Damien Miller
c6aadd994d
- grunk@cvs.openbsd.org 2008/07/25 07:05:16
...
[key.c]
In random art visualization, make sure to use the end marker only at the
end. Initial diff by Dirk Loss, tweaks and ok djm@
2008-11-03 19:16:20 +11:00
Damien Miller
9f6fb56ab8
- grunk@cvs.openbsd.org 2008/07/25 06:56:35
...
[ssh_config]
Add VisualHostKey to example file, ok djm@
2008-11-03 19:15:44 +11:00
Darren Tucker
c570ff7fa4
- (dtucker) [config.guess config.sub] Update to latest versions from
...
http://git.savannah.gnu.org/gitweb/ (2008-04-14 and 2008-06-16
respectively).
2008-09-06 18:20:57 +10:00
Darren Tucker
661f63b7d2
- (dtucker) [openbsd-compat/bsd-poll.c] correctly check for number of FDs
...
larger than FD_SETSIZE (OpenSSH only ever uses poll with one fd). Patch
from Nicholas Marriott.
2008-08-30 07:32:37 +10:00
Damien Miller
212f0b0879
- (djm) [servconf.c] Print UsePAM option in config test mode (when it
...
has been compiled in); report from nix-corp AT esperi.org.uk
ok dtucker@
2008-07-23 17:42:29 +10:00
Damien Miller
6ef430dcc3
- djm@cvs.openbsd.org 2008/07/23 07:36:55
...
[servconf.c]
do not try to print options that have been compile-time disabled
in config test mode (sshd -T); report from nix-corp AT esperi.org.uk
ok dtucker@
2008-07-23 17:40:04 +10:00
Damien Miller
8f42e9b75a
- (djm) Release OpenSSH-5.1
2008-07-21 18:22:25 +10:00
Damien Miller
1f8909c2c2
- (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
...
[contrib/suse/openssh.spec] Update version number in README and RPM specs
2008-07-21 18:21:52 +10:00
Damien Miller
aaae43e7d3
- djm@cvs.openbsd.org 2008/07/21 08:19:07
...
[version.h]
openssh-5.1
2008-07-21 18:21:05 +10:00
Damien Miller
aa5f433287
- jmc@cvs.openbsd.org 2008/07/18 22:51:01
...
[sftp-server.8]
no need for .Pp before or after .Sh;
2008-07-21 18:20:39 +10:00
Damien Miller
2e28d8622d
- (djm) [sshconnect2.c] vis.h isn't available everywhere
2008-07-17 19:15:43 +10:00
Darren Tucker
9a3f2b4cc3
- (dtucker) [openbsd-compat/bsd-cygwin_util.c] Remove long-unneeded compat
...
code, replace with equivalent cygwin library call. Patch from vinschen
at redhat.comi, ok djm@.
2008-07-17 19:03:49 +10:00
Damien Miller
a1d03a5069
- djm@cvs.openbsd.org 2008/07/17 08:51:07
...
[auth2-hostbased.c]
strip trailing '.' from hostname when HostbasedUsesNameFromPacketOnly=yes
report and patch from res AT qoxp.net (bz#1200); ok markus@
2008-07-17 18:57:19 +10:00
Damien Miller
7ba0ca7f6f
- djm@cvs.openbsd.org 2008/07/17 08:48:00
...
[sshconnect2.c]
strnvis preauth banner; pointed out by mpf@ ok markus@
2008-07-17 18:57:06 +10:00
Damien Miller
6ef17495e9
- djm@cvs.openbsd.org 2008/07/16 11:52:19
...
[channels.c]
this loop index should be automatic, not static
2008-07-16 22:42:06 +10:00
Damien Miller
b9d3bee003
- djm@cvs.openbsd.org 2008/07/16 11:51:14
...
[clientloop.c]
rename variable first_gc -> last_gc (since it is actually the last
in the list).
2008-07-16 22:40:52 +10:00
Damien Miller
94717b0be1
- djm@cvs.openbsd.org 2008/07/15 02:23:14
...
[sftp.1]
number of pipelined requests is now 64;
prodded by Iain.Morgan AT nasa.gov
2008-07-16 21:17:23 +10:00
Damien Miller
c4657ef181
- (djm) [openbsd-compat/fake-rfc2553.c openbsd-compat/fake-rfc2553.h]
...
return EAI_FAMILY when trying to lookup unsupported address family;
from vinschen AT redhat.com
2008-07-14 21:37:36 +10:00
Damien Miller
1fc231cbb5
- (djm) [contrib/cygwin/Makefile contrib/cygwin/ssh-host-config]
...
[contrib/cygwin/ssh-user-config contrib/cygwin/sshd-inetd]
Revamped and simplified Cygwin ssh-host-config script that uses
unified csih configuration tool. Requires recent Cygwin.
Patch from vinschen AT redhat.com
2008-07-14 12:12:52 +10:00
Damien Miller
276571c29d
- djm@cvs.openbsd.org 2008/07/14 01:55:56
...
[sftp-server.8]
mention requirement for /dev/log inside chroot when using sftp-server
with ChrootDirectory
2008-07-14 12:09:57 +10:00
Damien Miller
36d7056f4d
- (djm) [umac.c] Rename variable s/buffer_ptr/bufp/ to avoid clash;
...
reported by cristian.ionescu-idbohrn AT axis.com
2008-07-14 12:04:43 +10:00
Damien Miller
639ce593d4
- (djm) [openbsd-compat/rresvport.c] Add unistd.h for missing close()
...
prototype; reported by cristian.ionescu-idbohrn AT axis.com
2008-07-14 12:03:27 +10:00
Damien Miller
ce02e5e09e
- (djm) [openbsd-compat/bindresvport.c] Rename variables s/sin/in/ to
...
avoid clash with sin(3) function; reported by
cristian.ionescu-idbohrn AT axis.com
2008-07-14 12:02:24 +10:00
Damien Miller
7f980d1ac7
- djm@cvs.openbsd.org 2008/07/13 22:16:03
...
[sftp.c]
increase number of piplelined requests so they properly fill the
(recently increased) channel window. prompted by rapier AT psc.edu;
ok markus@
2008-07-14 11:29:24 +10:00
Damien Miller
163886ff71
- djm@cvs.openbsd.org 2008/07/13 22:13:07
...
[channels.c]
use struct sockaddr_storage instead of struct sockaddr for accept(2)
address argument. from visibilis AT yahoo.com in bz#1485; ok markus@
2008-07-14 11:28:58 +10:00
Damien Miller
81dec0589a
- sthen@cvs.openbsd.org 2008/07/13 21:22:52
...
[ssh-keygen.c]
Change "ssh-keygen -F [host] -l" to not display random art unless
-v is also specified, making it consistent with the manual and other
uses of -l.
ok grunk@
2008-07-14 11:28:29 +10:00
Damien Miller
a034baf1b9
- djm@cvs.openbsd.org 2008/07/12 05:33:41
...
[scp.1]
better description for -i flag:
s/RSA authentication/public key authentication/
2008-07-12 17:12:49 +10:00
Damien Miller
2bcb866327
- (djm) OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2008/07/12 04:52:50
[channels.c]
unbreak; move clearing of cctx struct to before first use
reported by dkrause@
2008-07-12 17:12:29 +10:00
Damien Miller
b61f3fc31f
- markus@cvs.openbsd.org 2008/07/10 18:08:11
...
[clientloop.c monitor.c monitor_wrap.c packet.c packet.h sshd.c]
sync v1 and v2 traffic accounting; add it to sshd, too;
ok djm@, dtucker@
2008-07-11 17:36:48 +10:00
Damien Miller
dda5fffb84
- markus@cvs.openbsd.org 2008/07/10 18:05:58
...
[channels.c]
missing bzero; from mickey; ok djm@
2008-07-11 17:35:37 +10:00
Damien Miller
87dd5f2804
- stevesk@cvs.openbsd.org 2008/07/07 23:32:51
...
[key.c]
/*NOTREACHED*/ for lint warning:
warning: function key_equal falls off bottom without returning value
ok djm@
2008-07-11 17:35:09 +10:00
Damien Miller
2f7faf19d5
- stevesk@cvs.openbsd.org 2008/07/07 00:31:41
...
[ttymodes.c]
we don't need arg after the debug3() was removed. from lint.
ok djm@
2008-07-11 17:34:35 +10:00
Damien Miller
73193b3693
- (djm) [configure.ac] Add -Wformat-security to CFLAGS for gcc 3.x and 4.x
2008-07-09 21:07:19 +10:00
Damien Miller
7acf550aeb
- (djm) [auth.c] Missing unistd.h for close()
2008-07-09 20:54:37 +10:00
Damien Miller
773a7b98f9
- (djm) [auth1.c] Fix format string vulnerability in protocol 1 PAM
...
account check failure path. The vulnerable format buffer is supplied
from PAM and should not contain attacker-supplied data.
2008-07-09 20:54:05 +10:00
Damien Miller
d9648eee7c
- (djm) [Makefile.in] Print "all tests passed" when all regress tests pass
2008-07-09 00:21:12 +10:00
Damien Miller
c9c96f2e28
- djm@cvs.openbsd.org 2008/07/05 05:16:01
...
[PROTOCOL]
grammar
2008-07-05 15:17:48 +10:00
Damien Miller
ff2e492028
- (djm) [configure.ac] unbreak: remove extra closing brace
2008-07-05 09:52:03 +10:00
Damien Miller
42743cb6ba
- (djm) [Makefile.in] Pass though pass to conch for interop tests
2008-07-05 09:50:23 +10:00
Damien Miller
0b4d48ba74
- djm@cvs.openbsd.org 2008/07/04 23:30:16
...
[auth1.c auth2.c]
Make protocol 1 MaxAuthTries logic match protocol 2's.
Do not treat the first protocol 2 authentication attempt as
a failure IFF it is for method "none".
Makes MaxAuthTries' user-visible behaviour identical for
protocol 1 vs 2.
ok dtucker@
2008-07-05 09:44:53 +10:00
Damien Miller
d874fa517b
- OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2008/07/04 23:08:25
[packet.c]
handle EINTR in packet_write_poll()l ok dtucker@
2008-07-05 09:40:56 +10:00
Damien Miller
20d1694719
- (djm) [atomicio.c configure.ac] Disable poll() fallback in atomiciov for
...
Tru64. readv doesn't seem to be a comparable object there.
bz#1386, patch from dtucker@ ok me
2008-07-05 09:36:58 +10:00
Damien Miller
22989f1b5e
- (djm) [auth.c] Fixed test for locked account on HP/UX with shadowed
...
passwords disabled. bz#1083 report & patch from senthilkumar_sen AT
hotpop.com, w/ dtucker@
2008-07-05 08:59:43 +10:00
Damien Miller
d8968adb5f
- (djm) [atomicio.c channels.c clientloop.c defines.h includes.h]
...
[packet.c scp.c serverloop.c sftp-client.c ssh-agent.c ssh-keyscan.c]
[sshd.c] Explicitly handle EWOULDBLOCK wherever we handle EAGAIN, on
some platforms (HP nonstop) it is a distinct errno;
bz#1467 reported by sconeu AT yahoo.com; ok dtucker@
2008-07-04 23:10:49 +10:00
Darren Tucker
b01bac109b
- djm@cvs.openbsd.org 2008/06/30 10:43:03
...
[regress/conch-ciphers.sh]
explicitly disable conch options that could interfere with the test
2008-07-04 17:11:30 +10:00
Darren Tucker
5d6d70a842
- djm@cvs.openbsd.org 2008/06/30 10:31:11
...
[putty-transfer.sh putty-kex.sh putty-ciphers.sh]
remove "set -e" left over from debugging
2008-07-04 17:10:30 +10:00
Darren Tucker
8c7a14ea28
- djm@cvs.openbsd.org 2008/06/30 08:07:34
...
[key-options.sh]
shell portability: use "=" instead of "==" in test(1) expressions,
double-quote string with backslash escaped /
2008-07-04 17:08:58 +10:00
Darren Tucker
f7fa706e70
- (dtucker) [sftp-server.c] Bug #1447 : fall back to racy rename if link
...
returns EXDEV. Patch from Mike Garrison, ok djm@
2008-07-04 14:10:19 +10:00
Darren Tucker
2784f1fcc3
- dtucker@cvs.openbsd.org 2008/07/04 03:47:02
...
[monitor.c]
Make debug a little clearer. ok djm@
2008-07-04 13:51:45 +10:00
Darren Tucker
b03fd02aed
- djm@cvs.openbsd.org 2008/07/04 03:44:59
...
[servconf.c groupaccess.h groupaccess.c]
support negation of groups in "Match group" block (bz#1315); ok dtucker@
2008-07-04 13:51:12 +10:00