1. be3e6cb upstream: Remove 3 as a guess for possible generator during moduli by dtucker@openbsd.org · 6 years ago
  2. 8976f1c upstream: Sanitize scp filenames via snmprintf. To do this we move by dtucker@openbsd.org · 6 years ago
  3. 6249451 For broken read/readv comparisons, poll(RW). by Darren Tucker · 6 years ago
  4. 5cb503d Include unistd.h for strmode(). by Darren Tucker · 6 years ago
  5. f236ca2 Also undef SIMPLEQ_FOREACH_SAFE. by Darren Tucker · 6 years ago
  6. be06394 upstream: allow auto-incrementing certificate serial number for certs by djm@openbsd.org · 6 years ago
  7. 851f803 upstream: move a bunch of global flag variables to main(); make the by djm@openbsd.org · 6 years ago
  8. 2265402 depend by Damien Miller · 6 years ago
  9. 2c22387 upstream: switch mainloop from select(2) to poll(2); ok deraadt@ by djm@openbsd.org · 6 years ago
  10. bb956ea upstream: pass most arguments to the KEX hash functions as sshbuf by djm@openbsd.org · 6 years ago
  11. d691588 upstream: backoff reading messages from active connections when the by djm@openbsd.org · 6 years ago
  12. f99ef8d upstream: add -m to usage(); reminded by jmc@ by djm@openbsd.org · 6 years ago
  13. 41923ce upstream: Correct some bugs in PKCS#11 token PIN handling at by djm@openbsd.org · 6 years ago
  14. 2162171 upstream: Support keys that set the CKA_ALWAYS_AUTHENTICATE by by djm@openbsd.org · 6 years ago
  15. 7a2cb18 upstream: Mention that configuration for the destination host is by djm@openbsd.org · 6 years ago
  16. ecd2f33 upstream: Include -m in the synopsis for a few more commands that by djm@openbsd.org · 6 years ago
  17. ff5d2cf upstream: print the full pubkey being attempted at loglevel >= by djm@openbsd.org · 6 years ago
  18. 180b520 upstream: clarify: ssh-keygen -e only writes public keys, never by djm@openbsd.org · 6 years ago
  19. c45616a upstream: mention the new vs. old key formats in the introduction by djm@openbsd.org · 6 years ago
  20. fd8eb13 upstream: tweak previous; by jmc@openbsd.org · 6 years ago
  21. 68e924d upstream: Forgot to add -J to the synopsis. by tb@openbsd.org · 6 years ago
  22. 622dedf upstream: Add a -J option as a shortcut for -o Proxyjump= to scp(1) by tb@openbsd.org · 6 years ago
  23. c882d74 Allow building against OpenSSL dev (3.x) version. by Darren Tucker · 6 years ago
  24. d552039 typo by Damien Miller · 6 years ago
  25. 2de9cec add missing header by Damien Miller · 6 years ago
  26. 533cfb0 upstream: switch sntrup implementation source from supercop to by djm@openbsd.org · 6 years ago
  27. d50ab3c new files need includes.h by Damien Miller · 6 years ago
  28. c7670b0 upstream: add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up by djm@openbsd.org · 6 years ago
  29. 49d8c8e upstream: adapt to changes in KEX APIs and file removals by djm@openbsd.org · 6 years ago
  30. 35ecc53 upstream: adapt to changes in KEX API and file removals by djm@openbsd.org · 6 years ago
  31. 7d69aae upstream: adapt to bignum1 API removal and bignum2 API change by djm@openbsd.org · 6 years ago
  32. beab553 upstream: remove hack to use non-system libcrypto by djm@openbsd.org · 6 years ago
  33. 4dc06bd depend by Damien Miller · 6 years ago
  34. 70edd73 upstream: fix reversed arguments to kex_load_hostkey(); manifested as by djm@openbsd.org · 6 years ago
  35. f1185ab upstream: forgot to cvs add this file in previous series of commits; by djm@openbsd.org · 6 years ago
  36. 7bef390 upstream: nothing shall escape this purge by djm@openbsd.org · 6 years ago
  37. aaca72d upstream: rename kex->kem_client_pub -> kex->client_pub now that by djm@openbsd.org · 6 years ago
  38. 70867e1 upstream: merge kexkem[cs] into kexgen by djm@openbsd.org · 6 years ago
  39. 71e67ff upstream: pass values used in KEX hash computation as sshbuf by djm@openbsd.org · 6 years ago
  40. 4b83e2a upstream: remove kex_derive_keys_bn wrapper; no unused since the by djm@openbsd.org · 6 years ago
  41. 92dda34 upstream: use KEM API for vanilla ECDH by djm@openbsd.org · 6 years ago
  42. b723572 fixup missing ssherr.h by Damien Miller · 6 years ago
  43. 9c9c97e upstream: use KEM API for vanilla DH KEX by djm@openbsd.org · 6 years ago
  44. 2f6a9dd upstream: use KEM API for vanilla c25519 KEX by djm@openbsd.org · 6 years ago
  45. dfd5916 upstream: Add support for a PQC KEX/KEM: by djm@openbsd.org · 6 years ago
  46. b1b2ff4 upstream: factor out kex_verify_hostkey() - again, duplicated by djm@openbsd.org · 6 years ago
  47. bb39baf upstream: factor out kex_load_hostkey() - this is duplicated in by djm@openbsd.org · 6 years ago
  48. dec5e9d upstream: factor out kex_dh_compute_key() - it's shared between by djm@openbsd.org · 6 years ago
  49. e93bd98 upstream: factor out DH keygen; it's identical between the client by djm@openbsd.org · 6 years ago
  50. 5ae3f6d upstream: save the derived session id in kex_derive_keys() rather by djm@openbsd.org · 6 years ago
  51. 7be8572 upstream: Make sshpkt_get_bignum2() allocate the bignum it is by djm@openbsd.org · 6 years ago
  52. 803178b upstream: remove obsolete (SSH v.1) sshbuf_get/put_bignum1 by djm@openbsd.org · 6 years ago
  53. f3ebaff upstream: fix all-zero check in kexc25519_shared_key by djm@openbsd.org · 6 years ago
  54. 9d1a977 upstream: - -T was added to the first synopsis by mistake - since by jmc@openbsd.org · 6 years ago
  55. 2f0bad2 Make --with-rpath take a flag instead of yes/no. by Darren Tucker · 6 years ago
  56. 23490a6 fix previous test by Damien Miller · 6 years ago
  57. b6dd327 Wrap ECC static globals in EC_KEY_METHOD_NEW too. by Darren Tucker · 6 years ago
  58. b2eb9db pass TEST_SSH_SSHPKCS11HELPER to regress tests by Damien Miller · 6 years ago
  59. ba58a52 make agent-pkcs11 search harder for softhsm2.so by Damien Miller · 6 years ago
  60. 662be40 upstream: always print the caller's error message in ossl_error(), by djm@openbsd.org · 6 years ago
  61. ce46c3a upstream: get the ex_data (pkcs11_key object) back from the keys at by djm@openbsd.org · 6 years ago
  62. 0a5f2ea upstream: GSSAPI code got missed when converting to new packet API by djm@openbsd.org · 6 years ago
  63. 2efcf81 Fix -Wunused when compiling PKCS#11 without ECDSA by Damien Miller · 6 years ago
  64. 3c0c657 upstream: allow override of ssh-pkcs11-helper binary via by djm@openbsd.org · 6 years ago
  65. 760ae37 upstream: adapt agent-pkcs11.sh test to softhsm2 and add support by djm@openbsd.org · 6 years ago
  66. b2ce8b3 upstream: add "extra:" target to run some extra tests that are not by djm@openbsd.org · 6 years ago
  67. 6329764 upstream: use ECDSA_SIG_set0() instead of poking signature values into by djm@openbsd.org · 6 years ago
  68. 5de6ac2 remove HAVE_DLOPEN that snuck in by Damien Miller · 6 years ago
  69. e2cb445 conditionalise ECDSA PKCS#11 support by Damien Miller · 6 years ago
  70. fcb1b09 upstream: we use singleton pkcs#11 RSA_METHOD and EC_KEY_METHOD by djm@openbsd.org · 6 years ago
  71. 6529409 upstream: KNF previous; from markus@ by djm@openbsd.org · 6 years ago
  72. 58622a8 upstream: use OpenSSL's RSA reference counting hooks to by djm@openbsd.org · 6 years ago
  73. f118542 upstream: make the PKCS#11 RSA code more like the new PKCS#11 by djm@openbsd.org · 6 years ago
  74. 445cfce upstream: fix leak of ECDSA pkcs11_key objects by djm@openbsd.org · 6 years ago
  75. 8a24675 upstream: use EVP_PKEY_get0_EC_KEY() instead of direct access of by djm@openbsd.org · 6 years ago
  76. 24757c1 upstream: cleanup PKCS#11 ECDSA pubkey loading: the returned by djm@openbsd.org · 6 years ago
  77. 749aef3 upstream: cleanup unnecessary code in ECDSA pkcs#11 signature by djm@openbsd.org · 6 years ago
  78. 0c50992 upstream: cleanup pkcs#11 client code: use sshkey_new in instead by djm@openbsd.org · 6 years ago
  79. 854bd86 upstream: allow override of the pkcs#11 helper binary via by djm@openbsd.org · 6 years ago
  80. 93f0210 upstream: add support for ECDSA keys in PKCS#11 tokens by djm@openbsd.org · 6 years ago
  81. aa22c20 upstream: add option to test whether keys in an agent are usable, by djm@openbsd.org · 6 years ago
  82. a36b0b1 upstream: Fix BN_is_prime_* calls in SSH, the API returns -1 on by tb@openbsd.org · 6 years ago
  83. ec4776b upstream: DH-GEX min value is now specified in RFC8270. ok djm@ by dtucker@openbsd.org · 6 years ago
  84. c90a792 Check for cc before gcc. by Darren Tucker · 6 years ago
  85. 9b655dc last bits of old packet API / active_state global by Damien Miller · 6 years ago
  86. 3f0786b remove PAM dependencies on old packet API by Damien Miller · 6 years ago
  87. 08f66d9 remove vestiges of old packet API from loginrec.c by Damien Miller · 6 years ago
  88. c327813 depend by Damien Miller · 6 years ago
  89. 135e302 upstream: fix error in refactor: use ssh_packet_disconnect() instead of by djm@openbsd.org · 6 years ago
  90. 245c6a0 upstream: remove last traces of old packet API! by djm@openbsd.org · 6 years ago
  91. 04c091f upstream: remove last references to active_state by djm@openbsd.org · 6 years ago
  92. ec00f91 upstream: convert monitor.c to new packet API by djm@openbsd.org · 6 years ago
  93. 6350e03 upstream: convert sshd.c to new packet API by djm@openbsd.org · 6 years ago
  94. a5e2ad8 upstream: convert session.c to new packet API by djm@openbsd.org · 6 years ago
  95. 3a00a92 upstream: convert auth.c to new packet API by djm@openbsd.org · 6 years ago
  96. 7ec5cb4 upstream: convert serverloop.c to new packet API by djm@openbsd.org · 6 years ago
  97. 64c9598 upstream: convert the remainder of sshconnect2.c to new packet by djm@openbsd.org · 6 years ago
  98. bc5e116 upstream: convert the remainder of clientloop.c to new packet API by djm@openbsd.org · 6 years ago
  99. 5ebce13 upstream: convert auth2.c to new packet API by Damien Miller · 6 years ago
  100. 172a592 upstream: convert servconf.c to new packet API by djm@openbsd.org · 6 years ago