Portable OpenSSH
Go to file
dtucker@openbsd.org 434b587afe upstream: Fix calculation of initial bandwidth limits. Account for
written bytes before the initial timer check so that the first buffer written
is accounted.  Set the threshold after which the timer is checked such that
the limit starts being computed as soon as possible, ie after the second
buffer is written.  This prevents an initial burst of traffic and provides a
more accurate bandwidth limit.  bz#2927, ok djm.

OpenBSD-Commit-ID: ff3ef76e4e43040ec198c2718d5682c36b255cb6
2018-12-27 14:30:17 +11:00
contrib
openbsd-compat Include stdio.h for FILE if needed. 2018-11-25 21:44:05 +11:00
regress upstream: Remove now-unneeded ifdef SIGINFO around handler since it is 2018-11-23 14:42:07 +11:00
.depend
.gitignore
.skipped-commit-ids
CREDITS
INSTALL
LICENCE
Makefile.in
OVERVIEW
PROTOCOL
PROTOCOL.agent
PROTOCOL.certkeys
PROTOCOL.chacha20poly1305
PROTOCOL.key
PROTOCOL.krl
PROTOCOL.mux
README
README.dns
README.platform
README.privsep
README.tun
TODO
aclocal.m4
addrmatch.c
atomicio.c
atomicio.h
audit-bsm.c
audit-linux.c
audit.c
audit.h
auth-bsdauth.c
auth-krb5.c
auth-options.c
auth-options.h
auth-pam.c expose $SSH_CONNECTION in the PAM environment 2018-12-14 13:23:48 +11:00
auth-pam.h
auth-passwd.c
auth-rhosts.c
auth-shadow.c
auth-sia.c
auth-sia.h
auth-skey.c
auth.c Don't pass loginmsg by address now that it's an sshbuf* 2018-12-13 16:31:36 +11:00
auth.h
auth2-chall.c
auth2-gss.c
auth2-hostbased.c
auth2-kbdint.c
auth2-none.c
auth2-passwd.c
auth2-pubkey.c
auth2.c
authfd.c upstream: don't attempt to connect to empty SSH_AUTH_SOCK; bz#293 2018-12-07 13:10:57 +11:00
authfd.h
authfile.c
authfile.h
bitmap.c
bitmap.h
buildpkg.sh.in
canohost.c
canohost.h
chacha.c
chacha.h
channels.c upstream: no need to allocate channels_pre/channels_post in 2018-12-07 13:58:49 +11:00
channels.h
cipher-aes.c
cipher-aesctr.c
cipher-aesctr.h
cipher-chachapoly.c
cipher-chachapoly.h
cipher-ctr.c
cipher.c
cipher.h
cleanup.c
clientloop.c
clientloop.h
compat.c
compat.h
config.guess
config.sub
configure.ac Improve OpenSSL_add_all_algorithms check. 2018-11-25 14:05:08 +11:00
crc32.c
crc32.h
crypto_api.h
defines.h
dh.c
dh.h
digest-libc.c
digest-openssl.c
digest.h
dispatch.c
dispatch.h
dns.c
dns.h
ed25519.c
entropy.c Move RANDOM_SEED_SIZE outside ifdef. 2018-11-23 14:11:20 +11:00
entropy.h
fatal.c
fe25519.c
fe25519.h
fixalgorithms
fixpaths
ge25519.c
ge25519.h
ge25519_base.data
groupaccess.c
groupaccess.h
gss-genr.c
gss-serv-krb5.c
gss-serv.c
hash.c
hmac.c
hmac.h
hostfile.c
hostfile.h
includes.h
install-sh
kex.c upstream: only consider the ext-info-c extension during the initial 2018-12-27 14:30:17 +11:00
kex.h upstream: only consider the ext-info-c extension during the initial 2018-12-27 14:30:17 +11:00
kexc25519.c
kexc25519c.c
kexc25519s.c
kexdh.c
kexdhc.c
kexdhs.c
kexecdh.c
kexecdhc.c
kexecdhs.c
kexgex.c
kexgexc.c
kexgexs.c
krl.c
krl.h
log.c
log.h
loginrec.c Don't pass loginmsg by address now that it's an sshbuf* 2018-12-13 16:31:36 +11:00
loginrec.h
logintest.c
mac.c
mac.h
match.c
match.h
md5crypt.c
md5crypt.h
mdoc2man.awk
misc.c upstream: Fix calculation of initial bandwidth limits. Account for 2018-12-27 14:30:17 +11:00
misc.h upstream: Fix calculation of initial bandwidth limits. Account for 2018-12-27 14:30:17 +11:00
mkinstalldirs
moduli
moduli.5
moduli.c
monitor.c
monitor.h
monitor_fdpass.c
monitor_fdpass.h
monitor_wrap.c
monitor_wrap.h
msg.c
msg.h
mux.c
myproposal.h
nchan.c
nchan.ms
nchan2.ms
opacket.c
opacket.h
openssh.xml.in
opensshd.init.in
packet.c
packet.h
pathnames.h
pkcs11.h
platform-misc.c
platform-pledge.c
platform-tracing.c
platform.c
platform.h
poly1305.c
poly1305.h
progressmeter.c
progressmeter.h
readconf.c upstream: add a ssh_config "Match final" predicate 2018-11-23 16:09:12 +11:00
readconf.h upstream: add a ssh_config "Match final" predicate 2018-11-23 16:09:12 +11:00
readpass.c
rijndael.c
rijndael.h
sandbox-capsicum.c
sandbox-darwin.c
sandbox-null.c
sandbox-pledge.c
sandbox-rlimit.c
sandbox-seccomp-filter.c
sandbox-solaris.c
sandbox-systrace.c
sc25519.c
sc25519.h
scp.1
scp.c refactor libcrypto initialisation 2018-11-23 10:42:05 +11:00
servconf.c upstream: silence (to log level debug2) failure messages when 2018-11-19 15:14:32 +11:00
servconf.h upstream: silence (to log level debug2) failure messages when 2018-11-19 15:14:32 +11:00
serverloop.c
serverloop.h
session.c expose $SSH_CONNECTION in the PAM environment 2018-12-14 13:23:48 +11:00
session.h
sftp-client.c
sftp-client.h
sftp-common.c
sftp-common.h
sftp-glob.c
sftp-server-main.c refactor libcrypto initialisation 2018-11-23 10:42:05 +11:00
sftp-server.8
sftp-server.c
sftp.1
sftp.c refactor libcrypto initialisation 2018-11-23 10:42:05 +11:00
sftp.h
smult_curve25519_ref.c
ssh-add.1
ssh-add.c refactor libcrypto initialisation 2018-11-23 10:42:05 +11:00
ssh-agent.1
ssh-agent.c refactor libcrypto initialisation 2018-11-23 10:42:05 +11:00
ssh-dss.c
ssh-ecdsa.c
ssh-ed25519.c
ssh-gss.h
ssh-keygen.1 upstream: fix option letter pasto in previous 2018-12-27 14:30:17 +11:00
ssh-keygen.c refactor libcrypto initialisation 2018-11-23 10:42:05 +11:00
ssh-keyscan.1
ssh-keyscan.c
ssh-keysign.8
ssh-keysign.c upstream: add a ssh_config "Match final" predicate 2018-11-23 16:09:12 +11:00
ssh-pkcs11-client.c
ssh-pkcs11-helper.8
ssh-pkcs11-helper.c
ssh-pkcs11.c
ssh-pkcs11.h
ssh-rsa.c
ssh-sandbox.h
ssh-xmss.c
ssh.1
ssh.c upstream: add a ssh_config "Match final" predicate 2018-11-23 16:09:12 +11:00
ssh.h
ssh2.h
ssh_api.c refactor libcrypto initialisation 2018-11-23 10:42:05 +11:00
ssh_api.h
ssh_config
ssh_config.5 upstream: tweak previous; 2018-12-07 13:10:57 +11:00
sshbuf-getput-basic.c
sshbuf-getput-crypto.c
sshbuf-misc.c
sshbuf.c
sshbuf.h
sshconnect.c upstream: Fix inverted logic for redirecting ProxyCommand stderr to 2018-11-19 15:13:38 +11:00
sshconnect.h
sshconnect2.c upstream: don't truncate user or host name in "user@host's 2018-12-07 13:10:57 +11:00
sshd.8
sshd.c refactor libcrypto initialisation 2018-11-23 10:42:05 +11:00
sshd_config
sshd_config.5
ssherr.c
ssherr.h
sshkey-xmss.c
sshkey-xmss.h
sshkey.c
sshkey.h
sshlogin.c
sshlogin.h
sshpty.c
sshpty.h
sshtty.c
survey.sh.in
ttymodes.c
ttymodes.h
uidswap.c
uidswap.h
umac.c
umac.h
umac128.c
utf8.c
utf8.h
uuencode.c
uuencode.h
verify.c
version.h
xmalloc.c
xmalloc.h
xmss_commons.c
xmss_commons.h
xmss_fast.c
xmss_fast.h
xmss_hash.c
xmss_hash.h
xmss_hash_address.c
xmss_hash_address.h
xmss_wots.c
xmss_wots.h

README

See https://www.openssh.com/releasenotes.html#7.9p1 for the release notes.

Please read https://www.openssh.com/report.html for bug reporting
instructions and note that we do not use Github for bug reporting or
patch/pull-request management.

This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's sample
implementation with all patent-encumbered algorithms removed (to
external libraries), all known security bugs fixed, new features
reintroduced and many other clean-ups.  OpenSSH has been created by
Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,
and Dug Song. It has a homepage at https://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support, EGD[1]/PRNGD[2] support and replacements for OpenBSD library
functions that are (regrettably) absent from other unices. This port
has been best tested on AIX, Cygwin, HP-UX, Linux, MacOS/X,
FreeBSD, NetBSD, OpenBSD, OpenServer, Solaris and UnixWare.

This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[3], OpenSSL[4], and optionally PAM[5] and
libedit[6]

There is now several mailing lists for this port of OpenSSH. Please
refer to https://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by unsubscribed
users.  Code contribution are welcomed, but please follow the OpenBSD
style guidelines[7].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system.

Damien Miller <djm@mindrot.org>

Miscellania -

This version of OpenSSH is based upon code retrieved from the OpenBSD
CVS repository which in turn was based on the last free sample
implementation released by Tatu Ylonen.

References -

[0] https://www.openssh.com/
[1] http://www.lothar.com/tech/crypto/
[2] http://prngd.sourceforge.net/
[3] https://www.zlib.net/
[4] https://www.openssl.org/
[5] https://www.openpam.org
    https://www.kernel.org/pub/linux/libs/pam/
    (PAM also is standard on Solaris and HP-UX 11)
[6] https://thrysoee.dk/editline/ (portable version)
[7] https://man.openbsd.org/style.9