2dc074ef4b
- markus@cvs.openbsd.org 2003/04/01 10:10:23
...
[clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
[readconf.h serverloop.c sshconnect2.c]
rekeying bugfixes and automatic rekeying:
* both client and server rekey _automatically_
(a) after 2^31 packets, because after 2^32 packets
the sequence number for packets wraps
(b) after 2^(blocksize_in_bits/4) blocks
(see: draft-ietf-secsh-newmodes-00.txt)
(a) and (b) are _enabled_ by default, and only disabled for known
openssh versions, that don't support rekeying properly.
* client option 'RekeyLimit'
* do not reply to requests during rekeying
- markus@cvs.openbsd.org 2003/04/01 10:22:21
[clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
[readconf.h serverloop.c sshconnect2.c]
backout rekeying changes (for 3.6.1)
2003-04-01 21:43:39 +10:00
495dca3518
- (djm) OpenBSD CVS Sync
...
- jmc@cvs.openbsd.org 2003/03/28 10:11:43
[scp.1 sftp.1 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5 sshd_config.5]
[ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
- killed whitespace
- new sentence new line
- .Bk for arguments
ok markus@
2003-04-01 21:42:14 +10:00
f18462f5bf
license from samba
2003-04-01 21:31:56 +10:00
b3207e8061
- (djm) OpenBSD CVS Sync
...
- deraadt@cvs.openbsd.org 2003/03/26 04:02:51
[sftp-server.c]
one last fix to the tree: race fix broke stuff; pr 3169;
srp@srparish.net , help from djm
2003-03-26 16:01:11 +11:00
68d893dfed
- (djm) Fix getpeerid support for 64 bit BE systems. From
...
Arnd Bergmann <arndb@de.ibm.com>
2003-03-25 09:07:52 +11:00
62b6b17080
- Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
...
Report from murple@murple.net , diagnosis from dtucker@zip.com.au
2003-03-24 13:35:58 +11:00
b062c293e0
- (djm) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2003/03/23 19:02:00
[monitor.c]
unbreak rekeying for privsep; ok millert@
2003-03-24 09:12:09 +11:00
009b23f6ab
[contrib/caldera/openssh.spec] workaround RPM quirk. Fix %files section
2003-03-20 20:50:41 -08:00
c8c548d248
- (bal) Disable Privsep for Tru64 after pre-authentication due to issues
...
with SIA. Also, clean up of tru64 support patch by Chris Adams
<cmadams@hiwaay.net>
2003-03-21 01:18:09 +00:00
a5a2648b81
- (bal) Collection of Cray patches (bsd-cray.h fix for CRAYT3E and improved
...
guessing rules)
2003-03-21 01:05:37 +00:00
d54d9382a4
- (bal) scp.c 'limit' conflicts with Cray. Rename to 'limitbw'
2003-03-21 00:55:32 +00:00
5bd6eb71da
- (bal) The days of lack of int64_t support are over. Sorry kids.
2003-03-21 00:34:34 +00:00
5efd43088b
Build gtk2 askpass by default (instead of old GNOME one)
2003-03-20 11:05:10 +11:00
334821518e
Bump RPM versions
2003-03-20 10:52:14 +11:00
4874c32531
- markus@cvs.openbsd.org 2003/03/17 11:43:47
...
[version.h]
enter 3.6
2003-03-20 10:11:34 +11:00
05f5578e1f
- (djm) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2003/03/17 10:38:38
[progressmeter.c]
don't print \n if backgrounded; from ho@
2003-03-20 10:08:05 +11:00
4e4dc561ae
[configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
...
add nanosleep(). testing/corrections by Darren Tucker <dtucker@zip.com.au>
2003-03-18 10:21:40 -08:00
cafbcc7334
- (djm) Fix return value checks for RAND_bytes. Report from
...
Steve G <linux_4ever@yahoo.com>
2003-03-17 16:13:53 +11:00
c51d0735a4
- markus@cvs.openbsd.org 2003/03/13 11:44:50
...
[ssh-agent.c]
ssh-agent is similar to ssh-keysign (allows other processes to use
private rsa keys). however, it gets key over socket and not from
a file, so we have to do blinding here as well.
2003-03-15 11:37:09 +11:00
ed33d3b4d2
- (djm) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2003/03/13 11:42:19
[authfile.c ssh-keysign.c]
move RSA_blinding_on to generic key load method
2003-03-15 11:36:18 +11:00
c1365e19b0
Fix bug #
2003-03-13 09:42:51 +11:00
c9c1d3757f
- (djm) AIX package builder update from dtucker@zip.com.au
2003-03-10 12:10:45 +11:00
933cc8fb9c
- (djm) Bug #245 : TTY problems on Solaris. Fix by stevesk@ and
...
dtucker@zip.com.au
2003-03-10 11:38:10 +11:00
f211efc690
- (djm) One more portable-specific one from dlheine@suif.Stanford.EDU/
...
CLOUSEAU
2003-03-10 11:23:06 +11:00
0011138d47
- (djm) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2003/03/05 22:33:43
[channels.c monitor.c scp.c session.c sftp-client.c sftp-int.c]
[sftp-server.c ssh-add.c sshconnect2.c]
fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@
2003-03-10 11:21:17 +11:00
73942b9d54
duh
2003-02-25 14:32:16 +11:00
17bbc45a11
me <- idiot
2003-02-25 10:25:12 +11:00
ca49a97788
- (djm) Fix some compile errors spotted by dtucker and his fabulous
...
tinderbox
2003-02-25 10:22:35 +11:00
fe1f14375a
- (djm) Bug #456 : Support for NEC SX6 with Unicos; from wendyp@cray.com
2003-02-24 15:45:42 +11:00
1a3ccb07c5
- (djm) Bug #494 : Allow multiple accounts on Windows 9x/Me;
...
From vinschen@redhat.com
2003-02-24 13:04:01 +11:00
8d8168a255
- (djm) Rest of Bug #499 : Import a basename() function from OpenBSD libc
2003-02-24 12:55:55 +11:00
b16f874d89
- (djm) Most of Bug #499 : Cygwin compile fixes for new progressmeter
2003-02-24 12:47:15 +11:00
30947c7287
- (djm) Bug #501 : gai_strerror should return char*;
...
fix from dtucker@zip.com.au
2003-02-24 12:35:08 +11:00
d194048f57
- (djm) Add new object files to Makefile and reorder
2003-02-24 12:18:46 +11:00
543402108e
- mpech@cvs.openbsd.org 2003/02/21 10:34:48
...
[auth-krb4.c]
...sizeof(&adat.session) is not good here.
henning@, deraadt@, millert@
2003-02-24 12:05:18 +11:00
9f82c8fa4f
- markus@cvs.openbsd.org 2003/02/21 09:05:53
...
[servconf.c]
print sshd_config filename in debug2 mode.
2003-02-24 12:04:33 +11:00
06ebedf365
- markus@cvs.openbsd.org 2003/02/16 17:30:33
...
[monitor.c monitor_wrap.c]
fix permitrootlogin forced-commands-only for privsep; bux #387 ; ok provos@
2003-02-24 12:03:38 +11:00
8e7fb33523
- markus@cvs.openbsd.org 2003/02/16 17:09:57
...
[kex.c kexdh.c kexgex.c kex.h sshconnect2.c sshd.c ssh-keyscan.c]
split kex into client and server code, no need to link
server code into the client; ok provos@
2003-02-24 12:03:03 +11:00
1587fb8a17
- markus@cvs.openbsd.org 2003/02/12 21:39:50
...
[crc32.c crc32.h]
replace crc32.c with a BSD licensed version; noted by David Turner
2003-02-24 12:02:12 +11:00
e8a240f966
- markus@cvs.openbsd.org 2003/02/12 09:33:04
...
[key.c key.h ssh-dss.c ssh-rsa.c]
merge ssh-dss.h ssh-rsa.h into key.h; ok deraadt@
2003-02-24 12:01:40 +11:00
7b406276c4
- markus@cvs.openbsd.org 2003/02/10 11:51:47
...
[ssh-add.1]
xref sshd_config.5 (not sshd.8); mark@summersault.com ; bug #490
2003-02-24 12:00:16 +11:00
556f9315a5
- markus@cvs.openbsd.org 2003/02/06 21:22:43
...
[auth1.c auth2.c]
undo broken fix for #387 , fixes #486
2003-02-24 11:59:26 +11:00
9e51a73122
- markus@cvs.openbsd.org 2003/02/06 09:29:18
...
[sftp-server.c]
fix races in rename/symlink; from Tony Finch; ok djm@
2003-02-24 11:58:44 +11:00
9f1e33a6b2
- markus@cvs.openbsd.org 2003/02/06 09:27:29
...
[ssh.c ssh_config.5]
support 'ProxyCommand none'; bugzilla #433 ; binder@arago.de ; ok djm@
2003-02-24 11:57:32 +11:00
97f39ae810
- markus@cvs.openbsd.org 2003/02/06 09:26:23
...
[session.c]
missing call to setproctitle() after authentication; ok provos@
2003-02-24 11:57:01 +11:00
61f08ac35a
- markus@cvs.openbsd.org 2003/02/05 09:02:28
...
[readconf.c]
simplify ProxyCommand parsing, remove strcat/xrealloc; ok henning@, djm@
2003-02-24 11:56:27 +11:00
b7df3af154
- markus@cvs.openbsd.org 2003/02/04 09:33:22
...
[monitor.c monitor_wrap.c]
skey/bsdauth: use 0 to indicate failure instead of -1, because
the buffer API only supports unsigned ints.
2003-02-24 11:55:46 +11:00
386f1f3e6c
- markus@cvs.openbsd.org 2003/02/04 09:32:08
...
[key.c]
better debug3 message
2003-02-24 11:54:57 +11:00
e8cea9e755
- markus@cvs.openbsd.org 2003/02/03 08:56:16
...
[sshpty.c]
don't call error() for readonly /dev; from soekris list; ok mcbride,
henning, deraadt.
2003-02-24 11:54:10 +11:00
babb47a059
- markus@cvs.openbsd.org 2003/02/02 10:56:08
...
[kex.c]
add support for key exchange guesses; based on work by
avraham.fraenkel@commatch.com ; fixes bug #148 ; ok deraadt@
2003-02-24 11:53:32 +11:00
Damien Miller
Tim Rice
Ben Lindstrom