openssh.git -

Age	Commit message (Collapse)	Author
2008-08-25	only display "No blacklisted keys!" if there were any keys at all	Colin Watson

2008-08-25	Remove unnecessary ssh-vulnkey output in non-verbose mode when no	Colin Watson
	compromised or unknown keys were found (closes: #496495).
2008-05-30	Add some helpful advice to the end of ssh-vulnkey's output if there are	Colin Watson
	unknown or compromised keys (thanks, Dan Jacobson; closes: #483756).
2008-05-26	Refactor rejection of blacklisted user keys into a single	Colin Watson
	reject_blacklisted_key function in auth.c (thanks, Dmitry V. Levin).
2008-05-26	Reword "Unknown (no blacklist information)" to "Unknown (blacklist	Colin Watson
	file not installed)".
2008-05-26	add -v to short usage message	Colin Watson

2008-05-26	Use EUID rather than UID when run with no file names and without -a.	Colin Watson

2008-05-26	Drop to the user's UID when reading user keys with -a.	Colin Watson

2008-05-26	Use xasprintf to build user key file names in ssh-vulnkey, avoiding	Colin Watson
	truncation problems (thanks, Solar Designer).
2008-05-26	Handle leading IP addresses in ssh-vulnkey input (LP: #230497).	Colin Watson

2008-05-26	Make 'ssh-vulnkey -v' output each file name it examines (thanks, Hugh	Colin Watson
	Daniel).
2008-05-26	document -v	Colin Watson

2008-05-26	Fix error output if ssh-vulnkey fails to read key files, with the	Colin Watson
	exception of host keys unless -a was given (thanks, Hugh Daniel).
2008-05-26	remove dead variable	Colin Watson

2008-05-26	quote filename if it contains a colon	Colin Watson

2008-05-26	Add key type to ssh-vulnkey output.	Colin Watson

2008-05-25	Add -v (verbose) option to ssh-vulnkey, and don't print output for keys	Colin Watson
	that have a blacklist file but that are not listed unless in verbose mode (thanks, Hugh Daniel).
2008-05-25	Check for blacklists in /usr/share/ssh/ as well as /etc/ssh/ (see	Colin Watson
	#481283).
2008-05-25	Make ssh-vulnkey report the file name and line number for each key	Colin Watson
	(thanks, Heiko Schlittermann and Christopher Perry; closes: #481398).
2008-05-17	Check RSA1 keys without the need for a separate blacklist. Thanks to	Colin Watson
	Simon Tatham for the idea.
2008-05-14	ssh-vulnkey handles options in authorized_keys (LP: #230029).	Colin Watson

2008-05-12	* Mitigate OpenSSL security vulnerability:	Colin Watson
	- Add key blacklisting support. Keys listed in /etc/ssh/blacklist.TYPE-LENGTH will be rejected for authentication by sshd, unless "PermitBlacklistedKeys yes" is set in /etc/ssh/sshd_config. - Add a new program, ssh-vulnkey, which can be used to check keys against these blacklists. - Depend on openssh-blacklist. - Force dependencies on libssl0.9.8 / libcrypto0.9.8-udeb to at least 0.9.8g-9. - Automatically regenerate known-compromised host keys, with a critical-priority debconf note. (I regret that there was no time to gather translations.)