Commits · c4861340e93280dce97bbfa3b421c7819bc7864e · Matt Johnston / dropbear

Mar 20, 2013
- Fix "-c none" so that it allows aes during authentication · 845ad0be
  Matt Johnston authored 12 years ago
```
Default for options.h shouldn't allow "none"
```
  845ad0be
Feb 23, 2013
- DSS_PROTOK is not necessary now that private keys are included · d7f21536
  Matt Johnston authored 12 years ago
```
in the random generation input
```
  d7f21536
Feb 12, 2013

Allow configuring "allow blank password option" at runtime · 1205fa68

Paul Eggleton authored 12 years ago


Changes this from a compile-time switch to a command-line option.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>

1205fa68

Jun 29, 2012

Improve RNG seeding. · d5ccc32b

Matt Johnston authored 13 years ago

Try to read from /dev/urandom multiple times, take input from extra sources,
and use /dev/random when generating private keys

d5ccc32b

May 17, 2012
- - Only request "none" cipher after auth has succeeded · e719a9ef
  Matt Johnston authored 13 years ago
```
--HG--
branch : insecure-nocrypto
```
  e719a9ef
- Add ALLOW_NONE_PASSWORD_AUTH option · a02d3807
  Matt Johnston authored 13 years ago
```
--HG--
branch : insecure-nocrypto
```
  a02d3807
- ENABLE_USER_ALGO_LIST should work for the client · db34044c
  Matt Johnston authored 13 years ago
  
  db34044c
- Add rough support for choosing ciphers/hashes with "-c" or "-m" · 036edd62
  Matt Johnston authored 13 years ago
  
  036edd62
May 16, 2012
- Disable SHA256 and SHA512 by default in options.h · 41f50057
  Matt Johnston authored 13 years ago
```
--HG--
branch : sha2
```
  41f50057
May 10, 2012
- - Add hmac-sha2-256 and hmac-sha2-512. Needs debugging, seems to be · c62e5380
  Matt Johnston authored 13 years ago
```
  getting keyed incorrectly

--HG--
branch : sha2
```
  c62e5380
May 09, 2012
- Fix empty password immediate login · 6b4105ff
  Matt Johnston authored 13 years ago
  
  6b4105ff
Apr 12, 2012
- Improve comment about sha1-96 · 3e2b6a18
  Matt Johnston authored 13 years ago
  
  3e2b6a18
Oct 26, 2011

- Add ALLOW_BLANK_PASSWORD option · 29e68e9d

Matt Johnston authored 13 years ago

- Don't reject blank-password logins via public key

--HG--
extra : convert_revision : 2d4bb3ecb013a7be47a7b470fc6b23e653a43dfb

29e68e9d

Feb 28, 2011

- Don't allow setting memLevel since that doesn't work properly · d634b502

Matt Johnston authored 14 years ago

- Better handling of the case where compressing makes the data
larger (possibly only happens when memLevel is adjusted, but better
to be safe)

--HG--
extra : convert_revision : b31879a384d3bf8cbcbe2ed731d7d79d49799b1d

d634b502

Compile fix for when both client and server agent forwarding is disabled · 53fc7eaf
Matt Johnston authored 14 years ago
```
--HG--
extra : convert_revision : 8a608f0ed5e4b491dba4bf330e560636ec7376fd
```
53fc7eaf

Feb 24, 2011

It happened to sony · 5a7a88b8

Matt Johnston authored 14 years ago

--HG--
extra : convert_revision : c2d5690ca9ed85c7d75dd9cc2c150de50503aa3b

5a7a88b8

Sep 08, 2009

- Test for pam_fail_delay() function in configure · 52551cb7

Matt Johnston authored 15 years ago

- Recognise "username:" as a PAM prompt
- Add some randomness to the auth-failure delay
- Fix wrongly committed options.h/debug.h

--HG--
extra : convert_revision : f242f0e66fb0ea5d3b374995d2f548d37dd8f3a3

52551cb7

Sep 02, 2009
- Rearrange getaddrstring() etc · f88bed7a
  Matt Johnston authored 15 years ago
```
--HG--
extra : convert_revision : 8a18c4a60aeaec085923d13d98fa0f93c506ceba
```
  f88bed7a
Aug 26, 2009
- - set $SSH_ORIGINAL_COMMAND if a command is forced, and log it · 4b1f9e50
  Matt Johnston authored 15 years ago
```
if LOG_COMMANDS is set

--HG--
extra : convert_revision : d9e8aa0ecbe7607285fa4f96f0d6f9b1523719d8
```
  4b1f9e50
Jul 29, 2009
- Use /usr/bin/X11/xauth default path instead · 103a829e
  Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : ff0abce7b29e61630e3b09e5fc5820ae6e192808
```
  103a829e
Jul 26, 2009
- - Add option to change zlib windowBits/memLevel · 36087753
  Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : 5fc51ba0b8f165426c78f8d32162e5ccb51e524f
```
  36087753
Jul 24, 2009
- Disable Blowfish by default, it has inefficient key memory use · 8181d41b
  Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : a37b8ae5fb524be221dbdfd71b4f35eb6a48565c
```
  8181d41b
Mar 03, 2009
- - Turn DROPBEAR_SMALL_CODE off by default · b639e18d
  Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : ef3b41f37e9f4dd45358bc40f9559ee23f71c284
```
  b639e18d
Nov 11, 2008
- PAM shouldn't be on by default · 5a2dde81
  Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : 44714b1a34bf7833e6f2e4fd1c81ceaacccb15bd
```
  5a2dde81
Nov 07, 2008
- Idle timeout patch from Farrell Aultman. Needs testing, unsure if server · adc4d019
  Matt Johnston authored 16 years ago
```
code works

--HG--
extra : convert_revision : ff66e05ae040561110af70114bf83f11ed528f05
```
  adc4d019
Nov 06, 2008

Update nocrypto branch to current head · 19124395

Matt Johnston authored 16 years ago

--HG--
branch : insecure-nocrypto
extra : convert_revision : 9e5e6e33be005d27cd5b3270c574edc45b5c2893

19124395

Nov 05, 2008

- Update manuals, include section on authorized_keys · e80f8e8c

Matt Johnston authored 16 years ago

- Change default PATH to /usr/bin:/bin
- Mention DEBUG_TRACE in -v help text

--HG--
extra : convert_revision : cdcc3c729e29544e8b98a408e2dc60e4483dfd2a

e80f8e8c

- Set a default path, since bash won't export one otherwise (though it will set · 51dcfc06

Matt Johnston authored 16 years ago

  one, leading to mysterious problems)
- Rearrange some options

--HG--
extra : convert_revision : 6e81becf6e96479e10d9244186a900fab7079bf8

51dcfc06

Sep 29, 2008
- - Get rid of blowfish and twofish CTR since they weren't likely · c2bd7913
  Matt Johnston authored 16 years ago
```
to be that useful

--HG--
extra : convert_revision : e16bd265bb6e8093b3488993dffc86662a2a7a62
```
  c2bd7913
- - Add Counter Mode support · 511f6555
  Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : 5225162bdf32d70b58b6d3ae375a290326c59f3a
```
  511f6555
Sep 24, 2008
- Split options.h out into sysoptions.h for options that aren't usually · 90f8c1fd
  Matt Johnston authored 16 years ago
```
user-changed

--HG--
extra : convert_revision : 4fb35083f0f46ea667e7043e7d4314aecd3df46c
```
  90f8c1fd
Sep 18, 2008
- Add multihop 'onion-forwarding' mode. Needs refinement, works. · f4aacaa7
  Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : 877947ce24297781438a75e7e9c64ba86f0dce93
```
  f4aacaa7
Sep 17, 2008
- Rework netcat-alike to be a proper mode, with -B argument. · af00c78e
  Matt Johnston authored 16 years ago
```
--HG--
branch : dbclient-netcat-alike
extra : convert_revision : b02ba6628cf2095017c60d202ac630f231e6b553
```
  af00c78e
Sep 15, 2008
- - "-J 'nc localhost 22'" kind of works, needs fixing hostkeys, ptys etc. · e44aa503
  Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : 45069dd007ebf414330e0a7abf4fb7e0727049c3
```
  e44aa503
- - Split main socket var into ses.sock_in/ses.sock_out in preparation · b619e88f
  Matt Johnston authored 16 years ago
```
  for -J proxy_cmd option (and some prelim options for that)

--HG--
extra : convert_revision : 47cdea9a7d66c553c6f5eec43b899821939d4e4c
```
  b619e88f
Sep 08, 2008
- * Patch from Frédéric Moulins adding options to authorized_keys. · c0ce2a6a
  Matt Johnston authored 16 years ago
```
  Needs review.

--HG--
branch : pubkey-options
extra : convert_revision : 26872f944d79ddacff1070aab32115a6d726392c
```
  c0ce2a6a
Mar 27, 2008
- Forgot to bump actual version number · 96bda2af
  Matt Johnston authored 17 years ago
```
--HG--
extra : convert_revision : 2f31bc0e5d1c701ad8c03176bbb5722852c0c11d
```
  DROPBEAR_0.51
  
  96bda2af
Aug 08, 2007

Prepare for 0.50 release · 790cdada
Matt Johnston authored 17 years ago
```
--HG--
extra : convert_revision : 72385623360b49c08f42496eb163fc702c8a0b3e
```
790cdada

- Add -K keepalive flag for dropbear and dbclient · 75ec4d65

Matt Johnston authored 17 years ago

- Try to reduce the frequency of select() timeouts
- Add a max receive window size of 1MB

--HG--
extra : convert_revision : 9aa22036cb511cddb35fbc0e09ad05acb39b64d1

75ec4d65

Jul 25, 2007
- Add -W <windowsize> argument and document it. · e3e4445d
  Matt Johnston authored 18 years ago
```
--HG--
extra : convert_revision : 98d4c0f15480bf749c451034cbc565d7e9d3b8dc
```
  e3e4445d

Admin message