- 624d19a fix compilation with openssl built without ECC by Eneas U de Queiroz · 6 years ago
- 1801cd1 Simplify OpenSSL 1.1 function checks. by Darren Tucker · 6 years ago
- bc32f11 Fix pasto for HAVE_EVP_CIPHER_CTX_SET_IV. by Darren Tucker · 6 years ago
- 3719df6 Import new moduli. by Darren Tucker · 6 years ago
- 595605d Update check for minimum OpenSSL version. by Darren Tucker · 6 years ago
- 6ab75ab Update required OpenSSL versions to match current. by Darren Tucker · 6 years ago
- c801b0e Use detected version functions in openssl compat. by Darren Tucker · 6 years ago
- 262d81a Check for the existence of openssl version funcs. by Darren Tucker · 6 years ago
- 406a24b fix builds on OpenSSL <= 1.0.x by Damien Miller · 6 years ago
- 859754b remove remaining references to SSLeay by Damien Miller · 6 years ago
- b9fea45 regen depend by Damien Miller · 6 years ago
- a65784c upstream: refer to OpenSSL not SSLeay; by djm@openbsd.org · 6 years ago
- c0a3526 fix compile for openssl 1.0.x w/ --with-ssl-engine by Damien Miller · 6 years ago
- 31b4952 Include openssl compatibility. by Darren Tucker · 6 years ago
- a4fc253 upstream: when printing certificate contents "ssh-keygen -Lf by djm@openbsd.org · 6 years ago
- 83b3d99 upstream: struct sockaddr_storage is guaranteed to be large enough, by florian@openbsd.org · 6 years ago
- aede1c3 Require OpenSSL 1.1.x series 1.1.0g or greater by Damien Miller · 6 years ago
- 08300c2 unbreak compilation with --with-ssl-engine by Damien Miller · 6 years ago
- 1673274 Remove gcc spectre mitigation flags. by Darren Tucker · 6 years ago
- 4e23dee Avoid deprecated OPENSSL_config when using 1.1.x by Damien Miller · 6 years ago
- 797cdd9 Don't avoid our *sprintf replacements. by Darren Tucker · 6 years ago
- e526127 Check if snprintf understands %zu. by Darren Tucker · 6 years ago
- cf39f87 remove stale link, tweak by Damien Miller · 6 years ago
- a7205e6 update version numbers ahead of release by Damien Miller · 6 years ago
- 1a4a9cf upstream: don't send new-style rsa-sha2-*-cert-v01@openssh.com names to by djm@openbsd.org · 6 years ago
- dc8ddcd update depends by Damien Miller · 6 years ago
- 26841ac some more duplicated key algorithm lines by Damien Miller · 6 years ago
- 5d9d176 fix duplicated algorithm specification lines by Damien Miller · 6 years ago
- ebfafd9 upstream: typo in plain RSA algorithm counterpart names for by djm@openbsd.org · 6 years ago
- c29b111 check pw_passwd != NULL here too by Damien Miller · 6 years ago
- fe8e8f3 check for NULL return from shadow_pw() by Damien Miller · 6 years ago
- acc59cb upstream: introducing openssh 7.9 by deraadt@openbsd.org · 6 years ago
- 1273115 supply callback to PEM_read_bio_PrivateKey by Damien Miller · 6 years ago
- d1d301a in pick_salt() avoid dereference of NULL passwords by Damien Miller · 6 years ago
- edbb6fe upstream: Treat all PEM_read_bio_PrivateKey() errors when a passphrase by djm@openbsd.org · 6 years ago
- 2581333 upstream: Support using service names for port numbers. by naddy@openbsd.org · 6 years ago
- e0d6501 upstream: when the peer sends a channel-close message, make sure we by djm@openbsd.org · 6 years ago
- 6f1aabb upstream: factor out channel status formatting from by djm@openbsd.org · 6 years ago
- f1dd179 upstream: include a little more information about the status and by djm@openbsd.org · 6 years ago
- 2d1428b upstream: explicit_bzero here to be consistent with other kex*.c; by djm@openbsd.org · 6 years ago
- 5eff5b8 upstream: Allow ssh_config IdentityAgent directive to accept by djm@openbsd.org · 6 years ago
- a46ac4d upstream: mention INFO@openssh.com for sending SIGINFO by djm@openbsd.org · 6 years ago
- ff3a411 only support SIGINFO on systems with SIGINFO by Damien Miller · 6 years ago
- cd98925 upstream: Add server support for signalling sessions via the SSH by djm@openbsd.org · 6 years ago
- dba5025 upstream: remove big ugly TODO comment from start of file. Some of by djm@openbsd.org · 6 years ago
- 92b61a3 upstream: Document mux proxy mode; added by Markus in openssh-7.4 by djm@openbsd.org · 6 years ago
- 9d883a1 upstream: s/process_mux_master/mux_master_process/ in mux master by djm@openbsd.org · 6 years ago
- c2fa53c Remove unused variable in _ssh_compat_fflush. by Darren Tucker · 6 years ago
- d1b3540 Import updated moduli. by Darren Tucker · 6 years ago
- b5e412a upstream: Allow ssh_config ForwardX11Timeout=0 to disable the by djm@openbsd.org · 6 years ago
- cb24d9f upstream: when compiled with GSSAPI support, cache supported method by djm@openbsd.org · 6 years ago
- bbc8af7 upstream: In sshkey_in_file(), ignore keys that are considered for by djm@openbsd.org · 6 years ago
- 383a33d upstream: Treat connections with ProxyJump specified the same as ones by djm@openbsd.org · 6 years ago
- 0cbed24 upstream: actually make CASignatureAlgorithms available as a config by djm@openbsd.org · 6 years ago
- 6252887 upstream: Import updated moduli. by dtucker@openbsd.org · 6 years ago
- e6933a2 upstream: reorder CASignatureAlgorithms, and add them to the by jmc@openbsd.org · 6 years ago
- aa083aa upstream: fix "ssh -Q sig" to show correct signature algorithm list by djm@openbsd.org · 6 years ago
- ecac7e1 upstream: add CASignatureAlgorithms option for the client, allowing by djm@openbsd.org · 6 years ago
- 86e5737 upstream: Add sshd_config CASignatureAlgorithms option to allow by djm@openbsd.org · 6 years ago
- f80e68e upstream: Make "ssh-add -q" do what it says on the tin: silence by djm@openbsd.org · 6 years ago
- 5e53232 upstream: When choosing a prime from the moduli file, avoid by millert@openbsd.org · 6 years ago
- cce8cbe Fix openssl-1.1 fallout for --without-openssl. by Darren Tucker · 6 years ago
- 149519b add futex(2) syscall to seccomp sandbox by Damien Miller · 6 years ago
- 4488ae1 really add source for authopt_fuzz this time by Damien Miller · 6 years ago
- 9201784 remove accidentally checked-in authopt_fuzz binary by Damien Miller · 6 years ago
- beb9e52 upstream: second try, deals properly with missing and private-only by djm@openbsd.org · 6 years ago
- 6bc5a24 fuzzer harness for authorized_keys option parsing by Damien Miller · 6 years ago
- 6c8b82f upstream: revert following; deals badly with agent keys by djm@openbsd.org · 6 years ago
- 6da046f upstream: garbage-collect moribund ssh_new_private() API. by djm@openbsd.org · 6 years ago
- 1f24ac5 upstream: Use consistent format in debug log for keys readied, by djm@openbsd.org · 6 years ago
- 488c932 upstream: Fix warnings caused by user_from_uid() and group_from_gid() by millert@openbsd.org · 6 years ago
- 0aa1f23 allow SIGUSR1 as synonym for SIGINFO by Damien Miller · 6 years ago
- d64e785 add compat header by Damien Miller · 6 years ago
- a3fd807 upstream: missed a bit of openssl-1.0.x API in this unittest by djm@openbsd.org · 6 years ago
- 86e0a9f upstream: use only openssl-1.1.x API here too by djm@openbsd.org · 6 years ago
- 48f54b9 adapt -portable to OpenSSL 1.1x API by Damien Miller · 6 years ago
- 8611295 forgot to stage these test files in commit d70d061 by Damien Miller · 6 years ago
- 482d23b upstream: hold our collective noses and use the openssl-1.1.x API in by djm@openbsd.org · 6 years ago
- d70d061 upstream: Include certs with multiple RSA signature variants in by djm@openbsd.org · 6 years ago
- f803b26 upstream: test revocation by explicit hash and by fingerprint by djm@openbsd.org · 6 years ago
- 2de78bc upstream: s/sshkey_demote/sshkey_from_private/g by djm@openbsd.org · 6 years ago
- 41c115a delete the correct thing; kexfuzz binary by Damien Miller · 6 years ago
- f0fcd7e upstream: fix edit mistake; spotted by jmc@ by djm@openbsd.org · 6 years ago
- 4cc259b upstream: add SSH_ALLOWED_CA_SIGALGS - the default list of by djm@openbsd.org · 6 years ago
- ba9e788 upstream: add sshkey_check_cert_sigtype() that checks a by djm@openbsd.org · 6 years ago
- a70fd4a upstream: add cert->signature_type field and keep it in sync with by djm@openbsd.org · 6 years ago
- 357128a upstream: Add "ssh -Q sig" to allow listing supported signature by djm@openbsd.org · 6 years ago
- 9405c62 upstream: allow key revocation by SHA256 hash and allow ssh-keygen by djm@openbsd.org · 6 years ago
- 50e2687 upstream: log certificate fingerprint in authentication by djm@openbsd.org · 6 years ago
- de37ca9 upstream: Add FALLTHROUGH comments where appropriate. Patch from by dtucker@openbsd.org · 6 years ago
- 247766c upstream: ssh -MM requires confirmation for all operations that by djm@openbsd.org · 6 years ago
- db8bb80 upstream: fix misplaced parenthesis inside if-clause. it's harmless by mestre@openbsd.org · 6 years ago
- 086cc61 upstream: fix build with DEBUG_PK enabled by mestre@openbsd.org · 6 years ago
- 2678833 Handle ngroups>_SC_NGROUPS_MAX. by Darren Tucker · 6 years ago
- 039bf2a Initial len for the fmt=NULL case. by Darren Tucker · 6 years ago
- ea9c06e Include stdlib.h. by Darren Tucker · 6 years ago
- 9617816 document some more regress control env variables by Damien Miller · 6 years ago
- 71508e0 shorten temporary SSH_REGRESS_TMP path by Damien Miller · 6 years ago
- 26739cf rebuild dependencies by Damien Miller · 6 years ago
- ff72902 fix path in distclean target by Damien Miller · 6 years ago