Commit Graph

1745 Commits

Author SHA1 Message Date
Ben Lindstrom
78bbd9ebe3 - danh@cvs.openbsd.org 2001/08/27 22:02:13
[ssh-keyscan.c]
     fix memory fault if non-existent filename is given to the -f option
     ok markus@
2001-09-12 17:10:40 +00:00
Ben Lindstrom
8d066fb262 - stevesk@cvs.openbsd.org 2001/08/23 18:08:59
[ssh-add.1 ssh-keyscan.1]
     minor cleanup
2001-09-12 17:06:13 +00:00
Ben Lindstrom
ba1fa1d67b - stevesk@cvs.openbsd.org 2001/08/23 18:02:48
[ssh-agent.1]
     fix usage; ok markus@
2001-09-12 17:02:49 +00:00
Ben Lindstrom
ce89dacda8 - camield@cvs.openbsd.org 2001/08/23 17:59:31
[sshd.c]
     end request with 0, not NULL
     ok markus@
2001-09-12 16:58:04 +00:00
Ben Lindstrom
ffa1dd6817 - stevesk@cvs.openbsd.org 2001/08/22 17:45:16
[ssh.1]
     document cipher des for protocol 1; ok deraadt@
2001-09-12 16:52:28 +00:00
Ben Lindstrom
044274bcb0 - stevesk@cvs.openbsd.org 2001/08/22 16:30:02
[sshd.8]
     no rexd; ok markus@
2001-09-12 16:46:08 +00:00
Ben Lindstrom
a10aed8b5e - stevesk@cvs.openbsd.org 2001/08/22 16:21:21
[ssh.1]
     hostname not optional; ok markus@
2001-09-12 16:43:26 +00:00
Ben Lindstrom
e59433da7a - stevesk@cvs.openbsd.org 2001/08/21 21:47:42
[ssh.1 sshd.8]
     minor typos and cleanup
2001-09-12 16:41:37 +00:00
Ben Lindstrom
7bb37b29c6 - stevesk@cvs.openbsd.org 2001/08/17 18:59:47
[servconf.h]
     typo in comment
2001-09-12 16:40:05 +00:00
Ben Lindstrom
1c0fd09d15 - stevesk@cvs.openbsd.org 2001/08/16 20:14:57
[ssh.1 sshd.8]
     document case sensitivity for ssh, sshd and key file
     options and arguments; ok markus@
2001-09-12 16:36:17 +00:00
Ben Lindstrom
91e9868e4f - jakob@cvs.openbsd.org 2001/08/16 19:18:34
[servconf.c servconf.h session.c sshd.8]
     deprecate CheckMail. ok markus@
2001-09-12 16:32:14 +00:00
Ben Lindstrom
19d7b8d3fa - (bal) QNX resync. OK tim@ 2001-08-16 00:09:49 +00:00
Ben Lindstrom
14c62eb2be - stevesk@cvs.openbsd.org 2001/08/14 17:54:29
[scp.1 sftp.1 ssh.1]
     consistent documentation and example of ``-o ssh_option'' for sftp and
     scp; document keyword=argument for ssh.
2001-08-15 23:25:46 +00:00
Ben Lindstrom
59e1249d67 - markus@cvs.openbsd.org 2001/08/14 09:23:02
[sftp.1 sftp-int.c]
     "bye"; hk63a@netscape.net
2001-08-15 23:22:56 +00:00
Ben Lindstrom
1fa90101f0 - stevesk@cvs.openbsd.org 2001/08/13 23:38:54
[scp.c]
     don't need main prototype (also sync with rcp); ok markus@
2001-08-15 23:21:01 +00:00
Ben Lindstrom
930b14a28e - jakob@cvs.openbsd.org 2001/08/11 22:51:27
[ssh.c tildexpand.c]
     fix more paths beginning with "//"; <bradshaw@staff.crosswalk.com>.
     ok markus@
2001-08-15 23:19:21 +00:00
Ben Lindstrom
049e0dd6cf - markus@cvs.openbsd.org 2001/08/08 21:34:19
[uidswap.c]
     undo last change; does not work for sshd
2001-08-15 23:17:22 +00:00
Ben Lindstrom
a66039373b - markus@cvs.openbsd.org 2001/08/08 18:20:15
[uidswap.c]
     permanently_set_uid is a noop if user is not privilegued;
     fixes bug on solaris; from sbi@uchicago.edu
2001-08-15 23:14:49 +00:00
Ben Lindstrom
79e93bca6f - deraadt@cvs.openbsd.org 2001/08/08 07:16:58
[scp.1]
     when describing the -o option, give -o Protocol=1 as the specific example
     since we are SICK AND TIRED of clueless people who cannot have difficulty
     thinking on their own.
2001-08-15 23:06:59 +00:00
Ben Lindstrom
c9a2636420 - markus@cvs.openbsd.org 2001/08/07 10:37:46
[authfd.c authfd.h]
     extended failure messages from galb@vandyke.com
2001-08-15 23:04:50 +00:00
Ben Lindstrom
d0ff40847d - (bal) Fixed stray code in readconf.c that went in by mistake. 2001-08-15 22:58:59 +00:00
Kevin Steves
4da21abd24 - (stevesk) bsd-cray.c: more cleanup; ok wendyp@cray.com 2001-08-14 21:02:15 +00:00
Kevin Steves
72992afb26 - (stevesk) bsd-cray.c: utmp strings are not C strings 2001-08-14 20:54:52 +00:00
Kevin Steves
25ee4e48f7 - (stevesk) sshpty.c: return 0 on error in cray pty code;
ok wendyp@cray.com
2001-08-14 20:41:34 +00:00
Kevin Steves
ad4aa5655d forgot this 2001-08-14 20:35:35 +00:00
Damien Miller
56cb92968b - (djm) Fix detection of long long int support. Based on patch from
Michael Stone <mstone@cs.loyola.edu>. ok stevesk, tim
2001-08-12 13:02:50 +10:00
Ben Lindstrom
113339e024 - (bal) Minor correction to inet_ntop.h. _BSD_RRESVPORT_H should be
_BSD_INET_NTOP_H.  Pointed out by Mark Miller <markm@swoon.net>
2001-08-09 00:56:52 +00:00
Tim Rice
e991e3cf22 - (tim) [configure.in sshconnect.c openbsd-compat/Makefile.in
openbsd-compat/openbsd-compat.h ] Add inet_ntop.c inet_ntop.h back
	 in. Needed for sshconnect.c
	 [sshconnect.c] fix INET6_ADDRSTRLEN for non IPv6 machines
	 [configure.in] make tests with missing libraries fail
	 patch by Wendy Palm <wendyp@cray.com>
	 Added openbsd-compat/bsd-cray.h. Selective patches from
	 William L. Jones <jones@mail.utexas.edu>
2001-08-07 15:29:07 -07:00
Ben Lindstrom
6db66ff387 - (bal) Second around of UNICOS patches. A few other things left.
Patches by William L. Jones <jones@mail.utexas.edu>
2001-08-06 23:29:16 +00:00
Ben Lindstrom
ff2866cf51 - (bal) ssh-keyscan double -lssh hack due to seed_rng(). 2001-08-06 22:56:46 +00:00
Ben Lindstrom
958d9f695b - stevesk@cvs.openbsd.org 2001/08/06 19:47:05
[scp.c]
     use alarm vs. setitimer for portable; ok markus@
2001-08-06 22:48:19 +00:00
Ben Lindstrom
de8fc6fadc - markus@cvs.openbsd.org 2001/08/05 23:29:58
[ssh-keyscan.c]
     make -t dsa work with commercial servers, too
2001-08-06 22:43:50 +00:00
Ben Lindstrom
325e70c90f - markus@cvs.openbsd.org 2001/08/05 23:18:20
[ssh-keyscan.1 ssh-keyscan.c]
     ssh 2 support; from wayned@users.sourceforge.net
2001-08-06 22:41:30 +00:00
Ben Lindstrom
ddfb1e3a89 - jakob@cvs.openbsd.org 2001/08/03 10:31:30
[ssh-add.c ssh-agent.c ssh-keyscan.c]
     improve usage(). ok markus@
2001-08-06 22:06:35 +00:00
Ben Lindstrom
e690121f0d - jakob@cvs.openbsd.org 2001/08/03 10:31:19
[ssh-add.1]
     document smartcard options. ok markus@
2001-08-06 22:03:08 +00:00
Ben Lindstrom
0b5afb98eb - mpech@cvs.openbsd.org 2001/08/02 18:37:35
[ssh-keyscan.1]
     o) .Sh AUTHOR -> .Sh AUTHORS;
     o) .Sh EXAMPLE -> .Sh EXAMPLES;
     o) Delete .Sh OPTIONS. Text moved to .Sh DESCRIPTION;

     millert@ ok
2001-08-06 22:01:29 +00:00
Ben Lindstrom
bcc1808bf2 - jakob@cvs.openbsd.org 2001/08/02 16:14:05
[scard.c ssh-agent.c ssh.c ssh-keygen.c]
     clean up some /* SMARTCARD */. ok markus@
2001-08-06 21:59:25 +00:00
Ben Lindstrom
ffce147638 - jakob@cvs.openbsd.org 2001/08/02 15:43:57
[ssh-agent.c ssh.c ssh-keygen.c]
     add /* SMARTCARD */ to #else/#endif. ok markus@
2001-08-06 21:57:31 +00:00
Ben Lindstrom
61eb9568b3 - jakob@cvs.openbsd.org 2001/08/02 15:32:10
[ssh.c]
     add smartcard to usage(). ok markus@
2001-08-06 21:53:42 +00:00
Ben Lindstrom
a1ec4a9cb8 - jakob@cvs.openbsd.org 2001/08/02 15:07:23
[ssh-keygen.1]
     document smartcard upload/download. ok markus@
2001-08-06 21:51:34 +00:00
Ben Lindstrom
97be31e6ff - jakob@cvs.openbsd.org 2001/08/02 15:06:52
[ssh-keygen.c]
     more verbose usage(). ok markus@
2001-08-06 21:49:06 +00:00
Ben Lindstrom
f19578c447 - jakob@cvs.openbsd.org 2001/08/02 08:58:35
[ssh-keygen.c]
     change -u (upload smartcard key) to -U. ok markus@
2001-08-06 21:46:54 +00:00
Ben Lindstrom
8282d6a82f - markus@cvs.openbsd.org 2001/08/02 00:10:17
[ssh-keygen.c]
     add -D readerid option (download, i.e. print public RSA key to stdout).
     check for card present when uploading keys.
     use strings instead of ints for smartcard reader ids, too.
2001-08-06 21:44:05 +00:00
Ben Lindstrom
a6c8a8d4d5 - markus@cvs.openbsd.org 2001/08/01 23:38:45
[scard.c ssh.c]
     support finish rsa keys.
     free public keys after login -> call finish -> close smartcard.
2001-08-06 21:42:00 +00:00
Ben Lindstrom
6818bfbf30 - markus@cvs.openbsd.org 2001/08/01 23:33:09
[ssh-keygen.c]
     allow uploading RSA keys for non-default AUT0 (sha1 over passphrase
     like sectok).
2001-08-06 21:40:04 +00:00
Ben Lindstrom
020a8699a9 - markus@cvs.openbsd.org 2001/08/01 22:16:45
[ssh.1 sshd.8]
     refer to current ietf drafts for protocol v2
2001-08-06 21:38:10 +00:00
Ben Lindstrom
f7db3bb64c - markus@cvs.openbsd.org 2001/08/01 22:03:33
[authfd.c authfd.h readconf.c readconf.h scard.c scard.h ssh-add.c
      ssh-agent.c ssh.c]
     use strings instead of ints for smartcard reader ids
2001-08-06 21:35:51 +00:00
Ben Lindstrom
3ab1dfa2a6 - jakob@cvs.openbsd.org 2001/07/31 12:53:34
[scard.c]
     close smartcard connection if card is missing
2001-08-06 21:33:44 +00:00
Ben Lindstrom
95148e3de2 - jakob@cvs.openbsd.org 2001/07/31 12:42:50
[sftp-int.c sftp-server.c]
     avoid paths beginning with "//"; <vinschen@redhat.com>
     ok markus@
2001-08-06 21:30:53 +00:00
Ben Lindstrom
ae996bf7d1 - jakob@cvs.openbsd.org 2001/07/31 09:28:44
[readconf.c readconf.h ssh.1 ssh.c]
     add 'SmartcardDevice' client option to specify which smartcard device
     is used to access a smartcard used for storing the user's private RSA
     key. ok markus@.
2001-08-06 21:27:53 +00:00
Ben Lindstrom
94baf30d14 - jakob@cvs.openbsd.org 2001/07/31 08:41:10
[scard.c]
     do not complain about missing smartcards. ok markus@
2001-08-06 21:25:38 +00:00
Ben Lindstrom
0256e8b93c - stevesk@cvs.openbsd.org 2001/07/30 16:23:30
[rijndael.c rijndael.h]
     new BSD-style license:
     Brian Gladman <brg@gladman.plus.com>:
     >I have updated my code at:
     >http://fp.gladman.plus.com/cryptography_technology/rijndael/index.htm
     >with a copyright notice as follows:
     >[...]
     >I am not sure which version of my old code you are using but I am
     >happy for the notice above to be substituted for my existing copyright
     >intent if this meets your purpose.
2001-08-06 21:24:11 +00:00
Ben Lindstrom
30b00be24f - jakob@cvs.openbsd.org 2001/07/30 16:06:07
[scard.c scard.h]
     better errorcodes from sc_*; ok markus@
2001-08-06 21:22:10 +00:00
Ben Lindstrom
50e22c937f - mouring@cvs.openbsd.org 2001/07/29 17:02:46
[scp.1]
     Clarified -o option in scp.1  OKed by Markus@
2001-08-06 21:20:22 +00:00
Ben Lindstrom
07d24dcbd8 - markus@cvs.openbsd.org 2001/07/28 09:21:15
[sshd.8]
     cleanup some RSA vs DSA vs SSH1 vs SSH2 notes
2001-08-06 21:18:57 +00:00
Ben Lindstrom
2772a3f864 - deraadt@cvs.openbsd.org 2001/07/27 17:26:16
[scp.c]
     shorten lines
2001-08-06 21:17:12 +00:00
Ben Lindstrom
711b04a56a - millert@cvs.openbsd.org 2001/07/27 14:50:45
[ssh.c]
     If smart card support is compiled in and a smart card is being used
     for authentication, make it the first method used.  markus@ OK
2001-08-06 21:12:42 +00:00
Ben Lindstrom
60df8e4f7d - rees@cvs.openbsd.org 2001/07/26 20:04:27
[scard.c ssh-keygen.c]
     Inquire Cyberflex class for 0xf0 cards
     change aid to conform to 7816-5
     remove gratuitous fid selects
2001-08-06 21:10:52 +00:00
Ben Lindstrom
794325ac7a - stevesk@cvs.openbsd.org 2001/07/26 17:18:22
[sshd.8 sshd.c]
     add -t option to test configuration file and keys; pekkas@netcore.fi
     ok markus@
2001-08-06 21:09:07 +00:00
Ben Lindstrom
f9cedb9ca0 - markus@cvs.openbsd.org 2001/07/25 14:35:18
[readconf.c ssh.1 ssh.c sshconnect.c]
     cleanup connect(); connection_attempts 4 -> 1; from
eivind@freebsd.org
2001-08-06 21:07:11 +00:00
Ben Lindstrom
f9bedf1441 - markus@cvs.openbsd.org 2001/07/25 11:59:35
[scard.c]
     typo in comment
2001-08-06 21:05:05 +00:00
Ben Lindstrom
ff6458e03e - stevesk@cvs.openbsd.org 2001/07/23 18:21:46
[xmalloc.c]
     no zero size xstrdup() error; ok markus@
2001-08-06 21:03:23 +00:00
Ben Lindstrom
940fb86c9a - stevesk@cvs.openbsd.org 2001/07/23 18:14:58
[auth2.c auth-rsa.c]
     use %lu; ok markus@
2001-08-06 21:01:49 +00:00
Ben Lindstrom
d18c80c2a6 - aaron@cvs.openbsd.org 2001/07/23 14:14:18
[ssh-keygen.1]
     Fix typo.
2001-08-06 21:00:27 +00:00
Ben Lindstrom
a9086a1c4c - markus@cvs.openbsd.org 2001/07/23 12:47:05
[ssh.1]
     sync PreferredAuthentications
2001-08-06 20:58:51 +00:00
Ben Lindstrom
45350e8374 - markus@cvs.openbsd.org 2001/07/23 09:06:28
[sshconnect2.c]
     reorder default sequence of userauth methods to match ssh behaviour:
     hostbased,publickey,keyboard-interactive,password
2001-08-06 20:57:11 +00:00
Ben Lindstrom
c8e29ceb68 - markus@cvs.openbsd.org 2001/07/22 22:24:16
[sshd.8]
     Xr login.conf
2001-08-06 20:55:28 +00:00
Ben Lindstrom
0076d75c25 - markus@cvs.openbsd.org 2001/07/22 22:04:19
[readconf.c ssh.1]
     enable challenge-response auth by default; ok millert@
2001-08-06 20:53:26 +00:00
Ben Lindstrom
e2b9b06425 - pvalchev@cvs.openbsd.org 2001/07/22 21:32:42
[ssh.1]
     There is no option "Compress", point to "Compression" instead; ok
     markus
2001-08-06 20:50:55 +00:00
Ben Lindstrom
c88785efc8 - markus@cvs.openbsd.org 2001/07/22 21:32:27
[sshpty.c]
     update comment
2001-08-06 20:47:23 +00:00
Damien Miller
2ab5924d1f - (djm) Fix interrupted read in entropy gatherer. Spotted by markus@ on
a fast UltraSPARC.
2001-08-06 16:51:49 +10:00
Kevin Steves
e26a155415 - (stevesk) use mysignal() in protocol 1 loop now that the SIGCHLD
handler has converged.
2001-07-26 17:51:49 +00:00
Ben Lindstrom
8103de7d06 - (bal) Added 'install-nokeys' to Makefile to assist package builders. 2001-07-25 16:24:33 +00:00
Ben Lindstrom
8e2aa5bb63 - (bal) 4711 not 04711 for ssh binary. 2001-07-24 17:00:13 +00:00
Ben Lindstrom
979c981f99 - stevesk@cvs.openbsd.org 2001/07/20 18:41:51
[ssh.1]
     "the" command line
2001-07-22 20:45:39 +00:00
Ben Lindstrom
0250da057d - markus@cvs.openbsd.org 2001/07/20 14:46:11
[ssh-agent.c]
     do not exit() from signal handlers; ok deraadt@
2001-07-22 20:44:00 +00:00
Ben Lindstrom
660076925e - stevesk@cvs.openbsd.org 2001/07/19 00:41:44
[ssh.1]
     escape chars are below now
2001-07-22 20:41:59 +00:00
Ben Lindstrom
3fdf876107 - stevesk@cvs.openbsd.org 2001/07/18 21:40:40
[ssh-agent.c]
     chdir("/") from bbraun@synack.net; ok markus@
2001-07-22 20:40:24 +00:00
Ben Lindstrom
d01ba98986 - OpenBSD CVS Sync
- markus@cvs.openbsd.org 2001/07/18 21:10:43
     [sshpty.c]
     pr #1946, allow sshd if /dev is readonly
2001-07-22 20:36:57 +00:00
Ben Lindstrom
d9e0824b43 - (bal) Starting the Unicossmk merger. File merged TODO, configure.in,
myproposal.h, ssh_prng_cmds.in, and openbsd-compat/Makefile.in.
	 Added openbsd-compat/bsd-cray.c.  Rest will be merged after
	 approval.  Selective patches from William L. Jones
	 <jones@mail.utexas.edu>
2001-07-22 19:32:00 +00:00
Tim Rice
5d629cb653 - (tim) [configure.in] put inet_aton back in AC_CHECK_FUNCS.
report from Mark Miller <markm@swoon.net>
2001-07-19 20:33:46 -07:00
Ben Lindstrom
dc00c93b6c - OpenBSD CVS Sync
- mouring@cvs.openbsd.org 2001/07/18 16:45:52
     [scp.c]
     Missing -o in scp usage()
2001-07-18 16:50:33 +00:00
Ben Lindstrom
a92783fbfa cvs + pico == Bad when attempting to abort. <sigh> This should go with
the last update.

 - (bal) Updated cygwin README and ssh-host-config.  Patch by
         Corinna Vinschen <vinschen@redhat.com>
2001-07-18 16:27:31 +00:00
Ben Lindstrom
a5820295c3 *** empty log message *** 2001-07-18 16:25:41 +00:00
Ben Lindstrom
cff94beb65 - (bal) Allow sshd to switch user context without password for Cygwin.
Patch by Corinna Vinschen <vinschen@redhat.com>
2001-07-18 16:19:48 +00:00
Ben Lindstrom
0dd676a26b - (bal) Cleaned up trailing spaces in ChangeLog. 2001-07-18 16:05:50 +00:00
Ben Lindstrom
16d29d57e8 - markus@cvs.openbsd.org 2001/07/17 21:04:58
[channels.c channels.h clientloop.c nchan.c serverloop.c]
     keep track of both maxfd and the size of the malloc'ed fdsets.
     update maxfd if maxfd gets closed.
2001-07-18 16:01:46 +00:00
Ben Lindstrom
a3d5a4c2db - markus@cvs.openbsd.org 2001/07/17 20:48:42
[ssh-agent.c]
     update maxfd if maxfd is closed; report from jmcelroy@dtgnet.com
2001-07-18 15:58:08 +00:00
Ben Lindstrom
a7fc2f7434 - stevesk@cvs.openbsd.org 2001/07/15 16:58:29
[ssh-agent.c]
     typo in usage; ok markus@
2001-07-18 15:53:39 +00:00
Ben Lindstrom
a4a5323b2a - stevesk@cvs.openbsd.org 2001/07/15 16:57:21
[ssh-agent.1]
     -d will not fork; ok markus@
2001-07-18 15:51:00 +00:00
Ben Lindstrom
36857f6b8b - markus@cvs.openbsd.org 2001/07/15 16:17:08
[serverloop.c]
     schedule client alive for ssh2 only, greg@cheers.bungi.com
2001-07-18 15:48:57 +00:00
Ben Lindstrom
ad77313f22 - OpenBSD CVS Sync
- stevesk@cvs.openbsd.org 2001/07/14 15:10:17
      [readpass.c sftp-client.c sftp-common.c sftp-glob.c]
      delete spurious #includes; ok deraadt@ markus@
2001-07-18 15:45:44 +00:00
Tim Rice
2db5371d30 - (tim) put openssh/openbsd-compat/inet_aton.[ch] back in.
(needed by openbsd-compat/fake-getaddrinfo.c)
2001-07-15 19:07:49 -07:00
Ben Lindstrom
fed7bb498f - (bal) Set "BROKEN_GETADDRINFO" for darwin platform. Reported by
Josh Larios <jdlarios@cac.washington.edu>
2001-07-15 18:30:42 +00:00
Kevin Steves
6482ec865a - (stevesk) configure.in: use ll suffix for long long constant
in snprintf() test
2001-07-15 02:09:28 +00:00
Kevin Steves
60193f70f7 - (stevesk) change getopt() declaration 2001-07-14 16:05:55 +00:00
Damien Miller
4f8e66929b - (djm) Pull in getopt(3) from OpenBSD libc for the optreset extension. 2001-07-14 13:22:53 +10:00
Damien Miller
8f6bc30a4b - (djm) Reorder Makefile.in so clean targets work a little better when
run directly from Makefile.in
2001-07-14 13:07:43 +10:00
Damien Miller
0ae6e009c8 - markus@cvs.openbsd.org 2001/07/11 18:26:15
[auth.c]
     no need to call dirname(pw->pw_dir).
     note that dirname(3) modifies its argument on some systems.
2001-07-14 12:21:34 +10:00
Damien Miller
c4b7feabe0 - itojun@cvs.openbsd.org 2001/07/11 00:24:53
[servconf.c]
     make it compilable in all 4 combination of KRB4/KRB5 settings.
     dugsong ok
     XXX isn't it sensitive to the order of -I/usr/include/kerberosIV and
     -I/usr/include/kerberosV?
2001-07-14 12:20:32 +10:00
Damien Miller
07ab49ef71 - markus@cvs.openbsd.org 2001/07/10 21:49:12
[readpass.c]
     don't panic if fork or pipe fail (just return an empty passwd).
2001-07-14 12:19:56 +10:00
Damien Miller
efb1edfc7f - deraadt@cvs.openbsd.org 2001/07/09 07:04:53
[session.c sftp-int.c]
     correct type on last arg to execl(); nordin@cse.ogi.edu
2001-07-14 12:19:36 +10:00
Damien Miller
f4614450d1 - OpenBSD CVS Sync
- fgsch@cvs.openbsd.org 2001/07/09 05:58:47
     [ssh.c]
     Use getopt(3); markus@ ok.
2001-07-14 12:18:10 +10:00
Damien Miller
4085785276 - OpenBSD CVS Sync
- stevesk@cvs.openbsd.org 2001/07/08 15:23:38
     [servconf.c]
     fix ``MaxStartups max''; ok markus@
2001-07-14 12:17:33 +10:00
Damien Miller
40eb1d82bb - OpenBSD CVS Sync
- stevesk@cvs.openbsd.org 2001/07/05 20:32:47
     [sshconnect1.c]
     statement after label; ok dugsong@
2001-07-14 12:16:59 +10:00
Damien Miller
f3512d9ba7 - OpenBSD CVS Sync
- markus@cvs.openbsd.org 2001/07/04 23:49:27
     [ssh-agent.c]
     handle mutiple adds of the same smartcard key
2001-07-14 12:14:27 +10:00
Damien Miller
8d4bf17036 - OpenBSD CVS Sync
- markus@cvs.openbsd.org 2001/07/04 23:39:07
     [ssh-agent.c]
     for smartcards remove both RSA1/2 keys
2001-07-14 12:13:49 +10:00
Damien Miller
694be4b1d5 - OpenBSD CVS Sync
- markus@cvs.openbsd.org 2001/07/04 23:13:10
     [scard.c scard.h ssh-agent.c]
     handle card removal more gracefully, add sc_close() to scard.h
2001-07-14 12:13:26 +10:00
Damien Miller
48bfa9cafa - OpenBSD CVS Sync
- markus@cvs.openbsd.org 2001/07/04 22:47:19
     [ssh-agent.c]
     ignore SIGPIPE when debugging, too
2001-07-14 12:12:55 +10:00
Damien Miller
98273e3ade - (djm) Revert dirname fix, a better one is on its way. 2001-07-14 11:55:15 +10:00
Damien Miller
c62f1fc3ff - (djm) Enable /etc/nologin check on PAM systems, as some lack the
pam_nologin module. Report from William Yodlowsky
   <bsd@openbsd.rutgers.edu>
2001-07-14 11:54:05 +10:00
Damien Miller
eec0c25f2a - (djm) dirname(3) may modify its argument on glibc and other systems.
Patch from markus@, spotted by Tom Holroyd <tomh@po.crl.go.jp>
2001-07-11 21:32:20 +10:00
Tim Rice
024acc46e6 - (tim) [openbsd-compat/dirname.h] Remove ^M causing some compilers to
issue warning (line 1: tokens ignored at end of directive line)
 - (tim) [sshconnect1.c] give the compiler something to do for success:
	 if KRB5 and AFS are not defined.
	 (ERROR: "sshconnect1.c", line 1274: Syntax error before or at: })
2001-07-04 21:27:20 -07:00
Tim Rice
7281a9bc8c [contrib/caldera/openssh.spec] sync with Caldera 2001-07-04 17:45:28 -07:00
Kevin Steves
e468de6525 - (stevesk) sync servconf.h (comments) 2001-07-04 18:37:20 +00:00
Kevin Steves
8f63caa197 - (stevesk) more sync for session.c 2001-07-04 18:23:02 +00:00
Kevin Steves
d009ae3d04 - (stevesk) sync misc.h 2001-07-04 17:25:54 +00:00
Ben Lindstrom
f70b59c039 - (bal) Makefile fix up requires scard.c 2001-07-04 05:40:19 +00:00
Ben Lindstrom
3133dbbdba - (bal) forget a few new files in sync up. 2001-07-04 05:35:00 +00:00
Ben Lindstrom
809744e912 - markus@cvs.openbsd.org 2001/07/02 22:52:57
[channels.c channels.h serverloop.c]
     improve cleanup/exit logic in ssh2:
     stop listening to channels, detach channel users (e.g. sessions).
     wait for children (i.e. dying sessions), send exit messages,
     cleanup all channels.
2001-07-04 05:26:06 +00:00
Ben Lindstrom
0047764526 - markus@cvs.openbsd.org 2001/07/02 22:40:18
[ssh-keygen.c]
     update for sectok.h interface changes.
2001-07-04 05:24:27 +00:00
Ben Lindstrom
4f42d8cda3 - markus@cvs.openbsd.org 2001/07/02 22:29:20
[readpass.c]
     do not return NULL, use "" instead.
2001-07-04 05:19:27 +00:00
Ben Lindstrom
4983d5ebd5 - markus@cvs.openbsd.org 2001/07/02 13:59:15
[serverloop.c session.c session.h]
     wait until !session_have_children(); bugreport from
     Lutz.Jaenicke@aet.TU-Cottbus.DE
2001-07-04 05:17:40 +00:00
Ben Lindstrom
173e646f7e - stevesk@cvs.openbsd.org 2001/06/30 18:08:40
[channels.c channels.h clientloop.c]
     adress -> address; ok markus@
2001-07-04 05:15:15 +00:00
Ben Lindstrom
1118095d33 - stevesk@cvs.openbsd.org 2001/06/29 18:40:28
[channels.c]
     use socklen_t for getsockopt arg #5; ok markus@
2001-07-04 05:13:35 +00:00
Ben Lindstrom
db47f383e6 - stevesk@cvs.openbsd.org 2001/06/29 18:38:44
[clientloop.c]
     sync function definition with declaration; ok markus@
2001-07-04 05:10:27 +00:00
Ben Lindstrom
d6e049cd59 - markus@cvs.openbsd.org 2001/06/29 07:11:01
[ssh-keygen.c]
     initialize early
2001-07-04 05:08:39 +00:00
Ben Lindstrom
7feba35a47 - markus@cvs.openbsd.org 2001/06/29 07:06:34
[ssh-keygen.c]
     new error handling for cyberflex_*
2001-07-04 05:06:59 +00:00
Ben Lindstrom
511d69e6d7 - stevesk@cvs.openbsd.org 2001/06/28 19:57:35
[ssh-keygen.c]
     '\0' terminated data[] is ok; ok markus@
2001-07-04 05:05:27 +00:00
Ben Lindstrom
44e49afae2 - markus@cvs.openbsd.org 2001/06/27 06:26:36
[ssh-add.c]
     convert to getopt(3)
2001-07-04 05:03:51 +00:00
Ben Lindstrom
f7297dd79d - markus@cvs.openbsd.org 2001/06/27 05:42:25
[rsa.c rsa.h ssh-agent.c ssh-keygen.c]
     s/generate_additional_parameters/rsa_generate_additional_parameters/
     http://www.humppa.com/
2001-07-04 05:02:23 +00:00
Ben Lindstrom
680b276aad - markus@cvs.openbsd.org 2001/06/27 05:35:42
[ssh-keygen.c]
     use cyberflex_inq_class to inquire class.
2001-07-04 05:00:11 +00:00
Ben Lindstrom
60260022ee - markus@cvs.openbsd.org 2001/06/27 04:48:53
[auth.c match.c sshd.8]
     tridge@samba.org
2001-07-04 04:56:44 +00:00
Ben Lindstrom
bddd551e11 - markus@cvs.openbsd.org 2001/06/27 02:12:54
[serverloop.c serverloop.h session.c session.h]
     quick hack to make ssh2 work again.
2001-07-04 04:53:53 +00:00
Ben Lindstrom
eb7a84c49e - dugsong@cvs.openbsd.org 2001/06/26 17:41:49
[servconf.c]
     #include <kafs.h>
2001-07-04 04:48:36 +00:00
Ben Lindstrom
4cc240dabb - markus@cvs.openbsd.org 2001/06/26 17:27:25
[authfd.h authfile.h auth.h auth-options.h bufaux.h buffer.h
      canohost.h channels.h cipher.h clientloop.h compat.h compress.h
      crc32.h deattack.h dh.h dispatch.h groupaccess.c groupaccess.h
      hostfile.h kex.h key.h log.c log.h mac.h misc.c misc.h mpaux.h
      packet.h radix.h readconf.h readpass.h rsa.h servconf.h serverloop.h
      session.h sftp-common.c sftp-common.h sftp-glob.h sftp-int.h
      sshconnect.h ssh-dss.h sshlogin.h sshpty.h ssh-rsa.h sshtty.h
      tildexpand.h uidswap.h uuencode.h xmalloc.h]
     remove comments from .h, since they are cut&paste from the .c files
     and out of sync
2001-07-04 04:46:56 +00:00
Ben Lindstrom
5bf5d67d49 - markus@cvs.openbsd.org 2001/06/26 17:25:34
[ssh.1]
     document SSH_ASKPASS; fubob@MIT.EDU
2001-07-04 04:31:38 +00:00
Ben Lindstrom
ec95ed9b4c - dugsong@cvs.openbsd.org 2001/06/26 16:15:25
[auth1.c auth.h auth-krb4.c auth-passwd.c readconf.c readconf.h
      servconf.c servconf.h session.c sshconnect1.c sshd.c]
     Kerberos v5 support for SSH1, mostly from Assar Westerlund
     <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
2001-07-04 04:21:14 +00:00
Ben Lindstrom
b4c774cf88 - itojun@cvs.openbsd.org 2001/06/26 06:33:07
[servconf.h serverloop.h session.h sftp-client.h sftp-common.h
      sftp-glob.h sftp-int.h sshconnect.h ssh-dss.h sshlogin.h sshpty.h
      ssh-rsa.h tildexpand.h uidswap.h uuencode.h xmalloc.h]
     prototype pedant.  not very creative...
     - () -> (void)
     - no variable names
2001-07-04 04:07:12 +00:00
Ben Lindstrom
16ae3d0dba - itojun@cvs.openbsd.org 2001/06/26 06:32:58
[atomicio.h authfd.h authfile.h auth.h auth-options.h bufaux.h
      buffer.h canohost.h channels.h cipher.h clientloop.h compat.h
      compress.h crc32.h deattack.h dh.h dispatch.h groupaccess.h
      hostfile.h kex.h key.h log.h mac.h match.h misc.h mpaux.h packet.h
      radix.h readconf.h readpass.h rsa.h]
     prototype pedant.  not very creative...
     - () -> (void)
     - no variable names
2001-07-04 04:02:36 +00:00
Ben Lindstrom
90279d80f5 - markus@cvs.openbsd.org 2001/06/26 05:50:11
[auth2.c]
     new interface for secure_filename()
2001-07-04 03:56:56 +00:00
Ben Lindstrom
88a6b7581b - mpech@cvs.openbsd.org 2001/06/26 05:48:07
[sshd.8]
     remove unnecessary .Pp between .It;
     millert@ ok
2001-07-04 03:55:21 +00:00
Ben Lindstrom
3f471630bb - markus@cvs.openbsd.org 2001/06/26 05:33:34
[ssh-agent.c]
     more smartcard support.
2001-07-04 03:53:15 +00:00
Ben Lindstrom
db6b276f5a - markus@cvs.openbsd.org 2001/06/26 05:07:43
[ssh-agent.c]
     update usage
2001-07-04 03:51:35 +00:00
Ben Lindstrom
036a6b28c9 - markus@cvs.openbsd.org 2001/06/26 04:59:59
[authfd.c authfd.h ssh-add.c]
     initial support for smartcards in the agent
2001-07-04 03:50:02 +00:00
Ben Lindstrom
d94580c708 - markus@cvs.openbsd.org 2001/06/26 04:07:06
[ssh-agent.1 ssh-agent.c]
     add debug flag
2001-07-04 03:48:02 +00:00
Ben Lindstrom
cd392284ac - markus@cvs.openbsd.org 2001/06/26 02:47:07
[ssh-keygen.c]
     allow loading a private RSA key to a cyberflex card.
2001-07-04 03:44:03 +00:00
Ben Lindstrom
7907382299 - stevesk@cvs.openbsd.org 2001/06/25 20:26:37
[auth2.c sshconnect2.c]
     prototype cleanup; ok markus@
2001-07-04 03:42:30 +00:00
Ben Lindstrom
248c0784bf - provos@cvs.openbsd.org 2001/06/25 17:54:47
[auth.c auth.h auth-rsa.c]
     terminate secure_filename checking after checking homedir.  that way
     it works on AFS.  okay markus@
2001-07-04 03:40:39 +00:00
Ben Lindstrom
bda98b0091 - markus@cvs.openbsd.org 2001/06/25 17:18:27
[ssh-keygen.1]
     sshd(8) will never read the private keys, but ssh(1) does;
     hugh@mimosa.com
2001-07-04 03:35:24 +00:00
Ben Lindstrom
4469723325 - markus@cvs.openbsd.org 2001/06/25 08:25:41
[channels.c channels.h cipher.c clientloop.c compat.c compat.h
      hostfile.c kex.c kex.h key.c key.h nchan.c packet.c serverloop.c
      session.c session.h sftp-server.c ssh-add.c ssh-agent.c uuencode.h]
     update copyright for 2001
2001-07-04 03:32:30 +00:00
Kevin Steves
5cc6e92251 - (stevesk) remove cli.[ch] 2001-06-29 19:51:48 +00:00
Kevin Steves
9b26f96c12 - (stevesk) session.c: use u_int for envsize 2001-06-29 17:52:17 +00:00
Kevin Steves
78e83b3e5e - (stevesk) remove _REENTRANT #define 2001-06-29 16:56:16 +00:00
Ben Lindstrom
1cd6fefcc8 - (bal) Updated zlib's home. Thanks to David Howe <DaveHowe@gmx.co.uk>. 2001-06-29 12:39:23 +00:00
Ben Lindstrom
5d739a4c86 - (bal) Fixed _DISABLE_VPOSIX in readpassphrase.c. 2001-06-29 12:35:12 +00:00
Ben Lindstrom
deacfcc43f - (bal) Removed net_aton() since we don't use it any more 2001-06-29 12:32:31 +00:00
Ben Lindstrom
e6affc6a13 - (bal) Remove getusershell() since it's no longer use 2001-06-28 23:27:37 +00:00
Ben Lindstrom
f96d887d75 - (bal) Removed strtok_r and inet_ntop since they are no longer used. 2001-06-28 23:21:28 +00:00
Damien Miller
acf59e68cb - (djm) Fix from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> for my
broken makefile
2001-06-28 20:23:14 +10:00
Damien Miller
180207ffe1 20010628
- (djm) Sync openbsd-compat with -current libc
2001-06-28 14:48:28 +10:00
Kevin Steves
315f8b70b0 - (stevesk) use X/Open socket interface for HP-UX 10.X also 2001-06-28 00:24:41 +00:00
Kevin Steves
37a777e98b - (stevesk) fix x11 forwarding from _PATH_XAUTH change 2001-06-28 00:13:48 +00:00
Kevin Steves
6a7b0de576 - (stevesk) for HP-UX 11.X use X/Open socket interface;
pulls in modern socket prototypes and eliminates a number of compiler
    warnings.  see xopen_networking(7).
2001-06-27 16:32:24 +00:00
Damien Miller
649d999b4b - (djm) Turn up warnings if gcc or egcs detected 2001-06-27 23:35:51 +10:00
Damien Miller
b90416b7df - (djm) Sync with -current openbsd-compat/readpassphrase.c:
- djm@cvs.openbsd.org 2001/06/27 13:23:30
     typo, spotted by Tom Holroyd <tomh@po.crl.go.jp>; ok deraadt@
2001-06-27 23:26:38 +10:00
Damien Miller
b5b0af4d58 - (djm) Oops, forgot make logic for primes=>moduli. Also try to rename
existing primes->moduli if it exists.
2001-06-27 21:52:32 +10:00
Damien Miller
407548b7ed - (djm) Rename sysconfdir/primes => sysconfdir/moduli 2001-06-27 17:07:16 +10:00
Damien Miller
ec9868aa3c - (djm) Remove redundant and incorrect test for max auth attempts in
PAM kbdint code. Based on fix from Matthew Melvin
  <matthewm@webcentral.com.au>
2001-06-27 15:36:43 +10:00
Damien Miller
665af9cae7 - (djm) Reintroduce pam_session call for non-pty sessions. 2001-06-27 09:34:15 +10:00
Damien Miller
c8a3868ed0 - (djm) Bring in readpassphrase() from OpenBSD libc. Compiles OK on Linux and
Solaris
2001-06-25 18:09:16 +10:00
Damien Miller
2d5ac08f13 -Wall 2001-06-25 17:07:59 +10:00
Ben Lindstrom
491bbb811a - markus@cvs.openbsd.org 2001/06/24 17:18:31
[ttymodes.c]
     passing modes works fine: debug2->3
2001-06-25 05:24:16 +00:00
Ben Lindstrom
126c56ad9e - markus@cvs.openbsd.org 2001/06/24 05:47:13
[sshconnect2.c]
     oops, missing format string
2001-06-25 05:22:53 +00:00
Ben Lindstrom
949974bbdb - markus@cvs.openbsd.org 2001/06/24 05:35:33
[readpass.c readpass.h ssh-add.c sshconnect2.c ssh-keygen.c]
     switch to readpassphrase(3)
     2.7/8-stable needs readpassphrase.[ch] from libc
2001-06-25 05:20:31 +00:00
Ben Lindstrom
f0c50293dd - markus@cvs.openbsd.org 2001/06/24 05:25:10
[auth-options.c match.c match.h]
     move ip+hostname check to match.c
2001-06-25 05:17:53 +00:00
Ben Lindstrom
0520945179 - markus@cvs.openbsd.org 2001/06/23 22:37:46
[sshconnect1.c]
     consistent with ssh2: skip key if empty passphrase is entered,
     retry num_of_passwd_prompt times if passphrase is wrong. ok fgsch@
2001-06-25 05:16:02 +00:00
Ben Lindstrom
980978639c - markus@cvs.openbsd.org 2001/06/23 19:12:43
[sshd.c]
     pidfile/sigterm race; bbraun@synack.net
2001-06-25 05:10:20 +00:00
Ben Lindstrom
2464322d7e - itojun@cvs.openbsd.org 2001/06/23 17:48:18
[sftp.1 ssh.1 sshd.8 ssh-keyscan.1]
     kill whitespace at EOL.
2001-06-25 05:08:11 +00:00
Ben Lindstrom
e586c4ce3f - markus@cvs.openbsd.org 2001/06/23 17:05:22
[ssh-keygen.c]
     fix import for (broken?) ssh.com/f-secure private keys
     (i tested > 1000 RSA keys)
2001-06-25 05:04:58 +00:00
Ben Lindstrom
bba81213b9 - itojun@cvs.openbsd.org 2001/06/23 15:12:20
[auth1.c auth2.c auth2-chall.c authfd.c authfile.c auth-rhosts.c
      canohost.c channels.c cipher.c clientloop.c deattack.c dh.c
      hostfile.c kex.c kexdh.c kexgex.c key.c nchan.c packet.c radix.c
      readpass.c scp.c servconf.c serverloop.c session.c sftp.c
      sftp-client.c sftp-glob.c sftp-int.c sftp-server.c ssh-add.c
      ssh-agent.c ssh.c sshconnect1.c sshconnect2.c sshconnect.c sshd.c
      ssh-keygen.c ssh-keyscan.c]
     more strict prototypes.  raise warning level in Makefile.inc.
     markus ok'ed
     TODO; cleanup headers
2001-06-25 05:01:22 +00:00
Ben Lindstrom
34f91883a6 - markus@cvs.openbsd.org 2001/06/23 06:41:10
[ssh-keygen.c]
     try to decode ssh-3.0.0 private rsa keys
     (allow migration to openssh, not vice versa), #910
2001-06-25 04:47:54 +00:00
Ben Lindstrom
90fd060bc8 - deraadt@cvs.openbsd.org 2001/06/23 05:57:09
[sftp.1 sftp-server.8 ssh-keygen.1]
     ok, tmac is now fixed
2001-06-25 04:45:33 +00:00
Ben Lindstrom
5363aee8bd - markus@cvs.openbsd.org 2001/06/23 05:26:02
[key.c]
     handle sigature of size 0 (some broken clients send this).
2001-06-25 04:42:20 +00:00
Ben Lindstrom
a4789ef878 - markus@cvs.openbsd.org 2001/06/23 03:04:42
[auth2.c auth-rh-rsa.c]
     restore correct ignore_user_known_hosts logic.
2001-06-25 04:40:49 +00:00
Ben Lindstrom
3c798d4743 - markus@cvs.openbsd.org 2001/06/23 03:03:59
[sshd.8]
     draft-ietf-secsh-dh-group-exchange-01.txt
2001-06-25 04:39:22 +00:00
Ben Lindstrom
d6481ea49a - markus@cvs.openbsd.org 2001/06/23 02:34:33
[kexdh.c kexgex.c kex.h pathnames.h readconf.c servconf.h ssh.1
      sshconnect1.c sshconnect2.c sshconnect.c sshconnect.h sshd.8]
     get rid of known_hosts2, use it for hostkey lookup, but do not
     modify.
2001-06-25 04:37:41 +00:00
Ben Lindstrom
b710f788f1 - deraadt@cvs.openbsd.org 2001/06/23 02:33:05
[sftp.1 sftp-server.8 ssh-keygen.1]
     join .%A entries; most by bk@rt.fm
2001-06-25 04:32:38 +00:00
Ben Lindstrom
83647ce474 - markus@cvs.openbsd.org 2001/06/23 00:20:57
[auth2.c auth.c auth.h auth-rh-rsa.c]
     *known_hosts2 is obsolete for hostbased authentication and
     only used for backward compat. merge ssh1/2 hostkey check
     and move it to auth.c
2001-06-25 04:30:16 +00:00
Ben Lindstrom
7d5ed3a07b - deraadt@cvs.openbsd.org 2001/06/23 00:16:16
[scp.c]
     slightly better care
2001-06-25 04:28:30 +00:00
Ben Lindstrom
6ab6486273 - markus@cvs.openbsd.org 2001/06/22 23:35:21
[ssh.c]
     don't overwrite argv (fixes ssh user@host in 'ps'), report by ericj@
2001-06-25 04:26:55 +00:00
Ben Lindstrom
488d8805f3 - markus@cvs.openbsd.org 2001/06/22 22:21:20
[sftp-server.c]
     allow long usernames/groups in readdir
2001-06-25 04:24:49 +00:00
Ben Lindstrom
af7388046d - provos@cvs.openbsd.org 2001/06/22 21:57:59
[dh.c]
     increase linebuffer to deal with larger moduli; use rewind instead of
     close/open
2001-06-25 04:18:59 +00:00
Ben Lindstrom
f96704d4ef - markus@cvs.openbsd.org 2001/06/22 21:55:49
[auth2.c auth-rsa.c pathnames.h ssh.1 sshd.8 sshd_config
      ssh-keygen.1]
     merge authorized_keys2 into authorized_keys.
     authorized_keys2 is used for backward compat.
     (just append authorized_keys2 to authorized_keys).
2001-06-25 04:17:12 +00:00
Ben Lindstrom
ae1c51c208 - provos@cvs.openbsd.org 2001/06/22 21:28:53
[sshd.8]
     document /etc/moduli
2001-06-25 04:14:59 +00:00
Ben Lindstrom
93a29e046e - provos@cvs.openbsd.org 2001/06/22 21:27:08
[dh.c pathnames.h]
     use /etc/moduli instead of /etc/primes, okay markus@
2001-06-25 04:13:25 +00:00
Ben Lindstrom
d2bf0d64d9 - mpech@cvs.openbsd.org 2001/06/22 10:17:51
[ssh.1 sshd.8 ssh-keyscan.1]
     o) .Sh AUTHOR -> .Sh AUTHORS;
     o) remove unnecessary .Pp;
     o) better -mdoc style;
     o) typo;
     o) sort SEE ALSO;

     aaron@ ok
2001-06-25 04:10:54 +00:00
Ben Lindstrom
07094e52e7 - markus@cvs.openbsd.org 2001/06/21 21:08:25
[session.c]
      don't reset forced_command (we allow multiple login shells in
      ssh2); dwd@bell-labs.com
2001-06-25 03:59:43 +00:00
Kevin Steves
824569537f - (stevesk) handle systems without pw_expire and pw_change. 2001-06-22 21:14:18 +00:00
Ben Lindstrom
601e43638e - markus@cvs.openbsd.org 2001/06/20 13:56:39
[channels.c channels.h clientloop.c packet.c serverloop.c]
     move from channel_stop_listening to channel_free_all,
     call channel_free_all before calling waitpid() in serverloop.
     fixes the utmp handling; report from Lutz.Jaenicke@aet.TU-Cottbus.DE
2001-06-21 03:19:23 +00:00
Ben Lindstrom
0a7ca6c7ba - markus@cvs.openbsd.org 2001/06/19 15:40:45
[session.c]
     allocate and free at the same level.
2001-06-21 03:17:42 +00:00
Ben Lindstrom
699776e9ec - markus@cvs.openbsd.org 2001/06/19 14:09:45
[session.c sshd.8]
     disable x11-fwd if use_login is enabled; from lukem@wasabisystems.com
2001-06-21 03:14:49 +00:00
Ben Lindstrom
c85ab8afab - markus@cvs.openbsd.org 2001/06/19 12:34:09
[session.c]
     cleanup forced command handling, from dwd@bell-labs.com
2001-06-21 03:13:10 +00:00
Ben Lindstrom
3af4d4634f - markus@cvs.openbsd.org 2001/06/16 08:58:34
[misc.c]
     copy pw_expire and pw_change, too.
2001-06-21 03:11:27 +00:00
Ben Lindstrom
738f51e3df - markus@cvs.openbsd.org 2001/06/16 08:57:35
[scp.c]
     no stdio or exit() in signal handlers.
2001-06-21 03:08:58 +00:00
Ben Lindstrom
83417a86da - markus@cvs.openbsd.org 2001/06/16 08:50:39
[channels.h]
     bad //-style comment; thx to stevev@darkwing.uoregon.edu
2001-06-21 03:07:27 +00:00
Ben Lindstrom
352b1c2130 - markus@cvs.openbsd.org 2001/06/16 08:49:38
[misc.c]
     typo; dunlap@apl.washington.edu
2001-06-21 03:04:37 +00:00
Kevin Steves
805cf5a788 - (stevesk) update TODO: STREAMS pty systems don't call vhangup() now 2001-06-15 04:23:12 +00:00
Kevin Steves
974fb9cf2f - (stevesk) don't set SA_RESTART and set SIGCHLD to SIG_DFL
around grantpt().
2001-06-15 00:04:23 +00:00
Ben Lindstrom
7a83722577 - OpenBSD CVS Sync
- markus@cvs.openbsd.org 2001/06/13 09:10:31
     [session.c]
     typo, use pid not s->pid, mstone@cs.loyola.edu
2001-06-13 19:23:32 +00:00
Ben Lindstrom
c51ae1bdaa - markus@cvs.openbsd.org 2001/06/12 21:30:57
[session.c]
     unused
2001-06-13 04:43:52 +00:00
Ben Lindstrom
2bcdf064d8 - markus@cvs.openbsd.org 2001/06/12 21:21:29
[session.c]
     remove xauth-cookie-in-tmp handling. use default $XAUTHORITY, since
     we do already trust $HOME/.ssh
     you can use .ssh/sshrc and .ssh/environment if you want to customize
     the location of the xauth cookies
2001-06-13 04:41:41 +00:00
Ben Lindstrom
16d45b3952 - markus@cvs.openbsd.org 2001/06/12 16:11:26
[packet.c]
     do not log() packet_set_maxsize
2001-06-13 04:39:18 +00:00
Ben Lindstrom
49c126044d - markus@cvs.openbsd.org 2001/06/12 16:10:38
[session.c]
     merge ssh1/ssh2 tty msg parse and alloc code
2001-06-13 04:37:36 +00:00
Ben Lindstrom
7eaf8e4e26 - markus@cvs.openbsd.org 2001/06/12 10:58:29
[session.c]
     merge session_free into session_close()
     merge pty_cleanup_proc into session_pty_cleanup()
2001-06-13 04:35:43 +00:00
Ben Lindstrom
34a996877e - markus@cvs.openbsd.org 2001/06/11 16:04:38
[sshd.8]
     typo; bdubreuil@crrel.usace.army.mil
2001-06-12 00:23:12 +00:00
Ben Lindstrom
88259fbbc5 - markus@cvs.openbsd.org 2001/06/11 10:18:24
[session.c]
     reset pointer to NULL after xfree(); report from solar@openwall.com
2001-06-12 00:21:34 +00:00
Ben Lindstrom
0a0c3a63d0 - scp.c ID update (upstream synced vfsprintf() from us) 2001-06-12 00:15:57 +00:00
Ben Lindstrom
16c1bd6d09 - markus@cvs.openbsd.org 2001/06/10 11:29:20
[dispatch.c]
     we support rekeying
     protocol errors are fatal.
2001-06-12 00:12:56 +00:00
Ben Lindstrom
0b35572596 - (bal) Fixed Makefile.in so that 'configure; make install' works. 2001-06-10 17:43:35 +00:00
Ben Lindstrom
d7d7da12ec - (bal) Handle broken krb4 issues on Solaris with multiple defined u_*_t
types.  Patch by Jan IVEN <Jan.Iven@cern.ch>
2001-06-10 17:35:45 +00:00
Ben Lindstrom
68c3ce1075 - (bal) NeXT/MacOS X lack libgen.h and dirname(). Patch by Mark Miller
<markm@swoon.net>
2001-06-10 17:24:51 +00:00
Ben Lindstrom
d1aed9c057 - (bal) Missed two files in major resync. auth-bsdauth.c and auth-skey.c 2001-06-10 00:41:18 +00:00
Ben Lindstrom
9841b0a1ac - (bal) --with-catman should be --with-mantype patch by Dave
Dykstra <dwd@bell-labs.com>
2001-06-09 02:26:58 +00:00
Ben Lindstrom
b30768f504 - (bal) ANSIify strmode() 2001-06-09 02:22:16 +00:00
Ben Lindstrom
23fec14710 - (bal) configure.in fix for Tru64 (forgeting to reset $LIB) 2001-06-09 02:16:28 +00:00
Ben Lindstrom
1bf11f6af7 - markus@cvs.openbsd.org 2001/06/08 15:25:40
[includes.h pathnames.h readconf.c servconf.c]
     move the path for xauth to pathnames.h
2001-06-09 01:48:01 +00:00
Ben Lindstrom
4d3f227699 - markus@cvs.openbsd.org 2001/06/07 22:25:02
[session.c]
     don't overwrite errno
     delay deletion of the xauth cookie
2001-06-09 01:44:07 +00:00
Ben Lindstrom
664408d2a7 - markus@cvs.openbsd.org 2001/06/07 20:23:05
[authfd.c authfile.c channels.c kexdh.c kexgex.c packet.c ssh.c
      sshconnect.c sshconnect1.c]
     use xxx_put_cstring()
2001-06-09 01:42:01 +00:00
Ben Lindstrom
9d0c06667e - markus@cvs.openbsd.org 2001/06/07 19:57:53
[auth2.c]
     style is used for bsdauth.
     disconnect on user/service change (ietf-drafts)
2001-06-09 01:40:00 +00:00
Ben Lindstrom
5acb5d03ed - markus@cvs.openbsd.org 2001/06/06 23:19:35
[ssh-add.c]
     remove debug message; Darren.Moffat@eng.sun.com
2001-06-09 01:38:24 +00:00
Ben Lindstrom
c66d436f60 - markus@cvs.openbsd.org 2001/06/06 23:13:54
[ssh-dss.c ssh-rsa.c]
     cleanup, remove old code
2001-06-09 01:36:21 +00:00
Ben Lindstrom
cb3929d1d9 - markus@cvs.openbsd.org 2001/06/05 16:46:19
[session.c]
     let session_close() delete the pty.  deny x11fwd if xauthfile is set.
2001-06-09 01:34:15 +00:00
Ben Lindstrom
df4981bc31 - markus@cvs.openbsd.org 2001/06/05 10:24:32
[channels.c]
     don't delete the auth socket in channel_stop_listening()
     auth_sock_cleanup_proc() will take care of this.
2001-06-09 01:32:29 +00:00
Ben Lindstrom
a238f6e834 - pvalchev@cvs.openbsd.org 2001/06/05 05:05:39
[ssh-keyscan.1 ssh-keyscan.c]
     License clarification from David Mazieres, ok deraadt@
2001-06-09 01:30:39 +00:00
Ben Lindstrom
768176b240 - markus@cvs.openbsd.org 2001/06/04 23:16:16
[session.c]
     merge ssh1/2 x11-fwd setup, create listener after tmp-dir
2001-06-09 01:29:12 +00:00
Ben Lindstrom
ec46e0b5fd - markus@cvs.openbsd.org 2001/06/04 23:07:21
[clientloop.c serverloop.c sshd.c]
     set flags in the signal handlers, do real work in the main loop,
     ok provos@
2001-06-09 01:27:31 +00:00
Ben Lindstrom
983c098311 - markus@cvs.openbsd.org 2001/06/04 21:59:43
[channels.c channels.h session.c]
     switch uid when cleaning up tmp files and sockets; reported by
     zen-parse@gmx.net on bugtraq
2001-06-09 01:20:06 +00:00
Ben Lindstrom
742e89ec5d - markus@cvs.openbsd.org 2001/06/03 20:06:11
[auth2-chall.c]
     the challenge response device decides how to handle non-existing
     users.
     -> fake challenges for skey and cryptocard
2001-06-09 01:17:23 +00:00
Ben Lindstrom
9cc9464613 - markus@cvs.openbsd.org 2001/06/03 19:38:42
[scp.c]
     pass -v to ssh; from slade@shore.net
2001-06-09 01:15:11 +00:00
Ben Lindstrom
2a097a4543 - markus@cvs.openbsd.org 2001/06/03 19:36:44
[ssh-keygen.1]
     1-2 bits of entrophy per character (not per word), ok stevesk@
2001-06-09 01:13:40 +00:00
Ben Lindstrom
838394ca26 - markus@cvs.openbsd.org 2001/06/03 14:55:39
[channels.c channels.h session.c]
     use fatal_register_cleanup instead of atexit, sync with x11 authdir
     handling
2001-06-09 01:11:59 +00:00
Ben Lindstrom
c4b7225b8d - markus@cvs.openbsd.org 2001/05/31 13:08:04
[sshd_config]
     group options and add some more comments
2001-06-09 01:09:51 +00:00
Ben Lindstrom
3b670d09a8 - (bal) Ooops.. nchan.c resync from OpenBSD ssh Attic. 2001-06-09 00:57:39 +00:00
Ben Lindstrom
a6fc91e86e - (bal) nchan.c CVS ID Update. 2001-06-09 00:44:44 +00:00
Ben Lindstrom
e9c999137a - (bal) Channels.c and Channels.h -- "Merge Functions, simplify" (draged
out of ssh Attic)
2001-06-09 00:41:05 +00:00
Ben Lindstrom
c763767f18 [NOTE: Next patch will sync nchan.c, channels.c and channels.h and all this
pain will be over.]
   - markus@cvs.openbsd.org 2001/05/31 10:30:17
     [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
      packet.c serverloop.c session.c ssh.c]
     undo the .c file split, just merge the header and keep the cvs
     history
2001-06-09 00:36:26 +00:00
Ben Lindstrom
5ec2645a2d - markus@cvs.openbsd.org 2001/05/30 15:20:10
[ssh.c]
     merge functions, simplify.
2001-06-09 00:18:51 +00:00
Ben Lindstrom
e6455aee8f [NOTE: File split is was not done in Portabl Tree]
- markus@cvs.openbsd.org 2001/05/30 12:55:13
     [auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
      packet.c serverloop.c session.c ssh.c ssh1.h]
     channel layer cleanup: merge header files and split .c files
2001-06-09 00:17:10 +00:00
Ben Lindstrom
2d0356f7de - markus@cvs.openbsd.org 2001/05/29 12:31:27
[authfile.c]
     typo
2001-06-05 21:13:57 +00:00
Ben Lindstrom
80c6d77085 - markus@cvs.openbsd.org 2001/05/28 23:58:35
[packet.c packet.h sshconnect.c sshd.c]
     remove some lines, simplify.
2001-06-05 21:09:18 +00:00
Ben Lindstrom
4c247550ae - markus@cvs.openbsd.org 2001/05/28 23:25:24
[channels.c]
     cleanup, typo
2001-06-05 20:56:47 +00:00
Ben Lindstrom
c0dee1a148 - markus@cvs.openbsd.org 2001/05/28 23:14:49
[channels.c channels.h nchan.c]
     undo broken channel fix and try a different one. there
     should be still some select errors...
2001-06-05 20:52:50 +00:00
Ben Lindstrom
a3828d4812 - markus@cvs.openbsd.org 2001/05/28 22:51:11
[cipher.c cipher.h]
     simpler 3des for ssh1
2001-06-05 20:50:16 +00:00
Ben Lindstrom
322915d5e4 - markus@cvs.openbsd.org 2001/05/28 10:08:55
[authfile.c]
     key_load_private: set comment to filename for PEM keys
2001-06-05 20:46:32 +00:00
Ben Lindstrom
3b89c5ef89 - markus@cvs.openbsd.org 2001/05/28 08:04:39
[ssh.c]
     fix usage()
2001-06-05 20:44:16 +00:00
Ben Lindstrom
d78ae766de - markus@cvs.openbsd.org 2001/05/25 14:37:32
[ssh-keygen.c]
     use -P for -e and -y, too.
2001-06-05 20:35:09 +00:00
Ben Lindstrom
2b1f71baee - stevesk@cvs.openbsd.org 2001/05/24 18:57:53
[clientloop.c readconf.c ssh.c ssh.h]
     don't perform escape processing when ``EscapeChar none''; ok markus@
2001-06-05 20:32:21 +00:00
Ben Lindstrom
60567ff890 - markus@cvs.openbsd.org 2001/05/24 11:12:42
[auth.c]
     fix comment; from jakob@
2001-06-05 20:27:53 +00:00
Ben Lindstrom
bfb3a0e973 - markus@cvs.openbsd.org 2001/05/20 17:20:36
[auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8
      sshd_config]
     configurable authorized_keys{,2} location; originally from peter@;
     ok djm@
2001-06-05 20:25:05 +00:00
Ben Lindstrom
e259544876 - stevesk@cvs.openbsd.org 2001/05/19 19:57:09
[channels.c]
     typo in error message
2001-06-05 20:01:39 +00:00
Ben Lindstrom
1bda4c835e - stevesk@cvs.openbsd.org 2001/05/19 19:43:57
[misc.c misc.h servconf.c sshd.8 sshd.c]
     sshd command-line arguments and configuration file options that
     specify time may be expressed using a sequence of the form:
     time[qualifier], where time is a positive integer value and qualifier
     is one of the following:
         <none>,s,m,h,d,w
     Examples:
         600     600 seconds (10 minutes)
         10m     10 minutes
         1h30m   1 hour 30 minutes (90 minutes)
     ok markus@
2001-06-05 19:59:08 +00:00
Ben Lindstrom
bd0e2de8e5 - markus@cvs.openbsd.org 2001/05/19 16:46:19
[ssh.1 sshd.8]
     document MACs defaults with .Dq
2001-06-05 19:52:52 +00:00
Ben Lindstrom
1bfe29151b - markus@cvs.openbsd.org 2001/05/19 16:32:16
[ssh.1 sshconnect2.c]
     change preferredauthentication order to
        publickey,hostbased,password,keyboard-interactive
     document that hostbased defaults to no, document order
2001-06-05 19:37:25 +00:00
Ben Lindstrom
608d1d1f9b - markus@cvs.openbsd.org 2001/05/19 16:08:43
[sshd.8]
     sort options; Matthew.Stier@fnc.fujitsu.com
2001-06-05 19:33:22 +00:00
Ben Lindstrom
7bad55b8cb - markus@cvs.openbsd.org 2001/05/19 16:05:41
[scp.c]
     ftruncate() instead of open()+O_TRUNC like rcp.c does
     allows scp /path/to/file localhost:/path/to/file
2001-06-05 19:31:41 +00:00
Ben Lindstrom
7d68fbf4c5 - djm@cvs.openbsd.org 2001/05/19 00:36:40
[session.c]
     Disable X11 forwarding if xauth binary is not found. Patch from Nalin
     Dahyabhai <nalin@redhat.com>; ok markus@
2001-06-05 19:29:20 +00:00
Ben Lindstrom
551ea37576 - markus@cvs.openbsd.org 2001/05/18 14:13:29
[auth-chall.c auth.h auth1.c auth2-chall.c auth2.c readconf.c
      readconf.h servconf.c servconf.h sshconnect1.c sshconnect2.c sshd.c]
     improved kbd-interactive support. work by per@appgate.com and me
2001-06-05 18:56:16 +00:00
Ben Lindstrom
c4bcb7d9e3 - markus@cvs.openbsd.org 2001/05/17 21:34:15
[ssh.1]
     no spaces in PreferredAuthentications;
     meixner@rbg.informatik.tu-darmstadt.de
2001-06-05 18:39:10 +00:00
Tim Rice
36fb6e5862 - (tim) [conifgure.in] add setvbuf test needed for sftp-int.c
Patch by Corinna Vinschen <vinschen@redhat.com>
2001-05-28 10:17:34 -07:00
Ben Lindstrom
b467ddb124 - (bal) Corrected on_exit() emulation via atexit(). 2001-05-17 03:40:05 +00:00
Ben Lindstrom
ca60a9bf66 - (bal) Enabled USE_PIPES for Cygwin on Corinna Vinschen <vinschen@redhat.com> 2001-05-17 03:32:50 +00:00
Ben Lindstrom
b6147ab9e9 - markus@cvs.openbsd.org 2001/05/16 22:09:21
[channels.c nchan.c]
     more select() error fixes (don't set rfd/wfd to -1).
2001-05-17 03:21:27 +00:00
Ben Lindstrom
c8b3f47676 - markus@cvs.openbsd.org 2001/05/16 21:53:53
[clientloop.c]
     check for open sessions before we call select(); fixes the x11 client
     bug reported by bowman@math.ualberta.ca
2001-05-17 03:19:40 +00:00
Ben Lindstrom
06b08018ef - markus@cvs.openbsd.org 2001/05/16 20:51:57
[authfile.c]
     return comments for private pem files, too; report from nolan@naic.edu
2001-05-17 03:17:55 +00:00
Ben Lindstrom
7121507b19 - deraadt@cvs.openbsd.org 2001/05/15 22:04:01
[ssh.1]
     X11 forwarding details improved
2001-05-17 03:16:18 +00:00
Ben Lindstrom
abbb73d089 - markus@cvs.openbsd.org 2001/05/12 19:53:13
[sftp-server.c]
     readlink does not NULL-terminate; mhe@home.se
2001-05-17 03:14:57 +00:00
Ben Lindstrom
6ef3964c79 - (bal) Patch to partial sync up contrib/solaris/ packaging software.
Patch by pete <ninjaz@webexpress.com>
2001-05-12 16:50:50 +00:00
Ben Lindstrom
c93e84c2ce - markus@cvs.openbsd.org 2001/05/11 14:59:56
[clientloop.c misc.c misc.h]
     add unset_nonblock for stdout/err flushing in client_loop().
2001-05-12 00:08:37 +00:00
Ben Lindstrom
ddb4f24056 - markus@cvs.openbsd.org 2001/05/09 23:01:31
[rijndael.h]
     fix prototype; J.S.Peatfield@damtp.cam.ac.uk
2001-05-10 23:26:11 +00:00
Ben Lindstrom
6d618466e8 - markus@cvs.openbsd.org 2001/05/09 22:51:57
[channels.c]
     fix -R for protocol 2, noticed by greg@nest.cx.
     bug was introduced with experimental dynamic forwarding.
2001-05-10 23:24:49 +00:00
Ben Lindstrom
6aebb340fb - (bal) Updates from the Sony NEWS-OS platform by NAKAJI Hiroyuki
<nakaji@tutrp.tut.ac.jp>
2001-05-09 00:38:19 +00:00
Ben Lindstrom
56b9d459ff - markus@cvs.openbsd.org 2001/05/08 22:48:07
[atomicio.c]
     no need for xmalloc.h, thanks to espie@
2001-05-09 00:02:52 +00:00
Ben Lindstrom
a69d89bb45 I have no clue how this file was mised.. <frown>
- markus@cvs.openbsd.org 2001/05/08 19:17:31
     [channels.c serverloop.c clientloop.c]
     adds correct error reporting to async connect()s
     fixes the server-discards-data-before-connected-bug found by
     onoe@sm.sony.co.jp
2001-05-09 00:01:18 +00:00
Ben Lindstrom
23fedf5e49 - markus@cvs.openbsd.org 2001/05/06 21:45:14
[clientloop.c]
     use atomicio for flushing stdout/stderr bufs. thanks to
     jbw@izanami.cee.hw.ac.uk
2001-05-08 23:58:37 +00:00
Ben Lindstrom
72af2ef8db - (bal) ./configure support to disable SIA on OSF1. Patch by
Chris Adams <cmadams@hiwaay.net>
2001-05-08 20:42:28 +00:00
Ben Lindstrom
97c677d4f0 - (bal) UseLogin patch for Solaris/UNICOS. Patch by Wayne Davison
<wayne@blorf.net>
2001-05-08 20:33:05 +00:00
Ben Lindstrom
387c472660 - mouring@cvs.openbsd.org 2001/05/08 19:45:25
[misc.c misc.h scp.c sftp.c]
     Use addargs() in sftp plus some clean up of addargs().  OK Markus
2001-05-08 20:27:25 +00:00
Ben Lindstrom
6912866893 - markus@cvs.openbsd.org 2001/05/08 19:17:31
[channels.c serverloop.c]
     adds correct error reporting to async connect()s
     fixes the server-discards-data-before-connected-bug found by
     onoe@sm.sony.co.jp
2001-05-08 20:07:39 +00:00
Ben Lindstrom
e487d84e03 - markus@cvs.openbsd.org 2001/05/06 21:23:31
[cli.c]
     cli_read() fails to catch SIGINT + overflow; from obdb@zzlevo.net
2001-05-08 20:05:44 +00:00
Ben Lindstrom
253effb61d - (bal) Fixed configure test for USE_SIA. 2001-05-07 12:54:26 +00:00
Ben Lindstrom
f278613f5e - (bal) CVS ID updates for readpass.c, readpass.h, cli.c, and cli.h 2001-05-06 18:01:43 +00:00
Ben Lindstrom
aafff9cc76 - stevesk@cvs.openbsd.org 2001/05/05 13:42:52
[sftp.1 ssh-add.1 ssh-keygen.1]
     typos, grammar
2001-05-06 03:01:02 +00:00
Ben Lindstrom
93d1fe8112 - (bal) Add 'seed_rng()' to ssh-add.c 2001-05-06 02:57:20 +00:00
Ben Lindstrom
5428bea574 - (bal) White Space and #ifdef sync with OpenBSD 2001-05-06 02:53:25 +00:00
Damien Miller
5bf5f2c8f8 - (djm) Update config.guess and config.sub with latest versions (from
ftp://ftp.gnu.org/gnu/config/) to allow configure on ia64-hpux.
   Suggested by Jason Mader <jason@ncac.gwu.edu>
2001-05-06 10:54:15 +10:00
Ben Lindstrom
99c73b377a - markus@cvs.openbsd.org 2001/05/04 23:47:34
[channels.c channels.h clientloop.c nchan.c nchan.h serverloop.c ssh.c]
     move to Channel **channels (instead of Channel *channels), fixes realloc
     problems.  channel_new now returns a Channel *, favour Channel * over
     channel id.  remove old channel_allocate interface.
2001-05-05 04:09:47 +00:00
Ben Lindstrom
c8cb8c0405 - markus@cvs.openbsd.org 2001/05/04 14:34:34
[channels.c]
     channel_new() reallocs channels[], we cannot use Channel *c after calling
     channel_new(), XXX fix this in the future...
2001-05-04 22:40:28 +00:00
Ben Lindstrom
f0609f8bd3 - stevesk@cvs.openbsd.org 2001/05/04 14:21:56
[ssh.1 sshd.8]
     typos
2001-05-04 22:38:43 +00:00
Ben Lindstrom
4529b70b4c - mouring@cvs.openbsd.org 2001/05/03 23:09:53
[misc.c misc.h scp.c sftp.c]
     Move colon() and cleanhost() to misc.c where I should I have put it in
     the first place
2001-05-03 23:39:53 +00:00