summaryrefslogtreecommitdiffhomepage
path: root/options.h
AgeCommit message (Collapse)Author
2013-05-03ecdsa is workingMatt Johnston
--HG-- branch : ecc
2013-04-09start on ecdsa keysMatt Johnston
--HG-- branch : ecc
2013-04-07ecc kind of works, needs fixing/testingMatt Johnston
--HG-- branch : ecc
2013-03-26refactor kexdh code a bit, start working on ecdh etcMatt Johnston
--HG-- branch : ecc
2013-03-20Fix "-c none" so that it allows aes during authenticationMatt Johnston
Default for options.h shouldn't allow "none"
2013-03-20Merge "none" cipher/MAC branch. Also adds sha256 and sha512Matt Johnston
2013-02-23DSS_PROTOK is not necessary now that private keys are includedMatt Johnston
in the random generation input
2013-02-12Allow configuring "allow blank password option" at runtimePaul Eggleton
Changes this from a compile-time switch to a command-line option. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2012-06-29Improve RNG seeding.Matt Johnston
Try to read from /dev/urandom multiple times, take input from extra sources, and use /dev/random when generating private keys
2012-05-17- Only request "none" cipher after auth has succeededMatt Johnston
--HG-- branch : insecure-nocrypto
2012-05-17Add ALLOW_NONE_PASSWORD_AUTH optionMatt Johnston
--HG-- branch : insecure-nocrypto
2012-05-17Merge in "-m"/"-c" codeMatt Johnston
--HG-- branch : insecure-nocrypto
2012-05-17ENABLE_USER_ALGO_LIST should work for the clientMatt Johnston
2012-05-17Add rough support for choosing ciphers/hashes with "-c" or "-m"Matt Johnston
2012-05-16Update insecure-nocrypto to current headMatt Johnston
--HG-- branch : insecure-nocrypto
2012-05-16Disable SHA256 and SHA512 by default in options.hMatt Johnston
--HG-- branch : sha2
2012-05-10- Add hmac-sha2-256 and hmac-sha2-512. Needs debugging, seems to beMatt Johnston
getting keyed incorrectly --HG-- branch : sha2
2012-05-09Fix empty password immediate loginMatt Johnston
2012-04-12Improve comment about sha1-96Matt Johnston
2011-10-26- Add ALLOW_BLANK_PASSWORD optionMatt Johnston
- Don't reject blank-password logins via public key --HG-- extra : convert_revision : 2d4bb3ecb013a7be47a7b470fc6b23e653a43dfb
2011-02-28merge of '8a608f0ed5e4b491dba4bf330e560636ec7376fd'Matt Johnston
and 'b31879a384d3bf8cbcbe2ed731d7d79d49799b1d' --HG-- extra : convert_revision : dfa0557e6070859d23ff096789f339e51a870177
2011-02-28- Don't allow setting memLevel since that doesn't work properlyMatt Johnston
- Better handling of the case where compressing makes the data larger (possibly only happens when memLevel is adjusted, but better to be safe) --HG-- extra : convert_revision : b31879a384d3bf8cbcbe2ed731d7d79d49799b1d
2011-02-28Compile fix for when both client and server agent forwarding is disabledMatt Johnston
--HG-- extra : convert_revision : 8a608f0ed5e4b491dba4bf330e560636ec7376fd
2011-02-24It happened to sonyMatt Johnston
--HG-- extra : convert_revision : c2d5690ca9ed85c7d75dd9cc2c150de50503aa3b
2009-09-08- Test for pam_fail_delay() function in configureMatt Johnston
- Recognise "username:" as a PAM prompt - Add some randomness to the auth-failure delay - Fix wrongly committed options.h/debug.h --HG-- extra : convert_revision : f242f0e66fb0ea5d3b374995d2f548d37dd8f3a3
2009-09-01Rearrange getaddrstring() etcMatt Johnston
--HG-- extra : convert_revision : 8a18c4a60aeaec085923d13d98fa0f93c506ceba
2009-08-26- set $SSH_ORIGINAL_COMMAND if a command is forced, and log itMatt Johnston
if LOG_COMMANDS is set --HG-- extra : convert_revision : d9e8aa0ecbe7607285fa4f96f0d6f9b1523719d8
2009-07-30propagate from branch 'au.asn.ucc.matt.dropbear.cli-agent' (head ↵Matt Johnston
eb0dae4b62e243ba37a897beb7ba81a4f637d8b3) to branch 'au.asn.ucc.matt.dropbear' (head ff0abce7b29e61630e3b09e5fc5820ae6e192808) --HG-- extra : convert_revision : 49e078caffa785d121cefaf05b64fecc71fecd63
2009-07-29propagate from branch 'au.asn.ucc.matt.dropbear' (head ↵Matt Johnston
bbe4e11695a7b22bd89a722600eb4a4020b6fdf3) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head 276cf5e82276b6c879d246ba64739ec6868f5150) --HG-- branch : agent-client extra : convert_revision : d23b0c21649eb2f0b2d13dbf33c0a9faca25628a
2009-07-28Use /usr/bin/X11/xauth default path insteadMatt Johnston
--HG-- extra : convert_revision : ff0abce7b29e61630e3b09e5fc5820ae6e192808
2009-07-26- Add option to change zlib windowBits/memLevelMatt Johnston
--HG-- extra : convert_revision : 5fc51ba0b8f165426c78f8d32162e5ccb51e524f
2009-07-24Disable Blowfish by default, it has inefficient key memory useMatt Johnston
--HG-- extra : convert_revision : a37b8ae5fb524be221dbdfd71b4f35eb6a48565c
2009-07-01propagate from branch 'au.asn.ucc.matt.dropbear' (head ↵Matt Johnston
899a8851a5edf840b2f7925bcc26ffe99dcac54d) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head 6bbab8364de17bd9ecb1dee5ffb796e48c0380d2) --HG-- branch : agent-client extra : convert_revision : d39a49137cc36b624768d4e79e564141dde8d355
2009-03-03- Turn DROPBEAR_SMALL_CODE off by defaultMatt Johnston
--HG-- extra : convert_revision : ef3b41f37e9f4dd45358bc40f9559ee23f71c284
2008-11-11PAM shouldn't be on by defaultMatt Johnston
--HG-- extra : convert_revision : 44714b1a34bf7833e6f2e4fd1c81ceaacccb15bd
2008-11-07Idle timeout patch from Farrell Aultman. Needs testing, unsure if serverMatt Johnston
code works --HG-- extra : convert_revision : ff66e05ae040561110af70114bf83f11ed528f05
2008-11-06Update nocrypto branch to current headMatt Johnston
--HG-- branch : insecure-nocrypto extra : convert_revision : 9e5e6e33be005d27cd5b3270c574edc45b5c2893
2008-11-06propagate from branch 'au.asn.ucc.matt.dropbear' (head ↵Matt Johnston
cdcc3c729e29544e8b98a408e2dc60e4483dfd2a) to branch 'au.asn.ucc.matt.dropbear.insecure-nocrypto' (head 0ca38a1cf349f7426ac9de34ebe4c3e3735effab) --HG-- branch : insecure-nocrypto extra : convert_revision : dbb093e087a68abf2e54ab0b711af70771ddb29d
2008-11-05- Update manuals, include section on authorized_keysMatt Johnston
- Change default PATH to /usr/bin:/bin - Mention DEBUG_TRACE in -v help text --HG-- extra : convert_revision : cdcc3c729e29544e8b98a408e2dc60e4483dfd2a
2008-11-05- Set a default path, since bash won't export one otherwise (though it will setMatt Johnston
one, leading to mysterious problems) - Rearrange some options --HG-- extra : convert_revision : 6e81becf6e96479e10d9244186a900fab7079bf8
2008-09-29- Get rid of blowfish and twofish CTR since they weren't likelyMatt Johnston
to be that useful --HG-- extra : convert_revision : e16bd265bb6e8093b3488993dffc86662a2a7a62
2008-09-29- Add Counter Mode supportMatt Johnston
--HG-- extra : convert_revision : 5225162bdf32d70b58b6d3ae375a290326c59f3a
2008-09-23propagate from branch 'au.asn.ucc.matt.dropbear' (head ↵Matt Johnston
4fb35083f0f46ea667e7043e7d4314aecd3df46c) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head 833d0adef6cdbf43ea75283524c665e70b0ee1ee) --HG-- branch : agent-client extra : convert_revision : 6bbab8364de17bd9ecb1dee5ffb796e48c0380d2
2008-09-23Split options.h out into sysoptions.h for options that aren't usuallyMatt Johnston
user-changed --HG-- extra : convert_revision : 4fb35083f0f46ea667e7043e7d4314aecd3df46c
2008-09-23propagate from branch 'au.asn.ucc.matt.dropbear.pubkey-options' (head ↵Matt Johnston
537a6ebebb46424b967ffe787f0f8560e5f447e8) to branch 'au.asn.ucc.matt.dropbear' (head 10b2f286b9886364db39dfbb4f8f46e49e345d87) --HG-- extra : convert_revision : 6fd2597077a4e2421bf45388e058d15606f6dd74
2008-09-18Add multihop 'onion-forwarding' mode. Needs refinement, works.Matt Johnston
--HG-- extra : convert_revision : 877947ce24297781438a75e7e9c64ba86f0dce93
2008-09-17propagate from branch 'au.asn.ucc.matt.dropbear.dbclient-netcat-alike' (head ↵Matt Johnston
b02ba6628cf2095017c60d202ac630f231e6b553) to branch 'au.asn.ucc.matt.dropbear' (head 636506b73e973b004cc058b07e6f36a25ff902f8) --HG-- extra : convert_revision : eb8e95a8227df7802d79007d4dd89098759fa76b
2008-09-17Rework netcat-alike to be a proper mode, with -B argument.Matt Johnston
--HG-- branch : dbclient-netcat-alike extra : convert_revision : b02ba6628cf2095017c60d202ac630f231e6b553
2008-09-15- "-J 'nc localhost 22'" kind of works, needs fixing hostkeys, ptys etc.Matt Johnston
--HG-- extra : convert_revision : 45069dd007ebf414330e0a7abf4fb7e0727049c3
2008-09-15- Split main socket var into ses.sock_in/ses.sock_out in preparationMatt Johnston
for -J proxy_cmd option (and some prelim options for that) --HG-- extra : convert_revision : 47cdea9a7d66c553c6f5eec43b899821939d4e4c