en Copyright 2015 Java http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#6e2e039184c9f6cfd92567b0a48f8e7e9a2f0bb2 give ssh-keygen the ability to dump the contents of a binary keyrevocation list: ssh-keygen -lQf /path bz#3132; ok dtucker List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Fri, 03 Apr 2020 02:26:56 +0000 djm <djm@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#62af228467135ddff4a44e5f7a48ca2a03bc8ba3 factor out reading/writing sshbufs to dedicated functions;feedback and ok markus@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Sat, 25 Jan 2020 23:02:13 +0000 djm <djm@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#d2d1ddc01e164583fc6451048058886077f35159 Make zlib optional. This adds a "ZLIB" build time option that allowsbuilding without zlib compression and associated options. With feedbackfrom markus@, ok djm@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Thu, 23 Jan 2020 10:24:29 +0000 dtucker <dtucker@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#4852100a8107fd6df1ba08ea17696d3c031d25a2 use ssh-sk-helper for all security key signing operationsThis extracts and refactors the client interface for ssh-sk-helperfrom ssh-agent and generalises it for use by the other programs.This means that most OpenSSH tools no longer need to link againstlibfido2 or directly interact with /dev/uhid*requested by, feedback and ok markus@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Fri, 13 Dec 2019 19:09:10 +0000 djm <djm@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#094c80e0a523faf92a99f63ea2e05353f5028597 directly support U2F/FIDO2 security keys in OpenSSH by linkingagainst the (previously external) USB HID middleware. The dlopen()capability still exists for alternate middlewares, e.g. forBluetooth, NFC and test/debugging. List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Thu, 14 Nov 2019 21:27:29 +0000 djm <djm@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#01cfcf25097ab2c097c8ac8848bbafee046b8453 move client/server SSH-* banners to buffers under ssh->kex and factorout the banner exchange. This eliminates some common code from theclient and server.Also be more strict about handling \r characters - these should onlybe accepted immediately before \n (pointed out by Jann Horn).Inspired by a patch from Markus Schmidt.(lots of) feedback and ok markus@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Thu, 27 Dec 2018 03:25:24 +0000 djm <djm@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#4ae7035e867c640c4aca0ac9aae5062790d175a0 Don't redefine Makefile choices which come correct from bsd.*.mkok markus List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Wed, 25 Jul 2018 17:12:35 +0000 deraadt <deraadt@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#be0d4aa57315afcb114022d0e7d8dcc7a24ed94d Remove support for running ssh(1) setuid and fatal if attempted.Do not link uidwap.c into ssh any more. Neuters UsePrivilegedPort,which will be marked as deprecated shortly. ok markus@ djm@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Wed, 18 Jul 2018 11:34:04 +0000 dtucker <dtucker@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#9938e17fc646464785e0babecda1b882717d3593 group shared source files (e.g. SRCS_KEX) and allow compilation w/o OPENSSLok djm@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Mon, 08 Jan 2018 15:37:21 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#c0c5a1b786c3ddeb1d6076833b0cd54419e9e8ac Replace ED25519's private SHA-512 implementation with a call to theregular digest code. This speeds up compilation considerably.ok markus@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Thu, 14 Dec 2017 21:07:39 +0000 naddy <naddy@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#a3ef2fce0b740075bab6873e3b2281ed6699e2b5 Create a persistent umac128.c source file: #define the output size andthe name of the entry points for UMAC-128 before including umac.c.Idea from FreeBSD.ok dtucker@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Tue, 12 Dec 2017 15:06:12 +0000 naddy <naddy@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#e34d28941f95b5b221076a95efc15767e72cf082 ssh/lib hasn't worked towards our code-sharing goals for a quit while,perhaps it is too verbose? Change each */Makefile to specifying exactlywhat sources that program requires, compiling it seperate. Maybe we'lliterate by sorting those into seperatable chunks, splitting up fileswhich contain common code + server/client specific code, or whatnot. Butthis isn't one step, or we'd have done it a long time ago..ok dtucker markus djm List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Sun, 10 Dec 2017 19:37:57 +0000 deraadt <deraadt@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#9068ae8f34fcab1e99ad6c37c2ef9ca5e0586ef5 remove roaming support; ok djm@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Thu, 14 Jan 2016 16:17:39 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#21662c96e673152f4a89ce2772c577d0e3ea73f3 add missing library dependencies List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Tue, 02 Jul 2013 13:32:38 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#ef2ed092f6ba554763d9c493db15b8f9d0cabbb9 switch RekeyLimit traffic volume parsing to scan_scaled. ok djm@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Thu, 16 May 2013 09:12:31 +0000 dtucker <dtucker@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#46b8043eb2ad75f0854bbac5a4727c881a727383 Keep track of number of bytes read and written. Needed for upcomingchanges. Most code from Martin Forssen, maf at appgate dot com.ok markus@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Thu, 28 May 2009 16:50:16 +0000 andreas <andreas@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#d851c2beac75366f5d9c81fa586fe8cb6f14bbde re-enable ssh-keysign's sbit, but make ssh-keysign read /etc/ssh/ssh_configand exit if HostbasedAuthentication is disabled globally. based on discussionswith deraadt, itojun and sommerfeld; ok itojun@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Wed, 03 Jul 2002 14:21:05 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#749f8979483dac8befc67b0dc4ce799cda536439 disable ssh-keysign for now (no sbit); netbsd via itojun List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Mon, 01 Jul 2002 08:05:48 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#6e8cec495b8bb73fd7bbb37170d3227f4f612455 extent ssh-keysign protocol:pass # of socket-fd to ssh-keysign, keysign verfies locally usedip-address using this socket-fd, restricts fake local hostnamesto actual local hostnames; ok stevesk@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Fri, 31 May 2002 10:30:33 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/ssh-keysign/Makefile#8bc1c32f3563626526e7d540e7f94549fa0318ae first version of ssh-keysign manpage, ok deraadt@ List of files: /openbsd-src/usr.bin/ssh/ssh-keysign/Makefile Sat, 25 May 2002 08:16:59 +0000 markus <markus@openbsd.org>