openssh.git -

Age	Commit message (Collapse)	Author
2015-01-14	upstream commit	djm@openbsd.org
	avoid an warning for the !OPENSSL case
2015-01-13	upstream commit	djm@openbsd.org
	add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypes options to allow sshd to control what public key types will be accepted. Currently defaults to all. Feedback & ok markus@
2015-01-13	upstream commit	markus@openbsd.org
	unbreak parsing of pubkey comments; with gerhard; ok djm/deraadt
2015-01-13	upstream commit	markus@openbsd.org
	allow WITH_OPENSSL w/o WITH_SSH1; ok djm@
2015-01-09	upstream commit	djm@openbsd.org
	deprecate key_load_private_pem() and sshkey_load_private_pem() interfaces. Refactor the generic key loading API to not require pathnames to be specified (they weren't really used). Fixes a few other things en passant: Makes ed25519 keys work for hostbased authentication (ssh-keysign previously used the PEM-only routines). Fixes key comment regression bz#2306: key pathnames were being lost as comment fields. ok markus@
2014-12-22	missing include for base64 encoding	Damien Miller

2014-12-22	upstream commit	djm@openbsd.org
	Add FingerprintHash option to control algorithm used for key fingerprints. Default changes from MD5 to SHA256 and format from hex to base64. Feedback and ok naddy@ markus@
2014-12-10	upstream commit	djm@openbsd.org
	better error value for invalid signature length
2014-11-18	upstream commit	djm@openbsd.org
	fix NULL pointer dereference crash in key loading found by Michal Zalewski's AFL fuzzer
2014-10-13	upstream commit	djm@openbsd.org
	parse cert sections using nested buffers to reduce copies; ok markus
2014-07-22	- (dtucker) [sshkey.c] ifdef out unused variable when compiling without	Darren Tucker
	OPENSSL_HAS_ECC.
2014-07-19	- (dtucker) [key.c sshkey.c] Put new ecdsa bits inside ifdef OPENSSL_HAS_ECC.	Darren Tucker

2014-07-03	- djm@cvs.openbsd.org 2014/07/03 01:45:38	Damien Miller
	[sshkey.c] make Ed25519 keys' title fit properly in the randomart border; bz#2247 based on patch from Christian Hesse
2014-07-02	- (djm) [sshkey.c] Conditionalise inclusion of util.h	Damien Miller

2014-07-02	- djm@cvs.openbsd.org 2014/06/24 01:13:21	Damien Miller
	[Makefile.in auth-bsdauth.c auth-chall.c auth-options.c auth-rsa.c [auth2-none.c auth2-pubkey.c authfile.c authfile.h cipher-3des1.c [cipher-chachapoly.c cipher-chachapoly.h cipher.c cipher.h [digest-libc.c digest-openssl.c digest.h dns.c entropy.c hmac.h [hostfile.c key.c key.h krl.c monitor.c packet.c rsa.c rsa.h [ssh-add.c ssh-agent.c ssh-dss.c ssh-ecdsa.c ssh-ed25519.c [ssh-keygen.c ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c [ssh-rsa.c sshbuf-misc.c sshbuf.h sshconnect.c sshconnect1.c [sshconnect2.c sshd.c sshkey.c sshkey.h [openbsd-compat/openssl-compat.c openbsd-compat/openssl-compat.h] New key API: refactor key-related functions to be more library-like, existing API is offered as a set of wrappers. with and ok markus@ Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew Dempsky and Ron Bowes for a detailed review a few months ago. NB. This commit also removes portable OpenSSH support for OpenSSL <0.9.8e.