diff options
author | Damien Miller <djm@mindrot.org> | 2000-09-16 13:29:08 +1100 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2000-09-16 13:29:08 +1100 |
commit | e4340be5b3ff16f4d9ba5e3ea7e449dc1b6fa7a8 (patch) | |
tree | aba9e2ae234edeb888b922c6a13b755c1248deea /ChangeLog | |
parent | f384c366d33cb435627743f7ea0ed3f966543d40 (diff) |
- (djm) Merge OpenBSD changes:
- markus@cvs.openbsd.org 2000/09/05 02:59:57
[session.c]
print hostname (not hushlogin)
- markus@cvs.openbsd.org 2000/09/05 13:18:48
[authfile.c ssh-add.c]
enable ssh-add -d for DSA keys
- markus@cvs.openbsd.org 2000/09/05 13:20:49
[sftp-server.c]
cleanup
- markus@cvs.openbsd.org 2000/09/06 03:46:41
[authfile.h]
prototype
- deraadt@cvs.openbsd.org 2000/09/07 14:27:56
[ALL]
cleanup copyright notices on all files. I have attempted to be
accurate with the details. everything is now under Tatu's licence
(which I copied from his readme), and/or the core-sdi bsd-ish thing
for deattack, or various openbsd developers under a 2-term bsd
licence. We're not changing any rules, just being accurate.
- markus@cvs.openbsd.org 2000/09/07 14:40:30
[channels.c channels.h clientloop.c serverloop.c ssh.c]
cleanup window and packet sizes for ssh2 flow control; ok niels
- markus@cvs.openbsd.org 2000/09/07 14:53:00
[scp.c]
typo
- markus@cvs.openbsd.org 2000/09/07 15:13:37
[auth-options.c auth-options.h auth-rh-rsa.c auth-rsa.c auth.c]
[authfile.h canohost.c channels.h compat.c hostfile.h log.c match.h]
[pty.c readconf.c]
some more Copyright fixes
- markus@cvs.openbsd.org 2000/09/08 03:02:51
[README.openssh2]
bye bye
- deraadt@cvs.openbsd.org 2000/09/11 18:38:33
[LICENCE cipher.c]
a few more comments about it being ARC4 not RC4
- markus@cvs.openbsd.org 2000/09/12 14:53:11
[log-client.c log-server.c log.c ssh.1 ssh.c ssh.h sshd.8 sshd.c]
multiple debug levels
- markus@cvs.openbsd.org 2000/09/14 14:25:15
[clientloop.c]
typo
- deraadt@cvs.openbsd.org 2000/09/15 01:13:51
[ssh-agent.c]
check return value for setenv(3) for failure, and deal appropriately
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 398 |
1 files changed, 223 insertions, 175 deletions
@@ -1,3 +1,51 @@ | |||
1 | 20000916 | ||
2 | - (djm) Merge OpenBSD changes: | ||
3 | - markus@cvs.openbsd.org 2000/09/05 02:59:57 | ||
4 | [session.c] | ||
5 | print hostname (not hushlogin) | ||
6 | - markus@cvs.openbsd.org 2000/09/05 13:18:48 | ||
7 | [authfile.c ssh-add.c] | ||
8 | enable ssh-add -d for DSA keys | ||
9 | - markus@cvs.openbsd.org 2000/09/05 13:20:49 | ||
10 | [sftp-server.c] | ||
11 | cleanup | ||
12 | - markus@cvs.openbsd.org 2000/09/06 03:46:41 | ||
13 | [authfile.h] | ||
14 | prototype | ||
15 | - deraadt@cvs.openbsd.org 2000/09/07 14:27:56 | ||
16 | [ALL] | ||
17 | cleanup copyright notices on all files. I have attempted to be | ||
18 | accurate with the details. everything is now under Tatu's licence | ||
19 | (which I copied from his readme), and/or the core-sdi bsd-ish thing | ||
20 | for deattack, or various openbsd developers under a 2-term bsd | ||
21 | licence. We're not changing any rules, just being accurate. | ||
22 | - markus@cvs.openbsd.org 2000/09/07 14:40:30 | ||
23 | [channels.c channels.h clientloop.c serverloop.c ssh.c] | ||
24 | cleanup window and packet sizes for ssh2 flow control; ok niels | ||
25 | - markus@cvs.openbsd.org 2000/09/07 14:53:00 | ||
26 | [scp.c] | ||
27 | typo | ||
28 | - markus@cvs.openbsd.org 2000/09/07 15:13:37 | ||
29 | [auth-options.c auth-options.h auth-rh-rsa.c auth-rsa.c auth.c] | ||
30 | [authfile.h canohost.c channels.h compat.c hostfile.h log.c match.h] | ||
31 | [pty.c readconf.c] | ||
32 | some more Copyright fixes | ||
33 | - markus@cvs.openbsd.org 2000/09/08 03:02:51 | ||
34 | [README.openssh2] | ||
35 | bye bye | ||
36 | - deraadt@cvs.openbsd.org 2000/09/11 18:38:33 | ||
37 | [LICENCE cipher.c] | ||
38 | a few more comments about it being ARC4 not RC4 | ||
39 | - markus@cvs.openbsd.org 2000/09/12 14:53:11 | ||
40 | [log-client.c log-server.c log.c ssh.1 ssh.c ssh.h sshd.8 sshd.c] | ||
41 | multiple debug levels | ||
42 | - markus@cvs.openbsd.org 2000/09/14 14:25:15 | ||
43 | [clientloop.c] | ||
44 | typo | ||
45 | - deraadt@cvs.openbsd.org 2000/09/15 01:13:51 | ||
46 | [ssh-agent.c] | ||
47 | check return value for setenv(3) for failure, and deal appropriately | ||
48 | |||
1 | 20000913 | 49 | 20000913 |
2 | - (djm) Fix server not exiting with jobs in background. | 50 | - (djm) Fix server not exiting with jobs in background. |
3 | 51 | ||
@@ -51,7 +99,7 @@ | |||
51 | - (djm) Release 2.2.0p1 | 99 | - (djm) Release 2.2.0p1 |
52 | 100 | ||
53 | 20000831 | 101 | 20000831 |
54 | - (djm) Workaround SIGPIPE problems on SCO. Fix from Aran Cox | 102 | - (djm) Workaround SIGPIPE problems on SCO. Fix from Aran Cox |
55 | <acox@cv.telegroup.com> | 103 | <acox@cv.telegroup.com> |
56 | - (djm) Pick up new version (2.2.0) from OpenBSD CVS | 104 | - (djm) Pick up new version (2.2.0) from OpenBSD CVS |
57 | 105 | ||
@@ -59,7 +107,7 @@ | |||
59 | - (djm) Compile warning fixes from Mark Miller <markm@swoon.net> | 107 | - (djm) Compile warning fixes from Mark Miller <markm@swoon.net> |
60 | - (djm) Periodically rekey arc4random | 108 | - (djm) Periodically rekey arc4random |
61 | - (djm) Clean up diff against OpenBSD. | 109 | - (djm) Clean up diff against OpenBSD. |
62 | - (djm) HPUX 11 needs USE_PIPES as well: Kevin Steves | 110 | - (djm) HPUX 11 needs USE_PIPES as well: Kevin Steves |
63 | <stevesk@sweden.hp.com> | 111 | <stevesk@sweden.hp.com> |
64 | - (djm) Quieten the pam delete credentials error message | 112 | - (djm) Quieten the pam delete credentials error message |
65 | - (djm) Fix printing of $DISPLAY hack if set by system type. Report from | 113 | - (djm) Fix printing of $DISPLAY hack if set by system type. Report from |
@@ -68,8 +116,8 @@ | |||
68 | - (djm) Fix doh in bsd-arc4random.c | 116 | - (djm) Fix doh in bsd-arc4random.c |
69 | 117 | ||
70 | 20000829 | 118 | 20000829 |
71 | - (djm) Fix ^C ignored issue on Solaris. Diagnosis from Gert | 119 | - (djm) Fix ^C ignored issue on Solaris. Diagnosis from Gert |
72 | Doering <gert@greenie.muc.de>, John Horne <J.Horne@plymouth.ac.uk> and | 120 | Doering <gert@greenie.muc.de>, John Horne <J.Horne@plymouth.ac.uk> and |
73 | Garrick James <garrick@james.net> | 121 | Garrick James <garrick@james.net> |
74 | - (djm) Check for SCO pty naming style (ptyp%d/ttyp%d). Based on fix from | 122 | - (djm) Check for SCO pty naming style (ptyp%d/ttyp%d). Based on fix from |
75 | Bastian Trompetter <btrompetter@firemail.de> | 123 | Bastian Trompetter <btrompetter@firemail.de> |
@@ -108,8 +156,8 @@ | |||
108 | 156 | ||
109 | 20000823 | 157 | 20000823 |
110 | - (djm) Define USE_PIPES to avoid socketpair problems on HPUX 10 and SunOS 4 | 158 | - (djm) Define USE_PIPES to avoid socketpair problems on HPUX 10 and SunOS 4 |
111 | Avoids "scp never exits" problem. Reports from Lutz Jaenicke | 159 | Avoids "scp never exits" problem. Reports from Lutz Jaenicke |
112 | <Lutz.Jaenicke@aet.TU-Cottbus.DE> and Tamito KAJIYAMA | 160 | <Lutz.Jaenicke@aet.TU-Cottbus.DE> and Tamito KAJIYAMA |
113 | <kajiyama@grad.sccs.chukyo-u.ac.jp> | 161 | <kajiyama@grad.sccs.chukyo-u.ac.jp> |
114 | - (djm) Pick up LOGIN_PROGRAM from environment or PATH if not set by headers | 162 | - (djm) Pick up LOGIN_PROGRAM from environment or PATH if not set by headers |
115 | - (djm) Add local version to version.h | 163 | - (djm) Add local version to version.h |
@@ -139,8 +187,8 @@ | |||
139 | [crc32.h] | 187 | [crc32.h] |
140 | proper prototype | 188 | proper prototype |
141 | - markus@cvs.openbsd.org 2000/08/19 15:34:44 | 189 | - markus@cvs.openbsd.org 2000/08/19 15:34:44 |
142 | [authfd.c authfd.h key.c key.h ssh-add.1 ssh-add.c ssh-agent.1] | 190 | [authfd.c authfd.h key.c key.h ssh-add.1 ssh-add.c ssh-agent.1] |
143 | [ssh-agent.c ssh-keygen.c sshconnect1.c sshconnect2.c Makefile] | 191 | [ssh-agent.c ssh-keygen.c sshconnect1.c sshconnect2.c Makefile] |
144 | [fingerprint.c fingerprint.h] | 192 | [fingerprint.c fingerprint.h] |
145 | add SSH2/DSA support to the agent and some other DSA related cleanups. | 193 | add SSH2/DSA support to the agent and some other DSA related cleanups. |
146 | (note that we cannot talk to ssh.com's ssh2 agents) | 194 | (note that we cannot talk to ssh.com's ssh2 agents) |
@@ -214,9 +262,9 @@ | |||
214 | 262 | ||
215 | 20000816 | 263 | 20000816 |
216 | - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc) | 264 | - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc) |
217 | - (djm) Fix strerror replacement for old SunOS. Based on patch from | 265 | - (djm) Fix strerror replacement for old SunOS. Based on patch from |
218 | Charles Levert <charles@comm.polymtl.ca> | 266 | Charles Levert <charles@comm.polymtl.ca> |
219 | - (djm) Seperate arc4random into seperate file and use OpenSSL's RC4 | 267 | - (djm) Seperate arc4random into seperate file and use OpenSSL's RC4 |
220 | implementation. | 268 | implementation. |
221 | - (djm) SUN_LEN macro for systems which lack it | 269 | - (djm) SUN_LEN macro for systems which lack it |
222 | 270 | ||
@@ -225,7 +273,7 @@ | |||
225 | - (djm) Avoid failures on Irix when ssh is not setuid. Fix from | 273 | - (djm) Avoid failures on Irix when ssh is not setuid. Fix from |
226 | Michael Stone <mstone@cs.loyola.edu> | 274 | Michael Stone <mstone@cs.loyola.edu> |
227 | - (djm) Don't seek in directory based lastlogs | 275 | - (djm) Don't seek in directory based lastlogs |
228 | - (djm) Fix --with-ipaddr-display configure option test. Patch from | 276 | - (djm) Fix --with-ipaddr-display configure option test. Patch from |
229 | Jarno Huuskonen <jhuuskon@messi.uku.fi> | 277 | Jarno Huuskonen <jhuuskon@messi.uku.fi> |
230 | - (djm) Fix AIX limits from Alexandre Oliva <oliva@lsd.ic.unicamp.br> | 278 | - (djm) Fix AIX limits from Alexandre Oliva <oliva@lsd.ic.unicamp.br> |
231 | 279 | ||
@@ -234,9 +282,9 @@ | |||
234 | Fabrice bacchella <fabrice.bacchella@marchfirst.fr> | 282 | Fabrice bacchella <fabrice.bacchella@marchfirst.fr> |
235 | 283 | ||
236 | 20000809 | 284 | 20000809 |
237 | - (djm) Define AIX hard limits if headers don't. Report from | 285 | - (djm) Define AIX hard limits if headers don't. Report from |
238 | Bill Painter <william.t.painter@lmco.com> | 286 | Bill Painter <william.t.painter@lmco.com> |
239 | - (djm) utmp direct write & SunOS 4 patch from Charles Levert | 287 | - (djm) utmp direct write & SunOS 4 patch from Charles Levert |
240 | <charles@comm.polymtl.ca> | 288 | <charles@comm.polymtl.ca> |
241 | 289 | ||
242 | 20000808 | 290 | 20000808 |
@@ -315,9 +363,9 @@ | |||
315 | - (djm) Fixup for AIX getuserattr() support from Tom Bertelson | 363 | - (djm) Fixup for AIX getuserattr() support from Tom Bertelson |
316 | <tbert@abac.com> | 364 | <tbert@abac.com> |
317 | - (djm) ReliantUNIX support from Udo Schweigert <ust@cert.siemens.de> | 365 | - (djm) ReliantUNIX support from Udo Schweigert <ust@cert.siemens.de> |
318 | - (djm) NeXT: dirent structures to get scp working from Ben Lindstrom | 366 | - (djm) NeXT: dirent structures to get scp working from Ben Lindstrom |
319 | <mouring@pconline.com> | 367 | <mouring@pconline.com> |
320 | - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report | 368 | - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report |
321 | from Jim Watt <jimw@peisj.pebio.com> | 369 | from Jim Watt <jimw@peisj.pebio.com> |
322 | - (djm) Replaced bsd-snprintf.c with one from Mutt source tree, it is known | 370 | - (djm) Replaced bsd-snprintf.c with one from Mutt source tree, it is known |
323 | to compile on more platforms (incl NeXT). | 371 | to compile on more platforms (incl NeXT). |
@@ -329,7 +377,7 @@ | |||
329 | cleanup, less cut&paste | 377 | cleanup, less cut&paste |
330 | - markus@cvs.openbsd.org 2000/06/26 15:59:19 | 378 | - markus@cvs.openbsd.org 2000/06/26 15:59:19 |
331 | [servconf.c servconf.h session.c sshd.8 sshd.c] | 379 | [servconf.c servconf.h session.c sshd.8 sshd.c] |
332 | MaxStartups: limit number of unauthenticated connections, work by | 380 | MaxStartups: limit number of unauthenticated connections, work by |
333 | theo and me | 381 | theo and me |
334 | - deraadt@cvs.openbsd.org 2000/07/05 14:18:07 | 382 | - deraadt@cvs.openbsd.org 2000/07/05 14:18:07 |
335 | [session.c] | 383 | [session.c] |
@@ -339,7 +387,7 @@ | |||
339 | typo | 387 | typo |
340 | - aaron@cvs.openbsd.org 2000/07/05 22:06:58 | 388 | - aaron@cvs.openbsd.org 2000/07/05 22:06:58 |
341 | [scp.1 ssh-agent.1 ssh-keygen.1 sshd.8] | 389 | [scp.1 ssh-agent.1 ssh-keygen.1 sshd.8] |
342 | Insert more missing .El directives. Our troff really should identify | 390 | Insert more missing .El directives. Our troff really should identify |
343 | these and spit out a warning. | 391 | these and spit out a warning. |
344 | - todd@cvs.openbsd.org 2000/07/06 21:55:04 | 392 | - todd@cvs.openbsd.org 2000/07/06 21:55:04 |
345 | [auth-rsa.c auth2.c ssh-keygen.c] | 393 | [auth-rsa.c auth2.c ssh-keygen.c] |
@@ -372,7 +420,7 @@ | |||
372 | Kevin Steves <stevesk@sweden.hp.com> | 420 | Kevin Steves <stevesk@sweden.hp.com> |
373 | - (djm) Match prototype and function declaration for rresvport_af. | 421 | - (djm) Match prototype and function declaration for rresvport_af. |
374 | Problem report from Niklas Edmundsson <nikke@ing.umu.se> | 422 | Problem report from Niklas Edmundsson <nikke@ing.umu.se> |
375 | - (djm) Missing $(DESTDIR) on host-key target causing problems with RPM | 423 | - (djm) Missing $(DESTDIR) on host-key target causing problems with RPM |
376 | builds. Problem report from Gregory Leblanc <GLeblanc@cu-portland.edu> | 424 | builds. Problem report from Gregory Leblanc <GLeblanc@cu-portland.edu> |
377 | - (djm) Replace ut_name with ut_user. Patch from Jim Watt | 425 | - (djm) Replace ut_name with ut_user. Patch from Jim Watt |
378 | <jimw@peisj.pebio.com> | 426 | <jimw@peisj.pebio.com> |
@@ -382,19 +430,19 @@ | |||
382 | uids. Based on problem report from Jim Watt <jimw@peisj.pebio.com> | 430 | uids. Based on problem report from Jim Watt <jimw@peisj.pebio.com> |
383 | - (djm) More NeXT compatibility from Ben Lindstrom <mouring@pconline.com> | 431 | - (djm) More NeXT compatibility from Ben Lindstrom <mouring@pconline.com> |
384 | Including sigaction() et al. replacements | 432 | Including sigaction() et al. replacements |
385 | - (djm) AIX getuserattr() session initialisation from Tom Bertelson | 433 | - (djm) AIX getuserattr() session initialisation from Tom Bertelson |
386 | <tbert@abac.com> | 434 | <tbert@abac.com> |
387 | 435 | ||
388 | 20000708 | 436 | 20000708 |
389 | - (djm) Fix bad fprintf format handling in auth-pam.c. Patch from | 437 | - (djm) Fix bad fprintf format handling in auth-pam.c. Patch from |
390 | Aaron Hopkins <aaron@die.net> | 438 | Aaron Hopkins <aaron@die.net> |
391 | - (djm) Fix incorrect configure handling of --with-rsh-path option. Fix from | 439 | - (djm) Fix incorrect configure handling of --with-rsh-path option. Fix from |
392 | Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> | 440 | Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> |
393 | - (djm) Fixed undefined variables for OSF SIA. Report from | 441 | - (djm) Fixed undefined variables for OSF SIA. Report from |
394 | Baars, Henk <Hendrik.Baars@nl.origin-it.com> | 442 | Baars, Henk <Hendrik.Baars@nl.origin-it.com> |
395 | - (djm) Handle EWOULDBLOCK returns from read() and write() in atomicio.c | 443 | - (djm) Handle EWOULDBLOCK returns from read() and write() in atomicio.c |
396 | Fix from Marquess, Steve Mr JMLFDC <Steve.Marquess@DET.AMEDD.ARMY.MIL> | 444 | Fix from Marquess, Steve Mr JMLFDC <Steve.Marquess@DET.AMEDD.ARMY.MIL> |
397 | - (djm) Don't use inet_addr. | 445 | - (djm) Don't use inet_addr. |
398 | 446 | ||
399 | 20000702 | 447 | 20000702 |
400 | - (djm) Fix brace mismatch from Corinna Vinschen <vinschen@cygnus.com> | 448 | - (djm) Fix brace mismatch from Corinna Vinschen <vinschen@cygnus.com> |
@@ -402,7 +450,7 @@ | |||
402 | on fix from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> | 450 | on fix from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> |
403 | - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from | 451 | - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from |
404 | Chris, the Young One <cky@pobox.com> | 452 | Chris, the Young One <cky@pobox.com> |
405 | - (djm) Fix scp progress meter on really wide terminals. Based on patch | 453 | - (djm) Fix scp progress meter on really wide terminals. Based on patch |
406 | from James H. Cloos Jr. <cloos@jhcloos.com> | 454 | from James H. Cloos Jr. <cloos@jhcloos.com> |
407 | 455 | ||
408 | 20000701 | 456 | 20000701 |
@@ -421,9 +469,9 @@ | |||
421 | - (djm) Patch from Michael Stone <mstone@cs.loyola.edu> to add support for | 469 | - (djm) Patch from Michael Stone <mstone@cs.loyola.edu> to add support for |
422 | Irix 6.x array sessions, project id's, and system audit trail id. | 470 | Irix 6.x array sessions, project id's, and system audit trail id. |
423 | - (djm) Added 'distprep' make target to simplify packaging | 471 | - (djm) Added 'distprep' make target to simplify packaging |
424 | - (djm) Added patch from Chris Adams <cmadams@hiwaay.net> to add OSF SIA | 472 | - (djm) Added patch from Chris Adams <cmadams@hiwaay.net> to add OSF SIA |
425 | support. Enable using "USE_SIA=1 ./configure [options]" | 473 | support. Enable using "USE_SIA=1 ./configure [options]" |
426 | 474 | ||
427 | 20000627 | 475 | 20000627 |
428 | - (djm) Fixes to login code - not setting li->uid, cleanups | 476 | - (djm) Fixes to login code - not setting li->uid, cleanups |
429 | - (djm) Formatting | 477 | - (djm) Formatting |
@@ -441,7 +489,7 @@ | |||
441 | correct check for bad channel ids; from Wei Dai <weidai@eskimo.com> | 489 | correct check for bad channel ids; from Wei Dai <weidai@eskimo.com> |
442 | 490 | ||
443 | 20000623 | 491 | 20000623 |
444 | - (djm) Use sa_family_t in prototype for rresvport_af. Patch from | 492 | - (djm) Use sa_family_t in prototype for rresvport_af. Patch from |
445 | Svante Signell <svante.signell@telia.com> | 493 | Svante Signell <svante.signell@telia.com> |
446 | - (djm) Autoconf logic to define sa_family_t if it is missing | 494 | - (djm) Autoconf logic to define sa_family_t if it is missing |
447 | - OpenBSD CVS Updates: | 495 | - OpenBSD CVS Updates: |
@@ -469,11 +517,11 @@ | |||
469 | - markus@cvs.openbsd.org 2000/06/19 19:39:45 | 517 | - markus@cvs.openbsd.org 2000/06/19 19:39:45 |
470 | [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c] | 518 | [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c] |
471 | [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h] | 519 | [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h] |
472 | [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h] | 520 | [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h] |
473 | [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h] | 521 | [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h] |
474 | [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c] | 522 | [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c] |
475 | [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c] | 523 | [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c] |
476 | [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c] | 524 | [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c] |
477 | [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c] | 525 | [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c] |
478 | [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h] | 526 | [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h] |
479 | OpenBSD tag | 527 | OpenBSD tag |
@@ -482,17 +530,17 @@ | |||
482 | 530 | ||
483 | 20000620 | 531 | 20000620 |
484 | - (djm) Replace use of '-o' and '-a' logical operators in configure tests | 532 | - (djm) Replace use of '-o' and '-a' logical operators in configure tests |
485 | with '||' and '&&'. As suggested by Jim Knoble <jmknoble@pint-stowp.cx> | 533 | with '||' and '&&'. As suggested by Jim Knoble <jmknoble@pint-stowp.cx> |
486 | to fix SCO Unixware problem reported by Gary E. Miller <gem@rellim.com> | 534 | to fix SCO Unixware problem reported by Gary E. Miller <gem@rellim.com> |
487 | - (djm) Typo in loginrec.c | 535 | - (djm) Typo in loginrec.c |
488 | 536 | ||
489 | 20000618 | 537 | 20000618 |
490 | - (djm) Add summary of configure options to end of ./configure run | 538 | - (djm) Add summary of configure options to end of ./configure run |
491 | - (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from | 539 | - (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from |
492 | Michael Stone <mstone@cs.loyola.edu> | 540 | Michael Stone <mstone@cs.loyola.edu> |
493 | - (djm) rusage is a privileged operation on some Unices (incl. | 541 | - (djm) rusage is a privileged operation on some Unices (incl. |
494 | Solaris 2.5.1). Report from Paul D. Smith <pausmith@nortelnetworks.com> | 542 | Solaris 2.5.1). Report from Paul D. Smith <pausmith@nortelnetworks.com> |
495 | - (djm) Avoid PAM failures when running without a TTY. Report from | 543 | - (djm) Avoid PAM failures when running without a TTY. Report from |
496 | Martin Petrak <petrak@spsknm.schools.sk> | 544 | Martin Petrak <petrak@spsknm.schools.sk> |
497 | - (djm) Include sys/types.h when including netinet/in.h in configure tests. | 545 | - (djm) Include sys/types.h when including netinet/in.h in configure tests. |
498 | Patch from Jun-ichiro itojun Hagino <itojun@iijlab.net> | 546 | Patch from Jun-ichiro itojun Hagino <itojun@iijlab.net> |
@@ -545,7 +593,7 @@ | |||
545 | - Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is | 593 | - Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is |
546 | def'd | 594 | def'd |
547 | - Set AIX to use preformatted manpages | 595 | - Set AIX to use preformatted manpages |
548 | 596 | ||
549 | 20000610 | 597 | 20000610 |
550 | - (djm) Minor doc tweaks | 598 | - (djm) Minor doc tweaks |
551 | - (djm) Fix for configure on bash2 from Jim Knoble <jmknoble@jmknoble.cx> | 599 | - (djm) Fix for configure on bash2 from Jim Knoble <jmknoble@jmknoble.cx> |
@@ -557,11 +605,11 @@ | |||
557 | 20000606 | 605 | 20000606 |
558 | - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through | 606 | - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through |
559 | list of commands (by default). Removed verbose debugging (by default). | 607 | list of commands (by default). Removed verbose debugging (by default). |
560 | - (djm) Increased command entropy estimates and default entropy collection | 608 | - (djm) Increased command entropy estimates and default entropy collection |
561 | timeout | 609 | timeout |
562 | - (djm) Remove duplicate headers from loginrec.c | 610 | - (djm) Remove duplicate headers from loginrec.c |
563 | - (djm) Don't add /usr/local/lib to library search path on Irix | 611 | - (djm) Don't add /usr/local/lib to library search path on Irix |
564 | - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III | 612 | - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III |
565 | <tibbs@math.uh.edu> | 613 | <tibbs@math.uh.edu> |
566 | - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg | 614 | - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg |
567 | <zack@wolery.cumb.org> | 615 | <zack@wolery.cumb.org> |
@@ -571,7 +619,7 @@ | |||
571 | teach protocol v2 to count login failures properly and also enable an | 619 | teach protocol v2 to count login failures properly and also enable an |
572 | explanation of why the password prompt comes up again like v1; this is NOT | 620 | explanation of why the password prompt comes up again like v1; this is NOT |
573 | crypto | 621 | crypto |
574 | - markus@cvs.openbsd.org | 622 | - markus@cvs.openbsd.org |
575 | [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8] | 623 | [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8] |
576 | xauth_location support; pr 1234 | 624 | xauth_location support; pr 1234 |
577 | [readconf.c sshconnect2.c] | 625 | [readconf.c sshconnect2.c] |
@@ -584,14 +632,14 @@ | |||
584 | [version.h] | 632 | [version.h] |
585 | OpenSSH 2.1.1 | 633 | OpenSSH 2.1.1 |
586 | [auth-rsa.c] | 634 | [auth-rsa.c] |
587 | fix match_hostname() logic for auth-rsa: deny access if we have a | 635 | fix match_hostname() logic for auth-rsa: deny access if we have a |
588 | negative match or no match at all | 636 | negative match or no match at all |
589 | [channels.c hostfile.c match.c] | 637 | [channels.c hostfile.c match.c] |
590 | don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via | 638 | don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via |
591 | kris@FreeBSD.org | 639 | kris@FreeBSD.org |
592 | 640 | ||
593 | 20000606 | 641 | 20000606 |
594 | - (djm) Added --with-cflags, --with-ldflags and --with-libs options to | 642 | - (djm) Added --with-cflags, --with-ldflags and --with-libs options to |
595 | configure. | 643 | configure. |
596 | 644 | ||
597 | 20000604 | 645 | 20000604 |
@@ -602,7 +650,7 @@ | |||
602 | - (andre) New login code | 650 | - (andre) New login code |
603 | - Remove bsd-login.[ch] and all the OpenBSD-derived code in login.c | 651 | - Remove bsd-login.[ch] and all the OpenBSD-derived code in login.c |
604 | - Add loginrec.[ch], logintest.c and autoconf code | 652 | - Add loginrec.[ch], logintest.c and autoconf code |
605 | 653 | ||
606 | 20000531 | 654 | 20000531 |
607 | - Cleanup of auth.c, login.c and fake-* | 655 | - Cleanup of auth.c, login.c and fake-* |
608 | - Cleanup of auth-pam.c, save and print "account expired" error messages | 656 | - Cleanup of auth-pam.c, save and print "account expired" error messages |
@@ -638,9 +686,9 @@ | |||
638 | - Don't touch utmp if USE_UTMPX defined | 686 | - Don't touch utmp if USE_UTMPX defined |
639 | - SunOS 4.x support from Todd C. Miller <Todd.Miller@courtesan.com> | 687 | - SunOS 4.x support from Todd C. Miller <Todd.Miller@courtesan.com> |
640 | - SIGCHLD fix for AIX and HPUX from Tom Bertelson <tbert@abac.com> | 688 | - SIGCHLD fix for AIX and HPUX from Tom Bertelson <tbert@abac.com> |
641 | - HPUX and Configure fixes from Lutz Jaenicke | 689 | - HPUX and Configure fixes from Lutz Jaenicke |
642 | <Lutz.Jaenicke@aet.TU-Cottbus.DE> | 690 | <Lutz.Jaenicke@aet.TU-Cottbus.DE> |
643 | - Use mkinstalldirs script to make directories instead of non-portable | 691 | - Use mkinstalldirs script to make directories instead of non-portable |
644 | "install -d". Suggested by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> | 692 | "install -d". Suggested by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> |
645 | - Doc cleanup | 693 | - Doc cleanup |
646 | 694 | ||
@@ -651,7 +699,7 @@ | |||
651 | [sshconnect.c] | 699 | [sshconnect.c] |
652 | copy only ai_addrlen bytes; misiek@pld.org.pl | 700 | copy only ai_addrlen bytes; misiek@pld.org.pl |
653 | [auth.c] | 701 | [auth.c] |
654 | accept an empty shell in authentication; bug reported by | 702 | accept an empty shell in authentication; bug reported by |
655 | chris@tinker.ucr.edu | 703 | chris@tinker.ucr.edu |
656 | [serverloop.c] | 704 | [serverloop.c] |
657 | we don't have stderr for interactive terminal sessions (fcntl errors) | 705 | we don't have stderr for interactive terminal sessions (fcntl errors) |
@@ -669,10 +717,10 @@ | |||
669 | optionally run 'ent' to measure command entropy | 717 | optionally run 'ent' to measure command entropy |
670 | - Applied Tom Bertelson's <tbert@abac.com> AIX authentication fix | 718 | - Applied Tom Bertelson's <tbert@abac.com> AIX authentication fix |
671 | - Avoid WCOREDUMP complation errors for systems that lack it | 719 | - Avoid WCOREDUMP complation errors for systems that lack it |
672 | - Avoid SIGCHLD warnings from entropy commands | 720 | - Avoid SIGCHLD warnings from entropy commands |
673 | - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <sxw@dcs.ed.ac.uk> | 721 | - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <sxw@dcs.ed.ac.uk> |
674 | - OpenBSD CVS update: | 722 | - OpenBSD CVS update: |
675 | - markus@cvs.openbsd.org | 723 | - markus@cvs.openbsd.org |
676 | [ssh.c] | 724 | [ssh.c] |
677 | fix usage() | 725 | fix usage() |
678 | [ssh2.h] | 726 | [ssh2.h] |
@@ -687,19 +735,19 @@ | |||
687 | - INSTALL typo and URL fix | 735 | - INSTALL typo and URL fix |
688 | - Makefile fix | 736 | - Makefile fix |
689 | - Solaris fixes | 737 | - Solaris fixes |
690 | - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka | 738 | - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka |
691 | <ksakai@kso.netwk.ntt-at.co.jp> | 739 | <ksakai@kso.netwk.ntt-at.co.jp> |
692 | - RSAless operation patch from kevin_oconnor@standardandpoors.com | 740 | - RSAless operation patch from kevin_oconnor@standardandpoors.com |
693 | - Detect OpenSSL seperatly from RSA | 741 | - Detect OpenSSL seperatly from RSA |
694 | - Better test for RSA (more compatible with RSAref). Based on work by | 742 | - Better test for RSA (more compatible with RSAref). Based on work by |
695 | Ed Eden <ede370@stl.rural.usda.gov> | 743 | Ed Eden <ede370@stl.rural.usda.gov> |
696 | 744 | ||
697 | 20000513 | 745 | 20000513 |
698 | - Fix for non-recognised DSA keys from Arkadiusz Miskiewicz | 746 | - Fix for non-recognised DSA keys from Arkadiusz Miskiewicz |
699 | <misiek@pld.org.pl> | 747 | <misiek@pld.org.pl> |
700 | 748 | ||
701 | 20000511 | 749 | 20000511 |
702 | - Fix for prng_seed permissions checking from Lutz Jaenicke | 750 | - Fix for prng_seed permissions checking from Lutz Jaenicke |
703 | <Lutz.Jaenicke@aet.TU-Cottbus.DE> | 751 | <Lutz.Jaenicke@aet.TU-Cottbus.DE> |
704 | - "make host-key" fix for Irix | 752 | - "make host-key" fix for Irix |
705 | 753 | ||
@@ -728,7 +776,7 @@ | |||
728 | - OpenSSH-2.1 | 776 | - OpenSSH-2.1 |
729 | - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.a | 777 | - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.a |
730 | - Doc updates | 778 | - Doc updates |
731 | - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported | 779 | - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported |
732 | by Andre Lucas <andre.lucas@dial.pipex.com> | 780 | by Andre Lucas <andre.lucas@dial.pipex.com> |
733 | 781 | ||
734 | 20000508 | 782 | 20000508 |
@@ -742,7 +790,7 @@ | |||
742 | - interop w/ SecureFX | 790 | - interop w/ SecureFX |
743 | - Release 2.0.0beta2 | 791 | - Release 2.0.0beta2 |
744 | 792 | ||
745 | - Configure caching and cleanup patch from Andre Lucas' | 793 | - Configure caching and cleanup patch from Andre Lucas' |
746 | <andre.lucas@dial.pipex.com> | 794 | <andre.lucas@dial.pipex.com> |
747 | 795 | ||
748 | 20000507 | 796 | 20000507 |
@@ -760,7 +808,7 @@ | |||
760 | - deraadt@cvs.openbsd.org | 808 | - deraadt@cvs.openbsd.org |
761 | [scp.c] | 809 | [scp.c] |
762 | - more atomicio | 810 | - more atomicio |
763 | - markus@cvs.openbsd.org | 811 | - markus@cvs.openbsd.org |
764 | [channels.c] | 812 | [channels.c] |
765 | - set O_NONBLOCK | 813 | - set O_NONBLOCK |
766 | [ssh.1] | 814 | [ssh.1] |
@@ -778,7 +826,7 @@ | |||
778 | - document -X and -x | 826 | - document -X and -x |
779 | [ssh-keygen.c] | 827 | [ssh-keygen.c] |
780 | - simplify usage | 828 | - simplify usage |
781 | - markus@cvs.openbsd.org | 829 | - markus@cvs.openbsd.org |
782 | [sshd.8] | 830 | [sshd.8] |
783 | - there is no rhosts_dsa | 831 | - there is no rhosts_dsa |
784 | [ssh-keygen.1] | 832 | [ssh-keygen.1] |
@@ -828,7 +876,7 @@ | |||
828 | - unlink pid file, ok niels@ | 876 | - unlink pid file, ok niels@ |
829 | [auth2.c] | 877 | [auth2.c] |
830 | - Add missing #ifdefs; ok - markus | 878 | - Add missing #ifdefs; ok - markus |
831 | - Add Andre Lucas' <andre.lucas@dial.pipex.com> patch to read entropy | 879 | - Add Andre Lucas' <andre.lucas@dial.pipex.com> patch to read entropy |
832 | gathering commands from a text file | 880 | gathering commands from a text file |
833 | - Release 2.0.0beta1 | 881 | - Release 2.0.0beta1 |
834 | 882 | ||
@@ -846,9 +894,9 @@ | |||
846 | - Minor tweaks and typo fixes. | 894 | - Minor tweaks and typo fixes. |
847 | [ssh-keygen.c] | 895 | [ssh-keygen.c] |
848 | - Put -d into usage and reorder. markus ok. | 896 | - Put -d into usage and reorder. markus ok. |
849 | - Include missing headers for OpenSSL tests. Fix from Phil Karn | 897 | - Include missing headers for OpenSSL tests. Fix from Phil Karn |
850 | <karn@ka9q.ampr.org> | 898 | <karn@ka9q.ampr.org> |
851 | - Fixed __progname symbol collisions reported by Andre Lucas | 899 | - Fixed __progname symbol collisions reported by Andre Lucas |
852 | <andre.lucas@dial.pipex.com> | 900 | <andre.lucas@dial.pipex.com> |
853 | - Merged bsd-login ttyslot and AIX utmp patch from Gert Doering | 901 | - Merged bsd-login ttyslot and AIX utmp patch from Gert Doering |
854 | <gd@hilb1.medat.de> | 902 | <gd@hilb1.medat.de> |
@@ -864,7 +912,7 @@ | |||
864 | - Adds timeout to entropy collection | 912 | - Adds timeout to entropy collection |
865 | - Disables slow entropy sources | 913 | - Disables slow entropy sources |
866 | - Load and save seed file | 914 | - Load and save seed file |
867 | - Changed entropy seed code to user per-user seeds only (server seed is | 915 | - Changed entropy seed code to user per-user seeds only (server seed is |
868 | saved in root's .ssh directory) | 916 | saved in root's .ssh directory) |
869 | - Use atexit() and fatal cleanups to save seed on exit | 917 | - Use atexit() and fatal cleanups to save seed on exit |
870 | - More OpenBSD updates: | 918 | - More OpenBSD updates: |
@@ -914,7 +962,7 @@ | |||
914 | [sshconnect2.c] | 962 | [sshconnect2.c] |
915 | - less debug, respect .ssh/config | 963 | - less debug, respect .ssh/config |
916 | [README.openssh2 channels.c channels.h] | 964 | [README.openssh2 channels.c channels.h] |
917 | - clientloop.c session.c ssh.c | 965 | - clientloop.c session.c ssh.c |
918 | - support for x11-fwding, client+server | 966 | - support for x11-fwding, client+server |
919 | 967 | ||
920 | 20000421 | 968 | 20000421 |
@@ -924,11 +972,11 @@ | |||
924 | via Debian bug #59926 | 972 | via Debian bug #59926 |
925 | - Define __progname in session.c if libc doesn't | 973 | - Define __progname in session.c if libc doesn't |
926 | - Remove indentation on autoconf #include statements to avoid bug in | 974 | - Remove indentation on autoconf #include statements to avoid bug in |
927 | DEC Tru64 compiler. Report and fix from David Del Piero | 975 | DEC Tru64 compiler. Report and fix from David Del Piero |
928 | <David.DelPiero@qed.qld.gov.au> | 976 | <David.DelPiero@qed.qld.gov.au> |
929 | 977 | ||
930 | 20000420 | 978 | 20000420 |
931 | - Make fixpaths work with perl4, patch from Andre Lucas | 979 | - Make fixpaths work with perl4, patch from Andre Lucas |
932 | <andre.lucas@dial.pipex.com> | 980 | <andre.lucas@dial.pipex.com> |
933 | - Sync with OpenBSD CVS: | 981 | - Sync with OpenBSD CVS: |
934 | [clientloop.c login.c serverloop.c ssh-agent.c ssh.h sshconnect.c sshd.c] | 982 | [clientloop.c login.c serverloop.c ssh-agent.c ssh.h sshconnect.c sshd.c] |
@@ -948,7 +996,7 @@ | |||
948 | [channels.c] | 996 | [channels.c] |
949 | - fix pr 1196, listen_port and port_to_connect interchanged | 997 | - fix pr 1196, listen_port and port_to_connect interchanged |
950 | [scp.c] | 998 | [scp.c] |
951 | - after completion, replace the progress bar ETA counter with a final | 999 | - after completion, replace the progress bar ETA counter with a final |
952 | elapsed time; my idea, aaron wrote the patch | 1000 | elapsed time; my idea, aaron wrote the patch |
953 | [ssh_config sshd_config] | 1001 | [ssh_config sshd_config] |
954 | - show 'Protocol' as an example, ok markus@ | 1002 | - show 'Protocol' as an example, ok markus@ |
@@ -958,7 +1006,7 @@ | |||
958 | 1006 | ||
959 | 20000416 | 1007 | 20000416 |
960 | - Reduce diff against OpenBSD source | 1008 | - Reduce diff against OpenBSD source |
961 | - All OpenSSL includes are now unconditionally referenced as | 1009 | - All OpenSSL includes are now unconditionally referenced as |
962 | openssl/foo.h | 1010 | openssl/foo.h |
963 | - Pick up formatting changes | 1011 | - Pick up formatting changes |
964 | - Other minor changed (typecasts, etc) that I missed | 1012 | - Other minor changed (typecasts, etc) that I missed |
@@ -976,7 +1024,7 @@ | |||
976 | 20000413 | 1024 | 20000413 |
977 | - INSTALL doc updates | 1025 | - INSTALL doc updates |
978 | - Merged OpenBSD updates to include paths. | 1026 | - Merged OpenBSD updates to include paths. |
979 | 1027 | ||
980 | 20000412 | 1028 | 20000412 |
981 | - OpenBSD CVS updates: | 1029 | - OpenBSD CVS updates: |
982 | - [channels.c] | 1030 | - [channels.c] |
@@ -1007,7 +1055,7 @@ | |||
1007 | no adjust after close | 1055 | no adjust after close |
1008 | - [sshd.c compat.c ] | 1056 | - [sshd.c compat.c ] |
1009 | interop w/ latest ssh.com windows client. | 1057 | interop w/ latest ssh.com windows client. |
1010 | 1058 | ||
1011 | 20000406 | 1059 | 20000406 |
1012 | - OpenBSD CVS update: | 1060 | - OpenBSD CVS update: |
1013 | - [channels.c] | 1061 | - [channels.c] |
@@ -1075,7 +1123,7 @@ | |||
1075 | 1123 | ||
1076 | 20000326 | 1124 | 20000326 |
1077 | - Better tests for OpenSSL w/ RSAref | 1125 | - Better tests for OpenSSL w/ RSAref |
1078 | - Added replacement setenv() function from OpenBSD libc. Suggested by | 1126 | - Added replacement setenv() function from OpenBSD libc. Suggested by |
1079 | Ben Lindstrom <mouring@pconline.com> | 1127 | Ben Lindstrom <mouring@pconline.com> |
1080 | - OpenBSD CVS update | 1128 | - OpenBSD CVS update |
1081 | - [auth-krb4.c] | 1129 | - [auth-krb4.c] |
@@ -1103,17 +1151,17 @@ | |||
1103 | - Checks for 64 bit int types. Problem report from Mats Fredholm | 1151 | - Checks for 64 bit int types. Problem report from Mats Fredholm |
1104 | <matsf@init.se> | 1152 | <matsf@init.se> |
1105 | - OpenBSD CVS updates: | 1153 | - OpenBSD CVS updates: |
1106 | - [atomicio.c auth-krb4.c bufaux.c channels.c compress.c fingerprint.c] | 1154 | - [atomicio.c auth-krb4.c bufaux.c channels.c compress.c fingerprint.c] |
1107 | [packet.h radix.c rsa.c scp.c ssh-agent.c ssh-keygen.c sshconnect.c] | 1155 | [packet.h radix.c rsa.c scp.c ssh-agent.c ssh-keygen.c sshconnect.c] |
1108 | [sshd.c] | 1156 | [sshd.c] |
1109 | pedantic: signed vs. unsigned, void*-arithm, etc | 1157 | pedantic: signed vs. unsigned, void*-arithm, etc |
1110 | - [ssh.1 sshd.8] | 1158 | - [ssh.1 sshd.8] |
1111 | Various cleanups and standardizations. | 1159 | Various cleanups and standardizations. |
1112 | - Runtime error fix for HPUX from Otmar Stahl | 1160 | - Runtime error fix for HPUX from Otmar Stahl |
1113 | <O.Stahl@lsw.uni-heidelberg.de> | 1161 | <O.Stahl@lsw.uni-heidelberg.de> |
1114 | 1162 | ||
1115 | 20000316 | 1163 | 20000316 |
1116 | - Fixed configure not passing LDFLAGS to Solaris. Report from David G. | 1164 | - Fixed configure not passing LDFLAGS to Solaris. Report from David G. |
1117 | Hesprich <dghespri@sprintparanet.com> | 1165 | Hesprich <dghespri@sprintparanet.com> |
1118 | - Propogate LD through to Makefile | 1166 | - Propogate LD through to Makefile |
1119 | - Doc cleanups | 1167 | - Doc cleanups |
@@ -1122,18 +1170,18 @@ | |||
1122 | 20000315 | 1170 | 20000315 |
1123 | - Fix broken CFLAGS handling during search for OpenSSL. Fixes va_list | 1171 | - Fix broken CFLAGS handling during search for OpenSSL. Fixes va_list |
1124 | problems with gcc/Solaris. | 1172 | problems with gcc/Solaris. |
1125 | - Don't free argument to putenv() after use (in setenv() replacement). | 1173 | - Don't free argument to putenv() after use (in setenv() replacement). |
1126 | Report from Seigo Tanimura <tanimura@r.dl.itc.u-tokyo.ac.jp> | 1174 | Report from Seigo Tanimura <tanimura@r.dl.itc.u-tokyo.ac.jp> |
1127 | - Created contrib/ subdirectory. Included helpers from Phil Hands' | 1175 | - Created contrib/ subdirectory. Included helpers from Phil Hands' |
1128 | Debian package, README file and chroot patch from Ricardo Cerqueira | 1176 | Debian package, README file and chroot patch from Ricardo Cerqueira |
1129 | <rmcc@clix.pt> | 1177 | <rmcc@clix.pt> |
1130 | - Moved gnome-ssh-askpass.c to contrib directory and removed config | 1178 | - Moved gnome-ssh-askpass.c to contrib directory and removed config |
1131 | option. | 1179 | option. |
1132 | - Slight cleanup to doc files | 1180 | - Slight cleanup to doc files |
1133 | - Configure fix from Bratislav ILICH <bilic@zepter.ru> | 1181 | - Configure fix from Bratislav ILICH <bilic@zepter.ru> |
1134 | 1182 | ||
1135 | 20000314 | 1183 | 20000314 |
1136 | - Include macro for IN6_IS_ADDR_V4MAPPED. Report from | 1184 | - Include macro for IN6_IS_ADDR_V4MAPPED. Report from |
1137 | peter@frontierflying.com | 1185 | peter@frontierflying.com |
1138 | - Include /usr/local/include and /usr/local/lib for systems that don't | 1186 | - Include /usr/local/include and /usr/local/lib for systems that don't |
1139 | do it themselves | 1187 | do it themselves |
@@ -1168,7 +1216,7 @@ | |||
1168 | - use getpeername() in packet_connection_is_on_socket(), fixes sshd -i; | 1216 | - use getpeername() in packet_connection_is_on_socket(), fixes sshd -i; |
1169 | from Holger.Trapp@Informatik.TU-Chemnitz.DE | 1217 | from Holger.Trapp@Informatik.TU-Chemnitz.DE |
1170 | [pty.c pty.h] | 1218 | [pty.c pty.h] |
1171 | - register cleanup for pty earlier. move code for pty-owner handling to | 1219 | - register cleanup for pty earlier. move code for pty-owner handling to |
1172 | pty.c ok provos@, dugsong@ | 1220 | pty.c ok provos@, dugsong@ |
1173 | [readconf.c] | 1221 | [readconf.c] |
1174 | - turn off x11-fwd for the client, too. | 1222 | - turn off x11-fwd for the client, too. |
@@ -1204,13 +1252,13 @@ | |||
1204 | - missing xfree() | 1252 | - missing xfree() |
1205 | - move XAUTHORITY to subdir. ok dugsong@. fixes debian bug #57907, too. | 1253 | - move XAUTHORITY to subdir. ok dugsong@. fixes debian bug #57907, too. |
1206 | (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907) | 1254 | (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907) |
1207 | - register cleanup for pty earlier. move code for pty-owner handling to | 1255 | - register cleanup for pty earlier. move code for pty-owner handling to |
1208 | pty.c ok provos@, dugsong@ | 1256 | pty.c ok provos@, dugsong@ |
1209 | - create x11 cookie file | 1257 | - create x11 cookie file |
1210 | - fix pr 1113, fclose() -> pclose(), todo: remote popen() | 1258 | - fix pr 1113, fclose() -> pclose(), todo: remote popen() |
1211 | - version 1.2.3 | 1259 | - version 1.2.3 |
1212 | - Cleaned up | 1260 | - Cleaned up |
1213 | - Removed warning workaround for Linux and devpts filesystems (no longer | 1261 | - Removed warning workaround for Linux and devpts filesystems (no longer |
1214 | required after OpenBSD updates) | 1262 | required after OpenBSD updates) |
1215 | 1263 | ||
1216 | 20000308 | 1264 | 20000308 |
@@ -1224,13 +1272,13 @@ | |||
1224 | - Explicitly seed OpenSSL's PRNG before checking rsa_alive() | 1272 | - Explicitly seed OpenSSL's PRNG before checking rsa_alive() |
1225 | - Check for getpagesize in libucb.a if not found in libc. Fix for old | 1273 | - Check for getpagesize in libucb.a if not found in libc. Fix for old |
1226 | Solaris from Andre Lucas <andre.lucas@dial.pipex.com> | 1274 | Solaris from Andre Lucas <andre.lucas@dial.pipex.com> |
1227 | - Check for libwrap if --with-tcp-wrappers option specified. Suggestion | 1275 | - Check for libwrap if --with-tcp-wrappers option specified. Suggestion |
1228 | Mate Wierdl <mw@moni.msci.memphis.edu> | 1276 | Mate Wierdl <mw@moni.msci.memphis.edu> |
1229 | 1277 | ||
1230 | 20000303 | 1278 | 20000303 |
1231 | - Added "make host-key" target, Suggestion from Dominik Brettnacher | 1279 | - Added "make host-key" target, Suggestion from Dominik Brettnacher |
1232 | <domi@saargate.de> | 1280 | <domi@saargate.de> |
1233 | - Don't permanently fail on bind() if getaddrinfo has more choices left for | 1281 | - Don't permanently fail on bind() if getaddrinfo has more choices left for |
1234 | us. Needed to work around messy IPv6 on Linux. Patch from Arkadiusz | 1282 | us. Needed to work around messy IPv6 on Linux. Patch from Arkadiusz |
1235 | Miskiewicz <misiek@pld.org.pl> | 1283 | Miskiewicz <misiek@pld.org.pl> |
1236 | - DEC Unix compile fix from David Del Piero <David.DelPiero@qed.qld.gov.au> | 1284 | - DEC Unix compile fix from David Del Piero <David.DelPiero@qed.qld.gov.au> |
@@ -1245,10 +1293,10 @@ | |||
1245 | RSA support built in (this is a problem with OpenSSL 0.9.5). | 1293 | RSA support built in (this is a problem with OpenSSL 0.9.5). |
1246 | - Applied pty cleanup patch from markus.friedl@informatik.uni-erlangen.de | 1294 | - Applied pty cleanup patch from markus.friedl@informatik.uni-erlangen.de |
1247 | - Avoid warning message with Unix98 ptys | 1295 | - Avoid warning message with Unix98 ptys |
1248 | - Warning was valid - possible race condition on PTYs. Avoided using | 1296 | - Warning was valid - possible race condition on PTYs. Avoided using |
1249 | platform-specific code. | 1297 | platform-specific code. |
1250 | - Document some common problems | 1298 | - Document some common problems |
1251 | - Allow root access to any key. Patch from | 1299 | - Allow root access to any key. Patch from |
1252 | markus.friedl@informatik.uni-erlangen.de | 1300 | markus.friedl@informatik.uni-erlangen.de |
1253 | 1301 | ||
1254 | 20000207 | 1302 | 20000207 |
@@ -1259,10 +1307,10 @@ | |||
1259 | - Add --with-ssl-dir option | 1307 | - Add --with-ssl-dir option |
1260 | 1308 | ||
1261 | 20000202 | 1309 | 20000202 |
1262 | - Fix lastlog code for directory based lastlogs. Fix from Josh Durham | 1310 | - Fix lastlog code for directory based lastlogs. Fix from Josh Durham |
1263 | <jmd@aoe.vt.edu> | 1311 | <jmd@aoe.vt.edu> |
1264 | - Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> | 1312 | - Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> |
1265 | - Added URLs to Japanese translations of documents by HARUYAMA Seigo | 1313 | - Added URLs to Japanese translations of documents by HARUYAMA Seigo |
1266 | <haruyama@nt.phys.s.u-tokyo.ac.jp> | 1314 | <haruyama@nt.phys.s.u-tokyo.ac.jp> |
1267 | 1315 | ||
1268 | 20000201 | 1316 | 20000201 |
@@ -1277,24 +1325,24 @@ | |||
1277 | 20000126 | 1325 | 20000126 |
1278 | - Released 1.2.2 stable | 1326 | - Released 1.2.2 stable |
1279 | 1327 | ||
1280 | - NeXT keeps it lastlog in /usr/adm. Report from | 1328 | - NeXT keeps it lastlog in /usr/adm. Report from |
1281 | mouring@newton.pconline.com | 1329 | mouring@newton.pconline.com |
1282 | - Added note in UPGRADING re interop with commercial SSH using idea. | 1330 | - Added note in UPGRADING re interop with commercial SSH using idea. |
1283 | Report from Jim Knoble <jmknoble@pobox.com> | 1331 | Report from Jim Knoble <jmknoble@pobox.com> |
1284 | - Fix linking order for Kerberos/AFS. Fix from Holget Trapp | 1332 | - Fix linking order for Kerberos/AFS. Fix from Holget Trapp |
1285 | <Holger.Trapp@Informatik.TU-Chemnitz.DE> | 1333 | <Holger.Trapp@Informatik.TU-Chemnitz.DE> |
1286 | 1334 | ||
1287 | 20000125 | 1335 | 20000125 |
1288 | - Fix NULL pointer dereference in login.c. Fix from Andre Lucas | 1336 | - Fix NULL pointer dereference in login.c. Fix from Andre Lucas |
1289 | <andre.lucas@dial.pipex.com> | 1337 | <andre.lucas@dial.pipex.com> |
1290 | - Reorder PAM initialisation so it does not mess up lastlog. Reported | 1338 | - Reorder PAM initialisation so it does not mess up lastlog. Reported |
1291 | by Andre Lucas <andre.lucas@dial.pipex.com> | 1339 | by Andre Lucas <andre.lucas@dial.pipex.com> |
1292 | - Use preformatted manpages on SCO, report from Gary E. Miller | 1340 | - Use preformatted manpages on SCO, report from Gary E. Miller |
1293 | <gem@rellim.com> | 1341 | <gem@rellim.com> |
1294 | - New URL for x11-ssh-askpass. | 1342 | - New URL for x11-ssh-askpass. |
1295 | - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble | 1343 | - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble |
1296 | <jmknoble@pobox.com> | 1344 | <jmknoble@pobox.com> |
1297 | - Added 'DESTDIR' option to Makefile to ease package building. Patch from | 1345 | - Added 'DESTDIR' option to Makefile to ease package building. Patch from |
1298 | Jim Knoble <jmknoble@pobox.com> | 1346 | Jim Knoble <jmknoble@pobox.com> |
1299 | - Updated RPM spec files to use DESTDIR | 1347 | - Updated RPM spec files to use DESTDIR |
1300 | 1348 | ||
@@ -1306,7 +1354,7 @@ | |||
1306 | - OpenBSD CVS: | 1354 | - OpenBSD CVS: |
1307 | - [packet.c] | 1355 | - [packet.c] |
1308 | getsockname() requires initialized tolen; andy@guildsoftware.com | 1356 | getsockname() requires initialized tolen; andy@guildsoftware.com |
1309 | - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin | 1357 | - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin |
1310 | <drankin@bohemians.lexington.ky.us> | 1358 | <drankin@bohemians.lexington.ky.us> |
1311 | - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com> | 1359 | - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com> |
1312 | 1360 | ||
@@ -1326,9 +1374,9 @@ | |||
1326 | - [sshd.c] | 1374 | - [sshd.c] |
1327 | log with level log() not fatal() if peer behaves badly. | 1375 | log with level log() not fatal() if peer behaves badly. |
1328 | - [readpass.c] | 1376 | - [readpass.c] |
1329 | instead of blocking SIGINT, catch it ourselves, so that we can clean | 1377 | instead of blocking SIGINT, catch it ourselves, so that we can clean |
1330 | the tty modes up and kill ourselves -- instead of our process group | 1378 | the tty modes up and kill ourselves -- instead of our process group |
1331 | leader (scp, cvs, ...) going away and leaving us in noecho mode. | 1379 | leader (scp, cvs, ...) going away and leaving us in noecho mode. |
1332 | people with cbreak shells never even noticed.. | 1380 | people with cbreak shells never even noticed.. |
1333 | - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8] | 1381 | - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8] |
1334 | ie. -> i.e., | 1382 | ie. -> i.e., |
@@ -1341,12 +1389,12 @@ | |||
1341 | - [sshconnect.c] | 1389 | - [sshconnect.c] |
1342 | - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. | 1390 | - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. |
1343 | - destroy keys earlier | 1391 | - destroy keys earlier |
1344 | - split key exchange (kex) and user authentication (user-auth), | 1392 | - split key exchange (kex) and user authentication (user-auth), |
1345 | ok: provos@ | 1393 | ok: provos@ |
1346 | - [sshd.c] | 1394 | - [sshd.c] |
1347 | - no need for poll.h; from bright@wintelcom.net | 1395 | - no need for poll.h; from bright@wintelcom.net |
1348 | - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. | 1396 | - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. |
1349 | - split key exchange (kex) and user authentication (user-auth), | 1397 | - split key exchange (kex) and user authentication (user-auth), |
1350 | ok: provos@ | 1398 | ok: provos@ |
1351 | - Big manpage and config file cleanup from Andre Lucas | 1399 | - Big manpage and config file cleanup from Andre Lucas |
1352 | <andre.lucas@dial.pipex.com> | 1400 | <andre.lucas@dial.pipex.com> |
@@ -1365,29 +1413,29 @@ | |||
1365 | 20000118 | 1413 | 20000118 |
1366 | - Fixed --with-pid-dir option | 1414 | - Fixed --with-pid-dir option |
1367 | - Makefile fix from Gary E. Miller <gem@rellim.com> | 1415 | - Makefile fix from Gary E. Miller <gem@rellim.com> |
1368 | - Compile fix for HPUX and Solaris from Andre Lucas | 1416 | - Compile fix for HPUX and Solaris from Andre Lucas |
1369 | <andre.lucas@dial.pipex.com> | 1417 | <andre.lucas@dial.pipex.com> |
1370 | 1418 | ||
1371 | 20000117 | 1419 | 20000117 |
1372 | - Clean up bsd-bindresvport.c. Use arc4random() for picking initial | 1420 | - Clean up bsd-bindresvport.c. Use arc4random() for picking initial |
1373 | port, ignore EINVAL errors (Linux) when searching for free port. | 1421 | port, ignore EINVAL errors (Linux) when searching for free port. |
1374 | - Revert __snprintf -> snprintf aliasing. Apparently Solaris | 1422 | - Revert __snprintf -> snprintf aliasing. Apparently Solaris |
1375 | __snprintf isn't. Report from Theo de Raadt <theo@cvs.openbsd.org> | 1423 | __snprintf isn't. Report from Theo de Raadt <theo@cvs.openbsd.org> |
1376 | - Document location of Redhat PAM file in INSTALL. | 1424 | - Document location of Redhat PAM file in INSTALL. |
1377 | - Fixed X11 forwarding bug on Linux. libc advertises AF_INET6 | 1425 | - Fixed X11 forwarding bug on Linux. libc advertises AF_INET6 |
1378 | INADDR_ANY_INIT addresses via getaddrinfo, but may not be able to | 1426 | INADDR_ANY_INIT addresses via getaddrinfo, but may not be able to |
1379 | deliver (no IPv6 kernel support) | 1427 | deliver (no IPv6 kernel support) |
1380 | - Released 1.2.1pre27 | 1428 | - Released 1.2.1pre27 |
1381 | 1429 | ||
1382 | - Fix rresvport_af failure errors (logic error in bsd-bindresvport.c) | 1430 | - Fix rresvport_af failure errors (logic error in bsd-bindresvport.c) |
1383 | - Fix --with-ipaddr-display option test. Fix from Jarno Huuskonen | 1431 | - Fix --with-ipaddr-display option test. Fix from Jarno Huuskonen |
1384 | <jhuuskon@hytti.uku.fi> | 1432 | <jhuuskon@hytti.uku.fi> |
1385 | - Fix hang on logout if processes are still using the pty. Needs | 1433 | - Fix hang on logout if processes are still using the pty. Needs |
1386 | further testing. | 1434 | further testing. |
1387 | - Patch from Christos Zoulas <christos@zoulas.com> | 1435 | - Patch from Christos Zoulas <christos@zoulas.com> |
1388 | - Try $prefix first when looking for OpenSSL. | 1436 | - Try $prefix first when looking for OpenSSL. |
1389 | - Include sys/types.h when including sys/socket.h in test programs | 1437 | - Include sys/types.h when including sys/socket.h in test programs |
1390 | - Substitute PID directory in sshd.8. Suggestion from Andrew | 1438 | - Substitute PID directory in sshd.8. Suggestion from Andrew |
1391 | Stribblehill <a.d.stribblehill@durham.ac.uk> | 1439 | Stribblehill <a.d.stribblehill@durham.ac.uk> |
1392 | 1440 | ||
1393 | 20000116 | 1441 | 20000116 |
@@ -1396,17 +1444,17 @@ | |||
1396 | - Released 1.2.1pre26 | 1444 | - Released 1.2.1pre26 |
1397 | 1445 | ||
1398 | - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp> | 1446 | - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp> |
1399 | - Fixed broken bugfix for /dev/ptmx on Linux systems which lack | 1447 | - Fixed broken bugfix for /dev/ptmx on Linux systems which lack |
1400 | openpty(). Report from Kiyokazu SUTO <suto@ks-and-ks.ne.jp> | 1448 | openpty(). Report from Kiyokazu SUTO <suto@ks-and-ks.ne.jp> |
1401 | 1449 | ||
1402 | 20000115 | 1450 | 20000115 |
1403 | - Add --with-xauth-path configure directive and explicit test for | 1451 | - Add --with-xauth-path configure directive and explicit test for |
1404 | /usr/openwin/bin/xauth for Solaris systems. Report from Anders | 1452 | /usr/openwin/bin/xauth for Solaris systems. Report from Anders |
1405 | Nordby <anders@fix.no> | 1453 | Nordby <anders@fix.no> |
1406 | - Fix incorrect detection of /dev/ptmx on Linux systems that lack | 1454 | - Fix incorrect detection of /dev/ptmx on Linux systems that lack |
1407 | openpty. Report from John Seifarth <john@waw.be> | 1455 | openpty. Report from John Seifarth <john@waw.be> |
1408 | - Look for intXX_t and u_intXX_t in sys/bitypes.h if they are not in | 1456 | - Look for intXX_t and u_intXX_t in sys/bitypes.h if they are not in |
1409 | sys/types.h. Fixes problems on SCO, report from Gary E. Miller | 1457 | sys/types.h. Fixes problems on SCO, report from Gary E. Miller |
1410 | <gem@rellim.com> | 1458 | <gem@rellim.com> |
1411 | - Use __snprintf and __vnsprintf if they are found where snprintf and | 1459 | - Use __snprintf and __vnsprintf if they are found where snprintf and |
1412 | vnsprintf are lacking. Suggested by Ben Taylor <bent@shell.clark.net> | 1460 | vnsprintf are lacking. Suggested by Ben Taylor <bent@shell.clark.net> |
@@ -1418,11 +1466,11 @@ | |||
1418 | [scp.c packet.h packet.c login.c log.c canohost.c channels.c] | 1466 | [scp.c packet.h packet.c login.c log.c canohost.c channels.c] |
1419 | [hostfile.c sshd_config] | 1467 | [hostfile.c sshd_config] |
1420 | ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new | 1468 | ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new |
1421 | features: sshd allows multiple ListenAddress and Port options. note | 1469 | features: sshd allows multiple ListenAddress and Port options. note |
1422 | that libwrap is not IPv6-ready. (based on patches from | 1470 | that libwrap is not IPv6-ready. (based on patches from |
1423 | fujiwara@rcac.tdi.co.jp) | 1471 | fujiwara@rcac.tdi.co.jp) |
1424 | - [ssh.c canohost.c] | 1472 | - [ssh.c canohost.c] |
1425 | more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo, | 1473 | more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo, |
1426 | from itojun@ | 1474 | from itojun@ |
1427 | - [channels.c] | 1475 | - [channels.c] |
1428 | listen on _all_ interfaces for X11-Fwd (hints.ai_flags = AI_PASSIVE) | 1476 | listen on _all_ interfaces for X11-Fwd (hints.ai_flags = AI_PASSIVE) |
@@ -1431,7 +1479,7 @@ | |||
1431 | - [scp.1 sshd.8 servconf.h scp.c] | 1479 | - [scp.1 sshd.8 servconf.h scp.c] |
1432 | document -4, -6, and 'ssh -L 2022/::1/22' | 1480 | document -4, -6, and 'ssh -L 2022/::1/22' |
1433 | - [ssh.c] | 1481 | - [ssh.c] |
1434 | 'ssh @host' is illegal (null user name), from | 1482 | 'ssh @host' is illegal (null user name), from |
1435 | karsten@gedankenpolizei.de | 1483 | karsten@gedankenpolizei.de |
1436 | - [sshconnect.c] | 1484 | - [sshconnect.c] |
1437 | better error message | 1485 | better error message |
@@ -1460,7 +1508,7 @@ | |||
1460 | Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE> | 1508 | Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE> |
1461 | 1509 | ||
1462 | 20000105 | 1510 | 20000105 |
1463 | - Fixed annoying DES corruption problem. libcrypt has been | 1511 | - Fixed annoying DES corruption problem. libcrypt has been |
1464 | overriding symbols in libcrypto. Removed libcrypt and crypt.h | 1512 | overriding symbols in libcrypto. Removed libcrypt and crypt.h |
1465 | altogether (libcrypto includes its own crypt(1) replacement) | 1513 | altogether (libcrypto includes its own crypt(1) replacement) |
1466 | - Added platform-specific rules for Irix 6.x. Included warning that | 1514 | - Added platform-specific rules for Irix 6.x. Included warning that |
@@ -1468,14 +1516,14 @@ | |||
1468 | 1516 | ||
1469 | 20000103 | 1517 | 20000103 |
1470 | - Add explicit make rules for files proccessed by fixpaths. | 1518 | - Add explicit make rules for files proccessed by fixpaths. |
1471 | - Fix "make install" in RPM spec files. Report from Tenkou N. Hattori | 1519 | - Fix "make install" in RPM spec files. Report from Tenkou N. Hattori |
1472 | <tnh@kondara.org> | 1520 | <tnh@kondara.org> |
1473 | - Removed "nullok" directive from default PAM configuration files. | 1521 | - Removed "nullok" directive from default PAM configuration files. |
1474 | Added information on enabling EmptyPasswords on openssh+PAM in | 1522 | Added information on enabling EmptyPasswords on openssh+PAM in |
1475 | UPGRADING file. | 1523 | UPGRADING file. |
1476 | - OpenBSD CVS updates | 1524 | - OpenBSD CVS updates |
1477 | - [ssh-agent.c] | 1525 | - [ssh-agent.c] |
1478 | cleanup_exit() for SIGTERM/SIGHUP, too. from fgsch@ and | 1526 | cleanup_exit() for SIGTERM/SIGHUP, too. from fgsch@ and |
1479 | dgaudet@arctic.org | 1527 | dgaudet@arctic.org |
1480 | - [sshconnect.c] | 1528 | - [sshconnect.c] |
1481 | compare correct version for 1.3 compat mode | 1529 | compare correct version for 1.3 compat mode |
@@ -1487,18 +1535,18 @@ | |||
1487 | <dgaudet@arctic.org> | 1535 | <dgaudet@arctic.org> |
1488 | 1536 | ||
1489 | 19991231 | 1537 | 19991231 |
1490 | - Fix password support on systems with a mixture of shadowed and | 1538 | - Fix password support on systems with a mixture of shadowed and |
1491 | non-shadowed passwords (e.g. NIS). Report and fix from | 1539 | non-shadowed passwords (e.g. NIS). Report and fix from |
1492 | HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> | 1540 | HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> |
1493 | - Fix broken autoconf typedef detection. Report from Marc G. | 1541 | - Fix broken autoconf typedef detection. Report from Marc G. |
1494 | Fournier <marc.fournier@acadiau.ca> | 1542 | Fournier <marc.fournier@acadiau.ca> |
1495 | - Fix occasional crash on LinuxPPC. Patch from Franz Sirl | 1543 | - Fix occasional crash on LinuxPPC. Patch from Franz Sirl |
1496 | <Franz.Sirl-kernel@lauterbach.com> | 1544 | <Franz.Sirl-kernel@lauterbach.com> |
1497 | - Prevent typedefs from being compiled more than once. Report from | 1545 | - Prevent typedefs from being compiled more than once. Report from |
1498 | Marc G. Fournier <marc.fournier@acadiau.ca> | 1546 | Marc G. Fournier <marc.fournier@acadiau.ca> |
1499 | - Fill in ut_utaddr utmp field. Report from Benjamin Charron | 1547 | - Fill in ut_utaddr utmp field. Report from Benjamin Charron |
1500 | <iretd@bigfoot.com> | 1548 | <iretd@bigfoot.com> |
1501 | - Really fix broken default path. Fix from Jim Knoble | 1549 | - Really fix broken default path. Fix from Jim Knoble |
1502 | <jmknoble@pobox.com> | 1550 | <jmknoble@pobox.com> |
1503 | - Remove test for quad_t. No longer needed. | 1551 | - Remove test for quad_t. No longer needed. |
1504 | - Released 1.2.1pre24 | 1552 | - Released 1.2.1pre24 |
@@ -1510,9 +1558,9 @@ | |||
1510 | - OpenBSD CVS updates: | 1558 | - OpenBSD CVS updates: |
1511 | - [auth-passwd.c] | 1559 | - [auth-passwd.c] |
1512 | check for NULL 1st | 1560 | check for NULL 1st |
1513 | - Removed most of the pam code into its own file auth-pam.[ch]. This | 1561 | - Removed most of the pam code into its own file auth-pam.[ch]. This |
1514 | cleaned up sshd.c up significantly. | 1562 | cleaned up sshd.c up significantly. |
1515 | - PAM authentication was incorrectly interpreting | 1563 | - PAM authentication was incorrectly interpreting |
1516 | "PermitRootLogin without-password". Report from Matthias Andree | 1564 | "PermitRootLogin without-password". Report from Matthias Andree |
1517 | <ma@dt.e-technik.uni-dortmund.de | 1565 | <ma@dt.e-technik.uni-dortmund.de |
1518 | - Several other cleanups | 1566 | - Several other cleanups |
@@ -1522,14 +1570,14 @@ | |||
1522 | - Released 1.2.1pre23 | 1570 | - Released 1.2.1pre23 |
1523 | 1571 | ||
1524 | 19991229 | 1572 | 19991229 |
1525 | - Applied another NetBSD portability patch from David Rankin | 1573 | - Applied another NetBSD portability patch from David Rankin |
1526 | <drankin@bohemians.lexington.ky.us> | 1574 | <drankin@bohemians.lexington.ky.us> |
1527 | - Fix --with-default-path option. | 1575 | - Fix --with-default-path option. |
1528 | - Autodetect perl, patch from David Rankin | 1576 | - Autodetect perl, patch from David Rankin |
1529 | <drankin@bohemians.lexington.ky.us> | 1577 | <drankin@bohemians.lexington.ky.us> |
1530 | - Print whether OpenSSH was compiled with RSARef, patch from | 1578 | - Print whether OpenSSH was compiled with RSARef, patch from |
1531 | Nalin Dahyabhai <nalin@thermo.stat.ncsu.edu> | 1579 | Nalin Dahyabhai <nalin@thermo.stat.ncsu.edu> |
1532 | - Calls to pam_setcred, patch from Nalin Dahyabhai | 1580 | - Calls to pam_setcred, patch from Nalin Dahyabhai |
1533 | <nalin@thermo.stat.ncsu.edu> | 1581 | <nalin@thermo.stat.ncsu.edu> |
1534 | - Detect missing size_t and typedef it. | 1582 | - Detect missing size_t and typedef it. |
1535 | - Rename helper.[ch] to (more appropriate) bsd-misc.[ch] | 1583 | - Rename helper.[ch] to (more appropriate) bsd-misc.[ch] |
@@ -1537,7 +1585,7 @@ | |||
1537 | 1585 | ||
1538 | 19991228 | 1586 | 19991228 |
1539 | - Replacement for getpagesize() for systems which lack it | 1587 | - Replacement for getpagesize() for systems which lack it |
1540 | - NetBSD login.c compile fix from David Rankin | 1588 | - NetBSD login.c compile fix from David Rankin |
1541 | <drankin@bohemians.lexington.ky.us> | 1589 | <drankin@bohemians.lexington.ky.us> |
1542 | - Fully set ut_tv if present in utmp or utmpx | 1590 | - Fully set ut_tv if present in utmp or utmpx |
1543 | - Portability fixes for Irix 5.3 (now compiles OK!) | 1591 | - Portability fixes for Irix 5.3 (now compiles OK!) |
@@ -1569,15 +1617,15 @@ | |||
1569 | - Revised RPM package to include Jim Knoble's <jmknoble@pobox.com> | 1617 | - Revised RPM package to include Jim Knoble's <jmknoble@pobox.com> |
1570 | X11 ssh-askpass program. | 1618 | X11 ssh-askpass program. |
1571 | - Disable logging of PAM success and failures, PAM is verbose enough. | 1619 | - Disable logging of PAM success and failures, PAM is verbose enough. |
1572 | Unfortunatly there is currently no way to disable auth failure | 1620 | Unfortunatly there is currently no way to disable auth failure |
1573 | messages. Mention this in UPGRADING file and sent message to PAM | 1621 | messages. Mention this in UPGRADING file and sent message to PAM |
1574 | developers | 1622 | developers |
1575 | - OpenBSD CVS update: | 1623 | - OpenBSD CVS update: |
1576 | - [ssh-keygen.1 ssh.1] | 1624 | - [ssh-keygen.1 ssh.1] |
1577 | remove ref to .ssh/random_seed, mention .ssh/environment in | 1625 | remove ref to .ssh/random_seed, mention .ssh/environment in |
1578 | .Sh FILES, too | 1626 | .Sh FILES, too |
1579 | - Released 1.2.1pre21 | 1627 | - Released 1.2.1pre21 |
1580 | - Fixed implicit '.' in default path, report from Jim Knoble | 1628 | - Fixed implicit '.' in default path, report from Jim Knoble |
1581 | <jmknoble@pobox.com> | 1629 | <jmknoble@pobox.com> |
1582 | - Redhat RPM spec fixes from Jim Knoble <jmknoble@pobox.com> | 1630 | - Redhat RPM spec fixes from Jim Knoble <jmknoble@pobox.com> |
1583 | 1631 | ||
@@ -1594,20 +1642,20 @@ | |||
1594 | <96na@eng.cam.ac.uk>) | 1642 | <96na@eng.cam.ac.uk>) |
1595 | 1643 | ||
1596 | 19991223 | 1644 | 19991223 |
1597 | - Merged later HPUX patch from Andre Lucas | 1645 | - Merged later HPUX patch from Andre Lucas |
1598 | <andre.lucas@dial.pipex.com> | 1646 | <andre.lucas@dial.pipex.com> |
1599 | - Above patch included better utmpx support from Ben Taylor | 1647 | - Above patch included better utmpx support from Ben Taylor |
1600 | <bent@clark.net> | 1648 | <bent@clark.net> |
1601 | 1649 | ||
1602 | 19991222 | 1650 | 19991222 |
1603 | - Fix undefined fd_set type in ssh.h from Povl H. Pedersen | 1651 | - Fix undefined fd_set type in ssh.h from Povl H. Pedersen |
1604 | <pope@netguide.dk> | 1652 | <pope@netguide.dk> |
1605 | - Fix login.c breakage on systems which lack ut_host in struct | 1653 | - Fix login.c breakage on systems which lack ut_host in struct |
1606 | utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com> | 1654 | utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com> |
1607 | 1655 | ||
1608 | 19991221 | 1656 | 19991221 |
1609 | - Integration of large HPUX patch from Andre Lucas | 1657 | - Integration of large HPUX patch from Andre Lucas |
1610 | <andre.lucas@dial.pipex.com>. Integrating it had a few other | 1658 | <andre.lucas@dial.pipex.com>. Integrating it had a few other |
1611 | benefits: | 1659 | benefits: |
1612 | - Ability to disable shadow passwords at configure time | 1660 | - Ability to disable shadow passwords at configure time |
1613 | - Ability to disable lastlog support at configure time | 1661 | - Ability to disable lastlog support at configure time |
@@ -1620,12 +1668,12 @@ | |||
1620 | - Release 1.2.1pre19 | 1668 | - Release 1.2.1pre19 |
1621 | 1669 | ||
1622 | 19991218 | 1670 | 19991218 |
1623 | - Redhat init script patch from Chun-Chung Chen | 1671 | - Redhat init script patch from Chun-Chung Chen |
1624 | <cjj@u.washington.edu> | 1672 | <cjj@u.washington.edu> |
1625 | - Avoid breakage on systems without IPv6 headers | 1673 | - Avoid breakage on systems without IPv6 headers |
1626 | 1674 | ||
1627 | 19991216 | 1675 | 19991216 |
1628 | - Makefile changes for Solaris from Peter Kocks | 1676 | - Makefile changes for Solaris from Peter Kocks |
1629 | <peter.kocks@baygate.com> | 1677 | <peter.kocks@baygate.com> |
1630 | - Minor updates to docs | 1678 | - Minor updates to docs |
1631 | - Merged OpenBSD CVS changes: | 1679 | - Merged OpenBSD CVS changes: |
@@ -1633,7 +1681,7 @@ | |||
1633 | keysize warnings talk about identity files | 1681 | keysize warnings talk about identity files |
1634 | - [packet.c] | 1682 | - [packet.c] |
1635 | "Connection closed by x.x.x.x": fatal() -> log() | 1683 | "Connection closed by x.x.x.x": fatal() -> log() |
1636 | - Correctly handle empty passwords in shadow file. Patch from: | 1684 | - Correctly handle empty passwords in shadow file. Patch from: |
1637 | "Chris, the Young One" <cky@pobox.com> | 1685 | "Chris, the Young One" <cky@pobox.com> |
1638 | - Released 1.2.1pre18 | 1686 | - Released 1.2.1pre18 |
1639 | 1687 | ||
@@ -1643,13 +1691,13 @@ | |||
1643 | - Use LDFLAGS correctly | 1691 | - Use LDFLAGS correctly |
1644 | - Fix SIGIO error in scp | 1692 | - Fix SIGIO error in scp |
1645 | - Simplify status line printing in scp | 1693 | - Simplify status line printing in scp |
1646 | - Added better test for inline functions compiler support from | 1694 | - Added better test for inline functions compiler support from |
1647 | Darren_Hall@progressive.com | 1695 | Darren_Hall@progressive.com |
1648 | 1696 | ||
1649 | 19991214 | 1697 | 19991214 |
1650 | - OpenBSD CVS Changes | 1698 | - OpenBSD CVS Changes |
1651 | - [canohost.c] | 1699 | - [canohost.c] |
1652 | fix get_remote_port() and friends for sshd -i; | 1700 | fix get_remote_port() and friends for sshd -i; |
1653 | Holger.Trapp@Informatik.TU-Chemnitz.DE | 1701 | Holger.Trapp@Informatik.TU-Chemnitz.DE |
1654 | - [mpaux.c] | 1702 | - [mpaux.c] |
1655 | make code simpler. no need for memcpy. niels@ ok | 1703 | make code simpler. no need for memcpy. niels@ ok |
@@ -1669,16 +1717,16 @@ | |||
1669 | - Doc updates | 1717 | - Doc updates |
1670 | 1718 | ||
1671 | 19991211 | 1719 | 19991211 |
1672 | - Fix compilation on systems with AFS. Reported by | 1720 | - Fix compilation on systems with AFS. Reported by |
1673 | aloomis@glue.umd.edu | 1721 | aloomis@glue.umd.edu |
1674 | - Fix installation on Solaris. Reported by | 1722 | - Fix installation on Solaris. Reported by |
1675 | Gordon Rowell <gordonr@gormand.com.au> | 1723 | Gordon Rowell <gordonr@gormand.com.au> |
1676 | - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com, | 1724 | - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com, |
1677 | patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de> | 1725 | patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de> |
1678 | - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com> | 1726 | - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com> |
1679 | - Compile fix from David Agraz <dagraz@jahoopa.com> | 1727 | - Compile fix from David Agraz <dagraz@jahoopa.com> |
1680 | - Avoid compiler warning in bsd-snprintf.c | 1728 | - Avoid compiler warning in bsd-snprintf.c |
1681 | - Added pam_limits.so to default PAM config. Suggested by | 1729 | - Added pam_limits.so to default PAM config. Suggested by |
1682 | Jim Knoble <jmknoble@pobox.com> | 1730 | Jim Knoble <jmknoble@pobox.com> |
1683 | 1731 | ||
1684 | 19991209 | 1732 | 19991209 |
@@ -1693,8 +1741,8 @@ | |||
1693 | - [sshd.c] | 1741 | - [sshd.c] |
1694 | make sure the client selects a supported cipher | 1742 | make sure the client selects a supported cipher |
1695 | - [sshd.c] | 1743 | - [sshd.c] |
1696 | fix sighup handling. accept would just restart and daemon handled | 1744 | fix sighup handling. accept would just restart and daemon handled |
1697 | sighup only after the next connection was accepted. use poll on | 1745 | sighup only after the next connection was accepted. use poll on |
1698 | listen sock now. | 1746 | listen sock now. |
1699 | - [sshd.c] | 1747 | - [sshd.c] |
1700 | make that a fatal | 1748 | make that a fatal |
@@ -1703,18 +1751,18 @@ | |||
1703 | - Released 1.2pre17 | 1751 | - Released 1.2pre17 |
1704 | 1752 | ||
1705 | 19991208 | 1753 | 19991208 |
1706 | - Compile fix for Solaris with /dev/ptmx from | 1754 | - Compile fix for Solaris with /dev/ptmx from |
1707 | David Agraz <dagraz@jahoopa.com> | 1755 | David Agraz <dagraz@jahoopa.com> |
1708 | 1756 | ||
1709 | 19991207 | 1757 | 19991207 |
1710 | - sshd Redhat init script patch from Jim Knoble <jmknoble@pobox.com> | 1758 | - sshd Redhat init script patch from Jim Knoble <jmknoble@pobox.com> |
1711 | fixes compatability with 4.x and 5.x | 1759 | fixes compatability with 4.x and 5.x |
1712 | - Fixed default SSH_ASKPASS | 1760 | - Fixed default SSH_ASKPASS |
1713 | - Fix PAM account and session being called multiple times. Problem | 1761 | - Fix PAM account and session being called multiple times. Problem |
1714 | reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk> | 1762 | reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk> |
1715 | - Merged more OpenBSD changes: | 1763 | - Merged more OpenBSD changes: |
1716 | - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c] | 1764 | - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c] |
1717 | move atomicio into it's own file. wrap all socket write()s which | 1765 | move atomicio into it's own file. wrap all socket write()s which |
1718 | were doing write(sock, buf, len) != len, with atomicio() calls. | 1766 | were doing write(sock, buf, len) != len, with atomicio() calls. |
1719 | - [auth-skey.c] | 1767 | - [auth-skey.c] |
1720 | fd leak | 1768 | fd leak |
@@ -1828,23 +1876,23 @@ | |||
1828 | 19991122 | 1876 | 19991122 |
1829 | - Make <enter> close gnome-ssh-askpass (Debian bug #50299) | 1877 | - Make <enter> close gnome-ssh-askpass (Debian bug #50299) |
1830 | - OpenBSD CVS Changes | 1878 | - OpenBSD CVS Changes |
1831 | - [ssh-keygen.c] | 1879 | - [ssh-keygen.c] |
1832 | don't create ~/.ssh only if the user wants to store the private | 1880 | don't create ~/.ssh only if the user wants to store the private |
1833 | key there. show fingerprint instead of public-key after | 1881 | key there. show fingerprint instead of public-key after |
1834 | keygeneration. ok niels@ | 1882 | keygeneration. ok niels@ |
1835 | - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h | 1883 | - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h |
1836 | - Added timersub() macro | 1884 | - Added timersub() macro |
1837 | - Tidy RCSIDs of bsd-*.c | 1885 | - Tidy RCSIDs of bsd-*.c |
1838 | - Added autoconf test and macro to deal with old PAM libraries | 1886 | - Added autoconf test and macro to deal with old PAM libraries |
1839 | pam_strerror definition (one arg vs two). | 1887 | pam_strerror definition (one arg vs two). |
1840 | - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>) | 1888 | - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>) |
1841 | - Retry /dev/urandom reads interrupted by signal (report from | 1889 | - Retry /dev/urandom reads interrupted by signal (report from |
1842 | Robert Hardy <rhardy@webcon.net>) | 1890 | Robert Hardy <rhardy@webcon.net>) |
1843 | - Added a setenv replacement for systems which lack it | 1891 | - Added a setenv replacement for systems which lack it |
1844 | - Only display public key comment when presenting ssh-askpass dialog | 1892 | - Only display public key comment when presenting ssh-askpass dialog |
1845 | - Released 1.2pre14 | 1893 | - Released 1.2pre14 |
1846 | 1894 | ||
1847 | - Configure, Make and changelog corrections from Tudor Bosman | 1895 | - Configure, Make and changelog corrections from Tudor Bosman |
1848 | <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk> | 1896 | <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk> |
1849 | 1897 | ||
1850 | 19991121 | 1898 | 19991121 |
@@ -1871,13 +1919,13 @@ | |||
1871 | print usage() everytime we get bad options | 1919 | print usage() everytime we get bad options |
1872 | - [ssh-keygen.c] overflow, djm@mindrot.org | 1920 | - [ssh-keygen.c] overflow, djm@mindrot.org |
1873 | - [sshd.c] fix sigchld race; cjc5@po.cwru.edu | 1921 | - [sshd.c] fix sigchld race; cjc5@po.cwru.edu |
1874 | 1922 | ||
1875 | 19991120 | 1923 | 19991120 |
1876 | - Merged more Solaris support from Marc G. Fournier | 1924 | - Merged more Solaris support from Marc G. Fournier |
1877 | <marc.fournier@acadiau.ca> | 1925 | <marc.fournier@acadiau.ca> |
1878 | - Wrote autoconf tests for integer bit-types | 1926 | - Wrote autoconf tests for integer bit-types |
1879 | - Fixed enabling kerberos support | 1927 | - Fixed enabling kerberos support |
1880 | - Fix segfault in ssh-keygen caused by buffer overrun in filename | 1928 | - Fix segfault in ssh-keygen caused by buffer overrun in filename |
1881 | handling. | 1929 | handling. |
1882 | 1930 | ||
1883 | 19991119 | 1931 | 19991119 |
@@ -1890,14 +1938,14 @@ | |||
1890 | - EGD uses a socket, not a named pipe. Duh. | 1938 | - EGD uses a socket, not a named pipe. Duh. |
1891 | - Fix includes in fingerprint.c | 1939 | - Fix includes in fingerprint.c |
1892 | - Fix scp progress bar bug again. | 1940 | - Fix scp progress bar bug again. |
1893 | - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of | 1941 | - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of |
1894 | David Rankin <drankin@bohemians.lexington.ky.us> | 1942 | David Rankin <drankin@bohemians.lexington.ky.us> |
1895 | - Added autoconf option to enable Kerberos 4 support (untested) | 1943 | - Added autoconf option to enable Kerberos 4 support (untested) |
1896 | - Added autoconf option to enable AFS support (untested) | 1944 | - Added autoconf option to enable AFS support (untested) |
1897 | - Added autoconf option to enable S/Key support (untested) | 1945 | - Added autoconf option to enable S/Key support (untested) |
1898 | - Added autoconf option to enable TCP wrappers support (compiles OK) | 1946 | - Added autoconf option to enable TCP wrappers support (compiles OK) |
1899 | - Renamed BSD helper function files to bsd-* | 1947 | - Renamed BSD helper function files to bsd-* |
1900 | - Added tests for login and daemon and enable OpenBSD replacements for | 1948 | - Added tests for login and daemon and enable OpenBSD replacements for |
1901 | when they are absent. | 1949 | when they are absent. |
1902 | - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu> | 1950 | - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu> |
1903 | 1951 | ||
@@ -1905,7 +1953,7 @@ | |||
1905 | - Merged OpenBSD CVS changes | 1953 | - Merged OpenBSD CVS changes |
1906 | - [scp.c] foregroundproc() in scp | 1954 | - [scp.c] foregroundproc() in scp |
1907 | - [sshconnect.h] include fingerprint.h | 1955 | - [sshconnect.h] include fingerprint.h |
1908 | - [sshd.c] bugfix: the log() for passwd-auth escaped during logging | 1956 | - [sshd.c] bugfix: the log() for passwd-auth escaped during logging |
1909 | changes. | 1957 | changes. |
1910 | - [ssh.1] Spell my name right. | 1958 | - [ssh.1] Spell my name right. |
1911 | - Added openssh.com info to README | 1959 | - Added openssh.com info to README |
@@ -1914,20 +1962,20 @@ | |||
1914 | - Merged OpenBSD CVS changes | 1962 | - Merged OpenBSD CVS changes |
1915 | - [ChangeLog.Ylonen] noone needs this anymore | 1963 | - [ChangeLog.Ylonen] noone needs this anymore |
1916 | - [authfd.c] close-on-exec for auth-socket, ok deraadt | 1964 | - [authfd.c] close-on-exec for auth-socket, ok deraadt |
1917 | - [hostfile.c] | 1965 | - [hostfile.c] |
1918 | in known_hosts key lookup the entry for the bits does not need | 1966 | in known_hosts key lookup the entry for the bits does not need |
1919 | to match, all the information is contained in n and e. This | 1967 | to match, all the information is contained in n and e. This |
1920 | solves the problem with buggy servers announcing the wrong | 1968 | solves the problem with buggy servers announcing the wrong |
1921 | modulus length. markus and me. | 1969 | modulus length. markus and me. |
1922 | - [serverloop.c] | 1970 | - [serverloop.c] |
1923 | bugfix: check for space if child has terminated, from: | 1971 | bugfix: check for space if child has terminated, from: |
1924 | iedowse@maths.tcd.ie | 1972 | iedowse@maths.tcd.ie |
1925 | - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c] | 1973 | - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c] |
1926 | [fingerprint.c fingerprint.h] | 1974 | [fingerprint.c fingerprint.h] |
1927 | rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se> | 1975 | rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se> |
1928 | - [ssh-agent.1] typo | 1976 | - [ssh-agent.1] typo |
1929 | - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@ | 1977 | - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@ |
1930 | - [sshd.c] | 1978 | - [sshd.c] |
1931 | force logging to stderr while loading private key file | 1979 | force logging to stderr while loading private key file |
1932 | (lost while converting to new log-levels) | 1980 | (lost while converting to new log-levels) |
1933 | 1981 | ||
@@ -1948,10 +1996,10 @@ | |||
1948 | 1996 | ||
1949 | 19991115 | 1997 | 19991115 |
1950 | - Merged OpenBSD CVS changes: | 1998 | - Merged OpenBSD CVS changes: |
1951 | - [ssh-add.c] change passphrase loop logic and remove ref to | 1999 | - [ssh-add.c] change passphrase loop logic and remove ref to |
1952 | $DISPLAY, ok niels | 2000 | $DISPLAY, ok niels |
1953 | - Changed to ssh-add.c broke askpass support. Revised it to be a little more | 2001 | - Changed to ssh-add.c broke askpass support. Revised it to be a little more |
1954 | modular. | 2002 | modular. |
1955 | - Revised autoconf support for enabling/disabling askpass support. | 2003 | - Revised autoconf support for enabling/disabling askpass support. |
1956 | - Merged more OpenBSD CVS changes: | 2004 | - Merged more OpenBSD CVS changes: |
1957 | [auth-krb4.c] | 2005 | [auth-krb4.c] |
@@ -1991,9 +2039,9 @@ | |||
1991 | - Added 'Obsoletes' lines to RPM spec file | 2039 | - Added 'Obsoletes' lines to RPM spec file |
1992 | - Merged OpenBSD CVS changes: | 2040 | - Merged OpenBSD CVS changes: |
1993 | - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels | 2041 | - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels |
1994 | - [scp.c] fix overflow reported by damien@ibs.com.au: off_t | 2042 | - [scp.c] fix overflow reported by damien@ibs.com.au: off_t |
1995 | totalsize, ok niels,aaron | 2043 | totalsize, ok niels,aaron |
1996 | - Delay fork (-f option) in ssh until after port forwarded connections | 2044 | - Delay fork (-f option) in ssh until after port forwarded connections |
1997 | have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi> | 2045 | have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi> |
1998 | - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de> | 2046 | - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de> |
1999 | - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled | 2047 | - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled |
@@ -2005,7 +2053,7 @@ | |||
2005 | - Merged changes from OpenBSD CVS | 2053 | - Merged changes from OpenBSD CVS |
2006 | - [sshd.c] session_key_int may be zero | 2054 | - [sshd.c] session_key_int may be zero |
2007 | - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config] | 2055 | - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config] |
2008 | IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok | 2056 | IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok |
2009 | deraadt,millert | 2057 | deraadt,millert |
2010 | - Brought default sshd_config more in line with OpenBSD's | 2058 | - Brought default sshd_config more in line with OpenBSD's |
2011 | - Grab server in gnome-ssh-askpass (Debian bug #49872) | 2059 | - Grab server in gnome-ssh-askpass (Debian bug #49872) |
@@ -2034,11 +2082,11 @@ | |||
2034 | - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too | 2082 | - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too |
2035 | - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too | 2083 | - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too |
2036 | - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too | 2084 | - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too |
2037 | - Fix integer overflow which was messing up scp's progress bar for large | 2085 | - Fix integer overflow which was messing up scp's progress bar for large |
2038 | file transfers. Fix submitted to OpenBSD developers. Report and fix | 2086 | file transfers. Fix submitted to OpenBSD developers. Report and fix |
2039 | from Kees Cook <cook@cpoint.net> | 2087 | from Kees Cook <cook@cpoint.net> |
2040 | - Merged more OpenBSD CVS changes: | 2088 | - Merged more OpenBSD CVS changes: |
2041 | - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal() | 2089 | - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal() |
2042 | + krb-cleanup cleanup | 2090 | + krb-cleanup cleanup |
2043 | - [clientloop.c log-client.c log-server.c ] | 2091 | - [clientloop.c log-client.c log-server.c ] |
2044 | [readconf.c readconf.h servconf.c servconf.h ] | 2092 | [readconf.c readconf.h servconf.c servconf.h ] |
@@ -2127,7 +2175,7 @@ | |||
2127 | - Improved PAM logging | 2175 | - Improved PAM logging |
2128 | - Added some debug() calls for PAM | 2176 | - Added some debug() calls for PAM |
2129 | - Removed redundant subdirectories | 2177 | - Removed redundant subdirectories |
2130 | - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for | 2178 | - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for |
2131 | building on Debian. | 2179 | building on Debian. |
2132 | - Fixed off-by-one error in PAM env patch | 2180 | - Fixed off-by-one error in PAM env patch |
2133 | - Released 1.2pre6 | 2181 | - Released 1.2pre6 |