Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-10-07 | - matthew@cvs.openbsd.org 2010/09/24 13:33:00 | Damien Miller | |
[misc.c misc.h configure.ac openbsd-compat/openbsd-compat.h] [openbsd-compat/timingsafe_bcmp.c] Add timingsafe_bcmp(3) to libc, mention that it's already in the kernel in kern(9), and remove it from OpenSSH. ok deraadt@, djm@ NB. re-added under openbsd-compat/ for portable OpenSSH | |||
2010-09-10 | - (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c] | Damien Miller | |
[kexecdhc.c kexecdhs.c key.c key.h myproposal.h packet.c readconf.c] [ssh-agent.c ssh-ecdsa.c ssh-keygen.c ssh.c] Disable ECDH and ECDSA on platforms that don't have the requisite OpenSSL support. ok dtucker@ | |||
2010-08-16 | - (dtucker) [configure.ac openbsd-compat/Makefile.in | Darren Tucker | |
openbsd-compat/openbsd-compat.h openbsd-compat/strptime.c] Add strptime to the compat library which helps on platforms like old IRIX. Based on work by djm, tested by Tom Christensen. | |||
2010-04-23 | - (dtucker) [configure.ac] Bug #1756: Check for the existence of a lib64 dir | Darren Tucker | |
in the openssl install directory (some newer openssl versions do this on at least some amd64 platforms). | |||
2010-04-10 | - (dtucker) [configure.ac] Put the check for the existence of getaddrinfo | Darren Tucker | |
back so we disable the IPv6 tests if we don't have it. | |||
2010-04-09 | - (dtucker) [configure.ac defines.h loginrec.c logintest.c] Bug #1732: enable | Darren Tucker | |
utmpx support on FreeBSD where possible. Patch from Ed Schouten, ok djm@ | |||
2010-04-09 | - (dtucker) [configure.ac] Bug #1744: use pkg-config for libedit flags if we | Darren Tucker | |
have it and the path is not provided to --with-libedit. Based on a patch from Iain Morgan. | |||
2010-03-26 | - (dtucker) [configure.ac] Bug #1741: Add section for Haiku, patch originally | Darren Tucker | |
by Ingo Weinhold via Scott McCreary, ok djm@ | |||
2010-03-09 | - (dtucker) [configure.ac] Use a proper AC_CHECK_DECL for BROKEN_GETADDRINFO | Darren Tucker | |
so setting it in CFLAGS correctly skips IPv6 tests. | |||
2010-03-05 | - (djm) [configure.ac] set -fno-strict-aliasing for gcc4; ok dtucker@ | Damien Miller | |
2010-02-12 | - (djm) [configure.ac] Enable PKCS#11 support only when we find a working | Damien Miller | |
dlopen() | |||
2010-02-12 | - (djm) [INSTALL Makefile.in README.smartcard configure.ac scard-opensc.c] | Damien Miller | |
[scard.c scard.h pkcs11.h scard/Makefile.in scard/Ssh.bin.uu scard/Ssh.java] Remove obsolete smartcard support | |||
2010-02-12 | - markus@cvs.openbsd.org 2010/02/08 10:50:20 | Damien Miller | |
[pathnames.h readconf.c readconf.h scp.1 sftp.1 ssh-add.1 ssh-add.c] [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config.5] replace our obsolete smartcard code with PKCS#11. ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev ` | |||
2010-02-10 | - (djm) add -lselinux to LIBS before calling AC_CHECK_FUNCS for | Damien Miller | |
getseuserbyname; patch from calebcase AT gmail.com via cjwatson AT debian.org | |||
2010-01-22 | - (tim) [configure.ac] Due to constraints in Windows Sockets in terms of | Tim Rice | |
socket inheritance, reduce the default SO_RCVBUF/SO_SNDBUF buffer size in Cygwin to 65535. Patch from Corinna Vinschen. | |||
2010-01-17 | - (tim) [configure.ac] Use the C99-conforming functions snprintf() and | Tim Rice | |
vsnprintf() named _xsnprintf() and _xvsnprintf() on SVR5 systems. | |||
2010-01-17 | - (tim) [configure.ac] OpenServer 5 needs BROKEN_GETADDRINFO too. | Tim Rice | |
2010-01-16 | - (tim) [configure.ac] Define BROKEN_GETADDRINFO on SVR5 systems. The native | Tim Rice | |
getaddrinfo() is too old and limited for addr_pton() in addrmatch.c. | |||
2010-01-15 | - (dtucker) [configure.ac openbsd-compat/{Makefile.in,pwcache.c} Portability | Darren Tucker | |
for pwcache. Also, added caching of negative hits. | |||
2010-01-10 | - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] | Darren Tucker | |
Remove hacks add for RoutingDomain in preparation for its removal. | |||
2010-01-08 | - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] Make | Darren Tucker | |
RoutingDomain an unsupported option on platforms that don't have it. | |||
2009-12-08 | - (dtucker) Bug #1470: Disable OOM-killing of the listening sshd on Linux, | Darren Tucker | |
based on a patch from Vaclav Ovsik and Colin Watson. ok djm. | |||
2009-12-07 | - (dtucker) Bug #1160: use pkg-config for opensc config if it's available. | Darren Tucker | |
Tested by Martin Paljak. | |||
2009-10-11 | - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for | Darren Tucker | |
dirent d_type and DTTOIF as we've switched OpenBSD to the more portable lstat. | |||
2009-10-07 | - (dtucker) d_type is not mandated by POSIX, so add fallback code using | Darren Tucker | |
stat(), needed on at least cygwin. | |||
2009-10-07 | - (dtucker) [configure.ac sftp-client.c] DOTTIF is in fs/ffs/dir.h on at | Darren Tucker | |
least dragonflybsd. | |||
2009-09-11 | - (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X | Darren Tucker | |
10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query). Patch from jbasney at ncsa uiuc edu. | |||
2009-09-01 | - (dtucker) [configure.ac] Bug #1639: use AC_PATH_PROG to search the path for | Darren Tucker | |
krb5-config if it's not in the location specified by --with-kerberos5. Patch from jchadima at redhat. | |||
2009-08-28 | - (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry. | Darren Tucker | |
2009-08-28 | - (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer | Darren Tucker | |
size a compile-time option and set it to 64k on Cygwin, since Corinna reports that it makes a significant difference to performance. ok djm@ | |||
2009-08-28 | - (dtucker) [channels.c configure.ac] Bug #1528: skip the tcgetattr call on | Darren Tucker | |
the pty master on Solaris, since it never succeeds and can hang if large amounts of data is sent to the slave (eg a copy-paste). Based on a patch originally from Doke Scott, ok djm@ | |||
2009-08-17 | - (dtucker) [configure.ac] Check for headers before libraries for openssl an | Darren Tucker | |
zlib, which should make the errors slightly more meaningful on platforms where there's separate "-devel" packages for those. | |||
2009-07-12 | - (dtucker) [configure.ac] Include sys/param.h for the sys/mount.h test, | Darren Tucker | |
prevents configure complaining on older BSDs. | |||
2009-06-16 | - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t | Darren Tucker | |
is a struct with a __val member. Fixes build on, eg, Redhat 6.2. | |||
2009-03-18 | - (tim) [configure.ac] Remove setting IP_TOS_IS_BROKEN for Cygwin. The problem | Tim Rice | |
that setsockopt(IP_TOS) doesn't work on Cygwin has been fixed since 2005. Based on patch from vinschen at redhat com. | |||
2009-03-07 | - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] | Darren Tucker | |
EVP_DigestUpdate does not exactly match the other OLD_EVP functions (eg in openssl 0.9.6) so add an explicit test for it. | |||
2009-03-07 | - (dtucker) [configure.ac] Missing comma in type list. | Darren Tucker | |
2009-03-07 | - (dtucker) [configure.ac defines.h] Check for in_port_t and typedef if needed. | Darren Tucker | |
2009-02-16 | - (djm) [configure.ac] support GNU/kFreeBSD and GNU/kOpensolaris | Damien Miller | |
systems; patch from Aurelien Jarno via rmh AT aybabtu.com | |||
2009-02-12 | - (djm) [configure.ac loginrec.c] bz#1421: fix lastlog support for OSX. | Damien Miller | |
OSX provides a getlastlogxbyname function that automates the reading of a lastlog file. Also, the pututxline function will update lastlog so there is no need for loginrec.c to do it explicitly. Collapse some overly verbose code while I'm in there. | |||
2009-01-07 | - (tim) [configure.ac] Move check_for_libcrypt_later=1 in *-*-sysv5*) section. | Tim Rice | |
OpenServer 6 doesn't need libcrypt. | |||
2009-01-07 | - (tim) [configure.ac defines.h openbsd-compat/port-uw.c | Tim Rice | |
openbsd-compat/xcrypt.c] Add SECUREWARE support to OpenServer 6 SVR5 ABI. OK djm@ dtucker@ | |||
2008-12-08 | - (djm) [configure.ac] bz#1538: better test for ProPolice/SSP: actually | Damien Miller | |
use some stack in main(). Report and suggested fix from vapier AT gentoo.org | |||
2008-11-18 | - (tim) [addrmatch.c configure.ac] Some platforms do not have sin6_scope_id | Tim Rice | |
member of sockaddr_in6. Also reported in Bug 1491 by David Leonard. OK and feedback by djm@ | |||
2008-07-09 | - (djm) [configure.ac] Add -Wformat-security to CFLAGS for gcc 3.x and 4.x | Damien Miller | |
2008-07-05 | - (djm) [configure.ac] unbreak: remove extra closing brace | Damien Miller | |
2008-07-05 | - (djm) [atomicio.c configure.ac] Disable poll() fallback in atomiciov for | Damien Miller | |
Tru64. readv doesn't seem to be a comparable object there. bz#1386, patch from dtucker@ ok me | |||
2008-06-16 | - (dtucker) [configure.ac] Enable -fno-builtin-memset when using gcc. | Darren Tucker | |
2008-06-14 | - (dtucker) [configure.ac] Bug #1276: avoid linking against libgssapi, which | Darren Tucker | |
despite its name doesn't seem to implement all of GSSAPI. Patch from Jan Engelhardt, sanity checked by Simon Wilkinson. | |||
2008-06-12 | - (djm) [channels.c configure.ac] | Damien Miller | |
Do not set SO_REUSEADDR on wildcard X11 listeners (X11UseLocalhost=no) bz#1464; ok dtucker |