summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-01-14 - djm@cvs.openbsd.org 2011/01/13 21:54:53Damien Miller
[mux.c] correct error messages; patch from bert.wesarg AT googlemail.com
2011-01-13 - (djm) [regress/kextype.sh] Testing diffie-hellman-group-exchange-sha256Damien Miller
should not depend on ECC support
2011-01-13 - (djm) [myproposal.h] Fix reversed OPENSSL_VERSION_NUMBER test and badDamien Miller
#define that was causing diffie-hellman-group-exchange-sha256 to be incorrectly disabled
2011-01-13 - (djm) [regress/Makefile] add a few more generated files to the cleanDamien Miller
target
2011-01-13 - (djm) [entropy.c] cast OPENSSL_VERSION_NUMBER to u_long to avoidDamien Miller
gcc warning on platforms where it defaults to int
2011-01-12 - (tim) [Makefile.in configure.ac opensshd.init.in] Add support for generatingTim Rice
ecdsa keys. ok djm.
2011-01-12 - (tim) [Makefile.in] test the ECC bits if we have the capability. ok djmTim Rice
2011-01-13 - (djm) [misc.c] include time.h for nanosleep() prototypeDamien Miller
2011-01-12 - (djm) [configure.ac] Fix broken test for gcc >= 4.4 with per-compilerDamien Miller
flag tests that don't depend on gcc version at all; suggested by and ok dtucker@
2011-01-12 - (djm) [configure.ac] Turn on -Wno-unused-result for gcc >= 4.4 to avoidDamien Miller
silly warnings on write() calls we don't care succeed or not.
2011-01-12 - djm@cvs.openbsd.org 2011/01/12 01:53:14Damien Miller
avoid some integer overflows mostly with GLOB_APPEND and GLOB_DOOFFS and sanity check arguments (these will be unnecessary when we switch struct glob members from being type into to size_t in the future); "looks ok" tedu@ feedback guenther@
2011-01-12 - nicm@cvs.openbsd.org 2010/10/08 21:48:42Damien Miller
[openbsd-compat/glob.c] Extend GLOB_LIMIT to cover readdir and stat and bump the malloc limit from ARG_MAX to 64K. Fixes glob-using programs (notably ftp) able to be triggered to hit resource limits. Idea from a similar NetBSD change, original problem reported by jasper@. ok millert tedu jasper
2011-01-11 - djm@cvs.openbsd.org 2011/01/11 06:13:10Damien Miller
[clientloop.c ssh-keygen.c sshd.c] some unsigned long long casts that make things a bit easier for portable without resorting to dropping PRIu64 formats everywhere
2011-01-11 - djm@cvs.openbsd.org 2011/01/11 06:06:09Damien Miller
[sshlogin.c] fd leak on error paths; from zinovik@ NB. Id sync only; we use loginrec.c that was also audited and fixed recently
2011-01-11 - djm@cvs.openbsd.org 2011/01/08 10:51:51Damien Miller
[clientloop.c] use host and not options.hostname, as the latter may have unescaped substitution characters
2011-01-11 - (djm) [platform.c] Some missing includes that show up under -WerrorDamien Miller
2011-01-10 - (tim) [regress/host-expand.sh] Fix for building outside of read onlyTim Rice
source tree.
2011-01-09 - (djm) [Makefile.in] list ssh_host_ecdsa key in PATHSUBS; spotted byDamien Miller
openssh AT roumenpetrov.info
2011-01-08 - (djm) [regress/keytype.sh] s/echo -n/echon/ to repair failing regressDamien Miller
test on OSX and others. Reported by imorgan AT nas.nasa.gov
2011-01-07 - djm@cvs.openbsd.org 2011/01/06 23:01:35Damien Miller
[sshconnect.c] reset SIGCHLD handler to SIG_DFL when execuring LocalCommand; ok markus@
2011-01-07 - djm@cvs.openbsd.org 2011/01/06 22:46:21Damien Miller
[regress/Makefile regress/host-expand.sh] regress test for LocalCommand %n expansion from bert.wesarg AT googlemail.com; ok markus@
2011-01-07 - djm@cvs.openbsd.org 2011/01/06 22:23:02Damien Miller
[clientloop.c] when exiting due to ServerAliveTimeout, mention the hostname that caused it (useful with backgrounded controlmaster)
2011-01-07 - djm@cvs.openbsd.org 2011/01/06 22:23:53Damien Miller
[ssh.c] unbreak %n expansion in LocalCommand; patch from bert.wesarg AT googlemail.com; ok markus@
2011-01-07 - (djm) [regress/cert-hostkey.sh regress/cert-userkey.sh] fix shell testDamien Miller
for no-ECC case. Patch from cristian.ionescu-idbohrn AT axis.com
2011-01-06 - otto@cvs.openbsd.org 2011/01/04 20:44:13Damien Miller
[ssh-keyscan.c] handle ecdsa-sha2 with various key lengths; hint and ok djm@
2011-01-06 - djm@cvs.openbsd.org 2010/12/24 21:41:48Damien Miller
[auth-options.c] don't send the actual forced command in a debug message; ok markus deraadt
2011-01-06 - djm@cvs.openbsd.org 2010/12/15 00:49:27Damien Miller
[readpass.c] fix ControlMaster=ask regression reset SIGCHLD handler before fork (and restore it after) so we don't miss the the askpass child's exit status. Correct test for exit status/signal to account for waitpid() failure; with claudio@ ok claudio@ markus@
2011-01-06 - markus@cvs.openbsd.org 2010/12/14 11:59:06Damien Miller
[sshconnect.c] don't mention key type in key-changed-warning, since we also print this warning if a new key type appears. ok djm@
2011-01-06 - jmc@cvs.openbsd.org 2010/12/09 14:13:33Damien Miller
[scp.1 scp.c] scp.1: grammer fix scp.c: add -3 to usage()
2011-01-06 - markus@cvs.openbsd.org 2010/12/08 22:46:03Damien Miller
[scp.1 scp.c] add a new -3 option to scp: Copies between two remote hosts are transferred through the local host. Without this option the data is copied directly between the two remote hosts. ok djm@ (bugzilla #1837)
2011-01-04 - (djm) [configure.ac Makefile.in] Use mandoc as preferred manpageDamien Miller
formatter if it is present, followed by nroff and groff respectively. Fixes distprep target on OpenBSD (which has bumped groff/nroff to ports in favour of mandoc). feedback and ok tim
2011-01-03 - (djm) [Makefile.in] revert local hack I didn't intend to commitDamien Miller
2011-01-02 - (djm) [configure.ac] Check whether libdes is needed when buildingDamien Miller
with Heimdal krb5 support. On OpenBSD this library no longer exists, so linking it unconditionally causes a build failure; ok dtucker
2011-01-02 - (djm) [loginrec.c] Fix some fd leaks on error paths. ok dtuckerDamien Miller
2010-12-26 - djm@cvs.openbsd.org 2010/12/08 04:02:47Damien Miller
[ssh_config.5 sshd_config.5] explain that IPQoS arguments are separated by whitespace; iirc requested by jmc@ a while back
2010-12-05Id syncDarren Tucker
2010-12-05 - djm@cvs.openbsd.org 2010/12/04 00:21:19Darren Tucker
[regress/sftp-cmds.sh] adjust for hard-link support
2010-12-05 - (dtucker) [regress/Makefile] Id sync.Darren Tucker
2010-12-05 - djm@cvs.openbsd.org 2010/12/04 13:31:37Darren Tucker
[hostfile.c] fix fd leak; spotted and ok dtucker
2010-12-05 - djm@cvs.openbsd.org 2010/12/04 00:18:01Darren Tucker
[sftp-server.c sftp.1 sftp-client.h sftp.c PROTOCOL sftp-client.c] add a protocol extension to support a hard link operation. It is available through the "ln" command in the client. The old "ln" behaviour of creating a symlink is available using its "-s" option or through the preexisting "symlink" command; based on a patch from miklos AT szeredi.hu in bz#1555; ok markus@
2010-12-05 - djm@cvs.openbsd.org 2010/12/03 23:55:27Darren Tucker
[auth-rsa.c] move check for revoked keys to run earlier (in auth_rsa_key_allowed) bz#1829; patch from ldv AT altlinux.org; ok markus@
2010-12-05 - (dtucker) OpenBSD CVS SyncDarren Tucker
- djm@cvs.openbsd.org 2010/12/03 23:49:26 [schnorr.c] check that g^x^q === 1 mod p; recommended by JPAKE author Feng Hao (this code is still disabled, but apprently people are treating it as a reference implementation)
2010-12-05 - (dtucker) openbsd-compat/openssl-compat.c] remove sleep leftover fromDarren Tucker
debugging. Spotted by djm.
2010-12-04 - (dtucker) [configure.ac moduli.c openbsd-compat/openssl-compat.{c,h}] AddDarren Tucker
shims for the new, non-deprecated OpenSSL key generation functions for platforms that don't have the new interfaces.
2010-12-03 - (djm) [openbsd-compat/bindresvport.c] Use arc4random_uniform(range)Damien Miller
instead of (arc4random() % range)
2010-12-01 - djm@cvs.openbsd.org 2010/11/29 23:45:51Damien Miller
[auth.c hostfile.c hostfile.h ssh.c ssh_config.5 sshconnect.c] [sshconnect.h sshconnect2.c] automatically order the hostkeys requested by the client based on which hostkeys are already recorded in known_hosts. This avoids hostkey warnings when connecting to servers with new ECDSA keys that are preferred by default; with markus@
2010-12-01 - markus@cvs.openbsd.org 2010/11/29 18:57:04Damien Miller
[authfile.c] correctly load comment for encrypted rsa1 keys; report/fix Joachim Schipper; ok djm@
2010-12-01 - djm@cvs.openbsd.org 2010/11/26 05:52:49Damien Miller
[scp.c] Pass through ssh command-line flags and options when doing remote-remote transfers, e.g. to enable agent forwarding which is particularly useful in this case; bz#1837 ok dtucker@
2010-12-01 - djm@cvs.openbsd.org 2010/11/25 04:10:09Damien Miller
[session.c] replace close() loop for fds 3->64 with closefrom(); ok markus deraadt dtucker
2010-12-01 - djm@cvs.openbsd.org 2010/11/24 01:24:14Damien Miller
[channels.c] remove a debug() that pollutes stderr on client connecting to a server in debug mode (channel_close_fds is called transitively from the session code post-fork); bz#1719, ok dtucker