 UTC (24 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.12: +7 -14 lines
Diff to previous 1.12 (colored)

much more KNF

Revision 1.12 / (download) - annotate - [select for diffs], Tue Nov 23 22:25:55 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.11: +160 -171 lines
Diff to previous 1.11 (colored)

KNF part 1

Revision 1.11 / (download) - annotate - [select for diffs], Tue Nov 16 22:49:28 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.10: +24 -18 lines
Diff to previous 1.10 (colored)

rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>

Revision 1.10 / (download) - annotate - [select for diffs], Mon Nov 15 20:53:24 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.9: +18 -19 lines
Diff to previous 1.9 (colored)

the keysize of rsa-parameter 'n' is passed implizit,
a few more checks and warnings about 'pretended' keysizes.

Revision 1.9 / (download) - annotate - [select for diffs], Sun Nov 14 17:53:48 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.8: +25 -35 lines
Diff to previous 1.8 (colored)

change passphrase loop logic and remove ref to $DISPLAY, ok niels

Revision 1.8 / (download) - annotate - [select for diffs], Tue Nov 2 19:42:36 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.7: +13 -7 lines
Diff to previous 1.7 (colored)

replace assert() with error, fatal or packet_disconnect

Revision 1.7 / (download) - annotate - [select for diffs], Wed Oct 27 23:35:32 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.6: +26 -62 lines
Diff to previous 1.6 (colored)

connect to agent before accepting input. ok niklas@

Revision 1.6 / (download) - annotate - [select for diffs], Sun Oct 17 20:39:11 1999 UTC (24 years, 7 months ago) by dugsong
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.5: +1 -4 lines
Diff to previous 1.5 (colored)

-Wall, get rid of unused headers/vars

Revision 1.5 / (download) - annotate - [select for diffs], Mon Oct 11 20:24:54 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.4: +1 -14 lines
Diff to previous 1.4 (colored)

we do not ship ssh-askpass

Revision 1.4 / (download) - annotate - [select for diffs], Wed Sep 29 21:14:16 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.3: +4 -3 lines
Diff to previous 1.3 (colored)

numerous sprintf, strncpy, strcpy cleanups

Revision 1.3 / (download) - annotate - [select for diffs], Wed Sep 29 06:15:00 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +11 -1 lines
Diff to previous 1.2 (colored)

test for RSA in the ssl library, real early on

Revision 1.2 / (download) - annotate - [select for diffs], Tue Sep 28 04:45:37 1999 UTC (24 years, 7 months ago) by provos
Branch: MAIN
Changes since 1.1: +42 -30 lines
Diff to previous 1.1 (colored)

convert all uses of gmp to SSL bignum
convert all used of rsa to SSL rsa functions
remove all use of randomstate to OpenBSD arc4random() and arc4_stir()
all this done at a long long night in Canada.

Revision 1.1 / (download) - annotate - [select for diffs], Sun Sep 26 20:53:37 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN

i bet a lot of people didn't know what ssh 1.2.16 had a nice license.
well, except for the patent issues.  someone in sweden (forget their
name at the moment) cleaned out most of the patented code, and now
this code removes rsa code.  when this is done, it will link against
libssl, but the work isn't completely done yet.  then we need to bring
this up to modern days, featurewise.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.