]> andersk Git - openssh.git/blame - ChangeLog
- (dtucker) [cleanup.c] Since config.h defines _LARGE_FILES on AIX, including
[openssh.git] / ChangeLog
CommitLineData
14e980ef 120060724
2 - (djm) OpenBSD CVS Sync
3 - jmc@cvs.openbsd.org 2006/07/12 13:39:55
4 [sshd_config.5]
5 - new sentence, new line
6 - s/The the/The/
7 - kill a bad comma
c8dfff33 8 - stevesk@cvs.openbsd.org 2006/07/12 22:28:52
742bee8c 9 [auth-options.c canohost.c channels.c includes.h readconf.c]
10 [servconf.c ssh-keyscan.c ssh.c sshconnect.c sshd.c]
c8dfff33 11 move #include <netdb.h> out of includes.h; ok djm@
bcaab305 12 - stevesk@cvs.openbsd.org 2006/07/12 22:42:32
13 [includes.h ssh.c ssh-rand-helper.c]
14 move #include <stddef.h> out of includes.h
d2a69816 15 - stevesk@cvs.openbsd.org 2006/07/14 01:15:28
16 [monitor_wrap.h]
17 don't need incompletely-typed 'struct passwd' now with
18 #include <pwd.h>; ok markus@
5188ba17 19 - stevesk@cvs.openbsd.org 2006/07/17 01:31:10
20 [authfd.c authfile.c channels.c cleanup.c clientloop.c groupaccess.c]
21 [includes.h log.c misc.c msg.c packet.c progressmeter.c readconf.c]
22 [readpass.c scp.c servconf.c sftp-client.c sftp-server.c sftp.c]
23 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh.c]
24 [sshconnect.c sshlogin.c sshpty.c uidswap.c]
25 move #include <unistd.h> out of includes.h
774de098 26 - dtucker@cvs.openbsd.org 2006/07/17 12:02:24
27 [auth-options.c]
28 Use '\0' rather than 0 to terminates strings; ok djm@
2fefbadf 29 - dtucker@cvs.openbsd.org 2006/07/17 12:06:00
30 [channels.c channels.h servconf.c sshd_config.5]
31 Add PermitOpen directive to sshd_config which is equivalent to the
32 "permitopen" key option. Allows server admin to allow TCP port
33 forwarding only two specific host/port pairs. Useful when combined
34 with Match.
35 If permitopen is used in both sshd_config and a key option, both
36 must allow a given connection before it will be permitted.
37 Note that users can still use external forwarders such as netcat,
38 so to be those must be controlled too for the limits to be effective.
39 Feedback & ok djm@, man page corrections & ok jmc@.
f22506ff 40 - jmc@cvs.openbsd.org 2006/07/18 07:50:40
41 [sshd_config.5]
42 tweak; ok dtucker
578d2b99 43 - jmc@cvs.openbsd.org 2006/07/18 07:56:28
44 [scp.1]
45 replace DIAGNOSTICS with .Ex;
874d319b 46 - jmc@cvs.openbsd.org 2006/07/18 08:03:09
47 [ssh-agent.1 sshd_config.5]
48 mark up angle brackets;
4895f836 49 - dtucker@cvs.openbsd.org 2006/07/18 08:22:23
50 [sshd_config.5]
51 Clarify description of Match, with minor correction from jmc@
62e12ffe 52 - stevesk@cvs.openbsd.org 2006/07/18 22:27:55
53 [dh.c]
54 remove unneeded includes; ok djm@
691712e0 55 - dtucker@cvs.openbsd.org 2006/07/19 08:56:41
56 [servconf.c sshd_config.5]
57 Add support for X11Forwaring, X11DisplayOffset and X11UseLocalhost to
58 Match. ok djm@
e7259e8d 59 - dtucker@cvs.openbsd.org 2006/07/19 13:07:10
60 [servconf.c servconf.h session.c sshd.8 sshd_config sshd_config.5]
61 Add ForceCommand keyword to sshd_config, equivalent to the "command="
62 key option, man page entry and example in sshd_config.
63 Feedback & ok djm@, man page corrections & ok jmc@
67514848 64 - stevesk@cvs.openbsd.org 2006/07/20 15:26:15
65 [auth1.c serverloop.c session.c sshconnect2.c]
66 missed some needed #include <unistd.h> when KERBEROS5=no; issue from
67 massimo@cedoc.mo.it
ea46e550 68 - dtucker@cvs.openbsd.org 2006/07/21 12:43:36
69 [channels.c channels.h servconf.c servconf.h sshd_config.5]
70 Make PermitOpen take a list of permitted ports and act more like most
71 other keywords (ie the first match is the effective setting). This
72 also makes it easier to override a previously set PermitOpen. ok djm@
ebb90778 73 - stevesk@cvs.openbsd.org 2006/07/21 21:13:30
74 [channels.c]
75 more ARGSUSED (lint) for dispatch table-driven functions; ok djm@
c88c3fb9 76 - stevesk@cvs.openbsd.org 2006/07/21 21:26:55
77 [progressmeter.c]
78 ARGSUSED for signal handler
b0f6943a 79 - stevesk@cvs.openbsd.org 2006/07/22 19:08:54
80 [includes.h moduli.c progressmeter.c scp.c sftp-common.c]
81 [sftp-server.c ssh-agent.c sshlogin.c]
82 move #include <time.h> out of includes.h
00146caa 83 - stevesk@cvs.openbsd.org 2006/07/22 20:48:23
84 [atomicio.c auth-options.c auth-passwd.c auth-rhosts.c auth-rsa.c]
85 [auth.c auth1.c auth2-chall.c auth2-hostbased.c auth2-passwd.c auth2.c]
86 [authfd.c authfile.c bufaux.c bufbn.c buffer.c canohost.c channels.c]
87 [cipher-3des1.c cipher-bf1.c cipher-ctr.c cipher.c clientloop.c]
88 [compat.c deattack.c dh.c dns.c gss-genr.c gss-serv.c hostfile.c]
89 [includes.h kex.c kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c log.c]
90 [mac.c match.c md-sha256.c misc.c moduli.c monitor.c monitor_fdpass.c]
91 [monitor_mm.c monitor_wrap.c msg.c nchan.c packet.c rsa.c]
92 [progressmeter.c readconf.c readpass.c scp.c servconf.c serverloop.c]
93 [session.c sftp-client.c sftp-common.c sftp-glob.c sftp-server.c sftp.c]
94 [ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c]
95 [ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c sshconnect2.c]
96 [sshd.c sshlogin.c sshpty.c ttymodes.c uidswap.c xmalloc.c]
97 move #include <string.h> out of includes.h
519fc2b7 98 - stevesk@cvs.openbsd.org 2006/07/23 01:11:05
99 [auth.h dispatch.c kex.h sftp-client.c]
100 #include <signal.h> for sig_atomic_t; need this prior to <sys/param.h>
101 move
28cb0a43 102 - (djm) [acss.c auth-krb5.c auth-options.c auth-pam.c auth-shadow.c]
103 [canohost.c channels.c cipher-acss.c defines.h dns.c gss-genr.c]
104 [gss-serv-krb5.c gss-serv.c log.h loginrec.c logintest.c readconf.c]
105 [servconf.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c]
106 [ssh.c sshconnect.c sshd.c openbsd-compat/bindresvport.c]
107 [openbsd-compat/bsd-arc4random.c openbsd-compat/bsd-misc.c]
108 [openbsd-compat/getrrsetbyname.c openbsd-compat/glob.c]
109 [openbsd-compat/mktemp.c openbsd-compat/port-linux.c]
110 [openbsd-compat/port-tun.c openbsd-compat/readpassphrase.c]
111 [openbsd-compat/setproctitle.c openbsd-compat/xmmap.c]
112 make the portable tree compile again - sprinkle unistd.h and string.h
113 back in. Don't redefine __unused, as it turned out to be used in
114 headers on Linux, and replace its use in auth-pam.c with ARGSUSED
ba1e6121 115 - (djm) [openbsd-compat/glob.c]
116 Move get_arg_max() into the ifdef HAVE_GLOB block so that it compiles
117 on OpenBSD (or other platforms with a decent glob implementation) with
118 -Werror
25523747 119 - (djm) [uuencode.c]
120 Add resolv.h, is it contains the prototypes for __b64_ntop/__b64_pton on
121 some platforms
9b09381d 122 - (djm) [session.c]
123 fix compile error with -Werror -Wall: 'path' is only used in
124 do_setup_env() if HAVE_LOGIN_CAP is not defined
e204f3ee 125 - (djm) [openbsd-compat/basename.c openbsd-compat/bsd-closefrom.c]
126 [openbsd-compat/bsd-cray.c openbsd-compat/bsd-openpty.c]
127 [openbsd-compat/bsd-snprintf.c openbsd-compat/fake-rfc2553.c]
128 [openbsd-compat/port-aix.c openbsd-compat/port-irix.c]
129 [openbsd-compat/rresvport.c]
130 These look to need string.h and/or unistd.h (based on a grep for function
131 names)
f40c8634 132 - (djm) [Makefile.in]
133 Remove generated openbsd-compat/regress/Makefile in distclean target
e7c5b206 134 - (djm) [regress/Makefile regress/agent-getpeereid.sh regress/cfgmatch.sh]
135 [regress/cipher-speed.sh regress/forcecommand.sh regress/forwarding.sh]
136 Sync regress tests to -current; include dtucker@'s new cfgmatch and
137 forcecommand tests. Add cipher-speed.sh test (not linked in yet)
30872a12 138 - (dtucker) [cleanup.c] Since config.h defines _LARGE_FILES on AIX, including
139 system headers before defines.h will cause conflicting definitions.
e204f3ee 140
4352744e 14120060713
142 - (dtucker) [auth-krb5.c auth-pam.c] Still more errno.h
143
956d6743 14420060712
294d3ca5 145 - (dtucker) [configure.ac defines.h] Only define SHUT_RD (and friends) and
146 O_NONBLOCK if they're really needed. Fixes build errors on HP-UX, old
147 Linuxes and probably more.
71f4c727 148 - (dtucker) [configure.ac] OpenBSD needs <sys/types.h> before <sys/socket.h>
149 for SHUT_RD.
f9d5c000 150 - (dtucker) [openbsd-compat/port-tun.c] OpenBSD needs <netinet/in.h> before
151 <netinet/ip.h>.
a773acf7 152 - (dtucker) OpenBSD CVS Sync
153 - stevesk@cvs.openbsd.org 2006/07/10 16:01:57
154 [sftp-glob.c sftp-common.h sftp.c]
155 buffer.h only needed in sftp-common.h and remove some unneeded
156 user includes; ok djm@
a0bca6ed 157 - jmc@cvs.openbsd.org 2006/07/10 16:04:21
158 [sshd.8]
159 s/and and/and/
4c72fcfd 160 - stevesk@cvs.openbsd.org 2006/07/10 16:37:36
161 [readpass.c log.h scp.c fatal.c xmalloc.c includes.h ssh-keyscan.c misc.c
162 auth.c packet.c log.c]
163 move #include <stdarg.h> out of includes.h; ok markus@
0ad62016 164 - dtucker@cvs.openbsd.org 2006/07/11 10:12:07
165 [ssh.c]
166 Only copy the part of environment variable that we actually use. Prevents
167 ssh bailing when SendEnv is used and an environment variable with a really
168 long value exists. ok djm@
42ea6f5e 169 - markus@cvs.openbsd.org 2006/07/11 18:50:48
170 [clientloop.c ssh.1 ssh.c channels.c ssh_config.5 readconf.h session.c
171 channels.h readconf.c]
172 add ExitOnForwardFailure: terminate the connection if ssh(1)
173 cannot set up all requested dynamic, local, and remote port
174 forwardings. ok djm, dtucker, stevesk, jmc
028094f4 175 - stevesk@cvs.openbsd.org 2006/07/11 20:07:25
176 [scp.c auth.c monitor.c serverloop.c sftp-server.c sshpty.c readpass.c
177 sshd.c monitor_wrap.c monitor_fdpass.c ssh-agent.c ttymodes.c atomicio.c
178 includes.h session.c sshlogin.c monitor_mm.c packet.c sshconnect2.c
179 sftp-client.c nchan.c clientloop.c sftp.c misc.c canohost.c channels.c
180 ssh-keygen.c progressmeter.c uidswap.c msg.c readconf.c sshconnect.c]
181 move #include <errno.h> out of includes.h; ok markus@
00c8971b 182 - stevesk@cvs.openbsd.org 2006/07/11 20:16:43
183 [ssh.c]
184 cast asterisk field precision argument to int to remove warning;
185 ok markus@
dd984467 186 - stevesk@cvs.openbsd.org 2006/07/11 20:27:56
187 [authfile.c ssh.c]
188 need <errno.h> here also (it's also included in <openssl/err.h>)
d231781a 189 - dtucker@cvs.openbsd.org 2006/07/12 11:34:58
190 [sshd.c servconf.h servconf.c sshd_config.5 auth.c]
191 Add support for conditional directives to sshd_config via a "Match"
192 keyword, which works similarly to the "Host" directive in ssh_config.
193 Lines after a Match line override the default set in the main section
194 if the condition on the Match line is true, eg
195 AllowTcpForwarding yes
196 Match User anoncvs
197 AllowTcpForwarding no
198 will allow port forwarding by all users except "anoncvs".
199 Currently only a very small subset of directives are supported.
200 ok djm@
fec71b2f 201 - (dtucker) [loginrec.c openbsd-compat/xmmap.c openbsd-compat/bindresvport.c
202 openbsd-compat/glob.c openbsd-compat/mktemp.c openbsd-compat/port-tun.c
203 openbsd-compat/readpassphrase.c openbsd-compat/strtonum.c] Include <errno.h>.
baede55a 204 - (dtucker) [openbsd-compat/setproctitle.c] Include stdarg.h.
403a29ac 205 - (dtucker) [ssh-keyscan.c ssh-rand-helper.c] More errno.h here too.
5f8747dc 206 - (dtucker) [openbsd-compat/openbsd-compat.h] v*printf needs stdarg.h.
4f4b7d4d 207 - (dtucker) [openbsd-compat/bsd-asprintf.c openbsd-compat/port-aix.c
208 openbsd-compat/rresvport.c] More errno.h.
209
37259a8e 21020060711
211 - (dtucker) [configure.ac ssh-keygen.c openbsd-compat/bsd-openpty.c
212 openbsd-compat/daemon.c] Add includes needed by open(2). Conditionally
213 include paths.h. Fixes build error on Solaris.
2edd133e 214 - (dtucker) [entropy.c] More fcntl.h, this time on AIX (and probably
215 others).
37259a8e 216
44064ac4 21720060710
218 - (dtucker) [INSTALL] New autoconf version: 2.60.
e5c76324 219 - OpenBSD CVS Sync
220 - djm@cvs.openbsd.org 2006/06/14 10:50:42
221 [sshconnect.c]
222 limit the number of pre-banner characters we will accept; ok markus@
9f1090be 223 - djm@cvs.openbsd.org 2006/06/26 10:36:15
224 [clientloop.c]
225 mention optional bind_address in runtime port forwarding setup
226 command-line help. patch from santhi.amirta AT gmail.com
06fa4ac1 227 - stevesk@cvs.openbsd.org 2006/07/02 17:12:58
228 [ssh.1 ssh.c ssh_config.5 sshd_config.5]
229 more details and clarity for tun(4) device forwarding; ok and help
230 jmc@
6955279c 231 - stevesk@cvs.openbsd.org 2006/07/02 18:36:47
232 [gss-serv-krb5.c gss-serv.c]
233 no "servconf.h" needed here
234 (gss-serv-krb5.c change not applied, portable needs the server options)
16fbe330 235 - stevesk@cvs.openbsd.org 2006/07/02 22:45:59
236 [groupaccess.c groupaccess.h includes.h session.c sftp-common.c sshpty.c]
237 move #include <grp.h> out of includes.h
238 (portable needed uidswap.c too)
33f13fa5 239 - stevesk@cvs.openbsd.org 2006/07/02 23:01:55
240 [clientloop.c ssh.1]
241 use -KR[bind_address:]port here; ok djm@
28015df4 242 - stevesk@cvs.openbsd.org 2006/07/03 08:54:20
243 [includes.h ssh.c sshconnect.c sshd.c]
244 move #include "version.h" out of includes.h; ok markus@
319d6b41 245 - stevesk@cvs.openbsd.org 2006/07/03 17:59:32
246 [channels.c includes.h]
247 move #include <arpa/inet.h> out of includes.h; old ok djm@
248 (portable needed session.c too)
9794d008 249 - stevesk@cvs.openbsd.org 2006/07/05 02:42:09
250 [canohost.c hostfile.c includes.h misc.c packet.c readconf.c]
251 [serverloop.c sshconnect.c uuencode.c]
252 move #include <netinet/in.h> out of includes.h; ok deraadt@
253 (also ssh-rand-helper.c logintest.c loginrec.c)
d66ce1a1 254 - djm@cvs.openbsd.org 2006/07/06 10:47:05
255 [servconf.c servconf.h session.c sshd_config.5]
256 support arguments to Subsystem commands; ok markus@
a13880bb 257 - djm@cvs.openbsd.org 2006/07/06 10:47:57
258 [sftp-server.8 sftp-server.c]
259 add commandline options to enable logging of transactions; ok markus@
b1842393 260 - stevesk@cvs.openbsd.org 2006/07/06 16:03:53
261 [auth-options.c auth-options.h auth-passwd.c auth-rh-rsa.c]
262 [auth-rhosts.c auth-rsa.c auth.c auth.h auth2-hostbased.c]
263 [auth2-pubkey.c auth2.c includes.h misc.c misc.h monitor.c]
264 [monitor_wrap.c monitor_wrap.h scp.c serverloop.c session.c]
265 [session.h sftp-common.c ssh-add.c ssh-keygen.c ssh-keysign.c]
266 [ssh.c sshconnect.c sshconnect.h sshd.c sshpty.c sshpty.h uidswap.c]
267 [uidswap.h]
268 move #include <pwd.h> out of includes.h; ok markus@
0cbe25f0 269 - stevesk@cvs.openbsd.org 2006/07/06 16:22:39
270 [ssh-keygen.c]
271 move #include "dns.h" up
76275092 272 - stevesk@cvs.openbsd.org 2006/07/06 17:36:37
273 [monitor_wrap.h]
274 typo in comment
5b04a8bf 275 - stevesk@cvs.openbsd.org 2006/07/08 21:47:12
276 [authfd.c canohost.c clientloop.c dns.c dns.h includes.h]
277 [monitor_fdpass.c nchan.c packet.c servconf.c sftp.c ssh-agent.c]
278 [ssh-keyscan.c ssh.c sshconnect.h sshd.c sshlogin.h]
279 move #include <sys/socket.h> out of includes.h
9305512d 280 - stevesk@cvs.openbsd.org 2006/07/08 21:48:53
281 [monitor.c session.c]
282 missed these from last commit:
283 move #include <sys/socket.h> out of includes.h
ca1df159 284 - stevesk@cvs.openbsd.org 2006/07/08 23:30:06
285 [log.c]
286 move user includes after /usr/include files
d3221cca 287 - stevesk@cvs.openbsd.org 2006/07/09 15:15:11
288 [auth2-none.c authfd.c authfile.c includes.h misc.c monitor.c]
289 [readpass.c scp.c serverloop.c sftp-client.c sftp-server.c]
290 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keysign.c ssh.c sshd.c]
291 [sshlogin.c sshpty.c]
292 move #include <fcntl.h> out of includes.h
657939aa 293 - stevesk@cvs.openbsd.org 2006/07/09 15:27:59
294 [ssh-add.c]
295 use O_RDONLY vs. 0 in open(); no binary change
43bc2dc9 296 - djm@cvs.openbsd.org 2006/07/10 11:24:54
297 [sftp-server.c]
298 remove optind - it isn't used here
26ddd377 299 - djm@cvs.openbsd.org 2006/07/10 11:25:53
300 [sftp-server.c]
301 don't log variables that aren't yet set
22bbb3e6 302 - (djm) [loginrec.c ssh-rand-helper.c sshd.c openbsd-compat/glob.c]
303 [openbsd-compat/mktemp.c openbsd-compat/openbsd-compat.h]
304 [openbsd-compat/port-tun.c openbsd-compat/readpassphrase.c]
305 [openbsd-compat/xcrypt.c] Fix includes.h fallout, mainly fcntl.h
1879b184 306 - OpenBSD CVS Sync
307 - djm@cvs.openbsd.org 2006/07/10 12:03:20
308 [scp.c]
309 duplicate argv at the start of main() because it gets modified later;
310 pointed out by deraadt@ ok markus@
a217e418 311 - djm@cvs.openbsd.org 2006/07/10 12:08:08
312 [channels.c]
313 fix misparsing of SOCKS 5 packets that could result in a crash;
314 reported by mk@ ok markus@
d4530052 315 - dtucker@cvs.openbsd.org 2006/07/10 12:46:51
316 [misc.c misc.h sshd.8 sshconnect.c]
317 Add port identifier to known_hosts for non-default ports, based originally
318 on a patch from Devin Nate in bz#910.
319 For any connection using the default port or using a HostKeyAlias the
320 format is unchanged, otherwise the host name or address is enclosed
321 within square brackets in the same format as sshd's ListenAddress.
322 Tested by many, ok markus@.
9b6edf98 323 - (dtucker) [openbsd-compat/openbsd-compat.h] Need to include <sys/socket.h>
324 for struct sockaddr on platforms that use the fake-rfc stuff.
44064ac4 325
e7479666 32620060706
327 - (dtucker) [configure.ac] Try AIX blibpath test in different order when
328 compiling with gcc. gcc 4.1.x will accept (but ignore) -b flags so
329 configure would not select the correct libpath linker flags.
90f321a4 330 - (dtucker) [INSTALL] A bit more info on autoconf.
e7479666 331
e5c27607 33220060705
333 - (dtucker) [ssh-rand-helper.c] Don't exit if mkdir fails because the
334 target already exists.
335
202c6095 33620060630
337 - (dtucker) [openbsd-compat/openbsd-compat.h] SNPRINTF_CONST for snprintf
338 declaration too. Patch from russ at sludge.net.
0bbb4f75 339 - (dtucker) [openbsd-compat/getrrsetbyname.c] Undef _res before defining it,
340 prevents warnings on platforms where _res is in the system headers.
10f1064f 341 - (dtucker) [INSTALL] Bug #1202: Note when autoconf is required and which
342 version.
202c6095 343
ecd9ec09 34420060627
345 - (dtucker) [configure.ac] Bug #1203: Add missing '[', which causes problems
346 with autoconf 2.60. Patch from vapier at gentoo.org.
347
9c04d67d 34820060625
349 - (dtucker) [channels.c serverloop.c] Apply the bug #1102 workaround to ptys
350 only, otherwise sshd can hang exiting non-interactive sessions.
351
795aa5f5 35220060624
353 - (dtucker) [configure.ac] Bug #1193: Define PASSWD_NEEDS_USERNAME on Solaris.
354 Works around limitation in Solaris' passwd program for changing passwords
355 where the username is longer than 8 characters. ok djm@
24a87055 356 - (dtucker) [serverloop.c] Get ifdef/ifndef the right way around for the bug
357 #1102 workaround.
795aa5f5 358
e02505e2 35920060623
360 - (dtucker) [README.platform configure.ac openbsd-compat/port-tun.c] Add
361 tunnel support for Mac OS X/Darwin via a third-party tun driver. Patch
362 from reyk@, tested by anil@
ea8c44d9 363 - (dtucker) [channels.c configure.ac serverloop.c] Bug #1102: Around AIX
364 4.3.3 ML3 or so, the AIX pty layer starting passing zero-length writes
365 on the pty slave as zero-length reads on the pty master, which sshd
366 interprets as the descriptor closing. Since most things don't do zero
367 length writes this rarely matters, but occasionally it happens, and when
368 it does the SSH pty session appears to hang, so we add a special case for
369 this condition. ok djm@
e02505e2 370
6cba36fd 37120060613
ae410a09 372 - (djm) [getput.h] This file has been replaced by functions in misc.c
6cba36fd 373 - OpenBSD CVS Sync
374 - djm@cvs.openbsd.org 2006/05/08 10:49:48
375 [sshconnect2.c]
376 uint32_t -> u_int32_t (which we use everywhere else)
377 (Id sync only - portable already had this)
3173dd0d 378 - markus@cvs.openbsd.org 2006/05/16 09:00:00
379 [clientloop.c]
380 missing free; from Kylene Hall
2b8dc5e3 381 - markus@cvs.openbsd.org 2006/05/17 12:43:34
382 [scp.c sftp.c ssh-agent.c ssh-keygen.c sshconnect.c]
383 fix leak; coverity via Kylene Jo Hall
18c60a0b 384 - miod@cvs.openbsd.org 2006/05/18 21:27:25
385 [kexdhc.c kexgexc.c]
386 paramter -> parameter
07a80cea 387 - dtucker@cvs.openbsd.org 2006/05/29 12:54:08
388 [ssh_config.5]
389 Add gssapi-with-mic to PreferredAuthentications default list; ok jmc
aa195106 390 - dtucker@cvs.openbsd.org 2006/05/29 12:56:33
391 [ssh_config]
f127d8a4 392 Add GSSAPIAuthentication and GSSAPIDelegateCredentials to examples in
393 sample ssh_config. ok markus@
394 - jmc@cvs.openbsd.org 2006/05/29 16:10:03
395 [ssh_config.5]
396 oops - previous was too long; split the list of auths up
ed277f5e 397 - mk@cvs.openbsd.org 2006/05/30 11:46:38
398 [ssh-add.c]
399 Sync usage() with man page and reality.
400 ok deraadt dtucker
401 - jmc@cvs.openbsd.org 2006/05/29 16:13:23
402 [ssh.1]
403 add GSSAPI to the list of authentication methods supported;
f9579ee9 404 - mk@cvs.openbsd.org 2006/05/30 11:46:38
405 [ssh-add.c]
406 Sync usage() with man page and reality.
407 ok deraadt dtucker
211f229e 408 - markus@cvs.openbsd.org 2006/06/01 09:21:48
409 [sshd.c]
410 call get_remote_ipaddr() early; fixes logging after client disconnects;
411 report mpf@; ok dtucker@
82aeee5d 412 - markus@cvs.openbsd.org 2006/06/06 10:20:20
413 [readpass.c sshconnect.c sshconnect.h sshconnect2.c uidswap.c]
414 replace remaining setuid() calls with permanently_set_uid() and
415 check seteuid() return values; report Marcus Meissner; ok dtucker djm
3c33c1b6 416 - markus@cvs.openbsd.org 2006/06/08 14:45:49
417 [readpass.c sshconnect.c sshconnect2.c uidswap.c uidswap.h]
418 do not set the gid, noted by solar; ok djm
e1ff5445 419 - djm@cvs.openbsd.org 2006/06/13 01:18:36
420 [ssh-agent.c]
421 always use a format string, even when printing a constant
422 - djm@cvs.openbsd.org 2006/06/13 02:17:07
423 [ssh-agent.c]
424 revert; i am on drugs. spotted by alexander AT beard.se
6cba36fd 425
2ae7f715 42620060521
427 - (dtucker) [auth.c monitor.c] Now that we don't log from both the monitor
428 and slave, we can remove the special-case handling in the audit hook in
429 auth_log.
430
43120060517
aee28e67 432 - (dtucker) [ssh-rand-helper.c] Check return code of mkdir and fix file
433 pointer leak. From kjhall at us.ibm.com, found by coverity.
434
2ae7f715 43520060515
a048aeba 436 - (dtucker) [openbsd-compat/getrrsetbyname.c] Use _compat_res instead of
437 _res, prevents problems on some platforms that have _res as a global but
438 don't have getrrsetbyname(), eg IRIX 5.3. Found and tested by
439 georg.schwarz at freenet.de, ok djm@.
143a79db 440 - (dtucker) [defines.h] Find a value for IOV_MAX or use a conservative
441 default. Patch originally from tim@, ok djm
5aa56df0 442 - (dtucker) [auth-pam.c] Bug #1188: pass result of do_pam_account back and
443 do not allow kbdint again after the PAM account check fails. ok djm@
a048aeba 444
2ae7f715 44520060506
689d3f77 446 - (dtucker) OpenBSD CVS Sync
fc231518 447 - dtucker@cvs.openbsd.org 2006/04/25 08:02:27
448 [authfile.c authfile.h sshconnect2.c ssh.c sshconnect1.c]
449 Prevent ssh from trying to open private keys with bad permissions more than
450 once or prompting for their passphrases (which it subsequently ignores
451 anyway), similar to a previous change in ssh-add. bz #1186, ok djm@
397d64d2 452 - djm@cvs.openbsd.org 2006/05/04 14:55:23
453 [dh.c]
454 tighter DH exponent checks here too; feedback and ok markus@
a1361c4b 455 - djm@cvs.openbsd.org 2006/04/01 05:37:46
456 [OVERVIEW]
457 $OpenBSD$ in here too
9188927d 458 - dtucker@cvs.openbsd.org 2006/05/06 08:35:40
459 [auth-krb5.c]
460 Add $OpenBSD$ in comment here too
fc231518 461
01d35895 46220060504
463 - (dtucker) [auth-pam.c groupaccess.c monitor.c monitor_wrap.c scard-opensc.c
464 session.c ssh-rand-helper.c sshd.c openbsd-compat/bsd-cygwin_util.c
465 openbsd-compat/setproctitle.c] Convert malloc(foo*bar) -> calloc(foo,bar)
466 in Portable-only code; since calloc zeros, remove now-redundant memsets.
467 Also add a couple of sanity checks. With & ok djm@
468
7ca4010c 46920060503
470 - (dtucker) [packet.c] Remove in_systm.h since it's also in includes.h
471 and double including it on IRIX 5.3 causes problems. From Georg Schwarz,
472 "no objections" tim@
473
ac93e676 47420060423
475 - (djm) OpenBSD CVS Sync
476 - deraadt@cvs.openbsd.org 2006/04/01 05:42:20
477 [scp.c]
478 minimal lint cleanup (unused crud, and some size_t); ok djm
c0a8e7bb 479 - djm@cvs.openbsd.org 2006/04/01 05:50:29
480 [scp.c]
481 xasprintification; ok deraadt@
5fe9ca7d 482 - djm@cvs.openbsd.org 2006/04/01 05:51:34
483 [atomicio.c]
484 ANSIfy; requested deraadt@
485 - dtucker@cvs.openbsd.org 2006/04/02 08:34:52
486 [ssh-keysign.c]
487 sessionid can be 32 bytes now too when sha256 kex is used; ok djm@
9c3c8eb1 488 - djm@cvs.openbsd.org 2006/04/03 07:10:38
489 [gss-genr.c]
490 GSSAPI buffers shouldn't be nul-terminated, spotted in bugzilla #1066
491 by dleonard AT vintela.com. use xasprintf() to simplify code while in
492 there; "looks right" deraadt@
69d9d413 493 - djm@cvs.openbsd.org 2006/04/16 00:48:52
494 [buffer.c buffer.h channels.c]
495 Fix condition where we could exit with a fatal error when an input
496 buffer became too large and the remote end had advertised a big window.
497 The problem was a mismatch in the backoff math between the channels code
498 and the buffer code, so make a buffer_check_alloc() function that the
499 channels code can use to propsectivly check whether an incremental
500 allocation will succeed. bz #1131, debugged with the assistance of
501 cove AT wildpackets.com; ok dtucker@ deraadt@
68d86b37 502 - djm@cvs.openbsd.org 2006/04/16 00:52:55
503 [atomicio.c atomicio.h]
504 introduce atomiciov() function that wraps readv/writev to retry
505 interrupted transfers like atomicio() does for read/write;
506 feedback deraadt@ dtucker@ stevesk@ ok deraadt@
2c4369de 507 - djm@cvs.openbsd.org 2006/04/16 00:54:10
508 [sftp-client.c]
509 avoid making a tiny 4-byte write to send the packet length of sftp
510 commands, which would result in a separate tiny packet on the wire by
511 using atomiciov(writev, ...) to write the length and the command in one
512 pass; ok deraadt@
7bccebd0 513 - djm@cvs.openbsd.org 2006/04/16 07:59:00
514 [atomicio.c]
515 reorder sanity test so that it cannot dereference past the end of the
516 iov array; well spotted canacar@!
b0a892b2 517 - dtucker@cvs.openbsd.org 2006/04/18 10:44:28
71544c3d 518 [bufaux.c bufbn.c Makefile.in]
b0a892b2 519 Move Buffer bignum functions into their own file, bufbn.c. This means
520 that sftp and sftp-server (which use the Buffer functions in bufaux.c
521 but not the bignum ones) no longer need to be linked with libcrypto.
522 ok markus@
50394f26 523 - djm@cvs.openbsd.org 2006/04/20 09:27:09
524 [auth.h clientloop.c dispatch.c dispatch.h kex.h]
525 replace the last non-sig_atomic_t flag used in a signal handler with a
526 sig_atomic_t, unfortunately with some knock-on effects in other (non-
527 signal) contexts in which it is used; ok markus@
4439dde1 528 - markus@cvs.openbsd.org 2006/04/20 09:47:59
529 [sshconnect.c]
530 simplify; ok djm@
6e97fe1d 531 - djm@cvs.openbsd.org 2006/04/20 21:53:44
532 [includes.h session.c sftp.c]
533 Switch from using pipes to socketpairs for communication between
534 sftp/scp and ssh, and between sshd and its subprocesses. This saves
535 a file descriptor per session and apparently makes userland ppp over
536 ssh work; ok markus@ deraadt@ (ID Sync only - portable makes this
537 decision on a per-platform basis)
40402a68 538 - djm@cvs.openbsd.org 2006/04/22 04:06:51
539 [uidswap.c]
540 use setres[ug]id() to permanently revoke privileges; ok deraadt@
541 (ID Sync only - portable already uses setres[ug]id() whenever possible)
ae3afe05 542 - stevesk@cvs.openbsd.org 2006/04/22 18:29:33
543 [crc32.c]
544 remove extra spaces
0ca1dcaf 545 - (djm) [auth.h dispatch.h kex.h] sprinkle in signal.h to get
546 sig_atomic_t
ac93e676 547
ef4d1846 54820060421
549 - (djm) [Makefile.in configure.ac session.c sshpty.c]
550 [contrib/redhat/sshd.init openbsd-compat/Makefile.in]
551 [openbsd-compat/openbsd-compat.h openbsd-compat/port-linux.c]
552 [openbsd-compat/port-linux.h] Add support for SELinux, setting
553 the execution and TTY contexts. based on patch from Daniel Walsh,
554 bz #880; ok dtucker@
555
88680c8b 55620060418
ef4d1846 557 - (djm) [canohost.c] Reorder IP options check so that it isn't broken
558 by mapped addresses; bz #1179 reported by markw wtech-llc.com;
88680c8b 559 ok dtucker@
560
6a0984b4 56120060331
562 - OpenBSD CVS Sync
563 - deraadt@cvs.openbsd.org 2006/03/27 01:21:18
564 [xmalloc.c]
565 we can do the size & nmemb check before the integer overflow check;
566 evol
fd06fbe0 567 - deraadt@cvs.openbsd.org 2006/03/27 13:03:54
568 [dh.c]
569 use strtonum() instead of atoi(), limit dhg size to 64k; ok djm
e56b07ea 570 - djm@cvs.openbsd.org 2006/03/27 23:15:46
571 [sftp.c]
572 always use a format string for addargs; spotted by mouring@
19e79961 573 - deraadt@cvs.openbsd.org 2006/03/28 00:12:31
574 [README.tun ssh.c]
575 spacing
4f16046f 576 - deraadt@cvs.openbsd.org 2006/03/28 01:52:28
577 [channels.c]
578 do not accept unreasonable X ports numbers; ok djm
cfaa5405 579 - deraadt@cvs.openbsd.org 2006/03/28 01:53:43
580 [ssh-agent.c]
581 use strtonum() to parse the pid from the file, and range check it
582 better; ok djm
04aa9e67 583 - djm@cvs.openbsd.org 2006/03/30 09:41:25
584 [channels.c]
585 ARGSUSED for dispatch table-driven functions
51e7a012 586 - djm@cvs.openbsd.org 2006/03/30 09:58:16
587 [authfd.c bufaux.c deattack.c gss-serv.c mac.c misc.c misc.h]
588 [monitor_wrap.c msg.c packet.c sftp-client.c sftp-server.c ssh-agent.c]
589 replace {GET,PUT}_XXBIT macros with functionally similar functions,
590 silencing a heap of lint warnings. also allows them to use
591 __bounded__ checking which can't be applied to macros; requested
592 by and feedback from deraadt@
8cffe22a 593 - djm@cvs.openbsd.org 2006/03/30 10:41:25
594 [ssh.c ssh_config.5]
595 add percent escape chars to the IdentityFile option, bz #1159 based
596 on a patch by imaging AT math.ualberta.ca; feedback and ok dtucker@
2ccf5424 597 - dtucker@cvs.openbsd.org 2006/03/30 11:05:17
598 [ssh-keygen.c]
599 Correctly handle truncated files while converting keys; ok djm@
c023a130 600 - dtucker@cvs.openbsd.org 2006/03/30 11:40:21
601 [auth.c monitor.c]
602 Prevent duplicate log messages when privsep=yes; ok djm@
99d18e3e 603 - jmc@cvs.openbsd.org 2006/03/31 09:09:30
604 [ssh_config.5]
605 kill trailing whitespace;
b4d7dedd 606 - djm@cvs.openbsd.org 2006/03/31 09:13:56
607 [ssh_config.5]
608 remote user escape is %r not %h; spotted by jmc@
6a0984b4 609
3eff92ec 61020060326
611 - OpenBSD CVS Sync
612 - jakob@cvs.openbsd.org 2006/03/15 08:46:44
613 [ssh-keygen.c]
614 if no key file are given when printing the DNS host record, use the
615 host key file(s) as default. ok djm@
d6157b67 616 - biorn@cvs.openbsd.org 2006/03/16 10:31:45
617 [scp.c]
618 Try to display errormessage even if remout == -1
619 ok djm@, markus@
9dfca510 620 - djm@cvs.openbsd.org 2006/03/17 22:31:50
621 [authfd.c]
622 another unreachable found by lint
60ffd527 623 - djm@cvs.openbsd.org 2006/03/17 22:31:11
624 [authfd.c]
625 unreachanble statement, found by lint
4113a1d7 626 - djm@cvs.openbsd.org 2006/03/19 02:22:32
627 [serverloop.c]
628 memory leaks detected by Coverity via elad AT netbsd.org;
629 ok deraadt@ dtucker@
e6a3cfb5 630 - djm@cvs.openbsd.org 2006/03/19 02:22:56
631 [sftp.c]
632 more memory leaks detected by Coverity via elad AT netbsd.org;
633 deraadt@ ok
f8f9ef4d 634 - djm@cvs.openbsd.org 2006/03/19 02:23:26
635 [hostfile.c]
636 FILE* leak detected by Coverity via elad AT netbsd.org;
637 ok deraadt@
88299971 638 - djm@cvs.openbsd.org 2006/03/19 02:24:05
639 [dh.c readconf.c servconf.c]
640 potential NULL pointer dereferences detected by Coverity
641 via elad AT netbsd.org; ok deraadt@
18fc231c 642 - djm@cvs.openbsd.org 2006/03/19 07:41:30
643 [sshconnect2.c]
644 memory leaks detected by Coverity via elad AT netbsd.org;
645 deraadt@ ok
0f8cd5a6 646 - dtucker@cvs.openbsd.org 2006/03/19 11:51:52
647 [servconf.c]
648 Correct strdelim null test; ok djm@
c8e9c167 649 - deraadt@cvs.openbsd.org 2006/03/19 18:52:11
650 [auth1.c authfd.c channels.c]
651 spacing
b4bbf172 652 - deraadt@cvs.openbsd.org 2006/03/19 18:53:12
653 [kex.c kex.h monitor.c myproposal.h session.c]
654 spacing
3efa8ea9 655 - deraadt@cvs.openbsd.org 2006/03/19 18:56:41
656 [clientloop.c progressmeter.c serverloop.c sshd.c]
657 ARGSUSED for signal handlers
6e56dc92 658 - deraadt@cvs.openbsd.org 2006/03/19 18:59:49
659 [ssh-keyscan.c]
660 please lint
7de98c39 661 - deraadt@cvs.openbsd.org 2006/03/19 18:59:30
662 [ssh.c]
663 spacing
c84ac6a4 664 - deraadt@cvs.openbsd.org 2006/03/19 18:59:09
665 [authfile.c]
666 whoever thought that break after return was a good idea needs to
667 get their head examimed
98d40a74 668 - djm@cvs.openbsd.org 2006/03/20 04:09:44
669 [monitor.c]
670 memory leaks detected by Coverity via elad AT netbsd.org;
671 deraadt@ ok
672 that should be all of them now
7016f7cf 673 - djm@cvs.openbsd.org 2006/03/20 11:38:46
674 [key.c]
675 (really) last of the Coverity diffs: avoid possible NULL deref in
676 key_free. via elad AT netbsd.org; markus@ ok
5ef36928 677 - deraadt@cvs.openbsd.org 2006/03/20 17:10:19
678 [auth.c key.c misc.c packet.c ssh-add.c]
679 in a switch (), break after return or goto is stupid
353d48db 680 - deraadt@cvs.openbsd.org 2006/03/20 17:13:16
681 [key.c]
682 djm did a typo
952fce1b 683 - deraadt@cvs.openbsd.org 2006/03/20 17:17:23
684 [ssh-rsa.c]
685 in a switch (), break after return or goto is stupid
148de80c 686 - deraadt@cvs.openbsd.org 2006/03/20 18:14:02
b3b6f53d 687 [channels.c clientloop.c monitor_wrap.c monitor_wrap.h serverloop.c]
688 [ssh.c sshpty.c sshpty.h]
148de80c 689 sprinkle u_int throughout pty subsystem, ok markus
fe8c3af1 690 - deraadt@cvs.openbsd.org 2006/03/20 18:17:20
691 [auth1.c auth2.c sshd.c]
692 sprinkle some ARGSUSED for table driven functions (which sometimes
693 must ignore their args)
32596c7b 694 - deraadt@cvs.openbsd.org 2006/03/20 18:26:55
695 [channels.c monitor.c session.c session.h ssh-agent.c ssh-keygen.c]
696 [ssh-rsa.c ssh.c sshlogin.c]
697 annoying spacing fixes getting in the way of real diffs
b248a875 698 - deraadt@cvs.openbsd.org 2006/03/20 18:27:50
699 [monitor.c]
700 spacing
338eb2ab 701 - deraadt@cvs.openbsd.org 2006/03/20 18:35:12
702 [channels.c]
703 x11_fake_data is only ever used as u_char *
0bcc3e35 704 - deraadt@cvs.openbsd.org 2006/03/20 18:41:43
705 [dns.c]
706 cast xstrdup to propert u_char *
9555d258 707 - deraadt@cvs.openbsd.org 2006/03/20 18:42:27
708 [canohost.c match.c ssh.c sshconnect.c]
709 be strict with tolower() casting
a7137f6b 710 - deraadt@cvs.openbsd.org 2006/03/20 18:48:34
711 [channels.c fatal.c kex.c packet.c serverloop.c]
712 spacing
1cec12db 713 - deraadt@cvs.openbsd.org 2006/03/20 21:11:53
714 [ttymodes.c]
715 spacing
52e3daed 716 - djm@cvs.openbsd.org 2006/03/25 00:05:41
717 [auth-bsdauth.c auth-skey.c auth.c auth2-chall.c channels.c]
718 [clientloop.c deattack.c gss-genr.c kex.c key.c misc.c moduli.c]
719 [monitor.c monitor_wrap.c packet.c scard.c sftp-server.c ssh-agent.c]
720 [ssh-keyscan.c ssh.c sshconnect.c sshconnect2.c sshd.c uuencode.c]
721 [xmalloc.c xmalloc.h]
722 introduce xcalloc() and xasprintf() failure-checked allocations
723 functions and use them throughout openssh
724
725 xcalloc is particularly important because malloc(nmemb * size) is a
726 dangerous idiom (subject to integer overflow) and it is time for it
727 to die
728
729 feedback and ok deraadt@
c5d10563 730 - djm@cvs.openbsd.org 2006/03/25 01:13:23
731 [buffer.c channels.c deattack.c misc.c scp.c session.c sftp-client.c]
732 [sftp-server.c ssh-agent.c ssh-rsa.c xmalloc.c xmalloc.h auth-pam.c]
733 [uidswap.c]
734 change OpenSSH's xrealloc() function from being xrealloc(p, new_size)
735 to xrealloc(p, new_nmemb, new_itemsize).
736
737 realloc is particularly prone to integer overflows because it is
738 almost always allocating "n * size" bytes, so this is a far safer
739 API; ok deraadt@
522327f5 740 - djm@cvs.openbsd.org 2006/03/25 01:30:23
741 [sftp.c]
742 "abormally" is a perfectly cromulent word, but "abnormally" is better
c1cb7bae 743 - djm@cvs.openbsd.org 2006/03/25 13:17:03
6ba5f28f 744 [atomicio.c auth-bsdauth.c auth-chall.c auth-options.c auth-passwd.c]
745 [auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth-skey.c auth.c auth1.c]
746 [auth2-chall.c auth2-hostbased.c auth2-kbdint.c auth2-none.c]
747 [auth2-passwd.c auth2-pubkey.c auth2.c authfd.c authfile.c bufaux.c]
748 [buffer.c canohost.c channels.c cipher-3des1.c cipher-bf1.c]
749 [cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c compress.c]
750 [deattack.c dh.c dispatch.c fatal.c groupaccess.c hostfile.c kex.c]
751 [kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c log.c]
752 [mac.c match.c md-sha256.c misc.c monitor.c monitor_fdpass.c]
753 [monitor_mm.c monitor_wrap.c msg.c nchan.c packet.c progressmeter.c]
754 [readconf.c readpass.c rsa.c scard.c scp.c servconf.c serverloop.c]
755 [session.c sftp-client.c sftp-common.c sftp-glob.c sftp-server.c]
756 [sftp.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c]
757 [ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c]
758 [sshconnect2.c sshd.c sshlogin.c sshpty.c sshtty.c ttymodes.c]
759 [uidswap.c uuencode.c xmalloc.c]
c1cb7bae 760 Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
761 Theo nuked - our scripts to sync -portable need them in the files
febd6f21 762 - deraadt@cvs.openbsd.org 2006/03/25 18:29:35
763 [auth-rsa.c authfd.c packet.c]
764 needed casts (always will be needed)
b476adfa 765 - deraadt@cvs.openbsd.org 2006/03/25 18:30:55
766 [clientloop.c serverloop.c]
767 spacing
306f24ca 768 - deraadt@cvs.openbsd.org 2006/03/25 18:36:15
769 [sshlogin.c sshlogin.h]
770 nicer size_t and time_t types
0fe9892f 771 - deraadt@cvs.openbsd.org 2006/03/25 18:40:14
772 [ssh-keygen.c]
773 cast strtonum() result to right type
8d0b0353 774 - deraadt@cvs.openbsd.org 2006/03/25 18:41:45
775 [ssh-agent.c]
776 mark two more signal handlers ARGSUSED
d6d4897e 777 - deraadt@cvs.openbsd.org 2006/03/25 18:43:30
778 [channels.c]
779 use strtonum() instead of atoi() [limit X screens to 400, sorry]
15dd2c4f 780 - deraadt@cvs.openbsd.org 2006/03/25 18:56:55
781 [bufaux.c channels.c packet.c]
782 remove (char *) casts to a function that accepts void * for the arg
5b5f6af7 783 - deraadt@cvs.openbsd.org 2006/03/25 18:58:10
784 [channels.c]
785 delete cast not required
56f824f3 786 - djm@cvs.openbsd.org 2006/03/25 22:22:43
787 [atomicio.h auth-options.h auth.h auth2-gss.c authfd.h authfile.h]
788 [bufaux.h buffer.h canohost.h channels.h cipher.h clientloop.h]
789 [compat.h compress.h crc32.c crc32.h deattack.h dh.h dispatch.h]
790 [dns.c dns.h getput.h groupaccess.h gss-genr.c gss-serv-krb5.c]
791 [gss-serv.c hostfile.h includes.h kex.h key.h log.h mac.h match.h]
792 [misc.h monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h msg.h]
793 [myproposal.h packet.h pathnames.h progressmeter.h readconf.h rsa.h]
794 [scard.h servconf.h serverloop.h session.h sftp-common.h sftp.h]
795 [ssh-gss.h ssh.h ssh1.h ssh2.h sshconnect.h sshlogin.h sshpty.h]
796 [ttymodes.h uidswap.h uuencode.h xmalloc.h]
797 standardise spacing in $OpenBSD$ tags; requested by deraadt@
9594740b 798 - deraadt@cvs.openbsd.org 2006/03/26 01:31:48
799 [uuencode.c]
800 typo
3eff92ec 801
df938409 80220060325
803 - OpenBSD CVS Sync
804 - djm@cvs.openbsd.org 2006/03/16 04:24:42
805 [ssh.1]
806 Add RFC4419 (Diffie-Hellman group exchange KEX) to the list of SSH RFCs
807 that OpenSSH supports
a92a0909 808 - deraadt@cvs.openbsd.org 2006/03/19 18:51:18
809 [atomicio.c auth-bsdauth.c auth-chall.c auth-krb5.c auth-options.c]
810 [auth-pam.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c]
811 [auth-shadow.c auth-skey.c auth.c auth1.c auth2-chall.c]
812 [auth2-hostbased.c auth2-kbdint.c auth2-none.c auth2-passwd.c]
813 [auth2-pubkey.c auth2.c authfd.c authfile.c bufaux.c buffer.c]
814 [canohost.c channels.c cipher-3des1.c cipher-acss.c cipher-aes.c]
815 [cipher-bf1.c cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c]
816 [compress.c deattack.c dh.c dispatch.c dns.c entropy.c fatal.c]
817 [groupaccess.c hostfile.c includes.h kex.c kexdh.c kexdhc.c]
818 [kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c log.c loginrec.c]
819 [loginrec.h logintest.c mac.c match.c md-sha256.c md5crypt.c misc.c]
820 [monitor.c monitor_fdpass.c monitor_mm.c monitor_wrap.c msg.c]
821 [nchan.c packet.c progressmeter.c readconf.c readpass.c rsa.c]
822 [scard.c scp.c servconf.c serverloop.c session.c sftp-client.c]
823 [sftp-common.c sftp-glob.c sftp-server.c sftp.c ssh-add.c]
824 [ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c]
825 [ssh-rand-helper.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c]
826 [sshconnect2.c sshd.c sshlogin.c sshpty.c sshtty.c ttymodes.c]
827 [uidswap.c uuencode.c xmalloc.c openbsd-compat/bsd-arc4random.c]
828 [openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-cygwin_util.c]
829 [openbsd-compat/bsd-getpeereid.c openbsd-compat/bsd-misc.c]
830 [openbsd-compat/bsd-nextstep.c openbsd-compat/bsd-snprintf.c]
831 [openbsd-compat/bsd-waitpid.c openbsd-compat/fake-rfc2553.c]
832 RCSID() can die
0e03e3d0 833 - deraadt@cvs.openbsd.org 2006/03/19 18:53:12
834 [kex.h myproposal.h]
835 spacing
0fa53840 836 - djm@cvs.openbsd.org 2006/03/20 04:07:22
837 [auth2-gss.c]
838 GSSAPI related leaks detected by Coverity via elad AT netbsd.org;
839 reviewed by simon AT sxw.org.uk; deraadt@ ok
0926fd19 840 - djm@cvs.openbsd.org 2006/03/20 04:07:49
841 [gss-genr.c]
842 more GSSAPI related leaks detected by Coverity via elad AT netbsd.org;
843 reviewed by simon AT sxw.org.uk; deraadt@ ok
7cd30d48 844 - djm@cvs.openbsd.org 2006/03/20 04:08:18
845 [gss-serv.c]
846 last lot of GSSAPI related leaks detected by Coverity via
847 elad AT netbsd.org; reviewed by simon AT sxw.org.uk; deraadt@ ok
97f67e9a 848 - deraadt@cvs.openbsd.org 2006/03/20 18:14:02
849 [monitor_wrap.h sshpty.h]
850 sprinkle u_int throughout pty subsystem, ok markus
fd6eaa8c 851 - deraadt@cvs.openbsd.org 2006/03/20 18:26:55
852 [session.h]
853 annoying spacing fixes getting in the way of real diffs
6cfe93ec 854 - deraadt@cvs.openbsd.org 2006/03/20 18:41:43
855 [dns.c]
856 cast xstrdup to propert u_char *
f0eea41f 857 - jakob@cvs.openbsd.org 2006/03/22 21:16:24
858 [ssh.1]
859 simplify SSHFP example; ok jmc@
69753336 860 - djm@cvs.openbsd.org 2006/03/22 21:27:15
861 [deattack.c deattack.h]
862 remove IV support from the CRC attack detector, OpenSSH has never used
863 it - it only applied to IDEA-CFB, which we don't support.
864 prompted by NetBSD Coverity report via elad AT netbsd.org;
865 feedback markus@ "nuke it" deraadt@
df938409 866
08a3f952 86720060318
7f38714e 868 - (djm) [auth-pam.c] Fix memleak in error path, from Coverity via
869 elad AT NetBSD.org
870 - (dtucker) [openbsd-compat/bsd-snprintf.c] Bug #1173: make fmtint() take
871 a LLONG rather than a long. Fixes scp'ing of large files on platforms
872 with missing/broken snprintfs. Patch from e.borovac at bom.gov.au.
08a3f952 873
32b0131a 87420060316
875 - (dtucker) [entropy.c] Add headers for WIFEXITED and friends.
2f360c89 876 - (dtucker) [configure.ac md-sha256.c] NetBSD has sha2.h in
877 /usr/include/crypto. Hint from djm@.
b1f0c612 878 - (tim) [kex.c myproposal.h md-sha256.c openbsd-compat/sha2.c,h]
879 Disable sha256 when openssl < 0.9.7. Patch from djm@.
30baf904 880 - (djm) [kex.c] Slightly more clean deactivation of dhgex-sha256 on old
881 OpenSSL; ok tim
32b0131a 882
0ac58ab4 88320060315
884 - (djm) OpenBSD CVS Sync:
885 - msf@cvs.openbsd.org 2006/02/06 15:54:07
886 [ssh.1]
887 - typo fix
888 ok jmc@
260c414c 889 - jmc@cvs.openbsd.org 2006/02/06 21:44:47
890 [ssh.1]
891 make this a little less ambiguous...
c38f5d19 892 - stevesk@cvs.openbsd.org 2006/02/07 01:08:04
893 [auth-rhosts.c includes.h]
894 move #include <netgroup.h> out of includes.h; ok markus@
c3ff311a 895 - stevesk@cvs.openbsd.org 2006/02/07 01:18:09
896 [includes.h ssh-agent.c ssh-keyscan.c sshconnect2.c]
897 move #include <sys/queue.h> out of includes.h; ok markus@
1d3e026f 898 - stevesk@cvs.openbsd.org 2006/02/07 01:42:00
899 [channels.c clientloop.c clientloop.h includes.h packet.h]
900 [serverloop.c sshpty.c sshpty.h sshtty.c ttymodes.c]
901 move #include <termios.h> out of includes.h; ok markus@
99f28949 902 - stevesk@cvs.openbsd.org 2006/02/07 01:52:50
903 [sshtty.c]
904 "log.h" not needed
cc63c340 905 - stevesk@cvs.openbsd.org 2006/02/07 03:47:05
906 [hostfile.c]
907 "packet.h" not needed
db5a9db9 908 - stevesk@cvs.openbsd.org 2006/02/07 03:59:20
909 [deattack.c]
910 duplicate #include
a75f5360 911 - stevesk@cvs.openbsd.org 2006/02/08 12:15:27
912 [auth.c clientloop.c includes.h misc.c monitor.c readpass.c]
913 [session.c sftp.c ssh-agent.c ssh-keysign.c ssh.c sshconnect.c]
914 [sshd.c sshpty.c]
915 move #include <paths.h> out of includes.h; ok markus@
6425cf65 916 - stevesk@cvs.openbsd.org 2006/02/08 12:32:49
917 [includes.h misc.c]
918 move #include <netinet/tcp.h> out of includes.h; ok markus@
1720c23b 919 - stevesk@cvs.openbsd.org 2006/02/08 13:15:44
920 [gss-serv.c monitor.c]
921 small KNF
5b984d1d 922 - stevesk@cvs.openbsd.org 2006/02/08 14:16:59
923 [sshconnect.c]
924 <openssl/bn.h> not needed
876faccd 925 - stevesk@cvs.openbsd.org 2006/02/08 14:31:30
926 [includes.h ssh-agent.c ssh-keyscan.c ssh.c]
927 move #include <sys/resource.h> out of includes.h; ok markus@
a3dcf543 928 - stevesk@cvs.openbsd.org 2006/02/08 14:38:18
929 [includes.h packet.c]
930 move #include <netinet/in_systm.h> and <netinet/ip.h> out of
931 includes.h; ok markus@
68e39d38 932 - stevesk@cvs.openbsd.org 2006/02/08 23:51:24
933 [includes.h scp.c sftp-glob.c sftp-server.c]
934 move #include <dirent.h> out of includes.h; ok markus@
bbb1501d 935 - stevesk@cvs.openbsd.org 2006/02/09 00:32:07
936 [includes.h]
937 #include <sys/endian.h> not needed; ok djm@
938 NB. ID Sync only - we still need this (but it may move later)
4eb67845 939 - jmc@cvs.openbsd.org 2006/02/09 10:10:47
940 [sshd.8]
941 - move some text into a CAVEATS section
942 - merge the COMMAND EXECUTION... section into AUTHENTICATION
bd7c69ea 943 - stevesk@cvs.openbsd.org 2006/02/10 00:27:13
944 [channels.c clientloop.c includes.h misc.c progressmeter.c sftp.c]
945 [ssh.c sshd.c sshpty.c]
946 move #include <sys/ioctl.h> out of includes.h; ok markus@
aa2eae64 947 - stevesk@cvs.openbsd.org 2006/02/10 01:44:27
948 [includes.h monitor.c readpass.c scp.c serverloop.c session.c\7f]
949 [sftp.c sshconnect.c sshconnect2.c sshd.c]
950 move #include <sys/wait.h> out of includes.h; ok markus@
cfb9181c 951 - otto@cvs.openbsd.org 2006/02/11 19:31:18
952 [atomicio.c]
953 type correctness; from Ray Lai in PR 5011; ok millert@
f7b8224d 954 - djm@cvs.openbsd.org 2006/02/12 06:45:34
955 [ssh.c ssh_config.5]
956 add a %l expansion code to the ControlPath, which is filled in with the
957 local hostname at runtime. Requested by henning@ to avoid some problems
958 with /home on NFS; ok dtucker@
129d5252 959 - djm@cvs.openbsd.org 2006/02/12 10:44:18
960 [readconf.c]
961 raise error when the user specifies a RekeyLimit that is smaller than 16
962 (the smallest of our cipher's blocksize) or big enough to cause integer
963 wraparound; ok & feedback dtucker@
5e7007ea 964 - jmc@cvs.openbsd.org 2006/02/12 10:49:44
965 [ssh_config.5]
966 slight rewording; ok djm
010c04e5 967 - jmc@cvs.openbsd.org 2006/02/12 10:52:41
968 [sshd.8]
969 rework the description of authorized_keys a little;
9ed4bd80 970 - jmc@cvs.openbsd.org 2006/02/12 17:57:19
971 [sshd.8]
972 sort the list of options permissable w/ authorized_keys;
973 ok djm dtucker
1e0fcfc6 974 - jmc@cvs.openbsd.org 2006/02/13 10:16:39
975 [sshd.8]
976 no need to subsection the authorized_keys examples - instead, convert
977 this to look like an actual file. also use proto 2 keys, and use IETF
978 example addresses;
2881e0e9 979 - jmc@cvs.openbsd.org 2006/02/13 10:21:25
980 [sshd.8]
981 small tweaks for the ssh_known_hosts section;
9d4b0313 982 - jmc@cvs.openbsd.org 2006/02/13 11:02:26
983 [sshd.8]
984 turn this into an example ssh_known_hosts file; ok djm
481e991f 985 - jmc@cvs.openbsd.org 2006/02/13 11:08:43
986 [sshd.8]
987 - avoid nasty line split
988 - `*' does not need to be escaped
10fa86ae 989 - jmc@cvs.openbsd.org 2006/02/13 11:27:25
990 [sshd.8]
991 sort FILES and use a -compact list;
2db34ac9 992 - david@cvs.openbsd.org 2006/02/15 05:08:24
993 [sftp-client.c]
994 typo in comment; ok djm@
0e505e42 995 - jmc@cvs.openbsd.org 2006/02/15 16:53:20
996 [ssh.1]
997 remove the IETF draft references and replace them with some updated RFCs;
2866aceb 998 - jmc@cvs.openbsd.org 2006/02/15 16:55:33
999 [sshd.8]
1000 remove ietf draft references; RFC list now maintained in ssh.1;
00e7c607 1001 - jmc@cvs.openbsd.org 2006/02/16 09:05:34
1002 [sshd.8]
1003 sync some of the FILES entries w/ ssh.1;
f3d2d92e 1004 - jmc@cvs.openbsd.org 2006/02/19 19:52:10
1005 [sshd.8]
1006 move the sshrc stuff out of FILES, and into its own section:
1007 FILES is not a good place to document how stuff works;
e56bbe08 1008 - jmc@cvs.openbsd.org 2006/02/19 20:02:17
1009 [sshd.8]
1010 sync the (s)hosts.equiv FILES entries w/ those from ssh.1;
3783659a 1011 - jmc@cvs.openbsd.org 2006/02/19 20:05:00
1012 [sshd.8]
1013 grammar;
922f8f17 1014 - jmc@cvs.openbsd.org 2006/02/19 20:12:25
1015 [ssh_config.5]
1016 add some vertical space;
cebb4c24 1017 - stevesk@cvs.openbsd.org 2006/02/20 16:36:15
1018 [authfd.c channels.c includes.h session.c ssh-agent.c ssh.c]
1019 move #include <sys/un.h> out of includes.h; ok djm@
4095f623 1020 - stevesk@cvs.openbsd.org 2006/02/20 17:02:44
1021 [clientloop.c includes.h monitor.c progressmeter.c scp.c]
1022 [serverloop.c session.c sftp.c ssh-agent.c ssh.c sshd.c]
1023 move #include <signal.h> out of includes.h; ok markus@
ada68823 1024 - stevesk@cvs.openbsd.org 2006/02/20 17:19:54
1025 [auth-rhosts.c auth-rsa.c auth.c auth2-none.c auth2-pubkey.c]
1026 [authfile.c clientloop.c includes.h readconf.c scp.c session.c]
1027 [sftp-client.c sftp-common.c sftp-common.h sftp-glob.c]
1028 [sftp-server.c sftp.c ssh-add.c ssh-keygen.c ssh.c sshconnect.c]
1029 [sshconnect2.c sshd.c sshpty.c]
1030 move #include <sys/stat.h> out of includes.h; ok markus@
b6438382 1031 - stevesk@cvs.openbsd.org 2006/02/22 00:04:45
1032 [canohost.c clientloop.c includes.h match.c readconf.c scp.c ssh.c]
1033 [sshconnect.c]
1034 move #include <ctype.h> out of includes.h; ok djm@
95d46d8f 1035 - jmc@cvs.openbsd.org 2006/02/24 10:25:14
1036 [ssh_config.5]
1037 add section on patterns;
1038 from dtucker + myself
ac1ec4d8 1039 - jmc@cvs.openbsd.org 2006/02/24 10:33:54
1040 [sshd_config.5]
1041 signpost to PATTERNS;
436a5ff9 1042 - jmc@cvs.openbsd.org 2006/02/24 10:37:07
1043 [ssh_config.5]
1044 tidy up the refs to PATTERNS;
4cb23985 1045 - jmc@cvs.openbsd.org 2006/02/24 10:39:52
1046 [sshd.8]
1047 signpost to PATTERNS section;
340a4caf 1048 - jmc@cvs.openbsd.org 2006/02/24 20:22:16
1049 [ssh-keysign.8 ssh_config.5 sshd_config.5]
1050 some consistency fixes;
f09ffbdb 1051 - jmc@cvs.openbsd.org 2006/02/24 20:31:31
1052 [ssh.1 ssh_config.5 sshd.8 sshd_config.5]
1053 more consistency fixes;
c5786b30 1054 - jmc@cvs.openbsd.org 2006/02/24 23:20:07
1055 [ssh_config.5]
1056 some grammar/wording fixes;
b74c3b8c 1057 - jmc@cvs.openbsd.org 2006/02/24 23:43:57
1058 [sshd_config.5]
1059 some grammar/wording fixes;
32cfd177 1060 - jmc@cvs.openbsd.org 2006/02/24 23:51:17
1061 [sshd_config.5]
1062 oops - bits i missed;
2963b207 1063 - jmc@cvs.openbsd.org 2006/02/25 12:26:17
1064 [ssh_config.5]
1065 document the possible values for KbdInteractiveDevices;
84c1b530 1066 help/ok dtucker
1067 - jmc@cvs.openbsd.org 2006/02/25 12:28:34
1068 [sshd_config.5]
1069 document the order in which allow/deny directives are processed;
a269663f 1070 help/ok dtucker
de4f5093 1071 - jmc@cvs.openbsd.org 2006/02/26 17:17:18
1072 [ssh_config.5]
1073 move PATTERNS to the end of the main body; requested by dtucker
ef1c6497 1074 - jmc@cvs.openbsd.org 2006/02/26 18:01:13
1075 [sshd_config.5]
1076 subsection is pointless here;
c04ba6a6 1077 - jmc@cvs.openbsd.org 2006/02/26 18:03:10
1078 [ssh_config.5]
1079 comma;
8b6bf4d5 1080 - djm@cvs.openbsd.org 2006/02/28 01:10:21
1081 [session.c]
1082 fix logout recording when privilege separation is disabled, analysis and
1083 patch from vinschen at redhat.com; tested by dtucker@ ok deraadt@
1084 NB. ID sync only - patch already in portable
140000b4 1085 - djm@cvs.openbsd.org 2006/03/04 04:12:58
1086 [serverloop.c]
1087 move a debug() outside of a signal handler; ok markus@ a little while back
16a5525d 1088 - djm@cvs.openbsd.org 2006/03/12 04:23:07
1089 [ssh.c]
1090 knf nit
9f513268 1091 - djm@cvs.openbsd.org 2006/03/13 08:16:00
1092 [sshd.c]
1093 don't log that we are listening on a socket before the listen() call
1094 actually succeeds, bz #1162 reported by Senthil Kumar; ok dtucker@
71f0de56 1095 - dtucker@cvs.openbsd.org 2006/03/13 08:33:00
1096 [packet.c]
1097 Set TCP_NODELAY for all connections not just "interactive" ones. Fixes
1098 poor performance and protocol stalls under some network conditions (mindrot
1099 bugs #556 and #981). Patch originally from markus@, ok djm@
15b81af3 1100 - dtucker@cvs.openbsd.org 2006/03/13 08:43:16
1101 [ssh-keygen.c]
1102 Make ssh-keygen handle CR and CRLF line termination when converting IETF
1103 format keys, in adition to vanilla LF. mindrot #1157, tested by Chris
1104 Pepper, ok djm@
533b9133 1105 - dtucker@cvs.openbsd.org 2006/03/13 10:14:29
1106 [misc.c ssh_config.5 sshd_config.5]
1107 Allow config directives to contain whitespace by surrounding them by double
1108 quotes. mindrot #482, man page help from jmc@, ok djm@
45660a22 1109 - dtucker@cvs.openbsd.org 2006/03/13 10:26:52
1110 [authfile.c authfile.h ssh-add.c]
1111 Make ssh-add check file permissions before attempting to load private
1112 key files multiple times; it will fail anyway and this prevents confusing
1113 multiple prompts and warnings. mindrot #1138, ok djm@
22aa23f8 1114 - djm@cvs.openbsd.org 2006/03/14 00:15:39
1115 [canohost.c]
1116 log the originating address and not just the name when a reverse
1117 mapping check fails, requested by linux AT linuon.com
2d762582 1118 - markus@cvs.openbsd.org 2006/03/14 16:32:48
1119 [ssh_config.5 sshd_config.5]
1120 *AliveCountMax applies to protcol v2 only; ok dtucker, djm
2ff8003a 1121 - djm@cvs.openbsd.org 2006/03/07 09:07:40
1122 [kex.c kex.h monitor.c myproposal.h ssh-keyscan.c sshconnect2.c sshd.c]
1123 Implement the diffie-hellman-group-exchange-sha256 key exchange method
1124 using the SHA256 code in libc (and wrapper to make it into an OpenSSL
1125 EVP), interop tested against CVS PuTTY
1126 NB. no portability bits committed yet
13ff27b7 1127 - (djm) [configure.ac defines.h kex.c md-sha256.c]
1128 [openbsd-compat/sha2.h openbsd-compat/openbsd-compat.h]
1129 [openbsd-compat/sha2.c] First stab at portability glue for SHA256
1130 KEX support, should work with libc SHA256 support or OpenSSL
1131 EVP_sha256 if present
1a6e2ed1 1132 - (djm) [includes.h] Restore accidentally dropped netinet/in.h
d3c45531 1133 - (djm) [Makefile.in openbsd-compat/Makefile.in] Add added files
f73e2ad7 1134 - (djm) [md-sha256.c configure.ac] md-sha256.c needs sha2.h if present
53a9f480 1135 - (djm) [regress/.cvsignore] Ignore Makefile here
81e73e57 1136 - (djm) [loginrec.c] Need stat.h
6c3a432e 1137 - (djm) [openbsd-compat/sha2.h] Avoid include macro clash with
1138 system sha2.h
cb2c6179 1139 - (djm) [ssh-rand-helper.c] Needs a bunch of headers
3e598f1a 1140 - (djm) [ssh-agent.c] Restore dropped stat.h
3070c7e1 1141 - (djm) [openbsd-compat/sha2.h openbsd-compat/sha2.c] Comment out
1142 SHA384, which we don't need and doesn't compile without tweaks
b5b88c19 1143 - (djm) [auth-pam.c clientloop.c includes.h monitor.c session.c]
1144 [sftp-client.c ssh-keysign.c ssh.c sshconnect.c sshconnect2.c]
1145 [sshd.c openbsd-compat/bsd-misc.c openbsd-compat/bsd-openpty.c]
1146 [openbsd-compat/glob.c openbsd-compat/mktemp.c]
1147 [openbsd-compat/readpassphrase.c] Lots of include fixes for
1148 OpenSolaris
b481f63d 1149 - (tim) [includes.h] put sys/stat.h back in to quiet some "macro redefined:"
3e9b2b1b 1150 - (tim) [openssh/sshpty.c openssh/openbsd-compat/port-tun.c] put in some
1151 includes removed from includes.h
d90b9f9a 1152 - (dtucker) [configure.ac] Fix glob test conversion to AC_TRY_COMPILE
b02dadfc 1153 - (djm) [includes.h] Put back paths.h, it is needed in defines.h
d4bf5977 1154 - (dtucker) [openbsd-compat/openbsd-compat.h] AIX (at least) needs
1155 sys/ioctl.h for struct winsize.
3919d576 1156 - (dtucker) [configure.ac] login_cap.h requires sys/types.h on NetBSD.
0ac58ab4 1157
055252ed 115820060313
1159 - (dtucker) [configure.ac] Bug #1171: Don't use printf("%lld", longlong)
1160 since not all platforms support it. Instead, use internal equivalent while
1161 computing LLONG_MIN and LLONG_MAX. Remove special case for alpha-dec-osf*
1162 as it's no longer required. Tested by Bernhard Simon, ok djm@
1163
f9b93ff8 116420060304
1165 - (dtucker) [contrib/cygwin/ssh-host-config] Require use of lastlog as a
1166 file rather than directory, required as Cygwin will be importing lastlog(1).
1167 Also tightens up permissions on the file. Patch from vinschen@redhat.com.
a8d3dd47 1168 - (dtucker) [gss-serv-krb5.c] Bug #1166: Correct #ifdefs for gssapi_krb5.h
1169 includes. Patch from gentoo.riverrat at gmail.com.
f9b93ff8 1170
49c64dd6 117120060226
1172 - (dtucker) [configure.ac] Bug #1156: QNX apparently needs SSHD_ACQUIRES_CTTY
1173 patch from kraai at ftbfs.org.
1174
117520060223
05059810 1176 - (dtucker) [sshd_config sshd_config.5] Update UsePAM to reflect current
1177 reality. Pointed out by tryponraj at gmail.com.
1178
49c64dd6 117920060222
0244ad55 1180 - (dtucker) [openbsd-compat/openssl-compat.{c,h}] Minor tidy up: only
1181 compile in compat code if required.
1182
15101d77 118320060221
1184 - (dtucker) [openbsd-compat/openssl-compat.h] Prevent warning about
1185 redefinition of SSLeay_add_all_algorithms.
1186
c7ad0d99 118720060220
1188 - (dtucker) [INSTALL configure.ac openbsd-compat/openssl-compat.{c,h}]
1189 Add optional enabling of OpenSSL's (hardware) Engine support, via
1190 configure --with-ssl-engine. Based in part on a diff by michal at
1191 logix.cz.
1192
46096a5b 119320060219
1194 - (dtucker) [Makefile.in configure.ac, added openbsd-compat/regress/]
1195 Add first attempt at regress tests for compat library. ok djm@
1196
103ff395 119720060214
1198 - (tim) [buildpkg.sh.in] Make the names consistent.
1199 s/pkg_post_make_install_fixes.sh/pkg-post-make-install-fixes.sh/ OK dtucker@
1200
06a517d4 120120060212
1202 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Make loop counter unsigned
1203 to silence compiler warning, from vinschen at redhat.com.
0c7e8877 1204 - (tim) [configure.ac] Bug #1149. Disable /etc/default/login check for QNX.
9603096f 1205 - (dtucker) [README version.h contrib/caldera/openssh.spec
1206 contrib/redhat/openssh.spec contrib/suse/openssh.spec] Bump version
1207 strings to match 4.3p2 release.
06a517d4 1208
4c721c3d 120920060208
1210 - (tim) [session.c] Logout records were not updated on systems with
1211 post auth privsep disabled due to bug 1086 changes. Analysis and patch
1212 by vinschen at redhat.com. OK tim@, dtucker@.
4b2cf3f1 1213 - (dtucker) [configure.ac] Typo in Ultrix and NewsOS sections (NEED_SETPRGP
8753ef06 1214 -> NEED_SETPGRP), reported by Bernhard Simon. ok tim@
4c721c3d 1215
5679f14d 121620060206
1217 - (tim) [configure.ac] Remove unnecessary tests for net/if.h and
1218 netinet/in_systm.h. OK dtucker@.
1219
823221b2 122020060205
1221 - (tim) [configure.ac] Add AC_REVISION. Add sys/time.h to lastlog.h test
1222 for Solaris. OK dtucker@.
9c54c067 1223 - (tim) [configure.ac] Bug #1149. Changes in QNX section only. Patch by
1224 kraai at ftbfs.org.
823221b2 1225
c9ecc3c7 122620060203
1227 - (tim) [configure.ac] test for egrep (AC_PROG_EGREP) before first
1228 AC_CHECK_HEADERS test. Without it, if AC_CHECK_HEADERS is first run
1229 by a platform specific check, builtin standard includes tests will be
1230 skipped on the other platforms.
1231 Analysis and suggestion by vinschen at redhat.com, patch by dtucker@.
1232 OK tim@, djm@.
1233
300ea548 123420060202
1235 - (dtucker) [configure.ac] Bug #1148: Fix "crippled AES" test so that it
1236 works with picky compilers. Patch from alex.kiernan at thus.net.
1237
0ceedd4e 123820060201
1239 - (djm) [regress/test-exec.sh] Try 'logname' as well as 'whoami' to
1240 determine the user's login name - needed for regress tests on Solaris
1241 10 and OpenSolaris
f3906047 1242 - (djm) OpenBSD CVS Sync
1243 - jmc@cvs.openbsd.org 2006/02/01 09:06:50
1244 [sshd.8]
1245 - merge sections on protocols 1 and 2 into a single section
1246 - remove configuration file section
1247 ok markus
170c69ba 1248 - jmc@cvs.openbsd.org 2006/02/01 09:11:41
1249 [sshd.8]
1250 small tweak;
026be201 1251 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
1252 [contrib/suse/openssh.spec] Update versions ahead of release
ac07067e 1253 - markus@cvs.openbsd.org 2006/02/01 11:27:22
1254 [version.h]
1255 openssh 4.3
2ac31303 1256 - (djm) Release OpenSSH 4.3p1
0ceedd4e 1257
0ce89457 125820060131
1259 - (djm) OpenBSD CVS Sync
1260 - jmc@cvs.openbsd.org 2006/01/20 11:21:45
1261 [ssh_config.5]
1262 - word change, agreed w/ markus
1263 - consistency fixes
ec63d7ce 1264 - jmc@cvs.openbsd.org 2006/01/25 09:04:34
1265 [sshd.8]
1266 move the options description up the page, and a few additional tweaks
1267 whilst in here;
1268 ok markus
f464b2f1 1269 - jmc@cvs.openbsd.org 2006/01/25 09:07:22
1270 [sshd.8]
1271 move subsections to full sections;
b661b7fb 1272 - jmc@cvs.openbsd.org 2006/01/26 08:47:56
1273 [ssh.1]
1274 add a section on verifying host keys in dns;
1275 written with a lot of help from jakob;
1276 feedback dtucker/markus;
1277 ok markus
d7b37427 1278 - reyk@cvs.openbsd.org 2006/01/30 12:22:22
1279 [channels.c]
1280 mark channel as write failed or dead instead of read failed on error
1281 of the channel output filter.
1282 ok markus@
062d2977 1283 - jmc@cvs.openbsd.org 2006/01/30 13:37:49
1284 [ssh.1]
1285 remove an incorrect sentence;
1286 reported by roumen petrov;
1287 ok djm markus
4116f5c0 1288 - djm@cvs.openbsd.org 2006/01/31 10:19:02
1289 [misc.c misc.h scp.c sftp.c]
1290 fix local arbitrary command execution vulnerability on local/local and
1291 remote/remote copies (CVE-2006-0225, bz #1094), patch by
1292 t8m AT centrum.cz, polished by dtucker@ and myself; ok markus@
16e8ab10 1293 - djm@cvs.openbsd.org 2006/01/31 10:35:43
1294 [scp.c]
1295 "scp a b c" shouldn't clobber "c" when it is not a directory, report and
1296 fix from biorn@; ok markus@
b645ff66 1297 - (djm) Sync regress tests to OpenBSD:
1298 - dtucker@cvs.openbsd.org 2005/03/10 10:20:39
1299 [regress/forwarding.sh]
1300 Regress test for ClearAllForwardings (bz #994); ok markus@
9b347e5f 1301 - dtucker@cvs.openbsd.org 2005/04/25 09:54:09
1302 [regress/multiplex.sh]
1303 Don't call cleanup in multiplex as test-exec will cleanup anyway
1304 found by tim@, ok djm@
1305 NB. ID sync only, we already had this
1306 - djm@cvs.openbsd.org 2005/05/20 23:14:15
1307 [regress/test-exec.sh]
1308 force addressfamily=inet for tests, unbreaking dynamic-forward regress for
1309 recently committed nc SOCKS5 changes
9f22d634 1310 - djm@cvs.openbsd.org 2005/05/24 04:10:54
89deb4c2 1311 [regress/try-ciphers.sh]
9f22d634 1312 oops, new arcfour modes here too
89deb4c2 1313 - markus@cvs.openbsd.org 2005/06/30 11:02:37
1314 [regress/scp.sh]
1315 allow SUDO=sudo; from Alexander Bluhm
41f70006 1316 - grunk@cvs.openbsd.org 2005/11/14 21:25:56
1317 [regress/agent-getpeereid.sh]
1318 all other scripts in this dir use $SUDO, not 'sudo', so pull this even
1319 ok markus@
71133d5b 1320 - dtucker@cvs.openbsd.org 2005/12/14 04:36:39
1321 [regress/scp-ssh-wrapper.sh]
1322 Fix assumption about how many args scp will pass; ok djm@
1323 NB. ID sync only, we already had this
452613c1 1324 - djm@cvs.openbsd.org 2006/01/27 06:49:21
1325 [scp.sh]
1326 regress test for local to local scp copies; ok dtucker@
3ca1f5b0 1327 - djm@cvs.openbsd.org 2006/01/31 10:23:23
1328 [scp.sh]
1329 regression test for CVE-2006-0225 written by dtucker@
d5b44cf1 1330 - djm@cvs.openbsd.org 2006/01/31 10:36:33
1331 [scp.sh]
1332 regress test for "scp a b c" where "c" is not a directory
0ce89457 1333
eeb27c78 133420060129
1335 - (dtucker) [configure.ac opensshd.init.in] Bug #1144: Use /bin/sh for the
1336 opensshd.init script interpretter if /sbin/sh does not exist. ok tim@
1337
16ad260d 133820060120
1339 - (dtucker) OpenBSD CVS Sync
1340 - jmc@cvs.openbsd.org 2006/01/15 17:37:05
1341 [ssh.1]
1342 correction from deraadt
43a7d9e7 1343 - jmc@cvs.openbsd.org 2006/01/18 10:53:29
1344 [ssh.1]
1345 add a section on ssh-based vpn, based on reyk's README.tun;
db175906 1346 - dtucker@cvs.openbsd.org 2006/01/20 00:14:55
1347 [scp.1 ssh.1 ssh_config.5 sftp.1]
1348 Document RekeyLimit. Based on patch from jan.iven at cern.ch from mindrot
1349 #1056 with feedback from jmc, djm and markus; ok jmc@ djm@
16ad260d 1350
aaa18db9 135120060114
1352 - (djm) OpenBSD CVS Sync
1353 - jmc@cvs.openbsd.org 2006/01/06 13:27:32
1354 [ssh.1]
1355 weed out some duplicate info in the known_hosts FILES entries;
1356 ok djm
5d7b356f 1357 - jmc@cvs.openbsd.org 2006/01/06 13:29:10
1358 [ssh.1]
1359 final round of whacking FILES for duplicate info, and some consistency
1360 fixes;
1361 ok djm
dbb3bf96 1362 - jmc@cvs.openbsd.org 2006/01/12 14:44:12
1363 [ssh.1]
1364 split sections on tcp and x11 forwarding into two sections.
1365 add an example in the tcp section, based on sth i wrote for ssh faq;
1366 help + ok: djm markus dtucker
5d4e571c 1367 - jmc@cvs.openbsd.org 2006/01/12 18:48:48
1368 [ssh.1]
1369 refer to `TCP' rather than `TCP/IP' in the context of connection
1370 forwarding;
1371 ok markus
e5d4cfad 1372 - jmc@cvs.openbsd.org 2006/01/12 22:20:00
1373 [sshd.8]
1374 refer to TCP forwarding, rather than TCP/IP forwarding;
0b3950af 1375 - jmc@cvs.openbsd.org 2006/01/12 22:26:02
1376 [ssh_config.5]
1377 refer to TCP forwarding, rather than TCP/IP forwarding;
c2da64a1 1378 - jmc@cvs.openbsd.org 2006/01/12 22:34:12
1379 [ssh.1]
1380 back out a sentence - AUTHENTICATION already documents this;
aaa18db9 1381
794febd2 138220060109
1383 - (dtucker) [contrib/cygwin/ssh-host-config] Make sshd service depend on
1384 tcpip service so it's always started after IP is up. Patch from
1385 vinschen at redhat.com.
1386
0624a70b 138720060106
1388 - (djm) OpenBSD CVS Sync
1389 - jmc@cvs.openbsd.org 2006/01/03 16:31:10
1390 [ssh.1]
1391 move FILES to a -compact list, and make each files an item in that list.
1392 this avoids nastly line wrap when we have long pathnames, and treats
1393 each file as a separate item;
1394 remove the .Pa too, since it is useless.
0502727e 1395 - jmc@cvs.openbsd.org 2006/01/03 16:35:30
1396 [ssh.1]
1397 use a larger width for the ENVIRONMENT list;
f403d7b5 1398 - jmc@cvs.openbsd.org 2006/01/03 16:52:36
1399 [ssh.1]
1400 put FILES in some sort of order: sort by pathname
c0907b37 1401 - jmc@cvs.openbsd.org 2006/01/03 16:55:18
1402 [ssh.1]
1403 tweak the description of ~/.ssh/environment
f3119772 1404 - jmc@cvs.openbsd.org 2006/01/04 18:42:46
1405 [ssh.1]
1406 chop out some duplication in the .{r,s}hosts/{h,sh}osts.equiv FILES
1407 entries;
1408 ok markus
6c276bb9 1409 - jmc@cvs.openbsd.org 2006/01/04 18:45:01
1410 [ssh.1]
1411 remove .Xr's to rsh(1) and telnet(1): they are hardly needed;
926f6a7a 1412 - jmc@cvs.openbsd.org 2006/01/04 19:40:24
1413 [ssh.1]
1414 +.Xr ssh-keyscan 1 ,
ccce91ef 1415 - jmc@cvs.openbsd.org 2006/01/04 19:50:09
1416 [ssh.1]
1417 -.Xr gzip 1 ,
db382686 1418 - djm@cvs.openbsd.org 2006/01/05 23:43:53
1419 [misc.c]
1420 check that stdio file descriptors are actually closed before clobbering
1421 them in sanitise_stdfd(). problems occurred when a lower numbered fd was
1422 closed, but higher ones weren't. spotted by, and patch tested by
1423 Frédéric Olivié
0624a70b 1424
d3506f6d 142520060103
1426 - (djm) [channels.c] clean up harmless merge error, from reyk@
1427
79e46360 142820060103
1429 - (djm) OpenBSD CVS Sync
1430 - jmc@cvs.openbsd.org 2006/01/02 17:09:49
1431 [ssh_config.5 sshd_config.5]
1432 some corrections from michael knudsen;
1433
6f6cd507 143420060102
1435 - (djm) [README.tun] Add README.tun, missed during sync of tun(4) support
4b5e6c81 1436 - (djm) OpenBSD CVS Sync
1437 - jmc@cvs.openbsd.org 2005/12/31 10:46:17
1438 [ssh.1]
1439 merge the "LOGIN SESSION AND REMOTE EXECUTION" and "SERVER
1440 AUTHENTICATION" sections into "AUTHENTICATION";
1441 some rewording done to make the text read better, plus some
1442 improvements from djm;
1443 ok djm
b92605e1 1444 - jmc@cvs.openbsd.org 2005/12/31 13:44:04
1445 [ssh.1]
1446 clean up ENVIRONMENT a little;
20892533 1447 - jmc@cvs.openbsd.org 2005/12/31 13:45:19
1448 [ssh.1]
1449 .Nm does not require an argument;
1f1fbbd8 1450 - stevesk@cvs.openbsd.org 2006/01/01 08:59:27
1451 [includes.h misc.c]
1452 move <net/if.h>; ok djm@
81c042a3 1453 - stevesk@cvs.openbsd.org 2006/01/01 10:08:48
1454 [misc.c]
1455 no trailing "\n" for debug()
3eee3b86 1456 - djm@cvs.openbsd.org 2006/01/02 01:20:31
1457 [sftp-client.c sftp-common.h sftp-server.c]
1458 use a common max. packet length, no binary change
b1b65311 1459 - reyk@cvs.openbsd.org 2006/01/02 07:53:44
1460 [misc.c]
1461 clarify tun(4) opening - set the mode and bring the interface up. also
1462 (re)sets the tun(4) layer 2 LINK0 flag for existing tunnel interfaces.
1463 suggested and ok by djm@
d141c93d 1464 - jmc@cvs.openbsd.org 2006/01/02 12:31:06
1465 [ssh.1]
1466 start to cut some duplicate info from FILES;
1467 help/ok djm
6f6cd507 1468
0f6cb079 146920060101
1470 - (djm) [Makefile.in configure.ac includes.h misc.c]
1471 [openbsd-compat/port-tun.c openbsd-compat/port-tun.h] Add support
1472 for tunnel forwarding for FreeBSD and NetBSD. NetBSD's support is
1473 limited to IPv4 tunnels only, and most versions don't support the
1474 tap(4) device at all.
b5081213 1475 - (djm) [configure.ac] Fix linux/if_tun.h test
3aef38da 1476 - (djm) [openbsd-compat/port-tun.c] Linux needs linux/if.h too
0f6cb079 1477
1908529f 147820051229
1479 - (djm) OpenBSD CVS Sync
1480 - stevesk@cvs.openbsd.org 2005/12/28 22:46:06
1481 [canohost.c channels.c clientloop.c]
1482 use 'break-in' for consistency; ok deraadt@ ok and input jmc@
c1c6a032 1483 - reyk@cvs.openbsd.org 2005/12/30 15:56:37
1484 [channels.c channels.h clientloop.c]
1485 add channel output filter interface.
1486 ok djm@, suggested by markus@
3da242db 1487 - jmc@cvs.openbsd.org 2005/12/30 16:59:00
1488 [sftp.1]
1489 do not suggest that interactive authentication will work
1490 with the -b flag;
1491 based on a diff from john l. scarfone;
1492 ok djm
f470cf48 1493 - stevesk@cvs.openbsd.org 2005/12/31 01:38:45
1494 [ssh.1]
1495 document -MM; ok djm@
e914f53a 1496 - (djm) [openbsd-compat/port-tun.c openbsd-compat/port-tun.h configure.ac]
1497 [serverloop.c ssh.c openbsd-compat/Makefile.in]
1498 [openbsd-compat/openbsd-compat.h] Implement tun(4) forwarding
1499 compatability support for Linux, diff from reyk@
c40f09ca 1500 - (djm) [configure.ac] Disable Linux tun(4) compat code if linux/tun.h does
1501 not exist
d91775e1 1502 - (djm) [configure.ac] oops, make that linux/if_tun.h
1908529f 1503
b5c428f0 150420051229
1505 - (tim) [buildpkg.sh.in] grep for $SSHDUID instead of $SSHDGID on /etc/passwd
1506
6b0117fd 150720051224
1508 - (djm) OpenBSD CVS Sync
1509 - jmc@cvs.openbsd.org 2005/12/20 21:59:43
1510 [ssh.1]
1511 merge the sections on protocols 1 and 2 into one section on
1512 authentication;
1513 feedback djm dtucker
1514 ok deraadt markus dtucker
5c5546be 1515 - jmc@cvs.openbsd.org 2005/12/20 22:02:50
1516 [ssh.1]
1517 .Ss -> .Sh: subsections have not made this page more readable
e6c7c03e 1518 - jmc@cvs.openbsd.org 2005/12/20 22:09:41
1519 [ssh.1]
1520 move info on ssh return values and config files up into the main
1521 description;
e49f7abd 1522 - jmc@cvs.openbsd.org 2005/12/21 11:48:16
1523 [ssh.1]
1524 -L and -R descriptions are now above, not below, ~C description;
8770ef76 1525 - jmc@cvs.openbsd.org 2005/12/21 11:57:25
1526 [ssh.1]
1527 options now described `above', rather than `later';
6e1e9c73 1528 - jmc@cvs.openbsd.org 2005/12/21 12:53:31
1529 [ssh.1]
1530 -Y does X11 forwarding too;
1531 ok markus
6cd6c442 1532 - stevesk@cvs.openbsd.org 2005/12/21 22:44:26
1533 [sshd.8]
1534 clarify precedence of -p, Port, ListenAddress; ok and help jmc@
0c9851b1 1535 - jmc@cvs.openbsd.org 2005/12/22 10:31:40
1536 [ssh_config.5]
1537 put the description of "UsePrivilegedPort" in the correct place;
9bf41db3 1538 - jmc@cvs.openbsd.org 2005/12/22 11:23:42
1539 [ssh.1]
1540 expand the description of -w somewhat;
1541 help/ok reyk
86131206 1542 - jmc@cvs.openbsd.org 2005/12/23 14:55:53
1543 [ssh.1]
1544 - sync the description of -e w/ synopsis
1545 - simplify the description of -I
1546 - note that -I is only available if support compiled in, and that it
1547 isn't by default
1548 feedback/ok djm@
025fc42e 1549 - jmc@cvs.openbsd.org 2005/12/23 23:46:23
1550 [ssh.1]
1551 less mark up for -c;
678143bd 1552 - djm@cvs.openbsd.org 2005/12/24 02:27:41
1553 [session.c sshd.c]
1554 eliminate some code duplicated in privsep and non-privsep paths, and
1555 explicitly clear SIGALRM handler; "groovy" deraadt@
6b0117fd 1556
a2b1748a 155720051220
1558 - (dtucker) OpenBSD CVS Sync
1559 - reyk@cvs.openbsd.org 2005/12/13 15:03:02
1560 [serverloop.c]
1561 if forced_tun_device is not set, it is -1 and not SSH_TUNID_ANY
442c8b33 1562 - jmc@cvs.openbsd.org 2005/12/16 18:07:08
1563 [ssh.1]
1564 move the option descriptions up the page: start of a restructure;
1565 ok markus deraadt
e426efa9 1566 - jmc@cvs.openbsd.org 2005/12/16 18:08:53
1567 [ssh.1]
1568 simplify a sentence;
28ca205d 1569 - jmc@cvs.openbsd.org 2005/12/16 18:12:22
1570 [ssh.1]
1571 make the description of -c a little nicer;
a55c1733 1572 - jmc@cvs.openbsd.org 2005/12/16 18:14:40
1573 [ssh.1]
1574 signpost the protocol sections;
8918b906 1575 - stevesk@cvs.openbsd.org 2005/12/17 21:13:05
1576 [ssh_config.5 session.c]
1577 spelling: fowarding, fowarded
551ed07c 1578 - stevesk@cvs.openbsd.org 2005/12/17 21:36:42
1579 [ssh_config.5]
1580 spelling: intented -> intended
3aa43b24 1581 - dtucker@cvs.openbsd.org 2005/12/20 04:41:07
1582 [ssh.c]
1583 exit(255) on error to match description in ssh(1); bz #1137; ok deraadt@
a2b1748a 1584
e5146707 158520051219
1586 - (dtucker) [cipher-aes.c cipher-ctr.c cipher.c configure.ac
1587 openbsd-compat/openssl-compat.h] Check for and work around broken AES
1588 ciphers >128bit on (some) Solaris 10 systems. ok djm@
1589
2f89281c 159020051217
1591 - (dtucker) [defines.h] HP-UX system headers define "YES" and "NO" which
1592 scp.c also uses, so undef them here.
31b0732a 1593 - (dtucker) [configure.ac openbsd-compat/bsd-snprintf.c] Bug #1133: Our
1594 snprintf replacement can have a conflicting declaration in HP-UX's system
1595 headers (const vs. no const) so we now check for and work around it. Patch
1596 from the dynamic duo of David Leonard and Ted Percival.
2f89281c 1597
9fed02d8 159820051214
1599 - (dtucker) OpenBSD CVS Sync (regress/)
1600 - dtucker@cvs.openbsd.org 2005/12/30 04:36:39
1601 [regress/scp-ssh-wrapper.sh]
1602 Fix assumption about how many args scp will pass; ok djm@
1603
d7cf99ff 160420051213
1605 - (djm) OpenBSD CVS Sync
1606 - jmc@cvs.openbsd.org 2005/11/30 11:18:27
1607 [ssh.1]
1608 timezone -> time zone
04ac3e62 1609 - jmc@cvs.openbsd.org 2005/11/30 11:45:20
1610 [ssh.1]
1611 avoid ambiguities in describing TZ;
1612 ok djm@
d20f3c9e 1613 - reyk@cvs.openbsd.org 2005/12/06 22:38:28
1614 [auth-options.c auth-options.h channels.c channels.h clientloop.c]
1615 [misc.c misc.h readconf.c readconf.h scp.c servconf.c servconf.h]
1616 [serverloop.c sftp.c ssh.1 ssh.c ssh_config ssh_config.5 sshconnect.c]
1617 [sshconnect.h sshd.8 sshd_config sshd_config.5]
1618 Add support for tun(4) forwarding over OpenSSH, based on an idea and
1619 initial channel code bits by markus@. This is a simple and easy way to
1620 use OpenSSH for ad hoc virtual private network connections, e.g.
1621 administrative tunnels or secure wireless access. It's based on a new
1622 ssh channel and works similar to the existing TCP forwarding support,
1623 except that it depends on the tun(4) network interface on both ends of
1624 the connection for layer 2 or layer 3 tunneling. This diff also adds
1625 support for LocalCommand in the ssh(1) client.
d20f3c9e 1626 ok djm@, markus@, jmc@ (manpages), tested and discussed with others
ceec33f3 1627 - djm@cvs.openbsd.org 2005/12/07 03:52:22
1628 [clientloop.c]
1629 reyk forgot to compile with -Werror (missing header)
985bb789 1630 - jmc@cvs.openbsd.org 2005/12/07 10:52:13
1631 [ssh.1]
1632 - avoid line split in SYNOPSIS
1633 - add args to -w
1634 - kill trailing whitespace
64925c6d 1635 - jmc@cvs.openbsd.org 2005/12/08 14:59:44
1636 [ssh.1 ssh_config.5]
1637 make `!command' a little clearer;
1638 ok reyk
030723f9 1639 - jmc@cvs.openbsd.org 2005/12/08 15:06:29
1640 [ssh_config.5]
1641 keep options in order;
a4f24bf8 1642 - reyk@cvs.openbsd.org 2005/12/08 18:34:11
1643 [auth-options.c includes.h misc.c misc.h readconf.c servconf.c]
1644 [serverloop.c ssh.c ssh_config.5 sshd_config.5 configure.ac]
1645 two changes to the new ssh tunnel support. this breaks compatibility
1646 with the initial commit but is required for a portable approach.
1647 - make the tunnel id u_int and platform friendly, use predefined types.
1648 - support configuration of layer 2 (ethernet) or layer 3
1649 (point-to-point, default) modes. configuration is done using the
1650 Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and
1651 restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option
1652 in sshd_config(5).
1653 ok djm@, man page bits by jmc@
a274ba38 1654 - jmc@cvs.openbsd.org 2005/12/08 21:37:50
1655 [ssh_config.5]
1656 new sentence, new line;
b872f7f0 1657 - markus@cvs.openbsd.org 2005/12/12 13:46:18
1658 [channels.c channels.h session.c]
1659 make sure protocol messages for internal channels are ignored.
1660 allow adjust messages for non-open channels; with and ok djm@
6306853a 1661 - (djm) [misc.c] Disable tunnel code for non-OpenBSD (for now), enable
1662 again by providing a sys_tun_open() function for your platform and
1663 setting the CUSTOM_SYS_TUN_OPEN define. More work is required to match
1664 OpenBSD's tunnel protocol, which prepends the address family to the
1665 packet
d7cf99ff 1666
fbc06315 166720051201
1668 - (djm) [envpass.sh] Remove regress script that was accidentally committed
1669 in top level directory and not noticed for over a year :)
1670
6e94bd72 167120051129
1672 - (tim) [ssh-keygen.c] Move DSA length test after setting default when
1673 bits == 0.
60dc0294 1674 - (dtucker) OpenBSD CVS Sync
1675 - dtucker@cvs.openbsd.org 2005/11/29 02:04:55
1676 [ssh-keygen.c]
1677 Populate default key sizes before checking them; from & ok tim@
e45da4d6 1678 - (tim) [configure.ac sshd.8] Enable locked account check (a "*LK*" string)
1679 for UnixWare.
6e94bd72 1680
b7bb251f 168120051128
1682 - (dtucker) [regress/yes-head.sh] Work around breakage caused by some
1683 versions of GNU head. Based on patch from zappaman at buraphalinux.org
8b396721 1684 - (dtucker) [includes.h] Bug #1122: __USE_GNU is a glibc internal macro, use
1685 _GNU_SOURCE instead. Patch from t8m at centrum.cz.
c6d7b211 1686 - (dtucker) OpenBSD CVS Sync
1687 - dtucker@cvs.openbsd.org 2005/11/28 05:16:53
1688 [ssh-keygen.1 ssh-keygen.c]
1689 Enforce DSA key length of exactly 1024 bits to comply with FIPS-186-2,
1690 increase minumum RSA key size to 768 bits and update man page to reflect
1691 these. Patch originally bz#1119 (senthilkumar_sen at hotpop.com),
1692 ok djm@, grudging ok deraadt@.
98e93fbc 1693 - dtucker@cvs.openbsd.org 2005/11/28 06:02:56
1694 [ssh-agent.1]
1695 Update agent socket path templates to reflect reality, correct xref for
1696 time formats. bz#1121, patch from openssh at roumenpetrov.info, ok djm@
b7bb251f 1697
961c2997 169820051126
1699 - (dtucker) [configure.ac] Bug #1126: AIX 5.2 and 5.3 (and presumably newer,
1700 when they're available) need the real UID set otherwise pam_chauthtok will
1701 set ADMCHG after changing the password, forcing the user to change it
1702 again immediately.
1703
ccc45ee0 170420051125
1705 - (dtucker) [configure.ac] Apply tim's fix for older systems where the
1706 resolver state in resolv.h is "state" not "__res_state". With slight
1707 modification by me to also work on old AIXes. ok djm@
419094c6 1708 - (dtucker) [progressmeter.c scp.c sftp-server.c] Use correct casts for
1709 snprintf formats, fixes warnings on some 64 bit platforms. Patch from
1710 shaw at vranix.com, ok djm@
ccc45ee0 1711
171220051124
9a406e1e 1713 - (djm) [configure.ac openbsd-compat/Makefile.in openbsd-compat/bsd-asprintf.c
1714 openbsd-compat/bsd-snprintf.c openbsd-compat/openbsd-compat.h] Add an
1715 asprintf() implementation, after syncing our {v,}snprintf() implementation
1716 with some extra fixes from Samba's version. With help and debugging from
1717 dtucker and tim; ok dtucker@
d08db6d1 1718 - (dtucker) [configure.ac] Fix typos in comments and AC_SEARCH_LIB argument
1719 order in Reliant Unix block. Patch from johane at lysator.liu.se.
d77c7dff 1720 - (dtucker) [regress/test-exec.sh] Use 1024 bit keys since we generate so
1721 many and use them only once. Speeds up testing on older/slower hardware.
9a406e1e 1722
932ab351 172320051122
1724 - (dtucker) OpenBSD CVS Sync
1725 - deraadt@cvs.openbsd.org 2005/11/12 18:37:59
1726 [ssh-add.c]
1727 space
29accf74 1728 - deraadt@cvs.openbsd.org 2005/11/12 18:38:15
1729 [scp.c]
1730 avoid close(-1), as in rcp; ok cloder
a001f9d7 1731 - millert@cvs.openbsd.org 2005/11/15 11:59:54
1732 [includes.h]
1733 Include sys/queue.h explicitly instead of assuming some other header
1734 will pull it in. At the moment it gets pulled in by sys/select.h
1735 (which ssh has no business including) via event.h. OK markus@
1736 (ID sync only in -portable)
426cef74 1737 - dtucker@cvs.openbsd.org 2005/11/21 09:42:10
1738 [auth-krb5.c]
1739 Perform Kerberos calls even for invalid users to prevent leaking
1740 information about account validity. bz #975, patch originally from
1741 Senthil Kumar, sanity checked by Simon Wilkinson, tested by djm@, biorn@,
1742 ok markus@
18f8ef7a 1743 - dtucker@cvs.openbsd.org 2005/11/22 03:36:03
1744 [hostfile.c]
1745 Correct format/arguments to debug call; spotted by shaw at vranix.com
1746 ok djm@
dfde7f6e 1747 - (dtucker) [loginrec.c] Add casts to prevent compiler warnings, patch
1748 from shaw at vranix.com.
932ab351 1749
60e10887 175020051120
1751 - (dtucker) [openbsd-compat/openssl-compat.h] Add comment explaining what
1752 is going on.
1753
4162eae5 175420051112
1755 - (dtucker) [openbsd-compat/getrrsetbyname.c] Restore Portable-specific
1756 ifdef lost during sync. Spotted by tim@.
f97dc218 1757 - (dtucker) [openbsd-compat/{realpath.c,stroll.c,rresvport.c}] $OpenBSD tag.
eeee8237 1758 - (dtucker) [configure.ac] Use "$AWK" instead of "awk" in gcc version test.
23361281 1759 - (dtucker) [configure.ac] Remove duplicate utimes() check. ok djm@
29aaf112 1760 - (dtucker) [regress/reconfigure.sh] Fix potential race in the reconfigure
1761 test: if sshd takes too long to reconfigure the subsequent connection will
1762 fail. Zap pidfile before HUPing sshd which will rewrite it when it's ready.
4162eae5 1763
e1658b5c 176420051110
b69585d9 1765 - (dtucker) [openbsd-compat/setenv.c] Merge changes for __findenv from
e1658b5c 1766 OpenBSD getenv.c revs 1.4 - 1.8 (ANSIfication of arguments, removal of
1767 "register").
b69585d9 1768 - (dtucker) [openbsd-compat/setenv.c] Make __findenv static, remove
7b2dcf21 1769 unnecessary prototype.
b69585d9 1770 - (dtucker) [openbsd-compat/setenv.c] Sync changes from OpenBSD setenv.c
1771 revs 1.7 - 1.9.
c080bed1 1772 - (dtucker) [auth-krb5.c] Fix -Wsign-compare warning in non-Heimdal path.
1773 Patch from djm@.
dbf07ba2 1774 - (dtucker) [configure.ac] Disable pointer-sign warnings on gcc 4.0+
1775 since they're not useful right now. Patch from djm@.
242652fe 1776 - (dtucker) [openbsd-compat/getgrouplist.c] Sync OpenBSD revs 1.10 - 1.2 (ANSI
1777 prototypes, removal of "register").
432e59f9 1778 - (dtucker) [openbsd-compat/strlcat.c] Sync OpenBSD revs 1.11 - 1.12 (removal
1779 of "register").
f6d4fb87 1780 - (dtucker) [openbsd-compat/{LOTS}] Move the "OPENBSD ORIGINAL" markers to
1781 after the copyright notices. Having them at the top next to the CVSIDs
1782 guarantees a conflict for each and every sync.
e4f65477 1783 - (dtucker) [openbsd-compat/strlcpy.c] Update from OpenBSD 1.8 -> 1.10.
bfd4a832 1784 - (dtucker) [openbsd-compat/sigact.h] Add "OPENBSD ORIGINAL" marker.
bc16ca63 1785 - (dtucker) [openbsd-compat/strmode.c] Update from OpenBSD 1.5 -> 1.7.
1786 Removal of rcsid, "whiteout" inode type.
7dfb4a82 1787 - (dtucker) [openbsd-compat/basename.c] Update from OpenBSD 1.11 -> 1.14.
1788 Removal of rcsid, will no longer strlcpy parts of the string.
d8922805 1789 - (dtucker) [openbsd-compat/strtoll.c] Update from OpenBSD 1.4 -> 1.5.
4ff445f1 1790 - (dtucker) [openbsd-compat/strtoul.c] Update from OpenBSD 1.5 -> 1.7.
e1829842 1791 - (dtucker) [openbsd-compat/readpassphrase.c] Update from OpenBSD 1.16 -> 1.18.
625552b8 1792 - (dtucker) [openbsd-compat/readpassphrase.h] Update from OpenBSD 1.3 -> 1.5.
a65ea33b 1793 - (dtucker) [openbsd-compat/glob.c] Update from OpenBSD 1.22 -> 1.25.
b84a707a 1794 - (dtucker) [openbsd-compat/glob.h] Update from OpenBSD 1.8 -> 1.9.
281bbb02 1795 - (dtucker) [openbsd-compat/getcwd.c] Update from OpenBSD 1.9 -> 1.14.
16d51c41 1796 - (dtucker) [openbsd-compat/getcwd.c] Replace lstat with fstat to match up
1797 with OpenBSD code since we don't support platforms without fstat any more.
b53df919 1798 - (dtucker) [openbsd-compat/inet_aton.c] Update from OpenBSD 1.7 -> 1.9.
68b36828 1799 - (dtucker) [openbsd-compat/inet_ntoa.c] Update from OpenBSD 1.4 -> 1.6.
1800 - (dtucker) [openbsd-compat/inet_ntop.c] Update from OpenBSD 1.5 -> 1.7.
fc1c42f3 1801 - (dtucker) [openbsd-compat/daemon.c] Update from OpenBSD 1.5 -> 1.6.
0695e921 1802 - (dtucker) [openbsd-compat/strsep.c] Update from OpenBSD 1.5 -> 1.6.
3c8f7a26 1803 - (dtucker) [openbsd-compat/daemon.c] Update from OpenBSD 1.10 -> 1.13.
5bf337a5 1804 - (dtucker) [openbsd-compat/mktemp.c] Update from OpenBSD 1.17 -> 1.19.
8c603515 1805 - (dtucker) [openbsd-compat/rresvport.c] Update from OpenBSD 1.6 -> 1.8.
c9d7b187 1806 - (dtucker) [openbsd-compat/bindresvport.c] Add "OPENBSD ORIGINAL" marker.
295034ce 1807 - (dtucker) [openbsd-compat/bindresvport.c] Update from OpenBSD 1.16 -> 1.17.
3e6325a6 1808 - (dtucker) [openbsd-compat/sigact.c] Update from OpenBSD 1.3 -> 1.4.
1809 Id and copyright sync only, there were no substantial changes we need.
8d767ef2 1810 - (dtucker) [openbsd-compat/bsd-closefrom.c openbsd-compat/base64.c]
6bd2d8e5 1811 -Wsign-compare fixes from djm.
e1b4416e 1812 - (dtucker) [openbsd-compat/sigact.h] Update from OpenBSD 1.2 -> 1.3.
1813 Id and copyright sync only, there were no substantial changes we need.
cd595991 1814 - (dtucker) [configure.ac] Try to get the gcc version number in a way that
1815 doesn't change between versions, and use a safer default.
e1658b5c 1816
255d3e00 181720051105
1818 - (djm) OpenBSD CVS Sync
1819 - markus@cvs.openbsd.org 2005/10/07 11:13:57
1820 [ssh-keygen.c]
1821 change DSA default back to 1024, as it's defined for 1024 bits only
1822 and this causes interop problems with other clients. moreover,
1823 in order to improve the security of DSA you need to change more
1824 components of DSA key generation (e.g. the internal SHA1 hash);
1825 ok deraadt
8cd0437d 1826 - djm@cvs.openbsd.org 2005/10/10 10:23:08
1827 [channels.c channels.h clientloop.c serverloop.c session.c]
1828 fix regression I introduced in 4.2: X11 forwardings initiated after
1829 a session has exited (e.g. "(sleep 5; xterm) &") would not start.
1830 bz #1086 reported by t8m AT centrum.cz; ok markus@ dtucker@
442aee3a 1831 - djm@cvs.openbsd.org 2005/10/11 23:37:37
1832 [channels.c]
1833 bz #1076 set SO_REUSEADDR on X11 forwarding listner sockets, preventing
1834 bind() failure when a previous connection's listeners are in TIME_WAIT,
1835 reported by plattner AT inf.ethz.ch; ok dtucker@
b96eade6 1836 - stevesk@cvs.openbsd.org 2005/10/13 14:03:01
1837 [auth2-gss.c gss-genr.c gss-serv.c]
1838 remove unneeded #includes; ok markus@
6e902aec 1839 - stevesk@cvs.openbsd.org 2005/10/13 14:20:37
1840 [gss-serv.c]
1841 spelling in comments
6472fefc 1842 - stevesk@cvs.openbsd.org 2005/10/13 19:08:08
1843 [gss-serv-krb5.c gss-serv.c]
1844 unused declarations; ok deraadt@
1845 (id sync only for gss-serv-krb5.c)
adf8c40b 1846 - stevesk@cvs.openbsd.org 2005/10/13 19:13:41
1847 [dns.c]
1848 unneeded #include, unused declaration, little knf; ok deraadt@
8442cc66 1849 - stevesk@cvs.openbsd.org 2005/10/13 22:24:31
1850 [auth2-gss.c gss-genr.c gss-serv.c monitor.c]
1851 KNF; ok djm@
17318dd6 1852 - stevesk@cvs.openbsd.org 2005/10/14 02:17:59
1853 [ssh-keygen.c ssh.c sshconnect2.c]
1854 no trailing "\n" for log functions; ok djm@
8c4bd764 1855 - stevesk@cvs.openbsd.org 2005/10/14 02:29:37
1856 [channels.c clientloop.c]
1857 free()->xfree(); ok djm@
ed82a2a9 1858 - stevesk@cvs.openbsd.org 2005/10/15 15:28:12
1859 [sshconnect.c]
1860 make external definition static; ok deraadt@
7238b6e4 1861 - stevesk@cvs.openbsd.org 2005/10/17 13:45:05
1862 [dns.c]
1863 fix memory leaks from 2 sources:
1864 1) key_fingerprint_raw()
1865 2) malloc in dns_read_rdata()
1866 ok jakob@
1867 - stevesk@cvs.openbsd.org 2005/10/17 14:01:28
1868 [dns.c]
1869 remove #ifdef LWRES; ok jakob@
8374cf6f 1870 - stevesk@cvs.openbsd.org 2005/10/17 14:13:35
1871 [dns.c dns.h]
1872 more cleanups; ok jakob@
6b0b0d65 1873 - djm@cvs.openbsd.org 2005/10/30 01:23:19
1874 [ssh_config.5]
1875 mention control socket fallback behaviour, reported by
1876 tryponraj AT gmail.com
2995db03 1877 - djm@cvs.openbsd.org 2005/10/30 04:01:03
1878 [ssh-keyscan.c]
1879 make ssh-keygen discard junk from server before SSH- ident, spotted by
1880 dave AT cirt.net; ok dtucker@
aa9bc1de 1881 - djm@cvs.openbsd.org 2005/10/30 04:03:24
1882 [ssh.c]
1883 fix misleading debug message; ok dtucker@
3a85986d 1884 - dtucker@cvs.openbsd.org 2005/10/30 08:29:29
1885 [canohost.c sshd.c]
1886 Check for connections with IP options earlier and drop silently. ok djm@
db98627d 1887 - jmc@cvs.openbsd.org 2005/10/30 08:43:47
1888 [ssh_config.5]
1889 remove trailing whitespace;
7b9b0103 1890 - djm@cvs.openbsd.org 2005/10/30 08:52:18
1891 [clientloop.c packet.c serverloop.c session.c ssh-agent.c ssh-keygen.c]
1892 [ssh.c sshconnect.c sshconnect1.c sshd.c]
1893 no need to escape single quotes in comments, no binary change
bdd3b323 1894 - dtucker@cvs.openbsd.org 2005/10/31 06:15:04
1895 [sftp.c]
1896 Fix sorting with "ls -1" command. From Robert Tsai, "looks right" deraadt@
882c9d5a 1897 - djm@cvs.openbsd.org 2005/10/31 11:12:49
1898 [ssh-keygen.1 ssh-keygen.c]
1899 generate a protocol 2 RSA key by default
6af12d46 1900 - djm@cvs.openbsd.org 2005/10/31 11:48:29
1901 [serverloop.c]
1902 make sure we clean up wtmp, etc. file when we receive a SIGTERM,
1903 SIGINT or SIGQUIT when running without privilege separation (the
1904 normal privsep case is already OK). Patch mainly by dtucker@ and
1905 senthilkumar_sen AT hotpop.com; ok dtucker@
3543c5e1 1906 - jmc@cvs.openbsd.org 2005/10/31 19:55:25
1907 [ssh-keygen.1]
1908 grammar;
0bbbf2a4 1909 - dtucker@cvs.openbsd.org 2005/11/03 13:38:29
1910 [canohost.c]
1911 Cache reverse lookups with and without DNS separately; ok markus@
47e5dc72 1912 - djm@cvs.openbsd.org 2005/11/04 05:15:59
1913 [kex.c kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c]
1914 remove hardcoded hash lengths in key exchange code, allowing
1915 implementation of KEX methods with different hashes (e.g. SHA-256);
1916 ok markus@ dtucker@ stevesk@
27e3ef36 1917 - djm@cvs.openbsd.org 2005/11/05 05:01:15
1918 [bufaux.c]
1919 Fix leaks in error paths, bz #1109 and #1110 reported by kremenek AT
1920 cs.stanford.edu; ok dtucker@
e557f3b5 1921 - (dtucker) [README.platform] Add PAM section.
ebb049f1 1922 - (djm) [openbsd-compat/getrrsetbyname.c] Sync to latest OpenBSD version,
1923 resolving memory leak bz#1111 reported by kremenek AT cs.stanford.edu;
1924 ok dtucker@
255d3e00 1925
bd2a0801 192620051102
1927 - (dtucker) [openbsd-compat/bsd-misc.c] Bug #1108: fix broken strdup().
1928 Reported by olavi at ipunplugged.com and antoine.brodin at laposte.net
1929 via FreeBSD.
1930
5097eaa9 193120051030
1932 - (djm) [contrib/suse/openssh.spec contrib/suse/rc.
1933 sshd contrib/suse/sysconfig.ssh] Bug #1106: Updated SuSE spec and init
1934 files from imorgan AT nas.nasa.gov
0a61a240 1935 - (dtucker) [session.c] Bug #1045do not check /etc/nologin when PAM is
1936 enabled, instead allow PAM to handle it. Note that on platforms using PAM,
1937 the pam_nologin module should be added to sshd's session stack in order to
1938 maintain exising behaviour. Based on patch and discussion from t8m at
1939 centrum.cz, ok djm@
5097eaa9 1940
90f15776 194120051025
1942 - (dtucker) [configure.ac] Relocate LLONG_MAX calculation to after the
1943 sizeof(long long) checks, to make fixing bug #1104 easier (no changes
1944 yet).
d75dfaa6 1945 - (dtucker) [configure.ac] Bug #1104: Tru64's printf family doesn't
1946 understand "%lld", even though the compiler has "long long", so handle
1947 it as a special case. Patch tested by mcaskill.scott at epa.gov.
b8bc9d84 1948 - (dtucker) [contrib/cygwin/ssh-user-config] Remove duplicate yes/no
1949 prompt. Patch from vinschen at redhat.com.
90f15776 1950
b0e7249f 195120051017
1952 - (dtucker) [configure.ac] Bug #1097: Fix configure for cross-compiling.
1953 /etc/default/login report and testing from aabaker at iee.org, corrections
1954 from tim@.
1955
8034a348 195620051009
1957 - (dtucker) [configure.ac defines.h openbsd-compat/vis.{c,h}] Sync current
1958 versions from OpenBSD. ok djm@
1959
83f987c3 196020051008
1961 - (dtucker) [configure.ac] Bug #1098: define $MAIL for HP-UX; report from
1962 brian.smith at agilent com.
1012885d 1963 - (djm) [configure.ac] missing 'test' call for -with-Werror test
83f987c3 1964
278f9900 196520051005
1966 - (dtucker) [configure.ac sshd.8] Enable locked account check (a prepended
1967 "*LOCKED*" string) for FreeBSD. Patch jeremie at le-hen.org and
1968 senthilkumar_sen at hotpop.com.
1969
59e5aff5 197020051003
1971 - (dtucker) OpenBSD CVS Sync
1972 - markus@cvs.openbsd.org 2005/09/07 08:53:53
1973 [channels.c]
1974 enforce chanid != NULL; ok djm
b5443199 1975 - markus@cvs.openbsd.org 2005/09/09 19:18:05
1976 [clientloop.c]
1977 typo; from mark at mcs.vuw.ac.nz, bug #1082
fd6168c1 1978 - djm@cvs.openbsd.org 2005/09/13 23:40:07
1979 [sshd.c ssh.c misc.h sftp.c ssh-keygen.c ssh-keysign.c sftp-server.c
1980 scp.c misc.c ssh-keyscan.c ssh-add.c ssh-agent.c]
1981 ensure that stdio fds are attached; ok deraadt@
5ddc5eb4 1982 - djm@cvs.openbsd.org 2005/09/19 11:37:34
1983 [ssh_config.5 ssh.1]
1984 mention ability to specify bind_address for DynamicForward and -D options;
1985 bz#1077 spotted by Haruyama Seigo
d77dd4d7 1986 - djm@cvs.openbsd.org 2005/09/19 11:47:09
1987 [sshd.c]
1988 stop connection abort on rekey with delayed compression enabled when
1989 post-auth privsep is disabled (e.g. when root is logged in); ok dtucker@
67003554 1990 - djm@cvs.openbsd.org 2005/09/19 11:48:10
1991 [gss-serv.c]
1992 typo
37c406a8 1993 - jmc@cvs.openbsd.org 2005/09/19 15:38:27
1994 [ssh.1]
1995 some more .Bk/.Ek to avoid ugly line split;
80e29ee6 1996 - jmc@cvs.openbsd.org 2005/09/19 15:42:44
1997 [ssh.c]
1998 update -D usage here too;
2915e42b 1999 - djm@cvs.openbsd.org 2005/09/19 23:31:31
2000 [ssh.1]
2001 spelling nit from stevesk@
0d3d1077 2002 - djm@cvs.openbsd.org 2005/09/21 23:36:54
2003 [sshd_config.5]
2004 aquire -> acquire, from stevesk@
ae25711b 2005 - djm@cvs.openbsd.org 2005/09/21 23:37:11
2006 [sshd.c]
2007 change label at markus@'s request
8f921a4a 2008 - jaredy@cvs.openbsd.org 2005/09/30 20:34:26
2009 [ssh-keyscan.1]
2010 deploy .An -nosplit; ok jmc
d2130e1f 2011 - dtucker@cvs.openbsd.org 2005/10/03 07:44:42
2012 [canohost.c]
2013 Relocate check_ip_options call to prevent logging of garbage for
2014 connections with IP options set. bz#1092 from David Leonard,
2015 "looks good" deraadt@
1172d361 2016 - (dtucker) [regress/README.regress] Bug #989: Document limitation that scp
2017 is required in the system path for the multiplex test to work.
59e5aff5 2018
bfd17430 201920050930
2020 - (dtucker) [openbsd-compat/openbsd-compat.h] Bug #1096: Add prototype
2021 for strtoll. Patch from o.flebbe at science-computing.de.
cfb60d3a 2022 - (dtucker) [monitor.c] Bug #1087: Send loginmsg to preauth privsep
2023 child during PAM account check without clearing it. This restores the
2024 post-login warnings such as LDAP password expiry. Patch from Tomas Mraz
2025 with help from several others.
bfd17430 2026
140da888 202720050929
2028 - (dtucker) [monitor_wrap.c] Remove duplicate definition of loginmsg
2029 introduced during sync.
2030
4ebacf50 203120050928
2032 - (dtucker) [entropy.c] Use u_char for receiving RNG seed for consistency.
cafa6a80 2033 - (dtucker) [auth-pam.c] Bug #1028: send final non-query messages from
2034 PAM via keyboard-interactive. Patch tested by the folks at Vintela.
4ebacf50 2035
759ab0d9 203620050927
2037 - (dtucker) [entropy.c] Remove unnecessary tests for getuid and geteuid
2038 calls, since they can't possibly fail. ok djm@
72f02ae7 2039 - (dtucker) [entropy.c entropy.h sshd.c] Pass RNG seed to the reexec'ed
2040 process when sshd relies on ssh-random-helper. Should result in faster
2041 logins on systems without a real random device or prngd. ok djm@
759ab0d9 2042
b6c37221 204320050924
2044 - (dtucker) [auth2.c] Move start_pam() calls out of if-else block to remove
2045 duplicate call. ok djm@
2046
bb116c8e 204720050922
2048 - (dtucker) [configure.ac] Use -R linker flag for libedit too; patch from
2049 skeleten at shillest.net.
e47fb473 2050 - (dtucker) [configure.ac] Fix help for --with-opensc; patch from skeleten at
2051 shillest.net.
bb116c8e 2052
3466e002 205320050919
2054 - (tim) [aclocal.m4 configure.ac] Delete acconfig.h and add templates to
2055 AC_DEFINE and AC_DEFINE_UNQUOTED to quiet autoconf 2.59 warning messages.
f666dcfa 2056 ok dtucker@
3466e002 2057
f5555364 205820050912
2059 - (tim) [configure.ac] Bug 1078. Fix --without-kerberos5. Reported by
2060 Mike Frysinger.
2061
d2a3abef 206220050908
2063 - (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to
2064 OpenServer 6 and add osr5bigcrypt support so when someone migrates
2065 passwords between UnixWare and OpenServer they will still work. OK dtucker@
2066
b81ad920 206720050901
2068 - (djm) Update RPM spec file versions
2069
26d07095 207020050831
fe206de9 2071 - (djm) OpenBSD CVS Sync
2072 - djm@cvs.openbsd.org 2005/08/30 22:08:05
2073 [gss-serv.c sshconnect2.c]
2074 destroy credentials if krb5_kuserok() call fails. Stops credentials being
2075 delegated to users who are not authorised for GSSAPIAuthentication when
2076 GSSAPIDeletegateCredentials=yes and another authentication mechanism
2077 succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
2078 simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
ce08c00d 2079 - markus@cvs.openbsd.org 2005/08/31 09:28:42
2080 [version.h]
2081 4.2
0b6fb0e4 2082 - (dtucker) [README] Update release note URL to 4.2
26d07095 2083 - (tim) [configure.ac auth.c defines.h session.c openbsd-compat/port-uw.c
2084 openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] libiaf cleanup. Disable
2085 libiaf bits for OpenServer6. Free memory allocated by ia_get_logpwd().
2086 Feedback and OK dtucker@
fe206de9 2087
d7d2cc6e 208820050830
2089 - (tim) [configure.ac] Back out last change. It needs to be done differently.
2090
e718811a 209120050829
2092 - (tim) [configure.ac] ia_openinfo() seems broken on OSR6. Limit UW long
2093 password support to 7.x for now.
2094
4c653d8e 209520050826
2096 - (tim) [CREDITS LICENCE auth.c configure.ac defines.h includes.h session.c
2097 openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h
2098 openbsd-compat/xcrypt.c] New files [openssh/openbsd-compat/port-uw.c
2099 openssh/openbsd-compat/port-uw.h] Support long passwords (> 8-char)
2100 on UnixWare 7 from Dhiraj Gulati and Ahsan Rashid. Cleanup and testing
2101 by tim@. Feedback and OK dtucker@
2102
6177fa47 210320050823
2104 - (dtucker) [regress/test-exec.sh] Do not prepend an extra "/" to a fully-
2105 qualified sshd pathname since some systems (eg Cygwin) may consider "/foo"
2106 and "//foo" to be different. Spotted by vinschen at redhat.com.
2127ad65 2107 - (tim) [configure.ac] Not all gcc's support -Wsign-compare. Enhancements
2108 and OK dtucker@
2109 - (tim) [defines.h] PATH_MAX bits for OpenServer OK dtucker@
6177fa47 2110
157b6700 211120050821
2112 - (dtucker) [configure.ac defines.h includes.h sftp.c] Add support for
2113 LynxOS, patch from Olli Savia (ops at iki.fi). ok djm@
2114
879abf01 211520050816
9665ff9d 2116 - (djm) [ttymodes.c] bugzilla #1025: Fix encoding of _POSIX_VDISABLE,
879abf01 2117 from Jacob Nevins; ok dtucker@
2118
a345f787 211920050815
d92622f9 2120 - (tim) [sftp.c] wrap el_end() in #ifdef USE_LIBEDIT
2121 - (tim) [configure.ac] corrections to libedit tests. Report and patches
2122 by skeleten AT shillest.net
a345f787 2123
4145cbfa 212420050812
2125 - (djm) OpenBSD CVS Sync
2126 - markus@cvs.openbsd.org 2005/07/28 17:36:22
2127 [packet.c]
2128 missing packet_init_compression(); from solar
7c840747 2129 - djm@cvs.openbsd.org 2005/07/30 01:26:16
2130 [ssh.c]
2131 fix -D listen_host initialisation, so it picks up gateway_ports setting
2132 correctly
4c38e9c6 2133 - djm@cvs.openbsd.org 2005/07/30 02:03:47
2134 [readconf.c]
2135 listen_hosts initialisation here too; spotted greg AT y2005.nest.cx
91135a0e 2136 - dtucker@cvs.openbsd.org 2005/08/06 10:03:12
2137 [servconf.c]
2138 Unbreak sshd ListenAddress for bare IPv6 addresses.
a83bd8eb 2139 Report from Janusz Mucka; ok djm@
0aa1cc4b 2140 - jaredy@cvs.openbsd.org 2005/08/08 13:22:48
2141 [sftp.c]
2142 sftp prompt enhancements:
2143 - in non-interactive mode, do not print an empty prompt at the end
2144 before finishing
2145 - print newline after EOF in editline mode
2146 - call el_end() in editline mode
2147 ok dtucker djm
4145cbfa 2148
f47ddccb 214920050810
2150 - (dtucker) [configure.ac] Test libedit library and headers for compatibility.
2151 Report from skeleten AT shillest.net, ok djm@
1a9ecc62 2152 - (dtucker) [LICENCE configure.ac defines.h openbsd-compat/realpath.c]
2153 Sync current (thread-safe) version of realpath.c from OpenBSD (which is
2154 in turn based on FreeBSD's). ok djm@
f47ddccb 2155
a2b3321d 215620050809
2157 - (tim) [configure.ac] Allow --with-audit=no. OK dtucker@
2158 Report by skeleten AT shillest.net
2159
45b12bc8 216020050803
2161 - (dtucker) [openbsd-compat/fake-rfc2553.h] Check for EAI_* defines
2162 individually and use a value less likely to collide with real values from
2163 netdb.h. Fixes compile warnings on FreeBSD 5.3. ok djm@
adb40e59 2164 - (dtucker) [openbsd-compat/fake-rfc2553.h] MAX_INT -> INT_MAX since the
2165 latter is specified in the standard.
45b12bc8 2166
a056dfa2 216720050802
2168 - (dtucker) OpenBSD CVS Sync
2169 - dtucker@cvs.openbsd.org 2005/07/27 10:39:03
2170 [scp.c hostfile.c sftp-client.c]
2171 Silence bogus -Wuninitialized warnings; ok djm@
af40ca44 2172 - (dtucker) [configure.ac] Enable -Wuninitialized by default when compiling
2173 with gcc. ok djm@
ed89c848 2174 - (dtucker) [configure.ac] Add a --with-Werror option to configure for
2175 adding -Werror to CFLAGS when all of the configure tests are done. ok djm@
a056dfa2 2176
6090bcfe 217720050726
2178 - (dtucker) [configure.ac] Update zlib warning message too, pointed out by
2179 tim@.
05c25368 2180 - (djm) OpenBSD CVS Sync
2181 - otto@cvs.openbsd.org 2005/07/19 15:32:26
2182 [auth-passwd.c]
2183 auth_usercheck(3) can return NULL, so check for that. Report from
2184 mpech@. ok markus@
07200973 2185 - markus@cvs.openbsd.org 2005/07/25 11:59:40
2186 [kex.c kex.h myproposal.h packet.c packet.h servconf.c session.c]
2187 [sshconnect2.c sshd.c sshd_config sshd_config.5]
2188 add a new compression method that delays compression until the user
2189 has been authenticated successfully and set compression to 'delayed'
2190 for sshd.
2191 this breaks older openssh clients (< 3.5) if they insist on
2192 compression, so you have to re-enable compression in sshd_config.
2193 ok djm@
6090bcfe 2194
0072b59d 219520050725
2196 - (dtucker) [configure.ac] Update zlib version check for CAN-2005-2096.
2197
56964485 219820050717
2199- OpenBSD CVS Sync
2200 - djm@cvs.openbsd.org 2005/07/16 01:35:24
2201 [auth1.c channels.c cipher.c clientloop.c kex.c session.c ssh.c]
2202 [sshconnect.c]
2203 spacing
d1cf9a87 2204 - (djm) [acss.c auth-pam.c auth-shadow.c auth-skey.c auth1.c canohost.c]
2205 [cipher-acss.c loginrec.c ssh-rand-helper.c sshd.c] Fix whitespace at EOL
2206 in portable too ("perl -p -i -e 's/\s+$/\n/' *.[ch]")
ed9e8be3 2207 - (djm) [auth-pam.c sftp.c] spaces vs. tabs at start of line
d08341e6 2208 - djm@cvs.openbsd.org 2005/07/17 06:49:04
2209 [channels.c channels.h session.c session.h]
2210 Fix a number of X11 forwarding channel leaks:
2211 1. Refuse multiple X11 forwarding requests on the same session
2212 2. Clean up all listeners after a single_connection X11 forward, not just
2213 the one that made the single connection
2214 3. Destroy X11 listeners when the session owning them goes away
2215 testing and ok dtucker@
4e2e5cfd 2216 - djm@cvs.openbsd.org 2005/07/17 07:17:55
2217 [auth-rh-rsa.c auth-rhosts.c auth2-chall.c auth2-gss.c channels.c]
2218 [cipher-ctr.c gss-genr.c gss-serv.c kex.c moduli.c readconf.c]
2219 [serverloop.c session.c sftp-client.c sftp.c ssh-add.c ssh-keygen.c]
2220 [sshconnect.c sshconnect2.c]
2221 knf says that a 2nd level indent is four (not three or five) spaces
98c044d0 2222 -(djm) [audit.c auth1.c auth2.c entropy.c loginrec.c serverloop.c]
2223 [ssh-rand-helper.c] fix portable 2nd level indents at 4 spaces too
a1a073cc 2224 - (djm) [monitor.c monitor_wrap.c] -Wsign-compare for PAM monitor calls
2225
5d001c70 222620050716
2227 - (dtucker) [auth-pam.c] Ensure that only one side of the authentication
2228 socketpair stays open on in both the monitor and PAM process. Patch from
2229 Joerg Sonnenberger.
2230
143f17e8 223120050714
2232 - (dtucker) OpenBSD CVS Sync
2233 - dtucker@cvs.openbsd.org 2005/07/06 09:33:05
2234 [ssh.1]
2235 clarify meaning of ssh -b ; with & ok jmc@
6381acf0 2236 - dtucker@cvs.openbsd.org 2005/07/08 09:26:18
2237 [misc.c]
2238 Make comment match code; ok djm@
cee6ad3d 2239 - markus@cvs.openbsd.org 2005/07/08 09:41:33
2240 [channels.h]
2241 race when efd gets closed while there is still buffered data:
2242 change CHANNEL_EFD_OUTPUT_ACTIVE()
2243 1) c->efd must always be valid AND
2244 2a) no EOF has been seen OR
2245 2b) there is buffered data
2246 report, initial fix and testing Chuck Cranor
1a8521be 2247 - dtucker@cvs.openbsd.org 2005/07/08 10:20:41
2248 [ssh_config.5]
2249 change BindAddress to match recent ssh -b change; prompted by markus@
82b7531b 2250 - jmc@cvs.openbsd.org 2005/07/08 12:53:10
2251 [ssh_config.5]
2252 new sentence, new line;
8912ae0e 2253 - dtucker@cvs.openbsd.org 2005/07/14 04:00:43
2254 [misc.h]
2255 use __sentinel__ attribute; ok deraadt@ djm@ markus@
5b7b5e23 2256 - (dtucker) [configure.ac defines.h] Define __sentinel__ to nothing if the
2257 compiler doesn't understand it to prevent warnings. If any mainstream
2258 compiler versions acquire it we can test for those versions. Based on
2259 discussion with djm@.
143f17e8 2260
937eb918 226120050707
6f602461 2262 - dtucker [auth-krb5.c auth.h gss-serv-krb5.c] Move KRB5CCNAME generation for
2263 the MIT Kerberos code path into a common function and expand mkstemp
2264 template to be consistent with the rest of OpenSSH. From sxw at
2265 inf.ed.ac.uk, ok djm@
2266 - (dtucker) [auth-krb5.c] There's no guarantee that snprintf will set errno
2267 in the case where the buffer is insufficient, so always return ENOMEM.
2268 Also pointed out by sxw at inf.ed.ac.uk.
a5ca055b 2269 - (dtucker) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Remove
2270 calls to krb5_init_ets, which has not been required since krb-1.1.x and
2271 most Kerberos versions no longer export in their public API. From sxw
2272 at inf.ed.ac.uk, ok djm@
937eb918 2273
38946c65 227420050706
2275 - (djm) OpenBSD CVS Sync
2276 - markus@cvs.openbsd.org 2005/07/01 13:19:47
2277 [channels.c]
2278 don't free() if getaddrinfo() fails; report mpech@
ef07103c 2279 - djm@cvs.openbsd.org 2005/07/04 00:58:43
2280 [channels.c clientloop.c clientloop.h misc.c misc.h ssh.c ssh_config.5]
2281 implement support for X11 and agent forwarding over multiplex slave
2282 connections. Because of protocol limitations, the slave connections inherit
2283 the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding
2284 their own.
2285 ok dtucker@ "put it in" deraadt@
d313869b 2286 - jmc@cvs.openbsd.org 2005/07/04 11:29:51
2287 [ssh_config.5]
2288 fix Xr and a little grammar;
4297b666 2289 - markus@cvs.openbsd.org 2005/07/04 14:04:11
2290 [channels.c]
2291 don't forget to set x11_saved_display
38946c65 2292
c1cbe68a 229320050626
2294 - (djm) OpenBSD CVS Sync
2295 - djm@cvs.openbsd.org 2005/06/17 22:53:47
2296 [ssh.c sshconnect.c]
2297 Fix ControlPath's %p expanding to "0" for a default port,
2298 spotted dwmw2 AT infradead.org; ok markus@
699255b5 2299 - djm@cvs.openbsd.org 2005/06/18 04:30:36
2300 [ssh.c ssh_config.5]
2301 allow ControlPath=none, patch from dwmw2 AT infradead.org; ok dtucker@
de574442 2302 - djm@cvs.openbsd.org 2005/06/25 22:47:49
2303 [ssh.c]
f542faee 2304 do the default port filling code a few lines earlier, so it really
2305 does fix %p
c1cbe68a 2306
8485ce56 230720050618
2308 - (djm) OpenBSD CVS Sync
2309 - djm@cvs.openbsd.org 2005/05/20 12:57:01;
2310 [auth1.c] split protocol 1 auth methods into separate functions, makes
2311 authloop much more readable; fixes and ok markus@ (portable ok &
2312 polish dtucker@)
a375df46 2313 - djm@cvs.openbsd.org 2005/06/17 02:44:33
2314 [auth1.c] make this -Wsign-compare clean; ok avsm@ markus@
44d71ad5 2315 - (djm) [loginrec.c ssh-rand-helper.c] Fix -Wsign-compare for portable,
2316 tested and fixes tim@
8485ce56 2317
9bf083eb 231820050617
2319 - (djm) OpenBSD CVS Sync
2320 - djm@cvs.openbsd.org 2005/06/16 03:38:36
2321 [channels.c channels.h clientloop.c clientloop.h ssh.c]
2322 move x11_get_proto from ssh.c to clientloop.c, to make muliplexed xfwd
2323 easier later; ok deraadt@
29798ed0 2324 - markus@cvs.openbsd.org 2005/06/16 08:00:00
2325 [canohost.c channels.c sshd.c]
2326 don't exit if getpeername fails for forwarded ports; bugzilla #1054;
2327 ok djm
2ceb8101 2328 - djm@cvs.openbsd.org 2005/06/17 02:44:33
2329 [auth-rsa.c auth.c auth1.c auth2-chall.c auth2-gss.c authfd.c authfile.c]
2330 [bufaux.c canohost.c channels.c cipher.c clientloop.c dns.c gss-serv.c]
2331 [kex.c kex.h key.c mac.c match.c misc.c packet.c packet.h scp.c]
2332 [servconf.c session.c session.h sftp-client.c sftp-server.c sftp.c]
2333 [ssh-keyscan.c ssh-rsa.c sshconnect.c sshconnect1.c sshconnect2.c sshd.c]
2334 make this -Wsign-compare clean; ok avsm@ markus@
2335 NB. auth1.c changes not committed yet (conflicts with uncommitted sync)
2336 NB2. more work may be needed to make portable Wsign-compare clean
601b831d 2337 - (dtucker) [cipher.c openbsd-compat/openbsd-compat.h
2338 openbsd-compat/openssl-compat.c] only include openssl compat stuff where
2339 it's needed as it can cause conflicts elsewhere (eg xcrypt.c). Found by
2340 and ok tim@
9bf083eb 2341
826563dc 234220050616
2343 - (djm) OpenBSD CVS Sync
2344 - jaredy@cvs.openbsd.org 2005/06/07 13:25:23
2345 [progressmeter.c]
2346 catch SIGWINCH and resize progress meter accordingly; ok markus dtucker
a980cbd7 2347 - djm@cvs.openbsd.org 2005/06/06 11:20:36
2348 [auth.c auth.h misc.c misc.h ssh.c ssh_config.5 sshconnect.c]
2349 introduce a generic %foo expansion function. replace existing % expansion
2350 and add expansion to ControlPath; ok markus@
60dacb4b 2351 - djm@cvs.openbsd.org 2005/06/08 03:50:00
2352 [ssh-keygen.1 ssh-keygen.c sshd.8]
2353 increase default rsa/dsa key length from 1024 to 2048 bits;
2354 ok markus@ deraadt@
9dfd96d6 2355 - djm@cvs.openbsd.org 2005/06/08 11:25:09
2356 [clientloop.c readconf.c readconf.h ssh.c ssh_config.5]
2357 add ControlMaster=auto/autoask options to support opportunistic
2358 multiplexing; tested avsm@ and jakob@, ok markus@
495795e1 2359 - dtucker@cvs.openbsd.org 2005/06/09 13:43:49
2360 [cipher.c]
2361 Correctly initialize end of array sentinel; ok djm@
2362 (Id sync only, change already in portable)
826563dc 2363
52607c0f 236420050609
2365 - (dtucker) [cipher.c openbsd-compat/Makefile.in
bedeeedc 2366 openbsd-compat/openbsd-compat.h openbsd-compat/openssl-compat.{c,h}]
52607c0f 2367 Move compatibility code for supporting older OpenSSL versions to the
2368 compat layer. Suggested by and "no objection" djm@
2369
343ba2ce 237020050607
2371 - (dtucker) [configure.ac] Continue the hunt for LLONG_MIN and LLONG_MAX:
2372 in today's episode we attempt to coax it from limits.h where it may be
2373 hiding, failing that we take the DIY approach. Tested by tim@
2374
dfafb2e1 237520050603
2376 - (dtucker) [configure.ac] Only try gcc -std=gnu99 if LLONG_MAX isn't
2377 defined, and check that it helps before keeping it in CFLAGS. Some old
2378 gcc's don't set an error code when encountering an unknown value in -std.
2379 Found and tested by tim@.
76e6410a 2380 - (dtucker) [configure.ac] Point configure's reporting address at the
2381 openssh-unix-dev list. ok tim@ djm@
dfafb2e1 2382
b5765e1d 238320050602
2384 - (tim) [configure.ac] Some platforms need sys/types.h for arpa/nameser.h.
2385 Take AC_CHECK_HEADERS test out of ultrix section. It caused other platforms
2386 to skip builtin standard includes tests. (first AC_CHECK_HEADERS test
2387 must be run on all platforms) Add missing ;; to case statement. OK dtucker@
2388
1c829da5 238920050601
2390 - (dtucker) [configure.ac] Look for _getshort and _getlong in
2391 arpa/nameser.h.
1e29a0c8 2392 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoll.c]
2393 Add strtoll to the compat library, from OpenBSD.
8f4ab41b 2394 - (dtucker) OpenBSD CVS Sync
2395 - avsm@cvs.openbsd.org 2005/05/26 02:08:05
2396 [scp.c]
2397 If copying multiple files to a target file (which normally fails, as it
2398 must be a target directory), kill the spawned ssh child before exiting.
2399 This stops it trying to authenticate and spewing lots of output.
2400 deraadt@ ok
2a1995a3 2401 - dtucker@cvs.openbsd.org 2005/05/26 09:08:12
2402 [ssh-keygen.c]
2403 uint32_t -> u_int32_t for consistency; ok djm@
19186c3d 2404 - djm@cvs.openbsd.org 2005/05/27 08:30:37
2405 [ssh.c]
2406 fix -O for cases where no ControlPath has been specified or socket at
2407 ControlPath is not contactable; spotted by and ok avsm@
32560f07 2408 - (tim) [config.guess config.sub] Update to '2005-05-27' version.
822015dd 2409 - (tim) [configure.ac] set TEST_SHELL for OpenServer 6
1c829da5 2410
736ea7c1 241120050531
2412 - (dtucker) [contrib/aix/pam.conf] Correct comments. From davidl at
2413 vintela.com.
cbcabe98 2414 - (dtucker) [mdoc2man.awk] Teach it to understand .Ox.
736ea7c1 2415
241620050530
2417 - (dtucker) [README] Link to new release notes. Beter late than never...
2418
c8ed2130 241920050529
2420 - (dtucker) [openbsd-compat/port-aix.c] Bug #1046: AIX 5.3 expects the
2421 argument to passwdexpired to be initialized to NULL. Suggested by tim@
2422 While at it, initialize the other arguments to auth functions in case they
2423 ever acquire this behaviour.
5700232d 2424 - (dtucker) [openbsd-compat/port-aix.c] Whitespace cleanups while there.
ec7f28f2 2425 - (dtucker) [openbsd-compat/port-aix.c] Minor correction to debug message,
2426 spotted by tim@.
c8ed2130 2427
b04a9f8c 242820050528
2429 - (dtucker) [configure.ac] For AC_CHECK_HEADERS() and AC_CHECK_FUNCS() have
2430 one entry per line to make it easier to merge changes. ok djm@
0957c2cf 2431 - (dtucker) [configure.ac] strsep() may be defined in string.h, so check
2432 for its presence and include it in the strsep check.
25dd2ce6 2433 - (dtucker) [configure.ac] getpgrp may be defined in unistd.h, so check for
2434 its presence before doing AC_FUNC_GETPGRP.
7d458c86 2435 - (dtucker) [configure.ac] Merge HP-UX blocks into a common block with minor
2436 version-specific variations as required.
1c1ecbc8 2437 - (dtucker) [openbsd-compat/port-aix.h] Use the HAVE_DECL_* definitions as
2438 per the autoconf man page. Configure should always define them but it
2439 doesn't hurt to check.
b04a9f8c 2440
39ff6527 244120050527
2442 - (djm) [defines.h] Use our realpath if we have to define PATH_MAX, spotted by
2443 David Leach; ok dtucker@
35fc74ed 2444 - (dtucker) [acconfig.h configure.ac defines.h includes.h sshpty.c
2445 openbsd-compat/bsd-misc.c] Add support for Ultrix. No, that's not a typo.
2446 Required changes from Bernhard Simon, integrated by me. ok djm@
39ff6527 2447
160c7f37 244820050525
2449 - (djm) [mpaux.c mpaux.h Makefile.in] Remove old mpaux.[ch] code, it has not
2450 been used for a while
4feb61af 2451 - (djm) OpenBSD CVS Sync
2452 - otto@cvs.openbsd.org 2005/04/05 13:45:31
2453 [ssh-keygen.c]
7c3bc5a2 2454 - djm@cvs.openbsd.org 2005/04/06 09:43:59
2455 [sshd.c]
2456 avoid harmless logspam by not performing setsockopt() on non-socket;
2457 ok markus@
b3669591 2458 - dtucker@cvs.openbsd.org 2005/04/06 12:26:06
2459 [ssh.c]
2460 Fix debug call for port forwards; patch from pete at seebeyond.com,
2461 ok djm@ (ID sync only - change already in portable)
49e71137 2462 - djm@cvs.openbsd.org 2005/04/09 04:32:54
2463 [misc.c misc.h tildexpand.c Makefile.in]
2464 replace tilde_expand_filename with a simpler implementation, ahead of
2465 more whacking; ok deraadt@
3feef794 2466 - jmc@cvs.openbsd.org 2005/04/14 12:30:30
2467 [ssh.1]
2468 arg to -b is an address, not if_name;
2469 ok markus@
4635e729 2470 - jakob@cvs.openbsd.org 2005/04/20 10:05:45
2471 [dns.c]
2472 do not try to look up SSHFP for numerical hostname. ok djm@
140e3e97 2473 - djm@cvs.openbsd.org 2005/04/21 06:17:50
2474 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 ssh_config.5 sshd.8]
2475 [sshd_config.5] OpenSSH doesn't ever look at the $HOME environment
2476 variable, so don't say that we do (bz #623); ok deraadt@
7697ac2b 2477 - djm@cvs.openbsd.org 2005/04/21 11:47:19
2478 [ssh.c]
2479 don't allocate a pty when -n flag (/dev/null stdin) is set, patch from
2480 ignasi.roca AT fujitsu-siemens.com (bz #829); ok dtucker@
d49d70a8 2481 - dtucker@cvs.openbsd.org 2005/04/23 23:43:47
2482 [readpass.c]
2483 Add debug message if read_passphrase can't open /dev/tty; bz #471;
2484 ok djm@
d95daa6d 2485 - jmc@cvs.openbsd.org 2005/04/26 12:59:02
2486 [sftp-client.h]
2487 spelling correction in comment from wiz@netbsd;
cc8ca1e6 2488 - jakob@cvs.openbsd.org 2005/04/26 13:08:37
2489 [ssh.c ssh_config.5]
2490 fallback gracefully if client cannot connect to ControlPath. ok djm@
4b826d75 2491 - moritz@cvs.openbsd.org 2005/04/28 10:17:56
2492 [progressmeter.c ssh-keyscan.c]
2493 add snprintf checks. ok djm@ markus@
c6eb32a1 2494 - markus@cvs.openbsd.org 2005/05/02 21:13:22
2495 [readpass.c]
2496 missing {}
4a42b83a 2497 - djm@cvs.openbsd.org 2005/05/10 10:28:11
2498 [ssh.c]
2499 print nice error message for EADDRINUSE as well (ID sync only)
f6740270 2500 - djm@cvs.openbsd.org 2005/05/10 10:30:43
2501 [ssh.c]
2502 report real errors on fallback from ControlMaster=no to normal connect
38634ff6 2503 - markus@cvs.openbsd.org 2005/05/16 15:30:51
2504 [readconf.c servconf.c]
2505 check return value from strdelim() for NULL (AddressFamily); mpech
2264526c 2506 - djm@cvs.openbsd.org 2005/05/19 02:39:55
2507 [sshd_config.5]
2508 sort config options, from grunk AT pestilenz.org; ok jmc@
05ad7fe0 2509 - djm@cvs.openbsd.org 2005/05/19 02:40:52
2510 [sshd_config]
2511 whitespace nit, from grunk AT pestilenz.org
669a1ce3 2512 - djm@cvs.openbsd.org 2005/05/19 02:42:26
2513 [includes.h]
2514 fix cast, from grunk AT pestilenz.org
2b610872 2515 - djm@cvs.openbsd.org 2005/05/20 10:50:55
2516 [ssh_config.5]
2517 give a ProxyCommand example using nc(1), with and ok jmc@
9fa42d41 2518 - jmc@cvs.openbsd.org 2005/05/20 11:23:32
2519 [ssh_config.5]
2520 oops - article and spacing;
c784ae09 2521 - avsm@cvs.openbsd.org 2005/05/23 22:44:01
2522 [moduli.c ssh-keygen.c]
2523 - removes signed/unsigned comparisons in moduli generation
2524 - use strtonum instead of atoi where its easier
2525 - check some strlcpy overflow and fatal instead of truncate
74a66cc8 2526 - djm@cvs.openbsd.org 2005/05/23 23:32:46
2527 [cipher.c myproposal.h ssh.1 ssh_config.5 sshd_config.5]
2528 add support for draft-harris-ssh-arcfour-fixes-02 improved arcfour modes;
2529 ok markus@
de4feb6b 2530 - avsm@cvs.openbsd.org 2005/05/24 02:05:09
2531 [ssh-keygen.c]
2532 some style nits from dmiller@, and use a fatal() instead of a printf()/exit
05624c18 2533 - avsm@cvs.openbsd.org 2005/05/24 17:32:44
2534 [atomicio.c atomicio.h authfd.c monitor_wrap.c msg.c scp.c sftp-client.c]
2535 [ssh-keyscan.c sshconnect.c]
2536 Switch atomicio to use a simpler interface; it now returns a size_t
2537 (containing number of bytes read/written), and indicates error by
2538 returning 0. EOF is signalled by errno==EPIPE.
2539 Typical use now becomes:
2540
2541 if (atomicio(read, ..., len) != len)
2542 err(1,"read");
2543
2544 ok deraadt@, cloder@, djm@
ef8c3544 2545 - (dtucker) [regress/reexec.sh] Add ${EXEEXT} so this test also works on
2546 Cygwin.
44171182 2547 - (dtucker) [auth-pam.c] Bug #1033: Fix warnings building with PAM on Linux:
03f5da4c 2548 warning: dereferencing type-punned pointer will break strict-aliasing rules
2549 warning: passing arg 3 of `pam_get_item' from incompatible pointer type
2550 The type-punned pointer fix is based on a patch from SuSE's rpm. ok djm@
2551 - (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Bug #1033: Provide
2552 templates for _getshort and _getlong if missing to prevent compiler warnings
2553 on Linux.
8a3ff1aa 2554 - (djm) [configure.ac openbsd-compat/Makefile.in]
2555 [openbsd-compat/openbsd-compat.h openbsd-compat/strtonum.c]
2556 Add strtonum(3) from OpenBSD libc, new code needs it.
2557 Unfortunately Linux forces us to do a bizarre dance with compiler
2558 options to get LLONG_MIN/MAX; Spotted by and ok dtucker@
160c7f37 2559
a5b3c493 256020050524
2561 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2562 [contrib/suse/openssh.spec] Update spec file versions to 4.1p1
b4143b2a 2563 - (dtucker) [auth-pam.c] Since people don't seem to be getting the message
2564 that USE_POSIX_THREADS is unsupported, not recommended and generally a bad
2565 idea, it is now known as UNSUPPORTED_POSIX_THREADS_HACK. Attempting to use
2566 USE_POSIX_THREADS will now generate an error so we don't silently change
2567 behaviour. ok djm@
b54ffe05 2568 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Ensure sufficient memory
2569 allocation when retrieving core Windows environment. Add CYGWIN variable
2570 to propagated variables. Patch from vinschen at redhat.com, ok djm@
22c50ecf 2571 - Release 4.1p1
a5b3c493 2572
257320050524
0d7feb60 2574 - (djm) [openbsd-compat/readpassphrase.c] bz #950: Retry tcsetattr to ensure
2575 terminal modes are reset correctly. Fix from peak AT argo.troja.mff.cuni.cz;
2576 "looks ok" dtucker@
2577
c713294b 257820050512
2579 - (tim) [buildpkg.sh.in] missing ${PKG_INSTALL_ROOT} in init script
2580 hard link section. Bug 1038.
2581
25882b6d 258220050509
2583 - (dtucker) [contrib/cygwin/ssh-host-config] Add a test and warning for a
2584 user-mode mounts in Cygwin installation. Patch from vinschen at redhat.com.
2585
05ada1a6 258620050504
2587 - (djm) [ssh.c] some systems return EADDRINUSE on a bind to an already-used
2588 unix domain socket, so catch that too; from jakob@ ok dtucker@
2589
a56cebd3 259020050503
2591 - (dtucker) [canohost.c] normalise socket addresses returned by
2592 get_remote_hostname(). This means that IPv4 addresses in log messages
2593 on IPv6 enabled machines will no longer be prefixed by "::ffff:" and
2594 AllowUsers, DenyUsers, AllowGroups, DenyGroups will match IPv4-style
2595 addresses only for 4-in-6 mapped connections, regardless of whether
2596 or not the machine is IPv6 enabled. ok djm@
2597
a8539f66 259820050425
2599 - (dtucker) [regress/multiplex.sh] Use "kill -0 $pid" to check for the
2600 existence of a process since it's more portable. Found by jbasney at
2601 ncsa.uiuc.edu; ok tim@
27402d9c 2602 - (dtucker) [regress/multiplex.sh] Remove cleanup call since test-exec.sh
2603 will clean up anyway. From tim@
faf685a9 2604 - (dtucker) [regress/multiplex.sh] Put control socket in /tmp so running
5330cae7 2605 "make tests" works even if you're building on a filesystem that doesn't
faf685a9 2606 support sockets. From deengert at anl.gov, ok djm@
a8539f66 2607
5c7fc85d 260820050424
2609 - (dtucker) [INSTALL configure.ac] Make zlib version check test for 1.1.4 or
2610 1.2.1.2 or higher. With tim@, ok djm@
2611
9e850813 261220050423
2613 - (tim) [config.guess] Add support for OpenServer 6.
2614
d9720710 261520050421
2616 - (dtucker) [session.c] Bug #1024: Don't check pam_session_is_open if
2617 UseLogin is set as PAM is not used to establish credentials in that
2618 case. Found by Michael Selvesteen, ok djm@
2619
ad6a7661 262020050419
2621 - (dtucker) [INSTALL] Reference README.privsep for the privilege separation
2622 requirements. Pointed out by Bengt Svensson.
07f804af 2623 - (dtucker) [INSTALL] Put the s/key text and URL back together.
f2637973 2624 - (dtucker) [INSTALL] Fix s/key text too.
ad6a7661 2625
46f853b9 262620050411
2627 - (tim) [configure.ac] UnixWare needs PASSWD_NEEDS_USERNAME
2628
62eb7db4 262920050405
2630 - (dtucker) [configure.ac] Define HAVE_SO_PEERCRED if we have it. ok djm@
8502d79f 2631 - (dtucker) [auth-sia.c] Constify sys_auth_passwd, fixes build error on
2632 Tru64. Patch from cmadams at hiwaay.net.
ed81415f 2633 - (dtucker) [auth-passwd.c auth-sia.h] Remove duplicate definitions of
2634 sys_auth_passwd, pointed out by cmadams at hiwaay.net.
62eb7db4 2635
99dfaccc 263620050403
2637 - (djm) OpenBSD CVS Sync
2638 - deraadt@cvs.openbsd.org 2005/03/31 18:39:21
2639 [scp.c]
2640 copy argv[] element instead of smashing the one that ps will see; ok otto
ae0d2f42 2641 - djm@cvs.openbsd.org 2005/04/02 12:41:16
2642 [scp.c]
2643 since ssh has xstrdup, use it instead of strdup+test. unbreaks -Werror
2644 build
d3e9f63d 2645 - (dtucker) [monitor.c] Don't free buffers in audit functions, monitor_read
2646 will free as needed. ok tim@ djm@
99dfaccc 2647
ecda4ffb 264820050331
2649 - (dtucker) OpenBSD CVS Sync
2650 - jmc@cvs.openbsd.org 2005/03/16 11:10:38
2651 [ssh_config.5]
2652 get the syntax right for {Local,Remote}Forward;
2653 based on a diff from markus;
2654 problem report from ponraj;
2655 ok dtucker@ markus@ deraadt@
e86f4cc5 2656 - markus@cvs.openbsd.org 2005/03/16 21:17:39
2657 [version.h]
2658 4.1
102c77c2 2659 - jmc@cvs.openbsd.org 2005/03/18 17:05:00
2660 [sshd_config.5]
2661 typo;
1b394137 2662 - (dtucker) [auth.h sshd.c openbsd-compat/port-aix.c] Bug #1006: fix bug in
2663 handling of password expiry messages returned by AIX's authentication
2664 routines, originally reported by robvdwal at sara.nl.
d0c7c18d 2665 - (dtucker) [ssh.c] Prevent null pointer deref in port forwarding debug
2666 message on some platforms. Patch from pete at seebeyond.com via djm.
e05df884 2667 - (dtucker) [monitor.c] Remaining part of fix for bug #1006.
ecda4ffb 2668
25cd6761 266920050329
2670 - (dtucker) [contrib/aix/buildbff.sh] Bug #1005: Look up only the user we're
2671 interested in which is much faster in large (eg LDAP or NIS) environments.
2672 Patch from dleonard at vintela.com.
2673
6dd05556 267420050321
2675 - (dtucker) [configure.ac] Prevent configure --with-zlib from adding -Iyes
2676 and -Lyes to CFLAGS and LIBS. Pointed out by peter at slagheap.net,
2677 with & ok tim@
737edf04 2678 - (dtucker) [configure.ac] Make configure error out if the user specifies
2679 --with-libedit but the required libs can't be found, rather than silently
2680 ignoring and continuing. ok tim@
72ad335d 2681 - (dtucker) [configure.ac openbsd-compat/port-aix.h] Prevent redefinitions
2682 of setauthdb on AIX 5.3, reported by anders.liljegren at its.uu.se.
6dd05556 2683
987b458f 268420050317
2685 - (tim) [configure.ac] Bug 998. Make path for --with-opensc optional.
2686 Make --without-opensc work.
4b492aab 2687 - (tim) [configure.ac] portability changes on test statements. Some shells
2688 have problems with -a operator.
6cf0200f 2689 - (tim) [configure.ac] make some configure options a little more error proof.
82f4e93d 2690 - (tim) [configure.ac] remove trailing white space.
987b458f 2691
2b74a069 269220050314
2693 - (dtucker) OpenBSD CVS Sync
2694 - dtucker@cvs.openbsd.org 2005/03/10 10:15:02
2695 [readconf.c]
2696 Check listen addresses for null, prevents xfree from dying during
2697 ClearAllForwardings (bz #996). From Craig Leres, ok markus@
f8cc7664 2698 - deraadt@cvs.openbsd.org 2005/03/10 22:01:05
2699 [misc.c ssh-keygen.c servconf.c clientloop.c auth-options.c ssh-add.c
2700 monitor.c sftp-client.c bufaux.h hostfile.c ssh.c sshconnect.c channels.c
2701 readconf.c bufaux.c sftp.c]
2702 spacing
16d3d2bc 2703 - deraadt@cvs.openbsd.org 2005/03/10 22:40:38
2704 [auth-options.c]
2705 spacing
604dac32 2706 - markus@cvs.openbsd.org 2005/03/11 14:59:06
2707 [ssh-keygen.c]
2708 typo, missing \n; mpech
4e5038f7 2709 - jmc@cvs.openbsd.org 2005/03/12 11:55:03
2710 [ssh_config.5]
2711 escape `.' at eol to avoid double spacing issues;
ee8e9906 2712 - dtucker@cvs.openbsd.org 2005/03/14 10:09:03
2713 [ssh-keygen.1]
2714 Correct description of -H (bz #997); ok markus@, punctuation jmc@
2dcbac07 2715 - dtucker@cvs.openbsd.org 2005/03/14 11:44:42
2716 [auth.c]
2717 Populate host for log message for logins denied by AllowUsers and
2232a979 2718 DenyUsers (bz #999); ok markus@ (patch by tryponraj at gmail.com)
fa1d7d85 2719 - markus@cvs.openbsd.org 2005/03/14 11:46:56
2720 [buffer.c buffer.h channels.c]
2721 limit input buffer size for channels; bugzilla #896; with and ok dtucker@
b2518e43 2722 - (tim) [contrib/caldera/openssh.spec] links in rc?.d were getting trashed
2723 with a rpm -F
2b74a069 2724
2b08c2fc 272520050313
2726 - (dtucker) [contrib/cygwin/ssh-host-config] Makes the query for the
2727 localized name of the local administrators group more reliable. From
2728 vinschen at redhat.com.
2729
433f6c0f 273020050312
2731 - (dtucker) [regress/test-exec.sh] DEBUG can cause problems where debug
2732 output ends up in the client's output, causing regress failures. Found
2733 by Corinna Vinschen.
2734
13863e85 273520050309
2736 - (dtucker) [regress/test-exec.sh] Set BIN_SH=xpg4 on OSF1/Digital Unix/Tru64
2737 so that regress tests behave. From Chris Adams.
6d7a9e8f 2738 - (djm) OpenBSD CVS Sync
2739 - jmc@cvs.openbsd.org 2005/03/07 23:41:54
2740 [ssh.1 ssh_config.5]
2741 more macro simplification;
568a2a1a 2742 - djm@cvs.openbsd.org 2005/03/08 23:49:48
2743 [version.h]
2744 OpenSSH 4.0
ea9c5dda 2745 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2746 [contrib/suse/openssh.spec] Update spec file versions
b1d73a9a 2747 - (djm) [log.c] Fix dumb syntax error; ok dtucker@
0831888a 2748 - (djm) Release OpenSSH 4.0p1
13863e85 2749
7939c496 275020050307
2751 - (dtucker) [configure.ac] Disable gettext search when configuring with
2752 BSM audit support for the time being. ok djm@
1808b4ab 2753 - (dtucker) OpenBSD CVS Sync (regress/)
2754 - fgsch@cvs.openbsd.org 2004/12/10 01:31:30
c0cab79d 2755 [Makefile sftp-glob.sh]
1808b4ab 2756 some globbing regress; prompted and ok djm@
0c2cfd08 2757 - david@cvs.openbsd.org 2005/01/14 04:21:18
2758 [Makefile test-exec.sh]
2759 pass the SUDO make variable to the individual sh tests; ok dtucker@ markus@
83154755 2760 - dtucker@cvs.openbsd.org 2005/02/27 11:33:30
2761 [multiplex.sh test-exec.sh sshd-log-wrapper.sh]
2762 Add optional capability to log output from regress commands; ok markus@
2763 Use with: make TEST_SSH_LOGFILE=/tmp/regress.log
6c017ff5 2764 - djm@cvs.openbsd.org 2005/02/27 23:13:36
2765 [login-timeout.sh]
2766 avoid nameservice lookups in regress test; ok dtucker@
08ba3a8a 2767 - djm@cvs.openbsd.org 2005/03/04 08:48:46
2768 [Makefile envpass.sh]
2769 regress test for SendEnv config parsing bug; ok dtucker@
1501be86 2770 - (dtucker) [regress/test-exec.sh] Put SUDO in the right place.
11cf4f1f 2771 - (tim) [configure.ac] SCO 3.2v4.2 no longer supported.
7939c496 2772
d9bc3cde 277320050306
2774 - (dtucker) [monitor.c] Bug #125 comment #47: fix errors returned by monitor
2775 when attempting to audit disconnect events. Reported by Phil Dibowitz.
2b0c0925 2776 - (dtucker) [session.c sshd.c] Bug #125 comment #49: Send disconnect audit
2777 events earlier, prevents mm_request_send errors reported by Matt Goebel.
d9bc3cde 2778
1619d173 277920050305
2780 - (djm) [contrib/cygwin/README] Improve Cygwin build documentation. Patch
2781 from vinschen at redhat.com
4469b0cf 2782 - (djm) OpenBSD CVS Sync
2783 - jmc@cvs.openbsd.org 2005/03/02 11:45:01
2784 [ssh.1]
2785 missing word;
c8c99dd5 2786 - djm@cvs.openbsd.org 2005/03/04 08:48:06
2787 [readconf.c]
2788 fix SendEnv config parsing bug found by Roumen Petrov; ok dtucker@
1619d173 2789
6c7e3b94 279020050302
2791 - (djm) OpenBSD CVS sync:
2792 - jmc@cvs.openbsd.org 2005/03/01 14:47:58
2793 [ssh.1]
2794 remove some unneccesary macros;
2795 do not mark up punctuation;
cd8f998c 2796 - jmc@cvs.openbsd.org 2005/03/01 14:55:23
2797 [ssh_config.5]
2798 do not mark up punctuation;
2799 whitespace;
c79ae9fd 2800 - jmc@cvs.openbsd.org 2005/03/01 14:59:49
2801 [sshd.8]
2802 new sentence, new line;
2803 whitespace;
219195e8 2804 - jmc@cvs.openbsd.org 2005/03/01 15:05:00
2805 [ssh-keygen.1]
2806 whitespace;
3bafbaa7 2807 - jmc@cvs.openbsd.org 2005/03/01 15:47:14
2808 [ssh-keyscan.1 ssh-keyscan.c]
2809 sort options and sync usage();
ba9d1100 2810 - jmc@cvs.openbsd.org 2005/03/01 17:19:35
2811 [scp.1 sftp.1]
2812 add HashKnownHosts to -o list;
2813 ok markus@
8cf98c65 2814 - jmc@cvs.openbsd.org 2005/03/01 17:22:06
2815 [ssh.c]
2816 sync usage() w/ man SYNOPSIS;
2817 ok markus@
ca28318b 2818 - jmc@cvs.openbsd.org 2005/03/01 17:32:19
2819 [ssh-add.1]
2820 sort options;
ce0c0cdc 2821 - jmc@cvs.openbsd.org 2005/03/01 18:15:56
2822 [ssh-keygen.1]
2823 sort options (no attempt made at synopsis clean up though);
2824 spelling (occurance -> occurrence);
2825 use prompt before examples;
2826 grammar;
e79276c2 2827 - djm@cvs.openbsd.org 2005/03/02 01:00:06
2828 [sshconnect.c]
2829 fix addition of new hashed hostnames when CheckHostIP=yes;
2830 found and ok dtucker@
bc7119ba 2831 - djm@cvs.openbsd.org 2005/03/02 01:27:41
2832 [ssh-keygen.c]
2833 ignore hostnames with metachars when hashing; ok deraadt@
82966fe8 2834 - djm@cvs.openbsd.org 2005/03/02 02:21:07
2835 [ssh.1]
2836 bz#987: mention ForwardX11Trusted in ssh.1,
2837 reported by andrew.benham AT thus.net; ok deraadt@
0428614e 2838 - (tim) [regress/agent-ptrace.sh] add another possible gdb error.
6c7e3b94 2839
ec304d66 284020050301
2841 - (djm) OpenBSD CVS sync:
2842 - otto@cvs.openbsd.org 2005/02/16 09:56:44
2843 [ssh.c]
2844 Better diagnostic if an identity file is not accesible. ok markus@ djm@
adc75586 2845 - djm@cvs.openbsd.org 2005/02/18 03:05:53
2846 [canohost.c]
2847 better error messages for getnameinfo failures; ok dtucker@
0b73a454 2848 - djm@cvs.openbsd.org 2005/02/20 22:59:06
2849 [sftp.c]
2850 turn on ssh batch mode when in sftp batch mode, patch from
2851 jdmossh AT nand.net;
2852 ok markus@
a333272d 2853 - jmc@cvs.openbsd.org 2005/02/25 10:55:13
2854 [sshd.8]
2855 add /etc/motd and $HOME/.hushlogin to FILES;
2856 from michael knudsen;
9a6b3b7a 2857 - djm@cvs.openbsd.org 2005/02/28 00:54:10
2858 [ssh_config.5]
2859 bz#849: document timeout on untrusted x11 forwarding sessions. Reported by
2860 orion AT cora.nwra.com; ok markus@
3867aa0a 2861 - djm@cvs.openbsd.org 2005/03/01 10:09:52
2862 [auth-options.c channels.c channels.h clientloop.c compat.c compat.h]
2863 [misc.c misc.h readconf.c readconf.h servconf.c ssh.1 ssh.c ssh_config.5]
2864 [sshd_config.5]
2865 bz#413: allow optional specification of bind address for port forwardings.
2866 Patch originally by Dan Astorian, but worked on by several people
2867 Adds GatewayPorts=clientspecified option on server to allow remote
2868 forwards to bind to client-specified ports.
5c63c2ab 2869 - djm@cvs.openbsd.org 2005/03/01 10:40:27
2870 [hostfile.c hostfile.h readconf.c readconf.h ssh.1 ssh_config.5]
2871 [sshconnect.c sshd.8]
2872 add support for hashing host names and addresses added to known_hosts
2873 files, to improve privacy of which hosts user have been visiting; ok
2874 markus@ deraadt@
90a8ae9f 2875 - djm@cvs.openbsd.org 2005/03/01 10:41:28
2876 [ssh-keyscan.1 ssh-keyscan.c]
2877 option to hash hostnames output by ssh-keyscan; ok markus@ deraadt@
bdffbcdc 2878 - djm@cvs.openbsd.org 2005/03/01 10:42:49
2879 [ssh-keygen.1 ssh-keygen.c ssh_config.5]
2880 add tools for managing known_hosts files with hashed hostnames, including
2881 hashing existing files and deleting hosts by name; ok markus@ deraadt@
ec304d66 2882
a6de2de3 288320050226
2884 - (dtucker) [openbsd-compat/bsd-openpty.c openbsd-compat/inet_ntop.c]
2885 Remove two obsolete Cygwin #ifdefs. Patch from vinschen at redhat.com.
7ff856c5 2886 - (dtucker) [acconfig.h configure.ac openbsd-compat/bsd-misc.{c,h}]
2887 Remove SETGROUPS_NOOP, was only used by Cygwin, which doesn't need it any
2888 more. Patch from vinschen at redhat.com.
e1283d9c 2889 - (dtucker) [Makefile.in] Add a install-nosysconf target for installing the
2890 binaries without the config files. Primarily useful for packaging.
2891 Patch from phil at usc.edu. ok djm@
a6de2de3 2892
289320050224
777ece68 2894 - (djm) [configure.ac] in_addr_t test needs sys/types.h too
2895
c2736f7f 289620050222
2897 - (dtucker) [uidswap.c] Skip uid restore test on Cygwin. Patch from
2898 vinschen at redhat.com.
2899
7b578f7d 290020050220
2901 - (dtucker) [LICENCE Makefile.in README.platform audit-bsm.c configure.ac
2902 defines.h] Bug #125: Add *EXPERIMENTAL* BSM audit support. Configure
2903 --with-audit=bsm to enable. Patch originally from Sun Microsystems,
2904 parts by John R. Jackson. ok djm@
c85ed8e2 2905 - (dtucker) [configure.ac] Missing comma in AIX section, somehow causes
2906 unrelated platforms to be configured incorrectly.
7b578f7d 2907
a418076b 290820050216
2909 - (djm) write seed to temporary file and atomically rename into place;
2910 ok dtucker@
e005a96c 2911 - (dtucker) [ssh-rand-helper.c] Provide seed_rng since it may be called
2912 via mkstemp in some configurations. ok djm@
f83b0f6a 2913 - (dtucker) [auth-shadow.c] Prevent compiler warnings if "DAY" is defined
2914 by the system headers.
85cf54ec 2915 - (dtucker) [configure.ac] Bug #893: check for libresolv early on Reliant
2916 Unix; prevents problems relating to the location of -lresolv in the
2917 link order.
09d7ebd1 2918 - (dtucker) [session.c] Bug #918: store credentials from gssapi-with-mic
2919 authentication early enough to be available to PAM session modules when
2920 privsep=yes. Patch from deengert at anl.gov, ok'ed in principle by Sam
2921 Hartman and similar to Debian's ssh-krb5 package.
ba603e06 2922 - (dtucker) [configure.ac openbsd-compat/port-aix.{c,h}] Silence some more
2923 compiler warnings on AIX.
a418076b 2924
5f879c03 292520050215
2926 - (dtucker) [config.sh.in] Collect oslevel -r too.
5ccf88cb 2927 - (dtucker) [README.platform auth.c configure.ac loginrec.c
2928 openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Bug #835: enable IPv6
2929 on AIX where possible (see README.platform for details) and work around
2930 a misfeature of AIX's getnameinfo. ok djm@
c53d8c93 2931 - (dtucker) [loginrec.c] Add missing #include.
5f879c03 2932
6ff3d0dc 293320050211
2934 - (dtucker) [configure.ac] Tidy up configure --help output.
3287ae43 2935 - (dtucker) [openbsd-compat/fake-rfc2553.h] We now need EAI_SYSTEM too.
6ff3d0dc 2936
694d0cef 293720050210
2938 - (dtucker) [configure.ac] Bug #919: Provide visible feedback for the
2939 --disable-etc-default-login configure option.
2940
0d133778 294120050209
2942 - (dtucker) OpenBSD CVS Sync
2943 - dtucker@cvs.openbsd.org 2005/01/28 09:45:53
2944 [ssh_config]
2945 Make it clear that the example entries in ssh_config are only some of the
2946 commonly-used options and refer the user to ssh_config(5) for more
2947 details; ok djm@
0d6cbe2c 2948 - jmc@cvs.openbsd.org 2005/01/28 15:05:43
2949 [ssh_config.5]
2950 grammar;
7034edae 2951 - jmc@cvs.openbsd.org 2005/01/28 18:14:09
2952 [ssh_config.5]
2953 wording;
2954 ok markus@
75cccc2c 2955 - dtucker@cvs.openbsd.org 2005/01/30 11:18:08
2956 [monitor.c]
2957 Make code match intent; ok djm@
945a9853 2958 - dtucker@cvs.openbsd.org 2005/02/08 22:24:57
2959 [sshd.c]
2960 Provide reason in error message if getnameinfo fails; ok markus@
751e5199 2961 - (dtucker) [auth-passwd.c openbsd-compat/port-aix.c] Don't call
2962 disable_forwarding() from compat library. Prevent linker errrors trying
2963 to resolve it for binaries other than sshd. ok djm@
99eb0f64 2964 - (dtucker) [configure.ac] Bug #854: prepend pwd to relative --with-ssl-dir
2965 paths. ok djm@
3ade3b57 2966 - (dtucker) [configure.ac session.c] Some platforms (eg some SCO) require
2967 the username to be passed to the passwd command when changing expired
2968 passwords. ok djm@
0d133778 2969
9c70ca37 297020050208
2971 - (dtucker) [regress/test-exec.sh] Bug #912: Set _POSIX2_VERSION for the
2972 regress tests so newer versions of GNU head(1) behave themselves. Patch
2973 by djm, so ok me.
c2edf154 2974 - (dtucker) [openbsd-compat/port-aix.c] Silence compiler warnings.
6039eeef 2975 - (dtucker) [audit.c audit.h auth.c auth1.c auth2.c loginrec.c monitor.c
2976 monitor_wrap.c monitor_wrap.h session.c sshd.c]: Prepend all of the audit
2977 defines and enums with SSH_ to prevent namespace collisions on some
2978 platforms (eg AIX).
9c70ca37 2979
780d885c 298020050204
2981 - (dtucker) [monitor.c] Permit INVALID_USER audit events from slave too.
6af6e631 2982 - (dtucker) [auth.c] Fix parens in audit log check.
780d885c 2983
667abcc6 298420050202
2985 - (dtucker) [configure.ac openbsd-compat/realpath.c] Sync up with realpath
2986 rev 1.11 from OpenBSD and make it use fchdir if available. ok djm@
575e336f 2987 - (dtucker) [auth.c loginrec.h openbsd-compat/{bsd-cray,port-aix}.{c,h}]
2988 Make record_failed_login() call provide hostname rather than having the
2989 implementations having to do lookups themselves. Only affects AIX and
2990 UNICOS (the latter only uses the "user" parameter anyway). ok djm@
3bfd27d5 2991 - (dtucker) [session.c sshd.c] Bug #445: Propogate KRB5CCNAME if set to child
2992 the process. Since we also unset KRB5CCNAME at startup, if it's set after
2993 authentication it must have been set by the platform's native auth system.
2994 This was already done for AIX; this enables it for the general case.
b6610e8f 2995 - (dtucker) [auth.c canohost.c canohost.h configure.ac defines.h loginrec.c]
2996 Bug #974: Teach sshd to write failed login records to btmp for failed auth
2997 attempts (currently only for password, kbdint and C/R, only on Linux and
2998 HP-UX), based on code from login.c from util-linux. With ashok_kovai at
2999 hotmail.com, ok djm@
c00e4d75 3000 - (dtucker) [Makefile.in auth.c auth.h auth1.c auth2.c loginrec.c monitor.c
3001 monitor.h monitor_wrap.c monitor_wrap.h session.c sshd.c] Bug #125:
3002 (first stage) Add audit instrumentation to sshd, currently disabled by
9a8c0786 3003 default. with suggestions from and ok djm@
667abcc6 3004
29c82270 300520050201
3006 - (dtucker) [log.c] Bug #973: force log_init() to open syslog, since on some
3007 platforms syslog will revert to its default values. This may result in
3008 messages from external libraries (eg libwrap) being sent to a different
3009 facility.
8a4c4ee4 3010 - (dtucker) [sshd_config.5] Bug #701: remove warning about
3011 keyboard-interactive since this is no longer the case.
29c82270 3012
022487ce 301320050124
3014 - (dtucker) OpenBSD CVS Sync
3015 - otto@cvs.openbsd.org 2005/01/21 08:32:02
3016 [auth-passwd.c sshd.c]
3017 Warn in advance for password and account expiry; initialize loginmsg
3018 buffer earlier and clear it after privsep fork. ok and help dtucker@
3019 markus@
31de8b2b 3020 - dtucker@cvs.openbsd.org 2005/01/22 08:17:59
3021 [auth.c]
3022 Log source of connections denied by AllowUsers, DenyUsers, AllowGroups and
3023 DenyGroups. bz #909, ok djm@
3ebbcf03 3024 - djm@cvs.openbsd.org 2005/01/23 10:18:12
3025 [cipher.c]
3026 config option "Ciphers" should be case-sensitive; ok dtucker@
3c03ad3f 3027 - dtucker@cvs.openbsd.org 2005/01/24 10:22:06
3028 [scp.c sftp.c]
3029 Have scp and sftp wait for the spawned ssh to exit before they exit
3030 themselves. This prevents ssh from being unable to restore terminal
3031 modes (not normally a problem on OpenBSD but common with -Portable
3032 on POSIX platforms). From peak at argo.troja.mff.cuni.cz (bz#950);
3033 ok djm@ markus@
7936123b 3034 - dtucker@cvs.openbsd.org 2005/01/24 10:29:06
3035 [moduli]
3036 Import new moduli; requested by deraadt@ a week ago
6c0dc0dd 3037 - dtucker@cvs.openbsd.org 2005/01/24 11:47:13
3038 [auth-passwd.c]
3039 #if -> #ifdef so builds without HAVE_LOGIN_CAP work too; ok djm@ otto@
022487ce 3040
b0042027 304120050120
3042 - (dtucker) OpenBSD CVS Sync
3043 - markus@cvs.openbsd.org 2004/12/23 17:35:48
3044 [session.c]
3045 check for NULL; from mpech
3c460ede 3046 - markus@cvs.openbsd.org 2004/12/23 17:38:07
3047 [ssh-keygen.c]
3048 leak; from mpech
31b41ceb 3049 - djm@cvs.openbsd.org 2004/12/23 23:11:00
3050 [servconf.c servconf.h sshd.c sshd_config sshd_config.5]
3051 bz #898: support AddressFamily in sshd_config. from
3052 peak@argo.troja.mff.cuni.cz; ok deraadt@
cf039bd1 3053 - markus@cvs.openbsd.org 2005/01/05 08:51:32
3054 [sshconnect.c]
3055 remove dead code, log connect() failures with level error, ok djm@
667e4135 3056 - jmc@cvs.openbsd.org 2005/01/08 00:41:19
3057 [sshd_config.5]
3058 `login'(n) -> `log in'(v);
1d03d1ad 3059 - dtucker@cvs.openbsd.org 2005/01/17 03:25:46
3060 [moduli.c]
3061 Correct spelling: SCHNOOR->SCHNORR; ok djm@
25c31d49 3062 - dtucker@cvs.openbsd.org 2005/01/17 22:48:39
3063 [sshd.c]
3064 Make debugging output continue after reexec; ok djm@
37ea4f91 3065 - dtucker@cvs.openbsd.org 2005/01/19 13:11:47
3066 [auth-bsdauth.c auth2-chall.c]
3067 Have keyboard-interactive code call the drivers even for responses for
3068 invalid logins. This allows the drivers themselves to decide how to
3069 handle them and prevent leaking information where possible. Existing
3070 behaviour for bsdauth is maintained by checking authctxt->valid in the
3071 bsdauth driver. Note that any third-party kbdint drivers will now need
3072 to be able to handle responses for invalid logins. ok markus@
5d33c697 3073 - djm@cvs.openbsd.org 2004/12/22 02:13:19
3074 [cipher-ctr.c cipher.c]
3075 remove fallback AES support for old OpenSSL, as OpenBSD has had it for
3076 many years now; ok deraadt@
3077 (Id sync only: Portable will continue to support older OpenSSLs)
af0e5c2f 3078 - (dtucker) [auth-pam.c] Bug #971: Prevent leaking information about user
3079 existence via keyboard-interactive/pam, in conjunction with previous
3080 auth2-chall.c change; with Colin Watson and djm.
9c1966bf 3081 - (dtucker) [loginrec.h] Bug #952: Increase size of username field to 128
3082 bytes to prevent errors from login_init_entry() when the username is
3083 exactly 64 bytes(!) long. From brhamon at cisco.com, ok djm@
c384a74c 3084 - (dtucker) [auth-chall.c auth.h auth2-chall.c] Bug #936: Remove pam from
3085 the list of available kbdint devices if UsePAM=no. ok djm@
b0042027 3086
308720050118
d7cfdd7c 3088 - (dtucker) [INSTALL Makefile.in configure.ac survey.sh.in] Implement
3089 "make survey" and "make send-survey". This will provide data on the
3090 configure parameters, platform and platform features to the development
3091 team, which will allow (among other things) better targetting of testing.
3092 It's entirely voluntary and is off be default. ok djm@
1aeec5f7 3093 - (dtucker) [survey.sh.in] Remove any blank lines from the output of
3094 ccver-v and ccver-V.
d7cfdd7c 3095
1e111f05 309620041220
3097 - (dtucker) [ssh-rand-helper.c] Fall back to command-based seeding if reading
3098 from prngd is enabled at compile time but fails at run time, eg because
3099 prngd is not running. Note that if you have prngd running when OpenSSH is
3100 built, OpenSSL will consider itself internally seeded and rand-helper won't
3101 be built at all unless explicitly enabled via --with-rand-helper. ok djm@
0a3ea6cc 3102 - (dtucker) [regress/rekey.sh] Touch datafile before filling with dd, since
3103 on some wacky platforms (eg old AIXes), dd will refuse to create an output
3104 file if it doesn't exist.
1e111f05 3105
7a5de142 310620041213
3107 - (dtucker) [contrib/findssh.sh] Clean up on interrupt; from
3108 amarendra.godbole at ge com.
3109
595c699c 311020041211
3111 - (dtucker) OpenBSD CVS Sync
3112 - markus@cvs.openbsd.org 2004/12/06 16:00:43
3113 [bufaux.c]
3114 use 0x00 not \0 since buf[] is a bignum
2bd204e5 3115 - fgsch@cvs.openbsd.org 2004/12/10 03:10:42
3116 [sftp.c]
3117 - fix globbed ls for paths the same lenght as the globbed path when
3118 we have a unique matching.
3119 - fix globbed ls in case of a directory when we have a unique matching.
3120 - as a side effect, if the path does not exist error (used to silently
3121 ignore).
3122 - don't do extra do_lstat() if we only have one matching file.
3123 djm@ ok
41feb690 3124 - dtucker@cvs.openbsd.org 2004/12/11 01:48:56
3125 [auth-rsa.c auth2-pubkey.c authfile.c misc.c misc.h]
3126 Fix debug call in error path of authorized_keys processing and fix related
3127 warnings; ok djm@
595c699c 3128
79a7ba96 312920041208
3130 - (tim) [configure.ac] Comment some non obvious platforms in the
3131 target-specific case statement. Suggested and OK by dtucker@
3132
03543667 313320041207
3134 - (dtucker) [regress/scp.sh] Use portable-friendly $DIFFOPTs in new test.
3135
23a1441b 313620041206
3137 - (dtucker) [TODO WARNING.RNG] Update to reflect current reality. ok djm@
aa41be57 3138 - (dtucker) OpenBSD CVS Sync
3139 - markus@cvs.openbsd.org 2004/11/25 22:22:14
3140 [sftp-client.c sftp.c]
3141 leak; from mpech
281cf948 3142 - jmc@cvs.openbsd.org 2004/11/29 00:05:17
3143 [sftp.1]
3144 missing full stop;
47460206 3145 - djm@cvs.openbsd.org 2004/11/29 07:41:24
3146 [sftp-client.h sftp.c]
3147 Some small fixes from moritz@jodeit.org. ok deraadt@
f9d52dd1 3148 - jaredy@cvs.openbsd.org 2004/12/05 23:55:07
3149 [sftp.1]
3150 - explain that patterns can be used as arguments in get/put/ls/etc
3151 commands (prodded by Michael Knudsen)
3152 - describe ls flags as a list
3153 - other minor improvements
3154 ok jmc, djm
ea067773 3155 - dtucker@cvs.openbsd.org 2004/12/06 11:41:03
3156 [auth-rsa.c auth2-pubkey.c authfile.c misc.c misc.h ssh.h sshd.8]
3157 Discard over-length authorized_keys entries rather than complaining when
3158 they don't decode. bz #884, with & ok djm@
67a35538 3159 - (dtucker) OpenBSD CVS Sync (regress/)
3160 - djm@cvs.openbsd.org 2004/06/26 06:16:07
3161 [reexec.sh]
3162 don't change the name of the copied sshd for the reexec fallback test,
3163 makes life simpler for portable
642c4a6f 3164 - dtucker@cvs.openbsd.org 2004/07/08 12:59:35
3165 [scp.sh]
3166 Regress test for bz #863 (scp double-error), requires $SUDO. ok markus@
473bdc8b 3167 - david@cvs.openbsd.org 2004/07/09 19:45:43
3168 [Makefile]
3169 add a missing CLEANFILES used in the re-exec test
9c7ea094 3170 - djm@cvs.openbsd.org 2004/10/08 02:01:50
3171 [reexec.sh]
3172 shrink and tidy; ok dtucker@
d7f49021 3173 - djm@cvs.openbsd.org 2004/10/29 23:59:22
3174 [Makefile added brokenkeys.sh]
3175 regression test for handling of corrupt keys in authorized_keys file
a1c3731b 3176 - djm@cvs.openbsd.org 2004/11/07 00:32:41
3177 [multiplex.sh]
3178 regression tests for new multiplex commands
a22f9767 3179 - dtucker@cvs.openbsd.org 2004/11/25 09:39:27
3180 [test-exec.sh]
3181 Remove obsolete RhostsAuthentication from test config; ok markus@
185a020b 3182 - dtucker@cvs.openbsd.org 2004/12/06 10:49:56
3183 [test-exec.sh]
3184 Check if TEST_SSH_SSHD is a full path to sshd before searching; ok markus@
23a1441b 3185
cf848a5e 318620041203
3187 - (dtucker) OpenBSD CVS Sync
3188 - jmc@cvs.openbsd.org 2004/11/07 17:42:36
3189 [ssh.1]
3190 options sort, and whitespace;
aeefce7a 3191 - jmc@cvs.openbsd.org 2004/11/07 17:57:30
3192 [ssh.c]
3193 usage():
3194 - add -O
3195 - sync -S w/ manpage
3196 - remove -h
9aab0af7 3197 - (dtucker) [auth1.c auth2.c] If the user successfully authenticates but is
3198 subsequently denied by the PAM auth stack, send the PAM message to the
3199 user via packet_disconnect (Protocol 1) or userauth_banner (Protocol 2).
3200 ok djm@
cf848a5e 3201
5132eac0 320220041107
3203 - (dtucker) OpenBSD CVS Sync
3204 - djm@cvs.openbsd.org 2004/11/05 12:19:56
3205 [sftp.c]
3206 command editing and history support via libedit; ok markus@
3207 thanks to hshoexer@ and many testers on tech@ too
f8c6db83 3208 - djm@cvs.openbsd.org 2004/11/07 00:01:46
3209 [clientloop.c clientloop.h ssh.1 ssh.c]
3210 add basic control of a running multiplex master connection; including the
3211 ability to check its status and request it to exit; ok markus@
59031773 3212 - (dtucker) [INSTALL Makefile.in configure.ac] Add --with-libedit configure
3213 option and supporting makefile bits and documentation.
5132eac0 3214
4725d66c 321520041105
3216 - (dtucker) OpenBSD CVS Sync
3217 - markus@cvs.openbsd.org 2004/08/30 09:18:08
3218 [LICENCE]
3219 s/keygen/keyscan/
caeffafb 3220 - jmc@cvs.openbsd.org 2004/08/30 21:22:49
3221 [ssh-add.1 ssh.1]
3222 .Xsession -> .xsession;
3223 originally from a pr from f at obiit dot org, but missed by myself;
3224 ok markus@ matthieu@
d3e5d1e9 3225 - djm@cvs.openbsd.org 2004/09/07 23:41:30
3226 [clientloop.c ssh.c]
3227 cleanup multiplex control socket on SIGHUP too, spotted by sturm@
3228 ok markus@ deraadt@
59d4718a 3229 - deraadt@cvs.openbsd.org 2004/09/15 00:46:01
3230 [ssh.c]
3231 /* fallthrough */ is something a programmer understands. But
3232 /* FALLTHROUGH */ is also understood by lint, so that is better.
329a8666 3233 - jaredy@cvs.openbsd.org 2004/09/15 03:25:41
3234 [sshd_config.5]
3235 mention PrintLastLog only prints last login time for interactive
3236 sessions, like PrintMotd mentions.
3237 From Michael Knudsen, with wording changed slightly to match the
3238 PrintMotd description.
3239 ok djm
1c5eab6f 3240 - mickey@cvs.openbsd.org 2004/09/15 18:42:27
3241 [sshd.c]
3242 use less doubles in daemons; markus@ ok
007607ab 3243 - deraadt@cvs.openbsd.org 2004/09/15 18:46:04
3244 [scp.c]
3245 scratch that do { } while (0) wrapper in this case
a7e124fe 3246 - djm@cvs.openbsd.org 2004/09/23 13:00:04
3247 [ssh.c]
3248 correctly honour -n in multiplex client mode; spotted by sturm@ ok markus@
e9aec1d4 3249 - djm@cvs.openbsd.org 2004/09/25 03:45:14
3250 [sshd.c]
3251 these printf args are no longer double; ok deraadt@ markus@
396070f8 3252 - djm@cvs.openbsd.org 2004/10/07 10:10:24
3253 [scp.1 sftp.1 ssh.1 ssh_config.5]
3254 document KbdInteractiveDevices; ok markus@
8e8d8c82 3255 - djm@cvs.openbsd.org 2004/10/07 10:12:36
3256 [ssh-agent.c]
3257 don't unlink agent socket when bind() fails, spotted by rich AT
3258 rich-paul.net, ok markus@
750bbb35 3259 - markus@cvs.openbsd.org 2004/10/20 11:48:53
3260 [packet.c ssh1.h]
3261 disconnect for invalid (out of range) message types.
2c9a4d41 3262 - djm@cvs.openbsd.org 2004/10/29 21:47:15
3263 [channels.c channels.h clientloop.c]
3264 fix some window size change bugs for multiplexed connections: windows sizes
3265 were not being updated if they had changed after ~^Z suspends and SIGWINCH
3266 was not being processed unless the first connection had requested a tty;
3267 ok markus
7a9c7a0b 3268 - djm@cvs.openbsd.org 2004/10/29 22:53:56
3269 [clientloop.c misc.h readpass.c ssh-agent.c]
3270 factor out common permission-asking code to separate function; ok markus@
b82a59f2 3271 - djm@cvs.openbsd.org 2004/10/29 23:56:17
3272 [bufaux.c bufaux.h buffer.c buffer.h]
3273 introduce a new buffer API that returns an error rather than fatal()ing
3274 when presented with bad data; ok markus@
63488674 3275 - djm@cvs.openbsd.org 2004/10/29 23:57:05
3276 [key.c]
3277 use new buffer API to avoid fatal errors on corrupt keys in authorized_keys
3278 files; ok markus@
4725d66c 3279
b29fd59f 328020041102
3281 - (dtucker) [configure.ac includes.h] Bug #947: Fix compile error on HP-UX
3282 10.x by testing for conflicts in shadow.h and undef'ing _INCLUDE__STDC__
3283 only if a conflict is detected.
3284
8f817407 328520041019
3286 - (dtucker) [uidswap.c] Don't test dropping of gids for the root user or
3287 on Cygwin. Cygwin parts from vinschen at redhat com; ok djm@
3288
bbe58934 328920041016
6390930e 3290 - (djm) [auth-pam.c] snprintf->strl*, fix server message length calculations;
3291 ok dtucker@
bbe58934 3292
27f6fddf 329320041006
3294 - (dtucker) [README.privsep] Bug #939: update info about HP-UX Trusted Mode
3295 and other PAM platforms.
4db587d2 3296 - (dtucker) [monitor_mm.c openbsd-compat/xmmap.c] Bug #940: cast constants
3297 to void * to appease picky compilers (eg Tru64's "cc -std1").
27f6fddf 3298
bc6f919d 329920040930
3300 - (dtucker) [configure.ac] Set AC_PACKAGE_NAME. ok djm@
3301
201407c5 330220040923
3303 - (dtucker) [openbsd-compat/bsd-snprintf.c] Previous change was off by one,
3304 which could have caused the justification to be wrong. ok djm@
3305
11124dde 330620040921
3307 - (dtucker) [openbsd-compat/bsd-snprintf.c] Check for max length too.
3308 ok djm@
682c95a2 3309 - (dtucker) [contrib/cygwin/ssh-host-config] Update to match current Cygwin
3310 install process. Patch from vinschen at redhat.com.
11124dde 3311
fa64c868 331220040912
3313 - (djm) [loginrec.c] Start KNF and tidy up of this long-neglected file.
3314 No change in resultant binary
a233586b 3315 - (djm) [loginrec.c] __func__ifiy
7a52470e 3316 - (djm) [loginrec.c] xmalloc
4526e8c2 3317 - (djm) [ssh.c sshd.c version.h] Don't divulge portable version in protocol
3318 banner. Suggested by deraadt@, ok mouring@, dtucker@
479cece8 3319 - (dtucker) [configure.ac] Fix incorrect quoting and tests for cross-compile.
3320 Partly by & ok djm@.
fa64c868 3321
1ef38e33 332220040911
3323 - (djm) [ssh-agent.c] unifdef some cygwin code; ok dtucker@
abdec250 3324 - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #890: Send output from
3325 failing PAM session modules to user then exit, similar to the way
3326 /etc/nologin is handled. ok djm@
ab17aac2 3327 - (dtucker) [auth-pam.c] Relocate sshpam_store_conv(), no code change.
73b1ee82 3328 - (djm) [auth2-kbdint.c auth2-none.c auth2-passwd.c auth2-pubkey.c]
3329 Make cygwin code more consistent with that which surrounds it
ba6dd90e 3330 - (dtucker) [auth-pam.c auth.h auth2-none.c auth2.c monitor.c monitor_wrap.c]
3331 Bug #892: Send messages from failing PAM account modules to the client via
3332 SSH2_MSG_USERAUTH_BANNER messages. Note that this will not happen with
3333 SSH2 kbdint authentication, which need to be dealt with separately. ok djm@
d0c890ac 3334 - (dtucker) [session.c] Bug #927: make .hushlogin silent again. ok djm@
1a01a50c 3335 - (dtucker) [configure.ac] Bug #321: Add cross-compile support to configure.
3336 Parts by chua at ayrnetworks.com, astrand at lysator.liu.se and me. ok djm@
ef084ee2 3337 - (dtucker) [auth-krb5.c] Bug #922: Pass KRB5CCNAME to PAM. From deengert
3338 at anl.gov, ok djm@
1ef38e33 3339
3c502155 334020040830
3341 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.{c,h}] Bug #915: only
3342 copy required environment variables on Cygwin. Patch from vinschen at
3343 redhat.com, ok djm@
148aa9e3 3344 - (dtucker) [regress/Makefile] Clean scp-ssh-wrapper.scp too. Patch from
3345 vinschen at redhat.com.
3ca8cd7a 3346 - (dtucker) [Makefile.in contrib/ssh-copy-id] Bug #894: Improve portability
3347 of shell constructs. Patch from cjwatson at debian.org.
3c502155 3348
07bcec17 334920040829
3350 - (dtucker) [openbsd-compat/getrrsetbyname.c] Prevent getrrsetbyname from
3351 failing with NOMEMORY if no sigs are returned and malloc(0) returns NULL.
3352 From Martin.Kraemer at Fujitsu-Siemens.com; ok djm@
528afafa 3353 - (dtucker) OpenBSD CVS Sync
3354 - djm@cvs.openbsd.org 2004/08/23 11:48:09
3355 [authfile.c]
3356 fix error path, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
2912cbd6 3357 - djm@cvs.openbsd.org 2004/08/23 11:48:47
3358 [channels.c]
3359 typo, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
510ec5d1 3360 - dtucker@cvs.openbsd.org 2004/08/23 14:26:38
3361 [ssh-keysign.c ssh.c]
3362 Use permanently_set_uid() in ssh and ssh-keysign for consistency, matches
3363 change in Portable; ok markus@ (CVS ID sync only)
baab9e74 3364 - dtucker@cvs.openbsd.org 2004/08/23 14:29:23
3365 [ssh-keysign.c]
3366 Remove duplicate getuid(), suggested by & ok markus@
6f5abc1e 3367 - markus@cvs.openbsd.org 2004/08/26 16:00:55
3368 [ssh.1 sshd.8]
3369 get rid of references to rhosts authentication; with jmc@
9216f89c 3370 - djm@cvs.openbsd.org 2004/08/28 01:01:48
3371 [sshd.c]
3372 don't erroneously close stdin for !reexec case, from Dave Johnson;
3373 ok markus@
765a24cd 3374 - (dtucker) [configure.ac] Include sys/stream.h in sys/ptms.h header check,
3375 fixes configure warning on Solaris reported by wknox at mitre.org.
3b4e535d 3376 - (dtucker) [regress/multiplex.sh] Skip test on platforms that do not
3377 support FD passing since multiplex requires it. Noted by tim@
0f996f6f 3378 - (dtucker) [regress/dynamic-forward.sh] Allow time for connections to be torn
3379 down, needed on some platforms, should be harmless on others. Patch from
3380 jason at devrandom.org.
1f29cb36 3381 - (dtucker) [regress/scp.sh] Make this work on Cygwin too, which doesn't like
3382 files ending in .exe that aren't binaries; patch from vinschen at redhat.com.
e3dde834 3383 - (dtucker) [Makefile.in] Get regress/Makefile symlink right for out-of-tree
3384 builds too, from vinschen at redhat.com.
2d05b097 3385 - (dtucker) [regress/agent-ptrace.sh] Skip ptrace test on OSF1/DUnix/Tru64
3386 too; patch from cmadams at hiwaay.net.
b3146b5f 3387 - (dtucker) [configure.ac] Replace non-portable echo \n with extra echo.
1383f285 3388 - (dtucker) [openbsd-compat/port-aix.c] Bug #712: Explicitly check for
3389 accounts with authentication configs that sshd can't support (ie
3390 SYSTEM=NONE and AUTH1=something).
07bcec17 3391
8a550b0c 339220040828
dc3f209a 3393 - (dtucker) [openbsd-compat/mktemp.c] Remove superfluous Cygwin #ifdef; from
3394 vinschen at redhat.com.
8a550b0c 3395
96b0de7d 339620040823
3397 - (djm) [ssh-rand-helper.c] Typo. Found by
3398 Martin.Kraemer AT Fujitsu-Siemens.com
f6d20d59 3399 - (djm) [loginrec.c] Typo and bad args in error messages; Spotted by
3400 Martin.Kraemer AT Fujitsu-Siemens.com
96b0de7d 3401
bd8b4205 340220040817
3403 - (dtucker) [regress/README.regress] Note compatibility issues with GNU head.
d9ea1ac4 3404 - (djm) OpenBSD CVS Sync
3405 - markus@cvs.openbsd.org 2004/08/16 08:17:01
3406 [version.h]
3407 3.9
3e9c2229 3408 - (djm) Crank RPM spec version numbers
0774a3cb 3409 - (djm) Release 3.9p1
bd8b4205 3410
059d3165 341120040816
3412 - (dtucker) [acconfig.h auth-pam.c configure.ac] Set real uid to non-root
3413 to convince Solaris PAM to honour password complexity rules. ok djm@
3414
6213295d 341520040815
3416 - (dtucker) [Makefile.in ssh-keysign.c ssh.c] Use permanently_set_uid() since
3417 it does the right thing on all platforms. ok djm@
419e26e7 3418 - (djm) [acconfig.h configure.ac openbsd-compat/Makefile.in
3419 openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-misc.c
3420 openbsd-compat/bsd-misc.h openbsd-compat/openbsd-compat.h] Use smarter
3421 closefrom() replacement from sudo; ok dtucker@
5f12e050 3422 - (djm) [loginrec.c] Check that seek succeeded here too; ok dtucker
b93c1b14 3423 - (dtucker) [Makefile.in] Fix typo.
6213295d 3424
b347167a 342520040814
3426 - (dtucker) [auth-krb5.c gss-serv-krb5.c openbsd-compat/xmmap.c]
3427 Explicitly set umask for mkstemp; ok djm@
c3a4ce90 3428 - (dtucker) [includes.h] Undef _INCLUDE__STDC__ on HP-UX, otherwise
3429 prot.h and shadow.h provide conflicting declarations of getspnam. ok djm@
f5ed3301 3430 - (dtucker) [loginrec.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]
3431 Plug AIX login recording into login_write so logins will be recorded for
3432 all auth types.
b347167a 3433
3cc5d223 343420040813
3435 - (dtucker) [openbsd-compat/bsd-misc.c] Typo in #ifdef; from vinschen at
3436 redhat.com
9a995072 3437- (dtucker) OpenBSD CVS Sync
3438 - avsm@cvs.openbsd.org 2004/08/11 21:43:05
3439 [channels.c channels.h clientloop.c misc.c misc.h serverloop.c ssh-agent.c]
3440 some signed/unsigned int comparison cleanups; markus@ ok
f581b6e8 3441 - avsm@cvs.openbsd.org 2004/08/11 21:44:32
3442 [authfd.c scp.c ssh-keyscan.c]
3443 use atomicio instead of homegrown equivalents or read/write.
3444 markus@ ok
188c698a 3445 - djm@cvs.openbsd.org 2004/08/12 09:18:24
3446 [sshlogin.c]
3447 typo in error message, spotted by moritz AT jodeit.org (Id sync only)
3a858356 3448 - jakob@cvs.openbsd.org 2004/08/12 21:41:13
3449 [ssh-keygen.1 ssh.1]
3450 improve SSHFP documentation; ok deraadt@
a665982d 3451 - jmc@cvs.openbsd.org 2004/08/13 00:01:43
3452 [ssh-keygen.1]
3453 kill whitespace at eol;
fb3d6bd2 3454 - djm@cvs.openbsd.org 2004/08/13 02:51:48
3455 [monitor_fdpass.c]
3456 extra check for no message case; ok markus, deraadt, hshoexer, henning
861cc543 3457 - dtucker@cvs.openbsd.org 2004/08/13 11:09:24
3458 [servconf.c]
3459 Fix line numbers off-by-one in error messages, from tortay at cc.in2p3.fr
3460 ok markus@, djm@
3cc5d223 3461
c6ad9bc4 346220040812
3463 - (dtucker) [sshd.c] Remove duplicate variable imported during sync.
8b758bd2 3464 - (dtucker) OpenBSD CVS Sync
3465 - markus@cvs.openbsd.org 2004/07/28 08:56:22
3466 [sshd.c]
3467 call setsid() _before_ re-exec
d77347cc 3468 - markus@cvs.openbsd.org 2004/07/28 09:40:29
3469 [auth.c auth1.c auth2.c cipher.c cipher.h key.c session.c ssh.c
3470 sshconnect1.c]
3471 more s/illegal/invalid/
0875a0a2 3472 - djm@cvs.openbsd.org 2004/08/04 10:37:52
3473 [dh.c]
3474 return group14 when no primes found - fixes hang on empty /etc/moduli;
3475 ok markus@
16acb158 3476 - dtucker@cvs.openbsd.org 2004/08/11 11:09:54
3477 [servconf.c]
3478 Fix minor leak; "looks right" deraadt@
ad148c04 3479 - dtucker@cvs.openbsd.org 2004/08/11 11:50:09
3480 [sshd.c]
3481 Don't try to close startup_pipe if it's not open; ok djm@
e12b5ad5 3482 - djm@cvs.openbsd.org 2004/08/11 11:59:22
3483 [sshlogin.c]
3484 check that lseek went were we told it to; ok markus@
3485 (Id sync only, but similar changes are needed in loginrec.c)
7456203e 3486 - djm@cvs.openbsd.org 2004/08/11 12:01:16
3487 [sshlogin.c]
3488 make store_lastlog_message() static to appease -Wall; ok markus
f143ed33 3489 - (dtucker) [sshd.c] Clear loginmsg in postauth monitor, prevents doubling
3490 messages generated before the postauth privsep split.
c6ad9bc4 3491
227a6a97 349220040720
3493 - (djm) OpenBSD CVS Sync
3494 - markus@cvs.openbsd.org 2004/07/21 08:56:12
3495 [auth.c]
3496 s/Illegal user/Invalid user/; many requests; ok djm, millert, niklas,
3497 miod, ...
bd5c0694 3498 - djm@cvs.openbsd.org 2004/07/21 10:33:31
3499 [auth1.c auth2.c]
3500 bz#899: Don't display invalid usernames in setproctitle
d2e302d7 3501 from peak AT argo.troja.mff.cuni.cz; ok markus@
3502 - djm@cvs.openbsd.org 2004/07/21 10:36:23
3503 [gss-serv-krb5.c]
3504 fix function declaration
13f2a382 3505 - djm@cvs.openbsd.org 2004/07/21 11:51:29
3506 [canohost.c]
3507 bz#902: cache remote port so we don't fatal() in auth_log when remote
3508 connection goes away quickly. from peak AT argo.troja.mff.cuni.cz;
3509 ok markus@
da97d54d 3510 - (djm) [auth-pam.c] Portable parts of bz#899: Don't display invalid
3511 usernames in setproctitle from peak AT argo.troja.mff.cuni.cz;
227a6a97 3512
84824e11 351320040720
ac87b3c2 3514 - (djm) [log.c] bz #111: Escape more control characters when sending data
3515 to syslog; from peak AT argo.troja.mff.cuni.cz
2a5aa59b 3516 - (djm) [contrib/redhat/sshd.pam] bz #903: Remove redundant entries; from
3517 peak AT argo.troja.mff.cuni.cz
84824e11 3518 - (djm) [regress/README.regress] Remove caveat regarding TCP wrappers, now
3519 that sshd is fixed to behave better; suggested by tim
ac87b3c2 3520
75d1f941 352120040719
3522 - (djm) [openbsd-compat/bsd-arc4random.c] Discard early keystream, like OpenBSD
3523 ok dtucker@
8936b151 3524 - (djm) [auth-pam.c] Avoid use of xstrdup and friends in conversation function,
3525 instead return PAM_CONV_ERR, avoiding another path to fatal(); ok dtucker@
34f2baf0 3526 - (tim) [configure.ac] updwtmpx() on OpenServer seems to add duplicate entry.
3527 Report by rac AT tenzing.org
75d1f941 3528
35cf0057 352920040717
3530 - (dtucker) [logintest.c scp.c sftp-server.c sftp.c ssh-add.c ssh-agent.c
3531 ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c ssh.c sshd.c
3532 openbsd-compat/bsd-misc.c] Move "char *__progname" to bsd-misc.c. Reduces
3533 diff vs OpenBSD; ok mouring@, tested by tim@ too.
f2107e97 3534 - (dtucker) OpenBSD CVS Sync
3535 - deraadt@cvs.openbsd.org 2004/07/11 17:48:47
3536 [channels.c cipher.c clientloop.c clientloop.h compat.h moduli.c
3537 readconf.c nchan.c pathnames.h progressmeter.c readconf.h servconf.c
3538 session.c sftp-client.c sftp.c ssh-agent.1 ssh-keygen.c ssh.c ssh1.h
3539 sshd.c ttymodes.h]
3540 spaces
95a07125 3541 - brad@cvs.openbsd.org 2004/07/12 23:34:25
3542 [ssh-keyscan.1]
3543 Fix incorrect macro, .I -> .Em
3544 From: Eric S. Raymond <esr at thyrsus dot com>
3545 ok jmc@
be2ca0c9 3546 - dtucker@cvs.openbsd.org 2004/07/17 05:31:41
3547 [monitor.c monitor_wrap.c session.c session.h sshd.c sshlogin.c]
3548 Move "Last logged in at.." message generation to the monitor, right
3549 before recording the new login. Fixes missing lastlog message when
3550 /var/log/lastlog is not world-readable and incorrect datestamp when
3551 multiple sessions are used (bz #463); much assistance & ok markus@
35cf0057 3552
930d0441 355320040711
3554 - (dtucker) [auth-pam.c] Check for zero from waitpid() too, which allows
3555 the monitor to properly clean up the PAM thread (Debian bug #252676).
3556
6a2c4cd8 355720040709
3558 - (tim) [contrib/cygwin/README] add minires-devel requirement. Patch from
3559 vinschen AT redhat.com
3560
5b8a78e8 356120040708
3562 - (dtucker) OpenBSD CVS Sync
3563 - dtucker@cvs.openbsd.org 2004/07/03 05:11:33
3564 [sshlogin.c] (RCSID sync only, the corresponding code is not in Portable)
3565 Use '\0' not 0 for string; ok djm@, deraadt@
77751377 3566 - dtucker@cvs.openbsd.org 2004/07/03 11:02:25
3567 [monitor_wrap.c]
3568 Put s/key functions inside #ifdef SKEY same as monitor.c,
3569 from des@freebsd via bz #330, ok markus@
7e693c81 3570 - dtucker@cvs.openbsd.org 2004/07/08 12:47:21
3571 [scp.c]
3572 Prevent scp from skipping the file following a double-error.
3573 bz #863, ok markus@
5b8a78e8 3574
544842de 357520040702
3576 - (dtucker) [mdoc2man.awk] Teach it to ignore .Bk -words, reported by
3577 strube at physik3.gwdg.de a long time ago.
3578
25bfd4ff 357920040701
3580 - (dtucker) [session.c] Call display_loginmsg again after do_pam_session.
3581 Ensures messages from PAM modules are displayed when privsep=no.
0943f13c 3582 - (dtucker) [auth-pam.c] Bug #705: Make arguments match PAM specs, fixes
3583 warnings on compliant platforms. From paul.a.bolton at bt.com. ok djm@
e4472e7e 3584 - (dtucker) [auth-pam.c] Bug #559 (last piece): Pass DISALLOW_NULL_AUTHTOK
3585 to pam_authenticate for challenge-response auth too. Originally from
3586 fcusack at fcusack.com, ok djm@
d386a795 3587 - (tim) [buildpkg.sh.in] Add $REV to bump the package revision within
3588 the same version. Handle the case where someone uses --with-privsep-user=
3589 and the user name does not match the group name. ok dtucker@
25bfd4ff 3590
d506e25f 359120040630
3592 - (dtucker) [auth-pam.c] Check for buggy PAM modules that return a NULL
3593 appdata_ptr to the conversation function. ok djm@
9affc5db 3594 - (djm) OpenBSD CVS Sync
3595 - jmc@cvs.openbsd.org 2004/06/26 09:03:21
3596 [ssh.1]
3597 - remove double word
3598 - rearrange .Bk to keep SYNOPSIS nice
3599 - -M before -m in options description
9a5cfb58 3600 - jmc@cvs.openbsd.org 2004/06/26 09:11:14
3601 [ssh_config.5]
3602 punctuation and grammar fixes. also, keep the options in order.
8fca654b 3603 - jmc@cvs.openbsd.org 2004/06/26 09:14:40
3604 [sshd_config.5]
3605 new sentence, new line;
83529a6b 3606 - avsm@cvs.openbsd.org 2004/06/26 20:07:16
3607 [sshd.c]
3608 initialise some fd variables to -1, djm@ ok
c6c76c99 3609 - djm@cvs.openbsd.org 2004/06/30 08:36:59
3610 [session.c]
3611 unbreak TTY break, diagnosed by darren AT dazwin.com; ok markus@
d506e25f 3612
6bd29ee7 361320040627
3614 - (tim) update README files.
78666263 3615 - (dtucker) [mdoc2man.awk] Bug #883: correctly recognise .Pa and .Ev macros.
6a303e26 3616 - (dtucker) [regress/README.regress] Document new variables.
cd698186 3617 - (dtucker) [acconfig.h configure.ac sftp-server.c] Bug #823: add sftp
3618 rename handling for Linux which returns EPERM for link() on (at least some)
3619 filesystems that do not support hard links. sftp-server will fall back to
3620 stat+rename() in such cases.
13f72b91 3621 - (dtucker) [openbsd-compat/port-aix.c] Missing __func__.
6bd29ee7 3622
b250e837 362320040626
3624 - (djm) OpenBSD CVS Sync
3625 - djm@cvs.openbsd.org 2004/06/25 18:43:36
3626 [sshd.c]
3627 fix broken fd handling in the re-exec fallback path, particularly when
3628 /dev/crypto is in use; ok deraadt@ markus@
7f09f717 3629 - djm@cvs.openbsd.org 2004/06/25 23:21:38
3630 [sftp.c]
3631 bz #875: fix bad escape char error message; reported by f_mohr AT yahoo.de
b250e837 3632
b9a549d7 363320040625
3634 - (dtucker) OpenBSD CVS Sync
3635 - djm@cvs.openbsd.org 2004/06/24 19:30:54
3636 [servconf.c servconf.h sshd.c]
3637 re-exec sshd on accept(); initial work, final debugging and ok markus@
33e5359c 3638 - djm@cvs.openbsd.org 2004/06/25 01:16:09
3639 [sshd.c]
3640 only perform tcp wrappers checks when the incoming connection is on a
3641 socket. silences useless warnings from regress tests that use
3642 proxycommand="sshd -i". prompted by david@ ok markus@
403447b4 3643 - djm@cvs.openbsd.org 2004/06/24 19:32:00
3644 [regress/Makefile regress/test-exec.sh, added regress/reexec.sh]
3645 regress test for re-exec corner cases
19031d79 3646 - djm@cvs.openbsd.org 2004/06/25 01:25:12
3647 [regress/test-exec.sh]
3648 clean reexec-specific junk out of text-exec.sh and simplify; idea markus@
dc5888bf 3649 - dtucker@cvs.openbsd.org 2004/06/25 05:38:48
3650 [sftp-server.c]
3651 Fall back to stat+rename if filesystem doesn't doesn't support hard
3652 links. bz#823, ok djm@
2909d712 3653 - (dtucker) [configure.ac openbsd-compat/misc.c [openbsd-compat/misc.h]
3654 Add closefrom() for platforms that don't have it.
7706b4c7 3655 - (dtucker) [sshd.c] add line missing from reexec sync.
b9a549d7 3656
ece30983 365720040623
3658 - (dtucker) [auth1.c] Ensure do_pam_account is called for Protocol 1
3659 connections with empty passwords. Patch from davidwu at nbttech.com,
3660 ok djm@
e0e1d130 3661 - (dtucker) OpenBSD CVS Sync
3662 - dtucker@cvs.openbsd.org 2004/06/22 22:42:02
3663 [regress/envpass.sh]
3664 Add quoting for test -z; ok markus@
677dd470 3665 - dtucker@cvs.openbsd.org 2004/06/22 22:45:52
3666 [regress/test-exec.sh]
3667 Add TEST_SSH_SSHD_CONFOPTS and TEST_SSH_SSH_CONFOPTS to allow adding
3668 arbitary options to sshd_config and ssh_config during tests. ok markus@
08f8b491 3669 - dtucker@cvs.openbsd.org 2004/06/22 22:55:56
3670 [regress/dynamic-forward.sh regress/test-exec.sh]
3671 Allow setting of port for regress from TEST_SSH_PORT variable; ok markus@
2225c3d3 3672 - mouring@cvs.openbsd.org 2004/06/23 00:39:38
3673 [rijndael.c]
3674 -Wshadow fix up s/encrypt/do_encrypt/. OK djm@, markus@
77c50919 3675 - dtucker@cvs.openbsd.org 2004/06/23 14:31:01
3676 [ssh.c]
3677 Fix counting in master/slave when passing environment variables; ok djm@
9ea217e8 3678 - (dtucker) [cipher.c] encrypt->do_encrypt inside SSH_OLD_EVP to match
3679 -Wshadow change.
915d8ec0 3680 - (bal) [Makefile.in] Remove opensshd.init on 'make distclean'
bc5c2025 3681 - (dtucker) [auth.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]
3682 Move loginrestrictions test to port-aix.c, replace with a generic hook.
30a3b174 3683 - (tim) [regress/try-ciphers.sh] "if ! some_command" is not portable.
915d8ec0 3684 - (bal) [contrib/README] Removed "mdoc2man.pl" reference and added
3685 reference to "findssl.sh"
ece30983 3686
67a08279 368720040622
3688 - (dtucker) OpenBSD CVS Sync
3689 - djm@cvs.openbsd.org 2004/06/20 17:36:59
3690 [ssh.c]
3691 filter passed env vars at slave in connection sharing case; ok markus@
48925711 3692 - djm@cvs.openbsd.org 2004/06/20 18:53:39
3693 [sftp.c]
3694 make "ls -l" listings print user/group names, add "ls -n" to show uid/gid
3695 (like /bin/ls); idea & ok markus@
031a105c 3696 - djm@cvs.openbsd.org 2004/06/20 19:28:12
3697 [sftp.1]
3698 mention new -n flag
ca75d7de 3699 - avsm@cvs.openbsd.org 2004/06/21 17:36:31
3700 [auth-rsa.c auth2-gss.c auth2-pubkey.c authfile.c canohost.c channels.c
3701 cipher.c dns.c kex.c monitor.c monitor_fdpass.c monitor_wrap.c
3702 monitor_wrap.h nchan.c packet.c progressmeter.c scp.c sftp-server.c sftp.c
3703 ssh-gss.h ssh-keygen.c ssh.c sshconnect.c sshconnect1.c sshlogin.c
3704 sshpty.c]
3705 make ssh -Wshadow clean, no functional changes
3706 markus@ ok
d7ecbe88 3707 - djm@cvs.openbsd.org 2004/06/21 17:53:03
3708 [session.c]
3709 fix fd leak for multiple subsystem connections; with markus@
3a55a954 3710 - djm@cvs.openbsd.org 2004/06/21 22:02:58
3711 [log.h]
3712 mark fatal and cleanup exit as __dead; ok markus@
95cbd340 3713 - djm@cvs.openbsd.org 2004/06/21 22:04:50
3714 [sftp.c]
3715 introduce sorting for ls, same options as /bin/ls; ok markus@
ae7daec3 3716 - djm@cvs.openbsd.org 2004/06/21 22:30:45
3717 [sftp.c]
3718 prefix ls option flags with LS_
c4c84934 3719 - djm@cvs.openbsd.org 2004/06/21 22:41:31
3720 [sftp.1]
3721 document sort options
cc4ff6c4 3722 - djm@cvs.openbsd.org 2004/06/22 01:16:39
3723 [sftp.c]
3724 don't show .files by default in ls, add -a option to turn them back on;
3725 ok markus
cb19b709 3726 - markus@cvs.openbsd.org 2004/06/22 03:12:13
3727 [regress/envpass.sh regress/multiplex.sh]
3728 more portable env passing tests
18a8f313 3729 - dtucker@cvs.openbsd.org 2004/06/22 05:05:45
3730 [monitor.c monitor_wrap.c]
3731 Change login->username, will prevent -Wshadow errors in Portable;
3732 ok markus@
0cc632c0 3733 - (dtucker) [monitor.c] Fix Portable-specific -Wshadow warnings on "socket".
8a946417 3734 - (dtucker) [defines.h] Define __dead if not already defined.
915d8ec0 3735 - (bal) [auth-passwd.c auth1.c] Clean up unused variables.
67a08279 3736
a3245b92 373720040620
3738 - (tim) [configure.ac Makefile.in] Only change TEST_SHELL on broken platforms.
3739
c10bb2ce 374020040619
3741 - (dtucker) [auth-pam.c] Don't use PAM namespace for
3742 pam_password_change_required either.
ddd8c95b 3743 - (tim) [configure.ac buildpkg.sh.in contrib/solaris/README] move opensshd
3744 init script to top level directory. Add opensshd.init.in.
3745 Remove contrib/solaris/buildpkg.sh, contrib/solaris/opensshd.in
c10bb2ce 3746
1786be35 374720040618
3748 - (djm) OpenBSD CVS Sync
3749 - djm@cvs.openbsd.org 2004/06/17 14:52:48
3750 [clientloop.c clientloop.h ssh.c]
3751 support environment passing over shared connections; ok markus@
0d34d6ce 3752 - djm@cvs.openbsd.org 2004/06/17 15:10:14
3753 [clientloop.c misc.h readconf.c readpass.c ssh.c ssh_config.5]
3754 Add option for confirmation (ControlMaster=ask) via ssh-askpass before
3755 opening shared connections; ok markus@
b9a59b74 3756 - djm@cvs.openbsd.org 2004/06/17 14:53:27
3757 [regress/multiplex.sh]
3758 shared connection env passing regress test
1ddab330 3759 - (dtucker) [regress/README.regress] Add detail on how to run a single
3760 test from the top-level Makefile.
0e19494c 3761 - (dtucker) OpenBSD CVS Sync
3762 - djm@cvs.openbsd.org 2004/06/17 23:56:57
3763 [ssh.1 ssh.c]
3764 sync usage() and SYNPOSIS with connection sharing changes
35e49915 3765 - dtucker@cvs.openbsd.org 2004/06/18 06:13:25
3766 [sftp.c]
3767 Use execvp instead of execv so sftp -S ssh works. "makes sense" markus@
1980d5c9 3768 - dtucker@cvs.openbsd.org 2004/06/18 06:15:51
3769 [multiplex.sh]
3770 Use -S for scp/sftp to force the use of the ssh being tested.
3771 ok djm@,markus@
78d2b454 3772 - (djm) OpenBSD CVS Sync
3773 - djm@cvs.openbsd.org 2004/06/18 10:40:19
3774 [ssh.c]
3775 delay signal handler setup until we have finished talking to the master.
3776 allow interrupting of setup (e.g. if master is stuck); ok markus@
4598add7 3777 - markus@cvs.openbsd.org 2004/06/18 10:55:43
3778 [ssh.1 ssh.c]
3779 trim synopsis for -S, allow -S and -oControlMaster, -MM means 'ask';
3780 ok djm
13de3560 3781 - djm@cvs.openbsd.org 2004/06/18 11:11:54
3782 [channels.c clientloop.c]
3783 Don't explode in clientloop when we receive a bogus channel id, but
3784 also don't generate them to begin with; ok markus@
1786be35 3785
502f32cd 378620040617
3787 - (dtucker) [regress/scp.sh] diff -N is not portable (but needed for some
3788 platforms), so test if diff understands it. Pointed out by tim@, ok djm@
58766d34 3789 - (dtucker) OpenBSD CVS Sync regress/
3790 - dtucker@cvs.openbsd.org 2004/06/17 05:51:59
3791 [regress/multiplex.sh]
3792 Remove datafile between and after tests, kill sshd rather than wait;
3793 ok djm@
00e612c7 3794 - dtucker@cvs.openbsd.org 2004/06/17 06:00:05
3795 [regress/multiplex.sh]
3796 Use DATA and COPY for test data rather than hard-coded paths; ok djm@
c031f95b 3797 - dtucker@cvs.openbsd.org 2004/06/17 06:19:06
3798 [regress/multiplex.sh]
3799 Add small description of failing test to failure message; ok djm@
b066fabe 3800 - (dtucker) [regress/multiplex.sh] add EXEEXT for those platforms that need
3801 it.
1cfcbead 3802 - (dtucker) [regress/multiplex.sh] Increase sleep time to 120 sec (60 is not
3803 enough for slow systems, especially if they don't have a kernel RNG).
502f32cd 3804
6d05637a 380520040616
3806 - (dtucker) [openbsd-compat/port-aix.c] Expand whitespace -> tabs. No
3807 code changes.
1b0a92c0 3808 - (dtucker) OpenBSD CVS Sync regress/
3809 - djm@cvs.openbsd.org 2004/04/27 09:47:30
30ee6294 3810 [regress/Makefile regress/test-exec.sh, added regress/envpass.sh]
1b0a92c0 3811 regress test for environment passing, SendEnv & AcceptEnv options;
3812 ok markus@
53e2a65c 3813 - dtucker@cvs.openbsd.org 2004/06/13 13:51:02
30ee6294 3814 [regress/Makefile regress/test-exec.sh, added regress/scp-ssh-wrapper.sh
3815 regress/scp.sh]
53e2a65c 3816 Add scp regression test; with & ok markus@
00995aa0 3817 - djm@cvs.openbsd.org 2004/06/13 15:04:08
30ee6294 3818 [regress/Makefile regress/test-exec.sh, added regress/envpass.sh]
00995aa0 3819 regress test for client multiplexing; ok markus@
099e2052 3820 - djm@cvs.openbsd.org 2004/06/13 15:16:54
3821 [regress/test-exec.sh]
3822 remove duplicate setting of $SCP; spotted by markus@
6d89f486 3823 - dtucker@cvs.openbsd.org 2004/06/16 13:15:09
3824 [regress/scp.sh]
3825 Make scp -r tests use diff -rN not cmp (which won't do dirs. ok markus@
6d3d1404 3826 - dtucker@cvs.openbsd.org 2004/06/16 13:16:40
353e5ddd 3827 [regress/multiplex.sh]
6d3d1404 3828 Silence multiplex sftp and scp tests. ok markus@
6b1caf5d 3829 - (dtucker) [regress/test-exec.sh]
3830 Move Portable-only StrictModes to top of list to make syncs easier.
3831 - (dtucker) [regress/README.regress]
3832 Add $TEST_SHELL to readme.
6d05637a 3833
8dbffee9 383420040615
3835 - (djm) OpenBSD CVS Sync
3836 - djm@cvs.openbsd.org 2004/05/26 08:59:57
3837 [sftp.c]
3838 exit -> _exit in forked child on error; from andrushock AT korovino.net
0ea89f7e 3839 - markus@cvs.openbsd.org 2004/05/26 23:02:39
3840 [channels.c]
3841 missing freeaddrinfo; Andrey Matveev
f9ee425b 3842 - dtucker@cvs.openbsd.org 2004/05/27 00:50:13
3843 [readconf.c]
3844 Kill dead code after fatal(); ok djm@
87ef1b80 3845 - dtucker@cvs.openbsd.org 2004/06/01 14:20:45
3846 [auth2-chall.c]
3847 Remove redundant #include; ok markus@
6e007f08 3848 - pedro@cvs.openbsd.org 2004/06/03 12:22:20
3849 [sftp-client.c sftp.c]
3850 initialize pointers, ok markus@
41e5bd9a 3851 - djm@cvs.openbsd.org 2004/06/13 12:53:24
3852 [dh.c dh.h kex.c kex.h kexdhc.c kexdhs.c monitor.c myproposal.h]
3853 [ssh-keyscan.c sshconnect2.c sshd.c]
3854 implement diffie-hellman-group14-sha1 kex method (trivial extension to
3855 existing diffie-hellman-group1-sha1); ok markus@
3b9baa7b 3856 - dtucker@cvs.openbsd.org 2004/06/13 14:01:42
3857 [ssh.1 ssh_config.5 sshd_config.5]
3858 List supported ciphers in man pages, tidy up ssh -c;
3859 "looks fine" jmc@, ok markus@
5e96b616 3860 - djm@cvs.openbsd.org 2004/06/13 15:03:02
3861 [channels.c channels.h clientloop.c clientloop.h includes.h readconf.c]
3862 [readconf.h scp.1 sftp.1 ssh.1 ssh.c ssh_config.5]
3863 implement session multiplexing in the client (the server has supported
3864 this since 2.0); ok markus@
170694d7 3865 - djm@cvs.openbsd.org 2004/06/14 01:44:39
3866 [channels.c clientloop.c misc.c misc.h packet.c ssh-agent.c ssh-keyscan.c]
3867 [sshd.c]
1b273ece 3868 set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@
3869 - djm@cvs.openbsd.org 2004/06/15 05:45:04
3870 [clientloop.c]
3871 missed one unset_nonblock; spotted by Tim Rice
a67a2ec6 3872 - (djm) Fix Makefile.in for connection sharing changes
4b5df124 3873 - (djm) [ssh.c] Use separate var for address length
8dbffee9 3874
8600a4ab 387520040603
3876 - (dtucker) [auth-pam.c] Don't use pam_* namespace for sshd's PAM functions.
3877 ok djm@
3878
93c5ef94 387920040601
3880 - (djm) [auth-pam.c] Add copyright for local changes
3881
5de92f17 388220040530
0e716148 3883 - (dtucker) [auth-pam.c auth-pam.h auth-passwd.c] Bug #874: Re-add PAM
5de92f17 3884 support for PasswordAuthentication=yes. ok djm@
0e716148 3885 - (dtucker) [auth-pam.c] Use an invalid password for root if
3886 PermitRootLogin != yes or the login is invalid, to prevent leaking
3887 information. Based on Openwall's owl-always-auth patch. ok djm@
9cefe228 3888 - (tim) [configure.ac Makefile.in] Add support for "make package" ok djm@
3889 - (tim) [buildpkg.sh.in] New file. A more flexible version of
3890 contrib/solaris/buildpkg.sh used for "make package".
25616c13 3891 - (tim) [buildpkg.sh.in] Last minute fix didn't make it in the .in file.
5de92f17 3892
f2422cee 389320040527
3894 - (dtucker) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec
3895 contrib/README CREDITS INSTALL] Bug #873: Correct URLs for x11-ssh-askpass
3896 and Jim Knoble's email address , from Jim himself.
3897
0e5de6f8 389820040524
3899 - (dtucker) OpenBSD CVS Sync
3900 - djm@cvs.openbsd.org 2004/05/19 12:17:33
3901 [sftp-client.c sftp.c]
3902 gracefully abort transfers on receipt of SIGINT, also ignore SIGINT while
3903 waiting for a command; ok markus@
27c6fcae 3904 - dtucker@cvs.openbsd.org 2004/05/20 10:58:05
3905 [clientloop.c]
3906 Trivial type fix 0 -> '\0'; ok markus@
7e9a0e92 3907 - markus@cvs.openbsd.org 2004/05/21 08:43:03
3908 [kex.h moduli.c tildexpand.c]
3909 add prototypes for -Wall; ok djm
d740ec16 3910 - djm@cvs.openbsd.org 2004/05/21 11:33:11
3911 [channels.c channels.h clientloop.c serverloop.c ssh.1]
8a956cda 3912 bz #756: add support for the cancel-tcpip-forward request for the server
3913 and the client (through the ~C commandline). reported by z3p AT
3914 twistedmatrix.com; ok markus@
7069a5e2 3915 - djm@cvs.openbsd.org 2004/05/22 06:32:12
3916 [clientloop.c ssh.1]
3917 use '-h' for help in ~C commandline instead of '-?'; inspired by jmc@
790029d9 3918 - jmc@cvs.openbsd.org 2004/05/22 16:01:05
3919 [ssh.1]
3920 kill whitespace at eol;
af4bd935 3921 - dtucker@cvs.openbsd.org 2004/05/23 23:59:53
8a956cda 3922 [auth.c auth.h auth1.c auth2.c servconf.c servconf.h sshd_config
3923 sshd_config.5]
af4bd935 3924 Add MaxAuthTries sshd config option; ok markus@
8a956cda 3925 - (dtucker) [auth-pam.c] Bug #839: Ensure that pam authentication "thread"
3926 is terminated if the privsep slave exits during keyboard-interactive
3927 authentication. ok djm@
e5ba4718 3928 - (dtucker) [sshd.c] Fix typo in comment.
0e5de6f8 3929
73e81988 393020040523
2f6f9cff 3931 - (djm) [sshd_config] Explain consequences of UsePAM=yes a little better in
3932 sshd_config; ok dtucker@
3933 - (djm) [configure.ac] Warn if the system has no known way of figuring out
3934 which user is on the other end of a Unix domain socket; ok dtucker@
a205f92a 3935 - (bal) [openbsd-compat/sys-queue.h] Reintroduce machinary to handle
3936 old/broken/incomplete <sys/queue.h>.
73e81988 3937
dabb524a 393820040513
3939 - (dtucker) [configure.ac] Bug #867: Additional tests for res_query in
3940 libresolv, fixes problems detecting it on some platforms
3941 (eg Linux/x86-64). From Kurt Roeckx via Debian, ok mouring@
16cc4c93 3942 - (dtucker) OpenBSD CVS Sync
3943 - jmc@cvs.openbsd.org 2004/05/04 18:36:07
3944 [scp.1]
3945 SendEnv here too;
b2e90ab5 3946 - jmc@cvs.openbsd.org 2004/05/06 11:24:23
3947 [ssh_config.5]
3948 typo from John Cosimano (PR 3770);
07d80252 3949 - deraadt@cvs.openbsd.org 2004/05/08 00:01:37
3950 [auth.c clientloop.c misc.h servconf.c ssh.c sshpty.h sshtty.c
3951 tildexpand.c], removed: sshtty.h tildexpand.h
3952 make two tiny header files go away; djm ok
58ae9cb8 3953 - djm@cvs.openbsd.org 2004/05/08 00:21:31
3954 [clientloop.c misc.h readpass.c scard.c ssh-add.c ssh-agent.c ssh-keygen.c
3955 sshconnect.c sshconnect1.c sshconnect2.c] removed: readpass.h
3956 kill a tiny header; ok deraadt@
20eea1d7 3957 - djm@cvs.openbsd.org 2004/05/09 00:06:47
3958 [moduli.c ssh-keygen.c] removed: moduli.h
3959 zap another tiny header; ok deraadt@
8bbf1fa6 3960 - djm@cvs.openbsd.org 2004/05/09 01:19:28
3961 [OVERVIEW auth-rsa.c auth1.c kex.c monitor.c session.c sshconnect1.c
3962 sshd.c] removed: mpaux.c mpaux.h
3963 kill some more tiny files; ok deraadt@
59657003 3964 - djm@cvs.openbsd.org 2004/05/09 01:26:48
3965 [kex.c]
3966 don't overwrite what we are trying to compute
f6be21a0 3967 - deraadt@cvs.openbsd.org 2004/05/11 19:01:43
3968 [auth.c auth2-none.c authfile.c channels.c monitor.c monitor_mm.c
3969 packet.c packet.h progressmeter.c session.c openbsd-compat/xmmap.c]
3970 improve some code lint did not like; djm millert ok
1852a1f8 3971 - dtucker@cvs.openbsd.org 2004/05/13 02:47:50
3972 [ssh-agent.1]
3973 Add examples to ssh-agent.1, bz#481 from Ralf Hauser; ok deraadt@
d5c67850 3974 - (dtucker) [sshd.8] Bug #843: Add warning about PasswordAuthentication to
3975 UsePAM section. Parts from djm@ and jmc@.
0f3ee929 3976 - (dtucker) [auth-pam.c scard-opensc.c] Tinderbox says auth-pam.c uses
3977 readpass.h, grep says scard-opensc.c does too. Replace with misc.h.
85165968 3978 - (dtucker) [openbsd-compat/getrrsetbyname.c] Check that HAVE_DECL_H_ERROR
3979 is defined before using.
4d29d2d3 3980 - (dtucker) [openbsd-compat/getrrsetbyname.c] Fix typo too: HAVE_DECL_H_ERROR
3981 -> HAVE_DECL_H_ERRNO.
dabb524a 3982
398320040502
df5a0d7e 3984 - (dtucker) OpenBSD CVS Sync
3985 - djm@cvs.openbsd.org 2004/04/22 11:56:57
3986 [moduli.c]
3987 Bugzilla #850: Sophie Germain is the correct name of the French
3988 mathematician, "Sophie Germaine" isn't; from Luc.Maisonobe@c-s.fr
61a2c1da 3989 - djm@cvs.openbsd.org 2004/04/27 09:46:37
3990 [readconf.c readconf.h servconf.c servconf.h session.c session.h ssh.c
3991 ssh_config.5 sshd_config.5]
3992 bz #815: implement ability to pass specified environment variables from
3993 the client to the server; ok markus@
b8b9f2e6 3994 - djm@cvs.openbsd.org 2004/04/28 05:17:10
3995 [ssh_config.5 sshd_config.5]
3996 manpage fixes in envpass stuff from Brian Poole (raj AT cerias.purdue.edu)
a040b9ee 3997 - jmc@cvs.openbsd.org 2004/04/28 07:02:56
3998 [sshd_config.5]
3999 remove unnecessary .Pp;
8e99a198 4000 - jmc@cvs.openbsd.org 2004/04/28 07:13:42
4001 [sftp.1 ssh.1]
4002 add SendEnv to -o list;
7b7385da 4003 - dtucker@cvs.openbsd.org 2004/05/02 11:54:31
4004 [sshd.8]
4005 Man page grammar fix (bz #858), from damerell at chiark.greenend.org.uk
4006 via Debian; ok djm@
20b267fb 4007 - dtucker@cvs.openbsd.org 2004/05/02 11:57:52
4008 [ssh.1]
4009 ConnectionTimeout -> ConnectTimeout, from m.a.ellis at ncl.ac.uk via
4010 Debian. ok djm@
927fcba2 4011 - dtucker@cvs.openbsd.org 2004/05/02 23:02:17
4012 [sftp.1]
4013 ConnectionTimeout -> ConnectTimeout here too, pointed out by jmc@
78f8c073 4014 - dtucker@cvs.openbsd.org 2004/05/02 23:17:51
4015 [scp.1]
4016 ConnectionTimeout -> ConnectTimeout for scp.1 too.
df5a0d7e 4017
41e0e158 401820040423
4019 - (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Declare h_errno
4020 as extern int if not already declared. Fixes compile errors on old SCO
4021 platforms. ok tim@
3daa912a 4022 - (dtucker) [README.platform] List prereqs for building on Cygwin.
41e0e158 4023
e7df6a14 402420040421
4025 - (djm) Update config.guess and config.sub to autoconf-2.59 versions; ok tim@
4026
484b2208 402720040420
4028 - (djm) OpenBSD CVS Sync
4029 - henning@cvs.openbsd.org 2004/04/08 16:08:21
4030 [sshconnect2.c]
da3e452a 4031 swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what
4032 FreeBSD and NetBSD do.
484b2208 4033 ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@
9f6cab4b 4034 - djm@cvs.openbsd.org 2004/04/18 23:10:26
4035 [readconf.c readconf.h ssh-keysign.c ssh.c]
4036 perform strict ownership and modes checks for ~/.ssh/config files,
4037 as these can be used to execute arbitrary programs; ok markus@
4038 NB. ssh will now exit when it detects a config with poor permissions
e1520719 4039 - djm@cvs.openbsd.org 2004/04/19 13:02:40
4040 [ssh.1 ssh_config.5]
4041 document strict permission checks on ~/.ssh/config; prompted by,
4042 with & ok jmc@
1e9b1b82 4043 - jmc@cvs.openbsd.org 2004/04/19 16:12:14
4044 [ssh_config.5]
4045 kill whitespace at eol;
f7f14143 4046 - djm@cvs.openbsd.org 2004/04/19 21:51:49
4047 [ssh.c]
4048 fix idiot typo that i introduced in my last commit;
4049 spotted by cschneid AT cschneid.com
da3e452a 4050 - (djm) [openbsd-compat/sys-queue.h] Sync with OpenBSD, needed for
4051 above change
41707f74 4052 - (djm) [configure.ac] Check whether libroken is required when building
4053 with Heimdal
484b2208 4054
1297d248 405520040419
4056 - (dtucker) OpenBSD CVS Sync
4057 - dtucker@cvs.openbsd.org 2004/02/29 22:04:45
4058 [regress/login-timeout.sh]
4059 Use sudo when restarting daemon during test. ok markus@
b4752a0e 4060 - dtucker@cvs.openbsd.org 2004/03/08 10:17:12
4061 [regress/login-timeout.sh]
4062 Missing OBJ, from tim@. ok markus@ (Already fixed, ID sync only)
b093b499 4063 - djm@cvs.openbsd.org 2004/03/30 12:41:56
4064 [sftp-client.c]
4065 sync comment with reality
12674c78 4066 - djm@cvs.openbsd.org 2004/03/31 21:58:47
4067 [canohost.c]
4068 don't skip ip options check when UseDNS=no; ok markus@ (ID sync only)
f09aa22c 4069 - markus@cvs.openbsd.org 2004/04/01 12:19:57
4070 [scp.c]
4071 limit trust between local and remote rcp/scp process,
4072 noticed by lcamtuf; ok deraadt@, djm@
1297d248 4073
1e08e787 407420040418
4075 - (dtucker) [auth-pam.c] Log username and source host for failed PAM
4076 authentication attempts. With & ok djm@
917ee1d2 4077 - (djm) [openbsd-compat/bsd-cygwin_util.c] Recent versions of Cygwin allow
4078 change of user context without a password, so relax auth method
4079 restrictions; from vinschen AT redhat.com; ok dtucker@
1e08e787 4080
f9aacd5e 408120040416
4082 - (dtucker) [regress/sftp-cmds.sh] Skip quoting test on Cygwin, since
4083 FAT/NTFS does not permit quotes in filenames. From vinschen at redhat.com
6490a5d5 4084 - (djm) [auth-krb5.c auth.h session.c] Explicitly refer to Kerberos ccache
4085 file using FILE: method, fixes problems on Mac OSX.
4086 Patch from simon@sxw.org.uk; ok dtucker@
9ff90d99 4087 - (tim) [configure.ac] Set SETEUID_BREAKS_SETUID, BROKEN_SETREUID and
4088 BROKEN_SETREGID for SCO OpenServer 3
f9aacd5e 4089
d1d10baa 409020040412
4091 - (dtucker) [sshd_config.5] Add PermitRootLogin without-password warning
4092 from bug #701 (text from jfh at cise.ufl.edu).
141fc639 4093 - (dtucker) [acconfig.h configure.ac defines.h] Bug #673: check for 4-arg
4094 skeychallenge(), eg on NetBSD. ok mouring@
f2b7b5c8 4095 - (dtucker) [auth-skey.c defines.h monitor.c] Make skeychallenge explicitly
4096 4-arg, with compatibility for 3-arg versions. From djm@, ok me.
77f09220 4097 - (djm) [configure.ac] Fix detection of libwrap on OpenBSD; ok dtucker@
d1d10baa 4098
f20d4564 409920040408
4100 - (dtucker) [loginrec.c] Use UT_LINESIZE if available, prevents truncating
4101 pty name on Linux 2.6.x systems. Patch from jpe at eisenmenger.org.
9b08c23f 4102 - (bal) [monitor.c monitor_wrap.c] Second try. Put the zlib.h headers
4103 back and #undef TARGET_OS_MAC instead. (Bug report pending with Apple)
074c4cbc 4104 - (dtucker) [defines.h loginrec.c] Define UT_LINESIZE if not defined and
4105 simplify loginrec.c. ok tim@
a655c012 4106 - (bal) [monitor.c monitor_wrap.c] Ok.. Last time. Promise. Tim suggested
4107 limiting scope and dtucker@ agreed.
f20d4564 4108
e7d0f139 410920040407
4110 - (dtucker) [session.c] Flush stdout after displaying loginmsg. From
4111 f_mohr at yahoo.de.
79753592 4112 - (bal) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Check to see
4113 if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X)
4114 are starting to restrict it as internal since it is not needed by
4115 developers any more. (Patch based on Apple tree)
4116 - (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since
4117 krb5 on MacOS/X conflicts. There may be a better solution, but this will
4118 work for now.
e7d0f139 4119
3d59832f 412020040406
4121 - (dtucker) [acconfig.h configure.ac defines.h] Bug #820: don't use
4122 updwtmpx() on IRIX since it seems to clobber utmp. ok djm@
2fe51906 4123 - (dtucker) [configure.ac] Bug #816, #748 (again): Attempt to detect
4124 broken getaddrinfo and friends on HP-UX. ok djm@
3d59832f 4125
b90bed9f 412620040330
4127 - (dtucker) [configure.ac] Bug #811: Use "!" for LOCKED_PASSWD_PREFIX on
4128 Linuxes, since that's what many use. ok djm@
d948154a 4129 - (dtucker) [auth-pam.c] rename the_authctxt to sshpam_authctxt in auth-pam.c
4130 to reduce potential confusion with the one in sshd.c. ok djm@
35087869 4131 - (djm) Bug #825: Fix ip_options_check() for mapped IPv4/IPv6 connection;
4132 with & ok dtucker@
b90bed9f 4133
75dbfa01 413420040327
4135 - (dtucker) [session.c] Bug #817: Clear loginmsg after fork to prevent
4136 duplicate login messages for mutli-session logins. ok djm@
4137
c876ee7e 413820040322
a4c0faa2 4139 - (djm) [sshd.c] Drop supplemental groups if started as root
c876ee7e 4140 - (djm) OpenBSD CVS Sync
4141 - markus@cvs.openbsd.org 2004/03/09 22:11:05
4142 [ssh.c]
4143 increase x11 cookie lifetime to 20 minutes; ok djm
182ccbba 4144 - markus@cvs.openbsd.org 2004/03/10 09:45:06
4145 [ssh.c]
4146 trim usage to match ssh(1) and look more like unix. ok djm@
65edde94 4147 - markus@cvs.openbsd.org 2004/03/11 08:36:26
4148 [sshd.c]
4149 trim usage; ok deraadt
85ac7a84 4150 - markus@cvs.openbsd.org 2004/03/11 10:21:17
4151 [ssh.c sshd.c]
4152 ssh, sshd: sync version output, ok djm
7c79db4e 4153 - markus@cvs.openbsd.org 2004/03/20 10:40:59
4154 [version.h]
4155 3.8.1
442c8293 4156 - (djm) Crank RPM spec versions
a4c0faa2 4157
2b983b95 415820040311
4159 - (djm) [configure.ac] Add standard license to configure.ac; ok ben, dtucker
4160
31863e02 416120040310
4162 - (dtucker) [openbsd-compat/fake-rfc2553.h] Bug #812: #undef getaddrinfo
4163 before redefining it, silences warnings on Tru64.
4164
3a5d0759 416520040308
4166 - (dtucker) [sshd.c] Back out rev 1.270 as it caused problems on some
529d73ab 4167 platforms (eg SCO, HP-UX) with logging in the wrong TZ. ok djm@
4168 - (dtucker) [configure.ac sshd.c openbsd-compat/bsd-misc.h
4169 openbsd-compat/setenv.c] Unset KRB5CCNAME on AIX to prevent it from being
4170 inherited by the child. ok djm@
4171 - (dtucker) [auth-pam.c auth-pam.h auth1.c auth2.c monitor.c monitor_wrap.c
4172 monitor_wrap.h] Bug #808: Ensure force_pwchange is correctly initialized
cc120685 4173 even if keyboard-interactive is not used by the client. Prevents
4174 segfaults in some cases where the user's password is expired (note this
4175 is not considered a security exposure). ok djm@
4176 - (djm) OpenBSD CVS Sync
4177 - markus@cvs.openbsd.org 2004/03/03 06:47:52
4178 [sshd.c]
4179 change proctiltle after accept(2); ok henning, deraadt, djm
213bab61 4180 - djm@cvs.openbsd.org 2004/03/03 09:30:42
4181 [sftp-client.c]
4182 Don't print duplicate messages when progressmeter is off
4183 Spotted by job317 AT mailvault.com; ok markus@
06abcf97 4184 - djm@cvs.openbsd.org 2004/03/03 09:31:20
4185 [sftp.c]
4186 Fix initialisation of progress meter; ok markus@
3a065ed0 4187 - markus@cvs.openbsd.org 2004/03/05 10:53:58
4188 [readconf.c readconf.h scp.1 sftp.1 ssh.1 ssh_config.5 sshconnect2.c]
4189 add IdentitiesOnly; ok djm@, pb@
b655d28c 4190 - djm@cvs.openbsd.org 2004/03/08 09:38:05
4191 [ssh-keyscan.c]
4192 explicitly initialise remote_major and remote_minor.
4193 from cjwatson AT debian.org; ok markus@
24f37810 4194 - dtucker@cvs.openbsd.org 2004/03/08 10:18:57
4195 [sshd_config.5]
4196 Document KerberosGetAFSToken; ok markus@
c4f51837 4197 - (tim) [regress/README.regress] Document ssh-rand-helper issue. ok bal
3a5d0759 4198
d22e04fd 419920040307
4200 - (tim) [regress/login-timeout.sh] fix building outside of source tree.
4201
a1e0095d 420220040304
4203 - (dtucker) [auth-pam.c] Don't try to export PAM when compiled with
4204 -DUSE_POSIX_THREADS. From antoine.verheijen at ualbert ca. ok djm@
355fbf31 4205 - (dtucker) [auth-pam.c] Reset signal status when starting pam auth thread,
4206 prevent hanging during PAM keyboard-interactive authentications. ok djm@
69a20cff 4207 - (dtucker) [auth-passwd.c auth-sia.c auth-sia.h defines.h
4208 openbsd-compat/xcrypt.c] Bug #802: Fix build error on Tru64 when
4209 configured --with-osfsia. ok djm@
a1e0095d 4210
1452867a 421120040303
e7f6070d 4212 - (djm) [configure.ac ssh-agent.c] Use prctl to prevent ptrace on ssh-agent
4213 ok dtucker
4214
010e9d5b 421520040229
4216 - (tim) [configure.ac] Put back bits mistakenly removed from Rev 1.188
4217
6ff58a4b 421820040229
4219 - (dtucker) OpenBSD CVS Sync
4220 - djm@cvs.openbsd.org 2004/02/25 00:22:45
4221 [sshd.c]
4222 typo in comment
8b0a55ac 4223 - dtucker@cvs.openbsd.org 2004/02/27 22:42:47
4224 [dh.c]
4225 Prevent sshd from sending DH groups with a primitive generator of zero or
4226 one, even if they are listed in /etc/moduli. ok markus@
cd744742 4227 - dtucker@cvs.openbsd.org 2004/02/27 22:44:56
4228 [dh.c]
4229 Make /etc/moduli line buffer big enough for 8kbit primes, in case anyone
4230 ever uses one. ok markus@
e24bb7d5 4231 - dtucker@cvs.openbsd.org 2004/02/27 22:49:27
4232 [dh.c]
4233 Reset bit counter at the right time, fixes debug output in the case where
4234 the DH group is rejected. ok markus@
42cfd508 4235 - dtucker@cvs.openbsd.org 2004/02/17 08:23:20
4236 [regress/Makefile regress/login-timeout.sh]
4237 Add regression test for LoginGraceTime; ok markus@
dd75dc6d 4238 - markus@cvs.openbsd.org 2004/02/24 16:56:30
4239 [regress/test-exec.sh]
4240 allow arguments in ${TEST_SSH_XXX}
e7ac982b 4241 - markus@cvs.openbsd.org 2004/02/24 17:06:52
4242 [regress/ssh-com-client.sh regress/ssh-com-keygen.sh
4243 regress/ssh-com-sftp.sh regress/ssh-com.sh]
4244 test against recent ssh.com releases
f492915d 4245 - dtucker@cvs.openbsd.org 2004/02/28 12:16:57
4246 [regress/dynamic-forward.sh]
4247 Make dynamic-forward understand nc's new output. ok markus@
79a00bda 4248 - dtucker@cvs.openbsd.org 2004/02/28 13:44:45
4249 [regress/try-ciphers.sh]
4250 Test acss too; ok markus@
1d64dfd3 4251 - (dtucker) [regress/try-ciphers.sh] Skip acss if not compiled in (eg if we
4252 built with openssl < 0.9.7)
6ff58a4b 4253
769a750c 425420040226
4255 - (bal) KNF our sshlogin.c even if the code looks nothing like upstream
4256 code due to diversity issues.
4257
3b5581f5 425820040225
4259 - (djm) Trim ChangeLog
557f108b 4260 - (djm) Don't specify path to PAM modules in Redhat sshd.pam; from Fedora
3b5581f5 4261
71c1910f 426220040224
4263 - (dtucker) OpenBSD CVS Sync
4264 - markus@cvs.openbsd.org 2004/02/19 21:15:04
4265 [sftp-server.c]
4266 switch to new license.template
a666e3b1 4267 - markus@cvs.openbsd.org 2004/02/23 12:02:33
4268 [sshd.c]
4269 backout revision 1.279; set listen socket to non-block; ok henning.
155890b3 4270 - markus@cvs.openbsd.org 2004/02/23 15:12:46
4271 [bufaux.c]
4272 encode 0 correctly in buffer_put_bignum2; noted by Mikulas Patocka
4273 and drop support for negative BNs; ok otto@
a5337ac4 4274 - markus@cvs.openbsd.org 2004/02/23 15:16:46
4275 [version.h]
4276 enter 3.8
071970fb 4277 - (dtucker) [configure.ac gss-serv-krb5.c ssh-gss.h] Define GSSAPI when found
4278 with krb5-config, hunt down gssapi.h and friends. Based partially on patch
469e90f9 4279 from deengert at anl.gov. ok djm@
13dff404 4280 - (djm) [groupaccess.c uidswap.c] Bug #787: Size group arrays at runtime
4281 using sysconf() if available Based on patches from
4282 holger AT van-lengerich.de and openssh_bugzilla AT hockin.org
972fc531 4283 - (dtucker) [uidswap.c] Minor KNF. ok djm@
fee4a84f 4284 - (tim) [openbsd-compat/getrrsetbyname.c] Make gcc 2.7.2.3 happy. ok djm@
8607ab76 4285 - (djm) Crank RPM spec versions
54fe3272 4286 - (dtucker) [README] Add pointer to release notes. ok djm@
510c0a8a 4287 - (dtucker) {README.platform] Add platform-specific notes.
f9e4952c 4288 - (tim) [configure.ac] SCO3 needs -lcrypt_i for -lprot
a40872de 4289 - (djm) Release 3.8p1
71c1910f 4290
59f327e0 429120040223
4292 - (dtucker) [session.c] Bug #789: Only make setcred call for !privsep in the
4293 non-interactive path. ok djm@
4294
f14ca4a4 429520040222
4296 - (dtucker) [auth-shadow.c auth.c auth.h] Move shadow account expiry test
4297 to auth-shadow.c, no functional change. ok djm@
2b486b75 4298 - (dtucker) [auth-shadow.c auth.h] Provide warnings of impending account or
4299 password expiry. ok djm@
4300 - (dtucker) [auth-passwd.c] Only check password expiry once. Prevents
4301 multiple warnings if a wrong password is entered.
4302 - (dtucker) [configure.ac] Apply krb5-config --libs fix to non-gssapi path
4303 too.
f14ca4a4 4304
45a3410a 430520040220
4306 - (djm) [openbsd-compat/setproctitle.c] fix comments; from grange@
4307
13961ade 430820040218
4309 - (dtucker) [configure.ac] Handle case where krb5-config --libs returns a
4310 path with a "-" in it. From Sergio.Gelato at astro.su.se.
caf1e9f0 4311 - (djm) OpenBSD CVS Sync
4312 - djm@cvs.openbsd.org 2004/02/17 07:17:29
4313 [sftp-glob.c sftp.c]
4314 Remove useless headers; ok deraadt@
2cda7d6b 4315 - djm@cvs.openbsd.org 2004/02/17 11:03:08
4316 [sftp.c]
4317 sftp.c and sftp-int.c, together at last; ok markus@
ab263a3d 4318 - jmc@cvs.openbsd.org 2004/02/17 19:35:21
4319 [sshd_config.5]
4320 remove cruft left over from RhostsAuthentication removal;
4321 ok markus@
232b600a 4322 - (djm) [log.c] Correct use of HAVE_OPENLOG_R
a90ed4b3 4323 - (djm) [log.c] Tighten openlog_r tests
13961ade 4324
9cd11896 432520040217
4326 - (djm) Simplify the license on code I have written. No code changes.
ab3932ab 4327 - (djm) OpenBSD CVS Sync
4328 - djm@cvs.openbsd.org 2004/02/17 05:39:51
4329 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c]
4330 [sftp-int.h sftp.c]
4331 switch to license.template for code written by me (belated, I know...)
5d464804 4332 - (djm) Bug #698: Specify FILE: for KRB5CCNAME; patch from
4333 stadal@suse.cz and simon@sxw.org.uk
60922169 4334 - (dtucker) [auth-pam.c] Tidy up PAM debugging. ok djm@
ef687c66 4335 - (dtucker) [auth-pam.c] Store output from pam_session and pam_setcred for
4336 display after login. Should fix problems like pam_motd not displaying
4337 anything, noticed by cjwatson at debian.org. ok djm@
9cd11896 4338
006cb311 433920040212
4340 - (tim) [Makefile.in regress/sftp-badcmds.sh regress/test-exec.sh]
4341 Portablity fixes. Data sftp transfers needs to be world readable. Some
4342 older shells hang on while loops when doing sh -n some_script. OK dtucker@
5486a457 4343 - (tim) [configure.ac] Make sure -lcrypto is before -lsocket for sco3.
4344 ok mouring@
006cb311 4345
d78480be 434620040211
4347 - (dtucker) [auth-passwd.c auth-shadow.c] Only enable shadow expiry check
4348 if HAS_SHADOW_EXPIRY is set.
8087c5ee 4349 - (tim) [configure.ac] Fix comment to match code changes in ver 1.117
d78480be 4350
cadfc759 435120040210
4352 - (dtucker) [auth-passwd.c auth.h openbsd-compat/port-aix.c
5a8bd0c3 4353 openbsd-compat/port-aix.h] Bug #14: Use do_pwchange to support AIX's
4354 native password expiry.
4355 - (dtucker) [LICENCE Makefile.in auth-passwd.c auth-shadow.c auth.c auth.h
4356 defines.h] Bug #14: Use do_pwchange to support password expiry and force
4357 change for platforms using /etc/shadow. ok djm@
1c46f905 4358 - (dtucker) [openbsd-compat/fake-rfc2553.h] Bug #563: Prepend ssh_ to compat
4359 functions to avoid conflicts with Heimdal's libroken. ok djm@
dd1fb864 4360 - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #14: Use do_pwchange to
4361 change expired PAM passwords for SSHv1 connections without privsep.
4362 pam_chauthtok is still used when privsep is disabled. ok djm@
262b1744 4363 - (dtucker) [openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Move
4364 include from port-aix.h to port-aix.c and remove unnecessary function
4365 definition. Fixes build errors on AIX.
41c64c91 4366 - (dtucker) [configure.ac loginrec.c] Bug #464: Use updwtmpx on platforms
4367 that support it. from & ok mouring@
0655c763 4368 - (dtucker) [configure.ac] Bug #345: Do not disable utmp on HP-UX 10.x.
d78480be 4369 ok djm@
cadfc759 4370
59d51274 437120040207
4372 - (dtucker) OpenBSD CVS Sync
4373 - dtucker@cvs.openbsd.org 2004/02/06 23:41:13
4374 [cipher-ctr.c]
4375 Use EVP_CIPHER_CTX_key_length for key length. ok markus@
4376 (This will fix builds with OpenSSL 0.9.5)
1c4d41b9 4377 - (dtucker) [cipher.c] enable AES counter modes with OpenSSL 0.9.5.
4378 ok djm@, markus@
59d51274 4379
92d0d880 438020040206
4381 - (dtucker) [acss.c acss.h] Fix $Id tags.
c7b91244 4382 - (dtucker) [cipher-acss.c cipher.c] Enable acss only if building with
4383 OpenSSL >= 0.9.7. ok djm@
72037bc8 4384 - (dtucker) [session.c] Bug #789: Do not call do_pam_setcred as a non-root
4385 user, since some modules might fail due to lack of privilege. ok djm@
38b69c0b 4386 - (dtucker) [configure.ac] Bug #748: Always define BROKEN_GETADDRINFO
4387 for HP-UX 11.11. If there are known-good configs where this is not
4388 required, please report them. ok djm@
a6cd1e13 4389 - (dtucker) [sshd.c] Bug #757: Clear child's environment to prevent
4390 accidentally inheriting from root's environment. ok djm@
7ccff316 4391 - (dtucker) [openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Bug #796:
4392 Restore previous authdb setting after auth calls. Fixes problems with
4393 setpcred failing on accounts that use AFS or NIS password registries.
51693efd 4394 - (dtucker) [configure.ac includes.h] Include <sys/stream.h> if present,
4395 required on Solaris 2.5.1 for queue_t, which is used by <sys/ptms.h>.
37656beb 4396 - (dtucker) OpenBSD CVS Sync
4397 - markus@cvs.openbsd.org 2004/01/30 09:48:57
4398 [auth-passwd.c auth.h pathnames.h session.c]
4399 support for password change; ok dtucker@
4400 (set password-dead=1w in login.conf to use this).
4401 In -Portable, this is currently only platforms using bsdauth.
a9b33b95 4402 - dtucker@cvs.openbsd.org 2004/02/05 05:37:17
4403 [monitor.c sshd.c]
4404 Pass SIGALRM through to privsep child if LoginGraceTime expires. ok markus@
7b0a59c9 4405 - markus@cvs.openbsd.org 2004/02/05 15:33:33
4406 [progressmeter.c]
4407 fix ETA for > 4GB; bugzilla #791; ok henning@ deraadt@
92d0d880 4408
d642a47a 440920040129
4410 - (dtucker) OpenBSD CVS Sync regress/
4411 - dtucker@cvs.openbsd.org 2003/10/11 11:49:49
4412 [Makefile banner.sh]
4413 Test missing banner file, suppression of banner with ssh -q, check return
4414 code from ssh. ok markus@
b3293f64 4415 - jmc@cvs.openbsd.org 2003/11/07 10:16:44
4416 [ssh-com.sh]
4417 adress -> address, and a few more; all from Jonathon Gray;
7267f37e 4418 - djm@cvs.openbsd.org 2004/01/13 09:49:06
4419 [sftp-batch.sh]
8068d564 4420 - (dtucker) [configure.ac] Add --without-zlib-version-check. Feedback from
4421 tim@, ok several
c1ad5966 4422 - (dtucker) [configure.ac openbsd-compat/bsd-cray.c openbsd-compat/bsd-cray.h]
4423 Bug #775: Cray fixes from wendy at cray.com
d642a47a 4424
71658852 442520040128
4426 - (dtucker) [regress/README.regress] Add tcpwrappers issue, noted by tim@
f5d109e7 4427 - (dtucker) [moduli] Import new moduli file from OpenBSD.
71658852 4428
268c23e9 442920040127
4430 - (djm) OpenBSD CVS Sync
4431 - hshoexer@cvs.openbsd.org 2004/01/23 17:06:03
4432 [cipher.c]
4433 enable acss for ssh
4434 ok deraadt@ markus@
0372ae57 4435 - mouring@cvs.openbsd.org 2004/01/23 17:57:48
4436 [sftp-int.c]
4437 Fix issue pointed out with ls not handling large directories
4438 with embeded paths correctly. OK damien@
8b557a74 4439 - hshoexer@cvs.openbsd.org 2004/01/23 19:26:33
4440 [cipher.c]
4441 rename acss@opebsd.org to acss@openssh.org
4442 ok deraadt@
2daf1db1 4443 - djm@cvs.openbsd.org 2004/01/25 03:49:09
4444 [sshconnect.c]
4445 reset nonblocking flag after ConnectTimeout > 0 connect; (bugzilla #785)
4446 from jclonguet AT free.fr; ok millert@
02de7c6e 4447 - djm@cvs.openbsd.org 2004/01/27 10:08:10
4448 [sftp.c]
4449 reorder parsing so user:skey@host:file works (bugzilla #777)
4450 patch from admorten AT umich.edu; ok markus@
268c23e9 4451 - (djm) [acss.c acss.h cipher-acss.c] Portable support for ACSS
4452 if libcrypto lacks it
4453
86f807ed 445420040126
4455 - (tim) Typo in regress/README.regress
a5753dd4 4456 - (tim) [regress/test-exec.sh] RhostsAuthentication is deprecated.
a98550d2 4457 - (tim) [defines.h] Add defines for HFIXEDSZ and T_SIG
9e833a9b 4458 - (tim) [configure.ac includes.h] add <sys/ptms.h> for grantpt() and friends.
2df78719 4459 - (tim) [defines.h openbsd-compat/getrrsetbyname.h] Move defines for HFIXEDSZ
4460 and T_SIG to getrrsetbyname.h
86f807ed 4461
6e9f4c0f 446220040124
4463 - (djm) Typo in openbsd-compat/bsd-openpty.c; from wendyp AT cray.com
4464
f4eaee12 446520040123
4466 - (djm) Do pam_session processing for systems with HAVE_LOGIN_CAP; from
4467 ralf.hack AT pipex.net; ok dtucker@
b6cfb8c2 4468 - (djm) Bug #776: Update contrib/redhat/openssh.spec to dynamically detect
4469 Kerberos location (and thus work with Fedora Core 1);
4470 from jason AT devrandom.org
4ad65809 4471 - (dtucker) [configure.ac] Bug #788: Test for zlib.h presence and for
4472 zlib >= 1.1.4. Partly from jbasney at ncsa.uiuc.edu. ok djm@
73fd4871 4473 - (dtucker) [contrib/cygwin/README] Document new ssh-host-config options.
4474 Patch from vinschen at redhat.com.
bcfcc5f9 4475 - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]
4476 Change AFS symbol to USE_AFS to prevent namespace collisions, do not
4477 include kafs.h unless necessary. From deengert at anl.gov.
0a15d73b 4478 - (tim) [configure.ac] Remove hard coded -L/usr/local/lib and
4479 -I/usr/local/include. Users can do LDFLAGS="-L/usr/local/lib" \
4480 CPPFLAGS="-I/usr/local/include" ./configure if needed.
f4eaee12 4481
5585c441 448220040122
4483 - (dtucker) [configure.ac] Use krb5-config where available for Kerberos/
4484 GSSAPI detection, libs and includes. ok djm@
6704d19a 4485 - (dtucker) [session.c] Enable AFS support in conjunction with KRB5 not
4486 just HEIMDAL.
8e8d046c 4487 - (tim) [contrib/solaris/buildpkg.sh] Allow for the possibility of
4488 /usr/local being a symbolic link. Fixes problem reported by Henry Grebler.
5585c441 4489
a8b64bb8 449020040121
4491 - (djm) OpenBSD CVS Sync
4492 - djm@cvs.openbsd.org 2004/01/13 09:25:05
4493 [sftp-int.c sftp.1 sftp.c]
4494 Tidy sftp batchmode handling, eliminate junk to stderr (bugzilla #754) and
4495 enable use of "-b -" to accept batchfile from stdin; ok markus@
f74de0d7 4496 - jmc@cvs.openbsd.org 2004/01/13 12:17:33
4497 [sftp.1]
4498 remove unnecessary Ic's;
4499 kill whitespace at EOL;
4500 ok djm@
39dfceeb 4501 - markus@cvs.openbsd.org 2004/01/13 19:23:15
4502 [compress.c session.c]
4503 -Wall; ok henning
33623c65 4504 - markus@cvs.openbsd.org 2004/01/13 19:45:15
4505 [compress.c]
4506 cast for portability; millert@
7741e239 4507 - markus@cvs.openbsd.org 2004/01/19 09:24:21
4508 [channels.c]
4509 fake consumption for half closed channels since the peer is waiting for
4510 window adjust messages; bugzilla #790 Matthew Dillon; test + ok dtucker@
4511 reproduce with sh -c 'ulimit -f 10; ssh host -n od /bsd | cat > foo'
43f7a4b8 4512 - markus@cvs.openbsd.org 2004/01/19 21:25:15
4513 [auth2-hostbased.c auth2-pubkey.c serverloop.c ssh-keysign.c sshconnect2.c]
4514 fix mem leaks; some fixes from Pete Flugstad; tested dtucker@
ac414e17 4515 - djm@cvs.openbsd.org 2004/01/21 03:07:59
4516 [sftp.c]
4517 initialise infile in main, rather than statically - from portable
a4de1163 4518 - deraadt@cvs.openbsd.org 2004/01/11 21:55:06
4519 [sshpty.c]
4520 for pty opening, only use the openpty() path. the other stuff only needs
4521 to be in openssh-p; markus ok
4522 - (djm) [openbsd-compat/bsd-openpty.c] Rework old sshpty.c code into an
4523 openpty() replacement
a8b64bb8 4524
100e6910 452520040114
4526 - (dtucker) [auth-pam.c] Have monitor die if PAM authentication thread exits
4527 unexpectedly. with & ok djm@
28b49ff8 4528 - (dtucker) [auth-pam.c] Reset signal handler in pthread_cancel too, add
4529 test for case where cleanup has already run.
90f3c272 4530 - (dtucker) [auth-pam.c] Add minor debugging.
100e6910 4531
e47e681f 453220040113
4533 - (dtucker) [auth-pam.c] Relocate struct pam_ctxt and prototypes. No
4534 functional changes.
4535
b3f87f4f 453620040108
4537 - (dtucker) [auth-pam.c defines.h] Bug #783: move __unused to defines.h and
4538 only define if not already. From des at freebsd.org.
24a9171d 4539 - (dtucker) [configure.ac] Remove extra (typo) comma.
b3f87f4f 4540
e7c060cb 454120040105
4542 - (dtucker) [contrib/ssh-copy-id] Bug #781: exit if ssh fails. Patch from
4543 cjwatson at debian.org.
309af4e5 4544 - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]
4545 Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@
e7c060cb 4546
ff620033 454720040102
4548 - (djm) OSX/Darwin needs BIND_8_COMPAT to build getrrsetbyname. Report from
4549 jakob@
c0c10689 4550 - (djm) Remove useless DNS support configure summary message. from jakob@
2511d104 4551 - (djm) OSX/Darwin put the PAM headers in a different place, detect this.
4552 Report from jakob@
ff620033 4553
c6fbc95a 455420031231
4555 - (dtucker) OpenBSD CVS Sync
4556 - djm@cvs.openbsd.org 2003/12/22 09:16:58
4557 [moduli.c ssh-keygen.1 ssh-keygen.c]
4558 tidy up moduli generation debugging, add -v (verbose/debug) option to
4559 ssh-keygen; ok markus@
1dd5f021 4560 - markus@cvs.openbsd.org 2003/12/22 20:29:55
4561 [cipher-3des1.c]
4562 EVP_CIPHER_CTX_cleanup() for the des contexts; pruiksma@freesurf.fr
a1e30b47 4563 - jakob@cvs.openbsd.org 2003/12/23 16:12:10
4564 [servconf.c servconf.h session.c sshd_config]
4565 implement KerberosGetAFSToken server option. ok markus@, beck@
6bb49a16 4566 - millert@cvs.openbsd.org 2003/12/29 16:39:50
4567 [sshd_config]
4568 KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK
b0ca6225 4569 - dtucker@cvs.openbsd.org 2003/12/31 00:24:50
4570 [auth2-passwd.c]
4571 Ignore password change request during password auth (which we currently
4572 don't support) and discard proposed new password. corrections/ok markus@
3f176010 4573 - (dtucker) [configure.ac] Only test setresuid and setresgid if they exist.
c6fbc95a 4574
56b13279 457520031219
4576 - (dtucker) [defines.h] Bug #458: Define SIZE_T_MAX as UINT_MAX if we
4577 typedef size_t ourselves.
4578
0c6a72a5 457920031218
4580 - (dtucker) [configure.ac] Don't use setre[ug]id on DG-UX, from Tom Orban.
b3ef7fb7 4581 - (dtucker) [auth-pam.c] Do PAM chauthtok during SSH2 keyboard-interactive
4582 authentication. Partially fixes bug #423. Feedback & ok djm@
0c6a72a5 4583
95ae2076 458420031217
4585 - (djm) OpenBSD CVS Sync
4586 - markus@cvs.openbsd.org 2003/12/09 15:28:43
4587 [serverloop.c]
4588 make ClientKeepAlive work for ssh -N, too (no login shell requested).
4589 1) send a bogus channel request if we find a channel
4590 2) send a bogus global request if we don't have a channel
4591 ok + test beck@
c5894280 4592 - markus@cvs.openbsd.org 2003/12/09 17:29:04
4593 [sshd.c]
4594 fix -o and HUP; ok henning@
1aafd17a 4595 - markus@cvs.openbsd.org 2003/12/09 17:30:05
4596 [ssh.c]
4597 don't modify argv for ssh -o; similar to sshd.c 1.283
fd573618 4598 - markus@cvs.openbsd.org 2003/12/09 21:53:37
4599 [readconf.c readconf.h scp.1 servconf.c servconf.h sftp.1 ssh.1]
4600 [ssh_config.5 sshconnect.c sshd.c sshd_config.5]
4601 rename keepalive to tcpkeepalive; the old name causes too much
4602 confusion; ok djm, dtucker; with help from jmc@
66357af5 4603 - dtucker@cvs.openbsd.org 2003/12/09 23:45:32
4604 [clientloop.c]
4605 Clear exit code when ssh -N is terminated with a SIGTERM. ok markus@
e8dd24a8 4606 - markus@cvs.openbsd.org 2003/12/14 12:37:21
4607 [ssh_config.5]
4608 we don't support GSS KEX; from Simon Wilkinson
5d8d32a3 4609 - markus@cvs.openbsd.org 2003/12/16 15:49:51
4610 [clientloop.c clientloop.h readconf.c readconf.h scp.1 sftp.1 ssh.1]
4611 [ssh.c ssh_config.5]
4612 application layer keep alive (ServerAliveInterval ServerAliveCountMax)
4613 for ssh(1), similar to the sshd(8) option; ok beck@; with help from
4614 jmc and dtucker@
b3c35b71 4615 - markus@cvs.openbsd.org 2003/12/16 15:51:54
4616 [dh.c]
4617 use <= instead of < in dh_estimate; ok provos/hshoexer;
4618 do not return < DH_GRP_MIN
9a3fe0e2 4619 - (dtucker) [acconfig.h configure.ac uidswap.c] Bug #645: Check for
4620 setres[ug]id() present but not implemented (eg some Linux/glibc
4621 combinations).
cc1102cb 4622 - (bal) [openbsd-compat/bsd-misc.c] unset 'signal' defined if we are
4623 using a real 'signal()' (Noticed by a NeXT Compile)
95ae2076 4624
ef75d357 462520031209
4626 - (dtucker) OpenBSD CVS Sync
4627 - matthieu@cvs.openbsd.org 2003/11/25 23:10:08
4628 [ssh-add.1]
4629 ssh-add doesn't need to be a descendant of ssh-agent. Ok markus@, jmc@.
dfeea606 4630 - djm@cvs.openbsd.org 2003/11/26 21:44:29
4631 [cipher-aes.c]
4632 fix #ifdef before #define; ok markus@
4633 (RCS ID sync only, Portable already had this)
adfde93f 4634 - markus@cvs.openbsd.org 2003/12/02 12:15:10
4635 [progressmeter.c]
4636 improvments from andreas@:
4637 * saner speed estimate for transfers that takes less than a second by
4638 rounding the time to 1 second.
4639 * when the transfer is finished calculate the actual total speed
4640 rather than the current speed which is given during the transfer
fce39749 4641 - markus@cvs.openbsd.org 2003/12/02 17:01:15
4642 [channels.c session.c ssh-agent.c ssh.h sshd.c]
4643 use SSH_LISTEN_BACKLOG (=128) in listen(2).
69e782ea 4644 - djm@cvs.openbsd.org 2003/12/07 06:34:18
4645 [moduli.c]
4646 remove unused debugging #define templates
5acd7dc1 4647 - markus@cvs.openbsd.org 2003/12/08 11:00:47
4648 [kexgexc.c]
4649 print requested group size in debug; ok djm
eb7a33b8 4650 - dtucker@cvs.openbsd.org 2003/12/09 13:52:55
4651 [moduli.c]
4652 Prevent ssh-keygen -T from outputting moduli with a generator of 0, since
4653 they can't be used for Diffie-Hellman. Assistance and ok djm@
b97b4f35 4654 - (dtucker) [ssh-keyscan.c] Sync RCSIDs, missed in SSH_SSFDMAX change below.
ef75d357 4655
e6354014 465620031208
4657 - (tim) [configure.ac] Bug 770. Fix --without-rpath.
4658
1639bb8f 465920031123
4660 - (djm) [canohost.c] Move IPv4inV6 mapped address normalisation to its own
4661 function and call it unconditionally
341c3efe 4662 - (djm) OpenBSD CVS Sync
4663 - djm@cvs.openbsd.org 2003/11/23 23:17:34
4664 [ssh-keyscan.c]
4665 from portable - use sysconf to detect fd limit; ok markus@
4666 (tidy diff by adding SSH_SSFDMAX macro to defines.h)
e7e3e2c8 4667 - djm@cvs.openbsd.org 2003/11/23 23:18:45
4668 [ssh-keygen.c]
4669 consistency PATH_MAX -> MAXPATHLEN; ok markus@
4670 (RCS ID sync only)
4671 - djm@cvs.openbsd.org 2003/11/23 23:21:21
4672 [scp.c]
4673 from portable: rename clashing variable limit-> limit_rate; ok markus@
4674 (RCS ID sync only)
f7926e97 4675 - dtucker@cvs.openbsd.org 2003/11/24 00:16:35
4676 [ssh.1 ssh.c]
4677 Make ssh -k mean GSSAPIDelegateCredentials=no. Suggestion & ok markus@
d74671e4 4678 - (djm) Annotate OpenBSD-derived files in openbsd-compat/ with original
4679 source file path (in OpenBSD tree).
1639bb8f 4680
7fbb4189 468120031122
4682 - (dtucker) [channels.c] Make AIX write limit code clearer. Suggested by djm@
f0b467ef 4683 - (dtucker) [auth-passwd.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]
4684 Move AIX specific password authentication code to port-aix.c, call
4685 authenticate() until reenter flag is clear.
dbf8efb3 4686 - (dtucker) [auth-sia.c configure.ac] Tru64 update from cmadams at hiwaay.net.
4687 Use permanently_set_uid for SIA, only define DISABLE_FD_PASSING when SIA
4688 is enabled, rely on SIA to check for locked accounts if enabled. ok djm@
10adbb52 4689 - (djm) [scp.c] Rename limitbw -> limit_rate to match upstreamed patch
e20054de 4690 - (djm) [sftp-int.c] Remove duplicated code from bogus sync
00df6acd 4691 - (djm) [packet.c] Shuffle #ifdef to reduce conditionally compiled code
7fbb4189 4692
81b161c2 469320031121
4694 - (djm) OpenBSD CVS Sync
4695 - markus@cvs.openbsd.org 2003/11/20 11:39:28
4696 [progressmeter.c]
4697 fix rounding errors; from andreas@
aff51935 4698 - djm@cvs.openbsd.org 2003/11/21 11:57:03
4699 [everything]
4700 unexpand and delete whitespace at EOL; ok markus@
4701 (done locally and RCS IDs synced)
81b161c2 4702
3eaf3960 470320031118
4d1de3a3 4704 - (djm) Fix early exit for root auth success when UsePAM=yes and
4705 PermitRootLogin=no
3eaf3960 4706 - (dtucker) [auth-pam.c] Convert chauthtok_conv into a generic tty_conv,
95077f48 4707 and use it for do_pam_session. Fixes problems like pam_motd not
4708 displaying anything. ok djm@
f79a6165 4709 - (dtucker) [auth-pam.c] Only use pam_putenv if our platform has it. ok djm@
95077f48 4710 - (djm) OpenBSD CVS Sync
4711 - dtucker@cvs.openbsd.org 2003/11/18 00:40:05
4712 [serverloop.c]
4713 Correct check for authctxt->valid. ok djm@
b2a5802b 4714 - djm@cvs.openbsd.org 2003/11/18 10:53:07
4715 [monitor.c]
4716 unbreak fake authloop for non-existent users (my screwup). Spotted and
4717 tested by dtucker@; ok markus@
4d1de3a3 4718
85a68682 471920031117
4720 - (djm) OpenBSD CVS Sync
4721 - djm@cvs.openbsd.org 2003/11/03 09:03:37
4722 [auth-chall.c]
4723 make this a little more idiot-proof; ok markus@
4724 (includes portable-specific changes)
1a1bc5d5 4725 - jakob@cvs.openbsd.org 2003/11/03 09:09:41
4726 [sshconnect.c]
4727 move changed key warning into warn_changed_key(). ok markus@
f5da7f70 4728 - jakob@cvs.openbsd.org 2003/11/03 09:37:32
4729 [sshconnect.c]
4730 do not free static type pointer in warn_changed_key()
fdaef11e 4731 - djm@cvs.openbsd.org 2003/11/04 08:54:09
4732 [auth1.c auth2.c auth2-pubkey.c auth.h auth-krb5.c auth-passwd.c]
4733 [auth-rhosts.c auth-rh-rsa.c auth-rsa.c monitor.c serverloop.c]
4734 [session.c]
4735 standardise arguments to auth methods - they should all take authctxt.
4736 check authctxt->valid rather then pw != NULL; ok markus@
dc1759e6 4737 - jakob@cvs.openbsd.org 2003/11/08 16:02:40
4738 [auth1.c]
4739 remove unused variable (pw). ok djm@
4740 (id sync only - still used in portable)
512d319a 4741 - jmc@cvs.openbsd.org 2003/11/08 19:17:29
4742 [sftp-int.c]
4743 typos from Jonathon Gray;
b6c7b7b7 4744 - jakob@cvs.openbsd.org 2003/11/10 16:23:41
4745 [bufaux.c bufaux.h cipher.c cipher.h hostfile.c hostfile.h key.c]
4746 [key.h sftp-common.c sftp-common.h sftp-server.c sshconnect.c sshd.c]
4747 [ssh-dss.c ssh-rsa.c uuencode.c uuencode.h]
4748 constify. ok markus@ & djm@
15c8e3fd 4749 - dtucker@cvs.openbsd.org 2003/11/12 10:12:15
4750 [scp.c]
4751 When called with -q, pass -q to ssh; suppresses SSH2 banner. ok markus@
0161a13d 4752 - jakob@cvs.openbsd.org 2003/11/12 16:39:58
4753 [dns.c dns.h readconf.c ssh_config.5 sshconnect.c]
4754 update SSHFP validation. ok markus@
dd376e92 4755 - jmc@cvs.openbsd.org 2003/11/12 20:14:51
4756 [ssh_config.5]
4757 make verb agree with subject, and kill some whitespace;
b930668c 4758 - markus@cvs.openbsd.org 2003/11/14 13:19:09
4759 [sshconnect2.c]
4760 cleanup and minor fixes for the client code; from Simon Wilkinson
d3cbe6f8 4761 - djm@cvs.openbsd.org 2003/11/17 09:45:39
4762 [msg.c msg.h sshconnect2.c ssh-keysign.c]
4763 return error on msg send/receive failure (rather than fatal); ok markus@
0789992b 4764 - markus@cvs.openbsd.org 2003/11/17 11:06:07
4765 [auth2-gss.c gss-genr.c gss-serv.c monitor.c monitor.h monitor_wrap.c]
4766 [monitor_wrap.h sshconnect2.c ssh-gss.h]
4767 replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson;
4768 test + ok jakob.
7b2a0de3 4769 - (djm) Bug #632: Don't call pam_end indirectly from within kbd-int
4770 conversation function
2212fc98 4771 - (djm) Export environment variables from authentication subprocess to
4772 parent. Part of Bug #717
85a68682 4773
1d58af42 477420031115
4775 - (dtucker) [regress/agent-ptrace.sh] Test for GDB output from Solaris and
4776 HP-UX, skip test on AIX.
4777
74117b26 477820031113
4779 - (dtucker) [auth-pam.c] Append newlines to lines output by the
4780 pam_chauthtok_conv().
9e936326 4781 - (dtucker) [README ssh-host-config ssh-user-config Makefile] (All
4782 contrib/cygwin). Major update from vinschen at redhat.com.
4783 - Makefile provides a `cygwin-postinstall' target to run right after
4784 `make install'.
4785 - Better support for Windows 2003 Server.
4786 - Try to get permissions as correct as possible.
4787 - New command line options to allow full automated host configuration.
4788 - Create configs from skeletons in /etc/defaults/etc.
4789 - Use /bin/bash, allows reading user input with readline support.
4790 - Remove really old configs from /usr/local.
4f1b45b4 4791 - (dtucker) [auth-pam.c] Add newline to accumulated PAM_TEXT_INFO and
4792 PAM_ERROR_MSG messages.
74117b26 4793
53554b24 479420031106
4795 - (djm) Clarify UsePAM consequences a little more
4796
c3d908f0 479720031103
4798 - (dtucker) [contrib/cygwin/ssh-host-config] Ensure entries in /etc/services
4799 are created correctly with CRLF line terminations. Patch from vinschen at
4800 redhat.com.
74677ba3 4801 - (dtucker) OpenBSD CVS Sync
4802 - markus@cvs.openbsd.org 2003/10/15 09:48:45
4803 [monitor_wrap.c]
4804 check pmonitor != NULL
9da35e2c 4805 - markus@cvs.openbsd.org 2003/10/21 09:50:06
4806 [auth2-gss.c]
4807 make sure the doid is larger than 2
b0b30ca6 4808 - avsm@cvs.openbsd.org 2003/10/26 16:57:43
4809 [sshconnect2.c]
4810 rename 'supported' static var in userauth_gssapi() to 'gss_supported'
4811 to avoid shadowing the global version. markus@ ok
f7fb35fe 4812 - markus@cvs.openbsd.org 2003/10/28 09:08:06
4813 [misc.c]
4814 error->debug for getsockopt+TCP_NODELAY; several requests
d8d9afd0 4815 - markus@cvs.openbsd.org 2003/11/02 11:01:03
4816 [auth2-gss.c compat.c compat.h sshconnect2.c]
4817 remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk
61893035 4818 - (dtucker) [regress/agent-ptrace.sh] Use numeric uid and gid.
c3d908f0 4819
f8ec2373 482020031021
4821 - (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords
4822 directly. Noted by Darren.Moffat at sun.com.
5c4056b2 4823 - (dtucker) [regress/agent-ptrace.sh] Skip agent-test unless SUDO is set,
4824 make agent setgid during test.
f8ec2373 4825
4897a87c 482620031017
4827 - (dtucker) [INSTALL] Note that --with-md5 is now required on platforms with
4828 MD5 passwords even if PAM support is enabled. From steev at detritus.net.
4829
433e60ac 483020031015
4831 - (dtucker) OpenBSD CVS Sync
4832 - jmc@cvs.openbsd.org 2003/10/08 08:27:36
4833 [scp.1 scp.c sftp-server.8 sftp.1 sftp.c ssh.1 sshd.8]
4834 scp and sftp: add options list and sort options. options list requested
4835 by deraadt@
4836 sshd: use same format as ssh
4837 ssh: remove wrong option from list
4838 sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)
4839 ok deraadt@ markus@
2ecb78df 4840 - markus@cvs.openbsd.org 2003/10/08 15:21:24
4841 [readconf.c ssh_config.5]
4842 default GSS API to no in client, too; ok jakob, deraadt@
d73a67d7 4843 - markus@cvs.openbsd.org 2003/10/11 08:24:08
4844 [readconf.c readconf.h ssh.1 ssh.c ssh_config.5]
4845 remote x11 clients are now untrusted by default, uses xauth(8) to generate
4846 untrusted cookies; ForwardX11Trusted=yes restores old behaviour.
4847 ok deraadt; feedback and ok djm/fries
b56e99e2 4848 - markus@cvs.openbsd.org 2003/10/11 08:26:43
4849 [sshconnect2.c]
4850 search keys in reverse order; fixes #684
02cd6c56 4851 - markus@cvs.openbsd.org 2003/10/11 11:36:23
4852 [monitor_wrap.c]
4853 return NULL for missing banner; ok djm@
246bb171 4854 - jmc@cvs.openbsd.org 2003/10/12 13:12:13
4855 [ssh_config.5]
4856 note that EnableSSHKeySign should be in the non-hostspecific section;
4857 remove unnecessary .Pp;
4858 ok markus@
b3054353 4859 - markus@cvs.openbsd.org 2003/10/13 08:22:25
4860 [scp.1 sftp.1]
4861 don't refer to options related to forwarding; ok jmc@
b08b7370 4862 - jakob@cvs.openbsd.org 2003/10/14 19:42:10
4863 [dns.c dns.h readconf.c ssh-keygen.c sshconnect.c]
4864 include SSHFP lookup code (not enabled by default). ok markus@
baf12e3f 4865 - jakob@cvs.openbsd.org 2003/10/14 19:43:23
4866 [README.dns]
4867 update
c88de854 4868 - markus@cvs.openbsd.org 2003/10/14 19:54:39
4869 [session.c ssh-agent.c]
4870 10X for mkdtemp; djm@
c31dc31c 4871 - (dtucker) [acconfig.h configure.ac dns.c openbsd-compat/getrrsetbyname.c
4872 openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always
4873 compiled in but disabled in config.
11d40248 4874 - (dtucker) [auth.c] Check for disabled password expiry on HP-UX Trusted Mode.
ea12f758 4875 - (tim) [regress/banner.sh] portability fix.
433e60ac 4876
a83a3125 487720031009
4878 - (dtucker) [sshd_config.5] UsePAM defaults to "no". ok djm@
4879
19e633e7 488020031008
4881 - (dtucker) OpenBSD CVS Sync
4882 - dtucker@cvs.openbsd.org 2003/10/07 01:47:27
4883 [sshconnect2.c]
c8f0cf13 4884 Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 &
4885 #707. ok markus@
7fdf5569 4886 - djm@cvs.openbsd.org 2003/10/07 07:04:16
4887 [sftp-int.c]
4888 sftp quoting fix from admorten AT umich.edu; ok markus@
c8f0cf13 4889 - deraadt@cvs.openbsd.org 2003/10/07 21:58:28
4890 [sshconnect2.c]
4891 set ptr to NULL after free
4c98e94c 4892 - dtucker@cvs.openbsd.org 2003/10/07 01:52:13
4893 [regress/Makefile regress/banner.sh]
4894 Test SSH2 banner. ok markus@
3d3e0ec3 4895 - djm@cvs.openbsd.org 2003/10/07 07:04:52
4896 [regress/sftp-cmds.sh]
4897 more sftp quoting regress tests; ok markus
19e633e7 4898
e3df52a9 489920031007
4900 - (djm) Delete autom4te.cache after autoreconf
c6630044 4901 - (dtucker) [auth-pam.c auth-pam.h session.c] Make PAM use the new static
4902 cleanup functions. With & ok djm@
f658a5e8 4903 - (dtucker) [contrib/redhat/openssh.spec] Bug #714: Now that UsePAM is a
4904 run-time switch, always build --with-md5-passwords.
7111a85c 4905 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoul.c]
4906 Bug #670: add strtoul() to openbsd-compat for platforms lacking it. ok djm@
605369bb 4907 - (dtucker) [configure.ac] Bug #715: Set BROKEN_SETREUID and BROKEN_SETREGID
4908 on Reliant Unix. Patch from Robert.Dahlem at siemens.com.
e2798e96 4909 - (dtucker) [configure.ac] Bug #710: Check for dlsym() in libdl on
4910 Reliant Unix. Based on patch from Robert.Dahlem at siemens.com.
e3df52a9 4911
418ae4b4 491220031003
3f1204c3 4913 - (dtucker) OpenBSD CVS Sync
418ae4b4 4914 - markus@cvs.openbsd.org 2003/10/02 10:41:59
4915 [sshd.c]
4916 print openssl version, too, several requests; ok henning/djm.
59f552b7 4917 - markus@cvs.openbsd.org 2003/10/02 08:26:53
4918 [ssh-gss.h]
4919 missing $OpenBSD:; dtucker
ba7c26ce 4920 - (tim) [contrib/caldera/openssh.spec] Remove obsolete --with-ipv4-default
4921 option.
418ae4b4 4922
2362db19 492320031002
3f1204c3 4924 - (dtucker) OpenBSD CVS Sync
2362db19 4925 - markus@cvs.openbsd.org 2003/09/23 20:17:11
4926 [Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c
4927 cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h
4928 monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h
4929 ssh-agent.c sshd.c]
4930 replace fatal_cleanup() and linked list of fatal callbacks with static
4931 cleanup_exit() function. re-refine cleanup_exit() where appropriate,
4932 allocate sshd's authctxt eary to allow simpler cleanup in sshd.
4933 tested by many, ok deraadt@
0469be42 4934 - markus@cvs.openbsd.org 2003/09/23 20:18:52
4935 [progressmeter.c]
4936 don't print trailing \0; bug #709; Robert.Dahlem@siemens.com
4937 ok millert/deraadt@
c15706e2 4938 - markus@cvs.openbsd.org 2003/09/23 20:41:11
4939 [channels.c channels.h clientloop.c]
4940 move client only agent code to clientloop.c
51d2a129 4941 - markus@cvs.openbsd.org 2003/09/26 08:19:29
4942 [sshd.c]
4943 no need to set the listen sockets to non-block; ok deraadt@
5f4a0c58 4944 - jmc@cvs.openbsd.org 2003/09/29 11:40:51
4945 [ssh.1]
4946 - add list of options to -o and .Xr ssh_config(5)
4947 - some other cleanup
4948 requested by deraadt@;
4949 ok deraadt@ markus@
e377c083 4950 - markus@cvs.openbsd.org 2003/09/29 20:19:57
4951 [servconf.c sshd_config]
4952 GSSAPICleanupCreds -> GSSAPICleanupCredentials
97b56d59 4953 - (dtucker) [configure.ac] Don't set DISABLE_SHADOW when configuring
4954 --with-pam. ok djm@
21c1aca3 4955 - (dtucker) [ssh-gss.h] Prototype change missed in sync.
3a23ba0e 4956 - (dtucker) [session.c] Fix bus errors on some 64-bit Solaris configurations.
4957 Based on patches by Matthias Koeppe and Thomas Baden. ok djm@
2362db19 4958
0cdb4344 495920030930
4960 - (bal) Fix issues in openbsd-compat/realpath.c
4961
4214aa45 496220030925
4963 - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove
4964 DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam. Patch from
4965 michael_steffens at hp.com, ok djm@
1b4ba39b 4966 - (tim) [sshd_config] UsePAM defaults to no.
4214aa45 4967
67c4ea7d 496820030924
4969 - (djm) Update version.h and spec files for HEAD
cb433561 4970 - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6.
67c4ea7d 4971
5ba73866 497220030923
291c14e8 4973 - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-tree
5ba73866 4974 builds. Portability corrections from tim@.
b27e573d 4975 - (dtucker) [configure.ac] Bug #665: uid swapping issues on Mac OS X.
635e0c42 4976 Patch from max at quendi.de.
08da2d08 4977 - (dtucker) [configure.ac] Bug #657: uid swapping issues on BSDi.
4978 - (dtucker) [configure.ac] Bug #653: uid swapping issues on Tru64.
6fb3618d 4979 - (dtucker) [configure.ac] Bug #693: uid swapping issues on NCR MP-RAS.
4980 Patch from david.haughton at ncr.com
412c0eaa 4981 - (dtucker) [configure.ac] Bug #659: uid swapping issues on IRIX 6.
4982 Part of patch supplied by bugzilla-openssh at thewrittenword.com
1a086f97 4983 - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c
4984 openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with
4985 where gai_strerror is defined as "const char *". Part of patch supplied
4986 by bugzilla-openssh at thewrittenword.com
35283c00 4987 - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config] Update
4988 ssh-host-config to match current defaults, bump README version. Patch from
4989 vinschen at redhat.com.
51e7d820 4990 - (dtucker) [uidswap.c] Don't test restoration of uid on Cygwin since the
4991 OS does not support permanently dropping privileges. Patch from
4992 vinschen at redhat.com.
805dcf3a 4993 - (dtucker) [openbsd-compat/port-aix.c] Use correct include for xmalloc.h,
4994 add canohost.h to stop warning. Based on patch from openssh-unix-dev at
4995 thewrittenword.com
913a4384 4996 - (dtucker) [INSTALL] Bug #686: Document requirement for zlib 1.1.4 or
4997 higher.
f4f2ff4f 4998 - (tim) Fix typo. s/SETEIUD_BREAKS_SETUID/SETEUID_BREAKS_SETUID/
b27e573d 4999 - (tim) [configure.ac] Bug 665: move 3 new AC_DEFINES outside of AC_TRY_RUN.
5000 Report by distler AT golem ph utexas edu.
ca043cac 5001 - (dtucker) [contrib/aix/pam.conf] Include example pam.conf for AIX from
5002 article by genty at austin.ibm.com, included with the author's permission.
ce26c02a 5003 - (dtucker) OpenBSD CVS Sync
5004 - markus@cvs.openbsd.org 2003/09/18 07:52:54
5005 [sshconnect.c]
5006 missing {}; bug #656; jclonguet at free.fr
5bd34316 5007 - markus@cvs.openbsd.org 2003/09/18 07:54:48
5008 [buffer.c]
5009 protect against double free; #660; zardoz at users.sf.net
1bd71826 5010 - markus@cvs.openbsd.org 2003/09/18 07:56:05
5011 [authfile.c]
5012 missing buffer_free(&encrypted); #662; zardoz at users.sf.net
c46e584f 5013 - markus@cvs.openbsd.org 2003/09/18 08:49:45
5014 [deattack.c misc.c session.c ssh-agent.c]
5015 more buffer allocation fixes; from Solar Designer; CAN-2003-0682;
5016 ok millert@
bb92e5cc 5017 - miod@cvs.openbsd.org 2003/09/18 13:02:21
5018 [authfd.c bufaux.c dh.c mac.c ssh-keygen.c]
5019 A few signedness fixes for harmless situations; markus@ ok
9adbb4a4 5020 - markus@cvs.openbsd.org 2003/09/19 09:02:02
5021 [packet.c]
5022 buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471
f04181fe 5023 - markus@cvs.openbsd.org 2003/09/19 09:03:00
5024 [buffer.c]
5025 sign fix in buffer_dump; Jedi/Sector One; pr 3473
cd25664d 5026 - markus@cvs.openbsd.org 2003/09/19 11:29:40
5027 [ssh-agent.c]
5028 provide a ssh-agent specific fatal() function; ok deraadt
eec6d341 5029 - markus@cvs.openbsd.org 2003/09/19 11:30:39
5030 [ssh-keyscan.c]
5031 avoid fatal_cleanup, just call exit(); ok deraadt
364b1cde 5032 - markus@cvs.openbsd.org 2003/09/19 11:31:33
5033 [channels.c]
5034 do not call channel_free_all on fatal; ok deraadt
72c4301f 5035 - markus@cvs.openbsd.org 2003/09/19 11:33:09
5036 [packet.c sshd.c]
5037 do not call packet_close on fatal; ok deraadt
815a8407 5038 - markus@cvs.openbsd.org 2003/09/19 17:40:20
5039 [scp.c]
5040 error handling for remote-remote copy; #638; report Harald Koenig;
5041 ok millert, fgs, henning, deraadt
82de775c 5042 - markus@cvs.openbsd.org 2003/09/19 17:43:35
5043 [clientloop.c sshtty.c sshtty.h]
5044 remove fatal callbacks from client code; ok deraadt
9e3191db 5045 - (bal) "extration" -> "extraction" in ssh-rand-helper.c; repoted by john
5046 on #unixhelp@efnet
daa41e62 5047 - (tim) [configure.ac] add --disable-etc-default-login option. ok djm
0a23d79f 5048 - (djm) Sync with V_3_7 branch:
5049 - (djm) Fix SSH1 challenge kludge
5050 - (djm) Bug #671: Fix builds on OpenBSD
5051 - (djm) Bug #676: Fix PAM stack corruption
5052 - (djm) Fix bad free() in PAM code
5053 - (djm) Don't call pam_end before pam_init
5054 - (djm) Enable build with old OpenSSL again
5055 - (djm) Trim deprecated options from INSTALL. Mention UsePAM
5056 - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
5ba73866 5057
0b202697 5058$Id$
This page took 1.4129 seconds and 5 git commands to generate.