1. 41923ce upstream: Correct some bugs in PKCS#11 token PIN handling at by djm@openbsd.org · 5 years ago
  2. 2162171 upstream: Support keys that set the CKA_ALWAYS_AUTHENTICATE by by djm@openbsd.org · 5 years ago
  3. 7a2cb18 upstream: Mention that configuration for the destination host is by djm@openbsd.org · 5 years ago
  4. ecd2f33 upstream: Include -m in the synopsis for a few more commands that by djm@openbsd.org · 5 years ago
  5. ff5d2cf upstream: print the full pubkey being attempted at loglevel >= by djm@openbsd.org · 5 years ago
  6. 180b520 upstream: clarify: ssh-keygen -e only writes public keys, never by djm@openbsd.org · 5 years ago
  7. c45616a upstream: mention the new vs. old key formats in the introduction by djm@openbsd.org · 5 years ago
  8. fd8eb13 upstream: tweak previous; by jmc@openbsd.org · 5 years ago
  9. 68e924d upstream: Forgot to add -J to the synopsis. by tb@openbsd.org · 5 years ago
  10. 622dedf upstream: Add a -J option as a shortcut for -o Proxyjump= to scp(1) by tb@openbsd.org · 5 years ago
  11. c882d74 Allow building against OpenSSL dev (3.x) version. by Darren Tucker · 5 years ago
  12. d552039 typo by Damien Miller · 5 years ago
  13. 2de9cec add missing header by Damien Miller · 5 years ago
  14. 533cfb0 upstream: switch sntrup implementation source from supercop to by djm@openbsd.org · 5 years ago
  15. d50ab3c new files need includes.h by Damien Miller · 5 years ago
  16. c7670b0 upstream: add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up by djm@openbsd.org · 5 years ago
  17. 49d8c8e upstream: adapt to changes in KEX APIs and file removals by djm@openbsd.org · 5 years ago
  18. 35ecc53 upstream: adapt to changes in KEX API and file removals by djm@openbsd.org · 5 years ago
  19. 7d69aae upstream: adapt to bignum1 API removal and bignum2 API change by djm@openbsd.org · 5 years ago
  20. beab553 upstream: remove hack to use non-system libcrypto by djm@openbsd.org · 5 years ago
  21. 4dc06bd depend by Damien Miller · 5 years ago
  22. 70edd73 upstream: fix reversed arguments to kex_load_hostkey(); manifested as by djm@openbsd.org · 5 years ago
  23. f1185ab upstream: forgot to cvs add this file in previous series of commits; by djm@openbsd.org · 5 years ago
  24. 7bef390 upstream: nothing shall escape this purge by djm@openbsd.org · 5 years ago
  25. aaca72d upstream: rename kex->kem_client_pub -> kex->client_pub now that by djm@openbsd.org · 5 years ago
  26. 70867e1 upstream: merge kexkem[cs] into kexgen by djm@openbsd.org · 5 years ago
  27. 71e67ff upstream: pass values used in KEX hash computation as sshbuf by djm@openbsd.org · 5 years ago
  28. 4b83e2a upstream: remove kex_derive_keys_bn wrapper; no unused since the by djm@openbsd.org · 5 years ago
  29. 92dda34 upstream: use KEM API for vanilla ECDH by djm@openbsd.org · 5 years ago
  30. b723572 fixup missing ssherr.h by Damien Miller · 5 years ago
  31. 9c9c97e upstream: use KEM API for vanilla DH KEX by djm@openbsd.org · 5 years ago
  32. 2f6a9dd upstream: use KEM API for vanilla c25519 KEX by djm@openbsd.org · 5 years ago
  33. dfd5916 upstream: Add support for a PQC KEX/KEM: by djm@openbsd.org · 5 years ago
  34. b1b2ff4 upstream: factor out kex_verify_hostkey() - again, duplicated by djm@openbsd.org · 5 years ago
  35. bb39baf upstream: factor out kex_load_hostkey() - this is duplicated in by djm@openbsd.org · 5 years ago
  36. dec5e9d upstream: factor out kex_dh_compute_key() - it's shared between by djm@openbsd.org · 5 years ago
  37. e93bd98 upstream: factor out DH keygen; it's identical between the client by djm@openbsd.org · 5 years ago
  38. 5ae3f6d upstream: save the derived session id in kex_derive_keys() rather by djm@openbsd.org · 5 years ago
  39. 7be8572 upstream: Make sshpkt_get_bignum2() allocate the bignum it is by djm@openbsd.org · 5 years ago
  40. 803178b upstream: remove obsolete (SSH v.1) sshbuf_get/put_bignum1 by djm@openbsd.org · 5 years ago
  41. f3ebaff upstream: fix all-zero check in kexc25519_shared_key by djm@openbsd.org · 5 years ago
  42. 9d1a977 upstream: - -T was added to the first synopsis by mistake - since by jmc@openbsd.org · 5 years ago
  43. 2f0bad2 Make --with-rpath take a flag instead of yes/no. by Darren Tucker · 5 years ago
  44. 23490a6 fix previous test by Damien Miller · 5 years ago
  45. b6dd327 Wrap ECC static globals in EC_KEY_METHOD_NEW too. by Darren Tucker · 5 years ago
  46. b2eb9db pass TEST_SSH_SSHPKCS11HELPER to regress tests by Damien Miller · 5 years ago
  47. ba58a52 make agent-pkcs11 search harder for softhsm2.so by Damien Miller · 5 years ago
  48. 662be40 upstream: always print the caller's error message in ossl_error(), by djm@openbsd.org · 5 years ago
  49. ce46c3a upstream: get the ex_data (pkcs11_key object) back from the keys at by djm@openbsd.org · 5 years ago
  50. 0a5f2ea upstream: GSSAPI code got missed when converting to new packet API by djm@openbsd.org · 5 years ago
  51. 2efcf81 Fix -Wunused when compiling PKCS#11 without ECDSA by Damien Miller · 5 years ago
  52. 3c0c657 upstream: allow override of ssh-pkcs11-helper binary via by djm@openbsd.org · 5 years ago
  53. 760ae37 upstream: adapt agent-pkcs11.sh test to softhsm2 and add support by djm@openbsd.org · 5 years ago
  54. b2ce8b3 upstream: add "extra:" target to run some extra tests that are not by djm@openbsd.org · 5 years ago
  55. 6329764 upstream: use ECDSA_SIG_set0() instead of poking signature values into by djm@openbsd.org · 5 years ago
  56. 5de6ac2 remove HAVE_DLOPEN that snuck in by Damien Miller · 5 years ago
  57. e2cb445 conditionalise ECDSA PKCS#11 support by Damien Miller · 5 years ago
  58. fcb1b09 upstream: we use singleton pkcs#11 RSA_METHOD and EC_KEY_METHOD by djm@openbsd.org · 5 years ago
  59. 6529409 upstream: KNF previous; from markus@ by djm@openbsd.org · 5 years ago
  60. 58622a8 upstream: use OpenSSL's RSA reference counting hooks to by djm@openbsd.org · 5 years ago
  61. f118542 upstream: make the PKCS#11 RSA code more like the new PKCS#11 by djm@openbsd.org · 5 years ago
  62. 445cfce upstream: fix leak of ECDSA pkcs11_key objects by djm@openbsd.org · 5 years ago
  63. 8a24675 upstream: use EVP_PKEY_get0_EC_KEY() instead of direct access of by djm@openbsd.org · 5 years ago
  64. 24757c1 upstream: cleanup PKCS#11 ECDSA pubkey loading: the returned by djm@openbsd.org · 5 years ago
  65. 749aef3 upstream: cleanup unnecessary code in ECDSA pkcs#11 signature by djm@openbsd.org · 5 years ago
  66. 0c50992 upstream: cleanup pkcs#11 client code: use sshkey_new in instead by djm@openbsd.org · 5 years ago
  67. 854bd86 upstream: allow override of the pkcs#11 helper binary via by djm@openbsd.org · 5 years ago
  68. 93f0210 upstream: add support for ECDSA keys in PKCS#11 tokens by djm@openbsd.org · 5 years ago
  69. aa22c20 upstream: add option to test whether keys in an agent are usable, by djm@openbsd.org · 5 years ago
  70. a36b0b1 upstream: Fix BN_is_prime_* calls in SSH, the API returns -1 on by tb@openbsd.org · 6 years ago
  71. ec4776b upstream: DH-GEX min value is now specified in RFC8270. ok djm@ by dtucker@openbsd.org · 6 years ago
  72. c90a792 Check for cc before gcc. by Darren Tucker · 5 years ago
  73. 9b655dc last bits of old packet API / active_state global by Damien Miller · 5 years ago
  74. 3f0786b remove PAM dependencies on old packet API by Damien Miller · 6 years ago
  75. 08f66d9 remove vestiges of old packet API from loginrec.c by Damien Miller · 6 years ago
  76. c327813 depend by Damien Miller · 6 years ago
  77. 135e302 upstream: fix error in refactor: use ssh_packet_disconnect() instead of by djm@openbsd.org · 6 years ago
  78. 245c6a0 upstream: remove last traces of old packet API! by djm@openbsd.org · 6 years ago
  79. 04c091f upstream: remove last references to active_state by djm@openbsd.org · 6 years ago
  80. ec00f91 upstream: convert monitor.c to new packet API by djm@openbsd.org · 6 years ago
  81. 6350e03 upstream: convert sshd.c to new packet API by djm@openbsd.org · 6 years ago
  82. a5e2ad8 upstream: convert session.c to new packet API by djm@openbsd.org · 6 years ago
  83. 3a00a92 upstream: convert auth.c to new packet API by djm@openbsd.org · 6 years ago
  84. 7ec5cb4 upstream: convert serverloop.c to new packet API by djm@openbsd.org · 6 years ago
  85. 64c9598 upstream: convert the remainder of sshconnect2.c to new packet by djm@openbsd.org · 6 years ago
  86. bc5e116 upstream: convert the remainder of clientloop.c to new packet API by djm@openbsd.org · 6 years ago
  87. 5ebce13 upstream: convert auth2.c to new packet API by Damien Miller · 6 years ago
  88. 172a592 upstream: convert servconf.c to new packet API by djm@openbsd.org · 6 years ago
  89. 8cc7a67 upstream: convert channels.c to new packet API by djm@openbsd.org · 6 years ago
  90. 0623203 upstream: convert sshconnect.c to new packet API by djm@openbsd.org · 6 years ago
  91. 25b2ed6 upstream: convert ssh.c to new packet API by djm@openbsd.org · 6 years ago
  92. e3128b3 upstream: convert mux.c to new packet API by djm@openbsd.org · 6 years ago
  93. ed1df72 upstream: convert sshconnect2.c to new packet API by djm@openbsd.org · 6 years ago
  94. 23f22a4 upstream: convert clientloop.c to new packet API by djm@openbsd.org · 6 years ago
  95. ad60b11 upstream: allow sshpkt_fatal() to take a varargs format; we'll by djm@openbsd.org · 6 years ago
  96. 0fa174e upstream: begin landing remaining refactoring of packet parsing by djm@openbsd.org · 6 years ago
  97. 4ae7f80 upstream: Print an \r in front of the password prompt so parts of by tb@openbsd.org · 6 years ago
  98. a6258e5 Add minimal fchownat and fchmodat implementations. by Darren Tucker · 6 years ago
  99. 091093d Add a minimal implementation of utimensat(). by Darren Tucker · 6 years ago
  100. 6096440 upstream: regress bits for banner processing refactor (this test was by djm@openbsd.org · 6 years ago