summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBen Lindstrom <mouring@eviladmin.org>2001-07-18 16:05:50 +0000
committerBen Lindstrom <mouring@eviladmin.org>2001-07-18 16:05:50 +0000
commit0dd676a26beb382d22ccb51090f067a4481ea014 (patch)
treee3c85ec9e8ccaf86e37094c8f4c1c6e52d7bd5f9
parent16d29d57e85fd84c9dc06fd803d1abeceadff14c (diff)
- (bal) Cleaned up trailing spaces in ChangeLog.
-rw-r--r--ChangeLog491
1 files changed, 246 insertions, 245 deletions
diff --git a/ChangeLog b/ChangeLog
index 6b88d80b4..640aaa4ad 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -3,37 +3,38 @@
3 - stevesk@cvs.openbsd.org 2001/07/14 15:10:17 3 - stevesk@cvs.openbsd.org 2001/07/14 15:10:17
4 [readpass.c sftp-client.c sftp-common.c sftp-glob.c] 4 [readpass.c sftp-client.c sftp-common.c sftp-glob.c]
5 delete spurious #includes; ok deraadt@ markus@ 5 delete spurious #includes; ok deraadt@ markus@
6 - markus@cvs.openbsd.org 2001/07/15 16:17:08 6 - markus@cvs.openbsd.org 2001/07/15 16:17:08
7 [serverloop.c] 7 [serverloop.c]
8 schedule client alive for ssh2 only, greg@cheers.bungi.com 8 schedule client alive for ssh2 only, greg@cheers.bungi.com
9 - stevesk@cvs.openbsd.org 2001/07/15 16:57:21 9 - stevesk@cvs.openbsd.org 2001/07/15 16:57:21
10 [ssh-agent.1] 10 [ssh-agent.1]
11 -d will not fork; ok markus@ 11 -d will not fork; ok markus@
12 - stevesk@cvs.openbsd.org 2001/07/15 16:58:29 12 - stevesk@cvs.openbsd.org 2001/07/15 16:58:29
13 [ssh-agent.c] 13 [ssh-agent.c]
14 typo in usage; ok markus@ 14 typo in usage; ok markus@
15 - markus@cvs.openbsd.org 2001/07/17 20:48:42 15 - markus@cvs.openbsd.org 2001/07/17 20:48:42
16 [ssh-agent.c] 16 [ssh-agent.c]
17 update maxfd if maxfd is closed; report from jmcelroy@dtgnet.com 17 update maxfd if maxfd is closed; report from jmcelroy@dtgnet.com
18 - markus@cvs.openbsd.org 2001/07/17 21:04:58 18 - markus@cvs.openbsd.org 2001/07/17 21:04:58
19 [channels.c channels.h clientloop.c nchan.c serverloop.c] 19 [channels.c channels.h clientloop.c nchan.c serverloop.c]
20 keep track of both maxfd and the size of the malloc'ed fdsets. 20 keep track of both maxfd and the size of the malloc'ed fdsets.
21 update maxfd if maxfd gets closed. 21 update maxfd if maxfd gets closed.
22 - (bal) Cleaned up trailing spaces in ChangeLog.
22 23
2320010715 2420010715
24 - (bal) Set "BROKEN_GETADDRINFO" for darwin platform. Reported by 25 - (bal) Set "BROKEN_GETADDRINFO" for darwin platform. Reported by
25 Josh Larios <jdlarios@cac.washington.edu> 26 Josh Larios <jdlarios@cac.washington.edu>
26 - (tim) put openssh/openbsd-compat/inet_aton.[ch] back in. 27 - (tim) put openssh/openbsd-compat/inet_aton.[ch] back in.
27 needed by openbsd-compat/fake-getaddrinfo.c 28 needed by openbsd-compat/fake-getaddrinfo.c
28 29
2920010714 3020010714
30 - (stevesk) change getopt() declaration 31 - (stevesk) change getopt() declaration
31 - (stevesk) configure.in: use ll suffix for long long constant 32 - (stevesk) configure.in: use ll suffix for long long constant
32 in snprintf() test 33 in snprintf() test
33 34
3420010713 3520010713
35 - (djm) Enable /etc/nologin check on PAM systems, as some lack the 36 - (djm) Enable /etc/nologin check on PAM systems, as some lack the
36 pam_nologin module. Report from William Yodlowsky 37 pam_nologin module. Report from William Yodlowsky
37 <bsd@openbsd.rutgers.edu> 38 <bsd@openbsd.rutgers.edu>
38 - (djm) Revert dirname fix, a better one is on its way. 39 - (djm) Revert dirname fix, a better one is on its way.
39 - OpenBSD CVS Sync 40 - OpenBSD CVS Sync
@@ -69,7 +70,7 @@
69 don't panic if fork or pipe fail (just return an empty passwd). 70 don't panic if fork or pipe fail (just return an empty passwd).
70 - itojun@cvs.openbsd.org 2001/07/11 00:24:53 71 - itojun@cvs.openbsd.org 2001/07/11 00:24:53
71 [servconf.c] 72 [servconf.c]
72 make it compilable in all 4 combination of KRB4/KRB5 settings. 73 make it compilable in all 4 combination of KRB4/KRB5 settings.
73 dugsong ok 74 dugsong ok
74 XXX isn't it sensitive to the order of -I/usr/include/kerberosIV and 75 XXX isn't it sensitive to the order of -I/usr/include/kerberosIV and
75 -I/usr/include/kerberosV? 76 -I/usr/include/kerberosV?
@@ -85,23 +86,23 @@
85 - (djm) Pull in getopt(3) from OpenBSD libc for the optreset extension. 86 - (djm) Pull in getopt(3) from OpenBSD libc for the optreset extension.
86 87
8720010711 8820010711
88 - (djm) dirname(3) may modify its argument on glibc and other systems. 89 - (djm) dirname(3) may modify its argument on glibc and other systems.
89 Patch from markus@, spotted by Tom Holroyd <tomh@po.crl.go.jp> 90 Patch from markus@, spotted by Tom Holroyd <tomh@po.crl.go.jp>
90 91
9120010704 9220010704
92 - OpenBSD CVS Sync 93 - OpenBSD CVS Sync
93 - markus@cvs.openbsd.org 2001/06/25 08:25:41 94 - markus@cvs.openbsd.org 2001/06/25 08:25:41
94 [channels.c channels.h cipher.c clientloop.c compat.c compat.h 95 [channels.c channels.h cipher.c clientloop.c compat.c compat.h
95 hostfile.c kex.c kex.h key.c key.h nchan.c packet.c serverloop.c 96 hostfile.c kex.c kex.h key.c key.h nchan.c packet.c serverloop.c
96 session.c session.h sftp-server.c ssh-add.c ssh-agent.c uuencode.h] 97 session.c session.h sftp-server.c ssh-add.c ssh-agent.c uuencode.h]
97 update copyright for 2001 98 update copyright for 2001
98 - markus@cvs.openbsd.org 2001/06/25 17:18:27 99 - markus@cvs.openbsd.org 2001/06/25 17:18:27
99 [ssh-keygen.1] 100 [ssh-keygen.1]
100 sshd(8) will never read the private keys, but ssh(1) does; 101 sshd(8) will never read the private keys, but ssh(1) does;
101 hugh@mimosa.com 102 hugh@mimosa.com
102 - provos@cvs.openbsd.org 2001/06/25 17:54:47 103 - provos@cvs.openbsd.org 2001/06/25 17:54:47
103 [auth.c auth.h auth-rsa.c] 104 [auth.c auth.h auth-rsa.c]
104 terminate secure_filename checking after checking homedir. that way 105 terminate secure_filename checking after checking homedir. that way
105 it works on AFS. okay markus@ 106 it works on AFS. okay markus@
106 - stevesk@cvs.openbsd.org 2001/06/25 20:26:37 107 - stevesk@cvs.openbsd.org 2001/06/25 20:26:37
107 [auth2.c sshconnect2.c] 108 [auth2.c sshconnect2.c]
@@ -129,37 +130,37 @@
129 [auth2.c] 130 [auth2.c]
130 new interface for secure_filename() 131 new interface for secure_filename()
131 - itojun@cvs.openbsd.org 2001/06/26 06:32:58 132 - itojun@cvs.openbsd.org 2001/06/26 06:32:58
132 [atomicio.h authfd.h authfile.h auth.h auth-options.h bufaux.h 133 [atomicio.h authfd.h authfile.h auth.h auth-options.h bufaux.h
133 buffer.h canohost.h channels.h cipher.h clientloop.h compat.h 134 buffer.h canohost.h channels.h cipher.h clientloop.h compat.h
134 compress.h crc32.h deattack.h dh.h dispatch.h groupaccess.h 135 compress.h crc32.h deattack.h dh.h dispatch.h groupaccess.h
135 hostfile.h kex.h key.h log.h mac.h match.h misc.h mpaux.h packet.h 136 hostfile.h kex.h key.h log.h mac.h match.h misc.h mpaux.h packet.h
136 radix.h readconf.h readpass.h rsa.h] 137 radix.h readconf.h readpass.h rsa.h]
137 prototype pedant. not very creative... 138 prototype pedant. not very creative...
138 - () -> (void) 139 - () -> (void)
139 - no variable names 140 - no variable names
140 - itojun@cvs.openbsd.org 2001/06/26 06:33:07 141 - itojun@cvs.openbsd.org 2001/06/26 06:33:07
141 [servconf.h serverloop.h session.h sftp-client.h sftp-common.h 142 [servconf.h serverloop.h session.h sftp-client.h sftp-common.h
142 sftp-glob.h sftp-int.h sshconnect.h ssh-dss.h sshlogin.h sshpty.h 143 sftp-glob.h sftp-int.h sshconnect.h ssh-dss.h sshlogin.h sshpty.h
143 ssh-rsa.h tildexpand.h uidswap.h uuencode.h xmalloc.h] 144 ssh-rsa.h tildexpand.h uidswap.h uuencode.h xmalloc.h]
144 prototype pedant. not very creative... 145 prototype pedant. not very creative...
145 - () -> (void) 146 - () -> (void)
146 - no variable names 147 - no variable names
147 - dugsong@cvs.openbsd.org 2001/06/26 16:15:25 148 - dugsong@cvs.openbsd.org 2001/06/26 16:15:25
148 [auth1.c auth.h auth-krb4.c auth-passwd.c readconf.c readconf.h 149 [auth1.c auth.h auth-krb4.c auth-passwd.c readconf.c readconf.h
149 servconf.c servconf.h session.c sshconnect1.c sshd.c] 150 servconf.c servconf.h session.c sshconnect1.c sshd.c]
150 Kerberos v5 support for SSH1, mostly from Assar Westerlund 151 Kerberos v5 support for SSH1, mostly from Assar Westerlund
151 <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok 152 <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
152 - markus@cvs.openbsd.org 2001/06/26 17:25:34 153 - markus@cvs.openbsd.org 2001/06/26 17:25:34
153 [ssh.1] 154 [ssh.1]
154 document SSH_ASKPASS; fubob@MIT.EDU 155 document SSH_ASKPASS; fubob@MIT.EDU
155 - markus@cvs.openbsd.org 2001/06/26 17:27:25 156 - markus@cvs.openbsd.org 2001/06/26 17:27:25
156 [authfd.h authfile.h auth.h auth-options.h bufaux.h buffer.h 157 [authfd.h authfile.h auth.h auth-options.h bufaux.h buffer.h
157 canohost.h channels.h cipher.h clientloop.h compat.h compress.h 158 canohost.h channels.h cipher.h clientloop.h compat.h compress.h
158 crc32.h deattack.h dh.h dispatch.h groupaccess.c groupaccess.h 159 crc32.h deattack.h dh.h dispatch.h groupaccess.c groupaccess.h
159 hostfile.h kex.h key.h log.c log.h mac.h misc.c misc.h mpaux.h 160 hostfile.h kex.h key.h log.c log.h mac.h misc.c misc.h mpaux.h
160 packet.h radix.h readconf.h readpass.h rsa.h servconf.h serverloop.h 161 packet.h radix.h readconf.h readpass.h rsa.h servconf.h serverloop.h
161 session.h sftp-common.c sftp-common.h sftp-glob.h sftp-int.h 162 session.h sftp-common.c sftp-common.h sftp-glob.h sftp-int.h
162 sshconnect.h ssh-dss.h sshlogin.h sshpty.h ssh-rsa.h sshtty.h 163 sshconnect.h ssh-dss.h sshlogin.h sshpty.h ssh-rsa.h sshtty.h
163 tildexpand.h uidswap.h uuencode.h xmalloc.h] 164 tildexpand.h uidswap.h uuencode.h xmalloc.h]
164 remove comments from .h, since they are cut&paste from the .c files 165 remove comments from .h, since they are cut&paste from the .c files
165 and out of sync 166 and out of sync
@@ -206,7 +207,7 @@
206 adress -> address; ok markus@ 207 adress -> address; ok markus@
207 - markus@cvs.openbsd.org 2001/07/02 13:59:15 208 - markus@cvs.openbsd.org 2001/07/02 13:59:15
208 [serverloop.c session.c session.h] 209 [serverloop.c session.c session.h]
209 wait until !session_have_children(); bugreport from 210 wait until !session_have_children(); bugreport from
210 Lutz.Jaenicke@aet.TU-Cottbus.DE 211 Lutz.Jaenicke@aet.TU-Cottbus.DE
211 - markus@cvs.openbsd.org 2001/07/02 22:29:20 212 - markus@cvs.openbsd.org 2001/07/02 22:29:20
212 [readpass.c] 213 [readpass.c]
@@ -242,18 +243,18 @@
242 243
24320010628 24420010628
244 - (djm) Sync openbsd-compat with -current libc 245 - (djm) Sync openbsd-compat with -current libc
245 - (djm) Fix from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> for my 246 - (djm) Fix from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> for my
246 broken makefile 247 broken makefile
247 - (bal) Removed strtok_r() and inet_ntop() since they are no longer used. 248 - (bal) Removed strtok_r() and inet_ntop() since they are no longer used.
248 - (bal) Remove getusershell() since it's no longer used. 249 - (bal) Remove getusershell() since it's no longer used.
249 250
25020010627 25120010627
251 - (djm) Reintroduce pam_session call for non-pty sessions. 252 - (djm) Reintroduce pam_session call for non-pty sessions.
252 - (djm) Remove redundant and incorrect test for max auth attempts in 253 - (djm) Remove redundant and incorrect test for max auth attempts in
253 PAM kbdint code. Based on fix from Matthew Melvin 254 PAM kbdint code. Based on fix from Matthew Melvin
254 <matthewm@webcentral.com.au> 255 <matthewm@webcentral.com.au>
255 - (djm) Rename sysconfdir/primes => sysconfdir/moduli 256 - (djm) Rename sysconfdir/primes => sysconfdir/moduli
256 - (djm) Oops, forgot make logic for primes=>moduli. Also try to rename 257 - (djm) Oops, forgot make logic for primes=>moduli. Also try to rename
257 existing primes->moduli if it exists. 258 existing primes->moduli if it exists.
258 - (djm) Sync with -current openbsd-compat/readpassphrase.c: 259 - (djm) Sync with -current openbsd-compat/readpassphrase.c:
259 - djm@cvs.openbsd.org 2001/06/27 13:23:30 260 - djm@cvs.openbsd.org 2001/06/27 13:23:30
@@ -286,7 +287,7 @@
286 [sshd.8] 287 [sshd.8]
287 document /etc/moduli 288 document /etc/moduli
288 - markus@cvs.openbsd.org 2001/06/22 21:55:49 289 - markus@cvs.openbsd.org 2001/06/22 21:55:49
289 [auth2.c auth-rsa.c pathnames.h ssh.1 sshd.8 sshd_config 290 [auth2.c auth-rsa.c pathnames.h ssh.1 sshd.8 sshd_config
290 ssh-keygen.1] 291 ssh-keygen.1]
291 merge authorized_keys2 into authorized_keys. 292 merge authorized_keys2 into authorized_keys.
292 authorized_keys2 is used for backward compat. 293 authorized_keys2 is used for backward compat.
@@ -313,9 +314,9 @@
313 [sftp.1 sftp-server.8 ssh-keygen.1] 314 [sftp.1 sftp-server.8 ssh-keygen.1]
314 join .%A entries; most by bk@rt.fm 315 join .%A entries; most by bk@rt.fm
315 - markus@cvs.openbsd.org 2001/06/23 02:34:33 316 - markus@cvs.openbsd.org 2001/06/23 02:34:33
316 [kexdh.c kexgex.c kex.h pathnames.h readconf.c servconf.h ssh.1 317 [kexdh.c kexgex.c kex.h pathnames.h readconf.c servconf.h ssh.1
317 sshconnect1.c sshconnect2.c sshconnect.c sshconnect.h sshd.8] 318 sshconnect1.c sshconnect2.c sshconnect.c sshconnect.h sshd.8]
318 get rid of known_hosts2, use it for hostkey lookup, but do not 319 get rid of known_hosts2, use it for hostkey lookup, but do not
319 modify. 320 modify.
320 - markus@cvs.openbsd.org 2001/06/23 03:03:59 321 - markus@cvs.openbsd.org 2001/06/23 03:03:59
321 [sshd.8] 322 [sshd.8]
@@ -334,14 +335,14 @@
334 try to decode ssh-3.0.0 private rsa keys 335 try to decode ssh-3.0.0 private rsa keys
335 (allow migration to openssh, not vice versa), #910 336 (allow migration to openssh, not vice versa), #910
336 - itojun@cvs.openbsd.org 2001/06/23 15:12:20 337 - itojun@cvs.openbsd.org 2001/06/23 15:12:20
337 [auth1.c auth2.c auth2-chall.c authfd.c authfile.c auth-rhosts.c 338 [auth1.c auth2.c auth2-chall.c authfd.c authfile.c auth-rhosts.c
338 canohost.c channels.c cipher.c clientloop.c deattack.c dh.c 339 canohost.c channels.c cipher.c clientloop.c deattack.c dh.c
339 hostfile.c kex.c kexdh.c kexgex.c key.c nchan.c packet.c radix.c 340 hostfile.c kex.c kexdh.c kexgex.c key.c nchan.c packet.c radix.c
340 readpass.c scp.c servconf.c serverloop.c session.c sftp.c 341 readpass.c scp.c servconf.c serverloop.c session.c sftp.c
341 sftp-client.c sftp-glob.c sftp-int.c sftp-server.c ssh-add.c 342 sftp-client.c sftp-glob.c sftp-int.c sftp-server.c ssh-add.c
342 ssh-agent.c ssh.c sshconnect1.c sshconnect2.c sshconnect.c sshd.c 343 ssh-agent.c ssh.c sshconnect1.c sshconnect2.c sshconnect.c sshd.c
343 ssh-keygen.c ssh-keyscan.c] 344 ssh-keygen.c ssh-keyscan.c]
344 more strict prototypes. raise warning level in Makefile.inc. 345 more strict prototypes. raise warning level in Makefile.inc.
345 markus ok'ed 346 markus ok'ed
346 TODO; cleanup headers 347 TODO; cleanup headers
347 - markus@cvs.openbsd.org 2001/06/23 17:05:22 348 - markus@cvs.openbsd.org 2001/06/23 17:05:22
@@ -455,10 +456,10 @@
455 typo; bdubreuil@crrel.usace.army.mil 456 typo; bdubreuil@crrel.usace.army.mil
456 457
45720010611 45820010611
458 - (bal) NeXT/MacOS X lack libgen.h and dirname(). Patch by Mark Miller 459 - (bal) NeXT/MacOS X lack libgen.h and dirname(). Patch by Mark Miller
459 <markm@swoon.net> 460 <markm@swoon.net>
460 - (bal) Handle broken krb4 issues on Solaris with multiple defined u_*_t 461 - (bal) Handle broken krb4 issues on Solaris with multiple defined u_*_t
461 types. Patch by Jan IVEN <Jan.Iven@cern.ch> 462 types. Patch by Jan IVEN <Jan.Iven@cern.ch>
462 - (bal) Fixed Makefile.in so that 'configure; make install' works. 463 - (bal) Fixed Makefile.in so that 'configure; make install' works.
463 464
46420010610 46520010610
@@ -467,20 +468,20 @@
46720010609 46820010609
468 - OpenBSD CVS Sync 469 - OpenBSD CVS Sync
469 - markus@cvs.openbsd.org 2001/05/30 12:55:13 470 - markus@cvs.openbsd.org 2001/05/30 12:55:13
470 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c 471 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
471 packet.c serverloop.c session.c ssh.c ssh1.h] 472 packet.c serverloop.c session.c ssh.c ssh1.h]
472 channel layer cleanup: merge header files and split .c files 473 channel layer cleanup: merge header files and split .c files
473 - markus@cvs.openbsd.org 2001/05/30 15:20:10 474 - markus@cvs.openbsd.org 2001/05/30 15:20:10
474 [ssh.c] 475 [ssh.c]
475 merge functions, simplify. 476 merge functions, simplify.
476 - markus@cvs.openbsd.org 2001/05/31 10:30:17 477 - markus@cvs.openbsd.org 2001/05/31 10:30:17
477 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c 478 [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
478 packet.c serverloop.c session.c ssh.c] 479 packet.c serverloop.c session.c ssh.c]
479 undo the .c file split, just merge the header and keep the cvs 480 undo the .c file split, just merge the header and keep the cvs
480 history 481 history
481 - (bal) Channels.c and Channels.h -- "Merge Functions, simplify" (draged 482 - (bal) Channels.c and Channels.h -- "Merge Functions, simplify" (draged
482 out of ssh Attic) 483 out of ssh Attic)
483 - (bal) Ooops.. nchan.c (and remove nchan.h) resync from OpenBSD ssh 484 - (bal) Ooops.. nchan.c (and remove nchan.h) resync from OpenBSD ssh
484 Attic. 485 Attic.
485 - OpenBSD CVS Sync 486 - OpenBSD CVS Sync
486 - markus@cvs.openbsd.org 2001/05/31 13:08:04 487 - markus@cvs.openbsd.org 2001/05/31 13:08:04
@@ -488,7 +489,7 @@
488 group options and add some more comments 489 group options and add some more comments
489 - markus@cvs.openbsd.org 2001/06/03 14:55:39 490 - markus@cvs.openbsd.org 2001/06/03 14:55:39
490 [channels.c channels.h session.c] 491 [channels.c channels.h session.c]
491 use fatal_register_cleanup instead of atexit, sync with x11 authdir 492 use fatal_register_cleanup instead of atexit, sync with x11 authdir
492 handling 493 handling
493 - markus@cvs.openbsd.org 2001/06/03 19:36:44 494 - markus@cvs.openbsd.org 2001/06/03 19:36:44
494 [ssh-keygen.1] 495 [ssh-keygen.1]
@@ -498,16 +499,16 @@
498 pass -v to ssh; from slade@shore.net 499 pass -v to ssh; from slade@shore.net
499 - markus@cvs.openbsd.org 2001/06/03 20:06:11 500 - markus@cvs.openbsd.org 2001/06/03 20:06:11
500 [auth2-chall.c] 501 [auth2-chall.c]
501 the challenge response device decides how to handle non-existing 502 the challenge response device decides how to handle non-existing
502 users. 503 users.
503 -> fake challenges for skey and cryptocard 504 -> fake challenges for skey and cryptocard
504 - markus@cvs.openbsd.org 2001/06/04 21:59:43 505 - markus@cvs.openbsd.org 2001/06/04 21:59:43
505 [channels.c channels.h session.c] 506 [channels.c channels.h session.c]
506 switch uid when cleaning up tmp files and sockets; reported by 507 switch uid when cleaning up tmp files and sockets; reported by
507 zen-parse@gmx.net on bugtraq 508 zen-parse@gmx.net on bugtraq
508 - markus@cvs.openbsd.org 2001/06/04 23:07:21 509 - markus@cvs.openbsd.org 2001/06/04 23:07:21
509 [clientloop.c serverloop.c sshd.c] 510 [clientloop.c serverloop.c sshd.c]
510 set flags in the signal handlers, do real work in the main loop, 511 set flags in the signal handlers, do real work in the main loop,
511 ok provos@ 512 ok provos@
512 - markus@cvs.openbsd.org 2001/06/04 23:16:16 513 - markus@cvs.openbsd.org 2001/06/04 23:16:16
513 [session.c] 514 [session.c]
@@ -533,7 +534,7 @@
533 style is used for bsdauth. 534 style is used for bsdauth.
534 disconnect on user/service change (ietf-drafts) 535 disconnect on user/service change (ietf-drafts)
535 - markus@cvs.openbsd.org 2001/06/07 20:23:05 536 - markus@cvs.openbsd.org 2001/06/07 20:23:05
536 [authfd.c authfile.c channels.c kexdh.c kexgex.c packet.c ssh.c 537 [authfd.c authfile.c channels.c kexdh.c kexgex.c packet.c ssh.c
537 sshconnect.c sshconnect1.c] 538 sshconnect.c sshconnect1.c]
538 use xxx_put_cstring() 539 use xxx_put_cstring()
539 - markus@cvs.openbsd.org 2001/06/07 22:25:02 540 - markus@cvs.openbsd.org 2001/06/07 22:25:02
@@ -545,89 +546,89 @@
545 move the path for xauth to pathnames.h 546 move the path for xauth to pathnames.h
546 - (bal) configure.in fix for Tru64 (forgeting to reset $LIB) 547 - (bal) configure.in fix for Tru64 (forgeting to reset $LIB)
547 - (bal) ANSIify strmode() 548 - (bal) ANSIify strmode()
548 - (bal) --with-catman should be --with-mantype patch by Dave 549 - (bal) --with-catman should be --with-mantype patch by Dave
549 Dykstra <dwd@bell-labs.com> 550 Dykstra <dwd@bell-labs.com>
550 551
55120010606 55220010606
552 - OpenBSD CVS Sync 553 - OpenBSD CVS Sync
553 - markus@cvs.openbsd.org 2001/05/17 21:34:15 554 - markus@cvs.openbsd.org 2001/05/17 21:34:15
554 [ssh.1] 555 [ssh.1]
555 no spaces in PreferredAuthentications; 556 no spaces in PreferredAuthentications;
556 meixner@rbg.informatik.tu-darmstadt.de 557 meixner@rbg.informatik.tu-darmstadt.de
557 - markus@cvs.openbsd.org 2001/05/18 14:13:29 558 - markus@cvs.openbsd.org 2001/05/18 14:13:29
558 [auth-chall.c auth.h auth1.c auth2-chall.c auth2.c readconf.c 559 [auth-chall.c auth.h auth1.c auth2-chall.c auth2.c readconf.c
559 readconf.h servconf.c servconf.h sshconnect1.c sshconnect2.c sshd.c] 560 readconf.h servconf.c servconf.h sshconnect1.c sshconnect2.c sshd.c]
560 improved kbd-interactive support. work by per@appgate.com and me 561 improved kbd-interactive support. work by per@appgate.com and me
561 - djm@cvs.openbsd.org 2001/05/19 00:36:40 562 - djm@cvs.openbsd.org 2001/05/19 00:36:40
562 [session.c] 563 [session.c]
563 Disable X11 forwarding if xauth binary is not found. Patch from Nalin 564 Disable X11 forwarding if xauth binary is not found. Patch from Nalin
564 Dahyabhai <nalin@redhat.com>; ok markus@ 565 Dahyabhai <nalin@redhat.com>; ok markus@
565 - markus@cvs.openbsd.org 2001/05/19 16:05:41 566 - markus@cvs.openbsd.org 2001/05/19 16:05:41
566 [scp.c] 567 [scp.c]
567 ftruncate() instead of open()+O_TRUNC like rcp.c does 568 ftruncate() instead of open()+O_TRUNC like rcp.c does
568 allows scp /path/to/file localhost:/path/to/file 569 allows scp /path/to/file localhost:/path/to/file
569 - markus@cvs.openbsd.org 2001/05/19 16:08:43 570 - markus@cvs.openbsd.org 2001/05/19 16:08:43
570 [sshd.8] 571 [sshd.8]
571 sort options; Matthew.Stier@fnc.fujitsu.com 572 sort options; Matthew.Stier@fnc.fujitsu.com
572 - markus@cvs.openbsd.org 2001/05/19 16:32:16 573 - markus@cvs.openbsd.org 2001/05/19 16:32:16
573 [ssh.1 sshconnect2.c] 574 [ssh.1 sshconnect2.c]
574 change preferredauthentication order to 575 change preferredauthentication order to
575 publickey,hostbased,password,keyboard-interactive 576 publickey,hostbased,password,keyboard-interactive
576 document that hostbased defaults to no, document order 577 document that hostbased defaults to no, document order
577 - markus@cvs.openbsd.org 2001/05/19 16:46:19 578 - markus@cvs.openbsd.org 2001/05/19 16:46:19
578 [ssh.1 sshd.8] 579 [ssh.1 sshd.8]
579 document MACs defaults with .Dq 580 document MACs defaults with .Dq
580 - stevesk@cvs.openbsd.org 2001/05/19 19:43:57 581 - stevesk@cvs.openbsd.org 2001/05/19 19:43:57
581 [misc.c misc.h servconf.c sshd.8 sshd.c] 582 [misc.c misc.h servconf.c sshd.8 sshd.c]
582 sshd command-line arguments and configuration file options that 583 sshd command-line arguments and configuration file options that
583 specify time may be expressed using a sequence of the form: 584 specify time may be expressed using a sequence of the form:
584 time[qualifier], where time is a positive integer value and qualifier 585 time[qualifier], where time is a positive integer value and qualifier
585 is one of the following: 586 is one of the following:
586 <none>,s,m,h,d,w 587 <none>,s,m,h,d,w
587 Examples: 588 Examples:
588 600 600 seconds (10 minutes) 589 600 600 seconds (10 minutes)
589 10m 10 minutes 590 10m 10 minutes
590 1h30m 1 hour 30 minutes (90 minutes) 591 1h30m 1 hour 30 minutes (90 minutes)
591 ok markus@ 592 ok markus@
592 - stevesk@cvs.openbsd.org 2001/05/19 19:57:09 593 - stevesk@cvs.openbsd.org 2001/05/19 19:57:09
593 [channels.c] 594 [channels.c]
594 typo in error message 595 typo in error message
595 - markus@cvs.openbsd.org 2001/05/20 17:20:36 596 - markus@cvs.openbsd.org 2001/05/20 17:20:36
596 [auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8 597 [auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8
597 sshd_config] 598 sshd_config]
598 configurable authorized_keys{,2} location; originally from peter@; 599 configurable authorized_keys{,2} location; originally from peter@;
599 ok djm@ 600 ok djm@
600 - markus@cvs.openbsd.org 2001/05/24 11:12:42 601 - markus@cvs.openbsd.org 2001/05/24 11:12:42
601 [auth.c] 602 [auth.c]
602 fix comment; from jakob@ 603 fix comment; from jakob@
603 - stevesk@cvs.openbsd.org 2001/05/24 18:57:53 604 - stevesk@cvs.openbsd.org 2001/05/24 18:57:53
604 [clientloop.c readconf.c ssh.c ssh.h] 605 [clientloop.c readconf.c ssh.c ssh.h]
605 don't perform escape processing when ``EscapeChar none''; ok markus@ 606 don't perform escape processing when ``EscapeChar none''; ok markus@
606 - markus@cvs.openbsd.org 2001/05/25 14:37:32 607 - markus@cvs.openbsd.org 2001/05/25 14:37:32
607 [ssh-keygen.c] 608 [ssh-keygen.c]
608 use -P for -e and -y, too. 609 use -P for -e and -y, too.
609 - markus@cvs.openbsd.org 2001/05/28 08:04:39 610 - markus@cvs.openbsd.org 2001/05/28 08:04:39
610 [ssh.c] 611 [ssh.c]
611 fix usage() 612 fix usage()
612 - markus@cvs.openbsd.org 2001/05/28 10:08:55 613 - markus@cvs.openbsd.org 2001/05/28 10:08:55
613 [authfile.c] 614 [authfile.c]
614 key_load_private: set comment to filename for PEM keys 615 key_load_private: set comment to filename for PEM keys
615 - markus@cvs.openbsd.org 2001/05/28 22:51:11 616 - markus@cvs.openbsd.org 2001/05/28 22:51:11
616 [cipher.c cipher.h] 617 [cipher.c cipher.h]
617 simpler 3des for ssh1 618 simpler 3des for ssh1
618 - markus@cvs.openbsd.org 2001/05/28 23:14:49 619 - markus@cvs.openbsd.org 2001/05/28 23:14:49
619 [channels.c channels.h nchan.c] 620 [channels.c channels.h nchan.c]
620 undo broken channel fix and try a different one. there 621 undo broken channel fix and try a different one. there
621 should be still some select errors... 622 should be still some select errors...
622 - markus@cvs.openbsd.org 2001/05/28 23:25:24 623 - markus@cvs.openbsd.org 2001/05/28 23:25:24
623 [channels.c] 624 [channels.c]
624 cleanup, typo 625 cleanup, typo
625 - markus@cvs.openbsd.org 2001/05/28 23:58:35 626 - markus@cvs.openbsd.org 2001/05/28 23:58:35
626 [packet.c packet.h sshconnect.c sshd.c] 627 [packet.c packet.h sshconnect.c sshd.c]
627 remove some lines, simplify. 628 remove some lines, simplify.
628 - markus@cvs.openbsd.org 2001/05/29 12:31:27 629 - markus@cvs.openbsd.org 2001/05/29 12:31:27
629 [authfile.c] 630 [authfile.c]
630 typo 631 typo
631 632
63220010528 63320010528
633 - (tim) [conifgure.in] add setvbuf test needed for sftp-int.c 634 - (tim) [conifgure.in] add setvbuf test needed for sftp-int.c
@@ -652,7 +653,7 @@
652 [channels.c nchan.c] 653 [channels.c nchan.c]
653 more select() error fixes (don't set rfd/wfd to -1). 654 more select() error fixes (don't set rfd/wfd to -1).
654 - (bal) Enabled USE_PIPES for Cygwin on Corinna Vinschen <vinschen@redhat.com> 655 - (bal) Enabled USE_PIPES for Cygwin on Corinna Vinschen <vinschen@redhat.com>
655 - (bal) Corrected on_exit() emulation via atexit(). 656 - (bal) Corrected on_exit() emulation via atexit().
656 657
65720010512 65820010512
658 - OpenBSD CVS Sync 659 - OpenBSD CVS Sync
@@ -680,27 +681,27 @@
680 - markus@cvs.openbsd.org 2001/05/08 19:17:31 681 - markus@cvs.openbsd.org 2001/05/08 19:17:31
681 [channels.c serverloop.c clientloop.c] 682 [channels.c serverloop.c clientloop.c]
682 adds correct error reporting to async connect()s 683 adds correct error reporting to async connect()s
683 fixes the server-discards-data-before-connected-bug found by 684 fixes the server-discards-data-before-connected-bug found by
684 onoe@sm.sony.co.jp 685 onoe@sm.sony.co.jp
685 - mouring@cvs.openbsd.org 2001/05/08 19:45:25 686 - mouring@cvs.openbsd.org 2001/05/08 19:45:25
686 [misc.c misc.h scp.c sftp.c] 687 [misc.c misc.h scp.c sftp.c]
687 Use addargs() in sftp plus some clean up of addargs(). OK Markus 688 Use addargs() in sftp plus some clean up of addargs(). OK Markus
688 - markus@cvs.openbsd.org 2001/05/06 21:45:14 689 - markus@cvs.openbsd.org 2001/05/06 21:45:14
689 [clientloop.c] 690 [clientloop.c]
690 use atomicio for flushing stdout/stderr bufs. thanks to 691 use atomicio for flushing stdout/stderr bufs. thanks to
691 jbw@izanami.cee.hw.ac.uk 692 jbw@izanami.cee.hw.ac.uk
692 - markus@cvs.openbsd.org 2001/05/08 22:48:07 693 - markus@cvs.openbsd.org 2001/05/08 22:48:07
693 [atomicio.c] 694 [atomicio.c]
694 no need for xmalloc.h, thanks to espie@ 695 no need for xmalloc.h, thanks to espie@
695 - (bal) UseLogin patch for Solaris/UNICOS. Patch by Wayne Davison 696 - (bal) UseLogin patch for Solaris/UNICOS. Patch by Wayne Davison
696 <wayne@blorf.net> 697 <wayne@blorf.net>
697 - (bal) ./configure support to disable SIA on OSF1. Patch by 698 - (bal) ./configure support to disable SIA on OSF1. Patch by
698 Chris Adams <cmadams@hiwaay.net> 699 Chris Adams <cmadams@hiwaay.net>
699 - (bal) Updates from the Sony NEWS-OS platform by NAKAJI Hiroyuki 700 - (bal) Updates from the Sony NEWS-OS platform by NAKAJI Hiroyuki
700 <nakaji@tutrp.tut.ac.jp> 701 <nakaji@tutrp.tut.ac.jp>
701 702
70220010508 70320010508
703 - (bal) Fixed configure test for USE_SIA. 704 - (bal) Fixed configure test for USE_SIA.
704 705
70520010506 70620010506
706 - (djm) Update config.guess and config.sub with latest versions (from 707 - (djm) Update config.guess and config.sub with latest versions (from
@@ -725,8 +726,8 @@
725 calling channel_new(), XXX fix this in the future... 726 calling channel_new(), XXX fix this in the future...
726 - markus@cvs.openbsd.org 2001/05/04 23:47:34 727 - markus@cvs.openbsd.org 2001/05/04 23:47:34
727 [channels.c channels.h clientloop.c nchan.c nchan.h serverloop.c ssh.c] 728 [channels.c channels.h clientloop.c nchan.c nchan.h serverloop.c ssh.c]
728 move to Channel **channels (instead of Channel *channels), fixes realloc 729 move to Channel **channels (instead of Channel *channels), fixes realloc
729 problems. channel_new now returns a Channel *, favour Channel * over 730 problems. channel_new now returns a Channel *, favour Channel * over
730 channel id. remove old channel_allocate interface. 731 channel id. remove old channel_allocate interface.
731 732
73220010504 73320010504
@@ -794,11 +795,11 @@
794 patch based on 2.5.2 version by djm. 795 patch based on 2.5.2 version by djm.
795 - (bal) Build manpages and config files once unless changed. Patch by 796 - (bal) Build manpages and config files once unless changed. Patch by
796 Carson Gaspar <carson@taltos.org> 797 Carson Gaspar <carson@taltos.org>
797 - (bal) arpa/nameser.h does not exist on Cygwin. Patch by Corinna 798 - (bal) arpa/nameser.h does not exist on Cygwin. Patch by Corinna
798 Vinschen <vinschen@redhat.com> 799 Vinschen <vinschen@redhat.com>
799 - (bal) Add /etc/sysconfig/sshd support to redhat's sshd.init. Patch by 800 - (bal) Add /etc/sysconfig/sshd support to redhat's sshd.init. Patch by
800 Pekka Savola <pekkas@netcore.fi> 801 Pekka Savola <pekkas@netcore.fi>
801 - (bal) Cygwin lacks setgroups() API. Patch by Corinna Vinschen 802 - (bal) Cygwin lacks setgroups() API. Patch by Corinna Vinschen
802 <vinschen@redhat.com> 803 <vinschen@redhat.com>
803 - (bal) version.h synced, RPM specs updated for 2.9 804 - (bal) version.h synced, RPM specs updated for 2.9
804 - (tim) update contrib/caldera files with what Caldera is using. 805 - (tim) update contrib/caldera files with what Caldera is using.
@@ -814,7 +815,7 @@
814 remove debug 815 remove debug
815 - (bal) Whitespace resync w/ OpenBSD for uidswap.c 816 - (bal) Whitespace resync w/ OpenBSD for uidswap.c
816 - (djm) Add new server configuration directive 'PAMAuthenticationViaKbdInt' 817 - (djm) Add new server configuration directive 'PAMAuthenticationViaKbdInt'
817 (default: off), implies KbdInteractiveAuthentication. Suggestion from 818 (default: off), implies KbdInteractiveAuthentication. Suggestion from
818 markus@ 819 markus@
819 - (djm) Include crypt.h if available in auth-passwd.c 820 - (djm) Include crypt.h if available in auth-passwd.c
820 - tim@mindrot.org 2001/04/25 21:38:01 [configure.in] 821 - tim@mindrot.org 2001/04/25 21:38:01 [configure.in]
@@ -827,7 +828,7 @@
827 document hostbased and other cleanup 828 document hostbased and other cleanup
828 - (stevesk) start_pam() doesn't use DNS now for sshd -u0. 829 - (stevesk) start_pam() doesn't use DNS now for sshd -u0.
829 - (stevesk) auth-pam.c: use PERMIT_NO_PASSWD 830 - (stevesk) auth-pam.c: use PERMIT_NO_PASSWD
830 - (bal) sys/queue.h is bogus for NCR platform. Patch by Daniel Carroll 831 - (bal) sys/queue.h is bogus for NCR platform. Patch by Daniel Carroll
831 <dan@mesastate.edu> 832 <dan@mesastate.edu>
832 - (bal) Fixed contrib/postinstall.in. Patch by wsanders@wsanders.net 833 - (bal) Fixed contrib/postinstall.in. Patch by wsanders@wsanders.net
833 834
@@ -870,35 +871,35 @@
870 fix perl test, fix nroff test, fix Makefile to build outside source tree 871 fix perl test, fix nroff test, fix Makefile to build outside source tree
871 872
87220010420 87320010420
873 - OpenBSD CVS Sync 874 - OpenBSD CVS Sync
874 - ian@cvs.openbsd.org 2001/04/18 16:21:05 875 - ian@cvs.openbsd.org 2001/04/18 16:21:05
875 [ssh-keyscan.1] 876 [ssh-keyscan.1]
876 Fix typo reported in PR/1779 877 Fix typo reported in PR/1779
877 - markus@cvs.openbsd.org 2001/04/18 21:57:42 878 - markus@cvs.openbsd.org 2001/04/18 21:57:42
878 [readpass.c ssh-add.c] 879 [readpass.c ssh-add.c]
879 call askpass from ssh, too, based on work by roth@feep.net, ok deraadt 880 call askpass from ssh, too, based on work by roth@feep.net, ok deraadt
880 - markus@cvs.openbsd.org 2001/04/18 22:03:45 881 - markus@cvs.openbsd.org 2001/04/18 22:03:45
881 [auth2.c sshconnect2.c] 882 [auth2.c sshconnect2.c]
882 use FDQN with trailing dot in the hostbased auth packets, ok deraadt@ 883 use FDQN with trailing dot in the hostbased auth packets, ok deraadt@
883 - markus@cvs.openbsd.org 2001/04/18 22:48:26 884 - markus@cvs.openbsd.org 2001/04/18 22:48:26
884 [auth2.c] 885 [auth2.c]
885 no longer const 886 no longer const
886 - markus@cvs.openbsd.org 2001/04/18 23:43:26 887 - markus@cvs.openbsd.org 2001/04/18 23:43:26
887 [auth2.c compat.c sshconnect2.c] 888 [auth2.c compat.c sshconnect2.c]
888 more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works now 889 more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works now
889 (however the 2.1.0 server seems to work only if debug is enabled...) 890 (however the 2.1.0 server seems to work only if debug is enabled...)
890 - markus@cvs.openbsd.org 2001/04/18 23:44:51 891 - markus@cvs.openbsd.org 2001/04/18 23:44:51
891 [authfile.c] 892 [authfile.c]
892 error->debug; noted by fries@ 893 error->debug; noted by fries@
893 - markus@cvs.openbsd.org 2001/04/19 00:05:11 894 - markus@cvs.openbsd.org 2001/04/19 00:05:11
894 [auth2.c] 895 [auth2.c]
895 use local variable, no function call needed. 896 use local variable, no function call needed.
896 (btw, hostbased works now with ssh.com >= 2.0.13) 897 (btw, hostbased works now with ssh.com >= 2.0.13)
897 - (bal) Put scp-common.h back into scp.c (it exists in the upstream 898 - (bal) Put scp-common.h back into scp.c (it exists in the upstream
898 tree) pointed out by Tom Holroyd <tomh@po.crl.go.jp> 899 tree) pointed out by Tom Holroyd <tomh@po.crl.go.jp>
899 900
90020010418 90120010418
901 - OpenBSD CVS Sync 902 - OpenBSD CVS Sync
902 - markus@cvs.openbsd.org 2001/04/17 19:34:25 903 - markus@cvs.openbsd.org 2001/04/17 19:34:25
903 [session.c] 904 [session.c]
904 move auth_approval to do_authenticated(). 905 move auth_approval to do_authenticated().
@@ -968,10 +969,10 @@
968 xrealloc dealing with ptr == nULL; mouring 969 xrealloc dealing with ptr == nULL; mouring
969 - djm@cvs.openbsd.org 2001/04/16 08:19:31 970 - djm@cvs.openbsd.org 2001/04/16 08:19:31
970 [session.c] 971 [session.c]
971 Split motd and hushlogin checks into seperate functions, helps for 972 Split motd and hushlogin checks into seperate functions, helps for
972 portable. From Chris Adams <cmadams@hiwaay.net>; ok markus@ 973 portable. From Chris Adams <cmadams@hiwaay.net>; ok markus@
973 - Fix OSF SIA support displaying too much information for quiet 974 - Fix OSF SIA support displaying too much information for quiet
974 logins and logins where access was denied by SIA. Patch from Chris Adams 975 logins and logins where access was denied by SIA. Patch from Chris Adams
975 <cmadams@hiwaay.net> 976 <cmadams@hiwaay.net>
976 977
97720010415 97820010415
@@ -995,7 +996,7 @@
995 996
99620010414 99720010414
997 - Sync with OpenBSD glob.c, strlcat.c and vis.c changes 998 - Sync with OpenBSD glob.c, strlcat.c and vis.c changes
998 - Cygwin sftp/sftp-server binary mode patch from Corinna Vinschen 999 - Cygwin sftp/sftp-server binary mode patch from Corinna Vinschen
999 <vinschen@redhat.com> 1000 <vinschen@redhat.com>
1000 - OpenBSD CVS Sync 1001 - OpenBSD CVS Sync
1001 - beck@cvs.openbsd.org 2001/04/13 22:46:54 1002 - beck@cvs.openbsd.org 2001/04/13 22:46:54
@@ -1008,15 +1009,15 @@
1008 by default (of course). ok markus@ 1009 by default (of course). ok markus@
1009 1010
101020010413 101120010413
1011 - OpenBSD CVS Sync 1012 - OpenBSD CVS Sync
1012 - markus@cvs.openbsd.org 2001/04/12 14:29:09 1013 - markus@cvs.openbsd.org 2001/04/12 14:29:09
1013 [ssh.c] 1014 [ssh.c]
1014 show debug output during option processing, report from 1015 show debug output during option processing, report from
1015 pekkas@netcore.fi 1016 pekkas@netcore.fi
1016 - markus@cvs.openbsd.org 2001/04/12 19:15:26 1017 - markus@cvs.openbsd.org 2001/04/12 19:15:26
1017 [auth-rhosts.c auth.h auth2.c buffer.c canohost.c canohost.h 1018 [auth-rhosts.c auth.h auth2.c buffer.c canohost.c canohost.h
1018 compat.c compat.h hostfile.c pathnames.h readconf.c readconf.h 1019 compat.c compat.h hostfile.c pathnames.h readconf.c readconf.h
1019 servconf.c servconf.h ssh.c sshconnect.c sshconnect.h sshconnect1.c 1020 servconf.c servconf.h ssh.c sshconnect.c sshconnect.h sshconnect1.c
1020 sshconnect2.c sshd_config] 1021 sshconnect2.c sshd_config]
1021 implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2) 1022 implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
1022 similar to RhostRSAAuthentication unless you enable (the experimental) 1023 similar to RhostRSAAuthentication unless you enable (the experimental)
@@ -1040,16 +1041,16 @@
1040 lack it. 1041 lack it.
1041 1042
104220010412 104320010412
1043 - OpenBSD CVS Sync 1044 - OpenBSD CVS Sync
1044 - markus@cvs.openbsd.org 2001/04/10 07:46:58 1045 - markus@cvs.openbsd.org 2001/04/10 07:46:58
1045 [channels.c] 1046 [channels.c]
1046 cleanup socks4 handling 1047 cleanup socks4 handling
1047 - itojun@cvs.openbsd.org 2001/04/10 09:13:22 1048 - itojun@cvs.openbsd.org 2001/04/10 09:13:22
1048 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8] 1049 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
1049 document id_rsa{.pub,}. markus ok 1050 document id_rsa{.pub,}. markus ok
1050 - markus@cvs.openbsd.org 2001/04/10 12:15:23 1051 - markus@cvs.openbsd.org 2001/04/10 12:15:23
1051 [channels.c] 1052 [channels.c]
1052 debug cleanup 1053 debug cleanup
1053 - djm@cvs.openbsd.org 2001/04/11 07:06:22 1054 - djm@cvs.openbsd.org 2001/04/11 07:06:22
1054 [sftp-int.c] 1055 [sftp-int.c]
1055 'mget' and 'mput' aliases; ok markus@ 1056 'mget' and 'mput' aliases; ok markus@
@@ -1111,9 +1112,9 @@
1111 to olar@openwall.com is comments. we had many requests for this. 1112 to olar@openwall.com is comments. we had many requests for this.
1112 - markus@cvs.openbsd.org 2001/04/07 08:55:18 1113 - markus@cvs.openbsd.org 2001/04/07 08:55:18
1113 [buffer.c channels.c channels.h readconf.c ssh.c] 1114 [buffer.c channels.c channels.h readconf.c ssh.c]
1114 allow the ssh client act as a SOCKS4 proxy (dynamic local 1115 allow the ssh client act as a SOCKS4 proxy (dynamic local
1115 portforwarding). work by Dan Kaminsky <dankamin@cisco.com> and me. 1116 portforwarding). work by Dan Kaminsky <dankamin@cisco.com> and me.
1116 thanks to Dan for this great patch: use 'ssh -D 1080 host' and make 1117 thanks to Dan for this great patch: use 'ssh -D 1080 host' and make
1117 netscape use localhost:1080 as a socks proxy. 1118 netscape use localhost:1080 as a socks proxy.
1118 - markus@cvs.openbsd.org 2001/04/08 11:24:33 1119 - markus@cvs.openbsd.org 2001/04/08 11:24:33
1119 [uidswap.c] 1120 [uidswap.c]
@@ -1147,7 +1148,7 @@
1147 - deraadt@cvs.openbsd.org 2001/04/06 16:46:59 1148 - deraadt@cvs.openbsd.org 2001/04/06 16:46:59
1148 [scp.c] 1149 [scp.c]
1149 remove trailing / from source paths; fixes pr#1756 1150 remove trailing / from source paths; fixes pr#1756
1150 1151
115120010406 115220010406
1152 - (stevesk) logintest.c: fix for systems without __progname 1153 - (stevesk) logintest.c: fix for systems without __progname
1153 - (stevesk) Makefile.in: log.o is in libssh.a 1154 - (stevesk) Makefile.in: log.o is in libssh.a
@@ -1163,9 +1164,9 @@
1163 temporary version 2.5.4 (supports rekeying). 1164 temporary version 2.5.4 (supports rekeying).
1164 this is not an official release. 1165 this is not an official release.
1165 - markus@cvs.openbsd.org 2001/04/05 10:42:57 1166 - markus@cvs.openbsd.org 2001/04/05 10:42:57
1166 [auth-chall.c authfd.c channels.c clientloop.c kex.c kexgex.c key.c 1167 [auth-chall.c authfd.c channels.c clientloop.c kex.c kexgex.c key.c
1167 mac.c packet.c serverloop.c sftp-client.c sftp-client.h sftp-glob.c 1168 mac.c packet.c serverloop.c sftp-client.c sftp-client.h sftp-glob.c
1168 sftp-glob.h sftp-int.c sftp-server.c sftp.c ssh-keygen.c sshconnect.c 1169 sftp-glob.h sftp-int.c sftp-server.c sftp.c ssh-keygen.c sshconnect.c
1169 sshconnect2.c sshd.c] 1170 sshconnect2.c sshd.c]
1170 fix whitespace: unexpand + trailing spaces. 1171 fix whitespace: unexpand + trailing spaces.
1171 - markus@cvs.openbsd.org 2001/04/05 11:09:17 1172 - markus@cvs.openbsd.org 2001/04/05 11:09:17
@@ -1188,21 +1189,21 @@
1188 don't request a session for 'ssh -N', pointed out slade@shore.net 1189 don't request a session for 'ssh -N', pointed out slade@shore.net
1189 1190
119020010405 119120010405
1191 - OpenBSD CVS Sync 1192 - OpenBSD CVS Sync
1192 - markus@cvs.openbsd.org 2001/04/04 09:48:35 1193 - markus@cvs.openbsd.org 2001/04/04 09:48:35
1193 [kex.c kex.h kexdh.c kexgex.c packet.c sshconnect2.c sshd.c] 1194 [kex.c kex.h kexdh.c kexgex.c packet.c sshconnect2.c sshd.c]
1194 don't sent multiple kexinit-requests. 1195 don't sent multiple kexinit-requests.
1195 send newkeys, block while waiting for newkeys. 1196 send newkeys, block while waiting for newkeys.
1196 fix comments. 1197 fix comments.
1197 - markus@cvs.openbsd.org 2001/04/04 14:34:58 1198 - markus@cvs.openbsd.org 2001/04/04 14:34:58
1198 [clientloop.c kex.c kex.h serverloop.c sshconnect2.c sshd.c] 1199 [clientloop.c kex.c kex.h serverloop.c sshconnect2.c sshd.c]
1199 enable server side rekeying + some rekey related clientup. 1200 enable server side rekeying + some rekey related clientup.
1200 todo: we should not send any non-KEX messages after we send KEXINIT 1201 todo: we should not send any non-KEX messages after we send KEXINIT
1201 - markus@cvs.openbsd.org 2001/04/04 15:50:55 1202 - markus@cvs.openbsd.org 2001/04/04 15:50:55
1202 [compat.c] 1203 [compat.c]
1203 f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov 1204 f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov
1204 - markus@cvs.openbsd.org 2001/04/04 20:25:38 1205 - markus@cvs.openbsd.org 2001/04/04 20:25:38
1205 [channels.c channels.h clientloop.c kex.c kex.h serverloop.c 1206 [channels.c channels.h clientloop.c kex.c kex.h serverloop.c
1206 sshconnect2.c sshd.c] 1207 sshconnect2.c sshd.c]
1207 more robust rekeying 1208 more robust rekeying
1208 don't send channel data after rekeying is started. 1209 don't send channel data after rekeying is started.
@@ -1322,8 +1323,8 @@
1322 call refuse() before close(); from olemx@ans.pl 1323 call refuse() before close(); from olemx@ans.pl
1323 1324
132420010328 132520010328
1325 - (djm) Reorder tests and library inclusion for Krb4/AFS to try to 1326 - (djm) Reorder tests and library inclusion for Krb4/AFS to try to
1326 resolve linking conflicts with libcrypto. Report and suggested fix 1327 resolve linking conflicts with libcrypto. Report and suggested fix
1327 from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE> 1328 from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
1328 - (djm) Work around Solaris' broken struct dirent. Diagnosis and suggested 1329 - (djm) Work around Solaris' broken struct dirent. Diagnosis and suggested
1329 fix from Philippe Levan <levan@epix.net> 1330 fix from Philippe Levan <levan@epix.net>
@@ -1333,7 +1334,7 @@
1333 1334
133420010327 133520010327
1335 - Attempt sync with sshlogin.c w/ OpenBSD (mainly CVS ID) 1336 - Attempt sync with sshlogin.c w/ OpenBSD (mainly CVS ID)
1336 - Fix pointer issues in waitpid() and wait() replaces. Patch by Lutz 1337 - Fix pointer issues in waitpid() and wait() replaces. Patch by Lutz
1337 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> 1338 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
1338 - OpenBSD CVS Sync 1339 - OpenBSD CVS Sync
1339 - djm@cvs.openbsd.org 2001/03/25 00:01:34 1340 - djm@cvs.openbsd.org 2001/03/25 00:01:34
@@ -1344,10 +1345,10 @@
1344 PrintLastLog option; from chip@valinux.com with some minor 1345 PrintLastLog option; from chip@valinux.com with some minor
1345 changes by me. ok markus@ 1346 changes by me. ok markus@
1346 - markus@cvs.openbsd.org 2001/03/26 08:07:09 1347 - markus@cvs.openbsd.org 2001/03/26 08:07:09
1347 [authfile.c authfile.h ssh-add.c ssh-keygen.c ssh.c sshconnect.c 1348 [authfile.c authfile.h ssh-add.c ssh-keygen.c ssh.c sshconnect.c
1348 sshconnect.h sshconnect1.c sshconnect2.c sshd.c] 1349 sshconnect.h sshconnect1.c sshconnect2.c sshd.c]
1349 simpler key load/save interface, see authfile.h 1350 simpler key load/save interface, see authfile.h
1350 - (djm) Reestablish PAM credentials (which can be supplemental group 1351 - (djm) Reestablish PAM credentials (which can be supplemental group
1351 memberships) after initgroups() blows them away. Report and suggested 1352 memberships) after initgroups() blows them away. Report and suggested
1352 fix from Nalin Dahyabhai <nalin@redhat.com> 1353 fix from Nalin Dahyabhai <nalin@redhat.com>
1353 1354
@@ -1369,10 +1370,10 @@
1369 - (djm) Pull out our own SIGPIPE hacks 1370 - (djm) Pull out our own SIGPIPE hacks
1370 1371
137120010323 137220010323
1372 - OpenBSD CVS Sync 1373 - OpenBSD CVS Sync
1373 - deraadt@cvs.openbsd.org 2001/03/22 20:22:55 1374 - deraadt@cvs.openbsd.org 2001/03/22 20:22:55
1374 [sshd.c] 1375 [sshd.c]
1375 do not place linefeeds in buffer 1376 do not place linefeeds in buffer
1376 1377
137720010322 137820010322
1378 - (djm) Better AIX no tty fix, spotted by Gert Doering <gert@greenie.muc.de> 1379 - (djm) Better AIX no tty fix, spotted by Gert Doering <gert@greenie.muc.de>
@@ -1401,7 +1402,7 @@
1401 missing init; from mib@unimelb.edu.au 1402 missing init; from mib@unimelb.edu.au
1402 1403
140320010321 140420010321
1404 - (djm) Fix ttyname breakage for AIX and Tru64. Patch from Steve 1405 - (djm) Fix ttyname breakage for AIX and Tru64. Patch from Steve
1405 VanDevender <stevev@darkwing.uoregon.edu> 1406 VanDevender <stevev@darkwing.uoregon.edu>
1406 - (djm) Make sure pam_retval is initialised on call to pam_end. Patch 1407 - (djm) Make sure pam_retval is initialised on call to pam_end. Patch
1407 from Solar Designer <solar@openwall.com> 1408 from Solar Designer <solar@openwall.com>
@@ -1430,7 +1431,7 @@
1430 add get_arg_max(). Use sysconf() if ARG_MAX is not defined 1431 add get_arg_max(). Use sysconf() if ARG_MAX is not defined
1431 1432
143220010319 143320010319
1433 - (djm) Seed PRNG at startup, rather than waiting for arc4random calls to 1434 - (djm) Seed PRNG at startup, rather than waiting for arc4random calls to
1434 do it implicitly. 1435 do it implicitly.
1435 - (djm) Add getusershell() functions from OpenBSD CVS 1436 - (djm) Add getusershell() functions from OpenBSD CVS
1436 - OpenBSD CVS Sync 1437 - OpenBSD CVS Sync
@@ -1443,14 +1444,14 @@
1443 - (bal) Use 'NGROUPS' for NeXT Since 'MAX_NGROUPS' is wrapped up in -lposix 1444 - (bal) Use 'NGROUPS' for NeXT Since 'MAX_NGROUPS' is wrapped up in -lposix
1444 stuff. Change suggested by Mark Miller <markm@swoon.net> 1445 stuff. Change suggested by Mark Miller <markm@swoon.net>
1445 - (bal) Small fix to scp. %lu vs %ld 1446 - (bal) Small fix to scp. %lu vs %ld
1446 - (bal) NeXTStep lacks S_ISLNK. Plus split up S_IS* 1447 - (bal) NeXTStep lacks S_ISLNK. Plus split up S_IS*
1447 - (djm) OpenBSD CVS Sync 1448 - (djm) OpenBSD CVS Sync
1448 - djm@cvs.openbsd.org 2001/03/19 03:52:51 1449 - djm@cvs.openbsd.org 2001/03/19 03:52:51
1449 [sftp-client.c] 1450 [sftp-client.c]
1450 Report ssh connection closing correctly; ok deraadt@ 1451 Report ssh connection closing correctly; ok deraadt@
1451 - deraadt@cvs.openbsd.org 2001/03/18 23:30:55 1452 - deraadt@cvs.openbsd.org 2001/03/18 23:30:55
1452 [compat.c compat.h sshd.c] 1453 [compat.c compat.h sshd.c]
1453 specifically version match on ssh scanners. do not log scan 1454 specifically version match on ssh scanners. do not log scan
1454 information to the console 1455 information to the console
1455 - djm@cvs.openbsd.org 2001/03/19 12:10:17 1456 - djm@cvs.openbsd.org 2001/03/19 12:10:17
1456 [sshd.8] 1457 [sshd.8]
@@ -1461,7 +1462,7 @@
1461 - (bal) Minor NeXT fixed. Forgot to #undef NGROUPS_MAX 1462 - (bal) Minor NeXT fixed. Forgot to #undef NGROUPS_MAX
1462 1463
146320010318 146420010318
1464 - (bal) Fixed scp type casing issue which causes "scp: protocol error: 1465 - (bal) Fixed scp type casing issue which causes "scp: protocol error:
1465 size not delimited" fatal errors when tranfering. 1466 size not delimited" fatal errors when tranfering.
1466 - OpenBSD CVS Sync 1467 - OpenBSD CVS Sync
1467 - markus@cvs.openbsd.org 2001/03/17 17:27:59 1468 - markus@cvs.openbsd.org 2001/03/17 17:27:59
@@ -1471,7 +1472,7 @@
1471 openbsd-compat/fake-regex.h 1472 openbsd-compat/fake-regex.h
1472 1473
147320010317 147420010317
1474 - Support usrinfo() on AIX. Based on patch from Gert Doering 1475 - Support usrinfo() on AIX. Based on patch from Gert Doering
1475 <gert@greenie.muc.de> 1476 <gert@greenie.muc.de>
1476 - OpenBSD CVS Sync 1477 - OpenBSD CVS Sync
1477 - markus@cvs.openbsd.org 2001/03/15 15:05:59 1478 - markus@cvs.openbsd.org 2001/03/15 15:05:59
@@ -1494,7 +1495,7 @@
1494 [auth-options.c channels.c channels.h serverloop.c session.c] 1495 [auth-options.c channels.c channels.h serverloop.c session.c]
1495 implement "permitopen" key option, restricts -L style forwarding to 1496 implement "permitopen" key option, restricts -L style forwarding to
1496 to specified host:port pairs. based on work by harlan@genua.de 1497 to specified host:port pairs. based on work by harlan@genua.de
1497 - Check for gl_matchc support in glob_t and fall back to the 1498 - Check for gl_matchc support in glob_t and fall back to the
1498 openbsd-compat/glob.[ch] support if it does not exist. 1499 openbsd-compat/glob.[ch] support if it does not exist.
1499 1500
150020010315 150120010315
@@ -1509,7 +1510,7 @@
1509 [sftp-server.c] 1510 [sftp-server.c]
1510 note no getopt() 1511 note no getopt()
1511 - (stevesk) ssh-keyscan.c: specify "openbsd-compat/fake-queue.h" 1512 - (stevesk) ssh-keyscan.c: specify "openbsd-compat/fake-queue.h"
1512 - (bal) Cygwin README change by Corinna Vinschen <vinschen@redhat.com> 1513 - (bal) Cygwin README change by Corinna Vinschen <vinschen@redhat.com>
1513 1514
151420010314 151520010314
1515 - OpenBSD CVS Sync 1516 - OpenBSD CVS Sync
@@ -1522,7 +1523,7 @@
1522 - (bal) Fix strerror() in bsd-misc.c 1523 - (bal) Fix strerror() in bsd-misc.c
1523 - (djm) Add replacement glob() from OpenBSD libc if the system glob is 1524 - (djm) Add replacement glob() from OpenBSD libc if the system glob is
1524 missing or lacks the GLOB_ALTDIRFUNC extension 1525 missing or lacks the GLOB_ALTDIRFUNC extension
1525 - (djm) Remove -I$(srcdir)/openbsd-compat from CFLAGS, refer to headers 1526 - (djm) Remove -I$(srcdir)/openbsd-compat from CFLAGS, refer to headers
1526 relatively. Avoids conflict between glob.h and /usr/include/glob.h 1527 relatively. Avoids conflict between glob.h and /usr/include/glob.h
1527 1528
152820010313 152920010313
@@ -1564,7 +1565,7 @@
1564 with -l and make -B work with /path/to/known_hosts. ok deraadt@ 1565 with -l and make -B work with /path/to/known_hosts. ok deraadt@
1565 - (djm) Bump portable version number for generating test RPMs 1566 - (djm) Bump portable version number for generating test RPMs
1566 - (djm) Add "static_openssl" RPM build option, remove rsh build dependency 1567 - (djm) Add "static_openssl" RPM build option, remove rsh build dependency
1567 - (bal) Reorder includes in Makefile. 1568 - (bal) Reorder includes in Makefile.
1568 1569
156920010311 157020010311
1570 - OpenBSD CVS Sync 1571 - OpenBSD CVS Sync
@@ -1592,7 +1593,7 @@
1592 - OpenBSD CVS Sync 1593 - OpenBSD CVS Sync
1593 - deraadt@cvs.openbsd.org 2001/03/09 03:14:39 1594 - deraadt@cvs.openbsd.org 2001/03/09 03:14:39
1594 [ssh-keygen.c] 1595 [ssh-keygen.c]
1595 create *.pub files with umask 0644, so that you can mv them to 1596 create *.pub files with umask 0644, so that you can mv them to
1596 authorized_keys 1597 authorized_keys
1597 - deraadt@cvs.openbsd.org 2001/03/09 12:30:29 1598 - deraadt@cvs.openbsd.org 2001/03/09 12:30:29
1598 [sshd.c] 1599 [sshd.c]
@@ -1690,7 +1691,7 @@
1690 1691
169120010305 169220010305
1692 - (bal) CVS ID touch up on sshpty.[ch] and sshlogin.[ch] 1693 - (bal) CVS ID touch up on sshpty.[ch] and sshlogin.[ch]
1693 - (bal) CVS ID touch up on sftp-int.c 1694 - (bal) CVS ID touch up on sftp-int.c
1694 - (bal) CVS ID touch up on uuencode.c 1695 - (bal) CVS ID touch up on uuencode.c
1695 - (bal) CVS ID touch up on auth2.c, serverloop.c, session.c & sshd.c 1696 - (bal) CVS ID touch up on auth2.c, serverloop.c, session.c & sshd.c
1696 - (bal) OpenBSD CVS Sync 1697 - (bal) OpenBSD CVS Sync
@@ -1877,37 +1878,37 @@
1877 - (djm) Document PAM ChallengeResponseAuthentication in sshd.8 1878 - (djm) Document PAM ChallengeResponseAuthentication in sshd.8
1878 - (djm) Disable and comment ChallengeResponseAuthentication in sshd_config 1879 - (djm) Disable and comment ChallengeResponseAuthentication in sshd_config
1879 - (djm) Allow PRNGd entropy collection from localhost TCP socket. Replace 1880 - (djm) Allow PRNGd entropy collection from localhost TCP socket. Replace
1880 "--with-egd-pool" configure option with "--with-prngd-socket" and 1881 "--with-egd-pool" configure option with "--with-prngd-socket" and
1881 "--with-prngd-port" options. Debugged and improved by Lutz Jaenicke 1882 "--with-prngd-port" options. Debugged and improved by Lutz Jaenicke
1882 <Lutz.Jaenicke@aet.TU-Cottbus.DE> 1883 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
1883 1884
188420010301 188520010301
1885 - (djm) Properly add -lcrypt if needed. 1886 - (djm) Properly add -lcrypt if needed.
1886 - (djm) Force standard PAM conversation function in a few more places. 1887 - (djm) Force standard PAM conversation function in a few more places.
1887 Patch from Redhat 2.5.1p1-2 RPM, probably Nalin Dahyabhai 1888 Patch from Redhat 2.5.1p1-2 RPM, probably Nalin Dahyabhai
1888 <nalin@redhat.com> 1889 <nalin@redhat.com>
1889 - (djm) Cygwin needs pw->pw_gecos copied too. Patch from Corinna Vinschen 1890 - (djm) Cygwin needs pw->pw_gecos copied too. Patch from Corinna Vinschen
1890 <vinschen@redhat.com> 1891 <vinschen@redhat.com>
1891 - (djm) Released 2.5.1p2 1892 - (djm) Released 2.5.1p2
1892 1893
189320010228 189420010228
1894 - (djm) Detect endianness in configure and use it in rijndael.c. Fixes 1895 - (djm) Detect endianness in configure and use it in rijndael.c. Fixes
1895 "Bad packet length" bugs. 1896 "Bad packet length" bugs.
1896 - (djm) Fully revert PAM session patch (again). All PAM session init is 1897 - (djm) Fully revert PAM session patch (again). All PAM session init is
1897 now done before the final fork(). 1898 now done before the final fork().
1898 - (djm) EGD detection patch from Tim Rice <tim@multitalents.net> 1899 - (djm) EGD detection patch from Tim Rice <tim@multitalents.net>
1899 - (djm) Remove /tmp from EGD socket search list 1900 - (djm) Remove /tmp from EGD socket search list
1900 1901
190120010227 190220010227
1902 - (bal) Applied shutdown() patch for sftp.c by Corinna Vinschen 1903 - (bal) Applied shutdown() patch for sftp.c by Corinna Vinschen
1903 <vinschen@redhat.com> 1904 <vinschen@redhat.com>
1904 - (bal) OpenBSD Sync 1905 - (bal) OpenBSD Sync
1905 - markus@cvs.openbsd.org 2001/02/23 15:37:45 1906 - markus@cvs.openbsd.org 2001/02/23 15:37:45
1906 [session.c] 1907 [session.c]
1907 handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients 1908 handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
1908 - (bal) sshd.init support for all Redhat release. Patch by Jim Knoble 1909 - (bal) sshd.init support for all Redhat release. Patch by Jim Knoble
1909 <jmknoble@jmknoble.cx> 1910 <jmknoble@jmknoble.cx>
1910 - (djm) Fix up POSIX saved uid support. Report from Mark Miller 1911 - (djm) Fix up POSIX saved uid support. Report from Mark Miller
1911 <markm@swoon.net> 1912 <markm@swoon.net>
1912 - (djm) Search for -lcrypt on FreeBSD too 1913 - (djm) Search for -lcrypt on FreeBSD too
1913 - (djm) fatal() on OpenSSL version mismatch 1914 - (djm) fatal() on OpenSSL version mismatch
@@ -1920,14 +1921,14 @@
1920 2.3.x. 1921 2.3.x.
1921 - (djm) Avoid warnings for missing broken IP_TOS. Patch from Mark Miller 1922 - (djm) Avoid warnings for missing broken IP_TOS. Patch from Mark Miller
1922 <markm@swoon.net> 1923 <markm@swoon.net>
1923 - (djm) Open Server 5 doesn't need BROKEN_SAVED_UIDS. Patch from Tim Rice 1924 - (djm) Open Server 5 doesn't need BROKEN_SAVED_UIDS. Patch from Tim Rice
1924 <tim@multitalents.net> 1925 <tim@multitalents.net>
1925 - (djm) Avoid multiple definition of _PATH_LS. Patch from Tim Rice 1926 - (djm) Avoid multiple definition of _PATH_LS. Patch from Tim Rice
1926 <tim@multitalents.net> 1927 <tim@multitalents.net>
1927 1928
192820010226 192920010226
1929 - (bal) Fixed bsd-snprinf.c so it now honors 'BROKEN_SNPRINTF' again. 1930 - (bal) Fixed bsd-snprinf.c so it now honors 'BROKEN_SNPRINTF' again.
1930 - (djm) Some systems (SCO3, NeXT) have weird saved uid semantics. 1931 - (djm) Some systems (SCO3, NeXT) have weird saved uid semantics.
1931 Based on patch from Tim Rice <tim@multitalents.net> 1932 Based on patch from Tim Rice <tim@multitalents.net>
1932 1933
193320010225 193420010225
@@ -1937,7 +1938,7 @@
1937 platform defines u_int64_t as being that. 1938 platform defines u_int64_t as being that.
1938 1939
193920010224 194020010224
1940 - (bal) Missed part of the UNIX sockets patch. Patch by Corinna 1941 - (bal) Missed part of the UNIX sockets patch. Patch by Corinna
1941 Vinschen <vinschen@redhat.com> 1942 Vinschen <vinschen@redhat.com>
1942 - (bal) Reorder where 'strftime' is detected to resolve linking 1943 - (bal) Reorder where 'strftime' is detected to resolve linking
1943 issues on SCO. Patch by Tim Rice <tim@multitalents.net> 1944 issues on SCO. Patch by Tim Rice <tim@multitalents.net>
@@ -1955,10 +1956,10 @@
1955 <tell@telltronics.org> 1956 <tell@telltronics.org>
1956 - (bal) Patch to force OpenSSH rpm to require the same version of OpenSSL 1957 - (bal) Patch to force OpenSSH rpm to require the same version of OpenSSL
1957 that it was compiled against. Patch by Pekka Savola <pekkas@netcore.fi> 1958 that it was compiled against. Patch by Pekka Savola <pekkas@netcore.fi>
1958 - (bal) Double -I for OpenSSL on SCO. Patch by Tim Rice 1959 - (bal) Double -I for OpenSSL on SCO. Patch by Tim Rice
1959 <tim@multitalents.net> 1960 <tim@multitalents.net>
1960 1961
196120010222 196220010222
1962 - (bal) Corrected SCO luid patch by svaughan <svaughan@asterion.com> 1963 - (bal) Corrected SCO luid patch by svaughan <svaughan@asterion.com>
1963 - (bal) Added mdoc2man.pl from Mark Roth <roth@feep.net> 1964 - (bal) Added mdoc2man.pl from Mark Roth <roth@feep.net>
1964 - (bal) Removed reference to liblogin from contrib/README. It was 1965 - (bal) Removed reference to liblogin from contrib/README. It was
@@ -1968,14 +1969,14 @@
1968 1969
196920010221 197020010221
1970 - (bal) Removed -L/usr/ucblib -R/usr/ucblib for Solaris platform. 1971 - (bal) Removed -L/usr/ucblib -R/usr/ucblib for Solaris platform.
1971 - (bal) Fixed OpenSSL rework to use $saved_*. Patch by Tim Rice 1972 - (bal) Fixed OpenSSL rework to use $saved_*. Patch by Tim Rice
1972 <tim@multitalents.net> 1973 <tim@multitalents.net>
1973 - (bal) Reverted out of 2001/02/15 patch by djm below because it 1974 - (bal) Reverted out of 2001/02/15 patch by djm below because it
1974 breaks Solaris. 1975 breaks Solaris.
1975 - (djm) Move PAM session setup back to before setuid to user. 1976 - (djm) Move PAM session setup back to before setuid to user.
1976 fixes problems on Solaris-drived PAMs. 1977 fixes problems on Solaris-drived PAMs.
1977 - (stevesk) session.c: back out to where we were before: 1978 - (stevesk) session.c: back out to where we were before:
1978 - (djm) Move PAM session initialisation until after fork in sshd. Patch 1979 - (djm) Move PAM session initialisation until after fork in sshd. Patch
1979 from Nalin Dahyabhai <nalin@redhat.com> 1980 from Nalin Dahyabhai <nalin@redhat.com>
1980 1981
198120010220 198220010220
@@ -2019,33 +2020,33 @@
2019 - Release 2.5.1p1 2020 - Release 2.5.1p1
2020 2021
202120010218 202220010218
2022 - (bal) Patch for fix FCHMOD reference in ftp-client.c by Tim Rice 2023 - (bal) Patch for fix FCHMOD reference in ftp-client.c by Tim Rice
2023 <tim@multitalents.net> 2024 <tim@multitalents.net>
2024 - (Bal) Patch for lack of RA_RESTART in misc.c for mysignal by 2025 - (Bal) Patch for lack of RA_RESTART in misc.c for mysignal by
2025 stevesk 2026 stevesk
2026 - (djm) Fix my breaking of cygwin builds, Patch from Corinna Vinschen 2027 - (djm) Fix my breaking of cygwin builds, Patch from Corinna Vinschen
2027 <vinschen@redhat.com> and myself. 2028 <vinschen@redhat.com> and myself.
2028 - (djm) Close listen_sock on bind() failures. Patch from Arkadiusz 2029 - (djm) Close listen_sock on bind() failures. Patch from Arkadiusz
2029 Miskiewicz <misiek@pld.ORG.PL> 2030 Miskiewicz <misiek@pld.ORG.PL>
2030 - (djm) Robustify EGD/PRNGd code in face of socket closures. Patch from 2031 - (djm) Robustify EGD/PRNGd code in face of socket closures. Patch from
2031 Todd C. Miller <Todd.Miller@courtesan.com> 2032 Todd C. Miller <Todd.Miller@courtesan.com>
2032 - (djm) Use ttyname() to determine name of tty returned by openpty() 2033 - (djm) Use ttyname() to determine name of tty returned by openpty()
2033 rather then risking overflow. Patch from Marek Michalkiewicz 2034 rather then risking overflow. Patch from Marek Michalkiewicz
2034 <marekm@amelek.gda.pl> 2035 <marekm@amelek.gda.pl>
2035 - (djm) Swapped tests for no_libsocket and no_libnsl in configure.in. 2036 - (djm) Swapped tests for no_libsocket and no_libnsl in configure.in.
2036 Patch from Marek Michalkiewicz <marekm@amelek.gda.pl> 2037 Patch from Marek Michalkiewicz <marekm@amelek.gda.pl>
2037 - (djm) Doc fixes from Pekka Savola <pekkas@netcore.fi> 2038 - (djm) Doc fixes from Pekka Savola <pekkas@netcore.fi>
2038 - (djm) Use SA_INTERRUPT along SA_RESTART if present (equivalent for 2039 - (djm) Use SA_INTERRUPT along SA_RESTART if present (equivalent for
2039 SunOS) 2040 SunOS)
2040 - (djm) SCO needs librpc for libwrap. Patch from Tim Rice 2041 - (djm) SCO needs librpc for libwrap. Patch from Tim Rice
2041 <tim@multitalents.net> 2042 <tim@multitalents.net>
2042 - (stevesk) misc.c: cpp rework of SA_(INTERRUPT|RESTART) handling. 2043 - (stevesk) misc.c: cpp rework of SA_(INTERRUPT|RESTART) handling.
2043 - (stevesk) scp.c: use mysignal() for updateprogressmeter() handler. 2044 - (stevesk) scp.c: use mysignal() for updateprogressmeter() handler.
2044 - (djm) SA_INTERRUPT is the converse of SA_RESTART, apply it only for 2045 - (djm) SA_INTERRUPT is the converse of SA_RESTART, apply it only for
2045 SIGALRM. 2046 SIGALRM.
2046 - (djm) Move entropy.c over to mysignal() 2047 - (djm) Move entropy.c over to mysignal()
2047 - (djm) SunOS 4.x also needs to define HAVE_BOGUS_SYS_QUEUE_H as it has 2048 - (djm) SunOS 4.x also needs to define HAVE_BOGUS_SYS_QUEUE_H as it has
2048 a <sys/queue.h> that lacks the TAILQ_* macros. Patch from Todd C. 2049 a <sys/queue.h> that lacks the TAILQ_* macros. Patch from Todd C.
2049 Miller <Todd.Miller@courtesan.com> 2050 Miller <Todd.Miller@courtesan.com>
2050 - (djm) Update RPM spec files for 2.5.0p1 2051 - (djm) Update RPM spec files for 2.5.0p1
2051 - (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie 2052 - (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie
@@ -2055,8 +2056,8 @@
205520010217 205620010217
2056 - (bal) OpenBSD Sync: 2057 - (bal) OpenBSD Sync:
2057 - markus@cvs.openbsd.org 2001/02/16 13:38:18 2058 - markus@cvs.openbsd.org 2001/02/16 13:38:18
2058 [channel.c] 2059 [channel.c]
2059 remove debug 2060 remove debug
2060 - markus@cvs.openbsd.org 2001/02/16 14:03:43 2061 - markus@cvs.openbsd.org 2001/02/16 14:03:43
2061 [session.c] 2062 [session.c]
2062 proper payload-length check for x11 w/o screen-number 2063 proper payload-length check for x11 w/o screen-number
@@ -2067,7 +2068,7 @@
2067 - (bal) Added DG/UX case and set that they have a broken IPTOS. 2068 - (bal) Added DG/UX case and set that they have a broken IPTOS.
2068 - (djm) Mini-configure reorder patch from Tim Rice <tim@multitalents.net> 2069 - (djm) Mini-configure reorder patch from Tim Rice <tim@multitalents.net>
2069 Fixes linking on SCO. 2070 Fixes linking on SCO.
2070 - (djm) Make gnome-ssh-askpass handle multi-line prompts. Patch from 2071 - (djm) Make gnome-ssh-askpass handle multi-line prompts. Patch from
2071 Nalin Dahyabhai <nalin@redhat.com> 2072 Nalin Dahyabhai <nalin@redhat.com>
2072 - (djm) BSD license for gnome-ssh-askpass (was X11) 2073 - (djm) BSD license for gnome-ssh-askpass (was X11)
2073 - (djm) KNF on gnome-ssh-askpass 2074 - (djm) KNF on gnome-ssh-askpass
@@ -2087,7 +2088,7 @@
2087 needed on Unixware 2.x. 2088 needed on Unixware 2.x.
2088 2089
208920010215 209020010215
2090 - (djm) Move PAM session setup back to before setuid to user. Fixes 2091 - (djm) Move PAM session setup back to before setuid to user. Fixes
2091 problems on Solaris-derived PAMs. 2092 problems on Solaris-derived PAMs.
2092 - (djm) Clean up PAM namespace. Suggested by Darren Moffat 2093 - (djm) Clean up PAM namespace. Suggested by Darren Moffat
2093 <Darren.Moffat@eng.sun.com> 2094 <Darren.Moffat@eng.sun.com>
@@ -2133,9 +2134,9 @@
2133 2134
213420010214 213520010214
2135 - (djm) Don't try to close PAM session or delete credentials if the 2136 - (djm) Don't try to close PAM session or delete credentials if the
2136 session has not been open or credentials not set. Based on patch from 2137 session has not been open or credentials not set. Based on patch from
2137 Andrew Bartlett <abartlet@pcug.org.au> 2138 Andrew Bartlett <abartlet@pcug.org.au>
2138 - (djm) Move PAM session initialisation until after fork in sshd. Patch 2139 - (djm) Move PAM session initialisation until after fork in sshd. Patch
2139 from Nalin Dahyabhai <nalin@redhat.com> 2140 from Nalin Dahyabhai <nalin@redhat.com>
2140 - (bal) Missing function prototype in bsd-snprintf.c patch by 2141 - (bal) Missing function prototype in bsd-snprintf.c patch by
2141 Mark Miller <markm@swoon.net> 2142 Mark Miller <markm@swoon.net>
@@ -2153,12 +2154,12 @@
2153 - (stevesk) auth1.c: fix PAM passwordless check. 2154 - (stevesk) auth1.c: fix PAM passwordless check.
2154 2155
215520010212 215620010212
2156 - (djm) Update Redhat specfile to allow --define "skip_x11_askpass 1", 2157 - (djm) Update Redhat specfile to allow --define "skip_x11_askpass 1",
2157 --define "skip_gnome_askpass 1", --define "rh7 1" and make the 2158 --define "skip_gnome_askpass 1", --define "rh7 1" and make the
2158 implicit rpm-3.0.5 dependancy explicit. Patch and suggestions from 2159 implicit rpm-3.0.5 dependancy explicit. Patch and suggestions from
2159 Pekka Savola <pekkas@netcore.fi> 2160 Pekka Savola <pekkas@netcore.fi>
2160 - (djm) Clean up PCRE text in INSTALL 2161 - (djm) Clean up PCRE text in INSTALL
2161 - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby 2162 - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby
2162 <mib@unimelb.edu.au> 2163 <mib@unimelb.edu.au>
2163 - (bal) NCR SVR4 compatiblity provide by Don Bragg <thewizarddon@yahoo.com> 2164 - (bal) NCR SVR4 compatiblity provide by Don Bragg <thewizarddon@yahoo.com>
2164 - (stevesk) session.c: remove debugging code. 2165 - (stevesk) session.c: remove debugging code.
@@ -2197,7 +2198,7 @@
2197 do not ask for passphrase in batch mode; report from ejb@ql.org 2198 do not ask for passphrase in batch mode; report from ejb@ql.org
2198 - itojun@cvs.opebsd.org 2001/02/08 10:47:05 2199 - itojun@cvs.opebsd.org 2001/02/08 10:47:05
2199 [sshconnect.c sshconnect1.c sshconnect2.c] 2200 [sshconnect.c sshconnect1.c sshconnect2.c]
2200 %.30s is too short for IPv6 numeric address. use %.128s for now. 2201 %.30s is too short for IPv6 numeric address. use %.128s for now.
2201 markus ok 2202 markus ok
2202 - markus@cvs.openbsd.org 2001/02/09 12:28:35 2203 - markus@cvs.openbsd.org 2001/02/09 12:28:35
2203 [sshconnect2.c] 2204 [sshconnect2.c]
@@ -2236,11 +2237,11 @@
2236 s/getline/Linebuf_getline/; from roumen.petrov@skalasoft.com 2237 s/getline/Linebuf_getline/; from roumen.petrov@skalasoft.com
2237 - itojun@cvs.openbsd.org 2001/02/09 9:04:59 2238 - itojun@cvs.openbsd.org 2001/02/09 9:04:59
2238 [ssh-keyscan.c] 2239 [ssh-keyscan.c]
2239 do not assume malloc() returns zero-filled region. found by 2240 do not assume malloc() returns zero-filled region. found by
2240 malloc.conf=AJ. 2241 malloc.conf=AJ.
2241 - markus@cvs.openbsd.org 2001/02/08 22:35:30 2242 - markus@cvs.openbsd.org 2001/02/08 22:35:30
2242 [sshconnect.c] 2243 [sshconnect.c]
2243 don't connect if batch_mode is true and stricthostkeychecking set to 2244 don't connect if batch_mode is true and stricthostkeychecking set to
2244 'ask' 2245 'ask'
2245 - djm@cvs.openbsd.org 2001/02/04 21:26:07 2246 - djm@cvs.openbsd.org 2001/02/04 21:26:07
2246 [sshd_config] 2247 [sshd_config]
@@ -2259,15 +2260,15 @@
2259 fix size_t -> int cast (use u_long). markus ok 2260 fix size_t -> int cast (use u_long). markus ok
2260 - 1.47 Thu Feb 8 23:11:42 GMT 2001 by dugsong 2261 - 1.47 Thu Feb 8 23:11:42 GMT 2001 by dugsong
2261 [serverloop.c sshconnect1.c] 2262 [serverloop.c sshconnect1.c]
2262 mitigate SSH1 traffic analysis - from Solar Designer 2263 mitigate SSH1 traffic analysis - from Solar Designer
2263 <solar@openwall.com>, ok provos@ 2264 <solar@openwall.com>, ok provos@
2264 - (bal) fixed sftp-client.c. Return 'status' instead of '0' 2265 - (bal) fixed sftp-client.c. Return 'status' instead of '0'
2265 (from the OpenBSD tree) 2266 (from the OpenBSD tree)
2266 - (bal) Synced ssh.1, ssh-add.1 and sshd.8 w/ OpenBSD 2267 - (bal) Synced ssh.1, ssh-add.1 and sshd.8 w/ OpenBSD
2267 - (bal) sftp-sever.c '%8lld' to '%8llu' (OpenBSD Sync) 2268 - (bal) sftp-sever.c '%8lld' to '%8llu' (OpenBSD Sync)
2268 - (bal) uuencode.c resync w/ OpenBSD tree, plus whitespace. 2269 - (bal) uuencode.c resync w/ OpenBSD tree, plus whitespace.
2269 - (bal) A bit more whitespace cleanup 2270 - (bal) A bit more whitespace cleanup
2270 - (djm) Set PAM_RHOST earlier, patch from Andrew Bartlett 2271 - (djm) Set PAM_RHOST earlier, patch from Andrew Bartlett
2271 <abartlet@pcug.org.au> 2272 <abartlet@pcug.org.au>
2272 - (stevesk) misc.c: ssh.h not needed. 2273 - (stevesk) misc.c: ssh.h not needed.
2273 - (stevesk) compat.c: more friendly cpp error 2274 - (stevesk) compat.c: more friendly cpp error
@@ -2354,10 +2355,10 @@
2354 - (bal) sftp-client.c replace NULL w/ 0 in do_ls() (pending in OpenBSD tree) 2355 - (bal) sftp-client.c replace NULL w/ 0 in do_ls() (pending in OpenBSD tree)
2355 2356
235620010209 235720010209
2357 - (bal) patch to vis.c to deal with HAVE_VIS right by Robert Mooney 2358 - (bal) patch to vis.c to deal with HAVE_VIS right by Robert Mooney
2358 <rjmooney@mediaone.net> 2359 <rjmooney@mediaone.net>
2359 - (bal) .c.o rule in openbsd-compat/Makefile.in did not make it to the 2360 - (bal) .c.o rule in openbsd-compat/Makefile.in did not make it to the
2360 main tree while porting forward. Pointed out by Lutz Jaenicke 2361 main tree while porting forward. Pointed out by Lutz Jaenicke
2361 <Lutz.Jaenicke@aet.TU-Cottbus.DE> 2362 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
2362 - (bal) double entry in configure.in. Pointed out by Lutz Jaenicke 2363 - (bal) double entry in configure.in. Pointed out by Lutz Jaenicke
2363 <Lutz.Jaenicke@aet.TU-Cottbus.DE> 2364 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
@@ -2403,7 +2404,7 @@
2403 - djm@cvs.openbsd.org 2001/02/06 23:30:28 2404 - djm@cvs.openbsd.org 2001/02/06 23:30:28
2404 [sftp-client.c] 2405 [sftp-client.c]
2405 replace arc4random with counter for request ids; ok markus@ 2406 replace arc4random with counter for request ids; ok markus@
2406 - (djm) Define _PATH_TTY for systems that don't. Report from Lutz 2407 - (djm) Define _PATH_TTY for systems that don't. Report from Lutz
2407 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> 2408 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
2408 2409
240920010208 241020010208
@@ -2468,14 +2469,14 @@
2468 make the alpha happy 2469 make the alpha happy
2469 - markus@cvs.openbsd.org 2001/01/31 13:37:24 2470 - markus@cvs.openbsd.org 2001/01/31 13:37:24
2470 [channels.c channels.h serverloop.c ssh.c] 2471 [channels.c channels.h serverloop.c ssh.c]
2471 do not disconnect if local port forwarding fails, e.g. if port is 2472 do not disconnect if local port forwarding fails, e.g. if port is
2472 already in use 2473 already in use
2473 - markus@cvs.openbsd.org 2001/02/01 14:58:09 2474 - markus@cvs.openbsd.org 2001/02/01 14:58:09
2474 [channels.c] 2475 [channels.c]
2475 use ipaddr in channel messages, ietf-secsh wants this 2476 use ipaddr in channel messages, ietf-secsh wants this
2476 - markus@cvs.openbsd.org 2001/01/31 12:26:20 2477 - markus@cvs.openbsd.org 2001/01/31 12:26:20
2477 [channels.c] 2478 [channels.c]
2478 ssh.com-2.0.1x does not send additional info in CHANNEL_OPEN_FAILURE 2479 ssh.com-2.0.1x does not send additional info in CHANNEL_OPEN_FAILURE
2479 messages; bug report from edmundo@rano.org 2480 messages; bug report from edmundo@rano.org
2480 - markus@cvs.openbsd.org 2001/01/31 13:48:09 2481 - markus@cvs.openbsd.org 2001/01/31 13:48:09
2481 [sshconnect2.c] 2482 [sshconnect2.c]
@@ -2512,7 +2513,7 @@
2512 [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c] 2513 [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c]
2513 Basic interactive sftp client; ok theo@ 2514 Basic interactive sftp client; ok theo@
2514 - (djm) Update RPM specs for new sftp binary 2515 - (djm) Update RPM specs for new sftp binary
2515 - (djm) Update several bits for new optional reverse lookup stuff. I 2516 - (djm) Update several bits for new optional reverse lookup stuff. I
2516 think I got them all. 2517 think I got them all.
2517 - (djm) Makefile.in fixes 2518 - (djm) Makefile.in fixes
2518 - (stevesk) add mysignal() wrapper and use it for the protocol 2 2519 - (stevesk) add mysignal() wrapper and use it for the protocol 2
@@ -6058,4 +6059,4 @@
6058 - Wrote replacements for strlcpy and mkdtemp 6059 - Wrote replacements for strlcpy and mkdtemp
6059 - Released 1.0pre1 6060 - Released 1.0pre1
6060 6061
6061$Id: ChangeLog,v 1.1409 2001/07/18 16:01:46 mouring Exp $ 6062$Id: ChangeLog,v 1.1410 2001/07/18 16:05:50 mouring Exp $