openssh.git -

Age	Commit message (Collapse)	Author
2013-02-12	- djm@cvs.openbsd.org 2013/01/24 22:08:56	Damien Miller
	[krl.c] skip serial lookup when cert's serial number is zero
2013-02-12	- (djm) OpenBSD CVS Sync	Damien Miller
	- djm@cvs.openbsd.org 2013/01/24 21:45:37 [krl.c] fix handling of (unused) KRL signatures; skip string in correct buffer
2013-01-20	- (djm) [openbsd-compat/sys-tree.h] Sync with OpenBSD. krl.c needs newer	Damien Miller
	version.
2013-01-20	- markus@cvs.openbsd.org 2013/01/19 12:34:55	Damien Miller
	[krl.c] RB_INSERT does not remove existing elments; ok djm@
2013-01-18	- djm@cvs.openbsd.org 2013/01/18 03:00:32	Damien Miller
	[krl.c] fix KRL generation bug for list sections
2013-01-18	- djm@cvs.openbsd.org 2013/01/17 23:00:01	Damien Miller
	[auth.c key.c key.h ssh-keygen.1 ssh-keygen.c sshd_config.5] [krl.c krl.h PROTOCOL.krl] add support for Key Revocation Lists (KRLs). These are a compact way to represent lists of revoked keys and certificates, taking as little as a single bit of incremental cost to revoke a certificate by serial number. KRLs are loaded via the existing RevokedKeys sshd_config option. feedback and ok markus@