tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
2,508 Commits 6 Branches 20 Tags 99 MiB
Commit Graph

2160 Commits

Author SHA1 Message Date
Damien Miller 84b8ab3eee - markus@cvs.openbsd.org 2002/01/11 13:36:43 
[ssh2.h]
     add defines for msg type ranges
 2002-01-22 23:23:41 +11:00
Damien Miller 659811f7fc - markus@cvs.openbsd.org 2002/01/11 10:31:05 
[packet.c]
     handle received SSH2_MSG_UNIMPLEMENTED messages; ok djm@
 2002-01-22 23:23:11 +11:00
Damien Miller 66ac6a43a8 - markus@cvs.openbsd.org 2002/01/10 12:47:59 
[nchan.c]
     more unused code (with channels.c:1.156)
 2002-01-22 23:22:44 +11:00
Damien Miller 4ce2595259 - markus@cvs.openbsd.org 2002/01/10 12:38:26 
[nchan.c]
     remove dead code (skip drain)
 2002-01-22 23:22:20 +11:00
Damien Miller c3fa407073 - markus@cvs.openbsd.org 2002/01/10 11:24:04 
[clientloop.c]
     handle SSH2_MSG_GLOBAL_REQUEST (just reply with failure); ok djm@
 2002-01-22 23:21:58 +11:00
Damien Miller 056cf73d35 - markus@cvs.openbsd.org 2002/01/10 11:13:29 
[serverloop.c]
     skip client_alive_check until there are channels; ok beck@
 2002-01-22 23:21:39 +11:00
Damien Miller 76765c0b1a - markus@cvs.openbsd.org 2002/01/09 17:26:35 
[channels.c nchan.c]
     replace buffer_consume(b, buffer_len(b)) with buffer_clear(b); ok provos@
 2002-01-22 23:21:15 +11:00
Damien Miller de6987c2b9 - markus@cvs.openbsd.org 2002/01/09 17:16:00 
[channels.c]
     merge channel_pre_open_15/channel_pre_open_20; ok provos@
 2002-01-22 23:20:40 +11:00
Damien Miller a1db12bac4 - markus@cvs.openbsd.org 2002/01/09 13:49:27 
[ssh-keygen.c]
     append \n only for public keys
 2002-01-22 23:20:15 +11:00
Damien Miller 70972eb388 - stevesk@cvs.openbsd.org 2002/01/05 21:51:56 
[ssh.1 sshd.8]
     some missing and misplaced periods
 2002-01-22 23:19:55 +11:00
Damien Miller a90fc08b88 - markus@cvs.openbsd.org 2002/01/05 10:43:40 
[channels.c]
     fix hanging x11 channels for rejected cookies (e.g. XAUTHORITY=/dev/null xbiff)
     bug #36, based on patch from djast@cs.toronto.edu
 2002-01-22 23:19:38 +11:00
Damien Miller 7fc2373f17 - stevesk@cvs.openbsd.org 2002/01/04 18:14:16 
[servconf.c sshd.8]
     protocol 2 HostKey code default is now /etc/ssh_host_rsa_key and
     /etc/ssh_host_dsa_key like we have in sshd_config.  ok markus@
 2002-01-22 23:19:11 +11:00
Damien Miller f51b0e1a30 - stevesk@cvs.openbsd.org 2002/01/04 17:59:17 
[readconf.c servconf.c]
     remove #ifdef _PATH_XAUTH/#endif; ok markus@
 2002-01-22 23:18:49 +11:00
Damien Miller 56ccf41de2 - stevesk@cvs.openbsd.org 2002/01/03 04:11:08 
[ssh_config]
     grammar in comment
 2002-01-22 23:18:32 +11:00
Damien Miller 708d21c802 - stevesk@cvs.openbsd.org 2001/12/29 21:56:01 
[authfile.c channels.c compress.c packet.c sftp-server.c ssh-agent.c ssh-keygen.c]
     remove unneeded casts and some char->u_char cleanup; ok markus@
 2002-01-22 23:18:15 +11:00
Damien Miller dc9e067614 - stevesk@cvs.openbsd.org 2001/12/28 22:37:48 
[ssh.1 sshd.8]
     document LogLevel DEBUG[123]; ok markus@
 2002-01-22 23:17:51 +11:00
Damien Miller 630d6f4479 - markus@cvs.openbsd.org 2001/12/28 15:06:00 
[auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c dispatch.h kex.c kex.h serverloop.c ssh.c sshconnect2.c]
     remove plen from the dispatch fn. it's no longer used.
 2002-01-22 23:17:30 +11:00
Damien Miller dff5099f13 - markus@cvs.openbsd.org 2001/12/28 14:50:54 
[auth1.c auth-rsa.c channels.c dispatch.c kex.c kexdh.c kexgex.c packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c sshconnect2.c sshd.c]
     packet_read* no longer return the packet length, since it's not used.
 2002-01-22 23:16:32 +11:00
Damien Miller 76e1e368b5 - markus@cvs.openbsd.org 2001/12/28 14:13:13 
[bufaux.c bufaux.h packet.c]
     buffer_get_bignum: int -> void
 2002-01-22 23:15:57 +11:00
Damien Miller d432ccf740 - markus@cvs.openbsd.org 2001/12/28 13:57:33 
[auth1.c kexdh.c kexgex.c packet.c packet.h sshconnect1.c sshd.c]
     packet_get_bignum* no longer returns a size
 2002-01-22 23:14:44 +11:00
Damien Miller 29f75f5c25 oops, that last commit was really: 
- markus@cvs.openbsd.org 2001/12/28 12:14:27
     [auth1.c auth2.c auth2-chall.c auth-rsa.c channels.c clientloop.c kex.c kexdh.c kexgex.c packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c sshconnect2.c sshd.c]
     s/packet_done/packet_check_eom/ (end-of-message); ok djm@

with 47 more patchsets to go, I am not going to back out all the files for
the sake of a commit message...
 2002-01-22 23:14:10 +11:00
Damien Miller 48b03fc546 - markus@cvs.openbsd.org 2001/12/27 20:39:58 
[auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c]
     get rid of packet_integrity_check, use packet_done() instead.
 2002-01-22 23:11:40 +11:00
Damien Miller 66823cddbe - markus@cvs.openbsd.org 2001/12/27 20:39:58 
[auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c]
     get rid of packet_integrity_check, use packet_done() instead.
 2002-01-22 23:11:38 +11:00
Damien Miller d221ca6cc9 - markus@cvs.openbsd.org 2001/12/27 19:54:53 
[auth1.c auth.h auth-rh-rsa.c]
     auth_rhosts_rsa now accept generic keys.
 2002-01-22 23:11:00 +11:00
Damien Miller 9ef95ddcaf - markus@cvs.openbsd.org 2001/12/27 19:37:23 
[dh.c kexdh.c kexgex.c]
     always use BN_clear_free instead of BN_free
 2002-01-22 23:10:33 +11:00
Damien Miller 040b64f60a - markus@cvs.openbsd.org 2001/12/27 18:26:13 
[authfile.c]
     missing include
 2002-01-22 23:10:04 +11:00
Damien Miller 7d1ded4972 - stevesk@cvs.openbsd.org 2001/12/27 18:22:53 
[sshd.8]
     clarify -p; ok markus@
 2002-01-22 23:09:41 +11:00
Damien Miller da7551677b - markus@cvs.openbsd.org 2001/12/27 18:22:16 
[auth1.c authfile.c auth-rsa.c dh.c kexdh.c kexgex.c key.c rsa.c scard.c ssh-agent.c sshconnect1.c sshd.c ssh-dss.c]
     call fatal() for openssl allocation failures
 2002-01-22 23:09:22 +11:00
Damien Miller 154dda73a8 - markus@cvs.openbsd.org 2001/12/27 18:10:29 
[ssh-keygen.c]
     -t is only needed for key generation (unbreaks -i, -e, etc).
 2002-01-22 23:08:16 +11:00
Damien Miller aef7a095c8 - markus@cvs.openbsd.org 2001/12/25 18:53:00 
[auth1.c]
     be more carefull on allocation
 2002-01-22 23:07:52 +11:00
Damien Miller 503761ac45 - markus@cvs.openbsd.org 2001/12/25 18:49:56 
[key.c]
     be more careful on allocation
 2002-01-22 23:07:21 +11:00
Damien Miller a055c25d05 - deraadt@cvs.openbsd.org 2001/12/24 07:29:43 
[ssh-add.c]
     try all listed keys.. how did this get broken?

(oops - that was me)
 2002-01-22 23:07:01 +11:00
Damien Miller 7c31809c4a - markus@cvs.openbsd.org 2001/12/21 12:17:33 
[serverloop.c]
     remove ifdef for USE_PIPES since fdin != fdout; ok djm@
 2002-01-22 23:06:22 +11:00
Damien Miller 6e1057c2d7 - djm@cvs.openbsd.org 2001/12/21 10:06:43 
[ssh-add.1 ssh-add.c]
     Try all standard key files (id_rsa, id_dsa, identity) when invoked with
     no arguments; ok markus@
 2002-01-22 23:05:59 +11:00
Damien Miller f451e22e21 - djm@cvs.openbsd.org 2001/12/21 08:53:45 
[readpass.c]
     Avoid interruptable passphrase read; ok markus@
 2002-01-22 23:05:31 +11:00
Damien Miller a41c8b15bd - djm@cvs.openbsd.org 2001/12/21 08:52:22 
[ssh-keygen.1 ssh-keygen.c]
     Remove default (rsa1) key type; ok markus@
 2002-01-22 23:05:08 +11:00
Damien Miller ec932376b7 - (djm) autoconf hacking: 
- Add OpenSSL sanity check: verify that header version matches version
     reported by library
 2002-01-22 22:16:03 +11:00
Damien Miller c46cc5445d - (djm) Fix some bugs I introduced into ssh-rand-helper yesterday 2002-01-22 21:58:27 +11:00
Damien Miller 6c21c51c48 - (djm) autoconf hacking: 
- We don't support --without-zlib currently, so don't allow it.
   - Rework cryptographic random number support detection. We now detect
     whether OpenSSL seeds itself. If it does, then we don't bother with
     the ssh-rand-helper program. You can force the use of ssh-rand-helper
     using the --with-rand-helper configure argument
   - Simplify and clean up ssh-rand-helper configuration
 2002-01-22 21:57:53 +11:00
Damien Miller 7b10ef4877 - (djm) Rework ssh-rand-helper: 
- Reduce quantity of ifdef code, in preparation for ssh_rand_conf
   - Always seed from system calls, even when doing PRNGd seeding
   - Tidy and comment #define knobs
   - Remove unused facility for multiple runs through command list
   - KNF, cleanup, update copyright
 2002-01-21 23:44:12 +11:00
Damien Miller a234451a70 - (djm) Bug #50 - make autoconf entropy path checks more robust 2002-01-14 19:01:03 +11:00
Kevin Steves 2f8f6e3b1c - (stevesk) defines.h: use "/var/spool/sockets/X11/%u" for HP-UX. does 
not depend on transition links.  from Lutz Jaenicke.
 2002-01-08 21:59:06 +00:00
Damien Miller bb9ffc18ca - (djm) Merge Cygwin copy_environment with do_pam_environment, removing 
fixed env var size limit in the process. Report from Corinna Vinschen
   <vinschen@redhat.com>
 2002-01-08 10:59:32 +11:00
Kevin Steves f49a1191c7 - (stevesk) defines.h: determine _PATH_UNIX_X; currently "/tmp/.X11-unix/X%u" 
for all platforms except HP-UX, which is "/usr/spool/sockets/X11/%u".
 2002-01-06 02:32:57 +00:00
Kevin Steves 0bd4b34c9b - (stevesk) fix spurious ; from NCR change. 2002-01-05 23:24:27 +00:00
Ben Lindstrom 381d8d9d89 - (bal) NCR requies use_pipes to operate correctly. 2002-01-05 17:15:30 +00:00
Damien Miller f9661094e5 - (djm) Use bigcrypt() on systems with SCO_PROTECTED_PW. Patch from 
Roger Cornelius <rac@tenzing.org>
 2002-01-03 10:30:56 +11:00
Damien Miller b65a93d3a6 test openssh-commits list 2001-12-31 11:59:53 +11:00
Damien Miller bc5239bd62 testing again 2001-12-31 11:55:59 +11:00
Damien Miller 6a568f3ca9 - (djm) Typo in contrib/cygwin/README Fix from Corinna Vinschen 
<vinschen@redhat.com>
 2001-12-29 14:10:09 +11:00
Damien Miller 0dea79d6b6 - (djm) Apply Cygwin pointer deref fix from Corinna Vinschen 
<vinschen@redhat.com> Could be abused to guess valid usernames
 2001-12-29 14:08:28 +11:00
Damien Miller 6cb127fc14 - (djm) Remove recommendation to use GNU make, we should support most 
make programs.
 2001-12-28 09:57:33 +11:00
Kevin Steves 9443508b96 - (stevesk) [Makefile.in ssh-rand-helper.c] 
portable lib and __progname support for ssh-rand-helper; ok djm@
 2001-12-25 04:32:58 +00:00
Ben Lindstrom 2ad31ee68a - (bal) Removed contrib/chroot.diff and noted in contrib/README that it 
was not being maintained.
 2001-12-24 02:59:19 +00:00
Damien Miller 62116dcc0a - (djm) Ignore fix & patchlevel in OpenSSL version check. Patch from 
solar@openwall.com
 - (djm) Rework entropy code. If the OpenSSL PRNG is has not been
   internally seeded, execute a subprogram "ssh-rand-helper" to obtain
   some entropy for us. Rewrite the old in-process entropy collecter as
   an example ssh-rand-helper.
 - (djm) Always perform ssh_prng_cmds path lookups in configure, even if
   we don't end up using ssh_prng_cmds (so we always get a valid file)
 2001-12-24 01:41:47 +11:00
Damien Miller 278f907a2d - djm@cvs.openbsd.org 2001/12/20 22:50:24 
[auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
     [dispatch.h kex.c kex.h packet.c packet.h serverloop.c ssh.c]
     [sshconnect2.c]
     Conformance fix: we should send failing packet sequence number when
     responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by
     yakk@yakk.dot.net; ok markus@
 2001-12-21 15:00:19 +11:00
Damien Miller e737856350 - markus@cvs.openbsd.org 2001/12/20 16:37:29 
[channels.c channels.h session.c]
     setup x11 listen socket for just one connect if the client requests so.
     (v2 only, but the openssh client does not support this feature).
 2001-12-21 14:58:35 +11:00
Damien Miller 5a6b4fe225 - stevesk@cvs.openbsd.org 2001/12/19 17:16:13 
[authfile.c bufaux.c bufaux.h buffer.c buffer.h packet.c packet.h ssh.c]
     change the buffer/packet interface to use void* vs. char*; ok markus@
 2001-12-21 14:56:54 +11:00
Damien Miller f6681a3a96 - markus@cvs.openbsd.org 2001/12/19 16:09:39 
[serverloop.c]
     fix race between SIGCHLD and select with an additional pipe.  writing
     to the pipe on SIGCHLD wakes up select(). using pselect() is not
     portable and siglongjmp() ugly. W. R. Stevens suggests similar solution.
     initial idea by pmenage@ensim.com; ok deraadt@, djm@
 2001-12-21 14:53:11 +11:00
Damien Miller 9f0f5c64bc - deraadt@cvs.openbsd.org 2001/12/19 07:18:56 
[auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h]
     [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c]
     [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c]
     [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c]
     [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c]
     [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c]
     [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config]
     [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c]
     basic KNF done while i was looking for something else
 2001-12-21 14:45:46 +11:00
Damien Miller 89681214ca - jakob@cvs.openbsd.org 2001/12/18 10:06:24 
[auth-rsa.c]
     log fingerprint on successful public key authentication, simplify usage of key structs; ok markus@
 2001-12-21 12:52:39 +11:00
Damien Miller da9edcabf8 - jakob@cvs.openbsd.org 2001/12/18 10:05:15 
[auth2.c]
     log fingerprint on successful public key authentication; ok markus@
 2001-12-21 12:48:54 +11:00
Damien Miller 5b2aea9494 - jakob@cvs.openbsd.org 2001/12/18 10:04:21 
[auth.h hostfile.c hostfile.h]
     remove auth_rsa_read_key, make hostfile_ready_key non static; ok markus@
 2001-12-21 12:47:09 +11:00
Damien Miller 83c02ef623 - markus@cvs.openbsd.org 2001/12/10 20:34:31 
[ssh-keyscan.c]
     check that server supports v1 for -t rsa1, report from wirth@dfki.de
 2001-12-21 12:45:43 +11:00
Damien Miller 72c336def6 - stevesk@cvs.openbsd.org 2001/12/10 16:45:04 
[sshd.c]
     possible fd leak on error; ok markus@
 2001-12-21 12:44:28 +11:00
Damien Miller ee11625d43 - markus@cvs.openbsd.org 2001/12/09 18:45:56 
[auth2.c auth2-chall.c auth.h]
     add auth2_challenge_stop(), simplifies cleanup of kbd-int sessions,
     fixes memleak.
 2001-12-21 12:42:34 +11:00
Damien Miller 3afe375fd2 - stevesk@cvs.openbsd.org 2001/12/08 17:49:28 
[channels.c pathnames.h]
     use only one path to X11 UNIX domain socket vs. an array of paths
     to try.  report from djast@cs.toronto.edu.  ok markus@
 2001-12-21 12:39:51 +11:00
Damien Miller faf2f6483a - (djm) Add option to gnome-ssh-askpass to stop it from grabbing the X 
server. I have found this necessary to avoid server hangs with X input
   extensions (e.g. kinput2). Enable by setting the environment variable
   "GNOME_SSH_ASKPASS_NOGRAB"
 2001-12-21 10:28:07 +11:00
Kevin Steves 366298c696 - (stevesk) OpenBSD CVS sync X11 localhost display 
- stevesk@cvs.openbsd.org 2001/11/29 14:10:51
     [channels.h channels.c session.c]
     sshd X11 fake server will now listen on localhost by default:
     $ echo $DISPLAY
     localhost:12.0
     $ netstat -an|grep 6012
     tcp        0      0  127.0.0.1.6012         *.*                    LISTEN
     tcp6       0      0  ::1.6012               *.*                    LISTEN
     sshd_config gatewayports=yes can be used to revert back to the old
     behavior.  will control this with another option later.  ok markus@
   - stevesk@cvs.openbsd.org 2001/12/19 08:43:11
     [includes.h session.c]
     handle utsname.nodename case for FamilyLocal X authorization; ok markus@
 2001-12-19 17:58:01 +00:00
Ben Lindstrom 73f57be500 - stevesk@cvs.openbsd.org 2001/12/06 18:20:32 
[channels.c]
     disable nagle for X11 fake server and client TCPs.  from netbsd.
     ok markus@
 2001-12-07 17:28:34 +00:00
Ben Lindstrom ccd8d07b3c - stevesk@cvs.openbsd.org 2001/12/06 18:09:23 
[channels.c session.c]
     strncpy->strlcpy.  remaining strncpy's are necessary.  ok markus@
 2001-12-07 17:26:48 +00:00
Ben Lindstrom e181a4d294 - stevesk@cvs.openbsd.org 2001/12/06 18:02:32 
[channels.c sshconnect.c]
     shutdown(sock, SHUT_RDWR) not needed here; ok markus@
 2001-12-07 17:24:49 +00:00
Ben Lindstrom c97b1affc5 - (bal) PCRE no longer required. Banished from the source along with 
fake-regex.h
 2001-12-07 17:20:47 +00:00
Ben Lindstrom ade03f6bad - markus@cvs.openbsd.org 2001/12/06 13:30:06 
[servconf.c servconf.h sshd.8 sshd.c]
     add -o to sshd, too. ok deraadt@
 - (bal) Minor white space fix up in servconf.c
 2001-12-06 18:22:17 +00:00
Ben Lindstrom 9eab262f1c - markus@cvs.openbsd.org 2001/12/05 16:54:51 
[compat.c match.c match.h]
     make theo and djm happy: bye bye regexp
 2001-12-06 18:06:05 +00:00
Ben Lindstrom ff4a14f809 - markus@cvs.openbsd.org 2001/12/05 15:04:48 
[version.h]
     post 3.0.2
 2001-12-06 18:02:59 +00:00
Ben Lindstrom 1c37c6a518 - deraadt@cvs.openbsd.org 2001/12/05 10:06:12 
[authfd.c authfile.c bufaux.c channels.c compat.c kex.c kexgex.c
      key.c misc.c packet.c servconf.c ssh-agent.c sshconnect2.c
      sshconnect.c sshd.c ssh-dss.c ssh-keygen.c ssh-rsa.c]
     minor KNF
 2001-12-06 18:00:18 +00:00
Ben Lindstrom 3c36bb29ca - itojun@cvs.openbsd.org 2001/12/05 03:56:39 
[auth1.c auth2.c canohost.c channels.c deattack.c packet.c scp.c
      sshconnect2.c]
     make it compile with more strict prototype checking
 2001-12-06 17:55:26 +00:00
Ben Lindstrom f8f065bc75 - itojun@cvs.openbsd.org 2001/12/05 03:50:01 
[clientloop.c serverloop.c sshd.c]
     deal with LP64 printf issue with sig_atomic_t.  from thorpej
 2001-12-06 17:52:16 +00:00
Ben Lindstrom d05487d1db - deraadt@cvs.openbsd.org 2001/12/02 02:08:32 
[sftp-common.c]
     zap };
 2001-12-06 17:50:03 +00:00
Ben Lindstrom 38b951cdb2 - markus@cvs.openbsd.org 2001/12/01 21:41:48 
[session.c sshd.8]
     don't pass user defined variables to /usr/bin/login
 2001-12-06 17:47:47 +00:00
Ben Lindstrom 4a4bd719ea - stevesk@cvs.openbsd.org 2001/11/30 20:39:28 
[ssh.c]
     sscanf() length dependencies are clearer now; can also shrink proto
     and data if desired, but i have not done that.  ok markus@
 2001-12-06 17:45:19 +00:00
Ben Lindstrom 57fe5b592c - markus@cvs.openbsd.org 2001/11/29 22:08:48 
[auth-rsa.c]
     fix protocol error: send 'failed' message instead of a 2nd challenge
     (happens if the same key is in authorized_keys twice).
     reported Ralf_Meister@genua.de; ok djm@
 2001-12-06 17:41:25 +00:00
Ben Lindstrom 623e4a0b1a - stevesk@cvs.openbsd.org 2001/11/29 19:06:39 
[channels.h]
     remove dead function prototype; ok markus@
 2001-12-06 16:49:57 +00:00
Ben Lindstrom 5e71c54b8c - markus@cvs.openbsd.org 2001/11/22 12:34:22 
[clientloop.c serverloop.c sshd.c]
     volatile sig_atomic_t
 2001-12-06 16:48:14 +00:00
Ben Lindstrom 28c603bf43 - stevesk@cvs.openbsd.org 2001/11/22 05:27:29 
[ssh-keyscan.c]
     don't use "\n" in fatal()
 2001-12-06 16:45:10 +00:00
Ben Lindstrom 4e366d5048 - stevesk@cvs.openbsd.org 2001/11/21 18:49:14 
[ssh-keygen.1]
     more on passphrase construction; ok markus@
 2001-12-06 16:43:21 +00:00
Ben Lindstrom 4cbc181983 - markus@cvs.openbsd.org 2001/11/21 15:51:24 
[key.c]
     mem leak
 2001-12-06 16:41:41 +00:00
Ben Lindstrom 70a290c5f7 - mpech@cvs.openbsd.org 2001/11/19 19:02:16 
[deattack.c radix.c]
     kill more registers
     millert@ ok
 2001-12-06 16:39:56 +00:00
Ben Lindstrom 11f790bbb1 - stevesk@cvs.openbsd.org 2001/11/19 18:40:46 
[ssh-agent.1]
     clarify/state that private keys are not exposed to clients using the
     agent; ok markus@
 2001-12-06 16:37:51 +00:00
Ben Lindstrom d84df989db - markus@cvs.openbsd.org 2001/11/19 11:20:21 
[sshd.c]
     fd leak on HUP; ok stevesk@
 2001-12-06 16:35:40 +00:00
Ben Lindstrom 65366a8c76 - stevesk@cvs.openbsd.org 2001/11/17 19:14:34 
[auth2.c auth.c readconf.c servconf.c ssh-agent.c ssh-keygen.c]
     enum/int type cleanup where it made sense to do so; ok markus@
 2001-12-06 16:32:47 +00:00
Ben Lindstrom eaffb9d6b6 - markus@cvs.openbsd.org 2001/11/16 12:46:13 
[ssh-keyscan.c]
     handle empty lines instead of dumping core; report from sha@sha-1.net
 2001-12-06 16:28:19 +00:00
Ben Lindstrom 0795848def - deraadt@cvs.openbsd.org 2001/11/14 20:45:08 
[sshd.c]
     errno saving wrapping in a signal handler
 2001-12-06 16:19:01 +00:00
Tim Rice fe1d100ffd [contrib/cygwin/README, openbsd-compat/bsd-cygwin_util.c, 
openbsd-compat/bsd-cygwin_util.h, openbsd-compat/daemon.c]
Allow SSHD to install as service under WIndows 9x/Me
[configure.ac] Fix to allow linking against PCRE on Cygwin
Patches by Corinna Vinschen <vinschen@redhat.com>
 2001-11-26 17:19:43 -08:00
Damien Miller f7c6f95682 Release 2001-11-15 23:16:50 +11:00
Damien Miller efdc1f179d - (djm) Fix IPv4 default in ssh-keyscan. Spotted by Dan Astoorian 
<djast@cs.toronto.edu> Fix from markus@
 2001-11-15 08:40:45 +11:00
Damien Miller 353f608740 - (djm) Bump RPM package versions 2001-11-14 00:05:57 +11:00
Damien Miller c3070c8fe0 - markus@cvs.openbsd.org 2001/11/13 02:03:57 
[version.h]
     enter 3.0.1
 2001-11-14 00:05:29 +11:00
Damien Miller 527366ccba - markus@cvs.openbsd.org 2001/11/12 11:17:07 
[servconf.c]
     enable authorized_keys2 again. tested by fries@
 2001-11-14 00:03:14 +11:00
Damien Miller 61b05cfdda - (djm) OpenBSD CVS Sync 
- dugsong@cvs.openbsd.org 2001/11/11 18:47:10
     [auth-krb5.c]
     fix krb5 authorization check. found by <jhawk@MIT.EDU>. from
     art@, deraadt@ ok
 2001-11-14 00:02:10 +11:00
Damien Miller e49d0966b5 - (djm) AIX login{success,failed} changes. Move loginsuccess call to 
do_authenticated. Call loginfailed for protocol 2 failures > MAX like
   we do for protocol 1. Reports from Ralf Wenk <wera0003@fh-karlsruhe.de>,
   K.Wolkersdorfer@fz-juelich.de and others
 2001-11-13 23:46:18 +11:00
Damien Miller 056ca1eb47 - (djm) Fix early (and double) free of remote user when using Kerberos. 
Patch from Simon Wilkinson <simon@sxw.org.uk>
 2001-11-13 11:20:07 +11:00
Damien Miller 726273e129 - (djm) Reorder portable-specific server options so that they come first. 
This should help reduce diff collisions for new server options (as they
   will appear at the end)
 2001-11-12 11:40:11 +11:00
Damien Miller 75413ac499 - markus@cvs.openbsd.org 2001/11/11 13:02:31 
[servconf.c]
     make AuthorizedKeysFile2 fallback to AuthorizedKeysFile if AuthorizedKeysFile is specified.
 2001-11-12 11:14:35 +11:00
Damien Miller 084b8d4ed7 - markus@cvs.openbsd.org 2001/11/10 13:37:20 
[packet.c]
     remove extra debug()
 2001-11-12 11:07:58 +11:00
Damien Miller eacff8533e - markus@cvs.openbsd.org 2001/11/10 13:22:42 
[ssh-rsa.c]
     KNF (unexpand)
 2001-11-12 11:07:35 +11:00
Damien Miller 6a4a4b9290 - markus@cvs.openbsd.org 2001/11/10 13:19:45 
[sshd.c]
     cleanup libwrap support (remove bogus comment, bogus close(), add debug, etc).
 2001-11-12 11:07:11 +11:00
Damien Miller e4a0ff4748 - markus@cvs.openbsd.org 2001/11/09 19:08:35 
[sshd.c]
     remove extra trailing dot from log message; pilot@naughty.monkey.org
 2001-11-12 11:06:54 +11:00
Damien Miller 79faeff2c1 - markus@cvs.openbsd.org 2001/11/09 18:59:23 
[clientloop.c serverloop.c]
     don't memset too much memory, ok millert@
     original patch from jlk@kamens.brookline.ma.us via nalin@redhat.com
 2001-11-12 11:06:32 +11:00
Damien Miller f655207a46 - markus@cvs.openbsd.org 2001/11/08 20:02:24 
[auth.c]
     don't print ROOT in CAPS for the authentication messages, i.e.
     	Accepted publickey for ROOT from 127.0.0.1 port 42734 ssh2
     becomes
     	Accepted publickey for root from 127.0.0.1 port 42734 ssh2
 2001-11-12 11:06:06 +11:00
Damien Miller 705499b248 - markus@cvs.openbsd.org 2001/11/08 17:49:53 
[ssh.1]
     mention setuid root requirements; noted by cnorris@csc.UVic.ca; ok stevesk@
 2001-11-12 11:05:38 +11:00
Damien Miller 637b8ae2d4 - markus@cvs.openbsd.org 2001/11/08 10:51:08 
[readpass.c]
     don't strdup too much data; from gotoh@taiyo.co.jp; ok millert.
 2001-11-12 11:05:20 +11:00
Damien Miller 36f8dd3ed6 - markus@cvs.openbsd.org 2001/11/07 22:53:21 
[channels.h]
     crank c->path to 256 so they can hold a full hostname; dwd@bell-labs.com
 2001-11-12 11:04:54 +11:00
Damien Miller 6fd5b391f0 - markus@cvs.openbsd.org 2001/11/07 22:41:51 
[auth2.c auth-rh-rsa.c]
     unused includes
 2001-11-12 11:04:28 +11:00
Damien Miller 60d8aafcb1 - markus@cvs.openbsd.org 2001/11/07 22:12:01 
[sshd.8]
     s/Keepalive/KeepAlive/; from openbsd@davidkrause.com
 2001-11-12 11:04:05 +11:00
Damien Miller 36e603db86 - markus@cvs.openbsd.org 2001/11/07 22:10:28 
[ssh-dss.c ssh-rsa.c]
     missing free and sync dss/rsa code.
 2001-11-12 11:03:35 +11:00
Damien Miller 9af8c3c226 - markus@cvs.openbsd.org 2001/11/07 21:40:21 
[ssh-rsa.c]
     ssh_rsa_sign/verify: SSH_BUG_SIGBLOB not supported
 2001-11-12 11:03:16 +11:00
Damien Miller 9f64390f41 - markus@cvs.openbsd.org 2001/11/07 16:03:17 
[packet.c packet.h sshconnect2.c]
     pad using the padding field from the ssh2 packet instead of sending
     extra ignore messages. tested against several other ssh servers.
 2001-11-12 11:02:52 +11:00
Damien Miller 1f8dddc927 - markus@cvs.openbsd.org 2001/10/30 20:29:09 
[ssh.1]
     ssh.1
 2001-11-12 11:02:25 +11:00
Damien Miller 91c1847733 - markus@cvs.openbsd.org 2001/10/29 19:27:15 
[sshconnect2.c]
     hostbased: check for client hostkey before building chost
 2001-11-12 11:02:03 +11:00
Damien Miller eb5fec6494 - markus@cvs.openbsd.org 2001/10/25 21:14:32 
[ssh-keygen.1 ssh-keygen.c]
     better docu for fingerprinting, ok deraadt@
 2001-11-12 10:52:44 +11:00
Damien Miller 96507ef535 - markus@cvs.openbsd.org 2001/10/24 19:57:40 
[clientloop.c]
     make ~& (backgrounding) work again for proto v1; add support ~& for v2, too
 2001-11-12 10:52:25 +11:00
Damien Miller 07cd5897f9 - markus@cvs.openbsd.org 2001/10/24 08:51:35 
[clientloop.c ssh.c]
     ignore SIGPIPE early, makes ssh work if agent dies, netbsd-pr via itojun@
 2001-11-12 10:52:03 +11:00
Damien Miller 595bb4f572 - markus@cvs.openbsd.org 2001/10/24 08:41:20 
[ssh.c]
     remove unused
 2001-11-12 10:51:40 +11:00
Damien Miller 00b61645eb - markus@cvs.openbsd.org 2001/10/24 08:41:41 
[sshd.c]
     mention remote port in debug message
 2001-11-12 10:51:23 +11:00
Damien Miller aba690c100 - (djm) Cygwin config patch from Corinna Vinschen <vinschen@redhat.com> 2001-11-12 10:36:21 +11:00
Damien Miller f41d618fec - (djm) Makefile correctness fix from Mark D. Baushke <mdb@juniper.net> 2001-11-12 10:34:22 +11:00
Kevin Steves de77b464c6 - (stevesk) auth-pam.c: use do_pam_authenticate(PAM_DISALLOW_NULL_AUTHTOK) 
if permit_empty_passwd == 0 so null password check cannot be bypassed.
   jayaraj@amritapuri.com OpenBSD bug 2168
 2001-11-09 20:22:16 +00:00
Tim Rice e589a299a1 [ contrib/caldera/openssh.spec contrib/caldera/sshd.init] 
Updates from Raymund Will <ray@caldera.de>
[acconfig.h configure.in] Clean up login checks.
Problem reported by Jim Knoble <jmknoble@pobox.com>
 2001-11-03 11:09:32 -08:00
Damien Miller 14a5c99b5c - (djm) Compat define for OpenSSL < 0.9.6 (No OPENSSL_free) 2001-11-01 09:32:34 +11:00
Damien Miller 12eceb2efc - (djm) Unsmoke drugs: config files should be noreplace. 2001-10-31 10:31:13 +11:00
Damien Miller 1c61324728 - (djm) Redhat RPM spec: remove noreplace from config files, allow IPv6 
by default (can force IPv4 using --define "noipv6 1")
 2001-10-30 22:03:51 +11:00
Tim Rice b89e694b4c [TODO defines.h loginrec.c] Change the references to configure.in 
to configure.ac
 2001-10-29 18:50:39 -08:00
Kevin Steves c3ad02e54b - (stevesk) README: zlib location is http://www.gzip.org/zlib/ 2001-10-28 18:10:22 +00:00
Kevin Steves fe2f4a1e37 - (stevesk) Fix compile problem with PAM password change fix 2001-10-28 17:32:38 +00:00
Damien Miller 092564869a - (djm) Fix for PAM password changes being echoed (from stevesk) 2001-10-28 22:36:55 +11:00
Damien Miller c3aa3dd70c - (djm) Disconnect if no tty and PAM reports password expired 2001-10-28 22:34:52 +11:00
Damien Miller 33cdd9ee7b - (djm) Avoid bug in Solaris PAM libs 2001-10-28 22:33:48 +11:00
Tim Rice ffdf4aa10f [configure.ac] Fixes for ReliantUNIX (don't use libucb) 
Patch by Robert Dahlem <Robert.Dahlem@siemens.com>
 2001-10-27 10:45:36 -07:00
Tim Rice afefd16b6e Fix install: when building outside of source 
tree and using --src=/full_path/to/openssh
Patch by Mark D. Baushke <mdb@juniper.net>
 2001-10-26 17:33:18 -07:00
Ben Lindstrom 9197c59493 - (bal) Set the correct current time in login_utmp_only(). Patch by 
Wayne Davison <wayned@users.sourceforge.net>
 2001-10-26 15:56:55 +00:00
Tim Rice 02cebcd93b Give path given in --with-xxx= for pcre,zlib, and 
tcp-wrappers precedence over system libraries and includes.
Report from Dave Dykstra <dwd@bell-labs.com>
 2001-10-25 10:01:30 -07:00
Ben Lindstrom a0bd44cc49 - (bal) Use VDISABLE if _POSIX_VDISABLE is set in readpassphrase.c. Patch 
by todd@
 2001-10-25 15:02:35 +00:00
Tim Rice 8ad995fd07 Use configure.ac instead of configure.in so older versions of autoconf 
don't even try.
 2001-10-24 21:15:26 -07:00
Ben Lindstrom 3a78c84535 - (bal) Should be 3.0p1 not 3.0p2. Corrected version.h already. 2001-10-24 21:06:07 +00:00
Tim Rice 17b93e5d65 [configure.in] Fix test for broken dirname. Based on patch from 
Dave Dykstra <dwd@bell-labs.com>. Remove un-needed test for zlib.h.
[contrib/caldera/openssh.spec, contrib/redhat/openssh.spec,
contrib/suse/openssh.spec] Update version to match version.h
 2001-10-23 22:36:54 -07:00
Ben Lindstrom 95276711eb - (bal) Added 'PAM_TTY_KLUDGE' to Solaris platform. 2001-10-23 17:14:00 +00:00
Ben Lindstrom ab73b9bd64 - (bal) Updated version to 3.0p1 in preparing for release. 2001-10-23 16:12:54 +00:00
Damien Miller 3a8a5cd5b0 - (djm) Fix fd leak in loginrec.c (ro fd to lastlog was left open). 
Report from Michal Zalewski <lcamtuf@coredump.cx>
 2001-10-22 16:49:22 +10:00
Tim Rice 13aae5ee76 [configure.in] Clean up library testing. 
Add optional PATH to --with-pcre, --with-zlib, --with-tcp-wrappers
based on patch by albert chin (china@thewrittenword.com)

Re-arange AC_CHECK_HEADERS and AC_CHECK_FUNCS for eaiser reading
of patches to configure.in

Replace obsolete AC_STRUCT_ST_BLKSIZE with AC_CHECK_MEMBERS

Add test for broken dirname() on Solaris 2.5.1 by
Dan Astoorian <djast@cs.toronto.edu>

[acconfig.h aclocal.m4 defines.h configure.in]
Better socklen_t patch by albert chin (china@thewrittenword.com)

[scp.c]
Replace obsolete HAVE_ST_BLKSIZE with HAVE_STRUCT_STAT_ST_BLKSIZE

[Makefile.in] When running make in top level, always do make in openbsd-compat
patch by Dave Dykstra <dwd@bell-labs.com>
 2001-10-21 17:53:58 -07:00
Ben Lindstrom f2366b5a7d - (bal) Fixed up init.d symlink issue and piddir stuff. Patches by 
Zoran Milojevic <Zoran.Milojevic@SS8.com> and j.petersen@msh.de
 2001-10-19 20:36:23 +00:00
Ben Lindstrom 7a97339359 - (bal) Minor bug fix in contrib/solaris/opensshd.in .. $etcdir was not 
set right.
 2001-10-12 21:52:39 +00:00
Ben Lindstrom 8b5ba1c39a - (bal) First wave of contrib/solaris/ package upgrades. Still more 
work needs to be done, but it is a 190% better then the stuff we
    had before!
 2001-10-12 20:30:52 +00:00
Damien Miller 4a820ea750 - (djm) Cleanup sshpty.c a little 2001-10-12 19:15:48 +10:00
Damien Miller 7c734056f4 - (djm) Clean some autoconf-2.52 junk when doing "make distclean" 2001-10-12 19:15:27 +10:00
Damien Miller 5f01280c79 - (djm) "make veryclean" fix from Tom Holroyd <tomh@po.crl.go.jp> 2001-10-12 12:04:04 +10:00
Damien Miller 164a7f42f9 - markus@cvs.openbsd.org 2001/10/11 15:24:00 
[clientloop.c]
     clear select masks if we return before calling select().
 2001-10-12 11:36:09 +10:00
Damien Miller 0585d51a52 - markus@cvs.openbsd.org 2001/10/11 13:45:21 
[session.c]
     delay detach of session if a channel gets closed but the child is
     still alive.  however, release pty, since the fd's to the child are
     already closed.
 2001-10-12 11:35:50 +10:00
Damien Miller 3ec2759ad4 - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2001/10/10 22:18:47
     [channels.c channels.h clientloop.c nchan.c serverloop.c]
     [session.c session.h]
     try to keep channels open until an exit-status message is sent.
     don't kill the login shells if the shells stdin/out/err is closed.
     this should now work:
     ssh -2n localhost 'exec > /dev/null 2>&1; sleep 10; exit 5'; echo ?
 2001-10-12 11:35:04 +10:00
Ben Lindstrom 4e088e4de0 - (bal) seed_init() and seed_rng() required in ssh-keyscan.c 2001-10-10 20:45:43 +00:00
Ben Lindstrom 926ce58d3b - (bal) removed two unsed headers in openbsd-compat/bsd-misc.c 2001-10-10 20:38:55 +00:00
Damien Miller 52b77beb65 - markus@cvs.openbsd.org 2001/10/09 21:59:41 
[channels.c channels.h serverloop.c session.c session.h]
     simplify session close: no more delayed session_close, no more blocking wait() calls.
 2001-10-10 15:14:37 +10:00
Damien Miller c71f4e40b6 - markus@cvs.openbsd.org 2001/10/09 19:51:18 
[serverloop.c]
     close all channels if the connection to the remote host has been closed,
     should fix sshd's hanging with WCHAN==wait
 2001-10-10 15:08:36 +10:00
Damien Miller ae45246696 - markus@cvs.openbsd.org 2001/10/09 19:32:49 
[session.c]
     stat subsystem command before calling do_exec, and return error to client.
 2001-10-10 15:08:06 +10:00
Damien Miller 139d4cd908 - markus@cvs.openbsd.org 2001/10/09 10:12:08 
[session.c]
     chdir $HOME after krb_afslog(); from bbense@networking.stanford.edu
 2001-10-10 15:07:44 +10:00
Damien Miller 7ea6f204b6 - markus@cvs.openbsd.org 2001/10/08 16:15:47 
[sshconnect.c]
     use correct family for -b option
 2001-10-10 15:04:41 +10:00
Damien Miller d3c04b90e4 - markus@cvs.openbsd.org 2001/10/08 11:48:57 
[channels.c]
     better debug
 2001-10-10 15:04:20 +10:00
Damien Miller 4623a75462 - markus@cvs.openbsd.org 2001/10/07 17:49:40 
[channels.c channels.h]
     avoid possible FD_ISSET overflow for channels established
     during channnel_after_select() (used for dynamic channels).
 2001-10-10 15:03:58 +10:00
Damien Miller 058655cced - markus@cvs.openbsd.org 2001/10/07 10:29:52 
[authfile.c]
     grammer; Matthew_Clarke@mindlink.bc.ca
 2001-10-10 15:03:36 +10:00
Damien Miller 59d9fb9e55 - markus@cvs.openbsd.org 2001/10/06 11:18:19 
[sshconnect1.c sshconnect2.c sshconnect.c]
     unify hostkey check error messages, simplify prompt.
 2001-10-10 15:03:11 +10:00
Damien Miller 9c75142917 - markus@cvs.openbsd.org 2001/10/06 00:36:42 
[session.c]
     fix typo in error message, sync with do_exec_nopty
 2001-10-10 15:02:46 +10:00
Damien Miller e398004f6c - markus@cvs.openbsd.org 2001/10/06 00:14:50 
[sshconnect.c]
     remove unused argument
 2001-10-10 15:02:03 +10:00
Damien Miller 8c3902afde - markus@cvs.openbsd.org 2001/10/04 15:12:37 
[serverloop.c]
     client_alive_check cleanup
 2001-10-10 15:01:40 +10:00
Damien Miller af5f2e641c - markus@cvs.openbsd.org 2001/10/04 15:05:40 
[channels.c serverloop.c]
     comment out bogus conditions for selecting on connection_in
 2001-10-10 15:01:16 +10:00
Damien Miller af3030f709 - markus@cvs.openbsd.org 2001/10/04 14:34:16 
[key.c]
     call OPENSSL_free() for memory allocated by openssl; from chombier@mac.com
 2001-10-10 15:00:49 +10:00
Ben Lindstrom f16c81f900 - (bal) ssh-copy-id corrected permissions for .ssh/ and authorized_keys. 
Prompted by Matthew Vernon <matthew@sel.cam.ac.uk>
 2001-10-08 01:54:24 +00:00
Ben Lindstrom 4c90149c50 - (bal) AES works under Cray, no more hack. 2001-10-06 00:08:09 +00:00
Ben Lindstrom 8bceffb0c3 - (bal) nchan2.ms resync. BSD License applied. 2001-10-04 21:16:57 +00:00
Ben Lindstrom c3e49e7b31 - markus@cvs.openbsd.org 2001/10/03 10:01:20 
[auth.c]
     use realpath() for homedir, too. from jinmei@isl.rdc.toshiba.co.jp
 2001-10-03 17:55:26 +00:00
Ben Lindstrom 1bae404457 - stevesk@cvs.openbsd.org 2001/10/02 22:56:09 
[sshd.c]
     #include "channels.h" for channel_set_af()
 2001-10-03 17:46:39 +00:00
Ben Lindstrom 569f88de04 - djm@cvs.openbsd.org 2001/10/02 08:38:50 
[ssh-add.c]
     return non-zero exit code on error; ok markus@
 2001-10-03 17:43:01 +00:00
Ben Lindstrom 3cecc9a41f - markus@cvs.openbsd.org 2001/10/01 21:51:16 
[readconf.c readconf.h ssh.1 sshconnect.c]
     add NoHostAuthenticationForLocalhost; note that the hostkey is
     now check for localhost, too.
 2001-10-03 17:39:38 +00:00
Ben Lindstrom 908afed17f - markus@cvs.openbsd.org 2001/10/01 21:38:53 
[channels.c channels.h ssh.c sshd.c]
     remove ugliness; vp@drexel.edu via angelos
 2001-10-03 17:34:59 +00:00
Ben Lindstrom 3e45e4cd00 - markus@cvs.openbsd.org 2001/10/01 08:06:28 
[scp.c]
     skip filenames containing \n; report jdamery@chiark.greenend.org.uk
     and matthew@debian.org
 2001-10-03 17:30:58 +00:00
Ben Lindstrom 83f07d1954 - markus@cvs.openbsd.org 2001/09/28 15:46:29 
[ssh.c]
     bug: read user config first; report kaukasoi@elektroni.ee.tut.fi
 2001-10-03 17:22:29 +00:00
Ben Lindstrom 1af4d3bb70 - djm@cvs.openbsd.org 2001/09/28 12:07:09 
[ssh-keygen.c]
     bzero private key after loading to smartcard; ok markus@
 2001-10-03 17:18:37 +00:00
Ben Lindstrom 6149a6c57f - camield@cvs.openbsd.org 2001/09/27 17:53:24 
[sshd.8]
     don't talk about compile-time options
     ok markus@
 2001-10-03 17:15:32 +00:00
Ben Lindstrom bdfb4df08c - markus@cvs.openbsd.org 2001/09/27 15:31:17 
[auth2.c auth2-chall.c sshconnect1.c]
     typos; from solar
 2001-10-03 17:12:43 +00:00
Ben Lindstrom ae3de4b39e - markus@cvs.openbsd.org 2001/09/27 11:59:37 
[packet.c]
     missing called=1; chombier@mac.com
 2001-10-03 17:10:17 +00:00
Ben Lindstrom 96f8d143a7 - markus@cvs.openbsd.org 2001/09/27 11:58:16 
[compress.c]
     mem leak; chombier@mac.com
 2001-10-03 17:07:47 +00:00
Ben Lindstrom 9b023ed2a2 - (bal) CVS ID fix up in version.h 2001-10-03 17:03:54 +00:00
Kevin Steves 5217265349 - (stevesk) loginrec.c: fix type conversion problems exposed when using 
64-bit off_t.
 2001-10-02 00:29:00 +00:00
Ben Lindstrom 819f1bef5c 20010929 
- (bal) move reading 'config.h' up higher.  Patch by albert chin
   <china@thewrittenword.com)
 2001-09-29 14:27:00 +00:00
Damien Miller bccb5a9338 - (djm) Update spec files for new x11-askpass 2001-09-28 20:03:25 +10:00
Damien Miller 3ff36d6ce2 - (djm) OpenBSD CVS sync: 
- djm@cvs.openbsd.org 2001/09/28 09:49:31
     [scard.c]
     Fix segv when smartcard communication error occurs during key load.
     ok markus@
 2001-09-28 19:51:54 +10:00
Kevin Steves a0957d6898 - (stevesk) session.c: declare do_pre_login() before use 
wayned@users.sourceforge.net
 2001-09-27 19:50:26 +00:00
Damien Miller 5f4b10088f - (djm) Avoid bad and unportable sprintf usage in compat code 2001-09-25 22:21:52 +10:00
Damien Miller e8bb450af9 - (djm) Add AC_SYS_LARGEFILE configure test 2001-09-25 16:39:35 +10:00
Damien Miller 16fcade16b - (djm) Sync $sysconfdir/moduli 2001-09-25 13:06:18 +10:00
Damien Miller 964fed54cd - (djm) Pull in auth-krb5.c from OpenBSD CVS. NB. it is not currently used. 2001-09-25 12:58:23 +10:00
Ben Lindstrom 8b16c0e67a - (bal) Updated all *.specs for 2.9.9p1 and updated version.h 2001-09-24 23:15:15 +00:00
Ben Lindstrom 40a0d20913 - (bal) Removed 'extern int optopt;' since it is dead wood. 2001-09-24 22:04:02 +00:00
Ben Lindstrom 5ccf63a974 - (bal) updated ssh.c to mirror minor getopts 'extern int' formating done 
by stevesk@
 2001-09-24 20:00:10 +00:00
Ben Lindstrom bffa1cb7f6 - markus@cvs.openbsd.org 2001/09/23 09:58:13 
[LICENCE]
     new rijndael implementation
 2001-09-23 13:58:38 +00:00
Ben Lindstrom b85544d717 <grumble> Editing ChangeLog in the wrong directory. 
- markus@cvs.openbsd.org 2001/09/23 11:09:13
     [authfile.c]
     relax permission check for private key files.
 2001-09-23 13:54:57 +00:00
Ben Lindstrom 15da033b34 - mouring@cvs.openbsd.org 2001/09/20 20:57:51 
[sshd_config]
     CheckMail removed.  OKed stevesk@
 2001-09-20 23:15:44 +00:00
Ben Lindstrom f558cf6580 - markus@cvs.openbsd.org 2001/09/20 13:50:40 
[compat.c compat.h ssh.c]
     bug compat: request a dummy channel for -N (no shell) sessions +
     cleanup; vinschen@redhat.com
 2001-09-20 23:13:49 +00:00
Ben Lindstrom 1bc3bdb1c2 - markus@cvs.openbsd.org 2001/09/20 13:46:48 
[auth2.c]
     key_read returns now -1 or 1
 2001-09-20 23:11:26 +00:00
Ben Lindstrom 406b4f0f33 - stevesk@cvs.openbsd.org 2001/09/20 00:15:54 
[sshd.8]
     fix ClientAliveCountMax
 2001-09-20 23:09:16 +00:00
Kevin Steves 50abba560c - (stevesk) sun_len, SUN_LEN() configure stuff no longer required 2001-09-20 19:43:41 +00:00
Tim Rice 1ce8f0c3e5 - (tim) [scard/Makefile.in] Don't strip the Java binary 2001-09-20 11:39:35 -07:00
Ben Lindstrom 84a6bfba15 - (bal) openbsd-compat/vis.[ch] is dead wood. Removed. 2001-09-20 02:07:50 +00:00
Ben Lindstrom 03598a1c23 - stevesk@cvs.openbsd.org 2001/09/19 21:41:57 
[sshd.8]
     don't advertise -V in usage; ok markus@
 2001-09-20 01:07:57 +00:00
Ben Lindstrom dfd1850398 - stevesk@cvs.openbsd.org 2001/09/19 21:04:53 
[sshd.8]
     missing -t in usage
 2001-09-20 01:06:08 +00:00
Ben Lindstrom b1d822c311 - stevesk@cvs.openbsd.org 2001/09/19 19:35:30 
[authfd.c]
     use sizeof addr vs. SUN_LEN(addr) for sockaddr_un.  Stevens
     blesses this and we do it this way elsewhere.  this helps in
     portable because not all systems have SUN_LEN() and
     sockaddr_un.sun_len.  ok markus@
 2001-09-20 01:03:31 +00:00
Ben Lindstrom 2b7a0e953e - stevesk@cvs.openbsd.org 2001/09/19 19:24:19 
[readconf.c readconf.h scp.c sftp.c ssh.1]
     add ClearAllForwardings ssh option and set it in scp and sftp; ok
     markus@
 2001-09-20 00:57:55 +00:00
Ben Lindstrom 309f3d1d9c - markus@cvs.openbsd.org 2001/09/19 13:23:29 
[key.c]
     key_read() now returns -1 on type mismatch, too
 2001-09-20 00:55:53 +00:00
Ben Lindstrom 20daef753d - markus@cvs.openbsd.org 2001/09/19 10:08:51 
[sshd.8]
     command=xxx applies to subsystem now, too
 2001-09-20 00:54:01 +00:00
Kevin Steves 871f662cb6 - (stevesk) nchan.c: we use X/Open Sockets on HP-UX now so shutdown(2) 
returns ENOTCONN vs. EINVAL for socket not connected; remove EINVAL
   check. ok Lutz Jaenicke
 2001-09-18 16:08:24 +00:00
Ben Lindstrom cc7aafc7a4 - stevesk@cvs.openbsd.org 2001/09/17 23:56:07 
[scp.1]
     missing -B in usage string
 2001-09-18 05:56:57 +00:00
Ben Lindstrom 3b4d42c240 - markus@cvs.openbsd.org 2001/09/17 21:09:47 
[compat.c]
     more versions suffering the SSH_BUG_DEBUG bug;
     3.0.x reported by dbutts@maddog.storability.com
 2001-09-18 05:55:10 +00:00
Ben Lindstrom 6d218f404f - markus@cvs.openbsd.org 2001/09/17 21:04:02 
[channels.c serverloop.c]
     don't send fake dummy packets on CR (\r)
     bugreport from yyua@cs.sfu.ca via solar@@openwall.com
 2001-09-18 05:53:12 +00:00
Ben Lindstrom 944c4f0bda - markus@cvs.openbsd.org 2001/09/17 20:52:47 
[channels.c channels.h clientloop.c]
     try to fix agent-forwarding-backconnection-bug, as seen on HPUX,
     for example; with Lutz.Jaenicke@aet.TU-Cottbus.DE,
 2001-09-18 05:51:13 +00:00
Ben Lindstrom 99a30f11c2 - markus@cvs.openbsd.org 2001/09/17 20:50:22 
[key.c ssh-keygen.c]
     better error handling if you try to export a bad key to ssh.com
 2001-09-18 05:49:14 +00:00
Ben Lindstrom 6a33763332 - stevesk@cvs.openbsd.org 2001/09/17 20:38:09 
[sftp.1 sftp.c]
     cleanup and document -1, -s and -S; ok markus@
 2001-09-18 05:47:32 +00:00
Ben Lindstrom a2fec90e05 - markus@cvs.openbsd.org 2001/09/17 20:22:14 
[scard.c]
     never keep a connection to the smartcard open.
     allows ssh-keygen -D U while the agent is running; report from jakob@
 2001-09-18 05:45:44 +00:00
Ben Lindstrom 9e0ddd4379 - stevesk@cvs.openbsd.org 2001/09/17 19:27:15 
[kexdh.c kexgex.c key.c key.h ssh-dss.c ssh-keygen.c ssh-rsa.c]
     u_char*/char* cleanup; ok markus
 2001-09-18 05:41:19 +00:00
Ben Lindstrom 1e24324164 - stevesk@cvs.openbsd.org 2001/09/17 17:57:57 
[scp.1 scp.c sftp.1 sftp.c]
      add -Fssh_config option; ok markus@
 2001-09-18 05:38:44 +00:00
Ben Lindstrom 033e4557c0 - (bal) LICENCE update. Has not been done in a while. 2001-09-18 05:36:27 +00:00
Damien Miller f2bd06c21e - (djm) Make smartcard support conditional in Redhat RPM spec 2001-09-18 15:33:07 +10:00
Damien Miller 7948d93173 - (djm) Specify --datadir in RPM spec files so smartcard applet gets 
put somewhere sane. Add Ssh.bin to manifest.
 2001-09-18 15:12:10 +10:00
Damien Miller d97c2ceed1 - (djm) More makefile infrastructre for smartcard support, also based 
on Ben's work
 2001-09-18 15:06:21 +10:00
Damien Miller ff5f47e230 - (djm) Avoid warning on BSDgetopt 2001-09-18 15:05:20 +10:00
Damien Miller ffbe69890d - (djm) Revert setgroups call, it causes problems on OS-X 2001-09-18 14:03:03 +10:00
Damien Miller 85de580adc - (djm) Configure support for smartcards 2001-09-18 14:01:11 +10:00
Tim Rice a4f7ae1a35 - (tim) [includes.h openbsd-compat/getopt.c openbsd-compat/getopt.h] 
rename getopt() to BSDgetopt() to keep form conflicting with
	 system getopt().
	 [Makefile.in configure.in] disable filepriv until I can add
	 missing procpriv calls.
 2001-09-17 14:34:33 -07:00
Damien Miller 01ebad06db - (djm) x11-ssh-askpass-1.2.4 in RPM spec, revert workarounds 2001-09-17 15:07:23 +10:00
Ben Lindstrom 37e41c9019 - markus@cvs.openbsd.org 2001/09/16 14:46:54 
[session.c]
      calls krb_afslog() after setting $HOME; mattiasa@e.kth.se; fixes
      pr 1943b
 2001-09-16 22:17:15 +00:00
Damien Miller 0b9278e923 - (djm) Workaround XFree breakage in RPM spec file 2001-09-16 17:13:45 +10:00
Damien Miller 426d6bdc00 I really should commit these in sync with the actual changes 2001-09-16 17:13:11 +10:00
Damien Miller ebf989e601 - (djm) Clear supplemental groups at sshd start to prevent them from 
being propogated to random PAM modules. Based on patch from Redhat via
   Pekka Savola <pekkas@netcore.fi>
 2001-09-15 21:12:49 +10:00
Damien Miller ba6f9f9e49 - (djm) Redhat initscript config sanity checking from Pekka Savola 
<pekkas@netcore.fi>
 2001-09-15 21:03:10 +10:00
Damien Miller 0c217b74e2 C - (djm) Redhat spec file cleanups from Pekka Savola <pekkas@netcore.fi> and 
Redhat
VS: ----------------------------------------------------------------------
 2001-09-15 21:01:41 +10:00
Damien Miller 69e00a18a5 - (djm) Sync scard/ stuff 2001-09-15 20:58:46 +10:00
Damien Miller 599d8eba16 - (djm) Make do_pre_login static to avoid prototype #ifdef hell 2001-09-15 12:25:53 +10:00
Ben Lindstrom 23124eab3b - markus@cvs.openbsd.org 2001/09/14 
[sshd.c]
     typo
 2001-09-14 23:14:25 +00:00
Ben Lindstrom b09f6b5b02 - markus@cvs.openbsd.org 2001/09/14 
[session.c]
     command=xxx overwrites subsystems, too
 2001-09-14 23:12:07 +00:00
Ben Lindstrom d5e1c04c00 - markus@cvs.openbsd.org 2001/09/13 
[rijndael.c rijndael.h]
     missing $OpenBSD
 2001-09-14 23:09:29 +00:00
Ben Lindstrom 319fc7353c I was promised that this does not need to have endness fix up by Markus. 
So I will blindly trust him. =)

   - markus@cvs.openbsd.org 2001/08/23 11:31:59
     [cipher.c cipher.h]
     switch to the optimised AES reference code from
     http://www.esat.kuleuven.ac.be/~rijmen/rijndael/rijndael-fst-3.0.zip
 2001-09-14 02:47:33 +00:00
Ben Lindstrom 4213c559ef - stevesk@cvs.openbsd.org 2001/09/12 18:18:25 
[scp.c]
     don't forward agent for non third-party copies; ok markus@
 2001-09-12 18:45:09 +00:00
Ben Lindstrom 594e203894 - deraadt@cvs.openbsd.org 2001/09/05 06:23:07 
[scp.1 sftp.1 ssh.1 ssh-agent.1 sshd.8 ssh-keygen.1 ssh-keyscan.1]
     avoid first person in manual pages
 2001-09-12 18:35:30 +00:00
Ben Lindstrom edc0cf26d1 - stevesk@cvs.openbsd.org 2001/09/03 20:58:33 
[readconf.c readconf.h ssh.c]
     fatal() for nonexistent -Fssh_config. ok markus@
 2001-09-12 18:32:20 +00:00
Ben Lindstrom 7d19996201 - markus@cvs.openbsd.org 2001/08/31 11:46:39 
[sshconnect2.c]
     disable kbd-interactive if we don't get
     SSH2_MSG_USERAUTH_INFO_REQUEST messages
 2001-09-12 18:29:00 +00:00
Ben Lindstrom 520b55c8c4 - markus@cvs.openbsd.org 2001/08/30 22:22:32 
[ssh-keyscan.c]
     do not pass pointers to longjmp; fix from wayne@blorf.net
 2001-09-12 18:05:05 +00:00
Ben Lindstrom d71ba5771b - stevesk@cvs.openbsd.org 2001/08/30 20:36:34 
[auth-options.c sshd.8]
     validate ports for permitopen key file option. add host/port
     alternative syntax for IPv6. ok markus@
 2001-09-12 18:03:31 +00:00
Ben Lindstrom 62c25a43db - stevesk@cvs.openbsd.org 2001/08/30 16:04:35 
[readconf.c ssh.1]
     validate ports for LocalForward/RemoteForward.
     add host/port alternative syntax for IPv6 (like -L/-R).
     ok markus@
 2001-09-12 18:01:59 +00:00
Ben Lindstrom 6e69d532dc - naddy@cvs.openbsd.org 2001/08/30 15:42:36 
[ssh.1]
     add -D to synopsis line; ok markus@
 2001-09-12 17:59:59 +00:00
Ben Lindstrom 60d82be9f3 - stevesk@cvs.openbsd.org 2001/08/29 23:39:40 
[ssh.1 sshd.8]
     additional documentation for GatewayPorts; ok markus@
 2001-09-12 17:58:15 +00:00
Ben Lindstrom 1a1747172e - stevesk@cvs.openbsd.org 2001/08/29 23:27:23 
[ssh.c]
     validate ports for -L/-R; ok markus@
 2001-09-12 17:56:15 +00:00
Ben Lindstrom 19ceb17040 - stevesk@cvs.openbsd.org 2001/08/29 23:13:10 
[ssh.1 ssh.c]
     document -D and DynamicForward; ok markus
 2001-09-12 17:54:24 +00:00
Ben Lindstrom 6f672c0954 - stevesk@cvs.openbsd.org 2001/08/29 23:02:21 
[sshd.8]
     add text about -u0 preventing DNS requests; ok markus@
 2001-09-12 17:51:55 +00:00
Ben Lindstrom 5fccbc2339 - markus@cvs.openbsd.org 2001/08/29 20:44:03 
[scp.c]
     clear the malloc'd buffer, otherwise source() will leak malloc'd
     memory; ok theo@
 2001-09-12 17:49:48 +00:00
Ben Lindstrom 14f31ab947 - markus@cvs.openbsd.org 2001/08/28 15:39:48 
[ssh.1 ssh.c]
     allow: ssh -F configfile host
 2001-09-12 17:48:04 +00:00
Ben Lindstrom 525a09389e - markus@cvs.openbsd.org 2001/08/28 09:51:26 
[readconf.c]
     don't set DynamicForward unless Host matches
 2001-09-12 17:35:27 +00:00
Ben Lindstrom 78bbd9ebe3 - danh@cvs.openbsd.org 2001/08/27 22:02:13 
[ssh-keyscan.c]
     fix memory fault if non-existent filename is given to the -f option
     ok markus@
 2001-09-12 17:10:40 +00:00
Ben Lindstrom 8d066fb262 - stevesk@cvs.openbsd.org 2001/08/23 18:08:59 
[ssh-add.1 ssh-keyscan.1]
     minor cleanup
 2001-09-12 17:06:13 +00:00
Ben Lindstrom ba1fa1d67b - stevesk@cvs.openbsd.org 2001/08/23 18:02:48 
[ssh-agent.1]
     fix usage; ok markus@
 2001-09-12 17:02:49 +00:00
Ben Lindstrom ce89dacda8 - camield@cvs.openbsd.org 2001/08/23 17:59:31 
[sshd.c]
     end request with 0, not NULL
     ok markus@
 2001-09-12 16:58:04 +00:00
Ben Lindstrom ffa1dd6817 - stevesk@cvs.openbsd.org 2001/08/22 17:45:16 
[ssh.1]
     document cipher des for protocol 1; ok deraadt@
 2001-09-12 16:52:28 +00:00
Ben Lindstrom 044274bcb0 - stevesk@cvs.openbsd.org 2001/08/22 16:30:02 
[sshd.8]
     no rexd; ok markus@
 2001-09-12 16:46:08 +00:00
Ben Lindstrom a10aed8b5e - stevesk@cvs.openbsd.org 2001/08/22 16:21:21 
[ssh.1]
     hostname not optional; ok markus@
 2001-09-12 16:43:26 +00:00
Ben Lindstrom e59433da7a - stevesk@cvs.openbsd.org 2001/08/21 21:47:42 
[ssh.1 sshd.8]
     minor typos and cleanup
 2001-09-12 16:41:37 +00:00
Ben Lindstrom 7bb37b29c6 - stevesk@cvs.openbsd.org 2001/08/17 18:59:47 
[servconf.h]
     typo in comment
 2001-09-12 16:40:05 +00:00
Ben Lindstrom 1c0fd09d15 - stevesk@cvs.openbsd.org 2001/08/16 20:14:57 
[ssh.1 sshd.8]
     document case sensitivity for ssh, sshd and key file
     options and arguments; ok markus@
 2001-09-12 16:36:17 +00:00
Ben Lindstrom 91e9868e4f - jakob@cvs.openbsd.org 2001/08/16 19:18:34 
[servconf.c servconf.h session.c sshd.8]
     deprecate CheckMail. ok markus@
 2001-09-12 16:32:14 +00:00
Ben Lindstrom 19d7b8d3fa - (bal) QNX resync. OK tim@ 2001-08-16 00:09:49 +00:00
Ben Lindstrom 14c62eb2be - stevesk@cvs.openbsd.org 2001/08/14 17:54:29 
[scp.1 sftp.1 ssh.1]
     consistent documentation and example of ``-o ssh_option'' for sftp and
     scp; document keyword=argument for ssh.
 2001-08-15 23:25:46 +00:00
Ben Lindstrom 59e1249d67 - markus@cvs.openbsd.org 2001/08/14 09:23:02 
[sftp.1 sftp-int.c]
     "bye"; hk63a@netscape.net
 2001-08-15 23:22:56 +00:00
Ben Lindstrom 1fa90101f0 - stevesk@cvs.openbsd.org 2001/08/13 23:38:54 
[scp.c]
     don't need main prototype (also sync with rcp); ok markus@
 2001-08-15 23:21:01 +00:00
Ben Lindstrom 930b14a28e - jakob@cvs.openbsd.org 2001/08/11 22:51:27 
[ssh.c tildexpand.c]
     fix more paths beginning with "//"; <bradshaw@staff.crosswalk.com>.
     ok markus@
 2001-08-15 23:19:21 +00:00
Ben Lindstrom 049e0dd6cf - markus@cvs.openbsd.org 2001/08/08 21:34:19 
[uidswap.c]
     undo last change; does not work for sshd
 2001-08-15 23:17:22 +00:00
Ben Lindstrom a66039373b - markus@cvs.openbsd.org 2001/08/08 18:20:15 
[uidswap.c]
     permanently_set_uid is a noop if user is not privilegued;
     fixes bug on solaris; from sbi@uchicago.edu
 2001-08-15 23:14:49 +00:00
Ben Lindstrom 79e93bca6f - deraadt@cvs.openbsd.org 2001/08/08 07:16:58 
[scp.1]
     when describing the -o option, give -o Protocol=1 as the specific example
     since we are SICK AND TIRED of clueless people who cannot have difficulty
     thinking on their own.
 2001-08-15 23:06:59 +00:00
Ben Lindstrom c9a2636420 - markus@cvs.openbsd.org 2001/08/07 10:37:46 
[authfd.c authfd.h]
     extended failure messages from galb@vandyke.com
 2001-08-15 23:04:50 +00:00
Ben Lindstrom d0ff40847d - (bal) Fixed stray code in readconf.c that went in by mistake. 2001-08-15 22:58:59 +00:00
Kevin Steves 4da21abd24 - (stevesk) bsd-cray.c: more cleanup; ok wendyp@cray.com 2001-08-14 21:02:15 +00:00
Kevin Steves 72992afb26 - (stevesk) bsd-cray.c: utmp strings are not C strings 2001-08-14 20:54:52 +00:00
Kevin Steves 25ee4e48f7 - (stevesk) sshpty.c: return 0 on error in cray pty code; 
ok wendyp@cray.com
 2001-08-14 20:41:34 +00:00
Kevin Steves ad4aa5655d forgot this 2001-08-14 20:35:35 +00:00
Damien Miller 56cb92968b - (djm) Fix detection of long long int support. Based on patch from 
Michael Stone <mstone@cs.loyola.edu>. ok stevesk, tim
 2001-08-12 13:02:50 +10:00
Ben Lindstrom 113339e024 - (bal) Minor correction to inet_ntop.h. _BSD_RRESVPORT_H should be 
_BSD_INET_NTOP_H.  Pointed out by Mark Miller <markm@swoon.net>
 2001-08-09 00:56:52 +00:00
Tim Rice e991e3cf22 - (tim) [configure.in sshconnect.c openbsd-compat/Makefile.in 
openbsd-compat/openbsd-compat.h ] Add inet_ntop.c inet_ntop.h back
	 in. Needed for sshconnect.c
	 [sshconnect.c] fix INET6_ADDRSTRLEN for non IPv6 machines
	 [configure.in] make tests with missing libraries fail
	 patch by Wendy Palm <wendyp@cray.com>
	 Added openbsd-compat/bsd-cray.h. Selective patches from
	 William L. Jones <jones@mail.utexas.edu>
 2001-08-07 15:29:07 -07:00
Ben Lindstrom 6db66ff387 - (bal) Second around of UNICOS patches. A few other things left. 
Patches by William L. Jones <jones@mail.utexas.edu>
 2001-08-06 23:29:16 +00:00
Ben Lindstrom ff2866cf51 - (bal) ssh-keyscan double -lssh hack due to seed_rng(). 2001-08-06 22:56:46 +00:00
Ben Lindstrom 958d9f695b - stevesk@cvs.openbsd.org 2001/08/06 19:47:05 
[scp.c]
     use alarm vs. setitimer for portable; ok markus@
 2001-08-06 22:48:19 +00:00
Ben Lindstrom de8fc6fadc - markus@cvs.openbsd.org 2001/08/05 23:29:58 
[ssh-keyscan.c]
     make -t dsa work with commercial servers, too
 2001-08-06 22:43:50 +00:00
Ben Lindstrom 325e70c90f - markus@cvs.openbsd.org 2001/08/05 23:18:20 
[ssh-keyscan.1 ssh-keyscan.c]
     ssh 2 support; from wayned@users.sourceforge.net
 2001-08-06 22:41:30 +00:00
Ben Lindstrom ddfb1e3a89 - jakob@cvs.openbsd.org 2001/08/03 10:31:30 
[ssh-add.c ssh-agent.c ssh-keyscan.c]
     improve usage(). ok markus@
 2001-08-06 22:06:35 +00:00
Ben Lindstrom e690121f0d - jakob@cvs.openbsd.org 2001/08/03 10:31:19 
[ssh-add.1]
     document smartcard options. ok markus@
 2001-08-06 22:03:08 +00:00
Ben Lindstrom 0b5afb98eb - mpech@cvs.openbsd.org 2001/08/02 18:37:35 
[ssh-keyscan.1]
     o) .Sh AUTHOR -> .Sh AUTHORS;
     o) .Sh EXAMPLE -> .Sh EXAMPLES;
     o) Delete .Sh OPTIONS. Text moved to .Sh DESCRIPTION;

     millert@ ok
 2001-08-06 22:01:29 +00:00
Ben Lindstrom bcc1808bf2 - jakob@cvs.openbsd.org 2001/08/02 16:14:05 
[scard.c ssh-agent.c ssh.c ssh-keygen.c]
     clean up some /* SMARTCARD */. ok markus@
 2001-08-06 21:59:25 +00:00
Ben Lindstrom ffce147638 - jakob@cvs.openbsd.org 2001/08/02 15:43:57 
[ssh-agent.c ssh.c ssh-keygen.c]
     add /* SMARTCARD */ to #else/#endif. ok markus@
 2001-08-06 21:57:31 +00:00
Ben Lindstrom 61eb9568b3 - jakob@cvs.openbsd.org 2001/08/02 15:32:10 
[ssh.c]
     add smartcard to usage(). ok markus@
 2001-08-06 21:53:42 +00:00
Ben Lindstrom a1ec4a9cb8 - jakob@cvs.openbsd.org 2001/08/02 15:07:23 
[ssh-keygen.1]
     document smartcard upload/download. ok markus@
 2001-08-06 21:51:34 +00:00
Ben Lindstrom 97be31e6ff - jakob@cvs.openbsd.org 2001/08/02 15:06:52 
[ssh-keygen.c]
     more verbose usage(). ok markus@
 2001-08-06 21:49:06 +00:00
Ben Lindstrom f19578c447 - jakob@cvs.openbsd.org 2001/08/02 08:58:35 
[ssh-keygen.c]
     change -u (upload smartcard key) to -U. ok markus@
 2001-08-06 21:46:54 +00:00
Ben Lindstrom 8282d6a82f - markus@cvs.openbsd.org 2001/08/02 00:10:17 
[ssh-keygen.c]
     add -D readerid option (download, i.e. print public RSA key to stdout).
     check for card present when uploading keys.
     use strings instead of ints for smartcard reader ids, too.
 2001-08-06 21:44:05 +00:00
Ben Lindstrom a6c8a8d4d5 - markus@cvs.openbsd.org 2001/08/01 23:38:45 
[scard.c ssh.c]
     support finish rsa keys.
     free public keys after login -> call finish -> close smartcard.
 2001-08-06 21:42:00 +00:00
Ben Lindstrom 6818bfbf30 - markus@cvs.openbsd.org 2001/08/01 23:33:09 
[ssh-keygen.c]
     allow uploading RSA keys for non-default AUT0 (sha1 over passphrase
     like sectok).
 2001-08-06 21:40:04 +00:00
Ben Lindstrom 020a8699a9 - markus@cvs.openbsd.org 2001/08/01 22:16:45 
[ssh.1 sshd.8]
     refer to current ietf drafts for protocol v2
 2001-08-06 21:38:10 +00:00
Ben Lindstrom f7db3bb64c - markus@cvs.openbsd.org 2001/08/01 22:03:33 
[authfd.c authfd.h readconf.c readconf.h scard.c scard.h ssh-add.c
      ssh-agent.c ssh.c]
     use strings instead of ints for smartcard reader ids
 2001-08-06 21:35:51 +00:00
Ben Lindstrom 3ab1dfa2a6 - jakob@cvs.openbsd.org 2001/07/31 12:53:34 
[scard.c]
     close smartcard connection if card is missing
 2001-08-06 21:33:44 +00:00
Ben Lindstrom 95148e3de2 - jakob@cvs.openbsd.org 2001/07/31 12:42:50 
[sftp-int.c sftp-server.c]
     avoid paths beginning with "//"; <vinschen@redhat.com>
     ok markus@
 2001-08-06 21:30:53 +00:00
Ben Lindstrom ae996bf7d1 - jakob@cvs.openbsd.org 2001/07/31 09:28:44 
[readconf.c readconf.h ssh.1 ssh.c]
     add 'SmartcardDevice' client option to specify which smartcard device
     is used to access a smartcard used for storing the user's private RSA
     key. ok markus@.
 2001-08-06 21:27:53 +00:00
Ben Lindstrom 94baf30d14 - jakob@cvs.openbsd.org 2001/07/31 08:41:10 
[scard.c]
     do not complain about missing smartcards. ok markus@
 2001-08-06 21:25:38 +00:00
Ben Lindstrom 0256e8b93c - stevesk@cvs.openbsd.org 2001/07/30 16:23:30 
[rijndael.c rijndael.h]
     new BSD-style license:
     Brian Gladman <brg@gladman.plus.com>:
     >I have updated my code at:
     >http://fp.gladman.plus.com/cryptography_technology/rijndael/index.htm
     >with a copyright notice as follows:
     >[...]
     >I am not sure which version of my old code you are using but I am
     >happy for the notice above to be substituted for my existing copyright
     >intent if this meets your purpose.
 2001-08-06 21:24:11 +00:00
Ben Lindstrom 30b00be24f - jakob@cvs.openbsd.org 2001/07/30 16:06:07 
[scard.c scard.h]
     better errorcodes from sc_*; ok markus@
 2001-08-06 21:22:10 +00:00
Ben Lindstrom 50e22c937f - mouring@cvs.openbsd.org 2001/07/29 17:02:46 
[scp.1]
     Clarified -o option in scp.1  OKed by Markus@
 2001-08-06 21:20:22 +00:00
Ben Lindstrom 07d24dcbd8 - markus@cvs.openbsd.org 2001/07/28 09:21:15 
[sshd.8]
     cleanup some RSA vs DSA vs SSH1 vs SSH2 notes
 2001-08-06 21:18:57 +00:00
Ben Lindstrom 2772a3f864 - deraadt@cvs.openbsd.org 2001/07/27 17:26:16 
[scp.c]
     shorten lines
 2001-08-06 21:17:12 +00:00
Ben Lindstrom 711b04a56a - millert@cvs.openbsd.org 2001/07/27 14:50:45 
[ssh.c]
     If smart card support is compiled in and a smart card is being used
     for authentication, make it the first method used.  markus@ OK
 2001-08-06 21:12:42 +00:00
Ben Lindstrom 60df8e4f7d - rees@cvs.openbsd.org 2001/07/26 20:04:27 
[scard.c ssh-keygen.c]
     Inquire Cyberflex class for 0xf0 cards
     change aid to conform to 7816-5
     remove gratuitous fid selects
 2001-08-06 21:10:52 +00:00
Ben Lindstrom 794325ac7a - stevesk@cvs.openbsd.org 2001/07/26 17:18:22 
[sshd.8 sshd.c]
     add -t option to test configuration file and keys; pekkas@netcore.fi
     ok markus@
 2001-08-06 21:09:07 +00:00
Ben Lindstrom f9cedb9ca0 - markus@cvs.openbsd.org 2001/07/25 14:35:18 
[readconf.c ssh.1 ssh.c sshconnect.c]
     cleanup connect(); connection_attempts 4 -> 1; from
eivind@freebsd.org
 2001-08-06 21:07:11 +00:00
Ben Lindstrom f9bedf1441 - markus@cvs.openbsd.org 2001/07/25 11:59:35 
[scard.c]
     typo in comment
 2001-08-06 21:05:05 +00:00
Ben Lindstrom ff6458e03e - stevesk@cvs.openbsd.org 2001/07/23 18:21:46 
[xmalloc.c]
     no zero size xstrdup() error; ok markus@
 2001-08-06 21:03:23 +00:00
Ben Lindstrom 940fb86c9a - stevesk@cvs.openbsd.org 2001/07/23 18:14:58 
[auth2.c auth-rsa.c]
     use %lu; ok markus@
 2001-08-06 21:01:49 +00:00
Ben Lindstrom d18c80c2a6 - aaron@cvs.openbsd.org 2001/07/23 14:14:18 
[ssh-keygen.1]
     Fix typo.
 2001-08-06 21:00:27 +00:00
Ben Lindstrom a9086a1c4c - markus@cvs.openbsd.org 2001/07/23 12:47:05 
[ssh.1]
     sync PreferredAuthentications
 2001-08-06 20:58:51 +00:00
Ben Lindstrom 45350e8374 - markus@cvs.openbsd.org 2001/07/23 09:06:28 
[sshconnect2.c]
     reorder default sequence of userauth methods to match ssh behaviour:
     hostbased,publickey,keyboard-interactive,password
 2001-08-06 20:57:11 +00:00
Ben Lindstrom c8e29ceb68 - markus@cvs.openbsd.org 2001/07/22 22:24:16 
[sshd.8]
     Xr login.conf
 2001-08-06 20:55:28 +00:00
Ben Lindstrom 0076d75c25 - markus@cvs.openbsd.org 2001/07/22 22:04:19 
[readconf.c ssh.1]
     enable challenge-response auth by default; ok millert@
 2001-08-06 20:53:26 +00:00
Ben Lindstrom e2b9b06425 - pvalchev@cvs.openbsd.org 2001/07/22 21:32:42 
[ssh.1]
     There is no option "Compress", point to "Compression" instead; ok
     markus
 2001-08-06 20:50:55 +00:00
Ben Lindstrom c88785efc8 - markus@cvs.openbsd.org 2001/07/22 21:32:27 
[sshpty.c]
     update comment
 2001-08-06 20:47:23 +00:00
Damien Miller 2ab5924d1f - (djm) Fix interrupted read in entropy gatherer. Spotted by markus@ on 
a fast UltraSPARC.
 2001-08-06 16:51:49 +10:00
Kevin Steves e26a155415 - (stevesk) use mysignal() in protocol 1 loop now that the SIGCHLD 
handler has converged.
 2001-07-26 17:51:49 +00:00
Ben Lindstrom 8103de7d06 - (bal) Added 'install-nokeys' to Makefile to assist package builders. 2001-07-25 16:24:33 +00:00
Ben Lindstrom 8e2aa5bb63 - (bal) 4711 not 04711 for ssh binary. 2001-07-24 17:00:13 +00:00
Ben Lindstrom 979c981f99 - stevesk@cvs.openbsd.org 2001/07/20 18:41:51 
[ssh.1]
     "the" command line
 2001-07-22 20:45:39 +00:00
Ben Lindstrom 0250da057d - markus@cvs.openbsd.org 2001/07/20 14:46:11 
[ssh-agent.c]
     do not exit() from signal handlers; ok deraadt@
 2001-07-22 20:44:00 +00:00
Ben Lindstrom 660076925e - stevesk@cvs.openbsd.org 2001/07/19 00:41:44 
[ssh.1]
     escape chars are below now
 2001-07-22 20:41:59 +00:00
Ben Lindstrom 3fdf876107 - stevesk@cvs.openbsd.org 2001/07/18 21:40:40 
[ssh-agent.c]
     chdir("/") from bbraun@synack.net; ok markus@
 2001-07-22 20:40:24 +00:00
Ben Lindstrom d01ba98986 - OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2001/07/18 21:10:43
     [sshpty.c]
     pr #1946, allow sshd if /dev is readonly
 2001-07-22 20:36:57 +00:00
Ben Lindstrom d9e0824b43 - (bal) Starting the Unicossmk merger. File merged TODO, configure.in, 
myproposal.h, ssh_prng_cmds.in, and openbsd-compat/Makefile.in.
	 Added openbsd-compat/bsd-cray.c.  Rest will be merged after
	 approval.  Selective patches from William L. Jones
	 <jones@mail.utexas.edu>
 2001-07-22 19:32:00 +00:00
Tim Rice 5d629cb653 - (tim) [configure.in] put inet_aton back in AC_CHECK_FUNCS. 
report from Mark Miller <markm@swoon.net>
 2001-07-19 20:33:46 -07:00
Ben Lindstrom dc00c93b6c - OpenBSD CVS Sync 
- mouring@cvs.openbsd.org 2001/07/18 16:45:52
     [scp.c]
     Missing -o in scp usage()
 2001-07-18 16:50:33 +00:00
Ben Lindstrom a92783fbfa cvs + pico == Bad when attempting to abort. <sigh> This should go with 
the last update.

 - (bal) Updated cygwin README and ssh-host-config.  Patch by
         Corinna Vinschen <vinschen@redhat.com>
 2001-07-18 16:27:31 +00:00
Ben Lindstrom a5820295c3 *** empty log message *** 2001-07-18 16:25:41 +00:00
Ben Lindstrom cff94beb65 - (bal) Allow sshd to switch user context without password for Cygwin. 
Patch by Corinna Vinschen <vinschen@redhat.com>
 2001-07-18 16:19:48 +00:00
Ben Lindstrom 0dd676a26b - (bal) Cleaned up trailing spaces in ChangeLog. 2001-07-18 16:05:50 +00:00
Ben Lindstrom 16d29d57e8 - markus@cvs.openbsd.org 2001/07/17 21:04:58 
[channels.c channels.h clientloop.c nchan.c serverloop.c]
     keep track of both maxfd and the size of the malloc'ed fdsets.
     update maxfd if maxfd gets closed.
 2001-07-18 16:01:46 +00:00
Ben Lindstrom a3d5a4c2db - markus@cvs.openbsd.org 2001/07/17 20:48:42 
[ssh-agent.c]
     update maxfd if maxfd is closed; report from jmcelroy@dtgnet.com
 2001-07-18 15:58:08 +00:00
Ben Lindstrom a7fc2f7434 - stevesk@cvs.openbsd.org 2001/07/15 16:58:29 
[ssh-agent.c]
     typo in usage; ok markus@
 2001-07-18 15:53:39 +00:00
Ben Lindstrom a4a5323b2a - stevesk@cvs.openbsd.org 2001/07/15 16:57:21 
[ssh-agent.1]
     -d will not fork; ok markus@
 2001-07-18 15:51:00 +00:00
Ben Lindstrom 36857f6b8b - markus@cvs.openbsd.org 2001/07/15 16:17:08 
[serverloop.c]
     schedule client alive for ssh2 only, greg@cheers.bungi.com
 2001-07-18 15:48:57 +00:00
Ben Lindstrom ad77313f22 - OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2001/07/14 15:10:17
      [readpass.c sftp-client.c sftp-common.c sftp-glob.c]
      delete spurious #includes; ok deraadt@ markus@
 2001-07-18 15:45:44 +00:00
Tim Rice 2db5371d30 - (tim) put openssh/openbsd-compat/inet_aton.[ch] back in. 
(needed by openbsd-compat/fake-getaddrinfo.c)
 2001-07-15 19:07:49 -07:00
Ben Lindstrom fed7bb498f - (bal) Set "BROKEN_GETADDRINFO" for darwin platform. Reported by 
Josh Larios <jdlarios@cac.washington.edu>
 2001-07-15 18:30:42 +00:00
Kevin Steves 6482ec865a - (stevesk) configure.in: use ll suffix for long long constant 
in snprintf() test
 2001-07-15 02:09:28 +00:00
Kevin Steves 60193f70f7 - (stevesk) change getopt() declaration 2001-07-14 16:05:55 +00:00
Damien Miller 4f8e66929b - (djm) Pull in getopt(3) from OpenBSD libc for the optreset extension. 2001-07-14 13:22:53 +10:00
Damien Miller 8f6bc30a4b - (djm) Reorder Makefile.in so clean targets work a little better when 
run directly from Makefile.in
 2001-07-14 13:07:43 +10:00
Damien Miller 0ae6e009c8 - markus@cvs.openbsd.org 2001/07/11 18:26:15 
[auth.c]
     no need to call dirname(pw->pw_dir).
     note that dirname(3) modifies its argument on some systems.
 2001-07-14 12:21:34 +10:00
Damien Miller c4b7feabe0 - itojun@cvs.openbsd.org 2001/07/11 00:24:53 
[servconf.c]
     make it compilable in all 4 combination of KRB4/KRB5 settings.
     dugsong ok
     XXX isn't it sensitive to the order of -I/usr/include/kerberosIV and
     -I/usr/include/kerberosV?
 2001-07-14 12:20:32 +10:00
Damien Miller 07ab49ef71 - markus@cvs.openbsd.org 2001/07/10 21:49:12 
[readpass.c]
     don't panic if fork or pipe fail (just return an empty passwd).
 2001-07-14 12:19:56 +10:00
Damien Miller efb1edfc7f - deraadt@cvs.openbsd.org 2001/07/09 07:04:53 
[session.c sftp-int.c]
     correct type on last arg to execl(); nordin@cse.ogi.edu
 2001-07-14 12:19:36 +10:00
Damien Miller f4614450d1 - OpenBSD CVS Sync 
- fgsch@cvs.openbsd.org 2001/07/09 05:58:47
     [ssh.c]
     Use getopt(3); markus@ ok.
 2001-07-14 12:18:10 +10:00
Damien Miller 4085785276 - OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2001/07/08 15:23:38
     [servconf.c]
     fix ``MaxStartups max''; ok markus@
 2001-07-14 12:17:33 +10:00
Damien Miller 40eb1d82bb - OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2001/07/05 20:32:47
     [sshconnect1.c]
     statement after label; ok dugsong@
 2001-07-14 12:16:59 +10:00
Damien Miller f3512d9ba7 - OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2001/07/04 23:49:27
     [ssh-agent.c]
     handle mutiple adds of the same smartcard key
 2001-07-14 12:14:27 +10:00
Damien Miller 8d4bf17036 - OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2001/07/04 23:39:07
     [ssh-agent.c]
     for smartcards remove both RSA1/2 keys
 2001-07-14 12:13:49 +10:00
Damien Miller 694be4b1d5 - OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2001/07/04 23:13:10
     [scard.c scard.h ssh-agent.c]
     handle card removal more gracefully, add sc_close() to scard.h
 2001-07-14 12:13:26 +10:00
Damien Miller 48bfa9cafa - OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2001/07/04 22:47:19
     [ssh-agent.c]
     ignore SIGPIPE when debugging, too
 2001-07-14 12:12:55 +10:00
Damien Miller 98273e3ade - (djm) Revert dirname fix, a better one is on its way. 2001-07-14 11:55:15 +10:00
Damien Miller c62f1fc3ff - (djm) Enable /etc/nologin check on PAM systems, as some lack the 
pam_nologin module. Report from William Yodlowsky
   <bsd@openbsd.rutgers.edu>
 2001-07-14 11:54:05 +10:00
Damien Miller eec0c25f2a - (djm) dirname(3) may modify its argument on glibc and other systems. 
Patch from markus@, spotted by Tom Holroyd <tomh@po.crl.go.jp>
 2001-07-11 21:32:20 +10:00
Tim Rice 024acc46e6 - (tim) [openbsd-compat/dirname.h] Remove ^M causing some compilers to 
issue warning (line 1: tokens ignored at end of directive line)
 - (tim) [sshconnect1.c] give the compiler something to do for success:
	 if KRB5 and AFS are not defined.
	 (ERROR: "sshconnect1.c", line 1274: Syntax error before or at: })
 2001-07-04 21:27:20 -07:00
Tim Rice 7281a9bc8c [contrib/caldera/openssh.spec] sync with Caldera 2001-07-04 17:45:28 -07:00
Kevin Steves e468de6525 - (stevesk) sync servconf.h (comments) 2001-07-04 18:37:20 +00:00
Kevin Steves 8f63caa197 - (stevesk) more sync for session.c 2001-07-04 18:23:02 +00:00
Kevin Steves d009ae3d04 - (stevesk) sync misc.h 2001-07-04 17:25:54 +00:00
Ben Lindstrom f70b59c039 - (bal) Makefile fix up requires scard.c 2001-07-04 05:40:19 +00:00
Ben Lindstrom 3133dbbdba - (bal) forget a few new files in sync up. 2001-07-04 05:35:00 +00:00
Ben Lindstrom 809744e912 - markus@cvs.openbsd.org 2001/07/02 22:52:57 
[channels.c channels.h serverloop.c]
     improve cleanup/exit logic in ssh2:
     stop listening to channels, detach channel users (e.g. sessions).
     wait for children (i.e. dying sessions), send exit messages,
     cleanup all channels.
 2001-07-04 05:26:06 +00:00
Ben Lindstrom 0047764526 - markus@cvs.openbsd.org 2001/07/02 22:40:18 
[ssh-keygen.c]
     update for sectok.h interface changes.
 2001-07-04 05:24:27 +00:00
Ben Lindstrom 4f42d8cda3 - markus@cvs.openbsd.org 2001/07/02 22:29:20 
[readpass.c]
     do not return NULL, use "" instead.
 2001-07-04 05:19:27 +00:00
Ben Lindstrom 4983d5ebd5 - markus@cvs.openbsd.org 2001/07/02 13:59:15 
[serverloop.c session.c session.h]
     wait until !session_have_children(); bugreport from
     Lutz.Jaenicke@aet.TU-Cottbus.DE
 2001-07-04 05:17:40 +00:00
Ben Lindstrom 173e646f7e - stevesk@cvs.openbsd.org 2001/06/30 18:08:40 
[channels.c channels.h clientloop.c]
     adress -> address; ok markus@
 2001-07-04 05:15:15 +00:00
Ben Lindstrom 1118095d33 - stevesk@cvs.openbsd.org 2001/06/29 18:40:28 
[channels.c]
     use socklen_t for getsockopt arg #5; ok markus@
 2001-07-04 05:13:35 +00:00
Ben Lindstrom db47f383e6 - stevesk@cvs.openbsd.org 2001/06/29 18:38:44 
[clientloop.c]
     sync function definition with declaration; ok markus@
 2001-07-04 05:10:27 +00:00
Ben Lindstrom d6e049cd59 - markus@cvs.openbsd.org 2001/06/29 07:11:01 
[ssh-keygen.c]
     initialize early
 2001-07-04 05:08:39 +00:00
Ben Lindstrom 7feba35a47 - markus@cvs.openbsd.org 2001/06/29 07:06:34 
[ssh-keygen.c]
     new error handling for cyberflex_*
 2001-07-04 05:06:59 +00:00
Ben Lindstrom 511d69e6d7 - stevesk@cvs.openbsd.org 2001/06/28 19:57:35 
[ssh-keygen.c]
     '\0' terminated data[] is ok; ok markus@
 2001-07-04 05:05:27 +00:00
Ben Lindstrom 44e49afae2 - markus@cvs.openbsd.org 2001/06/27 06:26:36 
[ssh-add.c]
     convert to getopt(3)
 2001-07-04 05:03:51 +00:00
Ben Lindstrom f7297dd79d - markus@cvs.openbsd.org 2001/06/27 05:42:25 
[rsa.c rsa.h ssh-agent.c ssh-keygen.c]
     s/generate_additional_parameters/rsa_generate_additional_parameters/
     http://www.humppa.com/
 2001-07-04 05:02:23 +00:00
Ben Lindstrom 680b276aad - markus@cvs.openbsd.org 2001/06/27 05:35:42 
[ssh-keygen.c]
     use cyberflex_inq_class to inquire class.
 2001-07-04 05:00:11 +00:00
Ben Lindstrom 60260022ee - markus@cvs.openbsd.org 2001/06/27 04:48:53 
[auth.c match.c sshd.8]
     tridge@samba.org
 2001-07-04 04:56:44 +00:00
Ben Lindstrom bddd551e11 - markus@cvs.openbsd.org 2001/06/27 02:12:54 
[serverloop.c serverloop.h session.c session.h]
     quick hack to make ssh2 work again.
 2001-07-04 04:53:53 +00:00
Ben Lindstrom eb7a84c49e - dugsong@cvs.openbsd.org 2001/06/26 17:41:49 
[servconf.c]
     #include <kafs.h>
 2001-07-04 04:48:36 +00:00
Ben Lindstrom 4cc240dabb - markus@cvs.openbsd.org 2001/06/26 17:27:25 
[authfd.h authfile.h auth.h auth-options.h bufaux.h buffer.h
      canohost.h channels.h cipher.h clientloop.h compat.h compress.h
      crc32.h deattack.h dh.h dispatch.h groupaccess.c groupaccess.h
      hostfile.h kex.h key.h log.c log.h mac.h misc.c misc.h mpaux.h
      packet.h radix.h readconf.h readpass.h rsa.h servconf.h serverloop.h
      session.h sftp-common.c sftp-common.h sftp-glob.h sftp-int.h
      sshconnect.h ssh-dss.h sshlogin.h sshpty.h ssh-rsa.h sshtty.h
      tildexpand.h uidswap.h uuencode.h xmalloc.h]
     remove comments from .h, since they are cut&paste from the .c files
     and out of sync
 2001-07-04 04:46:56 +00:00
Ben Lindstrom 5bf5d67d49 - markus@cvs.openbsd.org 2001/06/26 17:25:34 
[ssh.1]
     document SSH_ASKPASS; fubob@MIT.EDU
 2001-07-04 04:31:38 +00:00
Ben Lindstrom ec95ed9b4c - dugsong@cvs.openbsd.org 2001/06/26 16:15:25 
[auth1.c auth.h auth-krb4.c auth-passwd.c readconf.c readconf.h
      servconf.c servconf.h session.c sshconnect1.c sshd.c]
     Kerberos v5 support for SSH1, mostly from Assar Westerlund
     <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
 2001-07-04 04:21:14 +00:00
Ben Lindstrom b4c774cf88 - itojun@cvs.openbsd.org 2001/06/26 06:33:07 
[servconf.h serverloop.h session.h sftp-client.h sftp-common.h
      sftp-glob.h sftp-int.h sshconnect.h ssh-dss.h sshlogin.h sshpty.h
      ssh-rsa.h tildexpand.h uidswap.h uuencode.h xmalloc.h]
     prototype pedant.  not very creative...
     - () -> (void)
     - no variable names
 2001-07-04 04:07:12 +00:00
Ben Lindstrom 16ae3d0dba - itojun@cvs.openbsd.org 2001/06/26 06:32:58 
[atomicio.h authfd.h authfile.h auth.h auth-options.h bufaux.h
      buffer.h canohost.h channels.h cipher.h clientloop.h compat.h
      compress.h crc32.h deattack.h dh.h dispatch.h groupaccess.h
      hostfile.h kex.h key.h log.h mac.h match.h misc.h mpaux.h packet.h
      radix.h readconf.h readpass.h rsa.h]
     prototype pedant.  not very creative...
     - () -> (void)
     - no variable names
 2001-07-04 04:02:36 +00:00
Ben Lindstrom 90279d80f5 - markus@cvs.openbsd.org 2001/06/26 05:50:11 
[auth2.c]
     new interface for secure_filename()
 2001-07-04 03:56:56 +00:00
Ben Lindstrom 88a6b7581b - mpech@cvs.openbsd.org 2001/06/26 05:48:07 
[sshd.8]
     remove unnecessary .Pp between .It;
     millert@ ok
 2001-07-04 03:55:21 +00:00
Ben Lindstrom 3f471630bb - markus@cvs.openbsd.org 2001/06/26 05:33:34 
[ssh-agent.c]
     more smartcard support.
 2001-07-04 03:53:15 +00:00
Ben Lindstrom db6b276f5a - markus@cvs.openbsd.org 2001/06/26 05:07:43 
[ssh-agent.c]
     update usage
 2001-07-04 03:51:35 +00:00
Ben Lindstrom 036a6b28c9 - markus@cvs.openbsd.org 2001/06/26 04:59:59 
[authfd.c authfd.h ssh-add.c]
     initial support for smartcards in the agent
 2001-07-04 03:50:02 +00:00
Ben Lindstrom d94580c708 - markus@cvs.openbsd.org 2001/06/26 04:07:06 
[ssh-agent.1 ssh-agent.c]
     add debug flag
 2001-07-04 03:48:02 +00:00
Ben Lindstrom cd392284ac - markus@cvs.openbsd.org 2001/06/26 02:47:07 
[ssh-keygen.c]
     allow loading a private RSA key to a cyberflex card.
 2001-07-04 03:44:03 +00:00
Ben Lindstrom 7907382299 - stevesk@cvs.openbsd.org 2001/06/25 20:26:37 
[auth2.c sshconnect2.c]
     prototype cleanup; ok markus@
 2001-07-04 03:42:30 +00:00
Ben Lindstrom 248c0784bf - provos@cvs.openbsd.org 2001/06/25 17:54:47 
[auth.c auth.h auth-rsa.c]
     terminate secure_filename checking after checking homedir.  that way
     it works on AFS.  okay markus@
 2001-07-04 03:40:39 +00:00
Ben Lindstrom bda98b0091 - markus@cvs.openbsd.org 2001/06/25 17:18:27 
[ssh-keygen.1]
     sshd(8) will never read the private keys, but ssh(1) does;
     hugh@mimosa.com
 2001-07-04 03:35:24 +00:00
Ben Lindstrom 4469723325 - markus@cvs.openbsd.org 2001/06/25 08:25:41 
[channels.c channels.h cipher.c clientloop.c compat.c compat.h
      hostfile.c kex.c kex.h key.c key.h nchan.c packet.c serverloop.c
      session.c session.h sftp-server.c ssh-add.c ssh-agent.c uuencode.h]
     update copyright for 2001
 2001-07-04 03:32:30 +00:00
Kevin Steves 5cc6e92251 - (stevesk) remove cli.[ch] 2001-06-29 19:51:48 +00:00
Kevin Steves 9b26f96c12 - (stevesk) session.c: use u_int for envsize 2001-06-29 17:52:17 +00:00
Kevin Steves 78e83b3e5e - (stevesk) remove _REENTRANT #define 2001-06-29 16:56:16 +00:00
Ben Lindstrom 1cd6fefcc8 - (bal) Updated zlib's home. Thanks to David Howe <DaveHowe@gmx.co.uk>. 2001-06-29 12:39:23 +00:00
Ben Lindstrom 5d739a4c86 - (bal) Fixed _DISABLE_VPOSIX in readpassphrase.c. 2001-06-29 12:35:12 +00:00
Ben Lindstrom deacfcc43f - (bal) Removed net_aton() since we don't use it any more 2001-06-29 12:32:31 +00:00
Ben Lindstrom e6affc6a13 - (bal) Remove getusershell() since it's no longer use 2001-06-28 23:27:37 +00:00
Ben Lindstrom f96d887d75 - (bal) Removed strtok_r and inet_ntop since they are no longer used. 2001-06-28 23:21:28 +00:00
Damien Miller acf59e68cb - (djm) Fix from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> for my 
broken makefile
 2001-06-28 20:23:14 +10:00
Damien Miller 180207ffe1 20010628 
- (djm) Sync openbsd-compat with -current libc
 2001-06-28 14:48:28 +10:00
Kevin Steves 315f8b70b0 - (stevesk) use X/Open socket interface for HP-UX 10.X also 2001-06-28 00:24:41 +00:00
Kevin Steves 37a777e98b - (stevesk) fix x11 forwarding from _PATH_XAUTH change 2001-06-28 00:13:48 +00:00
Kevin Steves 6a7b0de576 - (stevesk) for HP-UX 11.X use X/Open socket interface; 
pulls in modern socket prototypes and eliminates a number of compiler
    warnings.  see xopen_networking(7).
 2001-06-27 16:32:24 +00:00
Damien Miller 649d999b4b - (djm) Turn up warnings if gcc or egcs detected 2001-06-27 23:35:51 +10:00
Damien Miller b90416b7df - (djm) Sync with -current openbsd-compat/readpassphrase.c: 
- djm@cvs.openbsd.org 2001/06/27 13:23:30
     typo, spotted by Tom Holroyd <tomh@po.crl.go.jp>; ok deraadt@
 2001-06-27 23:26:38 +10:00
Damien Miller b5b0af4d58 - (djm) Oops, forgot make logic for primes=>moduli. Also try to rename 
existing primes->moduli if it exists.
 2001-06-27 21:52:32 +10:00
Damien Miller 407548b7ed - (djm) Rename sysconfdir/primes => sysconfdir/moduli 2001-06-27 17:07:16 +10:00
Damien Miller ec9868aa3c - (djm) Remove redundant and incorrect test for max auth attempts in 
PAM kbdint code. Based on fix from Matthew Melvin
  <matthewm@webcentral.com.au>
 2001-06-27 15:36:43 +10:00
Damien Miller 665af9cae7 - (djm) Reintroduce pam_session call for non-pty sessions. 2001-06-27 09:34:15 +10:00
Damien Miller c8a3868ed0 - (djm) Bring in readpassphrase() from OpenBSD libc. Compiles OK on Linux and 
Solaris
 2001-06-25 18:09:16 +10:00
Damien Miller 2d5ac08f13 -Wall 2001-06-25 17:07:59 +10:00
Ben Lindstrom 491bbb811a - markus@cvs.openbsd.org 2001/06/24 17:18:31 
[ttymodes.c]
     passing modes works fine: debug2->3
 2001-06-25 05:24:16 +00:00
Ben Lindstrom 126c56ad9e - markus@cvs.openbsd.org 2001/06/24 05:47:13 
[sshconnect2.c]
     oops, missing format string
 2001-06-25 05:22:53 +00:00
Ben Lindstrom 949974bbdb - markus@cvs.openbsd.org 2001/06/24 05:35:33 
[readpass.c readpass.h ssh-add.c sshconnect2.c ssh-keygen.c]
     switch to readpassphrase(3)
     2.7/8-stable needs readpassphrase.[ch] from libc
 2001-06-25 05:20:31 +00:00
Ben Lindstrom f0c50293dd - markus@cvs.openbsd.org 2001/06/24 05:25:10 
[auth-options.c match.c match.h]
     move ip+hostname check to match.c
 2001-06-25 05:17:53 +00:00
Ben Lindstrom 0520945179 - markus@cvs.openbsd.org 2001/06/23 22:37:46 
[sshconnect1.c]
     consistent with ssh2: skip key if empty passphrase is entered,
     retry num_of_passwd_prompt times if passphrase is wrong. ok fgsch@
 2001-06-25 05:16:02 +00:00
Ben Lindstrom 980978639c - markus@cvs.openbsd.org 2001/06/23 19:12:43 
[sshd.c]
     pidfile/sigterm race; bbraun@synack.net
 2001-06-25 05:10:20 +00:00
Ben Lindstrom 2464322d7e - itojun@cvs.openbsd.org 2001/06/23 17:48:18 
[sftp.1 ssh.1 sshd.8 ssh-keyscan.1]
     kill whitespace at EOL.
 2001-06-25 05:08:11 +00:00
Ben Lindstrom e586c4ce3f - markus@cvs.openbsd.org 2001/06/23 17:05:22 
[ssh-keygen.c]
     fix import for (broken?) ssh.com/f-secure private keys
     (i tested > 1000 RSA keys)
 2001-06-25 05:04:58 +00:00
Ben Lindstrom bba81213b9 - itojun@cvs.openbsd.org 2001/06/23 15:12:20 
[auth1.c auth2.c auth2-chall.c authfd.c authfile.c auth-rhosts.c
      canohost.c channels.c cipher.c clientloop.c deattack.c dh.c
      hostfile.c kex.c kexdh.c kexgex.c key.c nchan.c packet.c radix.c
      readpass.c scp.c servconf.c serverloop.c session.c sftp.c
      sftp-client.c sftp-glob.c sftp-int.c sftp-server.c ssh-add.c
      ssh-agent.c ssh.c sshconnect1.c sshconnect2.c sshconnect.c sshd.c
      ssh-keygen.c ssh-keyscan.c]
     more strict prototypes.  raise warning level in Makefile.inc.
     markus ok'ed
     TODO; cleanup headers
 2001-06-25 05:01:22 +00:00
Ben Lindstrom 34f91883a6 - markus@cvs.openbsd.org 2001/06/23 06:41:10 
[ssh-keygen.c]
     try to decode ssh-3.0.0 private rsa keys
     (allow migration to openssh, not vice versa), #910
 2001-06-25 04:47:54 +00:00
Ben Lindstrom 90fd060bc8 - deraadt@cvs.openbsd.org 2001/06/23 05:57:09 
[sftp.1 sftp-server.8 ssh-keygen.1]
     ok, tmac is now fixed
 2001-06-25 04:45:33 +00:00
Ben Lindstrom 5363aee8bd - markus@cvs.openbsd.org 2001/06/23 05:26:02 
[key.c]
     handle sigature of size 0 (some broken clients send this).
 2001-06-25 04:42:20 +00:00
Ben Lindstrom a4789ef878 - markus@cvs.openbsd.org 2001/06/23 03:04:42 
[auth2.c auth-rh-rsa.c]
     restore correct ignore_user_known_hosts logic.
 2001-06-25 04:40:49 +00:00