]> andersk Git - openssh.git/blame - ChangeLog
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (djm) OpenBSD CVS Sync
[openssh.git] / ChangeLog
CommitLineData
520b41b2 120020423
2 - (djm) Bug #222: Fix tests for getaddrinfo on OSF/1. Spotted by
3 Robert Urban <urban@spielwiese.de>
ad200abb 4 - (djm) Make privsep work with PAM (still experimental)
520b41b2 5
ac033f8c 620020421
7 - (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0).
8 entropy.c needs seteuid(getuid()) for the setuid(original_uid) to succeed.
9 Patch by gert@greenie.muc.de. This fixes one part of Bug 208
10
6dc63b4f 1120020418
12 - (djm) Avoid SIGCHLD breakage when run from rsync. Fix from
13 Sturle Sunde <sturle.sunde@usit.uio.no>
14
230c7a8f 1520020417
16 - (djm) Tell users to configure /dev/random support into OpenSSL in INSTALL
1a7220c2 17 - (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca
8d184c09 18 - (tim) [configure.ac] Issue warning on --with-default-path=/some_path
19 if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com>
230c7a8f 20
9ae68cce 2120020415
22 - (djm) Unbreak "make install". Fix from Darren Tucker <dtucker@zip.com.au>
4e51cc76 23 - (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen
1b06e75e 24 - (tim) [configure.ac] add tests for recvmsg and sendmsg.
25 [monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for
26 systems that HAVE_ACCRIGHTS_IN_MSGHDR but no recvmsg or sendmsg.
9ae68cce 27
f6e6303d 2820020414
29 - (djm) ssh-rand-helper improvements
30 - Add commandline debugging options
31 - Don't write binary data if stdout is a tty (use hex instead)
32 - Give it a manpage
cbe5b851 33 - (djm) Random number collection doc fixes from Ben
f6e6303d 34
12928e80 3520020413
36 - (djm) Add KrbV support patch from Simon Wilkinson <simon@sxw.org.uk>
37
40b74b3f 3820020412
39 - (stevesk) [auth-sia.[ch]] add BSD license from Chris Adams
f95c8ce8 40 - (tim) [configure.ac] add <sys/types.h> to msghdr tests. Change -L
41 to -h on testing for /bin being symbolic link
e2c9b9e3 42 - (bal) Mistaken in Cygwin scripts for ssh starting. Patch by
43 Corinna Vinschen <vinschen@redhat.com>
e75b61db 44 - (bal) disable privsep if no MAP_ANON. We can re-enable it
45 after the release when we can do more testing.
40b74b3f 46
65b91c76 4720020411
48 - (stevesk) [auth-sia.c] cleanup
7b0737a4 49 - (tim) [acconfig.h defines.h includes.h] put includes in includes.h and
50 defines in defines.h [rijndael.c openbsd-compat/fake-socket.h
51 openbsd-compat/inet_aton.c] include "includes.h" instead of "config.h"
52 ok stevesk@
65b91c76 53
ca8aba40 5420020410
f1af2dbf 55 - (stevesk) [configure.ac monitor.c] HAVE_SOCKETPAIR
ca8aba40 56 - (stevesk) [auth-sia.c] compile fix Chris Adams <cmadams@hiwaay.net>
d8ff54e6 57 - (bal) OpenBSD CVS Sync
58 - markus@cvs.openbsd.org 2002/04/10 08:21:47
59 [auth1.c compat.c compat.h]
60 strip '@' from username only for KerbV and known broken clients, bug #204
f14a5033 61 - markus@cvs.openbsd.org 2002/04/10 08:56:01
62 [version.h]
63 OpenSSH_3.2
64 - Added p1 to idenify Portable release version.
ca8aba40 65
46c8e0f6 6620020408
67 - (bal) Minor OpenSC updates. Fix up header locations and update
68 README.smartcard provided by Juha Yrjölä <jyrjola@cc.hut.fi>
69
7176df4f 7020020407
71 - (stevesk) HAVE_CONTROL_IN_MSGHDR; not used right now.
72 Future: we may want to test if fd passing works correctly.
84071420 73 - (stevesk) [monitor_fdpass.c] fatal() for UsePrivilegeSeparation=yes
74 and no fd passing support.
1e8f8c5b 75 - (stevesk) HAVE_MMAP and HAVE_SYS_MMAN_H and use them in
76 monitor_mm.c
a90419b8 77 - (stevesk) remove configure support for poll.h; it was removed
78 from sshd.c a long time ago.
9a0fbcb3 79 - (stevesk) --with-privsep-user; default sshd
1bf74eac 80 - (stevesk) wrap munmap() with HAVE_MMAP also.
7176df4f 81
b17d6a47 8220020406
83 - (djm) Typo in Suse SPEC file. Fix from Carsten Grohmann
84 <carsten.grohmann@dr-baldeweg.de>
23aa1237 85 - (bal) Added MAP_FAILED to allow AIX and Trusted HP to compile.
af2b3cd9 86 - (bal) OpenBSD CVS Sync
87 - djm@cvs.openbsd.org 2002/04/06 00:30:08
88 [sftp-client.c]
89 Fix occasional corruption on upload due to bad reuse of request id, spotted
90 by chombier@mac.com; ok markus@
39f9599a 91 - mouring@cvs.openbsd.org 2002/04/06 18:24:09
92 [scp.c]
93 Fixes potental double // within path.
94 http://bugzilla.mindrot.org/show_bug.cgi?id=76
5866adb0 95 - (bal) Slight update to OpenSC support. Better version checking. patch
96 by Juha Yrjölä <jyrjola@cc.hut.fi>
b5171f93 97 - (bal) Revered out of runtime IRIX detection of joblimits. Code is
98 incomplete.
419e4769 99 - (bal) Quiet down configure.ac if /bin/test does not exist.
14f35963 100 - (bal) We no longer use atexit()/xatexit()/on_exit()
b17d6a47 101
295c8801 10220020405
103 - (bal) Patch for OpenSC SmartCard library; ok markus@; patch by
104 Juha Yrjölä <jyrjola@cc.hut.fi>
105 - (bal) Minor documentation update to reflect smartcard library
106 support changes.
ab33e02a 107 - (bal) Too many <sys/queue.h> issues. Remove all workarounds and
108 using internal version only.
d4c6ddff 109 - (bal) OpenBSD CVS Sync
110 - stevesk@cvs.openbsd.org 2002/04/05 20:56:21
111 [sshd.8]
112 clarify sshrc some and handle X11UseLocalhost=yes; ok markus@
295c8801 113
fde58bd4 11420020404
115 - (stevesk) [auth-pam.c auth-pam.h auth-passwd.c auth-sia.c auth-sia.h
116 auth1.c auth2.c] PAM, OSF_SIA password auth cleanup; from djm.
bf03f2da 117 - (bal) OpenBSD CVS Sync
118 - markus@cvs.openbsd.org 2002/04/03 09:26:11
119 [cipher.c myproposal.h]
120 re-add rijndael-cbc@lysator.liu.se for MacSSH; ash@lab.poc.net
fde58bd4 121
ca7e8e1e 12220020402
123 - (bal) Hand Sync of scp.c (reverted to upstream code)
124 - deraadt@cvs.openbsd.org 2002/03/30 17:45:46
125 [scp.c]
126 stretch banners
c572a874 127 - (bal) CVS ID sync of uidswap.c
783dbbdc 128 - (bal) OpenBSD CVS Sync (now for the real sync)
129 - markus@cvs.openbsd.org 2002/03/27 22:21:45
130 [ssh-keygen.c]
131 try to import keys with extra trailing === (seen with ssh.com < 2.0.12)
49a34e84 132 - markus@cvs.openbsd.org 2002/03/28 15:34:51
133 [session.c]
134 do not call record_login twice (for use_privsep)
ffbf7323 135 - markus@cvs.openbsd.org 2002/03/29 18:59:32
136 [session.c session.h]
137 retrieve last login time before the pty is allocated, store per session
3bc822df 138 - stevesk@cvs.openbsd.org 2002/03/29 19:16:22
139 [sshd.8]
140 RSA key modulus size minimum 768; ok markus@
82b00264 141 - stevesk@cvs.openbsd.org 2002/03/29 19:18:33
142 [auth-rsa.c ssh-rsa.c ssh.h]
143 make RSA modulus minimum #define; ok markus@
8c38e88b 144 - markus@cvs.openbsd.org 2002/03/30 18:51:15
145 [monitor.c serverloop.c sftp-int.c sftp.c sshd.c]
146 check waitpid for EINTR; based on patch from peter@ifm.liu.se
92053302 147 - markus@cvs.openbsd.org 2002/04/01 22:02:16
148 [sftp-client.c]
149 20480 is an upper limit for older server
9c74a24d 150 - markus@cvs.openbsd.org 2002/04/01 22:07:17
151 [sftp-client.c]
152 fallback to stat if server does not support lstat
b745a2f2 153 - markus@cvs.openbsd.org 2002/04/02 11:49:39
154 [ssh-agent.c]
155 check $SHELL for -k and -d, too;
156 http://bugzilla.mindrot.org/show_bug.cgi?id=199
b69145c2 157 - markus@cvs.openbsd.org 2002/04/02 17:37:48
158 [sftp.c]
159 always call log_init()
c9336aed 160 - markus@cvs.openbsd.org 2002/04/02 20:11:38
161 [ssh-rsa.c]
162 ignore SSH_BUG_SIGBLOB for ssh-rsa; #187
c895376b 163 - (bal) mispelling in uidswap.c (portable only)
ca7e8e1e 164
8b314ec9 16520020401
166 - (stevesk) [monitor.c] PAM should work again; will *not* work with
167 UsePrivilegeSeparation=yes.
3906af0f 168 - (stevesk) [auth1.c] fix password auth for protocol 1 when
169 !USE_PAM && !HAVE_OSF_SIA; merge issue.
8b314ec9 170
267e920e 17120020331
172 - (tim) [configure.ac] use /bin/test -L to work around broken builtin on
173 Solaris 8
ef077e37 174 - (tim) [sshconnect2.c] change uint32_t to u_int32_t
267e920e 175
0461c355 17620020330
177 - (stevesk) [configure.ac] remove header check for sys/ttcompat.h
178 bug 167
179
dd466ff8 18020020327
181 - (bal) 'pw' should be 'authctxt->pw' in auth1.c spotted by
182 kent@lysator.liu.se
17f5e68a 183 - (bal) OpenBSD CVS Sync
184 - markus@cvs.openbsd.org 2002/03/26 11:34:49
185 [ssh.1 sshd.8]
186 update to recent drafts
5fb274c1 187 - markus@cvs.openbsd.org 2002/03/26 11:37:05
188 [ssh.c]
189 update Copyright
19f40184 190 - markus@cvs.openbsd.org 2002/03/26 15:23:40
191 [bufaux.c]
192 do not talk about packets in bufaux
7341fad9 193 - rees@cvs.openbsd.org 2002/03/26 18:46:59
194 [scard.c]
195 try_AUT0 in read_pubkey too, for those paranoid few who want to acl 'sh'
6c112aca 196 - markus@cvs.openbsd.org 2002/03/26 22:50:39
197 [channels.h]
198 CHANNEL_EFD_OUTPUT_ACTIVE is false for CHAN_CLOSE_RCVD, too
52103b10 199 - markus@cvs.openbsd.org 2002/03/26 23:13:03
200 [auth-rsa.c]
201 disallow RSA keys < 768 for protocol 1, too (rhosts-rsa and rsa auth)
76bf34f1 202 - markus@cvs.openbsd.org 2002/03/26 23:14:51
203 [kex.c]
204 generate a new cookie for each SSH2_MSG_KEXINIT message we send out
300e01c4 205 - mouring@cvs.openbsd.org 2002/03/27 11:45:42
206 [monitor.c]
207 monitor_allowed_key() returns int instead of pointer. ok markus@
208
eb4652f4 20920020325
210 - (stevesk) import OpenBSD <sys/tree.h> as "openbsd-compat/tree.h"
47c36e5b 211 - (bal) OpenBSD CVS Sync
212 - stevesk@cvs.openbsd.org 2002/03/23 20:57:26
213 [sshd.c]
214 setproctitle() after preauth child; ok markus@
d452ec1a 215 - markus@cvs.openbsd.org 2002/03/24 16:00:27
216 [serverloop.c]
217 remove unused debug
a49dfdec 218 - markus@cvs.openbsd.org 2002/03/24 16:01:13
219 [packet.c]
220 debug->debug3 for extra padding
5b0d7dc1 221 - stevesk@cvs.openbsd.org 2002/03/24 17:27:03
222 [kexgex.c]
223 typo; ok markus@
d4355079 224 - stevesk@cvs.openbsd.org 2002/03/24 17:53:16
225 [monitor_fdpass.c]
226 minor cleanup and more error checking; ok markus@
9fc0407d 227 - markus@cvs.openbsd.org 2002/03/24 18:05:29
228 [scard.c]
229 we need to figure out AUT0 for sc_private_encrypt, too
38c1c52a 230 - stevesk@cvs.openbsd.org 2002/03/24 23:20:00
231 [monitor.c]
232 remove "\n" from fatal()
159897f3 233 - markus@cvs.openbsd.org 2002/03/25 09:21:13
234 [auth-rsa.c]
235 return 0 (not NULL); tomh@po.crl.go.jp
6f33c8cd 236 - markus@cvs.openbsd.org 2002/03/25 09:25:06
237 [auth-rh-rsa.c]
238 rm bogus comment
0659cace 239 - markus@cvs.openbsd.org 2002/03/25 17:34:27
240 [scard.c scard.h ssh-agent.c ssh-keygen.c ssh.c]
241 change sc_get_key to sc_get_keys and hide smartcard details in scard.c
3074b20c 242 - stevesk@cvs.openbsd.org 2002/03/25 20:12:10
243 [monitor_mm.c monitor_wrap.c]
244 ssize_t args use "%ld" and cast to (long)
245 size_t args use "%lu" and cast to (u_long)
246 ok markus@ and thanks millert@
1c2deed1 247 - markus@cvs.openbsd.org 2002/03/25 21:04:02
248 [ssh.c]
249 simplify num_identity_files handling
d2296ed7 250 - markus@cvs.openbsd.org 2002/03/25 21:13:51
251 [channels.c channels.h compat.c compat.h nchan.c]
252 don't send stderr data after EOF, accept this from older known (broken)
253 sshd servers only, fixes http://bugzilla.mindrot.org/show_bug.cgi?id=179
8e4fd4a1 254 - stevesk@cvs.openbsd.org 2002/03/26 03:24:01
255 [monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h]
256 $OpenBSD$
eb4652f4 257
1178e8db 25820020324
259 - (stevesk) [session.c] disable LOGIN_NEEDS_TERM until we are sure
260 it can be removed. only used on solaris. will no longer compile with
261 privsep shuffling.
262
6f34652e 26320020322
264 - (stevesk) HAVE_ACCRIGHTS_IN_MSGHDR configure support
7b18c353 265 - (stevesk) [monitor.c monitor_wrap.c] #ifdef HAVE_PW_CLASS_IN_PASSWD
c921ee00 266 - (stevesk) configure and cpp __FUNCTION__ gymnastics to handle nielsisms
dc90b259 267 - (stevesk) [monitor_fdpass.c] support for access rights style file
268 descriptor passing
f7ed12f1 269 - (stevesk) [auth2.c] merge cleanup/sync
cfadc43b 270 - (stevesk) [defines.h] hp-ux 11 has ancillary data style fd passing, but
271 is missing CMSG_LEN() and CMSG_SPACE() macros.
cc58061e 272 - (stevesk) [defines.h] #define MAP_ANON MAP_ANONYMOUS for HP-UX; other
273 platforms may need this--I'm not sure. mmap() issues will need to be
274 addressed further.
05976246 275 - (tim) [cipher.c] fix problem with OpenBSD sync
9242fa1b 276 - (stevesk) [LICENCE] OpenBSD sync
6f34652e 277
8627f3e0 27820020321
279 - (bal) OpenBSD CVS Sync
280 - itojun@cvs.openbsd.org 2002/03/08 06:10:16
281 [sftp-client.c]
282 printf type mismatch
bfa7f960 283 - itojun@cvs.openbsd.org 2002/03/11 03:18:49
284 [sftp-client.c]
285 correct type mismatches (u_int64_t != unsigned long long)
5fc7dbc9 286 - itojun@cvs.openbsd.org 2002/03/11 03:19:53
287 [sftp-client.c]
288 indent
150a5466 289 - markus@cvs.openbsd.org 2002/03/14 15:24:27
290 [sshconnect1.c]
291 don't trust size sent by (rogue) server; noted by s.esser@e-matters.de
4f08e98d 292 - markus@cvs.openbsd.org 2002/03/14 16:38:26
293 [sshd.c]
294 split out ssh1 session key decryption; ok provos@
46f1eece 295 - markus@cvs.openbsd.org 2002/03/14 16:56:33
296 [auth-rh-rsa.c auth-rsa.c auth.h]
297 split auth_rsa() for better readability and privsep; ok provos@
c390a3c8 298 - itojun@cvs.openbsd.org 2002/03/15 11:00:38
299 [auth.c]
300 fix file type checking (use S_ISREG). ok by markus
bcb68a8f 301 - markus@cvs.openbsd.org 2002/03/16 11:24:53
302 [compress.c]
303 skip inflateEnd if inflate fails; ok provos@
3e65880e 304 - markus@cvs.openbsd.org 2002/03/16 17:22:09
305 [auth-rh-rsa.c auth.h]
306 split auth_rhosts_rsa(), ok provos@
bb15f28b 307 - stevesk@cvs.openbsd.org 2002/03/16 17:41:25
308 [auth-krb5.c]
309 BSD license. from Daniel Kouril via Dug Song. ok markus@
443fa1cd 310 - provos@cvs.openbsd.org 2002/03/17 20:25:56
311 [auth.c auth.h auth1.c auth2.c]
312 getpwnamallow returns struct passwd * only if user valid; okay markus@
1b34c1b3 313 - provos@cvs.openbsd.org 2002/03/18 01:12:14
314 [auth.h auth1.c auth2.c sshd.c]
315 have the authentication functions return the authentication context
316 and then do_authenticated; okay millert@
9d0844e3 317 - dugsong@cvs.openbsd.org 2002/03/18 01:30:10
318 [auth-krb4.c]
319 set client to NULL after xfree(), from Rolf Braun
320 <rbraun+ssh@andrew.cmu.edu>
1836f69f 321 - provos@cvs.openbsd.org 2002/03/18 03:41:08
322 [auth.c session.c]
323 move auth_approval into getpwnamallow with help from millert@
bf8269a9 324 - markus@cvs.openbsd.org 2002/03/18 17:13:15
325 [cipher.c cipher.h]
326 export/import cipher states; needed by ssh-privsep
e050d348 327 - markus@cvs.openbsd.org 2002/03/18 17:16:38
328 [packet.c packet.h]
329 export/import cipher state, iv and ssh2 seqnr; needed by ssh-privsep
d0074658 330 - markus@cvs.openbsd.org 2002/03/18 17:23:31
331 [key.c key.h]
332 add key_demote() for ssh-privsep
b625ad75 333 - provos@cvs.openbsd.org 2002/03/18 17:25:29
334 [bufaux.c bufaux.h]
335 buffer_skip_string and extra sanity checking; needed by ssh-privsep
3d6fc2f8 336 - provos@cvs.openbsd.org 2002/03/18 17:31:54
337 [compress.c]
338 export compression streams for ssh-privsep
1853d1ef 339 - provos@cvs.openbsd.org 2002/03/18 17:50:31
340 [auth-bsdauth.c auth-options.c auth-rh-rsa.c auth-rsa.c auth-skey.c auth.h
341 auth1.c auth2-chall.c auth2.c kex.c kex.h kexdh.c kexgex.c servconf.c
342 session.h servconf.h serverloop.c session.c sshd.c]
343 integrate privilege separated openssh; its turned off by default for now.
344 work done by me and markus@
ce19ff48 345 - provos@cvs.openbsd.org 2002/03/18 17:53:08
346 [sshd.8]
347 credits for privsep
70aa9ff4 348 - provos@cvs.openbsd.org 2002/03/18 17:59:09
349 [sshd.8]
350 document UsePrivilegeSeparation
73fbf637 351 - stevesk@cvs.openbsd.org 2002/03/18 23:52:51
352 [servconf.c]
353 UnprivUser/UnprivGroup usable now--specify numeric user/group; ok
354 provos@
1c352e97 355 - stevesk@cvs.openbsd.org 2002/03/19 03:03:43
356 [pathnames.h servconf.c servconf.h sshd.c]
357 _PATH_PRIVSEP_CHROOT_DIR; ok provos@
fffbaee2 358 - stevesk@cvs.openbsd.org 2002/03/19 05:23:08
359 [sshd.8]
360 Banner has no default.
702b7dd8 361 - mpech@cvs.openbsd.org 2002/03/19 06:32:56
362 [sftp-int.c]
363 use xfree() after xstrdup().
364
365 markus@ ok
51aeb639 366 - markus@cvs.openbsd.org 2002/03/19 10:35:39
367 [auth-options.c auth.h session.c session.h sshd.c]
368 clean up prototypes
762715ce 369 - markus@cvs.openbsd.org 2002/03/19 10:49:35
370 [auth-krb5.c auth-rh-rsa.c auth.c cipher.c key.c misc.h packet.c session.c
371 sftp-client.c sftp-glob.h sftp.c ssh-add.c ssh.c sshconnect2.c sshd.c
372 ttymodes.c]
373 KNF whitespace
5f1f36b5 374 - markus@cvs.openbsd.org 2002/03/19 14:27:39
375 [auth.c auth1.c auth2.c]
376 make getpwnamallow() allways call pwcopy()
06bea668 377 - markus@cvs.openbsd.org 2002/03/19 15:31:47
378 [auth.c]
379 check for NULL; from provos@
2ea6de2b 380 - stevesk@cvs.openbsd.org 2002/03/20 19:12:25
381 [servconf.c servconf.h ssh.h sshd.c]
382 for unprivileged user, group do:
383 pw=getpwnam(SSH_PRIVSEP_USER); do_setusercontext(pw). ok provos@
256debd0 384 - stevesk@cvs.openbsd.org 2002/03/20 21:08:08
385 [sshd.c]
386 strerror() on chdir() fail; ok provos@
edfb66cb 387 - markus@cvs.openbsd.org 2002/03/21 10:21:20
388 [ssh-add.c]
389 ignore errors for nonexisting default keys in ssh-add,
390 fixes http://bugzilla.mindrot.org/show_bug.cgi?id=158
c53c54c2 391 - jakob@cvs.openbsd.org 2002/03/21 15:17:26
392 [clientloop.c ssh.1]
393 add built-in command line for adding new port forwardings on the fly.
394 based on a patch from brian wellington. ok markus@.
7649bbfe 395 - markus@cvs.openbsd.org 2002/03/21 16:38:06
396 [scard.c]
397 make compile w/ openssl 0.9.7
b9f62352 398 - markus@cvs.openbsd.org 2002/03/21 16:54:53
399 [scard.c scard.h ssh-keygen.c]
400 move key upload to scard.[ch]
401 - markus@cvs.openbsd.org 2002/03/21 16:57:15
402 [scard.c]
403 remove const
39ac8430 404 - markus@cvs.openbsd.org 2002/03/21 16:58:13
405 [clientloop.c]
406 remove unused
514b94dc 407 - rees@cvs.openbsd.org 2002/03/21 18:08:15
408 [scard.c]
409 In sc_put_key(), sc_reader_id should be id.
ce1ba33a 410 - markus@cvs.openbsd.org 2002/03/21 20:51:12
411 [sshd_config]
412 add privsep (off)
324bf712 413 - markus@cvs.openbsd.org 2002/03/21 21:23:34
414 [sshd.c]
415 add privsep_preauth() and remove 1 goto; ok provos@
86c4f63d 416 - rees@cvs.openbsd.org 2002/03/21 21:54:34
417 [scard.c scard.h ssh-keygen.c]
418 Add PIN-protection for secret key.
76139bd8 419 - rees@cvs.openbsd.org 2002/03/21 22:44:05
420 [authfd.c authfd.h ssh-add.c ssh-agent.c ssh.c]
421 Add PIN-protection for secret key.
ec9b7086 422 - markus@cvs.openbsd.org 2002/03/21 23:07:37
423 [clientloop.c]
424 remove unused, sync w/ cmdline patch in my tree.
ce1ba33a 425
81dadca3 42620020317
427 - (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is wanted,
428 warn if directory does not exist. Put system directories in front of
429 PATH for finding entorpy commands.
43e41c2c 430 - (tim) [contrib/aix/buildbff.sh contrib/aix/inventory.sh] AIX package
431 build fixes. Patch by Darren Tucker <dtucker@zip.com.au>
432 [contrib/solaris/buildpkg.sh] add missing dirs to SYSTEM_DIR. Have
433 postinstall check for $piddir and add if necessary.
81dadca3 434
e4abf75b 43520020311
436 - (tim) [contrib/solaris/buildpkg.sh, contrib/solaris/README] Updated to
437 build on all platforms that support SVR4 style package tools. Now runs
438 from build dir. Parts are based on patches from Antonio Navarro, and
439 Darren Tucker.
440
fb8f3dc9 44120020308
a068d86f 442 - (djm) Revert bits of Markus' OpenSSL compat patch which was
443 accidentally committed.
444 - (djm) Add Markus' patch for compat wih OpenSSL < 0.9.6.
445 Known issue: Blowfish for SSH1 does not work
dc254471 446 - (stevesk) entropy.c: typo in debug message
633151a3 447 - (djm) ssh-keygen -i needs seeded RNG; report from markus@
fb8f3dc9 448
1854a55e 44920020307
450 - (djm) OpenBSD CVS Sync
451 - markus@cvs.openbsd.org 2002/03/06 00:20:54
452 [compat.c dh.c]
453 compat.c
83a9aa63 454 - markus@cvs.openbsd.org 2002/03/06 00:23:27
455 [compat.c dh.c]
456 undo
dbe426a1 457 - markus@cvs.openbsd.org 2002/03/06 00:24:39
458 [compat.c]
459 compat.c
86044b85 460 - markus@cvs.openbsd.org 2002/03/06 00:25:55
461 [version.h]
462 OpenSSH_3.1
01f8d3ee 463 - (djm) Update RPM spec files with new version number
4ca33cc5 464 - (bal) Updated INSTALL to reflect 0.9.6 OpenSSL requirement
5bbbc661 465 - (bal) Add in check for rpc/types.h since it is needed on
466 some platforms for INADDR_LOOPBACK. We should retest
467 SCO 3 to see if this fixes their problem also.
492a3893 468 - (bal) Test for IRIX JOBS support at runtime. Patch provided
469 by David Kaelbling <drk@sgi.com>
470
a88e3e36 47120020305
472 - stevesk@cvs.openbsd.org 2002/03/02 09:34:42
473 [LICENCE]
474 correct copyright dates for scp license; ok markus@
475
27f30efd 47620020304
477 - OpenBSD CVS Sync
478 - deraadt@cvs.openbsd.org 2002/02/26 18:52:32
479 [sftp.1]
480 Ic cannot have that many arguments; spotted by mouring@etoh.eviladmin.org
dc76d6ce 481 - mouring@cvs.openbsd.org 2002/02/26 19:04:37
482 [sftp.1]
483 > Ic cannot have that many arguments; spotted by mouring@etoh.eviladmin.org
484 Last Ic on the first line should not have a space between it and the final
485 comma.
7e35f994 486 - deraadt@cvs.openbsd.org 2002/02/26 19:06:43
487 [sftp.1]
488 no, look closely. the comma was highlighted. split .Ic even more
3c05447a 489 - stevesk@cvs.openbsd.org 2002/02/26 20:03:51
490 [misc.c]
491 use socklen_t
db518d9b 492 - stevesk@cvs.openbsd.org 2002/02/27 21:23:13
493 [canohost.c channels.c packet.c sshd.c]
494 remove unneeded casts in [gs]etsockopt(); ok markus@
714954dc 495 - markus@cvs.openbsd.org 2002/02/28 15:46:33
496 [authfile.c kex.c kexdh.c kexgex.c key.c ssh-dss.c]
497 add some const EVP_MD for openssl-0.9.7
cd9a7017 498 - stevesk@cvs.openbsd.org 2002/02/28 19:36:28
499 [auth.c match.c match.h]
500 delay hostname lookup until we see a ``@'' in DenyUsers and AllowUsers
501 for sshd -u0; ok markus@
ebb1bf1a 502 - stevesk@cvs.openbsd.org 2002/02/28 20:36:42
503 [sshd.8]
504 DenyUsers allows user@host pattern also
f464aad8 505 - stevesk@cvs.openbsd.org 2002/02/28 20:46:10
506 [sshd.8]
507 -u0 DNS for user@host
b334badd 508 - stevesk@cvs.openbsd.org 2002/02/28 20:56:00
509 [auth.c]
510 log user not allowed details, from dwd@bell-labs.com; ok markus@
6805fc56 511 - markus@cvs.openbsd.org 2002/03/01 13:12:10
512 [auth.c match.c match.h]
513 undo the 'delay hostname lookup' change
514 match.c must not use compress.c (via canonhost.c/packet.c)
515 thanks to wilfried@
fa1eb020 516 - markus@cvs.openbsd.org 2002/03/04 12:43:06
517 [auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
c92ec40b 518 - markus@cvs.openbsd.org 2002/03/04 13:10:46
519 [misc.c]
520 error-> debug, because O_NONBLOCK for /dev/null causes too many different
521 errnos; ok stevesk@, deraadt@
fa1eb020 522 unused include
93c3b6de 523 - stevesk@cvs.openbsd.org 2002/03/04 17:27:39
524 [auth-krb5.c auth-options.h auth.h authfd.h authfile.h bufaux.h buffer.h
525 channels.h cipher.h compat.h compress.h crc32.h deattack.c getput.h
526 groupaccess.c misc.c mpaux.h packet.h readconf.h rsa.h scard.h
527 servconf.h ssh-agent.c ssh.h ssh2.h sshpty.h sshtty.c ttymodes.h
528 uuencode.c xmalloc.h]
529 $OpenBSD$ and RCSID() cleanup: don't use RCSID() in .h files; add
530 missing RCSID() to .c files and remove dup /*$OpenBSD$*/ from .c
531 files. ok markus@
27452401 532 - stevesk@cvs.openbsd.org 2002/03/04 18:30:23
533 [ssh-keyscan.c]
534 handle connection close during read of protocol version string.
535 fixes erroneous "bad greeting". ok markus@
c77d2e56 536 - markus@cvs.openbsd.org 2002/03/04 19:37:58
537 [channels.c]
538 off by one; thanks to joost@pine.nl
ef817d21 539 - (bal) Added contrib/aix/ to support BFF package generation provided
540 by Darren Tucker <dtucker@zip.com.au>
ddceb1c8 54120020226
542 - (tim) Bug 12 [configure.ac] add sys/bitypes.h to int64_t tests
543 based on patch by mooney@dogbert.cc.ndsu.nodak.edu (Tim Mooney)
544 Bug 45 [configure.ac] modify skey test to work around conflict with autoconf
545 reported by nolan@naic.edu (Michael Nolan)
546 patch by Pekka Savola <pekkas@netcore.fi>
547 Bug 74 [configure.ac defines.h] add sig_atomic_t test
548 reported by dwd@bell-labs.com (Dave Dykstra)
549 Bug 102 [defines.h] UNICOS fixes. patch by wendyp@cray.com
550 [configure.ac Makefile.in] link libwrap only with sshd
551 based on patch by Maciej W. Rozycki <macro@ds2.pg.gda.pl>
552 Bug 123 link libpam only with sshd
553 reported by peak@argo.troja.mff.cuni.cz (Pavel Kankovsky)
554 [configure.ac defines.h] modify previous SCO3 fix to not break Solaris 7
555 [acconfig.h] remove unused HAVE_REGCOMP
98f2d9d5 556 [configure.ac] put back in search for prngd-socket
12e8eb8d 557 - (stevesk) openbsd-compat/base64.h: typo in comment
e6164c5e 558 - (bal) Update sshd_config CVSID
c12337d9 559 - (bal) OpenBSD CVS Sync
560 - markus@cvs.openbsd.org 2002/02/15 23:54:10
561 [auth-krb5.c]
562 krb5_get_err_text() does not like context==NULL; he@nordu.net via google;
563 ok provos@
2bae80e9 564 - markus@cvs.openbsd.org 2002/02/22 12:20:34
565 [log.c log.h ssh-keyscan.c]
566 overwrite fatal() in ssh-keyscan.c; fixes pr 2354; ok provos@
b967d870 567 - markus@cvs.openbsd.org 2002/02/23 17:59:02
568 [kex.c kexdh.c kexgex.c]
569 don't allow garbage after payload.
f6b1ba8f 570 - stevesk@cvs.openbsd.org 2002/02/24 16:09:52
571 [sshd.c]
572 use u_char* here; ok markus@
f60ace9f 573 - markus@cvs.openbsd.org 2002/02/24 16:57:19
574 [sftp-client.c]
575 early close(), missing free; ok stevesk@
a318bbf4 576 - markus@cvs.openbsd.org 2002/02/24 16:58:32
577 [packet.c]
578 make 'cp' unsigned and merge with 'ucp'; ok stevesk@
b117a4d3 579 - markus@cvs.openbsd.org 2002/02/24 18:31:09
580 [uuencode.c]
581 typo in comment
c66f9d0e 582 - markus@cvs.openbsd.org 2002/02/24 19:14:59
583 [auth2.c authfd.c authfd.h authfile.c kexdh.c kexgex.c key.c key.h
584 ssh-dss.c ssh-dss.h ssh-keygen.c ssh-rsa.c ssh-rsa.h sshconnect2.c]
585 signed vs. unsigned: make size arguments u_int, ok stevesk@
811a6342 586 - stevesk@cvs.openbsd.org 2002/02/24 19:59:42
587 [channels.c misc.c]
588 disable Nagle in connect_to() and channel_post_port_listener() (port
589 forwarding endpoints). the intention is to preserve the on-the-wire
590 appearance to applications at either end; the applications can then
591 enable TCP_NODELAY according to their requirements. ok markus@
21b30f38 592 - markus@cvs.openbsd.org 2002/02/25 16:33:27
593 [ssh-keygen.c sshconnect2.c uuencode.c uuencode.h]
594 more u_* fixes
bb2fbc98 595 - (bal) Imported missing fatal.c and fixed up Makefile.in
98f2d9d5 596 - (tim) [configure.ac] correction to Bug 123 fix
2d16d9a3 597 [configure.ac] correction to sig_atomic_t test
ddceb1c8 598
da522265 59920020225
600 - (bal) Last AIX patch. Moved aix_usrinfo() outside of do_setuserconext()
601 since we need more session information than provided by that function.
602
2ec3dbf6 60320020224
604 - (bal) Drop Session *s usage in ports-aix.[ch] and pass just what we
605 need to do the jobs (AIX still does not fully compile, but that is
606 coming).
4936fcee 607 - (bal) Part two.. Drop unused AIX header, fix up missing char *cp. All
608 that is left is handling aix_usrinfo().
f3837bc6 609 - (tim) [loginrec.c session.c sshlogin.c sshlogin.h] Bug 84
610 patch by wknox@mitre.org (William Knox).
611 [sshlogin.h] declare record_utmp_only for session.c
2ec3dbf6 612
8001948f 61320020221
2ec3dbf6 614 - (bal) Minor session.c fixup for cygwin. mispelt 'is_winnt' variable.
8001948f 615
241b0041 61620020219
617 - (djm) OpenBSD CVS Sync
618 - mpech@cvs.openbsd.org 2002/02/13 08:33:47
619 [ssh-keyscan.1]
620 When you give command examples and etc., in a manual page prefix them with: $ command
621 or
622 # command
399d1ea6 623 - markus@cvs.openbsd.org 2002/02/14 23:27:59
624 [channels.c]
625 increase the SSH v2 window size to 4 packets. comsumes a little
626 bit more memory for slow receivers but increases througput.
ea9700ba 627 - markus@cvs.openbsd.org 2002/02/14 23:28:00
628 [channels.h session.c ssh.c]
629 increase the SSH v2 window size to 4 packets. comsumes a little
630 bit more memory for slow receivers but increases througput.
3ee832e5 631 - markus@cvs.openbsd.org 2002/02/14 23:41:01
632 [authfile.c cipher.c cipher.h kex.c kex.h packet.c]
633 hide some more implementation details of cipher.[ch] and prepares for move
634 to EVP, ok deraadt@
2a55e100 635 - stevesk@cvs.openbsd.org 2002/02/16 14:53:37
636 [ssh-keygen.1]
637 -t required now for key generation
8d22d775 638 - stevesk@cvs.openbsd.org 2002/02/16 20:40:08
639 [ssh-keygen.c]
640 default to rsa keyfile path for non key generation operations where
641 keyfile not specified. fixes core dump in those cases. ok markus@
ef2839b9 642 - millert@cvs.openbsd.org 2002/02/16 21:27:53
643 [auth.h]
644 Part one of userland __P removal. Done with a simple regexp with
645 some minor hand editing to make comments line up correctly. Another
646 pass is forthcoming that handles the cases that could not be done
647 automatically.
d96be24d 648 - millert@cvs.openbsd.org 2002/02/17 19:42:32
649 [auth.h]
650 Manual cleanup of remaining userland __P use (excluding packages
651 maintained outside the tree)
70fc1609 652 - markus@cvs.openbsd.org 2002/02/18 13:05:32
653 [cipher.c cipher.h]
654 switch to EVP, ok djm@ deraadt@
4e30de66 655 - markus@cvs.openbsd.org 2002/02/18 17:55:20
656 [ssh.1]
657 -q: Fatal errors are _not_ displayed.
d9959c61 658 - deraadt@cvs.openbsd.org 2002/02/19 02:50:59
659 [sshd_config]
660 stategy is not an english word
90e70cfc 661 - (bal) Migrated IRIX jobs/projects/audit/etc code to
2cce09e7 662 openbsd-compat/port-irix.[ch] to improve readiblity of do_child()
90e70cfc 663 - (bal) Migrated AIX getuserattr and usrinfo code to
664 openbsd-compat/port-aix.[c] to improve readilbity of do_child() and
665 simplify our diffs against upstream source.
f7342052 666 - (bal) OpenBSD CVS Sync
667 - markus@cvs.openbsd.org 2002/02/15 23:11:26
668 [session.c]
669 split do_child(), ok mouring@
5dd82c23 670 - markus@cvs.openbsd.org 2002/02/16 00:51:44
671 [session.c]
672 typo
673 - (bal) CVS ID sync since the last two patches were merged mistakenly
241b0041 674
975956bb 67520020218
676 - (tim) newer config.guess from ftp://ftp.gnu.org/gnu/config/config.guess
677
0c43a2e7 67820020213
3b83c722 679 - (djm) Don't use system sys/queue.h on AIX. Report from
680 gert@greenie.muc.de
681 - (djm) Bug #114 - not starting PAM for SSH protocol 1 invalid users
0c43a2e7 682
68320020213
9d726f16 684 - (djm) OpenBSD CVS Sync
685 - markus@cvs.openbsd.org 2002/02/11 16:10:15
686 [kex.c]
687 restore kexinit handler if we reset the dispatcher, this unbreaks
688 rekeying s/kex_clear_dispatch/kex_reset_dispatch/
6b4b5e49 689 - markus@cvs.openbsd.org 2002/02/11 16:15:46
690 [sshconnect1.c]
691 include md5.h, not evp.h
44b1a8e5 692 - markus@cvs.openbsd.org 2002/02/11 16:17:55
693 [sshd.c]
694 do not complain about port > 1024 if rhosts-auth is disabled
436c347c 695 - markus@cvs.openbsd.org 2002/02/11 16:19:39
696 [sshd.c]
697 include md5.h not hmac.h
fa869228 698 - markus@cvs.openbsd.org 2002/02/11 16:21:42
699 [match.c]
700 support up to 40 algorithms per proposal
c25d3df7 701 - djm@cvs.openbsd.org 2002/02/12 12:32:27
702 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c]
703 Perform multiple overlapping read/write requests in file transfer. Mostly
704 done by Tobias Ringstrom <tori@ringstrom.mine.nu>; ok markus@
b2bab059 705 - djm@cvs.openbsd.org 2002/02/12 12:44:46
706 [sftp-client.c]
707 Let overlapped upload path handle servers which reorder ACKs. This may be
708 permitted by the protocol spec; ok markus@
cb476289 709 - markus@cvs.openbsd.org 2002/02/13 00:28:13
710 [sftp-server.c]
711 handle SSH2_FILEXFER_ATTR_SIZE in SSH2_FXP_(F)SETSTAT; ok djm@
b984f12e 712 - markus@cvs.openbsd.org 2002/02/13 00:39:15
713 [readpass.c]
714 readpass.c is not longer from UCB, since we now use readpassphrase(3)
22e6c827 715 - djm@cvs.openbsd.org 2002/02/13 00:59:23
716 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp.h]
717 [sftp-int.c sftp-int.h]
718 API cleanup and backwards compat for filexfer v.0 servers; ok markus@
1656cbed 719 - (djm) Sync openbsd-compat with OpenBSD CVS too
9d6b6505 720 - (djm) Bug #106: Add --without-rpath configure option. Patch from
721 Nicolas.Williams@ubsw.com
f7d5d67f 722 - (tim) [configure.ac, defines.h ] add rpc/rpc.h for INADDR_LOOPBACK
723 on SCO OSR3
9d726f16 724
2a8a6488 72520020210
726 - (djm) OpenBSD CVS Sync
727 - deraadt@cvs.openbsd.org 2002/02/09 17:37:34
728 [pathnames.h session.c ssh.1 sshd.8 sshd_config ssh-keyscan.1]
729 move ssh config files to /etc/ssh
730 - (djm) Adjust portable Makefile.in tnd ssh-rand-helper.c o match
af98ced9 731 - deraadt@cvs.openbsd.org 2002/02/10 01:07:05
732 [readconf.h sshd.8]
733 more /etc/ssh; openbsd@davidkrause.com
2a8a6488 734
980c9344 73520020208
736 - (djm) OpenBSD CVS Sync
737 - markus@cvs.openbsd.org 2002/02/04 12:15:25
738 [sshd.c]
739 add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1,
740 fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@
4c646df4 741 - stevesk@cvs.openbsd.org 2002/02/04 20:41:16
742 [ssh-agent.1]
743 more sync for default ssh-add identities; ok markus@
375f867e 744 - djm@cvs.openbsd.org 2002/02/05 00:00:46
745 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c]
746 Add "-B" option to specify copy buffer length (default 32k); ok markus@
06ee33fb 747 - markus@cvs.openbsd.org 2002/02/05 14:32:55
748 [channels.c channels.h ssh.c]
749 merge channel_request() into channel_request_start()
7d5e8c46 750 - markus@cvs.openbsd.org 2002/02/06 14:22:42
751 [sftp.1]
752 sort options; ok mpech@, stevesk@
22be05a5 753 - mpech@cvs.openbsd.org 2002/02/06 14:27:23
754 [sftp.c]
755 sync usage() with manual.
5a4ae906 756 - markus@cvs.openbsd.org 2002/02/06 14:37:22
757 [session.c]
758 minor KNF
3a0d3d54 759 - markus@cvs.openbsd.org 2002/02/06 14:55:16
760 [channels.c clientloop.c serverloop.c ssh.c]
761 channel_new never returns NULL, mouring@; ok djm@
275a87f6 762 - markus@cvs.openbsd.org 2002/02/07 09:35:39
763 [ssh.c]
764 remove bogus comments
980c9344 765
bcc0381e 76620020205
983784a1 767 - (djm) Cleanup after sync:
768 - :%s/reverse_mapping_check/verify_reverse_mapping/g
bcc0381e 769 - (djm) OpenBSD CVS Sync
770 - stevesk@cvs.openbsd.org 2002/01/24 21:09:25
771 [channels.c misc.c misc.h packet.c]
772 add set_nodelay() to set TCP_NODELAY on a socket (prep for nagle tuning).
773 no nagle changes just yet; ok djm@ markus@
2ac91be1 774 - stevesk@cvs.openbsd.org 2002/01/24 21:13:23
775 [packet.c]
776 need misc.h for set_nodelay()
7d30579d 777 - markus@cvs.openbsd.org 2002/01/25 21:00:24
778 [sshconnect2.c]
779 unused include
087dea86 780 - markus@cvs.openbsd.org 2002/01/25 21:42:11
781 [ssh-dss.c ssh-rsa.c]
782 use static EVP_MAX_MD_SIZE buffers for EVP_DigestFinal; ok stevesk@
783 don't use evp_md->md_size, it's not public.
a209a158 784 - markus@cvs.openbsd.org 2002/01/25 22:07:40
785 [kex.c kexdh.c kexgex.c key.c mac.c]
786 use EVP_MD_size(evp_md) and not evp_md->md_size; ok steveks@
f9314d9a 787 - stevesk@cvs.openbsd.org 2002/01/26 16:44:22
788 [includes.h session.c]
789 revert code to add x11 localhost display authorization entry for
790 hostname/unix:d and uts.nodename/unix:d if nodename was different than
791 hostname. just add entry for unix:d instead. ok markus@
e6e573bd 792 - stevesk@cvs.openbsd.org 2002/01/27 14:57:46
793 [channels.c servconf.c servconf.h session.c sshd.8 sshd_config]
794 add X11UseLocalhost; ok markus@
75a624f0 795 - stevesk@cvs.openbsd.org 2002/01/27 18:08:17
796 [ssh.c]
797 handle simple case to identify FamilyLocal display; ok markus@
a2863956 798 - markus@cvs.openbsd.org 2002/01/29 14:27:57
799 [ssh-add.c]
800 exit 2 if no agent, exit 1 if list fails; debian#61078; ok djm@
bf4c5edc 801 - markus@cvs.openbsd.org 2002/01/29 14:32:03
802 [auth2.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c canohost.c]
803 [servconf.c servconf.h session.c sshd.8 sshd_config]
804 s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion;
805 ok stevesk@
8875ca97 806 - stevesk@cvs.openbsd.org 2002/01/29 16:29:02
807 [session.c]
808 limit subsystem length in log; ok markus@
8e3ce4dc 809 - markus@cvs.openbsd.org 2002/01/29 16:41:19
810 [ssh-add.1]
811 add DIAGNOSTICS; ok stevesk@
24932ee9 812 - markus@cvs.openbsd.org 2002/01/29 22:46:41
813 [session.c]
814 don't depend on servconf.c; ok djm@
16210ef7 815 - markus@cvs.openbsd.org 2002/01/29 23:50:37
816 [scp.1 ssh.1]
817 mention exit status; ok stevesk@
215ced77 818 - markus@cvs.openbsd.org 2002/01/31 13:35:11
819 [kexdh.c kexgex.c]
820 cross check announced key type and type from key blob
d01c63bb 821 - markus@cvs.openbsd.org 2002/01/31 15:00:05
822 [serverloop.c]
823 no need for WNOHANG; ok stevesk@
7899c98f 824 - markus@cvs.openbsd.org 2002/02/03 17:53:25
825 [auth1.c serverloop.c session.c session.h]
826 don't use channel_input_channel_request and callback
827 use new server_input_channel_req() instead:
828 server_input_channel_req does generic request parsing on server side
829 session_input_channel_req handles just session specific things now
830 ok djm@
8034b5cd 831 - markus@cvs.openbsd.org 2002/02/03 17:55:55
832 [channels.c channels.h]
833 remove unused channel_input_channel_request
05ca0898 834 - markus@cvs.openbsd.org 2002/02/03 17:58:21
835 [channels.c channels.h ssh.c]
836 generic callbacks are not really used, remove and
837 add a callback for msg of type SSH2_MSG_CHANNEL_OPEN_CONFIRMATION
838 ok djm@
0dbdc37c 839 - markus@cvs.openbsd.org 2002/02/03 17:59:23
840 [sshconnect2.c]
841 more cross checking if announced vs. used key type; ok stevesk@
3b5a1b05 842 - stevesk@cvs.openbsd.org 2002/02/03 22:35:57
843 [ssh.1 sshd.8]
844 some KeepAlive cleanup/clarify; ok markus@
49ebf326 845 - stevesk@cvs.openbsd.org 2002/02/03 23:22:59
846 [ssh-agent.1]
847 ssh-add also adds $HOME/.ssh/id_rsa and $HOME/.ssh/id_dsa now.
762f5ea2 848 - stevesk@cvs.openbsd.org 2002/02/04 00:53:39
849 [ssh-agent.c]
850 unneeded includes
67fa09f5 851 - markus@cvs.openbsd.org 2002/02/04 11:58:10
852 [auth2.c]
853 cross checking of announced vs actual pktype in pubkey/hostbaed auth;
854 ok stevesk@
5eaf8578 855 - markus@cvs.openbsd.org 2002/02/04 12:15:25
856 [log.c log.h readconf.c servconf.c]
857 add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1,
858 fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@
a445d432 859 - stevesk@cvs.openbsd.org 2002/02/04 20:41:16
860 [ssh-add.1]
861 more sync for default ssh-add identities; ok markus@
a96fd7c2 862 - djm@cvs.openbsd.org 2002/02/04 21:53:12
863 [sftp.1 sftp.c]
864 Add "-P" option to directly connect to a local sftp-server. Should be
865 useful for regression testing; ok markus@
86e23f3e 866 - djm@cvs.openbsd.org 2002/02/05 00:00:46
867 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c]
868 Add "-B" option to specify copy buffer length (default 32k); ok markus@
bcc0381e 869
8d7324af 87020020130
871 - (djm) Delay PRNG seeding until we need it in ssh-keygen, from markus@
70e2f2f3 872 - (tim) [configure.ac] fix logic on when ssh-rand-helper is installed.
873 [sshd_config] put back in line that tells what PATH was compiled into sshd.
8d7324af 874
90bab5a8 87520020125
9b7fcaf0 876 - (djm) Don't grab Xserver or pointer by default. x11-ssh-askpass doesn't
877 and grabbing can cause deadlocks with kinput2.
90bab5a8 878
533845df 87920020124
880 - (stevesk) Makefile.in: bug #61; delete commented line for now.
881
906e811b 88220020123
883 - (djm) Fix non-standard shell syntax in autoconf. Patch from
884 Dave Dykstra <dwd@bell-labs.com>
846f83ab 885 - (stevesk) fix --with-zlib=
eb5d7ff6 886 - (djm) Use case statements in autoconf to clean up some tests
5b6c4ceb 887 - (bal) reverted out of 5/2001 change to atexit(). I assume I
888 did it to handle SonyOS. If that is the case than we will
889 do a special case for them.
906e811b 890
f1b0ecc3 89120020122
892 - (djm) autoconf hacking:
893 - We don't support --without-zlib currently, so don't allow it.
894 - Rework cryptographic random number support detection. We now detect
895 whether OpenSSL seeds itself. If it does, then we don't bother with
896 the ssh-rand-helper program. You can force the use of ssh-rand-helper
897 using the --with-rand-helper configure argument
898 - Simplify and clean up ssh-rand-helper configuration
9780116c 899 - Add OpenSSL sanity check: verify that header version matches version
900 reported by library
49d7ed32 901 - (djm) Fix some bugs I introduced into ssh-rand-helper yesterday
3dc93cd8 902 - OpenBSD CVS Sync
903 - djm@cvs.openbsd.org 2001/12/21 08:52:22
904 [ssh-keygen.1 ssh-keygen.c]
905 Remove default (rsa1) key type; ok markus@
f9654cd7 906 - djm@cvs.openbsd.org 2001/12/21 08:53:45
907 [readpass.c]
908 Avoid interruptable passphrase read; ok markus@
67656ffc 909 - djm@cvs.openbsd.org 2001/12/21 10:06:43
910 [ssh-add.1 ssh-add.c]
911 Try all standard key files (id_rsa, id_dsa, identity) when invoked with
912 no arguments; ok markus@
b0ce9259 913 - markus@cvs.openbsd.org 2001/12/21 12:17:33
914 [serverloop.c]
915 remove ifdef for USE_PIPES since fdin != fdout; ok djm@
0e0bba68 916 - deraadt@cvs.openbsd.org 2001/12/24 07:29:43
917 [ssh-add.c]
918 try all listed keys.. how did this get broken?
e13b4278 919 - markus@cvs.openbsd.org 2001/12/25 18:49:56
920 [key.c]
921 be more careful on allocation
45c49544 922 - markus@cvs.openbsd.org 2001/12/25 18:53:00
923 [auth1.c]
924 be more carefull on allocation
bb28e836 925 - markus@cvs.openbsd.org 2001/12/27 18:10:29
926 [ssh-keygen.c]
927 -t is only needed for key generation (unbreaks -i, -e, etc).
b775c6f2 928 - markus@cvs.openbsd.org 2001/12/27 18:22:16
929 [auth1.c authfile.c auth-rsa.c dh.c kexdh.c kexgex.c key.c rsa.c]
930 [scard.c ssh-agent.c sshconnect1.c sshd.c ssh-dss.c]
931 call fatal() for openssl allocation failures
135113a3 932 - stevesk@cvs.openbsd.org 2001/12/27 18:22:53
933 [sshd.8]
934 clarify -p; ok markus@
cf184a44 935 - markus@cvs.openbsd.org 2001/12/27 18:26:13
936 [authfile.c]
937 missing include
108d362e 938 - markus@cvs.openbsd.org 2001/12/27 19:37:23
939 [dh.c kexdh.c kexgex.c]
940 always use BN_clear_free instead of BN_free
dc421aa3 941 - markus@cvs.openbsd.org 2001/12/27 19:54:53
942 [auth1.c auth.h auth-rh-rsa.c]
943 auth_rhosts_rsa now accept generic keys.
95500969 944 - markus@cvs.openbsd.org 2001/12/27 20:39:58
945 [auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h]
946 [serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c]
947 get rid of packet_integrity_check, use packet_done() instead.
3456d3c7 948 - markus@cvs.openbsd.org 2001/12/28 12:14:27
20b279e6 949 [auth1.c auth2.c auth2-chall.c auth-rsa.c channels.c clientloop.c]
950 [kex.c kexdh.c kexgex.c packet.c packet.h serverloop.c session.c]
951 [ssh.c sshconnect1.c sshconnect2.c sshd.c]
3456d3c7 952 s/packet_done/packet_check_eom/ (end-of-message); ok djm@
20b279e6 953 - markus@cvs.openbsd.org 2001/12/28 13:57:33
954 [auth1.c kexdh.c kexgex.c packet.c packet.h sshconnect1.c sshd.c]
955 packet_get_bignum* no longer returns a size
4ef6f649 956 - markus@cvs.openbsd.org 2001/12/28 14:13:13
957 [bufaux.c bufaux.h packet.c]
958 buffer_get_bignum: int -> void
54a5250f 959 - markus@cvs.openbsd.org 2001/12/28 14:50:54
960 [auth1.c auth-rsa.c channels.c dispatch.c kex.c kexdh.c kexgex.c]
961 [packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c]
962 [sshconnect2.c sshd.c]
963 packet_read* no longer return the packet length, since it's not used.
7819b5c3 964 - markus@cvs.openbsd.org 2001/12/28 15:06:00
965 [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
966 [dispatch.h kex.c kex.h serverloop.c ssh.c sshconnect2.c]
967 remove plen from the dispatch fn. it's no longer used.
60015649 968 - stevesk@cvs.openbsd.org 2001/12/28 22:37:48
969 [ssh.1 sshd.8]
970 document LogLevel DEBUG[123]; ok markus@
20905a8e 971 - stevesk@cvs.openbsd.org 2001/12/29 21:56:01
972 [authfile.c channels.c compress.c packet.c sftp-server.c]
973 [ssh-agent.c ssh-keygen.c]
974 remove unneeded casts and some char->u_char cleanup; ok markus@
6c79c353 975 - stevesk@cvs.openbsd.org 2002/01/03 04:11:08
976 [ssh_config]
977 grammar in comment
b4047251 978 - stevesk@cvs.openbsd.org 2002/01/04 17:59:17
979 [readconf.c servconf.c]
980 remove #ifdef _PATH_XAUTH/#endif; ok markus@
0f84fe37 981 - stevesk@cvs.openbsd.org 2002/01/04 18:14:16
982 [servconf.c sshd.8]
983 protocol 2 HostKey code default is now /etc/ssh_host_rsa_key and
984 /etc/ssh_host_dsa_key like we have in sshd_config. ok markus@
8341f420 985 - markus@cvs.openbsd.org 2002/01/05 10:43:40
986 [channels.c]
987 fix hanging x11 channels for rejected cookies (e.g.
988 XAUTHORITY=/dev/null xbiff) bug #36, based on patch from
989 djast@cs.toronto.edu
cb362b5e 990 - stevesk@cvs.openbsd.org 2002/01/05 21:51:56
991 [ssh.1 sshd.8]
992 some missing and misplaced periods
4ccb828d 993 - markus@cvs.openbsd.org 2002/01/09 13:49:27
994 [ssh-keygen.c]
995 append \n only for public keys
0c0738d5 996 - markus@cvs.openbsd.org 2002/01/09 17:16:00
997 [channels.c]
998 merge channel_pre_open_15/channel_pre_open_20; ok provos@
9c50edcf 999 - markus@cvs.openbsd.org 2002/01/09 17:26:35
1000 [channels.c nchan.c]
1001 replace buffer_consume(b, buffer_len(b)) with buffer_clear(b);
1002 ok provos@
99416ceb 1003 - markus@cvs.openbsd.org 2002/01/10 11:13:29
1004 [serverloop.c]
1005 skip client_alive_check until there are channels; ok beck@
3d209bbe 1006 - markus@cvs.openbsd.org 2002/01/10 11:24:04
1007 [clientloop.c]
1008 handle SSH2_MSG_GLOBAL_REQUEST (just reply with failure); ok djm@
3c27606d 1009 - markus@cvs.openbsd.org 2002/01/10 12:38:26
1010 [nchan.c]
1011 remove dead code (skip drain)
6d566d33 1012 - markus@cvs.openbsd.org 2002/01/10 12:47:59
1013 [nchan.c]
1014 more unused code (with channels.c:1.156)
5a5f4c37 1015 - markus@cvs.openbsd.org 2002/01/11 10:31:05
1016 [packet.c]
1017 handle received SSH2_MSG_UNIMPLEMENTED messages; ok djm@
781a02b8 1018 - markus@cvs.openbsd.org 2002/01/11 13:36:43
1019 [ssh2.h]
1020 add defines for msg type ranges
6367063f 1021 - markus@cvs.openbsd.org 2002/01/11 13:39:36
1022 [auth2.c dispatch.c dispatch.h kex.c]
1023 a single dispatch_protocol_error() that sends a message of
1024 type 'UNIMPLEMENTED'
1025 dispatch_range(): set handler for a ranges message types
1026 use dispatch_protocol_ignore() for authentication requests after
1027 successful authentication (the drafts requirement).
1028 serverloop/clientloop now send a 'UNIMPLEMENTED' message instead
1029 of exiting.
70499440 1030 - markus@cvs.openbsd.org 2002/01/11 20:14:11
1031 [auth2-chall.c auth-skey.c]
1032 use strlcpy not strlcat; mouring@
a62ebe1f 1033 - markus@cvs.openbsd.org 2002/01/11 23:02:18
1034 [readpass.c]
1035 use _PATH_TTY
bd2d2ac4 1036 - markus@cvs.openbsd.org 2002/01/11 23:02:51
1037 [auth2-chall.c]
1038 use snprintf; mouring@
7ef24c8c 1039 - markus@cvs.openbsd.org 2002/01/11 23:26:30
1040 [auth-skey.c]
1041 use snprintf; mouring@
68a7e648 1042 - markus@cvs.openbsd.org 2002/01/12 13:10:29
1043 [auth-skey.c]
1044 undo local change
95f0a918 1045 - provos@cvs.openbsd.org 2002/01/13 17:27:07
1046 [ssh-agent.c]
1047 change to use queue.h macros; okay markus@
3469eac4 1048 - markus@cvs.openbsd.org 2002/01/13 17:57:37
1049 [auth2.c auth2-chall.c compat.c sshconnect2.c sshd.c]
1050 use buffer API and avoid static strings of fixed size;
1051 ok provos@/mouring@
368e9dfc 1052 - markus@cvs.openbsd.org 2002/01/13 21:31:20
1053 [channels.h nchan.c]
1054 add chan_set_[io]state(), order states, state is now an u_int,
1055 simplifies debugging messages; ok provos@
3057c23b 1056 - markus@cvs.openbsd.org 2002/01/14 13:22:35
1057 [nchan.c]
1058 chan_send_oclose1() no longer calls chan_shutdown_write(); ok provos@
1059 - markus@cvs.openbsd.org 2002/01/14 13:34:07
1060 [nchan.c]
1061 merge chan_[io]buf_empty[12]; ok provos@
668a91b7 1062 - markus@cvs.openbsd.org 2002/01/14 13:40:10
1063 [nchan.c]
1064 correct fn names for ssh2, do not switch from closed to closed;
1065 ok provos@
3c9f1ecd 1066 - markus@cvs.openbsd.org 2002/01/14 13:41:13
1067 [nchan.c]
1068 remove duplicated code; ok provos@
70bef40e 1069 - markus@cvs.openbsd.org 2002/01/14 13:55:55
1070 [channels.c channels.h nchan.c]
1071 remove function pointers for events, remove chan_init*; ok provos@
8ab5f6b2 1072 - markus@cvs.openbsd.org 2002/01/14 13:57:03
1073 [channels.h nchan.c]
1074 (c) 2002
5641aefa 1075 - markus@cvs.openbsd.org 2002/01/16 13:17:51
1076 [channels.c channels.h serverloop.c ssh.c]
1077 wrapper for channel_setup_fwd_listener
ac10636f 1078 - stevesk@cvs.openbsd.org 2002/01/16 17:40:23
1079 [sshd_config]
1080 The stategy now used for options in the default sshd_config shipped
1081 with OpenSSH is to specify options with their default value where
1082 possible, but leave them commented. Uncommented options change a
1083 default value. Subsystem is currently the only default option
1084 changed. ok markus@
cf5a07a8 1085 - stevesk@cvs.openbsd.org 2002/01/16 17:42:33
1086 [ssh.1]
1087 correct defaults for -i/IdentityFile; ok markus@
1bbbc136 1088 - stevesk@cvs.openbsd.org 2002/01/16 17:55:33
1089 [ssh_config]
1090 correct some commented defaults. add Ciphers default. ok markus@
4267abfd 1091 - stevesk@cvs.openbsd.org 2002/01/17 04:27:37
1092 [log.c]
1093 casts to silence enum type warnings for bugzilla bug 37; ok markus@
ba218fbe 1094 - stevesk@cvs.openbsd.org 2002/01/18 17:14:16
1095 [sshd.8]
1096 correct Ciphers default; paola.mannaro@ubs.com
e6207598 1097 - stevesk@cvs.openbsd.org 2002/01/18 18:14:17
1098 [authfd.c bufaux.c buffer.c cipher.c packet.c ssh-agent.c ssh-keygen.c]
1099 unneeded cast cleanup; ok markus@
dfafef8f 1100 - stevesk@cvs.openbsd.org 2002/01/18 20:46:34
1101 [sshd.8]
1102 clarify Allow(Groups|Users) and Deny(Groups|Users); suggestion from
1103 allard@oceanpark.com; ok markus@
616a6b93 1104 - markus@cvs.openbsd.org 2002/01/21 15:13:51
1105 [sshconnect.c]
1106 use read_passphrase+ECHO in confirm(), allows use of ssh-askpass
1107 for hostkey confirm.
55f9eebd 1108 - markus@cvs.openbsd.org 2002/01/21 22:30:12
1109 [cipher.c compat.c myproposal.h]
1110 remove "rijndael-*", just use "aes-" since this how rijndael is called
1111 in the drafts; ok stevesk@
32e7d71f 1112 - markus@cvs.openbsd.org 2002/01/21 23:27:10
1113 [channels.c nchan.c]
1114 cleanup channels faster if the are empty and we are in drain-state;
1115 ok deraadt@
3a454b6a 1116 - stevesk@cvs.openbsd.org 2002/01/22 02:52:41
1117 [servconf.c]
1118 typo in error message; from djast@cs.toronto.edu
4ca007b2 1119 - (djm) Make auth2-pam.c compile again after dispatch.h and packet.h
1120 changes
507c4f2e 1121 - (djm) Recent Glibc includes an incompatible sys/queue.h. Treat it as
1122 bogus in configure
187cd1fa 1123 - (djm) Use local sys/queue.h if necessary in ssh-agent.c
f1b0ecc3 1124
40f64e6f 112520020121
1126 - (djm) Rework ssh-rand-helper:
1127 - Reduce quantity of ifdef code, in preparation for ssh_rand_conf
1128 - Always seed from system calls, even when doing PRNGd seeding
1129 - Tidy and comment #define knobs
1130 - Remove unused facility for multiple runs through command list
1131 - KNF, cleanup, update copyright
1132
088cdc23 113320020114
1134 - (djm) Bug #50 - make autoconf entropy path checks more robust
1135
760b35a6 113620020108
1137 - (djm) Merge Cygwin copy_environment with do_pam_environment, removing
1138 fixed env var size limit in the process. Report from Corinna Vinschen
1139 <vinschen@redhat.com>
5cbceb3f 1140 - (stevesk) defines.h: use "/var/spool/sockets/X11/%u" for HP-UX. does
1141 not depend on transition links. from Lutz Jaenicke.
760b35a6 1142
1d2a4613 114320020106
1144 - (stevesk) defines.h: determine _PATH_UNIX_X; currently "/tmp/.X11-unix/X%u"
1145 for all platforms except HP-UX, which is "/usr/spool/sockets/X11/%u".
1146
d93656c9 114720020105
1148 - (bal) NCR requies use_pipes to operate correctly.
29525240 1149 - (stevesk) fix spurious ; from NCR change.
d93656c9 1150
554e28b2 115120020103
1152 - (djm) Use bigcrypt() on systems with SCO_PROTECTED_PW. Patch from
1153 Roger Cornelius <rac@tenzing.org>
1154
e9571a2c 115520011229
1156 - (djm) Apply Cygwin pointer deref fix from Corinna Vinschen
1157 <vinschen@redhat.com> Could be abused to guess valid usernames
929fb284 1158 - (djm) Typo in contrib/cygwin/README Fix from Corinna Vinschen
1159 <vinschen@redhat.com>
e9571a2c 1160
760edf28 116120011228
1162 - (djm) Remove recommendation to use GNU make, we should support most
1163 make programs.
1164
7bec72bc 116520011225
1166 - (stevesk) [Makefile.in ssh-rand-helper.c]
1167 portable lib and __progname support for ssh-rand-helper; ok djm@
1168
b8291fa0 116920011223
1170 - (bal) Removed contrib/chroot.diff and noted in contrib/README that it
1171 was not being maintained.
1172
46058ce2 117320011222
1174 - (djm) Ignore fix & patchlevel in OpenSSL version check. Patch from
1175 solar@openwall.com
1176 - (djm) Rework entropy code. If the OpenSSL PRNG is has not been
1177 internally seeded, execute a subprogram "ssh-rand-helper" to obtain
1178 some entropy for us. Rewrite the old in-process entropy collecter as
1179 an example ssh-rand-helper.
1180 - (djm) Always perform ssh_prng_cmds path lookups in configure, even if
1181 we don't end up using ssh_prng_cmds (so we always get a valid file)
1182
5fb9865a 118320011221
1184 - (djm) Add option to gnome-ssh-askpass to stop it from grabbing the X
1185 server. I have found this necessary to avoid server hangs with X input
1186 extensions (e.g. kinput2). Enable by setting the environment variable
1187 "GNOME_SSH_ASKPASS_NOGRAB"
805e659f 1188 - OpenBSD CVS Sync
1189 - stevesk@cvs.openbsd.org 2001/12/08 17:49:28
1190 [channels.c pathnames.h]
1191 use only one path to X11 UNIX domain socket vs. an array of paths
1192 to try. report from djast@cs.toronto.edu. ok markus@
2f293d43 1193 - markus@cvs.openbsd.org 2001/12/09 18:45:56
1194 [auth2.c auth2-chall.c auth.h]
1195 add auth2_challenge_stop(), simplifies cleanup of kbd-int sessions,
1196 fixes memleak.
5e8948af 1197 - stevesk@cvs.openbsd.org 2001/12/10 16:45:04
1198 [sshd.c]
1199 possible fd leak on error; ok markus@
cdc95d6e 1200 - markus@cvs.openbsd.org 2001/12/10 20:34:31
1201 [ssh-keyscan.c]
1202 check that server supports v1 for -t rsa1, report from wirth@dfki.de
fb396518 1203 - jakob@cvs.openbsd.org 2001/12/18 10:04:21
1204 [auth.h hostfile.c hostfile.h]
1205 remove auth_rsa_read_key, make hostfile_ready_key non static; ok markus@
306feb91 1206 - jakob@cvs.openbsd.org 2001/12/18 10:05:15
1207 [auth2.c]
1208 log fingerprint on successful public key authentication; ok markus@
46df736f 1209 - jakob@cvs.openbsd.org 2001/12/18 10:06:24
1210 [auth-rsa.c]
1211 log fingerprint on successful public key authentication, simplify
1212 usage of key structs; ok markus@
184eed6a 1213 - deraadt@cvs.openbsd.org 2001/12/19 07:18:56
1214 [auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h]
1215 [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c]
1216 [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c]
1217 [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c]
1218 [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c]
1219 [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c]
1220 [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config]
1221 [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c]
1222 basic KNF done while i was looking for something else
a10be357 1223 - markus@cvs.openbsd.org 2001/12/19 16:09:39
1224 [serverloop.c]
1225 fix race between SIGCHLD and select with an additional pipe. writing
1226 to the pipe on SIGCHLD wakes up select(). using pselect() is not
1227 portable and siglongjmp() ugly. W. R. Stevens suggests similar solution.
1228 initial idea by pmenage@ensim.com; ok deraadt@, djm@
6c0fa2b1 1229 - stevesk@cvs.openbsd.org 2001/12/19 17:16:13
1230 [authfile.c bufaux.c bufaux.h buffer.c buffer.h packet.c packet.h ssh.c]
1231 change the buffer/packet interface to use void* vs. char*; ok markus@
ac151b18 1232 - markus@cvs.openbsd.org 2001/12/20 16:37:29
1233 [channels.c channels.h session.c]
1234 setup x11 listen socket for just one connect if the client requests so.
1235 (v2 only, but the openssh client does not support this feature).
24ca6821 1236 - djm@cvs.openbsd.org 2001/12/20 22:50:24
1237 [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
1238 [dispatch.h kex.c kex.h packet.c packet.h serverloop.c ssh.c]
1239 [sshconnect2.c]
1240 Conformance fix: we should send failing packet sequence number when
1241 responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by
1242 yakk@yakk.dot.net; ok markus@
5fb9865a 1243
c9d0ad9b 124420011219
1245 - (stevesk) OpenBSD CVS sync X11 localhost display
1246 - stevesk@cvs.openbsd.org 2001/11/29 14:10:51
1247 [channels.h channels.c session.c]
1248 sshd X11 fake server will now listen on localhost by default:
1249 $ echo $DISPLAY
1250 localhost:12.0
1251 $ netstat -an|grep 6012
1252 tcp 0 0 127.0.0.1.6012 *.* LISTEN
1253 tcp6 0 0 ::1.6012 *.* LISTEN
1254 sshd_config gatewayports=yes can be used to revert back to the old
1255 behavior. will control this with another option later. ok markus@
1256 - stevesk@cvs.openbsd.org 2001/12/19 08:43:11
1257 [includes.h session.c]
1258 handle utsname.nodename case for FamilyLocal X authorization; ok markus@
1259
3f3ac025 126020011207
1261 - (bal) PCRE no longer required. Banished from the source along with
1262 fake-regex.h
c20f63d3 1263 - (bal) OpenBSD CVS Sync
1264 - stevesk@cvs.openbsd.org 2001/12/06 18:02:32
1265 [channels.c sshconnect.c]
1266 shutdown(sock, SHUT_RDWR) not needed here; ok markus@
74860245 1267 - stevesk@cvs.openbsd.org 2001/12/06 18:09:23
1268 [channels.c session.c]
1269 strncpy->strlcpy. remaining strncpy's are necessary. ok markus@
d24631c9 1270 - stevesk@cvs.openbsd.org 2001/12/06 18:20:32
1271 [channels.c]
1272 disable nagle for X11 fake server and client TCPs. from netbsd.
1273 ok markus@
3f3ac025 1274
127520011206
6056eb35 1276 - (bal) OpenBSD CVS Sync
1277 - deraadt@cvs.openbsd.org 2001/11/14 20:45:08
1278 [sshd.c]
1279 errno saving wrapping in a signal handler
0408c978 1280 - markus@cvs.openbsd.org 2001/11/16 12:46:13
1281 [ssh-keyscan.c]
1282 handle empty lines instead of dumping core; report from sha@sha-1.net
17a3011c 1283 - stevesk@cvs.openbsd.org 2001/11/17 19:14:34
1284 [auth2.c auth.c readconf.c servconf.c ssh-agent.c ssh-keygen.c]
1285 enum/int type cleanup where it made sense to do so; ok markus@
7ace8c3b 1286 - markus@cvs.openbsd.org 2001/11/19 11:20:21
1287 [sshd.c]
1288 fd leak on HUP; ok stevesk@
8666316a 1289 - stevesk@cvs.openbsd.org 2001/11/19 18:40:46
1290 [ssh-agent.1]
1291 clarify/state that private keys are not exposed to clients using the
1292 agent; ok markus@
44c2ab73 1293 - mpech@cvs.openbsd.org 2001/11/19 19:02:16
1294 [deattack.c radix.c]
1295 kill more registers
1296 millert@ ok
2f98d223 1297 - markus@cvs.openbsd.org 2001/11/21 15:51:24
1298 [key.c]
1299 mem leak
c840d0ad 1300 - stevesk@cvs.openbsd.org 2001/11/21 18:49:14
1301 [ssh-keygen.1]
1302 more on passphrase construction; ok markus@
f48e63c8 1303 - stevesk@cvs.openbsd.org 2001/11/22 05:27:29
1304 [ssh-keyscan.c]
1305 don't use "\n" in fatal()
7a934d1b 1306 - markus@cvs.openbsd.org 2001/11/22 12:34:22
1307 [clientloop.c serverloop.c sshd.c]
1308 volatile sig_atomic_t
58d94604 1309 - stevesk@cvs.openbsd.org 2001/11/29 19:06:39
1310 [channels.h]
1311 remove dead function prototype; ok markus@
2975f58d 1312 - markus@cvs.openbsd.org 2001/11/29 22:08:48
1313 [auth-rsa.c]
1314 fix protocol error: send 'failed' message instead of a 2nd challenge
1315 (happens if the same key is in authorized_keys twice).
1316 reported Ralf_Meister@genua.de; ok djm@
b48eeb07 1317 - stevesk@cvs.openbsd.org 2001/11/30 20:39:28
1318 [ssh.c]
1319 sscanf() length dependencies are clearer now; can also shrink proto
1320 and data if desired, but i have not done that. ok markus@
2548961d 1321 - markus@cvs.openbsd.org 2001/12/01 21:41:48
1322 [session.c sshd.8]
1323 don't pass user defined variables to /usr/bin/login
947b64c7 1324 - deraadt@cvs.openbsd.org 2001/12/02 02:08:32
1325 [sftp-common.c]
1326 zap };
010f9726 1327 - itojun@cvs.openbsd.org 2001/12/05 03:50:01
1328 [clientloop.c serverloop.c sshd.c]
1329 deal with LP64 printf issue with sig_atomic_t. from thorpej
d5bb9418 1330 - itojun@cvs.openbsd.org 2001/12/05 03:56:39
1331 [auth1.c auth2.c canohost.c channels.c deattack.c packet.c scp.c
1332 sshconnect2.c]
1333 make it compile with more strict prototype checking
6aacefa7 1334 - deraadt@cvs.openbsd.org 2001/12/05 10:06:12
1335 [authfd.c authfile.c bufaux.c channels.c compat.c kex.c kexgex.c
1336 key.c misc.c packet.c servconf.c ssh-agent.c sshconnect2.c
1337 sshconnect.c sshd.c ssh-dss.c ssh-keygen.c ssh-rsa.c]
1338 minor KNF
663ebb32 1339 - markus@cvs.openbsd.org 2001/12/05 15:04:48
1340 [version.h]
1341 post 3.0.2
6a92533a 1342 - markus@cvs.openbsd.org 2001/12/05 16:54:51
1343 [compat.c match.c match.h]
1344 make theo and djm happy: bye bye regexp
2717fa0f 1345 - markus@cvs.openbsd.org 2001/12/06 13:30:06
1346 [servconf.c servconf.h sshd.8 sshd.c]
1347 add -o to sshd, too. ok deraadt@
1348 - (bal) Minor white space fix up in servconf.c
6056eb35 1349
ffb8d130 135020011126
1351 - (tim) [contrib/cygwin/README, openbsd-compat/bsd-cygwin_util.c,
1352 openbsd-compat/bsd-cygwin_util.h, openbsd-compat/daemon.c]
1353 Allow SSHD to install as service under WIndows 9x/Me
1354 [configure.ac] Fix to allow linking against PCRE on Cygwin
1355 Patches by Corinna Vinschen <vinschen@redhat.com>
1356
20716479 135720011115
1358 - (djm) Fix IPv4 default in ssh-keyscan. Spotted by Dan Astoorian
1359 <djast@cs.toronto.edu> Fix from markus@
e41f14ae 1360 - (djm) Release 3.0.1p1
20716479 1361
9aba5a4d 136220011113
1363 - (djm) Fix early (and double) free of remote user when using Kerberos.
1364 Patch from Simon Wilkinson <simon@sxw.org.uk>
19e810f6 1365 - (djm) AIX login{success,failed} changes. Move loginsuccess call to
1366 do_authenticated. Call loginfailed for protocol 2 failures > MAX like
1367 we do for protocol 1. Reports from Ralf Wenk <wera0003@fh-karlsruhe.de>,
1368 K.Wolkersdorfer@fz-juelich.de and others
ede8cea6 1369 - (djm) OpenBSD CVS Sync
1370 - dugsong@cvs.openbsd.org 2001/11/11 18:47:10
1371 [auth-krb5.c]
1372 fix krb5 authorization check. found by <jhawk@MIT.EDU>. from
1373 art@, deraadt@ ok
b0248360 1374 - markus@cvs.openbsd.org 2001/11/12 11:17:07
1375 [servconf.c]
1376 enable authorized_keys2 again. tested by fries@
0bbf2240 1377 - markus@cvs.openbsd.org 2001/11/13 02:03:57
1378 [version.h]
1379 enter 3.0.1
86b164b3 1380 - (djm) Bump RPM package versions
9aba5a4d 1381
3e4e3bc8 138220011112
1383 - (djm) Makefile correctness fix from Mark D. Baushke <mdb@juniper.net>
d36ae718 1384 - (djm) Cygwin config patch from Corinna Vinschen <vinschen@redhat.com>
9ae3f727 1385 - OpenBSD CVS Sync
1386 - markus@cvs.openbsd.org 2001/10/24 08:41:41
1387 [sshd.c]
1388 mention remote port in debug message
f103187f 1389 - markus@cvs.openbsd.org 2001/10/24 08:41:20
1390 [ssh.c]
1391 remove unused
67b75437 1392 - markus@cvs.openbsd.org 2001/10/24 08:51:35
1393 [clientloop.c ssh.c]
1394 ignore SIGPIPE early, makes ssh work if agent dies, netbsd-pr via itojun@
c6940381 1395 - markus@cvs.openbsd.org 2001/10/24 19:57:40
1396 [clientloop.c]
1397 make ~& (backgrounding) work again for proto v1; add support ~& for v2, too
f564d016 1398 - markus@cvs.openbsd.org 2001/10/25 21:14:32
1399 [ssh-keygen.1 ssh-keygen.c]
1400 better docu for fingerprinting, ok deraadt@
e8d59b4d 1401 - markus@cvs.openbsd.org 2001/10/29 19:27:15
1402 [sshconnect2.c]
1403 hostbased: check for client hostkey before building chost
03cf595c 1404 - markus@cvs.openbsd.org 2001/10/30 20:29:09
1405 [ssh.1]
1406 ssh.1
b4b701be 1407 - markus@cvs.openbsd.org 2001/11/07 16:03:17
1408 [packet.c packet.h sshconnect2.c]
1409 pad using the padding field from the ssh2 packet instead of sending
1410 extra ignore messages. tested against several other ssh servers.
10f22cd7 1411 - markus@cvs.openbsd.org 2001/11/07 21:40:21
1412 [ssh-rsa.c]
1413 ssh_rsa_sign/verify: SSH_BUG_SIGBLOB not supported
abc4e9a7 1414 - markus@cvs.openbsd.org 2001/11/07 22:10:28
1415 [ssh-dss.c ssh-rsa.c]
1416 missing free and sync dss/rsa code.
713d61f7 1417 - markus@cvs.openbsd.org 2001/11/07 22:12:01
1418 [sshd.8]
1419 s/Keepalive/KeepAlive/; from openbsd@davidkrause.com
f98585b0 1420 - markus@cvs.openbsd.org 2001/11/07 22:41:51
1421 [auth2.c auth-rh-rsa.c]
1422 unused includes
27c47c0a 1423 - markus@cvs.openbsd.org 2001/11/07 22:53:21
1424 [channels.h]
1425 crank c->path to 256 so they can hold a full hostname; dwd@bell-labs.com
56b551e2 1426 - markus@cvs.openbsd.org 2001/11/08 10:51:08
1427 [readpass.c]
1428 don't strdup too much data; from gotoh@taiyo.co.jp; ok millert.
dd58cb5e 1429 - markus@cvs.openbsd.org 2001/11/08 17:49:53
1430 [ssh.1]
1431 mention setuid root requirements; noted by cnorris@csc.UVic.ca; ok stevesk@
fad3754c 1432 - markus@cvs.openbsd.org 2001/11/08 20:02:24
1433 [auth.c]
1434 don't print ROOT in CAPS for the authentication messages, i.e.
1435 Accepted publickey for ROOT from 127.0.0.1 port 42734 ssh2
1436 becomes
1437 Accepted publickey for root from 127.0.0.1 port 42734 ssh2
b3ad8fe6 1438 - markus@cvs.openbsd.org 2001/11/09 18:59:23
1439 [clientloop.c serverloop.c]
1440 don't memset too much memory, ok millert@
1441 original patch from jlk@kamens.brookline.ma.us via nalin@redhat.com
ac28afd8 1442 - markus@cvs.openbsd.org 2001/11/10 13:19:45
1443 [sshd.c]
e15895cd 1444 cleanup libwrap support (remove bogus comment, bogus close(), add
1445 debug, etc).
5d4446bf 1446 - markus@cvs.openbsd.org 2001/11/10 13:22:42
1447 [ssh-rsa.c]
1448 KNF (unexpand)
ec413a68 1449 - markus@cvs.openbsd.org 2001/11/10 13:37:20
1450 [packet.c]
1451 remove extra debug()
5df83e07 1452 - markus@cvs.openbsd.org 2001/11/11 13:02:31
1453 [servconf.c]
e15895cd 1454 make AuthorizedKeysFile2 fallback to AuthorizedKeysFile if
1455 AuthorizedKeysFile is specified.
1456 - (djm) Reorder portable-specific server options so that they come first.
1457 This should help reduce diff collisions for new server options (as they
1458 will appear at the end)
3e4e3bc8 1459
78afd1dc 146020011109
1461 - (stevesk) auth-pam.c: use do_pam_authenticate(PAM_DISALLOW_NULL_AUTHTOK)
1462 if permit_empty_passwd == 0 so null password check cannot be bypassed.
1463 jayaraj@amritapuri.com OpenBSD bug 2168
30f60c34 1464 - markus@cvs.openbsd.org 2001/11/09 19:08:35
1465 [sshd.c]
1466 remove extra trailing dot from log message; pilot@naughty.monkey.org
1467
7c6d759d 146820011103
1469 - (tim) [ contrib/caldera/openssh.spec contrib/caldera/sshd.init] Updates
1470 from Raymund Will <ray@caldera.de>
1471 [acconfig.h configure.in] Clean up login checks.
1472 Problem reported by Jim Knoble <jmknoble@pobox.com>
1473
147420011101
58389b85 1475 - (djm) Compat define for OpenSSL < 0.9.6 (No OPENSSL_free)
1476
548fd014 147720011031
1478 - (djm) Unsmoke drugs: config files should be noreplace.
1479
b013a983 148020011030
1481 - (djm) Redhat RPM spec: remove noreplace from config files, allow IPv6
1482 by default (can force IPv4 using --define "noipv6 1")
1483
40d0f6b9 148420011029
1485 - (tim) [TODO defines.h loginrec.c] Change the references to configure.in
1486 to configure.ac
1487
9f214051 148820011028
1489 - (djm) Avoid bug in Solaris PAM libs
7eb73cc1 1490 - (djm) Disconnect if no tty and PAM reports password expired
9678565b 1491 - (djm) Fix for PAM password changes being echoed (from stevesk)
840ad55e 1492 - (stevesk) Fix compile problem with PAM password change fix
37a8edf7 1493 - (stevesk) README: zlib location is http://www.gzip.org/zlib/
9f214051 1494
c8c15bcb 149520011027
1496 - (tim) [configure.ac] Fixes for ReliantUNIX (don't use libucb)
1497 Patch by Robert Dahlem <Robert.Dahlem@siemens.com>
1498
9e127e27 149920011026
1500 - (bal) Set the correct current time in login_utmp_only(). Patch by
1501 Wayne Davison <wayned@users.sourceforge.net>
fd96c060 1502 - (tim) [scard/Makefile.in] Fix install: when building outside of source
1503 tree and using --src=/full_path/to/openssh
1504 Patch by Mark D. Baushke <mdb@juniper.net>
9e127e27 1505
d321c94b 150620011025
1507 - (bal) Use VDISABLE if _POSIX_VDISABLE is set in readpassphrase.c. Patch
1508 by todd@
5a162955 1509 - (tim) [configure.ac] Give path given in --with-xxx= for pcre,zlib, and
1510 tcp-wrappers precedence over system libraries and includes.
1511 Report from Dave Dykstra <dwd@bell-labs.com>
d321c94b 1512
95c88805 151320011024
1514 - (bal) Should be 3.0p1 not 3.0p2. Corrected version.h already.
451dab40 1515 - (tim) configure.in -> configure.ac
95c88805 1516
bc86d864 151720011023
1518 - (bal) Updated version to 3.0p1 in preparing for release.
7f0a4ff1 1519 - (bal) Added 'PAM_TTY_KLUDGE' to Solaris platform.
051809f6 1520 - (tim) [configure.in] Fix test for broken dirname. Based on patch from
1521 Dave Dykstra <dwd@bell-labs.com>. Remove un-needed test for zlib.h.
1522 [contrib/caldera/openssh.spec, contrib/redhat/openssh.spec,
1523 contrib/suse/openssh.spec] Update version to match version.h
bc86d864 1524
ce49121d 152520011022
1526 - (djm) Fix fd leak in loginrec.c (ro fd to lastlog was left open).
1527 Report from Michal Zalewski <lcamtuf@coredump.cx>
1528
98a7c37b 152920011021
1530 - (tim) [configure.in] Clean up library testing. Add optional PATH to
1531 --with-pcre, --with-zlib, and --with-tcp-wrappers. Based on
1532 patch by albert chin (china@thewrittenword.com)
1533 Re-arange AC_CHECK_HEADERS and AC_CHECK_FUNCS for eaiser reading
1534 of patches to configure.in. Replace obsolete AC_STRUCT_ST_BLKSIZE
1535 with AC_CHECK_MEMBERS. Add test for broken dirname() on
1536 Solaris 2.5.1 by Dan Astoorian <djast@cs.toronto.edu>
1537 [acconfig.h aclocal.m4 defines.h configure.in] Better socklen_t test.
1538 patch by albert chin (china@thewrittenword.com)
1539 [scp.c] Replace obsolete HAVE_ST_BLKSIZE with
1540 HAVE_STRUCT_STAT_ST_BLKSIZE.
1541 [Makefile.in] When running make in top level, always do make
1542 in openbsd-compat. patch by Dave Dykstra <dwd@bell-labs.com>
1543
09a3bd6d 154420011019
1545 - (bal) Fixed up init.d symlink issue and piddir stuff. Patches by
1546 Zoran Milojevic <Zoran.Milojevic@SS8.com> and j.petersen@msh.de
1547
418e724c 154820011012
1549 - (djm) OpenBSD CVS Sync
1550 - markus@cvs.openbsd.org 2001/10/10 22:18:47
1551 [channels.c channels.h clientloop.c nchan.c serverloop.c]
1552 [session.c session.h]
1553 try to keep channels open until an exit-status message is sent.
1554 don't kill the login shells if the shells stdin/out/err is closed.
1555 this should now work:
1556 ssh -2n localhost 'exec > /dev/null 2>&1; sleep 10; exit 5'; echo ?
efcc9957 1557 - markus@cvs.openbsd.org 2001/10/11 13:45:21
1558 [session.c]
1559 delay detach of session if a channel gets closed but the child is
1560 still alive. however, release pty, since the fd's to the child are
1561 already closed.
fd6cfbaf 1562 - markus@cvs.openbsd.org 2001/10/11 15:24:00
1563 [clientloop.c]
1564 clear select masks if we return before calling select().
b0454d44 1565 - (djm) "make veryclean" fix from Tom Holroyd <tomh@po.crl.go.jp>
aeabbb30 1566 - (djm) Clean some autoconf-2.52 junk when doing "make distclean"
8140f2aa 1567 - (djm) Cleanup sshpty.c a little
6e464960 1568 - (bal) First wave of contrib/solaris/ package upgrades. Still more
1569 work needs to be done, but it is a 190% better then the stuff we
1570 had before!
78c84f13 1571 - (bal) Minor bug fix in contrib/solaris/opensshd.in .. $etcdir was not
1572 set right.
418e724c 1573
c48c32c1 157420011010
1575 - (djm) OpenBSD CVS Sync
1576 - markus@cvs.openbsd.org 2001/10/04 14:34:16
1577 [key.c]
1578 call OPENSSL_free() for memory allocated by openssl; from chombier@mac.com
0c139bd1 1579 - markus@cvs.openbsd.org 2001/10/04 15:05:40
1580 [channels.c serverloop.c]
1581 comment out bogus conditions for selecting on connection_in
72176c0e 1582 - markus@cvs.openbsd.org 2001/10/04 15:12:37
1583 [serverloop.c]
1584 client_alive_check cleanup
a2c92c4a 1585 - markus@cvs.openbsd.org 2001/10/06 00:14:50
1586 [sshconnect.c]
1587 remove unused argument
05fd093c 1588 - markus@cvs.openbsd.org 2001/10/06 00:36:42
1589 [session.c]
1590 fix typo in error message, sync with do_exec_nopty
01e9ef57 1591 - markus@cvs.openbsd.org 2001/10/06 11:18:19
1592 [sshconnect1.c sshconnect2.c sshconnect.c]
1593 unify hostkey check error messages, simplify prompt.
2cdccb44 1594 - markus@cvs.openbsd.org 2001/10/07 10:29:52
1595 [authfile.c]
1596 grammer; Matthew_Clarke@mindlink.bc.ca
639cb8ab 1597 - markus@cvs.openbsd.org 2001/10/07 17:49:40
1598 [channels.c channels.h]
1599 avoid possible FD_ISSET overflow for channels established
1600 during channnel_after_select() (used for dynamic channels).
f3964cb9 1601 - markus@cvs.openbsd.org 2001/10/08 11:48:57
1602 [channels.c]
1603 better debug
32af6a3f 1604 - markus@cvs.openbsd.org 2001/10/08 16:15:47
1605 [sshconnect.c]
1606 use correct family for -b option
dab89049 1607 - markus@cvs.openbsd.org 2001/10/08 19:05:05
1608 [ssh.c sshconnect.c sshconnect.h ssh-keyscan.c]
1609 some more IPv4or6 cleanup
1610 - markus@cvs.openbsd.org 2001/10/09 10:12:08
1611 [session.c]
1612 chdir $HOME after krb_afslog(); from bbense@networking.stanford.edu
01855277 1613 - markus@cvs.openbsd.org 2001/10/09 19:32:49
1614 [session.c]
1615 stat subsystem command before calling do_exec, and return error to client.
9d1b2faa 1616 - markus@cvs.openbsd.org 2001/10/09 19:51:18
1617 [serverloop.c]
1618 close all channels if the connection to the remote host has been closed,
1619 should fix sshd's hanging with WCHAN==wait
d5f24f94 1620 - markus@cvs.openbsd.org 2001/10/09 21:59:41
1621 [channels.c channels.h serverloop.c session.c session.h]
1622 simplify session close: no more delayed session_close, no more
1623 blocking wait() calls.
b6a71cd2 1624 - (bal) removed two unsed headers in openbsd-compat/bsd-misc.c
8782141f 1625 - (bal) seed_init() and seed_rng() required in ssh-keyscan.c
c48c32c1 1626
46dfe5ef 162720011007
1628 - (bal) ssh-copy-id corrected permissions for .ssh/ and authorized_keys.
1629 Prompted by Matthew Vernon <matthew@sel.cam.ac.uk>
1630
822593d4 163120011005
1632 - (bal) AES works under Cray, no more hack.
1633
63fa6b6c 163420011004
1635 - (bal) nchan2.ms resync. BSD License applied.
1636
c8a62153 163720011003
1638 - (bal) CVS ID fix up in version.h
b6350327 1639 - (bal) OpenBSD CVS Sync:
1640 - markus@cvs.openbsd.org 2001/09/27 11:58:16
1641 [compress.c]
1642 mem leak; chombier@mac.com
1643 - markus@cvs.openbsd.org 2001/09/27 11:59:37
1644 [packet.c]
1645 missing called=1; chombier@mac.com
aa8003d6 1646 - markus@cvs.openbsd.org 2001/09/27 15:31:17
1647 [auth2.c auth2-chall.c sshconnect1.c]
1648 typos; from solar
5b263aae 1649 - camield@cvs.openbsd.org 2001/09/27 17:53:24
1650 [sshd.8]
1651 don't talk about compile-time options
1652 ok markus@
e99a518a 1653 - djm@cvs.openbsd.org 2001/09/28 12:07:09
1654 [ssh-keygen.c]
1655 bzero private key after loading to smartcard; ok markus@
f67792f2 1656 - markus@cvs.openbsd.org 2001/09/28 15:46:29
1657 [ssh.c]
1658 bug: read user config first; report kaukasoi@elektroni.ee.tut.fi
5720c10e 1659 - markus@cvs.openbsd.org 2001/10/01 08:06:28
1660 [scp.c]
1661 skip filenames containing \n; report jdamery@chiark.greenend.org.uk
1662 and matthew@debian.org
5e4a7219 1663 - markus@cvs.openbsd.org 2001/10/01 21:38:53
1664 [channels.c channels.h ssh.c sshd.c]
1665 remove ugliness; vp@drexel.edu via angelos
8bbc048a 1666 - markus@cvs.openbsd.org 2001/10/01 21:51:16
1667 [readconf.c readconf.h ssh.1 sshconnect.c]
1668 add NoHostAuthenticationForLocalhost; note that the hostkey is
1669 now check for localhost, too.
e0543e42 1670 - djm@cvs.openbsd.org 2001/10/02 08:38:50
1671 [ssh-add.c]
1672 return non-zero exit code on error; ok markus@
e4d7f734 1673 - stevesk@cvs.openbsd.org 2001/10/02 22:56:09
1674 [sshd.c]
1675 #include "channels.h" for channel_set_af()
76fbdd47 1676 - markus@cvs.openbsd.org 2001/10/03 10:01:20
1677 [auth.c]
1678 use realpath() for homedir, too. from jinmei@isl.rdc.toshiba.co.jp
c8a62153 1679
d9d47a26 168020011001
1681 - (stevesk) loginrec.c: fix type conversion problems exposed when using
1682 64-bit off_t.
1683
d8d6c87e 168420010929
1685 - (bal) move reading 'config.h' up higher. Patch by albert chin
1686 <china@thewrittenword.com)
1687
fc1fc39e 168820010928
1689 - (djm) OpenBSD CVS sync:
1690 - djm@cvs.openbsd.org 2001/09/28 09:49:31
1691 [scard.c]
1692 Fix segv when smartcard communication error occurs during key load.
1693 ok markus@
e3d5570b 1694 - (djm) Update spec files for new x11-askpass
fc1fc39e 1695
8a9ac95d 169620010927
1697 - (stevesk) session.c: declare do_pre_login() before use
1698 wayned@users.sourceforge.net
1699
aa9f6a6e 170020010925
1701 - (djm) Pull in auth-krb5.c from OpenBSD CVS. NB. it is not currently used.
168edd95 1702 - (djm) Sync $sysconfdir/moduli
948fd8b9 1703 - (djm) Add AC_SYS_LARGEFILE configure test
4f9d80ee 1704 - (djm) Avoid bad and unportable sprintf usage in compat code
aa9f6a6e 1705
57dade33 170620010923
1707 - (bal) updated ssh.c to mirror minor getopts 'extern int' formating done
1708 by stevesk@
927c3e15 1709 - (bal) Removed 'extern int optopt;' since it is dead wood.
8ead88d3 1710 - (bal) Updated all *.specs for 2.9.9p1 and updated version.h
57dade33 1711
8ab12eb4 171220010923
1713 - (bal) OpenBSD CVS Sync
1714 - markus@cvs.openbsd.org 2001/09/23 11:09:13
1715 [authfile.c]
1716 relax permission check for private key files.
157fc8e1 1717 - markus@cvs.openbsd.org 2001/09/23 09:58:13
1718 [LICENCE]
1719 new rijndael implementation
8ab12eb4 1720
64bdafe1 172120010920
1722 - (tim) [scard/Makefile.in] Don't strip the Java binary
4a38efad 1723 - (stevesk) sun_len, SUN_LEN() configure stuff no longer required
fc7eca52 1724 - (bal) OpenBSD CVS Sync
1725 - stevesk@cvs.openbsd.org 2001/09/20 00:15:54
1726 [sshd.8]
1727 fix ClientAliveCountMax
ddcfed57 1728 - markus@cvs.openbsd.org 2001/09/20 13:46:48
1729 [auth2.c]
1730 key_read returns now -1 or 1
bcdb96c2 1731 - markus@cvs.openbsd.org 2001/09/20 13:50:40
1732 [compat.c compat.h ssh.c]
1733 bug compat: request a dummy channel for -N (no shell) sessions +
1734 cleanup; vinschen@redhat.com
4a778de1 1735 - mouring@cvs.openbsd.org 2001/09/20 20:57:51
1736 [sshd_config]
1737 CheckMail removed. OKed stevesk@
64bdafe1 1738
4cdbc654 173920010919
35c69348 1740 - (bal) OpenBSD Sync
4cdbc654 1741 - markus@cvs.openbsd.org 2001/09/19 10:08:51
1742 [sshd.8]
1743 command=xxx applies to subsystem now, too
cb8c7bad 1744 - markus@cvs.openbsd.org 2001/09/19 13:23:29
1745 [key.c]
1746 key_read() now returns -1 on type mismatch, too
e1c5bfaf 1747 - stevesk@cvs.openbsd.org 2001/09/19 19:24:19
1748 [readconf.c readconf.h scp.c sftp.c ssh.1]
1749 add ClearAllForwardings ssh option and set it in scp and sftp; ok
1750 markus@
f34f05d5 1751 - stevesk@cvs.openbsd.org 2001/09/19 19:35:30
1752 [authfd.c]
1753 use sizeof addr vs. SUN_LEN(addr) for sockaddr_un. Stevens
1754 blesses this and we do it this way elsewhere. this helps in
1755 portable because not all systems have SUN_LEN() and
1756 sockaddr_un.sun_len. ok markus@
2043936f 1757 - stevesk@cvs.openbsd.org 2001/09/19 21:04:53
1758 [sshd.8]
1759 missing -t in usage
368bae7d 1760 - stevesk@cvs.openbsd.org 2001/09/19 21:41:57
1761 [sshd.8]
1762 don't advertise -V in usage; ok markus@
35c69348 1763 - (bal) openbsd-compat/vis.[ch] is dead wood. Removed.
4cdbc654 1764
d0b19c95 176520010918
46a831dd 1766 - (djm) Configure support for smartcards. Based on Ben's work.
fef4ea6b 1767 - (djm) Revert setgroups call, it causes problems on OS-X
46a831dd 1768 - (djm) Avoid warning on BSDgetopt
93816ec8 1769 - (djm) More makefile infrastructre for smartcard support, also based
1770 on Ben's work
4b255446 1771 - (djm) Specify --datadir in RPM spec files so smartcard applet gets
1772 put somewhere sane. Add Ssh.bin to manifest.
69c94072 1773 - (djm) Make smartcard support conditional in Redhat RPM spec
1a77481c 1774 - (bal) LICENCE update. Has not been done in a while.
f49df8e9 1775 - (stevesk) nchan.c: we use X/Open Sockets on HP-UX now so shutdown(2)
1776 returns ENOTCONN vs. EINVAL for socket not connected; remove EINVAL
1777 check. ok Lutz Jaenicke
35c69348 1778 - (bal) OpenBSD CVS Sync
f1278af7 1779 - stevesk@cvs.openbsd.org 2001/09/17 17:57:57
1780 [scp.1 scp.c sftp.1 sftp.c]
1781 add -Fssh_config option; ok markus@
cf54363d 1782 - stevesk@cvs.openbsd.org 2001/09/17 19:27:15
1783 [kexdh.c kexgex.c key.c key.h ssh-dss.c ssh-keygen.c ssh-rsa.c]
1784 u_char*/char* cleanup; ok markus
4e842b5e 1785 - markus@cvs.openbsd.org 2001/09/17 20:22:14
1786 [scard.c]
1787 never keep a connection to the smartcard open.
1788 allows ssh-keygen -D U while the agent is running; report from
1789 jakob@
e3c1c3e6 1790 - stevesk@cvs.openbsd.org 2001/09/17 20:38:09
1791 [sftp.1 sftp.c]
1792 cleanup and document -1, -s and -S; ok markus@
f7436b8c 1793 - markus@cvs.openbsd.org 2001/09/17 20:50:22
1794 [key.c ssh-keygen.c]
1795 better error handling if you try to export a bad key to ssh.com
a5f82435 1796 - markus@cvs.openbsd.org 2001/09/17 20:52:47
1797 [channels.c channels.h clientloop.c]
1798 try to fix agent-forwarding-backconnection-bug, as seen on HPUX,
1799 for example; with Lutz.Jaenicke@aet.TU-Cottbus.DE,
780a9951 1800 - markus@cvs.openbsd.org 2001/09/17 21:04:02
1801 [channels.c serverloop.c]
1802 don't send fake dummy packets on CR (\r)
1803 bugreport from yyua@cs.sfu.ca via solar@@openwall.com
b6761a3e 1804 - markus@cvs.openbsd.org 2001/09/17 21:09:47
1805 [compat.c]
1806 more versions suffering the SSH_BUG_DEBUG bug;
1807 3.0.x reported by dbutts@maddog.storability.com
edaeb835 1808 - stevesk@cvs.openbsd.org 2001/09/17 23:56:07
1809 [scp.1]
1810 missing -B in usage string
d0b19c95 1811
d31a32a4 181220010917
1813 - (djm) x11-ssh-askpass-1.2.4 in RPM spec, revert workarounds
cb547f98 1814 - (tim) [includes.h openbsd-compat/getopt.c openbsd-compat/getopt.h]
1815 rename getopt() to BSDgetopt() to keep form conflicting with
1816 system getopt().
1817 [Makefile.in configure.in] disable filepriv until I can add
1818 missing procpriv calls.
d31a32a4 1819
95d00a03 182020010916
1821 - (djm) Workaround XFree breakage in RPM spec file
6fcf67f7 1822 - (bal) OpenBSD CVS Sync
1823 - markus@cvs.openbsd.org 2001/09/16 14:46:54
1824 [session.c]
1825 calls krb_afslog() after setting $HOME; mattiasa@e.kth.se; fixes
1826 pr 1943b
95d00a03 1827
0e0144b7 182820010915
1829 - (djm) Make do_pre_login static to avoid prototype #ifdef hell
0fd6c7a9 1830 - (djm) Sync scard/ stuff
23c098ba 1831 - (djm) Redhat spec file cleanups from Pekka Savola <pekkas@netcore.fi> and
1832 Redhat
94a29edc 1833 - (djm) Redhat initscript config sanity checking from Pekka Savola
1834 <pekkas@netcore.fi>
e72ff812 1835 - (djm) Clear supplemental groups at sshd start to prevent them from
1836 being propogated to random PAM modules. Based on patch from Redhat via
1837 Pekka Savola <pekkas@netcore.fi>
a2cb4268 1838 - (djm) Make sure rijndael.c picks config.h
1839 - (djm) Ensure that u_char gets defined
0e0144b7 1840
dcf29cf8 184120010914
1842 - (bal) OpenBSD CVS Sync
1843 - markus@cvs.openbsd.org 2001/09/13
1844 [rijndael.c rijndael.h]
1845 missing $OpenBSD
fd022eed 1846 - markus@cvs.openbsd.org 2001/09/14
1847 [session.c]
1848 command=xxx overwrites subsystems, too
9658ecbc 1849 - markus@cvs.openbsd.org 2001/09/14
1850 [sshd.c]
1851 typo
fd022eed 1852
88c3bfe0 185320010913
1854 - (bal) OpenBSD CVS Sync
1855 - markus@cvs.openbsd.org 2001/08/23 11:31:59
1856 [cipher.c cipher.h]
1857 switch to the optimised AES reference code from
1858 http://www.esat.kuleuven.ac.be/~rijmen/rijndael/rijndael-fst-3.0.zip
1859
5c53a31e 186020010912
1861 - (bal) OpenBSD CVS Sync
1862 - jakob@cvs.openbsd.org 2001/08/16 19:18:34
1863 [servconf.c servconf.h session.c sshd.8]
1864 deprecate CheckMail. ok markus@
54bf768d 1865 - stevesk@cvs.openbsd.org 2001/08/16 20:14:57
1866 [ssh.1 sshd.8]
1867 document case sensitivity for ssh, sshd and key file
1868 options and arguments; ok markus@
6d7b3036 1869 - stevesk@cvs.openbsd.org 2001/08/17 18:59:47
1870 [servconf.h]
1871 typo in comment
ae897d7c 1872 - stevesk@cvs.openbsd.org 2001/08/21 21:47:42
1873 [ssh.1 sshd.8]
1874 minor typos and cleanup
c78e5800 1875 - stevesk@cvs.openbsd.org 2001/08/22 16:21:21
1876 [ssh.1]
1877 hostname not optional; ok markus@
9495bfc5 1878 - stevesk@cvs.openbsd.org 2001/08/22 16:30:02
1879 [sshd.8]
1880 no rexd; ok markus@
29999e54 1881 - stevesk@cvs.openbsd.org 2001/08/22 17:45:16
1882 [ssh.1]
1883 document cipher des for protocol 1; ok deraadt@
8fbc356d 1884 - camield@cvs.openbsd.org 2001/08/23 17:59:31
1885 [sshd.c]
1886 end request with 0, not NULL
1887 ok markus@
d866473d 1888 - stevesk@cvs.openbsd.org 2001/08/23 18:02:48
1889 [ssh-agent.1]
1890 fix usage; ok markus@
75304f85 1891 - stevesk@cvs.openbsd.org 2001/08/23 18:08:59
1892 [ssh-add.1 ssh-keyscan.1]
1893 minor cleanup
b7f79e7a 1894 - danh@cvs.openbsd.org 2001/08/27 22:02:13
1895 [ssh-keyscan.c]
1896 fix memory fault if non-existent filename is given to the -f option
1897 ok markus@
14e4a15f 1898 - markus@cvs.openbsd.org 2001/08/28 09:51:26
1899 [readconf.c]
1900 don't set DynamicForward unless Host matches
e591b98a 1901 - markus@cvs.openbsd.org 2001/08/28 15:39:48
1902 [ssh.1 ssh.c]
1903 allow: ssh -F configfile host
46660a9e 1904 - markus@cvs.openbsd.org 2001/08/29 20:44:03
1905 [scp.c]
1906 clear the malloc'd buffer, otherwise source() will leak malloc'd
1907 memory; ok theo@
e675b851 1908 - stevesk@cvs.openbsd.org 2001/08/29 23:02:21
1909 [sshd.8]
1910 add text about -u0 preventing DNS requests; ok markus@
4c780c2a 1911 - stevesk@cvs.openbsd.org 2001/08/29 23:13:10
1912 [ssh.1 ssh.c]
1913 document -D and DynamicForward; ok markus@
d2e3df16 1914 - stevesk@cvs.openbsd.org 2001/08/29 23:27:23
1915 [ssh.c]
1916 validate ports for -L/-R; ok markus@
70068acc 1917 - stevesk@cvs.openbsd.org 2001/08/29 23:39:40
1918 [ssh.1 sshd.8]
1919 additional documentation for GatewayPorts; ok markus@
ad3e169f 1920 - naddy@cvs.openbsd.org 2001/08/30 15:42:36
1921 [ssh.1]
1922 add -D to synopsis line; ok markus@
3a8aabf0 1923 - stevesk@cvs.openbsd.org 2001/08/30 16:04:35
1924 [readconf.c ssh.1]
1925 validate ports for LocalForward/RemoteForward.
1926 add host/port alternative syntax for IPv6 (like -L/-R).
1927 ok markus@
ed787d14 1928 - stevesk@cvs.openbsd.org 2001/08/30 20:36:34
1929 [auth-options.c sshd.8]
1930 validate ports for permitopen key file option. add host/port
1931 alternative syntax for IPv6. ok markus@
4278ff63 1932 - markus@cvs.openbsd.org 2001/08/30 22:22:32
1933 [ssh-keyscan.c]
1934 do not pass pointers to longjmp; fix from wayne@blorf.net
6b759005 1935 - markus@cvs.openbsd.org 2001/08/31 11:46:39
1936 [sshconnect2.c]
93111dfa 1937 disable kbd-interactive if we don't get SSH2_MSG_USERAUTH_INFO_REQUEST
1938 messages
1939 - stevesk@cvs.openbsd.org 2001/09/03 20:58:33
1940 [readconf.c readconf.h ssh.c]
1941 fatal() for nonexistent -Fssh_config. ok markus@
91789042 1942 - deraadt@cvs.openbsd.org 2001/09/05 06:23:07
1943 [scp.1 sftp.1 ssh.1 ssh-agent.1 sshd.8 ssh-keygen.1 ssh-keyscan.1]
1944 avoid first person in manual pages
3a222388 1945 - stevesk@cvs.openbsd.org 2001/09/12 18:18:25
1946 [scp.c]
1947 don't forward agent for non third-party copies; ok markus@
5c53a31e 1948
c6ed03bd 194920010815
1950 - (bal) Fixed stray code in readconf.c that went in by mistake.
65e683bd 1951 - OpenBSD CVS Sync
1952 - markus@cvs.openbsd.org 2001/08/07 10:37:46
1953 [authfd.c authfd.h]
1954 extended failure messages from galb@vandyke.com
c7f89f1f 1955 - deraadt@cvs.openbsd.org 2001/08/08 07:16:58
1956 [scp.1]
1957 when describing the -o option, give -o Protocol=1 as the specific example
1958 since we are SICK AND TIRED of clueless people who cannot have difficulty
1959 thinking on their own.
f2f1bedd 1960 - markus@cvs.openbsd.org 2001/08/08 18:20:15
1961 [uidswap.c]
1962 permanently_set_uid is a noop if user is not privilegued;
1963 fixes bug on solaris; from sbi@uchicago.edu
58df8789 1964 - markus@cvs.openbsd.org 2001/08/08 21:34:19
1965 [uidswap.c]
1966 undo last change; does not work for sshd
c3abff07 1967 - jakob@cvs.openbsd.org 2001/08/11 22:51:27
1968 [ssh.c tildexpand.c]
1969 fix more paths beginning with "//"; <bradshaw@staff.crosswalk.com>.
1970 ok markus@
4fa5a4db 1971 - stevesk@cvs.openbsd.org 2001/08/13 23:38:54
1972 [scp.c]
1973 don't need main prototype (also sync with rcp); ok markus@
68874d2b 1974 - markus@cvs.openbsd.org 2001/08/14 09:23:02
1975 [sftp.1 sftp-int.c]
1976 "bye"; hk63a@netscape.net
38539909 1977 - stevesk@cvs.openbsd.org 2001/08/14 17:54:29
1978 [scp.1 sftp.1 ssh.1]
1979 consistent documentation and example of ``-o ssh_option'' for sftp and
1980 scp; document keyword=argument for ssh.
41cb4569 1981 - (bal) QNX resync. OK tim@
c6ed03bd 1982
3454ff55 198320010814
1984 - (stevesk) sshpty.c, cray.[ch]: whitespace, formatting and cleanup
1985 for some #ifdef _CRAY code; ok wendyp@cray.com
5bd6962b 1986 - (stevesk) sshpty.c: return 0 on error in cray pty code;
1987 ok wendyp@cray.com
4809bc4c 1988 - (stevesk) bsd-cray.c: utmp strings are not C strings
8280a5ae 1989 - (stevesk) bsd-cray.c: more cleanup; ok wendyp@cray.com
3454ff55 1990
d89a02d4 199120010812
1992 - (djm) Fix detection of long long int support. Based on patch from
1993 Michael Stone <mstone@cs.loyola.edu>. ok stevesk, tim
1994
7ef909d3 199520010808
1996 - (bal) Minor correction to inet_ntop.h. _BSD_RRESVPORT_H should be
1997 _BSD_INET_NTOP_H. Pointed out by Mark Miller <markm@swoon.net>
1998
a704dd54 199920010807
2000 - (tim) [configure.in sshconnect.c openbsd-compat/Makefile.in
2001 openbsd-compat/openbsd-compat.h ] Add inet_ntop.c inet_ntop.h back
2002 in. Needed for sshconnect.c
2003 [sshconnect.c] fix INET6_ADDRSTRLEN for non IPv6 machines
2004 [configure.in] make tests with missing libraries fail
2005 patch by Wendy Palm <wendyp@cray.com>
2006 Added openbsd-compat/bsd-cray.h. Selective patches from
2007 William L. Jones <jones@mail.utexas.edu>
2008
4f7893dc 200920010806
2010 - OpenBSD CVS Sync
2011 - markus@cvs.openbsd.org 2001/07/22 21:32:27
2012 [sshpty.c]
2013 update comment
0aea6c59 2014 - pvalchev@cvs.openbsd.org 2001/07/22 21:32:42
2015 [ssh.1]
2016 There is no option "Compress", point to "Compression" instead; ok
2017 markus
10a2cbef 2018 - markus@cvs.openbsd.org 2001/07/22 22:04:19
2019 [readconf.c ssh.1]
2020 enable challenge-response auth by default; ok millert@
248bad82 2021 - markus@cvs.openbsd.org 2001/07/22 22:24:16
2022 [sshd.8]
2023 Xr login.conf
9f37c0af 2024 - markus@cvs.openbsd.org 2001/07/23 09:06:28
2025 [sshconnect2.c]
2026 reorder default sequence of userauth methods to match ssh behaviour:
2027 hostbased,publickey,keyboard-interactive,password
29c440a0 2028 - markus@cvs.openbsd.org 2001/07/23 12:47:05
2029 [ssh.1]
2030 sync PreferredAuthentications
7fd9477e 2031 - aaron@cvs.openbsd.org 2001/07/23 14:14:18
2032 [ssh-keygen.1]
2033 Fix typo.
1bdee08c 2034 - stevesk@cvs.openbsd.org 2001/07/23 18:14:58
2035 [auth2.c auth-rsa.c]
2036 use %lu; ok markus@
bac2ef55 2037 - stevesk@cvs.openbsd.org 2001/07/23 18:21:46
2038 [xmalloc.c]
2039 no zero size xstrdup() error; ok markus@
55684f0c 2040 - markus@cvs.openbsd.org 2001/07/25 11:59:35
2041 [scard.c]
2042 typo in comment
ce773142 2043 - markus@cvs.openbsd.org 2001/07/25 14:35:18
2044 [readconf.c ssh.1 ssh.c sshconnect.c]
2045 cleanup connect(); connection_attempts 4 -> 1; from
2046 eivind@freebsd.org
f87f09aa 2047 - stevesk@cvs.openbsd.org 2001/07/26 17:18:22
2048 [sshd.8 sshd.c]
2049 add -t option to test configuration file and keys; pekkas@netcore.fi
2050 ok markus@
c42158fe 2051 - rees@cvs.openbsd.org 2001/07/26 20:04:27
2052 [scard.c ssh-keygen.c]
2053 Inquire Cyberflex class for 0xf0 cards
2054 change aid to conform to 7816-5
2055 remove gratuitous fid selects
2e23cde0 2056 - millert@cvs.openbsd.org 2001/07/27 14:50:45
2057 [ssh.c]
2058 If smart card support is compiled in and a smart card is being used
2059 for authentication, make it the first method used. markus@ OK
0b2988ca 2060 - deraadt@cvs.openbsd.org 2001/07/27 17:26:16
2061 [scp.c]
2062 shorten lines
7f19f8bb 2063 - markus@cvs.openbsd.org 2001/07/28 09:21:15
2064 [sshd.8]
2065 cleanup some RSA vs DSA vs SSH1 vs SSH2 notes
79a6cb5c 2066 - mouring@cvs.openbsd.org 2001/07/29 17:02:46
2067 [scp.1]
2068 Clarified -o option in scp.1 OKed by Markus@
0b595937 2069 - jakob@cvs.openbsd.org 2001/07/30 16:06:07
2070 [scard.c scard.h]
2071 better errorcodes from sc_*; ok markus@
d6192346 2072 - stevesk@cvs.openbsd.org 2001/07/30 16:23:30
2073 [rijndael.c rijndael.h]
2074 new BSD-style license:
2075 Brian Gladman <brg@gladman.plus.com>:
2076 >I have updated my code at:
2077 >http://fp.gladman.plus.com/cryptography_technology/rijndael/index.htm
2078 >with a copyright notice as follows:
2079 >[...]
2080 >I am not sure which version of my old code you are using but I am
2081 >happy for the notice above to be substituted for my existing copyright
2082 >intent if this meets your purpose.
71b7a18e 2083 - jakob@cvs.openbsd.org 2001/07/31 08:41:10
2084 [scard.c]
2085 do not complain about missing smartcards. ok markus@
eea098a3 2086 - jakob@cvs.openbsd.org 2001/07/31 09:28:44
2087 [readconf.c readconf.h ssh.1 ssh.c]
2088 add 'SmartcardDevice' client option to specify which smartcard device
2089 is used to access a smartcard used for storing the user's private RSA
2090 key. ok markus@.
88690211 2091 - jakob@cvs.openbsd.org 2001/07/31 12:42:50
2092 [sftp-int.c sftp-server.c]
2093 avoid paths beginning with "//"; <vinschen@redhat.com>
2094 ok markus@
2251e099 2095 - jakob@cvs.openbsd.org 2001/07/31 12:53:34
2096 [scard.c]
2097 close smartcard connection if card is missing
9ff6f66f 2098 - markus@cvs.openbsd.org 2001/08/01 22:03:33
2099 [authfd.c authfd.h readconf.c readconf.h scard.c scard.h ssh-add.c
2100 ssh-agent.c ssh.c]
2101 use strings instead of ints for smartcard reader ids
1930af48 2102 - markus@cvs.openbsd.org 2001/08/01 22:16:45
2103 [ssh.1 sshd.8]
2104 refer to current ietf drafts for protocol v2
4f831fd7 2105 - markus@cvs.openbsd.org 2001/08/01 23:33:09
2106 [ssh-keygen.c]
2107 allow uploading RSA keys for non-default AUT0 (sha1 over passphrase
2108 like sectok).
1a23ac2c 2109 - markus@cvs.openbsd.org 2001/08/01 23:38:45
05b7537a 2110 [scard.c ssh.c]
2111 support finish rsa keys.
2112 free public keys after login -> call finish -> close smartcard.
93a56445 2113 - markus@cvs.openbsd.org 2001/08/02 00:10:17
2114 [ssh-keygen.c]
2115 add -D readerid option (download, i.e. print public RSA key to stdout).
2116 check for card present when uploading keys.
2117 use strings instead of ints for smartcard reader ids, too.
285d2b15 2118 - jakob@cvs.openbsd.org 2001/08/02 08:58:35
2119 [ssh-keygen.c]
2120 change -u (upload smartcard key) to -U. ok markus@
58153e34 2121 - jakob@cvs.openbsd.org 2001/08/02 15:06:52
2122 [ssh-keygen.c]
2123 more verbose usage(). ok markus@
f0d6bdcf 2124 - jakob@cvs.openbsd.org 2001/08/02 15:07:23
2125 [ssh-keygen.1]
2126 document smartcard upload/download. ok markus@
315dfb04 2127 - jakob@cvs.openbsd.org 2001/08/02 15:32:10
2128 [ssh.c]
2129 add smartcard to usage(). ok markus@
3e984472 2130 - jakob@cvs.openbsd.org 2001/08/02 15:43:57
2131 [ssh-agent.c ssh.c ssh-keygen.c]
2132 add /* SMARTCARD */ to #else/#endif. ok markus@
1a23ac2c 2133 - jakob@cvs.openbsd.org 2001/08/02 16:14:05
dd2495cb 2134 [scard.c ssh-agent.c ssh.c ssh-keygen.c]
2135 clean up some /* SMARTCARD */. ok markus@
0f6d5acf 2136 - mpech@cvs.openbsd.org 2001/08/02 18:37:35
2137 [ssh-keyscan.1]
2138 o) .Sh AUTHOR -> .Sh AUTHORS;
2139 o) .Sh EXAMPLE -> .Sh EXAMPLES;
2140 o) Delete .Sh OPTIONS. Text moved to .Sh DESCRIPTION;
2141
2142 millert@ ok
5a26334c 2143 - jakob@cvs.openbsd.org 2001/08/03 10:31:19
2144 [ssh-add.1]
2145 document smartcard options. ok markus@
33e766d2 2146 - jakob@cvs.openbsd.org 2001/08/03 10:31:30
2147 [ssh-add.c ssh-agent.c ssh-keyscan.c]
2148 improve usage(). ok markus@
5061072f 2149 - markus@cvs.openbsd.org 2001/08/05 23:18:20
2150 [ssh-keyscan.1 ssh-keyscan.c]
2151 ssh 2 support; from wayned@users.sourceforge.net
578954b1 2152 - markus@cvs.openbsd.org 2001/08/05 23:29:58
2153 [ssh-keyscan.c]
2154 make -t dsa work with commercial servers, too
cddb9003 2155 - stevesk@cvs.openbsd.org 2001/08/06 19:47:05
2156 [scp.c]
2157 use alarm vs. setitimer for portable; ok markus@
94796c10 2158 - (bal) ssh-keyscan double -lssh hack due to seed_rng().
1a23ac2c 2159 - (bal) Second around of UNICOS patches. A few other things left.
2160 Patches by William L. Jones <jones@mail.utexas.edu>
4f7893dc 2161
29a47408 216220010803
2163 - (djm) Fix interrupted read in entropy gatherer. Spotted by markus@ on
2164 a fast UltraSPARC.
2165
42ad0eec 216620010726
2167 - (stevesk) use mysignal() in protocol 1 loop now that the SIGCHLD
2168 handler has converged.
2169
aa7dbcdd 217020010725
2171 - (bal) Added 'install-nokeys' to Makefile to assist package builders.
2172
0b7d19eb 217320010724
2174 - (bal) 4711 not 04711 for ssh binary.
2175
ca5c7d6a 217620010722
2177 - (bal) Starting the Unicossmk merger. File merged TODO, configure.in,
2178 myproposal.h, ssh_prng_cmds.in, and openbsd-compat/Makefile.in.
2179 Added openbsd-compat/bsd-cray.c. Rest will be merged after
2180 approval. Selective patches from William L. Jones
2181 <jones@mail.utexas.edu>
7458aff1 2182 - OpenBSD CVS Sync
2183 - markus@cvs.openbsd.org 2001/07/18 21:10:43
2184 [sshpty.c]
2185 pr #1946, allow sshd if /dev is readonly
ec9f3450 2186 - stevesk@cvs.openbsd.org 2001/07/18 21:40:40
2187 [ssh-agent.c]
2188 chdir("/") from bbraun@synack.net; ok markus@
5bef3c35 2189 - stevesk@cvs.openbsd.org 2001/07/19 00:41:44
2190 [ssh.1]
2191 escape chars are below now
7efa8482 2192 - markus@cvs.openbsd.org 2001/07/20 14:46:11
2193 [ssh-agent.c]
2194 do not exit() from signal handlers; ok deraadt@
491f5f7b 2195 - stevesk@cvs.openbsd.org 2001/07/20 18:41:51
2196 [ssh.1]
2197 "the" command line
ca5c7d6a 2198
979b0a64 219920010719
2200 - (tim) [configure.in] put inet_aton back in AC_CHECK_FUNCS.
2201 report from Mark Miller <markm@swoon.net>
2202
6e69a45d 220320010718
2204 - OpenBSD CVS Sync
2c5b1791 2205 - stevesk@cvs.openbsd.org 2001/07/14 15:10:17
2206 [readpass.c sftp-client.c sftp-common.c sftp-glob.c]
2207 delete spurious #includes; ok deraadt@ markus@
68fa858a 2208 - markus@cvs.openbsd.org 2001/07/15 16:17:08
2c5b1791 2209 [serverloop.c]
2210 schedule client alive for ssh2 only, greg@cheers.bungi.com
2c71dfc1 2211 - stevesk@cvs.openbsd.org 2001/07/15 16:57:21
2212 [ssh-agent.1]
2213 -d will not fork; ok markus@
d1fc1b88 2214 - stevesk@cvs.openbsd.org 2001/07/15 16:58:29
68fa858a 2215 [ssh-agent.c]
d1fc1b88 2216 typo in usage; ok markus@
68fa858a 2217 - markus@cvs.openbsd.org 2001/07/17 20:48:42
2218 [ssh-agent.c]
e364646f 2219 update maxfd if maxfd is closed; report from jmcelroy@dtgnet.com
68fa858a 2220 - markus@cvs.openbsd.org 2001/07/17 21:04:58
2221 [channels.c channels.h clientloop.c nchan.c serverloop.c]
489aa2e9 2222 keep track of both maxfd and the size of the malloc'ed fdsets.
2223 update maxfd if maxfd gets closed.
c3941fa6 2224 - mouring@cvs.openbsd.org 2001/07/18 16:45:52
2225 [scp.c]
2226 Missing -o in scp usage()
68fa858a 2227 - (bal) Cleaned up trailing spaces in ChangeLog.
31fb6aaf 2228 - (bal) Allow sshd to switch user context without password for Cygwin.
2229 Patch by Corinna Vinschen <vinschen@redhat.com>
41fcc457 2230 - (bal) Updated cygwin README and ssh-host-config. Patch by
ad0cc858 2231 Corinna Vinschen <vinschen@redhat.com>
6e69a45d 2232
39c98ef7 223320010715
2234 - (bal) Set "BROKEN_GETADDRINFO" for darwin platform. Reported by
2235 Josh Larios <jdlarios@cac.washington.edu>
c14e6239 2236 - (tim) put openssh/openbsd-compat/inet_aton.[ch] back in.
2237 needed by openbsd-compat/fake-getaddrinfo.c
68fa858a 2238
6800f427 223920010714
2240 - (stevesk) change getopt() declaration
763a1a18 2241 - (stevesk) configure.in: use ll suffix for long long constant
2242 in snprintf() test
6800f427 2243
453b4bd0 224420010713
68fa858a 2245 - (djm) Enable /etc/nologin check on PAM systems, as some lack the
2246 pam_nologin module. Report from William Yodlowsky
453b4bd0 2247 <bsd@openbsd.rutgers.edu>
9912296f 2248 - (djm) Revert dirname fix, a better one is on its way.
1ee482c5 2249 - OpenBSD CVS Sync
2250 - markus@cvs.openbsd.org 2001/07/04 22:47:19
2251 [ssh-agent.c]
2252 ignore SIGPIPE when debugging, too
878b5225 2253 - markus@cvs.openbsd.org 2001/07/04 23:13:10
2254 [scard.c scard.h ssh-agent.c]
2255 handle card removal more gracefully, add sc_close() to scard.h
77261db4 2256 - markus@cvs.openbsd.org 2001/07/04 23:39:07
2257 [ssh-agent.c]
2258 for smartcards remove both RSA1/2 keys
a0e0f486 2259 - markus@cvs.openbsd.org 2001/07/04 23:49:27
2260 [ssh-agent.c]
2261 handle mutiple adds of the same smartcard key
62bb2c8f 2262 - espie@cvs.openbsd.org 2001/07/05 11:43:33
2263 [sftp-glob.c]
2264 Directly cast to the right type. Ok markus@
2265 - stevesk@cvs.openbsd.org 2001/07/05 20:32:47
2266 [sshconnect1.c]
2267 statement after label; ok dugsong@
97de229c 2268 - stevesk@cvs.openbsd.org 2001/07/08 15:23:38
2269 [servconf.c]
2270 fix ``MaxStartups max''; ok markus@
f5a1a01a 2271 - fgsch@cvs.openbsd.org 2001/07/09 05:58:47
2272 [ssh.c]
2273 Use getopt(3); markus@ ok.
ed916b28 2274 - deraadt@cvs.openbsd.org 2001/07/09 07:04:53
2275 [session.c sftp-int.c]
2276 correct type on last arg to execl(); nordin@cse.ogi.edu
333b5ba7 2277 - markus@cvs.openbsd.org 2001/07/10 21:49:12
2278 [readpass.c]
2279 don't panic if fork or pipe fail (just return an empty passwd).
46d738cd 2280 - itojun@cvs.openbsd.org 2001/07/11 00:24:53
2281 [servconf.c]
68fa858a 2282 make it compilable in all 4 combination of KRB4/KRB5 settings.
46d738cd 2283 dugsong ok
2284 XXX isn't it sensitive to the order of -I/usr/include/kerberosIV and
2285 -I/usr/include/kerberosV?
afd501f9 2286 - markus@cvs.openbsd.org 2001/07/11 16:29:59
2287 [ssh.c]
2288 sort options string, fix -p, add -k
2289 - markus@cvs.openbsd.org 2001/07/11 18:26:15
2290 [auth.c]
2291 no need to call dirname(pw->pw_dir).
2292 note that dirname(3) modifies its argument on some systems.
82d95536 2293 - (djm) Reorder Makefile.in so clean targets work a little better when
2294 run directly from Makefile.in
1812a662 2295 - (djm) Pull in getopt(3) from OpenBSD libc for the optreset extension.
453b4bd0 2296
85b08d98 229720010711
68fa858a 2298 - (djm) dirname(3) may modify its argument on glibc and other systems.
85b08d98 2299 Patch from markus@, spotted by Tom Holroyd <tomh@po.crl.go.jp>
2300
a96070d4 230120010704
2302 - OpenBSD CVS Sync
2303 - markus@cvs.openbsd.org 2001/06/25 08:25:41
68fa858a 2304 [channels.c channels.h cipher.c clientloop.c compat.c compat.h
2305 hostfile.c kex.c kex.h key.c key.h nchan.c packet.c serverloop.c
a96070d4 2306 session.c session.h sftp-server.c ssh-add.c ssh-agent.c uuencode.h]
2307 update copyright for 2001
8a497b11 2308 - markus@cvs.openbsd.org 2001/06/25 17:18:27
2309 [ssh-keygen.1]
68fa858a 2310 sshd(8) will never read the private keys, but ssh(1) does;
8a497b11 2311 hugh@mimosa.com
6978866a 2312 - provos@cvs.openbsd.org 2001/06/25 17:54:47
2313 [auth.c auth.h auth-rsa.c]
68fa858a 2314 terminate secure_filename checking after checking homedir. that way
ffb215be 2315 it works on AFS. okay markus@
2316 - stevesk@cvs.openbsd.org 2001/06/25 20:26:37
2317 [auth2.c sshconnect2.c]
2318 prototype cleanup; ok markus@
2b30154a 2319 - markus@cvs.openbsd.org 2001/06/26 02:47:07
2320 [ssh-keygen.c]
2321 allow loading a private RSA key to a cyberflex card.
ffdb5d70 2322 - markus@cvs.openbsd.org 2001/06/26 04:07:06
2323 [ssh-agent.1 ssh-agent.c]
2324 add debug flag
983def13 2325 - markus@cvs.openbsd.org 2001/06/26 04:59:59
2326 [authfd.c authfd.h ssh-add.c]
2327 initial support for smartcards in the agent
f7e5ac7b 2328 - markus@cvs.openbsd.org 2001/06/26 05:07:43
2329 [ssh-agent.c]
2330 update usage
2b5fe3b8 2331 - markus@cvs.openbsd.org 2001/06/26 05:33:34
2332 [ssh-agent.c]
2333 more smartcard support.
543baeea 2334 - mpech@cvs.openbsd.org 2001/06/26 05:48:07
2335 [sshd.8]
2336 remove unnecessary .Pp between .It;
2337 millert@ ok
0c9664c2 2338 - markus@cvs.openbsd.org 2001/06/26 05:50:11
2339 [auth2.c]
2340 new interface for secure_filename()
2a1e4639 2341 - itojun@cvs.openbsd.org 2001/06/26 06:32:58
68fa858a 2342 [atomicio.h authfd.h authfile.h auth.h auth-options.h bufaux.h
2343 buffer.h canohost.h channels.h cipher.h clientloop.h compat.h
2344 compress.h crc32.h deattack.h dh.h dispatch.h groupaccess.h
2345 hostfile.h kex.h key.h log.h mac.h match.h misc.h mpaux.h packet.h
2a1e4639 2346 radix.h readconf.h readpass.h rsa.h]
2347 prototype pedant. not very creative...
2348 - () -> (void)
2349 - no variable names
1c06a9ca 2350 - itojun@cvs.openbsd.org 2001/06/26 06:33:07
68fa858a 2351 [servconf.h serverloop.h session.h sftp-client.h sftp-common.h
2352 sftp-glob.h sftp-int.h sshconnect.h ssh-dss.h sshlogin.h sshpty.h
1c06a9ca 2353 ssh-rsa.h tildexpand.h uidswap.h uuencode.h xmalloc.h]
2354 prototype pedant. not very creative...
2355 - () -> (void)
2356 - no variable names
ced49be2 2357 - dugsong@cvs.openbsd.org 2001/06/26 16:15:25
68fa858a 2358 [auth1.c auth.h auth-krb4.c auth-passwd.c readconf.c readconf.h
ced49be2 2359 servconf.c servconf.h session.c sshconnect1.c sshd.c]
68fa858a 2360 Kerberos v5 support for SSH1, mostly from Assar Westerlund
ced49be2 2361 <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
3474b2b4 2362 - markus@cvs.openbsd.org 2001/06/26 17:25:34
2363 [ssh.1]
2364 document SSH_ASKPASS; fubob@MIT.EDU
255cabd9 2365 - markus@cvs.openbsd.org 2001/06/26 17:27:25
68fa858a 2366 [authfd.h authfile.h auth.h auth-options.h bufaux.h buffer.h
2367 canohost.h channels.h cipher.h clientloop.h compat.h compress.h
2368 crc32.h deattack.h dh.h dispatch.h groupaccess.c groupaccess.h
2369 hostfile.h kex.h key.h log.c log.h mac.h misc.c misc.h mpaux.h
2370 packet.h radix.h readconf.h readpass.h rsa.h servconf.h serverloop.h
2371 session.h sftp-common.c sftp-common.h sftp-glob.h sftp-int.h
2372 sshconnect.h ssh-dss.h sshlogin.h sshpty.h ssh-rsa.h sshtty.h
255cabd9 2373 tildexpand.h uidswap.h uuencode.h xmalloc.h]
2374 remove comments from .h, since they are cut&paste from the .c files
2375 and out of sync
83f46621 2376 - dugsong@cvs.openbsd.org 2001/06/26 17:41:49
2377 [servconf.c]
2378 #include <kafs.h>
57156994 2379 - markus@cvs.openbsd.org 2001/06/26 20:14:11
2380 [key.c key.h ssh.c sshconnect1.c sshconnect2.c]
2381 add smartcard support to the client, too (now you can use both
2382 the agent and the client).
2383 - markus@cvs.openbsd.org 2001/06/27 02:12:54
2384 [serverloop.c serverloop.h session.c session.h]
2385 quick hack to make ssh2 work again.
80f8f24f 2386 - markus@cvs.openbsd.org 2001/06/27 04:48:53
2387 [auth.c match.c sshd.8]
2388 tridge@samba.org
d0bfe096 2389 - markus@cvs.openbsd.org 2001/06/27 05:35:42
2390 [ssh-keygen.c]
2391 use cyberflex_inq_class to inquire class.
2b63e803 2392 - markus@cvs.openbsd.org 2001/06/27 05:42:25
2393 [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
2394 s/generate_additional_parameters/rsa_generate_additional_parameters/
2395 http://www.humppa.com/
34e02b83 2396 - markus@cvs.openbsd.org 2001/06/27 06:26:36
2397 [ssh-add.c]
2398 convert to getopt(3)
d3260e12 2399 - stevesk@cvs.openbsd.org 2001/06/28 19:57:35
2400 [ssh-keygen.c]
2401 '\0' terminated data[] is ok; ok markus@
49ccba9c 2402 - markus@cvs.openbsd.org 2001/06/29 07:06:34
2403 [ssh-keygen.c]
2404 new error handling for cyberflex_*
542d70b8 2405 - markus@cvs.openbsd.org 2001/06/29 07:11:01
2406 [ssh-keygen.c]
2407 initialize early
eea46d13 2408 - stevesk@cvs.openbsd.org 2001/06/29 18:38:44
2409 [clientloop.c]
2410 sync function definition with declaration; ok markus@
8ab2cb35 2411 - stevesk@cvs.openbsd.org 2001/06/29 18:40:28
2412 [channels.c]
2413 use socklen_t for getsockopt arg #5; ok markus@
b3f8a79c 2414 - stevesk@cvs.openbsd.org 2001/06/30 18:08:40
2415 [channels.c channels.h clientloop.c]
2416 adress -> address; ok markus@
5b5d170c 2417 - markus@cvs.openbsd.org 2001/07/02 13:59:15
2418 [serverloop.c session.c session.h]
68fa858a 2419 wait until !session_have_children(); bugreport from
5b5d170c 2420 Lutz.Jaenicke@aet.TU-Cottbus.DE
613021ac 2421 - markus@cvs.openbsd.org 2001/07/02 22:29:20
2422 [readpass.c]
2423 do not return NULL, use "" instead.
666248da 2424 - markus@cvs.openbsd.org 2001/07/02 22:40:18
2425 [ssh-keygen.c]
2426 update for sectok.h interface changes.
3cf2be58 2427 - markus@cvs.openbsd.org 2001/07/02 22:52:57
2428 [channels.c channels.h serverloop.c]
2429 improve cleanup/exit logic in ssh2:
2430 stop listening to channels, detach channel users (e.g. sessions).
2431 wait for children (i.e. dying sessions), send exit messages,
2432 cleanup all channels.
637b033d 2433 - (bal) forget a few new files in sync up.
06be7c3b 2434 - (bal) Makefile fix up requires scard.c
ac96ca42 2435 - (stevesk) sync misc.h
9c328529 2436 - (stevesk) more sync for session.c
4f1f4d8d 2437 - (stevesk) sync servconf.h (comments)
afb9165e 2438 - (tim) [contrib/caldera/openssh.spec] sync with Caldera
d9e3d19f 2439 - (tim) [openbsd-compat/dirname.h] Remove ^M causing some compilers to
2440 issue warning (line 1: tokens ignored at end of directive line)
2441 - (tim) [sshconnect1.c] give the compiler something to do for success:
2442 if KRB5 and AFS are not defined
2443 (ERROR: "sshconnect1.c", line 1274: Syntax error before or at: })
637b033d 2444
aa8d09da 244520010629
2446 - (bal) Removed net_aton() since we don't use it any more
64c4b8d7 2447 - (bal) Fixed _DISABLE_VPOSIX in readpassphrase.c.
7af3215a 2448 - (bal) Updated zlib's home. Thanks to David Howe <DaveHowe@gmx.co.uk>.
16adf618 2449 - (stevesk) remove _REENTRANT #define
16995a2c 2450 - (stevesk) session.c: use u_int for envsize
6a26f353 2451 - (stevesk) remove cli.[ch]
aa8d09da 2452
f11065cb 245320010628
2454 - (djm) Sync openbsd-compat with -current libc
68fa858a 2455 - (djm) Fix from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> for my
050df9db 2456 broken makefile
07608451 2457 - (bal) Removed strtok_r() and inet_ntop() since they are no longer used.
2458 - (bal) Remove getusershell() since it's no longer used.
f11065cb 2459
78220944 246020010627
2461 - (djm) Reintroduce pam_session call for non-pty sessions.
68fa858a 2462 - (djm) Remove redundant and incorrect test for max auth attempts in
2463 PAM kbdint code. Based on fix from Matthew Melvin
763dfdf0 2464 <matthewm@webcentral.com.au>
f0194608 2465 - (djm) Rename sysconfdir/primes => sysconfdir/moduli
68fa858a 2466 - (djm) Oops, forgot make logic for primes=>moduli. Also try to rename
ff4955c9 2467 existing primes->moduli if it exists.
0eb1a22d 2468 - (djm) Sync with -current openbsd-compat/readpassphrase.c:
2469 - djm@cvs.openbsd.org 2001/06/27 13:23:30
2470 typo, spotted by Tom Holroyd <tomh@po.crl.go.jp>; ok deraadt@
5ed2bb5b 2471 - (djm) Turn up warnings if gcc or egcs detected
b8fea62d 2472 - (stevesk) for HP-UX 11.X use X/Open socket interface;
2473 pulls in modern socket prototypes and eliminates a number of compiler
2474 warnings. see xopen_networking(7).
fef01705 2475 - (stevesk) fix x11 forwarding from _PATH_XAUTH change
28564873 2476 - (stevesk) use X/Open socket interface for HP-UX 10.X also
78220944 2477
e16f4ac8 247820010625
0cd000dd 2479 - OpenBSD CVS Sync
bc233fdf 2480 - markus@cvs.openbsd.org 2001/06/21 21:08:25
2481 [session.c]
2482 don't reset forced_command (we allow multiple login shells in
2483 ssh2); dwd@bell-labs.com
a5a2da3b 2484 - mpech@cvs.openbsd.org 2001/06/22 10:17:51
2485 [ssh.1 sshd.8 ssh-keyscan.1]
2486 o) .Sh AUTHOR -> .Sh AUTHORS;
2487 o) remove unnecessary .Pp;
2488 o) better -mdoc style;
2489 o) typo;
2490 o) sort SEE ALSO;
a5a2da3b 2491 aaron@ ok
e2854364 2492 - provos@cvs.openbsd.org 2001/06/22 21:27:08
2493 [dh.c pathnames.h]
2494 use /etc/moduli instead of /etc/primes, okay markus@
e2432638 2495 - provos@cvs.openbsd.org 2001/06/22 21:28:53
2496 [sshd.8]
2497 document /etc/moduli
96a7b0cc 2498 - markus@cvs.openbsd.org 2001/06/22 21:55:49
68fa858a 2499 [auth2.c auth-rsa.c pathnames.h ssh.1 sshd.8 sshd_config
96a7b0cc 2500 ssh-keygen.1]
2501 merge authorized_keys2 into authorized_keys.
2502 authorized_keys2 is used for backward compat.
2503 (just append authorized_keys2 to authorized_keys).
826676b3 2504 - provos@cvs.openbsd.org 2001/06/22 21:57:59
2505 [dh.c]
2506 increase linebuffer to deal with larger moduli; use rewind instead of
2507 close/open
bc233fdf 2508 - markus@cvs.openbsd.org 2001/06/22 22:21:20
2509 [sftp-server.c]
2510 allow long usernames/groups in readdir
a599bd06 2511 - markus@cvs.openbsd.org 2001/06/22 23:35:21
2e000c58 2512 [ssh.c]
2513 don't overwrite argv (fixes ssh user@host in 'ps'), report by ericj@
cb220a93 2514 - deraadt@cvs.openbsd.org 2001/06/23 00:16:16
2515 [scp.c]
2516 slightly better care
d0c8ca5c 2517 - markus@cvs.openbsd.org 2001/06/23 00:20:57
2518 [auth2.c auth.c auth.h auth-rh-rsa.c]
2519 *known_hosts2 is obsolete for hostbased authentication and
2520 only used for backward compat. merge ssh1/2 hostkey check
2521 and move it to auth.c
e16f4ac8 2522 - deraadt@cvs.openbsd.org 2001/06/23 02:33:05
2523 [sftp.1 sftp-server.8 ssh-keygen.1]
2524 join .%A entries; most by bk@rt.fm
f49bc4f7 2525 - markus@cvs.openbsd.org 2001/06/23 02:34:33
68fa858a 2526 [kexdh.c kexgex.c kex.h pathnames.h readconf.c servconf.h ssh.1
f49bc4f7 2527 sshconnect1.c sshconnect2.c sshconnect.c sshconnect.h sshd.8]
68fa858a 2528 get rid of known_hosts2, use it for hostkey lookup, but do not
f49bc4f7 2529 modify.
7d747e89 2530 - markus@cvs.openbsd.org 2001/06/23 03:03:59
2531 [sshd.8]
2532 draft-ietf-secsh-dh-group-exchange-01.txt
73473230 2533 - markus@cvs.openbsd.org 2001/06/23 03:04:42
2534 [auth2.c auth-rh-rsa.c]
2535 restore correct ignore_user_known_hosts logic.
c10d042a 2536 - markus@cvs.openbsd.org 2001/06/23 05:26:02
2537 [key.c]
2538 handle sigature of size 0 (some broken clients send this).
7b518233 2539 - deraadt@cvs.openbsd.org 2001/06/23 05:57:09
2540 [sftp.1 sftp-server.8 ssh-keygen.1]
2541 ok, tmac is now fixed
2e0becb6 2542 - markus@cvs.openbsd.org 2001/06/23 06:41:10
2543 [ssh-keygen.c]
2544 try to decode ssh-3.0.0 private rsa keys
2545 (allow migration to openssh, not vice versa), #910
396c147e 2546 - itojun@cvs.openbsd.org 2001/06/23 15:12:20
68fa858a 2547 [auth1.c auth2.c auth2-chall.c authfd.c authfile.c auth-rhosts.c
2548 canohost.c channels.c cipher.c clientloop.c deattack.c dh.c
2549 hostfile.c kex.c kexdh.c kexgex.c key.c nchan.c packet.c radix.c
2550 readpass.c scp.c servconf.c serverloop.c session.c sftp.c
2551 sftp-client.c sftp-glob.c sftp-int.c sftp-server.c ssh-add.c
2552 ssh-agent.c ssh.c sshconnect1.c sshconnect2.c sshconnect.c sshd.c
396c147e 2553 ssh-keygen.c ssh-keyscan.c]
68fa858a 2554 more strict prototypes. raise warning level in Makefile.inc.
396c147e 2555 markus ok'ed
2556 TODO; cleanup headers
a599bd06 2557 - markus@cvs.openbsd.org 2001/06/23 17:05:22
2558 [ssh-keygen.c]
2559 fix import for (broken?) ssh.com/f-secure private keys
2560 (i tested > 1000 RSA keys)
3730bb22 2561 - itojun@cvs.openbsd.org 2001/06/23 17:48:18
2562 [sftp.1 ssh.1 sshd.8 ssh-keyscan.1]
2563 kill whitespace at EOL.
3aca00a3 2564 - markus@cvs.openbsd.org 2001/06/23 19:12:43
2565 [sshd.c]
2566 pidfile/sigterm race; bbraun@synack.net
ce404659 2567 - markus@cvs.openbsd.org 2001/06/23 22:37:46
2568 [sshconnect1.c]
2569 consistent with ssh2: skip key if empty passphrase is entered,
2570 retry num_of_passwd_prompt times if passphrase is wrong. ok fgsch@
2cee8a25 2571 - markus@cvs.openbsd.org 2001/06/24 05:25:10
2572 [auth-options.c match.c match.h]
2573 move ip+hostname check to match.c
1843a425 2574 - markus@cvs.openbsd.org 2001/06/24 05:35:33
2575 [readpass.c readpass.h ssh-add.c sshconnect2.c ssh-keygen.c]
2576 switch to readpassphrase(3)
2577 2.7/8-stable needs readpassphrase.[ch] from libc
80097c54 2578 - markus@cvs.openbsd.org 2001/06/24 05:47:13
2579 [sshconnect2.c]
2580 oops, missing format string
b4e7177c 2581 - markus@cvs.openbsd.org 2001/06/24 17:18:31
2582 [ttymodes.c]
2583 passing modes works fine: debug2->3
ab88181c 2584 - (djm) -Wall fix for session.c
3159d49a 2585 - (djm) Bring in readpassphrase() from OpenBSD libc. Compiles OK on Linux and
2586 Solaris
0cd000dd 2587
7751d4eb 258820010622
2589 - (stevesk) handle systems without pw_expire and pw_change.
2590
e04e7a19 259120010621
2592 - OpenBSD CVS Sync
2593 - markus@cvs.openbsd.org 2001/06/16 08:49:38
2594 [misc.c]
2595 typo; dunlap@apl.washington.edu
c03175c6 2596 - markus@cvs.openbsd.org 2001/06/16 08:50:39
2597 [channels.h]
2598 bad //-style comment; thx to stevev@darkwing.uoregon.edu
08c260ea 2599 - markus@cvs.openbsd.org 2001/06/16 08:57:35
2600 [scp.c]
2601 no stdio or exit() in signal handlers.
c4d49b85 2602 - markus@cvs.openbsd.org 2001/06/16 08:58:34
2603 [misc.c]
2604 copy pw_expire and pw_change, too.
dac6753b 2605 - markus@cvs.openbsd.org 2001/06/19 12:34:09
2606 [session.c]
2607 cleanup forced command handling, from dwd@bell-labs.com
ff027d84 2608 - markus@cvs.openbsd.org 2001/06/19 14:09:45
2609 [session.c sshd.8]
2610 disable x11-fwd if use_login is enabled; from lukem@wasabisystems.com
c95add71 2611 - markus@cvs.openbsd.org 2001/06/19 15:40:45
2612 [session.c]
2613 allocate and free at the same level.
d6746a0b 2614 - markus@cvs.openbsd.org 2001/06/20 13:56:39
2615 [channels.c channels.h clientloop.c packet.c serverloop.c]
2616 move from channel_stop_listening to channel_free_all,
2617 call channel_free_all before calling waitpid() in serverloop.
2618 fixes the utmp handling; report from Lutz.Jaenicke@aet.TU-Cottbus.DE
e04e7a19 2619
5ad9f968 262020010615
2621 - (stevesk) don't set SA_RESTART and set SIGCHLD to SIG_DFL
2622 around grantpt().
f7940aa9 2623 - (stevesk) update TODO: STREAMS pty systems don't call vhangup() now
5ad9f968 2624
eb26141e 262520010614
2626 - OpenBSD CVS Sync
2627 - markus@cvs.openbsd.org 2001/06/13 09:10:31
2628 [session.c]
2629 typo, use pid not s->pid, mstone@cs.loyola.edu
2630
86066315 263120010613
eb26141e 2632 - OpenBSD CVS Sync
86066315 2633 - markus@cvs.openbsd.org 2001/06/12 10:58:29
2634 [session.c]
2635 merge session_free into session_close()
2636 merge pty_cleanup_proc into session_pty_cleanup()
653d5f86 2637 - markus@cvs.openbsd.org 2001/06/12 16:10:38
2638 [session.c]
2639 merge ssh1/ssh2 tty msg parse and alloc code
76735fe3 2640 - markus@cvs.openbsd.org 2001/06/12 16:11:26
2641 [packet.c]
2642 do not log() packet_set_maxsize
b44de2b1 2643 - markus@cvs.openbsd.org 2001/06/12 21:21:29
2644 [session.c]
2645 remove xauth-cookie-in-tmp handling. use default $XAUTHORITY, since
2646 we do already trust $HOME/.ssh
2647 you can use .ssh/sshrc and .ssh/environment if you want to customize
2648 the location of the xauth cookies
7a313633 2649 - markus@cvs.openbsd.org 2001/06/12 21:30:57
2650 [session.c]
2651 unused
86066315 2652
2c9d881a 265320010612
38296b32 2654 - scp.c ID update (upstream synced vfsprintf() from us)
2655 - OpenBSD CVS Sync
2c9d881a 2656 - markus@cvs.openbsd.org 2001/06/10 11:29:20
2657 [dispatch.c]
2658 we support rekeying
2659 protocol errors are fatal.
1500bcdd 2660 - markus@cvs.openbsd.org 2001/06/11 10:18:24
2661 [session.c]
2662 reset pointer to NULL after xfree(); report from solar@openwall.com
f740438e 2663 - markus@cvs.openbsd.org 2001/06/11 16:04:38
2664 [sshd.8]
2665 typo; bdubreuil@crrel.usace.army.mil
2c9d881a 2666
b4d02860 266720010611
68fa858a 2668 - (bal) NeXT/MacOS X lack libgen.h and dirname(). Patch by Mark Miller
2669 <markm@swoon.net>
224cbdcc 2670 - (bal) Handle broken krb4 issues on Solaris with multiple defined u_*_t
68fa858a 2671 types. Patch by Jan IVEN <Jan.Iven@cern.ch>
0bb724ce 2672 - (bal) Fixed Makefile.in so that 'configure; make install' works.
b4d02860 2673
bf093080 267420010610
2675 - (bal) Missed two files in major resync. auth-bsdauth.c and auth-skey.c
2676
e697bda7 267720010609
2678 - OpenBSD CVS Sync
2679 - markus@cvs.openbsd.org 2001/05/30 12:55:13
68fa858a 2680 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
e697bda7 2681 packet.c serverloop.c session.c ssh.c ssh1.h]
2682 channel layer cleanup: merge header files and split .c files
36e1f6a1 2683 - markus@cvs.openbsd.org 2001/05/30 15:20:10
2684 [ssh.c]
2685 merge functions, simplify.
a5efa1bb 2686 - markus@cvs.openbsd.org 2001/05/31 10:30:17
68fa858a 2687 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
a5efa1bb 2688 packet.c serverloop.c session.c ssh.c]
68fa858a 2689 undo the .c file split, just merge the header and keep the cvs
a5efa1bb 2690 history
68fa858a 2691 - (bal) Channels.c and Channels.h -- "Merge Functions, simplify" (draged
8e7895b8 2692 out of ssh Attic)
68fa858a 2693 - (bal) Ooops.. nchan.c (and remove nchan.h) resync from OpenBSD ssh
a98da4aa 2694 Attic.
2695 - OpenBSD CVS Sync
2696 - markus@cvs.openbsd.org 2001/05/31 13:08:04
2697 [sshd_config]
2698 group options and add some more comments
e4f7282d 2699 - markus@cvs.openbsd.org 2001/06/03 14:55:39
2700 [channels.c channels.h session.c]
68fa858a 2701 use fatal_register_cleanup instead of atexit, sync with x11 authdir
e4f7282d 2702 handling
e5b71e99 2703 - markus@cvs.openbsd.org 2001/06/03 19:36:44
2704 [ssh-keygen.1]
2705 1-2 bits of entrophy per character (not per word), ok stevesk@
4fc334a2 2706 - markus@cvs.openbsd.org 2001/06/03 19:38:42
2707 [scp.c]
2708 pass -v to ssh; from slade@shore.net
f5e69c65 2709 - markus@cvs.openbsd.org 2001/06/03 20:06:11
2710 [auth2-chall.c]
68fa858a 2711 the challenge response device decides how to handle non-existing
f5e69c65 2712 users.
2713 -> fake challenges for skey and cryptocard
f0f32b8e 2714 - markus@cvs.openbsd.org 2001/06/04 21:59:43
2715 [channels.c channels.h session.c]
68fa858a 2716 switch uid when cleaning up tmp files and sockets; reported by
f0f32b8e 2717 zen-parse@gmx.net on bugtraq
c9130033 2718 - markus@cvs.openbsd.org 2001/06/04 23:07:21
2719 [clientloop.c serverloop.c sshd.c]
68fa858a 2720 set flags in the signal handlers, do real work in the main loop,
c9130033 2721 ok provos@
8dcd9d5c 2722 - markus@cvs.openbsd.org 2001/06/04 23:16:16
2723 [session.c]
2724 merge ssh1/2 x11-fwd setup, create listener after tmp-dir
aa144206 2725 - pvalchev@cvs.openbsd.org 2001/06/05 05:05:39
2726 [ssh-keyscan.1 ssh-keyscan.c]
2727 License clarification from David Mazieres, ok deraadt@
750c256a 2728 - markus@cvs.openbsd.org 2001/06/05 10:24:32
2729 [channels.c]
2730 don't delete the auth socket in channel_stop_listening()
2731 auth_sock_cleanup_proc() will take care of this.
fc2a1d28 2732 - markus@cvs.openbsd.org 2001/06/05 16:46:19
2733 [session.c]
2734 let session_close() delete the pty. deny x11fwd if xauthfile is set.
d87596b0 2735 - markus@cvs.openbsd.org 2001/06/06 23:13:54
2736 [ssh-dss.c ssh-rsa.c]
2737 cleanup, remove old code
edf9ae81 2738 - markus@cvs.openbsd.org 2001/06/06 23:19:35
2739 [ssh-add.c]
2740 remove debug message; Darren.Moffat@eng.sun.com
2a6a054e 2741 - markus@cvs.openbsd.org 2001/06/07 19:57:53
2742 [auth2.c]
2743 style is used for bsdauth.
2744 disconnect on user/service change (ietf-drafts)
449c5ba5 2745 - markus@cvs.openbsd.org 2001/06/07 20:23:05
68fa858a 2746 [authfd.c authfile.c channels.c kexdh.c kexgex.c packet.c ssh.c
449c5ba5 2747 sshconnect.c sshconnect1.c]
2748 use xxx_put_cstring()
e6abba31 2749 - markus@cvs.openbsd.org 2001/06/07 22:25:02
2750 [session.c]
2751 don't overwrite errno
2752 delay deletion of the xauth cookie
fd9ede94 2753 - markus@cvs.openbsd.org 2001/06/08 15:25:40
2754 [includes.h pathnames.h readconf.c servconf.c]
2755 move the path for xauth to pathnames.h
0abe778b 2756 - (bal) configure.in fix for Tru64 (forgeting to reset $LIB)
83c17f20 2757 - (bal) ANSIify strmode()
68fa858a 2758 - (bal) --with-catman should be --with-mantype patch by Dave
2759 Dykstra <dwd@bell-labs.com>
fd9ede94 2760
4869a96f 276120010606
e697bda7 2762 - OpenBSD CVS Sync
68fa858a 2763 - markus@cvs.openbsd.org 2001/05/17 21:34:15
e697bda7 2764 [ssh.1]
68fa858a 2765 no spaces in PreferredAuthentications;
5ba55ada 2766 meixner@rbg.informatik.tu-darmstadt.de
2767 - markus@cvs.openbsd.org 2001/05/18 14:13:29
68fa858a 2768 [auth-chall.c auth.h auth1.c auth2-chall.c auth2.c readconf.c
5ba55ada 2769 readconf.h servconf.c servconf.h sshconnect1.c sshconnect2.c sshd.c]
2770 improved kbd-interactive support. work by per@appgate.com and me
bc03d5aa 2771 - djm@cvs.openbsd.org 2001/05/19 00:36:40
2772 [session.c]
2773 Disable X11 forwarding if xauth binary is not found. Patch from Nalin
2774 Dahyabhai <nalin@redhat.com>; ok markus@
68fa858a 2775 - markus@cvs.openbsd.org 2001/05/19 16:05:41
2776 [scp.c]
3e4fc5f9 2777 ftruncate() instead of open()+O_TRUNC like rcp.c does
68fa858a 2778 allows scp /path/to/file localhost:/path/to/file
2779 - markus@cvs.openbsd.org 2001/05/19 16:08:43
2780 [sshd.8]
a18395da 2781 sort options; Matthew.Stier@fnc.fujitsu.com
68fa858a 2782 - markus@cvs.openbsd.org 2001/05/19 16:32:16
2783 [ssh.1 sshconnect2.c]
2784 change preferredauthentication order to
2785 publickey,hostbased,password,keyboard-interactive
3398dda9 2786 document that hostbased defaults to no, document order
47bf6266 2787 - markus@cvs.openbsd.org 2001/05/19 16:46:19
68fa858a 2788 [ssh.1 sshd.8]
2789 document MACs defaults with .Dq
2790 - stevesk@cvs.openbsd.org 2001/05/19 19:43:57
2791 [misc.c misc.h servconf.c sshd.8 sshd.c]
2792 sshd command-line arguments and configuration file options that
2793 specify time may be expressed using a sequence of the form:
e2b1fb42 2794 time[qualifier], where time is a positive integer value and qualifier
68fa858a 2795 is one of the following:
2796 <none>,s,m,h,d,w
2797 Examples:
2798 600 600 seconds (10 minutes)
2799 10m 10 minutes
2800 1h30m 1 hour 30 minutes (90 minutes)
2801 ok markus@
7e8c18e9 2802 - stevesk@cvs.openbsd.org 2001/05/19 19:57:09
68fa858a 2803 [channels.c]
2804 typo in error message
e697bda7 2805 - markus@cvs.openbsd.org 2001/05/20 17:20:36
c8445989 2806 [auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8
2807 sshd_config]
68fa858a 2808 configurable authorized_keys{,2} location; originally from peter@;
2809 ok djm@
1ddf764b 2810 - markus@cvs.openbsd.org 2001/05/24 11:12:42
68fa858a 2811 [auth.c]
2812 fix comment; from jakob@
2813 - stevesk@cvs.openbsd.org 2001/05/24 18:57:53
2814 [clientloop.c readconf.c ssh.c ssh.h]
4bf9c10e 2815 don't perform escape processing when ``EscapeChar none''; ok markus@
abe0fb9f 2816 - markus@cvs.openbsd.org 2001/05/25 14:37:32
68fa858a 2817 [ssh-keygen.c]
2818 use -P for -e and -y, too.
63cd7dd0 2819 - markus@cvs.openbsd.org 2001/05/28 08:04:39
68fa858a 2820 [ssh.c]
2821 fix usage()
2822 - markus@cvs.openbsd.org 2001/05/28 10:08:55
2823 [authfile.c]
eb2e1595 2824 key_load_private: set comment to filename for PEM keys
2cf27bc4 2825 - markus@cvs.openbsd.org 2001/05/28 22:51:11
68fa858a 2826 [cipher.c cipher.h]
2827 simpler 3des for ssh1
2828 - markus@cvs.openbsd.org 2001/05/28 23:14:49
2829 [channels.c channels.h nchan.c]
6fd8622b 2830 undo broken channel fix and try a different one. there
68fa858a 2831 should be still some select errors...
2832 - markus@cvs.openbsd.org 2001/05/28 23:25:24
2833 [channels.c]
2834 cleanup, typo
08dcb5d7 2835 - markus@cvs.openbsd.org 2001/05/28 23:58:35
68fa858a 2836 [packet.c packet.h sshconnect.c sshd.c]
2837 remove some lines, simplify.
a10bdd7c 2838 - markus@cvs.openbsd.org 2001/05/29 12:31:27
68fa858a 2839 [authfile.c]
2840 typo
5ba55ada 2841
5cde8062 284220010528
2843 - (tim) [conifgure.in] add setvbuf test needed for sftp-int.c
2844 Patch by Corinna Vinschen <vinschen@redhat.com>
2845
362df52e 284620010517
2847 - OpenBSD CVS Sync
2848 - markus@cvs.openbsd.org 2001/05/12 19:53:13
2849 [sftp-server.c]
2850 readlink does not NULL-terminate; mhe@home.se
6efa3d14 2851 - deraadt@cvs.openbsd.org 2001/05/15 22:04:01
2852 [ssh.1]
2853 X11 forwarding details improved
70ea8327 2854 - markus@cvs.openbsd.org 2001/05/16 20:51:57
2855 [authfile.c]
2856 return comments for private pem files, too; report from nolan@naic.edu
24b6b45f 2857 - markus@cvs.openbsd.org 2001/05/16 21:53:53
2858 [clientloop.c]
2859 check for open sessions before we call select(); fixes the x11 client
2860 bug reported by bowman@math.ualberta.ca
7231bd47 2861 - markus@cvs.openbsd.org 2001/05/16 22:09:21
2862 [channels.c nchan.c]
2863 more select() error fixes (don't set rfd/wfd to -1).
7043a38d 2864 - (bal) Enabled USE_PIPES for Cygwin on Corinna Vinschen <vinschen@redhat.com>
68fa858a 2865 - (bal) Corrected on_exit() emulation via atexit().
362df52e 2866
89aa792b 286720010512
2868 - OpenBSD CVS Sync
2869 - markus@cvs.openbsd.org 2001/05/11 14:59:56
2870 [clientloop.c misc.c misc.h]
2871 add unset_nonblock for stdout/err flushing in client_loop().
286e38f7 2872 - (bal) Patch to partial sync up contrib/solaris/ packaging software.
2873 Patch by pete <ninjaz@webexpress.com>
89aa792b 2874
97430469 287520010511
2876 - OpenBSD CVS Sync
2877 - markus@cvs.openbsd.org 2001/05/09 22:51:57
2878 [channels.c]
2879 fix -R for protocol 2, noticed by greg@nest.cx.
2880 bug was introduced with experimental dynamic forwarding.
a16092bb 2881 - markus@cvs.openbsd.org 2001/05/09 23:01:31
2882 [rijndael.h]
2883 fix prototype; J.S.Peatfield@damtp.cam.ac.uk
97430469 2884
588f4ed0 288520010509
2886 - OpenBSD CVS Sync
2887 - markus@cvs.openbsd.org 2001/05/06 21:23:31
2888 [cli.c]
2889 cli_read() fails to catch SIGINT + overflow; from obdb@zzlevo.net
d18e0850 2890 - markus@cvs.openbsd.org 2001/05/08 19:17:31
a01a10dd 2891 [channels.c serverloop.c clientloop.c]
d18e0850 2892 adds correct error reporting to async connect()s
68fa858a 2893 fixes the server-discards-data-before-connected-bug found by
d18e0850 2894 onoe@sm.sony.co.jp
8a624ebf 2895 - mouring@cvs.openbsd.org 2001/05/08 19:45:25
2896 [misc.c misc.h scp.c sftp.c]
2897 Use addargs() in sftp plus some clean up of addargs(). OK Markus
1b02d786 2898 - markus@cvs.openbsd.org 2001/05/06 21:45:14
2899 [clientloop.c]
68fa858a 2900 use atomicio for flushing stdout/stderr bufs. thanks to
1b02d786 2901 jbw@izanami.cee.hw.ac.uk
010980f6 2902 - markus@cvs.openbsd.org 2001/05/08 22:48:07
2903 [atomicio.c]
2904 no need for xmalloc.h, thanks to espie@
68fa858a 2905 - (bal) UseLogin patch for Solaris/UNICOS. Patch by Wayne Davison
7e2d5fa4 2906 <wayne@blorf.net>
99c8ddac 2907 - (bal) ./configure support to disable SIA on OSF1. Patch by
2908 Chris Adams <cmadams@hiwaay.net>
68fa858a 2909 - (bal) Updates from the Sony NEWS-OS platform by NAKAJI Hiroyuki
b81c369b 2910 <nakaji@tutrp.tut.ac.jp>
588f4ed0 2911
7b22534a 291220010508
68fa858a 2913 - (bal) Fixed configure test for USE_SIA.
7b22534a 2914
94539b2a 291520010506
2916 - (djm) Update config.guess and config.sub with latest versions (from
2917 ftp://ftp.gnu.org/gnu/config/) to allow configure on ia64-hpux.
2918 Suggested by Jason Mader <jason@ncac.gwu.edu>
96c63318 2919 - (bal) White Space and #ifdef sync with OpenBSD
044b0662 2920 - (bal) Add 'seed_rng()' to ssh-add.c
9e9bd8c0 2921 - (bal) CVS ID updates for readpass.c, readpass.h, cli.c, and cli.h
cf7ff074 2922 - OpenBSD CVS Sync
2923 - stevesk@cvs.openbsd.org 2001/05/05 13:42:52
2924 [sftp.1 ssh-add.1 ssh-keygen.1]
2925 typos, grammar
94539b2a 2926
98143cfc 292720010505
2928 - OpenBSD CVS Sync
2929 - stevesk@cvs.openbsd.org 2001/05/04 14:21:56
2930 [ssh.1 sshd.8]
2931 typos
5b9601c8 2932 - markus@cvs.openbsd.org 2001/05/04 14:34:34
2933 [channels.c]
94539b2a 2934 channel_new() reallocs channels[], we cannot use Channel *c after
2935 calling channel_new(), XXX fix this in the future...
719fc62f 2936 - markus@cvs.openbsd.org 2001/05/04 23:47:34
2937 [channels.c channels.h clientloop.c nchan.c nchan.h serverloop.c ssh.c]
68fa858a 2938 move to Channel **channels (instead of Channel *channels), fixes realloc
2939 problems. channel_new now returns a Channel *, favour Channel * over
719fc62f 2940 channel id. remove old channel_allocate interface.
98143cfc 2941
f92fee1f 294220010504
2943 - OpenBSD CVS Sync
2944 - stevesk@cvs.openbsd.org 2001/05/03 15:07:39
2945 [channels.c]
2946 typo in debug() string
503e7e5b 2947 - markus@cvs.openbsd.org 2001/05/03 15:45:15
2948 [session.c]
2949 exec shell -c /bin/sh .ssh/sshrc, from abartlet@pcug.org.au
c98cab9b 2950 - stevesk@cvs.openbsd.org 2001/05/03 21:43:01
2951 [servconf.c]
2952 remove "\n" from fatal()
1fcde3fe 2953 - mouring@cvs.openbsd.org 2001/05/03 23:09:53
2954 [misc.c misc.h scp.c sftp.c]
2955 Move colon() and cleanhost() to misc.c where I should I have put it in
2956 the first place
044aa419 2957 - (bal) Updated Cygwin README by Corinna Vinschen <vinschen@redhat.com>
c7ccfd39 2958 - (bal) Avoid socket file security issues in ssh-agent for Cygwin.
2959 Patch by Egor Duda <deo@logos-m.ru>
f92fee1f 2960
065604bb 296120010503
2962 - OpenBSD CVS Sync
2963 - markus@cvs.openbsd.org 2001/05/02 16:41:20
2964 [ssh-add.c]
2965 fix prompt for ssh-add.
2966
742ee8f2 296720010502
2968 - OpenBSD CVS Sync
2969 - mouring@cvs.openbsd.org 2001/05/02 01:25:39
2970 [readpass.c]
2971 Put the 'const' back into ssh_askpass() function. Pointed out
2972 by Mark Miller <markm@swoon.net>. OK Markus
2973
3435f5a6 297420010501
2975 - OpenBSD CVS Sync
2976 - markus@cvs.openbsd.org 2001/04/30 11:18:52
2977 [readconf.c readconf.h ssh.1 ssh.c sshconnect.c]
2978 implement 'ssh -b bind_address' like 'telnet -b'
eef7adcb 2979 - markus@cvs.openbsd.org 2001/04/30 15:50:46
2980 [compat.c compat.h kex.c]
2981 allow interop with weaker key generation used by ssh-2.0.x, x < 10
ec430473 2982 - markus@cvs.openbsd.org 2001/04/30 16:02:49
2983 [compat.c]
2984 ssh-2.0.10 has the weak-key-bug, too.
3ca6cc45 2985 - (tim) [contrib/caldera/openssh.spec] add Requires line for Caldera 3.1
3435f5a6 2986
e8171bff 298720010430
39aefe7b 2988 - OpenBSD CVS Sync
2989 - markus@cvs.openbsd.org 2001/04/29 18:32:52
2990 [serverloop.c]
2991 fix whitespace
fbe90f7b 2992 - markus@cvs.openbsd.org 2001/04/29 19:16:52
2993 [channels.c clientloop.c compat.c compat.h serverloop.c]
2994 more ssh.com-2.0.x bug-compat; from per@appgate.com
e8171bff 2995 - (tim) New version of mdoc2man.pl from Mark D. Roth <roth+openssh@feep.net>
0b47e48f 2996 - (djm) Add .cvsignore files, suggested by Wayne Davison <wayne@blorf.net>
39aefe7b 2997
baf8c81a 299820010429
2999 - (bal) Updated INSTALL. PCRE moved to a new place.
e878ffe1 3000 - (djm) Release OpenSSH-2.9p1
baf8c81a 3001
0096ac62 300220010427
3003 - (bal) Fixed uidswap.c so it should work on non-posix complient systems.
3004 patch based on 2.5.2 version by djm.
95595a77 3005 - (bal) Build manpages and config files once unless changed. Patch by
3006 Carson Gaspar <carson@taltos.org>
68fa858a 3007 - (bal) arpa/nameser.h does not exist on Cygwin. Patch by Corinna
4a2df58f 3008 Vinschen <vinschen@redhat.com>
5ef815d7 3009 - (bal) Add /etc/sysconfig/sshd support to redhat's sshd.init. Patch by
3010 Pekka Savola <pekkas@netcore.fi>
68fa858a 3011 - (bal) Cygwin lacks setgroups() API. Patch by Corinna Vinschen
229be2df 3012 <vinschen@redhat.com>
cc3ccfdc 3013 - (bal) version.h synced, RPM specs updated for 2.9
b1e2a48c 3014 - (tim) update contrib/caldera files with what Caldera is using.
3015 <sps@caldera.de>
0096ac62 3016
b587c165 301720010425
3018 - OpenBSD CVS Sync
3019 - markus@cvs.openbsd.org 2001/04/23 21:57:07
3020 [ssh-keygen.1 ssh-keygen.c]
3021 allow public key for -e, too
012bc0e1 3022 - markus@cvs.openbsd.org 2001/04/23 22:14:13
3023 [ssh-keygen.c]
3024 remove debug
f8252c48 3025 - (bal) Whitespace resync w/ OpenBSD for uidswap.c
10f72868 3026 - (djm) Add new server configuration directive 'PAMAuthenticationViaKbdInt'
68fa858a 3027 (default: off), implies KbdInteractiveAuthentication. Suggestion from
10f72868 3028 markus@
c2d059b5 3029 - (djm) Include crypt.h if available in auth-passwd.c
533875af 3030 - tim@mindrot.org 2001/04/25 21:38:01 [configure.in]
3031 man page detection fixes for SCO
b587c165 3032
da89cf4d 303320010424
3034 - OpenBSD CVS Sync
3035 - markus@cvs.openbsd.org 2001/04/22 23:58:36
3036 [ssh-keygen.1 ssh.1 sshd.8]
3037 document hostbased and other cleanup
5e29aeaf 3038 - (stevesk) start_pam() doesn't use DNS now for sshd -u0.
3cc990d7 3039 - (stevesk) auth-pam.c: use PERMIT_NO_PASSWD
68fa858a 3040 - (bal) sys/queue.h is bogus for NCR platform. Patch by Daniel Carroll
d8e76a0a 3041 <dan@mesastate.edu>
3644dc25 3042 - (bal) Fixed contrib/postinstall.in. Patch by wsanders@wsanders.net
da89cf4d 3043
a3626e12 304420010422
3045 - OpenBSD CVS Sync
3046 - markus@cvs.openbsd.org 2001/04/20 16:32:22
3047 [uidswap.c]
3048 set non-privileged gid before uid; tholo@ and deraadt@
1a726b04 3049 - mouring@cvs.openbsd.org 2001/04/21 00:55:57
3050 [sftp.1]
3051 Spelling
67b964a1 3052 - djm@cvs.openbsd.org 2001/04/22 08:13:30
3053 [ssh.1]
3054 typos spotted by stevesk@; ok deraadt@
ba917921 3055 - markus@cvs.openbsd.org 2001/04/22 12:34:05
3056 [scp.c]
3057 scp > 2GB; niles@scyld.com; ok deraadt@, djm@
5deceabb 3058 - markus@cvs.openbsd.org 2001/04/22 13:25:37
3059 [ssh-keygen.1 ssh-keygen.c]
3060 rename arguments -x -> -e (export key), -X -> -i (import key)
3061 xref draft-ietf-secsh-publickeyfile-01.txt
2cad6cef 3062 - markus@cvs.openbsd.org 2001/04/22 13:32:27
3063 [sftp-server.8 sftp.1 ssh.1 sshd.8]
3064 xref draft-ietf-secsh-*
bcaa828e 3065 - markus@cvs.openbsd.org 2001/04/22 13:41:02
3066 [ssh-keygen.1 ssh-keygen.c]
3067 style, noted by stevesk; sort flags in usage
a3626e12 3068
df841692 306920010421
3070 - OpenBSD CVS Sync
3071 - djm@cvs.openbsd.org 2001/04/20 07:17:51
3072 [clientloop.c ssh.1]
3073 Split out and improve escape character documentation, mention ~R in
3074 ~? help text; ok markus@
0e7e0abe 3075 - Update RPM spec files for CVS version.h
1ddee76b 3076 - (stevesk) set the default PAM service name to __progname instead
3077 of the hard-coded value "sshd"; from Mark D. Roth <roth@feep.net>
4b28be2c 3078 - (stevesk) document PAM service name change in INSTALL
13dd877b 3079 - tim@mindrot.org 2001/04/21 14:25:57 [Makefile.in configure.in]
3080 fix perl test, fix nroff test, fix Makefile to build outside source tree
df841692 3081
05cc0c99 308220010420
68fa858a 3083 - OpenBSD CVS Sync
05cc0c99 3084 - ian@cvs.openbsd.org 2001/04/18 16:21:05
68fa858a 3085 [ssh-keyscan.1]
3086 Fix typo reported in PR/1779
3087 - markus@cvs.openbsd.org 2001/04/18 21:57:42
3088 [readpass.c ssh-add.c]
561e5254 3089 call askpass from ssh, too, based on work by roth@feep.net, ok deraadt
68fa858a 3090 - markus@cvs.openbsd.org 2001/04/18 22:03:45
3091 [auth2.c sshconnect2.c]
f98c3421 3092 use FDQN with trailing dot in the hostbased auth packets, ok deraadt@
57a5edd8 3093 - markus@cvs.openbsd.org 2001/04/18 22:48:26
68fa858a 3094 [auth2.c]
3095 no longer const
3096 - markus@cvs.openbsd.org 2001/04/18 23:43:26
3097 [auth2.c compat.c sshconnect2.c]
3098 more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works now
8dddf799 3099 (however the 2.1.0 server seems to work only if debug is enabled...)
ae88ea7e 3100 - markus@cvs.openbsd.org 2001/04/18 23:44:51
68fa858a 3101 [authfile.c]
3102 error->debug; noted by fries@
3103 - markus@cvs.openbsd.org 2001/04/19 00:05:11
3104 [auth2.c]
3105 use local variable, no function call needed.
5cf13595 3106 (btw, hostbased works now with ssh.com >= 2.0.13)
431a2493 3107 - (bal) Put scp-common.h back into scp.c (it exists in the upstream
3108 tree) pointed out by Tom Holroyd <tomh@po.crl.go.jp>
05cc0c99 3109
e78e738a 311020010418
68fa858a 3111 - OpenBSD CVS Sync
e78e738a 3112 - markus@cvs.openbsd.org 2001/04/17 19:34:25
3a83b819 3113 [session.c]
3114 move auth_approval to do_authenticated().
3115 do_child(): nuke hostkeys from memory
3116 don't source .ssh/rc for subsystems.
3117 - markus@cvs.openbsd.org 2001/04/18 14:15:00
3118 [canohost.c]
3119 debug->debug3
ce2af031 3120 - (bal) renabled 'catman-do:' and fixed it. So now catman pages should
3121 be working again.
e0c4d3ac 3122 - (bal) Makfile day... Cleaned up multiple mantype support (Patch by
3123 Mark D. Roth <roth+openssh@feep.net>), and fixed PIDDIR support.
3a83b819 3124
8c6b78e4 312520010417
3126 - (bal) Add perl5 check for HP/UX, Removed GNUness from Makefile.in
6d165a89 3127 and temporary commented out 'catman-do:' since it is broken. Patches
8c6b78e4 3128 for the first two by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
a88b7b57 3129 - OpenBSD CVS Sync
53b8fe68 3130 - deraadt@cvs.openbsd.org 2001/04/16 08:26:04
3131 [key.c]
3132 better safe than sorry in later mods; yongari@kt-is.co.kr
3133 - markus@cvs.openbsd.org 2001/04/17 08:14:01
3134 [sshconnect1.c]
3135 check for key!=NULL, thanks to costa
3136 - markus@cvs.openbsd.org 2001/04/17 09:52:48
3137 [clientloop.c]
cf6bc93c 3138 handle EINTR/EAGAIN on read; ok deraadt@
53b8fe68 3139 - markus@cvs.openbsd.org 2001/04/17 10:53:26
3140 [key.c key.h readconf.c readconf.h ssh.1 sshconnect2.c]
e961a8f9 3141 add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@
53b8fe68 3142 - markus@cvs.openbsd.org 2001/04/17 12:55:04
3143 [channels.c ssh.c]
3144 undo socks5 and https support since they are not really used and
3145 only bloat ssh. remove -D from usage(), since '-D' is experimental.
3146
e4664c3e 314720010416
3148 - OpenBSD CVS Sync
3149 - stevesk@cvs.openbsd.org 2001/04/15 01:35:22
3150 [ttymodes.c]
3151 fix comments
ec1f12d3 3152 - markus@cvs.openbsd.org 2001/04/15 08:43:47
3153 [dh.c sftp-glob.c sftp-glob.h sftp-int.c sshconnect2.c sshd.c]
3154 some unused variable and typos; from tomh@po.crl.go.jp
58cfa257 3155 - markus@cvs.openbsd.org 2001/04/15 16:58:03
3156 [authfile.c ssh-keygen.c sshd.c]
3157 don't use errno for key_{load,save}_private; discussion w/ solar@openwall
e968270c 3158 - markus@cvs.openbsd.org 2001/04/15 17:16:00
3159 [clientloop.c]
3160 set stdin/out/err to nonblocking in SSH proto 1, too. suggested by ho@
3161 should fix some of the blocking problems for rsync over SSH-1
84fc17bf 3162 - stevesk@cvs.openbsd.org 2001/04/15 19:41:21
3163 [sshd.8]
3164 some ClientAlive cleanup; ok markus@
b7c70970 3165 - stevesk@cvs.openbsd.org 2001/04/15 21:28:35
3166 [readconf.c servconf.c]
3167 use fatal() or error() vs. fprintf(); ok markus@
5d97cfbf 3168 - (djm) Convert mandoc manpages to man automatically. Patch from Mark D.
3169 Roth <roth+openssh@feep.net>
6023325e 3170 - (bal) CVS ID fix up and slight manpage fix from OpenBSD tree.
47b53518 3171 - (djm) OpenBSD CVS Sync
3172 - mouring@cvs.openbsd.org 2001/04/16 02:31:44
3173 [scp.c sftp.c]
3174 IPv6 support for sftp (which I bungled in my last patch) which is
3175 borrowed from scp.c. Thanks to Markus@ for pointing it out.
764291b3 3176 - deraadt@cvs.openbsd.org 2001/04/16 08:05:34
3177 [xmalloc.c]
3178 xrealloc dealing with ptr == nULL; mouring
f2c2fd71 3179 - djm@cvs.openbsd.org 2001/04/16 08:19:31
3180 [session.c]
68fa858a 3181 Split motd and hushlogin checks into seperate functions, helps for
f2c2fd71 3182 portable. From Chris Adams <cmadams@hiwaay.net>; ok markus@
68fa858a 3183 - Fix OSF SIA support displaying too much information for quiet
3184 logins and logins where access was denied by SIA. Patch from Chris Adams
c96a4aaf 3185 <cmadams@hiwaay.net>
e4664c3e 3186
f03228b1 318720010415
3188 - OpenBSD CVS Sync
3189 - deraadt@cvs.openbsd.org 2001/04/14 04:31:01
3190 [ssh-add.c]
3191 do not double free
9cf972fa 3192 - markus@cvs.openbsd.org 2001/04/14 16:17:14
3193 [channels.c]
3194 remove some channels that are not appropriate for keepalive.
eae942e2 3195 - markus@cvs.openbsd.org 2001/04/14 16:27:57
3196 [ssh-add.c]
3197 use clear_pass instead of xfree()
30dcc918 3198 - stevesk@cvs.openbsd.org 2001/04/14 16:33:20
3199 [clientloop.c packet.h session.c ssh.c ttymodes.c ttymodes.h]
3200 protocol 2 tty modes support; ok markus@
36967a16 3201 - stevesk@cvs.openbsd.org 2001/04/14 17:04:42
3202 [scp.c]
3203 'T' handling rcp/scp sync; ok markus@
e4664c3e 3204 - Missed sshtty.[ch] in Sync.
f03228b1 3205
e400a640 320620010414
3207 - Sync with OpenBSD glob.c, strlcat.c and vis.c changes
68fa858a 3208 - Cygwin sftp/sftp-server binary mode patch from Corinna Vinschen
fe56c12b 3209 <vinschen@redhat.com>
3ffc6336 3210 - OpenBSD CVS Sync
3211 - beck@cvs.openbsd.org 2001/04/13 22:46:54
3212 [channels.c channels.h servconf.c servconf.h serverloop.c sshd.8]
3213 Add options ClientAliveInterval and ClientAliveCountMax to sshd.
3214 This gives the ability to do a "keepalive" via the encrypted channel
3215 which can't be spoofed (unlike TCP keepalives). Useful for when you want
3216 to use ssh connections to authenticate people for something, and know
3217 relatively quickly when they are no longer authenticated. Disabled
3218 by default (of course). ok markus@
e400a640 3219
cc44f691 322020010413
68fa858a 3221 - OpenBSD CVS Sync
3222 - markus@cvs.openbsd.org 2001/04/12 14:29:09
3223 [ssh.c]
3224 show debug output during option processing, report from
cc44f691 3225 pekkas@netcore.fi
8002af61 3226 - markus@cvs.openbsd.org 2001/04/12 19:15:26
68fa858a 3227 [auth-rhosts.c auth.h auth2.c buffer.c canohost.c canohost.h
3228 compat.c compat.h hostfile.c pathnames.h readconf.c readconf.h
3229 servconf.c servconf.h ssh.c sshconnect.c sshconnect.h sshconnect1.c
8002af61 3230 sshconnect2.c sshd_config]
3231 implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
3232 similar to RhostRSAAuthentication unless you enable (the experimental)
3233 HostbasedUsesNameFromPacketOnly option. please test. :)
0140e66a 3234 - markus@cvs.openbsd.org 2001/04/12 19:39:27
3235 [readconf.c]
3236 typo
2d2a2c65 3237 - stevesk@cvs.openbsd.org 2001/04/12 20:09:38
3238 [misc.c misc.h readconf.c servconf.c ssh.c sshd.c]
3239 robust port validation; ok markus@ jakob@
edeeab1e 3240 - mouring@cvs.openbsd.org 2001/04/12 23:17:54
3241 [sftp-int.c sftp-int.h sftp.1 sftp.c]
3242 Add support for:
3243 sftp [user@]host[:file [file]] - Fetch remote file(s)
3244 sftp [user@]host[:dir[/]] - Start in remote dir/
3245 OK deraadt@
57aa8961 3246 - stevesk@cvs.openbsd.org 2001/04/13 01:26:17
3247 [ssh.c]
3248 missing \n in error message
96f8b59f 3249 - (bal) Added openbsd-compat/inet_ntop.[ch] since HP/UX (and others)
3250 lack it.
cc44f691 3251
28b9cb4d 325220010412
68fa858a 3253 - OpenBSD CVS Sync
28b9cb4d 3254 - markus@cvs.openbsd.org 2001/04/10 07:46:58
68fa858a 3255 [channels.c]
3256 cleanup socks4 handling
3257 - itojun@cvs.openbsd.org 2001/04/10 09:13:22
c0ecc314 3258 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
68fa858a 3259 document id_rsa{.pub,}. markus ok
070adba2 3260 - markus@cvs.openbsd.org 2001/04/10 12:15:23
68fa858a 3261 [channels.c]
3262 debug cleanup
45a2e669 3263 - djm@cvs.openbsd.org 2001/04/11 07:06:22
3264 [sftp-int.c]
3265 'mget' and 'mput' aliases; ok markus@
6031af8d 3266 - markus@cvs.openbsd.org 2001/04/11 10:59:01
3267 [ssh.c]
3268 use strtol() for ports, thanks jakob@
6683b40f 3269 - markus@cvs.openbsd.org 2001/04/11 13:56:13
3270 [channels.c ssh.c]
3271 https-connect and socks5 support. i feel so bad.
ff14faf1 3272 - lebel@cvs.openbsd.org 2001/04/11 16:25:30
3273 [sshd.8 sshd.c]
3274 implement the -e option into sshd:
3275 -e When this option is specified, sshd will send the output to the
3276 standard error instead of the system log.
3277 markus@ OK.
28b9cb4d 3278
0a85ab61 327920010410
3280 - OpenBSD CVS Sync
3281 - deraadt@cvs.openbsd.org 2001/04/08 20:52:55
3282 [sftp.c]
3283 do not modify an actual argv[] entry
b2ae83b8 3284 - stevesk@cvs.openbsd.org 2001/04/08 23:28:27
3285 [sshd.8]
3286 spelling
317611b5 3287 - stevesk@cvs.openbsd.org 2001/04/09 00:42:05
3288 [sftp.1]
3289 spelling
a8666d84 3290 - markus@cvs.openbsd.org 2001/04/09 15:12:23
3291 [ssh-add.c]
3292 passphrase caching: ssh-add tries last passphrase, clears passphrase if
3293 not successful and after last try.
3294 based on discussions with espie@, jakob@, ... and code from jakob@ and
3295 wolfgang@wsrcc.com
49ae4185 3296 - markus@cvs.openbsd.org 2001/04/09 15:19:49
3297 [ssh-add.1]
3298 ssh-add retries the last passphrase...
b8a297f1 3299 - stevesk@cvs.openbsd.org 2001/04/09 18:00:15
3300 [sshd.8]
3301 ListenAddress mandoc from aaron@
0a85ab61 3302
6e9944b8 330320010409
febd3f8e 3304 - (stevesk) use setresgid() for setegid() if needed
26de7942 3305 - (stevesk) configure.in: typo
6e9944b8 3306 - OpenBSD CVS Sync
3307 - stevesk@cvs.openbsd.org 2001/04/08 16:01:36
3308 [sshd.8]
3309 document ListenAddress addr:port
d64050ef 3310 - markus@cvs.openbsd.org 2001/04/08 13:03:00
3311 [ssh-add.c]
3312 init pointers with NULL, thanks to danimal@danimal.org
d0a4c20b 3313 - markus@cvs.openbsd.org 2001/04/08 11:27:33
3314 [clientloop.c]
3315 leave_raw_mode if ssh2 "session" is closed
63bd8c36 3316 - markus@cvs.openbsd.org 2001/04/06 21:00:17
3317 [auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth2.c channels.c session.c
3318 ssh.c sshconnect.c sshconnect.h uidswap.c uidswap.h]
3319 do gid/groups-swap in addition to uid-swap, should help if /home/group
3320 is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks
3321 to olar@openwall.com is comments. we had many requests for this.
0490e609 3322 - markus@cvs.openbsd.org 2001/04/07 08:55:18
3323 [buffer.c channels.c channels.h readconf.c ssh.c]
68fa858a 3324 allow the ssh client act as a SOCKS4 proxy (dynamic local
3325 portforwarding). work by Dan Kaminsky <dankamin@cisco.com> and me.
3326 thanks to Dan for this great patch: use 'ssh -D 1080 host' and make
0490e609 3327 netscape use localhost:1080 as a socks proxy.
d98d029a 3328 - markus@cvs.openbsd.org 2001/04/08 11:24:33
3329 [uidswap.c]
3330 KNF
6e9944b8 3331
d9d49fdb 333220010408
3333 - OpenBSD CVS Sync
3334 - stevesk@cvs.openbsd.org 2001/04/06 22:12:47
3335 [hostfile.c]
3336 unused; typo in comment
d11c1288 3337 - stevesk@cvs.openbsd.org 2001/04/06 22:25:25
3338 [servconf.c]
3339 in addition to:
3340 ListenAddress host|ipv4_addr|ipv6_addr
3341 permit:
3342 ListenAddress [host|ipv4_addr|ipv6_addr]:port
3343 ListenAddress host|ipv4_addr:port
3344 sshd.8 updates coming. ok markus@
d9d49fdb 3345
613fc910 334620010407
3347 - (bal) CVS ID Resync of version.h
cc94bd38 3348 - OpenBSD CVS Sync
3349 - markus@cvs.openbsd.org 2001/04/05 23:39:20
3350 [serverloop.c]
3351 keep the ssh session even if there is no active channel.
3352 this is more in line with the protocol spec and makes
3353 ssh -N -L 1234:server:110 host
3354 more useful.
3355 based on discussion with <mats@mindbright.se> long time ago
3356 and recent mail from <res@shore.net>
0fc791ba 3357 - deraadt@cvs.openbsd.org 2001/04/06 16:46:59
3358 [scp.c]
3359 remove trailing / from source paths; fixes pr#1756
68fa858a 3360
63f7e231 336120010406
3362 - (stevesk) logintest.c: fix for systems without __progname
72170131 3363 - (stevesk) Makefile.in: log.o is in libssh.a
d8a2f554 3364 - OpenBSD CVS Sync
3365 - markus@cvs.openbsd.org 2001/04/05 10:00:06
3366 [compat.c]
3367 2.3.x does old GEX, too; report jakob@
6ba22c93 3368 - markus@cvs.openbsd.org 2001/04/05 10:39:03
3369 [compress.c compress.h packet.c]
3370 reset compress state per direction when rekeying.
3667ba79 3371 - markus@cvs.openbsd.org 2001/04/05 10:39:48
3372 [version.h]
3373 temporary version 2.5.4 (supports rekeying).
3374 this is not an official release.
cd332296 3375 - markus@cvs.openbsd.org 2001/04/05 10:42:57
68fa858a 3376 [auth-chall.c authfd.c channels.c clientloop.c kex.c kexgex.c key.c
3377 mac.c packet.c serverloop.c sftp-client.c sftp-client.h sftp-glob.c
3378 sftp-glob.h sftp-int.c sftp-server.c sftp.c ssh-keygen.c sshconnect.c
cd332296 3379 sshconnect2.c sshd.c]
3380 fix whitespace: unexpand + trailing spaces.
255cfda1 3381 - markus@cvs.openbsd.org 2001/04/05 11:09:17
3382 [clientloop.c compat.c compat.h]
3383 add SSH_BUG_NOREKEY and detect broken (=all old) openssh versions.
b4a19d21 3384 - markus@cvs.openbsd.org 2001/04/05 15:45:43
3385 [ssh.1]
3386 ssh defaults to protocol v2; from quisar@quisar.ambre.net
46e3af7f 3387 - stevesk@cvs.openbsd.org 2001/04/05 15:48:18
3388 [canohost.c canohost.h session.c]
3389 move get_remote_name_or_ip() to canohost.[ch]; for portable. ok markus@
54506d2e 3390 - markus@cvs.openbsd.org 2001/04/05 20:01:10
3391 [clientloop.c]
3392 for ~R print message if server does not support rekeying. (and fix ~R).
b37caf1a 3393 - markus@cvs.openbsd.org 2001/04/05 21:02:46
3394 [buffer.c]
3395 better error message
eb0dd41f 3396 - markus@cvs.openbsd.org 2001/04/05 21:05:24
3397 [clientloop.c ssh.c]
3398 don't request a session for 'ssh -N', pointed out slade@shore.net
63f7e231 3399
d8ee838b 340020010405
68fa858a 3401 - OpenBSD CVS Sync
3402 - markus@cvs.openbsd.org 2001/04/04 09:48:35
d8ee838b 3403 [kex.c kex.h kexdh.c kexgex.c packet.c sshconnect2.c sshd.c]
68fa858a 3404 don't sent multiple kexinit-requests.
3405 send newkeys, block while waiting for newkeys.
3406 fix comments.
3407 - markus@cvs.openbsd.org 2001/04/04 14:34:58
3408 [clientloop.c kex.c kex.h serverloop.c sshconnect2.c sshd.c]
3409 enable server side rekeying + some rekey related clientup.
7a37c112 3410 todo: we should not send any non-KEX messages after we send KEXINIT
5adb303f 3411 - markus@cvs.openbsd.org 2001/04/04 15:50:55
3412 [compat.c]
3413 f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov
c422989b 3414 - markus@cvs.openbsd.org 2001/04/04 20:25:38
68fa858a 3415 [channels.c channels.h clientloop.c kex.c kex.h serverloop.c
c422989b 3416 sshconnect2.c sshd.c]
3417 more robust rekeying
3418 don't send channel data after rekeying is started.
0715ec6c 3419 - markus@cvs.openbsd.org 2001/04/04 20:32:56
3420 [auth2.c]
3421 we don't care about missing bannerfiles; from tsoome@ut.ee, ok deraadt@
bbb4cc1b 3422 - markus@cvs.openbsd.org 2001/04/04 22:04:35
3423 [kex.c kexgex.c serverloop.c]
3424 parse full kexinit packet.
3425 make server-side more robust, too.
a7ca6275 3426 - markus@cvs.openbsd.org 2001/04/04 23:09:18
3427 [dh.c kex.c packet.c]
3428 clear+free keys,iv for rekeying.
3429 + fix DH mem leaks. ok niels@
86c9e193 3430 - (stevesk) don't use vhangup() if defined(HAVE_DEV_PTMX); also removes
3431 BROKEN_VHANGUP
d8ee838b 3432
9d451c5a 343320010404
3434 - OpenBSD CVS Sync
3435 - deraadt@cvs.openbsd.org 2001/04/02 17:32:23
3436 [ssh-agent.1]
3437 grammar; slade@shore.net
894c5fa6 3438 - stevesk@cvs.openbsd.org 2001/04/03 13:56:11
3439 [sftp-glob.c ssh-agent.c ssh-keygen.c]
3440 free() -> xfree()
a5c9ffdb 3441 - markus@cvs.openbsd.org 2001/04/03 19:53:29
3442 [dh.c dh.h kex.c kex.h sshconnect2.c sshd.c]
3443 move kex to kex*.c, used dispatch_set() callbacks for kex. should
3444 make rekeying easier.
3463ff28 3445 - todd@cvs.openbsd.org 2001/04/03 21:19:38
3446 [ssh_config]
3447 id_rsa1/2 -> id_rsa; ok markus@
d1ac6175 3448 - markus@cvs.openbsd.org 2001/04/03 23:32:12
3449 [kex.c kex.h packet.c sshconnect2.c sshd.c]
3450 undo parts of recent my changes: main part of keyexchange does not
3451 need dispatch-callbacks, since application data is delayed until
3452 the keyexchange completes (if i understand the drafts correctly).
3453 add some infrastructure for re-keying.
e092ce67 3454 - markus@cvs.openbsd.org 2001/04/04 00:06:54
3455 [clientloop.c sshconnect2.c]
3456 enable client rekeying
3457 (1) force rekeying with ~R, or
3458 (2) if the server requests rekeying.
3459 works against ssh-2.0.12/2.0.13/2.1.0/2.2.0/2.3.0/2.3.1/2.4.0
0bc35151 3460 - (bal) Oops.. Missed including kexdh.c and kexgex.c in OpenBSD sync.
9d451c5a 3461
672f212f 346220010403
3463 - OpenBSD CVS Sync
3464 - stevesk@cvs.openbsd.org 2001/04/02 14:15:31
3465 [sshd.8]
3466 typo; ok markus@
6be9a5e8 3467 - stevesk@cvs.openbsd.org 2001/04/02 14:20:23
3468 [readconf.c servconf.c]
3469 correct comment; ok markus@
fe39c3df 3470 - (stevesk) nchan.c: remove ostate checks and add EINVAL to
3471 shutdown(SHUT_RD) error() bypass for HP-UX.
672f212f 3472
0be033ea 347320010402
3474 - (stevesk) log.c openbsd sync; missing newlines
5d9e4c8d 3475 - (stevesk) sshpty.h openbsd sync; PTY_H -> SSHPTY_H
0be033ea 3476
b7a2a476 347720010330
3478 - (djm) Another openbsd-compat/glob.c sync
4047d868 3479 - (djm) OpenBSD CVS Sync
3480 - provos@cvs.openbsd.org 2001/03/28 21:59:41
3481 [kex.c kex.h sshconnect2.c sshd.c]
3482 forgot to include min and max params in hash, okay markus@
c8682232 3483 - provos@cvs.openbsd.org 2001/03/28 22:04:57
3484 [dh.c]
3485 more sanity checking on primes file
d9cd3575 3486 - markus@cvs.openbsd.org 2001/03/28 22:43:31
3487 [auth.h auth2.c auth2-chall.c]
3488 check auth_root_allowed for kbd-int auth, too.
86b878d5 3489 - provos@cvs.openbsd.org 2001/03/29 14:24:59
3490 [sshconnect2.c]
3491 use recommended defaults
1ad64a93 3492 - stevesk@cvs.openbsd.org 2001/03/29 21:06:21
3493 [sshconnect2.c sshd.c]
3494 need to set both STOC and CTOS for SSH_BUG_BIGENDIANAES; ok markus@
03b8f8be 3495 - markus@cvs.openbsd.org 2001/03/29 21:17:40
3496 [dh.c dh.h kex.c kex.h]
3497 prepare for rekeying: move DH code to dh.c
76ca7b01 3498 - djm@cvs.openbsd.org 2001/03/29 23:42:01
3499 [sshd.c]
3500 Protocol 1 key regeneration log => verbose, some KNF; ok markus@
b7a2a476 3501
01ce749f 350220010329
3503 - OpenBSD CVS Sync
3504 - stevesk@cvs.openbsd.org 2001/03/26 15:47:59
3505 [ssh.1]
3506 document more defaults; misc. cleanup. ok markus@
569807fb 3507 - markus@cvs.openbsd.org 2001/03/26 23:12:42
3508 [authfile.c]
3509 KNF
457fc0c6 3510 - markus@cvs.openbsd.org 2001/03/26 23:23:24
3511 [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
3512 try to read private f-secure ssh v2 rsa keys.
1a92bd7e 3513 - markus@cvs.openbsd.org 2001/03/27 10:34:08
3514 [ssh-rsa.c sshd.c]
3515 use EVP_get_digestbynid, reorder some calls and fix missing free.
a4da628b 3516 - markus@cvs.openbsd.org 2001/03/27 10:57:00
3517 [compat.c compat.h ssh-rsa.c]
3518 some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5
3519 signatures in SSH protocol 2, ok djm@
db1cd2f3 3520 - provos@cvs.openbsd.org 2001/03/27 17:46:50
3521 [compat.c compat.h dh.c dh.h ssh2.h sshconnect2.c sshd.c version.h]
3522 make dh group exchange more flexible, allow min and max group size,
3523 okay markus@, deraadt@
e5ff6ecf 3524 - stevesk@cvs.openbsd.org 2001/03/28 19:56:23
3525 [scp.c]
3526 start to sync scp closer to rcp; ok markus@
03cb2621 3527 - stevesk@cvs.openbsd.org 2001/03/28 20:04:38
3528 [scp.c]
3529 usage more like rcp and add missing -B to usage; ok markus@
563834bb 3530 - markus@cvs.openbsd.org 2001/03/28 20:50:45
3531 [sshd.c]
3532 call refuse() before close(); from olemx@ans.pl
01ce749f 3533
b5b68128 353420010328
68fa858a 3535 - (djm) Reorder tests and library inclusion for Krb4/AFS to try to
3536 resolve linking conflicts with libcrypto. Report and suggested fix
b5b68128 3537 from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
edbe6722 3538 - (djm) Work around Solaris' broken struct dirent. Diagnosis and suggested
3539 fix from Philippe Levan <levan@epix.net>
cccfea16 3540 - (djm) Rework krbIV tests to get us closer to building on Redhat. Still
3541 doesn't work because of conflicts between krbIV's and OpenSSL's des.h
8d0cc79b 3542 - (djm) Sync openbsd-compat/glob.c
b5b68128 3543
0c90b590 354420010327
3545 - Attempt sync with sshlogin.c w/ OpenBSD (mainly CVS ID)
68fa858a 3546 - Fix pointer issues in waitpid() and wait() replaces. Patch by Lutz
60a8683f 3547 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
690d0d7f 3548 - OpenBSD CVS Sync
3549 - djm@cvs.openbsd.org 2001/03/25 00:01:34
3550 [session.c]
3551 shorten; ok markus@
4f4648f9 3552 - stevesk@cvs.openbsd.org 2001/03/25 13:16:11
3553 [servconf.c servconf.h session.c sshd.8 sshd_config]
3554 PrintLastLog option; from chip@valinux.com with some minor
3555 changes by me. ok markus@
9afbfcfa 3556 - markus@cvs.openbsd.org 2001/03/26 08:07:09
68fa858a 3557 [authfile.c authfile.h ssh-add.c ssh-keygen.c ssh.c sshconnect.c
9afbfcfa 3558 sshconnect.h sshconnect1.c sshconnect2.c sshd.c]
3559 simpler key load/save interface, see authfile.h
68fa858a 3560 - (djm) Reestablish PAM credentials (which can be supplemental group
9afbfcfa 3561 memberships) after initgroups() blows them away. Report and suggested
3562 fix from Nalin Dahyabhai <nalin@redhat.com>
0c90b590 3563
b567a40c 356420010324
3565 - Fixed permissions ssh-keyscan. Thanks to Christopher Linn <celinn@mtu.edu>.
80cd07ae 3566 - OpenBSD CVS Sync
3567 - djm@cvs.openbsd.org 2001/03/23 11:04:07
3568 [compat.c compat.h sshconnect2.c sshd.c]
3569 Compat for OpenSSH with broken Rijndael/AES. ok markus@
7af9f7f8 3570 - markus@cvs.openbsd.org 2001/03/23 12:02:49
3571 [auth1.c]
3572 authctxt is now passed to do_authenticated
e285053e 3573 - markus@cvs.openbsd.org 2001/03/23 13:10:57
3574 [sftp-int.c]
3575 fix put, upload to _absolute_ path, ok djm@
1d3c30db 3576 - markus@cvs.openbsd.org 2001/03/23 14:28:32
3577 [session.c sshd.c]
3578 ignore SIGPIPE, restore in child, fixes x11-fwd crashes; with djm@
8ca3f6dc 3579 - (djm) Pull out our own SIGPIPE hacks
b567a40c 3580
8a169574 358120010323
68fa858a 3582 - OpenBSD CVS Sync
8a169574 3583 - deraadt@cvs.openbsd.org 2001/03/22 20:22:55
68fa858a 3584 [sshd.c]
3585 do not place linefeeds in buffer
8a169574 3586
ee110bfb 358720010322
3588 - (djm) Better AIX no tty fix, spotted by Gert Doering <gert@greenie.muc.de>
289ba62e 3589 - (bal) version.c CVS ID resync
a5b09902 3590 - (bal) auth-chall.c auth-passwd.c auth.h auth1.c auth2.c session.c CVS ID
3591 resync
ae7242ef 3592 - (bal) scp.c CVS ID resync
3e587cc3 3593 - OpenBSD CVS Sync
3594 - markus@cvs.openbsd.org 2001/03/20 19:10:16
3595 [readconf.c]
3596 default to SSH protocol version 2
e5d7a405 3597 - markus@cvs.openbsd.org 2001/03/20 19:21:21
3598 [session.c]
3599 remove unused arg
39f7530f 3600 - markus@cvs.openbsd.org 2001/03/20 19:21:21
3601 [session.c]
3602 remove unused arg
bb5639fe 3603 - markus@cvs.openbsd.org 2001/03/21 11:43:45
3604 [auth1.c auth2.c session.c session.h]
3605 merge common ssh v1/2 code
5e7cb456 3606 - jakob@cvs.openbsd.org 2001/03/21 14:20:45
3607 [ssh-keygen.c]
3608 add -B flag to usage
ca4df544 3609 - markus@cvs.openbsd.org 2001/03/21 21:06:30
3610 [session.c]
3611 missing init; from mib@unimelb.edu.au
ee110bfb 3612
f5f6020e 361320010321
68fa858a 3614 - (djm) Fix ttyname breakage for AIX and Tru64. Patch from Steve
f5f6020e 3615 VanDevender <stevev@darkwing.uoregon.edu>
37eadb90 3616 - (djm) Make sure pam_retval is initialised on call to pam_end. Patch
3617 from Solar Designer <solar@openwall.com>
0a3700ee 3618 - (djm) Don't loop forever when changing password via PAM. Patch
3619 from Solar Designer <solar@openwall.com>
0c13ffa2 3620 - (djm) Generate config files before build
7a7101ec 3621 - (djm) Correctly handle SIA and AIX when no tty present. Spotted and
3622 suggested fix from Mike Battersby <mib@unimelb.edu.au>
f5f6020e 3623
8d539493 362420010320
01022caf 3625 - (bal) glob.c update to added GLOB_LIMITS (OpenBSD CVS).
3626 - (bal) glob.c update to set gl_pathv to NULL (OpenBSD CVS).
1620233b 3627 - (bal) Oops. Missed globc.h change (OpenBSD CVS).
614dee3a 3628 - (djm) OpenBSD CVS Sync
3629 - markus@cvs.openbsd.org 2001/03/19 17:07:23
3630 [auth.c readconf.c]
3631 undo /etc/shell and proto 2,1 change for openssh-2.5.2
3dd16786 3632 - markus@cvs.openbsd.org 2001/03/19 17:12:10
3633 [version.h]
3634 version 2.5.2
ea44783f 3635 - (djm) Update RPM spec version
3636 - (djm) Release 2.5.2p1
3743cc2f 3637- tim@mindrot.org 2001/03/19 18:33:47 [defines.h]
3638 change S_ISLNK macro to work for UnixWare 2.03
9887f269 3639- tim@mindrot.org 2001/03/19 20:45:11 [openbsd-compat/glob.c]
3640 add get_arg_max(). Use sysconf() if ARG_MAX is not defined
8d539493 3641
e339aa53 364220010319
68fa858a 3643 - (djm) Seed PRNG at startup, rather than waiting for arc4random calls to
e339aa53 3644 do it implicitly.
7cdb79d4 3645 - (djm) Add getusershell() functions from OpenBSD CVS
b1ed8313 3646 - OpenBSD CVS Sync
3647 - markus@cvs.openbsd.org 2001/03/18 12:07:52
3648 [auth-options.c]
3649 ignore permitopen="host:port" if AllowTcpForwarding==no
f8f230bf 3650 - (djm) Make scp work on systems without 64-bit ints
2538ecf1 3651 - tim@mindrot.org 2001/03/18 18:28:39 [defines.h]
3652 move HAVE_LONG_LONG_INT where it works
d1581d5f 3653 - (bal) Use 'NGROUPS' for NeXT Since 'MAX_NGROUPS' is wrapped up in -lposix
107628c0 3654 stuff. Change suggested by Mark Miller <markm@swoon.net>
d1581d5f 3655 - (bal) Small fix to scp. %lu vs %ld
68fa858a 3656 - (bal) NeXTStep lacks S_ISLNK. Plus split up S_IS*
bb6da70f 3657 - (djm) OpenBSD CVS Sync
3658 - djm@cvs.openbsd.org 2001/03/19 03:52:51
3659 [sftp-client.c]
3660 Report ssh connection closing correctly; ok deraadt@
3a1c54d4 3661 - deraadt@cvs.openbsd.org 2001/03/18 23:30:55
3662 [compat.c compat.h sshd.c]
68fa858a 3663 specifically version match on ssh scanners. do not log scan
3a1c54d4 3664 information to the console
dc504afd 3665 - djm@cvs.openbsd.org 2001/03/19 12:10:17
db4d3098 3666 [sshd.8]
dc504afd 3667 Document permitopen authorized_keys option; ok markus@
babd91d4 3668 - djm@cvs.openbsd.org 2001/03/19 05:49:52
3669 [ssh.1]
3670 document PreferredAuthentications option; ok markus@
05c64611 3671 - (bal) Minor NeXT fixed. Forgot to #undef NGROUPS_MAX
e339aa53 3672
ec0ad9c2 367320010318
68fa858a 3674 - (bal) Fixed scp type casing issue which causes "scp: protocol error:
ec0ad9c2 3675 size not delimited" fatal errors when tranfering.
5cc8d4ad 3676 - OpenBSD CVS Sync
3677 - markus@cvs.openbsd.org 2001/03/17 17:27:59
3678 [auth.c]
3679 check /etc/shells, too
7411201c 3680 - tim@mindrot.org 2001/03/17 18:45:25 [compat.c]
3681 openbsd-compat/fake-regex.h
ec0ad9c2 3682
8a968c25 368320010317
68fa858a 3684 - Support usrinfo() on AIX. Based on patch from Gert Doering
8a968c25 3685 <gert@greenie.muc.de>
bf1d27bd 3686 - OpenBSD CVS Sync
3687 - markus@cvs.openbsd.org 2001/03/15 15:05:59
3688 [scp.c]
3689 use %lld in printf, ok millert@/deraadt@; report from ssh@client.fi
56b3e9ce 3690 - markus@cvs.openbsd.org 2001/03/15 22:07:08
3691 [session.c]
3692 pass Session to do_child + KNF
d50d9b63 3693 - djm@cvs.openbsd.org 2001/03/16 08:16:18
3694 [sftp-client.c sftp-client.h sftp-glob.c sftp-int.c]
3695 Revise globbing for get/put to be more shell-like. In particular,
3696 "get/put file* directory/" now works. ok markus@
f55d1b5f 3697 - markus@cvs.openbsd.org 2001/03/16 09:55:53
3698 [sftp-int.c]
3699 fix memset and whitespace
6a8496e4 3700 - markus@cvs.openbsd.org 2001/03/16 13:44:24
3701 [sftp-int.c]
3702 discourage strcat/strcpy
01794848 3703 - markus@cvs.openbsd.org 2001/03/16 19:06:30
3704 [auth-options.c channels.c channels.h serverloop.c session.c]
3705 implement "permitopen" key option, restricts -L style forwarding to
3706 to specified host:port pairs. based on work by harlan@genua.de
68fa858a 3707 - Check for gl_matchc support in glob_t and fall back to the
40849fdb 3708 openbsd-compat/glob.[ch] support if it does not exist.
8a968c25 3709
4cb5d598 371020010315
3711 - OpenBSD CVS Sync
3712 - markus@cvs.openbsd.org 2001/03/14 08:57:14
3713 [sftp-client.c]
3714 Wall
85cf5827 3715 - markus@cvs.openbsd.org 2001/03/14 15:15:58
3716 [sftp-int.c]
3717 add version command
61b3a2bc 3718 - deraadt@cvs.openbsd.org 2001/03/14 22:50:25
3719 [sftp-server.c]
3720 note no getopt()
51e2fc8f 3721 - (stevesk) ssh-keyscan.c: specify "openbsd-compat/fake-queue.h"
68fa858a 3722 - (bal) Cygwin README change by Corinna Vinschen <vinschen@redhat.com>
4cb5d598 3723
acc9d6d7 372420010314
3725 - OpenBSD CVS Sync
85cf5827 3726 - markus@cvs.openbsd.org 2001/03/13 17:34:42
3727 [auth-options.c]
3728 missing xfree, deny key on parse error; ok stevesk@
3729 - djm@cvs.openbsd.org 2001/03/13 22:42:54
3730 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c]
3731 sftp client filename globbing for get, put, ch{mod,grp,own}. ok markus@
84ceda19 3732 - (bal) Fix strerror() in bsd-misc.c
3733 - (djm) Add replacement glob() from OpenBSD libc if the system glob is
3734 missing or lacks the GLOB_ALTDIRFUNC extension
68fa858a 3735 - (djm) Remove -I$(srcdir)/openbsd-compat from CFLAGS, refer to headers
84ceda19 3736 relatively. Avoids conflict between glob.h and /usr/include/glob.h
acc9d6d7 3737
22138a36 373820010313
3739 - OpenBSD CVS Sync
3740 - markus@cvs.openbsd.org 2001/03/12 22:02:02
3741 [key.c key.h ssh-add.c ssh-keygen.c sshconnect.c sshconnect2.c]
3742 remove old key_fingerprint interface, s/_ex//
3743
539af7f5 374420010312
3745 - OpenBSD CVS Sync
3746 - markus@cvs.openbsd.org 2001/03/11 13:25:36
3747 [auth2.c key.c]
3748 debug
301e8e5b 3749 - jakob@cvs.openbsd.org 2001/03/11 15:03:16
3750 [key.c key.h]
3751 add improved fingerprint functions. based on work by Carsten
3752 Raskgaard <cara@int.tele.dk> and modified by me. ok markus@.
954f0550 3753 - jakob@cvs.openbsd.org 2001/03/11 15:04:16
3754 [ssh-keygen.1 ssh-keygen.c]
3755 print both md5, sha1 and bubblebabble fingerprints when using
3756 ssh-keygen -l -v. ok markus@.
08345971 3757 - jakob@cvs.openbsd.org 2001/03/11 15:13:09
3758 [key.c]
3759 cleanup & shorten some var names key_fingerprint_bubblebabble.
64b1aa3b 3760 - deraadt@cvs.openbsd.org 2001/03/11 16:39:03
3761 [ssh-keygen.c]
3762 KNF, and SHA1 binary output is just creeping featurism
733cf7f4 3763 - tim@mindrot.org 2001/03/11 17:29:32 [configure.in]
3764 test if snprintf() supports %ll
3765 add /dev to search path for PRNGD/EGD socket
3766 fix my mistake in USER_PATH test program
79c9ac1b 3767 - OpenBSD CVS Sync
3768 - markus@cvs.openbsd.org 2001/03/11 18:29:51
3769 [key.c]
3770 style+cleanup
aaf45d87 3771 - markus@cvs.openbsd.org 2001/03/11 22:33:24
3772 [ssh-keygen.1 ssh-keygen.c]
3773 remove -v again. use -B instead for bubblebabble. make -B consistent
3774 with -l and make -B work with /path/to/known_hosts. ok deraadt@
a0322342 3775 - (djm) Bump portable version number for generating test RPMs
94dd09e3 3776 - (djm) Add "static_openssl" RPM build option, remove rsh build dependency
68fa858a 3777 - (bal) Reorder includes in Makefile.
539af7f5 3778
d156519a 377920010311
3780 - OpenBSD CVS Sync
3781 - markus@cvs.openbsd.org 2001/03/10 12:48:27
3782 [sshconnect2.c]
3783 ignore nonexisting private keys; report rjmooney@mediaone.net
5e36d59c 3784 - deraadt@cvs.openbsd.org 2001/03/10 12:53:51
3785 [readconf.c ssh_config]
3786 default to SSH2, now that m68k runs fast
2f778758 3787 - stevesk@cvs.openbsd.org 2001/03/10 15:02:05
3788 [ttymodes.c ttymodes.h]
3789 remove unused sgtty macros; ok markus@
99c415db 3790 - deraadt@cvs.openbsd.org 2001/03/10 15:31:00
3791 [compat.c compat.h sshconnect.c]
3792 all known netscreen ssh versions, and older versions of OSU ssh cannot
3793 handle password padding (newer OSU is fixed)
456fce50 3794 - tim@mindrot.org 2001/03/10 16:33:42 [configure.in Makefile.in sshd_config]
3795 make sure $bindir is in USER_PATH so scp will work
cab80f75 3796 - OpenBSD CVS Sync
3797 - markus@cvs.openbsd.org 2001/03/10 17:51:04
3798 [kex.c match.c match.h readconf.c readconf.h sshconnect2.c]
3799 add PreferredAuthentications
d156519a 3800
1c9a907f 380120010310
3802 - OpenBSD CVS Sync
3803 - deraadt@cvs.openbsd.org 2001/03/09 03:14:39
3804 [ssh-keygen.c]
68fa858a 3805 create *.pub files with umask 0644, so that you can mv them to
1c9a907f 3806 authorized_keys
cb7bd922 3807 - deraadt@cvs.openbsd.org 2001/03/09 12:30:29
3808 [sshd.c]
3809 typo; slade@shore.net
61cf0e38 3810 - Removed log.o from sftp client. Not needed.
1c9a907f 3811
385590e4 381220010309
3813 - OpenBSD CVS Sync
3814 - stevesk@cvs.openbsd.org 2001/03/08 18:47:12
3815 [auth1.c]
3816 unused; ok markus@
acf06a60 3817 - stevesk@cvs.openbsd.org 2001/03/08 20:44:48
3818 [sftp.1]
3819 spelling, cleanup; ok deraadt@
fee56204 3820 - markus@cvs.openbsd.org 2001/03/08 21:42:33
3821 [compat.c compat.h readconf.h ssh.c sshconnect1.c sshconnect2.c]
3822 implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->
3823 no need to do enter passphrase or do expensive sign operations if the
3824 server does not accept key).
385590e4 3825
3a7fe5ba 382620010308
3827 - OpenBSD CVS Sync
d5ebca2b 3828 - djm@cvs.openbsd.org 2001/03/07 10:11:23
3829 [sftp-client.c sftp-client.h sftp-int.c sftp-server.c sftp.1 sftp.c sftp.h]
3830 Support for new draft (draft-ietf-secsh-filexfer-01). New symlink handling
3831 functions and small protocol change.
3832 - markus@cvs.openbsd.org 2001/03/08 00:15:48
3833 [readconf.c ssh.1]
3834 turn off useprivilegedports by default. only rhost-auth needs
3835 this. older sshd's may need this, too.
097ca118 3836 - (stevesk) Reliant Unix (SNI) needs HAVE_BOGUS_SYS_QUEUE_H;
3837 Dirk Markwardt <D.Markwardt@tu-bs.de>
3a7fe5ba 3838
3251b439 383920010307
3840 - (bal) OpenBSD CVS Sync
3841 - deraadt@cvs.openbsd.org 2001/03/06 06:11:18
3842 [ssh-keyscan.c]
3843 appease gcc
a5ec8a3d 3844 - deraadt@cvs.openbsd.org 2001/03/06 06:11:44
3845 [sftp-int.c sftp.1 sftp.c]
3846 sftp -b batchfile; mouring@etoh.eviladmin.org
17910dce 3847 - deraadt@cvs.openbsd.org 2001/03/06 15:10:42
3848 [sftp.1]
3849 order things
2c86906e 3850 - deraadt@cvs.openbsd.org 2001/03/07 01:19:06
3851 [ssh.1 sshd.8]
3852 the name "secure shell" is boring, noone ever uses it
7daf8515 3853 - deraadt@cvs.openbsd.org 2001/03/07 04:05:58
3854 [ssh.1]
3855 removed dated comment
f52798a4 3856 - Cygwin contrib improvements from Corinna Vinschen <vinschen@redhat.com>
3251b439 3857
657297ff 385820010306
3859 - (bal) OpenBSD CVS Sync
3860 - deraadt@cvs.openbsd.org 2001/03/05 14:28:47
3861 [sshd.8]
3862 alpha order; jcs@rt.fm
7c8f2a26 3863 - stevesk@cvs.openbsd.org 2001/03/05 15:44:51
3864 [servconf.c]
3865 sync error message; ok markus@
f2ba0775 3866 - deraadt@cvs.openbsd.org 2001/03/05 15:56:16
3867 [myproposal.h ssh.1]
3868 switch to aes128-cbc/hmac-md5 by default in SSH2 -- faster;
3869 provos & markus ok
7a6c39a3 3870 - deraadt@cvs.openbsd.org 2001/03/05 16:07:15
3871 [sshd.8]
3872 detail default hmac setup too
7de5b06b 3873 - markus@cvs.openbsd.org 2001/03/05 17:17:21
3874 [kex.c kex.h sshconnect2.c sshd.c]
3875 generate a 2*need size (~300 instead of 1024/2048) random private
3876 exponent during the DH key agreement. according to Niels (the great
3877 german advisor) this is safe since /etc/primes contains strong
3878 primes only.
3879
3880 References:
3881 P. C. van Oorschot and M. J. Wiener, On Diffie-Hellman key
3882 agreement with short exponents, In Advances in Cryptology
3883 - EUROCRYPT'96, LNCS 1070, Springer-Verlag, 1996, pp.332-343.
a5df12e9 3884 - stevesk@cvs.openbsd.org 2001/03/05 17:40:48
3885 [ssh.1]
3886 more ssh_known_hosts2 documentation; ok markus@
0b2190ee 3887 - stevesk@cvs.openbsd.org 2001/03/05 17:58:22
3888 [dh.c]
3889 spelling
bbc62e59 3890 - deraadt@cvs.openbsd.org 2001/03/06 00:33:04
3891 [authfd.c cli.c ssh-agent.c]
3892 EINTR/EAGAIN handling is required in more cases
c16c7f20 3893 - millert@cvs.openbsd.org 2001/03/06 01:06:03
3894 [ssh-keyscan.c]
3895 Don't assume we wil get the version string all in one read().
3896 deraadt@ OK'd
09cb311c 3897 - millert@cvs.openbsd.org 2001/03/06 01:08:27
3898 [clientloop.c]
3899 If read() fails with EINTR deal with it the same way we treat EAGAIN
657297ff 3900
1a2936c4 390120010305
3902 - (bal) CVS ID touch up on sshpty.[ch] and sshlogin.[ch]
68fa858a 3903 - (bal) CVS ID touch up on sftp-int.c
e77df335 3904 - (bal) CVS ID touch up on uuencode.c
6cca9fde 3905 - (bal) CVS ID touch up on auth2.c, serverloop.c, session.c & sshd.c
778f6940 3906 - (bal) OpenBSD CVS Sync
dcb971e1 3907 - deraadt@cvs.openbsd.org 2001/02/17 23:48:48
3908 [sshd.8]
3909 it's the OpenSSH one
778f6940 3910 - deraadt@cvs.openbsd.org 2001/02/21 07:37:04
3911 [ssh-keyscan.c]
3912 inline -> __inline__, and some indent
81333640 3913 - deraadt@cvs.openbsd.org 2001/02/21 09:05:54
3914 [authfile.c]
3915 improve fd handling
79ddf6db 3916 - deraadt@cvs.openbsd.org 2001/02/21 09:12:56
3917 [sftp-server.c]
3918 careful with & and &&; markus ok
96ee8386 3919 - stevesk@cvs.openbsd.org 2001/02/21 21:14:04
3920 [ssh.c]
3921 -i supports DSA identities now; ok markus@
0c126dc9 3922 - deraadt@cvs.openbsd.org 2001/02/22 04:29:37
3923 [servconf.c]
3924 grammar; slade@shore.net
ed2166d8 3925 - deraadt@cvs.openbsd.org 2001/02/22 06:43:55
3926 [ssh-keygen.1 ssh-keygen.c]
3927 document -d, and -t defaults to rsa1
b07ae1e9 3928 - deraadt@cvs.openbsd.org 2001/02/22 08:03:51
3929 [ssh-keygen.1 ssh-keygen.c]
3930 bye bye -d
e2fccec3 3931 - deraadt@cvs.openbsd.org 2001/02/22 18:09:06
3932 [sshd_config]
3933 activate RSA 2 key
e91c60f2 3934 - markus@cvs.openbsd.org 2001/02/22 21:57:27
3935 [ssh.1 sshd.8]
3936 typos/grammar from matt@anzen.com
3b1a83df 3937 - markus@cvs.openbsd.org 2001/02/22 21:59:44
3938 [auth.c auth.h auth1.c auth2.c misc.c misc.h ssh.c]
3939 use pwcopy in ssh.c, too
19d57054 3940 - markus@cvs.openbsd.org 2001/02/23 15:34:53
3941 [serverloop.c]
3942 debug2->3
00be5382 3943 - markus@cvs.openbsd.org 2001/02/23 18:15:13
3944 [sshd.c]
3945 the random session key depends now on the session_key_int
3946 sent by the 'attacker'
3947 dig1 = md5(cookie|session_key_int);
3948 dig2 = md5(dig1|cookie|session_key_int);
3949 fake_session_key = dig1|dig2;
3950 this change is caused by a mail from anakin@pobox.com
3951 patch based on discussions with my german advisor niels@openbsd.org
ec63b02d 3952 - deraadt@cvs.openbsd.org 2001/02/24 10:37:55
3953 [readconf.c]
3954 look for id_rsa by default, before id_dsa
582038fb 3955 - deraadt@cvs.openbsd.org 2001/02/24 10:37:26
3956 [sshd_config]
3957 ssh2 rsa key before dsa key
6e18cb71 3958 - markus@cvs.openbsd.org 2001/02/27 10:35:27
3959 [packet.c]
3960 fix random padding
1b5dfeb2 3961 - markus@cvs.openbsd.org 2001/02/27 11:00:11
3962 [compat.c]
3963 support SSH-2.0-2.1 ; from Christophe_Moret@hp.com
4ab21f86 3964 - deraadt@cvs.openbsd.org 2001/02/28 05:34:28
3965 [misc.c]
3966 pull in protos
167b3512 3967 - deraadt@cvs.openbsd.org 2001/02/28 05:36:28
3968 [sftp.c]
3969 do not kill the subprocess on termination (we will see if this helps
3970 things or hurts things)
7e8911cd 3971 - markus@cvs.openbsd.org 2001/02/28 08:45:39
3972 [clientloop.c]
3973 fix byte counts for ssh protocol v1
ee55dacf 3974 - markus@cvs.openbsd.org 2001/02/28 08:54:55
3975 [channels.c nchan.c nchan.h]
3976 make sure remote stderr does not get truncated.
3977 remove closed fd's from the select mask.
a6215e53 3978 - markus@cvs.openbsd.org 2001/02/28 09:57:07
3979 [packet.c packet.h sshconnect2.c]
3980 in ssh protocol v2 use ignore messages for padding (instead of
3981 trailing \0).
94dfb550 3982 - markus@cvs.openbsd.org 2001/02/28 12:55:07
3983 [channels.c]
3984 unify debug messages
5649fbbe 3985 - deraadt@cvs.openbsd.org 2001/02/28 17:52:54
3986 [misc.c]
3987 for completeness, copy pw_gecos too
0572fe75 3988 - markus@cvs.openbsd.org 2001/02/28 21:21:41
3989 [sshd.c]
3990 generate a fake session id, too
95ce5599 3991 - markus@cvs.openbsd.org 2001/02/28 21:27:48
3992 [channels.c packet.c packet.h serverloop.c]
3993 use ignore message to simulate a SSH2_MSG_CHANNEL_DATA message
3994 use random content in ignore messages.
355724fc 3995 - markus@cvs.openbsd.org 2001/02/28 21:31:32
3996 [channels.c]
3997 typo
c3f7d267 3998 - deraadt@cvs.openbsd.org 2001/03/01 02:11:25
3999 [authfd.c]
4000 split line so that p will have an easier time next time around
a01a5f30 4001 - deraadt@cvs.openbsd.org 2001/03/01 02:29:04
4002 [ssh.c]
4003 shorten usage by a line
12bf85ed 4004 - deraadt@cvs.openbsd.org 2001/03/01 02:45:10
4005 [auth-rsa.c auth2.c deattack.c packet.c]
4006 KNF
4371658c 4007 - deraadt@cvs.openbsd.org 2001/03/01 03:38:33
4008 [cli.c cli.h rijndael.h ssh-keyscan.1]
4009 copyright notices on all source files
ce91d6f8 4010 - markus@cvs.openbsd.org 2001/03/01 22:46:37
4011 [ssh.c]
4012 don't truncate remote ssh-2 commands; from mkubita@securities.cz
4013 use min, not max for logging, fixes overflow.
409edaba 4014 - deraadt@cvs.openbsd.org 2001/03/02 06:21:01
4015 [sshd.8]
4016 explain SIGHUP better
b8dc87d3 4017 - deraadt@cvs.openbsd.org 2001/03/02 09:42:49
4018 [sshd.8]
4019 doc the dsa/rsa key pair files
f3c7c613 4020 - deraadt@cvs.openbsd.org 2001/03/02 18:54:31
4021 [atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h
4022 scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c
4023 ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8]
4024 make copyright lines the same format
2671b47f 4025 - deraadt@cvs.openbsd.org 2001/03/03 06:53:12
4026 [ssh-keyscan.c]
4027 standard theo sweep
ff7fee59 4028 - millert@cvs.openbsd.org 2001/03/03 21:19:41
4029 [ssh-keyscan.c]
4030 Dynamically allocate read_wait and its copies. Since maxfd is
4031 based on resource limits it is often (usually?) larger than FD_SETSIZE.
c8d75031 4032 - millert@cvs.openbsd.org 2001/03/03 21:40:30
4033 [sftp-server.c]
4034 Dynamically allocate fd_set; deraadt@ OK
20e04e90 4035 - millert@cvs.openbsd.org 2001/03/03 21:41:07
4036 [packet.c]
4037 Dynamically allocate fd_set; deraadt@ OK
dce9bac5 4038 - deraadt@cvs.openbsd.org 2001/03/03 22:07:50
4039 [sftp-server.c]
4040 KNF
c630ce76 4041 - markus@cvs.openbsd.org 2001/03/03 23:52:22
4042 [sftp.c]
4043 clean up arg processing. based on work by Christophe_Moret@hp.com
20244695 4044 - markus@cvs.openbsd.org 2001/03/03 23:59:34
4045 [log.c ssh.c]
4046 log*.c -> log.c
61f8a1d1 4047 - markus@cvs.openbsd.org 2001/03/04 00:03:59
4048 [channels.c]
4049 debug1->2
38967add 4050 - stevesk@cvs.openbsd.org 2001/03/04 10:57:53
4051 [ssh.c]
4052 add -m to usage; ok markus@
46f23b8d 4053 - stevesk@cvs.openbsd.org 2001/03/04 11:04:41
4054 [sshd.8]
4055 small cleanup and clarify for PermitRootLogin; ok markus@
9c81df4c 4056 - stevesk@cvs.openbsd.org 2001/03/04 11:16:06
4057 [servconf.c sshd.8]
4058 kill obsolete RandomSeed; ok markus@ deraadt@
f5429434 4059 - stevesk@cvs.openbsd.org 2001/03/04 12:54:04
4060 [sshd.8]
4061 spelling
54b974dc 4062 - millert@cvs.openbsd.org 2001/03/04 17:42:28
4063 [authfd.c channels.c dh.c log.c readconf.c servconf.c sftp-int.c
4064 ssh.c sshconnect.c sshd.c]
4065 log functions should not be passed strings that end in newline as they
4066 get passed on to syslog() and when logging to stderr, do_log() appends
4067 its own newline.
51c251f0 4068 - deraadt@cvs.openbsd.org 2001/03/04 18:21:28
4069 [sshd.8]
4070 list SSH2 ciphers
2605addd 4071 - (bal) Put HAVE_PW_CLASS_IN_PASSWD back into pwcopy()
164c80dc 4072 - (bal) Fix up logging since it changed. removed log-*.c
cc3067d6 4073 - (djm) Fix up LOG_AUTHPRIV for systems that have it
70a052c7 4074 - (stevesk) OpenBSD sync:
4075 - deraadt@cvs.openbsd.org 2001/03/05 08:37:27
4076 [ssh-keyscan.c]
4077 skip inlining, why bother
5152d46f 4078 - (stevesk) sftp.c: handle __progname
1a2936c4 4079
40edd7ef 408020010304
4081 - (bal) Remove make-ssh-known-hosts.1 since it's no longer valid.
889fbcd3 4082 - (bal) Updated contrib/README to remove 'make-ssh-known-hosts' and
4083 give Mark Roth credit for mdoc2man.pl
40edd7ef 4084
9817de5f 408520010303
40edd7ef 4086 - (djm) Remove make-ssh-known-hosts.pl, ssh-keyscan is better.
4087 - (djm) Document PAM ChallengeResponseAuthentication in sshd.8
4088 - (djm) Disable and comment ChallengeResponseAuthentication in sshd_config
4089 - (djm) Allow PRNGd entropy collection from localhost TCP socket. Replace
68fa858a 4090 "--with-egd-pool" configure option with "--with-prngd-socket" and
9bdd5929 4091 "--with-prngd-port" options. Debugged and improved by Lutz Jaenicke
4092 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
9817de5f 4093
20cad736 409420010301
68fa858a 4095 - (djm) Properly add -lcrypt if needed.
5f404be3 4096 - (djm) Force standard PAM conversation function in a few more places.
68fa858a 4097 Patch from Redhat 2.5.1p1-2 RPM, probably Nalin Dahyabhai
5f404be3 4098 <nalin@redhat.com>
68fa858a 4099 - (djm) Cygwin needs pw->pw_gecos copied too. Patch from Corinna Vinschen
480eb294 4100 <vinschen@redhat.com>
ad1f4a20 4101 - (djm) Released 2.5.1p2
20cad736 4102
cf0c5df5 410320010228
4104 - (djm) Detect endianness in configure and use it in rijndael.c. Fixes
4105 "Bad packet length" bugs.
68fa858a 4106 - (djm) Fully revert PAM session patch (again). All PAM session init is
403f5a8e 4107 now done before the final fork().
065ef9b1 4108 - (djm) EGD detection patch from Tim Rice <tim@multitalents.net>
d9b1f19a 4109 - (djm) Remove /tmp from EGD socket search list
cf0c5df5 4110
86b416a7 411120010227
68fa858a 4112 - (bal) Applied shutdown() patch for sftp.c by Corinna Vinschen
51fb577a 4113 <vinschen@redhat.com>
2af09193 4114 - (bal) OpenBSD Sync
4115 - markus@cvs.openbsd.org 2001/02/23 15:37:45
4116 [session.c]
4117 handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
68fa858a 4118 - (bal) sshd.init support for all Redhat release. Patch by Jim Knoble
a892c46e 4119 <jmknoble@jmknoble.cx>
68fa858a 4120 - (djm) Fix up POSIX saved uid support. Report from Mark Miller
f4e9a0e1 4121 <markm@swoon.net>
4122 - (djm) Search for -lcrypt on FreeBSD too
c7c72446 4123 - (djm) fatal() on OpenSSL version mismatch
27cf96de 4124 - (djm) Move PAM init to after fork for non-Solaris derived PAMs
d5c4c52e 4125 - (djm) Warning fix on entropy.c saved uid stuff. Patch from Mark Miller
4126 <markm@swoon.net>
4bc6dd70 4127 - (djm) Fix PAM fix
4236bde4 4128 - (djm) Remove 'noreplace' flag from sshd_config in RPM spec files. This
4129 change is being made as 2.5.x configfiles are not back-compatible with
64e0e67e 4130 2.3.x.
4131 - (djm) Avoid warnings for missing broken IP_TOS. Patch from Mark Miller
4132 <markm@swoon.net>
68fa858a 4133 - (djm) Open Server 5 doesn't need BROKEN_SAVED_UIDS. Patch from Tim Rice
a29d3f1c 4134 <tim@multitalents.net>
68fa858a 4135 - (djm) Avoid multiple definition of _PATH_LS. Patch from Tim Rice
a29d3f1c 4136 <tim@multitalents.net>
51fb577a 4137
4925395f 413820010226
4139 - (bal) Fixed bsd-snprinf.c so it now honors 'BROKEN_SNPRINTF' again.
68fa858a 4140 - (djm) Some systems (SCO3, NeXT) have weird saved uid semantics.
e9a13ac1 4141 Based on patch from Tim Rice <tim@multitalents.net>
4925395f 4142
1eb4ec64 414320010225
4144 - (djm) Use %{_libexecdir} rather than hardcoded path in RPM specfile
4145 Patch from Adrian Ho <lexfiend@usa.net>
490cad94 4146 - (bal) Replace 'unsigned long long' to 'u_int64_t' since not every
4147 platform defines u_int64_t as being that.
1eb4ec64 4148
a738c3b0 414920010224
68fa858a 4150 - (bal) Missed part of the UNIX sockets patch. Patch by Corinna
a738c3b0 4151 Vinschen <vinschen@redhat.com>
4152 - (bal) Reorder where 'strftime' is detected to resolve linking
4153 issues on SCO. Patch by Tim Rice <tim@multitalents.net>
4154
8fd97cc4 415520010224
4156 - (bal) pam_stack fix to correctly detect between RH7 and older RHs.
4157 Patch by Pekka Savola <pekkas@netcore.fi>
8f0b3553 4158 - (bal) Renamed sigaction.[ch] to sigact.[ch]. Causes problems with
4159 some platforms.
3d114925 4160 - (bal) Generalize lack of UNIX sockets since this also effects Cray
4161 not just Cygwin. Based on patch by Wendy Palm <wendyp@cray.com>
8fd97cc4 4162
14a49e44 416320010223
4164 - (bal) Fix --define rh7 in openssh.spec file. Patch by Steve Tell
4165 <tell@telltronics.org>
cb291102 4166 - (bal) Patch to force OpenSSH rpm to require the same version of OpenSSL
4167 that it was compiled against. Patch by Pekka Savola <pekkas@netcore.fi>
68fa858a 4168 - (bal) Double -I for OpenSSL on SCO. Patch by Tim Rice
5a67331c 4169 <tim@multitalents.net>
14a49e44 4170
68fa858a 417120010222
73d6d7fa 4172 - (bal) Corrected SCO luid patch by svaughan <svaughan@asterion.com>
ca742b3b 4173 - (bal) Added mdoc2man.pl from Mark Roth <roth@feep.net>
4174 - (bal) Removed reference to liblogin from contrib/README. It was
4175 integrated into OpenSSH a long while ago.
2a81eb9f 4176 - (stevesk) remove erroneous #ifdef sgi code.
4177 Michael Stone <mstone@cs.loyola.edu>
73d6d7fa 4178
fbf305f1 417920010221
4180 - (bal) Removed -L/usr/ucblib -R/usr/ucblib for Solaris platform.
68fa858a 4181 - (bal) Fixed OpenSSL rework to use $saved_*. Patch by Tim Rice
9dd3bc84 4182 <tim@multitalents.net>
1fe61b2e 4183 - (bal) Reverted out of 2001/02/15 patch by djm below because it
4184 breaks Solaris.
4185 - (djm) Move PAM session setup back to before setuid to user.
4186 fixes problems on Solaris-drived PAMs.
266140a8 4187 - (stevesk) session.c: back out to where we were before:
68fa858a 4188 - (djm) Move PAM session initialisation until after fork in sshd. Patch
266140a8 4189 from Nalin Dahyabhai <nalin@redhat.com>
9dd3bc84 4190
8b3319f4 419120010220
4192 - (bal) Fix mixed up params to memmove() from Jan 5th in setenv.c and
4193 getcwd.c.
c2b544a5 4194 - (bal) OpenBSD CVS Sync:
4195 - deraadt@cvs.openbsd.org 2001/02/19 23:09:05
4196 [sshd.c]
4197 clarify message to make it not mention "ident"
8b3319f4 4198
1729c161 419920010219
4200 - (bal) Markus' blessing to rename login.[ch] -> sshlogin.[ch] and
4201 pty.[ch] -> sshpty.[ch]
d6f13fbb 4202 - (djm) Rework search for OpenSSL location. Skip directories which don't
4203 exist, don't add -L$ssldir/lib if it doesn't exist. Should help SCO
4204 with its limit of 6 -L options.
0476625f 4205 - OpenBSD CVS Sync:
4206 - reinhard@cvs.openbsd.org 2001/02/17 08:24:40
4207 [sftp.1]
4208 typo
4209 - deraadt@cvs.openbsd.org 2001/02/17 16:28:58
4210 [ssh.c]
4211 cleanup -V output; noted by millert
4212 - deraadt@cvs.openbsd.org 2001/02/17 16:48:48
4213 [sshd.8]
4214 it's the OpenSSH one
4215 - markus@cvs.openbsd.org 2001/02/18 11:33:54
4216 [dispatch.c]
4217 typo, SSH2_MSG_KEXINIT, from aspa@kronodoc.fi
4218 - markus@cvs.openbsd.org 2001/02/19 02:53:32
4219 [compat.c compat.h serverloop.c]
4220 ssh-1.2.{18-22} has broken handling of ignore messages; report from
4221 itojun@
4222 - markus@cvs.openbsd.org 2001/02/19 03:35:23
4223 [version.h]
4224 OpenSSH_2.5.1 adds bug compat with 1.2.{18-22}
4225 - deraadt@cvs.openbsd.org 2001/02/19 03:36:25
4226 [scp.c]
4227 np is changed by recursion; vinschen@redhat.com
4228 - Update versions in RPM spec files
4229 - Release 2.5.1p1
1729c161 4230
663fd560 423120010218
68fa858a 4232 - (bal) Patch for fix FCHMOD reference in ftp-client.c by Tim Rice
4233 <tim@multitalents.net>
25cd3375 4234 - (Bal) Patch for lack of RA_RESTART in misc.c for mysignal by
4235 stevesk
68fa858a 4236 - (djm) Fix my breaking of cygwin builds, Patch from Corinna Vinschen
58e7f038 4237 <vinschen@redhat.com> and myself.
32ced054 4238 - (djm) Close listen_sock on bind() failures. Patch from Arkadiusz
4239 Miskiewicz <misiek@pld.ORG.PL>
6a951840 4240 - (djm) Robustify EGD/PRNGd code in face of socket closures. Patch from
4241 Todd C. Miller <Todd.Miller@courtesan.com>
68fa858a 4242 - (djm) Use ttyname() to determine name of tty returned by openpty()
4243 rather then risking overflow. Patch from Marek Michalkiewicz
b82f1310 4244 <marekm@amelek.gda.pl>
68fa858a 4245 - (djm) Swapped tests for no_libsocket and no_libnsl in configure.in.
bdf80b2c 4246 Patch from Marek Michalkiewicz <marekm@amelek.gda.pl>
af8fda37 4247 - (djm) Doc fixes from Pekka Savola <pekkas@netcore.fi>
68fa858a 4248 - (djm) Use SA_INTERRUPT along SA_RESTART if present (equivalent for
df538d55 4249 SunOS)
68fa858a 4250 - (djm) SCO needs librpc for libwrap. Patch from Tim Rice
f61d6b17 4251 <tim@multitalents.net>
dfef7e7e 4252 - (stevesk) misc.c: cpp rework of SA_(INTERRUPT|RESTART) handling.
36a358ca 4253 - (stevesk) scp.c: use mysignal() for updateprogressmeter() handler.
68fa858a 4254 - (djm) SA_INTERRUPT is the converse of SA_RESTART, apply it only for
d54d99a3 4255 SIGALRM.
e1a023df 4256 - (djm) Move entropy.c over to mysignal()
68fa858a 4257 - (djm) SunOS 4.x also needs to define HAVE_BOGUS_SYS_QUEUE_H as it has
4258 a <sys/queue.h> that lacks the TAILQ_* macros. Patch from Todd C.
667beaa9 4259 Miller <Todd.Miller@courtesan.com>
ecdde3d8 4260 - (djm) Update RPM spec files for 2.5.0p1
51ee9048 4261 - (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie
4262 enable with --with-bsd-auth.
2adddc78 4263 - (stevesk) entropy.c: typo; should be SIGPIPE
663fd560 4264
0b1728c5 426520010217
4266 - (bal) OpenBSD Sync:
4267 - markus@cvs.openbsd.org 2001/02/16 13:38:18
68fa858a 4268 [channel.c]
4269 remove debug
c8b058b4 4270 - markus@cvs.openbsd.org 2001/02/16 14:03:43
4271 [session.c]
4272 proper payload-length check for x11 w/o screen-number
0b1728c5 4273
b41d8d4d 427420010216
4275 - (bal) added '--with-prce' to allow overriding of system regex when
4276 required (tested by David Dulek <ddulek@fastenal.com>)
d6fdb079 4277 - (bal) Added DG/UX case and set that they have a broken IPTOS.
278588d8 4278 - (djm) Mini-configure reorder patch from Tim Rice <tim@multitalents.net>
4279 Fixes linking on SCO.
68fa858a 4280 - (djm) Make gnome-ssh-askpass handle multi-line prompts. Patch from
0ceb21d6 4281 Nalin Dahyabhai <nalin@redhat.com>
4282 - (djm) BSD license for gnome-ssh-askpass (was X11)
4283 - (djm) KNF on gnome-ssh-askpass
ed6553e2 4284 - (djm) USE_PIPES for a few more sysv platforms
4285 - (djm) Cleanup configure.in a little
4286 - (djm) Ask users to check config.log when we can't find necessary libs
aca75d94 4287 - (djm) Set "login ID" on systems with setluid. Only enabled for SCO
4288 OpenServer for now. Based on patch from svaughan <svaughan@asterion.com>
0ae4fe1d 4289 - (djm) OpenBSD CVS:
4290 - markus@cvs.openbsd.org 2001/02/15 16:19:59
4291 [channels.c channels.h serverloop.c sshconnect.c sshconnect.h]
4292 [sshconnect1.c sshconnect2.c]
4293 genericize password padding function for SSH1 and SSH2.
4294 add stylized echo to 2, too.
4295 - (djm) Add roundup() macro to defines.h
9535dddf 4296 - (stevesk) set SA_RESTART flag in mysignal() for SIGCHLD;
4297 needed on Unixware 2.x.
b41d8d4d 4298
0086bfaf 429920010215
68fa858a 4300 - (djm) Move PAM session setup back to before setuid to user. Fixes
0086bfaf 4301 problems on Solaris-derived PAMs.
e11aab29 4302 - (djm) Clean up PAM namespace. Suggested by Darren Moffat
4303 <Darren.Moffat@eng.sun.com>
9e3c31f7 4304 - (bal) Sync w/ OpenSSH for new release
4305 - markus@cvs.openbsd.org 2001/02/12 12:45:06
4306 [sshconnect1.c]
4307 fix xmalloc(0), ok dugsong@
b2552997 4308 - markus@cvs.openbsd.org 2001/02/11 12:59:25
4309 [Makefile.in sshd.8 sshconnect2.c readconf.h readconf.c packet.c
4310 sshd.c ssh.c ssh.1 servconf.h servconf.c myproposal.h kex.h kex.c]
4311 1) clean up the MAC support for SSH-2
4312 2) allow you to specify the MAC with 'ssh -m'
4313 3) or the 'MACs' keyword in ssh(d)_config
4314 4) add hmac-{md5,sha1}-96
4315 ok stevesk@, provos@
15853e93 4316 - markus@cvs.openbsd.org 2001/02/12 16:16:23
4317 [auth-passwd.c auth.c auth.h auth1.c auth2.c servconf.c servconf.h
4318 ssh-keygen.c sshd.8]
4319 PermitRootLogin={yes,without-password,forced-commands-only,no}
4320 (before this change, root could login even if PermitRootLogin==no)
7cc4cf0a 4321 - deraadt@cvs.openbsd.org 2001/02/12 22:56:09
fd193ca4 4322 [clientloop.c packet.c ssh-keyscan.c]
4323 deal with EAGAIN/EINTR selects which were skipped
7cc4cf0a 4324 - markus@cvs.openssh.org 2001/02/13 22:49:40
4325 [auth1.c auth2.c]
4326 setproctitle(user) only if getpwnam succeeds
4327 - markus@cvs.openbsd.org 2001/02/12 23:26:20
4328 [sshd.c]
4329 missing memset; from solar@openwall.com
4330 - stevesk@cvs.openbsd.org 2001/02/12 20:53:33
4331 [sftp-int.c]
4332 lumask now works with 1 numeric arg; ok markus@, djm@
4333 - djm@cvs.openbsd.org 2001/02/14 9:46:03
4334 [sftp-client.c sftp-int.c sftp.1]
4335 Fix and document 'preserve modes & times' option ('-p' flag in sftp);
4336 ok markus@
0b16bb01 4337 - (bal) replaced PATH_MAX in sftp-int.c w/ MAXPATHLEN.
4338 - (djm) Move to Jim's 1.2.0 X11 askpass program
62da27dd 4339 - (stevesk) OpenBSD sync:
4340 - deraadt@cvs.openbsd.org 2001/02/15 01:38:04
4341 [serverloop.c]
4342 indent
0b16bb01 4343
1c2d0a13 434420010214
4345 - (djm) Don't try to close PAM session or delete credentials if the
68fa858a 4346 session has not been open or credentials not set. Based on patch from
1c2d0a13 4347 Andrew Bartlett <abartlet@pcug.org.au>
68fa858a 4348 - (djm) Move PAM session initialisation until after fork in sshd. Patch
0ab1bcba 4349 from Nalin Dahyabhai <nalin@redhat.com>
958e5ae4 4350 - (bal) Missing function prototype in bsd-snprintf.c patch by
4351 Mark Miller <markm@swoon.net>
b7ccb051 4352 - (djm) Split out and improve OSF SIA auth code. Patch from Chris Adams
4353 <cmadams@hiwaay.net> with a little modification and KNF.
815800e1 4354 - (stevesk) fix for SIA patch, misplaced session_setup_sia()
1c2d0a13 4355
0610439b 435620010213
84eb157c 4357 - (djm) Only test -S potential EGD sockets if they exist and are readable.
f1312c76 4358 - (bal) Cleaned out bsd-snprintf.c. VARARGS have been banished and
4359 I did a base KNF over the whe whole file to make it more acceptable.
4360 (backed out of original patch and removed it from ChangeLog)
01f13020 4361 - (bal) Use chown() if fchown() does not exist in ftp-server.c patch by
4362 Tim Rice <tim@multitalents.net>
8d60e965 4363 - (stevesk) auth1.c: fix PAM passwordless check.
0610439b 4364
894a4851 436520010212
68fa858a 4366 - (djm) Update Redhat specfile to allow --define "skip_x11_askpass 1",
4367 --define "skip_gnome_askpass 1", --define "rh7 1" and make the
4368 implicit rpm-3.0.5 dependancy explicit. Patch and suggestions from
894a4851 4369 Pekka Savola <pekkas@netcore.fi>
782d6a0d 4370 - (djm) Clean up PCRE text in INSTALL
68fa858a 4371 - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby
77db6c3f 4372 <mib@unimelb.edu.au>
6f68f28a 4373 - (bal) NCR SVR4 compatiblity provide by Don Bragg <thewizarddon@yahoo.com>
01a7bc9a 4374 - (stevesk) session.c: remove debugging code.
894a4851 4375
abf1f107 437620010211
4377 - (bal) OpenBSD Sync
4378 - markus@cvs.openbsd.org 2001/02/07 22:35:46
4379 [auth1.c auth2.c sshd.c]
4380 move k_setpag() to a central place; ok dugsong@
c845316f 4381 - markus@cvs.openbsd.org 2001/02/10 12:52:02
4382 [auth2.c]
4383 offer passwd before s/key
e6fa162e 4384 - markus@cvs.openbsd.org 2001/02/8 22:37:10
4385 [canohost.c]
4386 remove last call to sprintf; ok deraadt@
0ab4b0f0 4387 - markus@cvs.openbsd.org 2001/02/10 1:33:32
4388 [canohost.c]
4389 add debug message, since sshd blocks here if DNS is not available
7f8ea238 4390 - markus@cvs.openbsd.org 2001/02/10 12:44:02
4391 [cli.c]
4392 don't call vis() for \r
5c470997 4393 - danh@cvs.openbsd.org 2001/02/10 0:12:43
4394 [scp.c]
4395 revert a small change to allow -r option to work again; ok deraadt@
4396 - danh@cvs.openbsd.org 2001/02/10 15:14:11
4397 [scp.c]
4398 fix memory leak; ok markus@
a0e6fead 4399 - djm@cvs.openbsd.org 2001/02/10 0:45:52
4400 [scp.1]
4401 Mention that you can quote pathnames with spaces in them
b3106440 4402 - markus@cvs.openbsd.org 2001/02/10 1:46:28
4403 [ssh.c]
4404 remove mapping of argv[0] -> hostname
f72e01a5 4405 - markus@cvs.openbsd.org 2001/02/06 22:26:17
4406 [sshconnect2.c]
4407 do not ask for passphrase in batch mode; report from ejb@ql.org
4408 - itojun@cvs.opebsd.org 2001/02/08 10:47:05
5d1d11d1 4409 [sshconnect.c sshconnect1.c sshconnect2.c]
68fa858a 4410 %.30s is too short for IPv6 numeric address. use %.128s for now.
f72e01a5 4411 markus ok
4412 - markus@cvs.openbsd.org 2001/02/09 12:28:35
4413 [sshconnect2.c]
4414 do not free twice, thanks to /etc/malloc.conf
4415 - markus@cvs.openbsd.org 2001/02/09 17:10:53
4416 [sshconnect2.c]
4417 partial success: debug->log; "Permission denied" if no more auth methods
4418 - markus@cvs.openbsd.org 2001/02/10 12:09:21
4419 [sshconnect2.c]
4420 remove some lines
e0b2cf6b 4421 - markus@cvs.openbsd.org 2001/02/09 13:38:07
4422 [auth-options.c]
4423 reset options if no option is given; from han.holl@prismant.nl
ca910e13 4424 - markus@cvs.openbsd.org 2001/02/08 21:58:28
4425 [channels.c]
4426 nuke sprintf, ok deraadt@
4427 - markus@cvs.openbsd.org 2001/02/08 21:58:28
4428 [channels.c]
4429 nuke sprintf, ok deraadt@
affa8be4 4430 - markus@cvs.openbsd.org 2001/02/06 22:43:02
4431 [clientloop.h]
4432 remove confusing callback code
d2c46e77 4433 - deraadt@cvs.openbsd.org 2001/02/08 14:39:36
4434 [readconf.c]
4435 snprintf
cc8aca8a 4436 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
4437 sync with netbsd tree changes.
4438 - more strict prototypes, include necessary headers
4439 - use paths.h/pathnames.h decls
4440 - size_t typecase to int -> u_long
5be2ec5e 4441 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
4442 [ssh-keyscan.c]
4443 fix size_t -> int cast (use u_long). markus ok
4444 - markus@cvs.openbsd.org 2001/02/07 22:43:16
4445 [ssh-keyscan.c]
4446 s/getline/Linebuf_getline/; from roumen.petrov@skalasoft.com
4447 - itojun@cvs.openbsd.org 2001/02/09 9:04:59
4448 [ssh-keyscan.c]
68fa858a 4449 do not assume malloc() returns zero-filled region. found by
5be2ec5e 4450 malloc.conf=AJ.
f21032a6 4451 - markus@cvs.openbsd.org 2001/02/08 22:35:30
4452 [sshconnect.c]
68fa858a 4453 don't connect if batch_mode is true and stricthostkeychecking set to
f21032a6 4454 'ask'
7bbcc167 4455 - djm@cvs.openbsd.org 2001/02/04 21:26:07
4456 [sshd_config]
4457 type: ok markus@
4458 - deraadt@cvs.openbsd.org 2001/02/06 22:07:50
4459 [sshd_config]
4460 enable sftp-server by default
a2e6d17d 4461 - deraadt 2001/02/07 8:57:26
4462 [xmalloc.c]
4463 deal with new ANSI malloc stuff
4464 - markus@cvs.openbsd.org 2001/02/07 16:46:08
4465 [xmalloc.c]
4466 typo in fatal()
4467 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
4468 [xmalloc.c]
4469 fix size_t -> int cast (use u_long). markus ok
4ef922e3 4470 - 1.47 Thu Feb 8 23:11:42 GMT 2001 by dugsong
4471 [serverloop.c sshconnect1.c]
68fa858a 4472 mitigate SSH1 traffic analysis - from Solar Designer
4ef922e3 4473 <solar@openwall.com>, ok provos@
68fa858a 4474 - (bal) fixed sftp-client.c. Return 'status' instead of '0'
ca910e13 4475 (from the OpenBSD tree)
6b442913 4476 - (bal) Synced ssh.1, ssh-add.1 and sshd.8 w/ OpenBSD
27df9d4a 4477 - (bal) sftp-sever.c '%8lld' to '%8llu' (OpenBSD Sync)
17321afe 4478 - (bal) uuencode.c resync w/ OpenBSD tree, plus whitespace.
f98d56f0 4479 - (bal) A bit more whitespace cleanup
68fa858a 4480 - (djm) Set PAM_RHOST earlier, patch from Andrew Bartlett
e275684f 4481 <abartlet@pcug.org.au>
b27e97b1 4482 - (stevesk) misc.c: ssh.h not needed.
38a316c0 4483 - (stevesk) compat.c: more friendly cpp error
94f38e16 4484 - (stevesk) OpenBSD sync:
4485 - stevesk@cvs.openbsd.org 2001/02/11 06:15:57
4486 [LICENSE]
4487 typos and small cleanup; ok deraadt@
abf1f107 4488
0426a3b4 448920010210
4490 - (djm) Sync sftp and scp stuff from OpenBSD:
4491 - djm@cvs.openbsd.org 2001/02/07 03:55:13
4492 [sftp-client.c]
4493 Don't free handles before we are done with them. Based on work from
4494 Corinna Vinschen <vinschen@redhat.com>. ok markus@
4495 - djm@cvs.openbsd.org 2001/02/06 22:32:53
4496 [sftp.1]
4497 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
4498 - deraadt@cvs.openbsd.org 2001/02/07 04:07:29
4499 [sftp.1]
4500 pretty up significantly
4501 - itojun@cvs.openbsd.org 2001/02/07 06:49:42
4502 [sftp.1]
4503 .Bl-.El mismatch. markus ok
4504 - djm@cvs.openbsd.org 2001/02/07 06:12:30
4505 [sftp-int.c]
4506 Check that target is a directory before doing ls; ok markus@
4507 - itojun@cvs.openbsd.org 2001/02/07 11:01:18
4508 [scp.c sftp-client.c sftp-server.c]
4509 unsigned long long -> %llu, not %qu. markus ok
4510 - stevesk@cvs.openbsd.org 2001/02/07 11:10:39
4511 [sftp.1 sftp-int.c]
4512 more man page cleanup and sync of help text with man page; ok markus@
4513 - markus@cvs.openbsd.org 2001/02/07 14:58:34
4514 [sftp-client.c]
4515 older servers reply with SSH2_FXP_NAME + count==0 instead of EOF
4516 - djm@cvs.openbsd.org 2001/02/07 15:27:19
4517 [sftp.c]
4518 Don't forward agent and X11 in sftp. Suggestion from Roumen Petrov
4519 <roumen.petrov@skalasoft.com>
4520 - stevesk@cvs.openbsd.org 2001/02/07 15:36:04
4521 [sftp-int.c]
4522 portable; ok markus@
4523 - stevesk@cvs.openbsd.org 2001/02/07 15:55:47
4524 [sftp-int.c]
4525 lowercase cmds[].c also; ok markus@
4526 - markus@cvs.openbsd.org 2001/02/07 17:04:52
4527 [pathnames.h sftp.c]
4528 allow sftp over ssh protocol 1; ok djm@
4529 - deraadt@cvs.openbsd.org 2001/02/08 07:38:55
4530 [scp.c]
4531 memory leak fix, and snprintf throughout
4532 - deraadt@cvs.openbsd.org 2001/02/08 08:02:02
4533 [sftp-int.c]
4534 plug a memory leak
4535 - stevesk@cvs.openbsd.org 2001/02/08 10:11:23
4536 [session.c sftp-client.c]
4537 %i -> %d
4538 - stevesk@cvs.openbsd.org 2001/02/08 10:57:59
4539 [sftp-int.c]
4540 typo
4541 - stevesk@cvs.openbsd.org 2001/02/08 15:28:07
4542 [sftp-int.c pathnames.h]
4543 _PATH_LS; ok markus@
4544 - djm@cvs.openbsd.org 2001/02/09 04:46:25
4545 [sftp-int.c]
4546 Check for NULL attribs for chown, chmod & chgrp operations, only send
4547 relevant attribs back to server; ok markus@
96b64eb0 4548 - djm@cvs.openbsd.org 2001/02/06 15:05:25
4549 [sftp.c]
4550 Use getopt to process commandline arguments
4551 - djm@cvs.openbsd.org 2001/02/06 15:06:21
4552 [sftp.c ]
4553 Wait for ssh subprocess at exit
4554 - djm@cvs.openbsd.org 2001/02/06 15:18:16
4555 [sftp-int.c]
4556 stat target for remote chdir before doing chdir
4557 - djm@cvs.openbsd.org 2001/02/06 15:32:54
4558 [sftp.1]
4559 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
4560 - provos@cvs.openbsd.org 2001/02/05 22:22:02
4561 [sftp-int.c]
4562 cleanup get_pathname, fix pwd after failed cd. okay djm@
0426a3b4 4563 - (djm) Update makefile.in for _PATH_SFTP_SERVER
c9f5e42e 4564 - (bal) sftp-client.c replace NULL w/ 0 in do_ls() (pending in OpenBSD tree)
0426a3b4 4565
6d1e1d2b 456620010209
68fa858a 4567 - (bal) patch to vis.c to deal with HAVE_VIS right by Robert Mooney
6d1e1d2b 4568 <rjmooney@mediaone.net>
bb0c1991 4569 - (bal) .c.o rule in openbsd-compat/Makefile.in did not make it to the
68fa858a 4570 main tree while porting forward. Pointed out by Lutz Jaenicke
bb0c1991 4571 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
f902d909 4572 - (bal) double entry in configure.in. Pointed out by Lutz Jaenicke
4573 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
25f4c264 4574 - (stevesk) OpenBSD sync:
4575 - markus@cvs.openbsd.org 2001/02/08 11:20:01
4576 [auth2.c]
4577 strict checking
4578 - markus@cvs.openbsd.org 2001/02/08 11:15:22
4579 [version.h]
4580 update to 2.3.2
4581 - markus@cvs.openbsd.org 2001/02/08 11:12:30
4582 [auth2.c]
4583 fix typo
72b3f75d 4584 - (djm) Update spec files
0ed28836 4585 - (bal) OpenBSD sync:
4586 - deraadt@cvs.openbsd.org 2001/02/08 14:38:54
4587 [scp.c]
4588 memory leak fix, and snprintf throughout
1fc8ccdf 4589 - markus@cvs.openbsd.org 2001/02/06 22:43:02
4590 [clientloop.c]
4591 remove confusing callback code
0b202697 4592 - (djm) Add CVS Id's to files that we have missed
5ca51e19 4593 - (bal) OpenBSD Sync (more):
4594 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
4595 sync with netbsd tree changes.
4596 - more strict prototypes, include necessary headers
4597 - use paths.h/pathnames.h decls
4598 - size_t typecase to int -> u_long
1f3bf5aa 4599 - markus@cvs.openbsd.org 2001/02/06 22:07:42
4600 [ssh.c]
4601 fatal() if subsystem fails
4602 - markus@cvs.openbsd.org 2001/02/06 22:43:02
4603 [ssh.c]
4604 remove confusing callback code
4605 - jakob@cvs.openbsd.org 2001/02/06 23:03:24
4606 [ssh.c]
4607 add -1 option (force protocol version 1). ok markus@
4608 - jakob@cvs.openbsd.org 2001/02/06 23:06:21
4609 [ssh.c]
4610 reorder -{1,2,4,6} options. ok markus@
e6aa01b4 4611 - (bal) Missing 'const' in readpass.h
9c5a8165 4612 - (bal) OpenBSD Sync (so at least the thing compiles for 2.3.2 =)
4613 - djm@cvs.openbsd.org 2001/02/06 23:30:28
4614 [sftp-client.c]
4615 replace arc4random with counter for request ids; ok markus@
68fa858a 4616 - (djm) Define _PATH_TTY for systems that don't. Report from Lutz
bc79ed5c 4617 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
6d1e1d2b 4618
6a25c04c 461920010208
4620 - (djm) Don't delete external askpass program in make uninstall target.
4621 Report and fix from Roumen Petrov <roumen.petrov@skalasoft.com>
6958bd37 4622 - (djm) Fix linking of sftp, don't need arc4random any more.
4623 - (djm) Try to use shell that supports "test -S" for EGD socket search.
4624 Based on patch from Tim Rice <tim@multitalents.net>
6a25c04c 4625
547519f0 462620010207
bee0a37e 4627 - (bal) Save the whole path to AR in configure. Some Solaris 2.7 installs
4628 seem lose track of it while in openbsd-compat/ (two confirmed reports)
5c377b3b 4629 - (djm) Much KNF on PAM code
547519f0 4630 - (djm) Revise auth-pam.c conversation function to be a little more
4631 readable.
5c377b3b 4632 - (djm) Revise kbd-int PAM conversation function to fold all text messages
4633 to before first prompt. Fixes hangs if last pam_message did not require
4634 a reply.
4635 - (djm) Fix password changing when using PAM kbd-int authentication
bee0a37e 4636
547519f0 463720010205
2b87da3b 4638 - (bal) Disable groupaccess by setting NGROUPS_MAX to 0 for platforms
99286dc8 4639 that don't have NGROUPS_MAX.
57559587 4640 - (bal) AIX patch for auth1.c by William L. Jones <jones@hpc.utexas.edu>
2b87da3b 4641 - (stevesk) OpenBSD sync:
4642 - stevesk@cvs.openbsd.org 2001/02/04 08:32:27
4643 [many files; did this manually to our top-level source dir]
4644 unexpand and remove end-of-line whitespace; ok markus@
408ba72f 4645 - stevesk@cvs.openbsd.org 2001/02/04 15:21:19
4646 [sftp-server.c]
4647 SSH2_FILEXFER_ATTR_UIDGID support; ok markus@
ec2a033a 4648 - deraadt@cvs.openbsd.org 2001/02/04 17:02:32
4649 [sftp-int.c]
4650 ? == help
4651 - deraadt@cvs.openbsd.org 2001/02/04 16:47:46
4652 [sftp-int.c]
4653 sort commands, so that abbreviations work as expected
4654 - stevesk@cvs.openbsd.org 2001/02/04 15:17:52
4655 [sftp-int.c]
4656 debugging sftp: precedence and missing break. chmod, chown, chgrp
4657 seem to be working now.
4658 - markus@cvs.openbsd.org 2001/02/04 14:41:21
4659 [sftp-int.c]
4660 use base 8 for umask/chmod
4661 - markus@cvs.openbsd.org 2001/02/04 11:11:54
4662 [sftp-int.c]
4663 fix LCD
c44559d2 4664 - markus@cvs.openbsd.org 2001/02/04 08:10:44
4665 [ssh.1]
4666 typo; dpo@club-internet.fr
a5930351 4667 - stevesk@cvs.openbsd.org 2001/02/04 06:30:12
4668 [auth2.c authfd.c packet.c]
4669 remove duplicate #include's; ok markus@
6a416424 4670 - deraadt@cvs.openbsd.org 2001/02/04 16:56:23
4671 [scp.c sshd.c]
4672 alpha happiness
4673 - stevesk@cvs.openbsd.org 2001/02/04 15:12:17
4674 [sshd.c]
4675 precedence; ok markus@
02a024dd 4676 - deraadt@cvs.openbsd.org 2001/02/04 08:14:15
6a416424 4677 [ssh.c sshd.c]
4678 make the alpha happy
02a024dd 4679 - markus@cvs.openbsd.org 2001/01/31 13:37:24
4680 [channels.c channels.h serverloop.c ssh.c]
68fa858a 4681 do not disconnect if local port forwarding fails, e.g. if port is
547519f0 4682 already in use
02a024dd 4683 - markus@cvs.openbsd.org 2001/02/01 14:58:09
4684 [channels.c]
4685 use ipaddr in channel messages, ietf-secsh wants this
4686 - markus@cvs.openbsd.org 2001/01/31 12:26:20
4687 [channels.c]
68fa858a 4688 ssh.com-2.0.1x does not send additional info in CHANNEL_OPEN_FAILURE
547519f0 4689 messages; bug report from edmundo@rano.org
a741554f 4690 - markus@cvs.openbsd.org 2001/01/31 13:48:09
4691 [sshconnect2.c]
4692 unused
9378f292 4693 - deraadt@cvs.openbsd.org 2001/02/04 08:23:08
4694 [sftp-client.c sftp-server.c]
4695 make gcc on the alpha even happier
1fc243d1 4696
547519f0 469720010204
781a0585 4698 - (bal) I think this is the last of the bsd-*.h that don't belong.
634e0b53 4699 - (bal) Minor Makefile fix
f0f14bea 4700 - (bal) openbsd-compat/Makefile minor fix. Ensure dependancies are done
61e96248 4701 right.
78987b57 4702 - (bal) Changed order of LIB="" in -with-skey due to library resolving.
166e4f2a 4703 - (bal) next-posix.h changed to bsd-nextstep.h
61e96248 4704 - (djm) OpenBSD CVS sync:
4705 - markus@cvs.openbsd.org 2001/02/03 03:08:38
4706 [auth-options.c auth-rh-rsa.c auth-rhosts.c auth.c canohost.c]
4707 [canohost.h servconf.c servconf.h session.c sshconnect1.c sshd.8]
4708 [sshd_config]
4709 make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@
4710 - markus@cvs.openbsd.org 2001/02/03 03:19:51
4711 [ssh.1 sshd.8 sshd_config]
4712 Skey is now called ChallengeResponse
4713 - markus@cvs.openbsd.org 2001/02/03 03:43:09
4714 [sshd.8]
4715 use no-pty option in .ssh/authorized_keys* if you need a 8-bit clean
4716 channel. note from Erik.Anggard@cygate.se (pr/1659)
4717 - stevesk@cvs.openbsd.org 2001/02/03 10:03:06
4718 [ssh.1]
4719 typos; ok markus@
4720 - djm@cvs.openbsd.org 2001/02/04 04:11:56
4721 [scp.1 sftp-server.c ssh.1 sshd.8 sftp-client.c sftp-client.h]
4722 [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c]
4723 Basic interactive sftp client; ok theo@
4724 - (djm) Update RPM specs for new sftp binary
68fa858a 4725 - (djm) Update several bits for new optional reverse lookup stuff. I
61e96248 4726 think I got them all.
8b061486 4727 - (djm) Makefile.in fixes
1aa00dcb 4728 - (stevesk) add mysignal() wrapper and use it for the protocol 2
4729 SIGCHLD handler.
408ba72f 4730 - (djm) Use setvbuf() instead of setlinebuf(). Suggest from stevesk@
781a0585 4731
547519f0 473220010203
63fe0529 4733 - (bal) Cygwin clean up by Corinna Vinschen <vinschen@redhat.com>
bf3db92d 4734 - (bal) renamed queue.h to fake-queue.h (even if it's an OpenBSD
4735 based file) to ensure #include space does not get confused.
f78888c7 4736 - (bal) Minor Makefile.in tweak. dirname may not exist on some
4737 platforms so builds fail. (NeXT being a well known one)
63fe0529 4738
547519f0 473920010202
61e96248 4740 - (bal) Makefile fix where sourcedir != builddir by Corinna Vinschen
c85a87f2 4741 <vinschen@redhat.com>
71301416 4742 - (bal) Makefile fix to use $(MAKE) instead of 'make' for platforms
4743 that use 'gmake'. Patch by Tim Rice <tim@multitalents.net>
c85a87f2 4744
547519f0 474520010201
ad5075bd 4746 - (bal) Minor fix to Makefile to stop rebuilding executables if no
4747 changes have occured to any of the supporting code. Patch by
4748 Roumen Petrov <roumen.petrov@skalasoft.com>
4749
9c8dbb1b 475020010131
37845585 4751 - (djm) OpenBSD CVS Sync:
4752 - djm@cvs.openbsd.org 2001/01/30 15:48:53
4753 [sshconnect.c]
4754 Make warning message a little more consistent. ok markus@
8c89dd2b 4755 - (djm) Fix autoconf logic for --with-lastlog=no Report and diagnosis from
4756 Philipp Buehler <lists@fips.de> and Kevin Steves <stevesk@sweden.hp.com>
4757 respectively.
c59dc6bd 4758 - (djm) Don't log SSH2 PAM KbdInt responses to debug, they may contain
4759 passwords.
9c8dbb1b 4760 - (bal) Reorder. Move all bsd-*, fake-*, next-*, and cygwin* stuff to
4761 openbsd-compat/. And resolve all ./configure and Makefile.in issues
4762 assocated.
37845585 4763
9c8dbb1b 476420010130
39929cdb 4765 - (djm) OpenBSD CVS Sync:
4766 - markus@cvs.openbsd.org 2001/01/29 09:55:37
4767 [channels.c channels.h clientloop.c serverloop.c]
4768 fix select overflow; ok deraadt@ and stevesk@
865ac82e 4769 - markus@cvs.openbsd.org 2001/01/29 12:42:35
4770 [canohost.c canohost.h channels.c clientloop.c]
4771 add get_peer_ipaddr(socket), x11-fwd in ssh2 requires ipaddr, not DNS
46aa2d1f 4772 - markus@cvs.openbsd.org 2001/01/29 12:47:32
4773 [rsa.c rsa.h ssh-agent.c sshconnect1.c sshd.c]
4774 handle rsa_private_decrypt failures; helps against the Bleichenbacher
4775 pkcs#1 attack
ae810de7 4776 - djm@cvs.openbsd.org 2001/01/29 05:36:11
4777 [ssh.1 ssh.c]
4778 Allow invocation of sybsystem by commandline (-s); ok markus@
83bc57f9 4779 - (stevesk) configure.in: remove duplicate PROG_LS
39929cdb 4780
9c8dbb1b 478120010129
f29ef605 4782 - (stevesk) sftp-server.c: use %lld vs. %qd
4783
cb9da0fc 478420010128
4785 - (bal) Put USE_PIPES back into sco3.2v5
23c2a7a5 4786 - (bal) OpenBSD Sync
9bd5b720 4787 - markus@cvs.openbsd.org 2001/01/28 10:15:34
4788 [dispatch.c]
4789 re-keying is not supported; ok deraadt@
5fb622e4 4790 - markus@cvs.openbsd.org 2001/01/28 10:24:04
7f5c4295 4791 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
5fb622e4 4792 cleanup AUTHORS sections
9bd5b720 4793 - markus@cvs.openbsd.org 2001/01/28 10:37:26
ab60252b 4794 [sshd.c sshd.8]
9bd5b720 4795 remove -Q, no longer needed
4796 - stevesk@cvs.openbsd.org 2001/01/28 20:36:16
a877488a 4797 [readconf.c ssh.1]
9bd5b720 4798 ``StrictHostKeyChecking ask'' documentation and small cleanup.
4799 ok markus@
6f37606e 4800 - stevesk@cvs.openbsd.org 2001/01/28 20:43:25
61e96248 4801 [sshd.8]
6f37606e 4802 spelling. ok markus@
95f4ccfb 4803 - stevesk@cvs.openbsd.org 2001/01/28 20:53:21
4804 [xmalloc.c]
4805 use size_t for strlen() return. ok markus@
6f37606e 4806 - stevesk@cvs.openbsd.org 2001/01/28 22:27:05
4807 [authfile.c]
4808 spelling. use sizeof vs. strlen(). ok markus@
9bd5b720 4809 - niklas@cvs.openbsd.org 2001/01/29 1:59:14
23c2a7a5 4810 [atomicio.h canohost.h clientloop.h deattack.h dh.h dispatch.h
4811 groupaccess.c groupaccess.h hmac.h hostfile.h includes.h kex.h
4812 key.h log.h login.h match.h misc.h myproposal.h nchan.ms pathnames.h
4813 radix.h readpass.h rijndael.h serverloop.h session.h sftp.h ssh-add.1
4814 ssh-dss.h ssh-keygen.1 ssh-keyscan.1 ssh-rsa.h ssh1.h ssh_config
4815 sshconnect.h sshd_config tildexpand.h uidswap.h uuencode.h]
4816 $OpenBSD$
b0e305c9 4817 - (bal) Minor auth2.c resync. Whitespace and moving of an #include.
cb9da0fc 4818
c9606e03 481920010126
61e96248 4820 - (bal) SSH_PROGRAM vs _PATH_SSH_PROGRAM fix pointed out by Roumen
c9606e03 4821 Petrov <roumen.petrov@skalasoft.com>
2f4b2e38 4822 - (bal) OpenBSD Sync
4823 - deraadt@cvs.openbsd.org 2001/01/25 8:06:33
4824 [ssh-agent.c]
4825 call _exit() in signal handler
c9606e03 4826
d7d5f0b2 482720010125
4828 - (djm) Sync bsd-* support files:
4829 - deraadt@cvs.openbsd.org 2000/01/26 03:43:20
4830 [rresvport.c bindresvport.c]
61e96248 4831 new bindresvport() semantics that itojun, shin, jean-luc and i have
d7d5f0b2 4832 agreed on, which will be happy for the future. bindresvport_sa() for
4833 sockaddr *, too. docs later..
4834 - deraadt@cvs.openbsd.org 2000/01/24 02:24:21
4835 [bindresvport.c]
61e96248 4836 in bindresvport(), if sin is non-NULL, example sin->sin_family for
d7d5f0b2 4837 the actual family being processed
e1dd3a7a 4838 - (djm) Mention PRNGd in documentation, it is nicer than EGD
4839 - (djm) Automatically search for "well-known" EGD/PRNGd sockets in autoconf
8080699b 4840 - (bal) AC_FUNC_STRFTIME added to autoconf
4ccb01d6 4841 - (bal) OpenBSD Resync
4842 - stevesk@cvs.openbsd.org 2001/01/24 21:03:50
4843 [channels.c]
4844 missing freeaddrinfo(); ok markus@
d7d5f0b2 4845
556eb464 484620010124
4847 - (bal) OpenBSD Resync
4848 - markus@cvs.openbsd.org 2001/01/23 10:45:10
4849 [ssh.h]
61e96248 4850 nuke comment
1aecda34 4851 - (bal) no 64bit support patch from Tim Rice <tim@multitalents.net>
4852 - (bal) #ifdef around S_IFSOCK if platform does not support it.
4853 patch by Tim Rice <tim@multitalents.net>
4854 - (bal) fake-regex.h cleanup based on Tim Rice's patch.
c33f0b36 4855 - (stevesk) sftp-server.c: fix chmod() mode mask
556eb464 4856
effa6591 485720010123
4858 - (bal) regexp.h typo in configure.in. Should have been regex.h
4859 - (bal) SSH_USER_DIR to _PATH_SSH_USER_DIR patch by stevesk@
61e96248 4860 - (bal) SSH_ASKPASS_DEFAULT to _PATH_SSH_ASKPASS_DEFAULT
53a24016 4861 - (bal) OpenBSD Resync
4862 - markus@cvs.openbsd.org 2001/01/22 8:15:00
4863 [auth-krb4.c sshconnect1.c]
4864 only AFS needs radix.[ch]
4865 - markus@cvs.openbsd.org 2001/01/22 8:32:53
4866 [auth2.c]
4867 no need to include; from mouring@etoh.eviladmin.org
4868 - stevesk@cvs.openbsd.org 2001/01/22 16:55:21
4869 [key.c]
4870 free() -> xfree(); ok markus@
4871 - stevesk@cvs.openbsd.org 2001/01/22 17:22:28
4872 [sshconnect2.c sshd.c]
4873 fix memory leaks in SSH2 key exchange; ok markus@
d464095c 4874 - markus@cvs.openbsd.org 2001/01/22 23:06:39
4875 [auth1.c auth2.c readconf.c readconf.h servconf.c servconf.h
4876 sshconnect1.c sshconnect2.c sshd.c]
4877 rename skey -> challenge response.
4878 auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.
53a24016 4879
effa6591 4880
42f11eb2 488120010122
4882 - (bal) OpenBSD Resync
4883 - markus@cvs.openbsd.org 2001/01/19 12:45:26 GMT 2001 by markus
4884 [servconf.c ssh.h sshd.c]
4885 only auth-chall.c needs #ifdef SKEY
4886 - markus@cvs.openbsd.org 2001/01/19 15:55:10 GMT 2001 by markus
4887 [auth-krb4.c auth-options.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
4888 auth1.c auth2.c channels.c clientloop.c dh.c dispatch.c nchan.c
4889 packet.c pathname.h readconf.c scp.c servconf.c serverloop.c
4890 session.c ssh-add.c ssh-keygen.c ssh-keyscan.c ssh.c ssh.h
4891 ssh1.h sshconnect1.c sshd.c ttymodes.c]
4892 move ssh1 definitions to ssh1.h, pathnames to pathnames.h
4893 - markus@cvs.openbsd.org 2001/01/19 16:48:14
4894 [sshd.8]
4895 fix typo; from stevesk@
4896 - markus@cvs.openbsd.org 2001/01/19 16:50:58
4897 [ssh-dss.c]
61e96248 4898 clear and free digest, make consistent with other code (use dlen); from
42f11eb2 4899 stevesk@
4900 - markus@cvs.openbsd.org 2001/01/20 15:55:20 GMT 2001 by markus
4901 [auth-options.c auth-options.h auth-rsa.c auth2.c]
4902 pass the filename to auth_parse_options()
61e96248 4903 - markus@cvs.openbsd.org 2001/01/20 17:59:40 GMT 2001
42f11eb2 4904 [readconf.c]
4905 fix SIGSEGV from -o ""; problem noted by jehsom@togetherweb.com
4906 - stevesk@cvs.openbsd.org 2001/01/20 18:20:29
4907 [sshconnect2.c]
4908 dh_new_group() does not return NULL. ok markus@
4909 - markus@cvs.openbsd.org 2001/01/20 21:33:42
4910 [ssh-add.c]
61e96248 4911 do not loop forever if askpass does not exist; from
42f11eb2 4912 andrew@pimlott.ne.mediaone.net
4913 - djm@cvs.openbsd.org 2001/01/20 23:00:56
4914 [servconf.c]
4915 Check for NULL return from strdelim; ok markus
4916 - djm@cvs.openbsd.org 2001/01/20 23:02:07
4917 [readconf.c]
4918 KNF; ok markus
4919 - jakob@cvs.openbsd.org 2001/01/21 9:00:33
4920 [ssh-keygen.1]
4921 remove -R flag; ok markus@
4922 - markus@cvs.openbsd.org 2001/01/21 19:05:40
4923 [atomicio.c automicio.h auth-chall.c auth-krb4.c auth-options.c
4924 auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
4925 auth.c auth.h auth1.c auth2-chall.c auth2.c authfd.c authfile.c
4926 bufaux.c bufaux.h buffer.c canahost.c canahost.h channels.c
4927 cipher.c cli.c clientloop.c clientloop.h compat.c compress.c
4928 deattack.c dh.c dispatch.c groupaccess.c hmac.c hostfile.c kex.c
4929 key.c key.h log-client.c log-server.c log.c log.h login.c login.h
4930 match.c misc.c misc.h nchan.c packet.c pty.c radix.h readconf.c
4931 readpass.c readpass.h rsa.c scp.c servconf.c serverloop.c serverloop.h
4932 session.c sftp-server.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c
61e96248 4933 ssh-keyscan.c ssh-rsa.c ssh.c ssh.h sshconnect.c sshconnect.h
42f11eb2 4934 sshconnect1.c sshconnect2.c sshd.c tildexpand.c tildexpand.h
4935 ttysmodes.c uidswap.c xmalloc.c]
61e96248 4936 split ssh.h and try to cleanup the #include mess. remove unnecessary
42f11eb2 4937 #includes. rename util.[ch] -> misc.[ch]
4938 - (bal) renamed 'PIDDIR' to '_PATH_SSH_PIDDIR' to match OpenBSD tree
61e96248 4939 - (bal) Moved #ifdef KRB4 in auth-krb4.c above the #include to resolve
42f11eb2 4940 conflict when compiling for non-kerb install
4941 - (bal) removed the #ifdef SKEY in auth1.c to match Markus' changes
4942 on 1/19.
4943
6005a40c 494420010120
4945 - (bal) OpenBSD Resync
4946 - markus@cvs.openbsd.org 2001/01/19 12:45:26
4947 [ssh-chall.c servconf.c servconf.h ssh.h sshd.c]
4948 only auth-chall.c needs #ifdef SKEY
47af6577 4949 - (bal) Slight auth2-pam.c clean up.
4950 - (bal) Includes a fake-regexp.h to be only used if regcomp() is found,
4951 but no 'regexp.h' found (SCO OpenServer 3 lacks the header).
6005a40c 4952
922e6493 495320010119
4954 - (djm) Update versions in RPM specfiles
59c97189 4955 - (bal) OpenBSD Resync
4956 - markus@cvs.openbsd.org 2001/01/18 16:20:21
4957 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1 ssh.h
4958 sshd.8 sshd.c]
61e96248 4959 log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many
59c97189 4960 systems
4961 - markus@cvs.openbsd.org 2001/01/18 16:59:59
4962 [auth-passwd.c auth.c auth.h auth1.c auth2.c serverloop.c session.c
4963 session.h sshconnect1.c]
4964 1) removes fake skey from sshd, since this will be much
4965 harder with /usr/libexec/auth/login_XXX
4966 2) share/unify code used in ssh-1 and ssh-2 authentication (server side)
4967 3) make addition of BSD_AUTH and other challenge reponse methods
4968 easier.
4969 - markus@cvs.openbsd.org 2001/01/18 17:12:43
4970 [auth-chall.c auth2-chall.c]
4971 rename *-skey.c *-chall.c since the files are not skey specific
04fc7a67 4972 - (djm) Merge patch from Tim Waugh (via Nalin Dahyabhai <nalin@redhat.com>)
4973 to fix NULL pointer deref and fake authloop breakage in PAM code.
f4ebf0e8 4974 - (bal) Updated contrib/cygwin/ by Corinna Vinschen <vinschen@redhat.com>
3c418020 4975 - (bal) Minor cygwin patch to auth1.c. Suggested by djm.
61e96248 4976
b5c334cc 497720010118
4978 - (bal) Super Sized OpenBSD Resync
4979 - markus@cvs.openbsd.org 2001/01/11 22:14:20 GMT 2001 by markus
4980 [sshd.c]
4981 maxfd+1
4982 - markus@cvs.openbsd.org 2001/01/13 17:59:18
4983 [ssh-keygen.1]
4984 small ssh-keygen manpage cleanup; stevesk@pobox.com
4985 - markus@cvs.openbsd.org 2001/01/13 18:03:07
4986 [scp.c ssh-keygen.c sshd.c]
4987 getopt() returns -1 not EOF; stevesk@pobox.com
4988 - markus@cvs.openbsd.org 2001/01/13 18:06:54
4989 [ssh-keyscan.c]
4990 use SSH_DEFAULT_PORT; from stevesk@pobox.com
4991 - markus@cvs.openbsd.org 2001/01/13 18:12:47
4992 [ssh-keyscan.c]
4993 free() -> xfree(); fix memory leak; from stevesk@pobox.com
4994 - markus@cvs.openbsd.org 2001/01/13 18:14:13
4995 [ssh-add.c]
4996 typo, from stevesk@sweden.hp.com
4997 - markus@cvs.openbsd.org 2001/01/13 18:32:50
61e96248 4998 [packet.c session.c ssh.c sshconnect.c sshd.c]
b5c334cc 4999 split out keepalive from packet_interactive (from dale@accentre.com)
5000 set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too.
5001 - markus@cvs.openbsd.org 2001/01/13 18:36:45
5002 [packet.c packet.h]
5003 reorder, typo
5004 - markus@cvs.openbsd.org 2001/01/13 18:38:00
5005 [auth-options.c]
5006 fix comment
5007 - markus@cvs.openbsd.org 2001/01/13 18:43:31
5008 [session.c]
5009 Wall
61e96248 5010 - markus@cvs.openbsd.org 2001/01/13 19:14:08
b5c334cc 5011 [clientloop.h clientloop.c ssh.c]
5012 move callback to headerfile
5013 - markus@cvs.openbsd.org 2001/01/15 21:40:10
5014 [ssh.c]
5015 use log() instead of stderr
5016 - markus@cvs.openbsd.org 2001/01/15 21:43:51
5017 [dh.c]
5018 use error() not stderr!
5019 - markus@cvs.openbsd.org 2001/01/15 21:45:29
5020 [sftp-server.c]
5021 rename must fail if newpath exists, debug off by default
5022 - markus@cvs.openbsd.org 2001/01/15 21:46:38
5023 [sftp-server.c]
5024 readable long listing for sftp-server, ok deraadt@
5025 - markus@cvs.openbsd.org 2001/01/16 19:20:06
5026 [key.c ssh-rsa.c]
61e96248 5027 make "ssh-rsa" key format for ssh2 confirm to the ietf-drafts; from
5028 galb@vandyke.com. note that you have to delete older ssh2-rsa keys,
5029 since they are in the wrong format, too. they must be removed from
b5c334cc 5030 .ssh/authorized_keys2 and .ssh/known_hosts2, etc.
61e96248 5031 (cd; grep -v ssh-rsa .ssh/authorized_keys2 > TMP && mv TMP
5032 .ssh/authorized_keys2) additionally, we now check that
b5c334cc 5033 BN_num_bits(rsa->n) >= 768.
5034 - markus@cvs.openbsd.org 2001/01/16 20:54:27
5035 [sftp-server.c]
5036 remove some statics. simpler handles; idea from nisse@lysator.liu.se
5037 - deraadt@cvs.openbsd.org 2001/01/16 23:58:08
5038 [bufaux.c radix.c sshconnect.h sshconnect1.c]
5039 indent
5040 - (bal) Added bsd-strmode.[ch] since some non-OpenBSD platforms may
5041 be missing such feature.
5042
61e96248 5043
52ce34a2 504420010117
5045 - (djm) Only write random seed file at exit
717057b6 5046 - (djm) Make PAM support optional, enable with --with-pam
61e96248 5047 - (djm) Try to use libcrypt on Linux, but link it after OpenSSL (which
717057b6 5048 provides a crypt() of its own)
5049 - (djm) Avoid a warning in bsd-bindresvport.c
5050 - (djm) Try to avoid adding -I/usr/include to CPPFLAGS during SSL tests. This
61e96248 5051 can cause weird segfaults errors on Solaris
8694a1ce 5052 - (djm) Avoid warning in PAM code by making read_passphrase arguments const
d748039d 5053 - (djm) Add --with-pam to RPM spec files
52ce34a2 5054
2fd3c144 505520010115
5056 - (bal) sftp-server.c change to use chmod() if fchmod() does not exist.
89c7e31c 5057 - (bal) utimes() support via utime() interface on machine that lack utimes().
2fd3c144 5058
63b68889 505920010114
5060 - (stevesk) initial work for OpenBSD "support supplementary group in
5061 {Allow,Deny}Groups" patch:
5062 - import getgrouplist.c from OpenBSD (bsd-getgrouplist.c)
5063 - add bsd-getgrouplist.h
5064 - new files groupaccess.[ch]
5065 - build but don't use yet (need to merge auth.c changes)
c6a69271 5066 - (stevesk) complete:
5067 - markus@cvs.openbsd.org 2001/01/13 11:56:48
5068 [auth.c sshd.8]
5069 support supplementary group in {Allow,Deny}Groups
5070 from stevesk@pobox.com
61e96248 5071
f546c780 507220010112
5073 - (bal) OpenBSD Sync
5074 - markus@cvs.openbsd.org 2001/01/10 22:56:22
5075 [bufaux.h bufaux.c sftp-server.c sftp.h getput.h]
5076 cleanup sftp-server implementation:
547519f0 5077 add buffer_get_int64, buffer_put_int64, GET_64BIT, PUT_64BIT
5078 parse SSH2_FILEXFER_ATTR_EXTENDED
5079 send SSH2_FX_EOF if readdir returns no more entries
5080 reply to SSH2_FXP_EXTENDED message
5081 use #defines from the draft
5082 move #definations to sftp.h
f546c780 5083 more info:
61e96248 5084 http://www.ietf.org/internet-drafts/draft-ietf-secsh-filexfer-00.txt
f546c780 5085 - markus@cvs.openbsd.org 2001/01/10 19:43:20
5086 [sshd.c]
5087 XXX - generate_empheral_server_key() is not safe against races,
61e96248 5088 because it calls log()
f546c780 5089 - markus@cvs.openbsd.org 2001/01/09 21:19:50
5090 [packet.c]
5091 allow TCP_NDELAY for ipv6; from netbsd via itojun@
5092
9548d6c8 509320010110
5094 - (djm) SNI/Reliant Unix needs USE_PIPES and $DISPLAY hack. Report from
5095 Bladt Norbert <Norbert.Bladt@adi.ch>
5096
af972861 509720010109
5098 - (bal) Resync CVS ID of cli.c
4b80e97b 5099 - (stevesk) auth1.c: free should be after WITH_AIXAUTHENTICATE
5100 code.
eea39c02 5101 - (bal) OpenBSD Sync
5102 - markus@cvs.openbsd.org 2001/01/08 22:29:05
5103 [auth2.c compat.c compat.h servconf.c servconf.h sshd.8
5104 sshd_config version.h]
5105 implement option 'Banner /etc/issue.net' for ssh2, move version to
5106 2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
5107 is enabled).
5108 - markus@cvs.openbsd.org 2001/01/08 22:03:23
5109 [channels.c ssh-keyscan.c]
5110 O_NDELAY -> O_NONBLOCK; thanks stevesk@pobox.com
5111 - markus@cvs.openbsd.org 2001/01/08 21:55:41
5112 [sshconnect1.c]
5113 more cleanups and fixes from stevesk@pobox.com:
5114 1) try_agent_authentication() for loop will overwrite key just
5115 allocated with key_new(); don't alloc
5116 2) call ssh_close_authentication_connection() before exit
5117 try_agent_authentication()
5118 3) free mem on bad passphrase in try_rsa_authentication()
5119 - markus@cvs.openbsd.org 2001/01/08 21:48:17
5120 [kex.c]
5121 missing free; thanks stevesk@pobox.com
f1c4659d 5122 - (bal) Detect if clock_t structure exists, if not define it.
5123 - (bal) Detect if O_NONBLOCK exists, if not define it.
5124 - (bal) removed news4-posix.h (now empty)
5125 - (bal) changed bsd-bindresvport.c and bsd-rresvport.c to use 'socklen_t'
5126 instead of 'int'
adc83ebf 5127 - (stevesk) sshd_config: sync
4f771a33 5128 - (stevesk) defines.h: remove spurious ``;''
af972861 5129
bbcf899f 513020010108
5131 - (bal) Fixed another typo in cli.c
5132 - (bal) OpenBSD Sync
5133 - markus@cvs.openbsd.org 2001/01/07 21:26:55
5134 [cli.c]
5135 typo
5136 - markus@cvs.openbsd.org 2001/01/07 21:26:55
5137 [cli.c]
5138 missing free, stevesk@pobox.com
5139 - markus@cvs.openbsd.org 2001/01/07 19:06:25
5140 [auth1.c]
5141 missing free, stevesk@pobox.com
5142 - markus@cvs.openbsd.org 2001/01/07 11:28:04
5143 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1
5144 ssh.h sshd.8 sshd.c]
5145 rename SYSLOG_LEVEL_INFO->SYSLOG_LEVEL_NOTICE
5146 syslog priority changes:
5147 fatal() LOG_ERR -> LOG_CRIT
5148 log() LOG_INFO -> LOG_NOTICE
b8c37305 5149 - Updated TODO
bbcf899f 5150
9616313f 515120010107
5152 - (bal) OpenBSD Sync
5153 - markus@cvs.openbsd.org 2001/01/06 11:23:27
5154 [ssh-rsa.c]
5155 remove unused
5156 - itojun@cvs.openbsd.org 2001/01/05 08:23:29
5157 [ssh-keyscan.1]
5158 missing .El
5159 - markus@cvs.openbsd.org 2001/01/04 22:41:03
5160 [session.c sshconnect.c]
5161 consistent use of _PATH_BSHELL; from stevesk@pobox.com
5162 - djm@cvs.openbsd.org 2001/01/04 22:35:32
5163 [ssh.1 sshd.8]
5164 Mention AES as available SSH2 Cipher; ok markus
5165 - markus@cvs.openbsd.org 2001/01/04 22:25:58
5166 [sshd.c]
5167 sync usage()/man with defaults; from stevesk@pobox.com
5168 - markus@cvs.openbsd.org 2001/01/04 22:21:26
5169 [sshconnect2.c]
5170 handle SSH2_MSG_USERAUTH_BANNER; fixes bug when connecting to a server
5171 that prints a banner (e.g. /etc/issue.net)
61e96248 5172
1877dc0c 517320010105
5174 - (bal) contrib/caldera/ provided by Tim Rice <tim@multitalents.net>
5a64a938 5175 - (bal) bsd-getcwd.c and bsd-setenv.c changed from bcopy() to memmove()
1877dc0c 5176
488c06c8 517720010104
5178 - (djm) Fix memory leak on systems with BROKEN_GETADDRINFO. Based on
5179 work by Chris Vaughan <vaughan99@yahoo.com>
5180
7c49df64 518120010103
5182 - (bal) fixed up sshconnect.c so it was closer inline with the OpenBSD
5183 tree (mainly positioning)
5184 - (bal) OpenSSH CVS Update
5185 - markus@cvs.openbsd.org 2001/01/02 20:41:02
5186 [packet.c]
5187 log remote ip on disconnect; PR 1600 from jcs@rt.fm
5188 - markus@cvs.openbsd.org 2001/01/02 20:50:56
5189 [sshconnect.c]
61e96248 5190 strict_host_key_checking for host_status != HOST_CHANGED &&
7c49df64 5191 ip_status == HOST_CHANGED
61e96248 5192 - (bal) authfile.c: Synced CVS ID tag
2c523de9 5193 - (bal) UnixWare 2.0 fixes by Tim Rice <tim@multitalents.net>
5194 - (bal) Disable sftp-server if no 64bit int support exists. Based on
5195 patch by Tim Rice <tim@multitalents.net>
5196 - (bal) Makefile.in changes to uninstall: target to remove sftp-server
5197 and sftp-server.8 manpage.
7c49df64 5198
a421e945 519920010102
5200 - (bal) OpenBSD CVS Update
5201 - markus@cvs.openbsd.org 2001/01/01 14:52:49
5202 [scp.c]
5203 use shared fatal(); from stevesk@pobox.com
5204
0efc80a7 520520001231
5206 - (bal) Reverted out of MAXHOSTNAMELEN. This should be set per OS.
5207 for multiple reasons.
b1335fdf 5208 - (bal) Reverted out of a partial NeXT patch.
0efc80a7 5209
efcae5b1 521020001230
5211 - (bal) OpenBSD CVS Update
5212 - markus@cvs.openbsd.org 2000/12/28 18:58:30
5213 [ssh-keygen.c]
5214 enable 'ssh-keygen -l -f ~/.ssh/{authorized_keys,known_hosts}{,2}
b148018f 5215 - markus@cvs.openbsd.org 2000/12/29 22:19:13
5216 [channels.c]
5217 missing xfree; from vaughan99@yahoo.com
efcae5b1 5218 - (bal) Resynced CVS ID with OpenBSD for channel.c and uidswap.c
03a14cc9 5219 - (bal) if no MAXHOSTNAMELEN is defined. Default to 64 character defination.
34665bf7 5220 Suggested by Christian Kurz <shorty@debian.org>
cb6dabf4 5221 - (bal) Add in '.c.o' section to Makefile.in to address make programs that
61e96248 5222 don't honor CPPFLAGS by default. Suggested by Lutz Jaenicke
cb6dabf4 5223 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
0dd78cd8 5224
522520001229
61e96248 5226 - (bal) Fixed spelling of 'authorized_keys' in ssh-copy-id.1 by Christian
34665bf7 5227 Kurz <shorty@debian.org>
8abcdba4 5228 - (bal) OpenBSD CVS Update
5229 - markus@cvs.openbsd.org 2000/12/28 14:25:51
5230 [auth.h auth2.c]
5231 count authentication failures only
5232 - markus@cvs.openbsd.org 2000/12/28 14:25:03
5233 [sshconnect.c]
5234 fingerprint for MITM attacks, too.
5235 - markus@cvs.openbsd.org 2000/12/28 12:03:57
5236 [sshd.8 sshd.c]
5237 document -D
5238 - markus@cvs.openbsd.org 2000/12/27 14:19:21
5239 [serverloop.c]
5240 less chatty
5241 - markus@cvs.openbsd.org 2000/12/27 12:34
5242 [auth1.c sshconnect2.c sshd.c]
5243 typo
5244 - markus@cvs.openbsd.org 2000/12/27 12:30:19
5245 [readconf.c readconf.h ssh.1 sshconnect.c]
5246 new option: HostKeyAlias: allow the user to record the host key
5247 under a different name. This is useful for ssh tunneling over
5248 forwarded connections or if you run multiple sshd's on different
5249 ports on the same machine.
5250 - markus@cvs.openbsd.org 2000/12/27 11:51:53
5251 [ssh.1 ssh.c]
5252 multiple -t force pty allocation, document ORIGINAL_COMMAND
5253 - markus@cvs.openbsd.org 2000/12/27 11:41:31
5254 [sshd.8]
5255 update for ssh-2
c52c7082 5256 - (stevesk) compress.[ch] sync with openbsd; missed in prototype
5257 fix merge.
0dd78cd8 5258
8f523d67 525920001228
5260 - (bal) Patch to add libutil.h to loginrec.c only if the platform has
5261 libutil.h. Suggested by Pekka Savola <pekka@netcore.fi>
9fb76616 5262 - (djm) Update to new x11-askpass in RPM spec
0dd78cd8 5263 - (bal) SCO patch to not include <sys/queue.h> since it's unrelated
5264 header. Patch by Tim Rice <tim@multitalents.net>
5265 - Updated TODO w/ known HP/UX issue
5266 - (bal) removed extra <netdb.h> noticed by Kevin Steves and removed the
5267 bad reference to 'NeXT including it else were' on the #ifdef version.
8f523d67 5268
b03bd394 526920001227
61e96248 5270 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
b03bd394 5271 Takumi Yamane <yamtak@b-session.com>
5272 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
8f523d67 5273 by Corinna Vinschen <vinschen@redhat.com>
5274 - (djm) Fix catman-do target for non-bash
61e96248 5275 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
8f523d67 5276 Takumi Yamane <yamtak@b-session.com>
5277 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
b03bd394 5278 by Corinna Vinschen <vinschen@redhat.com>
13991f8e 5279 - (djm) Fix catman-do target for non-bash
61e96248 5280 - (bal) Fixed NeXT's lack of CPPFLAGS honoring.
5281 - (bal) ssh-keyscan.c: NeXT (and older BSDs) don't support getrlimit() w/
f318b98b 5282 'RLIMIT_NOFILE'
61e96248 5283 - (djm) Remove *.Ylonen files. They are no longer in the OpenBSD tree,
5284 the info in COPYING.Ylonen has been moved to the start of each
3bdf55b1 5285 SSH1-derived file and README.Ylonen is well out of date.
b03bd394 5286
8d88011e 528720001223
5288 - (bal) Fixed Makefile.in to support recompile of all ssh and sshd objects
5289 if a change to config.h has occurred. Suggested by Gert Doering
5290 <gert@greenie.muc.de>
5291 - (bal) OpenBSD CVS Update:
5292 - markus@cvs.openbsd.org 2000/12/22 16:49:40
5293 [ssh-keygen.c]
5294 fix ssh-keygen -x -t type > file; from Roumen.Petrov@skalasoft.com
5295
1e3b8b07 529620001222
5297 - Updated RCSID for pty.c
5298 - (bal) OpenBSD CVS Updates:
5299 - markus@cvs.openbsd.org 2000/12/21 15:10:16
5300 [auth-rh-rsa.c hostfile.c hostfile.h sshconnect.c]
5301 print keyfile:line for changed hostkeys, for deraadt@, ok deraadt@
5302 - markus@cvs.openbsd.org 2000/12/20 19:26:56
5303 [authfile.c]
5304 allow ssh -i userkey for root
5305 - markus@cvs.openbsd.org 2000/12/20 19:37:21
5306 [authfd.c authfd.h kex.c sshconnect2.c sshd.c uidswap.c uidswap.h]
5307 fix prototypes; from stevesk@pobox.com
5308 - markus@cvs.openbsd.org 2000/12/20 19:32:08
5309 [sshd.c]
5310 init pointer to NULL; report from Jan.Ivan@cern.ch
5311 - markus@cvs.openbsd.org 2000/12/19 23:17:54
5312 [auth-krb4.c auth-options.c auth-options.h auth-rhosts.c auth-rsa.c
5313 auth1.c auth2-skey.c auth2.c authfd.c authfd.h authfile.c bufaux.c
5314 bufaux.h buffer.c canohost.c channels.c clientloop.c compress.c
5315 crc32.c deattack.c getput.h hmac.c hmac.h hostfile.c kex.c kex.h
5316 key.c key.h log.c login.c match.c match.h mpaux.c mpaux.h packet.c
5317 packet.h radix.c readconf.c rsa.c scp.c servconf.c servconf.h
5318 serverloop.c session.c sftp-server.c ssh-agent.c ssh-dss.c ssh-dss.h
5319 ssh-keygen.c ssh-keyscan.c ssh-rsa.c ssh-rsa.h ssh.c ssh.h uuencode.c
5320 uuencode.h sshconnect1.c sshconnect2.c sshd.c tildexpand.c]
5321 replace 'unsigned bla' with 'u_bla' everywhere. also replace 'char
5322 unsigned' with u_char.
5323
67b0facb 532420001221
5325 - (stevesk) OpenBSD CVS updates:
5326 - markus@cvs.openbsd.org 2000/12/19 15:43:45
5327 [authfile.c channels.c sftp-server.c ssh-agent.c]
5328 remove() -> unlink() for consistency
5329 - markus@cvs.openbsd.org 2000/12/19 15:48:09
5330 [ssh-keyscan.c]
5331 replace <ssl/x.h> with <openssl/x.h>
5332 - markus@cvs.openbsd.org 2000/12/17 02:33:40
5333 [uidswap.c]
5334 typo; from wsanchez@apple.com
61e96248 5335
adeebd37 533620001220
61e96248 5337 - (djm) Workaround PAM inconsistencies between Solaris derived PAM code
adeebd37 5338 and Linux-PAM. Based on report and fix from Andrew Morgan
5339 <morgan@transmeta.com>
5340
f072c47a 534120001218
5342 - (stevesk) rsa.c: entropy.h not needed.
0c2fb82f 5343 - (bal) split CFLAGS into CFLAGS and CPPFLAGS in configure.in and Makefile.
5344 Suggested by Wilfredo Sanchez <wsanchez@apple.com>
f072c47a 5345
731c1541 534620001216
5347 - (stevesk) OpenBSD CVS updates:
5348 - markus@cvs.openbsd.org 2000/12/16 02:53:57
5349 [scp.c]
5350 allow + in usernames; request from Florian.Weimer@RUS.Uni-Stuttgart.DE
5351 - markus@cvs.openbsd.org 2000/12/16 02:39:57
5352 [scp.c]
5353 unused; from stevesk@pobox.com
5354
227e8e86 535520001215
9853409f 5356 - (stevesk) Old OpenBSD patch wasn't completely applied:
5357 - markus@cvs.openbsd.org 2000/01/24 22:11:20
5358 [scp.c]
5359 allow '.' in usernames; from jedgar@fxp.org
227e8e86 5360 - (stevesk) OpenBSD CVS updates:
5361 - markus@cvs.openbsd.org 2000/12/13 16:26:53
5362 [ssh-keyscan.c]
5363 fatal already adds \n; from stevesk@pobox.com
5364 - markus@cvs.openbsd.org 2000/12/13 16:25:44
5365 [ssh-agent.c]
5366 remove redundant spaces; from stevesk@pobox.com
5367 - ho@cvs.openbsd.org 2000/12/12 15:50:21
5368 [pty.c]
5369 When failing to set tty owner and mode on a read-only filesystem, don't
5370 abort if the tty already has correct owner and reasonably sane modes.
5371 Example; permit 'root' to login to a firewall with read-only root fs.
5372 (markus@ ok)
5373 - deraadt@cvs.openbsd.org 2000/12/13 06:36:05
5374 [pty.c]
5375 KNF
6ffc9c88 5376 - markus@cvs.openbsd.org 2000/12/12 14:45:21
5377 [sshd.c]
5378 source port < 1024 is no longer required for rhosts-rsa since it
5379 adds no additional security.
5380 - markus@cvs.openbsd.org 2000/12/12 16:11:49
5381 [ssh.1 ssh.c]
5382 rhosts-rsa is no longer automagically disabled if ssh is not privileged.
5383 UsePrivilegedPort=no disables rhosts-rsa _only_ for old servers.
5384 these changes should not change the visible default behaviour of the ssh client.
71c0d06a 5385 - deraadt@cvs.openbsd.org 2000/12/11 10:27:33
5386 [scp.c]
5387 when copying 0-sized files, do not re-print ETA time at completion
3e1caa83 5388 - provos@cvs.openbsd.org 2000/12/15 10:30:15
5389 [kex.c kex.h sshconnect2.c sshd.c]
5390 compute diffie-hellman in parallel between server and client. okay markus@
227e8e86 5391
6c935fbd 539220001213
5393 - (djm) Make sure we reset the SIGPIPE disposition after we fork. Report
5394 from Andreas M. Kirchwitz <amk@krell.zikzak.de>
227e8e86 5395 - (stevesk) OpenBSD CVS update:
1fe6a48f 5396 - markus@cvs.openbsd.org 2000/12/12 15:30:02
5397 [ssh-keyscan.c ssh.c sshd.c]
61e96248 5398 consistently use __progname; from stevesk@pobox.com
6c935fbd 5399
367d1840 540020001211
5401 - (bal) Applied patch to include ssh-keyscan into Redhat's package, and
5402 patch to install ssh-keyscan manpage. Patch by Pekka Savola
5403 <pekka@netcore.fi>
e3a70753 5404 - (bal) OpenbSD CVS update
5405 - markus@cvs.openbsd.org 2000/12/10 17:01:53
5406 [sshconnect1.c]
5407 always request new challenge for skey/tis-auth, fixes interop with
5408 other implementations; report from roth@feep.net
367d1840 5409
6b523bae 541020001210
5411 - (bal) OpenBSD CVS updates
61e96248 5412 - markus@cvs.openbsd.org 2000/12/09 13:41:51
6b523bae 5413 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
5414 undo rijndael changes
61e96248 5415 - markus@cvs.openbsd.org 2000/12/09 13:48:31
6b523bae 5416 [rijndael.c]
5417 fix byte order bug w/o introducing new implementation
61e96248 5418 - markus@cvs.openbsd.org 2000/12/09 14:08:27
6b523bae 5419 [sftp-server.c]
5420 "" -> "." for realpath; from vinschen@redhat.com
61e96248 5421 - markus@cvs.openbsd.org 2000/12/09 14:06:54
6b523bae 5422 [ssh-agent.c]
5423 extern int optind; from stevesk@sweden.hp.com
13af0aa2 5424 - provos@cvs.openbsd.org 2000/12/09 23:51:11
5425 [compat.c]
5426 remove unnecessary '\n'
6b523bae 5427
ce9c0b75 542820001209
6b523bae 5429 - (bal) OpenBSD CVS updates:
61e96248 5430 - djm@cvs.openbsd.org 2000/12/07 4:24:59
ce9c0b75 5431 [ssh.1]
5432 Typo fix from Wilfredo Sanchez <wsanchez@apple.com>; ok theo
5433
f72fc97f 543420001207
6b523bae 5435 - (bal) OpenBSD CVS updates:
61e96248 5436 - markus@cvs.openbsd.org 2000/12/06 22:58:14
f72fc97f 5437 [compat.c compat.h packet.c]
5438 disable debug messages for ssh.com/f-secure 2.0.1x, 2.1.0
dfe89252 5439 - markus@cvs.openbsd.org 2000/12/06 23:10:39
5440 [rijndael.c]
5441 unexpand(1)
61e96248 5442 - markus@cvs.openbsd.org 2000/12/06 23:05:43
dfe89252 5443 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
5444 new rijndael implementation. fixes endian bugs
f72fc97f 5445
97fb6912 544620001206
6b523bae 5447 - (bal) OpenBSD CVS updates:
97fb6912 5448 - markus@cvs.openbsd.org 2000/12/05 20:34:09
5449 [channels.c channels.h clientloop.c serverloop.c]
5450 async connects for -R/-L; ok deraadt@
5451 - todd@cvs.openssh.org 2000/12/05 16:47:28
5452 [sshd.c]
5453 tweak comment to reflect real location of pid file; ok provos@
bf5f69f7 5454 - (stevesk) Import <sys/queue.h> from OpenBSD for systems that don't
5455 have it (used in ssh-keyscan).
227e8e86 5456 - (stevesk) OpenBSD CVS update:
f20255cb 5457 - markus@cvs.openbsd.org 2000/12/06 19:57:48
5458 [ssh-keyscan.c]
5459 err(3) -> internal error(), from stevesk@sweden.hp.com
97fb6912 5460
f6fdbddf 546120001205
6b523bae 5462 - (bal) OpenBSD CVS updates:
f6fdbddf 5463 - markus@cvs.openbsd.org 2000/12/04 19:24:02
5464 [ssh-keyscan.c ssh-keyscan.1]
5465 David Maziere's ssh-keyscan, ok niels@
5466 - (bal) Updated Makefile.in to include ssh-keyscan that was just added
5467 to the recent OpenBSD source tree.
835d2104 5468 - (stevesk) fix typos in contrib/hpux/README
f6fdbddf 5469
cbc5abf9 547020001204
5471 - (bal) More C functions defined in NeXT that are unaccessable without
61e96248 5472 defining -POSIX.
5473 - (bal) OpenBSD CVS updates:
5474 - markus@cvs.openbsd.org 2000/12/03 11:29:04
cbc5abf9 5475 [compat.c]
5476 remove fallback to SSH_BUG_HMAC now that the drafts are updated
5477 - markus@cvs.openbsd.org 2000/12/03 11:27:55
5478 [compat.c]
61e96248 5479 correctly match "2.1.0.pl2 SSH" etc; from
97fb6912 5480 pekkas@netcore.fi/bugzilla.redhat
cbc5abf9 5481 - markus@cvs.openbsd.org 2000/12/03 11:15:03
5482 [auth2.c compat.c compat.h sshconnect2.c]
5483 support f-secure/ssh.com 2.0.12; ok niels@
5484
0b6fbf03 548520001203
cbc5abf9 5486 - (bal) OpenBSD CVS updates:
0b6fbf03 5487 - markus@cvs.openbsd.org 2000/11/30 22:54:31
5488 [channels.c]
61e96248 5489 debug->warn if tried to do -R style fwd w/o client requesting this;
0b6fbf03 5490 ok neils@
5491 - markus@cvs.openbsd.org 2000/11/29 20:39:17
5492 [cipher.c]
5493 des_cbc_encrypt -> des_ncbc_encrypt since it already updates the IV
5494 - markus@cvs.openbsd.org 2000/11/30 18:33:05
5495 [ssh-agent.c]
5496 agents must not dump core, ok niels@
61e96248 5497 - markus@cvs.openbsd.org 2000/11/30 07:04:02
0b6fbf03 5498 [ssh.1]
5499 T is for both protocols
5500 - markus@cvs.openbsd.org 2000/12/01 00:00:51
5501 [ssh.1]
5502 typo; from green@FreeBSD.org
5503 - markus@cvs.openbsd.org 2000/11/30 07:02:35
5504 [ssh.c]
5505 check -T before isatty()
5506 - provos@cvs.openbsd.org 2000/11/29 13:51:27
5507 [sshconnect.c]
61e96248 5508 show IP address and hostname when new key is encountered. okay markus@
0b6fbf03 5509 - markus@cvs.openbsd.org 2000/11/30 22:53:35
5510 [sshconnect.c]
5511 disable agent/x11/port fwding if hostkey has changed; ok niels@
5512 - marksu@cvs.openbsd.org 2000/11/29 21:11:59
5513 [sshd.c]
5514 sshd -D, startup w/o deamon(), for monitoring scripts or inittab;
5515 from handler@sub-rosa.com and eric@urbanrange.com; ok niels@
8c9fe09e 5516 - (djm) Added patch from Nalin Dahyabhai <nalin@redhat.com> to enable
5517 PAM authentication using KbdInteractive.
5518 - (djm) Added another TODO
0b6fbf03 5519
90f4078a 552020001202
5521 - (bal) Backed out of part of Alain St-Denis' loginrec.c patch.
61e96248 5522 - (bal) Irix need some sort of mansubdir, patch by Michael Stone
90f4078a 5523 <mstone@cs.loyola.edu>
5524
dcef6523 552520001129
7062c40f 5526 - (djm) Back out all the serverloop.c hacks. sshd will now hang again
5527 if there are background children with open fds.
c193d002 5528 - (djm) bsd-rresvport.c bzero -> memset
61e96248 5529 - (djm) Don't fail in defines.h on absence of 64 bit types (we will
c193d002 5530 still fail during compilation of sftp-server).
5531 - (djm) Fail if ar is not found during configure
c523303b 5532 - (djm) OpenBSD CVS updates:
5533 - provos@cvs.openbsd.org 2000/11/22 08:38:31
5534 [sshd.8]
5535 talk about /etc/primes, okay markus@
5536 - markus@cvs.openbsd.org 2000/11/23 14:03:48
5537 [ssh.c sshconnect1.c sshconnect2.c]
5538 complain about invalid ciphers for ssh1/ssh2, fall back to reasonable
5539 defaults
5540 - markus@cvs.openbsd.org 2000/11/25 09:42:53
5541 [sshconnect1.c]
5542 reorder check for illegal ciphers, bugreport from espie@
5543 - markus@cvs.openbsd.org 2000/11/25 10:19:34
5544 [ssh-keygen.c ssh.h]
5545 print keytype when generating a key.
5546 reasonable defaults for RSA1/RSA/DSA keys.
b3ec54b4 5547 - (djm) Patch from Pekka Savola <Pekka.Savola@netcore.fi> to include a few
5548 more manpage paths in fixpaths calls
5549 - (djm) Also add xauth path at Pekka's suggestion.
57ce3f00 5550 - (djm) Add Redhat RPM patch for AUTHPRIV SyslogFacility
dcef6523 5551
e879a080 555220001125
5553 - (djm) Give up privs when reading seed file
5554
d343d900 555520001123
5556 - (bal) Merge OpenBSD changes:
5557 - markus@cvs.openbsd.org 2000/11/15 22:31:36
5558 [auth-options.c]
61e96248 5559 case insensitive key options; from stevesk@sweeden.hp.com
d343d900 5560 - markus@cvs.openbsd.org 2000/11/16 17:55:43
5561 [dh.c]
5562 do not use perror() in sshd, after child is forked()
5563 - markus@cvs.openbsd.org 2000/11/14 23:42:40
5564 [auth-rsa.c]
5565 parse option only if key matches; fix some confusing seen by the client
5566 - markus@cvs.openbsd.org 2000/11/14 23:44:19
5567 [session.c]
5568 check no_agent_forward_flag for ssh-2, too
5569 - markus@cvs.openbsd.org 2000/11/15
5570 [ssh-agent.1]
5571 reorder SYNOPSIS; typo, use .It
5572 - markus@cvs.openbsd.org 2000/11/14 23:48:55
5573 [ssh-agent.c]
5574 do not reorder keys if a key is removed
5575 - markus@cvs.openbsd.org 2000/11/15 19:58:08
5576 [ssh.c]
61e96248 5577 just ignore non existing user keys
d343d900 5578 - millert@cvs.openbsd.org 200/11/15 20:24:43
5579 [ssh-keygen.c]
5580 Add missing \n at end of error message.
5581
0b49a754 558220001122
5583 - (bal) Minor patch to ensure platforms lacking IRIX job limit supports
5584 are compilable.
5585 - (bal) Updated TODO as of 11/18/2000 with known things to resolve.
5586
fab2e5d3 558720001117
5588 - (bal) Changed from 'primes' to 'primes.out' for consistancy sake. It
5589 has no affect the output. Patch by Corinna Vinschen <vinschen@redhat.com>
61e96248 5590 - (stevesk) Reworked progname support.
260d427b 5591 - (bal) Misplaced #include "includes.h" in bsd-setproctitle.c. Patch by
5592 Shinichi Maruyama <marya@st.jip.co.jp>
fab2e5d3 5593
c2207f11 559420001116
5595 - (bal) Added in MAXSYMLINK test in bsd-realpath.c. Required for some SCO
5596 releases.
5597 - (bal) Make builds work outside of source tree. Patch by Mark D. Roth
5598 <roth@feep.net>
5599
3d398e04 560020001113
61e96248 5601 - (djm) Add pointer to http://www.imasy.or.jp/~gotoh/connect.c to
3d398e04 5602 contrib/README
fa08c86b 5603 - (djm) Merge OpenBSD changes:
5604 - markus@cvs.openbsd.org 2000/11/06 16:04:56
5605 [channels.c channels.h clientloop.c nchan.c serverloop.c]
5606 [session.c ssh.c]
5607 agent forwarding and -R for ssh2, based on work from
5608 jhuuskon@messi.uku.fi
5609 - markus@cvs.openbsd.org 2000/11/06 16:13:27
5610 [ssh.c sshconnect.c sshd.c]
5611 do not disabled rhosts(rsa) if server port > 1024; from
5612 pekkas@netcore.fi
5613 - markus@cvs.openbsd.org 2000/11/06 16:16:35
5614 [sshconnect.c]
5615 downgrade client to 1.3 if server is 1.4; help from mdb@juniper.net
5616 - markus@cvs.openbsd.org 2000/11/09 18:04:40
5617 [auth1.c]
5618 typo; from mouring@pconline.com
5619 - markus@cvs.openbsd.org 2000/11/12 12:03:28
5620 [ssh-agent.c]
5621 off-by-one when removing a key from the agent
5622 - markus@cvs.openbsd.org 2000/11/12 12:50:39
5623 [auth-rh-rsa.c auth2.c authfd.c authfd.h]
5624 [authfile.c hostfile.c kex.c kex.h key.c key.h myproposal.h]
5625 [readconf.c readconf.h rsa.c rsa.h servconf.c servconf.h ssh-add.c]
5626 [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config]
5627 [sshconnect1.c sshconnect2.c sshd.8 sshd.c sshd_config ssh-dss.c]
61e96248 5628 [ssh-dss.h ssh-rsa.c ssh-rsa.h dsa.c dsa.h]
fa08c86b 5629 add support for RSA to SSH2. please test.
5630 there are now 3 types of keys: RSA1 is used by ssh-1 only,
5631 RSA and DSA are used by SSH2.
5632 you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
5633 keys for SSH2 and use the RSA keys for hostkeys or for user keys.
5634 SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.
5635 - (djm) Fix up Makefile and Redhat init script to create RSA host keys
f001465f 5636 - (djm) Change to interim version
5733a41a 5637 - (djm) Fix RPM spec file stupidity
6fff1ac4 5638 - (djm) fixpaths to DSA and RSA keys too
3d398e04 5639
d287c664 564020001112
5641 - (bal) SCO Patch to add needed libraries for configure.in. Patch by
5642 Phillips Porch <root@theporch.com>
3d398e04 5643 - (bal) IRIX patch to adding Job Limits. Patch by Denis Parker
5644 <dcp@sgi.com>
a3bf38d0 5645 - (stevesk) pty.c: HP-UX 10 and 11 don't define TIOCSCTTY. Add error() to
5646 failed ioctl(TIOCSCTTY) call.
d287c664 5647
3c4d4fef 564820001111
5649 - (djm) Added /etc/primes for kex DH group neg, fixup Makefile.in and
5650 packaging files
35325fd4 5651 - (djm) Fix new Makefile.in warnings
61e96248 5652 - (djm) Fix vsprintf("%h") in bsd-snprintf.c, short int va_args are
5653 promoted to type int. Report and fix from Dan Astoorian
027bf205 5654 <djast@cs.toronto.edu>
61e96248 5655 - (djm) Hardwire sysconfdir in RPM spec files as some RPM versions get
e3291159 5656 it wrong. Report from Bennett Todd <bet@rahul.net>
3c4d4fef 5657
3e366738 565820001110
5659 - (bal) Fixed dropped answer from skey_keyinfo() in auth1.c
5660 - (bal) Changed from --with-skey to --with-skey=PATH in configure.in
5661 - (bal) Added in check to verify S/Key library is being detected in
5662 configure.in
61e96248 5663 - (bal) next-posix.h - added another prototype wrapped in POSIX ifdef/endif.
3e366738 5664 Patch by Mark Miller <markm@swoon.net>
5665 - (bal) Added 'util.h' header to loginrec.c only if HAVE_UTIL_H is defined
61e96248 5666 to remove warnings under MacOS X. Patch by Mark Miller <markm@swoon.net>
3e366738 5667 - (bal) Fixed LDFLAG mispelling in configure.in for --with-afs
5668
373998a4 566920001107
e506ee73 5670 - (bal) acconfig.in - removed the double "USE_PIPES" entry. Patch by
5671 Mark Miller <markm@swoon.net>
373998a4 5672 - (bal) sshd.init files corrected to assign $? to RETVAL. Patch by
5673 Jarno Huuskonen <jhuuskon@messi.uku.fi>
e506ee73 5674 - (bal) fixpaths fixed to stop it from quitely failing. Patch by
5675 Mark D. Roth <roth@feep.net>
373998a4 5676
ac89998a 567720001106
5678 - (djm) Use Jim's new 1.0.3 askpass in Redhat RPMs
6c09e23c 5679 - (djm) Manually fix up missed diff hunks (mainly RCS idents)
61e96248 5680 - (djm) Remove UPGRADING document in favour of a link to the better
d6846e6a 5681 maintained FAQ on www.openssh.com
73bd30fe 5682 - (djm) Fix multiple dependancy on gnome-libs from Pekka Savola
5683 <pekkas@netcore.fi>
5684 - (djm) Don't need X11-askpass in RPM spec file if building without it
5685 from Pekka Savola <pekkas@netcore.fi>
c215ba3b 5686 - (djm) Release 2.3.0p1
97b378bf 5687 - (bal) typo in configure.in in regards to --with-ldflags from Marko
5688 Asplund <aspa@kronodoc.fi>
5689 - (bal) fixed next-posix.h. Forgot prototype of getppid().
68f189a9 5690
b850ecd9 569120001105
5692 - (bal) Sync with OpenBSD:
5693 - markus@cvs.openbsd.org 2000/10/31 9:31:58
5694 [compat.c]
5695 handle all old openssh versions
5696 - markus@cvs.openbsd.org 2000/10/31 13:1853
5697 [deattack.c]
5698 so that large packets do not wrap "n"; from netbsd
5699 - (bal) rijndel.c - fix up RCSID to match OpenBSD tree
a30ce26d 5700 - (bal) auth2-skey.c - Checked in. Missing from portable tree.
5701 - (bal) Reworked NEWS-OS and NeXT ports to extract waitpid() and
5702 setsid() into more common files
96054e6f 5703 - (stevesk) pty.c: use __hpux to identify HP-UX.
d0127657 5704 - (bal) Missed auth-skey.o in Makefile.in and minor correction to
5705 bsd-waitpid.c
b850ecd9 5706
75b90ced 570720001029
5708 - (stevesk) Fix typo in auth.c: USE_PAM not PAM
95273555 5709 - (stevesk) Create contrib/cygwin/ directory; patch from
5710 Corinna Vinschen <vinschen@redhat.com>
e9e4a1c7 5711 - (bal) Resolved more $xno and $xyes issues in configure.in
fd5f0295 5712 - (bal) next-posix.h - spelling and forgot a prototype
75b90ced 5713
344f2b94 571420001028
61e96248 5715 - (djm) fix select hack in serverloop.c from Philippe WILLEM
344f2b94 5716 <Philippe.WILLEM@urssaf.fr>
240ae474 5717 - (djm) Fix mangled AIXAUTHENTICATE code
61e96248 5718 - (djm) authctxt->pw may be NULL. Fix from Markus Friedl
606ea390 5719 <markus.friedl@informatik.uni-erlangen.de>
a22aff1f 5720 - (djm) Sync with OpenBSD:
5721 - markus@cvs.openbsd.org 2000/10/16 15:46:32
5722 [ssh.1]
5723 fixes from pekkas@netcore.fi
5724 - markus@cvs.openbsd.org 2000/10/17 14:28:11
5725 [atomicio.c]
5726 return number of characters processed; ok deraadt@
5727 - markus@cvs.openbsd.org 2000/10/18 12:04:02
5728 [atomicio.c]
5729 undo
5730 - markus@cvs.openbsd.org 2000/10/18 12:23:02
5731 [scp.c]
5732 replace atomicio(read,...) with read(); ok deraadt@
5733 - markus@cvs.openbsd.org 2000/10/18 12:42:00
5734 [session.c]
5735 restore old record login behaviour
5736 - deraadt@cvs.openbsd.org 2000/10/19 10:41:13
5737 [auth-skey.c]
5738 fmt string problem in unused code
5739 - provos@cvs.openbsd.org 2000/10/19 10:45:16
5740 [sshconnect2.c]
5741 don't reference freed memory. okay deraadt@
5742 - markus@cvs.openbsd.org 2000/10/21 11:04:23
5743 [canohost.c]
5744 typo, eramore@era-t.ericsson.se; ok niels@
5745 - markus@cvs.openbsd.org 2000/10/23 13:31:55
5746 [cipher.c]
5747 non-alignment dependent swap_bytes(); from
5748 simonb@wasabisystems.com/netbsd
5749 - markus@cvs.openbsd.org 2000/10/26 12:38:28
5750 [compat.c]
5751 add older vandyke products
5752 - markus@cvs.openbsd.org 2000/10/27 01:32:19
5753 [channels.c channels.h clientloop.c serverloop.c session.c]
5754 [ssh.c util.c]
61e96248 5755 enable non-blocking IO on channels, and tty's (except for the
a22aff1f 5756 client ttys).
344f2b94 5757
ddc49b5c 575820001027
5759 - (djm) Increase REKEY_BYTES to 2^24 for arc4random
5760
48e7916f 576120001025
5762 - (djm) Added WARNING.RNG file and modified configure to ask users of the
5763 builtin entropy code to read it.
5764 - (djm) Prefer builtin regex to PCRE.
00937921 5765 - (bal) Added USE_PIPS defined to NeXT configure.in since scp hangs randomly.
5766 - (bal) Apply fixes to configure.in pointed out by Pavel Roskin
5767 <proski@gnu.org>
48e7916f 5768
8dcda1e3 576920001020
5770 - (djm) Don't define _REENTRANT for SNI/Reliant Unix
07bee9a7 5771 - (bal) Imported NEWS-OS waitpid() macros into NeXT. Since implementation
5772 is more correct then current version.
8dcda1e3 5773
f5af5cd5 577420001018
5775 - (stevesk) Add initial support for setproctitle(). Current
5776 support is for the HP-UX pstat(PSTAT_SETCMD, ...) method.
134fd7f6 5777 - (stevesk) Add egd startup scripts to contrib/hpux/
f5af5cd5 5778
2f31bdd6 577920001017
5780 - (djm) Add -lregex to cywin libs from Corinna Vinschen
5781 <vinschen@cygnus.com>
ba7a3f40 5782 - (djm) Don't rely on atomicio's retval to determine length of askpass
5783 supplied passphrase. Problem report from Lutz Jaenicke
5784 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
66d6c27e 5785 - (bal) Changed from GNU rx to PCRE on suggestion from djm.
61e96248 5786 - (bal) Integrated Sony NEWS-OS patches from NAKAJI Hirouyuki
66d6c27e 5787 <nakaji@tutrp.tut.ac.jp>
2f31bdd6 5788
33de75a3 578920001016
5790 - (djm) Sync with OpenBSD:
5791 - markus@cvs.openbsd.org 2000/10/14 04:01:15
5792 [cipher.c]
5793 debug3
5794 - markus@cvs.openbsd.org 2000/10/14 04:07:23
5795 [scp.c]
5796 remove spaces from arguments; from djm@mindrot.org
5797 - markus@cvs.openbsd.org 2000/10/14 06:09:46
5798 [ssh.1]
5799 Cipher is for SSH-1 only
5800 - markus@cvs.openbsd.org 2000/10/14 06:12:09
5801 [servconf.c servconf.h serverloop.c session.c sshd.8]
5802 AllowTcpForwarding; from naddy@
5803 - markus@cvs.openbsd.org 2000/10/14 06:16:56
5804 [auth2.c compat.c compat.h sshconnect2.c version.h]
61e96248 5805 OpenSSH_2.3; note that is is not complete, but the version number
33de75a3 5806 needs to be changed for interoperability reasons
5807 - markus@cvs.openbsd.org 2000/10/14 06:19:45
5808 [auth-rsa.c]
5809 do not send RSA challenge if key is not allowed by key-options; from
5810 eivind@ThinkSec.com
5811 - markus@cvs.openbsd.org 2000/10/15 08:14:01
5812 [rijndael.c session.c]
5813 typos; from stevesk@sweden.hp.com
5814 - markus@cvs.openbsd.org 2000/10/15 08:18:31
5815 [rijndael.c]
5816 typo
61e96248 5817 - (djm) Copy manpages back over from OpenBSD - too tedious to wade
30d8b039 5818 through diffs
61e96248 5819 - (djm) Added condrestart to Redhat init script. Patch from Pekka Savola
30d8b039 5820 <pekkas@netcore.fi>
aa0289fe 5821 - (djm) Update version in Redhat spec file
61e96248 5822 - (djm) Merge some of Nalin Dahyabhai <nalin@redhat.com> changes from the
aa0289fe 5823 Redhat 7.0 spec file
5b2d4b75 5824 - (djm) Make inability to read/write PRNG seedfile non-fatal
5825
33de75a3 5826
4d670c24 582720001015
5828 - (djm) Fix ssh2 hang on background processes at logout.
5829
71dfaf1c 583020001014
443172c4 5831 - (bal) Add support for realpath and getcwd for platforms with broken
5832 or missing realpath implementations for sftp-server.
5833 - (bal) Corrected mistake in INSTALL in regards to GNU rx library
61e96248 5834 - (bal) Add support for GNU rx library for those lacking regexp support
71dfaf1c 5835 - (djm) Don't accept PAM_PROMPT_ECHO_ON messages during initial auth
02323c45 5836 - (djm) Revert SSH2 serverloop hack, will find a better way.
4ee81249 5837 - (djm) Add workaround for Linux 2.4's gratuitious errno change. Patch
5838 from Martin Johansson <fatbob@acc.umu.se>
94ec8c6b 5839 - (djm) Big OpenBSD sync:
5840 - markus@cvs.openbsd.org 2000/09/30 10:27:44
5841 [log.c]
5842 allow loglevel debug
5843 - markus@cvs.openbsd.org 2000/10/03 11:59:57
5844 [packet.c]
5845 hmac->mac
5846 - markus@cvs.openbsd.org 2000/10/03 12:03:03
5847 [auth-krb4.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth1.c]
5848 move fake-auth from auth1.c to individual auth methods, disables s/key in
5849 debug-msg
5850 - markus@cvs.openbsd.org 2000/10/03 12:16:48
5851 ssh.c
5852 do not resolve canonname, i have no idea why this was added oin ossh
5853 - markus@cvs.openbsd.org 2000/10/09 15:30:44
5854 ssh-keygen.1 ssh-keygen.c
5855 -X now reads private ssh.com DSA keys, too.
5856 - markus@cvs.openbsd.org 2000/10/09 15:32:34
5857 auth-options.c
5858 clear options on every call.
5859 - markus@cvs.openbsd.org 2000/10/09 15:51:00
5860 authfd.c authfd.h
5861 interop with ssh-agent2, from <res@shore.net>
5862 - markus@cvs.openbsd.org 2000/10/10 14:20:45
5863 compat.c
5864 use rexexp for version string matching
5865 - provos@cvs.openbsd.org 2000/10/10 22:02:18
5866 [kex.c kex.h myproposal.h ssh.h ssh2.h sshconnect2.c sshd.c dh.c dh.h]
5867 First rough implementation of the diffie-hellman group exchange. The
5868 client can ask the server for bigger groups to perform the diffie-hellman
5869 in, thus increasing the attack complexity when using ciphers with longer
5870 keys. University of Windsor provided network, T the company.
5871 - markus@cvs.openbsd.org 2000/10/11 13:59:52
5872 [auth-rsa.c auth2.c]
5873 clear auth options unless auth sucessfull
5874 - markus@cvs.openbsd.org 2000/10/11 14:00:27
5875 [auth-options.h]
5876 clear auth options unless auth sucessfull
5877 - markus@cvs.openbsd.org 2000/10/11 14:03:27
5878 [scp.1 scp.c]
5879 support 'scp -o' with help from mouring@pconline.com
5880 - markus@cvs.openbsd.org 2000/10/11 14:11:35
5881 [dh.c]
5882 Wall
5883 - markus@cvs.openbsd.org 2000/10/11 14:14:40
5884 [auth.h auth2.c readconf.c readconf.h readpass.c servconf.c servconf.h]
5885 [ssh.h sshconnect2.c sshd_config auth2-skey.c cli.c cli.h]
5886 add support for s/key (kbd-interactive) to ssh2, based on work by
5887 mkiernan@avantgo.com and me
5888 - markus@cvs.openbsd.org 2000/10/11 14:27:24
5889 [auth.c auth1.c auth2.c authfile.c cipher.c cipher.h kex.c kex.h]
5890 [myproposal.h packet.c readconf.c session.c ssh.c ssh.h sshconnect1.c]
5891 [sshconnect2.c sshd.c]
5892 new cipher framework
5893 - markus@cvs.openbsd.org 2000/10/11 14:45:21
5894 [cipher.c]
5895 remove DES
5896 - markus@cvs.openbsd.org 2000/10/12 03:59:20
5897 [cipher.c cipher.h sshconnect1.c sshconnect2.c sshd.c]
5898 enable DES in SSH-1 clients only
5899 - markus@cvs.openbsd.org 2000/10/12 08:21:13
5900 [kex.h packet.c]
5901 remove unused
5902 - markus@cvs.openbsd.org 2000/10/13 12:34:46
5903 [sshd.c]
5904 Kludge for F-Secure Macintosh < 1.0.2; appro@fy.chalmers.se
5905 - markus@cvs.openbsd.org 2000/10/13 12:59:15
5906 [cipher.c cipher.h myproposal.h rijndael.c rijndael.h]
5907 rijndael/aes support
5908 - markus@cvs.openbsd.org 2000/10/13 13:10:54
5909 [sshd.8]
5910 more info about -V
5911 - markus@cvs.openbsd.org 2000/10/13 13:12:02
5912 [myproposal.h]
5913 prefer no compression
3ed32516 5914 - (djm) Fix scp user@host handling
5915 - (djm) Don't clobber ssh_prng_cmds on install
6bcf7caa 5916 - (stevesk) Include config.h in rijndael.c so we define intXX_t and
5917 u_intXX_t types on all platforms.
9ea53ba5 5918 - (stevesk) rijndael.c: cleanup missing declaration warnings.
2919e060 5919 - (stevesk) ~/.hushlogin shouldn't cause required password change to
5920 be bypassed.
f5665f6f 5921 - (stevesk) Display correct path to ssh-askpass in configure output.
5922 Report from Lutz Jaenicke.
71dfaf1c 5923
ebd782f7 592420001007
5925 - (stevesk) Print PAM return value in PAM log messages to aid
5926 with debugging.
97994d32 5927 - (stevesk) Fix detection of pw_class struct member in configure;
5928 patch from KAMAHARA Junzo <kamahara@cc.kshosen.ac.jp>
5929
47a134c1 593020001002
5931 - (djm) Fix USER_PATH, report from Kevin Steves <stevesk@sweden.hp.com>
5932 - (djm) Add host system and CC to end-of-configure report. Suggested by
5933 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
5934
7322ef0e 593520000931
5936 - (djm) Cygwin fixes from Corinna Vinschen <vinschen@cygnus.com>
5937
6ac7829a 593820000930
b6490dcb 5939 - (djm) Irix ssh_prng_cmds path fix from Pekka Savola <pekkas@netcore.fi>
61e96248 5940 - (djm) Support in bsd-snprintf.c for long long conversions from
772bd898 5941 Ben Lindstrom <mouring@pconline.com>
5942 - (djm) Cleanup NeXT support from Ben Lindstrom <mouring@pconline.com>
857040fb 5943 - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with
61e96248 5944 very short lived X connections. Bug report from Tobias Oetiker
857040fb 5945 <oetiker@ee.ethz.ch>. Fix from Markus Friedl <markus@cvs.openbsd.org>
bd2d7f6a 5946 - (djm) Add recent InitScripts as a RPM dependancy for openssh-server
5947 patch from Pekka Savola <pekkas@netcore.fi>
58665035 5948 - (djm) Forgot to cvs add LICENSE file
dc2901a0 5949 - (djm) Add LICENSE to RPM spec files
de273eef 5950 - (djm) CVS OpenBSD sync:
5951 - markus@cvs.openbsd.org 2000/09/26 13:59:59
5952 [clientloop.c]
5953 use debug2
5954 - markus@cvs.openbsd.org 2000/09/27 15:41:34
5955 [auth2.c sshconnect2.c]
5956 use key_type()
5957 - markus@cvs.openbsd.org 2000/09/28 12:03:18
5958 [channels.c]
5959 debug -> debug2 cleanup
61e96248 5960 - (djm) Irix strips "/dev/tty" from [uw]tmp entries (other systems only
2a7d529a 5961 strip "/dev/"). Fix loginrec.c based on patch from Alain St-Denis
5962 <Alain.St-Denis@ec.gc.ca>
61e96248 5963 - (djm) Fix 9 character passphrase failure with gnome-ssh-askpass.
5964 Problem was caused by interrupted read in ssh-add. Report from Donald
2a7d529a 5965 J. Barry <don@astro.cornell.edu>
6ac7829a 5966
c5d85828 596720000929
5968 - (djm) Fix SSH2 not terminating until all background tasks done problem.
61e96248 5969 - (djm) Another off-by-one fix from Pavel Kankovsky
5970 <peak@argo.troja.mff.cuni.cz>
22d89d24 5971 - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code,
5972 tidy necessary differences. Use Markus' new debugN() in entropy.c
61e96248 5973 - (djm) Merged big SCO portability patch from Tim Rice
77bb0bca 5974 <tim@multitalents.net>
c5d85828 5975
6fd7f731 597620000926
5977 - (djm) Update X11-askpass to 1.0.2 in RPM spec file
c5ae7384 5978 - (djm) Define _REENTRANT to pickup strtok_r() on HP/UX
61e96248 5979 - (djm) Security: fix off-by-one buffer overrun in fake-getnameinfo.c.
5980 Report and fix from Pavel Kankovsky <peak@argo.troja.mff.cuni.cz>
6fd7f731 5981
2f125ca1 598220000924
5983 - (djm) Merged cleanup patch from Mark Miller <markm@swoon.net>
5984 - (djm) A bit more cleanup - created cygwin_util.h
bcdaaeab 5985 - (djm) Include strtok_r() from OpenBSD libc. Fixes report from Mark Miller
5986 <markm@swoon.net>
2f125ca1 5987
764d4113 598820000923
61e96248 5989 - (djm) Fix address logging in utmp from Kevin Steves
764d4113 5990 <stevesk@sweden.hp.com>
777319db 5991 - (djm) Redhat spec and manpage fixes from Pekka Savola <pekkas@netcore.fi>
bd590612 5992 - (djm) Seperate tests for int64_t and u_int64_t types
61e96248 5993 - (djm) Tweak password expiry checking at suggestion of Kevin Steves
37c1c46d 5994 <stevesk@sweden.hp.com>
e79b44e1 5995 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
61e96248 5996 - (djm) Use printf %lld instead of %qd in sftp-server.c. Fix from
e2144f11 5997 Michael Stone <mstone@cs.loyola.edu>
188adeb2 5998 - (djm) OpenBSD CVS sync:
5999 - markus@cvs.openbsd.org 2000/09/17 09:38:59
6000 [sshconnect2.c sshd.c]
6001 fix DEBUG_KEXDH
6002 - markus@cvs.openbsd.org 2000/09/17 09:52:51
6003 [sshconnect.c]
6004 yes no; ok niels@
6005 - markus@cvs.openbsd.org 2000/09/21 04:55:11
6006 [sshd.8]
6007 typo
6008 - markus@cvs.openbsd.org 2000/09/21 05:03:54
6009 [serverloop.c]
6010 typo
6011 - markus@cvs.openbsd.org 2000/09/21 05:11:42
6012 scp.c
6013 utime() to utimes(); mouring@pconline.com
6014 - markus@cvs.openbsd.org 2000/09/21 05:25:08
6015 sshconnect2.c
6016 change login logic in ssh2, allows plugin of other auth methods
6017 - markus@cvs.openbsd.org 2000/09/21 05:25:35
6018 [auth2.c channels.c channels.h clientloop.c dispatch.c dispatch.h]
6019 [serverloop.c]
6020 add context to dispatch_run
6021 - markus@cvs.openbsd.org 2000/09/21 05:07:52
6022 authfd.c authfd.h ssh-agent.c
6023 bug compat for old ssh.com software
764d4113 6024
7f377177 602520000920
6026 - (djm) Fix bad path substitution. Report from Andrew Miner
6027 <asminer@cs.iastate.edu>
6028
bcbf86ec 602920000916
61e96248 6030 - (djm) Fix SSL search order from Lutz Jaenicke
7950bf97 6031 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
19ece6d2 6032 - (djm) New SuSE spec from Corinna Vinschen <corinna@vinschen.de>
9cd45ea4 6033 - (djm) Update CygWin support from Corinna Vinschen <vinschen@cygnus.com>
995edaac 6034 - (djm) Use a real struct sockaddr inside the fake struct sockaddr_storage.
6035 Patch from Larry Jones <larry.jones@sdrc.com>
61e96248 6036 - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM
ad55cd03 6037 password change patch.
6038 - (djm) Bring licenses on my stuff in line with OpenBSD's
0bbfbdeb 6039 - (djm) Cleanup auth-passwd.c and unify HP/UX authentication. Patch from
6040 Kevin Steves <stevesk@sweden.hp.com>
7f8f5e00 6041 - (djm) Shadow expiry check fix from Pavel Troller <patrol@omni.sinus.cz>
6042 - (djm) Re-enable int64_t types - we need them for sftp
6043 - (djm) Use libexecdir from configure , rather than libexecdir/ssh
6044 - (djm) Update Redhat SPEC file accordingly
6045 - (djm) Add Kevin Steves <stevesk@sweden.hp.com> HP/UX contrib files
6046 - (djm) Add Charles Levert <charles@comm.polymtl.ca> getpgrp patch
61e96248 6047 - (djm) Fix password auth on HP/UX 10.20. Patch from Dirk De Wachter
7f8f5e00 6048 <Dirk.DeWachter@rug.ac.be>
61e96248 6049 - (djm) Fixprogs and entropy list fixes from Larry Jones
7f8f5e00 6050 <larry.jones@sdrc.com>
6051 - (djm) Fix for SuSE spec file from Takashi YOSHIDA
6052 <tyoshida@gemini.rc.kyushu-u.ac.jp>
bcbf86ec 6053 - (djm) Merge OpenBSD changes:
6054 - markus@cvs.openbsd.org 2000/09/05 02:59:57
6055 [session.c]
6056 print hostname (not hushlogin)
6057 - markus@cvs.openbsd.org 2000/09/05 13:18:48
6058 [authfile.c ssh-add.c]
6059 enable ssh-add -d for DSA keys
6060 - markus@cvs.openbsd.org 2000/09/05 13:20:49
6061 [sftp-server.c]
6062 cleanup
6063 - markus@cvs.openbsd.org 2000/09/06 03:46:41
6064 [authfile.h]
6065 prototype
6066 - deraadt@cvs.openbsd.org 2000/09/07 14:27:56
6067 [ALL]
61e96248 6068 cleanup copyright notices on all files. I have attempted to be
6069 accurate with the details. everything is now under Tatu's licence
6070 (which I copied from his readme), and/or the core-sdi bsd-ish thing
6071 for deattack, or various openbsd developers under a 2-term bsd
bcbf86ec 6072 licence. We're not changing any rules, just being accurate.
6073 - markus@cvs.openbsd.org 2000/09/07 14:40:30
6074 [channels.c channels.h clientloop.c serverloop.c ssh.c]
6075 cleanup window and packet sizes for ssh2 flow control; ok niels
6076 - markus@cvs.openbsd.org 2000/09/07 14:53:00
6077 [scp.c]
6078 typo
6079 - markus@cvs.openbsd.org 2000/09/07 15:13:37
6080 [auth-options.c auth-options.h auth-rh-rsa.c auth-rsa.c auth.c]
6081 [authfile.h canohost.c channels.h compat.c hostfile.h log.c match.h]
6082 [pty.c readconf.c]
6083 some more Copyright fixes
6084 - markus@cvs.openbsd.org 2000/09/08 03:02:51
6085 [README.openssh2]
6086 bye bye
6087 - deraadt@cvs.openbsd.org 2000/09/11 18:38:33
6088 [LICENCE cipher.c]
6089 a few more comments about it being ARC4 not RC4
6090 - markus@cvs.openbsd.org 2000/09/12 14:53:11
6091 [log-client.c log-server.c log.c ssh.1 ssh.c ssh.h sshd.8 sshd.c]
6092 multiple debug levels
6093 - markus@cvs.openbsd.org 2000/09/14 14:25:15
6094 [clientloop.c]
6095 typo
6096 - deraadt@cvs.openbsd.org 2000/09/15 01:13:51
6097 [ssh-agent.c]
6098 check return value for setenv(3) for failure, and deal appropriately
6099
deb8d717 610020000913
6101 - (djm) Fix server not exiting with jobs in background.
6102
b5e300c2 610320000905
6104 - (djm) Import OpenBSD CVS changes
6105 - markus@cvs.openbsd.org 2000/08/31 15:52:24
6106 [Makefile sshd.8 sshd_config sftp-server.8 sftp-server.c]
6107 implement a SFTP server. interops with sftp2, scp2 and the windows
6108 client from ssh.com
6109 - markus@cvs.openbsd.org 2000/08/31 15:56:03
6110 [README.openssh2]
6111 sync
6112 - markus@cvs.openbsd.org 2000/08/31 16:05:42
6113 [session.c]
6114 Wall
6115 - markus@cvs.openbsd.org 2000/08/31 16:09:34
6116 [authfd.c ssh-agent.c]
6117 add a flag to SSH2_AGENTC_SIGN_REQUEST for future extensions
6118 - deraadt@cvs.openbsd.org 2000/09/01 09:25:13
6119 [scp.1 scp.c]
6120 cleanup and fix -S support; stevesk@sweden.hp.com
6121 - markus@cvs.openbsd.org 2000/09/01 16:29:32
6122 [sftp-server.c]
6123 portability fixes
6124 - markus@cvs.openbsd.org 2000/09/01 16:32:41
6125 [sftp-server.c]
6126 fix cast; mouring@pconline.com
6127 - itojun@cvs.openbsd.org 2000/09/03 09:23:28
6128 [ssh-add.1 ssh.1]
6129 add missing .El against .Bl.
6130 - markus@cvs.openbsd.org 2000/09/04 13:03:41
6131 [session.c]
6132 missing close; ok theo
6133 - markus@cvs.openbsd.org 2000/09/04 13:07:21
6134 [session.c]
6135 fix get_last_login_time order; from andre@van-veen.de
6136 - markus@cvs.openbsd.org 2000/09/04 13:10:09
6137 [sftp-server.c]
6138 more cast fixes; from mouring@pconline.com
6139 - markus@cvs.openbsd.org 2000/09/04 13:06:04
6140 [session.c]
6141 set SSH_ORIGINAL_COMMAND; from Leakin@dfw.nostrum.com, bet@rahul.net
6142 - (djm) Cleanup after import. Fix sftp-server compilation, Makefile
3c62e7eb 6143 - (djm) Merge cygwin support from Corinna Vinschen <vinschen@cygnus.com>
6144
1e61f54a 614520000903
6146 - (djm) Fix Redhat init script
6147
c80876b4 614820000901
6149 - (djm) Pick up Jim's new X11-askpass
6150 - (djm) Release 2.2.0p1
6151
8b4a0d08 615220000831
bcbf86ec 6153 - (djm) Workaround SIGPIPE problems on SCO. Fix from Aran Cox
8b4a0d08 6154 <acox@cv.telegroup.com>
b817711d 6155 - (djm) Pick up new version (2.2.0) from OpenBSD CVS
8b4a0d08 6156
0b65b628 615720000830
6158 - (djm) Compile warning fixes from Mark Miller <markm@swoon.net>
10fa00c8 6159 - (djm) Periodically rekey arc4random
6160 - (djm) Clean up diff against OpenBSD.
bcbf86ec 6161 - (djm) HPUX 11 needs USE_PIPES as well: Kevin Steves
2b10f47a 6162 <stevesk@sweden.hp.com>
b33a2e6e 6163 - (djm) Quieten the pam delete credentials error message
44839801 6164 - (djm) Fix printing of $DISPLAY hack if set by system type. Report from
6165 Kevin Steves <stevesk@sweden.hp.com>
84a770d1 6166 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
7efa2776 6167 - (djm) Fix doh in bsd-arc4random.c
0b65b628 6168
9aaf9be4 616920000829
bcbf86ec 6170 - (djm) Fix ^C ignored issue on Solaris. Diagnosis from Gert
6171 Doering <gert@greenie.muc.de>, John Horne <J.Horne@plymouth.ac.uk> and
9aaf9be4 6172 Garrick James <garrick@james.net>
b5f90139 6173 - (djm) Check for SCO pty naming style (ptyp%d/ttyp%d). Based on fix from
6174 Bastian Trompetter <btrompetter@firemail.de>
698d107e 6175 - (djm) NeXT tweaks from Ben Lindstrom <mouring@pconline.com>
14a9a859 6176 - More OpenBSD updates:
6177 - deraadt@cvs.openbsd.org 2000/08/24 15:46:59
6178 [scp.c]
6179 off_t in sink, to fix files > 2GB, i think, test is still running ;-)
6180 - deraadt@cvs.openbsd.org 2000/08/25 10:10:06
6181 [session.c]
6182 Wall
6183 - markus@cvs.openbsd.org 2000/08/26 04:33:43
6184 [compat.c]
6185 ssh.com-2.3.0
6186 - markus@cvs.openbsd.org 2000/08/27 12:18:05
6187 [compat.c]
6188 compatibility with future ssh.com versions
6189 - deraadt@cvs.openbsd.org 2000/08/27 21:50:55
6190 [auth-krb4.c session.c ssh-add.c sshconnect.c uidswap.c]
6191 print uid/gid as unsigned
6192 - markus@cvs.openbsd.org 2000/08/28 13:51:00
6193 [ssh.c]
6194 enable -n and -f for ssh2
6195 - markus@cvs.openbsd.org 2000/08/28 14:19:53
6196 [ssh.c]
6197 allow combination of -N and -f
6198 - markus@cvs.openbsd.org 2000/08/28 14:20:56
6199 [util.c]
6200 util.c
6201 - markus@cvs.openbsd.org 2000/08/28 14:22:02
6202 [util.c]
6203 undo
6204 - markus@cvs.openbsd.org 2000/08/28 14:23:38
6205 [util.c]
6206 don't complain if setting NONBLOCK fails with ENODEV
9aaf9be4 6207
137d7b6c 620820000823
6209 - (djm) Define USE_PIPES to avoid socketpair problems on HPUX 10 and SunOS 4
bcbf86ec 6210 Avoids "scp never exits" problem. Reports from Lutz Jaenicke
6211 <Lutz.Jaenicke@aet.TU-Cottbus.DE> and Tamito KAJIYAMA
137d7b6c 6212 <kajiyama@grad.sccs.chukyo-u.ac.jp>
2e73a022 6213 - (djm) Pick up LOGIN_PROGRAM from environment or PATH if not set by headers
da40ab4d 6214 - (djm) Add local version to version.h
ea788c22 6215 - (djm) Don't reseed arc4random everytime it is used
2e73a022 6216 - (djm) OpenBSD CVS updates:
6217 - deraadt@cvs.openbsd.org 2000/08/18 20:07:23
6218 [ssh.c]
6219 accept remsh as a valid name as well; roman@buildpoint.com
6220 - deraadt@cvs.openbsd.org 2000/08/18 20:17:13
6221 [deattack.c crc32.c packet.c]
6222 rename crc32() to ssh_crc32() to avoid zlib name clash. do not move to
6223 libz crc32 function yet, because it has ugly "long"'s in it;
6224 oneill@cs.sfu.ca
6225 - deraadt@cvs.openbsd.org 2000/08/18 20:26:08
6226 [scp.1 scp.c]
6227 -S prog support; tv@debian.org
6228 - deraadt@cvs.openbsd.org 2000/08/18 20:50:07
6229 [scp.c]
6230 knf
6231 - deraadt@cvs.openbsd.org 2000/08/18 20:57:33
6232 [log-client.c]
6233 shorten
6234 - markus@cvs.openbsd.org 2000/08/19 12:48:11
6235 [channels.c channels.h clientloop.c ssh.c ssh.h]
6236 support for ~. in ssh2
6237 - deraadt@cvs.openbsd.org 2000/08/19 15:29:40
6238 [crc32.h]
6239 proper prototype
6240 - markus@cvs.openbsd.org 2000/08/19 15:34:44
bcbf86ec 6241 [authfd.c authfd.h key.c key.h ssh-add.1 ssh-add.c ssh-agent.1]
6242 [ssh-agent.c ssh-keygen.c sshconnect1.c sshconnect2.c Makefile]
2e73a022 6243 [fingerprint.c fingerprint.h]
6244 add SSH2/DSA support to the agent and some other DSA related cleanups.
6245 (note that we cannot talk to ssh.com's ssh2 agents)
6246 - markus@cvs.openbsd.org 2000/08/19 15:55:52
6247 [channels.c channels.h clientloop.c]
6248 more ~ support for ssh2
6249 - markus@cvs.openbsd.org 2000/08/19 16:21:19
6250 [clientloop.c]
6251 oops
6252 - millert@cvs.openbsd.org 2000/08/20 12:25:53
6253 [session.c]
6254 We have to stash the result of get_remote_name_or_ip() before we
6255 close our socket or getpeername() will get EBADF and the process
6256 will exit. Only a problem for "UseLogin yes".
6257 - millert@cvs.openbsd.org 2000/08/20 12:30:59
6258 [session.c]
6259 Only check /etc/nologin if "UseLogin no" since login(1) may have its
6260 own policy on determining who is allowed to login when /etc/nologin
6261 is present. Also use the _PATH_NOLOGIN define.
6262 - millert@cvs.openbsd.org 2000/08/20 12:42:43
6263 [auth1.c auth2.c session.c ssh.c]
6264 Add calls to setusercontext() and login_get*(). We basically call
6265 setusercontext() in most places where previously we did a setlogin().
6266 Add default login.conf file and put root in the "daemon" login class.
6267 - millert@cvs.openbsd.org 2000/08/21 10:23:31
6268 [session.c]
6269 Fix incorrect PATH setting; noted by Markus.
137d7b6c 6270
c345cf9d 627120000818
6272 - (djm) OpenBSD CVS changes:
6273 - markus@cvs.openbsd.org 2000/07/22 03:14:37
6274 [servconf.c servconf.h sshd.8 sshd.c sshd_config]
6275 random early drop; ok theo, niels
6276 - deraadt@cvs.openbsd.org 2000/07/26 11:46:51
6277 [ssh.1]
6278 typo
6279 - deraadt@cvs.openbsd.org 2000/08/01 11:46:11
6280 [sshd.8]
6281 many fixes from pepper@mail.reppep.com
6282 - provos@cvs.openbsd.org 2000/08/01 13:01:42
6283 [Makefile.in util.c aux.c]
6284 rename aux.c to util.c to help with cygwin port
6285 - deraadt@cvs.openbsd.org 2000/08/02 00:23:31
6286 [authfd.c]
6287 correct sun_len; Alexander@Leidinger.net
6288 - provos@cvs.openbsd.org 2000/08/02 10:27:17
6289 [readconf.c sshd.8]
6290 disable kerberos authentication by default
6291 - provos@cvs.openbsd.org 2000/08/02 11:27:05
6292 [sshd.8 readconf.c auth-krb4.c]
6293 disallow kerberos authentication if we can't verify the TGT; from
6294 dugsong@
6295 kerberos authentication is on by default only if you have a srvtab.
6296 - markus@cvs.openbsd.org 2000/08/04 14:30:07
6297 [auth.c]
6298 unused
6299 - markus@cvs.openbsd.org 2000/08/04 14:30:35
6300 [sshd_config]
6301 MaxStartups
6302 - markus@cvs.openbsd.org 2000/08/15 13:20:46
6303 [authfd.c]
6304 cleanup; ok niels@
6305 - markus@cvs.openbsd.org 2000/08/17 14:05:10
6306 [session.c]
6307 cleanup login(1)-like jobs, no duplicate utmp entries
6308 - markus@cvs.openbsd.org 2000/08/17 14:06:34
6309 [session.c sshd.8 sshd.c]
6310 sshd -u len, similar to telnetd
1a022229 6311 - (djm) Lastlog was not getting closed after writing login entry
39987cc0 6312 - (djm) Add Solaris package support from Rip Loomis <loomisg@cist.saic.com>
c345cf9d 6313
416ed5a7 631420000816
6315 - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc)
bcbf86ec 6316 - (djm) Fix strerror replacement for old SunOS. Based on patch from
416ed5a7 6317 Charles Levert <charles@comm.polymtl.ca>
bcbf86ec 6318 - (djm) Seperate arc4random into seperate file and use OpenSSL's RC4
416ed5a7 6319 implementation.
ba606eb2 6320 - (djm) SUN_LEN macro for systems which lack it
416ed5a7 6321
dbaa2e87 632220000815
6323 - (djm) More SunOS 4.1.x fixes from Nate Itkin <nitkin@europa.com>
cd352c82 6324 - (djm) Avoid failures on Irix when ssh is not setuid. Fix from
6325 Michael Stone <mstone@cs.loyola.edu>
d93a7e5a 6326 - (djm) Don't seek in directory based lastlogs
bcbf86ec 6327 - (djm) Fix --with-ipaddr-display configure option test. Patch from
d93a7e5a 6328 Jarno Huuskonen <jhuuskon@messi.uku.fi>
2a2cb9e7 6329 - (djm) Fix AIX limits from Alexandre Oliva <oliva@lsd.ic.unicamp.br>
dbaa2e87 6330
6c33bf70 633120000813
6332 - (djm) Add $(srcdir) to includes when compiling (for VPATH). Report from
6333 Fabrice bacchella <fabrice.bacchella@marchfirst.fr>
6334
3fcce26c 633520000809
bcbf86ec 6336 - (djm) Define AIX hard limits if headers don't. Report from
3fcce26c 6337 Bill Painter <william.t.painter@lmco.com>
bcbf86ec 6338 - (djm) utmp direct write & SunOS 4 patch from Charles Levert
32eec038 6339 <charles@comm.polymtl.ca>
3fcce26c 6340
71d43804 634120000808
6342 - (djm) Cleanup Redhat RPMs. Generate keys at runtime rather than install
6343 time, spec file cleanup.
6344
f9bcea07 634520000807
378f2232 6346 - (djm) Set 0755 on binaries during install. Report from Lutz Jaenicke
47670e77 6347 - (djm) Suppress error messages on channel close shutdown() failurs
6348 works around Linux bug. Patch from Zack Weinberg <zack@wolery.cumb.org>
378f2232 6349 - (djm) Add some more entropy collection commands from Lutz Jaenicke
f9bcea07 6350
bcf89935 635120000725
6352 - (djm) Fix autoconf typo: HAVE_BINRESVPORT_AF -> HAVE_BINDRESVPORT_AF
6353
4c8722d9 635420000721
6355 - (djm) OpenBSD CVS updates:
6356 - markus@cvs.openbsd.org 2000/07/16 02:27:22
6357 [authfd.c authfd.h channels.c clientloop.c ssh-add.c ssh-agent.c ssh.c]
6358 [sshconnect1.c sshconnect2.c]
6359 make ssh-add accept dsa keys (the agent does not)
6360 - djm@cvs.openbsd.org 2000/07/17 19:25:02
6361 [sshd.c]
6362 Another closing of stdin; ok deraadt
6363 - markus@cvs.openbsd.org 2000/07/19 18:33:12
6364 [dsa.c]
6365 missing free, reorder
6366 - markus@cvs.openbsd.org 2000/07/20 16:23:14
6367 [ssh-keygen.1]
6368 document input and output files
6369
240777b8 637020000720
4c8722d9 6371 - (djm) Spec file fix from Petr Novotny <Petr.Novotny@antek.cz>
240777b8 6372
3c7def32 637320000716
4c8722d9 6374 - (djm) Release 2.1.1p4
3c7def32 6375
819b676f 637620000715
704b1659 6377 - (djm) OpenBSD CVS updates
6378 - provos@cvs.openbsd.org 2000/07/13 16:53:22
6379 [aux.c readconf.c servconf.c ssh.h]
6380 allow multiple whitespace but only one '=' between tokens, bug report from
6381 Ralf S. Engelschall <rse@engelschall.com> but different fix. okay deraadt@
6382 - provos@cvs.openbsd.org 2000/07/13 17:14:09
6383 [clientloop.c]
6384 typo; todd@fries.net
6385 - provos@cvs.openbsd.org 2000/07/13 17:19:31
6386 [scp.c]
6387 close can fail on AFS, report error; from Greg Hudson <ghudson@mit.edu>
6388 - markus@cvs.openbsd.org 2000/07/14 16:59:46
6389 [readconf.c servconf.c]
6390 allow leading whitespace. ok niels
6391 - djm@cvs.openbsd.org 2000/07/14 22:01:38
6392 [ssh-keygen.c ssh.c]
6393 Always create ~/.ssh with mode 700; ok Markus
819b676f 6394 - Fixes for SunOS 4.1.4 from Gordon Atwood <gordon@cs.ualberta.ca>
6395 - Include floatingpoint.h for entropy.c
6396 - strerror replacement
704b1659 6397
3f7a7e4a 639820000712
c37fb3c1 6399 - (djm) Remove -lresolve for Reliant Unix
3f7a7e4a 6400 - (djm) OpenBSD CVS Updates:
6401 - deraadt@cvs.openbsd.org 2000/07/11 02:11:34
6402 [session.c sshd.c ]
6403 make MaxStartups code still work with -d; djm
6404 - deraadt@cvs.openbsd.org 2000/07/11 13:17:45
6405 [readconf.c ssh_config]
6406 disable FallBackToRsh by default
c37fb3c1 6407 - (djm) Replace in_addr_t with u_int32_t in bsd-inet_aton.c. Report from
6408 Ben Lindstrom <mouring@pconline.com>
1e970014 6409 - (djm) Make building of X11-Askpass and GNOME-Askpass optional in RPM
6410 spec file.
dcb36e5d 6411 - (djm) Released 2.1.1p3
3f7a7e4a 6412
56118702 641320000711
6414 - (djm) Fixup for AIX getuserattr() support from Tom Bertelson
6415 <tbert@abac.com>
132dd316 6416 - (djm) ReliantUNIX support from Udo Schweigert <ust@cert.siemens.de>
bcbf86ec 6417 - (djm) NeXT: dirent structures to get scp working from Ben Lindstrom
c99e5056 6418 <mouring@pconline.com>
bcbf86ec 6419 - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report
dc2a6d09 6420 from Jim Watt <jimw@peisj.pebio.com>
2d9a148e 6421 - (djm) Replaced bsd-snprintf.c with one from Mutt source tree, it is known
6422 to compile on more platforms (incl NeXT).
cc6f2c4c 6423 - (djm) Added bsd-inet_aton and configure support for NeXT
aae19451 6424 - (djm) Misc NeXT fixes from Ben Lindstrom <mouring@pconline.com>
089fbbd2 6425 - (djm) OpenBSD CVS updates:
6426 - markus@cvs.openbsd.org 2000/06/26 03:22:29
6427 [authfd.c]
6428 cleanup, less cut&paste
6429 - markus@cvs.openbsd.org 2000/06/26 15:59:19
6430 [servconf.c servconf.h session.c sshd.8 sshd.c]
bcbf86ec 6431 MaxStartups: limit number of unauthenticated connections, work by
089fbbd2 6432 theo and me
6433 - deraadt@cvs.openbsd.org 2000/07/05 14:18:07
6434 [session.c]
6435 use no_x11_forwarding_flag correctly; provos ok
6436 - provos@cvs.openbsd.org 2000/07/05 15:35:57
6437 [sshd.c]
6438 typo
6439 - aaron@cvs.openbsd.org 2000/07/05 22:06:58
6440 [scp.1 ssh-agent.1 ssh-keygen.1 sshd.8]
bcbf86ec 6441 Insert more missing .El directives. Our troff really should identify
089fbbd2 6442 these and spit out a warning.
6443 - todd@cvs.openbsd.org 2000/07/06 21:55:04
6444 [auth-rsa.c auth2.c ssh-keygen.c]
6445 clean code is good code
6446 - deraadt@cvs.openbsd.org 2000/07/07 02:14:29
6447 [serverloop.c]
6448 sense of port forwarding flag test was backwards
6449 - provos@cvs.openbsd.org 2000/07/08 17:17:31
6450 [compat.c readconf.c]
6451 replace strtok with strsep; from David Young <dyoung@onthejob.net>
6452 - deraadt@cvs.openbsd.org 2000/07/08 19:21:15
6453 [auth.h]
6454 KNF
6455 - ho@cvs.openbsd.org 2000/07/08 19:27:33
6456 [compat.c readconf.c]
6457 Better conditions for strsep() ending.
6458 - ho@cvs.openbsd.org 2000/07/10 10:27:05
6459 [readconf.c]
6460 Get the correct message on errors. (niels@ ok)
6461 - ho@cvs.openbsd.org 2000/07/10 10:30:25
6462 [cipher.c kex.c servconf.c]
6463 strtok() --> strsep(). (niels@ ok)
5540ea9b 6464 - (djm) Fix problem with debug mode and MaxStartups
eb37534b 6465 - (djm) Don't generate host keys when $(DESTDIR) is set (e.g. during RPM
6466 builds)
229f64ee 6467 - (djm) Add strsep function from OpenBSD libc for systems that lack it
56118702 6468
a8545c6c 646920000709
6470 - (djm) Only enable PAM_TTY kludge for Linux. Problem report from
6471 Kevin Steves <stevesk@sweden.hp.com>
ec90a7d6 6472 - (djm) Match prototype and function declaration for rresvport_af.
6473 Problem report from Niklas Edmundsson <nikke@ing.umu.se>
bcbf86ec 6474 - (djm) Missing $(DESTDIR) on host-key target causing problems with RPM
732e8ac5 6475 builds. Problem report from Gregory Leblanc <GLeblanc@cu-portland.edu>
37f1df94 6476 - (djm) Replace ut_name with ut_user. Patch from Jim Watt
6477 <jimw@peisj.pebio.com>
264dce47 6478 - (djm) Fix pam sprintf fix
6479 - (djm) Cleanup entropy collection code a little more. Split initialisation
6480 from seeding, perform intialisation immediatly at start, be careful with
6481 uids. Based on problem report from Jim Watt <jimw@peisj.pebio.com>
5bf9cfe9 6482 - (djm) More NeXT compatibility from Ben Lindstrom <mouring@pconline.com>
6483 Including sigaction() et al. replacements
bcbf86ec 6484 - (djm) AIX getuserattr() session initialisation from Tom Bertelson
eeec075f 6485 <tbert@abac.com>
a8545c6c 6486
e2902a5b 648720000708
bcbf86ec 6488 - (djm) Fix bad fprintf format handling in auth-pam.c. Patch from
e2902a5b 6489 Aaron Hopkins <aaron@die.net>
7a33f831 6490 - (djm) Fix incorrect configure handling of --with-rsh-path option. Fix from
6491 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
bcbf86ec 6492 - (djm) Fixed undefined variables for OSF SIA. Report from
b3f162ba 6493 Baars, Henk <Hendrik.Baars@nl.origin-it.com>
bcbf86ec 6494 - (djm) Handle EWOULDBLOCK returns from read() and write() in atomicio.c
b28e4a3b 6495 Fix from Marquess, Steve Mr JMLFDC <Steve.Marquess@DET.AMEDD.ARMY.MIL>
bcbf86ec 6496 - (djm) Don't use inet_addr.
e2902a5b 6497
5637650d 649820000702
6499 - (djm) Fix brace mismatch from Corinna Vinschen <vinschen@cygnus.com>
27494968 6500 - (djm) Stop shadow expiry checking from preventing logins with NIS. Based
6501 on fix from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
a4070484 6502 - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from
6503 Chris, the Young One <cky@pobox.com>
bcbf86ec 6504 - (djm) Fix scp progress meter on really wide terminals. Based on patch
88726b31 6505 from James H. Cloos Jr. <cloos@jhcloos.com>
5637650d 6506
388e9f9f 650720000701
6508 - (djm) Fix Tru64 SIA problems reported by John P Speno <speno@isc.upenn.edu>
daaff4d5 6509 - (djm) Login fixes from Tom Bertelson <tbert@abac.com>
82258d68 6510 - (djm) Replace "/bin/sh" with _PATH_BSHELL. Report from Corinna Vinschen
6511 <vinschen@cygnus.com>
30228d7c 6512 - (djm) Replace "/usr/bin/login" with LOGIN_PROGRAM
2647ae26 6513 - (djm) Added check for broken snprintf() functions which do not correctly
6514 terminate output string and attempt to use replacement.
46158300 6515 - (djm) Released 2.1.1p2
388e9f9f 6516
9f32ceb4 651720000628
6518 - (djm) Fixes to lastlog code for Irix
6519 - (djm) Use atomicio in loginrec
3206bb3b 6520 - (djm) Patch from Michael Stone <mstone@cs.loyola.edu> to add support for
6521 Irix 6.x array sessions, project id's, and system audit trail id.
9e0c3e1f 6522 - (djm) Added 'distprep' make target to simplify packaging
bcbf86ec 6523 - (djm) Added patch from Chris Adams <cmadams@hiwaay.net> to add OSF SIA
4d33e531 6524 support. Enable using "USE_SIA=1 ./configure [options]"
61e96248 6525
d8caae24 652620000627
6527 - (djm) Fixes to login code - not setting li->uid, cleanups
a05a70ab 6528 - (djm) Formatting
d8caae24 6529
fe30cc2e 653020000626
3e98362e 6531 - (djm) Better fix to aclocal tests from Garrick James <garrick@james.net>
4cb5ffa0 6532 - (djm) Account expiry support from Andreas Steinmetz <ast@domdv.de>
6533 - (djm) Added password expiry checking (no password change support)
be0b9bb7 6534 - (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK
6535 based on patch from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
b5b3f75d 6536 - (djm) Fix fixed EGD code.
3e98362e 6537 - OpenBSD CVS update
6538 - provos@cvs.openbsd.org 2000/06/25 14:17:58
6539 [channels.c]
6540 correct check for bad channel ids; from Wei Dai <weidai@eskimo.com>
6541
1c04b088 654220000623
bcbf86ec 6543 - (djm) Use sa_family_t in prototype for rresvport_af. Patch from
1c04b088 6544 Svante Signell <svante.signell@telia.com>
6545 - (djm) Autoconf logic to define sa_family_t if it is missing
e5a0294f 6546 - OpenBSD CVS Updates:
6547 - markus@cvs.openbsd.org 2000/06/22 10:32:27
6548 [sshd.c]
6549 missing atomicio; report from Steve.Marquess@DET.AMEDD.ARMY.MIL
6550 - djm@cvs.openbsd.org 2000/06/22 17:55:00
6551 [auth-krb4.c key.c radix.c uuencode.c]
6552 Missing CVS idents; ok markus
1c04b088 6553
f528fdf2 655420000622
6555 - (djm) Automatically generate host key during "make install". Suggested
6556 by Gary E. Miller <gem@rellim.com>
6557 - (djm) Paranoia before kill() system call
74fc9186 6558 - OpenBSD CVS Updates:
6559 - markus@cvs.openbsd.org 2000/06/18 18:50:11
6560 [auth2.c compat.c compat.h sshconnect2.c]
6561 make userauth+pubkey interop with ssh.com-2.2.0
6562 - markus@cvs.openbsd.org 2000/06/18 20:56:17
6563 [dsa.c]
6564 mem leak + be more paranoid in dsa_verify.
6565 - markus@cvs.openbsd.org 2000/06/18 21:29:50
6566 [key.c]
6567 cleanup fingerprinting, less hardcoded sizes
6568 - markus@cvs.openbsd.org 2000/06/19 19:39:45
6569 [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
6570 [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h]
bcbf86ec 6571 [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h]
74fc9186 6572 [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h]
6573 [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c]
bcbf86ec 6574 [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c]
6575 [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c]
74fc9186 6576 [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c]
6577 [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h]
6578 OpenBSD tag
6579 - markus@cvs.openbsd.org 2000/06/21 10:46:10
6580 sshconnect2.c missing free; nuke old comment
f528fdf2 6581
e5fe9a1f 658220000620
6583 - (djm) Replace use of '-o' and '-a' logical operators in configure tests
986a22ec 6584 with '||' and '&&'. As suggested by Jim Knoble <jmknoble@jmknoble.cx>
e5fe9a1f 6585 to fix SCO Unixware problem reported by Gary E. Miller <gem@rellim.com>
c03aced4 6586 - (djm) Typo in loginrec.c
e5fe9a1f 6587
cbd7492e 658820000618
6589 - (djm) Add summary of configure options to end of ./configure run
bcbf86ec 6590 - (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from
cbd7492e 6591 Michael Stone <mstone@cs.loyola.edu>
bcbf86ec 6592 - (djm) rusage is a privileged operation on some Unices (incl.
cbd7492e 6593 Solaris 2.5.1). Report from Paul D. Smith <pausmith@nortelnetworks.com>
bcbf86ec 6594 - (djm) Avoid PAM failures when running without a TTY. Report from
cbd7492e 6595 Martin Petrak <petrak@spsknm.schools.sk>
6596 - (djm) Include sys/types.h when including netinet/in.h in configure tests.
6597 Patch from Jun-ichiro itojun Hagino <itojun@iijlab.net>
729bfe59 6598 - (djm) Started merge of Ben Lindstrom's <mouring@pconline.com> NeXT support
38c295d6 6599 - OpenBSD CVS updates:
6600 - deraadt@cvs.openbsd.org 2000/06/17 09:58:46
6601 [channels.c]
6602 everyone says "nix it" (remove protocol 2 debugging message)
6603 - markus@cvs.openbsd.org 2000/06/17 13:24:34
6604 [sshconnect.c]
6605 allow extended server banners
6606 - markus@cvs.openbsd.org 2000/06/17 14:30:10
6607 [sshconnect.c]
6608 missing atomicio, typo
6609 - jakob@cvs.openbsd.org 2000/06/17 16:52:34
6610 [servconf.c servconf.h session.c sshd.8 sshd_config]
6611 add support for ssh v2 subsystems. ok markus@.
6612 - deraadt@cvs.openbsd.org 2000/06/17 18:57:48
6613 [readconf.c servconf.c]
6614 include = in WHITESPACE; markus ok
6615 - markus@cvs.openbsd.org 2000/06/17 19:09:10
6616 [auth2.c]
6617 implement bug compatibility with ssh-2.0.13 pubkey, server side
6618 - markus@cvs.openbsd.org 2000/06/17 21:00:28
6619 [compat.c]
6620 initial support for ssh.com's 2.2.0
6621 - markus@cvs.openbsd.org 2000/06/17 21:16:09
6622 [scp.c]
6623 typo
6624 - markus@cvs.openbsd.org 2000/06/17 22:05:02
6625 [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
6626 split auth-rsa option parsing into auth-options
6627 add options support to authorized_keys2
6628 - markus@cvs.openbsd.org 2000/06/17 22:42:54
6629 [session.c]
6630 typo
cbd7492e 6631
509b1f88 663220000613
6633 - (djm) Fixes from Andrew McGill <andrewm@datrix.co.za>:
6634 - Platform define for SCO 3.x which breaks on /dev/ptmx
6635 - Detect and try to fix missing MAXPATHLEN
a4d05724 6636 - (djm) Fix short copy in loginrec.c (based on patch from Phill Camp
6637 <P.S.S.Camp@ukc.ac.uk>
509b1f88 6638
09564242 663920000612
6640 - (djm) Glob manpages in RPM spec files to catch compressed files
6641 - (djm) Full license in auth-pam.c
08ae384f 6642 - (djm) Configure fixes from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
383207f7 6643 - (andre) AIX, lastlog, configure fixes from Tom Bertelson <tbert@abac.com>:
6644 - Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is
6645 def'd
6646 - Set AIX to use preformatted manpages
61e96248 6647
74b224a0 664820000610
6649 - (djm) Minor doc tweaks
217ab55e 6650 - (djm) Fix for configure on bash2 from Jim Knoble <jmknoble@jmknoble.cx>
74b224a0 6651
32c80420 665220000609
6653 - (djm) Patch from Kenji Miyake <kenji@miyake.org> to disable utmp usage
6654 (in favour of utmpx) on Solaris 8
6655
fa649821 665620000606
48c99b2c 6657 - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through
6658 list of commands (by default). Removed verbose debugging (by default).
bcbf86ec 6659 - (djm) Increased command entropy estimates and default entropy collection
48c99b2c 6660 timeout
f988dce5 6661 - (djm) Remove duplicate headers from loginrec.c
c5fa2eb0 6662 - (djm) Don't add /usr/local/lib to library search path on Irix
bcbf86ec 6663 - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III
fa649821 6664 <tibbs@math.uh.edu>
1e83f2a2 6665 - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg
6666 <zack@wolery.cumb.org>
fa649821 6667 - (djm) OpenBSD CVS updates:
6668 - todd@cvs.openbsd.org
6669 [sshconnect2.c]
6670 teach protocol v2 to count login failures properly and also enable an
6671 explanation of why the password prompt comes up again like v1; this is NOT
6672 crypto
61e96248 6673 - markus@cvs.openbsd.org
fa649821 6674 [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8]
6675 xauth_location support; pr 1234
6676 [readconf.c sshconnect2.c]
6677 typo, unused
6678 [session.c]
6679 allow use_login only for login sessions, otherwise remote commands are
6680 execed with uid==0
6681 [sshd.8]
6682 document UseLogin better
6683 [version.h]
6684 OpenSSH 2.1.1
6685 [auth-rsa.c]
bcbf86ec 6686 fix match_hostname() logic for auth-rsa: deny access if we have a
fa649821 6687 negative match or no match at all
6688 [channels.c hostfile.c match.c]
bcbf86ec 6689 don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via
fa649821 6690 kris@FreeBSD.org
6691
8e7b16f8 669220000606
bcbf86ec 6693 - (djm) Added --with-cflags, --with-ldflags and --with-libs options to
8e7b16f8 6694 configure.
6695
d7c0f3d5 669620000604
6697 - Configure tweaking for new login code on Irix 5.3
2d6c411f 6698 - (andre) login code changes based on djm feedback
d7c0f3d5 6699
2d6c411f 670020000603
6701 - (andre) New login code
6702 - Remove bsd-login.[ch] and all the OpenBSD-derived code in login.c
6703 - Add loginrec.[ch], logintest.c and autoconf code
61e96248 6704
5daf7064 670520000531
6706 - Cleanup of auth.c, login.c and fake-*
6707 - Cleanup of auth-pam.c, save and print "account expired" error messages
e5662474 6708 - Fix EGD read bug by IWAMURO Motonori <iwa@mmp.fujitsu.co.jp>
69134b9b 6709 - Rewrote bsd-login to use proper utmp API if available. Major cleanup
6710 of fallback DIY code.
5daf7064 6711
b9f446d1 671220000530
6713 - Define atexit for old Solaris
b02ebca1 6714 - Fix buffer overrun in login.c for systems which use syslen in utmpx.
6715 patch from YOSHIFUJI Hideaki <yoshfuji@cerberus.nemoto.ecei.tohoku.ac.jp>
71276795 6716 - OpenBSD CVS updates:
6717 - markus@cvs.openbsd.org
6718 [session.c]
6719 make x11-fwd work w/ localhost (xauth add host/unix:11)
6720 [cipher.c compat.c readconf.c servconf.c]
6721 check strtok() != NULL; ok niels@
6722 [key.c]
6723 fix key_read() for uuencoded keys w/o '='
6724 [serverloop.c]
6725 group ssh1 vs. ssh2 in serverloop
6726 [kex.c kex.h myproposal.h sshconnect2.c sshd.c]
6727 split kexinit/kexdh, factor out common code
6728 [readconf.c ssh.1 ssh.c]
6729 forwardagent defaults to no, add ssh -A
6730 - theo@cvs.openbsd.org
6731 [session.c]
6732 just some line shortening
60688ef9 6733 - Released 2.1.0p3
b9f446d1 6734
29611d9c 673520000520
6736 - Xauth fix from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
25422c70 6737 - Don't touch utmp if USE_UTMPX defined
a423beaf 6738 - SunOS 4.x support from Todd C. Miller <Todd.Miller@courtesan.com>
fc1e8bf4 6739 - SIGCHLD fix for AIX and HPUX from Tom Bertelson <tbert@abac.com>
bcbf86ec 6740 - HPUX and Configure fixes from Lutz Jaenicke
fc1e8bf4 6741 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
bcbf86ec 6742 - Use mkinstalldirs script to make directories instead of non-portable
fc1e8bf4 6743 "install -d". Suggested by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
a905808d 6744 - Doc cleanup
29611d9c 6745
301e9b01 674620000518
6747 - Include Andre Lucas' fixprogs script. Forgot to "cvs add" it yesterday
6748 - OpenBSD CVS updates:
6749 - markus@cvs.openbsd.org
6750 [sshconnect.c]
6751 copy only ai_addrlen bytes; misiek@pld.org.pl
6752 [auth.c]
bcbf86ec 6753 accept an empty shell in authentication; bug reported by
301e9b01 6754 chris@tinker.ucr.edu
6755 [serverloop.c]
6756 we don't have stderr for interactive terminal sessions (fcntl errors)
6757
ad85db64 675820000517
6759 - Fix from Andre Lucas <andre.lucas@dial.pipex.com>
6760 - Fixes command line printing segfaults (spotter: Bladt Norbert)
6761 - Fixes erroneous printing of debug messages to syslog
6762 - Fixes utmp for MacOS X (spotter: Aristedes Maniatis)
6763 - Gives useful error message if PRNG initialisation fails
6764 - Reduced ssh startup delay
6765 - Measures cumulative command time rather than the time between reads
704b1659 6766 after select()
ad85db64 6767 - 'fixprogs' perl script to eliminate non-working entropy commands, and
704b1659 6768 optionally run 'ent' to measure command entropy
c1ef8333 6769 - Applied Tom Bertelson's <tbert@abac.com> AIX authentication fix
a64009ad 6770 - Avoid WCOREDUMP complation errors for systems that lack it
bcbf86ec 6771 - Avoid SIGCHLD warnings from entropy commands
28c1d5ce 6772 - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <sxw@dcs.ed.ac.uk>
0e73cc53 6773 - OpenBSD CVS update:
bcbf86ec 6774 - markus@cvs.openbsd.org
0e73cc53 6775 [ssh.c]
6776 fix usage()
6777 [ssh2.h]
6778 draft-ietf-secsh-architecture-05.txt
6779 [ssh.1]
6780 document ssh -T -N (ssh2 only)
6781 [channels.c serverloop.c ssh.h sshconnect.c sshd.c aux.c]
6782 enable nonblocking IO for sshd w/ proto 1, too; split out common code
6783 [aux.c]
6784 missing include
c04f75f1 6785 - Several patches from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
6786 - INSTALL typo and URL fix
6787 - Makefile fix
6788 - Solaris fixes
bcbf86ec 6789 - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka
c04f75f1 6790 <ksakai@kso.netwk.ntt-at.co.jp>
afa5ee68 6791 - RSAless operation patch from kevin_oconnor@standardandpoors.com
d45e3d76 6792 - Detect OpenSSL seperatly from RSA
bcbf86ec 6793 - Better test for RSA (more compatible with RSAref). Based on work by
d45e3d76 6794 Ed Eden <ede370@stl.rural.usda.gov>
ad85db64 6795
3d1a1654 679620000513
bcbf86ec 6797 - Fix for non-recognised DSA keys from Arkadiusz Miskiewicz
3d1a1654 6798 <misiek@pld.org.pl>
6799
d02a3a00 680020000511
bcbf86ec 6801 - Fix for prng_seed permissions checking from Lutz Jaenicke
d02a3a00 6802 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3d1a1654 6803 - "make host-key" fix for Irix
d02a3a00 6804
d0c832f3 680520000509
6806 - OpenBSD CVS update
6807 - markus@cvs.openbsd.org
6808 [cipher.h myproposal.h readconf.c readconf.h servconf.c ssh.1 ssh.c]
6809 [ssh.h sshconnect1.c sshconnect2.c sshd.8]
6810 - complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)
6811 - hugh@cvs.openbsd.org
6812 [ssh.1]
6813 - zap typo
6814 [ssh-keygen.1]
6815 - One last nit fix. (markus approved)
6816 [sshd.8]
6817 - some markus certified spelling adjustments
6818 - markus@cvs.openbsd.org
6819 [auth2.c channels.c clientloop.c compat compat.h dsa.c kex.c]
6820 [sshconnect2.c ]
6821 - bug compat w/ ssh-2.0.13 x11, split out bugs
6822 [nchan.c]
6823 - no drain if ibuf_empty, fixes x11fwd problems; tests by fries@
6824 [ssh-keygen.c]
6825 - handle escapes in real and original key format, ok millert@
6826 [version.h]
6827 - OpenSSH-2.1
3dc1102e 6828 - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.a
e93ee87a 6829 - Doc updates
bcbf86ec 6830 - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported
21e5304a 6831 by Andre Lucas <andre.lucas@dial.pipex.com>
d0c832f3 6832
ebdeb9a8 683320000508
6834 - Makefile and RPM spec fixes
6835 - Generate DSA host keys during "make key" or RPM installs
f6cde515 6836 - OpenBSD CVS update
6837 - markus@cvs.openbsd.org
6838 [clientloop.c sshconnect2.c]
6839 - make x11-fwd interop w/ ssh-2.0.13
6840 [README.openssh2]
6841 - interop w/ SecureFX
6842 - Release 2.0.0beta2
ebdeb9a8 6843
bcbf86ec 6844 - Configure caching and cleanup patch from Andre Lucas'
58d100bf 6845 <andre.lucas@dial.pipex.com>
6846
1d1ffb87 684720000507
6848 - Remove references to SSLeay.
6849 - Big OpenBSD CVS update
6850 - markus@cvs.openbsd.org
6851 [clientloop.c]
6852 - typo
6853 [session.c]
6854 - update proctitle on pty alloc/dealloc, e.g. w/ windows client
6855 [session.c]
6856 - update proctitle for proto 1, too
6857 [channels.h nchan.c serverloop.c session.c sshd.c]
6858 - use c-style comments
6859 - deraadt@cvs.openbsd.org
6860 [scp.c]
6861 - more atomicio
bcbf86ec 6862 - markus@cvs.openbsd.org
1d1ffb87 6863 [channels.c]
6864 - set O_NONBLOCK
6865 [ssh.1]
6866 - update AUTHOR
6867 [readconf.c ssh-keygen.c ssh.h]
6868 - default DSA key file ~/.ssh/id_dsa
6869 [clientloop.c]
6870 - typo, rm verbose debug
6871 - deraadt@cvs.openbsd.org
6872 [ssh-keygen.1]
6873 - document DSA use of ssh-keygen
6874 [sshd.8]
6875 - a start at describing what i understand of the DSA side
6876 [ssh-keygen.1]
6877 - document -X and -x
6878 [ssh-keygen.c]
6879 - simplify usage
bcbf86ec 6880 - markus@cvs.openbsd.org
1d1ffb87 6881 [sshd.8]
6882 - there is no rhosts_dsa
6883 [ssh-keygen.1]
6884 - document -y, update -X,-x
6885 [nchan.c]
6886 - fix close for non-open ssh1 channels
6887 [servconf.c servconf.h ssh.h sshd.8 sshd.c ]
6888 - s/DsaKey/HostDSAKey/, document option
6889 [sshconnect2.c]
6890 - respect number_of_password_prompts
6891 [channels.c channels.h servconf.c servconf.h session.c sshd.8]
6892 - GatewayPorts for sshd, ok deraadt@
6893 [ssh-add.1 ssh-agent.1 ssh.1]
6894 - more doc on: DSA, id_dsa, known_hosts2, authorized_keys2
6895 [ssh.1]
6896 - more info on proto 2
6897 [sshd.8]
6898 - sync AUTHOR w/ ssh.1
6899 [key.c key.h sshconnect.c]
6900 - print key type when talking about host keys
6901 [packet.c]
6902 - clear padding in ssh2
6903 [dsa.c key.c radix.c ssh.h sshconnect1.c uuencode.c uuencode.h]
6904 - replace broken uuencode w/ libc b64_ntop
6905 [auth2.c]
6906 - log failure before sending the reply
6907 [key.c radix.c uuencode.c]
6908 - remote trailing comments before calling __b64_pton
6909 [auth2.c readconf.c readconf.h servconf.c servconf.h ssh.1]
6910 [sshconnect2.c sshd.8]
6911 - add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8
6912 - Bring in b64_ntop and b64_pton from OpenBSD libc (bsd-base64.[ch])
6913
1a11e1ae 691420000502
0fbe8c74 6915 - OpenBSD CVS update
6916 [channels.c]
6917 - init all fds, close all fds.
6918 [sshconnect2.c]
6919 - check whether file exists before asking for passphrase
6920 [servconf.c servconf.h sshd.8 sshd.c]
6921 - PidFile, pr 1210
6922 [channels.c]
6923 - EINTR
6924 [channels.c]
6925 - unbreak, ok niels@
6926 [sshd.c]
6927 - unlink pid file, ok niels@
6928 [auth2.c]
6929 - Add missing #ifdefs; ok - markus
bcbf86ec 6930 - Add Andre Lucas' <andre.lucas@dial.pipex.com> patch to read entropy
d3083fbd 6931 gathering commands from a text file
1a11e1ae 6932 - Release 2.0.0beta1
6933
c4bc58eb 693420000501
6935 - OpenBSD CVS update
6936 [packet.c]
6937 - send debug messages in SSH2 format
3189621b 6938 [scp.c]
6939 - fix very rare EAGAIN/EINTR issues; based on work by djm
6940 [packet.c]
6941 - less debug, rm unused
6942 [auth2.c]
6943 - disable kerb,s/key in ssh2
6944 [sshd.8]
6945 - Minor tweaks and typo fixes.
6946 [ssh-keygen.c]
6947 - Put -d into usage and reorder. markus ok.
bcbf86ec 6948 - Include missing headers for OpenSSL tests. Fix from Phil Karn
44fb55e9 6949 <karn@ka9q.ampr.org>
bcbf86ec 6950 - Fixed __progname symbol collisions reported by Andre Lucas
3fd95d9a 6951 <andre.lucas@dial.pipex.com>
0d5f7abc 6952 - Merged bsd-login ttyslot and AIX utmp patch from Gert Doering
6953 <gd@hilb1.medat.de>
8cb940db 6954 - Add some missing ifdefs to auth2.c
8af50c98 6955 - Deprecate perl-tk askpass.
52bcc044 6956 - Irix portability fixes - don't include netinet headers more than once
6957 - Make sure we don't save PRNG seed more than once
c4bc58eb 6958
2b763e31 695920000430
6960 - Merge HP-UX fixes and TCB support from Ged Lodder <lodder@yacc.com.au>
b7a87eea 6961 - Integrate Andre Lucas' <andre.lucas@dial.pipex.com> entropy collection
6962 patch.
6963 - Adds timeout to entropy collection
6964 - Disables slow entropy sources
6965 - Load and save seed file
bcbf86ec 6966 - Changed entropy seed code to user per-user seeds only (server seed is
b7a87eea 6967 saved in root's .ssh directory)
6968 - Use atexit() and fatal cleanups to save seed on exit
0b242b12 6969 - More OpenBSD updates:
6970 [session.c]
6971 - don't call chan_write_failed() if we are not writing
6972 [auth-rsa.c auth1.c authfd.c hostfile.c ssh-agent.c]
6973 - keysize warnings error() -> log()
2b763e31 6974
a306f2dd 697520000429
6976 - Merge big update to OpenSSH-2.0 from OpenBSD CVS
6977 [README.openssh2]
6978 - interop w/ F-secure windows client
6979 - sync documentation
6980 - ssh_host_dsa_key not ssh_dsa_key
6981 [auth-rsa.c]
6982 - missing fclose
6983 [auth.c authfile.c compat.c dsa.c dsa.h hostfile.c key.c key.h radix.c]
6984 [readconf.c readconf.h ssh-add.c ssh-keygen.c ssh.c ssh.h sshconnect.c]
6985 [sshd.c uuencode.c uuencode.h authfile.h]
6986 - add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX]
6987 for trading keys with the real and the original SSH, directly from the
6988 people who invented the SSH protocol.
6989 [auth.c auth.h authfile.c sshconnect.c auth1.c auth2.c sshconnect.h]
6990 [sshconnect1.c sshconnect2.c]
6991 - split auth/sshconnect in one file per protocol version
6992 [sshconnect2.c]
6993 - remove debug
6994 [uuencode.c]
6995 - add trailing =
6996 [version.h]
6997 - OpenSSH-2.0
6998 [ssh-keygen.1 ssh-keygen.c]
6999 - add -R flag: exit code indicates if RSA is alive
7000 [sshd.c]
7001 - remove unused
7002 silent if -Q is specified
7003 [ssh.h]
7004 - host key becomes /etc/ssh_host_dsa_key
7005 [readconf.c servconf.c ]
7006 - ssh/sshd default to proto 1 and 2
7007 [uuencode.c]
7008 - remove debug
7009 [auth2.c ssh-keygen.c sshconnect2.c sshd.c]
7010 - xfree DSA blobs
7011 [auth2.c serverloop.c session.c]
7012 - cleanup logging for sshd/2, respect PasswordAuth no
7013 [sshconnect2.c]
7014 - less debug, respect .ssh/config
7015 [README.openssh2 channels.c channels.h]
bcbf86ec 7016 - clientloop.c session.c ssh.c
a306f2dd 7017 - support for x11-fwding, client+server
7018
0ac7199f 701920000421
7020 - Merge fix from OpenBSD CVS
7021 [ssh-agent.c]
7022 - Fix memory leak per connection. Report from Andy Spiegl <Andy@Spiegl.de>
7023 via Debian bug #59926
18ba2aab 7024 - Define __progname in session.c if libc doesn't
7025 - Remove indentation on autoconf #include statements to avoid bug in
bcbf86ec 7026 DEC Tru64 compiler. Report and fix from David Del Piero
18ba2aab 7027 <David.DelPiero@qed.qld.gov.au>
0ac7199f 7028
e1b37056 702920000420
bcbf86ec 7030 - Make fixpaths work with perl4, patch from Andre Lucas
e1b37056 7031 <andre.lucas@dial.pipex.com>
9da5c3c9 7032 - Sync with OpenBSD CVS:
7033 [clientloop.c login.c serverloop.c ssh-agent.c ssh.h sshconnect.c sshd.c]
7034 - pid_t
7035 [session.c]
7036 - remove bogus chan_read_failed. this could cause data
7037 corruption (missing data) at end of a SSH2 session.
4e577b89 7038 - Merge fixes from Debian patch from Phil Hands <phil@hands.com>
7039 - Allow setting of PAM service name through CFLAGS (SSHD_PAM_SERVICE)
7040 - Use vhangup to clean up Linux ttys
7041 - Force posix getopt processing on GNU libc systems
371ecff9 7042 - Debian bug #55910 - remove references to ssl(8) manpages
247f1a89 7043 - Debian bug #58031 - ssh_config lies about default cipher
e1b37056 7044
d6f24e45 704520000419
7046 - OpenBSD CVS updates
7047 [channels.c]
7048 - fix pr 1196, listen_port and port_to_connect interchanged
7049 [scp.c]
bcbf86ec 7050 - after completion, replace the progress bar ETA counter with a final
d6f24e45 7051 elapsed time; my idea, aaron wrote the patch
7052 [ssh_config sshd_config]
7053 - show 'Protocol' as an example, ok markus@
7054 [sshd.c]
7055 - missing xfree()
7056 - Add missing header to bsd-misc.c
7057
35484284 705820000416
7059 - Reduce diff against OpenBSD source
bcbf86ec 7060 - All OpenSSL includes are now unconditionally referenced as
35484284 7061 openssl/foo.h
7062 - Pick up formatting changes
7063 - Other minor changed (typecasts, etc) that I missed
7064
6ae2364d 706520000415
7066 - OpenBSD CVS updates.
7067 [ssh.1 ssh.c]
7068 - ssh -2
7069 [auth.c channels.c clientloop.c packet.c packet.h serverloop.c]
7070 [session.c sshconnect.c]
7071 - check payload for (illegal) extra data
7072 [ALL]
7073 whitespace cleanup
7074
c323ac76 707520000413
7076 - INSTALL doc updates
f54651ce 7077 - Merged OpenBSD updates to include paths.
bcbf86ec 7078
a8be9f80 707920000412
7080 - OpenBSD CVS updates:
7081 - [channels.c]
7082 repair x11-fwd
7083 - [sshconnect.c]
7084 fix passwd prompt for ssh2, less debugging output.
7085 - [clientloop.c compat.c dsa.c kex.c sshd.c]
7086 less debugging output
7087 - [kex.c kex.h sshconnect.c sshd.c]
7088 check for reasonable public DH values
7089 - [README.openssh2 cipher.c cipher.h compat.c compat.h readconf.c]
7090 [readconf.h servconf.c servconf.h ssh.c ssh.h sshconnect.c sshd.c]
7091 add Cipher and Protocol options to ssh/sshd, e.g.:
7092 ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers
7093 arcfour,3des-cbc'
7094 - [sshd.c]
7095 print 1.99 only if server supports both
7096
18e92801 709720000408
7098 - Avoid some compiler warnings in fake-get*.c
7099 - Add IPTOS macros for systems which lack them
9d98aaf6 7100 - Only set define entropy collection macros if they are found
e78a59f5 7101 - More large OpenBSD CVS updates:
7102 - [auth.c auth.h servconf.c servconf.h serverloop.c session.c]
7103 [session.h ssh.h sshd.c README.openssh2]
7104 ssh2 server side, see README.openssh2; enable with 'sshd -2'
7105 - [channels.c]
7106 no adjust after close
7107 - [sshd.c compat.c ]
7108 interop w/ latest ssh.com windows client.
61e96248 7109
8ce64345 711020000406
7111 - OpenBSD CVS update:
7112 - [channels.c]
7113 close efd on eof
7114 - [clientloop.c compat.c ssh.c sshconnect.c myproposal.h]
7115 ssh2 client implementation, interops w/ ssh.com and lsh servers.
7116 - [sshconnect.c]
7117 missing free.
7118 - [authfile.c cipher.c cipher.h packet.c sshconnect.c sshd.c]
7119 remove unused argument, split cipher_mask()
7120 - [clientloop.c]
7121 re-order: group ssh1 vs. ssh2
7122 - Make Redhat spec require openssl >= 0.9.5a
7123
e7627112 712420000404
7125 - Add tests for RAND_add function when searching for OpenSSL
7e7327a1 7126 - OpenBSD CVS update:
7127 - [packet.h packet.c]
7128 ssh2 packet format
7129 - [packet.h packet.c nchan2.ms nchan.h compat.h compat.c]
7130 [channels.h channels.c]
7131 channel layer support for ssh2
7132 - [kex.h kex.c hmac.h hmac.c dsa.c dsa.h]
7133 DSA, keyexchange, algorithm agreement for ssh2
6c081128 7134 - Generate manpages before make install not at the end of make all
7135 - Don't seed the rng quite so often
7136 - Always reseed rng when requested
e7627112 7137
bfc9a610 713820000403
7139 - Wrote entropy collection routines for systems that lack /dev/random
7140 and EGD
837c30b8 7141 - Disable tests and typedefs for 64 bit types. They are currently unused.
bfc9a610 7142
7368a6c8 714320000401
7144 - Big OpenBSD CVS update (mainly beginnings of SSH2 infrastructure)
7145 - [auth.c session.c sshd.c auth.h]
7146 split sshd.c -> auth.c session.c sshd.c plus cleanup and goto-removal
7147 - [bufaux.c bufaux.h]
7148 support ssh2 bignums
7149 - [channels.c channels.h clientloop.c sshd.c nchan.c nchan.h packet.c]
7150 [readconf.c ssh.c ssh.h serverloop.c]
7151 replace big switch() with function tables (prepare for ssh2)
7152 - [ssh2.h]
7153 ssh2 message type codes
7154 - [sshd.8]
7155 reorder Xr to avoid cutting
7156 - [serverloop.c]
7157 close(fdin) if fdin != fdout, shutdown otherwise, ok theo@
7158 - [channels.c]
7159 missing close
7160 allow bigger packets
7161 - [cipher.c cipher.h]
7162 support ssh2 ciphers
7163 - [compress.c]
7164 cleanup, less code
7165 - [dispatch.c dispatch.h]
7166 function tables for different message types
7167 - [log-server.c]
7168 do not log() if debuggin to stderr
7169 rename a cpp symbol, to avoid param.h collision
7170 - [mpaux.c]
7171 KNF
7172 - [nchan.c]
7173 sync w/ channels.c
7174
f5238bee 717520000326
7176 - Better tests for OpenSSL w/ RSAref
bcbf86ec 7177 - Added replacement setenv() function from OpenBSD libc. Suggested by
f5238bee 7178 Ben Lindstrom <mouring@pconline.com>
4fe2af09 7179 - OpenBSD CVS update
7180 - [auth-krb4.c]
7181 -Wall
7182 - [auth-rh-rsa.c auth-rsa.c hostfile.c hostfile.h key.c key.h match.c]
7183 [match.h ssh.c ssh.h sshconnect.c sshd.c]
7184 initial support for DSA keys. ok deraadt@, niels@
7185 - [cipher.c cipher.h]
7186 remove unused cipher_attack_detected code
7187 - [scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
7188 Fix some formatting problems I missed before.
7189 - [ssh.1 sshd.8]
7190 fix spelling errors, From: FreeBSD
7191 - [ssh.c]
7192 switch to raw mode only if he _get_ a pty (not if we _want_ a pty).
f5238bee 7193
0024a081 719420000324
7195 - Released 1.2.3
7196
bd499f9e 719720000317
7198 - Clarified --with-default-path option.
7199 - Added -blibpath handling for AIX to work around stupid runtime linking.
7200 Problem elucidated by gshapiro@SENDMAIL.ORG by way of Jim Knoble
986a22ec 7201 <jmknoble@jmknoble.cx>
474b5fef 7202 - Checks for 64 bit int types. Problem report from Mats Fredholm
7203 <matsf@init.se>
610cd5c6 7204 - OpenBSD CVS updates:
bcbf86ec 7205 - [atomicio.c auth-krb4.c bufaux.c channels.c compress.c fingerprint.c]
610cd5c6 7206 [packet.h radix.c rsa.c scp.c ssh-agent.c ssh-keygen.c sshconnect.c]
7207 [sshd.c]
7208 pedantic: signed vs. unsigned, void*-arithm, etc
7209 - [ssh.1 sshd.8]
7210 Various cleanups and standardizations.
bcbf86ec 7211 - Runtime error fix for HPUX from Otmar Stahl
be48d23c 7212 <O.Stahl@lsw.uni-heidelberg.de>
bd499f9e 7213
4696775a 721420000316
bcbf86ec 7215 - Fixed configure not passing LDFLAGS to Solaris. Report from David G.
4696775a 7216 Hesprich <dghespri@sprintparanet.com>
d423d822 7217 - Propogate LD through to Makefile
b7a9ce47 7218 - Doc cleanups
2ba2a610 7219 - Added blurb about "scp: command not found" errors to UPGRADING
4696775a 7220
cb0b7ea4 722120000315
7222 - Fix broken CFLAGS handling during search for OpenSSL. Fixes va_list
7223 problems with gcc/Solaris.
bcbf86ec 7224 - Don't free argument to putenv() after use (in setenv() replacement).
db55a3ea 7225 Report from Seigo Tanimura <tanimura@r.dl.itc.u-tokyo.ac.jp>
bcbf86ec 7226 - Created contrib/ subdirectory. Included helpers from Phil Hands'
13652e52 7227 Debian package, README file and chroot patch from Ricardo Cerqueira
7228 <rmcc@clix.pt>
bcbf86ec 7229 - Moved gnome-ssh-askpass.c to contrib directory and removed config
13652e52 7230 option.
7231 - Slight cleanup to doc files
b14b2ae7 7232 - Configure fix from Bratislav ILICH <bilic@zepter.ru>
cb0b7ea4 7233
a8ed9fd9 723420000314
bcbf86ec 7235 - Include macro for IN6_IS_ADDR_V4MAPPED. Report from
a8ed9fd9 7236 peter@frontierflying.com
84afc958 7237 - Include /usr/local/include and /usr/local/lib for systems that don't
7238 do it themselves
7239 - -R/usr/local/lib for Solaris
7240 - Fix RSAref detection
7241 - Fix IN6_IS_ADDR_V4MAPPED macro
a8ed9fd9 7242
bcf36c78 724320000311
7244 - Detect RSAref
43e48848 7245 - OpenBSD CVS change
7246 [sshd.c]
7247 - disallow guessing of root password
867dbf40 7248 - More configure fixes
80faa19f 7249 - IPv6 workarounds from Hideaki YOSHIFUJI <yoshfuji@ecei.tohoku.ac.jp>
bcf36c78 7250
c8d54615 725120000309
7252 - OpenBSD CVS updates to v1.2.3
704b1659 7253 [ssh.h atomicio.c]
7254 - int atomicio -> ssize_t (for alpha). ok deraadt@
7255 [auth-rsa.c]
7256 - delay MD5 computation until client sends response, free() early, cleanup.
7257 [cipher.c]
7258 - void* -> unsigned char*, ok niels@
7259 [hostfile.c]
7260 - remove unused variable 'len'. fix comments.
7261 - remove unused variable
7262 [log-client.c log-server.c]
7263 - rename a cpp symbol, to avoid param.h collision
7264 [packet.c]
7265 - missing xfree()
7266 - getsockname() requires initialized tolen; andy@guildsoftware.com
7267 - use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
7268 from Holger.Trapp@Informatik.TU-Chemnitz.DE
7269 [pty.c pty.h]
bcbf86ec 7270 - register cleanup for pty earlier. move code for pty-owner handling to
c8d54615 7271 pty.c ok provos@, dugsong@
704b1659 7272 [readconf.c]
7273 - turn off x11-fwd for the client, too.
7274 [rsa.c]
7275 - PKCS#1 padding
7276 [scp.c]
7277 - allow '.' in usernames; from jedgar@fxp.org
7278 [servconf.c]
7279 - typo: ignore_user_known_hosts int->flag; naddy@mips.rhein-neckar.de
7280 - sync with sshd_config
7281 [ssh-keygen.c]
7282 - enable ssh-keygen -l -f ~/.ssh/known_hosts, ok deraadt@
7283 [ssh.1]
7284 - Change invalid 'CHAT' loglevel to 'VERBOSE'
7285 [ssh.c]
7286 - suppress AAAA query host when '-4' is used; from shin@nd.net.fujitsu.co.jp
7287 - turn off x11-fwd for the client, too.
7288 [sshconnect.c]
7289 - missing xfree()
7290 - retry rresvport_af(), too. from sumikawa@ebina.hitachi.co.jp.
7291 - read error vs. "Connection closed by remote host"
7292 [sshd.8]
7293 - ie. -> i.e.,
7294 - do not link to a commercial page..
7295 - sync with sshd_config
7296 [sshd.c]
7297 - no need for poll.h; from bright@wintelcom.net
7298 - log with level log() not fatal() if peer behaves badly.
7299 - don't panic if client behaves strange. ok deraadt@
7300 - make no-port-forwarding for RSA keys deny both -L and -R style fwding
7301 - delay close() of pty until the pty has been chowned back to root
7302 - oops, fix comment, too.
7303 - missing xfree()
7304 - move XAUTHORITY to subdir. ok dugsong@. fixes debian bug #57907, too.
7305 (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907)
bcbf86ec 7306 - register cleanup for pty earlier. move code for pty-owner handling to
704b1659 7307 pty.c ok provos@, dugsong@
7308 - create x11 cookie file
7309 - fix pr 1113, fclose() -> pclose(), todo: remote popen()
7310 - version 1.2.3
c8d54615 7311 - Cleaned up
bcbf86ec 7312 - Removed warning workaround for Linux and devpts filesystems (no longer
d8223847 7313 required after OpenBSD updates)
c8d54615 7314
07055445 731520000308
7316 - Configure fix from Hiroshi Takekawa <takekawa@sr3.t.u-tokyo.ac.jp>
7317
731820000307
7319 - Released 1.2.2p1
7320
9c8c3fc6 732120000305
7322 - Fix DEC compile fix
54096dcc 7323 - Explicitly seed OpenSSL's PRNG before checking rsa_alive()
aa6bd60a 7324 - Check for getpagesize in libucb.a if not found in libc. Fix for old
7325 Solaris from Andre Lucas <andre.lucas@dial.pipex.com>
bcbf86ec 7326 - Check for libwrap if --with-tcp-wrappers option specified. Suggestion
9fc7867e 7327 Mate Wierdl <mw@moni.msci.memphis.edu>
9c8c3fc6 7328
6bf4d066 732920000303
7330 - Added "make host-key" target, Suggestion from Dominik Brettnacher
7331 <domi@saargate.de>
bcbf86ec 7332 - Don't permanently fail on bind() if getaddrinfo has more choices left for
16218745 7333 us. Needed to work around messy IPv6 on Linux. Patch from Arkadiusz
7334 Miskiewicz <misiek@pld.org.pl>
22fa590f 7335 - DEC Unix compile fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
7336 - Manpage fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
6bf4d066 7337
a0391976 733820000302
7339 - Big cleanup of autoconf code
7340 - Rearranged to be a little more logical
7341 - Added -R option for Solaris
7342 - Rewrote OpenSSL detection code. Now uses AC_TRY_RUN with a test program
7343 to detect library and header location _and_ ensure library has proper
7344 RSA support built in (this is a problem with OpenSSL 0.9.5).
817175bc 7345 - Applied pty cleanup patch from markus.friedl@informatik.uni-erlangen.de
0a1718dc 7346 - Avoid warning message with Unix98 ptys
bcbf86ec 7347 - Warning was valid - possible race condition on PTYs. Avoided using
3276571c 7348 platform-specific code.
7349 - Document some common problems
bcbf86ec 7350 - Allow root access to any key. Patch from
81eef326 7351 markus.friedl@informatik.uni-erlangen.de
a0391976 7352
f55afe71 735320000207
7354 - Removed SOCKS code. Will support through a ProxyCommand.
7355
d07d1c58 735620000203
7357 - Fixed SEGVs in authloop, fix from vbzoli@hbrt.hu
d581b7ae 7358 - Add --with-ssl-dir option
d07d1c58 7359
9d5f374b 736020000202
bcbf86ec 7361 - Fix lastlog code for directory based lastlogs. Fix from Josh Durham
9d5f374b 7362 <jmd@aoe.vt.edu>
6b1f3fdb 7363 - Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
bcbf86ec 7364 - Added URLs to Japanese translations of documents by HARUYAMA Seigo
6b1f3fdb 7365 <haruyama@nt.phys.s.u-tokyo.ac.jp>
9d5f374b 7366
bc8c2601 736720000201
7368 - Use socket pairs by default (instead of pipes). Prevents race condition
7369 on several (buggy) OSs. Report and fix from tridge@linuxcare.com
7370
69c76614 737120000127
7372 - Seed OpenSSL's random number generator before generating RSA keypairs
7373 - Split random collector into seperate file
aaf2abd7 7374 - Compile fix from Andre Lucas <andre.lucas@dial.pipex.com>
69c76614 7375
f9507c24 737620000126
7377 - Released 1.2.2 stable
7378
bcbf86ec 7379 - NeXT keeps it lastlog in /usr/adm. Report from
f9507c24 7380 mouring@newton.pconline.com
bcbf86ec 7381 - Added note in UPGRADING re interop with commercial SSH using idea.
986a22ec 7382 Report from Jim Knoble <jmknoble@jmknoble.cx>
587120ad 7383 - Fix linking order for Kerberos/AFS. Fix from Holget Trapp
7384 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
f9507c24 7385
bfae20ad 738620000125
bcbf86ec 7387 - Fix NULL pointer dereference in login.c. Fix from Andre Lucas
bfae20ad 7388 <andre.lucas@dial.pipex.com>
07b0cb78 7389 - Reorder PAM initialisation so it does not mess up lastlog. Reported
7390 by Andre Lucas <andre.lucas@dial.pipex.com>
bcbf86ec 7391 - Use preformatted manpages on SCO, report from Gary E. Miller
9755cbdb 7392 <gem@rellim.com>
7393 - New URL for x11-ssh-askpass.
bcbf86ec 7394 - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble
986a22ec 7395 <jmknoble@jmknoble.cx>
bcbf86ec 7396 - Added 'DESTDIR' option to Makefile to ease package building. Patch from
986a22ec 7397 Jim Knoble <jmknoble@jmknoble.cx>
ff8ecdb8 7398 - Updated RPM spec files to use DESTDIR
bfae20ad 7399
bb58aa4b 740020000124
7401 - Pick up version 1.2.2 from OpenBSD CVS (no changes, just version number
7402 increment)
7403
d45317d8 740420000123
7405 - OpenBSD CVS:
7406 - [packet.c]
7407 getsockname() requires initialized tolen; andy@guildsoftware.com
bcbf86ec 7408 - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin
4c40f834 7409 <drankin@bohemians.lexington.ky.us>
12aa90af 7410 - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com>
d45317d8 7411
e844f761 741220000122
7413 - Fix compilation of bsd-snprintf.c on Solaris, fix from Ben Taylor
7414 <bent@clark.net>
c54a6257 7415 - Merge preformatted manpage patch from Andre Lucas
7416 <andre.lucas@dial.pipex.com>
8eb34e02 7417 - Make IPv4 use the default in RPM packages
7418 - Irix uses preformatted manpages
1e64903d 7419 - Missing htons() in bsd-bindresvport.c, fix from Holger Trapp
7420 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
9bc5ddfe 7421 - OpenBSD CVS updates:
7422 - [packet.c]
7423 use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
7424 from Holger.Trapp@Informatik.TU-Chemnitz.DE
7425 - [sshd.c]
7426 log with level log() not fatal() if peer behaves badly.
7427 - [readpass.c]
bcbf86ec 7428 instead of blocking SIGINT, catch it ourselves, so that we can clean
7429 the tty modes up and kill ourselves -- instead of our process group
61e96248 7430 leader (scp, cvs, ...) going away and leaving us in noecho mode.
9bc5ddfe 7431 people with cbreak shells never even noticed..
399d9d44 7432 - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
7433 ie. -> i.e.,
e844f761 7434
4c8ef3fb 743520000120
7436 - Don't use getaddrinfo on AIX
7b2ea3a1 7437 - Update to latest OpenBSD CVS:
7438 - [auth-rsa.c]
7439 - fix user/1056, sshd keeps restrictions; dbt@meat.net
7440 - [sshconnect.c]
7441 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
7442 - destroy keys earlier
bcbf86ec 7443 - split key exchange (kex) and user authentication (user-auth),
d468fc76 7444 ok: provos@
7b2ea3a1 7445 - [sshd.c]
7446 - no need for poll.h; from bright@wintelcom.net
7447 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
bcbf86ec 7448 - split key exchange (kex) and user authentication (user-auth),
d468fc76 7449 ok: provos@
f3bba493 7450 - Big manpage and config file cleanup from Andre Lucas
7451 <andre.lucas@dial.pipex.com>
5f4fdfae 7452 - Re-added latest (unmodified) OpenBSD manpages
47f9a56a 7453 - Doc updates
d468fc76 7454 - NetBSD patch from David Rankin <drankin@bohemians.lexington.ky.us> and
7455 Christos Zoulas <christos@netbsd.org>
4c8ef3fb 7456
082bbfb3 745720000119
20af321f 7458 - SCO compile fixes from Gary E. Miller <gem@rellim.com>
082bbfb3 7459 - Compile fix from Darren_Hall@progressive.com
59e76f33 7460 - Linux/glibc-2.1.2 takes a *long* time to look up names for AF_UNSPEC
7461 addresses using getaddrinfo(). Added a configure switch to make the
7462 default lookup mode AF_INET
082bbfb3 7463
a63a7f37 746420000118
7465 - Fixed --with-pid-dir option
51a6baf8 7466 - Makefile fix from Gary E. Miller <gem@rellim.com>
61e96248 7467 - Compile fix for HPUX and Solaris from Andre Lucas
976f7e19 7468 <andre.lucas@dial.pipex.com>
a63a7f37 7469
f914c7fb 747020000117
7471 - Clean up bsd-bindresvport.c. Use arc4random() for picking initial
7472 port, ignore EINVAL errors (Linux) when searching for free port.
bcbf86ec 7473 - Revert __snprintf -> snprintf aliasing. Apparently Solaris
de93b046 7474 __snprintf isn't. Report from Theo de Raadt <theo@cvs.openbsd.org>
9b363e1c 7475 - Document location of Redhat PAM file in INSTALL.
bcbf86ec 7476 - Fixed X11 forwarding bug on Linux. libc advertises AF_INET6
7477 INADDR_ANY_INIT addresses via getaddrinfo, but may not be able to
f4a7cf29 7478 deliver (no IPv6 kernel support)
80a44451 7479 - Released 1.2.1pre27
f914c7fb 7480
f4a7cf29 7481 - Fix rresvport_af failure errors (logic error in bsd-bindresvport.c)
bcbf86ec 7482 - Fix --with-ipaddr-display option test. Fix from Jarno Huuskonen
cf8ad170 7483 <jhuuskon@hytti.uku.fi>
bcbf86ec 7484 - Fix hang on logout if processes are still using the pty. Needs
691a8a9f 7485 further testing.
5957fd29 7486 - Patch from Christos Zoulas <christos@zoulas.com>
7487 - Try $prefix first when looking for OpenSSL.
7488 - Include sys/types.h when including sys/socket.h in test programs
bcbf86ec 7489 - Substitute PID directory in sshd.8. Suggestion from Andrew
19d9ac2a 7490 Stribblehill <a.d.stribblehill@durham.ac.uk>
f4a7cf29 7491
47e45e44 749220000116
7493 - Renamed --with-xauth-path to --with-xauth
7494 - Added --with-pid-dir option
7495 - Released 1.2.1pre26
7496
a82ef8ae 7497 - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
bcbf86ec 7498 - Fixed broken bugfix for /dev/ptmx on Linux systems which lack
66be05a1 7499 openpty(). Report from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
a82ef8ae 7500
5cdfe03f 750120000115
7502 - Add --with-xauth-path configure directive and explicit test for
bcbf86ec 7503 /usr/openwin/bin/xauth for Solaris systems. Report from Anders
5cdfe03f 7504 Nordby <anders@fix.no>
bcbf86ec 7505 - Fix incorrect detection of /dev/ptmx on Linux systems that lack
5cdfe03f 7506 openpty. Report from John Seifarth <john@waw.be>
7507 - Look for intXX_t and u_intXX_t in sys/bitypes.h if they are not in
bcbf86ec 7508 sys/types.h. Fixes problems on SCO, report from Gary E. Miller
5cdfe03f 7509 <gem@rellim.com>
7510 - Use __snprintf and __vnsprintf if they are found where snprintf and
7511 vnsprintf are lacking. Suggested by Ben Taylor <bent@shell.clark.net>
7512 and others.
7513
48e671d5 751420000114
7515 - Merged OpenBSD IPv6 patch:
7516 - [sshd.c sshd.8 sshconnect.c ssh.h ssh.c servconf.h servconf.c scp.1]
7517 [scp.c packet.h packet.c login.c log.c canohost.c channels.c]
7518 [hostfile.c sshd_config]
7519 ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new
bcbf86ec 7520 features: sshd allows multiple ListenAddress and Port options. note
7521 that libwrap is not IPv6-ready. (based on patches from
48e671d5 7522 fujiwara@rcac.tdi.co.jp)
7523 - [ssh.c canohost.c]
bcbf86ec 7524 more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo,
48e671d5 7525 from itojun@
7526 - [channels.c]
7527 listen on _all_ interfaces for X11-Fwd (hints.ai_flags = AI_PASSIVE)
7528 - [packet.h]
7529 allow auth-kerberos for IPv4 only
7530 - [scp.1 sshd.8 servconf.h scp.c]
7531 document -4, -6, and 'ssh -L 2022/::1/22'
7532 - [ssh.c]
bcbf86ec 7533 'ssh @host' is illegal (null user name), from
48e671d5 7534 karsten@gedankenpolizei.de
7535 - [sshconnect.c]
7536 better error message
7537 - [sshd.c]
7538 allow auth-kerberos for IPv4 only
7539 - Big IPv6 merge:
7540 - Cleanup overrun in sockaddr copying on RHL 6.1
7541 - Replacements for getaddrinfo, getnameinfo, etc based on versions
7542 from patch from KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>
7543 - Replacement for missing structures on systems that lack IPv6
7544 - record_login needed to know about AF_INET6 addresses
7545 - Borrowed more code from OpenBSD: rresvport_af and requisites
7546
2598df62 754720000110
7548 - Fixes to auth-skey to enable it to use the standard OpenSSL libraries
7549
b8a0310d 755020000107
7551 - New config.sub and config.guess to fix problems on SCO. Supplied
7552 by Gary E. Miller <gem@rellim.com>
b6a98a85 7553 - SCO build fix from Gary E. Miller <gem@rellim.com>
2598df62 7554 - Released 1.2.1pre25
b8a0310d 7555
dfb95100 755620000106
7557 - Documentation update & cleanup
7558 - Better KrbIV / AFS detection, based on patch from:
7559 Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
7560
b9795b89 756120000105
bcbf86ec 7562 - Fixed annoying DES corruption problem. libcrypt has been
b9795b89 7563 overriding symbols in libcrypto. Removed libcrypt and crypt.h
7564 altogether (libcrypto includes its own crypt(1) replacement)
7565 - Added platform-specific rules for Irix 6.x. Included warning that
7566 they are untested.
7567
a1ec4d79 756820000103
7569 - Add explicit make rules for files proccessed by fixpaths.
61e96248 7570 - Fix "make install" in RPM spec files. Report from Tenkou N. Hattori
a1ec4d79 7571 <tnh@kondara.org>
bcbf86ec 7572 - Removed "nullok" directive from default PAM configuration files.
7573 Added information on enabling EmptyPasswords on openssh+PAM in
607d73e6 7574 UPGRADING file.
e02735bb 7575 - OpenBSD CVS updates
7576 - [ssh-agent.c]
bcbf86ec 7577 cleanup_exit() for SIGTERM/SIGHUP, too. from fgsch@ and
e02735bb 7578 dgaudet@arctic.org
7579 - [sshconnect.c]
7580 compare correct version for 1.3 compat mode
a1ec4d79 7581
93c7f644 758220000102
7583 - Prevent multiple inclusion of config.h and defines.h. Suggested
7584 by Andre Lucas <andre.lucas@dial.pipex.com>
7585 - Properly clean up on exit of ssh-agent. Patch from Dean Gaudet
7586 <dgaudet@arctic.org>
7587
76b8607f 758819991231
bcbf86ec 7589 - Fix password support on systems with a mixture of shadowed and
7590 non-shadowed passwords (e.g. NIS). Report and fix from
76b8607f 7591 HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
bcbf86ec 7592 - Fix broken autoconf typedef detection. Report from Marc G.
723221b5 7593 Fournier <marc.fournier@acadiau.ca>
b92964b7 7594 - Fix occasional crash on LinuxPPC. Patch from Franz Sirl
7595 <Franz.Sirl-kernel@lauterbach.com>
bcbf86ec 7596 - Prevent typedefs from being compiled more than once. Report from
a6ddc88b 7597 Marc G. Fournier <marc.fournier@acadiau.ca>
4811cc0b 7598 - Fill in ut_utaddr utmp field. Report from Benjamin Charron
7599 <iretd@bigfoot.com>
bcbf86ec 7600 - Really fix broken default path. Fix from Jim Knoble
986a22ec 7601 <jmknoble@jmknoble.cx>
ae3a3d31 7602 - Remove test for quad_t. No longer needed.
76a8e733 7603 - Released 1.2.1pre24
7604
7605 - Added support for directory-based lastlogs
7606 - Really fix typedefs, patch from Ben Taylor <bent@clark.net>
76b8607f 7607
13f825f4 760819991230
7609 - OpenBSD CVS updates:
7610 - [auth-passwd.c]
7611 check for NULL 1st
bcbf86ec 7612 - Removed most of the pam code into its own file auth-pam.[ch]. This
a5c9cd31 7613 cleaned up sshd.c up significantly.
bcbf86ec 7614 - PAM authentication was incorrectly interpreting
76b8607f 7615 "PermitRootLogin without-password". Report from Matthias Andree
7616 <ma@dt.e-technik.uni-dortmund.de
a5c9cd31 7617 - Several other cleanups
0bc5b6fb 7618 - Merged Dante SOCKS support patch from David Rankin
7619 <drankin@bohemians.lexington.ky.us>
7620 - Updated documentation with ./configure options
76b8607f 7621 - Released 1.2.1pre23
13f825f4 7622
c73a0cb5 762319991229
bcbf86ec 7624 - Applied another NetBSD portability patch from David Rankin
c73a0cb5 7625 <drankin@bohemians.lexington.ky.us>
7626 - Fix --with-default-path option.
bcbf86ec 7627 - Autodetect perl, patch from David Rankin
a0f84251 7628 <drankin@bohemians.lexington.ky.us>
bcbf86ec 7629 - Print whether OpenSSH was compiled with RSARef, patch from
0a2ff95d 7630 Nalin Dahyabhai <nalin@thermo.stat.ncsu.edu>
bcbf86ec 7631 - Calls to pam_setcred, patch from Nalin Dahyabhai
f91bacbd 7632 <nalin@thermo.stat.ncsu.edu>
e3a93db0 7633 - Detect missing size_t and typedef it.
5ab44a92 7634 - Rename helper.[ch] to (more appropriate) bsd-misc.[ch]
7635 - Minor Makefile cleaning
c73a0cb5 7636
b6019d68 763719991228
7638 - Replacement for getpagesize() for systems which lack it
bcbf86ec 7639 - NetBSD login.c compile fix from David Rankin
70e0115b 7640 <drankin@bohemians.lexington.ky.us>
7641 - Fully set ut_tv if present in utmp or utmpx
d94aa2ae 7642 - Portability fixes for Irix 5.3 (now compiles OK!)
7643 - autoconf and other misc cleanups
ea1970a3 7644 - Merged AIX patch from Darren Hall <dhall@virage.org>
7645 - Cleaned up defines.h
fa9a2dd6 7646 - Released 1.2.1pre22
b6019d68 7647
d2dcff5f 764819991227
7649 - Automatically correct paths in manpages and configuration files. Patch
7650 and script from Andre Lucas <andre.lucas@dial.pipex.com>
7651 - Removed credits from README to CREDITS file, updated.
cb807f40 7652 - Added --with-default-path to specify custom path for server
7653 - Removed #ifdef trickery from acconfig.h into defines.h
36a5b38e 7654 - PAM bugfix. PermitEmptyPassword was being ignored.
7655 - Fixed PAM config files to allow empty passwords if server does.
7656 - Explained spurious PAM auth warning workaround in UPGRADING
21feb5fa 7657 - Use last few chars of tty line as ut_id
5a7794be 7658 - New SuSE RPM spec file from Chris Saia <csaia@wtower.com>
00e6dd70 7659 - OpenBSD CVS updates:
7660 - [packet.h auth-rhosts.c]
7661 check format string for packet_disconnect and packet_send_debug, too
7662 - [channels.c]
7663 use packet_get_maxsize for channels. consistence.
d2dcff5f 7664
f74efc8d 766519991226
7666 - Enabled utmpx support by default for Solaris
7667 - Cleanup sshd.c PAM a little more
986a22ec 7668 - Revised RPM package to include Jim Knoble's <jmknoble@jmknoble.cx>
bc7ea646 7669 X11 ssh-askpass program.
20c43d8c 7670 - Disable logging of PAM success and failures, PAM is verbose enough.
bcbf86ec 7671 Unfortunatly there is currently no way to disable auth failure
7672 messages. Mention this in UPGRADING file and sent message to PAM
20c43d8c 7673 developers
83b7f649 7674 - OpenBSD CVS update:
7675 - [ssh-keygen.1 ssh.1]
bcbf86ec 7676 remove ref to .ssh/random_seed, mention .ssh/environment in
83b7f649 7677 .Sh FILES, too
72251cb6 7678 - Released 1.2.1pre21
bcbf86ec 7679 - Fixed implicit '.' in default path, report from Jim Knoble
986a22ec 7680 <jmknoble@jmknoble.cx>
7681 - Redhat RPM spec fixes from Jim Knoble <jmknoble@jmknoble.cx>
f74efc8d 7682
f498ed15 768319991225
7684 - More fixes from Andre Lucas <andre.lucas@dial.pipex.com>
7685 - Cleanup of auth-passwd.c for shadow and MD5 passwords
7686 - Cleanup and bugfix of PAM authentication code
f74efc8d 7687 - Released 1.2.1pre20
7688
7689 - Merged fixes from Ben Taylor <bent@clark.net>
7690 - Fixed configure support for PAM. Reported by Naz <96na@eng.cam.ac.uk>
7691 - Disabled logging of PAM password authentication failures when password
7692 is empty. (e.g start of authentication loop). Reported by Naz
7693 <96na@eng.cam.ac.uk>)
f498ed15 7694
769519991223
bcbf86ec 7696 - Merged later HPUX patch from Andre Lucas
f498ed15 7697 <andre.lucas@dial.pipex.com>
7698 - Above patch included better utmpx support from Ben Taylor
f74efc8d 7699 <bent@clark.net>
f498ed15 7700
eef6f7e9 770119991222
bcbf86ec 7702 - Fix undefined fd_set type in ssh.h from Povl H. Pedersen
eef6f7e9 7703 <pope@netguide.dk>
ae28776a 7704 - Fix login.c breakage on systems which lack ut_host in struct
7705 utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com>
eef6f7e9 7706
a7effaac 770719991221
bcbf86ec 7708 - Integration of large HPUX patch from Andre Lucas
7709 <andre.lucas@dial.pipex.com>. Integrating it had a few other
a7effaac 7710 benefits:
7711 - Ability to disable shadow passwords at configure time
7712 - Ability to disable lastlog support at configure time
7713 - Support for IP address in $DISPLAY
ae2f7af7 7714 - OpenBSD CVS update:
7715 - [sshconnect.c]
7716 say "REMOTE HOST IDENTIFICATION HAS CHANGED"
59dd7a31 7717 - Fix DISABLE_SHADOW support
7718 - Allow MD5 passwords even if shadow passwords are disabled
16034de9 7719 - Release 1.2.1pre19
a7effaac 7720
3f1d9bcd 772119991218
bcbf86ec 7722 - Redhat init script patch from Chun-Chung Chen
3f1d9bcd 7723 <cjj@u.washington.edu>
7e1c2490 7724 - Avoid breakage on systems without IPv6 headers
3f1d9bcd 7725
60d804c8 772619991216
bcbf86ec 7727 - Makefile changes for Solaris from Peter Kocks
60d804c8 7728 <peter.kocks@baygate.com>
89cafde6 7729 - Minor updates to docs
7730 - Merged OpenBSD CVS changes:
7731 - [authfd.c ssh-agent.c]
7732 keysize warnings talk about identity files
7733 - [packet.c]
7734 "Connection closed by x.x.x.x": fatal() -> log()
bcbf86ec 7735 - Correctly handle empty passwords in shadow file. Patch from:
c9d323f0 7736 "Chris, the Young One" <cky@pobox.com>
7737 - Released 1.2.1pre18
60d804c8 7738
7dc6fc6d 773919991215
7740 - Integrated patchs from Juergen Keil <jk@tools.de>
7741 - Avoid void* pointer arithmatic
7742 - Use LDFLAGS correctly
68227e6d 7743 - Fix SIGIO error in scp
7744 - Simplify status line printing in scp
61e96248 7745 - Added better test for inline functions compiler support from
906a2515 7746 Darren_Hall@progressive.com
7dc6fc6d 7747
95f1eccc 774819991214
7749 - OpenBSD CVS Changes
7750 - [canohost.c]
bcbf86ec 7751 fix get_remote_port() and friends for sshd -i;
95f1eccc 7752 Holger.Trapp@Informatik.TU-Chemnitz.DE
7753 - [mpaux.c]
7754 make code simpler. no need for memcpy. niels@ ok
7755 - [pty.c]
7756 namebuflen not sizeof namebuflen; bnd@ep-ag.com via djm@mindrot.org
7757 fix proto; markus
7758 - [ssh.1]
7759 typo; mark.baushke@solipsa.com
7760 - [channels.c ssh.c ssh.h sshd.c]
7761 type conflict for 'extern Type *options' in channels.c; dot@dotat.at
7762 - [sshconnect.c]
7763 move checking of hostkey into own function.
7764 - [version.h]
7765 OpenSSH-1.2.1
884bcb37 7766 - Clean up broken includes in pty.c
7303768f 7767 - Some older systems don't have poll.h, they use sys/poll.h instead
7768 - Doc updates
95f1eccc 7769
847e8865 777019991211
bcbf86ec 7771 - Fix compilation on systems with AFS. Reported by
847e8865 7772 aloomis@glue.umd.edu
bcbf86ec 7773 - Fix installation on Solaris. Reported by
847e8865 7774 Gordon Rowell <gordonr@gormand.com.au>
7775 - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com,
7776 patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
7777 - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com>
7778 - Compile fix from David Agraz <dagraz@jahoopa.com>
7779 - Avoid compiler warning in bsd-snprintf.c
bcbf86ec 7780 - Added pam_limits.so to default PAM config. Suggested by
986a22ec 7781 Jim Knoble <jmknoble@jmknoble.cx>
847e8865 7782
8946db53 778319991209
7784 - Import of patch from Ben Taylor <bent@clark.net>:
7785 - Improved PAM support
7786 - "uninstall" rule for Makefile
7787 - utmpx support
7788 - Should fix PAM problems on Solaris
2d86a6cc 7789 - OpenBSD CVS updates:
7790 - [readpass.c]
7791 avoid stdio; based on work by markus, millert, and I
7792 - [sshd.c]
7793 make sure the client selects a supported cipher
7794 - [sshd.c]
bcbf86ec 7795 fix sighup handling. accept would just restart and daemon handled
7796 sighup only after the next connection was accepted. use poll on
2d86a6cc 7797 listen sock now.
7798 - [sshd.c]
7799 make that a fatal
87e91331 7800 - Applied patch from David Rankin <drankin@bohemians.lexington.ky.us>
7801 to fix libwrap support on NetBSD
5001b9e4 7802 - Released 1.2pre17
8946db53 7803
6d8c4ea4 780419991208
bcbf86ec 7805 - Compile fix for Solaris with /dev/ptmx from
6d8c4ea4 7806 David Agraz <dagraz@jahoopa.com>
7807
4285816a 780819991207
986a22ec 7809 - sshd Redhat init script patch from Jim Knoble <jmknoble@jmknoble.cx>
4285816a 7810 fixes compatability with 4.x and 5.x
db28aeb5 7811 - Fixed default SSH_ASKPASS
bcbf86ec 7812 - Fix PAM account and session being called multiple times. Problem
d465f2ca 7813 reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>
a408af76 7814 - Merged more OpenBSD changes:
7815 - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c]
bcbf86ec 7816 move atomicio into it's own file. wrap all socket write()s which
a408af76 7817 were doing write(sock, buf, len) != len, with atomicio() calls.
7818 - [auth-skey.c]
7819 fd leak
7820 - [authfile.c]
7821 properly name fd variable
7822 - [channels.c]
7823 display great hatred towards strcpy
7824 - [pty.c pty.h sshd.c]
7825 use openpty() if it exists (it does on BSD4_4)
7826 - [tildexpand.c]
7827 check for ~ expansion past MAXPATHLEN
7828 - Modified helper.c to use new atomicio function.
7829 - Reformat Makefile a little
7830 - Moved RC4 routines from rc4.[ch] into helper.c
7831 - Added autoconf code to detect /dev/ptmx (Solaris) and /dev/ptc (AIX)
9983a8ca 7832 - Updated SuSE spec from Chris Saia <csaia@wtower.com>
7833 - Tweaked Redhat spec
9158d92f 7834 - Clean up bad imports of a few files (forgot -kb)
7835 - Released 1.2pre16
4285816a 7836
9c7b6dfd 783719991204
7838 - Small cleanup of PAM code in sshd.c
57112b5a 7839 - Merged OpenBSD CVS changes:
7840 - [auth-krb4.c auth-passwd.c auth-skey.c ssh.h]
7841 move skey-auth from auth-passwd.c to auth-skey.c, same for krb4
7842 - [auth-rsa.c]
7843 warn only about mismatch if key is _used_
7844 warn about keysize-mismatch with log() not error()
7845 channels.c readconf.c readconf.h ssh.c ssh.h sshconnect.c
7846 ports are u_short
7847 - [hostfile.c]
7848 indent, shorter warning
7849 - [nchan.c]
7850 use error() for internal errors
7851 - [packet.c]
7852 set loglevel for SSH_MSG_DISCONNECT to log(), not fatal()
7853 serverloop.c
7854 indent
7855 - [ssh-add.1 ssh-add.c ssh.h]
7856 document $SSH_ASKPASS, reasonable default
7857 - [ssh.1]
7858 CheckHostIP is not available for connects via proxy command
7859 - [sshconnect.c]
7860 typo
7861 easier to read client code for passwd and skey auth
7862 turn of checkhostip for proxy connects, since we don't know the remote ip
9c7b6dfd 7863
dad3b556 786419991126
7865 - Add definition for __P()
7866 - Added [v]snprintf() replacement for systems that lack it
7867
0ce43ae4 786819991125
7869 - More reformatting merged from OpenBSD CVS
7870 - Merged OpenBSD CVS changes:
7871 - [channels.c]
7872 fix packet_integrity_check() for !have_hostname_in_open.
7873 report from mrwizard@psu.edu via djm@ibs.com.au
7874 - [channels.c]
7875 set SO_REUSEADDR and SO_LINGER for forwarded ports.
7876 chip@valinux.com via damien@ibs.com.au
7877 - [nchan.c]
7878 it's not an error() if shutdown_write failes in nchan.
7879 - [readconf.c]
7880 remove dead #ifdef-0-code
7881 - [readconf.c servconf.c]
7882 strcasecmp instead of tolower
7883 - [scp.c]
7884 progress meter overflow fix from damien@ibs.com.au
7885 - [ssh-add.1 ssh-add.c]
7886 SSH_ASKPASS support
7887 - [ssh.1 ssh.c]
7888 postpone fork_after_authentication until command execution,
7889 request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
7890 plus: use daemon() for backgrounding
cf8dd513 7891 - Added BSD compatible install program and autoconf test, thanks to
7892 Niels Kristian Bech Jensen <nkbj@image.dk>
7893 - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
09041313 7894 - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
3dbefdb8 7895 - Release 1.2pre15
0ce43ae4 7896
5260325f 789719991124
7898 - Merged very large OpenBSD source code reformat
7899 - OpenBSD CVS updates
7900 - [channels.c cipher.c compat.c log-client.c scp.c serverloop.c]
7901 [ssh.h sshd.8 sshd.c]
7902 syslog changes:
7903 * Unified Logmessage for all auth-types, for success and for failed
7904 * Standard connections get only ONE line in the LOG when level==LOG:
7905 Auth-attempts are logged only, if authentication is:
7906 a) successfull or
7907 b) with passwd or
7908 c) we had more than AUTH_FAIL_LOG failues
7909 * many log() became verbose()
7910 * old behaviour with level=VERBOSE
7911 - [readconf.c readconf.h ssh.1 ssh.h sshconnect.c sshd.c]
7912 tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
7913 messages. allows use of s/key in windows (ttssh, securecrt) and
7914 ssh-1.2.27 clients without 'ssh -v', ok: niels@
7915 - [sshd.8]
7916 -V, for fallback to openssh in SSH2 compatibility mode
7917 - [sshd.c]
7918 fix sigchld race; cjc5@po.cwru.edu
7919
4655fe80 792019991123
7921 - Added SuSE package files from Chris Saia <csaia@wtower.com>
8b241e50 7922 - Restructured package-related files under packages/*
4655fe80 7923 - Added generic PAM config
8b241e50 7924 - Numerous little Solaris fixes
9c08d6ce 7925 - Add recommendation to use GNU make to INSTALL document
4655fe80 7926
60bed5fd 792719991122
7928 - Make <enter> close gnome-ssh-askpass (Debian bug #50299)
2f2cc3f9 7929 - OpenBSD CVS Changes
bcbf86ec 7930 - [ssh-keygen.c]
7931 don't create ~/.ssh only if the user wants to store the private
7932 key there. show fingerprint instead of public-key after
2f2cc3f9 7933 keygeneration. ok niels@
b09a984b 7934 - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h
96ad4350 7935 - Added timersub() macro
b09a984b 7936 - Tidy RCSIDs of bsd-*.c
bcbf86ec 7937 - Added autoconf test and macro to deal with old PAM libraries
96ad4350 7938 pam_strerror definition (one arg vs two).
530f1889 7939 - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>)
bcbf86ec 7940 - Retry /dev/urandom reads interrupted by signal (report from
530f1889 7941 Robert Hardy <rhardy@webcon.net>)
1647c2b5 7942 - Added a setenv replacement for systems which lack it
d84a9a44 7943 - Only display public key comment when presenting ssh-askpass dialog
7944 - Released 1.2pre14
60bed5fd 7945
bcbf86ec 7946 - Configure, Make and changelog corrections from Tudor Bosman
2ddcfdf3 7947 <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk>
7948
9d6b7add 794919991121
2f2cc3f9 7950 - OpenBSD CVS Changes:
60bed5fd 7951 - [channels.c]
7952 make this compile, bad markus
7953 - [log.c readconf.c servconf.c ssh.h]
7954 bugfix: loglevels are per host in clientconfig,
7955 factor out common log-level parsing code.
7956 - [servconf.c]
7957 remove unused index (-Wall)
7958 - [ssh-agent.c]
7959 only one 'extern char *__progname'
7960 - [sshd.8]
7961 document SIGHUP, -Q to synopsis
7962 - [sshconnect.c serverloop.c sshd.c packet.c packet.h]
7963 [channels.c clientloop.c]
7964 SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
7965 [hope this time my ISP stays alive during commit]
7966 - [OVERVIEW README] typos; green@freebsd
7967 - [ssh-keygen.c]
7968 replace xstrdup+strcat with strlcat+fixed buffer, fixes OF (bad me)
7969 exit if writing the key fails (no infinit loop)
7970 print usage() everytime we get bad options
7971 - [ssh-keygen.c] overflow, djm@mindrot.org
7972 - [sshd.c] fix sigchld race; cjc5@po.cwru.edu
61e96248 7973
2b942fe0 797419991120
bcbf86ec 7975 - Merged more Solaris support from Marc G. Fournier
2b942fe0 7976 <marc.fournier@acadiau.ca>
7977 - Wrote autoconf tests for integer bit-types
7978 - Fixed enabling kerberos support
bcbf86ec 7979 - Fix segfault in ssh-keygen caused by buffer overrun in filename
13c36c4c 7980 handling.
2b942fe0 7981
06479889 798219991119
7983 - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>
2ad77510 7984 - Merged OpenBSD CVS changes
7985 - [auth-rhosts.c auth-rsa.c ssh-agent.c sshconnect.c sshd.c]
7986 more %d vs. %s in fmt-strings
7987 - [authfd.c]
7988 Integers should not be printed with %s
7b1cc56c 7989 - EGD uses a socket, not a named pipe. Duh.
7990 - Fix includes in fingerprint.c
29dbde15 7991 - Fix scp progress bar bug again.
bcbf86ec 7992 - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of
736890c4 7993 David Rankin <drankin@bohemians.lexington.ky.us>
91b8065d 7994 - Added autoconf option to enable Kerberos 4 support (untested)
7995 - Added autoconf option to enable AFS support (untested)
7996 - Added autoconf option to enable S/Key support (untested)
7997 - Added autoconf option to enable TCP wrappers support (compiles OK)
beb43d31 7998 - Renamed BSD helper function files to bsd-*
bcbf86ec 7999 - Added tests for login and daemon and enable OpenBSD replacements for
caf3bc51 8000 when they are absent.
8001 - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu>
06479889 8002
2bd61362 800319991118
8004 - Merged OpenBSD CVS changes
8005 - [scp.c] foregroundproc() in scp
8006 - [sshconnect.h] include fingerprint.h
bcbf86ec 8007 - [sshd.c] bugfix: the log() for passwd-auth escaped during logging
2bd61362 8008 changes.
0c16a097 8009 - [ssh.1] Spell my name right.
2bd61362 8010 - Added openssh.com info to README
8011
f095fcc7 801219991117
8013 - Merged OpenBSD CVS changes
8014 - [ChangeLog.Ylonen] noone needs this anymore
8015 - [authfd.c] close-on-exec for auth-socket, ok deraadt
bcbf86ec 8016 - [hostfile.c]
8017 in known_hosts key lookup the entry for the bits does not need
8018 to match, all the information is contained in n and e. This
8019 solves the problem with buggy servers announcing the wrong
f095fcc7 8020 modulus length. markus and me.
bcbf86ec 8021 - [serverloop.c]
8022 bugfix: check for space if child has terminated, from:
f095fcc7 8023 iedowse@maths.tcd.ie
8024 - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c]
8025 [fingerprint.c fingerprint.h]
8026 rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>
8027 - [ssh-agent.1] typo
8028 - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@
bcbf86ec 8029 - [sshd.c]
f095fcc7 8030 force logging to stderr while loading private key file
8031 (lost while converting to new log-levels)
8032
4d195447 803319991116
8034 - Fix some Linux libc5 problems reported by Miles Wilson <mw@mctitle.com>
8035 - Merged OpenBSD CVS changes:
8036 - [auth-rh-rsa.c auth-rsa.c authfd.c authfd.h hostfile.c mpaux.c]
8037 [mpaux.h ssh-add.c ssh-agent.c ssh.h ssh.c sshd.c]
8038 the keysize of rsa-parameter 'n' is passed implizit,
8039 a few more checks and warnings about 'pretended' keysizes.
8040 - [cipher.c cipher.h packet.c packet.h sshd.c]
8041 remove support for cipher RC4
8042 - [ssh.c]
8043 a note for legay systems about secuity issues with permanently_set_uid(),
8044 the private hostkey and ptrace()
8045 - [sshconnect.c]
8046 more detailed messages about adding and checking hostkeys
8047
dad9a31e 804819991115
8049 - Merged OpenBSD CVS changes:
bcbf86ec 8050 - [ssh-add.c] change passphrase loop logic and remove ref to
dad9a31e 8051 $DISPLAY, ok niels
8052 - Changed to ssh-add.c broke askpass support. Revised it to be a little more
bcbf86ec 8053 modular.
dad9a31e 8054 - Revised autoconf support for enabling/disabling askpass support.
e7c0f9d5 8055 - Merged more OpenBSD CVS changes:
704b1659 8056 [auth-krb4.c]
8057 - disconnect if getpeername() fails
8058 - missing xfree(*client)
8059 [canohost.c]
8060 - disconnect if getpeername() fails
8061 - fix comment: we _do_ disconnect if ip-options are set
8062 [sshd.c]
8063 - disconnect if getpeername() fails
8064 - move checking of remote port to central place
8065 [auth-rhosts.c] move checking of remote port to central place
8066 [log-server.c] avoid extra fd per sshd, from millert@
8067 [readconf.c] print _all_ bad config-options in ssh(1), too
8068 [readconf.h] print _all_ bad config-options in ssh(1), too
8069 [ssh.c] print _all_ bad config-options in ssh(1), too
8070 [sshconnect.c] disconnect if getpeername() fails
e7c0f9d5 8071 - OpenBSD's changes to sshd.c broke the PAM stuff, re-merged it.
c75a1a66 8072 - Various small cleanups to bring diff (against OpenBSD) size down.
f601d847 8073 - Merged more Solaris compability from Marc G. Fournier
8074 <marc.fournier@acadiau.ca>
8075 - Wrote autoconf tests for __progname symbol
986a22ec 8076 - RPM spec file fixes from Jim Knoble <jmknoble@jmknoble.cx>
0c372277 8077 - Released 1.2pre12
8078
8079 - Another OpenBSD CVS update:
8080 - [ssh-keygen.1] fix .Xr
dad9a31e 8081
92da7197 808219991114
8083 - Solaris compilation fixes (still imcomplete)
8084
94f7bb9e 808519991113
dd092f97 8086 - Build patch from Niels Kristian Bech Jensen <nkbj@image.dk>
8087 - Don't install config files if they already exist
8088 - Fix inclusion of additional preprocessor directives from acconfig.h
94f7bb9e 8089 - Removed redundant inclusions of config.h
e9c75a39 8090 - Added 'Obsoletes' lines to RPM spec file
94f7bb9e 8091 - Merged OpenBSD CVS changes:
8092 - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels
bcbf86ec 8093 - [scp.c] fix overflow reported by damien@ibs.com.au: off_t
94f7bb9e 8094 totalsize, ok niels,aaron
bcbf86ec 8095 - Delay fork (-f option) in ssh until after port forwarded connections
94f7bb9e 8096 have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi>
b2344d54 8097 - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de>
8098 - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled
dd092f97 8099 - Tidied default config file some more
8100 - Revised Redhat initscript to fix bug: sshd (re)start would fail
8101 if executed from inside a ssh login.
94f7bb9e 8102
e35c1dc2 810319991112
8104 - Merged changes from OpenBSD CVS
8105 - [sshd.c] session_key_int may be zero
b4748e2f 8106 - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config]
bcbf86ec 8107 IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok
b4748e2f 8108 deraadt,millert
8109 - Brought default sshd_config more in line with OpenBSD's
547c9f30 8110 - Grab server in gnome-ssh-askpass (Debian bug #49872)
8111 - Released 1.2pre10
e35c1dc2 8112
8bc7973f 8113 - Added INSTALL documentation
6fa724bc 8114 - Merged yet more changes from OpenBSD CVS
8115 - [auth-rh-rsa.c auth-rhosts.c auth-rsa.c channels.c clientloop.c]
8116 [ssh.c ssh.h sshconnect.c sshd.c]
8117 make all access to options via 'extern Options options'
8118 and 'extern ServerOptions options' respectively;
8119 options are no longer passed as arguments:
8120 * make options handling more consistent
8121 * remove #include "readconf.h" from ssh.h
8122 * readconf.h is only included if necessary
8123 - [mpaux.c] clear temp buffer
8124 - [servconf.c] print _all_ bad options found in configfile
045672f9 8125 - Make ssh-askpass support optional through autoconf
59b0f0d4 8126 - Fix nasty division-by-zero error in scp.c
8127 - Released 1.2pre11
8bc7973f 8128
4cca272e 812919991111
8130 - Added (untested) Entropy Gathering Daemon (EGD) support
67d68e3a 8131 - Fixed /dev/urandom fd leak (Debian bug #49722)
5bbb5681 8132 - Merged OpenBSD CVS changes:
8133 - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
8134 - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
8135 - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
bcbf86ec 8136 - Fix integer overflow which was messing up scp's progress bar for large
3f1d9bcd 8137 file transfers. Fix submitted to OpenBSD developers. Report and fix
8138 from Kees Cook <cook@cpoint.net>
6a17f9c2 8139 - Merged more OpenBSD CVS changes:
bcbf86ec 8140 - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal()
6a17f9c2 8141 + krb-cleanup cleanup
8142 - [clientloop.c log-client.c log-server.c ]
8143 [readconf.c readconf.h servconf.c servconf.h ]
8144 [ssh.1 ssh.c ssh.h sshd.8]
8145 add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
8146 obsoletes QuietMode and FascistLogging in sshd.
e35c1dc2 8147 - [sshd.c] fix fatal/assert() bug reported by damien@ibs.com.au:
8148 allow session_key_int != sizeof(session_key)
8149 [this should fix the pre-assert-removal-core-files]
8150 - Updated default config file to use new LogLevel option and to improve
8151 readability
8152
f370266e 815319991110
67d68e3a 8154 - Merged several minor fixes:
f370266e 8155 - ssh-agent commandline parsing
8156 - RPM spec file now installs ssh setuid root
8157 - Makefile creates libdir
4cca272e 8158 - Merged beginnings of Solaris compability from Marc G. Fournier
8159 <marc.fournier@acadiau.ca>
f370266e 8160
d4f11b59 816119991109
8162 - Autodetection of SSL/Crypto library location via autoconf
8163 - Fixed location of ssh-askpass to follow autoconf
8164 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
8165 - Autodetection of RSAref library for US users
8166 - Minor doc updates
560557bb 8167 - Merged OpenBSD CVS changes:
8168 - [rsa.c] bugfix: use correct size for memset()
8169 - [sshconnect.c] warn if announced size of modulus 'n' != real size
f025becb 8170 - Added GNOME passphrase requestor (use --with-gnome-askpass)
d397b172 8171 - RPM build now creates subpackages
aa51e7cc 8172 - Released 1.2pre9
d4f11b59 8173
e1a9c08d 817419991108
8175 - Removed debian/ directory. This is now being maintained separately.
8176 - Added symlinks for slogin in RPM spec file
8177 - Fixed permissions on manpages in RPM spec file
8178 - Added references to required libraries in README file
8179 - Removed config.h.in from CVS
8180 - Removed pwdb support (better pluggable auth is provided by glibc)
8181 - Made PAM and requisite libdl optional
8182 - Removed lots of unnecessary checks from autoconf
8183 - Added support and autoconf test for openpty() function (Unix98 pty support)
8184 - Fix for scp not finding ssh if not installed as /usr/bin/ssh
8185 - Added TODO file
8186 - Merged parts of Debian patch From Phil Hands <phil@hands.com>:
8187 - Added ssh-askpass program
8188 - Added ssh-askpass support to ssh-add.c
8189 - Create symlinks for slogin on install
8190 - Fix "distclean" target in makefile
8191 - Added example for ssh-agent to manpage
8192 - Added support for PAM_TEXT_INFO messages
8193 - Disable internal /etc/nologin support if PAM enabled
8194 - Merged latest OpenBSD CVS changes:
5bae4ab8 8195 - [all] replace assert() with error, fatal or packet_disconnect
e1a9c08d 8196 - [sshd.c] don't send fail-msg but disconnect if too many authentication
8197 failures
e1a9c08d 8198 - [sshd.c] remove unused argument. ok dugsong
8199 - [sshd.c] typo
8200 - [rsa.c] clear buffers used for encryption. ok: niels
8201 - [rsa.c] replace assert() with error, fatal or packet_disconnect
ade6fccd 8202 - [auth-krb4.c] remove unused argument. ok dugsong
e1a9c08d 8203 - Fixed coredump after merge of OpenBSD rsa.c patch
9010d60a 8204 - Released 1.2pre8
e1a9c08d 8205
3028328e 820619991102
8207 - Merged change from OpenBSD CVS
8208 - One-line cleanup in sshd.c
8209
474832c5 821019991030
8211 - Integrated debian package support from Dan Brosemer <odin@linuxfreak.com>
69256d9d 8212 - Merged latest updates for OpenBSD CVS:
8213 - channels.[ch] - remove broken x11 fix and document istate/ostate
8214 - ssh-agent.c - call setsid() regardless of argv[]
8215 - ssh.c - save a few lines when disabling rhosts-{rsa-}auth
8216 - Documentation cleanups
8217 - Renamed README -> README.Ylonen
8218 - Renamed README.openssh ->README
474832c5 8219
339660f6 822019991029
8221 - Renamed openssh* back to ssh* at request of Theo de Raadt
8222 - Incorporated latest changes from OpenBSD's CVS
8223 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
8224 - Integrated PAM env patch from Nalin Dahyabhai <nalin.dahyabhai@pobox.com>
549b3eed 8225 - Make distclean now removed configure script
8226 - Improved PAM logging
8227 - Added some debug() calls for PAM
4ecd19ea 8228 - Removed redundant subdirectories
bcbf86ec 8229 - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for
4ecd19ea 8230 building on Debian.
242588e6 8231 - Fixed off-by-one error in PAM env patch
8232 - Released 1.2pre6
339660f6 8233
5881cd60 823419991028
8235 - Further PAM enhancements.
8236 - Much cleaner
8237 - Now uses account and session modules for all logins.
8238 - Integrated patch from Dan Brosemer <odin@linuxfreak.com>
8239 - Build fixes
8240 - Autoconf
8241 - Change binary names to open*
8242 - Fixed autoconf script to detect PAM on RH6.1
8243 - Added tests for libpwdb, and OpenBSD functions to autoconf
221395b3 8244 - Released 1.2pre4
fca82d2e 8245
8246 - Imported latest OpenBSD CVS code
8247 - Updated README.openssh
93f04616 8248 - Released 1.2pre5
fca82d2e 8249
5881cd60 825019991027
8251 - Adapted PAM patch.
8252 - Released 1.0pre2
8253
8254 - Excised my buggy replacements for strlcpy and mkdtemp
8255 - Imported correct OpenBSD strlcpy and mkdtemp routines.
8256 - Reduced arc4random_stir entropy read to 32 bytes (256 bits)
8257 - Picked up correct version number from OpenBSD
8258 - Added sshd.pam PAM configuration file
8259 - Added sshd.init Redhat init script
8260 - Added openssh.spec RPM spec file
8261 - Released 1.2pre3
8262
826319991026
8264 - Fixed include paths of OpenSSL functions
8265 - Use OpenSSL MD5 routines
8266 - Imported RC4 code from nanocrypt
8267 - Wrote replacements for OpenBSD arc4random* functions
8268 - Wrote replacements for strlcpy and mkdtemp
8269 - Released 1.0pre1
0b202697 8270
8271$Id$
git-cvsimport mirror of OpenSSH
This page took 3.873615 seconds and 5 git commands to generate.