Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-01-28 | Initialise sa_mask | Matt Johnston | |
2015-01-28 | Fix memory leak of ecdsa structure, found by Coverity | Matt Johnston | |
2015-01-28 | Document ~/.ssh/id_dropbear | Matt Johnston | |
2015-01-28 | Keep sha1 default | Matt Johnston | |
2015-01-28 | Allow configure with libtomcrypt/libtommath directories missing | Elan Ruusamäe | |
if using bundled libraries | |||
2015-01-28 | Disable non-delayed zlib for server | Matt Johnston | |
2015-01-24 | Default client key path ~/.ssh/id_dropbear | Matt Johnston | |
2015-01-23 | Prefer stronger algorithms in algorithm negotiation. | Fedor Brunner | |
Prefer diffie-hellman-group14-sha1 (2048 bit) over diffie-hellman-group1-sha1 (1024 bit). Due to meet-in-the-middle attacks the effective key length of three key 3DES is 112 bits. AES is stronger and faster then 3DES. Prefer to delay the start of compression until after authentication has completed. This avoids exposing compression code to attacks from unauthenticated users. (github pull request #9) | |||
2015-01-23 | Fix installing dropbear.8 error when building in a separate directory. | Like Ma | |
(fix pull request #6) | |||
2015-01-23 | Add config option to disable cbc. Disable twofish by default | Matt Johnston | |
2015-01-23 | Fix variables may be uninitialized. | Like Ma | |
(fixup of pull request #7) | |||
2015-01-23 | Integrity error (bad packet size %u) negative length | Fedor Brunner | |
When corrupted packet is received negative length of packet is displayed. (re-apply of pull request #8) | |||
2015-01-13 | Enable sha2 HMACs by default, they're required for ecdsa already | Matt Johnston | |
2015-01-04 | clear hash state memory after use | Matt Johnston | |
2015-01-04 | clarify bad/unknown | Matt Johnston | |
2015-01-01 | Handle invalid agent keys by skipping rather than exiting. | Catalin Patulea | |
My agent exposes both conventional keys and certs (ecdsa-sha2-nistp256-cert-v01@openssh.com) and I want dropbear to be able to use the former. | |||
2015-01-04 | Open directories O_RDONLY for fsync, add debugging if it fails | Matt Johnston | |
2014-11-08 | Make sure hostkeys are flushed to disk to avoid empty files if the power | Matt Johnston | |
fails. Based on patch from Peter Korsgaard | |||
2014-10-23 | Added signature for changeset 2d421bc0545d | Matt Johnston | |
2014-10-23 | Added tag DROPBEAR_2014.66 for changeset 735511a4c761 | Matt Johnston | |
2014-10-23 | changelog, version number bump | Matt Johnston | |
2014-10-23 | Remove -o from scp help | Matt Johnston | |
2014-10-23 | increae MAX_STRING_LEN for sun ssh | Matt Johnston | |
2014-10-22 | Don't print "Failed loading hostkey" when -R delayed hostkey option is enabled | Steven Honeyman | |
2014-10-21 | Combine code for SSH_CONNECTION and SSH_CLIENT | Matt Johnston | |
2014-10-21 | Merge pull request #5 from rcleere/ssh_client | Matt Johnston | |
Add SSH_CLIENT environment variable | |||
2014-10-20 | Add SSH_CLIENT environment variable | Ryan Cleere | |
2014-08-19 | Make keepalive handling more robust, this should now match what OpenSSH does | Matt Johnston | |
2014-08-13 | Fix wtmp, testing for wtmp.h and wtmpx.h doesn't make sense | Whoopie | |
2014-08-13 | Don't send SSH_MSG_UNIMPLEMENTED for keepalive responses | Matt Johnston | |
2014-08-08 | Added signature for changeset caac692b366c | Matt Johnston | |
2014-08-08 | Added tag DROPBEAR_2014.65 for changeset e9579816f20e | Matt Johnston | |
2014-08-08 | 2014.64 | Matt Johnston | |
2014-08-01 | use xauth in /usr/bin | Mike Frysinger | |
Since the x.org rework, X has been installed into standard paths and not its own random prefixes. I think it's time we update the default paths accordingly. | |||
2014-08-06 | Don't warn about ENOTSOCK when setting priority | Matt Johnston | |
2014-08-06 | Be a bit safer in case pw_name doesn't exist | Matt Johnston | |
2014-08-06 | merge | Matt Johnston | |
2014-08-06 | Merge pull request #2 from iquaba/patch-1 | Matt Johnston | |
Try without identifying current user | |||
2014-08-06 | Test for EAGAIN too | Matt Johnston | |
2014-08-06 | Try without identifying current user | iquaba | |
Small change that warns the user if the current user cannot be identified rather than aborting. This came in handy when I put dropbear on a dlink that did not have a true user environment. Falling back on the "-l" option and user@ options works just fine as a client. The only implication I found is that the -J option will fail ungracefully without a known own_user. | |||
2014-07-28 | Make sure the check_close() handler runs when a server child process exits | Matt Johnston | |
2014-07-28 | Fix some format string warnings | Matt Johnston | |
2014-07-28 | Fix clock_gettime handling | Matt Johnston | |
2014-07-27 | Added signature for changeset 96584b934d04 | Matt Johnston | |
2014-07-27 | Added tag DROPBEAR_2014.64 for changeset 0d2d39957c02 | Matt Johnston | |
2014-07-27 | Archive should be bz2 nor gz | Matt Johnston | |
2014-07-27 | - Don't use multichar constants since recent gcc complains | Matt Johnston | |
- Add release script - Simplify print_version | |||
2014-07-27 | Version 2014.64 | Matt Johnston | |
2014-07-27 | Add '-V' for version | Matt Johnston | |
-h should exit with success Update manpages | |||
2014-07-26 | Avoid use-after-free when channel inithandler fails. Thanks to Coverity | Matt Johnston | |