summaryrefslogtreecommitdiff
path: root/Makefile.in
AgeCommit message (Collapse)Author
2008-11-05 - djm@cvs.openbsd.org 2008/11/04 08:22:13Damien Miller
[auth.h auth2.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h] [readconf.c readconf.h servconf.c servconf.h ssh2.h ssh_config.5] [sshconnect2.c sshd_config.5 jpake.c jpake.h schnorr.c auth2-jpake.c] [Makefile.in] Add support for an experimental zero-knowledge password authentication method using the J-PAKE protocol described in F. Hao, P. Ryan, "Password Authenticated Key Exchange by Juggling", 16th Workshop on Security Protocols, Cambridge, April 2008. This method allows password-based authentication without exposing the password to the server. Instead, the client and server exchange cryptographic proofs to demonstrate of knowledge of the password while revealing nothing useful to an attacker or compromised endpoint. This is experimental, work-in-progress code and is presently compiled-time disabled (turn on -DJPAKE in Makefile.inc). "just commit it. It isn't too intrusive." deraadt@
2008-07-09 - (djm) [Makefile.in] Print "all tests passed" when all regress tests passDamien Miller
2008-07-05 - (djm) [Makefile.in] Pass though pass to conch for interop testsDamien Miller
2008-06-26 - (djm) [Makefile.in moduli.5] Include moduli(5) manpage from OpenBSD.Damien Miller
(bz#1372)
2008-06-11 - (dtucker) [Makefile.in] Move addrmatch.o to libssh.a where it's needed now.Darren Tucker
2008-06-11 - (dtucker) [Makefile.in] Define TEST_SSH_IPV6 in make's arguments as wellDarren Tucker
as environment.
2008-06-11 - (dtucker) [Makefile.in configure.ac regress/addrmatch.sh] Skip IPv6Darren Tucker
specific tests on platforms that don't do IPv6.
2008-06-10 - (dtucker) OpenBSD CVS SyncDarren Tucker
- djm@cvs.openbsd.org 2008/06/10 03:57:27 [servconf.c match.h sshd_config.5] support CIDR address matching in sshd_config "Match address" blocks, with full support for negation and fall-back to classic wildcard matching. For example: Match address 192.0.2.0/24,3ffe:ffff::/32,!10.* PasswordAuthentication yes addrmatch.c code mostly lifted from flowd's addr.c feedback and ok dtucker@
2008-05-19 - djm@cvs.openbsd.org 2008/05/09 14:18:44Damien Miller
[clientloop.c clientloop.h ssh.c mux.c] tidy up session multiplexing code, moving it into its own file and making the function names more consistent - making ssh.c and clientloop.c a fair bit more readable. ok markus@
2008-03-13 - (djm) [Makefile.in regress/test-exec.sh] Find installed plink(1) andDamien Miller
puttygen(1) by $PATH
2008-03-13 - (djm) [Makefile.in regress/Makefile] Fix interop-tests target (note toDamien Miller
self: make changes to Makefile.in next time, not the generated Makefile).
2008-02-10 - djm@cvs.openbsd.org 2008/02/08 23:24:07Damien Miller
[servconf.c servconf.h session.c sftp-server.c sftp.h sshd_config] [sshd_config.5] add sshd_config ChrootDirectory option to chroot(2) users to a directory and tweak internal sftp server to work with it (no special files in chroot required). ok markus@
2008-02-10 - djm@cvs.openbsd.org 2008/02/08 23:24:07Damien Miller
[servconf.c servconf.h session.c sftp-server.c sftp.h sshd_config] [sshd_config.5] add sshd_config ChrootDirectory option to chroot(2) users to a directory and tweak internal sftp server to work with it (no special files in chroot required). ok markus@
2007-06-11 - pvalchev@cvs.openbsd.org 2007/06/07 19:37:34Damien Miller
[kex.h mac.c mac.h monitor_wrap.c myproposal.h packet.c ssh.1] [ssh_config.5 sshd.8 sshd_config.5] Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must specify umac-64@openssh.com). Provides about 20% end-to-end speedup compared to hmac-md5. Represents a different approach to message authentication to that of HMAC that may be beneficial if HMAC based on one of its underlying hash algorithms is found to be vulnerable to a new attack. http://www.ietf.org/rfc/rfc4418.txt in conjunction with and OK djm@
2007-03-25 - (dtucker) [Makefile.in configure.ac] Replace single-purpose LIBSELINUX,Darren Tucker
LIBWRAP and LIBPAM variables in Makefile with the general-purpose SSHDLIBS. "I like" djm@
2006-10-23 - (tim) [Makefile.in scard/Makefile.in] Add datarootdir= lines to keepTim Rice
autoconf 2.60 from complaining.
2006-09-12 - (djm) [Makefile.in buildpkg.sh.in configure.ac openssh.xml.in]Damien Miller
Support SMF in Solaris Packages if enabled by configure. Patch from Chad Mynhier, tested by dtucker@
2006-08-31 - (djm) [CREDITS LICENCE Makefile.in auth.c configure.ac includes.h ]Damien Miller
[platform.c platform.h sshd.c openbsd-compat/Makefile.in] [openbsd-compat/openbsd-compat.h openbsd-compat/port-solaris.c] [openbsd-compat/port-solaris.h] Add support for Solaris process contracts, enabled with --use-solaris-contracts. Patch from Chad Mynhier, tweaked by dtucker@ and myself; ok dtucker@
2006-08-22 - (dtucker) [Makefile.in] Bug #1177: fix incorrect path for sshrc inDarren Tucker
Makefile. Patch from santhi.amirta at gmail, ok djm.
2006-07-24 - (djm) [Makefile.in]Damien Miller
Remove generated openbsd-compat/regress/Makefile in distclean target
2006-04-23 - dtucker@cvs.openbsd.org 2006/04/18 10:44:28Damien Miller
[bufaux.c bufbn.c Makefile.in] Move Buffer bignum functions into their own file, bufbn.c. This means that sftp and sftp-server (which use the Buffer functions in bufaux.c but not the bignum ones) no longer need to be linked with libcrypto. ok markus@
2006-04-22 - (djm) [Makefile.in configure.ac session.c sshpty.c]Damien Miller
[contrib/redhat/sshd.init openbsd-compat/Makefile.in] [openbsd-compat/openbsd-compat.h openbsd-compat/port-linux.c] [openbsd-compat/port-linux.h] Add support for SELinux, setting the execution and TTY contexts. based on patch from Daniel Walsh, bz #880; ok dtucker@
2006-03-15 - (djm) [Makefile.in openbsd-compat/Makefile.in] Add added filesDamien Miller
2006-02-19 - (dtucker) [Makefile.in configure.ac, added openbsd-compat/regress/]Darren Tucker
Add first attempt at regress tests for compat library. ok djm@
2006-01-01 - (djm) [Makefile.in configure.ac includes.h misc.c]Damien Miller
[openbsd-compat/port-tun.c openbsd-compat/port-tun.h] Add support for tunnel forwarding for FreeBSD and NetBSD. NetBSD's support is limited to IPv4 tunnels only, and most versions don't support the tap(4) device at all.
2005-05-29typo in commentDarren Tucker
2005-05-26 - djm@cvs.openbsd.org 2005/04/09 04:32:54Damien Miller
[misc.c misc.h tildexpand.c Makefile.in] replace tilde_expand_filename with a simpler implementation, ahead of more whacking; ok deraadt@
2005-05-26 - (djm) [mpaux.c mpaux.h Makefile.in] Remove old mpaux.[ch] code, it has notDamien Miller
been used for a while
2005-02-26 - (dtucker) [Makefile.in] Add a install-nosysconf target for installing theDarren Tucker
binaries without the config files. Primarily useful for packaging. Patch from phil at usc.edu. ok djm@
2005-02-20 - (dtucker) [LICENCE Makefile.in README.platform audit-bsm.c configure.acDarren Tucker
defines.h] Bug #125: Add *EXPERIMENTAL* BSM audit support. Configure --with-audit=bsm to enable. Patch originally from Sun Microsystems, parts by John R. Jackson. ok djm@
2005-02-03 - (dtucker) [Makefile.in auth.c auth.h auth1.c auth2.c loginrec.c monitor.cDarren Tucker
monitor.h monitor_wrap.c monitor_wrap.h session.c sshd.c] Bug #125: (first stage) Add audit instrumentation to sshd, currently disabled by default. with suggestions from and djm@
2005-01-18 - (dtucker) [INSTALL Makefile.in configure.ac survey.sh.in] ImplementDarren Tucker
"make survey" and "make send-survey". This will provide data on the configure parameters, platform and platform features to the development team, which will allow (among other things) better targetting of testing. It's entirely voluntary and is off be default. ok djm@
2004-11-07 - (dtucker) [INSTALL Makefile.in configure.ac] Add --with-libedit configureDarren Tucker
option and supporting makefile bits and documentation.
2004-08-30 - (dtucker) [Makefile.in contrib/ssh-copy-id] Bug #894: Improve portabilityDarren Tucker
of shell constructs. Patch from cjwatson at debian.org.
2004-08-29 - (dtucker) [Makefile.in] Get regress/Makefile symlink right for out-of-treeDarren Tucker
builds too, from vinschen at redhat.com.
2004-08-15 - (dtucker) [Makefile.in] Fix typo.Darren Tucker
2004-08-15 - (dtucker) [Makefile.in ssh-keysign.c ssh.c] Use permanently_set_uid() sinceDarren Tucker
it does the right thing on all platforms. ok djm@
2004-06-23 - (bal) [Makefile.in] Remove opensshd.init on 'make distclean'Ben Lindstrom
2004-06-20(tim) [configure.ac Makefile.in] Only change TEST_SHELL on broken platforms.Tim Rice
OK dtucker@
2004-06-15 - (djm) Fix Makefile.in for connection sharing changesDamien Miller
2004-05-30 - (tim) [configure.ac Makefile.in] Add support for "make package" ok djm@Tim Rice
- (tim) [buildpkg.sh.in] New file. A more flexible version of contrib/solaris/buildpkg.sh used for "make package".
2004-02-18 - djm@cvs.openbsd.org 2004/02/17 11:03:08Damien Miller
[sftp.c] sftp.c and sftp-int.c, together at last; ok markus@
2004-02-12[Makefile.in regress/sftp-badcmds.sh regress/test-exec.sh]Tim Rice
Portablity fixes. Data sftp transfers needs to be world readable. Some older shells hang on while loops when doing sh -n some_script. OK dtucker@
2004-02-10 - (dtucker) [LICENCE Makefile.in auth-passwd.c auth-shadow.c auth.c auth.hDarren Tucker
defines.h] Bug #14: Use do_pwchange to support password expiry and force change for platforms using /etc/shadow. ok djm@
2004-01-27 - (djm) OpenBSD CVS SyncDamien Miller
- hshoexer@cvs.openbsd.org 2004/01/23 17:06:03 [cipher.c] enable acss for ssh ok deraadt@ markus@ - (djm) [acss.c acss.h cipher-acss.c] Portable support for ACSS if libcrypto lacks it
2003-11-21 - djm@cvs.openbsd.org 2003/11/21 11:57:03Damien Miller
[everything] unexpand and delete whitespace at EOL; ok markus@ (done locally and RCS IDs synced)
2003-10-07 - (djm) Delete autom4te.cache after autoreconfDamien Miller
2003-10-02 - markus@cvs.openbsd.org 2003/09/23 20:17:11Darren Tucker
[Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h ssh-agent.c sshd.c] replace fatal_cleanup() and linked list of fatal callbacks with static cleanup_exit() function. re-refine cleanup_exit() where appropriate, allocate sshd's authctxt eary to allow simpler cleanup in sshd. tested by many, ok deraadt@
2003-09-22 - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-treeDarren Tucker
builds. Portability corrections from tim@.
2003-09-14 - (dtucker) [Makefile regress/Makefile] Fix portability issues preventingDarren Tucker
the regression tests from running with Solaris' make. Patch from Brian Poole (raj at cerias.purdue.edu). Further info: Solaris' /usr/ccs/bin/make * requires a space before "+=" (but not "=") * does not like @for The bit that relies on a trailing "/" on $OBJ so "rm ${OBJ}$$F works in the current dir if OBJ isn't set is my fault. Nasty but it works.
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-01 23:03:36 +0000