| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2014-02-09 | GSSAPI key exchange support | Simon Wilkinson | |
| This patch has been rejected upstream: "None of the OpenSSH developers are in favour of adding this, and this situation has not changed for several years. This is not a slight on Simon's patch, which is of fine quality, but just that a) we don't trust GSSAPI implementations that much and b) we don't like adding new KEX since they are pre-auth attack surface. This one is particularly scary, since it requires hooks out to typically root-owned system resources." However, quite a lot of people rely on this in Debian, and it's better to have it merged into the main openssh package rather than having separate -krb5 packages (as we used to have). It seems to have a generally good security history. Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1242 Last-Updated: 2013-11-09 Patch-Name: gssapi.patch | |||
| 2013-08-04 | - (dtucker) [auth-krb5.c configure.ac openbsd-compat/bsd-misc.h] Add support | Darren Tucker | |
| for building with older Heimdal versions. ok djm. | |||
| 2013-06-11 | - (dtucker) [Makefile.in configure.ac fixalgorithms] Remove unsupported | Darren Tucker | |
| algorithms (Ciphers, MACs and HostKeyAlgorithms) from man pages. | |||
| 2013-06-06 | - (dtucker) [configure.ac sftp.c openbsd-compat/openbsd-compat.h] Cater for | Darren Tucker | |
| platforms that don't have multibyte character support (specifically, mblen). | |||
| 2013-06-04 | - (dtucker) [configure.ac] Some other platforms need sys/types.h before | Darren Tucker | |
| sys/socket.h. | |||
| 2013-06-03 | - (dtucker) [configure.ac] Some platforms need sys/types.h before sys/un.h. | Darren Tucker | |
| 2013-06-02 | - (tim) [configure.ac regress/Makefile] With rev 1.47 of test-exec.sh we | Tim Rice | |
| need a shell that can handle "[ file1 -nt file2 ]". Rather than keep dealing with shell portability issues in regression tests, we let configure find us a capable shell on those platforms with an old /bin/sh. | |||
| 2013-06-03 | - (dtucker) [configure.ac] bz#2111: don't try to use lastlog on Android. | Darren Tucker | |
| Patch from Nathan Osman. | |||
| 2013-06-03 | - (dtucker) [configure.ac] sys/un.h needs sys/socket.h on some platforms | Darren Tucker | |
| to prevent noise from configure. Patch from Nathan Osman. | |||
| 2013-06-02 | - (dtucker) [configure.ac misc.c] Look for clock_gettime in librt and fall | Darren Tucker | |
| back to time(NULL) if we can't find it anywhere. | |||
| 2013-06-02 | - (dtucker) [configure.ac defines.h] Test for fd_mask, howmany and NFDBITS | Darren Tucker | |
| rather than trying to enumerate the plaforms that don't have them. Based on a patch from Nathan Osman, with help from tim@. | |||
| 2013-06-02 | - (dtucker) [configure.ac openbsd-compat/xcrypt.c] bz#2112: fall back to | Darren Tucker | |
| using openssl's DES_crpyt function on platorms that don't have a native one, eg Android. Based on a patch from Nathan Osman. | |||
| 2013-05-30 | - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] bz#2087: Add a null | Darren Tucker | |
| implementation of endgrent for platforms that don't have it (eg Android). Loosely based on a patch from Nathan Osman, ok djm | |||
| 2013-05-16 | - (dtucker) [configure.ac readconf.c servconf.c | Darren Tucker | |
| openbsd-compat/openbsd-compat.h] Add compat bits for scan_scaled. | |||
| 2013-05-10 | - (dtucker) [configure.ac] Add -Werror to the -Qunused-arguments test so | Darren Tucker | |
| we don't get a warning on compilers that *don't* support it. Add -Wno-unknown-warning-option. Move both to the start of the list for maximum noise suppression. Tested with gcc 4.6.3, gcc 2.95.4 and clang 2.9. | |||
| 2013-05-10 | - (dtucker) [configure.ac] Enable -Wsizeof-pointer-memaccess if the compiler | Darren Tucker | |
| supports it. Mentioned by Colin Watson in bz#2100, ok djm. | |||
| 2013-04-23 | - (djm) [auth.c configure.ac misc.c monitor.c monitor_wrap.c] Support | Damien Miller | |
| platforms, such as Android, that lack struct passwd.pw_gecos. Report and initial patch from Nathan Osman bz#2086; feedback tim@ ok dtucker@ | |||
| 2013-04-18 | - (dtucker) [configure.ac] Use -Qunused-arguments to suppress warnings from | Darren Tucker | |
| unused argument warnings (in particular, -fno-builtin-memset) from clang. | |||
| 2013-03-22 | - (dtucker) [configure.ac] Add stdlib.h to zlib check for exit() prototype. | Darren Tucker | |
| 2013-03-20 | - (djm) [configure.ac log.c scp.c sshconnect2.c openbsd-compat/vis.c] | Damien Miller | |
| [openbsd-compat/vis.h] FreeBSD's strnvis isn't compatible with OpenBSD's so mark it as broken. Patch from des AT des.no | |||
| 2013-03-16 | - (tim) [configure.ac] OpenServer 5 wants lastlog even though it has none | Tim Rice | |
| of the bits the configure test looks for. | |||
| 2013-03-15 | - (djm) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] | Damien Miller | |
| Add a usleep replacement for platforms that lack it; ok dtucker | |||
| 2013-03-15 | - (djm) [configure.ac] Disable utmp, wtmp and/or lastlog if the platform | Damien Miller | |
| is unable to successfully compile them. Based on patch from des AT des.no | |||
| 2013-03-12 | - (dtucker) [auth.c configure.ac platform.c platform.h] Accept uid 2 ("bin") | Darren Tucker | |
| in addition to root as an owner of system directories on AIX and HP-UX. ok djm@ | |||
| 2013-03-08 | - (djm) [configure.ac] Add a timeout to the select/rlimit test to give it a | Damien Miller | |
| chance to complete on broken systems; ok dtucker@ | |||
| 2013-03-06 | - (dtucker) [configure.ac] test that we can set number of file descriptors | Darren Tucker | |
| to zero with setrlimit before enabling the rlimit sandbox. This affects (at least) HPUX 11.11. | |||
| 2013-03-05 | - (dtucker) [configure.ac] use "=" for shell test and not "==". Spotted by | Darren Tucker | |
| Kevin Brott. | |||
| 2013-02-25 | - (dtucker) [configure.ac ssh-gss.h] bz#2073: additional #includes needed | Darren Tucker | |
| to use Solaris native GSS libs. Patch from Pierre Ossman. | |||
| 2013-02-23 | - (djm) [configure.ac includes.h loginrec.c mux.c sftp.c] Prefer | Damien Miller | |
| bsd/libutil.h to libutil.h to avoid deprecation warnings on Ubuntu. ok tim | |||
| 2013-02-22 | - (djm) [configure.ac sandbox-seccomp-filter.c] Support for Linux | Damien Miller | |
| seccomp-bpf sandbox on ARM. Patch from shawnlandden AT gmail.com; ok dtucker | |||
| 2013-02-22 | - (dtucker) [configure.ac] bz#2073: look for Solaris' differently-named | Darren Tucker | |
| libgss too. Patch from Pierre Ossman, ok djm. | |||
| 2013-02-22 | - (dtucker) [Makefile.in configure.ac] bz#2072: don't link krb5 libs to | Darren Tucker | |
| ssh(1) since they're not needed. Patch from Pierre Ossman. | |||
| 2013-02-15 | - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoull.c | Darren Tucker | |
| openbsd-compat/openbsd-compat.h] Add strtoull to compat library for platforms that don't have it. | |||
| 2013-02-15 | - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] | Darren Tucker | |
| Use getpgrp() if we don't have getpgid() (old BSDs, maybe others). | |||
| 2013-02-11 | - (djm) [configure.ac openbsd-compat/openssl-compat.h] Repair build on old | Damien Miller | |
| libcrypto that lacks EVP_CIPHER_CTX_ctrl | |||
| 2013-02-08 | - (dtucker) [configure.ac openbsd-compat/sys-tree.h] Test if compiler allows | Darren Tucker | |
| __attribute__ on return values and work around if necessary. ok djm@ | |||
| 2013-02-07 | - (djm) [configure.ac] Don't probe seccomp capability of running kernel | Damien Miller | |
| at configure time; the seccomp sandbox will fall back to rlimit at runtime anyway. Patch from plautrba AT redhat.com in bz#2011 | |||
| 2013-01-09 | - (djm) [cipher.c configure.ac openbsd-compat/openssl-compat.h] | Damien Miller | |
| Fix merge botch, automatically detect AES-GCM in OpenSSL, move a little cipher compat code to openssl-compat.h | |||
| 2012-12-13 | - (djm) [configure.ac cipher-ctr.c] Adapt EVP AES CTR change to retain our | Damien Miller | |
| compat code for older OpenSSL | |||
| 2012-12-03 | - (djm) [configure.ac] Revert previous. configure.ac already does this | Damien Miller | |
| for us. | |||
| 2012-12-03 | - (djm) [configure.ac] Turn on -g for gcc compilers. Helps pre-installation | Damien Miller | |
| debugging. ok dtucker@ | |||
| 2012-07-06 | - (djm) [configure.ac] Recursively expand $(bindir) to ensure it has no | Damien Miller | |
| unexpanded $(prefix) embedded. bz#2007 patch from nix-corp AT esperi.org.uk; ok dtucker@ | |||
| 2012-07-04 | - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] Add setlinebuf for | Darren Tucker | |
| platforms that don't have it. "looks good" tim@ | |||
| 2012-07-03 | - (dtucker) [configure.ac sandbox-rlimit.c] Test whether or not | Darren Tucker | |
| setrlimit(RLIMIT_FSIZE, rl_zero) and skip it if it's not supported. Its benefit is minor, so it's not worth disabling the sandbox if it doesn't work. | |||
| 2012-07-03 | - (dtucker) [configure.ac] Detect platforms that can't use select(2) with | Darren Tucker | |
| setrlimit(RLIMIT_NOFILE, rl_zero) and disable the rlimit sandbox on those. | |||
| 2012-05-19 | - (dtucker) [configure.ac contrib/Makefile] bz#1996: use AC_PATH_TOOL to find | Darren Tucker | |
| pkg-config so it does the right thing when cross-compiling. Patch from cjwatson at debian org. | |||
| 2012-05-19 | - (dtucker) [configure.ac] bz#2010: fix non-portable shell construct. Patch | Darren Tucker | |
| from cjwatson at debian org. | |||
| 2012-05-04 | - (dtucker) [configure.ac] Include <sys/param.h> rather than <sys/types.h> | Darren Tucker | |
| to fix building on some plaforms. Fom bowman at math utah edu and des at des no. | |||
| 2012-04-19 | - (djm) [configure.ac] Fix compilation error on FreeBSD, whose libutil | Damien Miller | |
| contains openpty() but not login() | |||
| 2012-04-04 | - (djm) [Makefile.in configure.ac sandbox-seccomp-filter.c] Add sandbox | Damien Miller | |
| mode for Linux's new seccomp filter; patch from Will Drewry; feedback and ok dtucker@ | |||
 |
index : openssh.git | |
| summaryrefslogtreecommitdiff |
path: root/configure.ac