RepoMirrors/openssh
1
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2024-12-18 16:14:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,359 Commits 69 Branches 157 Tags 27 MiB
48f54b9d12
Commit Graph

10 Commits

Author SHA1 Message Date
djm@openbsd.org
97f4d3083b upstream commit 
remove compat20/compat13/compat15 variables

ok markus@

Upstream-ID: 43802c035ceb3fef6c50c400e4ecabf12354691c
 2017-05-01 09:42:37 +10:00
markus@openbsd.org
0516454151 upstream commit 
move SSH_MSG_NONE, so we don't have to include ssh1.h;
 ok deraadt@

Upstream-ID: c2f97502efc761a41b18c17ddf460e138ca7994e
 2016-05-19 17:48:34 +10:00
djm@openbsd.org
0e8eeec8e7 upstream commit 
add support for additional fixed DH groups from
 draft-ietf-curdle-ssh-kex-sha2-03

diffie-hellman-group14-sha256 (2K group)
diffie-hellman-group16-sha512 (4K group)
diffie-hellman-group18-sha512 (8K group)

based on patch from Mark D. Baushke and Darren Tucker
ok markus@

Upstream-ID: ac00406ada4f0dfec41585ca0839f039545bc46f
 2016-05-02 20:39:32 +10:00
markus@openbsd.org
76c9fbbe35 upstream commit 
implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures
 (user and host auth) based on draft-rsa-dsa-sha2-256-03.txt and
 draft-ssh-ext-info-04.txt; with & ok djm@

Upstream-ID: cf82ce532b2733e5c4b34bb7b7c94835632db309
 2015-12-07 12:38:58 +11:00
Darren Tucker
f2004cd1ad Repair for non-ECC OpenSSL. 
Ifdef out the ECC parts when building with an OpenSSL that doesn't have
it.
 2015-02-23 05:04:21 +11:00
Damien Miller
773dda25e8 repair --without-openssl; broken in refactor 2015-02-18 22:29:32 +11:00
djm@openbsd.org
523463a3a2 upstream commit 
Revise hostkeys@openssh.com hostkey learning extension.

The client will not ask the server to prove ownership of the private
halves of any hitherto-unseen hostkeys it offers to the client.

Allow UpdateHostKeys option to take an 'ask' argument to let the
user manually review keys offered.

ok markus@
 2015-02-17 09:32:32 +11:00
djm@openbsd.org
4509b5d4a4 upstream commit 
avoid more fatal/exit in the packet.c paths that
 ssh-keyscan uses; feedback and "looks good" markus@
 2015-01-30 12:18:59 +11:00
djm@openbsd.org
5104db7cbd upstream commit 
correctly match ECDSA subtype (== curve) for
 offered/recevied host keys. Fixes connection-killing host key mismatches when
 a server offers multiple ECDSA keys with different curve type (an extremely
 unlikely configuration).

ok markus, "looks mechanical" deraadt@
 2015-01-27 00:00:57 +11:00
markus@openbsd.org
f582f0e917 upstream commit 
add experimental api for packet layer; ok djm@
 2015-01-20 09:23:46 +11:00