Commit Graph

4118 Commits

Author SHA1 Message Date
Damien Miller
bfd52192f3 - (djm) Release OpenSSH 4.3p1 2006-02-01 22:32:17 +11:00
Damien Miller
c79824bbab - markus@cvs.openbsd.org 2006/02/01 11:27:22
[version.h]
     openssh 4.3
2006-02-01 22:27:31 +11:00
Damien Miller
0d689568a4 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
[contrib/suse/openssh.spec] Update versions ahead of release
2006-02-01 22:10:47 +11:00
Damien Miller
2ac05779f7 - jmc@cvs.openbsd.org 2006/02/01 09:11:41
[sshd.8]
     small tweak;
2006-02-01 22:05:42 +11:00
Damien Miller
8bbdf90f33 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2006/02/01 09:06:50
     [sshd.8]
     - merge sections on protocols 1 and 2 into a single section
     - remove configuration file section
     ok markus
2006-02-01 22:05:25 +11:00
Damien Miller
e682cb0780 - (djm) [regress/test-exec.sh] Try 'logname' as well as 'whoami' to
determine the user's login name - needed for regress tests on Solaris
   10 and OpenSolaris
2006-02-01 11:21:01 +11:00
Damien Miller
923f1ce0b7 - djm@cvs.openbsd.org 2006/01/31 10:35:43
[scp.c]
     "scp a b c" shouldn't clobber "c" when it is not a directory, report and
     fix from biorn@; ok markus@
2006-01-31 22:11:37 +11:00
Damien Miller
50c6eedce3 - djm@cvs.openbsd.org 2006/01/31 10:36:33
[scp.sh]
     regress test for "scp a b c" where "c" is not a directory
2006-01-31 22:06:41 +11:00
Damien Miller
7410ad79f8 - djm@cvs.openbsd.org 2006/01/31 10:23:23
[scp.sh]
     regression test for CVE-2006-0225 written by dtucker@
2006-01-31 22:06:14 +11:00
Damien Miller
0b996462f8 - djm@cvs.openbsd.org 2006/01/27 06:49:21
[scp.sh]
     regress test for local to local scp copies; ok dtucker@
2006-01-31 22:05:23 +11:00
Damien Miller
15a815bb64 - dtucker@cvs.openbsd.org 2005/12/14 04:36:39
[regress/scp-ssh-wrapper.sh]
     Fix assumption about how many args scp will pass; ok djm@
     NB. ID sync only, we already had this
2006-01-31 22:03:11 +11:00
Damien Miller
27a0dfaea9 - grunk@cvs.openbsd.org 2005/11/14 21:25:56
[regress/agent-getpeereid.sh]
     all other scripts in this dir use $SUDO, not 'sudo', so pull this even
     ok markus@
2006-01-31 22:02:16 +11:00
Damien Miller
10c5fa7e87 - markus@cvs.openbsd.org 2005/06/30 11:02:37
[regress/scp.sh]
     allow SUDO=sudo; from Alexander Bluhm
2006-01-31 22:01:42 +11:00
Damien Miller
ec7b2f12f0 - djm@cvs.openbsd.org 2005/05/24 04:10:54
[regress/try-ciphers.sh]
     oops, new arcfour modes here too
2006-01-31 21:59:35 +11:00
Damien Miller
76be6b8765 - djm@cvs.openbsd.org 2005/05/20 23:14:15
[regress/test-exec.sh]
     force addressfamily=inet for tests, unbreaking dynamic-forward regress for
     recently committed nc SOCKS5 changes
2006-01-31 21:59:01 +11:00
Damien Miller
f0cbb3d7cb - (djm) Sync regress tests to OpenBSD:
- dtucker@cvs.openbsd.org 2005/03/10 10:20:39
     [regress/forwarding.sh]
     Regress test for ClearAllForwardings (bz #994); ok markus@
2006-01-31 21:58:23 +11:00
Damien Miller
c34940c1f5 - dtucker@cvs.openbsd.org 2005/04/25 09:54:09
[regress/multiplex.sh]
     Don't call cleanup in multiplex as test-exec will cleanup anyway
     found by tim@, ok djm@
     NB. ID sync only, we already had this
2006-01-31 21:57:27 +11:00
Damien Miller
3eec6b73a2 - djm@cvs.openbsd.org 2006/01/31 10:19:02
[misc.c misc.h scp.c sftp.c]
     fix local arbitrary command execution vulnerability on local/local and
     remote/remote copies (CVE-2006-0225, bz #1094), patch by
     t8m AT centrum.cz, polished by dtucker@ and myself; ok markus@
2006-01-31 21:49:27 +11:00
Damien Miller
b5dd55cccc - jmc@cvs.openbsd.org 2006/01/30 13:37:49
[ssh.1]
     remove an incorrect sentence;
     reported by roumen petrov;
     ok djm markus
2006-01-31 21:47:58 +11:00
Damien Miller
e204f6aa0d - reyk@cvs.openbsd.org 2006/01/30 12:22:22
[channels.c]
     mark channel as write failed or dead instead of read failed on error
     of the channel output filter.
     ok markus@
2006-01-31 21:47:15 +11:00
Damien Miller
bbc59094b9 - jmc@cvs.openbsd.org 2006/01/26 08:47:56
[ssh.1]
     add a section on verifying host keys in dns;
     written with a lot of help from jakob;
     feedback dtucker/markus;
     ok markus
2006-01-31 21:46:51 +11:00
Damien Miller
7602cba59d - jmc@cvs.openbsd.org 2006/01/25 09:07:22
[sshd.8]
     move subsections to full sections;
2006-01-31 21:46:20 +11:00
Damien Miller
99cc4a8f1e - jmc@cvs.openbsd.org 2006/01/25 09:04:34
[sshd.8]
     move the options description up the page, and a few additional tweaks
     whilst in here;
     ok markus
2006-01-31 21:45:53 +11:00
Damien Miller
ddfddf1ba3 - jmc@cvs.openbsd.org 2006/01/20 11:21:45
[ssh_config.5]
     - word change, agreed w/ markus
     - consistency fixes
2006-01-31 21:39:03 +11:00
Darren Tucker
fbea76400f - (dtucker) [configure.ac opensshd.init.in] Bug #1144: Use /bin/sh for the
opensshd.init script interpretter if /sbin/sh does not exist.  ok tim@
2006-01-30 00:22:39 +11:00
Darren Tucker
62388b2b63 - dtucker@cvs.openbsd.org 2006/01/20 00:14:55
[scp.1 ssh.1 ssh_config.5 sftp.1]
     Document RekeyLimit.  Based on patch from jan.iven at cern.ch from mindrot
     #1056 with feedback from jmc, djm and markus; ok jmc@ djm@
2006-01-20 11:31:47 +11:00
Darren Tucker
248dd13c46 - jmc@cvs.openbsd.org 2006/01/18 10:53:29
[ssh.1]
     add a section on ssh-based vpn, based on reyk's README.tun;
2006-01-20 11:30:58 +11:00
Darren Tucker
94299ec251 - jmc@cvs.openbsd.org 2006/01/15 17:37:05
[ssh.1]
     correction from deraadt
2006-01-20 11:30:14 +11:00
Damien Miller
4a8dc9e297 - jmc@cvs.openbsd.org 2006/01/12 22:34:12
[ssh.1]
     back out a sentence - AUTHENTICATION already documents this;
2006-01-14 10:10:31 +11:00
Damien Miller
e9d001e02b - jmc@cvs.openbsd.org 2006/01/12 22:26:02
[ssh_config.5]
     refer to TCP forwarding, rather than TCP/IP forwarding;
2006-01-14 10:10:17 +11:00
Damien Miller
7c24b81699 - jmc@cvs.openbsd.org 2006/01/12 22:20:00
[sshd.8]
     refer to TCP forwarding, rather than TCP/IP forwarding;
2006-01-14 10:09:56 +11:00
Damien Miller
8bfaf93f60 - jmc@cvs.openbsd.org 2006/01/12 18:48:48
[ssh.1]
     refer to `TCP' rather than `TCP/IP' in the context of connection
     forwarding;
     ok markus
2006-01-14 10:09:30 +11:00
Damien Miller
f31771810c - jmc@cvs.openbsd.org 2006/01/12 14:44:12
[ssh.1]
     split sections on tcp and x11 forwarding into two sections.
     add an example in the tcp section, based on sth i wrote for ssh faq;
     help + ok: djm markus dtucker
2006-01-14 10:09:13 +11:00
Damien Miller
7e76e1f101 - jmc@cvs.openbsd.org 2006/01/06 13:29:10
[ssh.1]
     final round of whacking FILES for duplicate info, and some consistency
     fixes;
     ok djm
2006-01-14 10:08:57 +11:00
Damien Miller
e87eb4ce3c - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2006/01/06 13:27:32
     [ssh.1]
     weed out some duplicate info in the known_hosts FILES entries;
     ok djm
2006-01-14 10:08:36 +11:00
Darren Tucker
e78c6ce8cf - (dtucker) [contrib/cygwin/ssh-host-config] Make sshd service depend on
tcpip service so it's always started after IP is up.  Patch from
   vinschen at redhat.com.
2006-01-10 00:02:44 +11:00
Damien Miller
72c5b7d85d - djm@cvs.openbsd.org 2006/01/05 23:43:53
[misc.c]
     check that stdio file descriptors are actually closed before clobbering
     them in sanitise_stdfd(). problems occurred when a lower numbered fd was
     closed, but higher ones weren't. spotted by, and patch tested by
     Frédéric Olivié
2006-01-06 14:50:44 +11:00
Damien Miller
c27f83a63c - jmc@cvs.openbsd.org 2006/01/04 19:50:09
[ssh.1]
     -.Xr gzip 1 ,
2006-01-06 14:50:26 +11:00
Damien Miller
128a0f114d - jmc@cvs.openbsd.org 2006/01/04 19:40:24
[ssh.1]
     +.Xr ssh-keyscan 1 ,
2006-01-06 14:50:11 +11:00
Damien Miller
a246d3b9b2 - jmc@cvs.openbsd.org 2006/01/04 18:45:01
[ssh.1]
     remove .Xr's to rsh(1) and telnet(1): they are hardly needed;
2006-01-06 14:49:54 +11:00
Damien Miller
1bcdb50a3d - jmc@cvs.openbsd.org 2006/01/04 18:42:46
[ssh.1]
     chop out some duplication in the .{r,s}hosts/{h,sh}osts.equiv FILES
     entries;
     ok markus
2006-01-06 14:49:38 +11:00
Damien Miller
4c102eede3 - jmc@cvs.openbsd.org 2006/01/03 16:55:18
[ssh.1]
     tweak the description of ~/.ssh/environment
2006-01-06 14:49:17 +11:00
Damien Miller
fb8ea74116 - jmc@cvs.openbsd.org 2006/01/03 16:52:36
[ssh.1]
     put FILES in some sort of order: sort by pathname
2006-01-06 14:48:52 +11:00
Damien Miller
6aa2290b0c - jmc@cvs.openbsd.org 2006/01/03 16:35:30
[ssh.1]
     use a larger width for the ENVIRONMENT list;
2006-01-06 14:48:34 +11:00
Damien Miller
7655f5cd9f - jmc@cvs.openbsd.org 2006/01/03 16:31:10
[ssh.1]
     move FILES to a -compact list, and make each files an item in that list.
     this avoids nastly line wrap when we have long pathnames, and treats
     each file as a separate item;
     remove the .Pa too, since it is useless.
2006-01-06 14:48:18 +11:00
Damien Miller
a969437645 - (djm) [channels.c] clean up harmless merge error, from reyk@ 2006-01-04 07:27:50 +11:00
Damien Miller
b797770da2 - (djm) OpenBSD CVS Sync
- jmc@cvs.openbsd.org 2006/01/02 17:09:49
     [ssh_config.5 sshd_config.5]
     some corrections from michael knudsen;
2006-01-03 18:47:31 +11:00
Damien Miller
a07a59188a - jmc@cvs.openbsd.org 2006/01/02 12:31:06
[ssh.1]
     start to cut some duplicate info from FILES;
     help/ok djm
2006-01-02 23:41:37 +11:00
Damien Miller
a1d9a18e14 - reyk@cvs.openbsd.org 2006/01/02 07:53:44
[misc.c]
     clarify tun(4) opening - set the mode and bring the interface up. also
     (re)sets the tun(4) layer 2 LINK0 flag for existing tunnel interfaces.
     suggested and ok by djm@
2006-01-02 23:41:21 +11:00
Damien Miller
5444618987 - djm@cvs.openbsd.org 2006/01/02 01:20:31
[sftp-client.c sftp-common.h sftp-server.c]
     use a common max. packet length, no binary change
2006-01-02 23:40:50 +11:00