9e1777a0d1
upstream commit
...
use ${SSH} for -Q instead of installed ssh
2015-04-01 10:02:56 +11:00
ce1b358ea4
upstream commit
...
make CLEANFILES clean up more of the tests' droppings
2015-04-01 10:02:01 +11:00
398f9ef192
upstream commit
...
downgrade error() for known_hosts parse errors to debug()
to quiet warnings from ssh1 keys present when compiled !ssh1.
also identify ssh1 keys when scanning, even when compiled !ssh1
ok markus@ miod@
2015-04-01 10:00:46 +11:00
9a47ab8003
upstream commit
...
fd leak for !ssh1 case; found by unittests; ok markus@
2015-04-01 10:00:46 +11:00
c9a0805a62
upstream commit
...
don't fatal when a !ssh1 sshd is reexeced from a w/ssh1
listener; reported by miod@; ok miod@ markus@
2015-04-01 10:00:45 +11:00
704d8c8898
upstream commit
...
Comments are only supported for RSA1 keys. If a user
tried to add one and entered his passphrase, explicitly clear it before exit.
This is done in all other error paths, too.
ok djm
2015-04-01 10:00:27 +11:00
78de1673c0
upstream commit
...
ssh-askpass(1) is the default, overridden by SSH_ASKPASS;
diff originally from jiri b;
2015-04-01 10:00:27 +11:00
26e0bcf766
upstream commit
...
fix uninitialised memory read when parsing a config file
consisting of a single nul byte. Found by hanno AT hboeck.de using AFL; ok
dtucker
2015-03-30 11:01:08 +11:00
fecede00a7
upstream commit
...
sigp and lenp are not optional in ssh_agent_sign(); ok
djm@
2015-03-27 12:02:38 +11:00
1b0ef38132
upstream commit
...
don't try to load .ssh/identity by default if SSH1 is
disabled; ok markus@
2015-03-27 12:02:34 +11:00
f9b7885237
upstream commit
...
ban all-zero curve25519 keys as recommended by latest
CFRG curves draft; ok markus
2015-03-27 12:02:27 +11:00
b8afbe2c1a
upstream commit
...
relax bits needed check to allow
diffie-hellman-group1-sha1 key exchange to complete for chacha20-poly1305 was
selected as symmetric cipher; ok markus
2015-03-27 12:02:23 +11:00
47842f71e3
upstream commit
...
ignore v1 errors on ssh-add -D; only try v2 keys on
-l/-L (unless WITH_SSH1) ok djm@
2015-03-27 12:02:16 +11:00
5f57e77f91
upstream commit
...
unbreak ssh_agent_sign (lenp vs *lenp)
2015-03-27 12:02:13 +11:00
4daeb67181
upstream commit
...
don't leak 'setp' on error; noted by Nicholas Lemonias;
ok djm@
2015-03-27 12:01:47 +11:00
7d4f96f9de
upstream commit
...
consistent check for NULL as noted by Nicholas
Lemonias; ok djm@
2015-03-27 12:00:52 +11:00
df100be513
upstream commit
...
correct fmt-string for size_t as noted by Nicholas
Lemonias; ok djm@
2015-03-27 12:00:47 +11:00
a22b9ef212
upstream commit
...
promote chacha20-poly1305@openssh.com to be the default
cipher; ok markus
2015-03-27 12:00:43 +11:00
2aa9da1a3b
upstream commit
...
Compile-time disable SSH protocol 1. You can turn it
back on using the Makefile.inc knob if you need it to talk to ancient
devices.
2015-03-27 12:00:37 +11:00
53097b2022
upstream commit
...
fix double-negative error message "ssh1 is not
unsupported"
2015-03-27 12:00:33 +11:00
5c27e3b6ec
upstream commit
...
for ssh-keygen -A, don't try (and fail) to generate ssh
v.1 keys when compiled without SSH1 support RSA/DSA/ECDSA keys when compiled
without OpenSSL based on patch by Mike Frysinger; bz#2369
2015-03-23 17:10:14 +11:00
725fd22a8c
upstream commit
...
KRL support doesn't need OpenSSL anymore, remove #ifdefs
from around call
2015-03-23 17:08:39 +11:00
b07011c18e
upstream commit
...
#if 0 some more arrays used only for decrypting (we don't
use since we only need encrypt for AES-CTR)
2015-03-23 17:08:12 +11:00
1cb3016635
upstream commit
...
add back the changes from rev 1.206, djm reverted this by
mistake in rev 1.207
2015-03-23 17:07:36 +11:00
4d24b3b6a4
remove error() accidentally inserted for debugging
...
pointed out by Christian Hesse
2015-03-20 09:32:27 +11:00
9f82e5a904
portability fix: Solaris systems may not have a grep that understands -q
2015-03-16 22:49:20 -07:00
8ef691f7d9
fix compile with clang
2015-03-11 10:35:26 +11:00
4df590cf8d
make unit tests work for !OPENSSH_HAS_ECC
2015-03-11 10:02:39 +11:00
307bb40277
upstream commit
...
unbreak for w/SSH1 (default) case; ok markus@ deraadt@
2015-03-09 15:20:55 +11:00
b44ee0c998
unbreak hostkeys test for w/ SSH1 case
2015-03-05 18:39:20 -08:00
55e5bdeb51
upstream commit
...
fix sshkey_certify() return value for unsupported key types;
ok markus@ deraadt@
2015-03-06 13:22:44 +11:00
be8f658e55
update version numbers to match version.h
2015-03-04 15:39:22 -08:00
ac5e8acefa
upstream commit
...
make these work with !SSH1; ok markus@ deraadt@
2015-03-05 10:27:22 +11:00
2f04af92f0
upstream commit
...
make ssh-add -D work with !SSH1 agent
2015-03-05 10:27:22 +11:00
a05adf95d2
netcat needs poll.h portability goop
2015-03-04 11:00:35 -08:00
dad2b1892b
upstream commit
...
make it possible to run tests w/o ssh1 support; ok djm@
2015-03-05 05:59:47 +11:00
d48a22601b
upstream commit
...
crank; ok markus, deraadt
2015-03-05 05:59:46 +11:00
bbffb23daa
more --without-ssh1 fixes
2015-03-03 13:50:27 -08:00
6c2039286f
fix merge both that broke --without-ssh1 compile
2015-03-03 13:48:48 -08:00
111dfb2254
upstream commit
...
add SSH1 Makefile knob to make it easier to build without
SSH1 support; ok markus@
2015-03-04 08:24:11 +11:00
3f7f5e6c5d
upstream commit
...
expand __unused to full __attribute__ for better portability
2015-03-04 07:59:13 +11:00
2fab9b0f87
avoid warning
2015-03-04 07:41:27 +11:00
d1bc844322
Revert "define __unused to nothing if not already defined"
...
This reverts commit 1598419e38
2015-03-04 06:31:45 +11:00
00797e86b2
check for crypt and DES_crypt in openssl block
...
fixes builds on systems that use DES_crypt; based on patch
from Roumen Petrov
2015-03-04 05:02:45 +11:00
1598419e38
define __unused to nothing if not already defined
...
fixes builds on BSD/OS
2015-03-04 04:59:13 +11:00
d608a51daa
upstream commit
...
reorder logic for better portability; patch from Roumen
Petrov
2015-03-04 04:54:27 +11:00
68d2dfc464
upstream commit
...
Allow "ssh -Q protocol-version" to list supported SSH
protocol versions. Useful for detecting builds without SSH v.1 support; idea
and ok markus@
2015-03-04 04:54:11 +11:00
39e2f12295
upstream commit
...
Make sure we only call getnameinfo() for AF_INET or AF_INET6
sockets. getpeername() of a Unix domain socket may return without error on
some systems without actually setting ss_family so getnameinfo() was getting
called with ss_family set to AF_UNSPEC. OK djm@
2015-03-03 04:45:01 +11:00
e47536ba96
portability fixes for regress/netcat.c
...
Mostly avoiding "err(1, NULL)"
2015-02-28 08:20:11 -08:00
02973ad5f6
twiddle another test for portability
...
from Tom G. Christensen
2015-02-28 08:06:18 -08:00
markus@openbsd.org
djm@openbsd.org
tobias@openbsd.org
jmc@openbsd.org
naddy@openbsd.org
jsg@openbsd.org
Damien Miller
Tim Rice
Damien Miller
millert@openbsd.org