The man2html from jbasney on pkilab2 works whereas the standard one doesn't.

[gssapi-openssh.git] / openssh / ChangeLog.gssapi

diff --git a/openssh/ChangeLog.gssapi b/openssh/ChangeLog.gssapi
index e5459f297516d7e2a331af1edd5111b952c76b74..927b98bc9e6dc054d29bf6947d376b0fc6262433 100644 (file)
--- a/openssh/ChangeLog.gssapi
+++ b/openssh/ChangeLog.gssapi
@@ -1,3 +1,34 @@
+20090615
+  - [ gss-genr.c gss-serv.c kexgssc.c kexgsss.c monitor.c sshconnect2.c
+      sshd.c ]
+    Fix issues identified by Greg Hudson following a code review
+       Check return value of gss_indicate_mechs
+       Protect GSSAPI calls in monitor, so they can only be used if enabled
+       Check return values of bignum functions in key exchange
+       Use BN_clear_free to clear other side's DH value
+       Make ssh_gssapi_id_kex more robust
+       Only configure kex table pointers if GSSAPI is enabled
+       Don't leak mechanism list, or gss mechanism list
+       Cast data.length before printing
+       If serverkey isn't provided, use an empty string, rather than NULL
+
+20090201
+  - [ gss-genr.c gss-serv.c kex.h kexgssc.c readconf.c readconf.h ssh-gss.h
+      ssh_config.5 sshconnet2.c ]
+    Add support for the GSSAPIClientIdentity option, which allows the user
+    to specify which GSSAPI identity to use to contact a given server
+
+20080404
+  - [ gss-serv.c ]
+    Add code to actually implement GSSAPIStrictAcceptCheck, which had somehow
+    been omitted from a previous version of this patch. Reported by Borislav
+    Stoichkov
+
+20070317
+  - [ gss-serv-krb5.c ]
+    Remove C99ism, where new_ccname was being declared in the middle of a 
+    function
+
 20061220
   - [ servconf.c ]
     Make default for GSSAPIStrictAcceptorCheck be Yes, to match previous, and