tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
6,313 Commits 6 Branches 20 Tags 97 MiB
Commit Graph

6313 Commits

Author SHA1 Message Date
Damien Miller 6f8f04b860 - (djm) Release 5.7p1 2011-01-22 20:25:11 +11:00
Damien Miller 4a5eb41cee trim entries older than 5.5p1 2011-01-22 20:24:34 +11:00
Damien Miller 966accc533 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 
[contrib/suse/openssh.spec] update versions in docs and spec files.
 2011-01-22 20:23:10 +11:00
Damien Miller ad4b1adf95 - OpenBSD CVS Sync 
- djm@cvs.openbsd.org 2011/01/22 09:18:53
     [version.h]
     crank to OpenSSH-5.7
 2011-01-22 20:21:33 +11:00
Darren Tucker 79241377df - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] Add 
RSA_get_default_method() for the benefit of openssl versions that don't
   have it (at least openssl-engine-0.9.6b).  Found and tested by Kevin Brott,
   ok djm@.
 2011-01-22 09:37:01 +11:00
Damien Miller e323ebc250 - (djm) [configure.ac] Disable ECC on OpenSSL <0.9.8g. Releases prior to 
0.9.8 lacked it, and 0.9.8a through 0.9.8d have proven buggy in pre-
   release testing (random crashes and failure to load ECC keys).
   ok dtucker@
 2011-01-19 23:12:27 +11:00
Tim Rice 15e1b4dea7 - (tim) [contrib/caldera/openssh.spec] Use CFLAGS from Makefile instead 
of RPM so build completes. Signatures were changed to .asc since 4.1p1.
 2011-01-18 20:47:04 -08:00
Darren Tucker ea52a82969 - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 
configure.ac defines.h loginrec.c]  Bug #1402: add linux audit subsystem
   support, based on patches from Tomas Mraz and jchadima at redhat.
 2011-01-17 21:15:27 +11:00
Darren Tucker 263d43d2a5 - (dtucker) [openbsd-compat/port-linux.c] Fix minor bug caught by -Werror on 
the tinderbox.
 2011-01-17 18:50:22 +11:00
Tim Rice 6dfcd34042 - (tim) [regress/agent-getpeereid.sh] shell portability fix. 2011-01-16 22:53:56 -08:00
Damien Miller 58497780ab - (djm) [configure.ac regress/agent-getpeereid.sh regress/multiplex.sh] 
[regress/sftp-glob.sh regress/test-exec.sh] Rework how feature tests are
   disabled on platforms that do not support them; add a "config_defined()"
   shell function that greps for defines in config.h and use them to decide
   on feature tests.
   Convert a couple of existing grep's over config.h to use the new function
   Add a define "FILESYSTEM_NO_BACKSLASH" for filesystem that can't represent
   backslash characters in filenames, enable it for Cygwin and use it to turn
   of tests for quotes backslashes in sftp-glob.sh.
   based on discussion with vinschen AT redhat.com and dtucker@; ok dtucker@
 2011-01-17 16:17:09 +11:00
Darren Tucker 0c93adc7c1 - (dtucker) [openbsd-compat/port-linux.c] Bug #1838: Add support for the new 
Linux OOM-killer magic values that changed in 2.6.36 kernels, with fallback
   to the old values.  Feedback from vapier at gentoo org and djm, ok djm.
 2011-01-17 11:55:59 +11:00
Damien Miller 1ccbfa88b1 - (djm) [regress/agent-getpeereid.sh] leave stdout attached when running 
ssh-add to avoid $SUDO failures on Linux
 2011-01-17 11:52:40 +11:00
Damien Miller fd3669eb26 - (djm) [regress/agent-ptrace.sh] Fix false failure on OS X by adding 
its unique snowflake of a gdb error to the ones we look for.
 2011-01-17 11:20:18 +11:00
Damien Miller 369c0e8eef - (djm) [regress/Makefile] use $TEST_SSH_KEYGEN instead of the one in 
$PATH, fix cleanup of droppings; reported by openssh AT
   roumenpetrov.info; ok dtucker@
 2011-01-17 10:51:40 +11:00
Damien Miller cfd6e4f57f - djm@cvs.openbsd.org 2011/01/16 12:05:59 
[clientloop.c]
     a couple more tweaks to the post-close protocol 1 stderr/stdout flush:
     now that we use atomicio(), convert them from while loops to if statements
     add test and cast to compile cleanly with -Wsigned
 2011-01-16 23:18:33 +11:00
Damien Miller 6fb6fd5662 - djm@cvs.openbsd.org 2011/01/16 11:50:36 
[sshconnect.c]
     reset the SIGPIPE handler when forking to execute child processes;
     ok dtucker@
 2011-01-16 23:17:45 +11:00
Damien Miller 4791f9dcec - djm@cvs.openbsd.org 2011/01/16 11:50:05 
[clientloop.c]
     Use atomicio when flushing protocol 1 std{out,err} buffers at
     session close. This was a latent bug exposed by setting a SIGCHLD
     handler and spotted by kevin.brott AT gmail.com; ok dtucker@
 2011-01-16 23:16:53 +11:00
Darren Tucker 50c61f88ab - (dtucker) [Makefile.in configure.ac regress/kextype.sh] Skip sha256-based 
on configurations that don't have it.
 2011-01-16 18:28:09 +11:00
Darren Tucker 08f83883f5 not February yet... 2011-01-16 18:24:04 +11:00
Tim Rice c5c346b101 - (tim) [regress/cert-hostkey.sh] Add missing TEST_SSH_ECC guard around some 
ecdsa bits.
 2011-01-13 22:36:14 -08:00
Tim Rice 02d99da976 - (tim) [regress/cert-hostkey.sh] Typo. Missing $ on variable name. 2011-01-13 22:20:27 -08:00
Damien Miller e9b40487fa - (djm) [Makefile.in] Use shell test to disable ecdsa key generating in 
host-key-force target rather than a substitution that is replaced with a
   comment so that the Makefile.in is still a syntactically valid Makefile
   (useful to run the distprep target)
 2011-01-14 14:47:37 +11:00
Damien Miller 42747df8b7 - djm@cvs.openbsd.org 2011/01/13 21:55:25 
[PROTOCOL.mux]
     correct protocol names and add a couple of missing protocol number
     defines; patch from bert.wesarg AT googlemail.com
 2011-01-14 12:01:50 +11:00
Damien Miller 445c9a507d - djm@cvs.openbsd.org 2011/01/13 21:54:53 
[mux.c]
     correct error messages; patch from bert.wesarg AT googlemail.com
 2011-01-14 12:01:29 +11:00
Damien Miller 5278806e39 - (djm) [regress/kextype.sh] Testing diffie-hellman-group-exchange-sha256 
should not depend on ECC support
 2011-01-13 22:05:14 +11:00
Damien Miller 9b16086e74 - (djm) [myproposal.h] Fix reversed OPENSSL_VERSION_NUMBER test and bad 
#define that was causing diffie-hellman-group-exchange-sha256 to be
   incorrectly disabled
 2011-01-13 22:00:20 +11:00
Damien Miller cbaf8e6ec1 - (djm) [regress/Makefile] add a few more generated files to the clean 
target
 2011-01-13 21:08:27 +11:00
Damien Miller ff22df538e - (djm) [entropy.c] cast OPENSSL_VERSION_NUMBER to u_long to avoid 
gcc warning on platforms where it defaults to int
 2011-01-13 21:05:27 +11:00
Tim Rice 9b87a5ce3c - (tim) [Makefile.in configure.ac opensshd.init.in] Add support for generating 
ecdsa keys. ok djm.
 2011-01-12 22:35:43 -08:00
Tim Rice cce927c25f - (tim) [Makefile.in] test the ECC bits if we have the capability. ok djm 2011-01-12 19:06:31 -08:00
Damien Miller 1708cb7d0d - (djm) [misc.c] include time.h for nanosleep() prototype 2011-01-13 12:21:34 +11:00
Damien Miller 134d02a494 - (djm) [configure.ac] Fix broken test for gcc >= 4.4 with per-compiler 
flag tests that don't depend on gcc version at all; suggested by and
   ok dtucker@
 2011-01-12 16:00:37 +11:00
Damien Miller 945aa0c744 - (djm) [configure.ac] Turn on -Wno-unused-result for gcc >= 4.4 to avoid 
silly warnings on write() calls we don't care succeed or not.
 2011-01-12 13:34:02 +11:00
Damien Miller 4927aaf446 - djm@cvs.openbsd.org 2011/01/12 01:53:14 
avoid some integer overflows mostly with GLOB_APPEND and GLOB_DOOFFS
     and sanity check arguments (these will be unnecessary when we switch
     struct glob members from being type into to size_t in the future);
     "looks ok" tedu@ feedback guenther@
 2011-01-12 13:32:03 +11:00
Damien Miller b66e917831 - nicm@cvs.openbsd.org 2010/10/08 21:48:42 
[openbsd-compat/glob.c]
     Extend GLOB_LIMIT to cover readdir and stat and bump the malloc limit
     from ARG_MAX to 64K.
     Fixes glob-using programs (notably ftp) able to be triggered to hit
     resource limits.
     Idea from a similar NetBSD change, original problem reported by jasper@.
     ok millert tedu jasper
 2011-01-12 13:30:18 +11:00
Damien Miller 821de0ad2e - djm@cvs.openbsd.org 2011/01/11 06:13:10 
[clientloop.c ssh-keygen.c sshd.c]
     some unsigned long long casts that make things a bit easier for
     portable without resorting to dropping PRIu64 formats everywhere
 2011-01-11 17:20:29 +11:00
Damien Miller a256c8d680 - djm@cvs.openbsd.org 2011/01/11 06:06:09 
[sshlogin.c]
     fd leak on error paths; from zinovik@
     NB. Id sync only; we use loginrec.c that was also audited and fixed
     recently
 2011-01-11 17:20:05 +11:00
Damien Miller b73b6fd916 - djm@cvs.openbsd.org 2011/01/08 10:51:51 
[clientloop.c]
     use host and not options.hostname, as the latter may have unescaped
     substitution characters
 2011-01-11 17:18:56 +11:00
Damien Miller 81ad4b1fc0 - (djm) [platform.c] Some missing includes that show up under -Werror 2011-01-11 17:02:23 +11:00
Tim Rice 076a3b9ced - (tim) [regress/host-expand.sh] Fix for building outside of read only 
source tree.
 2011-01-10 12:56:26 -08:00
Damien Miller e63b7f2821 - (djm) [Makefile.in] list ssh_host_ecdsa key in PATHSUBS; spotted by 
openssh AT roumenpetrov.info
 2011-01-09 09:19:50 +11:00
Damien Miller 996384d500 - (djm) [regress/keytype.sh] s/echo -n/echon/ to repair failing regress 
test on OSX and others. Reported by imorgan AT nas.nasa.gov
 2011-01-08 21:58:20 +11:00
Damien Miller ed3a8eb65f - djm@cvs.openbsd.org 2011/01/06 23:01:35 
[sshconnect.c]
     reset SIGCHLD handler to SIG_DFL when execuring LocalCommand;
     ok markus@
 2011-01-07 10:02:52 +11:00
Damien Miller 7d06b00032 - djm@cvs.openbsd.org 2011/01/06 22:46:21 
[regress/Makefile regress/host-expand.sh]
     regress test for LocalCommand %n expansion from bert.wesarg AT
     googlemail.com; ok markus@
 2011-01-07 09:54:20 +11:00
Damien Miller 64abf31425 - djm@cvs.openbsd.org 2011/01/06 22:23:02 
[clientloop.c]
     when exiting due to ServerAliveTimeout, mention the hostname that caused
     it (useful with backgrounded controlmaster)
 2011-01-07 09:51:52 +11:00
Damien Miller 83f8a4014d - djm@cvs.openbsd.org 2011/01/06 22:23:53 
[ssh.c]
     unbreak %n expansion in LocalCommand; patch from bert.wesarg AT
     googlemail.com; ok markus@
 2011-01-07 09:51:17 +11:00
Damien Miller 322125b960 - (djm) [regress/cert-hostkey.sh regress/cert-userkey.sh] fix shell test 
for no-ECC case. Patch from cristian.ionescu-idbohrn AT axis.com
 2011-01-07 09:50:08 +11:00
Damien Miller 8ad960b4ba - otto@cvs.openbsd.org 2011/01/04 20:44:13 
[ssh-keyscan.c]
     handle ecdsa-sha2 with various key lengths; hint and ok djm@
 2011-01-06 22:44:44 +11:00
Damien Miller de53fd04b1 - djm@cvs.openbsd.org 2010/12/24 21:41:48 
[auth-options.c]
     don't send the actual forced command in a debug message; ok markus deraadt
 2011-01-06 22:44:18 +11:00