Darren Tucker
1477ea162c
- dtucker@cvs.openbsd.org 2009/08/16 23:29:26
...
[sshd_config.5]
Add PubkeyAuthentication to the list allowed in a Match block (bz #1577 )
2009-10-07 08:36:05 +11:00
Darren Tucker
e54a036219
- fgsch@cvs.openbsd.org 2009/08/15 18:56:34
...
[auth.h]
remove unused define. markus@ ok.
(Id sync only, Portable still uses this.)
2009-10-07 08:35:32 +11:00
Darren Tucker
c22f090a2f
- djm@cvs.openbsd.org 2009/08/14 18:17:49
...
[sftp-client.c]
make the "get_handle: ..." error messages vaguely useful by allowing
callers to specify their own error message strings.
2009-10-07 08:24:19 +11:00
Darren Tucker
c07138e6f6
- jmc@cvs.openbsd.org 2009/08/13 13:39:54
...
[sftp.1 sftp.c]
sync synopsis and usage();
2009-10-07 08:23:44 +11:00
Darren Tucker
282b4026cb
- djm@cvs.openbsd.org 2009/08/13 01:11:19
...
[sftp.1 sftp.c]
Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
add "-P port" to match scp(1). Fortunately, the -P option is only really
used by our regression scripts.
part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
of Code work; ok deraadt markus
2009-10-07 08:23:06 +11:00
Darren Tucker
adba1ba514
- jmc@cvs.openbsd.org 2009/08/12 06:31:42
...
[sftp.1]
sort options;
2009-10-07 08:22:20 +11:00
Darren Tucker
46bbbe3326
- djm@cvs.openbsd.org 2009/08/12 00:13:00
...
[sftp.c sftp.1]
support most of scp(1)'s commandline arguments in sftp(1), as a first
step towards making sftp(1) a drop-in replacement for scp(1).
One conflicting option (-P) has not been changed, pending further
discussion.
Patch from carlosvsilvapt@gmail.com as part of his work in the
Google Summer of Code
2009-10-07 08:21:48 +11:00
Damien Miller
350666d300
- (djm) [Makefile.in] Mention readconf.o in ssh-keysign's make deps.
...
spotted by des AT des.no
2009-10-02 11:50:55 +10:00
Damien Miller
ea43742e77
pull in 5.3 release changes from branch:
...
20090926
- (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
[contrib/suse/openssh.spec] Update for release
- (djm) [README] update relnotes URL
- (djm) [packet.c] Restore EWOULDBLOCK handling that got lost somewhere
- (djm) Release 5.3p1
2009-10-02 11:49:03 +10:00
Darren Tucker
e02b49a806
- (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X
...
10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query). Patch
from jbasney at ncsa uiuc edu.
2009-09-11 14:56:08 +10:00
Damien Miller
e5d5a17fe1
- (djm) [serverloop.c] Fix test for server-assigned remote forwarding port
...
(-R 0:...); bz#1578, spotted and fix by gavin AT emf.net; ok dtucker@
2009-09-09 11:07:28 +10:00
Darren Tucker
dad48e7a96
- (dtucker) [configure.ac] Bug #1639 : use AC_PATH_PROG to search the path for
...
krb5-config if it's not in the location specified by --with-kerberos5.
Patch from jchadima at redhat.
2009-09-01 18:26:00 +10:00
Darren Tucker
427adf1538
- (dtucker) [README.platform] Add text about development packages, based on
...
text from Chris Pepper in bug #1631 .
2009-08-29 09:14:48 +10:00
Darren Tucker
ac9f1b9b89
- (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry.
2009-08-28 15:01:20 +10:00
Darren Tucker
86e30a0166
- (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer
...
size a compile-time option and set it to 64k on Cygwin, since Corinna
reports that it makes a significant difference to performance. ok djm@
2009-08-28 11:21:06 +10:00
Darren Tucker
3980b63631
- (dtucker) [channels.c configure.ac] Bug #1528 : skip the tcgetattr call on
...
the pty master on Solaris, since it never succeeds and can hang if large
amounts of data is sent to the slave (eg a copy-paste). Based on a patch
originally from Doke Scott, ok djm@
2009-08-28 11:02:37 +10:00
Damien Miller
7d4a2685f7
- (djm) [Makefile.in] bz#1505: Solaris make(1) doesn't accept make variables
...
in argv, so pass them in the environment; ok dtucker@
2009-08-28 10:47:38 +10:00
Damien Miller
0e26551f7f
- (djm) [sftp-server.c] bz#1535: accept ENOSYS as a fallback error when
...
attempting atomic rename(); ok dtucker@
2009-08-28 10:43:13 +10:00
Damien Miller
8aac993af6
- (djm) [sshd_config.5] downgrade mention of login.conf to be an example
...
and mention PAM as another provider for ChallengeResponseAuthentication;
bz#1408; ok dtucker@
2009-08-28 10:40:30 +10:00
Darren Tucker
28b973ea26
- dtucker [auth-sia.c] Roll back the change for bug #1241 as it apparently
...
causes problems in some Tru64 configurations.
2009-08-28 10:16:44 +10:00
Darren Tucker
82edf23fff
- (dtucker) [session.c openbsd-compat/port-aix.h] Bugs #1249 and #1567 : move
...
the setpcred call on AIX to immediately before the permanently_set_uid().
Ensures that we still have privileges when we call chroot and
pam_open_sesson. Based on a patch from David Leonard.
2009-08-20 16:20:50 +10:00
Darren Tucker
2a5588daeb
- (dtucker) [includes.h] Bug #1634 : do not include system glob.h if we're not
...
using it since the type conflicts can cause problems on FreeBSD. Patch
from Jonathan Chen.
2009-08-20 16:16:01 +10:00
Darren Tucker
b5d5ee1ab0
- (dtucker) [sshlogin.c openbsd-compat/port-aix.{c,h}] Bug #1595 : make
...
PrintLastLog work on AIX. Based in part on a patch from Miguel Sanders.
2009-08-17 09:40:00 +10:00
Darren Tucker
83d8f28336
- (dtucker) [configure.ac] Check for headers before libraries for openssl an
...
zlib, which should make the errors slightly more meaningful on platforms
where there's separate "-devel" packages for those.
2009-08-17 09:35:22 +10:00
Tim Rice
caeb164984
- (tim) [contrib/cygwin/ssh-user-config] Change script to call correct error
...
function. Patch from Corinna Vinschen.
2009-07-29 07:21:13 -07:00
Darren Tucker
440089afe0
- (dtucker) [openbsd-compat/getrrsetbyname.c] Reduce answer buffer size so it
...
fits into 16 bits to work around a bug in glibc's resolver where it masks
off the buffer size at 16 bits. Patch from Hauke Lampe, ok djm jakob.
2009-07-13 11:38:23 +10:00
Darren Tucker
916fdda401
add credit for bug #1534 patch
2009-07-12 22:12:28 +10:00
Darren Tucker
622d5c561b
- (dtucker) [auth-pam.c] Bug #1534 : move the deletion of PAM credentials on
...
logout to after the session close. Patch from Anicka Bernathova, ok djm.
2009-07-12 22:07:21 +10:00
Darren Tucker
8fdcba5caf
- (dtucker [contrib/cygwin/ssh-{host,user}-config] Add license text. Patch
...
from Corinna Vinschen.
2009-07-12 21:58:42 +10:00
Darren Tucker
c4b22ca1c8
- (dtucker) [configure.ac] Include sys/param.h for the sys/mount.h test,
...
prevents configure complaining on older BSDs.
2009-07-12 21:56:29 +10:00
Darren Tucker
4d4fdc0f7d
- (dtucker) [contrib/cygwin/ssh-host-config] better support for automated
...
scripts and fix usage of eval. Patch from Corinna Vinschen.
2009-07-07 21:19:11 +10:00
Darren Tucker
de0c025e3c
- stevesk@cvs.openbsd.org 2009/07/05 19:28:33
...
[clientloop.c]
only send SSH2_MSG_DISCONNECT if we're in compat20; from dtucker@
ok deraadt@ markus@
2009-07-06 07:17:35 +10:00
Darren Tucker
199b1340a8
- dtucker@cvs.openbsd.org 2009/07/02 02:11:47
...
[ssh.c]
allow for long home dir paths (bz #1615 ). ok deraadt
(based in part on a patch from jchadima at redhat)
2009-07-06 07:16:56 +10:00
Darren Tucker
cd6b1a27cb
- markus@cvs.openbsd.org 2009/06/30 14:54:40
...
[version.h]
crank version; ok deraadt
2009-07-06 07:13:04 +10:00
Darren Tucker
71e4d54dc7
- andreas@cvs.openbsd.org 2009/06/27 09:35:06
...
[readconf.h readconf.c]
Add client option UseRoaming. It doesn't do anything yet but will
control whether the client tries to use roaming if enabled on the
server. From Martin Forssen.
ok markus@
2009-07-06 07:12:27 +10:00
Darren Tucker
466df21961
- andreas@cvs.openbsd.org 2009/06/27 09:32:43
...
[roaming_common.c roaming.h]
It may be necessary to retransmit some data when resuming, so add it
to a buffer when roaming is enabled.
Most of this code was written by Martin Forssen, maf at appgate dot com.
ok markus@
2009-07-06 07:11:52 +10:00
Darren Tucker
e841eb0654
- andreas@cvs.openbsd.org 2009/06/27 09:29:06
...
[packet.h packet.c]
packet_bacup_state() and packet_restore_state() will be used to
temporarily save the current state ren resuming a suspended connection.
ok markus@
2009-07-06 07:11:13 +10:00
Darren Tucker
821d3dbe36
- dtucker@cvs.openbsd.org 2009/06/22 05:39:28
...
[monitor_wrap.c monitor_mm.c ssh-keygen.c auth2.c gss-genr.c sftp-client.c]
alphabetize includes; reduces diff vs portable and style(9).
ok stevesk djm
(Id sync only; these were already in order in -portable)
2009-06-22 16:11:06 +10:00
Darren Tucker
828c96d48f
- (dtucker) [roaming_common.c roaming_dummy.c] Wrap #include <inttypes.h> in
...
ifdef.
2009-06-21 22:22:08 +10:00
Darren Tucker
64cee36713
- (dtucker) [servconf.c sshd.c] More whitespace sync.
2009-06-21 20:26:17 +10:00
Darren Tucker
43e7a358ff
- (dtucker) [auth2-jpake.c auth2.c canohost.h session.c] Whitespace and
...
header-order changes to reduce diff vs OpenBSD.
2009-06-21 19:50:08 +10:00
Darren Tucker
e6b590e8d4
- dtucker@cvs.openbsd.org 2009/06/21 09:04:03
...
[roaming.h roaming_common.c roaming_dummy.c]
Add tags for the benefit of the sync scripts
Also: pull in the changes for 1.1->1.2 missed in the previous sync.
2009-06-21 19:08:48 +10:00
Darren Tucker
6ae35ac576
- dtucker@cvs.openbsd.org 2009/06/21 07:37:15
...
[kexdhs.c kexgexs.c]
abort if key_sign fails, preventing possible null deref. Based on report
from Paolo Ganci, ok markus@ djm@
2009-06-21 19:00:20 +10:00
Darren Tucker
7b935c79f4
- andreas@cvs.openbsd.org 2009/06/12 20:58:32
...
[packet.c]
Move some more statics into session_state
ok markus@ djm@
2009-06-21 18:59:36 +10:00
Darren Tucker
b422afa41f
- andreas@cvs.openbsd.org 2009/06/12 20:43:22
...
[monitor.c packet.c]
Fix warnings found by chl@ and djm@ and change roaming_atomicio's
return type to match atomicio's
Diff from djm@, ok markus@
2009-06-21 18:58:46 +10:00
Darren Tucker
c5564e1c4c
- andreas@cvs.openbsd.org 2009/05/28 16:50:16
...
[sshd.c packet.c serverloop.c monitor_wrap.c clientloop.c sshconnect.c
monitor.c Added roaming.h roaming_common.c roaming_dummy.c]
Keep track of number of bytes read and written. Needed for upcoming
changes. Most code from Martin Forssen, maf at appgate dot com.
ok markus@
Also, applied appropriate changes to Makefile.in
2009-06-21 18:53:53 +10:00
Darren Tucker
1cc55d7a60
- andreas@cvs.openbsd.org 2009/05/28 16:50:16
...
[sshd.c packet.c serverloop.c monitor_wrap.c clientloop.c sshconnect.c
monitor.c]
Keep track of number of bytes read and written. Needed for upcoming
changes. Most code from Martin Forssen, maf at appgate dot com.
ok markus@
2009-06-21 18:17:19 +10:00
Darren Tucker
761c38918a
- andreas@cvs.openbsd.org 2009/05/27 06:38:16
...
[sshconnect.h sshconnect.c]
Un-static ssh_exchange_identification(), part of a larger change from
Martin Forssen and needed for upcoming changes.
ok markus@
2009-06-21 18:16:26 +10:00
Darren Tucker
5b48cdd882
- andreas@cvs.openbsd.org 2009/05/27 06:36:07
...
[packet.h packet.c]
Add packet_put_int64() and packet_get_int64(), part of a larger change
from Martin Forssen.
2009-06-21 18:15:25 +10:00
Darren Tucker
12b4a6504b
- andreas@cvs.openbsd.org 2009/05/27 06:34:36
...
[kex.c kex.h]
Move the KEX_COOKIE_LEN define to kex.h
ok markus@
2009-06-21 18:14:48 +10:00