Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-05-27 | ssh: work around github.com's broken cipher negotiation code (thanks Ori_B) | cinap_lenrek | |
key exchange with git@github.com fails as they appear to try to negotiate a mac algorithm even tho we use an AEAD cipher which does not use a mac algorithm. the work around is to supply a dummy mac algorithm that they can negotiate to make them happy. | |||
2019-04-02 | ssh: print usage for unknown flags, cleanup | cinap_lenrek | |
2019-04-02 | ssh: add experimental mux mode | cinap_lenrek | |
in mux mode, ssh relays raw MSG_CHANNEL_* messages on standard input and output while still handling authentication and key exchange internally. the intend is to use the mux mode to implement something like the old sshnet ontop of ssh. | |||
2019-04-02 | ssh: implement -W option for making remote tcp connections | cinap_lenrek | |
2019-02-25 | ssh: don't assume error messages are ASCII. format number of complete runes, ↵ | cinap_lenrek | |
not bytes. | |||
2018-11-08 | ssh: handle unknown MSG_CHANNE_REQUEST messages | cinap_lenrek | |
2018-11-08 | ssh: handle MSG_GOBAL_REQUEST | cinap_lenrek | |
respond to MSG_GLOBAL_REQUEST with MSG_REQUEST_FAILURE as stated by rfc4254 when server wants a reply. failing todo so breaks some proprietary keep-alive schemes. | |||
2018-10-12 | ssh: fix spinning due to sticky intr flag on connection timeout | cinap_lenrek | |
2018-07-18 | ssh: fix nil dereference when TERM isnt set and -r is requested | cinap_lenrek | |
2018-06-28 | ssh: wait for remote channel close (thanks piroko) | cinap_lenrek | |
2018-05-18 | ssh:add -r for extra raw mode | spew | |
2017-10-06 | ssh: remove extern declarations for pkcs1padbuf() and asn1encodedigest() ↵ | cinap_lenrek | |
(now in libsec.h) | |||
2017-08-20 | ssh: issue "winchon" ctl request to /dev/consctl to get interrupt on window ↵ | cinap_lenrek | |
size change from vt(1) | |||
2017-05-05 | ssh: add -h flag to pass host (for compatibility) | cinap_lenrek | |
2017-05-03 | ssh: quote cmd arguments with unix shell single quotes, request tty even ↵ | cinap_lenrek | |
with TERM=dumb | |||
2017-04-28 | ssh: add support for subsystems | aiju | |
2017-04-24 | ssh: make number of retries configurable | aiju | |
2017-04-24 | ssh: loop keyboard-interactive on failure | aiju | |
2017-04-24 | ssh: fix typo | aiju | |
2017-04-24 | ssh: add "none" method to find out list of acceptable methods | aiju | |
2017-04-24 | ssh: print the whole ssh-rsa hostkey in base64 when thumb check fails | cinap_lenrek | |
in addition to the thumbprint, also print the whole hostkey in base64 (same format as openssh uses) to make verification easier. | |||
2017-04-23 | libsec: sha256 support for thumbprint files, use it in ssh as well | cinap_lenrek | |
initThumbprints() now takes an application tag argument so x509 and ssh can coexist. the thumbprint entries can now hold both sha1 and sha256 hashes. okThumbprint() now takes a len argument for the hash length used. the new function okCertificate() hashes the certificate with both and checks for any matches. on failure, okCertificate() returns 0 and sets error string. we also check for include loops now in thumbfiles, limiting the number of includes to 8. | |||
2017-04-23 | ssh: implement primitive hostkey verification | cinap_lenrek | |
this checks $home/lib/sshthumbs for the sha256 hash of the hosts rsa public key. if its not there, it prints the rc command to add it and exits. | |||
2017-04-21 | ssh: actually handle flow control and channel id's | cinap_lenrek | |
2017-04-21 | ssh: increase initial window size for better throughput | cinap_lenrek | |
2017-04-21 | ssh: cleanup debug messages | cinap_lenrek | |
2017-04-20 | ssh: do not try authentication methods that we know are not possible | cinap_lenrek | |
2017-04-20 | ssh: implement password and keyboard-interactive authentication methods | cinap_lenrek | |
2017-04-19 | ssh: fix locking, and key reexchange handling | cinap_lenrek | |
when we initiate re-key exchange we data packets can still come in. so instead we have everything that can come in all the time in dispatch() function (including KEXINIT) and have the receiver process just call that in a loop. exclude dispatch and the sender proc from corrupting each others sendpkt() calls with the QLock sl. | |||
2017-04-18 | ssh: close the channel when vt hangs up | cinap_lenrek | |
2017-04-17 | ssh: weekend project | cinap_lenrek | |
manpage should follow... |