tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
4,798 Commits 6 Branches 20 Tags 99 MiB
Commit Graph

4341 Commits

Author SHA1 Message Date
Damien Miller e93eaaa0d1 - jmc@cvs.openbsd.org 2006/02/06 21:44:47 
[ssh.1]
     make this a little less ambiguous...
 2006-03-15 11:05:59 +11:00
Damien Miller 9f67a21de6 - msf@cvs.openbsd.org 2006/02/06 15:54:07 
[ssh.1]
     - typo fix
     ok jmc@
 2006-03-15 11:05:35 +11:00
Darren Tucker d1450dbe2a - (dtucker) [configure.ac] Bug #1171: Don't use printf("%lld", longlong) 
since not all platforms support it.  Instead, use internal equivalent while
   computing LLONG_MIN and LLONG_MAX.  Remove special case for alpha-dec-osf*
   as it's no longer required.  Tested by Bernhard Simon, ok djm@
 2006-03-13 19:06:51 +11:00
Darren Tucker f35014af79 typo 2006-03-04 09:00:19 +11:00
Darren Tucker 890909ec48 - (dtucker) [gss-serv-krb5.c] Bug #1166: Correct #ifdefs for gssapi_krb5.h 
includes.  Patch from gentoo.riverrat at gmail.com.
 2006-03-04 08:59:39 +11:00
Darren Tucker 18614c254d - (dtucker) [contrib/cygwin/ssh-host-config] Require use of lastlog as a 
file rather than directory, required as Cygwin will be importing lastlog(1).
   Also tightens up permissions on the file.  Patch from vinschen@redhat.com.
 2006-03-04 08:50:31 +11:00
Darren Tucker 54b75fe742 - (dtucker) [configure.ac] Bug #1156: QNX apparently needs SSHD_ACQUIRES_CTTY 
patch from kraai at ftbfs.org.
 2006-02-26 12:31:48 +11:00
Darren Tucker a4904f7bf1 - (dtucker) [sshd_config sshd_config.5] Update UsePAM to reflect current 
reality.  Pointed out by tryponraj at gmail.com.
 2006-02-23 21:35:30 +11:00
Darren Tucker 94413cf32b - (dtucker) [openbsd-compat/openssl-compat.{c,h}] Minor tidy up: only 
compile in compat code if required.
 2006-02-22 22:24:47 +11:00
Darren Tucker 3322e0d421 - (dtucker) [openbsd-compat/openssl-compat.h] Prevent warning about 
redefinition of SSLeay_add_all_algorithms.
 2006-02-22 00:00:27 +11:00
Darren Tucker fabdb6c290 - (dtucker) [INSTALL configure.ac openbsd-compat/openssl-compat.{c,h}] 
Add optional enabling of OpenSSL's (hardware) Engine support, via
   configure --with-ssl-engine.  Based in part on a diff by michal at
   logix.cz.
 2006-02-20 20:17:35 +11:00
Darren Tucker 4881c371ce - (dtucker) [Makefile.in configure.ac, added openbsd-compat/regress/] 
Add first attempt at regress tests for compat library.  ok djm@
 2006-02-19 22:50:20 +11:00
Tim Rice bf209f5901 - (tim) [buildpkg.sh.in] Make the names consistent. 
s/pkg_post_make_install_fixes.sh/pkg-post-make-install-fixes.sh/ OK dtucker@
 2006-02-13 12:46:44 -08:00
Darren Tucker 6163350eb9 - (dtucker) [README version.h contrib/caldera/openssh.spec 
contrib/redhat/openssh.spec contrib/suse/openssh.spec] Bump version
   strings to match 4.3p2 release.
 2006-02-12 16:48:56 +11:00
Tim Rice 2f993465d4 - (tim) [configure.ac] Bug #1149. Disable /etc/default/login check for QNX. 2006-02-11 18:37:48 -08:00
Darren Tucker 84af61555a - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Make loop counter unsigned 
to silence compiler warning, from vinschen at redhat.com.
 2006-02-12 11:59:08 +11:00
Darren Tucker 988b3fd161 - (dtucker) [configure.ac] Typo in Ultrix and NewsOS sections (NEED_SETPRGP 
-> NEED_SETPGRP), reported by Berhard Simon.  ok tim@
 2006-02-08 22:11:27 +11:00
Tim Rice 83d2f5fedf - (tim) [session.c] Logout records were not updated on systems with 
post auth privsep disabled due to bug 1086 changes. Analysis and patch
   by vinschen at redhat.com. OK tim@, dtucker@.
 2006-02-07 15:17:44 -08:00
Tim Rice ac9b0609e1 - (tim) [configure.ac] Remove unnecessary tests for net/if.h and 
netinet/in_systm.h. OK dtucker@.
 2006-02-05 11:27:10 -08:00
Tim Rice 70335a6b5f - (tim) [configure.ac] Bug #1149. Changes in QNX section only. Patch by 
kraai at ftbfs.org.
 2006-02-04 17:42:58 -08:00
Tim Rice 0daad78fab - (tim) [configure.ac] Add AC_REVISION. Add sys/time.h to lastlog.h test 
for Solaris. OK dtucker@.
 2006-02-04 17:33:55 -08:00
Tim Rice fd80ddcb23 - (tim) [configure.ac] test for egrep (AC_PROG_EGREP) before first 
AC_CHECK_HEADERS test. Without it, if AC_CHECK_HEADERS is first run
   by a platform specific check, builtin standard includes tests will be
   skipped on the other platforms.
   Analysis and suggestion by vinschen at redhat.com, patch by dtucker@.
   OK tim@, djm@.
 2006-02-02 19:11:56 -08:00
Darren Tucker cc7c212830 - (dtucker) [configure.ac] Bug #1148: Fix "crippled AES" test so that it 
works with picky compilers.  Patch from alex.kiernan at thus.net.
 2006-02-02 18:44:19 +11:00
Damien Miller bfd52192f3 - (djm) Release OpenSSH 4.3p1 2006-02-01 22:32:17 +11:00
Damien Miller c79824bbab - markus@cvs.openbsd.org 2006/02/01 11:27:22 
[version.h]
     openssh 4.3
 2006-02-01 22:27:31 +11:00
Damien Miller 0d689568a4 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 
[contrib/suse/openssh.spec] Update versions ahead of release
 2006-02-01 22:10:47 +11:00
Damien Miller 2ac05779f7 - jmc@cvs.openbsd.org 2006/02/01 09:11:41 
[sshd.8]
     small tweak;
 2006-02-01 22:05:42 +11:00
Damien Miller 8bbdf90f33 - (djm) OpenBSD CVS Sync 
- jmc@cvs.openbsd.org 2006/02/01 09:06:50
     [sshd.8]
     - merge sections on protocols 1 and 2 into a single section
     - remove configuration file section
     ok markus
 2006-02-01 22:05:25 +11:00
Damien Miller e682cb0780 - (djm) [regress/test-exec.sh] Try 'logname' as well as 'whoami' to 
determine the user's login name - needed for regress tests on Solaris
   10 and OpenSolaris
 2006-02-01 11:21:01 +11:00
Damien Miller 923f1ce0b7 - djm@cvs.openbsd.org 2006/01/31 10:35:43 
[scp.c]
     "scp a b c" shouldn't clobber "c" when it is not a directory, report and
     fix from biorn@; ok markus@
 2006-01-31 22:11:37 +11:00
Damien Miller 50c6eedce3 - djm@cvs.openbsd.org 2006/01/31 10:36:33 
[scp.sh]
     regress test for "scp a b c" where "c" is not a directory
 2006-01-31 22:06:41 +11:00
Damien Miller 7410ad79f8 - djm@cvs.openbsd.org 2006/01/31 10:23:23 
[scp.sh]
     regression test for CVE-2006-0225 written by dtucker@
 2006-01-31 22:06:14 +11:00
Damien Miller 0b996462f8 - djm@cvs.openbsd.org 2006/01/27 06:49:21 
[scp.sh]
     regress test for local to local scp copies; ok dtucker@
 2006-01-31 22:05:23 +11:00
Damien Miller 15a815bb64 - dtucker@cvs.openbsd.org 2005/12/14 04:36:39 
[regress/scp-ssh-wrapper.sh]
     Fix assumption about how many args scp will pass; ok djm@
     NB. ID sync only, we already had this
 2006-01-31 22:03:11 +11:00
Damien Miller 27a0dfaea9 - grunk@cvs.openbsd.org 2005/11/14 21:25:56 
[regress/agent-getpeereid.sh]
     all other scripts in this dir use $SUDO, not 'sudo', so pull this even
     ok markus@
 2006-01-31 22:02:16 +11:00
Damien Miller 10c5fa7e87 - markus@cvs.openbsd.org 2005/06/30 11:02:37 
[regress/scp.sh]
     allow SUDO=sudo; from Alexander Bluhm
 2006-01-31 22:01:42 +11:00
Damien Miller ec7b2f12f0 - djm@cvs.openbsd.org 2005/05/24 04:10:54 
[regress/try-ciphers.sh]
     oops, new arcfour modes here too
 2006-01-31 21:59:35 +11:00
Damien Miller 76be6b8765 - djm@cvs.openbsd.org 2005/05/20 23:14:15 
[regress/test-exec.sh]
     force addressfamily=inet for tests, unbreaking dynamic-forward regress for
     recently committed nc SOCKS5 changes
 2006-01-31 21:59:01 +11:00
Damien Miller f0cbb3d7cb - (djm) Sync regress tests to OpenBSD: 
- dtucker@cvs.openbsd.org 2005/03/10 10:20:39
     [regress/forwarding.sh]
     Regress test for ClearAllForwardings (bz #994); ok markus@
 2006-01-31 21:58:23 +11:00
Damien Miller c34940c1f5 - dtucker@cvs.openbsd.org 2005/04/25 09:54:09 
[regress/multiplex.sh]
     Don't call cleanup in multiplex as test-exec will cleanup anyway
     found by tim@, ok djm@
     NB. ID sync only, we already had this
 2006-01-31 21:57:27 +11:00
Damien Miller 3eec6b73a2 - djm@cvs.openbsd.org 2006/01/31 10:19:02 
[misc.c misc.h scp.c sftp.c]
     fix local arbitrary command execution vulnerability on local/local and
     remote/remote copies (CVE-2006-0225, bz #1094), patch by
     t8m AT centrum.cz, polished by dtucker@ and myself; ok markus@
 2006-01-31 21:49:27 +11:00
Damien Miller b5dd55cccc - jmc@cvs.openbsd.org 2006/01/30 13:37:49 
[ssh.1]
     remove an incorrect sentence;
     reported by roumen petrov;
     ok djm markus
 2006-01-31 21:47:58 +11:00
Damien Miller e204f6aa0d - reyk@cvs.openbsd.org 2006/01/30 12:22:22 
[channels.c]
     mark channel as write failed or dead instead of read failed on error
     of the channel output filter.
     ok markus@
 2006-01-31 21:47:15 +11:00
Damien Miller bbc59094b9 - jmc@cvs.openbsd.org 2006/01/26 08:47:56 
[ssh.1]
     add a section on verifying host keys in dns;
     written with a lot of help from jakob;
     feedback dtucker/markus;
     ok markus
 2006-01-31 21:46:51 +11:00
Damien Miller 7602cba59d - jmc@cvs.openbsd.org 2006/01/25 09:07:22 
[sshd.8]
     move subsections to full sections;
 2006-01-31 21:46:20 +11:00
Damien Miller 99cc4a8f1e - jmc@cvs.openbsd.org 2006/01/25 09:04:34 
[sshd.8]
     move the options description up the page, and a few additional tweaks
     whilst in here;
     ok markus
 2006-01-31 21:45:53 +11:00
Damien Miller ddfddf1ba3 - jmc@cvs.openbsd.org 2006/01/20 11:21:45 
[ssh_config.5]
     - word change, agreed w/ markus
     - consistency fixes
 2006-01-31 21:39:03 +11:00
Darren Tucker fbea76400f - (dtucker) [configure.ac opensshd.init.in] Bug #1144: Use /bin/sh for the 
opensshd.init script interpretter if /sbin/sh does not exist.  ok tim@
 2006-01-30 00:22:39 +11:00
Darren Tucker 62388b2b63 - dtucker@cvs.openbsd.org 2006/01/20 00:14:55 
[scp.1 ssh.1 ssh_config.5 sftp.1]
     Document RekeyLimit.  Based on patch from jan.iven at cern.ch from mindrot
     #1056 with feedback from jmc, djm and markus; ok jmc@ djm@
 2006-01-20 11:31:47 +11:00
Darren Tucker 248dd13c46 - jmc@cvs.openbsd.org 2006/01/18 10:53:29 
[ssh.1]
     add a section on ssh-based vpn, based on reyk's README.tun;
 2006-01-20 11:30:58 +11:00
Darren Tucker 94299ec251 - jmc@cvs.openbsd.org 2006/01/15 17:37:05 
[ssh.1]
     correction from deraadt
 2006-01-20 11:30:14 +11:00
Damien Miller 4a8dc9e297 - jmc@cvs.openbsd.org 2006/01/12 22:34:12 
[ssh.1]
     back out a sentence - AUTHENTICATION already documents this;
 2006-01-14 10:10:31 +11:00
Damien Miller e9d001e02b - jmc@cvs.openbsd.org 2006/01/12 22:26:02 
[ssh_config.5]
     refer to TCP forwarding, rather than TCP/IP forwarding;
 2006-01-14 10:10:17 +11:00
Damien Miller 7c24b81699 - jmc@cvs.openbsd.org 2006/01/12 22:20:00 
[sshd.8]
     refer to TCP forwarding, rather than TCP/IP forwarding;
 2006-01-14 10:09:56 +11:00
Damien Miller 8bfaf93f60 - jmc@cvs.openbsd.org 2006/01/12 18:48:48 
[ssh.1]
     refer to `TCP' rather than `TCP/IP' in the context of connection
     forwarding;
     ok markus
 2006-01-14 10:09:30 +11:00
Damien Miller f31771810c - jmc@cvs.openbsd.org 2006/01/12 14:44:12 
[ssh.1]
     split sections on tcp and x11 forwarding into two sections.
     add an example in the tcp section, based on sth i wrote for ssh faq;
     help + ok: djm markus dtucker
 2006-01-14 10:09:13 +11:00
Damien Miller 7e76e1f101 - jmc@cvs.openbsd.org 2006/01/06 13:29:10 
[ssh.1]
     final round of whacking FILES for duplicate info, and some consistency
     fixes;
     ok djm
 2006-01-14 10:08:57 +11:00
Damien Miller e87eb4ce3c - (djm) OpenBSD CVS Sync 
- jmc@cvs.openbsd.org 2006/01/06 13:27:32
     [ssh.1]
     weed out some duplicate info in the known_hosts FILES entries;
     ok djm
 2006-01-14 10:08:36 +11:00
Darren Tucker e78c6ce8cf - (dtucker) [contrib/cygwin/ssh-host-config] Make sshd service depend on 
tcpip service so it's always started after IP is up.  Patch from
   vinschen at redhat.com.
 2006-01-10 00:02:44 +11:00
Damien Miller 72c5b7d85d - djm@cvs.openbsd.org 2006/01/05 23:43:53 
[misc.c]
     check that stdio file descriptors are actually closed before clobbering
     them in sanitise_stdfd(). problems occurred when a lower numbered fd was
     closed, but higher ones weren't. spotted by, and patch tested by
     Frédéric Olivié
 2006-01-06 14:50:44 +11:00
Damien Miller c27f83a63c - jmc@cvs.openbsd.org 2006/01/04 19:50:09 
[ssh.1]
     -.Xr gzip 1 ,
 2006-01-06 14:50:26 +11:00
Damien Miller 128a0f114d - jmc@cvs.openbsd.org 2006/01/04 19:40:24 
[ssh.1]
     +.Xr ssh-keyscan 1 ,
 2006-01-06 14:50:11 +11:00
Damien Miller a246d3b9b2 - jmc@cvs.openbsd.org 2006/01/04 18:45:01 
[ssh.1]
     remove .Xr's to rsh(1) and telnet(1): they are hardly needed;
 2006-01-06 14:49:54 +11:00
Damien Miller 1bcdb50a3d - jmc@cvs.openbsd.org 2006/01/04 18:42:46 
[ssh.1]
     chop out some duplication in the .{r,s}hosts/{h,sh}osts.equiv FILES
     entries;
     ok markus
 2006-01-06 14:49:38 +11:00
Damien Miller 4c102eede3 - jmc@cvs.openbsd.org 2006/01/03 16:55:18 
[ssh.1]
     tweak the description of ~/.ssh/environment
 2006-01-06 14:49:17 +11:00
Damien Miller fb8ea74116 - jmc@cvs.openbsd.org 2006/01/03 16:52:36 
[ssh.1]
     put FILES in some sort of order: sort by pathname
 2006-01-06 14:48:52 +11:00
Damien Miller 6aa2290b0c - jmc@cvs.openbsd.org 2006/01/03 16:35:30 
[ssh.1]
     use a larger width for the ENVIRONMENT list;
 2006-01-06 14:48:34 +11:00
Damien Miller 7655f5cd9f - jmc@cvs.openbsd.org 2006/01/03 16:31:10 
[ssh.1]
     move FILES to a -compact list, and make each files an item in that list.
     this avoids nastly line wrap when we have long pathnames, and treats
     each file as a separate item;
     remove the .Pa too, since it is useless.
 2006-01-06 14:48:18 +11:00
Damien Miller a969437645 - (djm) [channels.c] clean up harmless merge error, from reyk@ 2006-01-04 07:27:50 +11:00
Damien Miller b797770da2 - (djm) OpenBSD CVS Sync 
- jmc@cvs.openbsd.org 2006/01/02 17:09:49
     [ssh_config.5 sshd_config.5]
     some corrections from michael knudsen;
 2006-01-03 18:47:31 +11:00
Damien Miller a07a59188a - jmc@cvs.openbsd.org 2006/01/02 12:31:06 
[ssh.1]
     start to cut some duplicate info from FILES;
     help/ok djm
 2006-01-02 23:41:37 +11:00
Damien Miller a1d9a18e14 - reyk@cvs.openbsd.org 2006/01/02 07:53:44 
[misc.c]
     clarify tun(4) opening - set the mode and bring the interface up. also
     (re)sets the tun(4) layer 2 LINK0 flag for existing tunnel interfaces.
     suggested and ok by djm@
 2006-01-02 23:41:21 +11:00
Damien Miller 5444618987 - djm@cvs.openbsd.org 2006/01/02 01:20:31 
[sftp-client.c sftp-common.h sftp-server.c]
     use a common max. packet length, no binary change
 2006-01-02 23:40:50 +11:00
Damien Miller a210d52235 - stevesk@cvs.openbsd.org 2006/01/01 10:08:48 
[misc.c]
     no trailing "\n" for debug()
 2006-01-02 23:40:30 +11:00
Damien Miller 3beb852e09 - stevesk@cvs.openbsd.org 2006/01/01 08:59:27 
[includes.h misc.c]
     move <net/if.h>; ok djm@
 2006-01-02 23:40:10 +11:00
Damien Miller 1164c299f1 - jmc@cvs.openbsd.org 2005/12/31 13:45:19 
[ssh.1]
     .Nm does not require an argument;
 2006-01-02 23:38:37 +11:00
Damien Miller 14af93ee77 - jmc@cvs.openbsd.org 2005/12/31 13:44:04 
[ssh.1]
     clean up ENVIRONMENT a little;
 2006-01-02 23:38:21 +11:00
Damien Miller 48c94abf5b - (djm) OpenBSD CVS Sync 
- jmc@cvs.openbsd.org 2005/12/31 10:46:17
     [ssh.1]
     merge the "LOGIN SESSION AND REMOTE EXECUTION" and "SERVER
     AUTHENTICATION" sections into "AUTHENTICATION";
     some rewording done to make the text read better, plus some
     improvements from djm;
     ok djm
 2006-01-02 23:38:00 +11:00
Damien Miller 90cd1c549b - (djm) [README.tun] Add README.tun, missed during sync of tun(4) support 2006-01-02 20:23:18 +11:00
Damien Miller 5df52e89b4 - (djm) [openbsd-compat/port-tun.c] Linux needs linux/if.h too 2006-01-01 21:15:50 +11:00
Damien Miller bd4e410817 - (djm) [configure.ac] Fix linux/if_tun.h test 2006-01-01 21:03:30 +11:00
Damien Miller 2dcddbfaf6 - (djm) [Makefile.in configure.ac includes.h misc.c] 
[openbsd-compat/port-tun.c openbsd-compat/port-tun.h] Add support
         for tunnel forwarding for FreeBSD and NetBSD. NetBSD's support is
         limited to IPv4 tunnels only, and most versions don't support the
         tap(4) device at all.
 2006-01-01 19:47:05 +11:00
Damien Miller c4bcc91751 - (djm) [configure.ac] oops, make that linux/if_tun.h 2005-12-31 17:05:58 +11:00
Damien Miller 89e03bae5c - (djm) [configure.ac] Disable Linux tun(4) compat code if linux/tun.h does 
not exist
 2005-12-31 16:42:03 +11:00
Damien Miller 598bbc2d8f - (djm) [openbsd-compat/port-tun.c openbsd-compat/port-tun.h configure.ac] 
[serverloop.c ssh.c openbsd-compat/Makefile.in]
   [openbsd-compat/openbsd-compat.h] Implement tun(4) forwarding
   compatability support for Linux, diff from reyk@
 2005-12-31 16:33:36 +11:00
Damien Miller 88b25524b8 - stevesk@cvs.openbsd.org 2005/12/31 01:38:45 
[ssh.1]
     document -MM; ok djm@
 2005-12-31 16:23:15 +11:00
Damien Miller 134eb81383 - jmc@cvs.openbsd.org 2005/12/30 16:59:00 
[sftp.1]
     do not suggest that interactive authentication will work
     with the -b flag;
     based on a diff from john l. scarfone;
     ok djm
 2005-12-31 16:22:55 +11:00
Damien Miller 077b23864f - reyk@cvs.openbsd.org 2005/12/30 15:56:37 
[channels.c channels.h clientloop.c]
     add channel output filter interface.
     ok djm@, suggested by markus@
 2005-12-31 16:22:32 +11:00
Damien Miller 5eb137c6d1 - (djm) OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2005/12/28 22:46:06
     [canohost.c channels.c clientloop.c]
     use 'break-in' for consistency; ok deraadt@ ok and input jmc@
 2005-12-31 16:19:53 +11:00
Tim Rice 8db70e2398 (tim) [buildpkg.sh.in] grep for $SSHDUID instead of $SSHDGID on /etc/passwd 2005-12-28 14:28:08 -08:00
Damien Miller 7bff1a9b5e - djm@cvs.openbsd.org 2005/12/24 02:27:41 
[session.c sshd.c]
     eliminate some code duplicated in privsep and non-privsep paths, and
     explicitly clear SIGALRM handler; "groovy" deraadt@
 2005-12-24 14:59:12 +11:00
Damien Miller 3597821046 - jmc@cvs.openbsd.org 2005/12/23 23:46:23 
[ssh.1]
     less mark up for -c;
 2005-12-24 14:56:47 +11:00
Damien Miller 2142ba0769 - jmc@cvs.openbsd.org 2005/12/23 14:55:53 
[ssh.1]
     - sync the description of -e w/ synopsis
     - simplify the description of -I
     - note that -I is only available if support compiled in, and that it
     isn't by default
     feedback/ok djm@
 2005-12-24 14:56:29 +11:00
Damien Miller cf1e342c6c - jmc@cvs.openbsd.org 2005/12/22 11:23:42 
[ssh.1]
     expand the description of -w somewhat;
     help/ok reyk
 2005-12-24 14:56:04 +11:00
Damien Miller e8cd741929 - jmc@cvs.openbsd.org 2005/12/22 10:31:40 
[ssh_config.5]
     put the description of "UsePrivilegedPort" in the correct place;
 2005-12-24 14:55:47 +11:00
Damien Miller d7f308f6d8 - stevesk@cvs.openbsd.org 2005/12/21 22:44:26 
[sshd.8]
     clarify precedence of -p, Port, ListenAddress; ok and help jmc@
 2005-12-24 14:55:16 +11:00
Damien Miller 1530f2431c - jmc@cvs.openbsd.org 2005/12/21 12:53:31 
[ssh.1]
     -Y does X11 forwarding too;
     ok markus
 2005-12-24 14:54:03 +11:00
Damien Miller 9a765b22b7 - jmc@cvs.openbsd.org 2005/12/21 11:57:25 
[ssh.1]
     options now described `above', rather than `later';
 2005-12-24 14:53:44 +11:00
Damien Miller 329cb01638 - jmc@cvs.openbsd.org 2005/12/21 11:48:16 
[ssh.1]
     -L and -R descriptions are now above, not below, ~C description;
 2005-12-24 14:53:23 +11:00
Damien Miller e9b333a544 - jmc@cvs.openbsd.org 2005/12/20 22:09:41 
[ssh.1]
     move info on ssh return values and config files up into the main
     description;
 2005-12-24 14:53:04 +11:00
Damien Miller 52d2061ab0 - jmc@cvs.openbsd.org 2005/12/20 22:02:50 
[ssh.1]
     .Ss -> .Sh: subsections have not made this page more readable
 2005-12-24 14:52:36 +11:00
Damien Miller c93a813802 - jmc@cvs.openbsd.org 2005/12/20 21:59:43 
[ssh.1]
     merge the sections on protocols 1 and 2 into one section on
     authentication;
     feedback djm dtucker
     ok deraadt markus dtucker
 2005-12-24 14:52:13 +11:00
Darren Tucker e9a9b71c6b - dtucker@cvs.openbsd.org 2005/12/20 04:41:07 
[ssh.c]
     exit(255) on error to match description in ssh(1); bz #1137; ok deraadt@
 2005-12-20 16:15:51 +11:00
Darren Tucker 7eba820ca7 - stevesk@cvs.openbsd.org 2005/12/17 21:36:42 
[ssh_config.5]
     spelling: intented -> intended
 2005-12-20 16:15:14 +11:00
Darren Tucker 635518705a - stevesk@cvs.openbsd.org 2005/12/17 21:13:05 
[ssh_config.5 session.c]
     spelling: fowarding, fowarded
 2005-12-20 16:14:15 +11:00
Darren Tucker 5652924ad9 missed changelog entry 2005-12-20 16:12:24 +11:00
Darren Tucker 5434cfe368 - jmc@cvs.openbsd.org 2005/12/16 18:14:40 
[ssh.1]
     signpost the protocol sections;
 2005-12-20 16:11:35 +11:00
Darren Tucker b18c867c9d - jmc@cvs.openbsd.org 2005/12/16 18:08:53 
[ssh.1]
     simplify a sentence;
 2005-12-20 16:10:09 +11:00
Darren Tucker d3877b995a - jmc@cvs.openbsd.org 2005/12/16 18:07:08 
[ssh.1]
     move the option descriptions up the page: start of a restructure;
     ok markus deraadt
 2005-12-20 16:09:36 +11:00
Darren Tucker 0d0e8f0173 - (dtucker) OpenBSD CVS Sync 
- reyk@cvs.openbsd.org 2005/12/13 15:03:02
     [serverloop.c]
     if forced_tun_device is not set, it is -1 and not SSH_TUNID_ANY
 2005-12-20 16:08:42 +11:00
Darren Tucker 129d0bb6a6 - (dtucker) [cipher-aes.c cipher-ctr.c cipher.c configure.ac 
openbsd-compat/openssl-compat.h] Check for and work around broken AES
   ciphers >128bit on (some) Solaris 10 systems.  ok djm@
 2005-12-19 17:40:40 +11:00
Darren Tucker d40c66cf3f - (dtucker) [configure.ac openbsd-compat/bsd-snprintf.c] Bug #1133: Our 
snprintf replacement can have a conflicting declaration in HP-UX's system
   headers (const vs. no const) so we now check for and work around it.  Patch
   from the dynamic duo of David Leonard and Ted Percival.
 2005-12-17 22:32:03 +11:00
Darren Tucker 98cfc4ce9d - (dtucker) [defines.h] HP-UX system headers define "YES" and "NO" which 
scp.c also uses, so undef them here.
 2005-12-17 22:04:08 +11:00
Darren Tucker 3154358d66 - dtucker@cvs.openbsd.org 2005/12/30 04:36:39 
[regress/scp-ssh-wrapper.sh]
     Fix assumption about how many args scp will pass; ok djm@
 2005-12-14 15:39:20 +11:00
Damien Miller 62a31c9fd0 - (djm) [misc.c] Disable tunnel code for non-OpenBSD (for now), enable 
again by providing a sys_tun_open() function for your platform and
   setting the CUSTOM_SYS_TUN_OPEN define. More work is required to match
   OpenBSD's tunnel protocol, which prepends the address family to the
   packet
 2005-12-13 20:44:13 +11:00
Damien Miller d47c62a714 - markus@cvs.openbsd.org 2005/12/12 13:46:18 
[channels.c channels.h session.c]
     make sure protocol messages for internal channels are ignored.
     allow adjust messages for non-open channels; with and ok djm@
 2005-12-13 19:33:57 +11:00
Damien Miller 7746c391b1 - jmc@cvs.openbsd.org 2005/12/08 21:37:50 
[ssh_config.5]
     new sentence, new line;
 2005-12-13 19:33:37 +11:00
Damien Miller 7b58e80036 - reyk@cvs.openbsd.org 2005/12/08 18:34:11 
[auth-options.c includes.h misc.c misc.h readconf.c servconf.c]
     [serverloop.c ssh.c ssh_config.5 sshd_config.5 configure.ac]
     two changes to the new ssh tunnel support. this breaks compatibility
     with the initial commit but is required for a portable approach.
     - make the tunnel id u_int and platform friendly, use predefined types.
     - support configuration of layer 2 (ethernet) or layer 3
     (point-to-point, default) modes. configuration is done using the
     Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and
     restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option
     in sshd_config(5).
     ok djm@, man page bits by jmc@
 2005-12-13 19:33:19 +11:00
Damien Miller 957d4e430e - jmc@cvs.openbsd.org 2005/12/08 15:06:29 
[ssh_config.5]
     keep options in order;
 2005-12-13 19:30:45 +11:00
Damien Miller 4b2319fb85 - jmc@cvs.openbsd.org 2005/12/08 14:59:44 
[ssh.1 ssh_config.5]
     make `!command' a little clearer;
     ok reyk
 2005-12-13 19:30:27 +11:00
Damien Miller f0c8c15322 - jmc@cvs.openbsd.org 2005/12/07 10:52:13 
[ssh.1]
     - avoid line split in SYNOPSIS
     - add args to -w
     - kill trailing whitespace
 2005-12-13 19:29:58 +11:00
Damien Miller aeb31d6120 - djm@cvs.openbsd.org 2005/12/07 03:52:22 
[clientloop.c]
     reyk forgot to compile with -Werror (missing header)
 2005-12-13 19:29:36 +11:00
Damien Miller d27b947178 - reyk@cvs.openbsd.org 2005/12/06 22:38:28 
[auth-options.c auth-options.h channels.c channels.h clientloop.c]
     [misc.c misc.h readconf.c readconf.h scp.c servconf.c servconf.h]
     [serverloop.c sftp.c ssh.1 ssh.c ssh_config ssh_config.5 sshconnect.c]
     [sshconnect.h sshd.8 sshd_config sshd_config.5]
     Add support for tun(4) forwarding over OpenSSH, based on an idea and
     initial channel code bits by markus@. This is a simple and easy way to
     use OpenSSH for ad hoc virtual private network connections, e.g.
     administrative tunnels or secure wireless access. It's based on a new
     ssh channel and works similar to the existing TCP forwarding support,
     except that it depends on the tun(4) network interface on both ends of
     the connection for layer 2 or layer 3 tunneling. This diff also adds
     support for LocalCommand in the ssh(1) client.

     ok djm@, markus@, jmc@ (manpages), tested and discussed with others
 2005-12-13 19:29:02 +11:00
Damien Miller 6dbdb6afee - jmc@cvs.openbsd.org 2005/11/30 11:45:20 
[ssh.1]
     avoid ambiguities in describing TZ;
     ok djm@
 2005-12-13 19:25:43 +11:00
Damien Miller c94ebbc723 - (djm) OpenBSD CVS Sync 
- jmc@cvs.openbsd.org 2005/11/30 11:18:27
     [ssh.1]
     timezone -> time zone
 2005-12-13 19:25:21 +11:00
Damien Miller 7677be5d6c - (djm) [envpass.sh] Remove regress script that was accidentally committed 
in top level directory and not noticed for over a year :)
 2005-12-01 12:51:59 +11:00
Tim Rice 46259d86a2 - (tim) [configure.ac sshd.8] Enable locked account check (a "*LK*" string) 
for UnixWare.
 2005-11-28 18:40:34 -08:00
Darren Tucker 3af2ac56a2 - dtucker@cvs.openbsd.org 2005/11/29 02:04:55 
[ssh-keygen.c]
     Populate default key sizes before checking them; from & ok tim@
 2005-11-29 13:10:24 +11:00
Tim Rice 660c3405f9 - (tim) [ssh-keygen.c] Move DSA length test after setting default when 
bits == 0.
 2005-11-28 17:45:32 -08:00
Darren Tucker ac0c8a533d - (dtucker) [includes.h] Bug #1122: __USE_GNU is a glibc internal macro, use 
_GNU_SOURCE instead.  Patch from t8m at centrum.cz.
 2005-11-28 22:28:59 +11:00
Darren Tucker 3a4634f674 - dtucker@cvs.openbsd.org 2005/11/28 06:02:56 
[ssh-agent.1]
     Update agent socket path templates to reflect reality, correct xref for
     time formats.  bz#1121, patch from openssh at roumenpetrov.info, ok djm@
 2005-11-28 17:05:40 +11:00
Darren Tucker 9f647335d2 [ssh-keygen.1 ssh-keygen.c] 
Enforce DSA key length of exactly 1024 bits to comply with FIPS-186-2,
     increase minumum RSA key size to 768 bits and update man page to reflect
     these.  Patch originally bz#1119 (senthilkumar_sen at hotpop.com),
     ok djm@, grudging ok deraadt@.
 2005-11-28 16:41:46 +11:00
Darren Tucker b1a8777f3a - (dtucker) [regress/yes-head.sh] Work around breakage caused by some 
versions of GNU head.  Based on patch from zappaman at buraphalinux.org
 2005-11-28 16:41:03 +11:00
Darren Tucker 91d25a0c45 - (dtucker) [configure.ac] Bug #1126: AIX 5.2 and 5.3 (and presumably newer, 
when they're available) need the real UID set otherwise pam_chauthtok will
   set ADMCHG after changing the password, forcing the user to change it
   again immediately.
 2005-11-26 22:24:09 +11:00
Darren Tucker e0be30426a - (dtucker) [progressmeter.c scp.c sftp-server.c] Use correct casts for 
snprintf formats, fixes warnings on some 64 bit platforms.  Patch from
   shaw at vranix.com, ok djm@
 2005-11-25 14:44:55 +11:00
Darren Tucker 58e298d11b - (dtucker) [configure.ac] Apply tim's fix for older systems where the 
resolver state in resolv.h is "state" not "__res_state".  With slight
   modification by me to also work on old AIXes.  ok djm@
 2005-11-25 13:14:58 +11:00
Darren Tucker faec5ca73f - (dtucker) [regress/test-exec.sh] Use 1024 bit keys since we generate so 
many and use them only once.  Speeds up testing on older/slower hardware.
 2005-11-24 23:18:54 +11:00
Darren Tucker 79d09fad52 - (dtucker) [configure.ac] Fix typos in comments and AC_SEARCH_LIB argument 
order in Reliant Unix block.  Patch from johane at lysator.liu.se.
 2005-11-24 22:34:54 +11:00
Damien Miller 57f3915b55 - (djm) [configure.ac openbsd-compat/Makefile.in openbsd-compat/bsd-asprintf.c 
openbsd-compat/bsd-snprintf.c openbsd-compat/openbsd-compat.h] Add an
   asprintf() implementation, after syncing our {v,}snprintf() implementation
   with some extra fixes from Samba's version. With help and debugging from
   dtucker and tim; ok dtucker@
 2005-11-24 19:58:19 +11:00
Darren Tucker efc17470e0 - (dtucker) [loginrec.c] Add casts to prevent compiler warnings, patch 
from shaw at vranix.com.
 2005-11-22 19:55:13 +11:00
Darren Tucker 593bae7e10 - dtucker@cvs.openbsd.org 2005/11/22 03:36:03 
[hostfile.c]
     Correct format/arguments to debug call; spotted by shaw at vranix.com
     ok djm@
 2005-11-22 19:43:26 +11:00
Darren Tucker f4732f6475 - dtucker@cvs.openbsd.org 2005/11/21 09:42:10 
[auth-krb5.c]
     Perform Kerberos calls even for invalid users to prevent leaking
     information about account validity.  bz #975, patch originally from
     Senthil Kumar, sanity checked by Simon Wilkinson, tested by djm@, biorn@,
     ok markus@
 2005-11-22 19:42:42 +11:00
Darren Tucker e8400da9d5 - millert@cvs.openbsd.org 2005/11/15 11:59:54 
[includes.h]
     Include sys/queue.h explicitly instead of assuming some other header
     will pull it in.  At the moment it gets pulled in by sys/select.h
     (which ssh has no business including) via event.h.  OK markus@
     (ID sync only in -portable)
 2005-11-22 19:41:33 +11:00
Darren Tucker 33f86bc284 - deraadt@cvs.openbsd.org 2005/11/12 18:38:15 
[scp.c]
     avoid close(-1), as in rcp; ok cloder
 2005-11-22 19:38:06 +11:00
Darren Tucker b736d8d829 - deraadt@cvs.openbsd.org 2005/11/12 18:37:59 
[ssh-add.c]
     space
 2005-11-22 19:37:08 +11:00
Darren Tucker 4123636471 - (dtucker) [openbsd-compat/openssl-compat.h] Add comment explaining what 
is going on.
 2005-11-20 14:09:59 +11:00
Darren Tucker cb6ecdea6c - (dtucker) [regress/reconfigure.sh] Fix potential race in the reconfigure 
test: if sshd takes too long to reconfigure the subsequent connection will
   fail.  Zap pidfile before HUPing sshd which will rewrite it when it's ready.
 2005-11-12 21:30:07 +11:00
Darren Tucker 5bfe1687dd - (dtucker) [configure.ac] Remove duplicate utimes() check. ok djm@ 2005-11-12 18:42:36 +11:00
Darren Tucker 3f9545ee67 - (dtucker) [configure.ac] Use "$AWK" instead of "awk" in gcc version test. 2005-11-12 15:20:52 +11:00
Darren Tucker 5a0bdf770c - (dtucker) [openbsd-compat/{realpath.c,stroll.c,rresvport.c}] $OpenBSD tag. 2005-11-12 14:28:05 +11:00
Darren Tucker 7cb2a78ae2 - (dtucker) [openbsd-compat/realpath.c] Sync $OpenBSD tag. 2005-11-12 14:14:52 +11:00
Darren Tucker 16fd99c727 - (dtucker) [openbsd-compat/getrrsetbyname.c] Restore Portable-specific 
ifdef lost during sync.  Spotted by tim@.
 2005-11-12 14:06:29 +11:00
Darren Tucker f032435de7 - (dtucker) [configure.ac] Try to get the gcc version number in a way that 
doesn't change between versions, and use a safer default.
 2005-11-10 21:30:36 +11:00
Darren Tucker 9d30d13922 - (dtucker) [openbsd-compat/sigact.h] Update from OpenBSD 1.2 -> 1.3. 
Id and copyright sync only, there were no substantial changes we need.
 2005-11-10 19:43:48 +11:00
Darren Tucker 581203438f typo 2005-11-10 19:31:37 +11:00
Darren Tucker ce1cb1f160 - (dtucker) [openbsd-compat/bsd-closefrom.c openbsd-compat/base64.c] 
-Wall fixes from djm.
 2005-11-10 19:31:08 +11:00
Darren Tucker 30d6974124 - (dtucker) [openbsd-compat/sigact.c] Update from OpenBSD 1.3 -> 1.4. 
Id and copyright sync only, there were no substantial changes we need.
 2005-11-10 19:29:12 +11:00
Darren Tucker fe80d7a068 - (dtucker) [openbsd-compat/bindresvport.c] Update from OpenBSD 1.16 -> 1.17. 2005-11-10 17:54:46 +11:00
Darren Tucker 6f15c07ce3 - (dtucker) [openbsd-compat/bindresvport.c] Add "OPENBSD ORIGINAL" marker. 2005-11-10 17:52:08 +11:00
Darren Tucker 91b34dc183 - (dtucker) [openbsd-compat/rresvport.c] Update from OpenBSD 1.6 -> 1.8. 2005-11-10 17:42:40 +11:00
Darren Tucker ffcd0ecf6b - (dtucker) [openbsd-compat/mktemp.c] Update from OpenBSD 1.17 -> 1.19. 2005-11-10 17:37:02 +11:00
Darren Tucker 8f0d8f8ea2 - (dtucker) [openbsd-compat/daemon.c] Update from OpenBSD 1.10 -> 1.13. 2005-11-10 17:33:00 +11:00
Darren Tucker 4e8c2490bb - (dtucker) [openbsd-compat/strsep.c] Update from OpenBSD 1.5 -> 1.6. 2005-11-10 17:28:35 +11:00
Darren Tucker b10b497682 - (dtucker) [openbsd-compat/daemon.c] Update from OpenBSD 1.5 -> 1.6. 2005-11-10 17:27:25 +11:00
Darren Tucker 2864039a7c - (dtucker) [openbsd-compat/inet_ntop.c] Update from OpenBSD 1.5 -> 1.7. 2005-11-10 17:25:26 +11:00
Darren Tucker de9d623960 - (dtucker) [openbsd-compat/inet_nto.c] Update from OpenBSD 1.4 -> 1.6. 2005-11-10 17:23:54 +11:00
Darren Tucker c7e05d679a - (dtucker) [openbsd-compat/inet_aton.c] Update from OpenBSD 1.7 -> 1.9. 2005-11-10 17:21:21 +11:00
Darren Tucker 0a149d19d3 - (dtucker) [openbsd-compat/getcwd.c] Replace lstat with fstat to match up 
with OpenBSD code since we don't support platforms without fstat any more.
 2005-11-10 17:15:06 +11:00
Darren Tucker 31ba53e333 - (dtucker) [openbsd-compat/getcwd.c] Update from OpenBSD 1.9 -> 1.14. 2005-11-10 17:11:29 +11:00
Darren Tucker 50a221ba7a - (dtucker) [openbsd-compat/glob.h] Update from OpenBSD 1.8 -> 1.9. 2005-11-10 17:03:22 +11:00
Darren Tucker 6524d4f161 - (dtucker) [openbsd-compat/glob.c] Update from OpenBSD 1.22 -> 1.25. 2005-11-10 17:02:21 +11:00
Darren Tucker d76b4c74f8 - (dtucker) [openbsd-compat/readpassphrase.h] Update from OpenBSD 1.3 -> 1.5. 2005-11-10 16:58:47 +11:00
Darren Tucker dbb631cebe - (dtucker) [openbsd-compat/readpassphrase.c] Update from OpenBSD 1.16 -> 1.18. 2005-11-10 16:56:28 +11:00
Darren Tucker f5ebfe9f68 - (dtucker) [openbsd-compat/strtoul.c] Update from OpenBSD 1.5 -> 1.7. 2005-11-10 16:48:10 +11:00
Darren Tucker f976e6f883 - (dtucker) [openbsd-compat/strtoll.c] Update from OpenBSD 1.4 -> 1.5. 
Removal of rcsid.
 2005-11-10 16:46:26 +11:00
Darren Tucker ad1dada0b4 - (dtucker) [openbsd-compat/basename.c] Update from OpenBSD 1.11 -> 1.14. 
Removal of rcsid, will no longer strlcpy parts of the string.
 2005-11-10 16:42:51 +11:00
Darren Tucker 09471d8a1f - (dtucker) [openbsd-compat/strmode.c] Update from OpenBSD 1.5 -> 1.7. 
Removal of rcsid, "whiteout" inode type.
 2005-11-10 16:38:54 +11:00
Darren Tucker 925d1de3fb - (dtucker) [openbsd-compat/sigact.h] Add "OPENBSD ORIGINAL" marker. 2005-11-10 16:31:55 +11:00
Darren Tucker 5224566303 - (dtucker) [openbsd-compat/strlcpy.c] Update from OpenBSD 1.8 -> 1.10. 2005-11-10 16:26:17 +11:00
Darren Tucker 7f24a0e647 - (dtucker) [openbsd-compat/{LOTS}] Move the "OPENBSD ORIGINAL" markers to 
after the copyright notices.  Having them at the top next to the CVSIDs
   guarantees a conflict for each and every sync.
 2005-11-10 16:18:56 +11:00
Darren Tucker 80c0d7eb88 - (dtucker) [openbsd-compat/strlcat.c] Sync OpenBSD revs 1.11 - 1.12 (removal 
of "register").
 2005-11-10 16:05:37 +11:00
Darren Tucker e5a2b5288d - (dtucker) [openbsd-compat/getgrouplist.c] Sync OpenBSD revs 1.10 - 1.2 (ANSI 
prototypes, removal of "register").
 2005-11-10 15:56:44 +11:00
Darren Tucker b0288098c9 - (dtucker) [configure.ac] Disable pointer-sign warnings on gcc 4.0+ 
since they're not useful right now.  Patch from djm@.
 2005-11-10 14:46:48 +11:00
Darren Tucker 618db97fe1 - (dtucker) [auth-krb5.c] Fix -Wsign-compare warning in non-Heimdal path. 
Patch from djm@.
 2005-11-10 14:43:11 +11:00
Darren Tucker 063ba7455f - (dtucker) [openbsd-compat/setenv.c] Sync changes from OpenBSD setenv.c 
revs 1.7 - 1.9.
 2005-11-10 10:38:45 +11:00
Darren Tucker 32b531067d - (dtucker) [openbsd-compat/getenv.c] Make __findenv static, remove 
unnecessary prototype.
 2005-11-10 10:13:06 +11:00
Darren Tucker b8c89d14bb - (dtucker) [openbsd-compat/getenv.c] Merge changes for __findenv from 
OpenBSD getenv.c revs 1.4 - 1.8 (ANSIfication of arguments, removal of
   "register").
 2005-11-10 10:10:10 +11:00
Damien Miller 9b59ada7ca - (djm) [openbsd-compat/getrrsetbyname.c] Sync to latest OpenBSD version, 
resolving memory leak bz#1111 reported by kremenek AT cs.stanford.edu;
   ok dtucker@
 2005-11-05 16:56:52 +11:00
Darren Tucker 3a38c5a856 - (dtucker) [README.platform] Add PAM section. 2005-11-05 16:28:35 +11:00
Damien Miller 5fd8b02b44 - djm@cvs.openbsd.org 2005/11/05 05:01:15 
[bufaux.c]
     Fix leaks in error paths, bz #1109 and #1110 reported by kremenek AT
     cs.stanford.edu; ok dtucker@
 2005-11-05 16:04:36 +11:00
Damien Miller 19bb3a57f8 - djm@cvs.openbsd.org 2005/11/04 05:15:59 
[kex.c kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c]
     remove hardcoded hash lengths in key exchange code, allowing
     implementation of KEX methods with different hashes (e.g. SHA-256);
     ok markus@ dtucker@ stevesk@
 2005-11-05 15:19:35 +11:00
Damien Miller 24ecf61261 - dtucker@cvs.openbsd.org 2005/11/03 13:38:29 
[canohost.c]
     Cache reverse lookups with and without DNS separately; ok markus@
 2005-11-05 15:16:52 +11:00
Damien Miller 83d0d39d0e - jmc@cvs.openbsd.org 2005/10/31 19:55:25 
[ssh-keygen.1]
     grammar;
 2005-11-05 15:16:27 +11:00
Damien Miller c7e2d3fa10 - djm@cvs.openbsd.org 2005/10/31 11:48:29 
[serverloop.c]
     make sure we clean up wtmp, etc. file when we receive a SIGTERM,
     SIGINT or SIGQUIT when running without privilege separation (the
     normal privsep case is already OK). Patch mainly by dtucker@ and
     senthilkumar_sen AT hotpop.com; ok dtucker@
 2005-11-05 15:16:12 +11:00
Damien Miller f14be5ce03 - djm@cvs.openbsd.org 2005/10/31 11:12:49 
[ssh-keygen.1 ssh-keygen.c]
     generate a protocol 2 RSA key by default
 2005-11-05 15:15:49 +11:00
Damien Miller 653b93be5d - dtucker@cvs.openbsd.org 2005/10/31 06:15:04 
[sftp.c]
     Fix sorting with "ls -1" command. From Robert Tsai, "looks right" deraadt@
 2005-11-05 15:15:23 +11:00
Damien Miller 788f212aed - djm@cvs.openbsd.org 2005/10/30 08:52:18 
[clientloop.c packet.c serverloop.c session.c ssh-agent.c ssh-keygen.c]
     [ssh.c sshconnect.c sshconnect1.c sshd.c]
     no need to escape single quotes in comments, no binary change
 2005-11-05 15:14:59 +11:00
Damien Miller 713de76f66 - jmc@cvs.openbsd.org 2005/10/30 08:43:47 
[ssh_config.5]
     remove trailing whitespace;
 2005-11-05 15:13:49 +11:00
Damien Miller 4d3fd54c91 - dtucker@cvs.openbsd.org 2005/10/30 08:29:29 
[canohost.c sshd.c]
     Check for connections with IP options earlier and drop silently.  ok djm@
 2005-11-05 15:13:24 +11:00
Damien Miller aa3bb10940 - djm@cvs.openbsd.org 2005/10/30 04:03:24 
[ssh.c]
     fix misleading debug message; ok dtucker@
 2005-11-05 15:12:59 +11:00
Damien Miller 4bbacb706b - djm@cvs.openbsd.org 2005/10/30 04:01:03 
[ssh-keyscan.c]
     make ssh-keygen discard junk from server before SSH- ident, spotted by
     dave AT cirt.net; ok dtucker@
 2005-11-05 15:12:28 +11:00
Damien Miller b3bfbb7355 - djm@cvs.openbsd.org 2005/10/30 01:23:19 
[ssh_config.5]
     mention control socket fallback behaviour, reported by
     tryponraj AT gmail.com
 2005-11-05 15:11:48 +11:00
Damien Miller 319550a52b - stevesk@cvs.openbsd.org 2005/10/17 14:13:35 
[dns.c dns.h]
     more cleanups; ok jakob@
 2005-11-05 15:11:15 +11:00
Damien Miller 7e8795d308 - stevesk@cvs.openbsd.org 2005/10/17 14:01:28 
[dns.c]
     remove #ifdef LWRES; ok jakob@
 2005-11-05 15:10:42 +11:00
Damien Miller c1af1d5f40 - stevesk@cvs.openbsd.org 2005/10/15 15:28:12 
[sshconnect.c]
     make external definition static; ok deraadt@
 2005-11-05 15:08:57 +11:00
Damien Miller 0a0176e9f3 - stevesk@cvs.openbsd.org 2005/10/14 02:29:37 
[channels.c clientloop.c]
     free()->xfree(); ok djm@
 2005-11-05 15:07:59 +11:00
Damien Miller 15d72a00a3 - stevesk@cvs.openbsd.org 2005/10/14 02:17:59 
[ssh-keygen.c ssh.c sshconnect2.c]
     no trailing "\n" for log functions; ok djm@
 2005-11-05 15:07:33 +11:00
Damien Miller 6fd6defbce - stevesk@cvs.openbsd.org 2005/10/13 22:24:31 
[auth2-gss.c gss-genr.c gss-serv.c monitor.c]
     KNF; ok djm@
 2005-11-05 15:07:05 +11:00
Damien Miller 20afc24363 - stevesk@cvs.openbsd.org 2005/10/13 19:13:41 
[dns.c]
     unneeded #include, unused declaration, little knf; ok deraadt@
 2005-11-05 15:06:38 +11:00
Damien Miller 5f916c8f6c - stevesk@cvs.openbsd.org 2005/10/13 19:08:08 
[gss-serv-krb5.c gss-serv.c]
     unused declarations; ok deraadt@
     (id sync only for gss-serv-krb5.c)
 2005-11-05 15:05:28 +11:00
Damien Miller 9fac263639 - stevesk@cvs.openbsd.org 2005/10/13 14:20:37 
[gss-serv.c]
     spelling in comments
 2005-11-05 15:03:48 +11:00
Damien Miller 5434eb2a69 - stevesk@cvs.openbsd.org 2005/10/13 14:03:01 
[auth2-gss.c gss-genr.c gss-serv.c]
     remove unneeded #includes; ok markus@
 2005-11-05 15:03:24 +11:00
Damien Miller 5e7fd076f5 - djm@cvs.openbsd.org 2005/10/11 23:37:37 
[channels.c]
     bz #1076 set SO_REUSEADDR on X11 forwarding listner sockets, preventing
     bind() failure when a previous connection's listeners are in TIME_WAIT,
     reported by plattner AT inf.ethz.ch; ok dtucker@
 2005-11-05 14:53:39 +11:00
Damien Miller 39eda6eb6a - djm@cvs.openbsd.org 2005/10/10 10:23:08 
[channels.c channels.h clientloop.c serverloop.c session.c]
     fix regression I introduced in 4.2: X11 forwardings initiated after
     a session has exited (e.g. "(sleep 5; xterm) &") would not start.
     bz #1086 reported by t8m AT centrum.cz; ok markus@ dtucker@
 2005-11-05 14:52:50 +11:00
Damien Miller 3f54a9f5b7 - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2005/10/07 11:13:57
     [ssh-keygen.c]
     change DSA default back to 1024, as it's defined for 1024 bits only
     and this causes interop problems with other clients.  moreover,
     in order to improve the security of DSA you need to change more
     components of DSA key generation (e.g. the internal SHA1 hash);
     ok deraadt
 2005-11-05 14:52:18 +11:00
Darren Tucker d32e293c04 - (dtucker) [openbsd-compat/bsd-misc.c] Bug #1108: fix broken strdup(). 
Reported by olavi at ipunplugged.com and antoine.brodin at laposte.net
   via FreeBSD.
 2005-11-02 09:07:31 +11:00
Darren Tucker 42308a4374 - (dtucker) [session.c] Bug #1045do not check /etc/nologin when PAM is 
enabled, instead allow PAM to handle it.  Note that on platforms using PAM,
   the pam_nologin module should be added to sshd's session stack in order to
   maintain exising behaviour.  Based on patch and discussion from t8m at
   centrum.cz, ok djm@
 2005-10-30 15:31:55 +11:00
Damien Miller 88edf6255b - (djm) [contrib/suse/openssh.spec contrib/suse/rc. 
sshd contrib/suse/sysconfig.ssh] Bug #1106: Updated SuSE spec and init
   files from imorgan AT nas.nasa.gov
 2005-10-30 11:55:45 +11:00
Darren Tucker a841dceb4c - (dtucker) [contrib/cygwin/ssh-user-config] Remove duplicate yes/no 
prompt.  Patch from vinschen at redhat.com.
 2005-10-25 18:55:00 +10:00
Darren Tucker e737455430 - (dtucker) [configure.ac] Bug #1104: Tru64's printf family doesn't 
understand "%lld", even though the compiler has "long long", so handle
   it as a special case.  Patch tested by mcaskill.scott at epa.gov.

(actually was included in previous commit)
 2005-10-25 18:52:31 +10:00
Darren Tucker 537f1ed7df - (dtucker) [configure.ac] Relocate LLONG_MAX calculation to after the 
sizeof(long long) checks, to make fixing bug #1104 easier (no changes
   yet).
 2005-10-25 18:38:33 +10:00
Darren Tucker 314d89e050 - (dtucker) [configure.ac] Bug #1097: Fix configure for cross-compiling. 
/etc/default/login report and testing from aabaker at iee.org, corrections
   from tim@.
 2005-10-17 23:29:23 +10:00
Darren Tucker 9ac1a65acb - (dtucker) [configure.ac defines.h openbsd-compat/vis.{c,h}] Sync current 
versions from OpenBSD.  ok djm@
 2005-10-09 11:40:03 +10:00
Damien Miller e04ec6fdfd - (djm) [configure.ac] missing 'test' call for -with-Werror test 2005-10-08 16:21:19 +10:00
Darren Tucker 1e6616bb14 - (dtucker) [configure.ac] Bug #1098: define $MAIL for HP-UX; report from 
brian.smith at agilent com.
 2005-10-08 12:07:01 +10:00
Darren Tucker b18f15100a - (dtucker) [configure.ac sshd.8] Enable locked account check (a prepended 
"*LOCKED*" string) for FreeBSD.  Patch jeremie at le-hen.org and
   senthilkumar_sen at hotpop.com.
 2005-10-05 23:02:16 +10:00
Darren Tucker 1f85dc7034 - (dtucker) [regress/README.regress] Bug #989: Document limitation that scp 
is required in the system path for the multiplex test to work.
 2005-10-03 20:14:18 +10:00
Darren Tucker b0b12296f9 - dtucker@cvs.openbsd.org 2005/10/03 07:44:42 
[canohost.c]
     Relocate check_ip_options call to prevent logging of garbage for
     connections with IP options set.  bz#1092 from David Leonard,
     "looks good" deraadt@
 2005-10-03 18:23:44 +10:00
Darren Tucker 28e8e59b35 - jaredy@cvs.openbsd.org 2005/09/30 20:34:26 
[ssh-keyscan.1]
     deploy .An -nosplit; ok jmc
 2005-10-03 18:20:28 +10:00
Darren Tucker 45b0142643 - djm@cvs.openbsd.org 2005/09/21 23:37:11 
[sshd.c]
     change label at markus@'s request
 2005-10-03 18:20:00 +10:00
Darren Tucker e2dd2d5baa - djm@cvs.openbsd.org 2005/09/21 23:36:54 
[sshd_config.5]
     aquire -> acquire, from stevesk@
 2005-10-03 18:19:06 +10:00
Darren Tucker 1e4308e6fa - djm@cvs.openbsd.org 2005/09/19 23:31:31 
[ssh.1]
     spelling nit from stevesk@
 2005-10-03 18:18:40 +10:00
Darren Tucker 895d698515 - jmc@cvs.openbsd.org 2005/09/19 15:42:44 
[ssh.c]
     update -D usage here too;
 2005-10-03 18:18:05 +10:00
Darren Tucker 05d4dfe38f - jmc@cvs.openbsd.org 2005/09/19 15:38:27 
[ssh.1]
     some more .Bk/.Ek to avoid ugly line split;
 2005-10-03 18:17:38 +10:00
Darren Tucker 8813bbbca9 - djm@cvs.openbsd.org 2005/09/19 11:48:10 
[gss-serv.c]
     typo
 2005-10-03 18:17:02 +10:00
Darren Tucker a2cdbda2de - djm@cvs.openbsd.org 2005/09/19 11:47:09 
[sshd.c]
     stop connection abort on rekey with delayed compression enabled when
     post-auth privsep is disabled (e.g. when root is logged in); ok dtucker@
 2005-10-03 18:16:02 +10:00
Darren Tucker c8d6421a64 - djm@cvs.openbsd.org 2005/09/19 11:37:34 
[ssh_config.5 ssh.1]
     mention ability to specify bind_address for DynamicForward and -D options;
     bz#1077 spotted by Haruyama Seigo
 2005-10-03 18:13:42 +10:00
Darren Tucker ce321d8a30 - djm@cvs.openbsd.org 2005/09/13 23:40:07 
[sshd.c ssh.c misc.h sftp.c ssh-keygen.c ssh-keysign.c sftp-server.c
     scp.c misc.c ssh-keyscan.c ssh-add.c ssh-agent.c]
     ensure that stdio fds are attached; ok deraadt@
 2005-10-03 18:11:24 +10:00
Darren Tucker d89dbf29ff - markus@cvs.openbsd.org 2005/09/09 19:18:05 
[clientloop.c]
     typo; from mark at mcs.vuw.ac.nz, bug #1082
 2005-10-03 18:05:26 +10:00
Darren Tucker d3d0fa1558 - markus@cvs.openbsd.org 2005/09/07 08:53:53 
[channels.c]
     enforce chanid != NULL; ok djm
 2005-10-03 18:03:05 +10:00
Darren Tucker d4f04ae247 - (dtucker) [monitor.c] Bug #1087: Send loginmsg to preauth privsep 
child during PAM account check without clearing it.  This restores the
   post-login warnings such as LDAP password expiry.  Patch from Tomas Mraz
   with help from several others.
 2005-09-30 10:23:21 +10:00
Darren Tucker 6e4221129e - (dtucker) [openbsd-compat/openbsd-compat.h] Bug #1096: Add prototype 
for strtoll.  Patch from o.flebbe at science-computing.de.
 2005-09-30 09:55:49 +10:00
Darren Tucker 372c8fbe9b - (dtucker) [monitor_wrap.c] Remove duplicate definition of loginmsg 
introduced during sync.
 2005-09-29 22:01:10 +10:00
Darren Tucker 7b1e695846 - (dtucker) [auth-pam.c] Bug #1028: send final non-query messages from 
PAM via keyboard-interactive.  Patch tested by the folks at Vintela.
 2005-09-28 22:33:27 +10:00
Darren Tucker 46e7ba5d53 - (dtucker) [entropy.c] Use u_char for receiving RNG seed for consistency 2005-09-28 08:26:30 +10:00
Darren Tucker c6f8219e0d - (dtucker) [entropy.c entropy.h sshd.c] Pass RNG seed to the reexec'ed 
process when sshd relies on ssh-random-helper.  Should result in faster
   logins on systems without a real random device or prngd.  ok djm@
 2005-09-27 22:46:32 +10:00
Darren Tucker f1377bdeed - (dtucker) [entropy.c] Remove unnecessary tests for getuid and geteuid 
calls, since they can't possibly fail.  ok djm@
 2005-09-27 19:50:25 +10:00
Darren Tucker d3eff2bfa5 - (dtucker) [auth2.c] Move start_pam() calls out of if-else block to remove 
duplicate call.  ok djm@
 2005-09-24 12:43:51 +10:00
Darren Tucker 82171c6607 - (dtucker) [configure.ac] Fix help for --with-opensc; patch from skeleten at 
shillest.net.
 2005-09-22 20:19:54 +10:00
Darren Tucker c373a56343 - (dtucker) [configure.ac] Use -R linker flag for libedit too; patch from 
skeleten at shillest.net.
 2005-09-22 20:15:08 +10:00