tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,315 Commits 6 Branches 20 Tags 97 MiB
Commit Graph

2914 Commits

Author SHA1 Message Date
Darren Tucker acb98497fb - (dtucker) [configure.ac] Back out change for bug #620. 2003-07-23 14:33:10 +10:00
Darren Tucker cca1bdb8a8 - djm@cvs.openbsd.org 2003/07/19 00:46:31 
[regress/sftp-cmds.sh]
     regress test for sftp arguments with escaped quotes; ok markus
 2003-07-19 20:11:54 +10:00
Darren Tucker 554d5b544a - djm@cvs.openbsd.org 2003/07/19 00:45:53 
[sftp-int.c]
     fix sftp filename parsing for arguments with escaped quotes. bz #517;
     ok markus
 2003-07-19 20:09:21 +10:00
Darren Tucker 03a29baf35 - deraadt@cvs.openbsd.org 2003/07/18 01:54:25 
[scp.c]
     userid is unsigned, but well, force it anyways; andrushock@korovino.net
 2003-07-19 20:07:45 +10:00
Darren Tucker 538d180395 - markus@cvs.openbsd.org 2003/07/16 10:36:28 
[sshtty.c]
     clear IUCLC in enter_raw_mode; from rob@pitman.co.za; ok deraadt@, fgs@
 2003-07-19 19:56:18 +10:00
Darren Tucker e98dfa323e - markus@cvs.openbsd.org 2003/07/16 10:34:53 
[ssh.c sshd.c]
     don't exit on multiple -v or -d; ok deraadt@
 2003-07-19 19:54:31 +10:00
Darren Tucker fe0078ae49 - markus@cvs.openbsd.org 2003/07/14 12:36:37 
[sshd.c]
     remove undocumented -V option. would be only useful if openssh is used
     as ssh v1 server for ssh.com's ssh v2.
 2003-07-19 19:52:28 +10:00
Darren Tucker 394b8c8db3 - (dtucker) [configure.ac] Bug #620: Define BROKEN_GETADDRINFO for 
Solaris/x86.  Patch from jrhett at isite.net.
 2003-07-19 19:49:45 +10:00
Darren Tucker 1a721156b0 - markus@cvs.openbsd.org 2003/07/10 20:05:55 
[sftp.c]
     sync usage with manpage, add missing -R
 2003-07-14 17:32:29 +10:00
Darren Tucker 81a0b371f4 - markus@cvs.openbsd.org 2003/07/10 14:42:28 
[packet.c]
     the 2^(blocksize*2) rekeying limit is too expensive for 3DES,
     blowfish, etc, so enforce a 1GB limit for small blocksizes.
 2003-07-14 17:31:06 +10:00
Darren Tucker 29588616c2 - avsm@cvs.openbsd.org 2003/07/09 13:58:19 
[key.c]
     minor tweak: when generating the hex fingerprint, give strlcat the full
     bound to the buffer, and add a comment below explaining why the
     zero-termination is one less than the bound.  markus@ ok
 2003-07-14 17:28:34 +10:00
Darren Tucker 0abf13bb50 - (dtucker) [port-aix.h] Fix prototypes. 2003-07-14 16:43:42 +10:00
Darren Tucker fc3454ee67 - (dtucker) Bug #543: [configure.ac port-aix.c port-aix.h] 
Call setauthdb() before loginfailed(), which may load password registry-
   specific functions.  Based on patch by cawlfiel@us.ibm.com.
 2003-07-14 16:41:55 +10:00
Darren Tucker 30317e37e4 - (dtucker) [port-aix.h] Work around name collision on AIX for r_type by 
undef'ing it.
 2003-07-14 16:26:51 +10:00
Darren Tucker 5c6a91a39d - (dtucker) [acconfig.h configure.ac port-aix.c] Older AIXes don't declare 
loginfailed at all, so assume 3-arg loginfailed if not declared.
 2003-07-14 16:21:44 +10:00
Darren Tucker b9aa0a0baa - (dtucker) [auth-passwd.c auth.c session.c sshd.c port-aix.c port-aix.h] 
Convert aixloginmsg into platform-independant Buffer loginmsg.
 2003-07-08 22:59:59 +10:00
Darren Tucker 793e817d49 - (dtucker) Check return value of setpcred(). 2003-07-08 21:01:04 +10:00
Darren Tucker a0c0b63112 - (dtucker) [acconfig.h auth-passwd.c configure.ac session.c port-aix.[ch]] 
Include AIX headers for authentication functions and make calls match
   prototypes.  Test for and handle 3-args and 4-arg variants of loginfailed.
 2003-07-08 20:52:12 +10:00
Darren Tucker f1159b5b29 - (dtucker) [configure.ac] Bug #600: Check that getrusage is declared before 
searching libraries for it.  Fixes build errors on NCR MP-RAS.
 2003-07-07 19:44:01 +10:00
Darren Tucker 8661b56903 - (dtucker) [ssh-rand-helper.c loginrec.c] 
Apply atomicio typing change to these too.
 2003-07-06 15:20:46 +10:00
Darren Tucker 0a4f04b5b2 - djm@cvs.openbsd.org 2003/07/03 08:09:06 
[readconf.c readconf.h ssh-keysign.c ssh.c]
     fix AddressFamily option in config file, from brent@graveland.net;
     ok markus@
 2003-07-03 20:37:47 +10:00
Darren Tucker e2f2be7a3a - markus@cvs.openbsd.org 2003/07/03 08:24:13 
[regress/Makefile]
     enable tests for dynamic fwd via socks (-D), uses nc(1)
 2003-07-03 20:27:55 +10:00
Darren Tucker 7a2466291b - markus@cvs.openbsd.org 2003/07/03 08:21:46 
[regress/dynamic-forward.sh]
     add socks5; speedup; reformat; based on patch from dtucker@zip.com.au
 2003-07-03 20:26:04 +10:00
Darren Tucker 3f521e21c0 - markus@cvs.openbsd.org 2003/07/02 20:37:48 
[ssh.c]
     convert hostkeyalias to lowercase, otherwise uppercase aliases will
     not match at all; ok henning@
 2003-07-03 16:20:42 +10:00
Darren Tucker 46471c9a81 - markus@cvs.openbsd.org 2003/07/02 14:51:16 
[channels.c ssh.1 ssh_config.5]
     (re)add socks5 suppport to -D; ok djm@
     now ssh(1) can act both as a socks 4 and socks 5 server and
     dynamically forward ports.
 2003-07-03 13:55:19 +10:00
Darren Tucker 9189ff89c3 - markus@cvs.openbsd.org 2003/07/02 12:56:34 
[channels.c]
     deny dynamic forwarding with -R for v1, too; ok djm@
 2003-07-03 13:52:04 +10:00
Darren Tucker edeb1f7449 - markus@cvs.openbsd.org 2003/06/29 12:44:38 
[sshconnect.c]
     memset 0, not \0; andrushock@korovino.net
 2003-07-03 13:48:04 +10:00
Darren Tucker 9f63f22aa0 - deraadt@cvs.openbsd.org 2003/06/28 16:23:06 
[atomicio.c atomicio.h authfd.c clientloop.c monitor_wrap.c msg.c
     progressmeter.c scp.c sftp-client.c ssh-keyscan.c ssh.h sshconnect.c
     sshd.c]
     deal with typing of write vs read in atomicio
 2003-07-03 13:46:56 +10:00
Darren Tucker e53270481c - djm@cvs.openbsd.org 2003/06/28 07:48:10 
[sshd.c]
     report pidfile creation errors, based on patch from Roumen Petrov; ok markus@
 2003-07-03 13:40:44 +10:00
Damien Miller 200d0a7bf5 - (djm) Search for support functions necessary to build our 
getrrsetbyname() replacement. Patch from Roumen Petrov
 2003-06-30 19:21:36 +10:00
Darren Tucker 6eb9304782 - (dtucker) [configure.ac] Add sanity test after system-dependant compiler 
flag modifications.
 2003-06-29 21:30:41 +10:00
Darren Tucker cc9fd54a36 - (dtucker) Bug #602: move #include of netdb.h to after in.h (fixes compiler 
warnings on Solaris 2.5.1).
 2003-06-29 21:23:37 +10:00
Darren Tucker 3b08df9da7 Same day... 2003-06-29 21:20:04 +10:00
Damien Miller 723569b257 - (djm) Bug #593: Sanity check OpenSC card reader number; patch from 
aj@dungeon.inka.de
 2003-06-28 18:08:16 +10:00
Damien Miller 4a8e284855 - (djm) Bug #591: use PKCS#15 private key label as a comment in case 
of OpenSC. Report and patch from larsch@trustcenter.de
 2003-06-28 18:02:47 +10:00
Darren Tucker a3020db6b4 - (dtucker) [configure.ac] Bug #570: Have ./configure --enable-FEATURE 
actually enable the feature, for those normally disabled.  Patch by
   openssh (at) roumenpetrov.info.
 2003-06-28 12:54:33 +10:00
Darren Tucker b611c12e67 - (dtucker) [regress/dynamic-forward.sh] Import new regression test. 2003-06-28 12:42:09 +10:00
Darren Tucker a99c1b77ab - markus@cvs.openbsd.org 2003/06/26 20:08:33 
[readconf.c]
     do not dump core for 'ssh -o proxycommand host'; ok deraadt@
 2003-06-28 12:40:12 +10:00
Darren Tucker a6612d43cf - miod@cvs.openbsd.org 2003/06/25 22:39:36 
[sftp-server.c]
     Typo police: attribute is better written with an 'r'.
 2003-06-28 12:39:03 +10:00
Darren Tucker 502d384b74 - markus@cvs.openbsd.org 2003/06/24 08:23:46 
[auth2-hostbased.c auth2-pubkey.c auth2.c channels.c key.c key.h
      monitor.c packet.c packet.h serverloop.c sshconnect2.c sshd.c]
     int -> u_int; ok djm@, deraadt@, mouring@
 2003-06-28 12:38:01 +10:00
Darren Tucker 674f71d77e - markus@cvs.openbsd.org 2003/06/23 09:02:44 
[ssh_config.5]
     document EnableSSHKeysign; bugzilla #599; ok deraadt@, jmc@
 2003-06-28 12:33:12 +10:00
Darren Tucker a0472e095d - (dtucker) Have configure refer the user to config.log and 
contrib/findssl.sh for OpenSSL header/library mismatches.
 2003-06-24 20:22:09 +10:00
Darren Tucker 89b249be64 Missed a line cut-and-pasting the ChangeLog 2003-06-22 21:22:04 +10:00
Darren Tucker b8dae8ece0 20030622 
- (dtucker) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2003/06/20 05:48:21
     [sshd_config]
     sync some implemented options; ok markus@
 2003-06-22 20:48:45 +10:00
Darren Tucker 91cf261bd5 20030622 
- (dtucker) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2003/06/20 05:47:58
     [sshd_config.5]
     sync description of protocol 2 cipher proposal; ok markus
 2003-06-22 20:46:53 +10:00
Darren Tucker a251f809a0 - (dtucker) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/06/18 11:28:11
     [ssh-rsa.c]
     backout last change, since it violates pkcs#1
     switch to share/misc/license.template
 2003-06-22 20:45:15 +10:00
Darren Tucker 6cf1a2cfe8 - (dtucker) [openbsd-compat/setproctitle.c] Ensure SPT_TYPE is defined before 
testing its value.

When HAVE_SETPROCTITLE is defined (at least on NetBSD, gcc 2.95.3) the test
"#if SPT_TYPE == SPT_REUSEARGV" is not true (probably because SPT_TYPE or
SPT_REUSEARGV is not defined).  This results in the following build error:

$ gcc [flags] setproctitle.c
setproctitle.c: In function `compat_init_setproctitle':
setproctitle.c:102: `argv_start' undeclared (first use in this function)
 2003-06-22 18:32:10 +10:00
Darren Tucker e0194e52ca - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/06/21 09:14:05
     [reconfigure.sh]
     missing $SUDO; from dtucker@zip.com.au
 - (dtucker) [regress/authorized_keys_root] Remove temp data file from CVS.
 2003-06-22 12:33:27 +10:00
Darren Tucker 50cea67222 - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/06/12 15:43:32
     [Makefile]
     test -HUP; dtucker at zip.com.au
 2003-06-18 22:45:34 +10:00
Darren Tucker 76437600b2 - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/06/12 15:40:01
     [try-ciphers.sh]
     add ctr
 2003-06-18 22:43:13 +10:00
Darren Tucker c43362c89a - (dtucker) OpenBSD CVS Sync (regress/) 
- mouring@cvs.openbsd.org 2003/05/15 04:07:12
     [sftp-cmds.sh]
     Advanced put/get testing for sftp.  OK @djm
 2003-06-18 22:41:41 +10:00
Darren Tucker ee5f83d3ea - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/05/14 22:08:27
     [ssh-com-client.sh ssh-com-keygen.sh ssh-com-sftp.sh ssh-com.sh]
     test against some new commerical versions
 2003-06-18 22:36:48 +10:00
Darren Tucker a4040f5904 - (dtucker) OpenBSD CVS Sync (regress/) 
- djm@cvs.openbsd.org 2003/04/04 09:34:22
     [Makefile sftp-cmds.sh]
     More regression tests, including recent directory rename bug; ok markus@
 2003-06-18 22:35:11 +10:00
Darren Tucker d57a76eec5 - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/04/02 12:21:13
     [Makefile]
     enable rekey test
 2003-06-18 22:32:51 +10:00
Darren Tucker 3a222ac0d0 - (dtucker) [regress/copy.1 regress/copy.2] Remove temp data files from CVS. 2003-06-18 22:21:33 +10:00
Darren Tucker fc8a7ea202 - (dtucker) [reconfigure.sh rekey.sh sftp-badcmds.sh] 
Import new regression tests from OpenBSD
 2003-06-18 22:18:57 +10:00
Damien Miller 0275b52387 - markus@cvs.openbsd.org 2003/06/17 18:14:23 
[cipher-ctr.c]
     use license from /usr/share/misc/license.template for new code
 2003-06-18 20:29:35 +10:00
Damien Miller 80163e1b72 - markus@cvs.openbsd.org 2003/06/16 10:22:45 
[ssh-add.c]
     print out key comment on each prompt; make ssh-askpass more useable; ok djm@
 2003-06-18 20:29:18 +10:00
Damien Miller 8c1d2e3926 - markus@cvs.openbsd.org 2003/06/16 08:22:35 
[ssh-rsa.c]
     make sure the signature has at least the expected length (don't
     insist on len == hlen + oidlen, since this breaks some smartcards)
     bugzilla #592; ok djm@
 2003-06-18 20:29:01 +10:00
Damien Miller 56a0bb07c4 - markus@cvs.openbsd.org 2003/06/12 19:12:03 
[scard.c scard.h ssh-agent.c ssh.c]
     add sc_get_key_label; larsch at trustcenter.de; bugzilla#591
 2003-06-18 20:28:40 +10:00
Damien Miller b2cdcb50a2 - nino@cvs.openbsd.org 2003/06/12 15:34:09 
[scp.c]
     Typo. Ok markus@.
 2003-06-18 20:26:34 +10:00
Damien Miller 116aabbb66 - djm@cvs.openbsd.org 2003/06/12 12:22:47 
[LICENCE]
     mention more copyright holders; ok markus@
 2003-06-18 20:26:13 +10:00
Damien Miller 469954debd - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/06/12 07:57:38
     [monitor.c sshlogin.c sshpty.c]
     typos; dtucker at zip.com.au
 2003-06-18 20:25:33 +10:00
Damien Miller 53950b68bf - (djm) Update license on fake-rfc2553.[ch]; ok itojun@ 2003-06-14 08:43:22 +10:00
Damien Miller af63951c57 - (djm) Put licenses on substantial header files 2003-06-11 22:51:32 +10:00
Damien Miller 141efa7036 - (djm) Mention portable copyright holders in LICENSE 2003-06-11 22:50:56 +10:00
Damien Miller 4bfeb14742 - (djm) Sync LICENSE against OpenBSD 2003-06-11 22:08:36 +10:00
Damien Miller d94f20d28e - djm@cvs.openbsd.org 2003/06/11 11:18:38 
[authfd.c authfd.h ssh-add.c ssh-agent.c]
     make agent constraints (lifetime, confirm) work with smartcard keys;
     ok markus@
 2003-06-11 22:06:33 +10:00
Damien Miller 0e1b937f13 - jakob@cvs.openbsd.org 2003/06/11 10:18:47 
[dns.c]
     sync with check_host_key() change
 2003-06-11 22:05:45 +10:00
Damien Miller 7392ae6270 - jakob@cvs.openbsd.org 2003/06/11 10:16:16 
[sshconnect.c]
     clean up check_host_key() and improve SSHFP feedback. ok markus@
 2003-06-11 22:05:25 +10:00
Damien Miller 2b92d32e19 - deraadt@cvs.openbsd.org 2003/06/10 22:20:52 
[packet.c progressmeter.c]
     mostly ansi cleanup; pval ok
 2003-06-11 22:05:06 +10:00
Damien Miller f1ce505daf - jmc@cvs.openbsd.org 2003/06/10 09:12:11 
[scp.1 sftp-server.8 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5]
     [sshd.8 sshd_config.5 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
     - section reorder
     - COMPATIBILITY merge
     - macro cleanup
     - kill whitespace at EOL
     - new sentence, new line
     ssh pages ok markus@
 2003-06-11 22:04:39 +10:00
Damien Miller 78f2e5ca98 - (djm) Re-merge OpenSC info into README.smartcard 2003-06-10 21:09:09 +10:00
Damien Miller c18c06e131 - (djm) Sync README.smartcard with OpenBSD -current 2003-06-10 18:55:22 +10:00
Darren Tucker 400b8786d6 - (dtucker) [uidswap.c] Fix setreuid and add missing args to fatal(). ok djm@ 2003-06-06 10:46:04 +10:00
Darren Tucker 881753bef2 - (dtucker) Define EAI_NONAME in fake-rfc2553.h (used by fake-rfc2553.c). 2003-06-05 22:20:11 +10:00
Darren Tucker 4aff13f1e7 - (dtucker) Add includes.h to fake-rfc2553.c so it will build. 2003-06-05 19:37:30 +10:00
Damien Miller 76b5c8a83a - (djm) Bug #589 - scard-opensc: load only keys with a private keys 
Patch from larsch@trustcenter.de
 2003-06-05 19:19:35 +10:00
Damien Miller f49078dfdf - (djm) Bug #588 - Add scard-opensc.o back to Makefile.in 
Patch from larsch@trustcenter.de
 2003-06-05 18:53:42 +10:00
Damien Miller c28e38d23a - (djm) Merge all the openbsd/fake-* into fake-rfc2553.[ch] 2003-06-05 18:52:47 +10:00
Damien Miller b95bb7f9b1 - (djm) Don't use xmalloc() or pull in toplevel headers in fake-* code 2003-06-05 10:04:12 +10:00
Damien Miller 5fe46a45c8 - (djm) Implement paranoid priv dropping checks, based on: 
"SetUID demystified" - Hao Chen, David Wagner and Drew Dean
   Proceedings of USENIX Security Symposium 2002
 2003-06-05 09:53:31 +10:00
Damien Miller 10eac0cf8f - (djm) Support AI_NUMERICHOST in fake-getaddrinfo.c. Needed for recent 
canohost.c changes.
 2003-06-05 09:48:32 +10:00
Damien Miller 0cbb9dea05 - (djm) Always use mysignal() for SIGALRM 2003-06-04 22:56:15 +10:00
Damien Miller cc685c1cbe - djm@cvs.openbsd.org 2003/06/04 12:41:22 
[sftp.c]
     kill ssh process on receipt of signal; ok markus@
 2003-06-04 22:51:38 +10:00
Damien Miller b69aaa8db7 - djm@cvs.openbsd.org 2003/06/04 12:40:39 
[scp.c]
     kill ssh process upon receipt of signal, bz #241.
     based on patch from esb AT hawaii.edu; ok markus@
 2003-06-04 22:51:24 +10:00
Damien Miller 65d1f5765f - djm@cvs.openbsd.org 2003/06/04 12:18:49 
[scp.c]
     ansify; ok markus@
 2003-06-04 22:51:08 +10:00
Damien Miller 9fc7c699af - djm@cvs.openbsd.org 2003/06/04 12:03:59 
[serverloop.c]
     remove bitrotten commet; ok markus@
 2003-06-04 22:50:54 +10:00
Damien Miller 4c322482bb - (djm) Update to fix of bug #584: lock card before return. 
From larsch@trustcenter.de
 2003-06-04 22:12:17 +10:00
Damien Miller 31b3a0a98f - djm@cvs.openbsd.org 2003/06/04 10:23:48 
[sshd.c]
     remove duplicated group-dropping code; ok markus@
 2003-06-04 20:32:12 +10:00
Damien Miller 941ac459ce - (djm) OpenBSD CVS Sync 
- djm@cvs.openbsd.org 2003/06/04 08:25:18
     [sshconnect.c]
     disable challenge/response and keyboard-interactive auth methods
     upon hostkey mismatch. based on patch from fcusack AT fcusack.com.
     bz #580; ok markus@
 2003-06-04 20:31:53 +10:00
Damien Miller 2527f5755a - (djm) Bug #584: scard-opensc.c doesn't work without PIN. Patch from 
larsch@trustcenter.de; ok markus@
 2003-06-04 19:22:06 +10:00
Damien Miller 485397c48d - (djm) Bug #577 - wrong flag in scard-opensc.c sc_private_decrypt. 
ok markus@
 2003-06-04 19:15:10 +10:00
Damien Miller 865173ee03 - (djm) Bug #573 - Remove unneeded Krb headers and compat goop. Patch from 
simon@sxw.org.uk (Also matches a change in OpenBSD a while ago)
 2003-06-04 19:06:59 +10:00
Damien Miller d311c4e54b change "No more 4-term BSD licenses in our tree" to 
"No more 4-term BSD licenses in linked code"

mdoc2man.pl is 4-term BSDL
 2003-06-03 13:09:16 +10:00
Damien Miller dafb12ed28 a - millert@cvs.openbsd.org 2003/06/03 02:56:16 
[scp.c]
     Remove the advertising clause in the UCB license which Berkeley
     rescinded 22 July 1999.  Proofed by myself and Theo.
 2003-06-03 13:06:18 +10:00
Darren Tucker eb28cbc399 - (dtucker) [port-aix.c bsd-cray.c] Fix uses of verify_reverse_mapping. 2003-06-03 12:45:27 +10:00
Damien Miller 048d88d5aa trim prior to 3.6p1 2003-06-03 12:43:14 +10:00
Damien Miller 329638e49c - (djm) Sync openbsd-compat with OpenBSD CVS. 
- No more 4-term BSD licenses in our tree
 2003-06-03 12:12:50 +10:00
Damien Miller 3a961dc0d3 - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/06/02 09:17:34
     [auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c]
     [canohost.c monitor.c servconf.c servconf.h session.c sshd_config]
     [sshd_config.5]
     deprecate VerifyReverseMapping since it's dangerous if combined
     with IP based access control as noted by Mike Harding; replace with
     a UseDNS option, UseDNS is on by default and includes the
     VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@
     ok deraadt@, djm@
 - (djm) Fix portable-specific uses of verify_reverse_mapping too
 2003-06-03 10:25:48 +10:00