andersk Git - openssh.git/log

commit | commitdiff | tree

mouring [Thu, 5 Apr 2001 23:19:21 +0000 (23:19 +0000)]

   - markus@cvs.openbsd.org 2001/04/05 10:00:06
     [compat.c]
     2.3.x does old  GEX, too; report jakob@

commit | commitdiff | tree

stevesk [Thu, 5 Apr 2001 23:05:22 +0000 (23:05 +0000)]

- (stevesk) logintest.c: fix for systems without __progname

commit | commitdiff | tree

stevesk [Thu, 5 Apr 2001 17:15:08 +0000 (17:15 +0000)]

- (stevesk) don't use vhangup() if defined(HAVE_DEV_PTMX); also removes
BROKEN_VHANGUP

commit | commitdiff | tree

mouring [Thu, 5 Apr 2001 02:05:21 +0000 (02:05 +0000)]

   - markus@cvs.openbsd.org 2001/04/04 23:09:18
     [dh.c kex.c packet.c]
     clear+free keys,iv for rekeying.
     + fix DH mem leaks. ok niels@

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 23:50:21 +0000 (23:50 +0000)]

   - markus@cvs.openbsd.org 2001/04/04 22:04:35
     [kex.c kexgex.c serverloop.c]
     parse full kexinit packet.
     make server-side more robust, too.

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 23:47:52 +0000 (23:47 +0000)]

   - markus@cvs.openbsd.org 2001/04/04 20:32:56
     [auth2.c]
     we don't care about missing bannerfiles; from tsoome@ut.ee, ok deraadt@

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 23:46:07 +0000 (23:46 +0000)]

   - markus@cvs.openbsd.org 2001/04/04 20:25:38
     [channels.c channels.h clientloop.c kex.c kex.h serverloop.c
      sshconnect2.c sshd.c]
     more robust rekeying
     don't send channel data after rekeying is started.

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 23:43:26 +0000 (23:43 +0000)]

   - markus@cvs.openbsd.org 2001/04/04 15:50:55
     [compat.c]
     f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 17:57:54 +0000 (17:57 +0000)]

   - markus@cvs.openbsd.org 2001/04/04 14:34:58
     [clientloop.c kex.c kex.h serverloop.c sshconnect2.c sshd.c]
     enable server side rekeying + some rekey related clientup.
     todo: we should not send any non-KEX messages after we send KEXINIT

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 17:52:53 +0000 (17:52 +0000)]

   - markus@cvs.openbsd.org 2001/04/04 09:48:35
     [kex.c kex.h kexdh.c kexgex.c packet.c sshconnect2.c sshd.c]
     don't sent multiple kexinit-requests.
     send newkeys, block while waiting for newkeys.
     fix comments.

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 17:39:19 +0000 (17:39 +0000)]

- (bal) Oops.. Missed including kexdh.c and kexgex.c in OpenBSD sync.

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 02:03:04 +0000 (02:03 +0000)]

   - markus@cvs.openbsd.org 2001/04/04 00:06:54
     [clientloop.c sshconnect2.c]
     enable client rekeying
        (1) force rekeying with ~R, or
        (2) if the server requests rekeying.
     works against ssh-2.0.12/2.0.13/2.1.0/2.2.0/2.3.0/2.3.1/2.4.0

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 02:00:54 +0000 (02:00 +0000)]

   - markus@cvs.openbsd.org 2001/04/03 23:32:12
     [kex.c kex.h packet.c sshconnect2.c sshd.c]
     undo parts of recent my changes: main part of keyexchange does not
     need dispatch-callbacks, since application data is delayed until
     the keyexchange completes (if i understand the drafts correctly).
     add some infrastructure for re-keying.

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 01:58:48 +0000 (01:58 +0000)]

   - todd@cvs.openbsd.org 2001/04/03 21:19:38
     [ssh_config]
     id_rsa1/2 -> id_rsa; ok markus@

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 01:56:17 +0000 (01:56 +0000)]

   - markus@cvs.openbsd.org 2001/04/03 19:53:29
     [dh.c dh.h kex.c kex.h sshconnect2.c sshd.c]
     move kex to kex*.c, used dispatch_set() callbacks for kex. should
     make rekeying easier.

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 01:53:20 +0000 (01:53 +0000)]

   - stevesk@cvs.openbsd.org 2001/04/03 13:56:11
     [sftp-glob.c ssh-agent.c ssh-keygen.c]
     free() -> xfree()

commit | commitdiff | tree

mouring [Wed, 4 Apr 2001 01:51:25 +0000 (01:51 +0000)]

   - deraadt@cvs.openbsd.org 2001/04/02 17:32:23
     [ssh-agent.1]
     grammar; slade@shore.net

commit | commitdiff | tree

stevesk [Tue, 3 Apr 2001 13:02:48 +0000 (13:02 +0000)]

- (stevesk) nchan.c: remove ostate checks and add EINVAL to
shutdown(SHUT_RD) error() bypass for HP-UX.

commit | commitdiff | tree

mouring [Mon, 2 Apr 2001 18:20:03 +0000 (18:20 +0000)]

   - stevesk@cvs.openbsd.org 2001/04/02 14:20:23
     [readconf.c servconf.c]
     correct comment; ok markus@

commit | commitdiff | tree

mouring [Mon, 2 Apr 2001 18:18:21 +0000 (18:18 +0000)]

   - stevesk@cvs.openbsd.org 2001/04/02 14:15:31
     [sshd.8]
     typo; ok markus@

commit | commitdiff | tree

stevesk [Mon, 2 Apr 2001 14:02:55 +0000 (14:02 +0000)]

- (stevesk) sshpty.h openbsd sync; PTY_H -> SSHPTY_H

commit | commitdiff | tree

stevesk [Mon, 2 Apr 2001 13:45:00 +0000 (13:45 +0000)]

- (stevesk) log.c openbsd sync; missing newlines

commit | commitdiff | tree

djm [Fri, 30 Mar 2001 00:55:20 +0000 (00:55 +0000)]

Fixup makefile after merge

commit | commitdiff | tree

djm [Fri, 30 Mar 2001 00:50:32 +0000 (00:50 +0000)]

  - OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2001/03/29 23:42:01
     [sshd.c]
     Protocol 1 key regeneration log => verbose, some KNF; ok markus@

commit | commitdiff | tree

djm [Fri, 30 Mar 2001 00:50:10 +0000 (00:50 +0000)]

  - OpenBSD CVS Sync
   - markus@cvs.openbsd.org 2001/03/29 21:17:40
     [dh.c dh.h kex.c kex.h]
     prepare for rekeying: move DH code to dh.c

commit | commitdiff | tree

djm [Fri, 30 Mar 2001 00:49:35 +0000 (00:49 +0000)]

  - OpenBSD CVS Sync
   - stevesk@cvs.openbsd.org 2001/03/29 21:06:21
     [sshconnect2.c sshd.c]
     need to set both STOC and CTOS for SSH_BUG_BIGENDIANAES; ok markus@

commit | commitdiff | tree

djm [Fri, 30 Mar 2001 00:49:05 +0000 (00:49 +0000)]

  - OpenBSD CVS Sync
   - provos@cvs.openbsd.org 2001/03/29 14:24:59
     [sshconnect2.c]
     use recommended defaults

commit | commitdiff | tree

djm [Fri, 30 Mar 2001 00:48:31 +0000 (00:48 +0000)]

  - OpenBSD CVS Sync
   - markus@cvs.openbsd.org 2001/03/28 22:43:31
     [auth.h auth2.c auth2-chall.c]
     check auth_root_allowed for kbd-int auth, too.

commit | commitdiff | tree

djm [Fri, 30 Mar 2001 00:47:43 +0000 (00:47 +0000)]

  - OpenBSD CVS Sync
   - provos@cvs.openbsd.org 2001/03/28 22:04:57
     [dh.c]
     more sanity checking on primes file

commit | commitdiff | tree

djm [Fri, 30 Mar 2001 00:47:14 +0000 (00:47 +0000)]

- (djm) OpenBSD CVS Sync
   - provos@cvs.openbsd.org 2001/03/28 21:59:41
     [kex.c kex.h sshconnect2.c sshd.c]
     forgot to include min and max params in hash, okay markus@

commit | commitdiff | tree

djm [Fri, 30 Mar 2001 00:23:17 +0000 (00:23 +0000)]

- (djm) Another openbsd-compat/glob.c sync

commit | commitdiff | tree

mouring [Thu, 29 Mar 2001 00:45:12 +0000 (00:45 +0000)]

   - markus@cvs.openbsd.org 2001/03/28 20:50:45
     [sshd.c]
     call refuse() before close(); from olemx@ans.pl

commit | commitdiff | tree

mouring [Thu, 29 Mar 2001 00:43:54 +0000 (00:43 +0000)]

   - stevesk@cvs.openbsd.org 2001/03/28 20:04:38
     [scp.c]
     usage more like rcp and add missing -B to usage; ok markus@

commit | commitdiff | tree

mouring [Thu, 29 Mar 2001 00:39:55 +0000 (00:39 +0000)]

   - stevesk@cvs.openbsd.org 2001/03/28 19:56:23
     [scp.c]
     start to sync scp closer to rcp; ok markus@

commit | commitdiff | tree

mouring [Thu, 29 Mar 2001 00:36:16 +0000 (00:36 +0000)]

   - provos@cvs.openbsd.org 2001/03/27 17:46:50
     [compat.c compat.h dh.c dh.h ssh2.h sshconnect2.c sshd.c version.h]
     make dh group exchange more flexible, allow min and max group size,
     okay markus@, deraadt@

commit | commitdiff | tree

mouring [Thu, 29 Mar 2001 00:32:56 +0000 (00:32 +0000)]

   - markus@cvs.openbsd.org 2001/03/27 10:57:00
     [compat.c compat.h ssh-rsa.c]
     some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5
     signatures in SSH protocol 2, ok djm@

commit | commitdiff | tree

mouring [Thu, 29 Mar 2001 00:31:20 +0000 (00:31 +0000)]

   - markus@cvs.openbsd.org 2001/03/27 10:34:08
     [ssh-rsa.c sshd.c]
     use EVP_get_digestbynid, reorder some calls and fix missing free.

commit | commitdiff | tree

mouring [Thu, 29 Mar 2001 00:29:54 +0000 (00:29 +0000)]

   - markus@cvs.openbsd.org 2001/03/26 23:23:24
     [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
     try to read private f-secure ssh v2 rsa keys.

commit | commitdiff | tree

mouring [Thu, 29 Mar 2001 00:28:37 +0000 (00:28 +0000)]

   - markus@cvs.openbsd.org 2001/03/26 23:12:42
     [authfile.c]
     KNF

commit | commitdiff | tree

mouring [Thu, 29 Mar 2001 00:27:11 +0000 (00:27 +0000)]

   - stevesk@cvs.openbsd.org 2001/03/26 15:47:59
     [ssh.1]
     document more defaults; misc. cleanup.  ok markus@

commit | commitdiff | tree

djm [Wed, 28 Mar 2001 11:05:26 +0000 (11:05 +0000)]

- (djm) Sync openbsd-compat/glob.c

commit | commitdiff | tree

djm [Wed, 28 Mar 2001 04:37:06 +0000 (04:37 +0000)]

- (djm) Rework krbIV tests to get us closer to building on Redhat. Still
doesn't work because of conflicts between krbIV's and OpenSSL's des.h

commit | commitdiff | tree

djm [Wed, 28 Mar 2001 04:35:30 +0000 (04:35 +0000)]

- (djm) Work around Solaris' broken struct dirent. Diagnosis and suggested
fix from Philippe Levan <levan@epix.net>

commit | commitdiff | tree

djm [Wed, 28 Mar 2001 03:03:42 +0000 (03:03 +0000)]

- (djm) Reorder tests and library inclusion for Krb4/AFS to try to
resolve linking conflicts with libcrypto. Report and suggested fix
from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>

commit | commitdiff | tree

djm [Tue, 27 Mar 2001 06:12:24 +0000 (06:12 +0000)]

- (djm) Reestablish PAM credentials (which can be supplemental group
memberships) after initgroups() blows them away. Report and suggested
fix from Nalin Dahyabhai <nalin@redhat.com>

commit | commitdiff | tree

djm [Tue, 27 Mar 2001 06:10:22 +0000 (06:10 +0000)]

more detail about krb4/-lcrypto conflicts

commit | commitdiff | tree

mouring [Mon, 26 Mar 2001 13:44:06 +0000 (13:44 +0000)]

   - markus@cvs.openbsd.org 2001/03/26 08:07:09
     [authfile.c authfile.h ssh-add.c ssh-keygen.c ssh.c sshconnect.c
      sshconnect.h sshconnect1.c sshconnect2.c sshd.c]
     simpler key load/save interface, see authfile.h

commit | commitdiff | tree

mouring [Mon, 26 Mar 2001 05:45:53 +0000 (05:45 +0000)]

   - stevesk@cvs.openbsd.org 2001/03/25 13:16:11
     [servconf.c servconf.h session.c sshd.8 sshd_config]
     PrintLastLog option; from chip@valinux.com with some minor
     changes by me.  ok markus@

commit | commitdiff | tree

mouring [Mon, 26 Mar 2001 05:38:25 +0000 (05:38 +0000)]

   - djm@cvs.openbsd.org 2001/03/25 00:01:34
     [session.c]
     shorten; ok markus@

commit | commitdiff | tree

mouring [Mon, 26 Mar 2001 05:35:33 +0000 (05:35 +0000)]

- Fix pointer issues in waitpid() and wait() replaces. Patch by Lutz
Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>

commit | commitdiff | tree

mouring [Mon, 26 Mar 2001 05:32:16 +0000 (05:32 +0000)]

- Attempt sync with sshlogin.c w/ OpenBSD (mainly CVS ID)

commit | commitdiff | tree

djm [Sat, 24 Mar 2001 04:39:38 +0000 (04:39 +0000)]

- (djm) Pull out our own SIGPIPE hacks

commit | commitdiff | tree

mouring [Sat, 24 Mar 2001 00:43:26 +0000 (00:43 +0000)]

   - markus@cvs.openbsd.org 2001/03/23 14:28:32
     [session.c sshd.c]
     ignore SIGPIPE, restore in child, fixes x11-fwd crashes; with djm@

commit | commitdiff | tree

mouring [Sat, 24 Mar 2001 00:39:12 +0000 (00:39 +0000)]

   - markus@cvs.openbsd.org 2001/03/23 13:10:57
     [sftp-int.c]
     fix put, upload to _absolute_ path, ok djm@

commit | commitdiff | tree

mouring [Sat, 24 Mar 2001 00:37:59 +0000 (00:37 +0000)]

   - markus@cvs.openbsd.org 2001/03/23 12:02:49
     [auth1.c]
     authctxt is now passed to do_authenticated

commit | commitdiff | tree

mouring [Sat, 24 Mar 2001 00:35:19 +0000 (00:35 +0000)]

   - djm@cvs.openbsd.org 2001/03/23 11:04:07
     [compat.c compat.h sshconnect2.c sshd.c]
     Compat for OpenSSH with broken Rijndael/AES. ok markus@

commit | commitdiff | tree

mouring [Sat, 24 Mar 2001 00:20:56 +0000 (00:20 +0000)]

- Fixed permissions ssh-keyscan. Thanks to Christopher Linn <celinn@mtu.edu>.

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 22:45:33 +0000 (22:45 +0000)]

   - deraadt@cvs.openbsd.org 2001/03/22 20:22:55
     [sshd.c]
     do not place linefeeds in buffer

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 02:06:57 +0000 (02:06 +0000)]

   - markus@cvs.openbsd.org 2001/03/21 21:06:30
     [session.c]
     missing init; from mib@unimelb.edu.au

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 02:05:32 +0000 (02:05 +0000)]

   - jakob@cvs.openbsd.org 2001/03/21 14:20:45
     [ssh-keygen.c]
     add -B flag to usage

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 02:04:08 +0000 (02:04 +0000)]

- (bal) scp.c CVS ID resync

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 02:02:12 +0000 (02:02 +0000)]

   - markus@cvs.openbsd.org 2001/03/21 11:43:45
     [auth1.c auth2.c session.c session.h]
     merge common ssh v1/2 code

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 01:27:23 +0000 (01:27 +0000)]

   - markus@cvs.openbsd.org 2001/03/20 19:21:21
     [session.c]
     remove unused arg

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 01:25:37 +0000 (01:25 +0000)]

   - markus@cvs.openbsd.org 2001/03/20 19:21:21
     [session.c]
     remove unused arg

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 01:25:37 +0000 (01:25 +0000)]

   - markus@cvs.openbsd.org 2001/03/20 19:21:21
     [session.c]
     remove unused arg

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 01:24:04 +0000 (01:24 +0000)]

- OpenBSD CVS Sync
   - markus@cvs.openbsd.org 2001/03/20 19:10:16
     [readconf.c]
     default to SSH protocol version 2

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 01:22:03 +0000 (01:22 +0000)]

- (bal) auth-chall.c auth-passwd.c auth.h auth1.c auth2.c session.c CVS ID
resync

commit | commitdiff | tree

mouring [Thu, 22 Mar 2001 01:08:39 +0000 (01:08 +0000)]

- (bal) version.c CVS ID resync

commit | commitdiff | tree

djm [Thu, 22 Mar 2001 00:58:15 +0000 (00:58 +0000)]

- (djm) Better AIX no tty fix, spotted by Gert Doering <gert@greenie.muc.de>

commit | commitdiff | tree

djm [Wed, 21 Mar 2001 05:13:03 +0000 (05:13 +0000)]

- (djm) Correctly handle SIA and AIX when no tty present. Spotted and
suggested fix from Mike Battersby <mib@unimelb.edu.au>

commit | commitdiff | tree

djm [Wed, 21 Mar 2001 02:13:40 +0000 (02:13 +0000)]

- (djm) Generate config files before build

commit | commitdiff | tree

djm [Wed, 21 Mar 2001 02:01:35 +0000 (02:01 +0000)]

- (djm) Don't loop forever when changing password via PAM. Patch
from Solar Designer <solar@openwall.com>

commit | commitdiff | tree

djm [Wed, 21 Mar 2001 01:16:24 +0000 (01:16 +0000)]

- (djm) Make sure pam_retval is initialised on call to pam_end. Patch
from Solar Designer <solar@openwall.com>

commit | commitdiff | tree

djm [Wed, 21 Mar 2001 00:12:55 +0000 (00:12 +0000)]

commit | commitdiff | tree

djm [Wed, 21 Mar 2001 00:11:57 +0000 (00:11 +0000)]

- (djm) Fix ttyname breakage for AIX and Tru64. Patch from Steve
VanDevender <stevev@darkwing.uoregon.edu>

commit | commitdiff | tree

tim [Tue, 20 Mar 2001 04:46:50 +0000 (04:46 +0000)]

add get_arg_max(). Use sysconf() if ARG_MAX is not defined.

commit | commitdiff | tree

tim [Tue, 20 Mar 2001 02:31:44 +0000 (02:31 +0000)]

change S_ISLNK macro to work for UnixWare 2.03

commit | commitdiff | tree

djm [Mon, 19 Mar 2001 22:30:50 +0000 (22:30 +0000)]

- (djm) Update RPM spec version
- (djm) Release 2.5.2p1

commit | commitdiff | tree

djm [Mon, 19 Mar 2001 22:16:34 +0000 (22:16 +0000)]

   - markus@cvs.openbsd.org 2001/03/19 17:12:10
     [version.h]
     version 2.5.2

commit | commitdiff | tree

djm [Mon, 19 Mar 2001 22:15:57 +0000 (22:15 +0000)]

   - markus@cvs.openbsd.org 2001/03/19 17:07:23
     [auth.c readconf.c]
     undo /etc/shell and proto 2,1 change for openssh-2.5.2

commit | commitdiff | tree

mouring [Mon, 19 Mar 2001 21:29:30 +0000 (21:29 +0000)]

- (bal) Oops. Missed globc.h change (OpenBSD CVS).

commit | commitdiff | tree

mouring [Mon, 19 Mar 2001 19:00:09 +0000 (19:00 +0000)]

- (bal) glob.c update to set gl_pathv to NULL (OpenBSD CVS).

commit | commitdiff | tree

mouring [Mon, 19 Mar 2001 18:58:13 +0000 (18:58 +0000)]

- (bal) glob.c update to added GLOB_LIMITS.

commit | commitdiff | tree

stevesk [Mon, 19 Mar 2001 14:58:47 +0000 (14:58 +0000)]

64-bit builds on HP-UX 11.X

commit | commitdiff | tree

mouring [Mon, 19 Mar 2001 13:42:21 +0000 (13:42 +0000)]

- (bal) Minor NeXT fixed. Forgot to #undef NGROUPS_MAX

commit | commitdiff | tree

djm [Mon, 19 Mar 2001 12:59:11 +0000 (12:59 +0000)]

   - djm@cvs.openbsd.org     2001/03/19 05:49:52
     [ssh.1]
     document PreferredAuthentications option; ok markus@

commit | commitdiff | tree

djm [Mon, 19 Mar 2001 12:16:14 +0000 (12:16 +0000)]

   - djm@cvs.openbsd.org      2001/03/19 12:10:17
     [sshd.8]
     Document permitopen authorized_keys option; ok markus@

commit | commitdiff | tree

djm [Mon, 19 Mar 2001 12:16:08 +0000 (12:16 +0000)]

   - djm@cvs.openbsd.org      2001/03/19 12:10:17
     [sshd.8]
     Document permitopen authorized_keys option; ok markus@

commit | commitdiff | tree

djm [Mon, 19 Mar 2001 11:36:20 +0000 (11:36 +0000)]

   - deraadt@cvs.openbsd.org 2001/03/18 23:30:55
     [compat.c compat.h sshd.c]
     specifically version match on ssh scanners.  do not log scan
     information to the console

commit | commitdiff | tree

djm [Mon, 19 Mar 2001 11:29:46 +0000 (11:29 +0000)]

- (djm) OpenBSD CVS Sync
   - djm@cvs.openbsd.org     2001/03/19 03:52:51
     [sftp-client.c]
     Report ssh connection closing correctly; ok deraadt@

commit | commitdiff | tree

mouring [Mon, 19 Mar 2001 03:12:25 +0000 (03:12 +0000)]

- (bal) NeXTStep lacks S_ISLNK. Plus split up S_IS*

commit | commitdiff | tree

mouring [Mon, 19 Mar 2001 03:09:40 +0000 (03:09 +0000)]

- (bal) Small fix to scp. %lu vs %ld

commit | commitdiff | tree

mouring [Mon, 19 Mar 2001 03:01:56 +0000 (03:01 +0000)]

- Use 'NGROUPS' for NeXT Since 'MAX_NGROUPS' is wrapped up in -lposix
stuff. Change suggested by Mark Miller <markm@swoon.net>

commit | commitdiff | tree

tim [Mon, 19 Mar 2001 02:27:26 +0000 (02:27 +0000)]

move HAVE_LONG_LONG_INT where it works