summaryrefslogtreecommitdiff
path: root/krl.c
Commit message (Collapse)AuthorAgeFilesLines
* - djm@cvs.openbsd.org 2013/07/20 22:20:42Damien Miller2013-07-251-2/+2
| | | | | [krl.c] fix verification error in (as-yet usused) KRL signature checking path
* - markus@cvs.openbsd.org 2013/06/20 19:15:06Damien Miller2013-07-181-8/+11
| | | | | [krl.c] don't leak the rdata blob on errors; ok djm@
* - djm@cvs.openbsd.org 2013/04/05 00:14:00Damien Miller2013-04-231-6/+11
| | | | | [auth2-gss.c krl.c sshconnect2.c] hush some {unused, printf type} warnings
* - dtucker@cvs.openbsd.org 2013/02/19 02:12:47Darren Tucker2013-04-051-1/+1
| | | | | | [krl.c] Remove bogus include. ok djm (id sync only)
* - (tim) [krl.c Makefile.in regress/Makefile regress/modpipe.c] remove unneededTim Rice2013-02-191-1/+0
| | | | err.h include from krl.c. Additional portability fixes for modpipe. OK djm
* - djm@cvs.openbsd.org 2013/01/27 10:06:12Damien Miller2013-02-121-2/+2
| | | | | [krl.c] actually use the xrealloc() return value; spotted by xi.wang AT gmail.com
* - djm@cvs.openbsd.org 2013/01/25 10:22:19Damien Miller2013-02-121-3/+6
| | | | | | | [krl.c] redo last commit without the vi-vomit that snuck in: skip serial lookup when cert's serial number is zero (now with 100% better comment)
* - krw@cvs.openbsd.org 2013/01/25 05:00:27Damien Miller2013-02-121-2/+2
| | | | | | [krl.c] Revert last. Breaks due to likely typo. Let djm@ fix later. ok djm@ via dlg@
* - djm@cvs.openbsd.org 2013/01/24 22:08:56Damien Miller2013-02-121-2/+2
| | | | | [krl.c] skip serial lookup when cert's serial number is zero
* - (djm) OpenBSD CVS SyncDamien Miller2013-02-121-2/+2
| | | | | | - djm@cvs.openbsd.org 2013/01/24 21:45:37 [krl.c] fix handling of (unused) KRL signatures; skip string in correct buffer
* - (djm) [openbsd-compat/sys-tree.h] Sync with OpenBSD. krl.c needs newerDamien Miller2013-01-201-2/+2
| | | | version.
* - markus@cvs.openbsd.org 2013/01/19 12:34:55Damien Miller2013-01-201-2/+2
| | | | | [krl.c] RB_INSERT does not remove existing elments; ok djm@
* - djm@cvs.openbsd.org 2013/01/18 03:00:32Damien Miller2013-01-181-2/+2
| | | | | [krl.c] fix KRL generation bug for list sections
* - djm@cvs.openbsd.org 2013/01/17 23:00:01Damien Miller2013-01-181-0/+1227
[auth.c key.c key.h ssh-keygen.1 ssh-keygen.c sshd_config.5] [krl.c krl.h PROTOCOL.krl] add support for Key Revocation Lists (KRLs). These are a compact way to represent lists of revoked keys and certificates, taking as little as a single bit of incremental cost to revoke a certificate by serial number. KRLs are loaded via the existing RevokedKeys sshd_config option. feedback and ok markus@