Commit Graph

3201 Commits

Author SHA1 Message Date
Ben Lindstrom 5ade9abc37 - (bal) redo how we handle 'mysignal()'. Move it to
openbsd-compat/bsd-misc.c, s/mysignal/signal/ and #define signal to
   be our 'mysignal' by default.  OK djm@
2003-08-25 01:16:21 +00:00
Ben Lindstrom af4a6c3a56 - (bal) openbsd-compat/ OpenBSD updates. Mostly licensing, ansifications
and minor fixes.
2003-08-25 01:10:51 +00:00
Damien Miller 331b6af8fa - (djm) Bug #621: Select OpenSC keys by usage attributes. Patch from
larsch@trustcenter.de
2003-08-25 10:58:26 +10:00
Darren Tucker 49d32566c2 - (dtucker) [contrib/cygwin/ssh-user-config] Put keys in authorized_keys
rather that authorized_keys2.  Patch from vinschen@redhat.com.
2003-08-22 18:43:48 +10:00
Damien Miller 59d3d5b8b4 - (djm) s/get_progname/ssh_get_progname/g to avoid conflict with Heimdal
-lbroken; ok dtucker
2003-08-22 09:34:41 +10:00
Darren Tucker 70a3d55b4a - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement
and after normal openpty test.
2003-08-21 17:58:29 +10:00
Darren Tucker 8e3653d2f3 - (dtucker) [defines.h] Put CMSG_DATA, CMSG_FIRSTHDR with other CMSG* macros,
change CMSG_DATA to use __CMSG_ALIGN (and thus work properly), reformat for
   consistency.
2003-08-21 16:49:41 +10:00
Darren Tucker f4220e6cef - markus@cvs.openbsd.org 2003/08/14 16:08:58
[ssh-keygen.c]
     exit after primetest, ok djm@
2003-08-21 16:44:07 +10:00
Darren Tucker f38ea77c03 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
Add a tcsendbreak function for platforms that don't have one, based on the
   one from OpenBSD.

Any more of these and I'll split them out into bsd-termio.[ch].
2003-08-13 20:48:07 +10:00
Darren Tucker 1c52ee3e6f - markus@cvs.openbsd.org 2003/08/13 09:07:10
[readconf.c ssh.c]
     socks4->socks, since with support both 4 and 5; dtucker@zip.com.au
2003-08-13 20:38:36 +10:00
Darren Tucker ec960f2c93 - markus@cvs.openbsd.org 2003/08/13 08:46:31
[auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
     ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
     remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
     fgsch@, miod@, henning@, jakob@ and others
2003-08-13 20:37:05 +10:00
Darren Tucker 3bdbd848ea - markus@cvs.openbsd.org 2003/08/13 08:33:02
[session.c]
     use more portable tcsendbreak(3) and ignore break_length;
     ok deraadt, millert
2003-08-13 20:31:05 +10:00
Darren Tucker d85efee437 - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge. 2003-08-13 20:28:14 +10:00
Darren Tucker bc8c8f36fb - (dtucker) [openbsd-compat/xcrypt.c] Remove Cygwin #ifdef block (duplicate
in bsd-cygwin_util.h).
2003-08-11 23:00:33 +10:00
Darren Tucker ec0943a96c - (dtucker) OpenBSD CVS Sync
(thanks to Simon Wilkinson for help with this -dt)
   - markus@cvs.openbsd.org 2003/07/16 15:02:06
     [auth-krb5.c]
     mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
     otherwise the kerberos credentinal is stored in a memory cache
     in the privileged sshd. ok jabob@, hin@ (some time ago)
2003-08-11 22:55:36 +10:00
Darren Tucker f38db7f5da - (dtucker) [auth-pam.c] Don't set PAM_TTY if tty is null. ok djm@ 2003-08-08 13:43:37 +10:00
Darren Tucker 65914f1eb3 - (dtucker) [openbsd-compat/fake-rfc2553.h] Older Linuxes have AI_PASSIVE and
AI_CANONNAME in netdb.h but not AI_NUMERICHOST, so check each definition
   separately before defining them.
2003-08-08 12:15:11 +10:00
Darren Tucker 80649c5fa6 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.h] Move Cygwin
specific defines and includes to bsd-cygwin_util.h.  Fixes build error too.
2003-08-07 16:28:16 +10:00
Darren Tucker 854d7fd439 - (dtucker) [openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h]
Remove incorrect filenames from comments (file names are in Id tags).
2003-08-07 16:23:43 +10:00
Darren Tucker f315224d7c - (dtucker) [defines.h] Bug #336: Add CMSG_DATA and CMSG_FIRSTHDR macros if
not already defined (eg Linux with some versions of libc5), based on those
   from OpenBSD.
2003-08-07 15:58:28 +10:00
Darren Tucker 89f4cf0d29 - (dtucker) [canohost.c] Bug #336: Only check ip options if IP_OPTIONS is
defined (fixes compile error on really old Linuxes).
2003-08-07 13:29:04 +10:00
Darren Tucker b9d3f41ceb - (dtucker) [session.c] Have session_break_req not attempt to send a break
if TIOCSBRK and TIOCCBRK are not defined (eg Cygwin).
2003-08-07 13:24:24 +10:00
Darren Tucker bdf571b0dc - (dtucker) [openbsd-compat/bsd-misc.c] Fix cut-and-paste bug in tcgetpgrp. 2003-08-03 00:36:16 +10:00
Darren Tucker db732b14d7 - markus@cvs.openbsd.org 2003/07/31 22:34:03
[progressmeter.c]
    print rate similar old version; round instead truncate;
    (included in previous progressmeter.c commit)
2003-08-03 00:07:35 +10:00
Darren Tucker 85f04c6fd5 - avsm@cvs.openbsd.org 2003/07/31 15:50:16
[atomicio.c]
     correct comment: atomicio takes vwrite, not write; deraadt@ ok
2003-08-03 00:05:58 +10:00
Darren Tucker 4b60966863 - markus@cvs.openbsd.org 2003/07/31 09:21:02
[auth2-none.c]
     check whether passwd auth is allowd, similar to proto 1; rob@pitman.co.za
     ok henning
2003-08-03 00:05:01 +10:00
Darren Tucker 40311f2feb Add imported progressmeter.c changes to Changelog 2003-08-03 00:00:47 +10:00
Darren Tucker b2f9d4161a - (dtucker) [Makefile.in moduli.c moduli.h] Add new files and to Makefile.
Should have added with this sync:
   - djm@cvs.openbsd.org 2003/07/28 09:49:56
     [ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
2003-08-02 23:51:38 +10:00
Darren Tucker 2e9c9cf702 - (dtucker) [openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
Add a tcgetpgrp function.
2003-08-02 23:31:42 +10:00
Darren Tucker 06ef75bf0c - markus@cvs.openbsd.org 2003/07/29 18:24:00
[LICENCE progressmeter.c]
     replace 4 clause BSD licensed progressmeter code with a replacement
     from Nils Nordman and myself; ok deraadt@
     (copied from OpenBSD an re-applied portable changes)
2003-08-02 23:28:38 +10:00
Darren Tucker 019cefeaad - djm@cvs.openbsd.org 2003/07/28 09:49:56
[ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
2003-08-02 22:40:07 +10:00
Darren Tucker c20c60bc99 - markus@cvs.openbsd.org 2003/07/23 07:42:43
[sshd_config]
     remove AFS; itojun@
2003-08-02 22:31:45 +10:00
Darren Tucker 6aaa58c470 - (dtucker) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/07/22 13:35:22
     [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c
     monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1
     ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h]
     remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
     test+ok henning@
 - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support.
 - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files.

I hope I got this right....
2003-08-02 22:24:49 +10:00
Darren Tucker 4c29dd9f44 - (dtucker) [monitor.h monitor_wrap.h] Remove excess ident tags. 2003-08-02 20:37:03 +10:00
Damien Miller 7f2d795e3f - (djm) [auth-pam.c] Don't use crappy APIs like sprintf. Thanks bal 2003-07-30 14:53:11 +10:00
Darren Tucker fbba5a0501 - (dtucker) [openbsd-compat/xcrypt.c] Fix typo: DISABLED_SHADOW ->
DISABLE_SHADOW.  Fixes HP-UX compile error.
2003-07-26 19:38:30 +10:00
Ben Lindstrom 0410e32f47 - (bal) [auth-passwd.c openbsd-compat/Makefile.in openbsd-compat/xcrypt.c
openbsd-compat/xcrypt.h] Split off encryption into xcrypt() interface,
    and isolate shadow password functions.  Tested in Solaris, but should
    not break other platforms too badly (except maybe HP =).  Also brings
    auth-passwd.c into full sync with OpenBSD tree.
2003-07-24 06:52:13 +00:00
Darren Tucker acb98497fb - (dtucker) [configure.ac] Back out change for bug #620. 2003-07-23 14:33:10 +10:00
Darren Tucker cca1bdb8a8 - djm@cvs.openbsd.org 2003/07/19 00:46:31
[regress/sftp-cmds.sh]
     regress test for sftp arguments with escaped quotes; ok markus
2003-07-19 20:11:54 +10:00
Darren Tucker 554d5b544a - djm@cvs.openbsd.org 2003/07/19 00:45:53
[sftp-int.c]
     fix sftp filename parsing for arguments with escaped quotes. bz #517;
     ok markus
2003-07-19 20:09:21 +10:00
Darren Tucker 03a29baf35 - deraadt@cvs.openbsd.org 2003/07/18 01:54:25
[scp.c]
     userid is unsigned, but well, force it anyways; andrushock@korovino.net
2003-07-19 20:07:45 +10:00
Darren Tucker 538d180395 - markus@cvs.openbsd.org 2003/07/16 10:36:28
[sshtty.c]
     clear IUCLC in enter_raw_mode; from rob@pitman.co.za; ok deraadt@, fgs@
2003-07-19 19:56:18 +10:00
Darren Tucker e98dfa323e - markus@cvs.openbsd.org 2003/07/16 10:34:53
[ssh.c sshd.c]
     don't exit on multiple -v or -d; ok deraadt@
2003-07-19 19:54:31 +10:00
Darren Tucker fe0078ae49 - markus@cvs.openbsd.org 2003/07/14 12:36:37
[sshd.c]
     remove undocumented -V option. would be only useful if openssh is used
     as ssh v1 server for ssh.com's ssh v2.
2003-07-19 19:52:28 +10:00
Darren Tucker 394b8c8db3 - (dtucker) [configure.ac] Bug #620: Define BROKEN_GETADDRINFO for
Solaris/x86.  Patch from jrhett at isite.net.
2003-07-19 19:49:45 +10:00
Darren Tucker 1a721156b0 - markus@cvs.openbsd.org 2003/07/10 20:05:55
[sftp.c]
     sync usage with manpage, add missing -R
2003-07-14 17:32:29 +10:00
Darren Tucker 81a0b371f4 - markus@cvs.openbsd.org 2003/07/10 14:42:28
[packet.c]
     the 2^(blocksize*2) rekeying limit is too expensive for 3DES,
     blowfish, etc, so enforce a 1GB limit for small blocksizes.
2003-07-14 17:31:06 +10:00
Darren Tucker 29588616c2 - avsm@cvs.openbsd.org 2003/07/09 13:58:19
[key.c]
     minor tweak: when generating the hex fingerprint, give strlcat the full
     bound to the buffer, and add a comment below explaining why the
     zero-termination is one less than the bound.  markus@ ok
2003-07-14 17:28:34 +10:00
Darren Tucker 0abf13bb50 - (dtucker) [port-aix.h] Fix prototypes. 2003-07-14 16:43:42 +10:00
Darren Tucker fc3454ee67 - (dtucker) Bug #543: [configure.ac port-aix.c port-aix.h]
Call setauthdb() before loginfailed(), which may load password registry-
   specific functions.  Based on patch by cawlfiel@us.ibm.com.
2003-07-14 16:41:55 +10:00
Darren Tucker 30317e37e4 - (dtucker) [port-aix.h] Work around name collision on AIX for r_type by
undef'ing it.
2003-07-14 16:26:51 +10:00
Darren Tucker 5c6a91a39d - (dtucker) [acconfig.h configure.ac port-aix.c] Older AIXes don't declare
loginfailed at all, so assume 3-arg loginfailed if not declared.
2003-07-14 16:21:44 +10:00
Darren Tucker b9aa0a0baa - (dtucker) [auth-passwd.c auth.c session.c sshd.c port-aix.c port-aix.h]
Convert aixloginmsg into platform-independant Buffer loginmsg.
2003-07-08 22:59:59 +10:00
Darren Tucker 793e817d49 - (dtucker) Check return value of setpcred(). 2003-07-08 21:01:04 +10:00
Darren Tucker a0c0b63112 - (dtucker) [acconfig.h auth-passwd.c configure.ac session.c port-aix.[ch]]
Include AIX headers for authentication functions and make calls match
   prototypes.  Test for and handle 3-args and 4-arg variants of loginfailed.
2003-07-08 20:52:12 +10:00
Darren Tucker f1159b5b29 - (dtucker) [configure.ac] Bug #600: Check that getrusage is declared before
searching libraries for it.  Fixes build errors on NCR MP-RAS.
2003-07-07 19:44:01 +10:00
Darren Tucker 8661b56903 - (dtucker) [ssh-rand-helper.c loginrec.c]
Apply atomicio typing change to these too.
2003-07-06 15:20:46 +10:00
Darren Tucker 0a4f04b5b2 - djm@cvs.openbsd.org 2003/07/03 08:09:06
[readconf.c readconf.h ssh-keysign.c ssh.c]
     fix AddressFamily option in config file, from brent@graveland.net;
     ok markus@
2003-07-03 20:37:47 +10:00
Darren Tucker e2f2be7a3a - markus@cvs.openbsd.org 2003/07/03 08:24:13
[regress/Makefile]
     enable tests for dynamic fwd via socks (-D), uses nc(1)
2003-07-03 20:27:55 +10:00
Darren Tucker 7a2466291b - markus@cvs.openbsd.org 2003/07/03 08:21:46
[regress/dynamic-forward.sh]
     add socks5; speedup; reformat; based on patch from dtucker@zip.com.au
2003-07-03 20:26:04 +10:00
Darren Tucker 3f521e21c0 - markus@cvs.openbsd.org 2003/07/02 20:37:48
[ssh.c]
     convert hostkeyalias to lowercase, otherwise uppercase aliases will
     not match at all; ok henning@
2003-07-03 16:20:42 +10:00
Darren Tucker 46471c9a81 - markus@cvs.openbsd.org 2003/07/02 14:51:16
[channels.c ssh.1 ssh_config.5]
     (re)add socks5 suppport to -D; ok djm@
     now ssh(1) can act both as a socks 4 and socks 5 server and
     dynamically forward ports.
2003-07-03 13:55:19 +10:00
Darren Tucker 9189ff89c3 - markus@cvs.openbsd.org 2003/07/02 12:56:34
[channels.c]
     deny dynamic forwarding with -R for v1, too; ok djm@
2003-07-03 13:52:04 +10:00
Darren Tucker edeb1f7449 - markus@cvs.openbsd.org 2003/06/29 12:44:38
[sshconnect.c]
     memset 0, not \0; andrushock@korovino.net
2003-07-03 13:48:04 +10:00
Darren Tucker 9f63f22aa0 - deraadt@cvs.openbsd.org 2003/06/28 16:23:06
[atomicio.c atomicio.h authfd.c clientloop.c monitor_wrap.c msg.c
     progressmeter.c scp.c sftp-client.c ssh-keyscan.c ssh.h sshconnect.c
     sshd.c]
     deal with typing of write vs read in atomicio
2003-07-03 13:46:56 +10:00
Darren Tucker e53270481c - djm@cvs.openbsd.org 2003/06/28 07:48:10
[sshd.c]
     report pidfile creation errors, based on patch from Roumen Petrov; ok markus@
2003-07-03 13:40:44 +10:00
Damien Miller 200d0a7bf5 - (djm) Search for support functions necessary to build our
getrrsetbyname() replacement. Patch from Roumen Petrov
2003-06-30 19:21:36 +10:00
Darren Tucker 6eb9304782 - (dtucker) [configure.ac] Add sanity test after system-dependant compiler
flag modifications.
2003-06-29 21:30:41 +10:00
Darren Tucker cc9fd54a36 - (dtucker) Bug #602: move #include of netdb.h to after in.h (fixes compiler
warnings on Solaris 2.5.1).
2003-06-29 21:23:37 +10:00
Darren Tucker 3b08df9da7 Same day... 2003-06-29 21:20:04 +10:00
Damien Miller 723569b257 - (djm) Bug #593: Sanity check OpenSC card reader number; patch from
aj@dungeon.inka.de
2003-06-28 18:08:16 +10:00
Damien Miller 4a8e284855 - (djm) Bug #591: use PKCS#15 private key label as a comment in case
of OpenSC. Report and patch from larsch@trustcenter.de
2003-06-28 18:02:47 +10:00
Darren Tucker a3020db6b4 - (dtucker) [configure.ac] Bug #570: Have ./configure --enable-FEATURE
actually enable the feature, for those normally disabled.  Patch by
   openssh (at) roumenpetrov.info.
2003-06-28 12:54:33 +10:00
Darren Tucker b611c12e67 - (dtucker) [regress/dynamic-forward.sh] Import new regression test. 2003-06-28 12:42:09 +10:00
Darren Tucker a99c1b77ab - markus@cvs.openbsd.org 2003/06/26 20:08:33
[readconf.c]
     do not dump core for 'ssh -o proxycommand host'; ok deraadt@
2003-06-28 12:40:12 +10:00
Darren Tucker a6612d43cf - miod@cvs.openbsd.org 2003/06/25 22:39:36
[sftp-server.c]
     Typo police: attribute is better written with an 'r'.
2003-06-28 12:39:03 +10:00
Darren Tucker 502d384b74 - markus@cvs.openbsd.org 2003/06/24 08:23:46
[auth2-hostbased.c auth2-pubkey.c auth2.c channels.c key.c key.h
      monitor.c packet.c packet.h serverloop.c sshconnect2.c sshd.c]
     int -> u_int; ok djm@, deraadt@, mouring@
2003-06-28 12:38:01 +10:00
Darren Tucker 674f71d77e - markus@cvs.openbsd.org 2003/06/23 09:02:44
[ssh_config.5]
     document EnableSSHKeysign; bugzilla #599; ok deraadt@, jmc@
2003-06-28 12:33:12 +10:00
Darren Tucker a0472e095d - (dtucker) Have configure refer the user to config.log and
contrib/findssl.sh for OpenSSL header/library mismatches.
2003-06-24 20:22:09 +10:00
Darren Tucker 89b249be64 Missed a line cut-and-pasting the ChangeLog 2003-06-22 21:22:04 +10:00
Darren Tucker b8dae8ece0 20030622
- (dtucker) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2003/06/20 05:48:21
     [sshd_config]
     sync some implemented options; ok markus@
2003-06-22 20:48:45 +10:00
Darren Tucker 91cf261bd5 20030622
- (dtucker) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2003/06/20 05:47:58
     [sshd_config.5]
     sync description of protocol 2 cipher proposal; ok markus
2003-06-22 20:46:53 +10:00
Darren Tucker a251f809a0 - (dtucker) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/06/18 11:28:11
     [ssh-rsa.c]
     backout last change, since it violates pkcs#1
     switch to share/misc/license.template
2003-06-22 20:45:15 +10:00
Darren Tucker 6cf1a2cfe8 - (dtucker) [openbsd-compat/setproctitle.c] Ensure SPT_TYPE is defined before
testing its value.

When HAVE_SETPROCTITLE is defined (at least on NetBSD, gcc 2.95.3) the test
"#if SPT_TYPE == SPT_REUSEARGV" is not true (probably because SPT_TYPE or
SPT_REUSEARGV is not defined).  This results in the following build error:

$ gcc [flags] setproctitle.c
setproctitle.c: In function `compat_init_setproctitle':
setproctitle.c:102: `argv_start' undeclared (first use in this function)
2003-06-22 18:32:10 +10:00
Darren Tucker e0194e52ca - (dtucker) OpenBSD CVS Sync (regress/)
- markus@cvs.openbsd.org 2003/06/21 09:14:05
     [reconfigure.sh]
     missing $SUDO; from dtucker@zip.com.au
 - (dtucker) [regress/authorized_keys_root] Remove temp data file from CVS.
2003-06-22 12:33:27 +10:00
Darren Tucker 50cea67222 - (dtucker) OpenBSD CVS Sync (regress/)
- markus@cvs.openbsd.org 2003/06/12 15:43:32
     [Makefile]
     test -HUP; dtucker at zip.com.au
2003-06-18 22:45:34 +10:00
Darren Tucker 76437600b2 - (dtucker) OpenBSD CVS Sync (regress/)
- markus@cvs.openbsd.org 2003/06/12 15:40:01
     [try-ciphers.sh]
     add ctr
2003-06-18 22:43:13 +10:00
Darren Tucker c43362c89a - (dtucker) OpenBSD CVS Sync (regress/)
- mouring@cvs.openbsd.org 2003/05/15 04:07:12
     [sftp-cmds.sh]
     Advanced put/get testing for sftp.  OK @djm
2003-06-18 22:41:41 +10:00
Darren Tucker ee5f83d3ea - (dtucker) OpenBSD CVS Sync (regress/)
- markus@cvs.openbsd.org 2003/05/14 22:08:27
     [ssh-com-client.sh ssh-com-keygen.sh ssh-com-sftp.sh ssh-com.sh]
     test against some new commerical versions
2003-06-18 22:36:48 +10:00
Darren Tucker a4040f5904 - (dtucker) OpenBSD CVS Sync (regress/)
- djm@cvs.openbsd.org 2003/04/04 09:34:22
     [Makefile sftp-cmds.sh]
     More regression tests, including recent directory rename bug; ok markus@
2003-06-18 22:35:11 +10:00
Darren Tucker d57a76eec5 - (dtucker) OpenBSD CVS Sync (regress/)
- markus@cvs.openbsd.org 2003/04/02 12:21:13
     [Makefile]
     enable rekey test
2003-06-18 22:32:51 +10:00
Darren Tucker 3a222ac0d0 - (dtucker) [regress/copy.1 regress/copy.2] Remove temp data files from CVS. 2003-06-18 22:21:33 +10:00
Darren Tucker fc8a7ea202 - (dtucker) [reconfigure.sh rekey.sh sftp-badcmds.sh]
Import new regression tests from OpenBSD
2003-06-18 22:18:57 +10:00
Damien Miller 0275b52387 - markus@cvs.openbsd.org 2003/06/17 18:14:23
[cipher-ctr.c]
     use license from /usr/share/misc/license.template for new code
2003-06-18 20:29:35 +10:00
Damien Miller 80163e1b72 - markus@cvs.openbsd.org 2003/06/16 10:22:45
[ssh-add.c]
     print out key comment on each prompt; make ssh-askpass more useable; ok djm@
2003-06-18 20:29:18 +10:00
Damien Miller 8c1d2e3926 - markus@cvs.openbsd.org 2003/06/16 08:22:35
[ssh-rsa.c]
     make sure the signature has at least the expected length (don't
     insist on len == hlen + oidlen, since this breaks some smartcards)
     bugzilla #592; ok djm@
2003-06-18 20:29:01 +10:00
Damien Miller 56a0bb07c4 - markus@cvs.openbsd.org 2003/06/12 19:12:03
[scard.c scard.h ssh-agent.c ssh.c]
     add sc_get_key_label; larsch at trustcenter.de; bugzilla#591
2003-06-18 20:28:40 +10:00
Damien Miller b2cdcb50a2 - nino@cvs.openbsd.org 2003/06/12 15:34:09
[scp.c]
     Typo. Ok markus@.
2003-06-18 20:26:34 +10:00
Damien Miller 116aabbb66 - djm@cvs.openbsd.org 2003/06/12 12:22:47
[LICENCE]
     mention more copyright holders; ok markus@
2003-06-18 20:26:13 +10:00
Damien Miller 469954debd - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/06/12 07:57:38
     [monitor.c sshlogin.c sshpty.c]
     typos; dtucker at zip.com.au
2003-06-18 20:25:33 +10:00
Damien Miller 53950b68bf - (djm) Update license on fake-rfc2553.[ch]; ok itojun@ 2003-06-14 08:43:22 +10:00
Damien Miller af63951c57 - (djm) Put licenses on substantial header files 2003-06-11 22:51:32 +10:00
Damien Miller 141efa7036 - (djm) Mention portable copyright holders in LICENSE 2003-06-11 22:50:56 +10:00
Damien Miller 4bfeb14742 - (djm) Sync LICENSE against OpenBSD 2003-06-11 22:08:36 +10:00
Damien Miller d94f20d28e - djm@cvs.openbsd.org 2003/06/11 11:18:38
[authfd.c authfd.h ssh-add.c ssh-agent.c]
     make agent constraints (lifetime, confirm) work with smartcard keys;
     ok markus@
2003-06-11 22:06:33 +10:00
Damien Miller 0e1b937f13 - jakob@cvs.openbsd.org 2003/06/11 10:18:47
[dns.c]
     sync with check_host_key() change
2003-06-11 22:05:45 +10:00
Damien Miller 7392ae6270 - jakob@cvs.openbsd.org 2003/06/11 10:16:16
[sshconnect.c]
     clean up check_host_key() and improve SSHFP feedback. ok markus@
2003-06-11 22:05:25 +10:00
Damien Miller 2b92d32e19 - deraadt@cvs.openbsd.org 2003/06/10 22:20:52
[packet.c progressmeter.c]
     mostly ansi cleanup; pval ok
2003-06-11 22:05:06 +10:00
Damien Miller f1ce505daf - jmc@cvs.openbsd.org 2003/06/10 09:12:11
[scp.1 sftp-server.8 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5]
     [sshd.8 sshd_config.5 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
     - section reorder
     - COMPATIBILITY merge
     - macro cleanup
     - kill whitespace at EOL
     - new sentence, new line
     ssh pages ok markus@
2003-06-11 22:04:39 +10:00
Damien Miller 78f2e5ca98 - (djm) Re-merge OpenSC info into README.smartcard 2003-06-10 21:09:09 +10:00
Damien Miller c18c06e131 - (djm) Sync README.smartcard with OpenBSD -current 2003-06-10 18:55:22 +10:00
Darren Tucker 400b8786d6 - (dtucker) [uidswap.c] Fix setreuid and add missing args to fatal(). ok djm@ 2003-06-06 10:46:04 +10:00
Darren Tucker 881753bef2 - (dtucker) Define EAI_NONAME in fake-rfc2553.h (used by fake-rfc2553.c). 2003-06-05 22:20:11 +10:00
Darren Tucker 4aff13f1e7 - (dtucker) Add includes.h to fake-rfc2553.c so it will build. 2003-06-05 19:37:30 +10:00
Damien Miller 76b5c8a83a - (djm) Bug #589 - scard-opensc: load only keys with a private keys
Patch from larsch@trustcenter.de
2003-06-05 19:19:35 +10:00
Damien Miller f49078dfdf - (djm) Bug #588 - Add scard-opensc.o back to Makefile.in
Patch from larsch@trustcenter.de
2003-06-05 18:53:42 +10:00
Damien Miller c28e38d23a - (djm) Merge all the openbsd/fake-* into fake-rfc2553.[ch] 2003-06-05 18:52:47 +10:00
Damien Miller b95bb7f9b1 - (djm) Don't use xmalloc() or pull in toplevel headers in fake-* code 2003-06-05 10:04:12 +10:00
Damien Miller 5fe46a45c8 - (djm) Implement paranoid priv dropping checks, based on:
"SetUID demystified" - Hao Chen, David Wagner and Drew Dean
   Proceedings of USENIX Security Symposium 2002
2003-06-05 09:53:31 +10:00
Damien Miller 10eac0cf8f - (djm) Support AI_NUMERICHOST in fake-getaddrinfo.c. Needed for recent
canohost.c changes.
2003-06-05 09:48:32 +10:00
Damien Miller 0cbb9dea05 - (djm) Always use mysignal() for SIGALRM 2003-06-04 22:56:15 +10:00
Damien Miller cc685c1cbe - djm@cvs.openbsd.org 2003/06/04 12:41:22
[sftp.c]
     kill ssh process on receipt of signal; ok markus@
2003-06-04 22:51:38 +10:00
Damien Miller b69aaa8db7 - djm@cvs.openbsd.org 2003/06/04 12:40:39
[scp.c]
     kill ssh process upon receipt of signal, bz #241.
     based on patch from esb AT hawaii.edu; ok markus@
2003-06-04 22:51:24 +10:00
Damien Miller 65d1f5765f - djm@cvs.openbsd.org 2003/06/04 12:18:49
[scp.c]
     ansify; ok markus@
2003-06-04 22:51:08 +10:00
Damien Miller 9fc7c699af - djm@cvs.openbsd.org 2003/06/04 12:03:59
[serverloop.c]
     remove bitrotten commet; ok markus@
2003-06-04 22:50:54 +10:00
Damien Miller 4c322482bb - (djm) Update to fix of bug #584: lock card before return.
From larsch@trustcenter.de
2003-06-04 22:12:17 +10:00
Damien Miller 31b3a0a98f - djm@cvs.openbsd.org 2003/06/04 10:23:48
[sshd.c]
     remove duplicated group-dropping code; ok markus@
2003-06-04 20:32:12 +10:00
Damien Miller 941ac459ce - (djm) OpenBSD CVS Sync
- djm@cvs.openbsd.org 2003/06/04 08:25:18
     [sshconnect.c]
     disable challenge/response and keyboard-interactive auth methods
     upon hostkey mismatch. based on patch from fcusack AT fcusack.com.
     bz #580; ok markus@
2003-06-04 20:31:53 +10:00
Damien Miller 2527f5755a - (djm) Bug #584: scard-opensc.c doesn't work without PIN. Patch from
larsch@trustcenter.de; ok markus@
2003-06-04 19:22:06 +10:00
Damien Miller 485397c48d - (djm) Bug #577 - wrong flag in scard-opensc.c sc_private_decrypt.
ok markus@
2003-06-04 19:15:10 +10:00
Damien Miller 865173ee03 - (djm) Bug #573 - Remove unneeded Krb headers and compat goop. Patch from
simon@sxw.org.uk (Also matches a change in OpenBSD a while ago)
2003-06-04 19:06:59 +10:00
Damien Miller d311c4e54b change "No more 4-term BSD licenses in our tree" to
"No more 4-term BSD licenses in linked code"

mdoc2man.pl is 4-term BSDL
2003-06-03 13:09:16 +10:00
Damien Miller dafb12ed28 a - millert@cvs.openbsd.org 2003/06/03 02:56:16
[scp.c]
     Remove the advertising clause in the UCB license which Berkeley
     rescinded 22 July 1999.  Proofed by myself and Theo.
2003-06-03 13:06:18 +10:00
Darren Tucker eb28cbc399 - (dtucker) [port-aix.c bsd-cray.c] Fix uses of verify_reverse_mapping. 2003-06-03 12:45:27 +10:00
Damien Miller 048d88d5aa trim prior to 3.6p1 2003-06-03 12:43:14 +10:00
Damien Miller 329638e49c - (djm) Sync openbsd-compat with OpenBSD CVS.
- No more 4-term BSD licenses in our tree
2003-06-03 12:12:50 +10:00
Damien Miller 3a961dc0d3 - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/06/02 09:17:34
     [auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c]
     [canohost.c monitor.c servconf.c servconf.h session.c sshd_config]
     [sshd_config.5]
     deprecate VerifyReverseMapping since it's dangerous if combined
     with IP based access control as noted by Mike Harding; replace with
     a UseDNS option, UseDNS is on by default and includes the
     VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@
     ok deraadt@, djm@
 - (djm) Fix portable-specific uses of verify_reverse_mapping too
2003-06-03 10:25:48 +10:00
Damien Miller 35276253a6 - (djm) Replace setproctitle replacement with code derived from
UCB sendmail
2003-06-03 10:14:28 +10:00
Damien Miller eacbb4fcc1 - jakob@cvs.openbsd.org 2003/06/02 08:31:10
[ssh_config.5]
     VerifyHostKeyDNS is v2 only. ok markus@
2003-06-02 19:10:41 +10:00
Damien Miller 61d3680aca - deraadt@cvs.openbsd.org 2003/05/29 16:58:45
[sshd.c uidswap.c]
     seteuid and setegid; markus ok
2003-06-02 19:09:48 +10:00
Damien Miller ab2db41b61 - djm@cvs.openbsd.org 2003/05/26 12:54:40
[sshconnect.c]
     fix format strings; ok markus@
2003-06-02 19:09:13 +10:00
Damien Miller f46844214d - (djm) Sync license on openbsd-compat/bindresvport.c with OpenBSD CVS 2003-06-02 18:59:08 +10:00
Damien Miller dcc8312a19 - (djm) Fix use of macro before #define in cipher-aes.c 2003-06-02 18:57:59 +10:00
Damien Miller dba5950820 - (djm) Remove "noip6" option from RedHat spec file. This may now be
set at runtime using AddressFamily option.
2003-06-02 17:43:19 +10:00
Tim Rice 237ca4ab08 openbsd-compat/xmmap.[ch] License clarifications. Add missing CVS ID. 2003-06-01 19:25:27 -07:00
Damien Miller f2e3e9deba - (djm) Always use saved_argv in sshd.c as compat_init_setproctitle may
clobber
2003-06-02 12:15:54 +10:00
Damien Miller f3bff94957 - (djm) Fix segv from bad reordering in auth-pam.c 2003-06-02 12:13:40 +10:00
Darren Tucker 2972d6c045 - (dtucker) Define SSHD_ACQUIRES_CTTY for NCR MP-RAS and Reliant Unix.
I'm pretty sure these are required.  I also want to add -D_XOPEN_SOURCE=1
-D_XOPEN_SOURCE_EXTENDED=1 to CPPFLAGS for MP-RAS but I haven't had confirmation
that it will not break anything else.
2003-05-30 17:43:42 +10:00
Darren Tucker 3cb84e5ec8 - (dtucker) Add missing semicolon in md5crypt.c, patch from openssh at
roumenpetrov.info
2003-05-30 16:58:22 +10:00
Damien Miller a6a7c19dcb - (djm) Avoid auth2-chall.c warning when compiling without
PAM, BSD_AUTH and SKEY
2003-05-26 21:36:13 +10:00
Damien Miller 04bd8b0bcc - djm@cvs.openbsd.org 2003/05/24 09:30:40
[authfile.c monitor.c sftp-common.c sshpty.c]
     cast some types for printing; ok markus@
2003-05-25 14:38:33 +10:00
Damien Miller c11fe255ab - (djm) OpenBSD CVS Sync
- djm@cvs.openbsd.org 2003/05/24 09:02:22
     [log.c]
     pass logged data through strnvis; ok markus
2003-05-25 14:38:02 +10:00
Darren Tucker 6014578b90 - (dtucker) Correct --osfsia in INSTALL. Patch by skeleten at shillest.net 2003-05-24 11:41:16 +10:00
Damien Miller 08293fa435 - djm@cvs.openbsd.org 2003/05/23 08:29:30
[sshconnect.c]
     fix leak; ok markus@
2003-05-23 18:44:41 +10:00
Damien Miller fbf486b4a6 - jmc@cvs.openbsd.org 2003/05/20 12:09:31
[ssh.1 ssh_config.5 sshd.8 sshd_config.5 ssh-keygen.1]
     new sentence, new line
2003-05-23 18:44:23 +10:00
Damien Miller 5067792a72 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2003/05/20 12:03:35
     [sftp.1]
     - new sentence, new line
     - added .Xr's
     - typos
     ok djm@
2003-05-23 18:44:04 +10:00
Damien Miller d419bdae77 - (djm) Use VIS_SAFE on logged strings rather than default strnvis
encoding (which encodes many more characters)
2003-05-23 18:43:40 +10:00
Damien Miller 1340ec297b - (djm) Configure logic to detect syslog_r and friends 2003-05-20 09:24:42 +10:00
Damien Miller 74a3442d10 - deraadt@cvs.openbsd.org 2003/05/18 23:22:01
[log.c]
     use syslog_r() in a signal handler called place; markus ok
2003-05-20 09:24:17 +10:00
Damien Miller eb0e969a4f - (djm) Sync auth-pam.h with what we actually implement 2003-05-19 11:28:44 +10:00
Damien Miller 5b5ca19ef0 - (djm) KNF on auth-sia.[ch] 2003-05-19 00:50:02 +10:00
Damien Miller e7fb103192 - (djm) KNF on md5crypt.c 2003-05-19 00:46:46 +10:00
Damien Miller 317412502b - (djm) Big KNF on openbsd-compat/ 2003-05-19 00:13:38 +10:00
Damien Miller e323df6c48 - (djm) Sync openbsd-compat/ with OpenBSD CVS head 2003-05-18 22:24:09 +10:00
Damien Miller 0b8e9006d8 - (djm) Tidy and trim TODO 2003-05-18 21:44:07 +10:00
Damien Miller f5399c24dc - markus@cvs.openbsd.org 2003/05/17 04:27:52
[cipher.c cipher-ctr.c myproposal.h]
     experimental support for aes-ctr modes from
     http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt
     ok djm@
2003-05-18 20:53:59 +10:00
Damien Miller a9825785e8 - itojun@cvs.openbsd.org 2003/05/17 03:25:58
[auth-rhosts.c]
     just in case, put numbers to sscanf %s arg.
2003-05-18 20:53:10 +10:00
Damien Miller 7e1bbc55af - (djm) Remove IPv4 by default hack now that we can specify AF in config 2003-05-18 20:52:40 +10:00
Damien Miller 20a8f97b03 - djm@cvs.openbsd.org 2003/05/16 03:27:12
[readconf.c ssh_config ssh_config.5 ssh-keysign.c]
     add AddressFamily option to ssh_config (like -4, -6 on commandline).
     Portable bug #534; ok markus@
2003-05-18 20:50:30 +10:00
Damien Miller 25d9342f04 - (djm) Return of the dreaded PAM_TTY_KLUDGE, which went missing in
recent merge
2003-05-18 20:45:47 +10:00
Ben Lindstrom 4c9e9ab165 - (bal) strcat -> strlcat on openbsd-compat/realpath.c (rev 1.8 OpenBSD) 2003-05-18 01:22:43 +00:00
Damien Miller e27c6cc3ad - (djm) Guard free_pam_environment against NULL argument. Works around
HP/UX PAM problems debugged by dtucker
2003-05-16 18:21:01 +10:00
Damien Miller c46b6bc4f7 - (djm) A few type mismatch fixes from Bug #565 2003-05-16 15:51:44 +10:00
Damien Miller 6ac2c48a19 - (djm) Add warning for UsePAM when built without PAM support 2003-05-16 11:42:35 +10:00
Damien Miller b78d5eb6c5 - djm@cvs.openbsd.org 2003/05/15 14:55:25
[readconf.c readconf.h ssh_config ssh_config.5 sshconnect.c]
     add a ConnectTimeout option to ssh, based on patch from
     Jean-Charles Longuet (jclonguet at free.fr); portable #207 ok markus@
2003-05-16 11:39:04 +10:00
Damien Miller 99b4b88aba - markus@cvs.openbsd.org 2003/05/15 14:09:21
[auth2-krb5.c]
     fix 64bit issue; report itojun@
2003-05-16 11:38:46 +10:00
Damien Miller f9b3feb847 - jakob@cvs.openbsd.org 2003/05/15 14:02:47
[readconf.c servconf.c]
     warn for unsupported config option. ok markus@
2003-05-16 11:38:32 +10:00
Damien Miller 6e80c36e2a - (djm) OpenBSD CVS Sync
- djm@cvs.openbsd.org 2003/05/15 13:52:10
     [ssh.c]
     Make "ssh -V" print the OpenSSL version in a human readable form. Patch
     from Craig Leres (mindrot at ee.lbl.gov); ok markus@
2003-05-16 11:38:00 +10:00
Darren Tucker 5d0ccf3b24 - (dtucker) HP-UX needs to include <sys/strtio.h> for TIOCSBRK 2003-05-15 21:42:59 +10:00
Damien Miller eff041d19e - (djm) Bug #444: Wrong paths after reconfigure 2003-05-15 21:33:46 +10:00
Damien Miller 04cb536054 - (djm) Bug #529: sshd doesn't work correctly after SIGHUP (copy argv
correctly)
2003-05-15 21:29:10 +10:00
Damien Miller b10f1cd878 - (djm) Only build getrrsetbyname replacement when using --with-dns 2003-05-15 20:55:27 +10:00
Damien Miller 46a7b40d1e - markus@cvs.openbsd.org 2003/05/15 04:08:41
[ssh.1]
     ~B is ssh2 only
2003-05-15 14:17:28 +10:00
Damien Miller 156cbe8c67 - (djm) Enable UsePAM when built --with-pam 2003-05-15 14:16:41 +10:00
Damien Miller d248b5bd1b - jakob@cvs.openbsd.org 2003/05/15 04:08:44
[readconf.c servconf.c]
     disable kerberos when not supported. ok markus@
2003-05-15 14:15:23 +10:00
Damien Miller ffda4cb218 - (djm) Avoid uuencode.c warnings 2003-05-15 13:57:51 +10:00
Damien Miller 34bb56743a - mouring@cvs.openbsd.org 2003/05/15 03:43:59
[sftp-int.c sftp.c]
     Teach ls how to display multiple column display and allow users
     to return to single column format via 'ls -1'.  OK @djm
2003-05-15 13:49:58 +10:00
Damien Miller 19c8f2b310 - mouring@cvs.openbsd.org 2003/05/15 03:43:59
[sftp-int.c]
     Teach ls how to display multiple column display and allow users
     to return to single column format via 'ls -1'.  OK @djm
2003-05-15 13:49:21 +10:00
Damien Miller 4962ed6ab4 - mouring@cvs.openbsd.org 2003/05/15 03:39:07
[sftp-int.c]
     Make put/get (globed and nonglobed) code more consistant. OK djm@
2003-05-15 13:48:59 +10:00
Damien Miller ed12a26f0d - djm@cvs.openbsd.org 2003/05/15 03:10:52
[ssh-keygen.c]
     avoid warning; ok jakob@
2003-05-15 13:37:43 +10:00
Damien Miller 3a3261ff99 - markus@cvs.openbsd.org 2003/05/15 03:08:29
[cipher.c cipher-bf1.c cipher-aes.c cipher-3des1.c]
     split out custom EVP ciphers
2003-05-15 13:37:19 +10:00
Damien Miller b0622653ba - jakob@cvs.openbsd.org 2003/05/15 02:27:15
[dns.c]
     add missing freerrset
2003-05-15 13:27:28 +10:00
Damien Miller 5975cf12c3 - (djm) Adapt README.dns for portable 2003-05-15 13:23:36 +10:00
Damien Miller a47f526dd7 - (djm) Tidy Makefile clean targets 2003-05-15 13:23:07 +10:00
Damien Miller d9ec370ac3 - (djm) Import getrrsetbyname() function from OpenBSD libc (for DNS support) 2003-05-15 12:27:08 +10:00
Damien Miller 2aa0ab463f - jakob@cvs.openbsd.org 2003/05/15 01:48:10
[readconf.c readconf.h servconf.c servconf.h]
     always parse kerberos options. ok djm@ markus@
 - (djm) Always parse UsePAM
2003-05-15 12:05:28 +10:00
Damien Miller f842fcb296 - markus@cvs.openbsd.org 2003/05/15 00:28:28
[sshconnect2.c]
     cleanup unregister of per-method packet handlers; ok djm@
2003-05-15 12:01:28 +10:00
Damien Miller 7abe09bf86 - (djm) Configure glue for DNS support (code doesn't work in portable yet) 2003-05-15 10:53:49 +10:00
Damien Miller 54c459866e - markus@cvs.openbsd.org 2003/05/14 22:24:42
[clientloop.c session.c ssh.1]
     allow to send a BREAK to the remote system; ok various
2003-05-15 10:20:13 +10:00
Damien Miller 37876e913a - jakob@cvs.openbsd.org 2003/05/14 18:16:20
[key.c key.h readconf.c readconf.h ssh_config.5 sshconnect.c]
     [dns.c dns.h README.dns ssh-keygen.1 ssh-keygen.c]
     add experimental support for verifying hos keys using DNS as described
     in draft-ietf-secsh-dns-xx.txt. more information in README.dns.
     ok markus@ and henning@
2003-05-15 10:19:46 +10:00
Damien Miller abbae980e7 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2003/05/14 13:11:56
     [ssh-agent.1]
     setup -> set up;
     from wiz@netbsd
2003-05-15 10:16:21 +10:00
Damien Miller 1ea7166019 - (djm) Bug #258: sscanf("[0-9]") -> sscanf("[0123456789]") for portability 2003-05-14 22:33:58 +10:00
Darren Tucker abef5628e8 - (dtucker) Set ai_socktype and ai_protocol in fake-getaddrinfo.c. ok djm@ 2003-05-14 21:48:51 +10:00
Damien Miller be64d43d01 - markus@cvs.openbsd.org 2003/05/14 08:57:49
[monitor.c]
     http://bugzilla.mindrot.org/show_bug.cgi?id=560
     Privsep child continues to run after monitor killed.
     Pass monitor signals through to child; Darren Tucker
2003-05-14 19:31:12 +10:00
Damien Miller d6ead282db - jmc@cvs.openbsd.org 2003/05/14 08:25:39
[sftp.1]
     - better formatting in SYNOPSIS
     - whitespace at EOL
     ok djm@
2003-05-14 19:30:38 +10:00
Damien Miller 4d99519535 - (djm) Avoid KrbV leak for MIT Kerberos 2003-05-14 19:23:56 +10:00
Damien Miller 9d507dac1f - (djm) Die screaming if start_pam() is called when UsePAM=no 2003-05-14 15:31:12 +10:00
Damien Miller 4e448a31ae - (djm) Add new UsePAM configuration directive to allow runtime control
over usage of PAM. This allows non-root use of sshd when built with
   --with-pam
2003-05-14 15:11:48 +10:00
Damien Miller 9c617693c2 - (djm) Make portable build with MIT krb5 (some issues remain) 2003-05-14 14:31:11 +10:00
Damien Miller 3ab496b3dd - markus@cvs.openbsd.org 2003/05/14 02:15:47
[auth2.c monitor.c sshconnect2.c auth2-krb5.c]
     implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@
     server interops with commercial client; ok jakob@ djm@
2003-05-14 13:47:37 +10:00
Damien Miller fb7508edc8 - djm@cvs.openbsd.org 2003/05/14 01:00:44
[sftp.1]
     emphasise the batchmode functionality and make reference to pubkey auth,
     both of which are FAQs; ok markus@
2003-05-14 13:47:07 +10:00
Damien Miller 935063553a - markus@cvs.openbsd.org 2003/05/12 18:35:18
[ssh-keyscan.1]
     typo: DSA keys are of type ssh-dss; Brian Poole
2003-05-14 13:46:33 +10:00
Damien Miller 280ecfb6e4 - markus@cvs.openbsd.org 2003/05/12 16:55:37
[sshconnect2.c]
     for pubkey authentication try the user keys in the following order:
        1. agent keys that are found in the config file
        2. other agent keys
        3. keys that are only listed in the config file
     this helps when an agent has many keys, where the server might
     close the connection before the correct key is used. report & ok pb@
2003-05-14 13:46:00 +10:00
Damien Miller b1ca8bb159 - markus@cvs.openbsd.org 2003/05/11 20:30:25
[channels.c clientloop.c serverloop.c session.c ssh.c]
     make channel_new() strdup the 'remote_name' (not the caller); ok theo
2003-05-14 13:45:42 +10:00
Damien Miller db2747259c - markus@cvs.openbsd.org 2003/05/11 16:56:48
[authfile.c ssh-keygen.c]
     change key_load_public to try to read a public from:
     rsa1 private or rsa1 public and ssh2 keys.
     this makes ssh-keygen -e fail for ssh1 keys more gracefully
     for example; report from itojun (netbsd pr 20550).
2003-05-14 13:45:22 +10:00
Damien Miller 3155432cd9 - david@cvs.openbsd.org 2003/04/30 20:41:07
[sshd.8]
     fix invalid .Pf macro usage introduced in previous commit
     ok jmc@ mouring@
2003-05-14 13:44:58 +10:00
Damien Miller 049245d260 - mouring@cvs.openbsd.org 2003/04/30 01:16:20
[sshd.8 sshd_config.5]
     Escape ?, * and ! in .Ql for nroff compatibility.  OpenSSH Portable
     Bug #550 and * escaping suggested by jmc@.
2003-05-14 13:44:42 +10:00
Damien Miller ea5ade28fb - deraadt@cvs.openbsd.org 2003/04/26 04:29:49
[ssh-keyscan.c]
     -t in usage(); rogier@quaak.org
2003-05-14 13:43:53 +10:00
Damien Miller 8ce778a9f0 - markus@cvs.openbsd.org 2003/04/16 14:35:27
[auth.h]
     document struct Authctxt; with solar
2003-05-14 13:43:25 +10:00
Damien Miller 2372ace572 - markus@cvs.openbsd.org 2003/04/14 14:17:50
[channels.c sshconnect.c sshd.c ssh-keyscan.c]
     avoid hardcoded SOCK_xx; with itojun@; should allow ssh over SCTP
2003-05-14 13:42:23 +10:00
Damien Miller 44e72a764f - naddy@cvs.openbsd.org 2003/04/12 11:40:15
[ssh.1]
     document -V switch, fix wording; ok markus@
2003-05-14 13:42:08 +10:00
Damien Miller ef095ce00a - markus@cvs.openbsd.org 2003/04/12 10:15:36
[misc.c]
     debug->debug2
2003-05-14 13:41:39 +10:00
Damien Miller a201bb3f8a - markus@cvs.openbsd.org 2003/04/12 10:13:57
[cipher.c]
     hide cipher details; ok djm@
2003-05-14 13:41:23 +10:00
Damien Miller c652cac5f7 - (djm) OpenBSD CVS Sync
- djm@cvs.openbsd.org 2003/04/09 12:00:37
     [readconf.c]
     strip trailing whitespace from config lines before parsing.
     Fixes bz 528; ok markus@
2003-05-14 13:40:54 +10:00
Damien Miller d558092522 - (djm) RCSID sync w/ OpenBSD 2003-05-14 13:40:06 +10:00
Damien Miller 1a27a1ee8c - (djm) Bug #117: Don't lie to PAM about username 2003-05-14 10:27:09 +10:00
Damien Miller 75d3b05c57 - (djm) Redhat spec: Don't install profile.d scripts when not
building with GNOME/GTK askpass (patch from bet@rahul.net)
2003-05-12 18:15:49 +10:00
Damien Miller 0d8b792931 - (djm) 2-clause license on loginrec.c, with permission from
andre@ae-35.com
2003-05-10 23:42:12 +10:00
Damien Miller 4f9f42a9bb - (djm) Merge FreeBSD PAM code: replaces PAM password auth kludge with
proper challenge-response module
2003-05-10 19:28:02 +10:00
Darren Tucker c437cda328 - (dtucker) Bug #536: Test for and work around openpty/controlling tty
problem on Linux (fixes "could not set controlling tty" errors).

Also renames STREAMS_PUSH_ACQUIRES_CTTY to the more generic SSHD_ACQUIRES_CTTY
and moves the Solaris-specific comments to configure.ac.
2003-05-10 17:05:46 +10:00
Darren Tucker e8831091c3 - (dtucker) Bug #318: Create ssh_prng_cmds.out during "make" rather than
"make install".  Patch by roth@feep.net.
2003-05-10 16:48:23 +10:00
Darren Tucker ac279284f6 Add bug# to ChangeLog. 2003-05-04 11:36:25 +10:00
Darren Tucker 70a08cd29d - (dtucker) Move #include of bsd-cygwin_util.h to openbsd-compat.h. Patch from
vinschen@redhat.com.
2003-05-04 10:41:20 +10:00
Darren Tucker 04cc5385b1 - (dtucker) Add missing "void" to record_failed_login in bsd-cray.c. Noted
by wendyp@cray.com.
2003-05-03 07:32:56 +10:00
Darren Tucker bd570d7a22 Added ok for record_failed_login() change 2003-05-02 23:50:09 +10:00
Darren Tucker 97363a8b24 - (dtucker) Move handling of bad password authentications into a platform
specific record_failed_login() function (affects AIX & Unicos).
2003-05-02 23:42:25 +10:00
Darren Tucker 3c01654deb - (dtucker) Bug #544: ignore invalid cmsg_type on Linux 2.0 kernels,
privsep should now work.
2003-05-02 20:48:21 +10:00
Damien Miller eab4bae038 - (djm) Add back radix.o (used by AFS support), after it went missing from
Makefile many moons ago
 - (djm) Apply "owl-always-auth" patch from Openwall/Solar Designer
 - (djm) Fix blibpath specification for AIX/gcc
 - (djm) Some systems have basename in -lgen. Fix from ayamura@ayamura.org
2003-04-29 23:22:40 +10:00
Ben Lindstrom 0e7f4363f3 - (bal) [defines.h progressmeter.c scp.c] Some more culling of non 64bit
hacked code.
2003-04-28 23:30:43 +00:00
Ben Lindstrom f50ad1fd04 - (bal) auth2.c same changed as above. 2003-04-27 18:44:31 +00:00
Ben Lindstrom 683036ee2c - (bal) auth1.c minor resync while looking at the code. 2003-04-27 18:41:30 +00:00
Ben Lindstrom 796b9a5495 - (bal) Since we don't support platforms lacking u_int_64. We may
as well clean out some of those evil #ifdefs
2003-04-27 18:01:37 +00:00
Ben Lindstrom 93b6b776ad - (bal) Bug #541: return; was dropped by mistake. Reported by
furrier@iglou.com
2003-04-27 17:55:33 +00:00
Damien Miller 2a3f20e397 - (djm) Fix missed log => logit occurance (reference by function pointer) 2003-04-09 21:12:00 +10:00
Damien Miller bf2a0174e3 - hin@cvs.openbsd.org 2003/04/09 08:23:52
[servconf.c]
     Don't include <krb.h> when compiling with Kerberos 5 support
2003-04-09 21:07:14 +10:00
Damien Miller a0898b8505 - itojun@cvs.openbsd.org 2003/04/08 20:21:29
[*.c *.h]
     rename log() into logit() to avoid name conflict.  markus ok, from
     netbsd
     - (djm) XXX - Performed locally using:
       "perl -p -i -e 's/(\s|^)log\(/$1logit\(/g' *.c *.h"
   - (djm) Fix up missing include for packet.c
2003-04-09 21:05:52 +10:00
Damien Miller b1ecd9cd97 - markus@cvs.openbsd.org 2003/04/07 08:29:57
[monitor_wrap.c]
     typo: get correct counters; introduced during rekeying change.
2003-04-09 20:51:24 +10:00
Damien Miller 3bed191ca2 - itojun@cvs.openbsd.org 2003/04/03 07:25:27
[progressmeter.c]
     $OpenBSD$
   - itojun@cvs.openbsd.org 2003/04/03 10:17:35
     [progressmeter.c]
     remove $OpenBSD$, as other *.c does not have it.
2003-04-09 20:50:59 +10:00
Damien Miller 703ced55bb - markus@cvs.openbsd.org 2003/04/02 14:36:26
[ssh-keysign.c]
     potential segfault if KEY_UNSPEC; cjwatson@debian.org; bug #526
2003-04-09 20:50:26 +10:00
Damien Miller a5539d2698 - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/04/02 09:48:07
     [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
     [readconf.h serverloop.c sshconnect2.c]
     reapply rekeying chage, tested by henning@, ok djm@
2003-04-09 20:50:06 +10:00
Damien Miller a92a589e97 - (djm) Make the spec work with Redhat 9.0 (which renames sharutils) 2003-04-09 19:41:25 +10:00
Damien Miller d186d74410 - (djm) Bug #539: Specify creation mode with O_CREAT for lastlog. Report
from matth@eecs.berkeley.edu
2003-04-09 19:40:33 +10:00
Ben Lindstrom c8a49d743a - (bal) if IP_TOS is not found or broken don't try to compile in
packet_set_tos() function call.  bug #527
2003-04-02 15:18:22 +00:00
Damien Miller a0ab669c13 - (djm) Release 3.6.1p1 2003-04-01 21:47:16 +10:00
Damien Miller b80e52ab6f - (djm) Crank spec file versions 2003-04-01 21:46:53 +10:00
Damien Miller 13c1c7a75e - markus@cvs.openbsd.org 2003/04/01 10:56:46
[version.h]
     3.6.1
2003-04-01 21:45:26 +10:00
Damien Miller d32090426b - markus@cvs.openbsd.org 2003/04/01 10:31:26
[compat.c compat.h kex.c]
     bugfix causes stalled connections for ssh.com < 3.0; noticed by ho@;
     tested by ho@ and myself
2003-04-01 21:44:37 +10:00
Damien Miller 2dc074ef4b - markus@cvs.openbsd.org 2003/04/01 10:10:23
[clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
     [readconf.h serverloop.c sshconnect2.c]
     rekeying bugfixes and automatic rekeying:
     * both client and server rekey _automatically_
           (a) after 2^31 packets, because after 2^32 packets
               the sequence number for packets wraps
           (b) after 2^(blocksize_in_bits/4) blocks
       (see: draft-ietf-secsh-newmodes-00.txt)
       (a) and (b) are _enabled_ by default, and only disabled for known
       openssh versions, that don't support rekeying properly.
     * client option 'RekeyLimit'
     * do not reply to requests during rekeying
   - markus@cvs.openbsd.org 2003/04/01 10:22:21
     [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
     [readconf.h serverloop.c sshconnect2.c]
     backout rekeying changes (for 3.6.1)
2003-04-01 21:43:39 +10:00
Damien Miller 495dca3518 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2003/03/28 10:11:43
     [scp.1 sftp.1 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5 sshd_config.5]
     [ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
     - killed whitespace
     - new sentence new line
     - .Bk for arguments
     ok markus@
2003-04-01 21:42:14 +10:00
Damien Miller b3207e8061 - (djm) OpenBSD CVS Sync
- deraadt@cvs.openbsd.org 2003/03/26 04:02:51
     [sftp-server.c]
     one last fix to the tree: race fix broke stuff; pr 3169;
     srp@srparish.net, help from djm
2003-03-26 16:01:11 +11:00
Damien Miller 68d893dfed - (djm) Fix getpeerid support for 64 bit BE systems. From
Arnd Bergmann <arndb@de.ibm.com>
2003-03-25 09:07:52 +11:00
Damien Miller 62b6b17080 - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
Report from murple@murple.net, diagnosis from dtucker@zip.com.au
2003-03-24 13:35:58 +11:00
Damien Miller b062c293e0 - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/03/23 19:02:00
     [monitor.c]
     unbreak rekeying for privsep; ok millert@
2003-03-24 09:12:09 +11:00
Tim Rice 009b23f6ab [contrib/caldera/openssh.spec] workaround RPM quirk. Fix %files section 2003-03-20 20:50:41 -08:00
Ben Lindstrom c8c548d248 - (bal) Disable Privsep for Tru64 after pre-authentication due to issues
with SIA.  Also, clean up of tru64 support patch by Chris Adams
   <cmadams@hiwaay.net>
2003-03-21 01:18:09 +00:00
Ben Lindstrom a5a2648b81 - (bal) Collection of Cray patches (bsd-cray.h fix for CRAYT3E and improved
guessing rules)
2003-03-21 01:05:37 +00:00
Ben Lindstrom d54d9382a4 - (bal) scp.c 'limit' conflicts with Cray. Rename to 'limitbw' 2003-03-21 00:55:32 +00:00
Ben Lindstrom 5bd6eb71da - (bal) The days of lack of int64_t support are over. Sorry kids. 2003-03-21 00:34:34 +00:00
Damien Miller 4874c32531 - markus@cvs.openbsd.org 2003/03/17 11:43:47
[version.h]
     enter 3.6
2003-03-20 10:11:34 +11:00
Damien Miller 05f5578e1f - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/03/17 10:38:38
     [progressmeter.c]
     don't print \n if backgrounded; from ho@
2003-03-20 10:08:05 +11:00
Tim Rice 4e4dc561ae [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
add nanosleep(). testing/corrections by Darren Tucker <dtucker@zip.com.au>
2003-03-18 10:21:40 -08:00
Damien Miller cafbcc7334 - (djm) Fix return value checks for RAND_bytes. Report from
Steve G <linux_4ever@yahoo.com>
2003-03-17 16:13:53 +11:00
Damien Miller c51d0735a4 - markus@cvs.openbsd.org 2003/03/13 11:44:50
[ssh-agent.c]
     ssh-agent is similar to ssh-keysign (allows other processes to use
     private rsa keys). however, it gets key over socket and not from
     a file, so we have to do blinding here as well.
2003-03-15 11:37:09 +11:00
Damien Miller ed33d3b4d2 - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/03/13 11:42:19
     [authfile.c ssh-keysign.c]
     move RSA_blinding_on to generic key load method
2003-03-15 11:36:18 +11:00
Damien Miller c1365e19b0 Fix bug # 2003-03-13 09:42:51 +11:00
Damien Miller c9c1d3757f - (djm) AIX package builder update from dtucker@zip.com.au 2003-03-10 12:10:45 +11:00
Damien Miller 933cc8fb9c - (djm) Bug #245: TTY problems on Solaris. Fix by stevesk@ and
dtucker@zip.com.au
2003-03-10 11:38:10 +11:00
Damien Miller f211efc690 - (djm) One more portable-specific one from dlheine@suif.Stanford.EDU/
CLOUSEAU
2003-03-10 11:23:06 +11:00
Damien Miller 0011138d47 - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/03/05 22:33:43
     [channels.c monitor.c scp.c session.c sftp-client.c sftp-int.c]
     [sftp-server.c ssh-add.c sshconnect2.c]
     fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@
2003-03-10 11:21:17 +11:00
Damien Miller ca49a97788 - (djm) Fix some compile errors spotted by dtucker and his fabulous
tinderbox
2003-02-25 10:22:35 +11:00
Damien Miller fe1f14375a - (djm) Bug #456: Support for NEC SX6 with Unicos; from wendyp@cray.com 2003-02-24 15:45:42 +11:00
Damien Miller 1a3ccb07c5 - (djm) Bug #494: Allow multiple accounts on Windows 9x/Me;
From vinschen@redhat.com
2003-02-24 13:04:01 +11:00
Damien Miller 8d8168a255 - (djm) Rest of Bug #499: Import a basename() function from OpenBSD libc 2003-02-24 12:55:55 +11:00
Damien Miller b16f874d89 - (djm) Most of Bug #499: Cygwin compile fixes for new progressmeter 2003-02-24 12:47:15 +11:00
Damien Miller 30947c7287 - (djm) Bug #501: gai_strerror should return char*;
fix from dtucker@zip.com.au
2003-02-24 12:35:08 +11:00
Damien Miller d194048f57 - (djm) Add new object files to Makefile and reorder 2003-02-24 12:18:46 +11:00
Damien Miller 543402108e - mpech@cvs.openbsd.org 2003/02/21 10:34:48
[auth-krb4.c]
     ...sizeof(&adat.session) is not good here.
     henning@, deraadt@, millert@
2003-02-24 12:05:18 +11:00
Damien Miller 9f82c8fa4f - markus@cvs.openbsd.org 2003/02/21 09:05:53
[servconf.c]
     print sshd_config filename in debug2 mode.
2003-02-24 12:04:33 +11:00
Damien Miller 06ebedf365 - markus@cvs.openbsd.org 2003/02/16 17:30:33
[monitor.c monitor_wrap.c]
     fix permitrootlogin forced-commands-only for privsep; bux #387; ok provos@
2003-02-24 12:03:38 +11:00
Damien Miller 8e7fb33523 - markus@cvs.openbsd.org 2003/02/16 17:09:57
[kex.c kexdh.c kexgex.c kex.h sshconnect2.c sshd.c ssh-keyscan.c]
     split kex into client and server code, no need to link
     server code into the client; ok provos@
2003-02-24 12:03:03 +11:00
Damien Miller 1587fb8a17 - markus@cvs.openbsd.org 2003/02/12 21:39:50
[crc32.c crc32.h]
     replace crc32.c with a BSD licensed version; noted by David Turner
2003-02-24 12:02:12 +11:00
Damien Miller e8a240f966 - markus@cvs.openbsd.org 2003/02/12 09:33:04
[key.c key.h ssh-dss.c ssh-rsa.c]
     merge ssh-dss.h ssh-rsa.h into key.h; ok deraadt@
2003-02-24 12:01:40 +11:00
Damien Miller 7b406276c4 - markus@cvs.openbsd.org 2003/02/10 11:51:47
[ssh-add.1]
     xref sshd_config.5 (not sshd.8); mark@summersault.com; bug #490
2003-02-24 12:00:16 +11:00
Damien Miller 556f9315a5 - markus@cvs.openbsd.org 2003/02/06 21:22:43
[auth1.c auth2.c]
     undo broken fix for #387, fixes #486
2003-02-24 11:59:26 +11:00
Damien Miller 9e51a73122 - markus@cvs.openbsd.org 2003/02/06 09:29:18
[sftp-server.c]
     fix races in rename/symlink; from Tony Finch; ok djm@
2003-02-24 11:58:44 +11:00
Damien Miller 9f1e33a6b2 - markus@cvs.openbsd.org 2003/02/06 09:27:29
[ssh.c ssh_config.5]
     support 'ProxyCommand none'; bugzilla #433; binder@arago.de; ok djm@
2003-02-24 11:57:32 +11:00
Damien Miller 97f39ae810 - markus@cvs.openbsd.org 2003/02/06 09:26:23
[session.c]
     missing call to setproctitle() after authentication; ok provos@
2003-02-24 11:57:01 +11:00
Damien Miller 61f08ac35a - markus@cvs.openbsd.org 2003/02/05 09:02:28
[readconf.c]
     simplify ProxyCommand parsing, remove strcat/xrealloc; ok henning@, djm@
2003-02-24 11:56:27 +11:00
Damien Miller b7df3af154 - markus@cvs.openbsd.org 2003/02/04 09:33:22
[monitor.c monitor_wrap.c]
     skey/bsdauth: use 0 to indicate failure instead of -1, because
     the buffer API only supports unsigned ints.
2003-02-24 11:55:46 +11:00
Damien Miller 386f1f3e6c - markus@cvs.openbsd.org 2003/02/04 09:32:08
[key.c]
     better debug3 message
2003-02-24 11:54:57 +11:00
Damien Miller e8cea9e755 - markus@cvs.openbsd.org 2003/02/03 08:56:16
[sshpty.c]
     don't call error() for readonly /dev; from soekris list; ok mcbride,
     henning, deraadt.
2003-02-24 11:54:10 +11:00
Damien Miller babb47a059 - markus@cvs.openbsd.org 2003/02/02 10:56:08
[kex.c]
     add support for key exchange guesses; based on work by
     avraham.fraenkel@commatch.com; fixes bug #148; ok deraadt@
2003-02-24 11:53:32 +11:00
Damien Miller eeeeb3517e - markus@cvs.openbsd.org 2003/02/02 10:51:13
[scp.c]
     call okname() only when using system(3) for remote-remote copy;
     fixes bugs #483, #472; ok deraadt@, mouring@
2003-02-24 11:52:58 +11:00
Damien Miller ffadc583f6 - jmc@cvs.openbsd.org 2003/01/31 21:54:40
[sshd.8]
     typos; sshd(8): help and ok markus@
     help and ok millert@
2003-02-24 11:52:26 +11:00
Damien Miller 2eb26e89c5 - stevesk@cvs.openbsd.org 2003/01/28 17:24:51
[scp.1]
     remove example not pertinent with -1 addition; ok markus@
2003-02-24 11:51:32 +11:00
Damien Miller 8ee66a21cd - markus@cvs.openbsd.org 2003/01/28 16:11:52
[scp.1]
     document -l; pekkas@netcore.fi
2003-02-24 11:50:50 +11:00
Damien Miller 180fc5b236 - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/01/27 17:06:31
     [sshd.c]
     more specific error message when /var/empty has wrong permissions;
     bug #46, map@appgate.com; ok henning@, provos@, stevesk@
2003-02-24 11:50:18 +11:00
Damien Miller 0775976dc6 - (djm) Tweak gnome-ssh-askpass2:
- Retry kb and mouse grab a couple of times, so passphrase dialog doesn't
     immediately fail if you are doing something else when it appears (e.g.
     dragging a window)
   - Perform server grab after we have the keyboard and/or pointer to avoid
     races.
2003-02-24 11:48:22 +11:00
Damien Miller c8936acfe1 - (djm) Cygwin needs libcrypt too. Patch from vinschen@redhat.com 2003-02-11 10:04:03 +11:00
Damien Miller 850b942037 - (djm) Teach fake-getaddrinfo to use getservbyname() when provided a
string service name. Suggested by markus@, review by itojun@
2003-02-06 10:50:42 +11:00
Ben Lindstrom 4b0f1ad4db - (bal) AIX 4.2.1 lacks nanosleep(). Patch to use nsleep() provided by
dtucker@zip.com.au
2003-02-01 04:43:34 +00:00
Damien Miller 4d9dc1aa82 - (djm) Unbreak root password auth. Spotted by dtucker@zip.com.au 2003-01-30 10:20:56 +11:00
Damien Miller cd6853c31c - (djm) Search libposix4 and librt for nanosleep. From dtucker@zip.com.au
and openssh-unix-dev@thewrittenword.com
2003-01-28 11:33:42 +11:00
Ben Lindstrom 6dc562a7aa - (bal) Bugzilla 477 patch by wendyp@cray.com. Define TIOCGPGRP for
cray.  Also removed test for tcgetpgrp in configure.ac since it
   is no longer used.
2003-01-27 21:15:10 +00:00
Damien Miller 3bc0c062ab - (djm) Add TIMEVAL_TO_TIMESPEC macros 2003-01-24 11:50:32 +11:00
Damien Miller 8e12147df5 - markus@cvs.openbsd.org 2003/01/23 14:06:15
[scp.1 scp.c]
     scp -12; Sam Smith and others; ok provos@, deraadt@
2003-01-24 11:37:38 +11:00
Damien Miller ff74d748e9 - markus@cvs.openbsd.org 2003/01/23 14:01:53
[scp.c]
     bandwidth limitation patch (scp -l) from niels@; ok todd@, deraadt@
2003-01-24 11:36:58 +11:00
Damien Miller 6c71179f68 - markus@cvs.openbsd.org 2003/01/23 13:50:27
[authfd.c authfd.h readpass.c ssh-add.1 ssh-add.c ssh-agent.c]
     ssh-add -c, prompt user for confirmation (using ssh-askpass) when
     private agent key is used; with djm@; test by dugsong@, djm@;
     ok deraadt@
2003-01-24 11:36:23 +11:00
Damien Miller 5a93add673 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2003/01/23 08:58:47
     [sshd_config.5]
     typos; ok millert@
2003-01-24 11:34:52 +11:00
Damien Miller 21de87b936 - (djm) OpenBSD CVS Sync
- djm@cvs.openbsd.org 2003/01/23 00:03:00
     [auth1.c]
     Don't log TIS auth response; "get rid of it" - markus@
2003-01-23 17:41:20 +11:00
Damien Miller 8b9cde7847 - (djm) Sync regress with OpenBSD -current 2003-01-22 17:53:16 +11:00
Damien Miller 2101bfc4e1 - (djm) Reorganise PAM & SIA password handling to eliminate some common code 2003-01-22 15:42:26 +11:00
Damien Miller 53d81483f0 - (djm) OpenBSD CVS Sync
- marc@cvs.openbsd.org 2003/01/21 18:14:36
     [ssh-agent.1 ssh-agent.c]
     Add a -t life option to ssh-agent that set the default lifetime.
     The default can still be overriden by using -t in ssh-add.
     OK markus@
2003-01-22 11:47:19 +11:00
Tim Rice 89fe3f30a7 [configure.ac] Add -belf to build ELF binaries on OpenServer 5 when
using cc. (gcc already did)
2003-01-19 20:20:24 -08:00
Tim Rice 4ea542b41a [progressmeter.c] make compilers without long long happy. 2003-01-19 20:15:13 -08:00
Damien Miller 140344b809 - (djm) Fix compilation for NetBSD from dtucker@zip.com.au 2003-01-20 13:15:10 +11:00
Damien Miller e443e9398e - (djm) Revert fix for Bug #442 for now. 2003-01-18 16:24:06 +11:00
Damien Miller 9715bb1833 - (djm) Bug #470: Detect strnvis, not strvis in configure.
From d_wllms@lanl.gov
2003-01-17 10:31:38 +11:00
Damien Miller cb3e3c8b24 20030116
- (djm) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2003/01/16 03:41:55
     [sftp-int.c]
     explicitly use first glob result
2003-01-16 15:39:13 +11:00
Damien Miller 5fa01fd7fb - djm@cvs.openbsd.org 2003/01/14 10:58:00
[sftp-client.c sftp-int.c]
     Don't try to upload or download non-regular files. Report from
     apoloval@pantuflo.escet.urjc.es; ok markus@
2003-01-14 22:24:47 +11:00
Damien Miller 7a992387cb oops 2003-01-14 22:24:19 +11:00
Damien Miller dc70857773 - djm@cvs.openbsd.org 2003/01/13 11:04:04
[sftp-int.c]
     make cmds[] array static to avoid conflict with BSDI libc.
2003-01-14 22:24:05 +11:00
Damien Miller 71a5141534 - markus@cvs.openbsd.org 2003/01/12 16:57:02
[progressmeter.c]
     allow WARNINGS=yes; ok djm@
2003-01-14 22:23:23 +11:00
Damien Miller 0946d876f9 - markus@cvs.openbsd.org 2003/01/11 18:29:43
[log.c]
     set fatal_cleanups to NULL in fatal_remove_all_cleanups();
     dtucker@zip.com.au
2003-01-14 22:22:43 +11:00
Damien Miller 0141319d85 - (djm) OpenBSD CVS Sync
- fgsch@cvs.openbsd.org 2003/01/10 23:23:24
     [sftp-int.c]
     typo; from Nils Nordman <nino at nforced dot com>.
2003-01-14 22:22:11 +11:00
Damien Miller 7d90127291 - (djm) Bug #467: Add a --disable-strip option to turn off stripping of
installed binaries. From mdev@idg.nl
2003-01-13 16:55:22 +11:00
Damien Miller ec201964e4 - (djm) Rework openbsd-compat/setproctitle.c a bit: move emulation type
detection to configure.ac. Prompted by stevesk@
2003-01-13 10:04:58 +11:00
Damien Miller 6fd00e042c - fgsch@cvs.openbsd.org 2003/01/10 08:19:07
[scp.c sftp.1 sftp.c sftp-client.c sftp-int.c  progressmeter.c]
     [progressmeter.h]
     sftp progress meter support.
     original diffs by Nils Nordman <nino at nforced dot com> via
     markus@, merged to -current by me, djm@ ok.
2003-01-10 21:46:02 +11:00
Damien Miller b46b9f322d - djm@cvs.openbsd.org 2003/01/10 10:32:54
[channels.c]
     hush socket() errors, except last. Fixes mindrot bug #408; ok markus@
2003-01-10 21:45:12 +11:00
Damien Miller 86b781c179 - djm@cvs.openbsd.org 2003/01/10 10:29:35
[scp.c]
     Don't ftruncate after write error, creating sparse files of
     incorrect length
     mindrot bug #403, reported by rusr@cup.hp.com; ok markus@
2003-01-10 21:44:48 +11:00
Damien Miller a7f3aaadc3 - djm@cvs.openbsd.org 2003/01/10 08:48:15
[sftp-client.c]
     Simplify and avoid redundancy in packet send and receive
     functions; ok fgs@
2003-01-10 21:43:58 +11:00
Damien Miller 62d57f605a - fgsch@cvs.openbsd.org 2003/01/10 08:19:07
[scp.c sftp.1 sftp.c sftp-client.c sftp-int.c]
     sftp progress meter support.
     original diffs by Nils Nordman <nino at nforced dot com> via
     markus@, merged to -current by me, djm@ ok.
2003-01-10 21:43:24 +11:00
Damien Miller 956f3fb28b - (djm) OpenBSD CVS Sync
- djm@cvs.openbsd.org 2003/01/08 23:53:26
     [sftp.1 sftp.c sftp-int.c sftp-int.h]
     Cleanup error handling for batchmode
     Allow blank lines and comments in input
     Ability to suppress abort on error in batchmode ("-put blah")
     Fixes mindrot bug #452; markus@ ok
2003-01-10 21:40:00 +11:00
Damien Miller a8ed44b79e - (djm) Enable new setproctitle emulation for Linux, AIX and HP/UX. More
systems may be added later.
2003-01-10 09:53:12 +11:00
Tim Rice 13b2e55c36 [scp.c] make compilers without long long happy. 2003-01-08 20:09:30 -08:00
Tim Rice 458c6bfa10 [auth.c] declare today at top of allowed_user() to keep older compilers happy. 2003-01-08 20:04:27 -08:00
Tim Rice d0d7a8b27b [Makefile.in configure.ac] replace fixpath with sed script. Patch by Mo DeJong. 2003-01-08 17:22:59 -08:00
Damien Miller 2047b3bdf6 - (djm) Update README to reflect AIX's status as a well supported platform.
From dtucker@zip.com.au
2003-01-08 23:28:40 +11:00
Damien Miller 6342180b7f - fgsch@cvs.openbsd.org 2003/01/07 23:42:54
[sftp.1]
     add version; from Nils Nordman <nino at nforced dot com> via markus@.
     markus@ ok
2003-01-08 14:05:23 +11:00
Damien Miller 770b374a68 - djm@cvs.openbsd.org 2003/01/06 23:51:22
[sftp-client.c]
     Fix "get -p" download to not add user-write perm. mindrot bug #426
     reported by gfernandez@livevault.com; ok markus@
2003-01-08 14:04:53 +11:00