djm@openbsd.org 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							697359be9c 
							
						 
					 
					
						
						
							
							upstream: allow WAYLAND_DISPLAY to enable SSH_ASKPASS  
						
						... 
						
						
						
						From dkg via GHPR479; ok dtucker@
OpenBSD-Commit-ID: 1ac1f9c45da44eabbae89375393c662349239257 
						
						
					 
					
						2024-03-30 15:35:03 +11:00 
						 
				 
			
				
					
						
							
							
								dtucker@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							5d3a77f4c5 
							
						 
					 
					
						
						
							
							upstream: Avoid kill with -1 argument. The out_ctx label can be  
						
						... 
						
						
						
						reached before fork has been called. If this happens, then kill -1 would be
called, sending SIGTERM to all processes reachable by the current process.
From tobias@ and c3h2_ctf via github PR#286, ok djm@
OpenBSD-Commit-ID: 6277af1207d81202f5daffdccfeeaed4c763b1a8 
						
						
					 
					
						2022-05-27 14:59:17 +10:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							03190d1098 
							
						 
					 
					
						
						
							
							upstream: mention in comment that read_passphrase(..., RP_ALLOW_STDIN)  
						
						... 
						
						
						
						will try to use askpass first. bz3314
convert a couple of debug() -> debug_f() while here
OpenBSD-Commit-ID: c7e812aebc28fcc5db06d4710e0f73613dee545c 
						
						
					 
					
						2021-07-23 15:57:56 +10:00 
						 
				 
			
				
					
						
							
							
								claudio@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							4340dd4392 
							
						 
					 
					
						
						
							
							upstream: Free the previously allocated msg buffer after writing it  
						
						... 
						
						
						
						out. OK djm@
OpenBSD-Commit-ID: 18c055870fc75e4cb9f926c86c7543e2e21d7fa4 
						
						
					 
					
						2020-11-12 10:53:03 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							10dce8ff68 
							
						 
					 
					
						
						
							
							upstream: unbreak; missing NULL check  
						
						... 
						
						
						
						OpenBSD-Commit-ID: 6613dfab488123f454d348ef496824476b8c11c0 
						
						
					 
					
						2020-11-09 10:20:13 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							d5a0cd4fc4 
							
						 
					 
					
						
						
							
							upstream: when requesting a security key touch on stderr, inform the  
						
						... 
						
						
						
						user once the touch has been recorded; requested by claudio@ ok markus@
OpenBSD-Commit-ID: 3b76ee444490e546b9ea7f879e4092ee0d256233 
						
						
					 
					
						2020-11-09 09:39:22 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							816036f142 
							
						 
					 
					
						
						
							
							upstream: use the new variant log macros instead of prepending  
						
						... 
						
						
						
						__func__ and appending ssh_err(r) manually; ok markus@
OpenBSD-Commit-ID: 1f14b80bcfa85414b2a1a6ff714fb5362687ace8 
						
						
					 
					
						2020-10-18 23:46:29 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							396d32f3a1 
							
						 
					 
					
						
						
							
							upstream: There are lots of place where we want to redirect stdin,  
						
						... 
						
						
						
						stdout and/or stderr to /dev/null. Factor all these out to a single
stdfd_devnull() function that allows selection of which of these to redirect.
ok markus@
OpenBSD-Commit-ID: 3033ba5a4c47cacfd5def020d42cabc52fad3099 
						
						
					 
					
						2020-10-03 19:34:24 +10:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							e9c2002891 
							
						 
					 
					
						
						
							
							upstream: let the "Confirm user presence for key ..." ssh-askpass  
						
						... 
						
						
						
						notification respect $SSH_ASKPASS_REQUIRE; ok markus@
OpenBSD-Commit-ID: 7c1a616b348779bda3b9ad46bf592741f8e206c1 
						
						
					 
					
						2020-08-27 11:26:26 +10:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							aaa8b609a7 
							
						 
					 
					
						
						
							
							upstream: allow some additional control over the use of ssh-askpass  
						
						... 
						
						
						
						via $SSH_ASKPASS_REQUIRE, including force-enable/disable. bz#69 ok markus@
OpenBSD-Commit-ID: 3a1e6cbbf6241ddc4405c4246caa2c249f149eb2 
						
						
					 
					
						2020-07-15 15:08:10 +10:00 
						 
				 
			
				
					
						
							
							
								dtucker@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							3bf2a6ac79 
							
						 
					 
					
						
						
							
							upstream: Replace all calls to signal(2) with a wrapper around  
						
						... 
						
						
						
						sigaction(2). This wrapper blocks all other signals during the handler
preventing races between handlers, and sets SA_RESTART which should reduce
the potential for short read/write operations.
OpenBSD-Commit-ID: 5e047663fd77a40d7b07bdabe68529df51fd2519 
						
						
					 
					
						2020-01-23 18:51:25 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							59175a350f 
							
						 
					 
					
						
						
							
							upstream: fix setting of $SSH_ASKPASS_PROMPT - it shouldn't be set  
						
						... 
						
						
						
						when asking passphrases, only when confirming the use of a key (i.e. for
ssh-agent keys added with "ssh-add -c keyfile")
OpenBSD-Commit-ID: 6643c82960d9427d5972eb702c917b3b838ecf89 
						
						
					 
					
						2019-12-11 19:08:22 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							36eaa356d3 
							
						 
					 
					
						
						
							
							upstream: bring the __func__  
						
						... 
						
						
						
						OpenBSD-Commit-ID: 71a3a45b0fe1b8f680ff95cf264aa81f7abbff67 
						
						
					 
					
						2019-12-11 19:08:22 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							f79364baca 
							
						 
					 
					
						
						
							
							upstream: use error()+_exit() instead of fatal() to avoid running  
						
						... 
						
						
						
						cleanup handlers in child process; spotted via weird regress failures in
portable
OpenBSD-Commit-ID: 6902a9bb3987c7d347774444f7979b8a9ba7f412 
						
						
					 
					
						2019-11-27 16:02:46 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							018e2902a6 
							
						 
					 
					
						
						
							
							upstream: follow existing askpass logic for security key notifier:  
						
						... 
						
						
						
						fall back to _PATH_SSH_ASKPASS_DEFAULT if no $SSH_ASKPASS environment
variable is set.
OpenBSD-Commit-ID: cda753726b13fb797bf7a9f7a0b3022d9ade4520 
						
						
					 
					
						2019-11-15 13:41:40 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							4671211068 
							
						 
					 
					
						
						
							
							upstream: pass SSH_ASKPASS_PROMPT hint to y/n key confirm too  
						
						... 
						
						
						
						OpenBSD-Commit-ID: 08d46712e5e5f1bad0aea68e7717b7bec1ab8959 
						
						
					 
					
						2019-11-13 10:15:46 +11:00 
						 
				 
			
				
					
						
							
							
								djm@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							5d1c1590d7 
							
						 
					 
					
						
						
							
							upstream: dd API for performing one-shot notifications via tty or  
						
						... 
						
						
						
						SSH_ASKPASS
OpenBSD-Commit-ID: 9484aea33aff5b62ce3642bf259546c7639f23f3 
						
						
					 
					
						2019-11-13 10:15:46 +11:00 
						 
				 
			
				
					
						
							
							
								deraadt@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							4d28fa78ab 
							
						 
					 
					
						
						
							
							upstream: When system calls indicate an error they return -1, not  
						
						... 
						
						
						
						some arbitrary value < 0.  errno is only updated in this case.  Change all
(most?) callers of syscalls to follow this better, and let's see if this
strictness helps us in the future.
OpenBSD-Commit-ID: 48081f00db7518e3b712a49dca06efc2a5428075 
						
						
					 
					
						2019-07-05 11:10:39 +10:00 
						 
				 
			
				
					
						
							
							
								tb@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							4ae7f80dfd 
							
						 
					 
					
						
						
							
							upstream: Print an \r in front of the password prompt so parts of  
						
						... 
						
						
						
						a password that was entered too early are likely clobbered by the prompt.
Idea from doas.
from and ok djm
"i like it" deraadt
OpenBSD-Commit-ID: 5fb97c68df6d8b09ab37f77bca1d84d799c4084e 
						
						
					 
					
						2019-01-20 09:01:57 +11:00 
						 
				 
			
				
					
						
							
							
								dtucker@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							258dc8bb07 
							
						 
					 
					
						
						
							
							upstream: Remove support for running ssh(1) setuid and fatal if  
						
						... 
						
						
						
						attempted. Do not link uidwap.c into ssh any more.  Neuters
UsePrivilegedPort, which will be marked as deprecated shortly. ok markus@
djm@
OpenBSD-Commit-ID: c4ba5bf9c096f57a6ed15b713a1d7e9e2e373c42 
						
						
					 
					
						2018-07-19 21:41:42 +10:00 
						 
				 
			
				
					
						
							
							
								mmcc@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							94141b7ade 
							
						 
					 
					
						
						
							
							upstream commit  
						
						... 
						
						
						
						Pass (char *)NULL rather than (char *)0 to execl and
 execlp.
ok dtucker@
Upstream-ID: 56c955106cbddba86c3dd9bbf786ac0d1b361492 
						
						
					 
					
						2015-12-11 13:23:14 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							a5103f413b 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2014/02/02 03:44:32  
						
						... 
						
						
						
						[auth1.c auth2-chall.c auth2-passwd.c authfile.c bufaux.c bufbn.c]
     [buffer.c cipher-3des1.c cipher.c clientloop.c gss-serv.c kex.c]
     [kexdhc.c kexdhs.c kexecdhc.c kexgexc.c kexecdhs.c kexgexs.c key.c]
     [monitor.c monitor_wrap.c packet.c readpass.c rsa.c serverloop.c]
     [ssh-add.c ssh-agent.c ssh-dss.c ssh-ecdsa.c ssh-ed25519.c]
     [ssh-keygen.c ssh-rsa.c sshconnect.c sshconnect1.c sshconnect2.c]
     [sshd.c]
     convert memset of potentially-private data to explicit_bzero() 
						
						
					 
					
						2014-02-04 11:20:14 +11:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							a627d42e51 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2013/05/17 00:13:13  
						
						... 
						
						
						
						[xmalloc.h cipher.c sftp-glob.c ssh-keyscan.c ssh.c sftp-common.c
     ssh-ecdsa.c auth2-chall.c compat.c readconf.c kexgexs.c monitor.c
     gss-genr.c cipher-3des1.c kex.c monitor_wrap.c ssh-pkcs11-client.c
     auth-options.c rsa.c auth2-pubkey.c sftp.c hostfile.c auth2.c
     servconf.c auth.c authfile.c xmalloc.c uuencode.c sftp-client.c
     auth2-gss.c sftp-server.c bufaux.c mac.c session.c jpake.c kexgexc.c
     sshconnect.c auth-chall.c auth2-passwd.c sshconnect1.c buffer.c
     kexecdhs.c kexdhs.c ssh-rsa.c auth1.c ssh-pkcs11.c auth2-kbdint.c
     kexdhc.c sshd.c umac.c ssh-dss.c auth2-jpake.c bufbn.c clientloop.c
     monitor_mm.c scp.c roaming_client.c serverloop.c key.c auth-rsa.c
     ssh-pkcs11-helper.c ssh-keysign.c ssh-keygen.c match.c channels.c
     sshconnect2.c addrmatch.c mux.c canohost.c kexecdhc.c schnorr.c
     ssh-add.c misc.c auth2-hostbased.c ssh-agent.c bufec.c groupaccess.c
     dns.c packet.c readpass.c authfd.c moduli.c]
     bye, bye xfree(); ok markus@ 
						
						
					 
					
						2013-06-02 07:31:17 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							106079c06d 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2010/12/15 00:49:27  
						
						... 
						
						
						
						[readpass.c]
     fix ControlMaster=ask regression
     reset SIGCHLD handler before fork (and restore it after) so we don't miss
     the the askpass child's exit status. Correct test for exit status/signal to
     account for waitpid() failure; with claudio@ ok claudio@ markus@ 
						
						
					 
					
						2011-01-06 22:43:44 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							d783435315 
							
						 
					 
					
						
						
							
							- deraadt@cvs.openbsd.org 2006/08/03 03:34:42  
						
						... 
						
						
						
						[OVERVIEW atomicio.c atomicio.h auth-bsdauth.c auth-chall.c auth-krb5.c]
     [auth-options.c auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
     [auth-rsa.c auth-skey.c auth.c auth.h auth1.c auth2-chall.c auth2-gss.c]
     [auth2-hostbased.c auth2-kbdint.c auth2-none.c auth2-passwd.c ]
     [auth2-pubkey.c auth2.c authfd.c authfd.h authfile.c bufaux.c bufbn.c]
     [buffer.c buffer.h canohost.c channels.c channels.h cipher-3des1.c]
     [cipher-bf1.c cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c]
     [compress.c deattack.c dh.c dispatch.c dns.c dns.h fatal.c groupaccess.c]
     [groupaccess.h gss-genr.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c]
     [kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c]
     [key.h log.c log.h mac.c match.c md-sha256.c misc.c misc.h moduli.c]
     [monitor.c monitor_fdpass.c monitor_mm.c monitor_mm.h monitor_wrap.c]
     [monitor_wrap.h msg.c nchan.c packet.c progressmeter.c readconf.c]
     [readconf.h readpass.c rsa.c scard.c scard.h scp.c servconf.c servconf.h]
     [serverloop.c session.c session.h sftp-client.c sftp-common.c]
     [sftp-common.h sftp-glob.c sftp-server.c sftp.c ssh-add.c ssh-agent.c]
     [ssh-dss.c ssh-gss.h ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rsa.c]
     [ssh.c ssh.h sshconnect.c sshconnect.h sshconnect1.c sshconnect2.c]
     [sshd.c sshlogin.c sshlogin.h sshpty.c sshpty.h sshtty.c ttymodes.c]
     [uidswap.c uidswap.h uuencode.c uuencode.h xmalloc.c xmalloc.h]
     [loginrec.c loginrec.h openbsd-compat/port-aix.c openbsd-compat/port-tun.h]
     almost entirely get rid of the culture of ".h files that include .h files"
     ok djm, sort of ok stevesk
     makes the pain stop in one easy step
     NB. portable commit contains everything *except* removing includes.h, as
     that will take a fair bit more work as we move headers that are required
     for portability workarounds to defines.h. (also, this step wasn't "easy") 
						
						
					 
					
						2006-08-05 12:39:39 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							a7a73ee35d 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/08/01 23:22:48  
						
						... 
						
						
						
						[auth-passwd.c auth-rhosts.c auth-rsa.c auth.c auth.h auth1.c]
     [auth2-chall.c auth2-pubkey.c authfile.c buffer.c canohost.c]
     [channels.c clientloop.c dh.c dns.c dns.h hostfile.c kex.c kexdhc.c]
     [kexgexc.c kexgexs.c key.c key.h log.c misc.c misc.h moduli.c]
     [monitor_wrap.c packet.c progressmeter.c readconf.c readpass.c scp.c]
     [servconf.c session.c sftp-client.c sftp-common.c sftp-server.c sftp.c]
     [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c ssh.c sshconnect.c]
     [sshconnect1.c sshconnect2.c sshd.c sshlogin.c sshtty.c uuencode.c]
     [uuencode.h xmalloc.c]
     move #include <stdio.h> out of includes.h 
						
						
					 
					
						2006-08-05 11:37:59 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							e7a1e5cf63 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/26 13:57:17  
						
						... 
						
						
						
						[authfd.c authfile.c dh.c canohost.c channels.c clientloop.c compat.c]
     [hostfile.c kex.c log.c misc.c moduli.c monitor.c packet.c readpass.c]
     [scp.c servconf.c session.c sftp-server.c sftp.c ssh-add.c ssh-agent.c]
     [ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh.c sshconnect.c]
     [sshconnect1.c sshd.c xmalloc.c]
     move #include <stdlib.h> out of includes.h 
						
						
					 
					
						2006-08-05 11:34:19 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							e3476ed03b 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/22 20:48:23  
						
						... 
						
						
						
						[atomicio.c auth-options.c auth-passwd.c auth-rhosts.c auth-rsa.c]
     [auth.c auth1.c auth2-chall.c auth2-hostbased.c auth2-passwd.c auth2.c]
     [authfd.c authfile.c bufaux.c bufbn.c buffer.c canohost.c channels.c]
     [cipher-3des1.c cipher-bf1.c cipher-ctr.c cipher.c clientloop.c]
     [compat.c deattack.c dh.c dns.c gss-genr.c gss-serv.c hostfile.c]
     [includes.h kex.c kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c log.c]
     [mac.c match.c md-sha256.c misc.c moduli.c monitor.c monitor_fdpass.c]
     [monitor_mm.c monitor_wrap.c msg.c nchan.c packet.c rsa.c]
     [progressmeter.c readconf.c readpass.c scp.c servconf.c serverloop.c]
     [session.c sftp-client.c sftp-common.c sftp-glob.c sftp-server.c sftp.c]
     [ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c]
     [ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c sshconnect2.c]
     [sshd.c sshlogin.c sshpty.c ttymodes.c uidswap.c xmalloc.c]
     move #include <string.h> out of includes.h 
						
						
					 
					
						2006-07-24 14:13:33 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							e6b3b610ec 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/17 01:31:10  
						
						... 
						
						
						
						[authfd.c authfile.c channels.c cleanup.c clientloop.c groupaccess.c]
     [includes.h log.c misc.c msg.c packet.c progressmeter.c readconf.c]
     [readpass.c scp.c servconf.c sftp-client.c sftp-server.c sftp.c]
     [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh.c]
     [sshconnect.c sshlogin.c sshpty.c uidswap.c]
     move #include <unistd.h> out of includes.h 
						
						
					 
					
						2006-07-24 14:01:23 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							3997249346 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/11 20:07:25  
						
						... 
						
						
						
						[scp.c auth.c monitor.c serverloop.c sftp-server.c sshpty.c readpass.c
     sshd.c monitor_wrap.c monitor_fdpass.c ssh-agent.c ttymodes.c atomicio.c
     includes.h session.c sshlogin.c monitor_mm.c packet.c sshconnect2.c
     sftp-client.c nchan.c clientloop.c sftp.c misc.c canohost.c channels.c
     ssh-keygen.c progressmeter.c uidswap.c msg.c readconf.c sshconnect.c]
     move #include <errno.h> out of includes.h; ok markus@ 
						
						
					 
					
						2006-07-12 22:22:46 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							5d19626a04 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/10 16:37:36  
						
						... 
						
						
						
						[readpass.c log.h scp.c fatal.c xmalloc.c includes.h ssh-keyscan.c misc.c
     auth.c packet.c log.c]
     move #include <stdarg.h> out of includes.h; ok markus@ 
						
						
					 
					
						2006-07-12 22:15:16 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							57cf638577 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/09 15:15:11  
						
						... 
						
						
						
						[auth2-none.c authfd.c authfile.c includes.h misc.c monitor.c]
     [readpass.c scp.c serverloop.c sftp-client.c sftp-server.c]
     [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keysign.c ssh.c sshd.c]
     [sshlogin.c sshpty.c]
     move #include <fcntl.h> out of includes.h 
						
						
					 
					
						2006-07-10 21:13:46 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							2e5fe88ebe 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2006/06/08 14:45:49  
						
						... 
						
						
						
						[readpass.c sshconnect.c sshconnect2.c uidswap.c uidswap.h]
     do not set the gid, noted by solar; ok djm 
						
						
					 
					
						2006-06-13 13:10:00 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							6b4069ad56 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2006/06/06 10:20:20  
						
						... 
						
						
						
						[readpass.c sshconnect.c sshconnect.h sshconnect2.c uidswap.c]
     replace remaining setuid() calls with permanently_set_uid() and
     check seteuid() return values; report Marcus Meissner; ok dtucker djm 
						
						
					 
					
						2006-06-13 13:05:15 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							57c30117c1 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2006/03/25 13:17:03  
						
						... 
						
						
						
						[atomicio.c auth-bsdauth.c auth-chall.c auth-options.c auth-passwd.c]
     [auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth-skey.c auth.c auth1.c]
     [auth2-chall.c auth2-hostbased.c auth2-kbdint.c auth2-none.c]
     [auth2-passwd.c auth2-pubkey.c auth2.c authfd.c authfile.c bufaux.c]
     [buffer.c canohost.c channels.c cipher-3des1.c cipher-bf1.c]
     [cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c compress.c]
     [deattack.c dh.c dispatch.c fatal.c groupaccess.c hostfile.c kex.c]
     [kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c log.c]
     [mac.c match.c md-sha256.c misc.c monitor.c monitor_fdpass.c]
     [monitor_mm.c monitor_wrap.c msg.c nchan.c packet.c progressmeter.c]
     [readconf.c readpass.c rsa.c scard.c scp.c servconf.c serverloop.c]
     [session.c sftp-client.c sftp-common.c sftp-glob.c sftp-server.c]
     [sftp.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c]
     [ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c]
     [sshconnect2.c sshd.c sshlogin.c sshpty.c sshtty.c ttymodes.c]
     [uidswap.c uuencode.c xmalloc.c]
     Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
     Theo nuked - our scripts to sync -portable need them in the files 
						
						
					 
					
						2006-03-26 14:24:48 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							b0fb6872ed 
							
						 
					 
					
						
						
							
							- deraadt@cvs.openbsd.org 2006/03/19 18:51:18  
						
						... 
						
						
						
						[atomicio.c auth-bsdauth.c auth-chall.c auth-krb5.c auth-options.c]
     [auth-pam.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c]
     [auth-shadow.c auth-skey.c auth.c auth1.c auth2-chall.c]
     [auth2-hostbased.c auth2-kbdint.c auth2-none.c auth2-passwd.c]
     [auth2-pubkey.c auth2.c authfd.c authfile.c bufaux.c buffer.c]
     [canohost.c channels.c cipher-3des1.c cipher-acss.c cipher-aes.c]
     [cipher-bf1.c cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c]
     [compress.c deattack.c dh.c dispatch.c dns.c entropy.c fatal.c]
     [groupaccess.c hostfile.c includes.h kex.c kexdh.c kexdhc.c]
     [kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c log.c loginrec.c]
     [loginrec.h logintest.c mac.c match.c md-sha256.c md5crypt.c misc.c]
     [monitor.c monitor_fdpass.c monitor_mm.c monitor_wrap.c msg.c]
     [nchan.c packet.c progressmeter.c readconf.c readpass.c rsa.c]
     [scard.c scp.c servconf.c serverloop.c session.c sftp-client.c]
     [sftp-common.c sftp-glob.c sftp-server.c sftp.c ssh-add.c]
     [ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c]
     [ssh-rand-helper.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c]
     [sshconnect2.c sshd.c sshlogin.c sshpty.c sshtty.c ttymodes.c]
     [uidswap.c uuencode.c xmalloc.c openbsd-compat/bsd-arc4random.c]
     [openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-cygwin_util.c]
     [openbsd-compat/bsd-getpeereid.c openbsd-compat/bsd-misc.c]
     [openbsd-compat/bsd-nextstep.c openbsd-compat/bsd-snprintf.c]
     [openbsd-compat/bsd-waitpid.c openbsd-compat/fake-rfc2553.c]
     RCSID() can die 
						
						
					 
					
						2006-03-26 00:03:21 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							9cf6d077fb 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/02/10 01:44:27  
						
						... 
						
						
						
						[includes.h monitor.c readpass.c scp.c serverloop.c session.c^?]
     [sftp.c sshconnect.c sshconnect2.c sshd.c]
     move #include <sys/wait.h> out of includes.h; ok markus@ 
						
						
					 
					
						2006-03-15 11:29:24 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							a9263d065d 
							
						 
					 
					
						
						
							
							fix spacing of include  
						
						
						
						
					 
					
						2006-03-15 11:18:26 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							03e2003a23 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/02/08 12:15:27  
						
						... 
						
						
						
						[auth.c clientloop.c includes.h misc.c monitor.c readpass.c]
     [session.c sftp.c ssh-agent.c ssh-keysign.c ssh.c sshconnect.c]
     [sshd.c sshpty.c]
     move #include <paths.h> out of includes.h; ok markus@ 
						
						
					 
					
						2006-03-15 11:16:59 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							d2ebd450f0 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2005/05/02 21:13:22  
						
						... 
						
						
						
						[readpass.c]
     missing {} 
						
						
					 
					
						2005-05-26 12:07:47 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							ddeb75294b 
							
						 
					 
					
						
						
							
							- dtucker@cvs.openbsd.org 2005/04/23 23:43:47  
						
						... 
						
						
						
						[readpass.c]
     Add debug message if read_passphrase can't open /dev/tty; bz #471 ;
     ok djm@ 
						
						
					 
					
						2005-05-26 12:05:28 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							ce327b62ac 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2004/10/29 22:53:56  
						
						... 
						
						
						
						[clientloop.c misc.h readpass.c ssh-agent.c]
     factor out common permission-asking code to separate function; ok markus@ 
						
						
					 
					
						2004-11-05 20:38:03 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							23f0770a1b 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2004/06/17 15:10:14  
						
						... 
						
						
						
						[clientloop.c misc.h readconf.c readpass.c ssh.c ssh_config.5]
     Add option for confirmation (ControlMaster=ask) via ssh-askpass before
     opening shared connections; ok markus@ 
						
						
					 
					
						2004-06-18 01:19:03 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							e608ca2965 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2004/05/08 00:21:31  
						
						... 
						
						
						
						[clientloop.c misc.h readpass.c scard.c ssh-add.c ssh-agent.c ssh-keygen.c
     sshconnect.c sshconnect1.c sshconnect2.c] removed: readpass.h
     kill a tiny header; ok deraadt@ 
						
						
					 
					
						2004-05-13 16:15:47 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							6c71179f68 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2003/01/23 13:50:27  
						
						... 
						
						
						
						[authfd.c authfd.h readpass.c ssh-add.1 ssh-add.c ssh-agent.c]
     ssh-add -c, prompt user for confirmation (using ssh-askpass) when
     private agent key is used; with djm@; test by dugsong@, djm@;
     ok deraadt@ 
						
						
					 
					
						2003-01-24 11:36:23 +11:00 
						 
				 
			
				
					
						
							
							
								Ben Lindstrom 
							
						 
					 
					
						
						
						
						
							
						
						
							38a69e6b53 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2002/03/26 15:58:46  
						
						... 
						
						
						
						[readpass.c readpass.h sshconnect2.c]
     client side support for PASSWD_CHANGEREQ 
						
						
					 
					
						2002-03-27 17:28:46 +00:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							3606ee2938 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2002/02/13 00:39:15  
						
						... 
						
						
						
						[readpass.c]
     readpass.c is not longer from UCB, since we now use readpassphrase(3) 
						
						
					 
					
						2002-02-13 14:05:23 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							85830d1dc0 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2002/01/11 23:02:18  
						
						... 
						
						
						
						[readpass.c]
     use _PATH_TTY 
						
						
					 
					
						2002-01-22 23:24:51 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							f451e22e21 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2001/12/21 08:53:45  
						
						... 
						
						
						
						[readpass.c]
     Avoid interruptable passphrase read; ok markus@ 
						
						
					 
					
						2002-01-22 23:05:31 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							637b8ae2d4 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2001/11/08 10:51:08  
						
						... 
						
						
						
						[readpass.c]
     don't strdup too much data; from gotoh@taiyo.co.jp ; ok millert. 
						
						
					 
					
						2001-11-12 11:05:20 +11:00