Commit Graph

  • 64ede7991d Use clang-20 when building hardenedmalloc for tests. master anongit/master Darren Tucker 2026-08-08 21:14:57 +10:00
  • 05ec77c14b upstream: remove mlkem768brainpoolp256r1-sha256; requested by github/master github-selfhosted/master djm@openbsd.org 2026-08-08 07:27:54 +00:00
  • 08d9155d6e upstream: move comment to a better place; suggested by markus@ djm@openbsd.org 2026-08-08 07:25:55 +00:00
  • 72ed5241a8 upstream: add some options to allow setting or clearing the djm@openbsd.org 2026-08-07 05:49:53 +00:00
  • 6a57081dc3 upstream: Allow session-bind@openssh.com requests when the agent is djm@openbsd.org 2026-08-07 05:18:05 +00:00
  • 9910d5ef53 upstream: avoid potential realloc use-after-free in the client if a djm@openbsd.org 2026-08-07 05:03:56 +00:00
  • 3883901483 upstream: fix up synopsis and tweak wording for -Z naddy@openbsd.org 2026-08-04 22:47:07 +00:00
  • e6ece1bc26 upstream: document existence of naddy@openbsd.org 2026-08-04 22:14:52 +00:00
  • 6789420d13 Re-allow PAMServiceName inside a Match block. github/V_10_4 github-selfhosted/V_10_4 anongit/V_10_4 V_10_4 Darren Tucker 2026-08-06 23:30:30 +10:00
  • 4c414d99f3 Re-allow PAMServiceName inside a Match block. Darren Tucker 2026-08-06 23:30:30 +10:00
  • 5adaaa7781 Rerun VM tests on regress Makefile change too Darren Tucker 2026-08-04 22:20:47 +10:00
  • b1000abf54 Run tests on regress Makefile changes too. Darren Tucker 2026-08-04 14:23:59 +10:00
  • b8b12ca065 upstream: disable pubkey-priority test until I can fix it to not pick djm@openbsd.org 2026-08-04 02:48:00 +00:00
  • d5dc50020f upstream: Fix expected output for implicit ordering test. ok djm@ dtucker@openbsd.org 2026-08-03 23:22:23 +00:00
  • 265336a702 Don't enable Brainpool on AWS-LC or BoringSSL. Darren Tucker 2026-08-03 22:15:07 +10:00
  • b5ad8c3b1f Correct filename in comment. Darren Tucker 2026-08-03 22:06:26 +10:00
  • 7d6170c00e Fix OpenSSL ECC detection message. Darren Tucker 2026-08-03 21:18:48 +10:00
  • e766b76b61 Make EC_KEY_METHOD_new optional again. Darren Tucker 2026-08-03 18:19:58 +10:00
  • e47a744c8b upstream: crank up MaxAuthTries to avoid failures here djm@openbsd.org 2026-08-03 06:53:11 +00:00
  • 129f5ac61f upstream: regression test for pubkey ordering in the client; ok djm@openbsd.org 2026-08-03 06:52:50 +00:00
  • 6fe6ab77da upstream: Tweak ordering of certificates tried during pubkey djm@openbsd.org 2026-08-03 06:50:49 +00:00
  • 29f1b46e0f upstream: Add a "ssh -Z user@host" mode that dumps the pubkeys that djm@openbsd.org 2026-08-03 06:47:24 +00:00
  • 2aee73ed90 upstream: fix ML-KEM/ECDH interop problem (does not affect djm@openbsd.org 2026-08-03 06:43:16 +00:00
  • ec04856328 Require NISTP521 in libcrypto. Darren Tucker 2026-08-01 12:10:40 +10:00
  • e416edf1b2 Remove support for libcrypto w/out ECC. Darren Tucker 2026-07-31 21:32:53 +10:00
  • 15d1832b5e Add includes.h for compat interfaces. Darren Tucker 2026-07-30 22:15:46 +10:00
  • d8140f0706 upstream: Use ssh_mldsa44_ed25519_cleanup consistently to avoid brynet@openbsd.org 2026-07-30 07:40:48 +00:00
  • 18f5f351ed upstream: Fix $OpenBSD marker for easier syncing. dtucker@openbsd.org 2026-07-30 07:30:41 +00:00
  • 128a4a5bf9 upstream: ssh: update kex unit test markus@openbsd.org 2026-07-28 09:55:44 +00:00
  • 52794802d9 upstream: Make mlkem768ecdh build with OPENSSL=no. ok djm@ dtucker@openbsd.org 2026-07-30 07:29:09 +00:00
  • 4b5860ed27 upstream: pass back errors from ed25519 key generation, which djm@openbsd.org 2026-07-30 03:39:39 +00:00
  • 52154c2d23 upstream: Move check of public key type against allowed algorithms djm@openbsd.org 2026-07-30 03:37:39 +00:00
  • 05000bc5ea upstream: Fix double frees (impossible to reach outside of a test deraadt@openbsd.org 2026-07-30 03:13:34 +00:00
  • ddbcd8ffda upstream: ssh: implement mlkem768brainpoolp256r1-sha256; ok djm@ markus@openbsd.org 2026-07-27 12:31:09 +00:00
  • 786cb6a14c upstream: ssh: implement mlkem768nistp256-sha256; ok djm@ markus@openbsd.org 2026-07-27 12:28:52 +00:00
  • 1b23e24d21 upstream: use sshpkt_fatal instead of plain fatal() for errors in djm@openbsd.org 2026-07-23 06:33:06 +00:00
  • 7e446d3f59 upstream: Automatically detect IPv6 support dtucker@openbsd.org 2026-07-22 00:37:24 +00:00
  • 5e44a8ce08 upstream: Factor out all of the IPv6 addresses into variables. dtucker@openbsd.org 2026-07-21 23:43:15 +00:00
  • 9e35b3845c Sync missed case-insensitivity changes. Darren Tucker 2026-07-22 08:44:39 +10:00
  • b6080d835f Add obsd79 target. Darren Tucker 2026-07-14 18:30:40 +10:00
  • d3411094b3 Wording. Darren Tucker 2026-07-14 18:29:26 +10:00
  • fed6e6fea6 upstream: verify that ChannelTimeout in a Match block is effective djm@openbsd.org 2026-07-21 06:18:23 +00:00
  • dd4556dc75 upstream: verify that RekeyLimit in a Match block is effective djm@openbsd.org 2026-07-21 06:18:09 +00:00
  • 3f44bece40 upstream: Use -Ohashalg to restrict output to specfic hash instead dtucker@openbsd.org 2026-07-16 09:07:18 +00:00
  • caa6d7d19d upstream: fix ChannelTimeout and RekeyLimit not being applied in djm@openbsd.org 2026-07-21 06:17:42 +00:00
  • 752b4e3bd9 upstream: s/= - 1/= -1/; from serity--- djm@openbsd.org 2026-07-21 05:21:29 +00:00
  • bf268c8009 upstream: move to a better place djm@openbsd.org 2026-07-16 04:12:50 +00:00
  • 76357c4155 upstream: use crypto_api.h #define constants for lengths; no djm@openbsd.org 2026-07-14 04:43:13 +00:00
  • d322f2ccf7 upstream: make authorized_keys "restrict" keyword apply correctly djm@openbsd.org 2026-07-14 01:05:05 +00:00
  • f6acdce690 upstream: in sshd config dump mode, write all directives in mixed naddy@openbsd.org 2026-07-11 11:16:47 +00:00
  • 1ae9eeb18d upstream: read ~/.ssh/id_mldsa44_ed25519 private key files by naddy@openbsd.org 2026-07-11 11:15:03 +00:00
  • 0e546c658b upstream: document mldsa44-ed25519 host key and public key naddy@openbsd.org 2026-07-10 17:21:19 +00:00
  • df67bcaf56 upstream: when signing hostkey proofs for a client UpdateHostKeys djm@openbsd.org 2026-07-09 02:22:10 +00:00
  • addd12a5e4 upstream: setproctitle(3) to identify sshd-session when its djm@openbsd.org 2026-07-09 02:20:19 +00:00
  • e3bdc26895 upstream: delete list of ssh_config(5) options under djm@openbsd.org 2026-07-09 01:16:37 +00:00
  • 2a13186b43 upstream: enable the ssh-mldsa44-ed25519@openssh.com signature djm@openbsd.org 2026-07-09 01:15:34 +00:00
  • 1bf5871aea upstream: prefer fstat to stat when it's trivial to do so djm@openbsd.org 2026-07-07 04:04:16 +00:00
  • cadefc724f upstream: Add tests for ecdsa 256, 384 and 521 keys in DNS dtucker@openbsd.org 2026-07-12 11:19:33 +00:00
  • 932212db4d upstream: check sshd_config output case insensitively djm@openbsd.org 2026-07-12 08:40:00 +00:00
  • 9a48bf2408 upstream: Add SSHFP tests for ed25519 key type. dtucker@openbsd.org 2026-07-12 06:10:32 +00:00
  • 4079e457ea upstream: Restructure the SSHFP test in preparation for adding dtucker@openbsd.org 2026-07-11 09:59:10 +00:00
  • 8e65f996e5 remove README.tun Damien Miller 2026-07-08 11:07:01 +10:00
  • b9e2a1f923 add some parentheses to clarify a && || condition Damien Miller 2026-07-08 10:27:56 +10:00
  • c10e049803 upstream: unused variables djm@openbsd.org 2026-07-07 02:17:18 +00:00
  • 823ad00d14 upstream: fix GSSAPI option names, that I somehow screwed up while djm@openbsd.org 2026-07-07 01:00:22 +00:00
  • c147093565 upstream: fix GSSAPI option names, that I somehow screwed up while djm@openbsd.org 2026-07-07 01:00:22 +00:00
  • e39f9d87e3 Add 10.4 branch to status page. Darren Tucker 2026-07-06 21:14:53 +10:00
  • e8dd756725 autogenerated files for release V_10_4_P1 Damien Miller 2026-07-06 17:57:12 +10:00
  • 449d25b4f8 depend Damien Miller 2026-07-06 17:56:53 +10:00
  • 0227fe4606 crank version numbers Damien Miller 2026-07-06 17:56:10 +10:00
  • 0210c7cc94 upstream: openssh-10.4 djm@openbsd.org 2026-07-06 07:54:26 +00:00
  • 5d04ca6af7 upstream: Fix multiple RFC 4462 (GSSAPIAuthentication) compliance djm@openbsd.org 2026-07-06 07:53:30 +00:00
  • e8bdfb151a upstream: fix ownership and lifetime of several bits of client djm@openbsd.org 2026-07-06 07:49:58 +00:00
  • d43ba60c91 upstream: Fix cases in GSSAPI and keyboard-interactive djm@openbsd.org 2026-07-06 07:44:48 +00:00
  • cf67d46cba upstream: void functions should not return anything. Patch from Tim dtucker@openbsd.org 2026-07-05 02:46:44 +00:00
  • 93d6348ae4 upstream: fix inverted test that broke ssh-add with keys on stdin. From djm@openbsd.org 2026-07-05 00:16:21 +00:00
  • aab5620a66 grammar fix; from Daniel O'Connor Damien Miller 2026-07-03 14:20:02 +10:00
  • c123ac1c57 more config option details in README.privsep Damien Miller 2026-07-03 14:16:29 +10:00
  • 3912be7baa more README.privsep polish Damien Miller 2026-07-03 14:10:16 +10:00
  • f80e6545ee tweak; from dlg@ Damien Miller 2026-07-03 13:33:16 +10:00
  • 01ed1c648a tweak previous Damien Miller 2026-07-03 12:49:26 +10:00
  • 85dcff277e revise README.privsep for multi-binary model Damien Miller 2026-07-03 12:31:27 +10:00
  • a5ecfdc218 Need clang >= 19 for constexpr in hardened_malloc. Darren Tucker 2026-07-02 10:05:43 +10:00
  • c53864fc40 Tabs -> spaces. Darren Tucker 2026-06-25 18:43:48 +10:00
  • 0a75a95d58 Provide better error for non-supported private keys Zoltan Fridrich 2025-04-16 15:11:59 +02:00
  • 654e1a3e5b upstream: more missing mldsa44-ed25519, based on GHPR696 from Loganaden djm@openbsd.org 2026-07-01 01:14:39 +00:00
  • 088ca00b8f upstream: whitespace djm@openbsd.org 2026-07-01 01:08:51 +00:00
  • 0cdead097b upstream: simplify SIGINFO output: remove list of active channels (too djm@openbsd.org 2026-07-01 01:06:54 +00:00
  • 55ffd11b88 upstream: Tighten up the introduction a little: djm@openbsd.org 2026-07-01 00:52:31 +00:00
  • 8b05bbeb29 upstream: Move negative-FD checks to before first use. CID 909998, dtucker@openbsd.org 2026-07-01 00:52:23 +00:00
  • 296393226e upstream: ssh -o doesn't support Host or Include options, they are only djm@openbsd.org 2026-07-01 00:04:46 +00:00
  • fe85df40ae upstream: mention mldsa44-ed25519 in usage(); based on GHPR695 from djm@openbsd.org 2026-06-30 23:55:32 +00:00
  • aabe6d2549 upstream: ssherr-libcrypto: avoid use of deprecated tb@openbsd.org 2026-06-30 03:42:53 +00:00
  • dcba967d3f upstream: another ruser_name/ruser_group vs attrib_to_stat() ordering djm@openbsd.org 2026-06-30 02:30:19 +00:00
  • 710cd5abce upstream: set FD_CLOEXEC on the fds between sftp and its ssh djm@openbsd.org 2026-06-30 00:10:48 +00:00
  • fa447bd583 upstream: check key and IV length received in privsep state djm@openbsd.org 2026-06-30 00:09:01 +00:00
  • 23a7c4d128 upstream: revert bits that weren't ready for commit yet djm@openbsd.org 2026-06-29 23:00:00 +00:00
  • b9d2162e4a upstream: Move user/group name lookup to correct place; coverity djm@openbsd.org 2026-06-29 22:56:44 +00:00
  • 0875a78bb7 upstream: fix ineffective max file size check when loading djm@openbsd.org 2026-06-29 09:14:25 +00:00
  • 5d8e42933a upstream: check strdup() return to avoid NULL deref on failure. djm@openbsd.org 2026-06-29 08:59:31 +00:00