RepoMirrors/openssh
1
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2024-12-27 12:22:09 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,841 Commits 69 Branches 157 Tags 27 MiB
535b5e1721
Commit Graph

5356 Commits

Author SHA1 Message Date
Darren Tucker
bad5076bb5 - (dtucker) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2009/10/08 14:03:41
     [sshd_config readconf.c ssh_config.5 servconf.c sshd_config.5]
     disable protocol 1 by default (after a transition period of about 10 years)
     ok deraadt
 2009-10-11 21:51:08 +11:00
Darren Tucker
c182d99376 - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for 
dirent d_type and DTTOIF as we've switched OpenBSD to the more portable
   lstat.
 2009-10-11 21:50:20 +11:00
Darren Tucker
538738d861 - (dtucker) d_type is not mandated by POSIX, so add fallback code using 
stat(), needed on at least cygwin.
 2009-10-07 18:56:10 +11:00
Darren Tucker
4adeac764e - (dtucker) [configure.ac sftp-client.c] DOTTIF is in fs/ffs/dir.h on at 
least dragonflybsd.
 2009-10-07 15:49:48 +11:00
Darren Tucker
a25ab01845 - (dtucker) [regress/portnum.sh] Import new test. 2009-10-07 11:00:58 +11:00
Darren Tucker
b707a24382 - dtucker@cvs.openbsd.org 2009/10/06 23:51:49 
[regress/ssh2putty.sh]
     Add OpenBSD tag to make syncs easier
 2009-10-07 10:54:31 +11:00
Darren Tucker
c863895e0a - djm@cvs.openbsd.org 2009/08/20 18:43:07 
[ssh-com-sftp.sh]
     fix one sftp -D ... => sftp -P ... conversion that I missed; from Carlos
     Silva for Google Summer of Code
 2009-10-07 10:46:29 +11:00
Darren Tucker
ed6b0c5fc2 - djm@cvs.openbsd.org 2009/08/13 01:11:55 
[sftp-batch.sh sftp-badcmds.sh sftp.sh sftp-cmds.sh sftp-glob.sh]
     date: 2009/08/13 01:11:19;  author: djm;  state: Exp;  lines: +10 -7
     Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
     add "-P port" to match scp(1). Fortunately, the -P option is only really
     used by our regression scripts.
     part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
     of Code work; ok deraadt markus
 2009-10-07 10:43:57 +11:00
Darren Tucker
287b9329c5 - djm@cvs.openbsd.org 2009/08/13 00:57:17 
[regress/Makefile]
     regression test for port number parsing. written as part of the a2port
     change that went into 5.2 but I forgot to commit it at the time...
 2009-10-07 10:31:56 +11:00
Darren Tucker
7988553585 - dtucker@cvs.openbsd.org 2009/05/05 07:51:36 
[regress/multiplex.sh]
     Always specify ssh_config for multiplex tests: prevents breakage caused
     by options in ~/.ssh/config.  From Dan Peterson.
 2009-10-07 10:30:57 +11:00
Darren Tucker
7023d161d8 - djm@cvs.openbsd.org 2008/12/07 22:17:48 
[regress/addrmatch.sh]
     match string "passwordauthentication" only at start of line, not anywhere
     in sshd -T output
 2009-10-07 10:30:06 +11:00
Darren Tucker
695ed397a5 - djm@cvs.openbsd.org 2009/10/06 04:46:40 
[session.c]
     bz#1596: fflush(NULL) before exec() to ensure that everying (motd
     in particular) has made it out before the streams go away.
 2009-10-07 09:02:18 +11:00
Darren Tucker
759cb2a49a - grunk@cvs.openbsd.org 2009/10/01 11:37:33 
[dh.c]
     fix a cast
     ok djm@ markus@
 2009-10-07 09:01:50 +11:00
Darren Tucker
72473c6b09 - djm@cvs.openbsd.org 2009/09/01 14:43:17 
[ssh-agent.c]
     fix a race condition in ssh-agent that could result in a wedged or
     spinning agent: don't read off the end of the allocated fd_sets, and
     don't issue blocking read/write on agent sockets - just fall back to
     select() on retriable read/write errors. bz#1633 reported and tested
     by "noodle10000 AT googlemail.com"; ok dtucker@ markus@
 2009-10-07 09:01:03 +11:00
Darren Tucker
7bee06ab3b - djm@cvs.openbsd.org 2009/08/31 21:01:29 
[sftp-server.8]
     document -e and -h; prodded by jmc@
 2009-10-07 08:47:47 +11:00
Darren Tucker
30359e19ec - djm@cvs.openbsd.org 2009/08/31 20:56:02 
[sftp-server.c]
     check correct variable for error message, spotted by martynas@
 2009-10-07 08:47:24 +11:00
Darren Tucker
893d73549d - djm@cvs.openbsd.org 2009/08/27 17:44:52 
[authfd.c ssh-add.c authfd.h]
     Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
     when the agent refuses the constrained add request. This was a useful
     migration measure back in 2002 when constraints were new, but just
     adds risk now.
     bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@
 2009-10-07 08:47:02 +11:00
Darren Tucker
6b286a4682 - djm@cvs.openbsd.org 2009/08/27 17:43:00 
[sftp-server.8]
     allow setting an explicit umask on the commandline to override whatever
     default the user has. bz#1229; ok dtucker@ deraadt@ markus@
 2009-10-07 08:46:21 +11:00
Darren Tucker
9bcd25b78b - djm@cvs.openbsd.org 2009/08/27 17:33:49 
[ssh-keygen.c]
     force use of correct hash function for random-art signature display
     as it was inheriting the wrong one when bubblebabble signatures were
     activated; bz#1611 report and patch from fwojcik+openssh AT besh.com;
     ok markus@
 2009-10-07 08:45:48 +11:00
Darren Tucker
7dc4850ce8 - djm@cvs.openbsd.org 2009/08/27 17:28:52 
[sftp-server.c]
     allow setting an explicit umask on the commandline to override whatever
     default the user has. bz#1229; ok dtucker@ deraadt@ markus@
 2009-10-07 08:44:42 +11:00
Darren Tucker
8ec4fd8e3c - dtucker@cvs.openbsd.org 2009/08/20 23:54:28 
[mux.c]
     subsystem_flag is defined in ssh.c so it's extern; ok djm
 2009-10-07 08:39:57 +11:00
Darren Tucker
b3b40a8b95 - jmc@cvs.openbsd.org 2009/08/19 04:56:03 
[sftp.1]
     ether -> either;
 2009-10-07 08:39:09 +11:00
Darren Tucker
05016b2f99 - djm@cvs.openbsd.org 2009/08/18 21:15:59 
[sftp.1]
     fix "get" command usage, spotted by jmc@
 2009-10-07 08:38:23 +11:00
Darren Tucker
1b0dd17537 - djm@cvs.openbsd.org 2009/08/18 18:36:21 
[sftp-client.h sftp.1 sftp-client.c sftp.c]
     recursive transfer support for get/put and on the commandline
     work mostly by carlosvsilvapt@gmail.com for the Google Summer of Code
     with some tweaks by me; "go for it" deraadt@
 2009-10-07 08:37:48 +11:00
Darren Tucker
1477ea162c - dtucker@cvs.openbsd.org 2009/08/16 23:29:26 
[sshd_config.5]
     Add PubkeyAuthentication to the list allowed in a Match block (bz #1577)
 2009-10-07 08:36:05 +11:00
Darren Tucker
e54a036219 - fgsch@cvs.openbsd.org 2009/08/15 18:56:34 
[auth.h]
     remove unused define. markus@ ok.
     (Id sync only, Portable still uses this.)
 2009-10-07 08:35:32 +11:00
Darren Tucker
c22f090a2f - djm@cvs.openbsd.org 2009/08/14 18:17:49 
[sftp-client.c]
     make the "get_handle: ..." error messages vaguely useful by allowing
     callers to specify their own error message strings.
 2009-10-07 08:24:19 +11:00
Darren Tucker
c07138e6f6 - jmc@cvs.openbsd.org 2009/08/13 13:39:54 
[sftp.1 sftp.c]
     sync synopsis and usage();
 2009-10-07 08:23:44 +11:00
Darren Tucker
282b4026cb - djm@cvs.openbsd.org 2009/08/13 01:11:19 
[sftp.1 sftp.c]
     Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
     add "-P port" to match scp(1). Fortunately, the -P option is only really
     used by our regression scripts.
     part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
     of Code work; ok deraadt markus
 2009-10-07 08:23:06 +11:00
Darren Tucker
adba1ba514 - jmc@cvs.openbsd.org 2009/08/12 06:31:42 
[sftp.1]
     sort options;
 2009-10-07 08:22:20 +11:00
Darren Tucker
46bbbe3326 - djm@cvs.openbsd.org 2009/08/12 00:13:00 
[sftp.c sftp.1]
     support most of scp(1)'s commandline arguments in sftp(1), as a first
     step towards making sftp(1) a drop-in replacement for scp(1).
     One conflicting option (-P) has not been changed, pending further
     discussion.
     Patch from carlosvsilvapt@gmail.com as part of his work in the
     Google Summer of Code
 2009-10-07 08:21:48 +11:00
Damien Miller
350666d300 - (djm) [Makefile.in] Mention readconf.o in ssh-keysign's make deps. 
spotted by des AT des.no
 2009-10-02 11:50:55 +10:00
Damien Miller
ea43742e77 pull in 5.3 release changes from branch: 
20090926
 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
         [contrib/suse/openssh.spec] Update for release
 - (djm) [README] update relnotes URL
 - (djm) [packet.c] Restore EWOULDBLOCK handling that got lost somewhere
 - (djm) Release 5.3p1
 2009-10-02 11:49:03 +10:00
Darren Tucker
e02b49a806 - (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X 
10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query).  Patch
   from jbasney at ncsa uiuc edu.
 2009-09-11 14:56:08 +10:00
Damien Miller
e5d5a17fe1 - (djm) [serverloop.c] Fix test for server-assigned remote forwarding port 
(-R 0:...); bz#1578, spotted and fix by gavin AT emf.net; ok dtucker@
 2009-09-09 11:07:28 +10:00
Darren Tucker
dad48e7a96 - (dtucker) [configure.ac] Bug #1639: use AC_PATH_PROG to search the path for 
krb5-config if it's not in the location specified by --with-kerberos5.
   Patch from jchadima at redhat.
 2009-09-01 18:26:00 +10:00
Darren Tucker
427adf1538 - (dtucker) [README.platform] Add text about development packages, based on 
text from Chris Pepper in bug #1631.
 2009-08-29 09:14:48 +10:00
Darren Tucker
ac9f1b9b89 - (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry. 2009-08-28 15:01:20 +10:00
Darren Tucker
86e30a0166 - (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer 
size a compile-time option and set it to 64k on Cygwin, since Corinna
   reports that it makes a significant difference to performance.  ok djm@
 2009-08-28 11:21:06 +10:00
Darren Tucker
3980b63631 - (dtucker) [channels.c configure.ac] Bug #1528: skip the tcgetattr call on 
the pty master on Solaris, since it never succeeds and can hang if large
    amounts of data is sent to the slave (eg a copy-paste).  Based on a patch
    originally from Doke Scott, ok djm@
 2009-08-28 11:02:37 +10:00
Damien Miller
7d4a2685f7 - (djm) [Makefile.in] bz#1505: Solaris make(1) doesn't accept make variables 
in argv, so pass them in the environment; ok dtucker@
 2009-08-28 10:47:38 +10:00
Damien Miller
0e26551f7f - (djm) [sftp-server.c] bz#1535: accept ENOSYS as a fallback error when 
attempting atomic rename(); ok dtucker@
 2009-08-28 10:43:13 +10:00
Damien Miller
8aac993af6 - (djm) [sshd_config.5] downgrade mention of login.conf to be an example 
and mention PAM as another provider for ChallengeResponseAuthentication;
   bz#1408; ok dtucker@
 2009-08-28 10:40:30 +10:00
Darren Tucker
28b973ea26 - dtucker [auth-sia.c] Roll back the change for bug #1241 as it apparently 
causes problems in some Tru64 configurations.
 2009-08-28 10:16:44 +10:00
Darren Tucker
82edf23fff - (dtucker) [session.c openbsd-compat/port-aix.h] Bugs #1249 and #1567: move 
the setpcred call on AIX to immediately before the permanently_set_uid().
   Ensures that we still have privileges when we call chroot and
   pam_open_sesson.  Based on a patch from David Leonard.
 2009-08-20 16:20:50 +10:00
Darren Tucker
2a5588daeb - (dtucker) [includes.h] Bug #1634: do not include system glob.h if we're not 
using it since the type conflicts can cause problems on FreeBSD.  Patch
   from Jonathan Chen.
 2009-08-20 16:16:01 +10:00
Darren Tucker
b5d5ee1ab0 - (dtucker) [sshlogin.c openbsd-compat/port-aix.{c,h}] Bug #1595: make 
PrintLastLog work on AIX.  Based in part on a patch from Miguel Sanders.
 2009-08-17 09:40:00 +10:00
Darren Tucker
83d8f28336 - (dtucker) [configure.ac] Check for headers before libraries for openssl an 
zlib, which should make the errors slightly more meaningful on platforms
   where there's separate "-devel" packages for those.
 2009-08-17 09:35:22 +10:00
Tim Rice
caeb164984 - (tim) [contrib/cygwin/ssh-user-config] Change script to call correct error 
function. Patch from Corinna Vinschen.
 2009-07-29 07:21:13 -07:00
Darren Tucker
440089afe0 - (dtucker) [openbsd-compat/getrrsetbyname.c] Reduce answer buffer size so it 
fits into 16 bits to work around a bug in glibc's resolver where it masks
   off the buffer size at 16 bits.  Patch from Hauke Lampe, ok djm jakob.
 2009-07-13 11:38:23 +10:00
Darren Tucker
916fdda401 add credit for bug #1534 patch 2009-07-12 22:12:28 +10:00
Darren Tucker
622d5c561b - (dtucker) [auth-pam.c] Bug #1534: move the deletion of PAM credentials on 
logout to after the session close.  Patch from Anicka Bernathova, ok djm.
 2009-07-12 22:07:21 +10:00
Darren Tucker
8fdcba5caf - (dtucker [contrib/cygwin/ssh-{host,user}-config] Add license text. Patch 
from Corinna Vinschen.
 2009-07-12 21:58:42 +10:00
Darren Tucker
c4b22ca1c8 - (dtucker) [configure.ac] Include sys/param.h for the sys/mount.h test, 
prevents configure complaining on older BSDs.
 2009-07-12 21:56:29 +10:00
Darren Tucker
4d4fdc0f7d - (dtucker) [contrib/cygwin/ssh-host-config] better support for automated 
scripts and fix usage of eval.  Patch from Corinna Vinschen.
 2009-07-07 21:19:11 +10:00
Darren Tucker
de0c025e3c - stevesk@cvs.openbsd.org 2009/07/05 19:28:33 
[clientloop.c]
     only send SSH2_MSG_DISCONNECT if we're in compat20; from dtucker@
     ok deraadt@ markus@
 2009-07-06 07:17:35 +10:00
Darren Tucker
199b1340a8 - dtucker@cvs.openbsd.org 2009/07/02 02:11:47 
[ssh.c]
     allow for long home dir paths (bz #1615).  ok deraadt
     (based in part on a patch from jchadima at redhat)
 2009-07-06 07:16:56 +10:00
Darren Tucker
cd6b1a27cb - markus@cvs.openbsd.org 2009/06/30 14:54:40 
[version.h]
     crank version; ok deraadt
 2009-07-06 07:13:04 +10:00
Darren Tucker
71e4d54dc7 - andreas@cvs.openbsd.org 2009/06/27 09:35:06 
[readconf.h readconf.c]
     Add client option UseRoaming. It doesn't do anything yet but will
     control whether the client tries to use roaming if enabled on the
     server. From Martin Forssen.
     ok markus@
 2009-07-06 07:12:27 +10:00
Darren Tucker
466df21961 - andreas@cvs.openbsd.org 2009/06/27 09:32:43 
[roaming_common.c roaming.h]
     It may be necessary to retransmit some data when resuming, so add it
     to a buffer when roaming is enabled.
     Most of this code was written by Martin Forssen, maf at appgate dot com.
     ok markus@
 2009-07-06 07:11:52 +10:00
Darren Tucker
e841eb0654 - andreas@cvs.openbsd.org 2009/06/27 09:29:06 
[packet.h packet.c]
     packet_bacup_state() and packet_restore_state() will be used to
     temporarily save the current state ren resuming a suspended connection.
     ok markus@
 2009-07-06 07:11:13 +10:00
Darren Tucker
821d3dbe36 - dtucker@cvs.openbsd.org 2009/06/22 05:39:28 
[monitor_wrap.c monitor_mm.c ssh-keygen.c auth2.c gss-genr.c sftp-client.c]
     alphabetize includes; reduces diff vs portable and style(9).
     ok stevesk djm
     (Id sync only; these were already in order in -portable)
 2009-06-22 16:11:06 +10:00
Darren Tucker
828c96d48f - (dtucker) [roaming_common.c roaming_dummy.c] Wrap #include <inttypes.h> in 
ifdef.
 2009-06-21 22:22:08 +10:00
Darren Tucker
64cee36713 - (dtucker) [servconf.c sshd.c] More whitespace sync. 2009-06-21 20:26:17 +10:00
Darren Tucker
43e7a358ff - (dtucker) [auth2-jpake.c auth2.c canohost.h session.c] Whitespace and 
header-order changes to reduce diff vs OpenBSD.
 2009-06-21 19:50:08 +10:00
Darren Tucker
e6b590e8d4 - dtucker@cvs.openbsd.org 2009/06/21 09:04:03 
[roaming.h roaming_common.c roaming_dummy.c]
     Add  tags for the benefit of the sync scripts
     Also: pull in the changes for 1.1->1.2 missed in the previous sync.
 2009-06-21 19:08:48 +10:00
Darren Tucker
6ae35ac576 - dtucker@cvs.openbsd.org 2009/06/21 07:37:15 
[kexdhs.c kexgexs.c]
     abort if key_sign fails, preventing possible null deref.  Based on report
     from Paolo Ganci, ok markus@ djm@
 2009-06-21 19:00:20 +10:00
Darren Tucker
7b935c79f4 - andreas@cvs.openbsd.org 2009/06/12 20:58:32 
[packet.c]
     Move some more statics into session_state
     ok markus@ djm@
 2009-06-21 18:59:36 +10:00
Darren Tucker
b422afa41f - andreas@cvs.openbsd.org 2009/06/12 20:43:22 
[monitor.c packet.c]
     Fix warnings found by chl@ and djm@ and change roaming_atomicio's
     return type to match atomicio's
     Diff from djm@, ok markus@
 2009-06-21 18:58:46 +10:00
Darren Tucker
c5564e1c4c - andreas@cvs.openbsd.org 2009/05/28 16:50:16 
[sshd.c packet.c serverloop.c monitor_wrap.c clientloop.c sshconnect.c
     monitor.c Added roaming.h roaming_common.c roaming_dummy.c]
     Keep track of number of bytes read and written. Needed for upcoming
     changes. Most code from Martin Forssen, maf at appgate dot com.
     ok markus@
     Also, applied appropriate changes to Makefile.in
 2009-06-21 18:53:53 +10:00
Darren Tucker
1cc55d7a60 - andreas@cvs.openbsd.org 2009/05/28 16:50:16 
[sshd.c packet.c serverloop.c monitor_wrap.c clientloop.c sshconnect.c
     monitor.c]
     Keep track of number of bytes read and written. Needed for upcoming
     changes. Most code from Martin Forssen, maf at appgate dot com.
     ok markus@
 2009-06-21 18:17:19 +10:00
Darren Tucker
761c38918a - andreas@cvs.openbsd.org 2009/05/27 06:38:16 
[sshconnect.h sshconnect.c]
     Un-static ssh_exchange_identification(), part of a larger change from
     Martin Forssen and needed for upcoming changes.
     ok markus@
 2009-06-21 18:16:26 +10:00
Darren Tucker
5b48cdd882 - andreas@cvs.openbsd.org 2009/05/27 06:36:07 
[packet.h packet.c]
     Add packet_put_int64() and packet_get_int64(), part of a larger change
     from Martin Forssen.
 2009-06-21 18:15:25 +10:00
Darren Tucker
12b4a6504b - andreas@cvs.openbsd.org 2009/05/27 06:34:36 
[kex.c kex.h]
     Move the KEX_COOKIE_LEN define to kex.h
     ok markus@
 2009-06-21 18:14:48 +10:00
Darren Tucker
39c7632c1b - andreas@cvs.openbsd.org 2009/05/27 06:33:39 
[clientloop.c]
     Send SSH2_MSG_DISCONNECT when the client disconnects. From a larger
     change from Martin Forssen, maf at appgate dot com.
     ok markus@
 2009-06-21 18:13:57 +10:00
Darren Tucker
f7288d77e4 - andreas@cvs.openbsd.org 2009/05/27 06:31:25 
[canohost.h canohost.c]
     Add clear_cached_addr(), needed for upcoming changes allowing the peer
     address to change.
     ok markus@
 2009-06-21 18:12:20 +10:00
Darren Tucker
51dbe503bf - stevesk@cvs.openbsd.org 2009/04/21 15:13:17 
[sshd_config.5]
     clarify we cd to user's home after chroot; ok markus@ on
     earlier version; tweaks and ok jmc@
 2009-06-21 17:56:51 +10:00
Darren Tucker
f92077f05c - jmc@cvs.openbsd.org 2009/04/18 18:39:10 
[sshd_config.5]
     tweak previous; ok stevesk
 2009-06-21 17:56:25 +10:00
Darren Tucker
00fcd719a5 - stevesk@cvs.openbsd.org 2009/04/17 19:40:17 
[sshd_config.5]
     clarify that even internal-sftp needs /dev/log for logging to work; ok
     markus@
 2009-06-21 17:56:00 +10:00
Darren Tucker
ac46a915e8 - stevesk@cvs.openbsd.org 2009/04/17 19:23:06 
[session.c]
     use INTERNAL_SFTP_NAME for setproctitle() of in-process sftp-server;
     ok djm@ markus@
 2009-06-21 17:55:23 +10:00
Darren Tucker
3b59dfa161 - jj@cvs.openbsd.org 2009/04/14 21:10:54 
[servconf.c]
     Fixed a few the-the misspellings in comments. Skipped a bunch in
     binutils,gcc and so on. ok jmc@
 2009-06-21 17:54:47 +10:00
Darren Tucker
b62f1a856d - stevesk@cvs.openbsd.org 2009/04/14 16:33:42 
[sftp-server.c]
     remove unused option character from getopt() optstring; ok markus@
 2009-06-21 17:53:48 +10:00
Darren Tucker
af501cfce4 - stevesk@cvs.openbsd.org 2009/04/13 19:07:44 
[sshd_config.5]
     fix possessive; ok djm@
 2009-06-21 17:53:04 +10:00
Darren Tucker
5837b51aec - sobrado@cvs.openbsd.org 2009/03/26 08:38:39 
[sftp-server.8 sshd.8 ssh-agent.1]
     fix a few typographical errors found by spell(1).
     ok dtucker@, jmc@
 2009-06-21 17:52:27 +10:00
Darren Tucker
9013323644 - tobias@cvs.openbsd.org 2009/03/23 19:38:04 
[ssh-agent.c]
     My previous commit didn't fix the problem at all, so stick at my first
     version of the fix presented to dtucker.
     Issue notified by Matthias Barkhoff (matthias dot barkhoff at gmx dot de).
     ok dtucker
 2009-06-21 17:50:15 +10:00
Darren Tucker
a0964504e1 - tobias@cvs.openbsd.org 2009/03/23 08:31:19 
[ssh-agent.c]
     Fixed a possible out-of-bounds memory access if the environment variable
     SHELL is shorter than 3 characters.
     with input by and ok dtucker
 2009-06-21 17:49:36 +10:00
Darren Tucker
3a6a51f387 - jmc@cvs.openbsd.org 2009/03/19 15:15:09 
[ssh.1]
     for "Ciphers", just point the reader to the keyword in ssh_config(5), just
     as we do for "MACs": this stops us getting out of sync when the lists
     change;
     fixes documentation/6102, submitted by Peter J. Philipp
     alternative fix proposed by djm
     ok markus
 2009-06-21 17:48:52 +10:00
Darren Tucker
72efd74d2f - (dtucker) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2009/03/17 21:37:00
     [ssh.c]
     pass correct argv[0] to openlog(); ok djm@
 2009-06-21 17:48:00 +10:00
Darren Tucker
3278062bf3 - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t 
is a struct with a __val member.  Fixes build on, eg, Redhat 6.2.
 2009-06-16 16:11:02 +10:00
Darren Tucker
a422d9756e - (dtucker) [sshlogin.c] Move the NO_SSH_LASTLOG #ifndef line to include 
variable declarations.  Should prevent unused warnings anywhere it's set
   (only Crays as far as I can tell) and be a no-op everywhere else.
 2009-05-04 12:52:47 +10:00
Tim Rice
a74000eb9e - (tim) [configure.ac] Remove setting IP_TOS_IS_BROKEN for Cygwin. The problem 
that setsockopt(IP_TOS) doesn't work on Cygwin has been fixed since 2005.
   Based on patch from vinschen at redhat com.
 2009-03-18 11:25:02 -07:00
Darren Tucker
9d86e5d570 - (dtucker) [auth-passwd.c auth1.c auth2-kbdint.c auth2-none.c auth2-passwd.c 
auth2-pubkey.c session.c openbsd-compat/bsd-cygwin_util.{c,h}
   openbsd-compat/daemon.c] Remove support for Windows 95/98/ME and very old
   version of Cygwin.  Patch from vinschen at redhat com.
 2009-03-08 11:40:27 +11:00
Darren Tucker
3e7e15f1bd - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] 
EVP_DigestUpdate does not exactly match the other OLD_EVP functions (eg
   in openssl 0.9.6) so add an explicit test for it.
 2009-03-07 22:22:35 +11:00
Darren Tucker
30ed668de0 - (dtucker) [configure.ac] Missing comma in type list. 2009-03-07 18:06:22 +11:00
Darren Tucker
ccfee05882 - (dtucker) [configure.ac defines.h] Check for in_port_t and typedef if needed. 2009-03-07 12:32:22 +11:00
Darren Tucker
8aae6ff0d9 - (dtucker) [schnorr.c openbsd-compat/openssl-compat.{c,h}] Add 
EVP_DigestUpdate to the OLD_EVP compatibility functions and tell schnorr.c
   to use them.  Allows building with older OpenSSL versions.
 2009-03-07 12:01:47 +11:00
Darren Tucker
558d6ca949 - (dtucker) [contrib/aix/buildbff.sh] Only try to rename ssh_prng_cmds if it 
exists (it's not created if OpenSSL's PRNG is self-seeded, eg if the OS
   has a /dev/random).
 2009-03-07 10:22:10 +11:00
Damien Miller
447e387872 - djm@cvs.openbsd.org 2009/03/05 11:30:50 
[uuencode.c]
     document what these functions do so I don't ever have to recuse into
     b64_pton/ntop to remember their return values
 2009-03-06 00:58:39 +11:00
Damien Miller
cee8523314 - djm@cvs.openbsd.org 2009/03/05 07:18:19 
[auth2-jpake.c jpake.c jpake.h monitor_wrap.c monitor_wrap.h schnorr.c]
     [sshconnect2.c]
     refactor the (disabled) Schnorr proof code to make it a little more
     generally useful
 2009-03-06 00:58:22 +11:00
Damien Miller
faec50b554 - (djm) Release openssh-5.2p1 2009-02-23 11:12:29 +11:00