openssh.git -

Age	Commit message (Collapse)	Author
2020-02-21	GSSAPI key exchange support	Simon Wilkinson
	This patch has been rejected upstream: "None of the OpenSSH developers are in favour of adding this, and this situation has not changed for several years. This is not a slight on Simon's patch, which is of fine quality, but just that a) we don't trust GSSAPI implementations that much and b) we don't like adding new KEX since they are pre-auth attack surface. This one is particularly scary, since it requires hooks out to typically root-owned system resources." However, quite a lot of people rely on this in Debian, and it's better to have it merged into the main openssh package rather than having separate -krb5 packages (as we used to have). It seems to have a generally good security history. Origin: other, https://github.com/openssh-gsskex/openssh-gsskex/commits/debian/master Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1242 Last-Updated: 2020-02-21 Patch-Name: gssapi.patch
2020-02-07	typo; reported by Phil Pennock	Damien Miller

2020-02-03	mention libfido2 in dependencies section	Damien Miller

2020-01-16	Fix typo in README.md, s/crytpo/crypto/	Ruben Kerkhof

2019-12-18	Show portable tarball pattern in example.	Darren Tucker

2019-12-18	OpenSSL is now optional.	Darren Tucker

2019-11-15	configure flag to built-in security key support	Damien Miller
	Require --with-security-key-builtin before enabling the built-in security key support (and consequent dependency on libfido2).
2019-10-09	Update README.md	Abhishek Arya

2019-04-05	second thoughts: leave README in place	Damien Miller
	A number of contrib/* files refer to the existing README so let's leave it in place for release and add the new markdown version in parallel. I'll get rid of README after release.