Darren Tucker
502d384b74
- markus@cvs.openbsd.org 2003/06/24 08:23:46
...
[auth2-hostbased.c auth2-pubkey.c auth2.c channels.c key.c key.h
monitor.c packet.c packet.h serverloop.c sshconnect2.c sshd.c]
int -> u_int; ok djm@, deraadt@, mouring@
2003-06-28 12:38:01 +10:00
Darren Tucker
674f71d77e
- markus@cvs.openbsd.org 2003/06/23 09:02:44
...
[ssh_config.5]
document EnableSSHKeysign; bugzilla #599 ; ok deraadt@, jmc@
2003-06-28 12:33:12 +10:00
Darren Tucker
a0472e095d
- (dtucker) Have configure refer the user to config.log and
...
contrib/findssl.sh for OpenSSL header/library mismatches.
2003-06-24 20:22:09 +10:00
Darren Tucker
89b249be64
Missed a line cut-and-pasting the ChangeLog
2003-06-22 21:22:04 +10:00
Darren Tucker
b8dae8ece0
20030622
...
- (dtucker) OpenBSD CVS Sync
- djm@cvs.openbsd.org 2003/06/20 05:48:21
[sshd_config]
sync some implemented options; ok markus@
2003-06-22 20:48:45 +10:00
Darren Tucker
91cf261bd5
20030622
...
- (dtucker) OpenBSD CVS Sync
- djm@cvs.openbsd.org 2003/06/20 05:47:58
[sshd_config.5]
sync description of protocol 2 cipher proposal; ok markus
2003-06-22 20:46:53 +10:00
Darren Tucker
a251f809a0
- (dtucker) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2003/06/18 11:28:11
[ssh-rsa.c]
backout last change, since it violates pkcs#1
switch to share/misc/license.template
2003-06-22 20:45:15 +10:00
Darren Tucker
6cf1a2cfe8
- (dtucker) [openbsd-compat/setproctitle.c] Ensure SPT_TYPE is defined before
...
testing its value.
When HAVE_SETPROCTITLE is defined (at least on NetBSD, gcc 2.95.3) the test
"#if SPT_TYPE == SPT_REUSEARGV" is not true (probably because SPT_TYPE or
SPT_REUSEARGV is not defined). This results in the following build error:
$ gcc [flags] setproctitle.c
setproctitle.c: In function `compat_init_setproctitle':
setproctitle.c:102: `argv_start' undeclared (first use in this function)
2003-06-22 18:32:10 +10:00
Darren Tucker
e0194e52ca
- (dtucker) OpenBSD CVS Sync (regress/)
...
- markus@cvs.openbsd.org 2003/06/21 09:14:05
[reconfigure.sh]
missing $SUDO; from dtucker@zip.com.au
- (dtucker) [regress/authorized_keys_root] Remove temp data file from CVS.
2003-06-22 12:33:27 +10:00
Darren Tucker
50cea67222
- (dtucker) OpenBSD CVS Sync (regress/)
...
- markus@cvs.openbsd.org 2003/06/12 15:43:32
[Makefile]
test -HUP; dtucker at zip.com.au
2003-06-18 22:45:34 +10:00
Darren Tucker
76437600b2
- (dtucker) OpenBSD CVS Sync (regress/)
...
- markus@cvs.openbsd.org 2003/06/12 15:40:01
[try-ciphers.sh]
add ctr
2003-06-18 22:43:13 +10:00
Darren Tucker
c43362c89a
- (dtucker) OpenBSD CVS Sync (regress/)
...
- mouring@cvs.openbsd.org 2003/05/15 04:07:12
[sftp-cmds.sh]
Advanced put/get testing for sftp. OK @djm
2003-06-18 22:41:41 +10:00
Darren Tucker
ee5f83d3ea
- (dtucker) OpenBSD CVS Sync (regress/)
...
- markus@cvs.openbsd.org 2003/05/14 22:08:27
[ssh-com-client.sh ssh-com-keygen.sh ssh-com-sftp.sh ssh-com.sh]
test against some new commerical versions
2003-06-18 22:36:48 +10:00
Darren Tucker
a4040f5904
- (dtucker) OpenBSD CVS Sync (regress/)
...
- djm@cvs.openbsd.org 2003/04/04 09:34:22
[Makefile sftp-cmds.sh]
More regression tests, including recent directory rename bug; ok markus@
2003-06-18 22:35:11 +10:00
Darren Tucker
d57a76eec5
- (dtucker) OpenBSD CVS Sync (regress/)
...
- markus@cvs.openbsd.org 2003/04/02 12:21:13
[Makefile]
enable rekey test
2003-06-18 22:32:51 +10:00
Darren Tucker
3a222ac0d0
- (dtucker) [regress/copy.1 regress/copy.2] Remove temp data files from CVS.
2003-06-18 22:21:33 +10:00
Darren Tucker
fc8a7ea202
- (dtucker) [reconfigure.sh rekey.sh sftp-badcmds.sh]
...
Import new regression tests from OpenBSD
2003-06-18 22:18:57 +10:00
Damien Miller
0275b52387
- markus@cvs.openbsd.org 2003/06/17 18:14:23
...
[cipher-ctr.c]
use license from /usr/share/misc/license.template for new code
2003-06-18 20:29:35 +10:00
Damien Miller
80163e1b72
- markus@cvs.openbsd.org 2003/06/16 10:22:45
...
[ssh-add.c]
print out key comment on each prompt; make ssh-askpass more useable; ok djm@
2003-06-18 20:29:18 +10:00
Damien Miller
8c1d2e3926
- markus@cvs.openbsd.org 2003/06/16 08:22:35
...
[ssh-rsa.c]
make sure the signature has at least the expected length (don't
insist on len == hlen + oidlen, since this breaks some smartcards)
bugzilla #592 ; ok djm@
2003-06-18 20:29:01 +10:00
Damien Miller
56a0bb07c4
- markus@cvs.openbsd.org 2003/06/12 19:12:03
...
[scard.c scard.h ssh-agent.c ssh.c]
add sc_get_key_label; larsch at trustcenter.de; bugzilla#591
2003-06-18 20:28:40 +10:00
Damien Miller
b2cdcb50a2
- nino@cvs.openbsd.org 2003/06/12 15:34:09
...
[scp.c]
Typo. Ok markus@.
2003-06-18 20:26:34 +10:00
Damien Miller
116aabbb66
- djm@cvs.openbsd.org 2003/06/12 12:22:47
...
[LICENCE]
mention more copyright holders; ok markus@
2003-06-18 20:26:13 +10:00
Damien Miller
469954debd
- (djm) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2003/06/12 07:57:38
[monitor.c sshlogin.c sshpty.c]
typos; dtucker at zip.com.au
2003-06-18 20:25:33 +10:00
Damien Miller
53950b68bf
- (djm) Update license on fake-rfc2553.[ch]; ok itojun@
2003-06-14 08:43:22 +10:00
Damien Miller
af63951c57
- (djm) Put licenses on substantial header files
2003-06-11 22:51:32 +10:00
Damien Miller
141efa7036
- (djm) Mention portable copyright holders in LICENSE
2003-06-11 22:50:56 +10:00
Damien Miller
4bfeb14742
- (djm) Sync LICENSE against OpenBSD
2003-06-11 22:08:36 +10:00
Damien Miller
d94f20d28e
- djm@cvs.openbsd.org 2003/06/11 11:18:38
...
[authfd.c authfd.h ssh-add.c ssh-agent.c]
make agent constraints (lifetime, confirm) work with smartcard keys;
ok markus@
2003-06-11 22:06:33 +10:00
Damien Miller
0e1b937f13
- jakob@cvs.openbsd.org 2003/06/11 10:18:47
...
[dns.c]
sync with check_host_key() change
2003-06-11 22:05:45 +10:00
Damien Miller
7392ae6270
- jakob@cvs.openbsd.org 2003/06/11 10:16:16
...
[sshconnect.c]
clean up check_host_key() and improve SSHFP feedback. ok markus@
2003-06-11 22:05:25 +10:00
Damien Miller
2b92d32e19
- deraadt@cvs.openbsd.org 2003/06/10 22:20:52
...
[packet.c progressmeter.c]
mostly ansi cleanup; pval ok
2003-06-11 22:05:06 +10:00
Damien Miller
f1ce505daf
- jmc@cvs.openbsd.org 2003/06/10 09:12:11
...
[scp.1 sftp-server.8 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5]
[sshd.8 sshd_config.5 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
- section reorder
- COMPATIBILITY merge
- macro cleanup
- kill whitespace at EOL
- new sentence, new line
ssh pages ok markus@
2003-06-11 22:04:39 +10:00
Damien Miller
78f2e5ca98
- (djm) Re-merge OpenSC info into README.smartcard
2003-06-10 21:09:09 +10:00
Damien Miller
c18c06e131
- (djm) Sync README.smartcard with OpenBSD -current
2003-06-10 18:55:22 +10:00
Darren Tucker
400b8786d6
- (dtucker) [uidswap.c] Fix setreuid and add missing args to fatal(). ok djm@
2003-06-06 10:46:04 +10:00
Darren Tucker
881753bef2
- (dtucker) Define EAI_NONAME in fake-rfc2553.h (used by fake-rfc2553.c).
2003-06-05 22:20:11 +10:00
Darren Tucker
4aff13f1e7
- (dtucker) Add includes.h to fake-rfc2553.c so it will build.
2003-06-05 19:37:30 +10:00
Damien Miller
76b5c8a83a
- (djm) Bug #589 - scard-opensc: load only keys with a private keys
...
Patch from larsch@trustcenter.de
2003-06-05 19:19:35 +10:00
Damien Miller
f49078dfdf
- (djm) Bug #588 - Add scard-opensc.o back to Makefile.in
...
Patch from larsch@trustcenter.de
2003-06-05 18:53:42 +10:00
Damien Miller
c28e38d23a
- (djm) Merge all the openbsd/fake-* into fake-rfc2553.[ch]
2003-06-05 18:52:47 +10:00
Damien Miller
b95bb7f9b1
- (djm) Don't use xmalloc() or pull in toplevel headers in fake-* code
2003-06-05 10:04:12 +10:00
Damien Miller
5fe46a45c8
- (djm) Implement paranoid priv dropping checks, based on:
...
"SetUID demystified" - Hao Chen, David Wagner and Drew Dean
Proceedings of USENIX Security Symposium 2002
2003-06-05 09:53:31 +10:00
Damien Miller
10eac0cf8f
- (djm) Support AI_NUMERICHOST in fake-getaddrinfo.c. Needed for recent
...
canohost.c changes.
2003-06-05 09:48:32 +10:00
Damien Miller
0cbb9dea05
- (djm) Always use mysignal() for SIGALRM
2003-06-04 22:56:15 +10:00
Damien Miller
cc685c1cbe
- djm@cvs.openbsd.org 2003/06/04 12:41:22
...
[sftp.c]
kill ssh process on receipt of signal; ok markus@
2003-06-04 22:51:38 +10:00
Damien Miller
b69aaa8db7
- djm@cvs.openbsd.org 2003/06/04 12:40:39
...
[scp.c]
kill ssh process upon receipt of signal, bz #241 .
based on patch from esb AT hawaii.edu; ok markus@
2003-06-04 22:51:24 +10:00
Damien Miller
65d1f5765f
- djm@cvs.openbsd.org 2003/06/04 12:18:49
...
[scp.c]
ansify; ok markus@
2003-06-04 22:51:08 +10:00
Damien Miller
9fc7c699af
- djm@cvs.openbsd.org 2003/06/04 12:03:59
...
[serverloop.c]
remove bitrotten commet; ok markus@
2003-06-04 22:50:54 +10:00
Damien Miller
4c322482bb
- (djm) Update to fix of bug #584 : lock card before return.
...
From larsch@trustcenter.de
2003-06-04 22:12:17 +10:00
Damien Miller
31b3a0a98f
- djm@cvs.openbsd.org 2003/06/04 10:23:48
...
[sshd.c]
remove duplicated group-dropping code; ok markus@
2003-06-04 20:32:12 +10:00
Damien Miller
941ac459ce
- (djm) OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2003/06/04 08:25:18
[sshconnect.c]
disable challenge/response and keyboard-interactive auth methods
upon hostkey mismatch. based on patch from fcusack AT fcusack.com.
bz #580 ; ok markus@
2003-06-04 20:31:53 +10:00
Damien Miller
2527f5755a
- (djm) Bug #584 : scard-opensc.c doesn't work without PIN. Patch from
...
larsch@trustcenter.de ; ok markus@
2003-06-04 19:22:06 +10:00
Damien Miller
485397c48d
- (djm) Bug #577 - wrong flag in scard-opensc.c sc_private_decrypt.
...
ok markus@
2003-06-04 19:15:10 +10:00
Damien Miller
865173ee03
- (djm) Bug #573 - Remove unneeded Krb headers and compat goop. Patch from
...
simon@sxw.org.uk (Also matches a change in OpenBSD a while ago)
2003-06-04 19:06:59 +10:00
Damien Miller
d311c4e54b
change "No more 4-term BSD licenses in our tree" to
...
"No more 4-term BSD licenses in linked code"
mdoc2man.pl is 4-term BSDL
2003-06-03 13:09:16 +10:00
Damien Miller
dafb12ed28
a - millert@cvs.openbsd.org 2003/06/03 02:56:16
...
[scp.c]
Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.
2003-06-03 13:06:18 +10:00
Darren Tucker
eb28cbc399
- (dtucker) [port-aix.c bsd-cray.c] Fix uses of verify_reverse_mapping.
2003-06-03 12:45:27 +10:00
Damien Miller
048d88d5aa
trim prior to 3.6p1
2003-06-03 12:43:14 +10:00
Damien Miller
329638e49c
- (djm) Sync openbsd-compat with OpenBSD CVS.
...
- No more 4-term BSD licenses in our tree
2003-06-03 12:12:50 +10:00
Damien Miller
3a961dc0d3
- (djm) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2003/06/02 09:17:34
[auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c]
[canohost.c monitor.c servconf.c servconf.h session.c sshd_config]
[sshd_config.5]
deprecate VerifyReverseMapping since it's dangerous if combined
with IP based access control as noted by Mike Harding; replace with
a UseDNS option, UseDNS is on by default and includes the
VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@
ok deraadt@, djm@
- (djm) Fix portable-specific uses of verify_reverse_mapping too
2003-06-03 10:25:48 +10:00
Damien Miller
35276253a6
- (djm) Replace setproctitle replacement with code derived from
...
UCB sendmail
2003-06-03 10:14:28 +10:00
Damien Miller
eacbb4fcc1
- jakob@cvs.openbsd.org 2003/06/02 08:31:10
...
[ssh_config.5]
VerifyHostKeyDNS is v2 only. ok markus@
2003-06-02 19:10:41 +10:00
Damien Miller
61d3680aca
- deraadt@cvs.openbsd.org 2003/05/29 16:58:45
...
[sshd.c uidswap.c]
seteuid and setegid; markus ok
2003-06-02 19:09:48 +10:00
Damien Miller
ab2db41b61
- djm@cvs.openbsd.org 2003/05/26 12:54:40
...
[sshconnect.c]
fix format strings; ok markus@
2003-06-02 19:09:13 +10:00
Damien Miller
f46844214d
- (djm) Sync license on openbsd-compat/bindresvport.c with OpenBSD CVS
2003-06-02 18:59:08 +10:00
Damien Miller
dcc8312a19
- (djm) Fix use of macro before #define in cipher-aes.c
2003-06-02 18:57:59 +10:00
Damien Miller
dba5950820
- (djm) Remove "noip6" option from RedHat spec file. This may now be
...
set at runtime using AddressFamily option.
2003-06-02 17:43:19 +10:00
Tim Rice
237ca4ab08
openbsd-compat/xmmap.[ch] License clarifications. Add missing CVS ID.
2003-06-01 19:25:27 -07:00
Damien Miller
f2e3e9deba
- (djm) Always use saved_argv in sshd.c as compat_init_setproctitle may
...
clobber
2003-06-02 12:15:54 +10:00
Damien Miller
f3bff94957
- (djm) Fix segv from bad reordering in auth-pam.c
2003-06-02 12:13:40 +10:00
Darren Tucker
2972d6c045
- (dtucker) Define SSHD_ACQUIRES_CTTY for NCR MP-RAS and Reliant Unix.
...
I'm pretty sure these are required. I also want to add -D_XOPEN_SOURCE=1
-D_XOPEN_SOURCE_EXTENDED=1 to CPPFLAGS for MP-RAS but I haven't had confirmation
that it will not break anything else.
2003-05-30 17:43:42 +10:00
Darren Tucker
3cb84e5ec8
- (dtucker) Add missing semicolon in md5crypt.c, patch from openssh at
...
roumenpetrov.info
2003-05-30 16:58:22 +10:00
Damien Miller
a6a7c19dcb
- (djm) Avoid auth2-chall.c warning when compiling without
...
PAM, BSD_AUTH and SKEY
2003-05-26 21:36:13 +10:00
Damien Miller
04bd8b0bcc
- djm@cvs.openbsd.org 2003/05/24 09:30:40
...
[authfile.c monitor.c sftp-common.c sshpty.c]
cast some types for printing; ok markus@
2003-05-25 14:38:33 +10:00
Damien Miller
c11fe255ab
- (djm) OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2003/05/24 09:02:22
[log.c]
pass logged data through strnvis; ok markus
2003-05-25 14:38:02 +10:00
Darren Tucker
6014578b90
- (dtucker) Correct --osfsia in INSTALL. Patch by skeleten at shillest.net
2003-05-24 11:41:16 +10:00
Damien Miller
08293fa435
- djm@cvs.openbsd.org 2003/05/23 08:29:30
...
[sshconnect.c]
fix leak; ok markus@
2003-05-23 18:44:41 +10:00
Damien Miller
fbf486b4a6
- jmc@cvs.openbsd.org 2003/05/20 12:09:31
...
[ssh.1 ssh_config.5 sshd.8 sshd_config.5 ssh-keygen.1]
new sentence, new line
2003-05-23 18:44:23 +10:00
Damien Miller
5067792a72
- (djm) OpenBSD CVS Sync
...
- jmc@cvs.openbsd.org 2003/05/20 12:03:35
[sftp.1]
- new sentence, new line
- added .Xr's
- typos
ok djm@
2003-05-23 18:44:04 +10:00
Damien Miller
d419bdae77
- (djm) Use VIS_SAFE on logged strings rather than default strnvis
...
encoding (which encodes many more characters)
2003-05-23 18:43:40 +10:00
Damien Miller
1340ec297b
- (djm) Configure logic to detect syslog_r and friends
2003-05-20 09:24:42 +10:00
Damien Miller
74a3442d10
- deraadt@cvs.openbsd.org 2003/05/18 23:22:01
...
[log.c]
use syslog_r() in a signal handler called place; markus ok
2003-05-20 09:24:17 +10:00
Damien Miller
eb0e969a4f
- (djm) Sync auth-pam.h with what we actually implement
2003-05-19 11:28:44 +10:00
Damien Miller
5b5ca19ef0
- (djm) KNF on auth-sia.[ch]
2003-05-19 00:50:02 +10:00
Damien Miller
e7fb103192
- (djm) KNF on md5crypt.c
2003-05-19 00:46:46 +10:00
Damien Miller
317412502b
- (djm) Big KNF on openbsd-compat/
2003-05-19 00:13:38 +10:00
Damien Miller
e323df6c48
- (djm) Sync openbsd-compat/ with OpenBSD CVS head
2003-05-18 22:24:09 +10:00
Damien Miller
0b8e9006d8
- (djm) Tidy and trim TODO
2003-05-18 21:44:07 +10:00
Damien Miller
f5399c24dc
- markus@cvs.openbsd.org 2003/05/17 04:27:52
...
[cipher.c cipher-ctr.c myproposal.h]
experimental support for aes-ctr modes from
http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt
ok djm@
2003-05-18 20:53:59 +10:00
Damien Miller
a9825785e8
- itojun@cvs.openbsd.org 2003/05/17 03:25:58
...
[auth-rhosts.c]
just in case, put numbers to sscanf %s arg.
2003-05-18 20:53:10 +10:00
Damien Miller
7e1bbc55af
- (djm) Remove IPv4 by default hack now that we can specify AF in config
2003-05-18 20:52:40 +10:00
Damien Miller
20a8f97b03
- djm@cvs.openbsd.org 2003/05/16 03:27:12
...
[readconf.c ssh_config ssh_config.5 ssh-keysign.c]
add AddressFamily option to ssh_config (like -4, -6 on commandline).
Portable bug #534 ; ok markus@
2003-05-18 20:50:30 +10:00
Damien Miller
25d9342f04
- (djm) Return of the dreaded PAM_TTY_KLUDGE, which went missing in
...
recent merge
2003-05-18 20:45:47 +10:00
Ben Lindstrom
4c9e9ab165
- (bal) strcat -> strlcat on openbsd-compat/realpath.c (rev 1.8 OpenBSD)
2003-05-18 01:22:43 +00:00
Damien Miller
e27c6cc3ad
- (djm) Guard free_pam_environment against NULL argument. Works around
...
HP/UX PAM problems debugged by dtucker
2003-05-16 18:21:01 +10:00
Damien Miller
c46b6bc4f7
- (djm) A few type mismatch fixes from Bug #565
2003-05-16 15:51:44 +10:00
Damien Miller
6ac2c48a19
- (djm) Add warning for UsePAM when built without PAM support
2003-05-16 11:42:35 +10:00
Damien Miller
b78d5eb6c5
- djm@cvs.openbsd.org 2003/05/15 14:55:25
...
[readconf.c readconf.h ssh_config ssh_config.5 sshconnect.c]
add a ConnectTimeout option to ssh, based on patch from
Jean-Charles Longuet (jclonguet at free.fr); portable #207 ok markus@
2003-05-16 11:39:04 +10:00
Damien Miller
99b4b88aba
- markus@cvs.openbsd.org 2003/05/15 14:09:21
...
[auth2-krb5.c]
fix 64bit issue; report itojun@
2003-05-16 11:38:46 +10:00