summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2008-06-30 - djm@cvs.openbsd.org 2008/06/28 13:58:23Damien Miller
[ssh-agent.c] refuse to add a key that has unknown constraints specified; ok markus
2008-06-30 - djm@cvs.openbsd.org 2008/06/28 07:25:07Damien Miller
[PROTOCOL] spelling fixes
2008-06-30 - jmc@cvs.openbsd.org 2008/06/26 21:11:46Damien Miller
[ssh.1] add VisualHostKey to the list of options listed in -o;
2008-06-30 - grunk@cvs.openbsd.org 2008/06/26 11:46:31Damien Miller
[readconf.c readconf.h ssh.1 ssh_config.5 sshconnect.c] Move SSH Fingerprint Visualization away from sharing the config option CheckHostIP to an own config option named VisualHostKey. While there, fix the behaviour that ssh would draw a random art picture on every newly seen host even when the option was not enabled. prodded by deraadt@, discussions, help and ok markus@ djm@ dtucker@
2008-06-29 - djm@cvs.openbsd.org 2008/06/26 09:19:40Damien Miller
[dh.c dh.h moduli.c] when loading moduli from /etc/moduli in sshd(8), check that they are of the expected "safe prime" structure and have had appropriate primality tests performed; feedback and ok dtucker@
2008-06-29 - djm@cvs.openbsd.org 2008/06/26 06:10:09Damien Miller
[sftp-client.c sftp-server.c] allow the sftp chmod(2)-equivalent operation to set set[ug]id/sticky bits. Note that this only affects explicit setting of modes (e.g. via sftp(1)'s chmod command) and not file transfers. (bz#1310) ok deraadt@ at c2k8
2008-06-29 - otto@cvs.openbsd.org 2008/06/25 11:13:43Damien Miller
[key.c] add key length to visual fingerprint; zap magical constants; ok grunk@ djm@
2008-06-29 - (djm) OpenBSD CVS SyncDamien Miller
- martynas@cvs.openbsd.org 2008/06/21 07:46:46 [sftp.c] use optopt to get invalid flag, instead of return value of getopt, which is always '?'; ok djm@
2008-06-28 - (djm) [RFC.nroff contrib/cygwin/Makefile contrib/suse/openssh.spec]Damien Miller
RFC.nroff lacks a license, remove it (it is long gone in OpenBSD).
2008-06-26 - (djm) [ contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller
[contrib/suse/openssh.spec] Include moduli.5 in RPM spec files.
2008-06-26 - (djm) [Makefile.in moduli.5] Include moduli(5) manpage from OpenBSD.Damien Miller
(bz#1372)
2008-06-16 - (dtucker) [channels.c] isatty -> is_tty here too.Darren Tucker
2008-06-16 - dtucker@cvs.openbsd.org 2008/06/16 13:22:53Darren Tucker
[session.c channels.c] Rename the isatty argument to is_tty so we don't shadow isatty(3). ok markus@
2008-06-16Remove extra tagDarren Tucker
2008-06-16 - djm@cvs.openbsd.org 2008/06/15 20:06:26Damien Miller
[channels.c channels.h session.c] don't call isatty() on a pty master, instead pass a flag down to channel_set_fds() indicating that te fds refer to a tty. Fixes a hang on exit on Solaris (bz#1463) in portable but is actually a generic bug; ok dtucker deraadt markus
2008-06-16 - dtucker@cvs.openbsd.org 2008/06/15 16:58:40Damien Miller
[servconf.c sshd_config.5] Allow MaxAuthTries within a Match block. ok djm@
2008-06-16 - dtucker@cvs.openbsd.org 2008/06/15 16:55:38Damien Miller
[sshd_config.5] MaxSessions is allowed in a Match block too
2008-06-16 - dtucker@cvs.openbsd.org 2008/06/14 19:42:10Damien Miller
[scp.1] Mention that scp follows symlinks during -r. bz #1466, from nectar at apple
2008-06-16 - djm@cvs.openbsd.org 2008/06/14 18:33:43Damien Miller
[session.c] suppress the warning message from chdir(homedir) failures when chrooted (bz#1461); ok dtucker
2008-06-16 - dtucker@cvs.openbsd.org 2008/06/14 17:07:11Damien Miller
[sshd.c] ensure default umask disallows at least group and world write; ok djm@
2008-06-16 - OpenBSD CVS SyncDamien Miller
- dtucker@cvs.openbsd.org 2008/06/14 15:49:48 [sshd.c] wrap long line at 80 chars
2008-06-16 - (dtucker) [configure.ac] Enable -fno-builtin-memset when using gcc.Darren Tucker
2008-06-15 - (djm) [openbsd-compat/sigact.c] Avoid NULL derefs in ancient sigactionDamien Miller
replacement code; patch from ighighi AT gmail.com in bz#1240; ok dtucker
2008-06-14 - (dtucker) [configure.ac] Bug #1276: avoid linking against libgssapi, whichDarren Tucker
despite its name doesn't seem to implement all of GSSAPI. Patch from Jan Engelhardt, sanity checked by Simon Wilkinson.
2008-06-14 - grunk@cvs.openbsd.org 2008/06/13 20:13:26Darren Tucker
[ssh.1] Explain the use of SSH fpr visualization using random art, and cite the original scientific paper inspiring that technique. Much help with English and nroff by jmc@, thanks.
2008-06-14 - dtucker@cvs.openbsd.org 2008/06/13 18:55:22Darren Tucker
[scp.c] Prevent -Wsign-compare warnings on LP64 systems. bz #1192, ok deraadt@
2008-06-14 - dtucker@cvs.openbsd.org 2008/06/13 17:21:20Darren Tucker
[mux.c] Friendlier error messages for mux fallback. ok djm@
2008-06-14 - dtucker@cvs.openbsd.org 2008/06/13 14:18:51Darren Tucker
[auth2-pubkey.c auth-rhosts.c] Include unistd.h for close(), prevents warnings in -portable
2008-06-14 - dtucker@cvs.openbsd.org 2008/06/13 13:56:59Darren Tucker
[monitor.c] Clear key options in the monitor on failed authentication, prevents applying additional restrictions to non-pubkey authentications in the case where pubkey fails but another method subsequently succeeds. bz #1472, found by Colin Watson, ok markus@ djm
2008-06-13 - deraadt@cvs.openbsd.org 2008/06/13 09:44:36Darren Tucker
[packet.c] compile on older gcc; no decl after code
2008-06-13 - (dtucker) [openbsd-compat/setenv.c] Make offsets size_t to preventDarren Tucker
compiler warnings on some platforms. Based on a discussion with otto@
2008-06-13 - djm@cvs.openbsd.org 2008/06/13 04:40:22Darren Tucker
[auth2-pubkey.c auth-rhosts.c] refuse to read ~/.shosts or ~/.ssh/authorized_keys that are not regular files; report from Solar Designer via Colin Watson in bz#1471 ok dtucker@ deraadt@
2008-06-13 - dtucker@cvs.openbsd.org 2008/06/13 01:38:23Darren Tucker
[misc.c] upcast uid to long with matching %ld, prevents warnings in portable
2008-06-13 - (dtucker) [umac.c] STORE_UINT32_REVERSED and endian_convert are never usedDarren Tucker
on big endian machines, so ifdef them for little endian only to prevent unused function warnings.
2008-06-13 - (dtucker) [auth-sia.c] Bug #1241: support password expiry on Tru64 SIADarren Tucker
systems. Patch from R. Scott Bailey.
2008-06-13 - dtucker@cvs.openbsd.org 2008/06/13 00:51:47Darren Tucker
[mac.c] upcast another size_t to u_long to match format
2008-06-13 - dtucker@cvs.openbsd.org 2008/06/13 00:47:53Darren Tucker
[mux.c] upcast size_t to u_long to match format arg; ok djm@
2008-06-13 - (dtucker) [defines.h] Bug #1112: __dead is, well dead. Based on a patchDarren Tucker
from Todd Vierling.
2008-06-13 - djm@cvs.openbsd.org 2008/06/13 00:16:49Darren Tucker
[mux.c] fall back to creating a new TCP connection on most multiplexing errors (socket connect fail, invalid version, refused permittion, corrupted messages, etc.); bz #1329 ok dtucker@
2008-06-13 - dtucker@cvs.openbsd.org 2008/06/13 00:12:02Darren Tucker
[sftp.h log.h] replace __dead with __attribute__((noreturn)), makes things a little easier to port. Also, add it to sigdie(). ok djm@
2008-06-13 - ian@cvs.openbsd.org 2008/06/12 23:24:58Darren Tucker
[sshconnect.c] tweak wording in message, ok deraadt@ jmc@
2008-06-13 - grunk@cvs.openbsd.org 2008/06/12 22:03:36Darren Tucker
[key.c] add my copyright, ok djm@
2008-06-13 - grunk@cvs.openbsd.org 2008/06/12 21:14:46Darren Tucker
[ssh-keygen.c] make ssh-keygen -lf show the key type just as ssh-add -l would do it ok djm@ markus@
2008-06-13 - djm@cvs.openbsd.org 2008/06/12 21:06:25Darren Tucker
[clientloop.c] I was coalescing expected global request confirmation replies at the wrong end of the queue - fix; prompted by markus@
2008-06-13 - djm@cvs.openbsd.org 2008/06/12 20:47:04Darren Tucker
[sftp-client.c] print extension revisions for extensions that we understand
2008-06-13 - dtucker@cvs.openbsd.org 2008/06/12 20:38:28Darren Tucker
[sshd.c sshconnect.c packet.h misc.c misc.h packet.c] Make keepalive timeouts apply while waiting for a packet, particularly during key renegotiation (bz #1363). With djm and Matt Day, ok djm@
2008-06-13 - jmc@cvs.openbsd.org 2008/06/12 19:10:09Darren Tucker
[ssh_config.5 ssh-keygen.1] tweak the ascii art text; ok grunk
2008-06-13 - (dtucker) [clientloop.c serverloop.c] channel_register_filter nowDarren Tucker
takes 2 more args. with djm@
2008-06-13 - dtucker@cvs.openbsd.org 2008/06/12 16:35:31Darren Tucker
[ssh_config.5 ssh.c] keyword expansion for localcommand. ok djm@
2008-06-13 - djm@cvs.openbsd.org 2008/06/12 15:19:17Darren Tucker
[clientloop.h channels.h clientloop.c channels.c mux.c] The multiplexing escape char handler commit last night introduced a small memory leak per session; plug it.