- Big OpenBSD CVS update (mainly beginnings of SSH2 infrastructure)

   - [auth.c session.c sshd.c auth.h]
     split sshd.c -> auth.c session.c sshd.c plus cleanup and goto-removal
   - [bufaux.c bufaux.h]
     support ssh2 bignums
   - [channels.c channels.h clientloop.c sshd.c nchan.c nchan.h packet.c]
     [readconf.c ssh.c ssh.h serverloop.c]
     replace big switch() with function tables (prepare for ssh2)
   - [ssh2.h]
     ssh2 message type codes
   - [sshd.8]
     reorder Xr to avoid cutting
   - [serverloop.c]
     close(fdin) if fdin != fdout, shutdown otherwise, ok theo@
   - [channels.c]
     missing close
     allow bigger packets
   - [cipher.c cipher.h]
     support ssh2 ciphers
   - [compress.c]
     cleanup, less code
   - [dispatch.c dispatch.h]
     function tables for different message types
   - [log-server.c]
     do not log() if debuggin to stderr
     rename a cpp symbol, to avoid param.h collision
   - [mpaux.c]
     KNF
   - [nchan.c]
     sync w/ channels.c

1 files changed, 106 insertions, 0 deletions

diff --git a/ssh2.h b/ssh2.h
new file mode 100644
index 000000000..cc659f847
--- /dev/null
+++ b/ssh2.h
@@ -0,0 +1,106 @@
+/*
+ * draft-ietf-secsh-architecture-04.txt 
+ *
+ *   Transport layer protocol:
+ * 
+ *     1-19     Transport layer generic (e.g. disconnect, ignore, debug,
+ *              etc)
+ *     20-29    Algorithm negotiation
+ *     30-49    Key exchange method specific (numbers can be reused for
+ *              different authentication methods)
+ * 
+ *   User authentication protocol:
+ * 
+ *     50-59    User authentication generic
+ *     60-79    User authentication method specific (numbers can be reused
+ *              for different authentication methods)
+ * 
+ *   Connection protocol:
+ * 
+ *     80-89    Connection protocol generic
+ *     90-127   Channel related messages
+ * 
+ *   Reserved for client protocols:
+ * 
+ *     128-191  Reserved
+ * 
+ *   Local extensions:
+ * 
+ *     192-255  Local extensions
+ */
+
+/* transport layer: generic */
+
+#define SSH2_MSG_DISCONNECT                             1
+#define SSH2_MSG_IGNORE                                 2
+#define SSH2_MSG_UNIMPLEMENTED                          3
+#define SSH2_MSG_DEBUG                                  4
+#define SSH2_MSG_SERVICE_REQUEST                        5
+#define SSH2_MSG_SERVICE_ACCEPT                         6
+
+/* transport layer: alg negotiation */
+
+#define SSH2_MSG_KEXINIT                                20
+#define SSH2_MSG_NEWKEYS                                21
+
+/* transport layer: kex specific messages, can be reused */
+
+#define SSH2_MSG_KEXDH_INIT                             30
+#define SSH2_MSG_KEXDH_REPLY                            31
+
+/* user authentication: generic */
+
+#define SSH2_MSG_USERAUTH_REQUEST                       50
+#define SSH2_MSG_USERAUTH_FAILURE                       51
+#define SSH2_MSG_USERAUTH_SUCCESS                       52
+#define SSH2_MSG_USERAUTH_BANNER                        53
+
+/* user authentication: method specific, can be reused */
+
+#define SSH2_MSG_USERAUTH_PK_OK                         60
+#define SSH2_MSG_USERAUTH_PASSWD_CHANGEREQ              60
+#define SSH2_MSG_USERAUTH_INFO_REQUEST                  60
+#define SSH2_MSG_USERAUTH_INFO_RESPONSE                 61
+
+/* connection protocol: generic */
+
+#define SSH2_MSG_GLOBAL_REQUEST                         80
+#define SSH2_MSG_REQUEST_SUCCESS                        81
+#define SSH2_MSG_REQUEST_FAILURE                        82
+
+/* channel related messages */
+
+#define SSH2_MSG_CHANNEL_OPEN                           90
+#define SSH2_MSG_CHANNEL_OPEN_CONFIRMATION              91
+#define SSH2_MSG_CHANNEL_OPEN_FAILURE                   92
+#define SSH2_MSG_CHANNEL_WINDOW_ADJUST                  93
+#define SSH2_MSG_CHANNEL_DATA                           94
+#define SSH2_MSG_CHANNEL_EXTENDED_DATA                  95
+#define SSH2_MSG_CHANNEL_EOF                            96
+#define SSH2_MSG_CHANNEL_CLOSE                          97
+#define SSH2_MSG_CHANNEL_REQUEST                        98
+#define SSH2_MSG_CHANNEL_SUCCESS                        99
+#define SSH2_MSG_CHANNEL_FAILURE                        100
+
+/* disconnect reason code */
+
+#define SSH2_DISCONNECT_HOST_NOT_ALLOWED_TO_CONNECT     1
+#define SSH2_DISCONNECT_PROTOCOL_ERROR                  2
+#define SSH2_DISCONNECT_KEY_EXCHANGE_FAILED             3
+#define SSH2_DISCONNECT_HOST_AUTHENTICATION_FAILED      4
+#define SSH2_DISCONNECT_MAC_ERROR                       5
+#define SSH2_DISCONNECT_COMPRESSION_ERROR               6
+#define SSH2_DISCONNECT_SERVICE_NOT_AVAILABLE           7
+#define SSH2_DISCONNECT_PROTOCOL_VERSION_NOT_SUPPORTED  8
+#define SSH2_DISCONNECT_HOST_KEY_NOT_VERIFIABLE         9
+#define SSH2_DISCONNECT_CONNECTION_LOST                 10
+#define SSH2_DISCONNECT_BY_APPLICATION                  11
+
+/* misc */
+
+#define SSH2_OPEN_ADMINISTRATIVELY_PROHIBITED           1
+#define SSH2_OPEN_CONNECT_FAILED                        2
+#define SSH2_OPEN_UNKNOWN_CHANNEL_TYPE                  3
+#define SSH2_OPEN_RESOURCE_SHORTAGE                     4
+
+#define SSH2_EXTENDED_DATA_STDERR                       1