- b5a89ee upstream: make signature format match PROTOCO by djm@openbsd.org · 5 years ago
- dc6f81e upstream: ban empty namespace strings for s by djm@openbsd.org · 5 years ago
- fa5bd81 Put ssherr.h back as it's actually needed. by Darren Tucker · 5 years ago
- 3ef92a6 Deny (non-fatal) shmget/shmat/shmdt in preauth privsep child. by Lonnie Abelbeck · 5 years ago
- edd1d3a remove duplicate #includes by Damien Miller · 5 years ago
- 13c508d typo in comment by Damien Miller · 5 years ago
- d0c3ac4 upstream: remove some duplicate #includes by djm@openbsd.org · 5 years ago
- 0846827 upstream: revert unconditional forced login implemented in r1.41 of by djm@openbsd.org · 5 years ago
- 6c91d42 upstream: group and sort single letter options; ok deraadt by jmc@openbsd.org · 5 years ago
- 3b44bf3 upstream: fix the DH-GEX text in -a; because this required a comma, by jmc@openbsd.org · 5 years ago
- 3e53ef2 upstream: identity_file[] should be PATH_MAX, not the arbitrary by deraadt@openbsd.org · 5 years ago
- 90d4b25 upstream: new sentence, new line; by jmc@openbsd.org · 5 years ago
- fbec7db Include stdio.h for snprintf. by Darren Tucker · 5 years ago
- 0a403bf Add SKIP_LTESTS for skipping specific tests. by Darren Tucker · 5 years ago
- 4d59f7a upstream: Test for empty result in expected bits. Remove CRs from log by dtucker@openbsd.org · 5 years ago
- 7c817d1 Re-enable dhgex test. by Darren Tucker · 5 years ago
- c1e0a32 Add more ToS bits, currently only used by netcat. by Darren Tucker · 5 years ago
- 5a273a3 Privsep is now required. by Darren Tucker · 5 years ago
- 8aa2aa3 upstream: Allow testing signature syntax and validity without verifying by djm@openbsd.org · 5 years ago
- 7047d5a upstream: clarify that IdentitiesOnly also applies to the default by djm@openbsd.org · 5 years ago
- b36ee3f upstream: Plug mem leaks on error paths, based in part on github by dtucker@openbsd.org · 5 years ago
- 2aefdf1 upstream: whitespace by djm@openbsd.org · 5 years ago
- fbe24b1 upstream: allow %n to be expanded in ProxyCommand strings by djm@openbsd.org · 5 years ago
- 2ce1d11 upstream: clarify that ConnectTimeout applies both to the TCP by djm@openbsd.org · 5 years ago
- df78011 upstream: Fix potential truncation warning. ok deraadt. by dtucker@openbsd.org · 5 years ago
- ec0e624 memleak of buffer in sshpam_query by Damien Miller · 5 years ago
- c17e463 explicitly test set[ug]id() return values by Damien Miller · 5 years ago
- 91a2135 upstream: Allow prepending a list of algorithms to the default set by naddy@openbsd.org · 5 years ago
- c8bdd2d upstream: key conversion should fail for !openssl builds, not fall by djm@openbsd.org · 5 years ago
- 823f6c3 upstream: typo in previous by djm@openbsd.org · 5 years ago
- 6a710d3 needs time.h for --without-openssl by Damien Miller · 5 years ago
- f61f29a make unittests pass for no-openssl case by Damien Miller · 5 years ago
- 105e1c9 upstream: avoid compiling certain files that deeply depend on by djm@openbsd.org · 5 years ago
- 670104b upstream: fixes for !WITH_OPENSSL compilation; ok dtucker@ by djm@openbsd.org · 5 years ago
- be02d7c upstream: lots of things were relying on libcrypto headers to by djm@openbsd.org · 5 years ago
- d05aaaa upstream: remove leakmalloc reference; we used this early when by djm@openbsd.org · 5 years ago
- 1268f0b upstream: Check for RSA support before using it for the user key, by dtucker@openbsd.org · 5 years ago
- fd7a2de Provide explicit path to configure-check. by Darren Tucker · 5 years ago
- 00865c2 upstream: better error code for bad arguments; inspired by by djm@openbsd.org · 5 years ago
- afdf27f revert config.h/config.h.in freshness checks by Damien Miller · 5 years ago
- a97609e extend autoconf freshness test by Damien Miller · 5 years ago
- 182297c check that configure/config.h is up to date by Damien Miller · 5 years ago
- 7d6034b upstream: if a PKCS#11 token returns no keys then try to login and by djm@openbsd.org · 5 years ago
- 76f09bd upstream: sprinkle in some explicit errors here, otherwise the by djm@openbsd.org · 5 years ago
- 0ea3324 upstream: only send ext_info for KEX_INITIAL; bz#2929 ok dtucker by djm@openbsd.org · 5 years ago
- f23d91f upstream: macro fix; ok djm by jmc@openbsd.org · 5 years ago
- 8b57337 update fuzzing makefile to more recent clang by Damien Miller · 5 years ago
- ae631ad fuzzer for sshsig allowed_signers option parsing by Damien Miller · 5 years ago
- 69159af upstream: memleak on error path; found by libfuzzer by djm@openbsd.org · 5 years ago
- bab6feb upstream: expose allowed_signers options parsing code in header for by djm@openbsd.org · 5 years ago
- 4f9d75f upstream: Call comma-separated lists as such to clarify semantics. by naddy@openbsd.org · 5 years ago
- db1e6f6 upstream: tweak previous; by jmc@openbsd.org · 5 years ago
- 0f44e59 upstream: repair typo and editing mishap by naddy@openbsd.org · 5 years ago
- f4846df Fuzzer harness for sshsig by Damien Miller · 5 years ago
- b08a6bc oops; missed including the actual file by Damien Miller · 5 years ago
- 1a72c0d portability fixes for sshsig by Damien Miller · 5 years ago
- 6d6427d upstream: regress test for sshsig; feedback and ok markus@ by djm@openbsd.org · 5 years ago
- 59650f0 upstream: only add plain keys to prevent any certs laying around by djm@openbsd.org · 5 years ago
- d637c4a upstream: sshsig tweaks and improvements from and suggested by by djm@openbsd.org · 5 years ago
- 2a9c9f7 upstream: sshsig: lightweight signature and verification ability by djm@openbsd.org · 5 years ago
- 5485f8d upstream: move authorized_keys option parsing helpsers to misc.c by djm@openbsd.org · 5 years ago
- f8df041 upstream: make get_sigtype public as sshkey_get_sigtype(); ok by djm@openbsd.org · 5 years ago
- dd8002f upstream: move advance_past_options to authfile.c and make it by djm@openbsd.org · 5 years ago
- c72d78c upstream: move skip_space() to misc.c and make it public; ok by djm@openbsd.org · 5 years ago
- 06af358 upstream: authfd: add function to check if key is in agent by djm@openbsd.org · 5 years ago
- 2ab5a84 upstream: fix memleak in ssh_free_identitylist(); ok markus@ by djm@openbsd.org · 5 years ago
- 85443f1 upstream: factor out confirm_overwrite(); ok markus@ by djm@openbsd.org · 5 years ago
- 9a396e3 upstream: constify an argument by djm@openbsd.org · 5 years ago
- b52c0c2 upstream: downgrade PKCS#11 "provider returned no slots" warning by djm@openbsd.org · 5 years ago
- 0713322 upstream: print comment when printing pubkey from private by djm@openbsd.org · 5 years ago
- 368f1cc fixed test in OSX closefrom() replacement by Damien Miller · 5 years ago
- 6b7c534 retain Solaris PRIV_FILE_LINK_ANY in sftp-server by Damien Miller · 5 years ago
- e50f808 upstream: Use ed25519 for most hostkey rotation tests since it's by dtucker@openbsd.org · 5 years ago
- 5e4796c upstream: Test did not compile due to missing symbols. Add source by bluhm@openbsd.org · 5 years ago
- e0e7e3d tweak warning flags by Damien Miller · 5 years ago
- 2874418 proc_pidinfo()-based closefrom() for OS X by Damien Miller · 5 years ago
- dc2ca58 upstream: Call comma-separated lists as such to clarify semantics by kn@openbsd.org · 5 years ago
- c4736f3 upstream: include sshbuf-misc.c in SRCS_BASE by djm@openbsd.org · 5 years ago
- d0e5181 Fix pasto in fallback code. by Darren Tucker · 5 years ago
- e83c989 use SC_ALLOW_ARG_MASK to limit mmap protections by Damien Miller · 5 years ago
- f6906f9 allow mprotect(2) with PROT_(READ|WRITE|NONE) only by Damien Miller · 5 years ago
- e3b6c96 upstream: switch percent_expand() to use sshbuf instead of a limited by djm@openbsd.org · 5 years ago
- 9ab5b94 upstream: produce a useful error message if the user's shell is set by djm@openbsd.org · 5 years ago
- 8fdbc72 upstream: Change description of TCPKeepAlive from "inactive" to by dtucker@openbsd.org · 5 years ago
- 7afc45c upstream: Allow the maximimum uint32 value for the argument passed to by dtucker@openbsd.org · 5 years ago
- c31e4f5 upstream: Many key types are supported now, so take care to check by naddy@openbsd.org · 5 years ago
- 6b39a7b upstream: Remove now-redundant perm_ok arg since by dtucker@openbsd.org · 5 years ago
- d46075b Fix mem leak in unit test. by Darren Tucker · 5 years ago
- c4ffb72 upstream: fix some memleaks in test_helper code by djm@openbsd.org · 5 years ago
- 6e76e69 upstream: typo; from Christian Hesse by djm@openbsd.org · 5 years ago
- 49fa065 upstream: let sshbuf_find/cmp take a void* for the by djm@openbsd.org · 5 years ago
- 7adf6c4 upstream: When using a combination of a Yubikey+GnuPG+remote by mestre@openbsd.org · 5 years ago
- 0e2fe18 upstream: Fix typo in CASignatureAlgorithms wherein what should be by dtucker@openbsd.org · 5 years ago
- e93ffd1 Report success of individual tests as well as all. by Darren Tucker · 5 years ago
- 2ad5b36 convert to UTF-8; from Mike Frysinger by Damien Miller · 5 years ago
- d31e7c9 upstream: Restrict limit-keytype to types supported by build. This by dtucker@openbsd.org · 5 years ago
- 0967a23 Remove override disabling DH-GEX. by Darren Tucker · 5 years ago
- 061407e upstream: Only use supported key types during KRL test, preferring by dtucker@openbsd.org · 5 years ago
- 47f8ff1 upstream: Switch keys-command test from rsa to ed25519 since it's by dtucker@openbsd.org · 5 years ago
- 1e94afd upstream: Make certificate tests work with the supported key by dtucker@openbsd.org · 5 years ago