tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at https://github.com/powershell/Win32-OpenSSH
9,642 Commits 6 Branches 20 Tags 99 MiB
C 78.4%
Shell 6.7%
PowerShell 5.2%
Roff 4.9%
M4 2.4%
Other 2.4%
Go to file
djm@openbsd.org 76a24b3fa1 upstream: Fix two race conditions in sshd relating to SIGHUP: 
1. Recently-forked child processes will briefly remain listening to
  listen_socks. If the main server sshd process completes its restart
  via execv() before these sockets are closed by the child processes
  then it can fail to listen at the desired addresses/ports and/or
  fail to restart.

2. When a SIGHUP is received, there may be forked child processes that
  are awaiting their reexecution state. If the main server sshd
  process restarts before passing this state, these child processes
  will yield errors and use a fallback path of reading the current
  sshd_config from the filesystem rather than use the one that sshd
  was started with.

To fix both of these cases, we reuse the startup_pipes that are shared
between the main server sshd and forked children. Previously this was
used solely to implement tracking of pre-auth child processes for
MaxStartups, but this extends the messaging over these pipes to include
a child->parent message that the parent process is safe to restart. This
message is sent from the child after it has completed its preliminaries:
closing listen_socks and receiving its reexec state.

bz#2953, reported by Michal Koutný; ok markus@ dtucker@

OpenBSD-Commit-ID: 7df09eacfa3ce13e9a7b1e9f17276ecc924d65ab
 		2019-03-01 13:34:00 +11:00
contrib Cygwin: only tweak sshd_config file if it's new, drop creating sshd user 2019-01-28 09:57:58 +11:00
openbsd-compat Cygwin: implement case-insensitive Unicode user and group name matching 2019-02-22 15:22:53 +11:00
regress upstream: The test sshd_config in in $OBJ. 2019-01-28 19:01:01 +11:00
.depend upstream: openssh-7.9 accidentally reused the server's algorithm lists 2019-02-24 10:51:46 +11:00
.gitignore Add tags to .gitignore 2019-02-22 15:02:31 +11:00
.skipped-commit-ids upstream: Import new moduli. 2018-11-16 13:51:12 +11:00
CREDITS Remove now-obsolete CVS $Id tags from text files. 2016-08-17 13:40:58 +10:00
INSTALL Update required OpenSSL versions to match current. 2018-10-28 15:16:31 +11:00
LICENCE upstream commit 2017-05-01 10:05:04 +10:00
Makefile.in upstream: rename kex->kem_client_pub -> kex->client_pub now that 2019-01-21 23:13:03 +11:00
OVERVIEW upstream: refer to OpenSSL not SSLeay; 2018-10-23 16:57:54 +11:00
PROTOCOL upstream: mention INFO@openssh.com for sending SIGINFO 2018-10-02 22:53:48 +10:00
PROTOCOL.agent update URL again 2017-10-01 10:32:25 +11:00
PROTOCOL.certkeys upstream: mention ssh-ed25519-cert-v01@openssh.com in list of cert 2018-11-16 13:50:32 +11:00
PROTOCOL.chacha20poly1305 upstream: lots of typos in comments/docs. Patch from Karsten Weiss 2018-04-10 10:17:15 +10:00
PROTOCOL.key
…
PROTOCOL.krl upstream: allow key revocation by SHA256 hash and allow ssh-keygen 2018-09-12 16:49:21 +10:00
PROTOCOL.mux upstream: Document mux proxy mode; added by Markus in openssh-7.4 2018-09-26 17:35:22 +10:00
README remove stale link, tweak 2018-10-12 09:48:05 +11:00
README.dns
…
README.platform Many typo fixes from Karsten Weiss 2018-04-10 10:19:02 +10:00
README.privsep Remove references to UNICOS. 2018-02-15 22:28:14 +11:00
README.tun
…
TODO Remove support for S/Key 2018-07-31 12:59:30 +10:00
aclocal.m4 Better detection of unsupported compiler options. 2018-06-08 13:55:59 +10:00
addrmatch.c upstream: fix some memory leaks spotted by Coverity via Jakub Jelen 2018-07-31 13:13:26 +10:00
atomicio.c upstream: Check for both EAGAIN and EWOULDBLOCK. This is a no-op 2019-01-24 14:40:03 +11:00
atomicio.h upstream: move client/server SSH-* banners to buffers under 2018-12-27 14:38:22 +11:00
audit-bsm.c last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
audit-linux.c last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
audit.c last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
audit.h last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
auth-bsdauth.c upstream: sshd: switch authentication to sshbuf API; ok djm@ 2018-07-10 15:27:43 +10:00
auth-krb5.c upstream: sshd: switch authentication to sshbuf API; ok djm@ 2018-07-10 15:27:43 +10:00
auth-options.c upstream: Allow ssh_config IdentityAgent directive to accept 2018-10-03 16:39:58 +10:00
auth-options.h upstream: permitlisten option for authorized_keys; ok markus@ 2018-06-07 04:27:20 +10:00
auth-pam.c remove PAM dependencies on old packet API 2019-01-20 10:22:18 +11:00
auth-pam.h remove PAM dependencies on old packet API 2019-01-20 10:22:18 +11:00
auth-passwd.c check pw_passwd != NULL here too 2018-10-11 11:29:35 +11:00
auth-rhosts.c upstream: sshd: switch authentication to sshbuf API; ok djm@ 2018-07-10 15:27:43 +10:00
auth-shadow.c Remove key.h from portable files too. 2018-07-12 14:57:46 +10:00
auth-sia.c Remove key.h from portable files too. 2018-07-12 14:57:46 +10:00
auth-sia.h
…
auth-skey.c Remove key.h from portable files too. 2018-07-12 14:57:46 +10:00
auth.c Revert "[auth.c] On Cygwin, refuse usernames that have differences in case" 2019-02-22 15:04:16 +11:00
auth.h upstream: remove last references to active_state 2019-01-20 09:45:18 +11:00
auth2-chall.c Remove support for S/Key 2018-07-31 12:59:30 +10:00
auth2-gss.c upstream: delay bailout for invalid authentic 2018-07-31 13:13:26 +10:00
auth2-hostbased.c upstream: remove last references to active_state 2019-01-20 09:45:18 +11:00
auth2-kbdint.c upstream: sshd: switch authentication to sshbuf API; ok djm@ 2018-07-10 15:27:43 +10:00
auth2-none.c upstream: sshd: switch authentication to sshbuf API; ok djm@ 2018-07-10 15:27:43 +10:00
auth2-passwd.c upstream: sshd: switch authentication to sshbuf API; ok djm@ 2018-07-10 15:27:43 +10:00
auth2-pubkey.c upstream: print the full pubkey being attempted at loglevel >= 2019-01-22 22:42:01 +11:00
auth2.c last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
authfd.c upstream: Request RSA-SHA2 signatures for 2018-12-28 10:06:50 +11:00
authfd.h upstream: remove prototype to long-gone function 2018-07-12 14:36:12 +10:00
authfile.c upstream: In sshkey_in_file(), ignore keys that are considered for 2018-09-21 22:49:09 +10:00
authfile.h upstream commit 2015-01-09 00:17:12 +11:00
bitmap.c upstream commit 2017-10-20 12:58:35 +11:00
bitmap.h upstream commit 2017-10-20 12:58:35 +11:00
buildpkg.sh.in Update links to https. 2016-10-21 06:55:58 +11:00
canohost.c upstream commit 2016-03-08 06:20:35 +11:00
canohost.h upstream commit 2016-03-08 06:20:35 +11:00
chacha.c
…
chacha.h upstream commit 2016-08-29 11:20:28 +10:00
channels.c use same close logic for stderr as stdout 2019-02-08 14:50:36 +11:00
channels.h upstream: include a little more information about the status and 2018-10-04 10:44:49 +10:00
cipher-aes.c
…
cipher-aesctr.c Add includes.h for compatibility stuff. 2015-02-25 13:17:40 +11:00
cipher-aesctr.h
…
cipher-chachapoly.c upstream commit 2016-08-09 09:06:52 +10:00
cipher-chachapoly.h - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
cipher-ctr.c support --without-openssl at configure time 2015-01-15 02:28:36 +11:00
cipher.c adapt -portable to OpenSSL 1.1x API 2018-09-13 12:13:50 +10:00
cipher.h upstream: hold our collective noses and use the openssl-1.1.x API in 2018-09-13 12:12:33 +10:00
cleanup.c
…
clientloop.c upstream: convert the remainder of clientloop.c to new packet API 2019-01-20 09:45:17 +11:00
clientloop.h upstream: client: switch to sshbuf API; ok djm@ 2018-07-10 15:14:26 +10:00
compat.c upstream: revert compat.[ch] section of the following change. It 2018-08-13 12:42:13 +10:00
compat.h upstream: revert compat.[ch] section of the following change. It 2018-08-13 12:42:13 +10:00
config.guess update config.guess and config.sub to current 2016-08-02 10:48:04 +10:00
config.sub update config.guess and config.sub to current 2016-08-02 10:48:04 +10:00
configure.ac Allow building against OpenSSL dev (3.x) version. 2019-01-22 20:38:40 +11:00
crc32.c
…
crc32.h
…
crypto_api.h upstream: Add support for a PQC KEX/KEM: 2019-01-21 22:07:02 +11:00
defines.h Remove support for S/Key 2018-07-31 12:59:30 +10:00
dh.c upstream: correct local variable name; from yawang AT microsoft.com 2018-11-16 13:51:12 +11:00
dh.h upstream: DH-GEX min value is now specified in RFC8270. ok djm@ 2019-01-21 10:46:03 +11:00
digest-libc.c upstream commit 2017-05-10 11:41:21 +10:00
digest-openssl.c upstream: hold our collective noses and use the openssl-1.1.x API in 2018-09-13 12:12:33 +10:00
digest.h upstream commit 2017-05-10 11:41:21 +10:00
dispatch.c upstream: allow sshpkt_fatal() to take a varargs format; we'll 2019-01-20 09:02:20 +11:00
dispatch.h upstream: remove last traces of old packet API! 2019-01-20 09:45:18 +11:00
dns.c upstream: Add experimental support for PQC XMSS keys (Extended 2018-02-26 11:40:41 +11:00
dns.h upstream: Add experimental support for PQC XMSS keys (Extended 2018-02-26 11:40:41 +11:00
ed25519.c
…
entropy.c Move RANDOM_SEED_SIZE outside ifdef. 2018-11-23 14:11:20 +11:00
entropy.h Adapt portable to legacy buffer API removal 2018-07-10 19:39:52 +10:00
fatal.c
…
fe25519.c
…
fe25519.h
…
fixalgorithms
…
fixpaths
…
ge25519.c
…
ge25519.h upstream commit 2015-02-17 09:32:31 +11:00
ge25519_base.data
…
groupaccess.c Cygwin: implement case-insensitive Unicode user and group name matching 2019-02-22 15:22:53 +11:00
groupaccess.h
…
gss-genr.c upstream: kerberos/gssapi fixes for buffer removal 2018-07-10 19:15:35 +10:00
gss-serv-krb5.c upstream: sshd: switch GSSAPI to sshbuf API; ok djm@ 2018-07-10 15:28:30 +10:00
gss-serv.c upstream: sshd: switch GSSAPI to sshbuf API; ok djm@ 2018-07-10 15:28:30 +10:00
hash.c upstream commit 2018-01-23 16:35:07 +11:00
hmac.c upstream commit 2015-03-27 12:00:47 +11:00
hmac.h - djm@cvs.openbsd.org 2014/06/24 01:13:21 2014-07-02 15:28:02 +10:00
hostfile.c upstream: memleaks; found by valgrind 2018-07-16 13:12:20 +10:00
hostfile.h upstream commit 2015-02-17 09:32:31 +11:00
includes.h portability for sftp globbed ls sort by mtime 2017-06-10 23:41:25 +10:00
install-sh Pull in newer install-sh from autoconf-2.69. 2017-12-01 17:07:08 +11:00
kex.c upstream: fix reversed arguments to kex_load_hostkey(); manifested as 2019-01-21 23:13:53 +11:00
kex.h upstream: pass most arguments to the KEX hash functions as sshbuf 2019-01-23 13:02:02 +11:00
kexc25519.c upstream: rename kex->kem_client_pub -> kex->client_pub now that 2019-01-21 23:13:03 +11:00
kexdh.c typo 2019-01-22 10:50:40 +11:00
kexecdh.c upstream: rename kex->kem_client_pub -> kex->client_pub now that 2019-01-21 23:13:03 +11:00
kexgen.c upstream: pass most arguments to the KEX hash functions as sshbuf 2019-01-23 13:02:02 +11:00
kexgex.c upstream: pass most arguments to the KEX hash functions as sshbuf 2019-01-23 13:02:02 +11:00
kexgexc.c upstream: pass most arguments to the KEX hash functions as sshbuf 2019-01-23 13:02:02 +11:00
kexgexs.c upstream: pass most arguments to the KEX hash functions as sshbuf 2019-01-23 13:02:02 +11:00
kexsntrup4591761x25519.c new files need includes.h 2019-01-22 00:02:23 +11:00
krl.c upstream: allow key revocation by SHA256 hash and allow ssh-keygen 2018-09-12 16:49:21 +10:00
krl.h upstream: allow key revocation by SHA256 hash and allow ssh-keygen 2018-09-12 16:49:21 +10:00
log.c upstream: avoid expensive channel_open_message() calls; ok djm@ 2018-07-31 12:20:13 +10:00
log.h upstream: avoid expensive channel_open_message() calls; ok djm@ 2018-07-31 12:20:13 +10:00
loginrec.c remove vestiges of old packet API from loginrec.c 2019-01-20 09:58:45 +11:00
loginrec.h remove vestiges of old packet API from loginrec.c 2019-01-20 09:58:45 +11:00
logintest.c
…
mac.c upstream commit 2017-05-10 11:41:21 +10:00
mac.h upstream commit 2016-07-08 13:50:03 +10:00
match.c Cygwin: implement case-insensitive Unicode user and group name matching 2019-02-22 15:22:53 +11:00
match.h upstream: repair PubkeyAcceptedKeyTypes (and friends) after RSA 2018-07-04 23:51:52 +10:00
md5crypt.c Remove assigned-to-but-never-used variable. 2018-02-13 16:27:09 +11:00
md5crypt.h Remove obsolete CVS $Id from source files. 2016-08-17 14:08:42 +10:00
mdoc2man.awk Remove remaining now-obsolete cvs $Ids. 2018-02-15 20:06:19 +11:00
misc.c upstream: Remove support for obsolete host/port syntax. 2019-01-24 12:30:30 +11:00
misc.h upstream: Remove support for obsolete host/port syntax. 2019-01-24 12:30:30 +11:00
mkinstalldirs Remove remaining now-obsolete cvs $Ids. 2018-02-15 20:06:19 +11:00
moduli Import new moduli. 2018-10-31 22:21:03 +11:00
moduli.5
…
moduli.c upstream: Remove 3 as a guess for possible generator during moduli 2019-01-24 12:30:30 +11:00
monitor.c upstream: rename kex->kem_client_pub -> kex->client_pub now that 2019-01-21 23:13:03 +11:00
monitor.h upstream: remove last references to active_state 2019-01-20 09:45:18 +11:00
monitor_fdpass.c upstream commit 2016-03-04 15:12:17 +11:00
monitor_fdpass.h
…
monitor_wrap.c upstream: Make sshpkt_get_bignum2() allocate the bignum it is 2019-01-21 21:47:28 +11:00
monitor_wrap.h last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
msg.c upstream: replace cast with call to sshbuf_mutable_ptr(); ok djm@ 2018-07-10 16:44:17 +10:00
msg.h upstream commit 2015-01-15 21:39:14 +11:00
mux.c upstream: convert mux.c to new packet API 2019-01-20 09:02:36 +11:00
myproposal.h upstream: openssh-7.9 accidentally reused the server's algorithm lists 2019-02-24 10:51:46 +11:00
nchan.c upstream: when the peer sends a channel-close message, make sure we 2018-10-04 17:50:22 +10:00
nchan.ms
…
nchan2.ms
…
openssh.xml.in
…
opensshd.init.in Remove RSA1 host key generation. 2017-12-01 16:55:35 +11:00
packet.c upstream: pass values used in KEX hash computation as sshbuf 2019-01-21 23:13:03 +11:00
packet.h upstream: pass values used in KEX hash computation as sshbuf 2019-01-21 23:13:03 +11:00
pathnames.h upstream: Add experimental support for PQC XMSS keys (Extended 2018-02-26 11:40:41 +11:00
pkcs11.h
…
platform-misc.c Split platform_sys_dir_uid into its own file 2017-08-25 13:25:01 +10:00
platform-pledge.c Support Illumos/Solaris fine-grained privileges 2016-01-08 14:29:12 +11:00
platform-tracing.c Use ptrace(PT_DENY_ATTACH, ..) on OS X. 2016-11-01 08:12:33 +11:00
platform.c upstream: remove legacy key emulation layer; ok djm@ 2018-07-12 13:18:25 +10:00
platform.h Remove obsolete CVS $Id from source files. 2016-08-17 14:08:42 +10:00
poly1305.c
…
poly1305.h
…
progressmeter.c upstream: Have progressmeter force an update at the beginning and 2019-01-25 06:32:14 +11:00
progressmeter.h upstream: Have progressmeter force an update at the beginning and 2019-01-25 06:32:14 +11:00
readconf.c upstream: let PKCS11Provider=none do what users expect 2019-03-01 13:21:29 +11:00
readconf.h upstream: add a ssh_config "Match final" predicate 2018-11-23 16:09:12 +11:00
readpass.c upstream: Print an \r in front of the password prompt so parts of 2019-01-20 09:01:57 +11:00
rijndael.c upstream commit 2015-03-23 17:08:12 +11:00
rijndael.h
…
sandbox-capsicum.c Switch Capsicum header to sys/capsicum.h. 2017-08-28 16:48:27 +10:00
sandbox-darwin.c Add missing monitor.h include. 2016-12-16 15:02:24 +11:00
sandbox-null.c
…
sandbox-pledge.c s/SANDBOX_TAME/SANDBOX_PLEDGE/g 2015-10-14 09:22:15 -07:00
sandbox-rlimit.c upstream commit 2016-09-12 13:46:29 +10:00
sandbox-seccomp-filter.c add futex(2) syscall to seccomp sandbox 2018-09-15 19:37:48 +10:00
sandbox-solaris.c drop two more privileges in the Solaris sandbox 2017-06-09 14:44:43 +10:00
sandbox-systrace.c Allow nanosleep in preauth privsep child. 2018-04-13 16:23:57 +10:00
sc25519.c
…
sc25519.h
…
scp.1 upstream: check in scp client that filenames sent during 2019-01-27 09:42:39 +11:00
scp.c upstream: when checking that filenames sent by the server side 2019-02-10 22:24:24 +11:00
servconf.c Cygwin: implement case-insensitive Unicode user and group name matching 2019-02-22 15:22:53 +11:00
servconf.h upstream: convert servconf.c to new packet API 2019-01-20 09:02:44 +11:00
serverloop.c upstream: fix error in refactor: use ssh_packet_disconnect() instead of 2019-01-20 09:45:18 +11:00
serverloop.h upstream commit 2017-09-12 17:37:02 +10:00
session.c upstream: perform removal of agent-forwarding directory in forward 2019-02-22 14:38:38 +11:00
session.h upstream: Add server support for signalling sessions via the SSH 2018-10-02 22:41:01 +10:00
sftp-client.c upstream: Have progressmeter force an update at the beginning and 2019-01-25 06:32:14 +11:00
sftp-client.h upstream: Add "-h" flag to sftp chown/chgrp/chmod commands to 2019-01-17 11:08:13 +11:00
sftp-common.c Include unistd.h for strmode(). 2019-01-24 10:07:03 +11:00
sftp-common.h upstream commit 2015-01-15 02:22:18 +11:00
sftp-glob.c upstream commit 2015-01-15 02:22:18 +11:00
sftp-server-main.c refactor libcrypto initialisation 2018-11-23 10:42:05 +11:00
sftp-server.8 upstream commit 2014-12-11 19:17:24 +11:00
sftp-server.c upstream: add support for a "lsetstat@openssh.com" extension. This 2019-01-17 11:08:13 +11:00
sftp.1 upstream: tweak previous; 2019-01-22 22:42:01 +11:00
sftp.c upstream: Add a -J option as a shortcut for -o Proxyjump= to scp(1) 2019-01-22 22:42:01 +11:00
sftp.h
…
smult_curve25519_ref.c
…
sntrup4591761.c upstream: Add authors for public domain sntrup4591761 code; 2019-02-01 18:55:11 +11:00
sntrup4591761.sh upstream: Add authors for public domain sntrup4591761 code; 2019-02-01 18:55:11 +11:00
ssh-add.1 upstream: add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up 2019-01-21 23:56:52 +11:00
ssh-add.c upstream: add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up 2019-01-21 23:56:52 +11:00
ssh-agent.1 upstream commit 2016-11-30 19:44:25 +11:00
ssh-agent.c upstream: backoff reading messages from active connections when the 2019-01-23 10:44:34 +11:00
ssh-dss.c adapt -portable to OpenSSL 1.1x API 2018-09-13 12:13:50 +10:00
ssh-ecdsa.c upstream: Make sshpkt_get_bignum2() allocate the bignum it is 2019-01-21 21:47:28 +11:00
ssh-ed25519.c upstream commit 2016-04-21 16:30:11 +10:00
ssh-gss.h upstream: kerberos/gssapi fixes for buffer removal 2018-07-10 19:15:35 +10:00
ssh-keygen.1 upstream: allow auto-incrementing certificate serial number for certs 2019-01-23 19:03:05 +11:00
ssh-keygen.c upstream: ssh-keygen -D pkcs11.so needs to initialize pkcs11 2019-02-11 20:26:16 +11:00
ssh-keyscan.1 upstream: move the input format details to -f; remove the output 2018-03-12 11:48:15 +11:00
ssh-keyscan.c upstream: make ssh-keyscan return a non-zero exit status if it 2019-01-27 09:42:19 +11:00
ssh-keysign.8 upstream commit 2016-02-18 09:24:40 +11:00
ssh-keysign.c last bits of old packet API / active_state global 2019-01-20 14:55:27 +11:00
ssh-pkcs11-client.c upstream: add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up 2019-01-21 23:56:52 +11:00
ssh-pkcs11-helper.8 upstream: add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up 2019-01-21 23:56:52 +11:00
ssh-pkcs11-helper.c upstream: switch mainloop from select(2) to poll(2); ok deraadt@ 2019-01-23 13:02:50 +11:00
ssh-pkcs11.c upstream: fix NULL-deref crash in PKCS#11 code when attempting 2019-02-05 11:45:38 +11:00
ssh-pkcs11.h upstream: add support for ECDSA keys in PKCS#11 tokens 2019-01-21 10:54:37 +11:00
ssh-rsa.c adapt -portable to OpenSSL 1.1x API 2018-09-13 12:13:50 +10:00
ssh-sandbox.h
…
ssh-xmss.c Add WITH_XMSS, move to prevent conflicts. 2018-02-28 19:59:35 +11:00
ssh.1 upstream: Mention that configuration for the destination host is 2019-01-22 23:04:54 +11:00
ssh.c upstream: remove last references to active_state 2019-01-20 09:45:18 +11:00
ssh.h upstream: move client/server SSH-* banners to buffers under 2018-12-27 14:38:22 +11:00
ssh2.h upstream commit 2016-05-19 17:48:34 +10:00
ssh_api.c upstream: rename kex->kem_client_pub -> kex->client_pub now that 2019-01-21 23:13:03 +11:00
ssh_api.h upstream: lots of typos in comments/docs. Patch from Karsten Weiss 2018-04-10 10:17:15 +10:00
ssh_config upstream: Remove obsolete "Protocol" from commented out examples. Patch 2019-02-04 15:01:38 +11:00
ssh_config.5 upstream: mention PKCS11Provide=none, reword a little and remove 2019-03-01 13:21:29 +11:00
sshbuf-getput-basic.c upstream commit 2017-06-01 14:55:23 +10:00
sshbuf-getput-crypto.c upstream: Make sshpkt_get_bignum2() allocate the bignum it is 2019-01-21 21:47:28 +11:00
sshbuf-misc.c upstream commit 2016-05-02 20:35:04 +10:00
sshbuf.c upstream: make grandparent-parent-child sshbuf chains robust to 2018-11-16 17:18:29 +11:00
sshbuf.h upstream: Make sshpkt_get_bignum2() allocate the bignum it is 2019-01-21 21:47:28 +11:00
sshconnect.c upstream: dup stdout/in for proxycommand=-, otherwise stdout might 2019-03-01 13:21:29 +11:00
sshconnect.h upstream: convert sshconnect.c to new packet API 2019-01-20 09:02:36 +11:00
sshconnect2.c upstream: fix regression in r1.302 reported by naddy@ - only the first 2019-02-13 10:55:44 +11:00
sshd.8 upstream: Switch authorized_keys example from ssh-dss to ssh-rsa 2018-07-26 13:54:30 +10:00
sshd.c upstream: Fix two race conditions in sshd relating to SIGHUP: 2019-03-01 13:34:00 +11:00
sshd_config upstream: the UseLogin option was removed, so remove it here too. 2018-04-10 10:16:36 +10:00
sshd_config.5 upstream: Remove duplicate word. bz#2958, patch from jjelen at 2019-01-24 12:30:30 +11:00
ssherr.c upstream: Improve strictness and control over RSA-SHA2 signature 2018-07-03 23:26:36 +10:00
ssherr.h upstream: Improve strictness and control over RSA-SHA2 signature 2018-07-03 23:26:36 +10:00
sshkey-xmss.c upstream: replace cast with call to sshbuf_mutable_ptr(); ok djm@ 2018-07-10 16:44:17 +10:00
sshkey-xmss.h upstream: Add experimental support for PQC XMSS keys (Extended 2018-02-26 11:40:41 +11:00
sshkey.c upstream: Make sshpkt_get_bignum2() allocate the bignum it is 2019-01-21 21:47:28 +11:00
sshkey.h upstream: add support for ECDSA keys in PKCS#11 tokens 2019-01-21 10:54:37 +11:00
sshlogin.c upstream: sshd: switch loginmsg to sshbuf API; ok djm@ 2018-07-10 15:21:58 +10:00
sshlogin.h
…
sshpty.c Remove UNICOS support. 2018-02-15 20:04:02 +11:00
sshpty.h upstream commit 2016-11-29 16:51:27 +11:00
sshtty.c
…
survey.sh.in
…
ttymodes.c upstream: ttymodes: switch to sshbuf API; ok djm@ 2018-07-10 15:19:12 +10:00
ttymodes.h upstream commit 2017-05-01 10:05:04 +10:00
uidswap.c upstream: Remove support for running ssh(1) setuid and fatal if 2018-07-19 21:41:42 +10:00
uidswap.h upstream: Remove support for running ssh(1) setuid and fatal if 2018-07-19 21:41:42 +10:00
umac.c upstream: lots of typos in comments/docs. Patch from Karsten Weiss 2018-04-10 10:17:15 +10:00
umac.h
…
umac128.c upstream commit 2018-02-09 20:00:18 +11:00
utf8.c upstream: AIX reports the CODESET as "ISO8859-1" in the POSIX locale. 2018-08-22 07:52:26 +10:00
utf8.h Force Turkish locales back to C/POSIX; bz#2643 2016-12-12 13:58:59 +11:00
uuencode.c upstream commit 2015-04-29 18:15:24 +10:00
uuencode.h
…
verify.c
…
version.h upstream: introducing openssh 7.9 2018-10-11 11:03:53 +11:00
xmalloc.c upstream commit 2017-06-01 14:55:22 +10:00
xmalloc.h upstream commit 2017-06-01 14:55:22 +10:00
xmss_commons.c upstream: Add $OpenBSD$ markers to xmss files to help keep synced 2018-03-02 14:29:25 +11:00
xmss_commons.h Remove extra XMSS #endif 2018-03-05 10:22:32 +11:00
xmss_fast.c upstream: ssh/xmss: fix build; ok djm@ 2018-03-23 11:05:39 +11:00
xmss_fast.h upstream: Add $OpenBSD$ markers to xmss files to help keep synced 2018-03-02 14:29:25 +11:00
xmss_hash.c upstream: Add $OpenBSD$ markers to xmss files to help keep synced 2018-03-02 14:29:25 +11:00
xmss_hash.h upstream: Add $OpenBSD$ markers to xmss files to help keep synced 2018-03-02 14:29:25 +11:00
xmss_hash_address.c upstream: Add $OpenBSD$ markers to xmss files to help keep synced 2018-03-02 14:29:25 +11:00
xmss_hash_address.h upstream: Add $OpenBSD$ markers to xmss files to help keep synced 2018-03-02 14:29:25 +11:00
xmss_wots.c upstream: lots of typos in comments/docs. Patch from Karsten Weiss 2018-04-10 10:17:15 +10:00
xmss_wots.h upstream: Remove unneeded (local) include. ok markus@ 2018-03-02 14:30:02 +11:00

README 

See https://www.openssh.com/releasenotes.html#7.9p1 for the release notes.

Please read https://www.openssh.com/report.html for bug reporting
instructions and note that we do not use Github for bug reporting or
patch/pull-request management.

This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's sample
implementation with all patent-encumbered algorithms removed (to
external libraries), all known security bugs fixed, new features
reintroduced and many other clean-ups.  OpenSSH has been created by
Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,
and Dug Song. It has a homepage at https://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support, EGD[1]/PRNGD[2] support and replacements for OpenBSD library
functions that are (regrettably) absent from other unices. This port
has been best tested on AIX, Cygwin, HP-UX, Linux, MacOS/X,
FreeBSD, NetBSD, OpenBSD, OpenServer, Solaris and UnixWare.

This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[3], OpenSSL[4], and optionally PAM[5] and
libedit[6]

There is now several mailing lists for this port of OpenSSH. Please
refer to https://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by unsubscribed
users.  Code contribution are welcomed, but please follow the OpenBSD
style guidelines[7].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system.

Damien Miller <djm@mindrot.org>

Miscellania -

This version of OpenSSH is based upon code retrieved from the OpenBSD
CVS repository which in turn was based on the last free sample
implementation released by Tatu Ylonen.

References -

[0] https://www.openssh.com/
[1] http://www.lothar.com/tech/crypto/
[2] http://prngd.sourceforge.net/
[3] https://www.zlib.net/
[4] https://www.openssl.org/
[5] https://www.openpam.org
    https://www.kernel.org/pub/linux/libs/pam/
    (PAM also is standard on Solaris and HP-UX 11)
[6] https://thrysoee.dk/editline/ (portable version)
[7] https://man.openbsd.org/style.9