RepoMirrors/openssh
1
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2024-12-21 01:20:00 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,200 Commits 69 Branches 157 Tags 27 MiB
852472a54b
Commit Graph

557 Commits

Author SHA1 Message Date
Darren Tucker
eab5f0df90 - (dtucker) [Makefile configure.ac regress/Makefile regress/keytype.sh] 
Import recent changes to regress/Makefile, pass a flag to enable ECC tests
   from configure through to regress/Makefile and use it in the tests.
 2010-11-05 18:23:38 +11:00
Darren Tucker
97528353c2 - (dtucker) [configure.ac platform.{c,h} session.c 
openbsd-compat/port-solaris.{c,h}] Bug #1824: Add Solaris Project support.
   Patch from cory.erickson at csu mnscu edu with a bit of rework from me.
   ok djm@
 2010-11-05 12:03:05 +11:00
Damien Miller
1f78980099 - (djm) [configure.ac] Use = instead of == in shell tests. Patch from 
dr AT vasco.com
 2010-10-11 22:35:22 +11:00
Damien Miller
a6e121aaa0 - djm@cvs.openbsd.org 2010/09/25 09:30:16 
[sftp.c configure.ac openbsd-compat/glob.c openbsd-compat/glob.h]
     make use of new glob(3) GLOB_KEEPSTAT extension to save extra server
     rountrips to fetch per-file stat(2) information.
     NB. update openbsd-compat/ glob(3) implementation from OpenBSD libc to
     match.
 2010-10-07 21:39:17 +11:00
Damien Miller
aa18063baf - matthew@cvs.openbsd.org 2010/09/24 13:33:00 
[misc.c misc.h configure.ac openbsd-compat/openbsd-compat.h]
     [openbsd-compat/timingsafe_bcmp.c]
     Add timingsafe_bcmp(3) to libc, mention that it's already in the
     kernel in kern(9), and remove it from OpenSSH.
     ok deraadt@, djm@
     NB. re-added under openbsd-compat/ for portable OpenSSH
 2010-10-07 21:25:27 +11:00
Damien Miller
6af914a15c - (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c] 
[kexecdhc.c kexecdhs.c key.c key.h myproposal.h packet.c readconf.c]
   [ssh-agent.c ssh-ecdsa.c ssh-keygen.c ssh.c] Disable ECDH and ECDSA on
   platforms that don't have the requisite OpenSSL support. ok dtucker@
 2010-09-10 11:39:26 +10:00
Darren Tucker
aa74f6754a - (dtucker) [configure.ac openbsd-compat/Makefile.in 
openbsd-compat/openbsd-compat.h openbsd-compat/strptime.c] Add strptime to
   the compat library which helps on platforms like old IRIX.  Based on work
   by djm, tested by Tom Christensen.
 2010-08-16 13:15:23 +10:00
Darren Tucker
9f8703b573 - (dtucker) [configure.ac] Bug #1756: Check for the existence of a lib64 dir 
in the openssl install directory (some newer openssl versions do this on at
   least some amd64 platforms).
 2010-04-23 11:12:06 +10:00
Darren Tucker
627337d95b - (dtucker) [configure.ac] Put the check for the existence of getaddrinfo 
back so we disable the IPv6 tests if we don't have it.
 2010-04-10 22:58:01 +10:00
Darren Tucker
261d93a5cf - (dtucker) [configure.ac defines.h loginrec.c logintest.c] Bug #1732: enable 
utmpx support on FreeBSD where possible.  Patch from Ed Schouten, ok djm@
 2010-04-09 18:13:27 +10:00
Darren Tucker
c4ccb12ee4 - (dtucker) [configure.ac] Bug #1744: use pkg-config for libedit flags if we 
have it and the path is not provided to --with-libedit.  Based on a patch
   from Iain Morgan.
 2010-04-09 14:04:35 +10:00
Darren Tucker
a83d90fbab - (dtucker) [configure.ac] Bug #1741: Add section for Haiku, patch originally 
by Ingo Weinhold via Scott McCreary, ok djm@
 2010-03-26 10:27:33 +11:00
Darren Tucker
c9fe39b1a4 - (dtucker) [configure.ac] Use a proper AC_CHECK_DECL for BROKEN_GETADDRINFO 
so setting it in CFLAGS correctly skips IPv6 tests.
 2010-03-09 20:42:30 +11:00
Damien Miller
9527f228ae - (djm) [configure.ac] set -fno-strict-aliasing for gcc4; ok dtucker@ 2010-03-05 15:04:35 +11:00
Damien Miller
b3c9f78711 - (djm) [configure.ac] Enable PKCS#11 support only when we find a working 
dlopen()
 2010-02-12 10:11:34 +11:00
Damien Miller
d8f6002272 - (djm) [INSTALL Makefile.in README.smartcard configure.ac scard-opensc.c] 
[scard.c scard.h pkcs11.h scard/Makefile.in scard/Ssh.bin.uu scard/Ssh.java]
   Remove obsolete smartcard support
 2010-02-12 09:34:22 +11:00
Damien Miller
7ea845e48d - markus@cvs.openbsd.org 2010/02/08 10:50:20 
[pathnames.h readconf.c readconf.h scp.1 sftp.1 ssh-add.1 ssh-add.c]
     [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config.5]
     replace our obsolete smartcard code with PKCS#11.
        ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf
     ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11
     provider (shared library) while ssh-agent(1) delegates PKCS#11 to
     a forked a ssh-pkcs11-helper process.
     PKCS#11 is currently a compile time option.
     feedback and ok djm@; inspired by patches from Alon Bar-Lev
`
 2010-02-12 09:21:02 +11:00
Damien Miller
1d2bfc4118 - (djm) add -lselinux to LIBS before calling AC_CHECK_FUNCS for 
getseuserbyname; patch from calebcase AT gmail.com via
   cjwatson AT debian.org
 2010-02-10 10:19:29 +11:00
Tim Rice
6761c7417d - (tim) [configure.ac] Due to constraints in Windows Sockets in terms of 
socket inheritance, reduce the default SO_RCVBUF/SO_SNDBUF buffer size
   in Cygwin to 65535. Patch from Corinna Vinschen.
 2010-01-22 10:25:15 -08:00
Tim Rice
641ebf1f86 - (tim) [configure.ac] Use the C99-conforming functions snprintf() and 
vsnprintf() named _xsnprintf() and _xvsnprintf() on SVR5 systems.
 2010-01-17 17:05:39 -08:00
Tim Rice
7ab7b9346d - (tim) [configure.ac] OpenServer 5 needs BROKEN_GETADDRINFO too. 2010-01-17 12:48:22 -08:00
Tim Rice
4a7db1ca2f - (tim) [configure.ac] Define BROKEN_GETADDRINFO on SVR5 systems. The native 
getaddrinfo() is too old and limited for addr_pton() in addrmatch.c.
 2010-01-16 12:23:25 -08:00
Darren Tucker
909a390bb8 - (dtucker) [configure.ac openbsd-compat/{Makefile.in,pwcache.c} Portability 
for pwcache.  Also, added caching of negative hits.
 2010-01-15 12:38:30 +11:00
Darren Tucker
8c65f646a9 - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] 
Remove hacks add for RoutingDomain in preparation for its removal.
 2010-01-10 10:26:57 +11:00
Darren Tucker
1f5e3dc274 - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] Make 
RoutingDomain an unsupported option on platforms that don't have it.
 2010-01-08 19:53:52 +11:00
Darren Tucker
c8802aac28 - (dtucker) Bug #1470: Disable OOM-killing of the listening sshd on Linux, 
based on a patch from Vaclav Ovsik and Colin Watson.  ok djm.
 2009-12-08 13:39:48 +11:00
Darren Tucker
1533311f4c - (dtucker) Bug #1160: use pkg-config for opensc config if it's available. 
Tested by Martin Paljak.
 2009-12-07 11:15:43 +11:00
Darren Tucker
c182d99376 - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for 
dirent d_type and DTTOIF as we've switched OpenBSD to the more portable
   lstat.
 2009-10-11 21:50:20 +11:00
Darren Tucker
538738d861 - (dtucker) d_type is not mandated by POSIX, so add fallback code using 
stat(), needed on at least cygwin.
 2009-10-07 18:56:10 +11:00
Darren Tucker
4adeac764e - (dtucker) [configure.ac sftp-client.c] DOTTIF is in fs/ffs/dir.h on at 
least dragonflybsd.
 2009-10-07 15:49:48 +11:00
Darren Tucker
e02b49a806 - (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X 
10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query).  Patch
   from jbasney at ncsa uiuc edu.
 2009-09-11 14:56:08 +10:00
Darren Tucker
dad48e7a96 - (dtucker) [configure.ac] Bug #1639: use AC_PATH_PROG to search the path for 
krb5-config if it's not in the location specified by --with-kerberos5.
   Patch from jchadima at redhat.
 2009-09-01 18:26:00 +10:00
Darren Tucker
ac9f1b9b89 - (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry. 2009-08-28 15:01:20 +10:00
Darren Tucker
86e30a0166 - (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer 
size a compile-time option and set it to 64k on Cygwin, since Corinna
   reports that it makes a significant difference to performance.  ok djm@
 2009-08-28 11:21:06 +10:00
Darren Tucker
3980b63631 - (dtucker) [channels.c configure.ac] Bug #1528: skip the tcgetattr call on 
the pty master on Solaris, since it never succeeds and can hang if large
    amounts of data is sent to the slave (eg a copy-paste).  Based on a patch
    originally from Doke Scott, ok djm@
 2009-08-28 11:02:37 +10:00
Darren Tucker
83d8f28336 - (dtucker) [configure.ac] Check for headers before libraries for openssl an 
zlib, which should make the errors slightly more meaningful on platforms
   where there's separate "-devel" packages for those.
 2009-08-17 09:35:22 +10:00
Darren Tucker
c4b22ca1c8 - (dtucker) [configure.ac] Include sys/param.h for the sys/mount.h test, 
prevents configure complaining on older BSDs.
 2009-07-12 21:56:29 +10:00
Darren Tucker
3278062bf3 - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t 
is a struct with a __val member.  Fixes build on, eg, Redhat 6.2.
 2009-06-16 16:11:02 +10:00
Tim Rice
a74000eb9e - (tim) [configure.ac] Remove setting IP_TOS_IS_BROKEN for Cygwin. The problem 
that setsockopt(IP_TOS) doesn't work on Cygwin has been fixed since 2005.
   Based on patch from vinschen at redhat com.
 2009-03-18 11:25:02 -07:00
Darren Tucker
3e7e15f1bd - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] 
EVP_DigestUpdate does not exactly match the other OLD_EVP functions (eg
   in openssl 0.9.6) so add an explicit test for it.
 2009-03-07 22:22:35 +11:00
Darren Tucker
30ed668de0 - (dtucker) [configure.ac] Missing comma in type list. 2009-03-07 18:06:22 +11:00
Darren Tucker
ccfee05882 - (dtucker) [configure.ac defines.h] Check for in_port_t and typedef if needed. 2009-03-07 12:32:22 +11:00
Damien Miller
9055172d03 - (djm) [configure.ac] support GNU/kFreeBSD and GNU/kOpensolaris 
systems; patch from Aurelien Jarno via rmh AT aybabtu.com
 2009-02-16 15:37:03 +11:00
Damien Miller
20e231f9f8 - (djm) [configure.ac loginrec.c] bz#1421: fix lastlog support for OSX. 
OSX provides a getlastlogxbyname function that automates the reading of
   a lastlog file. Also, the pututxline function will update lastlog so
   there is no need for loginrec.c to do it explicitly. Collapse some
   overly verbose code while I'm in there.
 2009-02-12 13:12:21 +11:00
Tim Rice
2676791c38 - (tim) [configure.ac] Move check_for_libcrypt_later=1 in *-*-sysv5*) section. 
OpenServer 6 doesn't need libcrypt.
 2009-01-07 20:50:08 -08:00
Tim Rice
351529ce30 - (tim) [configure.ac defines.h openbsd-compat/port-uw.c 
openbsd-compat/xcrypt.c] Add SECUREWARE support to OpenServer 6 SVR5 ABI.
   OK djm@ dtucker@
 2009-01-07 10:04:12 -08:00
Damien Miller
7df2e40074 - (djm) [configure.ac] bz#1538: better test for ProPolice/SSP: actually 
use some stack in main().
   Report and suggested fix from vapier AT gentoo.org
 2008-12-08 09:35:36 +11:00
Tim Rice
0f4d2c02f2 - (tim) [addrmatch.c configure.ac] Some platforms do not have sin6_scope_id 
member of sockaddr_in6. Also reported in Bug 1491 by David Leonard. OK and
   feedback by djm@
 2008-11-18 21:26:41 -08:00
Damien Miller
73193b3693 - (djm) [configure.ac] Add -Wformat-security to CFLAGS for gcc 3.x and 4.x 2008-07-09 21:07:19 +10:00
Damien Miller
ff2e492028 - (djm) [configure.ac] unbreak: remove extra closing brace 2008-07-05 09:52:03 +10:00
Damien Miller
20d1694719 - (djm) [atomicio.c configure.ac] Disable poll() fallback in atomiciov for 
Tru64. readv doesn't seem to be a comparable object there.
   bz#1386, patch from dtucker@ ok me
 2008-07-05 09:36:58 +10:00
Darren Tucker
330c93f68a - (dtucker) [configure.ac] Enable -fno-builtin-memset when using gcc. 2008-06-16 02:27:48 +10:00
Darren Tucker
30fd49e606 - (dtucker) [configure.ac] Bug #1276: avoid linking against libgssapi, which 
despite its name doesn't seem to implement all of GSSAPI.  Patch from
   Jan Engelhardt, sanity checked by Simon Wilkinson.
 2008-06-14 09:14:46 +10:00
Damien Miller
4401e45be6 - (djm) [channels.c configure.ac] 
Do not set SO_REUSEADDR on wildcard X11 listeners (X11UseLocalhost=no)
   bz#1464; ok dtucker
 2008-06-12 06:05:12 +10:00
Darren Tucker
5d37690a1f - (dtucker) [Makefile.in configure.ac regress/addrmatch.sh] Skip IPv6 
specific tests on platforms that don't do IPv6.
 2008-06-11 04:15:05 +10:00
Darren Tucker
77001384cc - (dtucker) [configure.ac defines.h sftp-client.c M sftp-server.c] Add a 
macro to convert fsid to unsigned long for platforms where fsid is a
   2-member array.
 2008-06-09 06:17:53 +10:00
Darren Tucker
598eaa6c0c - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c 
openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h
   openbsd-compat/bsd-statvfs.{c,h}] Add a null implementation of statvfs and
   fstatvfs and remove #defines around statvfs code.  ok djm@
 2008-06-09 03:32:29 +10:00
Darren Tucker
5b2e2ba9e4 - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c] Do not enable statvfs extensions on platforms that do not have statvfs. ok djm@ 2008-06-08 09:25:28 +10:00
Damien Miller
a7058ec7c0 - (djm) [configure.ac mux.c sftp.c openbsd-compat/Makefile.in] 
[openbsd-compat/fmt_scaled.c openbsd-compat/openbsd-compat.h]
   Fix compilation on Linux, including pulling in fmt_scaled(3)
   implementation from OpenBSD's libutil.
 2008-05-20 08:57:06 +10:00
Damien Miller
a4be7c23fd - (djm) [openbsd-compat/bsd-arc4random.c openbsd-compat/openbsd-compat.c] 
[configure.ac] Implement arc4random_buf(), import implementation of
     arc4random_uniform() from OpenBSD
 2008-05-19 14:47:37 +10:00
Damien Miller
5b1c8b3103 - (djm) [configure.ac] --with-selinux too 2008-03-27 12:33:07 +11:00
Damien Miller
da3155e159 - (djm) [configure.ac] fix alignment of --without-stackprotect description 2008-03-27 12:30:18 +11:00
Darren Tucker
fe1cf97ee8 - (dtucker) [configure.ac] Run stack-protector tests with -Werror to catch 
platforms where gcc understands the option but it's not supported (and
   thus generates a warning).
 2008-03-09 22:50:50 +11:00
Darren Tucker
b7918afddf - (dtucker) [configure.ac] It turns out gcc's -fstack-protector-all doesn't 
always work for all platforms and versions, so test what we can and
   add a configure flag to turn it of if needed.  ok djm@
 2008-03-09 11:34:23 +11:00
Darren Tucker
54e859f63d - (dtucker) [configure.ac] FreeBSD's glob() doesn't behave the way we expect 
either, so use our own.
 2008-03-02 21:52:27 +11:00
Darren Tucker
0f26b1386a - (dtucker) [configure.ac openbsd-compat/port-aix.{c,h}] Bug #1081: Implement 
getgrouplist via getgrset on AIX, rather than iterating over getgrent.
   This allows, eg, Match and AllowGroups directives to work with NIS and
   LDAP groups.
 2008-02-28 23:16:04 +11:00
Darren Tucker
e1c4c54211 - (dtucker) [configure.ac] Add -fstack-protector to LDFLAGS too, fixes 
linking problems on AIX with gcc 4.1.x.
 2008-02-28 15:01:13 +11:00
Darren Tucker
acada07b52 - (dtucker) [configure.ac audit-bsm.c] Bug #1420: Add a local implementation 
of aug_get_machine for systems that don't have their own (eg OS X, FreeBSD).    Help and testing from csjp at FreeBSD org, vgiffin at apple com.  ok djm@
 2008-02-25 21:05:04 +11:00
Darren Tucker
d4827ab50c - (dtucker) [configure.ac] Fix message for -fstack-protector-all test. 2008-01-02 18:08:45 +11:00
Darren Tucker
528d6fa10a - (dtucker) [configure.ac openbsd-compat/glob.{c,h}] Bug #1407: force use of 
builtin glob implementation on Mac OS X.  Based on a patch from
   vgiffin at apple.
 2007-12-31 21:29:26 +11:00
Darren Tucker
319b3d9b00 - (dtucker) [configure.ac] Enable -fstack-protector-all on systems where 
gcc supports it.  ok djm@
 2007-12-02 21:02:22 +11:00
Darren Tucker
bc1bd9dbe3 - (dtucker) [configure.ac defines.h] Shadow expiry does not work on QNX6 
so disable it for that platform.  From bacon at cs nyu edu.
 2007-09-27 07:03:20 +10:00
Darren Tucker
7c92a65a1d - (dtucker) [configure.ac atomicio.c] Fall back to <sys/poll.h> if we don't 
have <poll.h> (eq QNX).  From bacon at cs nyu edu.
 2007-09-27 07:00:09 +10:00
Tim Rice
0eeaf127b5 - (tim) [configure.ac] Autoconf didn't define HAVE_LIBIAF because we 
did a AC_CHECK_FUNCS within the AC_CHECK_LIB test.
 2007-09-10 16:24:17 -07:00
Darren Tucker
8acb3b665b - (dtucker) [configure.ac] Bug #1343: Set DISABLE_FD_PASSING for QNX6. From. 
Matt Kraai, ok djm@.
 2007-08-10 14:36:12 +10:00
Darren Tucker
febf0f5668 - (dtucker) [atomicio.c configure.ac openbsd-compat/Makefile.in 
openbsd-compat/bsd-poll.{c,h} openbsd-compat/openbsd-compat.h]
   Add an implementation of poll() built on top of select(2).  Code from
   OpenNTPD with changes suggested by djm.  ok djm@
 2007-06-25 22:15:12 +10:00
Damien Miller
34a176995f - (djm) [configure.ac umac.c] If platform doesn't provide swap32(3), then 
fallback to provided bit-swizzing functions
 2007-06-11 14:15:42 +10:00
Tim Rice
aa8954f1d9 20070509 
- (tim) [configure.ac] Bug #1287: Add missing test for ucred.h.
 2007-05-09 15:57:43 -07:00
Darren Tucker
dca0edff2f - (dtucker) [configure.ac defines.h] Have configure check for offsetof 
to prevent redefinition warnings.
 2007-04-29 15:06:44 +10:00
Darren Tucker
391de5c023 - (dtucker) [configure.ac defines.h] Prevent warnings about __attribute__ 
__nonnull__ for versions of GCC that don't support it.
 2007-04-29 14:49:21 +10:00
Darren Tucker
6d862a50db - (dtucker) [configure.ac defines.h] Have configure check for MAXSYMLINKS 
so we don't get redefinition warnings.
 2007-04-29 14:39:02 +10:00
Darren Tucker
cc40d5ecdf - (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Bug #1299: Use the 
platform's _res if it has one.  Should fix problem of DNSSEC record lookups
   on NetBSD as reported by Curt Sampson.
 2007-04-29 13:58:06 +10:00
Tim Rice
99203ec48b 20070326 
- (tim) [auth.c configure.ac defines.h session.c openbsd-compat/port-uw.c
   openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] Rework libiaf test/defines
   to account for IRIX having libiaf but not set_id(). Patch with & ok dtucker@
 2007-03-26 09:35:28 -07:00
Darren Tucker
20e9f976c1 - (dtucker) [Makefile.in configure.ac] Replace single-purpose LIBSELINUX, 
LIBWRAP and LIBPAM variables in Makefile with the general-purpose
   SSHDLIBS.  "I like" djm@
 2007-03-25 18:26:01 +10:00
Darren Tucker
164aa30e46 - (dtucker) [configure.ac openbsd-compat/bsd-getpeereid.c] Bug #1287: Use 
getpeerucred to implement getpeereid (currently only Solaris 10 and up).
   Patch by Jan.Pechanec at Sun.
 2007-03-21 21:39:57 +11:00
Damien Miller
9975e48349 - (djm) [configure.ac] add a --without-openssl-header-check option to 
configure, as some platforms (OS X) ship OpenSSL headers whose version
   does not match that of the shipping library. ok dtucker@
 2007-03-05 11:51:27 +11:00
Darren Tucker
573e3878b8 - (dtucker) [configure.ac] For Cygwin, read files in textmode (which allows 
CRLF as well as LF lineendings) and write in binary mode.  Patch from
   vinschen at redhat.com.
 2007-03-02 17:50:03 +11:00
Darren Tucker
adc947d5a5 - (dtucker) [configure.ac] Set put -lselinux into $LIBS while testing for 
SELinux functions so they're detected correctly.  Patch from pebenito at
   gentoo.org.
 2006-10-07 09:07:20 +10:00
Tim Rice
1cfab23b7f - (tim) [configure.ac] Move CHECK_HEADERS test before platform specific 
section so additional platform specific CHECK_HEADER tests will work
   correctly. Fixes "<net/if_tap.h> on FreeBSD" problem report by des AT des.no
   Feedback and "seems like a good idea" dtucker@
 2006-10-03 09:34:35 -07:00
Darren Tucker
5e8381ee86 - (dtucker) [configure.ac] Bug #1239: Fix configure test for OpenSSH engine 
support.  Patch from andrew.benham at thus net.
 2006-09-29 20:16:51 +10:00
Tim Rice
983b35b281 20060924 
- (tim) [configure.ac] Remove CFLAGS hack for UnixWare 1.x/2.x (added
   to rev 1.308) to work around broken gcc 2.x header file.
 2006-09-24 12:08:59 -07:00
Darren Tucker
0ee3cbfc51 - (dtucker) [configure.ac] Bug #1234: Put opensc libs into $LIBS rather than 
$LDFLAGS.  Patch from vapier at gentoo org.
 2006-09-23 16:25:19 +10:00
Darren Tucker
9216c37d60 - (dtucker) [configure.ac] On AIX, check to see if the compiler will allow 
macro redefinitions, and if not, remove "-qlanglvl=ansi" from the flags.
   Allows build out of the box with older VAC and XLC compilers.  Found by
   David Bronder and Bernhard Simon.
 2006-09-18 23:17:40 +10:00
Damien Miller
223897a01a - (djm) [Makefile.in buildpkg.sh.in configure.ac openssh.xml.in] 
Support SMF in Solaris Packages if enabled by configure. Patch from
   Chad Mynhier, tested by dtucker@
 2006-09-12 21:54:10 +10:00
Darren Tucker
57b2920ad8 - (dtucker) [configure.ac] Add -lcrypt to let DragonFly build OOTB. 2006-09-10 20:25:51 +10:00
Darren Tucker
6d0d6fbfdf - (dtucker) [configure.ac] The BSM header test needs time.h in some cases. 2006-09-09 01:05:21 +10:00
Tim Rice
b8f00193d8 - (tim) [configure.ac] s/BROKEN_UPDWTMP/BROKEN_UPDWTMPX/ on SCO OSR6 2006-09-06 18:11:29 -07:00
Darren Tucker
e1fe09968d - (dtucker) [configure.ac] s/AC_DEFINES/AC_DEFINE/ spotted by Roumen Petrov. 2006-09-05 07:53:38 +10:00
Darren Tucker
3e0891093a - (dtucker) [configure.ac] Define BROKEN_UPDWTMP on SCO OSR6 as the native 
updwdtmp seems to generate invalid wtmp entries.  From Roger Cornelius,
   ok djm@
 2006-09-04 22:37:41 +10:00
Darren Tucker
ed0b59218e - (dtucker) [configure.ac openbsd-compat/openbsd-compat.h] Check for 
declaration of writev(2) and declare it ourselves if necessary.  Makes
   the atomiciov() calls build on really old systems.  ok djm@
 2006-09-03 22:44:49 +10:00
Darren Tucker
096faecdea - (dtucker) [configure.ac includes.h openbsd-compat/glob.{c,h}] Explicitly 
test for GLOB_NOMATCH and use our glob functions if it's not found.
   Stops sftp from segfaulting when attempting to get a nonexistent file on
   Cygwin (previous versions of OpenSSH didn't use the native glob). Partly
   from and tested by Corinna Vinschen.
 2006-09-01 20:29:10 +10:00
Damien Miller
1b06dc30ad - (djm) [CREDITS LICENCE Makefile.in auth.c configure.ac includes.h ] 
[platform.c platform.h sshd.c openbsd-compat/Makefile.in]
   [openbsd-compat/openbsd-compat.h openbsd-compat/port-solaris.c]
   [openbsd-compat/port-solaris.h] Add support for Solaris process
   contracts, enabled with --use-solaris-contracts. Patch from Chad
   Mynhier, tweaked by dtucker@ and myself; ok dtucker@
 2006-08-31 03:24:41 +10:00
Darren Tucker
0eb810015f - (dtucker) [configure.ac] Remove errant "-". 2006-08-20 21:43:19 +10:00
Darren Tucker
639bbe8bfe - (dtucker) [configure.ac] Bug #1181: Explicitly test to see if OpenSSL 
(0.9.8a and presumably newer) requires -ldl to successfully link.
 2006-08-20 20:17:53 +10:00
Darren Tucker
3e6bde483d - (dtucker) [configure.ac] Relocate --with-pam parts in preparation for 
fixing bug #1181.  No changes yet.
 2006-08-20 20:03:50 +10:00
Darren Tucker
4ba387337c - (dtucker) [configure.ac] Save $LIBS during PAM library tests and restore 
afterward.  Removes the need to mangle $LIBS later to remove -lpam and -ldl.
 2006-08-20 19:55:02 +10:00
Damien Miller
bb59814cd6 - (djm) Disable sigdie() for platforms that cannot safely syslog inside 
a signal handler (basically all of them, excepting OpenBSD);
   ok dtucker@
 2006-08-19 08:38:23 +10:00
Darren Tucker
d018b2e9c8 - (dtucker) [configure.ac openbsd-compat/bsd-closefrom.c] Resync with 
closefrom.c from sudo.
 2006-08-18 18:51:20 +10:00
Darren Tucker
3083bc2b52 - (dtucker) [configure.ac openbsd-compat/bsd-closefrom.c] Use F_CLOSEM fcntl 
for closefrom() on AIX.  Pointed out by William Ahern.
 2006-08-17 19:35:49 +10:00
Darren Tucker
f1f4bdd1aa - (dtucker) [configure.ac] The "crippled AES" test does not work on recent 
versions of Solaris, so use AC_LINK_IFELSE to actually link the test program
   rather than just compiling it.  Spotted by dlg@.
 2006-08-04 19:44:23 +10:00
Darren Tucker
128a0894a5 - (dtucker) [configure.ac] OpenBSD needs <sys/types.h> before <sys/socket.h> 
for SHUT_RD.
 2006-07-12 19:02:56 +10:00
Darren Tucker
248469bc8d - (dtucker) [configure.ac defines.h] Only define SHUT_RD (and friends) and O_NONBLOCK 
if they're really needed.  Fixes build errors on HP-UX, old Linuxes and probably
   more.
 2006-07-12 14:14:31 +10:00
Darren Tucker
44c828fe29 - (dtucker) [configure.ac ssh-keygen.c openbsd-compat/bsd-openpty.c 
openbsd-compat/daemon.c] Add includes needed by open(2).  Conditionally
   include paths.h.  Fixes build error on Solaris.
 2006-07-11 18:00:06 +10:00
Darren Tucker
bdc121279f - (dtucker) [configure.ac] Try AIX blibpath test in different order when 
compiling with gcc.  gcc 4.1.x will accept (but ignore) -b flags so
   configure would not select the correct libpath linker flags.
 2006-07-06 11:56:25 +10:00
Darren Tucker
8b272ab09b - (dtucker) [configure.ac] Bug #1203: Add missing '[', which causes problems 
with autoconf 2.60.  Patch from vapier at gentoo.org.
 2006-06-27 11:20:28 +10:00
Darren Tucker
0249f93c4d - (dtucker) [configure.ac] Bug #1193: Define PASSWD_NEEDS_USERNAME on Solaris. 
Works around limitation in Solaris' passwd program for changing passwords
   where the username is longer than 8 characters.  ok djm@
 2006-06-24 12:10:07 +10:00
Darren Tucker
9afe115f0a - (dtucker) [channels.c configure.ac serverloop.c] Bug #1102: Around AIX 
4.3.3 ML3 or so, the AIX pty layer starting passing zero-length writes
   on the pty slave as zero-length reads on the pty master, which sshd
   interprets as the descriptor closing.  Since most things don't do zero
   length writes this rarely matters, but occasionally it happens, and when
   it does the SSH pty session appears to hang, so we add a special case for
   this condition.  ok djm@
 2006-06-23 21:24:12 +10:00
Darren Tucker
3eb4834489 - (dtucker) [README.platform configure.ac openbsd-compat/port-tun.c] Add 
tunnel support for Mac OS X/Darwin via a third-party tun driver.  Patch
   from reyk@, tested by anil@
 2006-06-23 21:05:12 +10:00
Damien Miller
73b42d2bb0 - (djm) [Makefile.in configure.ac session.c sshpty.c] 
[contrib/redhat/sshd.init openbsd-compat/Makefile.in]
   [openbsd-compat/openbsd-compat.h openbsd-compat/port-linux.c]
   [openbsd-compat/port-linux.h] Add support for SELinux, setting
   the execution and TTY contexts. based on patch from Daniel Walsh,
   bz #880; ok dtucker@
 2006-04-22 21:26:08 +10:00
Darren Tucker
c495301bf8 - (dtucker) [configure.ac md-sha256.c] NetBSD has sha2.h in 
/usr/include/crypto.  Hint from djm@.
 2006-03-16 08:14:34 +11:00
Darren Tucker
8bb9e2c900 - (dtucker) [configure.ac] login_cap.h requires sys/types.h on NetBSD. 2006-03-15 22:28:17 +11:00
Darren Tucker
486d95e6f7 - (dtucker) [configure.ac] Fix glob test conversion to AC_TRY_COMPILE 2006-03-15 21:31:39 +11:00
Damien Miller
41e364bcfa - (djm) [md-sha256.c configure.ac] md-sha256.c needs sha2.h if present 2006-03-15 13:12:41 +11:00
Damien Miller
af87af165f - (djm) [configure.ac defines.h kex.c md-sha256.c] 
[openbsd-compat/sha2.h openbsd-compat/openbsd-compat.h]
   [openbsd-compat/sha2.c] First stab at portability glue for SHA256
   KEX support, should work with libc SHA256 support or OpenSSL
   EVP_sha256 if present
 2006-03-15 13:02:28 +11:00
Darren Tucker
d1450dbe2a - (dtucker) [configure.ac] Bug #1171: Don't use printf("%lld", longlong) 
since not all platforms support it.  Instead, use internal equivalent while
   computing LLONG_MIN and LLONG_MAX.  Remove special case for alpha-dec-osf*
   as it's no longer required.  Tested by Bernhard Simon, ok djm@
 2006-03-13 19:06:51 +11:00
Darren Tucker
54b75fe742 - (dtucker) [configure.ac] Bug #1156: QNX apparently needs SSHD_ACQUIRES_CTTY 
patch from kraai at ftbfs.org.
 2006-02-26 12:31:48 +11:00
Darren Tucker
fabdb6c290 - (dtucker) [INSTALL configure.ac openbsd-compat/openssl-compat.{c,h}] 
Add optional enabling of OpenSSL's (hardware) Engine support, via
   configure --with-ssl-engine.  Based in part on a diff by michal at
   logix.cz.
 2006-02-20 20:17:35 +11:00
Darren Tucker
4881c371ce - (dtucker) [Makefile.in configure.ac, added openbsd-compat/regress/] 
Add first attempt at regress tests for compat library.  ok djm@
 2006-02-19 22:50:20 +11:00
Tim Rice
2f993465d4 - (tim) [configure.ac] Bug #1149. Disable /etc/default/login check for QNX. 2006-02-11 18:37:48 -08:00
Darren Tucker
988b3fd161 - (dtucker) [configure.ac] Typo in Ultrix and NewsOS sections (NEED_SETPRGP 
-> NEED_SETPGRP), reported by Berhard Simon.  ok tim@
 2006-02-08 22:11:27 +11:00
Tim Rice
ac9b0609e1 - (tim) [configure.ac] Remove unnecessary tests for net/if.h and 
netinet/in_systm.h. OK dtucker@.
 2006-02-05 11:27:10 -08:00
Tim Rice
70335a6b5f - (tim) [configure.ac] Bug #1149. Changes in QNX section only. Patch by 
kraai at ftbfs.org.
 2006-02-04 17:42:58 -08:00
Tim Rice
0daad78fab - (tim) [configure.ac] Add AC_REVISION. Add sys/time.h to lastlog.h test 
for Solaris. OK dtucker@.
 2006-02-04 17:33:55 -08:00
Tim Rice
fd80ddcb23 - (tim) [configure.ac] test for egrep (AC_PROG_EGREP) before first 
AC_CHECK_HEADERS test. Without it, if AC_CHECK_HEADERS is first run
   by a platform specific check, builtin standard includes tests will be
   skipped on the other platforms.
   Analysis and suggestion by vinschen at redhat.com, patch by dtucker@.
   OK tim@, djm@.
 2006-02-02 19:11:56 -08:00
Darren Tucker
cc7c212830 - (dtucker) [configure.ac] Bug #1148: Fix "crippled AES" test so that it 
works with picky compilers.  Patch from alex.kiernan at thus.net.
 2006-02-02 18:44:19 +11:00
Darren Tucker
fbea76400f - (dtucker) [configure.ac opensshd.init.in] Bug #1144: Use /bin/sh for the 
opensshd.init script interpretter if /sbin/sh does not exist.  ok tim@
 2006-01-30 00:22:39 +11:00
Damien Miller
bd4e410817 - (djm) [configure.ac] Fix linux/if_tun.h test 2006-01-01 21:03:30 +11:00
Damien Miller
2dcddbfaf6 - (djm) [Makefile.in configure.ac includes.h misc.c] 
[openbsd-compat/port-tun.c openbsd-compat/port-tun.h] Add support
         for tunnel forwarding for FreeBSD and NetBSD. NetBSD's support is
         limited to IPv4 tunnels only, and most versions don't support the
         tap(4) device at all.
 2006-01-01 19:47:05 +11:00
Damien Miller
c4bcc91751 - (djm) [configure.ac] oops, make that linux/if_tun.h 2005-12-31 17:05:58 +11:00
Damien Miller
89e03bae5c - (djm) [configure.ac] Disable Linux tun(4) compat code if linux/tun.h does 
not exist
 2005-12-31 16:42:03 +11:00
Damien Miller
598bbc2d8f - (djm) [openbsd-compat/port-tun.c openbsd-compat/port-tun.h configure.ac] 
[serverloop.c ssh.c openbsd-compat/Makefile.in]
   [openbsd-compat/openbsd-compat.h] Implement tun(4) forwarding
   compatability support for Linux, diff from reyk@
 2005-12-31 16:33:36 +11:00
Darren Tucker
129d0bb6a6 - (dtucker) [cipher-aes.c cipher-ctr.c cipher.c configure.ac 
openbsd-compat/openssl-compat.h] Check for and work around broken AES
   ciphers >128bit on (some) Solaris 10 systems.  ok djm@
 2005-12-19 17:40:40 +11:00
Darren Tucker
d40c66cf3f - (dtucker) [configure.ac openbsd-compat/bsd-snprintf.c] Bug #1133: Our 
snprintf replacement can have a conflicting declaration in HP-UX's system
   headers (const vs. no const) so we now check for and work around it.  Patch
   from the dynamic duo of David Leonard and Ted Percival.
 2005-12-17 22:32:03 +11:00
Damien Miller
62a31c9fd0 - (djm) [misc.c] Disable tunnel code for non-OpenBSD (for now), enable 
again by providing a sys_tun_open() function for your platform and
   setting the CUSTOM_SYS_TUN_OPEN define. More work is required to match
   OpenBSD's tunnel protocol, which prepends the address family to the
   packet
 2005-12-13 20:44:13 +11:00
Damien Miller
7b58e80036 - reyk@cvs.openbsd.org 2005/12/08 18:34:11 
[auth-options.c includes.h misc.c misc.h readconf.c servconf.c]
     [serverloop.c ssh.c ssh_config.5 sshd_config.5 configure.ac]
     two changes to the new ssh tunnel support. this breaks compatibility
     with the initial commit but is required for a portable approach.
     - make the tunnel id u_int and platform friendly, use predefined types.
     - support configuration of layer 2 (ethernet) or layer 3
     (point-to-point, default) modes. configuration is done using the
     Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and
     restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option
     in sshd_config(5).
     ok djm@, man page bits by jmc@
 2005-12-13 19:33:19 +11:00
Tim Rice
46259d86a2 - (tim) [configure.ac sshd.8] Enable locked account check (a "*LK*" string) 
for UnixWare.
 2005-11-28 18:40:34 -08:00
Darren Tucker
91d25a0c45 - (dtucker) [configure.ac] Bug #1126: AIX 5.2 and 5.3 (and presumably newer, 
when they're available) need the real UID set otherwise pam_chauthtok will
   set ADMCHG after changing the password, forcing the user to change it
   again immediately.
 2005-11-26 22:24:09 +11:00
Darren Tucker
58e298d11b - (dtucker) [configure.ac] Apply tim's fix for older systems where the 
resolver state in resolv.h is "state" not "__res_state".  With slight
   modification by me to also work on old AIXes.  ok djm@
 2005-11-25 13:14:58 +11:00
Darren Tucker
79d09fad52 - (dtucker) [configure.ac] Fix typos in comments and AC_SEARCH_LIB argument 
order in Reliant Unix block.  Patch from johane at lysator.liu.se.
 2005-11-24 22:34:54 +11:00
Damien Miller
57f3915b55 - (djm) [configure.ac openbsd-compat/Makefile.in openbsd-compat/bsd-asprintf.c 
openbsd-compat/bsd-snprintf.c openbsd-compat/openbsd-compat.h] Add an
   asprintf() implementation, after syncing our {v,}snprintf() implementation
   with some extra fixes from Samba's version. With help and debugging from
   dtucker and tim; ok dtucker@
 2005-11-24 19:58:19 +11:00