Commit Graph

  • 953fa5b59a
    Disable security key for bigendian interop. master Darren Tucker 2024-11-09 11:41:44 +1100
  • a80eb71c42
    Reshuffle OpenWRT test configs. Darren Tucker 2024-11-09 05:14:16 +1100
  • d2709c4613
    Add keytype to bigendian interop test. Darren Tucker 2024-11-09 03:26:08 +1100
  • 50ac0f0e06
    Ignore chown failure, eg due to dangling symlinks. Darren Tucker 2024-11-09 03:24:29 +1100
  • 9e528e65a0
    Test bigendian interop. github/master github-selfhosted/master anongit/master Darren Tucker 2024-11-02 18:05:41 +1100
  • dd416f5bfa
    Allow overridding TEST_SSH_SSHD. Darren Tucker 2024-11-01 19:44:29 +1100
  • 82662d562c
    upstream: ssh-agent implemented an all-or-nothing allow-list of djm@openbsd.org 2024-11-06 22:51:26 +0000
  • 593a0b65c5
    upstream: Ignore extra groups that don't fit in the buffer passed jca@openbsd.org 2024-11-04 21:59:15 +0000
  • e7adebeff3
    Add git signing key for Tim Rice Damien Miller 2024-11-04 14:39:27 +1100
  • 729a26a978
    fix uint64_t types; reported by Tom G. Christensen github/V_9_9 github-selfhosted/V_9_9 anongit/V_9_9 V_9_9 Damien Miller 2024-10-30 14:25:14 +1100
  • da4b84845e
    Correct path to c-cpp.yml file in workflow config. Darren Tucker 2024-11-01 18:51:22 +1100
  • 28740aa2c7
    Test new OpenSSL and LibreSSL releases.` Darren Tucker 2024-11-01 18:44:42 +1100
  • a74809fe06
    Add nbsd10 default test config. Darren Tucker 2024-11-01 18:44:00 +1100
  • 88b35cbdc1
    fix uint64_t types; reported by Tom G. Christensen Damien Miller 2024-10-30 14:25:14 +1100
  • 33c5f384ae
    htole64() etc for systems without endian.h Damien Miller 2024-10-27 13:28:11 +1100
  • fe8d28a7eb
    upstream: explicitly include endian.h djm@openbsd.org 2024-10-27 02:06:59 +0000
  • 11f348196b
    upstream: fix ML-KEM768x25519 KEX on big-endian systems; spotted by djm@openbsd.org 2024-10-27 02:06:01 +0000
  • ef7c26cd2f
    htole64() etc for systems without endian.h Damien Miller 2024-10-27 13:28:11 +1100
  • 0c3927c45f
    upstream: explicitly include endian.h djm@openbsd.org 2024-10-27 02:06:59 +0000
  • cf3e48ee8b
    upstream: fix ML-KEM768x25519 KEX on big-endian systems; spotted by djm@openbsd.org 2024-10-27 02:06:01 +0000
  • ae566d51b6
    upstream: mlkem768x25519-sha256 has been promoted to default key naddy@openbsd.org 2024-10-25 21:53:24 +0000
  • 3af1dba138
    Retire the minix3 test config. Darren Tucker 2024-10-25 19:04:30 +1100
  • 3b240cc44b
    Updated gitignore to ignore sshd-session and sshd-auth targets Preetish Amballi 2024-10-21 14:07:02 +0000
  • 326495744f
    Simplify pselect shim and remove side effects. Darren Tucker 2024-10-25 19:01:02 +1100
  • e53b615f39
    upstream: promote mlkem768x25519-sha256 to be the default key exchange; djm@openbsd.org 2024-10-25 01:34:18 +0000
  • de644b1831
    upstream: test SIGUSR1 dropping all keys from ssh-agent djm@openbsd.org 2024-10-24 03:28:34 +0000
  • e86d7a077c
    upstream: amake ssh-agent drop all keys when it receives SIGUSR1; djm@openbsd.org 2024-10-24 03:15:47 +0000
  • 94cdfebec8
    upstream: relax valid_domain() checks to allow an underscore as the djm@openbsd.org 2024-10-24 03:14:37 +0000
  • 1b05d5437b
    upstream: Remove sshd logfile in start_sshd dtucker@openbsd.org 2024-10-22 07:13:28 +0000
  • 307ab3c772
    upstream: Add a sshd debug wrapper dtucker@openbsd.org 2024-10-22 06:16:26 +0000
  • 87bd1cb3cc
    upstream: Make debug call printf("%s", NULL) safe. dtucker@openbsd.org 2024-10-22 06:13:00 +0000
  • c44c349edd
    Resync cvsid missed in commit 6072e4c9. Darren Tucker 2024-10-22 17:48:32 +1100
  • fe4305c37f
    upstream: mention that LocalForward and RemoteForward can accept Unix djm@openbsd.org 2024-10-18 05:53:26 +0000
  • 9c97b6af8e
    upstream: remove duplicate check; GHPR392 from Pedro Martelletto djm@openbsd.org 2024-10-18 05:45:40 +0000
  • d9cd208e89
    upstream: allow "-" as output file for moduli screening djm@openbsd.org 2024-10-18 05:37:24 +0000
  • 5eb5c4b282
    upstream: ssh-keyscan doesn't need it's own sshfatal() definition, it djm@openbsd.org 2024-10-18 05:32:51 +0000
  • 0a1e75499e
    upstream: in _ssh_order_hostkeyalgs() consider ECDSA curve type when djm@openbsd.org 2024-10-18 05:14:51 +0000
  • d01ee7a88c
    upstream: require control-escape character sequences passed via the '-e djm@openbsd.org 2024-10-18 05:03:34 +0000
  • 74ff6382f5
    upstream: remove addr.[ch] functions that are unused and djm@openbsd.org 2024-10-18 04:30:09 +0000
  • a9d6d7d93c
    upstream: unreachable POLLERR case; from ya0guang via GHPR485 djm@openbsd.org 2024-10-18 04:14:59 +0000
  • d76424bf27
    upstream: s/Sx/Cm/ for external references; from Domen Puncer djm@openbsd.org 2024-10-18 04:11:54 +0000
  • ca204b994e
    upstream: mention SshdAuthPath option; ok djm@ naddy@openbsd.org 2024-10-14 23:53:34 +0000
  • be27770e84
    Remove references to systrace and pledge sandboxes. Darren Tucker 2024-10-18 13:37:55 +1100
  • 49e64bf63f
    Fix "undeclared 'ut'" error by replacing it with 'utx' Pavel Miadzvedzeu 2024-04-24 10:19:56 +0300
  • 67f684733f
    Seed RNG when starting up sshd-auth. Darren Tucker 2024-10-17 20:50:29 +1100
  • c06c681aee
    MacOS 12 runners are deprecated, replace with 15. Darren Tucker 2024-10-17 19:18:23 +1100
  • 39db1f23ba
    Fix lookup path for sshd-auth; bz3745 Damien Miller 2024-10-17 13:28:47 +1100
  • c537eeb1ae
    fix breakage; missing saved_argc symbol Damien Miller 2024-10-16 08:28:21 +1100
  • 98a0883bde
    fix capsicum sandbox Damien Miller 2024-10-14 17:17:50 +1100
  • 164ea43805
    put back some portable bits for sshd-auth.c Damien Miller 2024-10-14 17:16:41 +1100
  • f8edf08c25
    there's only one sandbox, move to a static global Damien Miller 2024-10-14 14:49:25 +1100
  • 4482f0042b
    depend Damien Miller 2024-10-14 14:49:20 +1100
  • 74856204a3
    upstream: regress support for split sshd-auth binary djm@openbsd.org 2024-10-14 03:02:08 +0000
  • 461741083d
    upstream: test some more Match syntax, including criteria=arg and djm@openbsd.org 2024-09-27 01:05:54 +0000
  • 6072e4c938
    upstream: Split per-connection sshd-session binary djm@openbsd.org 2024-10-14 01:57:50 +0000
  • fe6c6330c1
    upstream: don't start the ObscureKeystrokeTiming mitigations if djm@openbsd.org 2024-10-13 22:20:06 +0000
  • 538cd28598
    upstream: remove duplicate misc.h include ok dtucker@ jsg@openbsd.org 2024-10-12 10:50:37 +0000
  • 0051381a8c
    upstream: Turn off finite field (a.k.a modp) Diffie-Hellman key djm@openbsd.org 2024-10-06 23:37:17 +0000
  • 19bcb2d90c
    upstream: fix previous change to ssh_config Match, which broken on djm@openbsd.org 2024-09-26 23:55:08 +0000
  • 67a115e7a5
    upstream: fix previous change to ssh_config Match, which broken on djm@openbsd.org 2024-09-26 23:55:08 +0000
  • 220b6c1290
    upstream: remove some unused defines; ok djm@ jsg@openbsd.org 2024-09-25 23:01:39 +0000
  • 3ef4f6e8a4
    upstream: remove some unneeded Xo/Xc calls; from evan silberman the jmc@openbsd.org 2024-09-25 06:13:01 +0000
  • 66878e12a2
    upstream: fix regression introduced when I switched the "Match" djm@openbsd.org 2024-09-25 01:24:04 +0000
  • ff2cd1dd57
    gss-serv.c needs sys/param.h Damien Miller 2024-09-25 11:15:45 +1000
  • 2c12ae8cf9
    build construct_utmp() when USE_BTMP is set Damien Miller 2024-09-25 11:13:05 +1000
  • c7fda60118
    fix utmpx ifdef Christoph Ostarek 2024-07-03 12:46:59 +0200
  • 3f02368e8e
    upstream: fix regression introduced when I switched the "Match" djm@openbsd.org 2024-09-25 01:24:04 +0000
  • 9517cc5857
    upstream: some extra paranoia, reminded by jsg@ djm@openbsd.org 2024-09-24 02:28:17 +0000
  • 815a94e86a
    gss-serv.c needs sys/param.h Damien Miller 2024-09-25 11:15:45 +1000
  • 76a618d284
    build construct_utmp() when USE_BTMP is set Damien Miller 2024-09-25 11:13:05 +1000
  • d3aee17f6d
    Test the flags from OpenWRT's package. Darren Tucker 2024-09-24 18:41:44 +1000
  • 0f5d19e6fe
    fix utmpx ifdef Christoph Ostarek 2024-07-03 12:46:59 +0200
  • e03239f999
    upstream: remove some unused defines; ok djm@ jsg@openbsd.org 2024-09-22 12:56:21 +0000
  • a35f543d3a
    upstream: remove unneeded semicolons; checked by millert@ jsg@openbsd.org 2024-09-20 02:00:46 +0000
  • 7cf4dc414d
    Remove non-9.9 branch statuses. Darren Tucker 2024-09-23 20:54:26 +1000
  • 8513f4d30a
    Add 9.9 branch to CI status console. Darren Tucker 2024-09-23 20:52:31 +1000
  • 1641f2d4d6
    Add 9.9 branch to CI status console. Darren Tucker 2024-09-23 20:52:31 +1000
  • 53a80baaeb
    autogenerated files for release V_9_9_P1 Damien Miller 2024-09-20 08:20:48 +1000
  • 46d1fb16b2
    update version numbers Damien Miller 2024-09-20 08:20:13 +1000
  • 0bdca1f218
    upstream: openssh-9.9 djm@openbsd.org 2024-09-19 22:17:44 +0000
  • ef2d7f2d3e
    include openbsd-compat/base64.c license in LICENSE Damien Miller 2024-09-18 16:03:23 +1000
  • 7ef362b989
    conditionally include mman.h in arc4random code Damien Miller 2024-09-18 09:01:23 +1000
  • 5fb2b5ad0e
    fix bug in recently-added sntrup761 fuzzer Damien Miller 2024-09-17 11:53:24 +1000
  • 0ca128c9ee
    upstream: use 64 bit math to avoid signed underflow. upstream code djm@openbsd.org 2024-09-16 05:37:05 +0000
  • f82e5e22ca
    upstream: minor grammar/sort fixes for refuseconnection; ok djm jmc@openbsd.org 2024-09-15 08:27:38 +0000
  • 0c1165fc78
    avoid gcc warning in fuzz test Damien Miller 2024-09-15 13:30:13 +1000
  • ce171d0718
    upstream: bad whitespace in config dump output djm@openbsd.org 2024-09-15 03:09:44 +0000
  • 671c440786
    use construct_utmp to construct btmp records Damien Miller 2024-09-15 12:53:59 +1000
  • 930cb02b61
    upstream: update the Streamlined NTRU Prime code from the "ref" djm@openbsd.org 2024-09-15 02:20:51 +0000
  • 9306d6017e
    upstream: document Match invalid-user djm@openbsd.org 2024-09-15 01:19:56 +0000
  • 0118a4da21
    upstream: add a "Match invalid-user" predicate to sshd_config Match djm@openbsd.org 2024-09-15 01:18:26 +0000
  • 7875975136
    upstream: Add a "refuseconnection" penalty class to sshd_config djm@openbsd.org 2024-09-15 01:11:26 +0000
  • 8d21713b66
    upstream: Add a sshd_config "RefuseConnection" option djm@openbsd.org 2024-09-15 01:09:40 +0000
  • acad117e66
    upstream: switch sshd_config Match processing to the argv tokeniser djm@openbsd.org 2024-09-15 00:58:01 +0000
  • baec3f7f4c
    upstream: switch "Match" directive processing over to the argv djm@openbsd.org 2024-09-15 00:57:36 +0000
  • dd424d7c38
    upstream: include pathname in some of the ssh-keygen passphrase djm@openbsd.org 2024-09-15 00:47:01 +0000
  • 62bbf8f825
    upstream: Do not apply authorized_keys options when signature djm@openbsd.org 2024-09-15 00:41:18 +0000
  • 49f325fd47
    Fix without_openssl always being set to 1 Wu Weixin 2024-08-02 22:16:40 +0800
  • c21c3a2419
    upstream: Relax absolute path requirement back to what it was prior to djm@openbsd.org 2024-09-12 00:36:27 +0000
  • 1bc426f51b
    upstream: document the mlkem768x25519-sha256 key exchange algorithm naddy@openbsd.org 2024-09-09 14:41:21 +0000