Commit Graph

4095 Commits

Author SHA1 Message Date
Damien Miller 1530f2431c - jmc@cvs.openbsd.org 2005/12/21 12:53:31
[ssh.1]
     -Y does X11 forwarding too;
     ok markus
2005-12-24 14:54:03 +11:00
Damien Miller 9a765b22b7 - jmc@cvs.openbsd.org 2005/12/21 11:57:25
[ssh.1]
     options now described `above', rather than `later';
2005-12-24 14:53:44 +11:00
Damien Miller 329cb01638 - jmc@cvs.openbsd.org 2005/12/21 11:48:16
[ssh.1]
     -L and -R descriptions are now above, not below, ~C description;
2005-12-24 14:53:23 +11:00
Damien Miller e9b333a544 - jmc@cvs.openbsd.org 2005/12/20 22:09:41
[ssh.1]
     move info on ssh return values and config files up into the main
     description;
2005-12-24 14:53:04 +11:00
Damien Miller 52d2061ab0 - jmc@cvs.openbsd.org 2005/12/20 22:02:50
[ssh.1]
     .Ss -> .Sh: subsections have not made this page more readable
2005-12-24 14:52:36 +11:00
Damien Miller c93a813802 - jmc@cvs.openbsd.org 2005/12/20 21:59:43
[ssh.1]
     merge the sections on protocols 1 and 2 into one section on
     authentication;
     feedback djm dtucker
     ok deraadt markus dtucker
2005-12-24 14:52:13 +11:00
Darren Tucker e9a9b71c6b - dtucker@cvs.openbsd.org 2005/12/20 04:41:07
[ssh.c]
     exit(255) on error to match description in ssh(1); bz #1137; ok deraadt@
2005-12-20 16:15:51 +11:00
Darren Tucker 7eba820ca7 - stevesk@cvs.openbsd.org 2005/12/17 21:36:42
[ssh_config.5]
     spelling: intented -> intended
2005-12-20 16:15:14 +11:00
Darren Tucker 635518705a - stevesk@cvs.openbsd.org 2005/12/17 21:13:05
[ssh_config.5 session.c]
     spelling: fowarding, fowarded
2005-12-20 16:14:15 +11:00
Darren Tucker 5652924ad9 missed changelog entry 2005-12-20 16:12:24 +11:00
Darren Tucker 5434cfe368 - jmc@cvs.openbsd.org 2005/12/16 18:14:40
[ssh.1]
     signpost the protocol sections;
2005-12-20 16:11:35 +11:00
Darren Tucker b18c867c9d - jmc@cvs.openbsd.org 2005/12/16 18:08:53
[ssh.1]
     simplify a sentence;
2005-12-20 16:10:09 +11:00
Darren Tucker d3877b995a - jmc@cvs.openbsd.org 2005/12/16 18:07:08
[ssh.1]
     move the option descriptions up the page: start of a restructure;
     ok markus deraadt
2005-12-20 16:09:36 +11:00
Darren Tucker 0d0e8f0173 - (dtucker) OpenBSD CVS Sync
- reyk@cvs.openbsd.org 2005/12/13 15:03:02
     [serverloop.c]
     if forced_tun_device is not set, it is -1 and not SSH_TUNID_ANY
2005-12-20 16:08:42 +11:00
Darren Tucker 129d0bb6a6 - (dtucker) [cipher-aes.c cipher-ctr.c cipher.c configure.ac
openbsd-compat/openssl-compat.h] Check for and work around broken AES
   ciphers >128bit on (some) Solaris 10 systems.  ok djm@
2005-12-19 17:40:40 +11:00
Darren Tucker d40c66cf3f - (dtucker) [configure.ac openbsd-compat/bsd-snprintf.c] Bug #1133: Our
snprintf replacement can have a conflicting declaration in HP-UX's system
   headers (const vs. no const) so we now check for and work around it.  Patch
   from the dynamic duo of David Leonard and Ted Percival.
2005-12-17 22:32:03 +11:00
Darren Tucker 98cfc4ce9d - (dtucker) [defines.h] HP-UX system headers define "YES" and "NO" which
scp.c also uses, so undef them here.
2005-12-17 22:04:08 +11:00
Darren Tucker 3154358d66 - dtucker@cvs.openbsd.org 2005/12/30 04:36:39
[regress/scp-ssh-wrapper.sh]
     Fix assumption about how many args scp will pass; ok djm@
2005-12-14 15:39:20 +11:00
Damien Miller 62a31c9fd0 - (djm) [misc.c] Disable tunnel code for non-OpenBSD (for now), enable
again by providing a sys_tun_open() function for your platform and
   setting the CUSTOM_SYS_TUN_OPEN define. More work is required to match
   OpenBSD's tunnel protocol, which prepends the address family to the
   packet
2005-12-13 20:44:13 +11:00
Damien Miller d47c62a714 - markus@cvs.openbsd.org 2005/12/12 13:46:18
[channels.c channels.h session.c]
     make sure protocol messages for internal channels are ignored.
     allow adjust messages for non-open channels; with and ok djm@
2005-12-13 19:33:57 +11:00
Damien Miller 7746c391b1 - jmc@cvs.openbsd.org 2005/12/08 21:37:50
[ssh_config.5]
     new sentence, new line;
2005-12-13 19:33:37 +11:00
Damien Miller 7b58e80036 - reyk@cvs.openbsd.org 2005/12/08 18:34:11
[auth-options.c includes.h misc.c misc.h readconf.c servconf.c]
     [serverloop.c ssh.c ssh_config.5 sshd_config.5 configure.ac]
     two changes to the new ssh tunnel support. this breaks compatibility
     with the initial commit but is required for a portable approach.
     - make the tunnel id u_int and platform friendly, use predefined types.
     - support configuration of layer 2 (ethernet) or layer 3
     (point-to-point, default) modes. configuration is done using the
     Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and
     restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option
     in sshd_config(5).
     ok djm@, man page bits by jmc@
2005-12-13 19:33:19 +11:00
Damien Miller 957d4e430e - jmc@cvs.openbsd.org 2005/12/08 15:06:29
[ssh_config.5]
     keep options in order;
2005-12-13 19:30:45 +11:00
Damien Miller 4b2319fb85 - jmc@cvs.openbsd.org 2005/12/08 14:59:44
[ssh.1 ssh_config.5]
     make `!command' a little clearer;
     ok reyk
2005-12-13 19:30:27 +11:00
Damien Miller f0c8c15322 - jmc@cvs.openbsd.org 2005/12/07 10:52:13
[ssh.1]
     - avoid line split in SYNOPSIS
     - add args to -w
     - kill trailing whitespace
2005-12-13 19:29:58 +11:00
Damien Miller aeb31d6120 - djm@cvs.openbsd.org 2005/12/07 03:52:22
[clientloop.c]
     reyk forgot to compile with -Werror (missing header)
2005-12-13 19:29:36 +11:00
Damien Miller d27b947178 - reyk@cvs.openbsd.org 2005/12/06 22:38:28
[auth-options.c auth-options.h channels.c channels.h clientloop.c]
     [misc.c misc.h readconf.c readconf.h scp.c servconf.c servconf.h]
     [serverloop.c sftp.c ssh.1 ssh.c ssh_config ssh_config.5 sshconnect.c]
     [sshconnect.h sshd.8 sshd_config sshd_config.5]
     Add support for tun(4) forwarding over OpenSSH, based on an idea and
     initial channel code bits by markus@. This is a simple and easy way to
     use OpenSSH for ad hoc virtual private network connections, e.g.
     administrative tunnels or secure wireless access. It's based on a new
     ssh channel and works similar to the existing TCP forwarding support,
     except that it depends on the tun(4) network interface on both ends of
     the connection for layer 2 or layer 3 tunneling. This diff also adds
     support for LocalCommand in the ssh(1) client.

     ok djm@, markus@, jmc@ (manpages), tested and discussed with others
2005-12-13 19:29:02 +11:00
Damien Miller 6dbdb6afee - jmc@cvs.openbsd.org 2005/11/30 11:45:20
[ssh.1]
     avoid ambiguities in describing TZ;
     ok djm@
2005-12-13 19:25:43 +11:00
Damien Miller c94ebbc723 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2005/11/30 11:18:27
     [ssh.1]
     timezone -> time zone
2005-12-13 19:25:21 +11:00
Damien Miller 7677be5d6c - (djm) [envpass.sh] Remove regress script that was accidentally committed
in top level directory and not noticed for over a year :)
2005-12-01 12:51:59 +11:00
Tim Rice 46259d86a2 - (tim) [configure.ac sshd.8] Enable locked account check (a "*LK*" string)
for UnixWare.
2005-11-28 18:40:34 -08:00
Darren Tucker 3af2ac56a2 - dtucker@cvs.openbsd.org 2005/11/29 02:04:55
[ssh-keygen.c]
     Populate default key sizes before checking them; from & ok tim@
2005-11-29 13:10:24 +11:00
Tim Rice 660c3405f9 - (tim) [ssh-keygen.c] Move DSA length test after setting default when
bits == 0.
2005-11-28 17:45:32 -08:00
Darren Tucker ac0c8a533d - (dtucker) [includes.h] Bug #1122: __USE_GNU is a glibc internal macro, use
_GNU_SOURCE instead.  Patch from t8m at centrum.cz.
2005-11-28 22:28:59 +11:00
Darren Tucker 3a4634f674 - dtucker@cvs.openbsd.org 2005/11/28 06:02:56
[ssh-agent.1]
     Update agent socket path templates to reflect reality, correct xref for
     time formats.  bz#1121, patch from openssh at roumenpetrov.info, ok djm@
2005-11-28 17:05:40 +11:00
Darren Tucker 9f647335d2 [ssh-keygen.1 ssh-keygen.c]
Enforce DSA key length of exactly 1024 bits to comply with FIPS-186-2,
     increase minumum RSA key size to 768 bits and update man page to reflect
     these.  Patch originally bz#1119 (senthilkumar_sen at hotpop.com),
     ok djm@, grudging ok deraadt@.
2005-11-28 16:41:46 +11:00
Darren Tucker b1a8777f3a - (dtucker) [regress/yes-head.sh] Work around breakage caused by some
versions of GNU head.  Based on patch from zappaman at buraphalinux.org
2005-11-28 16:41:03 +11:00
Darren Tucker 91d25a0c45 - (dtucker) [configure.ac] Bug #1126: AIX 5.2 and 5.3 (and presumably newer,
when they're available) need the real UID set otherwise pam_chauthtok will
   set ADMCHG after changing the password, forcing the user to change it
   again immediately.
2005-11-26 22:24:09 +11:00
Darren Tucker e0be30426a - (dtucker) [progressmeter.c scp.c sftp-server.c] Use correct casts for
snprintf formats, fixes warnings on some 64 bit platforms.  Patch from
   shaw at vranix.com, ok djm@
2005-11-25 14:44:55 +11:00
Darren Tucker 58e298d11b - (dtucker) [configure.ac] Apply tim's fix for older systems where the
resolver state in resolv.h is "state" not "__res_state".  With slight
   modification by me to also work on old AIXes.  ok djm@
2005-11-25 13:14:58 +11:00
Darren Tucker faec5ca73f - (dtucker) [regress/test-exec.sh] Use 1024 bit keys since we generate so
many and use them only once.  Speeds up testing on older/slower hardware.
2005-11-24 23:18:54 +11:00
Darren Tucker 79d09fad52 - (dtucker) [configure.ac] Fix typos in comments and AC_SEARCH_LIB argument
order in Reliant Unix block.  Patch from johane at lysator.liu.se.
2005-11-24 22:34:54 +11:00
Damien Miller 57f3915b55 - (djm) [configure.ac openbsd-compat/Makefile.in openbsd-compat/bsd-asprintf.c
openbsd-compat/bsd-snprintf.c openbsd-compat/openbsd-compat.h] Add an
   asprintf() implementation, after syncing our {v,}snprintf() implementation
   with some extra fixes from Samba's version. With help and debugging from
   dtucker and tim; ok dtucker@
2005-11-24 19:58:19 +11:00
Darren Tucker efc17470e0 - (dtucker) [loginrec.c] Add casts to prevent compiler warnings, patch
from shaw at vranix.com.
2005-11-22 19:55:13 +11:00
Darren Tucker 593bae7e10 - dtucker@cvs.openbsd.org 2005/11/22 03:36:03
[hostfile.c]
     Correct format/arguments to debug call; spotted by shaw at vranix.com
     ok djm@
2005-11-22 19:43:26 +11:00
Darren Tucker f4732f6475 - dtucker@cvs.openbsd.org 2005/11/21 09:42:10
[auth-krb5.c]
     Perform Kerberos calls even for invalid users to prevent leaking
     information about account validity.  bz #975, patch originally from
     Senthil Kumar, sanity checked by Simon Wilkinson, tested by djm@, biorn@,
     ok markus@
2005-11-22 19:42:42 +11:00
Darren Tucker e8400da9d5 - millert@cvs.openbsd.org 2005/11/15 11:59:54
[includes.h]
     Include sys/queue.h explicitly instead of assuming some other header
     will pull it in.  At the moment it gets pulled in by sys/select.h
     (which ssh has no business including) via event.h.  OK markus@
     (ID sync only in -portable)
2005-11-22 19:41:33 +11:00
Darren Tucker 33f86bc284 - deraadt@cvs.openbsd.org 2005/11/12 18:38:15
[scp.c]
     avoid close(-1), as in rcp; ok cloder
2005-11-22 19:38:06 +11:00
Darren Tucker b736d8d829 - deraadt@cvs.openbsd.org 2005/11/12 18:37:59
[ssh-add.c]
     space
2005-11-22 19:37:08 +11:00
Darren Tucker 4123636471 - (dtucker) [openbsd-compat/openssl-compat.h] Add comment explaining what
is going on.
2005-11-20 14:09:59 +11:00
Darren Tucker cb6ecdea6c - (dtucker) [regress/reconfigure.sh] Fix potential race in the reconfigure
test: if sshd takes too long to reconfigure the subsequent connection will
   fail.  Zap pidfile before HUPing sshd which will rewrite it when it's ready.
2005-11-12 21:30:07 +11:00
Darren Tucker 5bfe1687dd - (dtucker) [configure.ac] Remove duplicate utimes() check. ok djm@ 2005-11-12 18:42:36 +11:00
Darren Tucker 3f9545ee67 - (dtucker) [configure.ac] Use "$AWK" instead of "awk" in gcc version test. 2005-11-12 15:20:52 +11:00
Darren Tucker 5a0bdf770c - (dtucker) [openbsd-compat/{realpath.c,stroll.c,rresvport.c}] $OpenBSD tag. 2005-11-12 14:28:05 +11:00
Darren Tucker 7cb2a78ae2 - (dtucker) [openbsd-compat/realpath.c] Sync $OpenBSD tag. 2005-11-12 14:14:52 +11:00
Darren Tucker 16fd99c727 - (dtucker) [openbsd-compat/getrrsetbyname.c] Restore Portable-specific
ifdef lost during sync.  Spotted by tim@.
2005-11-12 14:06:29 +11:00
Darren Tucker f032435de7 - (dtucker) [configure.ac] Try to get the gcc version number in a way that
doesn't change between versions, and use a safer default.
2005-11-10 21:30:36 +11:00
Darren Tucker 9d30d13922 - (dtucker) [openbsd-compat/sigact.h] Update from OpenBSD 1.2 -> 1.3.
Id and copyright sync only, there were no substantial changes we need.
2005-11-10 19:43:48 +11:00
Darren Tucker 581203438f typo 2005-11-10 19:31:37 +11:00
Darren Tucker ce1cb1f160 - (dtucker) [openbsd-compat/bsd-closefrom.c openbsd-compat/base64.c]
-Wall fixes from djm.
2005-11-10 19:31:08 +11:00
Darren Tucker 30d6974124 - (dtucker) [openbsd-compat/sigact.c] Update from OpenBSD 1.3 -> 1.4.
Id and copyright sync only, there were no substantial changes we need.
2005-11-10 19:29:12 +11:00
Darren Tucker fe80d7a068 - (dtucker) [openbsd-compat/bindresvport.c] Update from OpenBSD 1.16 -> 1.17. 2005-11-10 17:54:46 +11:00
Darren Tucker 6f15c07ce3 - (dtucker) [openbsd-compat/bindresvport.c] Add "OPENBSD ORIGINAL" marker. 2005-11-10 17:52:08 +11:00
Darren Tucker 91b34dc183 - (dtucker) [openbsd-compat/rresvport.c] Update from OpenBSD 1.6 -> 1.8. 2005-11-10 17:42:40 +11:00
Darren Tucker ffcd0ecf6b - (dtucker) [openbsd-compat/mktemp.c] Update from OpenBSD 1.17 -> 1.19. 2005-11-10 17:37:02 +11:00
Darren Tucker 8f0d8f8ea2 - (dtucker) [openbsd-compat/daemon.c] Update from OpenBSD 1.10 -> 1.13. 2005-11-10 17:33:00 +11:00
Darren Tucker 4e8c2490bb - (dtucker) [openbsd-compat/strsep.c] Update from OpenBSD 1.5 -> 1.6. 2005-11-10 17:28:35 +11:00
Darren Tucker b10b497682 - (dtucker) [openbsd-compat/daemon.c] Update from OpenBSD 1.5 -> 1.6. 2005-11-10 17:27:25 +11:00
Darren Tucker 2864039a7c - (dtucker) [openbsd-compat/inet_ntop.c] Update from OpenBSD 1.5 -> 1.7. 2005-11-10 17:25:26 +11:00
Darren Tucker de9d623960 - (dtucker) [openbsd-compat/inet_nto.c] Update from OpenBSD 1.4 -> 1.6. 2005-11-10 17:23:54 +11:00
Darren Tucker c7e05d679a - (dtucker) [openbsd-compat/inet_aton.c] Update from OpenBSD 1.7 -> 1.9. 2005-11-10 17:21:21 +11:00
Darren Tucker 0a149d19d3 - (dtucker) [openbsd-compat/getcwd.c] Replace lstat with fstat to match up
with OpenBSD code since we don't support platforms without fstat any more.
2005-11-10 17:15:06 +11:00
Darren Tucker 31ba53e333 - (dtucker) [openbsd-compat/getcwd.c] Update from OpenBSD 1.9 -> 1.14. 2005-11-10 17:11:29 +11:00
Darren Tucker 50a221ba7a - (dtucker) [openbsd-compat/glob.h] Update from OpenBSD 1.8 -> 1.9. 2005-11-10 17:03:22 +11:00
Darren Tucker 6524d4f161 - (dtucker) [openbsd-compat/glob.c] Update from OpenBSD 1.22 -> 1.25. 2005-11-10 17:02:21 +11:00
Darren Tucker d76b4c74f8 - (dtucker) [openbsd-compat/readpassphrase.h] Update from OpenBSD 1.3 -> 1.5. 2005-11-10 16:58:47 +11:00
Darren Tucker dbb631cebe - (dtucker) [openbsd-compat/readpassphrase.c] Update from OpenBSD 1.16 -> 1.18. 2005-11-10 16:56:28 +11:00
Darren Tucker f5ebfe9f68 - (dtucker) [openbsd-compat/strtoul.c] Update from OpenBSD 1.5 -> 1.7. 2005-11-10 16:48:10 +11:00
Darren Tucker f976e6f883 - (dtucker) [openbsd-compat/strtoll.c] Update from OpenBSD 1.4 -> 1.5.
Removal of rcsid.
2005-11-10 16:46:26 +11:00
Darren Tucker ad1dada0b4 - (dtucker) [openbsd-compat/basename.c] Update from OpenBSD 1.11 -> 1.14.
Removal of rcsid, will no longer strlcpy parts of the string.
2005-11-10 16:42:51 +11:00
Darren Tucker 09471d8a1f - (dtucker) [openbsd-compat/strmode.c] Update from OpenBSD 1.5 -> 1.7.
Removal of rcsid, "whiteout" inode type.
2005-11-10 16:38:54 +11:00
Darren Tucker 925d1de3fb - (dtucker) [openbsd-compat/sigact.h] Add "OPENBSD ORIGINAL" marker. 2005-11-10 16:31:55 +11:00
Darren Tucker 5224566303 - (dtucker) [openbsd-compat/strlcpy.c] Update from OpenBSD 1.8 -> 1.10. 2005-11-10 16:26:17 +11:00
Darren Tucker 7f24a0e647 - (dtucker) [openbsd-compat/{LOTS}] Move the "OPENBSD ORIGINAL" markers to
after the copyright notices.  Having them at the top next to the CVSIDs
   guarantees a conflict for each and every sync.
2005-11-10 16:18:56 +11:00
Darren Tucker 80c0d7eb88 - (dtucker) [openbsd-compat/strlcat.c] Sync OpenBSD revs 1.11 - 1.12 (removal
of "register").
2005-11-10 16:05:37 +11:00
Darren Tucker e5a2b5288d - (dtucker) [openbsd-compat/getgrouplist.c] Sync OpenBSD revs 1.10 - 1.2 (ANSI
prototypes, removal of "register").
2005-11-10 15:56:44 +11:00
Darren Tucker b0288098c9 - (dtucker) [configure.ac] Disable pointer-sign warnings on gcc 4.0+
since they're not useful right now.  Patch from djm@.
2005-11-10 14:46:48 +11:00
Darren Tucker 618db97fe1 - (dtucker) [auth-krb5.c] Fix -Wsign-compare warning in non-Heimdal path.
Patch from djm@.
2005-11-10 14:43:11 +11:00
Darren Tucker 063ba7455f - (dtucker) [openbsd-compat/setenv.c] Sync changes from OpenBSD setenv.c
revs 1.7 - 1.9.
2005-11-10 10:38:45 +11:00
Darren Tucker 32b531067d - (dtucker) [openbsd-compat/getenv.c] Make __findenv static, remove
unnecessary prototype.
2005-11-10 10:13:06 +11:00
Darren Tucker b8c89d14bb - (dtucker) [openbsd-compat/getenv.c] Merge changes for __findenv from
OpenBSD getenv.c revs 1.4 - 1.8 (ANSIfication of arguments, removal of
   "register").
2005-11-10 10:10:10 +11:00
Damien Miller 9b59ada7ca - (djm) [openbsd-compat/getrrsetbyname.c] Sync to latest OpenBSD version,
resolving memory leak bz#1111 reported by kremenek AT cs.stanford.edu;
   ok dtucker@
2005-11-05 16:56:52 +11:00
Darren Tucker 3a38c5a856 - (dtucker) [README.platform] Add PAM section. 2005-11-05 16:28:35 +11:00
Damien Miller 5fd8b02b44 - djm@cvs.openbsd.org 2005/11/05 05:01:15
[bufaux.c]
     Fix leaks in error paths, bz #1109 and #1110 reported by kremenek AT
     cs.stanford.edu; ok dtucker@
2005-11-05 16:04:36 +11:00
Damien Miller 19bb3a57f8 - djm@cvs.openbsd.org 2005/11/04 05:15:59
[kex.c kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c]
     remove hardcoded hash lengths in key exchange code, allowing
     implementation of KEX methods with different hashes (e.g. SHA-256);
     ok markus@ dtucker@ stevesk@
2005-11-05 15:19:35 +11:00
Damien Miller 24ecf61261 - dtucker@cvs.openbsd.org 2005/11/03 13:38:29
[canohost.c]
     Cache reverse lookups with and without DNS separately; ok markus@
2005-11-05 15:16:52 +11:00
Damien Miller 83d0d39d0e - jmc@cvs.openbsd.org 2005/10/31 19:55:25
[ssh-keygen.1]
     grammar;
2005-11-05 15:16:27 +11:00
Damien Miller c7e2d3fa10 - djm@cvs.openbsd.org 2005/10/31 11:48:29
[serverloop.c]
     make sure we clean up wtmp, etc. file when we receive a SIGTERM,
     SIGINT or SIGQUIT when running without privilege separation (the
     normal privsep case is already OK). Patch mainly by dtucker@ and
     senthilkumar_sen AT hotpop.com; ok dtucker@
2005-11-05 15:16:12 +11:00
Damien Miller f14be5ce03 - djm@cvs.openbsd.org 2005/10/31 11:12:49
[ssh-keygen.1 ssh-keygen.c]
     generate a protocol 2 RSA key by default
2005-11-05 15:15:49 +11:00
Damien Miller 653b93be5d - dtucker@cvs.openbsd.org 2005/10/31 06:15:04
[sftp.c]
     Fix sorting with "ls -1" command. From Robert Tsai, "looks right" deraadt@
2005-11-05 15:15:23 +11:00