Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at https://github.com/powershell/Win32-OpenSSH
Go to file
djm@openbsd.org 51b64e4412 upstream commit
fix KRL generation when multiple CAs are in use

We would generate an invalid KRL when revoking certs by serial
number for multiple CA keys due to a section being written out
twice.

Also extend the regress test to catch this case by having it
produce a multi-CA KRL.

Reported by peter AT pean.org
2014-11-19 09:20:14 +11:00
contrib Prepare scripts for next Cygwin release 2014-11-05 11:01:31 +11:00
openbsd-compat - (djm) [openbsd-compat/Makefile.in openbsd-compat/kludge-fd_set.c] 2014-10-01 09:43:07 +10:00
regress upstream commit 2014-11-19 09:20:14 +11:00
scard - (djm) [INSTALL Makefile.in README.smartcard configure.ac scard-opensc.c] 2010-02-12 09:34:22 +11:00
.cvsignore - (djm) [Makefile.in WARNING.RNG aclocal.m4 buildpkg.sh.in configure.ac] 2011-05-05 13:48:37 +10:00
CREDITS - (djm) [CREDITS LICENCE Makefile.in auth.c configure.ac includes.h ] 2006-08-31 03:24:41 +10:00
INSTALL 20140908 2014-09-09 12:23:10 +10:00
LICENCE - (dtucker) [INSTALL LICENCE configure.ac openbsd-compat/Makefile.in 2011-11-04 11:25:24 +11:00
Makefile.in - (djm) [Makefile.in] Make TEST_SHELL a variable; "good idea" tim@ 2014-08-30 16:23:06 +10:00
OVERVIEW - deraadt@cvs.openbsd.org 2006/08/03 03:34:42 2006-08-05 12:39:39 +10:00
PROTOCOL - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
PROTOCOL.agent - djm@cvs.openbsd.org 2013/01/02 00:33:49 2013-01-09 15:56:13 +11:00
PROTOCOL.certkeys - djm@cvs.openbsd.org 2012/03/28 07:23:22 2012-04-22 11:08:30 +10:00
PROTOCOL.chacha20poly1305 - djm@cvs.openbsd.org 2013/12/02 02:50:27 2013-12-05 10:22:57 +11:00
PROTOCOL.key - markus@cvs.openbsd.org 2013/12/06 13:34:54 2013-12-07 10:41:55 +11:00
PROTOCOL.krl - djm@cvs.openbsd.org 2013/01/17 23:00:01 2013-01-18 11:44:04 +11:00
PROTOCOL.mux - djm@cvs.openbsd.org 2012/06/01 00:49:35 2012-06-20 21:51:29 +10:00
README - (djm) [README contrib/caldera/openssh.spec] 2014-08-10 11:35:05 +10:00
README.dns - jakob@cvs.openbsd.org 2003/10/14 19:43:23 2003-10-15 16:07:53 +10:00
README.platform - (dtucker) [README.platform] Add text about development packages, based on 2009-08-29 09:14:48 +10:00
README.privsep - (djm) [README README.privsep] Mention FreeBSD and NetBSD as being 2005-06-05 09:21:41 +10:00
README.tun - deraadt@cvs.openbsd.org 2006/03/28 00:12:31 2006-03-31 23:10:51 +11:00
TODO - (dtucker) [TODO WARNING.RNG] Update to reflect current reality. ok djm@ 2004-12-06 22:40:10 +11:00
aclocal.m4 - (djm) [configure.ac aclocal.m4] More tests to detect fallout from 2014-01-22 21:30:12 +11:00
addrmatch.c - dtucker@cvs.openbsd.org 2014/01/19 11:21:51 2014-01-19 22:37:02 +11:00
atomicio.c - (djm) [configure.ac atomicio.c] Kludge around NetBSD offering 2014-01-30 11:26:46 +11:00
atomicio.h - djm@cvs.openbsd.org 2010/09/22 22:58:51 2010-09-24 22:15:11 +10:00
audit-bsm.c - (dtucker) [audit-bsm.c configure.ac] bug #1968: enable workarounds for BSM 2012-02-24 10:40:41 +11:00
audit-linux.c - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
audit.c - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
audit.h - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
auth-bsdauth.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
auth-chall.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth-krb5.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth-options.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth-options.h - djm@cvs.openbsd.org 2010/05/07 11:30:30 2010-05-10 11:58:03 +10:00
auth-pam.c - (dtucker) [auth-pam.c] bz#2163: check return value from pam_get_item(). 2013-12-19 11:31:44 +11:00
auth-pam.h - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #890: Send output from 2004-09-11 22:17:26 +10:00
auth-passwd.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth-rh-rsa.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth-rhosts.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth-rsa.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth-shadow.c - (dtucker) [auth-shadow.c loginrec.c] Include time.h for time(2) prototype. 2007-04-29 12:10:57 +10:00
auth-sia.c - dtucker [auth-sia.c] Roll back the change for bug #1241 as it apparently 2009-08-28 10:16:44 +10:00
auth-sia.h - (dtucker) [auth-passwd.c auth-sia.h] Remove duplicate definitions of 2005-04-05 21:00:47 +10:00
auth-skey.c - (dtucker) [auth-skey.c] Add log.h to fix build --with-skey. 2011-08-28 04:50:16 +10:00
auth.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth.h - djm@cvs.openbsd.org 2014/07/03 11:16:55 2014-07-03 21:29:38 +10:00
auth1.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth2-chall.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth2-gss.c - (dtucker) [auth2-gss.c gss-serv-krb5.c] Include misc.h for fwd_opts, used 2014-07-19 06:23:18 +10:00
auth2-hostbased.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth2-kbdint.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth2-none.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth2-passwd.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth2-pubkey.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
auth2.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
authfd.c - markus@cvs.openbsd.org 2014/04/29 18:01:49 2014-05-15 14:24:09 +10:00
authfd.h - djm@cvs.openbsd.org 2009/08/27 17:44:52 2009-10-07 08:47:02 +11:00
authfile.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
authfile.h - djm@cvs.openbsd.org 2014/07/03 23:18:35 2014-07-06 09:27:06 +10:00
blocks.c - (dtucker) [blocks.c fe25519.c ge25519.c hash.c sc25519.c verify.c] Include 2014-01-17 12:43:43 +11:00
bufaux.c - (dtucker) [bufaux.c bufbn.c bufec.c buffer.c] Pull in includes.h for 2014-06-11 13:39:24 +10:00
bufbn.c - (dtucker) [bufaux.c bufbn.c bufec.c buffer.c] Pull in includes.h for 2014-06-11 13:39:24 +10:00
bufec.c - (djm) [bufec.c] Skip this file on !ECC OpenSSL 2014-08-26 08:37:47 +10:00
buffer.c - (dtucker) [bufaux.c bufbn.c bufec.c buffer.c] Pull in includes.h for 2014-06-11 13:39:24 +10:00
buffer.h - djm@cvs.openbsd.org 2014/04/30 05:29:56 2014-05-15 14:33:43 +10:00
buildpkg.sh.in - (tim) [buildpkg.sh.in] Double up on some backslashes so they end up in 2012-10-18 21:38:58 -07:00
canohost.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
canohost.h - (dtucker) [auth2-jpake.c auth2.c canohost.h session.c] Whitespace and 2009-06-21 19:50:08 +10:00
chacha.c - djm@cvs.openbsd.org 2013/11/21 00:45:44 2013-11-21 14:12:23 +11:00
chacha.h - djm@cvs.openbsd.org 2014/05/02 03:27:54 2014-05-15 14:37:03 +10:00
channels.c upstream commit 2014-10-13 11:39:18 +11:00
channels.h - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
cipher-3des1.c - djm@cvs.openbsd.org 2014/06/30 12:54:39 2014-07-02 15:33:09 +10:00
cipher-aes.c - (dtucker) [M auth-chall.c auth-krb5.c auth-pam.c cipher-aes.c cipher-ctr.c 2013-06-02 08:07:31 +10:00
cipher-aesctr.c - markus@cvs.openbsd.org 2014/04/29 18:01:49 2014-05-15 14:24:09 +10:00
cipher-aesctr.h - markus@cvs.openbsd.org 2014/04/29 18:01:49 2014-05-15 14:24:09 +10:00
cipher-bf1.c - djm@cvs.openbsd.org 2010/10/01 23:05:32 2010-10-07 22:06:42 +11:00
cipher-chachapoly.c - jsing@cvs.openbsd.org 2014/07/03 12:42:16 2014-07-04 08:59:01 +10:00
cipher-chachapoly.h - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
cipher-ctr.c - (dtucker) [M auth-chall.c auth-krb5.c auth-pam.c cipher-aes.c cipher-ctr.c 2013-06-02 08:07:31 +10:00
cipher.c - (dtucker) [cipher.c openbsd-compat/openssl-compat.h] Restore the bits 2014-07-21 02:24:59 +10:00
cipher.h - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
cleanup.c - (djm) [auth-pam.c auth-shadow.c auth2-none.c cleanup.c sshd.c] 2006-08-05 14:07:20 +10:00
clientloop.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
clientloop.h - dtucker@cvs.openbsd.org 2013/06/02 23:36:29 2013-06-06 08:11:40 +10:00
compat.c upstream commit 2014-10-13 11:39:23 +11:00
compat.h - djm@cvs.openbsd.org 2014/04/18 23:52:25 2014-04-20 13:25:30 +10:00
compress.c - deraadt@cvs.openbsd.org 2010/09/08 04:13:31 2010-09-10 11:20:59 +10:00
compress.h - djm@cvs.openbsd.org 2006/03/25 22:22:43 2006-03-26 14:30:00 +11:00
config.guess - (djm) [config.guess config.sub] Update to last versions before they switch 2013-04-18 11:26:25 +10:00
config.sub - (djm) [config.guess config.sub] Update to last versions before they switch 2013-04-18 11:26:25 +10:00
configure.ac include version number in OpenSSL-too-old error 2014-10-30 10:45:41 +11:00
crc32.c - stevesk@cvs.openbsd.org 2006/04/22 18:29:33 2006-04-23 12:12:24 +10:00
crc32.h - djm@cvs.openbsd.org 2006/03/25 22:22:43 2006-03-26 14:30:00 +11:00
crypto_api.h - (dtucker) [crypto_api.h] Wrap stdlib.h include inside #ifdef HAVE_STDINT_H. 2014-01-17 12:31:33 +11:00
deattack.c - djm@cvs.openbsd.org 2006/09/16 19:53:37 2006-09-17 06:08:53 +10:00
deattack.h - djm@cvs.openbsd.org 2006/09/16 19:53:37 2006-09-17 06:08:53 +10:00
defines.h - (djm) [defines.h sshbuf.c] Move __predict_true|false to defines.h and 2014-09-03 05:33:25 +10:00
dh.c - djm@cvs.openbsd.org 2013/11/21 00:45:44 2013-11-21 14:12:23 +11:00
dh.h - dtucker@cvs.openbsd.org 2013/10/08 11:42:13 2013-10-10 10:32:39 +11:00
digest-libc.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
digest-openssl.c - (djm) [digest-openssl.c] Preserve array order when disabling digests. 2014-07-17 09:01:25 +10:00
digest.h - djm@cvs.openbsd.org 2014/07/03 04:36:45 2014-07-03 21:25:03 +10:00
dispatch.c - stevesk@cvs.openbsd.org 2008/10/31 15:05:34 2008-11-03 19:26:00 +11:00
dispatch.h - (djm) [auth.h dispatch.h kex.h] sprinkle in signal.h to get 2006-04-23 12:28:53 +10:00
dns.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
dns.h - logan@cvs.openbsd.org 2014/04/20 09:24:26 2014-05-15 13:45:58 +10:00
ed25519.c - markus@cvs.openbsd.org 2013/12/09 11:03:45 2013-12-18 17:48:11 +11:00
entropy.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
entropy.h - (dtucker) [entropy.h] Bug #1932: remove old definition of init_rng. From 2011-09-09 11:29:40 +10:00
fatal.c - deraadt@cvs.openbsd.org 2006/08/03 03:34:42 2006-08-05 12:39:39 +10:00
fe25519.c - (dtucker) [blocks.c fe25519.c ge25519.c hash.c sc25519.c verify.c] Include 2014-01-17 12:43:43 +11:00
fe25519.h - markus@cvs.openbsd.org 2013/12/09 11:03:45 2013-12-18 17:48:11 +11:00
fixalgorithms - (dtucker) [Makefile.in configure.ac fixalgorithms] Remove unsupported 2013-06-11 11:26:10 +10:00
fixpaths - (djm) PERL-free fixpaths from stuge-openssh-unix-dev@cdy.org 2002-12-05 20:59:33 +11:00
fixprogs - djm@cvs.openbsd.org 2003/11/21 11:57:03 2003-11-21 23:48:55 +11:00
ge25519.c - (dtucker) [blocks.c fe25519.c ge25519.c hash.c sc25519.c verify.c] Include 2014-01-17 12:43:43 +11:00
ge25519.h - markus@cvs.openbsd.org 2013/12/09 11:03:45 2013-12-18 17:48:11 +11:00
ge25519_base.data - markus@cvs.openbsd.org 2013/12/09 11:03:45 2013-12-18 17:48:11 +11:00
groupaccess.c - (dtucker) [M auth-chall.c auth-krb5.c auth-pam.c cipher-aes.c cipher-ctr.c 2013-06-02 08:07:31 +10:00
groupaccess.h - djm@cvs.openbsd.org 2008/07/04 03:44:59 2008-07-04 13:51:12 +10:00
gss-genr.c - djm@cvs.openbsd.org 2013/11/08 00:39:15 2013-11-08 12:19:55 +11:00
gss-serv-krb5.c - (dtucker) [auth2-gss.c gss-serv-krb5.c] Include misc.h for fwd_opts, used 2014-07-19 06:23:18 +10:00
gss-serv.c - djm@cvs.openbsd.org 2014/07/03 03:34:09 2014-07-03 21:24:19 +10:00
hash.c - (dtucker) [blocks.c fe25519.c ge25519.c hash.c sc25519.c verify.c] Include 2014-01-17 12:43:43 +11:00
hmac.c - markus@cvs.openbsd.org 2014/01/27 18:58:14 2014-02-04 11:02:42 +11:00
hmac.h - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
hostfile.c upstream commit 2014-10-20 14:41:44 +11:00
hostfile.h - djm@cvs.openbsd.org 2013/07/12 00:19:59 2013-07-18 16:12:44 +10:00
includes.h - (dtucker) [includes.h] Check if _GNU_SOURCE is already defined before 2013-03-22 12:51:09 +11:00
install-sh - djm@cvs.openbsd.org 2003/11/21 11:57:03 2003-11-21 23:48:55 +11:00
kex.c remove duplicated KEX_DH1 entry 2014-10-12 12:35:48 +11:00
kex.h - djm@cvs.openbsd.org 2014/05/02 03:27:54 2014-05-15 14:37:03 +10:00
kexc25519.c - djm@cvs.openbsd.org 2014/05/02 03:27:54 2014-05-15 14:37:03 +10:00
kexc25519c.c - djm@cvs.openbsd.org 2014/01/12 08:13:13 2014-01-12 19:21:22 +11:00
kexc25519s.c - djm@cvs.openbsd.org 2014/01/12 08:13:13 2014-01-12 19:21:22 +11:00
kexdh.c - djm@cvs.openbsd.org 2014/01/09 23:20:00 2014-01-10 10:58:53 +11:00
kexdhc.c - djm@cvs.openbsd.org 2014/02/02 03:44:32 2014-02-04 11:20:14 +11:00
kexdhs.c - djm@cvs.openbsd.org 2014/02/02 03:44:32 2014-02-04 11:20:14 +11:00
kexecdh.c - djm@cvs.openbsd.org 2014/01/09 23:20:00 2014-01-10 10:58:53 +11:00
kexecdhc.c - djm@cvs.openbsd.org 2014/02/02 03:44:32 2014-02-04 11:20:14 +11:00
kexecdhs.c - djm@cvs.openbsd.org 2014/02/02 03:44:32 2014-02-04 11:20:14 +11:00
kexgex.c - djm@cvs.openbsd.org 2014/01/09 23:20:00 2014-01-10 10:58:53 +11:00
kexgexc.c - djm@cvs.openbsd.org 2014/02/02 03:44:32 2014-02-04 11:20:14 +11:00
kexgexs.c - djm@cvs.openbsd.org 2014/02/02 03:44:32 2014-02-04 11:20:14 +11:00
key.c - dtucker@cvs.openbsd.org 2014/07/22 01:18:50 2014-07-23 09:40:46 +10:00
key.h - (djm) [key.h] Fix ifdefs for no-ECC OpenSSL 2014-08-21 10:48:41 +10:00
krl.c upstream commit 2014-11-17 11:20:39 +11:00
krl.h - djm@cvs.openbsd.org 2013/01/17 23:00:01 2013-01-18 11:44:04 +11:00
log.c - dtucker@cvs.openbsd.org 2013/05/16 09:08:41 2013-05-16 20:32:29 +10:00
log.h - dtucker@cvs.openbsd.org 2013/04/07 02:10:33 2013-04-23 15:21:06 +10:00
loginrec.c - (dtucker) [loginrec.c] Cast to the types specfied in the format 2014-01-17 12:23:23 +11:00
loginrec.h - (djm) [loginrec.c loginrec.h] Use correct uid_t/pid_t types instead of 2010-11-05 10:52:37 +11:00
logintest.c - (dtucker) [configure.ac defines.h loginrec.c logintest.c] Bug #1732: enable 2010-04-09 18:13:27 +10:00
mac.c - naddy@cvs.openbsd.org 2014/04/30 19:07:48 2014-05-15 14:35:03 +10:00
mac.h - dtucker@cvs.openbsd.org 2013/11/07 11:58:27 2013-11-08 12:16:49 +11:00
match.c - deraadt@cvs.openbsd.org 2013/11/20 20:54:10 2013-11-21 13:57:15 +11:00
match.h - OpenBSD CVS Sync 2010-02-27 07:55:05 +11:00
md-sha256.c - deraadt@cvs.openbsd.org 2006/08/03 03:34:42 2006-08-05 12:39:39 +10:00
md5crypt.c - (djm) [audit-bsm.c audit.c auth-bsdauth.c auth-chall.c auth-pam.c] 2006-09-01 15:38:36 +10:00
md5crypt.h - (djm) KNF on md5crypt.c 2003-05-19 00:46:46 +10:00
mdoc2man.awk - (dtucker) [mdoc2man.awk] Teach it to understand the .Ux macro. 2009-10-24 11:52:42 +11:00
misc.c upstream commit 2014-10-27 16:34:52 +11:00
misc.h - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
mkinstalldirs - djm@cvs.openbsd.org 2003/11/21 11:57:03 2003-11-21 23:48:55 +11:00
moduli - (dtucker) [moduli] Import new moduli file. 2012-08-30 10:42:47 +10:00
moduli.5 - jmc@cvs.openbsd.org 2012/09/26 17:34:38 2012-11-07 08:36:00 +11:00
moduli.c upstream commit 2014-10-13 11:37:21 +11:00
monitor.c - (djm) [monitor.c sshd.c] SIGXFSZ needs to be ignored in postauth 2014-08-27 04:11:55 +10:00
monitor.h - djm@cvs.openbsd.org 2014/01/29 06:18:35 2014-02-04 11:12:56 +11:00
monitor_fdpass.c - (djm) [monitor_fdpass.c] Use sys/poll.h if poll.h doesn't exist; 2014-07-03 13:29:50 +10:00
monitor_fdpass.h - djm@cvs.openbsd.org 2007/09/04 03:21:03 2007-09-17 12:04:08 +10:00
monitor_mm.c - tedu@cvs.openbsd.org 2014/01/04 17:50:55 2014-01-10 10:37:05 +11:00
monitor_mm.h - tedu@cvs.openbsd.org 2014/01/04 17:50:55 2014-01-10 10:37:05 +11:00
monitor_wrap.c - markus@cvs.openbsd.org 2014/04/29 18:01:49 2014-05-15 14:24:09 +10:00
monitor_wrap.h - djm@cvs.openbsd.org 2014/01/29 06:18:35 2014-02-04 11:12:56 +11:00
msg.c - deraadt@cvs.openbsd.org 2006/08/03 03:34:42 2006-08-05 12:39:39 +10:00
msg.h - djm@cvs.openbsd.org 2006/03/25 22:22:43 2006-03-26 14:30:00 +11:00
mux.c - djm@cvs.openbsd.org 2014/07/17 07:22:19 2014-07-18 15:04:10 +10:00
myproposal.h - (djm) [myproposal.h] Make curve25519 KEX dependent on 2014-08-19 11:14:36 +10:00
nchan.c - djm@cvs.openbsd.org 2010/01/26 01:28:35 2010-01-26 13:26:22 +11:00
nchan.ms - djm@cvs.openbsd.org 2003/11/21 11:57:03 2003-11-21 23:48:55 +11:00
nchan2.ms - djm@cvs.openbsd.org 2008/05/15 23:52:24 2008-05-19 16:08:20 +10:00
openssh.xml.in - (tim) [buildpkg.sh.in openssh.xml.in] Allow more flexibility where smf(5) 2007-07-24 21:16:07 -07:00
opensshd.init.in 20140314 2014-03-14 12:45:01 -07:00
packet.c upstream commit 2014-10-27 16:34:52 +11:00
packet.h - markus@cvs.openbsd.org 2014/05/03 17:20:34 2014-05-15 14:37:39 +10:00
pathnames.h - markus@cvs.openbsd.org 2013/12/06 13:39:49 2013-12-07 11:24:01 +11:00
pkcs11.h - deraadt@cvs.openbsd.org 2013/11/26 19:15:09 2013-12-05 10:22:03 +11:00
platform.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
platform.h - (dtucker) [platform.c platform.h sshd.c] bz#2156: restore Linux oom_adj 2013-09-22 19:02:40 +10:00
poly1305.c - (dtucker) [poly1305.c] Wrap stdlib.h include inside #ifdef HAVE_STDINT_H. 2014-01-17 12:42:17 +11:00
poly1305.h - djm@cvs.openbsd.org 2014/05/02 03:27:54 2014-05-15 14:37:03 +10:00
progressmeter.c - djm@cvs.openbsd.org 2013/09/19 00:24:52 2013-10-10 10:25:09 +11:00
progressmeter.h - djm@cvs.openbsd.org 2006/03/25 22:22:43 2006-03-26 14:30:00 +11:00
readconf.c upstream commit 2014-10-27 16:34:52 +11:00
readconf.h upstream commit 2014-10-13 11:41:48 +11:00
readpass.c - djm@cvs.openbsd.org 2014/02/02 03:44:32 2014-02-04 11:20:14 +11:00
rijndael.c - (djm) [rijndael.c rijndael.h] Sync with newly-ressurected versions ine 2014-05-15 13:45:26 +10:00
rijndael.h - (djm) [rijndael.c rijndael.h] Sync with newly-ressurected versions ine 2014-05-15 13:45:26 +10:00
roaming.h - djm@cvs.openbsd.org 2011/12/07 05:44:38 2011-12-19 10:52:50 +11:00
roaming_client.c - markus@cvs.openbsd.org 2014/04/29 18:01:49 2014-05-15 14:24:09 +10:00
roaming_common.c - djm@cvs.openbsd.org 2014/01/09 23:20:00 2014-01-10 10:58:53 +11:00
roaming_dummy.c - (dtucker) [roaming_common.c roaming_dummy.c] Wrap #include <inttypes.h> in 2009-06-21 22:22:08 +10:00
roaming_serv.c - (dtucker) [roaming_serv.c] Include includes.h for u_intXX_t types. 2010-01-08 20:45:42 +11:00
rsa.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
rsa.h - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
sandbox-capsicum.c - (djm) [sandbox-capsicum.c] Don't fatal if Capsicum is offered by 2014-02-05 10:33:45 +11:00
sandbox-darwin.c - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c] 2014-01-17 16:47:04 +11:00
sandbox-null.c - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c] 2014-01-17 16:47:04 +11:00
sandbox-rlimit.c - (djm) [configure.ac sandbox-capsicum.c sandbox-rlimit.c] Disable 2014-01-26 09:39:53 +11:00
sandbox-seccomp-filter.c - (djm) [sandbox-seccomp-filter.c] Allow mremap and exit for DietLibc; 2014-09-10 08:15:34 +10:00
sandbox-systrace.c - djm@cvs.openbsd.org 2014/07/17 00:10:56 2014-07-18 15:03:02 +10:00
sc25519.c - (dtucker) [blocks.c fe25519.c ge25519.c hash.c sc25519.c verify.c] Include 2014-01-17 12:43:43 +11:00
sc25519.h - markus@cvs.openbsd.org 2013/12/09 11:03:45 2013-12-18 17:48:11 +11:00
scp.1 - tedu@cvs.openbsd.org 2014/03/19 14:42:44 2014-04-20 13:02:58 +10:00
scp.c - djm@cvs.openbsd.org 2014/06/24 02:21:01 2014-07-02 15:29:01 +10:00
servconf.c upstream commit 2014-10-27 16:34:52 +11:00
servconf.h - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
serverloop.c - (djm) [serverloop.c] Fix syntax error on Cygwin; from Corinna Vinschen 2014-08-19 11:14:17 +10:00
serverloop.h - djm@cvs.openbsd.org 2006/03/25 22:22:43 2006-03-26 14:30:00 +11:00
session.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
session.h - djm@cvs.openbsd.org 2013/10/14 21:20:52 2013-10-15 12:12:02 +11:00
sftp-client.c - logan@cvs.openbsd.org 2014/04/21 14:36:16 2014-05-15 13:46:25 +10:00
sftp-client.h - logan@cvs.openbsd.org 2014/04/21 14:36:16 2014-05-15 13:46:25 +10:00
sftp-common.c - guenther@cvs.openbsd.org 2014/01/09 03:26:00 2014-01-10 10:40:45 +11:00
sftp-common.h - djm@cvs.openbsd.org 2010/01/13 01:40:16 2010-01-13 22:44:06 +11:00
sftp-glob.c - dtucker@cvs.openbsd.org 2013/11/08 11:15:19 2013-11-21 13:55:43 +11:00
sftp-server-main.c - (djm) OpenBSD CVS Sync 2009-02-22 08:47:02 +11:00
sftp-server.8 - schwarze@cvs.openbsd.org 2014/07/28 15:40:08 2014-07-30 12:33:20 +10:00
sftp-server.c - (djm) [sftp-server.c] Some systems (e.g. Irix) have prctl() but not 2014-08-24 03:01:06 +10:00
sftp.1 - jmc@cvs.openbsd.org 2014/04/22 14:16:30 2014-05-15 13:47:37 +10:00
sftp.c upstream commit 2014-10-13 11:39:02 +11:00
sftp.h - dtucker@cvs.openbsd.org 2008/06/13 00:12:02 2008-06-13 10:22:54 +10:00
smult_curve25519_ref.c - markus@cvs.openbsd.org 2013/11/02 21:59:15 2013-11-04 08:26:52 +11:00
ssh-add.1 upstream commit 2014-10-13 11:37:32 +11:00
ssh-add.c - OpenBSD CVS Sync 2014-07-11 09:19:04 +10:00
ssh-agent.1 upstream commit 2014-10-13 11:37:32 +11:00
ssh-agent.c - dtucker@cvs.openbsd.org 2014/07/25 21:22:03 2014-07-30 12:32:46 +10:00
ssh-dss.c - (djm) [ssh-dss.c] Include openssl/dsa.h for DSA_SIG 2014-08-19 11:32:34 +10:00
ssh-ecdsa.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
ssh-ed25519.c upstream commit 2014-10-20 14:40:06 +11:00
ssh-gss.h - djm@cvs.openbsd.org 2014/02/26 20:28:44 2014-02-27 10:17:49 +11:00
ssh-keygen.1 upstream commit 2014-10-13 11:37:32 +11:00
ssh-keygen.c upstream commit 2014-10-13 11:37:21 +11:00
ssh-keyscan.1 upstream commit 2014-10-13 11:37:32 +11:00
ssh-keyscan.c - markus@cvs.openbsd.org 2014/04/29 18:01:49 2014-05-15 14:24:09 +10:00
ssh-keysign.8 - naddy@cvs.openbsd.org 2013/12/07 11:58:46 2013-12-18 17:46:27 +11:00
ssh-keysign.c upstream commit 2014-10-13 11:41:48 +11:00
ssh-pkcs11-client.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
ssh-pkcs11-helper.8 - schwarze@cvs.openbsd.org 2013/07/16 00:07:52 2013-07-18 16:14:13 +10:00
ssh-pkcs11-helper.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
ssh-pkcs11.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
ssh-pkcs11.h - markus@cvs.openbsd.org 2014/04/29 18:01:49 2014-05-15 14:24:09 +10:00
ssh-rsa.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
ssh-sandbox.h - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c] 2014-01-17 16:47:04 +11:00
ssh.1 upstream commit 2014-10-20 14:40:05 +11:00
ssh.c upstream commit 2014-10-20 14:40:05 +11:00
ssh.h - djm@cvs.openbsd.org 2010/06/25 07:14:46 2010-06-26 09:50:30 +10:00
ssh1.h - djm@cvs.openbsd.org 2006/03/25 22:22:43 2006-03-26 14:30:00 +11:00
ssh2.h - djm@cvs.openbsd.org 2014/01/29 06:18:35 2014-02-04 11:12:56 +11:00
ssh_config - sthen@cvs.openbsd.org 2013/09/16 11:35:43 2013-10-10 10:24:11 +11:00
ssh_config.5 upstream commit 2014-11-11 09:27:17 +11:00
sshbuf-getput-basic.c - (djm) [Makefile.in configure.ac sshbuf-getput-basic.c] 2014-05-15 14:58:07 +10:00
sshbuf-getput-crypto.c - (djm) [sshbuf-getput-crypto.c] Fix compilation when OpenSSL lacks ECC 2014-08-22 17:36:56 +10:00
sshbuf-misc.c - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
sshbuf.c - (djm) [defines.h sshbuf.c] Move __predict_true|false to defines.h and 2014-09-03 05:33:25 +10:00
sshbuf.h - (djm) [sshbuf.h] Fix compilation on systems without OPENSSL_HAS_ECC. 2014-08-19 11:28:11 +10:00
sshconnect.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
sshconnect.h - djm@cvs.openbsd.org 2013/10/16 02:31:47 2013-10-17 11:47:23 +11:00
sshconnect1.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
sshconnect2.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
sshd.8 upstream commit 2014-11-17 11:19:33 +11:00
sshd.c - (djm) [monitor.c sshd.c] SIGXFSZ needs to be ignored in postauth 2014-08-27 04:11:55 +10:00
sshd_config - djm@cvs.openbsd.org 2014/01/10 05:59:19 2014-01-12 19:20:47 +11:00
sshd_config.5 upstream commit 2014-10-13 11:38:46 +11:00
ssherr.c - djm@cvs.openbsd.org 2014/04/30 05:29:56 2014-05-15 14:33:43 +10:00
ssherr.h - djm@cvs.openbsd.org 2014/04/30 05:29:56 2014-05-15 14:33:43 +10:00
sshkey.c upstream commit 2014-11-18 12:00:51 +11:00
sshkey.h - (djm) [sshkey.h] Fix compilation when OpenSSL lacks ECC 2014-08-20 11:06:50 +10:00
sshlogin.c - millert@cvs.openbsd.org 2014/07/15 15:54:14 2014-07-18 14:11:24 +10:00
sshlogin.h - (djm) [sshlogin.h] Fix prototype merge botch from 2006; bz#2134 2013-08-01 14:34:16 +10:00
sshpty.c upstream commit 2014-10-13 11:38:36 +11:00
sshpty.h - djm@cvs.openbsd.org 2010/01/09 05:04:24 2010-01-09 22:26:23 +11:00
sshtty.c - djm@cvs.openbsd.org 2010/01/09 05:04:24 2010-01-09 22:26:23 +11:00
survey.sh.in - (dtucker) [config.sh.in] Collect oslevel -r too. 2005-02-15 21:26:32 +11:00
ttymodes.c - stevesk@cvs.openbsd.org 2008/11/02 00:16:16 2008-11-03 19:27:52 +11:00
ttymodes.h - djm@cvs.openbsd.org 2006/03/25 22:22:43 2006-03-26 14:30:00 +11:00
uidswap.c - (dtucker) [uidswap.c] Prevent unused variable warnings on Cygwin. Patch 2014-01-18 20:43:49 +11:00
uidswap.h - deraadt@cvs.openbsd.org 2006/08/03 03:34:42 2006-08-05 12:39:39 +10:00
umac.c - guenther@cvs.openbsd.org 2014/07/22 07:13:42 2014-07-23 09:43:42 +10:00
umac.h - djm@cvs.openbsd.org 2013/07/22 12:20:02 2013-07-25 11:55:39 +10:00
uuencode.c - djm@cvs.openbsd.org 2013/05/17 00:13:13 2013-06-02 07:31:17 +10:00
uuencode.h - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
verify.c - (dtucker) [blocks.c fe25519.c ge25519.c hash.c sc25519.c verify.c] Include 2014-01-17 12:43:43 +11:00
version.h - djm@cvs.openbsd.org 2014/04/18 23:52:25 2014-04-20 13:25:30 +10:00
xmalloc.c - tedu@cvs.openbsd.org 2014/01/04 17:50:55 2014-01-10 10:37:05 +11:00
xmalloc.h - djm@cvs.openbsd.org 2013/05/17 00:13:13 2013-06-02 07:31:17 +10:00

README

See http://www.openssh.com/txt/release-6.7 for the release notes.

- A Japanese translation of this document and of the OpenSSH FAQ is
- available at http://www.unixuser.org/~haruyama/security/openssh/index.html
- Thanks to HARUYAMA Seigo <haruyama@unixuser.org>

This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's sample
implementation with all patent-encumbered algorithms removed (to
external libraries), all known security bugs fixed, new features
reintroduced and many other clean-ups.  OpenSSH has been created by
Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,
and Dug Song. It has a homepage at http://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support, EGD[1]/PRNGD[2] support and replacements for OpenBSD library
functions that are (regrettably) absent from other unices. This port
has been best tested on AIX, Cygwin, HP-UX, Linux, MacOS/X,
NetBSD, OpenBSD, OpenServer, Solaris, Unicos, and UnixWare.

This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[3], OpenSSL[4] and optionally PAM[5].

There is now several mailing lists for this port of OpenSSH. Please
refer to http://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by
unsubscribed users.Code contribution are welcomed, but please follow the 
OpenBSD style guidelines[6].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system. There are a number of differences between this
port of OpenSSH and F-Secure SSH 1.x, please refer to the OpenSSH FAQ[7]
for details and general tips.

Damien Miller <djm@mindrot.org>

Miscellania -

This version of OpenSSH is based upon code retrieved from the OpenBSD
CVS repository which in turn was based on the last free sample
implementation released by Tatu Ylonen.

References -

[0] http://www.openssh.com/faq.html
[1] http://www.lothar.com/tech/crypto/
[2] http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html
[3] http://www.gzip.org/zlib/
[4] http://www.openssl.org/
[5] http://www.openpam.org
    http://www.kernel.org/pub/linux/libs/pam/ 
    (PAM also is standard on Solaris and HP-UX 11)
[6] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9
[7] http://www.openssh.com/faq.html

$Id: README,v 1.87 2014/08/10 01:35:06 djm Exp $