summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--ChangeLog3
-rw-r--r--ssh.c12
-rw-r--r--ssh_config.514
3 files changed, 16 insertions, 13 deletions
diff --git a/ChangeLog b/ChangeLog
index 6935b5cad..0accc41e2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -20,6 +20,9 @@
20 [readconf.c readconf.h ssh.1 ssh.c ssh_config.5] 20 [readconf.c readconf.h ssh.1 ssh.c ssh_config.5]
21 s/canonicalise/canonicalize/ for consistency with existing spelling, 21 s/canonicalise/canonicalize/ for consistency with existing spelling,
22 e.g. authorized_keys; pointed out by naddy@ 22 e.g. authorized_keys; pointed out by naddy@
23 - djm@cvs.openbsd.org 2013/10/16 22:58:01
24 [ssh.c ssh_config.5]
25 one I missed in previous: s/isation/ization/
23 26
2420131015 2720131015
25 - (djm) OpenBSD CVS Sync 28 - (djm) OpenBSD CVS Sync
diff --git a/ssh.c b/ssh.c
index 6581e57bf..935390726 100644
--- a/ssh.c
+++ b/ssh.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssh.c,v 1.386 2013/10/16 22:49:39 djm Exp $ */ 1/* $OpenBSD: ssh.c,v 1.387 2013/10/16 22:58:01 djm Exp $ */
2/* 2/*
3 * Author: Tatu Ylonen <ylo@cs.hut.fi> 3 * Author: Tatu Ylonen <ylo@cs.hut.fi>
4 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -303,8 +303,8 @@ check_follow_cname(char **namep, const char *cname)
303 303
304/* 304/*
305 * Attempt to resolve the supplied hostname after applying the user's 305 * Attempt to resolve the supplied hostname after applying the user's
306 * canonicalisation rules. Returns the address list for the host or NULL 306 * canonicalization rules. Returns the address list for the host or NULL
307 * if no name was found after canonicalisation. 307 * if no name was found after canonicalization.
308 */ 308 */
309static struct addrinfo * 309static struct addrinfo *
310resolve_canonicalize(char **hostp, u_int port) 310resolve_canonicalize(char **hostp, u_int port)
@@ -322,7 +322,7 @@ resolve_canonicalize(char **hostp, u_int port)
322 if (options.proxy_command != NULL && 322 if (options.proxy_command != NULL &&
323 options.canonicalize_hostname != SSH_CANONICALISE_ALWAYS) 323 options.canonicalize_hostname != SSH_CANONICALISE_ALWAYS)
324 return NULL; 324 return NULL;
325 /* Don't apply canonicalisation to sufficiently-qualified hostnames */ 325 /* Don't apply canonicalization to sufficiently-qualified hostnames */
326 ndots = 0; 326 ndots = 0;
327 for (cp = *hostp; *cp != '\0'; cp++) { 327 for (cp = *hostp; *cp != '\0'; cp++) {
328 if (*cp == '.') 328 if (*cp == '.')
@@ -906,11 +906,11 @@ main(int ac, char **av)
906 host = cp; 906 host = cp;
907 } 907 }
908 908
909 /* If canonicalisation requested then try to apply it */ 909 /* If canonicalization requested then try to apply it */
910 if (options.canonicalize_hostname != SSH_CANONICALISE_NO) 910 if (options.canonicalize_hostname != SSH_CANONICALISE_NO)
911 addrs = resolve_canonicalize(&host, options.port); 911 addrs = resolve_canonicalize(&host, options.port);
912 /* 912 /*
913 * If canonicalisation not requested, or if it failed then try to 913 * If canonicalization not requested, or if it failed then try to
914 * resolve the bare hostname name using the system resolver's usual 914 * resolve the bare hostname name using the system resolver's usual
915 * search rules. 915 * search rules.
916 */ 916 */
diff --git a/ssh_config.5 b/ssh_config.5
index 586db6b9f..c99678f6f 100644
--- a/ssh_config.5
+++ b/ssh_config.5
@@ -33,7 +33,7 @@
33.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 33.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
34.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
35.\" 35.\"
36.\" $OpenBSD: ssh_config.5,v 1.173 2013/10/16 22:49:39 djm Exp $ 36.\" $OpenBSD: ssh_config.5,v 1.174 2013/10/16 22:58:01 djm Exp $
37.Dd $Mdocdate: October 16 2013 $ 37.Dd $Mdocdate: October 16 2013 $
38.Dt SSH_CONFIG 5 38.Dt SSH_CONFIG 5
39.Os 39.Os
@@ -206,7 +206,7 @@ When
206is enabled, this option specifies the list of domain suffixes in which to 206is enabled, this option specifies the list of domain suffixes in which to
207search for the specified destination host. 207search for the specified destination host.
208.It Cm CanonicalizeFallbackLocal 208.It Cm CanonicalizeFallbackLocal
209Specifies whether to fail with an error when hostname canonicalisation fails. 209Specifies whether to fail with an error when hostname canonicalization fails.
210The default, 210The default,
211.Dq no , 211.Dq no ,
212will attempt to look up the unqualified hostname using the system resolver's 212will attempt to look up the unqualified hostname using the system resolver's
@@ -221,7 +221,7 @@ is enabled and the target hostname cannot be found in any of the domains
221specified by 221specified by
222.Cm CanonicalDomains . 222.Cm CanonicalDomains .
223.It Cm CanonicalizeHostname 223.It Cm CanonicalizeHostname
224Controls whether explicit hostname canonicalisation is performed. 224Controls whether explicit hostname canonicalization is performed.
225The default, 225The default,
226.Dq no , 226.Dq no ,
227is not to perform any name rewriting and let the system resolver handle all 227is not to perform any name rewriting and let the system resolver handle all
@@ -241,10 +241,10 @@ If
241.Cm CanonicalizeHostname 241.Cm CanonicalizeHostname
242is set to 242is set to
243.Dq always , 243.Dq always ,
244then canonicalisation is applied to proxied connections too. 244then canonicalization is applied to proxied connections too.
245.It Cm CanonicalizeMaxDots 245.It Cm CanonicalizeMaxDots
246Specifies the maximum number of dot characters in a hostname before 246Specifies the maximum number of dot characters in a hostname before
247canonicalisation is disabled. 247canonicalization is disabled.
248The default, 248The default,
249.Dq 1 , 249.Dq 1 ,
250allows a single dot (i.e. hostname.subdomain). 250allows a single dot (i.e. hostname.subdomain).
@@ -255,7 +255,7 @@ The rules consist of one or more arguments of
255.Ar source_domain_list : Ns Ar target_domain_list , 255.Ar source_domain_list : Ns Ar target_domain_list ,
256where 256where
257.Ar source_domain_list 257.Ar source_domain_list
258is a pattern-list of domains that may follow CNAMEs in canonicalisation, 258is a pattern-list of domains that may follow CNAMEs in canonicalization,
259and 259and
260.Ar target_domain_list 260.Ar target_domain_list
261is a pattern-list of domains that they may resolve to. 261is a pattern-list of domains that they may resolve to.
@@ -1423,7 +1423,7 @@ Patterns within pattern-lists may be negated
1423by preceding them with an exclamation mark 1423by preceding them with an exclamation mark
1424.Pq Sq !\& . 1424.Pq Sq !\& .
1425For example, 1425For example,
1426to allow a key to be used from anywhere within an organisation 1426to allow a key to be used from anywhere within an organization
1427except from the 1427except from the
1428.Dq dialup 1428.Dq dialup
1429pool, 1429pool,