Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-01-17 | - (dtucker) [configure.ac digest.c openbsd-compat/openssl-compat.c | Darren Tucker | |
openbsd-compat/openssl-compat.h] Add compatibility layer for older openssl versions. ok djm@ | |||
2014-01-17 | - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c] | Damien Miller | |
[sandbox-null.c sandbox-rlimit.c sandbox-seccomp-filter.c] [sandbox-systrace.c ssh-sandbox.h sshd.c] Support preauth sandboxing using the Capsicum API introduced in FreeBSD 10. Patch by Dag-Erling Smorgrav, updated by Loganaden Velvindron @ AfriNIC; ok dtucker@ | |||
2014-01-17 | - (dtucker) [configure.ac] Split AC_CHECK_FUNCS for OpenSSL functions into | Darren Tucker | |
separate lines and alphabetize for easier diffing of changes. | |||
2014-01-17 | - (dtucker) [aclocal.m4 configure.ac] Add some additional compiler/toolchain | Darren Tucker | |
hardening flags including -fstack-protector-strong. These default to on if the toolchain supports them, but there is a configure-time knob (--without-hardening) to disable them if necessary. ok djm@ | |||
2013-12-19 | - (dtucker) [configure.ac] bz#2178: Don't try to use BSM on Solaris versions | Darren Tucker | |
greater than 11 either rather than just 11. Patch from Tomas Kuthan. | |||
2013-12-07 | - [configure.ac openbsd-compat/Makefile.in openbsd-compat/bcrypt_pbkdf.c] | Damien Miller | |
[openbsd-compat/blf.h openbsd-compat/blowfish.c] [openbsd-compat/openbsd-compat.h] Start at supporting bcrypt_pbkdf in portable. | |||
2013-12-07 | - [Makefile.in] Add ed25519 sources | Damien Miller | |
2013-12-05 | - (dtucker) [configure.ac] bz#2173: use pkg-config --libs to include correct | Darren Tucker | |
-L location for libedit. Patch from Serge van den Boom. | |||
2013-11-09 | - (dtucker) [configure.ac] Add missing "test". | Darren Tucker | |
2013-11-09 | - (dtucker) [configure.ac] Fix brackets in NID_secp521r1 test. | Darren Tucker | |
2013-11-09 | - (dtucker) [configure.ac kex.c key.c myproposal.h] Test for the presence of | Darren Tucker | |
NID_X9_62_prime256v1, NID_secp384r1 and NID_secp521r1 and test that the latter actually works before using it. Fedora (at least) has NID_secp521r1 that doesn't work (see https://bugzilla.redhat.com/show_bug.cgi?id=1021897). | |||
2013-11-09 | - (dtucker) [Makefile.in configure.ac] Set MALLOC_OPTIONS per platform | Darren Tucker | |
and pass in TEST_ENV. Unknown options cause stderr to get polluted and the stderr-data test to fail. | |||
2013-11-07 | - (dtucker) [Makefile.in configure.ac] Remove TEST_SSH_SHA256 environment | Darren Tucker | |
variable. It's no longer used now that we get the supported MACs from ssh -Q. | |||
2013-11-07 | - (djm) [configure.ac defines.h] Skip arc4random_stir() calls on platforms | Damien Miller | |
that lack it but have arc4random_uniform() | |||
2013-11-03 | - (dtucker) [configure.ac defines.h] Add typedefs for intmax_t and uintmax_t | Darren Tucker | |
for platforms that don't have them. | |||
2013-08-04 | - (dtucker) [auth-krb5.c configure.ac openbsd-compat/bsd-misc.h] Add support | Darren Tucker | |
for building with older Heimdal versions. ok djm. | |||
2013-06-11 | - (dtucker) [Makefile.in configure.ac fixalgorithms] Remove unsupported | Darren Tucker | |
algorithms (Ciphers, MACs and HostKeyAlgorithms) from man pages. | |||
2013-06-06 | - (dtucker) [configure.ac sftp.c openbsd-compat/openbsd-compat.h] Cater for | Darren Tucker | |
platforms that don't have multibyte character support (specifically, mblen). | |||
2013-06-04 | - (dtucker) [configure.ac] Some other platforms need sys/types.h before | Darren Tucker | |
sys/socket.h. | |||
2013-06-03 | - (dtucker) [configure.ac] Some platforms need sys/types.h before sys/un.h. | Darren Tucker | |
2013-06-02 | - (tim) [configure.ac regress/Makefile] With rev 1.47 of test-exec.sh we | Tim Rice | |
need a shell that can handle "[ file1 -nt file2 ]". Rather than keep dealing with shell portability issues in regression tests, we let configure find us a capable shell on those platforms with an old /bin/sh. | |||
2013-06-03 | - (dtucker) [configure.ac] bz#2111: don't try to use lastlog on Android. | Darren Tucker | |
Patch from Nathan Osman. | |||
2013-06-03 | - (dtucker) [configure.ac] sys/un.h needs sys/socket.h on some platforms | Darren Tucker | |
to prevent noise from configure. Patch from Nathan Osman. | |||
2013-06-02 | - (dtucker) [configure.ac misc.c] Look for clock_gettime in librt and fall | Darren Tucker | |
back to time(NULL) if we can't find it anywhere. | |||
2013-06-02 | - (dtucker) [configure.ac defines.h] Test for fd_mask, howmany and NFDBITS | Darren Tucker | |
rather than trying to enumerate the plaforms that don't have them. Based on a patch from Nathan Osman, with help from tim@. | |||
2013-06-02 | - (dtucker) [configure.ac openbsd-compat/xcrypt.c] bz#2112: fall back to | Darren Tucker | |
using openssl's DES_crpyt function on platorms that don't have a native one, eg Android. Based on a patch from Nathan Osman. | |||
2013-05-30 | - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] bz#2087: Add a null | Darren Tucker | |
implementation of endgrent for platforms that don't have it (eg Android). Loosely based on a patch from Nathan Osman, ok djm | |||
2013-05-16 | - (dtucker) [configure.ac readconf.c servconf.c | Darren Tucker | |
openbsd-compat/openbsd-compat.h] Add compat bits for scan_scaled. | |||
2013-05-10 | - (dtucker) [configure.ac] Add -Werror to the -Qunused-arguments test so | Darren Tucker | |
we don't get a warning on compilers that *don't* support it. Add -Wno-unknown-warning-option. Move both to the start of the list for maximum noise suppression. Tested with gcc 4.6.3, gcc 2.95.4 and clang 2.9. | |||
2013-05-10 | - (dtucker) [configure.ac] Enable -Wsizeof-pointer-memaccess if the compiler | Darren Tucker | |
supports it. Mentioned by Colin Watson in bz#2100, ok djm. | |||
2013-04-23 | - (djm) [auth.c configure.ac misc.c monitor.c monitor_wrap.c] Support | Damien Miller | |
platforms, such as Android, that lack struct passwd.pw_gecos. Report and initial patch from Nathan Osman bz#2086; feedback tim@ ok dtucker@ | |||
2013-04-18 | - (dtucker) [configure.ac] Use -Qunused-arguments to suppress warnings from | Darren Tucker | |
unused argument warnings (in particular, -fno-builtin-memset) from clang. | |||
2013-03-22 | - (dtucker) [configure.ac] Add stdlib.h to zlib check for exit() prototype. | Darren Tucker | |
2013-03-20 | - (djm) [configure.ac log.c scp.c sshconnect2.c openbsd-compat/vis.c] | Damien Miller | |
[openbsd-compat/vis.h] FreeBSD's strnvis isn't compatible with OpenBSD's so mark it as broken. Patch from des AT des.no | |||
2013-03-16 | - (tim) [configure.ac] OpenServer 5 wants lastlog even though it has none | Tim Rice | |
of the bits the configure test looks for. | |||
2013-03-15 | - (djm) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] | Damien Miller | |
Add a usleep replacement for platforms that lack it; ok dtucker | |||
2013-03-15 | - (djm) [configure.ac] Disable utmp, wtmp and/or lastlog if the platform | Damien Miller | |
is unable to successfully compile them. Based on patch from des AT des.no | |||
2013-03-12 | - (dtucker) [auth.c configure.ac platform.c platform.h] Accept uid 2 ("bin") | Darren Tucker | |
in addition to root as an owner of system directories on AIX and HP-UX. ok djm@ | |||
2013-03-08 | - (djm) [configure.ac] Add a timeout to the select/rlimit test to give it a | Damien Miller | |
chance to complete on broken systems; ok dtucker@ | |||
2013-03-06 | - (dtucker) [configure.ac] test that we can set number of file descriptors | Darren Tucker | |
to zero with setrlimit before enabling the rlimit sandbox. This affects (at least) HPUX 11.11. | |||
2013-03-05 | - (dtucker) [configure.ac] use "=" for shell test and not "==". Spotted by | Darren Tucker | |
Kevin Brott. | |||
2013-02-25 | - (dtucker) [configure.ac ssh-gss.h] bz#2073: additional #includes needed | Darren Tucker | |
to use Solaris native GSS libs. Patch from Pierre Ossman. | |||
2013-02-23 | - (djm) [configure.ac includes.h loginrec.c mux.c sftp.c] Prefer | Damien Miller | |
bsd/libutil.h to libutil.h to avoid deprecation warnings on Ubuntu. ok tim | |||
2013-02-22 | - (djm) [configure.ac sandbox-seccomp-filter.c] Support for Linux | Damien Miller | |
seccomp-bpf sandbox on ARM. Patch from shawnlandden AT gmail.com; ok dtucker | |||
2013-02-22 | - (dtucker) [configure.ac] bz#2073: look for Solaris' differently-named | Darren Tucker | |
libgss too. Patch from Pierre Ossman, ok djm. | |||
2013-02-22 | - (dtucker) [Makefile.in configure.ac] bz#2072: don't link krb5 libs to | Darren Tucker | |
ssh(1) since they're not needed. Patch from Pierre Ossman. | |||
2013-02-15 | - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoull.c | Darren Tucker | |
openbsd-compat/openbsd-compat.h] Add strtoull to compat library for platforms that don't have it. | |||
2013-02-15 | - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] | Darren Tucker | |
Use getpgrp() if we don't have getpgid() (old BSDs, maybe others). | |||
2013-02-11 | - (djm) [configure.ac openbsd-compat/openssl-compat.h] Repair build on old | Damien Miller | |
libcrypto that lacks EVP_CIPHER_CTX_ctrl | |||
2013-02-08 | - (dtucker) [configure.ac openbsd-compat/sys-tree.h] Test if compiler allows | Darren Tucker | |
__attribute__ on return values and work around if necessary. ok djm@ |