summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-03-04upstream commitdjm@openbsd.org
Allow "ssh -Q protocol-version" to list supported SSH protocol versions. Useful for detecting builds without SSH v.1 support; idea and ok markus@
2015-03-03upstream commitmillert@openbsd.org
Make sure we only call getnameinfo() for AF_INET or AF_INET6 sockets. getpeername() of a Unix domain socket may return without error on some systems without actually setting ss_family so getnameinfo() was getting called with ss_family set to AF_UNSPEC. OK djm@
2015-02-28portability fixes for regress/netcat.cDamien Miller
Mostly avoiding "err(1, NULL)"
2015-02-28twiddle another test for portabilityDamien Miller
from Tom G. Christensen
2015-02-27twiddle test for portabilityDamien Miller
2015-02-26make regress/netcat.c fd passing (more) portableDamien Miller
2015-02-26create OBJ/valgrind-out before running unittestsDamien Miller
2015-02-26valgrind supportDamien Miller
2015-02-27upstream commitdjm@openbsd.org
don't printf NULL key comments; reported by Tom Christensen
2015-02-26upstream commitdjm@openbsd.org
zero cmsgbuf before use; we initialise the bits we use but valgrind still spams warning on it
2015-02-26upstream commitdjm@openbsd.org
fix small memory leak when UpdateHostkeys=no
2015-02-25Revert "Work around finicky USL linker so netcat will build."Tim Rice
This reverts commit d1db656021d0cd8c001a6692f772f1de29b67c8b. No longer needed with commit 678e473e2af2e4802f24dd913985864d9ead7fb3
2015-02-26upstream commitdjm@openbsd.org
don't leak validity of user in "too many authentication failures" disconnect message; reported by Sebastian Reitenbach
2015-02-26upstream commitnaddy@openbsd.org
add -v (show ASCII art) to -l's synopsis; ok djm@
2015-02-26Remove dependency on xmalloc.Darren Tucker
Remove ssh_get_progname's dependency on xmalloc, which should reduce link order problems. ok djm@
2015-02-25Restrict ECDSA and ECDH tests.Darren Tucker
ifdef out some more ECDSA and ECDH tests when built against an OpenSSL that does not have eliptic curve functionality.
2015-02-25Move definition of _NSIG.Darren Tucker
_NSIG is only unsed in one file, so move it there prevent redefinition warnings reported by Kevin Brott.
2015-02-25Add includes.h for compatibility stuff.Darren Tucker
2015-02-24include netdb.h to look for MAXHOSTNAMELEN; ok timDamien Miller
2015-02-24Work around finicky USL linker so netcat will build.Tim Rice
2015-02-24include includes.h to avoid build failure on AIXDamien Miller
2015-02-24Original portability patch from djm@ for platforms missing err.h.Tim Rice
Fix name space clash on Solaris 10. Still more to do for Solaris 10 to deal with msghdr structure differences. ok djm@
2015-02-23cleaner way fix dispatch.h portion of commitTim Rice
a88dd1da119052870bb2654c1a32c51971eade16 (some systems have sig_atomic_t in signal.h, some in sys/signal.h) Sounds good to me djm@
2015-02-23portability fix: if we can't dind a better define for HOST_NAME_MAX, use 255Tim Rice
2015-02-23portablity fix: s/__inline__/inline/Tim Rice
2015-02-24Wrap stdint.h includes in HAVE_STDINT_H.Darren Tucker
2015-02-24Add AI_NUMERICSERV to fake-rfc2553.Darren Tucker
Our getaddrinfo implementation always returns numeric values already.
2015-02-24Include OpenSSL's objects.h before bn.h.Darren Tucker
Prevents compile errors on some platforms (at least old GCCs and AIX's XLC compilers).
2015-02-24Convert two macros into functions.Darren Tucker
Convert packet_send_debug and packet_disconnect from macros to functions. Some older GCCs (2.7.x, 2.95.x) see to have problems with variadic macros with only one argument so we convert these two into functions. ok djm@
2015-02-24upstream commitdjm@openbsd.org
further silence spurious error message even when -v is specified (e.g. to get visual host keys); reported by naddy@
2015-02-24don't include stdint.h unless HAVE_STDINT_H setDamien Miller
2015-02-24nother sys/queue.h -> sys-queue.h fixDamien Miller
spotted by Tom Christensen
2015-02-24upstream commitdjm@openbsd.org
fix a race condition by using a mux socket rather than an ineffectual wait statement
2015-02-24various include fixes for portableDamien Miller
2015-02-24upstream commitdjm@openbsd.org
add an XXX to remind me to improve sshkey_load_public
2015-02-24upstream commitdjm@openbsd.org
silence a spurious error message when listing fingerprints for known_hosts; bz#2342
2015-02-24upstream commitdjm@openbsd.org
fix setting/clearing of TTY raw mode around UpdateHostKeys=ask confirmation question; reported by Herb Goldman
2015-02-23Repair for non-ECC OpenSSL.Darren Tucker
Ifdef out the ECC parts when building with an OpenSSL that doesn't have it.
2015-02-23Wrap stdint.h includes in ifdefs.Darren Tucker
2015-02-21out of tree build fixTim Rice
2015-02-21mkdir kex unit test directory so testing out of tree builds worksTim Rice
2015-02-22upstream commithalex@openbsd.org
make "ssh-add -d" properly remove a corresponding certificate, and also not whine and fail if there is none ok djm@
2015-02-22mkdir hostkey and bitmap unit test directoriesDamien Miller
2015-02-22upstream commitdjm@openbsd.org
sort options useable under Match case-insensitively; prodded jmc@
2015-02-22upstream commitdjm@openbsd.org
correct paths to configuration files being written/updated; they live in $OBJ not cwd; some by Roumen Petrov
2015-02-21More correct checking of HAVE_DECL_AI_NUMERICSERV.Darren Tucker
2015-02-21Add null declaration of AI_NUMERICINFO.Darren Tucker
Some platforms (older FreeBSD and DragonFly versions) do have getaddrinfo() but do not have AI_NUMERICINFO. so define it to zero in those cases.
2015-02-21upstream commitdjm@openbsd.org
more options that are available under Match; bz#2353 reported by calestyo AT scientia.net
2015-02-21upstream commitdjm@openbsd.org
UpdateHostKeys fixes: I accidentally changed the format of the hostkeys@openssh.com messages last week without changing the extension name, and this has been causing connection failures for people who are running -current. First reported by sthen@ s/hostkeys@openssh.com/hostkeys-00@openssh.com/ Change the name of the proof message too, and reorder it a little. Also, UpdateHostKeys=ask is incompatible with ControlPersist (no TTY available to read the response) so disable UpdateHostKeys if it is in ask mode and ControlPersist is active (and document this)
2015-02-21upstream commitdjm@openbsd.org
Regression: I broke logging of public key fingerprints in 1.46. Pointed out by Pontus Lundkvist