CVS log for src/usr.bin/ssh/ssh.1

Request diff between arbitrary revisions

Default branch: MAIN

Revision 1.439 / (download) - annotate - [select for diffs], Thu Mar 14 06:23:14 2024 UTC (2 months ago) by job
Branch: MAIN
CVS Tags: HEAD
Changes since 1.438: +3 -2 lines
Diff to previous 1.438 (colored)

Clarify how literal IPv6 addresses can be used in -J mode

OK djm@

Revision 1.438 / (download) - annotate - [select for diffs], Wed Oct 11 23:14:33 2023 UTC (7 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5
Changes since 1.437: +4 -3 lines
Diff to previous 1.437 (colored)

ssh -Q does not make sense with other command-line options, so give
it its own line in the manpage

Revision 1.437 / (download) - annotate - [select for diffs], Sun Jul 23 20:04:45 2023 UTC (9 months, 3 weeks ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_7_4_BASE, OPENBSD_7_4
Changes since 1.436: +2 -2 lines
Diff to previous 1.436 (colored)

man page typos; ok jmc@

Revision 1.436 / (download) - annotate - [select for diffs], Mon Jul 17 05:38:10 2023 UTC (10 months ago) by jmc
Branch: MAIN
Changes since 1.435: +3 -3 lines
Diff to previous 1.435 (colored)

-P before -p in SYNOPSIS;

Revision 1.435 / (download) - annotate - [select for diffs], Mon Jul 17 04:08:31 2023 UTC (10 months ago) by djm
Branch: MAIN
Changes since 1.434: +13 -2 lines
Diff to previous 1.434 (colored)

Add support for configuration tags to ssh(1).

This adds a ssh_config(5) "Tag" directive and corresponding
"Match tag" predicate that may be used to select blocks of
configuration similar to the pf.conf(5) keywords of the same
name.

ok markus

Revision 1.434 / (download) - annotate - [select for diffs], Wed Jun 21 05:08:32 2023 UTC (10 months, 3 weeks ago) by djm
Branch: MAIN
Changes since 1.433: +4 -2 lines
Diff to previous 1.433 (colored)

make `ssh -Q CASignatureAlgorithms` only list signature algorithms that
are valid for CA signing. Previous behaviour was to list all signing
algorithms, including certificate algorithms (OpenSSH certificates do
not support CA chains). part of bz3577; ok dtucker@

Revision 1.433 / (download) - annotate - [select for diffs], Mon Nov 28 01:37:36 2022 UTC (17 months, 2 weeks ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE, OPENBSD_7_3
Changes since 1.432: +3 -2 lines
Diff to previous 1.432 (colored)

New EnableEscapeCommandline ssh_config(5) option

This option (default "no") controls whether the ~C escape is available.
Turning it off by default means we will soon be able to use a stricter
default pledge(2) in the client.

feedback deraadt@ dtucker@; tested in snaps for a while

Revision 1.432 / (download) - annotate - [select for diffs], Sat Sep 17 10:33:18 2022 UTC (19 months, 4 weeks ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2
Changes since 1.431: +3 -2 lines
Diff to previous 1.431 (colored)

add a RequiredRSASize for checking RSA key length in ssh(1).
User authentication keys that fall beneath this limit will be
ignored. If a host presents a host key beneath this limit then
the connection will be terminated (unfortunately there are no
fallbacks in the protocol for host authentication).

feedback deraadt, Dmitry Belyavskiy; ok markus@

Revision 1.431 / (download) - annotate - [select for diffs], Sat May 28 05:57:56 2022 UTC (23 months, 2 weeks ago) by jmc
Branch: MAIN
Changes since 1.430: +7 -4 lines
Diff to previous 1.430 (colored)

keywords ref ssh_config.5;
from caspar schutijser

Revision 1.430 / (download) - annotate - [select for diffs], Thu Mar 31 17:27:27 2022 UTC (2 years, 1 month ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE, OPENBSD_7_1
Changes since 1.429: +5 -5 lines
Diff to previous 1.429 (colored)

man pages: add missing commas between subordinate and main clauses

jmc@ dislikes a comma before "then" in a conditional, so leave those
untouched.

ok jmc@

Revision 1.429 / (download) - annotate - [select for diffs], Sun Feb 6 00:29:03 2022 UTC (2 years, 3 months ago) by jsg
Branch: MAIN
Changes since 1.428: +3 -3 lines
Diff to previous 1.428 (colored)

remove please from manual pages
ok jmc@ sthen@ millert@

Revision 1.428 / (download) - annotate - [select for diffs], Fri Feb 4 02:49:17 2022 UTC (2 years, 3 months ago) by dtucker
Branch: MAIN
Changes since 1.427: +4 -4 lines
Diff to previous 1.427 (colored)

Since they are deprecated, move DSA to the end of the default list of
public keys so that they will be tried last.  From github PR#295 from
"ProBackup-nl", ok djm@

Revision 1.427 / (download) - annotate - [select for diffs], Fri Sep 10 10:26:02 2021 UTC (2 years, 8 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0
Changes since 1.426: +9 -4 lines
Diff to previous 1.426 (colored)

Document behaviour of arguments following non-interactive commands.
Prompted by github PR#139 from EvanTheB, feedback & ok djm@ jmc@

Revision 1.426 / (download) - annotate - [select for diffs], Fri Sep 3 07:27:03 2021 UTC (2 years, 8 months ago) by dtucker
Branch: MAIN
Changes since 1.425: +6 -2 lines
Diff to previous 1.425 (colored)

Mention using ssh -i for specifying the public key file in the case
where the private key is loaded into ssh-agent but is not present
locally.  Based on patch from rafork via github PR#215, ok jmc@

Revision 1.425 / (download) - annotate - [select for diffs], Wed Jul 28 05:57:42 2021 UTC (2 years, 9 months ago) by jmc
Branch: MAIN
Changes since 1.424: +2 -5 lines
Diff to previous 1.424 (colored)

no need to talk about version 2 with the -Q option, so rewrite the
text to read better;

issue reported by debian at helgefjell de
ok djm dtucker

Revision 1.424 / (download) - annotate - [select for diffs], Fri Jul 23 04:04:52 2021 UTC (2 years, 9 months ago) by djm
Branch: MAIN
Changes since 1.423: +8 -2 lines
Diff to previous 1.423 (colored)

Add a ForkAfterAuthentication ssh_config(5) counterpart to the
ssh(1) -f flag. Last part of GHPR231 from Volker Diels-Grabsch.
ok dtucker

Revision 1.423 / (download) - annotate - [select for diffs], Fri Jul 23 04:00:59 2021 UTC (2 years, 9 months ago) by djm
Branch: MAIN
Changes since 1.422: +8 -2 lines
Diff to previous 1.422 (colored)

Add a StdinNull directive to ssh_config(5) that allows the config
file to do the same thing as -n does on the ssh(1) commandline.
Patch from Volker Diels-Grabsch via GHPR231; ok dtucker

Revision 1.422 / (download) - annotate - [select for diffs], Tue Jul 13 23:48:36 2021 UTC (2 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.421: +13 -2 lines
Diff to previous 1.421 (colored)

add a SessionType directive to ssh_config, allowing the configuration
file to offer equivalent control to the -N (no session) and -s
(subsystem) command-line flags.

Part of GHPR#231 by Volker Diels-Grabsch with some minor tweaks;
feedback and ok dtucker@

Revision 1.421 / (download) - annotate - [select for diffs], Fri Jul 2 05:11:21 2021 UTC (2 years, 10 months ago) by dtucker
Branch: MAIN
Changes since 1.420: +6 -7 lines
Diff to previous 1.420 (colored)

Remove references to ChallengeResponseAuthentication in favour of
KbdInteractiveAuthentication.  The former is what was in SSHv1, the
latter is what is in SSHv2 (RFC4256) and they were treated as somewhat
but not entirely equivalent.  We retain the old name as deprecated alias
so config files continue to work and a reference in the man page for
people looking for it.

Prompted by bz#3303 which pointed out the discrepancy between the two
when used with Match.  Man page help & ok jmc@, with & ok djm@

Revision 1.420 / (download) - annotate - [select for diffs], Fri Jun 25 06:20:39 2021 UTC (2 years, 10 months ago) by dtucker
Branch: MAIN
Changes since 1.419: +5 -5 lines
Diff to previous 1.419 (colored)

Use better language to refer to the user.  From l1ving via github
PR#250, ok jmc@

Revision 1.419 / (download) - annotate - [select for diffs], Mon Feb 15 20:43:15 2021 UTC (3 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.418: +2 -1 lines
Diff to previous 1.418 (colored)

ssh: add PermitRemoteOpen for remote dynamic forwarding with SOCKS
ok djm@, dtucker@

Revision 1.418 / (download) - annotate - [select for diffs], Tue Jan 26 15:40:17 2021 UTC (3 years, 3 months ago) by naddy
Branch: MAIN
Changes since 1.417: +3 -3 lines
Diff to previous 1.417 (colored)

move HostbasedAcceptedAlgorithms to the right place in alphabetical order

Revision 1.417 / (download) - annotate - [select for diffs], Tue Jan 26 05:32:21 2021 UTC (3 years, 3 months ago) by dtucker
Branch: MAIN
Changes since 1.416: +3 -3 lines
Diff to previous 1.416 (colored)

Rename HostbasedKeyTypes (ssh) and HostbasedAcceptedKeyTypes (sshd) to
HostbasedAcceptedAlgorithms, which more accurately reflects its effect.
This matches a previous change to PubkeyAcceptedAlgorithms.  The previous
names are retained as aliases.  ok djm@

Revision 1.416 / (download) - annotate - [select for diffs], Fri Jan 22 02:46:40 2021 UTC (3 years, 3 months ago) by dtucker
Branch: MAIN
Changes since 1.415: +3 -3 lines
Diff to previous 1.415 (colored)

PubkeyAcceptedKeyTypes->PubkeyAcceptedAlgorithms here too.

Revision 1.415 / (download) - annotate - [select for diffs], Tue Dec 22 00:15:23 2020 UTC (3 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.414: +3 -2 lines
Diff to previous 1.414 (colored)

add a ssh_config KnownHostsCommand that allows the client to obtain
known_hosts data from a command in addition to the usual files.

The command accepts bunch of %-expansions, including details of the
connection and the offered server host key. Note that the command may
be invoked up to three times per connection (see the manpage for
details).

ok markus@

Revision 1.414 / (download) - annotate - [select for diffs], Wed Jul 15 05:40:05 2020 UTC (3 years, 10 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.413: +3 -3 lines
Diff to previous 1.413 (colored)

start sentence with capital letter;

Revision 1.413 / (download) - annotate - [select for diffs], Tue Jul 14 23:57:01 2020 UTC (3 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.412: +21 -2 lines
Diff to previous 1.412 (colored)

allow some additional control over the use of ssh-askpass
via $SSH_ASKPASS_REQUIRE, including force-enable/disable.
bz#69 ok markus@

Revision 1.412 / (download) - annotate - [select for diffs], Fri Apr 17 03:34:42 2020 UTC (4 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.411: +3 -3 lines
Diff to previous 1.411 (colored)

mention that /etc/hosts.equiv and /etc/shosts.equiv are not
considered for HostbasedAuthentication when the target user is
root; bz3148

Revision 1.411 / (download) - annotate - [select for diffs], Sun Feb 16 21:15:43 2020 UTC (4 years, 3 months ago) by naddy
Branch: MAIN
Changes since 1.410: +5 -2 lines
Diff to previous 1.410 (colored)

document -F none; with jmc@

Revision 1.410 / (download) - annotate - [select for diffs], Fri Feb 7 03:54:44 2020 UTC (4 years, 3 months ago) by dtucker
Branch: MAIN
Changes since 1.409: +10 -2 lines
Diff to previous 1.409 (colored)

Add ssh -Q key-sig for all key and signature types.  Teach ssh -Q to accept
ssh_config(5) and sshd_config(5) algorithm keywords as an alias for the
corresponding query.  Man page help jmc@, ok djm@.

Revision 1.409 / (download) - annotate - [select for diffs], Sat Dec 21 20:22:34 2019 UTC (4 years, 4 months ago) by naddy
Branch: MAIN
Changes since 1.408: +6 -6 lines
Diff to previous 1.408 (colored)

Replace the term "security key" with "(FIDO) authenticator".

The polysemous use of "key" was too confusing.  Input from markus@.
ok jmc@

Revision 1.408 / (download) - annotate - [select for diffs], Sat Nov 30 07:07:59 2019 UTC (4 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.407: +3 -3 lines
Diff to previous 1.407 (colored)

tweak the Nd lines for a bit of consistency;
ok markus

Revision 1.407 / (download) - annotate - [select for diffs], Thu Nov 28 12:24:31 2019 UTC (4 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.406: +7 -3 lines
Diff to previous 1.406 (colored)

improve the text for -A a little;
input from naddy and djm

Revision 1.406 / (download) - annotate - [select for diffs], Mon Nov 18 23:16:49 2019 UTC (4 years, 5 months ago) by naddy
Branch: MAIN
Changes since 1.405: +10 -3 lines
Diff to previous 1.405 (colored)

more missing mentions of ed25519-sk; ok djm@

Revision 1.405 / (download) - annotate - [select for diffs], Thu Nov 14 21:27:30 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.404: +2 -8 lines
Diff to previous 1.404 (colored)

directly support U2F/FIDO2 security keys in OpenSSH by linking
against the (previously external) USB HID middleware. The dlopen()
capability still exists for alternate middlewares, e.g. for
Bluetooth, NFC and test/debugging.

Revision 1.404 / (download) - annotate - [select for diffs], Thu Nov 7 08:38:38 2019 UTC (4 years, 6 months ago) by naddy
Branch: MAIN
Changes since 1.403: +15 -2 lines
Diff to previous 1.403 (colored)

Fill in missing man page bits for U2F security key support:

Mention the new key types, the ~/.ssh/id_ecdsa_sk file, ssh's
SecurityKeyProvider keyword, the SSH_SK_PROVIDER environment variable,
and ssh-keygen's new -w and -x options.

Copy the ssh-sk-helper man page from ssh-pkcs11-helper with minimal
substitutions.

ok djm@

Revision 1.403 / (download) - annotate - [select for diffs], Wed Jun 12 11:31:50 2019 UTC (4 years, 11 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.402: +3 -3 lines
Diff to previous 1.402 (colored)

Hostname->HostName cleanup; from lauri tirkkonen
ok dtucker

Revision 1.402 / (download) - annotate - [select for diffs], Sat Mar 16 19:14:21 2019 UTC (5 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.401: +18 -32 lines
Diff to previous 1.401 (colored)

benno helped me clean up the tcp forwarding section;

Revision 1.401 / (download) - annotate - [select for diffs], Tue Mar 5 16:17:12 2019 UTC (5 years, 2 months ago) by naddy
Branch: MAIN
Changes since 1.400: +4 -4 lines
Diff to previous 1.400 (colored)

PKCS#11 support is no longer limited to RSA; ok benno@ kn@

Revision 1.400 / (download) - annotate - [select for diffs], Tue Jan 22 11:51:25 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.399: +7 -2 lines
Diff to previous 1.399 (colored)

Mention that configuration for the destination host is not applied
to any ProxyJump/-J hosts. This has confused a few people...

Revision 1.399 / (download) - annotate - [select for diffs], Thu Sep 20 06:58:48 2018 UTC (5 years, 7 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.398: +3 -2 lines
Diff to previous 1.398 (colored)

reorder CASignatureAlgorithms, and add them to the various -o lists;
ok djm

Revision 1.398 / (download) - annotate - [select for diffs], Wed Sep 12 01:30:10 2018 UTC (5 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.397: +10 -4 lines
Diff to previous 1.397 (colored)

Add "ssh -Q sig" to allow listing supported signature algorithms
ok markus@

Revision 1.397 / (download) - annotate - [select for diffs], Fri Sep 7 01:42:54 2018 UTC (5 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.396: +6 -3 lines
Diff to previous 1.396 (colored)

ssh -MM requires confirmation for all operations that change the
multiplexing state, not just new sessions.

mention that confirmation is checked via ssh-askpass

Revision 1.396 / (download) - annotate - [select for diffs], Thu Jul 19 10:28:47 2018 UTC (5 years, 9 months ago) by dtucker
Branch: MAIN
Changes since 1.395: +1 -2 lines
Diff to previous 1.395 (colored)

Deprecate UsePrivilegedPort now that support for running ssh(1)
setuid has been removed, remove supporting code and clean up
references to it in the man pages

We have not shipped ssh(1) the setuid bit since 2002.  If ayone
really needs to make connections from a low port number this can
be implemented via a small setuid ProxyCommand.

ok markus@ jmc@ djm@

Revision 1.395 / (download) - annotate - [select for diffs], Sat Jun 9 06:36:31 2018 UTC (5 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.394: +3 -3 lines
Diff to previous 1.394 (colored)

sort previous;

Revision 1.394 / (download) - annotate - [select for diffs], Sat Jun 9 03:01:12 2018 UTC (5 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.393: +3 -2 lines
Diff to previous 1.393 (colored)

add a SetEnv directive to ssh_config that allows setting environment
variables for the remote session (subject to the server accepting them)

refactor SendEnv to remove the arbitrary limit of variable names.

ok markus@

Revision 1.393 / (download) - annotate - [select for diffs], Fri May 11 04:01:11 2018 UTC (6 years ago) by djm
Branch: MAIN
Changes since 1.392: +8 -3 lines
Diff to previous 1.392 (colored)

Emphasise that -w implicitly sets Tunnel=point-to-point and that users
should specify an explicit Tunnel directive if they don't want this.
bz#2365.

Revision 1.392 / (download) - annotate - [select for diffs], Fri Apr 6 03:34:27 2018 UTC (6 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.391: +1 -2 lines
Diff to previous 1.391 (colored)

ssh does not accept -oInclude=... on the commandline, the Include keyword
is for configuration files only. bz#2840, patch from Jakub Jelen

Revision 1.391 / (download) - annotate - [select for diffs], Fri Feb 23 07:38:09 2018 UTC (6 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.390: +4 -4 lines
Diff to previous 1.390 (colored)

some cleanup for BindInterface and ssh-keyscan;

Revision 1.390 / (download) - annotate - [select for diffs], Fri Feb 23 02:34:33 2018 UTC (6 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.389: +9 -2 lines
Diff to previous 1.389 (colored)

Add BindInterface ssh_config directive and -B command-line argument
to ssh(1) that directs it to bind its outgoing connection to the
address of the specified network interface.

BindInterface prefers to use addresses that aren't loopback or link-
local, but will fall back to those if no other addresses of the
required family are available on that interface.

Based on patch by Mike Manning in bz#2820, ok dtucker@

Revision 1.389 / (download) - annotate - [select for diffs], Fri Nov 3 02:29:17 2017 UTC (6 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.388: +3 -3 lines
Diff to previous 1.388 (colored)

Private keys in PEM format have been encrypted by AES-128 for a while
(not 3DES). bz#2788 reported by Calum Mackay

Revision 1.388 / (download) - annotate - [select for diffs], Wed Oct 25 06:19:46 2017 UTC (6 years, 6 months ago) by jmc
Branch: MAIN
Changes since 1.387: +10 -15 lines
Diff to previous 1.387 (colored)

tweak the uri text, specifically removing some markup to make it a
bit more readable;

issue reported by - and diff ok - millert

Revision 1.387 / (download) - annotate - [select for diffs], Mon Oct 23 05:08:00 2017 UTC (6 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.386: +7 -2 lines
Diff to previous 1.386 (colored)

Expose devices allocated for tun/tap forwarding.

At the client, the device may be obtained from a new %T expansion
for LocalCommand.

At the server, the allocated devices will be listed in a
SSH_TUNNEL variable exposed to the environment of any user sessions
started after the tunnel forwarding was established.

ok markus

Revision 1.386 / (download) - annotate - [select for diffs], Sat Oct 21 23:06:24 2017 UTC (6 years, 6 months ago) by millert
Branch: MAIN
Changes since 1.385: +19 -17 lines
Diff to previous 1.385 (colored)

Add URI support to ssh, sftp and scp.  For example ssh://user@host
or sftp://user@host/path.  The connection parameters described in
draft-ietf-secsh-scp-sftp-ssh-uri-04 are not implemented since the
ssh fingerprint format in the draft uses md5 with no way to specify
the hash function type.  OK djm@

Revision 1.385 / (download) - annotate - [select for diffs], Fri Oct 13 06:45:18 2017 UTC (6 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.384: +8 -2 lines
Diff to previous 1.384 (colored)

mention SSH_USER_AUTH in the list of environment variables

Revision 1.384 / (download) - annotate - [select for diffs], Thu Sep 21 19:16:53 2017 UTC (6 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.383: +15 -6 lines
Diff to previous 1.383 (colored)

Add 'reverse' dynamic forwarding which combines dynamic forwarding
(-D) with remote forwarding (-R) where the remote-forwarded port
expects SOCKS-requests.

The SSH server code is unchanged and the parsing happens at the SSH
clients side. Thus the full SOCKS-request is sent over the forwarded
channel and the client parses c->output. Parsing happens in
channel_before_prepare_select(), _before_ the select bitmask is
computed in the pre[] handlers, but after network input processing
in the post[] handlers.

help and ok djm@

Revision 1.383 / (download) - annotate - [select for diffs], Fri Jun 9 06:43:01 2017 UTC (6 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.382: +13 -2 lines
Diff to previous 1.382 (colored)

in description of public key authentication, mention that the server
will send debug messages to the client for some error conditions
after authentication has completed. bz#2709 ok dtucker

Revision 1.382 / (download) - annotate - [select for diffs], Tue May 30 18:58:37 2017 UTC (6 years, 11 months ago) by bluhm
Branch: MAIN
Changes since 1.381: +3 -2 lines
Diff to previous 1.381 (colored)

Add RemoteCommand option to specify a command in the ssh config
file instead of giving it on the client's command line.  This command
will be executed on the remote host.  The feature allows to automate
tasks using ssh config.
OK markus@

Revision 1.381 / (download) - annotate - [select for diffs], Fri May 5 10:41:58 2017 UTC (7 years ago) by naddy
Branch: MAIN
Changes since 1.380: +2 -3 lines
Diff to previous 1.380 (colored)

remove superfluous protocol 2 mentions; ok jmc@

Revision 1.380 / (download) - annotate - [select for diffs], Wed May 3 21:49:18 2017 UTC (7 years ago) by naddy
Branch: MAIN
Changes since 1.379: +3 -2 lines
Diff to previous 1.379 (colored)

restore mistakenly deleted description of the ConnectionAttempts option
ok markus@

Revision 1.379 / (download) - annotate - [select for diffs], Wed May 3 06:32:02 2017 UTC (7 years ago) by jmc
Branch: MAIN
Changes since 1.378: +2 -4 lines
Diff to previous 1.378 (colored)

more protocol 1 stuff to go; ok djm

Revision 1.378 / (download) - annotate - [select for diffs], Tue May 2 13:44:51 2017 UTC (7 years ago) by jmc
Branch: MAIN
Changes since 1.377: +2 -4 lines
Diff to previous 1.377 (colored)

remove now obsolete protocol1 options from the -o lists;

Revision 1.377 / (download) - annotate - [select for diffs], Sun Apr 30 23:18:22 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.376: +5 -52 lines
Diff to previous 1.376 (colored)

remove SSHv1 configuration options and man pages bits

ok markus@

Revision 1.376 / (download) - annotate - [select for diffs], Sat Jul 16 06:57:55 2016 UTC (7 years, 10 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1, OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.375: +9 -9 lines
Diff to previous 1.375 (colored)

- add proxyjump to the options list
- formatting fixes
- update usage()

ok djm

Revision 1.375 / (download) - annotate - [select for diffs], Fri Jul 15 00:24:30 2016 UTC (7 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.374: +22 -2 lines
Diff to previous 1.374 (colored)

Add a ProxyJump ssh_config(5) option and corresponding -J ssh(1)
command-line flag to allow simplified indirection through a
SSH bastion or "jump host".

These options construct a proxy command that connects to the
specified jump host(s) (more than one may be specified) and uses
port-forwarding to establish a connection to the next destination.

This codifies the safest way of indirecting connections through SSH
servers and makes it easy to use.

ok markus@

Revision 1.374 / (download) - annotate - [select for diffs], Wed Jun 29 17:14:28 2016 UTC (7 years, 10 months ago) by jmc
Branch: MAIN
Changes since 1.373: +2 -2 lines
Diff to previous 1.373 (colored)

sort the -o list;

Revision 1.373 / (download) - annotate - [select for diffs], Fri Jun 3 06:44:12 2016 UTC (7 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.372: +4 -4 lines
Diff to previous 1.372 (colored)

tweak previous;

Revision 1.372 / (download) - annotate - [select for diffs], Fri Jun 3 04:09:39 2016 UTC (7 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.371: +6 -3 lines
Diff to previous 1.371 (colored)

Allow ExitOnForwardFailure and ClearAllForwardings to be overridden when
using ssh -W (but still default to yes in that case).  bz#2577, ok djm@.

Revision 1.371 / (download) - annotate - [select for diffs], Wed May 4 12:21:53 2016 UTC (8 years ago) by markus
Branch: MAIN
Changes since 1.370: +3 -2 lines
Diff to previous 1.370 (colored)

IdentityAgent for specifying specific agent sockets; ok djm@

Revision 1.370 / (download) - annotate - [select for diffs], Fri Apr 15 00:30:19 2016 UTC (8 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.369: +3 -2 lines
Diff to previous 1.369 (colored)

Include directive for ssh_config(5); feedback & ok markus@

Revision 1.369 / (download) - annotate - [select for diffs], Wed Feb 17 07:38:19 2016 UTC (8 years, 3 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.368: +23 -41 lines
Diff to previous 1.368 (colored)

since these pages now clearly tell folks to avoid v1, normalise
the docs from a v2 perspective (i.e. stop pointing out which bits
are v2 only);

ok/tweaks djm ok markus

Revision 1.368 / (download) - annotate - [select for diffs], Tue Feb 16 07:47:54 2016 UTC (8 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.367: +2 -3 lines
Diff to previous 1.367 (colored)

no need to state that protocol 2 is the default twice;

Revision 1.367 / (download) - annotate - [select for diffs], Tue Feb 16 05:11:04 2016 UTC (8 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.366: +5 -11 lines
Diff to previous 1.366 (colored)

Replace list of ciphers and MACs adjacent to -1/-2 flag descriptions in
ssh(1) with a strong recommendation not to use protocol 1. Add a similar
warning to the Protocol option descriptions in ssh_config(5) and
sshd_config(5);

prompted by and ok mmcc@

Revision 1.366 / (download) - annotate - [select for diffs], Sun Nov 15 22:26:49 2015 UTC (8 years, 6 months ago) by jcs
Branch: MAIN
Changes since 1.365: +7 -2 lines
Diff to previous 1.365 (colored)

Add an AddKeysToAgent client option which can be set to 'yes', 'no',
'ask', or 'confirm', and defaults to 'no'.  When enabled, a private
key that is used during authentication will be added to ssh-agent if
it is running (with confirmation enabled if set to 'confirm').

Initial version from Joachim Schipper many years ago.

ok markus@

Revision 1.365 / (download) - annotate - [select for diffs], Fri Nov 6 00:31:41 2015 UTC (8 years, 6 months ago) by mmcc
Branch: MAIN
Changes since 1.364: +4 -5 lines
Diff to previous 1.364 (colored)

1. rlogin and rsh are long gone
2. protocol version isn't of core relevance here, and v1 is going away

ok markus@, deraadt@

Revision 1.364 / (download) - annotate - [select for diffs], Fri Sep 25 18:19:54 2015 UTC (8 years, 7 months ago) by jmc
Branch: MAIN
Changes since 1.363: +3 -3 lines
Diff to previous 1.363 (colored)

some certificatefile tweaks; ok djm

Revision 1.363 / (download) - annotate - [select for diffs], Thu Sep 24 06:15:11 2015 UTC (8 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.362: +6 -2 lines
Diff to previous 1.362 (colored)

add ssh_config CertificateFile option to explicitly list
a certificate; patch from Meghana Bhat on bz#2436; ok markus@

Revision 1.362 / (download) - annotate - [select for diffs], Fri Sep 11 03:42:32 2015 UTC (8 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.361: +8 -4 lines
Diff to previous 1.361 (colored)

mention -Q key-plain and -Q key-cert;
bz#2455 pointed out by Jakub Jelen

Revision 1.361 / (download) - annotate - [select for diffs], Mon Jul 20 18:44:12 2015 UTC (8 years, 9 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.360: +3 -3 lines
Diff to previous 1.360 (colored)

Move .Pp before .Bl, not after to quiet mandoc -Tlint.
Noticed by jmc@

Revision 1.360 / (download) - annotate - [select for diffs], Mon Jul 20 15:39:52 2015 UTC (8 years, 9 months ago) by millert
Branch: MAIN
Changes since 1.359: +107 -21 lines
Diff to previous 1.359 (colored)

Better desciption of Unix domain socket forwarding.
bz#2423; ok jmc@

Revision 1.359 / (download) - annotate - [select for diffs], Fri Jul 10 06:21:53 2015 UTC (8 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.358: +3 -2 lines
Diff to previous 1.358 (colored)

Turn off DSA by default; add HostKeyAlgorithms to the server and
PubkeyAcceptedKeyTypes to the client side, so it still can be
tested or turned back on; feedback and ok djm@

Revision 1.358 / (download) - annotate - [select for diffs], Fri May 22 05:28:45 2015 UTC (8 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.357: +7 -2 lines
Diff to previous 1.357 (colored)

mention ssh-keygen -E for comparing legacy MD5 fingerprints; bz#2332

Revision 1.357 / (download) - annotate - [select for diffs], Wed May 6 05:45:17 2015 UTC (9 years ago) by dtucker
Branch: MAIN
Changes since 1.356: +19 -8 lines
Diff to previous 1.356 (colored)

Clarify pseudo-terminal request behaviour and use "pseudo-terminal"
consistently.  bz#1716, ok jmc@ "I like it" deraadt@.

Revision 1.356 / (download) - annotate - [select for diffs], Tue Mar 3 06:48:58 2015 UTC (9 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.355: +7 -5 lines
Diff to previous 1.355 (colored)

Allow "ssh -Q protocol-version" to list supported SSH protocol
versions. Useful for detecting builds without SSH v.1 support;
idea and ok markus@

Revision 1.355 / (download) - annotate - [select for diffs], Fri Jan 30 11:43:14 2015 UTC (9 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.354: +3 -2 lines
Diff to previous 1.354 (colored)

Add a ssh_config HostbasedKeyType option to control which
host public key types are tried during hostbased authentication.

This may be used to prevent too many keys being sent to the server,
and blowing past its MaxAuthTries limit.

bz#2211 based on patch by Iain Morgan; ok markus@

Revision 1.354 / (download) - annotate - [select for diffs], Mon Jan 26 12:16:36 2015 UTC (9 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.353: +3 -2 lines
Diff to previous 1.353 (colored)

correct description of UpdateHostKeys in ssh_config.5 and
add it to -o lists for ssh, scp and sftp;
pointed out by jmc@

Revision 1.353 / (download) - annotate - [select for diffs], Mon Dec 22 09:26:31 2014 UTC (9 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.352: +3 -2 lines
Diff to previous 1.352 (colored)

add fingerprinthash to the options list;

Revision 1.352 / (download) - annotate - [select for diffs], Sun Dec 21 22:27:56 2014 UTC (9 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.351: +3 -3 lines
Diff to previous 1.351 (colored)

Add FingerprintHash option to control algorithm used for key
fingerprints. Default changes from MD5 to SHA256 and format
from hex to base64.

Feedback and ok naddy@ markus@

Revision 1.351 / (download) - annotate - [select for diffs], Thu Oct 9 06:21:31 2014 UTC (9 years, 7 months ago) by jmc
Branch: MAIN
Changes since 1.350: +3 -3 lines
Diff to previous 1.350 (colored)

tweak previous;

Revision 1.350 / (download) - annotate - [select for diffs], Wed Oct 8 22:20:25 2014 UTC (9 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.349: +11 -3 lines
Diff to previous 1.349 (colored)

Tweak config reparsing with host canonicalisation

Make the second pass through the config files always run when
hostname canonicalisation is enabled.

Add a "Match canonical" criteria that allows ssh_config Match
blocks to trigger only in the second config pass.

Add a -G option to ssh that causes it to parse its configuration
and dump the result to stdout, similar to "sshd -T"

Allow ssh_config Port options set in the second config parse
phase to be applied (they were being ignored).

bz#2267 bz#2286; ok markus

Revision 1.349 / (download) - annotate - [select for diffs], Sat Aug 30 15:33:50 2014 UTC (9 years, 8 months ago) by sobrado
Branch: MAIN
Changes since 1.348: +6 -6 lines
Diff to previous 1.348 (colored)

improve capitalization for the Ed25519 public-key signature system.

ok djm@

Revision 1.348 / (download) - annotate - [select for diffs], Thu Jul 24 22:57:10 2014 UTC (9 years, 9 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.347: +8 -5 lines
Diff to previous 1.347 (colored)

Mention UNIX-domain socket forwarding too.  OK jmc@ deraadt@

Revision 1.347 / (download) - annotate - [select for diffs], Wed Jul 16 14:48:57 2014 UTC (9 years, 10 months ago) by jmc
Branch: MAIN
Changes since 1.346: +4 -2 lines
Diff to previous 1.346 (colored)

add the streamlocal* options to ssh's -o list; millert says they're
irrelevant for scp/sftp;

ok markus millert

Revision 1.346 / (download) - annotate - [select for diffs], Thu Jul 3 05:38:17 2014 UTC (9 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.345: +4 -2 lines
Diff to previous 1.345 (colored)

document that -g will only work in the multiplexed case if applied to
the mux master

Revision 1.345 / (download) - annotate - [select for diffs], Sat Apr 19 18:42:19 2014 UTC (10 years, 1 month ago) by tedu
Branch: MAIN
Changes since 1.344: +2 -3 lines
Diff to previous 1.344 (colored)

delete .xr to hosts.equiv. there's still an unfortunate amount of
documentation referring to rhosts equivalency in here.

Revision 1.344 / (download) - annotate - [select for diffs], Mon Mar 17 19:44:10 2014 UTC (10 years, 2 months ago) by tedu
Branch: MAIN
Changes since 1.343: +2 -19 lines
Diff to previous 1.343 (colored)

old descriptions of des and blowfish are old. maybe ok deraadt

Revision 1.343 / (download) - annotate - [select for diffs], Sat Dec 7 11:58:46 2013 UTC (10 years, 5 months ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.342: +14 -6 lines
Diff to previous 1.342 (colored)

add missing mentions of ed25519; ok djm@

Revision 1.342 / (download) - annotate - [select for diffs], Tue Nov 26 12:14:54 2013 UTC (10 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.341: +4 -5 lines
Diff to previous 1.341 (colored)

- put -Q in the right place
- Ar was a poor choice for the arguments to -Q. i've chosen an admittedly equally
poor Cm, at least consistent with the rest of the docs. also no need for multiple
instances
- zap a now redundant Nm
- usage() sync

Revision 1.341 / (download) - annotate - [select for diffs], Mon Nov 25 18:04:21 2013 UTC (10 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.340: +11 -13 lines
Diff to previous 1.340 (colored)

improve -Q usage and such.  One usage change is that the option is now
case-sensitive
ok dtucker markus djm

Revision 1.340 / (download) - annotate - [select for diffs], Thu Nov 21 00:45:44 2013 UTC (10 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.339: +3 -1 lines
Diff to previous 1.339 (colored)

Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com"
that combines Daniel Bernstein's ChaCha20 stream cipher and Poly1305 MAC
to build an authenticated encryption mode.

Inspired by and similar to Adam Langley's proposal for TLS:
http://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-03
but differs in layout used for the MAC calculation and the use of a
second ChaCha20 instance to separately encrypt packet lengths.
Details are in the PROTOCOL.chacha20poly1305 file.

Feedback markus@, naddy@; manpage bits Loganden Velvindron @ AfriNIC
ok markus@ naddy@

Revision 1.339 / (download) - annotate - [select for diffs], Wed Oct 16 22:49:38 2013 UTC (10 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.338: +6 -6 lines
Diff to previous 1.338 (colored)

s/canonicalise/canonicalize/ for consistency with existing spelling,
e.g. authorized_keys; pointed out by naddy@

Revision 1.338 / (download) - annotate - [select for diffs], Wed Oct 16 02:31:46 2013 UTC (10 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.337: +7 -2 lines
Diff to previous 1.337 (colored)

Implement client-side hostname canonicalisation to allow an explicit
search path of domain suffixes to use to convert unqualified host names
to fully-qualified ones for host key matching.
This is particularly useful for host certificates, which would otherwise
need to list unqualified names alongside fully-qualified ones (and this
causes a number of problems).

"looks fine" markus@

Revision 1.337 / (download) - annotate - [select for diffs], Tue Oct 15 14:10:25 2013 UTC (10 years, 7 months ago) by jmc
Branch: MAIN
Changes since 1.336: +3 -2 lines
Diff to previous 1.336 (colored)

tweak previous;

Revision 1.336 / (download) - annotate - [select for diffs], Tue Aug 20 06:56:07 2013 UTC (10 years, 8 months ago) by jmc
Branch: MAIN
Changes since 1.335: +3 -2 lines
Diff to previous 1.335 (colored)

some proxyusefdpass tweaks;

Revision 1.335 / (download) - annotate - [select for diffs], Wed Aug 14 08:39:27 2013 UTC (10 years, 9 months ago) by jmc
Branch: MAIN
Changes since 1.334: +7 -4 lines
Diff to previous 1.334 (colored)

some Bx/Ox conversion;
From: Jan Stary

Revision 1.334 / (download) - annotate - [select for diffs], Thu Jul 18 01:12:26 2013 UTC (10 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.333: +3 -3 lines
Diff to previous 1.333 (colored)

be more exact wrt perms for ~/.ssh/config; bz#2078

Revision 1.333 / (download) - annotate - [select for diffs], Thu Jun 27 14:05:37 2013 UTC (10 years, 10 months ago) by jmc
Branch: MAIN
Changes since 1.332: +4 -8 lines
Diff to previous 1.332 (colored)

do not use Sx for sections outwith the man page - ingo informs me that
stuff like html will render with broken links;

issue reported by Eric S. Raymond, via djm

Revision 1.332 / (download) - annotate - [select for diffs], Fri Apr 19 01:06:50 2013 UTC (11 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.331: +19 -2 lines
Diff to previous 1.331 (colored)

add the ability to query supported ciphers, MACs, key type and KEX
algorithms to ssh. Includes some refactoring of KEX and key type handling
to be table-driven; ok markus@

Revision 1.331 / (download) - annotate - [select for diffs], Sun Apr 7 02:10:33 2013 UTC (11 years, 1 month ago) by dtucker
Branch: MAIN
Changes since 1.330: +7 -2 lines
Diff to previous 1.330 (colored)

Add -E option to ssh and sshd to append debugging logs to a specified file
instead of stderr or syslog.  ok markus@, man page help jmc@

Revision 1.330 / (download) - annotate - [select for diffs], Thu Oct 4 13:21:50 2012 UTC (11 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.329: +3 -3 lines
Diff to previous 1.329 (colored)

add umac128 variant; ok djm@ at n2k12

Revision 1.329 / (download) - annotate - [select for diffs], Wed Sep 26 16:12:13 2012 UTC (11 years, 7 months ago) by jmc
Branch: MAIN
Changes since 1.328: +70 -29 lines
Diff to previous 1.328 (colored)

last stage of rfc changes, using consistent Rs/Re blocks, and moving the
references into a STANDARDS section;

Revision 1.328 / (download) - annotate - [select for diffs], Thu Sep 6 13:57:42 2012 UTC (11 years, 8 months ago) by jmc
Branch: MAIN
Changes since 1.327: +3 -3 lines
Diff to previous 1.327 (colored)

missing letter in previous;

Revision 1.327 / (download) - annotate - [select for diffs], Thu Sep 6 04:37:39 2012 UTC (11 years, 8 months ago) by dtucker
Branch: MAIN
Changes since 1.326: +9 -1 lines
Diff to previous 1.326 (colored)

Add ~v and ~V escape sequences to raise and lower the logging level
respectively. Man page help from jmc, ok deraadt jmc

Revision 1.326 / (download) - annotate - [select for diffs], Mon Jun 18 12:17:18 2012 UTC (11 years, 11 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2
Changes since 1.325: +4 -4 lines
Diff to previous 1.325 (colored)

Clarify description of -W.  Noted by Steve.McClellan at radisys com, ok jmc

Revision 1.325 / (download) - annotate - [select for diffs], Mon Jun 18 12:07:07 2012 UTC (11 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.324: +3 -3 lines
Diff to previous 1.324 (colored)

Remove mention of 'three' key files since there are now four.  From
Steve.McClellan at radisys com.

Revision 1.324 / (download) - annotate - [select for diffs], Fri Apr 20 16:26:22 2012 UTC (12 years ago) by jmc
Branch: MAIN
Changes since 1.323: +3 -3 lines
Diff to previous 1.323 (colored)

use "brackets" instead of "braces", for consistency;

Revision 1.323 / (download) - annotate - [select for diffs], Sun Sep 11 06:59:05 2011 UTC (12 years, 8 months ago) by okan
Branch: MAIN
CVS Tags: OPENBSD_5_1_BASE, OPENBSD_5_1
Changes since 1.322: +4 -2 lines
Diff to previous 1.322 (colored)

document new -O cancel command; ok djm@

Revision 1.322 / (download) - annotate - [select for diffs], Sat Sep 10 22:26:34 2011 UTC (12 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.321: +14 -5 lines
Diff to previous 1.321 (colored)

support cancellation of local/dynamic forwardings from ~C commandline;
ok & feedback djm@

Revision 1.321 / (download) - annotate - [select for diffs], Fri Aug 26 01:45:15 2011 UTC (12 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.320: +5 -2 lines
Diff to previous 1.320 (colored)

Add some missing ssh_config(5) options that can be used in ssh(1)'s
-o argument. Patch from duclare AT guu.fi

Revision 1.320 / (download) - annotate - [select for diffs], Tue Aug 2 01:22:11 2011 UTC (12 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.319: +5 -3 lines
Diff to previous 1.319 (colored)

Add new SHA256 and SHA512 based HMAC modes from
http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt

feedback and ok markus@

Revision 1.319 / (download) - annotate - [select for diffs], Sat May 7 23:20:25 2011 UTC (13 years ago) by jmc
Branch: MAIN
Changes since 1.318: +3 -2 lines
Diff to previous 1.318 (colored)

+.It RequestTTY

Revision 1.318 / (download) - annotate - [select for diffs], Mon Apr 18 00:21:11 2011 UTC (13 years, 1 month ago) by jmc
Branch: MAIN
Changes since 1.317: +4 -4 lines
Diff to previous 1.317 (colored)

tweak previous;

Revision 1.317 / (download) - annotate - [select for diffs], Sun Apr 17 22:42:41 2011 UTC (13 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.316: +4 -2 lines
Diff to previous 1.316 (colored)

allow graceful shutdown of multiplexing: request that a mux server removes
its listener socket and refuse future multiplexing requests; ok markus@

Revision 1.316 / (download) - annotate - [select for diffs], Thu Nov 18 15:01:00 2010 UTC (13 years, 6 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.315: +3 -2 lines
Diff to previous 1.315 (colored)

add IPQoS to the various -o lists, and zap some trailing whitespace;

Revision 1.315 / (download) - annotate - [select for diffs], Thu Oct 28 18:33:28 2010 UTC (13 years, 6 months ago) by jmc
Branch: MAIN
Changes since 1.314: +2 -3 lines
Diff to previous 1.314 (colored)

knock out some "-*- nroff -*-" lines;

Revision 1.314 / (download) - annotate - [select for diffs], Wed Sep 22 08:30:08 2010 UTC (13 years, 7 months ago) by jmc
Branch: MAIN
Changes since 1.313: +3 -2 lines
Diff to previous 1.313 (colored)

ssh.1: add kexalgorithms to the -o list
ssh_config.5: format the kexalgorithms in a more consistent (prettier!) way

ok djm

Revision 1.313 / (download) - annotate - [select for diffs], Sat Sep 11 21:44:20 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.312: +7 -2 lines
Diff to previous 1.312 (colored)

mention RFC 5656 for ECC stuff

Revision 1.312 / (download) - annotate - [select for diffs], Sat Sep 4 09:38:34 2010 UTC (13 years, 8 months ago) by jmc
Branch: MAIN
Changes since 1.311: +5 -5 lines
Diff to previous 1.311 (colored)

two more EXIT STATUS sections;

Revision 1.311 / (download) - annotate - [select for diffs], Tue Aug 31 21:14:58 2010 UTC (13 years, 8 months ago) by jmc
Branch: MAIN
Changes since 1.310: +3 -3 lines
Diff to previous 1.310 (colored)

small text tweak to accommodate previous;

Revision 1.310 / (download) - annotate - [select for diffs], Tue Aug 31 11:54:45 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.309: +17 -8 lines
Diff to previous 1.309 (colored)

Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and
host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer
better performance than plain DH and DSA at the same equivalent symmetric
key length, as well as much shorter keys.

Only the mandatory sections of RFC5656 are implemented, specifically the
three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and
ECDSA. Point compression (optional in RFC5656 is NOT implemented).

Certificate host and user keys using the new ECDSA key types are supported.

Note that this code has not been tested for interoperability and may be
subject to change.

feedback and ok markus@

Revision 1.309 / (download) - annotate - [select for diffs], Sun Aug 8 19:36:30 2010 UTC (13 years, 9 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.308: +23 -23 lines
Diff to previous 1.308 (colored)

use the same template for all FILES sections; i.e. -compact/.Pp where we
have multiple items, and .Pa for path names;

Revision 1.308 / (download) - annotate - [select for diffs], Wed Aug 4 05:37:01 2010 UTC (13 years, 9 months ago) by djm
Branch: MAIN
Changes since 1.307: +5 -28 lines
Diff to previous 1.307 (colored)

Remove mentions of weird "addr/port" alternate address format for IPv6
addresses combinations. It hasn't worked for ages and we have supported
the more commen "[addr]:port" format for a long time. ok jmc@ markus@

Revision 1.307 / (download) - annotate - [select for diffs], Fri Jul 23 08:49:25 2010 UTC (13 years, 9 months ago) by dtucker
Branch: MAIN
Changes since 1.306: +5 -3 lines
Diff to previous 1.306 (colored)

Ciphers is documented in ssh_config(5) these days

Revision 1.306 / (download) - annotate - [select for diffs], Wed Jul 14 17:06:58 2010 UTC (13 years, 10 months ago) by jmc
Branch: MAIN
Changes since 1.305: +8 -26 lines
Diff to previous 1.305 (colored)

finally ssh synopsis looks nice again! this commit just removes a ton of
hacks we had in place to make it work with old groff;

Revision 1.305 / (download) - annotate - [select for diffs], Sun May 16 12:55:51 2010 UTC (14 years ago) by markus
Branch: MAIN
Changes since 1.304: +7 -2 lines
Diff to previous 1.304 (colored)

mux support for remote forwarding with dynamic port allocation,
use with
	LPORT=`ssh -S muxsocket -R0:localhost:25 -O forward somehost`
feedback and ok djm@

Revision 1.304 / (download) - annotate - [select for diffs], Fri Mar 26 06:54:36 2010 UTC (14 years, 1 month ago) by jmc
Branch: MAIN
Changes since 1.303: +3 -3 lines
Diff to previous 1.303 (colored)

tweak previous;

Revision 1.303 / (download) - annotate - [select for diffs], Fri Mar 26 00:26:58 2010 UTC (14 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.302: +5 -2 lines
Diff to previous 1.302 (colored)

mention that -S none disables connection sharing; from Colin Watson

Revision 1.302 / (download) - annotate - [select for diffs], Fri Mar 5 10:28:21 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.301: +6 -1 lines
Diff to previous 1.301 (colored)

mention loading of certificate files from [private]-cert.pub when
they are present; feedback and ok jmc@

Revision 1.301 / (download) - annotate - [select for diffs], Fri Mar 5 08:31:20 2010 UTC (14 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.300: +16 -4 lines
Diff to previous 1.300 (colored)

document certificate authentication; help/ok djm

Revision 1.300 / (download) - annotate - [select for diffs], Fri Mar 5 06:50:34 2010 UTC (14 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.299: +1 -2 lines
Diff to previous 1.299 (colored)

tweak previous;

Revision 1.299 / (download) - annotate - [select for diffs], Thu Mar 4 23:19:29 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.298: +1 -34 lines
Diff to previous 1.298 (colored)

move section on CA and revoked keys from ssh.1 to sshd.8's known hosts
format section and rework it a bit; requested by jmc@

Revision 1.298 / (download) - annotate - [select for diffs], Thu Mar 4 12:51:25 2010 UTC (14 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.297: +5 -5 lines
Diff to previous 1.297 (colored)

tweak previous;

Revision 1.297 / (download) - annotate - [select for diffs], Thu Mar 4 10:36:03 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.296: +17 -1 lines
Diff to previous 1.296 (colored)

Add a TrustedUserCAKeys option to sshd_config to specify CA keys that
are trusted to authenticate users (in addition than doing it per-user
in authorized_keys).

Add a RevokedKeys option to sshd_config and a @revoked marker to
known_hosts to allow keys to me revoked and banned for user or host
authentication.

feedback and ok markus@

Revision 1.296 / (download) - annotate - [select for diffs], Fri Feb 26 22:09:28 2010 UTC (14 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.295: +2 -3 lines
Diff to previous 1.295 (colored)

tweak previous;

Revision 1.295 / (download) - annotate - [select for diffs], Fri Feb 26 20:29:54 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.294: +21 -2 lines
Diff to previous 1.294 (colored)

Add support for certificate key types for users and hosts.

OpenSSH certificate key types are not X.509 certificates, but a much
simpler format that encodes a public key, identity information and
some validity constraints and signs it with a CA key. CA keys are
regular SSH keys. This certificate style avoids the attack surface
of X.509 certificates and is very easy to deploy.

Certified host keys allow automatic acceptance of new host keys
when a CA certificate is marked as trusted in ~/.ssh/known_hosts.
see VERIFYING HOST KEYS in ssh(1) for details.

Certified user keys allow authentication of users when the signing
CA key is marked as trusted in authorized_keys. See "AUTHORIZED_KEYS
FILE FORMAT" in sshd(8) for details.

Certificates are minted using ssh-keygen(1), documentation is in
the "CERTIFICATES" section of that manpage.

Documentation on the format of certificates is in the file
PROTOCOL.certkeys

feedback and ok markus@

Revision 1.294 / (download) - annotate - [select for diffs], Thu Feb 11 13:23:29 2010 UTC (14 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.293: +3 -3 lines
Diff to previous 1.293 (colored)

libarary -> library;

Revision 1.293 / (download) - annotate - [select for diffs], Wed Feb 10 23:20:38 2010 UTC (14 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.292: +2 -4 lines
Diff to previous 1.292 (colored)

pkcs#11 is no longer optional; improve wording; ok jmc@

Revision 1.292 / (download) - annotate - [select for diffs], Mon Feb 8 22:03:05 2010 UTC (14 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.291: +3 -2 lines
Diff to previous 1.291 (colored)

tweak previous; ok markus

Revision 1.291 / (download) - annotate - [select for diffs], Mon Feb 8 10:50:20 2010 UTC (14 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.290: +7 -7 lines
Diff to previous 1.290 (colored)

replace our obsolete smartcard code with PKCS#11.
	ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf
ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11
provider (shared library) while ssh-agent(1) delegates PKCS#11 to
a forked a ssh-pkcs11-helper process.
PKCS#11 is currently a compile time option.
feedback and ok djm@; inspired by patches from Alon Bar-Lev

Revision 1.290 / (download) - annotate - [select for diffs], Mon Jan 11 01:39:46 2010 UTC (14 years, 4 months ago) by dtucker
Branch: MAIN
Changes since 1.289: +16 -4 lines
Diff to previous 1.289 (colored)

Add a 'netcat mode' (ssh -W).  This connects stdio on the client to a single
port forward on the server.  This allows, for example, using ssh as
a ProxyCommand to route connections via intermediate servers.
bz #1618, man page help from jmc@, ok markus@

Revision 1.289 / (download) - annotate - [select for diffs], Sat Jan 9 23:04:13 2010 UTC (14 years, 4 months ago) by dtucker
Branch: MAIN
Changes since 1.288: +2 -3 lines
Diff to previous 1.288 (colored)

Remove RoutingDomain from ssh since it's now not needed.  It can be replaced
with "route exec" or "nc -V" as a proxycommand.  "route exec" also ensures
that trafic such as DNS lookups stays withing the specified routingdomain.

For example (from reyk):
# route -T 2 exec /usr/sbin/sshd
or inherited from the parent process
$ route -T 2 exec sh
$ ssh 10.1.2.3

ok deraadt@ markus@ stevesk@ reyk@

Revision 1.288 / (download) - annotate - [select for diffs], Tue Dec 29 16:38:41 2009 UTC (14 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.287: +3 -3 lines
Diff to previous 1.287 (colored)

Rename RDomain config option to RoutingDomain to be more clear and
consistent with other options.

NOTE: if you currently use RDomain in the ssh client or server config,
or ssh/sshd -o, you must update to use RoutingDomain.

ok markus@ djm@

Revision 1.287 / (download) - annotate - [select for diffs], Wed Oct 28 16:38:18 2009 UTC (14 years, 6 months ago) by reyk
Branch: MAIN
Changes since 1.286: +2 -1 lines
Diff to previous 1.286 (colored)

Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan.

ok markus@

Revision 1.286 / (download) - annotate - [select for diffs], Thu Oct 22 15:02:12 2009 UTC (14 years, 6 months ago) by sobrado
Branch: MAIN
Changes since 1.285: +4 -4 lines
Diff to previous 1.285 (colored)

write UNIX-domain in a more consistent way; while here, replace a
few remaining ".Tn UNIX" macros with ".Ux" ones.

pointed out by ratchov@, thanks!

ok jmc@

Revision 1.285 / (download) - annotate - [select for diffs], Thu Oct 22 12:35:53 2009 UTC (14 years, 6 months ago) by sobrado
Branch: MAIN
Changes since 1.284: +5 -4 lines
Diff to previous 1.284 (colored)

use the UNIX-related macros (.At and .Ux) where appropriate.

ok jmc@

Revision 1.284 / (download) - annotate - [select for diffs], Thu Oct 8 20:42:12 2009 UTC (14 years, 7 months ago) by jmc
Branch: MAIN
Changes since 1.283: +7 -9 lines
Diff to previous 1.283 (colored)

some tweaks now that protocol 1 is not offered by default; ok markus

Revision 1.283 / (download) - annotate - [select for diffs], Thu Mar 19 15:15:09 2009 UTC (15 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6
Changes since 1.282: +4 -21 lines
Diff to previous 1.282 (colored)

for "Ciphers", just point the reader to the keyword in ssh_config(5), just
as we do for "MACs": this stops us getting out of sync when the lists
change;

fixes documentation/6102, submitted by Peter J. Philipp
alternative fix proposed by djm
ok markus

Revision 1.282 / (download) - annotate - [select for diffs], Thu Feb 12 03:44:25 2009 UTC (15 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_5_BASE, OPENBSD_4_5
Changes since 1.281: +3 -3 lines
Diff to previous 1.281 (colored)

consistency: Dq => Ql

Revision 1.281 / (download) - annotate - [select for diffs], Thu Feb 12 03:42:09 2009 UTC (15 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.280: +9 -2 lines
Diff to previous 1.280 (colored)

document -R0:... usage

Revision 1.280 / (download) - annotate - [select for diffs], Sun Nov 9 12:34:47 2008 UTC (15 years, 6 months ago) by tobias
Branch: MAIN
Changes since 1.279: +3 -3 lines
Diff to previous 1.279 (colored)

typo fixed (overriden -> overridden)

ok espie, jmc

Revision 1.279 / (download) - annotate - [select for diffs], Wed Nov 5 03:23:09 2008 UTC (15 years, 6 months ago) by stevesk
Branch: MAIN
Changes since 1.278: +5 -4 lines
Diff to previous 1.278 (colored)

add dynamic forward escape command line; ok djm@

Revision 1.278 / (download) - annotate - [select for diffs], Wed Oct 8 23:34:03 2008 UTC (15 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.277: +8 -3 lines
Diff to previous 1.277 (colored)

Add -y option to force logging via syslog rather than stderr.
Useful for daemonised ssh connection (ssh -f). Patch originally from
and ok'd by markus@

Revision 1.277 / (download) - annotate - [select for diffs], Wed Jul 2 13:47:39 2008 UTC (15 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.276: +10 -1 lines
Diff to previous 1.276 (colored)

When forking after authentication ("ssh -f") with ExitOnForwardFailure
enabled, delay the fork until after replies for any -R forwards have
been seen. Allows for robust detection of -R forward failure when
using -f (similar to bz#92); ok dtucker@

Revision 1.276 / (download) - annotate - [select for diffs], Thu Jun 26 21:11:46 2008 UTC (15 years, 10 months ago) by jmc
Branch: MAIN
Changes since 1.275: +3 -2 lines
Diff to previous 1.275 (colored)

add VisualHostKey to the list of options listed in -o;

Revision 1.275 / (download) - annotate - [select for diffs], Thu Jun 26 11:46:31 2008 UTC (15 years, 10 months ago) by grunk
Branch: MAIN
Changes since 1.274: +4 -4 lines
Diff to previous 1.274 (colored)

Move SSH Fingerprint Visualization away from sharing the config option
CheckHostIP to an own config option named VisualHostKey.
While there, fix the behaviour that ssh would draw a random art picture
on every newly seen host even when the option was not enabled.

prodded by deraadt@, discussions,
help and ok markus@ djm@ dtucker@

Revision 1.274 / (download) - annotate - [select for diffs], Fri Jun 13 20:13:26 2008 UTC (15 years, 11 months ago) by grunk
Branch: MAIN
Changes since 1.273: +34 -5 lines
Diff to previous 1.273 (colored)

Explain the use of SSH fpr visualization using random art, and cite the
original scientific paper inspiring that technique.
Much help with English and nroff by jmc@, thanks.

Revision 1.273 / (download) - annotate - [select for diffs], Mon Feb 11 07:58:28 2008 UTC (16 years, 3 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.272: +2 -2 lines
Diff to previous 1.272 (colored)

bump Mdocdate for pages committed in "febuary", necessary because
of a typo in rcs.c;

Revision 1.272 / (download) - annotate - [select for diffs], Sat Feb 9 12:15:43 2008 UTC (16 years, 3 months ago) by mcbride
Branch: MAIN
Changes since 1.271: +9 -2 lines
Diff to previous 1.271 (colored)

Document the correct permissions for the ~/.ssh/ directory.

ok jmc

Revision 1.271 / (download) - annotate - [select for diffs], Sat Jan 19 19:13:28 2008 UTC (16 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.270: +3 -3 lines
Diff to previous 1.270 (colored)

satisfy the pedants: -q does not suppress all diagnostic messages (e.g.
some commandline parsing warnings go unconditionally to stdout).

Revision 1.270 / (download) - annotate - [select for diffs], Tue Jun 12 13:43:55 2007 UTC (16 years, 11 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.269: +2 -2 lines
Diff to previous 1.269 (colored)

add -K to SYNOPSIS;

Revision 1.269 / (download) - annotate - [select for diffs], Tue Jun 12 11:15:17 2007 UTC (16 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.268: +5 -2 lines
Diff to previous 1.268 (colored)

Add "-K" flag for ssh to set GSSAPIAuthentication=yes and
GSSAPIDelegateCredentials=yes. This is symmetric with -k (disable GSSAPI)
and is useful for hosts with /home on Kerberised NFS; bz #1312
patch from Markus.Kuhn AT cl.cam.ac.uk; ok dtucker@ markus@

Revision 1.268 / (download) - annotate - [select for diffs], Thu Jun 7 19:37:34 2007 UTC (16 years, 11 months ago) by pvalchev
Branch: MAIN
Changes since 1.267: +2 -2 lines
Diff to previous 1.267 (colored)

Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must
specify umac-64@openssh.com). Provides about 20% end-to-end speedup
compared to hmac-md5. Represents a different approach to message
authentication to that of HMAC that may be beneficial if HMAC based on one
of its underlying hash algorithms is found to be vulnerable to a new attack.
http://www.ietf.org/rfc/rfc4418.txt

in conjunction with and OK djm@

Revision 1.267 / (download) - annotate - [select for diffs], Thu May 31 19:20:16 2007 UTC (16 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.266: +2 -2 lines
Diff to previous 1.266 (colored)

convert to new .Dd format;

Revision 1.266 / (download) - annotate - [select for diffs], Mon Dec 11 21:25:46 2006 UTC (17 years, 5 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1
Changes since 1.265: +6 -1 lines
Diff to previous 1.265 (colored)

add rfc 4716 (public key format); ok jmc

Revision 1.209.2.3 / (download) - annotate - [select for diffs], Wed Nov 8 00:44:05 2006 UTC (17 years, 6 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.209.2.2: +16 -6 lines
Diff to previous 1.209.2.2 (colored) to branchpoint 1.209 (colored) next main 1.210 (colored)

upgrade to OpenSSH 4.5

Revision 1.263.4.1 / (download) - annotate - [select for diffs], Wed Nov 8 00:42:11 2006 UTC (17 years, 6 months ago) by brad
Branch: OPENBSD_4_0
Changes since 1.263: +16 -6 lines
Diff to previous 1.263 (colored) next main 1.264 (colored)

upgrade to OpenSSH 4.5

Revision 1.257.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 00:17:14 2006 UTC (17 years, 6 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.257.2.1: +16 -6 lines
Diff to previous 1.257.2.1 (colored) to branchpoint 1.257 (colored) next main 1.258 (colored)

upgrade to OpenSSH 4.5

Revision 1.265 / (download) - annotate - [select for diffs], Sat Oct 28 18:08:10 2006 UTC (17 years, 6 months ago) by otto
Branch: MAIN
Changes since 1.264: +15 -5 lines
Diff to previous 1.264 (colored)

correct/expand example of usage of -w; ok jmc@ stevesk@

Revision 1.209.2.2 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:33 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.209.2.1: +90 -31 lines
Diff to previous 1.209.2.1 (colored) to branchpoint 1.209 (colored)

upgrade to OpenSSH 4.4

Revision 1.257.2.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:51 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.257: +36 -16 lines
Diff to previous 1.257 (colored)

upgrade to OpenSSH 4.4

Revision 1.264 / (download) - annotate - [select for diffs], Mon Sep 25 04:55:38 2006 UTC (17 years, 7 months ago) by ray
Branch: MAIN
Changes since 1.263: +2 -2 lines
Diff to previous 1.263 (colored)

Change "a SSH" to "an SSH".  Hurray, I'm not the only one who
pronounces "SSH" as "ess-ess-aich".

OK jmc@ and stevesk@.

Revision 1.263 / (download) - annotate - [select for diffs], Tue Jul 11 18:50:48 2006 UTC (17 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_4_0_BASE
Branch point for: OPENBSD_4_0
Changes since 1.262: +2 -1 lines
Diff to previous 1.262 (colored)

add ExitOnForwardFailure: terminate the connection if ssh(1)
cannot set up all requested dynamic, local, and remote port
forwardings. ok djm, dtucker, stevesk, jmc

Revision 1.262 / (download) - annotate - [select for diffs], Sun Jul 2 23:01:55 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.261: +4 -2 lines
Diff to previous 1.261 (colored)

use -KR[bind_address:]port here; ok djm@

Revision 1.261 / (download) - annotate - [select for diffs], Sun Jul 2 17:12:58 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.260: +25 -13 lines
Diff to previous 1.260 (colored)

more details and clarity for tun(4) device forwarding; ok and help
jmc@

Revision 1.260 / (download) - annotate - [select for diffs], Mon May 29 16:13:23 2006 UTC (17 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.259: +2 -1 lines
Diff to previous 1.259 (colored)

add GSSAPI to the list of authentication methods supported;

Revision 1.259 / (download) - annotate - [select for diffs], Wed Mar 22 21:16:24 2006 UTC (18 years, 1 month ago) by jakob
Branch: MAIN
Changes since 1.258: +2 -3 lines
Diff to previous 1.258 (colored)

simplify SSHFP example; ok jmc@

Revision 1.258 / (download) - annotate - [select for diffs], Thu Mar 16 04:24:42 2006 UTC (18 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.257: +6 -1 lines
Diff to previous 1.257 (colored)

Add RFC4419 (Diffie-Hellman group exchange KEX) to the list of SSH RFCs
that OpenSSH supports

Revision 1.257 / (download) - annotate - [select for diffs], Fri Feb 24 20:31:30 2006 UTC (18 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE
Branch point for: OPENBSD_3_9
Changes since 1.256: +3 -3 lines
Diff to previous 1.256 (colored)

more consistency fixes;

Revision 1.256 / (download) - annotate - [select for diffs], Wed Feb 15 16:53:20 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.255: +49 -10 lines
Diff to previous 1.255 (colored)

remove the IETF draft references and replace them with some updated RFCs;
list from markus;

Revision 1.255 / (download) - annotate - [select for diffs], Mon Feb 6 21:44:47 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.254: +4 -4 lines
Diff to previous 1.254 (colored)

make this a little less ambiguous...

Revision 1.254 / (download) - annotate - [select for diffs], Mon Feb 6 15:54:07 2006 UTC (18 years, 3 months ago) by msf
Branch: MAIN
Changes since 1.253: +2 -2 lines
Diff to previous 1.253 (colored)

- typo fix

ok jmc@

Revision 1.209.2.1 / (download) - annotate - [select for diffs], Fri Feb 3 03:01:57 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.209: +678 -509 lines
Diff to previous 1.209 (colored)

upgrade to OpenSSH 4.3

Revision 1.205.2.2 / (download) - annotate - [select for diffs], Fri Feb 3 02:53:45 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.205.2.1: +678 -509 lines
Diff to previous 1.205.2.1 (colored) to branchpoint 1.205 (colored) next main 1.206 (colored)

upgrade to OpenSSH 4.3

Revision 1.253 / (download) - annotate - [select for diffs], Mon Jan 30 13:37:49 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.252: +1 -4 lines
Diff to previous 1.252 (colored)

remove an incorrect sentence;

reported by roumen petrov;
ok djm markus

Revision 1.252 / (download) - annotate - [select for diffs], Thu Jan 26 08:47:56 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.251: +51 -10 lines
Diff to previous 1.251 (colored)

add a section on verifying host keys in dns;

written with a lot of help from jakob;
feedback dtucker/markus;
ok markus

Revision 1.251 / (download) - annotate - [select for diffs], Fri Jan 20 00:14:55 2006 UTC (18 years, 4 months ago) by dtucker
Branch: MAIN
Changes since 1.250: +2 -1 lines
Diff to previous 1.250 (colored)

Document RekeyLimit.  Based on patch from jan.iven at cern.ch from mindrot #1056
with feedback from jmc, djm and markus; ok jmc@ djm@

Revision 1.250 / (download) - annotate - [select for diffs], Wed Jan 18 10:53:29 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.249: +52 -1 lines
Diff to previous 1.249 (colored)

add a section on ssh-based vpn, based on reyk's README.tun;

Revision 1.249 / (download) - annotate - [select for diffs], Sun Jan 15 17:37:05 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.248: +2 -2 lines
Diff to previous 1.248 (colored)

correction from deraadt

Revision 1.248 / (download) - annotate - [select for diffs], Thu Jan 12 22:34:12 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.247: +1 -4 lines
Diff to previous 1.247 (colored)

back out a sentence - AUTHENTICATION already documents this;

Revision 1.247 / (download) - annotate - [select for diffs], Thu Jan 12 18:48:48 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.246: +4 -4 lines
Diff to previous 1.246 (colored)

refer to `TCP' rather than `TCP/IP' in the context of connection
forwarding;

ok markus

Revision 1.246 / (download) - annotate - [select for diffs], Thu Jan 12 14:44:12 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.245: +62 -7 lines
Diff to previous 1.245 (colored)

split sections on tcp and x11 forwarding into two sections.
add an example in the tcp section, based on sth i wrote for ssh faq;

help + ok: djm markus dtucker

Revision 1.245 / (download) - annotate - [select for diffs], Fri Jan 6 13:29:10 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.244: +8 -17 lines
Diff to previous 1.244 (colored)

final round of whacking FILES for duplicate info, and some consistency
fixes;

ok djm

Revision 1.244 / (download) - annotate - [select for diffs], Fri Jan 6 13:27:32 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.243: +8 -22 lines
Diff to previous 1.243 (colored)

weed out some duplicate info in the known_hosts FILES entries;
ok djm

Revision 1.243 / (download) - annotate - [select for diffs], Wed Jan 4 19:50:09 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.242: +1 -2 lines
Diff to previous 1.242 (colored)

-.Xr gzip 1 ,

Revision 1.242 / (download) - annotate - [select for diffs], Wed Jan 4 19:40:24 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.241: +2 -1 lines
Diff to previous 1.241 (colored)

+.Xr ssh-keyscan 1 ,

Revision 1.241 / (download) - annotate - [select for diffs], Wed Jan 4 18:45:01 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.240: +1 -3 lines
Diff to previous 1.240 (colored)

remove .Xr's to rsh(1) and telnet(1): they are hardly needed;

Revision 1.240 / (download) - annotate - [select for diffs], Wed Jan 4 18:42:46 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.239: +13 -56 lines
Diff to previous 1.239 (colored)

chop out some duplication in the .{r,s}hosts/{h,sh}osts.equiv FILES
entries;

ok markus

Revision 1.239 / (download) - annotate - [select for diffs], Tue Jan 3 16:55:18 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.238: +3 -3 lines
Diff to previous 1.238 (colored)

tweak the description of ~/.ssh/environment

Revision 1.238 / (download) - annotate - [select for diffs], Tue Jan 3 16:52:36 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.237: +117 -117 lines
Diff to previous 1.237 (colored)

put FILES in some sort of order: sort by pathname

Revision 1.237 / (download) - annotate - [select for diffs], Tue Jan 3 16:35:30 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.236: +2 -2 lines
Diff to previous 1.236 (colored)

use a larger width for the ENVIRONMENT list;

Revision 1.236 / (download) - annotate - [select for diffs], Tue Jan 3 16:31:10 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.235: +36 -16 lines
Diff to previous 1.235 (colored)

move FILES to a -compact list, and make each files an item in that list.
this avoids nastly line wrap when we have long pathnames, and treats
each file as a separate item;

remove the .Pa too, since it is useless.

Revision 1.235 / (download) - annotate - [select for diffs], Mon Jan 2 12:31:06 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.234: +7 -24 lines
Diff to previous 1.234 (colored)

start to cut some duplicate info from FILES;
help/ok djm

Revision 1.234 / (download) - annotate - [select for diffs], Sat Dec 31 13:45:19 2005 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.233: +3 -3 lines
Diff to previous 1.233 (colored)

.Nm does not require an argument;

Revision 1.233 / (download) - annotate - [select for diffs], Sat Dec 31 13:44:04 2005 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.232: +14 -10 lines
Diff to previous 1.232 (colored)

clean up ENVIRONMENT a little;

Revision 1.232 / (download) - annotate - [select for diffs], Sat Dec 31 10:46:17 2005 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.231: +31 -32 lines
Diff to previous 1.231 (colored)

merge the "LOGIN SESSION AND REMOTE EXECUTION" and "SERVER
AUTHENTICATION" sections into "AUTHENTICATION";

some rewording done to make the text read better, plus some
improvements from djm;

ok djm

Revision 1.231 / (download) - annotate - [select for diffs], Sat Dec 31 01:38:45 2005 UTC (18 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.230: +8 -1 lines
Diff to previous 1.230 (colored)

document -MM; ok djm@

Revision 1.230 / (download) - annotate - [select for diffs], Fri Dec 23 23:46:23 2005 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.229: +15 -15 lines
Diff to previous 1.229 (colored)

less mark up for -c;

Revision 1.229 / (download) - annotate - [select for diffs], Fri Dec 23 14:55:53 2005 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.228: +5 -4 lines
Diff to previous 1.228 (colored)

- sync the description of -e w/ synopsis
- simplify the description of -I
- note that -I is only available if support compiled in, and that it
isn't by default

feedback/ok djm@

Revision 1.228 / (download) - annotate - [select for diffs], Thu Dec 22 11:23:42 2005 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.227: +13 -2 lines
Diff to previous 1.227 (colored)

expand the description of -w somewhat;
help/ok reyk

Revision 1.227 / (download) - annotate - [select for diffs], Wed Dec 21 12:53:31 2005 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.226: +4 -3 lines
Diff to previous 1.226 (colored)

-Y does X11 forwarding too;
ok markus

Revision 1.226 / (download) - annotate - [select for diffs], Wed Dec 21 11:57:25 2005 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.225: +3 -3 lines
Diff to previous 1.225 (colored)

options now described `above', rather than `later';

Revision 1.225 / (download) - annotate - [select for diffs], Wed Dec 21 11:48:16 2005 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.224: +2 -2 lines
Diff to previous 1.224 (colored)

-L and -R descriptions are now above, not below, ~C description;

Revision 1.224 / (download) - annotate - [select for diffs], Tue Dec 20 22:09:41 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.223: +11 -13 lines
Diff to previous 1.223 (colored)

move info on ssh return values and config files up into the main
description;

Revision 1.223 / (download) - annotate - [select for diffs], Tue Dec 20 22:02:50 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.222: +5 -5 lines
Diff to previous 1.222 (colored)

.Ss -> .Sh: subsections have not made this page more readable

Revision 1.222 / (download) - annotate - [select for diffs], Tue Dec 20 21:59:43 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.221: +90 -75 lines
Diff to previous 1.221 (colored)

merge the sections on protocols 1 and 2 into one section on authentication;

feedback djm dtucker
ok deraadt markus dtucker

Revision 1.221 / (download) - annotate - [select for diffs], Fri Dec 16 18:14:40 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.220: +2 -2 lines
Diff to previous 1.220 (colored)

signpost the protocol sections;

Revision 1.220 / (download) - annotate - [select for diffs], Fri Dec 16 18:12:22 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.219: +7 -7 lines
Diff to previous 1.219 (colored)

make the description of -c a little nicer;

Revision 1.219 / (download) - annotate - [select for diffs], Fri Dec 16 18:08:53 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.218: +2 -3 lines
Diff to previous 1.218 (colored)

simplify a sentence;

Revision 1.218 / (download) - annotate - [select for diffs], Fri Dec 16 18:07:08 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.217: +762 -762 lines
Diff to previous 1.217 (colored)

move the option descriptions up the page: start of a restructure;
ok markus deraadt

Revision 1.217 / (download) - annotate - [select for diffs], Thu Dec 8 14:59:44 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.216: +2 -3 lines
Diff to previous 1.216 (colored)

make `!command' a little clearer;
ok reyk

Revision 1.216 / (download) - annotate - [select for diffs], Wed Dec 7 10:52:13 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.215: +6 -4 lines
Diff to previous 1.215 (colored)

- avoid line split in SYNOPSIS
- add args to -w
- kill trailing whitespace

Revision 1.215 / (download) - annotate - [select for diffs], Tue Dec 6 22:38:27 2005 UTC (18 years, 5 months ago) by reyk
Branch: MAIN
Changes since 1.214: +19 -1 lines
Diff to previous 1.214 (colored)

Add support for tun(4) forwarding over OpenSSH, based on an idea and
initial channel code bits by markus@. This is a simple and easy way to
use OpenSSH for ad hoc virtual private network connections, e.g.
administrative tunnels or secure wireless access. It's based on a new
ssh channel and works similar to the existing TCP forwarding support,
except that it depends on the tun(4) network interface on both ends of
the connection for layer 2 or layer 3 tunneling. This diff also adds
support for LocalCommand in the ssh(1) client.

ok djm@, markus@, jmc@ (manpages), tested and discussed with others

Revision 1.214 / (download) - annotate - [select for diffs], Wed Nov 30 11:45:20 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.213: +2 -2 lines
Diff to previous 1.213 (colored)

avoid ambiguities in describing TZ;
ok djm@

Revision 1.213 / (download) - annotate - [select for diffs], Wed Nov 30 11:18:27 2005 UTC (18 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.212: +2 -2 lines
Diff to previous 1.212 (colored)

timezone -> time zone

Revision 1.212 / (download) - annotate - [select for diffs], Mon Sep 19 23:31:31 2005 UTC (18 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.211: +2 -2 lines
Diff to previous 1.211 (colored)

spelling nit from stevesk@

Revision 1.211 / (download) - annotate - [select for diffs], Mon Sep 19 15:38:27 2005 UTC (18 years, 8 months ago) by jmc
Branch: MAIN
Changes since 1.210: +5 -3 lines
Diff to previous 1.210 (colored)

some more .Bk/.Ek to avoid ugly line split;

Revision 1.210 / (download) - annotate - [select for diffs], Mon Sep 19 11:37:34 2005 UTC (18 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.209: +40 -4 lines
Diff to previous 1.209 (colored)

mention ability to specify bind_address for DynamicForward and -D options;
bz#1077 spotted by Haruyama Seigo

Revision 1.205.2.1 / (download) - annotate - [select for diffs], Sun Sep 4 18:40:10 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.205: +45 -39 lines
Diff to previous 1.205 (colored)

upgrade to OpenSSH 4.2

Revision 1.196.2.2 / (download) - annotate - [select for diffs], Fri Sep 2 03:45:01 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.196.2.1: +45 -39 lines
Diff to previous 1.196.2.1 (colored) to branchpoint 1.196 (colored) next main 1.197 (colored)

upgrade to OpenSSH 4.2

Revision 1.209 / (download) - annotate - [select for diffs], Wed Jul 6 09:33:05 2005 UTC (18 years, 10 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE
Branch point for: OPENBSD_3_8
Changes since 1.208: +6 -3 lines
Diff to previous 1.208 (colored)

clarify meaning of ssh -b ; with & ok jmc@

Revision 1.208 / (download) - annotate - [select for diffs], Mon May 23 23:32:46 2005 UTC (18 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.207: +6 -3 lines
Diff to previous 1.207 (colored)

add support for draft-harris-ssh-arcfour-fixes-02 improved arcfour modes;
ok markus@

Revision 1.207 / (download) - annotate - [select for diffs], Thu Apr 21 06:17:50 2005 UTC (19 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.206: +35 -35 lines
Diff to previous 1.206 (colored)

OpenSSH doesn't ever look at the $HOME environment variable, so don't say
that we do (bz #623); ok deraadt@

Revision 1.206 / (download) - annotate - [select for diffs], Thu Apr 14 12:30:30 2005 UTC (19 years, 1 month ago) by jmc
Branch: MAIN
Changes since 1.205: +2 -2 lines
Diff to previous 1.205 (colored)

arg to -b is an address, not if_name;
ok markus@

Revision 1.182.2.2 / (download) - annotate - [select for diffs], Thu Mar 10 17:15:05 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.182.2.1: +115 -64 lines
Diff to previous 1.182.2.1 (colored) to branchpoint 1.182 (colored) next main 1.183 (colored)

upgrade to OpenSSH 4.0

Revision 1.196.2.1 / (download) - annotate - [select for diffs], Thu Mar 10 16:28:28 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.196: +85 -24 lines
Diff to previous 1.196 (colored)

upgrade to OpenSSH 4.0

Revision 1.205 / (download) - annotate - [select for diffs], Mon Mar 7 23:41:54 2005 UTC (19 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE
Branch point for: OPENBSD_3_7
Changes since 1.204: +3 -3 lines
Diff to previous 1.204 (colored)

more macro simplification;

Revision 1.204 / (download) - annotate - [select for diffs], Wed Mar 2 11:45:01 2005 UTC (19 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.203: +2 -2 lines
Diff to previous 1.203 (colored)

missing word;

Revision 1.203 / (download) - annotate - [select for diffs], Wed Mar 2 02:21:07 2005 UTC (19 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.202: +14 -1 lines
Diff to previous 1.202 (colored)

bz#987: mention ForwardX11Trusted in ssh.1,
reported by andrew.benham AT thus.net; ok deraadt@

Revision 1.202 / (download) - annotate - [select for diffs], Tue Mar 1 14:47:58 2005 UTC (19 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.201: +22 -28 lines
Diff to previous 1.201 (colored)

remove some unneccesary macros;
do not mark up punctuation;

Revision 1.201 / (download) - annotate - [select for diffs], Tue Mar 1 10:40:27 2005 UTC (19 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.200: +2 -1 lines
Diff to previous 1.200 (colored)

add support for hashing host names and addresses added to known_hosts files,
to improve privacy of which hosts user have been visiting; ok markus@ deraadt@

Revision 1.200 / (download) - annotate - [select for diffs], Tue Mar 1 10:09:52 2005 UTC (19 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.199: +49 -10 lines
Diff to previous 1.199 (colored)

bz#413: allow optional specification of bind address for port forwardings.
Patch originally by Dan Astorian, but worked on by several people
Adds GatewayPorts=clientspecified option on server to allow remote forwards
to bind to client-specified ports.

ok markus@

Revision 1.199 / (download) - annotate - [select for diffs], Sun Nov 7 17:42:36 2004 UTC (19 years, 6 months ago) by jmc
Branch: MAIN
Changes since 1.198: +13 -13 lines
Diff to previous 1.198 (colored)

options sort, and whitespace;

Revision 1.198 / (download) - annotate - [select for diffs], Sun Nov 7 00:01:46 2004 UTC (19 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.197: +16 -3 lines
Diff to previous 1.197 (colored)

add basic control of a running multiplex master connection; including the
ability to check its status and request it to exit; ok markus@

Revision 1.197 / (download) - annotate - [select for diffs], Thu Oct 7 10:10:24 2004 UTC (19 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.196: +2 -1 lines
Diff to previous 1.196 (colored)

document KbdInteractiveDevices; ok markus@

Revision 1.196 / (download) - annotate - [select for diffs], Mon Aug 30 21:22:49 2004 UTC (19 years, 8 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_6
Changes since 1.195: +2 -2 lines
Diff to previous 1.195 (colored)

.Xsession -> .xsession;
originally from a pr from f at obiit dot org, but missed by myself;

ok markus@ matthieu@

Revision 1.195 / (download) - annotate - [select for diffs], Thu Aug 26 16:00:55 2004 UTC (19 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.194: +30 -40 lines
Diff to previous 1.194 (colored)

get rid of references to rhosts authentication; with jmc@

Revision 1.175.2.2 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:32 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.175.2.1: +85 -19 lines
Diff to previous 1.175.2.1 (colored) to branchpoint 1.175 (colored) next main 1.176 (colored)

upgrade to OpenSSH 3.9

Revision 1.182.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:27 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.182: +84 -19 lines
Diff to previous 1.182 (colored)

upgrade to OpenSSH 3.9

Revision 1.194 / (download) - annotate - [select for diffs], Thu Aug 12 21:41:13 2004 UTC (19 years, 9 months ago) by jakob
Branch: MAIN
Changes since 1.193: +10 -1 lines
Diff to previous 1.193 (colored)

improve SSHFP documentation; ok deraadt@

Revision 1.193 / (download) - annotate - [select for diffs], Sat Jun 26 09:03:21 2004 UTC (19 years, 10 months ago) by jmc
Branch: MAIN
Changes since 1.192: +10 -10 lines
Diff to previous 1.192 (colored)

- remove double word
- rearrange .Bk to keep SYNOPSIS nice
- -M before -m in options description

Revision 1.192 / (download) - annotate - [select for diffs], Fri Jun 18 10:55:43 2004 UTC (19 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.191: +3 -3 lines
Diff to previous 1.191 (colored)

trim synopsis for -S, allow -S and -oControlMaster, -MM means 'ask'; ok djm

Revision 1.191 / (download) - annotate - [select for diffs], Thu Jun 17 23:56:57 2004 UTC (19 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.190: +7 -6 lines
Diff to previous 1.190 (colored)

sync usage() and SYNPOSIS with connection sharing changes

Revision 1.190 / (download) - annotate - [select for diffs], Sun Jun 13 15:03:02 2004 UTC (19 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.189: +24 -2 lines
Diff to previous 1.189 (colored)

implement session multiplexing in the client (the server has supported this
since 2.0); ok markus@

Revision 1.189 / (download) - annotate - [select for diffs], Sun Jun 13 14:01:42 2004 UTC (19 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.188: +37 -14 lines
Diff to previous 1.188 (colored)

List supported ciphers in man pages, tidy up ssh -c;
"looks fine" jmc@, ok markus@

Revision 1.188 / (download) - annotate - [select for diffs], Sat May 22 16:01:05 2004 UTC (19 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.187: +2 -2 lines
Diff to previous 1.187 (colored)

kill whitespace at eol;

Revision 1.187 / (download) - annotate - [select for diffs], Sat May 22 06:32:12 2004 UTC (19 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.186: +3 -3 lines
Diff to previous 1.186 (colored)

use '-h' for help in ~C commandline instead of '-?'; inspired by jmc@

Revision 1.186 / (download) - annotate - [select for diffs], Fri May 21 11:33:11 2004 UTC (20 years ago) by djm
Branch: MAIN
Changes since 1.185: +10 -3 lines
Diff to previous 1.185 (colored)

bz #756: add support for the cancel-tcpip-forward request for the server and
the client (through the ~C commandline). reported by z3p AT twistedmatrix.com;
ok markus@

Revision 1.185 / (download) - annotate - [select for diffs], Sun May 2 11:57:52 2004 UTC (20 years ago) by dtucker
Branch: MAIN
Changes since 1.184: +2 -2 lines
Diff to previous 1.184 (colored)

ConnectionTimeout -> ConnectTimeout, from m.a.ellis at ncl.ac.uk via Debian.
ok djm@

Revision 1.184 / (download) - annotate - [select for diffs], Wed Apr 28 07:13:42 2004 UTC (20 years ago) by jmc
Branch: MAIN
Changes since 1.183: +2 -1 lines
Diff to previous 1.183 (colored)

add SendEnv to -o list;

Revision 1.183 / (download) - annotate - [select for diffs], Mon Apr 19 13:02:40 2004 UTC (20 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.182: +3 -1 lines
Diff to previous 1.182 (colored)

document strict permission checks on ~/.ssh/config; prompted by, with & ok jmc@

Revision 1.182 / (download) - annotate - [select for diffs], Fri Mar 5 10:53:58 2004 UTC (20 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_5
Changes since 1.181: +2 -1 lines
Diff to previous 1.181 (colored)

add IdentitiesOnly; ok djm@, pb@

Revision 1.167.4.3 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:16 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.167.4.2: +280 -210 lines
Diff to previous 1.167.4.2 (colored) to branchpoint 1.167 (colored) next main 1.168 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.175.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:34 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.175: +280 -210 lines
Diff to previous 1.175 (colored)

upgrade to OpenSSH 3.8

Revision 1.181 / (download) - annotate - [select for diffs], Tue Dec 16 15:49:51 2003 UTC (20 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.180: +3 -1 lines
Diff to previous 1.180 (colored)

application layer keep alive (ServerAliveInterval ServerAliveCountMax)
for ssh(1), similar to the sshd(8) option; ok beck@; with help from
jmc and dtucker@

Revision 1.180 / (download) - annotate - [select for diffs], Tue Dec 9 21:53:37 2003 UTC (20 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.179: +2 -2 lines
Diff to previous 1.179 (colored)

rename keepalive to tcpkeepalive; the old name causes too much
confusion; ok djm, dtucker; with help from jmc@

Revision 1.179 / (download) - annotate - [select for diffs], Mon Nov 24 00:16:35 2003 UTC (20 years, 5 months ago) by dtucker
Branch: MAIN
Changes since 1.178: +2 -3 lines
Diff to previous 1.178 (colored)

Make ssh -k mean GSSAPIDelegateCredentials=no. Suggestion & ok markus@

Revision 1.178 / (download) - annotate - [select for diffs], Sat Oct 11 08:24:08 2003 UTC (20 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.177: +5 -2 lines
Diff to previous 1.177 (colored)

remote x11 clients are now untrusted by default, uses xauth(8) to generate
untrusted cookies; ForwardX11Trusted=yes restores old behaviour.
ok deraadt; feedback and ok djm/fries

Revision 1.177 / (download) - annotate - [select for diffs], Wed Oct 8 08:27:36 2003 UTC (20 years, 7 months ago) by jmc
Branch: MAIN
Changes since 1.176: +1 -2 lines
Diff to previous 1.176 (colored)

scp and sftp: add options list and sort options. options list requested
by deraadt@
sshd: use same format as ssh
ssh: remove wrong option from list
sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)

ok deraadt@ markus@

Revision 1.176 / (download) - annotate - [select for diffs], Mon Sep 29 11:40:51 2003 UTC (20 years, 7 months ago) by jmc
Branch: MAIN
Changes since 1.175: +275 -208 lines
Diff to previous 1.175 (colored)

- add list of options to -o and .Xr ssh_config(5)
- some other cleanup

requested by deraadt@;
ok deraadt@ markus@

Revision 1.167.2.2 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:28 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.167.2.1: +29 -22 lines
Diff to previous 1.167.2.1 (colored) to branchpoint 1.167 (colored) next main 1.168 (colored)

upgrade to OpenSSH 3.7

Revision 1.167.4.2 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:44 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.167.4.1: +29 -22 lines
Diff to previous 1.167.4.1 (colored) to branchpoint 1.167 (colored)

upgrade to OpenSSH 3.7

Revision 1.175 / (download) - annotate - [select for diffs], Tue Jul 22 13:35:22 2003 UTC (20 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.174: +2 -2 lines
Diff to previous 1.174 (colored)

remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
test+ok henning@

Revision 1.174 / (download) - annotate - [select for diffs], Wed Jul 2 14:51:16 2003 UTC (20 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.173: +3 -3 lines
Diff to previous 1.173 (colored)

(re)add socks5 suppport to -D; ok djm@
now ssh(1) can act both as a socks 4 and socks 5 server and
dynamically forward ports.

Revision 1.173 / (download) - annotate - [select for diffs], Tue Jun 10 09:12:11 2003 UTC (20 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.172: +12 -11 lines
Diff to previous 1.172 (colored)

- section reorder
- COMPATIBILITY merge
- macro cleanup
- kill whitespace at EOL
- new sentence, new line

ssh pages ok markus@

Revision 1.172 / (download) - annotate - [select for diffs], Tue May 20 12:09:31 2003 UTC (21 years ago) by jmc
Branch: MAIN
Changes since 1.171: +7 -6 lines
Diff to previous 1.171 (colored)

new sentence, new line

Revision 1.171 / (download) - annotate - [select for diffs], Thu May 15 04:08:41 2003 UTC (21 years ago) by markus
Branch: MAIN
Changes since 1.170: +3 -2 lines
Diff to previous 1.170 (colored)

~B is ssh2 only

Revision 1.170 / (download) - annotate - [select for diffs], Wed May 14 22:24:42 2003 UTC (21 years ago) by markus
Branch: MAIN
Changes since 1.169: +3 -1 lines
Diff to previous 1.169 (colored)

allow to send a BREAK to the remote system; ok various

Revision 1.167.4.1 / (download) - annotate - [select for diffs], Sun May 11 12:01:52 2003 UTC (21 years ago) by margarida
Branch: OPENBSD_3_3
Changes since 1.167: +20 -14 lines
Diff to previous 1.167 (colored)

Update OpenSSH to version 3.6.1

Revision 1.169 / (download) - annotate - [select for diffs], Sat Apr 12 11:40:15 2003 UTC (21 years, 1 month ago) by naddy
Branch: MAIN
Changes since 1.168: +6 -4 lines
Diff to previous 1.168 (colored)

document -V switch, fix wording; ok markus@

Revision 1.167.2.1 / (download) - annotate - [select for diffs], Thu Apr 3 23:27:13 2003 UTC (21 years, 1 month ago) by margarida
Branch: OPENBSD_3_2
Changes since 1.167: +20 -14 lines
Diff to previous 1.167 (colored)

Update to OpenSSH 3.6.1

Revision 1.150.2.5 / (download) - annotate - [select for diffs], Thu Apr 3 22:35:18 2003 UTC (21 years, 1 month ago) by miod
Branch: OPENBSD_3_1
Changes since 1.150.2.4: +20 -14 lines
Diff to previous 1.150.2.4 (colored) to branchpoint 1.150 (colored) next main 1.151 (colored)

Merge OpenSSH 3.6.1

Revision 1.168 / (download) - annotate - [select for diffs], Fri Mar 28 10:11:43 2003 UTC (21 years, 1 month ago) by jmc
Branch: MAIN
Changes since 1.167: +20 -14 lines
Diff to previous 1.167 (colored)

- killed whitespace
- new sentence new line
- .Bk for arguments

ok markus@

Revision 1.139.2.7 / (download) - annotate - [select for diffs], Fri Oct 11 14:53:07 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.139.2.6: +37 -20 lines
Diff to previous 1.139.2.6 (colored) to branchpoint 1.139 (colored) next main 1.140 (colored)

Update to OpenSSH 3.5

Revision 1.150.2.4 / (download) - annotate - [select for diffs], Fri Oct 11 14:51:53 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_1
Changes since 1.150.2.3: +37 -20 lines
Diff to previous 1.150.2.3 (colored) to branchpoint 1.150 (colored)

Update to OpenSSH 3.5

Revision 1.167 / (download) - annotate - [select for diffs], Fri Sep 27 15:46:21 2002 UTC (21 years, 7 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_3, OPENBSD_3_2
Changes since 1.166: +2 -2 lines
Diff to previous 1.166 (colored)

clarify compression level protocol 1 only; ok markus@ deraadt@

Revision 1.166 / (download) - annotate - [select for diffs], Thu Sep 12 19:50:36 2002 UTC (21 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.165: +5 -5 lines
Diff to previous 1.165 (colored)

add SSH_CONNECTION and deprecate SSH_CLIENT; bug #384.  ok markus@

Revision 1.165 / (download) - annotate - [select for diffs], Wed Sep 11 17:55:03 2002 UTC (21 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.164: +14 -1 lines
Diff to previous 1.164 (colored)

add agent and X11 forwarding warning text from ssh_config.5; ok markus@

Revision 1.164 / (download) - annotate - [select for diffs], Thu Aug 29 16:02:54 2002 UTC (21 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.163: +2 -11 lines
Diff to previous 1.163 (colored)

deprecate -P as UsePrivilegedPort defaults to no now; ok markus@

Revision 1.163 / (download) - annotate - [select for diffs], Sat Aug 17 23:07:14 2002 UTC (21 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.162: +12 -4 lines
Diff to previous 1.162 (colored)

ForwardAgent has defaulted to no for over 2 years; be more clear here.

Revision 1.162 / (download) - annotate - [select for diffs], Mon Aug 12 17:30:35 2002 UTC (21 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.161: +3 -3 lines
Diff to previous 1.161 (colored)

more PermitUserEnvironment; ok markus@

Revision 1.161 / (download) - annotate - [select for diffs], Fri Aug 2 16:00:07 2002 UTC (21 years, 9 months ago) by marc
Branch: MAIN
Changes since 1.160: +7 -2 lines
Diff to previous 1.160 (colored)

note that .ssh/environment is only read when
allowed (PermitUserEnvironment in sshd_config).
OK markus@

Revision 1.139.2.6 / (download) - annotate - [select for diffs], Wed Jun 26 18:22:36 2002 UTC (21 years, 10 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.139.2.5: +5 -5 lines
Diff to previous 1.139.2.5 (colored) to branchpoint 1.139 (colored)

There was an update to OpenSSH 3.4, and people rejoiced.

Revision 1.150.2.3 / (download) - annotate - [select for diffs], Wed Jun 26 15:30:39 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.150.2.2: +30 -591 lines
Diff to previous 1.150.2.2 (colored) to branchpoint 1.150 (colored)

Pull in OpenSSH-3.4

Revision 1.160 / (download) - annotate - [select for diffs], Sat Jun 22 11:51:39 2002 UTC (21 years, 11 months ago) by naddy
Branch: MAIN
Changes since 1.159: +2 -2 lines
Diff to previous 1.159 (colored)

typo

Revision 1.139.2.5 / (download) - annotate - [select for diffs], Sat Jun 22 07:23:18 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.139.2.4: +32 -593 lines
Diff to previous 1.139.2.4 (colored) to branchpoint 1.139 (colored)

Update OpenSSH to version 3.3 (with local changes, configuration files still
living in /etc and privsep user being nobody).

Revision 1.159 / (download) - annotate - [select for diffs], Sat Jun 22 02:40:23 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.158: +2 -2 lines
Diff to previous 1.158 (colored)

section 5 not 4 for ssh_config

Revision 1.158 / (download) - annotate - [select for diffs], Thu Jun 20 19:56:07 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.157: +13 -556 lines
Diff to previous 1.157 (colored)

move configuration file options from ssh.1/sshd.8 to
ssh_config.5/sshd_config.5; ok deraadt@ millert@

Revision 1.157 / (download) - annotate - [select for diffs], Wed Jun 19 00:27:55 2002 UTC (21 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.156: +2 -2 lines
Diff to previous 1.156 (colored)

KNF done automatically while reading....

Revision 1.156 / (download) - annotate - [select for diffs], Mon Jun 10 17:45:20 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.155: +3 -6 lines
Diff to previous 1.155 (colored)

change RhostsRSAAuthentication and RhostsAuthentication default to no
since ssh is no longer setuid root by default; ok markus@

Revision 1.155 / (download) - annotate - [select for diffs], Sun Jun 9 22:15:15 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.154: +21 -4 lines
Diff to previous 1.154 (colored)

update for no setuid root and ssh-keysign; ok deraadt@

Revision 1.154 / (download) - annotate - [select for diffs], Sat Jun 8 05:17:01 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.153: +2 -34 lines
Diff to previous 1.153 (colored)

deprecate FallBackToRsh and UseRsh; patch from djm@

Revision 1.107.2.5 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:11 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.107.2.4: +10 -5 lines
Diff to previous 1.107.2.4 (colored) to branchpoint 1.107 (colored) next main 1.108 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.153 / (download) - annotate - [select for diffs], Wed May 29 03:06:30 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.152: +2 -2 lines
Diff to previous 1.152 (colored)

spelling

Revision 1.152 / (download) - annotate - [select for diffs], Sun May 26 20:35:10 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.151: +9 -9 lines
Diff to previous 1.151 (colored)

sort ChallengeResponseAuthentication; ok markus@

Revision 1.150.2.2 / (download) - annotate - [select for diffs], Sat May 18 04:50:38 2002 UTC (22 years ago) by jason
Branch: OPENBSD_3_1
Changes since 1.150.2.1: +0 -0 lines
Diff to previous 1.150.2.1 (colored) to branchpoint 1.150 (colored)

Update to OpenSSH-3.2.3

Revision 1.150.2.1 / (download) - annotate - [select for diffs], Sat May 18 04:12:11 2002 UTC (22 years ago) by jason
Branch: OPENBSD_3_1
Changes since 1.150: +2 -3 lines
Diff to previous 1.150 (colored)

Update to OpenSSH-3.2.2

Revision 1.139.2.4 / (download) - annotate - [select for diffs], Fri May 17 00:03:24 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.139.2.3: +10 -5 lines
Diff to previous 1.139.2.3 (colored) to branchpoint 1.139 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.151 / (download) - annotate - [select for diffs], Mon May 6 23:34:33 2002 UTC (22 years ago) by millert
Branch: MAIN
Changes since 1.150: +2 -3 lines
Diff to previous 1.150 (colored)

Kill/adjust r(login|exec)d? references now that those are no longer in
the tree.

Revision 1.150 / (download) - annotate - [select for diffs], Tue Mar 26 11:34:49 2002 UTC (22 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.149: +3 -3 lines
Diff to previous 1.149 (colored)

update to recent drafts

Revision 1.149 / (download) - annotate - [select for diffs], Thu Mar 21 15:17:26 2002 UTC (22 years, 2 months ago) by jakob
Branch: MAIN
Changes since 1.148: +7 -1 lines
Diff to previous 1.148 (colored)

add built-in command line for adding new port forwardings on the fly.
based on a patch from brian wellington. ok markus@.

Revision 1.107.2.4 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:45 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.107.2.3: +28 -17 lines
Diff to previous 1.107.2.3 (colored) to branchpoint 1.107 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.64.2.8 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:43 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.64.2.7: +28 -17 lines
Diff to previous 1.64.2.7 (colored) to branchpoint 1.64 (colored) next main 1.65 (colored)

Merge OpenSSH 3.1.

Revision 1.139.2.3 / (download) - annotate - [select for diffs], Fri Mar 8 15:17:18 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_3_0
Changes since 1.139.2.2: +13 -13 lines
Diff to previous 1.139.2.2 (colored) to branchpoint 1.139 (colored)

apply the necessary openbsd30_3.1.patch patch.
--
Ok'd by markus@

Revision 1.139.2.2 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:47 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.139.2.1: +40 -29 lines
Diff to previous 1.139.2.1 (colored) to branchpoint 1.139 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.148 / (download) - annotate - [select for diffs], Mon Feb 18 17:55:20 2002 UTC (22 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.147: +1 -2 lines
Diff to previous 1.147 (colored)

-q: Fatal errors are _not_ displayed.

Revision 1.147 / (download) - annotate - [select for diffs], Sat Feb 9 17:37:34 2002 UTC (22 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.146: +13 -13 lines
Diff to previous 1.146 (colored)

move ssh config files to /etc/ssh

Revision 1.146 / (download) - annotate - [select for diffs], Sun Feb 3 22:35:57 2002 UTC (22 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.145: +3 -4 lines
Diff to previous 1.145 (colored)

some KeepAlive cleanup/clarify; ok markus@

Revision 1.145 / (download) - annotate - [select for diffs], Tue Jan 29 23:50:37 2002 UTC (22 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.144: +7 -3 lines
Diff to previous 1.144 (colored)

mention exit status; ok stevesk@

Revision 1.144 / (download) - annotate - [select for diffs], Wed Jan 16 17:42:33 2002 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.143: +15 -7 lines
Diff to previous 1.143 (colored)

correct defaults for -i/IdentityFile; ok markus@

Revision 1.143 / (download) - annotate - [select for diffs], Sat Jan 5 21:51:56 2002 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.142: +3 -3 lines
Diff to previous 1.142 (colored)

some missing and misplaced periods

Revision 1.142 / (download) - annotate - [select for diffs], Fri Dec 28 22:37:48 2001 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.141: +4 -3 lines
Diff to previous 1.141 (colored)

document LogLevel DEBUG[123]; ok markus@

Revision 1.107.2.3 / (download) - annotate - [select for diffs], Thu Nov 15 22:51:15 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.107.2.2: +11 -2 lines
Diff to previous 1.107.2.2 (colored) to branchpoint 1.107 (colored)

Merge OpenSSH 3.0.1.

Revision 1.64.2.7 / (download) - annotate - [select for diffs], Thu Nov 15 22:50:30 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.64.2.6: +11 -2 lines
Diff to previous 1.64.2.6 (colored) to branchpoint 1.64 (colored)

Merge OpenSSH 3.0.1.

This is likely to be the last commit to the 2.8-STABLE branch.

Revision 1.107.2.2 / (download) - annotate - [select for diffs], Thu Nov 15 00:15:19 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.107.2.1: +11 -1 lines
Diff to previous 1.107.2.1 (colored) to branchpoint 1.107 (colored)

Merge OpenSSH 3.0

Revision 1.64.2.6 / (download) - annotate - [select for diffs], Thu Nov 15 00:15:00 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.64.2.5: +11 -1 lines
Diff to previous 1.64.2.5 (colored) to branchpoint 1.64 (colored)

Merge OpenSSH 3.0

Revision 1.139.2.1 / (download) - annotate - [select for diffs], Wed Nov 14 03:24:39 2001 UTC (22 years, 6 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.139: +11 -2 lines
Diff to previous 1.139 (colored)

Pull in patches from current (Errata 002):
Update to OpenSSH-3.0.1 via errata patch (Instead of using release tarball)

Revision 1.141 / (download) - annotate - [select for diffs], Thu Nov 8 17:49:53 2001 UTC (22 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.140: +10 -1 lines
Diff to previous 1.140 (colored)

mention setuid root requirements; noted by cnorris@csc.UVic.ca; ok stevesk@

Revision 1.140 / (download) - annotate - [select for diffs], Tue Oct 30 20:29:09 2001 UTC (22 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.139: +2 -2 lines
Diff to previous 1.139 (colored)

ssh.1

Revision 1.139 / (download) - annotate - [select for diffs], Mon Oct 1 21:51:16 2001 UTC (22 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.138: +11 -1 lines
Diff to previous 1.138 (colored)

add NoHostAuthenticationForLocalhost; note that the hostkey is
now check for localhost, too.

Revision 1.107.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:55 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.107: +225 -120 lines
Diff to previous 1.107 (colored)

Pull in OpenSSH-2.9.9

Revision 1.64.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:42 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.64.2.4: +225 -120 lines
Diff to previous 1.64.2.4 (colored) to branchpoint 1.64 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.138 / (download) - annotate - [select for diffs], Wed Sep 19 19:24:19 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.137: +17 -1 lines
Diff to previous 1.137 (colored)

add ClearAllForwardings ssh option and set it in scp and sftp; ok markus@

Revision 1.137 / (download) - annotate - [select for diffs], Wed Sep 5 06:23:07 2001 UTC (22 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.136: +18 -18 lines
Diff to previous 1.136 (colored)

avoid first person in manual pages

Revision 1.136 / (download) - annotate - [select for diffs], Thu Aug 30 16:04:35 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.135: +9 -5 lines
Diff to previous 1.135 (colored)

validate ports for LocalForward/RemoteForward.
add host/port alternative syntax for IPv6 (like -L/-R).
ok markus@

Revision 1.135 / (download) - annotate - [select for diffs], Thu Aug 30 15:42:36 2001 UTC (22 years, 8 months ago) by naddy
Branch: MAIN
Changes since 1.134: +2 -1 lines
Diff to previous 1.134 (colored)

add -D to synopsis line; ok markus@

Revision 1.134 / (download) - annotate - [select for diffs], Wed Aug 29 23:39:40 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.133: +10 -1 lines
Diff to previous 1.133 (colored)

additional documentation for GatewayPorts; ok markus@

Revision 1.133 / (download) - annotate - [select for diffs], Wed Aug 29 23:13:11 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.132: +26 -1 lines
Diff to previous 1.132 (colored)

document -D and DynamicForward; ok markus@

Revision 1.132 / (download) - annotate - [select for diffs], Tue Aug 28 15:39:48 2001 UTC (22 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.131: +10 -1 lines
Diff to previous 1.131 (colored)

allow: ssh -F configfile host

Revision 1.131 / (download) - annotate - [select for diffs], Wed Aug 22 17:45:16 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.130: +21 -8 lines
Diff to previous 1.130 (colored)

document cipher des for protocol 1; ok deraadt@

Revision 1.130 / (download) - annotate - [select for diffs], Wed Aug 22 16:21:21 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.129: +3 -3 lines
Diff to previous 1.129 (colored)

hostname not optional; ok markus@

Revision 1.129 / (download) - annotate - [select for diffs], Tue Aug 21 21:47:41 2001 UTC (22 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.128: +4 -4 lines
Diff to previous 1.128 (colored)

minor typos and cleanup

Revision 1.128 / (download) - annotate - [select for diffs], Thu Aug 16 20:14:57 2001 UTC (22 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.127: +3 -3 lines
Diff to previous 1.127 (colored)

document case sensitivity for ssh, sshd and key file
options and arguments; ok markus@

Revision 1.127 / (download) - annotate - [select for diffs], Tue Aug 14 17:54:29 2001 UTC (22 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.126: +16 -4 lines
Diff to previous 1.126 (colored)

consistent documentation and example of ``-o ssh_option'' for sftp and
scp; document keyword=argument for ssh.

Revision 1.126 / (download) - annotate - [select for diffs], Wed Aug 1 22:16:45 2001 UTC (22 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.125: +3 -3 lines
Diff to previous 1.125 (colored)

refer to current ietf drafts for protocol v2

Revision 1.125 / (download) - annotate - [select for diffs], Tue Jul 31 09:28:44 2001 UTC (22 years, 9 months ago) by jakob
Branch: MAIN
Changes since 1.124: +14 -1 lines
Diff to previous 1.124 (colored)

add 'SmartcardDevice' client option to specify which smartcard device is used
to access a smartcard used for storing the user's private RSA key. ok markus@.

Revision 1.124 / (download) - annotate - [select for diffs], Wed Jul 25 14:35:18 2001 UTC (22 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.123: +2 -2 lines
Diff to previous 1.123 (colored)

cleanup connect(); connection_attempts 4 -> 1; from eivind@freebsd.org

Revision 1.123 / (download) - annotate - [select for diffs], Mon Jul 23 12:47:05 2001 UTC (22 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.122: +6 -8 lines
Diff to previous 1.122 (colored)

sync PreferredAuthentications

Revision 1.122 / (download) - annotate - [select for diffs], Sun Jul 22 22:04:19 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.121: +2 -5 lines
Diff to previous 1.121 (colored)

enable challenge-response auth by default; ok millert@

Revision 1.121 / (download) - annotate - [select for diffs], Sun Jul 22 21:32:42 2001 UTC (22 years, 10 months ago) by pvalchev
Branch: MAIN
Changes since 1.120: +2 -2 lines
Diff to previous 1.120 (colored)

There is no option "Compress", point to "Compression" instead; ok markus

Revision 1.120 / (download) - annotate - [select for diffs], Fri Jul 20 18:41:51 2001 UTC (22 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.119: +3 -3 lines
Diff to previous 1.119 (colored)

"the" command line

Revision 1.119 / (download) - annotate - [select for diffs], Thu Jul 19 00:41:44 2001 UTC (22 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.118: +2 -2 lines
Diff to previous 1.118 (colored)

escape chars are below now

Revision 1.118 / (download) - annotate - [select for diffs], Tue Jun 26 17:25:34 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.117: +24 -1 lines
Diff to previous 1.117 (colored)

document SSH_ASKPASS; fubob@MIT.EDU

Revision 1.117 / (download) - annotate - [select for diffs], Sat Jun 23 17:48:19 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.116: +10 -10 lines
Diff to previous 1.116 (colored)

kill whitespace at EOL.

Revision 1.116 / (download) - annotate - [select for diffs], Sat Jun 23 02:34:31 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.115: +14 -37 lines
Diff to previous 1.115 (colored)

get rid of known_hosts2, use it for hostkey lookup, but do not modify.

Revision 1.115 / (download) - annotate - [select for diffs], Fri Jun 22 21:55:49 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.114: +4 -12 lines
Diff to previous 1.114 (colored)

merge authorized_keys2 into authorized_keys.
authorized_keys2 is used for backward compat.
(just append authorized_keys2 to authorized_keys).

Revision 1.114 / (download) - annotate - [select for diffs], Fri Jun 22 10:17:51 2001 UTC (22 years, 11 months ago) by mpech
Branch: MAIN
Changes since 1.113: +2 -2 lines
Diff to previous 1.113 (colored)

o) .Sh AUTHOR -> .Sh AUTHORS;
o) remove unnecessary .Pp;
o) better -mdoc style;
o) typo;
o) sort SEE ALSO;

aaron@ ok

Revision 1.113 / (download) - annotate - [select for diffs], Sat May 19 16:46:19 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.112: +2 -6 lines
Diff to previous 1.112 (colored)

document MACs defaults with .Dq

Revision 1.112 / (download) - annotate - [select for diffs], Sat May 19 16:32:16 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.111: +3 -3 lines
Diff to previous 1.111 (colored)

change preferredauthentication order to
	publickey,hostbased,password,keyboard-interactive
document that hostbased defaults to no, document order

Revision 1.111 / (download) - annotate - [select for diffs], Thu May 17 21:34:15 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.110: +2 -2 lines
Diff to previous 1.110 (colored)

no spaces in PreferredAuthentications; meixner@rbg.informatik.tu-darmstadt.de

Revision 1.110 / (download) - annotate - [select for diffs], Tue May 15 22:04:01 2001 UTC (23 years ago) by deraadt
Branch: MAIN
Changes since 1.109: +11 -2 lines
Diff to previous 1.109 (colored)

X11 forwarding details improved

Revision 1.64.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:36 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.64.2.3: +143 -65 lines
Diff to previous 1.64.2.3 (colored) to branchpoint 1.64 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.109 / (download) - annotate - [select for diffs], Fri May 4 14:21:55 2001 UTC (23 years ago) by stevesk
Branch: MAIN
Changes since 1.108: +3 -3 lines
Diff to previous 1.108 (colored)

typos

Revision 1.108 / (download) - annotate - [select for diffs], Mon Apr 30 11:18:52 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.107: +12 -1 lines
Diff to previous 1.107 (colored)

implement 'ssh -b bind_address' like 'telnet -b'

Revision 1.107 / (download) - annotate - [select for diffs], Sun Apr 22 23:58:36 2001 UTC (23 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.106: +63 -37 lines
Diff to previous 1.106 (colored)

document hostbased and other cleanup

Revision 1.106 / (download) - annotate - [select for diffs], Sun Apr 22 13:32:27 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.105: +12 -1 lines
Diff to previous 1.105 (colored)

xref draft-ietf-secsh-*

Revision 1.105 / (download) - annotate - [select for diffs], Sun Apr 22 08:13:30 2001 UTC (23 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.104: +4 -4 lines
Diff to previous 1.104 (colored)

typos spotted by stevesk@; ok deraadt@

Revision 1.104 / (download) - annotate - [select for diffs], Fri Apr 20 07:17:51 2001 UTC (23 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.103: +38 -25 lines
Diff to previous 1.103 (colored)

Split out and improve escape character documentation, mention ~R in
~? help text; ok markus@

Revision 1.103 / (download) - annotate - [select for diffs], Tue Apr 17 10:53:26 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.102: +6 -1 lines
Diff to previous 1.102 (colored)

add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@

Revision 1.102 / (download) - annotate - [select for diffs], Tue Apr 10 09:13:22 2001 UTC (23 years, 1 month ago) by itojun
Branch: MAIN
Changes since 1.101: +12 -7 lines
Diff to previous 1.101 (colored)

document id_rsa{.pub,}.  markus ok

Revision 1.101 / (download) - annotate - [select for diffs], Thu Apr 5 15:45:43 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.100: +4 -4 lines
Diff to previous 1.100 (colored)

ssh defaults to protocol v2; from quisar@quisar.ambre.net

Revision 1.100 / (download) - annotate - [select for diffs], Mon Mar 26 15:47:59 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.99: +22 -4 lines
Diff to previous 1.99 (colored)

document more defaults; misc. cleanup.  ok markus@

Revision 1.64.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:30 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.64.2.2: +38 -20 lines
Diff to previous 1.64.2.2 (colored) to branchpoint 1.64 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.52.2.5 / (download) - annotate - [select for diffs], Wed Mar 21 18:53:11 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.52.2.4: +38 -20 lines
Diff to previous 1.52.2.4 (colored) to branchpoint 1.52 (colored) next main 1.53 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.99 / (download) - annotate - [select for diffs], Mon Mar 19 12:49:51 2001 UTC (23 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.98: +9 -1 lines
Diff to previous 1.98 (colored)

document PreferredAuthentications options; ok markus@

Revision 1.52.2.4 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:16 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.52.2.3: +114 -84 lines
Diff to previous 1.52.2.3 (colored) to branchpoint 1.52 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.98 / (download) - annotate - [select for diffs], Thu Mar 8 00:15:48 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.97: +2 -2 lines
Diff to previous 1.97 (colored)

turn off useprivilegedports by default. only rhost-auth needs
this. older sshd's may need this, too.

Revision 1.97 / (download) - annotate - [select for diffs], Wed Mar 7 04:05:58 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.96: +1 -4 lines
Diff to previous 1.96 (colored)

removed dated comment

Revision 1.96 / (download) - annotate - [select for diffs], Wed Mar 7 01:19:06 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.95: +3 -3 lines
Diff to previous 1.95 (colored)

the name "secure shell" is boring, noone ever uses it

Revision 1.95 / (download) - annotate - [select for diffs], Mon Mar 5 17:40:48 2001 UTC (23 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.94: +18 -5 lines
Diff to previous 1.94 (colored)

more ssh_known_hosts2 documentation; ok markus@

Revision 1.94 / (download) - annotate - [select for diffs], Mon Mar 5 15:56:16 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.93: +4 -4 lines
Diff to previous 1.93 (colored)

switch to aes128-cbc/hmac-md5 by default in SSH2 -- faster; provos & markus ok

Revision 1.93 / (download) - annotate - [select for diffs], Fri Mar 2 18:54:31 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.92: +4 -4 lines
Diff to previous 1.92 (colored)

make copyright lines the same format

Revision 1.92 / (download) - annotate - [select for diffs], Thu Feb 22 21:57:26 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.91: +4 -4 lines
Diff to previous 1.91 (colored)

typos/grammar from matt@anzen.com

Revision 1.64.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:32 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.64.2.1: +0 -0 lines
Diff to previous 1.64.2.1 (colored) to branchpoint 1.64 (colored)

Pull in OpenSSH-2.5.1

Revision 1.64.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:19 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.64: +114 -84 lines
Diff to previous 1.64 (colored)

Pull in OpenSSH 2.5.0

Revision 1.91 / (download) - annotate - [select for diffs], Sun Feb 11 12:59:25 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.90: +21 -1 lines
Diff to previous 1.90 (colored)

1) clean up the MAC support for SSH-2
2) allow you to specify the MAC with 'ssh -m'
3) or the 'MACs' keyword in ssh(d)_config
4) add hmac-{md5,sha1}-96
	ok stevesk@, provos@

Revision 1.90 / (download) - annotate - [select for diffs], Sat Feb 10 16:03:29 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.89: +5 -4 lines
Diff to previous 1.89 (colored)

add xref Ciphers to -c

Revision 1.89 / (download) - annotate - [select for diffs], Sat Feb 10 15:48:53 2001 UTC (23 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.88: +1 -17 lines
Diff to previous 1.88 (colored)

remove mapping of argv[0] -> hostname; ok markus@

Revision 1.88 / (download) - annotate - [select for diffs], Fri Feb 9 18:18:26 2001 UTC (23 years, 3 months ago) by provos
Branch: MAIN
Changes since 1.87: +7 -2 lines
Diff to previous 1.87 (colored)

correct default ciphers

Revision 1.87 / (download) - annotate - [select for diffs], Thu Feb 8 19:22:38 2001 UTC (23 years, 3 months ago) by itojun
Branch: MAIN
Changes since 1.86: +2 -3 lines
Diff to previous 1.86 (colored)

drop references to ssl(8).  markus ok

Revision 1.86 / (download) - annotate - [select for diffs], Tue Feb 6 23:05:44 2001 UTC (23 years, 3 months ago) by jakob
Branch: MAIN
Changes since 1.85: +2 -2 lines
Diff to previous 1.85 (colored)

add missing -1 option

Revision 1.85 / (download) - annotate - [select for diffs], Tue Feb 6 23:03:24 2001 UTC (23 years, 3 months ago) by jakob
Branch: MAIN
Changes since 1.84: +5 -1 lines
Diff to previous 1.84 (colored)

add -1 option (force protocol version 1). ok markus@

Revision 1.84 / (download) - annotate - [select for diffs], Sun Feb 4 15:10:44 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.83: +2 -2 lines
Diff to previous 1.83 (colored)

typo; dpo@club-internet.fr

Revision 1.83 / (download) - annotate - [select for diffs], Sun Feb 4 11:11:55 2001 UTC (23 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.82: +2 -1 lines
Diff to previous 1.82 (colored)

Basic interactive sftp client; ok theo@

Revision 1.82 / (download) - annotate - [select for diffs], Sat Feb 3 17:03:05 2001 UTC (23 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.81: +3 -3 lines
Diff to previous 1.81 (colored)

typos; ok markus@

Revision 1.81 / (download) - annotate - [select for diffs], Sat Feb 3 10:19:50 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.80: +4 -3 lines
Diff to previous 1.80 (colored)

Skey is now called ChallengeResponse

Revision 1.80 / (download) - annotate - [select for diffs], Mon Jan 29 12:36:10 2001 UTC (23 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.79: +6 -2 lines
Diff to previous 1.79 (colored)

Allow invocation of sybsystem by commandline (-s); ok markus@

Revision 1.79 / (download) - annotate - [select for diffs], Sun Jan 28 20:36:16 2001 UTC (23 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.78: +24 -11 lines
Diff to previous 1.78 (colored)

``StrictHostKeyChecking ask'' documentation and small cleanup.
ok markus@

Revision 1.78 / (download) - annotate - [select for diffs], Sun Jan 28 10:24:04 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.77: +9 -32 lines
Diff to previous 1.77 (colored)

cleanup AUTHORS sections

Revision 1.77 / (download) - annotate - [select for diffs], Thu Jan 18 16:20:22 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.76: +3 -3 lines
Diff to previous 1.76 (colored)

log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many systems

Revision 1.76 / (download) - annotate - [select for diffs], Sun Jan 7 11:28:06 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.75: +3 -3 lines
Diff to previous 1.75 (colored)

rename SYSLOG_LEVEL_INFO->SYSLOG_LEVEL_NOTICE
syslog priority changes:
	fatal() LOG_ERR  -> LOG_CRIT
	log()   LOG_INFO -> LOG_NOTICE

Revision 1.75 / (download) - annotate - [select for diffs], Thu Jan 4 22:35:32 2001 UTC (23 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.74: +2 -2 lines
Diff to previous 1.74 (colored)

Mention AES as available SSH2 Cipher; ok markus

Revision 1.74 / (download) - annotate - [select for diffs], Wed Dec 27 12:30:20 2000 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.73: +7 -1 lines
Diff to previous 1.73 (colored)

new option: HostKeyAlias: allows the user to record the host key
under a different name. This is useful for ssh tunneling over
forwarded connections or if you run multiple sshd's on different
ports on the same machine.

Revision 1.73 / (download) - annotate - [select for diffs], Wed Dec 27 11:51:53 2000 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.72: +13 -5 lines
Diff to previous 1.72 (colored)

multiple -t force pty allocation, document ORIGINAL_COMMAND

Revision 1.72 / (download) - annotate - [select for diffs], Tue Dec 12 23:11:48 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.71: +5 -3 lines
Diff to previous 1.71 (colored)

rhosts-rsa is no longer automagically disabled if ssh is not privileged.
UsePrivilegedPort=no disables rhosts-rsa _only_ for old servers.
these changes should not change the visible default behaviour of the ssh client.

Revision 1.71 / (download) - annotate - [select for diffs], Thu Dec 7 04:24:59 2000 UTC (23 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.70: +2 -2 lines
Diff to previous 1.70 (colored)

Typo fix from Wilfredo Sanchez <wsanchez@apple.com>; ok theo

Revision 1.70 / (download) - annotate - [select for diffs], Fri Dec 1 00:00:51 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.69: +2 -2 lines
Diff to previous 1.69 (colored)

typo; from green@FreeBSD.org

Revision 1.69 / (download) - annotate - [select for diffs], Thu Nov 30 07:04:02 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.68: +2 -2 lines
Diff to previous 1.68 (colored)

-T is for both protocols

Revision 1.68 / (download) - annotate - [select for diffs], Sun Nov 12 19:50:38 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.67: +10 -22 lines
Diff to previous 1.67 (colored)

add support for RSA to SSH2.  please test.

there are now 3 types of keys: RSA1 is used by ssh-1 only,
RSA and DSA are used by SSH2.

you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
keys for SSH2 and use the RSA keys for hostkeys or for user keys.

SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.

IdentityFile2, HostDsaKey and DSAAuthentication are obsolete.
you can use multiple IdentityFile and HostKey for all types of keys.

the option DSAAuthentication is replaced by PubkeyAuthetication.

Revision 1.67 / (download) - annotate - [select for diffs], Fri Nov 10 05:10:40 2000 UTC (23 years, 6 months ago) by aaron
Branch: MAIN
Changes since 1.66: +2 -2 lines
Diff to previous 1.66 (colored)

- Section shuffling: comply to the section ordering outlined in mdoc(7).
- Some .Nm trimming.
- .Sh AUTHOR -> .Sh AUTHORS
- Other miscellaneous fixes here and there.

Revision 1.66 / (download) - annotate - [select for diffs], Wed Nov 8 23:51:08 2000 UTC (23 years, 6 months ago) by aaron
Branch: MAIN
Changes since 1.65: +17 -1 lines
Diff to previous 1.65 (colored)

Document that rsh and ssh will take their invocation name as a hostname to
connect to if argv[0] is not one of the standard program names; closes
PR/1493. While I'm here, change the "host" argument in rsh(1) to "hostname"
for consistency, and also remove some redundancy in the option descriptions.

Revision 1.52.2.3 / (download) - annotate - [select for diffs], Wed Nov 8 21:31:23 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.52.2.2: +41 -11 lines
Diff to previous 1.52.2.2 (colored) to branchpoint 1.52 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.65 / (download) - annotate - [select for diffs], Wed Nov 8 19:37:33 2000 UTC (23 years, 6 months ago) by aaron
Branch: MAIN
Changes since 1.64: +3 -2 lines
Diff to previous 1.64 (colored)

- Get rid of ".Sh OPTIONS" and always use the standard options list intro.
- Move some BUGS/CAVEATS to the end of the man pages where they should go.
- Correct some .Nm usage.

Revision 1.64 / (download) - annotate - [select for diffs], Mon Oct 16 21:46:31 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.63: +4 -4 lines
Diff to previous 1.63 (colored)

fixes from pekkas@netcore.fi

Revision 1.63 / (download) - annotate - [select for diffs], Mon Oct 16 09:38:44 2000 UTC (23 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.62: +1 -0 lines
Diff to previous 1.62 (colored)

Add idents for files which lack them

Fix idents Id -> OpenBSD for the rest

Revision 1.62 / (download) - annotate - [select for diffs], Sat Oct 14 12:09:46 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.61: +3 -2 lines
Diff to previous 1.61 (colored)

Cipher is for SSH-1 only

Revision 1.61 / (download) - annotate - [select for diffs], Fri Oct 13 17:20:44 2000 UTC (23 years, 7 months ago) by aaron
Branch: MAIN
Changes since 1.60: +5 -3 lines
Diff to previous 1.60 (colored)

Repair formatting errors introduced after 2.7.

Revision 1.60 / (download) - annotate - [select for diffs], Tue Sep 12 20:53:10 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.59: +1 -0 lines
Diff to previous 1.59 (colored)

multiple debug levels

Revision 1.59 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:54 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.58: +28 -5 lines
Diff to previous 1.58 (colored)

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.58 / (download) - annotate - [select for diffs], Sun Sep 3 15:23:28 2000 UTC (23 years, 8 months ago) by itojun
Branch: MAIN
Changes since 1.57: +3 -1 lines
Diff to previous 1.57 (colored)

add missing .El against .Bl.

Revision 1.52.2.2 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:23 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.52.2.1: +2 -6 lines
Diff to previous 1.52.2.1 (colored) to branchpoint 1.52 (colored)

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.57 / (download) - annotate - [select for diffs], Fri Aug 25 16:16:15 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.56: +1 -5 lines
Diff to previous 1.56 (colored)

no need for those dynamic libraries anymore

Revision 1.56 / (download) - annotate - [select for diffs], Wed Jul 26 17:46:50 2000 UTC (23 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.55: +2 -2 lines
Diff to previous 1.55 (colored)

typo

Revision 1.52.2.1 / (download) - annotate - [select for diffs], Mon Jun 12 02:37:36 2000 UTC (23 years, 11 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.52: +20 -4 lines
Diff to previous 1.52 (colored)

lovin' CVS... update patch branch to OpenSSH-2.1.1

Revision 1.55 / (download) - annotate - [select for diffs], Wed May 31 06:36:40 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.54: +7 -1 lines
Diff to previous 1.54 (colored)

xauth_location support; pr 1234

Revision 1.54 / (download) - annotate - [select for diffs], Mon May 29 20:20:46 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.53: +8 -4 lines
Diff to previous 1.53 (colored)

forwardagent defaults to no, add ssh -A

Revision 1.53 / (download) - annotate - [select for diffs], Mon May 15 06:54:03 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.52: +8 -2 lines
Diff to previous 1.52 (colored)

document ssh -T -N (ssh2 only)

Revision 1.52 / (download) - annotate - [select for diffs], Mon May 8 17:21:32 2000 UTC (24 years ago) by hugh
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.51: +2 -2 lines
Diff to previous 1.51 (colored)

zap typo

Revision 1.51 / (download) - annotate - [select for diffs], Mon May 8 17:12:15 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.50: +10 -5 lines
Diff to previous 1.50 (colored)

complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)

Revision 1.50 / (download) - annotate - [select for diffs], Sat May 6 17:45:37 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.49: +13 -2 lines
Diff to previous 1.49 (colored)

add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8

Revision 1.49 / (download) - annotate - [select for diffs], Wed May 3 22:01:09 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.48: +66 -18 lines
Diff to previous 1.48 (colored)

more info on proto 2

Revision 1.48 / (download) - annotate - [select for diffs], Wed May 3 18:04:39 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.47: +45 -15 lines
Diff to previous 1.47 (colored)

more doc on: DSA, id_dsa, known_hosts2, authorized_keys2

Revision 1.47 / (download) - annotate - [select for diffs], Tue May 2 22:01:55 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.46: +6 -3 lines
Diff to previous 1.46 (colored)

update AUTHOR

Revision 1.46 / (download) - annotate - [select for diffs], Fri Apr 14 10:11:12 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.45: +6 -2 lines
Diff to previous 1.45 (colored)

ssh -2

Revision 1.45 / (download) - annotate - [select for diffs], Wed Apr 12 23:00:28 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.44: +18 -1 lines
Diff to previous 1.44 (colored)

document Protocol, Ciphers

Revision 1.44 / (download) - annotate - [select for diffs], Wed Apr 12 21:47:51 2000 UTC (24 years, 1 month ago) by aaron
Branch: MAIN
Changes since 1.43: +36 -36 lines
Diff to previous 1.43 (colored)

Trailing whitespace begone!

Revision 1.43 / (download) - annotate - [select for diffs], Fri Mar 24 03:04:46 2000 UTC (24 years, 1 month ago) by brad
Branch: MAIN
Changes since 1.42: +2 -2 lines
Diff to previous 1.42 (colored)

fix spelling errors, From: FreeBSD

Revision 1.42 / (download) - annotate - [select for diffs], Thu Mar 23 21:39:55 2000 UTC (24 years, 1 month ago) by aaron
Branch: MAIN
Changes since 1.41: +17 -15 lines
Diff to previous 1.41 (colored)

More pedantic man page formatting insanity, lalala

Revision 1.41 / (download) - annotate - [select for diffs], Thu Mar 23 21:11:38 2000 UTC (24 years, 1 month ago) by aaron
Branch: MAIN
Changes since 1.40: +2 -2 lines
Diff to previous 1.40 (colored)

Fix some formatting problems I missed before.

Revision 1.40 / (download) - annotate - [select for diffs], Sat Mar 11 21:40:03 2000 UTC (24 years, 2 months ago) by aaron
Branch: MAIN
Changes since 1.39: +297 -199 lines
Diff to previous 1.39 (colored)

Various cleanups and standardizations.

Revision 1.39 / (download) - annotate - [select for diffs], Sat Mar 4 07:07:05 2000 UTC (24 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.38: +2 -2 lines
Diff to previous 1.38 (colored)

Change invalid 'CHAT' loglevel to 'VERBOSE'

Revision 1.38 / (download) - annotate - [select for diffs], Mon Feb 28 19:51:58 2000 UTC (24 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.37: +3 -1 lines
Diff to previous 1.37 (colored)

turn off x11-fwd for the client, too.

Revision 1.37 / (download) - annotate - [select for diffs], Mon Feb 21 14:19:09 2000 UTC (24 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.36: +8 -12 lines
Diff to previous 1.36 (colored)

do not link to a commercial page..

Revision 1.36 / (download) - annotate - [select for diffs], Tue Feb 15 16:36:14 2000 UTC (24 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.35: +2 -2 lines
Diff to previous 1.35 (colored)

consistent indent. ok aaron@

Revision 1.35 / (download) - annotate - [select for diffs], Sat Jan 22 02:17:50 2000 UTC (24 years, 4 months ago) by aaron
Branch: MAIN
Changes since 1.34: +2 -2 lines
Diff to previous 1.34 (colored)

ie. -> i.e.,

Revision 1.34 / (download) - annotate - [select for diffs], Fri Jan 14 09:47:26 2000 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.33: +30 -27 lines
Diff to previous 1.33 (colored)

sort options, from paskalis@di.uoa.gr; .Xr gzip 1

Revision 1.33 / (download) - annotate - [select for diffs], Fri Jan 14 09:24:31 2000 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.32: +3 -3 lines
Diff to previous 1.32 (colored)

port:host:hostport in SYNOPSIS, from mep@netsec.net

Revision 1.32 / (download) - annotate - [select for diffs], Tue Jan 4 16:57:16 2000 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.31: +18 -4 lines
Diff to previous 1.31 (colored)

document -4, -6, and 'ssh -L 2022/::1/22'

Revision 1.31 / (download) - annotate - [select for diffs], Sat Dec 25 13:35:55 1999 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.30: +5 -7 lines
Diff to previous 1.30 (colored)

remove ref to .ssh/random_seed, mention .ssh/environment in .Sh FILES, too

Revision 1.30 / (download) - annotate - [select for diffs], Fri Dec 10 04:19:25 1999 UTC (24 years, 5 months ago) by provos
Branch: MAIN
Changes since 1.29: +3 -3 lines
Diff to previous 1.29 (colored)

typo; mark.baushke@solipsa.com

Revision 1.29 / (download) - annotate - [select for diffs], Thu Dec 2 17:23:54 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.28: +4 -1 lines
Diff to previous 1.28 (colored)

CheckHostIP is not available for connects via proxy command

Revision 1.28 / (download) - annotate - [select for diffs], Wed Nov 24 20:15:36 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.27: +2 -2 lines
Diff to previous 1.27 (colored)

postpone fork_after_authentication until command execution,
request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
plus: use daemon() for backgrounding

Revision 1.27 / (download) - annotate - [select for diffs], Mon Nov 22 21:52:41 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.26: +11 -1 lines
Diff to previous 1.26 (colored)

tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
messages. allows use of s/key in windows (ttssh, securecrt) and
ssh-1.2.27 clients without 'ssh -v', ok: niels@

Revision 1.26 / (download) - annotate - [select for diffs], Wed Nov 17 21:08:07 1999 UTC (24 years, 6 months ago) by aaron
Branch: MAIN
Changes since 1.25: +2 -2 lines
Diff to previous 1.25 (colored)

Spell my name right.

Revision 1.25 / (download) - annotate - [select for diffs], Tue Nov 16 22:53:29 1999 UTC (24 years, 6 months ago) by provos
Branch: MAIN
Changes since 1.24: +4 -1 lines
Diff to previous 1.24 (colored)

add OpenSSH information to AUTHOR section. okay markus@

Revision 1.24 / (download) - annotate - [select for diffs], Wed Nov 10 23:36:44 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.23: +7 -1 lines
Diff to previous 1.23 (colored)

add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
obsoletes QuietMode and FascistLogging in sshd.

Revision 1.23 / (download) - annotate - [select for diffs], Tue Nov 9 23:09:58 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.22: +3 -1 lines
Diff to previous 1.22 (colored)

user/958: check ~/.ssh/known_hosts for rhosts-rsa, too, ok niels/millert

Revision 1.22 / (download) - annotate - [select for diffs], Sun Oct 17 16:58:39 1999 UTC (24 years, 7 months ago) by provos
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.21: +4 -1 lines
Diff to previous 1.21 (colored)

mention that verbose mode can be used s/key authentication

Revision 1.21 / (download) - annotate - [select for diffs], Sun Oct 17 00:31:06 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.20: +12 -10 lines
Diff to previous 1.20 (colored)

update trailer, and copy to other pages

Revision 1.20 / (download) - annotate - [select for diffs], Sun Oct 17 00:26:59 1999 UTC (24 years, 7 months ago) by provos
Branch: MAIN
Changes since 1.19: +21 -7 lines
Diff to previous 1.19 (colored)

mention OpenSSH, plus added features.

Revision 1.19 / (download) - annotate - [select for diffs], Sat Oct 16 20:56:52 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.18: +2 -2 lines
Diff to previous 1.18 (colored)

typo, add '-f' to SYNOPSIS

Revision 1.18 / (download) - annotate - [select for diffs], Sat Oct 16 20:47:14 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.17: +2 -2 lines
Diff to previous 1.17 (colored)

support for SSH protocol 1.5 which is poorly documented, the RFC.troff lies.
interops (x11,agent,etc) with 1.2.27 and protocol 1.3

Revision 1.17 / (download) - annotate - [select for diffs], Thu Oct 14 18:17:42 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.16: +4 -11 lines
Diff to previous 1.16 (colored)

fix old connect() race security-bug for ssh-agent and agent-forwarding
by removing the connect() junk, with the following restrictions:
1) change the version to "OpenSSH-1.1":
   agent-forwarding will work only between OpenSSH-1.1 client and
   OpenSSH-1.1 server
2) renamed the environment variable of OpenSSH-1.1 to
   "SSH_AUTH_SOCKET", since useing OpenSSH-1.0 ssh-add against the new
   ssh-agent does not work

Revision 1.16 / (download) - annotate - [select for diffs], Tue Oct 12 21:04:22 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.15: +24 -2 lines
Diff to previous 1.15 (colored)

-P/UsePrivilegedPort from 1.2.27, it turns of allocation of priv. port
and disabled rhosts/rhosts-rsa, ok deraadt@

Revision 1.15 / (download) - annotate - [select for diffs], Mon Oct 11 20:40:08 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.14: +6 -2 lines
Diff to previous 1.14 (colored)

document reality (no askpass, ignore group-world-accessible private keys)

Revision 1.14 / (download) - annotate - [select for diffs], Wed Oct 6 20:07:42 1999 UTC (24 years, 7 months ago) by dugsong
Branch: MAIN
Changes since 1.13: +4 -1 lines
Diff to previous 1.13 (colored)

implement client NumberOfPasswordPrompts option

Revision 1.13 / (download) - annotate - [select for diffs], Sun Oct 3 21:50:04 1999 UTC (24 years, 7 months ago) by provos
Branch: MAIN
Changes since 1.12: +10 -1 lines
Diff to previous 1.12 (colored)

add code to detect DNS spoofing:

the main idea is to not only store the host key for the hostname but
also for the according IP address.  When we check the host key in the
known_hosts file, we also check the key against the according IP address.
When the server key changes, host_status = HOST_CHANGED.  If
check_host_in_hostfile() returns differing status for the IP address
that means that either DNS was spoofed or that the IP address
for the host and the host key changed at the same time.

Revision 1.12 / (download) - annotate - [select for diffs], Sun Oct 3 18:46:12 1999 UTC (24 years, 7 months ago) by aaron
Branch: MAIN
Changes since 1.11: +22 -21 lines
Diff to previous 1.11 (colored)

- Fix up SYNOPSIS sections.
- Remove refereces to /etc/environment and /etc/default/login; markus@
- Document X11DisplayOffset in sshd(8).
- Some other fixes...

Revision 1.11 / (download) - annotate - [select for diffs], Sat Oct 2 21:35:47 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.10: +2 -4 lines
Diff to previous 1.10 (colored)

rhosts-rsa-auth ignores ~/.ssh/known_hosts; markus.friedl@informatik.uni-erlangen.de

Revision 1.10 / (download) - annotate - [select for diffs], Sat Oct 2 21:19:42 1999 UTC (24 years, 7 months ago) by provos
Branch: MAIN
Changes since 1.9: +2 -7 lines
Diff to previous 1.9 (colored)

remove mention of 'none' cipher.

Revision 1.9 / (download) - annotate - [select for diffs], Sat Oct 2 13:10:26 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.8: +3 -4 lines
Diff to previous 1.8 (colored)

detail how we manage to not include RSA, and point people at ssl(8)

Revision 1.8 / (download) - annotate - [select for diffs], Fri Oct 1 18:17:49 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.7: +2 -2 lines
Diff to previous 1.7 (colored)

s/IDEA/3DES/

Revision 1.7 / (download) - annotate - [select for diffs], Thu Sep 30 17:20:44 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.6: +3 -3 lines
Diff to previous 1.6 (colored)

oops, misremembered history. 1.2.12 was the last free version; beck

Revision 1.6 / (download) - annotate - [select for diffs], Thu Sep 30 16:49:00 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.5: +3 -6 lines
Diff to previous 1.5 (colored)

-c none dies

Revision 1.5 / (download) - annotate - [select for diffs], Thu Sep 30 08:52:34 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.4: +30 -35 lines
Diff to previous 1.4 (colored)

initial tweaking

Revision 1.4 / (download) - annotate - [select for diffs], Wed Sep 29 18:16:20 1999 UTC (24 years, 7 months ago) by dugsong
Branch: MAIN
Changes since 1.3: +17 -6 lines
Diff to previous 1.3 (colored)

update krb4/AFS support to ssh-1.2.27-afs-kerberos-pl1 level, clean up unused variables, update manpages

Revision 1.3 / (download) - annotate - [select for diffs], Wed Sep 29 00:10:16 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +13 -2 lines
Diff to previous 1.2 (colored)

GatewayPorts and ssh -g; markus.friedl@informatik.uni-erlangen.de

Revision 1.2 / (download) - annotate - [select for diffs], Sun Sep 26 22:30:06 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.1: +449 -543 lines
Diff to previous 1.1 (colored)

first cut of mandoc man pages from aaron

Revision 1.1 / (download) - annotate - [select for diffs], Sun Sep 26 20:53:37 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN

i bet a lot of people didn't know what ssh 1.2.16 had a nice license.
well, except for the patent issues.  someone in sweden (forget their
name at the moment) cleaned out most of the patented code, and now
this code removes rsa code.  when this is done, it will link against
libssl, but the work isn't completely done yet.  then we need to bring
this up to modern days, featurewise.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

Diffs between
and

Preferred Diff type:
View only Branch:
Sort log by: