diff options
author | Damien Miller <djm@mindrot.org> | 2013-01-18 11:44:04 +1100 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2013-01-18 11:44:04 +1100 |
commit | f3747bf4014a450c9aaf1d88b010f6e579d10072 (patch) | |
tree | 0b1e1b497da13eb815e16a0f43be09e873e6a243 /ChangeLog | |
parent | b26699bbadaffa1b1de2f6b0e175b77aba337de5 (diff) |
- djm@cvs.openbsd.org 2013/01/17 23:00:01
[auth.c key.c key.h ssh-keygen.1 ssh-keygen.c sshd_config.5]
[krl.c krl.h PROTOCOL.krl]
add support for Key Revocation Lists (KRLs). These are a compact way to
represent lists of revoked keys and certificates, taking as little as
a single bit of incremental cost to revoke a certificate by serial number.
KRLs are loaded via the existing RevokedKeys sshd_config option.
feedback and ok markus@
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 11 |
1 files changed, 11 insertions, 0 deletions
@@ -1,3 +1,14 @@ | |||
1 | 20130118 | ||
2 | - (djm) OpenBSD CVS Sync | ||
3 | - djm@cvs.openbsd.org 2013/01/17 23:00:01 | ||
4 | [auth.c key.c key.h ssh-keygen.1 ssh-keygen.c sshd_config.5] | ||
5 | [krl.c krl.h PROTOCOL.krl] | ||
6 | add support for Key Revocation Lists (KRLs). These are a compact way to | ||
7 | represent lists of revoked keys and certificates, taking as little as | ||
8 | a single bit of incremental cost to revoke a certificate by serial number. | ||
9 | KRLs are loaded via the existing RevokedKeys sshd_config option. | ||
10 | feedback and ok markus@ | ||
11 | |||
1 | 20130117 | 12 | 20130117 |
2 | - (djm) [regress/cipher-speed.sh regress/integrity.sh regress/try-ciphers.sh] | 13 | - (djm) [regress/cipher-speed.sh regress/integrity.sh regress/try-ciphers.sh] |
3 | check for GCM support before testing GCM ciphers. | 14 | check for GCM support before testing GCM ciphers. |