aboutsummaryrefslogtreecommitdiff
path: root/crypto
Commit message (Expand)AuthorAgeFilesLines
* Fix multiple vulnerabilities of OpenSSL.releng/11.0Xin LI2017-11-292-6/+16
* Fix OpenSSH Denial of Service vulnerability. [SA-17:06]Xin LI2017-08-101-0/+5
* Fix heimdal KDC-REP service name validation vulnerability [SA-17:05]Xin LI2017-07-121-2/+2
* Fix multiple vulnerabilities of OpenSSL. [SA-17:02]Xin LI2017-02-23100-632/+834
* Fix multiple vulnerabilities of OpenSSH.Xin LI2017-01-113-9/+49
* Fix Fix OpenSSH remote Denial of Service vulnerability.Xin LI2016-11-021-0/+1
* Merge r306343 by jkim:Gleb Smirnoff2016-09-268-8/+26
* MFS: r306195Jung-uk Kim2016-09-22222-1343/+3932
* MFH (r303832): check whether each key file exists before adding itDag-Erling Smørgrav2016-08-111-10/+15
* MFH (r303716, r303719): drop SSH1 support, disable DSA by defaultDag-Erling Smørgrav2016-08-057-40/+19
* Revert r301551, which added blacklistd(8) to sshd(8).Glen Barber2016-06-248-145/+0
* Add blacklist support to sshdKurt Lidl2016-06-078-0/+145
* openssl: change SHLIB_VERSION_NUMBER to reflect the realityAndriy Gapon2016-06-031-1/+1
* libkrb5: Fix potential double-freeConrad Meyer2016-05-111-0/+1
* Merge OpenSSL 1.0.2h.Jung-uk Kim2016-05-0367-263/+1117
|\
| * Import OpenSSL 1.0.2h.vendor/openssl/1.0.2hJung-uk Kim2016-05-0338-122/+334
* | Re-add AES-CBC ciphers to the default cipher list on the server.Dag-Erling Smørgrav2016-03-113-4/+12
* | Upgrade to OpenSSH 7.2p2.Dag-Erling Smørgrav2016-03-11140-3290/+5764
|\ \
* \ \ Merge OpenSSL 1.0.2g.Jung-uk Kim2016-03-0183-1309/+2659
|\ \ \ | | |/ | |/|
| * | Import OpenSSL 1.0.2g.vendor/openssl/1.0.2gJung-uk Kim2016-03-0140-1041/+1736
* | | Document our modified default value for PermitRootLogin.Dag-Erling Smørgrav2016-02-022-2/+2
* | | Merge OpenSSL 1.0.2f.Jung-uk Kim2016-01-28136-443/+844
|\| |
| * | Import OpenSSL 1.0.2f.vendor/openssl/1.0.2fJung-uk Kim2016-01-2896-153/+370
* | | Switch UseDNS back onDag-Erling Smørgrav2016-01-274-4/+7
* | | r294563 was incomplete; re-add the client-side options as well.Dag-Erling Smørgrav2016-01-221-0/+2
* | | Instead of removing the NoneEnabled option, mark it as unsupported.Dag-Erling Smørgrav2016-01-221-0/+1
* | | Update the instructions and the list of major local modifications.Dag-Erling Smørgrav2016-01-211-17/+47
* | | Explain why we don't include VersionAddendum in the debug mode banner.Dag-Erling Smørgrav2016-01-211-0/+1
* | | Upgrade to OpenSSH 7.1p2.Dag-Erling Smørgrav2016-01-2128-1806/+301
|\ \ \ | | |/ | |/|
* | | Enable DSA keys by default. They were disabled in OpenSSH 6.9p1.Dag-Erling Smørgrav2016-01-213-13/+28
* | | Take care not to pick up the wrong version of OpenSSL when running in anDag-Erling Smørgrav2016-01-211-0/+6
* | | Remove RCS tags from files in which we no longer have any localDag-Erling Smørgrav2016-01-2014-12/+2
* | | Remove a number of generated files which are either out-of-date (becauseDag-Erling Smørgrav2016-01-2016-27242/+0
* | | Upgrade to OpenSSH 7.0p1.Dag-Erling Smørgrav2016-01-20158-1643/+2307
|\| |
* | | Upgrade to OpenSSH 6.9p1.Dag-Erling Smørgrav2016-01-19115-2304/+3871
|\| |
* | | Re-add HPN configuration options as deprecated options to avoid breakingDag-Erling Smørgrav2016-01-192-0/+7
* | | Upgrade to OpenSSH 6.8p1.Dag-Erling Smørgrav2016-01-19330-13989/+30005
|\| |
* | | Now that we have local modifications in configure.ac and configure, runDag-Erling Smørgrav2016-01-194-129/+155
* | | Upgrade to OpenSSH 6.7p1, retaining libwrap support (which has been removedDag-Erling Smørgrav2016-01-19286-6954/+17421
|\| |
* | | As previously threatened, remove the HPN patch from OpenSSH.Dag-Erling Smørgrav2016-01-1928-534/+154
* | | Use 'svn list -R' instead of find, and recognize comments in shell scriptsDag-Erling Smørgrav2016-01-191-2/+2
* | | Recognize *roff comments.Dag-Erling Smørgrav2016-01-191-1/+1
* | | Update the pre- and post-merge scripts to work correctly after the recentDag-Erling Smørgrav2016-01-192-15/+13
* | | Fix OpenSSH client information leak.Gleb Smirnoff2016-01-141-3/+2
* | | Incorrect length in calloc() call, already fixed upstream.Dag-Erling Smørgrav2015-12-171-1/+1
* | | Merge OpenSSL 1.0.2e.Jung-uk Kim2015-12-03204-2371/+2564
|\ \ \ | | |/ | |/|
| * | Import OpenSSL 1.0.2e.vendor/openssl/1.0.2eJung-uk Kim2015-12-03118-610/+1097
* | | r291198 inadvertantly reverted a local patch for the default locationDag-Erling Smørgrav2015-11-261-2/+3
* | | Revert inadvertent commit of an incorrect patchDag-Erling Smørgrav2015-11-241-2/+1
* | | Remove description of the now-defunct NoneEnabled option.Dag-Erling Smørgrav2015-11-242-4/+2