]> andersk Git - openssh.git/blame - ChangeLog
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- markus@cvs.openbsd.org 2001/12/28 13:57:33
[openssh.git] / ChangeLog
CommitLineData
f1b0ecc3 120020122
2 - (djm) autoconf hacking:
3 - We don't support --without-zlib currently, so don't allow it.
4 - Rework cryptographic random number support detection. We now detect
5 whether OpenSSL seeds itself. If it does, then we don't bother with
6 the ssh-rand-helper program. You can force the use of ssh-rand-helper
7 using the --with-rand-helper configure argument
8 - Simplify and clean up ssh-rand-helper configuration
9780116c 9 - Add OpenSSL sanity check: verify that header version matches version
10 reported by library
49d7ed32 11 - (djm) Fix some bugs I introduced into ssh-rand-helper yesterday
3dc93cd8 12 - OpenBSD CVS Sync
13 - djm@cvs.openbsd.org 2001/12/21 08:52:22
14 [ssh-keygen.1 ssh-keygen.c]
15 Remove default (rsa1) key type; ok markus@
f9654cd7 16 - djm@cvs.openbsd.org 2001/12/21 08:53:45
17 [readpass.c]
18 Avoid interruptable passphrase read; ok markus@
67656ffc 19 - djm@cvs.openbsd.org 2001/12/21 10:06:43
20 [ssh-add.1 ssh-add.c]
21 Try all standard key files (id_rsa, id_dsa, identity) when invoked with
22 no arguments; ok markus@
b0ce9259 23 - markus@cvs.openbsd.org 2001/12/21 12:17:33
24 [serverloop.c]
25 remove ifdef for USE_PIPES since fdin != fdout; ok djm@
0e0bba68 26 - deraadt@cvs.openbsd.org 2001/12/24 07:29:43
27 [ssh-add.c]
28 try all listed keys.. how did this get broken?
e13b4278 29 - markus@cvs.openbsd.org 2001/12/25 18:49:56
30 [key.c]
31 be more careful on allocation
45c49544 32 - markus@cvs.openbsd.org 2001/12/25 18:53:00
33 [auth1.c]
34 be more carefull on allocation
bb28e836 35 - markus@cvs.openbsd.org 2001/12/27 18:10:29
36 [ssh-keygen.c]
37 -t is only needed for key generation (unbreaks -i, -e, etc).
b775c6f2 38 - markus@cvs.openbsd.org 2001/12/27 18:22:16
39 [auth1.c authfile.c auth-rsa.c dh.c kexdh.c kexgex.c key.c rsa.c]
40 [scard.c ssh-agent.c sshconnect1.c sshd.c ssh-dss.c]
41 call fatal() for openssl allocation failures
135113a3 42 - stevesk@cvs.openbsd.org 2001/12/27 18:22:53
43 [sshd.8]
44 clarify -p; ok markus@
cf184a44 45 - markus@cvs.openbsd.org 2001/12/27 18:26:13
46 [authfile.c]
47 missing include
108d362e 48 - markus@cvs.openbsd.org 2001/12/27 19:37:23
49 [dh.c kexdh.c kexgex.c]
50 always use BN_clear_free instead of BN_free
dc421aa3 51 - markus@cvs.openbsd.org 2001/12/27 19:54:53
52 [auth1.c auth.h auth-rh-rsa.c]
53 auth_rhosts_rsa now accept generic keys.
95500969 54 - markus@cvs.openbsd.org 2001/12/27 20:39:58
55 [auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h]
56 [serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c]
57 get rid of packet_integrity_check, use packet_done() instead.
3456d3c7 58 - markus@cvs.openbsd.org 2001/12/28 12:14:27
20b279e6 59 [auth1.c auth2.c auth2-chall.c auth-rsa.c channels.c clientloop.c]
60 [kex.c kexdh.c kexgex.c packet.c packet.h serverloop.c session.c]
61 [ssh.c sshconnect1.c sshconnect2.c sshd.c]
3456d3c7 62 s/packet_done/packet_check_eom/ (end-of-message); ok djm@
20b279e6 63 - markus@cvs.openbsd.org 2001/12/28 13:57:33
64 [auth1.c kexdh.c kexgex.c packet.c packet.h sshconnect1.c sshd.c]
65 packet_get_bignum* no longer returns a size
3456d3c7 66
f1b0ecc3 67
40f64e6f 6820020121
69 - (djm) Rework ssh-rand-helper:
70 - Reduce quantity of ifdef code, in preparation for ssh_rand_conf
71 - Always seed from system calls, even when doing PRNGd seeding
72 - Tidy and comment #define knobs
73 - Remove unused facility for multiple runs through command list
74 - KNF, cleanup, update copyright
75
088cdc23 7620020114
77 - (djm) Bug #50 - make autoconf entropy path checks more robust
78
760b35a6 7920020108
80 - (djm) Merge Cygwin copy_environment with do_pam_environment, removing
81 fixed env var size limit in the process. Report from Corinna Vinschen
82 <vinschen@redhat.com>
5cbceb3f 83 - (stevesk) defines.h: use "/var/spool/sockets/X11/%u" for HP-UX. does
84 not depend on transition links. from Lutz Jaenicke.
760b35a6 85
1d2a4613 8620020106
87 - (stevesk) defines.h: determine _PATH_UNIX_X; currently "/tmp/.X11-unix/X%u"
88 for all platforms except HP-UX, which is "/usr/spool/sockets/X11/%u".
89
d93656c9 9020020105
91 - (bal) NCR requies use_pipes to operate correctly.
29525240 92 - (stevesk) fix spurious ; from NCR change.
d93656c9 93
554e28b2 9420020103
95 - (djm) Use bigcrypt() on systems with SCO_PROTECTED_PW. Patch from
96 Roger Cornelius <rac@tenzing.org>
97
e9571a2c 9820011229
99 - (djm) Apply Cygwin pointer deref fix from Corinna Vinschen
100 <vinschen@redhat.com> Could be abused to guess valid usernames
929fb284 101 - (djm) Typo in contrib/cygwin/README Fix from Corinna Vinschen
102 <vinschen@redhat.com>
e9571a2c 103
760edf28 10420011228
105 - (djm) Remove recommendation to use GNU make, we should support most
106 make programs.
107
7bec72bc 10820011225
109 - (stevesk) [Makefile.in ssh-rand-helper.c]
110 portable lib and __progname support for ssh-rand-helper; ok djm@
111
b8291fa0 11220011223
113 - (bal) Removed contrib/chroot.diff and noted in contrib/README that it
114 was not being maintained.
115
46058ce2 11620011222
117 - (djm) Ignore fix & patchlevel in OpenSSL version check. Patch from
118 solar@openwall.com
119 - (djm) Rework entropy code. If the OpenSSL PRNG is has not been
120 internally seeded, execute a subprogram "ssh-rand-helper" to obtain
121 some entropy for us. Rewrite the old in-process entropy collecter as
122 an example ssh-rand-helper.
123 - (djm) Always perform ssh_prng_cmds path lookups in configure, even if
124 we don't end up using ssh_prng_cmds (so we always get a valid file)
125
5fb9865a 12620011221
127 - (djm) Add option to gnome-ssh-askpass to stop it from grabbing the X
128 server. I have found this necessary to avoid server hangs with X input
129 extensions (e.g. kinput2). Enable by setting the environment variable
130 "GNOME_SSH_ASKPASS_NOGRAB"
805e659f 131 - OpenBSD CVS Sync
132 - stevesk@cvs.openbsd.org 2001/12/08 17:49:28
133 [channels.c pathnames.h]
134 use only one path to X11 UNIX domain socket vs. an array of paths
135 to try. report from djast@cs.toronto.edu. ok markus@
2f293d43 136 - markus@cvs.openbsd.org 2001/12/09 18:45:56
137 [auth2.c auth2-chall.c auth.h]
138 add auth2_challenge_stop(), simplifies cleanup of kbd-int sessions,
139 fixes memleak.
5e8948af 140 - stevesk@cvs.openbsd.org 2001/12/10 16:45:04
141 [sshd.c]
142 possible fd leak on error; ok markus@
cdc95d6e 143 - markus@cvs.openbsd.org 2001/12/10 20:34:31
144 [ssh-keyscan.c]
145 check that server supports v1 for -t rsa1, report from wirth@dfki.de
fb396518 146 - jakob@cvs.openbsd.org 2001/12/18 10:04:21
147 [auth.h hostfile.c hostfile.h]
148 remove auth_rsa_read_key, make hostfile_ready_key non static; ok markus@
306feb91 149 - jakob@cvs.openbsd.org 2001/12/18 10:05:15
150 [auth2.c]
151 log fingerprint on successful public key authentication; ok markus@
46df736f 152 - jakob@cvs.openbsd.org 2001/12/18 10:06:24
153 [auth-rsa.c]
154 log fingerprint on successful public key authentication, simplify
155 usage of key structs; ok markus@
184eed6a 156 - deraadt@cvs.openbsd.org 2001/12/19 07:18:56
157 [auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h]
158 [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c]
159 [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c]
160 [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c]
161 [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c]
162 [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c]
163 [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config]
164 [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c]
165 basic KNF done while i was looking for something else
a10be357 166 - markus@cvs.openbsd.org 2001/12/19 16:09:39
167 [serverloop.c]
168 fix race between SIGCHLD and select with an additional pipe. writing
169 to the pipe on SIGCHLD wakes up select(). using pselect() is not
170 portable and siglongjmp() ugly. W. R. Stevens suggests similar solution.
171 initial idea by pmenage@ensim.com; ok deraadt@, djm@
6c0fa2b1 172 - stevesk@cvs.openbsd.org 2001/12/19 17:16:13
173 [authfile.c bufaux.c bufaux.h buffer.c buffer.h packet.c packet.h ssh.c]
174 change the buffer/packet interface to use void* vs. char*; ok markus@
ac151b18 175 - markus@cvs.openbsd.org 2001/12/20 16:37:29
176 [channels.c channels.h session.c]
177 setup x11 listen socket for just one connect if the client requests so.
178 (v2 only, but the openssh client does not support this feature).
24ca6821 179 - djm@cvs.openbsd.org 2001/12/20 22:50:24
180 [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
181 [dispatch.h kex.c kex.h packet.c packet.h serverloop.c ssh.c]
182 [sshconnect2.c]
183 Conformance fix: we should send failing packet sequence number when
184 responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by
185 yakk@yakk.dot.net; ok markus@
5fb9865a 186
c9d0ad9b 18720011219
188 - (stevesk) OpenBSD CVS sync X11 localhost display
189 - stevesk@cvs.openbsd.org 2001/11/29 14:10:51
190 [channels.h channels.c session.c]
191 sshd X11 fake server will now listen on localhost by default:
192 $ echo $DISPLAY
193 localhost:12.0
194 $ netstat -an|grep 6012
195 tcp 0 0 127.0.0.1.6012 *.* LISTEN
196 tcp6 0 0 ::1.6012 *.* LISTEN
197 sshd_config gatewayports=yes can be used to revert back to the old
198 behavior. will control this with another option later. ok markus@
199 - stevesk@cvs.openbsd.org 2001/12/19 08:43:11
200 [includes.h session.c]
201 handle utsname.nodename case for FamilyLocal X authorization; ok markus@
202
3f3ac025 20320011207
204 - (bal) PCRE no longer required. Banished from the source along with
205 fake-regex.h
c20f63d3 206 - (bal) OpenBSD CVS Sync
207 - stevesk@cvs.openbsd.org 2001/12/06 18:02:32
208 [channels.c sshconnect.c]
209 shutdown(sock, SHUT_RDWR) not needed here; ok markus@
74860245 210 - stevesk@cvs.openbsd.org 2001/12/06 18:09:23
211 [channels.c session.c]
212 strncpy->strlcpy. remaining strncpy's are necessary. ok markus@
d24631c9 213 - stevesk@cvs.openbsd.org 2001/12/06 18:20:32
214 [channels.c]
215 disable nagle for X11 fake server and client TCPs. from netbsd.
216 ok markus@
3f3ac025 217
21820011206
6056eb35 219 - (bal) OpenBSD CVS Sync
220 - deraadt@cvs.openbsd.org 2001/11/14 20:45:08
221 [sshd.c]
222 errno saving wrapping in a signal handler
0408c978 223 - markus@cvs.openbsd.org 2001/11/16 12:46:13
224 [ssh-keyscan.c]
225 handle empty lines instead of dumping core; report from sha@sha-1.net
17a3011c 226 - stevesk@cvs.openbsd.org 2001/11/17 19:14:34
227 [auth2.c auth.c readconf.c servconf.c ssh-agent.c ssh-keygen.c]
228 enum/int type cleanup where it made sense to do so; ok markus@
7ace8c3b 229 - markus@cvs.openbsd.org 2001/11/19 11:20:21
230 [sshd.c]
231 fd leak on HUP; ok stevesk@
8666316a 232 - stevesk@cvs.openbsd.org 2001/11/19 18:40:46
233 [ssh-agent.1]
234 clarify/state that private keys are not exposed to clients using the
235 agent; ok markus@
44c2ab73 236 - mpech@cvs.openbsd.org 2001/11/19 19:02:16
237 [deattack.c radix.c]
238 kill more registers
239 millert@ ok
2f98d223 240 - markus@cvs.openbsd.org 2001/11/21 15:51:24
241 [key.c]
242 mem leak
c840d0ad 243 - stevesk@cvs.openbsd.org 2001/11/21 18:49:14
244 [ssh-keygen.1]
245 more on passphrase construction; ok markus@
f48e63c8 246 - stevesk@cvs.openbsd.org 2001/11/22 05:27:29
247 [ssh-keyscan.c]
248 don't use "\n" in fatal()
7a934d1b 249 - markus@cvs.openbsd.org 2001/11/22 12:34:22
250 [clientloop.c serverloop.c sshd.c]
251 volatile sig_atomic_t
58d94604 252 - stevesk@cvs.openbsd.org 2001/11/29 19:06:39
253 [channels.h]
254 remove dead function prototype; ok markus@
2975f58d 255 - markus@cvs.openbsd.org 2001/11/29 22:08:48
256 [auth-rsa.c]
257 fix protocol error: send 'failed' message instead of a 2nd challenge
258 (happens if the same key is in authorized_keys twice).
259 reported Ralf_Meister@genua.de; ok djm@
b48eeb07 260 - stevesk@cvs.openbsd.org 2001/11/30 20:39:28
261 [ssh.c]
262 sscanf() length dependencies are clearer now; can also shrink proto
263 and data if desired, but i have not done that. ok markus@
2548961d 264 - markus@cvs.openbsd.org 2001/12/01 21:41:48
265 [session.c sshd.8]
266 don't pass user defined variables to /usr/bin/login
947b64c7 267 - deraadt@cvs.openbsd.org 2001/12/02 02:08:32
268 [sftp-common.c]
269 zap };
010f9726 270 - itojun@cvs.openbsd.org 2001/12/05 03:50:01
271 [clientloop.c serverloop.c sshd.c]
272 deal with LP64 printf issue with sig_atomic_t. from thorpej
d5bb9418 273 - itojun@cvs.openbsd.org 2001/12/05 03:56:39
274 [auth1.c auth2.c canohost.c channels.c deattack.c packet.c scp.c
275 sshconnect2.c]
276 make it compile with more strict prototype checking
6aacefa7 277 - deraadt@cvs.openbsd.org 2001/12/05 10:06:12
278 [authfd.c authfile.c bufaux.c channels.c compat.c kex.c kexgex.c
279 key.c misc.c packet.c servconf.c ssh-agent.c sshconnect2.c
280 sshconnect.c sshd.c ssh-dss.c ssh-keygen.c ssh-rsa.c]
281 minor KNF
663ebb32 282 - markus@cvs.openbsd.org 2001/12/05 15:04:48
283 [version.h]
284 post 3.0.2
6a92533a 285 - markus@cvs.openbsd.org 2001/12/05 16:54:51
286 [compat.c match.c match.h]
287 make theo and djm happy: bye bye regexp
2717fa0f 288 - markus@cvs.openbsd.org 2001/12/06 13:30:06
289 [servconf.c servconf.h sshd.8 sshd.c]
290 add -o to sshd, too. ok deraadt@
291 - (bal) Minor white space fix up in servconf.c
6056eb35 292
ffb8d130 29320011126
294 - (tim) [contrib/cygwin/README, openbsd-compat/bsd-cygwin_util.c,
295 openbsd-compat/bsd-cygwin_util.h, openbsd-compat/daemon.c]
296 Allow SSHD to install as service under WIndows 9x/Me
297 [configure.ac] Fix to allow linking against PCRE on Cygwin
298 Patches by Corinna Vinschen <vinschen@redhat.com>
299
20716479 30020011115
301 - (djm) Fix IPv4 default in ssh-keyscan. Spotted by Dan Astoorian
302 <djast@cs.toronto.edu> Fix from markus@
e41f14ae 303 - (djm) Release 3.0.1p1
20716479 304
9aba5a4d 30520011113
306 - (djm) Fix early (and double) free of remote user when using Kerberos.
307 Patch from Simon Wilkinson <simon@sxw.org.uk>
19e810f6 308 - (djm) AIX login{success,failed} changes. Move loginsuccess call to
309 do_authenticated. Call loginfailed for protocol 2 failures > MAX like
310 we do for protocol 1. Reports from Ralf Wenk <wera0003@fh-karlsruhe.de>,
311 K.Wolkersdorfer@fz-juelich.de and others
ede8cea6 312 - (djm) OpenBSD CVS Sync
313 - dugsong@cvs.openbsd.org 2001/11/11 18:47:10
314 [auth-krb5.c]
315 fix krb5 authorization check. found by <jhawk@MIT.EDU>. from
316 art@, deraadt@ ok
b0248360 317 - markus@cvs.openbsd.org 2001/11/12 11:17:07
318 [servconf.c]
319 enable authorized_keys2 again. tested by fries@
0bbf2240 320 - markus@cvs.openbsd.org 2001/11/13 02:03:57
321 [version.h]
322 enter 3.0.1
86b164b3 323 - (djm) Bump RPM package versions
9aba5a4d 324
3e4e3bc8 32520011112
326 - (djm) Makefile correctness fix from Mark D. Baushke <mdb@juniper.net>
d36ae718 327 - (djm) Cygwin config patch from Corinna Vinschen <vinschen@redhat.com>
9ae3f727 328 - OpenBSD CVS Sync
329 - markus@cvs.openbsd.org 2001/10/24 08:41:41
330 [sshd.c]
331 mention remote port in debug message
f103187f 332 - markus@cvs.openbsd.org 2001/10/24 08:41:20
333 [ssh.c]
334 remove unused
67b75437 335 - markus@cvs.openbsd.org 2001/10/24 08:51:35
336 [clientloop.c ssh.c]
337 ignore SIGPIPE early, makes ssh work if agent dies, netbsd-pr via itojun@
c6940381 338 - markus@cvs.openbsd.org 2001/10/24 19:57:40
339 [clientloop.c]
340 make ~& (backgrounding) work again for proto v1; add support ~& for v2, too
f564d016 341 - markus@cvs.openbsd.org 2001/10/25 21:14:32
342 [ssh-keygen.1 ssh-keygen.c]
343 better docu for fingerprinting, ok deraadt@
e8d59b4d 344 - markus@cvs.openbsd.org 2001/10/29 19:27:15
345 [sshconnect2.c]
346 hostbased: check for client hostkey before building chost
03cf595c 347 - markus@cvs.openbsd.org 2001/10/30 20:29:09
348 [ssh.1]
349 ssh.1
b4b701be 350 - markus@cvs.openbsd.org 2001/11/07 16:03:17
351 [packet.c packet.h sshconnect2.c]
352 pad using the padding field from the ssh2 packet instead of sending
353 extra ignore messages. tested against several other ssh servers.
10f22cd7 354 - markus@cvs.openbsd.org 2001/11/07 21:40:21
355 [ssh-rsa.c]
356 ssh_rsa_sign/verify: SSH_BUG_SIGBLOB not supported
abc4e9a7 357 - markus@cvs.openbsd.org 2001/11/07 22:10:28
358 [ssh-dss.c ssh-rsa.c]
359 missing free and sync dss/rsa code.
713d61f7 360 - markus@cvs.openbsd.org 2001/11/07 22:12:01
361 [sshd.8]
362 s/Keepalive/KeepAlive/; from openbsd@davidkrause.com
f98585b0 363 - markus@cvs.openbsd.org 2001/11/07 22:41:51
364 [auth2.c auth-rh-rsa.c]
365 unused includes
27c47c0a 366 - markus@cvs.openbsd.org 2001/11/07 22:53:21
367 [channels.h]
368 crank c->path to 256 so they can hold a full hostname; dwd@bell-labs.com
56b551e2 369 - markus@cvs.openbsd.org 2001/11/08 10:51:08
370 [readpass.c]
371 don't strdup too much data; from gotoh@taiyo.co.jp; ok millert.
dd58cb5e 372 - markus@cvs.openbsd.org 2001/11/08 17:49:53
373 [ssh.1]
374 mention setuid root requirements; noted by cnorris@csc.UVic.ca; ok stevesk@
fad3754c 375 - markus@cvs.openbsd.org 2001/11/08 20:02:24
376 [auth.c]
377 don't print ROOT in CAPS for the authentication messages, i.e.
378 Accepted publickey for ROOT from 127.0.0.1 port 42734 ssh2
379 becomes
380 Accepted publickey for root from 127.0.0.1 port 42734 ssh2
b3ad8fe6 381 - markus@cvs.openbsd.org 2001/11/09 18:59:23
382 [clientloop.c serverloop.c]
383 don't memset too much memory, ok millert@
384 original patch from jlk@kamens.brookline.ma.us via nalin@redhat.com
ac28afd8 385 - markus@cvs.openbsd.org 2001/11/10 13:19:45
386 [sshd.c]
e15895cd 387 cleanup libwrap support (remove bogus comment, bogus close(), add
388 debug, etc).
5d4446bf 389 - markus@cvs.openbsd.org 2001/11/10 13:22:42
390 [ssh-rsa.c]
391 KNF (unexpand)
ec413a68 392 - markus@cvs.openbsd.org 2001/11/10 13:37:20
393 [packet.c]
394 remove extra debug()
5df83e07 395 - markus@cvs.openbsd.org 2001/11/11 13:02:31
396 [servconf.c]
e15895cd 397 make AuthorizedKeysFile2 fallback to AuthorizedKeysFile if
398 AuthorizedKeysFile is specified.
399 - (djm) Reorder portable-specific server options so that they come first.
400 This should help reduce diff collisions for new server options (as they
401 will appear at the end)
3e4e3bc8 402
78afd1dc 40320011109
404 - (stevesk) auth-pam.c: use do_pam_authenticate(PAM_DISALLOW_NULL_AUTHTOK)
405 if permit_empty_passwd == 0 so null password check cannot be bypassed.
406 jayaraj@amritapuri.com OpenBSD bug 2168
30f60c34 407 - markus@cvs.openbsd.org 2001/11/09 19:08:35
408 [sshd.c]
409 remove extra trailing dot from log message; pilot@naughty.monkey.org
410
7c6d759d 41120011103
412 - (tim) [ contrib/caldera/openssh.spec contrib/caldera/sshd.init] Updates
413 from Raymund Will <ray@caldera.de>
414 [acconfig.h configure.in] Clean up login checks.
415 Problem reported by Jim Knoble <jmknoble@pobox.com>
416
41720011101
58389b85 418 - (djm) Compat define for OpenSSL < 0.9.6 (No OPENSSL_free)
419
548fd014 42020011031
421 - (djm) Unsmoke drugs: config files should be noreplace.
422
b013a983 42320011030
424 - (djm) Redhat RPM spec: remove noreplace from config files, allow IPv6
425 by default (can force IPv4 using --define "noipv6 1")
426
40d0f6b9 42720011029
428 - (tim) [TODO defines.h loginrec.c] Change the references to configure.in
429 to configure.ac
430
9f214051 43120011028
432 - (djm) Avoid bug in Solaris PAM libs
7eb73cc1 433 - (djm) Disconnect if no tty and PAM reports password expired
9678565b 434 - (djm) Fix for PAM password changes being echoed (from stevesk)
840ad55e 435 - (stevesk) Fix compile problem with PAM password change fix
37a8edf7 436 - (stevesk) README: zlib location is http://www.gzip.org/zlib/
9f214051 437
c8c15bcb 43820011027
439 - (tim) [configure.ac] Fixes for ReliantUNIX (don't use libucb)
440 Patch by Robert Dahlem <Robert.Dahlem@siemens.com>
441
9e127e27 44220011026
443 - (bal) Set the correct current time in login_utmp_only(). Patch by
444 Wayne Davison <wayned@users.sourceforge.net>
fd96c060 445 - (tim) [scard/Makefile.in] Fix install: when building outside of source
446 tree and using --src=/full_path/to/openssh
447 Patch by Mark D. Baushke <mdb@juniper.net>
9e127e27 448
d321c94b 44920011025
450 - (bal) Use VDISABLE if _POSIX_VDISABLE is set in readpassphrase.c. Patch
451 by todd@
5a162955 452 - (tim) [configure.ac] Give path given in --with-xxx= for pcre,zlib, and
453 tcp-wrappers precedence over system libraries and includes.
454 Report from Dave Dykstra <dwd@bell-labs.com>
d321c94b 455
95c88805 45620011024
457 - (bal) Should be 3.0p1 not 3.0p2. Corrected version.h already.
451dab40 458 - (tim) configure.in -> configure.ac
95c88805 459
bc86d864 46020011023
461 - (bal) Updated version to 3.0p1 in preparing for release.
7f0a4ff1 462 - (bal) Added 'PAM_TTY_KLUDGE' to Solaris platform.
051809f6 463 - (tim) [configure.in] Fix test for broken dirname. Based on patch from
464 Dave Dykstra <dwd@bell-labs.com>. Remove un-needed test for zlib.h.
465 [contrib/caldera/openssh.spec, contrib/redhat/openssh.spec,
466 contrib/suse/openssh.spec] Update version to match version.h
bc86d864 467
ce49121d 46820011022
469 - (djm) Fix fd leak in loginrec.c (ro fd to lastlog was left open).
470 Report from Michal Zalewski <lcamtuf@coredump.cx>
471
98a7c37b 47220011021
473 - (tim) [configure.in] Clean up library testing. Add optional PATH to
474 --with-pcre, --with-zlib, and --with-tcp-wrappers. Based on
475 patch by albert chin (china@thewrittenword.com)
476 Re-arange AC_CHECK_HEADERS and AC_CHECK_FUNCS for eaiser reading
477 of patches to configure.in. Replace obsolete AC_STRUCT_ST_BLKSIZE
478 with AC_CHECK_MEMBERS. Add test for broken dirname() on
479 Solaris 2.5.1 by Dan Astoorian <djast@cs.toronto.edu>
480 [acconfig.h aclocal.m4 defines.h configure.in] Better socklen_t test.
481 patch by albert chin (china@thewrittenword.com)
482 [scp.c] Replace obsolete HAVE_ST_BLKSIZE with
483 HAVE_STRUCT_STAT_ST_BLKSIZE.
484 [Makefile.in] When running make in top level, always do make
485 in openbsd-compat. patch by Dave Dykstra <dwd@bell-labs.com>
486
09a3bd6d 48720011019
488 - (bal) Fixed up init.d symlink issue and piddir stuff. Patches by
489 Zoran Milojevic <Zoran.Milojevic@SS8.com> and j.petersen@msh.de
490
418e724c 49120011012
492 - (djm) OpenBSD CVS Sync
493 - markus@cvs.openbsd.org 2001/10/10 22:18:47
494 [channels.c channels.h clientloop.c nchan.c serverloop.c]
495 [session.c session.h]
496 try to keep channels open until an exit-status message is sent.
497 don't kill the login shells if the shells stdin/out/err is closed.
498 this should now work:
499 ssh -2n localhost 'exec > /dev/null 2>&1; sleep 10; exit 5'; echo ?
efcc9957 500 - markus@cvs.openbsd.org 2001/10/11 13:45:21
501 [session.c]
502 delay detach of session if a channel gets closed but the child is
503 still alive. however, release pty, since the fd's to the child are
504 already closed.
fd6cfbaf 505 - markus@cvs.openbsd.org 2001/10/11 15:24:00
506 [clientloop.c]
507 clear select masks if we return before calling select().
b0454d44 508 - (djm) "make veryclean" fix from Tom Holroyd <tomh@po.crl.go.jp>
aeabbb30 509 - (djm) Clean some autoconf-2.52 junk when doing "make distclean"
8140f2aa 510 - (djm) Cleanup sshpty.c a little
6e464960 511 - (bal) First wave of contrib/solaris/ package upgrades. Still more
512 work needs to be done, but it is a 190% better then the stuff we
513 had before!
78c84f13 514 - (bal) Minor bug fix in contrib/solaris/opensshd.in .. $etcdir was not
515 set right.
418e724c 516
c48c32c1 51720011010
518 - (djm) OpenBSD CVS Sync
519 - markus@cvs.openbsd.org 2001/10/04 14:34:16
520 [key.c]
521 call OPENSSL_free() for memory allocated by openssl; from chombier@mac.com
0c139bd1 522 - markus@cvs.openbsd.org 2001/10/04 15:05:40
523 [channels.c serverloop.c]
524 comment out bogus conditions for selecting on connection_in
72176c0e 525 - markus@cvs.openbsd.org 2001/10/04 15:12:37
526 [serverloop.c]
527 client_alive_check cleanup
a2c92c4a 528 - markus@cvs.openbsd.org 2001/10/06 00:14:50
529 [sshconnect.c]
530 remove unused argument
05fd093c 531 - markus@cvs.openbsd.org 2001/10/06 00:36:42
532 [session.c]
533 fix typo in error message, sync with do_exec_nopty
01e9ef57 534 - markus@cvs.openbsd.org 2001/10/06 11:18:19
535 [sshconnect1.c sshconnect2.c sshconnect.c]
536 unify hostkey check error messages, simplify prompt.
2cdccb44 537 - markus@cvs.openbsd.org 2001/10/07 10:29:52
538 [authfile.c]
539 grammer; Matthew_Clarke@mindlink.bc.ca
639cb8ab 540 - markus@cvs.openbsd.org 2001/10/07 17:49:40
541 [channels.c channels.h]
542 avoid possible FD_ISSET overflow for channels established
543 during channnel_after_select() (used for dynamic channels).
f3964cb9 544 - markus@cvs.openbsd.org 2001/10/08 11:48:57
545 [channels.c]
546 better debug
32af6a3f 547 - markus@cvs.openbsd.org 2001/10/08 16:15:47
548 [sshconnect.c]
549 use correct family for -b option
dab89049 550 - markus@cvs.openbsd.org 2001/10/08 19:05:05
551 [ssh.c sshconnect.c sshconnect.h ssh-keyscan.c]
552 some more IPv4or6 cleanup
553 - markus@cvs.openbsd.org 2001/10/09 10:12:08
554 [session.c]
555 chdir $HOME after krb_afslog(); from bbense@networking.stanford.edu
01855277 556 - markus@cvs.openbsd.org 2001/10/09 19:32:49
557 [session.c]
558 stat subsystem command before calling do_exec, and return error to client.
9d1b2faa 559 - markus@cvs.openbsd.org 2001/10/09 19:51:18
560 [serverloop.c]
561 close all channels if the connection to the remote host has been closed,
562 should fix sshd's hanging with WCHAN==wait
d5f24f94 563 - markus@cvs.openbsd.org 2001/10/09 21:59:41
564 [channels.c channels.h serverloop.c session.c session.h]
565 simplify session close: no more delayed session_close, no more
566 blocking wait() calls.
b6a71cd2 567 - (bal) removed two unsed headers in openbsd-compat/bsd-misc.c
8782141f 568 - (bal) seed_init() and seed_rng() required in ssh-keyscan.c
c48c32c1 569
46dfe5ef 57020011007
571 - (bal) ssh-copy-id corrected permissions for .ssh/ and authorized_keys.
572 Prompted by Matthew Vernon <matthew@sel.cam.ac.uk>
573
822593d4 57420011005
575 - (bal) AES works under Cray, no more hack.
576
63fa6b6c 57720011004
578 - (bal) nchan2.ms resync. BSD License applied.
579
c8a62153 58020011003
581 - (bal) CVS ID fix up in version.h
b6350327 582 - (bal) OpenBSD CVS Sync:
583 - markus@cvs.openbsd.org 2001/09/27 11:58:16
584 [compress.c]
585 mem leak; chombier@mac.com
586 - markus@cvs.openbsd.org 2001/09/27 11:59:37
587 [packet.c]
588 missing called=1; chombier@mac.com
aa8003d6 589 - markus@cvs.openbsd.org 2001/09/27 15:31:17
590 [auth2.c auth2-chall.c sshconnect1.c]
591 typos; from solar
5b263aae 592 - camield@cvs.openbsd.org 2001/09/27 17:53:24
593 [sshd.8]
594 don't talk about compile-time options
595 ok markus@
e99a518a 596 - djm@cvs.openbsd.org 2001/09/28 12:07:09
597 [ssh-keygen.c]
598 bzero private key after loading to smartcard; ok markus@
f67792f2 599 - markus@cvs.openbsd.org 2001/09/28 15:46:29
600 [ssh.c]
601 bug: read user config first; report kaukasoi@elektroni.ee.tut.fi
5720c10e 602 - markus@cvs.openbsd.org 2001/10/01 08:06:28
603 [scp.c]
604 skip filenames containing \n; report jdamery@chiark.greenend.org.uk
605 and matthew@debian.org
5e4a7219 606 - markus@cvs.openbsd.org 2001/10/01 21:38:53
607 [channels.c channels.h ssh.c sshd.c]
608 remove ugliness; vp@drexel.edu via angelos
8bbc048a 609 - markus@cvs.openbsd.org 2001/10/01 21:51:16
610 [readconf.c readconf.h ssh.1 sshconnect.c]
611 add NoHostAuthenticationForLocalhost; note that the hostkey is
612 now check for localhost, too.
e0543e42 613 - djm@cvs.openbsd.org 2001/10/02 08:38:50
614 [ssh-add.c]
615 return non-zero exit code on error; ok markus@
e4d7f734 616 - stevesk@cvs.openbsd.org 2001/10/02 22:56:09
617 [sshd.c]
618 #include "channels.h" for channel_set_af()
76fbdd47 619 - markus@cvs.openbsd.org 2001/10/03 10:01:20
620 [auth.c]
621 use realpath() for homedir, too. from jinmei@isl.rdc.toshiba.co.jp
c8a62153 622
d9d47a26 62320011001
624 - (stevesk) loginrec.c: fix type conversion problems exposed when using
625 64-bit off_t.
626
d8d6c87e 62720010929
628 - (bal) move reading 'config.h' up higher. Patch by albert chin
629 <china@thewrittenword.com)
630
fc1fc39e 63120010928
632 - (djm) OpenBSD CVS sync:
633 - djm@cvs.openbsd.org 2001/09/28 09:49:31
634 [scard.c]
635 Fix segv when smartcard communication error occurs during key load.
636 ok markus@
e3d5570b 637 - (djm) Update spec files for new x11-askpass
fc1fc39e 638
8a9ac95d 63920010927
640 - (stevesk) session.c: declare do_pre_login() before use
641 wayned@users.sourceforge.net
642
aa9f6a6e 64320010925
644 - (djm) Pull in auth-krb5.c from OpenBSD CVS. NB. it is not currently used.
168edd95 645 - (djm) Sync $sysconfdir/moduli
948fd8b9 646 - (djm) Add AC_SYS_LARGEFILE configure test
4f9d80ee 647 - (djm) Avoid bad and unportable sprintf usage in compat code
aa9f6a6e 648
57dade33 64920010923
650 - (bal) updated ssh.c to mirror minor getopts 'extern int' formating done
651 by stevesk@
927c3e15 652 - (bal) Removed 'extern int optopt;' since it is dead wood.
8ead88d3 653 - (bal) Updated all *.specs for 2.9.9p1 and updated version.h
57dade33 654
8ab12eb4 65520010923
656 - (bal) OpenBSD CVS Sync
657 - markus@cvs.openbsd.org 2001/09/23 11:09:13
658 [authfile.c]
659 relax permission check for private key files.
157fc8e1 660 - markus@cvs.openbsd.org 2001/09/23 09:58:13
661 [LICENCE]
662 new rijndael implementation
8ab12eb4 663
64bdafe1 66420010920
665 - (tim) [scard/Makefile.in] Don't strip the Java binary
4a38efad 666 - (stevesk) sun_len, SUN_LEN() configure stuff no longer required
fc7eca52 667 - (bal) OpenBSD CVS Sync
668 - stevesk@cvs.openbsd.org 2001/09/20 00:15:54
669 [sshd.8]
670 fix ClientAliveCountMax
ddcfed57 671 - markus@cvs.openbsd.org 2001/09/20 13:46:48
672 [auth2.c]
673 key_read returns now -1 or 1
bcdb96c2 674 - markus@cvs.openbsd.org 2001/09/20 13:50:40
675 [compat.c compat.h ssh.c]
676 bug compat: request a dummy channel for -N (no shell) sessions +
677 cleanup; vinschen@redhat.com
4a778de1 678 - mouring@cvs.openbsd.org 2001/09/20 20:57:51
679 [sshd_config]
680 CheckMail removed. OKed stevesk@
64bdafe1 681
4cdbc654 68220010919
35c69348 683 - (bal) OpenBSD Sync
4cdbc654 684 - markus@cvs.openbsd.org 2001/09/19 10:08:51
685 [sshd.8]
686 command=xxx applies to subsystem now, too
cb8c7bad 687 - markus@cvs.openbsd.org 2001/09/19 13:23:29
688 [key.c]
689 key_read() now returns -1 on type mismatch, too
e1c5bfaf 690 - stevesk@cvs.openbsd.org 2001/09/19 19:24:19
691 [readconf.c readconf.h scp.c sftp.c ssh.1]
692 add ClearAllForwardings ssh option and set it in scp and sftp; ok
693 markus@
f34f05d5 694 - stevesk@cvs.openbsd.org 2001/09/19 19:35:30
695 [authfd.c]
696 use sizeof addr vs. SUN_LEN(addr) for sockaddr_un. Stevens
697 blesses this and we do it this way elsewhere. this helps in
698 portable because not all systems have SUN_LEN() and
699 sockaddr_un.sun_len. ok markus@
2043936f 700 - stevesk@cvs.openbsd.org 2001/09/19 21:04:53
701 [sshd.8]
702 missing -t in usage
368bae7d 703 - stevesk@cvs.openbsd.org 2001/09/19 21:41:57
704 [sshd.8]
705 don't advertise -V in usage; ok markus@
35c69348 706 - (bal) openbsd-compat/vis.[ch] is dead wood. Removed.
4cdbc654 707
d0b19c95 70820010918
46a831dd 709 - (djm) Configure support for smartcards. Based on Ben's work.
fef4ea6b 710 - (djm) Revert setgroups call, it causes problems on OS-X
46a831dd 711 - (djm) Avoid warning on BSDgetopt
93816ec8 712 - (djm) More makefile infrastructre for smartcard support, also based
713 on Ben's work
4b255446 714 - (djm) Specify --datadir in RPM spec files so smartcard applet gets
715 put somewhere sane. Add Ssh.bin to manifest.
69c94072 716 - (djm) Make smartcard support conditional in Redhat RPM spec
1a77481c 717 - (bal) LICENCE update. Has not been done in a while.
f49df8e9 718 - (stevesk) nchan.c: we use X/Open Sockets on HP-UX now so shutdown(2)
719 returns ENOTCONN vs. EINVAL for socket not connected; remove EINVAL
720 check. ok Lutz Jaenicke
35c69348 721 - (bal) OpenBSD CVS Sync
f1278af7 722 - stevesk@cvs.openbsd.org 2001/09/17 17:57:57
723 [scp.1 scp.c sftp.1 sftp.c]
724 add -Fssh_config option; ok markus@
cf54363d 725 - stevesk@cvs.openbsd.org 2001/09/17 19:27:15
726 [kexdh.c kexgex.c key.c key.h ssh-dss.c ssh-keygen.c ssh-rsa.c]
727 u_char*/char* cleanup; ok markus
4e842b5e 728 - markus@cvs.openbsd.org 2001/09/17 20:22:14
729 [scard.c]
730 never keep a connection to the smartcard open.
731 allows ssh-keygen -D U while the agent is running; report from
732 jakob@
e3c1c3e6 733 - stevesk@cvs.openbsd.org 2001/09/17 20:38:09
734 [sftp.1 sftp.c]
735 cleanup and document -1, -s and -S; ok markus@
f7436b8c 736 - markus@cvs.openbsd.org 2001/09/17 20:50:22
737 [key.c ssh-keygen.c]
738 better error handling if you try to export a bad key to ssh.com
a5f82435 739 - markus@cvs.openbsd.org 2001/09/17 20:52:47
740 [channels.c channels.h clientloop.c]
741 try to fix agent-forwarding-backconnection-bug, as seen on HPUX,
742 for example; with Lutz.Jaenicke@aet.TU-Cottbus.DE,
780a9951 743 - markus@cvs.openbsd.org 2001/09/17 21:04:02
744 [channels.c serverloop.c]
745 don't send fake dummy packets on CR (\r)
746 bugreport from yyua@cs.sfu.ca via solar@@openwall.com
b6761a3e 747 - markus@cvs.openbsd.org 2001/09/17 21:09:47
748 [compat.c]
749 more versions suffering the SSH_BUG_DEBUG bug;
750 3.0.x reported by dbutts@maddog.storability.com
edaeb835 751 - stevesk@cvs.openbsd.org 2001/09/17 23:56:07
752 [scp.1]
753 missing -B in usage string
d0b19c95 754
d31a32a4 75520010917
756 - (djm) x11-ssh-askpass-1.2.4 in RPM spec, revert workarounds
cb547f98 757 - (tim) [includes.h openbsd-compat/getopt.c openbsd-compat/getopt.h]
758 rename getopt() to BSDgetopt() to keep form conflicting with
759 system getopt().
760 [Makefile.in configure.in] disable filepriv until I can add
761 missing procpriv calls.
d31a32a4 762
95d00a03 76320010916
764 - (djm) Workaround XFree breakage in RPM spec file
6fcf67f7 765 - (bal) OpenBSD CVS Sync
766 - markus@cvs.openbsd.org 2001/09/16 14:46:54
767 [session.c]
768 calls krb_afslog() after setting $HOME; mattiasa@e.kth.se; fixes
769 pr 1943b
95d00a03 770
0e0144b7 77120010915
772 - (djm) Make do_pre_login static to avoid prototype #ifdef hell
0fd6c7a9 773 - (djm) Sync scard/ stuff
23c098ba 774 - (djm) Redhat spec file cleanups from Pekka Savola <pekkas@netcore.fi> and
775 Redhat
94a29edc 776 - (djm) Redhat initscript config sanity checking from Pekka Savola
777 <pekkas@netcore.fi>
e72ff812 778 - (djm) Clear supplemental groups at sshd start to prevent them from
779 being propogated to random PAM modules. Based on patch from Redhat via
780 Pekka Savola <pekkas@netcore.fi>
a2cb4268 781 - (djm) Make sure rijndael.c picks config.h
782 - (djm) Ensure that u_char gets defined
0e0144b7 783
dcf29cf8 78420010914
785 - (bal) OpenBSD CVS Sync
786 - markus@cvs.openbsd.org 2001/09/13
787 [rijndael.c rijndael.h]
788 missing $OpenBSD
fd022eed 789 - markus@cvs.openbsd.org 2001/09/14
790 [session.c]
791 command=xxx overwrites subsystems, too
9658ecbc 792 - markus@cvs.openbsd.org 2001/09/14
793 [sshd.c]
794 typo
fd022eed 795
88c3bfe0 79620010913
797 - (bal) OpenBSD CVS Sync
798 - markus@cvs.openbsd.org 2001/08/23 11:31:59
799 [cipher.c cipher.h]
800 switch to the optimised AES reference code from
801 http://www.esat.kuleuven.ac.be/~rijmen/rijndael/rijndael-fst-3.0.zip
802
5c53a31e 80320010912
804 - (bal) OpenBSD CVS Sync
805 - jakob@cvs.openbsd.org 2001/08/16 19:18:34
806 [servconf.c servconf.h session.c sshd.8]
807 deprecate CheckMail. ok markus@
54bf768d 808 - stevesk@cvs.openbsd.org 2001/08/16 20:14:57
809 [ssh.1 sshd.8]
810 document case sensitivity for ssh, sshd and key file
811 options and arguments; ok markus@
6d7b3036 812 - stevesk@cvs.openbsd.org 2001/08/17 18:59:47
813 [servconf.h]
814 typo in comment
ae897d7c 815 - stevesk@cvs.openbsd.org 2001/08/21 21:47:42
816 [ssh.1 sshd.8]
817 minor typos and cleanup
c78e5800 818 - stevesk@cvs.openbsd.org 2001/08/22 16:21:21
819 [ssh.1]
820 hostname not optional; ok markus@
9495bfc5 821 - stevesk@cvs.openbsd.org 2001/08/22 16:30:02
822 [sshd.8]
823 no rexd; ok markus@
29999e54 824 - stevesk@cvs.openbsd.org 2001/08/22 17:45:16
825 [ssh.1]
826 document cipher des for protocol 1; ok deraadt@
8fbc356d 827 - camield@cvs.openbsd.org 2001/08/23 17:59:31
828 [sshd.c]
829 end request with 0, not NULL
830 ok markus@
d866473d 831 - stevesk@cvs.openbsd.org 2001/08/23 18:02:48
832 [ssh-agent.1]
833 fix usage; ok markus@
75304f85 834 - stevesk@cvs.openbsd.org 2001/08/23 18:08:59
835 [ssh-add.1 ssh-keyscan.1]
836 minor cleanup
b7f79e7a 837 - danh@cvs.openbsd.org 2001/08/27 22:02:13
838 [ssh-keyscan.c]
839 fix memory fault if non-existent filename is given to the -f option
840 ok markus@
14e4a15f 841 - markus@cvs.openbsd.org 2001/08/28 09:51:26
842 [readconf.c]
843 don't set DynamicForward unless Host matches
e591b98a 844 - markus@cvs.openbsd.org 2001/08/28 15:39:48
845 [ssh.1 ssh.c]
846 allow: ssh -F configfile host
46660a9e 847 - markus@cvs.openbsd.org 2001/08/29 20:44:03
848 [scp.c]
849 clear the malloc'd buffer, otherwise source() will leak malloc'd
850 memory; ok theo@
e675b851 851 - stevesk@cvs.openbsd.org 2001/08/29 23:02:21
852 [sshd.8]
853 add text about -u0 preventing DNS requests; ok markus@
4c780c2a 854 - stevesk@cvs.openbsd.org 2001/08/29 23:13:10
855 [ssh.1 ssh.c]
856 document -D and DynamicForward; ok markus@
d2e3df16 857 - stevesk@cvs.openbsd.org 2001/08/29 23:27:23
858 [ssh.c]
859 validate ports for -L/-R; ok markus@
70068acc 860 - stevesk@cvs.openbsd.org 2001/08/29 23:39:40
861 [ssh.1 sshd.8]
862 additional documentation for GatewayPorts; ok markus@
ad3e169f 863 - naddy@cvs.openbsd.org 2001/08/30 15:42:36
864 [ssh.1]
865 add -D to synopsis line; ok markus@
3a8aabf0 866 - stevesk@cvs.openbsd.org 2001/08/30 16:04:35
867 [readconf.c ssh.1]
868 validate ports for LocalForward/RemoteForward.
869 add host/port alternative syntax for IPv6 (like -L/-R).
870 ok markus@
ed787d14 871 - stevesk@cvs.openbsd.org 2001/08/30 20:36:34
872 [auth-options.c sshd.8]
873 validate ports for permitopen key file option. add host/port
874 alternative syntax for IPv6. ok markus@
4278ff63 875 - markus@cvs.openbsd.org 2001/08/30 22:22:32
876 [ssh-keyscan.c]
877 do not pass pointers to longjmp; fix from wayne@blorf.net
6b759005 878 - markus@cvs.openbsd.org 2001/08/31 11:46:39
879 [sshconnect2.c]
93111dfa 880 disable kbd-interactive if we don't get SSH2_MSG_USERAUTH_INFO_REQUEST
881 messages
882 - stevesk@cvs.openbsd.org 2001/09/03 20:58:33
883 [readconf.c readconf.h ssh.c]
884 fatal() for nonexistent -Fssh_config. ok markus@
91789042 885 - deraadt@cvs.openbsd.org 2001/09/05 06:23:07
886 [scp.1 sftp.1 ssh.1 ssh-agent.1 sshd.8 ssh-keygen.1 ssh-keyscan.1]
887 avoid first person in manual pages
3a222388 888 - stevesk@cvs.openbsd.org 2001/09/12 18:18:25
889 [scp.c]
890 don't forward agent for non third-party copies; ok markus@
5c53a31e 891
c6ed03bd 89220010815
893 - (bal) Fixed stray code in readconf.c that went in by mistake.
65e683bd 894 - OpenBSD CVS Sync
895 - markus@cvs.openbsd.org 2001/08/07 10:37:46
896 [authfd.c authfd.h]
897 extended failure messages from galb@vandyke.com
c7f89f1f 898 - deraadt@cvs.openbsd.org 2001/08/08 07:16:58
899 [scp.1]
900 when describing the -o option, give -o Protocol=1 as the specific example
901 since we are SICK AND TIRED of clueless people who cannot have difficulty
902 thinking on their own.
f2f1bedd 903 - markus@cvs.openbsd.org 2001/08/08 18:20:15
904 [uidswap.c]
905 permanently_set_uid is a noop if user is not privilegued;
906 fixes bug on solaris; from sbi@uchicago.edu
58df8789 907 - markus@cvs.openbsd.org 2001/08/08 21:34:19
908 [uidswap.c]
909 undo last change; does not work for sshd
c3abff07 910 - jakob@cvs.openbsd.org 2001/08/11 22:51:27
911 [ssh.c tildexpand.c]
912 fix more paths beginning with "//"; <bradshaw@staff.crosswalk.com>.
913 ok markus@
4fa5a4db 914 - stevesk@cvs.openbsd.org 2001/08/13 23:38:54
915 [scp.c]
916 don't need main prototype (also sync with rcp); ok markus@
68874d2b 917 - markus@cvs.openbsd.org 2001/08/14 09:23:02
918 [sftp.1 sftp-int.c]
919 "bye"; hk63a@netscape.net
38539909 920 - stevesk@cvs.openbsd.org 2001/08/14 17:54:29
921 [scp.1 sftp.1 ssh.1]
922 consistent documentation and example of ``-o ssh_option'' for sftp and
923 scp; document keyword=argument for ssh.
41cb4569 924 - (bal) QNX resync. OK tim@
c6ed03bd 925
3454ff55 92620010814
927 - (stevesk) sshpty.c, cray.[ch]: whitespace, formatting and cleanup
928 for some #ifdef _CRAY code; ok wendyp@cray.com
5bd6962b 929 - (stevesk) sshpty.c: return 0 on error in cray pty code;
930 ok wendyp@cray.com
4809bc4c 931 - (stevesk) bsd-cray.c: utmp strings are not C strings
8280a5ae 932 - (stevesk) bsd-cray.c: more cleanup; ok wendyp@cray.com
3454ff55 933
d89a02d4 93420010812
935 - (djm) Fix detection of long long int support. Based on patch from
936 Michael Stone <mstone@cs.loyola.edu>. ok stevesk, tim
937
7ef909d3 93820010808
939 - (bal) Minor correction to inet_ntop.h. _BSD_RRESVPORT_H should be
940 _BSD_INET_NTOP_H. Pointed out by Mark Miller <markm@swoon.net>
941
a704dd54 94220010807
943 - (tim) [configure.in sshconnect.c openbsd-compat/Makefile.in
944 openbsd-compat/openbsd-compat.h ] Add inet_ntop.c inet_ntop.h back
945 in. Needed for sshconnect.c
946 [sshconnect.c] fix INET6_ADDRSTRLEN for non IPv6 machines
947 [configure.in] make tests with missing libraries fail
948 patch by Wendy Palm <wendyp@cray.com>
949 Added openbsd-compat/bsd-cray.h. Selective patches from
950 William L. Jones <jones@mail.utexas.edu>
951
4f7893dc 95220010806
953 - OpenBSD CVS Sync
954 - markus@cvs.openbsd.org 2001/07/22 21:32:27
955 [sshpty.c]
956 update comment
0aea6c59 957 - pvalchev@cvs.openbsd.org 2001/07/22 21:32:42
958 [ssh.1]
959 There is no option "Compress", point to "Compression" instead; ok
960 markus
10a2cbef 961 - markus@cvs.openbsd.org 2001/07/22 22:04:19
962 [readconf.c ssh.1]
963 enable challenge-response auth by default; ok millert@
248bad82 964 - markus@cvs.openbsd.org 2001/07/22 22:24:16
965 [sshd.8]
966 Xr login.conf
9f37c0af 967 - markus@cvs.openbsd.org 2001/07/23 09:06:28
968 [sshconnect2.c]
969 reorder default sequence of userauth methods to match ssh behaviour:
970 hostbased,publickey,keyboard-interactive,password
29c440a0 971 - markus@cvs.openbsd.org 2001/07/23 12:47:05
972 [ssh.1]
973 sync PreferredAuthentications
7fd9477e 974 - aaron@cvs.openbsd.org 2001/07/23 14:14:18
975 [ssh-keygen.1]
976 Fix typo.
1bdee08c 977 - stevesk@cvs.openbsd.org 2001/07/23 18:14:58
978 [auth2.c auth-rsa.c]
979 use %lu; ok markus@
bac2ef55 980 - stevesk@cvs.openbsd.org 2001/07/23 18:21:46
981 [xmalloc.c]
982 no zero size xstrdup() error; ok markus@
55684f0c 983 - markus@cvs.openbsd.org 2001/07/25 11:59:35
984 [scard.c]
985 typo in comment
ce773142 986 - markus@cvs.openbsd.org 2001/07/25 14:35:18
987 [readconf.c ssh.1 ssh.c sshconnect.c]
988 cleanup connect(); connection_attempts 4 -> 1; from
989 eivind@freebsd.org
f87f09aa 990 - stevesk@cvs.openbsd.org 2001/07/26 17:18:22
991 [sshd.8 sshd.c]
992 add -t option to test configuration file and keys; pekkas@netcore.fi
993 ok markus@
c42158fe 994 - rees@cvs.openbsd.org 2001/07/26 20:04:27
995 [scard.c ssh-keygen.c]
996 Inquire Cyberflex class for 0xf0 cards
997 change aid to conform to 7816-5
998 remove gratuitous fid selects
2e23cde0 999 - millert@cvs.openbsd.org 2001/07/27 14:50:45
1000 [ssh.c]
1001 If smart card support is compiled in and a smart card is being used
1002 for authentication, make it the first method used. markus@ OK
0b2988ca 1003 - deraadt@cvs.openbsd.org 2001/07/27 17:26:16
1004 [scp.c]
1005 shorten lines
7f19f8bb 1006 - markus@cvs.openbsd.org 2001/07/28 09:21:15
1007 [sshd.8]
1008 cleanup some RSA vs DSA vs SSH1 vs SSH2 notes
79a6cb5c 1009 - mouring@cvs.openbsd.org 2001/07/29 17:02:46
1010 [scp.1]
1011 Clarified -o option in scp.1 OKed by Markus@
0b595937 1012 - jakob@cvs.openbsd.org 2001/07/30 16:06:07
1013 [scard.c scard.h]
1014 better errorcodes from sc_*; ok markus@
d6192346 1015 - stevesk@cvs.openbsd.org 2001/07/30 16:23:30
1016 [rijndael.c rijndael.h]
1017 new BSD-style license:
1018 Brian Gladman <brg@gladman.plus.com>:
1019 >I have updated my code at:
1020 >http://fp.gladman.plus.com/cryptography_technology/rijndael/index.htm
1021 >with a copyright notice as follows:
1022 >[...]
1023 >I am not sure which version of my old code you are using but I am
1024 >happy for the notice above to be substituted for my existing copyright
1025 >intent if this meets your purpose.
71b7a18e 1026 - jakob@cvs.openbsd.org 2001/07/31 08:41:10
1027 [scard.c]
1028 do not complain about missing smartcards. ok markus@
eea098a3 1029 - jakob@cvs.openbsd.org 2001/07/31 09:28:44
1030 [readconf.c readconf.h ssh.1 ssh.c]
1031 add 'SmartcardDevice' client option to specify which smartcard device
1032 is used to access a smartcard used for storing the user's private RSA
1033 key. ok markus@.
88690211 1034 - jakob@cvs.openbsd.org 2001/07/31 12:42:50
1035 [sftp-int.c sftp-server.c]
1036 avoid paths beginning with "//"; <vinschen@redhat.com>
1037 ok markus@
2251e099 1038 - jakob@cvs.openbsd.org 2001/07/31 12:53:34
1039 [scard.c]
1040 close smartcard connection if card is missing
9ff6f66f 1041 - markus@cvs.openbsd.org 2001/08/01 22:03:33
1042 [authfd.c authfd.h readconf.c readconf.h scard.c scard.h ssh-add.c
1043 ssh-agent.c ssh.c]
1044 use strings instead of ints for smartcard reader ids
1930af48 1045 - markus@cvs.openbsd.org 2001/08/01 22:16:45
1046 [ssh.1 sshd.8]
1047 refer to current ietf drafts for protocol v2
4f831fd7 1048 - markus@cvs.openbsd.org 2001/08/01 23:33:09
1049 [ssh-keygen.c]
1050 allow uploading RSA keys for non-default AUT0 (sha1 over passphrase
1051 like sectok).
1a23ac2c 1052 - markus@cvs.openbsd.org 2001/08/01 23:38:45
05b7537a 1053 [scard.c ssh.c]
1054 support finish rsa keys.
1055 free public keys after login -> call finish -> close smartcard.
93a56445 1056 - markus@cvs.openbsd.org 2001/08/02 00:10:17
1057 [ssh-keygen.c]
1058 add -D readerid option (download, i.e. print public RSA key to stdout).
1059 check for card present when uploading keys.
1060 use strings instead of ints for smartcard reader ids, too.
285d2b15 1061 - jakob@cvs.openbsd.org 2001/08/02 08:58:35
1062 [ssh-keygen.c]
1063 change -u (upload smartcard key) to -U. ok markus@
58153e34 1064 - jakob@cvs.openbsd.org 2001/08/02 15:06:52
1065 [ssh-keygen.c]
1066 more verbose usage(). ok markus@
f0d6bdcf 1067 - jakob@cvs.openbsd.org 2001/08/02 15:07:23
1068 [ssh-keygen.1]
1069 document smartcard upload/download. ok markus@
315dfb04 1070 - jakob@cvs.openbsd.org 2001/08/02 15:32:10
1071 [ssh.c]
1072 add smartcard to usage(). ok markus@
3e984472 1073 - jakob@cvs.openbsd.org 2001/08/02 15:43:57
1074 [ssh-agent.c ssh.c ssh-keygen.c]
1075 add /* SMARTCARD */ to #else/#endif. ok markus@
1a23ac2c 1076 - jakob@cvs.openbsd.org 2001/08/02 16:14:05
dd2495cb 1077 [scard.c ssh-agent.c ssh.c ssh-keygen.c]
1078 clean up some /* SMARTCARD */. ok markus@
0f6d5acf 1079 - mpech@cvs.openbsd.org 2001/08/02 18:37:35
1080 [ssh-keyscan.1]
1081 o) .Sh AUTHOR -> .Sh AUTHORS;
1082 o) .Sh EXAMPLE -> .Sh EXAMPLES;
1083 o) Delete .Sh OPTIONS. Text moved to .Sh DESCRIPTION;
1084
1085 millert@ ok
5a26334c 1086 - jakob@cvs.openbsd.org 2001/08/03 10:31:19
1087 [ssh-add.1]
1088 document smartcard options. ok markus@
33e766d2 1089 - jakob@cvs.openbsd.org 2001/08/03 10:31:30
1090 [ssh-add.c ssh-agent.c ssh-keyscan.c]
1091 improve usage(). ok markus@
5061072f 1092 - markus@cvs.openbsd.org 2001/08/05 23:18:20
1093 [ssh-keyscan.1 ssh-keyscan.c]
1094 ssh 2 support; from wayned@users.sourceforge.net
578954b1 1095 - markus@cvs.openbsd.org 2001/08/05 23:29:58
1096 [ssh-keyscan.c]
1097 make -t dsa work with commercial servers, too
cddb9003 1098 - stevesk@cvs.openbsd.org 2001/08/06 19:47:05
1099 [scp.c]
1100 use alarm vs. setitimer for portable; ok markus@
94796c10 1101 - (bal) ssh-keyscan double -lssh hack due to seed_rng().
1a23ac2c 1102 - (bal) Second around of UNICOS patches. A few other things left.
1103 Patches by William L. Jones <jones@mail.utexas.edu>
4f7893dc 1104
29a47408 110520010803
1106 - (djm) Fix interrupted read in entropy gatherer. Spotted by markus@ on
1107 a fast UltraSPARC.
1108
42ad0eec 110920010726
1110 - (stevesk) use mysignal() in protocol 1 loop now that the SIGCHLD
1111 handler has converged.
1112
aa7dbcdd 111320010725
1114 - (bal) Added 'install-nokeys' to Makefile to assist package builders.
1115
0b7d19eb 111620010724
1117 - (bal) 4711 not 04711 for ssh binary.
1118
ca5c7d6a 111920010722
1120 - (bal) Starting the Unicossmk merger. File merged TODO, configure.in,
1121 myproposal.h, ssh_prng_cmds.in, and openbsd-compat/Makefile.in.
1122 Added openbsd-compat/bsd-cray.c. Rest will be merged after
1123 approval. Selective patches from William L. Jones
1124 <jones@mail.utexas.edu>
7458aff1 1125 - OpenBSD CVS Sync
1126 - markus@cvs.openbsd.org 2001/07/18 21:10:43
1127 [sshpty.c]
1128 pr #1946, allow sshd if /dev is readonly
ec9f3450 1129 - stevesk@cvs.openbsd.org 2001/07/18 21:40:40
1130 [ssh-agent.c]
1131 chdir("/") from bbraun@synack.net; ok markus@
5bef3c35 1132 - stevesk@cvs.openbsd.org 2001/07/19 00:41:44
1133 [ssh.1]
1134 escape chars are below now
7efa8482 1135 - markus@cvs.openbsd.org 2001/07/20 14:46:11
1136 [ssh-agent.c]
1137 do not exit() from signal handlers; ok deraadt@
491f5f7b 1138 - stevesk@cvs.openbsd.org 2001/07/20 18:41:51
1139 [ssh.1]
1140 "the" command line
ca5c7d6a 1141
979b0a64 114220010719
1143 - (tim) [configure.in] put inet_aton back in AC_CHECK_FUNCS.
1144 report from Mark Miller <markm@swoon.net>
1145
6e69a45d 114620010718
1147 - OpenBSD CVS Sync
2c5b1791 1148 - stevesk@cvs.openbsd.org 2001/07/14 15:10:17
1149 [readpass.c sftp-client.c sftp-common.c sftp-glob.c]
1150 delete spurious #includes; ok deraadt@ markus@
68fa858a 1151 - markus@cvs.openbsd.org 2001/07/15 16:17:08
2c5b1791 1152 [serverloop.c]
1153 schedule client alive for ssh2 only, greg@cheers.bungi.com
2c71dfc1 1154 - stevesk@cvs.openbsd.org 2001/07/15 16:57:21
1155 [ssh-agent.1]
1156 -d will not fork; ok markus@
d1fc1b88 1157 - stevesk@cvs.openbsd.org 2001/07/15 16:58:29
68fa858a 1158 [ssh-agent.c]
d1fc1b88 1159 typo in usage; ok markus@
68fa858a 1160 - markus@cvs.openbsd.org 2001/07/17 20:48:42
1161 [ssh-agent.c]
e364646f 1162 update maxfd if maxfd is closed; report from jmcelroy@dtgnet.com
68fa858a 1163 - markus@cvs.openbsd.org 2001/07/17 21:04:58
1164 [channels.c channels.h clientloop.c nchan.c serverloop.c]
489aa2e9 1165 keep track of both maxfd and the size of the malloc'ed fdsets.
1166 update maxfd if maxfd gets closed.
c3941fa6 1167 - mouring@cvs.openbsd.org 2001/07/18 16:45:52
1168 [scp.c]
1169 Missing -o in scp usage()
68fa858a 1170 - (bal) Cleaned up trailing spaces in ChangeLog.
31fb6aaf 1171 - (bal) Allow sshd to switch user context without password for Cygwin.
1172 Patch by Corinna Vinschen <vinschen@redhat.com>
41fcc457 1173 - (bal) Updated cygwin README and ssh-host-config. Patch by
ad0cc858 1174 Corinna Vinschen <vinschen@redhat.com>
6e69a45d 1175
39c98ef7 117620010715
1177 - (bal) Set "BROKEN_GETADDRINFO" for darwin platform. Reported by
1178 Josh Larios <jdlarios@cac.washington.edu>
c14e6239 1179 - (tim) put openssh/openbsd-compat/inet_aton.[ch] back in.
1180 needed by openbsd-compat/fake-getaddrinfo.c
68fa858a 1181
6800f427 118220010714
1183 - (stevesk) change getopt() declaration
763a1a18 1184 - (stevesk) configure.in: use ll suffix for long long constant
1185 in snprintf() test
6800f427 1186
453b4bd0 118720010713
68fa858a 1188 - (djm) Enable /etc/nologin check on PAM systems, as some lack the
1189 pam_nologin module. Report from William Yodlowsky
453b4bd0 1190 <bsd@openbsd.rutgers.edu>
9912296f 1191 - (djm) Revert dirname fix, a better one is on its way.
1ee482c5 1192 - OpenBSD CVS Sync
1193 - markus@cvs.openbsd.org 2001/07/04 22:47:19
1194 [ssh-agent.c]
1195 ignore SIGPIPE when debugging, too
878b5225 1196 - markus@cvs.openbsd.org 2001/07/04 23:13:10
1197 [scard.c scard.h ssh-agent.c]
1198 handle card removal more gracefully, add sc_close() to scard.h
77261db4 1199 - markus@cvs.openbsd.org 2001/07/04 23:39:07
1200 [ssh-agent.c]
1201 for smartcards remove both RSA1/2 keys
a0e0f486 1202 - markus@cvs.openbsd.org 2001/07/04 23:49:27
1203 [ssh-agent.c]
1204 handle mutiple adds of the same smartcard key
62bb2c8f 1205 - espie@cvs.openbsd.org 2001/07/05 11:43:33
1206 [sftp-glob.c]
1207 Directly cast to the right type. Ok markus@
1208 - stevesk@cvs.openbsd.org 2001/07/05 20:32:47
1209 [sshconnect1.c]
1210 statement after label; ok dugsong@
97de229c 1211 - stevesk@cvs.openbsd.org 2001/07/08 15:23:38
1212 [servconf.c]
1213 fix ``MaxStartups max''; ok markus@
f5a1a01a 1214 - fgsch@cvs.openbsd.org 2001/07/09 05:58:47
1215 [ssh.c]
1216 Use getopt(3); markus@ ok.
ed916b28 1217 - deraadt@cvs.openbsd.org 2001/07/09 07:04:53
1218 [session.c sftp-int.c]
1219 correct type on last arg to execl(); nordin@cse.ogi.edu
333b5ba7 1220 - markus@cvs.openbsd.org 2001/07/10 21:49:12
1221 [readpass.c]
1222 don't panic if fork or pipe fail (just return an empty passwd).
46d738cd 1223 - itojun@cvs.openbsd.org 2001/07/11 00:24:53
1224 [servconf.c]
68fa858a 1225 make it compilable in all 4 combination of KRB4/KRB5 settings.
46d738cd 1226 dugsong ok
1227 XXX isn't it sensitive to the order of -I/usr/include/kerberosIV and
1228 -I/usr/include/kerberosV?
afd501f9 1229 - markus@cvs.openbsd.org 2001/07/11 16:29:59
1230 [ssh.c]
1231 sort options string, fix -p, add -k
1232 - markus@cvs.openbsd.org 2001/07/11 18:26:15
1233 [auth.c]
1234 no need to call dirname(pw->pw_dir).
1235 note that dirname(3) modifies its argument on some systems.
82d95536 1236 - (djm) Reorder Makefile.in so clean targets work a little better when
1237 run directly from Makefile.in
1812a662 1238 - (djm) Pull in getopt(3) from OpenBSD libc for the optreset extension.
453b4bd0 1239
85b08d98 124020010711
68fa858a 1241 - (djm) dirname(3) may modify its argument on glibc and other systems.
85b08d98 1242 Patch from markus@, spotted by Tom Holroyd <tomh@po.crl.go.jp>
1243
a96070d4 124420010704
1245 - OpenBSD CVS Sync
1246 - markus@cvs.openbsd.org 2001/06/25 08:25:41
68fa858a 1247 [channels.c channels.h cipher.c clientloop.c compat.c compat.h
1248 hostfile.c kex.c kex.h key.c key.h nchan.c packet.c serverloop.c
a96070d4 1249 session.c session.h sftp-server.c ssh-add.c ssh-agent.c uuencode.h]
1250 update copyright for 2001
8a497b11 1251 - markus@cvs.openbsd.org 2001/06/25 17:18:27
1252 [ssh-keygen.1]
68fa858a 1253 sshd(8) will never read the private keys, but ssh(1) does;
8a497b11 1254 hugh@mimosa.com
6978866a 1255 - provos@cvs.openbsd.org 2001/06/25 17:54:47
1256 [auth.c auth.h auth-rsa.c]
68fa858a 1257 terminate secure_filename checking after checking homedir. that way
ffb215be 1258 it works on AFS. okay markus@
1259 - stevesk@cvs.openbsd.org 2001/06/25 20:26:37
1260 [auth2.c sshconnect2.c]
1261 prototype cleanup; ok markus@
2b30154a 1262 - markus@cvs.openbsd.org 2001/06/26 02:47:07
1263 [ssh-keygen.c]
1264 allow loading a private RSA key to a cyberflex card.
ffdb5d70 1265 - markus@cvs.openbsd.org 2001/06/26 04:07:06
1266 [ssh-agent.1 ssh-agent.c]
1267 add debug flag
983def13 1268 - markus@cvs.openbsd.org 2001/06/26 04:59:59
1269 [authfd.c authfd.h ssh-add.c]
1270 initial support for smartcards in the agent
f7e5ac7b 1271 - markus@cvs.openbsd.org 2001/06/26 05:07:43
1272 [ssh-agent.c]
1273 update usage
2b5fe3b8 1274 - markus@cvs.openbsd.org 2001/06/26 05:33:34
1275 [ssh-agent.c]
1276 more smartcard support.
543baeea 1277 - mpech@cvs.openbsd.org 2001/06/26 05:48:07
1278 [sshd.8]
1279 remove unnecessary .Pp between .It;
1280 millert@ ok
0c9664c2 1281 - markus@cvs.openbsd.org 2001/06/26 05:50:11
1282 [auth2.c]
1283 new interface for secure_filename()
2a1e4639 1284 - itojun@cvs.openbsd.org 2001/06/26 06:32:58
68fa858a 1285 [atomicio.h authfd.h authfile.h auth.h auth-options.h bufaux.h
1286 buffer.h canohost.h channels.h cipher.h clientloop.h compat.h
1287 compress.h crc32.h deattack.h dh.h dispatch.h groupaccess.h
1288 hostfile.h kex.h key.h log.h mac.h match.h misc.h mpaux.h packet.h
2a1e4639 1289 radix.h readconf.h readpass.h rsa.h]
1290 prototype pedant. not very creative...
1291 - () -> (void)
1292 - no variable names
1c06a9ca 1293 - itojun@cvs.openbsd.org 2001/06/26 06:33:07
68fa858a 1294 [servconf.h serverloop.h session.h sftp-client.h sftp-common.h
1295 sftp-glob.h sftp-int.h sshconnect.h ssh-dss.h sshlogin.h sshpty.h
1c06a9ca 1296 ssh-rsa.h tildexpand.h uidswap.h uuencode.h xmalloc.h]
1297 prototype pedant. not very creative...
1298 - () -> (void)
1299 - no variable names
ced49be2 1300 - dugsong@cvs.openbsd.org 2001/06/26 16:15:25
68fa858a 1301 [auth1.c auth.h auth-krb4.c auth-passwd.c readconf.c readconf.h
ced49be2 1302 servconf.c servconf.h session.c sshconnect1.c sshd.c]
68fa858a 1303 Kerberos v5 support for SSH1, mostly from Assar Westerlund
ced49be2 1304 <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
3474b2b4 1305 - markus@cvs.openbsd.org 2001/06/26 17:25:34
1306 [ssh.1]
1307 document SSH_ASKPASS; fubob@MIT.EDU
255cabd9 1308 - markus@cvs.openbsd.org 2001/06/26 17:27:25
68fa858a 1309 [authfd.h authfile.h auth.h auth-options.h bufaux.h buffer.h
1310 canohost.h channels.h cipher.h clientloop.h compat.h compress.h
1311 crc32.h deattack.h dh.h dispatch.h groupaccess.c groupaccess.h
1312 hostfile.h kex.h key.h log.c log.h mac.h misc.c misc.h mpaux.h
1313 packet.h radix.h readconf.h readpass.h rsa.h servconf.h serverloop.h
1314 session.h sftp-common.c sftp-common.h sftp-glob.h sftp-int.h
1315 sshconnect.h ssh-dss.h sshlogin.h sshpty.h ssh-rsa.h sshtty.h
255cabd9 1316 tildexpand.h uidswap.h uuencode.h xmalloc.h]
1317 remove comments from .h, since they are cut&paste from the .c files
1318 and out of sync
83f46621 1319 - dugsong@cvs.openbsd.org 2001/06/26 17:41:49
1320 [servconf.c]
1321 #include <kafs.h>
57156994 1322 - markus@cvs.openbsd.org 2001/06/26 20:14:11
1323 [key.c key.h ssh.c sshconnect1.c sshconnect2.c]
1324 add smartcard support to the client, too (now you can use both
1325 the agent and the client).
1326 - markus@cvs.openbsd.org 2001/06/27 02:12:54
1327 [serverloop.c serverloop.h session.c session.h]
1328 quick hack to make ssh2 work again.
80f8f24f 1329 - markus@cvs.openbsd.org 2001/06/27 04:48:53
1330 [auth.c match.c sshd.8]
1331 tridge@samba.org
d0bfe096 1332 - markus@cvs.openbsd.org 2001/06/27 05:35:42
1333 [ssh-keygen.c]
1334 use cyberflex_inq_class to inquire class.
2b63e803 1335 - markus@cvs.openbsd.org 2001/06/27 05:42:25
1336 [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
1337 s/generate_additional_parameters/rsa_generate_additional_parameters/
1338 http://www.humppa.com/
34e02b83 1339 - markus@cvs.openbsd.org 2001/06/27 06:26:36
1340 [ssh-add.c]
1341 convert to getopt(3)
d3260e12 1342 - stevesk@cvs.openbsd.org 2001/06/28 19:57:35
1343 [ssh-keygen.c]
1344 '\0' terminated data[] is ok; ok markus@
49ccba9c 1345 - markus@cvs.openbsd.org 2001/06/29 07:06:34
1346 [ssh-keygen.c]
1347 new error handling for cyberflex_*
542d70b8 1348 - markus@cvs.openbsd.org 2001/06/29 07:11:01
1349 [ssh-keygen.c]
1350 initialize early
eea46d13 1351 - stevesk@cvs.openbsd.org 2001/06/29 18:38:44
1352 [clientloop.c]
1353 sync function definition with declaration; ok markus@
8ab2cb35 1354 - stevesk@cvs.openbsd.org 2001/06/29 18:40:28
1355 [channels.c]
1356 use socklen_t for getsockopt arg #5; ok markus@
b3f8a79c 1357 - stevesk@cvs.openbsd.org 2001/06/30 18:08:40
1358 [channels.c channels.h clientloop.c]
1359 adress -> address; ok markus@
5b5d170c 1360 - markus@cvs.openbsd.org 2001/07/02 13:59:15
1361 [serverloop.c session.c session.h]
68fa858a 1362 wait until !session_have_children(); bugreport from
5b5d170c 1363 Lutz.Jaenicke@aet.TU-Cottbus.DE
613021ac 1364 - markus@cvs.openbsd.org 2001/07/02 22:29:20
1365 [readpass.c]
1366 do not return NULL, use "" instead.
666248da 1367 - markus@cvs.openbsd.org 2001/07/02 22:40:18
1368 [ssh-keygen.c]
1369 update for sectok.h interface changes.
3cf2be58 1370 - markus@cvs.openbsd.org 2001/07/02 22:52:57
1371 [channels.c channels.h serverloop.c]
1372 improve cleanup/exit logic in ssh2:
1373 stop listening to channels, detach channel users (e.g. sessions).
1374 wait for children (i.e. dying sessions), send exit messages,
1375 cleanup all channels.
637b033d 1376 - (bal) forget a few new files in sync up.
06be7c3b 1377 - (bal) Makefile fix up requires scard.c
ac96ca42 1378 - (stevesk) sync misc.h
9c328529 1379 - (stevesk) more sync for session.c
4f1f4d8d 1380 - (stevesk) sync servconf.h (comments)
afb9165e 1381 - (tim) [contrib/caldera/openssh.spec] sync with Caldera
d9e3d19f 1382 - (tim) [openbsd-compat/dirname.h] Remove ^M causing some compilers to
1383 issue warning (line 1: tokens ignored at end of directive line)
1384 - (tim) [sshconnect1.c] give the compiler something to do for success:
1385 if KRB5 and AFS are not defined
1386 (ERROR: "sshconnect1.c", line 1274: Syntax error before or at: })
637b033d 1387
aa8d09da 138820010629
1389 - (bal) Removed net_aton() since we don't use it any more
64c4b8d7 1390 - (bal) Fixed _DISABLE_VPOSIX in readpassphrase.c.
7af3215a 1391 - (bal) Updated zlib's home. Thanks to David Howe <DaveHowe@gmx.co.uk>.
16adf618 1392 - (stevesk) remove _REENTRANT #define
16995a2c 1393 - (stevesk) session.c: use u_int for envsize
6a26f353 1394 - (stevesk) remove cli.[ch]
aa8d09da 1395
f11065cb 139620010628
1397 - (djm) Sync openbsd-compat with -current libc
68fa858a 1398 - (djm) Fix from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> for my
050df9db 1399 broken makefile
07608451 1400 - (bal) Removed strtok_r() and inet_ntop() since they are no longer used.
1401 - (bal) Remove getusershell() since it's no longer used.
f11065cb 1402
78220944 140320010627
1404 - (djm) Reintroduce pam_session call for non-pty sessions.
68fa858a 1405 - (djm) Remove redundant and incorrect test for max auth attempts in
1406 PAM kbdint code. Based on fix from Matthew Melvin
763dfdf0 1407 <matthewm@webcentral.com.au>
f0194608 1408 - (djm) Rename sysconfdir/primes => sysconfdir/moduli
68fa858a 1409 - (djm) Oops, forgot make logic for primes=>moduli. Also try to rename
ff4955c9 1410 existing primes->moduli if it exists.
0eb1a22d 1411 - (djm) Sync with -current openbsd-compat/readpassphrase.c:
1412 - djm@cvs.openbsd.org 2001/06/27 13:23:30
1413 typo, spotted by Tom Holroyd <tomh@po.crl.go.jp>; ok deraadt@
5ed2bb5b 1414 - (djm) Turn up warnings if gcc or egcs detected
b8fea62d 1415 - (stevesk) for HP-UX 11.X use X/Open socket interface;
1416 pulls in modern socket prototypes and eliminates a number of compiler
1417 warnings. see xopen_networking(7).
fef01705 1418 - (stevesk) fix x11 forwarding from _PATH_XAUTH change
28564873 1419 - (stevesk) use X/Open socket interface for HP-UX 10.X also
78220944 1420
e16f4ac8 142120010625
0cd000dd 1422 - OpenBSD CVS Sync
bc233fdf 1423 - markus@cvs.openbsd.org 2001/06/21 21:08:25
1424 [session.c]
1425 don't reset forced_command (we allow multiple login shells in
1426 ssh2); dwd@bell-labs.com
a5a2da3b 1427 - mpech@cvs.openbsd.org 2001/06/22 10:17:51
1428 [ssh.1 sshd.8 ssh-keyscan.1]
1429 o) .Sh AUTHOR -> .Sh AUTHORS;
1430 o) remove unnecessary .Pp;
1431 o) better -mdoc style;
1432 o) typo;
1433 o) sort SEE ALSO;
a5a2da3b 1434 aaron@ ok
e2854364 1435 - provos@cvs.openbsd.org 2001/06/22 21:27:08
1436 [dh.c pathnames.h]
1437 use /etc/moduli instead of /etc/primes, okay markus@
e2432638 1438 - provos@cvs.openbsd.org 2001/06/22 21:28:53
1439 [sshd.8]
1440 document /etc/moduli
96a7b0cc 1441 - markus@cvs.openbsd.org 2001/06/22 21:55:49
68fa858a 1442 [auth2.c auth-rsa.c pathnames.h ssh.1 sshd.8 sshd_config
96a7b0cc 1443 ssh-keygen.1]
1444 merge authorized_keys2 into authorized_keys.
1445 authorized_keys2 is used for backward compat.
1446 (just append authorized_keys2 to authorized_keys).
826676b3 1447 - provos@cvs.openbsd.org 2001/06/22 21:57:59
1448 [dh.c]
1449 increase linebuffer to deal with larger moduli; use rewind instead of
1450 close/open
bc233fdf 1451 - markus@cvs.openbsd.org 2001/06/22 22:21:20
1452 [sftp-server.c]
1453 allow long usernames/groups in readdir
a599bd06 1454 - markus@cvs.openbsd.org 2001/06/22 23:35:21
2e000c58 1455 [ssh.c]
1456 don't overwrite argv (fixes ssh user@host in 'ps'), report by ericj@
cb220a93 1457 - deraadt@cvs.openbsd.org 2001/06/23 00:16:16
1458 [scp.c]
1459 slightly better care
d0c8ca5c 1460 - markus@cvs.openbsd.org 2001/06/23 00:20:57
1461 [auth2.c auth.c auth.h auth-rh-rsa.c]
1462 *known_hosts2 is obsolete for hostbased authentication and
1463 only used for backward compat. merge ssh1/2 hostkey check
1464 and move it to auth.c
e16f4ac8 1465 - deraadt@cvs.openbsd.org 2001/06/23 02:33:05
1466 [sftp.1 sftp-server.8 ssh-keygen.1]
1467 join .%A entries; most by bk@rt.fm
f49bc4f7 1468 - markus@cvs.openbsd.org 2001/06/23 02:34:33
68fa858a 1469 [kexdh.c kexgex.c kex.h pathnames.h readconf.c servconf.h ssh.1
f49bc4f7 1470 sshconnect1.c sshconnect2.c sshconnect.c sshconnect.h sshd.8]
68fa858a 1471 get rid of known_hosts2, use it for hostkey lookup, but do not
f49bc4f7 1472 modify.
7d747e89 1473 - markus@cvs.openbsd.org 2001/06/23 03:03:59
1474 [sshd.8]
1475 draft-ietf-secsh-dh-group-exchange-01.txt
73473230 1476 - markus@cvs.openbsd.org 2001/06/23 03:04:42
1477 [auth2.c auth-rh-rsa.c]
1478 restore correct ignore_user_known_hosts logic.
c10d042a 1479 - markus@cvs.openbsd.org 2001/06/23 05:26:02
1480 [key.c]
1481 handle sigature of size 0 (some broken clients send this).
7b518233 1482 - deraadt@cvs.openbsd.org 2001/06/23 05:57:09
1483 [sftp.1 sftp-server.8 ssh-keygen.1]
1484 ok, tmac is now fixed
2e0becb6 1485 - markus@cvs.openbsd.org 2001/06/23 06:41:10
1486 [ssh-keygen.c]
1487 try to decode ssh-3.0.0 private rsa keys
1488 (allow migration to openssh, not vice versa), #910
396c147e 1489 - itojun@cvs.openbsd.org 2001/06/23 15:12:20
68fa858a 1490 [auth1.c auth2.c auth2-chall.c authfd.c authfile.c auth-rhosts.c
1491 canohost.c channels.c cipher.c clientloop.c deattack.c dh.c
1492 hostfile.c kex.c kexdh.c kexgex.c key.c nchan.c packet.c radix.c
1493 readpass.c scp.c servconf.c serverloop.c session.c sftp.c
1494 sftp-client.c sftp-glob.c sftp-int.c sftp-server.c ssh-add.c
1495 ssh-agent.c ssh.c sshconnect1.c sshconnect2.c sshconnect.c sshd.c
396c147e 1496 ssh-keygen.c ssh-keyscan.c]
68fa858a 1497 more strict prototypes. raise warning level in Makefile.inc.
396c147e 1498 markus ok'ed
1499 TODO; cleanup headers
a599bd06 1500 - markus@cvs.openbsd.org 2001/06/23 17:05:22
1501 [ssh-keygen.c]
1502 fix import for (broken?) ssh.com/f-secure private keys
1503 (i tested > 1000 RSA keys)
3730bb22 1504 - itojun@cvs.openbsd.org 2001/06/23 17:48:18
1505 [sftp.1 ssh.1 sshd.8 ssh-keyscan.1]
1506 kill whitespace at EOL.
3aca00a3 1507 - markus@cvs.openbsd.org 2001/06/23 19:12:43
1508 [sshd.c]
1509 pidfile/sigterm race; bbraun@synack.net
ce404659 1510 - markus@cvs.openbsd.org 2001/06/23 22:37:46
1511 [sshconnect1.c]
1512 consistent with ssh2: skip key if empty passphrase is entered,
1513 retry num_of_passwd_prompt times if passphrase is wrong. ok fgsch@
2cee8a25 1514 - markus@cvs.openbsd.org 2001/06/24 05:25:10
1515 [auth-options.c match.c match.h]
1516 move ip+hostname check to match.c
1843a425 1517 - markus@cvs.openbsd.org 2001/06/24 05:35:33
1518 [readpass.c readpass.h ssh-add.c sshconnect2.c ssh-keygen.c]
1519 switch to readpassphrase(3)
1520 2.7/8-stable needs readpassphrase.[ch] from libc
80097c54 1521 - markus@cvs.openbsd.org 2001/06/24 05:47:13
1522 [sshconnect2.c]
1523 oops, missing format string
b4e7177c 1524 - markus@cvs.openbsd.org 2001/06/24 17:18:31
1525 [ttymodes.c]
1526 passing modes works fine: debug2->3
ab88181c 1527 - (djm) -Wall fix for session.c
3159d49a 1528 - (djm) Bring in readpassphrase() from OpenBSD libc. Compiles OK on Linux and
1529 Solaris
0cd000dd 1530
7751d4eb 153120010622
1532 - (stevesk) handle systems without pw_expire and pw_change.
1533
e04e7a19 153420010621
1535 - OpenBSD CVS Sync
1536 - markus@cvs.openbsd.org 2001/06/16 08:49:38
1537 [misc.c]
1538 typo; dunlap@apl.washington.edu
c03175c6 1539 - markus@cvs.openbsd.org 2001/06/16 08:50:39
1540 [channels.h]
1541 bad //-style comment; thx to stevev@darkwing.uoregon.edu
08c260ea 1542 - markus@cvs.openbsd.org 2001/06/16 08:57:35
1543 [scp.c]
1544 no stdio or exit() in signal handlers.
c4d49b85 1545 - markus@cvs.openbsd.org 2001/06/16 08:58:34
1546 [misc.c]
1547 copy pw_expire and pw_change, too.
dac6753b 1548 - markus@cvs.openbsd.org 2001/06/19 12:34:09
1549 [session.c]
1550 cleanup forced command handling, from dwd@bell-labs.com
ff027d84 1551 - markus@cvs.openbsd.org 2001/06/19 14:09:45
1552 [session.c sshd.8]
1553 disable x11-fwd if use_login is enabled; from lukem@wasabisystems.com
c95add71 1554 - markus@cvs.openbsd.org 2001/06/19 15:40:45
1555 [session.c]
1556 allocate and free at the same level.
d6746a0b 1557 - markus@cvs.openbsd.org 2001/06/20 13:56:39
1558 [channels.c channels.h clientloop.c packet.c serverloop.c]
1559 move from channel_stop_listening to channel_free_all,
1560 call channel_free_all before calling waitpid() in serverloop.
1561 fixes the utmp handling; report from Lutz.Jaenicke@aet.TU-Cottbus.DE
e04e7a19 1562
5ad9f968 156320010615
1564 - (stevesk) don't set SA_RESTART and set SIGCHLD to SIG_DFL
1565 around grantpt().
f7940aa9 1566 - (stevesk) update TODO: STREAMS pty systems don't call vhangup() now
5ad9f968 1567
eb26141e 156820010614
1569 - OpenBSD CVS Sync
1570 - markus@cvs.openbsd.org 2001/06/13 09:10:31
1571 [session.c]
1572 typo, use pid not s->pid, mstone@cs.loyola.edu
1573
86066315 157420010613
eb26141e 1575 - OpenBSD CVS Sync
86066315 1576 - markus@cvs.openbsd.org 2001/06/12 10:58:29
1577 [session.c]
1578 merge session_free into session_close()
1579 merge pty_cleanup_proc into session_pty_cleanup()
653d5f86 1580 - markus@cvs.openbsd.org 2001/06/12 16:10:38
1581 [session.c]
1582 merge ssh1/ssh2 tty msg parse and alloc code
76735fe3 1583 - markus@cvs.openbsd.org 2001/06/12 16:11:26
1584 [packet.c]
1585 do not log() packet_set_maxsize
b44de2b1 1586 - markus@cvs.openbsd.org 2001/06/12 21:21:29
1587 [session.c]
1588 remove xauth-cookie-in-tmp handling. use default $XAUTHORITY, since
1589 we do already trust $HOME/.ssh
1590 you can use .ssh/sshrc and .ssh/environment if you want to customize
1591 the location of the xauth cookies
7a313633 1592 - markus@cvs.openbsd.org 2001/06/12 21:30:57
1593 [session.c]
1594 unused
86066315 1595
2c9d881a 159620010612
38296b32 1597 - scp.c ID update (upstream synced vfsprintf() from us)
1598 - OpenBSD CVS Sync
2c9d881a 1599 - markus@cvs.openbsd.org 2001/06/10 11:29:20
1600 [dispatch.c]
1601 we support rekeying
1602 protocol errors are fatal.
1500bcdd 1603 - markus@cvs.openbsd.org 2001/06/11 10:18:24
1604 [session.c]
1605 reset pointer to NULL after xfree(); report from solar@openwall.com
f740438e 1606 - markus@cvs.openbsd.org 2001/06/11 16:04:38
1607 [sshd.8]
1608 typo; bdubreuil@crrel.usace.army.mil
2c9d881a 1609
b4d02860 161020010611
68fa858a 1611 - (bal) NeXT/MacOS X lack libgen.h and dirname(). Patch by Mark Miller
1612 <markm@swoon.net>
224cbdcc 1613 - (bal) Handle broken krb4 issues on Solaris with multiple defined u_*_t
68fa858a 1614 types. Patch by Jan IVEN <Jan.Iven@cern.ch>
0bb724ce 1615 - (bal) Fixed Makefile.in so that 'configure; make install' works.
b4d02860 1616
bf093080 161720010610
1618 - (bal) Missed two files in major resync. auth-bsdauth.c and auth-skey.c
1619
e697bda7 162020010609
1621 - OpenBSD CVS Sync
1622 - markus@cvs.openbsd.org 2001/05/30 12:55:13
68fa858a 1623 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
e697bda7 1624 packet.c serverloop.c session.c ssh.c ssh1.h]
1625 channel layer cleanup: merge header files and split .c files
36e1f6a1 1626 - markus@cvs.openbsd.org 2001/05/30 15:20:10
1627 [ssh.c]
1628 merge functions, simplify.
a5efa1bb 1629 - markus@cvs.openbsd.org 2001/05/31 10:30:17
68fa858a 1630 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
a5efa1bb 1631 packet.c serverloop.c session.c ssh.c]
68fa858a 1632 undo the .c file split, just merge the header and keep the cvs
a5efa1bb 1633 history
68fa858a 1634 - (bal) Channels.c and Channels.h -- "Merge Functions, simplify" (draged
8e7895b8 1635 out of ssh Attic)
68fa858a 1636 - (bal) Ooops.. nchan.c (and remove nchan.h) resync from OpenBSD ssh
a98da4aa 1637 Attic.
1638 - OpenBSD CVS Sync
1639 - markus@cvs.openbsd.org 2001/05/31 13:08:04
1640 [sshd_config]
1641 group options and add some more comments
e4f7282d 1642 - markus@cvs.openbsd.org 2001/06/03 14:55:39
1643 [channels.c channels.h session.c]
68fa858a 1644 use fatal_register_cleanup instead of atexit, sync with x11 authdir
e4f7282d 1645 handling
e5b71e99 1646 - markus@cvs.openbsd.org 2001/06/03 19:36:44
1647 [ssh-keygen.1]
1648 1-2 bits of entrophy per character (not per word), ok stevesk@
4fc334a2 1649 - markus@cvs.openbsd.org 2001/06/03 19:38:42
1650 [scp.c]
1651 pass -v to ssh; from slade@shore.net
f5e69c65 1652 - markus@cvs.openbsd.org 2001/06/03 20:06:11
1653 [auth2-chall.c]
68fa858a 1654 the challenge response device decides how to handle non-existing
f5e69c65 1655 users.
1656 -> fake challenges for skey and cryptocard
f0f32b8e 1657 - markus@cvs.openbsd.org 2001/06/04 21:59:43
1658 [channels.c channels.h session.c]
68fa858a 1659 switch uid when cleaning up tmp files and sockets; reported by
f0f32b8e 1660 zen-parse@gmx.net on bugtraq
c9130033 1661 - markus@cvs.openbsd.org 2001/06/04 23:07:21
1662 [clientloop.c serverloop.c sshd.c]
68fa858a 1663 set flags in the signal handlers, do real work in the main loop,
c9130033 1664 ok provos@
8dcd9d5c 1665 - markus@cvs.openbsd.org 2001/06/04 23:16:16
1666 [session.c]
1667 merge ssh1/2 x11-fwd setup, create listener after tmp-dir
aa144206 1668 - pvalchev@cvs.openbsd.org 2001/06/05 05:05:39
1669 [ssh-keyscan.1 ssh-keyscan.c]
1670 License clarification from David Mazieres, ok deraadt@
750c256a 1671 - markus@cvs.openbsd.org 2001/06/05 10:24:32
1672 [channels.c]
1673 don't delete the auth socket in channel_stop_listening()
1674 auth_sock_cleanup_proc() will take care of this.
fc2a1d28 1675 - markus@cvs.openbsd.org 2001/06/05 16:46:19
1676 [session.c]
1677 let session_close() delete the pty. deny x11fwd if xauthfile is set.
d87596b0 1678 - markus@cvs.openbsd.org 2001/06/06 23:13:54
1679 [ssh-dss.c ssh-rsa.c]
1680 cleanup, remove old code
edf9ae81 1681 - markus@cvs.openbsd.org 2001/06/06 23:19:35
1682 [ssh-add.c]
1683 remove debug message; Darren.Moffat@eng.sun.com
2a6a054e 1684 - markus@cvs.openbsd.org 2001/06/07 19:57:53
1685 [auth2.c]
1686 style is used for bsdauth.
1687 disconnect on user/service change (ietf-drafts)
449c5ba5 1688 - markus@cvs.openbsd.org 2001/06/07 20:23:05
68fa858a 1689 [authfd.c authfile.c channels.c kexdh.c kexgex.c packet.c ssh.c
449c5ba5 1690 sshconnect.c sshconnect1.c]
1691 use xxx_put_cstring()
e6abba31 1692 - markus@cvs.openbsd.org 2001/06/07 22:25:02
1693 [session.c]
1694 don't overwrite errno
1695 delay deletion of the xauth cookie
fd9ede94 1696 - markus@cvs.openbsd.org 2001/06/08 15:25:40
1697 [includes.h pathnames.h readconf.c servconf.c]
1698 move the path for xauth to pathnames.h
0abe778b 1699 - (bal) configure.in fix for Tru64 (forgeting to reset $LIB)
83c17f20 1700 - (bal) ANSIify strmode()
68fa858a 1701 - (bal) --with-catman should be --with-mantype patch by Dave
1702 Dykstra <dwd@bell-labs.com>
fd9ede94 1703
4869a96f 170420010606
e697bda7 1705 - OpenBSD CVS Sync
68fa858a 1706 - markus@cvs.openbsd.org 2001/05/17 21:34:15
e697bda7 1707 [ssh.1]
68fa858a 1708 no spaces in PreferredAuthentications;
5ba55ada 1709 meixner@rbg.informatik.tu-darmstadt.de
1710 - markus@cvs.openbsd.org 2001/05/18 14:13:29
68fa858a 1711 [auth-chall.c auth.h auth1.c auth2-chall.c auth2.c readconf.c
5ba55ada 1712 readconf.h servconf.c servconf.h sshconnect1.c sshconnect2.c sshd.c]
1713 improved kbd-interactive support. work by per@appgate.com and me
bc03d5aa 1714 - djm@cvs.openbsd.org 2001/05/19 00:36:40
1715 [session.c]
1716 Disable X11 forwarding if xauth binary is not found. Patch from Nalin
1717 Dahyabhai <nalin@redhat.com>; ok markus@
68fa858a 1718 - markus@cvs.openbsd.org 2001/05/19 16:05:41
1719 [scp.c]
3e4fc5f9 1720 ftruncate() instead of open()+O_TRUNC like rcp.c does
68fa858a 1721 allows scp /path/to/file localhost:/path/to/file
1722 - markus@cvs.openbsd.org 2001/05/19 16:08:43
1723 [sshd.8]
a18395da 1724 sort options; Matthew.Stier@fnc.fujitsu.com
68fa858a 1725 - markus@cvs.openbsd.org 2001/05/19 16:32:16
1726 [ssh.1 sshconnect2.c]
1727 change preferredauthentication order to
1728 publickey,hostbased,password,keyboard-interactive
3398dda9 1729 document that hostbased defaults to no, document order
47bf6266 1730 - markus@cvs.openbsd.org 2001/05/19 16:46:19
68fa858a 1731 [ssh.1 sshd.8]
1732 document MACs defaults with .Dq
1733 - stevesk@cvs.openbsd.org 2001/05/19 19:43:57
1734 [misc.c misc.h servconf.c sshd.8 sshd.c]
1735 sshd command-line arguments and configuration file options that
1736 specify time may be expressed using a sequence of the form:
e2b1fb42 1737 time[qualifier], where time is a positive integer value and qualifier
68fa858a 1738 is one of the following:
1739 <none>,s,m,h,d,w
1740 Examples:
1741 600 600 seconds (10 minutes)
1742 10m 10 minutes
1743 1h30m 1 hour 30 minutes (90 minutes)
1744 ok markus@
7e8c18e9 1745 - stevesk@cvs.openbsd.org 2001/05/19 19:57:09
68fa858a 1746 [channels.c]
1747 typo in error message
e697bda7 1748 - markus@cvs.openbsd.org 2001/05/20 17:20:36
c8445989 1749 [auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8
1750 sshd_config]
68fa858a 1751 configurable authorized_keys{,2} location; originally from peter@;
1752 ok djm@
1ddf764b 1753 - markus@cvs.openbsd.org 2001/05/24 11:12:42
68fa858a 1754 [auth.c]
1755 fix comment; from jakob@
1756 - stevesk@cvs.openbsd.org 2001/05/24 18:57:53
1757 [clientloop.c readconf.c ssh.c ssh.h]
4bf9c10e 1758 don't perform escape processing when ``EscapeChar none''; ok markus@
abe0fb9f 1759 - markus@cvs.openbsd.org 2001/05/25 14:37:32
68fa858a 1760 [ssh-keygen.c]
1761 use -P for -e and -y, too.
63cd7dd0 1762 - markus@cvs.openbsd.org 2001/05/28 08:04:39
68fa858a 1763 [ssh.c]
1764 fix usage()
1765 - markus@cvs.openbsd.org 2001/05/28 10:08:55
1766 [authfile.c]
eb2e1595 1767 key_load_private: set comment to filename for PEM keys
2cf27bc4 1768 - markus@cvs.openbsd.org 2001/05/28 22:51:11
68fa858a 1769 [cipher.c cipher.h]
1770 simpler 3des for ssh1
1771 - markus@cvs.openbsd.org 2001/05/28 23:14:49
1772 [channels.c channels.h nchan.c]
6fd8622b 1773 undo broken channel fix and try a different one. there
68fa858a 1774 should be still some select errors...
1775 - markus@cvs.openbsd.org 2001/05/28 23:25:24
1776 [channels.c]
1777 cleanup, typo
08dcb5d7 1778 - markus@cvs.openbsd.org 2001/05/28 23:58:35
68fa858a 1779 [packet.c packet.h sshconnect.c sshd.c]
1780 remove some lines, simplify.
a10bdd7c 1781 - markus@cvs.openbsd.org 2001/05/29 12:31:27
68fa858a 1782 [authfile.c]
1783 typo
5ba55ada 1784
5cde8062 178520010528
1786 - (tim) [conifgure.in] add setvbuf test needed for sftp-int.c
1787 Patch by Corinna Vinschen <vinschen@redhat.com>
1788
362df52e 178920010517
1790 - OpenBSD CVS Sync
1791 - markus@cvs.openbsd.org 2001/05/12 19:53:13
1792 [sftp-server.c]
1793 readlink does not NULL-terminate; mhe@home.se
6efa3d14 1794 - deraadt@cvs.openbsd.org 2001/05/15 22:04:01
1795 [ssh.1]
1796 X11 forwarding details improved
70ea8327 1797 - markus@cvs.openbsd.org 2001/05/16 20:51:57
1798 [authfile.c]
1799 return comments for private pem files, too; report from nolan@naic.edu
24b6b45f 1800 - markus@cvs.openbsd.org 2001/05/16 21:53:53
1801 [clientloop.c]
1802 check for open sessions before we call select(); fixes the x11 client
1803 bug reported by bowman@math.ualberta.ca
7231bd47 1804 - markus@cvs.openbsd.org 2001/05/16 22:09:21
1805 [channels.c nchan.c]
1806 more select() error fixes (don't set rfd/wfd to -1).
7043a38d 1807 - (bal) Enabled USE_PIPES for Cygwin on Corinna Vinschen <vinschen@redhat.com>
68fa858a 1808 - (bal) Corrected on_exit() emulation via atexit().
362df52e 1809
89aa792b 181020010512
1811 - OpenBSD CVS Sync
1812 - markus@cvs.openbsd.org 2001/05/11 14:59:56
1813 [clientloop.c misc.c misc.h]
1814 add unset_nonblock for stdout/err flushing in client_loop().
286e38f7 1815 - (bal) Patch to partial sync up contrib/solaris/ packaging software.
1816 Patch by pete <ninjaz@webexpress.com>
89aa792b 1817
97430469 181820010511
1819 - OpenBSD CVS Sync
1820 - markus@cvs.openbsd.org 2001/05/09 22:51:57
1821 [channels.c]
1822 fix -R for protocol 2, noticed by greg@nest.cx.
1823 bug was introduced with experimental dynamic forwarding.
a16092bb 1824 - markus@cvs.openbsd.org 2001/05/09 23:01:31
1825 [rijndael.h]
1826 fix prototype; J.S.Peatfield@damtp.cam.ac.uk
97430469 1827
588f4ed0 182820010509
1829 - OpenBSD CVS Sync
1830 - markus@cvs.openbsd.org 2001/05/06 21:23:31
1831 [cli.c]
1832 cli_read() fails to catch SIGINT + overflow; from obdb@zzlevo.net
d18e0850 1833 - markus@cvs.openbsd.org 2001/05/08 19:17:31
a01a10dd 1834 [channels.c serverloop.c clientloop.c]
d18e0850 1835 adds correct error reporting to async connect()s
68fa858a 1836 fixes the server-discards-data-before-connected-bug found by
d18e0850 1837 onoe@sm.sony.co.jp
8a624ebf 1838 - mouring@cvs.openbsd.org 2001/05/08 19:45:25
1839 [misc.c misc.h scp.c sftp.c]
1840 Use addargs() in sftp plus some clean up of addargs(). OK Markus
1b02d786 1841 - markus@cvs.openbsd.org 2001/05/06 21:45:14
1842 [clientloop.c]
68fa858a 1843 use atomicio for flushing stdout/stderr bufs. thanks to
1b02d786 1844 jbw@izanami.cee.hw.ac.uk
010980f6 1845 - markus@cvs.openbsd.org 2001/05/08 22:48:07
1846 [atomicio.c]
1847 no need for xmalloc.h, thanks to espie@
68fa858a 1848 - (bal) UseLogin patch for Solaris/UNICOS. Patch by Wayne Davison
7e2d5fa4 1849 <wayne@blorf.net>
99c8ddac 1850 - (bal) ./configure support to disable SIA on OSF1. Patch by
1851 Chris Adams <cmadams@hiwaay.net>
68fa858a 1852 - (bal) Updates from the Sony NEWS-OS platform by NAKAJI Hiroyuki
b81c369b 1853 <nakaji@tutrp.tut.ac.jp>
588f4ed0 1854
7b22534a 185520010508
68fa858a 1856 - (bal) Fixed configure test for USE_SIA.
7b22534a 1857
94539b2a 185820010506
1859 - (djm) Update config.guess and config.sub with latest versions (from
1860 ftp://ftp.gnu.org/gnu/config/) to allow configure on ia64-hpux.
1861 Suggested by Jason Mader <jason@ncac.gwu.edu>
96c63318 1862 - (bal) White Space and #ifdef sync with OpenBSD
044b0662 1863 - (bal) Add 'seed_rng()' to ssh-add.c
9e9bd8c0 1864 - (bal) CVS ID updates for readpass.c, readpass.h, cli.c, and cli.h
cf7ff074 1865 - OpenBSD CVS Sync
1866 - stevesk@cvs.openbsd.org 2001/05/05 13:42:52
1867 [sftp.1 ssh-add.1 ssh-keygen.1]
1868 typos, grammar
94539b2a 1869
98143cfc 187020010505
1871 - OpenBSD CVS Sync
1872 - stevesk@cvs.openbsd.org 2001/05/04 14:21:56
1873 [ssh.1 sshd.8]
1874 typos
5b9601c8 1875 - markus@cvs.openbsd.org 2001/05/04 14:34:34
1876 [channels.c]
94539b2a 1877 channel_new() reallocs channels[], we cannot use Channel *c after
1878 calling channel_new(), XXX fix this in the future...
719fc62f 1879 - markus@cvs.openbsd.org 2001/05/04 23:47:34
1880 [channels.c channels.h clientloop.c nchan.c nchan.h serverloop.c ssh.c]
68fa858a 1881 move to Channel **channels (instead of Channel *channels), fixes realloc
1882 problems. channel_new now returns a Channel *, favour Channel * over
719fc62f 1883 channel id. remove old channel_allocate interface.
98143cfc 1884
f92fee1f 188520010504
1886 - OpenBSD CVS Sync
1887 - stevesk@cvs.openbsd.org 2001/05/03 15:07:39
1888 [channels.c]
1889 typo in debug() string
503e7e5b 1890 - markus@cvs.openbsd.org 2001/05/03 15:45:15
1891 [session.c]
1892 exec shell -c /bin/sh .ssh/sshrc, from abartlet@pcug.org.au
c98cab9b 1893 - stevesk@cvs.openbsd.org 2001/05/03 21:43:01
1894 [servconf.c]
1895 remove "\n" from fatal()
1fcde3fe 1896 - mouring@cvs.openbsd.org 2001/05/03 23:09:53
1897 [misc.c misc.h scp.c sftp.c]
1898 Move colon() and cleanhost() to misc.c where I should I have put it in
1899 the first place
044aa419 1900 - (bal) Updated Cygwin README by Corinna Vinschen <vinschen@redhat.com>
c7ccfd39 1901 - (bal) Avoid socket file security issues in ssh-agent for Cygwin.
1902 Patch by Egor Duda <deo@logos-m.ru>
f92fee1f 1903
065604bb 190420010503
1905 - OpenBSD CVS Sync
1906 - markus@cvs.openbsd.org 2001/05/02 16:41:20
1907 [ssh-add.c]
1908 fix prompt for ssh-add.
1909
742ee8f2 191020010502
1911 - OpenBSD CVS Sync
1912 - mouring@cvs.openbsd.org 2001/05/02 01:25:39
1913 [readpass.c]
1914 Put the 'const' back into ssh_askpass() function. Pointed out
1915 by Mark Miller <markm@swoon.net>. OK Markus
1916
3435f5a6 191720010501
1918 - OpenBSD CVS Sync
1919 - markus@cvs.openbsd.org 2001/04/30 11:18:52
1920 [readconf.c readconf.h ssh.1 ssh.c sshconnect.c]
1921 implement 'ssh -b bind_address' like 'telnet -b'
eef7adcb 1922 - markus@cvs.openbsd.org 2001/04/30 15:50:46
1923 [compat.c compat.h kex.c]
1924 allow interop with weaker key generation used by ssh-2.0.x, x < 10
ec430473 1925 - markus@cvs.openbsd.org 2001/04/30 16:02:49
1926 [compat.c]
1927 ssh-2.0.10 has the weak-key-bug, too.
3ca6cc45 1928 - (tim) [contrib/caldera/openssh.spec] add Requires line for Caldera 3.1
3435f5a6 1929
e8171bff 193020010430
39aefe7b 1931 - OpenBSD CVS Sync
1932 - markus@cvs.openbsd.org 2001/04/29 18:32:52
1933 [serverloop.c]
1934 fix whitespace
fbe90f7b 1935 - markus@cvs.openbsd.org 2001/04/29 19:16:52
1936 [channels.c clientloop.c compat.c compat.h serverloop.c]
1937 more ssh.com-2.0.x bug-compat; from per@appgate.com
e8171bff 1938 - (tim) New version of mdoc2man.pl from Mark D. Roth <roth+openssh@feep.net>
0b47e48f 1939 - (djm) Add .cvsignore files, suggested by Wayne Davison <wayne@blorf.net>
39aefe7b 1940
baf8c81a 194120010429
1942 - (bal) Updated INSTALL. PCRE moved to a new place.
e878ffe1 1943 - (djm) Release OpenSSH-2.9p1
baf8c81a 1944
0096ac62 194520010427
1946 - (bal) Fixed uidswap.c so it should work on non-posix complient systems.
1947 patch based on 2.5.2 version by djm.
95595a77 1948 - (bal) Build manpages and config files once unless changed. Patch by
1949 Carson Gaspar <carson@taltos.org>
68fa858a 1950 - (bal) arpa/nameser.h does not exist on Cygwin. Patch by Corinna
4a2df58f 1951 Vinschen <vinschen@redhat.com>
5ef815d7 1952 - (bal) Add /etc/sysconfig/sshd support to redhat's sshd.init. Patch by
1953 Pekka Savola <pekkas@netcore.fi>
68fa858a 1954 - (bal) Cygwin lacks setgroups() API. Patch by Corinna Vinschen
229be2df 1955 <vinschen@redhat.com>
cc3ccfdc 1956 - (bal) version.h synced, RPM specs updated for 2.9
b1e2a48c 1957 - (tim) update contrib/caldera files with what Caldera is using.
1958 <sps@caldera.de>
0096ac62 1959
b587c165 196020010425
1961 - OpenBSD CVS Sync
1962 - markus@cvs.openbsd.org 2001/04/23 21:57:07
1963 [ssh-keygen.1 ssh-keygen.c]
1964 allow public key for -e, too
012bc0e1 1965 - markus@cvs.openbsd.org 2001/04/23 22:14:13
1966 [ssh-keygen.c]
1967 remove debug
f8252c48 1968 - (bal) Whitespace resync w/ OpenBSD for uidswap.c
10f72868 1969 - (djm) Add new server configuration directive 'PAMAuthenticationViaKbdInt'
68fa858a 1970 (default: off), implies KbdInteractiveAuthentication. Suggestion from
10f72868 1971 markus@
c2d059b5 1972 - (djm) Include crypt.h if available in auth-passwd.c
533875af 1973 - tim@mindrot.org 2001/04/25 21:38:01 [configure.in]
1974 man page detection fixes for SCO
b587c165 1975
da89cf4d 197620010424
1977 - OpenBSD CVS Sync
1978 - markus@cvs.openbsd.org 2001/04/22 23:58:36
1979 [ssh-keygen.1 ssh.1 sshd.8]
1980 document hostbased and other cleanup
5e29aeaf 1981 - (stevesk) start_pam() doesn't use DNS now for sshd -u0.
3cc990d7 1982 - (stevesk) auth-pam.c: use PERMIT_NO_PASSWD
68fa858a 1983 - (bal) sys/queue.h is bogus for NCR platform. Patch by Daniel Carroll
d8e76a0a 1984 <dan@mesastate.edu>
3644dc25 1985 - (bal) Fixed contrib/postinstall.in. Patch by wsanders@wsanders.net
da89cf4d 1986
a3626e12 198720010422
1988 - OpenBSD CVS Sync
1989 - markus@cvs.openbsd.org 2001/04/20 16:32:22
1990 [uidswap.c]
1991 set non-privileged gid before uid; tholo@ and deraadt@
1a726b04 1992 - mouring@cvs.openbsd.org 2001/04/21 00:55:57
1993 [sftp.1]
1994 Spelling
67b964a1 1995 - djm@cvs.openbsd.org 2001/04/22 08:13:30
1996 [ssh.1]
1997 typos spotted by stevesk@; ok deraadt@
ba917921 1998 - markus@cvs.openbsd.org 2001/04/22 12:34:05
1999 [scp.c]
2000 scp > 2GB; niles@scyld.com; ok deraadt@, djm@
5deceabb 2001 - markus@cvs.openbsd.org 2001/04/22 13:25:37
2002 [ssh-keygen.1 ssh-keygen.c]
2003 rename arguments -x -> -e (export key), -X -> -i (import key)
2004 xref draft-ietf-secsh-publickeyfile-01.txt
2cad6cef 2005 - markus@cvs.openbsd.org 2001/04/22 13:32:27
2006 [sftp-server.8 sftp.1 ssh.1 sshd.8]
2007 xref draft-ietf-secsh-*
bcaa828e 2008 - markus@cvs.openbsd.org 2001/04/22 13:41:02
2009 [ssh-keygen.1 ssh-keygen.c]
2010 style, noted by stevesk; sort flags in usage
a3626e12 2011
df841692 201220010421
2013 - OpenBSD CVS Sync
2014 - djm@cvs.openbsd.org 2001/04/20 07:17:51
2015 [clientloop.c ssh.1]
2016 Split out and improve escape character documentation, mention ~R in
2017 ~? help text; ok markus@
0e7e0abe 2018 - Update RPM spec files for CVS version.h
1ddee76b 2019 - (stevesk) set the default PAM service name to __progname instead
2020 of the hard-coded value "sshd"; from Mark D. Roth <roth@feep.net>
4b28be2c 2021 - (stevesk) document PAM service name change in INSTALL
13dd877b 2022 - tim@mindrot.org 2001/04/21 14:25:57 [Makefile.in configure.in]
2023 fix perl test, fix nroff test, fix Makefile to build outside source tree
df841692 2024
05cc0c99 202520010420
68fa858a 2026 - OpenBSD CVS Sync
05cc0c99 2027 - ian@cvs.openbsd.org 2001/04/18 16:21:05
68fa858a 2028 [ssh-keyscan.1]
2029 Fix typo reported in PR/1779
2030 - markus@cvs.openbsd.org 2001/04/18 21:57:42
2031 [readpass.c ssh-add.c]
561e5254 2032 call askpass from ssh, too, based on work by roth@feep.net, ok deraadt
68fa858a 2033 - markus@cvs.openbsd.org 2001/04/18 22:03:45
2034 [auth2.c sshconnect2.c]
f98c3421 2035 use FDQN with trailing dot in the hostbased auth packets, ok deraadt@
57a5edd8 2036 - markus@cvs.openbsd.org 2001/04/18 22:48:26
68fa858a 2037 [auth2.c]
2038 no longer const
2039 - markus@cvs.openbsd.org 2001/04/18 23:43:26
2040 [auth2.c compat.c sshconnect2.c]
2041 more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works now
8dddf799 2042 (however the 2.1.0 server seems to work only if debug is enabled...)
ae88ea7e 2043 - markus@cvs.openbsd.org 2001/04/18 23:44:51
68fa858a 2044 [authfile.c]
2045 error->debug; noted by fries@
2046 - markus@cvs.openbsd.org 2001/04/19 00:05:11
2047 [auth2.c]
2048 use local variable, no function call needed.
5cf13595 2049 (btw, hostbased works now with ssh.com >= 2.0.13)
431a2493 2050 - (bal) Put scp-common.h back into scp.c (it exists in the upstream
2051 tree) pointed out by Tom Holroyd <tomh@po.crl.go.jp>
05cc0c99 2052
e78e738a 205320010418
68fa858a 2054 - OpenBSD CVS Sync
e78e738a 2055 - markus@cvs.openbsd.org 2001/04/17 19:34:25
3a83b819 2056 [session.c]
2057 move auth_approval to do_authenticated().
2058 do_child(): nuke hostkeys from memory
2059 don't source .ssh/rc for subsystems.
2060 - markus@cvs.openbsd.org 2001/04/18 14:15:00
2061 [canohost.c]
2062 debug->debug3
ce2af031 2063 - (bal) renabled 'catman-do:' and fixed it. So now catman pages should
2064 be working again.
e0c4d3ac 2065 - (bal) Makfile day... Cleaned up multiple mantype support (Patch by
2066 Mark D. Roth <roth+openssh@feep.net>), and fixed PIDDIR support.
3a83b819 2067
8c6b78e4 206820010417
2069 - (bal) Add perl5 check for HP/UX, Removed GNUness from Makefile.in
6d165a89 2070 and temporary commented out 'catman-do:' since it is broken. Patches
8c6b78e4 2071 for the first two by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
a88b7b57 2072 - OpenBSD CVS Sync
53b8fe68 2073 - deraadt@cvs.openbsd.org 2001/04/16 08:26:04
2074 [key.c]
2075 better safe than sorry in later mods; yongari@kt-is.co.kr
2076 - markus@cvs.openbsd.org 2001/04/17 08:14:01
2077 [sshconnect1.c]
2078 check for key!=NULL, thanks to costa
2079 - markus@cvs.openbsd.org 2001/04/17 09:52:48
2080 [clientloop.c]
cf6bc93c 2081 handle EINTR/EAGAIN on read; ok deraadt@
53b8fe68 2082 - markus@cvs.openbsd.org 2001/04/17 10:53:26
2083 [key.c key.h readconf.c readconf.h ssh.1 sshconnect2.c]
e961a8f9 2084 add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@
53b8fe68 2085 - markus@cvs.openbsd.org 2001/04/17 12:55:04
2086 [channels.c ssh.c]
2087 undo socks5 and https support since they are not really used and
2088 only bloat ssh. remove -D from usage(), since '-D' is experimental.
2089
e4664c3e 209020010416
2091 - OpenBSD CVS Sync
2092 - stevesk@cvs.openbsd.org 2001/04/15 01:35:22
2093 [ttymodes.c]
2094 fix comments
ec1f12d3 2095 - markus@cvs.openbsd.org 2001/04/15 08:43:47
2096 [dh.c sftp-glob.c sftp-glob.h sftp-int.c sshconnect2.c sshd.c]
2097 some unused variable and typos; from tomh@po.crl.go.jp
58cfa257 2098 - markus@cvs.openbsd.org 2001/04/15 16:58:03
2099 [authfile.c ssh-keygen.c sshd.c]
2100 don't use errno for key_{load,save}_private; discussion w/ solar@openwall
e968270c 2101 - markus@cvs.openbsd.org 2001/04/15 17:16:00
2102 [clientloop.c]
2103 set stdin/out/err to nonblocking in SSH proto 1, too. suggested by ho@
2104 should fix some of the blocking problems for rsync over SSH-1
84fc17bf 2105 - stevesk@cvs.openbsd.org 2001/04/15 19:41:21
2106 [sshd.8]
2107 some ClientAlive cleanup; ok markus@
b7c70970 2108 - stevesk@cvs.openbsd.org 2001/04/15 21:28:35
2109 [readconf.c servconf.c]
2110 use fatal() or error() vs. fprintf(); ok markus@
5d97cfbf 2111 - (djm) Convert mandoc manpages to man automatically. Patch from Mark D.
2112 Roth <roth+openssh@feep.net>
6023325e 2113 - (bal) CVS ID fix up and slight manpage fix from OpenBSD tree.
47b53518 2114 - (djm) OpenBSD CVS Sync
2115 - mouring@cvs.openbsd.org 2001/04/16 02:31:44
2116 [scp.c sftp.c]
2117 IPv6 support for sftp (which I bungled in my last patch) which is
2118 borrowed from scp.c. Thanks to Markus@ for pointing it out.
764291b3 2119 - deraadt@cvs.openbsd.org 2001/04/16 08:05:34
2120 [xmalloc.c]
2121 xrealloc dealing with ptr == nULL; mouring
f2c2fd71 2122 - djm@cvs.openbsd.org 2001/04/16 08:19:31
2123 [session.c]
68fa858a 2124 Split motd and hushlogin checks into seperate functions, helps for
f2c2fd71 2125 portable. From Chris Adams <cmadams@hiwaay.net>; ok markus@
68fa858a 2126 - Fix OSF SIA support displaying too much information for quiet
2127 logins and logins where access was denied by SIA. Patch from Chris Adams
c96a4aaf 2128 <cmadams@hiwaay.net>
e4664c3e 2129
f03228b1 213020010415
2131 - OpenBSD CVS Sync
2132 - deraadt@cvs.openbsd.org 2001/04/14 04:31:01
2133 [ssh-add.c]
2134 do not double free
9cf972fa 2135 - markus@cvs.openbsd.org 2001/04/14 16:17:14
2136 [channels.c]
2137 remove some channels that are not appropriate for keepalive.
eae942e2 2138 - markus@cvs.openbsd.org 2001/04/14 16:27:57
2139 [ssh-add.c]
2140 use clear_pass instead of xfree()
30dcc918 2141 - stevesk@cvs.openbsd.org 2001/04/14 16:33:20
2142 [clientloop.c packet.h session.c ssh.c ttymodes.c ttymodes.h]
2143 protocol 2 tty modes support; ok markus@
36967a16 2144 - stevesk@cvs.openbsd.org 2001/04/14 17:04:42
2145 [scp.c]
2146 'T' handling rcp/scp sync; ok markus@
e4664c3e 2147 - Missed sshtty.[ch] in Sync.
f03228b1 2148
e400a640 214920010414
2150 - Sync with OpenBSD glob.c, strlcat.c and vis.c changes
68fa858a 2151 - Cygwin sftp/sftp-server binary mode patch from Corinna Vinschen
fe56c12b 2152 <vinschen@redhat.com>
3ffc6336 2153 - OpenBSD CVS Sync
2154 - beck@cvs.openbsd.org 2001/04/13 22:46:54
2155 [channels.c channels.h servconf.c servconf.h serverloop.c sshd.8]
2156 Add options ClientAliveInterval and ClientAliveCountMax to sshd.
2157 This gives the ability to do a "keepalive" via the encrypted channel
2158 which can't be spoofed (unlike TCP keepalives). Useful for when you want
2159 to use ssh connections to authenticate people for something, and know
2160 relatively quickly when they are no longer authenticated. Disabled
2161 by default (of course). ok markus@
e400a640 2162
cc44f691 216320010413
68fa858a 2164 - OpenBSD CVS Sync
2165 - markus@cvs.openbsd.org 2001/04/12 14:29:09
2166 [ssh.c]
2167 show debug output during option processing, report from
cc44f691 2168 pekkas@netcore.fi
8002af61 2169 - markus@cvs.openbsd.org 2001/04/12 19:15:26
68fa858a 2170 [auth-rhosts.c auth.h auth2.c buffer.c canohost.c canohost.h
2171 compat.c compat.h hostfile.c pathnames.h readconf.c readconf.h
2172 servconf.c servconf.h ssh.c sshconnect.c sshconnect.h sshconnect1.c
8002af61 2173 sshconnect2.c sshd_config]
2174 implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
2175 similar to RhostRSAAuthentication unless you enable (the experimental)
2176 HostbasedUsesNameFromPacketOnly option. please test. :)
0140e66a 2177 - markus@cvs.openbsd.org 2001/04/12 19:39:27
2178 [readconf.c]
2179 typo
2d2a2c65 2180 - stevesk@cvs.openbsd.org 2001/04/12 20:09:38
2181 [misc.c misc.h readconf.c servconf.c ssh.c sshd.c]
2182 robust port validation; ok markus@ jakob@
edeeab1e 2183 - mouring@cvs.openbsd.org 2001/04/12 23:17:54
2184 [sftp-int.c sftp-int.h sftp.1 sftp.c]
2185 Add support for:
2186 sftp [user@]host[:file [file]] - Fetch remote file(s)
2187 sftp [user@]host[:dir[/]] - Start in remote dir/
2188 OK deraadt@
57aa8961 2189 - stevesk@cvs.openbsd.org 2001/04/13 01:26:17
2190 [ssh.c]
2191 missing \n in error message
96f8b59f 2192 - (bal) Added openbsd-compat/inet_ntop.[ch] since HP/UX (and others)
2193 lack it.
cc44f691 2194
28b9cb4d 219520010412
68fa858a 2196 - OpenBSD CVS Sync
28b9cb4d 2197 - markus@cvs.openbsd.org 2001/04/10 07:46:58
68fa858a 2198 [channels.c]
2199 cleanup socks4 handling
2200 - itojun@cvs.openbsd.org 2001/04/10 09:13:22
c0ecc314 2201 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
68fa858a 2202 document id_rsa{.pub,}. markus ok
070adba2 2203 - markus@cvs.openbsd.org 2001/04/10 12:15:23
68fa858a 2204 [channels.c]
2205 debug cleanup
45a2e669 2206 - djm@cvs.openbsd.org 2001/04/11 07:06:22
2207 [sftp-int.c]
2208 'mget' and 'mput' aliases; ok markus@
6031af8d 2209 - markus@cvs.openbsd.org 2001/04/11 10:59:01
2210 [ssh.c]
2211 use strtol() for ports, thanks jakob@
6683b40f 2212 - markus@cvs.openbsd.org 2001/04/11 13:56:13
2213 [channels.c ssh.c]
2214 https-connect and socks5 support. i feel so bad.
ff14faf1 2215 - lebel@cvs.openbsd.org 2001/04/11 16:25:30
2216 [sshd.8 sshd.c]
2217 implement the -e option into sshd:
2218 -e When this option is specified, sshd will send the output to the
2219 standard error instead of the system log.
2220 markus@ OK.
28b9cb4d 2221
0a85ab61 222220010410
2223 - OpenBSD CVS Sync
2224 - deraadt@cvs.openbsd.org 2001/04/08 20:52:55
2225 [sftp.c]
2226 do not modify an actual argv[] entry
b2ae83b8 2227 - stevesk@cvs.openbsd.org 2001/04/08 23:28:27
2228 [sshd.8]
2229 spelling
317611b5 2230 - stevesk@cvs.openbsd.org 2001/04/09 00:42:05
2231 [sftp.1]
2232 spelling
a8666d84 2233 - markus@cvs.openbsd.org 2001/04/09 15:12:23
2234 [ssh-add.c]
2235 passphrase caching: ssh-add tries last passphrase, clears passphrase if
2236 not successful and after last try.
2237 based on discussions with espie@, jakob@, ... and code from jakob@ and
2238 wolfgang@wsrcc.com
49ae4185 2239 - markus@cvs.openbsd.org 2001/04/09 15:19:49
2240 [ssh-add.1]
2241 ssh-add retries the last passphrase...
b8a297f1 2242 - stevesk@cvs.openbsd.org 2001/04/09 18:00:15
2243 [sshd.8]
2244 ListenAddress mandoc from aaron@
0a85ab61 2245
6e9944b8 224620010409
febd3f8e 2247 - (stevesk) use setresgid() for setegid() if needed
26de7942 2248 - (stevesk) configure.in: typo
6e9944b8 2249 - OpenBSD CVS Sync
2250 - stevesk@cvs.openbsd.org 2001/04/08 16:01:36
2251 [sshd.8]
2252 document ListenAddress addr:port
d64050ef 2253 - markus@cvs.openbsd.org 2001/04/08 13:03:00
2254 [ssh-add.c]
2255 init pointers with NULL, thanks to danimal@danimal.org
d0a4c20b 2256 - markus@cvs.openbsd.org 2001/04/08 11:27:33
2257 [clientloop.c]
2258 leave_raw_mode if ssh2 "session" is closed
63bd8c36 2259 - markus@cvs.openbsd.org 2001/04/06 21:00:17
2260 [auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth2.c channels.c session.c
2261 ssh.c sshconnect.c sshconnect.h uidswap.c uidswap.h]
2262 do gid/groups-swap in addition to uid-swap, should help if /home/group
2263 is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks
2264 to olar@openwall.com is comments. we had many requests for this.
0490e609 2265 - markus@cvs.openbsd.org 2001/04/07 08:55:18
2266 [buffer.c channels.c channels.h readconf.c ssh.c]
68fa858a 2267 allow the ssh client act as a SOCKS4 proxy (dynamic local
2268 portforwarding). work by Dan Kaminsky <dankamin@cisco.com> and me.
2269 thanks to Dan for this great patch: use 'ssh -D 1080 host' and make
0490e609 2270 netscape use localhost:1080 as a socks proxy.
d98d029a 2271 - markus@cvs.openbsd.org 2001/04/08 11:24:33
2272 [uidswap.c]
2273 KNF
6e9944b8 2274
d9d49fdb 227520010408
2276 - OpenBSD CVS Sync
2277 - stevesk@cvs.openbsd.org 2001/04/06 22:12:47
2278 [hostfile.c]
2279 unused; typo in comment
d11c1288 2280 - stevesk@cvs.openbsd.org 2001/04/06 22:25:25
2281 [servconf.c]
2282 in addition to:
2283 ListenAddress host|ipv4_addr|ipv6_addr
2284 permit:
2285 ListenAddress [host|ipv4_addr|ipv6_addr]:port
2286 ListenAddress host|ipv4_addr:port
2287 sshd.8 updates coming. ok markus@
d9d49fdb 2288
613fc910 228920010407
2290 - (bal) CVS ID Resync of version.h
cc94bd38 2291 - OpenBSD CVS Sync
2292 - markus@cvs.openbsd.org 2001/04/05 23:39:20
2293 [serverloop.c]
2294 keep the ssh session even if there is no active channel.
2295 this is more in line with the protocol spec and makes
2296 ssh -N -L 1234:server:110 host
2297 more useful.
2298 based on discussion with <mats@mindbright.se> long time ago
2299 and recent mail from <res@shore.net>
0fc791ba 2300 - deraadt@cvs.openbsd.org 2001/04/06 16:46:59
2301 [scp.c]
2302 remove trailing / from source paths; fixes pr#1756
68fa858a 2303
63f7e231 230420010406
2305 - (stevesk) logintest.c: fix for systems without __progname
72170131 2306 - (stevesk) Makefile.in: log.o is in libssh.a
d8a2f554 2307 - OpenBSD CVS Sync
2308 - markus@cvs.openbsd.org 2001/04/05 10:00:06
2309 [compat.c]
2310 2.3.x does old GEX, too; report jakob@
6ba22c93 2311 - markus@cvs.openbsd.org 2001/04/05 10:39:03
2312 [compress.c compress.h packet.c]
2313 reset compress state per direction when rekeying.
3667ba79 2314 - markus@cvs.openbsd.org 2001/04/05 10:39:48
2315 [version.h]
2316 temporary version 2.5.4 (supports rekeying).
2317 this is not an official release.
cd332296 2318 - markus@cvs.openbsd.org 2001/04/05 10:42:57
68fa858a 2319 [auth-chall.c authfd.c channels.c clientloop.c kex.c kexgex.c key.c
2320 mac.c packet.c serverloop.c sftp-client.c sftp-client.h sftp-glob.c
2321 sftp-glob.h sftp-int.c sftp-server.c sftp.c ssh-keygen.c sshconnect.c
cd332296 2322 sshconnect2.c sshd.c]
2323 fix whitespace: unexpand + trailing spaces.
255cfda1 2324 - markus@cvs.openbsd.org 2001/04/05 11:09:17
2325 [clientloop.c compat.c compat.h]
2326 add SSH_BUG_NOREKEY and detect broken (=all old) openssh versions.
b4a19d21 2327 - markus@cvs.openbsd.org 2001/04/05 15:45:43
2328 [ssh.1]
2329 ssh defaults to protocol v2; from quisar@quisar.ambre.net
46e3af7f 2330 - stevesk@cvs.openbsd.org 2001/04/05 15:48:18
2331 [canohost.c canohost.h session.c]
2332 move get_remote_name_or_ip() to canohost.[ch]; for portable. ok markus@
54506d2e 2333 - markus@cvs.openbsd.org 2001/04/05 20:01:10
2334 [clientloop.c]
2335 for ~R print message if server does not support rekeying. (and fix ~R).
b37caf1a 2336 - markus@cvs.openbsd.org 2001/04/05 21:02:46
2337 [buffer.c]
2338 better error message
eb0dd41f 2339 - markus@cvs.openbsd.org 2001/04/05 21:05:24
2340 [clientloop.c ssh.c]
2341 don't request a session for 'ssh -N', pointed out slade@shore.net
63f7e231 2342
d8ee838b 234320010405
68fa858a 2344 - OpenBSD CVS Sync
2345 - markus@cvs.openbsd.org 2001/04/04 09:48:35
d8ee838b 2346 [kex.c kex.h kexdh.c kexgex.c packet.c sshconnect2.c sshd.c]
68fa858a 2347 don't sent multiple kexinit-requests.
2348 send newkeys, block while waiting for newkeys.
2349 fix comments.
2350 - markus@cvs.openbsd.org 2001/04/04 14:34:58
2351 [clientloop.c kex.c kex.h serverloop.c sshconnect2.c sshd.c]
2352 enable server side rekeying + some rekey related clientup.
7a37c112 2353 todo: we should not send any non-KEX messages after we send KEXINIT
5adb303f 2354 - markus@cvs.openbsd.org 2001/04/04 15:50:55
2355 [compat.c]
2356 f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov
c422989b 2357 - markus@cvs.openbsd.org 2001/04/04 20:25:38
68fa858a 2358 [channels.c channels.h clientloop.c kex.c kex.h serverloop.c
c422989b 2359 sshconnect2.c sshd.c]
2360 more robust rekeying
2361 don't send channel data after rekeying is started.
0715ec6c 2362 - markus@cvs.openbsd.org 2001/04/04 20:32:56
2363 [auth2.c]
2364 we don't care about missing bannerfiles; from tsoome@ut.ee, ok deraadt@
bbb4cc1b 2365 - markus@cvs.openbsd.org 2001/04/04 22:04:35
2366 [kex.c kexgex.c serverloop.c]
2367 parse full kexinit packet.
2368 make server-side more robust, too.
a7ca6275 2369 - markus@cvs.openbsd.org 2001/04/04 23:09:18
2370 [dh.c kex.c packet.c]
2371 clear+free keys,iv for rekeying.
2372 + fix DH mem leaks. ok niels@
86c9e193 2373 - (stevesk) don't use vhangup() if defined(HAVE_DEV_PTMX); also removes
2374 BROKEN_VHANGUP
d8ee838b 2375
9d451c5a 237620010404
2377 - OpenBSD CVS Sync
2378 - deraadt@cvs.openbsd.org 2001/04/02 17:32:23
2379 [ssh-agent.1]
2380 grammar; slade@shore.net
894c5fa6 2381 - stevesk@cvs.openbsd.org 2001/04/03 13:56:11
2382 [sftp-glob.c ssh-agent.c ssh-keygen.c]
2383 free() -> xfree()
a5c9ffdb 2384 - markus@cvs.openbsd.org 2001/04/03 19:53:29
2385 [dh.c dh.h kex.c kex.h sshconnect2.c sshd.c]
2386 move kex to kex*.c, used dispatch_set() callbacks for kex. should
2387 make rekeying easier.
3463ff28 2388 - todd@cvs.openbsd.org 2001/04/03 21:19:38
2389 [ssh_config]
2390 id_rsa1/2 -> id_rsa; ok markus@
d1ac6175 2391 - markus@cvs.openbsd.org 2001/04/03 23:32:12
2392 [kex.c kex.h packet.c sshconnect2.c sshd.c]
2393 undo parts of recent my changes: main part of keyexchange does not
2394 need dispatch-callbacks, since application data is delayed until
2395 the keyexchange completes (if i understand the drafts correctly).
2396 add some infrastructure for re-keying.
e092ce67 2397 - markus@cvs.openbsd.org 2001/04/04 00:06:54
2398 [clientloop.c sshconnect2.c]
2399 enable client rekeying
2400 (1) force rekeying with ~R, or
2401 (2) if the server requests rekeying.
2402 works against ssh-2.0.12/2.0.13/2.1.0/2.2.0/2.3.0/2.3.1/2.4.0
0bc35151 2403 - (bal) Oops.. Missed including kexdh.c and kexgex.c in OpenBSD sync.
9d451c5a 2404
672f212f 240520010403
2406 - OpenBSD CVS Sync
2407 - stevesk@cvs.openbsd.org 2001/04/02 14:15:31
2408 [sshd.8]
2409 typo; ok markus@
6be9a5e8 2410 - stevesk@cvs.openbsd.org 2001/04/02 14:20:23
2411 [readconf.c servconf.c]
2412 correct comment; ok markus@
fe39c3df 2413 - (stevesk) nchan.c: remove ostate checks and add EINVAL to
2414 shutdown(SHUT_RD) error() bypass for HP-UX.
672f212f 2415
0be033ea 241620010402
2417 - (stevesk) log.c openbsd sync; missing newlines
5d9e4c8d 2418 - (stevesk) sshpty.h openbsd sync; PTY_H -> SSHPTY_H
0be033ea 2419
b7a2a476 242020010330
2421 - (djm) Another openbsd-compat/glob.c sync
4047d868 2422 - (djm) OpenBSD CVS Sync
2423 - provos@cvs.openbsd.org 2001/03/28 21:59:41
2424 [kex.c kex.h sshconnect2.c sshd.c]
2425 forgot to include min and max params in hash, okay markus@
c8682232 2426 - provos@cvs.openbsd.org 2001/03/28 22:04:57
2427 [dh.c]
2428 more sanity checking on primes file
d9cd3575 2429 - markus@cvs.openbsd.org 2001/03/28 22:43:31
2430 [auth.h auth2.c auth2-chall.c]
2431 check auth_root_allowed for kbd-int auth, too.
86b878d5 2432 - provos@cvs.openbsd.org 2001/03/29 14:24:59
2433 [sshconnect2.c]
2434 use recommended defaults
1ad64a93 2435 - stevesk@cvs.openbsd.org 2001/03/29 21:06:21
2436 [sshconnect2.c sshd.c]
2437 need to set both STOC and CTOS for SSH_BUG_BIGENDIANAES; ok markus@
03b8f8be 2438 - markus@cvs.openbsd.org 2001/03/29 21:17:40
2439 [dh.c dh.h kex.c kex.h]
2440 prepare for rekeying: move DH code to dh.c
76ca7b01 2441 - djm@cvs.openbsd.org 2001/03/29 23:42:01
2442 [sshd.c]
2443 Protocol 1 key regeneration log => verbose, some KNF; ok markus@
b7a2a476 2444
01ce749f 244520010329
2446 - OpenBSD CVS Sync
2447 - stevesk@cvs.openbsd.org 2001/03/26 15:47:59
2448 [ssh.1]
2449 document more defaults; misc. cleanup. ok markus@
569807fb 2450 - markus@cvs.openbsd.org 2001/03/26 23:12:42
2451 [authfile.c]
2452 KNF
457fc0c6 2453 - markus@cvs.openbsd.org 2001/03/26 23:23:24
2454 [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
2455 try to read private f-secure ssh v2 rsa keys.
1a92bd7e 2456 - markus@cvs.openbsd.org 2001/03/27 10:34:08
2457 [ssh-rsa.c sshd.c]
2458 use EVP_get_digestbynid, reorder some calls and fix missing free.
a4da628b 2459 - markus@cvs.openbsd.org 2001/03/27 10:57:00
2460 [compat.c compat.h ssh-rsa.c]
2461 some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5
2462 signatures in SSH protocol 2, ok djm@
db1cd2f3 2463 - provos@cvs.openbsd.org 2001/03/27 17:46:50
2464 [compat.c compat.h dh.c dh.h ssh2.h sshconnect2.c sshd.c version.h]
2465 make dh group exchange more flexible, allow min and max group size,
2466 okay markus@, deraadt@
e5ff6ecf 2467 - stevesk@cvs.openbsd.org 2001/03/28 19:56:23
2468 [scp.c]
2469 start to sync scp closer to rcp; ok markus@
03cb2621 2470 - stevesk@cvs.openbsd.org 2001/03/28 20:04:38
2471 [scp.c]
2472 usage more like rcp and add missing -B to usage; ok markus@
563834bb 2473 - markus@cvs.openbsd.org 2001/03/28 20:50:45
2474 [sshd.c]
2475 call refuse() before close(); from olemx@ans.pl
01ce749f 2476
b5b68128 247720010328
68fa858a 2478 - (djm) Reorder tests and library inclusion for Krb4/AFS to try to
2479 resolve linking conflicts with libcrypto. Report and suggested fix
b5b68128 2480 from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
edbe6722 2481 - (djm) Work around Solaris' broken struct dirent. Diagnosis and suggested
2482 fix from Philippe Levan <levan@epix.net>
cccfea16 2483 - (djm) Rework krbIV tests to get us closer to building on Redhat. Still
2484 doesn't work because of conflicts between krbIV's and OpenSSL's des.h
8d0cc79b 2485 - (djm) Sync openbsd-compat/glob.c
b5b68128 2486
0c90b590 248720010327
2488 - Attempt sync with sshlogin.c w/ OpenBSD (mainly CVS ID)
68fa858a 2489 - Fix pointer issues in waitpid() and wait() replaces. Patch by Lutz
60a8683f 2490 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
690d0d7f 2491 - OpenBSD CVS Sync
2492 - djm@cvs.openbsd.org 2001/03/25 00:01:34
2493 [session.c]
2494 shorten; ok markus@
4f4648f9 2495 - stevesk@cvs.openbsd.org 2001/03/25 13:16:11
2496 [servconf.c servconf.h session.c sshd.8 sshd_config]
2497 PrintLastLog option; from chip@valinux.com with some minor
2498 changes by me. ok markus@
9afbfcfa 2499 - markus@cvs.openbsd.org 2001/03/26 08:07:09
68fa858a 2500 [authfile.c authfile.h ssh-add.c ssh-keygen.c ssh.c sshconnect.c
9afbfcfa 2501 sshconnect.h sshconnect1.c sshconnect2.c sshd.c]
2502 simpler key load/save interface, see authfile.h
68fa858a 2503 - (djm) Reestablish PAM credentials (which can be supplemental group
9afbfcfa 2504 memberships) after initgroups() blows them away. Report and suggested
2505 fix from Nalin Dahyabhai <nalin@redhat.com>
0c90b590 2506
b567a40c 250720010324
2508 - Fixed permissions ssh-keyscan. Thanks to Christopher Linn <celinn@mtu.edu>.
80cd07ae 2509 - OpenBSD CVS Sync
2510 - djm@cvs.openbsd.org 2001/03/23 11:04:07
2511 [compat.c compat.h sshconnect2.c sshd.c]
2512 Compat for OpenSSH with broken Rijndael/AES. ok markus@
7af9f7f8 2513 - markus@cvs.openbsd.org 2001/03/23 12:02:49
2514 [auth1.c]
2515 authctxt is now passed to do_authenticated
e285053e 2516 - markus@cvs.openbsd.org 2001/03/23 13:10:57
2517 [sftp-int.c]
2518 fix put, upload to _absolute_ path, ok djm@
1d3c30db 2519 - markus@cvs.openbsd.org 2001/03/23 14:28:32
2520 [session.c sshd.c]
2521 ignore SIGPIPE, restore in child, fixes x11-fwd crashes; with djm@
8ca3f6dc 2522 - (djm) Pull out our own SIGPIPE hacks
b567a40c 2523
8a169574 252420010323
68fa858a 2525 - OpenBSD CVS Sync
8a169574 2526 - deraadt@cvs.openbsd.org 2001/03/22 20:22:55
68fa858a 2527 [sshd.c]
2528 do not place linefeeds in buffer
8a169574 2529
ee110bfb 253020010322
2531 - (djm) Better AIX no tty fix, spotted by Gert Doering <gert@greenie.muc.de>
289ba62e 2532 - (bal) version.c CVS ID resync
a5b09902 2533 - (bal) auth-chall.c auth-passwd.c auth.h auth1.c auth2.c session.c CVS ID
2534 resync
ae7242ef 2535 - (bal) scp.c CVS ID resync
3e587cc3 2536 - OpenBSD CVS Sync
2537 - markus@cvs.openbsd.org 2001/03/20 19:10:16
2538 [readconf.c]
2539 default to SSH protocol version 2
e5d7a405 2540 - markus@cvs.openbsd.org 2001/03/20 19:21:21
2541 [session.c]
2542 remove unused arg
39f7530f 2543 - markus@cvs.openbsd.org 2001/03/20 19:21:21
2544 [session.c]
2545 remove unused arg
bb5639fe 2546 - markus@cvs.openbsd.org 2001/03/21 11:43:45
2547 [auth1.c auth2.c session.c session.h]
2548 merge common ssh v1/2 code
5e7cb456 2549 - jakob@cvs.openbsd.org 2001/03/21 14:20:45
2550 [ssh-keygen.c]
2551 add -B flag to usage
ca4df544 2552 - markus@cvs.openbsd.org 2001/03/21 21:06:30
2553 [session.c]
2554 missing init; from mib@unimelb.edu.au
ee110bfb 2555
f5f6020e 255620010321
68fa858a 2557 - (djm) Fix ttyname breakage for AIX and Tru64. Patch from Steve
f5f6020e 2558 VanDevender <stevev@darkwing.uoregon.edu>
37eadb90 2559 - (djm) Make sure pam_retval is initialised on call to pam_end. Patch
2560 from Solar Designer <solar@openwall.com>
0a3700ee 2561 - (djm) Don't loop forever when changing password via PAM. Patch
2562 from Solar Designer <solar@openwall.com>
0c13ffa2 2563 - (djm) Generate config files before build
7a7101ec 2564 - (djm) Correctly handle SIA and AIX when no tty present. Spotted and
2565 suggested fix from Mike Battersby <mib@unimelb.edu.au>
f5f6020e 2566
8d539493 256720010320
01022caf 2568 - (bal) glob.c update to added GLOB_LIMITS (OpenBSD CVS).
2569 - (bal) glob.c update to set gl_pathv to NULL (OpenBSD CVS).
1620233b 2570 - (bal) Oops. Missed globc.h change (OpenBSD CVS).
614dee3a 2571 - (djm) OpenBSD CVS Sync
2572 - markus@cvs.openbsd.org 2001/03/19 17:07:23
2573 [auth.c readconf.c]
2574 undo /etc/shell and proto 2,1 change for openssh-2.5.2
3dd16786 2575 - markus@cvs.openbsd.org 2001/03/19 17:12:10
2576 [version.h]
2577 version 2.5.2
ea44783f 2578 - (djm) Update RPM spec version
2579 - (djm) Release 2.5.2p1
3743cc2f 2580- tim@mindrot.org 2001/03/19 18:33:47 [defines.h]
2581 change S_ISLNK macro to work for UnixWare 2.03
9887f269 2582- tim@mindrot.org 2001/03/19 20:45:11 [openbsd-compat/glob.c]
2583 add get_arg_max(). Use sysconf() if ARG_MAX is not defined
8d539493 2584
e339aa53 258520010319
68fa858a 2586 - (djm) Seed PRNG at startup, rather than waiting for arc4random calls to
e339aa53 2587 do it implicitly.
7cdb79d4 2588 - (djm) Add getusershell() functions from OpenBSD CVS
b1ed8313 2589 - OpenBSD CVS Sync
2590 - markus@cvs.openbsd.org 2001/03/18 12:07:52
2591 [auth-options.c]
2592 ignore permitopen="host:port" if AllowTcpForwarding==no
f8f230bf 2593 - (djm) Make scp work on systems without 64-bit ints
2538ecf1 2594 - tim@mindrot.org 2001/03/18 18:28:39 [defines.h]
2595 move HAVE_LONG_LONG_INT where it works
d1581d5f 2596 - (bal) Use 'NGROUPS' for NeXT Since 'MAX_NGROUPS' is wrapped up in -lposix
107628c0 2597 stuff. Change suggested by Mark Miller <markm@swoon.net>
d1581d5f 2598 - (bal) Small fix to scp. %lu vs %ld
68fa858a 2599 - (bal) NeXTStep lacks S_ISLNK. Plus split up S_IS*
bb6da70f 2600 - (djm) OpenBSD CVS Sync
2601 - djm@cvs.openbsd.org 2001/03/19 03:52:51
2602 [sftp-client.c]
2603 Report ssh connection closing correctly; ok deraadt@
3a1c54d4 2604 - deraadt@cvs.openbsd.org 2001/03/18 23:30:55
2605 [compat.c compat.h sshd.c]
68fa858a 2606 specifically version match on ssh scanners. do not log scan
3a1c54d4 2607 information to the console
dc504afd 2608 - djm@cvs.openbsd.org 2001/03/19 12:10:17
db4d3098 2609 [sshd.8]
dc504afd 2610 Document permitopen authorized_keys option; ok markus@
babd91d4 2611 - djm@cvs.openbsd.org 2001/03/19 05:49:52
2612 [ssh.1]
2613 document PreferredAuthentications option; ok markus@
05c64611 2614 - (bal) Minor NeXT fixed. Forgot to #undef NGROUPS_MAX
e339aa53 2615
ec0ad9c2 261620010318
68fa858a 2617 - (bal) Fixed scp type casing issue which causes "scp: protocol error:
ec0ad9c2 2618 size not delimited" fatal errors when tranfering.
5cc8d4ad 2619 - OpenBSD CVS Sync
2620 - markus@cvs.openbsd.org 2001/03/17 17:27:59
2621 [auth.c]
2622 check /etc/shells, too
7411201c 2623 - tim@mindrot.org 2001/03/17 18:45:25 [compat.c]
2624 openbsd-compat/fake-regex.h
ec0ad9c2 2625
8a968c25 262620010317
68fa858a 2627 - Support usrinfo() on AIX. Based on patch from Gert Doering
8a968c25 2628 <gert@greenie.muc.de>
bf1d27bd 2629 - OpenBSD CVS Sync
2630 - markus@cvs.openbsd.org 2001/03/15 15:05:59
2631 [scp.c]
2632 use %lld in printf, ok millert@/deraadt@; report from ssh@client.fi
56b3e9ce 2633 - markus@cvs.openbsd.org 2001/03/15 22:07:08
2634 [session.c]
2635 pass Session to do_child + KNF
d50d9b63 2636 - djm@cvs.openbsd.org 2001/03/16 08:16:18
2637 [sftp-client.c sftp-client.h sftp-glob.c sftp-int.c]
2638 Revise globbing for get/put to be more shell-like. In particular,
2639 "get/put file* directory/" now works. ok markus@
f55d1b5f 2640 - markus@cvs.openbsd.org 2001/03/16 09:55:53
2641 [sftp-int.c]
2642 fix memset and whitespace
6a8496e4 2643 - markus@cvs.openbsd.org 2001/03/16 13:44:24
2644 [sftp-int.c]
2645 discourage strcat/strcpy
01794848 2646 - markus@cvs.openbsd.org 2001/03/16 19:06:30
2647 [auth-options.c channels.c channels.h serverloop.c session.c]
2648 implement "permitopen" key option, restricts -L style forwarding to
2649 to specified host:port pairs. based on work by harlan@genua.de
68fa858a 2650 - Check for gl_matchc support in glob_t and fall back to the
40849fdb 2651 openbsd-compat/glob.[ch] support if it does not exist.
8a968c25 2652
4cb5d598 265320010315
2654 - OpenBSD CVS Sync
2655 - markus@cvs.openbsd.org 2001/03/14 08:57:14
2656 [sftp-client.c]
2657 Wall
85cf5827 2658 - markus@cvs.openbsd.org 2001/03/14 15:15:58
2659 [sftp-int.c]
2660 add version command
61b3a2bc 2661 - deraadt@cvs.openbsd.org 2001/03/14 22:50:25
2662 [sftp-server.c]
2663 note no getopt()
51e2fc8f 2664 - (stevesk) ssh-keyscan.c: specify "openbsd-compat/fake-queue.h"
68fa858a 2665 - (bal) Cygwin README change by Corinna Vinschen <vinschen@redhat.com>
4cb5d598 2666
acc9d6d7 266720010314
2668 - OpenBSD CVS Sync
85cf5827 2669 - markus@cvs.openbsd.org 2001/03/13 17:34:42
2670 [auth-options.c]
2671 missing xfree, deny key on parse error; ok stevesk@
2672 - djm@cvs.openbsd.org 2001/03/13 22:42:54
2673 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c]
2674 sftp client filename globbing for get, put, ch{mod,grp,own}. ok markus@
84ceda19 2675 - (bal) Fix strerror() in bsd-misc.c
2676 - (djm) Add replacement glob() from OpenBSD libc if the system glob is
2677 missing or lacks the GLOB_ALTDIRFUNC extension
68fa858a 2678 - (djm) Remove -I$(srcdir)/openbsd-compat from CFLAGS, refer to headers
84ceda19 2679 relatively. Avoids conflict between glob.h and /usr/include/glob.h
acc9d6d7 2680
22138a36 268120010313
2682 - OpenBSD CVS Sync
2683 - markus@cvs.openbsd.org 2001/03/12 22:02:02
2684 [key.c key.h ssh-add.c ssh-keygen.c sshconnect.c sshconnect2.c]
2685 remove old key_fingerprint interface, s/_ex//
2686
539af7f5 268720010312
2688 - OpenBSD CVS Sync
2689 - markus@cvs.openbsd.org 2001/03/11 13:25:36
2690 [auth2.c key.c]
2691 debug
301e8e5b 2692 - jakob@cvs.openbsd.org 2001/03/11 15:03:16
2693 [key.c key.h]
2694 add improved fingerprint functions. based on work by Carsten
2695 Raskgaard <cara@int.tele.dk> and modified by me. ok markus@.
954f0550 2696 - jakob@cvs.openbsd.org 2001/03/11 15:04:16
2697 [ssh-keygen.1 ssh-keygen.c]
2698 print both md5, sha1 and bubblebabble fingerprints when using
2699 ssh-keygen -l -v. ok markus@.
08345971 2700 - jakob@cvs.openbsd.org 2001/03/11 15:13:09
2701 [key.c]
2702 cleanup & shorten some var names key_fingerprint_bubblebabble.
64b1aa3b 2703 - deraadt@cvs.openbsd.org 2001/03/11 16:39:03
2704 [ssh-keygen.c]
2705 KNF, and SHA1 binary output is just creeping featurism
733cf7f4 2706 - tim@mindrot.org 2001/03/11 17:29:32 [configure.in]
2707 test if snprintf() supports %ll
2708 add /dev to search path for PRNGD/EGD socket
2709 fix my mistake in USER_PATH test program
79c9ac1b 2710 - OpenBSD CVS Sync
2711 - markus@cvs.openbsd.org 2001/03/11 18:29:51
2712 [key.c]
2713 style+cleanup
aaf45d87 2714 - markus@cvs.openbsd.org 2001/03/11 22:33:24
2715 [ssh-keygen.1 ssh-keygen.c]
2716 remove -v again. use -B instead for bubblebabble. make -B consistent
2717 with -l and make -B work with /path/to/known_hosts. ok deraadt@
a0322342 2718 - (djm) Bump portable version number for generating test RPMs
94dd09e3 2719 - (djm) Add "static_openssl" RPM build option, remove rsh build dependency
68fa858a 2720 - (bal) Reorder includes in Makefile.
539af7f5 2721
d156519a 272220010311
2723 - OpenBSD CVS Sync
2724 - markus@cvs.openbsd.org 2001/03/10 12:48:27
2725 [sshconnect2.c]
2726 ignore nonexisting private keys; report rjmooney@mediaone.net
5e36d59c 2727 - deraadt@cvs.openbsd.org 2001/03/10 12:53:51
2728 [readconf.c ssh_config]
2729 default to SSH2, now that m68k runs fast
2f778758 2730 - stevesk@cvs.openbsd.org 2001/03/10 15:02:05
2731 [ttymodes.c ttymodes.h]
2732 remove unused sgtty macros; ok markus@
99c415db 2733 - deraadt@cvs.openbsd.org 2001/03/10 15:31:00
2734 [compat.c compat.h sshconnect.c]
2735 all known netscreen ssh versions, and older versions of OSU ssh cannot
2736 handle password padding (newer OSU is fixed)
456fce50 2737 - tim@mindrot.org 2001/03/10 16:33:42 [configure.in Makefile.in sshd_config]
2738 make sure $bindir is in USER_PATH so scp will work
cab80f75 2739 - OpenBSD CVS Sync
2740 - markus@cvs.openbsd.org 2001/03/10 17:51:04
2741 [kex.c match.c match.h readconf.c readconf.h sshconnect2.c]
2742 add PreferredAuthentications
d156519a 2743
1c9a907f 274420010310
2745 - OpenBSD CVS Sync
2746 - deraadt@cvs.openbsd.org 2001/03/09 03:14:39
2747 [ssh-keygen.c]
68fa858a 2748 create *.pub files with umask 0644, so that you can mv them to
1c9a907f 2749 authorized_keys
cb7bd922 2750 - deraadt@cvs.openbsd.org 2001/03/09 12:30:29
2751 [sshd.c]
2752 typo; slade@shore.net
61cf0e38 2753 - Removed log.o from sftp client. Not needed.
1c9a907f 2754
385590e4 275520010309
2756 - OpenBSD CVS Sync
2757 - stevesk@cvs.openbsd.org 2001/03/08 18:47:12
2758 [auth1.c]
2759 unused; ok markus@
acf06a60 2760 - stevesk@cvs.openbsd.org 2001/03/08 20:44:48
2761 [sftp.1]
2762 spelling, cleanup; ok deraadt@
fee56204 2763 - markus@cvs.openbsd.org 2001/03/08 21:42:33
2764 [compat.c compat.h readconf.h ssh.c sshconnect1.c sshconnect2.c]
2765 implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->
2766 no need to do enter passphrase or do expensive sign operations if the
2767 server does not accept key).
385590e4 2768
3a7fe5ba 276920010308
2770 - OpenBSD CVS Sync
d5ebca2b 2771 - djm@cvs.openbsd.org 2001/03/07 10:11:23
2772 [sftp-client.c sftp-client.h sftp-int.c sftp-server.c sftp.1 sftp.c sftp.h]
2773 Support for new draft (draft-ietf-secsh-filexfer-01). New symlink handling
2774 functions and small protocol change.
2775 - markus@cvs.openbsd.org 2001/03/08 00:15:48
2776 [readconf.c ssh.1]
2777 turn off useprivilegedports by default. only rhost-auth needs
2778 this. older sshd's may need this, too.
097ca118 2779 - (stevesk) Reliant Unix (SNI) needs HAVE_BOGUS_SYS_QUEUE_H;
2780 Dirk Markwardt <D.Markwardt@tu-bs.de>
3a7fe5ba 2781
3251b439 278220010307
2783 - (bal) OpenBSD CVS Sync
2784 - deraadt@cvs.openbsd.org 2001/03/06 06:11:18
2785 [ssh-keyscan.c]
2786 appease gcc
a5ec8a3d 2787 - deraadt@cvs.openbsd.org 2001/03/06 06:11:44
2788 [sftp-int.c sftp.1 sftp.c]
2789 sftp -b batchfile; mouring@etoh.eviladmin.org
17910dce 2790 - deraadt@cvs.openbsd.org 2001/03/06 15:10:42
2791 [sftp.1]
2792 order things
2c86906e 2793 - deraadt@cvs.openbsd.org 2001/03/07 01:19:06
2794 [ssh.1 sshd.8]
2795 the name "secure shell" is boring, noone ever uses it
7daf8515 2796 - deraadt@cvs.openbsd.org 2001/03/07 04:05:58
2797 [ssh.1]
2798 removed dated comment
f52798a4 2799 - Cygwin contrib improvements from Corinna Vinschen <vinschen@redhat.com>
3251b439 2800
657297ff 280120010306
2802 - (bal) OpenBSD CVS Sync
2803 - deraadt@cvs.openbsd.org 2001/03/05 14:28:47
2804 [sshd.8]
2805 alpha order; jcs@rt.fm
7c8f2a26 2806 - stevesk@cvs.openbsd.org 2001/03/05 15:44:51
2807 [servconf.c]
2808 sync error message; ok markus@
f2ba0775 2809 - deraadt@cvs.openbsd.org 2001/03/05 15:56:16
2810 [myproposal.h ssh.1]
2811 switch to aes128-cbc/hmac-md5 by default in SSH2 -- faster;
2812 provos & markus ok
7a6c39a3 2813 - deraadt@cvs.openbsd.org 2001/03/05 16:07:15
2814 [sshd.8]
2815 detail default hmac setup too
7de5b06b 2816 - markus@cvs.openbsd.org 2001/03/05 17:17:21
2817 [kex.c kex.h sshconnect2.c sshd.c]
2818 generate a 2*need size (~300 instead of 1024/2048) random private
2819 exponent during the DH key agreement. according to Niels (the great
2820 german advisor) this is safe since /etc/primes contains strong
2821 primes only.
2822
2823 References:
2824 P. C. van Oorschot and M. J. Wiener, On Diffie-Hellman key
2825 agreement with short exponents, In Advances in Cryptology
2826 - EUROCRYPT'96, LNCS 1070, Springer-Verlag, 1996, pp.332-343.
a5df12e9 2827 - stevesk@cvs.openbsd.org 2001/03/05 17:40:48
2828 [ssh.1]
2829 more ssh_known_hosts2 documentation; ok markus@
0b2190ee 2830 - stevesk@cvs.openbsd.org 2001/03/05 17:58:22
2831 [dh.c]
2832 spelling
bbc62e59 2833 - deraadt@cvs.openbsd.org 2001/03/06 00:33:04
2834 [authfd.c cli.c ssh-agent.c]
2835 EINTR/EAGAIN handling is required in more cases
c16c7f20 2836 - millert@cvs.openbsd.org 2001/03/06 01:06:03
2837 [ssh-keyscan.c]
2838 Don't assume we wil get the version string all in one read().
2839 deraadt@ OK'd
09cb311c 2840 - millert@cvs.openbsd.org 2001/03/06 01:08:27
2841 [clientloop.c]
2842 If read() fails with EINTR deal with it the same way we treat EAGAIN
657297ff 2843
1a2936c4 284420010305
2845 - (bal) CVS ID touch up on sshpty.[ch] and sshlogin.[ch]
68fa858a 2846 - (bal) CVS ID touch up on sftp-int.c
e77df335 2847 - (bal) CVS ID touch up on uuencode.c
6cca9fde 2848 - (bal) CVS ID touch up on auth2.c, serverloop.c, session.c & sshd.c
778f6940 2849 - (bal) OpenBSD CVS Sync
dcb971e1 2850 - deraadt@cvs.openbsd.org 2001/02/17 23:48:48
2851 [sshd.8]
2852 it's the OpenSSH one
778f6940 2853 - deraadt@cvs.openbsd.org 2001/02/21 07:37:04
2854 [ssh-keyscan.c]
2855 inline -> __inline__, and some indent
81333640 2856 - deraadt@cvs.openbsd.org 2001/02/21 09:05:54
2857 [authfile.c]
2858 improve fd handling
79ddf6db 2859 - deraadt@cvs.openbsd.org 2001/02/21 09:12:56
2860 [sftp-server.c]
2861 careful with & and &&; markus ok
96ee8386 2862 - stevesk@cvs.openbsd.org 2001/02/21 21:14:04
2863 [ssh.c]
2864 -i supports DSA identities now; ok markus@
0c126dc9 2865 - deraadt@cvs.openbsd.org 2001/02/22 04:29:37
2866 [servconf.c]
2867 grammar; slade@shore.net
ed2166d8 2868 - deraadt@cvs.openbsd.org 2001/02/22 06:43:55
2869 [ssh-keygen.1 ssh-keygen.c]
2870 document -d, and -t defaults to rsa1
b07ae1e9 2871 - deraadt@cvs.openbsd.org 2001/02/22 08:03:51
2872 [ssh-keygen.1 ssh-keygen.c]
2873 bye bye -d
e2fccec3 2874 - deraadt@cvs.openbsd.org 2001/02/22 18:09:06
2875 [sshd_config]
2876 activate RSA 2 key
e91c60f2 2877 - markus@cvs.openbsd.org 2001/02/22 21:57:27
2878 [ssh.1 sshd.8]
2879 typos/grammar from matt@anzen.com
3b1a83df 2880 - markus@cvs.openbsd.org 2001/02/22 21:59:44
2881 [auth.c auth.h auth1.c auth2.c misc.c misc.h ssh.c]
2882 use pwcopy in ssh.c, too
19d57054 2883 - markus@cvs.openbsd.org 2001/02/23 15:34:53
2884 [serverloop.c]
2885 debug2->3
00be5382 2886 - markus@cvs.openbsd.org 2001/02/23 18:15:13
2887 [sshd.c]
2888 the random session key depends now on the session_key_int
2889 sent by the 'attacker'
2890 dig1 = md5(cookie|session_key_int);
2891 dig2 = md5(dig1|cookie|session_key_int);
2892 fake_session_key = dig1|dig2;
2893 this change is caused by a mail from anakin@pobox.com
2894 patch based on discussions with my german advisor niels@openbsd.org
ec63b02d 2895 - deraadt@cvs.openbsd.org 2001/02/24 10:37:55
2896 [readconf.c]
2897 look for id_rsa by default, before id_dsa
582038fb 2898 - deraadt@cvs.openbsd.org 2001/02/24 10:37:26
2899 [sshd_config]
2900 ssh2 rsa key before dsa key
6e18cb71 2901 - markus@cvs.openbsd.org 2001/02/27 10:35:27
2902 [packet.c]
2903 fix random padding
1b5dfeb2 2904 - markus@cvs.openbsd.org 2001/02/27 11:00:11
2905 [compat.c]
2906 support SSH-2.0-2.1 ; from Christophe_Moret@hp.com
4ab21f86 2907 - deraadt@cvs.openbsd.org 2001/02/28 05:34:28
2908 [misc.c]
2909 pull in protos
167b3512 2910 - deraadt@cvs.openbsd.org 2001/02/28 05:36:28
2911 [sftp.c]
2912 do not kill the subprocess on termination (we will see if this helps
2913 things or hurts things)
7e8911cd 2914 - markus@cvs.openbsd.org 2001/02/28 08:45:39
2915 [clientloop.c]
2916 fix byte counts for ssh protocol v1
ee55dacf 2917 - markus@cvs.openbsd.org 2001/02/28 08:54:55
2918 [channels.c nchan.c nchan.h]
2919 make sure remote stderr does not get truncated.
2920 remove closed fd's from the select mask.
a6215e53 2921 - markus@cvs.openbsd.org 2001/02/28 09:57:07
2922 [packet.c packet.h sshconnect2.c]
2923 in ssh protocol v2 use ignore messages for padding (instead of
2924 trailing \0).
94dfb550 2925 - markus@cvs.openbsd.org 2001/02/28 12:55:07
2926 [channels.c]
2927 unify debug messages
5649fbbe 2928 - deraadt@cvs.openbsd.org 2001/02/28 17:52:54
2929 [misc.c]
2930 for completeness, copy pw_gecos too
0572fe75 2931 - markus@cvs.openbsd.org 2001/02/28 21:21:41
2932 [sshd.c]
2933 generate a fake session id, too
95ce5599 2934 - markus@cvs.openbsd.org 2001/02/28 21:27:48
2935 [channels.c packet.c packet.h serverloop.c]
2936 use ignore message to simulate a SSH2_MSG_CHANNEL_DATA message
2937 use random content in ignore messages.
355724fc 2938 - markus@cvs.openbsd.org 2001/02/28 21:31:32
2939 [channels.c]
2940 typo
c3f7d267 2941 - deraadt@cvs.openbsd.org 2001/03/01 02:11:25
2942 [authfd.c]
2943 split line so that p will have an easier time next time around
a01a5f30 2944 - deraadt@cvs.openbsd.org 2001/03/01 02:29:04
2945 [ssh.c]
2946 shorten usage by a line
12bf85ed 2947 - deraadt@cvs.openbsd.org 2001/03/01 02:45:10
2948 [auth-rsa.c auth2.c deattack.c packet.c]
2949 KNF
4371658c 2950 - deraadt@cvs.openbsd.org 2001/03/01 03:38:33
2951 [cli.c cli.h rijndael.h ssh-keyscan.1]
2952 copyright notices on all source files
ce91d6f8 2953 - markus@cvs.openbsd.org 2001/03/01 22:46:37
2954 [ssh.c]
2955 don't truncate remote ssh-2 commands; from mkubita@securities.cz
2956 use min, not max for logging, fixes overflow.
409edaba 2957 - deraadt@cvs.openbsd.org 2001/03/02 06:21:01
2958 [sshd.8]
2959 explain SIGHUP better
b8dc87d3 2960 - deraadt@cvs.openbsd.org 2001/03/02 09:42:49
2961 [sshd.8]
2962 doc the dsa/rsa key pair files
f3c7c613 2963 - deraadt@cvs.openbsd.org 2001/03/02 18:54:31
2964 [atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h
2965 scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c
2966 ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8]
2967 make copyright lines the same format
2671b47f 2968 - deraadt@cvs.openbsd.org 2001/03/03 06:53:12
2969 [ssh-keyscan.c]
2970 standard theo sweep
ff7fee59 2971 - millert@cvs.openbsd.org 2001/03/03 21:19:41
2972 [ssh-keyscan.c]
2973 Dynamically allocate read_wait and its copies. Since maxfd is
2974 based on resource limits it is often (usually?) larger than FD_SETSIZE.
c8d75031 2975 - millert@cvs.openbsd.org 2001/03/03 21:40:30
2976 [sftp-server.c]
2977 Dynamically allocate fd_set; deraadt@ OK
20e04e90 2978 - millert@cvs.openbsd.org 2001/03/03 21:41:07
2979 [packet.c]
2980 Dynamically allocate fd_set; deraadt@ OK
dce9bac5 2981 - deraadt@cvs.openbsd.org 2001/03/03 22:07:50
2982 [sftp-server.c]
2983 KNF
c630ce76 2984 - markus@cvs.openbsd.org 2001/03/03 23:52:22
2985 [sftp.c]
2986 clean up arg processing. based on work by Christophe_Moret@hp.com
20244695 2987 - markus@cvs.openbsd.org 2001/03/03 23:59:34
2988 [log.c ssh.c]
2989 log*.c -> log.c
61f8a1d1 2990 - markus@cvs.openbsd.org 2001/03/04 00:03:59
2991 [channels.c]
2992 debug1->2
38967add 2993 - stevesk@cvs.openbsd.org 2001/03/04 10:57:53
2994 [ssh.c]
2995 add -m to usage; ok markus@
46f23b8d 2996 - stevesk@cvs.openbsd.org 2001/03/04 11:04:41
2997 [sshd.8]
2998 small cleanup and clarify for PermitRootLogin; ok markus@
9c81df4c 2999 - stevesk@cvs.openbsd.org 2001/03/04 11:16:06
3000 [servconf.c sshd.8]
3001 kill obsolete RandomSeed; ok markus@ deraadt@
f5429434 3002 - stevesk@cvs.openbsd.org 2001/03/04 12:54:04
3003 [sshd.8]
3004 spelling
54b974dc 3005 - millert@cvs.openbsd.org 2001/03/04 17:42:28
3006 [authfd.c channels.c dh.c log.c readconf.c servconf.c sftp-int.c
3007 ssh.c sshconnect.c sshd.c]
3008 log functions should not be passed strings that end in newline as they
3009 get passed on to syslog() and when logging to stderr, do_log() appends
3010 its own newline.
51c251f0 3011 - deraadt@cvs.openbsd.org 2001/03/04 18:21:28
3012 [sshd.8]
3013 list SSH2 ciphers
2605addd 3014 - (bal) Put HAVE_PW_CLASS_IN_PASSWD back into pwcopy()
164c80dc 3015 - (bal) Fix up logging since it changed. removed log-*.c
cc3067d6 3016 - (djm) Fix up LOG_AUTHPRIV for systems that have it
70a052c7 3017 - (stevesk) OpenBSD sync:
3018 - deraadt@cvs.openbsd.org 2001/03/05 08:37:27
3019 [ssh-keyscan.c]
3020 skip inlining, why bother
5152d46f 3021 - (stevesk) sftp.c: handle __progname
1a2936c4 3022
40edd7ef 302320010304
3024 - (bal) Remove make-ssh-known-hosts.1 since it's no longer valid.
889fbcd3 3025 - (bal) Updated contrib/README to remove 'make-ssh-known-hosts' and
3026 give Mark Roth credit for mdoc2man.pl
40edd7ef 3027
9817de5f 302820010303
40edd7ef 3029 - (djm) Remove make-ssh-known-hosts.pl, ssh-keyscan is better.
3030 - (djm) Document PAM ChallengeResponseAuthentication in sshd.8
3031 - (djm) Disable and comment ChallengeResponseAuthentication in sshd_config
3032 - (djm) Allow PRNGd entropy collection from localhost TCP socket. Replace
68fa858a 3033 "--with-egd-pool" configure option with "--with-prngd-socket" and
9bdd5929 3034 "--with-prngd-port" options. Debugged and improved by Lutz Jaenicke
3035 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
9817de5f 3036
20cad736 303720010301
68fa858a 3038 - (djm) Properly add -lcrypt if needed.
5f404be3 3039 - (djm) Force standard PAM conversation function in a few more places.
68fa858a 3040 Patch from Redhat 2.5.1p1-2 RPM, probably Nalin Dahyabhai
5f404be3 3041 <nalin@redhat.com>
68fa858a 3042 - (djm) Cygwin needs pw->pw_gecos copied too. Patch from Corinna Vinschen
480eb294 3043 <vinschen@redhat.com>
ad1f4a20 3044 - (djm) Released 2.5.1p2
20cad736 3045
cf0c5df5 304620010228
3047 - (djm) Detect endianness in configure and use it in rijndael.c. Fixes
3048 "Bad packet length" bugs.
68fa858a 3049 - (djm) Fully revert PAM session patch (again). All PAM session init is
403f5a8e 3050 now done before the final fork().
065ef9b1 3051 - (djm) EGD detection patch from Tim Rice <tim@multitalents.net>
d9b1f19a 3052 - (djm) Remove /tmp from EGD socket search list
cf0c5df5 3053
86b416a7 305420010227
68fa858a 3055 - (bal) Applied shutdown() patch for sftp.c by Corinna Vinschen
51fb577a 3056 <vinschen@redhat.com>
2af09193 3057 - (bal) OpenBSD Sync
3058 - markus@cvs.openbsd.org 2001/02/23 15:37:45
3059 [session.c]
3060 handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
68fa858a 3061 - (bal) sshd.init support for all Redhat release. Patch by Jim Knoble
a892c46e 3062 <jmknoble@jmknoble.cx>
68fa858a 3063 - (djm) Fix up POSIX saved uid support. Report from Mark Miller
f4e9a0e1 3064 <markm@swoon.net>
3065 - (djm) Search for -lcrypt on FreeBSD too
c7c72446 3066 - (djm) fatal() on OpenSSL version mismatch
27cf96de 3067 - (djm) Move PAM init to after fork for non-Solaris derived PAMs
d5c4c52e 3068 - (djm) Warning fix on entropy.c saved uid stuff. Patch from Mark Miller
3069 <markm@swoon.net>
4bc6dd70 3070 - (djm) Fix PAM fix
4236bde4 3071 - (djm) Remove 'noreplace' flag from sshd_config in RPM spec files. This
3072 change is being made as 2.5.x configfiles are not back-compatible with
64e0e67e 3073 2.3.x.
3074 - (djm) Avoid warnings for missing broken IP_TOS. Patch from Mark Miller
3075 <markm@swoon.net>
68fa858a 3076 - (djm) Open Server 5 doesn't need BROKEN_SAVED_UIDS. Patch from Tim Rice
a29d3f1c 3077 <tim@multitalents.net>
68fa858a 3078 - (djm) Avoid multiple definition of _PATH_LS. Patch from Tim Rice
a29d3f1c 3079 <tim@multitalents.net>
51fb577a 3080
4925395f 308120010226
3082 - (bal) Fixed bsd-snprinf.c so it now honors 'BROKEN_SNPRINTF' again.
68fa858a 3083 - (djm) Some systems (SCO3, NeXT) have weird saved uid semantics.
e9a13ac1 3084 Based on patch from Tim Rice <tim@multitalents.net>
4925395f 3085
1eb4ec64 308620010225
3087 - (djm) Use %{_libexecdir} rather than hardcoded path in RPM specfile
3088 Patch from Adrian Ho <lexfiend@usa.net>
490cad94 3089 - (bal) Replace 'unsigned long long' to 'u_int64_t' since not every
3090 platform defines u_int64_t as being that.
1eb4ec64 3091
a738c3b0 309220010224
68fa858a 3093 - (bal) Missed part of the UNIX sockets patch. Patch by Corinna
a738c3b0 3094 Vinschen <vinschen@redhat.com>
3095 - (bal) Reorder where 'strftime' is detected to resolve linking
3096 issues on SCO. Patch by Tim Rice <tim@multitalents.net>
3097
8fd97cc4 309820010224
3099 - (bal) pam_stack fix to correctly detect between RH7 and older RHs.
3100 Patch by Pekka Savola <pekkas@netcore.fi>
8f0b3553 3101 - (bal) Renamed sigaction.[ch] to sigact.[ch]. Causes problems with
3102 some platforms.
3d114925 3103 - (bal) Generalize lack of UNIX sockets since this also effects Cray
3104 not just Cygwin. Based on patch by Wendy Palm <wendyp@cray.com>
8fd97cc4 3105
14a49e44 310620010223
3107 - (bal) Fix --define rh7 in openssh.spec file. Patch by Steve Tell
3108 <tell@telltronics.org>
cb291102 3109 - (bal) Patch to force OpenSSH rpm to require the same version of OpenSSL
3110 that it was compiled against. Patch by Pekka Savola <pekkas@netcore.fi>
68fa858a 3111 - (bal) Double -I for OpenSSL on SCO. Patch by Tim Rice
5a67331c 3112 <tim@multitalents.net>
14a49e44 3113
68fa858a 311420010222
73d6d7fa 3115 - (bal) Corrected SCO luid patch by svaughan <svaughan@asterion.com>
ca742b3b 3116 - (bal) Added mdoc2man.pl from Mark Roth <roth@feep.net>
3117 - (bal) Removed reference to liblogin from contrib/README. It was
3118 integrated into OpenSSH a long while ago.
2a81eb9f 3119 - (stevesk) remove erroneous #ifdef sgi code.
3120 Michael Stone <mstone@cs.loyola.edu>
73d6d7fa 3121
fbf305f1 312220010221
3123 - (bal) Removed -L/usr/ucblib -R/usr/ucblib for Solaris platform.
68fa858a 3124 - (bal) Fixed OpenSSL rework to use $saved_*. Patch by Tim Rice
9dd3bc84 3125 <tim@multitalents.net>
1fe61b2e 3126 - (bal) Reverted out of 2001/02/15 patch by djm below because it
3127 breaks Solaris.
3128 - (djm) Move PAM session setup back to before setuid to user.
3129 fixes problems on Solaris-drived PAMs.
266140a8 3130 - (stevesk) session.c: back out to where we were before:
68fa858a 3131 - (djm) Move PAM session initialisation until after fork in sshd. Patch
266140a8 3132 from Nalin Dahyabhai <nalin@redhat.com>
9dd3bc84 3133
8b3319f4 313420010220
3135 - (bal) Fix mixed up params to memmove() from Jan 5th in setenv.c and
3136 getcwd.c.
c2b544a5 3137 - (bal) OpenBSD CVS Sync:
3138 - deraadt@cvs.openbsd.org 2001/02/19 23:09:05
3139 [sshd.c]
3140 clarify message to make it not mention "ident"
8b3319f4 3141
1729c161 314220010219
3143 - (bal) Markus' blessing to rename login.[ch] -> sshlogin.[ch] and
3144 pty.[ch] -> sshpty.[ch]
d6f13fbb 3145 - (djm) Rework search for OpenSSL location. Skip directories which don't
3146 exist, don't add -L$ssldir/lib if it doesn't exist. Should help SCO
3147 with its limit of 6 -L options.
0476625f 3148 - OpenBSD CVS Sync:
3149 - reinhard@cvs.openbsd.org 2001/02/17 08:24:40
3150 [sftp.1]
3151 typo
3152 - deraadt@cvs.openbsd.org 2001/02/17 16:28:58
3153 [ssh.c]
3154 cleanup -V output; noted by millert
3155 - deraadt@cvs.openbsd.org 2001/02/17 16:48:48
3156 [sshd.8]
3157 it's the OpenSSH one
3158 - markus@cvs.openbsd.org 2001/02/18 11:33:54
3159 [dispatch.c]
3160 typo, SSH2_MSG_KEXINIT, from aspa@kronodoc.fi
3161 - markus@cvs.openbsd.org 2001/02/19 02:53:32
3162 [compat.c compat.h serverloop.c]
3163 ssh-1.2.{18-22} has broken handling of ignore messages; report from
3164 itojun@
3165 - markus@cvs.openbsd.org 2001/02/19 03:35:23
3166 [version.h]
3167 OpenSSH_2.5.1 adds bug compat with 1.2.{18-22}
3168 - deraadt@cvs.openbsd.org 2001/02/19 03:36:25
3169 [scp.c]
3170 np is changed by recursion; vinschen@redhat.com
3171 - Update versions in RPM spec files
3172 - Release 2.5.1p1
1729c161 3173
663fd560 317420010218
68fa858a 3175 - (bal) Patch for fix FCHMOD reference in ftp-client.c by Tim Rice
3176 <tim@multitalents.net>
25cd3375 3177 - (Bal) Patch for lack of RA_RESTART in misc.c for mysignal by
3178 stevesk
68fa858a 3179 - (djm) Fix my breaking of cygwin builds, Patch from Corinna Vinschen
58e7f038 3180 <vinschen@redhat.com> and myself.
32ced054 3181 - (djm) Close listen_sock on bind() failures. Patch from Arkadiusz
3182 Miskiewicz <misiek@pld.ORG.PL>
6a951840 3183 - (djm) Robustify EGD/PRNGd code in face of socket closures. Patch from
3184 Todd C. Miller <Todd.Miller@courtesan.com>
68fa858a 3185 - (djm) Use ttyname() to determine name of tty returned by openpty()
3186 rather then risking overflow. Patch from Marek Michalkiewicz
b82f1310 3187 <marekm@amelek.gda.pl>
68fa858a 3188 - (djm) Swapped tests for no_libsocket and no_libnsl in configure.in.
bdf80b2c 3189 Patch from Marek Michalkiewicz <marekm@amelek.gda.pl>
af8fda37 3190 - (djm) Doc fixes from Pekka Savola <pekkas@netcore.fi>
68fa858a 3191 - (djm) Use SA_INTERRUPT along SA_RESTART if present (equivalent for
df538d55 3192 SunOS)
68fa858a 3193 - (djm) SCO needs librpc for libwrap. Patch from Tim Rice
f61d6b17 3194 <tim@multitalents.net>
dfef7e7e 3195 - (stevesk) misc.c: cpp rework of SA_(INTERRUPT|RESTART) handling.
36a358ca 3196 - (stevesk) scp.c: use mysignal() for updateprogressmeter() handler.
68fa858a 3197 - (djm) SA_INTERRUPT is the converse of SA_RESTART, apply it only for
d54d99a3 3198 SIGALRM.
e1a023df 3199 - (djm) Move entropy.c over to mysignal()
68fa858a 3200 - (djm) SunOS 4.x also needs to define HAVE_BOGUS_SYS_QUEUE_H as it has
3201 a <sys/queue.h> that lacks the TAILQ_* macros. Patch from Todd C.
667beaa9 3202 Miller <Todd.Miller@courtesan.com>
ecdde3d8 3203 - (djm) Update RPM spec files for 2.5.0p1
51ee9048 3204 - (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie
3205 enable with --with-bsd-auth.
2adddc78 3206 - (stevesk) entropy.c: typo; should be SIGPIPE
663fd560 3207
0b1728c5 320820010217
3209 - (bal) OpenBSD Sync:
3210 - markus@cvs.openbsd.org 2001/02/16 13:38:18
68fa858a 3211 [channel.c]
3212 remove debug
c8b058b4 3213 - markus@cvs.openbsd.org 2001/02/16 14:03:43
3214 [session.c]
3215 proper payload-length check for x11 w/o screen-number
0b1728c5 3216
b41d8d4d 321720010216
3218 - (bal) added '--with-prce' to allow overriding of system regex when
3219 required (tested by David Dulek <ddulek@fastenal.com>)
d6fdb079 3220 - (bal) Added DG/UX case and set that they have a broken IPTOS.
278588d8 3221 - (djm) Mini-configure reorder patch from Tim Rice <tim@multitalents.net>
3222 Fixes linking on SCO.
68fa858a 3223 - (djm) Make gnome-ssh-askpass handle multi-line prompts. Patch from
0ceb21d6 3224 Nalin Dahyabhai <nalin@redhat.com>
3225 - (djm) BSD license for gnome-ssh-askpass (was X11)
3226 - (djm) KNF on gnome-ssh-askpass
ed6553e2 3227 - (djm) USE_PIPES for a few more sysv platforms
3228 - (djm) Cleanup configure.in a little
3229 - (djm) Ask users to check config.log when we can't find necessary libs
aca75d94 3230 - (djm) Set "login ID" on systems with setluid. Only enabled for SCO
3231 OpenServer for now. Based on patch from svaughan <svaughan@asterion.com>
0ae4fe1d 3232 - (djm) OpenBSD CVS:
3233 - markus@cvs.openbsd.org 2001/02/15 16:19:59
3234 [channels.c channels.h serverloop.c sshconnect.c sshconnect.h]
3235 [sshconnect1.c sshconnect2.c]
3236 genericize password padding function for SSH1 and SSH2.
3237 add stylized echo to 2, too.
3238 - (djm) Add roundup() macro to defines.h
9535dddf 3239 - (stevesk) set SA_RESTART flag in mysignal() for SIGCHLD;
3240 needed on Unixware 2.x.
b41d8d4d 3241
0086bfaf 324220010215
68fa858a 3243 - (djm) Move PAM session setup back to before setuid to user. Fixes
0086bfaf 3244 problems on Solaris-derived PAMs.
e11aab29 3245 - (djm) Clean up PAM namespace. Suggested by Darren Moffat
3246 <Darren.Moffat@eng.sun.com>
9e3c31f7 3247 - (bal) Sync w/ OpenSSH for new release
3248 - markus@cvs.openbsd.org 2001/02/12 12:45:06
3249 [sshconnect1.c]
3250 fix xmalloc(0), ok dugsong@
b2552997 3251 - markus@cvs.openbsd.org 2001/02/11 12:59:25
3252 [Makefile.in sshd.8 sshconnect2.c readconf.h readconf.c packet.c
3253 sshd.c ssh.c ssh.1 servconf.h servconf.c myproposal.h kex.h kex.c]
3254 1) clean up the MAC support for SSH-2
3255 2) allow you to specify the MAC with 'ssh -m'
3256 3) or the 'MACs' keyword in ssh(d)_config
3257 4) add hmac-{md5,sha1}-96
3258 ok stevesk@, provos@
15853e93 3259 - markus@cvs.openbsd.org 2001/02/12 16:16:23
3260 [auth-passwd.c auth.c auth.h auth1.c auth2.c servconf.c servconf.h
3261 ssh-keygen.c sshd.8]
3262 PermitRootLogin={yes,without-password,forced-commands-only,no}
3263 (before this change, root could login even if PermitRootLogin==no)
7cc4cf0a 3264 - deraadt@cvs.openbsd.org 2001/02/12 22:56:09
fd193ca4 3265 [clientloop.c packet.c ssh-keyscan.c]
3266 deal with EAGAIN/EINTR selects which were skipped
7cc4cf0a 3267 - markus@cvs.openssh.org 2001/02/13 22:49:40
3268 [auth1.c auth2.c]
3269 setproctitle(user) only if getpwnam succeeds
3270 - markus@cvs.openbsd.org 2001/02/12 23:26:20
3271 [sshd.c]
3272 missing memset; from solar@openwall.com
3273 - stevesk@cvs.openbsd.org 2001/02/12 20:53:33
3274 [sftp-int.c]
3275 lumask now works with 1 numeric arg; ok markus@, djm@
3276 - djm@cvs.openbsd.org 2001/02/14 9:46:03
3277 [sftp-client.c sftp-int.c sftp.1]
3278 Fix and document 'preserve modes & times' option ('-p' flag in sftp);
3279 ok markus@
0b16bb01 3280 - (bal) replaced PATH_MAX in sftp-int.c w/ MAXPATHLEN.
3281 - (djm) Move to Jim's 1.2.0 X11 askpass program
62da27dd 3282 - (stevesk) OpenBSD sync:
3283 - deraadt@cvs.openbsd.org 2001/02/15 01:38:04
3284 [serverloop.c]
3285 indent
0b16bb01 3286
1c2d0a13 328720010214
3288 - (djm) Don't try to close PAM session or delete credentials if the
68fa858a 3289 session has not been open or credentials not set. Based on patch from
1c2d0a13 3290 Andrew Bartlett <abartlet@pcug.org.au>
68fa858a 3291 - (djm) Move PAM session initialisation until after fork in sshd. Patch
0ab1bcba 3292 from Nalin Dahyabhai <nalin@redhat.com>
958e5ae4 3293 - (bal) Missing function prototype in bsd-snprintf.c patch by
3294 Mark Miller <markm@swoon.net>
b7ccb051 3295 - (djm) Split out and improve OSF SIA auth code. Patch from Chris Adams
3296 <cmadams@hiwaay.net> with a little modification and KNF.
815800e1 3297 - (stevesk) fix for SIA patch, misplaced session_setup_sia()
1c2d0a13 3298
0610439b 329920010213
84eb157c 3300 - (djm) Only test -S potential EGD sockets if they exist and are readable.
f1312c76 3301 - (bal) Cleaned out bsd-snprintf.c. VARARGS have been banished and
3302 I did a base KNF over the whe whole file to make it more acceptable.
3303 (backed out of original patch and removed it from ChangeLog)
01f13020 3304 - (bal) Use chown() if fchown() does not exist in ftp-server.c patch by
3305 Tim Rice <tim@multitalents.net>
8d60e965 3306 - (stevesk) auth1.c: fix PAM passwordless check.
0610439b 3307
894a4851 330820010212
68fa858a 3309 - (djm) Update Redhat specfile to allow --define "skip_x11_askpass 1",
3310 --define "skip_gnome_askpass 1", --define "rh7 1" and make the
3311 implicit rpm-3.0.5 dependancy explicit. Patch and suggestions from
894a4851 3312 Pekka Savola <pekkas@netcore.fi>
782d6a0d 3313 - (djm) Clean up PCRE text in INSTALL
68fa858a 3314 - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby
77db6c3f 3315 <mib@unimelb.edu.au>
6f68f28a 3316 - (bal) NCR SVR4 compatiblity provide by Don Bragg <thewizarddon@yahoo.com>
01a7bc9a 3317 - (stevesk) session.c: remove debugging code.
894a4851 3318
abf1f107 331920010211
3320 - (bal) OpenBSD Sync
3321 - markus@cvs.openbsd.org 2001/02/07 22:35:46
3322 [auth1.c auth2.c sshd.c]
3323 move k_setpag() to a central place; ok dugsong@
c845316f 3324 - markus@cvs.openbsd.org 2001/02/10 12:52:02
3325 [auth2.c]
3326 offer passwd before s/key
e6fa162e 3327 - markus@cvs.openbsd.org 2001/02/8 22:37:10
3328 [canohost.c]
3329 remove last call to sprintf; ok deraadt@
0ab4b0f0 3330 - markus@cvs.openbsd.org 2001/02/10 1:33:32
3331 [canohost.c]
3332 add debug message, since sshd blocks here if DNS is not available
7f8ea238 3333 - markus@cvs.openbsd.org 2001/02/10 12:44:02
3334 [cli.c]
3335 don't call vis() for \r
5c470997 3336 - danh@cvs.openbsd.org 2001/02/10 0:12:43
3337 [scp.c]
3338 revert a small change to allow -r option to work again; ok deraadt@
3339 - danh@cvs.openbsd.org 2001/02/10 15:14:11
3340 [scp.c]
3341 fix memory leak; ok markus@
a0e6fead 3342 - djm@cvs.openbsd.org 2001/02/10 0:45:52
3343 [scp.1]
3344 Mention that you can quote pathnames with spaces in them
b3106440 3345 - markus@cvs.openbsd.org 2001/02/10 1:46:28
3346 [ssh.c]
3347 remove mapping of argv[0] -> hostname
f72e01a5 3348 - markus@cvs.openbsd.org 2001/02/06 22:26:17
3349 [sshconnect2.c]
3350 do not ask for passphrase in batch mode; report from ejb@ql.org
3351 - itojun@cvs.opebsd.org 2001/02/08 10:47:05
5d1d11d1 3352 [sshconnect.c sshconnect1.c sshconnect2.c]
68fa858a 3353 %.30s is too short for IPv6 numeric address. use %.128s for now.
f72e01a5 3354 markus ok
3355 - markus@cvs.openbsd.org 2001/02/09 12:28:35
3356 [sshconnect2.c]
3357 do not free twice, thanks to /etc/malloc.conf
3358 - markus@cvs.openbsd.org 2001/02/09 17:10:53
3359 [sshconnect2.c]
3360 partial success: debug->log; "Permission denied" if no more auth methods
3361 - markus@cvs.openbsd.org 2001/02/10 12:09:21
3362 [sshconnect2.c]
3363 remove some lines
e0b2cf6b 3364 - markus@cvs.openbsd.org 2001/02/09 13:38:07
3365 [auth-options.c]
3366 reset options if no option is given; from han.holl@prismant.nl
ca910e13 3367 - markus@cvs.openbsd.org 2001/02/08 21:58:28
3368 [channels.c]
3369 nuke sprintf, ok deraadt@
3370 - markus@cvs.openbsd.org 2001/02/08 21:58:28
3371 [channels.c]
3372 nuke sprintf, ok deraadt@
affa8be4 3373 - markus@cvs.openbsd.org 2001/02/06 22:43:02
3374 [clientloop.h]
3375 remove confusing callback code
d2c46e77 3376 - deraadt@cvs.openbsd.org 2001/02/08 14:39:36
3377 [readconf.c]
3378 snprintf
cc8aca8a 3379 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
3380 sync with netbsd tree changes.
3381 - more strict prototypes, include necessary headers
3382 - use paths.h/pathnames.h decls
3383 - size_t typecase to int -> u_long
5be2ec5e 3384 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
3385 [ssh-keyscan.c]
3386 fix size_t -> int cast (use u_long). markus ok
3387 - markus@cvs.openbsd.org 2001/02/07 22:43:16
3388 [ssh-keyscan.c]
3389 s/getline/Linebuf_getline/; from roumen.petrov@skalasoft.com
3390 - itojun@cvs.openbsd.org 2001/02/09 9:04:59
3391 [ssh-keyscan.c]
68fa858a 3392 do not assume malloc() returns zero-filled region. found by
5be2ec5e 3393 malloc.conf=AJ.
f21032a6 3394 - markus@cvs.openbsd.org 2001/02/08 22:35:30
3395 [sshconnect.c]
68fa858a 3396 don't connect if batch_mode is true and stricthostkeychecking set to
f21032a6 3397 'ask'
7bbcc167 3398 - djm@cvs.openbsd.org 2001/02/04 21:26:07
3399 [sshd_config]
3400 type: ok markus@
3401 - deraadt@cvs.openbsd.org 2001/02/06 22:07:50
3402 [sshd_config]
3403 enable sftp-server by default
a2e6d17d 3404 - deraadt 2001/02/07 8:57:26
3405 [xmalloc.c]
3406 deal with new ANSI malloc stuff
3407 - markus@cvs.openbsd.org 2001/02/07 16:46:08
3408 [xmalloc.c]
3409 typo in fatal()
3410 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
3411 [xmalloc.c]
3412 fix size_t -> int cast (use u_long). markus ok
4ef922e3 3413 - 1.47 Thu Feb 8 23:11:42 GMT 2001 by dugsong
3414 [serverloop.c sshconnect1.c]
68fa858a 3415 mitigate SSH1 traffic analysis - from Solar Designer
4ef922e3 3416 <solar@openwall.com>, ok provos@
68fa858a 3417 - (bal) fixed sftp-client.c. Return 'status' instead of '0'
ca910e13 3418 (from the OpenBSD tree)
6b442913 3419 - (bal) Synced ssh.1, ssh-add.1 and sshd.8 w/ OpenBSD
27df9d4a 3420 - (bal) sftp-sever.c '%8lld' to '%8llu' (OpenBSD Sync)
17321afe 3421 - (bal) uuencode.c resync w/ OpenBSD tree, plus whitespace.
f98d56f0 3422 - (bal) A bit more whitespace cleanup
68fa858a 3423 - (djm) Set PAM_RHOST earlier, patch from Andrew Bartlett
e275684f 3424 <abartlet@pcug.org.au>
b27e97b1 3425 - (stevesk) misc.c: ssh.h not needed.
38a316c0 3426 - (stevesk) compat.c: more friendly cpp error
94f38e16 3427 - (stevesk) OpenBSD sync:
3428 - stevesk@cvs.openbsd.org 2001/02/11 06:15:57
3429 [LICENSE]
3430 typos and small cleanup; ok deraadt@
abf1f107 3431
0426a3b4 343220010210
3433 - (djm) Sync sftp and scp stuff from OpenBSD:
3434 - djm@cvs.openbsd.org 2001/02/07 03:55:13
3435 [sftp-client.c]
3436 Don't free handles before we are done with them. Based on work from
3437 Corinna Vinschen <vinschen@redhat.com>. ok markus@
3438 - djm@cvs.openbsd.org 2001/02/06 22:32:53
3439 [sftp.1]
3440 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
3441 - deraadt@cvs.openbsd.org 2001/02/07 04:07:29
3442 [sftp.1]
3443 pretty up significantly
3444 - itojun@cvs.openbsd.org 2001/02/07 06:49:42
3445 [sftp.1]
3446 .Bl-.El mismatch. markus ok
3447 - djm@cvs.openbsd.org 2001/02/07 06:12:30
3448 [sftp-int.c]
3449 Check that target is a directory before doing ls; ok markus@
3450 - itojun@cvs.openbsd.org 2001/02/07 11:01:18
3451 [scp.c sftp-client.c sftp-server.c]
3452 unsigned long long -> %llu, not %qu. markus ok
3453 - stevesk@cvs.openbsd.org 2001/02/07 11:10:39
3454 [sftp.1 sftp-int.c]
3455 more man page cleanup and sync of help text with man page; ok markus@
3456 - markus@cvs.openbsd.org 2001/02/07 14:58:34
3457 [sftp-client.c]
3458 older servers reply with SSH2_FXP_NAME + count==0 instead of EOF
3459 - djm@cvs.openbsd.org 2001/02/07 15:27:19
3460 [sftp.c]
3461 Don't forward agent and X11 in sftp. Suggestion from Roumen Petrov
3462 <roumen.petrov@skalasoft.com>
3463 - stevesk@cvs.openbsd.org 2001/02/07 15:36:04
3464 [sftp-int.c]
3465 portable; ok markus@
3466 - stevesk@cvs.openbsd.org 2001/02/07 15:55:47
3467 [sftp-int.c]
3468 lowercase cmds[].c also; ok markus@
3469 - markus@cvs.openbsd.org 2001/02/07 17:04:52
3470 [pathnames.h sftp.c]
3471 allow sftp over ssh protocol 1; ok djm@
3472 - deraadt@cvs.openbsd.org 2001/02/08 07:38:55
3473 [scp.c]
3474 memory leak fix, and snprintf throughout
3475 - deraadt@cvs.openbsd.org 2001/02/08 08:02:02
3476 [sftp-int.c]
3477 plug a memory leak
3478 - stevesk@cvs.openbsd.org 2001/02/08 10:11:23
3479 [session.c sftp-client.c]
3480 %i -> %d
3481 - stevesk@cvs.openbsd.org 2001/02/08 10:57:59
3482 [sftp-int.c]
3483 typo
3484 - stevesk@cvs.openbsd.org 2001/02/08 15:28:07
3485 [sftp-int.c pathnames.h]
3486 _PATH_LS; ok markus@
3487 - djm@cvs.openbsd.org 2001/02/09 04:46:25
3488 [sftp-int.c]
3489 Check for NULL attribs for chown, chmod & chgrp operations, only send
3490 relevant attribs back to server; ok markus@
96b64eb0 3491 - djm@cvs.openbsd.org 2001/02/06 15:05:25
3492 [sftp.c]
3493 Use getopt to process commandline arguments
3494 - djm@cvs.openbsd.org 2001/02/06 15:06:21
3495 [sftp.c ]
3496 Wait for ssh subprocess at exit
3497 - djm@cvs.openbsd.org 2001/02/06 15:18:16
3498 [sftp-int.c]
3499 stat target for remote chdir before doing chdir
3500 - djm@cvs.openbsd.org 2001/02/06 15:32:54
3501 [sftp.1]
3502 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
3503 - provos@cvs.openbsd.org 2001/02/05 22:22:02
3504 [sftp-int.c]
3505 cleanup get_pathname, fix pwd after failed cd. okay djm@
0426a3b4 3506 - (djm) Update makefile.in for _PATH_SFTP_SERVER
c9f5e42e 3507 - (bal) sftp-client.c replace NULL w/ 0 in do_ls() (pending in OpenBSD tree)
0426a3b4 3508
6d1e1d2b 350920010209
68fa858a 3510 - (bal) patch to vis.c to deal with HAVE_VIS right by Robert Mooney
6d1e1d2b 3511 <rjmooney@mediaone.net>
bb0c1991 3512 - (bal) .c.o rule in openbsd-compat/Makefile.in did not make it to the
68fa858a 3513 main tree while porting forward. Pointed out by Lutz Jaenicke
bb0c1991 3514 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
f902d909 3515 - (bal) double entry in configure.in. Pointed out by Lutz Jaenicke
3516 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
25f4c264 3517 - (stevesk) OpenBSD sync:
3518 - markus@cvs.openbsd.org 2001/02/08 11:20:01
3519 [auth2.c]
3520 strict checking
3521 - markus@cvs.openbsd.org 2001/02/08 11:15:22
3522 [version.h]
3523 update to 2.3.2
3524 - markus@cvs.openbsd.org 2001/02/08 11:12:30
3525 [auth2.c]
3526 fix typo
72b3f75d 3527 - (djm) Update spec files
0ed28836 3528 - (bal) OpenBSD sync:
3529 - deraadt@cvs.openbsd.org 2001/02/08 14:38:54
3530 [scp.c]
3531 memory leak fix, and snprintf throughout
1fc8ccdf 3532 - markus@cvs.openbsd.org 2001/02/06 22:43:02
3533 [clientloop.c]
3534 remove confusing callback code
0b202697 3535 - (djm) Add CVS Id's to files that we have missed
5ca51e19 3536 - (bal) OpenBSD Sync (more):
3537 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
3538 sync with netbsd tree changes.
3539 - more strict prototypes, include necessary headers
3540 - use paths.h/pathnames.h decls
3541 - size_t typecase to int -> u_long
1f3bf5aa 3542 - markus@cvs.openbsd.org 2001/02/06 22:07:42
3543 [ssh.c]
3544 fatal() if subsystem fails
3545 - markus@cvs.openbsd.org 2001/02/06 22:43:02
3546 [ssh.c]
3547 remove confusing callback code
3548 - jakob@cvs.openbsd.org 2001/02/06 23:03:24
3549 [ssh.c]
3550 add -1 option (force protocol version 1). ok markus@
3551 - jakob@cvs.openbsd.org 2001/02/06 23:06:21
3552 [ssh.c]
3553 reorder -{1,2,4,6} options. ok markus@
e6aa01b4 3554 - (bal) Missing 'const' in readpass.h
9c5a8165 3555 - (bal) OpenBSD Sync (so at least the thing compiles for 2.3.2 =)
3556 - djm@cvs.openbsd.org 2001/02/06 23:30:28
3557 [sftp-client.c]
3558 replace arc4random with counter for request ids; ok markus@
68fa858a 3559 - (djm) Define _PATH_TTY for systems that don't. Report from Lutz
bc79ed5c 3560 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
6d1e1d2b 3561
6a25c04c 356220010208
3563 - (djm) Don't delete external askpass program in make uninstall target.
3564 Report and fix from Roumen Petrov <roumen.petrov@skalasoft.com>
6958bd37 3565 - (djm) Fix linking of sftp, don't need arc4random any more.
3566 - (djm) Try to use shell that supports "test -S" for EGD socket search.
3567 Based on patch from Tim Rice <tim@multitalents.net>
6a25c04c 3568
547519f0 356920010207
bee0a37e 3570 - (bal) Save the whole path to AR in configure. Some Solaris 2.7 installs
3571 seem lose track of it while in openbsd-compat/ (two confirmed reports)
5c377b3b 3572 - (djm) Much KNF on PAM code
547519f0 3573 - (djm) Revise auth-pam.c conversation function to be a little more
3574 readable.
5c377b3b 3575 - (djm) Revise kbd-int PAM conversation function to fold all text messages
3576 to before first prompt. Fixes hangs if last pam_message did not require
3577 a reply.
3578 - (djm) Fix password changing when using PAM kbd-int authentication
bee0a37e 3579
547519f0 358020010205
2b87da3b 3581 - (bal) Disable groupaccess by setting NGROUPS_MAX to 0 for platforms
99286dc8 3582 that don't have NGROUPS_MAX.
57559587 3583 - (bal) AIX patch for auth1.c by William L. Jones <jones@hpc.utexas.edu>
2b87da3b 3584 - (stevesk) OpenBSD sync:
3585 - stevesk@cvs.openbsd.org 2001/02/04 08:32:27
3586 [many files; did this manually to our top-level source dir]
3587 unexpand and remove end-of-line whitespace; ok markus@
408ba72f 3588 - stevesk@cvs.openbsd.org 2001/02/04 15:21:19
3589 [sftp-server.c]
3590 SSH2_FILEXFER_ATTR_UIDGID support; ok markus@
ec2a033a 3591 - deraadt@cvs.openbsd.org 2001/02/04 17:02:32
3592 [sftp-int.c]
3593 ? == help
3594 - deraadt@cvs.openbsd.org 2001/02/04 16:47:46
3595 [sftp-int.c]
3596 sort commands, so that abbreviations work as expected
3597 - stevesk@cvs.openbsd.org 2001/02/04 15:17:52
3598 [sftp-int.c]
3599 debugging sftp: precedence and missing break. chmod, chown, chgrp
3600 seem to be working now.
3601 - markus@cvs.openbsd.org 2001/02/04 14:41:21
3602 [sftp-int.c]
3603 use base 8 for umask/chmod
3604 - markus@cvs.openbsd.org 2001/02/04 11:11:54
3605 [sftp-int.c]
3606 fix LCD
c44559d2 3607 - markus@cvs.openbsd.org 2001/02/04 08:10:44
3608 [ssh.1]
3609 typo; dpo@club-internet.fr
a5930351 3610 - stevesk@cvs.openbsd.org 2001/02/04 06:30:12
3611 [auth2.c authfd.c packet.c]
3612 remove duplicate #include's; ok markus@
6a416424 3613 - deraadt@cvs.openbsd.org 2001/02/04 16:56:23
3614 [scp.c sshd.c]
3615 alpha happiness
3616 - stevesk@cvs.openbsd.org 2001/02/04 15:12:17
3617 [sshd.c]
3618 precedence; ok markus@
02a024dd 3619 - deraadt@cvs.openbsd.org 2001/02/04 08:14:15
6a416424 3620 [ssh.c sshd.c]
3621 make the alpha happy
02a024dd 3622 - markus@cvs.openbsd.org 2001/01/31 13:37:24
3623 [channels.c channels.h serverloop.c ssh.c]
68fa858a 3624 do not disconnect if local port forwarding fails, e.g. if port is
547519f0 3625 already in use
02a024dd 3626 - markus@cvs.openbsd.org 2001/02/01 14:58:09
3627 [channels.c]
3628 use ipaddr in channel messages, ietf-secsh wants this
3629 - markus@cvs.openbsd.org 2001/01/31 12:26:20
3630 [channels.c]
68fa858a 3631 ssh.com-2.0.1x does not send additional info in CHANNEL_OPEN_FAILURE
547519f0 3632 messages; bug report from edmundo@rano.org
a741554f 3633 - markus@cvs.openbsd.org 2001/01/31 13:48:09
3634 [sshconnect2.c]
3635 unused
9378f292 3636 - deraadt@cvs.openbsd.org 2001/02/04 08:23:08
3637 [sftp-client.c sftp-server.c]
3638 make gcc on the alpha even happier
1fc243d1 3639
547519f0 364020010204
781a0585 3641 - (bal) I think this is the last of the bsd-*.h that don't belong.
634e0b53 3642 - (bal) Minor Makefile fix
f0f14bea 3643 - (bal) openbsd-compat/Makefile minor fix. Ensure dependancies are done
61e96248 3644 right.
78987b57 3645 - (bal) Changed order of LIB="" in -with-skey due to library resolving.
166e4f2a 3646 - (bal) next-posix.h changed to bsd-nextstep.h
61e96248 3647 - (djm) OpenBSD CVS sync:
3648 - markus@cvs.openbsd.org 2001/02/03 03:08:38
3649 [auth-options.c auth-rh-rsa.c auth-rhosts.c auth.c canohost.c]
3650 [canohost.h servconf.c servconf.h session.c sshconnect1.c sshd.8]
3651 [sshd_config]
3652 make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@
3653 - markus@cvs.openbsd.org 2001/02/03 03:19:51
3654 [ssh.1 sshd.8 sshd_config]
3655 Skey is now called ChallengeResponse
3656 - markus@cvs.openbsd.org 2001/02/03 03:43:09
3657 [sshd.8]
3658 use no-pty option in .ssh/authorized_keys* if you need a 8-bit clean
3659 channel. note from Erik.Anggard@cygate.se (pr/1659)
3660 - stevesk@cvs.openbsd.org 2001/02/03 10:03:06
3661 [ssh.1]
3662 typos; ok markus@
3663 - djm@cvs.openbsd.org 2001/02/04 04:11:56
3664 [scp.1 sftp-server.c ssh.1 sshd.8 sftp-client.c sftp-client.h]
3665 [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c]
3666 Basic interactive sftp client; ok theo@
3667 - (djm) Update RPM specs for new sftp binary
68fa858a 3668 - (djm) Update several bits for new optional reverse lookup stuff. I
61e96248 3669 think I got them all.
8b061486 3670 - (djm) Makefile.in fixes
1aa00dcb 3671 - (stevesk) add mysignal() wrapper and use it for the protocol 2
3672 SIGCHLD handler.
408ba72f 3673 - (djm) Use setvbuf() instead of setlinebuf(). Suggest from stevesk@
781a0585 3674
547519f0 367520010203
63fe0529 3676 - (bal) Cygwin clean up by Corinna Vinschen <vinschen@redhat.com>
bf3db92d 3677 - (bal) renamed queue.h to fake-queue.h (even if it's an OpenBSD
3678 based file) to ensure #include space does not get confused.
f78888c7 3679 - (bal) Minor Makefile.in tweak. dirname may not exist on some
3680 platforms so builds fail. (NeXT being a well known one)
63fe0529 3681
547519f0 368220010202
61e96248 3683 - (bal) Makefile fix where sourcedir != builddir by Corinna Vinschen
c85a87f2 3684 <vinschen@redhat.com>
71301416 3685 - (bal) Makefile fix to use $(MAKE) instead of 'make' for platforms
3686 that use 'gmake'. Patch by Tim Rice <tim@multitalents.net>
c85a87f2 3687
547519f0 368820010201
ad5075bd 3689 - (bal) Minor fix to Makefile to stop rebuilding executables if no
3690 changes have occured to any of the supporting code. Patch by
3691 Roumen Petrov <roumen.petrov@skalasoft.com>
3692
9c8dbb1b 369320010131
37845585 3694 - (djm) OpenBSD CVS Sync:
3695 - djm@cvs.openbsd.org 2001/01/30 15:48:53
3696 [sshconnect.c]
3697 Make warning message a little more consistent. ok markus@
8c89dd2b 3698 - (djm) Fix autoconf logic for --with-lastlog=no Report and diagnosis from
3699 Philipp Buehler <lists@fips.de> and Kevin Steves <stevesk@sweden.hp.com>
3700 respectively.
c59dc6bd 3701 - (djm) Don't log SSH2 PAM KbdInt responses to debug, they may contain
3702 passwords.
9c8dbb1b 3703 - (bal) Reorder. Move all bsd-*, fake-*, next-*, and cygwin* stuff to
3704 openbsd-compat/. And resolve all ./configure and Makefile.in issues
3705 assocated.
37845585 3706
9c8dbb1b 370720010130
39929cdb 3708 - (djm) OpenBSD CVS Sync:
3709 - markus@cvs.openbsd.org 2001/01/29 09:55:37
3710 [channels.c channels.h clientloop.c serverloop.c]
3711 fix select overflow; ok deraadt@ and stevesk@
865ac82e 3712 - markus@cvs.openbsd.org 2001/01/29 12:42:35
3713 [canohost.c canohost.h channels.c clientloop.c]
3714 add get_peer_ipaddr(socket), x11-fwd in ssh2 requires ipaddr, not DNS
46aa2d1f 3715 - markus@cvs.openbsd.org 2001/01/29 12:47:32
3716 [rsa.c rsa.h ssh-agent.c sshconnect1.c sshd.c]
3717 handle rsa_private_decrypt failures; helps against the Bleichenbacher
3718 pkcs#1 attack
ae810de7 3719 - djm@cvs.openbsd.org 2001/01/29 05:36:11
3720 [ssh.1 ssh.c]
3721 Allow invocation of sybsystem by commandline (-s); ok markus@
83bc57f9 3722 - (stevesk) configure.in: remove duplicate PROG_LS
39929cdb 3723
9c8dbb1b 372420010129
f29ef605 3725 - (stevesk) sftp-server.c: use %lld vs. %qd
3726
cb9da0fc 372720010128
3728 - (bal) Put USE_PIPES back into sco3.2v5
23c2a7a5 3729 - (bal) OpenBSD Sync
9bd5b720 3730 - markus@cvs.openbsd.org 2001/01/28 10:15:34
3731 [dispatch.c]
3732 re-keying is not supported; ok deraadt@
5fb622e4 3733 - markus@cvs.openbsd.org 2001/01/28 10:24:04
7f5c4295 3734 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
5fb622e4 3735 cleanup AUTHORS sections
9bd5b720 3736 - markus@cvs.openbsd.org 2001/01/28 10:37:26
ab60252b 3737 [sshd.c sshd.8]
9bd5b720 3738 remove -Q, no longer needed
3739 - stevesk@cvs.openbsd.org 2001/01/28 20:36:16
a877488a 3740 [readconf.c ssh.1]
9bd5b720 3741 ``StrictHostKeyChecking ask'' documentation and small cleanup.
3742 ok markus@
6f37606e 3743 - stevesk@cvs.openbsd.org 2001/01/28 20:43:25
61e96248 3744 [sshd.8]
6f37606e 3745 spelling. ok markus@
95f4ccfb 3746 - stevesk@cvs.openbsd.org 2001/01/28 20:53:21
3747 [xmalloc.c]
3748 use size_t for strlen() return. ok markus@
6f37606e 3749 - stevesk@cvs.openbsd.org 2001/01/28 22:27:05
3750 [authfile.c]
3751 spelling. use sizeof vs. strlen(). ok markus@
9bd5b720 3752 - niklas@cvs.openbsd.org 2001/01/29 1:59:14
23c2a7a5 3753 [atomicio.h canohost.h clientloop.h deattack.h dh.h dispatch.h
3754 groupaccess.c groupaccess.h hmac.h hostfile.h includes.h kex.h
3755 key.h log.h login.h match.h misc.h myproposal.h nchan.ms pathnames.h
3756 radix.h readpass.h rijndael.h serverloop.h session.h sftp.h ssh-add.1
3757 ssh-dss.h ssh-keygen.1 ssh-keyscan.1 ssh-rsa.h ssh1.h ssh_config
3758 sshconnect.h sshd_config tildexpand.h uidswap.h uuencode.h]
3759 $OpenBSD$
b0e305c9 3760 - (bal) Minor auth2.c resync. Whitespace and moving of an #include.
cb9da0fc 3761
c9606e03 376220010126
61e96248 3763 - (bal) SSH_PROGRAM vs _PATH_SSH_PROGRAM fix pointed out by Roumen
c9606e03 3764 Petrov <roumen.petrov@skalasoft.com>
2f4b2e38 3765 - (bal) OpenBSD Sync
3766 - deraadt@cvs.openbsd.org 2001/01/25 8:06:33
3767 [ssh-agent.c]
3768 call _exit() in signal handler
c9606e03 3769
d7d5f0b2 377020010125
3771 - (djm) Sync bsd-* support files:
3772 - deraadt@cvs.openbsd.org 2000/01/26 03:43:20
3773 [rresvport.c bindresvport.c]
61e96248 3774 new bindresvport() semantics that itojun, shin, jean-luc and i have
d7d5f0b2 3775 agreed on, which will be happy for the future. bindresvport_sa() for
3776 sockaddr *, too. docs later..
3777 - deraadt@cvs.openbsd.org 2000/01/24 02:24:21
3778 [bindresvport.c]
61e96248 3779 in bindresvport(), if sin is non-NULL, example sin->sin_family for
d7d5f0b2 3780 the actual family being processed
e1dd3a7a 3781 - (djm) Mention PRNGd in documentation, it is nicer than EGD
3782 - (djm) Automatically search for "well-known" EGD/PRNGd sockets in autoconf
8080699b 3783 - (bal) AC_FUNC_STRFTIME added to autoconf
4ccb01d6 3784 - (bal) OpenBSD Resync
3785 - stevesk@cvs.openbsd.org 2001/01/24 21:03:50
3786 [channels.c]
3787 missing freeaddrinfo(); ok markus@
d7d5f0b2 3788
556eb464 378920010124
3790 - (bal) OpenBSD Resync
3791 - markus@cvs.openbsd.org 2001/01/23 10:45:10
3792 [ssh.h]
61e96248 3793 nuke comment
1aecda34 3794 - (bal) no 64bit support patch from Tim Rice <tim@multitalents.net>
3795 - (bal) #ifdef around S_IFSOCK if platform does not support it.
3796 patch by Tim Rice <tim@multitalents.net>
3797 - (bal) fake-regex.h cleanup based on Tim Rice's patch.
c33f0b36 3798 - (stevesk) sftp-server.c: fix chmod() mode mask
556eb464 3799
effa6591 380020010123
3801 - (bal) regexp.h typo in configure.in. Should have been regex.h
3802 - (bal) SSH_USER_DIR to _PATH_SSH_USER_DIR patch by stevesk@
61e96248 3803 - (bal) SSH_ASKPASS_DEFAULT to _PATH_SSH_ASKPASS_DEFAULT
53a24016 3804 - (bal) OpenBSD Resync
3805 - markus@cvs.openbsd.org 2001/01/22 8:15:00
3806 [auth-krb4.c sshconnect1.c]
3807 only AFS needs radix.[ch]
3808 - markus@cvs.openbsd.org 2001/01/22 8:32:53
3809 [auth2.c]
3810 no need to include; from mouring@etoh.eviladmin.org
3811 - stevesk@cvs.openbsd.org 2001/01/22 16:55:21
3812 [key.c]
3813 free() -> xfree(); ok markus@
3814 - stevesk@cvs.openbsd.org 2001/01/22 17:22:28
3815 [sshconnect2.c sshd.c]
3816 fix memory leaks in SSH2 key exchange; ok markus@
d464095c 3817 - markus@cvs.openbsd.org 2001/01/22 23:06:39
3818 [auth1.c auth2.c readconf.c readconf.h servconf.c servconf.h
3819 sshconnect1.c sshconnect2.c sshd.c]
3820 rename skey -> challenge response.
3821 auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.
53a24016 3822
effa6591 3823
42f11eb2 382420010122
3825 - (bal) OpenBSD Resync
3826 - markus@cvs.openbsd.org 2001/01/19 12:45:26 GMT 2001 by markus
3827 [servconf.c ssh.h sshd.c]
3828 only auth-chall.c needs #ifdef SKEY
3829 - markus@cvs.openbsd.org 2001/01/19 15:55:10 GMT 2001 by markus
3830 [auth-krb4.c auth-options.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
3831 auth1.c auth2.c channels.c clientloop.c dh.c dispatch.c nchan.c
3832 packet.c pathname.h readconf.c scp.c servconf.c serverloop.c
3833 session.c ssh-add.c ssh-keygen.c ssh-keyscan.c ssh.c ssh.h
3834 ssh1.h sshconnect1.c sshd.c ttymodes.c]
3835 move ssh1 definitions to ssh1.h, pathnames to pathnames.h
3836 - markus@cvs.openbsd.org 2001/01/19 16:48:14
3837 [sshd.8]
3838 fix typo; from stevesk@
3839 - markus@cvs.openbsd.org 2001/01/19 16:50:58
3840 [ssh-dss.c]
61e96248 3841 clear and free digest, make consistent with other code (use dlen); from
42f11eb2 3842 stevesk@
3843 - markus@cvs.openbsd.org 2001/01/20 15:55:20 GMT 2001 by markus
3844 [auth-options.c auth-options.h auth-rsa.c auth2.c]
3845 pass the filename to auth_parse_options()
61e96248 3846 - markus@cvs.openbsd.org 2001/01/20 17:59:40 GMT 2001
42f11eb2 3847 [readconf.c]
3848 fix SIGSEGV from -o ""; problem noted by jehsom@togetherweb.com
3849 - stevesk@cvs.openbsd.org 2001/01/20 18:20:29
3850 [sshconnect2.c]
3851 dh_new_group() does not return NULL. ok markus@
3852 - markus@cvs.openbsd.org 2001/01/20 21:33:42
3853 [ssh-add.c]
61e96248 3854 do not loop forever if askpass does not exist; from
42f11eb2 3855 andrew@pimlott.ne.mediaone.net
3856 - djm@cvs.openbsd.org 2001/01/20 23:00:56
3857 [servconf.c]
3858 Check for NULL return from strdelim; ok markus
3859 - djm@cvs.openbsd.org 2001/01/20 23:02:07
3860 [readconf.c]
3861 KNF; ok markus
3862 - jakob@cvs.openbsd.org 2001/01/21 9:00:33
3863 [ssh-keygen.1]
3864 remove -R flag; ok markus@
3865 - markus@cvs.openbsd.org 2001/01/21 19:05:40
3866 [atomicio.c automicio.h auth-chall.c auth-krb4.c auth-options.c
3867 auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
3868 auth.c auth.h auth1.c auth2-chall.c auth2.c authfd.c authfile.c
3869 bufaux.c bufaux.h buffer.c canahost.c canahost.h channels.c
3870 cipher.c cli.c clientloop.c clientloop.h compat.c compress.c
3871 deattack.c dh.c dispatch.c groupaccess.c hmac.c hostfile.c kex.c
3872 key.c key.h log-client.c log-server.c log.c log.h login.c login.h
3873 match.c misc.c misc.h nchan.c packet.c pty.c radix.h readconf.c
3874 readpass.c readpass.h rsa.c scp.c servconf.c serverloop.c serverloop.h
3875 session.c sftp-server.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c
61e96248 3876 ssh-keyscan.c ssh-rsa.c ssh.c ssh.h sshconnect.c sshconnect.h
42f11eb2 3877 sshconnect1.c sshconnect2.c sshd.c tildexpand.c tildexpand.h
3878 ttysmodes.c uidswap.c xmalloc.c]
61e96248 3879 split ssh.h and try to cleanup the #include mess. remove unnecessary
42f11eb2 3880 #includes. rename util.[ch] -> misc.[ch]
3881 - (bal) renamed 'PIDDIR' to '_PATH_SSH_PIDDIR' to match OpenBSD tree
61e96248 3882 - (bal) Moved #ifdef KRB4 in auth-krb4.c above the #include to resolve
42f11eb2 3883 conflict when compiling for non-kerb install
3884 - (bal) removed the #ifdef SKEY in auth1.c to match Markus' changes
3885 on 1/19.
3886
6005a40c 388720010120
3888 - (bal) OpenBSD Resync
3889 - markus@cvs.openbsd.org 2001/01/19 12:45:26
3890 [ssh-chall.c servconf.c servconf.h ssh.h sshd.c]
3891 only auth-chall.c needs #ifdef SKEY
47af6577 3892 - (bal) Slight auth2-pam.c clean up.
3893 - (bal) Includes a fake-regexp.h to be only used if regcomp() is found,
3894 but no 'regexp.h' found (SCO OpenServer 3 lacks the header).
6005a40c 3895
922e6493 389620010119
3897 - (djm) Update versions in RPM specfiles
59c97189 3898 - (bal) OpenBSD Resync
3899 - markus@cvs.openbsd.org 2001/01/18 16:20:21
3900 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1 ssh.h
3901 sshd.8 sshd.c]
61e96248 3902 log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many
59c97189 3903 systems
3904 - markus@cvs.openbsd.org 2001/01/18 16:59:59
3905 [auth-passwd.c auth.c auth.h auth1.c auth2.c serverloop.c session.c
3906 session.h sshconnect1.c]
3907 1) removes fake skey from sshd, since this will be much
3908 harder with /usr/libexec/auth/login_XXX
3909 2) share/unify code used in ssh-1 and ssh-2 authentication (server side)
3910 3) make addition of BSD_AUTH and other challenge reponse methods
3911 easier.
3912 - markus@cvs.openbsd.org 2001/01/18 17:12:43
3913 [auth-chall.c auth2-chall.c]
3914 rename *-skey.c *-chall.c since the files are not skey specific
04fc7a67 3915 - (djm) Merge patch from Tim Waugh (via Nalin Dahyabhai <nalin@redhat.com>)
3916 to fix NULL pointer deref and fake authloop breakage in PAM code.
f4ebf0e8 3917 - (bal) Updated contrib/cygwin/ by Corinna Vinschen <vinschen@redhat.com>
3c418020 3918 - (bal) Minor cygwin patch to auth1.c. Suggested by djm.
61e96248 3919
b5c334cc 392020010118
3921 - (bal) Super Sized OpenBSD Resync
3922 - markus@cvs.openbsd.org 2001/01/11 22:14:20 GMT 2001 by markus
3923 [sshd.c]
3924 maxfd+1
3925 - markus@cvs.openbsd.org 2001/01/13 17:59:18
3926 [ssh-keygen.1]
3927 small ssh-keygen manpage cleanup; stevesk@pobox.com
3928 - markus@cvs.openbsd.org 2001/01/13 18:03:07
3929 [scp.c ssh-keygen.c sshd.c]
3930 getopt() returns -1 not EOF; stevesk@pobox.com
3931 - markus@cvs.openbsd.org 2001/01/13 18:06:54
3932 [ssh-keyscan.c]
3933 use SSH_DEFAULT_PORT; from stevesk@pobox.com
3934 - markus@cvs.openbsd.org 2001/01/13 18:12:47
3935 [ssh-keyscan.c]
3936 free() -> xfree(); fix memory leak; from stevesk@pobox.com
3937 - markus@cvs.openbsd.org 2001/01/13 18:14:13
3938 [ssh-add.c]
3939 typo, from stevesk@sweden.hp.com
3940 - markus@cvs.openbsd.org 2001/01/13 18:32:50
61e96248 3941 [packet.c session.c ssh.c sshconnect.c sshd.c]
b5c334cc 3942 split out keepalive from packet_interactive (from dale@accentre.com)
3943 set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too.
3944 - markus@cvs.openbsd.org 2001/01/13 18:36:45
3945 [packet.c packet.h]
3946 reorder, typo
3947 - markus@cvs.openbsd.org 2001/01/13 18:38:00
3948 [auth-options.c]
3949 fix comment
3950 - markus@cvs.openbsd.org 2001/01/13 18:43:31
3951 [session.c]
3952 Wall
61e96248 3953 - markus@cvs.openbsd.org 2001/01/13 19:14:08
b5c334cc 3954 [clientloop.h clientloop.c ssh.c]
3955 move callback to headerfile
3956 - markus@cvs.openbsd.org 2001/01/15 21:40:10
3957 [ssh.c]
3958 use log() instead of stderr
3959 - markus@cvs.openbsd.org 2001/01/15 21:43:51
3960 [dh.c]
3961 use error() not stderr!
3962 - markus@cvs.openbsd.org 2001/01/15 21:45:29
3963 [sftp-server.c]
3964 rename must fail if newpath exists, debug off by default
3965 - markus@cvs.openbsd.org 2001/01/15 21:46:38
3966 [sftp-server.c]
3967 readable long listing for sftp-server, ok deraadt@
3968 - markus@cvs.openbsd.org 2001/01/16 19:20:06
3969 [key.c ssh-rsa.c]
61e96248 3970 make "ssh-rsa" key format for ssh2 confirm to the ietf-drafts; from
3971 galb@vandyke.com. note that you have to delete older ssh2-rsa keys,
3972 since they are in the wrong format, too. they must be removed from
b5c334cc 3973 .ssh/authorized_keys2 and .ssh/known_hosts2, etc.
61e96248 3974 (cd; grep -v ssh-rsa .ssh/authorized_keys2 > TMP && mv TMP
3975 .ssh/authorized_keys2) additionally, we now check that
b5c334cc 3976 BN_num_bits(rsa->n) >= 768.
3977 - markus@cvs.openbsd.org 2001/01/16 20:54:27
3978 [sftp-server.c]
3979 remove some statics. simpler handles; idea from nisse@lysator.liu.se
3980 - deraadt@cvs.openbsd.org 2001/01/16 23:58:08
3981 [bufaux.c radix.c sshconnect.h sshconnect1.c]
3982 indent
3983 - (bal) Added bsd-strmode.[ch] since some non-OpenBSD platforms may
3984 be missing such feature.
3985
61e96248 3986
52ce34a2 398720010117
3988 - (djm) Only write random seed file at exit
717057b6 3989 - (djm) Make PAM support optional, enable with --with-pam
61e96248 3990 - (djm) Try to use libcrypt on Linux, but link it after OpenSSL (which
717057b6 3991 provides a crypt() of its own)
3992 - (djm) Avoid a warning in bsd-bindresvport.c
3993 - (djm) Try to avoid adding -I/usr/include to CPPFLAGS during SSL tests. This
61e96248 3994 can cause weird segfaults errors on Solaris
8694a1ce 3995 - (djm) Avoid warning in PAM code by making read_passphrase arguments const
d748039d 3996 - (djm) Add --with-pam to RPM spec files
52ce34a2 3997
2fd3c144 399820010115
3999 - (bal) sftp-server.c change to use chmod() if fchmod() does not exist.
89c7e31c 4000 - (bal) utimes() support via utime() interface on machine that lack utimes().
2fd3c144 4001
63b68889 400220010114
4003 - (stevesk) initial work for OpenBSD "support supplementary group in
4004 {Allow,Deny}Groups" patch:
4005 - import getgrouplist.c from OpenBSD (bsd-getgrouplist.c)
4006 - add bsd-getgrouplist.h
4007 - new files groupaccess.[ch]
4008 - build but don't use yet (need to merge auth.c changes)
c6a69271 4009 - (stevesk) complete:
4010 - markus@cvs.openbsd.org 2001/01/13 11:56:48
4011 [auth.c sshd.8]
4012 support supplementary group in {Allow,Deny}Groups
4013 from stevesk@pobox.com
61e96248 4014
f546c780 401520010112
4016 - (bal) OpenBSD Sync
4017 - markus@cvs.openbsd.org 2001/01/10 22:56:22
4018 [bufaux.h bufaux.c sftp-server.c sftp.h getput.h]
4019 cleanup sftp-server implementation:
547519f0 4020 add buffer_get_int64, buffer_put_int64, GET_64BIT, PUT_64BIT
4021 parse SSH2_FILEXFER_ATTR_EXTENDED
4022 send SSH2_FX_EOF if readdir returns no more entries
4023 reply to SSH2_FXP_EXTENDED message
4024 use #defines from the draft
4025 move #definations to sftp.h
f546c780 4026 more info:
61e96248 4027 http://www.ietf.org/internet-drafts/draft-ietf-secsh-filexfer-00.txt
f546c780 4028 - markus@cvs.openbsd.org 2001/01/10 19:43:20
4029 [sshd.c]
4030 XXX - generate_empheral_server_key() is not safe against races,
61e96248 4031 because it calls log()
f546c780 4032 - markus@cvs.openbsd.org 2001/01/09 21:19:50
4033 [packet.c]
4034 allow TCP_NDELAY for ipv6; from netbsd via itojun@
4035
9548d6c8 403620010110
4037 - (djm) SNI/Reliant Unix needs USE_PIPES and $DISPLAY hack. Report from
4038 Bladt Norbert <Norbert.Bladt@adi.ch>
4039
af972861 404020010109
4041 - (bal) Resync CVS ID of cli.c
4b80e97b 4042 - (stevesk) auth1.c: free should be after WITH_AIXAUTHENTICATE
4043 code.
eea39c02 4044 - (bal) OpenBSD Sync
4045 - markus@cvs.openbsd.org 2001/01/08 22:29:05
4046 [auth2.c compat.c compat.h servconf.c servconf.h sshd.8
4047 sshd_config version.h]
4048 implement option 'Banner /etc/issue.net' for ssh2, move version to
4049 2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
4050 is enabled).
4051 - markus@cvs.openbsd.org 2001/01/08 22:03:23
4052 [channels.c ssh-keyscan.c]
4053 O_NDELAY -> O_NONBLOCK; thanks stevesk@pobox.com
4054 - markus@cvs.openbsd.org 2001/01/08 21:55:41
4055 [sshconnect1.c]
4056 more cleanups and fixes from stevesk@pobox.com:
4057 1) try_agent_authentication() for loop will overwrite key just
4058 allocated with key_new(); don't alloc
4059 2) call ssh_close_authentication_connection() before exit
4060 try_agent_authentication()
4061 3) free mem on bad passphrase in try_rsa_authentication()
4062 - markus@cvs.openbsd.org 2001/01/08 21:48:17
4063 [kex.c]
4064 missing free; thanks stevesk@pobox.com
f1c4659d 4065 - (bal) Detect if clock_t structure exists, if not define it.
4066 - (bal) Detect if O_NONBLOCK exists, if not define it.
4067 - (bal) removed news4-posix.h (now empty)
4068 - (bal) changed bsd-bindresvport.c and bsd-rresvport.c to use 'socklen_t'
4069 instead of 'int'
adc83ebf 4070 - (stevesk) sshd_config: sync
4f771a33 4071 - (stevesk) defines.h: remove spurious ``;''
af972861 4072
bbcf899f 407320010108
4074 - (bal) Fixed another typo in cli.c
4075 - (bal) OpenBSD Sync
4076 - markus@cvs.openbsd.org 2001/01/07 21:26:55
4077 [cli.c]
4078 typo
4079 - markus@cvs.openbsd.org 2001/01/07 21:26:55
4080 [cli.c]
4081 missing free, stevesk@pobox.com
4082 - markus@cvs.openbsd.org 2001/01/07 19:06:25
4083 [auth1.c]
4084 missing free, stevesk@pobox.com
4085 - markus@cvs.openbsd.org 2001/01/07 11:28:04
4086 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1
4087 ssh.h sshd.8 sshd.c]
4088 rename SYSLOG_LEVEL_INFO->SYSLOG_LEVEL_NOTICE
4089 syslog priority changes:
4090 fatal() LOG_ERR -> LOG_CRIT
4091 log() LOG_INFO -> LOG_NOTICE
b8c37305 4092 - Updated TODO
bbcf899f 4093
9616313f 409420010107
4095 - (bal) OpenBSD Sync
4096 - markus@cvs.openbsd.org 2001/01/06 11:23:27
4097 [ssh-rsa.c]
4098 remove unused
4099 - itojun@cvs.openbsd.org 2001/01/05 08:23:29
4100 [ssh-keyscan.1]
4101 missing .El
4102 - markus@cvs.openbsd.org 2001/01/04 22:41:03
4103 [session.c sshconnect.c]
4104 consistent use of _PATH_BSHELL; from stevesk@pobox.com
4105 - djm@cvs.openbsd.org 2001/01/04 22:35:32
4106 [ssh.1 sshd.8]
4107 Mention AES as available SSH2 Cipher; ok markus
4108 - markus@cvs.openbsd.org 2001/01/04 22:25:58
4109 [sshd.c]
4110 sync usage()/man with defaults; from stevesk@pobox.com
4111 - markus@cvs.openbsd.org 2001/01/04 22:21:26
4112 [sshconnect2.c]
4113 handle SSH2_MSG_USERAUTH_BANNER; fixes bug when connecting to a server
4114 that prints a banner (e.g. /etc/issue.net)
61e96248 4115
1877dc0c 411620010105
4117 - (bal) contrib/caldera/ provided by Tim Rice <tim@multitalents.net>
5a64a938 4118 - (bal) bsd-getcwd.c and bsd-setenv.c changed from bcopy() to memmove()
1877dc0c 4119
488c06c8 412020010104
4121 - (djm) Fix memory leak on systems with BROKEN_GETADDRINFO. Based on
4122 work by Chris Vaughan <vaughan99@yahoo.com>
4123
7c49df64 412420010103
4125 - (bal) fixed up sshconnect.c so it was closer inline with the OpenBSD
4126 tree (mainly positioning)
4127 - (bal) OpenSSH CVS Update
4128 - markus@cvs.openbsd.org 2001/01/02 20:41:02
4129 [packet.c]
4130 log remote ip on disconnect; PR 1600 from jcs@rt.fm
4131 - markus@cvs.openbsd.org 2001/01/02 20:50:56
4132 [sshconnect.c]
61e96248 4133 strict_host_key_checking for host_status != HOST_CHANGED &&
7c49df64 4134 ip_status == HOST_CHANGED
61e96248 4135 - (bal) authfile.c: Synced CVS ID tag
2c523de9 4136 - (bal) UnixWare 2.0 fixes by Tim Rice <tim@multitalents.net>
4137 - (bal) Disable sftp-server if no 64bit int support exists. Based on
4138 patch by Tim Rice <tim@multitalents.net>
4139 - (bal) Makefile.in changes to uninstall: target to remove sftp-server
4140 and sftp-server.8 manpage.
7c49df64 4141
a421e945 414220010102
4143 - (bal) OpenBSD CVS Update
4144 - markus@cvs.openbsd.org 2001/01/01 14:52:49
4145 [scp.c]
4146 use shared fatal(); from stevesk@pobox.com
4147
0efc80a7 414820001231
4149 - (bal) Reverted out of MAXHOSTNAMELEN. This should be set per OS.
4150 for multiple reasons.
b1335fdf 4151 - (bal) Reverted out of a partial NeXT patch.
0efc80a7 4152
efcae5b1 415320001230
4154 - (bal) OpenBSD CVS Update
4155 - markus@cvs.openbsd.org 2000/12/28 18:58:30
4156 [ssh-keygen.c]
4157 enable 'ssh-keygen -l -f ~/.ssh/{authorized_keys,known_hosts}{,2}
b148018f 4158 - markus@cvs.openbsd.org 2000/12/29 22:19:13
4159 [channels.c]
4160 missing xfree; from vaughan99@yahoo.com
efcae5b1 4161 - (bal) Resynced CVS ID with OpenBSD for channel.c and uidswap.c
03a14cc9 4162 - (bal) if no MAXHOSTNAMELEN is defined. Default to 64 character defination.
34665bf7 4163 Suggested by Christian Kurz <shorty@debian.org>
cb6dabf4 4164 - (bal) Add in '.c.o' section to Makefile.in to address make programs that
61e96248 4165 don't honor CPPFLAGS by default. Suggested by Lutz Jaenicke
cb6dabf4 4166 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
0dd78cd8 4167
416820001229
61e96248 4169 - (bal) Fixed spelling of 'authorized_keys' in ssh-copy-id.1 by Christian
34665bf7 4170 Kurz <shorty@debian.org>
8abcdba4 4171 - (bal) OpenBSD CVS Update
4172 - markus@cvs.openbsd.org 2000/12/28 14:25:51
4173 [auth.h auth2.c]
4174 count authentication failures only
4175 - markus@cvs.openbsd.org 2000/12/28 14:25:03
4176 [sshconnect.c]
4177 fingerprint for MITM attacks, too.
4178 - markus@cvs.openbsd.org 2000/12/28 12:03:57
4179 [sshd.8 sshd.c]
4180 document -D
4181 - markus@cvs.openbsd.org 2000/12/27 14:19:21
4182 [serverloop.c]
4183 less chatty
4184 - markus@cvs.openbsd.org 2000/12/27 12:34
4185 [auth1.c sshconnect2.c sshd.c]
4186 typo
4187 - markus@cvs.openbsd.org 2000/12/27 12:30:19
4188 [readconf.c readconf.h ssh.1 sshconnect.c]
4189 new option: HostKeyAlias: allow the user to record the host key
4190 under a different name. This is useful for ssh tunneling over
4191 forwarded connections or if you run multiple sshd's on different
4192 ports on the same machine.
4193 - markus@cvs.openbsd.org 2000/12/27 11:51:53
4194 [ssh.1 ssh.c]
4195 multiple -t force pty allocation, document ORIGINAL_COMMAND
4196 - markus@cvs.openbsd.org 2000/12/27 11:41:31
4197 [sshd.8]
4198 update for ssh-2
c52c7082 4199 - (stevesk) compress.[ch] sync with openbsd; missed in prototype
4200 fix merge.
0dd78cd8 4201
8f523d67 420220001228
4203 - (bal) Patch to add libutil.h to loginrec.c only if the platform has
4204 libutil.h. Suggested by Pekka Savola <pekka@netcore.fi>
9fb76616 4205 - (djm) Update to new x11-askpass in RPM spec
0dd78cd8 4206 - (bal) SCO patch to not include <sys/queue.h> since it's unrelated
4207 header. Patch by Tim Rice <tim@multitalents.net>
4208 - Updated TODO w/ known HP/UX issue
4209 - (bal) removed extra <netdb.h> noticed by Kevin Steves and removed the
4210 bad reference to 'NeXT including it else were' on the #ifdef version.
8f523d67 4211
b03bd394 421220001227
61e96248 4213 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
b03bd394 4214 Takumi Yamane <yamtak@b-session.com>
4215 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
8f523d67 4216 by Corinna Vinschen <vinschen@redhat.com>
4217 - (djm) Fix catman-do target for non-bash
61e96248 4218 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
8f523d67 4219 Takumi Yamane <yamtak@b-session.com>
4220 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
b03bd394 4221 by Corinna Vinschen <vinschen@redhat.com>
13991f8e 4222 - (djm) Fix catman-do target for non-bash
61e96248 4223 - (bal) Fixed NeXT's lack of CPPFLAGS honoring.
4224 - (bal) ssh-keyscan.c: NeXT (and older BSDs) don't support getrlimit() w/
f318b98b 4225 'RLIMIT_NOFILE'
61e96248 4226 - (djm) Remove *.Ylonen files. They are no longer in the OpenBSD tree,
4227 the info in COPYING.Ylonen has been moved to the start of each
3bdf55b1 4228 SSH1-derived file and README.Ylonen is well out of date.
b03bd394 4229
8d88011e 423020001223
4231 - (bal) Fixed Makefile.in to support recompile of all ssh and sshd objects
4232 if a change to config.h has occurred. Suggested by Gert Doering
4233 <gert@greenie.muc.de>
4234 - (bal) OpenBSD CVS Update:
4235 - markus@cvs.openbsd.org 2000/12/22 16:49:40
4236 [ssh-keygen.c]
4237 fix ssh-keygen -x -t type > file; from Roumen.Petrov@skalasoft.com
4238
1e3b8b07 423920001222
4240 - Updated RCSID for pty.c
4241 - (bal) OpenBSD CVS Updates:
4242 - markus@cvs.openbsd.org 2000/12/21 15:10:16
4243 [auth-rh-rsa.c hostfile.c hostfile.h sshconnect.c]
4244 print keyfile:line for changed hostkeys, for deraadt@, ok deraadt@
4245 - markus@cvs.openbsd.org 2000/12/20 19:26:56
4246 [authfile.c]
4247 allow ssh -i userkey for root
4248 - markus@cvs.openbsd.org 2000/12/20 19:37:21
4249 [authfd.c authfd.h kex.c sshconnect2.c sshd.c uidswap.c uidswap.h]
4250 fix prototypes; from stevesk@pobox.com
4251 - markus@cvs.openbsd.org 2000/12/20 19:32:08
4252 [sshd.c]
4253 init pointer to NULL; report from Jan.Ivan@cern.ch
4254 - markus@cvs.openbsd.org 2000/12/19 23:17:54
4255 [auth-krb4.c auth-options.c auth-options.h auth-rhosts.c auth-rsa.c
4256 auth1.c auth2-skey.c auth2.c authfd.c authfd.h authfile.c bufaux.c
4257 bufaux.h buffer.c canohost.c channels.c clientloop.c compress.c
4258 crc32.c deattack.c getput.h hmac.c hmac.h hostfile.c kex.c kex.h
4259 key.c key.h log.c login.c match.c match.h mpaux.c mpaux.h packet.c
4260 packet.h radix.c readconf.c rsa.c scp.c servconf.c servconf.h
4261 serverloop.c session.c sftp-server.c ssh-agent.c ssh-dss.c ssh-dss.h
4262 ssh-keygen.c ssh-keyscan.c ssh-rsa.c ssh-rsa.h ssh.c ssh.h uuencode.c
4263 uuencode.h sshconnect1.c sshconnect2.c sshd.c tildexpand.c]
4264 replace 'unsigned bla' with 'u_bla' everywhere. also replace 'char
4265 unsigned' with u_char.
4266
67b0facb 426720001221
4268 - (stevesk) OpenBSD CVS updates:
4269 - markus@cvs.openbsd.org 2000/12/19 15:43:45
4270 [authfile.c channels.c sftp-server.c ssh-agent.c]
4271 remove() -> unlink() for consistency
4272 - markus@cvs.openbsd.org 2000/12/19 15:48:09
4273 [ssh-keyscan.c]
4274 replace <ssl/x.h> with <openssl/x.h>
4275 - markus@cvs.openbsd.org 2000/12/17 02:33:40
4276 [uidswap.c]
4277 typo; from wsanchez@apple.com
61e96248 4278
adeebd37 427920001220
61e96248 4280 - (djm) Workaround PAM inconsistencies between Solaris derived PAM code
adeebd37 4281 and Linux-PAM. Based on report and fix from Andrew Morgan
4282 <morgan@transmeta.com>
4283
f072c47a 428420001218
4285 - (stevesk) rsa.c: entropy.h not needed.
0c2fb82f 4286 - (bal) split CFLAGS into CFLAGS and CPPFLAGS in configure.in and Makefile.
4287 Suggested by Wilfredo Sanchez <wsanchez@apple.com>
f072c47a 4288
731c1541 428920001216
4290 - (stevesk) OpenBSD CVS updates:
4291 - markus@cvs.openbsd.org 2000/12/16 02:53:57
4292 [scp.c]
4293 allow + in usernames; request from Florian.Weimer@RUS.Uni-Stuttgart.DE
4294 - markus@cvs.openbsd.org 2000/12/16 02:39:57
4295 [scp.c]
4296 unused; from stevesk@pobox.com
4297
227e8e86 429820001215
9853409f 4299 - (stevesk) Old OpenBSD patch wasn't completely applied:
4300 - markus@cvs.openbsd.org 2000/01/24 22:11:20
4301 [scp.c]
4302 allow '.' in usernames; from jedgar@fxp.org
227e8e86 4303 - (stevesk) OpenBSD CVS updates:
4304 - markus@cvs.openbsd.org 2000/12/13 16:26:53
4305 [ssh-keyscan.c]
4306 fatal already adds \n; from stevesk@pobox.com
4307 - markus@cvs.openbsd.org 2000/12/13 16:25:44
4308 [ssh-agent.c]
4309 remove redundant spaces; from stevesk@pobox.com
4310 - ho@cvs.openbsd.org 2000/12/12 15:50:21
4311 [pty.c]
4312 When failing to set tty owner and mode on a read-only filesystem, don't
4313 abort if the tty already has correct owner and reasonably sane modes.
4314 Example; permit 'root' to login to a firewall with read-only root fs.
4315 (markus@ ok)
4316 - deraadt@cvs.openbsd.org 2000/12/13 06:36:05
4317 [pty.c]
4318 KNF
6ffc9c88 4319 - markus@cvs.openbsd.org 2000/12/12 14:45:21
4320 [sshd.c]
4321 source port < 1024 is no longer required for rhosts-rsa since it
4322 adds no additional security.
4323 - markus@cvs.openbsd.org 2000/12/12 16:11:49
4324 [ssh.1 ssh.c]
4325 rhosts-rsa is no longer automagically disabled if ssh is not privileged.
4326 UsePrivilegedPort=no disables rhosts-rsa _only_ for old servers.
4327 these changes should not change the visible default behaviour of the ssh client.
71c0d06a 4328 - deraadt@cvs.openbsd.org 2000/12/11 10:27:33
4329 [scp.c]
4330 when copying 0-sized files, do not re-print ETA time at completion
3e1caa83 4331 - provos@cvs.openbsd.org 2000/12/15 10:30:15
4332 [kex.c kex.h sshconnect2.c sshd.c]
4333 compute diffie-hellman in parallel between server and client. okay markus@
227e8e86 4334
6c935fbd 433520001213
4336 - (djm) Make sure we reset the SIGPIPE disposition after we fork. Report
4337 from Andreas M. Kirchwitz <amk@krell.zikzak.de>
227e8e86 4338 - (stevesk) OpenBSD CVS update:
1fe6a48f 4339 - markus@cvs.openbsd.org 2000/12/12 15:30:02
4340 [ssh-keyscan.c ssh.c sshd.c]
61e96248 4341 consistently use __progname; from stevesk@pobox.com
6c935fbd 4342
367d1840 434320001211
4344 - (bal) Applied patch to include ssh-keyscan into Redhat's package, and
4345 patch to install ssh-keyscan manpage. Patch by Pekka Savola
4346 <pekka@netcore.fi>
e3a70753 4347 - (bal) OpenbSD CVS update
4348 - markus@cvs.openbsd.org 2000/12/10 17:01:53
4349 [sshconnect1.c]
4350 always request new challenge for skey/tis-auth, fixes interop with
4351 other implementations; report from roth@feep.net
367d1840 4352
6b523bae 435320001210
4354 - (bal) OpenBSD CVS updates
61e96248 4355 - markus@cvs.openbsd.org 2000/12/09 13:41:51
6b523bae 4356 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
4357 undo rijndael changes
61e96248 4358 - markus@cvs.openbsd.org 2000/12/09 13:48:31
6b523bae 4359 [rijndael.c]
4360 fix byte order bug w/o introducing new implementation
61e96248 4361 - markus@cvs.openbsd.org 2000/12/09 14:08:27
6b523bae 4362 [sftp-server.c]
4363 "" -> "." for realpath; from vinschen@redhat.com
61e96248 4364 - markus@cvs.openbsd.org 2000/12/09 14:06:54
6b523bae 4365 [ssh-agent.c]
4366 extern int optind; from stevesk@sweden.hp.com
13af0aa2 4367 - provos@cvs.openbsd.org 2000/12/09 23:51:11
4368 [compat.c]
4369 remove unnecessary '\n'
6b523bae 4370
ce9c0b75 437120001209
6b523bae 4372 - (bal) OpenBSD CVS updates:
61e96248 4373 - djm@cvs.openbsd.org 2000/12/07 4:24:59
ce9c0b75 4374 [ssh.1]
4375 Typo fix from Wilfredo Sanchez <wsanchez@apple.com>; ok theo
4376
f72fc97f 437720001207
6b523bae 4378 - (bal) OpenBSD CVS updates:
61e96248 4379 - markus@cvs.openbsd.org 2000/12/06 22:58:14
f72fc97f 4380 [compat.c compat.h packet.c]
4381 disable debug messages for ssh.com/f-secure 2.0.1x, 2.1.0
dfe89252 4382 - markus@cvs.openbsd.org 2000/12/06 23:10:39
4383 [rijndael.c]
4384 unexpand(1)
61e96248 4385 - markus@cvs.openbsd.org 2000/12/06 23:05:43
dfe89252 4386 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
4387 new rijndael implementation. fixes endian bugs
f72fc97f 4388
97fb6912 438920001206
6b523bae 4390 - (bal) OpenBSD CVS updates:
97fb6912 4391 - markus@cvs.openbsd.org 2000/12/05 20:34:09
4392 [channels.c channels.h clientloop.c serverloop.c]
4393 async connects for -R/-L; ok deraadt@
4394 - todd@cvs.openssh.org 2000/12/05 16:47:28
4395 [sshd.c]
4396 tweak comment to reflect real location of pid file; ok provos@
bf5f69f7 4397 - (stevesk) Import <sys/queue.h> from OpenBSD for systems that don't
4398 have it (used in ssh-keyscan).
227e8e86 4399 - (stevesk) OpenBSD CVS update:
f20255cb 4400 - markus@cvs.openbsd.org 2000/12/06 19:57:48
4401 [ssh-keyscan.c]
4402 err(3) -> internal error(), from stevesk@sweden.hp.com
97fb6912 4403
f6fdbddf 440420001205
6b523bae 4405 - (bal) OpenBSD CVS updates:
f6fdbddf 4406 - markus@cvs.openbsd.org 2000/12/04 19:24:02
4407 [ssh-keyscan.c ssh-keyscan.1]
4408 David Maziere's ssh-keyscan, ok niels@
4409 - (bal) Updated Makefile.in to include ssh-keyscan that was just added
4410 to the recent OpenBSD source tree.
835d2104 4411 - (stevesk) fix typos in contrib/hpux/README
f6fdbddf 4412
cbc5abf9 441320001204
4414 - (bal) More C functions defined in NeXT that are unaccessable without
61e96248 4415 defining -POSIX.
4416 - (bal) OpenBSD CVS updates:
4417 - markus@cvs.openbsd.org 2000/12/03 11:29:04
cbc5abf9 4418 [compat.c]
4419 remove fallback to SSH_BUG_HMAC now that the drafts are updated
4420 - markus@cvs.openbsd.org 2000/12/03 11:27:55
4421 [compat.c]
61e96248 4422 correctly match "2.1.0.pl2 SSH" etc; from
97fb6912 4423 pekkas@netcore.fi/bugzilla.redhat
cbc5abf9 4424 - markus@cvs.openbsd.org 2000/12/03 11:15:03
4425 [auth2.c compat.c compat.h sshconnect2.c]
4426 support f-secure/ssh.com 2.0.12; ok niels@
4427
0b6fbf03 442820001203
cbc5abf9 4429 - (bal) OpenBSD CVS updates:
0b6fbf03 4430 - markus@cvs.openbsd.org 2000/11/30 22:54:31
4431 [channels.c]
61e96248 4432 debug->warn if tried to do -R style fwd w/o client requesting this;
0b6fbf03 4433 ok neils@
4434 - markus@cvs.openbsd.org 2000/11/29 20:39:17
4435 [cipher.c]
4436 des_cbc_encrypt -> des_ncbc_encrypt since it already updates the IV
4437 - markus@cvs.openbsd.org 2000/11/30 18:33:05
4438 [ssh-agent.c]
4439 agents must not dump core, ok niels@
61e96248 4440 - markus@cvs.openbsd.org 2000/11/30 07:04:02
0b6fbf03 4441 [ssh.1]
4442 T is for both protocols
4443 - markus@cvs.openbsd.org 2000/12/01 00:00:51
4444 [ssh.1]
4445 typo; from green@FreeBSD.org
4446 - markus@cvs.openbsd.org 2000/11/30 07:02:35
4447 [ssh.c]
4448 check -T before isatty()
4449 - provos@cvs.openbsd.org 2000/11/29 13:51:27
4450 [sshconnect.c]
61e96248 4451 show IP address and hostname when new key is encountered. okay markus@
0b6fbf03 4452 - markus@cvs.openbsd.org 2000/11/30 22:53:35
4453 [sshconnect.c]
4454 disable agent/x11/port fwding if hostkey has changed; ok niels@
4455 - marksu@cvs.openbsd.org 2000/11/29 21:11:59
4456 [sshd.c]
4457 sshd -D, startup w/o deamon(), for monitoring scripts or inittab;
4458 from handler@sub-rosa.com and eric@urbanrange.com; ok niels@
8c9fe09e 4459 - (djm) Added patch from Nalin Dahyabhai <nalin@redhat.com> to enable
4460 PAM authentication using KbdInteractive.
4461 - (djm) Added another TODO
0b6fbf03 4462
90f4078a 446320001202
4464 - (bal) Backed out of part of Alain St-Denis' loginrec.c patch.
61e96248 4465 - (bal) Irix need some sort of mansubdir, patch by Michael Stone
90f4078a 4466 <mstone@cs.loyola.edu>
4467
dcef6523 446820001129
7062c40f 4469 - (djm) Back out all the serverloop.c hacks. sshd will now hang again
4470 if there are background children with open fds.
c193d002 4471 - (djm) bsd-rresvport.c bzero -> memset
61e96248 4472 - (djm) Don't fail in defines.h on absence of 64 bit types (we will
c193d002 4473 still fail during compilation of sftp-server).
4474 - (djm) Fail if ar is not found during configure
c523303b 4475 - (djm) OpenBSD CVS updates:
4476 - provos@cvs.openbsd.org 2000/11/22 08:38:31
4477 [sshd.8]
4478 talk about /etc/primes, okay markus@
4479 - markus@cvs.openbsd.org 2000/11/23 14:03:48
4480 [ssh.c sshconnect1.c sshconnect2.c]
4481 complain about invalid ciphers for ssh1/ssh2, fall back to reasonable
4482 defaults
4483 - markus@cvs.openbsd.org 2000/11/25 09:42:53
4484 [sshconnect1.c]
4485 reorder check for illegal ciphers, bugreport from espie@
4486 - markus@cvs.openbsd.org 2000/11/25 10:19:34
4487 [ssh-keygen.c ssh.h]
4488 print keytype when generating a key.
4489 reasonable defaults for RSA1/RSA/DSA keys.
b3ec54b4 4490 - (djm) Patch from Pekka Savola <Pekka.Savola@netcore.fi> to include a few
4491 more manpage paths in fixpaths calls
4492 - (djm) Also add xauth path at Pekka's suggestion.
57ce3f00 4493 - (djm) Add Redhat RPM patch for AUTHPRIV SyslogFacility
dcef6523 4494
e879a080 449520001125
4496 - (djm) Give up privs when reading seed file
4497
d343d900 449820001123
4499 - (bal) Merge OpenBSD changes:
4500 - markus@cvs.openbsd.org 2000/11/15 22:31:36
4501 [auth-options.c]
61e96248 4502 case insensitive key options; from stevesk@sweeden.hp.com
d343d900 4503 - markus@cvs.openbsd.org 2000/11/16 17:55:43
4504 [dh.c]
4505 do not use perror() in sshd, after child is forked()
4506 - markus@cvs.openbsd.org 2000/11/14 23:42:40
4507 [auth-rsa.c]
4508 parse option only if key matches; fix some confusing seen by the client
4509 - markus@cvs.openbsd.org 2000/11/14 23:44:19
4510 [session.c]
4511 check no_agent_forward_flag for ssh-2, too
4512 - markus@cvs.openbsd.org 2000/11/15
4513 [ssh-agent.1]
4514 reorder SYNOPSIS; typo, use .It
4515 - markus@cvs.openbsd.org 2000/11/14 23:48:55
4516 [ssh-agent.c]
4517 do not reorder keys if a key is removed
4518 - markus@cvs.openbsd.org 2000/11/15 19:58:08
4519 [ssh.c]
61e96248 4520 just ignore non existing user keys
d343d900 4521 - millert@cvs.openbsd.org 200/11/15 20:24:43
4522 [ssh-keygen.c]
4523 Add missing \n at end of error message.
4524
0b49a754 452520001122
4526 - (bal) Minor patch to ensure platforms lacking IRIX job limit supports
4527 are compilable.
4528 - (bal) Updated TODO as of 11/18/2000 with known things to resolve.
4529
fab2e5d3 453020001117
4531 - (bal) Changed from 'primes' to 'primes.out' for consistancy sake. It
4532 has no affect the output. Patch by Corinna Vinschen <vinschen@redhat.com>
61e96248 4533 - (stevesk) Reworked progname support.
260d427b 4534 - (bal) Misplaced #include "includes.h" in bsd-setproctitle.c. Patch by
4535 Shinichi Maruyama <marya@st.jip.co.jp>
fab2e5d3 4536
c2207f11 453720001116
4538 - (bal) Added in MAXSYMLINK test in bsd-realpath.c. Required for some SCO
4539 releases.
4540 - (bal) Make builds work outside of source tree. Patch by Mark D. Roth
4541 <roth@feep.net>
4542
3d398e04 454320001113
61e96248 4544 - (djm) Add pointer to http://www.imasy.or.jp/~gotoh/connect.c to
3d398e04 4545 contrib/README
fa08c86b 4546 - (djm) Merge OpenBSD changes:
4547 - markus@cvs.openbsd.org 2000/11/06 16:04:56
4548 [channels.c channels.h clientloop.c nchan.c serverloop.c]
4549 [session.c ssh.c]
4550 agent forwarding and -R for ssh2, based on work from
4551 jhuuskon@messi.uku.fi
4552 - markus@cvs.openbsd.org 2000/11/06 16:13:27
4553 [ssh.c sshconnect.c sshd.c]
4554 do not disabled rhosts(rsa) if server port > 1024; from
4555 pekkas@netcore.fi
4556 - markus@cvs.openbsd.org 2000/11/06 16:16:35
4557 [sshconnect.c]
4558 downgrade client to 1.3 if server is 1.4; help from mdb@juniper.net
4559 - markus@cvs.openbsd.org 2000/11/09 18:04:40
4560 [auth1.c]
4561 typo; from mouring@pconline.com
4562 - markus@cvs.openbsd.org 2000/11/12 12:03:28
4563 [ssh-agent.c]
4564 off-by-one when removing a key from the agent
4565 - markus@cvs.openbsd.org 2000/11/12 12:50:39
4566 [auth-rh-rsa.c auth2.c authfd.c authfd.h]
4567 [authfile.c hostfile.c kex.c kex.h key.c key.h myproposal.h]
4568 [readconf.c readconf.h rsa.c rsa.h servconf.c servconf.h ssh-add.c]
4569 [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config]
4570 [sshconnect1.c sshconnect2.c sshd.8 sshd.c sshd_config ssh-dss.c]
61e96248 4571 [ssh-dss.h ssh-rsa.c ssh-rsa.h dsa.c dsa.h]
fa08c86b 4572 add support for RSA to SSH2. please test.
4573 there are now 3 types of keys: RSA1 is used by ssh-1 only,
4574 RSA and DSA are used by SSH2.
4575 you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
4576 keys for SSH2 and use the RSA keys for hostkeys or for user keys.
4577 SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.
4578 - (djm) Fix up Makefile and Redhat init script to create RSA host keys
f001465f 4579 - (djm) Change to interim version
5733a41a 4580 - (djm) Fix RPM spec file stupidity
6fff1ac4 4581 - (djm) fixpaths to DSA and RSA keys too
3d398e04 4582
d287c664 458320001112
4584 - (bal) SCO Patch to add needed libraries for configure.in. Patch by
4585 Phillips Porch <root@theporch.com>
3d398e04 4586 - (bal) IRIX patch to adding Job Limits. Patch by Denis Parker
4587 <dcp@sgi.com>
a3bf38d0 4588 - (stevesk) pty.c: HP-UX 10 and 11 don't define TIOCSCTTY. Add error() to
4589 failed ioctl(TIOCSCTTY) call.
d287c664 4590
3c4d4fef 459120001111
4592 - (djm) Added /etc/primes for kex DH group neg, fixup Makefile.in and
4593 packaging files
35325fd4 4594 - (djm) Fix new Makefile.in warnings
61e96248 4595 - (djm) Fix vsprintf("%h") in bsd-snprintf.c, short int va_args are
4596 promoted to type int. Report and fix from Dan Astoorian
027bf205 4597 <djast@cs.toronto.edu>
61e96248 4598 - (djm) Hardwire sysconfdir in RPM spec files as some RPM versions get
e3291159 4599 it wrong. Report from Bennett Todd <bet@rahul.net>
3c4d4fef 4600
3e366738 460120001110
4602 - (bal) Fixed dropped answer from skey_keyinfo() in auth1.c
4603 - (bal) Changed from --with-skey to --with-skey=PATH in configure.in
4604 - (bal) Added in check to verify S/Key library is being detected in
4605 configure.in
61e96248 4606 - (bal) next-posix.h - added another prototype wrapped in POSIX ifdef/endif.
3e366738 4607 Patch by Mark Miller <markm@swoon.net>
4608 - (bal) Added 'util.h' header to loginrec.c only if HAVE_UTIL_H is defined
61e96248 4609 to remove warnings under MacOS X. Patch by Mark Miller <markm@swoon.net>
3e366738 4610 - (bal) Fixed LDFLAG mispelling in configure.in for --with-afs
4611
373998a4 461220001107
e506ee73 4613 - (bal) acconfig.in - removed the double "USE_PIPES" entry. Patch by
4614 Mark Miller <markm@swoon.net>
373998a4 4615 - (bal) sshd.init files corrected to assign $? to RETVAL. Patch by
4616 Jarno Huuskonen <jhuuskon@messi.uku.fi>
e506ee73 4617 - (bal) fixpaths fixed to stop it from quitely failing. Patch by
4618 Mark D. Roth <roth@feep.net>
373998a4 4619
ac89998a 462020001106
4621 - (djm) Use Jim's new 1.0.3 askpass in Redhat RPMs
6c09e23c 4622 - (djm) Manually fix up missed diff hunks (mainly RCS idents)
61e96248 4623 - (djm) Remove UPGRADING document in favour of a link to the better
d6846e6a 4624 maintained FAQ on www.openssh.com
73bd30fe 4625 - (djm) Fix multiple dependancy on gnome-libs from Pekka Savola
4626 <pekkas@netcore.fi>
4627 - (djm) Don't need X11-askpass in RPM spec file if building without it
4628 from Pekka Savola <pekkas@netcore.fi>
c215ba3b 4629 - (djm) Release 2.3.0p1
97b378bf 4630 - (bal) typo in configure.in in regards to --with-ldflags from Marko
4631 Asplund <aspa@kronodoc.fi>
4632 - (bal) fixed next-posix.h. Forgot prototype of getppid().
68f189a9 4633
b850ecd9 463420001105
4635 - (bal) Sync with OpenBSD:
4636 - markus@cvs.openbsd.org 2000/10/31 9:31:58
4637 [compat.c]
4638 handle all old openssh versions
4639 - markus@cvs.openbsd.org 2000/10/31 13:1853
4640 [deattack.c]
4641 so that large packets do not wrap "n"; from netbsd
4642 - (bal) rijndel.c - fix up RCSID to match OpenBSD tree
a30ce26d 4643 - (bal) auth2-skey.c - Checked in. Missing from portable tree.
4644 - (bal) Reworked NEWS-OS and NeXT ports to extract waitpid() and
4645 setsid() into more common files
96054e6f 4646 - (stevesk) pty.c: use __hpux to identify HP-UX.
d0127657 4647 - (bal) Missed auth-skey.o in Makefile.in and minor correction to
4648 bsd-waitpid.c
b850ecd9 4649
75b90ced 465020001029
4651 - (stevesk) Fix typo in auth.c: USE_PAM not PAM
95273555 4652 - (stevesk) Create contrib/cygwin/ directory; patch from
4653 Corinna Vinschen <vinschen@redhat.com>
e9e4a1c7 4654 - (bal) Resolved more $xno and $xyes issues in configure.in
fd5f0295 4655 - (bal) next-posix.h - spelling and forgot a prototype
75b90ced 4656
344f2b94 465720001028
61e96248 4658 - (djm) fix select hack in serverloop.c from Philippe WILLEM
344f2b94 4659 <Philippe.WILLEM@urssaf.fr>
240ae474 4660 - (djm) Fix mangled AIXAUTHENTICATE code
61e96248 4661 - (djm) authctxt->pw may be NULL. Fix from Markus Friedl
606ea390 4662 <markus.friedl@informatik.uni-erlangen.de>
a22aff1f 4663 - (djm) Sync with OpenBSD:
4664 - markus@cvs.openbsd.org 2000/10/16 15:46:32
4665 [ssh.1]
4666 fixes from pekkas@netcore.fi
4667 - markus@cvs.openbsd.org 2000/10/17 14:28:11
4668 [atomicio.c]
4669 return number of characters processed; ok deraadt@
4670 - markus@cvs.openbsd.org 2000/10/18 12:04:02
4671 [atomicio.c]
4672 undo
4673 - markus@cvs.openbsd.org 2000/10/18 12:23:02
4674 [scp.c]
4675 replace atomicio(read,...) with read(); ok deraadt@
4676 - markus@cvs.openbsd.org 2000/10/18 12:42:00
4677 [session.c]
4678 restore old record login behaviour
4679 - deraadt@cvs.openbsd.org 2000/10/19 10:41:13
4680 [auth-skey.c]
4681 fmt string problem in unused code
4682 - provos@cvs.openbsd.org 2000/10/19 10:45:16
4683 [sshconnect2.c]
4684 don't reference freed memory. okay deraadt@
4685 - markus@cvs.openbsd.org 2000/10/21 11:04:23
4686 [canohost.c]
4687 typo, eramore@era-t.ericsson.se; ok niels@
4688 - markus@cvs.openbsd.org 2000/10/23 13:31:55
4689 [cipher.c]
4690 non-alignment dependent swap_bytes(); from
4691 simonb@wasabisystems.com/netbsd
4692 - markus@cvs.openbsd.org 2000/10/26 12:38:28
4693 [compat.c]
4694 add older vandyke products
4695 - markus@cvs.openbsd.org 2000/10/27 01:32:19
4696 [channels.c channels.h clientloop.c serverloop.c session.c]
4697 [ssh.c util.c]
61e96248 4698 enable non-blocking IO on channels, and tty's (except for the
a22aff1f 4699 client ttys).
344f2b94 4700
ddc49b5c 470120001027
4702 - (djm) Increase REKEY_BYTES to 2^24 for arc4random
4703
48e7916f 470420001025
4705 - (djm) Added WARNING.RNG file and modified configure to ask users of the
4706 builtin entropy code to read it.
4707 - (djm) Prefer builtin regex to PCRE.
00937921 4708 - (bal) Added USE_PIPS defined to NeXT configure.in since scp hangs randomly.
4709 - (bal) Apply fixes to configure.in pointed out by Pavel Roskin
4710 <proski@gnu.org>
48e7916f 4711
8dcda1e3 471220001020
4713 - (djm) Don't define _REENTRANT for SNI/Reliant Unix
07bee9a7 4714 - (bal) Imported NEWS-OS waitpid() macros into NeXT. Since implementation
4715 is more correct then current version.
8dcda1e3 4716
f5af5cd5 471720001018
4718 - (stevesk) Add initial support for setproctitle(). Current
4719 support is for the HP-UX pstat(PSTAT_SETCMD, ...) method.
134fd7f6 4720 - (stevesk) Add egd startup scripts to contrib/hpux/
f5af5cd5 4721
2f31bdd6 472220001017
4723 - (djm) Add -lregex to cywin libs from Corinna Vinschen
4724 <vinschen@cygnus.com>
ba7a3f40 4725 - (djm) Don't rely on atomicio's retval to determine length of askpass
4726 supplied passphrase. Problem report from Lutz Jaenicke
4727 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
66d6c27e 4728 - (bal) Changed from GNU rx to PCRE on suggestion from djm.
61e96248 4729 - (bal) Integrated Sony NEWS-OS patches from NAKAJI Hirouyuki
66d6c27e 4730 <nakaji@tutrp.tut.ac.jp>
2f31bdd6 4731
33de75a3 473220001016
4733 - (djm) Sync with OpenBSD:
4734 - markus@cvs.openbsd.org 2000/10/14 04:01:15
4735 [cipher.c]
4736 debug3
4737 - markus@cvs.openbsd.org 2000/10/14 04:07:23
4738 [scp.c]
4739 remove spaces from arguments; from djm@mindrot.org
4740 - markus@cvs.openbsd.org 2000/10/14 06:09:46
4741 [ssh.1]
4742 Cipher is for SSH-1 only
4743 - markus@cvs.openbsd.org 2000/10/14 06:12:09
4744 [servconf.c servconf.h serverloop.c session.c sshd.8]
4745 AllowTcpForwarding; from naddy@
4746 - markus@cvs.openbsd.org 2000/10/14 06:16:56
4747 [auth2.c compat.c compat.h sshconnect2.c version.h]
61e96248 4748 OpenSSH_2.3; note that is is not complete, but the version number
33de75a3 4749 needs to be changed for interoperability reasons
4750 - markus@cvs.openbsd.org 2000/10/14 06:19:45
4751 [auth-rsa.c]
4752 do not send RSA challenge if key is not allowed by key-options; from
4753 eivind@ThinkSec.com
4754 - markus@cvs.openbsd.org 2000/10/15 08:14:01
4755 [rijndael.c session.c]
4756 typos; from stevesk@sweden.hp.com
4757 - markus@cvs.openbsd.org 2000/10/15 08:18:31
4758 [rijndael.c]
4759 typo
61e96248 4760 - (djm) Copy manpages back over from OpenBSD - too tedious to wade
30d8b039 4761 through diffs
61e96248 4762 - (djm) Added condrestart to Redhat init script. Patch from Pekka Savola
30d8b039 4763 <pekkas@netcore.fi>
aa0289fe 4764 - (djm) Update version in Redhat spec file
61e96248 4765 - (djm) Merge some of Nalin Dahyabhai <nalin@redhat.com> changes from the
aa0289fe 4766 Redhat 7.0 spec file
5b2d4b75 4767 - (djm) Make inability to read/write PRNG seedfile non-fatal
4768
33de75a3 4769
4d670c24 477020001015
4771 - (djm) Fix ssh2 hang on background processes at logout.
4772
71dfaf1c 477320001014
443172c4 4774 - (bal) Add support for realpath and getcwd for platforms with broken
4775 or missing realpath implementations for sftp-server.
4776 - (bal) Corrected mistake in INSTALL in regards to GNU rx library
61e96248 4777 - (bal) Add support for GNU rx library for those lacking regexp support
71dfaf1c 4778 - (djm) Don't accept PAM_PROMPT_ECHO_ON messages during initial auth
02323c45 4779 - (djm) Revert SSH2 serverloop hack, will find a better way.
4ee81249 4780 - (djm) Add workaround for Linux 2.4's gratuitious errno change. Patch
4781 from Martin Johansson <fatbob@acc.umu.se>
94ec8c6b 4782 - (djm) Big OpenBSD sync:
4783 - markus@cvs.openbsd.org 2000/09/30 10:27:44
4784 [log.c]
4785 allow loglevel debug
4786 - markus@cvs.openbsd.org 2000/10/03 11:59:57
4787 [packet.c]
4788 hmac->mac
4789 - markus@cvs.openbsd.org 2000/10/03 12:03:03
4790 [auth-krb4.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth1.c]
4791 move fake-auth from auth1.c to individual auth methods, disables s/key in
4792 debug-msg
4793 - markus@cvs.openbsd.org 2000/10/03 12:16:48
4794 ssh.c
4795 do not resolve canonname, i have no idea why this was added oin ossh
4796 - markus@cvs.openbsd.org 2000/10/09 15:30:44
4797 ssh-keygen.1 ssh-keygen.c
4798 -X now reads private ssh.com DSA keys, too.
4799 - markus@cvs.openbsd.org 2000/10/09 15:32:34
4800 auth-options.c
4801 clear options on every call.
4802 - markus@cvs.openbsd.org 2000/10/09 15:51:00
4803 authfd.c authfd.h
4804 interop with ssh-agent2, from <res@shore.net>
4805 - markus@cvs.openbsd.org 2000/10/10 14:20:45
4806 compat.c
4807 use rexexp for version string matching
4808 - provos@cvs.openbsd.org 2000/10/10 22:02:18
4809 [kex.c kex.h myproposal.h ssh.h ssh2.h sshconnect2.c sshd.c dh.c dh.h]
4810 First rough implementation of the diffie-hellman group exchange. The
4811 client can ask the server for bigger groups to perform the diffie-hellman
4812 in, thus increasing the attack complexity when using ciphers with longer
4813 keys. University of Windsor provided network, T the company.
4814 - markus@cvs.openbsd.org 2000/10/11 13:59:52
4815 [auth-rsa.c auth2.c]
4816 clear auth options unless auth sucessfull
4817 - markus@cvs.openbsd.org 2000/10/11 14:00:27
4818 [auth-options.h]
4819 clear auth options unless auth sucessfull
4820 - markus@cvs.openbsd.org 2000/10/11 14:03:27
4821 [scp.1 scp.c]
4822 support 'scp -o' with help from mouring@pconline.com
4823 - markus@cvs.openbsd.org 2000/10/11 14:11:35
4824 [dh.c]
4825 Wall
4826 - markus@cvs.openbsd.org 2000/10/11 14:14:40
4827 [auth.h auth2.c readconf.c readconf.h readpass.c servconf.c servconf.h]
4828 [ssh.h sshconnect2.c sshd_config auth2-skey.c cli.c cli.h]
4829 add support for s/key (kbd-interactive) to ssh2, based on work by
4830 mkiernan@avantgo.com and me
4831 - markus@cvs.openbsd.org 2000/10/11 14:27:24
4832 [auth.c auth1.c auth2.c authfile.c cipher.c cipher.h kex.c kex.h]
4833 [myproposal.h packet.c readconf.c session.c ssh.c ssh.h sshconnect1.c]
4834 [sshconnect2.c sshd.c]
4835 new cipher framework
4836 - markus@cvs.openbsd.org 2000/10/11 14:45:21
4837 [cipher.c]
4838 remove DES
4839 - markus@cvs.openbsd.org 2000/10/12 03:59:20
4840 [cipher.c cipher.h sshconnect1.c sshconnect2.c sshd.c]
4841 enable DES in SSH-1 clients only
4842 - markus@cvs.openbsd.org 2000/10/12 08:21:13
4843 [kex.h packet.c]
4844 remove unused
4845 - markus@cvs.openbsd.org 2000/10/13 12:34:46
4846 [sshd.c]
4847 Kludge for F-Secure Macintosh < 1.0.2; appro@fy.chalmers.se
4848 - markus@cvs.openbsd.org 2000/10/13 12:59:15
4849 [cipher.c cipher.h myproposal.h rijndael.c rijndael.h]
4850 rijndael/aes support
4851 - markus@cvs.openbsd.org 2000/10/13 13:10:54
4852 [sshd.8]
4853 more info about -V
4854 - markus@cvs.openbsd.org 2000/10/13 13:12:02
4855 [myproposal.h]
4856 prefer no compression
3ed32516 4857 - (djm) Fix scp user@host handling
4858 - (djm) Don't clobber ssh_prng_cmds on install
6bcf7caa 4859 - (stevesk) Include config.h in rijndael.c so we define intXX_t and
4860 u_intXX_t types on all platforms.
9ea53ba5 4861 - (stevesk) rijndael.c: cleanup missing declaration warnings.
2919e060 4862 - (stevesk) ~/.hushlogin shouldn't cause required password change to
4863 be bypassed.
f5665f6f 4864 - (stevesk) Display correct path to ssh-askpass in configure output.
4865 Report from Lutz Jaenicke.
71dfaf1c 4866
ebd782f7 486720001007
4868 - (stevesk) Print PAM return value in PAM log messages to aid
4869 with debugging.
97994d32 4870 - (stevesk) Fix detection of pw_class struct member in configure;
4871 patch from KAMAHARA Junzo <kamahara@cc.kshosen.ac.jp>
4872
47a134c1 487320001002
4874 - (djm) Fix USER_PATH, report from Kevin Steves <stevesk@sweden.hp.com>
4875 - (djm) Add host system and CC to end-of-configure report. Suggested by
4876 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
4877
7322ef0e 487820000931
4879 - (djm) Cygwin fixes from Corinna Vinschen <vinschen@cygnus.com>
4880
6ac7829a 488120000930
b6490dcb 4882 - (djm) Irix ssh_prng_cmds path fix from Pekka Savola <pekkas@netcore.fi>
61e96248 4883 - (djm) Support in bsd-snprintf.c for long long conversions from
772bd898 4884 Ben Lindstrom <mouring@pconline.com>
4885 - (djm) Cleanup NeXT support from Ben Lindstrom <mouring@pconline.com>
857040fb 4886 - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with
61e96248 4887 very short lived X connections. Bug report from Tobias Oetiker
857040fb 4888 <oetiker@ee.ethz.ch>. Fix from Markus Friedl <markus@cvs.openbsd.org>
bd2d7f6a 4889 - (djm) Add recent InitScripts as a RPM dependancy for openssh-server
4890 patch from Pekka Savola <pekkas@netcore.fi>
58665035 4891 - (djm) Forgot to cvs add LICENSE file
dc2901a0 4892 - (djm) Add LICENSE to RPM spec files
de273eef 4893 - (djm) CVS OpenBSD sync:
4894 - markus@cvs.openbsd.org 2000/09/26 13:59:59
4895 [clientloop.c]
4896 use debug2
4897 - markus@cvs.openbsd.org 2000/09/27 15:41:34
4898 [auth2.c sshconnect2.c]
4899 use key_type()
4900 - markus@cvs.openbsd.org 2000/09/28 12:03:18
4901 [channels.c]
4902 debug -> debug2 cleanup
61e96248 4903 - (djm) Irix strips "/dev/tty" from [uw]tmp entries (other systems only
2a7d529a 4904 strip "/dev/"). Fix loginrec.c based on patch from Alain St-Denis
4905 <Alain.St-Denis@ec.gc.ca>
61e96248 4906 - (djm) Fix 9 character passphrase failure with gnome-ssh-askpass.
4907 Problem was caused by interrupted read in ssh-add. Report from Donald
2a7d529a 4908 J. Barry <don@astro.cornell.edu>
6ac7829a 4909
c5d85828 491020000929
4911 - (djm) Fix SSH2 not terminating until all background tasks done problem.
61e96248 4912 - (djm) Another off-by-one fix from Pavel Kankovsky
4913 <peak@argo.troja.mff.cuni.cz>
22d89d24 4914 - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code,
4915 tidy necessary differences. Use Markus' new debugN() in entropy.c
61e96248 4916 - (djm) Merged big SCO portability patch from Tim Rice
77bb0bca 4917 <tim@multitalents.net>
c5d85828 4918
6fd7f731 491920000926
4920 - (djm) Update X11-askpass to 1.0.2 in RPM spec file
c5ae7384 4921 - (djm) Define _REENTRANT to pickup strtok_r() on HP/UX
61e96248 4922 - (djm) Security: fix off-by-one buffer overrun in fake-getnameinfo.c.
4923 Report and fix from Pavel Kankovsky <peak@argo.troja.mff.cuni.cz>
6fd7f731 4924
2f125ca1 492520000924
4926 - (djm) Merged cleanup patch from Mark Miller <markm@swoon.net>
4927 - (djm) A bit more cleanup - created cygwin_util.h
bcdaaeab 4928 - (djm) Include strtok_r() from OpenBSD libc. Fixes report from Mark Miller
4929 <markm@swoon.net>
2f125ca1 4930
764d4113 493120000923
61e96248 4932 - (djm) Fix address logging in utmp from Kevin Steves
764d4113 4933 <stevesk@sweden.hp.com>
777319db 4934 - (djm) Redhat spec and manpage fixes from Pekka Savola <pekkas@netcore.fi>
bd590612 4935 - (djm) Seperate tests for int64_t and u_int64_t types
61e96248 4936 - (djm) Tweak password expiry checking at suggestion of Kevin Steves
37c1c46d 4937 <stevesk@sweden.hp.com>
e79b44e1 4938 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
61e96248 4939 - (djm) Use printf %lld instead of %qd in sftp-server.c. Fix from
e2144f11 4940 Michael Stone <mstone@cs.loyola.edu>
188adeb2 4941 - (djm) OpenBSD CVS sync:
4942 - markus@cvs.openbsd.org 2000/09/17 09:38:59
4943 [sshconnect2.c sshd.c]
4944 fix DEBUG_KEXDH
4945 - markus@cvs.openbsd.org 2000/09/17 09:52:51
4946 [sshconnect.c]
4947 yes no; ok niels@
4948 - markus@cvs.openbsd.org 2000/09/21 04:55:11
4949 [sshd.8]
4950 typo
4951 - markus@cvs.openbsd.org 2000/09/21 05:03:54
4952 [serverloop.c]
4953 typo
4954 - markus@cvs.openbsd.org 2000/09/21 05:11:42
4955 scp.c
4956 utime() to utimes(); mouring@pconline.com
4957 - markus@cvs.openbsd.org 2000/09/21 05:25:08
4958 sshconnect2.c
4959 change login logic in ssh2, allows plugin of other auth methods
4960 - markus@cvs.openbsd.org 2000/09/21 05:25:35
4961 [auth2.c channels.c channels.h clientloop.c dispatch.c dispatch.h]
4962 [serverloop.c]
4963 add context to dispatch_run
4964 - markus@cvs.openbsd.org 2000/09/21 05:07:52
4965 authfd.c authfd.h ssh-agent.c
4966 bug compat for old ssh.com software
764d4113 4967
7f377177 496820000920
4969 - (djm) Fix bad path substitution. Report from Andrew Miner
4970 <asminer@cs.iastate.edu>
4971
bcbf86ec 497220000916
61e96248 4973 - (djm) Fix SSL search order from Lutz Jaenicke
7950bf97 4974 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
19ece6d2 4975 - (djm) New SuSE spec from Corinna Vinschen <corinna@vinschen.de>
9cd45ea4 4976 - (djm) Update CygWin support from Corinna Vinschen <vinschen@cygnus.com>
995edaac 4977 - (djm) Use a real struct sockaddr inside the fake struct sockaddr_storage.
4978 Patch from Larry Jones <larry.jones@sdrc.com>
61e96248 4979 - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM
ad55cd03 4980 password change patch.
4981 - (djm) Bring licenses on my stuff in line with OpenBSD's
0bbfbdeb 4982 - (djm) Cleanup auth-passwd.c and unify HP/UX authentication. Patch from
4983 Kevin Steves <stevesk@sweden.hp.com>
7f8f5e00 4984 - (djm) Shadow expiry check fix from Pavel Troller <patrol@omni.sinus.cz>
4985 - (djm) Re-enable int64_t types - we need them for sftp
4986 - (djm) Use libexecdir from configure , rather than libexecdir/ssh
4987 - (djm) Update Redhat SPEC file accordingly
4988 - (djm) Add Kevin Steves <stevesk@sweden.hp.com> HP/UX contrib files
4989 - (djm) Add Charles Levert <charles@comm.polymtl.ca> getpgrp patch
61e96248 4990 - (djm) Fix password auth on HP/UX 10.20. Patch from Dirk De Wachter
7f8f5e00 4991 <Dirk.DeWachter@rug.ac.be>
61e96248 4992 - (djm) Fixprogs and entropy list fixes from Larry Jones
7f8f5e00 4993 <larry.jones@sdrc.com>
4994 - (djm) Fix for SuSE spec file from Takashi YOSHIDA
4995 <tyoshida@gemini.rc.kyushu-u.ac.jp>
bcbf86ec 4996 - (djm) Merge OpenBSD changes:
4997 - markus@cvs.openbsd.org 2000/09/05 02:59:57
4998 [session.c]
4999 print hostname (not hushlogin)
5000 - markus@cvs.openbsd.org 2000/09/05 13:18:48
5001 [authfile.c ssh-add.c]
5002 enable ssh-add -d for DSA keys
5003 - markus@cvs.openbsd.org 2000/09/05 13:20:49
5004 [sftp-server.c]
5005 cleanup
5006 - markus@cvs.openbsd.org 2000/09/06 03:46:41
5007 [authfile.h]
5008 prototype
5009 - deraadt@cvs.openbsd.org 2000/09/07 14:27:56
5010 [ALL]
61e96248 5011 cleanup copyright notices on all files. I have attempted to be
5012 accurate with the details. everything is now under Tatu's licence
5013 (which I copied from his readme), and/or the core-sdi bsd-ish thing
5014 for deattack, or various openbsd developers under a 2-term bsd
bcbf86ec 5015 licence. We're not changing any rules, just being accurate.
5016 - markus@cvs.openbsd.org 2000/09/07 14:40:30
5017 [channels.c channels.h clientloop.c serverloop.c ssh.c]
5018 cleanup window and packet sizes for ssh2 flow control; ok niels
5019 - markus@cvs.openbsd.org 2000/09/07 14:53:00
5020 [scp.c]
5021 typo
5022 - markus@cvs.openbsd.org 2000/09/07 15:13:37
5023 [auth-options.c auth-options.h auth-rh-rsa.c auth-rsa.c auth.c]
5024 [authfile.h canohost.c channels.h compat.c hostfile.h log.c match.h]
5025 [pty.c readconf.c]
5026 some more Copyright fixes
5027 - markus@cvs.openbsd.org 2000/09/08 03:02:51
5028 [README.openssh2]
5029 bye bye
5030 - deraadt@cvs.openbsd.org 2000/09/11 18:38:33
5031 [LICENCE cipher.c]
5032 a few more comments about it being ARC4 not RC4
5033 - markus@cvs.openbsd.org 2000/09/12 14:53:11
5034 [log-client.c log-server.c log.c ssh.1 ssh.c ssh.h sshd.8 sshd.c]
5035 multiple debug levels
5036 - markus@cvs.openbsd.org 2000/09/14 14:25:15
5037 [clientloop.c]
5038 typo
5039 - deraadt@cvs.openbsd.org 2000/09/15 01:13:51
5040 [ssh-agent.c]
5041 check return value for setenv(3) for failure, and deal appropriately
5042
deb8d717 504320000913
5044 - (djm) Fix server not exiting with jobs in background.
5045
b5e300c2 504620000905
5047 - (djm) Import OpenBSD CVS changes
5048 - markus@cvs.openbsd.org 2000/08/31 15:52:24
5049 [Makefile sshd.8 sshd_config sftp-server.8 sftp-server.c]
5050 implement a SFTP server. interops with sftp2, scp2 and the windows
5051 client from ssh.com
5052 - markus@cvs.openbsd.org 2000/08/31 15:56:03
5053 [README.openssh2]
5054 sync
5055 - markus@cvs.openbsd.org 2000/08/31 16:05:42
5056 [session.c]
5057 Wall
5058 - markus@cvs.openbsd.org 2000/08/31 16:09:34
5059 [authfd.c ssh-agent.c]
5060 add a flag to SSH2_AGENTC_SIGN_REQUEST for future extensions
5061 - deraadt@cvs.openbsd.org 2000/09/01 09:25:13
5062 [scp.1 scp.c]
5063 cleanup and fix -S support; stevesk@sweden.hp.com
5064 - markus@cvs.openbsd.org 2000/09/01 16:29:32
5065 [sftp-server.c]
5066 portability fixes
5067 - markus@cvs.openbsd.org 2000/09/01 16:32:41
5068 [sftp-server.c]
5069 fix cast; mouring@pconline.com
5070 - itojun@cvs.openbsd.org 2000/09/03 09:23:28
5071 [ssh-add.1 ssh.1]
5072 add missing .El against .Bl.
5073 - markus@cvs.openbsd.org 2000/09/04 13:03:41
5074 [session.c]
5075 missing close; ok theo
5076 - markus@cvs.openbsd.org 2000/09/04 13:07:21
5077 [session.c]
5078 fix get_last_login_time order; from andre@van-veen.de
5079 - markus@cvs.openbsd.org 2000/09/04 13:10:09
5080 [sftp-server.c]
5081 more cast fixes; from mouring@pconline.com
5082 - markus@cvs.openbsd.org 2000/09/04 13:06:04
5083 [session.c]
5084 set SSH_ORIGINAL_COMMAND; from Leakin@dfw.nostrum.com, bet@rahul.net
5085 - (djm) Cleanup after import. Fix sftp-server compilation, Makefile
3c62e7eb 5086 - (djm) Merge cygwin support from Corinna Vinschen <vinschen@cygnus.com>
5087
1e61f54a 508820000903
5089 - (djm) Fix Redhat init script
5090
c80876b4 509120000901
5092 - (djm) Pick up Jim's new X11-askpass
5093 - (djm) Release 2.2.0p1
5094
8b4a0d08 509520000831
bcbf86ec 5096 - (djm) Workaround SIGPIPE problems on SCO. Fix from Aran Cox
8b4a0d08 5097 <acox@cv.telegroup.com>
b817711d 5098 - (djm) Pick up new version (2.2.0) from OpenBSD CVS
8b4a0d08 5099
0b65b628 510020000830
5101 - (djm) Compile warning fixes from Mark Miller <markm@swoon.net>
10fa00c8 5102 - (djm) Periodically rekey arc4random
5103 - (djm) Clean up diff against OpenBSD.
bcbf86ec 5104 - (djm) HPUX 11 needs USE_PIPES as well: Kevin Steves
2b10f47a 5105 <stevesk@sweden.hp.com>
b33a2e6e 5106 - (djm) Quieten the pam delete credentials error message
44839801 5107 - (djm) Fix printing of $DISPLAY hack if set by system type. Report from
5108 Kevin Steves <stevesk@sweden.hp.com>
84a770d1 5109 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
7efa2776 5110 - (djm) Fix doh in bsd-arc4random.c
0b65b628 5111
9aaf9be4 511220000829
bcbf86ec 5113 - (djm) Fix ^C ignored issue on Solaris. Diagnosis from Gert
5114 Doering <gert@greenie.muc.de>, John Horne <J.Horne@plymouth.ac.uk> and
9aaf9be4 5115 Garrick James <garrick@james.net>
b5f90139 5116 - (djm) Check for SCO pty naming style (ptyp%d/ttyp%d). Based on fix from
5117 Bastian Trompetter <btrompetter@firemail.de>
698d107e 5118 - (djm) NeXT tweaks from Ben Lindstrom <mouring@pconline.com>
14a9a859 5119 - More OpenBSD updates:
5120 - deraadt@cvs.openbsd.org 2000/08/24 15:46:59
5121 [scp.c]
5122 off_t in sink, to fix files > 2GB, i think, test is still running ;-)
5123 - deraadt@cvs.openbsd.org 2000/08/25 10:10:06
5124 [session.c]
5125 Wall
5126 - markus@cvs.openbsd.org 2000/08/26 04:33:43
5127 [compat.c]
5128 ssh.com-2.3.0
5129 - markus@cvs.openbsd.org 2000/08/27 12:18:05
5130 [compat.c]
5131 compatibility with future ssh.com versions
5132 - deraadt@cvs.openbsd.org 2000/08/27 21:50:55
5133 [auth-krb4.c session.c ssh-add.c sshconnect.c uidswap.c]
5134 print uid/gid as unsigned
5135 - markus@cvs.openbsd.org 2000/08/28 13:51:00
5136 [ssh.c]
5137 enable -n and -f for ssh2
5138 - markus@cvs.openbsd.org 2000/08/28 14:19:53
5139 [ssh.c]
5140 allow combination of -N and -f
5141 - markus@cvs.openbsd.org 2000/08/28 14:20:56
5142 [util.c]
5143 util.c
5144 - markus@cvs.openbsd.org 2000/08/28 14:22:02
5145 [util.c]
5146 undo
5147 - markus@cvs.openbsd.org 2000/08/28 14:23:38
5148 [util.c]
5149 don't complain if setting NONBLOCK fails with ENODEV
9aaf9be4 5150
137d7b6c 515120000823
5152 - (djm) Define USE_PIPES to avoid socketpair problems on HPUX 10 and SunOS 4
bcbf86ec 5153 Avoids "scp never exits" problem. Reports from Lutz Jaenicke
5154 <Lutz.Jaenicke@aet.TU-Cottbus.DE> and Tamito KAJIYAMA
137d7b6c 5155 <kajiyama@grad.sccs.chukyo-u.ac.jp>
2e73a022 5156 - (djm) Pick up LOGIN_PROGRAM from environment or PATH if not set by headers
da40ab4d 5157 - (djm) Add local version to version.h
ea788c22 5158 - (djm) Don't reseed arc4random everytime it is used
2e73a022 5159 - (djm) OpenBSD CVS updates:
5160 - deraadt@cvs.openbsd.org 2000/08/18 20:07:23
5161 [ssh.c]
5162 accept remsh as a valid name as well; roman@buildpoint.com
5163 - deraadt@cvs.openbsd.org 2000/08/18 20:17:13
5164 [deattack.c crc32.c packet.c]
5165 rename crc32() to ssh_crc32() to avoid zlib name clash. do not move to
5166 libz crc32 function yet, because it has ugly "long"'s in it;
5167 oneill@cs.sfu.ca
5168 - deraadt@cvs.openbsd.org 2000/08/18 20:26:08
5169 [scp.1 scp.c]
5170 -S prog support; tv@debian.org
5171 - deraadt@cvs.openbsd.org 2000/08/18 20:50:07
5172 [scp.c]
5173 knf
5174 - deraadt@cvs.openbsd.org 2000/08/18 20:57:33
5175 [log-client.c]
5176 shorten
5177 - markus@cvs.openbsd.org 2000/08/19 12:48:11
5178 [channels.c channels.h clientloop.c ssh.c ssh.h]
5179 support for ~. in ssh2
5180 - deraadt@cvs.openbsd.org 2000/08/19 15:29:40
5181 [crc32.h]
5182 proper prototype
5183 - markus@cvs.openbsd.org 2000/08/19 15:34:44
bcbf86ec 5184 [authfd.c authfd.h key.c key.h ssh-add.1 ssh-add.c ssh-agent.1]
5185 [ssh-agent.c ssh-keygen.c sshconnect1.c sshconnect2.c Makefile]
2e73a022 5186 [fingerprint.c fingerprint.h]
5187 add SSH2/DSA support to the agent and some other DSA related cleanups.
5188 (note that we cannot talk to ssh.com's ssh2 agents)
5189 - markus@cvs.openbsd.org 2000/08/19 15:55:52
5190 [channels.c channels.h clientloop.c]
5191 more ~ support for ssh2
5192 - markus@cvs.openbsd.org 2000/08/19 16:21:19
5193 [clientloop.c]
5194 oops
5195 - millert@cvs.openbsd.org 2000/08/20 12:25:53
5196 [session.c]
5197 We have to stash the result of get_remote_name_or_ip() before we
5198 close our socket or getpeername() will get EBADF and the process
5199 will exit. Only a problem for "UseLogin yes".
5200 - millert@cvs.openbsd.org 2000/08/20 12:30:59
5201 [session.c]
5202 Only check /etc/nologin if "UseLogin no" since login(1) may have its
5203 own policy on determining who is allowed to login when /etc/nologin
5204 is present. Also use the _PATH_NOLOGIN define.
5205 - millert@cvs.openbsd.org 2000/08/20 12:42:43
5206 [auth1.c auth2.c session.c ssh.c]
5207 Add calls to setusercontext() and login_get*(). We basically call
5208 setusercontext() in most places where previously we did a setlogin().
5209 Add default login.conf file and put root in the "daemon" login class.
5210 - millert@cvs.openbsd.org 2000/08/21 10:23:31
5211 [session.c]
5212 Fix incorrect PATH setting; noted by Markus.
137d7b6c 5213
c345cf9d 521420000818
5215 - (djm) OpenBSD CVS changes:
5216 - markus@cvs.openbsd.org 2000/07/22 03:14:37
5217 [servconf.c servconf.h sshd.8 sshd.c sshd_config]
5218 random early drop; ok theo, niels
5219 - deraadt@cvs.openbsd.org 2000/07/26 11:46:51
5220 [ssh.1]
5221 typo
5222 - deraadt@cvs.openbsd.org 2000/08/01 11:46:11
5223 [sshd.8]
5224 many fixes from pepper@mail.reppep.com
5225 - provos@cvs.openbsd.org 2000/08/01 13:01:42
5226 [Makefile.in util.c aux.c]
5227 rename aux.c to util.c to help with cygwin port
5228 - deraadt@cvs.openbsd.org 2000/08/02 00:23:31
5229 [authfd.c]
5230 correct sun_len; Alexander@Leidinger.net
5231 - provos@cvs.openbsd.org 2000/08/02 10:27:17
5232 [readconf.c sshd.8]
5233 disable kerberos authentication by default
5234 - provos@cvs.openbsd.org 2000/08/02 11:27:05
5235 [sshd.8 readconf.c auth-krb4.c]
5236 disallow kerberos authentication if we can't verify the TGT; from
5237 dugsong@
5238 kerberos authentication is on by default only if you have a srvtab.
5239 - markus@cvs.openbsd.org 2000/08/04 14:30:07
5240 [auth.c]
5241 unused
5242 - markus@cvs.openbsd.org 2000/08/04 14:30:35
5243 [sshd_config]
5244 MaxStartups
5245 - markus@cvs.openbsd.org 2000/08/15 13:20:46
5246 [authfd.c]
5247 cleanup; ok niels@
5248 - markus@cvs.openbsd.org 2000/08/17 14:05:10
5249 [session.c]
5250 cleanup login(1)-like jobs, no duplicate utmp entries
5251 - markus@cvs.openbsd.org 2000/08/17 14:06:34
5252 [session.c sshd.8 sshd.c]
5253 sshd -u len, similar to telnetd
1a022229 5254 - (djm) Lastlog was not getting closed after writing login entry
39987cc0 5255 - (djm) Add Solaris package support from Rip Loomis <loomisg@cist.saic.com>
c345cf9d 5256
416ed5a7 525720000816
5258 - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc)
bcbf86ec 5259 - (djm) Fix strerror replacement for old SunOS. Based on patch from
416ed5a7 5260 Charles Levert <charles@comm.polymtl.ca>
bcbf86ec 5261 - (djm) Seperate arc4random into seperate file and use OpenSSL's RC4
416ed5a7 5262 implementation.
ba606eb2 5263 - (djm) SUN_LEN macro for systems which lack it
416ed5a7 5264
dbaa2e87 526520000815
5266 - (djm) More SunOS 4.1.x fixes from Nate Itkin <nitkin@europa.com>
cd352c82 5267 - (djm) Avoid failures on Irix when ssh is not setuid. Fix from
5268 Michael Stone <mstone@cs.loyola.edu>
d93a7e5a 5269 - (djm) Don't seek in directory based lastlogs
bcbf86ec 5270 - (djm) Fix --with-ipaddr-display configure option test. Patch from
d93a7e5a 5271 Jarno Huuskonen <jhuuskon@messi.uku.fi>
2a2cb9e7 5272 - (djm) Fix AIX limits from Alexandre Oliva <oliva@lsd.ic.unicamp.br>
dbaa2e87 5273
6c33bf70 527420000813
5275 - (djm) Add $(srcdir) to includes when compiling (for VPATH). Report from
5276 Fabrice bacchella <fabrice.bacchella@marchfirst.fr>
5277
3fcce26c 527820000809
bcbf86ec 5279 - (djm) Define AIX hard limits if headers don't. Report from
3fcce26c 5280 Bill Painter <william.t.painter@lmco.com>
bcbf86ec 5281 - (djm) utmp direct write & SunOS 4 patch from Charles Levert
32eec038 5282 <charles@comm.polymtl.ca>
3fcce26c 5283
71d43804 528420000808
5285 - (djm) Cleanup Redhat RPMs. Generate keys at runtime rather than install
5286 time, spec file cleanup.
5287
f9bcea07 528820000807
378f2232 5289 - (djm) Set 0755 on binaries during install. Report from Lutz Jaenicke
47670e77 5290 - (djm) Suppress error messages on channel close shutdown() failurs
5291 works around Linux bug. Patch from Zack Weinberg <zack@wolery.cumb.org>
378f2232 5292 - (djm) Add some more entropy collection commands from Lutz Jaenicke
f9bcea07 5293
bcf89935 529420000725
5295 - (djm) Fix autoconf typo: HAVE_BINRESVPORT_AF -> HAVE_BINDRESVPORT_AF
5296
4c8722d9 529720000721
5298 - (djm) OpenBSD CVS updates:
5299 - markus@cvs.openbsd.org 2000/07/16 02:27:22
5300 [authfd.c authfd.h channels.c clientloop.c ssh-add.c ssh-agent.c ssh.c]
5301 [sshconnect1.c sshconnect2.c]
5302 make ssh-add accept dsa keys (the agent does not)
5303 - djm@cvs.openbsd.org 2000/07/17 19:25:02
5304 [sshd.c]
5305 Another closing of stdin; ok deraadt
5306 - markus@cvs.openbsd.org 2000/07/19 18:33:12
5307 [dsa.c]
5308 missing free, reorder
5309 - markus@cvs.openbsd.org 2000/07/20 16:23:14
5310 [ssh-keygen.1]
5311 document input and output files
5312
240777b8 531320000720
4c8722d9 5314 - (djm) Spec file fix from Petr Novotny <Petr.Novotny@antek.cz>
240777b8 5315
3c7def32 531620000716
4c8722d9 5317 - (djm) Release 2.1.1p4
3c7def32 5318
819b676f 531920000715
704b1659 5320 - (djm) OpenBSD CVS updates
5321 - provos@cvs.openbsd.org 2000/07/13 16:53:22
5322 [aux.c readconf.c servconf.c ssh.h]
5323 allow multiple whitespace but only one '=' between tokens, bug report from
5324 Ralf S. Engelschall <rse@engelschall.com> but different fix. okay deraadt@
5325 - provos@cvs.openbsd.org 2000/07/13 17:14:09
5326 [clientloop.c]
5327 typo; todd@fries.net
5328 - provos@cvs.openbsd.org 2000/07/13 17:19:31
5329 [scp.c]
5330 close can fail on AFS, report error; from Greg Hudson <ghudson@mit.edu>
5331 - markus@cvs.openbsd.org 2000/07/14 16:59:46
5332 [readconf.c servconf.c]
5333 allow leading whitespace. ok niels
5334 - djm@cvs.openbsd.org 2000/07/14 22:01:38
5335 [ssh-keygen.c ssh.c]
5336 Always create ~/.ssh with mode 700; ok Markus
819b676f 5337 - Fixes for SunOS 4.1.4 from Gordon Atwood <gordon@cs.ualberta.ca>
5338 - Include floatingpoint.h for entropy.c
5339 - strerror replacement
704b1659 5340
3f7a7e4a 534120000712
c37fb3c1 5342 - (djm) Remove -lresolve for Reliant Unix
3f7a7e4a 5343 - (djm) OpenBSD CVS Updates:
5344 - deraadt@cvs.openbsd.org 2000/07/11 02:11:34
5345 [session.c sshd.c ]
5346 make MaxStartups code still work with -d; djm
5347 - deraadt@cvs.openbsd.org 2000/07/11 13:17:45
5348 [readconf.c ssh_config]
5349 disable FallBackToRsh by default
c37fb3c1 5350 - (djm) Replace in_addr_t with u_int32_t in bsd-inet_aton.c. Report from
5351 Ben Lindstrom <mouring@pconline.com>
1e970014 5352 - (djm) Make building of X11-Askpass and GNOME-Askpass optional in RPM
5353 spec file.
dcb36e5d 5354 - (djm) Released 2.1.1p3
3f7a7e4a 5355
56118702 535620000711
5357 - (djm) Fixup for AIX getuserattr() support from Tom Bertelson
5358 <tbert@abac.com>
132dd316 5359 - (djm) ReliantUNIX support from Udo Schweigert <ust@cert.siemens.de>
bcbf86ec 5360 - (djm) NeXT: dirent structures to get scp working from Ben Lindstrom
c99e5056 5361 <mouring@pconline.com>
bcbf86ec 5362 - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report
dc2a6d09 5363 from Jim Watt <jimw@peisj.pebio.com>
2d9a148e 5364 - (djm) Replaced bsd-snprintf.c with one from Mutt source tree, it is known
5365 to compile on more platforms (incl NeXT).
cc6f2c4c 5366 - (djm) Added bsd-inet_aton and configure support for NeXT
aae19451 5367 - (djm) Misc NeXT fixes from Ben Lindstrom <mouring@pconline.com>
089fbbd2 5368 - (djm) OpenBSD CVS updates:
5369 - markus@cvs.openbsd.org 2000/06/26 03:22:29
5370 [authfd.c]
5371 cleanup, less cut&paste
5372 - markus@cvs.openbsd.org 2000/06/26 15:59:19
5373 [servconf.c servconf.h session.c sshd.8 sshd.c]
bcbf86ec 5374 MaxStartups: limit number of unauthenticated connections, work by
089fbbd2 5375 theo and me
5376 - deraadt@cvs.openbsd.org 2000/07/05 14:18:07
5377 [session.c]
5378 use no_x11_forwarding_flag correctly; provos ok
5379 - provos@cvs.openbsd.org 2000/07/05 15:35:57
5380 [sshd.c]
5381 typo
5382 - aaron@cvs.openbsd.org 2000/07/05 22:06:58
5383 [scp.1 ssh-agent.1 ssh-keygen.1 sshd.8]
bcbf86ec 5384 Insert more missing .El directives. Our troff really should identify
089fbbd2 5385 these and spit out a warning.
5386 - todd@cvs.openbsd.org 2000/07/06 21:55:04
5387 [auth-rsa.c auth2.c ssh-keygen.c]
5388 clean code is good code
5389 - deraadt@cvs.openbsd.org 2000/07/07 02:14:29
5390 [serverloop.c]
5391 sense of port forwarding flag test was backwards
5392 - provos@cvs.openbsd.org 2000/07/08 17:17:31
5393 [compat.c readconf.c]
5394 replace strtok with strsep; from David Young <dyoung@onthejob.net>
5395 - deraadt@cvs.openbsd.org 2000/07/08 19:21:15
5396 [auth.h]
5397 KNF
5398 - ho@cvs.openbsd.org 2000/07/08 19:27:33
5399 [compat.c readconf.c]
5400 Better conditions for strsep() ending.
5401 - ho@cvs.openbsd.org 2000/07/10 10:27:05
5402 [readconf.c]
5403 Get the correct message on errors. (niels@ ok)
5404 - ho@cvs.openbsd.org 2000/07/10 10:30:25
5405 [cipher.c kex.c servconf.c]
5406 strtok() --> strsep(). (niels@ ok)
5540ea9b 5407 - (djm) Fix problem with debug mode and MaxStartups
eb37534b 5408 - (djm) Don't generate host keys when $(DESTDIR) is set (e.g. during RPM
5409 builds)
229f64ee 5410 - (djm) Add strsep function from OpenBSD libc for systems that lack it
56118702 5411
a8545c6c 541220000709
5413 - (djm) Only enable PAM_TTY kludge for Linux. Problem report from
5414 Kevin Steves <stevesk@sweden.hp.com>
ec90a7d6 5415 - (djm) Match prototype and function declaration for rresvport_af.
5416 Problem report from Niklas Edmundsson <nikke@ing.umu.se>
bcbf86ec 5417 - (djm) Missing $(DESTDIR) on host-key target causing problems with RPM
732e8ac5 5418 builds. Problem report from Gregory Leblanc <GLeblanc@cu-portland.edu>
37f1df94 5419 - (djm) Replace ut_name with ut_user. Patch from Jim Watt
5420 <jimw@peisj.pebio.com>
264dce47 5421 - (djm) Fix pam sprintf fix
5422 - (djm) Cleanup entropy collection code a little more. Split initialisation
5423 from seeding, perform intialisation immediatly at start, be careful with
5424 uids. Based on problem report from Jim Watt <jimw@peisj.pebio.com>
5bf9cfe9 5425 - (djm) More NeXT compatibility from Ben Lindstrom <mouring@pconline.com>
5426 Including sigaction() et al. replacements
bcbf86ec 5427 - (djm) AIX getuserattr() session initialisation from Tom Bertelson
eeec075f 5428 <tbert@abac.com>
a8545c6c 5429
e2902a5b 543020000708
bcbf86ec 5431 - (djm) Fix bad fprintf format handling in auth-pam.c. Patch from
e2902a5b 5432 Aaron Hopkins <aaron@die.net>
7a33f831 5433 - (djm) Fix incorrect configure handling of --with-rsh-path option. Fix from
5434 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
bcbf86ec 5435 - (djm) Fixed undefined variables for OSF SIA. Report from
b3f162ba 5436 Baars, Henk <Hendrik.Baars@nl.origin-it.com>
bcbf86ec 5437 - (djm) Handle EWOULDBLOCK returns from read() and write() in atomicio.c
b28e4a3b 5438 Fix from Marquess, Steve Mr JMLFDC <Steve.Marquess@DET.AMEDD.ARMY.MIL>
bcbf86ec 5439 - (djm) Don't use inet_addr.
e2902a5b 5440
5637650d 544120000702
5442 - (djm) Fix brace mismatch from Corinna Vinschen <vinschen@cygnus.com>
27494968 5443 - (djm) Stop shadow expiry checking from preventing logins with NIS. Based
5444 on fix from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
a4070484 5445 - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from
5446 Chris, the Young One <cky@pobox.com>
bcbf86ec 5447 - (djm) Fix scp progress meter on really wide terminals. Based on patch
88726b31 5448 from James H. Cloos Jr. <cloos@jhcloos.com>
5637650d 5449
388e9f9f 545020000701
5451 - (djm) Fix Tru64 SIA problems reported by John P Speno <speno@isc.upenn.edu>
daaff4d5 5452 - (djm) Login fixes from Tom Bertelson <tbert@abac.com>
82258d68 5453 - (djm) Replace "/bin/sh" with _PATH_BSHELL. Report from Corinna Vinschen
5454 <vinschen@cygnus.com>
30228d7c 5455 - (djm) Replace "/usr/bin/login" with LOGIN_PROGRAM
2647ae26 5456 - (djm) Added check for broken snprintf() functions which do not correctly
5457 terminate output string and attempt to use replacement.
46158300 5458 - (djm) Released 2.1.1p2
388e9f9f 5459
9f32ceb4 546020000628
5461 - (djm) Fixes to lastlog code for Irix
5462 - (djm) Use atomicio in loginrec
3206bb3b 5463 - (djm) Patch from Michael Stone <mstone@cs.loyola.edu> to add support for
5464 Irix 6.x array sessions, project id's, and system audit trail id.
9e0c3e1f 5465 - (djm) Added 'distprep' make target to simplify packaging
bcbf86ec 5466 - (djm) Added patch from Chris Adams <cmadams@hiwaay.net> to add OSF SIA
4d33e531 5467 support. Enable using "USE_SIA=1 ./configure [options]"
61e96248 5468
d8caae24 546920000627
5470 - (djm) Fixes to login code - not setting li->uid, cleanups
a05a70ab 5471 - (djm) Formatting
d8caae24 5472
fe30cc2e 547320000626
3e98362e 5474 - (djm) Better fix to aclocal tests from Garrick James <garrick@james.net>
4cb5ffa0 5475 - (djm) Account expiry support from Andreas Steinmetz <ast@domdv.de>
5476 - (djm) Added password expiry checking (no password change support)
be0b9bb7 5477 - (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK
5478 based on patch from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
b5b3f75d 5479 - (djm) Fix fixed EGD code.
3e98362e 5480 - OpenBSD CVS update
5481 - provos@cvs.openbsd.org 2000/06/25 14:17:58
5482 [channels.c]
5483 correct check for bad channel ids; from Wei Dai <weidai@eskimo.com>
5484
1c04b088 548520000623
bcbf86ec 5486 - (djm) Use sa_family_t in prototype for rresvport_af. Patch from
1c04b088 5487 Svante Signell <svante.signell@telia.com>
5488 - (djm) Autoconf logic to define sa_family_t if it is missing
e5a0294f 5489 - OpenBSD CVS Updates:
5490 - markus@cvs.openbsd.org 2000/06/22 10:32:27
5491 [sshd.c]
5492 missing atomicio; report from Steve.Marquess@DET.AMEDD.ARMY.MIL
5493 - djm@cvs.openbsd.org 2000/06/22 17:55:00
5494 [auth-krb4.c key.c radix.c uuencode.c]
5495 Missing CVS idents; ok markus
1c04b088 5496
f528fdf2 549720000622
5498 - (djm) Automatically generate host key during "make install". Suggested
5499 by Gary E. Miller <gem@rellim.com>
5500 - (djm) Paranoia before kill() system call
74fc9186 5501 - OpenBSD CVS Updates:
5502 - markus@cvs.openbsd.org 2000/06/18 18:50:11
5503 [auth2.c compat.c compat.h sshconnect2.c]
5504 make userauth+pubkey interop with ssh.com-2.2.0
5505 - markus@cvs.openbsd.org 2000/06/18 20:56:17
5506 [dsa.c]
5507 mem leak + be more paranoid in dsa_verify.
5508 - markus@cvs.openbsd.org 2000/06/18 21:29:50
5509 [key.c]
5510 cleanup fingerprinting, less hardcoded sizes
5511 - markus@cvs.openbsd.org 2000/06/19 19:39:45
5512 [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
5513 [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h]
bcbf86ec 5514 [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h]
74fc9186 5515 [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h]
5516 [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c]
bcbf86ec 5517 [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c]
5518 [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c]
74fc9186 5519 [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c]
5520 [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h]
5521 OpenBSD tag
5522 - markus@cvs.openbsd.org 2000/06/21 10:46:10
5523 sshconnect2.c missing free; nuke old comment
f528fdf2 5524
e5fe9a1f 552520000620
5526 - (djm) Replace use of '-o' and '-a' logical operators in configure tests
986a22ec 5527 with '||' and '&&'. As suggested by Jim Knoble <jmknoble@jmknoble.cx>
e5fe9a1f 5528 to fix SCO Unixware problem reported by Gary E. Miller <gem@rellim.com>
c03aced4 5529 - (djm) Typo in loginrec.c
e5fe9a1f 5530
cbd7492e 553120000618
5532 - (djm) Add summary of configure options to end of ./configure run
bcbf86ec 5533 - (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from
cbd7492e 5534 Michael Stone <mstone@cs.loyola.edu>
bcbf86ec 5535 - (djm) rusage is a privileged operation on some Unices (incl.
cbd7492e 5536 Solaris 2.5.1). Report from Paul D. Smith <pausmith@nortelnetworks.com>
bcbf86ec 5537 - (djm) Avoid PAM failures when running without a TTY. Report from
cbd7492e 5538 Martin Petrak <petrak@spsknm.schools.sk>
5539 - (djm) Include sys/types.h when including netinet/in.h in configure tests.
5540 Patch from Jun-ichiro itojun Hagino <itojun@iijlab.net>
729bfe59 5541 - (djm) Started merge of Ben Lindstrom's <mouring@pconline.com> NeXT support
38c295d6 5542 - OpenBSD CVS updates:
5543 - deraadt@cvs.openbsd.org 2000/06/17 09:58:46
5544 [channels.c]
5545 everyone says "nix it" (remove protocol 2 debugging message)
5546 - markus@cvs.openbsd.org 2000/06/17 13:24:34
5547 [sshconnect.c]
5548 allow extended server banners
5549 - markus@cvs.openbsd.org 2000/06/17 14:30:10
5550 [sshconnect.c]
5551 missing atomicio, typo
5552 - jakob@cvs.openbsd.org 2000/06/17 16:52:34
5553 [servconf.c servconf.h session.c sshd.8 sshd_config]
5554 add support for ssh v2 subsystems. ok markus@.
5555 - deraadt@cvs.openbsd.org 2000/06/17 18:57:48
5556 [readconf.c servconf.c]
5557 include = in WHITESPACE; markus ok
5558 - markus@cvs.openbsd.org 2000/06/17 19:09:10
5559 [auth2.c]
5560 implement bug compatibility with ssh-2.0.13 pubkey, server side
5561 - markus@cvs.openbsd.org 2000/06/17 21:00:28
5562 [compat.c]
5563 initial support for ssh.com's 2.2.0
5564 - markus@cvs.openbsd.org 2000/06/17 21:16:09
5565 [scp.c]
5566 typo
5567 - markus@cvs.openbsd.org 2000/06/17 22:05:02
5568 [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
5569 split auth-rsa option parsing into auth-options
5570 add options support to authorized_keys2
5571 - markus@cvs.openbsd.org 2000/06/17 22:42:54
5572 [session.c]
5573 typo
cbd7492e 5574
509b1f88 557520000613
5576 - (djm) Fixes from Andrew McGill <andrewm@datrix.co.za>:
5577 - Platform define for SCO 3.x which breaks on /dev/ptmx
5578 - Detect and try to fix missing MAXPATHLEN
a4d05724 5579 - (djm) Fix short copy in loginrec.c (based on patch from Phill Camp
5580 <P.S.S.Camp@ukc.ac.uk>
509b1f88 5581
09564242 558220000612
5583 - (djm) Glob manpages in RPM spec files to catch compressed files
5584 - (djm) Full license in auth-pam.c
08ae384f 5585 - (djm) Configure fixes from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
383207f7 5586 - (andre) AIX, lastlog, configure fixes from Tom Bertelson <tbert@abac.com>:
5587 - Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is
5588 def'd
5589 - Set AIX to use preformatted manpages
61e96248 5590
74b224a0 559120000610
5592 - (djm) Minor doc tweaks
217ab55e 5593 - (djm) Fix for configure on bash2 from Jim Knoble <jmknoble@jmknoble.cx>
74b224a0 5594
32c80420 559520000609
5596 - (djm) Patch from Kenji Miyake <kenji@miyake.org> to disable utmp usage
5597 (in favour of utmpx) on Solaris 8
5598
fa649821 559920000606
48c99b2c 5600 - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through
5601 list of commands (by default). Removed verbose debugging (by default).
bcbf86ec 5602 - (djm) Increased command entropy estimates and default entropy collection
48c99b2c 5603 timeout
f988dce5 5604 - (djm) Remove duplicate headers from loginrec.c
c5fa2eb0 5605 - (djm) Don't add /usr/local/lib to library search path on Irix
bcbf86ec 5606 - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III
fa649821 5607 <tibbs@math.uh.edu>
1e83f2a2 5608 - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg
5609 <zack@wolery.cumb.org>
fa649821 5610 - (djm) OpenBSD CVS updates:
5611 - todd@cvs.openbsd.org
5612 [sshconnect2.c]
5613 teach protocol v2 to count login failures properly and also enable an
5614 explanation of why the password prompt comes up again like v1; this is NOT
5615 crypto
61e96248 5616 - markus@cvs.openbsd.org
fa649821 5617 [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8]
5618 xauth_location support; pr 1234
5619 [readconf.c sshconnect2.c]
5620 typo, unused
5621 [session.c]
5622 allow use_login only for login sessions, otherwise remote commands are
5623 execed with uid==0
5624 [sshd.8]
5625 document UseLogin better
5626 [version.h]
5627 OpenSSH 2.1.1
5628 [auth-rsa.c]
bcbf86ec 5629 fix match_hostname() logic for auth-rsa: deny access if we have a
fa649821 5630 negative match or no match at all
5631 [channels.c hostfile.c match.c]
bcbf86ec 5632 don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via
fa649821 5633 kris@FreeBSD.org
5634
8e7b16f8 563520000606
bcbf86ec 5636 - (djm) Added --with-cflags, --with-ldflags and --with-libs options to
8e7b16f8 5637 configure.
5638
d7c0f3d5 563920000604
5640 - Configure tweaking for new login code on Irix 5.3
2d6c411f 5641 - (andre) login code changes based on djm feedback
d7c0f3d5 5642
2d6c411f 564320000603
5644 - (andre) New login code
5645 - Remove bsd-login.[ch] and all the OpenBSD-derived code in login.c
5646 - Add loginrec.[ch], logintest.c and autoconf code
61e96248 5647
5daf7064 564820000531
5649 - Cleanup of auth.c, login.c and fake-*
5650 - Cleanup of auth-pam.c, save and print "account expired" error messages
e5662474 5651 - Fix EGD read bug by IWAMURO Motonori <iwa@mmp.fujitsu.co.jp>
69134b9b 5652 - Rewrote bsd-login to use proper utmp API if available. Major cleanup
5653 of fallback DIY code.
5daf7064 5654
b9f446d1 565520000530
5656 - Define atexit for old Solaris
b02ebca1 5657 - Fix buffer overrun in login.c for systems which use syslen in utmpx.
5658 patch from YOSHIFUJI Hideaki <yoshfuji@cerberus.nemoto.ecei.tohoku.ac.jp>
71276795 5659 - OpenBSD CVS updates:
5660 - markus@cvs.openbsd.org
5661 [session.c]
5662 make x11-fwd work w/ localhost (xauth add host/unix:11)
5663 [cipher.c compat.c readconf.c servconf.c]
5664 check strtok() != NULL; ok niels@
5665 [key.c]
5666 fix key_read() for uuencoded keys w/o '='
5667 [serverloop.c]
5668 group ssh1 vs. ssh2 in serverloop
5669 [kex.c kex.h myproposal.h sshconnect2.c sshd.c]
5670 split kexinit/kexdh, factor out common code
5671 [readconf.c ssh.1 ssh.c]
5672 forwardagent defaults to no, add ssh -A
5673 - theo@cvs.openbsd.org
5674 [session.c]
5675 just some line shortening
60688ef9 5676 - Released 2.1.0p3
b9f446d1 5677
29611d9c 567820000520
5679 - Xauth fix from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
25422c70 5680 - Don't touch utmp if USE_UTMPX defined
a423beaf 5681 - SunOS 4.x support from Todd C. Miller <Todd.Miller@courtesan.com>
fc1e8bf4 5682 - SIGCHLD fix for AIX and HPUX from Tom Bertelson <tbert@abac.com>
bcbf86ec 5683 - HPUX and Configure fixes from Lutz Jaenicke
fc1e8bf4 5684 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
bcbf86ec 5685 - Use mkinstalldirs script to make directories instead of non-portable
fc1e8bf4 5686 "install -d". Suggested by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
a905808d 5687 - Doc cleanup
29611d9c 5688
301e9b01 568920000518
5690 - Include Andre Lucas' fixprogs script. Forgot to "cvs add" it yesterday
5691 - OpenBSD CVS updates:
5692 - markus@cvs.openbsd.org
5693 [sshconnect.c]
5694 copy only ai_addrlen bytes; misiek@pld.org.pl
5695 [auth.c]
bcbf86ec 5696 accept an empty shell in authentication; bug reported by
301e9b01 5697 chris@tinker.ucr.edu
5698 [serverloop.c]
5699 we don't have stderr for interactive terminal sessions (fcntl errors)
5700
ad85db64 570120000517
5702 - Fix from Andre Lucas <andre.lucas@dial.pipex.com>
5703 - Fixes command line printing segfaults (spotter: Bladt Norbert)
5704 - Fixes erroneous printing of debug messages to syslog
5705 - Fixes utmp for MacOS X (spotter: Aristedes Maniatis)
5706 - Gives useful error message if PRNG initialisation fails
5707 - Reduced ssh startup delay
5708 - Measures cumulative command time rather than the time between reads
704b1659 5709 after select()
ad85db64 5710 - 'fixprogs' perl script to eliminate non-working entropy commands, and
704b1659 5711 optionally run 'ent' to measure command entropy
c1ef8333 5712 - Applied Tom Bertelson's <tbert@abac.com> AIX authentication fix
a64009ad 5713 - Avoid WCOREDUMP complation errors for systems that lack it
bcbf86ec 5714 - Avoid SIGCHLD warnings from entropy commands
28c1d5ce 5715 - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <sxw@dcs.ed.ac.uk>
0e73cc53 5716 - OpenBSD CVS update:
bcbf86ec 5717 - markus@cvs.openbsd.org
0e73cc53 5718 [ssh.c]
5719 fix usage()
5720 [ssh2.h]
5721 draft-ietf-secsh-architecture-05.txt
5722 [ssh.1]
5723 document ssh -T -N (ssh2 only)
5724 [channels.c serverloop.c ssh.h sshconnect.c sshd.c aux.c]
5725 enable nonblocking IO for sshd w/ proto 1, too; split out common code
5726 [aux.c]
5727 missing include
c04f75f1 5728 - Several patches from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
5729 - INSTALL typo and URL fix
5730 - Makefile fix
5731 - Solaris fixes
bcbf86ec 5732 - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka
c04f75f1 5733 <ksakai@kso.netwk.ntt-at.co.jp>
afa5ee68 5734 - RSAless operation patch from kevin_oconnor@standardandpoors.com
d45e3d76 5735 - Detect OpenSSL seperatly from RSA
bcbf86ec 5736 - Better test for RSA (more compatible with RSAref). Based on work by
d45e3d76 5737 Ed Eden <ede370@stl.rural.usda.gov>
ad85db64 5738
3d1a1654 573920000513
bcbf86ec 5740 - Fix for non-recognised DSA keys from Arkadiusz Miskiewicz
3d1a1654 5741 <misiek@pld.org.pl>
5742
d02a3a00 574320000511
bcbf86ec 5744 - Fix for prng_seed permissions checking from Lutz Jaenicke
d02a3a00 5745 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3d1a1654 5746 - "make host-key" fix for Irix
d02a3a00 5747
d0c832f3 574820000509
5749 - OpenBSD CVS update
5750 - markus@cvs.openbsd.org
5751 [cipher.h myproposal.h readconf.c readconf.h servconf.c ssh.1 ssh.c]
5752 [ssh.h sshconnect1.c sshconnect2.c sshd.8]
5753 - complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)
5754 - hugh@cvs.openbsd.org
5755 [ssh.1]
5756 - zap typo
5757 [ssh-keygen.1]
5758 - One last nit fix. (markus approved)
5759 [sshd.8]
5760 - some markus certified spelling adjustments
5761 - markus@cvs.openbsd.org
5762 [auth2.c channels.c clientloop.c compat compat.h dsa.c kex.c]
5763 [sshconnect2.c ]
5764 - bug compat w/ ssh-2.0.13 x11, split out bugs
5765 [nchan.c]
5766 - no drain if ibuf_empty, fixes x11fwd problems; tests by fries@
5767 [ssh-keygen.c]
5768 - handle escapes in real and original key format, ok millert@
5769 [version.h]
5770 - OpenSSH-2.1
3dc1102e 5771 - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.a
e93ee87a 5772 - Doc updates
bcbf86ec 5773 - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported
21e5304a 5774 by Andre Lucas <andre.lucas@dial.pipex.com>
d0c832f3 5775
ebdeb9a8 577620000508
5777 - Makefile and RPM spec fixes
5778 - Generate DSA host keys during "make key" or RPM installs
f6cde515 5779 - OpenBSD CVS update
5780 - markus@cvs.openbsd.org
5781 [clientloop.c sshconnect2.c]
5782 - make x11-fwd interop w/ ssh-2.0.13
5783 [README.openssh2]
5784 - interop w/ SecureFX
5785 - Release 2.0.0beta2
ebdeb9a8 5786
bcbf86ec 5787 - Configure caching and cleanup patch from Andre Lucas'
58d100bf 5788 <andre.lucas@dial.pipex.com>
5789
1d1ffb87 579020000507
5791 - Remove references to SSLeay.
5792 - Big OpenBSD CVS update
5793 - markus@cvs.openbsd.org
5794 [clientloop.c]
5795 - typo
5796 [session.c]
5797 - update proctitle on pty alloc/dealloc, e.g. w/ windows client
5798 [session.c]
5799 - update proctitle for proto 1, too
5800 [channels.h nchan.c serverloop.c session.c sshd.c]
5801 - use c-style comments
5802 - deraadt@cvs.openbsd.org
5803 [scp.c]
5804 - more atomicio
bcbf86ec 5805 - markus@cvs.openbsd.org
1d1ffb87 5806 [channels.c]
5807 - set O_NONBLOCK
5808 [ssh.1]
5809 - update AUTHOR
5810 [readconf.c ssh-keygen.c ssh.h]
5811 - default DSA key file ~/.ssh/id_dsa
5812 [clientloop.c]
5813 - typo, rm verbose debug
5814 - deraadt@cvs.openbsd.org
5815 [ssh-keygen.1]
5816 - document DSA use of ssh-keygen
5817 [sshd.8]
5818 - a start at describing what i understand of the DSA side
5819 [ssh-keygen.1]
5820 - document -X and -x
5821 [ssh-keygen.c]
5822 - simplify usage
bcbf86ec 5823 - markus@cvs.openbsd.org
1d1ffb87 5824 [sshd.8]
5825 - there is no rhosts_dsa
5826 [ssh-keygen.1]
5827 - document -y, update -X,-x
5828 [nchan.c]
5829 - fix close for non-open ssh1 channels
5830 [servconf.c servconf.h ssh.h sshd.8 sshd.c ]
5831 - s/DsaKey/HostDSAKey/, document option
5832 [sshconnect2.c]
5833 - respect number_of_password_prompts
5834 [channels.c channels.h servconf.c servconf.h session.c sshd.8]
5835 - GatewayPorts for sshd, ok deraadt@
5836 [ssh-add.1 ssh-agent.1 ssh.1]
5837 - more doc on: DSA, id_dsa, known_hosts2, authorized_keys2
5838 [ssh.1]
5839 - more info on proto 2
5840 [sshd.8]
5841 - sync AUTHOR w/ ssh.1
5842 [key.c key.h sshconnect.c]
5843 - print key type when talking about host keys
5844 [packet.c]
5845 - clear padding in ssh2
5846 [dsa.c key.c radix.c ssh.h sshconnect1.c uuencode.c uuencode.h]
5847 - replace broken uuencode w/ libc b64_ntop
5848 [auth2.c]
5849 - log failure before sending the reply
5850 [key.c radix.c uuencode.c]
5851 - remote trailing comments before calling __b64_pton
5852 [auth2.c readconf.c readconf.h servconf.c servconf.h ssh.1]
5853 [sshconnect2.c sshd.8]
5854 - add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8
5855 - Bring in b64_ntop and b64_pton from OpenBSD libc (bsd-base64.[ch])
5856
1a11e1ae 585720000502
0fbe8c74 5858 - OpenBSD CVS update
5859 [channels.c]
5860 - init all fds, close all fds.
5861 [sshconnect2.c]
5862 - check whether file exists before asking for passphrase
5863 [servconf.c servconf.h sshd.8 sshd.c]
5864 - PidFile, pr 1210
5865 [channels.c]
5866 - EINTR
5867 [channels.c]
5868 - unbreak, ok niels@
5869 [sshd.c]
5870 - unlink pid file, ok niels@
5871 [auth2.c]
5872 - Add missing #ifdefs; ok - markus
bcbf86ec 5873 - Add Andre Lucas' <andre.lucas@dial.pipex.com> patch to read entropy
d3083fbd 5874 gathering commands from a text file
1a11e1ae 5875 - Release 2.0.0beta1
5876
c4bc58eb 587720000501
5878 - OpenBSD CVS update
5879 [packet.c]
5880 - send debug messages in SSH2 format
3189621b 5881 [scp.c]
5882 - fix very rare EAGAIN/EINTR issues; based on work by djm
5883 [packet.c]
5884 - less debug, rm unused
5885 [auth2.c]
5886 - disable kerb,s/key in ssh2
5887 [sshd.8]
5888 - Minor tweaks and typo fixes.
5889 [ssh-keygen.c]
5890 - Put -d into usage and reorder. markus ok.
bcbf86ec 5891 - Include missing headers for OpenSSL tests. Fix from Phil Karn
44fb55e9 5892 <karn@ka9q.ampr.org>
bcbf86ec 5893 - Fixed __progname symbol collisions reported by Andre Lucas
3fd95d9a 5894 <andre.lucas@dial.pipex.com>
0d5f7abc 5895 - Merged bsd-login ttyslot and AIX utmp patch from Gert Doering
5896 <gd@hilb1.medat.de>
8cb940db 5897 - Add some missing ifdefs to auth2.c
8af50c98 5898 - Deprecate perl-tk askpass.
52bcc044 5899 - Irix portability fixes - don't include netinet headers more than once
5900 - Make sure we don't save PRNG seed more than once
c4bc58eb 5901
2b763e31 590220000430
5903 - Merge HP-UX fixes and TCB support from Ged Lodder <lodder@yacc.com.au>
b7a87eea 5904 - Integrate Andre Lucas' <andre.lucas@dial.pipex.com> entropy collection
5905 patch.
5906 - Adds timeout to entropy collection
5907 - Disables slow entropy sources
5908 - Load and save seed file
bcbf86ec 5909 - Changed entropy seed code to user per-user seeds only (server seed is
b7a87eea 5910 saved in root's .ssh directory)
5911 - Use atexit() and fatal cleanups to save seed on exit
0b242b12 5912 - More OpenBSD updates:
5913 [session.c]
5914 - don't call chan_write_failed() if we are not writing
5915 [auth-rsa.c auth1.c authfd.c hostfile.c ssh-agent.c]
5916 - keysize warnings error() -> log()
2b763e31 5917
a306f2dd 591820000429
5919 - Merge big update to OpenSSH-2.0 from OpenBSD CVS
5920 [README.openssh2]
5921 - interop w/ F-secure windows client
5922 - sync documentation
5923 - ssh_host_dsa_key not ssh_dsa_key
5924 [auth-rsa.c]
5925 - missing fclose
5926 [auth.c authfile.c compat.c dsa.c dsa.h hostfile.c key.c key.h radix.c]
5927 [readconf.c readconf.h ssh-add.c ssh-keygen.c ssh.c ssh.h sshconnect.c]
5928 [sshd.c uuencode.c uuencode.h authfile.h]
5929 - add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX]
5930 for trading keys with the real and the original SSH, directly from the
5931 people who invented the SSH protocol.
5932 [auth.c auth.h authfile.c sshconnect.c auth1.c auth2.c sshconnect.h]
5933 [sshconnect1.c sshconnect2.c]
5934 - split auth/sshconnect in one file per protocol version
5935 [sshconnect2.c]
5936 - remove debug
5937 [uuencode.c]
5938 - add trailing =
5939 [version.h]
5940 - OpenSSH-2.0
5941 [ssh-keygen.1 ssh-keygen.c]
5942 - add -R flag: exit code indicates if RSA is alive
5943 [sshd.c]
5944 - remove unused
5945 silent if -Q is specified
5946 [ssh.h]
5947 - host key becomes /etc/ssh_host_dsa_key
5948 [readconf.c servconf.c ]
5949 - ssh/sshd default to proto 1 and 2
5950 [uuencode.c]
5951 - remove debug
5952 [auth2.c ssh-keygen.c sshconnect2.c sshd.c]
5953 - xfree DSA blobs
5954 [auth2.c serverloop.c session.c]
5955 - cleanup logging for sshd/2, respect PasswordAuth no
5956 [sshconnect2.c]
5957 - less debug, respect .ssh/config
5958 [README.openssh2 channels.c channels.h]
bcbf86ec 5959 - clientloop.c session.c ssh.c
a306f2dd 5960 - support for x11-fwding, client+server
5961
0ac7199f 596220000421
5963 - Merge fix from OpenBSD CVS
5964 [ssh-agent.c]
5965 - Fix memory leak per connection. Report from Andy Spiegl <Andy@Spiegl.de>
5966 via Debian bug #59926
18ba2aab 5967 - Define __progname in session.c if libc doesn't
5968 - Remove indentation on autoconf #include statements to avoid bug in
bcbf86ec 5969 DEC Tru64 compiler. Report and fix from David Del Piero
18ba2aab 5970 <David.DelPiero@qed.qld.gov.au>
0ac7199f 5971
e1b37056 597220000420
bcbf86ec 5973 - Make fixpaths work with perl4, patch from Andre Lucas
e1b37056 5974 <andre.lucas@dial.pipex.com>
9da5c3c9 5975 - Sync with OpenBSD CVS:
5976 [clientloop.c login.c serverloop.c ssh-agent.c ssh.h sshconnect.c sshd.c]
5977 - pid_t
5978 [session.c]
5979 - remove bogus chan_read_failed. this could cause data
5980 corruption (missing data) at end of a SSH2 session.
4e577b89 5981 - Merge fixes from Debian patch from Phil Hands <phil@hands.com>
5982 - Allow setting of PAM service name through CFLAGS (SSHD_PAM_SERVICE)
5983 - Use vhangup to clean up Linux ttys
5984 - Force posix getopt processing on GNU libc systems
371ecff9 5985 - Debian bug #55910 - remove references to ssl(8) manpages
247f1a89 5986 - Debian bug #58031 - ssh_config lies about default cipher
e1b37056 5987
d6f24e45 598820000419
5989 - OpenBSD CVS updates
5990 [channels.c]
5991 - fix pr 1196, listen_port and port_to_connect interchanged
5992 [scp.c]
bcbf86ec 5993 - after completion, replace the progress bar ETA counter with a final
d6f24e45 5994 elapsed time; my idea, aaron wrote the patch
5995 [ssh_config sshd_config]
5996 - show 'Protocol' as an example, ok markus@
5997 [sshd.c]
5998 - missing xfree()
5999 - Add missing header to bsd-misc.c
6000
35484284 600120000416
6002 - Reduce diff against OpenBSD source
bcbf86ec 6003 - All OpenSSL includes are now unconditionally referenced as
35484284 6004 openssl/foo.h
6005 - Pick up formatting changes
6006 - Other minor changed (typecasts, etc) that I missed
6007
6ae2364d 600820000415
6009 - OpenBSD CVS updates.
6010 [ssh.1 ssh.c]
6011 - ssh -2
6012 [auth.c channels.c clientloop.c packet.c packet.h serverloop.c]
6013 [session.c sshconnect.c]
6014 - check payload for (illegal) extra data
6015 [ALL]
6016 whitespace cleanup
6017
c323ac76 601820000413
6019 - INSTALL doc updates
f54651ce 6020 - Merged OpenBSD updates to include paths.
bcbf86ec 6021
a8be9f80 602220000412
6023 - OpenBSD CVS updates:
6024 - [channels.c]
6025 repair x11-fwd
6026 - [sshconnect.c]
6027 fix passwd prompt for ssh2, less debugging output.
6028 - [clientloop.c compat.c dsa.c kex.c sshd.c]
6029 less debugging output
6030 - [kex.c kex.h sshconnect.c sshd.c]
6031 check for reasonable public DH values
6032 - [README.openssh2 cipher.c cipher.h compat.c compat.h readconf.c]
6033 [readconf.h servconf.c servconf.h ssh.c ssh.h sshconnect.c sshd.c]
6034 add Cipher and Protocol options to ssh/sshd, e.g.:
6035 ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers
6036 arcfour,3des-cbc'
6037 - [sshd.c]
6038 print 1.99 only if server supports both
6039
18e92801 604020000408
6041 - Avoid some compiler warnings in fake-get*.c
6042 - Add IPTOS macros for systems which lack them
9d98aaf6 6043 - Only set define entropy collection macros if they are found
e78a59f5 6044 - More large OpenBSD CVS updates:
6045 - [auth.c auth.h servconf.c servconf.h serverloop.c session.c]
6046 [session.h ssh.h sshd.c README.openssh2]
6047 ssh2 server side, see README.openssh2; enable with 'sshd -2'
6048 - [channels.c]
6049 no adjust after close
6050 - [sshd.c compat.c ]
6051 interop w/ latest ssh.com windows client.
61e96248 6052
8ce64345 605320000406
6054 - OpenBSD CVS update:
6055 - [channels.c]
6056 close efd on eof
6057 - [clientloop.c compat.c ssh.c sshconnect.c myproposal.h]
6058 ssh2 client implementation, interops w/ ssh.com and lsh servers.
6059 - [sshconnect.c]
6060 missing free.
6061 - [authfile.c cipher.c cipher.h packet.c sshconnect.c sshd.c]
6062 remove unused argument, split cipher_mask()
6063 - [clientloop.c]
6064 re-order: group ssh1 vs. ssh2
6065 - Make Redhat spec require openssl >= 0.9.5a
6066
e7627112 606720000404
6068 - Add tests for RAND_add function when searching for OpenSSL
7e7327a1 6069 - OpenBSD CVS update:
6070 - [packet.h packet.c]
6071 ssh2 packet format
6072 - [packet.h packet.c nchan2.ms nchan.h compat.h compat.c]
6073 [channels.h channels.c]
6074 channel layer support for ssh2
6075 - [kex.h kex.c hmac.h hmac.c dsa.c dsa.h]
6076 DSA, keyexchange, algorithm agreement for ssh2
6c081128 6077 - Generate manpages before make install not at the end of make all
6078 - Don't seed the rng quite so often
6079 - Always reseed rng when requested
e7627112 6080
bfc9a610 608120000403
6082 - Wrote entropy collection routines for systems that lack /dev/random
6083 and EGD
837c30b8 6084 - Disable tests and typedefs for 64 bit types. They are currently unused.
bfc9a610 6085
7368a6c8 608620000401
6087 - Big OpenBSD CVS update (mainly beginnings of SSH2 infrastructure)
6088 - [auth.c session.c sshd.c auth.h]
6089 split sshd.c -> auth.c session.c sshd.c plus cleanup and goto-removal
6090 - [bufaux.c bufaux.h]
6091 support ssh2 bignums
6092 - [channels.c channels.h clientloop.c sshd.c nchan.c nchan.h packet.c]
6093 [readconf.c ssh.c ssh.h serverloop.c]
6094 replace big switch() with function tables (prepare for ssh2)
6095 - [ssh2.h]
6096 ssh2 message type codes
6097 - [sshd.8]
6098 reorder Xr to avoid cutting
6099 - [serverloop.c]
6100 close(fdin) if fdin != fdout, shutdown otherwise, ok theo@
6101 - [channels.c]
6102 missing close
6103 allow bigger packets
6104 - [cipher.c cipher.h]
6105 support ssh2 ciphers
6106 - [compress.c]
6107 cleanup, less code
6108 - [dispatch.c dispatch.h]
6109 function tables for different message types
6110 - [log-server.c]
6111 do not log() if debuggin to stderr
6112 rename a cpp symbol, to avoid param.h collision
6113 - [mpaux.c]
6114 KNF
6115 - [nchan.c]
6116 sync w/ channels.c
6117
f5238bee 611820000326
6119 - Better tests for OpenSSL w/ RSAref
bcbf86ec 6120 - Added replacement setenv() function from OpenBSD libc. Suggested by
f5238bee 6121 Ben Lindstrom <mouring@pconline.com>
4fe2af09 6122 - OpenBSD CVS update
6123 - [auth-krb4.c]
6124 -Wall
6125 - [auth-rh-rsa.c auth-rsa.c hostfile.c hostfile.h key.c key.h match.c]
6126 [match.h ssh.c ssh.h sshconnect.c sshd.c]
6127 initial support for DSA keys. ok deraadt@, niels@
6128 - [cipher.c cipher.h]
6129 remove unused cipher_attack_detected code
6130 - [scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
6131 Fix some formatting problems I missed before.
6132 - [ssh.1 sshd.8]
6133 fix spelling errors, From: FreeBSD
6134 - [ssh.c]
6135 switch to raw mode only if he _get_ a pty (not if we _want_ a pty).
f5238bee 6136
0024a081 613720000324
6138 - Released 1.2.3
6139
bd499f9e 614020000317
6141 - Clarified --with-default-path option.
6142 - Added -blibpath handling for AIX to work around stupid runtime linking.
6143 Problem elucidated by gshapiro@SENDMAIL.ORG by way of Jim Knoble
986a22ec 6144 <jmknoble@jmknoble.cx>
474b5fef 6145 - Checks for 64 bit int types. Problem report from Mats Fredholm
6146 <matsf@init.se>
610cd5c6 6147 - OpenBSD CVS updates:
bcbf86ec 6148 - [atomicio.c auth-krb4.c bufaux.c channels.c compress.c fingerprint.c]
610cd5c6 6149 [packet.h radix.c rsa.c scp.c ssh-agent.c ssh-keygen.c sshconnect.c]
6150 [sshd.c]
6151 pedantic: signed vs. unsigned, void*-arithm, etc
6152 - [ssh.1 sshd.8]
6153 Various cleanups and standardizations.
bcbf86ec 6154 - Runtime error fix for HPUX from Otmar Stahl
be48d23c 6155 <O.Stahl@lsw.uni-heidelberg.de>
bd499f9e 6156
4696775a 615720000316
bcbf86ec 6158 - Fixed configure not passing LDFLAGS to Solaris. Report from David G.
4696775a 6159 Hesprich <dghespri@sprintparanet.com>
d423d822 6160 - Propogate LD through to Makefile
b7a9ce47 6161 - Doc cleanups
2ba2a610 6162 - Added blurb about "scp: command not found" errors to UPGRADING
4696775a 6163
cb0b7ea4 616420000315
6165 - Fix broken CFLAGS handling during search for OpenSSL. Fixes va_list
6166 problems with gcc/Solaris.
bcbf86ec 6167 - Don't free argument to putenv() after use (in setenv() replacement).
db55a3ea 6168 Report from Seigo Tanimura <tanimura@r.dl.itc.u-tokyo.ac.jp>
bcbf86ec 6169 - Created contrib/ subdirectory. Included helpers from Phil Hands'
13652e52 6170 Debian package, README file and chroot patch from Ricardo Cerqueira
6171 <rmcc@clix.pt>
bcbf86ec 6172 - Moved gnome-ssh-askpass.c to contrib directory and removed config
13652e52 6173 option.
6174 - Slight cleanup to doc files
b14b2ae7 6175 - Configure fix from Bratislav ILICH <bilic@zepter.ru>
cb0b7ea4 6176
a8ed9fd9 617720000314
bcbf86ec 6178 - Include macro for IN6_IS_ADDR_V4MAPPED. Report from
a8ed9fd9 6179 peter@frontierflying.com
84afc958 6180 - Include /usr/local/include and /usr/local/lib for systems that don't
6181 do it themselves
6182 - -R/usr/local/lib for Solaris
6183 - Fix RSAref detection
6184 - Fix IN6_IS_ADDR_V4MAPPED macro
a8ed9fd9 6185
bcf36c78 618620000311
6187 - Detect RSAref
43e48848 6188 - OpenBSD CVS change
6189 [sshd.c]
6190 - disallow guessing of root password
867dbf40 6191 - More configure fixes
80faa19f 6192 - IPv6 workarounds from Hideaki YOSHIFUJI <yoshfuji@ecei.tohoku.ac.jp>
bcf36c78 6193
c8d54615 619420000309
6195 - OpenBSD CVS updates to v1.2.3
704b1659 6196 [ssh.h atomicio.c]
6197 - int atomicio -> ssize_t (for alpha). ok deraadt@
6198 [auth-rsa.c]
6199 - delay MD5 computation until client sends response, free() early, cleanup.
6200 [cipher.c]
6201 - void* -> unsigned char*, ok niels@
6202 [hostfile.c]
6203 - remove unused variable 'len'. fix comments.
6204 - remove unused variable
6205 [log-client.c log-server.c]
6206 - rename a cpp symbol, to avoid param.h collision
6207 [packet.c]
6208 - missing xfree()
6209 - getsockname() requires initialized tolen; andy@guildsoftware.com
6210 - use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
6211 from Holger.Trapp@Informatik.TU-Chemnitz.DE
6212 [pty.c pty.h]
bcbf86ec 6213 - register cleanup for pty earlier. move code for pty-owner handling to
c8d54615 6214 pty.c ok provos@, dugsong@
704b1659 6215 [readconf.c]
6216 - turn off x11-fwd for the client, too.
6217 [rsa.c]
6218 - PKCS#1 padding
6219 [scp.c]
6220 - allow '.' in usernames; from jedgar@fxp.org
6221 [servconf.c]
6222 - typo: ignore_user_known_hosts int->flag; naddy@mips.rhein-neckar.de
6223 - sync with sshd_config
6224 [ssh-keygen.c]
6225 - enable ssh-keygen -l -f ~/.ssh/known_hosts, ok deraadt@
6226 [ssh.1]
6227 - Change invalid 'CHAT' loglevel to 'VERBOSE'
6228 [ssh.c]
6229 - suppress AAAA query host when '-4' is used; from shin@nd.net.fujitsu.co.jp
6230 - turn off x11-fwd for the client, too.
6231 [sshconnect.c]
6232 - missing xfree()
6233 - retry rresvport_af(), too. from sumikawa@ebina.hitachi.co.jp.
6234 - read error vs. "Connection closed by remote host"
6235 [sshd.8]
6236 - ie. -> i.e.,
6237 - do not link to a commercial page..
6238 - sync with sshd_config
6239 [sshd.c]
6240 - no need for poll.h; from bright@wintelcom.net
6241 - log with level log() not fatal() if peer behaves badly.
6242 - don't panic if client behaves strange. ok deraadt@
6243 - make no-port-forwarding for RSA keys deny both -L and -R style fwding
6244 - delay close() of pty until the pty has been chowned back to root
6245 - oops, fix comment, too.
6246 - missing xfree()
6247 - move XAUTHORITY to subdir. ok dugsong@. fixes debian bug #57907, too.
6248 (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907)
bcbf86ec 6249 - register cleanup for pty earlier. move code for pty-owner handling to
704b1659 6250 pty.c ok provos@, dugsong@
6251 - create x11 cookie file
6252 - fix pr 1113, fclose() -> pclose(), todo: remote popen()
6253 - version 1.2.3
c8d54615 6254 - Cleaned up
bcbf86ec 6255 - Removed warning workaround for Linux and devpts filesystems (no longer
d8223847 6256 required after OpenBSD updates)
c8d54615 6257
07055445 625820000308
6259 - Configure fix from Hiroshi Takekawa <takekawa@sr3.t.u-tokyo.ac.jp>
6260
626120000307
6262 - Released 1.2.2p1
6263
9c8c3fc6 626420000305
6265 - Fix DEC compile fix
54096dcc 6266 - Explicitly seed OpenSSL's PRNG before checking rsa_alive()
aa6bd60a 6267 - Check for getpagesize in libucb.a if not found in libc. Fix for old
6268 Solaris from Andre Lucas <andre.lucas@dial.pipex.com>
bcbf86ec 6269 - Check for libwrap if --with-tcp-wrappers option specified. Suggestion
9fc7867e 6270 Mate Wierdl <mw@moni.msci.memphis.edu>
9c8c3fc6 6271
6bf4d066 627220000303
6273 - Added "make host-key" target, Suggestion from Dominik Brettnacher
6274 <domi@saargate.de>
bcbf86ec 6275 - Don't permanently fail on bind() if getaddrinfo has more choices left for
16218745 6276 us. Needed to work around messy IPv6 on Linux. Patch from Arkadiusz
6277 Miskiewicz <misiek@pld.org.pl>
22fa590f 6278 - DEC Unix compile fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
6279 - Manpage fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
6bf4d066 6280
a0391976 628120000302
6282 - Big cleanup of autoconf code
6283 - Rearranged to be a little more logical
6284 - Added -R option for Solaris
6285 - Rewrote OpenSSL detection code. Now uses AC_TRY_RUN with a test program
6286 to detect library and header location _and_ ensure library has proper
6287 RSA support built in (this is a problem with OpenSSL 0.9.5).
817175bc 6288 - Applied pty cleanup patch from markus.friedl@informatik.uni-erlangen.de
0a1718dc 6289 - Avoid warning message with Unix98 ptys
bcbf86ec 6290 - Warning was valid - possible race condition on PTYs. Avoided using
3276571c 6291 platform-specific code.
6292 - Document some common problems
bcbf86ec 6293 - Allow root access to any key. Patch from
81eef326 6294 markus.friedl@informatik.uni-erlangen.de
a0391976 6295
f55afe71 629620000207
6297 - Removed SOCKS code. Will support through a ProxyCommand.
6298
d07d1c58 629920000203
6300 - Fixed SEGVs in authloop, fix from vbzoli@hbrt.hu
d581b7ae 6301 - Add --with-ssl-dir option
d07d1c58 6302
9d5f374b 630320000202
bcbf86ec 6304 - Fix lastlog code for directory based lastlogs. Fix from Josh Durham
9d5f374b 6305 <jmd@aoe.vt.edu>
6b1f3fdb 6306 - Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
bcbf86ec 6307 - Added URLs to Japanese translations of documents by HARUYAMA Seigo
6b1f3fdb 6308 <haruyama@nt.phys.s.u-tokyo.ac.jp>
9d5f374b 6309
bc8c2601 631020000201
6311 - Use socket pairs by default (instead of pipes). Prevents race condition
6312 on several (buggy) OSs. Report and fix from tridge@linuxcare.com
6313
69c76614 631420000127
6315 - Seed OpenSSL's random number generator before generating RSA keypairs
6316 - Split random collector into seperate file
aaf2abd7 6317 - Compile fix from Andre Lucas <andre.lucas@dial.pipex.com>
69c76614 6318
f9507c24 631920000126
6320 - Released 1.2.2 stable
6321
bcbf86ec 6322 - NeXT keeps it lastlog in /usr/adm. Report from
f9507c24 6323 mouring@newton.pconline.com
bcbf86ec 6324 - Added note in UPGRADING re interop with commercial SSH using idea.
986a22ec 6325 Report from Jim Knoble <jmknoble@jmknoble.cx>
587120ad 6326 - Fix linking order for Kerberos/AFS. Fix from Holget Trapp
6327 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
f9507c24 6328
bfae20ad 632920000125
bcbf86ec 6330 - Fix NULL pointer dereference in login.c. Fix from Andre Lucas
bfae20ad 6331 <andre.lucas@dial.pipex.com>
07b0cb78 6332 - Reorder PAM initialisation so it does not mess up lastlog. Reported
6333 by Andre Lucas <andre.lucas@dial.pipex.com>
bcbf86ec 6334 - Use preformatted manpages on SCO, report from Gary E. Miller
9755cbdb 6335 <gem@rellim.com>
6336 - New URL for x11-ssh-askpass.
bcbf86ec 6337 - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble
986a22ec 6338 <jmknoble@jmknoble.cx>
bcbf86ec 6339 - Added 'DESTDIR' option to Makefile to ease package building. Patch from
986a22ec 6340 Jim Knoble <jmknoble@jmknoble.cx>
ff8ecdb8 6341 - Updated RPM spec files to use DESTDIR
bfae20ad 6342
bb58aa4b 634320000124
6344 - Pick up version 1.2.2 from OpenBSD CVS (no changes, just version number
6345 increment)
6346
d45317d8 634720000123
6348 - OpenBSD CVS:
6349 - [packet.c]
6350 getsockname() requires initialized tolen; andy@guildsoftware.com
bcbf86ec 6351 - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin
4c40f834 6352 <drankin@bohemians.lexington.ky.us>
12aa90af 6353 - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com>
d45317d8 6354
e844f761 635520000122
6356 - Fix compilation of bsd-snprintf.c on Solaris, fix from Ben Taylor
6357 <bent@clark.net>
c54a6257 6358 - Merge preformatted manpage patch from Andre Lucas
6359 <andre.lucas@dial.pipex.com>
8eb34e02 6360 - Make IPv4 use the default in RPM packages
6361 - Irix uses preformatted manpages
1e64903d 6362 - Missing htons() in bsd-bindresvport.c, fix from Holger Trapp
6363 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
9bc5ddfe 6364 - OpenBSD CVS updates:
6365 - [packet.c]
6366 use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
6367 from Holger.Trapp@Informatik.TU-Chemnitz.DE
6368 - [sshd.c]
6369 log with level log() not fatal() if peer behaves badly.
6370 - [readpass.c]
bcbf86ec 6371 instead of blocking SIGINT, catch it ourselves, so that we can clean
6372 the tty modes up and kill ourselves -- instead of our process group
61e96248 6373 leader (scp, cvs, ...) going away and leaving us in noecho mode.
9bc5ddfe 6374 people with cbreak shells never even noticed..
399d9d44 6375 - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
6376 ie. -> i.e.,
e844f761 6377
4c8ef3fb 637820000120
6379 - Don't use getaddrinfo on AIX
7b2ea3a1 6380 - Update to latest OpenBSD CVS:
6381 - [auth-rsa.c]
6382 - fix user/1056, sshd keeps restrictions; dbt@meat.net
6383 - [sshconnect.c]
6384 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
6385 - destroy keys earlier
bcbf86ec 6386 - split key exchange (kex) and user authentication (user-auth),
d468fc76 6387 ok: provos@
7b2ea3a1 6388 - [sshd.c]
6389 - no need for poll.h; from bright@wintelcom.net
6390 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
bcbf86ec 6391 - split key exchange (kex) and user authentication (user-auth),
d468fc76 6392 ok: provos@
f3bba493 6393 - Big manpage and config file cleanup from Andre Lucas
6394 <andre.lucas@dial.pipex.com>
5f4fdfae 6395 - Re-added latest (unmodified) OpenBSD manpages
47f9a56a 6396 - Doc updates
d468fc76 6397 - NetBSD patch from David Rankin <drankin@bohemians.lexington.ky.us> and
6398 Christos Zoulas <christos@netbsd.org>
4c8ef3fb 6399
082bbfb3 640020000119
20af321f 6401 - SCO compile fixes from Gary E. Miller <gem@rellim.com>
082bbfb3 6402 - Compile fix from Darren_Hall@progressive.com
59e76f33 6403 - Linux/glibc-2.1.2 takes a *long* time to look up names for AF_UNSPEC
6404 addresses using getaddrinfo(). Added a configure switch to make the
6405 default lookup mode AF_INET
082bbfb3 6406
a63a7f37 640720000118
6408 - Fixed --with-pid-dir option
51a6baf8 6409 - Makefile fix from Gary E. Miller <gem@rellim.com>
61e96248 6410 - Compile fix for HPUX and Solaris from Andre Lucas
976f7e19 6411 <andre.lucas@dial.pipex.com>
a63a7f37 6412
f914c7fb 641320000117
6414 - Clean up bsd-bindresvport.c. Use arc4random() for picking initial
6415 port, ignore EINVAL errors (Linux) when searching for free port.
bcbf86ec 6416 - Revert __snprintf -> snprintf aliasing. Apparently Solaris
de93b046 6417 __snprintf isn't. Report from Theo de Raadt <theo@cvs.openbsd.org>
9b363e1c 6418 - Document location of Redhat PAM file in INSTALL.
bcbf86ec 6419 - Fixed X11 forwarding bug on Linux. libc advertises AF_INET6
6420 INADDR_ANY_INIT addresses via getaddrinfo, but may not be able to
f4a7cf29 6421 deliver (no IPv6 kernel support)
80a44451 6422 - Released 1.2.1pre27
f914c7fb 6423
f4a7cf29 6424 - Fix rresvport_af failure errors (logic error in bsd-bindresvport.c)
bcbf86ec 6425 - Fix --with-ipaddr-display option test. Fix from Jarno Huuskonen
cf8ad170 6426 <jhuuskon@hytti.uku.fi>
bcbf86ec 6427 - Fix hang on logout if processes are still using the pty. Needs
691a8a9f 6428 further testing.
5957fd29 6429 - Patch from Christos Zoulas <christos@zoulas.com>
6430 - Try $prefix first when looking for OpenSSL.
6431 - Include sys/types.h when including sys/socket.h in test programs
bcbf86ec 6432 - Substitute PID directory in sshd.8. Suggestion from Andrew
19d9ac2a 6433 Stribblehill <a.d.stribblehill@durham.ac.uk>
f4a7cf29 6434
47e45e44 643520000116
6436 - Renamed --with-xauth-path to --with-xauth
6437 - Added --with-pid-dir option
6438 - Released 1.2.1pre26
6439
a82ef8ae 6440 - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
bcbf86ec 6441 - Fixed broken bugfix for /dev/ptmx on Linux systems which lack
66be05a1 6442 openpty(). Report from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
a82ef8ae 6443
5cdfe03f 644420000115
6445 - Add --with-xauth-path configure directive and explicit test for
bcbf86ec 6446 /usr/openwin/bin/xauth for Solaris systems. Report from Anders
5cdfe03f 6447 Nordby <anders@fix.no>
bcbf86ec 6448 - Fix incorrect detection of /dev/ptmx on Linux systems that lack
5cdfe03f 6449 openpty. Report from John Seifarth <john@waw.be>
6450 - Look for intXX_t and u_intXX_t in sys/bitypes.h if they are not in
bcbf86ec 6451 sys/types.h. Fixes problems on SCO, report from Gary E. Miller
5cdfe03f 6452 <gem@rellim.com>
6453 - Use __snprintf and __vnsprintf if they are found where snprintf and
6454 vnsprintf are lacking. Suggested by Ben Taylor <bent@shell.clark.net>
6455 and others.
6456
48e671d5 645720000114
6458 - Merged OpenBSD IPv6 patch:
6459 - [sshd.c sshd.8 sshconnect.c ssh.h ssh.c servconf.h servconf.c scp.1]
6460 [scp.c packet.h packet.c login.c log.c canohost.c channels.c]
6461 [hostfile.c sshd_config]
6462 ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new
bcbf86ec 6463 features: sshd allows multiple ListenAddress and Port options. note
6464 that libwrap is not IPv6-ready. (based on patches from
48e671d5 6465 fujiwara@rcac.tdi.co.jp)
6466 - [ssh.c canohost.c]
bcbf86ec 6467 more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo,
48e671d5 6468 from itojun@
6469 - [channels.c]
6470 listen on _all_ interfaces for X11-Fwd (hints.ai_flags = AI_PASSIVE)
6471 - [packet.h]
6472 allow auth-kerberos for IPv4 only
6473 - [scp.1 sshd.8 servconf.h scp.c]
6474 document -4, -6, and 'ssh -L 2022/::1/22'
6475 - [ssh.c]
bcbf86ec 6476 'ssh @host' is illegal (null user name), from
48e671d5 6477 karsten@gedankenpolizei.de
6478 - [sshconnect.c]
6479 better error message
6480 - [sshd.c]
6481 allow auth-kerberos for IPv4 only
6482 - Big IPv6 merge:
6483 - Cleanup overrun in sockaddr copying on RHL 6.1
6484 - Replacements for getaddrinfo, getnameinfo, etc based on versions
6485 from patch from KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>
6486 - Replacement for missing structures on systems that lack IPv6
6487 - record_login needed to know about AF_INET6 addresses
6488 - Borrowed more code from OpenBSD: rresvport_af and requisites
6489
2598df62 649020000110
6491 - Fixes to auth-skey to enable it to use the standard OpenSSL libraries
6492
b8a0310d 649320000107
6494 - New config.sub and config.guess to fix problems on SCO. Supplied
6495 by Gary E. Miller <gem@rellim.com>
b6a98a85 6496 - SCO build fix from Gary E. Miller <gem@rellim.com>
2598df62 6497 - Released 1.2.1pre25
b8a0310d 6498
dfb95100 649920000106
6500 - Documentation update & cleanup
6501 - Better KrbIV / AFS detection, based on patch from:
6502 Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
6503
b9795b89 650420000105
bcbf86ec 6505 - Fixed annoying DES corruption problem. libcrypt has been
b9795b89 6506 overriding symbols in libcrypto. Removed libcrypt and crypt.h
6507 altogether (libcrypto includes its own crypt(1) replacement)
6508 - Added platform-specific rules for Irix 6.x. Included warning that
6509 they are untested.
6510
a1ec4d79 651120000103
6512 - Add explicit make rules for files proccessed by fixpaths.
61e96248 6513 - Fix "make install" in RPM spec files. Report from Tenkou N. Hattori
a1ec4d79 6514 <tnh@kondara.org>
bcbf86ec 6515 - Removed "nullok" directive from default PAM configuration files.
6516 Added information on enabling EmptyPasswords on openssh+PAM in
607d73e6 6517 UPGRADING file.
e02735bb 6518 - OpenBSD CVS updates
6519 - [ssh-agent.c]
bcbf86ec 6520 cleanup_exit() for SIGTERM/SIGHUP, too. from fgsch@ and
e02735bb 6521 dgaudet@arctic.org
6522 - [sshconnect.c]
6523 compare correct version for 1.3 compat mode
a1ec4d79 6524
93c7f644 652520000102
6526 - Prevent multiple inclusion of config.h and defines.h. Suggested
6527 by Andre Lucas <andre.lucas@dial.pipex.com>
6528 - Properly clean up on exit of ssh-agent. Patch from Dean Gaudet
6529 <dgaudet@arctic.org>
6530
76b8607f 653119991231
bcbf86ec 6532 - Fix password support on systems with a mixture of shadowed and
6533 non-shadowed passwords (e.g. NIS). Report and fix from
76b8607f 6534 HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
bcbf86ec 6535 - Fix broken autoconf typedef detection. Report from Marc G.
723221b5 6536 Fournier <marc.fournier@acadiau.ca>
b92964b7 6537 - Fix occasional crash on LinuxPPC. Patch from Franz Sirl
6538 <Franz.Sirl-kernel@lauterbach.com>
bcbf86ec 6539 - Prevent typedefs from being compiled more than once. Report from
a6ddc88b 6540 Marc G. Fournier <marc.fournier@acadiau.ca>
4811cc0b 6541 - Fill in ut_utaddr utmp field. Report from Benjamin Charron
6542 <iretd@bigfoot.com>
bcbf86ec 6543 - Really fix broken default path. Fix from Jim Knoble
986a22ec 6544 <jmknoble@jmknoble.cx>
ae3a3d31 6545 - Remove test for quad_t. No longer needed.
76a8e733 6546 - Released 1.2.1pre24
6547
6548 - Added support for directory-based lastlogs
6549 - Really fix typedefs, patch from Ben Taylor <bent@clark.net>
76b8607f 6550
13f825f4 655119991230
6552 - OpenBSD CVS updates:
6553 - [auth-passwd.c]
6554 check for NULL 1st
bcbf86ec 6555 - Removed most of the pam code into its own file auth-pam.[ch]. This
a5c9cd31 6556 cleaned up sshd.c up significantly.
bcbf86ec 6557 - PAM authentication was incorrectly interpreting
76b8607f 6558 "PermitRootLogin without-password". Report from Matthias Andree
6559 <ma@dt.e-technik.uni-dortmund.de
a5c9cd31 6560 - Several other cleanups
0bc5b6fb 6561 - Merged Dante SOCKS support patch from David Rankin
6562 <drankin@bohemians.lexington.ky.us>
6563 - Updated documentation with ./configure options
76b8607f 6564 - Released 1.2.1pre23
13f825f4 6565
c73a0cb5 656619991229
bcbf86ec 6567 - Applied another NetBSD portability patch from David Rankin
c73a0cb5 6568 <drankin@bohemians.lexington.ky.us>
6569 - Fix --with-default-path option.
bcbf86ec 6570 - Autodetect perl, patch from David Rankin
a0f84251 6571 <drankin@bohemians.lexington.ky.us>
bcbf86ec 6572 - Print whether OpenSSH was compiled with RSARef, patch from
0a2ff95d 6573 Nalin Dahyabhai <nalin@thermo.stat.ncsu.edu>
bcbf86ec 6574 - Calls to pam_setcred, patch from Nalin Dahyabhai
f91bacbd 6575 <nalin@thermo.stat.ncsu.edu>
e3a93db0 6576 - Detect missing size_t and typedef it.
5ab44a92 6577 - Rename helper.[ch] to (more appropriate) bsd-misc.[ch]
6578 - Minor Makefile cleaning
c73a0cb5 6579
b6019d68 658019991228
6581 - Replacement for getpagesize() for systems which lack it
bcbf86ec 6582 - NetBSD login.c compile fix from David Rankin
70e0115b 6583 <drankin@bohemians.lexington.ky.us>
6584 - Fully set ut_tv if present in utmp or utmpx
d94aa2ae 6585 - Portability fixes for Irix 5.3 (now compiles OK!)
6586 - autoconf and other misc cleanups
ea1970a3 6587 - Merged AIX patch from Darren Hall <dhall@virage.org>
6588 - Cleaned up defines.h
fa9a2dd6 6589 - Released 1.2.1pre22
b6019d68 6590
d2dcff5f 659119991227
6592 - Automatically correct paths in manpages and configuration files. Patch
6593 and script from Andre Lucas <andre.lucas@dial.pipex.com>
6594 - Removed credits from README to CREDITS file, updated.
cb807f40 6595 - Added --with-default-path to specify custom path for server
6596 - Removed #ifdef trickery from acconfig.h into defines.h
36a5b38e 6597 - PAM bugfix. PermitEmptyPassword was being ignored.
6598 - Fixed PAM config files to allow empty passwords if server does.
6599 - Explained spurious PAM auth warning workaround in UPGRADING
21feb5fa 6600 - Use last few chars of tty line as ut_id
5a7794be 6601 - New SuSE RPM spec file from Chris Saia <csaia@wtower.com>
00e6dd70 6602 - OpenBSD CVS updates:
6603 - [packet.h auth-rhosts.c]
6604 check format string for packet_disconnect and packet_send_debug, too
6605 - [channels.c]
6606 use packet_get_maxsize for channels. consistence.
d2dcff5f 6607
f74efc8d 660819991226
6609 - Enabled utmpx support by default for Solaris
6610 - Cleanup sshd.c PAM a little more
986a22ec 6611 - Revised RPM package to include Jim Knoble's <jmknoble@jmknoble.cx>
bc7ea646 6612 X11 ssh-askpass program.
20c43d8c 6613 - Disable logging of PAM success and failures, PAM is verbose enough.
bcbf86ec 6614 Unfortunatly there is currently no way to disable auth failure
6615 messages. Mention this in UPGRADING file and sent message to PAM
20c43d8c 6616 developers
83b7f649 6617 - OpenBSD CVS update:
6618 - [ssh-keygen.1 ssh.1]
bcbf86ec 6619 remove ref to .ssh/random_seed, mention .ssh/environment in
83b7f649 6620 .Sh FILES, too
72251cb6 6621 - Released 1.2.1pre21
bcbf86ec 6622 - Fixed implicit '.' in default path, report from Jim Knoble
986a22ec 6623 <jmknoble@jmknoble.cx>
6624 - Redhat RPM spec fixes from Jim Knoble <jmknoble@jmknoble.cx>
f74efc8d 6625
f498ed15 662619991225
6627 - More fixes from Andre Lucas <andre.lucas@dial.pipex.com>
6628 - Cleanup of auth-passwd.c for shadow and MD5 passwords
6629 - Cleanup and bugfix of PAM authentication code
f74efc8d 6630 - Released 1.2.1pre20
6631
6632 - Merged fixes from Ben Taylor <bent@clark.net>
6633 - Fixed configure support for PAM. Reported by Naz <96na@eng.cam.ac.uk>
6634 - Disabled logging of PAM password authentication failures when password
6635 is empty. (e.g start of authentication loop). Reported by Naz
6636 <96na@eng.cam.ac.uk>)
f498ed15 6637
663819991223
bcbf86ec 6639 - Merged later HPUX patch from Andre Lucas
f498ed15 6640 <andre.lucas@dial.pipex.com>
6641 - Above patch included better utmpx support from Ben Taylor
f74efc8d 6642 <bent@clark.net>
f498ed15 6643
eef6f7e9 664419991222
bcbf86ec 6645 - Fix undefined fd_set type in ssh.h from Povl H. Pedersen
eef6f7e9 6646 <pope@netguide.dk>
ae28776a 6647 - Fix login.c breakage on systems which lack ut_host in struct
6648 utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com>
eef6f7e9 6649
a7effaac 665019991221
bcbf86ec 6651 - Integration of large HPUX patch from Andre Lucas
6652 <andre.lucas@dial.pipex.com>. Integrating it had a few other
a7effaac 6653 benefits:
6654 - Ability to disable shadow passwords at configure time
6655 - Ability to disable lastlog support at configure time
6656 - Support for IP address in $DISPLAY
ae2f7af7 6657 - OpenBSD CVS update:
6658 - [sshconnect.c]
6659 say "REMOTE HOST IDENTIFICATION HAS CHANGED"
59dd7a31 6660 - Fix DISABLE_SHADOW support
6661 - Allow MD5 passwords even if shadow passwords are disabled
16034de9 6662 - Release 1.2.1pre19
a7effaac 6663
3f1d9bcd 666419991218
bcbf86ec 6665 - Redhat init script patch from Chun-Chung Chen
3f1d9bcd 6666 <cjj@u.washington.edu>
7e1c2490 6667 - Avoid breakage on systems without IPv6 headers
3f1d9bcd 6668
60d804c8 666919991216
bcbf86ec 6670 - Makefile changes for Solaris from Peter Kocks
60d804c8 6671 <peter.kocks@baygate.com>
89cafde6 6672 - Minor updates to docs
6673 - Merged OpenBSD CVS changes:
6674 - [authfd.c ssh-agent.c]
6675 keysize warnings talk about identity files
6676 - [packet.c]
6677 "Connection closed by x.x.x.x": fatal() -> log()
bcbf86ec 6678 - Correctly handle empty passwords in shadow file. Patch from:
c9d323f0 6679 "Chris, the Young One" <cky@pobox.com>
6680 - Released 1.2.1pre18
60d804c8 6681
7dc6fc6d 668219991215
6683 - Integrated patchs from Juergen Keil <jk@tools.de>
6684 - Avoid void* pointer arithmatic
6685 - Use LDFLAGS correctly
68227e6d 6686 - Fix SIGIO error in scp
6687 - Simplify status line printing in scp
61e96248 6688 - Added better test for inline functions compiler support from
906a2515 6689 Darren_Hall@progressive.com
7dc6fc6d 6690
95f1eccc 669119991214
6692 - OpenBSD CVS Changes
6693 - [canohost.c]
bcbf86ec 6694 fix get_remote_port() and friends for sshd -i;
95f1eccc 6695 Holger.Trapp@Informatik.TU-Chemnitz.DE
6696 - [mpaux.c]
6697 make code simpler. no need for memcpy. niels@ ok
6698 - [pty.c]
6699 namebuflen not sizeof namebuflen; bnd@ep-ag.com via djm@mindrot.org
6700 fix proto; markus
6701 - [ssh.1]
6702 typo; mark.baushke@solipsa.com
6703 - [channels.c ssh.c ssh.h sshd.c]
6704 type conflict for 'extern Type *options' in channels.c; dot@dotat.at
6705 - [sshconnect.c]
6706 move checking of hostkey into own function.
6707 - [version.h]
6708 OpenSSH-1.2.1
884bcb37 6709 - Clean up broken includes in pty.c
7303768f 6710 - Some older systems don't have poll.h, they use sys/poll.h instead
6711 - Doc updates
95f1eccc 6712
847e8865 671319991211
bcbf86ec 6714 - Fix compilation on systems with AFS. Reported by
847e8865 6715 aloomis@glue.umd.edu
bcbf86ec 6716 - Fix installation on Solaris. Reported by
847e8865 6717 Gordon Rowell <gordonr@gormand.com.au>
6718 - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com,
6719 patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
6720 - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com>
6721 - Compile fix from David Agraz <dagraz@jahoopa.com>
6722 - Avoid compiler warning in bsd-snprintf.c
bcbf86ec 6723 - Added pam_limits.so to default PAM config. Suggested by
986a22ec 6724 Jim Knoble <jmknoble@jmknoble.cx>
847e8865 6725
8946db53 672619991209
6727 - Import of patch from Ben Taylor <bent@clark.net>:
6728 - Improved PAM support
6729 - "uninstall" rule for Makefile
6730 - utmpx support
6731 - Should fix PAM problems on Solaris
2d86a6cc 6732 - OpenBSD CVS updates:
6733 - [readpass.c]
6734 avoid stdio; based on work by markus, millert, and I
6735 - [sshd.c]
6736 make sure the client selects a supported cipher
6737 - [sshd.c]
bcbf86ec 6738 fix sighup handling. accept would just restart and daemon handled
6739 sighup only after the next connection was accepted. use poll on
2d86a6cc 6740 listen sock now.
6741 - [sshd.c]
6742 make that a fatal
87e91331 6743 - Applied patch from David Rankin <drankin@bohemians.lexington.ky.us>
6744 to fix libwrap support on NetBSD
5001b9e4 6745 - Released 1.2pre17
8946db53 6746
6d8c4ea4 674719991208
bcbf86ec 6748 - Compile fix for Solaris with /dev/ptmx from
6d8c4ea4 6749 David Agraz <dagraz@jahoopa.com>
6750
4285816a 675119991207
986a22ec 6752 - sshd Redhat init script patch from Jim Knoble <jmknoble@jmknoble.cx>
4285816a 6753 fixes compatability with 4.x and 5.x
db28aeb5 6754 - Fixed default SSH_ASKPASS
bcbf86ec 6755 - Fix PAM account and session being called multiple times. Problem
d465f2ca 6756 reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>
a408af76 6757 - Merged more OpenBSD changes:
6758 - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c]
bcbf86ec 6759 move atomicio into it's own file. wrap all socket write()s which
a408af76 6760 were doing write(sock, buf, len) != len, with atomicio() calls.
6761 - [auth-skey.c]
6762 fd leak
6763 - [authfile.c]
6764 properly name fd variable
6765 - [channels.c]
6766 display great hatred towards strcpy
6767 - [pty.c pty.h sshd.c]
6768 use openpty() if it exists (it does on BSD4_4)
6769 - [tildexpand.c]
6770 check for ~ expansion past MAXPATHLEN
6771 - Modified helper.c to use new atomicio function.
6772 - Reformat Makefile a little
6773 - Moved RC4 routines from rc4.[ch] into helper.c
6774 - Added autoconf code to detect /dev/ptmx (Solaris) and /dev/ptc (AIX)
9983a8ca 6775 - Updated SuSE spec from Chris Saia <csaia@wtower.com>
6776 - Tweaked Redhat spec
9158d92f 6777 - Clean up bad imports of a few files (forgot -kb)
6778 - Released 1.2pre16
4285816a 6779
9c7b6dfd 678019991204
6781 - Small cleanup of PAM code in sshd.c
57112b5a 6782 - Merged OpenBSD CVS changes:
6783 - [auth-krb4.c auth-passwd.c auth-skey.c ssh.h]
6784 move skey-auth from auth-passwd.c to auth-skey.c, same for krb4
6785 - [auth-rsa.c]
6786 warn only about mismatch if key is _used_
6787 warn about keysize-mismatch with log() not error()
6788 channels.c readconf.c readconf.h ssh.c ssh.h sshconnect.c
6789 ports are u_short
6790 - [hostfile.c]
6791 indent, shorter warning
6792 - [nchan.c]
6793 use error() for internal errors
6794 - [packet.c]
6795 set loglevel for SSH_MSG_DISCONNECT to log(), not fatal()
6796 serverloop.c
6797 indent
6798 - [ssh-add.1 ssh-add.c ssh.h]
6799 document $SSH_ASKPASS, reasonable default
6800 - [ssh.1]
6801 CheckHostIP is not available for connects via proxy command
6802 - [sshconnect.c]
6803 typo
6804 easier to read client code for passwd and skey auth
6805 turn of checkhostip for proxy connects, since we don't know the remote ip
9c7b6dfd 6806
dad3b556 680719991126
6808 - Add definition for __P()
6809 - Added [v]snprintf() replacement for systems that lack it
6810
0ce43ae4 681119991125
6812 - More reformatting merged from OpenBSD CVS
6813 - Merged OpenBSD CVS changes:
6814 - [channels.c]
6815 fix packet_integrity_check() for !have_hostname_in_open.
6816 report from mrwizard@psu.edu via djm@ibs.com.au
6817 - [channels.c]
6818 set SO_REUSEADDR and SO_LINGER for forwarded ports.
6819 chip@valinux.com via damien@ibs.com.au
6820 - [nchan.c]
6821 it's not an error() if shutdown_write failes in nchan.
6822 - [readconf.c]
6823 remove dead #ifdef-0-code
6824 - [readconf.c servconf.c]
6825 strcasecmp instead of tolower
6826 - [scp.c]
6827 progress meter overflow fix from damien@ibs.com.au
6828 - [ssh-add.1 ssh-add.c]
6829 SSH_ASKPASS support
6830 - [ssh.1 ssh.c]
6831 postpone fork_after_authentication until command execution,
6832 request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
6833 plus: use daemon() for backgrounding
cf8dd513 6834 - Added BSD compatible install program and autoconf test, thanks to
6835 Niels Kristian Bech Jensen <nkbj@image.dk>
6836 - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
09041313 6837 - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
3dbefdb8 6838 - Release 1.2pre15
0ce43ae4 6839
5260325f 684019991124
6841 - Merged very large OpenBSD source code reformat
6842 - OpenBSD CVS updates
6843 - [channels.c cipher.c compat.c log-client.c scp.c serverloop.c]
6844 [ssh.h sshd.8 sshd.c]
6845 syslog changes:
6846 * Unified Logmessage for all auth-types, for success and for failed
6847 * Standard connections get only ONE line in the LOG when level==LOG:
6848 Auth-attempts are logged only, if authentication is:
6849 a) successfull or
6850 b) with passwd or
6851 c) we had more than AUTH_FAIL_LOG failues
6852 * many log() became verbose()
6853 * old behaviour with level=VERBOSE
6854 - [readconf.c readconf.h ssh.1 ssh.h sshconnect.c sshd.c]
6855 tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
6856 messages. allows use of s/key in windows (ttssh, securecrt) and
6857 ssh-1.2.27 clients without 'ssh -v', ok: niels@
6858 - [sshd.8]
6859 -V, for fallback to openssh in SSH2 compatibility mode
6860 - [sshd.c]
6861 fix sigchld race; cjc5@po.cwru.edu
6862
4655fe80 686319991123
6864 - Added SuSE package files from Chris Saia <csaia@wtower.com>
8b241e50 6865 - Restructured package-related files under packages/*
4655fe80 6866 - Added generic PAM config
8b241e50 6867 - Numerous little Solaris fixes
9c08d6ce 6868 - Add recommendation to use GNU make to INSTALL document
4655fe80 6869
60bed5fd 687019991122
6871 - Make <enter> close gnome-ssh-askpass (Debian bug #50299)
2f2cc3f9 6872 - OpenBSD CVS Changes
bcbf86ec 6873 - [ssh-keygen.c]
6874 don't create ~/.ssh only if the user wants to store the private
6875 key there. show fingerprint instead of public-key after
2f2cc3f9 6876 keygeneration. ok niels@
b09a984b 6877 - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h
96ad4350 6878 - Added timersub() macro
b09a984b 6879 - Tidy RCSIDs of bsd-*.c
bcbf86ec 6880 - Added autoconf test and macro to deal with old PAM libraries
96ad4350 6881 pam_strerror definition (one arg vs two).
530f1889 6882 - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>)
bcbf86ec 6883 - Retry /dev/urandom reads interrupted by signal (report from
530f1889 6884 Robert Hardy <rhardy@webcon.net>)
1647c2b5 6885 - Added a setenv replacement for systems which lack it
d84a9a44 6886 - Only display public key comment when presenting ssh-askpass dialog
6887 - Released 1.2pre14
60bed5fd 6888
bcbf86ec 6889 - Configure, Make and changelog corrections from Tudor Bosman
2ddcfdf3 6890 <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk>
6891
9d6b7add 689219991121
2f2cc3f9 6893 - OpenBSD CVS Changes:
60bed5fd 6894 - [channels.c]
6895 make this compile, bad markus
6896 - [log.c readconf.c servconf.c ssh.h]
6897 bugfix: loglevels are per host in clientconfig,
6898 factor out common log-level parsing code.
6899 - [servconf.c]
6900 remove unused index (-Wall)
6901 - [ssh-agent.c]
6902 only one 'extern char *__progname'
6903 - [sshd.8]
6904 document SIGHUP, -Q to synopsis
6905 - [sshconnect.c serverloop.c sshd.c packet.c packet.h]
6906 [channels.c clientloop.c]
6907 SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
6908 [hope this time my ISP stays alive during commit]
6909 - [OVERVIEW README] typos; green@freebsd
6910 - [ssh-keygen.c]
6911 replace xstrdup+strcat with strlcat+fixed buffer, fixes OF (bad me)
6912 exit if writing the key fails (no infinit loop)
6913 print usage() everytime we get bad options
6914 - [ssh-keygen.c] overflow, djm@mindrot.org
6915 - [sshd.c] fix sigchld race; cjc5@po.cwru.edu
61e96248 6916
2b942fe0 691719991120
bcbf86ec 6918 - Merged more Solaris support from Marc G. Fournier
2b942fe0 6919 <marc.fournier@acadiau.ca>
6920 - Wrote autoconf tests for integer bit-types
6921 - Fixed enabling kerberos support
bcbf86ec 6922 - Fix segfault in ssh-keygen caused by buffer overrun in filename
13c36c4c 6923 handling.
2b942fe0 6924
06479889 692519991119
6926 - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>
2ad77510 6927 - Merged OpenBSD CVS changes
6928 - [auth-rhosts.c auth-rsa.c ssh-agent.c sshconnect.c sshd.c]
6929 more %d vs. %s in fmt-strings
6930 - [authfd.c]
6931 Integers should not be printed with %s
7b1cc56c 6932 - EGD uses a socket, not a named pipe. Duh.
6933 - Fix includes in fingerprint.c
29dbde15 6934 - Fix scp progress bar bug again.
bcbf86ec 6935 - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of
736890c4 6936 David Rankin <drankin@bohemians.lexington.ky.us>
91b8065d 6937 - Added autoconf option to enable Kerberos 4 support (untested)
6938 - Added autoconf option to enable AFS support (untested)
6939 - Added autoconf option to enable S/Key support (untested)
6940 - Added autoconf option to enable TCP wrappers support (compiles OK)
beb43d31 6941 - Renamed BSD helper function files to bsd-*
bcbf86ec 6942 - Added tests for login and daemon and enable OpenBSD replacements for
caf3bc51 6943 when they are absent.
6944 - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu>
06479889 6945
2bd61362 694619991118
6947 - Merged OpenBSD CVS changes
6948 - [scp.c] foregroundproc() in scp
6949 - [sshconnect.h] include fingerprint.h
bcbf86ec 6950 - [sshd.c] bugfix: the log() for passwd-auth escaped during logging
2bd61362 6951 changes.
0c16a097 6952 - [ssh.1] Spell my name right.
2bd61362 6953 - Added openssh.com info to README
6954
f095fcc7 695519991117
6956 - Merged OpenBSD CVS changes
6957 - [ChangeLog.Ylonen] noone needs this anymore
6958 - [authfd.c] close-on-exec for auth-socket, ok deraadt
bcbf86ec 6959 - [hostfile.c]
6960 in known_hosts key lookup the entry for the bits does not need
6961 to match, all the information is contained in n and e. This
6962 solves the problem with buggy servers announcing the wrong
f095fcc7 6963 modulus length. markus and me.
bcbf86ec 6964 - [serverloop.c]
6965 bugfix: check for space if child has terminated, from:
f095fcc7 6966 iedowse@maths.tcd.ie
6967 - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c]
6968 [fingerprint.c fingerprint.h]
6969 rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>
6970 - [ssh-agent.1] typo
6971 - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@
bcbf86ec 6972 - [sshd.c]
f095fcc7 6973 force logging to stderr while loading private key file
6974 (lost while converting to new log-levels)
6975
4d195447 697619991116
6977 - Fix some Linux libc5 problems reported by Miles Wilson <mw@mctitle.com>
6978 - Merged OpenBSD CVS changes:
6979 - [auth-rh-rsa.c auth-rsa.c authfd.c authfd.h hostfile.c mpaux.c]
6980 [mpaux.h ssh-add.c ssh-agent.c ssh.h ssh.c sshd.c]
6981 the keysize of rsa-parameter 'n' is passed implizit,
6982 a few more checks and warnings about 'pretended' keysizes.
6983 - [cipher.c cipher.h packet.c packet.h sshd.c]
6984 remove support for cipher RC4
6985 - [ssh.c]
6986 a note for legay systems about secuity issues with permanently_set_uid(),
6987 the private hostkey and ptrace()
6988 - [sshconnect.c]
6989 more detailed messages about adding and checking hostkeys
6990
dad9a31e 699119991115
6992 - Merged OpenBSD CVS changes:
bcbf86ec 6993 - [ssh-add.c] change passphrase loop logic and remove ref to
dad9a31e 6994 $DISPLAY, ok niels
6995 - Changed to ssh-add.c broke askpass support. Revised it to be a little more
bcbf86ec 6996 modular.
dad9a31e 6997 - Revised autoconf support for enabling/disabling askpass support.
e7c0f9d5 6998 - Merged more OpenBSD CVS changes:
704b1659 6999 [auth-krb4.c]
7000 - disconnect if getpeername() fails
7001 - missing xfree(*client)
7002 [canohost.c]
7003 - disconnect if getpeername() fails
7004 - fix comment: we _do_ disconnect if ip-options are set
7005 [sshd.c]
7006 - disconnect if getpeername() fails
7007 - move checking of remote port to central place
7008 [auth-rhosts.c] move checking of remote port to central place
7009 [log-server.c] avoid extra fd per sshd, from millert@
7010 [readconf.c] print _all_ bad config-options in ssh(1), too
7011 [readconf.h] print _all_ bad config-options in ssh(1), too
7012 [ssh.c] print _all_ bad config-options in ssh(1), too
7013 [sshconnect.c] disconnect if getpeername() fails
e7c0f9d5 7014 - OpenBSD's changes to sshd.c broke the PAM stuff, re-merged it.
c75a1a66 7015 - Various small cleanups to bring diff (against OpenBSD) size down.
f601d847 7016 - Merged more Solaris compability from Marc G. Fournier
7017 <marc.fournier@acadiau.ca>
7018 - Wrote autoconf tests for __progname symbol
986a22ec 7019 - RPM spec file fixes from Jim Knoble <jmknoble@jmknoble.cx>
0c372277 7020 - Released 1.2pre12
7021
7022 - Another OpenBSD CVS update:
7023 - [ssh-keygen.1] fix .Xr
dad9a31e 7024
92da7197 702519991114
7026 - Solaris compilation fixes (still imcomplete)
7027
94f7bb9e 702819991113
dd092f97 7029 - Build patch from Niels Kristian Bech Jensen <nkbj@image.dk>
7030 - Don't install config files if they already exist
7031 - Fix inclusion of additional preprocessor directives from acconfig.h
94f7bb9e 7032 - Removed redundant inclusions of config.h
e9c75a39 7033 - Added 'Obsoletes' lines to RPM spec file
94f7bb9e 7034 - Merged OpenBSD CVS changes:
7035 - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels
bcbf86ec 7036 - [scp.c] fix overflow reported by damien@ibs.com.au: off_t
94f7bb9e 7037 totalsize, ok niels,aaron
bcbf86ec 7038 - Delay fork (-f option) in ssh until after port forwarded connections
94f7bb9e 7039 have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi>
b2344d54 7040 - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de>
7041 - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled
dd092f97 7042 - Tidied default config file some more
7043 - Revised Redhat initscript to fix bug: sshd (re)start would fail
7044 if executed from inside a ssh login.
94f7bb9e 7045
e35c1dc2 704619991112
7047 - Merged changes from OpenBSD CVS
7048 - [sshd.c] session_key_int may be zero
b4748e2f 7049 - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config]
bcbf86ec 7050 IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok
b4748e2f 7051 deraadt,millert
7052 - Brought default sshd_config more in line with OpenBSD's
547c9f30 7053 - Grab server in gnome-ssh-askpass (Debian bug #49872)
7054 - Released 1.2pre10
e35c1dc2 7055
8bc7973f 7056 - Added INSTALL documentation
6fa724bc 7057 - Merged yet more changes from OpenBSD CVS
7058 - [auth-rh-rsa.c auth-rhosts.c auth-rsa.c channels.c clientloop.c]
7059 [ssh.c ssh.h sshconnect.c sshd.c]
7060 make all access to options via 'extern Options options'
7061 and 'extern ServerOptions options' respectively;
7062 options are no longer passed as arguments:
7063 * make options handling more consistent
7064 * remove #include "readconf.h" from ssh.h
7065 * readconf.h is only included if necessary
7066 - [mpaux.c] clear temp buffer
7067 - [servconf.c] print _all_ bad options found in configfile
045672f9 7068 - Make ssh-askpass support optional through autoconf
59b0f0d4 7069 - Fix nasty division-by-zero error in scp.c
7070 - Released 1.2pre11
8bc7973f 7071
4cca272e 707219991111
7073 - Added (untested) Entropy Gathering Daemon (EGD) support
67d68e3a 7074 - Fixed /dev/urandom fd leak (Debian bug #49722)
5bbb5681 7075 - Merged OpenBSD CVS changes:
7076 - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
7077 - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
7078 - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
bcbf86ec 7079 - Fix integer overflow which was messing up scp's progress bar for large
3f1d9bcd 7080 file transfers. Fix submitted to OpenBSD developers. Report and fix
7081 from Kees Cook <cook@cpoint.net>
6a17f9c2 7082 - Merged more OpenBSD CVS changes:
bcbf86ec 7083 - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal()
6a17f9c2 7084 + krb-cleanup cleanup
7085 - [clientloop.c log-client.c log-server.c ]
7086 [readconf.c readconf.h servconf.c servconf.h ]
7087 [ssh.1 ssh.c ssh.h sshd.8]
7088 add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
7089 obsoletes QuietMode and FascistLogging in sshd.
e35c1dc2 7090 - [sshd.c] fix fatal/assert() bug reported by damien@ibs.com.au:
7091 allow session_key_int != sizeof(session_key)
7092 [this should fix the pre-assert-removal-core-files]
7093 - Updated default config file to use new LogLevel option and to improve
7094 readability
7095
f370266e 709619991110
67d68e3a 7097 - Merged several minor fixes:
f370266e 7098 - ssh-agent commandline parsing
7099 - RPM spec file now installs ssh setuid root
7100 - Makefile creates libdir
4cca272e 7101 - Merged beginnings of Solaris compability from Marc G. Fournier
7102 <marc.fournier@acadiau.ca>
f370266e 7103
d4f11b59 710419991109
7105 - Autodetection of SSL/Crypto library location via autoconf
7106 - Fixed location of ssh-askpass to follow autoconf
7107 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
7108 - Autodetection of RSAref library for US users
7109 - Minor doc updates
560557bb 7110 - Merged OpenBSD CVS changes:
7111 - [rsa.c] bugfix: use correct size for memset()
7112 - [sshconnect.c] warn if announced size of modulus 'n' != real size
f025becb 7113 - Added GNOME passphrase requestor (use --with-gnome-askpass)
d397b172 7114 - RPM build now creates subpackages
aa51e7cc 7115 - Released 1.2pre9
d4f11b59 7116
e1a9c08d 711719991108
7118 - Removed debian/ directory. This is now being maintained separately.
7119 - Added symlinks for slogin in RPM spec file
7120 - Fixed permissions on manpages in RPM spec file
7121 - Added references to required libraries in README file
7122 - Removed config.h.in from CVS
7123 - Removed pwdb support (better pluggable auth is provided by glibc)
7124 - Made PAM and requisite libdl optional
7125 - Removed lots of unnecessary checks from autoconf
7126 - Added support and autoconf test for openpty() function (Unix98 pty support)
7127 - Fix for scp not finding ssh if not installed as /usr/bin/ssh
7128 - Added TODO file
7129 - Merged parts of Debian patch From Phil Hands <phil@hands.com>:
7130 - Added ssh-askpass program
7131 - Added ssh-askpass support to ssh-add.c
7132 - Create symlinks for slogin on install
7133 - Fix "distclean" target in makefile
7134 - Added example for ssh-agent to manpage
7135 - Added support for PAM_TEXT_INFO messages
7136 - Disable internal /etc/nologin support if PAM enabled
7137 - Merged latest OpenBSD CVS changes:
5bae4ab8 7138 - [all] replace assert() with error, fatal or packet_disconnect
e1a9c08d 7139 - [sshd.c] don't send fail-msg but disconnect if too many authentication
7140 failures
e1a9c08d 7141 - [sshd.c] remove unused argument. ok dugsong
7142 - [sshd.c] typo
7143 - [rsa.c] clear buffers used for encryption. ok: niels
7144 - [rsa.c] replace assert() with error, fatal or packet_disconnect
ade6fccd 7145 - [auth-krb4.c] remove unused argument. ok dugsong
e1a9c08d 7146 - Fixed coredump after merge of OpenBSD rsa.c patch
9010d60a 7147 - Released 1.2pre8
e1a9c08d 7148
3028328e 714919991102
7150 - Merged change from OpenBSD CVS
7151 - One-line cleanup in sshd.c
7152
474832c5 715319991030
7154 - Integrated debian package support from Dan Brosemer <odin@linuxfreak.com>
69256d9d 7155 - Merged latest updates for OpenBSD CVS:
7156 - channels.[ch] - remove broken x11 fix and document istate/ostate
7157 - ssh-agent.c - call setsid() regardless of argv[]
7158 - ssh.c - save a few lines when disabling rhosts-{rsa-}auth
7159 - Documentation cleanups
7160 - Renamed README -> README.Ylonen
7161 - Renamed README.openssh ->README
474832c5 7162
339660f6 716319991029
7164 - Renamed openssh* back to ssh* at request of Theo de Raadt
7165 - Incorporated latest changes from OpenBSD's CVS
7166 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
7167 - Integrated PAM env patch from Nalin Dahyabhai <nalin.dahyabhai@pobox.com>
549b3eed 7168 - Make distclean now removed configure script
7169 - Improved PAM logging
7170 - Added some debug() calls for PAM
4ecd19ea 7171 - Removed redundant subdirectories
bcbf86ec 7172 - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for
4ecd19ea 7173 building on Debian.
242588e6 7174 - Fixed off-by-one error in PAM env patch
7175 - Released 1.2pre6
339660f6 7176
5881cd60 717719991028
7178 - Further PAM enhancements.
7179 - Much cleaner
7180 - Now uses account and session modules for all logins.
7181 - Integrated patch from Dan Brosemer <odin@linuxfreak.com>
7182 - Build fixes
7183 - Autoconf
7184 - Change binary names to open*
7185 - Fixed autoconf script to detect PAM on RH6.1
7186 - Added tests for libpwdb, and OpenBSD functions to autoconf
221395b3 7187 - Released 1.2pre4
fca82d2e 7188
7189 - Imported latest OpenBSD CVS code
7190 - Updated README.openssh
93f04616 7191 - Released 1.2pre5
fca82d2e 7192
5881cd60 719319991027
7194 - Adapted PAM patch.
7195 - Released 1.0pre2
7196
7197 - Excised my buggy replacements for strlcpy and mkdtemp
7198 - Imported correct OpenBSD strlcpy and mkdtemp routines.
7199 - Reduced arc4random_stir entropy read to 32 bytes (256 bits)
7200 - Picked up correct version number from OpenBSD
7201 - Added sshd.pam PAM configuration file
7202 - Added sshd.init Redhat init script
7203 - Added openssh.spec RPM spec file
7204 - Released 1.2pre3
7205
720619991026
7207 - Fixed include paths of OpenSSL functions
7208 - Use OpenSSL MD5 routines
7209 - Imported RC4 code from nanocrypt
7210 - Wrote replacements for OpenBSD arc4random* functions
7211 - Wrote replacements for strlcpy and mkdtemp
7212 - Released 1.0pre1
0b202697 7213
7214$Id$
git-cvsimport mirror of OpenSSH
This page took 1.477736 seconds and 5 git commands to generate.