1. c3368a5 upstream: remove ssh-rsa (SHA1) from the list of allowed CA by djm@openbsd.org · 4 years, 8 months ago
  2. 4a41d24 upstream: when signing a certificate with an RSA key, default to by djm@openbsd.org · 4 years, 8 months ago
  3. 8dfb6a2 upstream: allow PEM export of DSA and ECDSA keys; bz3091, patch by djm@openbsd.org · 4 years, 8 months ago
  4. 72a8bea upstream: ssh-keygen -Y find-principals fixes based on feedback by djm@openbsd.org · 4 years, 8 months ago
  5. 0585b56 upstream: Do not warn about permissions on symlinks. by dtucker@openbsd.org · 4 years, 8 months ago
  6. 4151923 upstream: Handle zlib compression being disabled now that it's by dtucker@openbsd.org · 4 years, 8 months ago
  7. fbce7c1 upstream: Fix typo in comment. by dtucker@openbsd.org · 4 years, 8 months ago
  8. ba247af upstream: When checking for unsafe directories, ignore non-directories by dtucker@openbsd.org · 4 years, 8 months ago
  9. 74deb70 zlib is now optional. by Darren Tucker · 4 years, 8 months ago
  10. 633a2af Plumb WITH_ZLIB into configure. by Darren Tucker · 4 years, 8 months ago
  11. 7f8e66f upstream: Make zlib optional. This adds a "ZLIB" build time option by dtucker@openbsd.org · 4 years, 8 months ago
  12. 69ac4e3 upstream: remove trailing period characters from pub/priv key by djm@openbsd.org · 4 years, 8 months ago
  13. 945bf52 Fix a couple of mysig_t leftovers. by Darren Tucker · 4 years, 8 months ago
  14. 84226b4 Remove mysignal wrapper. by Darren Tucker · 4 years, 8 months ago
  15. 5533c2f upstream: new sentence, new line; by jmc@openbsd.org · 4 years, 8 months ago
  16. 3bf2a6a upstream: Replace all calls to signal(2) with a wrapper around by dtucker@openbsd.org · 4 years, 8 months ago
  17. e027c04 upstream: missing header change from previous; spotted by dtucker@ by djm@openbsd.org · 4 years, 8 months ago
  18. 7e13231 upstream: Check for and warn about StrictModes permission problems. ok tb@ by dtucker@openbsd.org · 4 years, 8 months ago
  19. 84de1c2 upstream: Also test PuTTY chacha20. by dtucker@openbsd.org · 4 years, 8 months ago
  20. c7ed15a upstream: Also test PuTTY ecdh kex methods. by dtucker@openbsd.org · 4 years, 8 months ago
  21. c4b3a12 upstream: Remove unsupported algorithms from list of defaults at run by dtucker@openbsd.org · 4 years, 8 months ago
  22. 56cffcc upstream: add a new signature operations "find-principal" to look by djm@openbsd.org · 4 years, 8 months ago
  23. 65cf873 upstream: Ignore whitespace when checking explict fingerprint. by dtucker@openbsd.org · 4 years, 8 months ago
  24. 8d3af6e upstream: Increase keyscan timeout from default. On slow hosts 3 by dtucker@openbsd.org · 4 years, 8 months ago
  25. 6c30c9a upstream: remove diffie-hellman-group14-sha1 from default kex to by tedu@openbsd.org · 4 years, 8 months ago
  26. 4a32c0c upstream: For ssh-keygen -lF only add a space after key fingerprint by claudio@openbsd.org · 4 years, 8 months ago
  27. 37d3b73 upstream: some __func__ and strerror(errno) here; no functional by djm@openbsd.org · 4 years, 8 months ago
  28. e2031b0 upstream: factor out parsing of allowed-signers lines by djm@openbsd.org · 4 years, 8 months ago
  29. 47160e1 unbreak fuzzer support for recent ssh-sk.h changes by Damien Miller · 4 years, 8 months ago
  30. 70d38c3 upstream: expose the number of currently-authenticating connections by djm@openbsd.org · 4 years, 8 months ago
  31. a78c66d upstream: document the default value of the ControlPersist option; by naddy@openbsd.org · 4 years, 8 months ago
  32. b46a632 remove accidental change in f8c11461 by Damien Miller · 4 years, 8 months ago
  33. 80d3beb upstream: don't #ifdef out the KRL code when compiling without by djm@openbsd.org · 4 years, 8 months ago
  34. f8c1146 upstream: pass SSH_SK_HELPER explicitly past $SUDO to avoid it getting by djm@openbsd.org · 4 years, 8 months ago
  35. b5fcb0a upstream: check access(ssh-sk-helper, X_OK) to provide friendly by djm@openbsd.org · 4 years, 8 months ago
  36. 56bced4 upstream: Document sntrup4591761x25519-sha512@tinyssh.org. Patch by dtucker@openbsd.org · 4 years, 8 months ago
  37. 4a05d78 upstream: fix ssh-keygen not displaying authenticator touch by djm@openbsd.org · 4 years, 8 months ago
  38. 881aded upstream: a little more verbosity in sign_and_send_pubkey() debug by djm@openbsd.org · 4 years, 8 months ago
  39. b715fdc upstream: one more replacement "(security) key" -> "(FIDO) by naddy@openbsd.org · 4 years, 9 months ago
  40. 84911da upstream: undo merge error and replace the term "security key" by naddy@openbsd.org · 4 years, 9 months ago
  41. e8c06c4 upstream: Document loading of resident keys from a FIDO by naddy@openbsd.org · 4 years, 9 months ago
  42. 0d005d6 upstream: sync ssh-keygen.1 and ssh-keygen's usage() with each by naddy@openbsd.org · 4 years, 9 months ago
  43. b8a4ca2 upstream: revise the fix for reversed arguments on by naddy@openbsd.org · 4 years, 9 months ago
  44. 57b181e upstream: pass the log-on-stderr flag and log level through to by djm@openbsd.org · 4 years, 9 months ago
  45. a8bd5fd Wrap copy_environment_blacklist() in #ifdef by Damien Miller · 4 years, 8 months ago
  46. 10ecc64 depend by Damien Miller · 4 years, 8 months ago
  47. b3f7009 Fix missing prototype warning for copy_environment by Ruben Kerkhof · 4 years, 8 months ago
  48. 0c428c0 configure.ac: fix ldns test by Ruben Kerkhof · 4 years, 8 months ago
  49. 6089abf Make sshpam_password_change_required static. by Ruben Kerkhof · 4 years, 8 months ago
  50. 5a9b9c8 sandbox-darwin.c: fix missing prototypes. by Ruben Kerkhof · 4 years, 8 months ago
  51. 335dc93 Fix a few warnings when on Mac OS X. by Ruben Kerkhof · 4 years, 8 months ago
  52. 0488dc2 Fix building without openssl. by Ruben Kerkhof · 4 years, 8 months ago
  53. e6b7157 Add config.log to .gitignore by Ruben Kerkhof · 4 years, 9 months ago
  54. 515e10d Fix typo in README.md, s/crytpo/crypto/ by Ruben Kerkhof · 4 years, 9 months ago
  55. 1af3354 Wrap stdint.h in ifdef HAVE_STDINT_H. by Darren Tucker · 4 years, 9 months ago
  56. 429170f Wrap stdint.h inside HAVE_STDINT_H. by Darren Tucker · 4 years, 9 months ago
  57. a0989b6 Include compat header for definitions. by Darren Tucker · 4 years, 9 months ago
  58. e0cedca Improve search for 'struct timespec'. by Darren Tucker · 4 years, 9 months ago
  59. acaf9e0 Update depend to remove rmd160.h. by Darren Tucker · 4 years, 9 months ago
  60. 26b2675 Remove configure test & compat code for ripemd160. by Darren Tucker · 4 years, 9 months ago
  61. ed3ad71 upstream: fix reversed arguments on expand_proxy_command(); spotted by djm@openbsd.org · 4 years, 9 months ago
  62. cd53476 upstream: put the fido options in a list, and tidy up the text a by jmc@openbsd.org · 4 years, 9 months ago
  63. 30f704e Deny (non-fatal) ipc in preauth privsep child. by Jeremy Drake · 5 years ago
  64. b110cef seccomp: Allow clock_gettime64() in sandbox. by Khem Raj · 4 years, 9 months ago
  65. 3cc60c8 upstream: missing else in check_enroll_options() by djm@openbsd.org · 4 years, 9 months ago
  66. ff5784e upstream: fix error message by djm@openbsd.org · 4 years, 9 months ago
  67. dd2acc8 upstream: adapt sk-dummy to SK API changes by djm@openbsd.org · 4 years, 9 months ago
  68. c312ca0 upstream: Extends the SK API to accept a set of key/value options by djm@openbsd.org · 4 years, 9 months ago
  69. 2ab3357 upstream: fix CanonicalizeHostname, broken by rev 1.507 by beck@openbsd.org · 4 years, 9 months ago
  70. 69e44ba Fix typo: 'you' -> 'your'. by Darren Tucker · 4 years, 9 months ago
  71. 7652a57 Remove auth-skey.c. by Darren Tucker · 4 years, 9 months ago
  72. c593cc5 upstream: the download resident keys option is -K (upper) not -k by jmc@openbsd.org · 4 years, 9 months ago
  73. ff31f15 upstream: what bozo decided to use 2020 as a future date in a regress by djm@openbsd.org · 4 years, 9 months ago
  74. 680eb77 upstream: implement recent SK API change to support resident keys by djm@openbsd.org · 4 years, 9 months ago
  75. 86834fe upstream: Update keygen moduli screen test to match recent command by dtucker@openbsd.org · 4 years, 9 months ago
  76. 9039971 upstream: ability to download FIDO2 resident keys from a token via by djm@openbsd.org · 4 years, 9 months ago
  77. 878ba43 upstream: add sshkey_save_public(), to save a public key; ok by djm@openbsd.org · 4 years, 9 months ago
  78. 3b1382f upstream: simplify the list for moduli options - no need for by jmc@openbsd.org · 4 years, 9 months ago
  79. 0248ec7 ssh-sk-null.cc needs extern "C" {} by Damien Miller · 4 years, 9 months ago
  80. 5ca4b41 add dummy ssh-sk API for linking with fuzzers by Damien Miller · 4 years, 9 months ago
  81. c4b2664 refresh depend by Damien Miller · 4 years, 9 months ago
  82. 3093d12 upstream: Remove the -x option currently used for by djm@openbsd.org · 4 years, 9 months ago
  83. ef65e7d upstream: document SK API changes in PROTOCOL.u2f by djm@openbsd.org · 4 years, 9 months ago
  84. 43ce964 upstream: translate and return error codes; retry on bad PIN by djm@openbsd.org · 4 years, 9 months ago
  85. d433596 upstream: improve some error messages; ok markus@ by djm@openbsd.org · 4 years, 9 months ago
  86. c54cd18 upstream: SK API and sk-helper error/PIN passing by djm@openbsd.org · 4 years, 9 months ago
  87. 79fe22d upstream: implement loading resident keys in ssh-add by djm@openbsd.org · 4 years, 9 months ago
  88. 27753a8 upstream: implement loading of resident keys in ssh-sk-helper by djm@openbsd.org · 4 years, 9 months ago
  89. 14cea36 upstream: resident keys support in SK API by djm@openbsd.org · 4 years, 9 months ago
  90. 2fe05fc upstream: Factor out parsing of struct sk_enroll_response by djm@openbsd.org · 4 years, 9 months ago
  91. 4532bd0 upstream: basic support for generating FIDO2 resident keys by djm@openbsd.org · 4 years, 9 months ago
  92. 3e60d18 upstream: remove single-letter flags for moduli options by djm@openbsd.org · 4 years, 9 months ago
  93. 1e645fe upstream: prepare for use of ssh-keygen -O flag beyond certs by djm@openbsd.org · 4 years, 9 months ago
  94. 20ccd85 upstream: sort -Y internally in the options list, as is already by jmc@openbsd.org · 4 years, 9 months ago
  95. 5b6c954 upstream: in the options list, sort -Y and -y; by jmc@openbsd.org · 4 years, 9 months ago
  96. 141df48 upstream: Replace the term "security key" with "(FIDO) by naddy@openbsd.org · 4 years, 9 months ago
  97. fbd9729 upstream: unit tests for ForwardAgent=/path; from Eric Chiang by djm@openbsd.org · 4 years, 10 months ago
  98. e5b7cf8 upstream: test security key host keys in addition to user keys by djm@openbsd.org · 4 years, 10 months ago
  99. 40be78f upstream: Allow forwarding a different agent socket to the path by djm@openbsd.org · 4 years, 10 months ago
  100. 416f153 upstream: SSH U2F keys can now be used as host keys. Fix a garden by naddy@openbsd.org · 4 years, 10 months ago