summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2005-05-31Add lintian overrides for the above (setuid-binary, no-debconf-templates).Colin Watson
2005-05-31Since ssh-keysign isn't used by default (you need to set EnableSSHKeysignColin Watson
to "yes" in /etc/ssh/ssh_config), having a debconf question to ask whether it should be setuid is overkill, and the question text had got out of date anyway. Remove this question, ship ssh-keysign setuid in openssh-client.deb, and set a statoverride if the debconf question was previously set to false.
2005-05-31Drop debconf support for allowing SSH protocol 1, which is discouraged andColin Watson
has not been the default since openssh 1:3.0.1p1-1. Users who need this should edit sshd_config instead (closes: #147212).
2005-05-31Finish 1:4.1p1-1.Colin Watson
2005-05-31Fix up very old sshd_config files that refer to /usr/libexec/sftp-serverColin Watson
(closes: #141979).
2005-05-31Change libexecdir to /usr/lib/openssh, and fix up various alternatives andColin Watson
configuration files to match (closes: #87900, #151321).
2005-05-30re-enabling PasswordAuthentication by default closes: #247521Colin Watson
2005-05-30Disable ChallengeResponseAuthentication in new installations, returning toColin Watson
PasswordAuthentication by default, since it now supports PAM and apparently works better with a non-threaded sshd.
2005-05-30Take upstream's hint and disable the unsupported USE_POSIX_THREADSColin Watson
(closes: #295757, #308868, and possibly others; may open other bugs). Use PAM password authentication to avoid #278394. In future I may provide two sets of binaries built with and without this option, since it seems I can't win.
2005-05-30bump changelog to 1:4.1p1-1; 4.1p1 closes: #192234Colin Watson
2005-05-30Merge 4.1p1 to the trunk.Colin Watson
2005-05-30Import OpenSSH 4.1p1.Colin Watson
2005-05-26openssh-server Suggests: rssh (closes: #233012).Colin Watson
2005-05-26Finish 1:4.0p1-1.Colin Watson
2005-05-26note that sshd still doesn't work on the HurdColin Watson
2005-05-25remove detritus from 4.0p1 mergeColin Watson
2005-05-25send SSH_RELEASE rather than SSH_VERSION in banners, preserving previousColin Watson
behaviour
2005-05-254.0p1 closes: #163933 ($HOME/.hushlogin mentioned in ssh(8) FILES)Colin Watson
2005-05-25Note in ssh_config(5) that the SetupTimeOut option is Debian-specificColin Watson
(closes: #307069).
2005-05-25Enable HashKnownHosts by default. This only affects new entries; useColin Watson
'ssh-keygen -H' to convert an entire known_hosts file to hashed format.
2005-05-254.0p1 closes: #87253, #192206 (port forwarding improvements)Colin Watson
2005-05-25close earliest merged bug (#257130 instead of #303362)Colin Watson
2005-05-254.0p1 closes: #303452Colin Watson
2005-05-254.0p1 closes: #220726Colin Watson
2005-05-25Don't build ssh-askpass-gnome on the Hurd, until GNOME is available toColin Watson
satisfy build-dependencies.
2005-05-25Hurd fixes:Colin Watson
- Link with -lcrypt. - Link with -lpthread rather than -pthread.
2005-05-25Drop workaround for #242462 on amd64; it's been fixed properly upstream.Colin Watson
2005-05-25 - (djm) Release 4.1p1Damien Miller
2005-05-254.0p1 closes: #303362Colin Watson
2005-05-25Restore Hurd X forwarding fix from #102991, lost somewhere along the way.Colin Watson
2005-05-25Update Finnish (thanks, Matti Pöllä; closes: #303787).Colin Watson
2005-05-25Add Ukrainian (thanks, Eugeniy Meshcheryakov; closes: #301852).Colin Watson
2005-05-25Update Czech debconf template translation (thanks, Miroslav Kure; closes:Colin Watson
#298744).
2005-05-25Enable libedit support in sftp; build-depend on libedit-dev.Colin Watson
2005-05-25Merge 4.0p1 to the trunk.Colin Watson
2005-05-25 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Ensure sufficient memoryDarren Tucker
allocation when retrieving core Windows environment. Add CYGWIN variable to propagated variables. Patch from vinschen at redhat.com, ok djm@
2005-05-25 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Ensure sufficient memoryDarren Tucker
allocation when retrieving core Windows environment. Add CYGWIN variable to propagated variables. Patch from vinschen at redhat.com, ok djm@
2005-05-25 - (dtucker) [auth-pam.c] Since people don't seem to be getting the messageDarren Tucker
that USE_POSIX_THREADS is unsupported, not recommended and generally a bad idea, it is now known as UNSUPPORTED_POSIX_THREADS_HACK. Attempting to use USE_POSIX_THREADS will now generate an error so we don't silently change behaviour. ok djm@
2005-05-25 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller
[contrib/suse/openssh.spec] Update spec file versions to 4.1p1
2005-05-24restore portable-specific tweakDamien Miller
2005-05-24nicer fix from millert@Damien Miller
2005-05-24 - (djm) [openbsd-compat/readpassphrase.c] bz #950: Retry tcsetattr to ensureDamien Miller
terminal modes are reset correctly. Fix from peak AT argo.troja.mff.cuni.cz; "looks ok" dtucker@
2005-05-1220050512Tim Rice
- (tim) [buildpkg.sh.in] missing ${PKG_INSTALL_ROOT} in init script hard link section. Bug 1038.
2005-05-09 - (dtucker) [contrib/cygwin/ssh-host-config] Add a test and warning for aDarren Tucker
user-mode mounts in Cygwin installation. Patch from vinschen at redhat.com.
2005-05-04 - (djm) [ssh.c] some systems return EADDRINUSE on a bind to an already-usedDamien Miller
unix domain socket, so catch that too; from jakob@ ok dtucker@
2005-05-03 - (dtucker) [canohost.c] normalise socket addresses returned byDarren Tucker
get_remote_hostname(). This means that IPv4 addresses in log messages on IPv6 enabled machines will no longer be prefixed by "::ffff:" and AllowUsers, DenyUsers, AllowGroups, DenyGroups will match IPv4-style addresses only for 4-in-6 mapped connections, regardless of whether or not the machine is IPv6 enabled. ok djm@
2005-04-25typoDarren Tucker
2005-04-25 - (dtucker) [regress/multiplex.sh] Put control socket in /tmp so runningDarren Tucker
"make tests" works even if you'r building on a filesystem that doesn't support sockets. From deengert at anl.gov, ok djm@
2005-04-25 - (dtucker) [regress/multiplex.sh] Remove cleanup call since test-exec.shDarren Tucker
will clean up anyway. From tim@
2005-04-25 - (dtucker) [regress/multiplex.sh] Use "kill -0 $pid" to check for theDarren Tucker
existence of a process since it's more portable. Found by jbasney at ncsa.uiuc.edu; ok tim@