RepoMirrors/openssh
1
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2024-12-24 19:02:06 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,961 Commits 69 Branches 157 Tags 27 MiB
2421a567a8
Commit Graph

10961 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Darren Tucker
2421a567a8 Import regenerated moduli file. 2021-03-10 17:44:16 +11:00
millert@openbsd.org
e99080c05d upstream: Fix PRINT macro, the suffix param to sshlog() was missing. 
Also remove redundant __func__ prefix from PRINT calls as the macro already
adds __FILE__, __func__ and __LINE__.  From Christos Zoulas. OK dtucker@

OpenBSD-Commit-ID: 01fdfa9c5541151b5461d9d7d6ca186a3413d949
 2021-03-10 10:14:26 +11:00
djm@openbsd.org
160db17fc6 upstream: don't sshbuf_get_u32() into an enum; reported by goetze 
AT dovetail.com via bz3269

OpenBSD-Commit-ID: 99a30a8f1df9bd72be54e21eee5c56a0f050921a
 2021-03-04 09:43:28 +11:00
sthen@openbsd.org
cffd033817 upstream: typo in other_hostkeys_message() display output, ok djm 
OpenBSD-Commit-ID: 276f58afc97b6f5826e0be58380b737603dbf5f5
 2021-03-04 09:43:28 +11:00
djm@openbsd.org
7fe141b96b upstream: needs FILE*; from Mike Frysinger 
OpenBSD-Commit-ID: dddb3aa9cb5792eeeaa37a1af67b5a3f25ded41d
 2021-03-03 19:43:59 +11:00
Damien Miller
d2afd717e6 update depend 2021-03-02 21:31:47 +11:00
Damien Miller
f0c4eddf7c update relnotes URL 2021-03-02 21:30:14 +11:00
Damien Miller
67a8bb7fe6 update RPM spec version numbers 2021-03-02 21:29:54 +11:00
djm@openbsd.org
0a4b23b11b upstream: openssh-8.5 
OpenBSD-Commit-ID: 185e85d60fe042b8f8fa1ef29d4ef637bdf397d6
 2021-03-02 16:43:01 +11:00
Darren Tucker
de3866383b Only upload config logs if configure fails. 2021-03-01 21:13:24 +11:00
dtucker@openbsd.org
85ff2a564c upstream: Add %k to list of keywords. From 
=?UTF-8?q?=20Eero=20H=C3=A4kkinenvia=20bz#3267?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

OpenBSD-Commit-ID: 9c87f39a048cee2a7d1c8bab951b2f716256865e
 2021-03-01 10:20:42 +11:00
dtucker@openbsd.org
e774bac359 upstream: Do not try to reset signal handler for signal 0 in 
subprocess. Prevents spurious debug message.  ok djm@

OpenBSD-Commit-ID: 7f9785e292dcf304457566ad4637effd27ad1d46
 2021-02-28 13:01:20 +11:00
djm@openbsd.org
351c5dbbd7 upstream: fix alphabetic ordering of options; spotted by Iain Morgan 
OpenBSD-Commit-ID: f955fec617d74af0feb5b275831a9fee813d7ad5
 2021-02-28 10:54:19 +11:00
Darren Tucker
0d1c9dbe57 zlib is now optional. 2021-02-27 12:26:08 +11:00
Jeffrey H. Johnson
b7c6ee7b43 Fix punctuatio and typo in README.md. 
Some very minor fixes, missing 's' and punctuation.
 2021-02-27 12:26:08 +11:00
Damien Miller
6248b86074 Revert "ssh: optional bind interface if bind address specified." 
This reverts commit 5a878a71a3.

Apologies - I accidentally pushed this.
 2021-02-26 16:45:50 +11:00
Damien Miller
493339a940 detech BSD libc hash functions in libbsd / libmd 
Some Linux distributions are shipping the BSD-style hashing functions
(e.g. SHA256Update) in libbsd and/or libmd. Detect this situation to
avoid header/replacement clashes later. ok dtucker@
 2021-02-26 15:46:47 +11:00
Dmitrii Turlupov
5a878a71a3 ssh: optional bind interface if bind address specified. 
Allows the -b and -B options to be used together.
For example, when the interface is in the VRF.
 2021-02-26 15:46:47 +11:00
djm@openbsd.org
1fe4d70df9 upstream: remove this KEX fuzzer; it's awkward to use and doesn't play 
nice with popular fuzzing drivers like libfuzzer. AFAIK nobody has used it
but me.

OpenBSD-Regress-ID: cad919522b3ce90c147c95abaf81b0492ac296c9
 2021-02-26 15:23:42 +11:00
Darren Tucker
24a3a67bd7 Remove macos-11.00 PAM test target too. 
These are failing apparently due to some kind of infrastructure problem,
making it look like every commit is busted.
 2021-02-26 11:50:37 +11:00
djm@openbsd.org
473201783f upstream: a bit more debugging behind #ifdef DEBUG_SK 
OpenBSD-Commit-ID: d9fbce14945721061cb322f0084c2165d33d1993
 2021-02-26 11:18:26 +11:00
Darren Tucker
fd9fa76a34 Remove macos-11.0 from the test target list. 
It has been consistently failing for the past few days with a github
actions internal error.
 2021-02-26 01:15:10 +11:00
Philip Hands
476ac8e9d3 tidy the $INSTALLKEY_SH code layout a little 
SSH-Copy-ID-Upstream: 78178aa5017222773e4c23d9001391eeaeca8983
 2021-02-26 01:06:15 +11:00
Jakub Jelen
983e05ef3b if unable to add a missing newline, fail 
SSH-Copy-ID-Upstream: 76b25e18f55499ea9edb4c4d6dc4a80bebc36d95
 2021-02-26 01:06:15 +11:00
Philip Hands
3594b3b015 use $AUTH_KEY_DIR, now that we have it 
since that was a change made since jjelen's commit was written

also, quote the variables

SSH-Copy-ID-Upstream: 588cd8e5cbf95f3443d92b9ab27c5d73ceaf6616
 2021-02-26 01:06:15 +11:00
Jakub Jelen
333e25f7bc restorecon the correct directory 
if using different path for authorized_keys file

SSH-Copy-ID-Upstream: 791a3df47b48412c726bff6f7b1d190721e65d51
 2021-02-26 01:06:15 +11:00
djm@openbsd.org
9beeab8a37 upstream: s/PubkeyAcceptedKeyTypes/PubkeyAcceptedAlgorithms/ 
OpenBSD-Regress-ID: 3dbc005fa29f69dc23d97e433b6dffed6fe7cb69
 2021-02-25 15:15:46 +11:00
dtucker@openbsd.org
2dd9870c16 upstream: Rename pubkeyacceptedkeytypes to pubkeyacceptedalgorithms in 
test to match change to config-dump output.

OpenBSD-Regress-ID: 74c9a4ad50306be873d032819d5e55c24eb74d5d
 2021-02-25 10:31:47 +11:00
dtucker@openbsd.org
b9225c3a1c upstream: Put obsolete aliases for hostbasedalgorithms and 
pubkeyacceptedalgorithms after their current names so that the config-dump
mode finds and uses the current names.  Spotted by Phil Pennock.

OpenBSD-Commit-ID: 5dd10e93cccfaff3aaaa09060c917adff04a9b15
 2021-02-25 00:28:45 +11:00
djm@openbsd.org
8b8b60542d upstream: lots more s/key types/signature algorithms/ mostly in 
HostbasedAcceptedAlgorithms and HostKeyAlgorithms; prompted by Jakub Jelen

OpenBSD-Commit-ID: 3f719de4385b1a89e4323b2549c66aae050129cb
 2021-02-24 08:56:22 +11:00
djm@openbsd.org
0aeb508aaa upstream: Correct reference to signature algorithms as keys; from 
Jakub Jelen

OpenBSD-Commit-ID: 36f7ecee86fc811aa0f8e21e7a872eee044b4be5
 2021-02-24 08:56:22 +11:00
Darren Tucker
f186a020f2 Add a couple more test VMs. 2021-02-23 16:05:22 +11:00
Darren Tucker
ffcdd3d90e Valgrind test: split and move up list. 
Since the valgrind test takes so long it approaches the limit allowed by
github, move it to the head of the list so it's the first one started and
split the longest tests out into a second instance that runs concurrently
with the first.
 2021-02-23 11:18:49 +11:00
djm@openbsd.org
c3b1636770 upstream: warn when the user specifies a ForwardAgent path that does 
not exist and exit if ExitOnForwardFailure is set; bz3264

OpenBSD-Commit-ID: 72f7875865e723e464c71bf8692e83110699bf26
 2021-02-23 11:09:07 +11:00
Darren Tucker
5fcb051494 Disable rlimit sandbox, doesn't work with valgrind 
Only run regress tests, runing unit tests as well makes it run longer
than allowed y github.
 2021-02-21 15:39:01 +11:00
Darren Tucker
bb0b9bf453 Upload valgrind logs on failure. 2021-02-20 13:29:41 +11:00
Darren Tucker
ebb3b75e97 Rename "vm" to "os" in selfhosted to match c-cpp. 
Should make it easier to share code or maybe merge at some point.
 2021-02-19 22:20:00 +11:00
Darren Tucker
76c0be0fe0 Upload regress failure logs in c-cpp too. 2021-02-19 22:19:38 +11:00
Darren Tucker
8751b6c313 Comment out Solaris 64bit PAM build... 
until I can figure out why it's failing.
 2021-02-19 22:13:36 +11:00
Darren Tucker
e9f6d563c0 Actually run Valgrind tests. 2021-02-19 10:20:17 +11:00
Darren Tucker
41d232e226 Add test against Valgrind. 2021-02-19 10:16:56 +11:00
Darren Tucker
e6528d91f1 Add fbsd12 test target. 2021-02-18 16:30:01 +11:00
Darren Tucker
6506cb2798 Remove unused arg. 2021-02-18 15:21:13 +11:00
Darren Tucker
93c31a6239 Add DEBUG_SK to kitchensink builds. 2021-02-18 14:54:07 +11:00
Darren Tucker
65085740d3 Add bbone test target (arm32). 2021-02-18 14:53:14 +11:00
djm@openbsd.org
63238f5aed upstream: Fix the hostkeys rotation extension documentation 
The documentation was lacking the needed want-reply field in the initial
global request.

https://github.com/openssh/openssh-portable/pull/218 by dbussink

OpenBSD-Commit-ID: 051824fd78edf6d647a0b9ac011bf88e28775054
 2021-02-18 13:50:37 +11:00
djm@openbsd.org
34c5ef6e2d upstream: make names in function prototypes match those in 
definition from https://github.com/openssh/openssh-portable/pull/225 by
ZenithalHourlyRate

OpenBSD-Commit-ID: 7c736307bf3f2c7cb24d6f82f244eee959485acd
 2021-02-18 13:17:43 +11:00
djm@openbsd.org
88e3d4de31 upstream: unbreak SK_DEBUG builds 
from https://github.com/openssh/openssh-portable/pull/225 by
ZenithalHourlyRate

OpenBSD-Commit-ID: 28d7259ce1b04d025411464decfa2f1a097b43eb
 2021-02-18 13:17:43 +11:00
djm@openbsd.org
788cbc5b74 upstream: sftp-server: implement limits@openssh.com extension 
This is a simple extension that allows the server to clearly
communicate transfer limits it is imposing so the client doesn't
have to guess, or force the user to manually tune.  This is
particularly useful when an attempt to use too large of a value
causes the server to abort the connection.

Patch from Mike Frysinger; ok dtucker@

OpenBSD-Commit-ID: f96293221e5aa24102d9bf30e4f4ef04d5f4fb51
 2021-02-18 13:17:43 +11:00
Damien Miller
324449a68d support OpenSSL 3.x cipher IV API change 
OpenSSL renamed the "get current CIPHER_CTX" IV operation in 3.x.
This uses the new name if available.

https://github.com/openssl/openssl/issues/13411

bz#3238 ok dtucker@
 2021-02-18 12:06:25 +11:00