Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-04-09 | - (dtucker) [configure.ac] Bug #1744: use pkg-config for libedit flags if we | Darren Tucker | |
have it and the path is not provided to --with-libedit. Based on a patch from Iain Morgan. | |||
2010-04-09 | - (dtucker) [contrib/cygwin/Makefile] Don't overwrite files with the wrong | Darren Tucker | |
ones. Based on a patch from Roumen Petrov. | |||
2010-03-26 | - dtucker@cvs.openbsd.org 2010/03/26 01:06:13 | Darren Tucker | |
[ssh_config.5] Reformat default value of PreferredAuthentications entry (current formatting implies ", " is acceptable as a separator, which it's not. ok djm@ | |||
2010-03-26 | - djm@cvs.openbsd.org 2010/03/26 00:26:58 | Damien Miller | |
[ssh.1] mention that -S none disables connection sharing; from Colin Watson | |||
2010-03-26 | - (djm) [contrib/ssh-copy-id] Don't blow up when the agent has no keys; | Damien Miller | |
bz#1723 patch from Adeodato Simó via Colin Watson; ok dtucker@ | |||
2010-03-26 | - (dtucker) Bug #1725: explicitly link libX11 into gnome-ssh-askpass2 using | Darren Tucker | |
pkg-config, patch from Colin Watson. Needed for newer linkers (ie gold). | |||
2010-03-26 | - (djm) [channels.c] Check for EPFNOSUPPORT as a socket() errno; bz#1721 | Damien Miller | |
ok dtucker@ | |||
2010-03-26 | - (djm) [session.c] Allow ChrootDirectory to work on SELinux platforms - | Damien Miller | |
set up SELinux execution context before chroot() call. From Russell Coker via Colin watson; bz#1726 ok dtucker@ | |||
2010-03-26 | - djm@cvs.openbsd.org 2010/03/25 23:38:28 | Damien Miller | |
[servconf.c] from portable: getcwd(NULL, 0) doesn't work on all platforms, so use a stack buffer; ok dtucker@ | |||
2010-03-26 | - (dtucker) [configure.ac] Bug #1741: Add section for Haiku, patch originally | Darren Tucker | |
by Ingo Weinhold via Scott McCreary, ok djm@ | |||
2010-03-26 | - (djm) [openbsd-compat/bsd-arc4random.c] Fix preprocessor detection | Damien Miller | |
for arc4random_buf() and arc4random_uniform(); from Josh Gilkerson | |||
2010-03-24 | - (dtucker) [contrib/cygwin/ssh-host-config] Mount the Windows directory | Darren Tucker | |
containing the services file explicitely case-insensitive. This allows to tweak the Windows services file reliably. Patch from vinschen at redhat. | |||
2010-03-22 | - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] | Damien Miller | |
[contrib/suse/openssh.spec] Crank version numbers | |||
2010-03-22 | - djm@cvs.openbsd.org 2010/03/16 16:36:49 | Damien Miller | |
[version.h] crank version to openssh-5.5 since we have a few fixes since 5.4; requested deraadt@ kettenis@ | |||
2010-03-22 | - stevesk@cvs.openbsd.org 2010/03/16 15:46:52 | Damien Miller | |
[auth-options.c] spelling in error message. ok djm kettenis | |||
2010-03-22 | - stevesk@cvs.openbsd.org 2010/03/15 19:40:02 | Damien Miller | |
[key.c key.h ssh-keygen.c] also print certificate type (user or host) for ssh-keygen -L ok djm kettenis | |||
2010-03-22 | - jmc@cvs.openbsd.org 2010/03/13 23:38:13 | Damien Miller | |
[ssh-keygen.1] fix a formatting error (args need quoted); noted by stevesk | |||
2010-03-22 | - djm@cvs.openbsd.org 2010/03/13 21:45:46 | Damien Miller | |
[ssh-keygen.1] Certificates are named *-cert.pub, not *_cert.pub; committing a diff from stevesk@ ok me | |||
2010-03-22 | - djm@cvs.openbsd.org 2010/03/13 21:10:38 | Damien Miller | |
[clientloop.c] protocol conformance fix: send language tag when disconnecting normally; spotted by 1.41421 AT gmail.com, ok markus@ deraadt@ | |||
2010-03-22 | - markus@cvs.openbsd.org 2010/03/12 11:37:40 | Damien Miller | |
[servconf.c] do not prepend AuthorizedKeysFile with getcwd(), unbreaks relative paths free() (not xfree()) the buffer returned by getcwd() | |||
2010-03-22 | - djm@cvs.openbsd.org 2010/03/12 01:06:25 | Damien Miller | |
[servconf.c] unbreak AuthorizedKeys option with a $HOME-relative path; reported by vinschen AT redhat.com, ok dtucker@ | |||
2010-03-22 | - djm@cvs.openbsd.org 2010/03/10 23:27:17 | Damien Miller | |
[auth2-pubkey.c] correct certificate logging and make it more consistent between authorized_keys and TrustedCAKeys; ok markus@ | |||
2010-03-22 | - jmc@cvs.openbsd.org 2010/03/10 07:40:35 | Damien Miller | |
[ssh-keygen.1] typos; from Ross Richardson closes prs 6334 and 6335 | |||
2010-03-22 | - jmc@cvs.openbsd.org 2010/03/08 09:41:27 | Damien Miller | |
[ssh-keygen.1] sort the list of constraints (to -O); ok djm | |||
2010-03-14 | - (djm) [Makefile.in] Respecify -lssh after -lopenbsd-compat for | Damien Miller | |
ssh-pkcs11-helper to repair static builds (we do the same for ssh-keyscan). Reported by felix-mindrot AT fefe.de | |||
2010-03-14 | - (djm) [ssh-pkcs11-helper.c] Move #ifdef to after #defines to fix | Damien Miller | |
compilation failure when !HAVE_DLOPEN. Reported by felix-mindrot AT fefe.de | |||
2010-03-11 | - (tim) [contrib/cygwin/Makefile] Fix list of documentation files to install | Tim Rice | |
on a Cygwin installation. Patch from Corinna Vinschen. | |||
2010-03-11 | - (tim) [Makefile.in] Add missing $(EXEEXT) to install targets. | Tim Rice | |
Patch from Corinna Vinschen. | |||
2010-03-11 | - (tim) [openssh/Makefile.in] Now that scard is gone, no need to | Tim Rice | |
make $(datadir) | |||
2010-03-10 | - (tim) [contrib/suse/openssh.spec] crank version number here too. | Tim Rice | |
report by imorgan AT nas.nasa.gov | |||
2010-03-09 | - (dtucker) [configure.ac] Use a proper AC_CHECK_DECL for BROKEN_GETADDRINFO | Darren Tucker | |
so setting it in CFLAGS correctly skips IPv6 tests. | |||
2010-03-08 | - djm@cvs.openbsd.org 2010/03/08 00:28:55 | Damien Miller | |
[ssh-keygen.1] document permit-agent-forwarding certificate constraint; patch from stevesk@ | |||
2010-03-08 | - (djm) Release OpenSSH-5.4p1 | Damien Miller | |
2010-03-08 | - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] | Damien Miller | |
crank version numbers | |||
2010-03-08 | - djm@cvs.openbsd.org 2010/03/07 22:16:01 | Damien Miller | |
[ssh-keygen.c] make internal strptime string match strftime format; suggested by vinschen AT redhat.com and markus@ | |||
2010-03-08 | - (djm) OpenBSD CVS Sync | Damien Miller | |
- djm@cvs.openbsd.org 2010/03/07 22:01:32 [version.h] openssh-5.4 | |||
2010-03-07 | - dtucker@cvs.openbsd.org 2010/03/07 11:57:13 | Darren Tucker | |
[auth-rhosts.c monitor.c monitor_wrap.c session.c auth-options.c sshd.c] Hold authentication debug messages until after successful authentication. Fixes an info leak of environment variables specified in authorized_keys, reported by Jacob Appelbaum. ok djm@ | |||
2010-03-07 | - (dtucker) [session.c] Also initialize creds to NULL for handing to | Darren Tucker | |
setpcred. | |||
2010-03-07 | - (dtucker) [session.c] Bug #1567: move setpcred call to before chroot and | Darren Tucker | |
do not set real uid, since that's needed for the chroot, and will be set by permanently_set_uid. | |||
2010-03-07 | - (dtucker) [auth.c] Bug #1710: call setauthdb on AIX before getpwuid so that | Darren Tucker | |
it gets the passwd struct from the LAM that knows about the user which is not necessarily the default. Patch from Alexandre Letourneau. | |||
2010-03-05 | - djm@cvs.openbsd.org 2010/03/05 10:28:21 | Damien Miller | |
[ssh-add.1 ssh.1 ssh_config.5] mention loading of certificate files from [private]-cert.pub when they are present; feedback and ok jmc@ | |||
2010-03-05 | - jmc@cvs.openbsd.org 2010/03/05 08:31:20 | Damien Miller | |
[ssh.1] document certificate authentication; help/ok djm | |||
2010-03-05 | - jmc@cvs.openbsd.org 2010/03/05 06:50:35 | Damien Miller | |
[ssh.1 sshd.8] tweak previous; | |||
2010-03-05 | - (djm) [configure.ac] set -fno-strict-aliasing for gcc4; ok dtucker@ | Damien Miller | |
2010-03-05 | - djm@cvs.openbsd.org 2010/03/05 02:58:11 | Damien Miller | |
[auth.c] make the warning for a revoked key louder and more noticable | |||
2010-03-05 | - (djm) [ssh-rand-helper.c] declare optind, avoiding compilation failure | Damien Miller | |
on some platforms | |||
2010-03-05 | - djm@cvs.openbsd.org 2010/03/04 23:27:25 | Damien Miller | |
[auth-options.c ssh-keygen.c] "force-command" is not spelled "forced-command"; spotted by imorgan AT nas.nasa.gov | |||
2010-03-05 | - djm@cvs.openbsd.org 2010/03/04 23:19:29 | Damien Miller | |
[ssh.1 sshd.8] move section on CA and revoked keys from ssh.1 to sshd.8's known hosts format section and rework it a bit; requested by jmc@ | |||
2010-03-05 | - djm@cvs.openbsd.org 2010/03/04 23:17:25 | Damien Miller | |
[sshd_config.5] missing word; spotted by jmc@ | |||
2010-03-05 | - jmc@cvs.openbsd.org 2010/03/04 22:52:40 | Damien Miller | |
[ssh-keygen.1] fix Bk/Ek; |