contrib
Use ssh-keygen -A to generate missing host keys.
2018-06-06 16:05:44 +10:00
openbsd-compat
correct snprintf truncation check in closefrom()
2018-07-27 14:20:09 +10:00
regress
Include stdarg.h in mkdtemp for va_list.
2018-07-27 13:46:06 +10:00
.depend
upstream: Remove support for running ssh(1) setuid and fatal if
2018-07-19 21:41:42 +10:00
.gitignore
Fuzzer harnesses for sig verify and pubkey parsing
2017-09-08 12:44:13 +10:00
.skipped-commit-ids
upstream: Don't redefine Makefile choices which come correct from
2018-07-26 13:55:50 +10:00
CREDITS
…
INSTALL
Remove support for S/Key
2018-07-31 12:59:30 +10:00
LICENCE
upstream commit
2017-05-01 10:05:04 +10:00
Makefile.in
Remove support for S/Key
2018-07-31 12:59:30 +10:00
OVERVIEW
upstream: ssh(1) no longer supports being setuid root. Remove reference
2018-07-27 15:09:59 +10:00
PROTOCOL
upstream: fix numbering
2018-08-10 11:14:06 +10:00
PROTOCOL.agent
update URL again
2017-10-01 10:32:25 +11:00
PROTOCOL.certkeys
upstream: Improve strictness and control over RSA-SHA2 signature
2018-07-03 23:26:36 +10:00
PROTOCOL.chacha20poly1305
upstream: lots of typos in comments/docs. Patch from Karsten Weiss
2018-04-10 10:17:15 +10:00
PROTOCOL.key
…
PROTOCOL.krl
upstream: lots of typos in comments/docs. Patch from Karsten Weiss
2018-04-10 10:17:15 +10:00
PROTOCOL.mux
…
README
update version number
2018-04-02 15:38:20 +10:00
README.dns
…
README.platform
Many typo fixes from Karsten Weiss
2018-04-10 10:19:02 +10:00
README.privsep
Remove references to UNICOS.
2018-02-15 22:28:14 +11:00
README.tun
…
TODO
Remove support for S/Key
2018-07-31 12:59:30 +10:00
aclocal.m4
Better detection of unsupported compiler options.
2018-06-08 13:55:59 +10:00
addrmatch.c
upstream: fix some memory leaks spotted by Coverity via Jakub Jelen
2018-07-31 13:13:26 +10:00
atomicio.c
…
atomicio.h
…
audit-bsm.c
Remove key.h from portable files too.
2018-07-12 14:57:46 +10:00
audit-linux.c
…
audit.c
Include unistd.h for geteuid declaration.
2018-07-13 13:40:20 +10:00
audit.h
…
auth-bsdauth.c
upstream: sshd: switch authentication to sshbuf API; ok djm@
2018-07-10 15:27:43 +10:00
auth-krb5.c
upstream: sshd: switch authentication to sshbuf API; ok djm@
2018-07-10 15:27:43 +10:00
auth-options.c
upstream: allow bare port numbers to appear in PermitListen directives,
2018-06-19 13:00:50 +10:00
auth-options.h
upstream: permitlisten option for authorized_keys; ok markus@
2018-06-07 04:27:20 +10:00
auth-pam.c
Remove key.h from portable files too.
2018-07-12 14:57:46 +10:00
auth-pam.h
upstream: switch over to the new authorized_keys options API and
2018-03-03 14:37:16 +11:00
auth-passwd.c
upstream: sshd: switch loginmsg to sshbuf API; ok djm@
2018-07-10 15:21:58 +10:00
auth-rhosts.c
upstream: sshd: switch authentication to sshbuf API; ok djm@
2018-07-10 15:27:43 +10:00
auth-shadow.c
Remove key.h from portable files too.
2018-07-12 14:57:46 +10:00
auth-sia.c
Remove key.h from portable files too.
2018-07-12 14:57:46 +10:00
auth-sia.h
…
auth-skey.c
Remove key.h from portable files too.
2018-07-12 14:57:46 +10:00
auth.c
upstream: s/wuth/with/ in comment
2018-07-12 11:47:57 +10:00
auth.h
Remove support for S/Key
2018-07-31 12:59:30 +10:00
auth2-chall.c
Remove support for S/Key
2018-07-31 12:59:30 +10:00
auth2-gss.c
upstream: delay bailout for invalid authentic
2018-07-31 13:13:26 +10:00
auth2-hostbased.c
upstream: delay bailout for invalid authentic
2018-07-31 13:13:26 +10:00
auth2-kbdint.c
upstream: sshd: switch authentication to sshbuf API; ok djm@
2018-07-10 15:27:43 +10:00
auth2-none.c
upstream: sshd: switch authentication to sshbuf API; ok djm@
2018-07-10 15:27:43 +10:00
auth2-passwd.c
upstream: sshd: switch authentication to sshbuf API; ok djm@
2018-07-10 15:27:43 +10:00
auth2-pubkey.c
upstream: delay bailout for invalid authentic
2018-07-31 13:13:26 +10:00
auth2.c
upstream: remove legacy key emulation layer; ok djm@
2018-07-12 13:18:25 +10:00
authfd.c
upstream: replace cast with call to sshbuf_mutable_ptr(); ok djm@
2018-07-10 16:44:17 +10:00
authfd.h
upstream: remove prototype to long-gone function
2018-07-12 14:36:12 +10:00
authfile.c
upstream: replace cast with call to sshbuf_mutable_ptr(); ok djm@
2018-07-10 16:44:17 +10:00
authfile.h
…
bitmap.c
upstream commit
2017-10-20 12:58:35 +11:00
bitmap.h
upstream commit
2017-10-20 12:58:35 +11:00
buildpkg.sh.in
…
canohost.c
…
canohost.h
…
chacha.c
…
chacha.h
…
channels.c
upstream: avoid expensive channel_open_message() calls; ok djm@
2018-07-31 12:20:13 +10:00
channels.h
upstream: Add a PermitListen directive to control which server-side
2018-06-07 04:27:20 +10:00
cipher-aes.c
…
cipher-aesctr.c
…
cipher-aesctr.h
…
cipher-chachapoly.c
…
cipher-chachapoly.h
…
cipher-ctr.c
…
cipher.c
Omit 3des-cbc if OpenSSL built without DES.
2018-04-19 13:19:35 +10:00
cipher.h
upstream commit
2017-05-08 09:21:00 +10:00
cleanup.c
…
clientloop.c
upstream: remove legacy key emulation layer; ok djm@
2018-07-12 13:18:25 +10:00
clientloop.h
upstream: client: switch to sshbuf API; ok djm@
2018-07-10 15:14:26 +10:00
compat.c
upstream: fix some memory leaks spotted by Coverity via Jakub Jelen
2018-07-31 13:13:26 +10:00
compat.h
upstream: fix some memory leaks spotted by Coverity via Jakub Jelen
2018-07-31 13:13:26 +10:00
config.guess
…
config.sub
…
configure.ac
Remove support for S/Key
2018-07-31 12:59:30 +10:00
crc32.c
…
crc32.h
…
crypto_api.h
crypto_api.h needs includes.h
2018-01-24 12:20:44 +11:00
defines.h
Remove support for S/Key
2018-07-31 12:59:30 +10:00
dh.c
upstream: invalidate dh->priv_key after freeing it in error path;
2018-08-06 11:07:17 +10:00
dh.h
…
digest-libc.c
upstream commit
2017-05-10 11:41:21 +10:00
digest-openssl.c
upstream commit
2017-05-10 11:41:21 +10:00
digest.h
upstream commit
2017-05-10 11:41:21 +10:00
dispatch.c
upstream commit
2017-06-01 14:53:33 +10:00
dispatch.h
upstream commit
2017-06-01 14:53:33 +10:00
dns.c
upstream: Add experimental support for PQC XMSS keys (Extended
2018-02-26 11:40:41 +11:00
dns.h
upstream: Add experimental support for PQC XMSS keys (Extended
2018-02-26 11:40:41 +11:00
ed25519.c
…
entropy.c
Adapt portable to legacy buffer API removal
2018-07-10 19:39:52 +10:00
entropy.h
Adapt portable to legacy buffer API removal
2018-07-10 19:39:52 +10:00
fatal.c
…
fe25519.c
…
fe25519.h
…
fixalgorithms
…
fixpaths
…
ge25519.c
…
ge25519.h
…
ge25519_base.data
…
groupaccess.c
…
groupaccess.h
…
gss-genr.c
upstream: kerberos/gssapi fixes for buffer removal
2018-07-10 19:15:35 +10:00
gss-serv-krb5.c
upstream: sshd: switch GSSAPI to sshbuf API; ok djm@
2018-07-10 15:28:30 +10:00
gss-serv.c
upstream: sshd: switch GSSAPI to sshbuf API; ok djm@
2018-07-10 15:28:30 +10:00
hash.c
upstream commit
2018-01-23 16:35:07 +11:00
hmac.c
…
hmac.h
…
hostfile.c
upstream: memleaks; found by valgrind
2018-07-16 13:12:20 +10:00
hostfile.h
…
includes.h
portability for sftp globbed ls sort by mtime
2017-06-10 23:41:25 +10:00
install-sh
Pull in newer install-sh from autoconf-2.69.
2017-12-01 17:07:08 +11:00
kex.c
upstream: Revert previous two commits
2018-07-10 15:13:41 +10:00
kex.h
repair !WITH_OPENSSL build
2018-07-13 11:41:33 +10:00
kexc25519.c
…
kexc25519c.c
upstream commit
2017-12-19 15:21:37 +11:00
kexc25519s.c
upstream commit
2017-10-20 12:58:18 +11:00
kexdh.c
…
kexdhc.c
upstream commit
2018-02-08 09:26:27 +11:00
kexdhs.c
upstream: lots of typos in comments/docs. Patch from Karsten Weiss
2018-04-10 10:17:15 +10:00
kexecdh.c
…
kexecdhc.c
upstream commit
2018-02-08 09:26:27 +11:00
kexecdhs.c
upstream commit
2018-02-08 09:26:27 +11:00
kexgex.c
…
kexgexc.c
upstream commit
2018-02-08 09:26:27 +11:00
kexgexs.c
upstream: lots of typos in comments/docs. Patch from Karsten Weiss
2018-04-10 10:17:15 +10:00
krl.c
upstream commit
2017-12-19 15:21:37 +11:00
krl.h
…
log.c
upstream: avoid expensive channel_open_message() calls; ok djm@
2018-07-31 12:20:13 +10:00
log.h
upstream: avoid expensive channel_open_message() calls; ok djm@
2018-07-31 12:20:13 +10:00
loginrec.c
upstream: remove legacy key emulation layer; ok djm@
2018-07-12 13:18:25 +10:00
loginrec.h
…
logintest.c
…
mac.c
upstream commit
2017-05-10 11:41:21 +10:00
mac.h
…
match.c
upstream: repair PubkeyAcceptedKeyTypes (and friends) after RSA
2018-07-04 23:51:52 +10:00
match.h
upstream: repair PubkeyAcceptedKeyTypes (and friends) after RSA
2018-07-04 23:51:52 +10:00
md5crypt.c
Remove assigned-to-but-never-used variable.
2018-02-13 16:27:09 +11:00
md5crypt.h
…
mdoc2man.awk
Remove remaining now-obsolete cvs $Ids.
2018-02-15 20:06:19 +11:00
misc.c
upstream: Remove uid checks from low port binds. Now that ssh
2018-07-31 12:18:49 +10:00
misc.h
upstream: Remove uid checks from low port binds. Now that ssh
2018-07-31 12:18:49 +10:00
mkinstalldirs
Remove remaining now-obsolete cvs $Ids.
2018-02-15 20:06:19 +11:00
moduli
Import regenerated moduli file.
2018-04-03 12:18:00 +10:00
moduli.5
…
moduli.c
upstream commit
2017-12-12 10:32:04 +11:00
monitor.c
Remove support for S/Key
2018-07-31 12:59:30 +10:00
monitor.h
Remove support for S/Key
2018-07-31 12:59:30 +10:00
monitor_fdpass.c
…
monitor_fdpass.h
…
monitor_wrap.c
Remove support for S/Key
2018-07-31 12:59:30 +10:00
monitor_wrap.h
Remove support for S/Key
2018-07-31 12:59:30 +10:00
msg.c
upstream: replace cast with call to sshbuf_mutable_ptr(); ok djm@
2018-07-10 16:44:17 +10:00
msg.h
…
mux.c
upstream: fix some memory leaks spotted by Coverity via Jakub Jelen
2018-07-31 13:13:26 +10:00
myproposal.h
upstream: Improve strictness and control over RSA-SHA2 signature
2018-07-03 23:26:36 +10:00
nchan.c
upstream commit
2017-09-12 17:37:03 +10:00
nchan.ms
…
nchan2.ms
…
opacket.c
missing headers
2018-07-13 11:41:33 +10:00
opacket.h
upstream: Remove unused ssh_packet_start_compression()
2018-07-10 15:13:40 +10:00
openssh.xml.in
…
opensshd.init.in
Remove RSA1 host key generation.
2017-12-01 16:55:35 +11:00
packet.c
Explicitly include openssl before zlib.
2018-07-20 13:48:51 +10:00
packet.h
upstream: ttymodes: switch to sshbuf API; ok djm@
2018-07-10 15:19:12 +10:00
pathnames.h
upstream: Add experimental support for PQC XMSS keys (Extended
2018-02-26 11:40:41 +11:00
pkcs11.h
…
platform-misc.c
Split platform_sys_dir_uid into its own file
2017-08-25 13:25:01 +10:00
platform-pledge.c
…
platform-tracing.c
…
platform.c
upstream: remove legacy key emulation layer; ok djm@
2018-07-12 13:18:25 +10:00
platform.h
…
poly1305.c
…
poly1305.h
…
progressmeter.c
…
progressmeter.h
…
readconf.c
Remove support for S/Key
2018-07-31 12:59:30 +10:00
readconf.h
upstream: Deprecate UsePrivilegedPort now that support for running
2018-07-19 21:44:21 +10:00
readpass.c
upstream: Remove support for running ssh(1) setuid and fatal if
2018-07-19 21:41:42 +10:00
rijndael.c
…
rijndael.h
…
sandbox-capsicum.c
Switch Capsicum header to sys/capsicum.h.
2017-08-28 16:48:27 +10:00
sandbox-darwin.c
Add missing monitor.h include.
2016-12-16 15:02:24 +11:00
sandbox-null.c
…
sandbox-pledge.c
…
sandbox-rlimit.c
…
sandbox-seccomp-filter.c
Permit getuid()/geteuid() syscalls.
2018-05-25 13:45:01 +10:00
sandbox-solaris.c
drop two more privileges in the Solaris sandbox
2017-06-09 14:44:43 +10:00
sandbox-systrace.c
Allow nanosleep in preauth privsep child.
2018-04-13 16:23:57 +10:00
sc25519.c
…
sc25519.h
…
scp.1
upstream: Deprecate UsePrivilegedPort now that support for running
2018-07-19 21:44:21 +10:00
scp.c
upstream: Apply umask to all incoming files and directories not
2018-06-04 14:54:43 +10:00
servconf.c
Remove support for S/Key
2018-07-31 12:59:30 +10:00
servconf.h
upstream: sshd: switch loginmsg to sshbuf API; ok djm@
2018-07-10 15:21:58 +10:00
serverloop.c
upstream: Remove uid checks from low port binds. Now that ssh
2018-07-31 12:18:49 +10:00
serverloop.h
upstream commit
2017-09-12 17:37:02 +10:00
session.c
upstream: fix indent; Clemens Goessnitzer
2018-07-26 13:54:30 +10:00
session.h
upstream commit
2017-09-12 17:37:02 +10:00
sftp-client.c
upstream: fix some memory leaks spotted by Coverity via Jakub Jelen
2018-07-31 13:13:26 +10:00
sftp-client.h
…
sftp-common.c
upstream commit
2017-06-10 16:40:11 +10:00
sftp-common.h
…
sftp-glob.c
…
sftp-server-main.c
…
sftp-server.8
…
sftp-server.c
upstream: make UID available as a %-expansion everywhere that the
2018-06-01 13:35:59 +10:00
sftp.1
upstream: oops, failed to notice that SEE ALSO got messed up;
2018-07-26 13:54:30 +10:00
sftp.c
upstream: Since the previous commit, ssh regress test sftp-chroot was
2018-05-11 13:10:49 +10:00
sftp.h
…
smult_curve25519_ref.c
…
ssh-add.1
upstream commit
2017-09-04 09:38:57 +10:00
ssh-add.c
upstream: Add experimental support for PQC XMSS keys (Extended
2018-02-26 11:40:41 +11:00
ssh-agent.1
upstream commit
2016-11-30 19:44:25 +11:00
ssh-agent.c
upstream: implement EMFILE mitigation for ssh-agent: remember the
2018-05-11 13:56:42 +10:00
ssh-dss.c
upstream commit
2018-02-08 09:26:27 +11:00
ssh-ecdsa.c
upstream commit
2018-02-08 09:26:27 +11:00
ssh-ed25519.c
…
ssh-gss.h
upstream: kerberos/gssapi fixes for buffer removal
2018-07-10 19:15:35 +10:00
ssh-keygen.1
upstream: Use new private key format by default. This format is
2018-08-08 11:18:05 +10:00
ssh-keygen.c
upstream: Use new private key format by default. This format is
2018-08-08 11:18:05 +10:00
ssh-keyscan.1
upstream: move the input format details to -f; remove the output
2018-03-12 11:48:15 +11:00
ssh-keyscan.c
upstream: switch config file parsing to getline(3) as this avoids
2018-06-07 04:34:05 +10:00
ssh-keysign.8
…
ssh-keysign.c
upstream: Now that ssh can't be setuid, remove the
2018-07-31 12:20:13 +10:00
ssh-pkcs11-client.c
upstream: replace cast with call to sshbuf_mutable_ptr(); ok djm@
2018-07-10 16:44:17 +10:00
ssh-pkcs11-helper.8
…
ssh-pkcs11-helper.c
upstream commit
2018-01-23 16:31:55 +11:00
ssh-pkcs11.c
upstream commit
2018-02-08 09:26:27 +11:00
ssh-pkcs11.h
…
ssh-rsa.c
upstream: Improve strictness and control over RSA-SHA2 signature
2018-07-03 23:26:36 +10:00
ssh-sandbox.h
…
ssh-xmss.c
Add WITH_XMSS, move to prevent conflicts.
2018-02-28 19:59:35 +11:00
ssh.1
upstream: Deprecate UsePrivilegedPort now that support for running
2018-07-19 21:44:21 +10:00
ssh.c
upstream: Now that ssh can't be setuid, remove the
2018-07-31 12:20:13 +10:00
ssh.h
upstream: switch config file parsing to getline(3) as this avoids
2018-06-07 04:34:05 +10:00
ssh2.h
…
ssh_api.c
upstream commit
2017-05-01 09:42:37 +10:00
ssh_api.h
upstream: lots of typos in comments/docs. Patch from Karsten Weiss
2018-04-10 10:17:15 +10:00
ssh_config
upstream commit
2017-05-08 09:21:00 +10:00
ssh_config.5
Remove support for S/Key
2018-07-31 12:59:30 +10:00
sshbuf-getput-basic.c
upstream commit
2017-06-01 14:55:23 +10:00
sshbuf-getput-crypto.c
…
sshbuf-misc.c
…
sshbuf.c
upstream: remove legacy buffer API emulation layer; ok djm@
2018-07-10 16:44:17 +10:00
sshbuf.h
upstream: remove legacy buffer API emulation layer; ok djm@
2018-07-10 16:44:17 +10:00
sshconnect.c
upstream: Now that ssh can't be setuid, remove the
2018-07-31 12:20:13 +10:00
sshconnect.h
upstream: Deprecate UsePrivilegedPort now that support for running
2018-07-19 21:44:21 +10:00
sshconnect2.c
upstream: fix some memory leaks spotted by Coverity via Jakub Jelen
2018-07-31 13:13:26 +10:00
sshd.8
upstream: Switch authorized_keys example from ssh-dss to ssh-rsa
2018-07-26 13:54:30 +10:00
sshd.c
upstream: fix some memory leaks spotted by Coverity via Jakub Jelen
2018-07-31 13:13:26 +10:00
sshd_config
upstream: the UseLogin option was removed, so remove it here too.
2018-04-10 10:16:36 +10:00
sshd_config.5
Remove support for S/Key
2018-07-31 12:59:30 +10:00
ssherr.c
upstream: Improve strictness and control over RSA-SHA2 signature
2018-07-03 23:26:36 +10:00
ssherr.h
upstream: Improve strictness and control over RSA-SHA2 signature
2018-07-03 23:26:36 +10:00
sshkey-xmss.c
upstream: replace cast with call to sshbuf_mutable_ptr(); ok djm@
2018-07-10 16:44:17 +10:00
sshkey-xmss.h
upstream: Add experimental support for PQC XMSS keys (Extended
2018-02-26 11:40:41 +11:00
sshkey.c
upstream: some finesse to fix RSA-SHA2 certificate authentication
2018-07-03 23:26:47 +10:00
sshkey.h
upstream: some finesse to fix RSA-SHA2 certificate authentication
2018-07-03 23:26:47 +10:00
sshlogin.c
upstream: sshd: switch loginmsg to sshbuf API; ok djm@
2018-07-10 15:21:58 +10:00
sshlogin.h
…
sshpty.c
Remove UNICOS support.
2018-02-15 20:04:02 +11:00
sshpty.h
…
sshtty.c
…
survey.sh.in
…
ttymodes.c
upstream: ttymodes: switch to sshbuf API; ok djm@
2018-07-10 15:19:12 +10:00
ttymodes.h
upstream commit
2017-05-01 10:05:04 +10:00
uidswap.c
upstream: Remove support for running ssh(1) setuid and fatal if
2018-07-19 21:41:42 +10:00
uidswap.h
upstream: Remove support for running ssh(1) setuid and fatal if
2018-07-19 21:41:42 +10:00
umac.c
upstream: lots of typos in comments/docs. Patch from Karsten Weiss
2018-04-10 10:17:15 +10:00
umac.h
…
umac128.c
upstream commit
2018-02-09 20:00:18 +11:00
utf8.c
upstream commit
2017-06-01 14:55:22 +10:00
utf8.h
Force Turkish locales back to C/POSIX; bz#2643
2016-12-12 13:58:59 +11:00
uuencode.c
…
uuencode.h
…
verify.c
…
version.h
upstream: crank version number to 7.8; needed for new compat flag
2018-07-03 23:26:47 +10:00
xmalloc.c
upstream commit
2017-06-01 14:55:22 +10:00
xmalloc.h
upstream commit
2017-06-01 14:55:22 +10:00
xmss_commons.c
upstream: Add $OpenBSD$ markers to xmss files to help keep synced
2018-03-02 14:29:25 +11:00
xmss_commons.h
Remove extra XMSS #endif
2018-03-05 10:22:32 +11:00
xmss_fast.c
upstream: ssh/xmss: fix build; ok djm@
2018-03-23 11:05:39 +11:00
xmss_fast.h
upstream: Add $OpenBSD$ markers to xmss files to help keep synced
2018-03-02 14:29:25 +11:00
xmss_hash.c
upstream: Add $OpenBSD$ markers to xmss files to help keep synced
2018-03-02 14:29:25 +11:00
xmss_hash.h
upstream: Add $OpenBSD$ markers to xmss files to help keep synced
2018-03-02 14:29:25 +11:00
xmss_hash_address.c
upstream: Add $OpenBSD$ markers to xmss files to help keep synced
2018-03-02 14:29:25 +11:00
xmss_hash_address.h
upstream: Add $OpenBSD$ markers to xmss files to help keep synced
2018-03-02 14:29:25 +11:00
xmss_wots.c
upstream: lots of typos in comments/docs. Patch from Karsten Weiss
2018-04-10 10:17:15 +10:00
xmss_wots.h
upstream: Remove unneeded (local) include. ok markus@
2018-03-02 14:30:02 +11:00