tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,533 Commits 6 Branches 20 Tags 97 MiB
Commit Graph

1246 Commits

Author SHA1 Message Date
Damien Miller ec7e1b1d0f - (djm) Don't loop forever when changing password via PAM. Patch 
from Solar Designer <solar@openwall.com>
 2001-03-21 13:01:35 +11:00
Damien Miller 2e9adb27e9 - (djm) Make sure pam_retval is initialised on call to pam_end. Patch 
from Solar Designer <solar@openwall.com>
 2001-03-21 12:16:24 +11:00
Damien Miller be08176963 - (djm) Fix ttyname breakage for AIX and Tru64. Patch from Steve 
VanDevender <stevev@darkwing.uoregon.edu>
 2001-03-21 11:11:57 +11:00
Tim Rice d9d5ba2bbd add get_arg_max(). Use sysconf() if ARG_MAX is not defined. 2001-03-19 20:46:50 -08:00
Tim Rice d14d7021a1 change S_ISLNK macro to work for UnixWare 2.03 2001-03-19 18:31:44 -08:00
Damien Miller 82e7ae5bce - (djm) Update RPM spec version 
- (djm) Release 2.5.2p1
 2001-03-20 09:30:50 +11:00
Damien Miller 41be73b663 - markus@cvs.openbsd.org 2001/03/19 17:12:10 
[version.h]
     version 2.5.2
 2001-03-20 09:16:34 +11:00
Damien Miller e7cf07c927 - markus@cvs.openbsd.org 2001/03/19 17:07:23 
[auth.c readconf.c]
     undo /etc/shell and proto 2,1 change for openssh-2.5.2
 2001-03-20 09:15:57 +11:00
Ben Lindstrom 9911f12083 - (bal) Oops. Missed globc.h change (OpenBSD CVS). 2001-03-19 21:29:30 +00:00
Ben Lindstrom 11c78f8119 - (bal) glob.c update to set gl_pathv to NULL (OpenBSD CVS). 2001-03-19 19:00:09 +00:00
Ben Lindstrom a77d641cea - (bal) glob.c update to added GLOB_LIMITS. 2001-03-19 18:58:13 +00:00
Ben Lindstrom aad56ce545 - (bal) Minor NeXT fixed. Forgot to #undef NGROUPS_MAX 2001-03-19 13:42:21 +00:00
Damien Miller 1e42f30c4c - djm@cvs.openbsd.org 2001/03/19 05:49:52 
[ssh.1]
     document PreferredAuthentications option; ok markus@
 2001-03-19 23:59:11 +11:00
Damien Miller a243fde477 - djm@cvs.openbsd.org 2001/03/19 12:10:17 
[sshd.8]
     Document permitopen authorized_keys option; ok markus@
 2001-03-19 23:16:08 +11:00
Damien Miller c2c5d9fd3b - djm@cvs.openbsd.org 2001/03/19 12:10:17 
[sshd.8]
     Document permitopen authorized_keys option; ok markus@
 2001-03-19 23:16:08 +11:00
Damien Miller 27dbe6f37e - deraadt@cvs.openbsd.org 2001/03/18 23:30:55 
[compat.c compat.h sshd.c]
     specifically version match on ssh scanners.  do not log scan
     information to the console
 2001-03-19 22:36:20 +11:00
Damien Miller cafff19105 - (djm) OpenBSD CVS Sync 
- djm@cvs.openbsd.org     2001/03/19 03:52:51
     [sftp-client.c]
     Report ssh connection closing correctly; ok deraadt@
 2001-03-19 22:29:46 +11:00
Ben Lindstrom 03017ba638 - (bal) NeXTStep lacks S_ISLNK. Plus split up S_IS* 2001-03-19 03:12:25 +00:00
Ben Lindstrom 8feff4542e - (bal) Small fix to scp. %lu vs %ld 2001-03-19 03:09:40 +00:00
Ben Lindstrom 6cabb6fd6c - Use 'NGROUPS' for NeXT Since 'MAX_NGROUPS' is wrapped up in -lposix 
stuff.  Change suggested by Mark Miller <markm@swoon.net>
 2001-03-19 03:01:56 +00:00
Tim Rice d19a75abd0 move HAVE_LONG_LONG_INT where it works 2001-03-18 18:27:26 -08:00
Damien Miller ffd0e10b9c - (djm) Make scp work on systems without 64-bit ints 2001-03-19 12:45:02 +11:00
Ben Lindstrom 2d70f98220 - markus@cvs.openbsd.org 2001/03/18 12:07:52 
[auth-options.c]
     ignore permitopen="host:port" if AllowTcpForwarding==no
 2001-03-19 00:13:46 +00:00
Damien Miller 9de61e8c59 - (djm) Add getusershell() functions from OpenBSD CVS 2001-03-19 10:09:27 +11:00
Damien Miller 60bc517356 - (djm) Seed PRNG at startup, rather than waiting for arc4random calls to 
do it implicitly.
 2001-03-19 09:38:15 +11:00
Tim Rice b399be4436 - tim@mindrot.org 2001/03/17 18:45:25 [compat.c] 
openbsd-compat/fake-regex.h
 2001-03-17 18:43:16 -08:00
Ben Lindstrom d69191bb4e - markus@cvs.openbsd.org 2001/03/17 17:27:59 
[auth.c]
     check /etc/shells, too
 2001-03-17 23:13:27 +00:00
Ben Lindstrom fea7278d90 - (bal) Fixed scp type casing issue which causes "scp: protocol error: 
size not delimited" fatal errors when tranfering.
 2001-03-17 18:07:46 +00:00
Ben Lindstrom 45b14dbddc - Check for gl_matchc support in glob_t and fall back to the 
openbsd-compat/glob.[ch] support if it does not exist.
 2001-03-17 01:15:38 +00:00
Ben Lindstrom 7bb8b49596 - markus@cvs.openbsd.org 2001/03/16 19:06:30 
[auth-options.c channels.c channels.h serverloop.c session.c]
     implement "permitopen" key option, restricts -L style forwarding to
     to specified host:port pairs. based on work by harlan@genua.de
 2001-03-17 00:47:54 +00:00
Ben Lindstrom cf00df6344 - markus@cvs.openbsd.org 2001/03/16 13:44:24 
[sftp-int.c]
     discourage strcat/strcpy
 2001-03-17 00:37:31 +00:00
Ben Lindstrom 5df2ffaeac - markus@cvs.openbsd.org 2001/03/16 09:55:53 
[sftp-int.c]
     fix memset and whitespace
 2001-03-17 00:36:17 +00:00
Ben Lindstrom c8d1c30c31 - djm@cvs.openbsd.org 2001/03/16 08:16:18 
[sftp-client.c sftp-client.h sftp-glob.c sftp-int.c]
     Revise globbing for get/put to be more shell-like. In particular,
     "get/put file* directory/" now works. ok markus@
 2001-03-17 00:34:46 +00:00
Ben Lindstrom 86fe8686b9 - markus@cvs.openbsd.org 2001/03/15 22:07:08 
[session.c]
     pass Session to do_child + KNF
 2001-03-17 00:32:57 +00:00
Ben Lindstrom a4c57666b9 - markus@cvs.openbsd.org 2001/03/15 15:05:59 
[scp.c]
     use %lld in printf, ok millert@/deraadt@; report from ssh@client.fi
 2001-03-17 00:10:20 +00:00
Damien Miller 168a700cc6 - Support usrinfo() on AIX. Based on patch from Gert Doering 
<gert@greenie.muc.de>
 2001-03-17 10:29:50 +11:00
Ben Lindstrom c7f4ccd52c - deraadt@cvs.openbsd.org 2001/03/14 22:50:25 
[sftp-server.c]
     note no getopt()
 2001-03-15 00:09:15 +00:00
Ben Lindstrom de2273f951 - (bal) Cygwin README change by Corinna Vinschen <vinschen@redhat.com> 2001-03-14 21:30:18 +00:00
Ben Lindstrom f78682d24a - markus@cvs.openbsd.org 2001/03/14 15:15:58 
[sftp-int.c]
     add version command
 2001-03-14 21:26:27 +00:00
Kevin Steves 54f15b6b6f - (stevesk) ssh-keyscan.c: specify "openbsd-compat/fake-queue.h" 2001-03-14 18:37:13 +00:00
Ben Lindstrom 025df4a1b4 - markus@cvs.openbsd.org 2001/03/14 08:57:14 
[sftp-client.c]
     Wall
 2001-03-14 15:16:34 +00:00
Damien Miller 3c02768950 - (djm) Add replacement glob() from OpenBSD libc if the system glob is 
missing or lacks the GLOB_ALTDIRFUNC extension
 - (djm) Remove -I$(srcdir)/openbsd-compat from CFLAGS, refer to headers
   relatively. Avoids conflict between glob.h and /usr/include/glob.h
 2001-03-14 11:39:45 +11:00
Ben Lindstrom 46e55aaabc - Fix strerror() in bsd-misc.c 2001-03-13 23:38:20 +00:00
Damien Miller 4870afd7c7 - djm@cvs.openbsd.org 2001/03/13 22:42:54 
[sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c]
    sftp client filename globbing for get, put, ch{mod,grp,own}. ok markus@
 2001-03-14 10:27:09 +11:00
Damien Miller 056ddf7af3 - OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2001/03/13 17:34:42
    [auth-options.c]
    missing xfree, deny key on parse error; ok stevesk@
 2001-03-14 10:15:20 +11:00
Ben Lindstrom cfccef96a3 - OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2001/03/12 22:02:02
     [key.c key.h ssh-add.c ssh-keygen.c sshconnect.c sshconnect2.c]
     remove old key_fingerprint interface, s/_ex//
 2001-03-13 04:57:58 +00:00
Ben Lindstrom 9ae2bb6790 - (bal) Reorder includes in Makefile. 2001-03-12 05:16:18 +00:00
Damien Miller 3e292fab40 - (djm) Add "static_openssl" RPM build option, remove rsh build dependency 2001-03-12 14:47:30 +11:00
Damien Miller 547c276203 - (djm) Bump portable version number for generating test RPMs 2001-03-12 14:23:52 +11:00
Ben Lindstrom 8fd372b194 - markus@cvs.openbsd.org 2001/03/11 22:33:24 
[ssh-keygen.1 ssh-keygen.c]
     remove -v again. use -B instead for bubblebabble. make -B consistent
     with -l and make -B work with /path/to/known_hosts. ok deraadt@
 2001-03-12 03:02:17 +00:00
Ben Lindstrom f0b4853d86 - markus@cvs.openbsd.org 2001/03/11 18:29:51 
[key.c]
     style+cleanup
 2001-03-12 02:59:31 +00:00
Tim Rice bee3f2224c test if snprintf() supports %ll 
add /dev to search path for PRNGD/EGD socket
  fix my mistake in USER_PATH test program
 2001-03-11 17:32:12 -08:00
Ben Lindstrom ca0bf57f2f - deraadt@cvs.openbsd.org 2001/03/11 16:39:03 
[ssh-keygen.c]
     KNF, and SHA1 binary output is just creeping featurism
 2001-03-11 20:08:29 +00:00
Ben Lindstrom cbe3ad2f70 - jakob@cvs.openbsd.org 2001/03/11 15:13:09 
[key.c]
     cleanup & shorten some var names key_fingerprint_bubblebabble.
 2001-03-11 20:06:59 +00:00
Ben Lindstrom a8a73e62ed - jakob@cvs.openbsd.org 2001/03/11 15:04:16 
[ssh-keygen.1 ssh-keygen.c]
     print both md5, sha1 and bubblebabble fingerprints when using
     ssh-keygen -l -v. ok markus@.
 2001-03-11 20:05:19 +00:00
Ben Lindstrom 96e8ea6a31 - jakob@cvs.openbsd.org 2001/03/11 15:03:16 
[key.c key.h]
     add improved fingerprint functions. based on work by Carsten
     Raskgaard <cara@int.tele.dk> and modified by me. ok markus@.
 2001-03-11 20:03:44 +00:00
Ben Lindstrom b54873ad24 - markus@cvs.openbsd.org 2001/03/11 13:25:36 
[auth2.c key.c]
     debug
 2001-03-11 20:01:55 +00:00
Ben Lindstrom b9be60a722 - markus@cvs.openbsd.org 2001/03/10 17:51:04 
[kex.c match.c match.h readconf.c readconf.h sshconnect2.c]
     add PreferredAuthentications
 2001-03-11 01:49:19 +00:00
Tim Rice 7f283fcc94 - tim@mindrot.org 2001/03/10 16:33:42 [configure.in Makefile.in sshd_config] 
make sure $bindir is in USER_PATH so scp will work
 2001-03-10 16:52:25 -08:00
Ben Lindstrom d20d0f3e27 - deraadt@cvs.openbsd.org 2001/03/10 15:31:00 
[compat.c compat.h sshconnect.c]
     all known netscreen ssh versions, and older versions of OSU ssh cannot
     handle password padding (newer OSU is fixed)
 2001-03-10 17:22:20 +00:00
Ben Lindstrom 00261540be - stevesk@cvs.openbsd.org 2001/03/10 15:02:05 
[ttymodes.c ttymodes.h]
     remove unused sgtty macros; ok markus@
 2001-03-10 17:17:28 +00:00
Ben Lindstrom 068f3dce28 - deraadt@cvs.openbsd.org 2001/03/10 12:53:51 
[readconf.c ssh_config]
     default to SSH2, now that m68k runs fast
 2001-03-10 17:15:39 +00:00
Ben Lindstrom 329782e3db - markus@cvs.openbsd.org 2001/03/10 12:48:27 
[sshconnect2.c]
     ignore nonexisting private keys; report rjmooney@mediaone.net
 2001-03-10 17:08:59 +00:00
Ben Lindstrom 5f5419a6a2 - Removed log.o from sftp client. Not needed. 2001-03-09 19:48:37 +00:00
Ben Lindstrom ca42d5fb7f - deraadt@cvs.openbsd.org 2001/03/09 12:30:29 
[sshd.c]
     typo; slade@shore.net
 2001-03-09 18:25:32 +00:00
Ben Lindstrom 5fc6270fe9 - deraadt@cvs.openbsd.org 2001/03/09 03:14:39 
[ssh-keygen.c]
     create *.pub files with umask 0644, so that you can mv them to
     authorized_keys
 2001-03-09 18:19:24 +00:00
Ben Lindstrom 266dfdfd62 - markus@cvs.openbsd.org 2001/03/08 21:42:33 
[compat.c compat.h readconf.h ssh.c sshconnect1.c sshconnect2.c]
     implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->
     no need to do enter passphrase or do expensive sign operations if the
     server does not accept key).
 2001-03-09 00:12:22 +00:00
Ben Lindstrom 283cb821cd - stevesk@cvs.openbsd.org 2001/03/08 20:44:48 
[sftp.1]
     spelling, cleanup; ok deraadt@
 2001-03-09 00:09:02 +00:00
Ben Lindstrom a038498797 - stevesk@cvs.openbsd.org 2001/03/08 18:47:12 
[auth1.c]
     unused; ok markus@
 2001-03-08 20:37:22 +00:00
Kevin Steves 52dd46855d - (stevesk) Reliant Unix (SNI) needs HAVE_BOGUS_SYS_QUEUE_H; 
Dirk Markwardt <D.Markwardt@tu-bs.de>
 2001-03-08 18:26:57 +00:00
Ben Lindstrom cebc858ca2 - OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2001/03/08 00:15:48
     [readconf.c ssh.1]
     turn off useprivilegedports by default. only rhost-auth needs
     this. older sshd's may need this, too.
 2001-03-08 03:39:10 +00:00
Damien Miller 058316f0f1 - OpenBSD CVS Sync 
- djm@cvs.openbsd.org 2001/03/07 10:11:23
    [sftp-client.c sftp-client.h sftp-int.c sftp-server.c sftp.1 sftp.c sftp.h]
    Support for new draft (draft-ietf-secsh-filexfer-01). New symlink handling
    functions and small protocol change.
 2001-03-08 10:08:49 +11:00
Damien Miller 8ac0a7ec44 - Cygwin contrib improvements from Corinna Vinschen <vinschen@redhat.com> 2001-03-07 21:38:19 +11:00
Ben Lindstrom b29e34d1e4 - deraadt@cvs.openbsd.org 2001/03/07 04:05:58 
[ssh.1]
     removed dated comment
 2001-03-07 06:08:50 +00:00
Ben Lindstrom d58eb5f50e - deraadt@cvs.openbsd.org 2001/03/07 01:19:06 
[ssh.1 sshd.8]
     the name "secure shell" is boring, noone ever uses it
 2001-03-07 06:07:22 +00:00
Ben Lindstrom c9b6eabb49 - deraadt@cvs.openbsd.org 2001/03/06 15:10:42 
[sftp.1]
     order things
 2001-03-07 01:29:17 +00:00
Ben Lindstrom 562c26bccf - deraadt@cvs.openbsd.org 2001/03/06 06:11:44 
[sftp-int.c sftp.1 sftp.c]
     sftp -b batchfile; mouring@etoh.eviladmin.org
 2001-03-07 01:26:48 +00:00
Ben Lindstrom e21c4adaac - deraadt@cvs.openbsd.org 2001/03/06 06:11:18 
[ssh-keyscan.c]
     appease gcc
 2001-03-07 01:23:30 +00:00
Ben Lindstrom ebc882757b - millert@cvs.openbsd.org 2001/03/06 01:08:27 
[clientloop.c]
     If read() fails with EINTR deal with it the same way we treat EAGAIN
 2001-03-06 03:34:40 +00:00
Ben Lindstrom 884a4aca88 - millert@cvs.openbsd.org 2001/03/06 01:06:03 
[ssh-keyscan.c]
     Don't assume we wil get the version string all in one read().
     deraadt@ OK'd
 2001-03-06 03:33:04 +00:00
Ben Lindstrom b3144e58e7 - deraadt@cvs.openbsd.org 2001/03/06 00:33:04 
[authfd.c cli.c ssh-agent.c]
     EINTR/EAGAIN handling is required in more cases
 2001-03-06 03:31:34 +00:00
Ben Lindstrom be6a5a6dfe - stevesk@cvs.openbsd.org 2001/03/05 17:58:22 
[dh.c]
     spelling
 2001-03-06 01:13:06 +00:00
Ben Lindstrom 1e62174af1 - stevesk@cvs.openbsd.org 2001/03/05 17:40:48 
[ssh.1]
     more ssh_known_hosts2 documentation; ok markus@
 2001-03-06 01:10:53 +00:00
Ben Lindstrom 4c4f05e096 - markus@cvs.openbsd.org 2001/03/05 17:17:21 
[kex.c kex.h sshconnect2.c sshd.c]
     generate a 2*need size (~300 instead of 1024/2048) random private
     exponent during the DH key agreement. according to Niels (the great
     german advisor) this is safe since /etc/primes contains strong
     primes only.

     References:
             P. C. van Oorschot and M. J. Wiener, On Diffie-Hellman key
             agreement with short exponents, In Advances in Cryptology
             - EUROCRYPT'96, LNCS 1070, Springer-Verlag, 1996, pp.332-343.
 2001-03-06 01:09:20 +00:00
Ben Lindstrom c78a187b17 - deraadt@cvs.openbsd.org 2001/03/05 16:07:15 
[sshd.8]
     detail default hmac setup too
 2001-03-06 01:06:58 +00:00
Ben Lindstrom ec26fb1667 - deraadt@cvs.openbsd.org 2001/03/05 15:56:16 
[myproposal.h ssh.1]
     switch to aes128-cbc/hmac-md5 by default in SSH2 -- faster;
     provos & markus ok
 2001-03-06 01:05:23 +00:00
Ben Lindstrom 35f1f4e2b8 - stevesk@cvs.openbsd.org 2001/03/05 15:44:51 
[servconf.c]
     sync error message; ok markus@
 2001-03-06 01:02:41 +00:00
Ben Lindstrom ff8b4940ab - deraadt@cvs.openbsd.org 2001/03/05 14:28:47 
[sshd.8]
     alpha order; jcs@rt.fm
 2001-03-06 01:00:03 +00:00
Kevin Steves 12888d1fc8 - (stevesk) sftp.c: handle __progname 2001-03-05 19:50:57 +00:00
Kevin Steves 935aa24bf4 - (stevesk) OpenBSD sync: 
- deraadt@cvs.openbsd.org 2001/03/05 08:37:27
     [ssh-keyscan.c]
     skip inlining, why bother
 2001-03-05 19:46:37 +00:00
Damien Miller 30246a8f2b - (djm) Fix up LOG_AUTHPRIV for systems that have it 2001-03-05 21:23:31 +11:00
Ben Lindstrom 2d9bfb17be - (bal) Fix up logging since it changed. removed log-*.c 2001-03-05 08:16:54 +00:00
Ben Lindstrom 0f68db4e9e - (bal) Put HAVE_PW_CLASS_IN_PASSWD back into pwcopy() 2001-03-05 07:57:09 +00:00
Ben Lindstrom fd2e05b95e - deraadt@cvs.openbsd.org 2001/03/04 18:21:28 
[sshd.8]
     list SSH2 ciphers
 2001-03-05 07:48:45 +00:00
Ben Lindstrom 6df8ef4196 - millert@cvs.openbsd.org 2001/03/04 17:42:28 
[authfd.c channels.c dh.c log.c readconf.c servconf.c sftp-int.c
      ssh.c sshconnect.c sshd.c]
     log functions should not be passed strings that end in newline as they
     get passed on to syslog() and when logging to stderr, do_log() appends
     its own newline.
 2001-03-05 07:47:23 +00:00
Ben Lindstrom fafea18d68 - stevesk@cvs.openbsd.org 2001/03/04 12:54:04 
[sshd.8]
     spelling
 2001-03-05 07:43:27 +00:00
Ben Lindstrom d9cae22d1a - stevesk@cvs.openbsd.org 2001/03/04 11:16:06 
[servconf.c sshd.8]
     kill obsolete RandomSeed; ok markus@ deraadt@
 2001-03-05 07:42:03 +00:00
Ben Lindstrom 323c98f4a7 - stevesk@cvs.openbsd.org 2001/03/04 11:04:41 
[sshd.8]
     small cleanup and clarify for PermitRootLogin; ok markus@
 2001-03-05 07:40:40 +00:00
Ben Lindstrom 3d73a34931 - stevesk@cvs.openbsd.org 2001/03/04 10:57:53 
[ssh.c]
     add -m to usage; ok markus@
 2001-03-05 07:39:01 +00:00
Ben Lindstrom 9c5324422e - (bal) CVS ID touch up on auth2.c, serverloop.c, session.c & sshd.c 2001-03-05 07:33:14 +00:00
Ben Lindstrom b1131e9329 - markus@cvs.openbsd.org 2001/03/04 00:03:59 
[channels.c]
     debug1->2
 2001-03-05 07:27:13 +00:00
Ben Lindstrom 8a432f5fe0 - markus@cvs.openbsd.org 2001/03/03 23:59:34 
[log.c ssh.c]
     log*.c -> log.c
 2001-03-05 07:24:46 +00:00
Ben Lindstrom 46d6e09099 - markus@cvs.openbsd.org 2001/03/03 23:52:22 
[sftp.c]
     clean up arg processing. based on work by Christophe_Moret@hp.com
 2001-03-05 07:10:47 +00:00
Ben Lindstrom 1addabd491 - deraadt@cvs.openbsd.org 2001/03/03 22:07:50 
[sftp-server.c]
     KNF
 2001-03-05 07:09:11 +00:00
Ben Lindstrom cb978aa057 - millert@cvs.openbsd.org 2001/03/03 21:41:07 
[packet.c]
     Dynamically allocate fd_set; deraadt@ OK
 2001-03-05 07:07:49 +00:00
Ben Lindstrom cb80bdf6d5 - millert@cvs.openbsd.org 2001/03/03 21:40:30 
[sftp-server.c]
     Dynamically allocate fd_set; deraadt@ OK
 2001-03-05 07:06:12 +00:00
Ben Lindstrom c1e0421cb4 - millert@cvs.openbsd.org 2001/03/03 21:19:41 
[ssh-keyscan.c]
     Dynamically allocate read_wait and its copies.  Since maxfd is
     based on resource limits it is often (usually?) larger than FD_SETSIZE.
 2001-03-05 07:04:38 +00:00
Ben Lindstrom d20b855bc6 - deraadt@cvs.openbsd.org 2001/03/03 06:53:12 
[ssh-keyscan.c]
     standard theo sweep
 2001-03-05 07:01:18 +00:00
Ben Lindstrom 92a2e38f8e - deraadt@cvs.openbsd.org 2001/03/02 18:54:31 
[atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h
      scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c
      ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8]
     make copyright lines the same format
 2001-03-05 06:59:27 +00:00
Ben Lindstrom d7f5b517d5 - deraadt@cvs.openbsd.org 2001/03/02 09:42:49 
[sshd.8]
     doc the dsa/rsa key pair files
 2001-03-05 06:57:23 +00:00
Ben Lindstrom 49a098d1b2 - deraadt@cvs.openbsd.org 2001/03/02 06:21:01 
[sshd.8]
     explain SIGHUP better
 2001-03-05 06:55:18 +00:00
Ben Lindstrom 4040fe10a9 - markus@cvs.openbsd.org 2001/03/01 22:46:37 
[ssh.c]
     don't truncate remote ssh-2 commands; from mkubita@securities.cz
     use min, not max for logging, fixes overflow.
 2001-03-05 06:52:57 +00:00
Ben Lindstrom b22c2b86af - deraadt@cvs.openbsd.org 2001/03/01 03:38:33 
[cli.c cli.h rijndael.h ssh-keyscan.1]
     copyright notices on all source files
 2001-03-05 06:50:47 +00:00
Ben Lindstrom 204e48851a - deraadt@cvs.openbsd.org 2001/03/01 02:45:10 
[auth-rsa.c auth2.c deattack.c packet.c]
     KNF
 2001-03-05 06:47:00 +00:00
Ben Lindstrom 0ab2a01079 - deraadt@cvs.openbsd.org 2001/03/01 02:29:04 
[ssh.c]
     shorten usage by a line
 2001-03-05 06:45:21 +00:00
Ben Lindstrom cf0da4067b - (bal) CVS ID touch up on uuencode.c 2001-03-05 06:42:58 +00:00
Ben Lindstrom 66e5ecc6b2 - (bal) CVS ID touch up on sftp-int.c 2001-03-05 06:35:29 +00:00
Ben Lindstrom afd3475ddf - deraadt@cvs.openbsd.org 2001/03/01 02:11:25 
[authfd.c]
     split line so that p will have an easier time next time around
 2001-03-05 06:33:23 +00:00
Ben Lindstrom b40204bf22 - markus@cvs.openbsd.org 2001/02/28 21:31:32 
[channels.c]
     typo
 2001-03-05 06:29:44 +00:00
Ben Lindstrom e229b25a9e - markus@cvs.openbsd.org 2001/02/28 21:27:48 
[channels.c packet.c packet.h serverloop.c]
     use ignore message to simulate a SSH2_MSG_CHANNEL_DATA message
     use random content in ignore messages.
 2001-03-05 06:28:06 +00:00
Ben Lindstrom 941ac82e16 - markus@cvs.openbsd.org 2001/02/28 21:21:41 
[sshd.c]
     generate a fake session id, too
 2001-03-05 06:25:23 +00:00
Ben Lindstrom 4030442d77 - deraadt@cvs.openbsd.org 2001/02/28 17:52:54 
[misc.c]
     for completeness, copy pw_gecos too
 2001-03-05 06:22:01 +00:00
Ben Lindstrom cc74df79d7 - markus@cvs.openbsd.org 2001/02/28 12:55:07 
[channels.c]
     unify debug messages
 2001-03-05 06:20:14 +00:00
Ben Lindstrom 5699c5f9ac - markus@cvs.openbsd.org 2001/02/28 09:57:07 
[packet.c packet.h sshconnect2.c]
     in ssh protocol v2 use ignore messages for padding (instead of
     trailing \0).
 2001-03-05 06:17:49 +00:00
Ben Lindstrom 7fbd455c78 - markus@cvs.openbsd.org 2001/02/28 08:54:55 
[channels.c nchan.c nchan.h]
     make sure remote stderr does not get truncated.
     remove closed fd's from the select mask.
 2001-03-05 06:16:11 +00:00
Ben Lindstrom e9613cf16d - markus@cvs.openbsd.org 2001/02/28 08:45:39 
[clientloop.c]
     fix byte counts for ssh protocol v1
 2001-03-05 06:14:02 +00:00
Ben Lindstrom ec19a40b94 - deraadt@cvs.openbsd.org 2001/02/28 05:36:28 
[sftp.c]
     do not kill the subprocess on termination (we will see if this helps
     things or hurts things)
 2001-03-05 06:12:01 +00:00
Ben Lindstrom 069090128c - deraadt@cvs.openbsd.org 2001/02/28 05:34:28 
[misc.c]
     pull in protos
 2001-03-05 06:09:31 +00:00
Ben Lindstrom 5de86cc736 - markus@cvs.openbsd.org 2001/02/27 11:00:11 
[compat.c]
     support SSH-2.0-2.1 ; from Christophe_Moret@hp.com
 2001-03-05 06:08:19 +00:00
Ben Lindstrom 6a5cde0eb7 - markus@cvs.openbsd.org 2001/02/27 10:35:27 
[packet.c]
     fix random padding
 2001-03-05 06:07:00 +00:00
Ben Lindstrom 4b00c8b40b - deraadt@cvs.openbsd.org 2001/02/24 10:37:26 
[sshd_config]
     ssh2 rsa key before dsa key
 2001-03-05 06:05:35 +00:00
Ben Lindstrom b00d4fb142 - deraadt@cvs.openbsd.org 2001/02/24 10:37:55 
[readconf.c]
     look for id_rsa by default, before id_dsa
 2001-03-05 06:03:03 +00:00
Ben Lindstrom eb648a749b - markus@cvs.openbsd.org 2001/02/23 18:15:13 
[sshd.c]
     the random session key depends now on the session_key_int
     sent by the 'attacker'
             dig1 = md5(cookie|session_key_int);
             dig2 = md5(dig1|cookie|session_key_int);
             fake_session_key = dig1|dig2;
     this change is caused by a mail from anakin@pobox.com
     patch based on discussions with my german advisor niels@openbsd.org
 2001-03-05 06:00:29 +00:00
Ben Lindstrom f4c73112d0 - markus@cvs.openbsd.org 2001/02/23 15:34:53 
[serverloop.c]
     debug2->3
 2001-03-05 05:58:23 +00:00
Ben Lindstrom 086cf214cf - markus@cvs.openbsd.org 2001/02/22 21:59:44 
[auth.c auth.h auth1.c auth2.c misc.c misc.h ssh.c]
     use pwcopy in ssh.c, too
 2001-03-05 05:56:40 +00:00
Ben Lindstrom ebd888d919 - markus@cvs.openbsd.org 2001/02/22 21:57:27 
[ssh.1 sshd.8]
     typos/grammar from matt@anzen.com
 2001-03-05 05:49:29 +00:00
Ben Lindstrom 531a445c3a - deraadt@cvs.openbsd.org 2001/02/22 18:09:06 
[sshd_config]
     activate RSA 2 key
 2001-03-05 05:17:18 +00:00
Ben Lindstrom 7ab5117367 - deraadt@cvs.openbsd.org 2001/02/22 08:03:51 
[ssh-keygen.1 ssh-keygen.c]
     bye bye -d
 2001-03-05 05:13:38 +00:00
Ben Lindstrom b7c9232da1 - deraadt@cvs.openbsd.org 2001/02/22 06:43:55 
[ssh-keygen.1 ssh-keygen.c]
     document -d, and -t defaults to rsa1
 2001-03-05 05:10:52 +00:00
Ben Lindstrom 33a3cc30eb - deraadt@cvs.openbsd.org 2001/02/22 04:29:37 
[servconf.c]
     grammar; slade@shore.net
 2001-03-05 05:07:52 +00:00
Ben Lindstrom 87af95b3e7 - stevesk@cvs.openbsd.org 2001/02/21 21:14:04 
[ssh.c]
     -i supports DSA identities now; ok markus@
 2001-03-05 05:04:57 +00:00
Ben Lindstrom 36592518dd - deraadt@cvs.openbsd.org 2001/02/21 09:12:56 
[sftp-server.c]
     careful with & and &&; markus ok
 2001-03-05 05:02:08 +00:00
Ben Lindstrom b257cca769 - deraadt@cvs.openbsd.org 2001/02/21 09:05:54 
[authfile.c]
     improve fd handling
 2001-03-05 04:59:27 +00:00
Ben Lindstrom b0a4cd8f91 - deraadt@cvs.openbsd.org 2001/02/21 07:37:04 
[ssh-keyscan.c]
     inline -> __inline__, and some indent
 2001-03-05 04:54:49 +00:00
Ben Lindstrom 53992c7cd5 - deraadt@cvs.openbsd.org 2001/02/17 23:48:48 
[sshd.8]
     it's the OpenSSH one
 2001-03-05 04:47:55 +00:00
Ben Lindstrom 6ed8c043de - (bal) CVS ID touch up on sshpty.[ch] and sshlogin.[ch] 2001-03-05 03:53:02 +00:00
Ben Lindstrom cfb9370a3a - (bal) Updated contrib/README to remove 'make-ssh-known-hosts' and 
give Mark Roth credit for mdoc2man.pl
 2001-03-03 21:43:19 +00:00
Ben Lindstrom 59a5f9bd69 - (bal) Remove make-ssh-known-hosts.1 since it's no longer valid. 2001-03-03 21:37:50 +00:00
Damien Miller d0ccb989c2 - Allow PRNGd entropy collection from localhost TCP socket. Replace 
"--with-egd-pool" configure option with "--with-prngd-socket" and
   "--with-prngd-port" options. Debugged and improved by Lutz Jaenicke
   <Lutz.Jaenicke@aet.TU-Cottbus.DE>
 2001-03-04 00:29:20 +11:00
Damien Miller 1d66c1602e - Document PAM ChallengeResponseAuthentication in sshd.8 
- Disable and comment ChallengeResponseAuthentication in sshd_config
 2001-03-04 00:16:20 +11:00
Damien Miller 459ac4b688 - Remove make-ssh-known-hosts.pl, ssh-keyscan is better. 2001-03-03 20:00:36 +11:00
Damien Miller 9de5f05857 - (djm) Released 2.5.1p2 2001-03-01 11:09:42 +11:00
Damien Miller b5b6218537 - (djm) Cygwin needs pw->pw_gecos copied too. Patch from Corinna Vinschen 
<vinschen@redhat.com>
 2001-03-01 09:48:13 +11:00
Damien Miller 882c2eed97 - (djm) Force standard PAM conversation function in a few more places. 
Patch from Redhat 2.5.1p1-2 RPM, probably Nalin Dahyabhai
   <nalin@redhat.com>
 2001-03-01 09:18:57 +11:00
Damien Miller 95aa2d60ea - (djm) Properly add -lcrypt if needed. 2001-03-01 09:16:11 +11:00
Damien Miller e854662d54 - (djm) Remove /tmp from EGD socket search list 2001-02-28 12:51:18 +11:00
Damien Miller 3d8ae61b87 - (djm) EGD detection patch from Tim Rice <tim@multitalents.net> 2001-02-28 12:49:38 +11:00
Damien Miller efb7179815 - (djm) Fully revert PAM session patch (again). All PAM session init is 
now done before the final fork().
 2001-02-28 11:48:06 +11:00
Damien Miller c594633b49 - (djm) Fully revert PAM session patch. All PAM session init is now done 
before the final fork().
 2001-02-28 11:46:11 +11:00
Damien Miller 4df5c76c2b - (djm) Detect endianness in configure and use it in rijndael.c. Fixes 
"Bad packet length" bugs.
 2001-02-28 08:14:22 +11:00
Damien Miller 6007f19483 doh 2001-02-27 14:42:58 +11:00
Damien Miller 0bcf9eacdf - (djm) Avoid warnings for missing broken IP_TOS. Patch from Mark Miller 
<markm@swoon.net>
 2001-02-27 14:03:30 +11:00
Damien Miller 9b40580d76 - (djm) Remove 'noreplace' flag from sshd_config in RPM spec files. This 
change is being made as 2.5.x configfiles are not back-compatible with
  2.3.x.
 2001-02-27 10:53:00 +11:00
Damien Miller 7bd1c6262b - (djm) Fix PAM fix 2001-02-27 10:48:01 +11:00
Damien Miller 248131ae99 - (djm) Warning fix on entropy.c saved uid stuff. Patch from Mark Miller 
<markm@swoon.net>
 2001-02-27 09:47:16 +11:00
Damien Miller 5a7613186b - (djm) Move PAM init to after fork for non-Solaris derived PAMs 2001-02-27 09:28:23 +11:00
Damien Miller 767c7fc27c - (djm) fatal() on OpenSSL version mismatch 2001-02-27 09:20:57 +11:00
Ben Lindstrom dd784b2c00 Second Ooops... =) I started with the wrong date. 2001-02-26 22:11:59 +00:00
Damien Miller 255cae0be0 doh 2001-02-27 09:05:38 +11:00
Damien Miller fbd884a80d - (djm) Fix up POSIX saved uid support. Report from Mark Miller 
<markm@swoon.net>
 - (djm) Search for -lcrypt on FreeBSD too
 2001-02-27 08:39:07 +11:00
Ben Lindstrom 0c100870ac - (bal) sshd.init support for all Redhat release. Patch by Jim Knoble 
<jmknoble@jmknoble.cx>
 2001-02-26 20:38:53 +00:00
Ben Lindstrom 7603b2d244 - markus@cvs.openbsd.org 2001/02/23 15:37:45 
[session.c]
     handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
 2001-02-26 20:13:32 +00:00
Ben Lindstrom 10b9bf95c0 - (bal) Applied shutdown() patch for sftp.c by Corinna Vinschen 
<vinschen@redhat.com>
 2001-02-26 20:04:45 +00:00
Damien Miller bb7c976202 - (djm) Some systems (SCO3, NeXT) have weird saved uid semantics. 
Based on patch from Tim Rice <tim@multitalents.net>
 2001-02-26 20:49:58 +11:00
Ben Lindstrom 63941f9631 - (bal) Fixed bsd-snprinf.c so it now honors 'BROKEN_SNPRINTF' again. 2001-02-25 23:20:40 +00:00
Ben Lindstrom 416d874094 - (bal) Replace 'unsigned long long' to 'u_int64_t' since not every 
platform defines u_int64_t as being that.
 2001-02-25 02:02:43 +00:00
Damien Miller 73bb058d0d - (djm) Use %{_libexecdir} rather than hardcoded path in RPM specfile 
Patch from Adrian Ho <lexfiend@usa.net>
 2001-02-25 09:36:29 +11:00
Ben Lindstrom 8697e08660 - (bal) Missed part of the UNIX sockets patch. Patch by Corinna 
Vinschen <vinschen@redhat.com>
 - (bal) Reorder where 'strftime' is detected to resolve linking
   issues on SCO.  Patch by Tim Rice <tim@multitalents.net>
 2001-02-24 21:41:10 +00:00
Ben Lindstrom 38e60935bb - (bal) Generalize lack of UNIX sockets since this also effects Cray 
not just Cygwin.  Based on patch by Wendy Palm <wendyp@cray.com>
 2001-02-24 00:55:04 +00:00
Ben Lindstrom 803f16cbe4 - (bal) Renamed sigaction.[ch] to sigact.[ch]. Causes problems with 
some platforms.
 2001-02-24 00:24:19 +00:00
Ben Lindstrom 65981156b8 - (bal) pam_stack fix to correctly detect between RH7 and older RHs. 
Patch by Pekka Savola <pekkas@netcore.fi>
 2001-02-24 00:05:29 +00:00
Ben Lindstrom 4ef92b5844 - (bal) Double -I for OpenSSL on SCO. Patch by Tim Rice 
<tim@multitalents.net>
 2001-02-23 05:05:53 +00:00
Ben Lindstrom 379f205a16 - (bal) Patch to force OpenSSH rpm to require the same version of OpenSSL 
that it was compiled against.  Patch by Pekka Savola <pekkas@netcore.fi>
 2001-02-23 04:55:46 +00:00
Ben Lindstrom 008e29189e - (bal) Fix --define rh7 in openssh.spec file. Patch by Steve Tell 
<tell@telltronics.org>
 2001-02-23 04:45:15 +00:00
Kevin Steves 77aeaaf87f - (stevesk) remove erroneous #ifdef sgi code. 
Michael Stone <mstone@cs.loyola.edu>
 2001-02-22 21:23:21 +00:00
Ben Lindstrom e68c5670cd - (bal) Added mdoc2man.pl from Mark Roth <roth@feep.net> 
- (bal) Removed reference to liblogin from contrib/README.  It was
   integrated into OpenSSH a long while ago.
 2001-02-22 06:20:10 +00:00
Ben Lindstrom e1bd29bc9e - (bal) Corrected SCO luid patch by svaughan <svaughan@asterion.com> 2001-02-21 20:00:28 +00:00
Kevin Steves ff793a27b8 - (stevesk) session.c: back out to where we were before: 
- (djm) Move PAM session initialisation until after fork in sshd. Patch
      from Nalin Dahyabhai <nalin@redhat.com>
 2001-02-21 16:36:51 +00:00
Ben Lindstrom 94bce40720 - (bal) Reverted out of 2001/02/15 patch by djm below because it 
breaks Solaris.
        - (djm) Move PAM session setup back to before setuid to user.
          fixes problems on Solaris-drived PAMs.
 2001-02-21 05:53:33 +00:00
Ben Lindstrom 5eff0316a8 - (bal) Fixed OpenSSL rework to use $saved_*. Patch by Tim Rice 
<tim@multitalents.net>
 2001-02-21 02:35:37 +00:00
Ben Lindstrom 866488b340 - (bal) Removed -L/usr/ucblib -R/usr/ucblib for Solaris platform. 2001-02-20 18:22:38 +00:00
Ben Lindstrom a9a29e1bed - deraadt@cvs.openbsd.org 2001/02/19 23:09:05 
[sshd.c]
     clarify message to make it not mention "ident"
 2001-02-20 01:20:47 +00:00
Ben Lindstrom 4ffaad8c33 - (bal) Fix mixed up params to memmove() from Jan 5th in setenv.c and 
getcwd.c.
 2001-02-19 19:54:43 +00:00
Damien Miller 7387fdb6b5 - Update versions in RPM spec files 
- Release 2.5.1p1
 2001-02-19 21:51:49 +11:00
Damien Miller ccdefb600f - (djm) Rework search for OpenSSL location. Skip directories which don't 
exist, don't add -L$ssldir/lib if it doesn't exist. Should help SCO
   with its limit of 6 -L options.
 2001-02-19 12:56:39 +11:00
Ben Lindstrom d95c09cc83 - (bal) Markus' blessing to rename login.[ch] -> sshlogin.[ch] and 
pty.[ch] -> sshpty.[ch]
 2001-02-18 19:13:33 +00:00
Damien Miller c32a5b1a15 Forgot to commit Changelog 
- (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie
   enable with --with-bsd-auth.
 2001-02-18 23:50:38 +11:00
Kevin Steves 4679f5b94f - (stevesk) entropy.c: typo; should be SIGPIPE 2001-02-18 11:34:32 +00:00
Damien Miller 75da9a9e72 - (djm) Update RPM spec files for 2.5.0p1 2001-02-18 15:43:07 +11:00
Damien Miller 877d8ea144 - (djm) SunOS 4.x also needs to define HAVE_BOGUS_SYS_QUEUE_H as it has 
a <sys/queue.h> that lacks the TAILQ_* macros. Patch from Todd C.
   Miller <Todd.Miller@courtesan.com>
 2001-02-18 15:29:28 +11:00
Damien Miller a1072a8e37 - (djm) Move entropy.c over to mysignal() 2001-02-18 15:28:11 +11:00
Damien Miller 722ccb1492 - (djm) SA_INTERRUPT is the converse of SA_RESTART, apply it only for 
SIGALRM.
 2001-02-18 15:18:43 +11:00
Kevin Steves 93c17d9eed - (stevesk) scp.c: use mysignal() for updateprogressmeter() handler. 2001-02-18 03:55:16 +00:00
Kevin Steves eff26f275e - (stevesk) misc.c: cpp rework of SA_(INTERRUPT|RESTART) handling. 2001-02-18 03:42:02 +00:00
Damien Miller df28802cdd - (djm) SCO needs librpc for libwrap. Patch from Tim Rice 
<tim@multitalents.net>
 2001-02-18 13:07:07 +11:00
Damien Miller 0318e2e0fb - (djm) Use SA_INTERRUPT along SA_RESTART if present (equivalent for 
SunOS)
 2001-02-18 13:04:23 +11:00
Damien Miller 8609332558 - (djm) Doc fixes from Pekka Savola <pekkas@netcore.fi> 2001-02-18 12:58:24 +11:00
Damien Miller 22d5aa7553 - (djm) Swapped tests for no_libsocket and no_libnsl in configure.in. 
Patch from Marek Michalkiewicz <marekm@amelek.gda.pl>
 2001-02-18 12:49:57 +11:00
Damien Miller 99e924357e - (djm) Use ttyname() to determine name of tty returned by openpty() 
rather then risking overflow. Patch from Marek Michalkiewicz
   <marekm@amelek.gda.pl>
 2001-02-18 12:49:35 +11:00
Damien Miller b3ffc5f1d4 - (djm) Robustify EGD/PRNGd code in face of socket closures. Patch from 
Todd C. Miller <Todd.Miller@courtesan.com>
 2001-02-18 12:44:29 +11:00
Damien Miller 0a4e27d583 - (djm) Close listen_sock on bind() failures. Patch from Arkadiusz 
Miskiewicz <misiek@pld.ORG.PL>
 2001-02-18 12:36:39 +11:00
Damien Miller 2deb3f64f6 - (djm) Fix my breaking of cygwin builds, Patch from Corinna Vinschen 
<vinschen@redhat.com> and myself.
 2001-02-18 12:30:55 +11:00
Ben Lindstrom 970c009b8e - (Bal) Patch for lack of RA_RESTART in misc.c for mysignal by 
stevesk
 2001-02-17 16:51:07 +00:00
Ben Lindstrom 6dc75f594d - (bal) Patch for fix FCHMOD reference in ftp-client.c by Tim Rice 
<tim@multitalents.net>
 2001-02-17 16:47:47 +00:00
Ben Lindstrom 8dcdeb8421 - markus@cvs.openbsd.org 2001/02/16 14:03:43 
[session.c]
     proper payload-length check for x11 w/o screen-number
 2001-02-16 16:02:14 +00:00
Ben Lindstrom 813f9402ae - markus@cvs.openbsd.org 2001/02/16 13:38:18 
[channel.c]
  remove debug
 2001-02-16 15:56:31 +00:00
Kevin Steves 799bed85ab - (stevesk) set SA_RESTART flag in mysignal() for SIGCHLD; 
needed on Unixware 2.x.
 2001-02-16 14:58:12 +00:00
Damien Miller 79438cc030 - (djm) OpenBSD CVS: 
- markus@cvs.openbsd.org  2001/02/15 16:19:59
     [channels.c channels.h serverloop.c sshconnect.c sshconnect.h]
     [sshconnect1.c sshconnect2.c]
     genericize password padding function for SSH1 and SSH2.
     add stylized echo to 2, too.
 - (djm) Add roundup() macro to defines.h
 2001-02-16 12:34:57 +11:00
Damien Miller 217f567187 - (djm) Set "login ID" on systems with setluid. Only enabled for SCO 
OpenServer for now. Based on patch from svaughan <svaughan@asterion.com>
 2001-02-16 12:12:41 +11:00
Damien Miller 5dfe976cdf - (djm) USE_PIPES for a few more sysv platforms 
- (djm) Cleanup configure.in a little
 - (djm) Ask users to check config.log when we can't find necessary libs
 2001-02-16 12:05:39 +11:00
Damien Miller b5e85a5d94 - (djm) Make gnome-ssh-askpass handle multi-line prompts. Patch from 
Nalin Dahyabhai <nalin@redhat.com>
 - (djm) BSD license for gnome-ssh-askpass (was X11)
 - (djm) KNF on gnome-ssh-askpass
 2001-02-16 11:18:58 +11:00
Damien Miller c547bf1930 - (djm) Mini-configure reorder patch from Tim Rice <tim@multitalents.net> 
Fixes linking on SCO.
 2001-02-16 10:18:12 +11:00
Ben Lindstrom 5805513b17 - (bal) Added DG/UX case and set that they have a broken IPTOS 2001-02-15 18:34:29 +00:00
Ben Lindstrom 4e5a0aa001 - (bal) added '--with-prce' to allow overriding of system regex when 
required (tested by David Dulek <ddulek@fastenal.com>)
 2001-02-15 18:16:22 +00:00
Kevin Steves b7f036fd8c - deraadt@cvs.openbsd.org 2001/02/15 01:38:04 
[serverloop.c]
     indent
 2001-02-15 17:27:15 +00:00
Damien Miller 0921454833 - (djm) Move to Jim's 1.2.0 X11 askpass program 2001-02-15 15:33:17 +11:00
Ben Lindstrom 0a7e354f64 - replaced PATH_MAX in sftp-int.c w/ MAXPATHLEN. 2001-02-15 03:50:49 +00:00
Ben Lindstrom 9d4f2c808c - djm@cvs.openbsd.org 2001/02/14 9:46:03 
[sftp-client.c sftp-int.c sftp.1]
    Fix and document 'preserve modes & times' option ('-p' flag in sftp);
    ok markus@
 2001-02-15 03:22:45 +00:00
Ben Lindstrom 6690494f21 - stevesk@cvs.openbsd.org 2001/02/12 20:53:33 
[sftp-int.c]
    lumask now works with 1 numeric arg; ok markus@, djm@
 2001-02-15 03:19:56 +00:00
Ben Lindstrom 5393f9360d - markus@cvs.openbsd.org 2001/02/12 23:26:20 
[sshd.c]
    missing memset; from solar@openwall.com
 2001-02-15 03:17:13 +00:00
Ben Lindstrom c1ba31fadc - markus@cvs.openssh.org 2001/02/13 22:49:40 
[auth1.c auth2.c]
    setproctitle(user) only if getpwnam succeeds
 2001-02-15 03:14:11 +00:00
Ben Lindstrom f9452513fc - deraadt@cvs.openbsd.org 2001/02/12 22:56:09 
[clientloop.c packet.c ssh-keyscan.c]
     deal with EAGAIN/EINTR selects which were skipped
 2001-02-15 03:12:08 +00:00
Ben Lindstrom d8a9021f36 - markus@cvs.openbsd.org 2001/02/12 16:16:23 
[auth-passwd.c auth.c auth.h auth1.c auth2.c servconf.c servconf.h
      ssh-keygen.c sshd.8]
     PermitRootLogin={yes,without-password,forced-commands-only,no}
     (before this change, root could login even if PermitRootLogin==no)
 2001-02-15 03:08:27 +00:00
Ben Lindstrom 06b33aa0e8 - markus@cvs.openbsd.org 2001/02/11 12:59:25 
[Makefile.in sshd.8 sshconnect2.c readconf.h readconf.c packet.c
      sshd.c ssh.c ssh.1 servconf.h servconf.c myproposal.h kex.h kex.c]
     1) clean up the MAC support for SSH-2
     2) allow you to specify the MAC with 'ssh -m'
     3) or the 'MACs' keyword in ssh(d)_config
     4) add hmac-{md5,sha1}-96
             ok stevesk@, provos@
 2001-02-15 03:01:59 +00:00
Ben Lindstrom 4272ed803f - markus@cvs.openbsd.org 2001/02/12 12:45:06 
[sshconnect1.c]
     fix xmalloc(0), ok dugsong@
 2001-02-15 02:36:46 +00:00
Damien Miller 646aa60b41 - (djm) Clean up PAM namespace. Suggested by Darren Moffat 
<Darren.Moffat@eng.sun.com>
 2001-02-15 11:51:32 +11:00
Damien Miller e8b5b04521 - (djm) Move PAM session setup back to before setuid to user. Fixes 
problems on Solaris-derived PAMs.
 2001-02-15 11:32:15 +11:00
Kevin Steves 7fafa5ccbe - (stevesk) fix for SIA patch, misplaced session_setup_sia() 2001-02-13 18:45:00 +00:00
Damien Miller 92ddb7d6f0 - (djm) Split out and improve OSF SIA auth code. Patch from Chris Adams 
<cmadams@hiwaay.net> with a little modification and KNF.
 2001-02-14 01:25:23 +11:00
Ben Lindstrom 116b6bdda8 - (bal) Missing function prototype in bsd-snprintf.c patch by 
Mark Miller <markm@swoon.net>
 2001-02-13 14:05:59 +00:00
Damien Miller 6b4146ad73 - (djm) Move PAM session initialisation until after fork in sshd. Patch 
from Nalin Dahyabhai <nalin@redhat.com>
 2001-02-14 00:45:51 +11:00
Damien Miller 3dfeee46d7 - (djm) Don't try to close PAM session or delete credentials if the 
session has not been open or credentials not set. Based on patch from
   Andrew Bartlett <abartlet@pcug.org.au>
 2001-02-14 00:43:55 +11:00
Kevin Steves bca8c8f3a1 - (stevesk) auth1.c: fix PAM passwordless check. 2001-02-13 11:26:21 +00:00
Ben Lindstrom 34bb0c7431 - (bal) Use chown() if fchown() does not exist in ftp-server.c patch by 
Tim Rice <tim@multitalents.net>
 2001-02-13 02:40:56 +00:00
Ben Lindstrom 6c92dab9a1 - (bal) Cleaned out bsd-snprintf.c. VARARGS have been banished and 
I did a base KNF over the whe whole file to make it more acceptable.
   (backed out of original patch and removed it from ChangeLog)

This has been a long time coming.  If we decide that we need VARARGS support
we should do it at a higher level, since no where else do we support VARARGS
in the code base.
 2001-02-13 02:18:50 +00:00
Damien Miller d8ab0d4a85 - (djm) Only test -S potential EGD sockets if they exist and are readable. 2001-02-13 12:11:17 +11:00
Ben Lindstrom 5d8520ab76 - (bal) added NeXT work around for bsd-snprintf.c in bsd-nextstep.h. 
- (bal) added TODO item to clean up and sort out 'varargs' from 'stdargs'
 2001-02-12 15:57:18 +00:00
Kevin Steves 7f982bf6c9 - (stevesk) session.c: remove debugging code. 2001-02-12 15:07:52 +00:00
Ben Lindstrom 603bdfd602 - (bal) NCR SVR4 compatiblity provide by Don Bragg <thewizarddon@yahoo.com> 2001-02-12 07:29:45 +00:00
Damien Miller 61ce036c4a - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby 
<mib@unimelb.edu.au>
 2001-02-12 18:02:23 +11:00
Damien Miller f172020510 - (djm) Clean up PCRE text in INSTALL 2001-02-12 11:15:41 +11:00
Damien Miller 070ca31325 - (djm) Update Redhat specfile to allow --define "skip_x11_askpass 
--define "skip_gnome_askpass 1", --define "rh7 1" and make the
   implicit rpm-3.0.5 dependancy explicit. Patch and suggestions fro
   Pekka Savola <pekkas@netcore.fi>
 2001-02-12 09:34:17 +11:00
Kevin Steves bcc862755d - (stevesk) compat.c: more friendly cpp error 2001-02-11 18:49:23 +00:00
Kevin Steves d85bf4b57e - stevesk@cvs.openbsd.org 2001/02/11 06:15:57 
[LICENSE]
     typos and small cleanup; ok deraadt@
 2001-02-11 16:43:05 +00:00
Kevin Steves fad3c513f0 - (stevesk) misc.c: ssh.h not needed. 2001-02-11 14:34:10 +00:00
Kevin Steves 432768612c missed sshconnect.c part of: 
- itojun@cvs.opebsd.org 2001/02/08 10:47:05
     [sshconnect.c sshconnect1.c sshconnect2.c]
     %.30s is too short for IPv6 numeric address.  use %.128s for now.
     markus ok
 2001-02-11 13:56:43 +00:00
Damien Miller bd5817d4ff - (djm) Set PAM_RHOST earlier, patch from Andrew Bartlett 
<abartlet@pcug.org.au>
 2001-02-11 22:35:11 +11:00
Ben Lindstrom e055716a89 - itojun@cvs.opebsd.org 2001/02/08 10:47:05 
[sshconnect1.c sshconnect2.c]
     %.30s is too short for IPv6 numeric address.  use %.128s for now.
     markus ok
 2001-02-11 00:00:24 +00:00
Ben Lindstrom e5b3fb351e - (bal) A bit more whitespace cleanup 2001-02-10 23:56:35 +00:00
Ben Lindstrom aa630def4d - 1.47 Thu Feb 8 23:11:42 GMT 2001 by dugsong 
[serverloop.c sshconnect1.c]
     mitigate SSH1 traffic analysis - from Solar Designer
     <solar@openwall.com>, ok provos@
 2001-02-10 23:44:47 +00:00
Ben Lindstrom a905ecd994 - deraadt 2001/02/07 8:57:26 
[xmalloc.c]
     deal with new ANSI malloc stuff
   - markus@cvs.openbsd.org 2001/02/07 16:46:08
     [xmalloc.c]
     typo in fatal()
   - itojun@cvs.openbsd.org 2001/02/07 18:04:50
     [xmalloc.c]
     fix size_t -> int cast (use u_long).  markus ok
 2001-02-10 23:34:54 +00:00
Ben Lindstrom 70ea46a382 - (bal) uuencode.c resync w/ OpenBSD tree, plus whitespace. 2001-02-10 23:30:16 +00:00
Ben Lindstrom e9d0444524 - djm@cvs.openbsd.org 2001/02/04 21:26:07 
[sshd_config]
     type: ok markus@
   - deraadt@cvs.openbsd.org 2001/02/06 22:07:50
     [sshd_config]
     enable sftp-server by default
 2001-02-10 23:26:35 +00:00
Ben Lindstrom b6c06d9303 - markus@cvs.openbsd.org 2001/02/08 22:35:30 
[sshconnect.c]
     don't connect if batch_mode is true and stricthostkeychecking set to
    'ask'
 2001-02-10 23:21:09 +00:00
Ben Lindstrom c791bebc2a - itojun@cvs.openbsd.org 2001/02/07 18:04:50 
[ssh-keyscan.c]
     fix size_t -> int cast (use u_long).  markus ok
   - markus@cvs.openbsd.org 2001/02/07 22:43:16
     [ssh-keyscan.c]
     s/getline/Linebuf_getline/; from roumen.petrov@skalasoft.com
   - itojun@cvs.openbsd.org 2001/02/09 9:04:59
     [ssh-keyscan.c]
     do not assume malloc() returns zero-filled region.  found by
     malloc.conf=AJ.
 2001-02-10 23:18:11 +00:00
Ben Lindstrom 28072eb10c - itojun@cvs.openbsd.org 2001/02/08 19:30:52 
sync with netbsd tree changes.
     - more strict prototypes, include necessary headers
     - use paths.h/pathnames.h decls
     - size_t typecase to int -> u_long
 2001-02-10 23:13:41 +00:00
Ben Lindstrom be80af7c17 Synced w/ OpenBSD 2001-02-10 23:06:02 +00:00
Ben Lindstrom 7e9aff55bc - (bal) sftp-sever.c '%8lld' to '%8llu' (OpenBSD Sync) 2001-02-10 23:00:22 +00:00
Ben Lindstrom 4f7a64a64f - deraadt@cvs.openbsd.org 2001/02/08 14:39:36 
[readconf.c]
     snprintf
 2001-02-10 22:50:09 +00:00
Ben Lindstrom 9d3a859e8c - markus@cvs.openbsd.org 2001/02/06 22:43:02 
[clientloop.h]
     remove confusing callback code
 2001-02-10 22:44:12 +00:00
Ben Lindstrom b3211a8589 - markus@cvs.openbsd.org 2001/02/08 21:58:28 
[channels.c]
     nuke sprintf, ok deraadt@
 2001-02-10 22:33:19 +00:00
Ben Lindstrom 36d7bd00f9 - markus@cvs.openbsd.org 2001/02/09 13:38:07 
[auth-options.c]
     reset options if no option is given; from han.holl@prismant.nl
 2001-02-10 22:27:19 +00:00
Ben Lindstrom a1ebd89d24 Sync w/ OpenBSD 2001-02-10 22:19:23 +00:00
Ben Lindstrom 03df5bde9c - markus@cvs.openbsd.org 2001/02/06 22:26:17 
[sshconnect2.c]
     do not ask for passphrase in batch mode; report from ejb@ql.org
   - itojun@cvs.opebsd.org 2001/02/08 10:47:05
     [sshconnect2.c]
     %.30s is too short for IPv6 numeric address.  use %.128s for now.
     markus ok
   - markus@cvs.openbsd.org 2001/02/09 12:28:35
     [sshconnect2.c]
     do not free twice, thanks to /etc/malloc.conf
   - markus@cvs.openbsd.org 2001/02/09 17:10:53
     [sshconnect2.c]
     partial success: debug->log; "Permission denied" if no more auth methods
   - markus@cvs.openbsd.org 2001/02/10 12:09:21
     [sshconnect2.c]
     remove some lines
 2001-02-10 22:16:41 +00:00
Ben Lindstrom 8fd10b0f13 - markus@cvs.openbsd.org 2001/02/10 1:46:28 
[ssh.c]
     remove mapping of argv[0] -> hostname
 2001-02-10 22:11:13 +00:00
Ben Lindstrom 5ab6ae1282 - (bal) Synced ssh.1 w/ OpenBSD 2001-02-10 22:08:03 +00:00
Ben Lindstrom 27cb1d061d - djm@cvs.openbsd.org 2001/02/10 0:45:52 
[scp.1]
     Mention that you can quote pathnames with spaces in them
 2001-02-10 21:59:35 +00:00
Ben Lindstrom 10ac33f254 - (bal) Minor correction to sftp-client.c I made. Should return 'status' 
instead of '0'  (from the OpenBSD tree)
 2001-02-10 21:53:40 +00:00
Ben Lindstrom 550bc54cba - danh@cvs.openbsd.org 2001/02/10 0:12:43 
[scp.c]
     revert a small change to allow -r option to work again; ok deraadt@
   - danh@cvs.openbsd.org 2001/02/10 15:14:11
     [scp.c]
     fix memory leak; ok markus@
 2001-02-10 21:50:00 +00:00
Ben Lindstrom fdc9ab08f7 - markus@cvs.openbsd.org 2001/02/10 12:44:02 
[cli.c]
     don't call vis() for \r
 2001-02-10 21:45:02 +00:00
Ben Lindstrom 874a0b364c - markus@cvs.openbsd.org 2001/02/10 1:33:32 
[canohost.c]
     add debug message, since sshd blocks here if DNS is not available
 2001-02-10 21:39:49 +00:00
Ben Lindstrom 075390a3f8 - markus@cvs.openbsd.org 2001/02/8 22:37:10 
[canohost.c]
     remove last call to sprintf; ok deraadt@
 2001-02-10 21:34:46 +00:00
Ben Lindstrom d1f20ec368 - markus@cvs.openbsd.org 2001/02/10 12:52:02 
[auth2.c]
     offer passwd before s/key
 2001-02-10 21:31:53 +00:00
Ben Lindstrom f79aeffe3b - markus@cvs.openbsd.org 2001/02/07 22:35:46 
[auth1.c auth2.c sshd.c]
     move k_setpag() to a central place; ok dugsong@
 2001-02-10 21:27:11 +00:00
Ben Lindstrom c5dbf7fdc9 - (bal) sftp-client.c replace NULL w/ 0 in do_ls() (pending in OpenBSD tree) 2001-02-10 00:37:17 +00:00
Damien Miller 137465b67c Missed these log messages. 
Past my bedtime :)
 2001-02-10 00:47:59 +11:00
Damien Miller d7686fd1fb - (djm) Sync sftp and scp stuff from OpenBSD: 
- djm@cvs.openbsd.org     2001/02/07 03:55:13
     [sftp-client.c]
     Don't free handles before we are done with them. Based on work from
     Corinna Vinschen <vinschen@redhat.com>. ok markus@
   - djm@cvs.openbsd.org     2001/02/06 22:32:53
     [sftp.1]
     Punctuation fix from Pekka Savola <pekkas@netcore.fi>
   - deraadt@cvs.openbsd.org 2001/02/07 04:07:29
     [sftp.1]
     pretty up significantly
   - itojun@cvs.openbsd.org  2001/02/07 06:49:42
     [sftp.1]
     .Bl-.El mismatch.  markus ok
   - djm@cvs.openbsd.org     2001/02/07 06:12:30
     [sftp-int.c]
     Check that target is a directory before doing ls; ok markus@
   - itojun@cvs.openbsd.org  2001/02/07 11:01:18
     [scp.c sftp-client.c sftp-server.c]
     unsigned long long -> %llu, not %qu.  markus ok
   - stevesk@cvs.openbsd.org 2001/02/07 11:10:39
     [sftp.1 sftp-int.c]
     more man page cleanup and sync of help text with man page; ok markus@
   - markus@cvs.openbsd.org  2001/02/07 14:58:34
     [sftp-client.c]
     older servers reply with SSH2_FXP_NAME + count==0 instead of EOF
   - djm@cvs.openbsd.org     2001/02/07 15:27:19
     [sftp.c]
     Don't forward agent and X11 in sftp. Suggestion from Roumen Petrov
     <roumen.petrov@skalasoft.com>
   - stevesk@cvs.openbsd.org 2001/02/07 15:36:04
     [sftp-int.c]
     portable; ok markus@
   - stevesk@cvs.openbsd.org 2001/02/07 15:55:47
     [sftp-int.c]
     lowercase cmds[].c also; ok markus@
   - markus@cvs.openbsd.org  2001/02/07 17:04:52
     [pathnames.h sftp.c]
     allow sftp over ssh protocol 1; ok djm@
   - deraadt@cvs.openbsd.org 2001/02/08 07:38:55
     [scp.c]
     memory leak fix, and snprintf throughout
   - deraadt@cvs.openbsd.org 2001/02/08 08:02:02
     [sftp-int.c]
     plug a memory leak
   - stevesk@cvs.openbsd.org 2001/02/08 10:11:23
     [session.c sftp-client.c]
     %i -> %d
   - stevesk@cvs.openbsd.org 2001/02/08 10:57:59
     [sftp-int.c]
     typo
   - stevesk@cvs.openbsd.org 2001/02/08 15:28:07
     [sftp-int.c pathnames.h]
     _PATH_LS; ok markus@
   - djm@cvs.openbsd.org     2001/02/09 04:46:25
     [sftp-int.c]
     Check for NULL attribs for chown, chmod & chgrp operations, only send
     relevant attribs back to server; ok markus@
 - (djm) Update makefile.in for _PATH_SFTP_SERVER
 2001-02-10 00:40:03 +11:00
Damien Miller 4192c46791 - (djm) Define _PATH_TTY for systems that don't. Report from Lutz 
Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
 2001-02-09 22:55:16 +11:00
Ben Lindstrom 288cc3970c - djm@cvs.openbsd.org 2001/02/06 23:30:28 
[sftp-client.c]
     replace arc4random with counter for request ids; ok markus@
 2001-02-09 02:58:04 +00:00
Ben Lindstrom 1e7d30611b - markus@cvs.openbsd.org 2001/02/06 22:07:42 
[ssh.c]
     fatal() if subsystem fails
   - markus@cvs.openbsd.org 2001/02/06 22:43:02
     [ssh.c]
     remove confusing callback code
   - jakob@cvs.openbsd.org 2001/02/06 23:03:24
     [ssh.c]
     add -1 option (force protocol version 1). ok markus@
   - jakob@cvs.openbsd.org 2001/02/06 23:06:21
     [ssh.c]
     reorder -{1,2,4,6} options. ok markus@
 2001-02-09 02:36:43 +00:00
Ben Lindstrom b0407fc670 - (bal) Missing 'const' in readpass.h 2001-02-09 02:23:10 +00:00
Ben Lindstrom 31ca54aa86 - itojun@cvs.openbsd.org 2001/02/08 19:30:52 
sync with netbsd tree changes.
     - more strict prototypes, include necessary headers
     - use paths.h/pathnames.h decls
     - size_t typecase to int -> u_long
 2001-02-09 02:11:24 +00:00
Damien Miller e9cf357a99 - (djm) Add CVS Id's to files that we have missed 2001-02-09 12:55:35 +11:00
Ben Lindstrom 5b82832222 - markus@cvs.openbsd.org 2001/02/06 22:43:02 
[clientloop.c]
     remove confusing callback code
 2001-02-09 01:34:36 +00:00
Ben Lindstrom f6b7b09a4e - deraadt@cvs.openbsd.org 2001/02/08 14:38:54 
[scp.c]
     memory leak fix, and snprintf throughout
 2001-02-09 01:23:39 +00:00
Damien Miller af13ccacac - (djm) Update spec files 2001-02-09 12:01:51 +11:00
Kevin Steves 4abe4def70 - (stevesk) OpenBSD sync: 
- markus@cvs.openbsd.org  2001/02/08 11:20:01
     [auth2.c]
     strict checking
   - markus@cvs.openbsd.org  2001/02/08 11:15:22
     [version.h]
     update to 2.3.2
   - markus@cvs.openbsd.org  2001/02/08 11:12:30
     [auth2.c]
     fix typo
 2001-02-08 19:16:32 +00:00
Ben Lindstrom fc032bbf2f - (bal) double entry in configure.in. Pointed out by Lutz Jaenicke 
<Lutz.Jaenicke@aet.TU-Cottbus.DE>
 2001-02-08 18:40:09 +00:00
Ben Lindstrom 40f4151e9f - (bal) .c.o rule in openbsd-compat/Makefile.in did not make it to the 
main tree while porting forward.  Pointed out by Lutz Jaenicke
   <Lutz.Jaenicke@aet.TU-Cottbus.DE>
 2001-02-08 18:05:17 +00:00
Ben Lindstrom efe35aad52 - (bal) patch to vis.c to deal with HAVE_VIS right by Robert Mooney 
<rjmooney@mediaone.net>
 2001-02-08 16:34:56 +00:00