]> andersk Git - openssh.git/blame - ChangeLog
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (djm) Bug #222: Fix tests for getaddrinfo on OSF/1. Spotted by
[openssh.git] / ChangeLog
CommitLineData
520b41b2 120020423
2 - (djm) Bug #222: Fix tests for getaddrinfo on OSF/1. Spotted by
3 Robert Urban <urban@spielwiese.de>
4
ac033f8c 520020421
6 - (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0).
7 entropy.c needs seteuid(getuid()) for the setuid(original_uid) to succeed.
8 Patch by gert@greenie.muc.de. This fixes one part of Bug 208
9
6dc63b4f 1020020418
11 - (djm) Avoid SIGCHLD breakage when run from rsync. Fix from
12 Sturle Sunde <sturle.sunde@usit.uio.no>
13
230c7a8f 1420020417
15 - (djm) Tell users to configure /dev/random support into OpenSSL in INSTALL
1a7220c2 16 - (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca
8d184c09 17 - (tim) [configure.ac] Issue warning on --with-default-path=/some_path
18 if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com>
230c7a8f 19
9ae68cce 2020020415
21 - (djm) Unbreak "make install". Fix from Darren Tucker <dtucker@zip.com.au>
4e51cc76 22 - (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen
1b06e75e 23 - (tim) [configure.ac] add tests for recvmsg and sendmsg.
24 [monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for
25 systems that HAVE_ACCRIGHTS_IN_MSGHDR but no recvmsg or sendmsg.
9ae68cce 26
f6e6303d 2720020414
28 - (djm) ssh-rand-helper improvements
29 - Add commandline debugging options
30 - Don't write binary data if stdout is a tty (use hex instead)
31 - Give it a manpage
cbe5b851 32 - (djm) Random number collection doc fixes from Ben
f6e6303d 33
12928e80 3420020413
35 - (djm) Add KrbV support patch from Simon Wilkinson <simon@sxw.org.uk>
36
40b74b3f 3720020412
38 - (stevesk) [auth-sia.[ch]] add BSD license from Chris Adams
f95c8ce8 39 - (tim) [configure.ac] add <sys/types.h> to msghdr tests. Change -L
40 to -h on testing for /bin being symbolic link
e2c9b9e3 41 - (bal) Mistaken in Cygwin scripts for ssh starting. Patch by
42 Corinna Vinschen <vinschen@redhat.com>
e75b61db 43 - (bal) disable privsep if no MAP_ANON. We can re-enable it
44 after the release when we can do more testing.
40b74b3f 45
65b91c76 4620020411
47 - (stevesk) [auth-sia.c] cleanup
7b0737a4 48 - (tim) [acconfig.h defines.h includes.h] put includes in includes.h and
49 defines in defines.h [rijndael.c openbsd-compat/fake-socket.h
50 openbsd-compat/inet_aton.c] include "includes.h" instead of "config.h"
51 ok stevesk@
65b91c76 52
ca8aba40 5320020410
f1af2dbf 54 - (stevesk) [configure.ac monitor.c] HAVE_SOCKETPAIR
ca8aba40 55 - (stevesk) [auth-sia.c] compile fix Chris Adams <cmadams@hiwaay.net>
d8ff54e6 56 - (bal) OpenBSD CVS Sync
57 - markus@cvs.openbsd.org 2002/04/10 08:21:47
58 [auth1.c compat.c compat.h]
59 strip '@' from username only for KerbV and known broken clients, bug #204
f14a5033 60 - markus@cvs.openbsd.org 2002/04/10 08:56:01
61 [version.h]
62 OpenSSH_3.2
63 - Added p1 to idenify Portable release version.
ca8aba40 64
46c8e0f6 6520020408
66 - (bal) Minor OpenSC updates. Fix up header locations and update
67 README.smartcard provided by Juha Yrjölä <jyrjola@cc.hut.fi>
68
7176df4f 6920020407
70 - (stevesk) HAVE_CONTROL_IN_MSGHDR; not used right now.
71 Future: we may want to test if fd passing works correctly.
84071420 72 - (stevesk) [monitor_fdpass.c] fatal() for UsePrivilegeSeparation=yes
73 and no fd passing support.
1e8f8c5b 74 - (stevesk) HAVE_MMAP and HAVE_SYS_MMAN_H and use them in
75 monitor_mm.c
a90419b8 76 - (stevesk) remove configure support for poll.h; it was removed
77 from sshd.c a long time ago.
9a0fbcb3 78 - (stevesk) --with-privsep-user; default sshd
1bf74eac 79 - (stevesk) wrap munmap() with HAVE_MMAP also.
7176df4f 80
b17d6a47 8120020406
82 - (djm) Typo in Suse SPEC file. Fix from Carsten Grohmann
83 <carsten.grohmann@dr-baldeweg.de>
23aa1237 84 - (bal) Added MAP_FAILED to allow AIX and Trusted HP to compile.
af2b3cd9 85 - (bal) OpenBSD CVS Sync
86 - djm@cvs.openbsd.org 2002/04/06 00:30:08
87 [sftp-client.c]
88 Fix occasional corruption on upload due to bad reuse of request id, spotted
89 by chombier@mac.com; ok markus@
39f9599a 90 - mouring@cvs.openbsd.org 2002/04/06 18:24:09
91 [scp.c]
92 Fixes potental double // within path.
93 http://bugzilla.mindrot.org/show_bug.cgi?id=76
5866adb0 94 - (bal) Slight update to OpenSC support. Better version checking. patch
95 by Juha Yrjölä <jyrjola@cc.hut.fi>
b5171f93 96 - (bal) Revered out of runtime IRIX detection of joblimits. Code is
97 incomplete.
419e4769 98 - (bal) Quiet down configure.ac if /bin/test does not exist.
14f35963 99 - (bal) We no longer use atexit()/xatexit()/on_exit()
b17d6a47 100
295c8801 10120020405
102 - (bal) Patch for OpenSC SmartCard library; ok markus@; patch by
103 Juha Yrjölä <jyrjola@cc.hut.fi>
104 - (bal) Minor documentation update to reflect smartcard library
105 support changes.
ab33e02a 106 - (bal) Too many <sys/queue.h> issues. Remove all workarounds and
107 using internal version only.
d4c6ddff 108 - (bal) OpenBSD CVS Sync
109 - stevesk@cvs.openbsd.org 2002/04/05 20:56:21
110 [sshd.8]
111 clarify sshrc some and handle X11UseLocalhost=yes; ok markus@
295c8801 112
fde58bd4 11320020404
114 - (stevesk) [auth-pam.c auth-pam.h auth-passwd.c auth-sia.c auth-sia.h
115 auth1.c auth2.c] PAM, OSF_SIA password auth cleanup; from djm.
bf03f2da 116 - (bal) OpenBSD CVS Sync
117 - markus@cvs.openbsd.org 2002/04/03 09:26:11
118 [cipher.c myproposal.h]
119 re-add rijndael-cbc@lysator.liu.se for MacSSH; ash@lab.poc.net
fde58bd4 120
ca7e8e1e 12120020402
122 - (bal) Hand Sync of scp.c (reverted to upstream code)
123 - deraadt@cvs.openbsd.org 2002/03/30 17:45:46
124 [scp.c]
125 stretch banners
c572a874 126 - (bal) CVS ID sync of uidswap.c
783dbbdc 127 - (bal) OpenBSD CVS Sync (now for the real sync)
128 - markus@cvs.openbsd.org 2002/03/27 22:21:45
129 [ssh-keygen.c]
130 try to import keys with extra trailing === (seen with ssh.com < 2.0.12)
49a34e84 131 - markus@cvs.openbsd.org 2002/03/28 15:34:51
132 [session.c]
133 do not call record_login twice (for use_privsep)
ffbf7323 134 - markus@cvs.openbsd.org 2002/03/29 18:59:32
135 [session.c session.h]
136 retrieve last login time before the pty is allocated, store per session
3bc822df 137 - stevesk@cvs.openbsd.org 2002/03/29 19:16:22
138 [sshd.8]
139 RSA key modulus size minimum 768; ok markus@
82b00264 140 - stevesk@cvs.openbsd.org 2002/03/29 19:18:33
141 [auth-rsa.c ssh-rsa.c ssh.h]
142 make RSA modulus minimum #define; ok markus@
8c38e88b 143 - markus@cvs.openbsd.org 2002/03/30 18:51:15
144 [monitor.c serverloop.c sftp-int.c sftp.c sshd.c]
145 check waitpid for EINTR; based on patch from peter@ifm.liu.se
92053302 146 - markus@cvs.openbsd.org 2002/04/01 22:02:16
147 [sftp-client.c]
148 20480 is an upper limit for older server
9c74a24d 149 - markus@cvs.openbsd.org 2002/04/01 22:07:17
150 [sftp-client.c]
151 fallback to stat if server does not support lstat
b745a2f2 152 - markus@cvs.openbsd.org 2002/04/02 11:49:39
153 [ssh-agent.c]
154 check $SHELL for -k and -d, too;
155 http://bugzilla.mindrot.org/show_bug.cgi?id=199
b69145c2 156 - markus@cvs.openbsd.org 2002/04/02 17:37:48
157 [sftp.c]
158 always call log_init()
c9336aed 159 - markus@cvs.openbsd.org 2002/04/02 20:11:38
160 [ssh-rsa.c]
161 ignore SSH_BUG_SIGBLOB for ssh-rsa; #187
c895376b 162 - (bal) mispelling in uidswap.c (portable only)
ca7e8e1e 163
8b314ec9 16420020401
165 - (stevesk) [monitor.c] PAM should work again; will *not* work with
166 UsePrivilegeSeparation=yes.
3906af0f 167 - (stevesk) [auth1.c] fix password auth for protocol 1 when
168 !USE_PAM && !HAVE_OSF_SIA; merge issue.
8b314ec9 169
267e920e 17020020331
171 - (tim) [configure.ac] use /bin/test -L to work around broken builtin on
172 Solaris 8
ef077e37 173 - (tim) [sshconnect2.c] change uint32_t to u_int32_t
267e920e 174
0461c355 17520020330
176 - (stevesk) [configure.ac] remove header check for sys/ttcompat.h
177 bug 167
178
dd466ff8 17920020327
180 - (bal) 'pw' should be 'authctxt->pw' in auth1.c spotted by
181 kent@lysator.liu.se
17f5e68a 182 - (bal) OpenBSD CVS Sync
183 - markus@cvs.openbsd.org 2002/03/26 11:34:49
184 [ssh.1 sshd.8]
185 update to recent drafts
5fb274c1 186 - markus@cvs.openbsd.org 2002/03/26 11:37:05
187 [ssh.c]
188 update Copyright
19f40184 189 - markus@cvs.openbsd.org 2002/03/26 15:23:40
190 [bufaux.c]
191 do not talk about packets in bufaux
7341fad9 192 - rees@cvs.openbsd.org 2002/03/26 18:46:59
193 [scard.c]
194 try_AUT0 in read_pubkey too, for those paranoid few who want to acl 'sh'
6c112aca 195 - markus@cvs.openbsd.org 2002/03/26 22:50:39
196 [channels.h]
197 CHANNEL_EFD_OUTPUT_ACTIVE is false for CHAN_CLOSE_RCVD, too
52103b10 198 - markus@cvs.openbsd.org 2002/03/26 23:13:03
199 [auth-rsa.c]
200 disallow RSA keys < 768 for protocol 1, too (rhosts-rsa and rsa auth)
76bf34f1 201 - markus@cvs.openbsd.org 2002/03/26 23:14:51
202 [kex.c]
203 generate a new cookie for each SSH2_MSG_KEXINIT message we send out
300e01c4 204 - mouring@cvs.openbsd.org 2002/03/27 11:45:42
205 [monitor.c]
206 monitor_allowed_key() returns int instead of pointer. ok markus@
207
eb4652f4 20820020325
209 - (stevesk) import OpenBSD <sys/tree.h> as "openbsd-compat/tree.h"
47c36e5b 210 - (bal) OpenBSD CVS Sync
211 - stevesk@cvs.openbsd.org 2002/03/23 20:57:26
212 [sshd.c]
213 setproctitle() after preauth child; ok markus@
d452ec1a 214 - markus@cvs.openbsd.org 2002/03/24 16:00:27
215 [serverloop.c]
216 remove unused debug
a49dfdec 217 - markus@cvs.openbsd.org 2002/03/24 16:01:13
218 [packet.c]
219 debug->debug3 for extra padding
5b0d7dc1 220 - stevesk@cvs.openbsd.org 2002/03/24 17:27:03
221 [kexgex.c]
222 typo; ok markus@
d4355079 223 - stevesk@cvs.openbsd.org 2002/03/24 17:53:16
224 [monitor_fdpass.c]
225 minor cleanup and more error checking; ok markus@
9fc0407d 226 - markus@cvs.openbsd.org 2002/03/24 18:05:29
227 [scard.c]
228 we need to figure out AUT0 for sc_private_encrypt, too
38c1c52a 229 - stevesk@cvs.openbsd.org 2002/03/24 23:20:00
230 [monitor.c]
231 remove "\n" from fatal()
159897f3 232 - markus@cvs.openbsd.org 2002/03/25 09:21:13
233 [auth-rsa.c]
234 return 0 (not NULL); tomh@po.crl.go.jp
6f33c8cd 235 - markus@cvs.openbsd.org 2002/03/25 09:25:06
236 [auth-rh-rsa.c]
237 rm bogus comment
0659cace 238 - markus@cvs.openbsd.org 2002/03/25 17:34:27
239 [scard.c scard.h ssh-agent.c ssh-keygen.c ssh.c]
240 change sc_get_key to sc_get_keys and hide smartcard details in scard.c
3074b20c 241 - stevesk@cvs.openbsd.org 2002/03/25 20:12:10
242 [monitor_mm.c monitor_wrap.c]
243 ssize_t args use "%ld" and cast to (long)
244 size_t args use "%lu" and cast to (u_long)
245 ok markus@ and thanks millert@
1c2deed1 246 - markus@cvs.openbsd.org 2002/03/25 21:04:02
247 [ssh.c]
248 simplify num_identity_files handling
d2296ed7 249 - markus@cvs.openbsd.org 2002/03/25 21:13:51
250 [channels.c channels.h compat.c compat.h nchan.c]
251 don't send stderr data after EOF, accept this from older known (broken)
252 sshd servers only, fixes http://bugzilla.mindrot.org/show_bug.cgi?id=179
8e4fd4a1 253 - stevesk@cvs.openbsd.org 2002/03/26 03:24:01
254 [monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h]
255 $OpenBSD$
eb4652f4 256
1178e8db 25720020324
258 - (stevesk) [session.c] disable LOGIN_NEEDS_TERM until we are sure
259 it can be removed. only used on solaris. will no longer compile with
260 privsep shuffling.
261
6f34652e 26220020322
263 - (stevesk) HAVE_ACCRIGHTS_IN_MSGHDR configure support
7b18c353 264 - (stevesk) [monitor.c monitor_wrap.c] #ifdef HAVE_PW_CLASS_IN_PASSWD
c921ee00 265 - (stevesk) configure and cpp __FUNCTION__ gymnastics to handle nielsisms
dc90b259 266 - (stevesk) [monitor_fdpass.c] support for access rights style file
267 descriptor passing
f7ed12f1 268 - (stevesk) [auth2.c] merge cleanup/sync
cfadc43b 269 - (stevesk) [defines.h] hp-ux 11 has ancillary data style fd passing, but
270 is missing CMSG_LEN() and CMSG_SPACE() macros.
cc58061e 271 - (stevesk) [defines.h] #define MAP_ANON MAP_ANONYMOUS for HP-UX; other
272 platforms may need this--I'm not sure. mmap() issues will need to be
273 addressed further.
05976246 274 - (tim) [cipher.c] fix problem with OpenBSD sync
9242fa1b 275 - (stevesk) [LICENCE] OpenBSD sync
6f34652e 276
8627f3e0 27720020321
278 - (bal) OpenBSD CVS Sync
279 - itojun@cvs.openbsd.org 2002/03/08 06:10:16
280 [sftp-client.c]
281 printf type mismatch
bfa7f960 282 - itojun@cvs.openbsd.org 2002/03/11 03:18:49
283 [sftp-client.c]
284 correct type mismatches (u_int64_t != unsigned long long)
5fc7dbc9 285 - itojun@cvs.openbsd.org 2002/03/11 03:19:53
286 [sftp-client.c]
287 indent
150a5466 288 - markus@cvs.openbsd.org 2002/03/14 15:24:27
289 [sshconnect1.c]
290 don't trust size sent by (rogue) server; noted by s.esser@e-matters.de
4f08e98d 291 - markus@cvs.openbsd.org 2002/03/14 16:38:26
292 [sshd.c]
293 split out ssh1 session key decryption; ok provos@
46f1eece 294 - markus@cvs.openbsd.org 2002/03/14 16:56:33
295 [auth-rh-rsa.c auth-rsa.c auth.h]
296 split auth_rsa() for better readability and privsep; ok provos@
c390a3c8 297 - itojun@cvs.openbsd.org 2002/03/15 11:00:38
298 [auth.c]
299 fix file type checking (use S_ISREG). ok by markus
bcb68a8f 300 - markus@cvs.openbsd.org 2002/03/16 11:24:53
301 [compress.c]
302 skip inflateEnd if inflate fails; ok provos@
3e65880e 303 - markus@cvs.openbsd.org 2002/03/16 17:22:09
304 [auth-rh-rsa.c auth.h]
305 split auth_rhosts_rsa(), ok provos@
bb15f28b 306 - stevesk@cvs.openbsd.org 2002/03/16 17:41:25
307 [auth-krb5.c]
308 BSD license. from Daniel Kouril via Dug Song. ok markus@
443fa1cd 309 - provos@cvs.openbsd.org 2002/03/17 20:25:56
310 [auth.c auth.h auth1.c auth2.c]
311 getpwnamallow returns struct passwd * only if user valid; okay markus@
1b34c1b3 312 - provos@cvs.openbsd.org 2002/03/18 01:12:14
313 [auth.h auth1.c auth2.c sshd.c]
314 have the authentication functions return the authentication context
315 and then do_authenticated; okay millert@
9d0844e3 316 - dugsong@cvs.openbsd.org 2002/03/18 01:30:10
317 [auth-krb4.c]
318 set client to NULL after xfree(), from Rolf Braun
319 <rbraun+ssh@andrew.cmu.edu>
1836f69f 320 - provos@cvs.openbsd.org 2002/03/18 03:41:08
321 [auth.c session.c]
322 move auth_approval into getpwnamallow with help from millert@
bf8269a9 323 - markus@cvs.openbsd.org 2002/03/18 17:13:15
324 [cipher.c cipher.h]
325 export/import cipher states; needed by ssh-privsep
e050d348 326 - markus@cvs.openbsd.org 2002/03/18 17:16:38
327 [packet.c packet.h]
328 export/import cipher state, iv and ssh2 seqnr; needed by ssh-privsep
d0074658 329 - markus@cvs.openbsd.org 2002/03/18 17:23:31
330 [key.c key.h]
331 add key_demote() for ssh-privsep
b625ad75 332 - provos@cvs.openbsd.org 2002/03/18 17:25:29
333 [bufaux.c bufaux.h]
334 buffer_skip_string and extra sanity checking; needed by ssh-privsep
3d6fc2f8 335 - provos@cvs.openbsd.org 2002/03/18 17:31:54
336 [compress.c]
337 export compression streams for ssh-privsep
1853d1ef 338 - provos@cvs.openbsd.org 2002/03/18 17:50:31
339 [auth-bsdauth.c auth-options.c auth-rh-rsa.c auth-rsa.c auth-skey.c auth.h
340 auth1.c auth2-chall.c auth2.c kex.c kex.h kexdh.c kexgex.c servconf.c
341 session.h servconf.h serverloop.c session.c sshd.c]
342 integrate privilege separated openssh; its turned off by default for now.
343 work done by me and markus@
ce19ff48 344 - provos@cvs.openbsd.org 2002/03/18 17:53:08
345 [sshd.8]
346 credits for privsep
70aa9ff4 347 - provos@cvs.openbsd.org 2002/03/18 17:59:09
348 [sshd.8]
349 document UsePrivilegeSeparation
73fbf637 350 - stevesk@cvs.openbsd.org 2002/03/18 23:52:51
351 [servconf.c]
352 UnprivUser/UnprivGroup usable now--specify numeric user/group; ok
353 provos@
1c352e97 354 - stevesk@cvs.openbsd.org 2002/03/19 03:03:43
355 [pathnames.h servconf.c servconf.h sshd.c]
356 _PATH_PRIVSEP_CHROOT_DIR; ok provos@
fffbaee2 357 - stevesk@cvs.openbsd.org 2002/03/19 05:23:08
358 [sshd.8]
359 Banner has no default.
702b7dd8 360 - mpech@cvs.openbsd.org 2002/03/19 06:32:56
361 [sftp-int.c]
362 use xfree() after xstrdup().
363
364 markus@ ok
51aeb639 365 - markus@cvs.openbsd.org 2002/03/19 10:35:39
366 [auth-options.c auth.h session.c session.h sshd.c]
367 clean up prototypes
762715ce 368 - markus@cvs.openbsd.org 2002/03/19 10:49:35
369 [auth-krb5.c auth-rh-rsa.c auth.c cipher.c key.c misc.h packet.c session.c
370 sftp-client.c sftp-glob.h sftp.c ssh-add.c ssh.c sshconnect2.c sshd.c
371 ttymodes.c]
372 KNF whitespace
5f1f36b5 373 - markus@cvs.openbsd.org 2002/03/19 14:27:39
374 [auth.c auth1.c auth2.c]
375 make getpwnamallow() allways call pwcopy()
06bea668 376 - markus@cvs.openbsd.org 2002/03/19 15:31:47
377 [auth.c]
378 check for NULL; from provos@
2ea6de2b 379 - stevesk@cvs.openbsd.org 2002/03/20 19:12:25
380 [servconf.c servconf.h ssh.h sshd.c]
381 for unprivileged user, group do:
382 pw=getpwnam(SSH_PRIVSEP_USER); do_setusercontext(pw). ok provos@
256debd0 383 - stevesk@cvs.openbsd.org 2002/03/20 21:08:08
384 [sshd.c]
385 strerror() on chdir() fail; ok provos@
edfb66cb 386 - markus@cvs.openbsd.org 2002/03/21 10:21:20
387 [ssh-add.c]
388 ignore errors for nonexisting default keys in ssh-add,
389 fixes http://bugzilla.mindrot.org/show_bug.cgi?id=158
c53c54c2 390 - jakob@cvs.openbsd.org 2002/03/21 15:17:26
391 [clientloop.c ssh.1]
392 add built-in command line for adding new port forwardings on the fly.
393 based on a patch from brian wellington. ok markus@.
7649bbfe 394 - markus@cvs.openbsd.org 2002/03/21 16:38:06
395 [scard.c]
396 make compile w/ openssl 0.9.7
b9f62352 397 - markus@cvs.openbsd.org 2002/03/21 16:54:53
398 [scard.c scard.h ssh-keygen.c]
399 move key upload to scard.[ch]
400 - markus@cvs.openbsd.org 2002/03/21 16:57:15
401 [scard.c]
402 remove const
39ac8430 403 - markus@cvs.openbsd.org 2002/03/21 16:58:13
404 [clientloop.c]
405 remove unused
514b94dc 406 - rees@cvs.openbsd.org 2002/03/21 18:08:15
407 [scard.c]
408 In sc_put_key(), sc_reader_id should be id.
ce1ba33a 409 - markus@cvs.openbsd.org 2002/03/21 20:51:12
410 [sshd_config]
411 add privsep (off)
324bf712 412 - markus@cvs.openbsd.org 2002/03/21 21:23:34
413 [sshd.c]
414 add privsep_preauth() and remove 1 goto; ok provos@
86c4f63d 415 - rees@cvs.openbsd.org 2002/03/21 21:54:34
416 [scard.c scard.h ssh-keygen.c]
417 Add PIN-protection for secret key.
76139bd8 418 - rees@cvs.openbsd.org 2002/03/21 22:44:05
419 [authfd.c authfd.h ssh-add.c ssh-agent.c ssh.c]
420 Add PIN-protection for secret key.
ec9b7086 421 - markus@cvs.openbsd.org 2002/03/21 23:07:37
422 [clientloop.c]
423 remove unused, sync w/ cmdline patch in my tree.
ce1ba33a 424
81dadca3 42520020317
426 - (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is wanted,
427 warn if directory does not exist. Put system directories in front of
428 PATH for finding entorpy commands.
43e41c2c 429 - (tim) [contrib/aix/buildbff.sh contrib/aix/inventory.sh] AIX package
430 build fixes. Patch by Darren Tucker <dtucker@zip.com.au>
431 [contrib/solaris/buildpkg.sh] add missing dirs to SYSTEM_DIR. Have
432 postinstall check for $piddir and add if necessary.
81dadca3 433
e4abf75b 43420020311
435 - (tim) [contrib/solaris/buildpkg.sh, contrib/solaris/README] Updated to
436 build on all platforms that support SVR4 style package tools. Now runs
437 from build dir. Parts are based on patches from Antonio Navarro, and
438 Darren Tucker.
439
fb8f3dc9 44020020308
a068d86f 441 - (djm) Revert bits of Markus' OpenSSL compat patch which was
442 accidentally committed.
443 - (djm) Add Markus' patch for compat wih OpenSSL < 0.9.6.
444 Known issue: Blowfish for SSH1 does not work
dc254471 445 - (stevesk) entropy.c: typo in debug message
633151a3 446 - (djm) ssh-keygen -i needs seeded RNG; report from markus@
fb8f3dc9 447
1854a55e 44820020307
449 - (djm) OpenBSD CVS Sync
450 - markus@cvs.openbsd.org 2002/03/06 00:20:54
451 [compat.c dh.c]
452 compat.c
83a9aa63 453 - markus@cvs.openbsd.org 2002/03/06 00:23:27
454 [compat.c dh.c]
455 undo
dbe426a1 456 - markus@cvs.openbsd.org 2002/03/06 00:24:39
457 [compat.c]
458 compat.c
86044b85 459 - markus@cvs.openbsd.org 2002/03/06 00:25:55
460 [version.h]
461 OpenSSH_3.1
01f8d3ee 462 - (djm) Update RPM spec files with new version number
4ca33cc5 463 - (bal) Updated INSTALL to reflect 0.9.6 OpenSSL requirement
5bbbc661 464 - (bal) Add in check for rpc/types.h since it is needed on
465 some platforms for INADDR_LOOPBACK. We should retest
466 SCO 3 to see if this fixes their problem also.
492a3893 467 - (bal) Test for IRIX JOBS support at runtime. Patch provided
468 by David Kaelbling <drk@sgi.com>
469
a88e3e36 47020020305
471 - stevesk@cvs.openbsd.org 2002/03/02 09:34:42
472 [LICENCE]
473 correct copyright dates for scp license; ok markus@
474
27f30efd 47520020304
476 - OpenBSD CVS Sync
477 - deraadt@cvs.openbsd.org 2002/02/26 18:52:32
478 [sftp.1]
479 Ic cannot have that many arguments; spotted by mouring@etoh.eviladmin.org
dc76d6ce 480 - mouring@cvs.openbsd.org 2002/02/26 19:04:37
481 [sftp.1]
482 > Ic cannot have that many arguments; spotted by mouring@etoh.eviladmin.org
483 Last Ic on the first line should not have a space between it and the final
484 comma.
7e35f994 485 - deraadt@cvs.openbsd.org 2002/02/26 19:06:43
486 [sftp.1]
487 no, look closely. the comma was highlighted. split .Ic even more
3c05447a 488 - stevesk@cvs.openbsd.org 2002/02/26 20:03:51
489 [misc.c]
490 use socklen_t
db518d9b 491 - stevesk@cvs.openbsd.org 2002/02/27 21:23:13
492 [canohost.c channels.c packet.c sshd.c]
493 remove unneeded casts in [gs]etsockopt(); ok markus@
714954dc 494 - markus@cvs.openbsd.org 2002/02/28 15:46:33
495 [authfile.c kex.c kexdh.c kexgex.c key.c ssh-dss.c]
496 add some const EVP_MD for openssl-0.9.7
cd9a7017 497 - stevesk@cvs.openbsd.org 2002/02/28 19:36:28
498 [auth.c match.c match.h]
499 delay hostname lookup until we see a ``@'' in DenyUsers and AllowUsers
500 for sshd -u0; ok markus@
ebb1bf1a 501 - stevesk@cvs.openbsd.org 2002/02/28 20:36:42
502 [sshd.8]
503 DenyUsers allows user@host pattern also
f464aad8 504 - stevesk@cvs.openbsd.org 2002/02/28 20:46:10
505 [sshd.8]
506 -u0 DNS for user@host
b334badd 507 - stevesk@cvs.openbsd.org 2002/02/28 20:56:00
508 [auth.c]
509 log user not allowed details, from dwd@bell-labs.com; ok markus@
6805fc56 510 - markus@cvs.openbsd.org 2002/03/01 13:12:10
511 [auth.c match.c match.h]
512 undo the 'delay hostname lookup' change
513 match.c must not use compress.c (via canonhost.c/packet.c)
514 thanks to wilfried@
fa1eb020 515 - markus@cvs.openbsd.org 2002/03/04 12:43:06
516 [auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
c92ec40b 517 - markus@cvs.openbsd.org 2002/03/04 13:10:46
518 [misc.c]
519 error-> debug, because O_NONBLOCK for /dev/null causes too many different
520 errnos; ok stevesk@, deraadt@
fa1eb020 521 unused include
93c3b6de 522 - stevesk@cvs.openbsd.org 2002/03/04 17:27:39
523 [auth-krb5.c auth-options.h auth.h authfd.h authfile.h bufaux.h buffer.h
524 channels.h cipher.h compat.h compress.h crc32.h deattack.c getput.h
525 groupaccess.c misc.c mpaux.h packet.h readconf.h rsa.h scard.h
526 servconf.h ssh-agent.c ssh.h ssh2.h sshpty.h sshtty.c ttymodes.h
527 uuencode.c xmalloc.h]
528 $OpenBSD$ and RCSID() cleanup: don't use RCSID() in .h files; add
529 missing RCSID() to .c files and remove dup /*$OpenBSD$*/ from .c
530 files. ok markus@
27452401 531 - stevesk@cvs.openbsd.org 2002/03/04 18:30:23
532 [ssh-keyscan.c]
533 handle connection close during read of protocol version string.
534 fixes erroneous "bad greeting". ok markus@
c77d2e56 535 - markus@cvs.openbsd.org 2002/03/04 19:37:58
536 [channels.c]
537 off by one; thanks to joost@pine.nl
ef817d21 538 - (bal) Added contrib/aix/ to support BFF package generation provided
539 by Darren Tucker <dtucker@zip.com.au>
ddceb1c8 54020020226
541 - (tim) Bug 12 [configure.ac] add sys/bitypes.h to int64_t tests
542 based on patch by mooney@dogbert.cc.ndsu.nodak.edu (Tim Mooney)
543 Bug 45 [configure.ac] modify skey test to work around conflict with autoconf
544 reported by nolan@naic.edu (Michael Nolan)
545 patch by Pekka Savola <pekkas@netcore.fi>
546 Bug 74 [configure.ac defines.h] add sig_atomic_t test
547 reported by dwd@bell-labs.com (Dave Dykstra)
548 Bug 102 [defines.h] UNICOS fixes. patch by wendyp@cray.com
549 [configure.ac Makefile.in] link libwrap only with sshd
550 based on patch by Maciej W. Rozycki <macro@ds2.pg.gda.pl>
551 Bug 123 link libpam only with sshd
552 reported by peak@argo.troja.mff.cuni.cz (Pavel Kankovsky)
553 [configure.ac defines.h] modify previous SCO3 fix to not break Solaris 7
554 [acconfig.h] remove unused HAVE_REGCOMP
98f2d9d5 555 [configure.ac] put back in search for prngd-socket
12e8eb8d 556 - (stevesk) openbsd-compat/base64.h: typo in comment
e6164c5e 557 - (bal) Update sshd_config CVSID
c12337d9 558 - (bal) OpenBSD CVS Sync
559 - markus@cvs.openbsd.org 2002/02/15 23:54:10
560 [auth-krb5.c]
561 krb5_get_err_text() does not like context==NULL; he@nordu.net via google;
562 ok provos@
2bae80e9 563 - markus@cvs.openbsd.org 2002/02/22 12:20:34
564 [log.c log.h ssh-keyscan.c]
565 overwrite fatal() in ssh-keyscan.c; fixes pr 2354; ok provos@
b967d870 566 - markus@cvs.openbsd.org 2002/02/23 17:59:02
567 [kex.c kexdh.c kexgex.c]
568 don't allow garbage after payload.
f6b1ba8f 569 - stevesk@cvs.openbsd.org 2002/02/24 16:09:52
570 [sshd.c]
571 use u_char* here; ok markus@
f60ace9f 572 - markus@cvs.openbsd.org 2002/02/24 16:57:19
573 [sftp-client.c]
574 early close(), missing free; ok stevesk@
a318bbf4 575 - markus@cvs.openbsd.org 2002/02/24 16:58:32
576 [packet.c]
577 make 'cp' unsigned and merge with 'ucp'; ok stevesk@
b117a4d3 578 - markus@cvs.openbsd.org 2002/02/24 18:31:09
579 [uuencode.c]
580 typo in comment
c66f9d0e 581 - markus@cvs.openbsd.org 2002/02/24 19:14:59
582 [auth2.c authfd.c authfd.h authfile.c kexdh.c kexgex.c key.c key.h
583 ssh-dss.c ssh-dss.h ssh-keygen.c ssh-rsa.c ssh-rsa.h sshconnect2.c]
584 signed vs. unsigned: make size arguments u_int, ok stevesk@
811a6342 585 - stevesk@cvs.openbsd.org 2002/02/24 19:59:42
586 [channels.c misc.c]
587 disable Nagle in connect_to() and channel_post_port_listener() (port
588 forwarding endpoints). the intention is to preserve the on-the-wire
589 appearance to applications at either end; the applications can then
590 enable TCP_NODELAY according to their requirements. ok markus@
21b30f38 591 - markus@cvs.openbsd.org 2002/02/25 16:33:27
592 [ssh-keygen.c sshconnect2.c uuencode.c uuencode.h]
593 more u_* fixes
bb2fbc98 594 - (bal) Imported missing fatal.c and fixed up Makefile.in
98f2d9d5 595 - (tim) [configure.ac] correction to Bug 123 fix
2d16d9a3 596 [configure.ac] correction to sig_atomic_t test
ddceb1c8 597
da522265 59820020225
599 - (bal) Last AIX patch. Moved aix_usrinfo() outside of do_setuserconext()
600 since we need more session information than provided by that function.
601
2ec3dbf6 60220020224
603 - (bal) Drop Session *s usage in ports-aix.[ch] and pass just what we
604 need to do the jobs (AIX still does not fully compile, but that is
605 coming).
4936fcee 606 - (bal) Part two.. Drop unused AIX header, fix up missing char *cp. All
607 that is left is handling aix_usrinfo().
f3837bc6 608 - (tim) [loginrec.c session.c sshlogin.c sshlogin.h] Bug 84
609 patch by wknox@mitre.org (William Knox).
610 [sshlogin.h] declare record_utmp_only for session.c
2ec3dbf6 611
8001948f 61220020221
2ec3dbf6 613 - (bal) Minor session.c fixup for cygwin. mispelt 'is_winnt' variable.
8001948f 614
241b0041 61520020219
616 - (djm) OpenBSD CVS Sync
617 - mpech@cvs.openbsd.org 2002/02/13 08:33:47
618 [ssh-keyscan.1]
619 When you give command examples and etc., in a manual page prefix them with: $ command
620 or
621 # command
399d1ea6 622 - markus@cvs.openbsd.org 2002/02/14 23:27:59
623 [channels.c]
624 increase the SSH v2 window size to 4 packets. comsumes a little
625 bit more memory for slow receivers but increases througput.
ea9700ba 626 - markus@cvs.openbsd.org 2002/02/14 23:28:00
627 [channels.h session.c ssh.c]
628 increase the SSH v2 window size to 4 packets. comsumes a little
629 bit more memory for slow receivers but increases througput.
3ee832e5 630 - markus@cvs.openbsd.org 2002/02/14 23:41:01
631 [authfile.c cipher.c cipher.h kex.c kex.h packet.c]
632 hide some more implementation details of cipher.[ch] and prepares for move
633 to EVP, ok deraadt@
2a55e100 634 - stevesk@cvs.openbsd.org 2002/02/16 14:53:37
635 [ssh-keygen.1]
636 -t required now for key generation
8d22d775 637 - stevesk@cvs.openbsd.org 2002/02/16 20:40:08
638 [ssh-keygen.c]
639 default to rsa keyfile path for non key generation operations where
640 keyfile not specified. fixes core dump in those cases. ok markus@
ef2839b9 641 - millert@cvs.openbsd.org 2002/02/16 21:27:53
642 [auth.h]
643 Part one of userland __P removal. Done with a simple regexp with
644 some minor hand editing to make comments line up correctly. Another
645 pass is forthcoming that handles the cases that could not be done
646 automatically.
d96be24d 647 - millert@cvs.openbsd.org 2002/02/17 19:42:32
648 [auth.h]
649 Manual cleanup of remaining userland __P use (excluding packages
650 maintained outside the tree)
70fc1609 651 - markus@cvs.openbsd.org 2002/02/18 13:05:32
652 [cipher.c cipher.h]
653 switch to EVP, ok djm@ deraadt@
4e30de66 654 - markus@cvs.openbsd.org 2002/02/18 17:55:20
655 [ssh.1]
656 -q: Fatal errors are _not_ displayed.
d9959c61 657 - deraadt@cvs.openbsd.org 2002/02/19 02:50:59
658 [sshd_config]
659 stategy is not an english word
90e70cfc 660 - (bal) Migrated IRIX jobs/projects/audit/etc code to
2cce09e7 661 openbsd-compat/port-irix.[ch] to improve readiblity of do_child()
90e70cfc 662 - (bal) Migrated AIX getuserattr and usrinfo code to
663 openbsd-compat/port-aix.[c] to improve readilbity of do_child() and
664 simplify our diffs against upstream source.
f7342052 665 - (bal) OpenBSD CVS Sync
666 - markus@cvs.openbsd.org 2002/02/15 23:11:26
667 [session.c]
668 split do_child(), ok mouring@
5dd82c23 669 - markus@cvs.openbsd.org 2002/02/16 00:51:44
670 [session.c]
671 typo
672 - (bal) CVS ID sync since the last two patches were merged mistakenly
241b0041 673
975956bb 67420020218
675 - (tim) newer config.guess from ftp://ftp.gnu.org/gnu/config/config.guess
676
0c43a2e7 67720020213
3b83c722 678 - (djm) Don't use system sys/queue.h on AIX. Report from
679 gert@greenie.muc.de
680 - (djm) Bug #114 - not starting PAM for SSH protocol 1 invalid users
0c43a2e7 681
68220020213
9d726f16 683 - (djm) OpenBSD CVS Sync
684 - markus@cvs.openbsd.org 2002/02/11 16:10:15
685 [kex.c]
686 restore kexinit handler if we reset the dispatcher, this unbreaks
687 rekeying s/kex_clear_dispatch/kex_reset_dispatch/
6b4b5e49 688 - markus@cvs.openbsd.org 2002/02/11 16:15:46
689 [sshconnect1.c]
690 include md5.h, not evp.h
44b1a8e5 691 - markus@cvs.openbsd.org 2002/02/11 16:17:55
692 [sshd.c]
693 do not complain about port > 1024 if rhosts-auth is disabled
436c347c 694 - markus@cvs.openbsd.org 2002/02/11 16:19:39
695 [sshd.c]
696 include md5.h not hmac.h
fa869228 697 - markus@cvs.openbsd.org 2002/02/11 16:21:42
698 [match.c]
699 support up to 40 algorithms per proposal
c25d3df7 700 - djm@cvs.openbsd.org 2002/02/12 12:32:27
701 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c]
702 Perform multiple overlapping read/write requests in file transfer. Mostly
703 done by Tobias Ringstrom <tori@ringstrom.mine.nu>; ok markus@
b2bab059 704 - djm@cvs.openbsd.org 2002/02/12 12:44:46
705 [sftp-client.c]
706 Let overlapped upload path handle servers which reorder ACKs. This may be
707 permitted by the protocol spec; ok markus@
cb476289 708 - markus@cvs.openbsd.org 2002/02/13 00:28:13
709 [sftp-server.c]
710 handle SSH2_FILEXFER_ATTR_SIZE in SSH2_FXP_(F)SETSTAT; ok djm@
b984f12e 711 - markus@cvs.openbsd.org 2002/02/13 00:39:15
712 [readpass.c]
713 readpass.c is not longer from UCB, since we now use readpassphrase(3)
22e6c827 714 - djm@cvs.openbsd.org 2002/02/13 00:59:23
715 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp.h]
716 [sftp-int.c sftp-int.h]
717 API cleanup and backwards compat for filexfer v.0 servers; ok markus@
1656cbed 718 - (djm) Sync openbsd-compat with OpenBSD CVS too
9d6b6505 719 - (djm) Bug #106: Add --without-rpath configure option. Patch from
720 Nicolas.Williams@ubsw.com
f7d5d67f 721 - (tim) [configure.ac, defines.h ] add rpc/rpc.h for INADDR_LOOPBACK
722 on SCO OSR3
9d726f16 723
2a8a6488 72420020210
725 - (djm) OpenBSD CVS Sync
726 - deraadt@cvs.openbsd.org 2002/02/09 17:37:34
727 [pathnames.h session.c ssh.1 sshd.8 sshd_config ssh-keyscan.1]
728 move ssh config files to /etc/ssh
729 - (djm) Adjust portable Makefile.in tnd ssh-rand-helper.c o match
af98ced9 730 - deraadt@cvs.openbsd.org 2002/02/10 01:07:05
731 [readconf.h sshd.8]
732 more /etc/ssh; openbsd@davidkrause.com
2a8a6488 733
980c9344 73420020208
735 - (djm) OpenBSD CVS Sync
736 - markus@cvs.openbsd.org 2002/02/04 12:15:25
737 [sshd.c]
738 add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1,
739 fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@
4c646df4 740 - stevesk@cvs.openbsd.org 2002/02/04 20:41:16
741 [ssh-agent.1]
742 more sync for default ssh-add identities; ok markus@
375f867e 743 - djm@cvs.openbsd.org 2002/02/05 00:00:46
744 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c]
745 Add "-B" option to specify copy buffer length (default 32k); ok markus@
06ee33fb 746 - markus@cvs.openbsd.org 2002/02/05 14:32:55
747 [channels.c channels.h ssh.c]
748 merge channel_request() into channel_request_start()
7d5e8c46 749 - markus@cvs.openbsd.org 2002/02/06 14:22:42
750 [sftp.1]
751 sort options; ok mpech@, stevesk@
22be05a5 752 - mpech@cvs.openbsd.org 2002/02/06 14:27:23
753 [sftp.c]
754 sync usage() with manual.
5a4ae906 755 - markus@cvs.openbsd.org 2002/02/06 14:37:22
756 [session.c]
757 minor KNF
3a0d3d54 758 - markus@cvs.openbsd.org 2002/02/06 14:55:16
759 [channels.c clientloop.c serverloop.c ssh.c]
760 channel_new never returns NULL, mouring@; ok djm@
275a87f6 761 - markus@cvs.openbsd.org 2002/02/07 09:35:39
762 [ssh.c]
763 remove bogus comments
980c9344 764
bcc0381e 76520020205
983784a1 766 - (djm) Cleanup after sync:
767 - :%s/reverse_mapping_check/verify_reverse_mapping/g
bcc0381e 768 - (djm) OpenBSD CVS Sync
769 - stevesk@cvs.openbsd.org 2002/01/24 21:09:25
770 [channels.c misc.c misc.h packet.c]
771 add set_nodelay() to set TCP_NODELAY on a socket (prep for nagle tuning).
772 no nagle changes just yet; ok djm@ markus@
2ac91be1 773 - stevesk@cvs.openbsd.org 2002/01/24 21:13:23
774 [packet.c]
775 need misc.h for set_nodelay()
7d30579d 776 - markus@cvs.openbsd.org 2002/01/25 21:00:24
777 [sshconnect2.c]
778 unused include
087dea86 779 - markus@cvs.openbsd.org 2002/01/25 21:42:11
780 [ssh-dss.c ssh-rsa.c]
781 use static EVP_MAX_MD_SIZE buffers for EVP_DigestFinal; ok stevesk@
782 don't use evp_md->md_size, it's not public.
a209a158 783 - markus@cvs.openbsd.org 2002/01/25 22:07:40
784 [kex.c kexdh.c kexgex.c key.c mac.c]
785 use EVP_MD_size(evp_md) and not evp_md->md_size; ok steveks@
f9314d9a 786 - stevesk@cvs.openbsd.org 2002/01/26 16:44:22
787 [includes.h session.c]
788 revert code to add x11 localhost display authorization entry for
789 hostname/unix:d and uts.nodename/unix:d if nodename was different than
790 hostname. just add entry for unix:d instead. ok markus@
e6e573bd 791 - stevesk@cvs.openbsd.org 2002/01/27 14:57:46
792 [channels.c servconf.c servconf.h session.c sshd.8 sshd_config]
793 add X11UseLocalhost; ok markus@
75a624f0 794 - stevesk@cvs.openbsd.org 2002/01/27 18:08:17
795 [ssh.c]
796 handle simple case to identify FamilyLocal display; ok markus@
a2863956 797 - markus@cvs.openbsd.org 2002/01/29 14:27:57
798 [ssh-add.c]
799 exit 2 if no agent, exit 1 if list fails; debian#61078; ok djm@
bf4c5edc 800 - markus@cvs.openbsd.org 2002/01/29 14:32:03
801 [auth2.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c canohost.c]
802 [servconf.c servconf.h session.c sshd.8 sshd_config]
803 s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion;
804 ok stevesk@
8875ca97 805 - stevesk@cvs.openbsd.org 2002/01/29 16:29:02
806 [session.c]
807 limit subsystem length in log; ok markus@
8e3ce4dc 808 - markus@cvs.openbsd.org 2002/01/29 16:41:19
809 [ssh-add.1]
810 add DIAGNOSTICS; ok stevesk@
24932ee9 811 - markus@cvs.openbsd.org 2002/01/29 22:46:41
812 [session.c]
813 don't depend on servconf.c; ok djm@
16210ef7 814 - markus@cvs.openbsd.org 2002/01/29 23:50:37
815 [scp.1 ssh.1]
816 mention exit status; ok stevesk@
215ced77 817 - markus@cvs.openbsd.org 2002/01/31 13:35:11
818 [kexdh.c kexgex.c]
819 cross check announced key type and type from key blob
d01c63bb 820 - markus@cvs.openbsd.org 2002/01/31 15:00:05
821 [serverloop.c]
822 no need for WNOHANG; ok stevesk@
7899c98f 823 - markus@cvs.openbsd.org 2002/02/03 17:53:25
824 [auth1.c serverloop.c session.c session.h]
825 don't use channel_input_channel_request and callback
826 use new server_input_channel_req() instead:
827 server_input_channel_req does generic request parsing on server side
828 session_input_channel_req handles just session specific things now
829 ok djm@
8034b5cd 830 - markus@cvs.openbsd.org 2002/02/03 17:55:55
831 [channels.c channels.h]
832 remove unused channel_input_channel_request
05ca0898 833 - markus@cvs.openbsd.org 2002/02/03 17:58:21
834 [channels.c channels.h ssh.c]
835 generic callbacks are not really used, remove and
836 add a callback for msg of type SSH2_MSG_CHANNEL_OPEN_CONFIRMATION
837 ok djm@
0dbdc37c 838 - markus@cvs.openbsd.org 2002/02/03 17:59:23
839 [sshconnect2.c]
840 more cross checking if announced vs. used key type; ok stevesk@
3b5a1b05 841 - stevesk@cvs.openbsd.org 2002/02/03 22:35:57
842 [ssh.1 sshd.8]
843 some KeepAlive cleanup/clarify; ok markus@
49ebf326 844 - stevesk@cvs.openbsd.org 2002/02/03 23:22:59
845 [ssh-agent.1]
846 ssh-add also adds $HOME/.ssh/id_rsa and $HOME/.ssh/id_dsa now.
762f5ea2 847 - stevesk@cvs.openbsd.org 2002/02/04 00:53:39
848 [ssh-agent.c]
849 unneeded includes
67fa09f5 850 - markus@cvs.openbsd.org 2002/02/04 11:58:10
851 [auth2.c]
852 cross checking of announced vs actual pktype in pubkey/hostbaed auth;
853 ok stevesk@
5eaf8578 854 - markus@cvs.openbsd.org 2002/02/04 12:15:25
855 [log.c log.h readconf.c servconf.c]
856 add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1,
857 fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@
a445d432 858 - stevesk@cvs.openbsd.org 2002/02/04 20:41:16
859 [ssh-add.1]
860 more sync for default ssh-add identities; ok markus@
a96fd7c2 861 - djm@cvs.openbsd.org 2002/02/04 21:53:12
862 [sftp.1 sftp.c]
863 Add "-P" option to directly connect to a local sftp-server. Should be
864 useful for regression testing; ok markus@
86e23f3e 865 - djm@cvs.openbsd.org 2002/02/05 00:00:46
866 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c]
867 Add "-B" option to specify copy buffer length (default 32k); ok markus@
bcc0381e 868
8d7324af 86920020130
870 - (djm) Delay PRNG seeding until we need it in ssh-keygen, from markus@
70e2f2f3 871 - (tim) [configure.ac] fix logic on when ssh-rand-helper is installed.
872 [sshd_config] put back in line that tells what PATH was compiled into sshd.
8d7324af 873
90bab5a8 87420020125
9b7fcaf0 875 - (djm) Don't grab Xserver or pointer by default. x11-ssh-askpass doesn't
876 and grabbing can cause deadlocks with kinput2.
90bab5a8 877
533845df 87820020124
879 - (stevesk) Makefile.in: bug #61; delete commented line for now.
880
906e811b 88120020123
882 - (djm) Fix non-standard shell syntax in autoconf. Patch from
883 Dave Dykstra <dwd@bell-labs.com>
846f83ab 884 - (stevesk) fix --with-zlib=
eb5d7ff6 885 - (djm) Use case statements in autoconf to clean up some tests
5b6c4ceb 886 - (bal) reverted out of 5/2001 change to atexit(). I assume I
887 did it to handle SonyOS. If that is the case than we will
888 do a special case for them.
906e811b 889
f1b0ecc3 89020020122
891 - (djm) autoconf hacking:
892 - We don't support --without-zlib currently, so don't allow it.
893 - Rework cryptographic random number support detection. We now detect
894 whether OpenSSL seeds itself. If it does, then we don't bother with
895 the ssh-rand-helper program. You can force the use of ssh-rand-helper
896 using the --with-rand-helper configure argument
897 - Simplify and clean up ssh-rand-helper configuration
9780116c 898 - Add OpenSSL sanity check: verify that header version matches version
899 reported by library
49d7ed32 900 - (djm) Fix some bugs I introduced into ssh-rand-helper yesterday
3dc93cd8 901 - OpenBSD CVS Sync
902 - djm@cvs.openbsd.org 2001/12/21 08:52:22
903 [ssh-keygen.1 ssh-keygen.c]
904 Remove default (rsa1) key type; ok markus@
f9654cd7 905 - djm@cvs.openbsd.org 2001/12/21 08:53:45
906 [readpass.c]
907 Avoid interruptable passphrase read; ok markus@
67656ffc 908 - djm@cvs.openbsd.org 2001/12/21 10:06:43
909 [ssh-add.1 ssh-add.c]
910 Try all standard key files (id_rsa, id_dsa, identity) when invoked with
911 no arguments; ok markus@
b0ce9259 912 - markus@cvs.openbsd.org 2001/12/21 12:17:33
913 [serverloop.c]
914 remove ifdef for USE_PIPES since fdin != fdout; ok djm@
0e0bba68 915 - deraadt@cvs.openbsd.org 2001/12/24 07:29:43
916 [ssh-add.c]
917 try all listed keys.. how did this get broken?
e13b4278 918 - markus@cvs.openbsd.org 2001/12/25 18:49:56
919 [key.c]
920 be more careful on allocation
45c49544 921 - markus@cvs.openbsd.org 2001/12/25 18:53:00
922 [auth1.c]
923 be more carefull on allocation
bb28e836 924 - markus@cvs.openbsd.org 2001/12/27 18:10:29
925 [ssh-keygen.c]
926 -t is only needed for key generation (unbreaks -i, -e, etc).
b775c6f2 927 - markus@cvs.openbsd.org 2001/12/27 18:22:16
928 [auth1.c authfile.c auth-rsa.c dh.c kexdh.c kexgex.c key.c rsa.c]
929 [scard.c ssh-agent.c sshconnect1.c sshd.c ssh-dss.c]
930 call fatal() for openssl allocation failures
135113a3 931 - stevesk@cvs.openbsd.org 2001/12/27 18:22:53
932 [sshd.8]
933 clarify -p; ok markus@
cf184a44 934 - markus@cvs.openbsd.org 2001/12/27 18:26:13
935 [authfile.c]
936 missing include
108d362e 937 - markus@cvs.openbsd.org 2001/12/27 19:37:23
938 [dh.c kexdh.c kexgex.c]
939 always use BN_clear_free instead of BN_free
dc421aa3 940 - markus@cvs.openbsd.org 2001/12/27 19:54:53
941 [auth1.c auth.h auth-rh-rsa.c]
942 auth_rhosts_rsa now accept generic keys.
95500969 943 - markus@cvs.openbsd.org 2001/12/27 20:39:58
944 [auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h]
945 [serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c]
946 get rid of packet_integrity_check, use packet_done() instead.
3456d3c7 947 - markus@cvs.openbsd.org 2001/12/28 12:14:27
20b279e6 948 [auth1.c auth2.c auth2-chall.c auth-rsa.c channels.c clientloop.c]
949 [kex.c kexdh.c kexgex.c packet.c packet.h serverloop.c session.c]
950 [ssh.c sshconnect1.c sshconnect2.c sshd.c]
3456d3c7 951 s/packet_done/packet_check_eom/ (end-of-message); ok djm@
20b279e6 952 - markus@cvs.openbsd.org 2001/12/28 13:57:33
953 [auth1.c kexdh.c kexgex.c packet.c packet.h sshconnect1.c sshd.c]
954 packet_get_bignum* no longer returns a size
4ef6f649 955 - markus@cvs.openbsd.org 2001/12/28 14:13:13
956 [bufaux.c bufaux.h packet.c]
957 buffer_get_bignum: int -> void
54a5250f 958 - markus@cvs.openbsd.org 2001/12/28 14:50:54
959 [auth1.c auth-rsa.c channels.c dispatch.c kex.c kexdh.c kexgex.c]
960 [packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c]
961 [sshconnect2.c sshd.c]
962 packet_read* no longer return the packet length, since it's not used.
7819b5c3 963 - markus@cvs.openbsd.org 2001/12/28 15:06:00
964 [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
965 [dispatch.h kex.c kex.h serverloop.c ssh.c sshconnect2.c]
966 remove plen from the dispatch fn. it's no longer used.
60015649 967 - stevesk@cvs.openbsd.org 2001/12/28 22:37:48
968 [ssh.1 sshd.8]
969 document LogLevel DEBUG[123]; ok markus@
20905a8e 970 - stevesk@cvs.openbsd.org 2001/12/29 21:56:01
971 [authfile.c channels.c compress.c packet.c sftp-server.c]
972 [ssh-agent.c ssh-keygen.c]
973 remove unneeded casts and some char->u_char cleanup; ok markus@
6c79c353 974 - stevesk@cvs.openbsd.org 2002/01/03 04:11:08
975 [ssh_config]
976 grammar in comment
b4047251 977 - stevesk@cvs.openbsd.org 2002/01/04 17:59:17
978 [readconf.c servconf.c]
979 remove #ifdef _PATH_XAUTH/#endif; ok markus@
0f84fe37 980 - stevesk@cvs.openbsd.org 2002/01/04 18:14:16
981 [servconf.c sshd.8]
982 protocol 2 HostKey code default is now /etc/ssh_host_rsa_key and
983 /etc/ssh_host_dsa_key like we have in sshd_config. ok markus@
8341f420 984 - markus@cvs.openbsd.org 2002/01/05 10:43:40
985 [channels.c]
986 fix hanging x11 channels for rejected cookies (e.g.
987 XAUTHORITY=/dev/null xbiff) bug #36, based on patch from
988 djast@cs.toronto.edu
cb362b5e 989 - stevesk@cvs.openbsd.org 2002/01/05 21:51:56
990 [ssh.1 sshd.8]
991 some missing and misplaced periods
4ccb828d 992 - markus@cvs.openbsd.org 2002/01/09 13:49:27
993 [ssh-keygen.c]
994 append \n only for public keys
0c0738d5 995 - markus@cvs.openbsd.org 2002/01/09 17:16:00
996 [channels.c]
997 merge channel_pre_open_15/channel_pre_open_20; ok provos@
9c50edcf 998 - markus@cvs.openbsd.org 2002/01/09 17:26:35
999 [channels.c nchan.c]
1000 replace buffer_consume(b, buffer_len(b)) with buffer_clear(b);
1001 ok provos@
99416ceb 1002 - markus@cvs.openbsd.org 2002/01/10 11:13:29
1003 [serverloop.c]
1004 skip client_alive_check until there are channels; ok beck@
3d209bbe 1005 - markus@cvs.openbsd.org 2002/01/10 11:24:04
1006 [clientloop.c]
1007 handle SSH2_MSG_GLOBAL_REQUEST (just reply with failure); ok djm@
3c27606d 1008 - markus@cvs.openbsd.org 2002/01/10 12:38:26
1009 [nchan.c]
1010 remove dead code (skip drain)
6d566d33 1011 - markus@cvs.openbsd.org 2002/01/10 12:47:59
1012 [nchan.c]
1013 more unused code (with channels.c:1.156)
5a5f4c37 1014 - markus@cvs.openbsd.org 2002/01/11 10:31:05
1015 [packet.c]
1016 handle received SSH2_MSG_UNIMPLEMENTED messages; ok djm@
781a02b8 1017 - markus@cvs.openbsd.org 2002/01/11 13:36:43
1018 [ssh2.h]
1019 add defines for msg type ranges
6367063f 1020 - markus@cvs.openbsd.org 2002/01/11 13:39:36
1021 [auth2.c dispatch.c dispatch.h kex.c]
1022 a single dispatch_protocol_error() that sends a message of
1023 type 'UNIMPLEMENTED'
1024 dispatch_range(): set handler for a ranges message types
1025 use dispatch_protocol_ignore() for authentication requests after
1026 successful authentication (the drafts requirement).
1027 serverloop/clientloop now send a 'UNIMPLEMENTED' message instead
1028 of exiting.
70499440 1029 - markus@cvs.openbsd.org 2002/01/11 20:14:11
1030 [auth2-chall.c auth-skey.c]
1031 use strlcpy not strlcat; mouring@
a62ebe1f 1032 - markus@cvs.openbsd.org 2002/01/11 23:02:18
1033 [readpass.c]
1034 use _PATH_TTY
bd2d2ac4 1035 - markus@cvs.openbsd.org 2002/01/11 23:02:51
1036 [auth2-chall.c]
1037 use snprintf; mouring@
7ef24c8c 1038 - markus@cvs.openbsd.org 2002/01/11 23:26:30
1039 [auth-skey.c]
1040 use snprintf; mouring@
68a7e648 1041 - markus@cvs.openbsd.org 2002/01/12 13:10:29
1042 [auth-skey.c]
1043 undo local change
95f0a918 1044 - provos@cvs.openbsd.org 2002/01/13 17:27:07
1045 [ssh-agent.c]
1046 change to use queue.h macros; okay markus@
3469eac4 1047 - markus@cvs.openbsd.org 2002/01/13 17:57:37
1048 [auth2.c auth2-chall.c compat.c sshconnect2.c sshd.c]
1049 use buffer API and avoid static strings of fixed size;
1050 ok provos@/mouring@
368e9dfc 1051 - markus@cvs.openbsd.org 2002/01/13 21:31:20
1052 [channels.h nchan.c]
1053 add chan_set_[io]state(), order states, state is now an u_int,
1054 simplifies debugging messages; ok provos@
3057c23b 1055 - markus@cvs.openbsd.org 2002/01/14 13:22:35
1056 [nchan.c]
1057 chan_send_oclose1() no longer calls chan_shutdown_write(); ok provos@
1058 - markus@cvs.openbsd.org 2002/01/14 13:34:07
1059 [nchan.c]
1060 merge chan_[io]buf_empty[12]; ok provos@
668a91b7 1061 - markus@cvs.openbsd.org 2002/01/14 13:40:10
1062 [nchan.c]
1063 correct fn names for ssh2, do not switch from closed to closed;
1064 ok provos@
3c9f1ecd 1065 - markus@cvs.openbsd.org 2002/01/14 13:41:13
1066 [nchan.c]
1067 remove duplicated code; ok provos@
70bef40e 1068 - markus@cvs.openbsd.org 2002/01/14 13:55:55
1069 [channels.c channels.h nchan.c]
1070 remove function pointers for events, remove chan_init*; ok provos@
8ab5f6b2 1071 - markus@cvs.openbsd.org 2002/01/14 13:57:03
1072 [channels.h nchan.c]
1073 (c) 2002
5641aefa 1074 - markus@cvs.openbsd.org 2002/01/16 13:17:51
1075 [channels.c channels.h serverloop.c ssh.c]
1076 wrapper for channel_setup_fwd_listener
ac10636f 1077 - stevesk@cvs.openbsd.org 2002/01/16 17:40:23
1078 [sshd_config]
1079 The stategy now used for options in the default sshd_config shipped
1080 with OpenSSH is to specify options with their default value where
1081 possible, but leave them commented. Uncommented options change a
1082 default value. Subsystem is currently the only default option
1083 changed. ok markus@
cf5a07a8 1084 - stevesk@cvs.openbsd.org 2002/01/16 17:42:33
1085 [ssh.1]
1086 correct defaults for -i/IdentityFile; ok markus@
1bbbc136 1087 - stevesk@cvs.openbsd.org 2002/01/16 17:55:33
1088 [ssh_config]
1089 correct some commented defaults. add Ciphers default. ok markus@
4267abfd 1090 - stevesk@cvs.openbsd.org 2002/01/17 04:27:37
1091 [log.c]
1092 casts to silence enum type warnings for bugzilla bug 37; ok markus@
ba218fbe 1093 - stevesk@cvs.openbsd.org 2002/01/18 17:14:16
1094 [sshd.8]
1095 correct Ciphers default; paola.mannaro@ubs.com
e6207598 1096 - stevesk@cvs.openbsd.org 2002/01/18 18:14:17
1097 [authfd.c bufaux.c buffer.c cipher.c packet.c ssh-agent.c ssh-keygen.c]
1098 unneeded cast cleanup; ok markus@
dfafef8f 1099 - stevesk@cvs.openbsd.org 2002/01/18 20:46:34
1100 [sshd.8]
1101 clarify Allow(Groups|Users) and Deny(Groups|Users); suggestion from
1102 allard@oceanpark.com; ok markus@
616a6b93 1103 - markus@cvs.openbsd.org 2002/01/21 15:13:51
1104 [sshconnect.c]
1105 use read_passphrase+ECHO in confirm(), allows use of ssh-askpass
1106 for hostkey confirm.
55f9eebd 1107 - markus@cvs.openbsd.org 2002/01/21 22:30:12
1108 [cipher.c compat.c myproposal.h]
1109 remove "rijndael-*", just use "aes-" since this how rijndael is called
1110 in the drafts; ok stevesk@
32e7d71f 1111 - markus@cvs.openbsd.org 2002/01/21 23:27:10
1112 [channels.c nchan.c]
1113 cleanup channels faster if the are empty and we are in drain-state;
1114 ok deraadt@
3a454b6a 1115 - stevesk@cvs.openbsd.org 2002/01/22 02:52:41
1116 [servconf.c]
1117 typo in error message; from djast@cs.toronto.edu
4ca007b2 1118 - (djm) Make auth2-pam.c compile again after dispatch.h and packet.h
1119 changes
507c4f2e 1120 - (djm) Recent Glibc includes an incompatible sys/queue.h. Treat it as
1121 bogus in configure
187cd1fa 1122 - (djm) Use local sys/queue.h if necessary in ssh-agent.c
f1b0ecc3 1123
40f64e6f 112420020121
1125 - (djm) Rework ssh-rand-helper:
1126 - Reduce quantity of ifdef code, in preparation for ssh_rand_conf
1127 - Always seed from system calls, even when doing PRNGd seeding
1128 - Tidy and comment #define knobs
1129 - Remove unused facility for multiple runs through command list
1130 - KNF, cleanup, update copyright
1131
088cdc23 113220020114
1133 - (djm) Bug #50 - make autoconf entropy path checks more robust
1134
760b35a6 113520020108
1136 - (djm) Merge Cygwin copy_environment with do_pam_environment, removing
1137 fixed env var size limit in the process. Report from Corinna Vinschen
1138 <vinschen@redhat.com>
5cbceb3f 1139 - (stevesk) defines.h: use "/var/spool/sockets/X11/%u" for HP-UX. does
1140 not depend on transition links. from Lutz Jaenicke.
760b35a6 1141
1d2a4613 114220020106
1143 - (stevesk) defines.h: determine _PATH_UNIX_X; currently "/tmp/.X11-unix/X%u"
1144 for all platforms except HP-UX, which is "/usr/spool/sockets/X11/%u".
1145
d93656c9 114620020105
1147 - (bal) NCR requies use_pipes to operate correctly.
29525240 1148 - (stevesk) fix spurious ; from NCR change.
d93656c9 1149
554e28b2 115020020103
1151 - (djm) Use bigcrypt() on systems with SCO_PROTECTED_PW. Patch from
1152 Roger Cornelius <rac@tenzing.org>
1153
e9571a2c 115420011229
1155 - (djm) Apply Cygwin pointer deref fix from Corinna Vinschen
1156 <vinschen@redhat.com> Could be abused to guess valid usernames
929fb284 1157 - (djm) Typo in contrib/cygwin/README Fix from Corinna Vinschen
1158 <vinschen@redhat.com>
e9571a2c 1159
760edf28 116020011228
1161 - (djm) Remove recommendation to use GNU make, we should support most
1162 make programs.
1163
7bec72bc 116420011225
1165 - (stevesk) [Makefile.in ssh-rand-helper.c]
1166 portable lib and __progname support for ssh-rand-helper; ok djm@
1167
b8291fa0 116820011223
1169 - (bal) Removed contrib/chroot.diff and noted in contrib/README that it
1170 was not being maintained.
1171
46058ce2 117220011222
1173 - (djm) Ignore fix & patchlevel in OpenSSL version check. Patch from
1174 solar@openwall.com
1175 - (djm) Rework entropy code. If the OpenSSL PRNG is has not been
1176 internally seeded, execute a subprogram "ssh-rand-helper" to obtain
1177 some entropy for us. Rewrite the old in-process entropy collecter as
1178 an example ssh-rand-helper.
1179 - (djm) Always perform ssh_prng_cmds path lookups in configure, even if
1180 we don't end up using ssh_prng_cmds (so we always get a valid file)
1181
5fb9865a 118220011221
1183 - (djm) Add option to gnome-ssh-askpass to stop it from grabbing the X
1184 server. I have found this necessary to avoid server hangs with X input
1185 extensions (e.g. kinput2). Enable by setting the environment variable
1186 "GNOME_SSH_ASKPASS_NOGRAB"
805e659f 1187 - OpenBSD CVS Sync
1188 - stevesk@cvs.openbsd.org 2001/12/08 17:49:28
1189 [channels.c pathnames.h]
1190 use only one path to X11 UNIX domain socket vs. an array of paths
1191 to try. report from djast@cs.toronto.edu. ok markus@
2f293d43 1192 - markus@cvs.openbsd.org 2001/12/09 18:45:56
1193 [auth2.c auth2-chall.c auth.h]
1194 add auth2_challenge_stop(), simplifies cleanup of kbd-int sessions,
1195 fixes memleak.
5e8948af 1196 - stevesk@cvs.openbsd.org 2001/12/10 16:45:04
1197 [sshd.c]
1198 possible fd leak on error; ok markus@
cdc95d6e 1199 - markus@cvs.openbsd.org 2001/12/10 20:34:31
1200 [ssh-keyscan.c]
1201 check that server supports v1 for -t rsa1, report from wirth@dfki.de
fb396518 1202 - jakob@cvs.openbsd.org 2001/12/18 10:04:21
1203 [auth.h hostfile.c hostfile.h]
1204 remove auth_rsa_read_key, make hostfile_ready_key non static; ok markus@
306feb91 1205 - jakob@cvs.openbsd.org 2001/12/18 10:05:15
1206 [auth2.c]
1207 log fingerprint on successful public key authentication; ok markus@
46df736f 1208 - jakob@cvs.openbsd.org 2001/12/18 10:06:24
1209 [auth-rsa.c]
1210 log fingerprint on successful public key authentication, simplify
1211 usage of key structs; ok markus@
184eed6a 1212 - deraadt@cvs.openbsd.org 2001/12/19 07:18:56
1213 [auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h]
1214 [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c]
1215 [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c]
1216 [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c]
1217 [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c]
1218 [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c]
1219 [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config]
1220 [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c]
1221 basic KNF done while i was looking for something else
a10be357 1222 - markus@cvs.openbsd.org 2001/12/19 16:09:39
1223 [serverloop.c]
1224 fix race between SIGCHLD and select with an additional pipe. writing
1225 to the pipe on SIGCHLD wakes up select(). using pselect() is not
1226 portable and siglongjmp() ugly. W. R. Stevens suggests similar solution.
1227 initial idea by pmenage@ensim.com; ok deraadt@, djm@
6c0fa2b1 1228 - stevesk@cvs.openbsd.org 2001/12/19 17:16:13
1229 [authfile.c bufaux.c bufaux.h buffer.c buffer.h packet.c packet.h ssh.c]
1230 change the buffer/packet interface to use void* vs. char*; ok markus@
ac151b18 1231 - markus@cvs.openbsd.org 2001/12/20 16:37:29
1232 [channels.c channels.h session.c]
1233 setup x11 listen socket for just one connect if the client requests so.
1234 (v2 only, but the openssh client does not support this feature).
24ca6821 1235 - djm@cvs.openbsd.org 2001/12/20 22:50:24
1236 [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
1237 [dispatch.h kex.c kex.h packet.c packet.h serverloop.c ssh.c]
1238 [sshconnect2.c]
1239 Conformance fix: we should send failing packet sequence number when
1240 responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by
1241 yakk@yakk.dot.net; ok markus@
5fb9865a 1242
c9d0ad9b 124320011219
1244 - (stevesk) OpenBSD CVS sync X11 localhost display
1245 - stevesk@cvs.openbsd.org 2001/11/29 14:10:51
1246 [channels.h channels.c session.c]
1247 sshd X11 fake server will now listen on localhost by default:
1248 $ echo $DISPLAY
1249 localhost:12.0
1250 $ netstat -an|grep 6012
1251 tcp 0 0 127.0.0.1.6012 *.* LISTEN
1252 tcp6 0 0 ::1.6012 *.* LISTEN
1253 sshd_config gatewayports=yes can be used to revert back to the old
1254 behavior. will control this with another option later. ok markus@
1255 - stevesk@cvs.openbsd.org 2001/12/19 08:43:11
1256 [includes.h session.c]
1257 handle utsname.nodename case for FamilyLocal X authorization; ok markus@
1258
3f3ac025 125920011207
1260 - (bal) PCRE no longer required. Banished from the source along with
1261 fake-regex.h
c20f63d3 1262 - (bal) OpenBSD CVS Sync
1263 - stevesk@cvs.openbsd.org 2001/12/06 18:02:32
1264 [channels.c sshconnect.c]
1265 shutdown(sock, SHUT_RDWR) not needed here; ok markus@
74860245 1266 - stevesk@cvs.openbsd.org 2001/12/06 18:09:23
1267 [channels.c session.c]
1268 strncpy->strlcpy. remaining strncpy's are necessary. ok markus@
d24631c9 1269 - stevesk@cvs.openbsd.org 2001/12/06 18:20:32
1270 [channels.c]
1271 disable nagle for X11 fake server and client TCPs. from netbsd.
1272 ok markus@
3f3ac025 1273
127420011206
6056eb35 1275 - (bal) OpenBSD CVS Sync
1276 - deraadt@cvs.openbsd.org 2001/11/14 20:45:08
1277 [sshd.c]
1278 errno saving wrapping in a signal handler
0408c978 1279 - markus@cvs.openbsd.org 2001/11/16 12:46:13
1280 [ssh-keyscan.c]
1281 handle empty lines instead of dumping core; report from sha@sha-1.net
17a3011c 1282 - stevesk@cvs.openbsd.org 2001/11/17 19:14:34
1283 [auth2.c auth.c readconf.c servconf.c ssh-agent.c ssh-keygen.c]
1284 enum/int type cleanup where it made sense to do so; ok markus@
7ace8c3b 1285 - markus@cvs.openbsd.org 2001/11/19 11:20:21
1286 [sshd.c]
1287 fd leak on HUP; ok stevesk@
8666316a 1288 - stevesk@cvs.openbsd.org 2001/11/19 18:40:46
1289 [ssh-agent.1]
1290 clarify/state that private keys are not exposed to clients using the
1291 agent; ok markus@
44c2ab73 1292 - mpech@cvs.openbsd.org 2001/11/19 19:02:16
1293 [deattack.c radix.c]
1294 kill more registers
1295 millert@ ok
2f98d223 1296 - markus@cvs.openbsd.org 2001/11/21 15:51:24
1297 [key.c]
1298 mem leak
c840d0ad 1299 - stevesk@cvs.openbsd.org 2001/11/21 18:49:14
1300 [ssh-keygen.1]
1301 more on passphrase construction; ok markus@
f48e63c8 1302 - stevesk@cvs.openbsd.org 2001/11/22 05:27:29
1303 [ssh-keyscan.c]
1304 don't use "\n" in fatal()
7a934d1b 1305 - markus@cvs.openbsd.org 2001/11/22 12:34:22
1306 [clientloop.c serverloop.c sshd.c]
1307 volatile sig_atomic_t
58d94604 1308 - stevesk@cvs.openbsd.org 2001/11/29 19:06:39
1309 [channels.h]
1310 remove dead function prototype; ok markus@
2975f58d 1311 - markus@cvs.openbsd.org 2001/11/29 22:08:48
1312 [auth-rsa.c]
1313 fix protocol error: send 'failed' message instead of a 2nd challenge
1314 (happens if the same key is in authorized_keys twice).
1315 reported Ralf_Meister@genua.de; ok djm@
b48eeb07 1316 - stevesk@cvs.openbsd.org 2001/11/30 20:39:28
1317 [ssh.c]
1318 sscanf() length dependencies are clearer now; can also shrink proto
1319 and data if desired, but i have not done that. ok markus@
2548961d 1320 - markus@cvs.openbsd.org 2001/12/01 21:41:48
1321 [session.c sshd.8]
1322 don't pass user defined variables to /usr/bin/login
947b64c7 1323 - deraadt@cvs.openbsd.org 2001/12/02 02:08:32
1324 [sftp-common.c]
1325 zap };
010f9726 1326 - itojun@cvs.openbsd.org 2001/12/05 03:50:01
1327 [clientloop.c serverloop.c sshd.c]
1328 deal with LP64 printf issue with sig_atomic_t. from thorpej
d5bb9418 1329 - itojun@cvs.openbsd.org 2001/12/05 03:56:39
1330 [auth1.c auth2.c canohost.c channels.c deattack.c packet.c scp.c
1331 sshconnect2.c]
1332 make it compile with more strict prototype checking
6aacefa7 1333 - deraadt@cvs.openbsd.org 2001/12/05 10:06:12
1334 [authfd.c authfile.c bufaux.c channels.c compat.c kex.c kexgex.c
1335 key.c misc.c packet.c servconf.c ssh-agent.c sshconnect2.c
1336 sshconnect.c sshd.c ssh-dss.c ssh-keygen.c ssh-rsa.c]
1337 minor KNF
663ebb32 1338 - markus@cvs.openbsd.org 2001/12/05 15:04:48
1339 [version.h]
1340 post 3.0.2
6a92533a 1341 - markus@cvs.openbsd.org 2001/12/05 16:54:51
1342 [compat.c match.c match.h]
1343 make theo and djm happy: bye bye regexp
2717fa0f 1344 - markus@cvs.openbsd.org 2001/12/06 13:30:06
1345 [servconf.c servconf.h sshd.8 sshd.c]
1346 add -o to sshd, too. ok deraadt@
1347 - (bal) Minor white space fix up in servconf.c
6056eb35 1348
ffb8d130 134920011126
1350 - (tim) [contrib/cygwin/README, openbsd-compat/bsd-cygwin_util.c,
1351 openbsd-compat/bsd-cygwin_util.h, openbsd-compat/daemon.c]
1352 Allow SSHD to install as service under WIndows 9x/Me
1353 [configure.ac] Fix to allow linking against PCRE on Cygwin
1354 Patches by Corinna Vinschen <vinschen@redhat.com>
1355
20716479 135620011115
1357 - (djm) Fix IPv4 default in ssh-keyscan. Spotted by Dan Astoorian
1358 <djast@cs.toronto.edu> Fix from markus@
e41f14ae 1359 - (djm) Release 3.0.1p1
20716479 1360
9aba5a4d 136120011113
1362 - (djm) Fix early (and double) free of remote user when using Kerberos.
1363 Patch from Simon Wilkinson <simon@sxw.org.uk>
19e810f6 1364 - (djm) AIX login{success,failed} changes. Move loginsuccess call to
1365 do_authenticated. Call loginfailed for protocol 2 failures > MAX like
1366 we do for protocol 1. Reports from Ralf Wenk <wera0003@fh-karlsruhe.de>,
1367 K.Wolkersdorfer@fz-juelich.de and others
ede8cea6 1368 - (djm) OpenBSD CVS Sync
1369 - dugsong@cvs.openbsd.org 2001/11/11 18:47:10
1370 [auth-krb5.c]
1371 fix krb5 authorization check. found by <jhawk@MIT.EDU>. from
1372 art@, deraadt@ ok
b0248360 1373 - markus@cvs.openbsd.org 2001/11/12 11:17:07
1374 [servconf.c]
1375 enable authorized_keys2 again. tested by fries@
0bbf2240 1376 - markus@cvs.openbsd.org 2001/11/13 02:03:57
1377 [version.h]
1378 enter 3.0.1
86b164b3 1379 - (djm) Bump RPM package versions
9aba5a4d 1380
3e4e3bc8 138120011112
1382 - (djm) Makefile correctness fix from Mark D. Baushke <mdb@juniper.net>
d36ae718 1383 - (djm) Cygwin config patch from Corinna Vinschen <vinschen@redhat.com>
9ae3f727 1384 - OpenBSD CVS Sync
1385 - markus@cvs.openbsd.org 2001/10/24 08:41:41
1386 [sshd.c]
1387 mention remote port in debug message
f103187f 1388 - markus@cvs.openbsd.org 2001/10/24 08:41:20
1389 [ssh.c]
1390 remove unused
67b75437 1391 - markus@cvs.openbsd.org 2001/10/24 08:51:35
1392 [clientloop.c ssh.c]
1393 ignore SIGPIPE early, makes ssh work if agent dies, netbsd-pr via itojun@
c6940381 1394 - markus@cvs.openbsd.org 2001/10/24 19:57:40
1395 [clientloop.c]
1396 make ~& (backgrounding) work again for proto v1; add support ~& for v2, too
f564d016 1397 - markus@cvs.openbsd.org 2001/10/25 21:14:32
1398 [ssh-keygen.1 ssh-keygen.c]
1399 better docu for fingerprinting, ok deraadt@
e8d59b4d 1400 - markus@cvs.openbsd.org 2001/10/29 19:27:15
1401 [sshconnect2.c]
1402 hostbased: check for client hostkey before building chost
03cf595c 1403 - markus@cvs.openbsd.org 2001/10/30 20:29:09
1404 [ssh.1]
1405 ssh.1
b4b701be 1406 - markus@cvs.openbsd.org 2001/11/07 16:03:17
1407 [packet.c packet.h sshconnect2.c]
1408 pad using the padding field from the ssh2 packet instead of sending
1409 extra ignore messages. tested against several other ssh servers.
10f22cd7 1410 - markus@cvs.openbsd.org 2001/11/07 21:40:21
1411 [ssh-rsa.c]
1412 ssh_rsa_sign/verify: SSH_BUG_SIGBLOB not supported
abc4e9a7 1413 - markus@cvs.openbsd.org 2001/11/07 22:10:28
1414 [ssh-dss.c ssh-rsa.c]
1415 missing free and sync dss/rsa code.
713d61f7 1416 - markus@cvs.openbsd.org 2001/11/07 22:12:01
1417 [sshd.8]
1418 s/Keepalive/KeepAlive/; from openbsd@davidkrause.com
f98585b0 1419 - markus@cvs.openbsd.org 2001/11/07 22:41:51
1420 [auth2.c auth-rh-rsa.c]
1421 unused includes
27c47c0a 1422 - markus@cvs.openbsd.org 2001/11/07 22:53:21
1423 [channels.h]
1424 crank c->path to 256 so they can hold a full hostname; dwd@bell-labs.com
56b551e2 1425 - markus@cvs.openbsd.org 2001/11/08 10:51:08
1426 [readpass.c]
1427 don't strdup too much data; from gotoh@taiyo.co.jp; ok millert.
dd58cb5e 1428 - markus@cvs.openbsd.org 2001/11/08 17:49:53
1429 [ssh.1]
1430 mention setuid root requirements; noted by cnorris@csc.UVic.ca; ok stevesk@
fad3754c 1431 - markus@cvs.openbsd.org 2001/11/08 20:02:24
1432 [auth.c]
1433 don't print ROOT in CAPS for the authentication messages, i.e.
1434 Accepted publickey for ROOT from 127.0.0.1 port 42734 ssh2
1435 becomes
1436 Accepted publickey for root from 127.0.0.1 port 42734 ssh2
b3ad8fe6 1437 - markus@cvs.openbsd.org 2001/11/09 18:59:23
1438 [clientloop.c serverloop.c]
1439 don't memset too much memory, ok millert@
1440 original patch from jlk@kamens.brookline.ma.us via nalin@redhat.com
ac28afd8 1441 - markus@cvs.openbsd.org 2001/11/10 13:19:45
1442 [sshd.c]
e15895cd 1443 cleanup libwrap support (remove bogus comment, bogus close(), add
1444 debug, etc).
5d4446bf 1445 - markus@cvs.openbsd.org 2001/11/10 13:22:42
1446 [ssh-rsa.c]
1447 KNF (unexpand)
ec413a68 1448 - markus@cvs.openbsd.org 2001/11/10 13:37:20
1449 [packet.c]
1450 remove extra debug()
5df83e07 1451 - markus@cvs.openbsd.org 2001/11/11 13:02:31
1452 [servconf.c]
e15895cd 1453 make AuthorizedKeysFile2 fallback to AuthorizedKeysFile if
1454 AuthorizedKeysFile is specified.
1455 - (djm) Reorder portable-specific server options so that they come first.
1456 This should help reduce diff collisions for new server options (as they
1457 will appear at the end)
3e4e3bc8 1458
78afd1dc 145920011109
1460 - (stevesk) auth-pam.c: use do_pam_authenticate(PAM_DISALLOW_NULL_AUTHTOK)
1461 if permit_empty_passwd == 0 so null password check cannot be bypassed.
1462 jayaraj@amritapuri.com OpenBSD bug 2168
30f60c34 1463 - markus@cvs.openbsd.org 2001/11/09 19:08:35
1464 [sshd.c]
1465 remove extra trailing dot from log message; pilot@naughty.monkey.org
1466
7c6d759d 146720011103
1468 - (tim) [ contrib/caldera/openssh.spec contrib/caldera/sshd.init] Updates
1469 from Raymund Will <ray@caldera.de>
1470 [acconfig.h configure.in] Clean up login checks.
1471 Problem reported by Jim Knoble <jmknoble@pobox.com>
1472
147320011101
58389b85 1474 - (djm) Compat define for OpenSSL < 0.9.6 (No OPENSSL_free)
1475
548fd014 147620011031
1477 - (djm) Unsmoke drugs: config files should be noreplace.
1478
b013a983 147920011030
1480 - (djm) Redhat RPM spec: remove noreplace from config files, allow IPv6
1481 by default (can force IPv4 using --define "noipv6 1")
1482
40d0f6b9 148320011029
1484 - (tim) [TODO defines.h loginrec.c] Change the references to configure.in
1485 to configure.ac
1486
9f214051 148720011028
1488 - (djm) Avoid bug in Solaris PAM libs
7eb73cc1 1489 - (djm) Disconnect if no tty and PAM reports password expired
9678565b 1490 - (djm) Fix for PAM password changes being echoed (from stevesk)
840ad55e 1491 - (stevesk) Fix compile problem with PAM password change fix
37a8edf7 1492 - (stevesk) README: zlib location is http://www.gzip.org/zlib/
9f214051 1493
c8c15bcb 149420011027
1495 - (tim) [configure.ac] Fixes for ReliantUNIX (don't use libucb)
1496 Patch by Robert Dahlem <Robert.Dahlem@siemens.com>
1497
9e127e27 149820011026
1499 - (bal) Set the correct current time in login_utmp_only(). Patch by
1500 Wayne Davison <wayned@users.sourceforge.net>
fd96c060 1501 - (tim) [scard/Makefile.in] Fix install: when building outside of source
1502 tree and using --src=/full_path/to/openssh
1503 Patch by Mark D. Baushke <mdb@juniper.net>
9e127e27 1504
d321c94b 150520011025
1506 - (bal) Use VDISABLE if _POSIX_VDISABLE is set in readpassphrase.c. Patch
1507 by todd@
5a162955 1508 - (tim) [configure.ac] Give path given in --with-xxx= for pcre,zlib, and
1509 tcp-wrappers precedence over system libraries and includes.
1510 Report from Dave Dykstra <dwd@bell-labs.com>
d321c94b 1511
95c88805 151220011024
1513 - (bal) Should be 3.0p1 not 3.0p2. Corrected version.h already.
451dab40 1514 - (tim) configure.in -> configure.ac
95c88805 1515
bc86d864 151620011023
1517 - (bal) Updated version to 3.0p1 in preparing for release.
7f0a4ff1 1518 - (bal) Added 'PAM_TTY_KLUDGE' to Solaris platform.
051809f6 1519 - (tim) [configure.in] Fix test for broken dirname. Based on patch from
1520 Dave Dykstra <dwd@bell-labs.com>. Remove un-needed test for zlib.h.
1521 [contrib/caldera/openssh.spec, contrib/redhat/openssh.spec,
1522 contrib/suse/openssh.spec] Update version to match version.h
bc86d864 1523
ce49121d 152420011022
1525 - (djm) Fix fd leak in loginrec.c (ro fd to lastlog was left open).
1526 Report from Michal Zalewski <lcamtuf@coredump.cx>
1527
98a7c37b 152820011021
1529 - (tim) [configure.in] Clean up library testing. Add optional PATH to
1530 --with-pcre, --with-zlib, and --with-tcp-wrappers. Based on
1531 patch by albert chin (china@thewrittenword.com)
1532 Re-arange AC_CHECK_HEADERS and AC_CHECK_FUNCS for eaiser reading
1533 of patches to configure.in. Replace obsolete AC_STRUCT_ST_BLKSIZE
1534 with AC_CHECK_MEMBERS. Add test for broken dirname() on
1535 Solaris 2.5.1 by Dan Astoorian <djast@cs.toronto.edu>
1536 [acconfig.h aclocal.m4 defines.h configure.in] Better socklen_t test.
1537 patch by albert chin (china@thewrittenword.com)
1538 [scp.c] Replace obsolete HAVE_ST_BLKSIZE with
1539 HAVE_STRUCT_STAT_ST_BLKSIZE.
1540 [Makefile.in] When running make in top level, always do make
1541 in openbsd-compat. patch by Dave Dykstra <dwd@bell-labs.com>
1542
09a3bd6d 154320011019
1544 - (bal) Fixed up init.d symlink issue and piddir stuff. Patches by
1545 Zoran Milojevic <Zoran.Milojevic@SS8.com> and j.petersen@msh.de
1546
418e724c 154720011012
1548 - (djm) OpenBSD CVS Sync
1549 - markus@cvs.openbsd.org 2001/10/10 22:18:47
1550 [channels.c channels.h clientloop.c nchan.c serverloop.c]
1551 [session.c session.h]
1552 try to keep channels open until an exit-status message is sent.
1553 don't kill the login shells if the shells stdin/out/err is closed.
1554 this should now work:
1555 ssh -2n localhost 'exec > /dev/null 2>&1; sleep 10; exit 5'; echo ?
efcc9957 1556 - markus@cvs.openbsd.org 2001/10/11 13:45:21
1557 [session.c]
1558 delay detach of session if a channel gets closed but the child is
1559 still alive. however, release pty, since the fd's to the child are
1560 already closed.
fd6cfbaf 1561 - markus@cvs.openbsd.org 2001/10/11 15:24:00
1562 [clientloop.c]
1563 clear select masks if we return before calling select().
b0454d44 1564 - (djm) "make veryclean" fix from Tom Holroyd <tomh@po.crl.go.jp>
aeabbb30 1565 - (djm) Clean some autoconf-2.52 junk when doing "make distclean"
8140f2aa 1566 - (djm) Cleanup sshpty.c a little
6e464960 1567 - (bal) First wave of contrib/solaris/ package upgrades. Still more
1568 work needs to be done, but it is a 190% better then the stuff we
1569 had before!
78c84f13 1570 - (bal) Minor bug fix in contrib/solaris/opensshd.in .. $etcdir was not
1571 set right.
418e724c 1572
c48c32c1 157320011010
1574 - (djm) OpenBSD CVS Sync
1575 - markus@cvs.openbsd.org 2001/10/04 14:34:16
1576 [key.c]
1577 call OPENSSL_free() for memory allocated by openssl; from chombier@mac.com
0c139bd1 1578 - markus@cvs.openbsd.org 2001/10/04 15:05:40
1579 [channels.c serverloop.c]
1580 comment out bogus conditions for selecting on connection_in
72176c0e 1581 - markus@cvs.openbsd.org 2001/10/04 15:12:37
1582 [serverloop.c]
1583 client_alive_check cleanup
a2c92c4a 1584 - markus@cvs.openbsd.org 2001/10/06 00:14:50
1585 [sshconnect.c]
1586 remove unused argument
05fd093c 1587 - markus@cvs.openbsd.org 2001/10/06 00:36:42
1588 [session.c]
1589 fix typo in error message, sync with do_exec_nopty
01e9ef57 1590 - markus@cvs.openbsd.org 2001/10/06 11:18:19
1591 [sshconnect1.c sshconnect2.c sshconnect.c]
1592 unify hostkey check error messages, simplify prompt.
2cdccb44 1593 - markus@cvs.openbsd.org 2001/10/07 10:29:52
1594 [authfile.c]
1595 grammer; Matthew_Clarke@mindlink.bc.ca
639cb8ab 1596 - markus@cvs.openbsd.org 2001/10/07 17:49:40
1597 [channels.c channels.h]
1598 avoid possible FD_ISSET overflow for channels established
1599 during channnel_after_select() (used for dynamic channels).
f3964cb9 1600 - markus@cvs.openbsd.org 2001/10/08 11:48:57
1601 [channels.c]
1602 better debug
32af6a3f 1603 - markus@cvs.openbsd.org 2001/10/08 16:15:47
1604 [sshconnect.c]
1605 use correct family for -b option
dab89049 1606 - markus@cvs.openbsd.org 2001/10/08 19:05:05
1607 [ssh.c sshconnect.c sshconnect.h ssh-keyscan.c]
1608 some more IPv4or6 cleanup
1609 - markus@cvs.openbsd.org 2001/10/09 10:12:08
1610 [session.c]
1611 chdir $HOME after krb_afslog(); from bbense@networking.stanford.edu
01855277 1612 - markus@cvs.openbsd.org 2001/10/09 19:32:49
1613 [session.c]
1614 stat subsystem command before calling do_exec, and return error to client.
9d1b2faa 1615 - markus@cvs.openbsd.org 2001/10/09 19:51:18
1616 [serverloop.c]
1617 close all channels if the connection to the remote host has been closed,
1618 should fix sshd's hanging with WCHAN==wait
d5f24f94 1619 - markus@cvs.openbsd.org 2001/10/09 21:59:41
1620 [channels.c channels.h serverloop.c session.c session.h]
1621 simplify session close: no more delayed session_close, no more
1622 blocking wait() calls.
b6a71cd2 1623 - (bal) removed two unsed headers in openbsd-compat/bsd-misc.c
8782141f 1624 - (bal) seed_init() and seed_rng() required in ssh-keyscan.c
c48c32c1 1625
46dfe5ef 162620011007
1627 - (bal) ssh-copy-id corrected permissions for .ssh/ and authorized_keys.
1628 Prompted by Matthew Vernon <matthew@sel.cam.ac.uk>
1629
822593d4 163020011005
1631 - (bal) AES works under Cray, no more hack.
1632
63fa6b6c 163320011004
1634 - (bal) nchan2.ms resync. BSD License applied.
1635
c8a62153 163620011003
1637 - (bal) CVS ID fix up in version.h
b6350327 1638 - (bal) OpenBSD CVS Sync:
1639 - markus@cvs.openbsd.org 2001/09/27 11:58:16
1640 [compress.c]
1641 mem leak; chombier@mac.com
1642 - markus@cvs.openbsd.org 2001/09/27 11:59:37
1643 [packet.c]
1644 missing called=1; chombier@mac.com
aa8003d6 1645 - markus@cvs.openbsd.org 2001/09/27 15:31:17
1646 [auth2.c auth2-chall.c sshconnect1.c]
1647 typos; from solar
5b263aae 1648 - camield@cvs.openbsd.org 2001/09/27 17:53:24
1649 [sshd.8]
1650 don't talk about compile-time options
1651 ok markus@
e99a518a 1652 - djm@cvs.openbsd.org 2001/09/28 12:07:09
1653 [ssh-keygen.c]
1654 bzero private key after loading to smartcard; ok markus@
f67792f2 1655 - markus@cvs.openbsd.org 2001/09/28 15:46:29
1656 [ssh.c]
1657 bug: read user config first; report kaukasoi@elektroni.ee.tut.fi
5720c10e 1658 - markus@cvs.openbsd.org 2001/10/01 08:06:28
1659 [scp.c]
1660 skip filenames containing \n; report jdamery@chiark.greenend.org.uk
1661 and matthew@debian.org
5e4a7219 1662 - markus@cvs.openbsd.org 2001/10/01 21:38:53
1663 [channels.c channels.h ssh.c sshd.c]
1664 remove ugliness; vp@drexel.edu via angelos
8bbc048a 1665 - markus@cvs.openbsd.org 2001/10/01 21:51:16
1666 [readconf.c readconf.h ssh.1 sshconnect.c]
1667 add NoHostAuthenticationForLocalhost; note that the hostkey is
1668 now check for localhost, too.
e0543e42 1669 - djm@cvs.openbsd.org 2001/10/02 08:38:50
1670 [ssh-add.c]
1671 return non-zero exit code on error; ok markus@
e4d7f734 1672 - stevesk@cvs.openbsd.org 2001/10/02 22:56:09
1673 [sshd.c]
1674 #include "channels.h" for channel_set_af()
76fbdd47 1675 - markus@cvs.openbsd.org 2001/10/03 10:01:20
1676 [auth.c]
1677 use realpath() for homedir, too. from jinmei@isl.rdc.toshiba.co.jp
c8a62153 1678
d9d47a26 167920011001
1680 - (stevesk) loginrec.c: fix type conversion problems exposed when using
1681 64-bit off_t.
1682
d8d6c87e 168320010929
1684 - (bal) move reading 'config.h' up higher. Patch by albert chin
1685 <china@thewrittenword.com)
1686
fc1fc39e 168720010928
1688 - (djm) OpenBSD CVS sync:
1689 - djm@cvs.openbsd.org 2001/09/28 09:49:31
1690 [scard.c]
1691 Fix segv when smartcard communication error occurs during key load.
1692 ok markus@
e3d5570b 1693 - (djm) Update spec files for new x11-askpass
fc1fc39e 1694
8a9ac95d 169520010927
1696 - (stevesk) session.c: declare do_pre_login() before use
1697 wayned@users.sourceforge.net
1698
aa9f6a6e 169920010925
1700 - (djm) Pull in auth-krb5.c from OpenBSD CVS. NB. it is not currently used.
168edd95 1701 - (djm) Sync $sysconfdir/moduli
948fd8b9 1702 - (djm) Add AC_SYS_LARGEFILE configure test
4f9d80ee 1703 - (djm) Avoid bad and unportable sprintf usage in compat code
aa9f6a6e 1704
57dade33 170520010923
1706 - (bal) updated ssh.c to mirror minor getopts 'extern int' formating done
1707 by stevesk@
927c3e15 1708 - (bal) Removed 'extern int optopt;' since it is dead wood.
8ead88d3 1709 - (bal) Updated all *.specs for 2.9.9p1 and updated version.h
57dade33 1710
8ab12eb4 171120010923
1712 - (bal) OpenBSD CVS Sync
1713 - markus@cvs.openbsd.org 2001/09/23 11:09:13
1714 [authfile.c]
1715 relax permission check for private key files.
157fc8e1 1716 - markus@cvs.openbsd.org 2001/09/23 09:58:13
1717 [LICENCE]
1718 new rijndael implementation
8ab12eb4 1719
64bdafe1 172020010920
1721 - (tim) [scard/Makefile.in] Don't strip the Java binary
4a38efad 1722 - (stevesk) sun_len, SUN_LEN() configure stuff no longer required
fc7eca52 1723 - (bal) OpenBSD CVS Sync
1724 - stevesk@cvs.openbsd.org 2001/09/20 00:15:54
1725 [sshd.8]
1726 fix ClientAliveCountMax
ddcfed57 1727 - markus@cvs.openbsd.org 2001/09/20 13:46:48
1728 [auth2.c]
1729 key_read returns now -1 or 1
bcdb96c2 1730 - markus@cvs.openbsd.org 2001/09/20 13:50:40
1731 [compat.c compat.h ssh.c]
1732 bug compat: request a dummy channel for -N (no shell) sessions +
1733 cleanup; vinschen@redhat.com
4a778de1 1734 - mouring@cvs.openbsd.org 2001/09/20 20:57:51
1735 [sshd_config]
1736 CheckMail removed. OKed stevesk@
64bdafe1 1737
4cdbc654 173820010919
35c69348 1739 - (bal) OpenBSD Sync
4cdbc654 1740 - markus@cvs.openbsd.org 2001/09/19 10:08:51
1741 [sshd.8]
1742 command=xxx applies to subsystem now, too
cb8c7bad 1743 - markus@cvs.openbsd.org 2001/09/19 13:23:29
1744 [key.c]
1745 key_read() now returns -1 on type mismatch, too
e1c5bfaf 1746 - stevesk@cvs.openbsd.org 2001/09/19 19:24:19
1747 [readconf.c readconf.h scp.c sftp.c ssh.1]
1748 add ClearAllForwardings ssh option and set it in scp and sftp; ok
1749 markus@
f34f05d5 1750 - stevesk@cvs.openbsd.org 2001/09/19 19:35:30
1751 [authfd.c]
1752 use sizeof addr vs. SUN_LEN(addr) for sockaddr_un. Stevens
1753 blesses this and we do it this way elsewhere. this helps in
1754 portable because not all systems have SUN_LEN() and
1755 sockaddr_un.sun_len. ok markus@
2043936f 1756 - stevesk@cvs.openbsd.org 2001/09/19 21:04:53
1757 [sshd.8]
1758 missing -t in usage
368bae7d 1759 - stevesk@cvs.openbsd.org 2001/09/19 21:41:57
1760 [sshd.8]
1761 don't advertise -V in usage; ok markus@
35c69348 1762 - (bal) openbsd-compat/vis.[ch] is dead wood. Removed.
4cdbc654 1763
d0b19c95 176420010918
46a831dd 1765 - (djm) Configure support for smartcards. Based on Ben's work.
fef4ea6b 1766 - (djm) Revert setgroups call, it causes problems on OS-X
46a831dd 1767 - (djm) Avoid warning on BSDgetopt
93816ec8 1768 - (djm) More makefile infrastructre for smartcard support, also based
1769 on Ben's work
4b255446 1770 - (djm) Specify --datadir in RPM spec files so smartcard applet gets
1771 put somewhere sane. Add Ssh.bin to manifest.
69c94072 1772 - (djm) Make smartcard support conditional in Redhat RPM spec
1a77481c 1773 - (bal) LICENCE update. Has not been done in a while.
f49df8e9 1774 - (stevesk) nchan.c: we use X/Open Sockets on HP-UX now so shutdown(2)
1775 returns ENOTCONN vs. EINVAL for socket not connected; remove EINVAL
1776 check. ok Lutz Jaenicke
35c69348 1777 - (bal) OpenBSD CVS Sync
f1278af7 1778 - stevesk@cvs.openbsd.org 2001/09/17 17:57:57
1779 [scp.1 scp.c sftp.1 sftp.c]
1780 add -Fssh_config option; ok markus@
cf54363d 1781 - stevesk@cvs.openbsd.org 2001/09/17 19:27:15
1782 [kexdh.c kexgex.c key.c key.h ssh-dss.c ssh-keygen.c ssh-rsa.c]
1783 u_char*/char* cleanup; ok markus
4e842b5e 1784 - markus@cvs.openbsd.org 2001/09/17 20:22:14
1785 [scard.c]
1786 never keep a connection to the smartcard open.
1787 allows ssh-keygen -D U while the agent is running; report from
1788 jakob@
e3c1c3e6 1789 - stevesk@cvs.openbsd.org 2001/09/17 20:38:09
1790 [sftp.1 sftp.c]
1791 cleanup and document -1, -s and -S; ok markus@
f7436b8c 1792 - markus@cvs.openbsd.org 2001/09/17 20:50:22
1793 [key.c ssh-keygen.c]
1794 better error handling if you try to export a bad key to ssh.com
a5f82435 1795 - markus@cvs.openbsd.org 2001/09/17 20:52:47
1796 [channels.c channels.h clientloop.c]
1797 try to fix agent-forwarding-backconnection-bug, as seen on HPUX,
1798 for example; with Lutz.Jaenicke@aet.TU-Cottbus.DE,
780a9951 1799 - markus@cvs.openbsd.org 2001/09/17 21:04:02
1800 [channels.c serverloop.c]
1801 don't send fake dummy packets on CR (\r)
1802 bugreport from yyua@cs.sfu.ca via solar@@openwall.com
b6761a3e 1803 - markus@cvs.openbsd.org 2001/09/17 21:09:47
1804 [compat.c]
1805 more versions suffering the SSH_BUG_DEBUG bug;
1806 3.0.x reported by dbutts@maddog.storability.com
edaeb835 1807 - stevesk@cvs.openbsd.org 2001/09/17 23:56:07
1808 [scp.1]
1809 missing -B in usage string
d0b19c95 1810
d31a32a4 181120010917
1812 - (djm) x11-ssh-askpass-1.2.4 in RPM spec, revert workarounds
cb547f98 1813 - (tim) [includes.h openbsd-compat/getopt.c openbsd-compat/getopt.h]
1814 rename getopt() to BSDgetopt() to keep form conflicting with
1815 system getopt().
1816 [Makefile.in configure.in] disable filepriv until I can add
1817 missing procpriv calls.
d31a32a4 1818
95d00a03 181920010916
1820 - (djm) Workaround XFree breakage in RPM spec file
6fcf67f7 1821 - (bal) OpenBSD CVS Sync
1822 - markus@cvs.openbsd.org 2001/09/16 14:46:54
1823 [session.c]
1824 calls krb_afslog() after setting $HOME; mattiasa@e.kth.se; fixes
1825 pr 1943b
95d00a03 1826
0e0144b7 182720010915
1828 - (djm) Make do_pre_login static to avoid prototype #ifdef hell
0fd6c7a9 1829 - (djm) Sync scard/ stuff
23c098ba 1830 - (djm) Redhat spec file cleanups from Pekka Savola <pekkas@netcore.fi> and
1831 Redhat
94a29edc 1832 - (djm) Redhat initscript config sanity checking from Pekka Savola
1833 <pekkas@netcore.fi>
e72ff812 1834 - (djm) Clear supplemental groups at sshd start to prevent them from
1835 being propogated to random PAM modules. Based on patch from Redhat via
1836 Pekka Savola <pekkas@netcore.fi>
a2cb4268 1837 - (djm) Make sure rijndael.c picks config.h
1838 - (djm) Ensure that u_char gets defined
0e0144b7 1839
dcf29cf8 184020010914
1841 - (bal) OpenBSD CVS Sync
1842 - markus@cvs.openbsd.org 2001/09/13
1843 [rijndael.c rijndael.h]
1844 missing $OpenBSD
fd022eed 1845 - markus@cvs.openbsd.org 2001/09/14
1846 [session.c]
1847 command=xxx overwrites subsystems, too
9658ecbc 1848 - markus@cvs.openbsd.org 2001/09/14
1849 [sshd.c]
1850 typo
fd022eed 1851
88c3bfe0 185220010913
1853 - (bal) OpenBSD CVS Sync
1854 - markus@cvs.openbsd.org 2001/08/23 11:31:59
1855 [cipher.c cipher.h]
1856 switch to the optimised AES reference code from
1857 http://www.esat.kuleuven.ac.be/~rijmen/rijndael/rijndael-fst-3.0.zip
1858
5c53a31e 185920010912
1860 - (bal) OpenBSD CVS Sync
1861 - jakob@cvs.openbsd.org 2001/08/16 19:18:34
1862 [servconf.c servconf.h session.c sshd.8]
1863 deprecate CheckMail. ok markus@
54bf768d 1864 - stevesk@cvs.openbsd.org 2001/08/16 20:14:57
1865 [ssh.1 sshd.8]
1866 document case sensitivity for ssh, sshd and key file
1867 options and arguments; ok markus@
6d7b3036 1868 - stevesk@cvs.openbsd.org 2001/08/17 18:59:47
1869 [servconf.h]
1870 typo in comment
ae897d7c 1871 - stevesk@cvs.openbsd.org 2001/08/21 21:47:42
1872 [ssh.1 sshd.8]
1873 minor typos and cleanup
c78e5800 1874 - stevesk@cvs.openbsd.org 2001/08/22 16:21:21
1875 [ssh.1]
1876 hostname not optional; ok markus@
9495bfc5 1877 - stevesk@cvs.openbsd.org 2001/08/22 16:30:02
1878 [sshd.8]
1879 no rexd; ok markus@
29999e54 1880 - stevesk@cvs.openbsd.org 2001/08/22 17:45:16
1881 [ssh.1]
1882 document cipher des for protocol 1; ok deraadt@
8fbc356d 1883 - camield@cvs.openbsd.org 2001/08/23 17:59:31
1884 [sshd.c]
1885 end request with 0, not NULL
1886 ok markus@
d866473d 1887 - stevesk@cvs.openbsd.org 2001/08/23 18:02:48
1888 [ssh-agent.1]
1889 fix usage; ok markus@
75304f85 1890 - stevesk@cvs.openbsd.org 2001/08/23 18:08:59
1891 [ssh-add.1 ssh-keyscan.1]
1892 minor cleanup
b7f79e7a 1893 - danh@cvs.openbsd.org 2001/08/27 22:02:13
1894 [ssh-keyscan.c]
1895 fix memory fault if non-existent filename is given to the -f option
1896 ok markus@
14e4a15f 1897 - markus@cvs.openbsd.org 2001/08/28 09:51:26
1898 [readconf.c]
1899 don't set DynamicForward unless Host matches
e591b98a 1900 - markus@cvs.openbsd.org 2001/08/28 15:39:48
1901 [ssh.1 ssh.c]
1902 allow: ssh -F configfile host
46660a9e 1903 - markus@cvs.openbsd.org 2001/08/29 20:44:03
1904 [scp.c]
1905 clear the malloc'd buffer, otherwise source() will leak malloc'd
1906 memory; ok theo@
e675b851 1907 - stevesk@cvs.openbsd.org 2001/08/29 23:02:21
1908 [sshd.8]
1909 add text about -u0 preventing DNS requests; ok markus@
4c780c2a 1910 - stevesk@cvs.openbsd.org 2001/08/29 23:13:10
1911 [ssh.1 ssh.c]
1912 document -D and DynamicForward; ok markus@
d2e3df16 1913 - stevesk@cvs.openbsd.org 2001/08/29 23:27:23
1914 [ssh.c]
1915 validate ports for -L/-R; ok markus@
70068acc 1916 - stevesk@cvs.openbsd.org 2001/08/29 23:39:40
1917 [ssh.1 sshd.8]
1918 additional documentation for GatewayPorts; ok markus@
ad3e169f 1919 - naddy@cvs.openbsd.org 2001/08/30 15:42:36
1920 [ssh.1]
1921 add -D to synopsis line; ok markus@
3a8aabf0 1922 - stevesk@cvs.openbsd.org 2001/08/30 16:04:35
1923 [readconf.c ssh.1]
1924 validate ports for LocalForward/RemoteForward.
1925 add host/port alternative syntax for IPv6 (like -L/-R).
1926 ok markus@
ed787d14 1927 - stevesk@cvs.openbsd.org 2001/08/30 20:36:34
1928 [auth-options.c sshd.8]
1929 validate ports for permitopen key file option. add host/port
1930 alternative syntax for IPv6. ok markus@
4278ff63 1931 - markus@cvs.openbsd.org 2001/08/30 22:22:32
1932 [ssh-keyscan.c]
1933 do not pass pointers to longjmp; fix from wayne@blorf.net
6b759005 1934 - markus@cvs.openbsd.org 2001/08/31 11:46:39
1935 [sshconnect2.c]
93111dfa 1936 disable kbd-interactive if we don't get SSH2_MSG_USERAUTH_INFO_REQUEST
1937 messages
1938 - stevesk@cvs.openbsd.org 2001/09/03 20:58:33
1939 [readconf.c readconf.h ssh.c]
1940 fatal() for nonexistent -Fssh_config. ok markus@
91789042 1941 - deraadt@cvs.openbsd.org 2001/09/05 06:23:07
1942 [scp.1 sftp.1 ssh.1 ssh-agent.1 sshd.8 ssh-keygen.1 ssh-keyscan.1]
1943 avoid first person in manual pages
3a222388 1944 - stevesk@cvs.openbsd.org 2001/09/12 18:18:25
1945 [scp.c]
1946 don't forward agent for non third-party copies; ok markus@
5c53a31e 1947
c6ed03bd 194820010815
1949 - (bal) Fixed stray code in readconf.c that went in by mistake.
65e683bd 1950 - OpenBSD CVS Sync
1951 - markus@cvs.openbsd.org 2001/08/07 10:37:46
1952 [authfd.c authfd.h]
1953 extended failure messages from galb@vandyke.com
c7f89f1f 1954 - deraadt@cvs.openbsd.org 2001/08/08 07:16:58
1955 [scp.1]
1956 when describing the -o option, give -o Protocol=1 as the specific example
1957 since we are SICK AND TIRED of clueless people who cannot have difficulty
1958 thinking on their own.
f2f1bedd 1959 - markus@cvs.openbsd.org 2001/08/08 18:20:15
1960 [uidswap.c]
1961 permanently_set_uid is a noop if user is not privilegued;
1962 fixes bug on solaris; from sbi@uchicago.edu
58df8789 1963 - markus@cvs.openbsd.org 2001/08/08 21:34:19
1964 [uidswap.c]
1965 undo last change; does not work for sshd
c3abff07 1966 - jakob@cvs.openbsd.org 2001/08/11 22:51:27
1967 [ssh.c tildexpand.c]
1968 fix more paths beginning with "//"; <bradshaw@staff.crosswalk.com>.
1969 ok markus@
4fa5a4db 1970 - stevesk@cvs.openbsd.org 2001/08/13 23:38:54
1971 [scp.c]
1972 don't need main prototype (also sync with rcp); ok markus@
68874d2b 1973 - markus@cvs.openbsd.org 2001/08/14 09:23:02
1974 [sftp.1 sftp-int.c]
1975 "bye"; hk63a@netscape.net
38539909 1976 - stevesk@cvs.openbsd.org 2001/08/14 17:54:29
1977 [scp.1 sftp.1 ssh.1]
1978 consistent documentation and example of ``-o ssh_option'' for sftp and
1979 scp; document keyword=argument for ssh.
41cb4569 1980 - (bal) QNX resync. OK tim@
c6ed03bd 1981
3454ff55 198220010814
1983 - (stevesk) sshpty.c, cray.[ch]: whitespace, formatting and cleanup
1984 for some #ifdef _CRAY code; ok wendyp@cray.com
5bd6962b 1985 - (stevesk) sshpty.c: return 0 on error in cray pty code;
1986 ok wendyp@cray.com
4809bc4c 1987 - (stevesk) bsd-cray.c: utmp strings are not C strings
8280a5ae 1988 - (stevesk) bsd-cray.c: more cleanup; ok wendyp@cray.com
3454ff55 1989
d89a02d4 199020010812
1991 - (djm) Fix detection of long long int support. Based on patch from
1992 Michael Stone <mstone@cs.loyola.edu>. ok stevesk, tim
1993
7ef909d3 199420010808
1995 - (bal) Minor correction to inet_ntop.h. _BSD_RRESVPORT_H should be
1996 _BSD_INET_NTOP_H. Pointed out by Mark Miller <markm@swoon.net>
1997
a704dd54 199820010807
1999 - (tim) [configure.in sshconnect.c openbsd-compat/Makefile.in
2000 openbsd-compat/openbsd-compat.h ] Add inet_ntop.c inet_ntop.h back
2001 in. Needed for sshconnect.c
2002 [sshconnect.c] fix INET6_ADDRSTRLEN for non IPv6 machines
2003 [configure.in] make tests with missing libraries fail
2004 patch by Wendy Palm <wendyp@cray.com>
2005 Added openbsd-compat/bsd-cray.h. Selective patches from
2006 William L. Jones <jones@mail.utexas.edu>
2007
4f7893dc 200820010806
2009 - OpenBSD CVS Sync
2010 - markus@cvs.openbsd.org 2001/07/22 21:32:27
2011 [sshpty.c]
2012 update comment
0aea6c59 2013 - pvalchev@cvs.openbsd.org 2001/07/22 21:32:42
2014 [ssh.1]
2015 There is no option "Compress", point to "Compression" instead; ok
2016 markus
10a2cbef 2017 - markus@cvs.openbsd.org 2001/07/22 22:04:19
2018 [readconf.c ssh.1]
2019 enable challenge-response auth by default; ok millert@
248bad82 2020 - markus@cvs.openbsd.org 2001/07/22 22:24:16
2021 [sshd.8]
2022 Xr login.conf
9f37c0af 2023 - markus@cvs.openbsd.org 2001/07/23 09:06:28
2024 [sshconnect2.c]
2025 reorder default sequence of userauth methods to match ssh behaviour:
2026 hostbased,publickey,keyboard-interactive,password
29c440a0 2027 - markus@cvs.openbsd.org 2001/07/23 12:47:05
2028 [ssh.1]
2029 sync PreferredAuthentications
7fd9477e 2030 - aaron@cvs.openbsd.org 2001/07/23 14:14:18
2031 [ssh-keygen.1]
2032 Fix typo.
1bdee08c 2033 - stevesk@cvs.openbsd.org 2001/07/23 18:14:58
2034 [auth2.c auth-rsa.c]
2035 use %lu; ok markus@
bac2ef55 2036 - stevesk@cvs.openbsd.org 2001/07/23 18:21:46
2037 [xmalloc.c]
2038 no zero size xstrdup() error; ok markus@
55684f0c 2039 - markus@cvs.openbsd.org 2001/07/25 11:59:35
2040 [scard.c]
2041 typo in comment
ce773142 2042 - markus@cvs.openbsd.org 2001/07/25 14:35:18
2043 [readconf.c ssh.1 ssh.c sshconnect.c]
2044 cleanup connect(); connection_attempts 4 -> 1; from
2045 eivind@freebsd.org
f87f09aa 2046 - stevesk@cvs.openbsd.org 2001/07/26 17:18:22
2047 [sshd.8 sshd.c]
2048 add -t option to test configuration file and keys; pekkas@netcore.fi
2049 ok markus@
c42158fe 2050 - rees@cvs.openbsd.org 2001/07/26 20:04:27
2051 [scard.c ssh-keygen.c]
2052 Inquire Cyberflex class for 0xf0 cards
2053 change aid to conform to 7816-5
2054 remove gratuitous fid selects
2e23cde0 2055 - millert@cvs.openbsd.org 2001/07/27 14:50:45
2056 [ssh.c]
2057 If smart card support is compiled in and a smart card is being used
2058 for authentication, make it the first method used. markus@ OK
0b2988ca 2059 - deraadt@cvs.openbsd.org 2001/07/27 17:26:16
2060 [scp.c]
2061 shorten lines
7f19f8bb 2062 - markus@cvs.openbsd.org 2001/07/28 09:21:15
2063 [sshd.8]
2064 cleanup some RSA vs DSA vs SSH1 vs SSH2 notes
79a6cb5c 2065 - mouring@cvs.openbsd.org 2001/07/29 17:02:46
2066 [scp.1]
2067 Clarified -o option in scp.1 OKed by Markus@
0b595937 2068 - jakob@cvs.openbsd.org 2001/07/30 16:06:07
2069 [scard.c scard.h]
2070 better errorcodes from sc_*; ok markus@
d6192346 2071 - stevesk@cvs.openbsd.org 2001/07/30 16:23:30
2072 [rijndael.c rijndael.h]
2073 new BSD-style license:
2074 Brian Gladman <brg@gladman.plus.com>:
2075 >I have updated my code at:
2076 >http://fp.gladman.plus.com/cryptography_technology/rijndael/index.htm
2077 >with a copyright notice as follows:
2078 >[...]
2079 >I am not sure which version of my old code you are using but I am
2080 >happy for the notice above to be substituted for my existing copyright
2081 >intent if this meets your purpose.
71b7a18e 2082 - jakob@cvs.openbsd.org 2001/07/31 08:41:10
2083 [scard.c]
2084 do not complain about missing smartcards. ok markus@
eea098a3 2085 - jakob@cvs.openbsd.org 2001/07/31 09:28:44
2086 [readconf.c readconf.h ssh.1 ssh.c]
2087 add 'SmartcardDevice' client option to specify which smartcard device
2088 is used to access a smartcard used for storing the user's private RSA
2089 key. ok markus@.
88690211 2090 - jakob@cvs.openbsd.org 2001/07/31 12:42:50
2091 [sftp-int.c sftp-server.c]
2092 avoid paths beginning with "//"; <vinschen@redhat.com>
2093 ok markus@
2251e099 2094 - jakob@cvs.openbsd.org 2001/07/31 12:53:34
2095 [scard.c]
2096 close smartcard connection if card is missing
9ff6f66f 2097 - markus@cvs.openbsd.org 2001/08/01 22:03:33
2098 [authfd.c authfd.h readconf.c readconf.h scard.c scard.h ssh-add.c
2099 ssh-agent.c ssh.c]
2100 use strings instead of ints for smartcard reader ids
1930af48 2101 - markus@cvs.openbsd.org 2001/08/01 22:16:45
2102 [ssh.1 sshd.8]
2103 refer to current ietf drafts for protocol v2
4f831fd7 2104 - markus@cvs.openbsd.org 2001/08/01 23:33:09
2105 [ssh-keygen.c]
2106 allow uploading RSA keys for non-default AUT0 (sha1 over passphrase
2107 like sectok).
1a23ac2c 2108 - markus@cvs.openbsd.org 2001/08/01 23:38:45
05b7537a 2109 [scard.c ssh.c]
2110 support finish rsa keys.
2111 free public keys after login -> call finish -> close smartcard.
93a56445 2112 - markus@cvs.openbsd.org 2001/08/02 00:10:17
2113 [ssh-keygen.c]
2114 add -D readerid option (download, i.e. print public RSA key to stdout).
2115 check for card present when uploading keys.
2116 use strings instead of ints for smartcard reader ids, too.
285d2b15 2117 - jakob@cvs.openbsd.org 2001/08/02 08:58:35
2118 [ssh-keygen.c]
2119 change -u (upload smartcard key) to -U. ok markus@
58153e34 2120 - jakob@cvs.openbsd.org 2001/08/02 15:06:52
2121 [ssh-keygen.c]
2122 more verbose usage(). ok markus@
f0d6bdcf 2123 - jakob@cvs.openbsd.org 2001/08/02 15:07:23
2124 [ssh-keygen.1]
2125 document smartcard upload/download. ok markus@
315dfb04 2126 - jakob@cvs.openbsd.org 2001/08/02 15:32:10
2127 [ssh.c]
2128 add smartcard to usage(). ok markus@
3e984472 2129 - jakob@cvs.openbsd.org 2001/08/02 15:43:57
2130 [ssh-agent.c ssh.c ssh-keygen.c]
2131 add /* SMARTCARD */ to #else/#endif. ok markus@
1a23ac2c 2132 - jakob@cvs.openbsd.org 2001/08/02 16:14:05
dd2495cb 2133 [scard.c ssh-agent.c ssh.c ssh-keygen.c]
2134 clean up some /* SMARTCARD */. ok markus@
0f6d5acf 2135 - mpech@cvs.openbsd.org 2001/08/02 18:37:35
2136 [ssh-keyscan.1]
2137 o) .Sh AUTHOR -> .Sh AUTHORS;
2138 o) .Sh EXAMPLE -> .Sh EXAMPLES;
2139 o) Delete .Sh OPTIONS. Text moved to .Sh DESCRIPTION;
2140
2141 millert@ ok
5a26334c 2142 - jakob@cvs.openbsd.org 2001/08/03 10:31:19
2143 [ssh-add.1]
2144 document smartcard options. ok markus@
33e766d2 2145 - jakob@cvs.openbsd.org 2001/08/03 10:31:30
2146 [ssh-add.c ssh-agent.c ssh-keyscan.c]
2147 improve usage(). ok markus@
5061072f 2148 - markus@cvs.openbsd.org 2001/08/05 23:18:20
2149 [ssh-keyscan.1 ssh-keyscan.c]
2150 ssh 2 support; from wayned@users.sourceforge.net
578954b1 2151 - markus@cvs.openbsd.org 2001/08/05 23:29:58
2152 [ssh-keyscan.c]
2153 make -t dsa work with commercial servers, too
cddb9003 2154 - stevesk@cvs.openbsd.org 2001/08/06 19:47:05
2155 [scp.c]
2156 use alarm vs. setitimer for portable; ok markus@
94796c10 2157 - (bal) ssh-keyscan double -lssh hack due to seed_rng().
1a23ac2c 2158 - (bal) Second around of UNICOS patches. A few other things left.
2159 Patches by William L. Jones <jones@mail.utexas.edu>
4f7893dc 2160
29a47408 216120010803
2162 - (djm) Fix interrupted read in entropy gatherer. Spotted by markus@ on
2163 a fast UltraSPARC.
2164
42ad0eec 216520010726
2166 - (stevesk) use mysignal() in protocol 1 loop now that the SIGCHLD
2167 handler has converged.
2168
aa7dbcdd 216920010725
2170 - (bal) Added 'install-nokeys' to Makefile to assist package builders.
2171
0b7d19eb 217220010724
2173 - (bal) 4711 not 04711 for ssh binary.
2174
ca5c7d6a 217520010722
2176 - (bal) Starting the Unicossmk merger. File merged TODO, configure.in,
2177 myproposal.h, ssh_prng_cmds.in, and openbsd-compat/Makefile.in.
2178 Added openbsd-compat/bsd-cray.c. Rest will be merged after
2179 approval. Selective patches from William L. Jones
2180 <jones@mail.utexas.edu>
7458aff1 2181 - OpenBSD CVS Sync
2182 - markus@cvs.openbsd.org 2001/07/18 21:10:43
2183 [sshpty.c]
2184 pr #1946, allow sshd if /dev is readonly
ec9f3450 2185 - stevesk@cvs.openbsd.org 2001/07/18 21:40:40
2186 [ssh-agent.c]
2187 chdir("/") from bbraun@synack.net; ok markus@
5bef3c35 2188 - stevesk@cvs.openbsd.org 2001/07/19 00:41:44
2189 [ssh.1]
2190 escape chars are below now
7efa8482 2191 - markus@cvs.openbsd.org 2001/07/20 14:46:11
2192 [ssh-agent.c]
2193 do not exit() from signal handlers; ok deraadt@
491f5f7b 2194 - stevesk@cvs.openbsd.org 2001/07/20 18:41:51
2195 [ssh.1]
2196 "the" command line
ca5c7d6a 2197
979b0a64 219820010719
2199 - (tim) [configure.in] put inet_aton back in AC_CHECK_FUNCS.
2200 report from Mark Miller <markm@swoon.net>
2201
6e69a45d 220220010718
2203 - OpenBSD CVS Sync
2c5b1791 2204 - stevesk@cvs.openbsd.org 2001/07/14 15:10:17
2205 [readpass.c sftp-client.c sftp-common.c sftp-glob.c]
2206 delete spurious #includes; ok deraadt@ markus@
68fa858a 2207 - markus@cvs.openbsd.org 2001/07/15 16:17:08
2c5b1791 2208 [serverloop.c]
2209 schedule client alive for ssh2 only, greg@cheers.bungi.com
2c71dfc1 2210 - stevesk@cvs.openbsd.org 2001/07/15 16:57:21
2211 [ssh-agent.1]
2212 -d will not fork; ok markus@
d1fc1b88 2213 - stevesk@cvs.openbsd.org 2001/07/15 16:58:29
68fa858a 2214 [ssh-agent.c]
d1fc1b88 2215 typo in usage; ok markus@
68fa858a 2216 - markus@cvs.openbsd.org 2001/07/17 20:48:42
2217 [ssh-agent.c]
e364646f 2218 update maxfd if maxfd is closed; report from jmcelroy@dtgnet.com
68fa858a 2219 - markus@cvs.openbsd.org 2001/07/17 21:04:58
2220 [channels.c channels.h clientloop.c nchan.c serverloop.c]
489aa2e9 2221 keep track of both maxfd and the size of the malloc'ed fdsets.
2222 update maxfd if maxfd gets closed.
c3941fa6 2223 - mouring@cvs.openbsd.org 2001/07/18 16:45:52
2224 [scp.c]
2225 Missing -o in scp usage()
68fa858a 2226 - (bal) Cleaned up trailing spaces in ChangeLog.
31fb6aaf 2227 - (bal) Allow sshd to switch user context without password for Cygwin.
2228 Patch by Corinna Vinschen <vinschen@redhat.com>
41fcc457 2229 - (bal) Updated cygwin README and ssh-host-config. Patch by
ad0cc858 2230 Corinna Vinschen <vinschen@redhat.com>
6e69a45d 2231
39c98ef7 223220010715
2233 - (bal) Set "BROKEN_GETADDRINFO" for darwin platform. Reported by
2234 Josh Larios <jdlarios@cac.washington.edu>
c14e6239 2235 - (tim) put openssh/openbsd-compat/inet_aton.[ch] back in.
2236 needed by openbsd-compat/fake-getaddrinfo.c
68fa858a 2237
6800f427 223820010714
2239 - (stevesk) change getopt() declaration
763a1a18 2240 - (stevesk) configure.in: use ll suffix for long long constant
2241 in snprintf() test
6800f427 2242
453b4bd0 224320010713
68fa858a 2244 - (djm) Enable /etc/nologin check on PAM systems, as some lack the
2245 pam_nologin module. Report from William Yodlowsky
453b4bd0 2246 <bsd@openbsd.rutgers.edu>
9912296f 2247 - (djm) Revert dirname fix, a better one is on its way.
1ee482c5 2248 - OpenBSD CVS Sync
2249 - markus@cvs.openbsd.org 2001/07/04 22:47:19
2250 [ssh-agent.c]
2251 ignore SIGPIPE when debugging, too
878b5225 2252 - markus@cvs.openbsd.org 2001/07/04 23:13:10
2253 [scard.c scard.h ssh-agent.c]
2254 handle card removal more gracefully, add sc_close() to scard.h
77261db4 2255 - markus@cvs.openbsd.org 2001/07/04 23:39:07
2256 [ssh-agent.c]
2257 for smartcards remove both RSA1/2 keys
a0e0f486 2258 - markus@cvs.openbsd.org 2001/07/04 23:49:27
2259 [ssh-agent.c]
2260 handle mutiple adds of the same smartcard key
62bb2c8f 2261 - espie@cvs.openbsd.org 2001/07/05 11:43:33
2262 [sftp-glob.c]
2263 Directly cast to the right type. Ok markus@
2264 - stevesk@cvs.openbsd.org 2001/07/05 20:32:47
2265 [sshconnect1.c]
2266 statement after label; ok dugsong@
97de229c 2267 - stevesk@cvs.openbsd.org 2001/07/08 15:23:38
2268 [servconf.c]
2269 fix ``MaxStartups max''; ok markus@
f5a1a01a 2270 - fgsch@cvs.openbsd.org 2001/07/09 05:58:47
2271 [ssh.c]
2272 Use getopt(3); markus@ ok.
ed916b28 2273 - deraadt@cvs.openbsd.org 2001/07/09 07:04:53
2274 [session.c sftp-int.c]
2275 correct type on last arg to execl(); nordin@cse.ogi.edu
333b5ba7 2276 - markus@cvs.openbsd.org 2001/07/10 21:49:12
2277 [readpass.c]
2278 don't panic if fork or pipe fail (just return an empty passwd).
46d738cd 2279 - itojun@cvs.openbsd.org 2001/07/11 00:24:53
2280 [servconf.c]
68fa858a 2281 make it compilable in all 4 combination of KRB4/KRB5 settings.
46d738cd 2282 dugsong ok
2283 XXX isn't it sensitive to the order of -I/usr/include/kerberosIV and
2284 -I/usr/include/kerberosV?
afd501f9 2285 - markus@cvs.openbsd.org 2001/07/11 16:29:59
2286 [ssh.c]
2287 sort options string, fix -p, add -k
2288 - markus@cvs.openbsd.org 2001/07/11 18:26:15
2289 [auth.c]
2290 no need to call dirname(pw->pw_dir).
2291 note that dirname(3) modifies its argument on some systems.
82d95536 2292 - (djm) Reorder Makefile.in so clean targets work a little better when
2293 run directly from Makefile.in
1812a662 2294 - (djm) Pull in getopt(3) from OpenBSD libc for the optreset extension.
453b4bd0 2295
85b08d98 229620010711
68fa858a 2297 - (djm) dirname(3) may modify its argument on glibc and other systems.
85b08d98 2298 Patch from markus@, spotted by Tom Holroyd <tomh@po.crl.go.jp>
2299
a96070d4 230020010704
2301 - OpenBSD CVS Sync
2302 - markus@cvs.openbsd.org 2001/06/25 08:25:41
68fa858a 2303 [channels.c channels.h cipher.c clientloop.c compat.c compat.h
2304 hostfile.c kex.c kex.h key.c key.h nchan.c packet.c serverloop.c
a96070d4 2305 session.c session.h sftp-server.c ssh-add.c ssh-agent.c uuencode.h]
2306 update copyright for 2001
8a497b11 2307 - markus@cvs.openbsd.org 2001/06/25 17:18:27
2308 [ssh-keygen.1]
68fa858a 2309 sshd(8) will never read the private keys, but ssh(1) does;
8a497b11 2310 hugh@mimosa.com
6978866a 2311 - provos@cvs.openbsd.org 2001/06/25 17:54:47
2312 [auth.c auth.h auth-rsa.c]
68fa858a 2313 terminate secure_filename checking after checking homedir. that way
ffb215be 2314 it works on AFS. okay markus@
2315 - stevesk@cvs.openbsd.org 2001/06/25 20:26:37
2316 [auth2.c sshconnect2.c]
2317 prototype cleanup; ok markus@
2b30154a 2318 - markus@cvs.openbsd.org 2001/06/26 02:47:07
2319 [ssh-keygen.c]
2320 allow loading a private RSA key to a cyberflex card.
ffdb5d70 2321 - markus@cvs.openbsd.org 2001/06/26 04:07:06
2322 [ssh-agent.1 ssh-agent.c]
2323 add debug flag
983def13 2324 - markus@cvs.openbsd.org 2001/06/26 04:59:59
2325 [authfd.c authfd.h ssh-add.c]
2326 initial support for smartcards in the agent
f7e5ac7b 2327 - markus@cvs.openbsd.org 2001/06/26 05:07:43
2328 [ssh-agent.c]
2329 update usage
2b5fe3b8 2330 - markus@cvs.openbsd.org 2001/06/26 05:33:34
2331 [ssh-agent.c]
2332 more smartcard support.
543baeea 2333 - mpech@cvs.openbsd.org 2001/06/26 05:48:07
2334 [sshd.8]
2335 remove unnecessary .Pp between .It;
2336 millert@ ok
0c9664c2 2337 - markus@cvs.openbsd.org 2001/06/26 05:50:11
2338 [auth2.c]
2339 new interface for secure_filename()
2a1e4639 2340 - itojun@cvs.openbsd.org 2001/06/26 06:32:58
68fa858a 2341 [atomicio.h authfd.h authfile.h auth.h auth-options.h bufaux.h
2342 buffer.h canohost.h channels.h cipher.h clientloop.h compat.h
2343 compress.h crc32.h deattack.h dh.h dispatch.h groupaccess.h
2344 hostfile.h kex.h key.h log.h mac.h match.h misc.h mpaux.h packet.h
2a1e4639 2345 radix.h readconf.h readpass.h rsa.h]
2346 prototype pedant. not very creative...
2347 - () -> (void)
2348 - no variable names
1c06a9ca 2349 - itojun@cvs.openbsd.org 2001/06/26 06:33:07
68fa858a 2350 [servconf.h serverloop.h session.h sftp-client.h sftp-common.h
2351 sftp-glob.h sftp-int.h sshconnect.h ssh-dss.h sshlogin.h sshpty.h
1c06a9ca 2352 ssh-rsa.h tildexpand.h uidswap.h uuencode.h xmalloc.h]
2353 prototype pedant. not very creative...
2354 - () -> (void)
2355 - no variable names
ced49be2 2356 - dugsong@cvs.openbsd.org 2001/06/26 16:15:25
68fa858a 2357 [auth1.c auth.h auth-krb4.c auth-passwd.c readconf.c readconf.h
ced49be2 2358 servconf.c servconf.h session.c sshconnect1.c sshd.c]
68fa858a 2359 Kerberos v5 support for SSH1, mostly from Assar Westerlund
ced49be2 2360 <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
3474b2b4 2361 - markus@cvs.openbsd.org 2001/06/26 17:25:34
2362 [ssh.1]
2363 document SSH_ASKPASS; fubob@MIT.EDU
255cabd9 2364 - markus@cvs.openbsd.org 2001/06/26 17:27:25
68fa858a 2365 [authfd.h authfile.h auth.h auth-options.h bufaux.h buffer.h
2366 canohost.h channels.h cipher.h clientloop.h compat.h compress.h
2367 crc32.h deattack.h dh.h dispatch.h groupaccess.c groupaccess.h
2368 hostfile.h kex.h key.h log.c log.h mac.h misc.c misc.h mpaux.h
2369 packet.h radix.h readconf.h readpass.h rsa.h servconf.h serverloop.h
2370 session.h sftp-common.c sftp-common.h sftp-glob.h sftp-int.h
2371 sshconnect.h ssh-dss.h sshlogin.h sshpty.h ssh-rsa.h sshtty.h
255cabd9 2372 tildexpand.h uidswap.h uuencode.h xmalloc.h]
2373 remove comments from .h, since they are cut&paste from the .c files
2374 and out of sync
83f46621 2375 - dugsong@cvs.openbsd.org 2001/06/26 17:41:49
2376 [servconf.c]
2377 #include <kafs.h>
57156994 2378 - markus@cvs.openbsd.org 2001/06/26 20:14:11
2379 [key.c key.h ssh.c sshconnect1.c sshconnect2.c]
2380 add smartcard support to the client, too (now you can use both
2381 the agent and the client).
2382 - markus@cvs.openbsd.org 2001/06/27 02:12:54
2383 [serverloop.c serverloop.h session.c session.h]
2384 quick hack to make ssh2 work again.
80f8f24f 2385 - markus@cvs.openbsd.org 2001/06/27 04:48:53
2386 [auth.c match.c sshd.8]
2387 tridge@samba.org
d0bfe096 2388 - markus@cvs.openbsd.org 2001/06/27 05:35:42
2389 [ssh-keygen.c]
2390 use cyberflex_inq_class to inquire class.
2b63e803 2391 - markus@cvs.openbsd.org 2001/06/27 05:42:25
2392 [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
2393 s/generate_additional_parameters/rsa_generate_additional_parameters/
2394 http://www.humppa.com/
34e02b83 2395 - markus@cvs.openbsd.org 2001/06/27 06:26:36
2396 [ssh-add.c]
2397 convert to getopt(3)
d3260e12 2398 - stevesk@cvs.openbsd.org 2001/06/28 19:57:35
2399 [ssh-keygen.c]
2400 '\0' terminated data[] is ok; ok markus@
49ccba9c 2401 - markus@cvs.openbsd.org 2001/06/29 07:06:34
2402 [ssh-keygen.c]
2403 new error handling for cyberflex_*
542d70b8 2404 - markus@cvs.openbsd.org 2001/06/29 07:11:01
2405 [ssh-keygen.c]
2406 initialize early
eea46d13 2407 - stevesk@cvs.openbsd.org 2001/06/29 18:38:44
2408 [clientloop.c]
2409 sync function definition with declaration; ok markus@
8ab2cb35 2410 - stevesk@cvs.openbsd.org 2001/06/29 18:40:28
2411 [channels.c]
2412 use socklen_t for getsockopt arg #5; ok markus@
b3f8a79c 2413 - stevesk@cvs.openbsd.org 2001/06/30 18:08:40
2414 [channels.c channels.h clientloop.c]
2415 adress -> address; ok markus@
5b5d170c 2416 - markus@cvs.openbsd.org 2001/07/02 13:59:15
2417 [serverloop.c session.c session.h]
68fa858a 2418 wait until !session_have_children(); bugreport from
5b5d170c 2419 Lutz.Jaenicke@aet.TU-Cottbus.DE
613021ac 2420 - markus@cvs.openbsd.org 2001/07/02 22:29:20
2421 [readpass.c]
2422 do not return NULL, use "" instead.
666248da 2423 - markus@cvs.openbsd.org 2001/07/02 22:40:18
2424 [ssh-keygen.c]
2425 update for sectok.h interface changes.
3cf2be58 2426 - markus@cvs.openbsd.org 2001/07/02 22:52:57
2427 [channels.c channels.h serverloop.c]
2428 improve cleanup/exit logic in ssh2:
2429 stop listening to channels, detach channel users (e.g. sessions).
2430 wait for children (i.e. dying sessions), send exit messages,
2431 cleanup all channels.
637b033d 2432 - (bal) forget a few new files in sync up.
06be7c3b 2433 - (bal) Makefile fix up requires scard.c
ac96ca42 2434 - (stevesk) sync misc.h
9c328529 2435 - (stevesk) more sync for session.c
4f1f4d8d 2436 - (stevesk) sync servconf.h (comments)
afb9165e 2437 - (tim) [contrib/caldera/openssh.spec] sync with Caldera
d9e3d19f 2438 - (tim) [openbsd-compat/dirname.h] Remove ^M causing some compilers to
2439 issue warning (line 1: tokens ignored at end of directive line)
2440 - (tim) [sshconnect1.c] give the compiler something to do for success:
2441 if KRB5 and AFS are not defined
2442 (ERROR: "sshconnect1.c", line 1274: Syntax error before or at: })
637b033d 2443
aa8d09da 244420010629
2445 - (bal) Removed net_aton() since we don't use it any more
64c4b8d7 2446 - (bal) Fixed _DISABLE_VPOSIX in readpassphrase.c.
7af3215a 2447 - (bal) Updated zlib's home. Thanks to David Howe <DaveHowe@gmx.co.uk>.
16adf618 2448 - (stevesk) remove _REENTRANT #define
16995a2c 2449 - (stevesk) session.c: use u_int for envsize
6a26f353 2450 - (stevesk) remove cli.[ch]
aa8d09da 2451
f11065cb 245220010628
2453 - (djm) Sync openbsd-compat with -current libc
68fa858a 2454 - (djm) Fix from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> for my
050df9db 2455 broken makefile
07608451 2456 - (bal) Removed strtok_r() and inet_ntop() since they are no longer used.
2457 - (bal) Remove getusershell() since it's no longer used.
f11065cb 2458
78220944 245920010627
2460 - (djm) Reintroduce pam_session call for non-pty sessions.
68fa858a 2461 - (djm) Remove redundant and incorrect test for max auth attempts in
2462 PAM kbdint code. Based on fix from Matthew Melvin
763dfdf0 2463 <matthewm@webcentral.com.au>
f0194608 2464 - (djm) Rename sysconfdir/primes => sysconfdir/moduli
68fa858a 2465 - (djm) Oops, forgot make logic for primes=>moduli. Also try to rename
ff4955c9 2466 existing primes->moduli if it exists.
0eb1a22d 2467 - (djm) Sync with -current openbsd-compat/readpassphrase.c:
2468 - djm@cvs.openbsd.org 2001/06/27 13:23:30
2469 typo, spotted by Tom Holroyd <tomh@po.crl.go.jp>; ok deraadt@
5ed2bb5b 2470 - (djm) Turn up warnings if gcc or egcs detected
b8fea62d 2471 - (stevesk) for HP-UX 11.X use X/Open socket interface;
2472 pulls in modern socket prototypes and eliminates a number of compiler
2473 warnings. see xopen_networking(7).
fef01705 2474 - (stevesk) fix x11 forwarding from _PATH_XAUTH change
28564873 2475 - (stevesk) use X/Open socket interface for HP-UX 10.X also
78220944 2476
e16f4ac8 247720010625
0cd000dd 2478 - OpenBSD CVS Sync
bc233fdf 2479 - markus@cvs.openbsd.org 2001/06/21 21:08:25
2480 [session.c]
2481 don't reset forced_command (we allow multiple login shells in
2482 ssh2); dwd@bell-labs.com
a5a2da3b 2483 - mpech@cvs.openbsd.org 2001/06/22 10:17:51
2484 [ssh.1 sshd.8 ssh-keyscan.1]
2485 o) .Sh AUTHOR -> .Sh AUTHORS;
2486 o) remove unnecessary .Pp;
2487 o) better -mdoc style;
2488 o) typo;
2489 o) sort SEE ALSO;
a5a2da3b 2490 aaron@ ok
e2854364 2491 - provos@cvs.openbsd.org 2001/06/22 21:27:08
2492 [dh.c pathnames.h]
2493 use /etc/moduli instead of /etc/primes, okay markus@
e2432638 2494 - provos@cvs.openbsd.org 2001/06/22 21:28:53
2495 [sshd.8]
2496 document /etc/moduli
96a7b0cc 2497 - markus@cvs.openbsd.org 2001/06/22 21:55:49
68fa858a 2498 [auth2.c auth-rsa.c pathnames.h ssh.1 sshd.8 sshd_config
96a7b0cc 2499 ssh-keygen.1]
2500 merge authorized_keys2 into authorized_keys.
2501 authorized_keys2 is used for backward compat.
2502 (just append authorized_keys2 to authorized_keys).
826676b3 2503 - provos@cvs.openbsd.org 2001/06/22 21:57:59
2504 [dh.c]
2505 increase linebuffer to deal with larger moduli; use rewind instead of
2506 close/open
bc233fdf 2507 - markus@cvs.openbsd.org 2001/06/22 22:21:20
2508 [sftp-server.c]
2509 allow long usernames/groups in readdir
a599bd06 2510 - markus@cvs.openbsd.org 2001/06/22 23:35:21
2e000c58 2511 [ssh.c]
2512 don't overwrite argv (fixes ssh user@host in 'ps'), report by ericj@
cb220a93 2513 - deraadt@cvs.openbsd.org 2001/06/23 00:16:16
2514 [scp.c]
2515 slightly better care
d0c8ca5c 2516 - markus@cvs.openbsd.org 2001/06/23 00:20:57
2517 [auth2.c auth.c auth.h auth-rh-rsa.c]
2518 *known_hosts2 is obsolete for hostbased authentication and
2519 only used for backward compat. merge ssh1/2 hostkey check
2520 and move it to auth.c
e16f4ac8 2521 - deraadt@cvs.openbsd.org 2001/06/23 02:33:05
2522 [sftp.1 sftp-server.8 ssh-keygen.1]
2523 join .%A entries; most by bk@rt.fm
f49bc4f7 2524 - markus@cvs.openbsd.org 2001/06/23 02:34:33
68fa858a 2525 [kexdh.c kexgex.c kex.h pathnames.h readconf.c servconf.h ssh.1
f49bc4f7 2526 sshconnect1.c sshconnect2.c sshconnect.c sshconnect.h sshd.8]
68fa858a 2527 get rid of known_hosts2, use it for hostkey lookup, but do not
f49bc4f7 2528 modify.
7d747e89 2529 - markus@cvs.openbsd.org 2001/06/23 03:03:59
2530 [sshd.8]
2531 draft-ietf-secsh-dh-group-exchange-01.txt
73473230 2532 - markus@cvs.openbsd.org 2001/06/23 03:04:42
2533 [auth2.c auth-rh-rsa.c]
2534 restore correct ignore_user_known_hosts logic.
c10d042a 2535 - markus@cvs.openbsd.org 2001/06/23 05:26:02
2536 [key.c]
2537 handle sigature of size 0 (some broken clients send this).
7b518233 2538 - deraadt@cvs.openbsd.org 2001/06/23 05:57:09
2539 [sftp.1 sftp-server.8 ssh-keygen.1]
2540 ok, tmac is now fixed
2e0becb6 2541 - markus@cvs.openbsd.org 2001/06/23 06:41:10
2542 [ssh-keygen.c]
2543 try to decode ssh-3.0.0 private rsa keys
2544 (allow migration to openssh, not vice versa), #910
396c147e 2545 - itojun@cvs.openbsd.org 2001/06/23 15:12:20
68fa858a 2546 [auth1.c auth2.c auth2-chall.c authfd.c authfile.c auth-rhosts.c
2547 canohost.c channels.c cipher.c clientloop.c deattack.c dh.c
2548 hostfile.c kex.c kexdh.c kexgex.c key.c nchan.c packet.c radix.c
2549 readpass.c scp.c servconf.c serverloop.c session.c sftp.c
2550 sftp-client.c sftp-glob.c sftp-int.c sftp-server.c ssh-add.c
2551 ssh-agent.c ssh.c sshconnect1.c sshconnect2.c sshconnect.c sshd.c
396c147e 2552 ssh-keygen.c ssh-keyscan.c]
68fa858a 2553 more strict prototypes. raise warning level in Makefile.inc.
396c147e 2554 markus ok'ed
2555 TODO; cleanup headers
a599bd06 2556 - markus@cvs.openbsd.org 2001/06/23 17:05:22
2557 [ssh-keygen.c]
2558 fix import for (broken?) ssh.com/f-secure private keys
2559 (i tested > 1000 RSA keys)
3730bb22 2560 - itojun@cvs.openbsd.org 2001/06/23 17:48:18
2561 [sftp.1 ssh.1 sshd.8 ssh-keyscan.1]
2562 kill whitespace at EOL.
3aca00a3 2563 - markus@cvs.openbsd.org 2001/06/23 19:12:43
2564 [sshd.c]
2565 pidfile/sigterm race; bbraun@synack.net
ce404659 2566 - markus@cvs.openbsd.org 2001/06/23 22:37:46
2567 [sshconnect1.c]
2568 consistent with ssh2: skip key if empty passphrase is entered,
2569 retry num_of_passwd_prompt times if passphrase is wrong. ok fgsch@
2cee8a25 2570 - markus@cvs.openbsd.org 2001/06/24 05:25:10
2571 [auth-options.c match.c match.h]
2572 move ip+hostname check to match.c
1843a425 2573 - markus@cvs.openbsd.org 2001/06/24 05:35:33
2574 [readpass.c readpass.h ssh-add.c sshconnect2.c ssh-keygen.c]
2575 switch to readpassphrase(3)
2576 2.7/8-stable needs readpassphrase.[ch] from libc
80097c54 2577 - markus@cvs.openbsd.org 2001/06/24 05:47:13
2578 [sshconnect2.c]
2579 oops, missing format string
b4e7177c 2580 - markus@cvs.openbsd.org 2001/06/24 17:18:31
2581 [ttymodes.c]
2582 passing modes works fine: debug2->3
ab88181c 2583 - (djm) -Wall fix for session.c
3159d49a 2584 - (djm) Bring in readpassphrase() from OpenBSD libc. Compiles OK on Linux and
2585 Solaris
0cd000dd 2586
7751d4eb 258720010622
2588 - (stevesk) handle systems without pw_expire and pw_change.
2589
e04e7a19 259020010621
2591 - OpenBSD CVS Sync
2592 - markus@cvs.openbsd.org 2001/06/16 08:49:38
2593 [misc.c]
2594 typo; dunlap@apl.washington.edu
c03175c6 2595 - markus@cvs.openbsd.org 2001/06/16 08:50:39
2596 [channels.h]
2597 bad //-style comment; thx to stevev@darkwing.uoregon.edu
08c260ea 2598 - markus@cvs.openbsd.org 2001/06/16 08:57:35
2599 [scp.c]
2600 no stdio or exit() in signal handlers.
c4d49b85 2601 - markus@cvs.openbsd.org 2001/06/16 08:58:34
2602 [misc.c]
2603 copy pw_expire and pw_change, too.
dac6753b 2604 - markus@cvs.openbsd.org 2001/06/19 12:34:09
2605 [session.c]
2606 cleanup forced command handling, from dwd@bell-labs.com
ff027d84 2607 - markus@cvs.openbsd.org 2001/06/19 14:09:45
2608 [session.c sshd.8]
2609 disable x11-fwd if use_login is enabled; from lukem@wasabisystems.com
c95add71 2610 - markus@cvs.openbsd.org 2001/06/19 15:40:45
2611 [session.c]
2612 allocate and free at the same level.
d6746a0b 2613 - markus@cvs.openbsd.org 2001/06/20 13:56:39
2614 [channels.c channels.h clientloop.c packet.c serverloop.c]
2615 move from channel_stop_listening to channel_free_all,
2616 call channel_free_all before calling waitpid() in serverloop.
2617 fixes the utmp handling; report from Lutz.Jaenicke@aet.TU-Cottbus.DE
e04e7a19 2618
5ad9f968 261920010615
2620 - (stevesk) don't set SA_RESTART and set SIGCHLD to SIG_DFL
2621 around grantpt().
f7940aa9 2622 - (stevesk) update TODO: STREAMS pty systems don't call vhangup() now
5ad9f968 2623
eb26141e 262420010614
2625 - OpenBSD CVS Sync
2626 - markus@cvs.openbsd.org 2001/06/13 09:10:31
2627 [session.c]
2628 typo, use pid not s->pid, mstone@cs.loyola.edu
2629
86066315 263020010613
eb26141e 2631 - OpenBSD CVS Sync
86066315 2632 - markus@cvs.openbsd.org 2001/06/12 10:58:29
2633 [session.c]
2634 merge session_free into session_close()
2635 merge pty_cleanup_proc into session_pty_cleanup()
653d5f86 2636 - markus@cvs.openbsd.org 2001/06/12 16:10:38
2637 [session.c]
2638 merge ssh1/ssh2 tty msg parse and alloc code
76735fe3 2639 - markus@cvs.openbsd.org 2001/06/12 16:11:26
2640 [packet.c]
2641 do not log() packet_set_maxsize
b44de2b1 2642 - markus@cvs.openbsd.org 2001/06/12 21:21:29
2643 [session.c]
2644 remove xauth-cookie-in-tmp handling. use default $XAUTHORITY, since
2645 we do already trust $HOME/.ssh
2646 you can use .ssh/sshrc and .ssh/environment if you want to customize
2647 the location of the xauth cookies
7a313633 2648 - markus@cvs.openbsd.org 2001/06/12 21:30:57
2649 [session.c]
2650 unused
86066315 2651
2c9d881a 265220010612
38296b32 2653 - scp.c ID update (upstream synced vfsprintf() from us)
2654 - OpenBSD CVS Sync
2c9d881a 2655 - markus@cvs.openbsd.org 2001/06/10 11:29:20
2656 [dispatch.c]
2657 we support rekeying
2658 protocol errors are fatal.
1500bcdd 2659 - markus@cvs.openbsd.org 2001/06/11 10:18:24
2660 [session.c]
2661 reset pointer to NULL after xfree(); report from solar@openwall.com
f740438e 2662 - markus@cvs.openbsd.org 2001/06/11 16:04:38
2663 [sshd.8]
2664 typo; bdubreuil@crrel.usace.army.mil
2c9d881a 2665
b4d02860 266620010611
68fa858a 2667 - (bal) NeXT/MacOS X lack libgen.h and dirname(). Patch by Mark Miller
2668 <markm@swoon.net>
224cbdcc 2669 - (bal) Handle broken krb4 issues on Solaris with multiple defined u_*_t
68fa858a 2670 types. Patch by Jan IVEN <Jan.Iven@cern.ch>
0bb724ce 2671 - (bal) Fixed Makefile.in so that 'configure; make install' works.
b4d02860 2672
bf093080 267320010610
2674 - (bal) Missed two files in major resync. auth-bsdauth.c and auth-skey.c
2675
e697bda7 267620010609
2677 - OpenBSD CVS Sync
2678 - markus@cvs.openbsd.org 2001/05/30 12:55:13
68fa858a 2679 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
e697bda7 2680 packet.c serverloop.c session.c ssh.c ssh1.h]
2681 channel layer cleanup: merge header files and split .c files
36e1f6a1 2682 - markus@cvs.openbsd.org 2001/05/30 15:20:10
2683 [ssh.c]
2684 merge functions, simplify.
a5efa1bb 2685 - markus@cvs.openbsd.org 2001/05/31 10:30:17
68fa858a 2686 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
a5efa1bb 2687 packet.c serverloop.c session.c ssh.c]
68fa858a 2688 undo the .c file split, just merge the header and keep the cvs
a5efa1bb 2689 history
68fa858a 2690 - (bal) Channels.c and Channels.h -- "Merge Functions, simplify" (draged
8e7895b8 2691 out of ssh Attic)
68fa858a 2692 - (bal) Ooops.. nchan.c (and remove nchan.h) resync from OpenBSD ssh
a98da4aa 2693 Attic.
2694 - OpenBSD CVS Sync
2695 - markus@cvs.openbsd.org 2001/05/31 13:08:04
2696 [sshd_config]
2697 group options and add some more comments
e4f7282d 2698 - markus@cvs.openbsd.org 2001/06/03 14:55:39
2699 [channels.c channels.h session.c]
68fa858a 2700 use fatal_register_cleanup instead of atexit, sync with x11 authdir
e4f7282d 2701 handling
e5b71e99 2702 - markus@cvs.openbsd.org 2001/06/03 19:36:44
2703 [ssh-keygen.1]
2704 1-2 bits of entrophy per character (not per word), ok stevesk@
4fc334a2 2705 - markus@cvs.openbsd.org 2001/06/03 19:38:42
2706 [scp.c]
2707 pass -v to ssh; from slade@shore.net
f5e69c65 2708 - markus@cvs.openbsd.org 2001/06/03 20:06:11
2709 [auth2-chall.c]
68fa858a 2710 the challenge response device decides how to handle non-existing
f5e69c65 2711 users.
2712 -> fake challenges for skey and cryptocard
f0f32b8e 2713 - markus@cvs.openbsd.org 2001/06/04 21:59:43
2714 [channels.c channels.h session.c]
68fa858a 2715 switch uid when cleaning up tmp files and sockets; reported by
f0f32b8e 2716 zen-parse@gmx.net on bugtraq
c9130033 2717 - markus@cvs.openbsd.org 2001/06/04 23:07:21
2718 [clientloop.c serverloop.c sshd.c]
68fa858a 2719 set flags in the signal handlers, do real work in the main loop,
c9130033 2720 ok provos@
8dcd9d5c 2721 - markus@cvs.openbsd.org 2001/06/04 23:16:16
2722 [session.c]
2723 merge ssh1/2 x11-fwd setup, create listener after tmp-dir
aa144206 2724 - pvalchev@cvs.openbsd.org 2001/06/05 05:05:39
2725 [ssh-keyscan.1 ssh-keyscan.c]
2726 License clarification from David Mazieres, ok deraadt@
750c256a 2727 - markus@cvs.openbsd.org 2001/06/05 10:24:32
2728 [channels.c]
2729 don't delete the auth socket in channel_stop_listening()
2730 auth_sock_cleanup_proc() will take care of this.
fc2a1d28 2731 - markus@cvs.openbsd.org 2001/06/05 16:46:19
2732 [session.c]
2733 let session_close() delete the pty. deny x11fwd if xauthfile is set.
d87596b0 2734 - markus@cvs.openbsd.org 2001/06/06 23:13:54
2735 [ssh-dss.c ssh-rsa.c]
2736 cleanup, remove old code
edf9ae81 2737 - markus@cvs.openbsd.org 2001/06/06 23:19:35
2738 [ssh-add.c]
2739 remove debug message; Darren.Moffat@eng.sun.com
2a6a054e 2740 - markus@cvs.openbsd.org 2001/06/07 19:57:53
2741 [auth2.c]
2742 style is used for bsdauth.
2743 disconnect on user/service change (ietf-drafts)
449c5ba5 2744 - markus@cvs.openbsd.org 2001/06/07 20:23:05
68fa858a 2745 [authfd.c authfile.c channels.c kexdh.c kexgex.c packet.c ssh.c
449c5ba5 2746 sshconnect.c sshconnect1.c]
2747 use xxx_put_cstring()
e6abba31 2748 - markus@cvs.openbsd.org 2001/06/07 22:25:02
2749 [session.c]
2750 don't overwrite errno
2751 delay deletion of the xauth cookie
fd9ede94 2752 - markus@cvs.openbsd.org 2001/06/08 15:25:40
2753 [includes.h pathnames.h readconf.c servconf.c]
2754 move the path for xauth to pathnames.h
0abe778b 2755 - (bal) configure.in fix for Tru64 (forgeting to reset $LIB)
83c17f20 2756 - (bal) ANSIify strmode()
68fa858a 2757 - (bal) --with-catman should be --with-mantype patch by Dave
2758 Dykstra <dwd@bell-labs.com>
fd9ede94 2759
4869a96f 276020010606
e697bda7 2761 - OpenBSD CVS Sync
68fa858a 2762 - markus@cvs.openbsd.org 2001/05/17 21:34:15
e697bda7 2763 [ssh.1]
68fa858a 2764 no spaces in PreferredAuthentications;
5ba55ada 2765 meixner@rbg.informatik.tu-darmstadt.de
2766 - markus@cvs.openbsd.org 2001/05/18 14:13:29
68fa858a 2767 [auth-chall.c auth.h auth1.c auth2-chall.c auth2.c readconf.c
5ba55ada 2768 readconf.h servconf.c servconf.h sshconnect1.c sshconnect2.c sshd.c]
2769 improved kbd-interactive support. work by per@appgate.com and me
bc03d5aa 2770 - djm@cvs.openbsd.org 2001/05/19 00:36:40
2771 [session.c]
2772 Disable X11 forwarding if xauth binary is not found. Patch from Nalin
2773 Dahyabhai <nalin@redhat.com>; ok markus@
68fa858a 2774 - markus@cvs.openbsd.org 2001/05/19 16:05:41
2775 [scp.c]
3e4fc5f9 2776 ftruncate() instead of open()+O_TRUNC like rcp.c does
68fa858a 2777 allows scp /path/to/file localhost:/path/to/file
2778 - markus@cvs.openbsd.org 2001/05/19 16:08:43
2779 [sshd.8]
a18395da 2780 sort options; Matthew.Stier@fnc.fujitsu.com
68fa858a 2781 - markus@cvs.openbsd.org 2001/05/19 16:32:16
2782 [ssh.1 sshconnect2.c]
2783 change preferredauthentication order to
2784 publickey,hostbased,password,keyboard-interactive
3398dda9 2785 document that hostbased defaults to no, document order
47bf6266 2786 - markus@cvs.openbsd.org 2001/05/19 16:46:19
68fa858a 2787 [ssh.1 sshd.8]
2788 document MACs defaults with .Dq
2789 - stevesk@cvs.openbsd.org 2001/05/19 19:43:57
2790 [misc.c misc.h servconf.c sshd.8 sshd.c]
2791 sshd command-line arguments and configuration file options that
2792 specify time may be expressed using a sequence of the form:
e2b1fb42 2793 time[qualifier], where time is a positive integer value and qualifier
68fa858a 2794 is one of the following:
2795 <none>,s,m,h,d,w
2796 Examples:
2797 600 600 seconds (10 minutes)
2798 10m 10 minutes
2799 1h30m 1 hour 30 minutes (90 minutes)
2800 ok markus@
7e8c18e9 2801 - stevesk@cvs.openbsd.org 2001/05/19 19:57:09
68fa858a 2802 [channels.c]
2803 typo in error message
e697bda7 2804 - markus@cvs.openbsd.org 2001/05/20 17:20:36
c8445989 2805 [auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8
2806 sshd_config]
68fa858a 2807 configurable authorized_keys{,2} location; originally from peter@;
2808 ok djm@
1ddf764b 2809 - markus@cvs.openbsd.org 2001/05/24 11:12:42
68fa858a 2810 [auth.c]
2811 fix comment; from jakob@
2812 - stevesk@cvs.openbsd.org 2001/05/24 18:57:53
2813 [clientloop.c readconf.c ssh.c ssh.h]
4bf9c10e 2814 don't perform escape processing when ``EscapeChar none''; ok markus@
abe0fb9f 2815 - markus@cvs.openbsd.org 2001/05/25 14:37:32
68fa858a 2816 [ssh-keygen.c]
2817 use -P for -e and -y, too.
63cd7dd0 2818 - markus@cvs.openbsd.org 2001/05/28 08:04:39
68fa858a 2819 [ssh.c]
2820 fix usage()
2821 - markus@cvs.openbsd.org 2001/05/28 10:08:55
2822 [authfile.c]
eb2e1595 2823 key_load_private: set comment to filename for PEM keys
2cf27bc4 2824 - markus@cvs.openbsd.org 2001/05/28 22:51:11
68fa858a 2825 [cipher.c cipher.h]
2826 simpler 3des for ssh1
2827 - markus@cvs.openbsd.org 2001/05/28 23:14:49
2828 [channels.c channels.h nchan.c]
6fd8622b 2829 undo broken channel fix and try a different one. there
68fa858a 2830 should be still some select errors...
2831 - markus@cvs.openbsd.org 2001/05/28 23:25:24
2832 [channels.c]
2833 cleanup, typo
08dcb5d7 2834 - markus@cvs.openbsd.org 2001/05/28 23:58:35
68fa858a 2835 [packet.c packet.h sshconnect.c sshd.c]
2836 remove some lines, simplify.
a10bdd7c 2837 - markus@cvs.openbsd.org 2001/05/29 12:31:27
68fa858a 2838 [authfile.c]
2839 typo
5ba55ada 2840
5cde8062 284120010528
2842 - (tim) [conifgure.in] add setvbuf test needed for sftp-int.c
2843 Patch by Corinna Vinschen <vinschen@redhat.com>
2844
362df52e 284520010517
2846 - OpenBSD CVS Sync
2847 - markus@cvs.openbsd.org 2001/05/12 19:53:13
2848 [sftp-server.c]
2849 readlink does not NULL-terminate; mhe@home.se
6efa3d14 2850 - deraadt@cvs.openbsd.org 2001/05/15 22:04:01
2851 [ssh.1]
2852 X11 forwarding details improved
70ea8327 2853 - markus@cvs.openbsd.org 2001/05/16 20:51:57
2854 [authfile.c]
2855 return comments for private pem files, too; report from nolan@naic.edu
24b6b45f 2856 - markus@cvs.openbsd.org 2001/05/16 21:53:53
2857 [clientloop.c]
2858 check for open sessions before we call select(); fixes the x11 client
2859 bug reported by bowman@math.ualberta.ca
7231bd47 2860 - markus@cvs.openbsd.org 2001/05/16 22:09:21
2861 [channels.c nchan.c]
2862 more select() error fixes (don't set rfd/wfd to -1).
7043a38d 2863 - (bal) Enabled USE_PIPES for Cygwin on Corinna Vinschen <vinschen@redhat.com>
68fa858a 2864 - (bal) Corrected on_exit() emulation via atexit().
362df52e 2865
89aa792b 286620010512
2867 - OpenBSD CVS Sync
2868 - markus@cvs.openbsd.org 2001/05/11 14:59:56
2869 [clientloop.c misc.c misc.h]
2870 add unset_nonblock for stdout/err flushing in client_loop().
286e38f7 2871 - (bal) Patch to partial sync up contrib/solaris/ packaging software.
2872 Patch by pete <ninjaz@webexpress.com>
89aa792b 2873
97430469 287420010511
2875 - OpenBSD CVS Sync
2876 - markus@cvs.openbsd.org 2001/05/09 22:51:57
2877 [channels.c]
2878 fix -R for protocol 2, noticed by greg@nest.cx.
2879 bug was introduced with experimental dynamic forwarding.
a16092bb 2880 - markus@cvs.openbsd.org 2001/05/09 23:01:31
2881 [rijndael.h]
2882 fix prototype; J.S.Peatfield@damtp.cam.ac.uk
97430469 2883
588f4ed0 288420010509
2885 - OpenBSD CVS Sync
2886 - markus@cvs.openbsd.org 2001/05/06 21:23:31
2887 [cli.c]
2888 cli_read() fails to catch SIGINT + overflow; from obdb@zzlevo.net
d18e0850 2889 - markus@cvs.openbsd.org 2001/05/08 19:17:31
a01a10dd 2890 [channels.c serverloop.c clientloop.c]
d18e0850 2891 adds correct error reporting to async connect()s
68fa858a 2892 fixes the server-discards-data-before-connected-bug found by
d18e0850 2893 onoe@sm.sony.co.jp
8a624ebf 2894 - mouring@cvs.openbsd.org 2001/05/08 19:45:25
2895 [misc.c misc.h scp.c sftp.c]
2896 Use addargs() in sftp plus some clean up of addargs(). OK Markus
1b02d786 2897 - markus@cvs.openbsd.org 2001/05/06 21:45:14
2898 [clientloop.c]
68fa858a 2899 use atomicio for flushing stdout/stderr bufs. thanks to
1b02d786 2900 jbw@izanami.cee.hw.ac.uk
010980f6 2901 - markus@cvs.openbsd.org 2001/05/08 22:48:07
2902 [atomicio.c]
2903 no need for xmalloc.h, thanks to espie@
68fa858a 2904 - (bal) UseLogin patch for Solaris/UNICOS. Patch by Wayne Davison
7e2d5fa4 2905 <wayne@blorf.net>
99c8ddac 2906 - (bal) ./configure support to disable SIA on OSF1. Patch by
2907 Chris Adams <cmadams@hiwaay.net>
68fa858a 2908 - (bal) Updates from the Sony NEWS-OS platform by NAKAJI Hiroyuki
b81c369b 2909 <nakaji@tutrp.tut.ac.jp>
588f4ed0 2910
7b22534a 291120010508
68fa858a 2912 - (bal) Fixed configure test for USE_SIA.
7b22534a 2913
94539b2a 291420010506
2915 - (djm) Update config.guess and config.sub with latest versions (from
2916 ftp://ftp.gnu.org/gnu/config/) to allow configure on ia64-hpux.
2917 Suggested by Jason Mader <jason@ncac.gwu.edu>
96c63318 2918 - (bal) White Space and #ifdef sync with OpenBSD
044b0662 2919 - (bal) Add 'seed_rng()' to ssh-add.c
9e9bd8c0 2920 - (bal) CVS ID updates for readpass.c, readpass.h, cli.c, and cli.h
cf7ff074 2921 - OpenBSD CVS Sync
2922 - stevesk@cvs.openbsd.org 2001/05/05 13:42:52
2923 [sftp.1 ssh-add.1 ssh-keygen.1]
2924 typos, grammar
94539b2a 2925
98143cfc 292620010505
2927 - OpenBSD CVS Sync
2928 - stevesk@cvs.openbsd.org 2001/05/04 14:21:56
2929 [ssh.1 sshd.8]
2930 typos
5b9601c8 2931 - markus@cvs.openbsd.org 2001/05/04 14:34:34
2932 [channels.c]
94539b2a 2933 channel_new() reallocs channels[], we cannot use Channel *c after
2934 calling channel_new(), XXX fix this in the future...
719fc62f 2935 - markus@cvs.openbsd.org 2001/05/04 23:47:34
2936 [channels.c channels.h clientloop.c nchan.c nchan.h serverloop.c ssh.c]
68fa858a 2937 move to Channel **channels (instead of Channel *channels), fixes realloc
2938 problems. channel_new now returns a Channel *, favour Channel * over
719fc62f 2939 channel id. remove old channel_allocate interface.
98143cfc 2940
f92fee1f 294120010504
2942 - OpenBSD CVS Sync
2943 - stevesk@cvs.openbsd.org 2001/05/03 15:07:39
2944 [channels.c]
2945 typo in debug() string
503e7e5b 2946 - markus@cvs.openbsd.org 2001/05/03 15:45:15
2947 [session.c]
2948 exec shell -c /bin/sh .ssh/sshrc, from abartlet@pcug.org.au
c98cab9b 2949 - stevesk@cvs.openbsd.org 2001/05/03 21:43:01
2950 [servconf.c]
2951 remove "\n" from fatal()
1fcde3fe 2952 - mouring@cvs.openbsd.org 2001/05/03 23:09:53
2953 [misc.c misc.h scp.c sftp.c]
2954 Move colon() and cleanhost() to misc.c where I should I have put it in
2955 the first place
044aa419 2956 - (bal) Updated Cygwin README by Corinna Vinschen <vinschen@redhat.com>
c7ccfd39 2957 - (bal) Avoid socket file security issues in ssh-agent for Cygwin.
2958 Patch by Egor Duda <deo@logos-m.ru>
f92fee1f 2959
065604bb 296020010503
2961 - OpenBSD CVS Sync
2962 - markus@cvs.openbsd.org 2001/05/02 16:41:20
2963 [ssh-add.c]
2964 fix prompt for ssh-add.
2965
742ee8f2 296620010502
2967 - OpenBSD CVS Sync
2968 - mouring@cvs.openbsd.org 2001/05/02 01:25:39
2969 [readpass.c]
2970 Put the 'const' back into ssh_askpass() function. Pointed out
2971 by Mark Miller <markm@swoon.net>. OK Markus
2972
3435f5a6 297320010501
2974 - OpenBSD CVS Sync
2975 - markus@cvs.openbsd.org 2001/04/30 11:18:52
2976 [readconf.c readconf.h ssh.1 ssh.c sshconnect.c]
2977 implement 'ssh -b bind_address' like 'telnet -b'
eef7adcb 2978 - markus@cvs.openbsd.org 2001/04/30 15:50:46
2979 [compat.c compat.h kex.c]
2980 allow interop with weaker key generation used by ssh-2.0.x, x < 10
ec430473 2981 - markus@cvs.openbsd.org 2001/04/30 16:02:49
2982 [compat.c]
2983 ssh-2.0.10 has the weak-key-bug, too.
3ca6cc45 2984 - (tim) [contrib/caldera/openssh.spec] add Requires line for Caldera 3.1
3435f5a6 2985
e8171bff 298620010430
39aefe7b 2987 - OpenBSD CVS Sync
2988 - markus@cvs.openbsd.org 2001/04/29 18:32:52
2989 [serverloop.c]
2990 fix whitespace
fbe90f7b 2991 - markus@cvs.openbsd.org 2001/04/29 19:16:52
2992 [channels.c clientloop.c compat.c compat.h serverloop.c]
2993 more ssh.com-2.0.x bug-compat; from per@appgate.com
e8171bff 2994 - (tim) New version of mdoc2man.pl from Mark D. Roth <roth+openssh@feep.net>
0b47e48f 2995 - (djm) Add .cvsignore files, suggested by Wayne Davison <wayne@blorf.net>
39aefe7b 2996
baf8c81a 299720010429
2998 - (bal) Updated INSTALL. PCRE moved to a new place.
e878ffe1 2999 - (djm) Release OpenSSH-2.9p1
baf8c81a 3000
0096ac62 300120010427
3002 - (bal) Fixed uidswap.c so it should work on non-posix complient systems.
3003 patch based on 2.5.2 version by djm.
95595a77 3004 - (bal) Build manpages and config files once unless changed. Patch by
3005 Carson Gaspar <carson@taltos.org>
68fa858a 3006 - (bal) arpa/nameser.h does not exist on Cygwin. Patch by Corinna
4a2df58f 3007 Vinschen <vinschen@redhat.com>
5ef815d7 3008 - (bal) Add /etc/sysconfig/sshd support to redhat's sshd.init. Patch by
3009 Pekka Savola <pekkas@netcore.fi>
68fa858a 3010 - (bal) Cygwin lacks setgroups() API. Patch by Corinna Vinschen
229be2df 3011 <vinschen@redhat.com>
cc3ccfdc 3012 - (bal) version.h synced, RPM specs updated for 2.9
b1e2a48c 3013 - (tim) update contrib/caldera files with what Caldera is using.
3014 <sps@caldera.de>
0096ac62 3015
b587c165 301620010425
3017 - OpenBSD CVS Sync
3018 - markus@cvs.openbsd.org 2001/04/23 21:57:07
3019 [ssh-keygen.1 ssh-keygen.c]
3020 allow public key for -e, too
012bc0e1 3021 - markus@cvs.openbsd.org 2001/04/23 22:14:13
3022 [ssh-keygen.c]
3023 remove debug
f8252c48 3024 - (bal) Whitespace resync w/ OpenBSD for uidswap.c
10f72868 3025 - (djm) Add new server configuration directive 'PAMAuthenticationViaKbdInt'
68fa858a 3026 (default: off), implies KbdInteractiveAuthentication. Suggestion from
10f72868 3027 markus@
c2d059b5 3028 - (djm) Include crypt.h if available in auth-passwd.c
533875af 3029 - tim@mindrot.org 2001/04/25 21:38:01 [configure.in]
3030 man page detection fixes for SCO
b587c165 3031
da89cf4d 303220010424
3033 - OpenBSD CVS Sync
3034 - markus@cvs.openbsd.org 2001/04/22 23:58:36
3035 [ssh-keygen.1 ssh.1 sshd.8]
3036 document hostbased and other cleanup
5e29aeaf 3037 - (stevesk) start_pam() doesn't use DNS now for sshd -u0.
3cc990d7 3038 - (stevesk) auth-pam.c: use PERMIT_NO_PASSWD
68fa858a 3039 - (bal) sys/queue.h is bogus for NCR platform. Patch by Daniel Carroll
d8e76a0a 3040 <dan@mesastate.edu>
3644dc25 3041 - (bal) Fixed contrib/postinstall.in. Patch by wsanders@wsanders.net
da89cf4d 3042
a3626e12 304320010422
3044 - OpenBSD CVS Sync
3045 - markus@cvs.openbsd.org 2001/04/20 16:32:22
3046 [uidswap.c]
3047 set non-privileged gid before uid; tholo@ and deraadt@
1a726b04 3048 - mouring@cvs.openbsd.org 2001/04/21 00:55:57
3049 [sftp.1]
3050 Spelling
67b964a1 3051 - djm@cvs.openbsd.org 2001/04/22 08:13:30
3052 [ssh.1]
3053 typos spotted by stevesk@; ok deraadt@
ba917921 3054 - markus@cvs.openbsd.org 2001/04/22 12:34:05
3055 [scp.c]
3056 scp > 2GB; niles@scyld.com; ok deraadt@, djm@
5deceabb 3057 - markus@cvs.openbsd.org 2001/04/22 13:25:37
3058 [ssh-keygen.1 ssh-keygen.c]
3059 rename arguments -x -> -e (export key), -X -> -i (import key)
3060 xref draft-ietf-secsh-publickeyfile-01.txt
2cad6cef 3061 - markus@cvs.openbsd.org 2001/04/22 13:32:27
3062 [sftp-server.8 sftp.1 ssh.1 sshd.8]
3063 xref draft-ietf-secsh-*
bcaa828e 3064 - markus@cvs.openbsd.org 2001/04/22 13:41:02
3065 [ssh-keygen.1 ssh-keygen.c]
3066 style, noted by stevesk; sort flags in usage
a3626e12 3067
df841692 306820010421
3069 - OpenBSD CVS Sync
3070 - djm@cvs.openbsd.org 2001/04/20 07:17:51
3071 [clientloop.c ssh.1]
3072 Split out and improve escape character documentation, mention ~R in
3073 ~? help text; ok markus@
0e7e0abe 3074 - Update RPM spec files for CVS version.h
1ddee76b 3075 - (stevesk) set the default PAM service name to __progname instead
3076 of the hard-coded value "sshd"; from Mark D. Roth <roth@feep.net>
4b28be2c 3077 - (stevesk) document PAM service name change in INSTALL
13dd877b 3078 - tim@mindrot.org 2001/04/21 14:25:57 [Makefile.in configure.in]
3079 fix perl test, fix nroff test, fix Makefile to build outside source tree
df841692 3080
05cc0c99 308120010420
68fa858a 3082 - OpenBSD CVS Sync
05cc0c99 3083 - ian@cvs.openbsd.org 2001/04/18 16:21:05
68fa858a 3084 [ssh-keyscan.1]
3085 Fix typo reported in PR/1779
3086 - markus@cvs.openbsd.org 2001/04/18 21:57:42
3087 [readpass.c ssh-add.c]
561e5254 3088 call askpass from ssh, too, based on work by roth@feep.net, ok deraadt
68fa858a 3089 - markus@cvs.openbsd.org 2001/04/18 22:03:45
3090 [auth2.c sshconnect2.c]
f98c3421 3091 use FDQN with trailing dot in the hostbased auth packets, ok deraadt@
57a5edd8 3092 - markus@cvs.openbsd.org 2001/04/18 22:48:26
68fa858a 3093 [auth2.c]
3094 no longer const
3095 - markus@cvs.openbsd.org 2001/04/18 23:43:26
3096 [auth2.c compat.c sshconnect2.c]
3097 more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works now
8dddf799 3098 (however the 2.1.0 server seems to work only if debug is enabled...)
ae88ea7e 3099 - markus@cvs.openbsd.org 2001/04/18 23:44:51
68fa858a 3100 [authfile.c]
3101 error->debug; noted by fries@
3102 - markus@cvs.openbsd.org 2001/04/19 00:05:11
3103 [auth2.c]
3104 use local variable, no function call needed.
5cf13595 3105 (btw, hostbased works now with ssh.com >= 2.0.13)
431a2493 3106 - (bal) Put scp-common.h back into scp.c (it exists in the upstream
3107 tree) pointed out by Tom Holroyd <tomh@po.crl.go.jp>
05cc0c99 3108
e78e738a 310920010418
68fa858a 3110 - OpenBSD CVS Sync
e78e738a 3111 - markus@cvs.openbsd.org 2001/04/17 19:34:25
3a83b819 3112 [session.c]
3113 move auth_approval to do_authenticated().
3114 do_child(): nuke hostkeys from memory
3115 don't source .ssh/rc for subsystems.
3116 - markus@cvs.openbsd.org 2001/04/18 14:15:00
3117 [canohost.c]
3118 debug->debug3
ce2af031 3119 - (bal) renabled 'catman-do:' and fixed it. So now catman pages should
3120 be working again.
e0c4d3ac 3121 - (bal) Makfile day... Cleaned up multiple mantype support (Patch by
3122 Mark D. Roth <roth+openssh@feep.net>), and fixed PIDDIR support.
3a83b819 3123
8c6b78e4 312420010417
3125 - (bal) Add perl5 check for HP/UX, Removed GNUness from Makefile.in
6d165a89 3126 and temporary commented out 'catman-do:' since it is broken. Patches
8c6b78e4 3127 for the first two by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
a88b7b57 3128 - OpenBSD CVS Sync
53b8fe68 3129 - deraadt@cvs.openbsd.org 2001/04/16 08:26:04
3130 [key.c]
3131 better safe than sorry in later mods; yongari@kt-is.co.kr
3132 - markus@cvs.openbsd.org 2001/04/17 08:14:01
3133 [sshconnect1.c]
3134 check for key!=NULL, thanks to costa
3135 - markus@cvs.openbsd.org 2001/04/17 09:52:48
3136 [clientloop.c]
cf6bc93c 3137 handle EINTR/EAGAIN on read; ok deraadt@
53b8fe68 3138 - markus@cvs.openbsd.org 2001/04/17 10:53:26
3139 [key.c key.h readconf.c readconf.h ssh.1 sshconnect2.c]
e961a8f9 3140 add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@
53b8fe68 3141 - markus@cvs.openbsd.org 2001/04/17 12:55:04
3142 [channels.c ssh.c]
3143 undo socks5 and https support since they are not really used and
3144 only bloat ssh. remove -D from usage(), since '-D' is experimental.
3145
e4664c3e 314620010416
3147 - OpenBSD CVS Sync
3148 - stevesk@cvs.openbsd.org 2001/04/15 01:35:22
3149 [ttymodes.c]
3150 fix comments
ec1f12d3 3151 - markus@cvs.openbsd.org 2001/04/15 08:43:47
3152 [dh.c sftp-glob.c sftp-glob.h sftp-int.c sshconnect2.c sshd.c]
3153 some unused variable and typos; from tomh@po.crl.go.jp
58cfa257 3154 - markus@cvs.openbsd.org 2001/04/15 16:58:03
3155 [authfile.c ssh-keygen.c sshd.c]
3156 don't use errno for key_{load,save}_private; discussion w/ solar@openwall
e968270c 3157 - markus@cvs.openbsd.org 2001/04/15 17:16:00
3158 [clientloop.c]
3159 set stdin/out/err to nonblocking in SSH proto 1, too. suggested by ho@
3160 should fix some of the blocking problems for rsync over SSH-1
84fc17bf 3161 - stevesk@cvs.openbsd.org 2001/04/15 19:41:21
3162 [sshd.8]
3163 some ClientAlive cleanup; ok markus@
b7c70970 3164 - stevesk@cvs.openbsd.org 2001/04/15 21:28:35
3165 [readconf.c servconf.c]
3166 use fatal() or error() vs. fprintf(); ok markus@
5d97cfbf 3167 - (djm) Convert mandoc manpages to man automatically. Patch from Mark D.
3168 Roth <roth+openssh@feep.net>
6023325e 3169 - (bal) CVS ID fix up and slight manpage fix from OpenBSD tree.
47b53518 3170 - (djm) OpenBSD CVS Sync
3171 - mouring@cvs.openbsd.org 2001/04/16 02:31:44
3172 [scp.c sftp.c]
3173 IPv6 support for sftp (which I bungled in my last patch) which is
3174 borrowed from scp.c. Thanks to Markus@ for pointing it out.
764291b3 3175 - deraadt@cvs.openbsd.org 2001/04/16 08:05:34
3176 [xmalloc.c]
3177 xrealloc dealing with ptr == nULL; mouring
f2c2fd71 3178 - djm@cvs.openbsd.org 2001/04/16 08:19:31
3179 [session.c]
68fa858a 3180 Split motd and hushlogin checks into seperate functions, helps for
f2c2fd71 3181 portable. From Chris Adams <cmadams@hiwaay.net>; ok markus@
68fa858a 3182 - Fix OSF SIA support displaying too much information for quiet
3183 logins and logins where access was denied by SIA. Patch from Chris Adams
c96a4aaf 3184 <cmadams@hiwaay.net>
e4664c3e 3185
f03228b1 318620010415
3187 - OpenBSD CVS Sync
3188 - deraadt@cvs.openbsd.org 2001/04/14 04:31:01
3189 [ssh-add.c]
3190 do not double free
9cf972fa 3191 - markus@cvs.openbsd.org 2001/04/14 16:17:14
3192 [channels.c]
3193 remove some channels that are not appropriate for keepalive.
eae942e2 3194 - markus@cvs.openbsd.org 2001/04/14 16:27:57
3195 [ssh-add.c]
3196 use clear_pass instead of xfree()
30dcc918 3197 - stevesk@cvs.openbsd.org 2001/04/14 16:33:20
3198 [clientloop.c packet.h session.c ssh.c ttymodes.c ttymodes.h]
3199 protocol 2 tty modes support; ok markus@
36967a16 3200 - stevesk@cvs.openbsd.org 2001/04/14 17:04:42
3201 [scp.c]
3202 'T' handling rcp/scp sync; ok markus@
e4664c3e 3203 - Missed sshtty.[ch] in Sync.
f03228b1 3204
e400a640 320520010414
3206 - Sync with OpenBSD glob.c, strlcat.c and vis.c changes
68fa858a 3207 - Cygwin sftp/sftp-server binary mode patch from Corinna Vinschen
fe56c12b 3208 <vinschen@redhat.com>
3ffc6336 3209 - OpenBSD CVS Sync
3210 - beck@cvs.openbsd.org 2001/04/13 22:46:54
3211 [channels.c channels.h servconf.c servconf.h serverloop.c sshd.8]
3212 Add options ClientAliveInterval and ClientAliveCountMax to sshd.
3213 This gives the ability to do a "keepalive" via the encrypted channel
3214 which can't be spoofed (unlike TCP keepalives). Useful for when you want
3215 to use ssh connections to authenticate people for something, and know
3216 relatively quickly when they are no longer authenticated. Disabled
3217 by default (of course). ok markus@
e400a640 3218
cc44f691 321920010413
68fa858a 3220 - OpenBSD CVS Sync
3221 - markus@cvs.openbsd.org 2001/04/12 14:29:09
3222 [ssh.c]
3223 show debug output during option processing, report from
cc44f691 3224 pekkas@netcore.fi
8002af61 3225 - markus@cvs.openbsd.org 2001/04/12 19:15:26
68fa858a 3226 [auth-rhosts.c auth.h auth2.c buffer.c canohost.c canohost.h
3227 compat.c compat.h hostfile.c pathnames.h readconf.c readconf.h
3228 servconf.c servconf.h ssh.c sshconnect.c sshconnect.h sshconnect1.c
8002af61 3229 sshconnect2.c sshd_config]
3230 implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
3231 similar to RhostRSAAuthentication unless you enable (the experimental)
3232 HostbasedUsesNameFromPacketOnly option. please test. :)
0140e66a 3233 - markus@cvs.openbsd.org 2001/04/12 19:39:27
3234 [readconf.c]
3235 typo
2d2a2c65 3236 - stevesk@cvs.openbsd.org 2001/04/12 20:09:38
3237 [misc.c misc.h readconf.c servconf.c ssh.c sshd.c]
3238 robust port validation; ok markus@ jakob@
edeeab1e 3239 - mouring@cvs.openbsd.org 2001/04/12 23:17:54
3240 [sftp-int.c sftp-int.h sftp.1 sftp.c]
3241 Add support for:
3242 sftp [user@]host[:file [file]] - Fetch remote file(s)
3243 sftp [user@]host[:dir[/]] - Start in remote dir/
3244 OK deraadt@
57aa8961 3245 - stevesk@cvs.openbsd.org 2001/04/13 01:26:17
3246 [ssh.c]
3247 missing \n in error message
96f8b59f 3248 - (bal) Added openbsd-compat/inet_ntop.[ch] since HP/UX (and others)
3249 lack it.
cc44f691 3250
28b9cb4d 325120010412
68fa858a 3252 - OpenBSD CVS Sync
28b9cb4d 3253 - markus@cvs.openbsd.org 2001/04/10 07:46:58
68fa858a 3254 [channels.c]
3255 cleanup socks4 handling
3256 - itojun@cvs.openbsd.org 2001/04/10 09:13:22
c0ecc314 3257 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
68fa858a 3258 document id_rsa{.pub,}. markus ok
070adba2 3259 - markus@cvs.openbsd.org 2001/04/10 12:15:23
68fa858a 3260 [channels.c]
3261 debug cleanup
45a2e669 3262 - djm@cvs.openbsd.org 2001/04/11 07:06:22
3263 [sftp-int.c]
3264 'mget' and 'mput' aliases; ok markus@
6031af8d 3265 - markus@cvs.openbsd.org 2001/04/11 10:59:01
3266 [ssh.c]
3267 use strtol() for ports, thanks jakob@
6683b40f 3268 - markus@cvs.openbsd.org 2001/04/11 13:56:13
3269 [channels.c ssh.c]
3270 https-connect and socks5 support. i feel so bad.
ff14faf1 3271 - lebel@cvs.openbsd.org 2001/04/11 16:25:30
3272 [sshd.8 sshd.c]
3273 implement the -e option into sshd:
3274 -e When this option is specified, sshd will send the output to the
3275 standard error instead of the system log.
3276 markus@ OK.
28b9cb4d 3277
0a85ab61 327820010410
3279 - OpenBSD CVS Sync
3280 - deraadt@cvs.openbsd.org 2001/04/08 20:52:55
3281 [sftp.c]
3282 do not modify an actual argv[] entry
b2ae83b8 3283 - stevesk@cvs.openbsd.org 2001/04/08 23:28:27
3284 [sshd.8]
3285 spelling
317611b5 3286 - stevesk@cvs.openbsd.org 2001/04/09 00:42:05
3287 [sftp.1]
3288 spelling
a8666d84 3289 - markus@cvs.openbsd.org 2001/04/09 15:12:23
3290 [ssh-add.c]
3291 passphrase caching: ssh-add tries last passphrase, clears passphrase if
3292 not successful and after last try.
3293 based on discussions with espie@, jakob@, ... and code from jakob@ and
3294 wolfgang@wsrcc.com
49ae4185 3295 - markus@cvs.openbsd.org 2001/04/09 15:19:49
3296 [ssh-add.1]
3297 ssh-add retries the last passphrase...
b8a297f1 3298 - stevesk@cvs.openbsd.org 2001/04/09 18:00:15
3299 [sshd.8]
3300 ListenAddress mandoc from aaron@
0a85ab61 3301
6e9944b8 330220010409
febd3f8e 3303 - (stevesk) use setresgid() for setegid() if needed
26de7942 3304 - (stevesk) configure.in: typo
6e9944b8 3305 - OpenBSD CVS Sync
3306 - stevesk@cvs.openbsd.org 2001/04/08 16:01:36
3307 [sshd.8]
3308 document ListenAddress addr:port
d64050ef 3309 - markus@cvs.openbsd.org 2001/04/08 13:03:00
3310 [ssh-add.c]
3311 init pointers with NULL, thanks to danimal@danimal.org
d0a4c20b 3312 - markus@cvs.openbsd.org 2001/04/08 11:27:33
3313 [clientloop.c]
3314 leave_raw_mode if ssh2 "session" is closed
63bd8c36 3315 - markus@cvs.openbsd.org 2001/04/06 21:00:17
3316 [auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth2.c channels.c session.c
3317 ssh.c sshconnect.c sshconnect.h uidswap.c uidswap.h]
3318 do gid/groups-swap in addition to uid-swap, should help if /home/group
3319 is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks
3320 to olar@openwall.com is comments. we had many requests for this.
0490e609 3321 - markus@cvs.openbsd.org 2001/04/07 08:55:18
3322 [buffer.c channels.c channels.h readconf.c ssh.c]
68fa858a 3323 allow the ssh client act as a SOCKS4 proxy (dynamic local
3324 portforwarding). work by Dan Kaminsky <dankamin@cisco.com> and me.
3325 thanks to Dan for this great patch: use 'ssh -D 1080 host' and make
0490e609 3326 netscape use localhost:1080 as a socks proxy.
d98d029a 3327 - markus@cvs.openbsd.org 2001/04/08 11:24:33
3328 [uidswap.c]
3329 KNF
6e9944b8 3330
d9d49fdb 333120010408
3332 - OpenBSD CVS Sync
3333 - stevesk@cvs.openbsd.org 2001/04/06 22:12:47
3334 [hostfile.c]
3335 unused; typo in comment
d11c1288 3336 - stevesk@cvs.openbsd.org 2001/04/06 22:25:25
3337 [servconf.c]
3338 in addition to:
3339 ListenAddress host|ipv4_addr|ipv6_addr
3340 permit:
3341 ListenAddress [host|ipv4_addr|ipv6_addr]:port
3342 ListenAddress host|ipv4_addr:port
3343 sshd.8 updates coming. ok markus@
d9d49fdb 3344
613fc910 334520010407
3346 - (bal) CVS ID Resync of version.h
cc94bd38 3347 - OpenBSD CVS Sync
3348 - markus@cvs.openbsd.org 2001/04/05 23:39:20
3349 [serverloop.c]
3350 keep the ssh session even if there is no active channel.
3351 this is more in line with the protocol spec and makes
3352 ssh -N -L 1234:server:110 host
3353 more useful.
3354 based on discussion with <mats@mindbright.se> long time ago
3355 and recent mail from <res@shore.net>
0fc791ba 3356 - deraadt@cvs.openbsd.org 2001/04/06 16:46:59
3357 [scp.c]
3358 remove trailing / from source paths; fixes pr#1756
68fa858a 3359
63f7e231 336020010406
3361 - (stevesk) logintest.c: fix for systems without __progname
72170131 3362 - (stevesk) Makefile.in: log.o is in libssh.a
d8a2f554 3363 - OpenBSD CVS Sync
3364 - markus@cvs.openbsd.org 2001/04/05 10:00:06
3365 [compat.c]
3366 2.3.x does old GEX, too; report jakob@
6ba22c93 3367 - markus@cvs.openbsd.org 2001/04/05 10:39:03
3368 [compress.c compress.h packet.c]
3369 reset compress state per direction when rekeying.
3667ba79 3370 - markus@cvs.openbsd.org 2001/04/05 10:39:48
3371 [version.h]
3372 temporary version 2.5.4 (supports rekeying).
3373 this is not an official release.
cd332296 3374 - markus@cvs.openbsd.org 2001/04/05 10:42:57
68fa858a 3375 [auth-chall.c authfd.c channels.c clientloop.c kex.c kexgex.c key.c
3376 mac.c packet.c serverloop.c sftp-client.c sftp-client.h sftp-glob.c
3377 sftp-glob.h sftp-int.c sftp-server.c sftp.c ssh-keygen.c sshconnect.c
cd332296 3378 sshconnect2.c sshd.c]
3379 fix whitespace: unexpand + trailing spaces.
255cfda1 3380 - markus@cvs.openbsd.org 2001/04/05 11:09:17
3381 [clientloop.c compat.c compat.h]
3382 add SSH_BUG_NOREKEY and detect broken (=all old) openssh versions.
b4a19d21 3383 - markus@cvs.openbsd.org 2001/04/05 15:45:43
3384 [ssh.1]
3385 ssh defaults to protocol v2; from quisar@quisar.ambre.net
46e3af7f 3386 - stevesk@cvs.openbsd.org 2001/04/05 15:48:18
3387 [canohost.c canohost.h session.c]
3388 move get_remote_name_or_ip() to canohost.[ch]; for portable. ok markus@
54506d2e 3389 - markus@cvs.openbsd.org 2001/04/05 20:01:10
3390 [clientloop.c]
3391 for ~R print message if server does not support rekeying. (and fix ~R).
b37caf1a 3392 - markus@cvs.openbsd.org 2001/04/05 21:02:46
3393 [buffer.c]
3394 better error message
eb0dd41f 3395 - markus@cvs.openbsd.org 2001/04/05 21:05:24
3396 [clientloop.c ssh.c]
3397 don't request a session for 'ssh -N', pointed out slade@shore.net
63f7e231 3398
d8ee838b 339920010405
68fa858a 3400 - OpenBSD CVS Sync
3401 - markus@cvs.openbsd.org 2001/04/04 09:48:35
d8ee838b 3402 [kex.c kex.h kexdh.c kexgex.c packet.c sshconnect2.c sshd.c]
68fa858a 3403 don't sent multiple kexinit-requests.
3404 send newkeys, block while waiting for newkeys.
3405 fix comments.
3406 - markus@cvs.openbsd.org 2001/04/04 14:34:58
3407 [clientloop.c kex.c kex.h serverloop.c sshconnect2.c sshd.c]
3408 enable server side rekeying + some rekey related clientup.
7a37c112 3409 todo: we should not send any non-KEX messages after we send KEXINIT
5adb303f 3410 - markus@cvs.openbsd.org 2001/04/04 15:50:55
3411 [compat.c]
3412 f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov
c422989b 3413 - markus@cvs.openbsd.org 2001/04/04 20:25:38
68fa858a 3414 [channels.c channels.h clientloop.c kex.c kex.h serverloop.c
c422989b 3415 sshconnect2.c sshd.c]
3416 more robust rekeying
3417 don't send channel data after rekeying is started.
0715ec6c 3418 - markus@cvs.openbsd.org 2001/04/04 20:32:56
3419 [auth2.c]
3420 we don't care about missing bannerfiles; from tsoome@ut.ee, ok deraadt@
bbb4cc1b 3421 - markus@cvs.openbsd.org 2001/04/04 22:04:35
3422 [kex.c kexgex.c serverloop.c]
3423 parse full kexinit packet.
3424 make server-side more robust, too.
a7ca6275 3425 - markus@cvs.openbsd.org 2001/04/04 23:09:18
3426 [dh.c kex.c packet.c]
3427 clear+free keys,iv for rekeying.
3428 + fix DH mem leaks. ok niels@
86c9e193 3429 - (stevesk) don't use vhangup() if defined(HAVE_DEV_PTMX); also removes
3430 BROKEN_VHANGUP
d8ee838b 3431
9d451c5a 343220010404
3433 - OpenBSD CVS Sync
3434 - deraadt@cvs.openbsd.org 2001/04/02 17:32:23
3435 [ssh-agent.1]
3436 grammar; slade@shore.net
894c5fa6 3437 - stevesk@cvs.openbsd.org 2001/04/03 13:56:11
3438 [sftp-glob.c ssh-agent.c ssh-keygen.c]
3439 free() -> xfree()
a5c9ffdb 3440 - markus@cvs.openbsd.org 2001/04/03 19:53:29
3441 [dh.c dh.h kex.c kex.h sshconnect2.c sshd.c]
3442 move kex to kex*.c, used dispatch_set() callbacks for kex. should
3443 make rekeying easier.
3463ff28 3444 - todd@cvs.openbsd.org 2001/04/03 21:19:38
3445 [ssh_config]
3446 id_rsa1/2 -> id_rsa; ok markus@
d1ac6175 3447 - markus@cvs.openbsd.org 2001/04/03 23:32:12
3448 [kex.c kex.h packet.c sshconnect2.c sshd.c]
3449 undo parts of recent my changes: main part of keyexchange does not
3450 need dispatch-callbacks, since application data is delayed until
3451 the keyexchange completes (if i understand the drafts correctly).
3452 add some infrastructure for re-keying.
e092ce67 3453 - markus@cvs.openbsd.org 2001/04/04 00:06:54
3454 [clientloop.c sshconnect2.c]
3455 enable client rekeying
3456 (1) force rekeying with ~R, or
3457 (2) if the server requests rekeying.
3458 works against ssh-2.0.12/2.0.13/2.1.0/2.2.0/2.3.0/2.3.1/2.4.0
0bc35151 3459 - (bal) Oops.. Missed including kexdh.c and kexgex.c in OpenBSD sync.
9d451c5a 3460
672f212f 346120010403
3462 - OpenBSD CVS Sync
3463 - stevesk@cvs.openbsd.org 2001/04/02 14:15:31
3464 [sshd.8]
3465 typo; ok markus@
6be9a5e8 3466 - stevesk@cvs.openbsd.org 2001/04/02 14:20:23
3467 [readconf.c servconf.c]
3468 correct comment; ok markus@
fe39c3df 3469 - (stevesk) nchan.c: remove ostate checks and add EINVAL to
3470 shutdown(SHUT_RD) error() bypass for HP-UX.
672f212f 3471
0be033ea 347220010402
3473 - (stevesk) log.c openbsd sync; missing newlines
5d9e4c8d 3474 - (stevesk) sshpty.h openbsd sync; PTY_H -> SSHPTY_H
0be033ea 3475
b7a2a476 347620010330
3477 - (djm) Another openbsd-compat/glob.c sync
4047d868 3478 - (djm) OpenBSD CVS Sync
3479 - provos@cvs.openbsd.org 2001/03/28 21:59:41
3480 [kex.c kex.h sshconnect2.c sshd.c]
3481 forgot to include min and max params in hash, okay markus@
c8682232 3482 - provos@cvs.openbsd.org 2001/03/28 22:04:57
3483 [dh.c]
3484 more sanity checking on primes file
d9cd3575 3485 - markus@cvs.openbsd.org 2001/03/28 22:43:31
3486 [auth.h auth2.c auth2-chall.c]
3487 check auth_root_allowed for kbd-int auth, too.
86b878d5 3488 - provos@cvs.openbsd.org 2001/03/29 14:24:59
3489 [sshconnect2.c]
3490 use recommended defaults
1ad64a93 3491 - stevesk@cvs.openbsd.org 2001/03/29 21:06:21
3492 [sshconnect2.c sshd.c]
3493 need to set both STOC and CTOS for SSH_BUG_BIGENDIANAES; ok markus@
03b8f8be 3494 - markus@cvs.openbsd.org 2001/03/29 21:17:40
3495 [dh.c dh.h kex.c kex.h]
3496 prepare for rekeying: move DH code to dh.c
76ca7b01 3497 - djm@cvs.openbsd.org 2001/03/29 23:42:01
3498 [sshd.c]
3499 Protocol 1 key regeneration log => verbose, some KNF; ok markus@
b7a2a476 3500
01ce749f 350120010329
3502 - OpenBSD CVS Sync
3503 - stevesk@cvs.openbsd.org 2001/03/26 15:47:59
3504 [ssh.1]
3505 document more defaults; misc. cleanup. ok markus@
569807fb 3506 - markus@cvs.openbsd.org 2001/03/26 23:12:42
3507 [authfile.c]
3508 KNF
457fc0c6 3509 - markus@cvs.openbsd.org 2001/03/26 23:23:24
3510 [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
3511 try to read private f-secure ssh v2 rsa keys.
1a92bd7e 3512 - markus@cvs.openbsd.org 2001/03/27 10:34:08
3513 [ssh-rsa.c sshd.c]
3514 use EVP_get_digestbynid, reorder some calls and fix missing free.
a4da628b 3515 - markus@cvs.openbsd.org 2001/03/27 10:57:00
3516 [compat.c compat.h ssh-rsa.c]
3517 some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5
3518 signatures in SSH protocol 2, ok djm@
db1cd2f3 3519 - provos@cvs.openbsd.org 2001/03/27 17:46:50
3520 [compat.c compat.h dh.c dh.h ssh2.h sshconnect2.c sshd.c version.h]
3521 make dh group exchange more flexible, allow min and max group size,
3522 okay markus@, deraadt@
e5ff6ecf 3523 - stevesk@cvs.openbsd.org 2001/03/28 19:56:23
3524 [scp.c]
3525 start to sync scp closer to rcp; ok markus@
03cb2621 3526 - stevesk@cvs.openbsd.org 2001/03/28 20:04:38
3527 [scp.c]
3528 usage more like rcp and add missing -B to usage; ok markus@
563834bb 3529 - markus@cvs.openbsd.org 2001/03/28 20:50:45
3530 [sshd.c]
3531 call refuse() before close(); from olemx@ans.pl
01ce749f 3532
b5b68128 353320010328
68fa858a 3534 - (djm) Reorder tests and library inclusion for Krb4/AFS to try to
3535 resolve linking conflicts with libcrypto. Report and suggested fix
b5b68128 3536 from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
edbe6722 3537 - (djm) Work around Solaris' broken struct dirent. Diagnosis and suggested
3538 fix from Philippe Levan <levan@epix.net>
cccfea16 3539 - (djm) Rework krbIV tests to get us closer to building on Redhat. Still
3540 doesn't work because of conflicts between krbIV's and OpenSSL's des.h
8d0cc79b 3541 - (djm) Sync openbsd-compat/glob.c
b5b68128 3542
0c90b590 354320010327
3544 - Attempt sync with sshlogin.c w/ OpenBSD (mainly CVS ID)
68fa858a 3545 - Fix pointer issues in waitpid() and wait() replaces. Patch by Lutz
60a8683f 3546 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
690d0d7f 3547 - OpenBSD CVS Sync
3548 - djm@cvs.openbsd.org 2001/03/25 00:01:34
3549 [session.c]
3550 shorten; ok markus@
4f4648f9 3551 - stevesk@cvs.openbsd.org 2001/03/25 13:16:11
3552 [servconf.c servconf.h session.c sshd.8 sshd_config]
3553 PrintLastLog option; from chip@valinux.com with some minor
3554 changes by me. ok markus@
9afbfcfa 3555 - markus@cvs.openbsd.org 2001/03/26 08:07:09
68fa858a 3556 [authfile.c authfile.h ssh-add.c ssh-keygen.c ssh.c sshconnect.c
9afbfcfa 3557 sshconnect.h sshconnect1.c sshconnect2.c sshd.c]
3558 simpler key load/save interface, see authfile.h
68fa858a 3559 - (djm) Reestablish PAM credentials (which can be supplemental group
9afbfcfa 3560 memberships) after initgroups() blows them away. Report and suggested
3561 fix from Nalin Dahyabhai <nalin@redhat.com>
0c90b590 3562
b567a40c 356320010324
3564 - Fixed permissions ssh-keyscan. Thanks to Christopher Linn <celinn@mtu.edu>.
80cd07ae 3565 - OpenBSD CVS Sync
3566 - djm@cvs.openbsd.org 2001/03/23 11:04:07
3567 [compat.c compat.h sshconnect2.c sshd.c]
3568 Compat for OpenSSH with broken Rijndael/AES. ok markus@
7af9f7f8 3569 - markus@cvs.openbsd.org 2001/03/23 12:02:49
3570 [auth1.c]
3571 authctxt is now passed to do_authenticated
e285053e 3572 - markus@cvs.openbsd.org 2001/03/23 13:10:57
3573 [sftp-int.c]
3574 fix put, upload to _absolute_ path, ok djm@
1d3c30db 3575 - markus@cvs.openbsd.org 2001/03/23 14:28:32
3576 [session.c sshd.c]
3577 ignore SIGPIPE, restore in child, fixes x11-fwd crashes; with djm@
8ca3f6dc 3578 - (djm) Pull out our own SIGPIPE hacks
b567a40c 3579
8a169574 358020010323
68fa858a 3581 - OpenBSD CVS Sync
8a169574 3582 - deraadt@cvs.openbsd.org 2001/03/22 20:22:55
68fa858a 3583 [sshd.c]
3584 do not place linefeeds in buffer
8a169574 3585
ee110bfb 358620010322
3587 - (djm) Better AIX no tty fix, spotted by Gert Doering <gert@greenie.muc.de>
289ba62e 3588 - (bal) version.c CVS ID resync
a5b09902 3589 - (bal) auth-chall.c auth-passwd.c auth.h auth1.c auth2.c session.c CVS ID
3590 resync
ae7242ef 3591 - (bal) scp.c CVS ID resync
3e587cc3 3592 - OpenBSD CVS Sync
3593 - markus@cvs.openbsd.org 2001/03/20 19:10:16
3594 [readconf.c]
3595 default to SSH protocol version 2
e5d7a405 3596 - markus@cvs.openbsd.org 2001/03/20 19:21:21
3597 [session.c]
3598 remove unused arg
39f7530f 3599 - markus@cvs.openbsd.org 2001/03/20 19:21:21
3600 [session.c]
3601 remove unused arg
bb5639fe 3602 - markus@cvs.openbsd.org 2001/03/21 11:43:45
3603 [auth1.c auth2.c session.c session.h]
3604 merge common ssh v1/2 code
5e7cb456 3605 - jakob@cvs.openbsd.org 2001/03/21 14:20:45
3606 [ssh-keygen.c]
3607 add -B flag to usage
ca4df544 3608 - markus@cvs.openbsd.org 2001/03/21 21:06:30
3609 [session.c]
3610 missing init; from mib@unimelb.edu.au
ee110bfb 3611
f5f6020e 361220010321
68fa858a 3613 - (djm) Fix ttyname breakage for AIX and Tru64. Patch from Steve
f5f6020e 3614 VanDevender <stevev@darkwing.uoregon.edu>
37eadb90 3615 - (djm) Make sure pam_retval is initialised on call to pam_end. Patch
3616 from Solar Designer <solar@openwall.com>
0a3700ee 3617 - (djm) Don't loop forever when changing password via PAM. Patch
3618 from Solar Designer <solar@openwall.com>
0c13ffa2 3619 - (djm) Generate config files before build
7a7101ec 3620 - (djm) Correctly handle SIA and AIX when no tty present. Spotted and
3621 suggested fix from Mike Battersby <mib@unimelb.edu.au>
f5f6020e 3622
8d539493 362320010320
01022caf 3624 - (bal) glob.c update to added GLOB_LIMITS (OpenBSD CVS).
3625 - (bal) glob.c update to set gl_pathv to NULL (OpenBSD CVS).
1620233b 3626 - (bal) Oops. Missed globc.h change (OpenBSD CVS).
614dee3a 3627 - (djm) OpenBSD CVS Sync
3628 - markus@cvs.openbsd.org 2001/03/19 17:07:23
3629 [auth.c readconf.c]
3630 undo /etc/shell and proto 2,1 change for openssh-2.5.2
3dd16786 3631 - markus@cvs.openbsd.org 2001/03/19 17:12:10
3632 [version.h]
3633 version 2.5.2
ea44783f 3634 - (djm) Update RPM spec version
3635 - (djm) Release 2.5.2p1
3743cc2f 3636- tim@mindrot.org 2001/03/19 18:33:47 [defines.h]
3637 change S_ISLNK macro to work for UnixWare 2.03
9887f269 3638- tim@mindrot.org 2001/03/19 20:45:11 [openbsd-compat/glob.c]
3639 add get_arg_max(). Use sysconf() if ARG_MAX is not defined
8d539493 3640
e339aa53 364120010319
68fa858a 3642 - (djm) Seed PRNG at startup, rather than waiting for arc4random calls to
e339aa53 3643 do it implicitly.
7cdb79d4 3644 - (djm) Add getusershell() functions from OpenBSD CVS
b1ed8313 3645 - OpenBSD CVS Sync
3646 - markus@cvs.openbsd.org 2001/03/18 12:07:52
3647 [auth-options.c]
3648 ignore permitopen="host:port" if AllowTcpForwarding==no
f8f230bf 3649 - (djm) Make scp work on systems without 64-bit ints
2538ecf1 3650 - tim@mindrot.org 2001/03/18 18:28:39 [defines.h]
3651 move HAVE_LONG_LONG_INT where it works
d1581d5f 3652 - (bal) Use 'NGROUPS' for NeXT Since 'MAX_NGROUPS' is wrapped up in -lposix
107628c0 3653 stuff. Change suggested by Mark Miller <markm@swoon.net>
d1581d5f 3654 - (bal) Small fix to scp. %lu vs %ld
68fa858a 3655 - (bal) NeXTStep lacks S_ISLNK. Plus split up S_IS*
bb6da70f 3656 - (djm) OpenBSD CVS Sync
3657 - djm@cvs.openbsd.org 2001/03/19 03:52:51
3658 [sftp-client.c]
3659 Report ssh connection closing correctly; ok deraadt@
3a1c54d4 3660 - deraadt@cvs.openbsd.org 2001/03/18 23:30:55
3661 [compat.c compat.h sshd.c]
68fa858a 3662 specifically version match on ssh scanners. do not log scan
3a1c54d4 3663 information to the console
dc504afd 3664 - djm@cvs.openbsd.org 2001/03/19 12:10:17
db4d3098 3665 [sshd.8]
dc504afd 3666 Document permitopen authorized_keys option; ok markus@
babd91d4 3667 - djm@cvs.openbsd.org 2001/03/19 05:49:52
3668 [ssh.1]
3669 document PreferredAuthentications option; ok markus@
05c64611 3670 - (bal) Minor NeXT fixed. Forgot to #undef NGROUPS_MAX
e339aa53 3671
ec0ad9c2 367220010318
68fa858a 3673 - (bal) Fixed scp type casing issue which causes "scp: protocol error:
ec0ad9c2 3674 size not delimited" fatal errors when tranfering.
5cc8d4ad 3675 - OpenBSD CVS Sync
3676 - markus@cvs.openbsd.org 2001/03/17 17:27:59
3677 [auth.c]
3678 check /etc/shells, too
7411201c 3679 - tim@mindrot.org 2001/03/17 18:45:25 [compat.c]
3680 openbsd-compat/fake-regex.h
ec0ad9c2 3681
8a968c25 368220010317
68fa858a 3683 - Support usrinfo() on AIX. Based on patch from Gert Doering
8a968c25 3684 <gert@greenie.muc.de>
bf1d27bd 3685 - OpenBSD CVS Sync
3686 - markus@cvs.openbsd.org 2001/03/15 15:05:59
3687 [scp.c]
3688 use %lld in printf, ok millert@/deraadt@; report from ssh@client.fi
56b3e9ce 3689 - markus@cvs.openbsd.org 2001/03/15 22:07:08
3690 [session.c]
3691 pass Session to do_child + KNF
d50d9b63 3692 - djm@cvs.openbsd.org 2001/03/16 08:16:18
3693 [sftp-client.c sftp-client.h sftp-glob.c sftp-int.c]
3694 Revise globbing for get/put to be more shell-like. In particular,
3695 "get/put file* directory/" now works. ok markus@
f55d1b5f 3696 - markus@cvs.openbsd.org 2001/03/16 09:55:53
3697 [sftp-int.c]
3698 fix memset and whitespace
6a8496e4 3699 - markus@cvs.openbsd.org 2001/03/16 13:44:24
3700 [sftp-int.c]
3701 discourage strcat/strcpy
01794848 3702 - markus@cvs.openbsd.org 2001/03/16 19:06:30
3703 [auth-options.c channels.c channels.h serverloop.c session.c]
3704 implement "permitopen" key option, restricts -L style forwarding to
3705 to specified host:port pairs. based on work by harlan@genua.de
68fa858a 3706 - Check for gl_matchc support in glob_t and fall back to the
40849fdb 3707 openbsd-compat/glob.[ch] support if it does not exist.
8a968c25 3708
4cb5d598 370920010315
3710 - OpenBSD CVS Sync
3711 - markus@cvs.openbsd.org 2001/03/14 08:57:14
3712 [sftp-client.c]
3713 Wall
85cf5827 3714 - markus@cvs.openbsd.org 2001/03/14 15:15:58
3715 [sftp-int.c]
3716 add version command
61b3a2bc 3717 - deraadt@cvs.openbsd.org 2001/03/14 22:50:25
3718 [sftp-server.c]
3719 note no getopt()
51e2fc8f 3720 - (stevesk) ssh-keyscan.c: specify "openbsd-compat/fake-queue.h"
68fa858a 3721 - (bal) Cygwin README change by Corinna Vinschen <vinschen@redhat.com>
4cb5d598 3722
acc9d6d7 372320010314
3724 - OpenBSD CVS Sync
85cf5827 3725 - markus@cvs.openbsd.org 2001/03/13 17:34:42
3726 [auth-options.c]
3727 missing xfree, deny key on parse error; ok stevesk@
3728 - djm@cvs.openbsd.org 2001/03/13 22:42:54
3729 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c]
3730 sftp client filename globbing for get, put, ch{mod,grp,own}. ok markus@
84ceda19 3731 - (bal) Fix strerror() in bsd-misc.c
3732 - (djm) Add replacement glob() from OpenBSD libc if the system glob is
3733 missing or lacks the GLOB_ALTDIRFUNC extension
68fa858a 3734 - (djm) Remove -I$(srcdir)/openbsd-compat from CFLAGS, refer to headers
84ceda19 3735 relatively. Avoids conflict between glob.h and /usr/include/glob.h
acc9d6d7 3736
22138a36 373720010313
3738 - OpenBSD CVS Sync
3739 - markus@cvs.openbsd.org 2001/03/12 22:02:02
3740 [key.c key.h ssh-add.c ssh-keygen.c sshconnect.c sshconnect2.c]
3741 remove old key_fingerprint interface, s/_ex//
3742
539af7f5 374320010312
3744 - OpenBSD CVS Sync
3745 - markus@cvs.openbsd.org 2001/03/11 13:25:36
3746 [auth2.c key.c]
3747 debug
301e8e5b 3748 - jakob@cvs.openbsd.org 2001/03/11 15:03:16
3749 [key.c key.h]
3750 add improved fingerprint functions. based on work by Carsten
3751 Raskgaard <cara@int.tele.dk> and modified by me. ok markus@.
954f0550 3752 - jakob@cvs.openbsd.org 2001/03/11 15:04:16
3753 [ssh-keygen.1 ssh-keygen.c]
3754 print both md5, sha1 and bubblebabble fingerprints when using
3755 ssh-keygen -l -v. ok markus@.
08345971 3756 - jakob@cvs.openbsd.org 2001/03/11 15:13:09
3757 [key.c]
3758 cleanup & shorten some var names key_fingerprint_bubblebabble.
64b1aa3b 3759 - deraadt@cvs.openbsd.org 2001/03/11 16:39:03
3760 [ssh-keygen.c]
3761 KNF, and SHA1 binary output is just creeping featurism
733cf7f4 3762 - tim@mindrot.org 2001/03/11 17:29:32 [configure.in]
3763 test if snprintf() supports %ll
3764 add /dev to search path for PRNGD/EGD socket
3765 fix my mistake in USER_PATH test program
79c9ac1b 3766 - OpenBSD CVS Sync
3767 - markus@cvs.openbsd.org 2001/03/11 18:29:51
3768 [key.c]
3769 style+cleanup
aaf45d87 3770 - markus@cvs.openbsd.org 2001/03/11 22:33:24
3771 [ssh-keygen.1 ssh-keygen.c]
3772 remove -v again. use -B instead for bubblebabble. make -B consistent
3773 with -l and make -B work with /path/to/known_hosts. ok deraadt@
a0322342 3774 - (djm) Bump portable version number for generating test RPMs
94dd09e3 3775 - (djm) Add "static_openssl" RPM build option, remove rsh build dependency
68fa858a 3776 - (bal) Reorder includes in Makefile.
539af7f5 3777
d156519a 377820010311
3779 - OpenBSD CVS Sync
3780 - markus@cvs.openbsd.org 2001/03/10 12:48:27
3781 [sshconnect2.c]
3782 ignore nonexisting private keys; report rjmooney@mediaone.net
5e36d59c 3783 - deraadt@cvs.openbsd.org 2001/03/10 12:53:51
3784 [readconf.c ssh_config]
3785 default to SSH2, now that m68k runs fast
2f778758 3786 - stevesk@cvs.openbsd.org 2001/03/10 15:02:05
3787 [ttymodes.c ttymodes.h]
3788 remove unused sgtty macros; ok markus@
99c415db 3789 - deraadt@cvs.openbsd.org 2001/03/10 15:31:00
3790 [compat.c compat.h sshconnect.c]
3791 all known netscreen ssh versions, and older versions of OSU ssh cannot
3792 handle password padding (newer OSU is fixed)
456fce50 3793 - tim@mindrot.org 2001/03/10 16:33:42 [configure.in Makefile.in sshd_config]
3794 make sure $bindir is in USER_PATH so scp will work
cab80f75 3795 - OpenBSD CVS Sync
3796 - markus@cvs.openbsd.org 2001/03/10 17:51:04
3797 [kex.c match.c match.h readconf.c readconf.h sshconnect2.c]
3798 add PreferredAuthentications
d156519a 3799
1c9a907f 380020010310
3801 - OpenBSD CVS Sync
3802 - deraadt@cvs.openbsd.org 2001/03/09 03:14:39
3803 [ssh-keygen.c]
68fa858a 3804 create *.pub files with umask 0644, so that you can mv them to
1c9a907f 3805 authorized_keys
cb7bd922 3806 - deraadt@cvs.openbsd.org 2001/03/09 12:30:29
3807 [sshd.c]
3808 typo; slade@shore.net
61cf0e38 3809 - Removed log.o from sftp client. Not needed.
1c9a907f 3810
385590e4 381120010309
3812 - OpenBSD CVS Sync
3813 - stevesk@cvs.openbsd.org 2001/03/08 18:47:12
3814 [auth1.c]
3815 unused; ok markus@
acf06a60 3816 - stevesk@cvs.openbsd.org 2001/03/08 20:44:48
3817 [sftp.1]
3818 spelling, cleanup; ok deraadt@
fee56204 3819 - markus@cvs.openbsd.org 2001/03/08 21:42:33
3820 [compat.c compat.h readconf.h ssh.c sshconnect1.c sshconnect2.c]
3821 implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->
3822 no need to do enter passphrase or do expensive sign operations if the
3823 server does not accept key).
385590e4 3824
3a7fe5ba 382520010308
3826 - OpenBSD CVS Sync
d5ebca2b 3827 - djm@cvs.openbsd.org 2001/03/07 10:11:23
3828 [sftp-client.c sftp-client.h sftp-int.c sftp-server.c sftp.1 sftp.c sftp.h]
3829 Support for new draft (draft-ietf-secsh-filexfer-01). New symlink handling
3830 functions and small protocol change.
3831 - markus@cvs.openbsd.org 2001/03/08 00:15:48
3832 [readconf.c ssh.1]
3833 turn off useprivilegedports by default. only rhost-auth needs
3834 this. older sshd's may need this, too.
097ca118 3835 - (stevesk) Reliant Unix (SNI) needs HAVE_BOGUS_SYS_QUEUE_H;
3836 Dirk Markwardt <D.Markwardt@tu-bs.de>
3a7fe5ba 3837
3251b439 383820010307
3839 - (bal) OpenBSD CVS Sync
3840 - deraadt@cvs.openbsd.org 2001/03/06 06:11:18
3841 [ssh-keyscan.c]
3842 appease gcc
a5ec8a3d 3843 - deraadt@cvs.openbsd.org 2001/03/06 06:11:44
3844 [sftp-int.c sftp.1 sftp.c]
3845 sftp -b batchfile; mouring@etoh.eviladmin.org
17910dce 3846 - deraadt@cvs.openbsd.org 2001/03/06 15:10:42
3847 [sftp.1]
3848 order things
2c86906e 3849 - deraadt@cvs.openbsd.org 2001/03/07 01:19:06
3850 [ssh.1 sshd.8]
3851 the name "secure shell" is boring, noone ever uses it
7daf8515 3852 - deraadt@cvs.openbsd.org 2001/03/07 04:05:58
3853 [ssh.1]
3854 removed dated comment
f52798a4 3855 - Cygwin contrib improvements from Corinna Vinschen <vinschen@redhat.com>
3251b439 3856
657297ff 385720010306
3858 - (bal) OpenBSD CVS Sync
3859 - deraadt@cvs.openbsd.org 2001/03/05 14:28:47
3860 [sshd.8]
3861 alpha order; jcs@rt.fm
7c8f2a26 3862 - stevesk@cvs.openbsd.org 2001/03/05 15:44:51
3863 [servconf.c]
3864 sync error message; ok markus@
f2ba0775 3865 - deraadt@cvs.openbsd.org 2001/03/05 15:56:16
3866 [myproposal.h ssh.1]
3867 switch to aes128-cbc/hmac-md5 by default in SSH2 -- faster;
3868 provos & markus ok
7a6c39a3 3869 - deraadt@cvs.openbsd.org 2001/03/05 16:07:15
3870 [sshd.8]
3871 detail default hmac setup too
7de5b06b 3872 - markus@cvs.openbsd.org 2001/03/05 17:17:21
3873 [kex.c kex.h sshconnect2.c sshd.c]
3874 generate a 2*need size (~300 instead of 1024/2048) random private
3875 exponent during the DH key agreement. according to Niels (the great
3876 german advisor) this is safe since /etc/primes contains strong
3877 primes only.
3878
3879 References:
3880 P. C. van Oorschot and M. J. Wiener, On Diffie-Hellman key
3881 agreement with short exponents, In Advances in Cryptology
3882 - EUROCRYPT'96, LNCS 1070, Springer-Verlag, 1996, pp.332-343.
a5df12e9 3883 - stevesk@cvs.openbsd.org 2001/03/05 17:40:48
3884 [ssh.1]
3885 more ssh_known_hosts2 documentation; ok markus@
0b2190ee 3886 - stevesk@cvs.openbsd.org 2001/03/05 17:58:22
3887 [dh.c]
3888 spelling
bbc62e59 3889 - deraadt@cvs.openbsd.org 2001/03/06 00:33:04
3890 [authfd.c cli.c ssh-agent.c]
3891 EINTR/EAGAIN handling is required in more cases
c16c7f20 3892 - millert@cvs.openbsd.org 2001/03/06 01:06:03
3893 [ssh-keyscan.c]
3894 Don't assume we wil get the version string all in one read().
3895 deraadt@ OK'd
09cb311c 3896 - millert@cvs.openbsd.org 2001/03/06 01:08:27
3897 [clientloop.c]
3898 If read() fails with EINTR deal with it the same way we treat EAGAIN
657297ff 3899
1a2936c4 390020010305
3901 - (bal) CVS ID touch up on sshpty.[ch] and sshlogin.[ch]
68fa858a 3902 - (bal) CVS ID touch up on sftp-int.c
e77df335 3903 - (bal) CVS ID touch up on uuencode.c
6cca9fde 3904 - (bal) CVS ID touch up on auth2.c, serverloop.c, session.c & sshd.c
778f6940 3905 - (bal) OpenBSD CVS Sync
dcb971e1 3906 - deraadt@cvs.openbsd.org 2001/02/17 23:48:48
3907 [sshd.8]
3908 it's the OpenSSH one
778f6940 3909 - deraadt@cvs.openbsd.org 2001/02/21 07:37:04
3910 [ssh-keyscan.c]
3911 inline -> __inline__, and some indent
81333640 3912 - deraadt@cvs.openbsd.org 2001/02/21 09:05:54
3913 [authfile.c]
3914 improve fd handling
79ddf6db 3915 - deraadt@cvs.openbsd.org 2001/02/21 09:12:56
3916 [sftp-server.c]
3917 careful with & and &&; markus ok
96ee8386 3918 - stevesk@cvs.openbsd.org 2001/02/21 21:14:04
3919 [ssh.c]
3920 -i supports DSA identities now; ok markus@
0c126dc9 3921 - deraadt@cvs.openbsd.org 2001/02/22 04:29:37
3922 [servconf.c]
3923 grammar; slade@shore.net
ed2166d8 3924 - deraadt@cvs.openbsd.org 2001/02/22 06:43:55
3925 [ssh-keygen.1 ssh-keygen.c]
3926 document -d, and -t defaults to rsa1
b07ae1e9 3927 - deraadt@cvs.openbsd.org 2001/02/22 08:03:51
3928 [ssh-keygen.1 ssh-keygen.c]
3929 bye bye -d
e2fccec3 3930 - deraadt@cvs.openbsd.org 2001/02/22 18:09:06
3931 [sshd_config]
3932 activate RSA 2 key
e91c60f2 3933 - markus@cvs.openbsd.org 2001/02/22 21:57:27
3934 [ssh.1 sshd.8]
3935 typos/grammar from matt@anzen.com
3b1a83df 3936 - markus@cvs.openbsd.org 2001/02/22 21:59:44
3937 [auth.c auth.h auth1.c auth2.c misc.c misc.h ssh.c]
3938 use pwcopy in ssh.c, too
19d57054 3939 - markus@cvs.openbsd.org 2001/02/23 15:34:53
3940 [serverloop.c]
3941 debug2->3
00be5382 3942 - markus@cvs.openbsd.org 2001/02/23 18:15:13
3943 [sshd.c]
3944 the random session key depends now on the session_key_int
3945 sent by the 'attacker'
3946 dig1 = md5(cookie|session_key_int);
3947 dig2 = md5(dig1|cookie|session_key_int);
3948 fake_session_key = dig1|dig2;
3949 this change is caused by a mail from anakin@pobox.com
3950 patch based on discussions with my german advisor niels@openbsd.org
ec63b02d 3951 - deraadt@cvs.openbsd.org 2001/02/24 10:37:55
3952 [readconf.c]
3953 look for id_rsa by default, before id_dsa
582038fb 3954 - deraadt@cvs.openbsd.org 2001/02/24 10:37:26
3955 [sshd_config]
3956 ssh2 rsa key before dsa key
6e18cb71 3957 - markus@cvs.openbsd.org 2001/02/27 10:35:27
3958 [packet.c]
3959 fix random padding
1b5dfeb2 3960 - markus@cvs.openbsd.org 2001/02/27 11:00:11
3961 [compat.c]
3962 support SSH-2.0-2.1 ; from Christophe_Moret@hp.com
4ab21f86 3963 - deraadt@cvs.openbsd.org 2001/02/28 05:34:28
3964 [misc.c]
3965 pull in protos
167b3512 3966 - deraadt@cvs.openbsd.org 2001/02/28 05:36:28
3967 [sftp.c]
3968 do not kill the subprocess on termination (we will see if this helps
3969 things or hurts things)
7e8911cd 3970 - markus@cvs.openbsd.org 2001/02/28 08:45:39
3971 [clientloop.c]
3972 fix byte counts for ssh protocol v1
ee55dacf 3973 - markus@cvs.openbsd.org 2001/02/28 08:54:55
3974 [channels.c nchan.c nchan.h]
3975 make sure remote stderr does not get truncated.
3976 remove closed fd's from the select mask.
a6215e53 3977 - markus@cvs.openbsd.org 2001/02/28 09:57:07
3978 [packet.c packet.h sshconnect2.c]
3979 in ssh protocol v2 use ignore messages for padding (instead of
3980 trailing \0).
94dfb550 3981 - markus@cvs.openbsd.org 2001/02/28 12:55:07
3982 [channels.c]
3983 unify debug messages
5649fbbe 3984 - deraadt@cvs.openbsd.org 2001/02/28 17:52:54
3985 [misc.c]
3986 for completeness, copy pw_gecos too
0572fe75 3987 - markus@cvs.openbsd.org 2001/02/28 21:21:41
3988 [sshd.c]
3989 generate a fake session id, too
95ce5599 3990 - markus@cvs.openbsd.org 2001/02/28 21:27:48
3991 [channels.c packet.c packet.h serverloop.c]
3992 use ignore message to simulate a SSH2_MSG_CHANNEL_DATA message
3993 use random content in ignore messages.
355724fc 3994 - markus@cvs.openbsd.org 2001/02/28 21:31:32
3995 [channels.c]
3996 typo
c3f7d267 3997 - deraadt@cvs.openbsd.org 2001/03/01 02:11:25
3998 [authfd.c]
3999 split line so that p will have an easier time next time around
a01a5f30 4000 - deraadt@cvs.openbsd.org 2001/03/01 02:29:04
4001 [ssh.c]
4002 shorten usage by a line
12bf85ed 4003 - deraadt@cvs.openbsd.org 2001/03/01 02:45:10
4004 [auth-rsa.c auth2.c deattack.c packet.c]
4005 KNF
4371658c 4006 - deraadt@cvs.openbsd.org 2001/03/01 03:38:33
4007 [cli.c cli.h rijndael.h ssh-keyscan.1]
4008 copyright notices on all source files
ce91d6f8 4009 - markus@cvs.openbsd.org 2001/03/01 22:46:37
4010 [ssh.c]
4011 don't truncate remote ssh-2 commands; from mkubita@securities.cz
4012 use min, not max for logging, fixes overflow.
409edaba 4013 - deraadt@cvs.openbsd.org 2001/03/02 06:21:01
4014 [sshd.8]
4015 explain SIGHUP better
b8dc87d3 4016 - deraadt@cvs.openbsd.org 2001/03/02 09:42:49
4017 [sshd.8]
4018 doc the dsa/rsa key pair files
f3c7c613 4019 - deraadt@cvs.openbsd.org 2001/03/02 18:54:31
4020 [atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h
4021 scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c
4022 ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8]
4023 make copyright lines the same format
2671b47f 4024 - deraadt@cvs.openbsd.org 2001/03/03 06:53:12
4025 [ssh-keyscan.c]
4026 standard theo sweep
ff7fee59 4027 - millert@cvs.openbsd.org 2001/03/03 21:19:41
4028 [ssh-keyscan.c]
4029 Dynamically allocate read_wait and its copies. Since maxfd is
4030 based on resource limits it is often (usually?) larger than FD_SETSIZE.
c8d75031 4031 - millert@cvs.openbsd.org 2001/03/03 21:40:30
4032 [sftp-server.c]
4033 Dynamically allocate fd_set; deraadt@ OK
20e04e90 4034 - millert@cvs.openbsd.org 2001/03/03 21:41:07
4035 [packet.c]
4036 Dynamically allocate fd_set; deraadt@ OK
dce9bac5 4037 - deraadt@cvs.openbsd.org 2001/03/03 22:07:50
4038 [sftp-server.c]
4039 KNF
c630ce76 4040 - markus@cvs.openbsd.org 2001/03/03 23:52:22
4041 [sftp.c]
4042 clean up arg processing. based on work by Christophe_Moret@hp.com
20244695 4043 - markus@cvs.openbsd.org 2001/03/03 23:59:34
4044 [log.c ssh.c]
4045 log*.c -> log.c
61f8a1d1 4046 - markus@cvs.openbsd.org 2001/03/04 00:03:59
4047 [channels.c]
4048 debug1->2
38967add 4049 - stevesk@cvs.openbsd.org 2001/03/04 10:57:53
4050 [ssh.c]
4051 add -m to usage; ok markus@
46f23b8d 4052 - stevesk@cvs.openbsd.org 2001/03/04 11:04:41
4053 [sshd.8]
4054 small cleanup and clarify for PermitRootLogin; ok markus@
9c81df4c 4055 - stevesk@cvs.openbsd.org 2001/03/04 11:16:06
4056 [servconf.c sshd.8]
4057 kill obsolete RandomSeed; ok markus@ deraadt@
f5429434 4058 - stevesk@cvs.openbsd.org 2001/03/04 12:54:04
4059 [sshd.8]
4060 spelling
54b974dc 4061 - millert@cvs.openbsd.org 2001/03/04 17:42:28
4062 [authfd.c channels.c dh.c log.c readconf.c servconf.c sftp-int.c
4063 ssh.c sshconnect.c sshd.c]
4064 log functions should not be passed strings that end in newline as they
4065 get passed on to syslog() and when logging to stderr, do_log() appends
4066 its own newline.
51c251f0 4067 - deraadt@cvs.openbsd.org 2001/03/04 18:21:28
4068 [sshd.8]
4069 list SSH2 ciphers
2605addd 4070 - (bal) Put HAVE_PW_CLASS_IN_PASSWD back into pwcopy()
164c80dc 4071 - (bal) Fix up logging since it changed. removed log-*.c
cc3067d6 4072 - (djm) Fix up LOG_AUTHPRIV for systems that have it
70a052c7 4073 - (stevesk) OpenBSD sync:
4074 - deraadt@cvs.openbsd.org 2001/03/05 08:37:27
4075 [ssh-keyscan.c]
4076 skip inlining, why bother
5152d46f 4077 - (stevesk) sftp.c: handle __progname
1a2936c4 4078
40edd7ef 407920010304
4080 - (bal) Remove make-ssh-known-hosts.1 since it's no longer valid.
889fbcd3 4081 - (bal) Updated contrib/README to remove 'make-ssh-known-hosts' and
4082 give Mark Roth credit for mdoc2man.pl
40edd7ef 4083
9817de5f 408420010303
40edd7ef 4085 - (djm) Remove make-ssh-known-hosts.pl, ssh-keyscan is better.
4086 - (djm) Document PAM ChallengeResponseAuthentication in sshd.8
4087 - (djm) Disable and comment ChallengeResponseAuthentication in sshd_config
4088 - (djm) Allow PRNGd entropy collection from localhost TCP socket. Replace
68fa858a 4089 "--with-egd-pool" configure option with "--with-prngd-socket" and
9bdd5929 4090 "--with-prngd-port" options. Debugged and improved by Lutz Jaenicke
4091 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
9817de5f 4092
20cad736 409320010301
68fa858a 4094 - (djm) Properly add -lcrypt if needed.
5f404be3 4095 - (djm) Force standard PAM conversation function in a few more places.
68fa858a 4096 Patch from Redhat 2.5.1p1-2 RPM, probably Nalin Dahyabhai
5f404be3 4097 <nalin@redhat.com>
68fa858a 4098 - (djm) Cygwin needs pw->pw_gecos copied too. Patch from Corinna Vinschen
480eb294 4099 <vinschen@redhat.com>
ad1f4a20 4100 - (djm) Released 2.5.1p2
20cad736 4101
cf0c5df5 410220010228
4103 - (djm) Detect endianness in configure and use it in rijndael.c. Fixes
4104 "Bad packet length" bugs.
68fa858a 4105 - (djm) Fully revert PAM session patch (again). All PAM session init is
403f5a8e 4106 now done before the final fork().
065ef9b1 4107 - (djm) EGD detection patch from Tim Rice <tim@multitalents.net>
d9b1f19a 4108 - (djm) Remove /tmp from EGD socket search list
cf0c5df5 4109
86b416a7 411020010227
68fa858a 4111 - (bal) Applied shutdown() patch for sftp.c by Corinna Vinschen
51fb577a 4112 <vinschen@redhat.com>
2af09193 4113 - (bal) OpenBSD Sync
4114 - markus@cvs.openbsd.org 2001/02/23 15:37:45
4115 [session.c]
4116 handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
68fa858a 4117 - (bal) sshd.init support for all Redhat release. Patch by Jim Knoble
a892c46e 4118 <jmknoble@jmknoble.cx>
68fa858a 4119 - (djm) Fix up POSIX saved uid support. Report from Mark Miller
f4e9a0e1 4120 <markm@swoon.net>
4121 - (djm) Search for -lcrypt on FreeBSD too
c7c72446 4122 - (djm) fatal() on OpenSSL version mismatch
27cf96de 4123 - (djm) Move PAM init to after fork for non-Solaris derived PAMs
d5c4c52e 4124 - (djm) Warning fix on entropy.c saved uid stuff. Patch from Mark Miller
4125 <markm@swoon.net>
4bc6dd70 4126 - (djm) Fix PAM fix
4236bde4 4127 - (djm) Remove 'noreplace' flag from sshd_config in RPM spec files. This
4128 change is being made as 2.5.x configfiles are not back-compatible with
64e0e67e 4129 2.3.x.
4130 - (djm) Avoid warnings for missing broken IP_TOS. Patch from Mark Miller
4131 <markm@swoon.net>
68fa858a 4132 - (djm) Open Server 5 doesn't need BROKEN_SAVED_UIDS. Patch from Tim Rice
a29d3f1c 4133 <tim@multitalents.net>
68fa858a 4134 - (djm) Avoid multiple definition of _PATH_LS. Patch from Tim Rice
a29d3f1c 4135 <tim@multitalents.net>
51fb577a 4136
4925395f 413720010226
4138 - (bal) Fixed bsd-snprinf.c so it now honors 'BROKEN_SNPRINTF' again.
68fa858a 4139 - (djm) Some systems (SCO3, NeXT) have weird saved uid semantics.
e9a13ac1 4140 Based on patch from Tim Rice <tim@multitalents.net>
4925395f 4141
1eb4ec64 414220010225
4143 - (djm) Use %{_libexecdir} rather than hardcoded path in RPM specfile
4144 Patch from Adrian Ho <lexfiend@usa.net>
490cad94 4145 - (bal) Replace 'unsigned long long' to 'u_int64_t' since not every
4146 platform defines u_int64_t as being that.
1eb4ec64 4147
a738c3b0 414820010224
68fa858a 4149 - (bal) Missed part of the UNIX sockets patch. Patch by Corinna
a738c3b0 4150 Vinschen <vinschen@redhat.com>
4151 - (bal) Reorder where 'strftime' is detected to resolve linking
4152 issues on SCO. Patch by Tim Rice <tim@multitalents.net>
4153
8fd97cc4 415420010224
4155 - (bal) pam_stack fix to correctly detect between RH7 and older RHs.
4156 Patch by Pekka Savola <pekkas@netcore.fi>
8f0b3553 4157 - (bal) Renamed sigaction.[ch] to sigact.[ch]. Causes problems with
4158 some platforms.
3d114925 4159 - (bal) Generalize lack of UNIX sockets since this also effects Cray
4160 not just Cygwin. Based on patch by Wendy Palm <wendyp@cray.com>
8fd97cc4 4161
14a49e44 416220010223
4163 - (bal) Fix --define rh7 in openssh.spec file. Patch by Steve Tell
4164 <tell@telltronics.org>
cb291102 4165 - (bal) Patch to force OpenSSH rpm to require the same version of OpenSSL
4166 that it was compiled against. Patch by Pekka Savola <pekkas@netcore.fi>
68fa858a 4167 - (bal) Double -I for OpenSSL on SCO. Patch by Tim Rice
5a67331c 4168 <tim@multitalents.net>
14a49e44 4169
68fa858a 417020010222
73d6d7fa 4171 - (bal) Corrected SCO luid patch by svaughan <svaughan@asterion.com>
ca742b3b 4172 - (bal) Added mdoc2man.pl from Mark Roth <roth@feep.net>
4173 - (bal) Removed reference to liblogin from contrib/README. It was
4174 integrated into OpenSSH a long while ago.
2a81eb9f 4175 - (stevesk) remove erroneous #ifdef sgi code.
4176 Michael Stone <mstone@cs.loyola.edu>
73d6d7fa 4177
fbf305f1 417820010221
4179 - (bal) Removed -L/usr/ucblib -R/usr/ucblib for Solaris platform.
68fa858a 4180 - (bal) Fixed OpenSSL rework to use $saved_*. Patch by Tim Rice
9dd3bc84 4181 <tim@multitalents.net>
1fe61b2e 4182 - (bal) Reverted out of 2001/02/15 patch by djm below because it
4183 breaks Solaris.
4184 - (djm) Move PAM session setup back to before setuid to user.
4185 fixes problems on Solaris-drived PAMs.
266140a8 4186 - (stevesk) session.c: back out to where we were before:
68fa858a 4187 - (djm) Move PAM session initialisation until after fork in sshd. Patch
266140a8 4188 from Nalin Dahyabhai <nalin@redhat.com>
9dd3bc84 4189
8b3319f4 419020010220
4191 - (bal) Fix mixed up params to memmove() from Jan 5th in setenv.c and
4192 getcwd.c.
c2b544a5 4193 - (bal) OpenBSD CVS Sync:
4194 - deraadt@cvs.openbsd.org 2001/02/19 23:09:05
4195 [sshd.c]
4196 clarify message to make it not mention "ident"
8b3319f4 4197
1729c161 419820010219
4199 - (bal) Markus' blessing to rename login.[ch] -> sshlogin.[ch] and
4200 pty.[ch] -> sshpty.[ch]
d6f13fbb 4201 - (djm) Rework search for OpenSSL location. Skip directories which don't
4202 exist, don't add -L$ssldir/lib if it doesn't exist. Should help SCO
4203 with its limit of 6 -L options.
0476625f 4204 - OpenBSD CVS Sync:
4205 - reinhard@cvs.openbsd.org 2001/02/17 08:24:40
4206 [sftp.1]
4207 typo
4208 - deraadt@cvs.openbsd.org 2001/02/17 16:28:58
4209 [ssh.c]
4210 cleanup -V output; noted by millert
4211 - deraadt@cvs.openbsd.org 2001/02/17 16:48:48
4212 [sshd.8]
4213 it's the OpenSSH one
4214 - markus@cvs.openbsd.org 2001/02/18 11:33:54
4215 [dispatch.c]
4216 typo, SSH2_MSG_KEXINIT, from aspa@kronodoc.fi
4217 - markus@cvs.openbsd.org 2001/02/19 02:53:32
4218 [compat.c compat.h serverloop.c]
4219 ssh-1.2.{18-22} has broken handling of ignore messages; report from
4220 itojun@
4221 - markus@cvs.openbsd.org 2001/02/19 03:35:23
4222 [version.h]
4223 OpenSSH_2.5.1 adds bug compat with 1.2.{18-22}
4224 - deraadt@cvs.openbsd.org 2001/02/19 03:36:25
4225 [scp.c]
4226 np is changed by recursion; vinschen@redhat.com
4227 - Update versions in RPM spec files
4228 - Release 2.5.1p1
1729c161 4229
663fd560 423020010218
68fa858a 4231 - (bal) Patch for fix FCHMOD reference in ftp-client.c by Tim Rice
4232 <tim@multitalents.net>
25cd3375 4233 - (Bal) Patch for lack of RA_RESTART in misc.c for mysignal by
4234 stevesk
68fa858a 4235 - (djm) Fix my breaking of cygwin builds, Patch from Corinna Vinschen
58e7f038 4236 <vinschen@redhat.com> and myself.
32ced054 4237 - (djm) Close listen_sock on bind() failures. Patch from Arkadiusz
4238 Miskiewicz <misiek@pld.ORG.PL>
6a951840 4239 - (djm) Robustify EGD/PRNGd code in face of socket closures. Patch from
4240 Todd C. Miller <Todd.Miller@courtesan.com>
68fa858a 4241 - (djm) Use ttyname() to determine name of tty returned by openpty()
4242 rather then risking overflow. Patch from Marek Michalkiewicz
b82f1310 4243 <marekm@amelek.gda.pl>
68fa858a 4244 - (djm) Swapped tests for no_libsocket and no_libnsl in configure.in.
bdf80b2c 4245 Patch from Marek Michalkiewicz <marekm@amelek.gda.pl>
af8fda37 4246 - (djm) Doc fixes from Pekka Savola <pekkas@netcore.fi>
68fa858a 4247 - (djm) Use SA_INTERRUPT along SA_RESTART if present (equivalent for
df538d55 4248 SunOS)
68fa858a 4249 - (djm) SCO needs librpc for libwrap. Patch from Tim Rice
f61d6b17 4250 <tim@multitalents.net>
dfef7e7e 4251 - (stevesk) misc.c: cpp rework of SA_(INTERRUPT|RESTART) handling.
36a358ca 4252 - (stevesk) scp.c: use mysignal() for updateprogressmeter() handler.
68fa858a 4253 - (djm) SA_INTERRUPT is the converse of SA_RESTART, apply it only for
d54d99a3 4254 SIGALRM.
e1a023df 4255 - (djm) Move entropy.c over to mysignal()
68fa858a 4256 - (djm) SunOS 4.x also needs to define HAVE_BOGUS_SYS_QUEUE_H as it has
4257 a <sys/queue.h> that lacks the TAILQ_* macros. Patch from Todd C.
667beaa9 4258 Miller <Todd.Miller@courtesan.com>
ecdde3d8 4259 - (djm) Update RPM spec files for 2.5.0p1
51ee9048 4260 - (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie
4261 enable with --with-bsd-auth.
2adddc78 4262 - (stevesk) entropy.c: typo; should be SIGPIPE
663fd560 4263
0b1728c5 426420010217
4265 - (bal) OpenBSD Sync:
4266 - markus@cvs.openbsd.org 2001/02/16 13:38:18
68fa858a 4267 [channel.c]
4268 remove debug
c8b058b4 4269 - markus@cvs.openbsd.org 2001/02/16 14:03:43
4270 [session.c]
4271 proper payload-length check for x11 w/o screen-number
0b1728c5 4272
b41d8d4d 427320010216
4274 - (bal) added '--with-prce' to allow overriding of system regex when
4275 required (tested by David Dulek <ddulek@fastenal.com>)
d6fdb079 4276 - (bal) Added DG/UX case and set that they have a broken IPTOS.
278588d8 4277 - (djm) Mini-configure reorder patch from Tim Rice <tim@multitalents.net>
4278 Fixes linking on SCO.
68fa858a 4279 - (djm) Make gnome-ssh-askpass handle multi-line prompts. Patch from
0ceb21d6 4280 Nalin Dahyabhai <nalin@redhat.com>
4281 - (djm) BSD license for gnome-ssh-askpass (was X11)
4282 - (djm) KNF on gnome-ssh-askpass
ed6553e2 4283 - (djm) USE_PIPES for a few more sysv platforms
4284 - (djm) Cleanup configure.in a little
4285 - (djm) Ask users to check config.log when we can't find necessary libs
aca75d94 4286 - (djm) Set "login ID" on systems with setluid. Only enabled for SCO
4287 OpenServer for now. Based on patch from svaughan <svaughan@asterion.com>
0ae4fe1d 4288 - (djm) OpenBSD CVS:
4289 - markus@cvs.openbsd.org 2001/02/15 16:19:59
4290 [channels.c channels.h serverloop.c sshconnect.c sshconnect.h]
4291 [sshconnect1.c sshconnect2.c]
4292 genericize password padding function for SSH1 and SSH2.
4293 add stylized echo to 2, too.
4294 - (djm) Add roundup() macro to defines.h
9535dddf 4295 - (stevesk) set SA_RESTART flag in mysignal() for SIGCHLD;
4296 needed on Unixware 2.x.
b41d8d4d 4297
0086bfaf 429820010215
68fa858a 4299 - (djm) Move PAM session setup back to before setuid to user. Fixes
0086bfaf 4300 problems on Solaris-derived PAMs.
e11aab29 4301 - (djm) Clean up PAM namespace. Suggested by Darren Moffat
4302 <Darren.Moffat@eng.sun.com>
9e3c31f7 4303 - (bal) Sync w/ OpenSSH for new release
4304 - markus@cvs.openbsd.org 2001/02/12 12:45:06
4305 [sshconnect1.c]
4306 fix xmalloc(0), ok dugsong@
b2552997 4307 - markus@cvs.openbsd.org 2001/02/11 12:59:25
4308 [Makefile.in sshd.8 sshconnect2.c readconf.h readconf.c packet.c
4309 sshd.c ssh.c ssh.1 servconf.h servconf.c myproposal.h kex.h kex.c]
4310 1) clean up the MAC support for SSH-2
4311 2) allow you to specify the MAC with 'ssh -m'
4312 3) or the 'MACs' keyword in ssh(d)_config
4313 4) add hmac-{md5,sha1}-96
4314 ok stevesk@, provos@
15853e93 4315 - markus@cvs.openbsd.org 2001/02/12 16:16:23
4316 [auth-passwd.c auth.c auth.h auth1.c auth2.c servconf.c servconf.h
4317 ssh-keygen.c sshd.8]
4318 PermitRootLogin={yes,without-password,forced-commands-only,no}
4319 (before this change, root could login even if PermitRootLogin==no)
7cc4cf0a 4320 - deraadt@cvs.openbsd.org 2001/02/12 22:56:09
fd193ca4 4321 [clientloop.c packet.c ssh-keyscan.c]
4322 deal with EAGAIN/EINTR selects which were skipped
7cc4cf0a 4323 - markus@cvs.openssh.org 2001/02/13 22:49:40
4324 [auth1.c auth2.c]
4325 setproctitle(user) only if getpwnam succeeds
4326 - markus@cvs.openbsd.org 2001/02/12 23:26:20
4327 [sshd.c]
4328 missing memset; from solar@openwall.com
4329 - stevesk@cvs.openbsd.org 2001/02/12 20:53:33
4330 [sftp-int.c]
4331 lumask now works with 1 numeric arg; ok markus@, djm@
4332 - djm@cvs.openbsd.org 2001/02/14 9:46:03
4333 [sftp-client.c sftp-int.c sftp.1]
4334 Fix and document 'preserve modes & times' option ('-p' flag in sftp);
4335 ok markus@
0b16bb01 4336 - (bal) replaced PATH_MAX in sftp-int.c w/ MAXPATHLEN.
4337 - (djm) Move to Jim's 1.2.0 X11 askpass program
62da27dd 4338 - (stevesk) OpenBSD sync:
4339 - deraadt@cvs.openbsd.org 2001/02/15 01:38:04
4340 [serverloop.c]
4341 indent
0b16bb01 4342
1c2d0a13 434320010214
4344 - (djm) Don't try to close PAM session or delete credentials if the
68fa858a 4345 session has not been open or credentials not set. Based on patch from
1c2d0a13 4346 Andrew Bartlett <abartlet@pcug.org.au>
68fa858a 4347 - (djm) Move PAM session initialisation until after fork in sshd. Patch
0ab1bcba 4348 from Nalin Dahyabhai <nalin@redhat.com>
958e5ae4 4349 - (bal) Missing function prototype in bsd-snprintf.c patch by
4350 Mark Miller <markm@swoon.net>
b7ccb051 4351 - (djm) Split out and improve OSF SIA auth code. Patch from Chris Adams
4352 <cmadams@hiwaay.net> with a little modification and KNF.
815800e1 4353 - (stevesk) fix for SIA patch, misplaced session_setup_sia()
1c2d0a13 4354
0610439b 435520010213
84eb157c 4356 - (djm) Only test -S potential EGD sockets if they exist and are readable.
f1312c76 4357 - (bal) Cleaned out bsd-snprintf.c. VARARGS have been banished and
4358 I did a base KNF over the whe whole file to make it more acceptable.
4359 (backed out of original patch and removed it from ChangeLog)
01f13020 4360 - (bal) Use chown() if fchown() does not exist in ftp-server.c patch by
4361 Tim Rice <tim@multitalents.net>
8d60e965 4362 - (stevesk) auth1.c: fix PAM passwordless check.
0610439b 4363
894a4851 436420010212
68fa858a 4365 - (djm) Update Redhat specfile to allow --define "skip_x11_askpass 1",
4366 --define "skip_gnome_askpass 1", --define "rh7 1" and make the
4367 implicit rpm-3.0.5 dependancy explicit. Patch and suggestions from
894a4851 4368 Pekka Savola <pekkas@netcore.fi>
782d6a0d 4369 - (djm) Clean up PCRE text in INSTALL
68fa858a 4370 - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby
77db6c3f 4371 <mib@unimelb.edu.au>
6f68f28a 4372 - (bal) NCR SVR4 compatiblity provide by Don Bragg <thewizarddon@yahoo.com>
01a7bc9a 4373 - (stevesk) session.c: remove debugging code.
894a4851 4374
abf1f107 437520010211
4376 - (bal) OpenBSD Sync
4377 - markus@cvs.openbsd.org 2001/02/07 22:35:46
4378 [auth1.c auth2.c sshd.c]
4379 move k_setpag() to a central place; ok dugsong@
c845316f 4380 - markus@cvs.openbsd.org 2001/02/10 12:52:02
4381 [auth2.c]
4382 offer passwd before s/key
e6fa162e 4383 - markus@cvs.openbsd.org 2001/02/8 22:37:10
4384 [canohost.c]
4385 remove last call to sprintf; ok deraadt@
0ab4b0f0 4386 - markus@cvs.openbsd.org 2001/02/10 1:33:32
4387 [canohost.c]
4388 add debug message, since sshd blocks here if DNS is not available
7f8ea238 4389 - markus@cvs.openbsd.org 2001/02/10 12:44:02
4390 [cli.c]
4391 don't call vis() for \r
5c470997 4392 - danh@cvs.openbsd.org 2001/02/10 0:12:43
4393 [scp.c]
4394 revert a small change to allow -r option to work again; ok deraadt@
4395 - danh@cvs.openbsd.org 2001/02/10 15:14:11
4396 [scp.c]
4397 fix memory leak; ok markus@
a0e6fead 4398 - djm@cvs.openbsd.org 2001/02/10 0:45:52
4399 [scp.1]
4400 Mention that you can quote pathnames with spaces in them
b3106440 4401 - markus@cvs.openbsd.org 2001/02/10 1:46:28
4402 [ssh.c]
4403 remove mapping of argv[0] -> hostname
f72e01a5 4404 - markus@cvs.openbsd.org 2001/02/06 22:26:17
4405 [sshconnect2.c]
4406 do not ask for passphrase in batch mode; report from ejb@ql.org
4407 - itojun@cvs.opebsd.org 2001/02/08 10:47:05
5d1d11d1 4408 [sshconnect.c sshconnect1.c sshconnect2.c]
68fa858a 4409 %.30s is too short for IPv6 numeric address. use %.128s for now.
f72e01a5 4410 markus ok
4411 - markus@cvs.openbsd.org 2001/02/09 12:28:35
4412 [sshconnect2.c]
4413 do not free twice, thanks to /etc/malloc.conf
4414 - markus@cvs.openbsd.org 2001/02/09 17:10:53
4415 [sshconnect2.c]
4416 partial success: debug->log; "Permission denied" if no more auth methods
4417 - markus@cvs.openbsd.org 2001/02/10 12:09:21
4418 [sshconnect2.c]
4419 remove some lines
e0b2cf6b 4420 - markus@cvs.openbsd.org 2001/02/09 13:38:07
4421 [auth-options.c]
4422 reset options if no option is given; from han.holl@prismant.nl
ca910e13 4423 - markus@cvs.openbsd.org 2001/02/08 21:58:28
4424 [channels.c]
4425 nuke sprintf, ok deraadt@
4426 - markus@cvs.openbsd.org 2001/02/08 21:58:28
4427 [channels.c]
4428 nuke sprintf, ok deraadt@
affa8be4 4429 - markus@cvs.openbsd.org 2001/02/06 22:43:02
4430 [clientloop.h]
4431 remove confusing callback code
d2c46e77 4432 - deraadt@cvs.openbsd.org 2001/02/08 14:39:36
4433 [readconf.c]
4434 snprintf
cc8aca8a 4435 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
4436 sync with netbsd tree changes.
4437 - more strict prototypes, include necessary headers
4438 - use paths.h/pathnames.h decls
4439 - size_t typecase to int -> u_long
5be2ec5e 4440 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
4441 [ssh-keyscan.c]
4442 fix size_t -> int cast (use u_long). markus ok
4443 - markus@cvs.openbsd.org 2001/02/07 22:43:16
4444 [ssh-keyscan.c]
4445 s/getline/Linebuf_getline/; from roumen.petrov@skalasoft.com
4446 - itojun@cvs.openbsd.org 2001/02/09 9:04:59
4447 [ssh-keyscan.c]
68fa858a 4448 do not assume malloc() returns zero-filled region. found by
5be2ec5e 4449 malloc.conf=AJ.
f21032a6 4450 - markus@cvs.openbsd.org 2001/02/08 22:35:30
4451 [sshconnect.c]
68fa858a 4452 don't connect if batch_mode is true and stricthostkeychecking set to
f21032a6 4453 'ask'
7bbcc167 4454 - djm@cvs.openbsd.org 2001/02/04 21:26:07
4455 [sshd_config]
4456 type: ok markus@
4457 - deraadt@cvs.openbsd.org 2001/02/06 22:07:50
4458 [sshd_config]
4459 enable sftp-server by default
a2e6d17d 4460 - deraadt 2001/02/07 8:57:26
4461 [xmalloc.c]
4462 deal with new ANSI malloc stuff
4463 - markus@cvs.openbsd.org 2001/02/07 16:46:08
4464 [xmalloc.c]
4465 typo in fatal()
4466 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
4467 [xmalloc.c]
4468 fix size_t -> int cast (use u_long). markus ok
4ef922e3 4469 - 1.47 Thu Feb 8 23:11:42 GMT 2001 by dugsong
4470 [serverloop.c sshconnect1.c]
68fa858a 4471 mitigate SSH1 traffic analysis - from Solar Designer
4ef922e3 4472 <solar@openwall.com>, ok provos@
68fa858a 4473 - (bal) fixed sftp-client.c. Return 'status' instead of '0'
ca910e13 4474 (from the OpenBSD tree)
6b442913 4475 - (bal) Synced ssh.1, ssh-add.1 and sshd.8 w/ OpenBSD
27df9d4a 4476 - (bal) sftp-sever.c '%8lld' to '%8llu' (OpenBSD Sync)
17321afe 4477 - (bal) uuencode.c resync w/ OpenBSD tree, plus whitespace.
f98d56f0 4478 - (bal) A bit more whitespace cleanup
68fa858a 4479 - (djm) Set PAM_RHOST earlier, patch from Andrew Bartlett
e275684f 4480 <abartlet@pcug.org.au>
b27e97b1 4481 - (stevesk) misc.c: ssh.h not needed.
38a316c0 4482 - (stevesk) compat.c: more friendly cpp error
94f38e16 4483 - (stevesk) OpenBSD sync:
4484 - stevesk@cvs.openbsd.org 2001/02/11 06:15:57
4485 [LICENSE]
4486 typos and small cleanup; ok deraadt@
abf1f107 4487
0426a3b4 448820010210
4489 - (djm) Sync sftp and scp stuff from OpenBSD:
4490 - djm@cvs.openbsd.org 2001/02/07 03:55:13
4491 [sftp-client.c]
4492 Don't free handles before we are done with them. Based on work from
4493 Corinna Vinschen <vinschen@redhat.com>. ok markus@
4494 - djm@cvs.openbsd.org 2001/02/06 22:32:53
4495 [sftp.1]
4496 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
4497 - deraadt@cvs.openbsd.org 2001/02/07 04:07:29
4498 [sftp.1]
4499 pretty up significantly
4500 - itojun@cvs.openbsd.org 2001/02/07 06:49:42
4501 [sftp.1]
4502 .Bl-.El mismatch. markus ok
4503 - djm@cvs.openbsd.org 2001/02/07 06:12:30
4504 [sftp-int.c]
4505 Check that target is a directory before doing ls; ok markus@
4506 - itojun@cvs.openbsd.org 2001/02/07 11:01:18
4507 [scp.c sftp-client.c sftp-server.c]
4508 unsigned long long -> %llu, not %qu. markus ok
4509 - stevesk@cvs.openbsd.org 2001/02/07 11:10:39
4510 [sftp.1 sftp-int.c]
4511 more man page cleanup and sync of help text with man page; ok markus@
4512 - markus@cvs.openbsd.org 2001/02/07 14:58:34
4513 [sftp-client.c]
4514 older servers reply with SSH2_FXP_NAME + count==0 instead of EOF
4515 - djm@cvs.openbsd.org 2001/02/07 15:27:19
4516 [sftp.c]
4517 Don't forward agent and X11 in sftp. Suggestion from Roumen Petrov
4518 <roumen.petrov@skalasoft.com>
4519 - stevesk@cvs.openbsd.org 2001/02/07 15:36:04
4520 [sftp-int.c]
4521 portable; ok markus@
4522 - stevesk@cvs.openbsd.org 2001/02/07 15:55:47
4523 [sftp-int.c]
4524 lowercase cmds[].c also; ok markus@
4525 - markus@cvs.openbsd.org 2001/02/07 17:04:52
4526 [pathnames.h sftp.c]
4527 allow sftp over ssh protocol 1; ok djm@
4528 - deraadt@cvs.openbsd.org 2001/02/08 07:38:55
4529 [scp.c]
4530 memory leak fix, and snprintf throughout
4531 - deraadt@cvs.openbsd.org 2001/02/08 08:02:02
4532 [sftp-int.c]
4533 plug a memory leak
4534 - stevesk@cvs.openbsd.org 2001/02/08 10:11:23
4535 [session.c sftp-client.c]
4536 %i -> %d
4537 - stevesk@cvs.openbsd.org 2001/02/08 10:57:59
4538 [sftp-int.c]
4539 typo
4540 - stevesk@cvs.openbsd.org 2001/02/08 15:28:07
4541 [sftp-int.c pathnames.h]
4542 _PATH_LS; ok markus@
4543 - djm@cvs.openbsd.org 2001/02/09 04:46:25
4544 [sftp-int.c]
4545 Check for NULL attribs for chown, chmod & chgrp operations, only send
4546 relevant attribs back to server; ok markus@
96b64eb0 4547 - djm@cvs.openbsd.org 2001/02/06 15:05:25
4548 [sftp.c]
4549 Use getopt to process commandline arguments
4550 - djm@cvs.openbsd.org 2001/02/06 15:06:21
4551 [sftp.c ]
4552 Wait for ssh subprocess at exit
4553 - djm@cvs.openbsd.org 2001/02/06 15:18:16
4554 [sftp-int.c]
4555 stat target for remote chdir before doing chdir
4556 - djm@cvs.openbsd.org 2001/02/06 15:32:54
4557 [sftp.1]
4558 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
4559 - provos@cvs.openbsd.org 2001/02/05 22:22:02
4560 [sftp-int.c]
4561 cleanup get_pathname, fix pwd after failed cd. okay djm@
0426a3b4 4562 - (djm) Update makefile.in for _PATH_SFTP_SERVER
c9f5e42e 4563 - (bal) sftp-client.c replace NULL w/ 0 in do_ls() (pending in OpenBSD tree)
0426a3b4 4564
6d1e1d2b 456520010209
68fa858a 4566 - (bal) patch to vis.c to deal with HAVE_VIS right by Robert Mooney
6d1e1d2b 4567 <rjmooney@mediaone.net>
bb0c1991 4568 - (bal) .c.o rule in openbsd-compat/Makefile.in did not make it to the
68fa858a 4569 main tree while porting forward. Pointed out by Lutz Jaenicke
bb0c1991 4570 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
f902d909 4571 - (bal) double entry in configure.in. Pointed out by Lutz Jaenicke
4572 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
25f4c264 4573 - (stevesk) OpenBSD sync:
4574 - markus@cvs.openbsd.org 2001/02/08 11:20:01
4575 [auth2.c]
4576 strict checking
4577 - markus@cvs.openbsd.org 2001/02/08 11:15:22
4578 [version.h]
4579 update to 2.3.2
4580 - markus@cvs.openbsd.org 2001/02/08 11:12:30
4581 [auth2.c]
4582 fix typo
72b3f75d 4583 - (djm) Update spec files
0ed28836 4584 - (bal) OpenBSD sync:
4585 - deraadt@cvs.openbsd.org 2001/02/08 14:38:54
4586 [scp.c]
4587 memory leak fix, and snprintf throughout
1fc8ccdf 4588 - markus@cvs.openbsd.org 2001/02/06 22:43:02
4589 [clientloop.c]
4590 remove confusing callback code
0b202697 4591 - (djm) Add CVS Id's to files that we have missed
5ca51e19 4592 - (bal) OpenBSD Sync (more):
4593 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
4594 sync with netbsd tree changes.
4595 - more strict prototypes, include necessary headers
4596 - use paths.h/pathnames.h decls
4597 - size_t typecase to int -> u_long
1f3bf5aa 4598 - markus@cvs.openbsd.org 2001/02/06 22:07:42
4599 [ssh.c]
4600 fatal() if subsystem fails
4601 - markus@cvs.openbsd.org 2001/02/06 22:43:02
4602 [ssh.c]
4603 remove confusing callback code
4604 - jakob@cvs.openbsd.org 2001/02/06 23:03:24
4605 [ssh.c]
4606 add -1 option (force protocol version 1). ok markus@
4607 - jakob@cvs.openbsd.org 2001/02/06 23:06:21
4608 [ssh.c]
4609 reorder -{1,2,4,6} options. ok markus@
e6aa01b4 4610 - (bal) Missing 'const' in readpass.h
9c5a8165 4611 - (bal) OpenBSD Sync (so at least the thing compiles for 2.3.2 =)
4612 - djm@cvs.openbsd.org 2001/02/06 23:30:28
4613 [sftp-client.c]
4614 replace arc4random with counter for request ids; ok markus@
68fa858a 4615 - (djm) Define _PATH_TTY for systems that don't. Report from Lutz
bc79ed5c 4616 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
6d1e1d2b 4617
6a25c04c 461820010208
4619 - (djm) Don't delete external askpass program in make uninstall target.
4620 Report and fix from Roumen Petrov <roumen.petrov@skalasoft.com>
6958bd37 4621 - (djm) Fix linking of sftp, don't need arc4random any more.
4622 - (djm) Try to use shell that supports "test -S" for EGD socket search.
4623 Based on patch from Tim Rice <tim@multitalents.net>
6a25c04c 4624
547519f0 462520010207
bee0a37e 4626 - (bal) Save the whole path to AR in configure. Some Solaris 2.7 installs
4627 seem lose track of it while in openbsd-compat/ (two confirmed reports)
5c377b3b 4628 - (djm) Much KNF on PAM code
547519f0 4629 - (djm) Revise auth-pam.c conversation function to be a little more
4630 readable.
5c377b3b 4631 - (djm) Revise kbd-int PAM conversation function to fold all text messages
4632 to before first prompt. Fixes hangs if last pam_message did not require
4633 a reply.
4634 - (djm) Fix password changing when using PAM kbd-int authentication
bee0a37e 4635
547519f0 463620010205
2b87da3b 4637 - (bal) Disable groupaccess by setting NGROUPS_MAX to 0 for platforms
99286dc8 4638 that don't have NGROUPS_MAX.
57559587 4639 - (bal) AIX patch for auth1.c by William L. Jones <jones@hpc.utexas.edu>
2b87da3b 4640 - (stevesk) OpenBSD sync:
4641 - stevesk@cvs.openbsd.org 2001/02/04 08:32:27
4642 [many files; did this manually to our top-level source dir]
4643 unexpand and remove end-of-line whitespace; ok markus@
408ba72f 4644 - stevesk@cvs.openbsd.org 2001/02/04 15:21:19
4645 [sftp-server.c]
4646 SSH2_FILEXFER_ATTR_UIDGID support; ok markus@
ec2a033a 4647 - deraadt@cvs.openbsd.org 2001/02/04 17:02:32
4648 [sftp-int.c]
4649 ? == help
4650 - deraadt@cvs.openbsd.org 2001/02/04 16:47:46
4651 [sftp-int.c]
4652 sort commands, so that abbreviations work as expected
4653 - stevesk@cvs.openbsd.org 2001/02/04 15:17:52
4654 [sftp-int.c]
4655 debugging sftp: precedence and missing break. chmod, chown, chgrp
4656 seem to be working now.
4657 - markus@cvs.openbsd.org 2001/02/04 14:41:21
4658 [sftp-int.c]
4659 use base 8 for umask/chmod
4660 - markus@cvs.openbsd.org 2001/02/04 11:11:54
4661 [sftp-int.c]
4662 fix LCD
c44559d2 4663 - markus@cvs.openbsd.org 2001/02/04 08:10:44
4664 [ssh.1]
4665 typo; dpo@club-internet.fr
a5930351 4666 - stevesk@cvs.openbsd.org 2001/02/04 06:30:12
4667 [auth2.c authfd.c packet.c]
4668 remove duplicate #include's; ok markus@
6a416424 4669 - deraadt@cvs.openbsd.org 2001/02/04 16:56:23
4670 [scp.c sshd.c]
4671 alpha happiness
4672 - stevesk@cvs.openbsd.org 2001/02/04 15:12:17
4673 [sshd.c]
4674 precedence; ok markus@
02a024dd 4675 - deraadt@cvs.openbsd.org 2001/02/04 08:14:15
6a416424 4676 [ssh.c sshd.c]
4677 make the alpha happy
02a024dd 4678 - markus@cvs.openbsd.org 2001/01/31 13:37:24
4679 [channels.c channels.h serverloop.c ssh.c]
68fa858a 4680 do not disconnect if local port forwarding fails, e.g. if port is
547519f0 4681 already in use
02a024dd 4682 - markus@cvs.openbsd.org 2001/02/01 14:58:09
4683 [channels.c]
4684 use ipaddr in channel messages, ietf-secsh wants this
4685 - markus@cvs.openbsd.org 2001/01/31 12:26:20
4686 [channels.c]
68fa858a 4687 ssh.com-2.0.1x does not send additional info in CHANNEL_OPEN_FAILURE
547519f0 4688 messages; bug report from edmundo@rano.org
a741554f 4689 - markus@cvs.openbsd.org 2001/01/31 13:48:09
4690 [sshconnect2.c]
4691 unused
9378f292 4692 - deraadt@cvs.openbsd.org 2001/02/04 08:23:08
4693 [sftp-client.c sftp-server.c]
4694 make gcc on the alpha even happier
1fc243d1 4695
547519f0 469620010204
781a0585 4697 - (bal) I think this is the last of the bsd-*.h that don't belong.
634e0b53 4698 - (bal) Minor Makefile fix
f0f14bea 4699 - (bal) openbsd-compat/Makefile minor fix. Ensure dependancies are done
61e96248 4700 right.
78987b57 4701 - (bal) Changed order of LIB="" in -with-skey due to library resolving.
166e4f2a 4702 - (bal) next-posix.h changed to bsd-nextstep.h
61e96248 4703 - (djm) OpenBSD CVS sync:
4704 - markus@cvs.openbsd.org 2001/02/03 03:08:38
4705 [auth-options.c auth-rh-rsa.c auth-rhosts.c auth.c canohost.c]
4706 [canohost.h servconf.c servconf.h session.c sshconnect1.c sshd.8]
4707 [sshd_config]
4708 make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@
4709 - markus@cvs.openbsd.org 2001/02/03 03:19:51
4710 [ssh.1 sshd.8 sshd_config]
4711 Skey is now called ChallengeResponse
4712 - markus@cvs.openbsd.org 2001/02/03 03:43:09
4713 [sshd.8]
4714 use no-pty option in .ssh/authorized_keys* if you need a 8-bit clean
4715 channel. note from Erik.Anggard@cygate.se (pr/1659)
4716 - stevesk@cvs.openbsd.org 2001/02/03 10:03:06
4717 [ssh.1]
4718 typos; ok markus@
4719 - djm@cvs.openbsd.org 2001/02/04 04:11:56
4720 [scp.1 sftp-server.c ssh.1 sshd.8 sftp-client.c sftp-client.h]
4721 [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c]
4722 Basic interactive sftp client; ok theo@
4723 - (djm) Update RPM specs for new sftp binary
68fa858a 4724 - (djm) Update several bits for new optional reverse lookup stuff. I
61e96248 4725 think I got them all.
8b061486 4726 - (djm) Makefile.in fixes
1aa00dcb 4727 - (stevesk) add mysignal() wrapper and use it for the protocol 2
4728 SIGCHLD handler.
408ba72f 4729 - (djm) Use setvbuf() instead of setlinebuf(). Suggest from stevesk@
781a0585 4730
547519f0 473120010203
63fe0529 4732 - (bal) Cygwin clean up by Corinna Vinschen <vinschen@redhat.com>
bf3db92d 4733 - (bal) renamed queue.h to fake-queue.h (even if it's an OpenBSD
4734 based file) to ensure #include space does not get confused.
f78888c7 4735 - (bal) Minor Makefile.in tweak. dirname may not exist on some
4736 platforms so builds fail. (NeXT being a well known one)
63fe0529 4737
547519f0 473820010202
61e96248 4739 - (bal) Makefile fix where sourcedir != builddir by Corinna Vinschen
c85a87f2 4740 <vinschen@redhat.com>
71301416 4741 - (bal) Makefile fix to use $(MAKE) instead of 'make' for platforms
4742 that use 'gmake'. Patch by Tim Rice <tim@multitalents.net>
c85a87f2 4743
547519f0 474420010201
ad5075bd 4745 - (bal) Minor fix to Makefile to stop rebuilding executables if no
4746 changes have occured to any of the supporting code. Patch by
4747 Roumen Petrov <roumen.petrov@skalasoft.com>
4748
9c8dbb1b 474920010131
37845585 4750 - (djm) OpenBSD CVS Sync:
4751 - djm@cvs.openbsd.org 2001/01/30 15:48:53
4752 [sshconnect.c]
4753 Make warning message a little more consistent. ok markus@
8c89dd2b 4754 - (djm) Fix autoconf logic for --with-lastlog=no Report and diagnosis from
4755 Philipp Buehler <lists@fips.de> and Kevin Steves <stevesk@sweden.hp.com>
4756 respectively.
c59dc6bd 4757 - (djm) Don't log SSH2 PAM KbdInt responses to debug, they may contain
4758 passwords.
9c8dbb1b 4759 - (bal) Reorder. Move all bsd-*, fake-*, next-*, and cygwin* stuff to
4760 openbsd-compat/. And resolve all ./configure and Makefile.in issues
4761 assocated.
37845585 4762
9c8dbb1b 476320010130
39929cdb 4764 - (djm) OpenBSD CVS Sync:
4765 - markus@cvs.openbsd.org 2001/01/29 09:55:37
4766 [channels.c channels.h clientloop.c serverloop.c]
4767 fix select overflow; ok deraadt@ and stevesk@
865ac82e 4768 - markus@cvs.openbsd.org 2001/01/29 12:42:35
4769 [canohost.c canohost.h channels.c clientloop.c]
4770 add get_peer_ipaddr(socket), x11-fwd in ssh2 requires ipaddr, not DNS
46aa2d1f 4771 - markus@cvs.openbsd.org 2001/01/29 12:47:32
4772 [rsa.c rsa.h ssh-agent.c sshconnect1.c sshd.c]
4773 handle rsa_private_decrypt failures; helps against the Bleichenbacher
4774 pkcs#1 attack
ae810de7 4775 - djm@cvs.openbsd.org 2001/01/29 05:36:11
4776 [ssh.1 ssh.c]
4777 Allow invocation of sybsystem by commandline (-s); ok markus@
83bc57f9 4778 - (stevesk) configure.in: remove duplicate PROG_LS
39929cdb 4779
9c8dbb1b 478020010129
f29ef605 4781 - (stevesk) sftp-server.c: use %lld vs. %qd
4782
cb9da0fc 478320010128
4784 - (bal) Put USE_PIPES back into sco3.2v5
23c2a7a5 4785 - (bal) OpenBSD Sync
9bd5b720 4786 - markus@cvs.openbsd.org 2001/01/28 10:15:34
4787 [dispatch.c]
4788 re-keying is not supported; ok deraadt@
5fb622e4 4789 - markus@cvs.openbsd.org 2001/01/28 10:24:04
7f5c4295 4790 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
5fb622e4 4791 cleanup AUTHORS sections
9bd5b720 4792 - markus@cvs.openbsd.org 2001/01/28 10:37:26
ab60252b 4793 [sshd.c sshd.8]
9bd5b720 4794 remove -Q, no longer needed
4795 - stevesk@cvs.openbsd.org 2001/01/28 20:36:16
a877488a 4796 [readconf.c ssh.1]
9bd5b720 4797 ``StrictHostKeyChecking ask'' documentation and small cleanup.
4798 ok markus@
6f37606e 4799 - stevesk@cvs.openbsd.org 2001/01/28 20:43:25
61e96248 4800 [sshd.8]
6f37606e 4801 spelling. ok markus@
95f4ccfb 4802 - stevesk@cvs.openbsd.org 2001/01/28 20:53:21
4803 [xmalloc.c]
4804 use size_t for strlen() return. ok markus@
6f37606e 4805 - stevesk@cvs.openbsd.org 2001/01/28 22:27:05
4806 [authfile.c]
4807 spelling. use sizeof vs. strlen(). ok markus@
9bd5b720 4808 - niklas@cvs.openbsd.org 2001/01/29 1:59:14
23c2a7a5 4809 [atomicio.h canohost.h clientloop.h deattack.h dh.h dispatch.h
4810 groupaccess.c groupaccess.h hmac.h hostfile.h includes.h kex.h
4811 key.h log.h login.h match.h misc.h myproposal.h nchan.ms pathnames.h
4812 radix.h readpass.h rijndael.h serverloop.h session.h sftp.h ssh-add.1
4813 ssh-dss.h ssh-keygen.1 ssh-keyscan.1 ssh-rsa.h ssh1.h ssh_config
4814 sshconnect.h sshd_config tildexpand.h uidswap.h uuencode.h]
4815 $OpenBSD$
b0e305c9 4816 - (bal) Minor auth2.c resync. Whitespace and moving of an #include.
cb9da0fc 4817
c9606e03 481820010126
61e96248 4819 - (bal) SSH_PROGRAM vs _PATH_SSH_PROGRAM fix pointed out by Roumen
c9606e03 4820 Petrov <roumen.petrov@skalasoft.com>
2f4b2e38 4821 - (bal) OpenBSD Sync
4822 - deraadt@cvs.openbsd.org 2001/01/25 8:06:33
4823 [ssh-agent.c]
4824 call _exit() in signal handler
c9606e03 4825
d7d5f0b2 482620010125
4827 - (djm) Sync bsd-* support files:
4828 - deraadt@cvs.openbsd.org 2000/01/26 03:43:20
4829 [rresvport.c bindresvport.c]
61e96248 4830 new bindresvport() semantics that itojun, shin, jean-luc and i have
d7d5f0b2 4831 agreed on, which will be happy for the future. bindresvport_sa() for
4832 sockaddr *, too. docs later..
4833 - deraadt@cvs.openbsd.org 2000/01/24 02:24:21
4834 [bindresvport.c]
61e96248 4835 in bindresvport(), if sin is non-NULL, example sin->sin_family for
d7d5f0b2 4836 the actual family being processed
e1dd3a7a 4837 - (djm) Mention PRNGd in documentation, it is nicer than EGD
4838 - (djm) Automatically search for "well-known" EGD/PRNGd sockets in autoconf
8080699b 4839 - (bal) AC_FUNC_STRFTIME added to autoconf
4ccb01d6 4840 - (bal) OpenBSD Resync
4841 - stevesk@cvs.openbsd.org 2001/01/24 21:03:50
4842 [channels.c]
4843 missing freeaddrinfo(); ok markus@
d7d5f0b2 4844
556eb464 484520010124
4846 - (bal) OpenBSD Resync
4847 - markus@cvs.openbsd.org 2001/01/23 10:45:10
4848 [ssh.h]
61e96248 4849 nuke comment
1aecda34 4850 - (bal) no 64bit support patch from Tim Rice <tim@multitalents.net>
4851 - (bal) #ifdef around S_IFSOCK if platform does not support it.
4852 patch by Tim Rice <tim@multitalents.net>
4853 - (bal) fake-regex.h cleanup based on Tim Rice's patch.
c33f0b36 4854 - (stevesk) sftp-server.c: fix chmod() mode mask
556eb464 4855
effa6591 485620010123
4857 - (bal) regexp.h typo in configure.in. Should have been regex.h
4858 - (bal) SSH_USER_DIR to _PATH_SSH_USER_DIR patch by stevesk@
61e96248 4859 - (bal) SSH_ASKPASS_DEFAULT to _PATH_SSH_ASKPASS_DEFAULT
53a24016 4860 - (bal) OpenBSD Resync
4861 - markus@cvs.openbsd.org 2001/01/22 8:15:00
4862 [auth-krb4.c sshconnect1.c]
4863 only AFS needs radix.[ch]
4864 - markus@cvs.openbsd.org 2001/01/22 8:32:53
4865 [auth2.c]
4866 no need to include; from mouring@etoh.eviladmin.org
4867 - stevesk@cvs.openbsd.org 2001/01/22 16:55:21
4868 [key.c]
4869 free() -> xfree(); ok markus@
4870 - stevesk@cvs.openbsd.org 2001/01/22 17:22:28
4871 [sshconnect2.c sshd.c]
4872 fix memory leaks in SSH2 key exchange; ok markus@
d464095c 4873 - markus@cvs.openbsd.org 2001/01/22 23:06:39
4874 [auth1.c auth2.c readconf.c readconf.h servconf.c servconf.h
4875 sshconnect1.c sshconnect2.c sshd.c]
4876 rename skey -> challenge response.
4877 auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.
53a24016 4878
effa6591 4879
42f11eb2 488020010122
4881 - (bal) OpenBSD Resync
4882 - markus@cvs.openbsd.org 2001/01/19 12:45:26 GMT 2001 by markus
4883 [servconf.c ssh.h sshd.c]
4884 only auth-chall.c needs #ifdef SKEY
4885 - markus@cvs.openbsd.org 2001/01/19 15:55:10 GMT 2001 by markus
4886 [auth-krb4.c auth-options.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
4887 auth1.c auth2.c channels.c clientloop.c dh.c dispatch.c nchan.c
4888 packet.c pathname.h readconf.c scp.c servconf.c serverloop.c
4889 session.c ssh-add.c ssh-keygen.c ssh-keyscan.c ssh.c ssh.h
4890 ssh1.h sshconnect1.c sshd.c ttymodes.c]
4891 move ssh1 definitions to ssh1.h, pathnames to pathnames.h
4892 - markus@cvs.openbsd.org 2001/01/19 16:48:14
4893 [sshd.8]
4894 fix typo; from stevesk@
4895 - markus@cvs.openbsd.org 2001/01/19 16:50:58
4896 [ssh-dss.c]
61e96248 4897 clear and free digest, make consistent with other code (use dlen); from
42f11eb2 4898 stevesk@
4899 - markus@cvs.openbsd.org 2001/01/20 15:55:20 GMT 2001 by markus
4900 [auth-options.c auth-options.h auth-rsa.c auth2.c]
4901 pass the filename to auth_parse_options()
61e96248 4902 - markus@cvs.openbsd.org 2001/01/20 17:59:40 GMT 2001
42f11eb2 4903 [readconf.c]
4904 fix SIGSEGV from -o ""; problem noted by jehsom@togetherweb.com
4905 - stevesk@cvs.openbsd.org 2001/01/20 18:20:29
4906 [sshconnect2.c]
4907 dh_new_group() does not return NULL. ok markus@
4908 - markus@cvs.openbsd.org 2001/01/20 21:33:42
4909 [ssh-add.c]
61e96248 4910 do not loop forever if askpass does not exist; from
42f11eb2 4911 andrew@pimlott.ne.mediaone.net
4912 - djm@cvs.openbsd.org 2001/01/20 23:00:56
4913 [servconf.c]
4914 Check for NULL return from strdelim; ok markus
4915 - djm@cvs.openbsd.org 2001/01/20 23:02:07
4916 [readconf.c]
4917 KNF; ok markus
4918 - jakob@cvs.openbsd.org 2001/01/21 9:00:33
4919 [ssh-keygen.1]
4920 remove -R flag; ok markus@
4921 - markus@cvs.openbsd.org 2001/01/21 19:05:40
4922 [atomicio.c automicio.h auth-chall.c auth-krb4.c auth-options.c
4923 auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
4924 auth.c auth.h auth1.c auth2-chall.c auth2.c authfd.c authfile.c
4925 bufaux.c bufaux.h buffer.c canahost.c canahost.h channels.c
4926 cipher.c cli.c clientloop.c clientloop.h compat.c compress.c
4927 deattack.c dh.c dispatch.c groupaccess.c hmac.c hostfile.c kex.c
4928 key.c key.h log-client.c log-server.c log.c log.h login.c login.h
4929 match.c misc.c misc.h nchan.c packet.c pty.c radix.h readconf.c
4930 readpass.c readpass.h rsa.c scp.c servconf.c serverloop.c serverloop.h
4931 session.c sftp-server.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c
61e96248 4932 ssh-keyscan.c ssh-rsa.c ssh.c ssh.h sshconnect.c sshconnect.h
42f11eb2 4933 sshconnect1.c sshconnect2.c sshd.c tildexpand.c tildexpand.h
4934 ttysmodes.c uidswap.c xmalloc.c]
61e96248 4935 split ssh.h and try to cleanup the #include mess. remove unnecessary
42f11eb2 4936 #includes. rename util.[ch] -> misc.[ch]
4937 - (bal) renamed 'PIDDIR' to '_PATH_SSH_PIDDIR' to match OpenBSD tree
61e96248 4938 - (bal) Moved #ifdef KRB4 in auth-krb4.c above the #include to resolve
42f11eb2 4939 conflict when compiling for non-kerb install
4940 - (bal) removed the #ifdef SKEY in auth1.c to match Markus' changes
4941 on 1/19.
4942
6005a40c 494320010120
4944 - (bal) OpenBSD Resync
4945 - markus@cvs.openbsd.org 2001/01/19 12:45:26
4946 [ssh-chall.c servconf.c servconf.h ssh.h sshd.c]
4947 only auth-chall.c needs #ifdef SKEY
47af6577 4948 - (bal) Slight auth2-pam.c clean up.
4949 - (bal) Includes a fake-regexp.h to be only used if regcomp() is found,
4950 but no 'regexp.h' found (SCO OpenServer 3 lacks the header).
6005a40c 4951
922e6493 495220010119
4953 - (djm) Update versions in RPM specfiles
59c97189 4954 - (bal) OpenBSD Resync
4955 - markus@cvs.openbsd.org 2001/01/18 16:20:21
4956 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1 ssh.h
4957 sshd.8 sshd.c]
61e96248 4958 log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many
59c97189 4959 systems
4960 - markus@cvs.openbsd.org 2001/01/18 16:59:59
4961 [auth-passwd.c auth.c auth.h auth1.c auth2.c serverloop.c session.c
4962 session.h sshconnect1.c]
4963 1) removes fake skey from sshd, since this will be much
4964 harder with /usr/libexec/auth/login_XXX
4965 2) share/unify code used in ssh-1 and ssh-2 authentication (server side)
4966 3) make addition of BSD_AUTH and other challenge reponse methods
4967 easier.
4968 - markus@cvs.openbsd.org 2001/01/18 17:12:43
4969 [auth-chall.c auth2-chall.c]
4970 rename *-skey.c *-chall.c since the files are not skey specific
04fc7a67 4971 - (djm) Merge patch from Tim Waugh (via Nalin Dahyabhai <nalin@redhat.com>)
4972 to fix NULL pointer deref and fake authloop breakage in PAM code.
f4ebf0e8 4973 - (bal) Updated contrib/cygwin/ by Corinna Vinschen <vinschen@redhat.com>
3c418020 4974 - (bal) Minor cygwin patch to auth1.c. Suggested by djm.
61e96248 4975
b5c334cc 497620010118
4977 - (bal) Super Sized OpenBSD Resync
4978 - markus@cvs.openbsd.org 2001/01/11 22:14:20 GMT 2001 by markus
4979 [sshd.c]
4980 maxfd+1
4981 - markus@cvs.openbsd.org 2001/01/13 17:59:18
4982 [ssh-keygen.1]
4983 small ssh-keygen manpage cleanup; stevesk@pobox.com
4984 - markus@cvs.openbsd.org 2001/01/13 18:03:07
4985 [scp.c ssh-keygen.c sshd.c]
4986 getopt() returns -1 not EOF; stevesk@pobox.com
4987 - markus@cvs.openbsd.org 2001/01/13 18:06:54
4988 [ssh-keyscan.c]
4989 use SSH_DEFAULT_PORT; from stevesk@pobox.com
4990 - markus@cvs.openbsd.org 2001/01/13 18:12:47
4991 [ssh-keyscan.c]
4992 free() -> xfree(); fix memory leak; from stevesk@pobox.com
4993 - markus@cvs.openbsd.org 2001/01/13 18:14:13
4994 [ssh-add.c]
4995 typo, from stevesk@sweden.hp.com
4996 - markus@cvs.openbsd.org 2001/01/13 18:32:50
61e96248 4997 [packet.c session.c ssh.c sshconnect.c sshd.c]
b5c334cc 4998 split out keepalive from packet_interactive (from dale@accentre.com)
4999 set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too.
5000 - markus@cvs.openbsd.org 2001/01/13 18:36:45
5001 [packet.c packet.h]
5002 reorder, typo
5003 - markus@cvs.openbsd.org 2001/01/13 18:38:00
5004 [auth-options.c]
5005 fix comment
5006 - markus@cvs.openbsd.org 2001/01/13 18:43:31
5007 [session.c]
5008 Wall
61e96248 5009 - markus@cvs.openbsd.org 2001/01/13 19:14:08
b5c334cc 5010 [clientloop.h clientloop.c ssh.c]
5011 move callback to headerfile
5012 - markus@cvs.openbsd.org 2001/01/15 21:40:10
5013 [ssh.c]
5014 use log() instead of stderr
5015 - markus@cvs.openbsd.org 2001/01/15 21:43:51
5016 [dh.c]
5017 use error() not stderr!
5018 - markus@cvs.openbsd.org 2001/01/15 21:45:29
5019 [sftp-server.c]
5020 rename must fail if newpath exists, debug off by default
5021 - markus@cvs.openbsd.org 2001/01/15 21:46:38
5022 [sftp-server.c]
5023 readable long listing for sftp-server, ok deraadt@
5024 - markus@cvs.openbsd.org 2001/01/16 19:20:06
5025 [key.c ssh-rsa.c]
61e96248 5026 make "ssh-rsa" key format for ssh2 confirm to the ietf-drafts; from
5027 galb@vandyke.com. note that you have to delete older ssh2-rsa keys,
5028 since they are in the wrong format, too. they must be removed from
b5c334cc 5029 .ssh/authorized_keys2 and .ssh/known_hosts2, etc.
61e96248 5030 (cd; grep -v ssh-rsa .ssh/authorized_keys2 > TMP && mv TMP
5031 .ssh/authorized_keys2) additionally, we now check that
b5c334cc 5032 BN_num_bits(rsa->n) >= 768.
5033 - markus@cvs.openbsd.org 2001/01/16 20:54:27
5034 [sftp-server.c]
5035 remove some statics. simpler handles; idea from nisse@lysator.liu.se
5036 - deraadt@cvs.openbsd.org 2001/01/16 23:58:08
5037 [bufaux.c radix.c sshconnect.h sshconnect1.c]
5038 indent
5039 - (bal) Added bsd-strmode.[ch] since some non-OpenBSD platforms may
5040 be missing such feature.
5041
61e96248 5042
52ce34a2 504320010117
5044 - (djm) Only write random seed file at exit
717057b6 5045 - (djm) Make PAM support optional, enable with --with-pam
61e96248 5046 - (djm) Try to use libcrypt on Linux, but link it after OpenSSL (which
717057b6 5047 provides a crypt() of its own)
5048 - (djm) Avoid a warning in bsd-bindresvport.c
5049 - (djm) Try to avoid adding -I/usr/include to CPPFLAGS during SSL tests. This
61e96248 5050 can cause weird segfaults errors on Solaris
8694a1ce 5051 - (djm) Avoid warning in PAM code by making read_passphrase arguments const
d748039d 5052 - (djm) Add --with-pam to RPM spec files
52ce34a2 5053
2fd3c144 505420010115
5055 - (bal) sftp-server.c change to use chmod() if fchmod() does not exist.
89c7e31c 5056 - (bal) utimes() support via utime() interface on machine that lack utimes().
2fd3c144 5057
63b68889 505820010114
5059 - (stevesk) initial work for OpenBSD "support supplementary group in
5060 {Allow,Deny}Groups" patch:
5061 - import getgrouplist.c from OpenBSD (bsd-getgrouplist.c)
5062 - add bsd-getgrouplist.h
5063 - new files groupaccess.[ch]
5064 - build but don't use yet (need to merge auth.c changes)
c6a69271 5065 - (stevesk) complete:
5066 - markus@cvs.openbsd.org 2001/01/13 11:56:48
5067 [auth.c sshd.8]
5068 support supplementary group in {Allow,Deny}Groups
5069 from stevesk@pobox.com
61e96248 5070
f546c780 507120010112
5072 - (bal) OpenBSD Sync
5073 - markus@cvs.openbsd.org 2001/01/10 22:56:22
5074 [bufaux.h bufaux.c sftp-server.c sftp.h getput.h]
5075 cleanup sftp-server implementation:
547519f0 5076 add buffer_get_int64, buffer_put_int64, GET_64BIT, PUT_64BIT
5077 parse SSH2_FILEXFER_ATTR_EXTENDED
5078 send SSH2_FX_EOF if readdir returns no more entries
5079 reply to SSH2_FXP_EXTENDED message
5080 use #defines from the draft
5081 move #definations to sftp.h
f546c780 5082 more info:
61e96248 5083 http://www.ietf.org/internet-drafts/draft-ietf-secsh-filexfer-00.txt
f546c780 5084 - markus@cvs.openbsd.org 2001/01/10 19:43:20
5085 [sshd.c]
5086 XXX - generate_empheral_server_key() is not safe against races,
61e96248 5087 because it calls log()
f546c780 5088 - markus@cvs.openbsd.org 2001/01/09 21:19:50
5089 [packet.c]
5090 allow TCP_NDELAY for ipv6; from netbsd via itojun@
5091
9548d6c8 509220010110
5093 - (djm) SNI/Reliant Unix needs USE_PIPES and $DISPLAY hack. Report from
5094 Bladt Norbert <Norbert.Bladt@adi.ch>
5095
af972861 509620010109
5097 - (bal) Resync CVS ID of cli.c
4b80e97b 5098 - (stevesk) auth1.c: free should be after WITH_AIXAUTHENTICATE
5099 code.
eea39c02 5100 - (bal) OpenBSD Sync
5101 - markus@cvs.openbsd.org 2001/01/08 22:29:05
5102 [auth2.c compat.c compat.h servconf.c servconf.h sshd.8
5103 sshd_config version.h]
5104 implement option 'Banner /etc/issue.net' for ssh2, move version to
5105 2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
5106 is enabled).
5107 - markus@cvs.openbsd.org 2001/01/08 22:03:23
5108 [channels.c ssh-keyscan.c]
5109 O_NDELAY -> O_NONBLOCK; thanks stevesk@pobox.com
5110 - markus@cvs.openbsd.org 2001/01/08 21:55:41
5111 [sshconnect1.c]
5112 more cleanups and fixes from stevesk@pobox.com:
5113 1) try_agent_authentication() for loop will overwrite key just
5114 allocated with key_new(); don't alloc
5115 2) call ssh_close_authentication_connection() before exit
5116 try_agent_authentication()
5117 3) free mem on bad passphrase in try_rsa_authentication()
5118 - markus@cvs.openbsd.org 2001/01/08 21:48:17
5119 [kex.c]
5120 missing free; thanks stevesk@pobox.com
f1c4659d 5121 - (bal) Detect if clock_t structure exists, if not define it.
5122 - (bal) Detect if O_NONBLOCK exists, if not define it.
5123 - (bal) removed news4-posix.h (now empty)
5124 - (bal) changed bsd-bindresvport.c and bsd-rresvport.c to use 'socklen_t'
5125 instead of 'int'
adc83ebf 5126 - (stevesk) sshd_config: sync
4f771a33 5127 - (stevesk) defines.h: remove spurious ``;''
af972861 5128
bbcf899f 512920010108
5130 - (bal) Fixed another typo in cli.c
5131 - (bal) OpenBSD Sync
5132 - markus@cvs.openbsd.org 2001/01/07 21:26:55
5133 [cli.c]
5134 typo
5135 - markus@cvs.openbsd.org 2001/01/07 21:26:55
5136 [cli.c]
5137 missing free, stevesk@pobox.com
5138 - markus@cvs.openbsd.org 2001/01/07 19:06:25
5139 [auth1.c]
5140 missing free, stevesk@pobox.com
5141 - markus@cvs.openbsd.org 2001/01/07 11:28:04
5142 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1
5143 ssh.h sshd.8 sshd.c]
5144 rename SYSLOG_LEVEL_INFO->SYSLOG_LEVEL_NOTICE
5145 syslog priority changes:
5146 fatal() LOG_ERR -> LOG_CRIT
5147 log() LOG_INFO -> LOG_NOTICE
b8c37305 5148 - Updated TODO
bbcf899f 5149
9616313f 515020010107
5151 - (bal) OpenBSD Sync
5152 - markus@cvs.openbsd.org 2001/01/06 11:23:27
5153 [ssh-rsa.c]
5154 remove unused
5155 - itojun@cvs.openbsd.org 2001/01/05 08:23:29
5156 [ssh-keyscan.1]
5157 missing .El
5158 - markus@cvs.openbsd.org 2001/01/04 22:41:03
5159 [session.c sshconnect.c]
5160 consistent use of _PATH_BSHELL; from stevesk@pobox.com
5161 - djm@cvs.openbsd.org 2001/01/04 22:35:32
5162 [ssh.1 sshd.8]
5163 Mention AES as available SSH2 Cipher; ok markus
5164 - markus@cvs.openbsd.org 2001/01/04 22:25:58
5165 [sshd.c]
5166 sync usage()/man with defaults; from stevesk@pobox.com
5167 - markus@cvs.openbsd.org 2001/01/04 22:21:26
5168 [sshconnect2.c]
5169 handle SSH2_MSG_USERAUTH_BANNER; fixes bug when connecting to a server
5170 that prints a banner (e.g. /etc/issue.net)
61e96248 5171
1877dc0c 517220010105
5173 - (bal) contrib/caldera/ provided by Tim Rice <tim@multitalents.net>
5a64a938 5174 - (bal) bsd-getcwd.c and bsd-setenv.c changed from bcopy() to memmove()
1877dc0c 5175
488c06c8 517620010104
5177 - (djm) Fix memory leak on systems with BROKEN_GETADDRINFO. Based on
5178 work by Chris Vaughan <vaughan99@yahoo.com>
5179
7c49df64 518020010103
5181 - (bal) fixed up sshconnect.c so it was closer inline with the OpenBSD
5182 tree (mainly positioning)
5183 - (bal) OpenSSH CVS Update
5184 - markus@cvs.openbsd.org 2001/01/02 20:41:02
5185 [packet.c]
5186 log remote ip on disconnect; PR 1600 from jcs@rt.fm
5187 - markus@cvs.openbsd.org 2001/01/02 20:50:56
5188 [sshconnect.c]
61e96248 5189 strict_host_key_checking for host_status != HOST_CHANGED &&
7c49df64 5190 ip_status == HOST_CHANGED
61e96248 5191 - (bal) authfile.c: Synced CVS ID tag
2c523de9 5192 - (bal) UnixWare 2.0 fixes by Tim Rice <tim@multitalents.net>
5193 - (bal) Disable sftp-server if no 64bit int support exists. Based on
5194 patch by Tim Rice <tim@multitalents.net>
5195 - (bal) Makefile.in changes to uninstall: target to remove sftp-server
5196 and sftp-server.8 manpage.
7c49df64 5197
a421e945 519820010102
5199 - (bal) OpenBSD CVS Update
5200 - markus@cvs.openbsd.org 2001/01/01 14:52:49
5201 [scp.c]
5202 use shared fatal(); from stevesk@pobox.com
5203
0efc80a7 520420001231
5205 - (bal) Reverted out of MAXHOSTNAMELEN. This should be set per OS.
5206 for multiple reasons.
b1335fdf 5207 - (bal) Reverted out of a partial NeXT patch.
0efc80a7 5208
efcae5b1 520920001230
5210 - (bal) OpenBSD CVS Update
5211 - markus@cvs.openbsd.org 2000/12/28 18:58:30
5212 [ssh-keygen.c]
5213 enable 'ssh-keygen -l -f ~/.ssh/{authorized_keys,known_hosts}{,2}
b148018f 5214 - markus@cvs.openbsd.org 2000/12/29 22:19:13
5215 [channels.c]
5216 missing xfree; from vaughan99@yahoo.com
efcae5b1 5217 - (bal) Resynced CVS ID with OpenBSD for channel.c and uidswap.c
03a14cc9 5218 - (bal) if no MAXHOSTNAMELEN is defined. Default to 64 character defination.
34665bf7 5219 Suggested by Christian Kurz <shorty@debian.org>
cb6dabf4 5220 - (bal) Add in '.c.o' section to Makefile.in to address make programs that
61e96248 5221 don't honor CPPFLAGS by default. Suggested by Lutz Jaenicke
cb6dabf4 5222 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
0dd78cd8 5223
522420001229
61e96248 5225 - (bal) Fixed spelling of 'authorized_keys' in ssh-copy-id.1 by Christian
34665bf7 5226 Kurz <shorty@debian.org>
8abcdba4 5227 - (bal) OpenBSD CVS Update
5228 - markus@cvs.openbsd.org 2000/12/28 14:25:51
5229 [auth.h auth2.c]
5230 count authentication failures only
5231 - markus@cvs.openbsd.org 2000/12/28 14:25:03
5232 [sshconnect.c]
5233 fingerprint for MITM attacks, too.
5234 - markus@cvs.openbsd.org 2000/12/28 12:03:57
5235 [sshd.8 sshd.c]
5236 document -D
5237 - markus@cvs.openbsd.org 2000/12/27 14:19:21
5238 [serverloop.c]
5239 less chatty
5240 - markus@cvs.openbsd.org 2000/12/27 12:34
5241 [auth1.c sshconnect2.c sshd.c]
5242 typo
5243 - markus@cvs.openbsd.org 2000/12/27 12:30:19
5244 [readconf.c readconf.h ssh.1 sshconnect.c]
5245 new option: HostKeyAlias: allow the user to record the host key
5246 under a different name. This is useful for ssh tunneling over
5247 forwarded connections or if you run multiple sshd's on different
5248 ports on the same machine.
5249 - markus@cvs.openbsd.org 2000/12/27 11:51:53
5250 [ssh.1 ssh.c]
5251 multiple -t force pty allocation, document ORIGINAL_COMMAND
5252 - markus@cvs.openbsd.org 2000/12/27 11:41:31
5253 [sshd.8]
5254 update for ssh-2
c52c7082 5255 - (stevesk) compress.[ch] sync with openbsd; missed in prototype
5256 fix merge.
0dd78cd8 5257
8f523d67 525820001228
5259 - (bal) Patch to add libutil.h to loginrec.c only if the platform has
5260 libutil.h. Suggested by Pekka Savola <pekka@netcore.fi>
9fb76616 5261 - (djm) Update to new x11-askpass in RPM spec
0dd78cd8 5262 - (bal) SCO patch to not include <sys/queue.h> since it's unrelated
5263 header. Patch by Tim Rice <tim@multitalents.net>
5264 - Updated TODO w/ known HP/UX issue
5265 - (bal) removed extra <netdb.h> noticed by Kevin Steves and removed the
5266 bad reference to 'NeXT including it else were' on the #ifdef version.
8f523d67 5267
b03bd394 526820001227
61e96248 5269 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
b03bd394 5270 Takumi Yamane <yamtak@b-session.com>
5271 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
8f523d67 5272 by Corinna Vinschen <vinschen@redhat.com>
5273 - (djm) Fix catman-do target for non-bash
61e96248 5274 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
8f523d67 5275 Takumi Yamane <yamtak@b-session.com>
5276 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
b03bd394 5277 by Corinna Vinschen <vinschen@redhat.com>
13991f8e 5278 - (djm) Fix catman-do target for non-bash
61e96248 5279 - (bal) Fixed NeXT's lack of CPPFLAGS honoring.
5280 - (bal) ssh-keyscan.c: NeXT (and older BSDs) don't support getrlimit() w/
f318b98b 5281 'RLIMIT_NOFILE'
61e96248 5282 - (djm) Remove *.Ylonen files. They are no longer in the OpenBSD tree,
5283 the info in COPYING.Ylonen has been moved to the start of each
3bdf55b1 5284 SSH1-derived file and README.Ylonen is well out of date.
b03bd394 5285
8d88011e 528620001223
5287 - (bal) Fixed Makefile.in to support recompile of all ssh and sshd objects
5288 if a change to config.h has occurred. Suggested by Gert Doering
5289 <gert@greenie.muc.de>
5290 - (bal) OpenBSD CVS Update:
5291 - markus@cvs.openbsd.org 2000/12/22 16:49:40
5292 [ssh-keygen.c]
5293 fix ssh-keygen -x -t type > file; from Roumen.Petrov@skalasoft.com
5294
1e3b8b07 529520001222
5296 - Updated RCSID for pty.c
5297 - (bal) OpenBSD CVS Updates:
5298 - markus@cvs.openbsd.org 2000/12/21 15:10:16
5299 [auth-rh-rsa.c hostfile.c hostfile.h sshconnect.c]
5300 print keyfile:line for changed hostkeys, for deraadt@, ok deraadt@
5301 - markus@cvs.openbsd.org 2000/12/20 19:26:56
5302 [authfile.c]
5303 allow ssh -i userkey for root
5304 - markus@cvs.openbsd.org 2000/12/20 19:37:21
5305 [authfd.c authfd.h kex.c sshconnect2.c sshd.c uidswap.c uidswap.h]
5306 fix prototypes; from stevesk@pobox.com
5307 - markus@cvs.openbsd.org 2000/12/20 19:32:08
5308 [sshd.c]
5309 init pointer to NULL; report from Jan.Ivan@cern.ch
5310 - markus@cvs.openbsd.org 2000/12/19 23:17:54
5311 [auth-krb4.c auth-options.c auth-options.h auth-rhosts.c auth-rsa.c
5312 auth1.c auth2-skey.c auth2.c authfd.c authfd.h authfile.c bufaux.c
5313 bufaux.h buffer.c canohost.c channels.c clientloop.c compress.c
5314 crc32.c deattack.c getput.h hmac.c hmac.h hostfile.c kex.c kex.h
5315 key.c key.h log.c login.c match.c match.h mpaux.c mpaux.h packet.c
5316 packet.h radix.c readconf.c rsa.c scp.c servconf.c servconf.h
5317 serverloop.c session.c sftp-server.c ssh-agent.c ssh-dss.c ssh-dss.h
5318 ssh-keygen.c ssh-keyscan.c ssh-rsa.c ssh-rsa.h ssh.c ssh.h uuencode.c
5319 uuencode.h sshconnect1.c sshconnect2.c sshd.c tildexpand.c]
5320 replace 'unsigned bla' with 'u_bla' everywhere. also replace 'char
5321 unsigned' with u_char.
5322
67b0facb 532320001221
5324 - (stevesk) OpenBSD CVS updates:
5325 - markus@cvs.openbsd.org 2000/12/19 15:43:45
5326 [authfile.c channels.c sftp-server.c ssh-agent.c]
5327 remove() -> unlink() for consistency
5328 - markus@cvs.openbsd.org 2000/12/19 15:48:09
5329 [ssh-keyscan.c]
5330 replace <ssl/x.h> with <openssl/x.h>
5331 - markus@cvs.openbsd.org 2000/12/17 02:33:40
5332 [uidswap.c]
5333 typo; from wsanchez@apple.com
61e96248 5334
adeebd37 533520001220
61e96248 5336 - (djm) Workaround PAM inconsistencies between Solaris derived PAM code
adeebd37 5337 and Linux-PAM. Based on report and fix from Andrew Morgan
5338 <morgan@transmeta.com>
5339
f072c47a 534020001218
5341 - (stevesk) rsa.c: entropy.h not needed.
0c2fb82f 5342 - (bal) split CFLAGS into CFLAGS and CPPFLAGS in configure.in and Makefile.
5343 Suggested by Wilfredo Sanchez <wsanchez@apple.com>
f072c47a 5344
731c1541 534520001216
5346 - (stevesk) OpenBSD CVS updates:
5347 - markus@cvs.openbsd.org 2000/12/16 02:53:57
5348 [scp.c]
5349 allow + in usernames; request from Florian.Weimer@RUS.Uni-Stuttgart.DE
5350 - markus@cvs.openbsd.org 2000/12/16 02:39:57
5351 [scp.c]
5352 unused; from stevesk@pobox.com
5353
227e8e86 535420001215
9853409f 5355 - (stevesk) Old OpenBSD patch wasn't completely applied:
5356 - markus@cvs.openbsd.org 2000/01/24 22:11:20
5357 [scp.c]
5358 allow '.' in usernames; from jedgar@fxp.org
227e8e86 5359 - (stevesk) OpenBSD CVS updates:
5360 - markus@cvs.openbsd.org 2000/12/13 16:26:53
5361 [ssh-keyscan.c]
5362 fatal already adds \n; from stevesk@pobox.com
5363 - markus@cvs.openbsd.org 2000/12/13 16:25:44
5364 [ssh-agent.c]
5365 remove redundant spaces; from stevesk@pobox.com
5366 - ho@cvs.openbsd.org 2000/12/12 15:50:21
5367 [pty.c]
5368 When failing to set tty owner and mode on a read-only filesystem, don't
5369 abort if the tty already has correct owner and reasonably sane modes.
5370 Example; permit 'root' to login to a firewall with read-only root fs.
5371 (markus@ ok)
5372 - deraadt@cvs.openbsd.org 2000/12/13 06:36:05
5373 [pty.c]
5374 KNF
6ffc9c88 5375 - markus@cvs.openbsd.org 2000/12/12 14:45:21
5376 [sshd.c]
5377 source port < 1024 is no longer required for rhosts-rsa since it
5378 adds no additional security.
5379 - markus@cvs.openbsd.org 2000/12/12 16:11:49
5380 [ssh.1 ssh.c]
5381 rhosts-rsa is no longer automagically disabled if ssh is not privileged.
5382 UsePrivilegedPort=no disables rhosts-rsa _only_ for old servers.
5383 these changes should not change the visible default behaviour of the ssh client.
71c0d06a 5384 - deraadt@cvs.openbsd.org 2000/12/11 10:27:33
5385 [scp.c]
5386 when copying 0-sized files, do not re-print ETA time at completion
3e1caa83 5387 - provos@cvs.openbsd.org 2000/12/15 10:30:15
5388 [kex.c kex.h sshconnect2.c sshd.c]
5389 compute diffie-hellman in parallel between server and client. okay markus@
227e8e86 5390
6c935fbd 539120001213
5392 - (djm) Make sure we reset the SIGPIPE disposition after we fork. Report
5393 from Andreas M. Kirchwitz <amk@krell.zikzak.de>
227e8e86 5394 - (stevesk) OpenBSD CVS update:
1fe6a48f 5395 - markus@cvs.openbsd.org 2000/12/12 15:30:02
5396 [ssh-keyscan.c ssh.c sshd.c]
61e96248 5397 consistently use __progname; from stevesk@pobox.com
6c935fbd 5398
367d1840 539920001211
5400 - (bal) Applied patch to include ssh-keyscan into Redhat's package, and
5401 patch to install ssh-keyscan manpage. Patch by Pekka Savola
5402 <pekka@netcore.fi>
e3a70753 5403 - (bal) OpenbSD CVS update
5404 - markus@cvs.openbsd.org 2000/12/10 17:01:53
5405 [sshconnect1.c]
5406 always request new challenge for skey/tis-auth, fixes interop with
5407 other implementations; report from roth@feep.net
367d1840 5408
6b523bae 540920001210
5410 - (bal) OpenBSD CVS updates
61e96248 5411 - markus@cvs.openbsd.org 2000/12/09 13:41:51
6b523bae 5412 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
5413 undo rijndael changes
61e96248 5414 - markus@cvs.openbsd.org 2000/12/09 13:48:31
6b523bae 5415 [rijndael.c]
5416 fix byte order bug w/o introducing new implementation
61e96248 5417 - markus@cvs.openbsd.org 2000/12/09 14:08:27
6b523bae 5418 [sftp-server.c]
5419 "" -> "." for realpath; from vinschen@redhat.com
61e96248 5420 - markus@cvs.openbsd.org 2000/12/09 14:06:54
6b523bae 5421 [ssh-agent.c]
5422 extern int optind; from stevesk@sweden.hp.com
13af0aa2 5423 - provos@cvs.openbsd.org 2000/12/09 23:51:11
5424 [compat.c]
5425 remove unnecessary '\n'
6b523bae 5426
ce9c0b75 542720001209
6b523bae 5428 - (bal) OpenBSD CVS updates:
61e96248 5429 - djm@cvs.openbsd.org 2000/12/07 4:24:59
ce9c0b75 5430 [ssh.1]
5431 Typo fix from Wilfredo Sanchez <wsanchez@apple.com>; ok theo
5432
f72fc97f 543320001207
6b523bae 5434 - (bal) OpenBSD CVS updates:
61e96248 5435 - markus@cvs.openbsd.org 2000/12/06 22:58:14
f72fc97f 5436 [compat.c compat.h packet.c]
5437 disable debug messages for ssh.com/f-secure 2.0.1x, 2.1.0
dfe89252 5438 - markus@cvs.openbsd.org 2000/12/06 23:10:39
5439 [rijndael.c]
5440 unexpand(1)
61e96248 5441 - markus@cvs.openbsd.org 2000/12/06 23:05:43
dfe89252 5442 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
5443 new rijndael implementation. fixes endian bugs
f72fc97f 5444
97fb6912 544520001206
6b523bae 5446 - (bal) OpenBSD CVS updates:
97fb6912 5447 - markus@cvs.openbsd.org 2000/12/05 20:34:09
5448 [channels.c channels.h clientloop.c serverloop.c]
5449 async connects for -R/-L; ok deraadt@
5450 - todd@cvs.openssh.org 2000/12/05 16:47:28
5451 [sshd.c]
5452 tweak comment to reflect real location of pid file; ok provos@
bf5f69f7 5453 - (stevesk) Import <sys/queue.h> from OpenBSD for systems that don't
5454 have it (used in ssh-keyscan).
227e8e86 5455 - (stevesk) OpenBSD CVS update:
f20255cb 5456 - markus@cvs.openbsd.org 2000/12/06 19:57:48
5457 [ssh-keyscan.c]
5458 err(3) -> internal error(), from stevesk@sweden.hp.com
97fb6912 5459
f6fdbddf 546020001205
6b523bae 5461 - (bal) OpenBSD CVS updates:
f6fdbddf 5462 - markus@cvs.openbsd.org 2000/12/04 19:24:02
5463 [ssh-keyscan.c ssh-keyscan.1]
5464 David Maziere's ssh-keyscan, ok niels@
5465 - (bal) Updated Makefile.in to include ssh-keyscan that was just added
5466 to the recent OpenBSD source tree.
835d2104 5467 - (stevesk) fix typos in contrib/hpux/README
f6fdbddf 5468
cbc5abf9 546920001204
5470 - (bal) More C functions defined in NeXT that are unaccessable without
61e96248 5471 defining -POSIX.
5472 - (bal) OpenBSD CVS updates:
5473 - markus@cvs.openbsd.org 2000/12/03 11:29:04
cbc5abf9 5474 [compat.c]
5475 remove fallback to SSH_BUG_HMAC now that the drafts are updated
5476 - markus@cvs.openbsd.org 2000/12/03 11:27:55
5477 [compat.c]
61e96248 5478 correctly match "2.1.0.pl2 SSH" etc; from
97fb6912 5479 pekkas@netcore.fi/bugzilla.redhat
cbc5abf9 5480 - markus@cvs.openbsd.org 2000/12/03 11:15:03
5481 [auth2.c compat.c compat.h sshconnect2.c]
5482 support f-secure/ssh.com 2.0.12; ok niels@
5483
0b6fbf03 548420001203
cbc5abf9 5485 - (bal) OpenBSD CVS updates:
0b6fbf03 5486 - markus@cvs.openbsd.org 2000/11/30 22:54:31
5487 [channels.c]
61e96248 5488 debug->warn if tried to do -R style fwd w/o client requesting this;
0b6fbf03 5489 ok neils@
5490 - markus@cvs.openbsd.org 2000/11/29 20:39:17
5491 [cipher.c]
5492 des_cbc_encrypt -> des_ncbc_encrypt since it already updates the IV
5493 - markus@cvs.openbsd.org 2000/11/30 18:33:05
5494 [ssh-agent.c]
5495 agents must not dump core, ok niels@
61e96248 5496 - markus@cvs.openbsd.org 2000/11/30 07:04:02
0b6fbf03 5497 [ssh.1]
5498 T is for both protocols
5499 - markus@cvs.openbsd.org 2000/12/01 00:00:51
5500 [ssh.1]
5501 typo; from green@FreeBSD.org
5502 - markus@cvs.openbsd.org 2000/11/30 07:02:35
5503 [ssh.c]
5504 check -T before isatty()
5505 - provos@cvs.openbsd.org 2000/11/29 13:51:27
5506 [sshconnect.c]
61e96248 5507 show IP address and hostname when new key is encountered. okay markus@
0b6fbf03 5508 - markus@cvs.openbsd.org 2000/11/30 22:53:35
5509 [sshconnect.c]
5510 disable agent/x11/port fwding if hostkey has changed; ok niels@
5511 - marksu@cvs.openbsd.org 2000/11/29 21:11:59
5512 [sshd.c]
5513 sshd -D, startup w/o deamon(), for monitoring scripts or inittab;
5514 from handler@sub-rosa.com and eric@urbanrange.com; ok niels@
8c9fe09e 5515 - (djm) Added patch from Nalin Dahyabhai <nalin@redhat.com> to enable
5516 PAM authentication using KbdInteractive.
5517 - (djm) Added another TODO
0b6fbf03 5518
90f4078a 551920001202
5520 - (bal) Backed out of part of Alain St-Denis' loginrec.c patch.
61e96248 5521 - (bal) Irix need some sort of mansubdir, patch by Michael Stone
90f4078a 5522 <mstone@cs.loyola.edu>
5523
dcef6523 552420001129
7062c40f 5525 - (djm) Back out all the serverloop.c hacks. sshd will now hang again
5526 if there are background children with open fds.
c193d002 5527 - (djm) bsd-rresvport.c bzero -> memset
61e96248 5528 - (djm) Don't fail in defines.h on absence of 64 bit types (we will
c193d002 5529 still fail during compilation of sftp-server).
5530 - (djm) Fail if ar is not found during configure
c523303b 5531 - (djm) OpenBSD CVS updates:
5532 - provos@cvs.openbsd.org 2000/11/22 08:38:31
5533 [sshd.8]
5534 talk about /etc/primes, okay markus@
5535 - markus@cvs.openbsd.org 2000/11/23 14:03:48
5536 [ssh.c sshconnect1.c sshconnect2.c]
5537 complain about invalid ciphers for ssh1/ssh2, fall back to reasonable
5538 defaults
5539 - markus@cvs.openbsd.org 2000/11/25 09:42:53
5540 [sshconnect1.c]
5541 reorder check for illegal ciphers, bugreport from espie@
5542 - markus@cvs.openbsd.org 2000/11/25 10:19:34
5543 [ssh-keygen.c ssh.h]
5544 print keytype when generating a key.
5545 reasonable defaults for RSA1/RSA/DSA keys.
b3ec54b4 5546 - (djm) Patch from Pekka Savola <Pekka.Savola@netcore.fi> to include a few
5547 more manpage paths in fixpaths calls
5548 - (djm) Also add xauth path at Pekka's suggestion.
57ce3f00 5549 - (djm) Add Redhat RPM patch for AUTHPRIV SyslogFacility
dcef6523 5550
e879a080 555120001125
5552 - (djm) Give up privs when reading seed file
5553
d343d900 555420001123
5555 - (bal) Merge OpenBSD changes:
5556 - markus@cvs.openbsd.org 2000/11/15 22:31:36
5557 [auth-options.c]
61e96248 5558 case insensitive key options; from stevesk@sweeden.hp.com
d343d900 5559 - markus@cvs.openbsd.org 2000/11/16 17:55:43
5560 [dh.c]
5561 do not use perror() in sshd, after child is forked()
5562 - markus@cvs.openbsd.org 2000/11/14 23:42:40
5563 [auth-rsa.c]
5564 parse option only if key matches; fix some confusing seen by the client
5565 - markus@cvs.openbsd.org 2000/11/14 23:44:19
5566 [session.c]
5567 check no_agent_forward_flag for ssh-2, too
5568 - markus@cvs.openbsd.org 2000/11/15
5569 [ssh-agent.1]
5570 reorder SYNOPSIS; typo, use .It
5571 - markus@cvs.openbsd.org 2000/11/14 23:48:55
5572 [ssh-agent.c]
5573 do not reorder keys if a key is removed
5574 - markus@cvs.openbsd.org 2000/11/15 19:58:08
5575 [ssh.c]
61e96248 5576 just ignore non existing user keys
d343d900 5577 - millert@cvs.openbsd.org 200/11/15 20:24:43
5578 [ssh-keygen.c]
5579 Add missing \n at end of error message.
5580
0b49a754 558120001122
5582 - (bal) Minor patch to ensure platforms lacking IRIX job limit supports
5583 are compilable.
5584 - (bal) Updated TODO as of 11/18/2000 with known things to resolve.
5585
fab2e5d3 558620001117
5587 - (bal) Changed from 'primes' to 'primes.out' for consistancy sake. It
5588 has no affect the output. Patch by Corinna Vinschen <vinschen@redhat.com>
61e96248 5589 - (stevesk) Reworked progname support.
260d427b 5590 - (bal) Misplaced #include "includes.h" in bsd-setproctitle.c. Patch by
5591 Shinichi Maruyama <marya@st.jip.co.jp>
fab2e5d3 5592
c2207f11 559320001116
5594 - (bal) Added in MAXSYMLINK test in bsd-realpath.c. Required for some SCO
5595 releases.
5596 - (bal) Make builds work outside of source tree. Patch by Mark D. Roth
5597 <roth@feep.net>
5598
3d398e04 559920001113
61e96248 5600 - (djm) Add pointer to http://www.imasy.or.jp/~gotoh/connect.c to
3d398e04 5601 contrib/README
fa08c86b 5602 - (djm) Merge OpenBSD changes:
5603 - markus@cvs.openbsd.org 2000/11/06 16:04:56
5604 [channels.c channels.h clientloop.c nchan.c serverloop.c]
5605 [session.c ssh.c]
5606 agent forwarding and -R for ssh2, based on work from
5607 jhuuskon@messi.uku.fi
5608 - markus@cvs.openbsd.org 2000/11/06 16:13:27
5609 [ssh.c sshconnect.c sshd.c]
5610 do not disabled rhosts(rsa) if server port > 1024; from
5611 pekkas@netcore.fi
5612 - markus@cvs.openbsd.org 2000/11/06 16:16:35
5613 [sshconnect.c]
5614 downgrade client to 1.3 if server is 1.4; help from mdb@juniper.net
5615 - markus@cvs.openbsd.org 2000/11/09 18:04:40
5616 [auth1.c]
5617 typo; from mouring@pconline.com
5618 - markus@cvs.openbsd.org 2000/11/12 12:03:28
5619 [ssh-agent.c]
5620 off-by-one when removing a key from the agent
5621 - markus@cvs.openbsd.org 2000/11/12 12:50:39
5622 [auth-rh-rsa.c auth2.c authfd.c authfd.h]
5623 [authfile.c hostfile.c kex.c kex.h key.c key.h myproposal.h]
5624 [readconf.c readconf.h rsa.c rsa.h servconf.c servconf.h ssh-add.c]
5625 [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config]
5626 [sshconnect1.c sshconnect2.c sshd.8 sshd.c sshd_config ssh-dss.c]
61e96248 5627 [ssh-dss.h ssh-rsa.c ssh-rsa.h dsa.c dsa.h]
fa08c86b 5628 add support for RSA to SSH2. please test.
5629 there are now 3 types of keys: RSA1 is used by ssh-1 only,
5630 RSA and DSA are used by SSH2.
5631 you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
5632 keys for SSH2 and use the RSA keys for hostkeys or for user keys.
5633 SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.
5634 - (djm) Fix up Makefile and Redhat init script to create RSA host keys
f001465f 5635 - (djm) Change to interim version
5733a41a 5636 - (djm) Fix RPM spec file stupidity
6fff1ac4 5637 - (djm) fixpaths to DSA and RSA keys too
3d398e04 5638
d287c664 563920001112
5640 - (bal) SCO Patch to add needed libraries for configure.in. Patch by
5641 Phillips Porch <root@theporch.com>
3d398e04 5642 - (bal) IRIX patch to adding Job Limits. Patch by Denis Parker
5643 <dcp@sgi.com>
a3bf38d0 5644 - (stevesk) pty.c: HP-UX 10 and 11 don't define TIOCSCTTY. Add error() to
5645 failed ioctl(TIOCSCTTY) call.
d287c664 5646
3c4d4fef 564720001111
5648 - (djm) Added /etc/primes for kex DH group neg, fixup Makefile.in and
5649 packaging files
35325fd4 5650 - (djm) Fix new Makefile.in warnings
61e96248 5651 - (djm) Fix vsprintf("%h") in bsd-snprintf.c, short int va_args are
5652 promoted to type int. Report and fix from Dan Astoorian
027bf205 5653 <djast@cs.toronto.edu>
61e96248 5654 - (djm) Hardwire sysconfdir in RPM spec files as some RPM versions get
e3291159 5655 it wrong. Report from Bennett Todd <bet@rahul.net>
3c4d4fef 5656
3e366738 565720001110
5658 - (bal) Fixed dropped answer from skey_keyinfo() in auth1.c
5659 - (bal) Changed from --with-skey to --with-skey=PATH in configure.in
5660 - (bal) Added in check to verify S/Key library is being detected in
5661 configure.in
61e96248 5662 - (bal) next-posix.h - added another prototype wrapped in POSIX ifdef/endif.
3e366738 5663 Patch by Mark Miller <markm@swoon.net>
5664 - (bal) Added 'util.h' header to loginrec.c only if HAVE_UTIL_H is defined
61e96248 5665 to remove warnings under MacOS X. Patch by Mark Miller <markm@swoon.net>
3e366738 5666 - (bal) Fixed LDFLAG mispelling in configure.in for --with-afs
5667
373998a4 566820001107
e506ee73 5669 - (bal) acconfig.in - removed the double "USE_PIPES" entry. Patch by
5670 Mark Miller <markm@swoon.net>
373998a4 5671 - (bal) sshd.init files corrected to assign $? to RETVAL. Patch by
5672 Jarno Huuskonen <jhuuskon@messi.uku.fi>
e506ee73 5673 - (bal) fixpaths fixed to stop it from quitely failing. Patch by
5674 Mark D. Roth <roth@feep.net>
373998a4 5675
ac89998a 567620001106
5677 - (djm) Use Jim's new 1.0.3 askpass in Redhat RPMs
6c09e23c 5678 - (djm) Manually fix up missed diff hunks (mainly RCS idents)
61e96248 5679 - (djm) Remove UPGRADING document in favour of a link to the better
d6846e6a 5680 maintained FAQ on www.openssh.com
73bd30fe 5681 - (djm) Fix multiple dependancy on gnome-libs from Pekka Savola
5682 <pekkas@netcore.fi>
5683 - (djm) Don't need X11-askpass in RPM spec file if building without it
5684 from Pekka Savola <pekkas@netcore.fi>
c215ba3b 5685 - (djm) Release 2.3.0p1
97b378bf 5686 - (bal) typo in configure.in in regards to --with-ldflags from Marko
5687 Asplund <aspa@kronodoc.fi>
5688 - (bal) fixed next-posix.h. Forgot prototype of getppid().
68f189a9 5689
b850ecd9 569020001105
5691 - (bal) Sync with OpenBSD:
5692 - markus@cvs.openbsd.org 2000/10/31 9:31:58
5693 [compat.c]
5694 handle all old openssh versions
5695 - markus@cvs.openbsd.org 2000/10/31 13:1853
5696 [deattack.c]
5697 so that large packets do not wrap "n"; from netbsd
5698 - (bal) rijndel.c - fix up RCSID to match OpenBSD tree
a30ce26d 5699 - (bal) auth2-skey.c - Checked in. Missing from portable tree.
5700 - (bal) Reworked NEWS-OS and NeXT ports to extract waitpid() and
5701 setsid() into more common files
96054e6f 5702 - (stevesk) pty.c: use __hpux to identify HP-UX.
d0127657 5703 - (bal) Missed auth-skey.o in Makefile.in and minor correction to
5704 bsd-waitpid.c
b850ecd9 5705
75b90ced 570620001029
5707 - (stevesk) Fix typo in auth.c: USE_PAM not PAM
95273555 5708 - (stevesk) Create contrib/cygwin/ directory; patch from
5709 Corinna Vinschen <vinschen@redhat.com>
e9e4a1c7 5710 - (bal) Resolved more $xno and $xyes issues in configure.in
fd5f0295 5711 - (bal) next-posix.h - spelling and forgot a prototype
75b90ced 5712
344f2b94 571320001028
61e96248 5714 - (djm) fix select hack in serverloop.c from Philippe WILLEM
344f2b94 5715 <Philippe.WILLEM@urssaf.fr>
240ae474 5716 - (djm) Fix mangled AIXAUTHENTICATE code
61e96248 5717 - (djm) authctxt->pw may be NULL. Fix from Markus Friedl
606ea390 5718 <markus.friedl@informatik.uni-erlangen.de>
a22aff1f 5719 - (djm) Sync with OpenBSD:
5720 - markus@cvs.openbsd.org 2000/10/16 15:46:32
5721 [ssh.1]
5722 fixes from pekkas@netcore.fi
5723 - markus@cvs.openbsd.org 2000/10/17 14:28:11
5724 [atomicio.c]
5725 return number of characters processed; ok deraadt@
5726 - markus@cvs.openbsd.org 2000/10/18 12:04:02
5727 [atomicio.c]
5728 undo
5729 - markus@cvs.openbsd.org 2000/10/18 12:23:02
5730 [scp.c]
5731 replace atomicio(read,...) with read(); ok deraadt@
5732 - markus@cvs.openbsd.org 2000/10/18 12:42:00
5733 [session.c]
5734 restore old record login behaviour
5735 - deraadt@cvs.openbsd.org 2000/10/19 10:41:13
5736 [auth-skey.c]
5737 fmt string problem in unused code
5738 - provos@cvs.openbsd.org 2000/10/19 10:45:16
5739 [sshconnect2.c]
5740 don't reference freed memory. okay deraadt@
5741 - markus@cvs.openbsd.org 2000/10/21 11:04:23
5742 [canohost.c]
5743 typo, eramore@era-t.ericsson.se; ok niels@
5744 - markus@cvs.openbsd.org 2000/10/23 13:31:55
5745 [cipher.c]
5746 non-alignment dependent swap_bytes(); from
5747 simonb@wasabisystems.com/netbsd
5748 - markus@cvs.openbsd.org 2000/10/26 12:38:28
5749 [compat.c]
5750 add older vandyke products
5751 - markus@cvs.openbsd.org 2000/10/27 01:32:19
5752 [channels.c channels.h clientloop.c serverloop.c session.c]
5753 [ssh.c util.c]
61e96248 5754 enable non-blocking IO on channels, and tty's (except for the
a22aff1f 5755 client ttys).
344f2b94 5756
ddc49b5c 575720001027
5758 - (djm) Increase REKEY_BYTES to 2^24 for arc4random
5759
48e7916f 576020001025
5761 - (djm) Added WARNING.RNG file and modified configure to ask users of the
5762 builtin entropy code to read it.
5763 - (djm) Prefer builtin regex to PCRE.
00937921 5764 - (bal) Added USE_PIPS defined to NeXT configure.in since scp hangs randomly.
5765 - (bal) Apply fixes to configure.in pointed out by Pavel Roskin
5766 <proski@gnu.org>
48e7916f 5767
8dcda1e3 576820001020
5769 - (djm) Don't define _REENTRANT for SNI/Reliant Unix
07bee9a7 5770 - (bal) Imported NEWS-OS waitpid() macros into NeXT. Since implementation
5771 is more correct then current version.
8dcda1e3 5772
f5af5cd5 577320001018
5774 - (stevesk) Add initial support for setproctitle(). Current
5775 support is for the HP-UX pstat(PSTAT_SETCMD, ...) method.
134fd7f6 5776 - (stevesk) Add egd startup scripts to contrib/hpux/
f5af5cd5 5777
2f31bdd6 577820001017
5779 - (djm) Add -lregex to cywin libs from Corinna Vinschen
5780 <vinschen@cygnus.com>
ba7a3f40 5781 - (djm) Don't rely on atomicio's retval to determine length of askpass
5782 supplied passphrase. Problem report from Lutz Jaenicke
5783 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
66d6c27e 5784 - (bal) Changed from GNU rx to PCRE on suggestion from djm.
61e96248 5785 - (bal) Integrated Sony NEWS-OS patches from NAKAJI Hirouyuki
66d6c27e 5786 <nakaji@tutrp.tut.ac.jp>
2f31bdd6 5787
33de75a3 578820001016
5789 - (djm) Sync with OpenBSD:
5790 - markus@cvs.openbsd.org 2000/10/14 04:01:15
5791 [cipher.c]
5792 debug3
5793 - markus@cvs.openbsd.org 2000/10/14 04:07:23
5794 [scp.c]
5795 remove spaces from arguments; from djm@mindrot.org
5796 - markus@cvs.openbsd.org 2000/10/14 06:09:46
5797 [ssh.1]
5798 Cipher is for SSH-1 only
5799 - markus@cvs.openbsd.org 2000/10/14 06:12:09
5800 [servconf.c servconf.h serverloop.c session.c sshd.8]
5801 AllowTcpForwarding; from naddy@
5802 - markus@cvs.openbsd.org 2000/10/14 06:16:56
5803 [auth2.c compat.c compat.h sshconnect2.c version.h]
61e96248 5804 OpenSSH_2.3; note that is is not complete, but the version number
33de75a3 5805 needs to be changed for interoperability reasons
5806 - markus@cvs.openbsd.org 2000/10/14 06:19:45
5807 [auth-rsa.c]
5808 do not send RSA challenge if key is not allowed by key-options; from
5809 eivind@ThinkSec.com
5810 - markus@cvs.openbsd.org 2000/10/15 08:14:01
5811 [rijndael.c session.c]
5812 typos; from stevesk@sweden.hp.com
5813 - markus@cvs.openbsd.org 2000/10/15 08:18:31
5814 [rijndael.c]
5815 typo
61e96248 5816 - (djm) Copy manpages back over from OpenBSD - too tedious to wade
30d8b039 5817 through diffs
61e96248 5818 - (djm) Added condrestart to Redhat init script. Patch from Pekka Savola
30d8b039 5819 <pekkas@netcore.fi>
aa0289fe 5820 - (djm) Update version in Redhat spec file
61e96248 5821 - (djm) Merge some of Nalin Dahyabhai <nalin@redhat.com> changes from the
aa0289fe 5822 Redhat 7.0 spec file
5b2d4b75 5823 - (djm) Make inability to read/write PRNG seedfile non-fatal
5824
33de75a3 5825
4d670c24 582620001015
5827 - (djm) Fix ssh2 hang on background processes at logout.
5828
71dfaf1c 582920001014
443172c4 5830 - (bal) Add support for realpath and getcwd for platforms with broken
5831 or missing realpath implementations for sftp-server.
5832 - (bal) Corrected mistake in INSTALL in regards to GNU rx library
61e96248 5833 - (bal) Add support for GNU rx library for those lacking regexp support
71dfaf1c 5834 - (djm) Don't accept PAM_PROMPT_ECHO_ON messages during initial auth
02323c45 5835 - (djm) Revert SSH2 serverloop hack, will find a better way.
4ee81249 5836 - (djm) Add workaround for Linux 2.4's gratuitious errno change. Patch
5837 from Martin Johansson <fatbob@acc.umu.se>
94ec8c6b 5838 - (djm) Big OpenBSD sync:
5839 - markus@cvs.openbsd.org 2000/09/30 10:27:44
5840 [log.c]
5841 allow loglevel debug
5842 - markus@cvs.openbsd.org 2000/10/03 11:59:57
5843 [packet.c]
5844 hmac->mac
5845 - markus@cvs.openbsd.org 2000/10/03 12:03:03
5846 [auth-krb4.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth1.c]
5847 move fake-auth from auth1.c to individual auth methods, disables s/key in
5848 debug-msg
5849 - markus@cvs.openbsd.org 2000/10/03 12:16:48
5850 ssh.c
5851 do not resolve canonname, i have no idea why this was added oin ossh
5852 - markus@cvs.openbsd.org 2000/10/09 15:30:44
5853 ssh-keygen.1 ssh-keygen.c
5854 -X now reads private ssh.com DSA keys, too.
5855 - markus@cvs.openbsd.org 2000/10/09 15:32:34
5856 auth-options.c
5857 clear options on every call.
5858 - markus@cvs.openbsd.org 2000/10/09 15:51:00
5859 authfd.c authfd.h
5860 interop with ssh-agent2, from <res@shore.net>
5861 - markus@cvs.openbsd.org 2000/10/10 14:20:45
5862 compat.c
5863 use rexexp for version string matching
5864 - provos@cvs.openbsd.org 2000/10/10 22:02:18
5865 [kex.c kex.h myproposal.h ssh.h ssh2.h sshconnect2.c sshd.c dh.c dh.h]
5866 First rough implementation of the diffie-hellman group exchange. The
5867 client can ask the server for bigger groups to perform the diffie-hellman
5868 in, thus increasing the attack complexity when using ciphers with longer
5869 keys. University of Windsor provided network, T the company.
5870 - markus@cvs.openbsd.org 2000/10/11 13:59:52
5871 [auth-rsa.c auth2.c]
5872 clear auth options unless auth sucessfull
5873 - markus@cvs.openbsd.org 2000/10/11 14:00:27
5874 [auth-options.h]
5875 clear auth options unless auth sucessfull
5876 - markus@cvs.openbsd.org 2000/10/11 14:03:27
5877 [scp.1 scp.c]
5878 support 'scp -o' with help from mouring@pconline.com
5879 - markus@cvs.openbsd.org 2000/10/11 14:11:35
5880 [dh.c]
5881 Wall
5882 - markus@cvs.openbsd.org 2000/10/11 14:14:40
5883 [auth.h auth2.c readconf.c readconf.h readpass.c servconf.c servconf.h]
5884 [ssh.h sshconnect2.c sshd_config auth2-skey.c cli.c cli.h]
5885 add support for s/key (kbd-interactive) to ssh2, based on work by
5886 mkiernan@avantgo.com and me
5887 - markus@cvs.openbsd.org 2000/10/11 14:27:24
5888 [auth.c auth1.c auth2.c authfile.c cipher.c cipher.h kex.c kex.h]
5889 [myproposal.h packet.c readconf.c session.c ssh.c ssh.h sshconnect1.c]
5890 [sshconnect2.c sshd.c]
5891 new cipher framework
5892 - markus@cvs.openbsd.org 2000/10/11 14:45:21
5893 [cipher.c]
5894 remove DES
5895 - markus@cvs.openbsd.org 2000/10/12 03:59:20
5896 [cipher.c cipher.h sshconnect1.c sshconnect2.c sshd.c]
5897 enable DES in SSH-1 clients only
5898 - markus@cvs.openbsd.org 2000/10/12 08:21:13
5899 [kex.h packet.c]
5900 remove unused
5901 - markus@cvs.openbsd.org 2000/10/13 12:34:46
5902 [sshd.c]
5903 Kludge for F-Secure Macintosh < 1.0.2; appro@fy.chalmers.se
5904 - markus@cvs.openbsd.org 2000/10/13 12:59:15
5905 [cipher.c cipher.h myproposal.h rijndael.c rijndael.h]
5906 rijndael/aes support
5907 - markus@cvs.openbsd.org 2000/10/13 13:10:54
5908 [sshd.8]
5909 more info about -V
5910 - markus@cvs.openbsd.org 2000/10/13 13:12:02
5911 [myproposal.h]
5912 prefer no compression
3ed32516 5913 - (djm) Fix scp user@host handling
5914 - (djm) Don't clobber ssh_prng_cmds on install
6bcf7caa 5915 - (stevesk) Include config.h in rijndael.c so we define intXX_t and
5916 u_intXX_t types on all platforms.
9ea53ba5 5917 - (stevesk) rijndael.c: cleanup missing declaration warnings.
2919e060 5918 - (stevesk) ~/.hushlogin shouldn't cause required password change to
5919 be bypassed.
f5665f6f 5920 - (stevesk) Display correct path to ssh-askpass in configure output.
5921 Report from Lutz Jaenicke.
71dfaf1c 5922
ebd782f7 592320001007
5924 - (stevesk) Print PAM return value in PAM log messages to aid
5925 with debugging.
97994d32 5926 - (stevesk) Fix detection of pw_class struct member in configure;
5927 patch from KAMAHARA Junzo <kamahara@cc.kshosen.ac.jp>
5928
47a134c1 592920001002
5930 - (djm) Fix USER_PATH, report from Kevin Steves <stevesk@sweden.hp.com>
5931 - (djm) Add host system and CC to end-of-configure report. Suggested by
5932 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
5933
7322ef0e 593420000931
5935 - (djm) Cygwin fixes from Corinna Vinschen <vinschen@cygnus.com>
5936
6ac7829a 593720000930
b6490dcb 5938 - (djm) Irix ssh_prng_cmds path fix from Pekka Savola <pekkas@netcore.fi>
61e96248 5939 - (djm) Support in bsd-snprintf.c for long long conversions from
772bd898 5940 Ben Lindstrom <mouring@pconline.com>
5941 - (djm) Cleanup NeXT support from Ben Lindstrom <mouring@pconline.com>
857040fb 5942 - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with
61e96248 5943 very short lived X connections. Bug report from Tobias Oetiker
857040fb 5944 <oetiker@ee.ethz.ch>. Fix from Markus Friedl <markus@cvs.openbsd.org>
bd2d7f6a 5945 - (djm) Add recent InitScripts as a RPM dependancy for openssh-server
5946 patch from Pekka Savola <pekkas@netcore.fi>
58665035 5947 - (djm) Forgot to cvs add LICENSE file
dc2901a0 5948 - (djm) Add LICENSE to RPM spec files
de273eef 5949 - (djm) CVS OpenBSD sync:
5950 - markus@cvs.openbsd.org 2000/09/26 13:59:59
5951 [clientloop.c]
5952 use debug2
5953 - markus@cvs.openbsd.org 2000/09/27 15:41:34
5954 [auth2.c sshconnect2.c]
5955 use key_type()
5956 - markus@cvs.openbsd.org 2000/09/28 12:03:18
5957 [channels.c]
5958 debug -> debug2 cleanup
61e96248 5959 - (djm) Irix strips "/dev/tty" from [uw]tmp entries (other systems only
2a7d529a 5960 strip "/dev/"). Fix loginrec.c based on patch from Alain St-Denis
5961 <Alain.St-Denis@ec.gc.ca>
61e96248 5962 - (djm) Fix 9 character passphrase failure with gnome-ssh-askpass.
5963 Problem was caused by interrupted read in ssh-add. Report from Donald
2a7d529a 5964 J. Barry <don@astro.cornell.edu>
6ac7829a 5965
c5d85828 596620000929
5967 - (djm) Fix SSH2 not terminating until all background tasks done problem.
61e96248 5968 - (djm) Another off-by-one fix from Pavel Kankovsky
5969 <peak@argo.troja.mff.cuni.cz>
22d89d24 5970 - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code,
5971 tidy necessary differences. Use Markus' new debugN() in entropy.c
61e96248 5972 - (djm) Merged big SCO portability patch from Tim Rice
77bb0bca 5973 <tim@multitalents.net>
c5d85828 5974
6fd7f731 597520000926
5976 - (djm) Update X11-askpass to 1.0.2 in RPM spec file
c5ae7384 5977 - (djm) Define _REENTRANT to pickup strtok_r() on HP/UX
61e96248 5978 - (djm) Security: fix off-by-one buffer overrun in fake-getnameinfo.c.
5979 Report and fix from Pavel Kankovsky <peak@argo.troja.mff.cuni.cz>
6fd7f731 5980
2f125ca1 598120000924
5982 - (djm) Merged cleanup patch from Mark Miller <markm@swoon.net>
5983 - (djm) A bit more cleanup - created cygwin_util.h
bcdaaeab 5984 - (djm) Include strtok_r() from OpenBSD libc. Fixes report from Mark Miller
5985 <markm@swoon.net>
2f125ca1 5986
764d4113 598720000923
61e96248 5988 - (djm) Fix address logging in utmp from Kevin Steves
764d4113 5989 <stevesk@sweden.hp.com>
777319db 5990 - (djm) Redhat spec and manpage fixes from Pekka Savola <pekkas@netcore.fi>
bd590612 5991 - (djm) Seperate tests for int64_t and u_int64_t types
61e96248 5992 - (djm) Tweak password expiry checking at suggestion of Kevin Steves
37c1c46d 5993 <stevesk@sweden.hp.com>
e79b44e1 5994 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
61e96248 5995 - (djm) Use printf %lld instead of %qd in sftp-server.c. Fix from
e2144f11 5996 Michael Stone <mstone@cs.loyola.edu>
188adeb2 5997 - (djm) OpenBSD CVS sync:
5998 - markus@cvs.openbsd.org 2000/09/17 09:38:59
5999 [sshconnect2.c sshd.c]
6000 fix DEBUG_KEXDH
6001 - markus@cvs.openbsd.org 2000/09/17 09:52:51
6002 [sshconnect.c]
6003 yes no; ok niels@
6004 - markus@cvs.openbsd.org 2000/09/21 04:55:11
6005 [sshd.8]
6006 typo
6007 - markus@cvs.openbsd.org 2000/09/21 05:03:54
6008 [serverloop.c]
6009 typo
6010 - markus@cvs.openbsd.org 2000/09/21 05:11:42
6011 scp.c
6012 utime() to utimes(); mouring@pconline.com
6013 - markus@cvs.openbsd.org 2000/09/21 05:25:08
6014 sshconnect2.c
6015 change login logic in ssh2, allows plugin of other auth methods
6016 - markus@cvs.openbsd.org 2000/09/21 05:25:35
6017 [auth2.c channels.c channels.h clientloop.c dispatch.c dispatch.h]
6018 [serverloop.c]
6019 add context to dispatch_run
6020 - markus@cvs.openbsd.org 2000/09/21 05:07:52
6021 authfd.c authfd.h ssh-agent.c
6022 bug compat for old ssh.com software
764d4113 6023
7f377177 602420000920
6025 - (djm) Fix bad path substitution. Report from Andrew Miner
6026 <asminer@cs.iastate.edu>
6027
bcbf86ec 602820000916
61e96248 6029 - (djm) Fix SSL search order from Lutz Jaenicke
7950bf97 6030 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
19ece6d2 6031 - (djm) New SuSE spec from Corinna Vinschen <corinna@vinschen.de>
9cd45ea4 6032 - (djm) Update CygWin support from Corinna Vinschen <vinschen@cygnus.com>
995edaac 6033 - (djm) Use a real struct sockaddr inside the fake struct sockaddr_storage.
6034 Patch from Larry Jones <larry.jones@sdrc.com>
61e96248 6035 - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM
ad55cd03 6036 password change patch.
6037 - (djm) Bring licenses on my stuff in line with OpenBSD's
0bbfbdeb 6038 - (djm) Cleanup auth-passwd.c and unify HP/UX authentication. Patch from
6039 Kevin Steves <stevesk@sweden.hp.com>
7f8f5e00 6040 - (djm) Shadow expiry check fix from Pavel Troller <patrol@omni.sinus.cz>
6041 - (djm) Re-enable int64_t types - we need them for sftp
6042 - (djm) Use libexecdir from configure , rather than libexecdir/ssh
6043 - (djm) Update Redhat SPEC file accordingly
6044 - (djm) Add Kevin Steves <stevesk@sweden.hp.com> HP/UX contrib files
6045 - (djm) Add Charles Levert <charles@comm.polymtl.ca> getpgrp patch
61e96248 6046 - (djm) Fix password auth on HP/UX 10.20. Patch from Dirk De Wachter
7f8f5e00 6047 <Dirk.DeWachter@rug.ac.be>
61e96248 6048 - (djm) Fixprogs and entropy list fixes from Larry Jones
7f8f5e00 6049 <larry.jones@sdrc.com>
6050 - (djm) Fix for SuSE spec file from Takashi YOSHIDA
6051 <tyoshida@gemini.rc.kyushu-u.ac.jp>
bcbf86ec 6052 - (djm) Merge OpenBSD changes:
6053 - markus@cvs.openbsd.org 2000/09/05 02:59:57
6054 [session.c]
6055 print hostname (not hushlogin)
6056 - markus@cvs.openbsd.org 2000/09/05 13:18:48
6057 [authfile.c ssh-add.c]
6058 enable ssh-add -d for DSA keys
6059 - markus@cvs.openbsd.org 2000/09/05 13:20:49
6060 [sftp-server.c]
6061 cleanup
6062 - markus@cvs.openbsd.org 2000/09/06 03:46:41
6063 [authfile.h]
6064 prototype
6065 - deraadt@cvs.openbsd.org 2000/09/07 14:27:56
6066 [ALL]
61e96248 6067 cleanup copyright notices on all files. I have attempted to be
6068 accurate with the details. everything is now under Tatu's licence
6069 (which I copied from his readme), and/or the core-sdi bsd-ish thing
6070 for deattack, or various openbsd developers under a 2-term bsd
bcbf86ec 6071 licence. We're not changing any rules, just being accurate.
6072 - markus@cvs.openbsd.org 2000/09/07 14:40:30
6073 [channels.c channels.h clientloop.c serverloop.c ssh.c]
6074 cleanup window and packet sizes for ssh2 flow control; ok niels
6075 - markus@cvs.openbsd.org 2000/09/07 14:53:00
6076 [scp.c]
6077 typo
6078 - markus@cvs.openbsd.org 2000/09/07 15:13:37
6079 [auth-options.c auth-options.h auth-rh-rsa.c auth-rsa.c auth.c]
6080 [authfile.h canohost.c channels.h compat.c hostfile.h log.c match.h]
6081 [pty.c readconf.c]
6082 some more Copyright fixes
6083 - markus@cvs.openbsd.org 2000/09/08 03:02:51
6084 [README.openssh2]
6085 bye bye
6086 - deraadt@cvs.openbsd.org 2000/09/11 18:38:33
6087 [LICENCE cipher.c]
6088 a few more comments about it being ARC4 not RC4
6089 - markus@cvs.openbsd.org 2000/09/12 14:53:11
6090 [log-client.c log-server.c log.c ssh.1 ssh.c ssh.h sshd.8 sshd.c]
6091 multiple debug levels
6092 - markus@cvs.openbsd.org 2000/09/14 14:25:15
6093 [clientloop.c]
6094 typo
6095 - deraadt@cvs.openbsd.org 2000/09/15 01:13:51
6096 [ssh-agent.c]
6097 check return value for setenv(3) for failure, and deal appropriately
6098
deb8d717 609920000913
6100 - (djm) Fix server not exiting with jobs in background.
6101
b5e300c2 610220000905
6103 - (djm) Import OpenBSD CVS changes
6104 - markus@cvs.openbsd.org 2000/08/31 15:52:24
6105 [Makefile sshd.8 sshd_config sftp-server.8 sftp-server.c]
6106 implement a SFTP server. interops with sftp2, scp2 and the windows
6107 client from ssh.com
6108 - markus@cvs.openbsd.org 2000/08/31 15:56:03
6109 [README.openssh2]
6110 sync
6111 - markus@cvs.openbsd.org 2000/08/31 16:05:42
6112 [session.c]
6113 Wall
6114 - markus@cvs.openbsd.org 2000/08/31 16:09:34
6115 [authfd.c ssh-agent.c]
6116 add a flag to SSH2_AGENTC_SIGN_REQUEST for future extensions
6117 - deraadt@cvs.openbsd.org 2000/09/01 09:25:13
6118 [scp.1 scp.c]
6119 cleanup and fix -S support; stevesk@sweden.hp.com
6120 - markus@cvs.openbsd.org 2000/09/01 16:29:32
6121 [sftp-server.c]
6122 portability fixes
6123 - markus@cvs.openbsd.org 2000/09/01 16:32:41
6124 [sftp-server.c]
6125 fix cast; mouring@pconline.com
6126 - itojun@cvs.openbsd.org 2000/09/03 09:23:28
6127 [ssh-add.1 ssh.1]
6128 add missing .El against .Bl.
6129 - markus@cvs.openbsd.org 2000/09/04 13:03:41
6130 [session.c]
6131 missing close; ok theo
6132 - markus@cvs.openbsd.org 2000/09/04 13:07:21
6133 [session.c]
6134 fix get_last_login_time order; from andre@van-veen.de
6135 - markus@cvs.openbsd.org 2000/09/04 13:10:09
6136 [sftp-server.c]
6137 more cast fixes; from mouring@pconline.com
6138 - markus@cvs.openbsd.org 2000/09/04 13:06:04
6139 [session.c]
6140 set SSH_ORIGINAL_COMMAND; from Leakin@dfw.nostrum.com, bet@rahul.net
6141 - (djm) Cleanup after import. Fix sftp-server compilation, Makefile
3c62e7eb 6142 - (djm) Merge cygwin support from Corinna Vinschen <vinschen@cygnus.com>
6143
1e61f54a 614420000903
6145 - (djm) Fix Redhat init script
6146
c80876b4 614720000901
6148 - (djm) Pick up Jim's new X11-askpass
6149 - (djm) Release 2.2.0p1
6150
8b4a0d08 615120000831
bcbf86ec 6152 - (djm) Workaround SIGPIPE problems on SCO. Fix from Aran Cox
8b4a0d08 6153 <acox@cv.telegroup.com>
b817711d 6154 - (djm) Pick up new version (2.2.0) from OpenBSD CVS
8b4a0d08 6155
0b65b628 615620000830
6157 - (djm) Compile warning fixes from Mark Miller <markm@swoon.net>
10fa00c8 6158 - (djm) Periodically rekey arc4random
6159 - (djm) Clean up diff against OpenBSD.
bcbf86ec 6160 - (djm) HPUX 11 needs USE_PIPES as well: Kevin Steves
2b10f47a 6161 <stevesk@sweden.hp.com>
b33a2e6e 6162 - (djm) Quieten the pam delete credentials error message
44839801 6163 - (djm) Fix printing of $DISPLAY hack if set by system type. Report from
6164 Kevin Steves <stevesk@sweden.hp.com>
84a770d1 6165 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
7efa2776 6166 - (djm) Fix doh in bsd-arc4random.c
0b65b628 6167
9aaf9be4 616820000829
bcbf86ec 6169 - (djm) Fix ^C ignored issue on Solaris. Diagnosis from Gert
6170 Doering <gert@greenie.muc.de>, John Horne <J.Horne@plymouth.ac.uk> and
9aaf9be4 6171 Garrick James <garrick@james.net>
b5f90139 6172 - (djm) Check for SCO pty naming style (ptyp%d/ttyp%d). Based on fix from
6173 Bastian Trompetter <btrompetter@firemail.de>
698d107e 6174 - (djm) NeXT tweaks from Ben Lindstrom <mouring@pconline.com>
14a9a859 6175 - More OpenBSD updates:
6176 - deraadt@cvs.openbsd.org 2000/08/24 15:46:59
6177 [scp.c]
6178 off_t in sink, to fix files > 2GB, i think, test is still running ;-)
6179 - deraadt@cvs.openbsd.org 2000/08/25 10:10:06
6180 [session.c]
6181 Wall
6182 - markus@cvs.openbsd.org 2000/08/26 04:33:43
6183 [compat.c]
6184 ssh.com-2.3.0
6185 - markus@cvs.openbsd.org 2000/08/27 12:18:05
6186 [compat.c]
6187 compatibility with future ssh.com versions
6188 - deraadt@cvs.openbsd.org 2000/08/27 21:50:55
6189 [auth-krb4.c session.c ssh-add.c sshconnect.c uidswap.c]
6190 print uid/gid as unsigned
6191 - markus@cvs.openbsd.org 2000/08/28 13:51:00
6192 [ssh.c]
6193 enable -n and -f for ssh2
6194 - markus@cvs.openbsd.org 2000/08/28 14:19:53
6195 [ssh.c]
6196 allow combination of -N and -f
6197 - markus@cvs.openbsd.org 2000/08/28 14:20:56
6198 [util.c]
6199 util.c
6200 - markus@cvs.openbsd.org 2000/08/28 14:22:02
6201 [util.c]
6202 undo
6203 - markus@cvs.openbsd.org 2000/08/28 14:23:38
6204 [util.c]
6205 don't complain if setting NONBLOCK fails with ENODEV
9aaf9be4 6206
137d7b6c 620720000823
6208 - (djm) Define USE_PIPES to avoid socketpair problems on HPUX 10 and SunOS 4
bcbf86ec 6209 Avoids "scp never exits" problem. Reports from Lutz Jaenicke
6210 <Lutz.Jaenicke@aet.TU-Cottbus.DE> and Tamito KAJIYAMA
137d7b6c 6211 <kajiyama@grad.sccs.chukyo-u.ac.jp>
2e73a022 6212 - (djm) Pick up LOGIN_PROGRAM from environment or PATH if not set by headers
da40ab4d 6213 - (djm) Add local version to version.h
ea788c22 6214 - (djm) Don't reseed arc4random everytime it is used
2e73a022 6215 - (djm) OpenBSD CVS updates:
6216 - deraadt@cvs.openbsd.org 2000/08/18 20:07:23
6217 [ssh.c]
6218 accept remsh as a valid name as well; roman@buildpoint.com
6219 - deraadt@cvs.openbsd.org 2000/08/18 20:17:13
6220 [deattack.c crc32.c packet.c]
6221 rename crc32() to ssh_crc32() to avoid zlib name clash. do not move to
6222 libz crc32 function yet, because it has ugly "long"'s in it;
6223 oneill@cs.sfu.ca
6224 - deraadt@cvs.openbsd.org 2000/08/18 20:26:08
6225 [scp.1 scp.c]
6226 -S prog support; tv@debian.org
6227 - deraadt@cvs.openbsd.org 2000/08/18 20:50:07
6228 [scp.c]
6229 knf
6230 - deraadt@cvs.openbsd.org 2000/08/18 20:57:33
6231 [log-client.c]
6232 shorten
6233 - markus@cvs.openbsd.org 2000/08/19 12:48:11
6234 [channels.c channels.h clientloop.c ssh.c ssh.h]
6235 support for ~. in ssh2
6236 - deraadt@cvs.openbsd.org 2000/08/19 15:29:40
6237 [crc32.h]
6238 proper prototype
6239 - markus@cvs.openbsd.org 2000/08/19 15:34:44
bcbf86ec 6240 [authfd.c authfd.h key.c key.h ssh-add.1 ssh-add.c ssh-agent.1]
6241 [ssh-agent.c ssh-keygen.c sshconnect1.c sshconnect2.c Makefile]
2e73a022 6242 [fingerprint.c fingerprint.h]
6243 add SSH2/DSA support to the agent and some other DSA related cleanups.
6244 (note that we cannot talk to ssh.com's ssh2 agents)
6245 - markus@cvs.openbsd.org 2000/08/19 15:55:52
6246 [channels.c channels.h clientloop.c]
6247 more ~ support for ssh2
6248 - markus@cvs.openbsd.org 2000/08/19 16:21:19
6249 [clientloop.c]
6250 oops
6251 - millert@cvs.openbsd.org 2000/08/20 12:25:53
6252 [session.c]
6253 We have to stash the result of get_remote_name_or_ip() before we
6254 close our socket or getpeername() will get EBADF and the process
6255 will exit. Only a problem for "UseLogin yes".
6256 - millert@cvs.openbsd.org 2000/08/20 12:30:59
6257 [session.c]
6258 Only check /etc/nologin if "UseLogin no" since login(1) may have its
6259 own policy on determining who is allowed to login when /etc/nologin
6260 is present. Also use the _PATH_NOLOGIN define.
6261 - millert@cvs.openbsd.org 2000/08/20 12:42:43
6262 [auth1.c auth2.c session.c ssh.c]
6263 Add calls to setusercontext() and login_get*(). We basically call
6264 setusercontext() in most places where previously we did a setlogin().
6265 Add default login.conf file and put root in the "daemon" login class.
6266 - millert@cvs.openbsd.org 2000/08/21 10:23:31
6267 [session.c]
6268 Fix incorrect PATH setting; noted by Markus.
137d7b6c 6269
c345cf9d 627020000818
6271 - (djm) OpenBSD CVS changes:
6272 - markus@cvs.openbsd.org 2000/07/22 03:14:37
6273 [servconf.c servconf.h sshd.8 sshd.c sshd_config]
6274 random early drop; ok theo, niels
6275 - deraadt@cvs.openbsd.org 2000/07/26 11:46:51
6276 [ssh.1]
6277 typo
6278 - deraadt@cvs.openbsd.org 2000/08/01 11:46:11
6279 [sshd.8]
6280 many fixes from pepper@mail.reppep.com
6281 - provos@cvs.openbsd.org 2000/08/01 13:01:42
6282 [Makefile.in util.c aux.c]
6283 rename aux.c to util.c to help with cygwin port
6284 - deraadt@cvs.openbsd.org 2000/08/02 00:23:31
6285 [authfd.c]
6286 correct sun_len; Alexander@Leidinger.net
6287 - provos@cvs.openbsd.org 2000/08/02 10:27:17
6288 [readconf.c sshd.8]
6289 disable kerberos authentication by default
6290 - provos@cvs.openbsd.org 2000/08/02 11:27:05
6291 [sshd.8 readconf.c auth-krb4.c]
6292 disallow kerberos authentication if we can't verify the TGT; from
6293 dugsong@
6294 kerberos authentication is on by default only if you have a srvtab.
6295 - markus@cvs.openbsd.org 2000/08/04 14:30:07
6296 [auth.c]
6297 unused
6298 - markus@cvs.openbsd.org 2000/08/04 14:30:35
6299 [sshd_config]
6300 MaxStartups
6301 - markus@cvs.openbsd.org 2000/08/15 13:20:46
6302 [authfd.c]
6303 cleanup; ok niels@
6304 - markus@cvs.openbsd.org 2000/08/17 14:05:10
6305 [session.c]
6306 cleanup login(1)-like jobs, no duplicate utmp entries
6307 - markus@cvs.openbsd.org 2000/08/17 14:06:34
6308 [session.c sshd.8 sshd.c]
6309 sshd -u len, similar to telnetd
1a022229 6310 - (djm) Lastlog was not getting closed after writing login entry
39987cc0 6311 - (djm) Add Solaris package support from Rip Loomis <loomisg@cist.saic.com>
c345cf9d 6312
416ed5a7 631320000816
6314 - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc)
bcbf86ec 6315 - (djm) Fix strerror replacement for old SunOS. Based on patch from
416ed5a7 6316 Charles Levert <charles@comm.polymtl.ca>
bcbf86ec 6317 - (djm) Seperate arc4random into seperate file and use OpenSSL's RC4
416ed5a7 6318 implementation.
ba606eb2 6319 - (djm) SUN_LEN macro for systems which lack it
416ed5a7 6320
dbaa2e87 632120000815
6322 - (djm) More SunOS 4.1.x fixes from Nate Itkin <nitkin@europa.com>
cd352c82 6323 - (djm) Avoid failures on Irix when ssh is not setuid. Fix from
6324 Michael Stone <mstone@cs.loyola.edu>
d93a7e5a 6325 - (djm) Don't seek in directory based lastlogs
bcbf86ec 6326 - (djm) Fix --with-ipaddr-display configure option test. Patch from
d93a7e5a 6327 Jarno Huuskonen <jhuuskon@messi.uku.fi>
2a2cb9e7 6328 - (djm) Fix AIX limits from Alexandre Oliva <oliva@lsd.ic.unicamp.br>
dbaa2e87 6329
6c33bf70 633020000813
6331 - (djm) Add $(srcdir) to includes when compiling (for VPATH). Report from
6332 Fabrice bacchella <fabrice.bacchella@marchfirst.fr>
6333
3fcce26c 633420000809
bcbf86ec 6335 - (djm) Define AIX hard limits if headers don't. Report from
3fcce26c 6336 Bill Painter <william.t.painter@lmco.com>
bcbf86ec 6337 - (djm) utmp direct write & SunOS 4 patch from Charles Levert
32eec038 6338 <charles@comm.polymtl.ca>
3fcce26c 6339
71d43804 634020000808
6341 - (djm) Cleanup Redhat RPMs. Generate keys at runtime rather than install
6342 time, spec file cleanup.
6343
f9bcea07 634420000807
378f2232 6345 - (djm) Set 0755 on binaries during install. Report from Lutz Jaenicke
47670e77 6346 - (djm) Suppress error messages on channel close shutdown() failurs
6347 works around Linux bug. Patch from Zack Weinberg <zack@wolery.cumb.org>
378f2232 6348 - (djm) Add some more entropy collection commands from Lutz Jaenicke
f9bcea07 6349
bcf89935 635020000725
6351 - (djm) Fix autoconf typo: HAVE_BINRESVPORT_AF -> HAVE_BINDRESVPORT_AF
6352
4c8722d9 635320000721
6354 - (djm) OpenBSD CVS updates:
6355 - markus@cvs.openbsd.org 2000/07/16 02:27:22
6356 [authfd.c authfd.h channels.c clientloop.c ssh-add.c ssh-agent.c ssh.c]
6357 [sshconnect1.c sshconnect2.c]
6358 make ssh-add accept dsa keys (the agent does not)
6359 - djm@cvs.openbsd.org 2000/07/17 19:25:02
6360 [sshd.c]
6361 Another closing of stdin; ok deraadt
6362 - markus@cvs.openbsd.org 2000/07/19 18:33:12
6363 [dsa.c]
6364 missing free, reorder
6365 - markus@cvs.openbsd.org 2000/07/20 16:23:14
6366 [ssh-keygen.1]
6367 document input and output files
6368
240777b8 636920000720
4c8722d9 6370 - (djm) Spec file fix from Petr Novotny <Petr.Novotny@antek.cz>
240777b8 6371
3c7def32 637220000716
4c8722d9 6373 - (djm) Release 2.1.1p4
3c7def32 6374
819b676f 637520000715
704b1659 6376 - (djm) OpenBSD CVS updates
6377 - provos@cvs.openbsd.org 2000/07/13 16:53:22
6378 [aux.c readconf.c servconf.c ssh.h]
6379 allow multiple whitespace but only one '=' between tokens, bug report from
6380 Ralf S. Engelschall <rse@engelschall.com> but different fix. okay deraadt@
6381 - provos@cvs.openbsd.org 2000/07/13 17:14:09
6382 [clientloop.c]
6383 typo; todd@fries.net
6384 - provos@cvs.openbsd.org 2000/07/13 17:19:31
6385 [scp.c]
6386 close can fail on AFS, report error; from Greg Hudson <ghudson@mit.edu>
6387 - markus@cvs.openbsd.org 2000/07/14 16:59:46
6388 [readconf.c servconf.c]
6389 allow leading whitespace. ok niels
6390 - djm@cvs.openbsd.org 2000/07/14 22:01:38
6391 [ssh-keygen.c ssh.c]
6392 Always create ~/.ssh with mode 700; ok Markus
819b676f 6393 - Fixes for SunOS 4.1.4 from Gordon Atwood <gordon@cs.ualberta.ca>
6394 - Include floatingpoint.h for entropy.c
6395 - strerror replacement
704b1659 6396
3f7a7e4a 639720000712
c37fb3c1 6398 - (djm) Remove -lresolve for Reliant Unix
3f7a7e4a 6399 - (djm) OpenBSD CVS Updates:
6400 - deraadt@cvs.openbsd.org 2000/07/11 02:11:34
6401 [session.c sshd.c ]
6402 make MaxStartups code still work with -d; djm
6403 - deraadt@cvs.openbsd.org 2000/07/11 13:17:45
6404 [readconf.c ssh_config]
6405 disable FallBackToRsh by default
c37fb3c1 6406 - (djm) Replace in_addr_t with u_int32_t in bsd-inet_aton.c. Report from
6407 Ben Lindstrom <mouring@pconline.com>
1e970014 6408 - (djm) Make building of X11-Askpass and GNOME-Askpass optional in RPM
6409 spec file.
dcb36e5d 6410 - (djm) Released 2.1.1p3
3f7a7e4a 6411
56118702 641220000711
6413 - (djm) Fixup for AIX getuserattr() support from Tom Bertelson
6414 <tbert@abac.com>
132dd316 6415 - (djm) ReliantUNIX support from Udo Schweigert <ust@cert.siemens.de>
bcbf86ec 6416 - (djm) NeXT: dirent structures to get scp working from Ben Lindstrom
c99e5056 6417 <mouring@pconline.com>
bcbf86ec 6418 - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report
dc2a6d09 6419 from Jim Watt <jimw@peisj.pebio.com>
2d9a148e 6420 - (djm) Replaced bsd-snprintf.c with one from Mutt source tree, it is known
6421 to compile on more platforms (incl NeXT).
cc6f2c4c 6422 - (djm) Added bsd-inet_aton and configure support for NeXT
aae19451 6423 - (djm) Misc NeXT fixes from Ben Lindstrom <mouring@pconline.com>
089fbbd2 6424 - (djm) OpenBSD CVS updates:
6425 - markus@cvs.openbsd.org 2000/06/26 03:22:29
6426 [authfd.c]
6427 cleanup, less cut&paste
6428 - markus@cvs.openbsd.org 2000/06/26 15:59:19
6429 [servconf.c servconf.h session.c sshd.8 sshd.c]
bcbf86ec 6430 MaxStartups: limit number of unauthenticated connections, work by
089fbbd2 6431 theo and me
6432 - deraadt@cvs.openbsd.org 2000/07/05 14:18:07
6433 [session.c]
6434 use no_x11_forwarding_flag correctly; provos ok
6435 - provos@cvs.openbsd.org 2000/07/05 15:35:57
6436 [sshd.c]
6437 typo
6438 - aaron@cvs.openbsd.org 2000/07/05 22:06:58
6439 [scp.1 ssh-agent.1 ssh-keygen.1 sshd.8]
bcbf86ec 6440 Insert more missing .El directives. Our troff really should identify
089fbbd2 6441 these and spit out a warning.
6442 - todd@cvs.openbsd.org 2000/07/06 21:55:04
6443 [auth-rsa.c auth2.c ssh-keygen.c]
6444 clean code is good code
6445 - deraadt@cvs.openbsd.org 2000/07/07 02:14:29
6446 [serverloop.c]
6447 sense of port forwarding flag test was backwards
6448 - provos@cvs.openbsd.org 2000/07/08 17:17:31
6449 [compat.c readconf.c]
6450 replace strtok with strsep; from David Young <dyoung@onthejob.net>
6451 - deraadt@cvs.openbsd.org 2000/07/08 19:21:15
6452 [auth.h]
6453 KNF
6454 - ho@cvs.openbsd.org 2000/07/08 19:27:33
6455 [compat.c readconf.c]
6456 Better conditions for strsep() ending.
6457 - ho@cvs.openbsd.org 2000/07/10 10:27:05
6458 [readconf.c]
6459 Get the correct message on errors. (niels@ ok)
6460 - ho@cvs.openbsd.org 2000/07/10 10:30:25
6461 [cipher.c kex.c servconf.c]
6462 strtok() --> strsep(). (niels@ ok)
5540ea9b 6463 - (djm) Fix problem with debug mode and MaxStartups
eb37534b 6464 - (djm) Don't generate host keys when $(DESTDIR) is set (e.g. during RPM
6465 builds)
229f64ee 6466 - (djm) Add strsep function from OpenBSD libc for systems that lack it
56118702 6467
a8545c6c 646820000709
6469 - (djm) Only enable PAM_TTY kludge for Linux. Problem report from
6470 Kevin Steves <stevesk@sweden.hp.com>
ec90a7d6 6471 - (djm) Match prototype and function declaration for rresvport_af.
6472 Problem report from Niklas Edmundsson <nikke@ing.umu.se>
bcbf86ec 6473 - (djm) Missing $(DESTDIR) on host-key target causing problems with RPM
732e8ac5 6474 builds. Problem report from Gregory Leblanc <GLeblanc@cu-portland.edu>
37f1df94 6475 - (djm) Replace ut_name with ut_user. Patch from Jim Watt
6476 <jimw@peisj.pebio.com>
264dce47 6477 - (djm) Fix pam sprintf fix
6478 - (djm) Cleanup entropy collection code a little more. Split initialisation
6479 from seeding, perform intialisation immediatly at start, be careful with
6480 uids. Based on problem report from Jim Watt <jimw@peisj.pebio.com>
5bf9cfe9 6481 - (djm) More NeXT compatibility from Ben Lindstrom <mouring@pconline.com>
6482 Including sigaction() et al. replacements
bcbf86ec 6483 - (djm) AIX getuserattr() session initialisation from Tom Bertelson
eeec075f 6484 <tbert@abac.com>
a8545c6c 6485
e2902a5b 648620000708
bcbf86ec 6487 - (djm) Fix bad fprintf format handling in auth-pam.c. Patch from
e2902a5b 6488 Aaron Hopkins <aaron@die.net>
7a33f831 6489 - (djm) Fix incorrect configure handling of --with-rsh-path option. Fix from
6490 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
bcbf86ec 6491 - (djm) Fixed undefined variables for OSF SIA. Report from
b3f162ba 6492 Baars, Henk <Hendrik.Baars@nl.origin-it.com>
bcbf86ec 6493 - (djm) Handle EWOULDBLOCK returns from read() and write() in atomicio.c
b28e4a3b 6494 Fix from Marquess, Steve Mr JMLFDC <Steve.Marquess@DET.AMEDD.ARMY.MIL>
bcbf86ec 6495 - (djm) Don't use inet_addr.
e2902a5b 6496
5637650d 649720000702
6498 - (djm) Fix brace mismatch from Corinna Vinschen <vinschen@cygnus.com>
27494968 6499 - (djm) Stop shadow expiry checking from preventing logins with NIS. Based
6500 on fix from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
a4070484 6501 - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from
6502 Chris, the Young One <cky@pobox.com>
bcbf86ec 6503 - (djm) Fix scp progress meter on really wide terminals. Based on patch
88726b31 6504 from James H. Cloos Jr. <cloos@jhcloos.com>
5637650d 6505
388e9f9f 650620000701
6507 - (djm) Fix Tru64 SIA problems reported by John P Speno <speno@isc.upenn.edu>
daaff4d5 6508 - (djm) Login fixes from Tom Bertelson <tbert@abac.com>
82258d68 6509 - (djm) Replace "/bin/sh" with _PATH_BSHELL. Report from Corinna Vinschen
6510 <vinschen@cygnus.com>
30228d7c 6511 - (djm) Replace "/usr/bin/login" with LOGIN_PROGRAM
2647ae26 6512 - (djm) Added check for broken snprintf() functions which do not correctly
6513 terminate output string and attempt to use replacement.
46158300 6514 - (djm) Released 2.1.1p2
388e9f9f 6515
9f32ceb4 651620000628
6517 - (djm) Fixes to lastlog code for Irix
6518 - (djm) Use atomicio in loginrec
3206bb3b 6519 - (djm) Patch from Michael Stone <mstone@cs.loyola.edu> to add support for
6520 Irix 6.x array sessions, project id's, and system audit trail id.
9e0c3e1f 6521 - (djm) Added 'distprep' make target to simplify packaging
bcbf86ec 6522 - (djm) Added patch from Chris Adams <cmadams@hiwaay.net> to add OSF SIA
4d33e531 6523 support. Enable using "USE_SIA=1 ./configure [options]"
61e96248 6524
d8caae24 652520000627
6526 - (djm) Fixes to login code - not setting li->uid, cleanups
a05a70ab 6527 - (djm) Formatting
d8caae24 6528
fe30cc2e 652920000626
3e98362e 6530 - (djm) Better fix to aclocal tests from Garrick James <garrick@james.net>
4cb5ffa0 6531 - (djm) Account expiry support from Andreas Steinmetz <ast@domdv.de>
6532 - (djm) Added password expiry checking (no password change support)
be0b9bb7 6533 - (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK
6534 based on patch from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
b5b3f75d 6535 - (djm) Fix fixed EGD code.
3e98362e 6536 - OpenBSD CVS update
6537 - provos@cvs.openbsd.org 2000/06/25 14:17:58
6538 [channels.c]
6539 correct check for bad channel ids; from Wei Dai <weidai@eskimo.com>
6540
1c04b088 654120000623
bcbf86ec 6542 - (djm) Use sa_family_t in prototype for rresvport_af. Patch from
1c04b088 6543 Svante Signell <svante.signell@telia.com>
6544 - (djm) Autoconf logic to define sa_family_t if it is missing
e5a0294f 6545 - OpenBSD CVS Updates:
6546 - markus@cvs.openbsd.org 2000/06/22 10:32:27
6547 [sshd.c]
6548 missing atomicio; report from Steve.Marquess@DET.AMEDD.ARMY.MIL
6549 - djm@cvs.openbsd.org 2000/06/22 17:55:00
6550 [auth-krb4.c key.c radix.c uuencode.c]
6551 Missing CVS idents; ok markus
1c04b088 6552
f528fdf2 655320000622
6554 - (djm) Automatically generate host key during "make install". Suggested
6555 by Gary E. Miller <gem@rellim.com>
6556 - (djm) Paranoia before kill() system call
74fc9186 6557 - OpenBSD CVS Updates:
6558 - markus@cvs.openbsd.org 2000/06/18 18:50:11
6559 [auth2.c compat.c compat.h sshconnect2.c]
6560 make userauth+pubkey interop with ssh.com-2.2.0
6561 - markus@cvs.openbsd.org 2000/06/18 20:56:17
6562 [dsa.c]
6563 mem leak + be more paranoid in dsa_verify.
6564 - markus@cvs.openbsd.org 2000/06/18 21:29:50
6565 [key.c]
6566 cleanup fingerprinting, less hardcoded sizes
6567 - markus@cvs.openbsd.org 2000/06/19 19:39:45
6568 [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
6569 [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h]
bcbf86ec 6570 [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h]
74fc9186 6571 [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h]
6572 [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c]
bcbf86ec 6573 [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c]
6574 [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c]
74fc9186 6575 [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c]
6576 [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h]
6577 OpenBSD tag
6578 - markus@cvs.openbsd.org 2000/06/21 10:46:10
6579 sshconnect2.c missing free; nuke old comment
f528fdf2 6580
e5fe9a1f 658120000620
6582 - (djm) Replace use of '-o' and '-a' logical operators in configure tests
986a22ec 6583 with '||' and '&&'. As suggested by Jim Knoble <jmknoble@jmknoble.cx>
e5fe9a1f 6584 to fix SCO Unixware problem reported by Gary E. Miller <gem@rellim.com>
c03aced4 6585 - (djm) Typo in loginrec.c
e5fe9a1f 6586
cbd7492e 658720000618
6588 - (djm) Add summary of configure options to end of ./configure run
bcbf86ec 6589 - (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from
cbd7492e 6590 Michael Stone <mstone@cs.loyola.edu>
bcbf86ec 6591 - (djm) rusage is a privileged operation on some Unices (incl.
cbd7492e 6592 Solaris 2.5.1). Report from Paul D. Smith <pausmith@nortelnetworks.com>
bcbf86ec 6593 - (djm) Avoid PAM failures when running without a TTY. Report from
cbd7492e 6594 Martin Petrak <petrak@spsknm.schools.sk>
6595 - (djm) Include sys/types.h when including netinet/in.h in configure tests.
6596 Patch from Jun-ichiro itojun Hagino <itojun@iijlab.net>
729bfe59 6597 - (djm) Started merge of Ben Lindstrom's <mouring@pconline.com> NeXT support
38c295d6 6598 - OpenBSD CVS updates:
6599 - deraadt@cvs.openbsd.org 2000/06/17 09:58:46
6600 [channels.c]
6601 everyone says "nix it" (remove protocol 2 debugging message)
6602 - markus@cvs.openbsd.org 2000/06/17 13:24:34
6603 [sshconnect.c]
6604 allow extended server banners
6605 - markus@cvs.openbsd.org 2000/06/17 14:30:10
6606 [sshconnect.c]
6607 missing atomicio, typo
6608 - jakob@cvs.openbsd.org 2000/06/17 16:52:34
6609 [servconf.c servconf.h session.c sshd.8 sshd_config]
6610 add support for ssh v2 subsystems. ok markus@.
6611 - deraadt@cvs.openbsd.org 2000/06/17 18:57:48
6612 [readconf.c servconf.c]
6613 include = in WHITESPACE; markus ok
6614 - markus@cvs.openbsd.org 2000/06/17 19:09:10
6615 [auth2.c]
6616 implement bug compatibility with ssh-2.0.13 pubkey, server side
6617 - markus@cvs.openbsd.org 2000/06/17 21:00:28
6618 [compat.c]
6619 initial support for ssh.com's 2.2.0
6620 - markus@cvs.openbsd.org 2000/06/17 21:16:09
6621 [scp.c]
6622 typo
6623 - markus@cvs.openbsd.org 2000/06/17 22:05:02
6624 [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
6625 split auth-rsa option parsing into auth-options
6626 add options support to authorized_keys2
6627 - markus@cvs.openbsd.org 2000/06/17 22:42:54
6628 [session.c]
6629 typo
cbd7492e 6630
509b1f88 663120000613
6632 - (djm) Fixes from Andrew McGill <andrewm@datrix.co.za>:
6633 - Platform define for SCO 3.x which breaks on /dev/ptmx
6634 - Detect and try to fix missing MAXPATHLEN
a4d05724 6635 - (djm) Fix short copy in loginrec.c (based on patch from Phill Camp
6636 <P.S.S.Camp@ukc.ac.uk>
509b1f88 6637
09564242 663820000612
6639 - (djm) Glob manpages in RPM spec files to catch compressed files
6640 - (djm) Full license in auth-pam.c
08ae384f 6641 - (djm) Configure fixes from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
383207f7 6642 - (andre) AIX, lastlog, configure fixes from Tom Bertelson <tbert@abac.com>:
6643 - Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is
6644 def'd
6645 - Set AIX to use preformatted manpages
61e96248 6646
74b224a0 664720000610
6648 - (djm) Minor doc tweaks
217ab55e 6649 - (djm) Fix for configure on bash2 from Jim Knoble <jmknoble@jmknoble.cx>
74b224a0 6650
32c80420 665120000609
6652 - (djm) Patch from Kenji Miyake <kenji@miyake.org> to disable utmp usage
6653 (in favour of utmpx) on Solaris 8
6654
fa649821 665520000606
48c99b2c 6656 - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through
6657 list of commands (by default). Removed verbose debugging (by default).
bcbf86ec 6658 - (djm) Increased command entropy estimates and default entropy collection
48c99b2c 6659 timeout
f988dce5 6660 - (djm) Remove duplicate headers from loginrec.c
c5fa2eb0 6661 - (djm) Don't add /usr/local/lib to library search path on Irix
bcbf86ec 6662 - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III
fa649821 6663 <tibbs@math.uh.edu>
1e83f2a2 6664 - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg
6665 <zack@wolery.cumb.org>
fa649821 6666 - (djm) OpenBSD CVS updates:
6667 - todd@cvs.openbsd.org
6668 [sshconnect2.c]
6669 teach protocol v2 to count login failures properly and also enable an
6670 explanation of why the password prompt comes up again like v1; this is NOT
6671 crypto
61e96248 6672 - markus@cvs.openbsd.org
fa649821 6673 [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8]
6674 xauth_location support; pr 1234
6675 [readconf.c sshconnect2.c]
6676 typo, unused
6677 [session.c]
6678 allow use_login only for login sessions, otherwise remote commands are
6679 execed with uid==0
6680 [sshd.8]
6681 document UseLogin better
6682 [version.h]
6683 OpenSSH 2.1.1
6684 [auth-rsa.c]
bcbf86ec 6685 fix match_hostname() logic for auth-rsa: deny access if we have a
fa649821 6686 negative match or no match at all
6687 [channels.c hostfile.c match.c]
bcbf86ec 6688 don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via
fa649821 6689 kris@FreeBSD.org
6690
8e7b16f8 669120000606
bcbf86ec 6692 - (djm) Added --with-cflags, --with-ldflags and --with-libs options to
8e7b16f8 6693 configure.
6694
d7c0f3d5 669520000604
6696 - Configure tweaking for new login code on Irix 5.3
2d6c411f 6697 - (andre) login code changes based on djm feedback
d7c0f3d5 6698
2d6c411f 669920000603
6700 - (andre) New login code
6701 - Remove bsd-login.[ch] and all the OpenBSD-derived code in login.c
6702 - Add loginrec.[ch], logintest.c and autoconf code
61e96248 6703
5daf7064 670420000531
6705 - Cleanup of auth.c, login.c and fake-*
6706 - Cleanup of auth-pam.c, save and print "account expired" error messages
e5662474 6707 - Fix EGD read bug by IWAMURO Motonori <iwa@mmp.fujitsu.co.jp>
69134b9b 6708 - Rewrote bsd-login to use proper utmp API if available. Major cleanup
6709 of fallback DIY code.
5daf7064 6710
b9f446d1 671120000530
6712 - Define atexit for old Solaris
b02ebca1 6713 - Fix buffer overrun in login.c for systems which use syslen in utmpx.
6714 patch from YOSHIFUJI Hideaki <yoshfuji@cerberus.nemoto.ecei.tohoku.ac.jp>
71276795 6715 - OpenBSD CVS updates:
6716 - markus@cvs.openbsd.org
6717 [session.c]
6718 make x11-fwd work w/ localhost (xauth add host/unix:11)
6719 [cipher.c compat.c readconf.c servconf.c]
6720 check strtok() != NULL; ok niels@
6721 [key.c]
6722 fix key_read() for uuencoded keys w/o '='
6723 [serverloop.c]
6724 group ssh1 vs. ssh2 in serverloop
6725 [kex.c kex.h myproposal.h sshconnect2.c sshd.c]
6726 split kexinit/kexdh, factor out common code
6727 [readconf.c ssh.1 ssh.c]
6728 forwardagent defaults to no, add ssh -A
6729 - theo@cvs.openbsd.org
6730 [session.c]
6731 just some line shortening
60688ef9 6732 - Released 2.1.0p3
b9f446d1 6733
29611d9c 673420000520
6735 - Xauth fix from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
25422c70 6736 - Don't touch utmp if USE_UTMPX defined
a423beaf 6737 - SunOS 4.x support from Todd C. Miller <Todd.Miller@courtesan.com>
fc1e8bf4 6738 - SIGCHLD fix for AIX and HPUX from Tom Bertelson <tbert@abac.com>
bcbf86ec 6739 - HPUX and Configure fixes from Lutz Jaenicke
fc1e8bf4 6740 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
bcbf86ec 6741 - Use mkinstalldirs script to make directories instead of non-portable
fc1e8bf4 6742 "install -d". Suggested by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
a905808d 6743 - Doc cleanup
29611d9c 6744
301e9b01 674520000518
6746 - Include Andre Lucas' fixprogs script. Forgot to "cvs add" it yesterday
6747 - OpenBSD CVS updates:
6748 - markus@cvs.openbsd.org
6749 [sshconnect.c]
6750 copy only ai_addrlen bytes; misiek@pld.org.pl
6751 [auth.c]
bcbf86ec 6752 accept an empty shell in authentication; bug reported by
301e9b01 6753 chris@tinker.ucr.edu
6754 [serverloop.c]
6755 we don't have stderr for interactive terminal sessions (fcntl errors)
6756
ad85db64 675720000517
6758 - Fix from Andre Lucas <andre.lucas@dial.pipex.com>
6759 - Fixes command line printing segfaults (spotter: Bladt Norbert)
6760 - Fixes erroneous printing of debug messages to syslog
6761 - Fixes utmp for MacOS X (spotter: Aristedes Maniatis)
6762 - Gives useful error message if PRNG initialisation fails
6763 - Reduced ssh startup delay
6764 - Measures cumulative command time rather than the time between reads
704b1659 6765 after select()
ad85db64 6766 - 'fixprogs' perl script to eliminate non-working entropy commands, and
704b1659 6767 optionally run 'ent' to measure command entropy
c1ef8333 6768 - Applied Tom Bertelson's <tbert@abac.com> AIX authentication fix
a64009ad 6769 - Avoid WCOREDUMP complation errors for systems that lack it
bcbf86ec 6770 - Avoid SIGCHLD warnings from entropy commands
28c1d5ce 6771 - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <sxw@dcs.ed.ac.uk>
0e73cc53 6772 - OpenBSD CVS update:
bcbf86ec 6773 - markus@cvs.openbsd.org
0e73cc53 6774 [ssh.c]
6775 fix usage()
6776 [ssh2.h]
6777 draft-ietf-secsh-architecture-05.txt
6778 [ssh.1]
6779 document ssh -T -N (ssh2 only)
6780 [channels.c serverloop.c ssh.h sshconnect.c sshd.c aux.c]
6781 enable nonblocking IO for sshd w/ proto 1, too; split out common code
6782 [aux.c]
6783 missing include
c04f75f1 6784 - Several patches from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
6785 - INSTALL typo and URL fix
6786 - Makefile fix
6787 - Solaris fixes
bcbf86ec 6788 - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka
c04f75f1 6789 <ksakai@kso.netwk.ntt-at.co.jp>
afa5ee68 6790 - RSAless operation patch from kevin_oconnor@standardandpoors.com
d45e3d76 6791 - Detect OpenSSL seperatly from RSA
bcbf86ec 6792 - Better test for RSA (more compatible with RSAref). Based on work by
d45e3d76 6793 Ed Eden <ede370@stl.rural.usda.gov>
ad85db64 6794
3d1a1654 679520000513
bcbf86ec 6796 - Fix for non-recognised DSA keys from Arkadiusz Miskiewicz
3d1a1654 6797 <misiek@pld.org.pl>
6798
d02a3a00 679920000511
bcbf86ec 6800 - Fix for prng_seed permissions checking from Lutz Jaenicke
d02a3a00 6801 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3d1a1654 6802 - "make host-key" fix for Irix
d02a3a00 6803
d0c832f3 680420000509
6805 - OpenBSD CVS update
6806 - markus@cvs.openbsd.org
6807 [cipher.h myproposal.h readconf.c readconf.h servconf.c ssh.1 ssh.c]
6808 [ssh.h sshconnect1.c sshconnect2.c sshd.8]
6809 - complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)
6810 - hugh@cvs.openbsd.org
6811 [ssh.1]
6812 - zap typo
6813 [ssh-keygen.1]
6814 - One last nit fix. (markus approved)
6815 [sshd.8]
6816 - some markus certified spelling adjustments
6817 - markus@cvs.openbsd.org
6818 [auth2.c channels.c clientloop.c compat compat.h dsa.c kex.c]
6819 [sshconnect2.c ]
6820 - bug compat w/ ssh-2.0.13 x11, split out bugs
6821 [nchan.c]
6822 - no drain if ibuf_empty, fixes x11fwd problems; tests by fries@
6823 [ssh-keygen.c]
6824 - handle escapes in real and original key format, ok millert@
6825 [version.h]
6826 - OpenSSH-2.1
3dc1102e 6827 - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.a
e93ee87a 6828 - Doc updates
bcbf86ec 6829 - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported
21e5304a 6830 by Andre Lucas <andre.lucas@dial.pipex.com>
d0c832f3 6831
ebdeb9a8 683220000508
6833 - Makefile and RPM spec fixes
6834 - Generate DSA host keys during "make key" or RPM installs
f6cde515 6835 - OpenBSD CVS update
6836 - markus@cvs.openbsd.org
6837 [clientloop.c sshconnect2.c]
6838 - make x11-fwd interop w/ ssh-2.0.13
6839 [README.openssh2]
6840 - interop w/ SecureFX
6841 - Release 2.0.0beta2
ebdeb9a8 6842
bcbf86ec 6843 - Configure caching and cleanup patch from Andre Lucas'
58d100bf 6844 <andre.lucas@dial.pipex.com>
6845
1d1ffb87 684620000507
6847 - Remove references to SSLeay.
6848 - Big OpenBSD CVS update
6849 - markus@cvs.openbsd.org
6850 [clientloop.c]
6851 - typo
6852 [session.c]
6853 - update proctitle on pty alloc/dealloc, e.g. w/ windows client
6854 [session.c]
6855 - update proctitle for proto 1, too
6856 [channels.h nchan.c serverloop.c session.c sshd.c]
6857 - use c-style comments
6858 - deraadt@cvs.openbsd.org
6859 [scp.c]
6860 - more atomicio
bcbf86ec 6861 - markus@cvs.openbsd.org
1d1ffb87 6862 [channels.c]
6863 - set O_NONBLOCK
6864 [ssh.1]
6865 - update AUTHOR
6866 [readconf.c ssh-keygen.c ssh.h]
6867 - default DSA key file ~/.ssh/id_dsa
6868 [clientloop.c]
6869 - typo, rm verbose debug
6870 - deraadt@cvs.openbsd.org
6871 [ssh-keygen.1]
6872 - document DSA use of ssh-keygen
6873 [sshd.8]
6874 - a start at describing what i understand of the DSA side
6875 [ssh-keygen.1]
6876 - document -X and -x
6877 [ssh-keygen.c]
6878 - simplify usage
bcbf86ec 6879 - markus@cvs.openbsd.org
1d1ffb87 6880 [sshd.8]
6881 - there is no rhosts_dsa
6882 [ssh-keygen.1]
6883 - document -y, update -X,-x
6884 [nchan.c]
6885 - fix close for non-open ssh1 channels
6886 [servconf.c servconf.h ssh.h sshd.8 sshd.c ]
6887 - s/DsaKey/HostDSAKey/, document option
6888 [sshconnect2.c]
6889 - respect number_of_password_prompts
6890 [channels.c channels.h servconf.c servconf.h session.c sshd.8]
6891 - GatewayPorts for sshd, ok deraadt@
6892 [ssh-add.1 ssh-agent.1 ssh.1]
6893 - more doc on: DSA, id_dsa, known_hosts2, authorized_keys2
6894 [ssh.1]
6895 - more info on proto 2
6896 [sshd.8]
6897 - sync AUTHOR w/ ssh.1
6898 [key.c key.h sshconnect.c]
6899 - print key type when talking about host keys
6900 [packet.c]
6901 - clear padding in ssh2
6902 [dsa.c key.c radix.c ssh.h sshconnect1.c uuencode.c uuencode.h]
6903 - replace broken uuencode w/ libc b64_ntop
6904 [auth2.c]
6905 - log failure before sending the reply
6906 [key.c radix.c uuencode.c]
6907 - remote trailing comments before calling __b64_pton
6908 [auth2.c readconf.c readconf.h servconf.c servconf.h ssh.1]
6909 [sshconnect2.c sshd.8]
6910 - add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8
6911 - Bring in b64_ntop and b64_pton from OpenBSD libc (bsd-base64.[ch])
6912
1a11e1ae 691320000502
0fbe8c74 6914 - OpenBSD CVS update
6915 [channels.c]
6916 - init all fds, close all fds.
6917 [sshconnect2.c]
6918 - check whether file exists before asking for passphrase
6919 [servconf.c servconf.h sshd.8 sshd.c]
6920 - PidFile, pr 1210
6921 [channels.c]
6922 - EINTR
6923 [channels.c]
6924 - unbreak, ok niels@
6925 [sshd.c]
6926 - unlink pid file, ok niels@
6927 [auth2.c]
6928 - Add missing #ifdefs; ok - markus
bcbf86ec 6929 - Add Andre Lucas' <andre.lucas@dial.pipex.com> patch to read entropy
d3083fbd 6930 gathering commands from a text file
1a11e1ae 6931 - Release 2.0.0beta1
6932
c4bc58eb 693320000501
6934 - OpenBSD CVS update
6935 [packet.c]
6936 - send debug messages in SSH2 format
3189621b 6937 [scp.c]
6938 - fix very rare EAGAIN/EINTR issues; based on work by djm
6939 [packet.c]
6940 - less debug, rm unused
6941 [auth2.c]
6942 - disable kerb,s/key in ssh2
6943 [sshd.8]
6944 - Minor tweaks and typo fixes.
6945 [ssh-keygen.c]
6946 - Put -d into usage and reorder. markus ok.
bcbf86ec 6947 - Include missing headers for OpenSSL tests. Fix from Phil Karn
44fb55e9 6948 <karn@ka9q.ampr.org>
bcbf86ec 6949 - Fixed __progname symbol collisions reported by Andre Lucas
3fd95d9a 6950 <andre.lucas@dial.pipex.com>
0d5f7abc 6951 - Merged bsd-login ttyslot and AIX utmp patch from Gert Doering
6952 <gd@hilb1.medat.de>
8cb940db 6953 - Add some missing ifdefs to auth2.c
8af50c98 6954 - Deprecate perl-tk askpass.
52bcc044 6955 - Irix portability fixes - don't include netinet headers more than once
6956 - Make sure we don't save PRNG seed more than once
c4bc58eb 6957
2b763e31 695820000430
6959 - Merge HP-UX fixes and TCB support from Ged Lodder <lodder@yacc.com.au>
b7a87eea 6960 - Integrate Andre Lucas' <andre.lucas@dial.pipex.com> entropy collection
6961 patch.
6962 - Adds timeout to entropy collection
6963 - Disables slow entropy sources
6964 - Load and save seed file
bcbf86ec 6965 - Changed entropy seed code to user per-user seeds only (server seed is
b7a87eea 6966 saved in root's .ssh directory)
6967 - Use atexit() and fatal cleanups to save seed on exit
0b242b12 6968 - More OpenBSD updates:
6969 [session.c]
6970 - don't call chan_write_failed() if we are not writing
6971 [auth-rsa.c auth1.c authfd.c hostfile.c ssh-agent.c]
6972 - keysize warnings error() -> log()
2b763e31 6973
a306f2dd 697420000429
6975 - Merge big update to OpenSSH-2.0 from OpenBSD CVS
6976 [README.openssh2]
6977 - interop w/ F-secure windows client
6978 - sync documentation
6979 - ssh_host_dsa_key not ssh_dsa_key
6980 [auth-rsa.c]
6981 - missing fclose
6982 [auth.c authfile.c compat.c dsa.c dsa.h hostfile.c key.c key.h radix.c]
6983 [readconf.c readconf.h ssh-add.c ssh-keygen.c ssh.c ssh.h sshconnect.c]
6984 [sshd.c uuencode.c uuencode.h authfile.h]
6985 - add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX]
6986 for trading keys with the real and the original SSH, directly from the
6987 people who invented the SSH protocol.
6988 [auth.c auth.h authfile.c sshconnect.c auth1.c auth2.c sshconnect.h]
6989 [sshconnect1.c sshconnect2.c]
6990 - split auth/sshconnect in one file per protocol version
6991 [sshconnect2.c]
6992 - remove debug
6993 [uuencode.c]
6994 - add trailing =
6995 [version.h]
6996 - OpenSSH-2.0
6997 [ssh-keygen.1 ssh-keygen.c]
6998 - add -R flag: exit code indicates if RSA is alive
6999 [sshd.c]
7000 - remove unused
7001 silent if -Q is specified
7002 [ssh.h]
7003 - host key becomes /etc/ssh_host_dsa_key
7004 [readconf.c servconf.c ]
7005 - ssh/sshd default to proto 1 and 2
7006 [uuencode.c]
7007 - remove debug
7008 [auth2.c ssh-keygen.c sshconnect2.c sshd.c]
7009 - xfree DSA blobs
7010 [auth2.c serverloop.c session.c]
7011 - cleanup logging for sshd/2, respect PasswordAuth no
7012 [sshconnect2.c]
7013 - less debug, respect .ssh/config
7014 [README.openssh2 channels.c channels.h]
bcbf86ec 7015 - clientloop.c session.c ssh.c
a306f2dd 7016 - support for x11-fwding, client+server
7017
0ac7199f 701820000421
7019 - Merge fix from OpenBSD CVS
7020 [ssh-agent.c]
7021 - Fix memory leak per connection. Report from Andy Spiegl <Andy@Spiegl.de>
7022 via Debian bug #59926
18ba2aab 7023 - Define __progname in session.c if libc doesn't
7024 - Remove indentation on autoconf #include statements to avoid bug in
bcbf86ec 7025 DEC Tru64 compiler. Report and fix from David Del Piero
18ba2aab 7026 <David.DelPiero@qed.qld.gov.au>
0ac7199f 7027
e1b37056 702820000420
bcbf86ec 7029 - Make fixpaths work with perl4, patch from Andre Lucas
e1b37056 7030 <andre.lucas@dial.pipex.com>
9da5c3c9 7031 - Sync with OpenBSD CVS:
7032 [clientloop.c login.c serverloop.c ssh-agent.c ssh.h sshconnect.c sshd.c]
7033 - pid_t
7034 [session.c]
7035 - remove bogus chan_read_failed. this could cause data
7036 corruption (missing data) at end of a SSH2 session.
4e577b89 7037 - Merge fixes from Debian patch from Phil Hands <phil@hands.com>
7038 - Allow setting of PAM service name through CFLAGS (SSHD_PAM_SERVICE)
7039 - Use vhangup to clean up Linux ttys
7040 - Force posix getopt processing on GNU libc systems
371ecff9 7041 - Debian bug #55910 - remove references to ssl(8) manpages
247f1a89 7042 - Debian bug #58031 - ssh_config lies about default cipher
e1b37056 7043
d6f24e45 704420000419
7045 - OpenBSD CVS updates
7046 [channels.c]
7047 - fix pr 1196, listen_port and port_to_connect interchanged
7048 [scp.c]
bcbf86ec 7049 - after completion, replace the progress bar ETA counter with a final
d6f24e45 7050 elapsed time; my idea, aaron wrote the patch
7051 [ssh_config sshd_config]
7052 - show 'Protocol' as an example, ok markus@
7053 [sshd.c]
7054 - missing xfree()
7055 - Add missing header to bsd-misc.c
7056
35484284 705720000416
7058 - Reduce diff against OpenBSD source
bcbf86ec 7059 - All OpenSSL includes are now unconditionally referenced as
35484284 7060 openssl/foo.h
7061 - Pick up formatting changes
7062 - Other minor changed (typecasts, etc) that I missed
7063
6ae2364d 706420000415
7065 - OpenBSD CVS updates.
7066 [ssh.1 ssh.c]
7067 - ssh -2
7068 [auth.c channels.c clientloop.c packet.c packet.h serverloop.c]
7069 [session.c sshconnect.c]
7070 - check payload for (illegal) extra data
7071 [ALL]
7072 whitespace cleanup
7073
c323ac76 707420000413
7075 - INSTALL doc updates
f54651ce 7076 - Merged OpenBSD updates to include paths.
bcbf86ec 7077
a8be9f80 707820000412
7079 - OpenBSD CVS updates:
7080 - [channels.c]
7081 repair x11-fwd
7082 - [sshconnect.c]
7083 fix passwd prompt for ssh2, less debugging output.
7084 - [clientloop.c compat.c dsa.c kex.c sshd.c]
7085 less debugging output
7086 - [kex.c kex.h sshconnect.c sshd.c]
7087 check for reasonable public DH values
7088 - [README.openssh2 cipher.c cipher.h compat.c compat.h readconf.c]
7089 [readconf.h servconf.c servconf.h ssh.c ssh.h sshconnect.c sshd.c]
7090 add Cipher and Protocol options to ssh/sshd, e.g.:
7091 ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers
7092 arcfour,3des-cbc'
7093 - [sshd.c]
7094 print 1.99 only if server supports both
7095
18e92801 709620000408
7097 - Avoid some compiler warnings in fake-get*.c
7098 - Add IPTOS macros for systems which lack them
9d98aaf6 7099 - Only set define entropy collection macros if they are found
e78a59f5 7100 - More large OpenBSD CVS updates:
7101 - [auth.c auth.h servconf.c servconf.h serverloop.c session.c]
7102 [session.h ssh.h sshd.c README.openssh2]
7103 ssh2 server side, see README.openssh2; enable with 'sshd -2'
7104 - [channels.c]
7105 no adjust after close
7106 - [sshd.c compat.c ]
7107 interop w/ latest ssh.com windows client.
61e96248 7108
8ce64345 710920000406
7110 - OpenBSD CVS update:
7111 - [channels.c]
7112 close efd on eof
7113 - [clientloop.c compat.c ssh.c sshconnect.c myproposal.h]
7114 ssh2 client implementation, interops w/ ssh.com and lsh servers.
7115 - [sshconnect.c]
7116 missing free.
7117 - [authfile.c cipher.c cipher.h packet.c sshconnect.c sshd.c]
7118 remove unused argument, split cipher_mask()
7119 - [clientloop.c]
7120 re-order: group ssh1 vs. ssh2
7121 - Make Redhat spec require openssl >= 0.9.5a
7122
e7627112 712320000404
7124 - Add tests for RAND_add function when searching for OpenSSL
7e7327a1 7125 - OpenBSD CVS update:
7126 - [packet.h packet.c]
7127 ssh2 packet format
7128 - [packet.h packet.c nchan2.ms nchan.h compat.h compat.c]
7129 [channels.h channels.c]
7130 channel layer support for ssh2
7131 - [kex.h kex.c hmac.h hmac.c dsa.c dsa.h]
7132 DSA, keyexchange, algorithm agreement for ssh2
6c081128 7133 - Generate manpages before make install not at the end of make all
7134 - Don't seed the rng quite so often
7135 - Always reseed rng when requested
e7627112 7136
bfc9a610 713720000403
7138 - Wrote entropy collection routines for systems that lack /dev/random
7139 and EGD
837c30b8 7140 - Disable tests and typedefs for 64 bit types. They are currently unused.
bfc9a610 7141
7368a6c8 714220000401
7143 - Big OpenBSD CVS update (mainly beginnings of SSH2 infrastructure)
7144 - [auth.c session.c sshd.c auth.h]
7145 split sshd.c -> auth.c session.c sshd.c plus cleanup and goto-removal
7146 - [bufaux.c bufaux.h]
7147 support ssh2 bignums
7148 - [channels.c channels.h clientloop.c sshd.c nchan.c nchan.h packet.c]
7149 [readconf.c ssh.c ssh.h serverloop.c]
7150 replace big switch() with function tables (prepare for ssh2)
7151 - [ssh2.h]
7152 ssh2 message type codes
7153 - [sshd.8]
7154 reorder Xr to avoid cutting
7155 - [serverloop.c]
7156 close(fdin) if fdin != fdout, shutdown otherwise, ok theo@
7157 - [channels.c]
7158 missing close
7159 allow bigger packets
7160 - [cipher.c cipher.h]
7161 support ssh2 ciphers
7162 - [compress.c]
7163 cleanup, less code
7164 - [dispatch.c dispatch.h]
7165 function tables for different message types
7166 - [log-server.c]
7167 do not log() if debuggin to stderr
7168 rename a cpp symbol, to avoid param.h collision
7169 - [mpaux.c]
7170 KNF
7171 - [nchan.c]
7172 sync w/ channels.c
7173
f5238bee 717420000326
7175 - Better tests for OpenSSL w/ RSAref
bcbf86ec 7176 - Added replacement setenv() function from OpenBSD libc. Suggested by
f5238bee 7177 Ben Lindstrom <mouring@pconline.com>
4fe2af09 7178 - OpenBSD CVS update
7179 - [auth-krb4.c]
7180 -Wall
7181 - [auth-rh-rsa.c auth-rsa.c hostfile.c hostfile.h key.c key.h match.c]
7182 [match.h ssh.c ssh.h sshconnect.c sshd.c]
7183 initial support for DSA keys. ok deraadt@, niels@
7184 - [cipher.c cipher.h]
7185 remove unused cipher_attack_detected code
7186 - [scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
7187 Fix some formatting problems I missed before.
7188 - [ssh.1 sshd.8]
7189 fix spelling errors, From: FreeBSD
7190 - [ssh.c]
7191 switch to raw mode only if he _get_ a pty (not if we _want_ a pty).
f5238bee 7192
0024a081 719320000324
7194 - Released 1.2.3
7195
bd499f9e 719620000317
7197 - Clarified --with-default-path option.
7198 - Added -blibpath handling for AIX to work around stupid runtime linking.
7199 Problem elucidated by gshapiro@SENDMAIL.ORG by way of Jim Knoble
986a22ec 7200 <jmknoble@jmknoble.cx>
474b5fef 7201 - Checks for 64 bit int types. Problem report from Mats Fredholm
7202 <matsf@init.se>
610cd5c6 7203 - OpenBSD CVS updates:
bcbf86ec 7204 - [atomicio.c auth-krb4.c bufaux.c channels.c compress.c fingerprint.c]
610cd5c6 7205 [packet.h radix.c rsa.c scp.c ssh-agent.c ssh-keygen.c sshconnect.c]
7206 [sshd.c]
7207 pedantic: signed vs. unsigned, void*-arithm, etc
7208 - [ssh.1 sshd.8]
7209 Various cleanups and standardizations.
bcbf86ec 7210 - Runtime error fix for HPUX from Otmar Stahl
be48d23c 7211 <O.Stahl@lsw.uni-heidelberg.de>
bd499f9e 7212
4696775a 721320000316
bcbf86ec 7214 - Fixed configure not passing LDFLAGS to Solaris. Report from David G.
4696775a 7215 Hesprich <dghespri@sprintparanet.com>
d423d822 7216 - Propogate LD through to Makefile
b7a9ce47 7217 - Doc cleanups
2ba2a610 7218 - Added blurb about "scp: command not found" errors to UPGRADING
4696775a 7219
cb0b7ea4 722020000315
7221 - Fix broken CFLAGS handling during search for OpenSSL. Fixes va_list
7222 problems with gcc/Solaris.
bcbf86ec 7223 - Don't free argument to putenv() after use (in setenv() replacement).
db55a3ea 7224 Report from Seigo Tanimura <tanimura@r.dl.itc.u-tokyo.ac.jp>
bcbf86ec 7225 - Created contrib/ subdirectory. Included helpers from Phil Hands'
13652e52 7226 Debian package, README file and chroot patch from Ricardo Cerqueira
7227 <rmcc@clix.pt>
bcbf86ec 7228 - Moved gnome-ssh-askpass.c to contrib directory and removed config
13652e52 7229 option.
7230 - Slight cleanup to doc files
b14b2ae7 7231 - Configure fix from Bratislav ILICH <bilic@zepter.ru>
cb0b7ea4 7232
a8ed9fd9 723320000314
bcbf86ec 7234 - Include macro for IN6_IS_ADDR_V4MAPPED. Report from
a8ed9fd9 7235 peter@frontierflying.com
84afc958 7236 - Include /usr/local/include and /usr/local/lib for systems that don't
7237 do it themselves
7238 - -R/usr/local/lib for Solaris
7239 - Fix RSAref detection
7240 - Fix IN6_IS_ADDR_V4MAPPED macro
a8ed9fd9 7241
bcf36c78 724220000311
7243 - Detect RSAref
43e48848 7244 - OpenBSD CVS change
7245 [sshd.c]
7246 - disallow guessing of root password
867dbf40 7247 - More configure fixes
80faa19f 7248 - IPv6 workarounds from Hideaki YOSHIFUJI <yoshfuji@ecei.tohoku.ac.jp>
bcf36c78 7249
c8d54615 725020000309
7251 - OpenBSD CVS updates to v1.2.3
704b1659 7252 [ssh.h atomicio.c]
7253 - int atomicio -> ssize_t (for alpha). ok deraadt@
7254 [auth-rsa.c]
7255 - delay MD5 computation until client sends response, free() early, cleanup.
7256 [cipher.c]
7257 - void* -> unsigned char*, ok niels@
7258 [hostfile.c]
7259 - remove unused variable 'len'. fix comments.
7260 - remove unused variable
7261 [log-client.c log-server.c]
7262 - rename a cpp symbol, to avoid param.h collision
7263 [packet.c]
7264 - missing xfree()
7265 - getsockname() requires initialized tolen; andy@guildsoftware.com
7266 - use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
7267 from Holger.Trapp@Informatik.TU-Chemnitz.DE
7268 [pty.c pty.h]
bcbf86ec 7269 - register cleanup for pty earlier. move code for pty-owner handling to
c8d54615 7270 pty.c ok provos@, dugsong@
704b1659 7271 [readconf.c]
7272 - turn off x11-fwd for the client, too.
7273 [rsa.c]
7274 - PKCS#1 padding
7275 [scp.c]
7276 - allow '.' in usernames; from jedgar@fxp.org
7277 [servconf.c]
7278 - typo: ignore_user_known_hosts int->flag; naddy@mips.rhein-neckar.de
7279 - sync with sshd_config
7280 [ssh-keygen.c]
7281 - enable ssh-keygen -l -f ~/.ssh/known_hosts, ok deraadt@
7282 [ssh.1]
7283 - Change invalid 'CHAT' loglevel to 'VERBOSE'
7284 [ssh.c]
7285 - suppress AAAA query host when '-4' is used; from shin@nd.net.fujitsu.co.jp
7286 - turn off x11-fwd for the client, too.
7287 [sshconnect.c]
7288 - missing xfree()
7289 - retry rresvport_af(), too. from sumikawa@ebina.hitachi.co.jp.
7290 - read error vs. "Connection closed by remote host"
7291 [sshd.8]
7292 - ie. -> i.e.,
7293 - do not link to a commercial page..
7294 - sync with sshd_config
7295 [sshd.c]
7296 - no need for poll.h; from bright@wintelcom.net
7297 - log with level log() not fatal() if peer behaves badly.
7298 - don't panic if client behaves strange. ok deraadt@
7299 - make no-port-forwarding for RSA keys deny both -L and -R style fwding
7300 - delay close() of pty until the pty has been chowned back to root
7301 - oops, fix comment, too.
7302 - missing xfree()
7303 - move XAUTHORITY to subdir. ok dugsong@. fixes debian bug #57907, too.
7304 (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907)
bcbf86ec 7305 - register cleanup for pty earlier. move code for pty-owner handling to
704b1659 7306 pty.c ok provos@, dugsong@
7307 - create x11 cookie file
7308 - fix pr 1113, fclose() -> pclose(), todo: remote popen()
7309 - version 1.2.3
c8d54615 7310 - Cleaned up
bcbf86ec 7311 - Removed warning workaround for Linux and devpts filesystems (no longer
d8223847 7312 required after OpenBSD updates)
c8d54615 7313
07055445 731420000308
7315 - Configure fix from Hiroshi Takekawa <takekawa@sr3.t.u-tokyo.ac.jp>
7316
731720000307
7318 - Released 1.2.2p1
7319
9c8c3fc6 732020000305
7321 - Fix DEC compile fix
54096dcc 7322 - Explicitly seed OpenSSL's PRNG before checking rsa_alive()
aa6bd60a 7323 - Check for getpagesize in libucb.a if not found in libc. Fix for old
7324 Solaris from Andre Lucas <andre.lucas@dial.pipex.com>
bcbf86ec 7325 - Check for libwrap if --with-tcp-wrappers option specified. Suggestion
9fc7867e 7326 Mate Wierdl <mw@moni.msci.memphis.edu>
9c8c3fc6 7327
6bf4d066 732820000303
7329 - Added "make host-key" target, Suggestion from Dominik Brettnacher
7330 <domi@saargate.de>
bcbf86ec 7331 - Don't permanently fail on bind() if getaddrinfo has more choices left for
16218745 7332 us. Needed to work around messy IPv6 on Linux. Patch from Arkadiusz
7333 Miskiewicz <misiek@pld.org.pl>
22fa590f 7334 - DEC Unix compile fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
7335 - Manpage fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
6bf4d066 7336
a0391976 733720000302
7338 - Big cleanup of autoconf code
7339 - Rearranged to be a little more logical
7340 - Added -R option for Solaris
7341 - Rewrote OpenSSL detection code. Now uses AC_TRY_RUN with a test program
7342 to detect library and header location _and_ ensure library has proper
7343 RSA support built in (this is a problem with OpenSSL 0.9.5).
817175bc 7344 - Applied pty cleanup patch from markus.friedl@informatik.uni-erlangen.de
0a1718dc 7345 - Avoid warning message with Unix98 ptys
bcbf86ec 7346 - Warning was valid - possible race condition on PTYs. Avoided using
3276571c 7347 platform-specific code.
7348 - Document some common problems
bcbf86ec 7349 - Allow root access to any key. Patch from
81eef326 7350 markus.friedl@informatik.uni-erlangen.de
a0391976 7351
f55afe71 735220000207
7353 - Removed SOCKS code. Will support through a ProxyCommand.
7354
d07d1c58 735520000203
7356 - Fixed SEGVs in authloop, fix from vbzoli@hbrt.hu
d581b7ae 7357 - Add --with-ssl-dir option
d07d1c58 7358
9d5f374b 735920000202
bcbf86ec 7360 - Fix lastlog code for directory based lastlogs. Fix from Josh Durham
9d5f374b 7361 <jmd@aoe.vt.edu>
6b1f3fdb 7362 - Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
bcbf86ec 7363 - Added URLs to Japanese translations of documents by HARUYAMA Seigo
6b1f3fdb 7364 <haruyama@nt.phys.s.u-tokyo.ac.jp>
9d5f374b 7365
bc8c2601 736620000201
7367 - Use socket pairs by default (instead of pipes). Prevents race condition
7368 on several (buggy) OSs. Report and fix from tridge@linuxcare.com
7369
69c76614 737020000127
7371 - Seed OpenSSL's random number generator before generating RSA keypairs
7372 - Split random collector into seperate file
aaf2abd7 7373 - Compile fix from Andre Lucas <andre.lucas@dial.pipex.com>
69c76614 7374
f9507c24 737520000126
7376 - Released 1.2.2 stable
7377
bcbf86ec 7378 - NeXT keeps it lastlog in /usr/adm. Report from
f9507c24 7379 mouring@newton.pconline.com
bcbf86ec 7380 - Added note in UPGRADING re interop with commercial SSH using idea.
986a22ec 7381 Report from Jim Knoble <jmknoble@jmknoble.cx>
587120ad 7382 - Fix linking order for Kerberos/AFS. Fix from Holget Trapp
7383 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
f9507c24 7384
bfae20ad 738520000125
bcbf86ec 7386 - Fix NULL pointer dereference in login.c. Fix from Andre Lucas
bfae20ad 7387 <andre.lucas@dial.pipex.com>
07b0cb78 7388 - Reorder PAM initialisation so it does not mess up lastlog. Reported
7389 by Andre Lucas <andre.lucas@dial.pipex.com>
bcbf86ec 7390 - Use preformatted manpages on SCO, report from Gary E. Miller
9755cbdb 7391 <gem@rellim.com>
7392 - New URL for x11-ssh-askpass.
bcbf86ec 7393 - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble
986a22ec 7394 <jmknoble@jmknoble.cx>
bcbf86ec 7395 - Added 'DESTDIR' option to Makefile to ease package building. Patch from
986a22ec 7396 Jim Knoble <jmknoble@jmknoble.cx>
ff8ecdb8 7397 - Updated RPM spec files to use DESTDIR
bfae20ad 7398
bb58aa4b 739920000124
7400 - Pick up version 1.2.2 from OpenBSD CVS (no changes, just version number
7401 increment)
7402
d45317d8 740320000123
7404 - OpenBSD CVS:
7405 - [packet.c]
7406 getsockname() requires initialized tolen; andy@guildsoftware.com
bcbf86ec 7407 - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin
4c40f834 7408 <drankin@bohemians.lexington.ky.us>
12aa90af 7409 - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com>
d45317d8 7410
e844f761 741120000122
7412 - Fix compilation of bsd-snprintf.c on Solaris, fix from Ben Taylor
7413 <bent@clark.net>
c54a6257 7414 - Merge preformatted manpage patch from Andre Lucas
7415 <andre.lucas@dial.pipex.com>
8eb34e02 7416 - Make IPv4 use the default in RPM packages
7417 - Irix uses preformatted manpages
1e64903d 7418 - Missing htons() in bsd-bindresvport.c, fix from Holger Trapp
7419 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
9bc5ddfe 7420 - OpenBSD CVS updates:
7421 - [packet.c]
7422 use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
7423 from Holger.Trapp@Informatik.TU-Chemnitz.DE
7424 - [sshd.c]
7425 log with level log() not fatal() if peer behaves badly.
7426 - [readpass.c]
bcbf86ec 7427 instead of blocking SIGINT, catch it ourselves, so that we can clean
7428 the tty modes up and kill ourselves -- instead of our process group
61e96248 7429 leader (scp, cvs, ...) going away and leaving us in noecho mode.
9bc5ddfe 7430 people with cbreak shells never even noticed..
399d9d44 7431 - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
7432 ie. -> i.e.,
e844f761 7433
4c8ef3fb 743420000120
7435 - Don't use getaddrinfo on AIX
7b2ea3a1 7436 - Update to latest OpenBSD CVS:
7437 - [auth-rsa.c]
7438 - fix user/1056, sshd keeps restrictions; dbt@meat.net
7439 - [sshconnect.c]
7440 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
7441 - destroy keys earlier
bcbf86ec 7442 - split key exchange (kex) and user authentication (user-auth),
d468fc76 7443 ok: provos@
7b2ea3a1 7444 - [sshd.c]
7445 - no need for poll.h; from bright@wintelcom.net
7446 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
bcbf86ec 7447 - split key exchange (kex) and user authentication (user-auth),
d468fc76 7448 ok: provos@
f3bba493 7449 - Big manpage and config file cleanup from Andre Lucas
7450 <andre.lucas@dial.pipex.com>
5f4fdfae 7451 - Re-added latest (unmodified) OpenBSD manpages
47f9a56a 7452 - Doc updates
d468fc76 7453 - NetBSD patch from David Rankin <drankin@bohemians.lexington.ky.us> and
7454 Christos Zoulas <christos@netbsd.org>
4c8ef3fb 7455
082bbfb3 745620000119
20af321f 7457 - SCO compile fixes from Gary E. Miller <gem@rellim.com>
082bbfb3 7458 - Compile fix from Darren_Hall@progressive.com
59e76f33 7459 - Linux/glibc-2.1.2 takes a *long* time to look up names for AF_UNSPEC
7460 addresses using getaddrinfo(). Added a configure switch to make the
7461 default lookup mode AF_INET
082bbfb3 7462
a63a7f37 746320000118
7464 - Fixed --with-pid-dir option
51a6baf8 7465 - Makefile fix from Gary E. Miller <gem@rellim.com>
61e96248 7466 - Compile fix for HPUX and Solaris from Andre Lucas
976f7e19 7467 <andre.lucas@dial.pipex.com>
a63a7f37 7468
f914c7fb 746920000117
7470 - Clean up bsd-bindresvport.c. Use arc4random() for picking initial
7471 port, ignore EINVAL errors (Linux) when searching for free port.
bcbf86ec 7472 - Revert __snprintf -> snprintf aliasing. Apparently Solaris
de93b046 7473 __snprintf isn't. Report from Theo de Raadt <theo@cvs.openbsd.org>
9b363e1c 7474 - Document location of Redhat PAM file in INSTALL.
bcbf86ec 7475 - Fixed X11 forwarding bug on Linux. libc advertises AF_INET6
7476 INADDR_ANY_INIT addresses via getaddrinfo, but may not be able to
f4a7cf29 7477 deliver (no IPv6 kernel support)
80a44451 7478 - Released 1.2.1pre27
f914c7fb 7479
f4a7cf29 7480 - Fix rresvport_af failure errors (logic error in bsd-bindresvport.c)
bcbf86ec 7481 - Fix --with-ipaddr-display option test. Fix from Jarno Huuskonen
cf8ad170 7482 <jhuuskon@hytti.uku.fi>
bcbf86ec 7483 - Fix hang on logout if processes are still using the pty. Needs
691a8a9f 7484 further testing.
5957fd29 7485 - Patch from Christos Zoulas <christos@zoulas.com>
7486 - Try $prefix first when looking for OpenSSL.
7487 - Include sys/types.h when including sys/socket.h in test programs
bcbf86ec 7488 - Substitute PID directory in sshd.8. Suggestion from Andrew
19d9ac2a 7489 Stribblehill <a.d.stribblehill@durham.ac.uk>
f4a7cf29 7490
47e45e44 749120000116
7492 - Renamed --with-xauth-path to --with-xauth
7493 - Added --with-pid-dir option
7494 - Released 1.2.1pre26
7495
a82ef8ae 7496 - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
bcbf86ec 7497 - Fixed broken bugfix for /dev/ptmx on Linux systems which lack
66be05a1 7498 openpty(). Report from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
a82ef8ae 7499
5cdfe03f 750020000115
7501 - Add --with-xauth-path configure directive and explicit test for
bcbf86ec 7502 /usr/openwin/bin/xauth for Solaris systems. Report from Anders
5cdfe03f 7503 Nordby <anders@fix.no>
bcbf86ec 7504 - Fix incorrect detection of /dev/ptmx on Linux systems that lack
5cdfe03f 7505 openpty. Report from John Seifarth <john@waw.be>
7506 - Look for intXX_t and u_intXX_t in sys/bitypes.h if they are not in
bcbf86ec 7507 sys/types.h. Fixes problems on SCO, report from Gary E. Miller
5cdfe03f 7508 <gem@rellim.com>
7509 - Use __snprintf and __vnsprintf if they are found where snprintf and
7510 vnsprintf are lacking. Suggested by Ben Taylor <bent@shell.clark.net>
7511 and others.
7512
48e671d5 751320000114
7514 - Merged OpenBSD IPv6 patch:
7515 - [sshd.c sshd.8 sshconnect.c ssh.h ssh.c servconf.h servconf.c scp.1]
7516 [scp.c packet.h packet.c login.c log.c canohost.c channels.c]
7517 [hostfile.c sshd_config]
7518 ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new
bcbf86ec 7519 features: sshd allows multiple ListenAddress and Port options. note
7520 that libwrap is not IPv6-ready. (based on patches from
48e671d5 7521 fujiwara@rcac.tdi.co.jp)
7522 - [ssh.c canohost.c]
bcbf86ec 7523 more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo,
48e671d5 7524 from itojun@
7525 - [channels.c]
7526 listen on _all_ interfaces for X11-Fwd (hints.ai_flags = AI_PASSIVE)
7527 - [packet.h]
7528 allow auth-kerberos for IPv4 only
7529 - [scp.1 sshd.8 servconf.h scp.c]
7530 document -4, -6, and 'ssh -L 2022/::1/22'
7531 - [ssh.c]
bcbf86ec 7532 'ssh @host' is illegal (null user name), from
48e671d5 7533 karsten@gedankenpolizei.de
7534 - [sshconnect.c]
7535 better error message
7536 - [sshd.c]
7537 allow auth-kerberos for IPv4 only
7538 - Big IPv6 merge:
7539 - Cleanup overrun in sockaddr copying on RHL 6.1
7540 - Replacements for getaddrinfo, getnameinfo, etc based on versions
7541 from patch from KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>
7542 - Replacement for missing structures on systems that lack IPv6
7543 - record_login needed to know about AF_INET6 addresses
7544 - Borrowed more code from OpenBSD: rresvport_af and requisites
7545
2598df62 754620000110
7547 - Fixes to auth-skey to enable it to use the standard OpenSSL libraries
7548
b8a0310d 754920000107
7550 - New config.sub and config.guess to fix problems on SCO. Supplied
7551 by Gary E. Miller <gem@rellim.com>
b6a98a85 7552 - SCO build fix from Gary E. Miller <gem@rellim.com>
2598df62 7553 - Released 1.2.1pre25
b8a0310d 7554
dfb95100 755520000106
7556 - Documentation update & cleanup
7557 - Better KrbIV / AFS detection, based on patch from:
7558 Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
7559
b9795b89 756020000105
bcbf86ec 7561 - Fixed annoying DES corruption problem. libcrypt has been
b9795b89 7562 overriding symbols in libcrypto. Removed libcrypt and crypt.h
7563 altogether (libcrypto includes its own crypt(1) replacement)
7564 - Added platform-specific rules for Irix 6.x. Included warning that
7565 they are untested.
7566
a1ec4d79 756720000103
7568 - Add explicit make rules for files proccessed by fixpaths.
61e96248 7569 - Fix "make install" in RPM spec files. Report from Tenkou N. Hattori
a1ec4d79 7570 <tnh@kondara.org>
bcbf86ec 7571 - Removed "nullok" directive from default PAM configuration files.
7572 Added information on enabling EmptyPasswords on openssh+PAM in
607d73e6 7573 UPGRADING file.
e02735bb 7574 - OpenBSD CVS updates
7575 - [ssh-agent.c]
bcbf86ec 7576 cleanup_exit() for SIGTERM/SIGHUP, too. from fgsch@ and
e02735bb 7577 dgaudet@arctic.org
7578 - [sshconnect.c]
7579 compare correct version for 1.3 compat mode
a1ec4d79 7580
93c7f644 758120000102
7582 - Prevent multiple inclusion of config.h and defines.h. Suggested
7583 by Andre Lucas <andre.lucas@dial.pipex.com>
7584 - Properly clean up on exit of ssh-agent. Patch from Dean Gaudet
7585 <dgaudet@arctic.org>
7586
76b8607f 758719991231
bcbf86ec 7588 - Fix password support on systems with a mixture of shadowed and
7589 non-shadowed passwords (e.g. NIS). Report and fix from
76b8607f 7590 HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
bcbf86ec 7591 - Fix broken autoconf typedef detection. Report from Marc G.
723221b5 7592 Fournier <marc.fournier@acadiau.ca>
b92964b7 7593 - Fix occasional crash on LinuxPPC. Patch from Franz Sirl
7594 <Franz.Sirl-kernel@lauterbach.com>
bcbf86ec 7595 - Prevent typedefs from being compiled more than once. Report from
a6ddc88b 7596 Marc G. Fournier <marc.fournier@acadiau.ca>
4811cc0b 7597 - Fill in ut_utaddr utmp field. Report from Benjamin Charron
7598 <iretd@bigfoot.com>
bcbf86ec 7599 - Really fix broken default path. Fix from Jim Knoble
986a22ec 7600 <jmknoble@jmknoble.cx>
ae3a3d31 7601 - Remove test for quad_t. No longer needed.
76a8e733 7602 - Released 1.2.1pre24
7603
7604 - Added support for directory-based lastlogs
7605 - Really fix typedefs, patch from Ben Taylor <bent@clark.net>
76b8607f 7606
13f825f4 760719991230
7608 - OpenBSD CVS updates:
7609 - [auth-passwd.c]
7610 check for NULL 1st
bcbf86ec 7611 - Removed most of the pam code into its own file auth-pam.[ch]. This
a5c9cd31 7612 cleaned up sshd.c up significantly.
bcbf86ec 7613 - PAM authentication was incorrectly interpreting
76b8607f 7614 "PermitRootLogin without-password". Report from Matthias Andree
7615 <ma@dt.e-technik.uni-dortmund.de
a5c9cd31 7616 - Several other cleanups
0bc5b6fb 7617 - Merged Dante SOCKS support patch from David Rankin
7618 <drankin@bohemians.lexington.ky.us>
7619 - Updated documentation with ./configure options
76b8607f 7620 - Released 1.2.1pre23
13f825f4 7621
c73a0cb5 762219991229
bcbf86ec 7623 - Applied another NetBSD portability patch from David Rankin
c73a0cb5 7624 <drankin@bohemians.lexington.ky.us>
7625 - Fix --with-default-path option.
bcbf86ec 7626 - Autodetect perl, patch from David Rankin
a0f84251 7627 <drankin@bohemians.lexington.ky.us>
bcbf86ec 7628 - Print whether OpenSSH was compiled with RSARef, patch from
0a2ff95d 7629 Nalin Dahyabhai <nalin@thermo.stat.ncsu.edu>
bcbf86ec 7630 - Calls to pam_setcred, patch from Nalin Dahyabhai
f91bacbd 7631 <nalin@thermo.stat.ncsu.edu>
e3a93db0 7632 - Detect missing size_t and typedef it.
5ab44a92 7633 - Rename helper.[ch] to (more appropriate) bsd-misc.[ch]
7634 - Minor Makefile cleaning
c73a0cb5 7635
b6019d68 763619991228
7637 - Replacement for getpagesize() for systems which lack it
bcbf86ec 7638 - NetBSD login.c compile fix from David Rankin
70e0115b 7639 <drankin@bohemians.lexington.ky.us>
7640 - Fully set ut_tv if present in utmp or utmpx
d94aa2ae 7641 - Portability fixes for Irix 5.3 (now compiles OK!)
7642 - autoconf and other misc cleanups
ea1970a3 7643 - Merged AIX patch from Darren Hall <dhall@virage.org>
7644 - Cleaned up defines.h
fa9a2dd6 7645 - Released 1.2.1pre22
b6019d68 7646
d2dcff5f 764719991227
7648 - Automatically correct paths in manpages and configuration files. Patch
7649 and script from Andre Lucas <andre.lucas@dial.pipex.com>
7650 - Removed credits from README to CREDITS file, updated.
cb807f40 7651 - Added --with-default-path to specify custom path for server
7652 - Removed #ifdef trickery from acconfig.h into defines.h
36a5b38e 7653 - PAM bugfix. PermitEmptyPassword was being ignored.
7654 - Fixed PAM config files to allow empty passwords if server does.
7655 - Explained spurious PAM auth warning workaround in UPGRADING
21feb5fa 7656 - Use last few chars of tty line as ut_id
5a7794be 7657 - New SuSE RPM spec file from Chris Saia <csaia@wtower.com>
00e6dd70 7658 - OpenBSD CVS updates:
7659 - [packet.h auth-rhosts.c]
7660 check format string for packet_disconnect and packet_send_debug, too
7661 - [channels.c]
7662 use packet_get_maxsize for channels. consistence.
d2dcff5f 7663
f74efc8d 766419991226
7665 - Enabled utmpx support by default for Solaris
7666 - Cleanup sshd.c PAM a little more
986a22ec 7667 - Revised RPM package to include Jim Knoble's <jmknoble@jmknoble.cx>
bc7ea646 7668 X11 ssh-askpass program.
20c43d8c 7669 - Disable logging of PAM success and failures, PAM is verbose enough.
bcbf86ec 7670 Unfortunatly there is currently no way to disable auth failure
7671 messages. Mention this in UPGRADING file and sent message to PAM
20c43d8c 7672 developers
83b7f649 7673 - OpenBSD CVS update:
7674 - [ssh-keygen.1 ssh.1]
bcbf86ec 7675 remove ref to .ssh/random_seed, mention .ssh/environment in
83b7f649 7676 .Sh FILES, too
72251cb6 7677 - Released 1.2.1pre21
bcbf86ec 7678 - Fixed implicit '.' in default path, report from Jim Knoble
986a22ec 7679 <jmknoble@jmknoble.cx>
7680 - Redhat RPM spec fixes from Jim Knoble <jmknoble@jmknoble.cx>
f74efc8d 7681
f498ed15 768219991225
7683 - More fixes from Andre Lucas <andre.lucas@dial.pipex.com>
7684 - Cleanup of auth-passwd.c for shadow and MD5 passwords
7685 - Cleanup and bugfix of PAM authentication code
f74efc8d 7686 - Released 1.2.1pre20
7687
7688 - Merged fixes from Ben Taylor <bent@clark.net>
7689 - Fixed configure support for PAM. Reported by Naz <96na@eng.cam.ac.uk>
7690 - Disabled logging of PAM password authentication failures when password
7691 is empty. (e.g start of authentication loop). Reported by Naz
7692 <96na@eng.cam.ac.uk>)
f498ed15 7693
769419991223
bcbf86ec 7695 - Merged later HPUX patch from Andre Lucas
f498ed15 7696 <andre.lucas@dial.pipex.com>
7697 - Above patch included better utmpx support from Ben Taylor
f74efc8d 7698 <bent@clark.net>
f498ed15 7699
eef6f7e9 770019991222
bcbf86ec 7701 - Fix undefined fd_set type in ssh.h from Povl H. Pedersen
eef6f7e9 7702 <pope@netguide.dk>
ae28776a 7703 - Fix login.c breakage on systems which lack ut_host in struct
7704 utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com>
eef6f7e9 7705
a7effaac 770619991221
bcbf86ec 7707 - Integration of large HPUX patch from Andre Lucas
7708 <andre.lucas@dial.pipex.com>. Integrating it had a few other
a7effaac 7709 benefits:
7710 - Ability to disable shadow passwords at configure time
7711 - Ability to disable lastlog support at configure time
7712 - Support for IP address in $DISPLAY
ae2f7af7 7713 - OpenBSD CVS update:
7714 - [sshconnect.c]
7715 say "REMOTE HOST IDENTIFICATION HAS CHANGED"
59dd7a31 7716 - Fix DISABLE_SHADOW support
7717 - Allow MD5 passwords even if shadow passwords are disabled
16034de9 7718 - Release 1.2.1pre19
a7effaac 7719
3f1d9bcd 772019991218
bcbf86ec 7721 - Redhat init script patch from Chun-Chung Chen
3f1d9bcd 7722 <cjj@u.washington.edu>
7e1c2490 7723 - Avoid breakage on systems without IPv6 headers
3f1d9bcd 7724
60d804c8 772519991216
bcbf86ec 7726 - Makefile changes for Solaris from Peter Kocks
60d804c8 7727 <peter.kocks@baygate.com>
89cafde6 7728 - Minor updates to docs
7729 - Merged OpenBSD CVS changes:
7730 - [authfd.c ssh-agent.c]
7731 keysize warnings talk about identity files
7732 - [packet.c]
7733 "Connection closed by x.x.x.x": fatal() -> log()
bcbf86ec 7734 - Correctly handle empty passwords in shadow file. Patch from:
c9d323f0 7735 "Chris, the Young One" <cky@pobox.com>
7736 - Released 1.2.1pre18
60d804c8 7737
7dc6fc6d 773819991215
7739 - Integrated patchs from Juergen Keil <jk@tools.de>
7740 - Avoid void* pointer arithmatic
7741 - Use LDFLAGS correctly
68227e6d 7742 - Fix SIGIO error in scp
7743 - Simplify status line printing in scp
61e96248 7744 - Added better test for inline functions compiler support from
906a2515 7745 Darren_Hall@progressive.com
7dc6fc6d 7746
95f1eccc 774719991214
7748 - OpenBSD CVS Changes
7749 - [canohost.c]
bcbf86ec 7750 fix get_remote_port() and friends for sshd -i;
95f1eccc 7751 Holger.Trapp@Informatik.TU-Chemnitz.DE
7752 - [mpaux.c]
7753 make code simpler. no need for memcpy. niels@ ok
7754 - [pty.c]
7755 namebuflen not sizeof namebuflen; bnd@ep-ag.com via djm@mindrot.org
7756 fix proto; markus
7757 - [ssh.1]
7758 typo; mark.baushke@solipsa.com
7759 - [channels.c ssh.c ssh.h sshd.c]
7760 type conflict for 'extern Type *options' in channels.c; dot@dotat.at
7761 - [sshconnect.c]
7762 move checking of hostkey into own function.
7763 - [version.h]
7764 OpenSSH-1.2.1
884bcb37 7765 - Clean up broken includes in pty.c
7303768f 7766 - Some older systems don't have poll.h, they use sys/poll.h instead
7767 - Doc updates
95f1eccc 7768
847e8865 776919991211
bcbf86ec 7770 - Fix compilation on systems with AFS. Reported by
847e8865 7771 aloomis@glue.umd.edu
bcbf86ec 7772 - Fix installation on Solaris. Reported by
847e8865 7773 Gordon Rowell <gordonr@gormand.com.au>
7774 - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com,
7775 patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
7776 - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com>
7777 - Compile fix from David Agraz <dagraz@jahoopa.com>
7778 - Avoid compiler warning in bsd-snprintf.c
bcbf86ec 7779 - Added pam_limits.so to default PAM config. Suggested by
986a22ec 7780 Jim Knoble <jmknoble@jmknoble.cx>
847e8865 7781
8946db53 778219991209
7783 - Import of patch from Ben Taylor <bent@clark.net>:
7784 - Improved PAM support
7785 - "uninstall" rule for Makefile
7786 - utmpx support
7787 - Should fix PAM problems on Solaris
2d86a6cc 7788 - OpenBSD CVS updates:
7789 - [readpass.c]
7790 avoid stdio; based on work by markus, millert, and I
7791 - [sshd.c]
7792 make sure the client selects a supported cipher
7793 - [sshd.c]
bcbf86ec 7794 fix sighup handling. accept would just restart and daemon handled
7795 sighup only after the next connection was accepted. use poll on
2d86a6cc 7796 listen sock now.
7797 - [sshd.c]
7798 make that a fatal
87e91331 7799 - Applied patch from David Rankin <drankin@bohemians.lexington.ky.us>
7800 to fix libwrap support on NetBSD
5001b9e4 7801 - Released 1.2pre17
8946db53 7802
6d8c4ea4 780319991208
bcbf86ec 7804 - Compile fix for Solaris with /dev/ptmx from
6d8c4ea4 7805 David Agraz <dagraz@jahoopa.com>
7806
4285816a 780719991207
986a22ec 7808 - sshd Redhat init script patch from Jim Knoble <jmknoble@jmknoble.cx>
4285816a 7809 fixes compatability with 4.x and 5.x
db28aeb5 7810 - Fixed default SSH_ASKPASS
bcbf86ec 7811 - Fix PAM account and session being called multiple times. Problem
d465f2ca 7812 reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>
a408af76 7813 - Merged more OpenBSD changes:
7814 - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c]
bcbf86ec 7815 move atomicio into it's own file. wrap all socket write()s which
a408af76 7816 were doing write(sock, buf, len) != len, with atomicio() calls.
7817 - [auth-skey.c]
7818 fd leak
7819 - [authfile.c]
7820 properly name fd variable
7821 - [channels.c]
7822 display great hatred towards strcpy
7823 - [pty.c pty.h sshd.c]
7824 use openpty() if it exists (it does on BSD4_4)
7825 - [tildexpand.c]
7826 check for ~ expansion past MAXPATHLEN
7827 - Modified helper.c to use new atomicio function.
7828 - Reformat Makefile a little
7829 - Moved RC4 routines from rc4.[ch] into helper.c
7830 - Added autoconf code to detect /dev/ptmx (Solaris) and /dev/ptc (AIX)
9983a8ca 7831 - Updated SuSE spec from Chris Saia <csaia@wtower.com>
7832 - Tweaked Redhat spec
9158d92f 7833 - Clean up bad imports of a few files (forgot -kb)
7834 - Released 1.2pre16
4285816a 7835
9c7b6dfd 783619991204
7837 - Small cleanup of PAM code in sshd.c
57112b5a 7838 - Merged OpenBSD CVS changes:
7839 - [auth-krb4.c auth-passwd.c auth-skey.c ssh.h]
7840 move skey-auth from auth-passwd.c to auth-skey.c, same for krb4
7841 - [auth-rsa.c]
7842 warn only about mismatch if key is _used_
7843 warn about keysize-mismatch with log() not error()
7844 channels.c readconf.c readconf.h ssh.c ssh.h sshconnect.c
7845 ports are u_short
7846 - [hostfile.c]
7847 indent, shorter warning
7848 - [nchan.c]
7849 use error() for internal errors
7850 - [packet.c]
7851 set loglevel for SSH_MSG_DISCONNECT to log(), not fatal()
7852 serverloop.c
7853 indent
7854 - [ssh-add.1 ssh-add.c ssh.h]
7855 document $SSH_ASKPASS, reasonable default
7856 - [ssh.1]
7857 CheckHostIP is not available for connects via proxy command
7858 - [sshconnect.c]
7859 typo
7860 easier to read client code for passwd and skey auth
7861 turn of checkhostip for proxy connects, since we don't know the remote ip
9c7b6dfd 7862
dad3b556 786319991126
7864 - Add definition for __P()
7865 - Added [v]snprintf() replacement for systems that lack it
7866
0ce43ae4 786719991125
7868 - More reformatting merged from OpenBSD CVS
7869 - Merged OpenBSD CVS changes:
7870 - [channels.c]
7871 fix packet_integrity_check() for !have_hostname_in_open.
7872 report from mrwizard@psu.edu via djm@ibs.com.au
7873 - [channels.c]
7874 set SO_REUSEADDR and SO_LINGER for forwarded ports.
7875 chip@valinux.com via damien@ibs.com.au
7876 - [nchan.c]
7877 it's not an error() if shutdown_write failes in nchan.
7878 - [readconf.c]
7879 remove dead #ifdef-0-code
7880 - [readconf.c servconf.c]
7881 strcasecmp instead of tolower
7882 - [scp.c]
7883 progress meter overflow fix from damien@ibs.com.au
7884 - [ssh-add.1 ssh-add.c]
7885 SSH_ASKPASS support
7886 - [ssh.1 ssh.c]
7887 postpone fork_after_authentication until command execution,
7888 request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
7889 plus: use daemon() for backgrounding
cf8dd513 7890 - Added BSD compatible install program and autoconf test, thanks to
7891 Niels Kristian Bech Jensen <nkbj@image.dk>
7892 - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
09041313 7893 - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
3dbefdb8 7894 - Release 1.2pre15
0ce43ae4 7895
5260325f 789619991124
7897 - Merged very large OpenBSD source code reformat
7898 - OpenBSD CVS updates
7899 - [channels.c cipher.c compat.c log-client.c scp.c serverloop.c]
7900 [ssh.h sshd.8 sshd.c]
7901 syslog changes:
7902 * Unified Logmessage for all auth-types, for success and for failed
7903 * Standard connections get only ONE line in the LOG when level==LOG:
7904 Auth-attempts are logged only, if authentication is:
7905 a) successfull or
7906 b) with passwd or
7907 c) we had more than AUTH_FAIL_LOG failues
7908 * many log() became verbose()
7909 * old behaviour with level=VERBOSE
7910 - [readconf.c readconf.h ssh.1 ssh.h sshconnect.c sshd.c]
7911 tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
7912 messages. allows use of s/key in windows (ttssh, securecrt) and
7913 ssh-1.2.27 clients without 'ssh -v', ok: niels@
7914 - [sshd.8]
7915 -V, for fallback to openssh in SSH2 compatibility mode
7916 - [sshd.c]
7917 fix sigchld race; cjc5@po.cwru.edu
7918
4655fe80 791919991123
7920 - Added SuSE package files from Chris Saia <csaia@wtower.com>
8b241e50 7921 - Restructured package-related files under packages/*
4655fe80 7922 - Added generic PAM config
8b241e50 7923 - Numerous little Solaris fixes
9c08d6ce 7924 - Add recommendation to use GNU make to INSTALL document
4655fe80 7925
60bed5fd 792619991122
7927 - Make <enter> close gnome-ssh-askpass (Debian bug #50299)
2f2cc3f9 7928 - OpenBSD CVS Changes
bcbf86ec 7929 - [ssh-keygen.c]
7930 don't create ~/.ssh only if the user wants to store the private
7931 key there. show fingerprint instead of public-key after
2f2cc3f9 7932 keygeneration. ok niels@
b09a984b 7933 - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h
96ad4350 7934 - Added timersub() macro
b09a984b 7935 - Tidy RCSIDs of bsd-*.c
bcbf86ec 7936 - Added autoconf test and macro to deal with old PAM libraries
96ad4350 7937 pam_strerror definition (one arg vs two).
530f1889 7938 - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>)
bcbf86ec 7939 - Retry /dev/urandom reads interrupted by signal (report from
530f1889 7940 Robert Hardy <rhardy@webcon.net>)
1647c2b5 7941 - Added a setenv replacement for systems which lack it
d84a9a44 7942 - Only display public key comment when presenting ssh-askpass dialog
7943 - Released 1.2pre14
60bed5fd 7944
bcbf86ec 7945 - Configure, Make and changelog corrections from Tudor Bosman
2ddcfdf3 7946 <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk>
7947
9d6b7add 794819991121
2f2cc3f9 7949 - OpenBSD CVS Changes:
60bed5fd 7950 - [channels.c]
7951 make this compile, bad markus
7952 - [log.c readconf.c servconf.c ssh.h]
7953 bugfix: loglevels are per host in clientconfig,
7954 factor out common log-level parsing code.
7955 - [servconf.c]
7956 remove unused index (-Wall)
7957 - [ssh-agent.c]
7958 only one 'extern char *__progname'
7959 - [sshd.8]
7960 document SIGHUP, -Q to synopsis
7961 - [sshconnect.c serverloop.c sshd.c packet.c packet.h]
7962 [channels.c clientloop.c]
7963 SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
7964 [hope this time my ISP stays alive during commit]
7965 - [OVERVIEW README] typos; green@freebsd
7966 - [ssh-keygen.c]
7967 replace xstrdup+strcat with strlcat+fixed buffer, fixes OF (bad me)
7968 exit if writing the key fails (no infinit loop)
7969 print usage() everytime we get bad options
7970 - [ssh-keygen.c] overflow, djm@mindrot.org
7971 - [sshd.c] fix sigchld race; cjc5@po.cwru.edu
61e96248 7972
2b942fe0 797319991120
bcbf86ec 7974 - Merged more Solaris support from Marc G. Fournier
2b942fe0 7975 <marc.fournier@acadiau.ca>
7976 - Wrote autoconf tests for integer bit-types
7977 - Fixed enabling kerberos support
bcbf86ec 7978 - Fix segfault in ssh-keygen caused by buffer overrun in filename
13c36c4c 7979 handling.
2b942fe0 7980
06479889 798119991119
7982 - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>
2ad77510 7983 - Merged OpenBSD CVS changes
7984 - [auth-rhosts.c auth-rsa.c ssh-agent.c sshconnect.c sshd.c]
7985 more %d vs. %s in fmt-strings
7986 - [authfd.c]
7987 Integers should not be printed with %s
7b1cc56c 7988 - EGD uses a socket, not a named pipe. Duh.
7989 - Fix includes in fingerprint.c
29dbde15 7990 - Fix scp progress bar bug again.
bcbf86ec 7991 - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of
736890c4 7992 David Rankin <drankin@bohemians.lexington.ky.us>
91b8065d 7993 - Added autoconf option to enable Kerberos 4 support (untested)
7994 - Added autoconf option to enable AFS support (untested)
7995 - Added autoconf option to enable S/Key support (untested)
7996 - Added autoconf option to enable TCP wrappers support (compiles OK)
beb43d31 7997 - Renamed BSD helper function files to bsd-*
bcbf86ec 7998 - Added tests for login and daemon and enable OpenBSD replacements for
caf3bc51 7999 when they are absent.
8000 - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu>
06479889 8001
2bd61362 800219991118
8003 - Merged OpenBSD CVS changes
8004 - [scp.c] foregroundproc() in scp
8005 - [sshconnect.h] include fingerprint.h
bcbf86ec 8006 - [sshd.c] bugfix: the log() for passwd-auth escaped during logging
2bd61362 8007 changes.
0c16a097 8008 - [ssh.1] Spell my name right.
2bd61362 8009 - Added openssh.com info to README
8010
f095fcc7 801119991117
8012 - Merged OpenBSD CVS changes
8013 - [ChangeLog.Ylonen] noone needs this anymore
8014 - [authfd.c] close-on-exec for auth-socket, ok deraadt
bcbf86ec 8015 - [hostfile.c]
8016 in known_hosts key lookup the entry for the bits does not need
8017 to match, all the information is contained in n and e. This
8018 solves the problem with buggy servers announcing the wrong
f095fcc7 8019 modulus length. markus and me.
bcbf86ec 8020 - [serverloop.c]
8021 bugfix: check for space if child has terminated, from:
f095fcc7 8022 iedowse@maths.tcd.ie
8023 - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c]
8024 [fingerprint.c fingerprint.h]
8025 rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>
8026 - [ssh-agent.1] typo
8027 - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@
bcbf86ec 8028 - [sshd.c]
f095fcc7 8029 force logging to stderr while loading private key file
8030 (lost while converting to new log-levels)
8031
4d195447 803219991116
8033 - Fix some Linux libc5 problems reported by Miles Wilson <mw@mctitle.com>
8034 - Merged OpenBSD CVS changes:
8035 - [auth-rh-rsa.c auth-rsa.c authfd.c authfd.h hostfile.c mpaux.c]
8036 [mpaux.h ssh-add.c ssh-agent.c ssh.h ssh.c sshd.c]
8037 the keysize of rsa-parameter 'n' is passed implizit,
8038 a few more checks and warnings about 'pretended' keysizes.
8039 - [cipher.c cipher.h packet.c packet.h sshd.c]
8040 remove support for cipher RC4
8041 - [ssh.c]
8042 a note for legay systems about secuity issues with permanently_set_uid(),
8043 the private hostkey and ptrace()
8044 - [sshconnect.c]
8045 more detailed messages about adding and checking hostkeys
8046
dad9a31e 804719991115
8048 - Merged OpenBSD CVS changes:
bcbf86ec 8049 - [ssh-add.c] change passphrase loop logic and remove ref to
dad9a31e 8050 $DISPLAY, ok niels
8051 - Changed to ssh-add.c broke askpass support. Revised it to be a little more
bcbf86ec 8052 modular.
dad9a31e 8053 - Revised autoconf support for enabling/disabling askpass support.
e7c0f9d5 8054 - Merged more OpenBSD CVS changes:
704b1659 8055 [auth-krb4.c]
8056 - disconnect if getpeername() fails
8057 - missing xfree(*client)
8058 [canohost.c]
8059 - disconnect if getpeername() fails
8060 - fix comment: we _do_ disconnect if ip-options are set
8061 [sshd.c]
8062 - disconnect if getpeername() fails
8063 - move checking of remote port to central place
8064 [auth-rhosts.c] move checking of remote port to central place
8065 [log-server.c] avoid extra fd per sshd, from millert@
8066 [readconf.c] print _all_ bad config-options in ssh(1), too
8067 [readconf.h] print _all_ bad config-options in ssh(1), too
8068 [ssh.c] print _all_ bad config-options in ssh(1), too
8069 [sshconnect.c] disconnect if getpeername() fails
e7c0f9d5 8070 - OpenBSD's changes to sshd.c broke the PAM stuff, re-merged it.
c75a1a66 8071 - Various small cleanups to bring diff (against OpenBSD) size down.
f601d847 8072 - Merged more Solaris compability from Marc G. Fournier
8073 <marc.fournier@acadiau.ca>
8074 - Wrote autoconf tests for __progname symbol
986a22ec 8075 - RPM spec file fixes from Jim Knoble <jmknoble@jmknoble.cx>
0c372277 8076 - Released 1.2pre12
8077
8078 - Another OpenBSD CVS update:
8079 - [ssh-keygen.1] fix .Xr
dad9a31e 8080
92da7197 808119991114
8082 - Solaris compilation fixes (still imcomplete)
8083
94f7bb9e 808419991113
dd092f97 8085 - Build patch from Niels Kristian Bech Jensen <nkbj@image.dk>
8086 - Don't install config files if they already exist
8087 - Fix inclusion of additional preprocessor directives from acconfig.h
94f7bb9e 8088 - Removed redundant inclusions of config.h
e9c75a39 8089 - Added 'Obsoletes' lines to RPM spec file
94f7bb9e 8090 - Merged OpenBSD CVS changes:
8091 - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels
bcbf86ec 8092 - [scp.c] fix overflow reported by damien@ibs.com.au: off_t
94f7bb9e 8093 totalsize, ok niels,aaron
bcbf86ec 8094 - Delay fork (-f option) in ssh until after port forwarded connections
94f7bb9e 8095 have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi>
b2344d54 8096 - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de>
8097 - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled
dd092f97 8098 - Tidied default config file some more
8099 - Revised Redhat initscript to fix bug: sshd (re)start would fail
8100 if executed from inside a ssh login.
94f7bb9e 8101
e35c1dc2 810219991112
8103 - Merged changes from OpenBSD CVS
8104 - [sshd.c] session_key_int may be zero
b4748e2f 8105 - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config]
bcbf86ec 8106 IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok
b4748e2f 8107 deraadt,millert
8108 - Brought default sshd_config more in line with OpenBSD's
547c9f30 8109 - Grab server in gnome-ssh-askpass (Debian bug #49872)
8110 - Released 1.2pre10
e35c1dc2 8111
8bc7973f 8112 - Added INSTALL documentation
6fa724bc 8113 - Merged yet more changes from OpenBSD CVS
8114 - [auth-rh-rsa.c auth-rhosts.c auth-rsa.c channels.c clientloop.c]
8115 [ssh.c ssh.h sshconnect.c sshd.c]
8116 make all access to options via 'extern Options options'
8117 and 'extern ServerOptions options' respectively;
8118 options are no longer passed as arguments:
8119 * make options handling more consistent
8120 * remove #include "readconf.h" from ssh.h
8121 * readconf.h is only included if necessary
8122 - [mpaux.c] clear temp buffer
8123 - [servconf.c] print _all_ bad options found in configfile
045672f9 8124 - Make ssh-askpass support optional through autoconf
59b0f0d4 8125 - Fix nasty division-by-zero error in scp.c
8126 - Released 1.2pre11
8bc7973f 8127
4cca272e 812819991111
8129 - Added (untested) Entropy Gathering Daemon (EGD) support
67d68e3a 8130 - Fixed /dev/urandom fd leak (Debian bug #49722)
5bbb5681 8131 - Merged OpenBSD CVS changes:
8132 - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
8133 - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
8134 - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
bcbf86ec 8135 - Fix integer overflow which was messing up scp's progress bar for large
3f1d9bcd 8136 file transfers. Fix submitted to OpenBSD developers. Report and fix
8137 from Kees Cook <cook@cpoint.net>
6a17f9c2 8138 - Merged more OpenBSD CVS changes:
bcbf86ec 8139 - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal()
6a17f9c2 8140 + krb-cleanup cleanup
8141 - [clientloop.c log-client.c log-server.c ]
8142 [readconf.c readconf.h servconf.c servconf.h ]
8143 [ssh.1 ssh.c ssh.h sshd.8]
8144 add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
8145 obsoletes QuietMode and FascistLogging in sshd.
e35c1dc2 8146 - [sshd.c] fix fatal/assert() bug reported by damien@ibs.com.au:
8147 allow session_key_int != sizeof(session_key)
8148 [this should fix the pre-assert-removal-core-files]
8149 - Updated default config file to use new LogLevel option and to improve
8150 readability
8151
f370266e 815219991110
67d68e3a 8153 - Merged several minor fixes:
f370266e 8154 - ssh-agent commandline parsing
8155 - RPM spec file now installs ssh setuid root
8156 - Makefile creates libdir
4cca272e 8157 - Merged beginnings of Solaris compability from Marc G. Fournier
8158 <marc.fournier@acadiau.ca>
f370266e 8159
d4f11b59 816019991109
8161 - Autodetection of SSL/Crypto library location via autoconf
8162 - Fixed location of ssh-askpass to follow autoconf
8163 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
8164 - Autodetection of RSAref library for US users
8165 - Minor doc updates
560557bb 8166 - Merged OpenBSD CVS changes:
8167 - [rsa.c] bugfix: use correct size for memset()
8168 - [sshconnect.c] warn if announced size of modulus 'n' != real size
f025becb 8169 - Added GNOME passphrase requestor (use --with-gnome-askpass)
d397b172 8170 - RPM build now creates subpackages
aa51e7cc 8171 - Released 1.2pre9
d4f11b59 8172
e1a9c08d 817319991108
8174 - Removed debian/ directory. This is now being maintained separately.
8175 - Added symlinks for slogin in RPM spec file
8176 - Fixed permissions on manpages in RPM spec file
8177 - Added references to required libraries in README file
8178 - Removed config.h.in from CVS
8179 - Removed pwdb support (better pluggable auth is provided by glibc)
8180 - Made PAM and requisite libdl optional
8181 - Removed lots of unnecessary checks from autoconf
8182 - Added support and autoconf test for openpty() function (Unix98 pty support)
8183 - Fix for scp not finding ssh if not installed as /usr/bin/ssh
8184 - Added TODO file
8185 - Merged parts of Debian patch From Phil Hands <phil@hands.com>:
8186 - Added ssh-askpass program
8187 - Added ssh-askpass support to ssh-add.c
8188 - Create symlinks for slogin on install
8189 - Fix "distclean" target in makefile
8190 - Added example for ssh-agent to manpage
8191 - Added support for PAM_TEXT_INFO messages
8192 - Disable internal /etc/nologin support if PAM enabled
8193 - Merged latest OpenBSD CVS changes:
5bae4ab8 8194 - [all] replace assert() with error, fatal or packet_disconnect
e1a9c08d 8195 - [sshd.c] don't send fail-msg but disconnect if too many authentication
8196 failures
e1a9c08d 8197 - [sshd.c] remove unused argument. ok dugsong
8198 - [sshd.c] typo
8199 - [rsa.c] clear buffers used for encryption. ok: niels
8200 - [rsa.c] replace assert() with error, fatal or packet_disconnect
ade6fccd 8201 - [auth-krb4.c] remove unused argument. ok dugsong
e1a9c08d 8202 - Fixed coredump after merge of OpenBSD rsa.c patch
9010d60a 8203 - Released 1.2pre8
e1a9c08d 8204
3028328e 820519991102
8206 - Merged change from OpenBSD CVS
8207 - One-line cleanup in sshd.c
8208
474832c5 820919991030
8210 - Integrated debian package support from Dan Brosemer <odin@linuxfreak.com>
69256d9d 8211 - Merged latest updates for OpenBSD CVS:
8212 - channels.[ch] - remove broken x11 fix and document istate/ostate
8213 - ssh-agent.c - call setsid() regardless of argv[]
8214 - ssh.c - save a few lines when disabling rhosts-{rsa-}auth
8215 - Documentation cleanups
8216 - Renamed README -> README.Ylonen
8217 - Renamed README.openssh ->README
474832c5 8218
339660f6 821919991029
8220 - Renamed openssh* back to ssh* at request of Theo de Raadt
8221 - Incorporated latest changes from OpenBSD's CVS
8222 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
8223 - Integrated PAM env patch from Nalin Dahyabhai <nalin.dahyabhai@pobox.com>
549b3eed 8224 - Make distclean now removed configure script
8225 - Improved PAM logging
8226 - Added some debug() calls for PAM
4ecd19ea 8227 - Removed redundant subdirectories
bcbf86ec 8228 - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for
4ecd19ea 8229 building on Debian.
242588e6 8230 - Fixed off-by-one error in PAM env patch
8231 - Released 1.2pre6
339660f6 8232
5881cd60 823319991028
8234 - Further PAM enhancements.
8235 - Much cleaner
8236 - Now uses account and session modules for all logins.
8237 - Integrated patch from Dan Brosemer <odin@linuxfreak.com>
8238 - Build fixes
8239 - Autoconf
8240 - Change binary names to open*
8241 - Fixed autoconf script to detect PAM on RH6.1
8242 - Added tests for libpwdb, and OpenBSD functions to autoconf
221395b3 8243 - Released 1.2pre4
fca82d2e 8244
8245 - Imported latest OpenBSD CVS code
8246 - Updated README.openssh
93f04616 8247 - Released 1.2pre5
fca82d2e 8248
5881cd60 824919991027
8250 - Adapted PAM patch.
8251 - Released 1.0pre2
8252
8253 - Excised my buggy replacements for strlcpy and mkdtemp
8254 - Imported correct OpenBSD strlcpy and mkdtemp routines.
8255 - Reduced arc4random_stir entropy read to 32 bytes (256 bits)
8256 - Picked up correct version number from OpenBSD
8257 - Added sshd.pam PAM configuration file
8258 - Added sshd.init Redhat init script
8259 - Added openssh.spec RPM spec file
8260 - Released 1.2pre3
8261
826219991026
8263 - Fixed include paths of OpenSSL functions
8264 - Use OpenSSL MD5 routines
8265 - Imported RC4 code from nanocrypt
8266 - Wrote replacements for OpenBSD arc4random* functions
8267 - Wrote replacements for strlcpy and mkdtemp
8268 - Released 1.0pre1
0b202697 8269
8270$Id$
git-cvsimport mirror of OpenSSH
This page took 4.867403 seconds and 5 git commands to generate.