| Thu, 19 Aug 2021 17:37:14 +0200 |
Manfred Kaiser |
added option to disable trivial auth methods (#128)
|
| Sun, 18 Oct 2020 12:17:39 +0800 |
Matt Johnston |
Get client fuzzer building and starting (fails straight away)
fuzz
|
| Tue, 26 May 2020 00:24:02 +0800 |
Matt Johnston |
merge rsa-sha256
|
| Sun, 24 May 2020 14:16:58 +0800 |
Matt Johnston |
send and handle SSH_MSG_EXT_INFO only at the correct point
|
| Tue, 19 May 2020 00:31:41 +0800 |
Matt Johnston |
ext-info handling for server-sig-algs
|
| Sun, 17 May 2020 23:58:31 +0800 |
Matt Johnston |
split signkey_type and signature_type for RSA sha1 vs sha256
|
| Mon, 06 Apr 2020 23:18:26 +0800 |
Matt Johnston |
use sigtype where appropriate
|
| Mon, 25 May 2020 20:55:13 +0500 |
Vladislav Grishenko |
CBC mode cleanup (#95)
|
| Mon, 25 May 2020 20:50:25 +0500 |
Vladislav Grishenko |
Add Chacha20-Poly1305, AES128-GCM and AES256-GCM support (#93)
|
| Wed, 15 May 2019 21:59:45 +0800 |
Matt Johnston |
Rename EPKA -> Plugin
|
| Wed, 15 May 2019 09:43:57 -0400 |
fabriziobertocci |
External Public-Key Authentication API (#72)
|
| Tue, 20 Feb 2018 16:13:42 +0100 |
François Perrad |
use a full prototype (#56)
|
| Sun, 18 Feb 2018 11:22:13 +0800 |
Matt Johnston |
include config.h for options.h. don't need to include options.h when
|
| Wed, 14 Feb 2018 23:06:01 +0800 |
Matt Johnston |
make signal flags volatile, simplify handling
|
| Fri, 09 Feb 2018 23:40:23 +0800 |
Matt Johnston |
Remove none cipher
|
| Wed, 04 May 2016 15:33:40 +0200 |
Matt Johnston |
Convert #ifdef to #if, other build changes
|
| Fri, 01 Jan 2016 16:30:31 +0100 |
Francois Perrad |
fix empty C prototypes
|
| Tue, 15 Dec 2015 22:09:55 +0800 |
Matt Johnston |
A few minor style fixes
|
| Thu, 03 Dec 2015 16:22:29 +0300 |
Konstantin Tokarev |
Client: kill proxy command when exiting application.
|
| Wed, 21 Oct 2015 22:39:31 +0800 |
Mike Frysinger |
fix build when ENABLE_CLI_INTERACT_AUTH is disabled
|
| Mon, 03 Aug 2015 21:59:40 +0800 |
Matt Johnston |
Fix problem where auth timeout wasn't checked when waiting for ident
|
| Sat, 02 May 2015 22:48:11 +0200 |
Gaël PORTAY |
Turn sshsession's remoteident attribute into char *
|
| Sat, 02 May 2015 16:08:08 +0200 |
Gaël PORTAY |
Turn cleantext()'s dirtytext argument into char *
|
| Fri, 20 Mar 2015 23:36:42 +0800 |
Matt Johnston |
Make main socket nonblocking. Limit writequeue size.
|
| Tue, 17 Mar 2015 21:58:32 +0800 |
Matt Johnston |
Remove ATTRIB_NORETURN from session_loop() since it returns.
pam
|
| Mon, 16 Mar 2015 22:10:30 +0800 |
Matt Johnston |
Fix merge again. ses.loop_handler is required for PAM
pam
|
| Mon, 16 Mar 2015 21:34:05 +0800 |
Matt Johnston |
merge pam branch up to date
pam
|
| Sun, 01 Mar 2015 23:02:06 +0800 |
Matt Johnston |
Fix pubkey auth after change to reuse ses.readbuf as ses.payload
nocircbuffer
|
| Sun, 01 Mar 2015 00:57:21 +0800 |
Matt Johnston |
A bit of a bodge to avoid memcpy if zlib is disabled
nocircbuffer
|
| Sat, 28 Feb 2015 09:06:40 +0800 |
Matt Johnston |
merge from default
fastopen
|
| Tue, 24 Feb 2015 22:36:20 +0800 |
Matt Johnston |
Add more ATTRIB_NORETURN annotations, from Thorsten Horstmann
|
| Tue, 24 Feb 2015 20:43:01 +0800 |
Thorsten Horstmann |
DROPBEAR_ prefix for include guards to avoid collisions
|
| Fri, 20 Feb 2015 23:16:38 +0800 |
Matt Johnston |
Move generic network routines to netio.c
fastopen
|
| Thu, 19 Feb 2015 00:32:00 +0800 |
Matt Johnston |
In theory TFO should work. Needs platform cleanup and testing
fastopen
|
| Wed, 18 Feb 2015 22:46:15 +0800 |
Matt Johnston |
async connections working
fastopen
|
| Wed, 18 Feb 2015 00:05:27 +0800 |
Matt Johnston |
work in progress for async connect
fastopen
|
| Fri, 23 Jan 2015 21:38:47 +0800 |
Matt Johnston |
Merge up to date
pam
|
| Tue, 19 Aug 2014 23:08:56 +0800 |
Matt Johnston |
Make keepalive handling more robust, this should now match what OpenSSH does
|
| Wed, 13 Aug 2014 21:48:47 +0800 |
Matt Johnston |
Don't send SSH_MSG_UNIMPLEMENTED for keepalive responses
|
| Mon, 28 Jul 2014 23:23:49 +0800 |
Matt Johnston |
Make sure the check_close() handler runs when a server child process exits
|
| Wed, 16 Jul 2014 22:53:32 +0800 |
Matt Johnston |
Set tcp priority as follows:
|
| Wed, 09 Jul 2014 22:02:22 +0800 |
Matt Johnston |
Fix auth timeout regression
|
| Wed, 09 Jul 2014 00:15:20 +0800 |
Matt Johnston |
Make -K keepalive behave like OpenSSH's ServerAliveInterval
|
| Thu, 13 Mar 2014 23:50:09 +0800 |
Matt Johnston |
Add new monotonic_now() wrapper so that timeouts are unaffected by
|
| Wed, 12 Mar 2014 23:40:02 +0800 |
Matt Johnston |
Better PAM through recursion
pam
|
| Thu, 23 Jan 2014 22:25:52 +0800 |
Matt Johnston |
requirenext doesn't need two values
|
| Fri, 17 Jan 2014 21:39:27 +0800 |
Matt Johnston |
DROPBEAR_CLI_AUTH_IMMEDIATE fixed, now enabled by default
|
| Thu, 14 Nov 2013 22:03:30 +0800 |
Matt Johnston |
use oldstyle comments
|
| Fri, 08 Nov 2013 23:11:43 +0800 |
Matt Johnston |
curve25519
ecc
|
| Tue, 21 May 2013 12:09:35 +0800 |
Matt Johnston |
merge in HEAD
ecc
|
| Sun, 14 Apr 2013 23:16:16 +0800 |
Matt Johnston |
requirenext fixup for firstkexfollows
|
| Sun, 07 Apr 2013 01:36:42 +0800 |
Matt Johnston |
ecc kind of works, needs fixing/testing
ecc
|
| Fri, 29 Mar 2013 00:28:09 +0800 |
Matt Johnston |
More changes for KEX and ECDH. Set up hash descriptors, make ECC code work,
ecc
|
| Wed, 27 Mar 2013 00:38:03 +0800 |
Matt Johnston |
more bits on ecc branch
ecc
|
| Tue, 26 Mar 2013 01:35:22 +0800 |
Matt Johnston |
refactor kexdh code a bit, start working on ecdh etc
ecc
|
| Thu, 04 Apr 2013 00:18:50 +0800 |
Matt Johnston |
Take transmit and receive keys into use separately
|
| Wed, 03 Apr 2013 00:49:24 +0800 |
Matt Johnston |
merge kexguess branch
|
| Wed, 03 Apr 2013 00:32:55 +0800 |
Matt Johnston |
Don't usually need to recalculate dh_e for the repeated kexdh_init packet
kexguess
|
| Mon, 01 Apr 2013 00:13:41 +0800 |
Matt Johnston |
merge from head roundtrip changes
kexguess
|
| Sun, 31 Mar 2013 00:41:15 +0800 |
Matt Johnston |
merge
kexguess
|
| Sat, 30 Mar 2013 23:55:05 +0800 |
Matt Johnston |
Get rid of client/server specific buf_match_algo, use single
kexguess
|
| Fri, 29 Mar 2013 23:29:48 +0800 |
Matt Johnston |
Add kexguess2 behaviour
kexguess
|
| Fri, 29 Mar 2013 20:44:13 +0800 |
Matt Johnston |
first_kex_packet_follows working, needs tidying
kexguess
|
| Mon, 01 Apr 2013 22:26:55 +0800 |
Matt Johnston |
Run the cleanup handler also when we close due to TCP connection being closed
|
| Sun, 31 Mar 2013 21:38:17 +0800 |
Matt Johnston |
Don't bother waiting for a ssh-connection service reply - the server
|
| Sun, 31 Mar 2013 00:40:00 +0800 |
Matt Johnston |
send out our kexinit packet before blocking to read the SSH version string
|
| Sat, 23 Mar 2013 23:16:06 +0800 |
Matt Johnston |
Add ~. and ~^Z handling to exit/suspend dbclient
|
| Thu, 21 Mar 2013 22:55:12 +0800 |
Matt Johnston |
Make hmac-sha2-256 and hmac-sha2-512 work
|
| Wed, 20 Mar 2013 23:13:45 +0800 |
Matt Johnston |
Fix "-m none" case and ugly typo
|
| Thu, 17 May 2012 20:52:57 +0800 |
Matt Johnston |
- Only request "none" cipher after auth has succeeded
insecure-nocrypto
|
| Mon, 09 Apr 2012 20:35:13 +0800 |
Matt Johnston |
Rename HAVE_FORK to USE_VFORK
|
| Sun, 08 Apr 2012 01:50:52 -0400 |
Mike Frysinger |
check for fork() and not __uClinux__
|
| Mon, 21 Nov 2011 19:52:28 +0800 |
Matt Johnston |
- Update tfm changes to current default tip
dropbear-tfm
|
| Mon, 21 Nov 2011 19:19:57 +0800 |
Matt Johnston |
- Bring in original tomsfastmath patch against 0.52 from Peter Turczak
dropbear-tfm
|
| Thu, 07 Apr 2011 12:59:18 +0000 |
Matt Johnston |
Add noreturn and format attribute hints for some functions.
|
| Fri, 11 Sep 2009 14:02:04 +0000 |
Matt Johnston |
- Disable compression for non-final multihops
|
| Sat, 05 Sep 2009 11:40:00 +0000 |
Matt Johnston |
Move remotehost into svr_ses structure since we can't look it up
|
| Tue, 01 Sep 2009 16:38:26 +0000 |
Matt Johnston |
Rearrange getaddrstring() etc
|
| Wed, 29 Jul 2009 02:58:33 +0000 |
Matt Johnston |
propagate from branch 'au.asn.ucc.matt.dropbear' (head bbe4e11695a7b22bd89a722600eb4a4020b6fdf3)
agent-client
|
| Thu, 09 Jul 2009 16:01:30 +0000 |
Matt Johnston |
- For uclinux, only cleanup on exit for the main process. This avoids
|
| Mon, 06 Jul 2009 12:59:13 +0000 |
Matt Johnston |
New standard linked list to use, rather than adhoc SignKeyList or TCPFwdList
agent-client
|
| Wed, 01 Jul 2009 06:27:27 +0000 |
Matt Johnston |
Talking to the agent works now. Can't interpret the pubkeys.
agent-client
|
| Wed, 01 Jul 2009 04:53:17 +0000 |
Matt Johnston |
Make it compile, update for changes in channel structure.
agent-client
|
| Sun, 01 Mar 2009 16:15:57 +0000 |
Matt Johnston |
- Get rid of decryptreadbuf, just decrypt in-place with readbuf
|
| Fri, 07 Nov 2008 14:11:06 +0000 |
Matt Johnston |
Idle timeout patch from Farrell Aultman. Needs testing, unsure if server
|
| Mon, 29 Sep 2008 13:53:31 +0000 |
Matt Johnston |
- Add Counter Mode support
|
| Mon, 29 Sep 2008 02:23:04 +0000 |
Matt Johnston |
Add support for [email protected] delayed compression.
|
| Mon, 22 Sep 2008 15:28:52 +0000 |
Matt Johnston |
Idle-timeout patch from Farrell Aultman, need to figure whether to only
idle-timeout
|
| Mon, 15 Sep 2008 14:40:30 +0000 |
Matt Johnston |
- "-J 'nc localhost 22'" kind of works, needs fixing hostkeys, ptys etc.
|
| Mon, 15 Sep 2008 14:04:55 +0000 |
Matt Johnston |
- Add run_shell_command() function to run a "sh -c" command, handling
|
| Mon, 15 Sep 2008 12:51:50 +0000 |
Matt Johnston |
- Split main socket var into ses.sock_in/ses.sock_out in preparation
|
| Wed, 08 Aug 2007 15:12:06 +0000 |
Matt Johnston |
- Add -K keepalive flag for dropbear and dbclient
|
| Fri, 27 Jul 2007 17:13:42 +0000 |
Matt Johnston |
Prevent invalid packets being sent during key-exchange, instead queue
|
| Fri, 16 Feb 2007 14:42:08 +0000 |
Matt Johnston |
Fix for -pedantic -ansi compilation, change // to /**/, plus some signedness
|
| Fri, 09 Feb 2007 10:43:16 +0000 |
Matt Johnston |
Improve behaviour when flushing out after a process has exited.
channel-fix
|
| Tue, 20 Sep 2005 17:35:21 +0000 |
Matt Johnston |
added keyboard-interactive client support
|
| Fri, 08 Jul 2005 11:32:09 +0000 |
Matt Johnston |
rename PubkeyList to SignKeyList for clarity
|
| Wed, 02 Mar 2005 04:14:26 +0000 |
Matt Johnston |
* Reset the non-blocking status of stdout and stderr as well on exit
nonblock-stdout-stderr
|
| Thu, 23 Dec 2004 17:00:15 +0000 |
Matt Johnston |
Log the IP along with auth success/fail attempts
|
| Wed, 22 Dec 2004 15:37:50 +0000 |
Matt Johnston |
Rearrange preprocessor parts so that compilation with various options
|
| Tue, 21 Sep 2004 10:08:21 +0000 |
Matt Johnston |
propagate of 82bb923d0154750ef716b66b498561f882891946 and f51a272341ee12268fe7028bc2f2bad66c603069 from branch 'matt.dbclient.work' to 'matt.dbclient.rez'
private-rez
|
| Thu, 26 Aug 2004 13:16:40 +0000 |
Matt Johnston |
- added circular buffering for channels
|
| Wed, 18 Aug 2004 12:42:21 +0000 |
Matt Johnston |
Don't leave the stdin FD non-blocking on exit - busybox doesn't like it.
|
| Thu, 12 Aug 2004 13:48:42 +0000 |
Matt Johnston |
TCP forwarding works.
|
| Fri, 06 Aug 2004 16:18:01 +0000 |
Matt Johnston |
- client pubkey auth works
|
| Tue, 03 Aug 2004 17:26:56 +0000 |
Matt Johnston |
Pubkey auth is mostly there for the client. Something strange with
|
| Mon, 02 Aug 2004 04:25:05 +0000 |
Matt Johnston |
Banner printing
|
| Sun, 01 Aug 2004 09:41:37 +0000 |
Matt Johnston |
added window-size change handling
|
| Sun, 01 Aug 2004 08:54:01 +0000 |
Matt Johnston |
- Added terminal mode handling etc for the client, and window change
|
| Fri, 30 Jul 2004 12:29:53 +0000 |
Matt Johnston |
tty raw mode support works mostly
|
| Fri, 30 Jul 2004 03:02:19 +0000 |
Matt Johnston |
we're nearly there yet
|
| Wed, 28 Jul 2004 16:44:16 +0000 |
Matt Johnston |
Client mostly works up to password auth
|
| Tue, 27 Jul 2004 16:30:46 +0000 |
Matt Johnston |
Progressing client support
|
| Mon, 26 Jul 2004 02:44:20 +0000 |
Matt Johnston |
snapshot of stuff
|
| Tue, 20 Jul 2004 12:05:00 +0000 |
Matt Johnston |
switching to global vars
|
| Wed, 23 Jun 2004 07:14:16 +0000 |
Matt Johnston |
merge of abac2150ee4f4031a98016241fbd136d24fed127
|
| Tue, 22 Jun 2004 10:47:16 +0000 |
Matt Johnston |
- Port restriction code back in
|
| Thu, 03 Jun 2004 16:45:53 +0000 |
Matt Johnston |
- Reworked non-channel fd handling to listener.c
|
| Tue, 01 Jun 2004 10:48:46 +0000 |
Matt Johnston |
Sorted out the first channel init issues.
|
| Tue, 01 Jun 2004 04:20:12 +0000 |
Matt Johnston |
syntactical fixups - it compiles, but channel handling code requires fixing.
|
