]> andersk Git - openssh.git/blame - ChangeLog
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- markus@cvs.openbsd.org 2002/02/11 16:21:42
[openssh.git] / ChangeLog
CommitLineData
9d726f16 120010213
2 - (djm) OpenBSD CVS Sync
3 - markus@cvs.openbsd.org 2002/02/11 16:10:15
4 [kex.c]
5 restore kexinit handler if we reset the dispatcher, this unbreaks
6 rekeying s/kex_clear_dispatch/kex_reset_dispatch/
6b4b5e49 7 - markus@cvs.openbsd.org 2002/02/11 16:15:46
8 [sshconnect1.c]
9 include md5.h, not evp.h
44b1a8e5 10 - markus@cvs.openbsd.org 2002/02/11 16:17:55
11 [sshd.c]
12 do not complain about port > 1024 if rhosts-auth is disabled
436c347c 13 - markus@cvs.openbsd.org 2002/02/11 16:19:39
14 [sshd.c]
15 include md5.h not hmac.h
fa869228 16 - markus@cvs.openbsd.org 2002/02/11 16:21:42
17 [match.c]
18 support up to 40 algorithms per proposal
9d726f16 19
2a8a6488 2020020210
21 - (djm) OpenBSD CVS Sync
22 - deraadt@cvs.openbsd.org 2002/02/09 17:37:34
23 [pathnames.h session.c ssh.1 sshd.8 sshd_config ssh-keyscan.1]
24 move ssh config files to /etc/ssh
25 - (djm) Adjust portable Makefile.in tnd ssh-rand-helper.c o match
af98ced9 26 - deraadt@cvs.openbsd.org 2002/02/10 01:07:05
27 [readconf.h sshd.8]
28 more /etc/ssh; openbsd@davidkrause.com
2a8a6488 29
980c9344 3020020208
31 - (djm) OpenBSD CVS Sync
32 - markus@cvs.openbsd.org 2002/02/04 12:15:25
33 [sshd.c]
34 add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1,
35 fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@
4c646df4 36 - stevesk@cvs.openbsd.org 2002/02/04 20:41:16
37 [ssh-agent.1]
38 more sync for default ssh-add identities; ok markus@
375f867e 39 - djm@cvs.openbsd.org 2002/02/05 00:00:46
40 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c]
41 Add "-B" option to specify copy buffer length (default 32k); ok markus@
06ee33fb 42 - markus@cvs.openbsd.org 2002/02/05 14:32:55
43 [channels.c channels.h ssh.c]
44 merge channel_request() into channel_request_start()
7d5e8c46 45 - markus@cvs.openbsd.org 2002/02/06 14:22:42
46 [sftp.1]
47 sort options; ok mpech@, stevesk@
22be05a5 48 - mpech@cvs.openbsd.org 2002/02/06 14:27:23
49 [sftp.c]
50 sync usage() with manual.
5a4ae906 51 - markus@cvs.openbsd.org 2002/02/06 14:37:22
52 [session.c]
53 minor KNF
3a0d3d54 54 - markus@cvs.openbsd.org 2002/02/06 14:55:16
55 [channels.c clientloop.c serverloop.c ssh.c]
56 channel_new never returns NULL, mouring@; ok djm@
275a87f6 57 - markus@cvs.openbsd.org 2002/02/07 09:35:39
58 [ssh.c]
59 remove bogus comments
980c9344 60
bcc0381e 6120020205
983784a1 62 - (djm) Cleanup after sync:
63 - :%s/reverse_mapping_check/verify_reverse_mapping/g
bcc0381e 64 - (djm) OpenBSD CVS Sync
65 - stevesk@cvs.openbsd.org 2002/01/24 21:09:25
66 [channels.c misc.c misc.h packet.c]
67 add set_nodelay() to set TCP_NODELAY on a socket (prep for nagle tuning).
68 no nagle changes just yet; ok djm@ markus@
2ac91be1 69 - stevesk@cvs.openbsd.org 2002/01/24 21:13:23
70 [packet.c]
71 need misc.h for set_nodelay()
7d30579d 72 - markus@cvs.openbsd.org 2002/01/25 21:00:24
73 [sshconnect2.c]
74 unused include
087dea86 75 - markus@cvs.openbsd.org 2002/01/25 21:42:11
76 [ssh-dss.c ssh-rsa.c]
77 use static EVP_MAX_MD_SIZE buffers for EVP_DigestFinal; ok stevesk@
78 don't use evp_md->md_size, it's not public.
a209a158 79 - markus@cvs.openbsd.org 2002/01/25 22:07:40
80 [kex.c kexdh.c kexgex.c key.c mac.c]
81 use EVP_MD_size(evp_md) and not evp_md->md_size; ok steveks@
f9314d9a 82 - stevesk@cvs.openbsd.org 2002/01/26 16:44:22
83 [includes.h session.c]
84 revert code to add x11 localhost display authorization entry for
85 hostname/unix:d and uts.nodename/unix:d if nodename was different than
86 hostname. just add entry for unix:d instead. ok markus@
e6e573bd 87 - stevesk@cvs.openbsd.org 2002/01/27 14:57:46
88 [channels.c servconf.c servconf.h session.c sshd.8 sshd_config]
89 add X11UseLocalhost; ok markus@
75a624f0 90 - stevesk@cvs.openbsd.org 2002/01/27 18:08:17
91 [ssh.c]
92 handle simple case to identify FamilyLocal display; ok markus@
a2863956 93 - markus@cvs.openbsd.org 2002/01/29 14:27:57
94 [ssh-add.c]
95 exit 2 if no agent, exit 1 if list fails; debian#61078; ok djm@
bf4c5edc 96 - markus@cvs.openbsd.org 2002/01/29 14:32:03
97 [auth2.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c canohost.c]
98 [servconf.c servconf.h session.c sshd.8 sshd_config]
99 s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion;
100 ok stevesk@
8875ca97 101 - stevesk@cvs.openbsd.org 2002/01/29 16:29:02
102 [session.c]
103 limit subsystem length in log; ok markus@
8e3ce4dc 104 - markus@cvs.openbsd.org 2002/01/29 16:41:19
105 [ssh-add.1]
106 add DIAGNOSTICS; ok stevesk@
24932ee9 107 - markus@cvs.openbsd.org 2002/01/29 22:46:41
108 [session.c]
109 don't depend on servconf.c; ok djm@
16210ef7 110 - markus@cvs.openbsd.org 2002/01/29 23:50:37
111 [scp.1 ssh.1]
112 mention exit status; ok stevesk@
215ced77 113 - markus@cvs.openbsd.org 2002/01/31 13:35:11
114 [kexdh.c kexgex.c]
115 cross check announced key type and type from key blob
d01c63bb 116 - markus@cvs.openbsd.org 2002/01/31 15:00:05
117 [serverloop.c]
118 no need for WNOHANG; ok stevesk@
7899c98f 119 - markus@cvs.openbsd.org 2002/02/03 17:53:25
120 [auth1.c serverloop.c session.c session.h]
121 don't use channel_input_channel_request and callback
122 use new server_input_channel_req() instead:
123 server_input_channel_req does generic request parsing on server side
124 session_input_channel_req handles just session specific things now
125 ok djm@
8034b5cd 126 - markus@cvs.openbsd.org 2002/02/03 17:55:55
127 [channels.c channels.h]
128 remove unused channel_input_channel_request
05ca0898 129 - markus@cvs.openbsd.org 2002/02/03 17:58:21
130 [channels.c channels.h ssh.c]
131 generic callbacks are not really used, remove and
132 add a callback for msg of type SSH2_MSG_CHANNEL_OPEN_CONFIRMATION
133 ok djm@
0dbdc37c 134 - markus@cvs.openbsd.org 2002/02/03 17:59:23
135 [sshconnect2.c]
136 more cross checking if announced vs. used key type; ok stevesk@
3b5a1b05 137 - stevesk@cvs.openbsd.org 2002/02/03 22:35:57
138 [ssh.1 sshd.8]
139 some KeepAlive cleanup/clarify; ok markus@
49ebf326 140 - stevesk@cvs.openbsd.org 2002/02/03 23:22:59
141 [ssh-agent.1]
142 ssh-add also adds $HOME/.ssh/id_rsa and $HOME/.ssh/id_dsa now.
762f5ea2 143 - stevesk@cvs.openbsd.org 2002/02/04 00:53:39
144 [ssh-agent.c]
145 unneeded includes
67fa09f5 146 - markus@cvs.openbsd.org 2002/02/04 11:58:10
147 [auth2.c]
148 cross checking of announced vs actual pktype in pubkey/hostbaed auth;
149 ok stevesk@
5eaf8578 150 - markus@cvs.openbsd.org 2002/02/04 12:15:25
151 [log.c log.h readconf.c servconf.c]
152 add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1,
153 fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@
a445d432 154 - stevesk@cvs.openbsd.org 2002/02/04 20:41:16
155 [ssh-add.1]
156 more sync for default ssh-add identities; ok markus@
a96fd7c2 157 - djm@cvs.openbsd.org 2002/02/04 21:53:12
158 [sftp.1 sftp.c]
159 Add "-P" option to directly connect to a local sftp-server. Should be
160 useful for regression testing; ok markus@
86e23f3e 161 - djm@cvs.openbsd.org 2002/02/05 00:00:46
162 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c]
163 Add "-B" option to specify copy buffer length (default 32k); ok markus@
bcc0381e 164
8d7324af 16520020130
166 - (djm) Delay PRNG seeding until we need it in ssh-keygen, from markus@
70e2f2f3 167 - (tim) [configure.ac] fix logic on when ssh-rand-helper is installed.
168 [sshd_config] put back in line that tells what PATH was compiled into sshd.
8d7324af 169
90bab5a8 17020020125
9b7fcaf0 171 - (djm) Don't grab Xserver or pointer by default. x11-ssh-askpass doesn't
172 and grabbing can cause deadlocks with kinput2.
90bab5a8 173
533845df 17420020124
175 - (stevesk) Makefile.in: bug #61; delete commented line for now.
176
906e811b 17720020123
178 - (djm) Fix non-standard shell syntax in autoconf. Patch from
179 Dave Dykstra <dwd@bell-labs.com>
846f83ab 180 - (stevesk) fix --with-zlib=
eb5d7ff6 181 - (djm) Use case statements in autoconf to clean up some tests
5b6c4ceb 182 - (bal) reverted out of 5/2001 change to atexit(). I assume I
183 did it to handle SonyOS. If that is the case than we will
184 do a special case for them.
906e811b 185
f1b0ecc3 18620020122
187 - (djm) autoconf hacking:
188 - We don't support --without-zlib currently, so don't allow it.
189 - Rework cryptographic random number support detection. We now detect
190 whether OpenSSL seeds itself. If it does, then we don't bother with
191 the ssh-rand-helper program. You can force the use of ssh-rand-helper
192 using the --with-rand-helper configure argument
193 - Simplify and clean up ssh-rand-helper configuration
9780116c 194 - Add OpenSSL sanity check: verify that header version matches version
195 reported by library
49d7ed32 196 - (djm) Fix some bugs I introduced into ssh-rand-helper yesterday
3dc93cd8 197 - OpenBSD CVS Sync
198 - djm@cvs.openbsd.org 2001/12/21 08:52:22
199 [ssh-keygen.1 ssh-keygen.c]
200 Remove default (rsa1) key type; ok markus@
f9654cd7 201 - djm@cvs.openbsd.org 2001/12/21 08:53:45
202 [readpass.c]
203 Avoid interruptable passphrase read; ok markus@
67656ffc 204 - djm@cvs.openbsd.org 2001/12/21 10:06:43
205 [ssh-add.1 ssh-add.c]
206 Try all standard key files (id_rsa, id_dsa, identity) when invoked with
207 no arguments; ok markus@
b0ce9259 208 - markus@cvs.openbsd.org 2001/12/21 12:17:33
209 [serverloop.c]
210 remove ifdef for USE_PIPES since fdin != fdout; ok djm@
0e0bba68 211 - deraadt@cvs.openbsd.org 2001/12/24 07:29:43
212 [ssh-add.c]
213 try all listed keys.. how did this get broken?
e13b4278 214 - markus@cvs.openbsd.org 2001/12/25 18:49:56
215 [key.c]
216 be more careful on allocation
45c49544 217 - markus@cvs.openbsd.org 2001/12/25 18:53:00
218 [auth1.c]
219 be more carefull on allocation
bb28e836 220 - markus@cvs.openbsd.org 2001/12/27 18:10:29
221 [ssh-keygen.c]
222 -t is only needed for key generation (unbreaks -i, -e, etc).
b775c6f2 223 - markus@cvs.openbsd.org 2001/12/27 18:22:16
224 [auth1.c authfile.c auth-rsa.c dh.c kexdh.c kexgex.c key.c rsa.c]
225 [scard.c ssh-agent.c sshconnect1.c sshd.c ssh-dss.c]
226 call fatal() for openssl allocation failures
135113a3 227 - stevesk@cvs.openbsd.org 2001/12/27 18:22:53
228 [sshd.8]
229 clarify -p; ok markus@
cf184a44 230 - markus@cvs.openbsd.org 2001/12/27 18:26:13
231 [authfile.c]
232 missing include
108d362e 233 - markus@cvs.openbsd.org 2001/12/27 19:37:23
234 [dh.c kexdh.c kexgex.c]
235 always use BN_clear_free instead of BN_free
dc421aa3 236 - markus@cvs.openbsd.org 2001/12/27 19:54:53
237 [auth1.c auth.h auth-rh-rsa.c]
238 auth_rhosts_rsa now accept generic keys.
95500969 239 - markus@cvs.openbsd.org 2001/12/27 20:39:58
240 [auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h]
241 [serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c]
242 get rid of packet_integrity_check, use packet_done() instead.
3456d3c7 243 - markus@cvs.openbsd.org 2001/12/28 12:14:27
20b279e6 244 [auth1.c auth2.c auth2-chall.c auth-rsa.c channels.c clientloop.c]
245 [kex.c kexdh.c kexgex.c packet.c packet.h serverloop.c session.c]
246 [ssh.c sshconnect1.c sshconnect2.c sshd.c]
3456d3c7 247 s/packet_done/packet_check_eom/ (end-of-message); ok djm@
20b279e6 248 - markus@cvs.openbsd.org 2001/12/28 13:57:33
249 [auth1.c kexdh.c kexgex.c packet.c packet.h sshconnect1.c sshd.c]
250 packet_get_bignum* no longer returns a size
4ef6f649 251 - markus@cvs.openbsd.org 2001/12/28 14:13:13
252 [bufaux.c bufaux.h packet.c]
253 buffer_get_bignum: int -> void
54a5250f 254 - markus@cvs.openbsd.org 2001/12/28 14:50:54
255 [auth1.c auth-rsa.c channels.c dispatch.c kex.c kexdh.c kexgex.c]
256 [packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c]
257 [sshconnect2.c sshd.c]
258 packet_read* no longer return the packet length, since it's not used.
7819b5c3 259 - markus@cvs.openbsd.org 2001/12/28 15:06:00
260 [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
261 [dispatch.h kex.c kex.h serverloop.c ssh.c sshconnect2.c]
262 remove plen from the dispatch fn. it's no longer used.
60015649 263 - stevesk@cvs.openbsd.org 2001/12/28 22:37:48
264 [ssh.1 sshd.8]
265 document LogLevel DEBUG[123]; ok markus@
20905a8e 266 - stevesk@cvs.openbsd.org 2001/12/29 21:56:01
267 [authfile.c channels.c compress.c packet.c sftp-server.c]
268 [ssh-agent.c ssh-keygen.c]
269 remove unneeded casts and some char->u_char cleanup; ok markus@
6c79c353 270 - stevesk@cvs.openbsd.org 2002/01/03 04:11:08
271 [ssh_config]
272 grammar in comment
b4047251 273 - stevesk@cvs.openbsd.org 2002/01/04 17:59:17
274 [readconf.c servconf.c]
275 remove #ifdef _PATH_XAUTH/#endif; ok markus@
0f84fe37 276 - stevesk@cvs.openbsd.org 2002/01/04 18:14:16
277 [servconf.c sshd.8]
278 protocol 2 HostKey code default is now /etc/ssh_host_rsa_key and
279 /etc/ssh_host_dsa_key like we have in sshd_config. ok markus@
8341f420 280 - markus@cvs.openbsd.org 2002/01/05 10:43:40
281 [channels.c]
282 fix hanging x11 channels for rejected cookies (e.g.
283 XAUTHORITY=/dev/null xbiff) bug #36, based on patch from
284 djast@cs.toronto.edu
cb362b5e 285 - stevesk@cvs.openbsd.org 2002/01/05 21:51:56
286 [ssh.1 sshd.8]
287 some missing and misplaced periods
4ccb828d 288 - markus@cvs.openbsd.org 2002/01/09 13:49:27
289 [ssh-keygen.c]
290 append \n only for public keys
0c0738d5 291 - markus@cvs.openbsd.org 2002/01/09 17:16:00
292 [channels.c]
293 merge channel_pre_open_15/channel_pre_open_20; ok provos@
9c50edcf 294 - markus@cvs.openbsd.org 2002/01/09 17:26:35
295 [channels.c nchan.c]
296 replace buffer_consume(b, buffer_len(b)) with buffer_clear(b);
297 ok provos@
99416ceb 298 - markus@cvs.openbsd.org 2002/01/10 11:13:29
299 [serverloop.c]
300 skip client_alive_check until there are channels; ok beck@
3d209bbe 301 - markus@cvs.openbsd.org 2002/01/10 11:24:04
302 [clientloop.c]
303 handle SSH2_MSG_GLOBAL_REQUEST (just reply with failure); ok djm@
3c27606d 304 - markus@cvs.openbsd.org 2002/01/10 12:38:26
305 [nchan.c]
306 remove dead code (skip drain)
6d566d33 307 - markus@cvs.openbsd.org 2002/01/10 12:47:59
308 [nchan.c]
309 more unused code (with channels.c:1.156)
5a5f4c37 310 - markus@cvs.openbsd.org 2002/01/11 10:31:05
311 [packet.c]
312 handle received SSH2_MSG_UNIMPLEMENTED messages; ok djm@
781a02b8 313 - markus@cvs.openbsd.org 2002/01/11 13:36:43
314 [ssh2.h]
315 add defines for msg type ranges
6367063f 316 - markus@cvs.openbsd.org 2002/01/11 13:39:36
317 [auth2.c dispatch.c dispatch.h kex.c]
318 a single dispatch_protocol_error() that sends a message of
319 type 'UNIMPLEMENTED'
320 dispatch_range(): set handler for a ranges message types
321 use dispatch_protocol_ignore() for authentication requests after
322 successful authentication (the drafts requirement).
323 serverloop/clientloop now send a 'UNIMPLEMENTED' message instead
324 of exiting.
70499440 325 - markus@cvs.openbsd.org 2002/01/11 20:14:11
326 [auth2-chall.c auth-skey.c]
327 use strlcpy not strlcat; mouring@
a62ebe1f 328 - markus@cvs.openbsd.org 2002/01/11 23:02:18
329 [readpass.c]
330 use _PATH_TTY
bd2d2ac4 331 - markus@cvs.openbsd.org 2002/01/11 23:02:51
332 [auth2-chall.c]
333 use snprintf; mouring@
7ef24c8c 334 - markus@cvs.openbsd.org 2002/01/11 23:26:30
335 [auth-skey.c]
336 use snprintf; mouring@
68a7e648 337 - markus@cvs.openbsd.org 2002/01/12 13:10:29
338 [auth-skey.c]
339 undo local change
95f0a918 340 - provos@cvs.openbsd.org 2002/01/13 17:27:07
341 [ssh-agent.c]
342 change to use queue.h macros; okay markus@
3469eac4 343 - markus@cvs.openbsd.org 2002/01/13 17:57:37
344 [auth2.c auth2-chall.c compat.c sshconnect2.c sshd.c]
345 use buffer API and avoid static strings of fixed size;
346 ok provos@/mouring@
368e9dfc 347 - markus@cvs.openbsd.org 2002/01/13 21:31:20
348 [channels.h nchan.c]
349 add chan_set_[io]state(), order states, state is now an u_int,
350 simplifies debugging messages; ok provos@
3057c23b 351 - markus@cvs.openbsd.org 2002/01/14 13:22:35
352 [nchan.c]
353 chan_send_oclose1() no longer calls chan_shutdown_write(); ok provos@
354 - markus@cvs.openbsd.org 2002/01/14 13:34:07
355 [nchan.c]
356 merge chan_[io]buf_empty[12]; ok provos@
668a91b7 357 - markus@cvs.openbsd.org 2002/01/14 13:40:10
358 [nchan.c]
359 correct fn names for ssh2, do not switch from closed to closed;
360 ok provos@
3c9f1ecd 361 - markus@cvs.openbsd.org 2002/01/14 13:41:13
362 [nchan.c]
363 remove duplicated code; ok provos@
70bef40e 364 - markus@cvs.openbsd.org 2002/01/14 13:55:55
365 [channels.c channels.h nchan.c]
366 remove function pointers for events, remove chan_init*; ok provos@
8ab5f6b2 367 - markus@cvs.openbsd.org 2002/01/14 13:57:03
368 [channels.h nchan.c]
369 (c) 2002
5641aefa 370 - markus@cvs.openbsd.org 2002/01/16 13:17:51
371 [channels.c channels.h serverloop.c ssh.c]
372 wrapper for channel_setup_fwd_listener
ac10636f 373 - stevesk@cvs.openbsd.org 2002/01/16 17:40:23
374 [sshd_config]
375 The stategy now used for options in the default sshd_config shipped
376 with OpenSSH is to specify options with their default value where
377 possible, but leave them commented. Uncommented options change a
378 default value. Subsystem is currently the only default option
379 changed. ok markus@
cf5a07a8 380 - stevesk@cvs.openbsd.org 2002/01/16 17:42:33
381 [ssh.1]
382 correct defaults for -i/IdentityFile; ok markus@
1bbbc136 383 - stevesk@cvs.openbsd.org 2002/01/16 17:55:33
384 [ssh_config]
385 correct some commented defaults. add Ciphers default. ok markus@
4267abfd 386 - stevesk@cvs.openbsd.org 2002/01/17 04:27:37
387 [log.c]
388 casts to silence enum type warnings for bugzilla bug 37; ok markus@
ba218fbe 389 - stevesk@cvs.openbsd.org 2002/01/18 17:14:16
390 [sshd.8]
391 correct Ciphers default; paola.mannaro@ubs.com
e6207598 392 - stevesk@cvs.openbsd.org 2002/01/18 18:14:17
393 [authfd.c bufaux.c buffer.c cipher.c packet.c ssh-agent.c ssh-keygen.c]
394 unneeded cast cleanup; ok markus@
dfafef8f 395 - stevesk@cvs.openbsd.org 2002/01/18 20:46:34
396 [sshd.8]
397 clarify Allow(Groups|Users) and Deny(Groups|Users); suggestion from
398 allard@oceanpark.com; ok markus@
616a6b93 399 - markus@cvs.openbsd.org 2002/01/21 15:13:51
400 [sshconnect.c]
401 use read_passphrase+ECHO in confirm(), allows use of ssh-askpass
402 for hostkey confirm.
55f9eebd 403 - markus@cvs.openbsd.org 2002/01/21 22:30:12
404 [cipher.c compat.c myproposal.h]
405 remove "rijndael-*", just use "aes-" since this how rijndael is called
406 in the drafts; ok stevesk@
32e7d71f 407 - markus@cvs.openbsd.org 2002/01/21 23:27:10
408 [channels.c nchan.c]
409 cleanup channels faster if the are empty and we are in drain-state;
410 ok deraadt@
3a454b6a 411 - stevesk@cvs.openbsd.org 2002/01/22 02:52:41
412 [servconf.c]
413 typo in error message; from djast@cs.toronto.edu
4ca007b2 414 - (djm) Make auth2-pam.c compile again after dispatch.h and packet.h
415 changes
507c4f2e 416 - (djm) Recent Glibc includes an incompatible sys/queue.h. Treat it as
417 bogus in configure
187cd1fa 418 - (djm) Use local sys/queue.h if necessary in ssh-agent.c
f1b0ecc3 419
40f64e6f 42020020121
421 - (djm) Rework ssh-rand-helper:
422 - Reduce quantity of ifdef code, in preparation for ssh_rand_conf
423 - Always seed from system calls, even when doing PRNGd seeding
424 - Tidy and comment #define knobs
425 - Remove unused facility for multiple runs through command list
426 - KNF, cleanup, update copyright
427
088cdc23 42820020114
429 - (djm) Bug #50 - make autoconf entropy path checks more robust
430
760b35a6 43120020108
432 - (djm) Merge Cygwin copy_environment with do_pam_environment, removing
433 fixed env var size limit in the process. Report from Corinna Vinschen
434 <vinschen@redhat.com>
5cbceb3f 435 - (stevesk) defines.h: use "/var/spool/sockets/X11/%u" for HP-UX. does
436 not depend on transition links. from Lutz Jaenicke.
760b35a6 437
1d2a4613 43820020106
439 - (stevesk) defines.h: determine _PATH_UNIX_X; currently "/tmp/.X11-unix/X%u"
440 for all platforms except HP-UX, which is "/usr/spool/sockets/X11/%u".
441
d93656c9 44220020105
443 - (bal) NCR requies use_pipes to operate correctly.
29525240 444 - (stevesk) fix spurious ; from NCR change.
d93656c9 445
554e28b2 44620020103
447 - (djm) Use bigcrypt() on systems with SCO_PROTECTED_PW. Patch from
448 Roger Cornelius <rac@tenzing.org>
449
e9571a2c 45020011229
451 - (djm) Apply Cygwin pointer deref fix from Corinna Vinschen
452 <vinschen@redhat.com> Could be abused to guess valid usernames
929fb284 453 - (djm) Typo in contrib/cygwin/README Fix from Corinna Vinschen
454 <vinschen@redhat.com>
e9571a2c 455
760edf28 45620011228
457 - (djm) Remove recommendation to use GNU make, we should support most
458 make programs.
459
7bec72bc 46020011225
461 - (stevesk) [Makefile.in ssh-rand-helper.c]
462 portable lib and __progname support for ssh-rand-helper; ok djm@
463
b8291fa0 46420011223
465 - (bal) Removed contrib/chroot.diff and noted in contrib/README that it
466 was not being maintained.
467
46058ce2 46820011222
469 - (djm) Ignore fix & patchlevel in OpenSSL version check. Patch from
470 solar@openwall.com
471 - (djm) Rework entropy code. If the OpenSSL PRNG is has not been
472 internally seeded, execute a subprogram "ssh-rand-helper" to obtain
473 some entropy for us. Rewrite the old in-process entropy collecter as
474 an example ssh-rand-helper.
475 - (djm) Always perform ssh_prng_cmds path lookups in configure, even if
476 we don't end up using ssh_prng_cmds (so we always get a valid file)
477
5fb9865a 47820011221
479 - (djm) Add option to gnome-ssh-askpass to stop it from grabbing the X
480 server. I have found this necessary to avoid server hangs with X input
481 extensions (e.g. kinput2). Enable by setting the environment variable
482 "GNOME_SSH_ASKPASS_NOGRAB"
805e659f 483 - OpenBSD CVS Sync
484 - stevesk@cvs.openbsd.org 2001/12/08 17:49:28
485 [channels.c pathnames.h]
486 use only one path to X11 UNIX domain socket vs. an array of paths
487 to try. report from djast@cs.toronto.edu. ok markus@
2f293d43 488 - markus@cvs.openbsd.org 2001/12/09 18:45:56
489 [auth2.c auth2-chall.c auth.h]
490 add auth2_challenge_stop(), simplifies cleanup of kbd-int sessions,
491 fixes memleak.
5e8948af 492 - stevesk@cvs.openbsd.org 2001/12/10 16:45:04
493 [sshd.c]
494 possible fd leak on error; ok markus@
cdc95d6e 495 - markus@cvs.openbsd.org 2001/12/10 20:34:31
496 [ssh-keyscan.c]
497 check that server supports v1 for -t rsa1, report from wirth@dfki.de
fb396518 498 - jakob@cvs.openbsd.org 2001/12/18 10:04:21
499 [auth.h hostfile.c hostfile.h]
500 remove auth_rsa_read_key, make hostfile_ready_key non static; ok markus@
306feb91 501 - jakob@cvs.openbsd.org 2001/12/18 10:05:15
502 [auth2.c]
503 log fingerprint on successful public key authentication; ok markus@
46df736f 504 - jakob@cvs.openbsd.org 2001/12/18 10:06:24
505 [auth-rsa.c]
506 log fingerprint on successful public key authentication, simplify
507 usage of key structs; ok markus@
184eed6a 508 - deraadt@cvs.openbsd.org 2001/12/19 07:18:56
509 [auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h]
510 [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c]
511 [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c]
512 [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c]
513 [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c]
514 [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c]
515 [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config]
516 [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c]
517 basic KNF done while i was looking for something else
a10be357 518 - markus@cvs.openbsd.org 2001/12/19 16:09:39
519 [serverloop.c]
520 fix race between SIGCHLD and select with an additional pipe. writing
521 to the pipe on SIGCHLD wakes up select(). using pselect() is not
522 portable and siglongjmp() ugly. W. R. Stevens suggests similar solution.
523 initial idea by pmenage@ensim.com; ok deraadt@, djm@
6c0fa2b1 524 - stevesk@cvs.openbsd.org 2001/12/19 17:16:13
525 [authfile.c bufaux.c bufaux.h buffer.c buffer.h packet.c packet.h ssh.c]
526 change the buffer/packet interface to use void* vs. char*; ok markus@
ac151b18 527 - markus@cvs.openbsd.org 2001/12/20 16:37:29
528 [channels.c channels.h session.c]
529 setup x11 listen socket for just one connect if the client requests so.
530 (v2 only, but the openssh client does not support this feature).
24ca6821 531 - djm@cvs.openbsd.org 2001/12/20 22:50:24
532 [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
533 [dispatch.h kex.c kex.h packet.c packet.h serverloop.c ssh.c]
534 [sshconnect2.c]
535 Conformance fix: we should send failing packet sequence number when
536 responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by
537 yakk@yakk.dot.net; ok markus@
5fb9865a 538
c9d0ad9b 53920011219
540 - (stevesk) OpenBSD CVS sync X11 localhost display
541 - stevesk@cvs.openbsd.org 2001/11/29 14:10:51
542 [channels.h channels.c session.c]
543 sshd X11 fake server will now listen on localhost by default:
544 $ echo $DISPLAY
545 localhost:12.0
546 $ netstat -an|grep 6012
547 tcp 0 0 127.0.0.1.6012 *.* LISTEN
548 tcp6 0 0 ::1.6012 *.* LISTEN
549 sshd_config gatewayports=yes can be used to revert back to the old
550 behavior. will control this with another option later. ok markus@
551 - stevesk@cvs.openbsd.org 2001/12/19 08:43:11
552 [includes.h session.c]
553 handle utsname.nodename case for FamilyLocal X authorization; ok markus@
554
3f3ac025 55520011207
556 - (bal) PCRE no longer required. Banished from the source along with
557 fake-regex.h
c20f63d3 558 - (bal) OpenBSD CVS Sync
559 - stevesk@cvs.openbsd.org 2001/12/06 18:02:32
560 [channels.c sshconnect.c]
561 shutdown(sock, SHUT_RDWR) not needed here; ok markus@
74860245 562 - stevesk@cvs.openbsd.org 2001/12/06 18:09:23
563 [channels.c session.c]
564 strncpy->strlcpy. remaining strncpy's are necessary. ok markus@
d24631c9 565 - stevesk@cvs.openbsd.org 2001/12/06 18:20:32
566 [channels.c]
567 disable nagle for X11 fake server and client TCPs. from netbsd.
568 ok markus@
3f3ac025 569
57020011206
6056eb35 571 - (bal) OpenBSD CVS Sync
572 - deraadt@cvs.openbsd.org 2001/11/14 20:45:08
573 [sshd.c]
574 errno saving wrapping in a signal handler
0408c978 575 - markus@cvs.openbsd.org 2001/11/16 12:46:13
576 [ssh-keyscan.c]
577 handle empty lines instead of dumping core; report from sha@sha-1.net
17a3011c 578 - stevesk@cvs.openbsd.org 2001/11/17 19:14:34
579 [auth2.c auth.c readconf.c servconf.c ssh-agent.c ssh-keygen.c]
580 enum/int type cleanup where it made sense to do so; ok markus@
7ace8c3b 581 - markus@cvs.openbsd.org 2001/11/19 11:20:21
582 [sshd.c]
583 fd leak on HUP; ok stevesk@
8666316a 584 - stevesk@cvs.openbsd.org 2001/11/19 18:40:46
585 [ssh-agent.1]
586 clarify/state that private keys are not exposed to clients using the
587 agent; ok markus@
44c2ab73 588 - mpech@cvs.openbsd.org 2001/11/19 19:02:16
589 [deattack.c radix.c]
590 kill more registers
591 millert@ ok
2f98d223 592 - markus@cvs.openbsd.org 2001/11/21 15:51:24
593 [key.c]
594 mem leak
c840d0ad 595 - stevesk@cvs.openbsd.org 2001/11/21 18:49:14
596 [ssh-keygen.1]
597 more on passphrase construction; ok markus@
f48e63c8 598 - stevesk@cvs.openbsd.org 2001/11/22 05:27:29
599 [ssh-keyscan.c]
600 don't use "\n" in fatal()
7a934d1b 601 - markus@cvs.openbsd.org 2001/11/22 12:34:22
602 [clientloop.c serverloop.c sshd.c]
603 volatile sig_atomic_t
58d94604 604 - stevesk@cvs.openbsd.org 2001/11/29 19:06:39
605 [channels.h]
606 remove dead function prototype; ok markus@
2975f58d 607 - markus@cvs.openbsd.org 2001/11/29 22:08:48
608 [auth-rsa.c]
609 fix protocol error: send 'failed' message instead of a 2nd challenge
610 (happens if the same key is in authorized_keys twice).
611 reported Ralf_Meister@genua.de; ok djm@
b48eeb07 612 - stevesk@cvs.openbsd.org 2001/11/30 20:39:28
613 [ssh.c]
614 sscanf() length dependencies are clearer now; can also shrink proto
615 and data if desired, but i have not done that. ok markus@
2548961d 616 - markus@cvs.openbsd.org 2001/12/01 21:41:48
617 [session.c sshd.8]
618 don't pass user defined variables to /usr/bin/login
947b64c7 619 - deraadt@cvs.openbsd.org 2001/12/02 02:08:32
620 [sftp-common.c]
621 zap };
010f9726 622 - itojun@cvs.openbsd.org 2001/12/05 03:50:01
623 [clientloop.c serverloop.c sshd.c]
624 deal with LP64 printf issue with sig_atomic_t. from thorpej
d5bb9418 625 - itojun@cvs.openbsd.org 2001/12/05 03:56:39
626 [auth1.c auth2.c canohost.c channels.c deattack.c packet.c scp.c
627 sshconnect2.c]
628 make it compile with more strict prototype checking
6aacefa7 629 - deraadt@cvs.openbsd.org 2001/12/05 10:06:12
630 [authfd.c authfile.c bufaux.c channels.c compat.c kex.c kexgex.c
631 key.c misc.c packet.c servconf.c ssh-agent.c sshconnect2.c
632 sshconnect.c sshd.c ssh-dss.c ssh-keygen.c ssh-rsa.c]
633 minor KNF
663ebb32 634 - markus@cvs.openbsd.org 2001/12/05 15:04:48
635 [version.h]
636 post 3.0.2
6a92533a 637 - markus@cvs.openbsd.org 2001/12/05 16:54:51
638 [compat.c match.c match.h]
639 make theo and djm happy: bye bye regexp
2717fa0f 640 - markus@cvs.openbsd.org 2001/12/06 13:30:06
641 [servconf.c servconf.h sshd.8 sshd.c]
642 add -o to sshd, too. ok deraadt@
643 - (bal) Minor white space fix up in servconf.c
6056eb35 644
ffb8d130 64520011126
646 - (tim) [contrib/cygwin/README, openbsd-compat/bsd-cygwin_util.c,
647 openbsd-compat/bsd-cygwin_util.h, openbsd-compat/daemon.c]
648 Allow SSHD to install as service under WIndows 9x/Me
649 [configure.ac] Fix to allow linking against PCRE on Cygwin
650 Patches by Corinna Vinschen <vinschen@redhat.com>
651
20716479 65220011115
653 - (djm) Fix IPv4 default in ssh-keyscan. Spotted by Dan Astoorian
654 <djast@cs.toronto.edu> Fix from markus@
e41f14ae 655 - (djm) Release 3.0.1p1
20716479 656
9aba5a4d 65720011113
658 - (djm) Fix early (and double) free of remote user when using Kerberos.
659 Patch from Simon Wilkinson <simon@sxw.org.uk>
19e810f6 660 - (djm) AIX login{success,failed} changes. Move loginsuccess call to
661 do_authenticated. Call loginfailed for protocol 2 failures > MAX like
662 we do for protocol 1. Reports from Ralf Wenk <wera0003@fh-karlsruhe.de>,
663 K.Wolkersdorfer@fz-juelich.de and others
ede8cea6 664 - (djm) OpenBSD CVS Sync
665 - dugsong@cvs.openbsd.org 2001/11/11 18:47:10
666 [auth-krb5.c]
667 fix krb5 authorization check. found by <jhawk@MIT.EDU>. from
668 art@, deraadt@ ok
b0248360 669 - markus@cvs.openbsd.org 2001/11/12 11:17:07
670 [servconf.c]
671 enable authorized_keys2 again. tested by fries@
0bbf2240 672 - markus@cvs.openbsd.org 2001/11/13 02:03:57
673 [version.h]
674 enter 3.0.1
86b164b3 675 - (djm) Bump RPM package versions
9aba5a4d 676
3e4e3bc8 67720011112
678 - (djm) Makefile correctness fix from Mark D. Baushke <mdb@juniper.net>
d36ae718 679 - (djm) Cygwin config patch from Corinna Vinschen <vinschen@redhat.com>
9ae3f727 680 - OpenBSD CVS Sync
681 - markus@cvs.openbsd.org 2001/10/24 08:41:41
682 [sshd.c]
683 mention remote port in debug message
f103187f 684 - markus@cvs.openbsd.org 2001/10/24 08:41:20
685 [ssh.c]
686 remove unused
67b75437 687 - markus@cvs.openbsd.org 2001/10/24 08:51:35
688 [clientloop.c ssh.c]
689 ignore SIGPIPE early, makes ssh work if agent dies, netbsd-pr via itojun@
c6940381 690 - markus@cvs.openbsd.org 2001/10/24 19:57:40
691 [clientloop.c]
692 make ~& (backgrounding) work again for proto v1; add support ~& for v2, too
f564d016 693 - markus@cvs.openbsd.org 2001/10/25 21:14:32
694 [ssh-keygen.1 ssh-keygen.c]
695 better docu for fingerprinting, ok deraadt@
e8d59b4d 696 - markus@cvs.openbsd.org 2001/10/29 19:27:15
697 [sshconnect2.c]
698 hostbased: check for client hostkey before building chost
03cf595c 699 - markus@cvs.openbsd.org 2001/10/30 20:29:09
700 [ssh.1]
701 ssh.1
b4b701be 702 - markus@cvs.openbsd.org 2001/11/07 16:03:17
703 [packet.c packet.h sshconnect2.c]
704 pad using the padding field from the ssh2 packet instead of sending
705 extra ignore messages. tested against several other ssh servers.
10f22cd7 706 - markus@cvs.openbsd.org 2001/11/07 21:40:21
707 [ssh-rsa.c]
708 ssh_rsa_sign/verify: SSH_BUG_SIGBLOB not supported
abc4e9a7 709 - markus@cvs.openbsd.org 2001/11/07 22:10:28
710 [ssh-dss.c ssh-rsa.c]
711 missing free and sync dss/rsa code.
713d61f7 712 - markus@cvs.openbsd.org 2001/11/07 22:12:01
713 [sshd.8]
714 s/Keepalive/KeepAlive/; from openbsd@davidkrause.com
f98585b0 715 - markus@cvs.openbsd.org 2001/11/07 22:41:51
716 [auth2.c auth-rh-rsa.c]
717 unused includes
27c47c0a 718 - markus@cvs.openbsd.org 2001/11/07 22:53:21
719 [channels.h]
720 crank c->path to 256 so they can hold a full hostname; dwd@bell-labs.com
56b551e2 721 - markus@cvs.openbsd.org 2001/11/08 10:51:08
722 [readpass.c]
723 don't strdup too much data; from gotoh@taiyo.co.jp; ok millert.
dd58cb5e 724 - markus@cvs.openbsd.org 2001/11/08 17:49:53
725 [ssh.1]
726 mention setuid root requirements; noted by cnorris@csc.UVic.ca; ok stevesk@
fad3754c 727 - markus@cvs.openbsd.org 2001/11/08 20:02:24
728 [auth.c]
729 don't print ROOT in CAPS for the authentication messages, i.e.
730 Accepted publickey for ROOT from 127.0.0.1 port 42734 ssh2
731 becomes
732 Accepted publickey for root from 127.0.0.1 port 42734 ssh2
b3ad8fe6 733 - markus@cvs.openbsd.org 2001/11/09 18:59:23
734 [clientloop.c serverloop.c]
735 don't memset too much memory, ok millert@
736 original patch from jlk@kamens.brookline.ma.us via nalin@redhat.com
ac28afd8 737 - markus@cvs.openbsd.org 2001/11/10 13:19:45
738 [sshd.c]
e15895cd 739 cleanup libwrap support (remove bogus comment, bogus close(), add
740 debug, etc).
5d4446bf 741 - markus@cvs.openbsd.org 2001/11/10 13:22:42
742 [ssh-rsa.c]
743 KNF (unexpand)
ec413a68 744 - markus@cvs.openbsd.org 2001/11/10 13:37:20
745 [packet.c]
746 remove extra debug()
5df83e07 747 - markus@cvs.openbsd.org 2001/11/11 13:02:31
748 [servconf.c]
e15895cd 749 make AuthorizedKeysFile2 fallback to AuthorizedKeysFile if
750 AuthorizedKeysFile is specified.
751 - (djm) Reorder portable-specific server options so that they come first.
752 This should help reduce diff collisions for new server options (as they
753 will appear at the end)
3e4e3bc8 754
78afd1dc 75520011109
756 - (stevesk) auth-pam.c: use do_pam_authenticate(PAM_DISALLOW_NULL_AUTHTOK)
757 if permit_empty_passwd == 0 so null password check cannot be bypassed.
758 jayaraj@amritapuri.com OpenBSD bug 2168
30f60c34 759 - markus@cvs.openbsd.org 2001/11/09 19:08:35
760 [sshd.c]
761 remove extra trailing dot from log message; pilot@naughty.monkey.org
762
7c6d759d 76320011103
764 - (tim) [ contrib/caldera/openssh.spec contrib/caldera/sshd.init] Updates
765 from Raymund Will <ray@caldera.de>
766 [acconfig.h configure.in] Clean up login checks.
767 Problem reported by Jim Knoble <jmknoble@pobox.com>
768
76920011101
58389b85 770 - (djm) Compat define for OpenSSL < 0.9.6 (No OPENSSL_free)
771
548fd014 77220011031
773 - (djm) Unsmoke drugs: config files should be noreplace.
774
b013a983 77520011030
776 - (djm) Redhat RPM spec: remove noreplace from config files, allow IPv6
777 by default (can force IPv4 using --define "noipv6 1")
778
40d0f6b9 77920011029
780 - (tim) [TODO defines.h loginrec.c] Change the references to configure.in
781 to configure.ac
782
9f214051 78320011028
784 - (djm) Avoid bug in Solaris PAM libs
7eb73cc1 785 - (djm) Disconnect if no tty and PAM reports password expired
9678565b 786 - (djm) Fix for PAM password changes being echoed (from stevesk)
840ad55e 787 - (stevesk) Fix compile problem with PAM password change fix
37a8edf7 788 - (stevesk) README: zlib location is http://www.gzip.org/zlib/
9f214051 789
c8c15bcb 79020011027
791 - (tim) [configure.ac] Fixes for ReliantUNIX (don't use libucb)
792 Patch by Robert Dahlem <Robert.Dahlem@siemens.com>
793
9e127e27 79420011026
795 - (bal) Set the correct current time in login_utmp_only(). Patch by
796 Wayne Davison <wayned@users.sourceforge.net>
fd96c060 797 - (tim) [scard/Makefile.in] Fix install: when building outside of source
798 tree and using --src=/full_path/to/openssh
799 Patch by Mark D. Baushke <mdb@juniper.net>
9e127e27 800
d321c94b 80120011025
802 - (bal) Use VDISABLE if _POSIX_VDISABLE is set in readpassphrase.c. Patch
803 by todd@
5a162955 804 - (tim) [configure.ac] Give path given in --with-xxx= for pcre,zlib, and
805 tcp-wrappers precedence over system libraries and includes.
806 Report from Dave Dykstra <dwd@bell-labs.com>
d321c94b 807
95c88805 80820011024
809 - (bal) Should be 3.0p1 not 3.0p2. Corrected version.h already.
451dab40 810 - (tim) configure.in -> configure.ac
95c88805 811
bc86d864 81220011023
813 - (bal) Updated version to 3.0p1 in preparing for release.
7f0a4ff1 814 - (bal) Added 'PAM_TTY_KLUDGE' to Solaris platform.
051809f6 815 - (tim) [configure.in] Fix test for broken dirname. Based on patch from
816 Dave Dykstra <dwd@bell-labs.com>. Remove un-needed test for zlib.h.
817 [contrib/caldera/openssh.spec, contrib/redhat/openssh.spec,
818 contrib/suse/openssh.spec] Update version to match version.h
bc86d864 819
ce49121d 82020011022
821 - (djm) Fix fd leak in loginrec.c (ro fd to lastlog was left open).
822 Report from Michal Zalewski <lcamtuf@coredump.cx>
823
98a7c37b 82420011021
825 - (tim) [configure.in] Clean up library testing. Add optional PATH to
826 --with-pcre, --with-zlib, and --with-tcp-wrappers. Based on
827 patch by albert chin (china@thewrittenword.com)
828 Re-arange AC_CHECK_HEADERS and AC_CHECK_FUNCS for eaiser reading
829 of patches to configure.in. Replace obsolete AC_STRUCT_ST_BLKSIZE
830 with AC_CHECK_MEMBERS. Add test for broken dirname() on
831 Solaris 2.5.1 by Dan Astoorian <djast@cs.toronto.edu>
832 [acconfig.h aclocal.m4 defines.h configure.in] Better socklen_t test.
833 patch by albert chin (china@thewrittenword.com)
834 [scp.c] Replace obsolete HAVE_ST_BLKSIZE with
835 HAVE_STRUCT_STAT_ST_BLKSIZE.
836 [Makefile.in] When running make in top level, always do make
837 in openbsd-compat. patch by Dave Dykstra <dwd@bell-labs.com>
838
09a3bd6d 83920011019
840 - (bal) Fixed up init.d symlink issue and piddir stuff. Patches by
841 Zoran Milojevic <Zoran.Milojevic@SS8.com> and j.petersen@msh.de
842
418e724c 84320011012
844 - (djm) OpenBSD CVS Sync
845 - markus@cvs.openbsd.org 2001/10/10 22:18:47
846 [channels.c channels.h clientloop.c nchan.c serverloop.c]
847 [session.c session.h]
848 try to keep channels open until an exit-status message is sent.
849 don't kill the login shells if the shells stdin/out/err is closed.
850 this should now work:
851 ssh -2n localhost 'exec > /dev/null 2>&1; sleep 10; exit 5'; echo ?
efcc9957 852 - markus@cvs.openbsd.org 2001/10/11 13:45:21
853 [session.c]
854 delay detach of session if a channel gets closed but the child is
855 still alive. however, release pty, since the fd's to the child are
856 already closed.
fd6cfbaf 857 - markus@cvs.openbsd.org 2001/10/11 15:24:00
858 [clientloop.c]
859 clear select masks if we return before calling select().
b0454d44 860 - (djm) "make veryclean" fix from Tom Holroyd <tomh@po.crl.go.jp>
aeabbb30 861 - (djm) Clean some autoconf-2.52 junk when doing "make distclean"
8140f2aa 862 - (djm) Cleanup sshpty.c a little
6e464960 863 - (bal) First wave of contrib/solaris/ package upgrades. Still more
864 work needs to be done, but it is a 190% better then the stuff we
865 had before!
78c84f13 866 - (bal) Minor bug fix in contrib/solaris/opensshd.in .. $etcdir was not
867 set right.
418e724c 868
c48c32c1 86920011010
870 - (djm) OpenBSD CVS Sync
871 - markus@cvs.openbsd.org 2001/10/04 14:34:16
872 [key.c]
873 call OPENSSL_free() for memory allocated by openssl; from chombier@mac.com
0c139bd1 874 - markus@cvs.openbsd.org 2001/10/04 15:05:40
875 [channels.c serverloop.c]
876 comment out bogus conditions for selecting on connection_in
72176c0e 877 - markus@cvs.openbsd.org 2001/10/04 15:12:37
878 [serverloop.c]
879 client_alive_check cleanup
a2c92c4a 880 - markus@cvs.openbsd.org 2001/10/06 00:14:50
881 [sshconnect.c]
882 remove unused argument
05fd093c 883 - markus@cvs.openbsd.org 2001/10/06 00:36:42
884 [session.c]
885 fix typo in error message, sync with do_exec_nopty
01e9ef57 886 - markus@cvs.openbsd.org 2001/10/06 11:18:19
887 [sshconnect1.c sshconnect2.c sshconnect.c]
888 unify hostkey check error messages, simplify prompt.
2cdccb44 889 - markus@cvs.openbsd.org 2001/10/07 10:29:52
890 [authfile.c]
891 grammer; Matthew_Clarke@mindlink.bc.ca
639cb8ab 892 - markus@cvs.openbsd.org 2001/10/07 17:49:40
893 [channels.c channels.h]
894 avoid possible FD_ISSET overflow for channels established
895 during channnel_after_select() (used for dynamic channels).
f3964cb9 896 - markus@cvs.openbsd.org 2001/10/08 11:48:57
897 [channels.c]
898 better debug
32af6a3f 899 - markus@cvs.openbsd.org 2001/10/08 16:15:47
900 [sshconnect.c]
901 use correct family for -b option
dab89049 902 - markus@cvs.openbsd.org 2001/10/08 19:05:05
903 [ssh.c sshconnect.c sshconnect.h ssh-keyscan.c]
904 some more IPv4or6 cleanup
905 - markus@cvs.openbsd.org 2001/10/09 10:12:08
906 [session.c]
907 chdir $HOME after krb_afslog(); from bbense@networking.stanford.edu
01855277 908 - markus@cvs.openbsd.org 2001/10/09 19:32:49
909 [session.c]
910 stat subsystem command before calling do_exec, and return error to client.
9d1b2faa 911 - markus@cvs.openbsd.org 2001/10/09 19:51:18
912 [serverloop.c]
913 close all channels if the connection to the remote host has been closed,
914 should fix sshd's hanging with WCHAN==wait
d5f24f94 915 - markus@cvs.openbsd.org 2001/10/09 21:59:41
916 [channels.c channels.h serverloop.c session.c session.h]
917 simplify session close: no more delayed session_close, no more
918 blocking wait() calls.
b6a71cd2 919 - (bal) removed two unsed headers in openbsd-compat/bsd-misc.c
8782141f 920 - (bal) seed_init() and seed_rng() required in ssh-keyscan.c
c48c32c1 921
46dfe5ef 92220011007
923 - (bal) ssh-copy-id corrected permissions for .ssh/ and authorized_keys.
924 Prompted by Matthew Vernon <matthew@sel.cam.ac.uk>
925
822593d4 92620011005
927 - (bal) AES works under Cray, no more hack.
928
63fa6b6c 92920011004
930 - (bal) nchan2.ms resync. BSD License applied.
931
c8a62153 93220011003
933 - (bal) CVS ID fix up in version.h
b6350327 934 - (bal) OpenBSD CVS Sync:
935 - markus@cvs.openbsd.org 2001/09/27 11:58:16
936 [compress.c]
937 mem leak; chombier@mac.com
938 - markus@cvs.openbsd.org 2001/09/27 11:59:37
939 [packet.c]
940 missing called=1; chombier@mac.com
aa8003d6 941 - markus@cvs.openbsd.org 2001/09/27 15:31:17
942 [auth2.c auth2-chall.c sshconnect1.c]
943 typos; from solar
5b263aae 944 - camield@cvs.openbsd.org 2001/09/27 17:53:24
945 [sshd.8]
946 don't talk about compile-time options
947 ok markus@
e99a518a 948 - djm@cvs.openbsd.org 2001/09/28 12:07:09
949 [ssh-keygen.c]
950 bzero private key after loading to smartcard; ok markus@
f67792f2 951 - markus@cvs.openbsd.org 2001/09/28 15:46:29
952 [ssh.c]
953 bug: read user config first; report kaukasoi@elektroni.ee.tut.fi
5720c10e 954 - markus@cvs.openbsd.org 2001/10/01 08:06:28
955 [scp.c]
956 skip filenames containing \n; report jdamery@chiark.greenend.org.uk
957 and matthew@debian.org
5e4a7219 958 - markus@cvs.openbsd.org 2001/10/01 21:38:53
959 [channels.c channels.h ssh.c sshd.c]
960 remove ugliness; vp@drexel.edu via angelos
8bbc048a 961 - markus@cvs.openbsd.org 2001/10/01 21:51:16
962 [readconf.c readconf.h ssh.1 sshconnect.c]
963 add NoHostAuthenticationForLocalhost; note that the hostkey is
964 now check for localhost, too.
e0543e42 965 - djm@cvs.openbsd.org 2001/10/02 08:38:50
966 [ssh-add.c]
967 return non-zero exit code on error; ok markus@
e4d7f734 968 - stevesk@cvs.openbsd.org 2001/10/02 22:56:09
969 [sshd.c]
970 #include "channels.h" for channel_set_af()
76fbdd47 971 - markus@cvs.openbsd.org 2001/10/03 10:01:20
972 [auth.c]
973 use realpath() for homedir, too. from jinmei@isl.rdc.toshiba.co.jp
c8a62153 974
d9d47a26 97520011001
976 - (stevesk) loginrec.c: fix type conversion problems exposed when using
977 64-bit off_t.
978
d8d6c87e 97920010929
980 - (bal) move reading 'config.h' up higher. Patch by albert chin
981 <china@thewrittenword.com)
982
fc1fc39e 98320010928
984 - (djm) OpenBSD CVS sync:
985 - djm@cvs.openbsd.org 2001/09/28 09:49:31
986 [scard.c]
987 Fix segv when smartcard communication error occurs during key load.
988 ok markus@
e3d5570b 989 - (djm) Update spec files for new x11-askpass
fc1fc39e 990
8a9ac95d 99120010927
992 - (stevesk) session.c: declare do_pre_login() before use
993 wayned@users.sourceforge.net
994
aa9f6a6e 99520010925
996 - (djm) Pull in auth-krb5.c from OpenBSD CVS. NB. it is not currently used.
168edd95 997 - (djm) Sync $sysconfdir/moduli
948fd8b9 998 - (djm) Add AC_SYS_LARGEFILE configure test
4f9d80ee 999 - (djm) Avoid bad and unportable sprintf usage in compat code
aa9f6a6e 1000
57dade33 100120010923
1002 - (bal) updated ssh.c to mirror minor getopts 'extern int' formating done
1003 by stevesk@
927c3e15 1004 - (bal) Removed 'extern int optopt;' since it is dead wood.
8ead88d3 1005 - (bal) Updated all *.specs for 2.9.9p1 and updated version.h
57dade33 1006
8ab12eb4 100720010923
1008 - (bal) OpenBSD CVS Sync
1009 - markus@cvs.openbsd.org 2001/09/23 11:09:13
1010 [authfile.c]
1011 relax permission check for private key files.
157fc8e1 1012 - markus@cvs.openbsd.org 2001/09/23 09:58:13
1013 [LICENCE]
1014 new rijndael implementation
8ab12eb4 1015
64bdafe1 101620010920
1017 - (tim) [scard/Makefile.in] Don't strip the Java binary
4a38efad 1018 - (stevesk) sun_len, SUN_LEN() configure stuff no longer required
fc7eca52 1019 - (bal) OpenBSD CVS Sync
1020 - stevesk@cvs.openbsd.org 2001/09/20 00:15:54
1021 [sshd.8]
1022 fix ClientAliveCountMax
ddcfed57 1023 - markus@cvs.openbsd.org 2001/09/20 13:46:48
1024 [auth2.c]
1025 key_read returns now -1 or 1
bcdb96c2 1026 - markus@cvs.openbsd.org 2001/09/20 13:50:40
1027 [compat.c compat.h ssh.c]
1028 bug compat: request a dummy channel for -N (no shell) sessions +
1029 cleanup; vinschen@redhat.com
4a778de1 1030 - mouring@cvs.openbsd.org 2001/09/20 20:57:51
1031 [sshd_config]
1032 CheckMail removed. OKed stevesk@
64bdafe1 1033
4cdbc654 103420010919
35c69348 1035 - (bal) OpenBSD Sync
4cdbc654 1036 - markus@cvs.openbsd.org 2001/09/19 10:08:51
1037 [sshd.8]
1038 command=xxx applies to subsystem now, too
cb8c7bad 1039 - markus@cvs.openbsd.org 2001/09/19 13:23:29
1040 [key.c]
1041 key_read() now returns -1 on type mismatch, too
e1c5bfaf 1042 - stevesk@cvs.openbsd.org 2001/09/19 19:24:19
1043 [readconf.c readconf.h scp.c sftp.c ssh.1]
1044 add ClearAllForwardings ssh option and set it in scp and sftp; ok
1045 markus@
f34f05d5 1046 - stevesk@cvs.openbsd.org 2001/09/19 19:35:30
1047 [authfd.c]
1048 use sizeof addr vs. SUN_LEN(addr) for sockaddr_un. Stevens
1049 blesses this and we do it this way elsewhere. this helps in
1050 portable because not all systems have SUN_LEN() and
1051 sockaddr_un.sun_len. ok markus@
2043936f 1052 - stevesk@cvs.openbsd.org 2001/09/19 21:04:53
1053 [sshd.8]
1054 missing -t in usage
368bae7d 1055 - stevesk@cvs.openbsd.org 2001/09/19 21:41:57
1056 [sshd.8]
1057 don't advertise -V in usage; ok markus@
35c69348 1058 - (bal) openbsd-compat/vis.[ch] is dead wood. Removed.
4cdbc654 1059
d0b19c95 106020010918
46a831dd 1061 - (djm) Configure support for smartcards. Based on Ben's work.
fef4ea6b 1062 - (djm) Revert setgroups call, it causes problems on OS-X
46a831dd 1063 - (djm) Avoid warning on BSDgetopt
93816ec8 1064 - (djm) More makefile infrastructre for smartcard support, also based
1065 on Ben's work
4b255446 1066 - (djm) Specify --datadir in RPM spec files so smartcard applet gets
1067 put somewhere sane. Add Ssh.bin to manifest.
69c94072 1068 - (djm) Make smartcard support conditional in Redhat RPM spec
1a77481c 1069 - (bal) LICENCE update. Has not been done in a while.
f49df8e9 1070 - (stevesk) nchan.c: we use X/Open Sockets on HP-UX now so shutdown(2)
1071 returns ENOTCONN vs. EINVAL for socket not connected; remove EINVAL
1072 check. ok Lutz Jaenicke
35c69348 1073 - (bal) OpenBSD CVS Sync
f1278af7 1074 - stevesk@cvs.openbsd.org 2001/09/17 17:57:57
1075 [scp.1 scp.c sftp.1 sftp.c]
1076 add -Fssh_config option; ok markus@
cf54363d 1077 - stevesk@cvs.openbsd.org 2001/09/17 19:27:15
1078 [kexdh.c kexgex.c key.c key.h ssh-dss.c ssh-keygen.c ssh-rsa.c]
1079 u_char*/char* cleanup; ok markus
4e842b5e 1080 - markus@cvs.openbsd.org 2001/09/17 20:22:14
1081 [scard.c]
1082 never keep a connection to the smartcard open.
1083 allows ssh-keygen -D U while the agent is running; report from
1084 jakob@
e3c1c3e6 1085 - stevesk@cvs.openbsd.org 2001/09/17 20:38:09
1086 [sftp.1 sftp.c]
1087 cleanup and document -1, -s and -S; ok markus@
f7436b8c 1088 - markus@cvs.openbsd.org 2001/09/17 20:50:22
1089 [key.c ssh-keygen.c]
1090 better error handling if you try to export a bad key to ssh.com
a5f82435 1091 - markus@cvs.openbsd.org 2001/09/17 20:52:47
1092 [channels.c channels.h clientloop.c]
1093 try to fix agent-forwarding-backconnection-bug, as seen on HPUX,
1094 for example; with Lutz.Jaenicke@aet.TU-Cottbus.DE,
780a9951 1095 - markus@cvs.openbsd.org 2001/09/17 21:04:02
1096 [channels.c serverloop.c]
1097 don't send fake dummy packets on CR (\r)
1098 bugreport from yyua@cs.sfu.ca via solar@@openwall.com
b6761a3e 1099 - markus@cvs.openbsd.org 2001/09/17 21:09:47
1100 [compat.c]
1101 more versions suffering the SSH_BUG_DEBUG bug;
1102 3.0.x reported by dbutts@maddog.storability.com
edaeb835 1103 - stevesk@cvs.openbsd.org 2001/09/17 23:56:07
1104 [scp.1]
1105 missing -B in usage string
d0b19c95 1106
d31a32a4 110720010917
1108 - (djm) x11-ssh-askpass-1.2.4 in RPM spec, revert workarounds
cb547f98 1109 - (tim) [includes.h openbsd-compat/getopt.c openbsd-compat/getopt.h]
1110 rename getopt() to BSDgetopt() to keep form conflicting with
1111 system getopt().
1112 [Makefile.in configure.in] disable filepriv until I can add
1113 missing procpriv calls.
d31a32a4 1114
95d00a03 111520010916
1116 - (djm) Workaround XFree breakage in RPM spec file
6fcf67f7 1117 - (bal) OpenBSD CVS Sync
1118 - markus@cvs.openbsd.org 2001/09/16 14:46:54
1119 [session.c]
1120 calls krb_afslog() after setting $HOME; mattiasa@e.kth.se; fixes
1121 pr 1943b
95d00a03 1122
0e0144b7 112320010915
1124 - (djm) Make do_pre_login static to avoid prototype #ifdef hell
0fd6c7a9 1125 - (djm) Sync scard/ stuff
23c098ba 1126 - (djm) Redhat spec file cleanups from Pekka Savola <pekkas@netcore.fi> and
1127 Redhat
94a29edc 1128 - (djm) Redhat initscript config sanity checking from Pekka Savola
1129 <pekkas@netcore.fi>
e72ff812 1130 - (djm) Clear supplemental groups at sshd start to prevent them from
1131 being propogated to random PAM modules. Based on patch from Redhat via
1132 Pekka Savola <pekkas@netcore.fi>
a2cb4268 1133 - (djm) Make sure rijndael.c picks config.h
1134 - (djm) Ensure that u_char gets defined
0e0144b7 1135
dcf29cf8 113620010914
1137 - (bal) OpenBSD CVS Sync
1138 - markus@cvs.openbsd.org 2001/09/13
1139 [rijndael.c rijndael.h]
1140 missing $OpenBSD
fd022eed 1141 - markus@cvs.openbsd.org 2001/09/14
1142 [session.c]
1143 command=xxx overwrites subsystems, too
9658ecbc 1144 - markus@cvs.openbsd.org 2001/09/14
1145 [sshd.c]
1146 typo
fd022eed 1147
88c3bfe0 114820010913
1149 - (bal) OpenBSD CVS Sync
1150 - markus@cvs.openbsd.org 2001/08/23 11:31:59
1151 [cipher.c cipher.h]
1152 switch to the optimised AES reference code from
1153 http://www.esat.kuleuven.ac.be/~rijmen/rijndael/rijndael-fst-3.0.zip
1154
5c53a31e 115520010912
1156 - (bal) OpenBSD CVS Sync
1157 - jakob@cvs.openbsd.org 2001/08/16 19:18:34
1158 [servconf.c servconf.h session.c sshd.8]
1159 deprecate CheckMail. ok markus@
54bf768d 1160 - stevesk@cvs.openbsd.org 2001/08/16 20:14:57
1161 [ssh.1 sshd.8]
1162 document case sensitivity for ssh, sshd and key file
1163 options and arguments; ok markus@
6d7b3036 1164 - stevesk@cvs.openbsd.org 2001/08/17 18:59:47
1165 [servconf.h]
1166 typo in comment
ae897d7c 1167 - stevesk@cvs.openbsd.org 2001/08/21 21:47:42
1168 [ssh.1 sshd.8]
1169 minor typos and cleanup
c78e5800 1170 - stevesk@cvs.openbsd.org 2001/08/22 16:21:21
1171 [ssh.1]
1172 hostname not optional; ok markus@
9495bfc5 1173 - stevesk@cvs.openbsd.org 2001/08/22 16:30:02
1174 [sshd.8]
1175 no rexd; ok markus@
29999e54 1176 - stevesk@cvs.openbsd.org 2001/08/22 17:45:16
1177 [ssh.1]
1178 document cipher des for protocol 1; ok deraadt@
8fbc356d 1179 - camield@cvs.openbsd.org 2001/08/23 17:59:31
1180 [sshd.c]
1181 end request with 0, not NULL
1182 ok markus@
d866473d 1183 - stevesk@cvs.openbsd.org 2001/08/23 18:02:48
1184 [ssh-agent.1]
1185 fix usage; ok markus@
75304f85 1186 - stevesk@cvs.openbsd.org 2001/08/23 18:08:59
1187 [ssh-add.1 ssh-keyscan.1]
1188 minor cleanup
b7f79e7a 1189 - danh@cvs.openbsd.org 2001/08/27 22:02:13
1190 [ssh-keyscan.c]
1191 fix memory fault if non-existent filename is given to the -f option
1192 ok markus@
14e4a15f 1193 - markus@cvs.openbsd.org 2001/08/28 09:51:26
1194 [readconf.c]
1195 don't set DynamicForward unless Host matches
e591b98a 1196 - markus@cvs.openbsd.org 2001/08/28 15:39:48
1197 [ssh.1 ssh.c]
1198 allow: ssh -F configfile host
46660a9e 1199 - markus@cvs.openbsd.org 2001/08/29 20:44:03
1200 [scp.c]
1201 clear the malloc'd buffer, otherwise source() will leak malloc'd
1202 memory; ok theo@
e675b851 1203 - stevesk@cvs.openbsd.org 2001/08/29 23:02:21
1204 [sshd.8]
1205 add text about -u0 preventing DNS requests; ok markus@
4c780c2a 1206 - stevesk@cvs.openbsd.org 2001/08/29 23:13:10
1207 [ssh.1 ssh.c]
1208 document -D and DynamicForward; ok markus@
d2e3df16 1209 - stevesk@cvs.openbsd.org 2001/08/29 23:27:23
1210 [ssh.c]
1211 validate ports for -L/-R; ok markus@
70068acc 1212 - stevesk@cvs.openbsd.org 2001/08/29 23:39:40
1213 [ssh.1 sshd.8]
1214 additional documentation for GatewayPorts; ok markus@
ad3e169f 1215 - naddy@cvs.openbsd.org 2001/08/30 15:42:36
1216 [ssh.1]
1217 add -D to synopsis line; ok markus@
3a8aabf0 1218 - stevesk@cvs.openbsd.org 2001/08/30 16:04:35
1219 [readconf.c ssh.1]
1220 validate ports for LocalForward/RemoteForward.
1221 add host/port alternative syntax for IPv6 (like -L/-R).
1222 ok markus@
ed787d14 1223 - stevesk@cvs.openbsd.org 2001/08/30 20:36:34
1224 [auth-options.c sshd.8]
1225 validate ports for permitopen key file option. add host/port
1226 alternative syntax for IPv6. ok markus@
4278ff63 1227 - markus@cvs.openbsd.org 2001/08/30 22:22:32
1228 [ssh-keyscan.c]
1229 do not pass pointers to longjmp; fix from wayne@blorf.net
6b759005 1230 - markus@cvs.openbsd.org 2001/08/31 11:46:39
1231 [sshconnect2.c]
93111dfa 1232 disable kbd-interactive if we don't get SSH2_MSG_USERAUTH_INFO_REQUEST
1233 messages
1234 - stevesk@cvs.openbsd.org 2001/09/03 20:58:33
1235 [readconf.c readconf.h ssh.c]
1236 fatal() for nonexistent -Fssh_config. ok markus@
91789042 1237 - deraadt@cvs.openbsd.org 2001/09/05 06:23:07
1238 [scp.1 sftp.1 ssh.1 ssh-agent.1 sshd.8 ssh-keygen.1 ssh-keyscan.1]
1239 avoid first person in manual pages
3a222388 1240 - stevesk@cvs.openbsd.org 2001/09/12 18:18:25
1241 [scp.c]
1242 don't forward agent for non third-party copies; ok markus@
5c53a31e 1243
c6ed03bd 124420010815
1245 - (bal) Fixed stray code in readconf.c that went in by mistake.
65e683bd 1246 - OpenBSD CVS Sync
1247 - markus@cvs.openbsd.org 2001/08/07 10:37:46
1248 [authfd.c authfd.h]
1249 extended failure messages from galb@vandyke.com
c7f89f1f 1250 - deraadt@cvs.openbsd.org 2001/08/08 07:16:58
1251 [scp.1]
1252 when describing the -o option, give -o Protocol=1 as the specific example
1253 since we are SICK AND TIRED of clueless people who cannot have difficulty
1254 thinking on their own.
f2f1bedd 1255 - markus@cvs.openbsd.org 2001/08/08 18:20:15
1256 [uidswap.c]
1257 permanently_set_uid is a noop if user is not privilegued;
1258 fixes bug on solaris; from sbi@uchicago.edu
58df8789 1259 - markus@cvs.openbsd.org 2001/08/08 21:34:19
1260 [uidswap.c]
1261 undo last change; does not work for sshd
c3abff07 1262 - jakob@cvs.openbsd.org 2001/08/11 22:51:27
1263 [ssh.c tildexpand.c]
1264 fix more paths beginning with "//"; <bradshaw@staff.crosswalk.com>.
1265 ok markus@
4fa5a4db 1266 - stevesk@cvs.openbsd.org 2001/08/13 23:38:54
1267 [scp.c]
1268 don't need main prototype (also sync with rcp); ok markus@
68874d2b 1269 - markus@cvs.openbsd.org 2001/08/14 09:23:02
1270 [sftp.1 sftp-int.c]
1271 "bye"; hk63a@netscape.net
38539909 1272 - stevesk@cvs.openbsd.org 2001/08/14 17:54:29
1273 [scp.1 sftp.1 ssh.1]
1274 consistent documentation and example of ``-o ssh_option'' for sftp and
1275 scp; document keyword=argument for ssh.
41cb4569 1276 - (bal) QNX resync. OK tim@
c6ed03bd 1277
3454ff55 127820010814
1279 - (stevesk) sshpty.c, cray.[ch]: whitespace, formatting and cleanup
1280 for some #ifdef _CRAY code; ok wendyp@cray.com
5bd6962b 1281 - (stevesk) sshpty.c: return 0 on error in cray pty code;
1282 ok wendyp@cray.com
4809bc4c 1283 - (stevesk) bsd-cray.c: utmp strings are not C strings
8280a5ae 1284 - (stevesk) bsd-cray.c: more cleanup; ok wendyp@cray.com
3454ff55 1285
d89a02d4 128620010812
1287 - (djm) Fix detection of long long int support. Based on patch from
1288 Michael Stone <mstone@cs.loyola.edu>. ok stevesk, tim
1289
7ef909d3 129020010808
1291 - (bal) Minor correction to inet_ntop.h. _BSD_RRESVPORT_H should be
1292 _BSD_INET_NTOP_H. Pointed out by Mark Miller <markm@swoon.net>
1293
a704dd54 129420010807
1295 - (tim) [configure.in sshconnect.c openbsd-compat/Makefile.in
1296 openbsd-compat/openbsd-compat.h ] Add inet_ntop.c inet_ntop.h back
1297 in. Needed for sshconnect.c
1298 [sshconnect.c] fix INET6_ADDRSTRLEN for non IPv6 machines
1299 [configure.in] make tests with missing libraries fail
1300 patch by Wendy Palm <wendyp@cray.com>
1301 Added openbsd-compat/bsd-cray.h. Selective patches from
1302 William L. Jones <jones@mail.utexas.edu>
1303
4f7893dc 130420010806
1305 - OpenBSD CVS Sync
1306 - markus@cvs.openbsd.org 2001/07/22 21:32:27
1307 [sshpty.c]
1308 update comment
0aea6c59 1309 - pvalchev@cvs.openbsd.org 2001/07/22 21:32:42
1310 [ssh.1]
1311 There is no option "Compress", point to "Compression" instead; ok
1312 markus
10a2cbef 1313 - markus@cvs.openbsd.org 2001/07/22 22:04:19
1314 [readconf.c ssh.1]
1315 enable challenge-response auth by default; ok millert@
248bad82 1316 - markus@cvs.openbsd.org 2001/07/22 22:24:16
1317 [sshd.8]
1318 Xr login.conf
9f37c0af 1319 - markus@cvs.openbsd.org 2001/07/23 09:06:28
1320 [sshconnect2.c]
1321 reorder default sequence of userauth methods to match ssh behaviour:
1322 hostbased,publickey,keyboard-interactive,password
29c440a0 1323 - markus@cvs.openbsd.org 2001/07/23 12:47:05
1324 [ssh.1]
1325 sync PreferredAuthentications
7fd9477e 1326 - aaron@cvs.openbsd.org 2001/07/23 14:14:18
1327 [ssh-keygen.1]
1328 Fix typo.
1bdee08c 1329 - stevesk@cvs.openbsd.org 2001/07/23 18:14:58
1330 [auth2.c auth-rsa.c]
1331 use %lu; ok markus@
bac2ef55 1332 - stevesk@cvs.openbsd.org 2001/07/23 18:21:46
1333 [xmalloc.c]
1334 no zero size xstrdup() error; ok markus@
55684f0c 1335 - markus@cvs.openbsd.org 2001/07/25 11:59:35
1336 [scard.c]
1337 typo in comment
ce773142 1338 - markus@cvs.openbsd.org 2001/07/25 14:35:18
1339 [readconf.c ssh.1 ssh.c sshconnect.c]
1340 cleanup connect(); connection_attempts 4 -> 1; from
1341 eivind@freebsd.org
f87f09aa 1342 - stevesk@cvs.openbsd.org 2001/07/26 17:18:22
1343 [sshd.8 sshd.c]
1344 add -t option to test configuration file and keys; pekkas@netcore.fi
1345 ok markus@
c42158fe 1346 - rees@cvs.openbsd.org 2001/07/26 20:04:27
1347 [scard.c ssh-keygen.c]
1348 Inquire Cyberflex class for 0xf0 cards
1349 change aid to conform to 7816-5
1350 remove gratuitous fid selects
2e23cde0 1351 - millert@cvs.openbsd.org 2001/07/27 14:50:45
1352 [ssh.c]
1353 If smart card support is compiled in and a smart card is being used
1354 for authentication, make it the first method used. markus@ OK
0b2988ca 1355 - deraadt@cvs.openbsd.org 2001/07/27 17:26:16
1356 [scp.c]
1357 shorten lines
7f19f8bb 1358 - markus@cvs.openbsd.org 2001/07/28 09:21:15
1359 [sshd.8]
1360 cleanup some RSA vs DSA vs SSH1 vs SSH2 notes
79a6cb5c 1361 - mouring@cvs.openbsd.org 2001/07/29 17:02:46
1362 [scp.1]
1363 Clarified -o option in scp.1 OKed by Markus@
0b595937 1364 - jakob@cvs.openbsd.org 2001/07/30 16:06:07
1365 [scard.c scard.h]
1366 better errorcodes from sc_*; ok markus@
d6192346 1367 - stevesk@cvs.openbsd.org 2001/07/30 16:23:30
1368 [rijndael.c rijndael.h]
1369 new BSD-style license:
1370 Brian Gladman <brg@gladman.plus.com>:
1371 >I have updated my code at:
1372 >http://fp.gladman.plus.com/cryptography_technology/rijndael/index.htm
1373 >with a copyright notice as follows:
1374 >[...]
1375 >I am not sure which version of my old code you are using but I am
1376 >happy for the notice above to be substituted for my existing copyright
1377 >intent if this meets your purpose.
71b7a18e 1378 - jakob@cvs.openbsd.org 2001/07/31 08:41:10
1379 [scard.c]
1380 do not complain about missing smartcards. ok markus@
eea098a3 1381 - jakob@cvs.openbsd.org 2001/07/31 09:28:44
1382 [readconf.c readconf.h ssh.1 ssh.c]
1383 add 'SmartcardDevice' client option to specify which smartcard device
1384 is used to access a smartcard used for storing the user's private RSA
1385 key. ok markus@.
88690211 1386 - jakob@cvs.openbsd.org 2001/07/31 12:42:50
1387 [sftp-int.c sftp-server.c]
1388 avoid paths beginning with "//"; <vinschen@redhat.com>
1389 ok markus@
2251e099 1390 - jakob@cvs.openbsd.org 2001/07/31 12:53:34
1391 [scard.c]
1392 close smartcard connection if card is missing
9ff6f66f 1393 - markus@cvs.openbsd.org 2001/08/01 22:03:33
1394 [authfd.c authfd.h readconf.c readconf.h scard.c scard.h ssh-add.c
1395 ssh-agent.c ssh.c]
1396 use strings instead of ints for smartcard reader ids
1930af48 1397 - markus@cvs.openbsd.org 2001/08/01 22:16:45
1398 [ssh.1 sshd.8]
1399 refer to current ietf drafts for protocol v2
4f831fd7 1400 - markus@cvs.openbsd.org 2001/08/01 23:33:09
1401 [ssh-keygen.c]
1402 allow uploading RSA keys for non-default AUT0 (sha1 over passphrase
1403 like sectok).
1a23ac2c 1404 - markus@cvs.openbsd.org 2001/08/01 23:38:45
05b7537a 1405 [scard.c ssh.c]
1406 support finish rsa keys.
1407 free public keys after login -> call finish -> close smartcard.
93a56445 1408 - markus@cvs.openbsd.org 2001/08/02 00:10:17
1409 [ssh-keygen.c]
1410 add -D readerid option (download, i.e. print public RSA key to stdout).
1411 check for card present when uploading keys.
1412 use strings instead of ints for smartcard reader ids, too.
285d2b15 1413 - jakob@cvs.openbsd.org 2001/08/02 08:58:35
1414 [ssh-keygen.c]
1415 change -u (upload smartcard key) to -U. ok markus@
58153e34 1416 - jakob@cvs.openbsd.org 2001/08/02 15:06:52
1417 [ssh-keygen.c]
1418 more verbose usage(). ok markus@
f0d6bdcf 1419 - jakob@cvs.openbsd.org 2001/08/02 15:07:23
1420 [ssh-keygen.1]
1421 document smartcard upload/download. ok markus@
315dfb04 1422 - jakob@cvs.openbsd.org 2001/08/02 15:32:10
1423 [ssh.c]
1424 add smartcard to usage(). ok markus@
3e984472 1425 - jakob@cvs.openbsd.org 2001/08/02 15:43:57
1426 [ssh-agent.c ssh.c ssh-keygen.c]
1427 add /* SMARTCARD */ to #else/#endif. ok markus@
1a23ac2c 1428 - jakob@cvs.openbsd.org 2001/08/02 16:14:05
dd2495cb 1429 [scard.c ssh-agent.c ssh.c ssh-keygen.c]
1430 clean up some /* SMARTCARD */. ok markus@
0f6d5acf 1431 - mpech@cvs.openbsd.org 2001/08/02 18:37:35
1432 [ssh-keyscan.1]
1433 o) .Sh AUTHOR -> .Sh AUTHORS;
1434 o) .Sh EXAMPLE -> .Sh EXAMPLES;
1435 o) Delete .Sh OPTIONS. Text moved to .Sh DESCRIPTION;
1436
1437 millert@ ok
5a26334c 1438 - jakob@cvs.openbsd.org 2001/08/03 10:31:19
1439 [ssh-add.1]
1440 document smartcard options. ok markus@
33e766d2 1441 - jakob@cvs.openbsd.org 2001/08/03 10:31:30
1442 [ssh-add.c ssh-agent.c ssh-keyscan.c]
1443 improve usage(). ok markus@
5061072f 1444 - markus@cvs.openbsd.org 2001/08/05 23:18:20
1445 [ssh-keyscan.1 ssh-keyscan.c]
1446 ssh 2 support; from wayned@users.sourceforge.net
578954b1 1447 - markus@cvs.openbsd.org 2001/08/05 23:29:58
1448 [ssh-keyscan.c]
1449 make -t dsa work with commercial servers, too
cddb9003 1450 - stevesk@cvs.openbsd.org 2001/08/06 19:47:05
1451 [scp.c]
1452 use alarm vs. setitimer for portable; ok markus@
94796c10 1453 - (bal) ssh-keyscan double -lssh hack due to seed_rng().
1a23ac2c 1454 - (bal) Second around of UNICOS patches. A few other things left.
1455 Patches by William L. Jones <jones@mail.utexas.edu>
4f7893dc 1456
29a47408 145720010803
1458 - (djm) Fix interrupted read in entropy gatherer. Spotted by markus@ on
1459 a fast UltraSPARC.
1460
42ad0eec 146120010726
1462 - (stevesk) use mysignal() in protocol 1 loop now that the SIGCHLD
1463 handler has converged.
1464
aa7dbcdd 146520010725
1466 - (bal) Added 'install-nokeys' to Makefile to assist package builders.
1467
0b7d19eb 146820010724
1469 - (bal) 4711 not 04711 for ssh binary.
1470
ca5c7d6a 147120010722
1472 - (bal) Starting the Unicossmk merger. File merged TODO, configure.in,
1473 myproposal.h, ssh_prng_cmds.in, and openbsd-compat/Makefile.in.
1474 Added openbsd-compat/bsd-cray.c. Rest will be merged after
1475 approval. Selective patches from William L. Jones
1476 <jones@mail.utexas.edu>
7458aff1 1477 - OpenBSD CVS Sync
1478 - markus@cvs.openbsd.org 2001/07/18 21:10:43
1479 [sshpty.c]
1480 pr #1946, allow sshd if /dev is readonly
ec9f3450 1481 - stevesk@cvs.openbsd.org 2001/07/18 21:40:40
1482 [ssh-agent.c]
1483 chdir("/") from bbraun@synack.net; ok markus@
5bef3c35 1484 - stevesk@cvs.openbsd.org 2001/07/19 00:41:44
1485 [ssh.1]
1486 escape chars are below now
7efa8482 1487 - markus@cvs.openbsd.org 2001/07/20 14:46:11
1488 [ssh-agent.c]
1489 do not exit() from signal handlers; ok deraadt@
491f5f7b 1490 - stevesk@cvs.openbsd.org 2001/07/20 18:41:51
1491 [ssh.1]
1492 "the" command line
ca5c7d6a 1493
979b0a64 149420010719
1495 - (tim) [configure.in] put inet_aton back in AC_CHECK_FUNCS.
1496 report from Mark Miller <markm@swoon.net>
1497
6e69a45d 149820010718
1499 - OpenBSD CVS Sync
2c5b1791 1500 - stevesk@cvs.openbsd.org 2001/07/14 15:10:17
1501 [readpass.c sftp-client.c sftp-common.c sftp-glob.c]
1502 delete spurious #includes; ok deraadt@ markus@
68fa858a 1503 - markus@cvs.openbsd.org 2001/07/15 16:17:08
2c5b1791 1504 [serverloop.c]
1505 schedule client alive for ssh2 only, greg@cheers.bungi.com
2c71dfc1 1506 - stevesk@cvs.openbsd.org 2001/07/15 16:57:21
1507 [ssh-agent.1]
1508 -d will not fork; ok markus@
d1fc1b88 1509 - stevesk@cvs.openbsd.org 2001/07/15 16:58:29
68fa858a 1510 [ssh-agent.c]
d1fc1b88 1511 typo in usage; ok markus@
68fa858a 1512 - markus@cvs.openbsd.org 2001/07/17 20:48:42
1513 [ssh-agent.c]
e364646f 1514 update maxfd if maxfd is closed; report from jmcelroy@dtgnet.com
68fa858a 1515 - markus@cvs.openbsd.org 2001/07/17 21:04:58
1516 [channels.c channels.h clientloop.c nchan.c serverloop.c]
489aa2e9 1517 keep track of both maxfd and the size of the malloc'ed fdsets.
1518 update maxfd if maxfd gets closed.
c3941fa6 1519 - mouring@cvs.openbsd.org 2001/07/18 16:45:52
1520 [scp.c]
1521 Missing -o in scp usage()
68fa858a 1522 - (bal) Cleaned up trailing spaces in ChangeLog.
31fb6aaf 1523 - (bal) Allow sshd to switch user context without password for Cygwin.
1524 Patch by Corinna Vinschen <vinschen@redhat.com>
41fcc457 1525 - (bal) Updated cygwin README and ssh-host-config. Patch by
ad0cc858 1526 Corinna Vinschen <vinschen@redhat.com>
6e69a45d 1527
39c98ef7 152820010715
1529 - (bal) Set "BROKEN_GETADDRINFO" for darwin platform. Reported by
1530 Josh Larios <jdlarios@cac.washington.edu>
c14e6239 1531 - (tim) put openssh/openbsd-compat/inet_aton.[ch] back in.
1532 needed by openbsd-compat/fake-getaddrinfo.c
68fa858a 1533
6800f427 153420010714
1535 - (stevesk) change getopt() declaration
763a1a18 1536 - (stevesk) configure.in: use ll suffix for long long constant
1537 in snprintf() test
6800f427 1538
453b4bd0 153920010713
68fa858a 1540 - (djm) Enable /etc/nologin check on PAM systems, as some lack the
1541 pam_nologin module. Report from William Yodlowsky
453b4bd0 1542 <bsd@openbsd.rutgers.edu>
9912296f 1543 - (djm) Revert dirname fix, a better one is on its way.
1ee482c5 1544 - OpenBSD CVS Sync
1545 - markus@cvs.openbsd.org 2001/07/04 22:47:19
1546 [ssh-agent.c]
1547 ignore SIGPIPE when debugging, too
878b5225 1548 - markus@cvs.openbsd.org 2001/07/04 23:13:10
1549 [scard.c scard.h ssh-agent.c]
1550 handle card removal more gracefully, add sc_close() to scard.h
77261db4 1551 - markus@cvs.openbsd.org 2001/07/04 23:39:07
1552 [ssh-agent.c]
1553 for smartcards remove both RSA1/2 keys
a0e0f486 1554 - markus@cvs.openbsd.org 2001/07/04 23:49:27
1555 [ssh-agent.c]
1556 handle mutiple adds of the same smartcard key
62bb2c8f 1557 - espie@cvs.openbsd.org 2001/07/05 11:43:33
1558 [sftp-glob.c]
1559 Directly cast to the right type. Ok markus@
1560 - stevesk@cvs.openbsd.org 2001/07/05 20:32:47
1561 [sshconnect1.c]
1562 statement after label; ok dugsong@
97de229c 1563 - stevesk@cvs.openbsd.org 2001/07/08 15:23:38
1564 [servconf.c]
1565 fix ``MaxStartups max''; ok markus@
f5a1a01a 1566 - fgsch@cvs.openbsd.org 2001/07/09 05:58:47
1567 [ssh.c]
1568 Use getopt(3); markus@ ok.
ed916b28 1569 - deraadt@cvs.openbsd.org 2001/07/09 07:04:53
1570 [session.c sftp-int.c]
1571 correct type on last arg to execl(); nordin@cse.ogi.edu
333b5ba7 1572 - markus@cvs.openbsd.org 2001/07/10 21:49:12
1573 [readpass.c]
1574 don't panic if fork or pipe fail (just return an empty passwd).
46d738cd 1575 - itojun@cvs.openbsd.org 2001/07/11 00:24:53
1576 [servconf.c]
68fa858a 1577 make it compilable in all 4 combination of KRB4/KRB5 settings.
46d738cd 1578 dugsong ok
1579 XXX isn't it sensitive to the order of -I/usr/include/kerberosIV and
1580 -I/usr/include/kerberosV?
afd501f9 1581 - markus@cvs.openbsd.org 2001/07/11 16:29:59
1582 [ssh.c]
1583 sort options string, fix -p, add -k
1584 - markus@cvs.openbsd.org 2001/07/11 18:26:15
1585 [auth.c]
1586 no need to call dirname(pw->pw_dir).
1587 note that dirname(3) modifies its argument on some systems.
82d95536 1588 - (djm) Reorder Makefile.in so clean targets work a little better when
1589 run directly from Makefile.in
1812a662 1590 - (djm) Pull in getopt(3) from OpenBSD libc for the optreset extension.
453b4bd0 1591
85b08d98 159220010711
68fa858a 1593 - (djm) dirname(3) may modify its argument on glibc and other systems.
85b08d98 1594 Patch from markus@, spotted by Tom Holroyd <tomh@po.crl.go.jp>
1595
a96070d4 159620010704
1597 - OpenBSD CVS Sync
1598 - markus@cvs.openbsd.org 2001/06/25 08:25:41
68fa858a 1599 [channels.c channels.h cipher.c clientloop.c compat.c compat.h
1600 hostfile.c kex.c kex.h key.c key.h nchan.c packet.c serverloop.c
a96070d4 1601 session.c session.h sftp-server.c ssh-add.c ssh-agent.c uuencode.h]
1602 update copyright for 2001
8a497b11 1603 - markus@cvs.openbsd.org 2001/06/25 17:18:27
1604 [ssh-keygen.1]
68fa858a 1605 sshd(8) will never read the private keys, but ssh(1) does;
8a497b11 1606 hugh@mimosa.com
6978866a 1607 - provos@cvs.openbsd.org 2001/06/25 17:54:47
1608 [auth.c auth.h auth-rsa.c]
68fa858a 1609 terminate secure_filename checking after checking homedir. that way
ffb215be 1610 it works on AFS. okay markus@
1611 - stevesk@cvs.openbsd.org 2001/06/25 20:26:37
1612 [auth2.c sshconnect2.c]
1613 prototype cleanup; ok markus@
2b30154a 1614 - markus@cvs.openbsd.org 2001/06/26 02:47:07
1615 [ssh-keygen.c]
1616 allow loading a private RSA key to a cyberflex card.
ffdb5d70 1617 - markus@cvs.openbsd.org 2001/06/26 04:07:06
1618 [ssh-agent.1 ssh-agent.c]
1619 add debug flag
983def13 1620 - markus@cvs.openbsd.org 2001/06/26 04:59:59
1621 [authfd.c authfd.h ssh-add.c]
1622 initial support for smartcards in the agent
f7e5ac7b 1623 - markus@cvs.openbsd.org 2001/06/26 05:07:43
1624 [ssh-agent.c]
1625 update usage
2b5fe3b8 1626 - markus@cvs.openbsd.org 2001/06/26 05:33:34
1627 [ssh-agent.c]
1628 more smartcard support.
543baeea 1629 - mpech@cvs.openbsd.org 2001/06/26 05:48:07
1630 [sshd.8]
1631 remove unnecessary .Pp between .It;
1632 millert@ ok
0c9664c2 1633 - markus@cvs.openbsd.org 2001/06/26 05:50:11
1634 [auth2.c]
1635 new interface for secure_filename()
2a1e4639 1636 - itojun@cvs.openbsd.org 2001/06/26 06:32:58
68fa858a 1637 [atomicio.h authfd.h authfile.h auth.h auth-options.h bufaux.h
1638 buffer.h canohost.h channels.h cipher.h clientloop.h compat.h
1639 compress.h crc32.h deattack.h dh.h dispatch.h groupaccess.h
1640 hostfile.h kex.h key.h log.h mac.h match.h misc.h mpaux.h packet.h
2a1e4639 1641 radix.h readconf.h readpass.h rsa.h]
1642 prototype pedant. not very creative...
1643 - () -> (void)
1644 - no variable names
1c06a9ca 1645 - itojun@cvs.openbsd.org 2001/06/26 06:33:07
68fa858a 1646 [servconf.h serverloop.h session.h sftp-client.h sftp-common.h
1647 sftp-glob.h sftp-int.h sshconnect.h ssh-dss.h sshlogin.h sshpty.h
1c06a9ca 1648 ssh-rsa.h tildexpand.h uidswap.h uuencode.h xmalloc.h]
1649 prototype pedant. not very creative...
1650 - () -> (void)
1651 - no variable names
ced49be2 1652 - dugsong@cvs.openbsd.org 2001/06/26 16:15:25
68fa858a 1653 [auth1.c auth.h auth-krb4.c auth-passwd.c readconf.c readconf.h
ced49be2 1654 servconf.c servconf.h session.c sshconnect1.c sshd.c]
68fa858a 1655 Kerberos v5 support for SSH1, mostly from Assar Westerlund
ced49be2 1656 <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
3474b2b4 1657 - markus@cvs.openbsd.org 2001/06/26 17:25:34
1658 [ssh.1]
1659 document SSH_ASKPASS; fubob@MIT.EDU
255cabd9 1660 - markus@cvs.openbsd.org 2001/06/26 17:27:25
68fa858a 1661 [authfd.h authfile.h auth.h auth-options.h bufaux.h buffer.h
1662 canohost.h channels.h cipher.h clientloop.h compat.h compress.h
1663 crc32.h deattack.h dh.h dispatch.h groupaccess.c groupaccess.h
1664 hostfile.h kex.h key.h log.c log.h mac.h misc.c misc.h mpaux.h
1665 packet.h radix.h readconf.h readpass.h rsa.h servconf.h serverloop.h
1666 session.h sftp-common.c sftp-common.h sftp-glob.h sftp-int.h
1667 sshconnect.h ssh-dss.h sshlogin.h sshpty.h ssh-rsa.h sshtty.h
255cabd9 1668 tildexpand.h uidswap.h uuencode.h xmalloc.h]
1669 remove comments from .h, since they are cut&paste from the .c files
1670 and out of sync
83f46621 1671 - dugsong@cvs.openbsd.org 2001/06/26 17:41:49
1672 [servconf.c]
1673 #include <kafs.h>
57156994 1674 - markus@cvs.openbsd.org 2001/06/26 20:14:11
1675 [key.c key.h ssh.c sshconnect1.c sshconnect2.c]
1676 add smartcard support to the client, too (now you can use both
1677 the agent and the client).
1678 - markus@cvs.openbsd.org 2001/06/27 02:12:54
1679 [serverloop.c serverloop.h session.c session.h]
1680 quick hack to make ssh2 work again.
80f8f24f 1681 - markus@cvs.openbsd.org 2001/06/27 04:48:53
1682 [auth.c match.c sshd.8]
1683 tridge@samba.org
d0bfe096 1684 - markus@cvs.openbsd.org 2001/06/27 05:35:42
1685 [ssh-keygen.c]
1686 use cyberflex_inq_class to inquire class.
2b63e803 1687 - markus@cvs.openbsd.org 2001/06/27 05:42:25
1688 [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
1689 s/generate_additional_parameters/rsa_generate_additional_parameters/
1690 http://www.humppa.com/
34e02b83 1691 - markus@cvs.openbsd.org 2001/06/27 06:26:36
1692 [ssh-add.c]
1693 convert to getopt(3)
d3260e12 1694 - stevesk@cvs.openbsd.org 2001/06/28 19:57:35
1695 [ssh-keygen.c]
1696 '\0' terminated data[] is ok; ok markus@
49ccba9c 1697 - markus@cvs.openbsd.org 2001/06/29 07:06:34
1698 [ssh-keygen.c]
1699 new error handling for cyberflex_*
542d70b8 1700 - markus@cvs.openbsd.org 2001/06/29 07:11:01
1701 [ssh-keygen.c]
1702 initialize early
eea46d13 1703 - stevesk@cvs.openbsd.org 2001/06/29 18:38:44
1704 [clientloop.c]
1705 sync function definition with declaration; ok markus@
8ab2cb35 1706 - stevesk@cvs.openbsd.org 2001/06/29 18:40:28
1707 [channels.c]
1708 use socklen_t for getsockopt arg #5; ok markus@
b3f8a79c 1709 - stevesk@cvs.openbsd.org 2001/06/30 18:08:40
1710 [channels.c channels.h clientloop.c]
1711 adress -> address; ok markus@
5b5d170c 1712 - markus@cvs.openbsd.org 2001/07/02 13:59:15
1713 [serverloop.c session.c session.h]
68fa858a 1714 wait until !session_have_children(); bugreport from
5b5d170c 1715 Lutz.Jaenicke@aet.TU-Cottbus.DE
613021ac 1716 - markus@cvs.openbsd.org 2001/07/02 22:29:20
1717 [readpass.c]
1718 do not return NULL, use "" instead.
666248da 1719 - markus@cvs.openbsd.org 2001/07/02 22:40:18
1720 [ssh-keygen.c]
1721 update for sectok.h interface changes.
3cf2be58 1722 - markus@cvs.openbsd.org 2001/07/02 22:52:57
1723 [channels.c channels.h serverloop.c]
1724 improve cleanup/exit logic in ssh2:
1725 stop listening to channels, detach channel users (e.g. sessions).
1726 wait for children (i.e. dying sessions), send exit messages,
1727 cleanup all channels.
637b033d 1728 - (bal) forget a few new files in sync up.
06be7c3b 1729 - (bal) Makefile fix up requires scard.c
ac96ca42 1730 - (stevesk) sync misc.h
9c328529 1731 - (stevesk) more sync for session.c
4f1f4d8d 1732 - (stevesk) sync servconf.h (comments)
afb9165e 1733 - (tim) [contrib/caldera/openssh.spec] sync with Caldera
d9e3d19f 1734 - (tim) [openbsd-compat/dirname.h] Remove ^M causing some compilers to
1735 issue warning (line 1: tokens ignored at end of directive line)
1736 - (tim) [sshconnect1.c] give the compiler something to do for success:
1737 if KRB5 and AFS are not defined
1738 (ERROR: "sshconnect1.c", line 1274: Syntax error before or at: })
637b033d 1739
aa8d09da 174020010629
1741 - (bal) Removed net_aton() since we don't use it any more
64c4b8d7 1742 - (bal) Fixed _DISABLE_VPOSIX in readpassphrase.c.
7af3215a 1743 - (bal) Updated zlib's home. Thanks to David Howe <DaveHowe@gmx.co.uk>.
16adf618 1744 - (stevesk) remove _REENTRANT #define
16995a2c 1745 - (stevesk) session.c: use u_int for envsize
6a26f353 1746 - (stevesk) remove cli.[ch]
aa8d09da 1747
f11065cb 174820010628
1749 - (djm) Sync openbsd-compat with -current libc
68fa858a 1750 - (djm) Fix from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> for my
050df9db 1751 broken makefile
07608451 1752 - (bal) Removed strtok_r() and inet_ntop() since they are no longer used.
1753 - (bal) Remove getusershell() since it's no longer used.
f11065cb 1754
78220944 175520010627
1756 - (djm) Reintroduce pam_session call for non-pty sessions.
68fa858a 1757 - (djm) Remove redundant and incorrect test for max auth attempts in
1758 PAM kbdint code. Based on fix from Matthew Melvin
763dfdf0 1759 <matthewm@webcentral.com.au>
f0194608 1760 - (djm) Rename sysconfdir/primes => sysconfdir/moduli
68fa858a 1761 - (djm) Oops, forgot make logic for primes=>moduli. Also try to rename
ff4955c9 1762 existing primes->moduli if it exists.
0eb1a22d 1763 - (djm) Sync with -current openbsd-compat/readpassphrase.c:
1764 - djm@cvs.openbsd.org 2001/06/27 13:23:30
1765 typo, spotted by Tom Holroyd <tomh@po.crl.go.jp>; ok deraadt@
5ed2bb5b 1766 - (djm) Turn up warnings if gcc or egcs detected
b8fea62d 1767 - (stevesk) for HP-UX 11.X use X/Open socket interface;
1768 pulls in modern socket prototypes and eliminates a number of compiler
1769 warnings. see xopen_networking(7).
fef01705 1770 - (stevesk) fix x11 forwarding from _PATH_XAUTH change
28564873 1771 - (stevesk) use X/Open socket interface for HP-UX 10.X also
78220944 1772
e16f4ac8 177320010625
0cd000dd 1774 - OpenBSD CVS Sync
bc233fdf 1775 - markus@cvs.openbsd.org 2001/06/21 21:08:25
1776 [session.c]
1777 don't reset forced_command (we allow multiple login shells in
1778 ssh2); dwd@bell-labs.com
a5a2da3b 1779 - mpech@cvs.openbsd.org 2001/06/22 10:17:51
1780 [ssh.1 sshd.8 ssh-keyscan.1]
1781 o) .Sh AUTHOR -> .Sh AUTHORS;
1782 o) remove unnecessary .Pp;
1783 o) better -mdoc style;
1784 o) typo;
1785 o) sort SEE ALSO;
a5a2da3b 1786 aaron@ ok
e2854364 1787 - provos@cvs.openbsd.org 2001/06/22 21:27:08
1788 [dh.c pathnames.h]
1789 use /etc/moduli instead of /etc/primes, okay markus@
e2432638 1790 - provos@cvs.openbsd.org 2001/06/22 21:28:53
1791 [sshd.8]
1792 document /etc/moduli
96a7b0cc 1793 - markus@cvs.openbsd.org 2001/06/22 21:55:49
68fa858a 1794 [auth2.c auth-rsa.c pathnames.h ssh.1 sshd.8 sshd_config
96a7b0cc 1795 ssh-keygen.1]
1796 merge authorized_keys2 into authorized_keys.
1797 authorized_keys2 is used for backward compat.
1798 (just append authorized_keys2 to authorized_keys).
826676b3 1799 - provos@cvs.openbsd.org 2001/06/22 21:57:59
1800 [dh.c]
1801 increase linebuffer to deal with larger moduli; use rewind instead of
1802 close/open
bc233fdf 1803 - markus@cvs.openbsd.org 2001/06/22 22:21:20
1804 [sftp-server.c]
1805 allow long usernames/groups in readdir
a599bd06 1806 - markus@cvs.openbsd.org 2001/06/22 23:35:21
2e000c58 1807 [ssh.c]
1808 don't overwrite argv (fixes ssh user@host in 'ps'), report by ericj@
cb220a93 1809 - deraadt@cvs.openbsd.org 2001/06/23 00:16:16
1810 [scp.c]
1811 slightly better care
d0c8ca5c 1812 - markus@cvs.openbsd.org 2001/06/23 00:20:57
1813 [auth2.c auth.c auth.h auth-rh-rsa.c]
1814 *known_hosts2 is obsolete for hostbased authentication and
1815 only used for backward compat. merge ssh1/2 hostkey check
1816 and move it to auth.c
e16f4ac8 1817 - deraadt@cvs.openbsd.org 2001/06/23 02:33:05
1818 [sftp.1 sftp-server.8 ssh-keygen.1]
1819 join .%A entries; most by bk@rt.fm
f49bc4f7 1820 - markus@cvs.openbsd.org 2001/06/23 02:34:33
68fa858a 1821 [kexdh.c kexgex.c kex.h pathnames.h readconf.c servconf.h ssh.1
f49bc4f7 1822 sshconnect1.c sshconnect2.c sshconnect.c sshconnect.h sshd.8]
68fa858a 1823 get rid of known_hosts2, use it for hostkey lookup, but do not
f49bc4f7 1824 modify.
7d747e89 1825 - markus@cvs.openbsd.org 2001/06/23 03:03:59
1826 [sshd.8]
1827 draft-ietf-secsh-dh-group-exchange-01.txt
73473230 1828 - markus@cvs.openbsd.org 2001/06/23 03:04:42
1829 [auth2.c auth-rh-rsa.c]
1830 restore correct ignore_user_known_hosts logic.
c10d042a 1831 - markus@cvs.openbsd.org 2001/06/23 05:26:02
1832 [key.c]
1833 handle sigature of size 0 (some broken clients send this).
7b518233 1834 - deraadt@cvs.openbsd.org 2001/06/23 05:57:09
1835 [sftp.1 sftp-server.8 ssh-keygen.1]
1836 ok, tmac is now fixed
2e0becb6 1837 - markus@cvs.openbsd.org 2001/06/23 06:41:10
1838 [ssh-keygen.c]
1839 try to decode ssh-3.0.0 private rsa keys
1840 (allow migration to openssh, not vice versa), #910
396c147e 1841 - itojun@cvs.openbsd.org 2001/06/23 15:12:20
68fa858a 1842 [auth1.c auth2.c auth2-chall.c authfd.c authfile.c auth-rhosts.c
1843 canohost.c channels.c cipher.c clientloop.c deattack.c dh.c
1844 hostfile.c kex.c kexdh.c kexgex.c key.c nchan.c packet.c radix.c
1845 readpass.c scp.c servconf.c serverloop.c session.c sftp.c
1846 sftp-client.c sftp-glob.c sftp-int.c sftp-server.c ssh-add.c
1847 ssh-agent.c ssh.c sshconnect1.c sshconnect2.c sshconnect.c sshd.c
396c147e 1848 ssh-keygen.c ssh-keyscan.c]
68fa858a 1849 more strict prototypes. raise warning level in Makefile.inc.
396c147e 1850 markus ok'ed
1851 TODO; cleanup headers
a599bd06 1852 - markus@cvs.openbsd.org 2001/06/23 17:05:22
1853 [ssh-keygen.c]
1854 fix import for (broken?) ssh.com/f-secure private keys
1855 (i tested > 1000 RSA keys)
3730bb22 1856 - itojun@cvs.openbsd.org 2001/06/23 17:48:18
1857 [sftp.1 ssh.1 sshd.8 ssh-keyscan.1]
1858 kill whitespace at EOL.
3aca00a3 1859 - markus@cvs.openbsd.org 2001/06/23 19:12:43
1860 [sshd.c]
1861 pidfile/sigterm race; bbraun@synack.net
ce404659 1862 - markus@cvs.openbsd.org 2001/06/23 22:37:46
1863 [sshconnect1.c]
1864 consistent with ssh2: skip key if empty passphrase is entered,
1865 retry num_of_passwd_prompt times if passphrase is wrong. ok fgsch@
2cee8a25 1866 - markus@cvs.openbsd.org 2001/06/24 05:25:10
1867 [auth-options.c match.c match.h]
1868 move ip+hostname check to match.c
1843a425 1869 - markus@cvs.openbsd.org 2001/06/24 05:35:33
1870 [readpass.c readpass.h ssh-add.c sshconnect2.c ssh-keygen.c]
1871 switch to readpassphrase(3)
1872 2.7/8-stable needs readpassphrase.[ch] from libc
80097c54 1873 - markus@cvs.openbsd.org 2001/06/24 05:47:13
1874 [sshconnect2.c]
1875 oops, missing format string
b4e7177c 1876 - markus@cvs.openbsd.org 2001/06/24 17:18:31
1877 [ttymodes.c]
1878 passing modes works fine: debug2->3
ab88181c 1879 - (djm) -Wall fix for session.c
3159d49a 1880 - (djm) Bring in readpassphrase() from OpenBSD libc. Compiles OK on Linux and
1881 Solaris
0cd000dd 1882
7751d4eb 188320010622
1884 - (stevesk) handle systems without pw_expire and pw_change.
1885
e04e7a19 188620010621
1887 - OpenBSD CVS Sync
1888 - markus@cvs.openbsd.org 2001/06/16 08:49:38
1889 [misc.c]
1890 typo; dunlap@apl.washington.edu
c03175c6 1891 - markus@cvs.openbsd.org 2001/06/16 08:50:39
1892 [channels.h]
1893 bad //-style comment; thx to stevev@darkwing.uoregon.edu
08c260ea 1894 - markus@cvs.openbsd.org 2001/06/16 08:57:35
1895 [scp.c]
1896 no stdio or exit() in signal handlers.
c4d49b85 1897 - markus@cvs.openbsd.org 2001/06/16 08:58:34
1898 [misc.c]
1899 copy pw_expire and pw_change, too.
dac6753b 1900 - markus@cvs.openbsd.org 2001/06/19 12:34:09
1901 [session.c]
1902 cleanup forced command handling, from dwd@bell-labs.com
ff027d84 1903 - markus@cvs.openbsd.org 2001/06/19 14:09:45
1904 [session.c sshd.8]
1905 disable x11-fwd if use_login is enabled; from lukem@wasabisystems.com
c95add71 1906 - markus@cvs.openbsd.org 2001/06/19 15:40:45
1907 [session.c]
1908 allocate and free at the same level.
d6746a0b 1909 - markus@cvs.openbsd.org 2001/06/20 13:56:39
1910 [channels.c channels.h clientloop.c packet.c serverloop.c]
1911 move from channel_stop_listening to channel_free_all,
1912 call channel_free_all before calling waitpid() in serverloop.
1913 fixes the utmp handling; report from Lutz.Jaenicke@aet.TU-Cottbus.DE
e04e7a19 1914
5ad9f968 191520010615
1916 - (stevesk) don't set SA_RESTART and set SIGCHLD to SIG_DFL
1917 around grantpt().
f7940aa9 1918 - (stevesk) update TODO: STREAMS pty systems don't call vhangup() now
5ad9f968 1919
eb26141e 192020010614
1921 - OpenBSD CVS Sync
1922 - markus@cvs.openbsd.org 2001/06/13 09:10:31
1923 [session.c]
1924 typo, use pid not s->pid, mstone@cs.loyola.edu
1925
86066315 192620010613
eb26141e 1927 - OpenBSD CVS Sync
86066315 1928 - markus@cvs.openbsd.org 2001/06/12 10:58:29
1929 [session.c]
1930 merge session_free into session_close()
1931 merge pty_cleanup_proc into session_pty_cleanup()
653d5f86 1932 - markus@cvs.openbsd.org 2001/06/12 16:10:38
1933 [session.c]
1934 merge ssh1/ssh2 tty msg parse and alloc code
76735fe3 1935 - markus@cvs.openbsd.org 2001/06/12 16:11:26
1936 [packet.c]
1937 do not log() packet_set_maxsize
b44de2b1 1938 - markus@cvs.openbsd.org 2001/06/12 21:21:29
1939 [session.c]
1940 remove xauth-cookie-in-tmp handling. use default $XAUTHORITY, since
1941 we do already trust $HOME/.ssh
1942 you can use .ssh/sshrc and .ssh/environment if you want to customize
1943 the location of the xauth cookies
7a313633 1944 - markus@cvs.openbsd.org 2001/06/12 21:30:57
1945 [session.c]
1946 unused
86066315 1947
2c9d881a 194820010612
38296b32 1949 - scp.c ID update (upstream synced vfsprintf() from us)
1950 - OpenBSD CVS Sync
2c9d881a 1951 - markus@cvs.openbsd.org 2001/06/10 11:29:20
1952 [dispatch.c]
1953 we support rekeying
1954 protocol errors are fatal.
1500bcdd 1955 - markus@cvs.openbsd.org 2001/06/11 10:18:24
1956 [session.c]
1957 reset pointer to NULL after xfree(); report from solar@openwall.com
f740438e 1958 - markus@cvs.openbsd.org 2001/06/11 16:04:38
1959 [sshd.8]
1960 typo; bdubreuil@crrel.usace.army.mil
2c9d881a 1961
b4d02860 196220010611
68fa858a 1963 - (bal) NeXT/MacOS X lack libgen.h and dirname(). Patch by Mark Miller
1964 <markm@swoon.net>
224cbdcc 1965 - (bal) Handle broken krb4 issues on Solaris with multiple defined u_*_t
68fa858a 1966 types. Patch by Jan IVEN <Jan.Iven@cern.ch>
0bb724ce 1967 - (bal) Fixed Makefile.in so that 'configure; make install' works.
b4d02860 1968
bf093080 196920010610
1970 - (bal) Missed two files in major resync. auth-bsdauth.c and auth-skey.c
1971
e697bda7 197220010609
1973 - OpenBSD CVS Sync
1974 - markus@cvs.openbsd.org 2001/05/30 12:55:13
68fa858a 1975 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
e697bda7 1976 packet.c serverloop.c session.c ssh.c ssh1.h]
1977 channel layer cleanup: merge header files and split .c files
36e1f6a1 1978 - markus@cvs.openbsd.org 2001/05/30 15:20:10
1979 [ssh.c]
1980 merge functions, simplify.
a5efa1bb 1981 - markus@cvs.openbsd.org 2001/05/31 10:30:17
68fa858a 1982 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
a5efa1bb 1983 packet.c serverloop.c session.c ssh.c]
68fa858a 1984 undo the .c file split, just merge the header and keep the cvs
a5efa1bb 1985 history
68fa858a 1986 - (bal) Channels.c and Channels.h -- "Merge Functions, simplify" (draged
8e7895b8 1987 out of ssh Attic)
68fa858a 1988 - (bal) Ooops.. nchan.c (and remove nchan.h) resync from OpenBSD ssh
a98da4aa 1989 Attic.
1990 - OpenBSD CVS Sync
1991 - markus@cvs.openbsd.org 2001/05/31 13:08:04
1992 [sshd_config]
1993 group options and add some more comments
e4f7282d 1994 - markus@cvs.openbsd.org 2001/06/03 14:55:39
1995 [channels.c channels.h session.c]
68fa858a 1996 use fatal_register_cleanup instead of atexit, sync with x11 authdir
e4f7282d 1997 handling
e5b71e99 1998 - markus@cvs.openbsd.org 2001/06/03 19:36:44
1999 [ssh-keygen.1]
2000 1-2 bits of entrophy per character (not per word), ok stevesk@
4fc334a2 2001 - markus@cvs.openbsd.org 2001/06/03 19:38:42
2002 [scp.c]
2003 pass -v to ssh; from slade@shore.net
f5e69c65 2004 - markus@cvs.openbsd.org 2001/06/03 20:06:11
2005 [auth2-chall.c]
68fa858a 2006 the challenge response device decides how to handle non-existing
f5e69c65 2007 users.
2008 -> fake challenges for skey and cryptocard
f0f32b8e 2009 - markus@cvs.openbsd.org 2001/06/04 21:59:43
2010 [channels.c channels.h session.c]
68fa858a 2011 switch uid when cleaning up tmp files and sockets; reported by
f0f32b8e 2012 zen-parse@gmx.net on bugtraq
c9130033 2013 - markus@cvs.openbsd.org 2001/06/04 23:07:21
2014 [clientloop.c serverloop.c sshd.c]
68fa858a 2015 set flags in the signal handlers, do real work in the main loop,
c9130033 2016 ok provos@
8dcd9d5c 2017 - markus@cvs.openbsd.org 2001/06/04 23:16:16
2018 [session.c]
2019 merge ssh1/2 x11-fwd setup, create listener after tmp-dir
aa144206 2020 - pvalchev@cvs.openbsd.org 2001/06/05 05:05:39
2021 [ssh-keyscan.1 ssh-keyscan.c]
2022 License clarification from David Mazieres, ok deraadt@
750c256a 2023 - markus@cvs.openbsd.org 2001/06/05 10:24:32
2024 [channels.c]
2025 don't delete the auth socket in channel_stop_listening()
2026 auth_sock_cleanup_proc() will take care of this.
fc2a1d28 2027 - markus@cvs.openbsd.org 2001/06/05 16:46:19
2028 [session.c]
2029 let session_close() delete the pty. deny x11fwd if xauthfile is set.
d87596b0 2030 - markus@cvs.openbsd.org 2001/06/06 23:13:54
2031 [ssh-dss.c ssh-rsa.c]
2032 cleanup, remove old code
edf9ae81 2033 - markus@cvs.openbsd.org 2001/06/06 23:19:35
2034 [ssh-add.c]
2035 remove debug message; Darren.Moffat@eng.sun.com
2a6a054e 2036 - markus@cvs.openbsd.org 2001/06/07 19:57:53
2037 [auth2.c]
2038 style is used for bsdauth.
2039 disconnect on user/service change (ietf-drafts)
449c5ba5 2040 - markus@cvs.openbsd.org 2001/06/07 20:23:05
68fa858a 2041 [authfd.c authfile.c channels.c kexdh.c kexgex.c packet.c ssh.c
449c5ba5 2042 sshconnect.c sshconnect1.c]
2043 use xxx_put_cstring()
e6abba31 2044 - markus@cvs.openbsd.org 2001/06/07 22:25:02
2045 [session.c]
2046 don't overwrite errno
2047 delay deletion of the xauth cookie
fd9ede94 2048 - markus@cvs.openbsd.org 2001/06/08 15:25:40
2049 [includes.h pathnames.h readconf.c servconf.c]
2050 move the path for xauth to pathnames.h
0abe778b 2051 - (bal) configure.in fix for Tru64 (forgeting to reset $LIB)
83c17f20 2052 - (bal) ANSIify strmode()
68fa858a 2053 - (bal) --with-catman should be --with-mantype patch by Dave
2054 Dykstra <dwd@bell-labs.com>
fd9ede94 2055
4869a96f 205620010606
e697bda7 2057 - OpenBSD CVS Sync
68fa858a 2058 - markus@cvs.openbsd.org 2001/05/17 21:34:15
e697bda7 2059 [ssh.1]
68fa858a 2060 no spaces in PreferredAuthentications;
5ba55ada 2061 meixner@rbg.informatik.tu-darmstadt.de
2062 - markus@cvs.openbsd.org 2001/05/18 14:13:29
68fa858a 2063 [auth-chall.c auth.h auth1.c auth2-chall.c auth2.c readconf.c
5ba55ada 2064 readconf.h servconf.c servconf.h sshconnect1.c sshconnect2.c sshd.c]
2065 improved kbd-interactive support. work by per@appgate.com and me
bc03d5aa 2066 - djm@cvs.openbsd.org 2001/05/19 00:36:40
2067 [session.c]
2068 Disable X11 forwarding if xauth binary is not found. Patch from Nalin
2069 Dahyabhai <nalin@redhat.com>; ok markus@
68fa858a 2070 - markus@cvs.openbsd.org 2001/05/19 16:05:41
2071 [scp.c]
3e4fc5f9 2072 ftruncate() instead of open()+O_TRUNC like rcp.c does
68fa858a 2073 allows scp /path/to/file localhost:/path/to/file
2074 - markus@cvs.openbsd.org 2001/05/19 16:08:43
2075 [sshd.8]
a18395da 2076 sort options; Matthew.Stier@fnc.fujitsu.com
68fa858a 2077 - markus@cvs.openbsd.org 2001/05/19 16:32:16
2078 [ssh.1 sshconnect2.c]
2079 change preferredauthentication order to
2080 publickey,hostbased,password,keyboard-interactive
3398dda9 2081 document that hostbased defaults to no, document order
47bf6266 2082 - markus@cvs.openbsd.org 2001/05/19 16:46:19
68fa858a 2083 [ssh.1 sshd.8]
2084 document MACs defaults with .Dq
2085 - stevesk@cvs.openbsd.org 2001/05/19 19:43:57
2086 [misc.c misc.h servconf.c sshd.8 sshd.c]
2087 sshd command-line arguments and configuration file options that
2088 specify time may be expressed using a sequence of the form:
e2b1fb42 2089 time[qualifier], where time is a positive integer value and qualifier
68fa858a 2090 is one of the following:
2091 <none>,s,m,h,d,w
2092 Examples:
2093 600 600 seconds (10 minutes)
2094 10m 10 minutes
2095 1h30m 1 hour 30 minutes (90 minutes)
2096 ok markus@
7e8c18e9 2097 - stevesk@cvs.openbsd.org 2001/05/19 19:57:09
68fa858a 2098 [channels.c]
2099 typo in error message
e697bda7 2100 - markus@cvs.openbsd.org 2001/05/20 17:20:36
c8445989 2101 [auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8
2102 sshd_config]
68fa858a 2103 configurable authorized_keys{,2} location; originally from peter@;
2104 ok djm@
1ddf764b 2105 - markus@cvs.openbsd.org 2001/05/24 11:12:42
68fa858a 2106 [auth.c]
2107 fix comment; from jakob@
2108 - stevesk@cvs.openbsd.org 2001/05/24 18:57:53
2109 [clientloop.c readconf.c ssh.c ssh.h]
4bf9c10e 2110 don't perform escape processing when ``EscapeChar none''; ok markus@
abe0fb9f 2111 - markus@cvs.openbsd.org 2001/05/25 14:37:32
68fa858a 2112 [ssh-keygen.c]
2113 use -P for -e and -y, too.
63cd7dd0 2114 - markus@cvs.openbsd.org 2001/05/28 08:04:39
68fa858a 2115 [ssh.c]
2116 fix usage()
2117 - markus@cvs.openbsd.org 2001/05/28 10:08:55
2118 [authfile.c]
eb2e1595 2119 key_load_private: set comment to filename for PEM keys
2cf27bc4 2120 - markus@cvs.openbsd.org 2001/05/28 22:51:11
68fa858a 2121 [cipher.c cipher.h]
2122 simpler 3des for ssh1
2123 - markus@cvs.openbsd.org 2001/05/28 23:14:49
2124 [channels.c channels.h nchan.c]
6fd8622b 2125 undo broken channel fix and try a different one. there
68fa858a 2126 should be still some select errors...
2127 - markus@cvs.openbsd.org 2001/05/28 23:25:24
2128 [channels.c]
2129 cleanup, typo
08dcb5d7 2130 - markus@cvs.openbsd.org 2001/05/28 23:58:35
68fa858a 2131 [packet.c packet.h sshconnect.c sshd.c]
2132 remove some lines, simplify.
a10bdd7c 2133 - markus@cvs.openbsd.org 2001/05/29 12:31:27
68fa858a 2134 [authfile.c]
2135 typo
5ba55ada 2136
5cde8062 213720010528
2138 - (tim) [conifgure.in] add setvbuf test needed for sftp-int.c
2139 Patch by Corinna Vinschen <vinschen@redhat.com>
2140
362df52e 214120010517
2142 - OpenBSD CVS Sync
2143 - markus@cvs.openbsd.org 2001/05/12 19:53:13
2144 [sftp-server.c]
2145 readlink does not NULL-terminate; mhe@home.se
6efa3d14 2146 - deraadt@cvs.openbsd.org 2001/05/15 22:04:01
2147 [ssh.1]
2148 X11 forwarding details improved
70ea8327 2149 - markus@cvs.openbsd.org 2001/05/16 20:51:57
2150 [authfile.c]
2151 return comments for private pem files, too; report from nolan@naic.edu
24b6b45f 2152 - markus@cvs.openbsd.org 2001/05/16 21:53:53
2153 [clientloop.c]
2154 check for open sessions before we call select(); fixes the x11 client
2155 bug reported by bowman@math.ualberta.ca
7231bd47 2156 - markus@cvs.openbsd.org 2001/05/16 22:09:21
2157 [channels.c nchan.c]
2158 more select() error fixes (don't set rfd/wfd to -1).
7043a38d 2159 - (bal) Enabled USE_PIPES for Cygwin on Corinna Vinschen <vinschen@redhat.com>
68fa858a 2160 - (bal) Corrected on_exit() emulation via atexit().
362df52e 2161
89aa792b 216220010512
2163 - OpenBSD CVS Sync
2164 - markus@cvs.openbsd.org 2001/05/11 14:59:56
2165 [clientloop.c misc.c misc.h]
2166 add unset_nonblock for stdout/err flushing in client_loop().
286e38f7 2167 - (bal) Patch to partial sync up contrib/solaris/ packaging software.
2168 Patch by pete <ninjaz@webexpress.com>
89aa792b 2169
97430469 217020010511
2171 - OpenBSD CVS Sync
2172 - markus@cvs.openbsd.org 2001/05/09 22:51:57
2173 [channels.c]
2174 fix -R for protocol 2, noticed by greg@nest.cx.
2175 bug was introduced with experimental dynamic forwarding.
a16092bb 2176 - markus@cvs.openbsd.org 2001/05/09 23:01:31
2177 [rijndael.h]
2178 fix prototype; J.S.Peatfield@damtp.cam.ac.uk
97430469 2179
588f4ed0 218020010509
2181 - OpenBSD CVS Sync
2182 - markus@cvs.openbsd.org 2001/05/06 21:23:31
2183 [cli.c]
2184 cli_read() fails to catch SIGINT + overflow; from obdb@zzlevo.net
d18e0850 2185 - markus@cvs.openbsd.org 2001/05/08 19:17:31
a01a10dd 2186 [channels.c serverloop.c clientloop.c]
d18e0850 2187 adds correct error reporting to async connect()s
68fa858a 2188 fixes the server-discards-data-before-connected-bug found by
d18e0850 2189 onoe@sm.sony.co.jp
8a624ebf 2190 - mouring@cvs.openbsd.org 2001/05/08 19:45:25
2191 [misc.c misc.h scp.c sftp.c]
2192 Use addargs() in sftp plus some clean up of addargs(). OK Markus
1b02d786 2193 - markus@cvs.openbsd.org 2001/05/06 21:45:14
2194 [clientloop.c]
68fa858a 2195 use atomicio for flushing stdout/stderr bufs. thanks to
1b02d786 2196 jbw@izanami.cee.hw.ac.uk
010980f6 2197 - markus@cvs.openbsd.org 2001/05/08 22:48:07
2198 [atomicio.c]
2199 no need for xmalloc.h, thanks to espie@
68fa858a 2200 - (bal) UseLogin patch for Solaris/UNICOS. Patch by Wayne Davison
7e2d5fa4 2201 <wayne@blorf.net>
99c8ddac 2202 - (bal) ./configure support to disable SIA on OSF1. Patch by
2203 Chris Adams <cmadams@hiwaay.net>
68fa858a 2204 - (bal) Updates from the Sony NEWS-OS platform by NAKAJI Hiroyuki
b81c369b 2205 <nakaji@tutrp.tut.ac.jp>
588f4ed0 2206
7b22534a 220720010508
68fa858a 2208 - (bal) Fixed configure test for USE_SIA.
7b22534a 2209
94539b2a 221020010506
2211 - (djm) Update config.guess and config.sub with latest versions (from
2212 ftp://ftp.gnu.org/gnu/config/) to allow configure on ia64-hpux.
2213 Suggested by Jason Mader <jason@ncac.gwu.edu>
96c63318 2214 - (bal) White Space and #ifdef sync with OpenBSD
044b0662 2215 - (bal) Add 'seed_rng()' to ssh-add.c
9e9bd8c0 2216 - (bal) CVS ID updates for readpass.c, readpass.h, cli.c, and cli.h
cf7ff074 2217 - OpenBSD CVS Sync
2218 - stevesk@cvs.openbsd.org 2001/05/05 13:42:52
2219 [sftp.1 ssh-add.1 ssh-keygen.1]
2220 typos, grammar
94539b2a 2221
98143cfc 222220010505
2223 - OpenBSD CVS Sync
2224 - stevesk@cvs.openbsd.org 2001/05/04 14:21:56
2225 [ssh.1 sshd.8]
2226 typos
5b9601c8 2227 - markus@cvs.openbsd.org 2001/05/04 14:34:34
2228 [channels.c]
94539b2a 2229 channel_new() reallocs channels[], we cannot use Channel *c after
2230 calling channel_new(), XXX fix this in the future...
719fc62f 2231 - markus@cvs.openbsd.org 2001/05/04 23:47:34
2232 [channels.c channels.h clientloop.c nchan.c nchan.h serverloop.c ssh.c]
68fa858a 2233 move to Channel **channels (instead of Channel *channels), fixes realloc
2234 problems. channel_new now returns a Channel *, favour Channel * over
719fc62f 2235 channel id. remove old channel_allocate interface.
98143cfc 2236
f92fee1f 223720010504
2238 - OpenBSD CVS Sync
2239 - stevesk@cvs.openbsd.org 2001/05/03 15:07:39
2240 [channels.c]
2241 typo in debug() string
503e7e5b 2242 - markus@cvs.openbsd.org 2001/05/03 15:45:15
2243 [session.c]
2244 exec shell -c /bin/sh .ssh/sshrc, from abartlet@pcug.org.au
c98cab9b 2245 - stevesk@cvs.openbsd.org 2001/05/03 21:43:01
2246 [servconf.c]
2247 remove "\n" from fatal()
1fcde3fe 2248 - mouring@cvs.openbsd.org 2001/05/03 23:09:53
2249 [misc.c misc.h scp.c sftp.c]
2250 Move colon() and cleanhost() to misc.c where I should I have put it in
2251 the first place
044aa419 2252 - (bal) Updated Cygwin README by Corinna Vinschen <vinschen@redhat.com>
c7ccfd39 2253 - (bal) Avoid socket file security issues in ssh-agent for Cygwin.
2254 Patch by Egor Duda <deo@logos-m.ru>
f92fee1f 2255
065604bb 225620010503
2257 - OpenBSD CVS Sync
2258 - markus@cvs.openbsd.org 2001/05/02 16:41:20
2259 [ssh-add.c]
2260 fix prompt for ssh-add.
2261
742ee8f2 226220010502
2263 - OpenBSD CVS Sync
2264 - mouring@cvs.openbsd.org 2001/05/02 01:25:39
2265 [readpass.c]
2266 Put the 'const' back into ssh_askpass() function. Pointed out
2267 by Mark Miller <markm@swoon.net>. OK Markus
2268
3435f5a6 226920010501
2270 - OpenBSD CVS Sync
2271 - markus@cvs.openbsd.org 2001/04/30 11:18:52
2272 [readconf.c readconf.h ssh.1 ssh.c sshconnect.c]
2273 implement 'ssh -b bind_address' like 'telnet -b'
eef7adcb 2274 - markus@cvs.openbsd.org 2001/04/30 15:50:46
2275 [compat.c compat.h kex.c]
2276 allow interop with weaker key generation used by ssh-2.0.x, x < 10
ec430473 2277 - markus@cvs.openbsd.org 2001/04/30 16:02:49
2278 [compat.c]
2279 ssh-2.0.10 has the weak-key-bug, too.
3ca6cc45 2280 - (tim) [contrib/caldera/openssh.spec] add Requires line for Caldera 3.1
3435f5a6 2281
e8171bff 228220010430
39aefe7b 2283 - OpenBSD CVS Sync
2284 - markus@cvs.openbsd.org 2001/04/29 18:32:52
2285 [serverloop.c]
2286 fix whitespace
fbe90f7b 2287 - markus@cvs.openbsd.org 2001/04/29 19:16:52
2288 [channels.c clientloop.c compat.c compat.h serverloop.c]
2289 more ssh.com-2.0.x bug-compat; from per@appgate.com
e8171bff 2290 - (tim) New version of mdoc2man.pl from Mark D. Roth <roth+openssh@feep.net>
0b47e48f 2291 - (djm) Add .cvsignore files, suggested by Wayne Davison <wayne@blorf.net>
39aefe7b 2292
baf8c81a 229320010429
2294 - (bal) Updated INSTALL. PCRE moved to a new place.
e878ffe1 2295 - (djm) Release OpenSSH-2.9p1
baf8c81a 2296
0096ac62 229720010427
2298 - (bal) Fixed uidswap.c so it should work on non-posix complient systems.
2299 patch based on 2.5.2 version by djm.
95595a77 2300 - (bal) Build manpages and config files once unless changed. Patch by
2301 Carson Gaspar <carson@taltos.org>
68fa858a 2302 - (bal) arpa/nameser.h does not exist on Cygwin. Patch by Corinna
4a2df58f 2303 Vinschen <vinschen@redhat.com>
5ef815d7 2304 - (bal) Add /etc/sysconfig/sshd support to redhat's sshd.init. Patch by
2305 Pekka Savola <pekkas@netcore.fi>
68fa858a 2306 - (bal) Cygwin lacks setgroups() API. Patch by Corinna Vinschen
229be2df 2307 <vinschen@redhat.com>
cc3ccfdc 2308 - (bal) version.h synced, RPM specs updated for 2.9
b1e2a48c 2309 - (tim) update contrib/caldera files with what Caldera is using.
2310 <sps@caldera.de>
0096ac62 2311
b587c165 231220010425
2313 - OpenBSD CVS Sync
2314 - markus@cvs.openbsd.org 2001/04/23 21:57:07
2315 [ssh-keygen.1 ssh-keygen.c]
2316 allow public key for -e, too
012bc0e1 2317 - markus@cvs.openbsd.org 2001/04/23 22:14:13
2318 [ssh-keygen.c]
2319 remove debug
f8252c48 2320 - (bal) Whitespace resync w/ OpenBSD for uidswap.c
10f72868 2321 - (djm) Add new server configuration directive 'PAMAuthenticationViaKbdInt'
68fa858a 2322 (default: off), implies KbdInteractiveAuthentication. Suggestion from
10f72868 2323 markus@
c2d059b5 2324 - (djm) Include crypt.h if available in auth-passwd.c
533875af 2325 - tim@mindrot.org 2001/04/25 21:38:01 [configure.in]
2326 man page detection fixes for SCO
b587c165 2327
da89cf4d 232820010424
2329 - OpenBSD CVS Sync
2330 - markus@cvs.openbsd.org 2001/04/22 23:58:36
2331 [ssh-keygen.1 ssh.1 sshd.8]
2332 document hostbased and other cleanup
5e29aeaf 2333 - (stevesk) start_pam() doesn't use DNS now for sshd -u0.
3cc990d7 2334 - (stevesk) auth-pam.c: use PERMIT_NO_PASSWD
68fa858a 2335 - (bal) sys/queue.h is bogus for NCR platform. Patch by Daniel Carroll
d8e76a0a 2336 <dan@mesastate.edu>
3644dc25 2337 - (bal) Fixed contrib/postinstall.in. Patch by wsanders@wsanders.net
da89cf4d 2338
a3626e12 233920010422
2340 - OpenBSD CVS Sync
2341 - markus@cvs.openbsd.org 2001/04/20 16:32:22
2342 [uidswap.c]
2343 set non-privileged gid before uid; tholo@ and deraadt@
1a726b04 2344 - mouring@cvs.openbsd.org 2001/04/21 00:55:57
2345 [sftp.1]
2346 Spelling
67b964a1 2347 - djm@cvs.openbsd.org 2001/04/22 08:13:30
2348 [ssh.1]
2349 typos spotted by stevesk@; ok deraadt@
ba917921 2350 - markus@cvs.openbsd.org 2001/04/22 12:34:05
2351 [scp.c]
2352 scp > 2GB; niles@scyld.com; ok deraadt@, djm@
5deceabb 2353 - markus@cvs.openbsd.org 2001/04/22 13:25:37
2354 [ssh-keygen.1 ssh-keygen.c]
2355 rename arguments -x -> -e (export key), -X -> -i (import key)
2356 xref draft-ietf-secsh-publickeyfile-01.txt
2cad6cef 2357 - markus@cvs.openbsd.org 2001/04/22 13:32:27
2358 [sftp-server.8 sftp.1 ssh.1 sshd.8]
2359 xref draft-ietf-secsh-*
bcaa828e 2360 - markus@cvs.openbsd.org 2001/04/22 13:41:02
2361 [ssh-keygen.1 ssh-keygen.c]
2362 style, noted by stevesk; sort flags in usage
a3626e12 2363
df841692 236420010421
2365 - OpenBSD CVS Sync
2366 - djm@cvs.openbsd.org 2001/04/20 07:17:51
2367 [clientloop.c ssh.1]
2368 Split out and improve escape character documentation, mention ~R in
2369 ~? help text; ok markus@
0e7e0abe 2370 - Update RPM spec files for CVS version.h
1ddee76b 2371 - (stevesk) set the default PAM service name to __progname instead
2372 of the hard-coded value "sshd"; from Mark D. Roth <roth@feep.net>
4b28be2c 2373 - (stevesk) document PAM service name change in INSTALL
13dd877b 2374 - tim@mindrot.org 2001/04/21 14:25:57 [Makefile.in configure.in]
2375 fix perl test, fix nroff test, fix Makefile to build outside source tree
df841692 2376
05cc0c99 237720010420
68fa858a 2378 - OpenBSD CVS Sync
05cc0c99 2379 - ian@cvs.openbsd.org 2001/04/18 16:21:05
68fa858a 2380 [ssh-keyscan.1]
2381 Fix typo reported in PR/1779
2382 - markus@cvs.openbsd.org 2001/04/18 21:57:42
2383 [readpass.c ssh-add.c]
561e5254 2384 call askpass from ssh, too, based on work by roth@feep.net, ok deraadt
68fa858a 2385 - markus@cvs.openbsd.org 2001/04/18 22:03:45
2386 [auth2.c sshconnect2.c]
f98c3421 2387 use FDQN with trailing dot in the hostbased auth packets, ok deraadt@
57a5edd8 2388 - markus@cvs.openbsd.org 2001/04/18 22:48:26
68fa858a 2389 [auth2.c]
2390 no longer const
2391 - markus@cvs.openbsd.org 2001/04/18 23:43:26
2392 [auth2.c compat.c sshconnect2.c]
2393 more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works now
8dddf799 2394 (however the 2.1.0 server seems to work only if debug is enabled...)
ae88ea7e 2395 - markus@cvs.openbsd.org 2001/04/18 23:44:51
68fa858a 2396 [authfile.c]
2397 error->debug; noted by fries@
2398 - markus@cvs.openbsd.org 2001/04/19 00:05:11
2399 [auth2.c]
2400 use local variable, no function call needed.
5cf13595 2401 (btw, hostbased works now with ssh.com >= 2.0.13)
431a2493 2402 - (bal) Put scp-common.h back into scp.c (it exists in the upstream
2403 tree) pointed out by Tom Holroyd <tomh@po.crl.go.jp>
05cc0c99 2404
e78e738a 240520010418
68fa858a 2406 - OpenBSD CVS Sync
e78e738a 2407 - markus@cvs.openbsd.org 2001/04/17 19:34:25
3a83b819 2408 [session.c]
2409 move auth_approval to do_authenticated().
2410 do_child(): nuke hostkeys from memory
2411 don't source .ssh/rc for subsystems.
2412 - markus@cvs.openbsd.org 2001/04/18 14:15:00
2413 [canohost.c]
2414 debug->debug3
ce2af031 2415 - (bal) renabled 'catman-do:' and fixed it. So now catman pages should
2416 be working again.
e0c4d3ac 2417 - (bal) Makfile day... Cleaned up multiple mantype support (Patch by
2418 Mark D. Roth <roth+openssh@feep.net>), and fixed PIDDIR support.
3a83b819 2419
8c6b78e4 242020010417
2421 - (bal) Add perl5 check for HP/UX, Removed GNUness from Makefile.in
6d165a89 2422 and temporary commented out 'catman-do:' since it is broken. Patches
8c6b78e4 2423 for the first two by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
a88b7b57 2424 - OpenBSD CVS Sync
53b8fe68 2425 - deraadt@cvs.openbsd.org 2001/04/16 08:26:04
2426 [key.c]
2427 better safe than sorry in later mods; yongari@kt-is.co.kr
2428 - markus@cvs.openbsd.org 2001/04/17 08:14:01
2429 [sshconnect1.c]
2430 check for key!=NULL, thanks to costa
2431 - markus@cvs.openbsd.org 2001/04/17 09:52:48
2432 [clientloop.c]
cf6bc93c 2433 handle EINTR/EAGAIN on read; ok deraadt@
53b8fe68 2434 - markus@cvs.openbsd.org 2001/04/17 10:53:26
2435 [key.c key.h readconf.c readconf.h ssh.1 sshconnect2.c]
e961a8f9 2436 add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@
53b8fe68 2437 - markus@cvs.openbsd.org 2001/04/17 12:55:04
2438 [channels.c ssh.c]
2439 undo socks5 and https support since they are not really used and
2440 only bloat ssh. remove -D from usage(), since '-D' is experimental.
2441
e4664c3e 244220010416
2443 - OpenBSD CVS Sync
2444 - stevesk@cvs.openbsd.org 2001/04/15 01:35:22
2445 [ttymodes.c]
2446 fix comments
ec1f12d3 2447 - markus@cvs.openbsd.org 2001/04/15 08:43:47
2448 [dh.c sftp-glob.c sftp-glob.h sftp-int.c sshconnect2.c sshd.c]
2449 some unused variable and typos; from tomh@po.crl.go.jp
58cfa257 2450 - markus@cvs.openbsd.org 2001/04/15 16:58:03
2451 [authfile.c ssh-keygen.c sshd.c]
2452 don't use errno for key_{load,save}_private; discussion w/ solar@openwall
e968270c 2453 - markus@cvs.openbsd.org 2001/04/15 17:16:00
2454 [clientloop.c]
2455 set stdin/out/err to nonblocking in SSH proto 1, too. suggested by ho@
2456 should fix some of the blocking problems for rsync over SSH-1
84fc17bf 2457 - stevesk@cvs.openbsd.org 2001/04/15 19:41:21
2458 [sshd.8]
2459 some ClientAlive cleanup; ok markus@
b7c70970 2460 - stevesk@cvs.openbsd.org 2001/04/15 21:28:35
2461 [readconf.c servconf.c]
2462 use fatal() or error() vs. fprintf(); ok markus@
5d97cfbf 2463 - (djm) Convert mandoc manpages to man automatically. Patch from Mark D.
2464 Roth <roth+openssh@feep.net>
6023325e 2465 - (bal) CVS ID fix up and slight manpage fix from OpenBSD tree.
47b53518 2466 - (djm) OpenBSD CVS Sync
2467 - mouring@cvs.openbsd.org 2001/04/16 02:31:44
2468 [scp.c sftp.c]
2469 IPv6 support for sftp (which I bungled in my last patch) which is
2470 borrowed from scp.c. Thanks to Markus@ for pointing it out.
764291b3 2471 - deraadt@cvs.openbsd.org 2001/04/16 08:05:34
2472 [xmalloc.c]
2473 xrealloc dealing with ptr == nULL; mouring
f2c2fd71 2474 - djm@cvs.openbsd.org 2001/04/16 08:19:31
2475 [session.c]
68fa858a 2476 Split motd and hushlogin checks into seperate functions, helps for
f2c2fd71 2477 portable. From Chris Adams <cmadams@hiwaay.net>; ok markus@
68fa858a 2478 - Fix OSF SIA support displaying too much information for quiet
2479 logins and logins where access was denied by SIA. Patch from Chris Adams
c96a4aaf 2480 <cmadams@hiwaay.net>
e4664c3e 2481
f03228b1 248220010415
2483 - OpenBSD CVS Sync
2484 - deraadt@cvs.openbsd.org 2001/04/14 04:31:01
2485 [ssh-add.c]
2486 do not double free
9cf972fa 2487 - markus@cvs.openbsd.org 2001/04/14 16:17:14
2488 [channels.c]
2489 remove some channels that are not appropriate for keepalive.
eae942e2 2490 - markus@cvs.openbsd.org 2001/04/14 16:27:57
2491 [ssh-add.c]
2492 use clear_pass instead of xfree()
30dcc918 2493 - stevesk@cvs.openbsd.org 2001/04/14 16:33:20
2494 [clientloop.c packet.h session.c ssh.c ttymodes.c ttymodes.h]
2495 protocol 2 tty modes support; ok markus@
36967a16 2496 - stevesk@cvs.openbsd.org 2001/04/14 17:04:42
2497 [scp.c]
2498 'T' handling rcp/scp sync; ok markus@
e4664c3e 2499 - Missed sshtty.[ch] in Sync.
f03228b1 2500
e400a640 250120010414
2502 - Sync with OpenBSD glob.c, strlcat.c and vis.c changes
68fa858a 2503 - Cygwin sftp/sftp-server binary mode patch from Corinna Vinschen
fe56c12b 2504 <vinschen@redhat.com>
3ffc6336 2505 - OpenBSD CVS Sync
2506 - beck@cvs.openbsd.org 2001/04/13 22:46:54
2507 [channels.c channels.h servconf.c servconf.h serverloop.c sshd.8]
2508 Add options ClientAliveInterval and ClientAliveCountMax to sshd.
2509 This gives the ability to do a "keepalive" via the encrypted channel
2510 which can't be spoofed (unlike TCP keepalives). Useful for when you want
2511 to use ssh connections to authenticate people for something, and know
2512 relatively quickly when they are no longer authenticated. Disabled
2513 by default (of course). ok markus@
e400a640 2514
cc44f691 251520010413
68fa858a 2516 - OpenBSD CVS Sync
2517 - markus@cvs.openbsd.org 2001/04/12 14:29:09
2518 [ssh.c]
2519 show debug output during option processing, report from
cc44f691 2520 pekkas@netcore.fi
8002af61 2521 - markus@cvs.openbsd.org 2001/04/12 19:15:26
68fa858a 2522 [auth-rhosts.c auth.h auth2.c buffer.c canohost.c canohost.h
2523 compat.c compat.h hostfile.c pathnames.h readconf.c readconf.h
2524 servconf.c servconf.h ssh.c sshconnect.c sshconnect.h sshconnect1.c
8002af61 2525 sshconnect2.c sshd_config]
2526 implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
2527 similar to RhostRSAAuthentication unless you enable (the experimental)
2528 HostbasedUsesNameFromPacketOnly option. please test. :)
0140e66a 2529 - markus@cvs.openbsd.org 2001/04/12 19:39:27
2530 [readconf.c]
2531 typo
2d2a2c65 2532 - stevesk@cvs.openbsd.org 2001/04/12 20:09:38
2533 [misc.c misc.h readconf.c servconf.c ssh.c sshd.c]
2534 robust port validation; ok markus@ jakob@
edeeab1e 2535 - mouring@cvs.openbsd.org 2001/04/12 23:17:54
2536 [sftp-int.c sftp-int.h sftp.1 sftp.c]
2537 Add support for:
2538 sftp [user@]host[:file [file]] - Fetch remote file(s)
2539 sftp [user@]host[:dir[/]] - Start in remote dir/
2540 OK deraadt@
57aa8961 2541 - stevesk@cvs.openbsd.org 2001/04/13 01:26:17
2542 [ssh.c]
2543 missing \n in error message
96f8b59f 2544 - (bal) Added openbsd-compat/inet_ntop.[ch] since HP/UX (and others)
2545 lack it.
cc44f691 2546
28b9cb4d 254720010412
68fa858a 2548 - OpenBSD CVS Sync
28b9cb4d 2549 - markus@cvs.openbsd.org 2001/04/10 07:46:58
68fa858a 2550 [channels.c]
2551 cleanup socks4 handling
2552 - itojun@cvs.openbsd.org 2001/04/10 09:13:22
c0ecc314 2553 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
68fa858a 2554 document id_rsa{.pub,}. markus ok
070adba2 2555 - markus@cvs.openbsd.org 2001/04/10 12:15:23
68fa858a 2556 [channels.c]
2557 debug cleanup
45a2e669 2558 - djm@cvs.openbsd.org 2001/04/11 07:06:22
2559 [sftp-int.c]
2560 'mget' and 'mput' aliases; ok markus@
6031af8d 2561 - markus@cvs.openbsd.org 2001/04/11 10:59:01
2562 [ssh.c]
2563 use strtol() for ports, thanks jakob@
6683b40f 2564 - markus@cvs.openbsd.org 2001/04/11 13:56:13
2565 [channels.c ssh.c]
2566 https-connect and socks5 support. i feel so bad.
ff14faf1 2567 - lebel@cvs.openbsd.org 2001/04/11 16:25:30
2568 [sshd.8 sshd.c]
2569 implement the -e option into sshd:
2570 -e When this option is specified, sshd will send the output to the
2571 standard error instead of the system log.
2572 markus@ OK.
28b9cb4d 2573
0a85ab61 257420010410
2575 - OpenBSD CVS Sync
2576 - deraadt@cvs.openbsd.org 2001/04/08 20:52:55
2577 [sftp.c]
2578 do not modify an actual argv[] entry
b2ae83b8 2579 - stevesk@cvs.openbsd.org 2001/04/08 23:28:27
2580 [sshd.8]
2581 spelling
317611b5 2582 - stevesk@cvs.openbsd.org 2001/04/09 00:42:05
2583 [sftp.1]
2584 spelling
a8666d84 2585 - markus@cvs.openbsd.org 2001/04/09 15:12:23
2586 [ssh-add.c]
2587 passphrase caching: ssh-add tries last passphrase, clears passphrase if
2588 not successful and after last try.
2589 based on discussions with espie@, jakob@, ... and code from jakob@ and
2590 wolfgang@wsrcc.com
49ae4185 2591 - markus@cvs.openbsd.org 2001/04/09 15:19:49
2592 [ssh-add.1]
2593 ssh-add retries the last passphrase...
b8a297f1 2594 - stevesk@cvs.openbsd.org 2001/04/09 18:00:15
2595 [sshd.8]
2596 ListenAddress mandoc from aaron@
0a85ab61 2597
6e9944b8 259820010409
febd3f8e 2599 - (stevesk) use setresgid() for setegid() if needed
26de7942 2600 - (stevesk) configure.in: typo
6e9944b8 2601 - OpenBSD CVS Sync
2602 - stevesk@cvs.openbsd.org 2001/04/08 16:01:36
2603 [sshd.8]
2604 document ListenAddress addr:port
d64050ef 2605 - markus@cvs.openbsd.org 2001/04/08 13:03:00
2606 [ssh-add.c]
2607 init pointers with NULL, thanks to danimal@danimal.org
d0a4c20b 2608 - markus@cvs.openbsd.org 2001/04/08 11:27:33
2609 [clientloop.c]
2610 leave_raw_mode if ssh2 "session" is closed
63bd8c36 2611 - markus@cvs.openbsd.org 2001/04/06 21:00:17
2612 [auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth2.c channels.c session.c
2613 ssh.c sshconnect.c sshconnect.h uidswap.c uidswap.h]
2614 do gid/groups-swap in addition to uid-swap, should help if /home/group
2615 is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks
2616 to olar@openwall.com is comments. we had many requests for this.
0490e609 2617 - markus@cvs.openbsd.org 2001/04/07 08:55:18
2618 [buffer.c channels.c channels.h readconf.c ssh.c]
68fa858a 2619 allow the ssh client act as a SOCKS4 proxy (dynamic local
2620 portforwarding). work by Dan Kaminsky <dankamin@cisco.com> and me.
2621 thanks to Dan for this great patch: use 'ssh -D 1080 host' and make
0490e609 2622 netscape use localhost:1080 as a socks proxy.
d98d029a 2623 - markus@cvs.openbsd.org 2001/04/08 11:24:33
2624 [uidswap.c]
2625 KNF
6e9944b8 2626
d9d49fdb 262720010408
2628 - OpenBSD CVS Sync
2629 - stevesk@cvs.openbsd.org 2001/04/06 22:12:47
2630 [hostfile.c]
2631 unused; typo in comment
d11c1288 2632 - stevesk@cvs.openbsd.org 2001/04/06 22:25:25
2633 [servconf.c]
2634 in addition to:
2635 ListenAddress host|ipv4_addr|ipv6_addr
2636 permit:
2637 ListenAddress [host|ipv4_addr|ipv6_addr]:port
2638 ListenAddress host|ipv4_addr:port
2639 sshd.8 updates coming. ok markus@
d9d49fdb 2640
613fc910 264120010407
2642 - (bal) CVS ID Resync of version.h
cc94bd38 2643 - OpenBSD CVS Sync
2644 - markus@cvs.openbsd.org 2001/04/05 23:39:20
2645 [serverloop.c]
2646 keep the ssh session even if there is no active channel.
2647 this is more in line with the protocol spec and makes
2648 ssh -N -L 1234:server:110 host
2649 more useful.
2650 based on discussion with <mats@mindbright.se> long time ago
2651 and recent mail from <res@shore.net>
0fc791ba 2652 - deraadt@cvs.openbsd.org 2001/04/06 16:46:59
2653 [scp.c]
2654 remove trailing / from source paths; fixes pr#1756
68fa858a 2655
63f7e231 265620010406
2657 - (stevesk) logintest.c: fix for systems without __progname
72170131 2658 - (stevesk) Makefile.in: log.o is in libssh.a
d8a2f554 2659 - OpenBSD CVS Sync
2660 - markus@cvs.openbsd.org 2001/04/05 10:00:06
2661 [compat.c]
2662 2.3.x does old GEX, too; report jakob@
6ba22c93 2663 - markus@cvs.openbsd.org 2001/04/05 10:39:03
2664 [compress.c compress.h packet.c]
2665 reset compress state per direction when rekeying.
3667ba79 2666 - markus@cvs.openbsd.org 2001/04/05 10:39:48
2667 [version.h]
2668 temporary version 2.5.4 (supports rekeying).
2669 this is not an official release.
cd332296 2670 - markus@cvs.openbsd.org 2001/04/05 10:42:57
68fa858a 2671 [auth-chall.c authfd.c channels.c clientloop.c kex.c kexgex.c key.c
2672 mac.c packet.c serverloop.c sftp-client.c sftp-client.h sftp-glob.c
2673 sftp-glob.h sftp-int.c sftp-server.c sftp.c ssh-keygen.c sshconnect.c
cd332296 2674 sshconnect2.c sshd.c]
2675 fix whitespace: unexpand + trailing spaces.
255cfda1 2676 - markus@cvs.openbsd.org 2001/04/05 11:09:17
2677 [clientloop.c compat.c compat.h]
2678 add SSH_BUG_NOREKEY and detect broken (=all old) openssh versions.
b4a19d21 2679 - markus@cvs.openbsd.org 2001/04/05 15:45:43
2680 [ssh.1]
2681 ssh defaults to protocol v2; from quisar@quisar.ambre.net
46e3af7f 2682 - stevesk@cvs.openbsd.org 2001/04/05 15:48:18
2683 [canohost.c canohost.h session.c]
2684 move get_remote_name_or_ip() to canohost.[ch]; for portable. ok markus@
54506d2e 2685 - markus@cvs.openbsd.org 2001/04/05 20:01:10
2686 [clientloop.c]
2687 for ~R print message if server does not support rekeying. (and fix ~R).
b37caf1a 2688 - markus@cvs.openbsd.org 2001/04/05 21:02:46
2689 [buffer.c]
2690 better error message
eb0dd41f 2691 - markus@cvs.openbsd.org 2001/04/05 21:05:24
2692 [clientloop.c ssh.c]
2693 don't request a session for 'ssh -N', pointed out slade@shore.net
63f7e231 2694
d8ee838b 269520010405
68fa858a 2696 - OpenBSD CVS Sync
2697 - markus@cvs.openbsd.org 2001/04/04 09:48:35
d8ee838b 2698 [kex.c kex.h kexdh.c kexgex.c packet.c sshconnect2.c sshd.c]
68fa858a 2699 don't sent multiple kexinit-requests.
2700 send newkeys, block while waiting for newkeys.
2701 fix comments.
2702 - markus@cvs.openbsd.org 2001/04/04 14:34:58
2703 [clientloop.c kex.c kex.h serverloop.c sshconnect2.c sshd.c]
2704 enable server side rekeying + some rekey related clientup.
7a37c112 2705 todo: we should not send any non-KEX messages after we send KEXINIT
5adb303f 2706 - markus@cvs.openbsd.org 2001/04/04 15:50:55
2707 [compat.c]
2708 f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov
c422989b 2709 - markus@cvs.openbsd.org 2001/04/04 20:25:38
68fa858a 2710 [channels.c channels.h clientloop.c kex.c kex.h serverloop.c
c422989b 2711 sshconnect2.c sshd.c]
2712 more robust rekeying
2713 don't send channel data after rekeying is started.
0715ec6c 2714 - markus@cvs.openbsd.org 2001/04/04 20:32:56
2715 [auth2.c]
2716 we don't care about missing bannerfiles; from tsoome@ut.ee, ok deraadt@
bbb4cc1b 2717 - markus@cvs.openbsd.org 2001/04/04 22:04:35
2718 [kex.c kexgex.c serverloop.c]
2719 parse full kexinit packet.
2720 make server-side more robust, too.
a7ca6275 2721 - markus@cvs.openbsd.org 2001/04/04 23:09:18
2722 [dh.c kex.c packet.c]
2723 clear+free keys,iv for rekeying.
2724 + fix DH mem leaks. ok niels@
86c9e193 2725 - (stevesk) don't use vhangup() if defined(HAVE_DEV_PTMX); also removes
2726 BROKEN_VHANGUP
d8ee838b 2727
9d451c5a 272820010404
2729 - OpenBSD CVS Sync
2730 - deraadt@cvs.openbsd.org 2001/04/02 17:32:23
2731 [ssh-agent.1]
2732 grammar; slade@shore.net
894c5fa6 2733 - stevesk@cvs.openbsd.org 2001/04/03 13:56:11
2734 [sftp-glob.c ssh-agent.c ssh-keygen.c]
2735 free() -> xfree()
a5c9ffdb 2736 - markus@cvs.openbsd.org 2001/04/03 19:53:29
2737 [dh.c dh.h kex.c kex.h sshconnect2.c sshd.c]
2738 move kex to kex*.c, used dispatch_set() callbacks for kex. should
2739 make rekeying easier.
3463ff28 2740 - todd@cvs.openbsd.org 2001/04/03 21:19:38
2741 [ssh_config]
2742 id_rsa1/2 -> id_rsa; ok markus@
d1ac6175 2743 - markus@cvs.openbsd.org 2001/04/03 23:32:12
2744 [kex.c kex.h packet.c sshconnect2.c sshd.c]
2745 undo parts of recent my changes: main part of keyexchange does not
2746 need dispatch-callbacks, since application data is delayed until
2747 the keyexchange completes (if i understand the drafts correctly).
2748 add some infrastructure for re-keying.
e092ce67 2749 - markus@cvs.openbsd.org 2001/04/04 00:06:54
2750 [clientloop.c sshconnect2.c]
2751 enable client rekeying
2752 (1) force rekeying with ~R, or
2753 (2) if the server requests rekeying.
2754 works against ssh-2.0.12/2.0.13/2.1.0/2.2.0/2.3.0/2.3.1/2.4.0
0bc35151 2755 - (bal) Oops.. Missed including kexdh.c and kexgex.c in OpenBSD sync.
9d451c5a 2756
672f212f 275720010403
2758 - OpenBSD CVS Sync
2759 - stevesk@cvs.openbsd.org 2001/04/02 14:15:31
2760 [sshd.8]
2761 typo; ok markus@
6be9a5e8 2762 - stevesk@cvs.openbsd.org 2001/04/02 14:20:23
2763 [readconf.c servconf.c]
2764 correct comment; ok markus@
fe39c3df 2765 - (stevesk) nchan.c: remove ostate checks and add EINVAL to
2766 shutdown(SHUT_RD) error() bypass for HP-UX.
672f212f 2767
0be033ea 276820010402
2769 - (stevesk) log.c openbsd sync; missing newlines
5d9e4c8d 2770 - (stevesk) sshpty.h openbsd sync; PTY_H -> SSHPTY_H
0be033ea 2771
b7a2a476 277220010330
2773 - (djm) Another openbsd-compat/glob.c sync
4047d868 2774 - (djm) OpenBSD CVS Sync
2775 - provos@cvs.openbsd.org 2001/03/28 21:59:41
2776 [kex.c kex.h sshconnect2.c sshd.c]
2777 forgot to include min and max params in hash, okay markus@
c8682232 2778 - provos@cvs.openbsd.org 2001/03/28 22:04:57
2779 [dh.c]
2780 more sanity checking on primes file
d9cd3575 2781 - markus@cvs.openbsd.org 2001/03/28 22:43:31
2782 [auth.h auth2.c auth2-chall.c]
2783 check auth_root_allowed for kbd-int auth, too.
86b878d5 2784 - provos@cvs.openbsd.org 2001/03/29 14:24:59
2785 [sshconnect2.c]
2786 use recommended defaults
1ad64a93 2787 - stevesk@cvs.openbsd.org 2001/03/29 21:06:21
2788 [sshconnect2.c sshd.c]
2789 need to set both STOC and CTOS for SSH_BUG_BIGENDIANAES; ok markus@
03b8f8be 2790 - markus@cvs.openbsd.org 2001/03/29 21:17:40
2791 [dh.c dh.h kex.c kex.h]
2792 prepare for rekeying: move DH code to dh.c
76ca7b01 2793 - djm@cvs.openbsd.org 2001/03/29 23:42:01
2794 [sshd.c]
2795 Protocol 1 key regeneration log => verbose, some KNF; ok markus@
b7a2a476 2796
01ce749f 279720010329
2798 - OpenBSD CVS Sync
2799 - stevesk@cvs.openbsd.org 2001/03/26 15:47:59
2800 [ssh.1]
2801 document more defaults; misc. cleanup. ok markus@
569807fb 2802 - markus@cvs.openbsd.org 2001/03/26 23:12:42
2803 [authfile.c]
2804 KNF
457fc0c6 2805 - markus@cvs.openbsd.org 2001/03/26 23:23:24
2806 [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
2807 try to read private f-secure ssh v2 rsa keys.
1a92bd7e 2808 - markus@cvs.openbsd.org 2001/03/27 10:34:08
2809 [ssh-rsa.c sshd.c]
2810 use EVP_get_digestbynid, reorder some calls and fix missing free.
a4da628b 2811 - markus@cvs.openbsd.org 2001/03/27 10:57:00
2812 [compat.c compat.h ssh-rsa.c]
2813 some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5
2814 signatures in SSH protocol 2, ok djm@
db1cd2f3 2815 - provos@cvs.openbsd.org 2001/03/27 17:46:50
2816 [compat.c compat.h dh.c dh.h ssh2.h sshconnect2.c sshd.c version.h]
2817 make dh group exchange more flexible, allow min and max group size,
2818 okay markus@, deraadt@
e5ff6ecf 2819 - stevesk@cvs.openbsd.org 2001/03/28 19:56:23
2820 [scp.c]
2821 start to sync scp closer to rcp; ok markus@
03cb2621 2822 - stevesk@cvs.openbsd.org 2001/03/28 20:04:38
2823 [scp.c]
2824 usage more like rcp and add missing -B to usage; ok markus@
563834bb 2825 - markus@cvs.openbsd.org 2001/03/28 20:50:45
2826 [sshd.c]
2827 call refuse() before close(); from olemx@ans.pl
01ce749f 2828
b5b68128 282920010328
68fa858a 2830 - (djm) Reorder tests and library inclusion for Krb4/AFS to try to
2831 resolve linking conflicts with libcrypto. Report and suggested fix
b5b68128 2832 from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
edbe6722 2833 - (djm) Work around Solaris' broken struct dirent. Diagnosis and suggested
2834 fix from Philippe Levan <levan@epix.net>
cccfea16 2835 - (djm) Rework krbIV tests to get us closer to building on Redhat. Still
2836 doesn't work because of conflicts between krbIV's and OpenSSL's des.h
8d0cc79b 2837 - (djm) Sync openbsd-compat/glob.c
b5b68128 2838
0c90b590 283920010327
2840 - Attempt sync with sshlogin.c w/ OpenBSD (mainly CVS ID)
68fa858a 2841 - Fix pointer issues in waitpid() and wait() replaces. Patch by Lutz
60a8683f 2842 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
690d0d7f 2843 - OpenBSD CVS Sync
2844 - djm@cvs.openbsd.org 2001/03/25 00:01:34
2845 [session.c]
2846 shorten; ok markus@
4f4648f9 2847 - stevesk@cvs.openbsd.org 2001/03/25 13:16:11
2848 [servconf.c servconf.h session.c sshd.8 sshd_config]
2849 PrintLastLog option; from chip@valinux.com with some minor
2850 changes by me. ok markus@
9afbfcfa 2851 - markus@cvs.openbsd.org 2001/03/26 08:07:09
68fa858a 2852 [authfile.c authfile.h ssh-add.c ssh-keygen.c ssh.c sshconnect.c
9afbfcfa 2853 sshconnect.h sshconnect1.c sshconnect2.c sshd.c]
2854 simpler key load/save interface, see authfile.h
68fa858a 2855 - (djm) Reestablish PAM credentials (which can be supplemental group
9afbfcfa 2856 memberships) after initgroups() blows them away. Report and suggested
2857 fix from Nalin Dahyabhai <nalin@redhat.com>
0c90b590 2858
b567a40c 285920010324
2860 - Fixed permissions ssh-keyscan. Thanks to Christopher Linn <celinn@mtu.edu>.
80cd07ae 2861 - OpenBSD CVS Sync
2862 - djm@cvs.openbsd.org 2001/03/23 11:04:07
2863 [compat.c compat.h sshconnect2.c sshd.c]
2864 Compat for OpenSSH with broken Rijndael/AES. ok markus@
7af9f7f8 2865 - markus@cvs.openbsd.org 2001/03/23 12:02:49
2866 [auth1.c]
2867 authctxt is now passed to do_authenticated
e285053e 2868 - markus@cvs.openbsd.org 2001/03/23 13:10:57
2869 [sftp-int.c]
2870 fix put, upload to _absolute_ path, ok djm@
1d3c30db 2871 - markus@cvs.openbsd.org 2001/03/23 14:28:32
2872 [session.c sshd.c]
2873 ignore SIGPIPE, restore in child, fixes x11-fwd crashes; with djm@
8ca3f6dc 2874 - (djm) Pull out our own SIGPIPE hacks
b567a40c 2875
8a169574 287620010323
68fa858a 2877 - OpenBSD CVS Sync
8a169574 2878 - deraadt@cvs.openbsd.org 2001/03/22 20:22:55
68fa858a 2879 [sshd.c]
2880 do not place linefeeds in buffer
8a169574 2881
ee110bfb 288220010322
2883 - (djm) Better AIX no tty fix, spotted by Gert Doering <gert@greenie.muc.de>
289ba62e 2884 - (bal) version.c CVS ID resync
a5b09902 2885 - (bal) auth-chall.c auth-passwd.c auth.h auth1.c auth2.c session.c CVS ID
2886 resync
ae7242ef 2887 - (bal) scp.c CVS ID resync
3e587cc3 2888 - OpenBSD CVS Sync
2889 - markus@cvs.openbsd.org 2001/03/20 19:10:16
2890 [readconf.c]
2891 default to SSH protocol version 2
e5d7a405 2892 - markus@cvs.openbsd.org 2001/03/20 19:21:21
2893 [session.c]
2894 remove unused arg
39f7530f 2895 - markus@cvs.openbsd.org 2001/03/20 19:21:21
2896 [session.c]
2897 remove unused arg
bb5639fe 2898 - markus@cvs.openbsd.org 2001/03/21 11:43:45
2899 [auth1.c auth2.c session.c session.h]
2900 merge common ssh v1/2 code
5e7cb456 2901 - jakob@cvs.openbsd.org 2001/03/21 14:20:45
2902 [ssh-keygen.c]
2903 add -B flag to usage
ca4df544 2904 - markus@cvs.openbsd.org 2001/03/21 21:06:30
2905 [session.c]
2906 missing init; from mib@unimelb.edu.au
ee110bfb 2907
f5f6020e 290820010321
68fa858a 2909 - (djm) Fix ttyname breakage for AIX and Tru64. Patch from Steve
f5f6020e 2910 VanDevender <stevev@darkwing.uoregon.edu>
37eadb90 2911 - (djm) Make sure pam_retval is initialised on call to pam_end. Patch
2912 from Solar Designer <solar@openwall.com>
0a3700ee 2913 - (djm) Don't loop forever when changing password via PAM. Patch
2914 from Solar Designer <solar@openwall.com>
0c13ffa2 2915 - (djm) Generate config files before build
7a7101ec 2916 - (djm) Correctly handle SIA and AIX when no tty present. Spotted and
2917 suggested fix from Mike Battersby <mib@unimelb.edu.au>
f5f6020e 2918
8d539493 291920010320
01022caf 2920 - (bal) glob.c update to added GLOB_LIMITS (OpenBSD CVS).
2921 - (bal) glob.c update to set gl_pathv to NULL (OpenBSD CVS).
1620233b 2922 - (bal) Oops. Missed globc.h change (OpenBSD CVS).
614dee3a 2923 - (djm) OpenBSD CVS Sync
2924 - markus@cvs.openbsd.org 2001/03/19 17:07:23
2925 [auth.c readconf.c]
2926 undo /etc/shell and proto 2,1 change for openssh-2.5.2
3dd16786 2927 - markus@cvs.openbsd.org 2001/03/19 17:12:10
2928 [version.h]
2929 version 2.5.2
ea44783f 2930 - (djm) Update RPM spec version
2931 - (djm) Release 2.5.2p1
3743cc2f 2932- tim@mindrot.org 2001/03/19 18:33:47 [defines.h]
2933 change S_ISLNK macro to work for UnixWare 2.03
9887f269 2934- tim@mindrot.org 2001/03/19 20:45:11 [openbsd-compat/glob.c]
2935 add get_arg_max(). Use sysconf() if ARG_MAX is not defined
8d539493 2936
e339aa53 293720010319
68fa858a 2938 - (djm) Seed PRNG at startup, rather than waiting for arc4random calls to
e339aa53 2939 do it implicitly.
7cdb79d4 2940 - (djm) Add getusershell() functions from OpenBSD CVS
b1ed8313 2941 - OpenBSD CVS Sync
2942 - markus@cvs.openbsd.org 2001/03/18 12:07:52
2943 [auth-options.c]
2944 ignore permitopen="host:port" if AllowTcpForwarding==no
f8f230bf 2945 - (djm) Make scp work on systems without 64-bit ints
2538ecf1 2946 - tim@mindrot.org 2001/03/18 18:28:39 [defines.h]
2947 move HAVE_LONG_LONG_INT where it works
d1581d5f 2948 - (bal) Use 'NGROUPS' for NeXT Since 'MAX_NGROUPS' is wrapped up in -lposix
107628c0 2949 stuff. Change suggested by Mark Miller <markm@swoon.net>
d1581d5f 2950 - (bal) Small fix to scp. %lu vs %ld
68fa858a 2951 - (bal) NeXTStep lacks S_ISLNK. Plus split up S_IS*
bb6da70f 2952 - (djm) OpenBSD CVS Sync
2953 - djm@cvs.openbsd.org 2001/03/19 03:52:51
2954 [sftp-client.c]
2955 Report ssh connection closing correctly; ok deraadt@
3a1c54d4 2956 - deraadt@cvs.openbsd.org 2001/03/18 23:30:55
2957 [compat.c compat.h sshd.c]
68fa858a 2958 specifically version match on ssh scanners. do not log scan
3a1c54d4 2959 information to the console
dc504afd 2960 - djm@cvs.openbsd.org 2001/03/19 12:10:17
db4d3098 2961 [sshd.8]
dc504afd 2962 Document permitopen authorized_keys option; ok markus@
babd91d4 2963 - djm@cvs.openbsd.org 2001/03/19 05:49:52
2964 [ssh.1]
2965 document PreferredAuthentications option; ok markus@
05c64611 2966 - (bal) Minor NeXT fixed. Forgot to #undef NGROUPS_MAX
e339aa53 2967
ec0ad9c2 296820010318
68fa858a 2969 - (bal) Fixed scp type casing issue which causes "scp: protocol error:
ec0ad9c2 2970 size not delimited" fatal errors when tranfering.
5cc8d4ad 2971 - OpenBSD CVS Sync
2972 - markus@cvs.openbsd.org 2001/03/17 17:27:59
2973 [auth.c]
2974 check /etc/shells, too
7411201c 2975 - tim@mindrot.org 2001/03/17 18:45:25 [compat.c]
2976 openbsd-compat/fake-regex.h
ec0ad9c2 2977
8a968c25 297820010317
68fa858a 2979 - Support usrinfo() on AIX. Based on patch from Gert Doering
8a968c25 2980 <gert@greenie.muc.de>
bf1d27bd 2981 - OpenBSD CVS Sync
2982 - markus@cvs.openbsd.org 2001/03/15 15:05:59
2983 [scp.c]
2984 use %lld in printf, ok millert@/deraadt@; report from ssh@client.fi
56b3e9ce 2985 - markus@cvs.openbsd.org 2001/03/15 22:07:08
2986 [session.c]
2987 pass Session to do_child + KNF
d50d9b63 2988 - djm@cvs.openbsd.org 2001/03/16 08:16:18
2989 [sftp-client.c sftp-client.h sftp-glob.c sftp-int.c]
2990 Revise globbing for get/put to be more shell-like. In particular,
2991 "get/put file* directory/" now works. ok markus@
f55d1b5f 2992 - markus@cvs.openbsd.org 2001/03/16 09:55:53
2993 [sftp-int.c]
2994 fix memset and whitespace
6a8496e4 2995 - markus@cvs.openbsd.org 2001/03/16 13:44:24
2996 [sftp-int.c]
2997 discourage strcat/strcpy
01794848 2998 - markus@cvs.openbsd.org 2001/03/16 19:06:30
2999 [auth-options.c channels.c channels.h serverloop.c session.c]
3000 implement "permitopen" key option, restricts -L style forwarding to
3001 to specified host:port pairs. based on work by harlan@genua.de
68fa858a 3002 - Check for gl_matchc support in glob_t and fall back to the
40849fdb 3003 openbsd-compat/glob.[ch] support if it does not exist.
8a968c25 3004
4cb5d598 300520010315
3006 - OpenBSD CVS Sync
3007 - markus@cvs.openbsd.org 2001/03/14 08:57:14
3008 [sftp-client.c]
3009 Wall
85cf5827 3010 - markus@cvs.openbsd.org 2001/03/14 15:15:58
3011 [sftp-int.c]
3012 add version command
61b3a2bc 3013 - deraadt@cvs.openbsd.org 2001/03/14 22:50:25
3014 [sftp-server.c]
3015 note no getopt()
51e2fc8f 3016 - (stevesk) ssh-keyscan.c: specify "openbsd-compat/fake-queue.h"
68fa858a 3017 - (bal) Cygwin README change by Corinna Vinschen <vinschen@redhat.com>
4cb5d598 3018
acc9d6d7 301920010314
3020 - OpenBSD CVS Sync
85cf5827 3021 - markus@cvs.openbsd.org 2001/03/13 17:34:42
3022 [auth-options.c]
3023 missing xfree, deny key on parse error; ok stevesk@
3024 - djm@cvs.openbsd.org 2001/03/13 22:42:54
3025 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c]
3026 sftp client filename globbing for get, put, ch{mod,grp,own}. ok markus@
84ceda19 3027 - (bal) Fix strerror() in bsd-misc.c
3028 - (djm) Add replacement glob() from OpenBSD libc if the system glob is
3029 missing or lacks the GLOB_ALTDIRFUNC extension
68fa858a 3030 - (djm) Remove -I$(srcdir)/openbsd-compat from CFLAGS, refer to headers
84ceda19 3031 relatively. Avoids conflict between glob.h and /usr/include/glob.h
acc9d6d7 3032
22138a36 303320010313
3034 - OpenBSD CVS Sync
3035 - markus@cvs.openbsd.org 2001/03/12 22:02:02
3036 [key.c key.h ssh-add.c ssh-keygen.c sshconnect.c sshconnect2.c]
3037 remove old key_fingerprint interface, s/_ex//
3038
539af7f5 303920010312
3040 - OpenBSD CVS Sync
3041 - markus@cvs.openbsd.org 2001/03/11 13:25:36
3042 [auth2.c key.c]
3043 debug
301e8e5b 3044 - jakob@cvs.openbsd.org 2001/03/11 15:03:16
3045 [key.c key.h]
3046 add improved fingerprint functions. based on work by Carsten
3047 Raskgaard <cara@int.tele.dk> and modified by me. ok markus@.
954f0550 3048 - jakob@cvs.openbsd.org 2001/03/11 15:04:16
3049 [ssh-keygen.1 ssh-keygen.c]
3050 print both md5, sha1 and bubblebabble fingerprints when using
3051 ssh-keygen -l -v. ok markus@.
08345971 3052 - jakob@cvs.openbsd.org 2001/03/11 15:13:09
3053 [key.c]
3054 cleanup & shorten some var names key_fingerprint_bubblebabble.
64b1aa3b 3055 - deraadt@cvs.openbsd.org 2001/03/11 16:39:03
3056 [ssh-keygen.c]
3057 KNF, and SHA1 binary output is just creeping featurism
733cf7f4 3058 - tim@mindrot.org 2001/03/11 17:29:32 [configure.in]
3059 test if snprintf() supports %ll
3060 add /dev to search path for PRNGD/EGD socket
3061 fix my mistake in USER_PATH test program
79c9ac1b 3062 - OpenBSD CVS Sync
3063 - markus@cvs.openbsd.org 2001/03/11 18:29:51
3064 [key.c]
3065 style+cleanup
aaf45d87 3066 - markus@cvs.openbsd.org 2001/03/11 22:33:24
3067 [ssh-keygen.1 ssh-keygen.c]
3068 remove -v again. use -B instead for bubblebabble. make -B consistent
3069 with -l and make -B work with /path/to/known_hosts. ok deraadt@
a0322342 3070 - (djm) Bump portable version number for generating test RPMs
94dd09e3 3071 - (djm) Add "static_openssl" RPM build option, remove rsh build dependency
68fa858a 3072 - (bal) Reorder includes in Makefile.
539af7f5 3073
d156519a 307420010311
3075 - OpenBSD CVS Sync
3076 - markus@cvs.openbsd.org 2001/03/10 12:48:27
3077 [sshconnect2.c]
3078 ignore nonexisting private keys; report rjmooney@mediaone.net
5e36d59c 3079 - deraadt@cvs.openbsd.org 2001/03/10 12:53:51
3080 [readconf.c ssh_config]
3081 default to SSH2, now that m68k runs fast
2f778758 3082 - stevesk@cvs.openbsd.org 2001/03/10 15:02:05
3083 [ttymodes.c ttymodes.h]
3084 remove unused sgtty macros; ok markus@
99c415db 3085 - deraadt@cvs.openbsd.org 2001/03/10 15:31:00
3086 [compat.c compat.h sshconnect.c]
3087 all known netscreen ssh versions, and older versions of OSU ssh cannot
3088 handle password padding (newer OSU is fixed)
456fce50 3089 - tim@mindrot.org 2001/03/10 16:33:42 [configure.in Makefile.in sshd_config]
3090 make sure $bindir is in USER_PATH so scp will work
cab80f75 3091 - OpenBSD CVS Sync
3092 - markus@cvs.openbsd.org 2001/03/10 17:51:04
3093 [kex.c match.c match.h readconf.c readconf.h sshconnect2.c]
3094 add PreferredAuthentications
d156519a 3095
1c9a907f 309620010310
3097 - OpenBSD CVS Sync
3098 - deraadt@cvs.openbsd.org 2001/03/09 03:14:39
3099 [ssh-keygen.c]
68fa858a 3100 create *.pub files with umask 0644, so that you can mv them to
1c9a907f 3101 authorized_keys
cb7bd922 3102 - deraadt@cvs.openbsd.org 2001/03/09 12:30:29
3103 [sshd.c]
3104 typo; slade@shore.net
61cf0e38 3105 - Removed log.o from sftp client. Not needed.
1c9a907f 3106
385590e4 310720010309
3108 - OpenBSD CVS Sync
3109 - stevesk@cvs.openbsd.org 2001/03/08 18:47:12
3110 [auth1.c]
3111 unused; ok markus@
acf06a60 3112 - stevesk@cvs.openbsd.org 2001/03/08 20:44:48
3113 [sftp.1]
3114 spelling, cleanup; ok deraadt@
fee56204 3115 - markus@cvs.openbsd.org 2001/03/08 21:42:33
3116 [compat.c compat.h readconf.h ssh.c sshconnect1.c sshconnect2.c]
3117 implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->
3118 no need to do enter passphrase or do expensive sign operations if the
3119 server does not accept key).
385590e4 3120
3a7fe5ba 312120010308
3122 - OpenBSD CVS Sync
d5ebca2b 3123 - djm@cvs.openbsd.org 2001/03/07 10:11:23
3124 [sftp-client.c sftp-client.h sftp-int.c sftp-server.c sftp.1 sftp.c sftp.h]
3125 Support for new draft (draft-ietf-secsh-filexfer-01). New symlink handling
3126 functions and small protocol change.
3127 - markus@cvs.openbsd.org 2001/03/08 00:15:48
3128 [readconf.c ssh.1]
3129 turn off useprivilegedports by default. only rhost-auth needs
3130 this. older sshd's may need this, too.
097ca118 3131 - (stevesk) Reliant Unix (SNI) needs HAVE_BOGUS_SYS_QUEUE_H;
3132 Dirk Markwardt <D.Markwardt@tu-bs.de>
3a7fe5ba 3133
3251b439 313420010307
3135 - (bal) OpenBSD CVS Sync
3136 - deraadt@cvs.openbsd.org 2001/03/06 06:11:18
3137 [ssh-keyscan.c]
3138 appease gcc
a5ec8a3d 3139 - deraadt@cvs.openbsd.org 2001/03/06 06:11:44
3140 [sftp-int.c sftp.1 sftp.c]
3141 sftp -b batchfile; mouring@etoh.eviladmin.org
17910dce 3142 - deraadt@cvs.openbsd.org 2001/03/06 15:10:42
3143 [sftp.1]
3144 order things
2c86906e 3145 - deraadt@cvs.openbsd.org 2001/03/07 01:19:06
3146 [ssh.1 sshd.8]
3147 the name "secure shell" is boring, noone ever uses it
7daf8515 3148 - deraadt@cvs.openbsd.org 2001/03/07 04:05:58
3149 [ssh.1]
3150 removed dated comment
f52798a4 3151 - Cygwin contrib improvements from Corinna Vinschen <vinschen@redhat.com>
3251b439 3152
657297ff 315320010306
3154 - (bal) OpenBSD CVS Sync
3155 - deraadt@cvs.openbsd.org 2001/03/05 14:28:47
3156 [sshd.8]
3157 alpha order; jcs@rt.fm
7c8f2a26 3158 - stevesk@cvs.openbsd.org 2001/03/05 15:44:51
3159 [servconf.c]
3160 sync error message; ok markus@
f2ba0775 3161 - deraadt@cvs.openbsd.org 2001/03/05 15:56:16
3162 [myproposal.h ssh.1]
3163 switch to aes128-cbc/hmac-md5 by default in SSH2 -- faster;
3164 provos & markus ok
7a6c39a3 3165 - deraadt@cvs.openbsd.org 2001/03/05 16:07:15
3166 [sshd.8]
3167 detail default hmac setup too
7de5b06b 3168 - markus@cvs.openbsd.org 2001/03/05 17:17:21
3169 [kex.c kex.h sshconnect2.c sshd.c]
3170 generate a 2*need size (~300 instead of 1024/2048) random private
3171 exponent during the DH key agreement. according to Niels (the great
3172 german advisor) this is safe since /etc/primes contains strong
3173 primes only.
3174
3175 References:
3176 P. C. van Oorschot and M. J. Wiener, On Diffie-Hellman key
3177 agreement with short exponents, In Advances in Cryptology
3178 - EUROCRYPT'96, LNCS 1070, Springer-Verlag, 1996, pp.332-343.
a5df12e9 3179 - stevesk@cvs.openbsd.org 2001/03/05 17:40:48
3180 [ssh.1]
3181 more ssh_known_hosts2 documentation; ok markus@
0b2190ee 3182 - stevesk@cvs.openbsd.org 2001/03/05 17:58:22
3183 [dh.c]
3184 spelling
bbc62e59 3185 - deraadt@cvs.openbsd.org 2001/03/06 00:33:04
3186 [authfd.c cli.c ssh-agent.c]
3187 EINTR/EAGAIN handling is required in more cases
c16c7f20 3188 - millert@cvs.openbsd.org 2001/03/06 01:06:03
3189 [ssh-keyscan.c]
3190 Don't assume we wil get the version string all in one read().
3191 deraadt@ OK'd
09cb311c 3192 - millert@cvs.openbsd.org 2001/03/06 01:08:27
3193 [clientloop.c]
3194 If read() fails with EINTR deal with it the same way we treat EAGAIN
657297ff 3195
1a2936c4 319620010305
3197 - (bal) CVS ID touch up on sshpty.[ch] and sshlogin.[ch]
68fa858a 3198 - (bal) CVS ID touch up on sftp-int.c
e77df335 3199 - (bal) CVS ID touch up on uuencode.c
6cca9fde 3200 - (bal) CVS ID touch up on auth2.c, serverloop.c, session.c & sshd.c
778f6940 3201 - (bal) OpenBSD CVS Sync
dcb971e1 3202 - deraadt@cvs.openbsd.org 2001/02/17 23:48:48
3203 [sshd.8]
3204 it's the OpenSSH one
778f6940 3205 - deraadt@cvs.openbsd.org 2001/02/21 07:37:04
3206 [ssh-keyscan.c]
3207 inline -> __inline__, and some indent
81333640 3208 - deraadt@cvs.openbsd.org 2001/02/21 09:05:54
3209 [authfile.c]
3210 improve fd handling
79ddf6db 3211 - deraadt@cvs.openbsd.org 2001/02/21 09:12:56
3212 [sftp-server.c]
3213 careful with & and &&; markus ok
96ee8386 3214 - stevesk@cvs.openbsd.org 2001/02/21 21:14:04
3215 [ssh.c]
3216 -i supports DSA identities now; ok markus@
0c126dc9 3217 - deraadt@cvs.openbsd.org 2001/02/22 04:29:37
3218 [servconf.c]
3219 grammar; slade@shore.net
ed2166d8 3220 - deraadt@cvs.openbsd.org 2001/02/22 06:43:55
3221 [ssh-keygen.1 ssh-keygen.c]
3222 document -d, and -t defaults to rsa1
b07ae1e9 3223 - deraadt@cvs.openbsd.org 2001/02/22 08:03:51
3224 [ssh-keygen.1 ssh-keygen.c]
3225 bye bye -d
e2fccec3 3226 - deraadt@cvs.openbsd.org 2001/02/22 18:09:06
3227 [sshd_config]
3228 activate RSA 2 key
e91c60f2 3229 - markus@cvs.openbsd.org 2001/02/22 21:57:27
3230 [ssh.1 sshd.8]
3231 typos/grammar from matt@anzen.com
3b1a83df 3232 - markus@cvs.openbsd.org 2001/02/22 21:59:44
3233 [auth.c auth.h auth1.c auth2.c misc.c misc.h ssh.c]
3234 use pwcopy in ssh.c, too
19d57054 3235 - markus@cvs.openbsd.org 2001/02/23 15:34:53
3236 [serverloop.c]
3237 debug2->3
00be5382 3238 - markus@cvs.openbsd.org 2001/02/23 18:15:13
3239 [sshd.c]
3240 the random session key depends now on the session_key_int
3241 sent by the 'attacker'
3242 dig1 = md5(cookie|session_key_int);
3243 dig2 = md5(dig1|cookie|session_key_int);
3244 fake_session_key = dig1|dig2;
3245 this change is caused by a mail from anakin@pobox.com
3246 patch based on discussions with my german advisor niels@openbsd.org
ec63b02d 3247 - deraadt@cvs.openbsd.org 2001/02/24 10:37:55
3248 [readconf.c]
3249 look for id_rsa by default, before id_dsa
582038fb 3250 - deraadt@cvs.openbsd.org 2001/02/24 10:37:26
3251 [sshd_config]
3252 ssh2 rsa key before dsa key
6e18cb71 3253 - markus@cvs.openbsd.org 2001/02/27 10:35:27
3254 [packet.c]
3255 fix random padding
1b5dfeb2 3256 - markus@cvs.openbsd.org 2001/02/27 11:00:11
3257 [compat.c]
3258 support SSH-2.0-2.1 ; from Christophe_Moret@hp.com
4ab21f86 3259 - deraadt@cvs.openbsd.org 2001/02/28 05:34:28
3260 [misc.c]
3261 pull in protos
167b3512 3262 - deraadt@cvs.openbsd.org 2001/02/28 05:36:28
3263 [sftp.c]
3264 do not kill the subprocess on termination (we will see if this helps
3265 things or hurts things)
7e8911cd 3266 - markus@cvs.openbsd.org 2001/02/28 08:45:39
3267 [clientloop.c]
3268 fix byte counts for ssh protocol v1
ee55dacf 3269 - markus@cvs.openbsd.org 2001/02/28 08:54:55
3270 [channels.c nchan.c nchan.h]
3271 make sure remote stderr does not get truncated.
3272 remove closed fd's from the select mask.
a6215e53 3273 - markus@cvs.openbsd.org 2001/02/28 09:57:07
3274 [packet.c packet.h sshconnect2.c]
3275 in ssh protocol v2 use ignore messages for padding (instead of
3276 trailing \0).
94dfb550 3277 - markus@cvs.openbsd.org 2001/02/28 12:55:07
3278 [channels.c]
3279 unify debug messages
5649fbbe 3280 - deraadt@cvs.openbsd.org 2001/02/28 17:52:54
3281 [misc.c]
3282 for completeness, copy pw_gecos too
0572fe75 3283 - markus@cvs.openbsd.org 2001/02/28 21:21:41
3284 [sshd.c]
3285 generate a fake session id, too
95ce5599 3286 - markus@cvs.openbsd.org 2001/02/28 21:27:48
3287 [channels.c packet.c packet.h serverloop.c]
3288 use ignore message to simulate a SSH2_MSG_CHANNEL_DATA message
3289 use random content in ignore messages.
355724fc 3290 - markus@cvs.openbsd.org 2001/02/28 21:31:32
3291 [channels.c]
3292 typo
c3f7d267 3293 - deraadt@cvs.openbsd.org 2001/03/01 02:11:25
3294 [authfd.c]
3295 split line so that p will have an easier time next time around
a01a5f30 3296 - deraadt@cvs.openbsd.org 2001/03/01 02:29:04
3297 [ssh.c]
3298 shorten usage by a line
12bf85ed 3299 - deraadt@cvs.openbsd.org 2001/03/01 02:45:10
3300 [auth-rsa.c auth2.c deattack.c packet.c]
3301 KNF
4371658c 3302 - deraadt@cvs.openbsd.org 2001/03/01 03:38:33
3303 [cli.c cli.h rijndael.h ssh-keyscan.1]
3304 copyright notices on all source files
ce91d6f8 3305 - markus@cvs.openbsd.org 2001/03/01 22:46:37
3306 [ssh.c]
3307 don't truncate remote ssh-2 commands; from mkubita@securities.cz
3308 use min, not max for logging, fixes overflow.
409edaba 3309 - deraadt@cvs.openbsd.org 2001/03/02 06:21:01
3310 [sshd.8]
3311 explain SIGHUP better
b8dc87d3 3312 - deraadt@cvs.openbsd.org 2001/03/02 09:42:49
3313 [sshd.8]
3314 doc the dsa/rsa key pair files
f3c7c613 3315 - deraadt@cvs.openbsd.org 2001/03/02 18:54:31
3316 [atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h
3317 scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c
3318 ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8]
3319 make copyright lines the same format
2671b47f 3320 - deraadt@cvs.openbsd.org 2001/03/03 06:53:12
3321 [ssh-keyscan.c]
3322 standard theo sweep
ff7fee59 3323 - millert@cvs.openbsd.org 2001/03/03 21:19:41
3324 [ssh-keyscan.c]
3325 Dynamically allocate read_wait and its copies. Since maxfd is
3326 based on resource limits it is often (usually?) larger than FD_SETSIZE.
c8d75031 3327 - millert@cvs.openbsd.org 2001/03/03 21:40:30
3328 [sftp-server.c]
3329 Dynamically allocate fd_set; deraadt@ OK
20e04e90 3330 - millert@cvs.openbsd.org 2001/03/03 21:41:07
3331 [packet.c]
3332 Dynamically allocate fd_set; deraadt@ OK
dce9bac5 3333 - deraadt@cvs.openbsd.org 2001/03/03 22:07:50
3334 [sftp-server.c]
3335 KNF
c630ce76 3336 - markus@cvs.openbsd.org 2001/03/03 23:52:22
3337 [sftp.c]
3338 clean up arg processing. based on work by Christophe_Moret@hp.com
20244695 3339 - markus@cvs.openbsd.org 2001/03/03 23:59:34
3340 [log.c ssh.c]
3341 log*.c -> log.c
61f8a1d1 3342 - markus@cvs.openbsd.org 2001/03/04 00:03:59
3343 [channels.c]
3344 debug1->2
38967add 3345 - stevesk@cvs.openbsd.org 2001/03/04 10:57:53
3346 [ssh.c]
3347 add -m to usage; ok markus@
46f23b8d 3348 - stevesk@cvs.openbsd.org 2001/03/04 11:04:41
3349 [sshd.8]
3350 small cleanup and clarify for PermitRootLogin; ok markus@
9c81df4c 3351 - stevesk@cvs.openbsd.org 2001/03/04 11:16:06
3352 [servconf.c sshd.8]
3353 kill obsolete RandomSeed; ok markus@ deraadt@
f5429434 3354 - stevesk@cvs.openbsd.org 2001/03/04 12:54:04
3355 [sshd.8]
3356 spelling
54b974dc 3357 - millert@cvs.openbsd.org 2001/03/04 17:42:28
3358 [authfd.c channels.c dh.c log.c readconf.c servconf.c sftp-int.c
3359 ssh.c sshconnect.c sshd.c]
3360 log functions should not be passed strings that end in newline as they
3361 get passed on to syslog() and when logging to stderr, do_log() appends
3362 its own newline.
51c251f0 3363 - deraadt@cvs.openbsd.org 2001/03/04 18:21:28
3364 [sshd.8]
3365 list SSH2 ciphers
2605addd 3366 - (bal) Put HAVE_PW_CLASS_IN_PASSWD back into pwcopy()
164c80dc 3367 - (bal) Fix up logging since it changed. removed log-*.c
cc3067d6 3368 - (djm) Fix up LOG_AUTHPRIV for systems that have it
70a052c7 3369 - (stevesk) OpenBSD sync:
3370 - deraadt@cvs.openbsd.org 2001/03/05 08:37:27
3371 [ssh-keyscan.c]
3372 skip inlining, why bother
5152d46f 3373 - (stevesk) sftp.c: handle __progname
1a2936c4 3374
40edd7ef 337520010304
3376 - (bal) Remove make-ssh-known-hosts.1 since it's no longer valid.
889fbcd3 3377 - (bal) Updated contrib/README to remove 'make-ssh-known-hosts' and
3378 give Mark Roth credit for mdoc2man.pl
40edd7ef 3379
9817de5f 338020010303
40edd7ef 3381 - (djm) Remove make-ssh-known-hosts.pl, ssh-keyscan is better.
3382 - (djm) Document PAM ChallengeResponseAuthentication in sshd.8
3383 - (djm) Disable and comment ChallengeResponseAuthentication in sshd_config
3384 - (djm) Allow PRNGd entropy collection from localhost TCP socket. Replace
68fa858a 3385 "--with-egd-pool" configure option with "--with-prngd-socket" and
9bdd5929 3386 "--with-prngd-port" options. Debugged and improved by Lutz Jaenicke
3387 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
9817de5f 3388
20cad736 338920010301
68fa858a 3390 - (djm) Properly add -lcrypt if needed.
5f404be3 3391 - (djm) Force standard PAM conversation function in a few more places.
68fa858a 3392 Patch from Redhat 2.5.1p1-2 RPM, probably Nalin Dahyabhai
5f404be3 3393 <nalin@redhat.com>
68fa858a 3394 - (djm) Cygwin needs pw->pw_gecos copied too. Patch from Corinna Vinschen
480eb294 3395 <vinschen@redhat.com>
ad1f4a20 3396 - (djm) Released 2.5.1p2
20cad736 3397
cf0c5df5 339820010228
3399 - (djm) Detect endianness in configure and use it in rijndael.c. Fixes
3400 "Bad packet length" bugs.
68fa858a 3401 - (djm) Fully revert PAM session patch (again). All PAM session init is
403f5a8e 3402 now done before the final fork().
065ef9b1 3403 - (djm) EGD detection patch from Tim Rice <tim@multitalents.net>
d9b1f19a 3404 - (djm) Remove /tmp from EGD socket search list
cf0c5df5 3405
86b416a7 340620010227
68fa858a 3407 - (bal) Applied shutdown() patch for sftp.c by Corinna Vinschen
51fb577a 3408 <vinschen@redhat.com>
2af09193 3409 - (bal) OpenBSD Sync
3410 - markus@cvs.openbsd.org 2001/02/23 15:37:45
3411 [session.c]
3412 handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
68fa858a 3413 - (bal) sshd.init support for all Redhat release. Patch by Jim Knoble
a892c46e 3414 <jmknoble@jmknoble.cx>
68fa858a 3415 - (djm) Fix up POSIX saved uid support. Report from Mark Miller
f4e9a0e1 3416 <markm@swoon.net>
3417 - (djm) Search for -lcrypt on FreeBSD too
c7c72446 3418 - (djm) fatal() on OpenSSL version mismatch
27cf96de 3419 - (djm) Move PAM init to after fork for non-Solaris derived PAMs
d5c4c52e 3420 - (djm) Warning fix on entropy.c saved uid stuff. Patch from Mark Miller
3421 <markm@swoon.net>
4bc6dd70 3422 - (djm) Fix PAM fix
4236bde4 3423 - (djm) Remove 'noreplace' flag from sshd_config in RPM spec files. This
3424 change is being made as 2.5.x configfiles are not back-compatible with
64e0e67e 3425 2.3.x.
3426 - (djm) Avoid warnings for missing broken IP_TOS. Patch from Mark Miller
3427 <markm@swoon.net>
68fa858a 3428 - (djm) Open Server 5 doesn't need BROKEN_SAVED_UIDS. Patch from Tim Rice
a29d3f1c 3429 <tim@multitalents.net>
68fa858a 3430 - (djm) Avoid multiple definition of _PATH_LS. Patch from Tim Rice
a29d3f1c 3431 <tim@multitalents.net>
51fb577a 3432
4925395f 343320010226
3434 - (bal) Fixed bsd-snprinf.c so it now honors 'BROKEN_SNPRINTF' again.
68fa858a 3435 - (djm) Some systems (SCO3, NeXT) have weird saved uid semantics.
e9a13ac1 3436 Based on patch from Tim Rice <tim@multitalents.net>
4925395f 3437
1eb4ec64 343820010225
3439 - (djm) Use %{_libexecdir} rather than hardcoded path in RPM specfile
3440 Patch from Adrian Ho <lexfiend@usa.net>
490cad94 3441 - (bal) Replace 'unsigned long long' to 'u_int64_t' since not every
3442 platform defines u_int64_t as being that.
1eb4ec64 3443
a738c3b0 344420010224
68fa858a 3445 - (bal) Missed part of the UNIX sockets patch. Patch by Corinna
a738c3b0 3446 Vinschen <vinschen@redhat.com>
3447 - (bal) Reorder where 'strftime' is detected to resolve linking
3448 issues on SCO. Patch by Tim Rice <tim@multitalents.net>
3449
8fd97cc4 345020010224
3451 - (bal) pam_stack fix to correctly detect between RH7 and older RHs.
3452 Patch by Pekka Savola <pekkas@netcore.fi>
8f0b3553 3453 - (bal) Renamed sigaction.[ch] to sigact.[ch]. Causes problems with
3454 some platforms.
3d114925 3455 - (bal) Generalize lack of UNIX sockets since this also effects Cray
3456 not just Cygwin. Based on patch by Wendy Palm <wendyp@cray.com>
8fd97cc4 3457
14a49e44 345820010223
3459 - (bal) Fix --define rh7 in openssh.spec file. Patch by Steve Tell
3460 <tell@telltronics.org>
cb291102 3461 - (bal) Patch to force OpenSSH rpm to require the same version of OpenSSL
3462 that it was compiled against. Patch by Pekka Savola <pekkas@netcore.fi>
68fa858a 3463 - (bal) Double -I for OpenSSL on SCO. Patch by Tim Rice
5a67331c 3464 <tim@multitalents.net>
14a49e44 3465
68fa858a 346620010222
73d6d7fa 3467 - (bal) Corrected SCO luid patch by svaughan <svaughan@asterion.com>
ca742b3b 3468 - (bal) Added mdoc2man.pl from Mark Roth <roth@feep.net>
3469 - (bal) Removed reference to liblogin from contrib/README. It was
3470 integrated into OpenSSH a long while ago.
2a81eb9f 3471 - (stevesk) remove erroneous #ifdef sgi code.
3472 Michael Stone <mstone@cs.loyola.edu>
73d6d7fa 3473
fbf305f1 347420010221
3475 - (bal) Removed -L/usr/ucblib -R/usr/ucblib for Solaris platform.
68fa858a 3476 - (bal) Fixed OpenSSL rework to use $saved_*. Patch by Tim Rice
9dd3bc84 3477 <tim@multitalents.net>
1fe61b2e 3478 - (bal) Reverted out of 2001/02/15 patch by djm below because it
3479 breaks Solaris.
3480 - (djm) Move PAM session setup back to before setuid to user.
3481 fixes problems on Solaris-drived PAMs.
266140a8 3482 - (stevesk) session.c: back out to where we were before:
68fa858a 3483 - (djm) Move PAM session initialisation until after fork in sshd. Patch
266140a8 3484 from Nalin Dahyabhai <nalin@redhat.com>
9dd3bc84 3485
8b3319f4 348620010220
3487 - (bal) Fix mixed up params to memmove() from Jan 5th in setenv.c and
3488 getcwd.c.
c2b544a5 3489 - (bal) OpenBSD CVS Sync:
3490 - deraadt@cvs.openbsd.org 2001/02/19 23:09:05
3491 [sshd.c]
3492 clarify message to make it not mention "ident"
8b3319f4 3493
1729c161 349420010219
3495 - (bal) Markus' blessing to rename login.[ch] -> sshlogin.[ch] and
3496 pty.[ch] -> sshpty.[ch]
d6f13fbb 3497 - (djm) Rework search for OpenSSL location. Skip directories which don't
3498 exist, don't add -L$ssldir/lib if it doesn't exist. Should help SCO
3499 with its limit of 6 -L options.
0476625f 3500 - OpenBSD CVS Sync:
3501 - reinhard@cvs.openbsd.org 2001/02/17 08:24:40
3502 [sftp.1]
3503 typo
3504 - deraadt@cvs.openbsd.org 2001/02/17 16:28:58
3505 [ssh.c]
3506 cleanup -V output; noted by millert
3507 - deraadt@cvs.openbsd.org 2001/02/17 16:48:48
3508 [sshd.8]
3509 it's the OpenSSH one
3510 - markus@cvs.openbsd.org 2001/02/18 11:33:54
3511 [dispatch.c]
3512 typo, SSH2_MSG_KEXINIT, from aspa@kronodoc.fi
3513 - markus@cvs.openbsd.org 2001/02/19 02:53:32
3514 [compat.c compat.h serverloop.c]
3515 ssh-1.2.{18-22} has broken handling of ignore messages; report from
3516 itojun@
3517 - markus@cvs.openbsd.org 2001/02/19 03:35:23
3518 [version.h]
3519 OpenSSH_2.5.1 adds bug compat with 1.2.{18-22}
3520 - deraadt@cvs.openbsd.org 2001/02/19 03:36:25
3521 [scp.c]
3522 np is changed by recursion; vinschen@redhat.com
3523 - Update versions in RPM spec files
3524 - Release 2.5.1p1
1729c161 3525
663fd560 352620010218
68fa858a 3527 - (bal) Patch for fix FCHMOD reference in ftp-client.c by Tim Rice
3528 <tim@multitalents.net>
25cd3375 3529 - (Bal) Patch for lack of RA_RESTART in misc.c for mysignal by
3530 stevesk
68fa858a 3531 - (djm) Fix my breaking of cygwin builds, Patch from Corinna Vinschen
58e7f038 3532 <vinschen@redhat.com> and myself.
32ced054 3533 - (djm) Close listen_sock on bind() failures. Patch from Arkadiusz
3534 Miskiewicz <misiek@pld.ORG.PL>
6a951840 3535 - (djm) Robustify EGD/PRNGd code in face of socket closures. Patch from
3536 Todd C. Miller <Todd.Miller@courtesan.com>
68fa858a 3537 - (djm) Use ttyname() to determine name of tty returned by openpty()
3538 rather then risking overflow. Patch from Marek Michalkiewicz
b82f1310 3539 <marekm@amelek.gda.pl>
68fa858a 3540 - (djm) Swapped tests for no_libsocket and no_libnsl in configure.in.
bdf80b2c 3541 Patch from Marek Michalkiewicz <marekm@amelek.gda.pl>
af8fda37 3542 - (djm) Doc fixes from Pekka Savola <pekkas@netcore.fi>
68fa858a 3543 - (djm) Use SA_INTERRUPT along SA_RESTART if present (equivalent for
df538d55 3544 SunOS)
68fa858a 3545 - (djm) SCO needs librpc for libwrap. Patch from Tim Rice
f61d6b17 3546 <tim@multitalents.net>
dfef7e7e 3547 - (stevesk) misc.c: cpp rework of SA_(INTERRUPT|RESTART) handling.
36a358ca 3548 - (stevesk) scp.c: use mysignal() for updateprogressmeter() handler.
68fa858a 3549 - (djm) SA_INTERRUPT is the converse of SA_RESTART, apply it only for
d54d99a3 3550 SIGALRM.
e1a023df 3551 - (djm) Move entropy.c over to mysignal()
68fa858a 3552 - (djm) SunOS 4.x also needs to define HAVE_BOGUS_SYS_QUEUE_H as it has
3553 a <sys/queue.h> that lacks the TAILQ_* macros. Patch from Todd C.
667beaa9 3554 Miller <Todd.Miller@courtesan.com>
ecdde3d8 3555 - (djm) Update RPM spec files for 2.5.0p1
51ee9048 3556 - (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie
3557 enable with --with-bsd-auth.
2adddc78 3558 - (stevesk) entropy.c: typo; should be SIGPIPE
663fd560 3559
0b1728c5 356020010217
3561 - (bal) OpenBSD Sync:
3562 - markus@cvs.openbsd.org 2001/02/16 13:38:18
68fa858a 3563 [channel.c]
3564 remove debug
c8b058b4 3565 - markus@cvs.openbsd.org 2001/02/16 14:03:43
3566 [session.c]
3567 proper payload-length check for x11 w/o screen-number
0b1728c5 3568
b41d8d4d 356920010216
3570 - (bal) added '--with-prce' to allow overriding of system regex when
3571 required (tested by David Dulek <ddulek@fastenal.com>)
d6fdb079 3572 - (bal) Added DG/UX case and set that they have a broken IPTOS.
278588d8 3573 - (djm) Mini-configure reorder patch from Tim Rice <tim@multitalents.net>
3574 Fixes linking on SCO.
68fa858a 3575 - (djm) Make gnome-ssh-askpass handle multi-line prompts. Patch from
0ceb21d6 3576 Nalin Dahyabhai <nalin@redhat.com>
3577 - (djm) BSD license for gnome-ssh-askpass (was X11)
3578 - (djm) KNF on gnome-ssh-askpass
ed6553e2 3579 - (djm) USE_PIPES for a few more sysv platforms
3580 - (djm) Cleanup configure.in a little
3581 - (djm) Ask users to check config.log when we can't find necessary libs
aca75d94 3582 - (djm) Set "login ID" on systems with setluid. Only enabled for SCO
3583 OpenServer for now. Based on patch from svaughan <svaughan@asterion.com>
0ae4fe1d 3584 - (djm) OpenBSD CVS:
3585 - markus@cvs.openbsd.org 2001/02/15 16:19:59
3586 [channels.c channels.h serverloop.c sshconnect.c sshconnect.h]
3587 [sshconnect1.c sshconnect2.c]
3588 genericize password padding function for SSH1 and SSH2.
3589 add stylized echo to 2, too.
3590 - (djm) Add roundup() macro to defines.h
9535dddf 3591 - (stevesk) set SA_RESTART flag in mysignal() for SIGCHLD;
3592 needed on Unixware 2.x.
b41d8d4d 3593
0086bfaf 359420010215
68fa858a 3595 - (djm) Move PAM session setup back to before setuid to user. Fixes
0086bfaf 3596 problems on Solaris-derived PAMs.
e11aab29 3597 - (djm) Clean up PAM namespace. Suggested by Darren Moffat
3598 <Darren.Moffat@eng.sun.com>
9e3c31f7 3599 - (bal) Sync w/ OpenSSH for new release
3600 - markus@cvs.openbsd.org 2001/02/12 12:45:06
3601 [sshconnect1.c]
3602 fix xmalloc(0), ok dugsong@
b2552997 3603 - markus@cvs.openbsd.org 2001/02/11 12:59:25
3604 [Makefile.in sshd.8 sshconnect2.c readconf.h readconf.c packet.c
3605 sshd.c ssh.c ssh.1 servconf.h servconf.c myproposal.h kex.h kex.c]
3606 1) clean up the MAC support for SSH-2
3607 2) allow you to specify the MAC with 'ssh -m'
3608 3) or the 'MACs' keyword in ssh(d)_config
3609 4) add hmac-{md5,sha1}-96
3610 ok stevesk@, provos@
15853e93 3611 - markus@cvs.openbsd.org 2001/02/12 16:16:23
3612 [auth-passwd.c auth.c auth.h auth1.c auth2.c servconf.c servconf.h
3613 ssh-keygen.c sshd.8]
3614 PermitRootLogin={yes,without-password,forced-commands-only,no}
3615 (before this change, root could login even if PermitRootLogin==no)
7cc4cf0a 3616 - deraadt@cvs.openbsd.org 2001/02/12 22:56:09
fd193ca4 3617 [clientloop.c packet.c ssh-keyscan.c]
3618 deal with EAGAIN/EINTR selects which were skipped
7cc4cf0a 3619 - markus@cvs.openssh.org 2001/02/13 22:49:40
3620 [auth1.c auth2.c]
3621 setproctitle(user) only if getpwnam succeeds
3622 - markus@cvs.openbsd.org 2001/02/12 23:26:20
3623 [sshd.c]
3624 missing memset; from solar@openwall.com
3625 - stevesk@cvs.openbsd.org 2001/02/12 20:53:33
3626 [sftp-int.c]
3627 lumask now works with 1 numeric arg; ok markus@, djm@
3628 - djm@cvs.openbsd.org 2001/02/14 9:46:03
3629 [sftp-client.c sftp-int.c sftp.1]
3630 Fix and document 'preserve modes & times' option ('-p' flag in sftp);
3631 ok markus@
0b16bb01 3632 - (bal) replaced PATH_MAX in sftp-int.c w/ MAXPATHLEN.
3633 - (djm) Move to Jim's 1.2.0 X11 askpass program
62da27dd 3634 - (stevesk) OpenBSD sync:
3635 - deraadt@cvs.openbsd.org 2001/02/15 01:38:04
3636 [serverloop.c]
3637 indent
0b16bb01 3638
1c2d0a13 363920010214
3640 - (djm) Don't try to close PAM session or delete credentials if the
68fa858a 3641 session has not been open or credentials not set. Based on patch from
1c2d0a13 3642 Andrew Bartlett <abartlet@pcug.org.au>
68fa858a 3643 - (djm) Move PAM session initialisation until after fork in sshd. Patch
0ab1bcba 3644 from Nalin Dahyabhai <nalin@redhat.com>
958e5ae4 3645 - (bal) Missing function prototype in bsd-snprintf.c patch by
3646 Mark Miller <markm@swoon.net>
b7ccb051 3647 - (djm) Split out and improve OSF SIA auth code. Patch from Chris Adams
3648 <cmadams@hiwaay.net> with a little modification and KNF.
815800e1 3649 - (stevesk) fix for SIA patch, misplaced session_setup_sia()
1c2d0a13 3650
0610439b 365120010213
84eb157c 3652 - (djm) Only test -S potential EGD sockets if they exist and are readable.
f1312c76 3653 - (bal) Cleaned out bsd-snprintf.c. VARARGS have been banished and
3654 I did a base KNF over the whe whole file to make it more acceptable.
3655 (backed out of original patch and removed it from ChangeLog)
01f13020 3656 - (bal) Use chown() if fchown() does not exist in ftp-server.c patch by
3657 Tim Rice <tim@multitalents.net>
8d60e965 3658 - (stevesk) auth1.c: fix PAM passwordless check.
0610439b 3659
894a4851 366020010212
68fa858a 3661 - (djm) Update Redhat specfile to allow --define "skip_x11_askpass 1",
3662 --define "skip_gnome_askpass 1", --define "rh7 1" and make the
3663 implicit rpm-3.0.5 dependancy explicit. Patch and suggestions from
894a4851 3664 Pekka Savola <pekkas@netcore.fi>
782d6a0d 3665 - (djm) Clean up PCRE text in INSTALL
68fa858a 3666 - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby
77db6c3f 3667 <mib@unimelb.edu.au>
6f68f28a 3668 - (bal) NCR SVR4 compatiblity provide by Don Bragg <thewizarddon@yahoo.com>
01a7bc9a 3669 - (stevesk) session.c: remove debugging code.
894a4851 3670
abf1f107 367120010211
3672 - (bal) OpenBSD Sync
3673 - markus@cvs.openbsd.org 2001/02/07 22:35:46
3674 [auth1.c auth2.c sshd.c]
3675 move k_setpag() to a central place; ok dugsong@
c845316f 3676 - markus@cvs.openbsd.org 2001/02/10 12:52:02
3677 [auth2.c]
3678 offer passwd before s/key
e6fa162e 3679 - markus@cvs.openbsd.org 2001/02/8 22:37:10
3680 [canohost.c]
3681 remove last call to sprintf; ok deraadt@
0ab4b0f0 3682 - markus@cvs.openbsd.org 2001/02/10 1:33:32
3683 [canohost.c]
3684 add debug message, since sshd blocks here if DNS is not available
7f8ea238 3685 - markus@cvs.openbsd.org 2001/02/10 12:44:02
3686 [cli.c]
3687 don't call vis() for \r
5c470997 3688 - danh@cvs.openbsd.org 2001/02/10 0:12:43
3689 [scp.c]
3690 revert a small change to allow -r option to work again; ok deraadt@
3691 - danh@cvs.openbsd.org 2001/02/10 15:14:11
3692 [scp.c]
3693 fix memory leak; ok markus@
a0e6fead 3694 - djm@cvs.openbsd.org 2001/02/10 0:45:52
3695 [scp.1]
3696 Mention that you can quote pathnames with spaces in them
b3106440 3697 - markus@cvs.openbsd.org 2001/02/10 1:46:28
3698 [ssh.c]
3699 remove mapping of argv[0] -> hostname
f72e01a5 3700 - markus@cvs.openbsd.org 2001/02/06 22:26:17
3701 [sshconnect2.c]
3702 do not ask for passphrase in batch mode; report from ejb@ql.org
3703 - itojun@cvs.opebsd.org 2001/02/08 10:47:05
5d1d11d1 3704 [sshconnect.c sshconnect1.c sshconnect2.c]
68fa858a 3705 %.30s is too short for IPv6 numeric address. use %.128s for now.
f72e01a5 3706 markus ok
3707 - markus@cvs.openbsd.org 2001/02/09 12:28:35
3708 [sshconnect2.c]
3709 do not free twice, thanks to /etc/malloc.conf
3710 - markus@cvs.openbsd.org 2001/02/09 17:10:53
3711 [sshconnect2.c]
3712 partial success: debug->log; "Permission denied" if no more auth methods
3713 - markus@cvs.openbsd.org 2001/02/10 12:09:21
3714 [sshconnect2.c]
3715 remove some lines
e0b2cf6b 3716 - markus@cvs.openbsd.org 2001/02/09 13:38:07
3717 [auth-options.c]
3718 reset options if no option is given; from han.holl@prismant.nl
ca910e13 3719 - markus@cvs.openbsd.org 2001/02/08 21:58:28
3720 [channels.c]
3721 nuke sprintf, ok deraadt@
3722 - markus@cvs.openbsd.org 2001/02/08 21:58:28
3723 [channels.c]
3724 nuke sprintf, ok deraadt@
affa8be4 3725 - markus@cvs.openbsd.org 2001/02/06 22:43:02
3726 [clientloop.h]
3727 remove confusing callback code
d2c46e77 3728 - deraadt@cvs.openbsd.org 2001/02/08 14:39:36
3729 [readconf.c]
3730 snprintf
cc8aca8a 3731 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
3732 sync with netbsd tree changes.
3733 - more strict prototypes, include necessary headers
3734 - use paths.h/pathnames.h decls
3735 - size_t typecase to int -> u_long
5be2ec5e 3736 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
3737 [ssh-keyscan.c]
3738 fix size_t -> int cast (use u_long). markus ok
3739 - markus@cvs.openbsd.org 2001/02/07 22:43:16
3740 [ssh-keyscan.c]
3741 s/getline/Linebuf_getline/; from roumen.petrov@skalasoft.com
3742 - itojun@cvs.openbsd.org 2001/02/09 9:04:59
3743 [ssh-keyscan.c]
68fa858a 3744 do not assume malloc() returns zero-filled region. found by
5be2ec5e 3745 malloc.conf=AJ.
f21032a6 3746 - markus@cvs.openbsd.org 2001/02/08 22:35:30
3747 [sshconnect.c]
68fa858a 3748 don't connect if batch_mode is true and stricthostkeychecking set to
f21032a6 3749 'ask'
7bbcc167 3750 - djm@cvs.openbsd.org 2001/02/04 21:26:07
3751 [sshd_config]
3752 type: ok markus@
3753 - deraadt@cvs.openbsd.org 2001/02/06 22:07:50
3754 [sshd_config]
3755 enable sftp-server by default
a2e6d17d 3756 - deraadt 2001/02/07 8:57:26
3757 [xmalloc.c]
3758 deal with new ANSI malloc stuff
3759 - markus@cvs.openbsd.org 2001/02/07 16:46:08
3760 [xmalloc.c]
3761 typo in fatal()
3762 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
3763 [xmalloc.c]
3764 fix size_t -> int cast (use u_long). markus ok
4ef922e3 3765 - 1.47 Thu Feb 8 23:11:42 GMT 2001 by dugsong
3766 [serverloop.c sshconnect1.c]
68fa858a 3767 mitigate SSH1 traffic analysis - from Solar Designer
4ef922e3 3768 <solar@openwall.com>, ok provos@
68fa858a 3769 - (bal) fixed sftp-client.c. Return 'status' instead of '0'
ca910e13 3770 (from the OpenBSD tree)
6b442913 3771 - (bal) Synced ssh.1, ssh-add.1 and sshd.8 w/ OpenBSD
27df9d4a 3772 - (bal) sftp-sever.c '%8lld' to '%8llu' (OpenBSD Sync)
17321afe 3773 - (bal) uuencode.c resync w/ OpenBSD tree, plus whitespace.
f98d56f0 3774 - (bal) A bit more whitespace cleanup
68fa858a 3775 - (djm) Set PAM_RHOST earlier, patch from Andrew Bartlett
e275684f 3776 <abartlet@pcug.org.au>
b27e97b1 3777 - (stevesk) misc.c: ssh.h not needed.
38a316c0 3778 - (stevesk) compat.c: more friendly cpp error
94f38e16 3779 - (stevesk) OpenBSD sync:
3780 - stevesk@cvs.openbsd.org 2001/02/11 06:15:57
3781 [LICENSE]
3782 typos and small cleanup; ok deraadt@
abf1f107 3783
0426a3b4 378420010210
3785 - (djm) Sync sftp and scp stuff from OpenBSD:
3786 - djm@cvs.openbsd.org 2001/02/07 03:55:13
3787 [sftp-client.c]
3788 Don't free handles before we are done with them. Based on work from
3789 Corinna Vinschen <vinschen@redhat.com>. ok markus@
3790 - djm@cvs.openbsd.org 2001/02/06 22:32:53
3791 [sftp.1]
3792 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
3793 - deraadt@cvs.openbsd.org 2001/02/07 04:07:29
3794 [sftp.1]
3795 pretty up significantly
3796 - itojun@cvs.openbsd.org 2001/02/07 06:49:42
3797 [sftp.1]
3798 .Bl-.El mismatch. markus ok
3799 - djm@cvs.openbsd.org 2001/02/07 06:12:30
3800 [sftp-int.c]
3801 Check that target is a directory before doing ls; ok markus@
3802 - itojun@cvs.openbsd.org 2001/02/07 11:01:18
3803 [scp.c sftp-client.c sftp-server.c]
3804 unsigned long long -> %llu, not %qu. markus ok
3805 - stevesk@cvs.openbsd.org 2001/02/07 11:10:39
3806 [sftp.1 sftp-int.c]
3807 more man page cleanup and sync of help text with man page; ok markus@
3808 - markus@cvs.openbsd.org 2001/02/07 14:58:34
3809 [sftp-client.c]
3810 older servers reply with SSH2_FXP_NAME + count==0 instead of EOF
3811 - djm@cvs.openbsd.org 2001/02/07 15:27:19
3812 [sftp.c]
3813 Don't forward agent and X11 in sftp. Suggestion from Roumen Petrov
3814 <roumen.petrov@skalasoft.com>
3815 - stevesk@cvs.openbsd.org 2001/02/07 15:36:04
3816 [sftp-int.c]
3817 portable; ok markus@
3818 - stevesk@cvs.openbsd.org 2001/02/07 15:55:47
3819 [sftp-int.c]
3820 lowercase cmds[].c also; ok markus@
3821 - markus@cvs.openbsd.org 2001/02/07 17:04:52
3822 [pathnames.h sftp.c]
3823 allow sftp over ssh protocol 1; ok djm@
3824 - deraadt@cvs.openbsd.org 2001/02/08 07:38:55
3825 [scp.c]
3826 memory leak fix, and snprintf throughout
3827 - deraadt@cvs.openbsd.org 2001/02/08 08:02:02
3828 [sftp-int.c]
3829 plug a memory leak
3830 - stevesk@cvs.openbsd.org 2001/02/08 10:11:23
3831 [session.c sftp-client.c]
3832 %i -> %d
3833 - stevesk@cvs.openbsd.org 2001/02/08 10:57:59
3834 [sftp-int.c]
3835 typo
3836 - stevesk@cvs.openbsd.org 2001/02/08 15:28:07
3837 [sftp-int.c pathnames.h]
3838 _PATH_LS; ok markus@
3839 - djm@cvs.openbsd.org 2001/02/09 04:46:25
3840 [sftp-int.c]
3841 Check for NULL attribs for chown, chmod & chgrp operations, only send
3842 relevant attribs back to server; ok markus@
96b64eb0 3843 - djm@cvs.openbsd.org 2001/02/06 15:05:25
3844 [sftp.c]
3845 Use getopt to process commandline arguments
3846 - djm@cvs.openbsd.org 2001/02/06 15:06:21
3847 [sftp.c ]
3848 Wait for ssh subprocess at exit
3849 - djm@cvs.openbsd.org 2001/02/06 15:18:16
3850 [sftp-int.c]
3851 stat target for remote chdir before doing chdir
3852 - djm@cvs.openbsd.org 2001/02/06 15:32:54
3853 [sftp.1]
3854 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
3855 - provos@cvs.openbsd.org 2001/02/05 22:22:02
3856 [sftp-int.c]
3857 cleanup get_pathname, fix pwd after failed cd. okay djm@
0426a3b4 3858 - (djm) Update makefile.in for _PATH_SFTP_SERVER
c9f5e42e 3859 - (bal) sftp-client.c replace NULL w/ 0 in do_ls() (pending in OpenBSD tree)
0426a3b4 3860
6d1e1d2b 386120010209
68fa858a 3862 - (bal) patch to vis.c to deal with HAVE_VIS right by Robert Mooney
6d1e1d2b 3863 <rjmooney@mediaone.net>
bb0c1991 3864 - (bal) .c.o rule in openbsd-compat/Makefile.in did not make it to the
68fa858a 3865 main tree while porting forward. Pointed out by Lutz Jaenicke
bb0c1991 3866 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
f902d909 3867 - (bal) double entry in configure.in. Pointed out by Lutz Jaenicke
3868 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
25f4c264 3869 - (stevesk) OpenBSD sync:
3870 - markus@cvs.openbsd.org 2001/02/08 11:20:01
3871 [auth2.c]
3872 strict checking
3873 - markus@cvs.openbsd.org 2001/02/08 11:15:22
3874 [version.h]
3875 update to 2.3.2
3876 - markus@cvs.openbsd.org 2001/02/08 11:12:30
3877 [auth2.c]
3878 fix typo
72b3f75d 3879 - (djm) Update spec files
0ed28836 3880 - (bal) OpenBSD sync:
3881 - deraadt@cvs.openbsd.org 2001/02/08 14:38:54
3882 [scp.c]
3883 memory leak fix, and snprintf throughout
1fc8ccdf 3884 - markus@cvs.openbsd.org 2001/02/06 22:43:02
3885 [clientloop.c]
3886 remove confusing callback code
0b202697 3887 - (djm) Add CVS Id's to files that we have missed
5ca51e19 3888 - (bal) OpenBSD Sync (more):
3889 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
3890 sync with netbsd tree changes.
3891 - more strict prototypes, include necessary headers
3892 - use paths.h/pathnames.h decls
3893 - size_t typecase to int -> u_long
1f3bf5aa 3894 - markus@cvs.openbsd.org 2001/02/06 22:07:42
3895 [ssh.c]
3896 fatal() if subsystem fails
3897 - markus@cvs.openbsd.org 2001/02/06 22:43:02
3898 [ssh.c]
3899 remove confusing callback code
3900 - jakob@cvs.openbsd.org 2001/02/06 23:03:24
3901 [ssh.c]
3902 add -1 option (force protocol version 1). ok markus@
3903 - jakob@cvs.openbsd.org 2001/02/06 23:06:21
3904 [ssh.c]
3905 reorder -{1,2,4,6} options. ok markus@
e6aa01b4 3906 - (bal) Missing 'const' in readpass.h
9c5a8165 3907 - (bal) OpenBSD Sync (so at least the thing compiles for 2.3.2 =)
3908 - djm@cvs.openbsd.org 2001/02/06 23:30:28
3909 [sftp-client.c]
3910 replace arc4random with counter for request ids; ok markus@
68fa858a 3911 - (djm) Define _PATH_TTY for systems that don't. Report from Lutz
bc79ed5c 3912 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
6d1e1d2b 3913
6a25c04c 391420010208
3915 - (djm) Don't delete external askpass program in make uninstall target.
3916 Report and fix from Roumen Petrov <roumen.petrov@skalasoft.com>
6958bd37 3917 - (djm) Fix linking of sftp, don't need arc4random any more.
3918 - (djm) Try to use shell that supports "test -S" for EGD socket search.
3919 Based on patch from Tim Rice <tim@multitalents.net>
6a25c04c 3920
547519f0 392120010207
bee0a37e 3922 - (bal) Save the whole path to AR in configure. Some Solaris 2.7 installs
3923 seem lose track of it while in openbsd-compat/ (two confirmed reports)
5c377b3b 3924 - (djm) Much KNF on PAM code
547519f0 3925 - (djm) Revise auth-pam.c conversation function to be a little more
3926 readable.
5c377b3b 3927 - (djm) Revise kbd-int PAM conversation function to fold all text messages
3928 to before first prompt. Fixes hangs if last pam_message did not require
3929 a reply.
3930 - (djm) Fix password changing when using PAM kbd-int authentication
bee0a37e 3931
547519f0 393220010205
2b87da3b 3933 - (bal) Disable groupaccess by setting NGROUPS_MAX to 0 for platforms
99286dc8 3934 that don't have NGROUPS_MAX.
57559587 3935 - (bal) AIX patch for auth1.c by William L. Jones <jones@hpc.utexas.edu>
2b87da3b 3936 - (stevesk) OpenBSD sync:
3937 - stevesk@cvs.openbsd.org 2001/02/04 08:32:27
3938 [many files; did this manually to our top-level source dir]
3939 unexpand and remove end-of-line whitespace; ok markus@
408ba72f 3940 - stevesk@cvs.openbsd.org 2001/02/04 15:21:19
3941 [sftp-server.c]
3942 SSH2_FILEXFER_ATTR_UIDGID support; ok markus@
ec2a033a 3943 - deraadt@cvs.openbsd.org 2001/02/04 17:02:32
3944 [sftp-int.c]
3945 ? == help
3946 - deraadt@cvs.openbsd.org 2001/02/04 16:47:46
3947 [sftp-int.c]
3948 sort commands, so that abbreviations work as expected
3949 - stevesk@cvs.openbsd.org 2001/02/04 15:17:52
3950 [sftp-int.c]
3951 debugging sftp: precedence and missing break. chmod, chown, chgrp
3952 seem to be working now.
3953 - markus@cvs.openbsd.org 2001/02/04 14:41:21
3954 [sftp-int.c]
3955 use base 8 for umask/chmod
3956 - markus@cvs.openbsd.org 2001/02/04 11:11:54
3957 [sftp-int.c]
3958 fix LCD
c44559d2 3959 - markus@cvs.openbsd.org 2001/02/04 08:10:44
3960 [ssh.1]
3961 typo; dpo@club-internet.fr
a5930351 3962 - stevesk@cvs.openbsd.org 2001/02/04 06:30:12
3963 [auth2.c authfd.c packet.c]
3964 remove duplicate #include's; ok markus@
6a416424 3965 - deraadt@cvs.openbsd.org 2001/02/04 16:56:23
3966 [scp.c sshd.c]
3967 alpha happiness
3968 - stevesk@cvs.openbsd.org 2001/02/04 15:12:17
3969 [sshd.c]
3970 precedence; ok markus@
02a024dd 3971 - deraadt@cvs.openbsd.org 2001/02/04 08:14:15
6a416424 3972 [ssh.c sshd.c]
3973 make the alpha happy
02a024dd 3974 - markus@cvs.openbsd.org 2001/01/31 13:37:24
3975 [channels.c channels.h serverloop.c ssh.c]
68fa858a 3976 do not disconnect if local port forwarding fails, e.g. if port is
547519f0 3977 already in use
02a024dd 3978 - markus@cvs.openbsd.org 2001/02/01 14:58:09
3979 [channels.c]
3980 use ipaddr in channel messages, ietf-secsh wants this
3981 - markus@cvs.openbsd.org 2001/01/31 12:26:20
3982 [channels.c]
68fa858a 3983 ssh.com-2.0.1x does not send additional info in CHANNEL_OPEN_FAILURE
547519f0 3984 messages; bug report from edmundo@rano.org
a741554f 3985 - markus@cvs.openbsd.org 2001/01/31 13:48:09
3986 [sshconnect2.c]
3987 unused
9378f292 3988 - deraadt@cvs.openbsd.org 2001/02/04 08:23:08
3989 [sftp-client.c sftp-server.c]
3990 make gcc on the alpha even happier
1fc243d1 3991
547519f0 399220010204
781a0585 3993 - (bal) I think this is the last of the bsd-*.h that don't belong.
634e0b53 3994 - (bal) Minor Makefile fix
f0f14bea 3995 - (bal) openbsd-compat/Makefile minor fix. Ensure dependancies are done
61e96248 3996 right.
78987b57 3997 - (bal) Changed order of LIB="" in -with-skey due to library resolving.
166e4f2a 3998 - (bal) next-posix.h changed to bsd-nextstep.h
61e96248 3999 - (djm) OpenBSD CVS sync:
4000 - markus@cvs.openbsd.org 2001/02/03 03:08:38
4001 [auth-options.c auth-rh-rsa.c auth-rhosts.c auth.c canohost.c]
4002 [canohost.h servconf.c servconf.h session.c sshconnect1.c sshd.8]
4003 [sshd_config]
4004 make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@
4005 - markus@cvs.openbsd.org 2001/02/03 03:19:51
4006 [ssh.1 sshd.8 sshd_config]
4007 Skey is now called ChallengeResponse
4008 - markus@cvs.openbsd.org 2001/02/03 03:43:09
4009 [sshd.8]
4010 use no-pty option in .ssh/authorized_keys* if you need a 8-bit clean
4011 channel. note from Erik.Anggard@cygate.se (pr/1659)
4012 - stevesk@cvs.openbsd.org 2001/02/03 10:03:06
4013 [ssh.1]
4014 typos; ok markus@
4015 - djm@cvs.openbsd.org 2001/02/04 04:11:56
4016 [scp.1 sftp-server.c ssh.1 sshd.8 sftp-client.c sftp-client.h]
4017 [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c]
4018 Basic interactive sftp client; ok theo@
4019 - (djm) Update RPM specs for new sftp binary
68fa858a 4020 - (djm) Update several bits for new optional reverse lookup stuff. I
61e96248 4021 think I got them all.
8b061486 4022 - (djm) Makefile.in fixes
1aa00dcb 4023 - (stevesk) add mysignal() wrapper and use it for the protocol 2
4024 SIGCHLD handler.
408ba72f 4025 - (djm) Use setvbuf() instead of setlinebuf(). Suggest from stevesk@
781a0585 4026
547519f0 402720010203
63fe0529 4028 - (bal) Cygwin clean up by Corinna Vinschen <vinschen@redhat.com>
bf3db92d 4029 - (bal) renamed queue.h to fake-queue.h (even if it's an OpenBSD
4030 based file) to ensure #include space does not get confused.
f78888c7 4031 - (bal) Minor Makefile.in tweak. dirname may not exist on some
4032 platforms so builds fail. (NeXT being a well known one)
63fe0529 4033
547519f0 403420010202
61e96248 4035 - (bal) Makefile fix where sourcedir != builddir by Corinna Vinschen
c85a87f2 4036 <vinschen@redhat.com>
71301416 4037 - (bal) Makefile fix to use $(MAKE) instead of 'make' for platforms
4038 that use 'gmake'. Patch by Tim Rice <tim@multitalents.net>
c85a87f2 4039
547519f0 404020010201
ad5075bd 4041 - (bal) Minor fix to Makefile to stop rebuilding executables if no
4042 changes have occured to any of the supporting code. Patch by
4043 Roumen Petrov <roumen.petrov@skalasoft.com>
4044
9c8dbb1b 404520010131
37845585 4046 - (djm) OpenBSD CVS Sync:
4047 - djm@cvs.openbsd.org 2001/01/30 15:48:53
4048 [sshconnect.c]
4049 Make warning message a little more consistent. ok markus@
8c89dd2b 4050 - (djm) Fix autoconf logic for --with-lastlog=no Report and diagnosis from
4051 Philipp Buehler <lists@fips.de> and Kevin Steves <stevesk@sweden.hp.com>
4052 respectively.
c59dc6bd 4053 - (djm) Don't log SSH2 PAM KbdInt responses to debug, they may contain
4054 passwords.
9c8dbb1b 4055 - (bal) Reorder. Move all bsd-*, fake-*, next-*, and cygwin* stuff to
4056 openbsd-compat/. And resolve all ./configure and Makefile.in issues
4057 assocated.
37845585 4058
9c8dbb1b 405920010130
39929cdb 4060 - (djm) OpenBSD CVS Sync:
4061 - markus@cvs.openbsd.org 2001/01/29 09:55:37
4062 [channels.c channels.h clientloop.c serverloop.c]
4063 fix select overflow; ok deraadt@ and stevesk@
865ac82e 4064 - markus@cvs.openbsd.org 2001/01/29 12:42:35
4065 [canohost.c canohost.h channels.c clientloop.c]
4066 add get_peer_ipaddr(socket), x11-fwd in ssh2 requires ipaddr, not DNS
46aa2d1f 4067 - markus@cvs.openbsd.org 2001/01/29 12:47:32
4068 [rsa.c rsa.h ssh-agent.c sshconnect1.c sshd.c]
4069 handle rsa_private_decrypt failures; helps against the Bleichenbacher
4070 pkcs#1 attack
ae810de7 4071 - djm@cvs.openbsd.org 2001/01/29 05:36:11
4072 [ssh.1 ssh.c]
4073 Allow invocation of sybsystem by commandline (-s); ok markus@
83bc57f9 4074 - (stevesk) configure.in: remove duplicate PROG_LS
39929cdb 4075
9c8dbb1b 407620010129
f29ef605 4077 - (stevesk) sftp-server.c: use %lld vs. %qd
4078
cb9da0fc 407920010128
4080 - (bal) Put USE_PIPES back into sco3.2v5
23c2a7a5 4081 - (bal) OpenBSD Sync
9bd5b720 4082 - markus@cvs.openbsd.org 2001/01/28 10:15:34
4083 [dispatch.c]
4084 re-keying is not supported; ok deraadt@
5fb622e4 4085 - markus@cvs.openbsd.org 2001/01/28 10:24:04
7f5c4295 4086 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
5fb622e4 4087 cleanup AUTHORS sections
9bd5b720 4088 - markus@cvs.openbsd.org 2001/01/28 10:37:26
ab60252b 4089 [sshd.c sshd.8]
9bd5b720 4090 remove -Q, no longer needed
4091 - stevesk@cvs.openbsd.org 2001/01/28 20:36:16
a877488a 4092 [readconf.c ssh.1]
9bd5b720 4093 ``StrictHostKeyChecking ask'' documentation and small cleanup.
4094 ok markus@
6f37606e 4095 - stevesk@cvs.openbsd.org 2001/01/28 20:43:25
61e96248 4096 [sshd.8]
6f37606e 4097 spelling. ok markus@
95f4ccfb 4098 - stevesk@cvs.openbsd.org 2001/01/28 20:53:21
4099 [xmalloc.c]
4100 use size_t for strlen() return. ok markus@
6f37606e 4101 - stevesk@cvs.openbsd.org 2001/01/28 22:27:05
4102 [authfile.c]
4103 spelling. use sizeof vs. strlen(). ok markus@
9bd5b720 4104 - niklas@cvs.openbsd.org 2001/01/29 1:59:14
23c2a7a5 4105 [atomicio.h canohost.h clientloop.h deattack.h dh.h dispatch.h
4106 groupaccess.c groupaccess.h hmac.h hostfile.h includes.h kex.h
4107 key.h log.h login.h match.h misc.h myproposal.h nchan.ms pathnames.h
4108 radix.h readpass.h rijndael.h serverloop.h session.h sftp.h ssh-add.1
4109 ssh-dss.h ssh-keygen.1 ssh-keyscan.1 ssh-rsa.h ssh1.h ssh_config
4110 sshconnect.h sshd_config tildexpand.h uidswap.h uuencode.h]
4111 $OpenBSD$
b0e305c9 4112 - (bal) Minor auth2.c resync. Whitespace and moving of an #include.
cb9da0fc 4113
c9606e03 411420010126
61e96248 4115 - (bal) SSH_PROGRAM vs _PATH_SSH_PROGRAM fix pointed out by Roumen
c9606e03 4116 Petrov <roumen.petrov@skalasoft.com>
2f4b2e38 4117 - (bal) OpenBSD Sync
4118 - deraadt@cvs.openbsd.org 2001/01/25 8:06:33
4119 [ssh-agent.c]
4120 call _exit() in signal handler
c9606e03 4121
d7d5f0b2 412220010125
4123 - (djm) Sync bsd-* support files:
4124 - deraadt@cvs.openbsd.org 2000/01/26 03:43:20
4125 [rresvport.c bindresvport.c]
61e96248 4126 new bindresvport() semantics that itojun, shin, jean-luc and i have
d7d5f0b2 4127 agreed on, which will be happy for the future. bindresvport_sa() for
4128 sockaddr *, too. docs later..
4129 - deraadt@cvs.openbsd.org 2000/01/24 02:24:21
4130 [bindresvport.c]
61e96248 4131 in bindresvport(), if sin is non-NULL, example sin->sin_family for
d7d5f0b2 4132 the actual family being processed
e1dd3a7a 4133 - (djm) Mention PRNGd in documentation, it is nicer than EGD
4134 - (djm) Automatically search for "well-known" EGD/PRNGd sockets in autoconf
8080699b 4135 - (bal) AC_FUNC_STRFTIME added to autoconf
4ccb01d6 4136 - (bal) OpenBSD Resync
4137 - stevesk@cvs.openbsd.org 2001/01/24 21:03:50
4138 [channels.c]
4139 missing freeaddrinfo(); ok markus@
d7d5f0b2 4140
556eb464 414120010124
4142 - (bal) OpenBSD Resync
4143 - markus@cvs.openbsd.org 2001/01/23 10:45:10
4144 [ssh.h]
61e96248 4145 nuke comment
1aecda34 4146 - (bal) no 64bit support patch from Tim Rice <tim@multitalents.net>
4147 - (bal) #ifdef around S_IFSOCK if platform does not support it.
4148 patch by Tim Rice <tim@multitalents.net>
4149 - (bal) fake-regex.h cleanup based on Tim Rice's patch.
c33f0b36 4150 - (stevesk) sftp-server.c: fix chmod() mode mask
556eb464 4151
effa6591 415220010123
4153 - (bal) regexp.h typo in configure.in. Should have been regex.h
4154 - (bal) SSH_USER_DIR to _PATH_SSH_USER_DIR patch by stevesk@
61e96248 4155 - (bal) SSH_ASKPASS_DEFAULT to _PATH_SSH_ASKPASS_DEFAULT
53a24016 4156 - (bal) OpenBSD Resync
4157 - markus@cvs.openbsd.org 2001/01/22 8:15:00
4158 [auth-krb4.c sshconnect1.c]
4159 only AFS needs radix.[ch]
4160 - markus@cvs.openbsd.org 2001/01/22 8:32:53
4161 [auth2.c]
4162 no need to include; from mouring@etoh.eviladmin.org
4163 - stevesk@cvs.openbsd.org 2001/01/22 16:55:21
4164 [key.c]
4165 free() -> xfree(); ok markus@
4166 - stevesk@cvs.openbsd.org 2001/01/22 17:22:28
4167 [sshconnect2.c sshd.c]
4168 fix memory leaks in SSH2 key exchange; ok markus@
d464095c 4169 - markus@cvs.openbsd.org 2001/01/22 23:06:39
4170 [auth1.c auth2.c readconf.c readconf.h servconf.c servconf.h
4171 sshconnect1.c sshconnect2.c sshd.c]
4172 rename skey -> challenge response.
4173 auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.
53a24016 4174
effa6591 4175
42f11eb2 417620010122
4177 - (bal) OpenBSD Resync
4178 - markus@cvs.openbsd.org 2001/01/19 12:45:26 GMT 2001 by markus
4179 [servconf.c ssh.h sshd.c]
4180 only auth-chall.c needs #ifdef SKEY
4181 - markus@cvs.openbsd.org 2001/01/19 15:55:10 GMT 2001 by markus
4182 [auth-krb4.c auth-options.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
4183 auth1.c auth2.c channels.c clientloop.c dh.c dispatch.c nchan.c
4184 packet.c pathname.h readconf.c scp.c servconf.c serverloop.c
4185 session.c ssh-add.c ssh-keygen.c ssh-keyscan.c ssh.c ssh.h
4186 ssh1.h sshconnect1.c sshd.c ttymodes.c]
4187 move ssh1 definitions to ssh1.h, pathnames to pathnames.h
4188 - markus@cvs.openbsd.org 2001/01/19 16:48:14
4189 [sshd.8]
4190 fix typo; from stevesk@
4191 - markus@cvs.openbsd.org 2001/01/19 16:50:58
4192 [ssh-dss.c]
61e96248 4193 clear and free digest, make consistent with other code (use dlen); from
42f11eb2 4194 stevesk@
4195 - markus@cvs.openbsd.org 2001/01/20 15:55:20 GMT 2001 by markus
4196 [auth-options.c auth-options.h auth-rsa.c auth2.c]
4197 pass the filename to auth_parse_options()
61e96248 4198 - markus@cvs.openbsd.org 2001/01/20 17:59:40 GMT 2001
42f11eb2 4199 [readconf.c]
4200 fix SIGSEGV from -o ""; problem noted by jehsom@togetherweb.com
4201 - stevesk@cvs.openbsd.org 2001/01/20 18:20:29
4202 [sshconnect2.c]
4203 dh_new_group() does not return NULL. ok markus@
4204 - markus@cvs.openbsd.org 2001/01/20 21:33:42
4205 [ssh-add.c]
61e96248 4206 do not loop forever if askpass does not exist; from
42f11eb2 4207 andrew@pimlott.ne.mediaone.net
4208 - djm@cvs.openbsd.org 2001/01/20 23:00:56
4209 [servconf.c]
4210 Check for NULL return from strdelim; ok markus
4211 - djm@cvs.openbsd.org 2001/01/20 23:02:07
4212 [readconf.c]
4213 KNF; ok markus
4214 - jakob@cvs.openbsd.org 2001/01/21 9:00:33
4215 [ssh-keygen.1]
4216 remove -R flag; ok markus@
4217 - markus@cvs.openbsd.org 2001/01/21 19:05:40
4218 [atomicio.c automicio.h auth-chall.c auth-krb4.c auth-options.c
4219 auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
4220 auth.c auth.h auth1.c auth2-chall.c auth2.c authfd.c authfile.c
4221 bufaux.c bufaux.h buffer.c canahost.c canahost.h channels.c
4222 cipher.c cli.c clientloop.c clientloop.h compat.c compress.c
4223 deattack.c dh.c dispatch.c groupaccess.c hmac.c hostfile.c kex.c
4224 key.c key.h log-client.c log-server.c log.c log.h login.c login.h
4225 match.c misc.c misc.h nchan.c packet.c pty.c radix.h readconf.c
4226 readpass.c readpass.h rsa.c scp.c servconf.c serverloop.c serverloop.h
4227 session.c sftp-server.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c
61e96248 4228 ssh-keyscan.c ssh-rsa.c ssh.c ssh.h sshconnect.c sshconnect.h
42f11eb2 4229 sshconnect1.c sshconnect2.c sshd.c tildexpand.c tildexpand.h
4230 ttysmodes.c uidswap.c xmalloc.c]
61e96248 4231 split ssh.h and try to cleanup the #include mess. remove unnecessary
42f11eb2 4232 #includes. rename util.[ch] -> misc.[ch]
4233 - (bal) renamed 'PIDDIR' to '_PATH_SSH_PIDDIR' to match OpenBSD tree
61e96248 4234 - (bal) Moved #ifdef KRB4 in auth-krb4.c above the #include to resolve
42f11eb2 4235 conflict when compiling for non-kerb install
4236 - (bal) removed the #ifdef SKEY in auth1.c to match Markus' changes
4237 on 1/19.
4238
6005a40c 423920010120
4240 - (bal) OpenBSD Resync
4241 - markus@cvs.openbsd.org 2001/01/19 12:45:26
4242 [ssh-chall.c servconf.c servconf.h ssh.h sshd.c]
4243 only auth-chall.c needs #ifdef SKEY
47af6577 4244 - (bal) Slight auth2-pam.c clean up.
4245 - (bal) Includes a fake-regexp.h to be only used if regcomp() is found,
4246 but no 'regexp.h' found (SCO OpenServer 3 lacks the header).
6005a40c 4247
922e6493 424820010119
4249 - (djm) Update versions in RPM specfiles
59c97189 4250 - (bal) OpenBSD Resync
4251 - markus@cvs.openbsd.org 2001/01/18 16:20:21
4252 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1 ssh.h
4253 sshd.8 sshd.c]
61e96248 4254 log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many
59c97189 4255 systems
4256 - markus@cvs.openbsd.org 2001/01/18 16:59:59
4257 [auth-passwd.c auth.c auth.h auth1.c auth2.c serverloop.c session.c
4258 session.h sshconnect1.c]
4259 1) removes fake skey from sshd, since this will be much
4260 harder with /usr/libexec/auth/login_XXX
4261 2) share/unify code used in ssh-1 and ssh-2 authentication (server side)
4262 3) make addition of BSD_AUTH and other challenge reponse methods
4263 easier.
4264 - markus@cvs.openbsd.org 2001/01/18 17:12:43
4265 [auth-chall.c auth2-chall.c]
4266 rename *-skey.c *-chall.c since the files are not skey specific
04fc7a67 4267 - (djm) Merge patch from Tim Waugh (via Nalin Dahyabhai <nalin@redhat.com>)
4268 to fix NULL pointer deref and fake authloop breakage in PAM code.
f4ebf0e8 4269 - (bal) Updated contrib/cygwin/ by Corinna Vinschen <vinschen@redhat.com>
3c418020 4270 - (bal) Minor cygwin patch to auth1.c. Suggested by djm.
61e96248 4271
b5c334cc 427220010118
4273 - (bal) Super Sized OpenBSD Resync
4274 - markus@cvs.openbsd.org 2001/01/11 22:14:20 GMT 2001 by markus
4275 [sshd.c]
4276 maxfd+1
4277 - markus@cvs.openbsd.org 2001/01/13 17:59:18
4278 [ssh-keygen.1]
4279 small ssh-keygen manpage cleanup; stevesk@pobox.com
4280 - markus@cvs.openbsd.org 2001/01/13 18:03:07
4281 [scp.c ssh-keygen.c sshd.c]
4282 getopt() returns -1 not EOF; stevesk@pobox.com
4283 - markus@cvs.openbsd.org 2001/01/13 18:06:54
4284 [ssh-keyscan.c]
4285 use SSH_DEFAULT_PORT; from stevesk@pobox.com
4286 - markus@cvs.openbsd.org 2001/01/13 18:12:47
4287 [ssh-keyscan.c]
4288 free() -> xfree(); fix memory leak; from stevesk@pobox.com
4289 - markus@cvs.openbsd.org 2001/01/13 18:14:13
4290 [ssh-add.c]
4291 typo, from stevesk@sweden.hp.com
4292 - markus@cvs.openbsd.org 2001/01/13 18:32:50
61e96248 4293 [packet.c session.c ssh.c sshconnect.c sshd.c]
b5c334cc 4294 split out keepalive from packet_interactive (from dale@accentre.com)
4295 set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too.
4296 - markus@cvs.openbsd.org 2001/01/13 18:36:45
4297 [packet.c packet.h]
4298 reorder, typo
4299 - markus@cvs.openbsd.org 2001/01/13 18:38:00
4300 [auth-options.c]
4301 fix comment
4302 - markus@cvs.openbsd.org 2001/01/13 18:43:31
4303 [session.c]
4304 Wall
61e96248 4305 - markus@cvs.openbsd.org 2001/01/13 19:14:08
b5c334cc 4306 [clientloop.h clientloop.c ssh.c]
4307 move callback to headerfile
4308 - markus@cvs.openbsd.org 2001/01/15 21:40:10
4309 [ssh.c]
4310 use log() instead of stderr
4311 - markus@cvs.openbsd.org 2001/01/15 21:43:51
4312 [dh.c]
4313 use error() not stderr!
4314 - markus@cvs.openbsd.org 2001/01/15 21:45:29
4315 [sftp-server.c]
4316 rename must fail if newpath exists, debug off by default
4317 - markus@cvs.openbsd.org 2001/01/15 21:46:38
4318 [sftp-server.c]
4319 readable long listing for sftp-server, ok deraadt@
4320 - markus@cvs.openbsd.org 2001/01/16 19:20:06
4321 [key.c ssh-rsa.c]
61e96248 4322 make "ssh-rsa" key format for ssh2 confirm to the ietf-drafts; from
4323 galb@vandyke.com. note that you have to delete older ssh2-rsa keys,
4324 since they are in the wrong format, too. they must be removed from
b5c334cc 4325 .ssh/authorized_keys2 and .ssh/known_hosts2, etc.
61e96248 4326 (cd; grep -v ssh-rsa .ssh/authorized_keys2 > TMP && mv TMP
4327 .ssh/authorized_keys2) additionally, we now check that
b5c334cc 4328 BN_num_bits(rsa->n) >= 768.
4329 - markus@cvs.openbsd.org 2001/01/16 20:54:27
4330 [sftp-server.c]
4331 remove some statics. simpler handles; idea from nisse@lysator.liu.se
4332 - deraadt@cvs.openbsd.org 2001/01/16 23:58:08
4333 [bufaux.c radix.c sshconnect.h sshconnect1.c]
4334 indent
4335 - (bal) Added bsd-strmode.[ch] since some non-OpenBSD platforms may
4336 be missing such feature.
4337
61e96248 4338
52ce34a2 433920010117
4340 - (djm) Only write random seed file at exit
717057b6 4341 - (djm) Make PAM support optional, enable with --with-pam
61e96248 4342 - (djm) Try to use libcrypt on Linux, but link it after OpenSSL (which
717057b6 4343 provides a crypt() of its own)
4344 - (djm) Avoid a warning in bsd-bindresvport.c
4345 - (djm) Try to avoid adding -I/usr/include to CPPFLAGS during SSL tests. This
61e96248 4346 can cause weird segfaults errors on Solaris
8694a1ce 4347 - (djm) Avoid warning in PAM code by making read_passphrase arguments const
d748039d 4348 - (djm) Add --with-pam to RPM spec files
52ce34a2 4349
2fd3c144 435020010115
4351 - (bal) sftp-server.c change to use chmod() if fchmod() does not exist.
89c7e31c 4352 - (bal) utimes() support via utime() interface on machine that lack utimes().
2fd3c144 4353
63b68889 435420010114
4355 - (stevesk) initial work for OpenBSD "support supplementary group in
4356 {Allow,Deny}Groups" patch:
4357 - import getgrouplist.c from OpenBSD (bsd-getgrouplist.c)
4358 - add bsd-getgrouplist.h
4359 - new files groupaccess.[ch]
4360 - build but don't use yet (need to merge auth.c changes)
c6a69271 4361 - (stevesk) complete:
4362 - markus@cvs.openbsd.org 2001/01/13 11:56:48
4363 [auth.c sshd.8]
4364 support supplementary group in {Allow,Deny}Groups
4365 from stevesk@pobox.com
61e96248 4366
f546c780 436720010112
4368 - (bal) OpenBSD Sync
4369 - markus@cvs.openbsd.org 2001/01/10 22:56:22
4370 [bufaux.h bufaux.c sftp-server.c sftp.h getput.h]
4371 cleanup sftp-server implementation:
547519f0 4372 add buffer_get_int64, buffer_put_int64, GET_64BIT, PUT_64BIT
4373 parse SSH2_FILEXFER_ATTR_EXTENDED
4374 send SSH2_FX_EOF if readdir returns no more entries
4375 reply to SSH2_FXP_EXTENDED message
4376 use #defines from the draft
4377 move #definations to sftp.h
f546c780 4378 more info:
61e96248 4379 http://www.ietf.org/internet-drafts/draft-ietf-secsh-filexfer-00.txt
f546c780 4380 - markus@cvs.openbsd.org 2001/01/10 19:43:20
4381 [sshd.c]
4382 XXX - generate_empheral_server_key() is not safe against races,
61e96248 4383 because it calls log()
f546c780 4384 - markus@cvs.openbsd.org 2001/01/09 21:19:50
4385 [packet.c]
4386 allow TCP_NDELAY for ipv6; from netbsd via itojun@
4387
9548d6c8 438820010110
4389 - (djm) SNI/Reliant Unix needs USE_PIPES and $DISPLAY hack. Report from
4390 Bladt Norbert <Norbert.Bladt@adi.ch>
4391
af972861 439220010109
4393 - (bal) Resync CVS ID of cli.c
4b80e97b 4394 - (stevesk) auth1.c: free should be after WITH_AIXAUTHENTICATE
4395 code.
eea39c02 4396 - (bal) OpenBSD Sync
4397 - markus@cvs.openbsd.org 2001/01/08 22:29:05
4398 [auth2.c compat.c compat.h servconf.c servconf.h sshd.8
4399 sshd_config version.h]
4400 implement option 'Banner /etc/issue.net' for ssh2, move version to
4401 2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
4402 is enabled).
4403 - markus@cvs.openbsd.org 2001/01/08 22:03:23
4404 [channels.c ssh-keyscan.c]
4405 O_NDELAY -> O_NONBLOCK; thanks stevesk@pobox.com
4406 - markus@cvs.openbsd.org 2001/01/08 21:55:41
4407 [sshconnect1.c]
4408 more cleanups and fixes from stevesk@pobox.com:
4409 1) try_agent_authentication() for loop will overwrite key just
4410 allocated with key_new(); don't alloc
4411 2) call ssh_close_authentication_connection() before exit
4412 try_agent_authentication()
4413 3) free mem on bad passphrase in try_rsa_authentication()
4414 - markus@cvs.openbsd.org 2001/01/08 21:48:17
4415 [kex.c]
4416 missing free; thanks stevesk@pobox.com
f1c4659d 4417 - (bal) Detect if clock_t structure exists, if not define it.
4418 - (bal) Detect if O_NONBLOCK exists, if not define it.
4419 - (bal) removed news4-posix.h (now empty)
4420 - (bal) changed bsd-bindresvport.c and bsd-rresvport.c to use 'socklen_t'
4421 instead of 'int'
adc83ebf 4422 - (stevesk) sshd_config: sync
4f771a33 4423 - (stevesk) defines.h: remove spurious ``;''
af972861 4424
bbcf899f 442520010108
4426 - (bal) Fixed another typo in cli.c
4427 - (bal) OpenBSD Sync
4428 - markus@cvs.openbsd.org 2001/01/07 21:26:55
4429 [cli.c]
4430 typo
4431 - markus@cvs.openbsd.org 2001/01/07 21:26:55
4432 [cli.c]
4433 missing free, stevesk@pobox.com
4434 - markus@cvs.openbsd.org 2001/01/07 19:06:25
4435 [auth1.c]
4436 missing free, stevesk@pobox.com
4437 - markus@cvs.openbsd.org 2001/01/07 11:28:04
4438 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1
4439 ssh.h sshd.8 sshd.c]
4440 rename SYSLOG_LEVEL_INFO->SYSLOG_LEVEL_NOTICE
4441 syslog priority changes:
4442 fatal() LOG_ERR -> LOG_CRIT
4443 log() LOG_INFO -> LOG_NOTICE
b8c37305 4444 - Updated TODO
bbcf899f 4445
9616313f 444620010107
4447 - (bal) OpenBSD Sync
4448 - markus@cvs.openbsd.org 2001/01/06 11:23:27
4449 [ssh-rsa.c]
4450 remove unused
4451 - itojun@cvs.openbsd.org 2001/01/05 08:23:29
4452 [ssh-keyscan.1]
4453 missing .El
4454 - markus@cvs.openbsd.org 2001/01/04 22:41:03
4455 [session.c sshconnect.c]
4456 consistent use of _PATH_BSHELL; from stevesk@pobox.com
4457 - djm@cvs.openbsd.org 2001/01/04 22:35:32
4458 [ssh.1 sshd.8]
4459 Mention AES as available SSH2 Cipher; ok markus
4460 - markus@cvs.openbsd.org 2001/01/04 22:25:58
4461 [sshd.c]
4462 sync usage()/man with defaults; from stevesk@pobox.com
4463 - markus@cvs.openbsd.org 2001/01/04 22:21:26
4464 [sshconnect2.c]
4465 handle SSH2_MSG_USERAUTH_BANNER; fixes bug when connecting to a server
4466 that prints a banner (e.g. /etc/issue.net)
61e96248 4467
1877dc0c 446820010105
4469 - (bal) contrib/caldera/ provided by Tim Rice <tim@multitalents.net>
5a64a938 4470 - (bal) bsd-getcwd.c and bsd-setenv.c changed from bcopy() to memmove()
1877dc0c 4471
488c06c8 447220010104
4473 - (djm) Fix memory leak on systems with BROKEN_GETADDRINFO. Based on
4474 work by Chris Vaughan <vaughan99@yahoo.com>
4475
7c49df64 447620010103
4477 - (bal) fixed up sshconnect.c so it was closer inline with the OpenBSD
4478 tree (mainly positioning)
4479 - (bal) OpenSSH CVS Update
4480 - markus@cvs.openbsd.org 2001/01/02 20:41:02
4481 [packet.c]
4482 log remote ip on disconnect; PR 1600 from jcs@rt.fm
4483 - markus@cvs.openbsd.org 2001/01/02 20:50:56
4484 [sshconnect.c]
61e96248 4485 strict_host_key_checking for host_status != HOST_CHANGED &&
7c49df64 4486 ip_status == HOST_CHANGED
61e96248 4487 - (bal) authfile.c: Synced CVS ID tag
2c523de9 4488 - (bal) UnixWare 2.0 fixes by Tim Rice <tim@multitalents.net>
4489 - (bal) Disable sftp-server if no 64bit int support exists. Based on
4490 patch by Tim Rice <tim@multitalents.net>
4491 - (bal) Makefile.in changes to uninstall: target to remove sftp-server
4492 and sftp-server.8 manpage.
7c49df64 4493
a421e945 449420010102
4495 - (bal) OpenBSD CVS Update
4496 - markus@cvs.openbsd.org 2001/01/01 14:52:49
4497 [scp.c]
4498 use shared fatal(); from stevesk@pobox.com
4499
0efc80a7 450020001231
4501 - (bal) Reverted out of MAXHOSTNAMELEN. This should be set per OS.
4502 for multiple reasons.
b1335fdf 4503 - (bal) Reverted out of a partial NeXT patch.
0efc80a7 4504
efcae5b1 450520001230
4506 - (bal) OpenBSD CVS Update
4507 - markus@cvs.openbsd.org 2000/12/28 18:58:30
4508 [ssh-keygen.c]
4509 enable 'ssh-keygen -l -f ~/.ssh/{authorized_keys,known_hosts}{,2}
b148018f 4510 - markus@cvs.openbsd.org 2000/12/29 22:19:13
4511 [channels.c]
4512 missing xfree; from vaughan99@yahoo.com
efcae5b1 4513 - (bal) Resynced CVS ID with OpenBSD for channel.c and uidswap.c
03a14cc9 4514 - (bal) if no MAXHOSTNAMELEN is defined. Default to 64 character defination.
34665bf7 4515 Suggested by Christian Kurz <shorty@debian.org>
cb6dabf4 4516 - (bal) Add in '.c.o' section to Makefile.in to address make programs that
61e96248 4517 don't honor CPPFLAGS by default. Suggested by Lutz Jaenicke
cb6dabf4 4518 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
0dd78cd8 4519
452020001229
61e96248 4521 - (bal) Fixed spelling of 'authorized_keys' in ssh-copy-id.1 by Christian
34665bf7 4522 Kurz <shorty@debian.org>
8abcdba4 4523 - (bal) OpenBSD CVS Update
4524 - markus@cvs.openbsd.org 2000/12/28 14:25:51
4525 [auth.h auth2.c]
4526 count authentication failures only
4527 - markus@cvs.openbsd.org 2000/12/28 14:25:03
4528 [sshconnect.c]
4529 fingerprint for MITM attacks, too.
4530 - markus@cvs.openbsd.org 2000/12/28 12:03:57
4531 [sshd.8 sshd.c]
4532 document -D
4533 - markus@cvs.openbsd.org 2000/12/27 14:19:21
4534 [serverloop.c]
4535 less chatty
4536 - markus@cvs.openbsd.org 2000/12/27 12:34
4537 [auth1.c sshconnect2.c sshd.c]
4538 typo
4539 - markus@cvs.openbsd.org 2000/12/27 12:30:19
4540 [readconf.c readconf.h ssh.1 sshconnect.c]
4541 new option: HostKeyAlias: allow the user to record the host key
4542 under a different name. This is useful for ssh tunneling over
4543 forwarded connections or if you run multiple sshd's on different
4544 ports on the same machine.
4545 - markus@cvs.openbsd.org 2000/12/27 11:51:53
4546 [ssh.1 ssh.c]
4547 multiple -t force pty allocation, document ORIGINAL_COMMAND
4548 - markus@cvs.openbsd.org 2000/12/27 11:41:31
4549 [sshd.8]
4550 update for ssh-2
c52c7082 4551 - (stevesk) compress.[ch] sync with openbsd; missed in prototype
4552 fix merge.
0dd78cd8 4553
8f523d67 455420001228
4555 - (bal) Patch to add libutil.h to loginrec.c only if the platform has
4556 libutil.h. Suggested by Pekka Savola <pekka@netcore.fi>
9fb76616 4557 - (djm) Update to new x11-askpass in RPM spec
0dd78cd8 4558 - (bal) SCO patch to not include <sys/queue.h> since it's unrelated
4559 header. Patch by Tim Rice <tim@multitalents.net>
4560 - Updated TODO w/ known HP/UX issue
4561 - (bal) removed extra <netdb.h> noticed by Kevin Steves and removed the
4562 bad reference to 'NeXT including it else were' on the #ifdef version.
8f523d67 4563
b03bd394 456420001227
61e96248 4565 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
b03bd394 4566 Takumi Yamane <yamtak@b-session.com>
4567 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
8f523d67 4568 by Corinna Vinschen <vinschen@redhat.com>
4569 - (djm) Fix catman-do target for non-bash
61e96248 4570 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
8f523d67 4571 Takumi Yamane <yamtak@b-session.com>
4572 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
b03bd394 4573 by Corinna Vinschen <vinschen@redhat.com>
13991f8e 4574 - (djm) Fix catman-do target for non-bash
61e96248 4575 - (bal) Fixed NeXT's lack of CPPFLAGS honoring.
4576 - (bal) ssh-keyscan.c: NeXT (and older BSDs) don't support getrlimit() w/
f318b98b 4577 'RLIMIT_NOFILE'
61e96248 4578 - (djm) Remove *.Ylonen files. They are no longer in the OpenBSD tree,
4579 the info in COPYING.Ylonen has been moved to the start of each
3bdf55b1 4580 SSH1-derived file and README.Ylonen is well out of date.
b03bd394 4581
8d88011e 458220001223
4583 - (bal) Fixed Makefile.in to support recompile of all ssh and sshd objects
4584 if a change to config.h has occurred. Suggested by Gert Doering
4585 <gert@greenie.muc.de>
4586 - (bal) OpenBSD CVS Update:
4587 - markus@cvs.openbsd.org 2000/12/22 16:49:40
4588 [ssh-keygen.c]
4589 fix ssh-keygen -x -t type > file; from Roumen.Petrov@skalasoft.com
4590
1e3b8b07 459120001222
4592 - Updated RCSID for pty.c
4593 - (bal) OpenBSD CVS Updates:
4594 - markus@cvs.openbsd.org 2000/12/21 15:10:16
4595 [auth-rh-rsa.c hostfile.c hostfile.h sshconnect.c]
4596 print keyfile:line for changed hostkeys, for deraadt@, ok deraadt@
4597 - markus@cvs.openbsd.org 2000/12/20 19:26:56
4598 [authfile.c]
4599 allow ssh -i userkey for root
4600 - markus@cvs.openbsd.org 2000/12/20 19:37:21
4601 [authfd.c authfd.h kex.c sshconnect2.c sshd.c uidswap.c uidswap.h]
4602 fix prototypes; from stevesk@pobox.com
4603 - markus@cvs.openbsd.org 2000/12/20 19:32:08
4604 [sshd.c]
4605 init pointer to NULL; report from Jan.Ivan@cern.ch
4606 - markus@cvs.openbsd.org 2000/12/19 23:17:54
4607 [auth-krb4.c auth-options.c auth-options.h auth-rhosts.c auth-rsa.c
4608 auth1.c auth2-skey.c auth2.c authfd.c authfd.h authfile.c bufaux.c
4609 bufaux.h buffer.c canohost.c channels.c clientloop.c compress.c
4610 crc32.c deattack.c getput.h hmac.c hmac.h hostfile.c kex.c kex.h
4611 key.c key.h log.c login.c match.c match.h mpaux.c mpaux.h packet.c
4612 packet.h radix.c readconf.c rsa.c scp.c servconf.c servconf.h
4613 serverloop.c session.c sftp-server.c ssh-agent.c ssh-dss.c ssh-dss.h
4614 ssh-keygen.c ssh-keyscan.c ssh-rsa.c ssh-rsa.h ssh.c ssh.h uuencode.c
4615 uuencode.h sshconnect1.c sshconnect2.c sshd.c tildexpand.c]
4616 replace 'unsigned bla' with 'u_bla' everywhere. also replace 'char
4617 unsigned' with u_char.
4618
67b0facb 461920001221
4620 - (stevesk) OpenBSD CVS updates:
4621 - markus@cvs.openbsd.org 2000/12/19 15:43:45
4622 [authfile.c channels.c sftp-server.c ssh-agent.c]
4623 remove() -> unlink() for consistency
4624 - markus@cvs.openbsd.org 2000/12/19 15:48:09
4625 [ssh-keyscan.c]
4626 replace <ssl/x.h> with <openssl/x.h>
4627 - markus@cvs.openbsd.org 2000/12/17 02:33:40
4628 [uidswap.c]
4629 typo; from wsanchez@apple.com
61e96248 4630
adeebd37 463120001220
61e96248 4632 - (djm) Workaround PAM inconsistencies between Solaris derived PAM code
adeebd37 4633 and Linux-PAM. Based on report and fix from Andrew Morgan
4634 <morgan@transmeta.com>
4635
f072c47a 463620001218
4637 - (stevesk) rsa.c: entropy.h not needed.
0c2fb82f 4638 - (bal) split CFLAGS into CFLAGS and CPPFLAGS in configure.in and Makefile.
4639 Suggested by Wilfredo Sanchez <wsanchez@apple.com>
f072c47a 4640
731c1541 464120001216
4642 - (stevesk) OpenBSD CVS updates:
4643 - markus@cvs.openbsd.org 2000/12/16 02:53:57
4644 [scp.c]
4645 allow + in usernames; request from Florian.Weimer@RUS.Uni-Stuttgart.DE
4646 - markus@cvs.openbsd.org 2000/12/16 02:39:57
4647 [scp.c]
4648 unused; from stevesk@pobox.com
4649
227e8e86 465020001215
9853409f 4651 - (stevesk) Old OpenBSD patch wasn't completely applied:
4652 - markus@cvs.openbsd.org 2000/01/24 22:11:20
4653 [scp.c]
4654 allow '.' in usernames; from jedgar@fxp.org
227e8e86 4655 - (stevesk) OpenBSD CVS updates:
4656 - markus@cvs.openbsd.org 2000/12/13 16:26:53
4657 [ssh-keyscan.c]
4658 fatal already adds \n; from stevesk@pobox.com
4659 - markus@cvs.openbsd.org 2000/12/13 16:25:44
4660 [ssh-agent.c]
4661 remove redundant spaces; from stevesk@pobox.com
4662 - ho@cvs.openbsd.org 2000/12/12 15:50:21
4663 [pty.c]
4664 When failing to set tty owner and mode on a read-only filesystem, don't
4665 abort if the tty already has correct owner and reasonably sane modes.
4666 Example; permit 'root' to login to a firewall with read-only root fs.
4667 (markus@ ok)
4668 - deraadt@cvs.openbsd.org 2000/12/13 06:36:05
4669 [pty.c]
4670 KNF
6ffc9c88 4671 - markus@cvs.openbsd.org 2000/12/12 14:45:21
4672 [sshd.c]
4673 source port < 1024 is no longer required for rhosts-rsa since it
4674 adds no additional security.
4675 - markus@cvs.openbsd.org 2000/12/12 16:11:49
4676 [ssh.1 ssh.c]
4677 rhosts-rsa is no longer automagically disabled if ssh is not privileged.
4678 UsePrivilegedPort=no disables rhosts-rsa _only_ for old servers.
4679 these changes should not change the visible default behaviour of the ssh client.
71c0d06a 4680 - deraadt@cvs.openbsd.org 2000/12/11 10:27:33
4681 [scp.c]
4682 when copying 0-sized files, do not re-print ETA time at completion
3e1caa83 4683 - provos@cvs.openbsd.org 2000/12/15 10:30:15
4684 [kex.c kex.h sshconnect2.c sshd.c]
4685 compute diffie-hellman in parallel between server and client. okay markus@
227e8e86 4686
6c935fbd 468720001213
4688 - (djm) Make sure we reset the SIGPIPE disposition after we fork. Report
4689 from Andreas M. Kirchwitz <amk@krell.zikzak.de>
227e8e86 4690 - (stevesk) OpenBSD CVS update:
1fe6a48f 4691 - markus@cvs.openbsd.org 2000/12/12 15:30:02
4692 [ssh-keyscan.c ssh.c sshd.c]
61e96248 4693 consistently use __progname; from stevesk@pobox.com
6c935fbd 4694
367d1840 469520001211
4696 - (bal) Applied patch to include ssh-keyscan into Redhat's package, and
4697 patch to install ssh-keyscan manpage. Patch by Pekka Savola
4698 <pekka@netcore.fi>
e3a70753 4699 - (bal) OpenbSD CVS update
4700 - markus@cvs.openbsd.org 2000/12/10 17:01:53
4701 [sshconnect1.c]
4702 always request new challenge for skey/tis-auth, fixes interop with
4703 other implementations; report from roth@feep.net
367d1840 4704
6b523bae 470520001210
4706 - (bal) OpenBSD CVS updates
61e96248 4707 - markus@cvs.openbsd.org 2000/12/09 13:41:51
6b523bae 4708 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
4709 undo rijndael changes
61e96248 4710 - markus@cvs.openbsd.org 2000/12/09 13:48:31
6b523bae 4711 [rijndael.c]
4712 fix byte order bug w/o introducing new implementation
61e96248 4713 - markus@cvs.openbsd.org 2000/12/09 14:08:27
6b523bae 4714 [sftp-server.c]
4715 "" -> "." for realpath; from vinschen@redhat.com
61e96248 4716 - markus@cvs.openbsd.org 2000/12/09 14:06:54
6b523bae 4717 [ssh-agent.c]
4718 extern int optind; from stevesk@sweden.hp.com
13af0aa2 4719 - provos@cvs.openbsd.org 2000/12/09 23:51:11
4720 [compat.c]
4721 remove unnecessary '\n'
6b523bae 4722
ce9c0b75 472320001209
6b523bae 4724 - (bal) OpenBSD CVS updates:
61e96248 4725 - djm@cvs.openbsd.org 2000/12/07 4:24:59
ce9c0b75 4726 [ssh.1]
4727 Typo fix from Wilfredo Sanchez <wsanchez@apple.com>; ok theo
4728
f72fc97f 472920001207
6b523bae 4730 - (bal) OpenBSD CVS updates:
61e96248 4731 - markus@cvs.openbsd.org 2000/12/06 22:58:14
f72fc97f 4732 [compat.c compat.h packet.c]
4733 disable debug messages for ssh.com/f-secure 2.0.1x, 2.1.0
dfe89252 4734 - markus@cvs.openbsd.org 2000/12/06 23:10:39
4735 [rijndael.c]
4736 unexpand(1)
61e96248 4737 - markus@cvs.openbsd.org 2000/12/06 23:05:43
dfe89252 4738 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
4739 new rijndael implementation. fixes endian bugs
f72fc97f 4740
97fb6912 474120001206
6b523bae 4742 - (bal) OpenBSD CVS updates:
97fb6912 4743 - markus@cvs.openbsd.org 2000/12/05 20:34:09
4744 [channels.c channels.h clientloop.c serverloop.c]
4745 async connects for -R/-L; ok deraadt@
4746 - todd@cvs.openssh.org 2000/12/05 16:47:28
4747 [sshd.c]
4748 tweak comment to reflect real location of pid file; ok provos@
bf5f69f7 4749 - (stevesk) Import <sys/queue.h> from OpenBSD for systems that don't
4750 have it (used in ssh-keyscan).
227e8e86 4751 - (stevesk) OpenBSD CVS update:
f20255cb 4752 - markus@cvs.openbsd.org 2000/12/06 19:57:48
4753 [ssh-keyscan.c]
4754 err(3) -> internal error(), from stevesk@sweden.hp.com
97fb6912 4755
f6fdbddf 475620001205
6b523bae 4757 - (bal) OpenBSD CVS updates:
f6fdbddf 4758 - markus@cvs.openbsd.org 2000/12/04 19:24:02
4759 [ssh-keyscan.c ssh-keyscan.1]
4760 David Maziere's ssh-keyscan, ok niels@
4761 - (bal) Updated Makefile.in to include ssh-keyscan that was just added
4762 to the recent OpenBSD source tree.
835d2104 4763 - (stevesk) fix typos in contrib/hpux/README
f6fdbddf 4764
cbc5abf9 476520001204
4766 - (bal) More C functions defined in NeXT that are unaccessable without
61e96248 4767 defining -POSIX.
4768 - (bal) OpenBSD CVS updates:
4769 - markus@cvs.openbsd.org 2000/12/03 11:29:04
cbc5abf9 4770 [compat.c]
4771 remove fallback to SSH_BUG_HMAC now that the drafts are updated
4772 - markus@cvs.openbsd.org 2000/12/03 11:27:55
4773 [compat.c]
61e96248 4774 correctly match "2.1.0.pl2 SSH" etc; from
97fb6912 4775 pekkas@netcore.fi/bugzilla.redhat
cbc5abf9 4776 - markus@cvs.openbsd.org 2000/12/03 11:15:03
4777 [auth2.c compat.c compat.h sshconnect2.c]
4778 support f-secure/ssh.com 2.0.12; ok niels@
4779
0b6fbf03 478020001203
cbc5abf9 4781 - (bal) OpenBSD CVS updates:
0b6fbf03 4782 - markus@cvs.openbsd.org 2000/11/30 22:54:31
4783 [channels.c]
61e96248 4784 debug->warn if tried to do -R style fwd w/o client requesting this;
0b6fbf03 4785 ok neils@
4786 - markus@cvs.openbsd.org 2000/11/29 20:39:17
4787 [cipher.c]
4788 des_cbc_encrypt -> des_ncbc_encrypt since it already updates the IV
4789 - markus@cvs.openbsd.org 2000/11/30 18:33:05
4790 [ssh-agent.c]
4791 agents must not dump core, ok niels@
61e96248 4792 - markus@cvs.openbsd.org 2000/11/30 07:04:02
0b6fbf03 4793 [ssh.1]
4794 T is for both protocols
4795 - markus@cvs.openbsd.org 2000/12/01 00:00:51
4796 [ssh.1]
4797 typo; from green@FreeBSD.org
4798 - markus@cvs.openbsd.org 2000/11/30 07:02:35
4799 [ssh.c]
4800 check -T before isatty()
4801 - provos@cvs.openbsd.org 2000/11/29 13:51:27
4802 [sshconnect.c]
61e96248 4803 show IP address and hostname when new key is encountered. okay markus@
0b6fbf03 4804 - markus@cvs.openbsd.org 2000/11/30 22:53:35
4805 [sshconnect.c]
4806 disable agent/x11/port fwding if hostkey has changed; ok niels@
4807 - marksu@cvs.openbsd.org 2000/11/29 21:11:59
4808 [sshd.c]
4809 sshd -D, startup w/o deamon(), for monitoring scripts or inittab;
4810 from handler@sub-rosa.com and eric@urbanrange.com; ok niels@
8c9fe09e 4811 - (djm) Added patch from Nalin Dahyabhai <nalin@redhat.com> to enable
4812 PAM authentication using KbdInteractive.
4813 - (djm) Added another TODO
0b6fbf03 4814
90f4078a 481520001202
4816 - (bal) Backed out of part of Alain St-Denis' loginrec.c patch.
61e96248 4817 - (bal) Irix need some sort of mansubdir, patch by Michael Stone
90f4078a 4818 <mstone@cs.loyola.edu>
4819
dcef6523 482020001129
7062c40f 4821 - (djm) Back out all the serverloop.c hacks. sshd will now hang again
4822 if there are background children with open fds.
c193d002 4823 - (djm) bsd-rresvport.c bzero -> memset
61e96248 4824 - (djm) Don't fail in defines.h on absence of 64 bit types (we will
c193d002 4825 still fail during compilation of sftp-server).
4826 - (djm) Fail if ar is not found during configure
c523303b 4827 - (djm) OpenBSD CVS updates:
4828 - provos@cvs.openbsd.org 2000/11/22 08:38:31
4829 [sshd.8]
4830 talk about /etc/primes, okay markus@
4831 - markus@cvs.openbsd.org 2000/11/23 14:03:48
4832 [ssh.c sshconnect1.c sshconnect2.c]
4833 complain about invalid ciphers for ssh1/ssh2, fall back to reasonable
4834 defaults
4835 - markus@cvs.openbsd.org 2000/11/25 09:42:53
4836 [sshconnect1.c]
4837 reorder check for illegal ciphers, bugreport from espie@
4838 - markus@cvs.openbsd.org 2000/11/25 10:19:34
4839 [ssh-keygen.c ssh.h]
4840 print keytype when generating a key.
4841 reasonable defaults for RSA1/RSA/DSA keys.
b3ec54b4 4842 - (djm) Patch from Pekka Savola <Pekka.Savola@netcore.fi> to include a few
4843 more manpage paths in fixpaths calls
4844 - (djm) Also add xauth path at Pekka's suggestion.
57ce3f00 4845 - (djm) Add Redhat RPM patch for AUTHPRIV SyslogFacility
dcef6523 4846
e879a080 484720001125
4848 - (djm) Give up privs when reading seed file
4849
d343d900 485020001123
4851 - (bal) Merge OpenBSD changes:
4852 - markus@cvs.openbsd.org 2000/11/15 22:31:36
4853 [auth-options.c]
61e96248 4854 case insensitive key options; from stevesk@sweeden.hp.com
d343d900 4855 - markus@cvs.openbsd.org 2000/11/16 17:55:43
4856 [dh.c]
4857 do not use perror() in sshd, after child is forked()
4858 - markus@cvs.openbsd.org 2000/11/14 23:42:40
4859 [auth-rsa.c]
4860 parse option only if key matches; fix some confusing seen by the client
4861 - markus@cvs.openbsd.org 2000/11/14 23:44:19
4862 [session.c]
4863 check no_agent_forward_flag for ssh-2, too
4864 - markus@cvs.openbsd.org 2000/11/15
4865 [ssh-agent.1]
4866 reorder SYNOPSIS; typo, use .It
4867 - markus@cvs.openbsd.org 2000/11/14 23:48:55
4868 [ssh-agent.c]
4869 do not reorder keys if a key is removed
4870 - markus@cvs.openbsd.org 2000/11/15 19:58:08
4871 [ssh.c]
61e96248 4872 just ignore non existing user keys
d343d900 4873 - millert@cvs.openbsd.org 200/11/15 20:24:43
4874 [ssh-keygen.c]
4875 Add missing \n at end of error message.
4876
0b49a754 487720001122
4878 - (bal) Minor patch to ensure platforms lacking IRIX job limit supports
4879 are compilable.
4880 - (bal) Updated TODO as of 11/18/2000 with known things to resolve.
4881
fab2e5d3 488220001117
4883 - (bal) Changed from 'primes' to 'primes.out' for consistancy sake. It
4884 has no affect the output. Patch by Corinna Vinschen <vinschen@redhat.com>
61e96248 4885 - (stevesk) Reworked progname support.
260d427b 4886 - (bal) Misplaced #include "includes.h" in bsd-setproctitle.c. Patch by
4887 Shinichi Maruyama <marya@st.jip.co.jp>
fab2e5d3 4888
c2207f11 488920001116
4890 - (bal) Added in MAXSYMLINK test in bsd-realpath.c. Required for some SCO
4891 releases.
4892 - (bal) Make builds work outside of source tree. Patch by Mark D. Roth
4893 <roth@feep.net>
4894
3d398e04 489520001113
61e96248 4896 - (djm) Add pointer to http://www.imasy.or.jp/~gotoh/connect.c to
3d398e04 4897 contrib/README
fa08c86b 4898 - (djm) Merge OpenBSD changes:
4899 - markus@cvs.openbsd.org 2000/11/06 16:04:56
4900 [channels.c channels.h clientloop.c nchan.c serverloop.c]
4901 [session.c ssh.c]
4902 agent forwarding and -R for ssh2, based on work from
4903 jhuuskon@messi.uku.fi
4904 - markus@cvs.openbsd.org 2000/11/06 16:13:27
4905 [ssh.c sshconnect.c sshd.c]
4906 do not disabled rhosts(rsa) if server port > 1024; from
4907 pekkas@netcore.fi
4908 - markus@cvs.openbsd.org 2000/11/06 16:16:35
4909 [sshconnect.c]
4910 downgrade client to 1.3 if server is 1.4; help from mdb@juniper.net
4911 - markus@cvs.openbsd.org 2000/11/09 18:04:40
4912 [auth1.c]
4913 typo; from mouring@pconline.com
4914 - markus@cvs.openbsd.org 2000/11/12 12:03:28
4915 [ssh-agent.c]
4916 off-by-one when removing a key from the agent
4917 - markus@cvs.openbsd.org 2000/11/12 12:50:39
4918 [auth-rh-rsa.c auth2.c authfd.c authfd.h]
4919 [authfile.c hostfile.c kex.c kex.h key.c key.h myproposal.h]
4920 [readconf.c readconf.h rsa.c rsa.h servconf.c servconf.h ssh-add.c]
4921 [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config]
4922 [sshconnect1.c sshconnect2.c sshd.8 sshd.c sshd_config ssh-dss.c]
61e96248 4923 [ssh-dss.h ssh-rsa.c ssh-rsa.h dsa.c dsa.h]
fa08c86b 4924 add support for RSA to SSH2. please test.
4925 there are now 3 types of keys: RSA1 is used by ssh-1 only,
4926 RSA and DSA are used by SSH2.
4927 you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
4928 keys for SSH2 and use the RSA keys for hostkeys or for user keys.
4929 SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.
4930 - (djm) Fix up Makefile and Redhat init script to create RSA host keys
f001465f 4931 - (djm) Change to interim version
5733a41a 4932 - (djm) Fix RPM spec file stupidity
6fff1ac4 4933 - (djm) fixpaths to DSA and RSA keys too
3d398e04 4934
d287c664 493520001112
4936 - (bal) SCO Patch to add needed libraries for configure.in. Patch by
4937 Phillips Porch <root@theporch.com>
3d398e04 4938 - (bal) IRIX patch to adding Job Limits. Patch by Denis Parker
4939 <dcp@sgi.com>
a3bf38d0 4940 - (stevesk) pty.c: HP-UX 10 and 11 don't define TIOCSCTTY. Add error() to
4941 failed ioctl(TIOCSCTTY) call.
d287c664 4942
3c4d4fef 494320001111
4944 - (djm) Added /etc/primes for kex DH group neg, fixup Makefile.in and
4945 packaging files
35325fd4 4946 - (djm) Fix new Makefile.in warnings
61e96248 4947 - (djm) Fix vsprintf("%h") in bsd-snprintf.c, short int va_args are
4948 promoted to type int. Report and fix from Dan Astoorian
027bf205 4949 <djast@cs.toronto.edu>
61e96248 4950 - (djm) Hardwire sysconfdir in RPM spec files as some RPM versions get
e3291159 4951 it wrong. Report from Bennett Todd <bet@rahul.net>
3c4d4fef 4952
3e366738 495320001110
4954 - (bal) Fixed dropped answer from skey_keyinfo() in auth1.c
4955 - (bal) Changed from --with-skey to --with-skey=PATH in configure.in
4956 - (bal) Added in check to verify S/Key library is being detected in
4957 configure.in
61e96248 4958 - (bal) next-posix.h - added another prototype wrapped in POSIX ifdef/endif.
3e366738 4959 Patch by Mark Miller <markm@swoon.net>
4960 - (bal) Added 'util.h' header to loginrec.c only if HAVE_UTIL_H is defined
61e96248 4961 to remove warnings under MacOS X. Patch by Mark Miller <markm@swoon.net>
3e366738 4962 - (bal) Fixed LDFLAG mispelling in configure.in for --with-afs
4963
373998a4 496420001107
e506ee73 4965 - (bal) acconfig.in - removed the double "USE_PIPES" entry. Patch by
4966 Mark Miller <markm@swoon.net>
373998a4 4967 - (bal) sshd.init files corrected to assign $? to RETVAL. Patch by
4968 Jarno Huuskonen <jhuuskon@messi.uku.fi>
e506ee73 4969 - (bal) fixpaths fixed to stop it from quitely failing. Patch by
4970 Mark D. Roth <roth@feep.net>
373998a4 4971
ac89998a 497220001106
4973 - (djm) Use Jim's new 1.0.3 askpass in Redhat RPMs
6c09e23c 4974 - (djm) Manually fix up missed diff hunks (mainly RCS idents)
61e96248 4975 - (djm) Remove UPGRADING document in favour of a link to the better
d6846e6a 4976 maintained FAQ on www.openssh.com
73bd30fe 4977 - (djm) Fix multiple dependancy on gnome-libs from Pekka Savola
4978 <pekkas@netcore.fi>
4979 - (djm) Don't need X11-askpass in RPM spec file if building without it
4980 from Pekka Savola <pekkas@netcore.fi>
c215ba3b 4981 - (djm) Release 2.3.0p1
97b378bf 4982 - (bal) typo in configure.in in regards to --with-ldflags from Marko
4983 Asplund <aspa@kronodoc.fi>
4984 - (bal) fixed next-posix.h. Forgot prototype of getppid().
68f189a9 4985
b850ecd9 498620001105
4987 - (bal) Sync with OpenBSD:
4988 - markus@cvs.openbsd.org 2000/10/31 9:31:58
4989 [compat.c]
4990 handle all old openssh versions
4991 - markus@cvs.openbsd.org 2000/10/31 13:1853
4992 [deattack.c]
4993 so that large packets do not wrap "n"; from netbsd
4994 - (bal) rijndel.c - fix up RCSID to match OpenBSD tree
a30ce26d 4995 - (bal) auth2-skey.c - Checked in. Missing from portable tree.
4996 - (bal) Reworked NEWS-OS and NeXT ports to extract waitpid() and
4997 setsid() into more common files
96054e6f 4998 - (stevesk) pty.c: use __hpux to identify HP-UX.
d0127657 4999 - (bal) Missed auth-skey.o in Makefile.in and minor correction to
5000 bsd-waitpid.c
b850ecd9 5001
75b90ced 500220001029
5003 - (stevesk) Fix typo in auth.c: USE_PAM not PAM
95273555 5004 - (stevesk) Create contrib/cygwin/ directory; patch from
5005 Corinna Vinschen <vinschen@redhat.com>
e9e4a1c7 5006 - (bal) Resolved more $xno and $xyes issues in configure.in
fd5f0295 5007 - (bal) next-posix.h - spelling and forgot a prototype
75b90ced 5008
344f2b94 500920001028
61e96248 5010 - (djm) fix select hack in serverloop.c from Philippe WILLEM
344f2b94 5011 <Philippe.WILLEM@urssaf.fr>
240ae474 5012 - (djm) Fix mangled AIXAUTHENTICATE code
61e96248 5013 - (djm) authctxt->pw may be NULL. Fix from Markus Friedl
606ea390 5014 <markus.friedl@informatik.uni-erlangen.de>
a22aff1f 5015 - (djm) Sync with OpenBSD:
5016 - markus@cvs.openbsd.org 2000/10/16 15:46:32
5017 [ssh.1]
5018 fixes from pekkas@netcore.fi
5019 - markus@cvs.openbsd.org 2000/10/17 14:28:11
5020 [atomicio.c]
5021 return number of characters processed; ok deraadt@
5022 - markus@cvs.openbsd.org 2000/10/18 12:04:02
5023 [atomicio.c]
5024 undo
5025 - markus@cvs.openbsd.org 2000/10/18 12:23:02
5026 [scp.c]
5027 replace atomicio(read,...) with read(); ok deraadt@
5028 - markus@cvs.openbsd.org 2000/10/18 12:42:00
5029 [session.c]
5030 restore old record login behaviour
5031 - deraadt@cvs.openbsd.org 2000/10/19 10:41:13
5032 [auth-skey.c]
5033 fmt string problem in unused code
5034 - provos@cvs.openbsd.org 2000/10/19 10:45:16
5035 [sshconnect2.c]
5036 don't reference freed memory. okay deraadt@
5037 - markus@cvs.openbsd.org 2000/10/21 11:04:23
5038 [canohost.c]
5039 typo, eramore@era-t.ericsson.se; ok niels@
5040 - markus@cvs.openbsd.org 2000/10/23 13:31:55
5041 [cipher.c]
5042 non-alignment dependent swap_bytes(); from
5043 simonb@wasabisystems.com/netbsd
5044 - markus@cvs.openbsd.org 2000/10/26 12:38:28
5045 [compat.c]
5046 add older vandyke products
5047 - markus@cvs.openbsd.org 2000/10/27 01:32:19
5048 [channels.c channels.h clientloop.c serverloop.c session.c]
5049 [ssh.c util.c]
61e96248 5050 enable non-blocking IO on channels, and tty's (except for the
a22aff1f 5051 client ttys).
344f2b94 5052
ddc49b5c 505320001027
5054 - (djm) Increase REKEY_BYTES to 2^24 for arc4random
5055
48e7916f 505620001025
5057 - (djm) Added WARNING.RNG file and modified configure to ask users of the
5058 builtin entropy code to read it.
5059 - (djm) Prefer builtin regex to PCRE.
00937921 5060 - (bal) Added USE_PIPS defined to NeXT configure.in since scp hangs randomly.
5061 - (bal) Apply fixes to configure.in pointed out by Pavel Roskin
5062 <proski@gnu.org>
48e7916f 5063
8dcda1e3 506420001020
5065 - (djm) Don't define _REENTRANT for SNI/Reliant Unix
07bee9a7 5066 - (bal) Imported NEWS-OS waitpid() macros into NeXT. Since implementation
5067 is more correct then current version.
8dcda1e3 5068
f5af5cd5 506920001018
5070 - (stevesk) Add initial support for setproctitle(). Current
5071 support is for the HP-UX pstat(PSTAT_SETCMD, ...) method.
134fd7f6 5072 - (stevesk) Add egd startup scripts to contrib/hpux/
f5af5cd5 5073
2f31bdd6 507420001017
5075 - (djm) Add -lregex to cywin libs from Corinna Vinschen
5076 <vinschen@cygnus.com>
ba7a3f40 5077 - (djm) Don't rely on atomicio's retval to determine length of askpass
5078 supplied passphrase. Problem report from Lutz Jaenicke
5079 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
66d6c27e 5080 - (bal) Changed from GNU rx to PCRE on suggestion from djm.
61e96248 5081 - (bal) Integrated Sony NEWS-OS patches from NAKAJI Hirouyuki
66d6c27e 5082 <nakaji@tutrp.tut.ac.jp>
2f31bdd6 5083
33de75a3 508420001016
5085 - (djm) Sync with OpenBSD:
5086 - markus@cvs.openbsd.org 2000/10/14 04:01:15
5087 [cipher.c]
5088 debug3
5089 - markus@cvs.openbsd.org 2000/10/14 04:07:23
5090 [scp.c]
5091 remove spaces from arguments; from djm@mindrot.org
5092 - markus@cvs.openbsd.org 2000/10/14 06:09:46
5093 [ssh.1]
5094 Cipher is for SSH-1 only
5095 - markus@cvs.openbsd.org 2000/10/14 06:12:09
5096 [servconf.c servconf.h serverloop.c session.c sshd.8]
5097 AllowTcpForwarding; from naddy@
5098 - markus@cvs.openbsd.org 2000/10/14 06:16:56
5099 [auth2.c compat.c compat.h sshconnect2.c version.h]
61e96248 5100 OpenSSH_2.3; note that is is not complete, but the version number
33de75a3 5101 needs to be changed for interoperability reasons
5102 - markus@cvs.openbsd.org 2000/10/14 06:19:45
5103 [auth-rsa.c]
5104 do not send RSA challenge if key is not allowed by key-options; from
5105 eivind@ThinkSec.com
5106 - markus@cvs.openbsd.org 2000/10/15 08:14:01
5107 [rijndael.c session.c]
5108 typos; from stevesk@sweden.hp.com
5109 - markus@cvs.openbsd.org 2000/10/15 08:18:31
5110 [rijndael.c]
5111 typo
61e96248 5112 - (djm) Copy manpages back over from OpenBSD - too tedious to wade
30d8b039 5113 through diffs
61e96248 5114 - (djm) Added condrestart to Redhat init script. Patch from Pekka Savola
30d8b039 5115 <pekkas@netcore.fi>
aa0289fe 5116 - (djm) Update version in Redhat spec file
61e96248 5117 - (djm) Merge some of Nalin Dahyabhai <nalin@redhat.com> changes from the
aa0289fe 5118 Redhat 7.0 spec file
5b2d4b75 5119 - (djm) Make inability to read/write PRNG seedfile non-fatal
5120
33de75a3 5121
4d670c24 512220001015
5123 - (djm) Fix ssh2 hang on background processes at logout.
5124
71dfaf1c 512520001014
443172c4 5126 - (bal) Add support for realpath and getcwd for platforms with broken
5127 or missing realpath implementations for sftp-server.
5128 - (bal) Corrected mistake in INSTALL in regards to GNU rx library
61e96248 5129 - (bal) Add support for GNU rx library for those lacking regexp support
71dfaf1c 5130 - (djm) Don't accept PAM_PROMPT_ECHO_ON messages during initial auth
02323c45 5131 - (djm) Revert SSH2 serverloop hack, will find a better way.
4ee81249 5132 - (djm) Add workaround for Linux 2.4's gratuitious errno change. Patch
5133 from Martin Johansson <fatbob@acc.umu.se>
94ec8c6b 5134 - (djm) Big OpenBSD sync:
5135 - markus@cvs.openbsd.org 2000/09/30 10:27:44
5136 [log.c]
5137 allow loglevel debug
5138 - markus@cvs.openbsd.org 2000/10/03 11:59:57
5139 [packet.c]
5140 hmac->mac
5141 - markus@cvs.openbsd.org 2000/10/03 12:03:03
5142 [auth-krb4.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth1.c]
5143 move fake-auth from auth1.c to individual auth methods, disables s/key in
5144 debug-msg
5145 - markus@cvs.openbsd.org 2000/10/03 12:16:48
5146 ssh.c
5147 do not resolve canonname, i have no idea why this was added oin ossh
5148 - markus@cvs.openbsd.org 2000/10/09 15:30:44
5149 ssh-keygen.1 ssh-keygen.c
5150 -X now reads private ssh.com DSA keys, too.
5151 - markus@cvs.openbsd.org 2000/10/09 15:32:34
5152 auth-options.c
5153 clear options on every call.
5154 - markus@cvs.openbsd.org 2000/10/09 15:51:00
5155 authfd.c authfd.h
5156 interop with ssh-agent2, from <res@shore.net>
5157 - markus@cvs.openbsd.org 2000/10/10 14:20:45
5158 compat.c
5159 use rexexp for version string matching
5160 - provos@cvs.openbsd.org 2000/10/10 22:02:18
5161 [kex.c kex.h myproposal.h ssh.h ssh2.h sshconnect2.c sshd.c dh.c dh.h]
5162 First rough implementation of the diffie-hellman group exchange. The
5163 client can ask the server for bigger groups to perform the diffie-hellman
5164 in, thus increasing the attack complexity when using ciphers with longer
5165 keys. University of Windsor provided network, T the company.
5166 - markus@cvs.openbsd.org 2000/10/11 13:59:52
5167 [auth-rsa.c auth2.c]
5168 clear auth options unless auth sucessfull
5169 - markus@cvs.openbsd.org 2000/10/11 14:00:27
5170 [auth-options.h]
5171 clear auth options unless auth sucessfull
5172 - markus@cvs.openbsd.org 2000/10/11 14:03:27
5173 [scp.1 scp.c]
5174 support 'scp -o' with help from mouring@pconline.com
5175 - markus@cvs.openbsd.org 2000/10/11 14:11:35
5176 [dh.c]
5177 Wall
5178 - markus@cvs.openbsd.org 2000/10/11 14:14:40
5179 [auth.h auth2.c readconf.c readconf.h readpass.c servconf.c servconf.h]
5180 [ssh.h sshconnect2.c sshd_config auth2-skey.c cli.c cli.h]
5181 add support for s/key (kbd-interactive) to ssh2, based on work by
5182 mkiernan@avantgo.com and me
5183 - markus@cvs.openbsd.org 2000/10/11 14:27:24
5184 [auth.c auth1.c auth2.c authfile.c cipher.c cipher.h kex.c kex.h]
5185 [myproposal.h packet.c readconf.c session.c ssh.c ssh.h sshconnect1.c]
5186 [sshconnect2.c sshd.c]
5187 new cipher framework
5188 - markus@cvs.openbsd.org 2000/10/11 14:45:21
5189 [cipher.c]
5190 remove DES
5191 - markus@cvs.openbsd.org 2000/10/12 03:59:20
5192 [cipher.c cipher.h sshconnect1.c sshconnect2.c sshd.c]
5193 enable DES in SSH-1 clients only
5194 - markus@cvs.openbsd.org 2000/10/12 08:21:13
5195 [kex.h packet.c]
5196 remove unused
5197 - markus@cvs.openbsd.org 2000/10/13 12:34:46
5198 [sshd.c]
5199 Kludge for F-Secure Macintosh < 1.0.2; appro@fy.chalmers.se
5200 - markus@cvs.openbsd.org 2000/10/13 12:59:15
5201 [cipher.c cipher.h myproposal.h rijndael.c rijndael.h]
5202 rijndael/aes support
5203 - markus@cvs.openbsd.org 2000/10/13 13:10:54
5204 [sshd.8]
5205 more info about -V
5206 - markus@cvs.openbsd.org 2000/10/13 13:12:02
5207 [myproposal.h]
5208 prefer no compression
3ed32516 5209 - (djm) Fix scp user@host handling
5210 - (djm) Don't clobber ssh_prng_cmds on install
6bcf7caa 5211 - (stevesk) Include config.h in rijndael.c so we define intXX_t and
5212 u_intXX_t types on all platforms.
9ea53ba5 5213 - (stevesk) rijndael.c: cleanup missing declaration warnings.
2919e060 5214 - (stevesk) ~/.hushlogin shouldn't cause required password change to
5215 be bypassed.
f5665f6f 5216 - (stevesk) Display correct path to ssh-askpass in configure output.
5217 Report from Lutz Jaenicke.
71dfaf1c 5218
ebd782f7 521920001007
5220 - (stevesk) Print PAM return value in PAM log messages to aid
5221 with debugging.
97994d32 5222 - (stevesk) Fix detection of pw_class struct member in configure;
5223 patch from KAMAHARA Junzo <kamahara@cc.kshosen.ac.jp>
5224
47a134c1 522520001002
5226 - (djm) Fix USER_PATH, report from Kevin Steves <stevesk@sweden.hp.com>
5227 - (djm) Add host system and CC to end-of-configure report. Suggested by
5228 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
5229
7322ef0e 523020000931
5231 - (djm) Cygwin fixes from Corinna Vinschen <vinschen@cygnus.com>
5232
6ac7829a 523320000930
b6490dcb 5234 - (djm) Irix ssh_prng_cmds path fix from Pekka Savola <pekkas@netcore.fi>
61e96248 5235 - (djm) Support in bsd-snprintf.c for long long conversions from
772bd898 5236 Ben Lindstrom <mouring@pconline.com>
5237 - (djm) Cleanup NeXT support from Ben Lindstrom <mouring@pconline.com>
857040fb 5238 - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with
61e96248 5239 very short lived X connections. Bug report from Tobias Oetiker
857040fb 5240 <oetiker@ee.ethz.ch>. Fix from Markus Friedl <markus@cvs.openbsd.org>
bd2d7f6a 5241 - (djm) Add recent InitScripts as a RPM dependancy for openssh-server
5242 patch from Pekka Savola <pekkas@netcore.fi>
58665035 5243 - (djm) Forgot to cvs add LICENSE file
dc2901a0 5244 - (djm) Add LICENSE to RPM spec files
de273eef 5245 - (djm) CVS OpenBSD sync:
5246 - markus@cvs.openbsd.org 2000/09/26 13:59:59
5247 [clientloop.c]
5248 use debug2
5249 - markus@cvs.openbsd.org 2000/09/27 15:41:34
5250 [auth2.c sshconnect2.c]
5251 use key_type()
5252 - markus@cvs.openbsd.org 2000/09/28 12:03:18
5253 [channels.c]
5254 debug -> debug2 cleanup
61e96248 5255 - (djm) Irix strips "/dev/tty" from [uw]tmp entries (other systems only
2a7d529a 5256 strip "/dev/"). Fix loginrec.c based on patch from Alain St-Denis
5257 <Alain.St-Denis@ec.gc.ca>
61e96248 5258 - (djm) Fix 9 character passphrase failure with gnome-ssh-askpass.
5259 Problem was caused by interrupted read in ssh-add. Report from Donald
2a7d529a 5260 J. Barry <don@astro.cornell.edu>
6ac7829a 5261
c5d85828 526220000929
5263 - (djm) Fix SSH2 not terminating until all background tasks done problem.
61e96248 5264 - (djm) Another off-by-one fix from Pavel Kankovsky
5265 <peak@argo.troja.mff.cuni.cz>
22d89d24 5266 - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code,
5267 tidy necessary differences. Use Markus' new debugN() in entropy.c
61e96248 5268 - (djm) Merged big SCO portability patch from Tim Rice
77bb0bca 5269 <tim@multitalents.net>
c5d85828 5270
6fd7f731 527120000926
5272 - (djm) Update X11-askpass to 1.0.2 in RPM spec file
c5ae7384 5273 - (djm) Define _REENTRANT to pickup strtok_r() on HP/UX
61e96248 5274 - (djm) Security: fix off-by-one buffer overrun in fake-getnameinfo.c.
5275 Report and fix from Pavel Kankovsky <peak@argo.troja.mff.cuni.cz>
6fd7f731 5276
2f125ca1 527720000924
5278 - (djm) Merged cleanup patch from Mark Miller <markm@swoon.net>
5279 - (djm) A bit more cleanup - created cygwin_util.h
bcdaaeab 5280 - (djm) Include strtok_r() from OpenBSD libc. Fixes report from Mark Miller
5281 <markm@swoon.net>
2f125ca1 5282
764d4113 528320000923
61e96248 5284 - (djm) Fix address logging in utmp from Kevin Steves
764d4113 5285 <stevesk@sweden.hp.com>
777319db 5286 - (djm) Redhat spec and manpage fixes from Pekka Savola <pekkas@netcore.fi>
bd590612 5287 - (djm) Seperate tests for int64_t and u_int64_t types
61e96248 5288 - (djm) Tweak password expiry checking at suggestion of Kevin Steves
37c1c46d 5289 <stevesk@sweden.hp.com>
e79b44e1 5290 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
61e96248 5291 - (djm) Use printf %lld instead of %qd in sftp-server.c. Fix from
e2144f11 5292 Michael Stone <mstone@cs.loyola.edu>
188adeb2 5293 - (djm) OpenBSD CVS sync:
5294 - markus@cvs.openbsd.org 2000/09/17 09:38:59
5295 [sshconnect2.c sshd.c]
5296 fix DEBUG_KEXDH
5297 - markus@cvs.openbsd.org 2000/09/17 09:52:51
5298 [sshconnect.c]
5299 yes no; ok niels@
5300 - markus@cvs.openbsd.org 2000/09/21 04:55:11
5301 [sshd.8]
5302 typo
5303 - markus@cvs.openbsd.org 2000/09/21 05:03:54
5304 [serverloop.c]
5305 typo
5306 - markus@cvs.openbsd.org 2000/09/21 05:11:42
5307 scp.c
5308 utime() to utimes(); mouring@pconline.com
5309 - markus@cvs.openbsd.org 2000/09/21 05:25:08
5310 sshconnect2.c
5311 change login logic in ssh2, allows plugin of other auth methods
5312 - markus@cvs.openbsd.org 2000/09/21 05:25:35
5313 [auth2.c channels.c channels.h clientloop.c dispatch.c dispatch.h]
5314 [serverloop.c]
5315 add context to dispatch_run
5316 - markus@cvs.openbsd.org 2000/09/21 05:07:52
5317 authfd.c authfd.h ssh-agent.c
5318 bug compat for old ssh.com software
764d4113 5319
7f377177 532020000920
5321 - (djm) Fix bad path substitution. Report from Andrew Miner
5322 <asminer@cs.iastate.edu>
5323
bcbf86ec 532420000916
61e96248 5325 - (djm) Fix SSL search order from Lutz Jaenicke
7950bf97 5326 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
19ece6d2 5327 - (djm) New SuSE spec from Corinna Vinschen <corinna@vinschen.de>
9cd45ea4 5328 - (djm) Update CygWin support from Corinna Vinschen <vinschen@cygnus.com>
995edaac 5329 - (djm) Use a real struct sockaddr inside the fake struct sockaddr_storage.
5330 Patch from Larry Jones <larry.jones@sdrc.com>
61e96248 5331 - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM
ad55cd03 5332 password change patch.
5333 - (djm) Bring licenses on my stuff in line with OpenBSD's
0bbfbdeb 5334 - (djm) Cleanup auth-passwd.c and unify HP/UX authentication. Patch from
5335 Kevin Steves <stevesk@sweden.hp.com>
7f8f5e00 5336 - (djm) Shadow expiry check fix from Pavel Troller <patrol@omni.sinus.cz>
5337 - (djm) Re-enable int64_t types - we need them for sftp
5338 - (djm) Use libexecdir from configure , rather than libexecdir/ssh
5339 - (djm) Update Redhat SPEC file accordingly
5340 - (djm) Add Kevin Steves <stevesk@sweden.hp.com> HP/UX contrib files
5341 - (djm) Add Charles Levert <charles@comm.polymtl.ca> getpgrp patch
61e96248 5342 - (djm) Fix password auth on HP/UX 10.20. Patch from Dirk De Wachter
7f8f5e00 5343 <Dirk.DeWachter@rug.ac.be>
61e96248 5344 - (djm) Fixprogs and entropy list fixes from Larry Jones
7f8f5e00 5345 <larry.jones@sdrc.com>
5346 - (djm) Fix for SuSE spec file from Takashi YOSHIDA
5347 <tyoshida@gemini.rc.kyushu-u.ac.jp>
bcbf86ec 5348 - (djm) Merge OpenBSD changes:
5349 - markus@cvs.openbsd.org 2000/09/05 02:59:57
5350 [session.c]
5351 print hostname (not hushlogin)
5352 - markus@cvs.openbsd.org 2000/09/05 13:18:48
5353 [authfile.c ssh-add.c]
5354 enable ssh-add -d for DSA keys
5355 - markus@cvs.openbsd.org 2000/09/05 13:20:49
5356 [sftp-server.c]
5357 cleanup
5358 - markus@cvs.openbsd.org 2000/09/06 03:46:41
5359 [authfile.h]
5360 prototype
5361 - deraadt@cvs.openbsd.org 2000/09/07 14:27:56
5362 [ALL]
61e96248 5363 cleanup copyright notices on all files. I have attempted to be
5364 accurate with the details. everything is now under Tatu's licence
5365 (which I copied from his readme), and/or the core-sdi bsd-ish thing
5366 for deattack, or various openbsd developers under a 2-term bsd
bcbf86ec 5367 licence. We're not changing any rules, just being accurate.
5368 - markus@cvs.openbsd.org 2000/09/07 14:40:30
5369 [channels.c channels.h clientloop.c serverloop.c ssh.c]
5370 cleanup window and packet sizes for ssh2 flow control; ok niels
5371 - markus@cvs.openbsd.org 2000/09/07 14:53:00
5372 [scp.c]
5373 typo
5374 - markus@cvs.openbsd.org 2000/09/07 15:13:37
5375 [auth-options.c auth-options.h auth-rh-rsa.c auth-rsa.c auth.c]
5376 [authfile.h canohost.c channels.h compat.c hostfile.h log.c match.h]
5377 [pty.c readconf.c]
5378 some more Copyright fixes
5379 - markus@cvs.openbsd.org 2000/09/08 03:02:51
5380 [README.openssh2]
5381 bye bye
5382 - deraadt@cvs.openbsd.org 2000/09/11 18:38:33
5383 [LICENCE cipher.c]
5384 a few more comments about it being ARC4 not RC4
5385 - markus@cvs.openbsd.org 2000/09/12 14:53:11
5386 [log-client.c log-server.c log.c ssh.1 ssh.c ssh.h sshd.8 sshd.c]
5387 multiple debug levels
5388 - markus@cvs.openbsd.org 2000/09/14 14:25:15
5389 [clientloop.c]
5390 typo
5391 - deraadt@cvs.openbsd.org 2000/09/15 01:13:51
5392 [ssh-agent.c]
5393 check return value for setenv(3) for failure, and deal appropriately
5394
deb8d717 539520000913
5396 - (djm) Fix server not exiting with jobs in background.
5397
b5e300c2 539820000905
5399 - (djm) Import OpenBSD CVS changes
5400 - markus@cvs.openbsd.org 2000/08/31 15:52:24
5401 [Makefile sshd.8 sshd_config sftp-server.8 sftp-server.c]
5402 implement a SFTP server. interops with sftp2, scp2 and the windows
5403 client from ssh.com
5404 - markus@cvs.openbsd.org 2000/08/31 15:56:03
5405 [README.openssh2]
5406 sync
5407 - markus@cvs.openbsd.org 2000/08/31 16:05:42
5408 [session.c]
5409 Wall
5410 - markus@cvs.openbsd.org 2000/08/31 16:09:34
5411 [authfd.c ssh-agent.c]
5412 add a flag to SSH2_AGENTC_SIGN_REQUEST for future extensions
5413 - deraadt@cvs.openbsd.org 2000/09/01 09:25:13
5414 [scp.1 scp.c]
5415 cleanup and fix -S support; stevesk@sweden.hp.com
5416 - markus@cvs.openbsd.org 2000/09/01 16:29:32
5417 [sftp-server.c]
5418 portability fixes
5419 - markus@cvs.openbsd.org 2000/09/01 16:32:41
5420 [sftp-server.c]
5421 fix cast; mouring@pconline.com
5422 - itojun@cvs.openbsd.org 2000/09/03 09:23:28
5423 [ssh-add.1 ssh.1]
5424 add missing .El against .Bl.
5425 - markus@cvs.openbsd.org 2000/09/04 13:03:41
5426 [session.c]
5427 missing close; ok theo
5428 - markus@cvs.openbsd.org 2000/09/04 13:07:21
5429 [session.c]
5430 fix get_last_login_time order; from andre@van-veen.de
5431 - markus@cvs.openbsd.org 2000/09/04 13:10:09
5432 [sftp-server.c]
5433 more cast fixes; from mouring@pconline.com
5434 - markus@cvs.openbsd.org 2000/09/04 13:06:04
5435 [session.c]
5436 set SSH_ORIGINAL_COMMAND; from Leakin@dfw.nostrum.com, bet@rahul.net
5437 - (djm) Cleanup after import. Fix sftp-server compilation, Makefile
3c62e7eb 5438 - (djm) Merge cygwin support from Corinna Vinschen <vinschen@cygnus.com>
5439
1e61f54a 544020000903
5441 - (djm) Fix Redhat init script
5442
c80876b4 544320000901
5444 - (djm) Pick up Jim's new X11-askpass
5445 - (djm) Release 2.2.0p1
5446
8b4a0d08 544720000831
bcbf86ec 5448 - (djm) Workaround SIGPIPE problems on SCO. Fix from Aran Cox
8b4a0d08 5449 <acox@cv.telegroup.com>
b817711d 5450 - (djm) Pick up new version (2.2.0) from OpenBSD CVS
8b4a0d08 5451
0b65b628 545220000830
5453 - (djm) Compile warning fixes from Mark Miller <markm@swoon.net>
10fa00c8 5454 - (djm) Periodically rekey arc4random
5455 - (djm) Clean up diff against OpenBSD.
bcbf86ec 5456 - (djm) HPUX 11 needs USE_PIPES as well: Kevin Steves
2b10f47a 5457 <stevesk@sweden.hp.com>
b33a2e6e 5458 - (djm) Quieten the pam delete credentials error message
44839801 5459 - (djm) Fix printing of $DISPLAY hack if set by system type. Report from
5460 Kevin Steves <stevesk@sweden.hp.com>
84a770d1 5461 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
7efa2776 5462 - (djm) Fix doh in bsd-arc4random.c
0b65b628 5463
9aaf9be4 546420000829
bcbf86ec 5465 - (djm) Fix ^C ignored issue on Solaris. Diagnosis from Gert
5466 Doering <gert@greenie.muc.de>, John Horne <J.Horne@plymouth.ac.uk> and
9aaf9be4 5467 Garrick James <garrick@james.net>
b5f90139 5468 - (djm) Check for SCO pty naming style (ptyp%d/ttyp%d). Based on fix from
5469 Bastian Trompetter <btrompetter@firemail.de>
698d107e 5470 - (djm) NeXT tweaks from Ben Lindstrom <mouring@pconline.com>
14a9a859 5471 - More OpenBSD updates:
5472 - deraadt@cvs.openbsd.org 2000/08/24 15:46:59
5473 [scp.c]
5474 off_t in sink, to fix files > 2GB, i think, test is still running ;-)
5475 - deraadt@cvs.openbsd.org 2000/08/25 10:10:06
5476 [session.c]
5477 Wall
5478 - markus@cvs.openbsd.org 2000/08/26 04:33:43
5479 [compat.c]
5480 ssh.com-2.3.0
5481 - markus@cvs.openbsd.org 2000/08/27 12:18:05
5482 [compat.c]
5483 compatibility with future ssh.com versions
5484 - deraadt@cvs.openbsd.org 2000/08/27 21:50:55
5485 [auth-krb4.c session.c ssh-add.c sshconnect.c uidswap.c]
5486 print uid/gid as unsigned
5487 - markus@cvs.openbsd.org 2000/08/28 13:51:00
5488 [ssh.c]
5489 enable -n and -f for ssh2
5490 - markus@cvs.openbsd.org 2000/08/28 14:19:53
5491 [ssh.c]
5492 allow combination of -N and -f
5493 - markus@cvs.openbsd.org 2000/08/28 14:20:56
5494 [util.c]
5495 util.c
5496 - markus@cvs.openbsd.org 2000/08/28 14:22:02
5497 [util.c]
5498 undo
5499 - markus@cvs.openbsd.org 2000/08/28 14:23:38
5500 [util.c]
5501 don't complain if setting NONBLOCK fails with ENODEV
9aaf9be4 5502
137d7b6c 550320000823
5504 - (djm) Define USE_PIPES to avoid socketpair problems on HPUX 10 and SunOS 4
bcbf86ec 5505 Avoids "scp never exits" problem. Reports from Lutz Jaenicke
5506 <Lutz.Jaenicke@aet.TU-Cottbus.DE> and Tamito KAJIYAMA
137d7b6c 5507 <kajiyama@grad.sccs.chukyo-u.ac.jp>
2e73a022 5508 - (djm) Pick up LOGIN_PROGRAM from environment or PATH if not set by headers
da40ab4d 5509 - (djm) Add local version to version.h
ea788c22 5510 - (djm) Don't reseed arc4random everytime it is used
2e73a022 5511 - (djm) OpenBSD CVS updates:
5512 - deraadt@cvs.openbsd.org 2000/08/18 20:07:23
5513 [ssh.c]
5514 accept remsh as a valid name as well; roman@buildpoint.com
5515 - deraadt@cvs.openbsd.org 2000/08/18 20:17:13
5516 [deattack.c crc32.c packet.c]
5517 rename crc32() to ssh_crc32() to avoid zlib name clash. do not move to
5518 libz crc32 function yet, because it has ugly "long"'s in it;
5519 oneill@cs.sfu.ca
5520 - deraadt@cvs.openbsd.org 2000/08/18 20:26:08
5521 [scp.1 scp.c]
5522 -S prog support; tv@debian.org
5523 - deraadt@cvs.openbsd.org 2000/08/18 20:50:07
5524 [scp.c]
5525 knf
5526 - deraadt@cvs.openbsd.org 2000/08/18 20:57:33
5527 [log-client.c]
5528 shorten
5529 - markus@cvs.openbsd.org 2000/08/19 12:48:11
5530 [channels.c channels.h clientloop.c ssh.c ssh.h]
5531 support for ~. in ssh2
5532 - deraadt@cvs.openbsd.org 2000/08/19 15:29:40
5533 [crc32.h]
5534 proper prototype
5535 - markus@cvs.openbsd.org 2000/08/19 15:34:44
bcbf86ec 5536 [authfd.c authfd.h key.c key.h ssh-add.1 ssh-add.c ssh-agent.1]
5537 [ssh-agent.c ssh-keygen.c sshconnect1.c sshconnect2.c Makefile]
2e73a022 5538 [fingerprint.c fingerprint.h]
5539 add SSH2/DSA support to the agent and some other DSA related cleanups.
5540 (note that we cannot talk to ssh.com's ssh2 agents)
5541 - markus@cvs.openbsd.org 2000/08/19 15:55:52
5542 [channels.c channels.h clientloop.c]
5543 more ~ support for ssh2
5544 - markus@cvs.openbsd.org 2000/08/19 16:21:19
5545 [clientloop.c]
5546 oops
5547 - millert@cvs.openbsd.org 2000/08/20 12:25:53
5548 [session.c]
5549 We have to stash the result of get_remote_name_or_ip() before we
5550 close our socket or getpeername() will get EBADF and the process
5551 will exit. Only a problem for "UseLogin yes".
5552 - millert@cvs.openbsd.org 2000/08/20 12:30:59
5553 [session.c]
5554 Only check /etc/nologin if "UseLogin no" since login(1) may have its
5555 own policy on determining who is allowed to login when /etc/nologin
5556 is present. Also use the _PATH_NOLOGIN define.
5557 - millert@cvs.openbsd.org 2000/08/20 12:42:43
5558 [auth1.c auth2.c session.c ssh.c]
5559 Add calls to setusercontext() and login_get*(). We basically call
5560 setusercontext() in most places where previously we did a setlogin().
5561 Add default login.conf file and put root in the "daemon" login class.
5562 - millert@cvs.openbsd.org 2000/08/21 10:23:31
5563 [session.c]
5564 Fix incorrect PATH setting; noted by Markus.
137d7b6c 5565
c345cf9d 556620000818
5567 - (djm) OpenBSD CVS changes:
5568 - markus@cvs.openbsd.org 2000/07/22 03:14:37
5569 [servconf.c servconf.h sshd.8 sshd.c sshd_config]
5570 random early drop; ok theo, niels
5571 - deraadt@cvs.openbsd.org 2000/07/26 11:46:51
5572 [ssh.1]
5573 typo
5574 - deraadt@cvs.openbsd.org 2000/08/01 11:46:11
5575 [sshd.8]
5576 many fixes from pepper@mail.reppep.com
5577 - provos@cvs.openbsd.org 2000/08/01 13:01:42
5578 [Makefile.in util.c aux.c]
5579 rename aux.c to util.c to help with cygwin port
5580 - deraadt@cvs.openbsd.org 2000/08/02 00:23:31
5581 [authfd.c]
5582 correct sun_len; Alexander@Leidinger.net
5583 - provos@cvs.openbsd.org 2000/08/02 10:27:17
5584 [readconf.c sshd.8]
5585 disable kerberos authentication by default
5586 - provos@cvs.openbsd.org 2000/08/02 11:27:05
5587 [sshd.8 readconf.c auth-krb4.c]
5588 disallow kerberos authentication if we can't verify the TGT; from
5589 dugsong@
5590 kerberos authentication is on by default only if you have a srvtab.
5591 - markus@cvs.openbsd.org 2000/08/04 14:30:07
5592 [auth.c]
5593 unused
5594 - markus@cvs.openbsd.org 2000/08/04 14:30:35
5595 [sshd_config]
5596 MaxStartups
5597 - markus@cvs.openbsd.org 2000/08/15 13:20:46
5598 [authfd.c]
5599 cleanup; ok niels@
5600 - markus@cvs.openbsd.org 2000/08/17 14:05:10
5601 [session.c]
5602 cleanup login(1)-like jobs, no duplicate utmp entries
5603 - markus@cvs.openbsd.org 2000/08/17 14:06:34
5604 [session.c sshd.8 sshd.c]
5605 sshd -u len, similar to telnetd
1a022229 5606 - (djm) Lastlog was not getting closed after writing login entry
39987cc0 5607 - (djm) Add Solaris package support from Rip Loomis <loomisg@cist.saic.com>
c345cf9d 5608
416ed5a7 560920000816
5610 - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc)
bcbf86ec 5611 - (djm) Fix strerror replacement for old SunOS. Based on patch from
416ed5a7 5612 Charles Levert <charles@comm.polymtl.ca>
bcbf86ec 5613 - (djm) Seperate arc4random into seperate file and use OpenSSL's RC4
416ed5a7 5614 implementation.
ba606eb2 5615 - (djm) SUN_LEN macro for systems which lack it
416ed5a7 5616
dbaa2e87 561720000815
5618 - (djm) More SunOS 4.1.x fixes from Nate Itkin <nitkin@europa.com>
cd352c82 5619 - (djm) Avoid failures on Irix when ssh is not setuid. Fix from
5620 Michael Stone <mstone@cs.loyola.edu>
d93a7e5a 5621 - (djm) Don't seek in directory based lastlogs
bcbf86ec 5622 - (djm) Fix --with-ipaddr-display configure option test. Patch from
d93a7e5a 5623 Jarno Huuskonen <jhuuskon@messi.uku.fi>
2a2cb9e7 5624 - (djm) Fix AIX limits from Alexandre Oliva <oliva@lsd.ic.unicamp.br>
dbaa2e87 5625
6c33bf70 562620000813
5627 - (djm) Add $(srcdir) to includes when compiling (for VPATH). Report from
5628 Fabrice bacchella <fabrice.bacchella@marchfirst.fr>
5629
3fcce26c 563020000809
bcbf86ec 5631 - (djm) Define AIX hard limits if headers don't. Report from
3fcce26c 5632 Bill Painter <william.t.painter@lmco.com>
bcbf86ec 5633 - (djm) utmp direct write & SunOS 4 patch from Charles Levert
32eec038 5634 <charles@comm.polymtl.ca>
3fcce26c 5635
71d43804 563620000808
5637 - (djm) Cleanup Redhat RPMs. Generate keys at runtime rather than install
5638 time, spec file cleanup.
5639
f9bcea07 564020000807
378f2232 5641 - (djm) Set 0755 on binaries during install. Report from Lutz Jaenicke
47670e77 5642 - (djm) Suppress error messages on channel close shutdown() failurs
5643 works around Linux bug. Patch from Zack Weinberg <zack@wolery.cumb.org>
378f2232 5644 - (djm) Add some more entropy collection commands from Lutz Jaenicke
f9bcea07 5645
bcf89935 564620000725
5647 - (djm) Fix autoconf typo: HAVE_BINRESVPORT_AF -> HAVE_BINDRESVPORT_AF
5648
4c8722d9 564920000721
5650 - (djm) OpenBSD CVS updates:
5651 - markus@cvs.openbsd.org 2000/07/16 02:27:22
5652 [authfd.c authfd.h channels.c clientloop.c ssh-add.c ssh-agent.c ssh.c]
5653 [sshconnect1.c sshconnect2.c]
5654 make ssh-add accept dsa keys (the agent does not)
5655 - djm@cvs.openbsd.org 2000/07/17 19:25:02
5656 [sshd.c]
5657 Another closing of stdin; ok deraadt
5658 - markus@cvs.openbsd.org 2000/07/19 18:33:12
5659 [dsa.c]
5660 missing free, reorder
5661 - markus@cvs.openbsd.org 2000/07/20 16:23:14
5662 [ssh-keygen.1]
5663 document input and output files
5664
240777b8 566520000720
4c8722d9 5666 - (djm) Spec file fix from Petr Novotny <Petr.Novotny@antek.cz>
240777b8 5667
3c7def32 566820000716
4c8722d9 5669 - (djm) Release 2.1.1p4
3c7def32 5670
819b676f 567120000715
704b1659 5672 - (djm) OpenBSD CVS updates
5673 - provos@cvs.openbsd.org 2000/07/13 16:53:22
5674 [aux.c readconf.c servconf.c ssh.h]
5675 allow multiple whitespace but only one '=' between tokens, bug report from
5676 Ralf S. Engelschall <rse@engelschall.com> but different fix. okay deraadt@
5677 - provos@cvs.openbsd.org 2000/07/13 17:14:09
5678 [clientloop.c]
5679 typo; todd@fries.net
5680 - provos@cvs.openbsd.org 2000/07/13 17:19:31
5681 [scp.c]
5682 close can fail on AFS, report error; from Greg Hudson <ghudson@mit.edu>
5683 - markus@cvs.openbsd.org 2000/07/14 16:59:46
5684 [readconf.c servconf.c]
5685 allow leading whitespace. ok niels
5686 - djm@cvs.openbsd.org 2000/07/14 22:01:38
5687 [ssh-keygen.c ssh.c]
5688 Always create ~/.ssh with mode 700; ok Markus
819b676f 5689 - Fixes for SunOS 4.1.4 from Gordon Atwood <gordon@cs.ualberta.ca>
5690 - Include floatingpoint.h for entropy.c
5691 - strerror replacement
704b1659 5692
3f7a7e4a 569320000712
c37fb3c1 5694 - (djm) Remove -lresolve for Reliant Unix
3f7a7e4a 5695 - (djm) OpenBSD CVS Updates:
5696 - deraadt@cvs.openbsd.org 2000/07/11 02:11:34
5697 [session.c sshd.c ]
5698 make MaxStartups code still work with -d; djm
5699 - deraadt@cvs.openbsd.org 2000/07/11 13:17:45
5700 [readconf.c ssh_config]
5701 disable FallBackToRsh by default
c37fb3c1 5702 - (djm) Replace in_addr_t with u_int32_t in bsd-inet_aton.c. Report from
5703 Ben Lindstrom <mouring@pconline.com>
1e970014 5704 - (djm) Make building of X11-Askpass and GNOME-Askpass optional in RPM
5705 spec file.
dcb36e5d 5706 - (djm) Released 2.1.1p3
3f7a7e4a 5707
56118702 570820000711
5709 - (djm) Fixup for AIX getuserattr() support from Tom Bertelson
5710 <tbert@abac.com>
132dd316 5711 - (djm) ReliantUNIX support from Udo Schweigert <ust@cert.siemens.de>
bcbf86ec 5712 - (djm) NeXT: dirent structures to get scp working from Ben Lindstrom
c99e5056 5713 <mouring@pconline.com>
bcbf86ec 5714 - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report
dc2a6d09 5715 from Jim Watt <jimw@peisj.pebio.com>
2d9a148e 5716 - (djm) Replaced bsd-snprintf.c with one from Mutt source tree, it is known
5717 to compile on more platforms (incl NeXT).
cc6f2c4c 5718 - (djm) Added bsd-inet_aton and configure support for NeXT
aae19451 5719 - (djm) Misc NeXT fixes from Ben Lindstrom <mouring@pconline.com>
089fbbd2 5720 - (djm) OpenBSD CVS updates:
5721 - markus@cvs.openbsd.org 2000/06/26 03:22:29
5722 [authfd.c]
5723 cleanup, less cut&paste
5724 - markus@cvs.openbsd.org 2000/06/26 15:59:19
5725 [servconf.c servconf.h session.c sshd.8 sshd.c]
bcbf86ec 5726 MaxStartups: limit number of unauthenticated connections, work by
089fbbd2 5727 theo and me
5728 - deraadt@cvs.openbsd.org 2000/07/05 14:18:07
5729 [session.c]
5730 use no_x11_forwarding_flag correctly; provos ok
5731 - provos@cvs.openbsd.org 2000/07/05 15:35:57
5732 [sshd.c]
5733 typo
5734 - aaron@cvs.openbsd.org 2000/07/05 22:06:58
5735 [scp.1 ssh-agent.1 ssh-keygen.1 sshd.8]
bcbf86ec 5736 Insert more missing .El directives. Our troff really should identify
089fbbd2 5737 these and spit out a warning.
5738 - todd@cvs.openbsd.org 2000/07/06 21:55:04
5739 [auth-rsa.c auth2.c ssh-keygen.c]
5740 clean code is good code
5741 - deraadt@cvs.openbsd.org 2000/07/07 02:14:29
5742 [serverloop.c]
5743 sense of port forwarding flag test was backwards
5744 - provos@cvs.openbsd.org 2000/07/08 17:17:31
5745 [compat.c readconf.c]
5746 replace strtok with strsep; from David Young <dyoung@onthejob.net>
5747 - deraadt@cvs.openbsd.org 2000/07/08 19:21:15
5748 [auth.h]
5749 KNF
5750 - ho@cvs.openbsd.org 2000/07/08 19:27:33
5751 [compat.c readconf.c]
5752 Better conditions for strsep() ending.
5753 - ho@cvs.openbsd.org 2000/07/10 10:27:05
5754 [readconf.c]
5755 Get the correct message on errors. (niels@ ok)
5756 - ho@cvs.openbsd.org 2000/07/10 10:30:25
5757 [cipher.c kex.c servconf.c]
5758 strtok() --> strsep(). (niels@ ok)
5540ea9b 5759 - (djm) Fix problem with debug mode and MaxStartups
eb37534b 5760 - (djm) Don't generate host keys when $(DESTDIR) is set (e.g. during RPM
5761 builds)
229f64ee 5762 - (djm) Add strsep function from OpenBSD libc for systems that lack it
56118702 5763
a8545c6c 576420000709
5765 - (djm) Only enable PAM_TTY kludge for Linux. Problem report from
5766 Kevin Steves <stevesk@sweden.hp.com>
ec90a7d6 5767 - (djm) Match prototype and function declaration for rresvport_af.
5768 Problem report from Niklas Edmundsson <nikke@ing.umu.se>
bcbf86ec 5769 - (djm) Missing $(DESTDIR) on host-key target causing problems with RPM
732e8ac5 5770 builds. Problem report from Gregory Leblanc <GLeblanc@cu-portland.edu>
37f1df94 5771 - (djm) Replace ut_name with ut_user. Patch from Jim Watt
5772 <jimw@peisj.pebio.com>
264dce47 5773 - (djm) Fix pam sprintf fix
5774 - (djm) Cleanup entropy collection code a little more. Split initialisation
5775 from seeding, perform intialisation immediatly at start, be careful with
5776 uids. Based on problem report from Jim Watt <jimw@peisj.pebio.com>
5bf9cfe9 5777 - (djm) More NeXT compatibility from Ben Lindstrom <mouring@pconline.com>
5778 Including sigaction() et al. replacements
bcbf86ec 5779 - (djm) AIX getuserattr() session initialisation from Tom Bertelson
eeec075f 5780 <tbert@abac.com>
a8545c6c 5781
e2902a5b 578220000708
bcbf86ec 5783 - (djm) Fix bad fprintf format handling in auth-pam.c. Patch from
e2902a5b 5784 Aaron Hopkins <aaron@die.net>
7a33f831 5785 - (djm) Fix incorrect configure handling of --with-rsh-path option. Fix from
5786 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
bcbf86ec 5787 - (djm) Fixed undefined variables for OSF SIA. Report from
b3f162ba 5788 Baars, Henk <Hendrik.Baars@nl.origin-it.com>
bcbf86ec 5789 - (djm) Handle EWOULDBLOCK returns from read() and write() in atomicio.c
b28e4a3b 5790 Fix from Marquess, Steve Mr JMLFDC <Steve.Marquess@DET.AMEDD.ARMY.MIL>
bcbf86ec 5791 - (djm) Don't use inet_addr.
e2902a5b 5792
5637650d 579320000702
5794 - (djm) Fix brace mismatch from Corinna Vinschen <vinschen@cygnus.com>
27494968 5795 - (djm) Stop shadow expiry checking from preventing logins with NIS. Based
5796 on fix from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
a4070484 5797 - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from
5798 Chris, the Young One <cky@pobox.com>
bcbf86ec 5799 - (djm) Fix scp progress meter on really wide terminals. Based on patch
88726b31 5800 from James H. Cloos Jr. <cloos@jhcloos.com>
5637650d 5801
388e9f9f 580220000701
5803 - (djm) Fix Tru64 SIA problems reported by John P Speno <speno@isc.upenn.edu>
daaff4d5 5804 - (djm) Login fixes from Tom Bertelson <tbert@abac.com>
82258d68 5805 - (djm) Replace "/bin/sh" with _PATH_BSHELL. Report from Corinna Vinschen
5806 <vinschen@cygnus.com>
30228d7c 5807 - (djm) Replace "/usr/bin/login" with LOGIN_PROGRAM
2647ae26 5808 - (djm) Added check for broken snprintf() functions which do not correctly
5809 terminate output string and attempt to use replacement.
46158300 5810 - (djm) Released 2.1.1p2
388e9f9f 5811
9f32ceb4 581220000628
5813 - (djm) Fixes to lastlog code for Irix
5814 - (djm) Use atomicio in loginrec
3206bb3b 5815 - (djm) Patch from Michael Stone <mstone@cs.loyola.edu> to add support for
5816 Irix 6.x array sessions, project id's, and system audit trail id.
9e0c3e1f 5817 - (djm) Added 'distprep' make target to simplify packaging
bcbf86ec 5818 - (djm) Added patch from Chris Adams <cmadams@hiwaay.net> to add OSF SIA
4d33e531 5819 support. Enable using "USE_SIA=1 ./configure [options]"
61e96248 5820
d8caae24 582120000627
5822 - (djm) Fixes to login code - not setting li->uid, cleanups
a05a70ab 5823 - (djm) Formatting
d8caae24 5824
fe30cc2e 582520000626
3e98362e 5826 - (djm) Better fix to aclocal tests from Garrick James <garrick@james.net>
4cb5ffa0 5827 - (djm) Account expiry support from Andreas Steinmetz <ast@domdv.de>
5828 - (djm) Added password expiry checking (no password change support)
be0b9bb7 5829 - (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK
5830 based on patch from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
b5b3f75d 5831 - (djm) Fix fixed EGD code.
3e98362e 5832 - OpenBSD CVS update
5833 - provos@cvs.openbsd.org 2000/06/25 14:17:58
5834 [channels.c]
5835 correct check for bad channel ids; from Wei Dai <weidai@eskimo.com>
5836
1c04b088 583720000623
bcbf86ec 5838 - (djm) Use sa_family_t in prototype for rresvport_af. Patch from
1c04b088 5839 Svante Signell <svante.signell@telia.com>
5840 - (djm) Autoconf logic to define sa_family_t if it is missing
e5a0294f 5841 - OpenBSD CVS Updates:
5842 - markus@cvs.openbsd.org 2000/06/22 10:32:27
5843 [sshd.c]
5844 missing atomicio; report from Steve.Marquess@DET.AMEDD.ARMY.MIL
5845 - djm@cvs.openbsd.org 2000/06/22 17:55:00
5846 [auth-krb4.c key.c radix.c uuencode.c]
5847 Missing CVS idents; ok markus
1c04b088 5848
f528fdf2 584920000622
5850 - (djm) Automatically generate host key during "make install". Suggested
5851 by Gary E. Miller <gem@rellim.com>
5852 - (djm) Paranoia before kill() system call
74fc9186 5853 - OpenBSD CVS Updates:
5854 - markus@cvs.openbsd.org 2000/06/18 18:50:11
5855 [auth2.c compat.c compat.h sshconnect2.c]
5856 make userauth+pubkey interop with ssh.com-2.2.0
5857 - markus@cvs.openbsd.org 2000/06/18 20:56:17
5858 [dsa.c]
5859 mem leak + be more paranoid in dsa_verify.
5860 - markus@cvs.openbsd.org 2000/06/18 21:29:50
5861 [key.c]
5862 cleanup fingerprinting, less hardcoded sizes
5863 - markus@cvs.openbsd.org 2000/06/19 19:39:45
5864 [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
5865 [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h]
bcbf86ec 5866 [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h]
74fc9186 5867 [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h]
5868 [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c]
bcbf86ec 5869 [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c]
5870 [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c]
74fc9186 5871 [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c]
5872 [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h]
5873 OpenBSD tag
5874 - markus@cvs.openbsd.org 2000/06/21 10:46:10
5875 sshconnect2.c missing free; nuke old comment
f528fdf2 5876
e5fe9a1f 587720000620
5878 - (djm) Replace use of '-o' and '-a' logical operators in configure tests
986a22ec 5879 with '||' and '&&'. As suggested by Jim Knoble <jmknoble@jmknoble.cx>
e5fe9a1f 5880 to fix SCO Unixware problem reported by Gary E. Miller <gem@rellim.com>
c03aced4 5881 - (djm) Typo in loginrec.c
e5fe9a1f 5882
cbd7492e 588320000618
5884 - (djm) Add summary of configure options to end of ./configure run
bcbf86ec 5885 - (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from
cbd7492e 5886 Michael Stone <mstone@cs.loyola.edu>
bcbf86ec 5887 - (djm) rusage is a privileged operation on some Unices (incl.
cbd7492e 5888 Solaris 2.5.1). Report from Paul D. Smith <pausmith@nortelnetworks.com>
bcbf86ec 5889 - (djm) Avoid PAM failures when running without a TTY. Report from
cbd7492e 5890 Martin Petrak <petrak@spsknm.schools.sk>
5891 - (djm) Include sys/types.h when including netinet/in.h in configure tests.
5892 Patch from Jun-ichiro itojun Hagino <itojun@iijlab.net>
729bfe59 5893 - (djm) Started merge of Ben Lindstrom's <mouring@pconline.com> NeXT support
38c295d6 5894 - OpenBSD CVS updates:
5895 - deraadt@cvs.openbsd.org 2000/06/17 09:58:46
5896 [channels.c]
5897 everyone says "nix it" (remove protocol 2 debugging message)
5898 - markus@cvs.openbsd.org 2000/06/17 13:24:34
5899 [sshconnect.c]
5900 allow extended server banners
5901 - markus@cvs.openbsd.org 2000/06/17 14:30:10
5902 [sshconnect.c]
5903 missing atomicio, typo
5904 - jakob@cvs.openbsd.org 2000/06/17 16:52:34
5905 [servconf.c servconf.h session.c sshd.8 sshd_config]
5906 add support for ssh v2 subsystems. ok markus@.
5907 - deraadt@cvs.openbsd.org 2000/06/17 18:57:48
5908 [readconf.c servconf.c]
5909 include = in WHITESPACE; markus ok
5910 - markus@cvs.openbsd.org 2000/06/17 19:09:10
5911 [auth2.c]
5912 implement bug compatibility with ssh-2.0.13 pubkey, server side
5913 - markus@cvs.openbsd.org 2000/06/17 21:00:28
5914 [compat.c]
5915 initial support for ssh.com's 2.2.0
5916 - markus@cvs.openbsd.org 2000/06/17 21:16:09
5917 [scp.c]
5918 typo
5919 - markus@cvs.openbsd.org 2000/06/17 22:05:02
5920 [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
5921 split auth-rsa option parsing into auth-options
5922 add options support to authorized_keys2
5923 - markus@cvs.openbsd.org 2000/06/17 22:42:54
5924 [session.c]
5925 typo
cbd7492e 5926
509b1f88 592720000613
5928 - (djm) Fixes from Andrew McGill <andrewm@datrix.co.za>:
5929 - Platform define for SCO 3.x which breaks on /dev/ptmx
5930 - Detect and try to fix missing MAXPATHLEN
a4d05724 5931 - (djm) Fix short copy in loginrec.c (based on patch from Phill Camp
5932 <P.S.S.Camp@ukc.ac.uk>
509b1f88 5933
09564242 593420000612
5935 - (djm) Glob manpages in RPM spec files to catch compressed files
5936 - (djm) Full license in auth-pam.c
08ae384f 5937 - (djm) Configure fixes from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
383207f7 5938 - (andre) AIX, lastlog, configure fixes from Tom Bertelson <tbert@abac.com>:
5939 - Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is
5940 def'd
5941 - Set AIX to use preformatted manpages
61e96248 5942
74b224a0 594320000610
5944 - (djm) Minor doc tweaks
217ab55e 5945 - (djm) Fix for configure on bash2 from Jim Knoble <jmknoble@jmknoble.cx>
74b224a0 5946
32c80420 594720000609
5948 - (djm) Patch from Kenji Miyake <kenji@miyake.org> to disable utmp usage
5949 (in favour of utmpx) on Solaris 8
5950
fa649821 595120000606
48c99b2c 5952 - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through
5953 list of commands (by default). Removed verbose debugging (by default).
bcbf86ec 5954 - (djm) Increased command entropy estimates and default entropy collection
48c99b2c 5955 timeout
f988dce5 5956 - (djm) Remove duplicate headers from loginrec.c
c5fa2eb0 5957 - (djm) Don't add /usr/local/lib to library search path on Irix
bcbf86ec 5958 - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III
fa649821 5959 <tibbs@math.uh.edu>
1e83f2a2 5960 - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg
5961 <zack@wolery.cumb.org>
fa649821 5962 - (djm) OpenBSD CVS updates:
5963 - todd@cvs.openbsd.org
5964 [sshconnect2.c]
5965 teach protocol v2 to count login failures properly and also enable an
5966 explanation of why the password prompt comes up again like v1; this is NOT
5967 crypto
61e96248 5968 - markus@cvs.openbsd.org
fa649821 5969 [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8]
5970 xauth_location support; pr 1234
5971 [readconf.c sshconnect2.c]
5972 typo, unused
5973 [session.c]
5974 allow use_login only for login sessions, otherwise remote commands are
5975 execed with uid==0
5976 [sshd.8]
5977 document UseLogin better
5978 [version.h]
5979 OpenSSH 2.1.1
5980 [auth-rsa.c]
bcbf86ec 5981 fix match_hostname() logic for auth-rsa: deny access if we have a
fa649821 5982 negative match or no match at all
5983 [channels.c hostfile.c match.c]
bcbf86ec 5984 don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via
fa649821 5985 kris@FreeBSD.org
5986
8e7b16f8 598720000606
bcbf86ec 5988 - (djm) Added --with-cflags, --with-ldflags and --with-libs options to
8e7b16f8 5989 configure.
5990
d7c0f3d5 599120000604
5992 - Configure tweaking for new login code on Irix 5.3
2d6c411f 5993 - (andre) login code changes based on djm feedback
d7c0f3d5 5994
2d6c411f 599520000603
5996 - (andre) New login code
5997 - Remove bsd-login.[ch] and all the OpenBSD-derived code in login.c
5998 - Add loginrec.[ch], logintest.c and autoconf code
61e96248 5999
5daf7064 600020000531
6001 - Cleanup of auth.c, login.c and fake-*
6002 - Cleanup of auth-pam.c, save and print "account expired" error messages
e5662474 6003 - Fix EGD read bug by IWAMURO Motonori <iwa@mmp.fujitsu.co.jp>
69134b9b 6004 - Rewrote bsd-login to use proper utmp API if available. Major cleanup
6005 of fallback DIY code.
5daf7064 6006
b9f446d1 600720000530
6008 - Define atexit for old Solaris
b02ebca1 6009 - Fix buffer overrun in login.c for systems which use syslen in utmpx.
6010 patch from YOSHIFUJI Hideaki <yoshfuji@cerberus.nemoto.ecei.tohoku.ac.jp>
71276795 6011 - OpenBSD CVS updates:
6012 - markus@cvs.openbsd.org
6013 [session.c]
6014 make x11-fwd work w/ localhost (xauth add host/unix:11)
6015 [cipher.c compat.c readconf.c servconf.c]
6016 check strtok() != NULL; ok niels@
6017 [key.c]
6018 fix key_read() for uuencoded keys w/o '='
6019 [serverloop.c]
6020 group ssh1 vs. ssh2 in serverloop
6021 [kex.c kex.h myproposal.h sshconnect2.c sshd.c]
6022 split kexinit/kexdh, factor out common code
6023 [readconf.c ssh.1 ssh.c]
6024 forwardagent defaults to no, add ssh -A
6025 - theo@cvs.openbsd.org
6026 [session.c]
6027 just some line shortening
60688ef9 6028 - Released 2.1.0p3
b9f446d1 6029
29611d9c 603020000520
6031 - Xauth fix from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
25422c70 6032 - Don't touch utmp if USE_UTMPX defined
a423beaf 6033 - SunOS 4.x support from Todd C. Miller <Todd.Miller@courtesan.com>
fc1e8bf4 6034 - SIGCHLD fix for AIX and HPUX from Tom Bertelson <tbert@abac.com>
bcbf86ec 6035 - HPUX and Configure fixes from Lutz Jaenicke
fc1e8bf4 6036 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
bcbf86ec 6037 - Use mkinstalldirs script to make directories instead of non-portable
fc1e8bf4 6038 "install -d". Suggested by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
a905808d 6039 - Doc cleanup
29611d9c 6040
301e9b01 604120000518
6042 - Include Andre Lucas' fixprogs script. Forgot to "cvs add" it yesterday
6043 - OpenBSD CVS updates:
6044 - markus@cvs.openbsd.org
6045 [sshconnect.c]
6046 copy only ai_addrlen bytes; misiek@pld.org.pl
6047 [auth.c]
bcbf86ec 6048 accept an empty shell in authentication; bug reported by
301e9b01 6049 chris@tinker.ucr.edu
6050 [serverloop.c]
6051 we don't have stderr for interactive terminal sessions (fcntl errors)
6052
ad85db64 605320000517
6054 - Fix from Andre Lucas <andre.lucas@dial.pipex.com>
6055 - Fixes command line printing segfaults (spotter: Bladt Norbert)
6056 - Fixes erroneous printing of debug messages to syslog
6057 - Fixes utmp for MacOS X (spotter: Aristedes Maniatis)
6058 - Gives useful error message if PRNG initialisation fails
6059 - Reduced ssh startup delay
6060 - Measures cumulative command time rather than the time between reads
704b1659 6061 after select()
ad85db64 6062 - 'fixprogs' perl script to eliminate non-working entropy commands, and
704b1659 6063 optionally run 'ent' to measure command entropy
c1ef8333 6064 - Applied Tom Bertelson's <tbert@abac.com> AIX authentication fix
a64009ad 6065 - Avoid WCOREDUMP complation errors for systems that lack it
bcbf86ec 6066 - Avoid SIGCHLD warnings from entropy commands
28c1d5ce 6067 - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <sxw@dcs.ed.ac.uk>
0e73cc53 6068 - OpenBSD CVS update:
bcbf86ec 6069 - markus@cvs.openbsd.org
0e73cc53 6070 [ssh.c]
6071 fix usage()
6072 [ssh2.h]
6073 draft-ietf-secsh-architecture-05.txt
6074 [ssh.1]
6075 document ssh -T -N (ssh2 only)
6076 [channels.c serverloop.c ssh.h sshconnect.c sshd.c aux.c]
6077 enable nonblocking IO for sshd w/ proto 1, too; split out common code
6078 [aux.c]
6079 missing include
c04f75f1 6080 - Several patches from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
6081 - INSTALL typo and URL fix
6082 - Makefile fix
6083 - Solaris fixes
bcbf86ec 6084 - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka
c04f75f1 6085 <ksakai@kso.netwk.ntt-at.co.jp>
afa5ee68 6086 - RSAless operation patch from kevin_oconnor@standardandpoors.com
d45e3d76 6087 - Detect OpenSSL seperatly from RSA
bcbf86ec 6088 - Better test for RSA (more compatible with RSAref). Based on work by
d45e3d76 6089 Ed Eden <ede370@stl.rural.usda.gov>
ad85db64 6090
3d1a1654 609120000513
bcbf86ec 6092 - Fix for non-recognised DSA keys from Arkadiusz Miskiewicz
3d1a1654 6093 <misiek@pld.org.pl>
6094
d02a3a00 609520000511
bcbf86ec 6096 - Fix for prng_seed permissions checking from Lutz Jaenicke
d02a3a00 6097 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3d1a1654 6098 - "make host-key" fix for Irix
d02a3a00 6099
d0c832f3 610020000509
6101 - OpenBSD CVS update
6102 - markus@cvs.openbsd.org
6103 [cipher.h myproposal.h readconf.c readconf.h servconf.c ssh.1 ssh.c]
6104 [ssh.h sshconnect1.c sshconnect2.c sshd.8]
6105 - complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)
6106 - hugh@cvs.openbsd.org
6107 [ssh.1]
6108 - zap typo
6109 [ssh-keygen.1]
6110 - One last nit fix. (markus approved)
6111 [sshd.8]
6112 - some markus certified spelling adjustments
6113 - markus@cvs.openbsd.org
6114 [auth2.c channels.c clientloop.c compat compat.h dsa.c kex.c]
6115 [sshconnect2.c ]
6116 - bug compat w/ ssh-2.0.13 x11, split out bugs
6117 [nchan.c]
6118 - no drain if ibuf_empty, fixes x11fwd problems; tests by fries@
6119 [ssh-keygen.c]
6120 - handle escapes in real and original key format, ok millert@
6121 [version.h]
6122 - OpenSSH-2.1
3dc1102e 6123 - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.a
e93ee87a 6124 - Doc updates
bcbf86ec 6125 - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported
21e5304a 6126 by Andre Lucas <andre.lucas@dial.pipex.com>
d0c832f3 6127
ebdeb9a8 612820000508
6129 - Makefile and RPM spec fixes
6130 - Generate DSA host keys during "make key" or RPM installs
f6cde515 6131 - OpenBSD CVS update
6132 - markus@cvs.openbsd.org
6133 [clientloop.c sshconnect2.c]
6134 - make x11-fwd interop w/ ssh-2.0.13
6135 [README.openssh2]
6136 - interop w/ SecureFX
6137 - Release 2.0.0beta2
ebdeb9a8 6138
bcbf86ec 6139 - Configure caching and cleanup patch from Andre Lucas'
58d100bf 6140 <andre.lucas@dial.pipex.com>
6141
1d1ffb87 614220000507
6143 - Remove references to SSLeay.
6144 - Big OpenBSD CVS update
6145 - markus@cvs.openbsd.org
6146 [clientloop.c]
6147 - typo
6148 [session.c]
6149 - update proctitle on pty alloc/dealloc, e.g. w/ windows client
6150 [session.c]
6151 - update proctitle for proto 1, too
6152 [channels.h nchan.c serverloop.c session.c sshd.c]
6153 - use c-style comments
6154 - deraadt@cvs.openbsd.org
6155 [scp.c]
6156 - more atomicio
bcbf86ec 6157 - markus@cvs.openbsd.org
1d1ffb87 6158 [channels.c]
6159 - set O_NONBLOCK
6160 [ssh.1]
6161 - update AUTHOR
6162 [readconf.c ssh-keygen.c ssh.h]
6163 - default DSA key file ~/.ssh/id_dsa
6164 [clientloop.c]
6165 - typo, rm verbose debug
6166 - deraadt@cvs.openbsd.org
6167 [ssh-keygen.1]
6168 - document DSA use of ssh-keygen
6169 [sshd.8]
6170 - a start at describing what i understand of the DSA side
6171 [ssh-keygen.1]
6172 - document -X and -x
6173 [ssh-keygen.c]
6174 - simplify usage
bcbf86ec 6175 - markus@cvs.openbsd.org
1d1ffb87 6176 [sshd.8]
6177 - there is no rhosts_dsa
6178 [ssh-keygen.1]
6179 - document -y, update -X,-x
6180 [nchan.c]
6181 - fix close for non-open ssh1 channels
6182 [servconf.c servconf.h ssh.h sshd.8 sshd.c ]
6183 - s/DsaKey/HostDSAKey/, document option
6184 [sshconnect2.c]
6185 - respect number_of_password_prompts
6186 [channels.c channels.h servconf.c servconf.h session.c sshd.8]
6187 - GatewayPorts for sshd, ok deraadt@
6188 [ssh-add.1 ssh-agent.1 ssh.1]
6189 - more doc on: DSA, id_dsa, known_hosts2, authorized_keys2
6190 [ssh.1]
6191 - more info on proto 2
6192 [sshd.8]
6193 - sync AUTHOR w/ ssh.1
6194 [key.c key.h sshconnect.c]
6195 - print key type when talking about host keys
6196 [packet.c]
6197 - clear padding in ssh2
6198 [dsa.c key.c radix.c ssh.h sshconnect1.c uuencode.c uuencode.h]
6199 - replace broken uuencode w/ libc b64_ntop
6200 [auth2.c]
6201 - log failure before sending the reply
6202 [key.c radix.c uuencode.c]
6203 - remote trailing comments before calling __b64_pton
6204 [auth2.c readconf.c readconf.h servconf.c servconf.h ssh.1]
6205 [sshconnect2.c sshd.8]
6206 - add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8
6207 - Bring in b64_ntop and b64_pton from OpenBSD libc (bsd-base64.[ch])
6208
1a11e1ae 620920000502
0fbe8c74 6210 - OpenBSD CVS update
6211 [channels.c]
6212 - init all fds, close all fds.
6213 [sshconnect2.c]
6214 - check whether file exists before asking for passphrase
6215 [servconf.c servconf.h sshd.8 sshd.c]
6216 - PidFile, pr 1210
6217 [channels.c]
6218 - EINTR
6219 [channels.c]
6220 - unbreak, ok niels@
6221 [sshd.c]
6222 - unlink pid file, ok niels@
6223 [auth2.c]
6224 - Add missing #ifdefs; ok - markus
bcbf86ec 6225 - Add Andre Lucas' <andre.lucas@dial.pipex.com> patch to read entropy
d3083fbd 6226 gathering commands from a text file
1a11e1ae 6227 - Release 2.0.0beta1
6228
c4bc58eb 622920000501
6230 - OpenBSD CVS update
6231 [packet.c]
6232 - send debug messages in SSH2 format
3189621b 6233 [scp.c]
6234 - fix very rare EAGAIN/EINTR issues; based on work by djm
6235 [packet.c]
6236 - less debug, rm unused
6237 [auth2.c]
6238 - disable kerb,s/key in ssh2
6239 [sshd.8]
6240 - Minor tweaks and typo fixes.
6241 [ssh-keygen.c]
6242 - Put -d into usage and reorder. markus ok.
bcbf86ec 6243 - Include missing headers for OpenSSL tests. Fix from Phil Karn
44fb55e9 6244 <karn@ka9q.ampr.org>
bcbf86ec 6245 - Fixed __progname symbol collisions reported by Andre Lucas
3fd95d9a 6246 <andre.lucas@dial.pipex.com>
0d5f7abc 6247 - Merged bsd-login ttyslot and AIX utmp patch from Gert Doering
6248 <gd@hilb1.medat.de>
8cb940db 6249 - Add some missing ifdefs to auth2.c
8af50c98 6250 - Deprecate perl-tk askpass.
52bcc044 6251 - Irix portability fixes - don't include netinet headers more than once
6252 - Make sure we don't save PRNG seed more than once
c4bc58eb 6253
2b763e31 625420000430
6255 - Merge HP-UX fixes and TCB support from Ged Lodder <lodder@yacc.com.au>
b7a87eea 6256 - Integrate Andre Lucas' <andre.lucas@dial.pipex.com> entropy collection
6257 patch.
6258 - Adds timeout to entropy collection
6259 - Disables slow entropy sources
6260 - Load and save seed file
bcbf86ec 6261 - Changed entropy seed code to user per-user seeds only (server seed is
b7a87eea 6262 saved in root's .ssh directory)
6263 - Use atexit() and fatal cleanups to save seed on exit
0b242b12 6264 - More OpenBSD updates:
6265 [session.c]
6266 - don't call chan_write_failed() if we are not writing
6267 [auth-rsa.c auth1.c authfd.c hostfile.c ssh-agent.c]
6268 - keysize warnings error() -> log()
2b763e31 6269
a306f2dd 627020000429
6271 - Merge big update to OpenSSH-2.0 from OpenBSD CVS
6272 [README.openssh2]
6273 - interop w/ F-secure windows client
6274 - sync documentation
6275 - ssh_host_dsa_key not ssh_dsa_key
6276 [auth-rsa.c]
6277 - missing fclose
6278 [auth.c authfile.c compat.c dsa.c dsa.h hostfile.c key.c key.h radix.c]
6279 [readconf.c readconf.h ssh-add.c ssh-keygen.c ssh.c ssh.h sshconnect.c]
6280 [sshd.c uuencode.c uuencode.h authfile.h]
6281 - add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX]
6282 for trading keys with the real and the original SSH, directly from the
6283 people who invented the SSH protocol.
6284 [auth.c auth.h authfile.c sshconnect.c auth1.c auth2.c sshconnect.h]
6285 [sshconnect1.c sshconnect2.c]
6286 - split auth/sshconnect in one file per protocol version
6287 [sshconnect2.c]
6288 - remove debug
6289 [uuencode.c]
6290 - add trailing =
6291 [version.h]
6292 - OpenSSH-2.0
6293 [ssh-keygen.1 ssh-keygen.c]
6294 - add -R flag: exit code indicates if RSA is alive
6295 [sshd.c]
6296 - remove unused
6297 silent if -Q is specified
6298 [ssh.h]
6299 - host key becomes /etc/ssh_host_dsa_key
6300 [readconf.c servconf.c ]
6301 - ssh/sshd default to proto 1 and 2
6302 [uuencode.c]
6303 - remove debug
6304 [auth2.c ssh-keygen.c sshconnect2.c sshd.c]
6305 - xfree DSA blobs
6306 [auth2.c serverloop.c session.c]
6307 - cleanup logging for sshd/2, respect PasswordAuth no
6308 [sshconnect2.c]
6309 - less debug, respect .ssh/config
6310 [README.openssh2 channels.c channels.h]
bcbf86ec 6311 - clientloop.c session.c ssh.c
a306f2dd 6312 - support for x11-fwding, client+server
6313
0ac7199f 631420000421
6315 - Merge fix from OpenBSD CVS
6316 [ssh-agent.c]
6317 - Fix memory leak per connection. Report from Andy Spiegl <Andy@Spiegl.de>
6318 via Debian bug #59926
18ba2aab 6319 - Define __progname in session.c if libc doesn't
6320 - Remove indentation on autoconf #include statements to avoid bug in
bcbf86ec 6321 DEC Tru64 compiler. Report and fix from David Del Piero
18ba2aab 6322 <David.DelPiero@qed.qld.gov.au>
0ac7199f 6323
e1b37056 632420000420
bcbf86ec 6325 - Make fixpaths work with perl4, patch from Andre Lucas
e1b37056 6326 <andre.lucas@dial.pipex.com>
9da5c3c9 6327 - Sync with OpenBSD CVS:
6328 [clientloop.c login.c serverloop.c ssh-agent.c ssh.h sshconnect.c sshd.c]
6329 - pid_t
6330 [session.c]
6331 - remove bogus chan_read_failed. this could cause data
6332 corruption (missing data) at end of a SSH2 session.
4e577b89 6333 - Merge fixes from Debian patch from Phil Hands <phil@hands.com>
6334 - Allow setting of PAM service name through CFLAGS (SSHD_PAM_SERVICE)
6335 - Use vhangup to clean up Linux ttys
6336 - Force posix getopt processing on GNU libc systems
371ecff9 6337 - Debian bug #55910 - remove references to ssl(8) manpages
247f1a89 6338 - Debian bug #58031 - ssh_config lies about default cipher
e1b37056 6339
d6f24e45 634020000419
6341 - OpenBSD CVS updates
6342 [channels.c]
6343 - fix pr 1196, listen_port and port_to_connect interchanged
6344 [scp.c]
bcbf86ec 6345 - after completion, replace the progress bar ETA counter with a final
d6f24e45 6346 elapsed time; my idea, aaron wrote the patch
6347 [ssh_config sshd_config]
6348 - show 'Protocol' as an example, ok markus@
6349 [sshd.c]
6350 - missing xfree()
6351 - Add missing header to bsd-misc.c
6352
35484284 635320000416
6354 - Reduce diff against OpenBSD source
bcbf86ec 6355 - All OpenSSL includes are now unconditionally referenced as
35484284 6356 openssl/foo.h
6357 - Pick up formatting changes
6358 - Other minor changed (typecasts, etc) that I missed
6359
6ae2364d 636020000415
6361 - OpenBSD CVS updates.
6362 [ssh.1 ssh.c]
6363 - ssh -2
6364 [auth.c channels.c clientloop.c packet.c packet.h serverloop.c]
6365 [session.c sshconnect.c]
6366 - check payload for (illegal) extra data
6367 [ALL]
6368 whitespace cleanup
6369
c323ac76 637020000413
6371 - INSTALL doc updates
f54651ce 6372 - Merged OpenBSD updates to include paths.
bcbf86ec 6373
a8be9f80 637420000412
6375 - OpenBSD CVS updates:
6376 - [channels.c]
6377 repair x11-fwd
6378 - [sshconnect.c]
6379 fix passwd prompt for ssh2, less debugging output.
6380 - [clientloop.c compat.c dsa.c kex.c sshd.c]
6381 less debugging output
6382 - [kex.c kex.h sshconnect.c sshd.c]
6383 check for reasonable public DH values
6384 - [README.openssh2 cipher.c cipher.h compat.c compat.h readconf.c]
6385 [readconf.h servconf.c servconf.h ssh.c ssh.h sshconnect.c sshd.c]
6386 add Cipher and Protocol options to ssh/sshd, e.g.:
6387 ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers
6388 arcfour,3des-cbc'
6389 - [sshd.c]
6390 print 1.99 only if server supports both
6391
18e92801 639220000408
6393 - Avoid some compiler warnings in fake-get*.c
6394 - Add IPTOS macros for systems which lack them
9d98aaf6 6395 - Only set define entropy collection macros if they are found
e78a59f5 6396 - More large OpenBSD CVS updates:
6397 - [auth.c auth.h servconf.c servconf.h serverloop.c session.c]
6398 [session.h ssh.h sshd.c README.openssh2]
6399 ssh2 server side, see README.openssh2; enable with 'sshd -2'
6400 - [channels.c]
6401 no adjust after close
6402 - [sshd.c compat.c ]
6403 interop w/ latest ssh.com windows client.
61e96248 6404
8ce64345 640520000406
6406 - OpenBSD CVS update:
6407 - [channels.c]
6408 close efd on eof
6409 - [clientloop.c compat.c ssh.c sshconnect.c myproposal.h]
6410 ssh2 client implementation, interops w/ ssh.com and lsh servers.
6411 - [sshconnect.c]
6412 missing free.
6413 - [authfile.c cipher.c cipher.h packet.c sshconnect.c sshd.c]
6414 remove unused argument, split cipher_mask()
6415 - [clientloop.c]
6416 re-order: group ssh1 vs. ssh2
6417 - Make Redhat spec require openssl >= 0.9.5a
6418
e7627112 641920000404
6420 - Add tests for RAND_add function when searching for OpenSSL
7e7327a1 6421 - OpenBSD CVS update:
6422 - [packet.h packet.c]
6423 ssh2 packet format
6424 - [packet.h packet.c nchan2.ms nchan.h compat.h compat.c]
6425 [channels.h channels.c]
6426 channel layer support for ssh2
6427 - [kex.h kex.c hmac.h hmac.c dsa.c dsa.h]
6428 DSA, keyexchange, algorithm agreement for ssh2
6c081128 6429 - Generate manpages before make install not at the end of make all
6430 - Don't seed the rng quite so often
6431 - Always reseed rng when requested
e7627112 6432
bfc9a610 643320000403
6434 - Wrote entropy collection routines for systems that lack /dev/random
6435 and EGD
837c30b8 6436 - Disable tests and typedefs for 64 bit types. They are currently unused.
bfc9a610 6437
7368a6c8 643820000401
6439 - Big OpenBSD CVS update (mainly beginnings of SSH2 infrastructure)
6440 - [auth.c session.c sshd.c auth.h]
6441 split sshd.c -> auth.c session.c sshd.c plus cleanup and goto-removal
6442 - [bufaux.c bufaux.h]
6443 support ssh2 bignums
6444 - [channels.c channels.h clientloop.c sshd.c nchan.c nchan.h packet.c]
6445 [readconf.c ssh.c ssh.h serverloop.c]
6446 replace big switch() with function tables (prepare for ssh2)
6447 - [ssh2.h]
6448 ssh2 message type codes
6449 - [sshd.8]
6450 reorder Xr to avoid cutting
6451 - [serverloop.c]
6452 close(fdin) if fdin != fdout, shutdown otherwise, ok theo@
6453 - [channels.c]
6454 missing close
6455 allow bigger packets
6456 - [cipher.c cipher.h]
6457 support ssh2 ciphers
6458 - [compress.c]
6459 cleanup, less code
6460 - [dispatch.c dispatch.h]
6461 function tables for different message types
6462 - [log-server.c]
6463 do not log() if debuggin to stderr
6464 rename a cpp symbol, to avoid param.h collision
6465 - [mpaux.c]
6466 KNF
6467 - [nchan.c]
6468 sync w/ channels.c
6469
f5238bee 647020000326
6471 - Better tests for OpenSSL w/ RSAref
bcbf86ec 6472 - Added replacement setenv() function from OpenBSD libc. Suggested by
f5238bee 6473 Ben Lindstrom <mouring@pconline.com>
4fe2af09 6474 - OpenBSD CVS update
6475 - [auth-krb4.c]
6476 -Wall
6477 - [auth-rh-rsa.c auth-rsa.c hostfile.c hostfile.h key.c key.h match.c]
6478 [match.h ssh.c ssh.h sshconnect.c sshd.c]
6479 initial support for DSA keys. ok deraadt@, niels@
6480 - [cipher.c cipher.h]
6481 remove unused cipher_attack_detected code
6482 - [scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
6483 Fix some formatting problems I missed before.
6484 - [ssh.1 sshd.8]
6485 fix spelling errors, From: FreeBSD
6486 - [ssh.c]
6487 switch to raw mode only if he _get_ a pty (not if we _want_ a pty).
f5238bee 6488
0024a081 648920000324
6490 - Released 1.2.3
6491
bd499f9e 649220000317
6493 - Clarified --with-default-path option.
6494 - Added -blibpath handling for AIX to work around stupid runtime linking.
6495 Problem elucidated by gshapiro@SENDMAIL.ORG by way of Jim Knoble
986a22ec 6496 <jmknoble@jmknoble.cx>
474b5fef 6497 - Checks for 64 bit int types. Problem report from Mats Fredholm
6498 <matsf@init.se>
610cd5c6 6499 - OpenBSD CVS updates:
bcbf86ec 6500 - [atomicio.c auth-krb4.c bufaux.c channels.c compress.c fingerprint.c]
610cd5c6 6501 [packet.h radix.c rsa.c scp.c ssh-agent.c ssh-keygen.c sshconnect.c]
6502 [sshd.c]
6503 pedantic: signed vs. unsigned, void*-arithm, etc
6504 - [ssh.1 sshd.8]
6505 Various cleanups and standardizations.
bcbf86ec 6506 - Runtime error fix for HPUX from Otmar Stahl
be48d23c 6507 <O.Stahl@lsw.uni-heidelberg.de>
bd499f9e 6508
4696775a 650920000316
bcbf86ec 6510 - Fixed configure not passing LDFLAGS to Solaris. Report from David G.
4696775a 6511 Hesprich <dghespri@sprintparanet.com>
d423d822 6512 - Propogate LD through to Makefile
b7a9ce47 6513 - Doc cleanups
2ba2a610 6514 - Added blurb about "scp: command not found" errors to UPGRADING
4696775a 6515
cb0b7ea4 651620000315
6517 - Fix broken CFLAGS handling during search for OpenSSL. Fixes va_list
6518 problems with gcc/Solaris.
bcbf86ec 6519 - Don't free argument to putenv() after use (in setenv() replacement).
db55a3ea 6520 Report from Seigo Tanimura <tanimura@r.dl.itc.u-tokyo.ac.jp>
bcbf86ec 6521 - Created contrib/ subdirectory. Included helpers from Phil Hands'
13652e52 6522 Debian package, README file and chroot patch from Ricardo Cerqueira
6523 <rmcc@clix.pt>
bcbf86ec 6524 - Moved gnome-ssh-askpass.c to contrib directory and removed config
13652e52 6525 option.
6526 - Slight cleanup to doc files
b14b2ae7 6527 - Configure fix from Bratislav ILICH <bilic@zepter.ru>
cb0b7ea4 6528
a8ed9fd9 652920000314
bcbf86ec 6530 - Include macro for IN6_IS_ADDR_V4MAPPED. Report from
a8ed9fd9 6531 peter@frontierflying.com
84afc958 6532 - Include /usr/local/include and /usr/local/lib for systems that don't
6533 do it themselves
6534 - -R/usr/local/lib for Solaris
6535 - Fix RSAref detection
6536 - Fix IN6_IS_ADDR_V4MAPPED macro
a8ed9fd9 6537
bcf36c78 653820000311
6539 - Detect RSAref
43e48848 6540 - OpenBSD CVS change
6541 [sshd.c]
6542 - disallow guessing of root password
867dbf40 6543 - More configure fixes
80faa19f 6544 - IPv6 workarounds from Hideaki YOSHIFUJI <yoshfuji@ecei.tohoku.ac.jp>
bcf36c78 6545
c8d54615 654620000309
6547 - OpenBSD CVS updates to v1.2.3
704b1659 6548 [ssh.h atomicio.c]
6549 - int atomicio -> ssize_t (for alpha). ok deraadt@
6550 [auth-rsa.c]
6551 - delay MD5 computation until client sends response, free() early, cleanup.
6552 [cipher.c]
6553 - void* -> unsigned char*, ok niels@
6554 [hostfile.c]
6555 - remove unused variable 'len'. fix comments.
6556 - remove unused variable
6557 [log-client.c log-server.c]
6558 - rename a cpp symbol, to avoid param.h collision
6559 [packet.c]
6560 - missing xfree()
6561 - getsockname() requires initialized tolen; andy@guildsoftware.com
6562 - use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
6563 from Holger.Trapp@Informatik.TU-Chemnitz.DE
6564 [pty.c pty.h]
bcbf86ec 6565 - register cleanup for pty earlier. move code for pty-owner handling to
c8d54615 6566 pty.c ok provos@, dugsong@
704b1659 6567 [readconf.c]
6568 - turn off x11-fwd for the client, too.
6569 [rsa.c]
6570 - PKCS#1 padding
6571 [scp.c]
6572 - allow '.' in usernames; from jedgar@fxp.org
6573 [servconf.c]
6574 - typo: ignore_user_known_hosts int->flag; naddy@mips.rhein-neckar.de
6575 - sync with sshd_config
6576 [ssh-keygen.c]
6577 - enable ssh-keygen -l -f ~/.ssh/known_hosts, ok deraadt@
6578 [ssh.1]
6579 - Change invalid 'CHAT' loglevel to 'VERBOSE'
6580 [ssh.c]
6581 - suppress AAAA query host when '-4' is used; from shin@nd.net.fujitsu.co.jp
6582 - turn off x11-fwd for the client, too.
6583 [sshconnect.c]
6584 - missing xfree()
6585 - retry rresvport_af(), too. from sumikawa@ebina.hitachi.co.jp.
6586 - read error vs. "Connection closed by remote host"
6587 [sshd.8]
6588 - ie. -> i.e.,
6589 - do not link to a commercial page..
6590 - sync with sshd_config
6591 [sshd.c]
6592 - no need for poll.h; from bright@wintelcom.net
6593 - log with level log() not fatal() if peer behaves badly.
6594 - don't panic if client behaves strange. ok deraadt@
6595 - make no-port-forwarding for RSA keys deny both -L and -R style fwding
6596 - delay close() of pty until the pty has been chowned back to root
6597 - oops, fix comment, too.
6598 - missing xfree()
6599 - move XAUTHORITY to subdir. ok dugsong@. fixes debian bug #57907, too.
6600 (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907)
bcbf86ec 6601 - register cleanup for pty earlier. move code for pty-owner handling to
704b1659 6602 pty.c ok provos@, dugsong@
6603 - create x11 cookie file
6604 - fix pr 1113, fclose() -> pclose(), todo: remote popen()
6605 - version 1.2.3
c8d54615 6606 - Cleaned up
bcbf86ec 6607 - Removed warning workaround for Linux and devpts filesystems (no longer
d8223847 6608 required after OpenBSD updates)
c8d54615 6609
07055445 661020000308
6611 - Configure fix from Hiroshi Takekawa <takekawa@sr3.t.u-tokyo.ac.jp>
6612
661320000307
6614 - Released 1.2.2p1
6615
9c8c3fc6 661620000305
6617 - Fix DEC compile fix
54096dcc 6618 - Explicitly seed OpenSSL's PRNG before checking rsa_alive()
aa6bd60a 6619 - Check for getpagesize in libucb.a if not found in libc. Fix for old
6620 Solaris from Andre Lucas <andre.lucas@dial.pipex.com>
bcbf86ec 6621 - Check for libwrap if --with-tcp-wrappers option specified. Suggestion
9fc7867e 6622 Mate Wierdl <mw@moni.msci.memphis.edu>
9c8c3fc6 6623
6bf4d066 662420000303
6625 - Added "make host-key" target, Suggestion from Dominik Brettnacher
6626 <domi@saargate.de>
bcbf86ec 6627 - Don't permanently fail on bind() if getaddrinfo has more choices left for
16218745 6628 us. Needed to work around messy IPv6 on Linux. Patch from Arkadiusz
6629 Miskiewicz <misiek@pld.org.pl>
22fa590f 6630 - DEC Unix compile fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
6631 - Manpage fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
6bf4d066 6632
a0391976 663320000302
6634 - Big cleanup of autoconf code
6635 - Rearranged to be a little more logical
6636 - Added -R option for Solaris
6637 - Rewrote OpenSSL detection code. Now uses AC_TRY_RUN with a test program
6638 to detect library and header location _and_ ensure library has proper
6639 RSA support built in (this is a problem with OpenSSL 0.9.5).
817175bc 6640 - Applied pty cleanup patch from markus.friedl@informatik.uni-erlangen.de
0a1718dc 6641 - Avoid warning message with Unix98 ptys
bcbf86ec 6642 - Warning was valid - possible race condition on PTYs. Avoided using
3276571c 6643 platform-specific code.
6644 - Document some common problems
bcbf86ec 6645 - Allow root access to any key. Patch from
81eef326 6646 markus.friedl@informatik.uni-erlangen.de
a0391976 6647
f55afe71 664820000207
6649 - Removed SOCKS code. Will support through a ProxyCommand.
6650
d07d1c58 665120000203
6652 - Fixed SEGVs in authloop, fix from vbzoli@hbrt.hu
d581b7ae 6653 - Add --with-ssl-dir option
d07d1c58 6654
9d5f374b 665520000202
bcbf86ec 6656 - Fix lastlog code for directory based lastlogs. Fix from Josh Durham
9d5f374b 6657 <jmd@aoe.vt.edu>
6b1f3fdb 6658 - Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
bcbf86ec 6659 - Added URLs to Japanese translations of documents by HARUYAMA Seigo
6b1f3fdb 6660 <haruyama@nt.phys.s.u-tokyo.ac.jp>
9d5f374b 6661
bc8c2601 666220000201
6663 - Use socket pairs by default (instead of pipes). Prevents race condition
6664 on several (buggy) OSs. Report and fix from tridge@linuxcare.com
6665
69c76614 666620000127
6667 - Seed OpenSSL's random number generator before generating RSA keypairs
6668 - Split random collector into seperate file
aaf2abd7 6669 - Compile fix from Andre Lucas <andre.lucas@dial.pipex.com>
69c76614 6670
f9507c24 667120000126
6672 - Released 1.2.2 stable
6673
bcbf86ec 6674 - NeXT keeps it lastlog in /usr/adm. Report from
f9507c24 6675 mouring@newton.pconline.com
bcbf86ec 6676 - Added note in UPGRADING re interop with commercial SSH using idea.
986a22ec 6677 Report from Jim Knoble <jmknoble@jmknoble.cx>
587120ad 6678 - Fix linking order for Kerberos/AFS. Fix from Holget Trapp
6679 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
f9507c24 6680
bfae20ad 668120000125
bcbf86ec 6682 - Fix NULL pointer dereference in login.c. Fix from Andre Lucas
bfae20ad 6683 <andre.lucas@dial.pipex.com>
07b0cb78 6684 - Reorder PAM initialisation so it does not mess up lastlog. Reported
6685 by Andre Lucas <andre.lucas@dial.pipex.com>
bcbf86ec 6686 - Use preformatted manpages on SCO, report from Gary E. Miller
9755cbdb 6687 <gem@rellim.com>
6688 - New URL for x11-ssh-askpass.
bcbf86ec 6689 - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble
986a22ec 6690 <jmknoble@jmknoble.cx>
bcbf86ec 6691 - Added 'DESTDIR' option to Makefile to ease package building. Patch from
986a22ec 6692 Jim Knoble <jmknoble@jmknoble.cx>
ff8ecdb8 6693 - Updated RPM spec files to use DESTDIR
bfae20ad 6694
bb58aa4b 669520000124
6696 - Pick up version 1.2.2 from OpenBSD CVS (no changes, just version number
6697 increment)
6698
d45317d8 669920000123
6700 - OpenBSD CVS:
6701 - [packet.c]
6702 getsockname() requires initialized tolen; andy@guildsoftware.com
bcbf86ec 6703 - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin
4c40f834 6704 <drankin@bohemians.lexington.ky.us>
12aa90af 6705 - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com>
d45317d8 6706
e844f761 670720000122
6708 - Fix compilation of bsd-snprintf.c on Solaris, fix from Ben Taylor
6709 <bent@clark.net>
c54a6257 6710 - Merge preformatted manpage patch from Andre Lucas
6711 <andre.lucas@dial.pipex.com>
8eb34e02 6712 - Make IPv4 use the default in RPM packages
6713 - Irix uses preformatted manpages
1e64903d 6714 - Missing htons() in bsd-bindresvport.c, fix from Holger Trapp
6715 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
9bc5ddfe 6716 - OpenBSD CVS updates:
6717 - [packet.c]
6718 use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
6719 from Holger.Trapp@Informatik.TU-Chemnitz.DE
6720 - [sshd.c]
6721 log with level log() not fatal() if peer behaves badly.
6722 - [readpass.c]
bcbf86ec 6723 instead of blocking SIGINT, catch it ourselves, so that we can clean
6724 the tty modes up and kill ourselves -- instead of our process group
61e96248 6725 leader (scp, cvs, ...) going away and leaving us in noecho mode.
9bc5ddfe 6726 people with cbreak shells never even noticed..
399d9d44 6727 - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
6728 ie. -> i.e.,
e844f761 6729
4c8ef3fb 673020000120
6731 - Don't use getaddrinfo on AIX
7b2ea3a1 6732 - Update to latest OpenBSD CVS:
6733 - [auth-rsa.c]
6734 - fix user/1056, sshd keeps restrictions; dbt@meat.net
6735 - [sshconnect.c]
6736 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
6737 - destroy keys earlier
bcbf86ec 6738 - split key exchange (kex) and user authentication (user-auth),
d468fc76 6739 ok: provos@
7b2ea3a1 6740 - [sshd.c]
6741 - no need for poll.h; from bright@wintelcom.net
6742 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
bcbf86ec 6743 - split key exchange (kex) and user authentication (user-auth),
d468fc76 6744 ok: provos@
f3bba493 6745 - Big manpage and config file cleanup from Andre Lucas
6746 <andre.lucas@dial.pipex.com>
5f4fdfae 6747 - Re-added latest (unmodified) OpenBSD manpages
47f9a56a 6748 - Doc updates
d468fc76 6749 - NetBSD patch from David Rankin <drankin@bohemians.lexington.ky.us> and
6750 Christos Zoulas <christos@netbsd.org>
4c8ef3fb 6751
082bbfb3 675220000119
20af321f 6753 - SCO compile fixes from Gary E. Miller <gem@rellim.com>
082bbfb3 6754 - Compile fix from Darren_Hall@progressive.com
59e76f33 6755 - Linux/glibc-2.1.2 takes a *long* time to look up names for AF_UNSPEC
6756 addresses using getaddrinfo(). Added a configure switch to make the
6757 default lookup mode AF_INET
082bbfb3 6758
a63a7f37 675920000118
6760 - Fixed --with-pid-dir option
51a6baf8 6761 - Makefile fix from Gary E. Miller <gem@rellim.com>
61e96248 6762 - Compile fix for HPUX and Solaris from Andre Lucas
976f7e19 6763 <andre.lucas@dial.pipex.com>
a63a7f37 6764
f914c7fb 676520000117
6766 - Clean up bsd-bindresvport.c. Use arc4random() for picking initial
6767 port, ignore EINVAL errors (Linux) when searching for free port.
bcbf86ec 6768 - Revert __snprintf -> snprintf aliasing. Apparently Solaris
de93b046 6769 __snprintf isn't. Report from Theo de Raadt <theo@cvs.openbsd.org>
9b363e1c 6770 - Document location of Redhat PAM file in INSTALL.
bcbf86ec 6771 - Fixed X11 forwarding bug on Linux. libc advertises AF_INET6
6772 INADDR_ANY_INIT addresses via getaddrinfo, but may not be able to
f4a7cf29 6773 deliver (no IPv6 kernel support)
80a44451 6774 - Released 1.2.1pre27
f914c7fb 6775
f4a7cf29 6776 - Fix rresvport_af failure errors (logic error in bsd-bindresvport.c)
bcbf86ec 6777 - Fix --with-ipaddr-display option test. Fix from Jarno Huuskonen
cf8ad170 6778 <jhuuskon@hytti.uku.fi>
bcbf86ec 6779 - Fix hang on logout if processes are still using the pty. Needs
691a8a9f 6780 further testing.
5957fd29 6781 - Patch from Christos Zoulas <christos@zoulas.com>
6782 - Try $prefix first when looking for OpenSSL.
6783 - Include sys/types.h when including sys/socket.h in test programs
bcbf86ec 6784 - Substitute PID directory in sshd.8. Suggestion from Andrew
19d9ac2a 6785 Stribblehill <a.d.stribblehill@durham.ac.uk>
f4a7cf29 6786
47e45e44 678720000116
6788 - Renamed --with-xauth-path to --with-xauth
6789 - Added --with-pid-dir option
6790 - Released 1.2.1pre26
6791
a82ef8ae 6792 - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
bcbf86ec 6793 - Fixed broken bugfix for /dev/ptmx on Linux systems which lack
66be05a1 6794 openpty(). Report from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
a82ef8ae 6795
5cdfe03f 679620000115
6797 - Add --with-xauth-path configure directive and explicit test for
bcbf86ec 6798 /usr/openwin/bin/xauth for Solaris systems. Report from Anders
5cdfe03f 6799 Nordby <anders@fix.no>
bcbf86ec 6800 - Fix incorrect detection of /dev/ptmx on Linux systems that lack
5cdfe03f 6801 openpty. Report from John Seifarth <john@waw.be>
6802 - Look for intXX_t and u_intXX_t in sys/bitypes.h if they are not in
bcbf86ec 6803 sys/types.h. Fixes problems on SCO, report from Gary E. Miller
5cdfe03f 6804 <gem@rellim.com>
6805 - Use __snprintf and __vnsprintf if they are found where snprintf and
6806 vnsprintf are lacking. Suggested by Ben Taylor <bent@shell.clark.net>
6807 and others.
6808
48e671d5 680920000114
6810 - Merged OpenBSD IPv6 patch:
6811 - [sshd.c sshd.8 sshconnect.c ssh.h ssh.c servconf.h servconf.c scp.1]
6812 [scp.c packet.h packet.c login.c log.c canohost.c channels.c]
6813 [hostfile.c sshd_config]
6814 ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new
bcbf86ec 6815 features: sshd allows multiple ListenAddress and Port options. note
6816 that libwrap is not IPv6-ready. (based on patches from
48e671d5 6817 fujiwara@rcac.tdi.co.jp)
6818 - [ssh.c canohost.c]
bcbf86ec 6819 more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo,
48e671d5 6820 from itojun@
6821 - [channels.c]
6822 listen on _all_ interfaces for X11-Fwd (hints.ai_flags = AI_PASSIVE)
6823 - [packet.h]
6824 allow auth-kerberos for IPv4 only
6825 - [scp.1 sshd.8 servconf.h scp.c]
6826 document -4, -6, and 'ssh -L 2022/::1/22'
6827 - [ssh.c]
bcbf86ec 6828 'ssh @host' is illegal (null user name), from
48e671d5 6829 karsten@gedankenpolizei.de
6830 - [sshconnect.c]
6831 better error message
6832 - [sshd.c]
6833 allow auth-kerberos for IPv4 only
6834 - Big IPv6 merge:
6835 - Cleanup overrun in sockaddr copying on RHL 6.1
6836 - Replacements for getaddrinfo, getnameinfo, etc based on versions
6837 from patch from KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>
6838 - Replacement for missing structures on systems that lack IPv6
6839 - record_login needed to know about AF_INET6 addresses
6840 - Borrowed more code from OpenBSD: rresvport_af and requisites
6841
2598df62 684220000110
6843 - Fixes to auth-skey to enable it to use the standard OpenSSL libraries
6844
b8a0310d 684520000107
6846 - New config.sub and config.guess to fix problems on SCO. Supplied
6847 by Gary E. Miller <gem@rellim.com>
b6a98a85 6848 - SCO build fix from Gary E. Miller <gem@rellim.com>
2598df62 6849 - Released 1.2.1pre25
b8a0310d 6850
dfb95100 685120000106
6852 - Documentation update & cleanup
6853 - Better KrbIV / AFS detection, based on patch from:
6854 Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
6855
b9795b89 685620000105
bcbf86ec 6857 - Fixed annoying DES corruption problem. libcrypt has been
b9795b89 6858 overriding symbols in libcrypto. Removed libcrypt and crypt.h
6859 altogether (libcrypto includes its own crypt(1) replacement)
6860 - Added platform-specific rules for Irix 6.x. Included warning that
6861 they are untested.
6862
a1ec4d79 686320000103
6864 - Add explicit make rules for files proccessed by fixpaths.
61e96248 6865 - Fix "make install" in RPM spec files. Report from Tenkou N. Hattori
a1ec4d79 6866 <tnh@kondara.org>
bcbf86ec 6867 - Removed "nullok" directive from default PAM configuration files.
6868 Added information on enabling EmptyPasswords on openssh+PAM in
607d73e6 6869 UPGRADING file.
e02735bb 6870 - OpenBSD CVS updates
6871 - [ssh-agent.c]
bcbf86ec 6872 cleanup_exit() for SIGTERM/SIGHUP, too. from fgsch@ and
e02735bb 6873 dgaudet@arctic.org
6874 - [sshconnect.c]
6875 compare correct version for 1.3 compat mode
a1ec4d79 6876
93c7f644 687720000102
6878 - Prevent multiple inclusion of config.h and defines.h. Suggested
6879 by Andre Lucas <andre.lucas@dial.pipex.com>
6880 - Properly clean up on exit of ssh-agent. Patch from Dean Gaudet
6881 <dgaudet@arctic.org>
6882
76b8607f 688319991231
bcbf86ec 6884 - Fix password support on systems with a mixture of shadowed and
6885 non-shadowed passwords (e.g. NIS). Report and fix from
76b8607f 6886 HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
bcbf86ec 6887 - Fix broken autoconf typedef detection. Report from Marc G.
723221b5 6888 Fournier <marc.fournier@acadiau.ca>
b92964b7 6889 - Fix occasional crash on LinuxPPC. Patch from Franz Sirl
6890 <Franz.Sirl-kernel@lauterbach.com>
bcbf86ec 6891 - Prevent typedefs from being compiled more than once. Report from
a6ddc88b 6892 Marc G. Fournier <marc.fournier@acadiau.ca>
4811cc0b 6893 - Fill in ut_utaddr utmp field. Report from Benjamin Charron
6894 <iretd@bigfoot.com>
bcbf86ec 6895 - Really fix broken default path. Fix from Jim Knoble
986a22ec 6896 <jmknoble@jmknoble.cx>
ae3a3d31 6897 - Remove test for quad_t. No longer needed.
76a8e733 6898 - Released 1.2.1pre24
6899
6900 - Added support for directory-based lastlogs
6901 - Really fix typedefs, patch from Ben Taylor <bent@clark.net>
76b8607f 6902
13f825f4 690319991230
6904 - OpenBSD CVS updates:
6905 - [auth-passwd.c]
6906 check for NULL 1st
bcbf86ec 6907 - Removed most of the pam code into its own file auth-pam.[ch]. This
a5c9cd31 6908 cleaned up sshd.c up significantly.
bcbf86ec 6909 - PAM authentication was incorrectly interpreting
76b8607f 6910 "PermitRootLogin without-password". Report from Matthias Andree
6911 <ma@dt.e-technik.uni-dortmund.de
a5c9cd31 6912 - Several other cleanups
0bc5b6fb 6913 - Merged Dante SOCKS support patch from David Rankin
6914 <drankin@bohemians.lexington.ky.us>
6915 - Updated documentation with ./configure options
76b8607f 6916 - Released 1.2.1pre23
13f825f4 6917
c73a0cb5 691819991229
bcbf86ec 6919 - Applied another NetBSD portability patch from David Rankin
c73a0cb5 6920 <drankin@bohemians.lexington.ky.us>
6921 - Fix --with-default-path option.
bcbf86ec 6922 - Autodetect perl, patch from David Rankin
a0f84251 6923 <drankin@bohemians.lexington.ky.us>
bcbf86ec 6924 - Print whether OpenSSH was compiled with RSARef, patch from
0a2ff95d 6925 Nalin Dahyabhai <nalin@thermo.stat.ncsu.edu>
bcbf86ec 6926 - Calls to pam_setcred, patch from Nalin Dahyabhai
f91bacbd 6927 <nalin@thermo.stat.ncsu.edu>
e3a93db0 6928 - Detect missing size_t and typedef it.
5ab44a92 6929 - Rename helper.[ch] to (more appropriate) bsd-misc.[ch]
6930 - Minor Makefile cleaning
c73a0cb5 6931
b6019d68 693219991228
6933 - Replacement for getpagesize() for systems which lack it
bcbf86ec 6934 - NetBSD login.c compile fix from David Rankin
70e0115b 6935 <drankin@bohemians.lexington.ky.us>
6936 - Fully set ut_tv if present in utmp or utmpx
d94aa2ae 6937 - Portability fixes for Irix 5.3 (now compiles OK!)
6938 - autoconf and other misc cleanups
ea1970a3 6939 - Merged AIX patch from Darren Hall <dhall@virage.org>
6940 - Cleaned up defines.h
fa9a2dd6 6941 - Released 1.2.1pre22
b6019d68 6942
d2dcff5f 694319991227
6944 - Automatically correct paths in manpages and configuration files. Patch
6945 and script from Andre Lucas <andre.lucas@dial.pipex.com>
6946 - Removed credits from README to CREDITS file, updated.
cb807f40 6947 - Added --with-default-path to specify custom path for server
6948 - Removed #ifdef trickery from acconfig.h into defines.h
36a5b38e 6949 - PAM bugfix. PermitEmptyPassword was being ignored.
6950 - Fixed PAM config files to allow empty passwords if server does.
6951 - Explained spurious PAM auth warning workaround in UPGRADING
21feb5fa 6952 - Use last few chars of tty line as ut_id
5a7794be 6953 - New SuSE RPM spec file from Chris Saia <csaia@wtower.com>
00e6dd70 6954 - OpenBSD CVS updates:
6955 - [packet.h auth-rhosts.c]
6956 check format string for packet_disconnect and packet_send_debug, too
6957 - [channels.c]
6958 use packet_get_maxsize for channels. consistence.
d2dcff5f 6959
f74efc8d 696019991226
6961 - Enabled utmpx support by default for Solaris
6962 - Cleanup sshd.c PAM a little more
986a22ec 6963 - Revised RPM package to include Jim Knoble's <jmknoble@jmknoble.cx>
bc7ea646 6964 X11 ssh-askpass program.
20c43d8c 6965 - Disable logging of PAM success and failures, PAM is verbose enough.
bcbf86ec 6966 Unfortunatly there is currently no way to disable auth failure
6967 messages. Mention this in UPGRADING file and sent message to PAM
20c43d8c 6968 developers
83b7f649 6969 - OpenBSD CVS update:
6970 - [ssh-keygen.1 ssh.1]
bcbf86ec 6971 remove ref to .ssh/random_seed, mention .ssh/environment in
83b7f649 6972 .Sh FILES, too
72251cb6 6973 - Released 1.2.1pre21
bcbf86ec 6974 - Fixed implicit '.' in default path, report from Jim Knoble
986a22ec 6975 <jmknoble@jmknoble.cx>
6976 - Redhat RPM spec fixes from Jim Knoble <jmknoble@jmknoble.cx>
f74efc8d 6977
f498ed15 697819991225
6979 - More fixes from Andre Lucas <andre.lucas@dial.pipex.com>
6980 - Cleanup of auth-passwd.c for shadow and MD5 passwords
6981 - Cleanup and bugfix of PAM authentication code
f74efc8d 6982 - Released 1.2.1pre20
6983
6984 - Merged fixes from Ben Taylor <bent@clark.net>
6985 - Fixed configure support for PAM. Reported by Naz <96na@eng.cam.ac.uk>
6986 - Disabled logging of PAM password authentication failures when password
6987 is empty. (e.g start of authentication loop). Reported by Naz
6988 <96na@eng.cam.ac.uk>)
f498ed15 6989
699019991223
bcbf86ec 6991 - Merged later HPUX patch from Andre Lucas
f498ed15 6992 <andre.lucas@dial.pipex.com>
6993 - Above patch included better utmpx support from Ben Taylor
f74efc8d 6994 <bent@clark.net>
f498ed15 6995
eef6f7e9 699619991222
bcbf86ec 6997 - Fix undefined fd_set type in ssh.h from Povl H. Pedersen
eef6f7e9 6998 <pope@netguide.dk>
ae28776a 6999 - Fix login.c breakage on systems which lack ut_host in struct
7000 utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com>
eef6f7e9 7001
a7effaac 700219991221
bcbf86ec 7003 - Integration of large HPUX patch from Andre Lucas
7004 <andre.lucas@dial.pipex.com>. Integrating it had a few other
a7effaac 7005 benefits:
7006 - Ability to disable shadow passwords at configure time
7007 - Ability to disable lastlog support at configure time
7008 - Support for IP address in $DISPLAY
ae2f7af7 7009 - OpenBSD CVS update:
7010 - [sshconnect.c]
7011 say "REMOTE HOST IDENTIFICATION HAS CHANGED"
59dd7a31 7012 - Fix DISABLE_SHADOW support
7013 - Allow MD5 passwords even if shadow passwords are disabled
16034de9 7014 - Release 1.2.1pre19
a7effaac 7015
3f1d9bcd 701619991218
bcbf86ec 7017 - Redhat init script patch from Chun-Chung Chen
3f1d9bcd 7018 <cjj@u.washington.edu>
7e1c2490 7019 - Avoid breakage on systems without IPv6 headers
3f1d9bcd 7020
60d804c8 702119991216
bcbf86ec 7022 - Makefile changes for Solaris from Peter Kocks
60d804c8 7023 <peter.kocks@baygate.com>
89cafde6 7024 - Minor updates to docs
7025 - Merged OpenBSD CVS changes:
7026 - [authfd.c ssh-agent.c]
7027 keysize warnings talk about identity files
7028 - [packet.c]
7029 "Connection closed by x.x.x.x": fatal() -> log()
bcbf86ec 7030 - Correctly handle empty passwords in shadow file. Patch from:
c9d323f0 7031 "Chris, the Young One" <cky@pobox.com>
7032 - Released 1.2.1pre18
60d804c8 7033
7dc6fc6d 703419991215
7035 - Integrated patchs from Juergen Keil <jk@tools.de>
7036 - Avoid void* pointer arithmatic
7037 - Use LDFLAGS correctly
68227e6d 7038 - Fix SIGIO error in scp
7039 - Simplify status line printing in scp
61e96248 7040 - Added better test for inline functions compiler support from
906a2515 7041 Darren_Hall@progressive.com
7dc6fc6d 7042
95f1eccc 704319991214
7044 - OpenBSD CVS Changes
7045 - [canohost.c]
bcbf86ec 7046 fix get_remote_port() and friends for sshd -i;
95f1eccc 7047 Holger.Trapp@Informatik.TU-Chemnitz.DE
7048 - [mpaux.c]
7049 make code simpler. no need for memcpy. niels@ ok
7050 - [pty.c]
7051 namebuflen not sizeof namebuflen; bnd@ep-ag.com via djm@mindrot.org
7052 fix proto; markus
7053 - [ssh.1]
7054 typo; mark.baushke@solipsa.com
7055 - [channels.c ssh.c ssh.h sshd.c]
7056 type conflict for 'extern Type *options' in channels.c; dot@dotat.at
7057 - [sshconnect.c]
7058 move checking of hostkey into own function.
7059 - [version.h]
7060 OpenSSH-1.2.1
884bcb37 7061 - Clean up broken includes in pty.c
7303768f 7062 - Some older systems don't have poll.h, they use sys/poll.h instead
7063 - Doc updates
95f1eccc 7064
847e8865 706519991211
bcbf86ec 7066 - Fix compilation on systems with AFS. Reported by
847e8865 7067 aloomis@glue.umd.edu
bcbf86ec 7068 - Fix installation on Solaris. Reported by
847e8865 7069 Gordon Rowell <gordonr@gormand.com.au>
7070 - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com,
7071 patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
7072 - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com>
7073 - Compile fix from David Agraz <dagraz@jahoopa.com>
7074 - Avoid compiler warning in bsd-snprintf.c
bcbf86ec 7075 - Added pam_limits.so to default PAM config. Suggested by
986a22ec 7076 Jim Knoble <jmknoble@jmknoble.cx>
847e8865 7077
8946db53 707819991209
7079 - Import of patch from Ben Taylor <bent@clark.net>:
7080 - Improved PAM support
7081 - "uninstall" rule for Makefile
7082 - utmpx support
7083 - Should fix PAM problems on Solaris
2d86a6cc 7084 - OpenBSD CVS updates:
7085 - [readpass.c]
7086 avoid stdio; based on work by markus, millert, and I
7087 - [sshd.c]
7088 make sure the client selects a supported cipher
7089 - [sshd.c]
bcbf86ec 7090 fix sighup handling. accept would just restart and daemon handled
7091 sighup only after the next connection was accepted. use poll on
2d86a6cc 7092 listen sock now.
7093 - [sshd.c]
7094 make that a fatal
87e91331 7095 - Applied patch from David Rankin <drankin@bohemians.lexington.ky.us>
7096 to fix libwrap support on NetBSD
5001b9e4 7097 - Released 1.2pre17
8946db53 7098
6d8c4ea4 709919991208
bcbf86ec 7100 - Compile fix for Solaris with /dev/ptmx from
6d8c4ea4 7101 David Agraz <dagraz@jahoopa.com>
7102
4285816a 710319991207
986a22ec 7104 - sshd Redhat init script patch from Jim Knoble <jmknoble@jmknoble.cx>
4285816a 7105 fixes compatability with 4.x and 5.x
db28aeb5 7106 - Fixed default SSH_ASKPASS
bcbf86ec 7107 - Fix PAM account and session being called multiple times. Problem
d465f2ca 7108 reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>
a408af76 7109 - Merged more OpenBSD changes:
7110 - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c]
bcbf86ec 7111 move atomicio into it's own file. wrap all socket write()s which
a408af76 7112 were doing write(sock, buf, len) != len, with atomicio() calls.
7113 - [auth-skey.c]
7114 fd leak
7115 - [authfile.c]
7116 properly name fd variable
7117 - [channels.c]
7118 display great hatred towards strcpy
7119 - [pty.c pty.h sshd.c]
7120 use openpty() if it exists (it does on BSD4_4)
7121 - [tildexpand.c]
7122 check for ~ expansion past MAXPATHLEN
7123 - Modified helper.c to use new atomicio function.
7124 - Reformat Makefile a little
7125 - Moved RC4 routines from rc4.[ch] into helper.c
7126 - Added autoconf code to detect /dev/ptmx (Solaris) and /dev/ptc (AIX)
9983a8ca 7127 - Updated SuSE spec from Chris Saia <csaia@wtower.com>
7128 - Tweaked Redhat spec
9158d92f 7129 - Clean up bad imports of a few files (forgot -kb)
7130 - Released 1.2pre16
4285816a 7131
9c7b6dfd 713219991204
7133 - Small cleanup of PAM code in sshd.c
57112b5a 7134 - Merged OpenBSD CVS changes:
7135 - [auth-krb4.c auth-passwd.c auth-skey.c ssh.h]
7136 move skey-auth from auth-passwd.c to auth-skey.c, same for krb4
7137 - [auth-rsa.c]
7138 warn only about mismatch if key is _used_
7139 warn about keysize-mismatch with log() not error()
7140 channels.c readconf.c readconf.h ssh.c ssh.h sshconnect.c
7141 ports are u_short
7142 - [hostfile.c]
7143 indent, shorter warning
7144 - [nchan.c]
7145 use error() for internal errors
7146 - [packet.c]
7147 set loglevel for SSH_MSG_DISCONNECT to log(), not fatal()
7148 serverloop.c
7149 indent
7150 - [ssh-add.1 ssh-add.c ssh.h]
7151 document $SSH_ASKPASS, reasonable default
7152 - [ssh.1]
7153 CheckHostIP is not available for connects via proxy command
7154 - [sshconnect.c]
7155 typo
7156 easier to read client code for passwd and skey auth
7157 turn of checkhostip for proxy connects, since we don't know the remote ip
9c7b6dfd 7158
dad3b556 715919991126
7160 - Add definition for __P()
7161 - Added [v]snprintf() replacement for systems that lack it
7162
0ce43ae4 716319991125
7164 - More reformatting merged from OpenBSD CVS
7165 - Merged OpenBSD CVS changes:
7166 - [channels.c]
7167 fix packet_integrity_check() for !have_hostname_in_open.
7168 report from mrwizard@psu.edu via djm@ibs.com.au
7169 - [channels.c]
7170 set SO_REUSEADDR and SO_LINGER for forwarded ports.
7171 chip@valinux.com via damien@ibs.com.au
7172 - [nchan.c]
7173 it's not an error() if shutdown_write failes in nchan.
7174 - [readconf.c]
7175 remove dead #ifdef-0-code
7176 - [readconf.c servconf.c]
7177 strcasecmp instead of tolower
7178 - [scp.c]
7179 progress meter overflow fix from damien@ibs.com.au
7180 - [ssh-add.1 ssh-add.c]
7181 SSH_ASKPASS support
7182 - [ssh.1 ssh.c]
7183 postpone fork_after_authentication until command execution,
7184 request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
7185 plus: use daemon() for backgrounding
cf8dd513 7186 - Added BSD compatible install program and autoconf test, thanks to
7187 Niels Kristian Bech Jensen <nkbj@image.dk>
7188 - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
09041313 7189 - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
3dbefdb8 7190 - Release 1.2pre15
0ce43ae4 7191
5260325f 719219991124
7193 - Merged very large OpenBSD source code reformat
7194 - OpenBSD CVS updates
7195 - [channels.c cipher.c compat.c log-client.c scp.c serverloop.c]
7196 [ssh.h sshd.8 sshd.c]
7197 syslog changes:
7198 * Unified Logmessage for all auth-types, for success and for failed
7199 * Standard connections get only ONE line in the LOG when level==LOG:
7200 Auth-attempts are logged only, if authentication is:
7201 a) successfull or
7202 b) with passwd or
7203 c) we had more than AUTH_FAIL_LOG failues
7204 * many log() became verbose()
7205 * old behaviour with level=VERBOSE
7206 - [readconf.c readconf.h ssh.1 ssh.h sshconnect.c sshd.c]
7207 tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
7208 messages. allows use of s/key in windows (ttssh, securecrt) and
7209 ssh-1.2.27 clients without 'ssh -v', ok: niels@
7210 - [sshd.8]
7211 -V, for fallback to openssh in SSH2 compatibility mode
7212 - [sshd.c]
7213 fix sigchld race; cjc5@po.cwru.edu
7214
4655fe80 721519991123
7216 - Added SuSE package files from Chris Saia <csaia@wtower.com>
8b241e50 7217 - Restructured package-related files under packages/*
4655fe80 7218 - Added generic PAM config
8b241e50 7219 - Numerous little Solaris fixes
9c08d6ce 7220 - Add recommendation to use GNU make to INSTALL document
4655fe80 7221
60bed5fd 722219991122
7223 - Make <enter> close gnome-ssh-askpass (Debian bug #50299)
2f2cc3f9 7224 - OpenBSD CVS Changes
bcbf86ec 7225 - [ssh-keygen.c]
7226 don't create ~/.ssh only if the user wants to store the private
7227 key there. show fingerprint instead of public-key after
2f2cc3f9 7228 keygeneration. ok niels@
b09a984b 7229 - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h
96ad4350 7230 - Added timersub() macro
b09a984b 7231 - Tidy RCSIDs of bsd-*.c
bcbf86ec 7232 - Added autoconf test and macro to deal with old PAM libraries
96ad4350 7233 pam_strerror definition (one arg vs two).
530f1889 7234 - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>)
bcbf86ec 7235 - Retry /dev/urandom reads interrupted by signal (report from
530f1889 7236 Robert Hardy <rhardy@webcon.net>)
1647c2b5 7237 - Added a setenv replacement for systems which lack it
d84a9a44 7238 - Only display public key comment when presenting ssh-askpass dialog
7239 - Released 1.2pre14
60bed5fd 7240
bcbf86ec 7241 - Configure, Make and changelog corrections from Tudor Bosman
2ddcfdf3 7242 <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk>
7243
9d6b7add 724419991121
2f2cc3f9 7245 - OpenBSD CVS Changes:
60bed5fd 7246 - [channels.c]
7247 make this compile, bad markus
7248 - [log.c readconf.c servconf.c ssh.h]
7249 bugfix: loglevels are per host in clientconfig,
7250 factor out common log-level parsing code.
7251 - [servconf.c]
7252 remove unused index (-Wall)
7253 - [ssh-agent.c]
7254 only one 'extern char *__progname'
7255 - [sshd.8]
7256 document SIGHUP, -Q to synopsis
7257 - [sshconnect.c serverloop.c sshd.c packet.c packet.h]
7258 [channels.c clientloop.c]
7259 SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
7260 [hope this time my ISP stays alive during commit]
7261 - [OVERVIEW README] typos; green@freebsd
7262 - [ssh-keygen.c]
7263 replace xstrdup+strcat with strlcat+fixed buffer, fixes OF (bad me)
7264 exit if writing the key fails (no infinit loop)
7265 print usage() everytime we get bad options
7266 - [ssh-keygen.c] overflow, djm@mindrot.org
7267 - [sshd.c] fix sigchld race; cjc5@po.cwru.edu
61e96248 7268
2b942fe0 726919991120
bcbf86ec 7270 - Merged more Solaris support from Marc G. Fournier
2b942fe0 7271 <marc.fournier@acadiau.ca>
7272 - Wrote autoconf tests for integer bit-types
7273 - Fixed enabling kerberos support
bcbf86ec 7274 - Fix segfault in ssh-keygen caused by buffer overrun in filename
13c36c4c 7275 handling.
2b942fe0 7276
06479889 727719991119
7278 - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>
2ad77510 7279 - Merged OpenBSD CVS changes
7280 - [auth-rhosts.c auth-rsa.c ssh-agent.c sshconnect.c sshd.c]
7281 more %d vs. %s in fmt-strings
7282 - [authfd.c]
7283 Integers should not be printed with %s
7b1cc56c 7284 - EGD uses a socket, not a named pipe. Duh.
7285 - Fix includes in fingerprint.c
29dbde15 7286 - Fix scp progress bar bug again.
bcbf86ec 7287 - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of
736890c4 7288 David Rankin <drankin@bohemians.lexington.ky.us>
91b8065d 7289 - Added autoconf option to enable Kerberos 4 support (untested)
7290 - Added autoconf option to enable AFS support (untested)
7291 - Added autoconf option to enable S/Key support (untested)
7292 - Added autoconf option to enable TCP wrappers support (compiles OK)
beb43d31 7293 - Renamed BSD helper function files to bsd-*
bcbf86ec 7294 - Added tests for login and daemon and enable OpenBSD replacements for
caf3bc51 7295 when they are absent.
7296 - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu>
06479889 7297
2bd61362 729819991118
7299 - Merged OpenBSD CVS changes
7300 - [scp.c] foregroundproc() in scp
7301 - [sshconnect.h] include fingerprint.h
bcbf86ec 7302 - [sshd.c] bugfix: the log() for passwd-auth escaped during logging
2bd61362 7303 changes.
0c16a097 7304 - [ssh.1] Spell my name right.
2bd61362 7305 - Added openssh.com info to README
7306
f095fcc7 730719991117
7308 - Merged OpenBSD CVS changes
7309 - [ChangeLog.Ylonen] noone needs this anymore
7310 - [authfd.c] close-on-exec for auth-socket, ok deraadt
bcbf86ec 7311 - [hostfile.c]
7312 in known_hosts key lookup the entry for the bits does not need
7313 to match, all the information is contained in n and e. This
7314 solves the problem with buggy servers announcing the wrong
f095fcc7 7315 modulus length. markus and me.
bcbf86ec 7316 - [serverloop.c]
7317 bugfix: check for space if child has terminated, from:
f095fcc7 7318 iedowse@maths.tcd.ie
7319 - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c]
7320 [fingerprint.c fingerprint.h]
7321 rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>
7322 - [ssh-agent.1] typo
7323 - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@
bcbf86ec 7324 - [sshd.c]
f095fcc7 7325 force logging to stderr while loading private key file
7326 (lost while converting to new log-levels)
7327
4d195447 732819991116
7329 - Fix some Linux libc5 problems reported by Miles Wilson <mw@mctitle.com>
7330 - Merged OpenBSD CVS changes:
7331 - [auth-rh-rsa.c auth-rsa.c authfd.c authfd.h hostfile.c mpaux.c]
7332 [mpaux.h ssh-add.c ssh-agent.c ssh.h ssh.c sshd.c]
7333 the keysize of rsa-parameter 'n' is passed implizit,
7334 a few more checks and warnings about 'pretended' keysizes.
7335 - [cipher.c cipher.h packet.c packet.h sshd.c]
7336 remove support for cipher RC4
7337 - [ssh.c]
7338 a note for legay systems about secuity issues with permanently_set_uid(),
7339 the private hostkey and ptrace()
7340 - [sshconnect.c]
7341 more detailed messages about adding and checking hostkeys
7342
dad9a31e 734319991115
7344 - Merged OpenBSD CVS changes:
bcbf86ec 7345 - [ssh-add.c] change passphrase loop logic and remove ref to
dad9a31e 7346 $DISPLAY, ok niels
7347 - Changed to ssh-add.c broke askpass support. Revised it to be a little more
bcbf86ec 7348 modular.
dad9a31e 7349 - Revised autoconf support for enabling/disabling askpass support.
e7c0f9d5 7350 - Merged more OpenBSD CVS changes:
704b1659 7351 [auth-krb4.c]
7352 - disconnect if getpeername() fails
7353 - missing xfree(*client)
7354 [canohost.c]
7355 - disconnect if getpeername() fails
7356 - fix comment: we _do_ disconnect if ip-options are set
7357 [sshd.c]
7358 - disconnect if getpeername() fails
7359 - move checking of remote port to central place
7360 [auth-rhosts.c] move checking of remote port to central place
7361 [log-server.c] avoid extra fd per sshd, from millert@
7362 [readconf.c] print _all_ bad config-options in ssh(1), too
7363 [readconf.h] print _all_ bad config-options in ssh(1), too
7364 [ssh.c] print _all_ bad config-options in ssh(1), too
7365 [sshconnect.c] disconnect if getpeername() fails
e7c0f9d5 7366 - OpenBSD's changes to sshd.c broke the PAM stuff, re-merged it.
c75a1a66 7367 - Various small cleanups to bring diff (against OpenBSD) size down.
f601d847 7368 - Merged more Solaris compability from Marc G. Fournier
7369 <marc.fournier@acadiau.ca>
7370 - Wrote autoconf tests for __progname symbol
986a22ec 7371 - RPM spec file fixes from Jim Knoble <jmknoble@jmknoble.cx>
0c372277 7372 - Released 1.2pre12
7373
7374 - Another OpenBSD CVS update:
7375 - [ssh-keygen.1] fix .Xr
dad9a31e 7376
92da7197 737719991114
7378 - Solaris compilation fixes (still imcomplete)
7379
94f7bb9e 738019991113
dd092f97 7381 - Build patch from Niels Kristian Bech Jensen <nkbj@image.dk>
7382 - Don't install config files if they already exist
7383 - Fix inclusion of additional preprocessor directives from acconfig.h
94f7bb9e 7384 - Removed redundant inclusions of config.h
e9c75a39 7385 - Added 'Obsoletes' lines to RPM spec file
94f7bb9e 7386 - Merged OpenBSD CVS changes:
7387 - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels
bcbf86ec 7388 - [scp.c] fix overflow reported by damien@ibs.com.au: off_t
94f7bb9e 7389 totalsize, ok niels,aaron
bcbf86ec 7390 - Delay fork (-f option) in ssh until after port forwarded connections
94f7bb9e 7391 have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi>
b2344d54 7392 - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de>
7393 - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled
dd092f97 7394 - Tidied default config file some more
7395 - Revised Redhat initscript to fix bug: sshd (re)start would fail
7396 if executed from inside a ssh login.
94f7bb9e 7397
e35c1dc2 739819991112
7399 - Merged changes from OpenBSD CVS
7400 - [sshd.c] session_key_int may be zero
b4748e2f 7401 - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config]
bcbf86ec 7402 IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok
b4748e2f 7403 deraadt,millert
7404 - Brought default sshd_config more in line with OpenBSD's
547c9f30 7405 - Grab server in gnome-ssh-askpass (Debian bug #49872)
7406 - Released 1.2pre10
e35c1dc2 7407
8bc7973f 7408 - Added INSTALL documentation
6fa724bc 7409 - Merged yet more changes from OpenBSD CVS
7410 - [auth-rh-rsa.c auth-rhosts.c auth-rsa.c channels.c clientloop.c]
7411 [ssh.c ssh.h sshconnect.c sshd.c]
7412 make all access to options via 'extern Options options'
7413 and 'extern ServerOptions options' respectively;
7414 options are no longer passed as arguments:
7415 * make options handling more consistent
7416 * remove #include "readconf.h" from ssh.h
7417 * readconf.h is only included if necessary
7418 - [mpaux.c] clear temp buffer
7419 - [servconf.c] print _all_ bad options found in configfile
045672f9 7420 - Make ssh-askpass support optional through autoconf
59b0f0d4 7421 - Fix nasty division-by-zero error in scp.c
7422 - Released 1.2pre11
8bc7973f 7423
4cca272e 742419991111
7425 - Added (untested) Entropy Gathering Daemon (EGD) support
67d68e3a 7426 - Fixed /dev/urandom fd leak (Debian bug #49722)
5bbb5681 7427 - Merged OpenBSD CVS changes:
7428 - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
7429 - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
7430 - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
bcbf86ec 7431 - Fix integer overflow which was messing up scp's progress bar for large
3f1d9bcd 7432 file transfers. Fix submitted to OpenBSD developers. Report and fix
7433 from Kees Cook <cook@cpoint.net>
6a17f9c2 7434 - Merged more OpenBSD CVS changes:
bcbf86ec 7435 - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal()
6a17f9c2 7436 + krb-cleanup cleanup
7437 - [clientloop.c log-client.c log-server.c ]
7438 [readconf.c readconf.h servconf.c servconf.h ]
7439 [ssh.1 ssh.c ssh.h sshd.8]
7440 add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
7441 obsoletes QuietMode and FascistLogging in sshd.
e35c1dc2 7442 - [sshd.c] fix fatal/assert() bug reported by damien@ibs.com.au:
7443 allow session_key_int != sizeof(session_key)
7444 [this should fix the pre-assert-removal-core-files]
7445 - Updated default config file to use new LogLevel option and to improve
7446 readability
7447
f370266e 744819991110
67d68e3a 7449 - Merged several minor fixes:
f370266e 7450 - ssh-agent commandline parsing
7451 - RPM spec file now installs ssh setuid root
7452 - Makefile creates libdir
4cca272e 7453 - Merged beginnings of Solaris compability from Marc G. Fournier
7454 <marc.fournier@acadiau.ca>
f370266e 7455
d4f11b59 745619991109
7457 - Autodetection of SSL/Crypto library location via autoconf
7458 - Fixed location of ssh-askpass to follow autoconf
7459 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
7460 - Autodetection of RSAref library for US users
7461 - Minor doc updates
560557bb 7462 - Merged OpenBSD CVS changes:
7463 - [rsa.c] bugfix: use correct size for memset()
7464 - [sshconnect.c] warn if announced size of modulus 'n' != real size
f025becb 7465 - Added GNOME passphrase requestor (use --with-gnome-askpass)
d397b172 7466 - RPM build now creates subpackages
aa51e7cc 7467 - Released 1.2pre9
d4f11b59 7468
e1a9c08d 746919991108
7470 - Removed debian/ directory. This is now being maintained separately.
7471 - Added symlinks for slogin in RPM spec file
7472 - Fixed permissions on manpages in RPM spec file
7473 - Added references to required libraries in README file
7474 - Removed config.h.in from CVS
7475 - Removed pwdb support (better pluggable auth is provided by glibc)
7476 - Made PAM and requisite libdl optional
7477 - Removed lots of unnecessary checks from autoconf
7478 - Added support and autoconf test for openpty() function (Unix98 pty support)
7479 - Fix for scp not finding ssh if not installed as /usr/bin/ssh
7480 - Added TODO file
7481 - Merged parts of Debian patch From Phil Hands <phil@hands.com>:
7482 - Added ssh-askpass program
7483 - Added ssh-askpass support to ssh-add.c
7484 - Create symlinks for slogin on install
7485 - Fix "distclean" target in makefile
7486 - Added example for ssh-agent to manpage
7487 - Added support for PAM_TEXT_INFO messages
7488 - Disable internal /etc/nologin support if PAM enabled
7489 - Merged latest OpenBSD CVS changes:
5bae4ab8 7490 - [all] replace assert() with error, fatal or packet_disconnect
e1a9c08d 7491 - [sshd.c] don't send fail-msg but disconnect if too many authentication
7492 failures
e1a9c08d 7493 - [sshd.c] remove unused argument. ok dugsong
7494 - [sshd.c] typo
7495 - [rsa.c] clear buffers used for encryption. ok: niels
7496 - [rsa.c] replace assert() with error, fatal or packet_disconnect
ade6fccd 7497 - [auth-krb4.c] remove unused argument. ok dugsong
e1a9c08d 7498 - Fixed coredump after merge of OpenBSD rsa.c patch
9010d60a 7499 - Released 1.2pre8
e1a9c08d 7500
3028328e 750119991102
7502 - Merged change from OpenBSD CVS
7503 - One-line cleanup in sshd.c
7504
474832c5 750519991030
7506 - Integrated debian package support from Dan Brosemer <odin@linuxfreak.com>
69256d9d 7507 - Merged latest updates for OpenBSD CVS:
7508 - channels.[ch] - remove broken x11 fix and document istate/ostate
7509 - ssh-agent.c - call setsid() regardless of argv[]
7510 - ssh.c - save a few lines when disabling rhosts-{rsa-}auth
7511 - Documentation cleanups
7512 - Renamed README -> README.Ylonen
7513 - Renamed README.openssh ->README
474832c5 7514
339660f6 751519991029
7516 - Renamed openssh* back to ssh* at request of Theo de Raadt
7517 - Incorporated latest changes from OpenBSD's CVS
7518 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
7519 - Integrated PAM env patch from Nalin Dahyabhai <nalin.dahyabhai@pobox.com>
549b3eed 7520 - Make distclean now removed configure script
7521 - Improved PAM logging
7522 - Added some debug() calls for PAM
4ecd19ea 7523 - Removed redundant subdirectories
bcbf86ec 7524 - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for
4ecd19ea 7525 building on Debian.
242588e6 7526 - Fixed off-by-one error in PAM env patch
7527 - Released 1.2pre6
339660f6 7528
5881cd60 752919991028
7530 - Further PAM enhancements.
7531 - Much cleaner
7532 - Now uses account and session modules for all logins.
7533 - Integrated patch from Dan Brosemer <odin@linuxfreak.com>
7534 - Build fixes
7535 - Autoconf
7536 - Change binary names to open*
7537 - Fixed autoconf script to detect PAM on RH6.1
7538 - Added tests for libpwdb, and OpenBSD functions to autoconf
221395b3 7539 - Released 1.2pre4
fca82d2e 7540
7541 - Imported latest OpenBSD CVS code
7542 - Updated README.openssh
93f04616 7543 - Released 1.2pre5
fca82d2e 7544
5881cd60 754519991027
7546 - Adapted PAM patch.
7547 - Released 1.0pre2
7548
7549 - Excised my buggy replacements for strlcpy and mkdtemp
7550 - Imported correct OpenBSD strlcpy and mkdtemp routines.
7551 - Reduced arc4random_stir entropy read to 32 bytes (256 bits)
7552 - Picked up correct version number from OpenBSD
7553 - Added sshd.pam PAM configuration file
7554 - Added sshd.init Redhat init script
7555 - Added openssh.spec RPM spec file
7556 - Released 1.2pre3
7557
755819991026
7559 - Fixed include paths of OpenSSL functions
7560 - Use OpenSSL MD5 routines
7561 - Imported RC4 code from nanocrypt
7562 - Wrote replacements for OpenBSD arc4random* functions
7563 - Wrote replacements for strlcpy and mkdtemp
7564 - Released 1.0pre1
0b202697 7565
7566$Id$
git-cvsimport mirror of OpenSSH
This page took 2.17534 seconds and 5 git commands to generate.