Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-02-12 | - markus@cvs.openbsd.org 2010/02/08 10:50:20 | Damien Miller | |
[pathnames.h readconf.c readconf.h scp.1 sftp.1 ssh-add.1 ssh-add.c] [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config.5] replace our obsolete smartcard code with PKCS#11. ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev ` | |||
2010-02-10 | - (djm) add -lselinux to LIBS before calling AC_CHECK_FUNCS for | Damien Miller | |
getseuserbyname; patch from calebcase AT gmail.com via cjwatson AT debian.org | |||
2010-01-22 | - (tim) [configure.ac] Due to constraints in Windows Sockets in terms of | Tim Rice | |
socket inheritance, reduce the default SO_RCVBUF/SO_SNDBUF buffer size in Cygwin to 65535. Patch from Corinna Vinschen. | |||
2010-01-17 | - (tim) [configure.ac] Use the C99-conforming functions snprintf() and | Tim Rice | |
vsnprintf() named _xsnprintf() and _xvsnprintf() on SVR5 systems. | |||
2010-01-17 | - (tim) [configure.ac] OpenServer 5 needs BROKEN_GETADDRINFO too. | Tim Rice | |
2010-01-16 | - (tim) [configure.ac] Define BROKEN_GETADDRINFO on SVR5 systems. The native | Tim Rice | |
getaddrinfo() is too old and limited for addr_pton() in addrmatch.c. | |||
2010-01-15 | - (dtucker) [configure.ac openbsd-compat/{Makefile.in,pwcache.c} Portability | Darren Tucker | |
for pwcache. Also, added caching of negative hits. | |||
2010-01-10 | - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] | Darren Tucker | |
Remove hacks add for RoutingDomain in preparation for its removal. | |||
2010-01-08 | - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] Make | Darren Tucker | |
RoutingDomain an unsupported option on platforms that don't have it. | |||
2009-12-08 | - (dtucker) Bug #1470: Disable OOM-killing of the listening sshd on Linux, | Darren Tucker | |
based on a patch from Vaclav Ovsik and Colin Watson. ok djm. | |||
2009-12-07 | - (dtucker) Bug #1160: use pkg-config for opensc config if it's available. | Darren Tucker | |
Tested by Martin Paljak. | |||
2009-10-11 | - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for | Darren Tucker | |
dirent d_type and DTTOIF as we've switched OpenBSD to the more portable lstat. | |||
2009-10-07 | - (dtucker) d_type is not mandated by POSIX, so add fallback code using | Darren Tucker | |
stat(), needed on at least cygwin. | |||
2009-10-07 | - (dtucker) [configure.ac sftp-client.c] DOTTIF is in fs/ffs/dir.h on at | Darren Tucker | |
least dragonflybsd. | |||
2009-09-11 | - (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X | Darren Tucker | |
10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query). Patch from jbasney at ncsa uiuc edu. | |||
2009-09-01 | - (dtucker) [configure.ac] Bug #1639: use AC_PATH_PROG to search the path for | Darren Tucker | |
krb5-config if it's not in the location specified by --with-kerberos5. Patch from jchadima at redhat. | |||
2009-08-28 | - (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry. | Darren Tucker | |
2009-08-28 | - (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer | Darren Tucker | |
size a compile-time option and set it to 64k on Cygwin, since Corinna reports that it makes a significant difference to performance. ok djm@ | |||
2009-08-28 | - (dtucker) [channels.c configure.ac] Bug #1528: skip the tcgetattr call on | Darren Tucker | |
the pty master on Solaris, since it never succeeds and can hang if large amounts of data is sent to the slave (eg a copy-paste). Based on a patch originally from Doke Scott, ok djm@ | |||
2009-08-17 | - (dtucker) [configure.ac] Check for headers before libraries for openssl an | Darren Tucker | |
zlib, which should make the errors slightly more meaningful on platforms where there's separate "-devel" packages for those. | |||
2009-07-12 | - (dtucker) [configure.ac] Include sys/param.h for the sys/mount.h test, | Darren Tucker | |
prevents configure complaining on older BSDs. | |||
2009-06-16 | - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t | Darren Tucker | |
is a struct with a __val member. Fixes build on, eg, Redhat 6.2. | |||
2009-03-18 | - (tim) [configure.ac] Remove setting IP_TOS_IS_BROKEN for Cygwin. The problem | Tim Rice | |
that setsockopt(IP_TOS) doesn't work on Cygwin has been fixed since 2005. Based on patch from vinschen at redhat com. | |||
2009-03-07 | - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] | Darren Tucker | |
EVP_DigestUpdate does not exactly match the other OLD_EVP functions (eg in openssl 0.9.6) so add an explicit test for it. | |||
2009-03-07 | - (dtucker) [configure.ac] Missing comma in type list. | Darren Tucker | |
2009-03-07 | - (dtucker) [configure.ac defines.h] Check for in_port_t and typedef if needed. | Darren Tucker | |
2009-02-16 | - (djm) [configure.ac] support GNU/kFreeBSD and GNU/kOpensolaris | Damien Miller | |
systems; patch from Aurelien Jarno via rmh AT aybabtu.com | |||
2009-02-12 | - (djm) [configure.ac loginrec.c] bz#1421: fix lastlog support for OSX. | Damien Miller | |
OSX provides a getlastlogxbyname function that automates the reading of a lastlog file. Also, the pututxline function will update lastlog so there is no need for loginrec.c to do it explicitly. Collapse some overly verbose code while I'm in there. | |||
2009-01-07 | - (tim) [configure.ac] Move check_for_libcrypt_later=1 in *-*-sysv5*) section. | Tim Rice | |
OpenServer 6 doesn't need libcrypt. | |||
2009-01-07 | - (tim) [configure.ac defines.h openbsd-compat/port-uw.c | Tim Rice | |
openbsd-compat/xcrypt.c] Add SECUREWARE support to OpenServer 6 SVR5 ABI. OK djm@ dtucker@ | |||
2008-12-08 | - (djm) [configure.ac] bz#1538: better test for ProPolice/SSP: actually | Damien Miller | |
use some stack in main(). Report and suggested fix from vapier AT gentoo.org | |||
2008-11-18 | - (tim) [addrmatch.c configure.ac] Some platforms do not have sin6_scope_id | Tim Rice | |
member of sockaddr_in6. Also reported in Bug 1491 by David Leonard. OK and feedback by djm@ | |||
2008-07-09 | - (djm) [configure.ac] Add -Wformat-security to CFLAGS for gcc 3.x and 4.x | Damien Miller | |
2008-07-05 | - (djm) [configure.ac] unbreak: remove extra closing brace | Damien Miller | |
2008-07-05 | - (djm) [atomicio.c configure.ac] Disable poll() fallback in atomiciov for | Damien Miller | |
Tru64. readv doesn't seem to be a comparable object there. bz#1386, patch from dtucker@ ok me | |||
2008-06-16 | - (dtucker) [configure.ac] Enable -fno-builtin-memset when using gcc. | Darren Tucker | |
2008-06-14 | - (dtucker) [configure.ac] Bug #1276: avoid linking against libgssapi, which | Darren Tucker | |
despite its name doesn't seem to implement all of GSSAPI. Patch from Jan Engelhardt, sanity checked by Simon Wilkinson. | |||
2008-06-12 | - (djm) [channels.c configure.ac] | Damien Miller | |
Do not set SO_REUSEADDR on wildcard X11 listeners (X11UseLocalhost=no) bz#1464; ok dtucker | |||
2008-06-11 | - (dtucker) [Makefile.in configure.ac regress/addrmatch.sh] Skip IPv6 | Darren Tucker | |
specific tests on platforms that don't do IPv6. | |||
2008-06-09 | - (dtucker) [configure.ac defines.h sftp-client.c M sftp-server.c] Add a | Darren Tucker | |
macro to convert fsid to unsigned long for platforms where fsid is a 2-member array. | |||
2008-06-09 | - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c | Darren Tucker | |
openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h openbsd-compat/bsd-statvfs.{c,h}] Add a null implementation of statvfs and fstatvfs and remove #defines around statvfs code. ok djm@ | |||
2008-06-08 | - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c] Do ↵ | Darren Tucker | |
not enable statvfs extensions on platforms that do not have statvfs. ok djm@ | |||
2008-05-20 | - (djm) [configure.ac mux.c sftp.c openbsd-compat/Makefile.in] | Damien Miller | |
[openbsd-compat/fmt_scaled.c openbsd-compat/openbsd-compat.h] Fix compilation on Linux, including pulling in fmt_scaled(3) implementation from OpenBSD's libutil. | |||
2008-05-19 | - (djm) [openbsd-compat/bsd-arc4random.c openbsd-compat/openbsd-compat.c] | Damien Miller | |
[configure.ac] Implement arc4random_buf(), import implementation of arc4random_uniform() from OpenBSD | |||
2008-03-27 | - (djm) [configure.ac] --with-selinux too | Damien Miller | |
2008-03-27 | - (djm) [configure.ac] fix alignment of --without-stackprotect description | Damien Miller | |
2008-03-09 | - (dtucker) [configure.ac] Run stack-protector tests with -Werror to catch | Darren Tucker | |
platforms where gcc understands the option but it's not supported (and thus generates a warning). | |||
2008-03-09 | - (dtucker) [configure.ac] It turns out gcc's -fstack-protector-all doesn't | Darren Tucker | |
always work for all platforms and versions, so test what we can and add a configure flag to turn it of if needed. ok djm@ | |||
2008-03-02 | - (dtucker) [configure.ac] FreeBSD's glob() doesn't behave the way we expect | Darren Tucker | |
either, so use our own. | |||
2008-02-28 | - (dtucker) [configure.ac openbsd-compat/port-aix.{c,h}] Bug #1081: Implement | Darren Tucker | |
getgrouplist via getgrset on AIX, rather than iterating over getgrent. This allows, eg, Match and AllowGroups directives to work with NIS and LDAP groups. |