RepoMirrors/openssh
1
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2024-12-26 20:02:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,025 Commits 69 Branches 0 Tags 27 MiB
6480c63b75
Commit Graph

6025 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Darren Tucker
30359e19ec - djm@cvs.openbsd.org 2009/08/31 20:56:02 
[sftp-server.c]
     check correct variable for error message, spotted by martynas@
 2009-10-07 08:47:24 +11:00
Darren Tucker
893d73549d - djm@cvs.openbsd.org 2009/08/27 17:44:52 
[authfd.c ssh-add.c authfd.h]
     Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
     when the agent refuses the constrained add request. This was a useful
     migration measure back in 2002 when constraints were new, but just
     adds risk now.
     bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@
 2009-10-07 08:47:02 +11:00
Darren Tucker
6b286a4682 - djm@cvs.openbsd.org 2009/08/27 17:43:00 
[sftp-server.8]
     allow setting an explicit umask on the commandline to override whatever
     default the user has. bz#1229; ok dtucker@ deraadt@ markus@
 2009-10-07 08:46:21 +11:00
Darren Tucker
9bcd25b78b - djm@cvs.openbsd.org 2009/08/27 17:33:49 
[ssh-keygen.c]
     force use of correct hash function for random-art signature display
     as it was inheriting the wrong one when bubblebabble signatures were
     activated; bz#1611 report and patch from fwojcik+openssh AT besh.com;
     ok markus@
 2009-10-07 08:45:48 +11:00
Darren Tucker
7dc4850ce8 - djm@cvs.openbsd.org 2009/08/27 17:28:52 
[sftp-server.c]
     allow setting an explicit umask on the commandline to override whatever
     default the user has. bz#1229; ok dtucker@ deraadt@ markus@
 2009-10-07 08:44:42 +11:00
Darren Tucker
8ec4fd8e3c - dtucker@cvs.openbsd.org 2009/08/20 23:54:28 
[mux.c]
     subsystem_flag is defined in ssh.c so it's extern; ok djm
 2009-10-07 08:39:57 +11:00
Darren Tucker
b3b40a8b95 - jmc@cvs.openbsd.org 2009/08/19 04:56:03 
[sftp.1]
     ether -> either;
 2009-10-07 08:39:09 +11:00
Darren Tucker
05016b2f99 - djm@cvs.openbsd.org 2009/08/18 21:15:59 
[sftp.1]
     fix "get" command usage, spotted by jmc@
 2009-10-07 08:38:23 +11:00
Darren Tucker
1b0dd17537 - djm@cvs.openbsd.org 2009/08/18 18:36:21 
[sftp-client.h sftp.1 sftp-client.c sftp.c]
     recursive transfer support for get/put and on the commandline
     work mostly by carlosvsilvapt@gmail.com for the Google Summer of Code
     with some tweaks by me; "go for it" deraadt@
 2009-10-07 08:37:48 +11:00
Darren Tucker
1477ea162c - dtucker@cvs.openbsd.org 2009/08/16 23:29:26 
[sshd_config.5]
     Add PubkeyAuthentication to the list allowed in a Match block (bz #1577)
 2009-10-07 08:36:05 +11:00
Darren Tucker
e54a036219 - fgsch@cvs.openbsd.org 2009/08/15 18:56:34 
[auth.h]
     remove unused define. markus@ ok.
     (Id sync only, Portable still uses this.)
 2009-10-07 08:35:32 +11:00
Darren Tucker
c22f090a2f - djm@cvs.openbsd.org 2009/08/14 18:17:49 
[sftp-client.c]
     make the "get_handle: ..." error messages vaguely useful by allowing
     callers to specify their own error message strings.
 2009-10-07 08:24:19 +11:00
Darren Tucker
c07138e6f6 - jmc@cvs.openbsd.org 2009/08/13 13:39:54 
[sftp.1 sftp.c]
     sync synopsis and usage();
 2009-10-07 08:23:44 +11:00
Darren Tucker
282b4026cb - djm@cvs.openbsd.org 2009/08/13 01:11:19 
[sftp.1 sftp.c]
     Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
     add "-P port" to match scp(1). Fortunately, the -P option is only really
     used by our regression scripts.
     part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
     of Code work; ok deraadt markus
 2009-10-07 08:23:06 +11:00
Darren Tucker
adba1ba514 - jmc@cvs.openbsd.org 2009/08/12 06:31:42 
[sftp.1]
     sort options;
 2009-10-07 08:22:20 +11:00
Darren Tucker
46bbbe3326 - djm@cvs.openbsd.org 2009/08/12 00:13:00 
[sftp.c sftp.1]
     support most of scp(1)'s commandline arguments in sftp(1), as a first
     step towards making sftp(1) a drop-in replacement for scp(1).
     One conflicting option (-P) has not been changed, pending further
     discussion.
     Patch from carlosvsilvapt@gmail.com as part of his work in the
     Google Summer of Code
 2009-10-07 08:21:48 +11:00
Damien Miller
350666d300 - (djm) [Makefile.in] Mention readconf.o in ssh-keysign's make deps. 
spotted by des AT des.no
 2009-10-02 11:50:55 +10:00
Damien Miller
ea43742e77 pull in 5.3 release changes from branch: 
20090926
 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
         [contrib/suse/openssh.spec] Update for release
 - (djm) [README] update relnotes URL
 - (djm) [packet.c] Restore EWOULDBLOCK handling that got lost somewhere
 - (djm) Release 5.3p1
 2009-10-02 11:49:03 +10:00
Darren Tucker
e02b49a806 - (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X 
10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query).  Patch
   from jbasney at ncsa uiuc edu.
 2009-09-11 14:56:08 +10:00
Damien Miller
e5d5a17fe1 - (djm) [serverloop.c] Fix test for server-assigned remote forwarding port 
(-R 0:...); bz#1578, spotted and fix by gavin AT emf.net; ok dtucker@
 2009-09-09 11:07:28 +10:00
Darren Tucker
dad48e7a96 - (dtucker) [configure.ac] Bug #1639: use AC_PATH_PROG to search the path for 
krb5-config if it's not in the location specified by --with-kerberos5.
   Patch from jchadima at redhat.
 2009-09-01 18:26:00 +10:00
Darren Tucker
427adf1538 - (dtucker) [README.platform] Add text about development packages, based on 
text from Chris Pepper in bug #1631.
 2009-08-29 09:14:48 +10:00
Darren Tucker
ac9f1b9b89 - (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry. 2009-08-28 15:01:20 +10:00
Darren Tucker
86e30a0166 - (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer 
size a compile-time option and set it to 64k on Cygwin, since Corinna
   reports that it makes a significant difference to performance.  ok djm@
 2009-08-28 11:21:06 +10:00
Darren Tucker
3980b63631 - (dtucker) [channels.c configure.ac] Bug #1528: skip the tcgetattr call on 
the pty master on Solaris, since it never succeeds and can hang if large
    amounts of data is sent to the slave (eg a copy-paste).  Based on a patch
    originally from Doke Scott, ok djm@
 2009-08-28 11:02:37 +10:00
Damien Miller
7d4a2685f7 - (djm) [Makefile.in] bz#1505: Solaris make(1) doesn't accept make variables 
in argv, so pass them in the environment; ok dtucker@
 2009-08-28 10:47:38 +10:00
Damien Miller
0e26551f7f - (djm) [sftp-server.c] bz#1535: accept ENOSYS as a fallback error when 
attempting atomic rename(); ok dtucker@
 2009-08-28 10:43:13 +10:00
Damien Miller
8aac993af6 - (djm) [sshd_config.5] downgrade mention of login.conf to be an example 
and mention PAM as another provider for ChallengeResponseAuthentication;
   bz#1408; ok dtucker@
 2009-08-28 10:40:30 +10:00
Damien Miller
9c7bf8dfc8 downgrade mention of login.conf to be an example and mention PAM as 
another provider for ChallengeResponseAuthentication; bz#1408; ok dtucker@
 2009-08-28 10:27:08 +10:00
Darren Tucker
28b973ea26 - dtucker [auth-sia.c] Roll back the change for bug #1241 as it apparently 
causes problems in some Tru64 configurations.
 2009-08-28 10:16:44 +10:00
Darren Tucker
82edf23fff - (dtucker) [session.c openbsd-compat/port-aix.h] Bugs #1249 and #1567: move 
the setpcred call on AIX to immediately before the permanently_set_uid().
   Ensures that we still have privileges when we call chroot and
   pam_open_sesson.  Based on a patch from David Leonard.
 2009-08-20 16:20:50 +10:00
Darren Tucker
2a5588daeb - (dtucker) [includes.h] Bug #1634: do not include system glob.h if we're not 
using it since the type conflicts can cause problems on FreeBSD.  Patch
   from Jonathan Chen.
 2009-08-20 16:16:01 +10:00
Darren Tucker
b5d5ee1ab0 - (dtucker) [sshlogin.c openbsd-compat/port-aix.{c,h}] Bug #1595: make 
PrintLastLog work on AIX.  Based in part on a patch from Miguel Sanders.
 2009-08-17 09:40:00 +10:00
Darren Tucker
83d8f28336 - (dtucker) [configure.ac] Check for headers before libraries for openssl an 
zlib, which should make the errors slightly more meaningful on platforms
   where there's separate "-devel" packages for those.
 2009-08-17 09:35:22 +10:00
Tim Rice
caeb164984 - (tim) [contrib/cygwin/ssh-user-config] Change script to call correct error 
function. Patch from Corinna Vinschen.
 2009-07-29 07:21:13 -07:00
Darren Tucker
440089afe0 - (dtucker) [openbsd-compat/getrrsetbyname.c] Reduce answer buffer size so it 
fits into 16 bits to work around a bug in glibc's resolver where it masks
   off the buffer size at 16 bits.  Patch from Hauke Lampe, ok djm jakob.
 2009-07-13 11:38:23 +10:00
Darren Tucker
916fdda401 add credit for bug #1534 patch 2009-07-12 22:12:28 +10:00
Darren Tucker
622d5c561b - (dtucker) [auth-pam.c] Bug #1534: move the deletion of PAM credentials on 
logout to after the session close.  Patch from Anicka Bernathova, ok djm.
 2009-07-12 22:07:21 +10:00
Darren Tucker
8fdcba5caf - (dtucker [contrib/cygwin/ssh-{host,user}-config] Add license text. Patch 
from Corinna Vinschen.
 2009-07-12 21:58:42 +10:00
Darren Tucker
c4b22ca1c8 - (dtucker) [configure.ac] Include sys/param.h for the sys/mount.h test, 
prevents configure complaining on older BSDs.
 2009-07-12 21:56:29 +10:00
Darren Tucker
4d4fdc0f7d - (dtucker) [contrib/cygwin/ssh-host-config] better support for automated 
scripts and fix usage of eval.  Patch from Corinna Vinschen.
 2009-07-07 21:19:11 +10:00
Darren Tucker
de0c025e3c - stevesk@cvs.openbsd.org 2009/07/05 19:28:33 
[clientloop.c]
     only send SSH2_MSG_DISCONNECT if we're in compat20; from dtucker@
     ok deraadt@ markus@
 2009-07-06 07:17:35 +10:00
Darren Tucker
199b1340a8 - dtucker@cvs.openbsd.org 2009/07/02 02:11:47 
[ssh.c]
     allow for long home dir paths (bz #1615).  ok deraadt
     (based in part on a patch from jchadima at redhat)
 2009-07-06 07:16:56 +10:00
Darren Tucker
cd6b1a27cb - markus@cvs.openbsd.org 2009/06/30 14:54:40 
[version.h]
     crank version; ok deraadt
 2009-07-06 07:13:04 +10:00
Darren Tucker
71e4d54dc7 - andreas@cvs.openbsd.org 2009/06/27 09:35:06 
[readconf.h readconf.c]
     Add client option UseRoaming. It doesn't do anything yet but will
     control whether the client tries to use roaming if enabled on the
     server. From Martin Forssen.
     ok markus@
 2009-07-06 07:12:27 +10:00
Darren Tucker
466df21961 - andreas@cvs.openbsd.org 2009/06/27 09:32:43 
[roaming_common.c roaming.h]
     It may be necessary to retransmit some data when resuming, so add it
     to a buffer when roaming is enabled.
     Most of this code was written by Martin Forssen, maf at appgate dot com.
     ok markus@
 2009-07-06 07:11:52 +10:00
Darren Tucker
e841eb0654 - andreas@cvs.openbsd.org 2009/06/27 09:29:06 
[packet.h packet.c]
     packet_bacup_state() and packet_restore_state() will be used to
     temporarily save the current state ren resuming a suspended connection.
     ok markus@
 2009-07-06 07:11:13 +10:00
Darren Tucker
821d3dbe36 - dtucker@cvs.openbsd.org 2009/06/22 05:39:28 
[monitor_wrap.c monitor_mm.c ssh-keygen.c auth2.c gss-genr.c sftp-client.c]
     alphabetize includes; reduces diff vs portable and style(9).
     ok stevesk djm
     (Id sync only; these were already in order in -portable)
 2009-06-22 16:11:06 +10:00
Darren Tucker
828c96d48f - (dtucker) [roaming_common.c roaming_dummy.c] Wrap #include <inttypes.h> in 
ifdef.
 2009-06-21 22:22:08 +10:00
Darren Tucker
64cee36713 - (dtucker) [servconf.c sshd.c] More whitespace sync. 2009-06-21 20:26:17 +10:00