Commit Graph

4590 Commits

Author SHA1 Message Date
Darren Tucker f35014af79 typo 2006-03-04 09:00:19 +11:00
Darren Tucker 890909ec48 - (dtucker) [gss-serv-krb5.c] Bug #1166: Correct #ifdefs for gssapi_krb5.h
includes.  Patch from gentoo.riverrat at gmail.com.
2006-03-04 08:59:39 +11:00
Darren Tucker 18614c254d - (dtucker) [contrib/cygwin/ssh-host-config] Require use of lastlog as a
file rather than directory, required as Cygwin will be importing lastlog(1).
   Also tightens up permissions on the file.  Patch from vinschen@redhat.com.
2006-03-04 08:50:31 +11:00
Darren Tucker 54b75fe742 - (dtucker) [configure.ac] Bug #1156: QNX apparently needs SSHD_ACQUIRES_CTTY
patch from kraai at ftbfs.org.
2006-02-26 12:31:48 +11:00
Darren Tucker a4904f7bf1 - (dtucker) [sshd_config sshd_config.5] Update UsePAM to reflect current
reality.  Pointed out by tryponraj at gmail.com.
2006-02-23 21:35:30 +11:00
Darren Tucker 94413cf32b - (dtucker) [openbsd-compat/openssl-compat.{c,h}] Minor tidy up: only
compile in compat code if required.
2006-02-22 22:24:47 +11:00
Darren Tucker 3322e0d421 - (dtucker) [openbsd-compat/openssl-compat.h] Prevent warning about
redefinition of SSLeay_add_all_algorithms.
2006-02-22 00:00:27 +11:00
Darren Tucker fabdb6c290 - (dtucker) [INSTALL configure.ac openbsd-compat/openssl-compat.{c,h}]
Add optional enabling of OpenSSL's (hardware) Engine support, via
   configure --with-ssl-engine.  Based in part on a diff by michal at
   logix.cz.
2006-02-20 20:17:35 +11:00
Darren Tucker 4881c371ce - (dtucker) [Makefile.in configure.ac, added openbsd-compat/regress/]
Add first attempt at regress tests for compat library.  ok djm@
2006-02-19 22:50:20 +11:00
Tim Rice bf209f5901 - (tim) [buildpkg.sh.in] Make the names consistent.
s/pkg_post_make_install_fixes.sh/pkg-post-make-install-fixes.sh/ OK dtucker@
2006-02-13 12:46:44 -08:00
Darren Tucker 6163350eb9 - (dtucker) [README version.h contrib/caldera/openssh.spec
contrib/redhat/openssh.spec contrib/suse/openssh.spec] Bump version
   strings to match 4.3p2 release.
2006-02-12 16:48:56 +11:00
Tim Rice 2f993465d4 - (tim) [configure.ac] Bug #1149. Disable /etc/default/login check for QNX. 2006-02-11 18:37:48 -08:00
Darren Tucker 84af61555a - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Make loop counter unsigned
to silence compiler warning, from vinschen at redhat.com.
2006-02-12 11:59:08 +11:00
Darren Tucker 988b3fd161 - (dtucker) [configure.ac] Typo in Ultrix and NewsOS sections (NEED_SETPRGP
-> NEED_SETPGRP), reported by Berhard Simon.  ok tim@
2006-02-08 22:11:27 +11:00
Tim Rice 83d2f5fedf - (tim) [session.c] Logout records were not updated on systems with
post auth privsep disabled due to bug 1086 changes. Analysis and patch
   by vinschen at redhat.com. OK tim@, dtucker@.
2006-02-07 15:17:44 -08:00
Tim Rice ac9b0609e1 - (tim) [configure.ac] Remove unnecessary tests for net/if.h and
netinet/in_systm.h. OK dtucker@.
2006-02-05 11:27:10 -08:00
Tim Rice 70335a6b5f - (tim) [configure.ac] Bug #1149. Changes in QNX section only. Patch by
kraai at ftbfs.org.
2006-02-04 17:42:58 -08:00
Tim Rice 0daad78fab - (tim) [configure.ac] Add AC_REVISION. Add sys/time.h to lastlog.h test
for Solaris. OK dtucker@.
2006-02-04 17:33:55 -08:00
Tim Rice fd80ddcb23 - (tim) [configure.ac] test for egrep (AC_PROG_EGREP) before first
AC_CHECK_HEADERS test. Without it, if AC_CHECK_HEADERS is first run
   by a platform specific check, builtin standard includes tests will be
   skipped on the other platforms.
   Analysis and suggestion by vinschen at redhat.com, patch by dtucker@.
   OK tim@, djm@.
2006-02-02 19:11:56 -08:00
Darren Tucker cc7c212830 - (dtucker) [configure.ac] Bug #1148: Fix "crippled AES" test so that it
works with picky compilers.  Patch from alex.kiernan at thus.net.
2006-02-02 18:44:19 +11:00
Damien Miller bfd52192f3 - (djm) Release OpenSSH 4.3p1 2006-02-01 22:32:17 +11:00
Damien Miller c79824bbab - markus@cvs.openbsd.org 2006/02/01 11:27:22
[version.h]
     openssh 4.3
2006-02-01 22:27:31 +11:00
Damien Miller 0d689568a4 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
[contrib/suse/openssh.spec] Update versions ahead of release
2006-02-01 22:10:47 +11:00
Damien Miller 2ac05779f7 - jmc@cvs.openbsd.org 2006/02/01 09:11:41
[sshd.8]
     small tweak;
2006-02-01 22:05:42 +11:00
Damien Miller 8bbdf90f33 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2006/02/01 09:06:50
     [sshd.8]
     - merge sections on protocols 1 and 2 into a single section
     - remove configuration file section
     ok markus
2006-02-01 22:05:25 +11:00
Damien Miller e682cb0780 - (djm) [regress/test-exec.sh] Try 'logname' as well as 'whoami' to
determine the user's login name - needed for regress tests on Solaris
   10 and OpenSolaris
2006-02-01 11:21:01 +11:00
Damien Miller 923f1ce0b7 - djm@cvs.openbsd.org 2006/01/31 10:35:43
[scp.c]
     "scp a b c" shouldn't clobber "c" when it is not a directory, report and
     fix from biorn@; ok markus@
2006-01-31 22:11:37 +11:00
Damien Miller 50c6eedce3 - djm@cvs.openbsd.org 2006/01/31 10:36:33
[scp.sh]
     regress test for "scp a b c" where "c" is not a directory
2006-01-31 22:06:41 +11:00
Damien Miller 7410ad79f8 - djm@cvs.openbsd.org 2006/01/31 10:23:23
[scp.sh]
     regression test for CVE-2006-0225 written by dtucker@
2006-01-31 22:06:14 +11:00
Damien Miller 0b996462f8 - djm@cvs.openbsd.org 2006/01/27 06:49:21
[scp.sh]
     regress test for local to local scp copies; ok dtucker@
2006-01-31 22:05:23 +11:00
Damien Miller 15a815bb64 - dtucker@cvs.openbsd.org 2005/12/14 04:36:39
[regress/scp-ssh-wrapper.sh]
     Fix assumption about how many args scp will pass; ok djm@
     NB. ID sync only, we already had this
2006-01-31 22:03:11 +11:00
Damien Miller 27a0dfaea9 - grunk@cvs.openbsd.org 2005/11/14 21:25:56
[regress/agent-getpeereid.sh]
     all other scripts in this dir use $SUDO, not 'sudo', so pull this even
     ok markus@
2006-01-31 22:02:16 +11:00
Damien Miller 10c5fa7e87 - markus@cvs.openbsd.org 2005/06/30 11:02:37
[regress/scp.sh]
     allow SUDO=sudo; from Alexander Bluhm
2006-01-31 22:01:42 +11:00
Damien Miller ec7b2f12f0 - djm@cvs.openbsd.org 2005/05/24 04:10:54
[regress/try-ciphers.sh]
     oops, new arcfour modes here too
2006-01-31 21:59:35 +11:00
Damien Miller 76be6b8765 - djm@cvs.openbsd.org 2005/05/20 23:14:15
[regress/test-exec.sh]
     force addressfamily=inet for tests, unbreaking dynamic-forward regress for
     recently committed nc SOCKS5 changes
2006-01-31 21:59:01 +11:00
Damien Miller f0cbb3d7cb - (djm) Sync regress tests to OpenBSD:
- dtucker@cvs.openbsd.org 2005/03/10 10:20:39
     [regress/forwarding.sh]
     Regress test for ClearAllForwardings (bz #994); ok markus@
2006-01-31 21:58:23 +11:00
Damien Miller c34940c1f5 - dtucker@cvs.openbsd.org 2005/04/25 09:54:09
[regress/multiplex.sh]
     Don't call cleanup in multiplex as test-exec will cleanup anyway
     found by tim@, ok djm@
     NB. ID sync only, we already had this
2006-01-31 21:57:27 +11:00
Damien Miller edaeff5b9d - dtucker@cvs.openbsd.org 2005/03/10 10:20:39
[regress/forwarding.sh]
     Regress test for ClearAllForwardings (bz #994); ok markus@
2006-01-31 21:56:24 +11:00
Damien Miller 3eec6b73a2 - djm@cvs.openbsd.org 2006/01/31 10:19:02
[misc.c misc.h scp.c sftp.c]
     fix local arbitrary command execution vulnerability on local/local and
     remote/remote copies (CVE-2006-0225, bz #1094), patch by
     t8m AT centrum.cz, polished by dtucker@ and myself; ok markus@
2006-01-31 21:49:27 +11:00
Damien Miller b5dd55cccc - jmc@cvs.openbsd.org 2006/01/30 13:37:49
[ssh.1]
     remove an incorrect sentence;
     reported by roumen petrov;
     ok djm markus
2006-01-31 21:47:58 +11:00
Damien Miller e204f6aa0d - reyk@cvs.openbsd.org 2006/01/30 12:22:22
[channels.c]
     mark channel as write failed or dead instead of read failed on error
     of the channel output filter.
     ok markus@
2006-01-31 21:47:15 +11:00
Damien Miller bbc59094b9 - jmc@cvs.openbsd.org 2006/01/26 08:47:56
[ssh.1]
     add a section on verifying host keys in dns;
     written with a lot of help from jakob;
     feedback dtucker/markus;
     ok markus
2006-01-31 21:46:51 +11:00
Damien Miller 7602cba59d - jmc@cvs.openbsd.org 2006/01/25 09:07:22
[sshd.8]
     move subsections to full sections;
2006-01-31 21:46:20 +11:00
Damien Miller 99cc4a8f1e - jmc@cvs.openbsd.org 2006/01/25 09:04:34
[sshd.8]
     move the options description up the page, and a few additional tweaks
     whilst in here;
     ok markus
2006-01-31 21:45:53 +11:00
Damien Miller ddfddf1ba3 - jmc@cvs.openbsd.org 2006/01/20 11:21:45
[ssh_config.5]
     - word change, agreed w/ markus
     - consistency fixes
2006-01-31 21:39:03 +11:00
Darren Tucker fbea76400f - (dtucker) [configure.ac opensshd.init.in] Bug #1144: Use /bin/sh for the
opensshd.init script interpretter if /sbin/sh does not exist.  ok tim@
2006-01-30 00:22:39 +11:00
Darren Tucker 1d4ebbf143 Correct format in debug message 2006-01-29 16:46:13 +11:00
Darren Tucker 62388b2b63 - dtucker@cvs.openbsd.org 2006/01/20 00:14:55
[scp.1 ssh.1 ssh_config.5 sftp.1]
     Document RekeyLimit.  Based on patch from jan.iven at cern.ch from mindrot
     #1056 with feedback from jmc, djm and markus; ok jmc@ djm@
2006-01-20 11:31:47 +11:00
Darren Tucker 248dd13c46 - jmc@cvs.openbsd.org 2006/01/18 10:53:29
[ssh.1]
     add a section on ssh-based vpn, based on reyk's README.tun;
2006-01-20 11:30:58 +11:00
Darren Tucker 94299ec251 - jmc@cvs.openbsd.org 2006/01/15 17:37:05
[ssh.1]
     correction from deraadt
2006-01-20 11:30:14 +11:00