summaryrefslogtreecommitdiff
path: root/ChangeLog
AgeCommit message (Collapse)Author
2000-06-07 - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts IIIDamien Miller
<tibbs@math.uh.edu> - (djm) OpenBSD CVS updates: - todd@cvs.openbsd.org [sshconnect2.c] teach protocol v2 to count login failures properly and also enable an explanation of why the password prompt comes up again like v1; this is NOT crypto - markus@cvs.openbsd.org [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8] xauth_location support; pr 1234 [readconf.c sshconnect2.c] typo, unused [session.c] allow use_login only for login sessions, otherwise remote commands are execed with uid==0 [sshd.8] document UseLogin better [version.h] OpenSSH 2.1.1 [auth-rsa.c] fix match_hostname() logic for auth-rsa: deny access if we have a negative match or no match at all [channels.c hostfile.c match.c] don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via kris@FreeBSD.org
2000-06-05 - (djm) Added --with-cflags, --with-ldflags and --with-libs options toDamien Miller
configure.
2000-06-04Added missed info for 20000603 login code updateandre
Noted 20000604 updates
2000-06-04 - Configure tweaking for new login code on Irix 5.3Damien Miller
2000-05-31 - Rewrote bsd-login to use proper utmp API if available. Major cleanupDamien Miller
of fallback DIY code.
2000-05-31 - Fix EGD read bug by IWAMURO Motonori <iwa@mmp.fujitsu.co.jp>Damien Miller
update credits
2000-05-31 - Cleanup of auth.c, login.c and fake-*Damien Miller
- Cleanup of auth-pam.c, save and print "account expired" error messages
2000-05-30docDamien Miller
2000-05-30 - OpenBSD CVS updates:Damien Miller
- markus@cvs.openbsd.org [session.c] make x11-fwd work w/ localhost (xauth add host/unix:11) [cipher.c compat.c readconf.c servconf.c] check strtok() != NULL; ok niels@ [key.c] fix key_read() for uuencoded keys w/o '=' [serverloop.c] group ssh1 vs. ssh2 in serverloop [kex.c kex.h myproposal.h sshconnect2.c sshd.c] split kexinit/kexdh, factor out common code [readconf.c ssh.1 ssh.c] forwardagent defaults to no, add ssh -A - theo@cvs.openbsd.org [session.c] just some line shortening
2000-05-30 - Fix buffer overrun in login.c for systems which use syslen in utmpx.Damien Miller
patch from YOSHIFUJI Hideaki <yoshfuji@cerberus.nemoto.ecei.tohoku.ac.jp>
2000-05-30 - Define atexit for old SolarisDamien Miller
2000-05-20 - Doc cleanupDamien Miller
2000-05-20 - HPUX and Configure fixes from Lutz JaenickeDamien Miller
<Lutz.Jaenicke@aet.TU-Cottbus.DE> - Use mkinstalldirs script to make directories instead of non-portable "install -d". Suggested by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
2000-05-20 - SunOS 4.x support from Todd C. Miller <Todd.Miller@courtesan.com>Damien Miller
2000-05-20 - Don't touch utmp if USE_UTMPX definedDamien Miller
2000-05-20 - Xauth fix from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>Damien Miller
2000-05-19 - Include Andre Lucas' fixprogs script. Forgot to "cvs add" it yesterdayDamien Miller
- OpenBSD CVS updates: - markus@cvs.openbsd.org [sshconnect.c] copy only ai_addrlen bytes; misiek@pld.org.pl [auth.c] accept an empty shell in authentication; bug reported by chris@tinker.ucr.edu [serverloop.c] we don't have stderr for interactive terminal sessions (fcntl errors)
2000-05-17 - Detect OpenSSL seperatly from RSADamien Miller
- Better test for RSA (more compatible with RSAref). Based on work by Ed Eden <ede370@stl.rural.usda.gov>
2000-05-17 - RSAless operation patch from kevin_oconnor@standardandpoors.comDamien Miller
2000-05-17 - Several patches from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>Damien Miller
- INSTALL typo and URL fix - Makefile fix - Solaris fixes - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
2000-05-17 - OpenBSD CVS update:Damien Miller
- markus@cvs.openbsd.org [ssh.c] fix usage() [ssh2.h] draft-ietf-secsh-architecture-05.txt [ssh.1] document ssh -T -N (ssh2 only) [channels.c serverloop.c ssh.h sshconnect.c sshd.c aux.c] enable nonblocking IO for sshd w/ proto 1, too; split out common code [aux.c] missing include
2000-05-17 - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <sxw@dcs.ed.ac.uk>Damien Miller
2000-05-17 - Avoid WCOREDUMP complation errors for systems that lack itDamien Miller
- Avoid SIGCHLD warnings from entropy commands
2000-05-17 - Applied Tom Bertelson's <tbert@abac.com> AIX authentication fixDamien Miller
2000-05-17 - Fix from Andre Lucas <andre.lucas@dial.pipex.com>Damien Miller
- Fixes command line printing segfaults (spotter: Bladt Norbert) - Fixes erroneous printing of debug messages to syslog - Fixes utmp for MacOS X (spotter: Aristedes Maniatis) - Gives useful error message if PRNG initialisation fails - Reduced ssh startup delay - Measures cumulative command time rather than the time between reads after select() - 'fixprogs' perl script to eliminate non-working entropy commands, and optionally run 'ent' to measure command entropy
2000-05-13 - Fix for non-recognised DSA keys from Arkadiusz MiskiewiczDamien Miller
<misiek@pld.org.pl>
2000-05-11 - Fix for prng_seed permissions checking from Lutz JaenickeDamien Miller
<Lutz.Jaenicke@aet.TU-Cottbus.DE>
2000-05-09idohDamien Miller
2000-05-09 - Doc updatesDamien Miller
2000-05-09 - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.aDamien Miller
2000-05-09 - OpenBSD CVS updateDamien Miller
- markus@cvs.openbsd.org [cipher.h myproposal.h readconf.c readconf.h servconf.c ssh.1 ssh.c] [ssh.h sshconnect1.c sshconnect2.c sshd.8] - complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only) - hugh@cvs.openbsd.org [ssh.1] - zap typo [ssh-keygen.1] - One last nit fix. (markus approved) [sshd.8] - some markus certified spelling adjustments - markus@cvs.openbsd.org [auth2.c channels.c clientloop.c compat compat.h dsa.c kex.c] [sshconnect2.c ] - bug compat w/ ssh-2.0.13 x11, split out bugs [nchan.c] - no drain if ibuf_empty, fixes x11fwd problems; tests by fries@ [ssh-keygen.c] - handle escapes in real and original key format, ok millert@ [version.h] - OpenSSH-2.1
2000-05-08 - Configure caching and cleanup patch from Andre Lucas'Damien Miller
<andre.lucas@dial.pipex.com>
2000-05-08 - OpenBSD CVS updateDamien Miller
- markus@cvs.openbsd.org [clientloop.c sshconnect2.c] - make x11-fwd interop w/ ssh-2.0.13 [README.openssh2] - interop w/ SecureFX - Release 2.0.0beta2
2000-05-08 - Generate DSA host keys during "make key" or RPM installsDamien Miller
2000-05-07 - Remove references to SSLeay.Damien Miller
- Big OpenBSD CVS update - markus@cvs.openbsd.org [clientloop.c] - typo [session.c] - update proctitle on pty alloc/dealloc, e.g. w/ windows client [session.c] - update proctitle for proto 1, too [channels.h nchan.c serverloop.c session.c sshd.c] - use c-style comments - deraadt@cvs.openbsd.org [scp.c] - more atomicio - markus@cvs.openbsd.org [channels.c] - set O_NONBLOCK [ssh.1] - update AUTHOR [readconf.c ssh-keygen.c ssh.h] - default DSA key file ~/.ssh/id_dsa [clientloop.c] - typo, rm verbose debug - deraadt@cvs.openbsd.org [ssh-keygen.1] - document DSA use of ssh-keygen [sshd.8] - a start at describing what i understand of the DSA side [ssh-keygen.1] - document -X and -x [ssh-keygen.c] - simplify usage - markus@cvs.openbsd.org [sshd.8] - there is no rhosts_dsa [ssh-keygen.1] - document -y, update -X,-x [nchan.c] - fix close for non-open ssh1 channels [servconf.c servconf.h ssh.h sshd.8 sshd.c ] - s/DsaKey/HostDSAKey/, document option [sshconnect2.c] - respect number_of_password_prompts [channels.c channels.h servconf.c servconf.h session.c sshd.8] - GatewayPorts for sshd, ok deraadt@ [ssh-add.1 ssh-agent.1 ssh.1] - more doc on: DSA, id_dsa, known_hosts2, authorized_keys2 [ssh.1] - more info on proto 2 [sshd.8] - sync AUTHOR w/ ssh.1 [key.c key.h sshconnect.c] - print key type when talking about host keys [packet.c] - clear padding in ssh2 [dsa.c key.c radix.c ssh.h sshconnect1.c uuencode.c uuencode.h] - replace broken uuencode w/ libc b64_ntop [auth2.c] - log failure before sending the reply [key.c radix.c uuencode.c] - remote trailing comments before calling __b64_pton [auth2.c readconf.c readconf.h servconf.c servconf.h ssh.1] [sshconnect2.c sshd.8] - add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8 - Bring in b64_ntop and b64_pton from OpenBSD libc (bsd-base64.[ch])
2000-05-02 - Add Andre Lucas' <andre.lucas@dial.pipex.com> patch to read entropyDamien Miller
gathering commands from a text file
2000-05-02 - OpenBSD CVS updateDamien Miller
[channels.c] - init all fds, close all fds. [sshconnect2.c] - check whether file exists before asking for passphrase [servconf.c servconf.h sshd.8 sshd.c] - PidFile, pr 1210 [channels.c] - EINTR [channels.c] - unbreak, ok niels@ [sshd.c] - unlink pid file, ok niels@ [auth2.c] - Add missing #ifdefs; ok - markus
2000-05-02Prepare for 2.0.0beta1Damien Miller
2000-05-02 - Irix portability fixes - don't include netinet headers more than onceDamien Miller
- Make sure we don't save PRNG seed more than once
2000-05-01 - Deprecate perl-tk askpass.Damien Miller
2000-05-01 - Add some missing ifdefs to auth2.cDamien Miller
2000-05-01 - Merged bsd-login ttyslot and AIX utmp patch from Gert DoeringDamien Miller
<gd@hilb1.medat.de>
2000-05-01 [scp.c]Damien Miller
- fix very rare EAGAIN/EINTR issues; based on work by djm [packet.c] - less debug, rm unused [auth2.c] - disable kerb,s/key in ssh2 [sshd.8] - Minor tweaks and typo fixes. [ssh-keygen.c] - Put -d into usage and reorder. markus ok.
2000-05-01 - Fixed __progname symbol collisions reported by Andre LucasDamien Miller
<andre.lucas@dial.pipex.com>
2000-05-01 - Include missing headers for OpenSSL tests. Fix from Phil KarnDamien Miller
<karn@ka9q.ampr.org>
2000-05-01packet.cDamien Miller
send debug messages in SSH2 format
2000-04-30 - More OpenBSD updates:Damien Miller
[session.c] - don't call chan_write_failed() if we are not writing [auth-rsa.c auth1.c authfd.c hostfile.c ssh-agent.c] - keysize warnings error() -> log()
2000-04-30 - Integrate Andre Lucas' <andre.lucas@dial.pipex.com> entropy collectionDamien Miller
patch. - Adds timeout to entropy collection - Disables slow entropy sources - Load and save seed file - Changed entropy seed code to user per-user seeds only (server seed is saved in root's .ssh directory) - Use atexit() and fatal cleanups to save seed on exit
2000-04-30 - Merge HP-UX fixes and TCB support from Ged Lodder <lodder@yacc.com.au>Damien Miller
2000-04-29 - Merge big update to OpenSSH-2.0 from OpenBSD CVSDamien Miller
[README.openssh2] - interop w/ F-secure windows client - sync documentation - ssh_host_dsa_key not ssh_dsa_key [auth-rsa.c] - missing fclose [auth.c authfile.c compat.c dsa.c dsa.h hostfile.c key.c key.h radix.c] [readconf.c readconf.h ssh-add.c ssh-keygen.c ssh.c ssh.h sshconnect.c] [sshd.c uuencode.c uuencode.h authfile.h] - add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX] for trading keys with the real and the original SSH, directly from the people who invented the SSH protocol. [auth.c auth.h authfile.c sshconnect.c auth1.c auth2.c sshconnect.h] [sshconnect1.c sshconnect2.c] - split auth/sshconnect in one file per protocol version [sshconnect2.c] - remove debug [uuencode.c] - add trailing = [version.h] - OpenSSH-2.0 [ssh-keygen.1 ssh-keygen.c] - add -R flag: exit code indicates if RSA is alive [sshd.c] - remove unused silent if -Q is specified [ssh.h] - host key becomes /etc/ssh_host_dsa_key [readconf.c servconf.c ] - ssh/sshd default to proto 1 and 2 [uuencode.c] - remove debug [auth2.c ssh-keygen.c sshconnect2.c sshd.c] - xfree DSA blobs [auth2.c serverloop.c session.c] - cleanup logging for sshd/2, respect PasswordAuth no [sshconnect2.c] - less debug, respect .ssh/config [README.openssh2 channels.c channels.h] - clientloop.c session.c ssh.c - support for x11-fwding, client+server