Commit Graph

4196 Commits

Author SHA1 Message Date
Damien Miller 5d77105527 - stevesk@cvs.openbsd.org 2006/02/07 03:47:05
[hostfile.c]
     "packet.h" not needed
2006-03-15 11:12:13 +11:00
Damien Miller 972c84b800 - stevesk@cvs.openbsd.org 2006/02/07 01:52:50
[sshtty.c]
     "log.h" not needed
2006-03-15 11:11:56 +11:00
Damien Miller 99bd21e3fe - stevesk@cvs.openbsd.org 2006/02/07 01:42:00
[channels.c clientloop.c clientloop.h includes.h packet.h]
     [serverloop.c sshpty.c sshpty.h sshtty.c ttymodes.c]
     move #include <termios.h> out of includes.h; ok markus@
2006-03-15 11:11:28 +11:00
Damien Miller 2eb6340ddd - stevesk@cvs.openbsd.org 2006/02/07 01:18:09
[includes.h ssh-agent.c ssh-keyscan.c sshconnect2.c]
     move #include <sys/queue.h> out of includes.h; ok markus@
2006-03-15 11:09:42 +11:00
Damien Miller 015cd79ac5 - stevesk@cvs.openbsd.org 2006/02/07 01:08:04
[auth-rhosts.c includes.h]
     move #include <netgroup.h> out of includes.h; ok markus@
2006-03-15 11:08:02 +11:00
Damien Miller e93eaaa0d1 - jmc@cvs.openbsd.org 2006/02/06 21:44:47
[ssh.1]
     make this a little less ambiguous...
2006-03-15 11:05:59 +11:00
Damien Miller 9f67a21de6 - msf@cvs.openbsd.org 2006/02/06 15:54:07
[ssh.1]
     - typo fix
     ok jmc@
2006-03-15 11:05:35 +11:00
Darren Tucker d1450dbe2a - (dtucker) [configure.ac] Bug #1171: Don't use printf("%lld", longlong)
since not all platforms support it.  Instead, use internal equivalent while
   computing LLONG_MIN and LLONG_MAX.  Remove special case for alpha-dec-osf*
   as it's no longer required.  Tested by Bernhard Simon, ok djm@
2006-03-13 19:06:51 +11:00
Darren Tucker f35014af79 typo 2006-03-04 09:00:19 +11:00
Darren Tucker 890909ec48 - (dtucker) [gss-serv-krb5.c] Bug #1166: Correct #ifdefs for gssapi_krb5.h
includes.  Patch from gentoo.riverrat at gmail.com.
2006-03-04 08:59:39 +11:00
Darren Tucker 18614c254d - (dtucker) [contrib/cygwin/ssh-host-config] Require use of lastlog as a
file rather than directory, required as Cygwin will be importing lastlog(1).
   Also tightens up permissions on the file.  Patch from vinschen@redhat.com.
2006-03-04 08:50:31 +11:00
Darren Tucker 54b75fe742 - (dtucker) [configure.ac] Bug #1156: QNX apparently needs SSHD_ACQUIRES_CTTY
patch from kraai at ftbfs.org.
2006-02-26 12:31:48 +11:00
Darren Tucker a4904f7bf1 - (dtucker) [sshd_config sshd_config.5] Update UsePAM to reflect current
reality.  Pointed out by tryponraj at gmail.com.
2006-02-23 21:35:30 +11:00
Darren Tucker 94413cf32b - (dtucker) [openbsd-compat/openssl-compat.{c,h}] Minor tidy up: only
compile in compat code if required.
2006-02-22 22:24:47 +11:00
Darren Tucker 3322e0d421 - (dtucker) [openbsd-compat/openssl-compat.h] Prevent warning about
redefinition of SSLeay_add_all_algorithms.
2006-02-22 00:00:27 +11:00
Darren Tucker fabdb6c290 - (dtucker) [INSTALL configure.ac openbsd-compat/openssl-compat.{c,h}]
Add optional enabling of OpenSSL's (hardware) Engine support, via
   configure --with-ssl-engine.  Based in part on a diff by michal at
   logix.cz.
2006-02-20 20:17:35 +11:00
Darren Tucker 4881c371ce - (dtucker) [Makefile.in configure.ac, added openbsd-compat/regress/]
Add first attempt at regress tests for compat library.  ok djm@
2006-02-19 22:50:20 +11:00
Tim Rice bf209f5901 - (tim) [buildpkg.sh.in] Make the names consistent.
s/pkg_post_make_install_fixes.sh/pkg-post-make-install-fixes.sh/ OK dtucker@
2006-02-13 12:46:44 -08:00
Darren Tucker 6163350eb9 - (dtucker) [README version.h contrib/caldera/openssh.spec
contrib/redhat/openssh.spec contrib/suse/openssh.spec] Bump version
   strings to match 4.3p2 release.
2006-02-12 16:48:56 +11:00
Tim Rice 2f993465d4 - (tim) [configure.ac] Bug #1149. Disable /etc/default/login check for QNX. 2006-02-11 18:37:48 -08:00
Darren Tucker 84af61555a - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Make loop counter unsigned
to silence compiler warning, from vinschen at redhat.com.
2006-02-12 11:59:08 +11:00
Darren Tucker 988b3fd161 - (dtucker) [configure.ac] Typo in Ultrix and NewsOS sections (NEED_SETPRGP
-> NEED_SETPGRP), reported by Berhard Simon.  ok tim@
2006-02-08 22:11:27 +11:00
Tim Rice 83d2f5fedf - (tim) [session.c] Logout records were not updated on systems with
post auth privsep disabled due to bug 1086 changes. Analysis and patch
   by vinschen at redhat.com. OK tim@, dtucker@.
2006-02-07 15:17:44 -08:00
Tim Rice ac9b0609e1 - (tim) [configure.ac] Remove unnecessary tests for net/if.h and
netinet/in_systm.h. OK dtucker@.
2006-02-05 11:27:10 -08:00
Tim Rice 70335a6b5f - (tim) [configure.ac] Bug #1149. Changes in QNX section only. Patch by
kraai at ftbfs.org.
2006-02-04 17:42:58 -08:00
Tim Rice 0daad78fab - (tim) [configure.ac] Add AC_REVISION. Add sys/time.h to lastlog.h test
for Solaris. OK dtucker@.
2006-02-04 17:33:55 -08:00
Tim Rice fd80ddcb23 - (tim) [configure.ac] test for egrep (AC_PROG_EGREP) before first
AC_CHECK_HEADERS test. Without it, if AC_CHECK_HEADERS is first run
   by a platform specific check, builtin standard includes tests will be
   skipped on the other platforms.
   Analysis and suggestion by vinschen at redhat.com, patch by dtucker@.
   OK tim@, djm@.
2006-02-02 19:11:56 -08:00
Darren Tucker cc7c212830 - (dtucker) [configure.ac] Bug #1148: Fix "crippled AES" test so that it
works with picky compilers.  Patch from alex.kiernan at thus.net.
2006-02-02 18:44:19 +11:00
Damien Miller bfd52192f3 - (djm) Release OpenSSH 4.3p1 2006-02-01 22:32:17 +11:00
Damien Miller c79824bbab - markus@cvs.openbsd.org 2006/02/01 11:27:22
[version.h]
     openssh 4.3
2006-02-01 22:27:31 +11:00
Damien Miller 0d689568a4 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
[contrib/suse/openssh.spec] Update versions ahead of release
2006-02-01 22:10:47 +11:00
Damien Miller 2ac05779f7 - jmc@cvs.openbsd.org 2006/02/01 09:11:41
[sshd.8]
     small tweak;
2006-02-01 22:05:42 +11:00
Damien Miller 8bbdf90f33 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2006/02/01 09:06:50
     [sshd.8]
     - merge sections on protocols 1 and 2 into a single section
     - remove configuration file section
     ok markus
2006-02-01 22:05:25 +11:00
Damien Miller e682cb0780 - (djm) [regress/test-exec.sh] Try 'logname' as well as 'whoami' to
determine the user's login name - needed for regress tests on Solaris
   10 and OpenSolaris
2006-02-01 11:21:01 +11:00
Damien Miller 923f1ce0b7 - djm@cvs.openbsd.org 2006/01/31 10:35:43
[scp.c]
     "scp a b c" shouldn't clobber "c" when it is not a directory, report and
     fix from biorn@; ok markus@
2006-01-31 22:11:37 +11:00
Damien Miller 50c6eedce3 - djm@cvs.openbsd.org 2006/01/31 10:36:33
[scp.sh]
     regress test for "scp a b c" where "c" is not a directory
2006-01-31 22:06:41 +11:00
Damien Miller 7410ad79f8 - djm@cvs.openbsd.org 2006/01/31 10:23:23
[scp.sh]
     regression test for CVE-2006-0225 written by dtucker@
2006-01-31 22:06:14 +11:00
Damien Miller 0b996462f8 - djm@cvs.openbsd.org 2006/01/27 06:49:21
[scp.sh]
     regress test for local to local scp copies; ok dtucker@
2006-01-31 22:05:23 +11:00
Damien Miller 15a815bb64 - dtucker@cvs.openbsd.org 2005/12/14 04:36:39
[regress/scp-ssh-wrapper.sh]
     Fix assumption about how many args scp will pass; ok djm@
     NB. ID sync only, we already had this
2006-01-31 22:03:11 +11:00
Damien Miller 27a0dfaea9 - grunk@cvs.openbsd.org 2005/11/14 21:25:56
[regress/agent-getpeereid.sh]
     all other scripts in this dir use $SUDO, not 'sudo', so pull this even
     ok markus@
2006-01-31 22:02:16 +11:00
Damien Miller 10c5fa7e87 - markus@cvs.openbsd.org 2005/06/30 11:02:37
[regress/scp.sh]
     allow SUDO=sudo; from Alexander Bluhm
2006-01-31 22:01:42 +11:00
Damien Miller ec7b2f12f0 - djm@cvs.openbsd.org 2005/05/24 04:10:54
[regress/try-ciphers.sh]
     oops, new arcfour modes here too
2006-01-31 21:59:35 +11:00
Damien Miller 76be6b8765 - djm@cvs.openbsd.org 2005/05/20 23:14:15
[regress/test-exec.sh]
     force addressfamily=inet for tests, unbreaking dynamic-forward regress for
     recently committed nc SOCKS5 changes
2006-01-31 21:59:01 +11:00
Damien Miller f0cbb3d7cb - (djm) Sync regress tests to OpenBSD:
- dtucker@cvs.openbsd.org 2005/03/10 10:20:39
     [regress/forwarding.sh]
     Regress test for ClearAllForwardings (bz #994); ok markus@
2006-01-31 21:58:23 +11:00
Damien Miller c34940c1f5 - dtucker@cvs.openbsd.org 2005/04/25 09:54:09
[regress/multiplex.sh]
     Don't call cleanup in multiplex as test-exec will cleanup anyway
     found by tim@, ok djm@
     NB. ID sync only, we already had this
2006-01-31 21:57:27 +11:00
Damien Miller 3eec6b73a2 - djm@cvs.openbsd.org 2006/01/31 10:19:02
[misc.c misc.h scp.c sftp.c]
     fix local arbitrary command execution vulnerability on local/local and
     remote/remote copies (CVE-2006-0225, bz #1094), patch by
     t8m AT centrum.cz, polished by dtucker@ and myself; ok markus@
2006-01-31 21:49:27 +11:00
Damien Miller b5dd55cccc - jmc@cvs.openbsd.org 2006/01/30 13:37:49
[ssh.1]
     remove an incorrect sentence;
     reported by roumen petrov;
     ok djm markus
2006-01-31 21:47:58 +11:00
Damien Miller e204f6aa0d - reyk@cvs.openbsd.org 2006/01/30 12:22:22
[channels.c]
     mark channel as write failed or dead instead of read failed on error
     of the channel output filter.
     ok markus@
2006-01-31 21:47:15 +11:00
Damien Miller bbc59094b9 - jmc@cvs.openbsd.org 2006/01/26 08:47:56
[ssh.1]
     add a section on verifying host keys in dns;
     written with a lot of help from jakob;
     feedback dtucker/markus;
     ok markus
2006-01-31 21:46:51 +11:00
Damien Miller 7602cba59d - jmc@cvs.openbsd.org 2006/01/25 09:07:22
[sshd.8]
     move subsections to full sections;
2006-01-31 21:46:20 +11:00
Damien Miller 99cc4a8f1e - jmc@cvs.openbsd.org 2006/01/25 09:04:34
[sshd.8]
     move the options description up the page, and a few additional tweaks
     whilst in here;
     ok markus
2006-01-31 21:45:53 +11:00
Damien Miller ddfddf1ba3 - jmc@cvs.openbsd.org 2006/01/20 11:21:45
[ssh_config.5]
     - word change, agreed w/ markus
     - consistency fixes
2006-01-31 21:39:03 +11:00
Darren Tucker fbea76400f - (dtucker) [configure.ac opensshd.init.in] Bug #1144: Use /bin/sh for the
opensshd.init script interpretter if /sbin/sh does not exist.  ok tim@
2006-01-30 00:22:39 +11:00
Darren Tucker 62388b2b63 - dtucker@cvs.openbsd.org 2006/01/20 00:14:55
[scp.1 ssh.1 ssh_config.5 sftp.1]
     Document RekeyLimit.  Based on patch from jan.iven at cern.ch from mindrot
     #1056 with feedback from jmc, djm and markus; ok jmc@ djm@
2006-01-20 11:31:47 +11:00
Darren Tucker 248dd13c46 - jmc@cvs.openbsd.org 2006/01/18 10:53:29
[ssh.1]
     add a section on ssh-based vpn, based on reyk's README.tun;
2006-01-20 11:30:58 +11:00
Darren Tucker 94299ec251 - jmc@cvs.openbsd.org 2006/01/15 17:37:05
[ssh.1]
     correction from deraadt
2006-01-20 11:30:14 +11:00
Damien Miller 4a8dc9e297 - jmc@cvs.openbsd.org 2006/01/12 22:34:12
[ssh.1]
     back out a sentence - AUTHENTICATION already documents this;
2006-01-14 10:10:31 +11:00
Damien Miller e9d001e02b - jmc@cvs.openbsd.org 2006/01/12 22:26:02
[ssh_config.5]
     refer to TCP forwarding, rather than TCP/IP forwarding;
2006-01-14 10:10:17 +11:00
Damien Miller 7c24b81699 - jmc@cvs.openbsd.org 2006/01/12 22:20:00
[sshd.8]
     refer to TCP forwarding, rather than TCP/IP forwarding;
2006-01-14 10:09:56 +11:00
Damien Miller 8bfaf93f60 - jmc@cvs.openbsd.org 2006/01/12 18:48:48
[ssh.1]
     refer to `TCP' rather than `TCP/IP' in the context of connection
     forwarding;
     ok markus
2006-01-14 10:09:30 +11:00
Damien Miller f31771810c - jmc@cvs.openbsd.org 2006/01/12 14:44:12
[ssh.1]
     split sections on tcp and x11 forwarding into two sections.
     add an example in the tcp section, based on sth i wrote for ssh faq;
     help + ok: djm markus dtucker
2006-01-14 10:09:13 +11:00
Damien Miller 7e76e1f101 - jmc@cvs.openbsd.org 2006/01/06 13:29:10
[ssh.1]
     final round of whacking FILES for duplicate info, and some consistency
     fixes;
     ok djm
2006-01-14 10:08:57 +11:00
Damien Miller e87eb4ce3c - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2006/01/06 13:27:32
     [ssh.1]
     weed out some duplicate info in the known_hosts FILES entries;
     ok djm
2006-01-14 10:08:36 +11:00
Darren Tucker e78c6ce8cf - (dtucker) [contrib/cygwin/ssh-host-config] Make sshd service depend on
tcpip service so it's always started after IP is up.  Patch from
   vinschen at redhat.com.
2006-01-10 00:02:44 +11:00
Damien Miller 72c5b7d85d - djm@cvs.openbsd.org 2006/01/05 23:43:53
[misc.c]
     check that stdio file descriptors are actually closed before clobbering
     them in sanitise_stdfd(). problems occurred when a lower numbered fd was
     closed, but higher ones weren't. spotted by, and patch tested by
     Frédéric Olivié
2006-01-06 14:50:44 +11:00
Damien Miller c27f83a63c - jmc@cvs.openbsd.org 2006/01/04 19:50:09
[ssh.1]
     -.Xr gzip 1 ,
2006-01-06 14:50:26 +11:00
Damien Miller 128a0f114d - jmc@cvs.openbsd.org 2006/01/04 19:40:24
[ssh.1]
     +.Xr ssh-keyscan 1 ,
2006-01-06 14:50:11 +11:00
Damien Miller a246d3b9b2 - jmc@cvs.openbsd.org 2006/01/04 18:45:01
[ssh.1]
     remove .Xr's to rsh(1) and telnet(1): they are hardly needed;
2006-01-06 14:49:54 +11:00
Damien Miller 1bcdb50a3d - jmc@cvs.openbsd.org 2006/01/04 18:42:46
[ssh.1]
     chop out some duplication in the .{r,s}hosts/{h,sh}osts.equiv FILES
     entries;
     ok markus
2006-01-06 14:49:38 +11:00
Damien Miller 4c102eede3 - jmc@cvs.openbsd.org 2006/01/03 16:55:18
[ssh.1]
     tweak the description of ~/.ssh/environment
2006-01-06 14:49:17 +11:00
Damien Miller fb8ea74116 - jmc@cvs.openbsd.org 2006/01/03 16:52:36
[ssh.1]
     put FILES in some sort of order: sort by pathname
2006-01-06 14:48:52 +11:00
Damien Miller 6aa2290b0c - jmc@cvs.openbsd.org 2006/01/03 16:35:30
[ssh.1]
     use a larger width for the ENVIRONMENT list;
2006-01-06 14:48:34 +11:00
Damien Miller 7655f5cd9f - jmc@cvs.openbsd.org 2006/01/03 16:31:10
[ssh.1]
     move FILES to a -compact list, and make each files an item in that list.
     this avoids nastly line wrap when we have long pathnames, and treats
     each file as a separate item;
     remove the .Pa too, since it is useless.
2006-01-06 14:48:18 +11:00
Damien Miller a969437645 - (djm) [channels.c] clean up harmless merge error, from reyk@ 2006-01-04 07:27:50 +11:00
Damien Miller b797770da2 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2006/01/02 17:09:49
     [ssh_config.5 sshd_config.5]
     some corrections from michael knudsen;
2006-01-03 18:47:31 +11:00
Damien Miller a07a59188a - jmc@cvs.openbsd.org 2006/01/02 12:31:06
[ssh.1]
     start to cut some duplicate info from FILES;
     help/ok djm
2006-01-02 23:41:37 +11:00
Damien Miller a1d9a18e14 - reyk@cvs.openbsd.org 2006/01/02 07:53:44
[misc.c]
     clarify tun(4) opening - set the mode and bring the interface up. also
     (re)sets the tun(4) layer 2 LINK0 flag for existing tunnel interfaces.
     suggested and ok by djm@
2006-01-02 23:41:21 +11:00
Damien Miller 5444618987 - djm@cvs.openbsd.org 2006/01/02 01:20:31
[sftp-client.c sftp-common.h sftp-server.c]
     use a common max. packet length, no binary change
2006-01-02 23:40:50 +11:00
Damien Miller a210d52235 - stevesk@cvs.openbsd.org 2006/01/01 10:08:48
[misc.c]
     no trailing "\n" for debug()
2006-01-02 23:40:30 +11:00
Damien Miller 3beb852e09 - stevesk@cvs.openbsd.org 2006/01/01 08:59:27
[includes.h misc.c]
     move <net/if.h>; ok djm@
2006-01-02 23:40:10 +11:00
Damien Miller 1164c299f1 - jmc@cvs.openbsd.org 2005/12/31 13:45:19
[ssh.1]
     .Nm does not require an argument;
2006-01-02 23:38:37 +11:00
Damien Miller 14af93ee77 - jmc@cvs.openbsd.org 2005/12/31 13:44:04
[ssh.1]
     clean up ENVIRONMENT a little;
2006-01-02 23:38:21 +11:00
Damien Miller 48c94abf5b - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2005/12/31 10:46:17
     [ssh.1]
     merge the "LOGIN SESSION AND REMOTE EXECUTION" and "SERVER
     AUTHENTICATION" sections into "AUTHENTICATION";
     some rewording done to make the text read better, plus some
     improvements from djm;
     ok djm
2006-01-02 23:38:00 +11:00
Damien Miller 90cd1c549b - (djm) [README.tun] Add README.tun, missed during sync of tun(4) support 2006-01-02 20:23:18 +11:00
Damien Miller 5df52e89b4 - (djm) [openbsd-compat/port-tun.c] Linux needs linux/if.h too 2006-01-01 21:15:50 +11:00
Damien Miller bd4e410817 - (djm) [configure.ac] Fix linux/if_tun.h test 2006-01-01 21:03:30 +11:00
Damien Miller 2dcddbfaf6 - (djm) [Makefile.in configure.ac includes.h misc.c]
[openbsd-compat/port-tun.c openbsd-compat/port-tun.h] Add support
         for tunnel forwarding for FreeBSD and NetBSD. NetBSD's support is
         limited to IPv4 tunnels only, and most versions don't support the
         tap(4) device at all.
2006-01-01 19:47:05 +11:00
Damien Miller c4bcc91751 - (djm) [configure.ac] oops, make that linux/if_tun.h 2005-12-31 17:05:58 +11:00
Damien Miller 89e03bae5c - (djm) [configure.ac] Disable Linux tun(4) compat code if linux/tun.h does
not exist
2005-12-31 16:42:03 +11:00
Damien Miller 598bbc2d8f - (djm) [openbsd-compat/port-tun.c openbsd-compat/port-tun.h configure.ac]
[serverloop.c ssh.c openbsd-compat/Makefile.in]
   [openbsd-compat/openbsd-compat.h] Implement tun(4) forwarding
   compatability support for Linux, diff from reyk@
2005-12-31 16:33:36 +11:00
Damien Miller 88b25524b8 - stevesk@cvs.openbsd.org 2005/12/31 01:38:45
[ssh.1]
     document -MM; ok djm@
2005-12-31 16:23:15 +11:00
Damien Miller 134eb81383 - jmc@cvs.openbsd.org 2005/12/30 16:59:00
[sftp.1]
     do not suggest that interactive authentication will work
     with the -b flag;
     based on a diff from john l. scarfone;
     ok djm
2005-12-31 16:22:55 +11:00
Damien Miller 077b23864f - reyk@cvs.openbsd.org 2005/12/30 15:56:37
[channels.c channels.h clientloop.c]
     add channel output filter interface.
     ok djm@, suggested by markus@
2005-12-31 16:22:32 +11:00
Damien Miller 5eb137c6d1 - (djm) OpenBSD CVS Sync
- stevesk@cvs.openbsd.org 2005/12/28 22:46:06
     [canohost.c channels.c clientloop.c]
     use 'break-in' for consistency; ok deraadt@ ok and input jmc@
2005-12-31 16:19:53 +11:00
Tim Rice 8db70e2398 (tim) [buildpkg.sh.in] grep for $SSHDUID instead of $SSHDGID on /etc/passwd 2005-12-28 14:28:08 -08:00
Damien Miller 7bff1a9b5e - djm@cvs.openbsd.org 2005/12/24 02:27:41
[session.c sshd.c]
     eliminate some code duplicated in privsep and non-privsep paths, and
     explicitly clear SIGALRM handler; "groovy" deraadt@
2005-12-24 14:59:12 +11:00
Damien Miller 3597821046 - jmc@cvs.openbsd.org 2005/12/23 23:46:23
[ssh.1]
     less mark up for -c;
2005-12-24 14:56:47 +11:00
Damien Miller 2142ba0769 - jmc@cvs.openbsd.org 2005/12/23 14:55:53
[ssh.1]
     - sync the description of -e w/ synopsis
     - simplify the description of -I
     - note that -I is only available if support compiled in, and that it
     isn't by default
     feedback/ok djm@
2005-12-24 14:56:29 +11:00
Damien Miller cf1e342c6c - jmc@cvs.openbsd.org 2005/12/22 11:23:42
[ssh.1]
     expand the description of -w somewhat;
     help/ok reyk
2005-12-24 14:56:04 +11:00
Damien Miller e8cd741929 - jmc@cvs.openbsd.org 2005/12/22 10:31:40
[ssh_config.5]
     put the description of "UsePrivilegedPort" in the correct place;
2005-12-24 14:55:47 +11:00