.github
Add debian-riscv64 test target.
2022-04-26 23:30:59 +10:00
contrib
update version numbers for release
2022-04-06 10:47:48 +10:00
m4
Improve detection of -fzero-call-used-regs=all support
2022-02-25 11:24:04 +11:00
openbsd-compat
Only return events from ppoll that were requested.
2022-04-01 23:38:44 +11:00
regress
upstream: It looks like we can't completely avoid
2022-04-21 12:05:26 +10:00
.depend
depend
2022-03-31 14:11:36 +11:00
.gitignore
Add aclocal.m4 and config.h.in~ to .gitignore.
2020-09-11 13:18:42 +10:00
.skipped-commit-ids
upstream: Import regenerated moduli
2022-04-20 15:08:54 +10:00
addr.c
upstream: Plug mem addrinfo mem leaks.
2021-10-22 22:03:05 +11:00
addr.h
upstream: Move address handling functions out into their own file
2021-01-11 15:04:12 +11:00
addrmatch.c
upstream: highly polished whitespace, mostly fixing spaces-for-tab
2021-04-03 17:23:02 +11:00
atomicio.c
remove sys/param.h in -portable, after upstream
2021-12-22 09:02:50 +11:00
atomicio.h
audit-bsm.c
polish whitespace for portable files
2021-04-03 17:47:37 +11:00
audit-linux.c
audit.c
audit.h
auth2-chall.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
auth2-gss.c
upstream: prepare for multiple names for authmethods
2021-12-20 09:28:07 +11:00
auth2-hostbased.c
upstream: include rejected signature algorithm in error message
2022-01-07 09:21:38 +11:00
auth2-kbdint.c
upstream: prepare for multiple names for authmethods
2021-12-20 09:28:07 +11:00
auth2-none.c
upstream: prepare for multiple names for authmethods
2021-12-20 09:28:07 +11:00
auth2-passwd.c
upstream: prepare for multiple names for authmethods
2021-12-20 09:28:07 +11:00
auth2-pubkey.c
upstream: include rejected signature algorithm in error message and
2022-03-01 13:00:26 +11:00
auth2.c
upstream: avoid integer overflow of auth attempts (harmless, caught
2022-02-23 22:22:20 +11:00
auth-bsdauth.c
auth-krb5.c
polish whitespace for portable files
2021-04-03 17:47:37 +11:00
auth-options.c
upstream: Switch hpdelim interface to accept only ":" as delimiter.
2022-02-10 15:14:17 +11:00
auth-options.h
upstream: make authorized_keys environment="..." directives
2021-07-23 14:07:19 +10:00
auth-pam.c
Fix memory leak in error path.
2021-09-03 13:42:08 +10:00
auth-pam.h
auth-passwd.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
auth-rhosts.c
upstream: free(3) wants stdlib.h
2022-02-24 08:24:17 +11:00
auth-shadow.c
auth-sia.c
auth-sia.h
auth.c
upstream: Check sshauthopt_new() for NULL. bz#3425, from
2022-04-27 21:30:01 +10:00
auth.h
upstream: prepare for multiple names for authmethods
2021-12-20 09:28:07 +11:00
authfd.c
upstream: Add authfd path to debug output. ok markus@
2022-04-27 21:33:11 +10:00
authfd.h
upstream: ssh-add side of destination constraints
2021-12-20 09:25:17 +11:00
authfile.c
upstream: spelling ok dtucker@
2022-01-01 15:19:48 +11:00
authfile.h
bitmap.c
bitmap.h
buildpkg.sh.in
whitespace at EOL
2020-12-22 19:43:55 +11:00
canohost.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
canohost.h
chacha.c
chacha.h
upstream: whitespace (tab after space)
2021-04-03 17:20:00 +11:00
channels.c
upstream: Try to continue running local I/O for channels in state
2022-04-20 15:08:54 +10:00
channels.h
upstream: fix poll() spin when a channel's output fd closes without
2022-03-31 08:16:38 +11:00
cipher-aes.c
cipher-aesctr.c
cipher-aesctr.h
cipher-chachapoly-libcrypto.c
cipher-chachapoly.c
cipher-chachapoly.h
cipher-ctr.c
cipher.c
polish whitespace for portable files
2021-04-03 17:47:37 +11:00
cipher.h
cleanup.c
clientloop.c
upstream: Try to continue running local I/O for channels in state
2022-04-20 15:08:54 +10:00
clientloop.h
compat.c
upstream: openssh-7.4 was incorrectly listed twice; spotted by
2021-09-10 20:34:09 +10:00
compat.h
upstream: Client-side workaround for a bug in OpenSSH 7.4: this release
2021-06-06 13:41:36 +10:00
config.guess
Revert "update build-aux files to match autoconf-2.71"
2022-04-11 16:07:09 +10:00
config.sub
Revert "update build-aux files to match autoconf-2.71"
2022-04-11 16:07:09 +10:00
configure.ac
Cache timezone data in capsicum sandbox.
2022-04-23 21:14:01 +10:00
CREDITS
crypto_api.h
upstream: Update the sntrup761 creation script and generated code:
2021-01-08 13:49:49 +11:00
defines.h
Correct value for IPTOS_DSCP_LE.
2021-12-15 10:50:33 +11:00
dh.c
upstream: highly polished whitespace, mostly fixing spaces-for-tab
2021-04-03 17:23:02 +11:00
dh.h
upstream: Add ModuliFile keyword to sshd_config to specify the
2021-03-13 13:14:13 +11:00
digest-libc.c
Use SHA.*_HMAC_BLOCK_SIZE if needed.
2021-12-23 11:36:08 +11:00
digest-openssl.c
upstream: whitespace; no code change
2020-10-29 13:54:13 +11:00
digest.h
dispatch.c
dispatch.h
dns.c
upstream: mark const string array contents const too, i.e. static
2022-02-02 10:38:59 +11:00
dns.h
upstream: Ensure that all returned SSHFP records for the specified host
2021-07-19 13:46:13 +10:00
ed25519.c
entropy.c
Split EGD/PRNGD interface into its own file.
2021-06-18 18:32:51 +10:00
entropy.h
fatal.c
upstream: fix SEGV on fatal() errors spotted by dtucker@
2020-10-19 19:09:08 +11:00
fe25519.c
fe25519.h
fixalgorithms
fixpaths
ge25519_base.data
ge25519.c
ge25519.h
groupaccess.c
groupaccess.h
gss-genr.c
need stdlib.h for free(3)
2021-10-01 16:36:24 +10:00
gss-serv-krb5.c
gss-serv.c
hash.c
Remove old OpenBSD version marker.
2021-07-03 20:36:06 +10:00
hmac.c
hmac.h
hostfile.c
upstream: piece of UpdateHostkeys client strictification: when
2022-01-07 09:21:38 +11:00
hostfile.h
upstream: make struct hostkeys public; I have no idea why I made it
2021-01-26 12:21:48 +11:00
includes.h
remove sys/param.h in -portable, after upstream
2021-12-22 09:02:50 +11:00
INSTALL
remove built-in support for md5crypt()
2021-10-28 16:16:13 +11:00
install-sh
Revert "update build-aux files to match autoconf-2.71"
2022-04-11 16:07:09 +10:00
int32_minmax.inc
upstream: estructure sntrup761.sh to process all files in a single
2021-01-08 13:46:35 +11:00
kex.c
upstream: mark const string array contents const too, i.e. static
2022-02-02 10:38:59 +11:00
kex.h
upstream: Fix signature algorithm selection logic for
2022-01-07 09:21:38 +11:00
kexc25519.c
kexdh.c
Move signal.h up include order to match upstream.
2021-07-03 20:38:09 +10:00
kexecdh.c
kexgen.c
upstream: Record session ID, host key and sig at intital KEX
2021-12-20 09:24:42 +11:00
kexgex.c
kexgexc.c
upstream: Record session ID, host key and sig at intital KEX
2021-12-20 09:24:42 +11:00
kexgexs.c
upstream: Record session ID, host key and sig at intital KEX
2021-12-20 09:24:42 +11:00
kexsntrup761x25519.c
upstream: fix unintended sizeof pointer in debug path ok markus@
2021-12-07 12:30:50 +11:00
krl.c
upstream: avoid printing hash algorithm twice; from lucas AT sexy.is
2022-04-28 13:55:12 +10:00
krl.h
LICENCE
Fix typo in Neils' name.
2021-11-29 14:03:19 +11:00
log.c
upstream: allow log_stderr==2 to prefix log messages with argv[0]
2021-09-19 17:21:59 +10:00
log.h
upstream: do not pass file/func to monitor; noted by Ilja van Sprundel;
2021-04-16 13:24:33 +10:00
loginrec.c
remove sys/param.h in -portable, after upstream
2021-12-22 09:02:50 +11:00
loginrec.h
polish whitespace for portable files
2021-04-03 17:47:37 +11:00
logintest.c
polish whitespace for portable files
2021-04-03 17:47:37 +11:00
mac.c
mac.h
Makefile.in
Set Makefile SHELL as determined by configure.
2022-04-01 14:56:54 +11:00
match.c
upstream: fold consecutive '*' wildcards to mitigate combinatorial
2020-11-04 10:09:25 +11:00
match.h
upstream: some language improvements; ok markus
2020-07-15 15:07:42 +10:00
mdoc2man.awk
misc.c
upstream: make addargs() and replacearg() a little more robust and
2022-03-20 19:54:35 +11:00
misc.h
upstream: replace select() with ppoll(), including converting
2021-11-18 09:09:59 +11:00
mkinstalldirs
moduli
upstream: Import regenerated moduli
2022-04-20 15:30:13 +10:00
moduli.5
Resync moduli.5 with upstream.
2022-04-16 14:33:20 +10:00
moduli.c
monitor_fdpass.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
monitor_fdpass.h
monitor_wrap.c
upstream: do not pass file/func to monitor; noted by Ilja van Sprundel;
2021-04-16 13:24:33 +10:00
monitor_wrap.h
upstream: do not pass file/func to monitor; noted by Ilja van Sprundel;
2021-04-16 13:24:33 +10:00
monitor.c
upstream: save an unneccessary alloc/free, based on patch from
2022-03-01 13:00:26 +11:00
monitor.h
msg.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
msg.h
mux.c
upstream: suppress "Connection to xxx closed" messages at LogLevel >=
2022-01-12 09:33:35 +11:00
myproposal.h
upstream: select post-quantum KEX
2022-03-31 08:16:38 +11:00
nchan2.ms
nchan.c
upstream: mark const string array contents const too, i.e. static
2022-02-02 10:38:59 +11:00
nchan.ms
openssh.xml.in
opensshd.init.in
Replace shell function with ssh-keygen -A.
2021-08-20 18:14:13 +10:00
OVERVIEW
packet.c
upstream: add a ssh_packet_process_read() function that reads from
2022-01-25 12:18:35 +11:00
packet.h
upstream: add a ssh_packet_process_read() function that reads from
2022-01-25 12:18:35 +11:00
pathnames.h
pkcs11.h
platform-misc.c
platform-pledge.c
platform-tracing.c
Include string.h and stdio.h for strerror.
2021-10-15 12:59:06 +11:00
platform.c
Factor out platform-specific locked account check.
2022-03-26 12:49:50 +11:00
platform.h
Missing semicolon.
2022-03-26 13:15:44 +11:00
poly1305.c
poly1305.h
progressmeter.c
progressmeter.h
PROTOCOL
upstream: Note that curve25519-sha256 was later published in
2022-04-12 09:35:31 +10:00
PROTOCOL.agent
upstream: spelling ok dtucker@
2022-01-01 15:19:48 +11:00
PROTOCOL.certkeys
upstream: PROTOCOL.certkeys: update reference from IETF draft to
2021-06-06 13:24:37 +10:00
PROTOCOL.chacha20poly1305
PROTOCOL.key
upstream: correct mistake in spec - the private key blobs are encoded
2021-05-07 12:36:18 +10:00
PROTOCOL.krl
PROTOCOL.mux
upstream: spelling ok dtucker@
2022-01-01 15:19:48 +11:00
PROTOCOL.sshsig
upstream: Add RCS IDs to the few files that are missing them; from
2020-08-31 14:34:41 +10:00
PROTOCOL.u2f
upstream: when writing an attestation blob for a FIDO key, record all
2020-09-09 13:11:34 +10:00
readconf.c
upstream: Avoid an unnecessary xstrdup in rm_env() when matching
2022-04-27 21:28:37 +10:00
readconf.h
upstream: PubkeyAuthentication=yes|no|unbound|host-bound
2021-12-20 09:28:08 +11:00
README
update version numbers for release
2022-04-06 10:47:48 +10:00
README.dns
README.md
Add status badges for Actions-based tests.
2021-04-29 10:59:54 +10:00
README.platform
Improve AIX text.
2020-12-22 19:21:26 +11:00
README.privsep
README.tun
readpass.c
upstream: mention in comment that read_passphrase(..., RP_ALLOW_STDIN)
2021-07-23 15:57:56 +10:00
rijndael.c
rijndael.h
upstream: Make prototype for rijndaelEncrypt match function
2021-09-29 11:09:27 +10:00
sandbox-capsicum.c
Cache timezone data in capsicum sandbox.
2022-04-23 21:14:01 +10:00
sandbox-darwin.c
sandbox-null.c
sandbox-pledge.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
sandbox-rlimit.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
sandbox-seccomp-filter.c
Allow ppoll_time64 in seccomp sandbox.
2022-02-26 14:06:14 +11:00
sandbox-solaris.c
sandbox-systrace.c
sc25519.c
sc25519.h
scp.1
upstream: list the correct version number
2022-04-16 14:37:15 +10:00
scp.c
upstream: don't leak argument list; bz3404, reported by Balu
2022-03-20 19:54:35 +11:00
SECURITY.md
basic SECURITY.md (refers people to the website)
2021-11-03 12:08:21 +11:00
servconf.c
upstream: don't try to resolve ListenAddress directives in the sshd
2022-03-20 19:54:35 +11:00
servconf.h
upstream: don't try to resolve ListenAddress directives in the sshd
2022-03-20 19:54:35 +11:00
serverloop.c
upstream: Try to continue running local I/O for channels in state
2022-04-20 15:08:54 +10:00
serverloop.h
session.c
upstream: Switch hpdelim interface to accept only ":" as delimiter.
2022-02-10 15:14:17 +11:00
session.h
sftp-client.c
upstream: add a sftp client "cp" command that supports server-side
2022-03-31 14:09:42 +11:00
sftp-client.h
upstream: add a sftp client "cp" command that supports server-side
2022-03-31 14:09:42 +11:00
sftp-common.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
sftp-common.h
sftp-glob.c
upstream: Remove the char * casts from arguments to do_lstat,
2022-03-01 13:00:26 +11:00
sftp-realpath.c
upstream: sys/param.h is not needed for any visible reason
2021-09-03 14:20:22 +10:00
sftp-server-main.c
sftp-server.8
upstream: standardise the grammar in the options list; issue
2021-08-03 09:39:57 +10:00
sftp-server.c
upstream: add support for the "corp-data" protocol extension to
2022-03-31 14:09:42 +11:00
sftp.1
upstream: man pages: add missing commas between subordinate and
2022-04-06 09:16:05 +10:00
sftp.c
upstream: add a sftp client "cp" command that supports server-side
2022-03-31 14:09:42 +11:00
sftp.h
sk-api.h
upstream: Better handle FIDO keys on tokens that provide user
2021-11-03 10:07:23 +11:00
sk-usbhid.c
fix typos in previous
2022-02-07 21:26:14 +11:00
smult_curve25519_ref.c
sntrup761.c
Disable sntrup761 if compiler doesn't support VLAs.
2021-01-26 14:48:07 +11:00
sntrup761.sh
upstream: Update the sntrup761 creation script and generated code:
2021-01-08 13:49:49 +11:00
srclimit.c
upstream: highly polished whitespace, mostly fixing spaces-for-tab
2021-04-03 17:23:02 +11:00
srclimit.h
upstream: Add PerSourceMaxStartups and PerSourceNetBlockSize
2021-01-11 15:04:12 +11:00
ssh2.h
upstream: draft-ietf-secsh-architecture is now RFC4251.
2020-11-20 13:34:46 +11:00
ssh_api.c
upstream: highly polished whitespace, mostly fixing spaces-for-tab
2021-04-03 17:23:02 +11:00
ssh_api.h
ssh_config
upstream: Add a '%k' TOKEN that expands to the effective HostKey of
2020-07-17 13:52:46 +10:00
ssh_config.5
upstream: ssh: document sntrup761x25519-sha512@openssh.com as
2022-04-06 09:16:05 +10:00
ssh-add.1
upstream: Since they are deprecated, move DSA to the end of the
2022-02-07 12:27:48 +11:00
ssh-add.c
upstream: Since they are deprecated, move DSA to the end of the
2022-02-07 12:27:48 +11:00
ssh-agent.1
upstream: man pages: add missing commas between subordinate and
2022-04-06 09:16:05 +10:00
ssh-agent.c
upstream: fix memleak on session-bind path; from Pedro Martelletto, ok
2022-04-29 13:18:31 +10:00
ssh-dss.c
ssh-ecdsa-sk.c
upstream: some clarifying comments
2020-06-26 15:18:07 +10:00
ssh-ecdsa.c
ssh-ed25519-sk.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
ssh-ed25519.c
upstream: use the new variant log macros instead of prepending
2020-10-18 23:46:29 +11:00
ssh-gss.h
upstream: make ssh->kex->session_id a sshbuf instead of u_char*/size_t
2021-01-27 21:10:57 +11:00
ssh-keygen.1
upstream: remove please from manual pages ok jmc@ sthen@ millert@
2022-02-07 12:27:48 +11:00
ssh-keygen.c
upstream: helpful comment
2022-03-18 13:33:36 +11:00
ssh-keyscan.1
ssh-keyscan.c
upstream: When poll(2) returns -1, for some error conditions
2022-01-25 10:33:03 +11:00
ssh-keysign.8
upstream: man pages: add missing commas between subordinate and
2022-04-06 09:16:05 +10:00
ssh-keysign.c
upstream: make ssh-keysign use the requested signature algorithm
2022-01-07 09:21:38 +11:00
ssh-pkcs11-client.c
make OPENSSL_HAS_ECC checks more thorough
2021-10-01 16:36:24 +10:00
ssh-pkcs11-helper.8
ssh-pkcs11-helper.c
upstream: check for POLLHUP wherever we check for POLLIN
2021-11-18 14:32:54 +11:00
ssh-pkcs11.c
upstream: avoid xmalloc(0) for PKCS#11 keyid for ECDSA keys (we
2021-11-19 08:12:57 +11:00
ssh-pkcs11.h
ssh-rsa.c
ssh-sandbox.h
ssh-sk-client.c
upstream: sshsk_load_resident: don't preallocate resp
2022-01-14 14:40:40 +11:00
ssh-sk-helper.8
ssh-sk-helper.c
upstream: When downloading resident keys from a FIDO token, pass
2021-10-28 13:56:59 +11:00
ssh-sk.c
upstream: ssh-sk: free a resident key's user id
2022-01-14 14:40:40 +11:00
ssh-sk.h
upstream: When downloading resident keys from a FIDO token, pass
2021-10-28 13:56:59 +11:00
ssh-xmss.c
upstream: Add missing includes of stdlib.h and stdint.h. We need
2022-04-27 21:29:17 +10:00
ssh.1
upstream: man pages: add missing commas between subordinate and
2022-04-06 09:16:05 +10:00
ssh.c
upstream: ssh is almost out of getopt() characters; note the
2022-03-30 15:34:33 +11:00
ssh.h
upstream: allow some additional control over the use of ssh-askpass
2020-07-15 15:08:10 +10:00
sshbuf-getput-basic.c
sshbuf-getput-crypto.c
sshbuf-io.c
sshbuf-misc.c
upstream: Add a sshbuf_read() that attempts to read(2) directly in
2022-01-25 10:45:47 +11:00
sshbuf.c
upstream: two defensive changes from Tobias Stoeckmann via GHPR287
2022-04-12 09:35:31 +10:00
sshbuf.h
upstream: Add a sshbuf_read() that attempts to read(2) directly in
2022-01-25 10:45:47 +11:00
sshconnect2.c
upstream: mark const string array contents const too, i.e. static
2022-02-02 10:38:59 +11:00
sshconnect.c
upstream: ssh-add side of destination constraints
2021-12-20 09:25:17 +11:00
sshconnect.h
upstream: add a ssh_config KnownHostsCommand that allows the client
2020-12-22 15:43:59 +11:00
sshd_config
Replace remaining references to ChallengeResponse.
2021-07-03 19:27:43 +10:00
sshd_config.5
upstream: Correct path for system known hosts file in description
2022-04-16 14:36:48 +10:00
sshd.8
upstream: man pages: add missing commas between subordinate and
2022-04-06 09:16:05 +10:00
sshd.c
upstream: don't try to resolve ListenAddress directives in the sshd
2022-03-20 19:54:35 +11:00
ssherr.c
ssherr.h
sshkey-xmss.c
upstream: highly polished whitespace, mostly fixing spaces-for-tab
2021-04-03 17:23:02 +11:00
sshkey-xmss.h
upstream: highly polished whitespace, mostly fixing spaces-for-tab
2021-04-03 17:23:02 +11:00
sshkey.c
upstream: add a helper function to match a key type to a list of
2022-01-07 09:21:38 +11:00
sshkey.h
upstream: add a helper function to match a key type to a list of
2022-01-07 09:21:38 +11:00
sshlogin.c
Include stdlib.h for free() prototype.
2022-04-23 21:14:01 +10:00
sshlogin.h
sshpty.c
Include stdio.h for FILE in misc.h.
2020-12-22 18:56:54 +11:00
sshpty.h
sshsig.c
upstream: avoid NULL deref via ssh-keygen -Y find-principals.
2022-03-30 15:34:33 +11:00
sshsig.h
upstream: Add ssh-keygen -Y match-principals operation to perform
2021-11-27 18:22:41 +11:00
sshtty.c
survey.sh.in
TODO
ttymodes.c
upstream: remove global variable used to stash compat flags and use the
2021-01-27 20:28:25 +11:00
ttymodes.h
uidswap.c
polish whitespace for portable files
2021-04-03 17:47:37 +11:00
uidswap.h
umac128.c
umac.c
upstream: spelling
2022-01-04 18:22:46 +11:00
umac.h
upstream: spelling ok dtucker@
2022-01-01 15:19:48 +11:00
utf8.c
utf8.h
upstream: highly polished whitespace, mostly fixing spaces-for-tab
2021-04-03 17:23:02 +11:00
verify.c
version.h
upstream: openssh-9.0
2022-04-06 09:16:11 +10:00
xmalloc.c
upstream: ssh: xstrdup(): use memcpy(3)
2022-03-18 13:33:36 +11:00
xmalloc.h
upstream: highly polished whitespace, mostly fixing spaces-for-tab
2021-04-03 17:23:02 +11:00
xmss_commons.c
xmss_commons.h
xmss_fast.c
xmss_fast.h
xmss_hash_address.c
xmss_hash_address.h
xmss_hash.c
upstream: Remove unnecessary includes: openssl/hmac.h and
2022-04-27 21:30:01 +10:00
xmss_hash.h
xmss_wots.c
xmss_wots.h