summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2015-01-28Initialise sa_maskMatt Johnston
2015-01-28Fix memory leak of ecdsa structure, found by CoverityMatt Johnston
2015-01-28Document ~/.ssh/id_dropbearMatt Johnston
2015-01-28Keep sha1 defaultMatt Johnston
2015-01-28Allow configure with libtomcrypt/libtommath directories missingElan Ruusamäe
if using bundled libraries
2015-01-28Disable non-delayed zlib for serverMatt Johnston
2015-01-24Default client key path ~/.ssh/id_dropbearMatt Johnston
2015-01-23Prefer stronger algorithms in algorithm negotiation.Fedor Brunner
Prefer diffie-hellman-group14-sha1 (2048 bit) over diffie-hellman-group1-sha1 (1024 bit). Due to meet-in-the-middle attacks the effective key length of three key 3DES is 112 bits. AES is stronger and faster then 3DES. Prefer to delay the start of compression until after authentication has completed. This avoids exposing compression code to attacks from unauthenticated users. (github pull request #9)
2015-01-23Fix installing dropbear.8 error when building in a separate directory.Like Ma
(fix pull request #6)
2015-01-23Add config option to disable cbc. Disable twofish by defaultMatt Johnston
2015-01-23Fix variables may be uninitialized.Like Ma
(fixup of pull request #7)
2015-01-23 Integrity error (bad packet size %u) negative lengthFedor Brunner
When corrupted packet is received negative length of packet is displayed. (re-apply of pull request #8)
2015-01-13Enable sha2 HMACs by default, they're required for ecdsa alreadyMatt Johnston
2015-01-04clear hash state memory after useMatt Johnston
2015-01-04clarify bad/unknownMatt Johnston
2015-01-01Handle invalid agent keys by skipping rather than exiting.Catalin Patulea
My agent exposes both conventional keys and certs (ecdsa-sha2-nistp256-cert-v01@openssh.com) and I want dropbear to be able to use the former.
2015-01-04Open directories O_RDONLY for fsync, add debugging if it failsMatt Johnston
2014-11-08Make sure hostkeys are flushed to disk to avoid empty files if the powerMatt Johnston
fails. Based on patch from Peter Korsgaard
2014-10-23Added signature for changeset 2d421bc0545dMatt Johnston
2014-10-23Added tag DROPBEAR_2014.66 for changeset 735511a4c761Matt Johnston
2014-10-23changelog, version number bumpMatt Johnston
2014-10-23Remove -o from scp helpMatt Johnston
2014-10-23increae MAX_STRING_LEN for sun sshMatt Johnston
2014-10-22Don't print "Failed loading hostkey" when -R delayed hostkey option is enabledSteven Honeyman
2014-10-21Combine code for SSH_CONNECTION and SSH_CLIENTMatt Johnston
2014-10-21Merge pull request #5 from rcleere/ssh_clientMatt Johnston
Add SSH_CLIENT environment variable
2014-10-20Add SSH_CLIENT environment variableRyan Cleere
2014-08-19Make keepalive handling more robust, this should now match what OpenSSH doesMatt Johnston
2014-08-13Fix wtmp, testing for wtmp.h and wtmpx.h doesn't make senseWhoopie
2014-08-13Don't send SSH_MSG_UNIMPLEMENTED for keepalive responsesMatt Johnston
2014-08-08Added signature for changeset caac692b366cMatt Johnston
2014-08-08Added tag DROPBEAR_2014.65 for changeset e9579816f20eMatt Johnston
2014-08-082014.64Matt Johnston
2014-08-01use xauth in /usr/binMike Frysinger
Since the x.org rework, X has been installed into standard paths and not its own random prefixes. I think it's time we update the default paths accordingly.
2014-08-06Don't warn about ENOTSOCK when setting priorityMatt Johnston
2014-08-06Be a bit safer in case pw_name doesn't existMatt Johnston
2014-08-06mergeMatt Johnston
2014-08-06Merge pull request #2 from iquaba/patch-1Matt Johnston
Try without identifying current user
2014-08-06Test for EAGAIN tooMatt Johnston
2014-08-06Try without identifying current useriquaba
Small change that warns the user if the current user cannot be identified rather than aborting. This came in handy when I put dropbear on a dlink that did not have a true user environment. Falling back on the "-l" option and user@ options works just fine as a client. The only implication I found is that the -J option will fail ungracefully without a known own_user.
2014-07-28Make sure the check_close() handler runs when a server child process exitsMatt Johnston
2014-07-28Fix some format string warningsMatt Johnston
2014-07-28Fix clock_gettime handlingMatt Johnston
2014-07-27Added signature for changeset 96584b934d04Matt Johnston
2014-07-27Added tag DROPBEAR_2014.64 for changeset 0d2d39957c02Matt Johnston
2014-07-27Archive should be bz2 nor gzMatt Johnston
2014-07-27- Don't use multichar constants since recent gcc complainsMatt Johnston
- Add release script - Simplify print_version
2014-07-27Version 2014.64Matt Johnston
2014-07-27Add '-V' for versionMatt Johnston
-h should exit with success Update manpages
2014-07-26Avoid use-after-free when channel inithandler fails. Thanks to CoverityMatt Johnston