Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at https://github.com/powershell/Win32-OpenSSH
Go to file
Andrew 0c3137f621
Fix hang in syncio_close (#763)
2024-12-18 15:36:43 -05:00
.azdo remove credscan from PR CI job (#741) 2024-08-12 12:25:23 -04:00
.github disable upstream workflows 2024-08-02 17:44:45 -04:00
contrib Fix hang in syncio_close (#763) 2024-12-18 15:36:43 -05:00
m4 Improve detection of -fzero-call-used-regs=used. 2024-03-25 10:12:58 +11:00
openbsd-compat Merge pull request #737 from tgauth/merge-9.8 2024-09-18 14:27:52 -04:00
regress Fix include paths (#770) 2024-12-10 11:57:15 -05:00
.depend upstream: Add a facility to sshd(8) to penalise particular 2024-06-07 03:35:40 +10:00
.git_allowed_signers add new token-based signing key for dtucker@ 2024-03-30 16:05:59 +11:00
.git_allowed_signers.asc add new token-based signing key for dtucker@ 2024-03-30 16:05:59 +11:00
.gitignore merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
.skipped-commit-ids upstream: enable -fret-clean on amd64, for libc libcrypto ld.so 2024-06-07 03:18:44 +10:00
CREDITS convert to UTF-8; from Mike Frysinger 2019-07-29 09:49:23 +10:00
ChangeLog autogenerated files for release 2024-07-01 14:36:28 +10:00
INSTALL remove support for old libcrypto 2023-03-24 13:56:25 +11:00
LICENCE Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
Makefile.in Makefile support for sshd-session 2024-05-17 14:41:37 +10:00
NOTICE Added NOTICE 2022-02-28 23:58:28 -08:00
OVERVIEW upstream: refer to OpenSSL not SSLeay; 2018-10-23 16:57:54 +11:00
PROTOCOL upstream: fix missing field in users-groups-by-id@openssh.com reply 2024-01-08 16:06:29 +11:00
PROTOCOL.agent upstream: add missing reserved fields to key constraint protocol 2024-04-30 15:46:39 +10:00
PROTOCOL.certkeys upstream: PROTOCOL.certkeys: update reference from IETF draft to 2021-06-06 13:24:37 +10:00
PROTOCOL.chacha20poly1305 upstream: Fix some typos and an incorrect word in docs. Patch from 2020-02-21 12:27:23 +11:00
PROTOCOL.key upstream: in OpenSSH private key format, correct type for subsequent 2024-03-30 16:57:32 +11:00
PROTOCOL.krl upstream: remove vestigal support for KRL signatures 2023-07-17 14:52:35 +10:00
PROTOCOL.mux upstream: Remove outdated note from PROTOCOL.mux 2024-01-08 16:12:17 +11:00
PROTOCOL.sshsig upstream: Add RCS IDs to the few files that are missing them; from 2020-08-31 14:34:41 +10:00
PROTOCOL.u2f upstream: when writing an attestation blob for a FIDO key, record all 2020-09-09 13:11:34 +10:00
README version numbers 2024-07-01 14:33:26 +10:00
README.dns Minor documentation update: 2020-02-11 12:51:24 +11:00
README.md Add Coverity badges. 2023-03-03 14:50:03 +11:00
README.platform nite that recent OSX tun/tap is unsupported 2024-01-08 16:26:37 +11:00
README.privsep Privsep is now required. 2019-09-19 15:41:23 +10:00
README.tun
SECURITY.md basic SECURITY.md (refers people to the website) 2021-11-03 12:08:21 +11:00
TODO Remove support for S/Key 2018-07-31 12:59:30 +10:00
aclocal.m4 autogenerated files for release 2024-07-01 14:36:28 +10:00
addr.c upstream: Use strtonum() instead of severely non-idomatic 2024-04-30 12:16:50 +10:00
addr.h Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
addrmatch.c upstream: highly polished whitespace, mostly fixing spaces-for-tab 2021-04-03 17:23:02 +11:00
atomicio.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
atomicio.h upstream: move client/server SSH-* banners to buffers under 2018-12-27 14:38:22 +11:00
audit-bsm.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
audit-linux.c last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
audit.c last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
audit.h last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
auth-bsdauth.c remove duplicate #includes 2019-10-02 10:54:28 +10:00
auth-krb5.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
auth-options.c resolve merge conflicts 2023-08-21 16:35:13 -04:00
auth-options.h upstream: make authorized_keys environment="..." directives 2021-07-23 14:07:19 +10:00
auth-pam.c propagate PAM crashes to PerSourcePenalties 2024-06-17 17:02:18 +10:00
auth-pam.h upstream: Start the process of splitting sshd into separate 2024-05-17 14:41:35 +10:00
auth-passwd.c openssh-8.5 2021-04-02 10:14:32 -07:00
auth-rhosts.c upstream: Start the process of splitting sshd into separate 2024-05-17 14:41:35 +10:00
auth-shadow.c Cast time_t's in debug output to long long. 2023-02-27 21:04:22 +11:00
auth-sia.c
auth-sia.h
auth.c start merge - not compiling 2024-07-24 10:25:43 -04:00
auth.h merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
auth2-chall.c upstream: use the new variant log macros instead of prepending 2020-10-18 23:46:29 +11:00
auth2-gss.c upstream: g/c unused variable 2024-05-17 14:42:49 +10:00
auth2-hostbased.c upstream: Start the process of splitting sshd into separate 2024-05-17 14:41:35 +10:00
auth2-kbdint.c upstream: Start the process of splitting sshd into separate 2024-05-17 14:41:35 +10:00
auth2-methods.c fix win32 sshd and sshd-session 2024-08-02 14:21:01 -04:00
auth2-none.c upstream: Start the process of splitting sshd into separate 2024-05-17 14:41:35 +10:00
auth2-passwd.c upstream: Start the process of splitting sshd into separate 2024-05-17 14:41:35 +10:00
auth2-pubkey.c start merge - not compiling 2024-07-24 10:25:43 -04:00
auth2-pubkeyfile.c resolve merge conflicts 2023-08-21 16:35:13 -04:00
auth2.c start merge - not compiling 2024-07-24 10:25:43 -04:00
authfd.c upstream: Make it possible to load certs from PKCS#11 tokens 2023-12-19 01:52:55 +11:00
authfd.h upstream: Make it possible to load certs from PKCS#11 tokens 2023-12-19 01:52:55 +11:00
authfile.c fix open call for ssh-keygen (#764) 2024-11-18 16:55:49 -05:00
authfile.h upstream: factor out reading/writing sshbufs to dedicated 2020-01-26 10:18:42 +11:00
bitmap.c
bitmap.h
buildpkg.sh.in whitespace at EOL 2020-12-22 19:43:55 +11:00
canohost.c upstream: Return immediately from get_sock_port 2023-03-31 16:17:22 +11:00
canohost.h
chacha.c upstream: move other RCSIDs to before their respective license blocks 2023-07-17 15:33:51 +10:00
chacha.h upstream: whitespace (tab after space) 2021-04-03 17:20:00 +11:00
channels.c start merge - not compiling 2024-07-24 10:25:43 -04:00
channels.h upstream: remove unused struct fwd_perm_list, no decl with complete 2024-05-27 11:55:02 +10:00
cipher-aes.c remove support for old libcrypto 2023-03-24 13:56:25 +11:00
cipher-aesctr.c
cipher-aesctr.h
cipher-chachapoly-libcrypto.c upstream: move other RCSIDs to before their respective license blocks 2023-07-17 15:33:51 +10:00
cipher-chachapoly.c upstream: move other RCSIDs to before their respective license blocks 2023-07-17 15:33:51 +10:00
cipher-chachapoly.h upstream: make Chacha20-POLY1305 context struct opaque; ok tb@ as 2020-04-03 15:36:57 +11:00
cipher.c upstream: spelling; ok djm@ 2024-05-17 14:42:49 +10:00
cipher.h upstream: Garbage collect cipher_get_keyiv_len() 2023-10-11 15:57:08 +11:00
cleanup.c
clientloop.c merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
clientloop.h upstream: remove prototypes with no matching function; ok djm@ 2024-05-22 14:21:13 +10:00
compat.c upstream: Refactor creation of KEX proposal. 2023-03-06 23:31:52 +11:00
compat.h upstream: Refactor creation of KEX proposal. 2023-03-06 23:31:52 +11:00
config.guess Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
config.h.in autogenerated files for release 2024-07-01 14:36:28 +10:00
config.sub Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
configure autogenerated files for release 2024-07-01 14:36:28 +10:00
configure.ac Fix detection of setres*id on GNU/Hurd 2024-07-03 19:25:07 +10:00
crypto_api.h Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
defines.h Correct value for IPTOS_DSCP_LE. 2021-12-15 10:50:33 +11:00
dh.c Merge upstream V8_6 2021-04-21 11:30:22 -07:00
dh.h upstream: Add ModuliFile keyword to sshd_config to specify the 2021-03-13 13:14:13 +11:00
digest-libc.c Use SHA.*_HMAC_BLOCK_SIZE if needed. 2021-12-23 11:36:08 +11:00
digest-openssl.c upstream: whitespace; no code change 2020-10-29 13:54:13 +11:00
digest.h
dispatch.c upstream: Remove unused compat.h includes. 2023-03-05 19:27:31 +11:00
dispatch.h upstream: remove last traces of old packet API! 2019-01-20 09:45:18 +11:00
dns.c upstream: Plug mem leak on error path. Coverity CID 405026, ok djm@. 2023-03-10 15:42:37 +11:00
dns.h upstream: let ssh-keygen and ssh-keyscan accept 2023-02-10 16:12:42 +11:00
ed25519.c Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
ed25519.sh upstream: spelling; ok djm@ 2024-05-17 14:42:49 +10:00
entropy.c Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
entropy.h
fatal.c upstream: fix SEGV on fatal() errors spotted by dtucker@ 2020-10-19 19:09:08 +11:00
fixalgorithms
fixpaths
groupaccess.c upstream: Move checks for lists of users or groups into their own 2019-03-08 15:10:07 +11:00
groupaccess.h
gss-genr.c upstream: whitespace 2024-02-01 13:42:45 +11:00
gss-serv-krb5.c
gss-serv.c resolve merge conflicts 2023-08-21 16:35:13 -04:00
hash.c Remove old OpenBSD version marker. 2021-07-03 20:36:06 +10:00
hmac.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
hmac.h
hostfile.c upstream: fseek to end of known_hosts before writing to it. 2023-02-21 18:28:26 +11:00
hostfile.h upstream: make struct hostkeys public; I have no idea why I made it 2021-01-26 12:21:48 +11:00
includes.h remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
install-sh Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
kex-names.c upstream: missing files from previous 2024-08-02 14:21:00 -04:00
kex.c start merge - not compiling 2024-07-24 10:25:43 -04:00
kex.h upstream: Start the process of splitting sshd into separate 2024-05-17 14:41:35 +10:00
kexc25519.c address codeQL warnings (#598) 2022-11-30 11:57:01 -05:00
kexdh.c Move signal.h up include order to match upstream. 2021-07-03 20:38:09 +10:00
kexecdh.c Put ssherr.h back as it's actually needed. 2019-10-02 14:30:55 +10:00
kexgen.c upstream: Record session ID, host key and sig at intital KEX 2021-12-20 09:24:42 +11:00
kexgex.c upstream: pass most arguments to the KEX hash functions as sshbuf 2019-01-23 13:02:02 +11:00
kexgexc.c upstream: Record session ID, host key and sig at intital KEX 2021-12-20 09:24:42 +11:00
kexgexs.c upstream: Start the process of splitting sshd into separate 2024-05-17 14:41:35 +10:00
kexsntrup761x25519.c upstream: fix unintended sizeof pointer in debug path ok markus@ 2021-12-07 12:30:50 +11:00
krl.c upstream: Move RCSID to before license block and away from #includes, 2023-07-17 15:24:14 +10:00
krl.h upstream: remove vestigal support for KRL signatures 2023-07-17 14:52:35 +10:00
log.c address review feedback 2024-09-13 16:33:01 -04:00
log.h upstream: retire unused API 2024-06-28 08:37:11 +10:00
loginrec.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
loginrec.h polish whitespace for portable files 2021-04-03 17:47:37 +11:00
logintest.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
mac.c remove duplicate #includes 2019-10-02 10:54:28 +10:00
mac.h
match.c resolve merge conflicts 2023-08-21 16:35:13 -04:00
match.h upstream: some language improvements; ok markus 2020-07-15 15:07:42 +10:00
mdoc2man.awk
misc.c merge latestw_all 2024-09-13 16:34:42 -04:00
misc.h merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
mkinstalldirs
moduli upstream: Import regenerated moduli. 2024-03-26 13:03:00 +11:00
moduli.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
moduli.5 Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
moduli.c upstream: Always call fclose on checkpoints. 2023-03-02 18:24:51 +11:00
monitor.c username logging fix (#762) 2024-11-21 16:42:02 -05:00
monitor.h start merge - not compiling 2024-07-24 10:25:43 -04:00
monitor_fdpass.c upstream: use the new variant log macros instead of prepending 2020-10-18 23:46:29 +11:00
monitor_fdpass.h
monitor_wrap.c merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
monitor_wrap.h upstream: remove prototypes with no matching function; ok djm@ 2024-05-22 14:21:13 +10:00
msg.c upstream: Start the process of splitting sshd into separate 2024-05-17 14:41:35 +10:00
msg.h
mux.c upstream: Include existing mux path in debug message. 2023-11-24 12:01:31 +11:00
myproposal.h Removed sha1-based MACs from default config (#706) 2023-11-30 18:08:35 -08:00
nchan.c upstream: whitespace 2024-02-01 13:42:45 +11:00
nchan.ms
nchan2.ms
openssh.xml.in
opensshd.init.in Replace shell function with ssh-keygen -A. 2021-08-20 18:14:13 +10:00
packet.c merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
packet.h upstream: remove prototypes with no matching function; ok djm@ 2024-05-22 14:21:13 +10:00
pal_doexec.h Fix of 1211 and 1082 (#349) 2018-11-05 12:22:20 -08:00
pathnames.h fix win32 sshd and sshd-session 2024-08-02 14:21:01 -04:00
pkcs11.h
platform-listen.c Makefile support for sshd-session 2024-05-17 14:41:37 +10:00
platform-misc.c
platform-pledge.c
platform-tracing.c Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
platform.c merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
platform.h notify systemd on listen and reload 2024-04-03 14:40:32 +11:00
poly1305.c upstream: move other RCSIDs to before their respective license blocks 2023-07-17 15:33:51 +10:00
poly1305.h
progressmeter.c resolve merge conflicts 2023-08-21 16:35:13 -04:00
progressmeter.h upstream: Have progressmeter force an update at the beginning and 2019-01-25 06:32:14 +11:00
readconf.c merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
readconf.h upstream: Separate parsing of string array options from applying them 2024-03-04 14:46:46 +11:00
readpass.c start merge - not compiling 2024-07-24 10:25:43 -04:00
rijndael.c
rijndael.h upstream: Make prototype for rijndaelEncrypt match function 2021-09-29 11:09:27 +10:00
sandbox-capsicum.c Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
sandbox-darwin.c sandbox-darwin.c: fix missing prototypes. 2020-01-21 10:37:25 +11:00
sandbox-null.c
sandbox-pledge.c upstream: use the new variant log macros instead of prepending 2020-10-18 23:46:29 +11:00
sandbox-rlimit.c upstream: use the new variant log macros instead of prepending 2020-10-18 23:46:29 +11:00
sandbox-seccomp-filter.c Improve seccomp compat on older systems. 2023-02-11 12:32:19 +11:00
sandbox-solaris.c
sandbox-systrace.c upstream: Replace all calls to signal(2) with a wrapper around 2020-01-23 18:51:25 +11:00
scp.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
scp.1 Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
scp.c fix for msrc cases (#752) 2024-10-08 16:25:04 -04:00
servconf.c Fix include paths (#770) 2024-12-10 11:57:15 -05:00
servconf.h add a sshd_config PamServiceName option 2024-06-14 14:20:54 +10:00
serverloop.c upstream: promote connection-closed messages from verbose to info 2024-06-17 18:31:39 +10:00
serverloop.h
session.c merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
session.h Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
sftp-client.c fix for msrc cases (#752) 2024-10-08 16:25:04 -04:00
sftp-client.h upstream: the sftp code was one of my first contributions to 2023-09-08 15:59:08 +10:00
sftp-common.c upstream: don't attempt to decode a ridiculous number of 2023-03-31 15:06:20 +11:00
sftp-common.h Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
sftp-glob.c upstream: rename remote_glob() -> sftp_glob() to match other API 2023-09-11 09:14:02 +10:00
sftp-realpath.c upstream: sys/param.h is not needed for any visible reason 2021-09-03 14:20:22 +10:00
sftp-server-main.c Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
sftp-server.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
sftp-server.8 upstream: standardise the grammar in the options list; issue 2021-08-03 09:39:57 +10:00
sftp-server.c start merge - not compiling 2024-07-24 10:25:43 -04:00
sftp-usergroup.c upstream: the sftp code was one of my first contributions to 2023-09-08 15:59:08 +10:00
sftp-usergroup.h Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
sftp.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
sftp.1 Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
sftp.c merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
sftp.h
sk-api.h Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
sk-usbhid.c resolve merge conflicts 2023-08-21 16:35:13 -04:00
smult_curve25519_ref.c
sntrup761.c Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
sntrup761.sh Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
srclimit.c upstream: stricter check for overfull tables in penalty record path 2024-06-20 10:19:10 +10:00
srclimit.h upstream: Add a facility to sshd(8) to penalise particular 2024-06-07 03:35:40 +10:00
ssh-add.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
ssh-add.1 upstream: disable the DSA signature algorithm by default; ok 2024-06-17 18:48:29 +10:00
ssh-add.c Merge remote-tracking branch 'upstrem-bsd/master' into sync-with-upstream-2 2024-01-22 11:09:08 -05:00
ssh-agent.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
ssh-agent.1 use portable provider allowlist path in manpage 2023-10-04 10:54:04 +11:00
ssh-agent.c upstream: avoid logging in signal handler by converting mainloop to 2024-03-09 16:13:57 +11:00
ssh-dss.c upstream: make DSA key support compile-time optional, defaulting to 2024-01-11 15:46:22 +11:00
ssh-ecdsa-sk.c upstream: Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 17:26:53 +11:00
ssh-ecdsa.c upstream: Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 17:26:53 +11:00
ssh-ed25519-sk.c Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
ssh-ed25519.c Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
ssh-gss.h upstream: remove prototypes with no matching function; ok djm@ 2024-05-22 14:21:13 +10:00
ssh-keygen.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
ssh-keygen.1 upstream: remove one more mention of DSA 2024-06-20 10:19:09 +10:00
ssh-keygen.c Merge remote-tracking branch 'upstrem-bsd/master' into sync-with-upstream-2 2024-01-22 11:09:08 -05:00
ssh-keyscan.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
ssh-keyscan.1 upstream: disable the DSA signature algorithm by default; ok 2024-06-17 18:48:29 +10:00
ssh-keyscan.c upstream: make host/banner comments go to stderr instead of stdout, 2024-06-14 10:27:34 +10:00
ssh-keysign.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
ssh-keysign.8 upstream: disable the DSA signature algorithm by default; ok 2024-06-17 18:48:29 +10:00
ssh-keysign.c upstream: stricter validation of messaging socket fd number; disallow 2024-04-30 15:53:26 +10:00
ssh-pkcs11-client.c address review feedback 2024-09-13 16:33:01 -04:00
ssh-pkcs11-helper.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
ssh-pkcs11-helper.8 Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
ssh-pkcs11-helper.c upstream: check for POLLHUP wherever we check for POLLIN 2021-11-18 14:32:54 +11:00
ssh-pkcs11.c upstream: Oops, incorrect hex conversion spotted by claudio. 2024-04-30 12:16:54 +10:00
ssh-pkcs11.h resolve merge conflict 2023-12-19 20:33:17 -05:00
ssh-rsa.c upstream: Remove unused compat.h includes. 2023-03-05 19:27:31 +11:00
ssh-sandbox.h
ssh-sk-client.c remove redundant WINDOWS preprocessor definitions (#697) 2023-10-16 09:56:42 -04:00
ssh-sk-helper.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
ssh-sk-helper.8 Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
ssh-sk-helper.c address review feedback 2024-09-13 16:33:01 -04:00
ssh-sk.c resolve merge conflicts 2023-08-21 16:35:13 -04:00
ssh-sk.h upstream: When downloading resident keys from a FIDO token, pass 2021-10-28 13:56:59 +11:00
ssh-xmss.c conditionalise stdint.h inclusion on HAVE_STDINT_H 2023-07-18 15:41:12 +10:00
ssh.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
ssh.1 upstream: ssl(8) no longer contains a HISTORY section; 2024-06-28 08:36:16 +10:00
ssh.c Merge remote-tracking branch 'upstrem-bsd/master' into sync-with-upstream-2 2024-01-22 11:09:08 -05:00
ssh.h upstream: allow some additional control over the use of ssh-askpass 2020-07-15 15:08:10 +10:00
ssh2.h upstream: Reserve a range of "local extension" message numbers that 2023-10-10 14:58:55 +11:00
ssh_api.c start merge - not compiling 2024-07-24 10:25:43 -04:00
ssh_api.h
ssh_config upstream: CheckHostIP has defaulted to 'no' for a while; make the 2023-08-03 09:09:02 +10:00
ssh_config.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
ssh_config.5 upstream: disable the DSA signature algorithm by default; ok 2024-06-17 18:48:29 +10:00
sshbuf-getput-basic.c re-merge 9.1 2023-02-10 10:49:51 -05:00
sshbuf-getput-crypto.c upstream: whitespace 2024-02-01 13:42:45 +11:00
sshbuf-io.c Bagajjal/compile test v8.6 (#503) 2021-04-29 12:41:08 -07:00
sshbuf-misc.c address codeQL warnings (#598) 2022-11-30 11:57:01 -05:00
sshbuf.c Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
sshbuf.h Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
sshconnect.c start merge - not compiling 2024-07-24 10:25:43 -04:00
sshconnect.h upstream: add explict check for server hostkey type against 2024-04-30 12:22:35 +10:00
sshconnect2.c merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
sshd-common.c start merge - not compiling 2024-07-24 10:25:43 -04:00
sshd-common.h start merge - not compiling 2024-07-24 10:25:43 -04:00
sshd-session.c merge the rest of the 9.8 changes from upstream 2024-08-02 17:22:58 -04:00
sshd.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
sshd.8 upstream: disable the DSA signature algorithm by default; ok 2024-06-17 18:48:29 +10:00
sshd.c address review feedback 2024-09-13 16:33:01 -04:00
sshd_config Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
sshd_config.0 autogenerated files for release 2024-07-01 14:36:28 +10:00
sshd_config.5 upstream: correct keyword; from Yatao Su via GHPR509 2024-07-11 08:30:18 +10:00
ssherr.c upstream: improve the error message for u2f enrollment errors by 2020-01-26 10:18:42 +11:00
ssherr.h upstream: improve the error message for u2f enrollment errors by 2020-01-26 10:18:42 +11:00
sshfileperm.h add check for program data folder permissions during sshd service startup (#686) 2023-09-05 12:59:28 -04:00
sshkey-xmss.c Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
sshkey-xmss.h Revert "Merge 9.2 (#657)" 2023-02-10 10:03:27 -05:00
sshkey.c Merge remote-tracking branch 'upstrem-bsd/master' into sync-with-upstream-2 2024-01-22 11:09:08 -05:00
sshkey.h upstream: remove prototypes with no matching function; ok djm@ 2024-05-22 14:21:13 +10:00
sshlogin.c Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
sshlogin.h
sshpty.c Include stdio.h for FILE in misc.h. 2020-12-22 18:56:54 +11:00
sshpty.h
sshsig.c fix merge conflict 2024-03-11 11:46:39 -04:00
sshsig.h upstream: Add ssh-keygen -Y match-principals operation to perform 2021-11-27 18:22:41 +11:00
sshtty.c
survey.sh.in
ttymodes.c upstream: remove global variable used to stash compat flags and use the 2021-01-27 20:28:25 +11:00
ttymodes.h
uidswap.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
uidswap.h
umac.c upstream: correct size for array argument when changing 2023-03-07 16:38:39 +11:00
umac.h upstream: spelling ok dtucker@ 2022-01-01 15:19:48 +11:00
umac128.c
utf8.c upstream: expose vasnmprintf(); ok (as part of other commit) markus 2020-05-01 16:40:11 +10:00
utf8.h upstream: highly polished whitespace, mostly fixing spaces-for-tab 2021-04-03 17:23:02 +11:00
version.h Fix banner (#751) 2024-09-26 17:51:06 -04:00
xmalloc.c Revert "Merge 9.1 (#626)" 2023-02-10 10:47:24 -05:00
xmalloc.h upstream: highly polished whitespace, mostly fixing spaces-for-tab 2021-04-03 17:23:02 +11:00
xmss_commons.c wrap stdint.h include in HAVE_STDINT_H 2019-10-09 09:06:35 +11:00
xmss_commons.h
xmss_fast.c wrap stdint.h include in HAVE_STDINT_H 2019-10-09 09:06:35 +11:00
xmss_fast.h
xmss_hash.c upstream: spelling; ok markus@ 2024-01-08 13:25:21 +11:00
xmss_hash.h
xmss_hash_address.c wrap stdint.h include in HAVE_STDINT_H 2019-10-09 09:06:35 +11:00
xmss_hash_address.h
xmss_wots.c wrap stdint.h include in HAVE_STDINT_H 2019-10-09 09:06:35 +11:00
xmss_wots.h

README.md

Portable OpenSSH

C/C++ CI Fuzzing Status Coverity Status

OpenSSH is a complete implementation of the SSH protocol (version 2) for secure remote login, command execution and file transfer. It includes a client ssh and server sshd, file transfer utilities scp and sftp as well as tools for key generation (ssh-keygen), run-time key storage (ssh-agent) and a number of supporting programs.

This is a port of OpenBSD's OpenSSH to most Unix-like operating systems, including Linux, OS X and Cygwin. Portable OpenSSH polyfills OpenBSD APIs that are not available elsewhere, adds sshd sandboxing for more operating systems and includes support for OS-native authentication and auditing (e.g. using PAM).

Documentation

The official documentation for OpenSSH are the man pages for each tool:

Stable Releases

Stable release tarballs are available from a number of download mirrors. We recommend the use of a stable release for most users. Please read the release notes for details of recent changes and potential incompatibilities.

Building Portable OpenSSH

Dependencies

Portable OpenSSH is built using autoconf and make. It requires a working C compiler, standard library and headers.

libcrypto from either LibreSSL or OpenSSL may also be used. OpenSSH may be built without either of these, but the resulting binaries will have only a subset of the cryptographic algorithms normally available.

zlib is optional; without it transport compression is not supported.

FIDO security token support needs libfido2 and its dependencies and will be enabled automatically if they are found.

In addition, certain platforms and build-time options may require additional dependencies; see README.platform for details about your platform.

Building a release

Releases include a pre-built copy of the configure script and may be built using:

tar zxvf openssh-X.YpZ.tar.gz
cd openssh
./configure # [options]
make && make tests

See the Build-time Customisation section below for configure options. If you plan on installing OpenSSH to your system, then you will usually want to specify destination paths.

Building from git

If building from git, you'll need autoconf installed to build the configure script. The following commands will check out and build portable OpenSSH from git:

git clone https://github.com/openssh/openssh-portable # or https://anongit.mindrot.org/openssh.git
cd openssh-portable
autoreconf
./configure
make && make tests

Build-time Customisation

There are many build-time customisation options available. All Autoconf destination path flags (e.g. --prefix) are supported (and are usually required if you want to install OpenSSH).

For a full list of available flags, run ./configure --help but a few of the more frequently-used ones are described below. Some of these flags will require additional libraries and/or headers be installed.

Flag Meaning
--with-pam Enable PAM support. OpenPAM, Linux PAM and Solaris PAM are supported.
--with-libedit Enable libedit support for sftp.
--with-kerberos5 Enable Kerberos/GSSAPI support. Both Heimdal and MIT Kerberos implementations are supported.
--with-selinux Enable SELinux support.

Development

Portable OpenSSH development is discussed on the openssh-unix-dev mailing list (archive mirror). Bugs and feature requests are tracked on our Bugzilla.

Reporting bugs

Non-security bugs may be reported to the developers via Bugzilla or via the mailing list above. Security bugs should be reported to openssh@openssh.com.