summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2020-01-28upstream: make IPTOS_DSCP_LE available via IPQoS directive; bz2986,djm@openbsd.org
2020-01-28upstream: disable UpdateHostKeys=ask if command is specified; okmarkus@openbsd.org
2020-01-28upstream: unbreak unittests for recent API / source file changesdjm@openbsd.org
2020-01-26Move definition of UINT32_MAX.Darren Tucker
2020-01-26upstream: unbreak unittests for recent API / source file changesdjm@openbsd.org
2020-01-26Include signal.h to prevent redefintion of _NSIG.Darren Tucker
2020-01-26Wrap stdint.h in tests inside HAVE_STDINT_H.Darren Tucker
2020-01-26upstream: for UpdateHostKeys, don't report errors for unsupporteddjm@openbsd.org
2020-01-26upstream: downgrade error() for missing subsequent known_hostsdjm@openbsd.org
2020-01-26upstream: clarify that BatchMode applies to all interactive promptsdjm@openbsd.org
2020-01-26upstream: tidy headers; some junk snuck into sshbuf-misc.c anddjm@openbsd.org
2020-01-26dependDamien Miller
2020-01-26upstream: improve the error message for u2f enrollment errors bydjm@openbsd.org
2020-01-26upstream: factor out reading/writing sshbufs to dedicateddjm@openbsd.org
2020-01-26upstream: add a comment describing the ranges of channel IDs thatdjm@openbsd.org
2020-01-26upstream: make sshd_config:ClientAliveCountMax=0 disable thedjm@openbsd.org
2020-01-26upstream: clarify order of AllowUsers/DenyUsers vsdjm@openbsd.org
2020-01-25upstream: when AddKeysToAgent=yes is set and the key contains nodjm@openbsd.org
2020-01-25upstream: group14-sha1 is no longer a default algorithmtedu@openbsd.org
2020-01-25upstream: reword HashKnownHosts description a little more; somedjm@openbsd.org
2020-01-25upstream: weaken the language for what HashKnownHosts provides withdjm@openbsd.org
2020-01-25upstream: the GatewayPorts vs -R listen address selection logic isdjm@openbsd.org
2020-01-25upstream: mention that permitopen=/PermitOpen do no name to addressdjm@openbsd.org
2020-01-25include tunnel device path in error messageDamien Miller
2020-01-25upstream: unrevert this:djm@openbsd.org
2020-01-25upstream: Move setting $NC into test-exec since it's now used bydtucker@openbsd.org
2020-01-25Put EC key export inside OPENSSL_HAS_ECC.Darren Tucker
2020-01-25upstream: Wait a bit longer for the multiplex master to become readydtucker@openbsd.org
2020-01-25upstream: Add a connection test for proxycommand. This would havedtucker@openbsd.org
2020-01-25upstream: set UpdateKnownHosts=ask by default; bz#2894; okdjm@openbsd.org
2020-01-25upstream: allow UpdateKnownHosts=yes to function when multipledjm@openbsd.org
2020-01-25upstream: process security key provider via realpath() in agent,djm@openbsd.org
2020-01-25upstream: expose PKCS#11 key labels/X.509 subjects as commentsdjm@openbsd.org
2020-01-25upstream: tweak proctitle to include sshd arguments, as these aredjm@openbsd.org
2020-01-25upstream: add xextendf() to extend a string with a formatdjm@openbsd.org
2020-01-25upstream: minor tweaks to ssh-keygen -Y find-principals:djm@openbsd.org
2020-01-25upstream: remove ssh-rsa (SHA1) from the list of allowed CAdjm@openbsd.org
2020-01-25upstream: when signing a certificate with an RSA key, default todjm@openbsd.org
2020-01-25upstream: allow PEM export of DSA and ECDSA keys; bz3091, patchdjm@openbsd.org
2020-01-25upstream: ssh-keygen -Y find-principals fixes based on feedbackdjm@openbsd.org
2020-01-24upstream: Do not warn about permissions on symlinks.dtucker@openbsd.org
2020-01-23upstream: Handle zlib compression being disabled now that it'sdtucker@openbsd.org
2020-01-23upstream: Fix typo in comment.dtucker@openbsd.org
2020-01-23upstream: When checking for unsafe directories, ignore non-directoriesdtucker@openbsd.org
2020-01-23zlib is now optional.Darren Tucker
2020-01-23Plumb WITH_ZLIB into configure.Darren Tucker
2020-01-23upstream: Make zlib optional. This adds a "ZLIB" build time optiondtucker@openbsd.org
2020-01-23upstream: remove trailing period characters from pub/priv keydjm@openbsd.org
2020-01-23Fix a couple of mysig_t leftovers.Darren Tucker
2020-01-23Remove mysignal wrapper.Darren Tucker