+20020205
+ - (djm) OpenBSD CVS Sync
+ - stevesk@cvs.openbsd.org 2002/01/24 21:09:25
+ [channels.c misc.c misc.h packet.c]
+ add set_nodelay() to set TCP_NODELAY on a socket (prep for nagle tuning).
+ no nagle changes just yet; ok djm@ markus@
+ - stevesk@cvs.openbsd.org 2002/01/24 21:13:23
+ [packet.c]
+ need misc.h for set_nodelay()
+ - markus@cvs.openbsd.org 2002/01/25 21:00:24
+ [sshconnect2.c]
+ unused include
+ - markus@cvs.openbsd.org 2002/01/25 21:42:11
+ [ssh-dss.c ssh-rsa.c]
+ use static EVP_MAX_MD_SIZE buffers for EVP_DigestFinal; ok stevesk@
+ don't use evp_md->md_size, it's not public.
+ - markus@cvs.openbsd.org 2002/01/25 22:07:40
+ [kex.c kexdh.c kexgex.c key.c mac.c]
+ use EVP_MD_size(evp_md) and not evp_md->md_size; ok steveks@
+ - stevesk@cvs.openbsd.org 2002/01/26 16:44:22
+ [includes.h session.c]
+ revert code to add x11 localhost display authorization entry for
+ hostname/unix:d and uts.nodename/unix:d if nodename was different than
+ hostname. just add entry for unix:d instead. ok markus@
+ - stevesk@cvs.openbsd.org 2002/01/27 14:57:46
+ [channels.c servconf.c servconf.h session.c sshd.8 sshd_config]
+ add X11UseLocalhost; ok markus@
+ - stevesk@cvs.openbsd.org 2002/01/27 18:08:17
+ [ssh.c]
+ handle simple case to identify FamilyLocal display; ok markus@
+ - markus@cvs.openbsd.org 2002/01/29 14:27:57
+ [ssh-add.c]
+ exit 2 if no agent, exit 1 if list fails; debian#61078; ok djm@
+ - markus@cvs.openbsd.org 2002/01/29 14:32:03
+ [auth2.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c canohost.c]
+ [servconf.c servconf.h session.c sshd.8 sshd_config]
+ s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion;
+ ok stevesk@
+ - stevesk@cvs.openbsd.org 2002/01/29 16:29:02
+ [session.c]
+ limit subsystem length in log; ok markus@
+ - markus@cvs.openbsd.org 2002/01/29 16:41:19
+ [ssh-add.1]
+ add DIAGNOSTICS; ok stevesk@
+
+20020130
+ - (djm) Delay PRNG seeding until we need it in ssh-keygen, from markus@
+ - (tim) [configure.ac] fix logic on when ssh-rand-helper is installed.
+ [sshd_config] put back in line that tells what PATH was compiled into sshd.
+
+20020125
+ - (djm) Don't grab Xserver or pointer by default. x11-ssh-askpass doesn't
+ and grabbing can cause deadlocks with kinput2.
+
+20020124
+ - (stevesk) Makefile.in: bug #61; delete commented line for now.
+
+20020123
+ - (djm) Fix non-standard shell syntax in autoconf. Patch from
+ Dave Dykstra <dwd@bell-labs.com>
+ - (stevesk) fix --with-zlib=
+ - (djm) Use case statements in autoconf to clean up some tests
+ - (bal) reverted out of 5/2001 change to atexit(). I assume I
+ did it to handle SonyOS. If that is the case than we will
+ do a special case for them.
+
+20020122
+ - (djm) autoconf hacking:
+ - We don't support --without-zlib currently, so don't allow it.
+ - Rework cryptographic random number support detection. We now detect
+ whether OpenSSL seeds itself. If it does, then we don't bother with
+ the ssh-rand-helper program. You can force the use of ssh-rand-helper
+ using the --with-rand-helper configure argument
+ - Simplify and clean up ssh-rand-helper configuration
+ - Add OpenSSL sanity check: verify that header version matches version
+ reported by library
+ - (djm) Fix some bugs I introduced into ssh-rand-helper yesterday
+ - OpenBSD CVS Sync
+ - djm@cvs.openbsd.org 2001/12/21 08:52:22
+ [ssh-keygen.1 ssh-keygen.c]
+ Remove default (rsa1) key type; ok markus@
+ - djm@cvs.openbsd.org 2001/12/21 08:53:45
+ [readpass.c]
+ Avoid interruptable passphrase read; ok markus@
+ - djm@cvs.openbsd.org 2001/12/21 10:06:43
+ [ssh-add.1 ssh-add.c]
+ Try all standard key files (id_rsa, id_dsa, identity) when invoked with
+ no arguments; ok markus@
+ - markus@cvs.openbsd.org 2001/12/21 12:17:33
+ [serverloop.c]
+ remove ifdef for USE_PIPES since fdin != fdout; ok djm@
+ - deraadt@cvs.openbsd.org 2001/12/24 07:29:43
+ [ssh-add.c]
+ try all listed keys.. how did this get broken?
+ - markus@cvs.openbsd.org 2001/12/25 18:49:56
+ [key.c]
+ be more careful on allocation
+ - markus@cvs.openbsd.org 2001/12/25 18:53:00
+ [auth1.c]
+ be more carefull on allocation
+ - markus@cvs.openbsd.org 2001/12/27 18:10:29
+ [ssh-keygen.c]
+ -t is only needed for key generation (unbreaks -i, -e, etc).
+ - markus@cvs.openbsd.org 2001/12/27 18:22:16
+ [auth1.c authfile.c auth-rsa.c dh.c kexdh.c kexgex.c key.c rsa.c]
+ [scard.c ssh-agent.c sshconnect1.c sshd.c ssh-dss.c]
+ call fatal() for openssl allocation failures
+ - stevesk@cvs.openbsd.org 2001/12/27 18:22:53
+ [sshd.8]
+ clarify -p; ok markus@
+ - markus@cvs.openbsd.org 2001/12/27 18:26:13
+ [authfile.c]
+ missing include
+ - markus@cvs.openbsd.org 2001/12/27 19:37:23
+ [dh.c kexdh.c kexgex.c]
+ always use BN_clear_free instead of BN_free
+ - markus@cvs.openbsd.org 2001/12/27 19:54:53
+ [auth1.c auth.h auth-rh-rsa.c]
+ auth_rhosts_rsa now accept generic keys.
+ - markus@cvs.openbsd.org 2001/12/27 20:39:58
+ [auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h]
+ [serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c]
+ get rid of packet_integrity_check, use packet_done() instead.
+ - markus@cvs.openbsd.org 2001/12/28 12:14:27
+ [auth1.c auth2.c auth2-chall.c auth-rsa.c channels.c clientloop.c]
+ [kex.c kexdh.c kexgex.c packet.c packet.h serverloop.c session.c]
+ [ssh.c sshconnect1.c sshconnect2.c sshd.c]
+ s/packet_done/packet_check_eom/ (end-of-message); ok djm@
+ - markus@cvs.openbsd.org 2001/12/28 13:57:33
+ [auth1.c kexdh.c kexgex.c packet.c packet.h sshconnect1.c sshd.c]
+ packet_get_bignum* no longer returns a size
+ - markus@cvs.openbsd.org 2001/12/28 14:13:13
+ [bufaux.c bufaux.h packet.c]
+ buffer_get_bignum: int -> void
+ - markus@cvs.openbsd.org 2001/12/28 14:50:54
+ [auth1.c auth-rsa.c channels.c dispatch.c kex.c kexdh.c kexgex.c]
+ [packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c]
+ [sshconnect2.c sshd.c]
+ packet_read* no longer return the packet length, since it's not used.
+ - markus@cvs.openbsd.org 2001/12/28 15:06:00
+ [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
+ [dispatch.h kex.c kex.h serverloop.c ssh.c sshconnect2.c]
+ remove plen from the dispatch fn. it's no longer used.
+ - stevesk@cvs.openbsd.org 2001/12/28 22:37:48
+ [ssh.1 sshd.8]
+ document LogLevel DEBUG[123]; ok markus@
+ - stevesk@cvs.openbsd.org 2001/12/29 21:56:01
+ [authfile.c channels.c compress.c packet.c sftp-server.c]
+ [ssh-agent.c ssh-keygen.c]
+ remove unneeded casts and some char->u_char cleanup; ok markus@
+ - stevesk@cvs.openbsd.org 2002/01/03 04:11:08
+ [ssh_config]
+ grammar in comment
+ - stevesk@cvs.openbsd.org 2002/01/04 17:59:17
+ [readconf.c servconf.c]
+ remove #ifdef _PATH_XAUTH/#endif; ok markus@
+ - stevesk@cvs.openbsd.org 2002/01/04 18:14:16
+ [servconf.c sshd.8]
+ protocol 2 HostKey code default is now /etc/ssh_host_rsa_key and
+ /etc/ssh_host_dsa_key like we have in sshd_config. ok markus@
+ - markus@cvs.openbsd.org 2002/01/05 10:43:40
+ [channels.c]
+ fix hanging x11 channels for rejected cookies (e.g.
+ XAUTHORITY=/dev/null xbiff) bug #36, based on patch from
+ djast@cs.toronto.edu
+ - stevesk@cvs.openbsd.org 2002/01/05 21:51:56
+ [ssh.1 sshd.8]
+ some missing and misplaced periods
+ - markus@cvs.openbsd.org 2002/01/09 13:49:27
+ [ssh-keygen.c]
+ append \n only for public keys
+ - markus@cvs.openbsd.org 2002/01/09 17:16:00
+ [channels.c]
+ merge channel_pre_open_15/channel_pre_open_20; ok provos@
+ - markus@cvs.openbsd.org 2002/01/09 17:26:35
+ [channels.c nchan.c]
+ replace buffer_consume(b, buffer_len(b)) with buffer_clear(b);
+ ok provos@
+ - markus@cvs.openbsd.org 2002/01/10 11:13:29
+ [serverloop.c]
+ skip client_alive_check until there are channels; ok beck@
+ - markus@cvs.openbsd.org 2002/01/10 11:24:04
+ [clientloop.c]
+ handle SSH2_MSG_GLOBAL_REQUEST (just reply with failure); ok djm@
+ - markus@cvs.openbsd.org 2002/01/10 12:38:26
+ [nchan.c]
+ remove dead code (skip drain)
+ - markus@cvs.openbsd.org 2002/01/10 12:47:59
+ [nchan.c]
+ more unused code (with channels.c:1.156)
+ - markus@cvs.openbsd.org 2002/01/11 10:31:05
+ [packet.c]
+ handle received SSH2_MSG_UNIMPLEMENTED messages; ok djm@
+ - markus@cvs.openbsd.org 2002/01/11 13:36:43
+ [ssh2.h]
+ add defines for msg type ranges
+ - markus@cvs.openbsd.org 2002/01/11 13:39:36
+ [auth2.c dispatch.c dispatch.h kex.c]
+ a single dispatch_protocol_error() that sends a message of
+ type 'UNIMPLEMENTED'
+ dispatch_range(): set handler for a ranges message types
+ use dispatch_protocol_ignore() for authentication requests after
+ successful authentication (the drafts requirement).
+ serverloop/clientloop now send a 'UNIMPLEMENTED' message instead
+ of exiting.
+ - markus@cvs.openbsd.org 2002/01/11 20:14:11
+ [auth2-chall.c auth-skey.c]
+ use strlcpy not strlcat; mouring@
+ - markus@cvs.openbsd.org 2002/01/11 23:02:18
+ [readpass.c]
+ use _PATH_TTY
+ - markus@cvs.openbsd.org 2002/01/11 23:02:51
+ [auth2-chall.c]
+ use snprintf; mouring@
+ - markus@cvs.openbsd.org 2002/01/11 23:26:30
+ [auth-skey.c]
+ use snprintf; mouring@
+ - markus@cvs.openbsd.org 2002/01/12 13:10:29
+ [auth-skey.c]
+ undo local change
+ - provos@cvs.openbsd.org 2002/01/13 17:27:07
+ [ssh-agent.c]
+ change to use queue.h macros; okay markus@
+ - markus@cvs.openbsd.org 2002/01/13 17:57:37
+ [auth2.c auth2-chall.c compat.c sshconnect2.c sshd.c]
+ use buffer API and avoid static strings of fixed size;
+ ok provos@/mouring@
+ - markus@cvs.openbsd.org 2002/01/13 21:31:20
+ [channels.h nchan.c]
+ add chan_set_[io]state(), order states, state is now an u_int,
+ simplifies debugging messages; ok provos@
+ - markus@cvs.openbsd.org 2002/01/14 13:22:35
+ [nchan.c]
+ chan_send_oclose1() no longer calls chan_shutdown_write(); ok provos@
+ - markus@cvs.openbsd.org 2002/01/14 13:34:07
+ [nchan.c]
+ merge chan_[io]buf_empty[12]; ok provos@
+ - markus@cvs.openbsd.org 2002/01/14 13:40:10
+ [nchan.c]
+ correct fn names for ssh2, do not switch from closed to closed;
+ ok provos@
+ - markus@cvs.openbsd.org 2002/01/14 13:41:13
+ [nchan.c]
+ remove duplicated code; ok provos@
+ - markus@cvs.openbsd.org 2002/01/14 13:55:55
+ [channels.c channels.h nchan.c]
+ remove function pointers for events, remove chan_init*; ok provos@
+ - markus@cvs.openbsd.org 2002/01/14 13:57:03
+ [channels.h nchan.c]
+ (c) 2002
+ - markus@cvs.openbsd.org 2002/01/16 13:17:51
+ [channels.c channels.h serverloop.c ssh.c]
+ wrapper for channel_setup_fwd_listener
+ - stevesk@cvs.openbsd.org 2002/01/16 17:40:23
+ [sshd_config]
+ The stategy now used for options in the default sshd_config shipped
+ with OpenSSH is to specify options with their default value where
+ possible, but leave them commented. Uncommented options change a
+ default value. Subsystem is currently the only default option
+ changed. ok markus@
+ - stevesk@cvs.openbsd.org 2002/01/16 17:42:33
+ [ssh.1]
+ correct defaults for -i/IdentityFile; ok markus@
+ - stevesk@cvs.openbsd.org 2002/01/16 17:55:33
+ [ssh_config]
+ correct some commented defaults. add Ciphers default. ok markus@
+ - stevesk@cvs.openbsd.org 2002/01/17 04:27:37
+ [log.c]
+ casts to silence enum type warnings for bugzilla bug 37; ok markus@
+ - stevesk@cvs.openbsd.org 2002/01/18 17:14:16
+ [sshd.8]
+ correct Ciphers default; paola.mannaro@ubs.com
+ - stevesk@cvs.openbsd.org 2002/01/18 18:14:17
+ [authfd.c bufaux.c buffer.c cipher.c packet.c ssh-agent.c ssh-keygen.c]
+ unneeded cast cleanup; ok markus@
+ - stevesk@cvs.openbsd.org 2002/01/18 20:46:34
+ [sshd.8]
+ clarify Allow(Groups|Users) and Deny(Groups|Users); suggestion from
+ allard@oceanpark.com; ok markus@
+ - markus@cvs.openbsd.org 2002/01/21 15:13:51
+ [sshconnect.c]
+ use read_passphrase+ECHO in confirm(), allows use of ssh-askpass
+ for hostkey confirm.
+ - markus@cvs.openbsd.org 2002/01/21 22:30:12
+ [cipher.c compat.c myproposal.h]
+ remove "rijndael-*", just use "aes-" since this how rijndael is called
+ in the drafts; ok stevesk@
+ - markus@cvs.openbsd.org 2002/01/21 23:27:10
+ [channels.c nchan.c]
+ cleanup channels faster if the are empty and we are in drain-state;
+ ok deraadt@
+ - stevesk@cvs.openbsd.org 2002/01/22 02:52:41
+ [servconf.c]
+ typo in error message; from djast@cs.toronto.edu
+ - (djm) Make auth2-pam.c compile again after dispatch.h and packet.h
+ changes
+ - (djm) Recent Glibc includes an incompatible sys/queue.h. Treat it as
+ bogus in configure
+ - (djm) Use local sys/queue.h if necessary in ssh-agent.c
+
+20020121
+ - (djm) Rework ssh-rand-helper:
+ - Reduce quantity of ifdef code, in preparation for ssh_rand_conf
+ - Always seed from system calls, even when doing PRNGd seeding
+ - Tidy and comment #define knobs
+ - Remove unused facility for multiple runs through command list
+ - KNF, cleanup, update copyright
+
+20020114
+ - (djm) Bug #50 - make autoconf entropy path checks more robust
+
+20020108
+ - (djm) Merge Cygwin copy_environment with do_pam_environment, removing
+ fixed env var size limit in the process. Report from Corinna Vinschen
+ <vinschen@redhat.com>
+ - (stevesk) defines.h: use "/var/spool/sockets/X11/%u" for HP-UX. does
+ not depend on transition links. from Lutz Jaenicke.
+
+20020106
+ - (stevesk) defines.h: determine _PATH_UNIX_X; currently "/tmp/.X11-unix/X%u"
+ for all platforms except HP-UX, which is "/usr/spool/sockets/X11/%u".
+
+20020105
+ - (bal) NCR requies use_pipes to operate correctly.
+ - (stevesk) fix spurious ; from NCR change.
+
+20020103
+ - (djm) Use bigcrypt() on systems with SCO_PROTECTED_PW. Patch from
+ Roger Cornelius <rac@tenzing.org>
+
+20011229
+ - (djm) Apply Cygwin pointer deref fix from Corinna Vinschen
+ <vinschen@redhat.com> Could be abused to guess valid usernames
+ - (djm) Typo in contrib/cygwin/README Fix from Corinna Vinschen
+ <vinschen@redhat.com>
+
+20011228
+ - (djm) Remove recommendation to use GNU make, we should support most
+ make programs.
+
+20011225
+ - (stevesk) [Makefile.in ssh-rand-helper.c]
+ portable lib and __progname support for ssh-rand-helper; ok djm@
+
+20011223
+ - (bal) Removed contrib/chroot.diff and noted in contrib/README that it
+ was not being maintained.
+
+20011222
+ - (djm) Ignore fix & patchlevel in OpenSSL version check. Patch from
+ solar@openwall.com
+ - (djm) Rework entropy code. If the OpenSSL PRNG is has not been
+ internally seeded, execute a subprogram "ssh-rand-helper" to obtain
+ some entropy for us. Rewrite the old in-process entropy collecter as
+ an example ssh-rand-helper.
+ - (djm) Always perform ssh_prng_cmds path lookups in configure, even if
+ we don't end up using ssh_prng_cmds (so we always get a valid file)
+
20011221
- (djm) Add option to gnome-ssh-askpass to stop it from grabbing the X
server. I have found this necessary to avoid server hangs with X input
- stevesk@cvs.openbsd.org 2001/12/19 17:16:13
[authfile.c bufaux.c bufaux.h buffer.c buffer.h packet.c packet.h ssh.c]
change the buffer/packet interface to use void* vs. char*; ok markus@
+ - markus@cvs.openbsd.org 2001/12/20 16:37:29
+ [channels.c channels.h session.c]
+ setup x11 listen socket for just one connect if the client requests so.
+ (v2 only, but the openssh client does not support this feature).
+ - djm@cvs.openbsd.org 2001/12/20 22:50:24
+ [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c]
+ [dispatch.h kex.c kex.h packet.c packet.h serverloop.c ssh.c]
+ [sshconnect2.c]
+ Conformance fix: we should send failing packet sequence number when
+ responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by
+ yakk@yakk.dot.net; ok markus@
20011219
- (stevesk) OpenBSD CVS sync X11 localhost display