Darren Tucker
1b118881b8
- (dtucker) OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2009/10/11 23:03:15
[hostfile.c]
mention the host name that we are looking for in check_host_in_hostfile()
2009-10-24 11:40:32 +11:00
Darren Tucker
e23a79cbed
- markus@cvs.openbsd.org 2009/10/08 18:04:27
...
[regress/test-exec.sh]
re-enable protocol v1 for the tests.
2009-10-12 09:37:22 +11:00
Darren Tucker
438b47320c
- dtucker@cvs.openbsd.org 2009/10/11 10:41:26
...
[sftp-client.c]
d_type isn't portable so use lstat to get dirent modes. Suggested by and
"looks sane" deraadt@
2009-10-11 21:52:10 +11:00
Darren Tucker
7a4a76579e
- jmc@cvs.openbsd.org 2009/10/08 20:42:12
...
[sshd_config.5 ssh_config.5 sshd.8 ssh.1]
some tweaks now that protocol 1 is not offered by default; ok markus
2009-10-11 21:51:40 +11:00
Darren Tucker
bad5076bb5
- (dtucker) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2009/10/08 14:03:41
[sshd_config readconf.c ssh_config.5 servconf.c sshd_config.5]
disable protocol 1 by default (after a transition period of about 10 years)
ok deraadt
2009-10-11 21:51:08 +11:00
Darren Tucker
c182d99376
- (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for
...
dirent d_type and DTTOIF as we've switched OpenBSD to the more portable
lstat.
2009-10-11 21:50:20 +11:00
Darren Tucker
538738d861
- (dtucker) d_type is not mandated by POSIX, so add fallback code using
...
stat(), needed on at least cygwin.
2009-10-07 18:56:10 +11:00
Darren Tucker
4adeac764e
- (dtucker) [configure.ac sftp-client.c] DOTTIF is in fs/ffs/dir.h on at
...
least dragonflybsd.
2009-10-07 15:49:48 +11:00
Darren Tucker
a25ab01845
- (dtucker) [regress/portnum.sh] Import new test.
2009-10-07 11:00:58 +11:00
Darren Tucker
b99c6e1499
fix id
2009-10-07 10:58:40 +11:00
Darren Tucker
b707a24382
- dtucker@cvs.openbsd.org 2009/10/06 23:51:49
...
[regress/ssh2putty.sh]
Add OpenBSD tag to make syncs easier
2009-10-07 10:54:31 +11:00
Darren Tucker
c863895e0a
- djm@cvs.openbsd.org 2009/08/20 18:43:07
...
[ssh-com-sftp.sh]
fix one sftp -D ... => sftp -P ... conversion that I missed; from Carlos
Silva for Google Summer of Code
2009-10-07 10:46:29 +11:00
Darren Tucker
ed6b0c5fc2
- djm@cvs.openbsd.org 2009/08/13 01:11:55
...
[sftp-batch.sh sftp-badcmds.sh sftp.sh sftp-cmds.sh sftp-glob.sh]
date: 2009/08/13 01:11:19; author: djm; state: Exp; lines: +10 -7
Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
add "-P port" to match scp(1). Fortunately, the -P option is only really
used by our regression scripts.
part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
of Code work; ok deraadt markus
2009-10-07 10:43:57 +11:00
Darren Tucker
287b9329c5
- djm@cvs.openbsd.org 2009/08/13 00:57:17
...
[regress/Makefile]
regression test for port number parsing. written as part of the a2port
change that went into 5.2 but I forgot to commit it at the time...
2009-10-07 10:31:56 +11:00
Darren Tucker
7988553585
- dtucker@cvs.openbsd.org 2009/05/05 07:51:36
...
[regress/multiplex.sh]
Always specify ssh_config for multiplex tests: prevents breakage caused
by options in ~/.ssh/config. From Dan Peterson.
2009-10-07 10:30:57 +11:00
Darren Tucker
7023d161d8
- djm@cvs.openbsd.org 2008/12/07 22:17:48
...
[regress/addrmatch.sh]
match string "passwordauthentication" only at start of line, not anywhere
in sshd -T output
2009-10-07 10:30:06 +11:00
Darren Tucker
695ed397a5
- djm@cvs.openbsd.org 2009/10/06 04:46:40
...
[session.c]
bz#1596: fflush(NULL) before exec() to ensure that everying (motd
in particular) has made it out before the streams go away.
2009-10-07 09:02:18 +11:00
Darren Tucker
759cb2a49a
- grunk@cvs.openbsd.org 2009/10/01 11:37:33
...
[dh.c]
fix a cast
ok djm@ markus@
2009-10-07 09:01:50 +11:00
Darren Tucker
72473c6b09
- djm@cvs.openbsd.org 2009/09/01 14:43:17
...
[ssh-agent.c]
fix a race condition in ssh-agent that could result in a wedged or
spinning agent: don't read off the end of the allocated fd_sets, and
don't issue blocking read/write on agent sockets - just fall back to
select() on retriable read/write errors. bz#1633 reported and tested
by "noodle10000 AT googlemail.com"; ok dtucker@ markus@
2009-10-07 09:01:03 +11:00
Darren Tucker
7bee06ab3b
- djm@cvs.openbsd.org 2009/08/31 21:01:29
...
[sftp-server.8]
document -e and -h; prodded by jmc@
2009-10-07 08:47:47 +11:00
Darren Tucker
30359e19ec
- djm@cvs.openbsd.org 2009/08/31 20:56:02
...
[sftp-server.c]
check correct variable for error message, spotted by martynas@
2009-10-07 08:47:24 +11:00
Darren Tucker
893d73549d
- djm@cvs.openbsd.org 2009/08/27 17:44:52
...
[authfd.c ssh-add.c authfd.h]
Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
when the agent refuses the constrained add request. This was a useful
migration measure back in 2002 when constraints were new, but just
adds risk now.
bz #1612 , report and patch from dkg AT fifthhorseman.net; ok markus@
2009-10-07 08:47:02 +11:00
Darren Tucker
6b286a4682
- djm@cvs.openbsd.org 2009/08/27 17:43:00
...
[sftp-server.8]
allow setting an explicit umask on the commandline to override whatever
default the user has. bz#1229; ok dtucker@ deraadt@ markus@
2009-10-07 08:46:21 +11:00
Darren Tucker
9bcd25b78b
- djm@cvs.openbsd.org 2009/08/27 17:33:49
...
[ssh-keygen.c]
force use of correct hash function for random-art signature display
as it was inheriting the wrong one when bubblebabble signatures were
activated; bz#1611 report and patch from fwojcik+openssh AT besh.com;
ok markus@
2009-10-07 08:45:48 +11:00
Darren Tucker
7dc4850ce8
- djm@cvs.openbsd.org 2009/08/27 17:28:52
...
[sftp-server.c]
allow setting an explicit umask on the commandline to override whatever
default the user has. bz#1229; ok dtucker@ deraadt@ markus@
2009-10-07 08:44:42 +11:00
Darren Tucker
8ec4fd8e3c
- dtucker@cvs.openbsd.org 2009/08/20 23:54:28
...
[mux.c]
subsystem_flag is defined in ssh.c so it's extern; ok djm
2009-10-07 08:39:57 +11:00
Darren Tucker
b3b40a8b95
- jmc@cvs.openbsd.org 2009/08/19 04:56:03
...
[sftp.1]
ether -> either;
2009-10-07 08:39:09 +11:00
Darren Tucker
05016b2f99
- djm@cvs.openbsd.org 2009/08/18 21:15:59
...
[sftp.1]
fix "get" command usage, spotted by jmc@
2009-10-07 08:38:23 +11:00
Darren Tucker
1b0dd17537
- djm@cvs.openbsd.org 2009/08/18 18:36:21
...
[sftp-client.h sftp.1 sftp-client.c sftp.c]
recursive transfer support for get/put and on the commandline
work mostly by carlosvsilvapt@gmail.com for the Google Summer of Code
with some tweaks by me; "go for it" deraadt@
2009-10-07 08:37:48 +11:00
Darren Tucker
1477ea162c
- dtucker@cvs.openbsd.org 2009/08/16 23:29:26
...
[sshd_config.5]
Add PubkeyAuthentication to the list allowed in a Match block (bz #1577 )
2009-10-07 08:36:05 +11:00
Darren Tucker
e54a036219
- fgsch@cvs.openbsd.org 2009/08/15 18:56:34
...
[auth.h]
remove unused define. markus@ ok.
(Id sync only, Portable still uses this.)
2009-10-07 08:35:32 +11:00
Darren Tucker
c22f090a2f
- djm@cvs.openbsd.org 2009/08/14 18:17:49
...
[sftp-client.c]
make the "get_handle: ..." error messages vaguely useful by allowing
callers to specify their own error message strings.
2009-10-07 08:24:19 +11:00
Darren Tucker
c07138e6f6
- jmc@cvs.openbsd.org 2009/08/13 13:39:54
...
[sftp.1 sftp.c]
sync synopsis and usage();
2009-10-07 08:23:44 +11:00
Darren Tucker
282b4026cb
- djm@cvs.openbsd.org 2009/08/13 01:11:19
...
[sftp.1 sftp.c]
Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
add "-P port" to match scp(1). Fortunately, the -P option is only really
used by our regression scripts.
part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
of Code work; ok deraadt markus
2009-10-07 08:23:06 +11:00
Darren Tucker
adba1ba514
- jmc@cvs.openbsd.org 2009/08/12 06:31:42
...
[sftp.1]
sort options;
2009-10-07 08:22:20 +11:00
Darren Tucker
46bbbe3326
- djm@cvs.openbsd.org 2009/08/12 00:13:00
...
[sftp.c sftp.1]
support most of scp(1)'s commandline arguments in sftp(1), as a first
step towards making sftp(1) a drop-in replacement for scp(1).
One conflicting option (-P) has not been changed, pending further
discussion.
Patch from carlosvsilvapt@gmail.com as part of his work in the
Google Summer of Code
2009-10-07 08:21:48 +11:00
Damien Miller
350666d300
- (djm) [Makefile.in] Mention readconf.o in ssh-keysign's make deps.
...
spotted by des AT des.no
2009-10-02 11:50:55 +10:00
Damien Miller
ea43742e77
pull in 5.3 release changes from branch:
...
20090926
- (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
[contrib/suse/openssh.spec] Update for release
- (djm) [README] update relnotes URL
- (djm) [packet.c] Restore EWOULDBLOCK handling that got lost somewhere
- (djm) Release 5.3p1
2009-10-02 11:49:03 +10:00
Darren Tucker
e02b49a806
- (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X
...
10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query). Patch
from jbasney at ncsa uiuc edu.
2009-09-11 14:56:08 +10:00
Damien Miller
e5d5a17fe1
- (djm) [serverloop.c] Fix test for server-assigned remote forwarding port
...
(-R 0:...); bz#1578, spotted and fix by gavin AT emf.net; ok dtucker@
2009-09-09 11:07:28 +10:00
Darren Tucker
dad48e7a96
- (dtucker) [configure.ac] Bug #1639 : use AC_PATH_PROG to search the path for
...
krb5-config if it's not in the location specified by --with-kerberos5.
Patch from jchadima at redhat.
2009-09-01 18:26:00 +10:00
Darren Tucker
427adf1538
- (dtucker) [README.platform] Add text about development packages, based on
...
text from Chris Pepper in bug #1631 .
2009-08-29 09:14:48 +10:00
Darren Tucker
ac9f1b9b89
- (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry.
2009-08-28 15:01:20 +10:00
Darren Tucker
86e30a0166
- (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer
...
size a compile-time option and set it to 64k on Cygwin, since Corinna
reports that it makes a significant difference to performance. ok djm@
2009-08-28 11:21:06 +10:00
Darren Tucker
3980b63631
- (dtucker) [channels.c configure.ac] Bug #1528 : skip the tcgetattr call on
...
the pty master on Solaris, since it never succeeds and can hang if large
amounts of data is sent to the slave (eg a copy-paste). Based on a patch
originally from Doke Scott, ok djm@
2009-08-28 11:02:37 +10:00
Damien Miller
7d4a2685f7
- (djm) [Makefile.in] bz#1505: Solaris make(1) doesn't accept make variables
...
in argv, so pass them in the environment; ok dtucker@
2009-08-28 10:47:38 +10:00
Damien Miller
0e26551f7f
- (djm) [sftp-server.c] bz#1535: accept ENOSYS as a fallback error when
...
attempting atomic rename(); ok dtucker@
2009-08-28 10:43:13 +10:00
Damien Miller
8aac993af6
- (djm) [sshd_config.5] downgrade mention of login.conf to be an example
...
and mention PAM as another provider for ChallengeResponseAuthentication;
bz#1408; ok dtucker@
2009-08-28 10:40:30 +10:00
Damien Miller
9c7bf8dfc8
downgrade mention of login.conf to be an example and mention PAM as
...
another provider for ChallengeResponseAuthentication; bz#1408; ok dtucker@
2009-08-28 10:27:08 +10:00
Darren Tucker
28b973ea26
- dtucker [auth-sia.c] Roll back the change for bug #1241 as it apparently
...
causes problems in some Tru64 configurations.
2009-08-28 10:16:44 +10:00