CVS log for src/usr.bin/ssh/sshd.8

Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions

Default branch: MAIN

Revision 1.325 / (download) - annotate - [select for diffs], Tue Sep 19 20:37:07 2023 UTC (7 months, 3 weeks ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, HEAD
Changes since 1.324: +2 -2 lines
Diff to previous 1.324 (colored)

typo; from Jim Spath

Revision 1.324 / (download) - annotate - [select for diffs], Fri Feb 10 06:39:27 2023 UTC (15 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE, OPENBSD_7_3
Changes since 1.323: +3 -3 lines
Diff to previous 1.323 (colored)

sort SYNOPSIS;

Revision 1.323 / (download) - annotate - [select for diffs], Fri Feb 10 04:47:19 2023 UTC (15 months ago) by djm
Branch: MAIN
Changes since 1.322: +17 -3 lines
Diff to previous 1.322 (colored)

add a `sshd -G` option that parses and prints the effective
configuration without attempting to load private keys and perform
other checks. This allows usage of the option before keys have been
generated.

bz3460 feedback/ok dtucker@

Revision 1.322 / (download) - annotate - [select for diffs], Wed Jan 18 01:50:21 2023 UTC (15 months, 4 weeks ago) by millert
Branch: MAIN
Changes since 1.321: +5 -3 lines
Diff to previous 1.321 (colored)

Add a -V (version) option to sshd like the ssh client has.
OK markus@ deraadt@

Revision 1.321 / (download) - annotate - [select for diffs], Sun Sep 11 06:38:11 2022 UTC (20 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2
Changes since 1.320: +3 -3 lines
Diff to previous 1.320 (colored)

.Li -> .Vt where appropriate;
from josiah frentsos, tweaked by schwarze

ok schwarze

Revision 1.320 / (download) - annotate - [select for diffs], Thu Aug 11 01:56:51 2022 UTC (21 months ago) by djm
Branch: MAIN
Changes since 1.319: +5 -4 lines
Diff to previous 1.319 (colored)

allow certificate validity intervals, sshsig verification times and
authorized_keys expiry-time options to accept dates in the UTC time
zone in addition to the default of interpreting them in the system
time zone. YYYYMMDD and YYMMDDHHMM[SS] dates/times will be
interpreted as UTC if suffixed with a 'Z' character.

Also allow certificate validity intervals to be specified in raw
seconds-since-epoch as hex value, e.g. -V 0x1234:0x4567890. This
is intended for use by regress tests and other tools that call
ssh-keygen as part of a CA workflow.

bz3468 ok dtucker

Revision 1.319 / (download) - annotate - [select for diffs], Mon May 2 05:40:37 2022 UTC (2 years ago) by jmc
Branch: MAIN
Changes since 1.318: +2 -3 lines
Diff to previous 1.318 (colored)

remove an obsolete rsa1 format example from an example;

from megan batty
ok djm

Revision 1.318 / (download) - annotate - [select for diffs], Thu Mar 31 17:27:27 2022 UTC (2 years, 1 month ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE, OPENBSD_7_1
Changes since 1.317: +3 -3 lines
Diff to previous 1.317 (colored)

man pages: add missing commas between subordinate and main clauses

jmc@ dislikes a comma before "then" in a conditional, so leave those
untouched.

ok jmc@

Revision 1.317 / (download) - annotate - [select for diffs], Fri Sep 10 11:38:38 2021 UTC (2 years, 8 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0
Changes since 1.316: +8 -3 lines
Diff to previous 1.316 (colored)

Document that non-interactive commands are run via the user's shell
using the -c flag.  ok jmc@

Revision 1.316 / (download) - annotate - [select for diffs], Fri Jul 30 14:28:13 2021 UTC (2 years, 9 months ago) by jmc
Branch: MAIN
Changes since 1.315: +9 -7 lines
Diff to previous 1.315 (colored)

fix a formatting error and add some Xr;
from debian at helgefjell de

removed references to rlogin etc. as no longer relevant;
suggested by djm

ok djm dtucker

Revision 1.315 / (download) - annotate - [select for diffs], Fri Jun 4 05:59:18 2021 UTC (2 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.314: +21 -20 lines
Diff to previous 1.314 (colored)

rework authorized_keys example section, removing irrelevant stuff,
de-wrapping the example lines and better aligning the examples with
common usage and FAQs; ok jmc

Revision 1.314 / (download) - annotate - [select for diffs], Sat Apr 3 05:46:41 2021 UTC (3 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.313: +3 -3 lines
Diff to previous 1.313 (colored)

fix incorrect plural; from Ville Skyttä via GHPR#181

Revision 1.313 / (download) - annotate - [select for diffs], Thu Aug 27 01:07:10 2020 UTC (3 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.312: +9 -2 lines
Diff to previous 1.312 (colored)

support for requiring user verified FIDO keys in sshd

This adds a "verify-required" authorized_keys flag and a corresponding
sshd_config option that tells sshd to require that FIDO keys verify the
user identity before completing the signing/authentication attempt.
Whether or not user verification was performed is already baked into the
signature made on the FIDO token, so this is just plumbing that flag
through and adding ways to require it.

feedback and ok markus@

Revision 1.312 / (download) - annotate - [select for diffs], Sat Jan 25 06:03:10 2020 UTC (4 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.311: +4 -4 lines
Diff to previous 1.311 (colored)

mention that permitopen=/PermitOpen do no name to address
translation; prompted by bz3099

Revision 1.311 / (download) - annotate - [select for diffs], Sat Dec 21 20:22:34 2019 UTC (4 years, 4 months ago) by naddy
Branch: MAIN
Changes since 1.310: +3 -3 lines
Diff to previous 1.310 (colored)

Replace the term "security key" with "(FIDO) authenticator".

The polysemous use of "key" was too confusing.  Input from markus@.
ok jmc@

Revision 1.310 / (download) - annotate - [select for diffs], Thu Dec 19 03:50:01 2019 UTC (4 years, 4 months ago) by dtucker
Branch: MAIN
Changes since 1.309: +4 -4 lines
Diff to previous 1.309 (colored)

"Forward security" -> "Forward secrecy" since that's the correct term.
Add "MAC" since we use that acronym in other man pages.  ok naddy@

Revision 1.309 / (download) - annotate - [select for diffs], Tue Dec 17 16:21:07 2019 UTC (4 years, 5 months ago) by naddy
Branch: MAIN
Changes since 1.308: +4 -7 lines
Diff to previous 1.308 (colored)

cut obsolete lists of crypto algorithms from outline of how SSH works
ok markus@ jmc@

Revision 1.308 / (download) - annotate - [select for diffs], Sat Nov 30 07:07:59 2019 UTC (4 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.307: +3 -3 lines
Diff to previous 1.307 (colored)

tweak the Nd lines for a bit of consistency;
ok markus

Revision 1.307 / (download) - annotate - [select for diffs], Mon Nov 25 00:54:23 2019 UTC (4 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.306: +11 -2 lines
Diff to previous 1.306 (colored)

add a "no-touch-required" option for authorized_keys and a similar
extension for certificates. This option disables the default
requirement that security key signatures attest that the user touched
their key to authorize them.

feedback deraadt, ok markus

Revision 1.306 / (download) - annotate - [select for diffs], Mon Nov 18 04:55:02 2019 UTC (4 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.305: +5 -2 lines
Diff to previous 1.305 (colored)

mention ed25519-sk key/cert types here too; prompted by jmc@

Revision 1.305 / (download) - annotate - [select for diffs], Thu Nov 7 08:38:38 2019 UTC (4 years, 6 months ago) by naddy
Branch: MAIN
Changes since 1.304: +24 -13 lines
Diff to previous 1.304 (colored)

Fill in missing man page bits for U2F security key support:

Mention the new key types, the ~/.ssh/id_ecdsa_sk file, ssh's
SecurityKeyProvider keyword, the SSH_SK_PROVIDER environment variable,
and ssh-keygen's new -w and -x options.

Copy the ssh-sk-helper man page from ssh-pkcs11-helper with minimal
substitutions.

ok djm@

Revision 1.304 / (download) - annotate - [select for diffs], Sun Jul 22 12:16:59 2018 UTC (5 years, 9 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.303: +4 -4 lines
Diff to previous 1.303 (colored)

Switch authorized_keys example from ssh-dss to ssh-rsa since the former
is no longer enabled by default.  Pointed out by Daniel A. Maierhofer,
ok jmc

Revision 1.303 / (download) - annotate - [select for diffs], Tue Jun 19 05:36:57 2018 UTC (5 years, 10 months ago) by jmc
Branch: MAIN
Changes since 1.302: +3 -3 lines
Diff to previous 1.302 (colored)

spelling;

Revision 1.302 / (download) - annotate - [select for diffs], Tue Jun 19 02:59:41 2018 UTC (5 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.301: +15 -4 lines
Diff to previous 1.301 (colored)

allow bare port numbers to appear in PermitListen directives, e.g.

PermitListen 2222 8080

is equivalent to:

PermitListen *:2222 *:8080

Some bonus manpage improvements, mostly from markus@

"looks fine" markus@

Revision 1.301 / (download) - annotate - [select for diffs], Thu Jun 7 11:26:14 2018 UTC (5 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.300: +4 -4 lines
Diff to previous 1.300 (colored)

tweak previous;

Revision 1.300 / (download) - annotate - [select for diffs], Wed Jun 6 18:24:15 2018 UTC (5 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.299: +19 -2 lines
Diff to previous 1.299 (colored)

man bits for permitlisten authorized_keys option

Revision 1.299 / (download) - annotate - [select for diffs], Wed Mar 14 06:56:20 2018 UTC (6 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.298: +6 -6 lines
Diff to previous 1.298 (colored)

sort expiry-time;

Revision 1.298 / (download) - annotate - [select for diffs], Wed Mar 14 05:35:40 2018 UTC (6 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.297: +3 -3 lines
Diff to previous 1.297 (colored)

rename recently-added "valid-before" key restriction to "expiry-time"
as the former is confusing wrt similar terminology in X.509;
pointed out by jsing@

Revision 1.297 / (download) - annotate - [select for diffs], Mon Mar 12 00:52:01 2018 UTC (6 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.296: +6 -2 lines
Diff to previous 1.296 (colored)

add valid-before="[time]" authorized_keys option. A simple way of
giving a key an expiry date. ok markus@

Revision 1.296 / (download) - annotate - [select for diffs], Sat Mar 3 06:37:53 2018 UTC (6 years, 2 months ago) by dtucker
Branch: MAIN
Changes since 1.295: +3 -3 lines
Diff to previous 1.295 (colored)

Update RSA minimum modulus size to 1024.  sshkey.h rev 1.18 bumped
the minimum from 768 to 1024, update man page accordingly.

Revision 1.295 / (download) - annotate - [select for diffs], Fri Feb 16 02:32:40 2018 UTC (6 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.294: +2 -5 lines
Diff to previous 1.294 (colored)

stop loading DSA keys by default, remove sshd_config stanza and manpage
bits; from Colin Watson via bz#2662, ok dtucker@

Revision 1.294 / (download) - annotate - [select for diffs], Mon Feb 5 04:02:53 2018 UTC (6 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.293: +3 -2 lines
Diff to previous 1.293 (colored)

I accidentially a word

Revision 1.293 / (download) - annotate - [select for diffs], Fri Nov 3 03:18:53 2017 UTC (6 years, 6 months ago) by dtucker
Branch: MAIN
Changes since 1.292: +12 -11 lines
Diff to previous 1.292 (colored)

When doing a config test with sshd -T, only require the attributes
that are actually used in Match criteria rather than (an incomplete
list of) all criteria.  ok djm@, man page help jmc@

Revision 1.292 / (download) - annotate - [select for diffs], Wed Oct 25 00:19:47 2017 UTC (6 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.291: +2 -1 lines
Diff to previous 1.291 (colored)

add a "rdomain" criteria for the sshd_config Match keyword to allow
conditional configuration that depends on which rdomain(4) a connection
was recevied on. ok markus@

Revision 1.291 / (download) - annotate - [select for diffs], Sat Jun 24 06:28:50 2017 UTC (6 years, 10 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.290: +3 -3 lines
Diff to previous 1.290 (colored)

word fix;

Revision 1.290 / (download) - annotate - [select for diffs], Sat Jun 24 05:35:05 2017 UTC (6 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.289: +19 -5 lines
Diff to previous 1.289 (colored)

use HostKeyAlias if specified instead of hostname for matching host
certificate principal names; bz#2728; ok dtucker@

Revision 1.289 / (download) - annotate - [select for diffs], Sun May 7 23:12:57 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.288: +3 -3 lines
Diff to previous 1.288 (colored)

As promised in last release announcement: remove support for
Blowfish, RC4 and CAST ciphers. ok markus@ deraadt@

Revision 1.288 / (download) - annotate - [select for diffs], Mon Jan 30 23:27:39 2017 UTC (7 years, 3 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.287: +3 -3 lines
Diff to previous 1.287 (colored)

Small correction to the known_hosts section on when it is updated.
Patch from lkppo at free.fr some time ago, pointed out by smallm at sdf.org

Revision 1.287 / (download) - annotate - [select for diffs], Wed Nov 30 02:57:40 2016 UTC (7 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.286: +13 -5 lines
Diff to previous 1.286 (colored)

When a forced-command appears in both a certificate and an
authorized keys/principals command= restriction, refuse to accept
the certificate unless they are identical.

The previous (documented) behaviour of having the certificate forced-
command override the other could be a bit confused and more error-prone.

Pointed out by Jann Horn of Project Zero; ok dtucker@

Revision 1.286 / (download) - annotate - [select for diffs], Fri Aug 19 03:18:06 2016 UTC (7 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.285: +2 -5 lines
Diff to previous 1.285 (colored)

remove UseLogin option and support for having /bin/login manage
login sessions; ok deraadt markus dtucker

Revision 1.285 / (download) - annotate - [select for diffs], Mon Aug 15 12:32:04 2016 UTC (7 years, 9 months ago) by naddy
Branch: MAIN
Changes since 1.284: +23 -85 lines
Diff to previous 1.284 (colored)

Catch up with the SSH1 code removal and delete all mention of
protocol 1 particularities, key files and formats, command line
options, and configuration keywords from the server documentation
and examples.  ok jmc@

Revision 1.284 / (download) - annotate - [select for diffs], Wed Feb 17 07:38:19 2016 UTC (8 years, 3 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.283: +7 -9 lines
Diff to previous 1.283 (colored)

since these pages now clearly tell folks to avoid v1, normalise
the docs from a v2 perspective (i.e. stop pointing out which bits
are v2 only);

ok/tweaks djm ok markus

Revision 1.283 / (download) - annotate - [select for diffs], Fri Feb 5 03:07:06 2016 UTC (8 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.282: +6 -3 lines
Diff to previous 1.282 (colored)

mention internal DH-GEX fallback groups; bz#2302

Revision 1.282 / (download) - annotate - [select for diffs], Mon Nov 16 00:30:02 2015 UTC (8 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.281: +34 -2 lines
Diff to previous 1.281 (colored)

Add a new authorized_keys option "restrict" that includes all current
and future key restrictions (no-*-forwarding, etc). Also add permissive
versions of the existing restrictions, e.g. "no-pty" -> "pty". This
simplifies the task of setting up restricted keys and ensures they are
maximally-restricted, regardless of any permissions we might implement
in the future.

Example:

restrict,pty,command="nethack" ssh-ed25519 AAAAC3NzaC1lZDI1...

Idea from Jann Horn; ok markus@

Revision 1.281 / (download) - annotate - [select for diffs], Fri Sep 11 03:13:36 2015 UTC (8 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.280: +3 -3 lines
Diff to previous 1.280 (colored)

more clarity on what AuthorizedKeysFile=none does;
based on diff by Thiebaud Weksteen

Revision 1.280 / (download) - annotate - [select for diffs], Fri Jul 3 03:49:45 2015 UTC (8 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.279: +7 -10 lines
Diff to previous 1.279 (colored)

refuse to generate or accept RSA keys smaller than 1024 bits;
feedback and ok dtucker@

Revision 1.279 / (download) - annotate - [select for diffs], Fri May 1 07:11:47 2015 UTC (9 years ago) by djm
Branch: MAIN
Changes since 1.278: +4 -2 lines
Diff to previous 1.278 (colored)

mention that the user's shell from /etc/passwd is used for commands
too; bz#1459 ok dtucker@

Revision 1.278 / (download) - annotate - [select for diffs], Sat Nov 15 14:41:03 2014 UTC (9 years, 6 months ago) by bentley
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.277: +6 -6 lines
Diff to previous 1.277 (colored)

Reduce instances of `` '' in manuals.

troff displays these as typographic quotes, but nroff implementations
almost always print them literally, which rarely has the intended effect
with modern fonts, even in stock xterm.

These uses of `` '' can be replaced either with more semantic alternatives
or with Dq, which prints typographic quotes in a UTF-8 locale (but will
automatically fall back to `` '' in an ASCII locale).

improvements and ok schwarze@

Revision 1.277 / (download) - annotate - [select for diffs], Sat Aug 30 15:33:50 2014 UTC (9 years, 8 months ago) by sobrado
Branch: MAIN
Changes since 1.276: +4 -4 lines
Diff to previous 1.276 (colored)

improve capitalization for the Ed25519 public-key signature system.

ok djm@

Revision 1.276 / (download) - annotate - [select for diffs], Thu Jul 3 22:40:43 2014 UTC (9 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.275: +6 -3 lines
Diff to previous 1.275 (colored)

Add a sshd_config PermitUserRC option to control whether ~/.ssh/rc is
executed, mirroring the no-user-rc authorized_keys option;
bz#2160; ok markus@

Revision 1.275 / (download) - annotate - [select for diffs], Sat Apr 19 18:15:16 2014 UTC (10 years, 1 month ago) by tedu
Branch: MAIN
Changes since 1.274: +3 -17 lines
Diff to previous 1.274 (colored)

remove some really old rsh references

Revision 1.274 / (download) - annotate - [select for diffs], Wed Mar 26 19:58:37 2014 UTC (10 years, 1 month ago) by tedu
Branch: MAIN
Changes since 1.273: +2 -9 lines
Diff to previous 1.273 (colored)

remove libwrap support. ok deraadt djm mfriedl

Revision 1.273 / (download) - annotate - [select for diffs], Sat Dec 7 11:58:46 2013 UTC (10 years, 5 months ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.272: +9 -5 lines
Diff to previous 1.272 (colored)

add missing mentions of ed25519; ok djm@

Revision 1.272 / (download) - annotate - [select for diffs], Fri Dec 6 15:29:07 2013 UTC (10 years, 5 months ago) by jmc
Branch: MAIN
Changes since 1.271: +3 -3 lines
Diff to previous 1.271 (colored)

missing comma;

Revision 1.271 / (download) - annotate - [select for diffs], Fri Dec 6 13:39:49 2013 UTC (10 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.270: +3 -2 lines
Diff to previous 1.270 (colored)

support ed25519 keys (hostkeys and user identities) using the public domain
ed25519 reference code from SUPERCOP, see http://ed25519.cr.yp.to/software.html
feedback, help & ok djm@

Revision 1.270 / (download) - annotate - [select for diffs], Thu Jun 27 14:05:37 2013 UTC (10 years, 10 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.269: +2 -4 lines
Diff to previous 1.269 (colored)

do not use Sx for sections outwith the man page - ingo informs me that
stuff like html will render with broken links;

issue reported by Eric S. Raymond, via djm

Revision 1.269 / (download) - annotate - [select for diffs], Sun Apr 7 09:40:27 2013 UTC (11 years, 1 month ago) by dtucker
Branch: MAIN
Changes since 1.268: +3 -5 lines
Diff to previous 1.268 (colored)

clarify -e text. suggested by & ok jmc@

Revision 1.268 / (download) - annotate - [select for diffs], Sun Apr 7 02:10:33 2013 UTC (11 years, 1 month ago) by dtucker
Branch: MAIN
Changes since 1.267: +7 -2 lines
Diff to previous 1.267 (colored)

Add -E option to ssh and sshd to append debugging logs to a specified file
instead of stderr or syslog.  ok markus@, man page help jmc@

Revision 1.267 / (download) - annotate - [select for diffs], Thu Oct 4 13:21:50 2012 UTC (11 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.266: +3 -3 lines
Diff to previous 1.266 (colored)

add umac128 variant; ok djm@ at n2k12

Revision 1.266 / (download) - annotate - [select for diffs], Mon Jun 18 12:07:07 2012 UTC (11 years, 11 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2
Changes since 1.265: +4 -4 lines
Diff to previous 1.265 (colored)

Remove mention of 'three' key files since there are now four.  From
Steve.McClellan at radisys com.

Revision 1.265 / (download) - annotate - [select for diffs], Sun May 13 01:42:32 2012 UTC (12 years ago) by dtucker
Branch: MAIN
Changes since 1.264: +4 -2 lines
Diff to previous 1.264 (colored)

Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust tests
to match.  Feedback and ok djm@ markus@.

Revision 1.264 / (download) - annotate - [select for diffs], Fri Sep 23 00:22:04 2011 UTC (12 years, 7 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_5_1_BASE, OPENBSD_5_1
Changes since 1.263: +5 -2 lines
Diff to previous 1.263 (colored)

Add wildcard support to PermitOpen, allowing things like "PermitOpen
localhost:*".  bz #1857, ok djm markus.

Revision 1.263 / (download) - annotate - [select for diffs], Tue Aug 2 01:22:11 2011 UTC (12 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.262: +3 -2 lines
Diff to previous 1.262 (colored)

Add new SHA256 and SHA512 based HMAC modes from
http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt

feedback and ok markus@

Revision 1.262 / (download) - annotate - [select for diffs], Mon May 23 07:10:21 2011 UTC (12 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.261: +4 -4 lines
Diff to previous 1.261 (colored)

tweak previous; ok djm

Revision 1.261 / (download) - annotate - [select for diffs], Mon May 23 03:30:07 2011 UTC (12 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.260: +7 -5 lines
Diff to previous 1.260 (colored)

allow AuthorizedKeysFile to specify multiple files, separated by spaces.
Bring back authorized_keys2 as a default search path (to avoid breaking
existing users of this file), but override this in sshd_config so it will
be no longer used on fresh installs. Maybe in 2015 we can remove it
entierly :)

feedback and ok markus@ dtucker@

Revision 1.260 / (download) - annotate - [select for diffs], Thu Oct 28 18:33:28 2010 UTC (13 years, 6 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.259: +2 -3 lines
Diff to previous 1.259 (colored)

knock out some "-*- nroff -*-" lines;

Revision 1.259 / (download) - annotate - [select for diffs], Tue Aug 31 11:54:45 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.258: +14 -6 lines
Diff to previous 1.258 (colored)

Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and
host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer
better performance than plain DH and DSA at the same equivalent symmetric
key length, as well as much shorter keys.

Only the mandatory sections of RFC5656 are implemented, specifically the
three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and
ECDSA. Point compression (optional in RFC5656 is NOT implemented).

Certificate host and user keys using the new ECDSA key types are supported.

Note that this code has not been tested for interoperability and may be
subject to change.

feedback and ok markus@

Revision 1.258 / (download) - annotate - [select for diffs], Sun Aug 8 19:36:30 2010 UTC (13 years, 9 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.257: +28 -28 lines
Diff to previous 1.257 (colored)

use the same template for all FILES sections; i.e. -compact/.Pp where we
have multiple items, and .Pa for path names;

Revision 1.257 / (download) - annotate - [select for diffs], Wed Aug 4 05:37:01 2010 UTC (13 years, 9 months ago) by djm
Branch: MAIN
Changes since 1.256: +3 -4 lines
Diff to previous 1.256 (colored)

Remove mentions of weird "addr/port" alternate address format for IPv6
addresses combinations. It hasn't worked for ages and we have supported
the more commen "[addr]:port" format for a long time. ok jmc@ markus@

Revision 1.256 / (download) - annotate - [select for diffs], Fri May 7 11:30:30 2010 UTC (14 years ago) by djm
Branch: MAIN
Changes since 1.255: +13 -2 lines
Diff to previous 1.255 (colored)

add some optional indirection to matching of principal names listed
in certificates. Currently, a certificate must include the a user's name
to be accepted for authentication. This change adds the ability to
specify a list of certificate principal names that are acceptable.

When authenticating using a CA trusted through ~/.ssh/authorized_keys,
this adds a new principals="name1[,name2,...]" key option.

For CAs listed through sshd_config's TrustedCAKeys option, a new config
option "AuthorizedPrincipalsFile" specifies a per-user file containing
the list of acceptable names.

If either option is absent, the current behaviour of requiring the
username to appear in principals continues to apply.

These options are useful for role accounts, disjoint account namespaces
and "user@realm"-style naming policies in certificates.

feedback and ok markus@

Revision 1.255 / (download) - annotate - [select for diffs], Fri Mar 5 06:50:35 2010 UTC (14 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.254: +3 -3 lines
Diff to previous 1.254 (colored)

tweak previous;

Revision 1.254 / (download) - annotate - [select for diffs], Thu Mar 4 23:19:29 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.253: +43 -7 lines
Diff to previous 1.253 (colored)

move section on CA and revoked keys from ssh.1 to sshd.8's known hosts
format section and rework it a bit; requested by jmc@

Revision 1.253 / (download) - annotate - [select for diffs], Wed Mar 3 22:49:50 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.252: +2 -2 lines
Diff to previous 1.252 (colored)

the authorized_keys option for CA keys is "cert-authority", not
"from=cert-authority". spotted by imorgan AT nas.nasa.gov

Revision 1.252 / (download) - annotate - [select for diffs], Fri Feb 26 22:09:28 2010 UTC (14 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.251: +11 -11 lines
Diff to previous 1.251 (colored)

tweak previous;

Revision 1.251 / (download) - annotate - [select for diffs], Fri Feb 26 20:29:54 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.250: +23 -2 lines
Diff to previous 1.250 (colored)

Add support for certificate key types for users and hosts.

OpenSSH certificate key types are not X.509 certificates, but a much
simpler format that encodes a public key, identity information and
some validity constraints and signs it with a CA key. CA keys are
regular SSH keys. This certificate style avoids the attack surface
of X.509 certificates and is very easy to deploy.

Certified host keys allow automatic acceptance of new host keys
when a CA certificate is marked as trusted in ~/.ssh/known_hosts.
see VERIFYING HOST KEYS in ssh(1) for details.

Certified user keys allow authentication of users when the signing
CA key is marked as trusted in authorized_keys. See "AUTHORIZED_KEYS
FILE FORMAT" in sshd(8) for details.

Certificates are minted using ssh-keygen(1), documentation is in
the "CERTIFICATES" section of that manpage.

Documentation on the format of certificates is in the file
PROTOCOL.certkeys

feedback and ok markus@

Revision 1.250 / (download) - annotate - [select for diffs], Sat Jan 30 21:08:33 2010 UTC (14 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.249: +4 -4 lines
Diff to previous 1.249 (colored)

debug output goes to stderr, not "the system log"; ok markus dtucker

Revision 1.249 / (download) - annotate - [select for diffs], Thu Oct 8 20:42:13 2009 UTC (14 years, 7 months ago) by jmc
Branch: MAIN
Changes since 1.248: +3 -3 lines
Diff to previous 1.248 (colored)

some tweaks now that protocol 1 is not offered by default; ok markus

Revision 1.248 / (download) - annotate - [select for diffs], Thu Mar 26 08:38:39 2009 UTC (15 years, 1 month ago) by sobrado
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6
Changes since 1.247: +3 -3 lines
Diff to previous 1.247 (colored)

fix a few typographical errors found by spell(1).

ok dtucker@, jmc@

Revision 1.247 / (download) - annotate - [select for diffs], Fri Oct 3 13:08:12 2008 UTC (15 years, 7 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_5_BASE, OPENBSD_4_5
Changes since 1.246: +2 -4 lines
Diff to previous 1.246 (colored)

do not give an example of how to chmod files: we can presume the user
knows that. removes an ambiguity in the permission of authorized_keys;

ok deraadt

Revision 1.246 / (download) - annotate - [select for diffs], Wed Jul 2 02:24:18 2008 UTC (15 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.245: +3 -3 lines
Diff to previous 1.245 (colored)

increase default size of ssh protocol 1 ephemeral key from 768 to 1024
bits; prodded by & ok dtucker@ ok deraadt@

Revision 1.245 / (download) - annotate - [select for diffs], Wed Jun 11 07:30:37 2008 UTC (15 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.244: +2 -2 lines
Diff to previous 1.244 (colored)

kill trailing whitespace;

Revision 1.244 / (download) - annotate - [select for diffs], Tue Jun 10 23:06:19 2008 UTC (15 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.243: +17 -13 lines
Diff to previous 1.243 (colored)

support CIDR address matching in .ssh/authorized_keys from="..." stanzas

ok and extensive testing dtucker@

Revision 1.243 / (download) - annotate - [select for diffs], Tue Jun 10 08:17:40 2008 UTC (15 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.242: +27 -27 lines
Diff to previous 1.242 (colored)

- update usage()
- fix SYNOPSIS, and sort options
- some minor additional fixes

Revision 1.242 / (download) - annotate - [select for diffs], Tue Jun 10 04:50:25 2008 UTC (15 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.241: +31 -3 lines
Diff to previous 1.241 (colored)

Add extended test mode (-T) and connection parameters for test mode (-C).
-T causes sshd to write its effective configuration to stdout and exit.
-C causes any relevant Match rules to be applied before output.  The
combination allows tesing of the parser and config files.  ok deraadt djm

Revision 1.241 / (download) - annotate - [select for diffs], Thu Mar 27 22:37:57 2008 UTC (16 years, 1 month ago) by jmc
Branch: MAIN
Changes since 1.240: +3 -3 lines
Diff to previous 1.240 (colored)

remove trailing whitespace;

Revision 1.240 / (download) - annotate - [select for diffs], Wed Mar 26 21:28:14 2008 UTC (16 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.239: +5 -2 lines
Diff to previous 1.239 (colored)

add no-user-rc authorized_keys option to disable execution of ~/.ssh/rc

Revision 1.239 / (download) - annotate - [select for diffs], Mon Feb 11 07:58:28 2008 UTC (16 years, 3 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.238: +2 -2 lines
Diff to previous 1.238 (colored)

bump Mdocdate for pages committed in "febuary", necessary because
of a typo in rcs.c;

Revision 1.238 / (download) - annotate - [select for diffs], Sat Feb 9 12:15:43 2008 UTC (16 years, 3 months ago) by mcbride
Branch: MAIN
Changes since 1.237: +9 -2 lines
Diff to previous 1.237 (colored)

Document the correct permissions for the ~/.ssh/ directory.

ok jmc

Revision 1.237 / (download) - annotate - [select for diffs], Thu Jun 7 19:37:34 2007 UTC (16 years, 11 months ago) by pvalchev
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.236: +2 -2 lines
Diff to previous 1.236 (colored)

Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must
specify umac-64@openssh.com). Provides about 20% end-to-end speedup
compared to hmac-md5. Represents a different approach to message
authentication to that of HMAC that may be beneficial if HMAC based on one
of its underlying hash algorithms is found to be vulnerable to a new attack.
http://www.ietf.org/rfc/rfc4418.txt

in conjunction with and OK djm@

Revision 1.236 / (download) - annotate - [select for diffs], Thu May 31 19:20:16 2007 UTC (16 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.235: +2 -2 lines
Diff to previous 1.235 (colored)

convert to new .Dd format;

Revision 1.235 / (download) - annotate - [select for diffs], Tue Mar 20 15:57:15 2007 UTC (17 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.234: +17 -13 lines
Diff to previous 1.234 (colored)

- let synopsis and description agree for -f
- sort FILES
- +.Xr ssh-keyscan 1 ,

from Igor Sobrado

Revision 1.208.2.2 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:33 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.208.2.1: +272 -284 lines
Diff to previous 1.208.2.1 (colored) to branchpoint 1.208 (colored) next main 1.209 (colored)

upgrade to OpenSSH 4.4

Revision 1.230.2.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:51 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.230: +26 -2 lines
Diff to previous 1.230 (colored) next main 1.231 (colored)

upgrade to OpenSSH 4.4

Revision 1.234 / (download) - annotate - [select for diffs], Mon Aug 21 08:15:57 2006 UTC (17 years, 9 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.233: +16 -2 lines
Diff to previous 1.233 (colored)

Add more detail about what permissions are and aren't accepted for
authorized_keys files.  Corrections jmc@, ok djm@, "looks good" jmc@

Revision 1.233 / (download) - annotate - [select for diffs], Wed Jul 19 13:07:10 2006 UTC (17 years, 10 months ago) by dtucker
Branch: MAIN
Changes since 1.232: +4 -1 lines
Diff to previous 1.232 (colored)

Add ForceCommand keyword to sshd_config, equivalent to the "command="
key option, man page entry and example in sshd_config.  Feedback & ok djm@,
man page corrections & ok jmc@

Revision 1.232 / (download) - annotate - [select for diffs], Mon Jul 10 16:04:21 2006 UTC (17 years, 10 months ago) by jmc
Branch: MAIN
Changes since 1.231: +2 -2 lines
Diff to previous 1.231 (colored)

s/and and/and/

Revision 1.231 / (download) - annotate - [select for diffs], Mon Jul 10 12:46:52 2006 UTC (17 years, 10 months ago) by dtucker
Branch: MAIN
Changes since 1.230: +8 -1 lines
Diff to previous 1.230 (colored)

Add port identifier to known_hosts for non-default ports, based originally
on a patch from Devin Nate in bz#910.

For any connection using the default port or using a HostKeyAlias the
format is unchanged, otherwise the host name or address is enclosed
within square brackets in the same format as sshd's ListenAddress.

Tested by many, ok markus@.

Revision 1.230 / (download) - annotate - [select for diffs], Fri Feb 24 20:31:31 2006 UTC (18 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE
Branch point for: OPENBSD_3_9
Changes since 1.229: +4 -4 lines
Diff to previous 1.229 (colored)

more consistency fixes;

Revision 1.229 / (download) - annotate - [select for diffs], Fri Feb 24 10:39:52 2006 UTC (18 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.228: +8 -10 lines
Diff to previous 1.228 (colored)

signpost to PATTERNS section;

Revision 1.228 / (download) - annotate - [select for diffs], Sun Feb 19 20:05:00 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.227: +2 -2 lines
Diff to previous 1.227 (colored)

grammar;

Revision 1.227 / (download) - annotate - [select for diffs], Sun Feb 19 20:02:17 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.226: +8 -42 lines
Diff to previous 1.226 (colored)

sync the (s)hosts.equiv FILES entries w/ those from ssh.1;

Revision 1.226 / (download) - annotate - [select for diffs], Sun Feb 19 19:52:10 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.225: +51 -44 lines
Diff to previous 1.225 (colored)

move the sshrc stuff out of FILES, and into its own section:
FILES is not a good place to document how stuff works;

Revision 1.225 / (download) - annotate - [select for diffs], Thu Feb 16 09:05:34 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.224: +33 -45 lines
Diff to previous 1.224 (colored)

sync some of the FILES entries w/ ssh.1;

Revision 1.224 / (download) - annotate - [select for diffs], Wed Feb 15 16:55:33 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.223: +1 -21 lines
Diff to previous 1.223 (colored)

remove ietf draft references; RFC list now maintained in ssh.1;

Revision 1.223 / (download) - annotate - [select for diffs], Mon Feb 13 11:27:25 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.222: +154 -130 lines
Diff to previous 1.222 (colored)

sort FILES and use a -compact list;

Revision 1.222 / (download) - annotate - [select for diffs], Mon Feb 13 11:08:43 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.221: +11 -7 lines
Diff to previous 1.221 (colored)

- avoid nasty line split
- `*' does not need to be escaped

Revision 1.221 / (download) - annotate - [select for diffs], Mon Feb 13 11:02:26 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.220: +7 -7 lines
Diff to previous 1.220 (colored)

turn this into an example ssh_known_hosts file; ok djm

Revision 1.220 / (download) - annotate - [select for diffs], Mon Feb 13 10:21:25 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.219: +4 -4 lines
Diff to previous 1.219 (colored)

small tweaks for the ssh_known_hosts section;

Revision 1.219 / (download) - annotate - [select for diffs], Mon Feb 13 10:16:39 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.218: +10 -10 lines
Diff to previous 1.218 (colored)

no need to subsection the authorized_keys examples - instead, convert
this to look like an actual file. also use proto 2 keys, and use IETF
example addresses;

much help from djm; ok markus djm;

Revision 1.218 / (download) - annotate - [select for diffs], Sun Feb 12 17:57:19 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.217: +26 -26 lines
Diff to previous 1.217 (colored)

sort the list of options permissable w/ authorized_keys;
ok djm dtucker

Revision 1.217 / (download) - annotate - [select for diffs], Sun Feb 12 10:52:41 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.216: +13 -16 lines
Diff to previous 1.216 (colored)

rework the description of authorized_keys a little;

Revision 1.216 / (download) - annotate - [select for diffs], Thu Feb 9 10:10:47 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.215: +13 -13 lines
Diff to previous 1.215 (colored)

- move some text into a CAVEATS section
- merge the COMMAND EXECUTION... section into AUTHENTICATION

Revision 1.208.2.1 / (download) - annotate - [select for diffs], Fri Feb 3 03:01:58 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.208: +103 -104 lines
Diff to previous 1.208 (colored)

upgrade to OpenSSH 4.3

Revision 1.206.2.2 / (download) - annotate - [select for diffs], Fri Feb 3 02:53:45 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.206.2.1: +103 -104 lines
Diff to previous 1.206.2.1 (colored) to branchpoint 1.206 (colored) next main 1.207 (colored)

upgrade to OpenSSH 4.3

Revision 1.215 / (download) - annotate - [select for diffs], Wed Feb 1 09:11:41 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.214: +2 -2 lines
Diff to previous 1.214 (colored)

small tweak;

Revision 1.214 / (download) - annotate - [select for diffs], Wed Feb 1 09:06:50 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.213: +35 -46 lines
Diff to previous 1.213 (colored)

- merge sections on protocols 1 and 2 into a single section
- remove configuration file section

ok markus

Revision 1.213 / (download) - annotate - [select for diffs], Wed Jan 25 09:07:22 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.212: +4 -4 lines
Diff to previous 1.212 (colored)

move subsections to full sections;

Revision 1.212 / (download) - annotate - [select for diffs], Wed Jan 25 09:04:34 2006 UTC (18 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.211: +89 -91 lines
Diff to previous 1.211 (colored)

move the options description up the page, and a few additional tweaks
whilst in here;

ok markus

Revision 1.211 / (download) - annotate - [select for diffs], Thu Jan 12 22:20:00 2006 UTC (18 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.210: +4 -4 lines
Diff to previous 1.210 (colored)

refer to TCP forwarding, rather than TCP/IP forwarding;

Revision 1.210 / (download) - annotate - [select for diffs], Wed Dec 21 22:44:26 2005 UTC (18 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.209: +7 -3 lines
Diff to previous 1.209 (colored)

clarify precedence of -p, Port, ListenAddress; ok and help jmc@

Revision 1.209 / (download) - annotate - [select for diffs], Tue Dec 6 22:38:28 2005 UTC (18 years, 5 months ago) by reyk
Branch: MAIN
Changes since 1.208: +9 -1 lines
Diff to previous 1.208 (colored)

Add support for tun(4) forwarding over OpenSSH, based on an idea and
initial channel code bits by markus@. This is a simple and easy way to
use OpenSSH for ad hoc virtual private network connections, e.g.
administrative tunnels or secure wireless access. It's based on a new
ssh channel and works similar to the existing TCP forwarding support,
except that it depends on the tun(4) network interface on both ends of
the connection for layer 2 or layer 3 tunneling. This diff also adds
support for LocalCommand in the ssh(1) client.

ok djm@, markus@, jmc@ (manpages), tested and discussed with others

Revision 1.206.2.1 / (download) - annotate - [select for diffs], Sun Sep 4 18:40:11 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.206: +16 -16 lines
Diff to previous 1.206 (colored)

upgrade to OpenSSH 4.2

Revision 1.202.2.2 / (download) - annotate - [select for diffs], Fri Sep 2 03:45:01 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.202.2.1: +16 -16 lines
Diff to previous 1.202.2.1 (colored) to branchpoint 1.202 (colored) next main 1.203 (colored)

upgrade to OpenSSH 4.2

Revision 1.208 / (download) - annotate - [select for diffs], Wed Jun 8 03:50:00 2005 UTC (18 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE
Branch point for: OPENBSD_3_8
Changes since 1.207: +2 -2 lines
Diff to previous 1.207 (colored)

increase default rsa/dsa key length from 1024 to 2048 bits; ok markus@ deraadt@

Revision 1.207 / (download) - annotate - [select for diffs], Thu Apr 21 06:17:50 2005 UTC (19 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.206: +15 -15 lines
Diff to previous 1.206 (colored)

OpenSSH doesn't ever look at the $HOME environment variable, so don't say
that we do (bz #623); ok deraadt@

Revision 1.200.2.2 / (download) - annotate - [select for diffs], Thu Mar 10 17:15:05 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.200.2.1: +40 -11 lines
Diff to previous 1.200.2.1 (colored) to branchpoint 1.200 (colored) next main 1.201 (colored)

upgrade to OpenSSH 4.0

Revision 1.202.2.1 / (download) - annotate - [select for diffs], Thu Mar 10 16:28:28 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.202: +31 -2 lines
Diff to previous 1.202 (colored)

upgrade to OpenSSH 4.0

Revision 1.206 / (download) - annotate - [select for diffs], Tue Mar 1 14:59:49 2005 UTC (19 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE
Branch point for: OPENBSD_3_7
Changes since 1.205: +4 -4 lines
Diff to previous 1.205 (colored)

new sentence, new line;
whitespace;

Revision 1.205 / (download) - annotate - [select for diffs], Tue Mar 1 10:40:27 2005 UTC (19 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.204: +14 -1 lines
Diff to previous 1.204 (colored)

add support for hashing host names and addresses added to known_hosts files,
to improve privacy of which hosts user have been visiting; ok markus@ deraadt@

Revision 1.204 / (download) - annotate - [select for diffs], Fri Feb 25 10:55:13 2005 UTC (19 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.203: +15 -1 lines
Diff to previous 1.203 (colored)

add /etc/motd and $HOME/.hushlogin to FILES;
from michael knudsen;

Revision 1.203 / (download) - annotate - [select for diffs], Mon Dec 6 11:41:03 2004 UTC (19 years, 5 months ago) by dtucker
Branch: MAIN
Changes since 1.202: +4 -2 lines
Diff to previous 1.202 (colored)

Discard over-length authorized_keys entries rather than complaining when
they don't decode.  bz #884, with & ok djm@

Revision 1.202 / (download) - annotate - [select for diffs], Thu Aug 26 16:00:55 2004 UTC (19 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_6
Changes since 1.201: +10 -10 lines
Diff to previous 1.201 (colored)

get rid of references to rhosts authentication; with jmc@

Revision 1.199.2.2 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:33 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.199.2.1: +2 -2 lines
Diff to previous 1.199.2.1 (colored) to branchpoint 1.199 (colored) next main 1.200 (colored)

upgrade to OpenSSH 3.9

Revision 1.200.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:28 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.200: +2 -2 lines
Diff to previous 1.200 (colored)

upgrade to OpenSSH 3.9

Revision 1.201 / (download) - annotate - [select for diffs], Sun May 2 11:54:31 2004 UTC (20 years ago) by dtucker
Branch: MAIN
Changes since 1.200: +2 -2 lines
Diff to previous 1.200 (colored)

Man page grammar fix (bz #858), from damerell at chiark.greenend.org.uk
via Debian; ok djm@

Revision 1.194.2.2 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:17 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.194.2.1: +43 -42 lines
Diff to previous 1.194.2.1 (colored) to branchpoint 1.194 (colored) next main 1.195 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.199.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:34 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.199: +43 -42 lines
Diff to previous 1.199 (colored)

upgrade to OpenSSH 3.8

Revision 1.200 / (download) - annotate - [select for diffs], Wed Oct 8 08:27:36 2003 UTC (20 years, 7 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_5
Changes since 1.199: +43 -42 lines
Diff to previous 1.199 (colored)

scp and sftp: add options list and sort options. options list requested
by deraadt@
sshd: use same format as ssh
ssh: remove wrong option from list
sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)

ok deraadt@ markus@

Revision 1.193.2.2 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:29 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.193.2.1: +24 -21 lines
Diff to previous 1.193.2.1 (colored) to branchpoint 1.193 (colored) next main 1.194 (colored)

upgrade to OpenSSH 3.7

Revision 1.194.2.1 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:44 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.194: +24 -21 lines
Diff to previous 1.194 (colored)

upgrade to OpenSSH 3.7

Revision 1.199 / (download) - annotate - [select for diffs], Wed Aug 13 08:46:31 2003 UTC (20 years, 9 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.198: +1 -2 lines
Diff to previous 1.198 (colored)

remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
fgsch@, miod@, henning@, jakob@ and others

Revision 1.198 / (download) - annotate - [select for diffs], Tue Jun 10 09:12:12 2003 UTC (20 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.197: +12 -12 lines
Diff to previous 1.197 (colored)

- section reorder
- COMPATIBILITY merge
- macro cleanup
- kill whitespace at EOL
- new sentence, new line

ssh pages ok markus@

Revision 1.197 / (download) - annotate - [select for diffs], Tue May 20 12:09:32 2003 UTC (21 years ago) by jmc
Branch: MAIN
Changes since 1.196: +7 -7 lines
Diff to previous 1.196 (colored)

new sentence, new line

Revision 1.196 / (download) - annotate - [select for diffs], Wed Apr 30 20:41:07 2003 UTC (21 years ago) by david
Branch: MAIN
Changes since 1.195: +4 -5 lines
Diff to previous 1.195 (colored)

fix invalid .Pf macro usage introduced in previous commit
ok jmc@ mouring@

Revision 1.195 / (download) - annotate - [select for diffs], Wed Apr 30 01:16:20 2003 UTC (21 years ago) by mouring
Branch: MAIN
Changes since 1.194: +11 -6 lines
Diff to previous 1.194 (colored)

Escape ?, * and ! in .Ql for nroff compatibility.  OpenSSH Portable Bug #550
and * escaping suggested by jmc@.

Revision 1.176.2.6 / (download) - annotate - [select for diffs], Thu Apr 3 22:35:18 2003 UTC (21 years, 1 month ago) by miod
Branch: OPENBSD_3_1
Changes since 1.176.2.5: +19 -12 lines
Diff to previous 1.176.2.5 (colored) to branchpoint 1.176 (colored) next main 1.177 (colored)

Merge OpenSSH 3.6.1

Revision 1.193.2.1 / (download) - annotate - [select for diffs], Tue Apr 1 00:12:14 2003 UTC (21 years, 1 month ago) by margarida
Branch: OPENBSD_3_2
Changes since 1.193: +19 -12 lines
Diff to previous 1.193 (colored)

Update to OpenSSH 3.6

Revision 1.194 / (download) - annotate - [select for diffs], Fri Jan 31 21:54:40 2003 UTC (21 years, 3 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE
Branch point for: OPENBSD_3_3
Changes since 1.193: +19 -12 lines
Diff to previous 1.193 (colored)

typos;
eeprom(8): added .Ar to fields, removed references to sun3
sshd(8): help and ok markus@

help and ok millert@

Revision 1.153.2.8 / (download) - annotate - [select for diffs], Fri Oct 11 14:53:07 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.153.2.7: +27 -13 lines
Diff to previous 1.153.2.7 (colored) to branchpoint 1.153 (colored) next main 1.154 (colored)

Update to OpenSSH 3.5

Revision 1.176.2.5 / (download) - annotate - [select for diffs], Fri Oct 11 14:51:53 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_1
Changes since 1.176.2.4: +27 -13 lines
Diff to previous 1.176.2.4 (colored) to branchpoint 1.176 (colored)

Update to OpenSSH 3.5

Revision 1.193 / (download) - annotate - [select for diffs], Tue Sep 24 20:59:44 2002 UTC (21 years, 7 months ago) by todd
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_2
Changes since 1.192: +4 -4 lines
Diff to previous 1.192 (colored)

tweak the example $HOME/.ssh/rc script to not show on any cmdline the
sensitive data it handles. This fixes bug # 402 as reported by
kolya@mit.edu (Nickolai Zeldovich).

ok markus@ and stevesk@

Revision 1.192 / (download) - annotate - [select for diffs], Mon Sep 16 22:03:13 2002 UTC (21 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.191: +3 -1 lines
Diff to previous 1.191 (colored)

reference moduli(5) in FILES /etc/moduli.

Revision 1.191 / (download) - annotate - [select for diffs], Wed Sep 4 18:52:42 2002 UTC (21 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.190: +2 -2 lines
Diff to previous 1.190 (colored)

default LoginGraceTime to 2m; 1m may be too short for slow systems.
ok markus@

Revision 1.190 / (download) - annotate - [select for diffs], Wed Aug 21 19:38:06 2002 UTC (21 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.189: +2 -2 lines
Diff to previous 1.189 (colored)

change LoginGraceTime default to 1 minute; ok mouring@ markus@

Revision 1.189 / (download) - annotate - [select for diffs], Wed Aug 21 11:20:59 2002 UTC (21 years, 9 months ago) by espie
Branch: MAIN
Changes since 1.188: +8 -8 lines
Diff to previous 1.188 (colored)

`RSA' updated to refer to `public key', where it matters.

okay markus@

Revision 1.188 / (download) - annotate - [select for diffs], Mon Aug 12 17:30:35 2002 UTC (21 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.187: +11 -3 lines
Diff to previous 1.187 (colored)

more PermitUserEnvironment; ok markus@

Revision 1.187 / (download) - annotate - [select for diffs], Fri Aug 2 16:00:07 2002 UTC (21 years, 9 months ago) by marc
Branch: MAIN
Changes since 1.186: +6 -2 lines
Diff to previous 1.186 (colored)

note that .ssh/environment is only read when
allowed (PermitUserEnvironment in sshd_config).
OK markus@

Revision 1.153.2.7 / (download) - annotate - [select for diffs], Wed Jun 26 18:22:36 2002 UTC (21 years, 10 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.153.2.6: +9 -2 lines
Diff to previous 1.153.2.6 (colored) to branchpoint 1.153 (colored)

There was an update to OpenSSH 3.4, and people rejoiced.

Revision 1.176.2.4 / (download) - annotate - [select for diffs], Wed Jun 26 15:30:39 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.176.2.3: +14 -628 lines
Diff to previous 1.176.2.3 (colored) to branchpoint 1.176 (colored)

Pull in OpenSSH-3.4

Revision 1.186 / (download) - annotate - [select for diffs], Sat Jun 22 16:45:29 2002 UTC (21 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.185: +2 -2 lines
Diff to previous 1.185 (colored)

use process ID vs. pid/PID/process identifier

Revision 1.185 / (download) - annotate - [select for diffs], Sat Jun 22 16:32:54 2002 UTC (21 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.184: +8 -1 lines
Diff to previous 1.184 (colored)

add /var/empty in FILES section

Revision 1.153.2.6 / (download) - annotate - [select for diffs], Sat Jun 22 07:23:18 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.153.2.5: +6 -627 lines
Diff to previous 1.153.2.5 (colored) to branchpoint 1.153 (colored)

Update OpenSSH to version 3.3 (with local changes, configuration files still
living in /etc and privsep user being nobody).

Revision 1.176.2.3 / (download) - annotate - [select for diffs], Sat Jun 22 04:33:15 2002 UTC (21 years, 11 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.176.2.2: +2 -2 lines
Diff to previous 1.176.2.2 (colored) to branchpoint 1.176 (colored)

- create /var/empty directory before install
- enable privsep by default

Revision 1.184 / (download) - annotate - [select for diffs], Thu Jun 20 19:56:07 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.183: +6 -627 lines
Diff to previous 1.183 (colored)

move configuration file options from ssh.1/sshd.8 to
ssh_config.5/sshd_config.5; ok deraadt@ millert@

Revision 1.120.2.6 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:11 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.120.2.5: +51 -21 lines
Diff to previous 1.120.2.5 (colored) to branchpoint 1.120 (colored) next main 1.121 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.183 / (download) - annotate - [select for diffs], Wed May 29 03:06:30 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.182: +2 -2 lines
Diff to previous 1.182 (colored)

spelling

Revision 1.176.2.2 / (download) - annotate - [select for diffs], Sat May 18 04:50:38 2002 UTC (22 years ago) by jason
Branch: OPENBSD_3_1
Changes since 1.176.2.1: +0 -0 lines
Diff to previous 1.176.2.1 (colored) to branchpoint 1.176 (colored)

Update to OpenSSH-3.2.3

Revision 1.176.2.1 / (download) - annotate - [select for diffs], Sat May 18 04:12:11 2002 UTC (22 years ago) by jason
Branch: OPENBSD_3_1
Changes since 1.176: +8 -8 lines
Diff to previous 1.176 (colored)

Update to OpenSSH-3.2.2

Revision 1.153.2.5 / (download) - annotate - [select for diffs], Fri May 17 00:03:24 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.153.2.4: +51 -21 lines
Diff to previous 1.153.2.4 (colored) to branchpoint 1.153 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.182 / (download) - annotate - [select for diffs], Wed May 15 21:56:38 2002 UTC (22 years ago) by markus
Branch: MAIN
Changes since 1.181: +2 -2 lines
Diff to previous 1.181 (colored)

re-enable privsep and disable setuid for post-3.2.2

Revision 1.181 / (download) - annotate - [select for diffs], Wed May 15 21:02:53 2002 UTC (22 years ago) by markus
Branch: MAIN
Changes since 1.180: +2 -2 lines
Diff to previous 1.180 (colored)

disable privsep and enable setuid for the 3.2.2 release

Revision 1.180 / (download) - annotate - [select for diffs], Mon May 6 23:34:33 2002 UTC (22 years ago) by millert
Branch: MAIN
Changes since 1.179: +6 -6 lines
Diff to previous 1.179 (colored)

Kill/adjust r(login|exec)d? references now that those are no longer in
the tree.

Revision 1.179 / (download) - annotate - [select for diffs], Sat May 4 02:39:35 2002 UTC (22 years ago) by deraadt
Branch: MAIN
Changes since 1.178: +2 -2 lines
Diff to previous 1.178 (colored)

enable privsep by default; provos ok

Revision 1.178 / (download) - annotate - [select for diffs], Mon Apr 22 16:16:53 2002 UTC (22 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.177: +2 -2 lines
Diff to previous 1.177 (colored)

do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@

Revision 1.177 / (download) - annotate - [select for diffs], Sun Apr 21 16:19:27 2002 UTC (22 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.176: +2 -2 lines
Diff to previous 1.176 (colored)

document default AFSTokenPassing no; ok deraadt@

Revision 1.176 / (download) - annotate - [select for diffs], Fri Apr 5 20:56:21 2002 UTC (22 years, 1 month ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.175: +20 -9 lines
Diff to previous 1.175 (colored)

clarify sshrc some and handle X11UseLocalhost=yes; ok markus@

Revision 1.175 / (download) - annotate - [select for diffs], Fri Mar 29 19:16:22 2002 UTC (22 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.174: +5 -1 lines
Diff to previous 1.174 (colored)

RSA key modulus size minimum 768; ok markus@

Revision 1.174 / (download) - annotate - [select for diffs], Tue Mar 26 11:34:49 2002 UTC (22 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.173: +5 -5 lines
Diff to previous 1.173 (colored)

update to recent drafts

Revision 1.173 / (download) - annotate - [select for diffs], Tue Mar 19 05:23:08 2002 UTC (22 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.172: +2 -1 lines
Diff to previous 1.172 (colored)

Banner has no default.

Revision 1.172 / (download) - annotate - [select for diffs], Mon Mar 18 17:59:09 2002 UTC (22 years, 2 months ago) by provos
Branch: MAIN
Changes since 1.171: +14 -2 lines
Diff to previous 1.171 (colored)

document UsePrivilegeSeparation

Revision 1.171 / (download) - annotate - [select for diffs], Mon Mar 18 17:53:08 2002 UTC (22 years, 2 months ago) by provos
Branch: MAIN
Changes since 1.170: +3 -1 lines
Diff to previous 1.170 (colored)

credits for privsep

Revision 1.120.2.5 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:45 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.120.2.4: +92 -35 lines
Diff to previous 1.120.2.4 (colored) to branchpoint 1.120 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.70.2.8 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:43 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.70.2.7: +95 -35 lines
Diff to previous 1.70.2.7 (colored) to branchpoint 1.70 (colored) next main 1.71 (colored)

Merge OpenSSH 3.1.

Revision 1.153.2.4 / (download) - annotate - [select for diffs], Fri Mar 8 15:17:18 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_3_0
Changes since 1.153.2.3: +20 -20 lines
Diff to previous 1.153.2.3 (colored) to branchpoint 1.153 (colored)

apply the necessary openbsd30_3.1.patch patch.
--
Ok'd by markus@

Revision 1.153.2.3 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:48 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.153.2.2: +105 -48 lines
Diff to previous 1.153.2.2 (colored) to branchpoint 1.153 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.170 / (download) - annotate - [select for diffs], Thu Feb 28 20:46:10 2002 UTC (22 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.169: +6 -1 lines
Diff to previous 1.169 (colored)

-u0 DNS for user@host

Revision 1.169 / (download) - annotate - [select for diffs], Thu Feb 28 20:36:42 2002 UTC (22 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.168: +4 -1 lines
Diff to previous 1.168 (colored)

DenyUsers allows user@host pattern also

Revision 1.168 / (download) - annotate - [select for diffs], Sun Feb 10 01:07:05 2002 UTC (22 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.167: +2 -2 lines
Diff to previous 1.167 (colored)

more /etc/ssh; openbsd@davidkrause.com

Revision 1.167 / (download) - annotate - [select for diffs], Sat Feb 9 17:37:34 2002 UTC (22 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.166: +19 -19 lines
Diff to previous 1.166 (colored)

move ssh config files to /etc/ssh

Revision 1.166 / (download) - annotate - [select for diffs], Sun Feb 3 22:35:57 2002 UTC (22 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.165: +4 -5 lines
Diff to previous 1.165 (colored)

some KeepAlive cleanup/clarify; ok markus@

Revision 1.165 / (download) - annotate - [select for diffs], Tue Jan 29 14:32:03 2002 UTC (22 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.164: +9 -9 lines
Diff to previous 1.164 (colored)

s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@

Revision 1.164 / (download) - annotate - [select for diffs], Sun Jan 27 14:57:46 2002 UTC (22 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.163: +26 -1 lines
Diff to previous 1.163 (colored)

add X11UseLocalhost; ok markus@

Revision 1.163 / (download) - annotate - [select for diffs], Fri Jan 18 20:46:34 2002 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.162: +11 -11 lines
Diff to previous 1.162 (colored)

clarify Allow(Groups|Users) and Deny(Groups|Users); suggestion from
allard@oceanpark.com; ok markus@

Revision 1.162 / (download) - annotate - [select for diffs], Fri Jan 18 17:14:16 2002 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.161: +6 -2 lines
Diff to previous 1.161 (colored)

correct Ciphers default; paola.mannaro@ubs.com

Revision 1.161 / (download) - annotate - [select for diffs], Sat Jan 5 21:51:56 2002 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.160: +3 -3 lines
Diff to previous 1.160 (colored)

some missing and misplaced periods

Revision 1.160 / (download) - annotate - [select for diffs], Fri Jan 4 18:14:16 2002 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.159: +19 -7 lines
Diff to previous 1.159 (colored)

protocol 2 HostKey code default is now /etc/ssh_host_rsa_key and
/etc/ssh_host_dsa_key like we have in sshd_config.  ok markus@

Revision 1.159 / (download) - annotate - [select for diffs], Fri Dec 28 22:37:48 2001 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.158: +5 -4 lines
Diff to previous 1.158 (colored)

document LogLevel DEBUG[123]; ok markus@

Revision 1.158 / (download) - annotate - [select for diffs], Thu Dec 27 18:22:53 2001 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.157: +4 -1 lines
Diff to previous 1.157 (colored)

clarify -p; ok markus@

Revision 1.157 / (download) - annotate - [select for diffs], Wed Dec 19 07:18:56 2001 UTC (22 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.156: +2 -2 lines
Diff to previous 1.156 (colored)

basic KNF done while i was looking for something else

Revision 1.156 / (download) - annotate - [select for diffs], Thu Dec 6 13:30:06 2001 UTC (22 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.155: +6 -1 lines
Diff to previous 1.155 (colored)

add -o to sshd, too. ok deraadt@

Revision 1.153.2.2 / (download) - annotate - [select for diffs], Wed Dec 5 19:31:48 2001 UTC (22 years, 5 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.153.2.1: +4 -1 lines
Diff to previous 1.153.2.1 (colored) to branchpoint 1.153 (colored)

Update to OpenSSH-3.0.2 from patch by markus.

Revision 1.120.2.4 / (download) - annotate - [select for diffs], Mon Dec 3 00:36:34 2001 UTC (22 years, 5 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.120.2.3: +4 -1 lines
Diff to previous 1.120.2.3 (colored) to branchpoint 1.120 (colored)

Upgrade OpenSSH to version 3.0.2.

Revision 1.155 / (download) - annotate - [select for diffs], Sat Dec 1 21:41:48 2001 UTC (22 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.154: +4 -1 lines
Diff to previous 1.154 (colored)

don't pass user defined variables to /usr/bin/login

Revision 1.120.2.3 / (download) - annotate - [select for diffs], Thu Nov 15 22:51:15 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.120.2.2: +3 -3 lines
Diff to previous 1.120.2.2 (colored) to branchpoint 1.120 (colored)

Merge OpenSSH 3.0.1.

Revision 1.70.2.7 / (download) - annotate - [select for diffs], Thu Nov 15 22:50:30 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.70.2.6: +3 -3 lines
Diff to previous 1.70.2.6 (colored) to branchpoint 1.70 (colored)

Merge OpenSSH 3.0.1.

This is likely to be the last commit to the 2.8-STABLE branch.

Revision 1.120.2.2 / (download) - annotate - [select for diffs], Thu Nov 15 00:15:19 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.120.2.1: +3 -4 lines
Diff to previous 1.120.2.1 (colored) to branchpoint 1.120 (colored)

Merge OpenSSH 3.0

Revision 1.70.2.6 / (download) - annotate - [select for diffs], Thu Nov 15 00:15:00 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.70.2.5: +3 -4 lines
Diff to previous 1.70.2.5 (colored) to branchpoint 1.70 (colored)

Merge OpenSSH 3.0

Revision 1.153.2.1 / (download) - annotate - [select for diffs], Wed Nov 14 03:24:39 2001 UTC (22 years, 6 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.153: +3 -3 lines
Diff to previous 1.153 (colored)

Pull in patches from current (Errata 002):
Update to OpenSSH-3.0.1 via errata patch (Instead of using release tarball)

Revision 1.154 / (download) - annotate - [select for diffs], Wed Nov 7 22:12:01 2001 UTC (22 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.153: +3 -3 lines
Diff to previous 1.153 (colored)

s/Keepalive/KeepAlive/; from openbsd@davidkrause.com

Revision 1.120.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:55 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.120: +156 -91 lines
Diff to previous 1.120 (colored)

Pull in OpenSSH-2.9.9

Revision 1.153 / (download) - annotate - [select for diffs], Thu Sep 27 17:53:24 2001 UTC (22 years, 7 months ago) by camield
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.152: +3 -4 lines
Diff to previous 1.152 (colored)

don't talk about compile-time options

ok markus@

Revision 1.70.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:43 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.70.2.4: +156 -91 lines
Diff to previous 1.70.2.4 (colored) to branchpoint 1.70 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.152 / (download) - annotate - [select for diffs], Thu Sep 20 00:15:54 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.151: +3 -2 lines
Diff to previous 1.151 (colored)

fix ClientAliveCountMax

Revision 1.151 / (download) - annotate - [select for diffs], Wed Sep 19 21:41:57 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.150: +1 -2 lines
Diff to previous 1.150 (colored)

don't advertise -V in usage; ok markus@

Revision 1.150 / (download) - annotate - [select for diffs], Wed Sep 19 21:04:53 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.149: +2 -2 lines
Diff to previous 1.149 (colored)

missing -t in usage

Revision 1.149 / (download) - annotate - [select for diffs], Wed Sep 19 10:08:51 2001 UTC (22 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.148: +2 -1 lines
Diff to previous 1.148 (colored)

command=xxx applies to subsystem now, too

Revision 1.148 / (download) - annotate - [select for diffs], Fri Sep 14 18:56:04 2001 UTC (22 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.147: +2 -2 lines
Diff to previous 1.147 (colored)

typo

Revision 1.147 / (download) - annotate - [select for diffs], Wed Sep 5 06:23:07 2001 UTC (22 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.146: +13 -13 lines
Diff to previous 1.146 (colored)

avoid first person in manual pages

Revision 1.146 / (download) - annotate - [select for diffs], Thu Aug 30 20:36:34 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.145: +5 -2 lines
Diff to previous 1.145 (colored)

validate ports for permitopen key file option. add host/port
alternative syntax for IPv6. ok markus@

Revision 1.145 / (download) - annotate - [select for diffs], Wed Aug 29 23:39:40 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.144: +10 -1 lines
Diff to previous 1.144 (colored)

additional documentation for GatewayPorts; ok markus@

Revision 1.144 / (download) - annotate - [select for diffs], Wed Aug 29 23:02:21 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.143: +13 -1 lines
Diff to previous 1.143 (colored)

add text about -u0 preventing DNS requests; ok markus@

Revision 1.143 / (download) - annotate - [select for diffs], Wed Aug 22 16:30:02 2001 UTC (22 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.142: +2 -3 lines
Diff to previous 1.142 (colored)

no rexd; ok markus@

Revision 1.142 / (download) - annotate - [select for diffs], Tue Aug 21 21:47:42 2001 UTC (22 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.141: +2 -2 lines
Diff to previous 1.141 (colored)

minor typos and cleanup

Revision 1.141 / (download) - annotate - [select for diffs], Thu Aug 16 20:14:57 2001 UTC (22 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.140: +7 -4 lines
Diff to previous 1.140 (colored)

document case sensitivity for ssh, sshd and key file
options and arguments; ok markus@

Revision 1.140 / (download) - annotate - [select for diffs], Thu Aug 16 19:18:34 2001 UTC (22 years, 9 months ago) by jakob
Branch: MAIN
Changes since 1.139: +1 -7 lines
Diff to previous 1.139 (colored)

deprecate CheckMail. ok markus@
----------------------------------------------------------------------

Revision 1.139 / (download) - annotate - [select for diffs], Wed Aug 1 22:16:45 2001 UTC (22 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.138: +3 -3 lines
Diff to previous 1.138 (colored)

refer to current ietf drafts for protocol v2

Revision 1.138 / (download) - annotate - [select for diffs], Sat Jul 28 09:21:15 2001 UTC (22 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.137: +4 -4 lines
Diff to previous 1.137 (colored)

cleanup some RSA vs DSA vs SSH1 vs SSH2 notes

Revision 1.137 / (download) - annotate - [select for diffs], Thu Jul 26 17:18:22 2001 UTC (22 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.136: +7 -1 lines
Diff to previous 1.136 (colored)

add -t option to test configuration file and keys; pekkas@netcore.fi
ok markus@

Revision 1.136 / (download) - annotate - [select for diffs], Sun Jul 22 22:24:16 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.135: +7 -10 lines
Diff to previous 1.135 (colored)

Xr login.conf

Revision 1.135 / (download) - annotate - [select for diffs], Wed Jun 27 04:48:53 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.134: +4 -1 lines
Diff to previous 1.134 (colored)

tridge@samba.org

Revision 1.134 / (download) - annotate - [select for diffs], Tue Jun 26 05:48:07 2001 UTC (22 years, 10 months ago) by mpech
Branch: MAIN
Changes since 1.133: +1 -2 lines
Diff to previous 1.133 (colored)

remove unnecessary .Pp between .It;

millert@ ok

Revision 1.133 / (download) - annotate - [select for diffs], Sat Jun 23 17:48:19 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.132: +15 -15 lines
Diff to previous 1.132 (colored)

kill whitespace at EOL.

Revision 1.132 / (download) - annotate - [select for diffs], Sat Jun 23 03:03:59 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.131: +3 -3 lines
Diff to previous 1.131 (colored)

draft-ietf-secsh-dh-group-exchange-01.txt

Revision 1.131 / (download) - annotate - [select for diffs], Sat Jun 23 02:34:33 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.130: +4 -16 lines
Diff to previous 1.130 (colored)

get rid of known_hosts2, use it for hostkey lookup, but do not modify.

Revision 1.130 / (download) - annotate - [select for diffs], Fri Jun 22 21:55:50 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.129: +6 -35 lines
Diff to previous 1.129 (colored)

merge authorized_keys2 into authorized_keys.
authorized_keys2 is used for backward compat.
(just append authorized_keys2 to authorized_keys).

Revision 1.129 / (download) - annotate - [select for diffs], Fri Jun 22 21:28:53 2001 UTC (22 years, 10 months ago) by provos
Branch: MAIN
Changes since 1.128: +3 -2 lines
Diff to previous 1.128 (colored)

document /etc/moduli

Revision 1.128 / (download) - annotate - [select for diffs], Fri Jun 22 10:17:51 2001 UTC (22 years, 11 months ago) by mpech
Branch: MAIN
Changes since 1.127: +5 -6 lines
Diff to previous 1.127 (colored)

o) .Sh AUTHOR -> .Sh AUTHORS;
o) remove unnecessary .Pp;
o) better -mdoc style;
o) typo;
o) sort SEE ALSO;

aaron@ ok

Revision 1.127 / (download) - annotate - [select for diffs], Tue Jun 19 14:09:45 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.126: +13 -3 lines
Diff to previous 1.126 (colored)

disable x11-fwd if use_login is enabled; from lukem@wasabisystems.com

Revision 1.126 / (download) - annotate - [select for diffs], Mon Jun 11 16:04:38 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.125: +3 -3 lines
Diff to previous 1.125 (colored)

typo; bdubreuil@crrel.usace.army.mil

Revision 1.125 / (download) - annotate - [select for diffs], Sun May 20 17:20:35 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.124: +36 -5 lines
Diff to previous 1.124 (colored)

configurable authorized_keys{,2} location; originally from peter@; ok djm@

Revision 1.124 / (download) - annotate - [select for diffs], Sat May 19 19:43:57 2001 UTC (23 years ago) by stevesk
Branch: MAIN
Changes since 1.123: +44 -1 lines
Diff to previous 1.123 (colored)

sshd command-line arguments and configuration file options that
specify time may be expressed using a sequence of the form:
time[qualifier], where time is a positive integer value and qualifier
is one of the following:
    <none>,s,m,h,d,w
Examples:
    600     600 seconds (10 minutes)
    10m     10 minutes
    1h30m   1 hour 30 minutes (90 minutes)
ok markus@

Revision 1.123 / (download) - annotate - [select for diffs], Sat May 19 16:46:19 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.122: +2 -6 lines
Diff to previous 1.122 (colored)

document MACs defaults with .Dq

Revision 1.122 / (download) - annotate - [select for diffs], Sat May 19 16:08:43 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.121: +6 -6 lines
Diff to previous 1.121 (colored)

sort options; Matthew.Stier@fnc.fujitsu.com

Revision 1.70.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:37 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.70.2.3: +169 -47 lines
Diff to previous 1.70.2.3 (colored) to branchpoint 1.70 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.121 / (download) - annotate - [select for diffs], Fri May 4 14:21:56 2001 UTC (23 years ago) by stevesk
Branch: MAIN
Changes since 1.120: +2 -2 lines
Diff to previous 1.120 (colored)

typos

Revision 1.120 / (download) - annotate - [select for diffs], Sun Apr 22 23:58:36 2001 UTC (23 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.119: +80 -41 lines
Diff to previous 1.119 (colored)

document hostbased and other cleanup

Revision 1.119 / (download) - annotate - [select for diffs], Sun Apr 22 13:32:27 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.118: +12 -1 lines
Diff to previous 1.118 (colored)

xref draft-ietf-secsh-*

Revision 1.118 / (download) - annotate - [select for diffs], Sun Apr 15 21:41:29 2001 UTC (23 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.117: +2 -2 lines
Diff to previous 1.117 (colored)

2,1, not 1,2

Revision 1.117 / (download) - annotate - [select for diffs], Sun Apr 15 21:05:49 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.116: +2 -2 lines
Diff to previous 1.116 (colored)

default for protocol is 1,2; ok markus@

Revision 1.116 / (download) - annotate - [select for diffs], Sun Apr 15 19:41:21 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.115: +12 -6 lines
Diff to previous 1.115 (colored)

some ClientAlive cleanup; ok markus@

Revision 1.115 / (download) - annotate - [select for diffs], Fri Apr 13 22:46:54 2001 UTC (23 years, 1 month ago) by beck
Branch: MAIN
Changes since 1.114: +26 -1 lines
Diff to previous 1.114 (colored)

Add options ClientAliveInterval and ClientAliveCountMax to sshd.
This gives the ability to do a "keepalive" via the encrypted channel
which can't be spoofed (unlike TCP keepalives). Useful for when you want
to use ssh connections to authenticate people for something, and know
relatively quickly when they are no longer authenticated. Disabled
by default (of course). ok markus@

Revision 1.114 / (download) - annotate - [select for diffs], Wed Apr 11 16:25:31 2001 UTC (23 years, 1 month ago) by lebel
Branch: MAIN
Changes since 1.113: +6 -2 lines
Diff to previous 1.113 (colored)

implement the -e option into sshd:

 -e      When this option is specified, sshd will send the output to the
         standard error instead of the system log.

markus@ OK.

Revision 1.113 / (download) - annotate - [select for diffs], Tue Apr 10 09:13:22 2001 UTC (23 years, 1 month ago) by itojun
Branch: MAIN
Changes since 1.112: +6 -3 lines
Diff to previous 1.112 (colored)

document id_rsa{.pub,}.  markus ok

Revision 1.112 / (download) - annotate - [select for diffs], Mon Apr 9 18:00:15 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.111: +13 -6 lines
Diff to previous 1.111 (colored)

ListenAddress mandoc from aaron@

Revision 1.111 / (download) - annotate - [select for diffs], Sun Apr 8 23:28:27 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.110: +3 -3 lines
Diff to previous 1.110 (colored)

spelling

Revision 1.110 / (download) - annotate - [select for diffs], Sun Apr 8 16:01:36 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.109: +28 -7 lines
Diff to previous 1.109 (colored)

document ListenAddress addr:port

Revision 1.109 / (download) - annotate - [select for diffs], Mon Apr 2 14:15:31 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.108: +2 -2 lines
Diff to previous 1.108 (colored)

typo; ok markus@

Revision 1.108 / (download) - annotate - [select for diffs], Sun Mar 25 13:16:11 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.107: +7 -1 lines
Diff to previous 1.107 (colored)

PrintLastLog option; from chip@valinux.com with some minor
changes by me.  ok markus@

Revision 1.70.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:31 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.70.2.2: +57 -42 lines
Diff to previous 1.70.2.2 (colored) to branchpoint 1.70 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.51.2.5 / (download) - annotate - [select for diffs], Wed Mar 21 18:53:16 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.51.2.4: +57 -42 lines
Diff to previous 1.51.2.4 (colored) to branchpoint 1.51 (colored) next main 1.52 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.107 / (download) - annotate - [select for diffs], Mon Mar 19 12:10:17 2001 UTC (23 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.106: +12 -1 lines
Diff to previous 1.106 (colored)

Document permitopen authorized_keys option; ok markus@

Revision 1.51.2.4 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:17 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.51.2.3: +111 -81 lines
Diff to previous 1.51.2.3 (colored) to branchpoint 1.51 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.106 / (download) - annotate - [select for diffs], Wed Mar 7 01:19:06 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.105: +3 -3 lines
Diff to previous 1.105 (colored)

the name "secure shell" is boring, noone ever uses it

Revision 1.105 / (download) - annotate - [select for diffs], Mon Mar 5 16:07:15 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.104: +3 -3 lines
Diff to previous 1.104 (colored)

detail default hmac setup too

Revision 1.104 / (download) - annotate - [select for diffs], Mon Mar 5 14:28:47 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.103: +15 -15 lines
Diff to previous 1.103 (colored)

alpha order; jcs@rt.fm

Revision 1.103 / (download) - annotate - [select for diffs], Sun Mar 4 18:21:28 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.102: +3 -4 lines
Diff to previous 1.102 (colored)

list SSH2 ciphers

Revision 1.102 / (download) - annotate - [select for diffs], Sun Mar 4 12:54:04 2001 UTC (23 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.101: +2 -2 lines
Diff to previous 1.101 (colored)

spelling

Revision 1.101 / (download) - annotate - [select for diffs], Sun Mar 4 11:16:06 2001 UTC (23 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.100: +1 -4 lines
Diff to previous 1.100 (colored)

kill obsolete RandomSeed; ok markus@ deraadt@

Revision 1.100 / (download) - annotate - [select for diffs], Sun Mar 4 11:04:41 2001 UTC (23 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.99: +6 -2 lines
Diff to previous 1.99 (colored)

small cleanup and clarify for PermitRootLogin; ok markus@

Revision 1.99 / (download) - annotate - [select for diffs], Fri Mar 2 18:54:31 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.98: +4 -4 lines
Diff to previous 1.98 (colored)

make copyright lines the same format

Revision 1.98 / (download) - annotate - [select for diffs], Fri Mar 2 09:42:49 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.97: +14 -12 lines
Diff to previous 1.97 (colored)

doc the dsa/rsa key pair files

Revision 1.97 / (download) - annotate - [select for diffs], Fri Mar 2 06:21:01 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.96: +4 -2 lines
Diff to previous 1.96 (colored)

explain SIGHUP better

Revision 1.96 / (download) - annotate - [select for diffs], Thu Feb 22 21:57:27 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.95: +2 -2 lines
Diff to previous 1.95 (colored)

typos/grammar from matt@anzen.com

Revision 1.70.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:38 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.70.2.1: +2 -2 lines
Diff to previous 1.70.2.1 (colored) to branchpoint 1.70 (colored)

Pull in OpenSSH-2.5.1

Revision 1.95 / (download) - annotate - [select for diffs], Sat Feb 17 23:48:48 2001 UTC (23 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.94: +2 -2 lines
Diff to previous 1.94 (colored)

it's the OpenSSH one

Revision 1.70.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:22 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.70: +110 -80 lines
Diff to previous 1.70 (colored)

Pull in OpenSSH 2.5.0

Revision 1.94 / (download) - annotate - [select for diffs], Mon Feb 12 16:16:24 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.93: +13 -8 lines
Diff to previous 1.93 (colored)

PermitRootLogin={yes,without-password,forced-commands-only,no}
(before this change, root could login even if PermitRootLogin==no)

Revision 1.93 / (download) - annotate - [select for diffs], Sun Feb 11 12:59:25 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.92: +12 -1 lines
Diff to previous 1.92 (colored)

1) clean up the MAC support for SSH-2
2) allow you to specify the MAC with 'ssh -m'
3) or the 'MACs' keyword in ssh(d)_config
4) add hmac-{md5,sha1}-96
	ok stevesk@, provos@

Revision 1.92 / (download) - annotate - [select for diffs], Fri Feb 9 23:38:11 2001 UTC (23 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.91: +3 -3 lines
Diff to previous 1.91 (colored)

correct AllowGroups and AllowUsers description; jmd@foozle.turbogeek.org

Revision 1.91 / (download) - annotate - [select for diffs], Thu Feb 8 19:22:38 2001 UTC (23 years, 3 months ago) by itojun
Branch: MAIN
Changes since 1.90: +1 -2 lines
Diff to previous 1.90 (colored)

drop references to ssl(8).  markus ok

Revision 1.90 / (download) - annotate - [select for diffs], Sun Feb 4 11:11:55 2001 UTC (23 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.89: +2 -1 lines
Diff to previous 1.89 (colored)

Basic interactive sftp client; ok theo@

Revision 1.89 / (download) - annotate - [select for diffs], Sat Feb 3 10:43:09 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.88: +4 -1 lines
Diff to previous 1.88 (colored)

use no-pty option in .ssh/authorized_keys* if you need a 8-bit clean
channel. note from Erik.Anggard@cygate.se (pr/1659)

Revision 1.88 / (download) - annotate - [select for diffs], Sat Feb 3 10:19:50 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.87: +6 -6 lines
Diff to previous 1.87 (colored)

Skey is now called ChallengeResponse

Revision 1.87 / (download) - annotate - [select for diffs], Sat Feb 3 10:08:37 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.86: +9 -1 lines
Diff to previous 1.86 (colored)

make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@

Revision 1.86 / (download) - annotate - [select for diffs], Sun Jan 28 20:43:25 2001 UTC (23 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.85: +3 -3 lines
Diff to previous 1.85 (colored)

spelling.  ok markus@

Revision 1.85 / (download) - annotate - [select for diffs], Sun Jan 28 10:37:25 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.84: +2 -4 lines
Diff to previous 1.84 (colored)

remove -Q, no longer needed

Revision 1.84 / (download) - annotate - [select for diffs], Sun Jan 28 10:24:04 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.83: +9 -32 lines
Diff to previous 1.83 (colored)

cleanup AUTHORS sections

Revision 1.83 / (download) - annotate - [select for diffs], Fri Jan 19 16:48:14 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.82: +2 -2 lines
Diff to previous 1.82 (colored)

fix typo; from stevesk@

Revision 1.82 / (download) - annotate - [select for diffs], Thu Jan 18 16:20:22 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.81: +3 -3 lines
Diff to previous 1.81 (colored)

log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many systems

Revision 1.81 / (download) - annotate - [select for diffs], Sat Jan 13 18:56:48 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.80: +6 -6 lines
Diff to previous 1.80 (colored)

support supplementary group in {Allow,Deny}Groups
from stevesk@pobox.com

Revision 1.80 / (download) - annotate - [select for diffs], Mon Jan 8 22:29:05 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.79: +8 -1 lines
Diff to previous 1.79 (colored)

implement option 'Banner /etc/issue.net' for ssh2, move version to
2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
is enabled).

Revision 1.79 / (download) - annotate - [select for diffs], Sun Jan 7 11:28:07 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.78: +3 -3 lines
Diff to previous 1.78 (colored)

rename SYSLOG_LEVEL_INFO->SYSLOG_LEVEL_NOTICE
syslog priority changes:
	fatal() LOG_ERR  -> LOG_CRIT
	log()   LOG_INFO -> LOG_NOTICE

Revision 1.78 / (download) - annotate - [select for diffs], Thu Jan 4 22:35:32 2001 UTC (23 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.77: +2 -2 lines
Diff to previous 1.77 (colored)

Mention AES as available SSH2 Cipher; ok markus

Revision 1.77 / (download) - annotate - [select for diffs], Thu Jan 4 22:25:58 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.76: +2 -2 lines
Diff to previous 1.76 (colored)

sync usage()/man with defaults; from stevesk@pobox.com

Revision 1.76 / (download) - annotate - [select for diffs], Thu Dec 28 12:03:57 2000 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.75: +2 -2 lines
Diff to previous 1.75 (colored)

document -D

Revision 1.75 / (download) - annotate - [select for diffs], Wed Dec 27 11:41:31 2000 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.74: +21 -8 lines
Diff to previous 1.74 (colored)

update for ssh-2

Revision 1.74 / (download) - annotate - [select for diffs], Wed Nov 29 21:11:59 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.73: +8 -2 lines
Diff to previous 1.73 (colored)

sshd -D, startup w/o daemon(), for monitoring scripts or initab;
from handler@sub-rosa.com and eric@urbanrage.com; ok niels@

Revision 1.73 / (download) - annotate - [select for diffs], Wed Nov 22 15:38:30 2000 UTC (23 years, 5 months ago) by provos
Branch: MAIN
Changes since 1.72: +3 -1 lines
Diff to previous 1.72 (colored)

talk about /etc/primes, okay markus@

Revision 1.72 / (download) - annotate - [select for diffs], Sun Nov 12 19:50:38 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.71: +14 -14 lines
Diff to previous 1.71 (colored)

add support for RSA to SSH2.  please test.

there are now 3 types of keys: RSA1 is used by ssh-1 only,
RSA and DSA are used by SSH2.

you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
keys for SSH2 and use the RSA keys for hostkeys or for user keys.

SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.

IdentityFile2, HostDsaKey and DSAAuthentication are obsolete.
you can use multiple IdentityFile and HostKey for all types of keys.

the option DSAAuthentication is replaced by PubkeyAuthetication.

Revision 1.71 / (download) - annotate - [select for diffs], Fri Nov 10 05:10:40 2000 UTC (23 years, 6 months ago) by aaron
Branch: MAIN
Changes since 1.70: +2 -2 lines
Diff to previous 1.70 (colored)

- Section shuffling: comply to the section ordering outlined in mdoc(7).
- Some .Nm trimming.
- .Sh AUTHOR -> .Sh AUTHORS
- Other miscellaneous fixes here and there.

Revision 1.51.2.3 / (download) - annotate - [select for diffs], Wed Nov 8 21:31:31 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.51.2.2: +54 -12 lines
Diff to previous 1.51.2.2 (colored) to branchpoint 1.51 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.70 / (download) - annotate - [select for diffs], Mon Oct 16 09:38:44 2000 UTC (23 years, 7 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.69: +1 -0 lines
Diff to previous 1.69 (colored)

Add idents for files which lack them

Fix idents Id -> OpenBSD for the rest

Revision 1.69 / (download) - annotate - [select for diffs], Sat Oct 14 12:12:09 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.68: +8 -0 lines
Diff to previous 1.68 (colored)

AllowTcpForwarding; from naddy@

Revision 1.68 / (download) - annotate - [select for diffs], Fri Oct 13 19:10:53 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.67: +2 -1 lines
Diff to previous 1.67 (colored)

more info about -V

Revision 1.67 / (download) - annotate - [select for diffs], Fri Oct 13 17:20:44 2000 UTC (23 years, 7 months ago) by aaron
Branch: MAIN
Changes since 1.66: +8 -5 lines
Diff to previous 1.66 (colored)

Repair formatting errors introduced after 2.7.

Revision 1.66 / (download) - annotate - [select for diffs], Thu Sep 21 10:55:10 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.65: +1 -2 lines
Diff to previous 1.65 (colored)

typo

Revision 1.65 / (download) - annotate - [select for diffs], Tue Sep 12 20:53:10 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.64: +1 -0 lines
Diff to previous 1.64 (colored)

multiple debug levels

Revision 1.64 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:55 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.63: +28 -5 lines
Diff to previous 1.63 (colored)

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.51.2.2 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:24 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.51.2.1: +64 -19 lines
Diff to previous 1.51.2.1 (colored) to branchpoint 1.51 (colored)

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.63 / (download) - annotate - [select for diffs], Thu Aug 31 21:52:23 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.62: +7 -1 lines
Diff to previous 1.62 (colored)

implement a SFTP server. interops with sftp2, scp2 and the windows
client from ssh.com

Revision 1.62 / (download) - annotate - [select for diffs], Fri Aug 25 16:16:15 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.61: +1 -5 lines
Diff to previous 1.61 (colored)

no need for those dynamic libraries anymore

Revision 1.61 / (download) - annotate - [select for diffs], Thu Aug 17 20:06:34 2000 UTC (23 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.60: +18 -1 lines
Diff to previous 1.60 (colored)

sshd -u len, similar to telnetd

Revision 1.60 / (download) - annotate - [select for diffs], Wed Aug 2 17:27:04 2000 UTC (23 years, 9 months ago) by provos
Branch: MAIN
Changes since 1.59: +2 -2 lines
Diff to previous 1.59 (colored)

disallow kerberos authentication if we can't verify the TGT; from
dugsong@
kerberos authentication is on by default only if you have a srvtab.

Revision 1.59 / (download) - annotate - [select for diffs], Wed Aug 2 16:27:16 2000 UTC (23 years, 9 months ago) by provos
Branch: MAIN
Changes since 1.58: +4 -3 lines
Diff to previous 1.58 (colored)

disable kerberos authentication by default

Revision 1.58 / (download) - annotate - [select for diffs], Tue Aug 1 17:46:10 2000 UTC (23 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.57: +14 -14 lines
Diff to previous 1.57 (colored)

many fixes from pepper@mail.reppep.com

Revision 1.57 / (download) - annotate - [select for diffs], Sat Jul 22 09:14:36 2000 UTC (23 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.56: +18 -1 lines
Diff to previous 1.56 (colored)

random early drop; ok theo, niels

Revision 1.56 / (download) - annotate - [select for diffs], Thu Jul 6 04:06:56 2000 UTC (23 years, 10 months ago) by aaron
Branch: MAIN
Changes since 1.55: +2 -1 lines
Diff to previous 1.55 (colored)

Insert more missing .El directives. Our troff really should identify these and
spit out a warning.

Revision 1.55 / (download) - annotate - [select for diffs], Mon Jun 26 21:59:18 2000 UTC (23 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.54: +9 -1 lines
Diff to previous 1.54 (colored)

MaxStartups: limit number of unauthenticated connections, work by theo and me

Revision 1.54 / (download) - annotate - [select for diffs], Sat Jun 17 22:52:34 2000 UTC (23 years, 11 months ago) by jakob
Branch: MAIN
Changes since 1.53: +6 -1 lines
Diff to previous 1.53 (colored)

add support for ssh v2 subsystems. ok markus@.

Revision 1.51.2.1 / (download) - annotate - [select for diffs], Mon Jun 12 02:37:38 2000 UTC (23 years, 11 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.51: +11 -2 lines
Diff to previous 1.51 (colored)

lovin' CVS... update patch branch to OpenSSH-2.1.1

Revision 1.53 / (download) - annotate - [select for diffs], Mon Jun 5 19:59:46 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.52: +5 -2 lines
Diff to previous 1.52 (colored)

document UseLogin better

Revision 1.52 / (download) - annotate - [select for diffs], Wed May 31 06:36:40 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.51: +7 -1 lines
Diff to previous 1.51 (colored)

xauth_location support; pr 1234

Revision 1.51 / (download) - annotate - [select for diffs], Mon May 8 17:42:31 2000 UTC (24 years ago) by hugh
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.50: +8 -8 lines
Diff to previous 1.50 (colored)

some markus certified spelling adjustments

Revision 1.50 / (download) - annotate - [select for diffs], Mon May 8 17:12:16 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.49: +2 -2 lines
Diff to previous 1.49 (colored)

complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)

Revision 1.49 / (download) - annotate - [select for diffs], Sat May 6 17:45:37 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.48: +39 -5 lines
Diff to previous 1.48 (colored)

add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8

Revision 1.48 / (download) - annotate - [select for diffs], Wed May 3 22:19:29 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.47: +9 -3 lines
Diff to previous 1.47 (colored)

sync AUTHOR w/ ssh.1

Revision 1.47 / (download) - annotate - [select for diffs], Wed May 3 18:03:07 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.46: +10 -1 lines
Diff to previous 1.46 (colored)

GatewayPorts for sshd, ok deraadt@

Revision 1.46 / (download) - annotate - [select for diffs], Wed May 3 10:21:49 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.45: +12 -4 lines
Diff to previous 1.45 (colored)

s/DsaKey/HostDSAKey/, document option

Revision 1.45 / (download) - annotate - [select for diffs], Wed May 3 07:22:09 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.44: +2 -15 lines
Diff to previous 1.44 (colored)

there is no rhosts_dsa

Revision 1.44 / (download) - annotate - [select for diffs], Tue May 2 23:41:31 2000 UTC (24 years ago) by deraadt
Branch: MAIN
Changes since 1.43: +39 -5 lines
Diff to previous 1.43 (colored)

a start at describing what i understand of the DSA side

Revision 1.43 / (download) - annotate - [select for diffs], Mon May 1 18:50:59 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.42: +7 -1 lines
Diff to previous 1.42 (colored)

PidFile, pr 1210

Revision 1.42 / (download) - annotate - [select for diffs], Mon May 1 08:19:58 2000 UTC (24 years ago) by hugh
Branch: MAIN
Changes since 1.41: +9 -9 lines
Diff to previous 1.41 (colored)

Minor tweaks and typo fixes.

Revision 1.41 / (download) - annotate - [select for diffs], Wed Apr 12 23:00:28 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.40: +17 -1 lines
Diff to previous 1.40 (colored)

document Protocol, Ciphers

Revision 1.40 / (download) - annotate - [select for diffs], Wed Apr 12 21:47:51 2000 UTC (24 years, 1 month ago) by aaron
Branch: MAIN
Changes since 1.39: +20 -20 lines
Diff to previous 1.39 (colored)

Trailing whitespace begone!

Revision 1.39 / (download) - annotate - [select for diffs], Wed Mar 29 20:17:56 2000 UTC (24 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.38: +2 -2 lines
Diff to previous 1.38 (colored)

typo

Revision 1.38 / (download) - annotate - [select for diffs], Wed Mar 29 07:12:39 2000 UTC (24 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.37: +4 -4 lines
Diff to previous 1.37 (colored)

reorder Xr to avoid cutting

Revision 1.37 / (download) - annotate - [select for diffs], Fri Mar 24 03:04:46 2000 UTC (24 years, 1 month ago) by brad
Branch: MAIN
Changes since 1.36: +2 -2 lines
Diff to previous 1.36 (colored)

fix spelling errors, From: FreeBSD

Revision 1.36 / (download) - annotate - [select for diffs], Thu Mar 23 21:10:10 2000 UTC (24 years, 1 month ago) by aaron
Branch: MAIN
Changes since 1.35: +234 -152 lines
Diff to previous 1.35 (colored)

Fix some formatting problems I missed before.

Revision 1.35 / (download) - annotate - [select for diffs], Tue Mar 14 21:31:41 2000 UTC (24 years, 2 months ago) by aaron
Branch: MAIN
Changes since 1.34: +2 -2 lines
Diff to previous 1.34 (colored)

Suffix "i.e." and "e.g." with a comma. Just another really picky man page
commit, as we want our documentation to be as consistently formatted as
possible (it's getting there :-)).

Revision 1.34 / (download) - annotate - [select for diffs], Thu Feb 24 18:22:16 2000 UTC (24 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.33: +11 -7 lines
Diff to previous 1.33 (colored)

sync with sshd_config

Revision 1.33 / (download) - annotate - [select for diffs], Mon Feb 21 14:19:09 2000 UTC (24 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.32: +8 -13 lines
Diff to previous 1.32 (colored)

do not link to a commercial page..

Revision 1.32 / (download) - annotate - [select for diffs], Sat Jan 22 02:17:50 2000 UTC (24 years, 4 months ago) by aaron
Branch: MAIN
Changes since 1.31: +2 -2 lines
Diff to previous 1.31 (colored)

ie. -> i.e.,

Revision 1.31 / (download) - annotate - [select for diffs], Sat Jan 15 20:56:39 2000 UTC (24 years, 4 months ago) by provos
Branch: MAIN
Changes since 1.30: +2 -2 lines
Diff to previous 1.30 (colored)

typo; sotiris.vassilopoulos@betatech.gr via adejoode@zedz.net

Revision 1.30 / (download) - annotate - [select for diffs], Fri Jan 14 09:47:26 2000 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.29: +6 -6 lines
Diff to previous 1.29 (colored)

sort options, from paskalis@di.uoa.gr; .Xr gzip 1

Revision 1.29 / (download) - annotate - [select for diffs], Tue Jan 4 16:57:16 2000 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.28: +10 -2 lines
Diff to previous 1.28 (colored)

document -4, -6, and 'ssh -L 2022/::1/22'

Revision 1.28 / (download) - annotate - [select for diffs], Tue Jan 4 00:08:00 2000 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.27: +6 -1 lines
Diff to previous 1.27 (colored)

ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new features:
sshd allows multiple ListenAddress and Port options.  note that libwrap is
not IPv6-ready. (based on patches from fujiwara@rcac.tdi.co.jp)

Revision 1.27 / (download) - annotate - [select for diffs], Mon Nov 22 21:02:39 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.26: +2 -2 lines
Diff to previous 1.26 (colored)

syslog changes:
* Unified Logmessage for all auth-types, for success and for failed
* Standard connections get only ONE line in the LOG when level==LOG:
  Auth-attempts are logged only, if authentication is:
        a) successfull or
        b) with passwd or
        c) we had more than AUTH_FAIL_LOG failues
* many log() became verbose()
* old behaviour with level=VERBOSE

Revision 1.26 / (download) - annotate - [select for diffs], Mon Nov 22 20:02:45 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.25: +9 -1 lines
Diff to previous 1.25 (colored)

-V, for fallback to openssh in SSH2 compatibility mode

Revision 1.25 / (download) - annotate - [select for diffs], Fri Nov 19 09:46:49 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.24: +6 -2 lines
Diff to previous 1.24 (colored)

document SIGHUP, -Q to synopsis

Revision 1.24 / (download) - annotate - [select for diffs], Thu Nov 11 22:58:39 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.23: +10 -1 lines
Diff to previous 1.23 (colored)

IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok deraadt,millert

Revision 1.23 / (download) - annotate - [select for diffs], Wed Nov 10 23:36:45 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.22: +9 -15 lines
Diff to previous 1.22 (colored)

add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
obsoletes QuietMode and FascistLogging in sshd.

Revision 1.22 / (download) - annotate - [select for diffs], Tue Nov 9 23:09:58 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.21: +5 -8 lines
Diff to previous 1.21 (colored)

user/958: check ~/.ssh/known_hosts for rhosts-rsa, too, ok niels/millert

Revision 1.21 / (download) - annotate - [select for diffs], Mon Oct 25 21:35:25 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.20: +2 -2 lines
Diff to previous 1.20 (colored)

server-logs default to AUTH (consistence with sample sshd_config)

Revision 1.20 / (download) - annotate - [select for diffs], Sun Oct 17 23:09:16 1999 UTC (24 years, 7 months ago) by dugsong
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored)

default KerberosOrLocalPassword to 'yes'

Revision 1.19 / (download) - annotate - [select for diffs], Sun Oct 17 20:48:07 1999 UTC (24 years, 7 months ago) by dugsong
Branch: MAIN
Changes since 1.18: +6 -30 lines
Diff to previous 1.18 (colored)

remove AllowHosts, DenyHosts, SilentDeny server access control cruft - replace with LIBWRAP moved to child. ok markus@ deraat@

Revision 1.18 / (download) - annotate - [select for diffs], Sun Oct 17 20:35:46 1999 UTC (24 years, 7 months ago) by aaron
Branch: MAIN
Changes since 1.17: +5 -2 lines
Diff to previous 1.17 (colored)

Remove some redundant .Pp.

Revision 1.17 / (download) - annotate - [select for diffs], Sun Oct 17 00:31:06 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.16: +25 -9 lines
Diff to previous 1.16 (colored)

update trailer, and copy to other pages

Revision 1.16 / (download) - annotate - [select for diffs], Thu Oct 14 20:17:23 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.15: +3 -1 lines
Diff to previous 1.15 (colored)

refuse to start if there is no configuration file for sshd. ok: deraadt

Revision 1.15 / (download) - annotate - [select for diffs], Thu Oct 14 19:56:02 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.14: +9 -1 lines
Diff to previous 1.14 (colored)

PermitRootLogin={yes,no,without-password}, default=yes, ok deraadt,niels

Revision 1.14 / (download) - annotate - [select for diffs], Tue Oct 12 19:36:40 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.13: +5 -2 lines
Diff to previous 1.13 (colored)

more: sshd will not start if hostkey readable

Revision 1.13 / (download) - annotate - [select for diffs], Tue Oct 12 18:11:54 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.12: +8 -1 lines
Diff to previous 1.12 (colored)

SilentDeny, don't log/answer refused connections, deraadt@

Revision 1.12 / (download) - annotate - [select for diffs], Mon Oct 11 22:24:33 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.11: +5 -3 lines
Diff to previous 1.11 (colored)

document StrictMode

Revision 1.11 / (download) - annotate - [select for diffs], Mon Oct 11 21:48:29 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.10: +48 -1 lines
Diff to previous 1.10 (colored)

Allow/Deny Users/Groups, from zzlevo@dd.chalmers.se, ok deraadt@

Revision 1.10 / (download) - annotate - [select for diffs], Mon Oct 11 21:07:37 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.9: +6 -1 lines
Diff to previous 1.9 (colored)

UseLogin, default=no, from kpa@gmx.net, ok deraadt@

Revision 1.9 / (download) - annotate - [select for diffs], Mon Oct 11 20:40:08 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.8: +4 -1 lines
Diff to previous 1.8 (colored)

document reality (no askpass, ignore group-world-accessible private keys)

Revision 1.8 / (download) - annotate - [select for diffs], Thu Oct 7 22:46:33 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.7: +7 -1 lines
Diff to previous 1.7 (colored)

You have Mail. Email fuer Dich. Karsten Patzwaldt <kpa@gmx.net> default=no

Revision 1.7 / (download) - annotate - [select for diffs], Thu Oct 7 21:45:02 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.6: +40 -17 lines
Diff to previous 1.6 (colored)

add skey to sshd:

1) pass *pw to auth_password() not user_name, do_authentication already
   keeps private copy of struct passwd for current user.
2) limit authentication attemps to 5, otherwise
        ssh -o 'NumberOfPasswordPrompts 100000' host
   lets you enter 100000 passwds
3) make s/key a run-time option in /etc/sshd_config
4) generate fake skeys,
   for s/key for nonexisting users, too
   limit auth-tries for nonexisting users, too.
Note that
% ssh -l nonexisting-user -o 'NumberOfPasswordPrompts 100000' host
has NO limits in ssh-1.2.27

Revision 1.6 / (download) - annotate - [select for diffs], Sun Oct 3 18:46:12 1999 UTC (24 years, 7 months ago) by aaron
Branch: MAIN
Changes since 1.5: +27 -37 lines
Diff to previous 1.5 (colored)

- Fix up SYNOPSIS sections.
- Remove refereces to /etc/environment and /etc/default/login; markus@
- Document X11DisplayOffset in sshd(8).
- Some other fixes...

Revision 1.5 / (download) - annotate - [select for diffs], Sat Oct 2 13:10:26 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.4: +18 -25 lines
Diff to previous 1.4 (colored)

detail how we manage to not include RSA, and point people at ssl(8)

Revision 1.4 / (download) - annotate - [select for diffs], Fri Oct 1 22:23:48 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.3: +2 -7 lines
Diff to previous 1.3 (colored)

randomseed is really gone now

Revision 1.3 / (download) - annotate - [select for diffs], Wed Sep 29 18:16:21 1999 UTC (24 years, 7 months ago) by dugsong
Branch: MAIN
Changes since 1.2: +10 -6 lines
Diff to previous 1.2 (colored)

update krb4/AFS support to ssh-1.2.27-afs-kerberos-pl1 level, clean up unused variables, update manpages

Revision 1.2 / (download) - annotate - [select for diffs], Sun Sep 26 22:30:06 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.1: +340 -376 lines
Diff to previous 1.1 (colored)

first cut of mandoc man pages from aaron

Revision 1.1 / (download) - annotate - [select for diffs], Sun Sep 26 20:53:38 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN

i bet a lot of people didn't know what ssh 1.2.16 had a nice license.
well, except for the patent issues.  someone in sweden (forget their
name at the moment) cleaned out most of the patented code, and now
this code removes rsa code.  when this is done, it will link against
libssl, but the work isn't completely done yet.  then we need to bring
this up to modern days, featurewise.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.