Commit Graph

355 Commits

Author SHA1 Message Date
Damien Miller 02491e9632 - OpenBSD CVS change
[sshd.c]
    - disallow guessing of root password
2000-03-11 11:58:28 +11:00
Damien Miller eedc0ca23e doh 2000-03-11 11:42:13 +11:00
Damien Miller 2dafb8afe3 Prepare for 1.2.3pre release 2000-03-11 11:38:35 +11:00
Damien Miller b85dcad762 - Detect RSAref 2000-03-11 11:37:00 +11:00
Damien Miller 8f975b6a18 - Removed warning workaround for Linux and devpts filesystems (no longer
required after OpenBSD updates)
2000-03-09 22:31:13 +11:00
Damien Miller 98c7ad60ec - OpenBSD CVS updates to v1.2.3
[ssh.h atomicio.c]
	 - int atomicio -> ssize_t (for alpha). ok deraadt@
	[auth-rsa.c]
	 - delay MD5 computation until client sends response, free() early, cleanup.
	[cipher.c]
	 - void* -> unsigned char*, ok niels@
	[hostfile.c]
	 - remove unused variable 'len'. fix comments.
	 - remove unused variable
	[log-client.c log-server.c]
	 - rename a cpp symbol, to avoid param.h collision
	[packet.c]
	 - missing xfree()
	 - getsockname() requires initialized tolen; andy@guildsoftware.com
	 - use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
	from Holger.Trapp@Informatik.TU-Chemnitz.DE
	[pty.c pty.h]
	 - register cleanup for pty earlier. move code for pty-owner handling to
   	pty.c ok provos@, dugsong@
	[readconf.c]
	 - turn off x11-fwd for the client, too.
	[rsa.c]
	 - PKCS#1 padding
	[scp.c]
	 - allow '.' in usernames; from jedgar@fxp.org
	[servconf.c]
	 - typo: ignore_user_known_hosts int->flag; naddy@mips.rhein-neckar.de
	 - sync with sshd_config
	[ssh-keygen.c]
	 - enable ssh-keygen -l -f ~/.ssh/known_hosts, ok deraadt@
	[ssh.1]
	 - Change invalid 'CHAT' loglevel to 'VERBOSE'
	[ssh.c]
	 - suppress AAAA query host when '-4' is used; from shin@nd.net.fujitsu.co.jp
	 - turn off x11-fwd for the client, too.
	[sshconnect.c]
	 - missing xfree()
	 - retry rresvport_af(), too. from sumikawa@ebina.hitachi.co.jp.
	 - read error vs. "Connection closed by remote host"
	[sshd.8]
	 - ie. -> i.e.,
	 - do not link to a commercial page..
	 - sync with sshd_config
	[sshd.c]
	 - no need for poll.h; from bright@wintelcom.net
	 - log with level log() not fatal() if peer behaves badly.
	 - don't panic if client behaves strange. ok deraadt@
	 - make no-port-forwarding for RSA keys deny both -L and -R style fwding
	 - delay close() of pty until the pty has been chowned back to root
	 - oops, fix comment, too.
	 - missing xfree()
	 - move XAUTHORITY to subdir. ok dugsong@. fixes debian bug #57907, too.
   	(http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907)
	 - register cleanup for pty earlier. move code for pty-owner handling to
      pty.c ok provos@, dugsong@
	 - create x11 cookie file
	 - fix pr 1113, fclose() -> pclose(), todo: remote popen()
	 - version 1.2.3
 - Cleaned up
2000-03-09 21:27:49 +11:00
Damien Miller 1a07ebd4d8 - Configure fix from Hiroshi Takekawa <takekawa@sr3.t.u-tokyo.ac.jp> 2000-03-08 09:03:44 +11:00
Damien Miller 5a88b6e70b add warning 2000-03-07 22:40:57 +11:00
Damien Miller 668b78c385 Update version 2000-03-07 09:37:07 +11:00
Damien Miller cf87b5b71b Avoid compiler warnings 2000-03-05 17:14:38 +11:00
Damien Miller 65165f8d83 - Check for libwrap if --with-tcp-wrappers option specified. Suggestion
Mate Wierdl <mw@moni.msci.memphis.edu>
2000-03-05 17:02:45 +11:00
Damien Miller 9fb07e4b8b - Check for getpagesize in libucb.a if not found in libc. Fix for old
Solaris from Andre Lucas <andre.lucas@dial.pipex.com>
2000-03-05 16:22:59 +11:00
Damien Miller fac99cd12a - Explicitly seed OpenSSL's PRNG before checking rsa_alive() 2000-03-05 16:10:45 +11:00
Damien Miller 01bedb83b1 - Fix DEC compile fix 2000-03-05 16:10:03 +11:00
Damien Miller 00d4bb117a - DEC Unix compile fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
- Manpage fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
2000-03-03 22:48:49 +11:00
Damien Miller 3c7eeb2af5 - Don't permanently fail on bind() if getaddrinfo has more choices left for
us. Needed to work around messy IPv6 on Linux. Patch from Arkadiusz
   Miskiewicz <misiek@pld.org.pl>
2000-03-03 22:35:33 +11:00
Damien Miller 4095f894dc - Added "make host-key" target, Suggestion from Dominik Brettnacher
<domi@saargate.de>
2000-03-03 22:13:52 +11:00
Damien Miller 2453d01611 - Allow root access to any key. Patch from
markus.friedl@informatik.uni-erlangen.de
2000-03-02 23:57:18 +11:00
Damien Miller 204ad074e5 - Warning was valid - possible race condition on PTYs. Avoided using
platform-specific code.
 - Document some common problems
2000-03-02 23:56:12 +11:00
Damien Miller c4cea3e5c7 - Avoid warning message with Unix98 ptys 2000-03-02 23:31:50 +11:00
Damien Miller c7d8dbbb0d - Applied pty cleanup patch from markus.friedl@informatik.uni-erlangen.de 2000-03-02 23:30:53 +11:00
Damien Miller a22ba0152c - Big cleanup of autoconf code
- Rearranged to be a little more logical
   - Added -R option for Solaris
   - Rewrote OpenSSL detection code. Now uses AC_TRY_RUN with a test program
     to detect library and header location _and_ ensure library has proper
     RSA support built in (this is a problem with OpenSSL 0.9.5).
2000-03-02 23:09:20 +11:00
Damien Miller 36143d7851 - Removed SOCKS code. Will support through a ProxyCommand. 2000-02-07 13:20:26 +11:00
Damien Miller 8b171bc4cd Import of spilt-off random collection code 2000-02-03 14:04:50 +11:00
Damien Miller dd777a441f Add apology 2000-02-03 14:00:17 +11:00
Damien Miller 0c0e4bfe3c - Add --with-ssl-dir option 2000-02-03 13:58:51 +11:00
Damien Miller 1852246d30 - Fixed SEGVs in authloop, fix from vbzoli@hbrt.hu 2000-02-03 01:07:07 +11:00
Damien Miller 1787252789 - Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
- Added URLs to Japanese translations of documents by HARUYAMA Seigo
   <haruyama@nt.phys.s.u-tokyo.ac.jp>
2000-02-02 20:56:20 +11:00
Damien Miller 6552758bae - Fix lastlog code for directory based lastlogs. Fix from Josh Durham
<jmd@aoe.vt.edu>
2000-02-02 19:17:40 +11:00
Damien Miller 9e53f35a6a - Use socket pairs by default (instead of pipes). Prevents race condition
on several (buggy) OSs. Report and fix from tridge@linuxcare.com
2000-02-01 23:05:30 +11:00
Damien Miller 6034fdfd1f - Compile fix from Andre Lucas <andre.lucas@dial.pipex.com> 2000-01-29 20:55:09 +11:00
Damien Miller f07390e90d - Seed OpenSSL's random number generator before generating RSA keypairs
- Split random collector into seperate file
2000-01-29 20:40:22 +11:00
Damien Miller 4e61b79d5b fix comment 2000-01-29 20:13:40 +11:00
Damien Miller c85f9b4851 - Added note in UPGRADING re interop with commercial SSH using idea.
Report from Jim Knoble <jmknoble@pobox.com>
 - Fix linking order for Kerberos/AFS. Fix from Holget Trapp
   <Holger.Trapp@Informatik.TU-Chemnitz.DE>
2000-01-29 10:20:21 +11:00
Damien Miller 27f4c78698 - NeXT keeps it lastlog in /usr/adm. Report from
mouring@newton.pconline.com
2000-01-27 18:22:13 +11:00
Damien Miller 3aa0fa4c7a ssh should be setuid 2000-01-27 14:15:48 +11:00
Damien Miller 3e955e78fa Add const to suppress compiler warning 2000-01-27 10:55:38 +11:00
Damien Miller 7d7c60d6e7 - Added 'DESTDIR' option to Makefile to ease package building. Patch from
Jim Knoble <jmknoble@pobox.com>
 - Updated RPM spec files to use DESTDIR
2000-01-26 14:37:48 +11:00
Damien Miller 6d84493c8b - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble
<jmknoble@pobox.com>
2000-01-26 12:17:50 +11:00
Damien Miller 0e1cf7caa7 - Use preformatted manpages on SCO, report from Gary E. Miller
<gem@rellim.com>
 - New URL for x11-ssh-askpass.
2000-01-26 12:15:30 +11:00
Damien Miller fa51a83f54 - Reorder PAM initialisation so it does not mess up lastlog. Reported
by Andre Lucas <andre.lucas@dial.pipex.com>
2000-01-26 11:07:22 +11:00
Damien Miller d89c24b57e - Fix NULL pointer dereference in login.c. Fix from Andre Lucas
<andre.lucas@dial.pipex.com>
2000-01-26 11:04:48 +11:00
Damien Miller 68cee109e8 - Pick up version 1.2.2 from OpenBSD CVS (no changes, just version number
increment)
2000-01-24 17:02:27 +11:00
Damien Miller def0dc9bcc - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com> 2000-01-23 20:18:35 +11:00
Damien Miller 641a63f7a3 Prepare for 1.2.2 2000-01-23 11:04:25 +11:00
Damien Miller 1fa154bb1e - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin
<drankin@bohemians.lexington.ky.us>
2000-01-23 10:32:03 +11:00
Damien Miller 6fe375dee4 - OpenBSD CVS:
- [packet.c]
     getsockname() requires initialized tolen; andy@guildsoftware.com
2000-01-23 09:38:00 +11:00
Damien Miller 1453785bb4 - OpenBSD CVS updates:
- [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
     ie. -> i.e.,
2000-01-22 19:57:40 +11:00
Damien Miller f052aaf9f6 - OpenBSD CVS updates:
- [packet.c]
     use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
     from Holger.Trapp@Informatik.TU-Chemnitz.DE
   - [sshd.c]
     log with level log() not fatal() if peer behaves badly.
   - [readpass.c]
     instead of blocking SIGINT, catch it ourselves, so that we can clean
     the tty modes up and kill ourselves -- instead of our process group
     leader (scp, cvs, ...) going away and leaving us in noecho mode.
     people with cbreak shells never even noticed..
2000-01-22 19:47:21 +11:00
Damien Miller 8dbbe6e546 - Missing htons() in bsd-bindresvport.c, fix from Holger Trapp
<Holger.Trapp@Informatik.TU-Chemnitz.DE>
2000-01-22 18:17:42 +11:00