blob: cf93dc9fe7f7a536082bfc9ca92962ee456857ea [file] [log] [blame]
Damien Millercede1db2010-07-02 13:33:48 +1000120100702
2 - (djm) OpenBSD CVS Sync
3 - jmc@cvs.openbsd.org 2010/06/26 00:57:07
4 [ssh_config.5]
5 tweak previous;
Damien Millerb96c4412010-07-02 13:34:24 +10006 - djm@cvs.openbsd.org 2010/06/26 23:04:04
7 [ssh.c]
8 oops, forgot to #include <canohost.h>; spotted and patch from chl@
Damien Miller44b25042010-07-02 13:35:01 +10009 - djm@cvs.openbsd.org 2010/06/29 23:15:30
10 [ssh-keygen.1 ssh-keygen.c]
11 allow import (-i) and export (-e) of PEM and PKCS#8 encoded keys;
12 bz#1749; ok markus@
Damien Miller6018a362010-07-02 13:35:19 +100013 - djm@cvs.openbsd.org 2010/06/29 23:16:46
14 [auth2-pubkey.c sshd_config.5]
15 allow key options (command="..." and friends) in AuthorizedPrincipals;
16 ok markus@
Damien Millerea727282010-07-02 13:35:34 +100017 - jmc@cvs.openbsd.org 2010/06/30 07:24:25
18 [ssh-keygen.1]
19 tweak previous;
Damien Miller6022f582010-07-02 13:37:01 +100020 - jmc@cvs.openbsd.org 2010/06/30 07:26:03
21 [ssh-keygen.c]
22 sort usage();
Damien Millerd59dab82010-07-02 13:37:17 +100023 - jmc@cvs.openbsd.org 2010/06/30 07:28:34
24 [sshd_config.5]
25 tweak previous;
Damien Miller0979b402010-07-02 13:37:33 +100026 - millert@cvs.openbsd.org 2010/07/01 13:06:59
27 [scp.c]
28 Fix a longstanding problem where if you suspend scp at the
29 password/passphrase prompt the terminal mode is not restored.
30 OK djm@
Damien Millercede1db2010-07-02 13:33:48 +100031
Tim Rice3fd307d2010-06-26 16:45:15 -07003220100627
33 - (tim) [openbsd-compat/port-uw.c] Reorder includes. auth-options.h now needs
34 key.h.
35
Damien Miller2e774462010-06-26 09:30:47 +10003620100626
37 - (djm) OpenBSD CVS Sync
38 - djm@cvs.openbsd.org 2010/05/21 05:00:36
39 [misc.c]
40 colon() returns char*, so s/return (0)/return NULL/
Damien Miller4fe686d2010-06-26 09:36:10 +100041 - markus@cvs.openbsd.org 2010/06/08 21:32:19
42 [ssh-pkcs11.c]
43 check length of value returned C_GetAttributValue for != 0
44 from mdrtbugzilla@codefive.co.uk; bugzilla #1773; ok dtucker@
Damien Millerc094d1e2010-06-26 09:36:34 +100045 - djm@cvs.openbsd.org 2010/06/17 07:07:30
46 [mux.c]
47 Correct sizing of object to be allocated by calloc(), replacing
48 sizeof(state) with sizeof(*state). This worked by accident since
49 the struct contained a single int at present, but could have broken
50 in the future. patch from hyc AT symas.com
Damien Miller99ac4e92010-06-26 09:36:58 +100051 - djm@cvs.openbsd.org 2010/06/18 00:58:39
52 [sftp.c]
53 unbreak ls in working directories that contains globbing characters in
54 their pathnames. bz#1655 reported by vgiffin AT apple.com
Damien Miller7aa46ec2010-06-26 09:37:57 +100055 - djm@cvs.openbsd.org 2010/06/18 03:16:03
56 [session.c]
57 Missing check for chroot_director == "none" (we already checked against
58 NULL); bz#1564 from Jan.Pechanec AT Sun.COM
Damien Miller49566312010-06-26 09:38:23 +100059 - djm@cvs.openbsd.org 2010/06/18 04:43:08
60 [sftp-client.c]
61 fix memory leak in do_realpath() error path; bz#1771, patch from
62 anicka AT suse.cz
Damien Millerab6de352010-06-26 09:38:45 +100063 - djm@cvs.openbsd.org 2010/06/22 04:22:59
64 [servconf.c sshd_config.5]
65 expose some more sshd_config options inside Match blocks:
66 AuthorizedKeysFile AuthorizedPrincipalsFile
67 HostbasedUsesNameFromPacketOnly PermitTunnel
68 bz#1764; feedback from imorgan AT nas.nasa.gov; ok dtucker@
Damien Millerba3420a2010-06-26 09:39:07 +100069 - djm@cvs.openbsd.org 2010/06/22 04:32:06
70 [ssh-keygen.c]
71 standardise error messages when attempting to open private key
72 files to include "progname: filename: error reason"
73 bz#1783; ok dtucker@
Damien Miller48147d62010-06-26 09:39:25 +100074 - djm@cvs.openbsd.org 2010/06/22 04:49:47
75 [auth.c]
76 queue auth debug messages for bad ownership or permissions on the user's
77 keyfiles. These messages will be sent after the user has successfully
78 authenticated (where our client will display them with LogLevel=debug).
Damien Miller0e76c5e2010-06-26 09:39:59 +100079 bz#1554; ok dtucker@
80 - djm@cvs.openbsd.org 2010/06/22 04:54:30
81 [ssh-keyscan.c]
82 replace verbose and overflow-prone Linebuf code with read_keyfile_line()
83 based on patch from joachim AT joachimschipper.nl; bz#1565; ok dtucker@
Damien Miller1b2b61e2010-06-26 09:47:43 +100084 - djm@cvs.openbsd.org 2010/06/22 04:59:12
85 [session.c]
86 include the user name on "subsystem request for ..." log messages;
87 bz#1571; ok dtucker@
Damien Millerd834d352010-06-26 09:48:02 +100088 - djm@cvs.openbsd.org 2010/06/23 02:59:02
89 [ssh-keygen.c]
90 fix printing of extensions in v01 certificates that I broke in r1.190
Damien Miller232cfb12010-06-26 09:50:30 +100091 - djm@cvs.openbsd.org 2010/06/25 07:14:46
92 [channels.c mux.c readconf.c readconf.h ssh.h]
93 bz#1327: remove hardcoded limit of 100 permitopen clauses and port
94 forwards per direction; ok markus@ stevesk@
Damien Miller8853ca52010-06-26 10:00:14 +100095 - djm@cvs.openbsd.org 2010/06/25 07:20:04
96 [channels.c session.c]
97 bz#1750: fix requirement for /dev/null inside ChrootDirectory for
98 internal-sftp accidentally introduced in r1.253 by removing the code
99 that opens and dup /dev/null to stderr and modifying the channels code
100 to read stderr but discard it instead; ok markus@
Damien Millerbda3eca2010-06-26 10:01:33 +1000101 - djm@cvs.openbsd.org 2010/06/25 08:46:17
102 [auth1.c auth2-none.c]
103 skip the initial check for access with an empty password when
104 PermitEmptyPasswords=no; bz#1638; ok markus@
Damien Miller383ffe62010-06-26 10:02:03 +1000105 - djm@cvs.openbsd.org 2010/06/25 23:10:30
106 [ssh.c]
107 log the hostname and address that we connected to at LogLevel=verbose
108 after authentication is successful to mitigate "phishing" attacks by
109 servers with trusted keys that accept authentication silently and
110 automatically before presenting fake password/passphrase prompts;
111 "nice!" markus@
Damien Miller1ab6a512010-06-26 10:02:24 +1000112 - djm@cvs.openbsd.org 2010/06/25 23:10:30
113 [ssh.c]
114 log the hostname and address that we connected to at LogLevel=verbose
115 after authentication is successful to mitigate "phishing" attacks by
116 servers with trusted keys that accept authentication silently and
117 automatically before presenting fake password/passphrase prompts;
118 "nice!" markus@
Damien Miller2e774462010-06-26 09:30:47 +1000119
Damien Millerd82a2602010-06-22 15:02:39 +100012020100622
121 - (djm) [loginrec.c] crank LINFO_NAMESIZE (username length) to 512
122 bz#1579; ok dtucker
123
Damien Millerea909792010-06-18 11:09:24 +100012420100618
125 - (djm) [contrib/ssh-copy-id] Update key file explicitly under ~
126 rather than assuming that $CWD == $HOME. bz#1500, patch from
127 timothy AT gelter.com
128
Tim Riceb9ae4ec2010-06-17 11:11:44 -070012920100617
130 - (tim) [contrib/cygwin/README] Remove a reference to the obsolete
131 minires-devel package, and to add the reference to the libedit-devel
132 package since CYgwin now provides libedit. Patch from Corinna Vinschen.
133
Damien Miller3bcce802010-05-21 14:48:16 +100013420100521
135 - (djm) OpenBSD CVS Sync
136 - djm@cvs.openbsd.org 2010/05/07 11:31:26
137 [regress/Makefile regress/cert-userkey.sh]
138 regress tests for AuthorizedPrincipalsFile and "principals=" key option.
139 feedback and ok markus@
Damien Miller3b903822010-05-21 14:56:25 +1000140 - djm@cvs.openbsd.org 2010/05/11 02:58:04
141 [auth-rsa.c]
142 don't accept certificates marked as "cert-authority" here; ok markus@
Damien Millerc6afb5f2010-05-21 14:56:47 +1000143 - djm@cvs.openbsd.org 2010/05/14 00:47:22
144 [ssh-add.c]
145 check that the certificate matches the corresponding private key before
146 grafting it on
Damien Millerd530f5f2010-05-21 14:57:10 +1000147 - djm@cvs.openbsd.org 2010/05/14 23:29:23
148 [channels.c channels.h mux.c ssh.c]
149 Pause the mux channel while waiting for reply from aynch callbacks.
150 Prevents misordering of replies if new requests arrive while waiting.
151
152 Extend channel open confirm callback to allow signalling failure
153 conditions as well as success. Use this to 1) fix a memory leak, 2)
154 start using the above pause mechanism and 3) delay sending a success/
155 failure message on mux slave session open until we receive a reply from
156 the server.
157
158 motivated by and with feedback from markus@
Damien Miller388f6fc2010-05-21 14:57:35 +1000159 - markus@cvs.openbsd.org 2010/05/16 12:55:51
160 [PROTOCOL.mux clientloop.h mux.c readconf.c readconf.h ssh.1 ssh.c]
161 mux support for remote forwarding with dynamic port allocation,
162 use with
163 LPORT=`ssh -S muxsocket -R0:localhost:25 -O forward somehost`
164 feedback and ok djm@
Damien Miller84399552010-05-21 14:58:12 +1000165 - djm@cvs.openbsd.org 2010/05/20 11:25:26
166 [auth2-pubkey.c]
167 fix logspam when key options (from="..." especially) deny non-matching
168 keys; reported by henning@ also bz#1765; ok markus@ dtucker@
Damien Millerd0e4a8e2010-05-21 14:58:32 +1000169 - djm@cvs.openbsd.org 2010/05/20 23:46:02
170 [PROTOCOL.certkeys auth-options.c ssh-keygen.c]
171 Move the permit-* options to the non-critical "extensions" field for v01
172 certificates. The logic is that if another implementation fails to
173 implement them then the connection just loses features rather than fails
174 outright.
175
176 ok markus@
Damien Miller3bcce802010-05-21 14:48:16 +1000177
Darren Tucker5b6d0d02010-05-12 16:51:38 +100017820100511
179 - (dtucker) [Makefile.in] Bug #1770: Link libopenbsd-compat twice to solve
180 circular dependency problem on old or odd platforms. From Tom Lane, ok
181 djm@.
Damien Miller4b1ec832010-05-12 17:49:59 +1000182 - (djm) [openbsd-compat/openssl-compat.h] Fix build breakage on older
183 libcrypto by defining OPENSSL_[DR]SA_MAX_MODULUS_BITS if they aren't
184 already. ok dtucker@
Darren Tucker5b6d0d02010-05-12 16:51:38 +1000185
Damien Miller50af79b2010-05-10 11:52:00 +100018620100510
187 - OpenBSD CVS Sync
188 - djm@cvs.openbsd.org 2010/04/23 01:47:41
189 [ssh-keygen.c]
190 bz#1740: display a more helpful error message when $HOME is
191 inaccessible while trying to create .ssh directory. Based on patch
192 from jchadima AT redhat.com; ok dtucker@
Damien Miller85c50d72010-05-10 11:53:02 +1000193 - djm@cvs.openbsd.org 2010/04/23 22:27:38
194 [mux.c]
195 set "detach_close" flag when registering channel cleanup callbacks.
196 This causes the channel to close normally when its fds close and
197 hangs when terminating a mux slave using ~. bz#1758; ok markus@
Damien Miller22a29882010-05-10 11:53:54 +1000198 - djm@cvs.openbsd.org 2010/04/23 22:42:05
199 [session.c]
200 set stderr to /dev/null for subsystems rather than just closing it.
201 avoids hangs if a subsystem or shell initialisation writes to stderr.
202 bz#1750; ok markus@
Damien Millerbebbb7e2010-05-10 11:54:38 +1000203 - djm@cvs.openbsd.org 2010/04/23 22:48:31
204 [ssh-keygen.c]
205 refuse to generate keys longer than OPENSSL_[RD]SA_MAX_MODULUS_BITS,
206 since we would refuse to use them anyway. bz#1516; ok dtucker@
Damien Miller79442c02010-05-10 11:55:38 +1000207 - djm@cvs.openbsd.org 2010/04/26 22:28:24
208 [sshconnect2.c]
209 bz#1502: authctxt.success is declared as an int, but passed by
210 reference to function that accepts sig_atomic_t*. Convert it to
211 the latter; ok markus@ dtucker@
Damien Miller2725c212010-05-10 11:56:14 +1000212 - djm@cvs.openbsd.org 2010/05/01 02:50:50
213 [PROTOCOL.certkeys]
214 typo; jmeltzer@
Damien Miller099fc162010-05-10 11:56:50 +1000215 - dtucker@cvs.openbsd.org 2010/05/05 04:22:09
216 [sftp.c]
217 restore mput and mget which got lost in the tab-completion changes.
218 found by Kenneth Whitaker, ok djm@
Damien Miller30da3442010-05-10 11:58:03 +1000219 - djm@cvs.openbsd.org 2010/05/07 11:30:30
220 [auth-options.c auth-options.h auth.c auth.h auth2-pubkey.c]
221 [key.c servconf.c servconf.h sshd.8 sshd_config.5]
222 add some optional indirection to matching of principal names listed
223 in certificates. Currently, a certificate must include the a user's name
224 to be accepted for authentication. This change adds the ability to
225 specify a list of certificate principal names that are acceptable.
226
227 When authenticating using a CA trusted through ~/.ssh/authorized_keys,
228 this adds a new principals="name1[,name2,...]" key option.
229
230 For CAs listed through sshd_config's TrustedCAKeys option, a new config
231 option "AuthorizedPrincipalsFile" specifies a per-user file containing
232 the list of acceptable names.
233
234 If either option is absent, the current behaviour of requiring the
235 username to appear in principals continues to apply.
236
237 These options are useful for role accounts, disjoint account namespaces
238 and "user@realm"-style naming policies in certificates.
239
240 feedback and ok markus@
Damien Miller81d3fc52010-05-10 11:58:45 +1000241 - jmc@cvs.openbsd.org 2010/05/07 12:49:17
242 [sshd_config.5]
243 tweak previous;
Damien Miller50af79b2010-05-10 11:52:00 +1000244
Darren Tucker9f8703b2010-04-23 11:12:06 +100024520100423
246 - (dtucker) [configure.ac] Bug #1756: Check for the existence of a lib64 dir
247 in the openssl install directory (some newer openssl versions do this on at
248 least some amd64 platforms).
249
Damien Millerc4eddee2010-04-18 08:07:43 +100025020100418
251 - OpenBSD CVS Sync
252 - jmc@cvs.openbsd.org 2010/04/16 06:45:01
253 [ssh_config.5]
254 tweak previous; ok djm
Damien Miller1f181422010-04-18 08:08:03 +1000255 - jmc@cvs.openbsd.org 2010/04/16 06:47:04
256 [ssh-keygen.1 ssh-keygen.c]
257 tweak previous; ok djm
Damien Millerc617aa92010-04-18 08:08:20 +1000258 - djm@cvs.openbsd.org 2010/04/16 21:14:27
259 [sshconnect.c]
260 oops, %r => remote username, not %u
Damien Miller53f4bb62010-04-18 08:15:14 +1000261 - djm@cvs.openbsd.org 2010/04/16 01:58:45
262 [regress/cert-hostkey.sh regress/cert-userkey.sh]
263 regression tests for v01 certificate format
264 includes interop tests for v00 certs
Darren Tuckere25a9bd2010-04-18 13:35:00 +1000265 - (dtucker) [contrib/aix/buildbff.sh] Fix creation of ssh_prng_cmds.default
266 file.
Damien Millerc4eddee2010-04-18 08:07:43 +1000267
Damien Millera45f1c02010-04-16 15:51:34 +100026820100416
269 - (djm) Release openssh-5.5p1
Damien Millerd6fc3062010-04-16 15:51:45 +1000270 - OpenBSD CVS Sync
271 - djm@cvs.openbsd.org 2010/03/26 03:13:17
272 [bufaux.c]
273 allow buffer_get_int_ret/buffer_get_int64_ret to take a NULL pointer
274 argument to allow skipping past values in a buffer
Damien Miller67f30d72010-04-16 15:52:03 +1000275 - jmc@cvs.openbsd.org 2010/03/26 06:54:36
276 [ssh.1]
277 tweak previous;
Damien Miller544378d2010-04-16 15:52:24 +1000278 - jmc@cvs.openbsd.org 2010/03/27 14:26:55
279 [ssh_config.5]
280 tweak previous; ok dtucker
Damien Millerdeb5a142010-04-16 15:52:43 +1000281 - djm@cvs.openbsd.org 2010/04/10 00:00:16
282 [ssh.c]
283 bz#1746 - suppress spurious tty warning when using -O and stdin
284 is not a tty; ok dtucker@ markus@
Damien Miller67283992010-04-16 15:53:02 +1000285 - djm@cvs.openbsd.org 2010/04/10 00:04:30
286 [sshconnect.c]
287 fix terminology: we didn't find a certificate in known_hosts, we found
288 a CA key
Damien Miller22c97f12010-04-16 15:53:23 +1000289 - djm@cvs.openbsd.org 2010/04/10 02:08:44
290 [clientloop.c]
291 bz#1698: kill channel when pty allocation requests fail. Fixed
292 stuck client if the server refuses pty allocation.
293 ok dtucker@ "think so" markus@
Damien Miller88680652010-04-16 15:53:43 +1000294 - djm@cvs.openbsd.org 2010/04/10 02:10:56
295 [sshconnect2.c]
296 show the key type that we are offering in debug(), helps distinguish
297 between certs and plain keys as the path to the private key is usually
298 the same.
Damien Miller601a23c2010-04-16 15:54:01 +1000299 - djm@cvs.openbsd.org 2010/04/10 05:48:16
300 [mux.c]
301 fix NULL dereference; from matthew.haub AT alumni.adelaide.edu.au
Damien Millerb1b17042010-04-16 15:54:19 +1000302 - djm@cvs.openbsd.org 2010/04/14 22:27:42
303 [ssh_config.5 sshconnect.c]
304 expand %r => remote username in ssh_config:ProxyCommand;
305 ok deraadt markus
Damien Miller031c9102010-04-16 15:54:44 +1000306 - markus@cvs.openbsd.org 2010/04/15 20:32:55
307 [ssh-pkcs11.c]
308 retry lookup for private key if there's no matching key with CKA_SIGN
309 attribute enabled; this fixes fixes MuscleCard support (bugzilla #1736)
310 ok djm@
Damien Miller4e270b02010-04-16 15:56:21 +1000311 - djm@cvs.openbsd.org 2010/04/16 01:47:26
312 [PROTOCOL.certkeys auth-options.c auth-options.h auth-rsa.c]
313 [auth2-pubkey.c authfd.c key.c key.h myproposal.h ssh-add.c]
314 [ssh-agent.c ssh-dss.c ssh-keygen.1 ssh-keygen.c ssh-rsa.c]
315 [sshconnect.c sshconnect2.c sshd.c]
316 revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with the
317 following changes:
318
319 move the nonce field to the beginning of the certificate where it can
320 better protect against chosen-prefix attacks on the signature hash
321
322 Rename "constraints" field to "critical options"
323
324 Add a new non-critical "extensions" field
325
326 Add a serial number
327
328 The older format is still support for authentication and cert generation
329 (use "ssh-keygen -t v00 -s ca_key ..." to generate a v00 certificate)
330
331 ok markus@
Damien Millera45f1c02010-04-16 15:51:34 +1000332
Darren Tucker627337d2010-04-10 22:58:01 +100033320100410
334 - (dtucker) [configure.ac] Put the check for the existence of getaddrinfo
335 back so we disable the IPv6 tests if we don't have it.
336
Darren Tucker537d4dc2010-04-09 13:35:23 +100033720100409
338 - (dtucker) [contrib/cygwin/Makefile] Don't overwrite files with the wrong
339 ones. Based on a patch from Roumen Petrov.
Darren Tuckerc4ccb122010-04-09 14:04:35 +1000340 - (dtucker) [configure.ac] Bug #1744: use pkg-config for libedit flags if we
341 have it and the path is not provided to --with-libedit. Based on a patch
342 from Iain Morgan.
Darren Tucker261d93a2010-04-09 18:13:27 +1000343 - (dtucker) [configure.ac defines.h loginrec.c logintest.c] Bug #1732: enable
344 utmpx support on FreeBSD where possible. Patch from Ed Schouten, ok djm@
Darren Tucker537d4dc2010-04-09 13:35:23 +1000345
Damien Miller7d09b8f2010-03-26 08:52:02 +110034620100326
347 - (djm) [openbsd-compat/bsd-arc4random.c] Fix preprocessor detection
348 for arc4random_buf() and arc4random_uniform(); from Josh Gilkerson
Darren Tuckera83d90f2010-03-26 10:27:33 +1100349 - (dtucker) [configure.ac] Bug #1741: Add section for Haiku, patch originally
350 by Ingo Weinhold via Scott McCreary, ok djm@
Damien Miller44451d02010-03-26 10:40:04 +1100351 - (djm) OpenBSD CVS Sync
352 - djm@cvs.openbsd.org 2010/03/25 23:38:28
353 [servconf.c]
354 from portable: getcwd(NULL, 0) doesn't work on all platforms, so
355 use a stack buffer; ok dtucker@
Damien Miller9c60f242010-03-26 11:28:35 +1100356 - djm@cvs.openbsd.org 2010/03/26 00:26:58
357 [ssh.1]
358 mention that -S none disables connection sharing; from Colin Watson
Damien Miller8b906422010-03-26 11:04:09 +1100359 - (djm) [session.c] Allow ChrootDirectory to work on SELinux platforms -
360 set up SELinux execution context before chroot() call. From Russell
361 Coker via Colin watson; bz#1726 ok dtucker@
Damien Miller6480c632010-03-26 11:09:44 +1100362 - (djm) [channels.c] Check for EPFNOSUPPORT as a socket() errno; bz#1721
363 ok dtucker@
Darren Tuckerffd1eaa2010-03-26 11:16:39 +1100364 - (dtucker) Bug #1725: explicitly link libX11 into gnome-ssh-askpass2 using
365 pkg-config, patch from Colin Watson. Needed for newer linkers (ie gold).
Damien Millerdf083412010-03-26 11:18:27 +1100366 - (djm) [contrib/ssh-copy-id] Don't blow up when the agent has no keys;
367 bz#1723 patch from Adeodato Simóvia Colin Watson; ok dtucker@
Darren Tuckerce3754b2010-03-26 12:09:13 +1100368 - (dtucker) OpenBSD CVS Sync
369 - dtucker@cvs.openbsd.org 2010/03/26 01:06:13
370 [ssh_config.5]
371 Reformat default value of PreferredAuthentications entry (current
372 formatting implies ", " is acceptable as a separator, which it's not.
373 ok djm@
Damien Miller7d09b8f2010-03-26 08:52:02 +1100374
Darren Tucker62131dc2010-03-24 13:03:32 +110037520100324
376 - (dtucker) [contrib/cygwin/ssh-host-config] Mount the Windows directory
377 containing the services file explicitely case-insensitive. This allows to
378 tweak the Windows services file reliably. Patch from vinschen at redhat.
379
Damien Millerc59e2442010-03-22 05:50:31 +110038020100321
381 - (djm) OpenBSD CVS Sync
382 - jmc@cvs.openbsd.org 2010/03/08 09:41:27
383 [ssh-keygen.1]
384 sort the list of constraints (to -O); ok djm
Damien Miller77497e12010-03-22 05:50:51 +1100385 - jmc@cvs.openbsd.org 2010/03/10 07:40:35
386 [ssh-keygen.1]
387 typos; from Ross Richardson
388 closes prs 6334 and 6335
Damien Millere513a912010-03-22 05:51:21 +1100389 - djm@cvs.openbsd.org 2010/03/10 23:27:17
390 [auth2-pubkey.c]
391 correct certificate logging and make it more consistent between
392 authorized_keys and TrustedCAKeys; ok markus@
Damien Millerc4cb47b2010-03-22 05:52:26 +1100393 - djm@cvs.openbsd.org 2010/03/12 01:06:25
394 [servconf.c]
395 unbreak AuthorizedKeys option with a $HOME-relative path; reported by
396 vinschen AT redhat.com, ok dtucker@
Damien Miller4a5f0d32010-03-22 05:53:04 +1100397 - markus@cvs.openbsd.org 2010/03/12 11:37:40
398 [servconf.c]
399 do not prepend AuthorizedKeysFile with getcwd(), unbreaks relative paths
400 free() (not xfree()) the buffer returned by getcwd()
Damien Miller8ddc71c2010-03-22 05:54:02 +1100401 - djm@cvs.openbsd.org 2010/03/13 21:10:38
402 [clientloop.c]
403 protocol conformance fix: send language tag when disconnecting normally;
404 spotted by 1.41421 AT gmail.com, ok markus@ deraadt@
Damien Miller1b61a282010-03-22 05:55:06 +1100405 - djm@cvs.openbsd.org 2010/03/13 21:45:46
406 [ssh-keygen.1]
407 Certificates are named *-cert.pub, not *_cert.pub; committing a diff
408 from stevesk@ ok me
Damien Miller5a5d94b2010-03-22 05:57:49 +1100409 - jmc@cvs.openbsd.org 2010/03/13 23:38:13
410 [ssh-keygen.1]
411 fix a formatting error (args need quoted); noted by stevesk
Damien Miller1cfbfaf2010-03-22 05:58:24 +1100412 - stevesk@cvs.openbsd.org 2010/03/15 19:40:02
413 [key.c key.h ssh-keygen.c]
414 also print certificate type (user or host) for ssh-keygen -L
415 ok djm kettenis
Damien Miller33334b22010-03-22 05:59:02 +1100416 - stevesk@cvs.openbsd.org 2010/03/16 15:46:52
417 [auth-options.c]
418 spelling in error message. ok djm kettenis
Damien Miller13a9f722010-03-22 05:59:22 +1100419 - djm@cvs.openbsd.org 2010/03/16 16:36:49
420 [version.h]
421 crank version to openssh-5.5 since we have a few fixes since 5.4;
422 requested deraadt@ kettenis@
Damien Millerb086d4a2010-03-22 06:11:55 +1100423 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
424 [contrib/suse/openssh.spec] Crank version numbers
Damien Millerc59e2442010-03-22 05:50:31 +1100425
Damien Miller47f9a412010-03-14 08:37:49 +110042620100314
427 - (djm) [ssh-pkcs11-helper.c] Move #ifdef to after #defines to fix
428 compilation failure when !HAVE_DLOPEN. Reported by felix-mindrot
429 AT fefe.de
Damien Miller1f574b22010-03-14 08:41:34 +1100430 - (djm) [Makefile.in] Respecify -lssh after -lopenbsd-compat for
431 ssh-pkcs11-helper to repair static builds (we do the same for
432 ssh-keyscan). Reported by felix-mindrot AT fefe.de
Damien Miller47f9a412010-03-14 08:37:49 +1100433
Tim Rice2bde3ee2010-03-11 22:18:13 -080043420100312
Tim Riceded8fa02010-03-11 22:32:02 -0800435 - (tim) [Makefile.in] Now that scard is gone, no need to make $(datadir)
436 - (tim) [Makefile.in] Add missing $(EXEEXT) to install targets.
437 Patch from Corinna Vinschen.
Tim Rice4e0cea82010-03-11 22:35:19 -0800438 - (tim) [contrib/cygwin/Makefile] Fix list of documentation files to install
439 on a Cygwin installation. Patch from Corinna Vinschen.
Tim Rice2bde3ee2010-03-11 22:18:13 -0800440
Tim Ricefa233ba2010-03-10 16:12:02 -080044120100311
442 - (tim) [contrib/suse/openssh.spec] crank version number here too.
443 report by imorgan AT nas.nasa.gov
444
Darren Tuckerc9fe39b2010-03-09 20:42:30 +110044520100309
446 - (dtucker) [configure.ac] Use a proper AC_CHECK_DECL for BROKEN_GETADDRINFO
447 so setting it in CFLAGS correctly skips IPv6 tests.
448
44920100308
Damien Millerb3bc3312010-03-08 09:03:33 +1100450 - (djm) OpenBSD CVS Sync
Damien Miller3e1ee492010-03-08 09:24:11 +1100451 - djm@cvs.openbsd.org 2010/03/07 22:16:01
452 [ssh-keygen.c]
453 make internal strptime string match strftime format;
454 suggested by vinschen AT redhat.com and markus@
Damien Miller081c9762010-03-08 11:30:00 +1100455 - djm@cvs.openbsd.org 2010/03/08 00:28:55
456 [ssh-keygen.1]
457 document permit-agent-forwarding certificate constraint; patch from
458 stevesk@
Damien Millerb3bc3312010-03-08 09:03:33 +1100459 - djm@cvs.openbsd.org 2010/03/07 22:01:32
460 [version.h]
461 openssh-5.4
Damien Miller6bf31782010-03-08 09:41:02 +1100462 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
463 crank version numbers
Damien Miller95867872010-03-08 09:50:17 +1100464 - (djm) Release OpenSSH-5.4p1
Damien Millerb3bc3312010-03-08 09:03:33 +1100465
46620100307
Darren Tuckerb3d20a32010-03-07 11:56:59 +1100467 - (dtucker) [auth.c] Bug #1710: call setauthdb on AIX before getpwuid so that
468 it gets the passwd struct from the LAM that knows about the user which is
469 not necessarily the default. Patch from Alexandre Letourneau.
Darren Tuckerc738e6c2010-03-07 13:21:12 +1100470 - (dtucker) [session.c] Bug #1567: move setpcred call to before chroot and
471 do not set real uid, since that's needed for the chroot, and will be set
472 by permanently_set_uid.
Darren Tuckerac0c4c92010-03-07 13:32:16 +1100473 - (dtucker) [session.c] Also initialize creds to NULL for handing to
474 setpcred.
Darren Tuckercd70e1b2010-03-07 23:05:17 +1100475 - (dtucker) OpenBSD CVS Sync
476 - dtucker@cvs.openbsd.org 2010/03/07 11:57:13
477 [auth-rhosts.c monitor.c monitor_wrap.c session.c auth-options.c sshd.c]
478 Hold authentication debug messages until after successful authentication.
479 Fixes an info leak of environment variables specified in authorized_keys,
480 reported by Jacob Appelbaum. ok djm@
Darren Tuckerb3d20a32010-03-07 11:56:59 +1100481
Damien Miller72b33822010-03-05 07:39:01 +110048220100305
483 - OpenBSD CVS Sync
484 - jmc@cvs.openbsd.org 2010/03/04 12:51:25
485 [ssh.1 sshd_config.5]
486 tweak previous;
Damien Millerf2b70ca2010-03-05 07:39:35 +1100487 - djm@cvs.openbsd.org 2010/03/04 20:35:08
488 [ssh-keygen.1 ssh-keygen.c]
489 Add a -L flag to print the contents of a certificate; ok markus@
Damien Miller8f6c3372010-03-05 10:41:26 +1100490 - jmc@cvs.openbsd.org 2010/03/04 22:52:40
491 [ssh-keygen.1]
492 fix Bk/Ek;
Damien Millerc6db99e2010-03-05 10:41:45 +1100493 - djm@cvs.openbsd.org 2010/03/04 23:17:25
494 [sshd_config.5]
495 missing word; spotted by jmc@
Damien Millera7dab8b2010-03-05 10:42:05 +1100496 - djm@cvs.openbsd.org 2010/03/04 23:19:29
497 [ssh.1 sshd.8]
498 move section on CA and revoked keys from ssh.1 to sshd.8's known hosts
499 format section and rework it a bit; requested by jmc@
Damien Miller689b8722010-03-05 10:42:24 +1100500 - djm@cvs.openbsd.org 2010/03/04 23:27:25
501 [auth-options.c ssh-keygen.c]
502 "force-command" is not spelled "forced-command"; spotted by
503 imorgan AT nas.nasa.gov
Damien Millerb068d0a2010-03-05 14:03:03 +1100504 - djm@cvs.openbsd.org 2010/03/05 02:58:11
505 [auth.c]
506 make the warning for a revoked key louder and more noticable
Damien Miller98339052010-03-05 21:30:35 +1100507 - jmc@cvs.openbsd.org 2010/03/05 06:50:35
508 [ssh.1 sshd.8]
509 tweak previous;
Damien Miller922b5412010-03-05 21:30:54 +1100510 - jmc@cvs.openbsd.org 2010/03/05 08:31:20
511 [ssh.1]
512 document certificate authentication; help/ok djm
Damien Miller5059d8d2010-03-05 21:31:11 +1100513 - djm@cvs.openbsd.org 2010/03/05 10:28:21
514 [ssh-add.1 ssh.1 ssh_config.5]
515 mention loading of certificate files from [private]-cert.pub when
516 they are present; feedback and ok jmc@
Tim Rice179eee02010-03-04 12:48:05 -0800517 - (tim) [ssh-pkcs11.c] Fix "non-constant initializer" errors in older
518 compilers. OK djm@
Damien Miller48b60212010-03-05 11:40:19 +1100519 - (djm) [ssh-rand-helper.c] declare optind, avoiding compilation failure
520 on some platforms
Damien Miller9527f222010-03-05 15:04:35 +1100521 - (djm) [configure.ac] set -fno-strict-aliasing for gcc4; ok dtucker@
Damien Miller72b33822010-03-05 07:39:01 +1100522
Damien Miller910f2092010-03-04 14:17:22 +110052320100304
524 - (djm) [ssh-keygen.c] Use correct local variable, instead of
525 maybe-undefined global "optarg"
Damien Miller661ffc12010-03-04 21:09:24 +1100526 - (djm) [contrib/redhat/openssh.spec] Replace obsolete BuildPreReq
527 on XFree86-devel with neutral /usr/include/X11/Xlib.h;
528 imorgan AT nas.nasa.gov in bz#1731
Damien Millerd45f3b62010-03-04 21:09:46 +1100529 - (djm) [.cvsignore] Ignore ssh-pkcs11-helper
Damien Millere1abf4d2010-03-04 21:41:29 +1100530 - (djm) [regress/Makefile] Cleanup sshd_proxy_orig
Damien Miller41396572010-03-04 21:51:11 +1100531 - OpenBSD CVS Sync
532 - djm@cvs.openbsd.org 2010/03/03 01:44:36
533 [auth-options.c key.c]
534 reject strings with embedded ASCII nul chars in certificate key IDs,
535 principal names and constraints
Damien Millercd38c9c2010-03-04 21:51:37 +1100536 - djm@cvs.openbsd.org 2010/03/03 22:49:50
537 [sshd.8]
538 the authorized_keys option for CA keys is "cert-authority", not
539 "from=cert-authority". spotted by imorgan AT nas.nasa.gov
Damien Millerfe588e32010-03-04 21:52:00 +1100540 - djm@cvs.openbsd.org 2010/03/03 22:50:40
541 [PROTOCOL.certkeys]
542 s/similar same/similar/; from imorgan AT nas.nasa.gov
Damien Miller2befbad2010-03-04 21:52:18 +1100543 - djm@cvs.openbsd.org 2010/03/04 01:44:57
544 [key.c]
545 use buffer_get_string_ptr_ret() where we are checking the return
546 value explicitly instead of the fatal()-causing buffer_get_string_ptr()
Damien Miller1aed65e2010-03-04 21:53:35 +1100547 - djm@cvs.openbsd.org 2010/03/04 10:36:03
548 [auth-rh-rsa.c auth-rsa.c auth.c auth.h auth2-hostbased.c auth2-pubkey.c]
549 [authfile.c authfile.h hostfile.c hostfile.h servconf.c servconf.h]
550 [ssh-keygen.c ssh.1 sshconnect.c sshd_config.5]
551 Add a TrustedUserCAKeys option to sshd_config to specify CA keys that
552 are trusted to authenticate users (in addition than doing it per-user
553 in authorized_keys).
554
555 Add a RevokedKeys option to sshd_config and a @revoked marker to
556 known_hosts to allow keys to me revoked and banned for user or host
557 authentication.
558
559 feedback and ok markus@
Damien Miller017d1e72010-03-04 21:57:21 +1100560 - djm@cvs.openbsd.org 2010/03/03 00:47:23
561 [regress/cert-hostkey.sh regress/cert-userkey.sh]
562 add an extra test to ensure that authentication with the wrong
563 certificate fails as it should (and it does)
Damien Miller700dcfa2010-03-04 21:58:01 +1100564 - djm@cvs.openbsd.org 2010/03/04 10:38:23
565 [regress/cert-hostkey.sh regress/cert-userkey.sh]
566 additional regression tests for revoked keys and TrustedUserCAKeys
Damien Miller910f2092010-03-04 14:17:22 +1100567
Damien Miller25b97dd2010-03-03 10:24:00 +110056820100303
569 - (djm) [PROTOCOL.certkeys] Add RCS Ident
Damien Miller15f5b562010-03-03 10:25:21 +1100570 - OpenBSD CVS Sync
571 - jmc@cvs.openbsd.org 2010/02/26 22:09:28
572 [ssh-keygen.1 ssh.1 sshd.8]
573 tweak previous;
Damien Miller0bd41862010-03-03 10:25:41 +1100574 - otto@cvs.openbsd.org 2010/03/01 11:07:06
575 [ssh-add.c]
576 zap what seems to be a left-over debug message; ok markus@
Damien Millerfb84e592010-03-03 10:26:04 +1100577 - djm@cvs.openbsd.org 2010/03/02 23:20:57
578 [ssh-keygen.c]
579 POSIX strptime is stricter than OpenBSD's so do a little dance to
580 appease it.
Damien Miller386dbc02010-03-03 13:22:41 +1100581 - (djm) [regress/cert-userkey.sh] s/echo -n/echon/ here too
Damien Miller25b97dd2010-03-03 10:24:00 +1100582
Tim Ricec5b0cb32010-03-01 15:57:42 -080058320100302
584 - (tim) [config.guess config.sub] Bug 1722: Update to latest versions from
585 http://git.savannah.gnu.org/gitweb/ (2009-12-30 and 2010-01-22
586 respectively).
587
Darren Tuckerc614c782010-03-01 12:49:05 +110058820100301
589 - (dtucker) [regress/{cert-hostkey,cfgmatch,cipher-speed}.sh} Replace
590 "echo -n" with "echon" for portability.
Darren Tucker9af0cb92010-03-01 15:52:49 +1100591 - (dtucker) [openbsd-compat/port-linux.c] Make failure to write to the OOM
592 adjust log at verbose only, since according to cjwatson in bug #1470
593 some virtualization platforms don't allow writes.
Darren Tuckerc614c782010-03-01 12:49:05 +1100594
Damien Milleracc9b292010-03-01 04:36:54 +110059520100228
596 - (djm) [auth.c] On Cygwin, refuse usernames that have differences in
597 case from that matched in the system password database. On this
598 platform, passwords are stored case-insensitively, but sshd requires
599 exact case matching for Match blocks in sshd_config(5). Based on
600 a patch from vinschen AT redhat.com.
Tim Ricebff24b82010-02-28 14:51:56 -0800601 - (tim) [ssh-pkcs11-helper.c] Move declarations before calling functions
602 to make older compilers (gcc 2.95) happy.
Damien Milleracc9b292010-03-01 04:36:54 +1100603
Damien Miller09a24db2010-02-28 03:28:05 +110060420100227
Damien Millerd05951f2010-02-28 03:29:33 +1100605 - (djm) [ssh-pkcs11-helper.c ] Ensure RNG is initialised and seeded
606 - (djm) [openbsd-compat/bsd-cygwin_util.c] Reduce the set of environment
607 variables copied into sshd child processes. From vinschen AT redhat.com
Damien Miller09a24db2010-02-28 03:28:05 +1100608
Damien Miller0a80ca12010-02-27 07:55:05 +110060920100226
610 - OpenBSD CVS Sync
611 - djm@cvs.openbsd.org 2010/02/26 20:29:54
612 [PROTOCOL PROTOCOL.agent PROTOCOL.certkeys addrmatch.c auth-options.c]
613 [auth-options.h auth.h auth2-pubkey.c authfd.c dns.c dns.h hostfile.c]
614 [hostfile.h kex.h kexdhs.c kexgexs.c key.c key.h match.h monitor.c]
615 [myproposal.h servconf.c servconf.h ssh-add.c ssh-agent.c ssh-dss.c]
616 [ssh-keygen.1 ssh-keygen.c ssh-rsa.c ssh.1 ssh.c ssh2.h sshconnect.c]
617 [sshconnect2.c sshd.8 sshd.c sshd_config.5]
618 Add support for certificate key types for users and hosts.
619
620 OpenSSH certificate key types are not X.509 certificates, but a much
621 simpler format that encodes a public key, identity information and
622 some validity constraints and signs it with a CA key. CA keys are
623 regular SSH keys. This certificate style avoids the attack surface
624 of X.509 certificates and is very easy to deploy.
625
626 Certified host keys allow automatic acceptance of new host keys
627 when a CA certificate is marked as trusted in ~/.ssh/known_hosts.
628 see VERIFYING HOST KEYS in ssh(1) for details.
629
630 Certified user keys allow authentication of users when the signing
631 CA key is marked as trusted in authorized_keys. See "AUTHORIZED_KEYS
632 FILE FORMAT" in sshd(8) for details.
633
634 Certificates are minted using ssh-keygen(1), documentation is in
635 the "CERTIFICATES" section of that manpage.
636
637 Documentation on the format of certificates is in the file
638 PROTOCOL.certkeys
639
640 feedback and ok markus@
Damien Miller58ac6de2010-02-27 07:57:12 +1100641 - djm@cvs.openbsd.org 2010/02/26 20:33:21
642 [Makefile regress/cert-hostkey.sh regress/cert-userkey.sh]
643 regression tests for certified keys
Damien Miller0a80ca12010-02-27 07:55:05 +1100644
Damien Miller05abd2c2010-02-24 17:16:08 +110064520100224
646 - (djm) [pkcs11.h ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c]
647 [ssh-pkcs11.h] Add $OpenBSD$ RCS idents so we can sync portable
Damien Millera80f1402010-02-24 17:17:58 +1100648 - (djm) OpenBSD CVS Sync
649 - djm@cvs.openbsd.org 2010/02/11 20:37:47
650 [pathnames.h]
651 correct comment
Damien Millerb6bd3c22010-02-24 17:24:56 +1100652 - dtucker@cvs.openbsd.org 2009/11/09 04:20:04
653 [regress/Makefile]
654 add regression test for ssh-keygen pubkey conversions
Damien Miller0dff9c72010-02-24 17:25:58 +1100655 - dtucker@cvs.openbsd.org 2010/01/11 02:53:44
656 [regress/forwarding.sh]
657 regress test for stdio forwarding
Damien Millerbb4ae552010-02-24 17:26:38 +1100658 - djm@cvs.openbsd.org 2010/02/09 04:57:36
659 [regress/addrmatch.sh]
660 clean up droppings
Damien Miller8f9492c2010-02-24 17:28:45 +1100661 - djm@cvs.openbsd.org 2010/02/09 06:29:02
662 [regress/Makefile]
663 turn on all the malloc(3) checking options when running regression
664 tests. this has caught a few bugs for me in the past; ok dtucker@
Damien Millerc1739212010-02-24 17:29:34 +1100665 - djm@cvs.openbsd.org 2010/02/24 06:21:56
666 [regress/test-exec.sh]
667 wait for sshd to fully stop in cleanup() function; avoids races in tests
668 that do multiple start_sshd/cleanup cycles; "I hate pidfiles" deraadt@
Damien Millercfa42d22010-02-24 17:31:20 +1100669 - markus@cvs.openbsd.org 2010/02/08 10:52:47
670 [regress/agent-pkcs11.sh]
671 test for PKCS#11 support (currently disabled)
Damien Miller43001b32010-02-24 18:18:51 +1100672 - (djm) [Makefile.in ssh-pkcs11-helper.8] Add manpage for PKCS#11 helper
Damien Millerd27d85d2010-02-24 18:21:45 +1100673 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
674 [contrib/suse/openssh.spec] Add PKCS#11 helper binary and manpage
Damien Miller05abd2c2010-02-24 17:16:08 +1100675
Damien Miller17751bc2010-02-12 07:35:08 +110067620100212
677 - (djm) OpenBSD CVS Sync
678 - djm@cvs.openbsd.org 2010/02/02 22:49:34
679 [bufaux.c]
680 make buffer_get_string_ret() really non-fatal in all cases (it was
681 using buffer_get_int(), which could fatal() on buffer empty);
682 ok markus dtucker
Damien Miller7ea845e2010-02-12 09:21:02 +1100683 - markus@cvs.openbsd.org 2010/02/08 10:50:20
684 [pathnames.h readconf.c readconf.h scp.1 sftp.1 ssh-add.1 ssh-add.c]
685 [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config.5]
686 replace our obsolete smartcard code with PKCS#11.
687 ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf
688 ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11
689 provider (shared library) while ssh-agent(1) delegates PKCS#11 to
690 a forked a ssh-pkcs11-helper process.
691 PKCS#11 is currently a compile time option.
692 feedback and ok djm@; inspired by patches from Alon Bar-Lev
Damien Miller048dc932010-02-12 09:22:04 +1100693 - jmc@cvs.openbsd.org 2010/02/08 22:03:05
694 [ssh-add.1 ssh-keygen.1 ssh.1 ssh.c]
695 tweak previous; ok markus
Damien Millera183c6e2010-02-12 09:22:31 +1100696 - djm@cvs.openbsd.org 2010/02/09 00:50:36
697 [ssh-agent.c]
698 fallout from PKCS#11: unbreak -D
Damien Miller86cbb442010-02-12 09:22:57 +1100699 - djm@cvs.openbsd.org 2010/02/09 00:50:59
700 [ssh-keygen.c]
701 fix -Wall
Damien Miller89221062010-02-12 09:23:40 +1100702 - djm@cvs.openbsd.org 2010/02/09 03:56:28
703 [buffer.c buffer.h]
704 constify the arguments to buffer_len, buffer_ptr and buffer_dump
Damien Miller47cf16b2010-02-12 09:25:29 +1100705 - djm@cvs.openbsd.org 2010/02/09 06:18:46
706 [auth.c]
707 unbreak ChrootDirectory+internal-sftp by skipping check for executable
708 shell when chrooting; reported by danh AT wzrd.com; ok dtucker@
Damien Millera7618442010-02-12 09:26:02 +1100709 - markus@cvs.openbsd.org 2010/02/10 23:20:38
710 [ssh-add.1 ssh-keygen.1 ssh.1 ssh_config.5]
711 pkcs#11 is no longer optional; improve wording; ok jmc@
Damien Millerd400da52010-02-12 09:26:23 +1100712 - jmc@cvs.openbsd.org 2010/02/11 13:23:29
713 [ssh.1]
714 libarary -> library;
Damien Millerd8f60022010-02-12 09:34:22 +1100715 - (djm) [INSTALL Makefile.in README.smartcard configure.ac scard-opensc.c]
716 [scard.c scard.h pkcs11.h scard/Makefile.in scard/Ssh.bin.uu scard/Ssh.java]
717 Remove obsolete smartcard support
Damien Miller8ad0fbd2010-02-12 09:49:06 +1100718 - (djm) [ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c]
719 Make it compile on OSX
Damien Millerdfa41562010-02-12 10:06:28 +1100720 - (djm) [ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c]
721 Use ssh_get_progname to fill __progname
Damien Millerb3c9f782010-02-12 10:11:34 +1100722 - (djm) [configure.ac] Enable PKCS#11 support only when we find a working
723 dlopen()
Damien Miller17751bc2010-02-12 07:35:08 +1100724
Damien Miller1d2bfc42010-02-10 10:19:29 +110072520100210
726 - (djm) add -lselinux to LIBS before calling AC_CHECK_FUNCS for
727 getseuserbyname; patch from calebcase AT gmail.com via
728 cjwatson AT debian.org
729
Damien Miller74d98252010-02-02 17:01:46 +110073020100202
731 - (djm) OpenBSD CVS Sync
732 - djm@cvs.openbsd.org 2010/01/30 21:08:33
733 [sshd.8]
734 debug output goes to stderr, not "the system log"; ok markus dtucker
Damien Millerd6369432010-02-02 17:02:07 +1100735 - djm@cvs.openbsd.org 2010/01/30 21:12:08
736 [channels.c]
737 fake local addr:port when stdio fowarding as some servers (Tectia at
738 least) validate that they are well-formed;
739 reported by imorgan AT nas.nasa.gov
740 ok dtucker
Damien Miller74d98252010-02-02 17:01:46 +1100741
Damien Miller36f57eb2010-01-30 17:28:34 +110074220100130
743 - (djm) OpenBSD CVS Sync
744 - djm@cvs.openbsd.org 2010/01/28 00:21:18
745 [clientloop.c]
746 downgrade an error() to a debug() - this particular case can be hit in
747 normal operation for certain sequences of mux slave vs session closure
748 and is harmless
Damien Miller133d9d32010-01-30 17:30:04 +1100749 - djm@cvs.openbsd.org 2010/01/29 00:20:41
750 [sshd.c]
751 set FD_CLOEXEC on sock_in/sock_out; bz#1706 from jchadima AT redhat.com
752 ok dtucker@
Damien Miller0dac03f2010-01-30 17:36:33 +1100753 - djm@cvs.openbsd.org 2010/01/29 20:16:17
754 [mux.c]
755 kill correct channel (was killing already-dead mux channel, not
756 its session channel)
Damien Millerc3ca35f2010-01-30 17:42:01 +1100757 - djm@cvs.openbsd.org 2010/01/30 02:54:53
758 [mux.c]
759 don't mark channel as read failed if it is already closing; suppresses
760 harmless error messages when connecting to SSH.COM Tectia server
761 report by imorgan AT nas.nasa.gov
Damien Miller36f57eb2010-01-30 17:28:34 +1100762
Darren Tucker19d32cb2010-01-29 10:54:11 +110076320100129
764 - (dtucker) [openbsd-compat/openssl-compat.c] Bug #1707: Call OPENSSL_config()
765 after registering the hardware engines, which causes the openssl.cnf file to
766 be processed. See OpenSSL's man page for OPENSSL_config(3) for details.
767 Patch from Solomon Peachy, ok djm@.
768
Damien Miller45a81a02010-01-28 06:26:20 +110076920100128
770 - (djm) OpenBSD CVS Sync
771 - djm@cvs.openbsd.org 2010/01/26 02:15:20
772 [mux.c]
773 -Wuninitialized and remove a // comment; from portable
774 (Id sync only)
Damien Millera21cdfa2010-01-28 06:26:59 +1100775 - djm@cvs.openbsd.org 2010/01/27 13:26:17
776 [mux.c]
777 fix bug introduced in mux rewrite:
778
779 In a mux master, when a socket to a mux slave closes before its server
780 session (as may occur when the slave has been signalled), gracefully
781 close the server session rather than deleting its channel immediately.
782 A server may have more messages on that channel to send (e.g. an exit
783 message) that will fatal() the client if they are sent to a channel that
784 has been prematurely deleted.
785
786 spotted by imorgan AT nas.nasa.gov
Damien Millera1162982010-01-28 06:27:54 +1100787 - djm@cvs.openbsd.org 2010/01/27 19:21:39
788 [sftp.c]
789 add missing "p" flag to getopt optstring;
790 bz#1704 from imorgan AT nas.nasa.gov
Damien Miller45a81a02010-01-28 06:26:20 +1100791
Damien Miller2e68d792010-01-26 12:51:13 +110079220100126
793 - (djm) OpenBSD CVS Sync
794 - tedu@cvs.openbsd.org 2010/01/17 21:49:09
795 [ssh-agent.1]
796 Correct and clarify ssh-add's password asking behavior.
797 Improved text dtucker and ok jmc
Damien Millerf589fd12010-01-26 12:53:06 +1100798 - dtucker@cvs.openbsd.org 2010/01/18 01:50:27
799 [roaming_client.c]
800 s/long long unsigned/unsigned long long/, from tim via portable
801 (Id sync only, change already in portable)
Damien Millere1537f92010-01-26 13:26:22 +1100802 - djm@cvs.openbsd.org 2010/01/26 01:28:35
803 [channels.c channels.h clientloop.c clientloop.h mux.c nchan.c ssh.c]
804 rewrite ssh(1) multiplexing code to a more sensible protocol.
805
806 The new multiplexing code uses channels for the listener and
807 accepted control sockets to make the mux master non-blocking, so
808 no stalls when processing messages from a slave.
809
810 avoid use of fatal() in mux master protocol parsing so an errant slave
811 process cannot take down a running master.
812
813 implement requesting of port-forwards over multiplexed sessions. Any
814 port forwards requested by the slave are added to those the master has
815 established.
816
817 add support for stdio forwarding ("ssh -W host:port ...") in mux slaves.
818
819 document master/slave mux protocol so that other tools can use it to
820 control a running ssh(1). Note: there are no guarantees that this
821 protocol won't be incompatibly changed (though it is versioned).
822
823 feedback Salvador Fandino, dtucker@
824 channel changes ok markus@
Damien Miller2e68d792010-01-26 12:51:13 +1100825
Tim Rice6761c742010-01-22 10:25:15 -080082620100122
827 - (tim) [configure.ac] Due to constraints in Windows Sockets in terms of
828 socket inheritance, reduce the default SO_RCVBUF/SO_SNDBUF buffer size
829 in Cygwin to 65535. Patch from Corinna Vinschen.
830
Tim Rice7ab7b932010-01-17 12:48:22 -080083120100117
832 - (tim) [configure.ac] OpenServer 5 needs BROKEN_GETADDRINFO too.
Tim Rice7bb74712010-01-17 22:49:57 -0800833 - (tim) [configure.ac] On SVR5 systems, use the C99-conforming functions
834 snprintf() and vsnprintf() named _xsnprintf() and _xvsnprintf().
Tim Rice7ab7b932010-01-17 12:48:22 -0800835
Darren Tuckerca944852010-01-16 11:48:27 +110083620100116
837 - (dtucker) [openbsd-compat/pwcache.c] Pull in includes.h and thus defines.h
838 so we correctly detect whether or not we have a native user_from_uid.
Darren Tucker2563e3f2010-01-16 11:53:07 +1100839 - (dtucker) [openbsd-compat/openbsd-compat.h] Prototypes for user_from_uid
840 and group_from_gid.
Darren Tucker69371b52010-01-16 13:30:30 +1100841 - (dtucker) [openbsd-compat/openbsd-compat.h] Fix prototypes, spotted by
842 Tim.
Darren Tuckerdab129b2010-01-16 13:43:50 +1100843 - (dtucker) OpenBSD CVS Sync
844 - markus@cvs.openbsd.org 2010/01/15 09:24:23
845 [sftp-common.c]
846 unused
Darren Tucker612e4002010-01-16 13:53:52 +1100847 - (dtucker) [openbsd-compat/pwcache.c] Shrink ifdef area to prevent unused
848 variable warnings.
Darren Tucker4e218552010-01-16 23:58:37 +1100849 - (dtucker) [openbsd-compat/openbsd-compat.h] Typo.
Tim Rice999aaf42010-01-16 11:37:53 -0800850 - (tim) [regress/portnum.sh] Shell portability fix.
Tim Rice4a7db1c2010-01-16 12:23:25 -0800851 - (tim) [configure.ac] Define BROKEN_GETADDRINFO on SVR5 systems. The native
852 getaddrinfo() is too old and limited for addr_pton() in addrmatch.c.
Tim Rice33e48ac2010-01-17 07:12:40 -0800853 - (tim) [roaming_client.c] Use of <sys/queue.h> is not really portable so we
854 use "openbsd-compat/sys-queue.h". s/long long unsigned/unsigned long long/
855 to keep USL compilers happy.
Darren Tuckerca944852010-01-16 11:48:27 +1100856
Darren Tucker75fe6262010-01-15 11:42:51 +110085720100115
858 - (dtucker) OpenBSD CVS Sync
859 - jmc@cvs.openbsd.org 2010/01/13 12:48:34
860 [sftp.1 sftp.c]
861 sftp.1: put ls -h in the right place
862 sftp.c: as above, plus add -p to get/put, and shorten their arg names
863 to keep the help usage nicely aligned
864 ok djm
Darren Tucker94881d82010-01-15 11:44:46 +1100865 - djm@cvs.openbsd.org 2010/01/13 23:47:26
866 [auth.c]
867 when using ChrootDirectory, make sure we test for the existence of the
868 user's shell inside the chroot; bz #1679, patch from alex AT rtfs.hu;
869 ok dtucker
Darren Tuckera788de22010-01-15 11:45:33 +1100870 - dtucker@cvs.openbsd.org 2010/01/14 23:41:49
871 [sftp-common.c]
872 use user_from{uid,gid} to lookup up ids since it keeps a small cache.
873 ok djm
Darren Tuckerb8b17e92010-01-15 11:46:03 +1100874 - guenther@cvs.openbsd.org 2010/01/15 00:05:22
875 [sftp.c]
876 Reset SIGTERM to SIG_DFL before executing ssh, so that even if sftp
877 inherited SIGTERM as ignored it will still be able to kill the ssh it
878 starts.
879 ok dtucker@
Darren Tucker7fa3a852010-01-15 13:12:10 +1100880 - (dtucker) [openbsd-compat/pwcache.c] Pull in pwcache.c from OpenBSD (no
Darren Tucker9d1fd5b2010-01-15 12:14:45 +1100881 changes yet but there will be some to come).
Darren Tucker909a3902010-01-15 12:38:30 +1100882 - (dtucker) [configure.ac openbsd-compat/{Makefile.in,pwcache.c} Portability
883 for pwcache. Also, added caching of negative hits.
Darren Tucker75fe6262010-01-15 11:42:51 +1100884
Damien Miller6abc9f62010-01-14 12:44:16 +110088520100114
886 - (djm) [platform.h] Add missing prototype for
887 platform_krb5_get_principal_name
888
Darren Tuckera8f20cf2010-01-13 10:54:46 +110088920100113
890 - (dtucker) [monitor_fdpass.c] Wrap poll.h include in ifdefs.
Darren Tuckerab3c2ca2010-01-13 18:27:32 +1100891 - (dtucker) [openbsd-compat/readpassphrase.c] Resync against OpenBSD's r1.18:
892 missing restore of SIGTTOU and some whitespace.
Darren Tucker1035cb42010-01-13 18:32:59 +1100893 - (dtucker) [openbsd-compat/readpassphrase.c] Update to OpenBSD's r1.21.
Darren Tuckerd59487a2010-01-13 21:32:44 +1100894 - (dtucker) [openbsd-compat/readpassphrase.c] Update to OpenBSD's r1.22.
895 Fixes bz #1590, where sometimes you could not interrupt a connection while
896 ssh was prompting for a passphrase or password.
Darren Tuckere2b36742010-01-13 22:42:34 +1100897 - (dtucker) OpenBSD CVS Sync
898 - dtucker@cvs.openbsd.org 2010/01/13 00:19:04
899 [sshconnect.c auth.c]
900 Fix a couple of typos/mispellings in comments
Darren Tucker561724f2010-01-13 22:43:05 +1100901 - dtucker@cvs.openbsd.org 2010/01/13 01:10:56
902 [key.c]
903 Ignore and log any Protocol 1 keys where the claimed size is not equal to
904 the actual size. Noted by Derek Martin, ok djm@
Darren Tuckerdaaa4502010-01-13 22:43:33 +1100905 - dtucker@cvs.openbsd.org 2010/01/13 01:20:20
906 [canohost.c ssh-keysign.c sshconnect2.c]
907 Make HostBased authentication work with a ProxyCommand. bz #1569, patch
908 from imorgan at nas nasa gov, ok djm@
Darren Tucker2901e2d2010-01-13 22:44:06 +1100909 - djm@cvs.openbsd.org 2010/01/13 01:40:16
910 [sftp.c sftp-server.c sftp.1 sftp-common.c sftp-common.h]
911 support '-h' (human-readable units) for sftp's ls command, just like
912 ls(1); ok dtucker@
Darren Tucker88b6fb22010-01-13 22:44:29 +1100913 - djm@cvs.openbsd.org 2010/01/13 03:48:13
914 [servconf.c servconf.h sshd.c]
915 avoid run-time failures when specifying hostkeys via a relative
916 path by prepending the cwd in these cases; bz#1290; ok dtucker@
Darren Tucker9c3ba072010-01-13 22:45:03 +1100917 - djm@cvs.openbsd.org 2010/01/13 04:10:50
918 [sftp.c]
919 don't append a space after inserting a completion of a directory (i.e.
920 a path ending in '/') for a slightly better user experience; ok dtucker@
Darren Tucker096630d2010-01-13 23:00:38 +1100921 - (dtucker) [sftp-common.c] Wrap include of util.h in an ifdef.
Tim Riced4a7fcb2010-01-13 15:44:34 -0800922 - (tim) [defines.h] openbsd-compat/readpassphrase.c now needs _NSIG.
923 feedback and ok dtucker@
Darren Tuckera8f20cf2010-01-13 10:54:46 +1100924
Darren Tucker09aa4c02010-01-12 19:51:48 +110092520100112
Darren Tucker7ad8dd22010-01-12 19:40:27 +1100926 - (dtucker) OpenBSD CVS Sync
927 - dtucker@cvs.openbsd.org 2010/01/11 01:39:46
928 [ssh_config channels.c ssh.1 channels.h ssh.c]
929 Add a 'netcat mode' (ssh -W). This connects stdio on the client to a
930 single port forward on the server. This allows, for example, using ssh as
931 a ProxyCommand to route connections via intermediate servers.
932 bz #1618, man page help from jmc@, ok markus@
Darren Tuckerd4c86b12010-01-12 19:41:22 +1100933 - dtucker@cvs.openbsd.org 2010/01/11 04:46:45
934 [authfile.c sshconnect2.c]
935 Do not prompt for a passphrase if we fail to open a keyfile, and log the
936 reason the open failed to debug.
937 bz #1693, found by tj AT castaglia org, ok djm@
Darren Tuckerd04758d2010-01-12 19:41:57 +1100938 - djm@cvs.openbsd.org 2010/01/11 10:51:07
939 [ssh-keygen.c]
940 when converting keys, truncate key comments at 72 chars as per RFC4716;
941 bz#1630 reported by tj AT castaglia.org; ok markus@
Darren Tucker69c01b12010-01-12 19:42:29 +1100942 - dtucker@cvs.openbsd.org 2010/01/12 00:16:47
943 [authfile.c]
944 Fix bug introduced in r1.78 (incorrect brace location) that broke key auth.
945 Patch from joachim joachimschipper nl.
Darren Tuckere371a132010-01-12 19:43:12 +1100946 - djm@cvs.openbsd.org 2010/01/12 00:58:25
947 [monitor_fdpass.c]
948 avoid spinning when fd passing on nonblocking sockets by calling poll()
949 in the EINTR/EAGAIN path, much like we do in atomicio; ok dtucker@
Darren Tuckerc6cc90b2010-01-12 19:43:46 +1100950 - djm@cvs.openbsd.org 2010/01/12 00:59:29
951 [roaming_common.c]
952 delete with extreme prejudice a debug() that fired with every keypress;
953 ok dtucker deraadt
Darren Tucker1b0c2452010-01-12 19:45:26 +1100954 - dtucker@cvs.openbsd.org 2010/01/12 01:31:05
955 [session.c]
956 Do not allow logins if /etc/nologin exists but is not readable by the user
957 logging in. Noted by Jan.Pechanec at Sun, ok djm@ deraadt@
Darren Tuckerebc71d92010-01-12 19:45:59 +1100958 - djm@cvs.openbsd.org 2010/01/12 01:36:08
959 [buffer.h bufaux.c]
960 add a buffer_get_string_ptr_ret() that does the same as
961 buffer_get_string_ptr() but does not fatal() on error; ok dtucker@
Darren Tucker09aa4c02010-01-12 19:51:48 +1100962 - dtucker@cvs.openbsd.org 2010/01/12 08:33:17
963 [session.c]
964 Add explicit stat so we reliably detect nologin with bad perms.
965 ok djm markus
Darren Tucker7ad8dd22010-01-12 19:40:27 +1100966
96720100110
Darren Tucker8c65f642010-01-10 10:26:57 +1100968 - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c]
969 Remove hacks add for RoutingDomain in preparation for its removal.
Darren Tuckerd3300452010-01-10 19:26:43 +1100970 - (dtucker) OpenBSD CVS Sync
Darren Tucker7bd98e72010-01-10 10:31:12 +1100971 - dtucker@cvs.openbsd.org 2010/01/09 23:04:13
972 [channels.c ssh.1 servconf.c sshd_config.5 sshd.c channels.h servconf.h
973 ssh-keyscan.1 ssh-keyscan.c readconf.c sshconnect.c misc.c ssh.c
974 readconf.h scp.1 sftp.1 ssh_config.5 misc.h]
975 Remove RoutingDomain from ssh since it's now not needed. It can be
976 replaced with "route exec" or "nc -V" as a proxycommand. "route exec"
977 also ensures that trafic such as DNS lookups stays withing the specified
978 routingdomain. For example (from reyk):
979 # route -T 2 exec /usr/sbin/sshd
980 or inherited from the parent process
981 $ route -T 2 exec sh
982 $ ssh 10.1.2.3
983 ok deraadt@ markus@ stevesk@ reyk@
Darren Tuckerd3300452010-01-10 19:26:43 +1100984 - dtucker@cvs.openbsd.org 2010/01/10 03:51:17
985 [servconf.c]
986 Add ChrootDirectory to sshd.c test-mode output
Darren Tucker43551522010-01-10 19:27:17 +1100987 - dtucker@cvs.openbsd.org 2010/01/10 07:15:56
988 [auth.c]
989 Output a debug if we can't open an existing keyfile. bz#1694, ok djm@
Darren Tucker8c65f642010-01-10 10:26:57 +1100990
Darren Tucker7ad8dd22010-01-12 19:40:27 +110099120100109
Darren Tucker9eba40c2010-01-09 09:02:07 +1100992 - (dtucker) Wrap use of IPPROTO_IPV6 in an ifdef for platforms that don't
993 have it.
Darren Tucker709d0ce2010-01-09 09:25:54 +1100994 - (dtucker) [defines.h] define PRIu64 for platforms that don't have it.
Darren Tucker11b5c072010-01-09 16:40:48 +1100995 - (dtucker) [roaming_client.c] Wrap inttypes.h in an ifdef.
Darren Tucker0b8a2262010-01-09 18:18:04 +1100996 - (dtucker) [loginrec.c] Use the SUSv3 specified name for the user name
997 when using utmpx. Patch from Ed Schouten.
Darren Tuckerdb7bf822010-01-09 22:24:33 +1100998 - (dtucker) OpenBSD CVS Sync
999 - djm@cvs.openbsd.org 2010/01/09 00:20:26
1000 [sftp-server.c sftp-server.8]
1001 add a 'read-only' mode to sftp-server(8) that disables open in write mode
1002 and all other fs-modifying protocol methods. bz#430 ok dtucker@
Darren Tuckera2e10482010-01-09 22:25:14 +11001003 - djm@cvs.openbsd.org 2010/01/09 00:57:10
1004 [PROTOCOL]
1005 tweak language
Darren Tucker838891f2010-01-09 22:25:46 +11001006 - jmc@cvs.openbsd.org 2010/01/09 03:36:00
1007 [sftp-server.8]
1008 bad place to forget a comma...
Darren Tucker37c1b3d2010-01-09 22:26:23 +11001009 - djm@cvs.openbsd.org 2010/01/09 05:04:24
1010 [mux.c sshpty.h clientloop.c sshtty.c]
1011 quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we
1012 usually don't actually have a tty to read/set; bz#1686 ok dtucker@
Darren Tucker4b282512010-01-09 22:27:06 +11001013 - dtucker@cvs.openbsd.org 2010/01/09 05:17:00
1014 [roaming_client.c]
1015 Remove a PRIu64 format string that snuck in with roaming. ok djm@
Darren Tucker70cc0922010-01-09 22:28:03 +11001016 - dtucker@cvs.openbsd.org 2010/01/09 11:13:02
1017 [sftp.c]
1018 Prevent sftp from derefing a null pointer when given a "-" without a
1019 command. Also, allow whitespace to follow a "-". bz#1691, path from
1020 Colin Watson via Debian. ok djm@ deraadt@
Darren Tucker2c671bf2010-01-09 22:28:43 +11001021 - dtucker@cvs.openbsd.org 2010/01/09 11:17:56
1022 [sshd.c]
1023 Afer sshd receives a SIGHUP, ignore subsequent HUPs while sshd re-execs
1024 itself. Prevents two HUPs in quick succession from resulting in sshd
1025 dying. bz#1692, patch from Colin Watson via Ubuntu.
Darren Tucker269275c2010-01-09 22:33:37 +11001026 - (dtucker) [defines.h] Remove now-undeeded PRIu64 define.
Darren Tucker9eba40c2010-01-09 09:02:07 +11001027
Darren Tucker7ad8dd22010-01-12 19:40:27 +1100102820100108
Darren Tuckerb7b17be2010-01-08 16:49:52 +11001029 - (dtucker) OpenBSD CVS Sync
1030 - andreas@cvs.openbsd.org 2009/10/24 11:11:58
1031 [roaming.h]
1032 Declarations needed for upcoming changes.
1033 ok markus@
Darren Tucker36331b52010-01-08 16:50:41 +11001034 - andreas@cvs.openbsd.org 2009/10/24 11:13:54
1035 [sshconnect2.c kex.h kex.c]
1036 Let the client detect if the server supports roaming by looking
1037 for the resume@appgate.com kex algorithm.
1038 ok markus@
Darren Tuckere32cf432010-01-08 16:51:40 +11001039 - andreas@cvs.openbsd.org 2009/10/24 11:15:29
1040 [clientloop.c]
1041 client_loop() must detect if the session has been suspended and resumed,
1042 and take appropriate action in that case.
1043 From Martin Forssen, maf at appgate dot com
Darren Tuckerf9e6eb82010-01-08 16:52:32 +11001044 - andreas@cvs.openbsd.org 2009/10/24 11:19:17
1045 [ssh2.h]
1046 Define the KEX messages used when resuming a suspended connection.
Darren Tuckere32cf432010-01-08 16:51:40 +11001047 ok markus@
Darren Tuckere7301182010-01-08 16:53:31 +11001048 - andreas@cvs.openbsd.org 2009/10/24 11:22:37
1049 [roaming_common.c]
1050 Do the actual suspend/resume in the client. This won't be useful until
1051 the server side supports roaming.
1052 Most code from Martin Forssen, maf at appgate dot com. Some changes by
1053 me and markus@
1054 ok markus@
Darren Tuckerf1de4e52010-01-08 16:54:59 +11001055 - andreas@cvs.openbsd.org 2009/10/24 11:23:42
1056 [ssh.c]
1057 Request roaming to be enabled if UseRoaming is true and the server
1058 supports it.
1059 ok markus@
Darren Tucker34e314d2010-01-08 17:03:46 +11001060 - reyk@cvs.openbsd.org 2009/10/28 16:38:18
1061 [ssh_config.5 sshd.c misc.h ssh-keyscan.1 readconf.h sshconnect.c
1062 channels.c channels.h servconf.h servconf.c ssh.1 ssh-keyscan.c scp.1
1063 sftp.1 sshd_config.5 readconf.c ssh.c misc.c]
1064 Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan.
1065 ok markus@
Darren Tuckercc117f02010-01-08 17:05:26 +11001066 - jmc@cvs.openbsd.org 2009/10/28 21:45:08
1067 [sshd_config.5 sftp.1]
1068 tweak previous;
Darren Tucker78be8c52010-01-08 17:05:59 +11001069 - djm@cvs.openbsd.org 2009/11/10 02:56:22
1070 [ssh_config.5]
1071 explain the constraints on LocalCommand some more so people don't
1072 try to abuse it.
Darren Tuckerf788a912010-01-08 17:06:47 +11001073 - djm@cvs.openbsd.org 2009/11/10 02:58:56
1074 [sshd_config.5]
1075 clarify that StrictModes does not apply to ChrootDirectory. Permissions
1076 and ownership are always checked when chrooting. bz#1532
Darren Tucker6e7fe1c2010-01-08 17:07:22 +11001077 - dtucker@cvs.openbsd.org 2009/11/10 04:30:45
1078 [sshconnect2.c channels.c sshconnect.c]
1079 Set close-on-exec on various descriptors so they don't get leaked to
1080 child processes. bz #1643, patch from jchadima at redhat, ok deraadt.
Darren Tucker876045b2010-01-08 17:08:00 +11001081 - markus@cvs.openbsd.org 2009/11/11 21:37:03
1082 [channels.c channels.h]
1083 fix race condition in x11/agent channel allocation: don't read after
1084 the end of the select read/write fdset and make sure a reused FD
1085 is not touched before the pre-handlers are called.
1086 with and ok djm@
Darren Tucker29440822010-01-08 17:08:35 +11001087 - djm@cvs.openbsd.org 2009/11/17 05:31:44
1088 [clientloop.c]
1089 fix incorrect exit status when multiplexing and channel ID 0 is recycled
1090 bz#1570 reported by peter.oliver AT eon-is.co.uk; ok dtucker
Darren Tuckerd6b06a92010-01-08 17:09:11 +11001091 - djm@cvs.openbsd.org 2009/11/19 23:39:50
1092 [session.c]
1093 bz#1606: error when an attempt is made to connect to a server
1094 with ForceCommand=internal-sftp with a shell session (i.e. not a
1095 subsystem session). Avoids stuck client when attempting to ssh to such a
1096 service. ok dtucker@
Darren Tuckerc3dc4042010-01-08 17:09:50 +11001097 - dtucker@cvs.openbsd.org 2009/11/20 00:15:41
1098 [session.c]
1099 Warn but do not fail if stat()ing the subsystem binary fails. This helps
1100 with chrootdirectory+forcecommand=sftp-server and restricted shells.
1101 bz #1599, ok djm.
Darren Tucker21063192010-01-08 17:10:36 +11001102 - djm@cvs.openbsd.org 2009/11/20 00:54:01
1103 [sftp.c]
1104 bz#1588 change "Connecting to host..." message to "Connected to host."
1105 and delay it until after the sftp protocol connection has been established.
1106 Avoids confusing sequence of messages when the underlying ssh connection
1107 experiences problems. ok dtucker@
Darren Tuckerab791692010-01-08 18:48:02 +11001108 - dtucker@cvs.openbsd.org 2009/11/20 00:59:36
1109 [sshconnect2.c]
1110 Use the HostKeyAlias when prompting for passwords. bz#1039, ok djm@
Darren Tucker70d87692010-01-08 18:49:16 +11001111 - djm@cvs.openbsd.org 2009/11/20 03:24:07
1112 [misc.c]
1113 correct off-by-one in percent_expand(): we would fatal() when trying
1114 to expand EXPAND_MAX_KEYS, allowing only EXPAND_MAX_KEYS-1 to actually
1115 work. Note that nothing in OpenSSH actually uses close to this limit at
1116 present. bz#1607 from Jan.Pechanec AT Sun.COM
Darren Tuckerc4dc4f52010-01-08 18:50:04 +11001117 - halex@cvs.openbsd.org 2009/11/22 13:18:00
1118 [sftp.c]
1119 make passing of zero-length arguments to ssh safe by
1120 passing "-<switch>" "<value>" rather than "-<switch><value>"
1121 ok dtucker@, guenther@, djm@
Darren Tucker5246df42010-01-08 18:50:46 +11001122 - dtucker@cvs.openbsd.org 2009/12/06 23:41:15
1123 [sshconnect2.c]
1124 zap unused variable and strlen; from Steve McClellan, ok djm
Darren Tucker75694db2010-01-08 18:51:14 +11001125 - djm@cvs.openbsd.org 2009/12/06 23:53:45
1126 [roaming_common.c]
1127 use socklen_t for getsockopt optlen parameter; reported by
1128 Steve.McClellan AT radisys.com, ok dtucker@
Darren Tuckerb5082e92010-01-08 18:51:47 +11001129 - dtucker@cvs.openbsd.org 2009/12/06 23:53:54
1130 [sftp.c]
1131 fix potential divide-by-zero in sftp's "df" output when talking to a server
1132 that reports zero files on the filesystem (Unix filesystems always have at
1133 least the root inode). From Steve McClellan at radisys, ok djm@
Darren Tucker57e0d012010-01-08 18:52:27 +11001134 - markus@cvs.openbsd.org 2009/12/11 18:16:33
1135 [key.c]
1136 switch from 35 to the more common value of RSA_F4 == (2**16)+1 == 65537
1137 for the RSA public exponent; discussed with provos; ok djm@
Darren Tuckerb8c884a2010-01-08 18:53:43 +11001138 - guenther@cvs.openbsd.org 2009/12/20 07:28:36
1139 [ssh.c sftp.c scp.c]
1140 When passing user-controlled options with arguments to other programs,
1141 pass the option and option argument as separate argv entries and
1142 not smashed into one (e.g., as -l foo and not -lfoo). Also, always
1143 pass a "--" argument to stop option parsing, so that a positional
1144 argument that starts with a '-' isn't treated as an option. This
1145 fixes some error cases as well as the handling of hostnames and
1146 filenames that start with a '-'.
1147 Based on a diff by halex@
1148 ok halex@ djm@ deraadt@
Darren Tuckerf2705c82010-01-08 18:54:17 +11001149 - djm@cvs.openbsd.org 2009/12/20 23:20:40
1150 [PROTOCOL]
1151 fix an incorrect magic number and typo in PROTOCOL; bz#1688
1152 report and fix from ueno AT unixuser.org
Darren Tucker75456e82010-01-08 18:55:58 +11001153 - stevesk@cvs.openbsd.org 2009/12/25 19:40:21
1154 [readconf.c servconf.c misc.h ssh-keyscan.c misc.c]
1155 validate routing domain is in range 0-RT_TABLEID_MAX.
1156 'Looks right' deraadt@
Darren Tucker535b5e12010-01-08 18:56:48 +11001157 - stevesk@cvs.openbsd.org 2009/12/29 16:38:41
1158 [sshd_config.5 readconf.c ssh_config.5 scp.1 servconf.c sftp.1 ssh.1]
1159 Rename RDomain config option to RoutingDomain to be more clear and
1160 consistent with other options.
1161 NOTE: if you currently use RDomain in the ssh client or server config,
1162 or ssh/sshd -o, you must update to use RoutingDomain.
1163 ok markus@ djm@
Darren Tucker98e5d9a2010-01-08 18:57:39 +11001164 - jmc@cvs.openbsd.org 2009/12/29 18:03:32
1165 [sshd_config.5 ssh_config.5]
1166 sort previous;
Darren Tucker0c348f52010-01-08 18:58:05 +11001167 - dtucker@cvs.openbsd.org 2010/01/04 01:45:30
1168 [sshconnect2.c]
1169 Don't escape backslashes in the SSH2 banner. bz#1533, patch from
1170 Michal Gorny via Gentoo.
Darren Tucker909d8582010-01-08 19:02:40 +11001171 - djm@cvs.openbsd.org 2010/01/04 02:03:57
1172 [sftp.c]
1173 Implement tab-completion of commands, local and remote filenames for sftp.
1174 Hacked on and off for some time by myself, mouring, Carlos Silva (via 2009
1175 Google Summer of Code) and polished to a fine sheen by myself again.
1176 It should deal more-or-less correctly with the ikky corner-cases presented
1177 by quoted filenames, but the UI could still be slightly improved.
1178 In particular, it is quite slow for remote completion on large directories.
1179 bz#200; ok markus@
Darren Tuckeraaf51d22010-01-08 19:04:49 +11001180 - djm@cvs.openbsd.org 2010/01/04 02:25:15
1181 [sftp-server.c]
1182 bz#1566 don't unnecessarily dup() in and out fds for sftp-server;
1183 ok markus@
Darren Tucker340d1682010-01-09 08:54:31 +11001184 - dtucker@cvs.openbsd.org 2010/01/08 21:50:49
1185 [sftp.c]
1186 Fix two warnings: possibly used unitialized and use a nul byte instead of
1187 NULL pointer. ok djm@
Darren Tucker8cbd4032010-01-08 19:13:25 +11001188 - (dtucker) [Makefile.in added roaming_client.c roaming_serv.c] Import new
1189 files for roaming and add to Makefile.
Darren Tuckerdce7a922010-01-08 19:27:57 +11001190 - (dtucker) [Makefile.in] .c files do not belong in the OBJ lines.
Darren Tuckere67f7db2010-01-08 19:50:02 +11001191 - (dtucker) [sftp.c] ifdef out the sftp completion bits for platforms that
1192 don't have libedit.
Darren Tucker1f5e3dc2010-01-08 19:53:52 +11001193 - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] Make
1194 RoutingDomain an unsupported option on platforms that don't have it.
Darren Tucker843f0fa2010-01-08 19:56:33 +11001195 - (dtucker) [sftp.c] Expand ifdef for libedit to cover complete_is_remote
1196 too.
Darren Tuckere83c3ea2010-01-08 20:03:56 +11001197 - (dtucker) [misc.c] Move the routingdomain ifdef to allow the socket to
1198 be created.
Darren Tuckercb5a1b62010-01-08 20:09:01 +11001199 - (dtucker] [misc.c] Shrink the area covered by USE_ROUTINGDOMAIN more
1200 to eliminate an unused variable warning.
Darren Tucker1a8f5352010-01-08 20:45:42 +11001201 - (dtucker) [roaming_serv.c] Include includes.h for u_intXX_t types.
Darren Tuckerb7b17be2010-01-08 16:49:52 +11001202
Tim Rice880ab0d2009-12-26 15:40:47 -0800120320091226
1204 - (tim) [contrib/cygwin/Makefile] Install ssh-copy-id and ssh-copy-id.1
1205 Gzip all man pages. Patch from Corinna Vinschen.
1206
Darren Tucker1bf35032009-12-21 10:49:21 +1100120720091221
1208 - (dtucker) [auth-krb5.c platform.{c,h} openbsd-compat/port-aix.{c,h}]
1209 Bug #1583: Use system's kerberos principal name on AIX if it's available.
1210 Based on a patch from and tested by Miguel Sanders
1211
Darren Tuckerc8802aa2009-12-08 13:39:48 +1100121220091208
1213 - (dtucker) Bug #1470: Disable OOM-killing of the listening sshd on Linux,
1214 based on a patch from Vaclav Ovsik and Colin Watson. ok djm.
1215
Darren Tucker15333112009-12-07 11:15:43 +1100121620091207
1217 - (dtucker) Bug #1160: use pkg-config for opensc config if it's available.
1218 Tested by Martin Paljak.
Darren Tuckerd35e0ef2009-12-07 11:32:36 +11001219 - (dtucker) Bug #1677: add conditionals around the source for ssh-askpass.
Darren Tucker15333112009-12-07 11:15:43 +11001220
Tim Rice53e99742009-11-20 19:32:15 -0800122120091121
1222 - (tim) [opensshd.init.in] If PidFile is set in sshd_config, use it.
1223 Bug 1628. OK dtucker@
1224
Damien Miller409661f2009-11-20 15:16:35 +1100122520091120
1226 - (djm) [ssh-rand-helper.c] Print error and usage() when passed command-
1227 line arguments as none are supported. Exit when passed unrecognised
1228 commandline flags. bz#1568 from gson AT araneus.fi
1229
123020091118
Damien Miller04ee0f82009-11-18 17:48:30 +11001231 - (djm) [channels.c misc.c misc.h sshd.c] add missing setsockopt() to
1232 set IPV6_V6ONLY for local forwarding with GatwayPorts=yes. Unify
1233 setting IPV6_V6ONLY behind a new function misc.c:sock_set_v6only()
Damien Miller2191e042009-11-18 17:51:59 +11001234 bz#1648, report and fix from jan.kratochvil AT redhat.com
1235 - (djm) [contrib/gnome-ssh-askpass2.c] Make askpass dialog desktop-modal.
1236 bz#1645, patch from jchadima AT redhat.com
Damien Miller04ee0f82009-11-18 17:48:30 +11001237
123820091107
Darren Tuckerdf6578b2009-11-07 16:03:14 +11001239 - (dtucker) [authfile.c] Fall back to 3DES for the encryption of private
1240 keys when built with OpenSSL versions that don't do AES.
1241
Darren Tuckere89ed1c2009-11-05 20:43:16 +1100124220091105
1243 - (dtucker) [authfile.c] Add OpenSSL compat header so this still builds with
1244 older versions of OpenSSL.
1245
Darren Tucker1b118882009-10-24 11:40:32 +1100124620091024
1247 - (dtucker) OpenBSD CVS Sync
1248 - djm@cvs.openbsd.org 2009/10/11 23:03:15
1249 [hostfile.c]
1250 mention the host name that we are looking for in check_host_in_hostfile()
Darren Tucker49b7e232009-10-24 11:41:05 +11001251 - sobrado@cvs.openbsd.org 2009/10/17 12:10:39
1252 [sftp-server.c]
1253 sort flags.
Darren Tuckerae69e1d2009-10-24 11:41:34 +11001254 - sobrado@cvs.openbsd.org 2009/10/22 12:35:53
1255 [ssh.1 ssh-agent.1 ssh-add.1]
1256 use the UNIX-related macros (.At and .Ux) where appropriate.
1257 ok jmc@
Darren Tucker98c9aec2009-10-24 11:42:44 +11001258 - sobrado@cvs.openbsd.org 2009/10/22 15:02:12
1259 [ssh-agent.1 ssh-add.1 ssh.1]
1260 write UNIX-domain in a more consistent way; while here, replace a
1261 few remaining ".Tn UNIX" macros with ".Ux" ones.
1262 pointed out by ratchov@, thanks!
1263 ok jmc@
Darren Tuckerdfb9b712009-10-24 11:46:43 +11001264 - djm@cvs.openbsd.org 2009/10/22 22:26:13
1265 [authfile.c]
1266 switch from 3DES to AES-128 for encryption of passphrase-protected
1267 SSH protocol 2 private keys; ok several
Darren Tucker2f29a8c2009-10-24 11:47:58 +11001268 - djm@cvs.openbsd.org 2009/10/23 01:57:11
1269 [sshconnect2.c]
1270 disallow a hostile server from checking jpake auth by sending an
1271 out-of-sequence success message. (doesn't affect code enabled by default)
Darren Tucker199ee6f2009-10-24 11:50:17 +11001272 - dtucker@cvs.openbsd.org 2009/10/24 00:48:34
1273 [ssh-keygen.1]
1274 ssh-keygen now uses AES-128 for private keys
Darren Tucker6ac91a72009-10-24 11:52:42 +11001275 - (dtucker) [mdoc2man.awk] Teach it to understand the .Ux macro.
Darren Tucker4d6656b2009-10-24 15:04:12 +11001276 - (dtucker) [session.c openbsd-compat/port-linux.{c,h}] Bug #1637: if selinux
1277 is enabled set the security context to "sftpd_t" before running the
1278 internal sftp server Based on a patch from jchadima at redhat.
Darren Tucker1b118882009-10-24 11:40:32 +11001279
Darren Tuckerc182d992009-10-11 21:50:20 +1100128020091011
1281 - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for
1282 dirent d_type and DTTOIF as we've switched OpenBSD to the more portable
1283 lstat.
Darren Tuckerbad50762009-10-11 21:51:08 +11001284 - (dtucker) OpenBSD CVS Sync
1285 - markus@cvs.openbsd.org 2009/10/08 14:03:41
1286 [sshd_config readconf.c ssh_config.5 servconf.c sshd_config.5]
1287 disable protocol 1 by default (after a transition period of about 10 years)
1288 ok deraadt
Darren Tucker7a4a7652009-10-11 21:51:40 +11001289 - jmc@cvs.openbsd.org 2009/10/08 20:42:12
1290 [sshd_config.5 ssh_config.5 sshd.8 ssh.1]
1291 some tweaks now that protocol 1 is not offered by default; ok markus
Darren Tucker438b4732009-10-11 21:52:10 +11001292 - dtucker@cvs.openbsd.org 2009/10/11 10:41:26
1293 [sftp-client.c]
1294 d_type isn't portable so use lstat to get dirent modes. Suggested by and
1295 "looks sane" deraadt@
Darren Tuckere23a79c2009-10-12 09:37:22 +11001296 - markus@cvs.openbsd.org 2009/10/08 18:04:27
1297 [regress/test-exec.sh]
1298 re-enable protocol v1 for the tests.
Darren Tuckerc182d992009-10-11 21:50:20 +11001299
Darren Tucker46bbbe32009-10-07 08:21:48 +1100130020091007
1301 - (dtucker) OpenBSD CVS Sync
1302 - djm@cvs.openbsd.org 2009/08/12 00:13:00
1303 [sftp.c sftp.1]
1304 support most of scp(1)'s commandline arguments in sftp(1), as a first
1305 step towards making sftp(1) a drop-in replacement for scp(1).
1306 One conflicting option (-P) has not been changed, pending further
1307 discussion.
1308 Patch from carlosvsilvapt@gmail.com as part of his work in the
1309 Google Summer of Code
Darren Tuckeradba1ba2009-10-07 08:22:20 +11001310 - jmc@cvs.openbsd.org 2009/08/12 06:31:42
1311 [sftp.1]
1312 sort options;
Darren Tucker282b4022009-10-07 08:23:06 +11001313 - djm@cvs.openbsd.org 2009/08/13 01:11:19
1314 [sftp.1 sftp.c]
1315 Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
1316 add "-P port" to match scp(1). Fortunately, the -P option is only really
1317 used by our regression scripts.
1318 part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
1319 of Code work; ok deraadt markus
Darren Tuckerc07138e2009-10-07 08:23:44 +11001320 - jmc@cvs.openbsd.org 2009/08/13 13:39:54
1321 [sftp.1 sftp.c]
1322 sync synopsis and usage();
Darren Tuckerc22f0902009-10-07 08:24:19 +11001323 - djm@cvs.openbsd.org 2009/08/14 18:17:49
1324 [sftp-client.c]
1325 make the "get_handle: ..." error messages vaguely useful by allowing
1326 callers to specify their own error message strings.
Darren Tuckere54a0362009-10-07 08:35:32 +11001327 - fgsch@cvs.openbsd.org 2009/08/15 18:56:34
1328 [auth.h]
1329 remove unused define. markus@ ok.
1330 (Id sync only, Portable still uses this.)
Darren Tucker1477ea12009-10-07 08:36:05 +11001331 - dtucker@cvs.openbsd.org 2009/08/16 23:29:26
1332 [sshd_config.5]
1333 Add PubkeyAuthentication to the list allowed in a Match block (bz #1577)
Darren Tucker1b0dd172009-10-07 08:37:48 +11001334 - djm@cvs.openbsd.org 2009/08/18 18:36:21
1335 [sftp-client.h sftp.1 sftp-client.c sftp.c]
1336 recursive transfer support for get/put and on the commandline
1337 work mostly by carlosvsilvapt@gmail.com for the Google Summer of Code
1338 with some tweaks by me; "go for it" deraadt@
Darren Tucker05016b22009-10-07 08:38:23 +11001339 - djm@cvs.openbsd.org 2009/08/18 21:15:59
1340 [sftp.1]
1341 fix "get" command usage, spotted by jmc@
Darren Tuckerb3b40a82009-10-07 08:39:09 +11001342 - jmc@cvs.openbsd.org 2009/08/19 04:56:03
1343 [sftp.1]
1344 ether -> either;
Darren Tucker8ec4fd82009-10-07 08:39:57 +11001345 - dtucker@cvs.openbsd.org 2009/08/20 23:54:28
1346 [mux.c]
1347 subsystem_flag is defined in ssh.c so it's extern; ok djm
Darren Tucker7dc48502009-10-07 08:44:42 +11001348 - djm@cvs.openbsd.org 2009/08/27 17:28:52
1349 [sftp-server.c]
1350 allow setting an explicit umask on the commandline to override whatever
1351 default the user has. bz#1229; ok dtucker@ deraadt@ markus@
Darren Tucker9bcd25b2009-10-07 08:45:48 +11001352 - djm@cvs.openbsd.org 2009/08/27 17:33:49
1353 [ssh-keygen.c]
1354 force use of correct hash function for random-art signature display
1355 as it was inheriting the wrong one when bubblebabble signatures were
1356 activated; bz#1611 report and patch from fwojcik+openssh AT besh.com;
1357 ok markus@
Darren Tucker6b286a42009-10-07 08:46:21 +11001358 - djm@cvs.openbsd.org 2009/08/27 17:43:00
1359 [sftp-server.8]
1360 allow setting an explicit umask on the commandline to override whatever
1361 default the user has. bz#1229; ok dtucker@ deraadt@ markus@
Darren Tucker893d7352009-10-07 08:47:02 +11001362 - djm@cvs.openbsd.org 2009/08/27 17:44:52
1363 [authfd.c ssh-add.c authfd.h]
1364 Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
1365 when the agent refuses the constrained add request. This was a useful
1366 migration measure back in 2002 when constraints were new, but just
1367 adds risk now.
1368 bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@
Darren Tucker30359e12009-10-07 08:47:24 +11001369 - djm@cvs.openbsd.org 2009/08/31 20:56:02
1370 [sftp-server.c]
1371 check correct variable for error message, spotted by martynas@
Darren Tucker7bee06a2009-10-07 08:47:47 +11001372 - djm@cvs.openbsd.org 2009/08/31 21:01:29
1373 [sftp-server.8]
1374 document -e and -h; prodded by jmc@
Darren Tucker72473c62009-10-07 09:01:03 +11001375 - djm@cvs.openbsd.org 2009/09/01 14:43:17
1376 [ssh-agent.c]
1377 fix a race condition in ssh-agent that could result in a wedged or
1378 spinning agent: don't read off the end of the allocated fd_sets, and
1379 don't issue blocking read/write on agent sockets - just fall back to
1380 select() on retriable read/write errors. bz#1633 reported and tested
1381 by "noodle10000 AT googlemail.com"; ok dtucker@ markus@
Darren Tucker759cb2a2009-10-07 09:01:50 +11001382 - grunk@cvs.openbsd.org 2009/10/01 11:37:33
1383 [dh.c]
1384 fix a cast
1385 ok djm@ markus@
Darren Tucker695ed392009-10-07 09:02:18 +11001386 - djm@cvs.openbsd.org 2009/10/06 04:46:40
1387 [session.c]
1388 bz#1596: fflush(NULL) before exec() to ensure that everying (motd
1389 in particular) has made it out before the streams go away.
Darren Tucker7023d162009-10-07 10:30:06 +11001390 - djm@cvs.openbsd.org 2008/12/07 22:17:48
1391 [regress/addrmatch.sh]
1392 match string "passwordauthentication" only at start of line, not anywhere
1393 in sshd -T output
Darren Tucker79885532009-10-07 10:30:57 +11001394 - dtucker@cvs.openbsd.org 2009/05/05 07:51:36
1395 [regress/multiplex.sh]
1396 Always specify ssh_config for multiplex tests: prevents breakage caused
1397 by options in ~/.ssh/config. From Dan Peterson.
Darren Tucker287b9322009-10-07 10:31:56 +11001398 - djm@cvs.openbsd.org 2009/08/13 00:57:17
1399 [regress/Makefile]
1400 regression test for port number parsing. written as part of the a2port
1401 change that went into 5.2 but I forgot to commit it at the time...
Darren Tuckered6b0c52009-10-07 10:43:57 +11001402 - djm@cvs.openbsd.org 2009/08/13 01:11:55
Darren Tuckerb707a242009-10-07 10:54:31 +11001403 [regress/sftp-batch.sh regress/sftp-badcmds.sh regress/sftp.sh
1404 regress/sftp-cmds.sh regres/sftp-glob.sh]
Darren Tuckered6b0c52009-10-07 10:43:57 +11001405 date: 2009/08/13 01:11:19; author: djm; state: Exp; lines: +10 -7
1406 Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
1407 add "-P port" to match scp(1). Fortunately, the -P option is only really
1408 used by our regression scripts.
1409 part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
1410 of Code work; ok deraadt markus
Darren Tuckerc8638952009-10-07 10:46:29 +11001411 - djm@cvs.openbsd.org 2009/08/20 18:43:07
Darren Tuckerb707a242009-10-07 10:54:31 +11001412 [regress/ssh-com-sftp.sh]
Darren Tuckerc8638952009-10-07 10:46:29 +11001413 fix one sftp -D ... => sftp -P ... conversion that I missed; from Carlos
1414 Silva for Google Summer of Code
Darren Tuckerb707a242009-10-07 10:54:31 +11001415 - dtucker@cvs.openbsd.org 2009/10/06 23:51:49
1416 [regress/ssh2putty.sh]
1417 Add OpenBSD tag to make syncs easier
Darren Tuckera25ab012009-10-07 11:00:58 +11001418 - (dtucker) [regress/portnum.sh] Import new test.
Darren Tucker538738d2009-10-07 18:56:10 +11001419 - (dtucker) [configure.ac sftp-client.c] DTOTIF is in fs/ffs/dir.h on at
Darren Tucker4adeac72009-10-07 15:49:48 +11001420 least dragonflybsd.
Darren Tucker538738d2009-10-07 18:56:10 +11001421 - (dtucker) d_type is not mandated by POSIX, so add fallback code using
1422 stat(), needed on at least cygwin.
Darren Tucker46bbbe32009-10-07 08:21:48 +11001423
Damien Miller350666d2009-10-02 11:50:55 +1000142420091002
1425 - (djm) [Makefile.in] Mention readconf.o in ssh-keysign's make deps.
1426 spotted by des AT des.no
1427
Damien Millerea437422009-10-02 11:49:03 +1000142820090926
1429 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
1430 [contrib/suse/openssh.spec] Update for release
1431 - (djm) [README] update relnotes URL
1432 - (djm) [packet.c] Restore EWOULDBLOCK handling that got lost somewhere
1433 - (djm) Release 5.3p1
1434
Darren Tuckere02b49a2009-09-11 14:56:08 +1000143520090911
1436 - (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X
1437 10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query). Patch
1438 from jbasney at ncsa uiuc edu.
1439
Damien Millere5d5a172009-09-09 11:07:28 +1000144020090908
1441 - (djm) [serverloop.c] Fix test for server-assigned remote forwarding port
1442 (-R 0:...); bz#1578, spotted and fix by gavin AT emf.net; ok dtucker@
1443
Darren Tuckerdad48e72009-09-01 18:26:00 +1000144420090901
1445 - (dtucker) [configure.ac] Bug #1639: use AC_PATH_PROG to search the path for
1446 krb5-config if it's not in the location specified by --with-kerberos5.
1447 Patch from jchadima at redhat.
1448
Darren Tucker427adf12009-08-29 09:14:48 +1000144920090829
1450 - (dtucker) [README.platform] Add text about development packages, based on
1451 text from Chris Pepper in bug #1631.
1452
Darren Tucker28b973e2009-08-28 10:16:44 +1000145320090828
1454 - dtucker [auth-sia.c] Roll back the change for bug #1241 as it apparently
1455 causes problems in some Tru64 configurations.
Damien Miller8aac9932009-08-28 10:40:30 +10001456 - (djm) [sshd_config.5] downgrade mention of login.conf to be an example
1457 and mention PAM as another provider for ChallengeResponseAuthentication;
1458 bz#1408; ok dtucker@
Damien Miller0e265512009-08-28 10:43:13 +10001459 - (djm) [sftp-server.c] bz#1535: accept ENOSYS as a fallback error when
1460 attempting atomic rename(); ok dtucker@
Damien Miller7d4a2682009-08-28 10:47:38 +10001461 - (djm) [Makefile.in] bz#1505: Solaris make(1) doesn't accept make variables
1462 in argv, so pass them in the environment; ok dtucker@
Darren Tucker3980b632009-08-28 11:02:37 +10001463 - (dtucker) [channels.c configure.ac] Bug #1528: skip the tcgetattr call on
1464 the pty master on Solaris, since it never succeeds and can hang if large
1465 amounts of data is sent to the slave (eg a copy-paste). Based on a patch
1466 originally from Doke Scott, ok djm@
Darren Tucker86e30a02009-08-28 11:21:06 +10001467 - (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer
1468 size a compile-time option and set it to 64k on Cygwin, since Corinna
1469 reports that it makes a significant difference to performance. ok djm@
Darren Tuckerac9f1b92009-08-28 15:01:20 +10001470 - (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry.
Darren Tucker28b973e2009-08-28 10:16:44 +10001471
Darren Tucker2a5588d2009-08-20 16:16:01 +1000147220090820
1473 - (dtucker) [includes.h] Bug #1634: do not include system glob.h if we're not
1474 using it since the type conflicts can cause problems on FreeBSD. Patch
1475 from Jonathan Chen.
Darren Tucker82edf232009-08-20 16:20:50 +10001476 - (dtucker) [session.c openbsd-compat/port-aix.h] Bugs #1249 and #1567: move
1477 the setpcred call on AIX to immediately before the permanently_set_uid().
1478 Ensures that we still have privileges when we call chroot and
1479 pam_open_sesson. Based on a patch from David Leonard.
Darren Tucker2a5588d2009-08-20 16:16:01 +10001480
Darren Tucker83d8f282009-08-17 09:35:22 +1000148120090817
1482 - (dtucker) [configure.ac] Check for headers before libraries for openssl an
1483 zlib, which should make the errors slightly more meaningful on platforms
1484 where there's separate "-devel" packages for those.
Darren Tuckerb5d5ee12009-08-17 09:40:00 +10001485 - (dtucker) [sshlogin.c openbsd-compat/port-aix.{c,h}] Bug #1595: make
1486 PrintLastLog work on AIX. Based in part on a patch from Miguel Sanders.
Darren Tucker83d8f282009-08-17 09:35:22 +10001487
Tim Ricecaeb1642009-07-29 07:21:13 -0700148820090729
1489 - (tim) [contrib/cygwin/ssh-user-config] Change script to call correct error
1490 function. Patch from Corinna Vinschen.
1491
Darren Tucker440089a2009-07-13 11:38:23 +1000149220090713
1493 - (dtucker) [openbsd-compat/getrrsetbyname.c] Reduce answer buffer size so it
1494 fits into 16 bits to work around a bug in glibc's resolver where it masks
1495 off the buffer size at 16 bits. Patch from Hauke Lampe, ok djm jakob.
1496
Darren Tuckerc4b22ca2009-07-12 21:56:29 +1000149720090712
1498 - (dtucker) [configure.ac] Include sys/param.h for the sys/mount.h test,
1499 prevents configure complaining on older BSDs.
Darren Tucker8fdcba52009-07-12 21:58:42 +10001500 - (dtucker [contrib/cygwin/ssh-{host,user}-config] Add license text. Patch
1501 from Corinna Vinschen.
Darren Tucker622d5c52009-07-12 22:07:21 +10001502 - (dtucker) [auth-pam.c] Bug #1534: move the deletion of PAM credentials on
Darren Tucker916fdda2009-07-12 22:12:28 +10001503 logout to after the session close. Patch from Anicka Bernathova,
1504 originally from Andreas Schwab via Novelll ok djm.
Darren Tuckerc4b22ca2009-07-12 21:56:29 +10001505
Darren Tucker4d4fdc02009-07-07 21:19:11 +1000150620090707
1507 - (dtucker) [contrib/cygwin/ssh-host-config] better support for automated
1508 scripts and fix usage of eval. Patch from Corinna Vinschen.
1509
151020090705
Darren Tuckere841eb02009-07-06 07:11:13 +10001511 - (dtucker) OpenBSD CVS Sync
1512 - andreas@cvs.openbsd.org 2009/06/27 09:29:06
1513 [packet.h packet.c]
1514 packet_bacup_state() and packet_restore_state() will be used to
1515 temporarily save the current state ren resuming a suspended connection.
1516 ok markus@
Darren Tucker466df212009-07-06 07:11:52 +10001517 - andreas@cvs.openbsd.org 2009/06/27 09:32:43
1518 [roaming_common.c roaming.h]
1519 It may be necessary to retransmit some data when resuming, so add it
1520 to a buffer when roaming is enabled.
1521 Most of this code was written by Martin Forssen, maf at appgate dot com.
1522 ok markus@
Darren Tucker71e4d542009-07-06 07:12:27 +10001523 - andreas@cvs.openbsd.org 2009/06/27 09:35:06
1524 [readconf.h readconf.c]
1525 Add client option UseRoaming. It doesn't do anything yet but will
1526 control whether the client tries to use roaming if enabled on the
1527 server. From Martin Forssen.
1528 ok markus@
Darren Tuckercd6b1a22009-07-06 07:13:04 +10001529 - markus@cvs.openbsd.org 2009/06/30 14:54:40
1530 [version.h]
1531 crank version; ok deraadt
Darren Tucker199b1342009-07-06 07:16:56 +10001532 - dtucker@cvs.openbsd.org 2009/07/02 02:11:47
1533 [ssh.c]
1534 allow for long home dir paths (bz #1615). ok deraadt
1535 (based in part on a patch from jchadima at redhat)
Darren Tuckerde0c0252009-07-06 07:17:35 +10001536 - stevesk@cvs.openbsd.org 2009/07/05 19:28:33
1537 [clientloop.c]
1538 only send SSH2_MSG_DISCONNECT if we're in compat20; from dtucker@
1539 ok deraadt@ markus@
Darren Tuckere841eb02009-07-06 07:11:13 +10001540
Darren Tucker821d3db2009-06-22 16:11:06 +1000154120090622
1542 - (dtucker) OpenBSD CVS Sync
1543 - dtucker@cvs.openbsd.org 2009/06/22 05:39:28
1544 [monitor_wrap.c monitor_mm.c ssh-keygen.c auth2.c gss-genr.c sftp-client.c]
1545 alphabetize includes; reduces diff vs portable and style(9).
1546 ok stevesk djm
1547 (Id sync only; these were already in order in -portable)
1548
Darren Tucker72efd742009-06-21 17:48:00 +1000154920090621
1550 - (dtucker) OpenBSD CVS Sync
1551 - markus@cvs.openbsd.org 2009/03/17 21:37:00
1552 [ssh.c]
1553 pass correct argv[0] to openlog(); ok djm@
Darren Tucker3a6a51f2009-06-21 17:48:52 +10001554 - jmc@cvs.openbsd.org 2009/03/19 15:15:09
1555 [ssh.1]
1556 for "Ciphers", just point the reader to the keyword in ssh_config(5), just
1557 as we do for "MACs": this stops us getting out of sync when the lists
1558 change;
1559 fixes documentation/6102, submitted by Peter J. Philipp
1560 alternative fix proposed by djm
1561 ok markus
Darren Tuckera0964502009-06-21 17:49:36 +10001562 - tobias@cvs.openbsd.org 2009/03/23 08:31:19
1563 [ssh-agent.c]
1564 Fixed a possible out-of-bounds memory access if the environment variable
1565 SHELL is shorter than 3 characters.
1566 with input by and ok dtucker
Darren Tucker90133232009-06-21 17:50:15 +10001567 - tobias@cvs.openbsd.org 2009/03/23 19:38:04
1568 [ssh-agent.c]
1569 My previous commit didn't fix the problem at all, so stick at my first
1570 version of the fix presented to dtucker.
1571 Issue notified by Matthias Barkhoff (matthias dot barkhoff at gmx dot de).
1572 ok dtucker
Darren Tucker5837b512009-06-21 17:52:27 +10001573 - sobrado@cvs.openbsd.org 2009/03/26 08:38:39
1574 [sftp-server.8 sshd.8 ssh-agent.1]
1575 fix a few typographical errors found by spell(1).
1576 ok dtucker@, jmc@
Darren Tuckeraf501cf2009-06-21 17:53:04 +10001577 - stevesk@cvs.openbsd.org 2009/04/13 19:07:44
1578 [sshd_config.5]
1579 fix possessive; ok djm@
Darren Tuckerb62f1a82009-06-21 17:53:48 +10001580 - stevesk@cvs.openbsd.org 2009/04/14 16:33:42
1581 [sftp-server.c]
1582 remove unused option character from getopt() optstring; ok markus@
Darren Tucker3b59dfa2009-06-21 17:54:47 +10001583 - jj@cvs.openbsd.org 2009/04/14 21:10:54
1584 [servconf.c]
1585 Fixed a few the-the misspellings in comments. Skipped a bunch in
1586 binutils,gcc and so on. ok jmc@
Darren Tuckerac46a912009-06-21 17:55:23 +10001587 - stevesk@cvs.openbsd.org 2009/04/17 19:23:06
1588 [session.c]
1589 use INTERNAL_SFTP_NAME for setproctitle() of in-process sftp-server;
1590 ok djm@ markus@
Darren Tucker00fcd712009-06-21 17:56:00 +10001591 - stevesk@cvs.openbsd.org 2009/04/17 19:40:17
1592 [sshd_config.5]
1593 clarify that even internal-sftp needs /dev/log for logging to work; ok
1594 markus@
Darren Tuckerf92077f2009-06-21 17:56:25 +10001595 - jmc@cvs.openbsd.org 2009/04/18 18:39:10
1596 [sshd_config.5]
1597 tweak previous; ok stevesk
Darren Tucker51dbe502009-06-21 17:56:51 +10001598 - stevesk@cvs.openbsd.org 2009/04/21 15:13:17
1599 [sshd_config.5]
1600 clarify we cd to user's home after chroot; ok markus@ on
1601 earlier version; tweaks and ok jmc@
Darren Tuckerf7288d72009-06-21 18:12:20 +10001602 - andreas@cvs.openbsd.org 2009/05/25 06:48:01
1603 [channels.c packet.c clientloop.c packet.h serverloop.c monitor_wrap.c
1604 monitor.c]
1605 Put the globals in packet.c into a struct and don't access it directly
1606 from other files. No functional changes.
1607 ok markus@ djm@
1608 - andreas@cvs.openbsd.org 2009/05/27 06:31:25
1609 [canohost.h canohost.c]
1610 Add clear_cached_addr(), needed for upcoming changes allowing the peer
1611 address to change.
1612 ok markus@
Darren Tucker39c76322009-06-21 18:13:57 +10001613 - andreas@cvs.openbsd.org 2009/05/27 06:33:39
1614 [clientloop.c]
1615 Send SSH2_MSG_DISCONNECT when the client disconnects. From a larger
1616 change from Martin Forssen, maf at appgate dot com.
1617 ok markus@
Darren Tucker12b4a652009-06-21 18:14:48 +10001618 - andreas@cvs.openbsd.org 2009/05/27 06:34:36
1619 [kex.c kex.h]
1620 Move the KEX_COOKIE_LEN define to kex.h
1621 ok markus@
Darren Tucker5b48cdd2009-06-21 18:15:25 +10001622 - andreas@cvs.openbsd.org 2009/05/27 06:36:07
1623 [packet.h packet.c]
1624 Add packet_put_int64() and packet_get_int64(), part of a larger change
1625 from Martin Forssen.
Darren Tucker761c3892009-06-21 18:16:26 +10001626 ok markus@
1627 - andreas@cvs.openbsd.org 2009/05/27 06:38:16
1628 [sshconnect.h sshconnect.c]
1629 Un-static ssh_exchange_identification(), part of a larger change from
1630 Martin Forssen and needed for upcoming changes.
1631 ok markus@
Darren Tucker1cc55d72009-06-21 18:17:19 +10001632 - andreas@cvs.openbsd.org 2009/05/28 16:50:16
1633 [sshd.c packet.c serverloop.c monitor_wrap.c clientloop.c sshconnect.c
Darren Tuckerc5564e12009-06-21 18:53:53 +10001634 monitor.c Added roaming.h roaming_common.c roaming_dummy.c]
Darren Tucker1cc55d72009-06-21 18:17:19 +10001635 Keep track of number of bytes read and written. Needed for upcoming
1636 changes. Most code from Martin Forssen, maf at appgate dot com.
1637 ok markus@
Darren Tuckerc5564e12009-06-21 18:53:53 +10001638 Also, applied appropriate changes to Makefile.in
Darren Tuckerb422afa2009-06-21 18:58:46 +10001639 - andreas@cvs.openbsd.org 2009/06/12 20:43:22
1640 [monitor.c packet.c]
1641 Fix warnings found by chl@ and djm@ and change roaming_atomicio's
1642 return type to match atomicio's
1643 Diff from djm@, ok markus@
Darren Tucker7b935c72009-06-21 18:59:36 +10001644 - andreas@cvs.openbsd.org 2009/06/12 20:58:32
1645 [packet.c]
1646 Move some more statics into session_state
1647 ok markus@ djm@
Darren Tucker6ae35ac2009-06-21 19:00:20 +10001648 - dtucker@cvs.openbsd.org 2009/06/21 07:37:15
1649 [kexdhs.c kexgexs.c]
1650 abort if key_sign fails, preventing possible null deref. Based on report
1651 from Paolo Ganci, ok markus@ djm@
Darren Tuckere6b590e2009-06-21 19:08:48 +10001652 - dtucker@cvs.openbsd.org 2009/06/21 09:04:03
1653 [roaming.h roaming_common.c roaming_dummy.c]
1654 Add tags for the benefit of the sync scripts
1655 Also: pull in the changes for 1.1->1.2 missed in the previous sync.
Darren Tucker43e7a352009-06-21 19:50:08 +10001656 - (dtucker) [auth2-jpake.c auth2.c canohost.h session.c] Whitespace and
1657 header-order changes to reduce diff vs OpenBSD.
Darren Tucker64cee362009-06-21 20:26:17 +10001658 - (dtucker) [servconf.c sshd.c] More whitespace sync.
Darren Tucker828c96d2009-06-21 22:22:08 +10001659 - (dtucker) [roaming_common.c roaming_dummy.c] Wrap #include <inttypes.h> in
1660 ifdef.
Darren Tucker72efd742009-06-21 17:48:00 +10001661
Darren Tucker32780622009-06-16 16:11:02 +1000166220090616
1663 - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t
1664 is a struct with a __val member. Fixes build on, eg, Redhat 6.2.
1665
Darren Tuckera422d972009-05-04 12:52:47 +1000166620090504
1667 - (dtucker) [sshlogin.c] Move the NO_SSH_LASTLOG #ifndef line to include
1668 variable declarations. Should prevent unused warnings anywhere it's set
1669 (only Crays as far as I can tell) and be a no-op everywhere else.
1670
Tim Ricea74000e2009-03-18 11:25:02 -0700167120090318
1672 - (tim) [configure.ac] Remove setting IP_TOS_IS_BROKEN for Cygwin. The problem
1673 that setsockopt(IP_TOS) doesn't work on Cygwin has been fixed since 2005.
1674 Based on patch from vinschen at redhat com.
1675
Darren Tucker9d86e5d2009-03-08 11:40:27 +1100167620090308
1677 - (dtucker) [auth-passwd.c auth1.c auth2-kbdint.c auth2-none.c auth2-passwd.c
1678 auth2-pubkey.c session.c openbsd-compat/bsd-cygwin_util.{c,h}
1679 openbsd-compat/daemon.c] Remove support for Windows 95/98/ME and very old
1680 version of Cygwin. Patch from vinschen at redhat com.
1681
Darren Tucker558d6ca2009-03-07 10:22:10 +1100168220090307
1683 - (dtucker) [contrib/aix/buildbff.sh] Only try to rename ssh_prng_cmds if it
1684 exists (it's not created if OpenSSL's PRNG is self-seeded, eg if the OS
1685 has a /dev/random).
Darren Tucker8aae6ff2009-03-07 12:01:47 +11001686 - (dtucker) [schnorr.c openbsd-compat/openssl-compat.{c,h}] Add
1687 EVP_DigestUpdate to the OLD_EVP compatibility functions and tell schnorr.c
1688 to use them. Allows building with older OpenSSL versions.
Darren Tuckerccfee052009-03-07 12:32:22 +11001689 - (dtucker) [configure.ac defines.h] Check for in_port_t and typedef if needed.
Darren Tucker30ed6682009-03-07 18:06:22 +11001690 - (dtucker) [configure.ac] Missing comma in type list.
Darren Tucker3e7e15f2009-03-07 22:22:35 +11001691 - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}]
1692 EVP_DigestUpdate does not exactly match the other OLD_EVP functions (eg
1693 in openssl 0.9.6) so add an explicit test for it.
Darren Tucker558d6ca2009-03-07 10:22:10 +11001694
Damien Millercee85232009-03-06 00:58:22 +1100169520090306
1696 - (djm) OpenBSD CVS Sync
1697 - djm@cvs.openbsd.org 2009/03/05 07:18:19
1698 [auth2-jpake.c jpake.c jpake.h monitor_wrap.c monitor_wrap.h schnorr.c]
1699 [sshconnect2.c]
1700 refactor the (disabled) Schnorr proof code to make it a little more
1701 generally useful
Damien Miller447e3872009-03-06 00:58:39 +11001702 - djm@cvs.openbsd.org 2009/03/05 11:30:50
1703 [uuencode.c]
1704 document what these functions do so I don't ever have to recuse into
1705 b64_pton/ntop to remember their return values
Damien Millercee85232009-03-06 00:58:22 +11001706
Damien Miller19913842009-02-23 10:53:58 +1100170720090223
1708 - (djm) OpenBSD CVS Sync
1709 - djm@cvs.openbsd.org 2009/02/22 23:50:57
1710 [ssh_config.5 sshd_config.5]
1711 don't advertise experimental options
Damien Miller0296ae82009-02-23 11:00:24 +11001712 - djm@cvs.openbsd.org 2009/02/22 23:59:25
1713 [sshd_config.5]
1714 missing period
Damien Miller582ca6b2009-02-23 11:09:25 +11001715 - djm@cvs.openbsd.org 2009/02/23 00:06:15
1716 [version.h]
1717 openssh-5.2
Damien Miller5d0d5302009-02-23 11:11:57 +11001718 - (djm) [README] update for 5.2
Damien Millerfaec50b2009-02-23 11:12:29 +11001719 - (djm) Release openssh-5.2p1
Damien Miller19913842009-02-23 10:53:58 +11001720
Damien Miller9eab9562009-02-22 08:47:02 +1100172120090222
1722 - (djm) OpenBSD CVS Sync
1723 - tobias@cvs.openbsd.org 2009/02/21 19:32:04
1724 [misc.c sftp-server-main.c ssh-keygen.c]
1725 Added missing newlines in error messages.
1726 ok dtucker
1727
Damien Millere8001d42009-02-21 12:45:02 +1100172820090221
1729 - (djm) OpenBSD CVS Sync
1730 - djm@cvs.openbsd.org 2009/02/17 01:28:32
1731 [ssh_config]
1732 sync with revised default ciphers; pointed out by dkrause@
Damien Miller25918382009-02-21 12:45:18 +11001733 - djm@cvs.openbsd.org 2009/02/18 04:31:21
1734 [schnorr.c]
1735 signature should hash over the entire group, not just the generator
1736 (this is still disabled code)
Damien Miller7691e5f2009-02-21 18:03:04 +11001737 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
1738 [contrib/suse/openssh.spec] Prepare for 5.2p1
Damien Millere8001d42009-02-21 12:45:02 +11001739
Damien Miller3f94aaf2009-02-16 15:21:39 +1100174020090216
1741 - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh]
1742 [regress/putty-kex.sh regress/putty-transfer.sh] Downgrade disabled
1743 interop tests from FATAL error to a warning. Allows some interop
1744 tests to proceed if others are missing necessary prerequisites.
Damien Miller90551722009-02-16 15:37:03 +11001745 - (djm) [configure.ac] support GNU/kFreeBSD and GNU/kOpensolaris
1746 systems; patch from Aurelien Jarno via rmh AT aybabtu.com
Damien Miller3f94aaf2009-02-16 15:21:39 +11001747
Damien Millerfdd66fc2009-02-14 16:26:19 +1100174820090214
1749 - (djm) OpenBSD CVS Sync
1750 - dtucker@cvs.openbsd.org 2009/02/02 11:15:14
1751 [sftp.c]
1752 Initialize a few variables to prevent spurious "may be used
1753 uninitialized" warnings from newer gcc's. ok djm@
Damien Miller4bf648f2009-02-14 16:28:21 +11001754 - djm@cvs.openbsd.org 2009/02/12 03:00:56
1755 [canohost.c canohost.h channels.c channels.h clientloop.c readconf.c]
1756 [readconf.h serverloop.c ssh.c]
1757 support remote port forwarding with a zero listen port (-R0:...) to
1758 dyamically allocate a listen port at runtime (this is actually
1759 specified in rfc4254); bz#1003 ok markus@
Damien Miller330d5852009-02-14 16:33:09 +11001760 - djm@cvs.openbsd.org 2009/02/12 03:16:01
1761 [serverloop.c]
1762 tighten check for -R0:... forwarding: only allow dynamic allocation
1763 if want_reply is set in the packet
Damien Miller923e8bb2009-02-14 16:33:31 +11001764 - djm@cvs.openbsd.org 2009/02/12 03:26:22
1765 [monitor.c]
1766 some paranoia: check that the serialised key is really KEY_RSA before
1767 diddling its internals
Damien Millere2f4cc52009-02-14 16:33:49 +11001768 - djm@cvs.openbsd.org 2009/02/12 03:42:09
1769 [ssh.1]
1770 document -R0:... usage
Damien Miller65fa4ca2009-02-14 16:34:05 +11001771 - djm@cvs.openbsd.org 2009/02/12 03:44:25
1772 [ssh.1]
1773 consistency: Dq => Ql
Damien Miller85c6d8a2009-02-14 16:34:21 +11001774 - djm@cvs.openbsd.org 2009/02/12 03:46:17
1775 [ssh_config.5]
1776 document RemoteForward usage with 0 listen port
Damien Millere379e102009-02-14 16:34:39 +11001777 - jmc@cvs.openbsd.org 2009/02/12 07:34:20
1778 [ssh_config.5]
1779 kill trailing whitespace;
Damien Miller61433be2009-02-14 16:35:01 +11001780 - markus@cvs.openbsd.org 2009/02/13 11:50:21
1781 [packet.c]
1782 check for enc !=NULL in packet_start_discard
Damien Miller6385e752009-02-14 18:00:52 +11001783 - djm@cvs.openbsd.org 2009/02/14 06:35:49
1784 [PROTOCOL]
1785 mention that eow and no-more-sessions extensions are sent only to
1786 OpenSSH peers
Damien Millerfdd66fc2009-02-14 16:26:19 +11001787
178820090212
Damien Miller2de76242009-02-12 12:19:20 +11001789 - (djm) [sshpty.c] bz#1419: OSX uses cloning ptys that automagically
1790 set ownership and modes, so avoid explicitly setting them
Damien Miller20e231f2009-02-12 13:12:21 +11001791 - (djm) [configure.ac loginrec.c] bz#1421: fix lastlog support for OSX.
1792 OSX provides a getlastlogxbyname function that automates the reading of
1793 a lastlog file. Also, the pututxline function will update lastlog so
1794 there is no need for loginrec.c to do it explicitly. Collapse some
1795 overly verbose code while I'm in there.
Damien Miller2de76242009-02-12 12:19:20 +11001796
Darren Tucker642ebe52009-02-01 22:19:54 +1100179720090201
1798 - (dtucker) [defines.h sshconnect.c] INET6_ADDRSTRLEN is now needed in
1799 channels.c too, so move the definition for non-IP6 platforms to defines.h
1800 where it can be shared.
1801
Tim Rice6a325342009-01-29 12:30:01 -0800180220090129
1803 - (tim) [contrib/cygwin/ssh-host-config] Patch from Corinna Vinschen.
1804 If the CYGWIN environment variable is empty, the installer script
1805 should not install the service with an empty CYGWIN variable, but
1806 rather without setting CYGWNI entirely.
Tim Rice0d8f2f32009-01-29 12:40:30 -08001807 - (tim) [contrib/cygwin/ssh-host-config] Whitespace cleanup. No code changes.
Tim Rice6a325342009-01-29 12:30:01 -08001808
Tim Riceca3692d2009-01-28 12:50:04 -0800180920090128
1810 - (tim) [contrib/cygwin/ssh-host-config] Patch from Corinna Vinschen.
1811 Changes to work on Cygwin 1.5.x as well as on the new Cygwin 1.7.x.
1812 The information given for the setting of the CYGWIN environment variable
1813 is wrong for both releases so I just removed it, together with the
1814 unnecessary (Cygwin 1.5.x) or wrong (Cygwin 1.7.x) default setting.
1815
Damien Millerb53d8a12009-01-28 16:13:04 +1100181620081228
1817 - (djm) OpenBSD CVS Sync
1818 - stevesk@cvs.openbsd.org 2008/12/09 03:20:42
1819 [channels.c servconf.c]
1820 channel_print_adm_permitted_opens() should deal with all the printing
1821 for that config option. suggested by markus@; ok markus@ djm@
1822 dtucker@
Damien Millerc30def92009-01-28 16:13:39 +11001823 - djm@cvs.openbsd.org 2008/12/09 04:32:22
1824 [auth2-chall.c]
1825 replace by-hand string building with xasprinf(); ok deraadt@
Damien Miller62fd18a2009-01-28 16:14:09 +11001826 - sobrado@cvs.openbsd.org 2008/12/09 15:35:00
1827 [sftp.1 sftp.c]
1828 update for the synopses displayed by the 'help' command, there are a
1829 few missing flags; add 'bye' to the output of 'help'; sorting and spacing.
1830 jmc@ suggested replacing .Oo/.Oc with a single .Op macro.
1831 ok jmc@
Damien Millerb3f2c9f2009-01-28 16:15:30 +11001832 - stevesk@cvs.openbsd.org 2008/12/09 22:37:33
1833 [clientloop.c]
1834 fix typo in error message
Damien Miller7375fe22009-01-28 16:16:00 +11001835 - stevesk@cvs.openbsd.org 2008/12/10 03:55:20
1836 [addrmatch.c]
1837 o cannot be NULL here but use xfree() to be consistent; ok djm@
Damien Millerb2c17d42009-01-28 16:18:03 +11001838 - stevesk@cvs.openbsd.org 2008/12/29 01:12:36
1839 [ssh-keyscan.1]
1840 fix example, default key type is rsa for 3+ years; from
1841 frederic.perrin@resel.fr
Damien Millera70ac762009-01-28 16:19:52 +11001842 - stevesk@cvs.openbsd.org 2008/12/29 02:23:26
1843 [pathnames.h]
1844 no need to escape single quotes in comments
Damien Miller17819012009-01-28 16:20:17 +11001845 - okan@cvs.openbsd.org 2008/12/30 00:46:56
1846 [sshd_config.5]
1847 add AllowAgentForwarding to available Match keywords list
1848 ok djm
Damien Miller7a606212009-01-28 16:22:34 +11001849 - djm@cvs.openbsd.org 2009/01/01 21:14:35
1850 [channels.c]
1851 call channel destroy callbacks on receipt of open failure messages.
1852 fixes client hangs when connecting to a server that has MaxSessions=0
1853 set spotted by imorgan AT nas.nasa.gov; ok markus@
Damien Millerccf7e222009-01-28 16:23:06 +11001854 - djm@cvs.openbsd.org 2009/01/01 21:17:36
1855 [kexgexs.c]
1856 fix hash calculation for KEXGEX: hash over the original client-supplied
1857 values and not the sanity checked versions that we acutally use;
1858 bz#1540 reported by john.smith AT arrows.demon.co.uk
1859 ok markus@
Damien Miller1781f532009-01-28 16:24:41 +11001860 - djm@cvs.openbsd.org 2009/01/14 01:38:06
1861 [channels.c]
1862 support SOCKS4A protocol, from dwmw2 AT infradead.org via bz#1482;
1863 "looks ok" markus@
Damien Miller5bc6aae2009-01-28 16:27:31 +11001864 - stevesk@cvs.openbsd.org 2009/01/15 17:38:43
1865 [readconf.c]
1866 1) use obsolete instead of alias for consistency
1867 2) oUserKnownHostsFile not obsolete but oGlobalKnownHostsFile2 is
1868 so move the comment.
1869 3) reorder so like options are together
1870 ok djm@
Damien Millera1c1b6c2009-01-28 16:29:49 +11001871 - djm@cvs.openbsd.org 2009/01/22 09:46:01
1872 [channels.c channels.h session.c]
1873 make Channel->path an allocated string, saving a few bytes here and
1874 there and fixing bz#1380 in the process; ok markus@
Damien Miller9576ac42009-01-28 16:30:33 +11001875 - djm@cvs.openbsd.org 2009/01/22 09:49:57
1876 [channels.c]
1877 oops! I committed the wrong version of the Channel->path diff,
1878 it was missing some tweaks suggested by stevesk@
Damien Miller3dc71ad2009-01-28 16:31:22 +11001879 - djm@cvs.openbsd.org 2009/01/22 10:02:34
1880 [clientloop.c misc.c readconf.c readconf.h servconf.c servconf.h]
1881 [serverloop.c ssh-keyscan.c ssh.c sshd.c]
1882 make a2port() return -1 when it encounters an invalid port number
1883 rather than 0, which it will now treat as valid (needed for future work)
1884 adjust current consumers of a2port() to check its return value is <= 0,
1885 which in turn required some things to be converted from u_short => int
1886 make use of int vs. u_short consistent in some other places too
1887 feedback & ok markus@
Damien Millere37dde02009-01-28 16:33:01 +11001888 - djm@cvs.openbsd.org 2009/01/22 10:09:16
1889 [auth-options.c]
1890 another chunk of a2port() diff that got away. wtfdjm??
Damien Miller67081b52009-01-28 16:33:31 +11001891 - djm@cvs.openbsd.org 2009/01/23 07:58:11
1892 [myproposal.h]
1893 prefer CTR modes and revised arcfour (i.e w/ discard) modes to CBC
1894 modes; ok markus@
Damien Miller9aa72ba2009-01-28 16:34:00 +11001895 - naddy@cvs.openbsd.org 2009/01/24 17:10:22
1896 [ssh_config.5 sshd_config.5]
1897 sync list of preferred ciphers; ok djm@
Damien Miller13ae44c2009-01-28 16:38:41 +11001898 - markus@cvs.openbsd.org 2009/01/26 09:58:15
1899 [cipher.c cipher.h packet.c]
1900 Work around the CPNI-957037 Plaintext Recovery Attack by always
1901 reading 256K of data on packet size or HMAC errors (in CBC mode only).
1902 Help, feedback and ok djm@
1903 Feedback from Martin Albrecht and Paterson Kenny
Damien Millerb53d8a12009-01-28 16:13:04 +11001904
Tim Rice351529c2009-01-07 10:04:12 -0800190520090107
Damien Miller1598d6b2009-01-21 16:04:24 +11001906 - (djm) [uidswap.c] bz#1412: Support >16 supplemental groups in OS X.
1907 Patch based on one from vgiffin AT apple.com; ok dtucker@
Damien Miller819dbb62009-01-21 16:46:26 +11001908 - (djm) [channels.c] bz#1419: support "on demand" X11 forwarding via
1909 launchd on OS X; patch from vgiffin AT apple.com, slightly tweaked;
1910 ok dtucker@
Damien Miller02666772009-01-21 20:29:20 +11001911 - (djm) [contrib/ssh-copy-id.1 contrib/ssh-copy-id] bz#1492: Make
1912 ssh-copy-id copy id_rsa.pub by default (instead of the legacy "identity"
1913 key). Patch from cjwatson AT debian.org
Damien Miller1598d6b2009-01-21 16:04:24 +11001914
191520090107
Tim Rice351529c2009-01-07 10:04:12 -08001916 - (tim) [configure.ac defines.h openbsd-compat/port-uw.c
1917 openbsd-compat/xcrypt.c] Add SECUREWARE support to OpenServer 6 SVR5 ABI.
1918 OK djm@ dtucker@
Tim Rice26767912009-01-07 20:50:08 -08001919 - (tim) [configure.ac] Move check_for_libcrypt_later=1 in *-*-sysv5*) section.
1920 OpenServer 6 doesn't need libcrypt.
Tim Rice351529c2009-01-07 10:04:12 -08001921
Damien Miller586b0052008-12-09 14:11:32 +1100192220081209
1923 - (djm) OpenBSD CVS Sync
1924 - djm@cvs.openbsd.org 2008/12/09 02:38:18
1925 [clientloop.c]
1926 The ~C escape handler does not work correctly for multiplexed sessions -
1927 it opens a commandline on the master session, instead of on the slave
1928 that requested it. Disable it on slave sessions until such time as it
1929 is fixed; bz#1543 report from Adrian Bridgett via Colin Watson
1930 ok markus@
Damien Miller1be2cc42008-12-09 14:11:49 +11001931 - djm@cvs.openbsd.org 2008/12/09 02:39:59
1932 [sftp.c]
1933 Deal correctly with failures in remote stat() operation in sftp,
1934 correcting fail-on-error behaviour in batchmode. bz#1541 report and
1935 fix from anedvedicky AT gmail.com; ok markus@
Damien Miller0d772d92008-12-09 14:12:05 +11001936 - djm@cvs.openbsd.org 2008/12/09 02:58:16
1937 [readconf.c]
1938 don't leave junk (free'd) pointers around in Forward *fwd argument on
1939 failure; avoids double-free in ~C -L handler when given an invalid
1940 forwarding specification; bz#1539 report from adejong AT debian.org
1941 via Colin Watson; ok markus@ dtucker@
Damien Miller7ebfad72008-12-09 14:12:33 +11001942 - djm@cvs.openbsd.org 2008/12/09 03:02:37
1943 [sftp.1 sftp.c]
1944 correct sftp(1) and corresponding usage syntax;
1945 bz#1518 patch from imorgan AT nas.nasa.gov; ok deraadt@ improved diff jmc@
Damien Miller586b0052008-12-09 14:11:32 +11001946
Damien Miller7df2e402008-12-08 09:35:36 +1100194720081208
1948 - (djm) [configure.ac] bz#1538: better test for ProPolice/SSP: actually
1949 use some stack in main().
1950 Report and suggested fix from vapier AT gentoo.org
Damien Miller8533c782008-12-08 09:54:40 +11001951 - (djm) OpenBSD CVS Sync
1952 - markus@cvs.openbsd.org 2008/12/02 19:01:07
1953 [clientloop.c]
1954 we have to use the recipient's channel number (RFC 4254) for
1955 SSH2_MSG_CHANNEL_SUCCESS/SSH2_MSG_CHANNEL_FAILURE messages,
1956 otherwise we trigger 'Non-public channel' error messages on sshd
1957 systems with clientkeepalive enabled; noticed by sturm; ok djm;
Damien Miller5a33ec62008-12-08 09:55:02 +11001958 - markus@cvs.openbsd.org 2008/12/02 19:08:59
1959 [serverloop.c]
1960 backout 1.149, since it's not necessary and openssh clients send
1961 broken CHANNEL_FAILURE/SUCCESS messages since about 2004; ok djm@
Damien Miller16a73072008-12-08 09:55:25 +11001962 - markus@cvs.openbsd.org 2008/12/02 19:09:38
1963 [channels.c]
1964 s/remote_id/id/ to be more consistent with other code; ok djm@
Damien Miller7df2e402008-12-08 09:35:36 +11001965
Darren Tucker83795d62008-12-01 21:34:28 +1100196620081201
1967 - (dtucker) [contrib/cygwin/{Makefile,ssh-host-config}] Add new doc files
1968 and tweak the is-sshd-running check in ssh-host-config. Patch from
1969 vinschen at redhat com.
Darren Tucker99d11a32008-12-01 21:40:48 +11001970 - (dtucker) OpenBSD CVS Sync
1971 - markus@cvs.openbsd.org 2008/11/21 15:47:38
1972 [packet.c]
1973 packet_disconnect() on padding error, too. should reduce the success
1974 probability for the CPNI-957037 Plaintext Recovery Attack to 2^-18
1975 ok djm@
Darren Tucker23645642008-12-01 21:42:13 +11001976 - dtucker@cvs.openbsd.org 2008/11/30 11:59:26
1977 [monitor_fdpass.c]
1978 Retry sendmsg/recvmsg on EAGAIN and EINTR; ok djm@
Darren Tucker83795d62008-12-01 21:34:28 +11001979
Darren Tucker69087ea2008-11-23 14:03:19 +1100198020081123
1981 - (dtucker) [monitor_fdpass.c] Reduce diff vs OpenBSD by moving some
1982 declarations, removing an unnecessary union member and adding whitespace.
Darren Tuckerd3782b42008-11-23 19:05:53 +11001983 cmsgbuf.tmp thing spotted by des at des no, ok djm some time ago.
Darren Tucker69087ea2008-11-23 14:03:19 +11001984
Tim Rice0f4d2c02008-11-18 21:26:41 -0800198520081118
1986 - (tim) [addrmatch.c configure.ac] Some platforms do not have sin6_scope_id
1987 member of sockaddr_in6. Also reported in Bug 1491 by David Leonard. OK and
1988 feedback by djm@
1989
Darren Tuckerff4350e2008-11-11 16:31:05 +1100199020081111
1991 - (dtucker) OpenBSD CVS Sync
1992 - jmc@cvs.openbsd.org 2008/11/05 11:22:54
1993 [servconf.c]
1994 passord -> password;
1995 fixes user/5975 from Rene Maroufi
Darren Tuckere15fb092008-11-11 16:31:43 +11001996 - stevesk@cvs.openbsd.org 2008/11/07 00:42:12
1997 [ssh-keygen.c]
1998 spelling/typo in comment
Darren Tuckerb57fab62008-11-11 16:32:25 +11001999 - stevesk@cvs.openbsd.org 2008/11/07 18:50:18
2000 [nchan.c]
2001 add space to some log/debug messages for readability; ok djm@ markus@
Darren Tuckerc6d744e2008-11-11 16:33:03 +11002002 - dtucker@cvs.openbsd.org 2008/11/07 23:34:48
2003 [auth2-jpake.c]
2004 Move JPAKE define to make life easier for portable. ok djm@
Darren Tucker63917bd2008-11-11 16:33:48 +11002005 - tobias@cvs.openbsd.org 2008/11/09 12:34:47
2006 [session.c ssh.1]
2007 typo fixed (overriden -> overridden)
2008 ok espie, jmc
Darren Tucker49c31c42008-11-11 16:39:44 +11002009 - stevesk@cvs.openbsd.org 2008/11/11 02:58:09
2010 [servconf.c]
2011 USE_AFS not referenced so remove #ifdef. fixes sshd -T not printing
2012 kerberosgetafstoken. ok dtucker@
2013 (Id sync only, we still want the ifdef in portable)
Darren Tucker22662e82008-11-11 16:40:22 +11002014 - stevesk@cvs.openbsd.org 2008/11/11 03:55:11
2015 [channels.c]
2016 for sshd -T print 'permitopen any' vs. 'permitopen' for case of no
2017 permitopen's; ok and input dtucker@
Darren Tucker4a6f62d2008-11-11 16:55:25 +11002018 - djm@cvs.openbsd.org 2008/11/10 02:06:35
2019 [regress/putty-ciphers.sh]
2020 PuTTY supports AES CTR modes, so interop test against them too
Darren Tuckerff4350e2008-11-11 16:31:05 +11002021
Damien Miller7fc5c0f2008-11-05 16:12:11 +1100202220081105
2023 - OpenBSD CVS Sync
2024 - djm@cvs.openbsd.org 2008/11/03 08:59:41
2025 [servconf.c]
2026 include MaxSessions in sshd -T output; patch from imorgan AT nas.nasa.gov
Damien Miller6f66d342008-11-05 16:12:54 +11002027 - djm@cvs.openbsd.org 2008/11/04 07:58:09
2028 [auth.c]
2029 need unistd.h for close() prototype
2030 (ID sync only)
Damien Miller01ed2272008-11-05 16:20:46 +11002031 - djm@cvs.openbsd.org 2008/11/04 08:22:13
2032 [auth.h auth2.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h]
2033 [readconf.c readconf.h servconf.c servconf.h ssh2.h ssh_config.5]
2034 [sshconnect2.c sshd_config.5 jpake.c jpake.h schnorr.c auth2-jpake.c]
2035 [Makefile.in]
2036 Add support for an experimental zero-knowledge password authentication
2037 method using the J-PAKE protocol described in F. Hao, P. Ryan,
2038 "Password Authenticated Key Exchange by Juggling", 16th Workshop on
2039 Security Protocols, Cambridge, April 2008.
2040
2041 This method allows password-based authentication without exposing
2042 the password to the server. Instead, the client and server exchange
2043 cryptographic proofs to demonstrate of knowledge of the password while
2044 revealing nothing useful to an attacker or compromised endpoint.
2045
2046 This is experimental, work-in-progress code and is presently
2047 compiled-time disabled (turn on -DJPAKE in Makefile.inc).
2048
2049 "just commit it. It isn't too intrusive." deraadt@
Damien Miller1a0442f2008-11-05 16:30:06 +11002050 - stevesk@cvs.openbsd.org 2008/11/04 19:18:00
2051 [readconf.c]
2052 because parse_forward() is now used to parse all forward types (DLR),
2053 and it malloc's space for host variables, we don't need to malloc
2054 here. fixes small memory leaks.
2055
2056 previously dynamic forwards were not parsed in parse_forward() and
2057 space was not malloc'd in that case.
2058
2059 ok djm@
Damien Miller0164cb82008-11-05 16:30:31 +11002060 - stevesk@cvs.openbsd.org 2008/11/05 03:23:09
2061 [clientloop.c ssh.1]
2062 add dynamic forward escape command line; ok djm@
Damien Miller7fc5c0f2008-11-05 16:12:11 +11002063
Damien Miller9f6fb562008-11-03 19:15:44 +1100206420081103
2065 - OpenBSD CVS Sync
2066 - sthen@cvs.openbsd.org 2008/07/24 23:55:30
2067 [ssh-keygen.1]
2068 Add "ssh-keygen -F -l" to synopsis (displays fingerprint from
2069 known_hosts). ok djm@
2070 - grunk@cvs.openbsd.org 2008/07/25 06:56:35
2071 [ssh_config]
2072 Add VisualHostKey to example file, ok djm@
Damien Millerc6aadd92008-11-03 19:16:20 +11002073 - grunk@cvs.openbsd.org 2008/07/25 07:05:16
2074 [key.c]
2075 In random art visualization, make sure to use the end marker only at the
2076 end. Initial diff by Dirk Loss, tweaks and ok djm@
Damien Millerc674d582008-11-03 19:16:57 +11002077 - markus@cvs.openbsd.org 2008/07/31 14:48:28
2078 [sshconnect2.c]
2079 don't allocate space for empty banners; report t8m at centrum.cz;
2080 ok deraadt
Damien Millerfa51b162008-11-03 19:17:33 +11002081 - krw@cvs.openbsd.org 2008/08/02 04:29:51
2082 [ssh_config.5]
2083 whitepsace -> whitespace. From Matthew Clarke via bugs@.
Damien Millerad793d52008-11-03 19:17:57 +11002084 - djm@cvs.openbsd.org 2008/08/21 04:09:57
2085 [session.c]
2086 allow ForceCommand internal-sftp with arguments. based on patch from
2087 michael.barabanov AT gmail.com; ok markus@
Damien Miller15bce6b2008-11-03 19:19:12 +11002088 - djm@cvs.openbsd.org 2008/09/06 12:24:13
2089 [kex.c]
2090 OpenSSL 0.9.8h supplies a real EVP_sha256 so we do not need our
2091 replacement anymore
2092 (ID sync only for portable - we still need this)
Damien Miller456e6f02008-11-03 19:20:10 +11002093 - markus@cvs.openbsd.org 2008/09/11 14:22:37
2094 [compat.c compat.h nchan.c ssh.c]
2095 only send eow and no-more-sessions requests to openssh 5 and newer;
2096 fixes interop problems with broken ssh v2 implementations; ok djm@
Damien Millerd58f5602008-11-03 19:20:49 +11002097 - millert@cvs.openbsd.org 2008/10/02 14:39:35
2098 [session.c]
2099 Convert an unchecked strdup to xstrdup. OK deraadt@
Damien Miller49b78d42008-11-03 19:21:21 +11002100 - jmc@cvs.openbsd.org 2008/10/03 13:08:12
2101 [sshd.8]
2102 do not give an example of how to chmod files: we can presume the user
2103 knows that. removes an ambiguity in the permission of authorized_keys;
2104 ok deraadt
Damien Millerc4d1b362008-11-03 19:22:09 +11002105 - deraadt@cvs.openbsd.org 2008/10/03 23:56:28
2106 [sshconnect2.c]
2107 Repair strnvis() buffersize of 4*n+1, with termination gauranteed by the
2108 function.
2109 spotted by des@freebsd, who commited an incorrect fix to the freebsd tree
2110 and (as is fairly typical) did not report the problem to us. But this fix
2111 is correct.
2112 ok djm
Damien Millere272a5b2008-11-03 19:22:37 +11002113 - djm@cvs.openbsd.org 2008/10/08 23:34:03
2114 [ssh.1 ssh.c]
2115 Add -y option to force logging via syslog rather than stderr.
2116 Useful for daemonised ssh connection (ssh -f). Patch originally from
2117 and ok'd by markus@
Damien Miller51bde602008-11-03 19:23:10 +11002118 - djm@cvs.openbsd.org 2008/10/09 03:50:54
2119 [servconf.c sshd_config.5]
2120 support setting PermitEmptyPasswords in a Match block
2121 requested in PR3891; ok dtucker@
Damien Millerc13c3ee2008-11-03 19:23:28 +11002122 - jmc@cvs.openbsd.org 2008/10/09 06:54:22
2123 [ssh.c]
2124 add -y to usage();
Damien Millerb4acb472008-11-03 19:23:45 +11002125 - stevesk@cvs.openbsd.org 2008/10/10 04:55:16
2126 [scp.c]
2127 spelling in comment; ok djm@
Damien Miller2f54ada2008-11-03 19:24:16 +11002128 - stevesk@cvs.openbsd.org 2008/10/10 05:00:12
2129 [key.c]
2130 typo in error message; ok djm@
Damien Millerece92c82008-11-03 19:25:03 +11002131 - stevesk@cvs.openbsd.org 2008/10/10 16:43:27
2132 [ssh_config.5]
2133 use 'Privileged ports can be forwarded only when logging in as root on
2134 the remote machine.' for RemoteForward just like ssh.1 -R.
2135 ok djm@ jmc@
2136 - stevesk@cvs.openbsd.org 2008/10/14 18:11:33
2137 [sshconnect.c]
2138 use #define ROQUIET here; no binary change. ok dtucker@
Damien Millera414cd32008-11-03 19:25:21 +11002139 - stevesk@cvs.openbsd.org 2008/10/17 18:36:24
2140 [ssh_config.5]
2141 correct and clarify VisualHostKey; ok jmc@
Damien Millere7261c72008-11-03 19:25:40 +11002142 - stevesk@cvs.openbsd.org 2008/10/30 19:31:16
2143 [clientloop.c sshd.c]
2144 don't need to #include "monitor_fdpass.h"
Damien Miller2b20a922008-11-03 19:26:00 +11002145 - stevesk@cvs.openbsd.org 2008/10/31 15:05:34
2146 [dispatch.c]
2147 remove unused #define DISPATCH_MIN; ok markus@
Damien Millerf7475d72008-11-03 19:26:18 +11002148 - djm@cvs.openbsd.org 2008/11/01 04:50:08
2149 [sshconnect2.c]
2150 sprinkle ARGSUSED on dispatch handlers
2151 nuke stale unusued prototype
Damien Millera0094332008-11-03 19:26:35 +11002152 - stevesk@cvs.openbsd.org 2008/11/01 06:43:33
2153 [channels.c]
2154 fix some typos in log messages; ok djm@
Damien Millerc1719f72008-11-03 19:27:07 +11002155 - sobrado@cvs.openbsd.org 2008/11/01 11:14:36
2156 [ssh-keyscan.1 ssh-keyscan.c]
2157 the ellipsis is not an optional argument; while here, improve spacing.
Damien Millera699d952008-11-03 19:27:34 +11002158 - stevesk@cvs.openbsd.org 2008/11/01 17:40:33
2159 [clientloop.c readconf.c readconf.h ssh.c]
2160 merge dynamic forward parsing into parse_forward();
2161 'i think this is OK' djm@
Damien Miller660d7da2008-11-03 19:27:52 +11002162 - stevesk@cvs.openbsd.org 2008/11/02 00:16:16
2163 [ttymodes.c]
2164 protocol 2 tty modes support is now 7.5 years old so remove these
2165 debug3()s; ok deraadt@
Damien Millera279d252008-11-03 19:28:07 +11002166 - stevesk@cvs.openbsd.org 2008/11/03 01:07:02
2167 [readconf.c]
2168 remove valueless comment
Damien Millerf4b39532008-11-03 19:28:21 +11002169 - stevesk@cvs.openbsd.org 2008/11/03 02:44:41
2170 [readconf.c]
2171 fix comment
Damien Miller85dec732008-11-03 20:16:01 +11002172 - (djm) [contrib/caldera/ssh-host-keygen contrib/suse/rc.sshd]
2173 Make example scripts generate keys with default sizes rather than fixed,
2174 non-default 1024 bits; patch from imorgan AT nas.nasa.gov
Damien Miller250071f2008-11-03 20:18:12 +11002175 - (djm) [contrib/sshd.pam.generic contrib/caldera/sshd.pam]
2176 [contrib/redhat/sshd.pam] Move pam_nologin to account group from
2177 incorrect auth group in example files;
2178 patch from imorgan AT nas.nasa.gov
Damien Miller9f6fb562008-11-03 19:15:44 +11002179
Darren Tuckerc570ff72008-09-06 18:20:57 +1000218020080906
2181 - (dtucker) [config.guess config.sub] Update to latest versions from
2182 http://git.savannah.gnu.org/gitweb/ (2008-04-14 and 2008-06-16
2183 respectively).
2184
Darren Tucker661f63b2008-08-30 07:32:37 +1000218520080830
2186 - (dtucker) [openbsd-compat/bsd-poll.c] correctly check for number of FDs
2187 larger than FD_SETSIZE (OpenSSH only ever uses poll with one fd). Patch
2188 from Nicholas Marriott.
2189
Damien Milleraa5f4332008-07-21 18:20:39 +1000219020080721
2191 - (djm) OpenBSD CVS Sync
Damien Miller6ef430d2008-07-23 17:40:04 +10002192 - djm@cvs.openbsd.org 2008/07/23 07:36:55
2193 [servconf.c]
2194 do not try to print options that have been compile-time disabled
2195 in config test mode (sshd -T); report from nix-corp AT esperi.org.uk
2196 ok dtucker@
Damien Miller212f0b02008-07-23 17:42:29 +10002197 - (djm) [servconf.c] Print UsePAM option in config test mode (when it
2198 has been compiled in); report from nix-corp AT esperi.org.uk
2199 ok dtucker@
Damien Miller6ef430d2008-07-23 17:40:04 +10002200
220120080721
2202 - (djm) OpenBSD CVS Sync
Damien Milleraa5f4332008-07-21 18:20:39 +10002203 - jmc@cvs.openbsd.org 2008/07/18 22:51:01
2204 [sftp-server.8]
2205 no need for .Pp before or after .Sh;
Damien Milleraaae43e2008-07-21 18:21:05 +10002206 - djm@cvs.openbsd.org 2008/07/21 08:19:07
2207 [version.h]
2208 openssh-5.1
Damien Miller1f8909c2008-07-21 18:21:52 +10002209 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2210 [contrib/suse/openssh.spec] Update version number in README and RPM specs
Damien Miller8f42e9b2008-07-21 18:22:25 +10002211 - (djm) Release OpenSSH-5.1
Damien Milleraa5f4332008-07-21 18:20:39 +10002212
Damien Miller7ba0ca72008-07-17 18:57:06 +1000221320080717
2214 - (djm) OpenBSD CVS Sync
2215 - djm@cvs.openbsd.org 2008/07/17 08:48:00
2216 [sshconnect2.c]
2217 strnvis preauth banner; pointed out by mpf@ ok markus@
Damien Millera1d03a52008-07-17 18:57:19 +10002218 - djm@cvs.openbsd.org 2008/07/17 08:51:07
2219 [auth2-hostbased.c]
2220 strip trailing '.' from hostname when HostbasedUsesNameFromPacketOnly=yes
2221 report and patch from res AT qoxp.net (bz#1200); ok markus@
Darren Tucker9a3f2b42008-07-17 19:03:49 +10002222 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Remove long-unneeded compat
2223 code, replace with equivalent cygwin library call. Patch from vinschen
Damien Miller2e28d862008-07-17 19:15:43 +10002224 at redhat.com, ok djm@.
2225 - (djm) [sshconnect2.c] vis.h isn't available everywhere
Damien Miller7ba0ca72008-07-17 18:57:06 +10002226
Damien Miller94717b02008-07-16 21:17:23 +1000222720080716
2228 - OpenBSD CVS Sync
2229 - djm@cvs.openbsd.org 2008/07/15 02:23:14
2230 [sftp.1]
2231 number of pipelined requests is now 64;
2232 prodded by Iain.Morgan AT nasa.gov
Damien Millerb9d3bee2008-07-16 22:40:52 +10002233 - djm@cvs.openbsd.org 2008/07/16 11:51:14
2234 [clientloop.c]
2235 rename variable first_gc -> last_gc (since it is actually the last
2236 in the list).
Damien Miller6ef17492008-07-16 22:42:06 +10002237 - djm@cvs.openbsd.org 2008/07/16 11:52:19
2238 [channels.c]
2239 this loop index should be automatic, not static
Damien Miller94717b02008-07-16 21:17:23 +10002240
Damien Miller81dec052008-07-14 11:28:29 +1000224120080714
2242 - (djm) OpenBSD CVS Sync
2243 - sthen@cvs.openbsd.org 2008/07/13 21:22:52
2244 [ssh-keygen.c]
2245 Change "ssh-keygen -F [host] -l" to not display random art unless
2246 -v is also specified, making it consistent with the manual and other
2247 uses of -l.
2248 ok grunk@
Damien Miller163886f2008-07-14 11:28:58 +10002249 - djm@cvs.openbsd.org 2008/07/13 22:13:07
2250 [channels.c]
2251 use struct sockaddr_storage instead of struct sockaddr for accept(2)
2252 address argument. from visibilis AT yahoo.com in bz#1485; ok markus@
Damien Miller7f980d12008-07-14 11:29:24 +10002253 - djm@cvs.openbsd.org 2008/07/13 22:16:03
2254 [sftp.c]
2255 increase number of piplelined requests so they properly fill the
2256 (recently increased) channel window. prompted by rapier AT psc.edu;
2257 ok markus@
Damien Miller276571c2008-07-14 12:09:57 +10002258 - djm@cvs.openbsd.org 2008/07/14 01:55:56
2259 [sftp-server.8]
2260 mention requirement for /dev/log inside chroot when using sftp-server
2261 with ChrootDirectory
Damien Millerce02e5e2008-07-14 12:02:24 +10002262 - (djm) [openbsd-compat/bindresvport.c] Rename variables s/sin/in/ to
2263 avoid clash with sin(3) function; reported by
2264 cristian.ionescu-idbohrn AT axis.com
Damien Miller639ce592008-07-14 12:03:27 +10002265 - (djm) [openbsd-compat/rresvport.c] Add unistd.h for missing close()
2266 prototype; reported by cristian.ionescu-idbohrn AT axis.com
Damien Miller36d70562008-07-14 12:04:43 +10002267 - (djm) [umac.c] Rename variable s/buffer_ptr/bufp/ to avoid clash;
2268 reported by cristian.ionescu-idbohrn AT axis.com
Damien Miller1fc231c2008-07-14 12:12:52 +10002269 - (djm) [contrib/cygwin/Makefile contrib/cygwin/ssh-host-config]
2270 [contrib/cygwin/ssh-user-config contrib/cygwin/sshd-inetd]
2271 Revamped and simplified Cygwin ssh-host-config script that uses
2272 unified csih configuration tool. Requires recent Cygwin.
2273 Patch from vinschen AT redhat.com
Damien Miller81dec052008-07-14 11:28:29 +10002274
Damien Miller2bcb8662008-07-12 17:12:29 +1000227520080712
2276 - (djm) OpenBSD CVS Sync
2277 - djm@cvs.openbsd.org 2008/07/12 04:52:50
2278 [channels.c]
2279 unbreak; move clearing of cctx struct to before first use
2280 reported by dkrause@
Damien Millera034baf2008-07-12 17:12:49 +10002281 - djm@cvs.openbsd.org 2008/07/12 05:33:41
2282 [scp.1]
2283 better description for -i flag:
2284 s/RSA authentication/public key authentication/
Damien Millerc4657ef2008-07-14 21:37:36 +10002285 - (djm) [openbsd-compat/fake-rfc2553.c openbsd-compat/fake-rfc2553.h]
2286 return EAI_FAMILY when trying to lookup unsupported address family;
2287 from vinschen AT redhat.com
Damien Miller2bcb8662008-07-12 17:12:29 +10002288
Damien Miller2f7faf12008-07-11 17:34:35 +1000228920080711
2290 - (djm) OpenBSD CVS Sync
2291 - stevesk@cvs.openbsd.org 2008/07/07 00:31:41
2292 [ttymodes.c]
2293 we don't need arg after the debug3() was removed. from lint.
2294 ok djm@
Damien Miller87dd5f22008-07-11 17:35:09 +10002295 - stevesk@cvs.openbsd.org 2008/07/07 23:32:51
2296 [key.c]
2297 /*NOTREACHED*/ for lint warning:
2298 warning: function key_equal falls off bottom without returning value
2299 ok djm@
Damien Millerdda5fff2008-07-11 17:35:37 +10002300 - markus@cvs.openbsd.org 2008/07/10 18:05:58
2301 [channels.c]
2302 missing bzero; from mickey; ok djm@
Damien Millerb61f3fc2008-07-11 17:36:48 +10002303 - markus@cvs.openbsd.org 2008/07/10 18:08:11
2304 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h sshd.c]
2305 sync v1 and v2 traffic accounting; add it to sshd, too;
2306 ok djm@, dtucker@
Damien Miller2f7faf12008-07-11 17:34:35 +10002307
Damien Millerd9648ee2008-07-09 00:21:12 +1000230820080709
2309 - (djm) [Makefile.in] Print "all tests passed" when all regress tests pass
Damien Miller773a7b92008-07-09 20:54:05 +10002310 - (djm) [auth1.c] Fix format string vulnerability in protocol 1 PAM
2311 account check failure path. The vulnerable format buffer is supplied
2312 from PAM and should not contain attacker-supplied data.
Damien Miller7acf5502008-07-09 20:54:37 +10002313 - (djm) [auth.c] Missing unistd.h for close()
Damien Miller73193b32008-07-09 21:07:19 +10002314 - (djm) [configure.ac] Add -Wformat-security to CFLAGS for gcc 3.x and 4.x
Damien Millerd9648ee2008-07-09 00:21:12 +10002315
Damien Miller22989f12008-07-05 08:59:43 +1000231620080705
2317 - (djm) [auth.c] Fixed test for locked account on HP/UX with shadowed
2318 passwords disabled. bz#1083 report & patch from senthilkumar_sen AT
2319 hotpop.com, w/ dtucker@
Damien Miller20d16942008-07-05 09:36:58 +10002320 - (djm) [atomicio.c configure.ac] Disable poll() fallback in atomiciov for
2321 Tru64. readv doesn't seem to be a comparable object there.
2322 bz#1386, patch from dtucker@ ok me
Damien Miller42743cb2008-07-05 09:50:23 +10002323 - (djm) [Makefile.in] Pass though pass to conch for interop tests
Damien Millerff2e4922008-07-05 09:52:03 +10002324 - (djm) [configure.ac] unbreak: remove extra closing brace
Damien Millerd874fa52008-07-05 09:40:56 +10002325 - (djm) OpenBSD CVS Sync
2326 - djm@cvs.openbsd.org 2008/07/04 23:08:25
2327 [packet.c]
2328 handle EINTR in packet_write_poll()l ok dtucker@
Damien Miller0b4d48b2008-07-05 09:44:53 +10002329 - djm@cvs.openbsd.org 2008/07/04 23:30:16
2330 [auth1.c auth2.c]
2331 Make protocol 1 MaxAuthTries logic match protocol 2's.
2332 Do not treat the first protocol 2 authentication attempt as
2333 a failure IFF it is for method "none".
2334 Makes MaxAuthTries' user-visible behaviour identical for
2335 protocol 1 vs 2.
2336 ok dtucker@
Damien Millerc9c96f22008-07-05 15:17:48 +10002337 - djm@cvs.openbsd.org 2008/07/05 05:16:01
2338 [PROTOCOL]
2339 grammar
Damien Miller22989f12008-07-05 08:59:43 +10002340
Darren Tucker7c99b1c2008-07-04 12:53:23 +1000234120080704
2342 - (dtucker) OpenBSD CVS Sync
2343 - djm@cvs.openbsd.org 2008/07/02 13:30:34
2344 [auth2.c]
2345 really really remove the freebie "none" auth try for protocol 2
Darren Tucker9a2a6092008-07-04 12:53:50 +10002346 - djm@cvs.openbsd.org 2008/07/02 13:47:39
2347 [ssh.1 ssh.c]
2348 When forking after authentication ("ssh -f") with ExitOnForwardFailure
2349 enabled, delay the fork until after replies for any -R forwards have
2350 been seen. Allows for robust detection of -R forward failure when
2351 using -f (similar to bz#92); ok dtucker@
Darren Tuckerf5cafb02008-07-04 12:54:25 +10002352 - otto@cvs.openbsd.org 2008/07/03 21:46:58
2353 [auth2-pubkey.c]
2354 avoid nasty double free; ok dtucker@ djm@
Darren Tuckerb03fd022008-07-04 13:51:12 +10002355 - djm@cvs.openbsd.org 2008/07/04 03:44:59
2356 [servconf.c groupaccess.h groupaccess.c]
2357 support negation of groups in "Match group" block (bz#1315); ok dtucker@
Darren Tucker2784f1f2008-07-04 13:51:45 +10002358 - dtucker@cvs.openbsd.org 2008/07/04 03:47:02
2359 [monitor.c]
2360 Make debug a little clearer. ok djm@
Darren Tucker8c7a14e2008-07-04 17:08:58 +10002361 - djm@cvs.openbsd.org 2008/06/30 08:07:34
2362 [regress/key-options.sh]
2363 shell portability: use "=" instead of "==" in test(1) expressions,
2364 double-quote string with backslash escaped /
Darren Tucker5d6d70a2008-07-04 17:10:30 +10002365 - djm@cvs.openbsd.org 2008/06/30 10:31:11
2366 [regress/{putty-transfer,putty-kex,putty-ciphers}.sh]
2367 remove "set -e" left over from debugging
Darren Tuckerb01bac12008-07-04 17:11:30 +10002368 - djm@cvs.openbsd.org 2008/06/30 10:43:03
2369 [regress/conch-ciphers.sh]
2370 explicitly disable conch options that could interfere with the test
Darren Tuckerf7fa7062008-07-04 14:10:19 +10002371 - (dtucker) [sftp-server.c] Bug #1447: fall back to racy rename if link
2372 returns EXDEV. Patch from Mike Garrison, ok djm@
Damien Millerd8968ad2008-07-04 23:10:49 +10002373 - (djm) [atomicio.c channels.c clientloop.c defines.h includes.h]
2374 [packet.c scp.c serverloop.c sftp-client.c ssh-agent.c ssh-keyscan.c]
2375 [sshd.c] Explicitly handle EWOULDBLOCK wherever we handle EAGAIN, on
2376 some platforms (HP nonstop) it is a distinct errno;
2377 bz#1467 reported by sconeu AT yahoo.com; ok dtucker@
2378
Darren Tucker00f00f02008-07-02 22:31:31 +1000237920080702
2380 - (dtucker) OpenBSD CVS Sync
2381 - djm@cvs.openbsd.org 2008/06/30 08:05:59
2382 [PROTOCOL.agent]
2383 typo: s/constraint_date/constraint_data/
Darren Tucker8810dd42008-07-02 22:32:14 +10002384 - djm@cvs.openbsd.org 2008/06/30 12:15:39
2385 [serverloop.c]
2386 only pass channel requests on session channels through to the session
2387 channel handler, avoiding spurious log messages; ok! markus@
Darren Tucker8748b962008-07-02 22:32:43 +10002388 - djm@cvs.openbsd.org 2008/06/30 12:16:02
2389 [nchan.c]
2390 only send eow@openssh.com notifications for session channels; ok! markus@
Darren Tucker1f781b12008-07-02 22:33:16 +10002391 - djm@cvs.openbsd.org 2008/06/30 12:18:34
2392 [PROTOCOL]
2393 clarify that eow@openssh.com is only sent on session channels
Darren Tucker068e01f2008-07-02 22:33:55 +10002394 - dtucker@cvs.openbsd.org 2008/07/01 07:20:52
2395 [sshconnect.c]
2396 Check ExitOnForwardFailure if forwardings are disabled due to a failed
2397 host key check. ok djm@
Darren Tuckerd7bdc0c2008-07-02 22:34:30 +10002398 - dtucker@cvs.openbsd.org 2008/07/01 07:24:22
2399 [sshconnect.c sshd.c]
2400 Send CR LF during protocol banner exchanges, but only for Protocol 2 only,
2401 in order to comply with RFC 4253. bz #1443, ok djm@
Darren Tuckerf2e21de2008-07-02 22:35:00 +10002402 - stevesk@cvs.openbsd.org 2008/07/01 23:12:47
2403 [PROTOCOL.agent]
2404 fix some typos; ok djm@
Darren Tucker7499b0c2008-07-02 22:35:43 +10002405 - djm@cvs.openbsd.org 2008/07/02 02:24:18
2406 [sshd_config sshd_config.5 sshd.8 servconf.c]
2407 increase default size of ssh protocol 1 ephemeral key from 768 to 1024
2408 bits; prodded by & ok dtucker@ ok deraadt@
Darren Tucker33c787f2008-07-02 22:37:30 +10002409 - dtucker@cvs.openbsd.org 2008/07/02 12:03:51
2410 [auth-rsa.c auth.c auth2-pubkey.c auth.h]
2411 Merge duplicate host key file checks, based in part on a patch from Rob
2412 Holland via bz #1348 . Also checks for non-regular files during protocol
2413 1 RSA auth. ok djm@
Darren Tucker4230a5d2008-07-02 22:56:09 +10002414 - djm@cvs.openbsd.org 2008/07/02 12:36:39
2415 [auth2-none.c auth2.c]
2416 Make protocol 2 MaxAuthTries behaviour a little more sensible:
2417 Check whether client has exceeded MaxAuthTries before running
2418 an authentication method and skip it if they have, previously it
2419 would always allow one try (for "none" auth).
2420 Preincrement failure count before post-auth test - previously this
2421 checked and postincremented, also to allow one "none" try.
2422 Together, these two changes always count the "none" auth method
2423 which could be skipped by a malicious client (e.g. an SSH worm)
2424 to get an extra attempt at a real auth method. They also make
2425 MaxAuthTries=0 a useful way to block users entirely (esp. in a
2426 sshd_config Match block).
2427 Also, move sending of any preauth banner from "none" auth method
2428 to the first call to input_userauth_request(), so worms that skip
2429 the "none" method get to see it too.
Darren Tucker00f00f02008-07-02 22:31:31 +10002430
Damien Miller2e80cf22008-06-30 08:06:25 +1000243120080630
2432 - (djm) OpenBSD CVS Sync
2433 - dtucker@cvs.openbsd.org 2008/06/10 23:13:43
2434 [regress/Makefile regress/key-options.sh]
2435 Add regress test for key options. ok djm@
Damien Millerd9bfce82008-06-30 08:06:51 +10002436 - dtucker@cvs.openbsd.org 2008/06/11 23:11:40
Damien Miller4268a132008-06-30 08:07:56 +10002437 [regress/Makefile]
Damien Millerd9bfce82008-06-30 08:06:51 +10002438 Don't run cipher-speed test by default; mistakenly enabled by me
Damien Miller4268a132008-06-30 08:07:56 +10002439 - djm@cvs.openbsd.org 2008/06/28 13:57:25
2440 [regress/Makefile regress/test-exec.sh regress/conch-ciphers.sh]
2441 very basic regress test against Twisted Conch in "make interop"
2442 target (conch is available in ports/devel/py-twisted/conch);
2443 ok markus@
Damien Millera766cea2008-06-30 08:12:37 +10002444 - (djm) [regress/Makefile] search for conch by path, like we do putty
Damien Miller2e80cf22008-06-30 08:06:25 +10002445
Damien Millerf184bcf2008-06-29 22:45:13 +1000244620080629
2447 - (djm) OpenBSD CVS Sync
2448 - martynas@cvs.openbsd.org 2008/06/21 07:46:46
2449 [sftp.c]
2450 use optopt to get invalid flag, instead of return value of getopt,
2451 which is always '?'; ok djm@
Damien Miller007132a2008-06-29 22:45:37 +10002452 - otto@cvs.openbsd.org 2008/06/25 11:13:43
2453 [key.c]
2454 add key length to visual fingerprint; zap magical constants;
2455 ok grunk@ djm@
Damien Miller9e720282008-06-29 22:46:35 +10002456 - djm@cvs.openbsd.org 2008/06/26 06:10:09
2457 [sftp-client.c sftp-server.c]
2458 allow the sftp chmod(2)-equivalent operation to set set[ug]id/sticky
2459 bits. Note that this only affects explicit setting of modes (e.g. via
2460 sftp(1)'s chmod command) and not file transfers. (bz#1310)
2461 ok deraadt@ at c2k8
Damien Miller2e9cf492008-06-29 22:47:04 +10002462 - djm@cvs.openbsd.org 2008/06/26 09:19:40
2463 [dh.c dh.h moduli.c]
2464 when loading moduli from /etc/moduli in sshd(8), check that they
2465 are of the expected "safe prime" structure and have had
2466 appropriate primality tests performed;
2467 feedback and ok dtucker@
Damien Miller10288242008-06-30 00:04:03 +10002468 - grunk@cvs.openbsd.org 2008/06/26 11:46:31
2469 [readconf.c readconf.h ssh.1 ssh_config.5 sshconnect.c]
2470 Move SSH Fingerprint Visualization away from sharing the config option
2471 CheckHostIP to an own config option named VisualHostKey.
2472 While there, fix the behaviour that ssh would draw a random art picture
2473 on every newly seen host even when the option was not enabled.
2474 prodded by deraadt@, discussions,
2475 help and ok markus@ djm@ dtucker@
Damien Miller86399202008-06-30 00:04:31 +10002476 - jmc@cvs.openbsd.org 2008/06/26 21:11:46
2477 [ssh.1]
2478 add VisualHostKey to the list of options listed in -o;
Damien Millerbd45afb2008-06-30 00:04:57 +10002479 - djm@cvs.openbsd.org 2008/06/28 07:25:07
2480 [PROTOCOL]
2481 spelling fixes
Damien Miller1cfadab2008-06-30 00:05:21 +10002482 - djm@cvs.openbsd.org 2008/06/28 13:58:23
2483 [ssh-agent.c]
2484 refuse to add a key that has unknown constraints specified;
2485 ok markus
Damien Miller471db5c2008-06-30 00:05:48 +10002486 - djm@cvs.openbsd.org 2008/06/28 14:05:15
2487 [ssh-agent.c]
2488 reset global compat flag after processing a protocol 2 signature
2489 request with the legacy DSA encoding flag set; ok markus
Damien Miller1e18beb2008-06-30 00:07:00 +10002490 - djm@cvs.openbsd.org 2008/06/28 14:08:30
2491 [PROTOCOL PROTOCOL.agent]
2492 document the protocol used by ssh-agent; "looks ok" markus@
Damien Millerf184bcf2008-06-29 22:45:13 +10002493
Damien Miller493f0322008-06-28 16:01:35 +1000249420080628
2495 - (djm) [RFC.nroff contrib/cygwin/Makefile contrib/suse/openssh.spec]
2496 RFC.nroff lacks a license, remove it (it is long gone in OpenBSD).
2497
Damien Miller60dcc622008-06-26 15:59:32 +1000249820080626
2499 - (djm) [Makefile.in moduli.5] Include moduli(5) manpage from OpenBSD.
2500 (bz#1372)
Damien Millerf299ff82008-06-26 16:01:56 +10002501 - (djm) [ contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2502 [contrib/suse/openssh.spec] Include moduli.5 in RPM spec files.
Damien Miller60dcc622008-06-26 15:59:32 +10002503
Darren Tuckered3cdc02008-06-16 23:29:18 +1000250420080616
2505 - (dtucker) OpenBSD CVS Sync
2506 - dtucker@cvs.openbsd.org 2008/06/16 13:22:53
2507 [session.c channels.c]
2508 Rename the isatty argument to is_tty so we don't shadow
2509 isatty(3). ok markus@
Darren Tucker1a48aec2008-06-16 23:35:56 +10002510 - (dtucker) [channels.c] isatty -> is_tty here too.
Darren Tuckered3cdc02008-06-16 23:29:18 +10002511
Darren Tucker330c93f2008-06-16 02:27:48 +1000251220080615
2513 - (dtucker) [configure.ac] Enable -fno-builtin-memset when using gcc.
Damien Miller2a628472008-06-16 07:50:24 +10002514 - OpenBSD CVS Sync
2515 - dtucker@cvs.openbsd.org 2008/06/14 15:49:48
2516 [sshd.c]
2517 wrap long line at 80 chars
Damien Miller6ca16c62008-06-16 07:50:58 +10002518 - dtucker@cvs.openbsd.org 2008/06/14 17:07:11
2519 [sshd.c]
2520 ensure default umask disallows at least group and world write; ok djm@
Damien Miller6051c942008-06-16 07:53:16 +10002521 - djm@cvs.openbsd.org 2008/06/14 18:33:43
2522 [session.c]
2523 suppress the warning message from chdir(homedir) failures
2524 when chrooted (bz#1461); ok dtucker
Damien Millerc7ce0da2008-06-16 07:55:06 +10002525 - dtucker@cvs.openbsd.org 2008/06/14 19:42:10
2526 [scp.1]
2527 Mention that scp follows symlinks during -r. bz #1466,
2528 from nectar at apple
Damien Millerc62a5af2008-06-16 07:55:46 +10002529 - dtucker@cvs.openbsd.org 2008/06/15 16:55:38
2530 [sshd_config.5]
2531 MaxSessions is allowed in a Match block too
Damien Miller307c1d12008-06-16 07:56:20 +10002532 - dtucker@cvs.openbsd.org 2008/06/15 16:58:40
2533 [servconf.c sshd_config.5]
2534 Allow MaxAuthTries within a Match block. ok djm@
Damien Millerd310d512008-06-16 07:59:23 +10002535 - djm@cvs.openbsd.org 2008/06/15 20:06:26
2536 [channels.c channels.h session.c]
2537 don't call isatty() on a pty master, instead pass a flag down to
2538 channel_set_fds() indicating that te fds refer to a tty. Fixes a
2539 hang on exit on Solaris (bz#1463) in portable but is actually
2540 a generic bug; ok dtucker deraadt markus
Darren Tucker330c93f2008-06-16 02:27:48 +10002541
Damien Miller8b7ab962008-06-15 10:55:34 +1000254220080614
2543 - (djm) [openbsd-compat/sigact.c] Avoid NULL derefs in ancient sigaction
2544 replacement code; patch from ighighi AT gmail.com in bz#1240;
2545 ok dtucker
2546
Darren Tucker99bb7612008-06-13 22:02:50 +1000254720080613
2548 - (dtucker) OpenBSD CVS Sync
2549 - deraadt@cvs.openbsd.org 2008/06/13 09:44:36
2550 [packet.c]
2551 compile on older gcc; no decl after code
Darren Tuckerf2c16d32008-06-14 08:59:49 +10002552 - dtucker@cvs.openbsd.org 2008/06/13 13:56:59
2553 [monitor.c]
2554 Clear key options in the monitor on failed authentication, prevents
2555 applying additional restrictions to non-pubkey authentications in
2556 the case where pubkey fails but another method subsequently succeeds.
2557 bz #1472, found by Colin Watson, ok markus@ djm@
Darren Tuckerd9526a52008-06-14 09:01:24 +10002558 - dtucker@cvs.openbsd.org 2008/06/13 14:18:51
2559 [auth2-pubkey.c auth-rhosts.c]
2560 Include unistd.h for close(), prevents warnings in -portable
Darren Tucker47e713b2008-06-14 09:01:54 +10002561 - dtucker@cvs.openbsd.org 2008/06/13 17:21:20
2562 [mux.c]
2563 Friendlier error messages for mux fallback. ok djm@
Darren Tucker03ccc9b2008-06-14 09:02:25 +10002564 - dtucker@cvs.openbsd.org 2008/06/13 18:55:22
2565 [scp.c]
2566 Prevent -Wsign-compare warnings on LP64 systems. bz #1192, ok deraadt@
Darren Tuckerf6bffb12008-06-14 09:04:26 +10002567 - grunk@cvs.openbsd.org 2008/06/13 20:13:26
2568 [ssh.1]
2569 Explain the use of SSH fpr visualization using random art, and cite the
2570 original scientific paper inspiring that technique.
2571 Much help with English and nroff by jmc@, thanks.
Darren Tucker30fd49e2008-06-14 09:14:46 +10002572 - (dtucker) [configure.ac] Bug #1276: avoid linking against libgssapi, which
2573 despite its name doesn't seem to implement all of GSSAPI. Patch from
2574 Jan Engelhardt, sanity checked by Simon Wilkinson.
Darren Tucker99bb7612008-06-13 22:02:50 +10002575
Darren Tucker11996732008-06-13 04:32:00 +1000257620080612
2577 - (dtucker) OpenBSD CVS Sync
2578 - jmc@cvs.openbsd.org 2008/06/11 07:30:37
2579 [sshd.8]
2580 kill trailing whitespace;
Darren Tucker9c16ac92008-06-13 04:40:35 +10002581 - grunk@cvs.openbsd.org 2008/06/11 21:01:35
2582 [ssh_config.5 key.h readconf.c readconf.h ssh-keygen.1 ssh-keygen.c key.c
2583 sshconnect.c]
2584 Introduce SSH Fingerprint ASCII Visualization, a technique inspired by the
2585 graphical hash visualization schemes known as "random art", and by
2586 Dan Kaminsky's musings on the subject during a BlackOp talk at the
2587 23C3 in Berlin.
2588 Scientific publication (original paper):
2589 "Hash Visualization: a New Technique to improve Real-World Security",
2590 Perrig A. and Song D., 1999, International Workshop on Cryptographic
2591 Techniques and E-Commerce (CrypTEC '99)
2592 http://sparrow.ece.cmu.edu/~adrian/projects/validation/validation.pdf
2593 The algorithm used here is a worm crawling over a discrete plane,
2594 leaving a trace (augmenting the field) everywhere it goes.
2595 Movement is taken from dgst_raw 2bit-wise. Bumping into walls
2596 makes the respective movement vector be ignored for this turn,
2597 thus switching to the other color of the chessboard.
2598 Graphs are not unambiguous for now, because circles in graphs can be
2599 walked in either direction.
2600 discussions with several people,
2601 help, corrections and ok markus@ djm@
Darren Tuckera376a322008-06-13 04:42:14 +10002602 - grunk@cvs.openbsd.org 2008/06/11 21:38:25
2603 [ssh-keygen.c]
2604 ssh-keygen -lv -f /etc/ssh/ssh_host_rsa_key.pub
2605 would not display you the random art as intended, spotted by canacar@
Darren Tucker35c45532008-06-13 04:43:15 +10002606 - grunk@cvs.openbsd.org 2008/06/11 22:20:46
2607 [ssh-keygen.c ssh-keygen.1]
2608 ssh-keygen would write fingerprints to STDOUT, and random art to STDERR,
2609 that is not how it was envisioned.
2610 Also correct manpage saying that -v is needed along with -l for it to work.
2611 spotted by naddy@
Darren Tucker014d76f2008-06-13 04:43:51 +10002612 - otto@cvs.openbsd.org 2008/06/11 23:02:22
2613 [key.c]
2614 simpler way of computing the augmentations; ok grunk@
Darren Tuckerdcc1ab52008-06-13 04:44:25 +10002615 - grunk@cvs.openbsd.org 2008/06/11 23:03:56
2616 [ssh_config.5]
2617 CheckHostIP set to ``fingerprint'' will display both hex and random art
2618 spotted by naddy@
Darren Tuckerd32b28a2008-06-13 04:45:50 +10002619 - grunk@cvs.openbsd.org 2008/06/11 23:51:57
2620 [key.c]
2621 #define statements that are not atoms need braces around them, else they
2622 will cause trouble in some cases.
2623 Also do a computation of -1 once, and not in a loop several times.
2624 spotted by otto@
Darren Tucker78913e02008-06-13 04:47:34 +10002625 - dtucker@cvs.openbsd.org 2008/06/12 00:03:49
2626 [dns.c canohost.c sshconnect.c]
2627 Do not pass "0" strings as ports to getaddrinfo because the lookups
2628 can slow things down and we never use the service info anyway. bz
2629 #859, patch from YOSHIFUJI Hideaki and John Devitofranceschi. ok
2630 deraadt@ djm@
2631 djm belives that the reason for the "0" strings is to ensure that
2632 it's not possible to call getaddrinfo with both host and port being
2633 NULL. In the case of canohost.c host is a local array. In the
2634 case of sshconnect.c, it's checked for null immediately before use.
2635 In dns.c it ultimately comes from ssh.c:main() and is guaranteed to
2636 be non-null but it's not obvious, so I added a warning message in
2637 case it is ever passed a null.
2638 - grunk@cvs.openbsd.org 2008/06/12 00:13:55
2639 [sshconnect.c]
2640 Make ssh print the random art also when ssh'ing to a host using IP only.
2641 spotted by naddy@, ok and help djm@ dtucker@
Darren Tucker267e28b2008-06-13 04:48:11 +10002642 - otto@cvs.openbsd.org 2008/06/12 00:13:13
2643 [key.c]
2644 use an odd number of rows and columns and a separate start marker, looks
2645 better; ok grunk@
Darren Tucker2fb66ca2008-06-13 04:49:33 +10002646 - djm@cvs.openbsd.org 2008/06/12 03:40:52
2647 [clientloop.h mux.c channels.c clientloop.c channels.h]
2648 Enable ~ escapes for multiplex slave sessions; give each channel
2649 its own escape state and hook the escape filters up to muxed
2650 channels. bz #1331
2651 Mux slaves do not currently support the ~^Z and ~& escapes.
2652 NB. this change cranks the mux protocol version, so a new ssh
2653 mux client will not be able to connect to a running old ssh
2654 mux master.
2655 ok dtucker@
Darren Tucker9f407c42008-06-13 04:50:27 +10002656 - djm@cvs.openbsd.org 2008/06/12 04:06:00
2657 [clientloop.h ssh.c clientloop.c]
2658 maintain an ordered queue of outstanding global requests that we
2659 expect replies to, similar to the per-channel confirmation queue.
2660 Use this queue to verify success or failure for remote forward
2661 establishment in a race free way.
2662 ok dtucker@
Darren Tucker4d5cd332008-06-13 04:51:14 +10002663 - djm@cvs.openbsd.org 2008/06/12 04:17:47
2664 [clientloop.c]
2665 thall shalt not code past the eightieth column
Darren Tuckerd6173c02008-06-13 04:52:53 +10002666 - djm@cvs.openbsd.org 2008/06/12 04:24:06
2667 [ssh.c]
2668 thal shalt not code past the eightieth column
Darren Tuckere5d98292008-06-13 04:53:27 +10002669 - djm@cvs.openbsd.org 2008/06/12 05:15:41
2670 [PROTOCOL]
2671 document tun@openssh.com forwarding method
Darren Tuckerba69c7a2008-06-13 04:54:05 +10002672 - djm@cvs.openbsd.org 2008/06/12 05:32:30
2673 [mux.c]
2674 some more TODO for me
Darren Tucker4b3b9772008-06-13 04:55:10 +10002675 - grunk@cvs.openbsd.org 2008/06/12 05:42:46
2676 [key.c]
2677 supply the key type (rsa1, rsa, dsa) as a caption in the frame of the
2678 random art. while there, stress the fact that the field base should at
2679 least be 8 characters for the pictures to make sense.
2680 comment and ok djm@
2681 - grunk@cvs.openbsd.org 2008/06/12 06:32:59
2682 [key.c]
2683 We already mark the start of the worm, now also mark the end of the worm
2684 in our random art drawings.
2685 ok djm@
Darren Tucker84c56f52008-06-13 04:55:46 +10002686 - djm@cvs.openbsd.org 2008/06/12 15:19:17
2687 [clientloop.h channels.h clientloop.c channels.c mux.c]
2688 The multiplexing escape char handler commit last night introduced a
2689 small memory leak per session; plug it.
Darren Tuckerf6b01b72008-06-13 04:56:37 +10002690 - dtucker@cvs.openbsd.org 2008/06/12 16:35:31
2691 [ssh_config.5 ssh.c]
2692 keyword expansion for localcommand. ok djm@
Darren Tuckerf09e8252008-06-13 05:18:03 +10002693 - jmc@cvs.openbsd.org 2008/06/12 19:10:09
2694 [ssh_config.5 ssh-keygen.1]
2695 tweak the ascii art text; ok grunk
Darren Tucker3fc464e2008-06-13 06:42:45 +10002696 - dtucker@cvs.openbsd.org 2008/06/12 20:38:28
2697 [sshd.c sshconnect.c packet.h misc.c misc.h packet.c]
2698 Make keepalive timeouts apply while waiting for a packet, particularly
2699 during key renegotiation (bz #1363). With djm and Matt Day, ok djm@
Darren Tuckera64ab332008-06-13 07:01:29 +10002700 - djm@cvs.openbsd.org 2008/06/12 20:47:04
2701 [sftp-client.c]
2702 print extension revisions for extensions that we understand
Darren Tuckerbabc1d52008-06-13 08:56:01 +10002703 - djm@cvs.openbsd.org 2008/06/12 21:06:25
2704 [clientloop.c]
2705 I was coalescing expected global request confirmation replies at
2706 the wrong end of the queue - fix; prompted by markus@
Darren Tuckerb68fb4a2008-06-13 08:57:27 +10002707 - grunk@cvs.openbsd.org 2008/06/12 21:14:46
2708 [ssh-keygen.c]
2709 make ssh-keygen -lf show the key type just as ssh-add -l would do it
2710 ok djm@ markus@
Darren Tucker0f0ef0a2008-06-13 08:58:05 +10002711 - grunk@cvs.openbsd.org 2008/06/12 22:03:36
2712 [key.c]
2713 add my copyright, ok djm@
Darren Tuckerff4454d2008-06-13 10:21:51 +10002714 - ian@cvs.openbsd.org 2008/06/12 23:24:58
2715 [sshconnect.c]
2716 tweak wording in message, ok deraadt@ jmc@
Darren Tuckerf8b7eb72008-06-13 10:22:54 +10002717 - dtucker@cvs.openbsd.org 2008/06/13 00:12:02
2718 [sftp.h log.h]
2719 replace __dead with __attribute__((noreturn)), makes things
2720 a little easier to port. Also, add it to sigdie(). ok djm@
Darren Tuckerca19bfe2008-06-13 10:24:03 +10002721 - djm@cvs.openbsd.org 2008/06/13 00:16:49
2722 [mux.c]
2723 fall back to creating a new TCP connection on most multiplexing errors
2724 (socket connect fail, invalid version, refused permittion, corrupted
2725 messages, etc.); bz #1329 ok dtucker@
Darren Tucker1adfd362008-06-13 10:58:10 +10002726 - dtucker@cvs.openbsd.org 2008/06/13 00:47:53
2727 [mux.c]
2728 upcast size_t to u_long to match format arg; ok djm@
Darren Tuckerc7e030f2008-06-13 10:58:50 +10002729 - dtucker@cvs.openbsd.org 2008/06/13 00:51:47
2730 [mac.c]
2731 upcast another size_t to u_long to match format
Darren Tucker7517b5b2008-06-13 14:48:59 +10002732 - dtucker@cvs.openbsd.org 2008/06/13 01:38:23
2733 [misc.c]
2734 upcast uid to long with matching %ld, prevents warnings in portable
Darren Tucker06db5842008-06-13 14:51:28 +10002735 - djm@cvs.openbsd.org 2008/06/13 04:40:22
2736 [auth2-pubkey.c auth-rhosts.c]
2737 refuse to read ~/.shosts or ~/.ssh/authorized_keys that are not
2738 regular files; report from Solar Designer via Colin Watson in bz#1471
2739 ok dtucker@ deraadt
Darren Tucker1cf65ae2008-06-13 05:09:18 +10002740 - (dtucker) [clientloop.c serverloop.c] channel_register_filter now
2741 takes 2 more args. with djm@
Darren Tucker61b06952008-06-13 10:28:57 +10002742 - (dtucker) [defines.h] Bug #1112: __dead is, well dead. Based on a patch
2743 from Todd Vierling.
Darren Tucker2c1eb822008-06-13 11:13:13 +10002744 - (dtucker) [auth-sia.c] Bug #1241: support password expiry on Tru64 SIA
2745 systems. Patch from R. Scott Bailey.
Darren Tucker2c91b282008-06-13 12:40:55 +10002746 - (dtucker) [umac.c] STORE_UINT32_REVERSED and endian_convert are never used
2747 on big endian machines, so ifdef them for little-endian only to prevent
2748 unused function warnings on big-endians.
Darren Tuckerf387e592008-06-13 15:03:14 +10002749 - (dtucker) [openbsd-compat/setenv.c] Make offsets size_t to prevent
2750 compiler warnings on some platforms. Based on a discussion with otto@
Darren Tucker11996732008-06-13 04:32:00 +10002751
Damien Miller4401e452008-06-12 06:05:12 +1000275220080611
2753 - (djm) [channels.c configure.ac]
2754 Do not set SO_REUSEADDR on wildcard X11 listeners (X11UseLocalhost=no)
2755 bz#1464; ok dtucker
2756
Darren Tucker7a3935d2008-06-10 22:59:10 +1000275720080610
2758 - (dtucker) OpenBSD CVS Sync
2759 - djm@cvs.openbsd.org 2008/06/10 03:57:27
2760 [servconf.c match.h sshd_config.5]
2761 support CIDR address matching in sshd_config "Match address" blocks, with
2762 full support for negation and fall-back to classic wildcard matching.
2763 For example:
2764 Match address 192.0.2.0/24,3ffe:ffff::/32,!10.*
2765 PasswordAuthentication yes
2766 addrmatch.c code mostly lifted from flowd's addr.c
2767 feedback and ok dtucker@
Darren Tuckerb06cc4a2008-06-10 22:59:53 +10002768 - djm@cvs.openbsd.org 2008/06/10 04:17:46
2769 [sshd_config.5]
2770 better reference for pattern-list
Darren Tuckere7140f22008-06-10 23:01:51 +10002771 - dtucker@cvs.openbsd.org 2008/06/10 04:50:25
2772 [sshd.c channels.h channels.c log.c servconf.c log.h servconf.h sshd.8]
2773 Add extended test mode (-T) and connection parameters for test mode (-C).
2774 -T causes sshd to write its effective configuration to stdout and exit.
2775 -C causes any relevant Match rules to be applied before output. The
2776 combination allows tesing of the parser and config files. ok deraadt djm
Darren Tucker6a2a4002008-06-10 23:03:04 +10002777 - jmc@cvs.openbsd.org 2008/06/10 07:12:00
2778 [sshd_config.5]
2779 tweak previous;
Darren Tuckere7f3f752008-06-10 23:06:01 +10002780 - jmc@cvs.openbsd.org 2008/06/10 08:17:40
2781 [sshd.8 sshd.c]
2782 - update usage()
2783 - fix SYNOPSIS, and sort options
2784 - some minor additional fixes
Darren Tuckerd788b7c2008-06-10 23:15:54 +10002785 - dtucker@cvs.openbsd.org 2008/06/09 18:06:32
2786 [regress/test-exec.sh]
2787 Don't generate putty keys if we're not going to use them. ok djm
Darren Tucker10f92422008-06-10 23:16:46 +10002788 - dtucker@cvs.openbsd.org 2008/06/10 05:23:32
2789 [regress/addrmatch.sh regress/Makefile]
2790 Regress test for Match CIDR rules. ok djm@
Darren Tucker5f346642008-06-11 01:38:52 +10002791 - dtucker@cvs.openbsd.org 2008/06/10 15:21:41
2792 [test-exec.sh]
2793 Use a more portable construct for checking if we're running a putty test
Darren Tuckerd8bafea2008-06-11 01:39:38 +10002794 - dtucker@cvs.openbsd.org 2008/06/10 15:28:49
2795 [test-exec.sh]
2796 Add quotes
Darren Tuckerc9807e82008-06-11 09:33:01 +10002797 - dtucker@cvs.openbsd.org 2008/06/10 18:21:24
2798 [ssh_config.5]
2799 clarify that Host patterns are space-separated. ok deraadt
Darren Tucker8901fa92008-06-11 09:34:01 +10002800 - djm@cvs.openbsd.org 2008/06/10 22:15:23
2801 [PROTOCOL ssh.c serverloop.c]
2802 Add a no-more-sessions@openssh.com global request extension that the
2803 client sends when it knows that it will never request another session
2804 (i.e. when session multiplexing is disabled). This allows a server to
2805 disallow further session requests and terminate the session.
2806 Why would a non-multiplexing client ever issue additional session
2807 requests? It could have been attacked with something like SSH'jack:
2808 http://www.storm.net.nz/projects/7
2809 feedback & ok markus
Darren Tucker896ad5a2008-06-11 09:34:46 +10002810 - djm@cvs.openbsd.org 2008/06/10 23:06:19
2811 [auth-options.c match.c servconf.c addrmatch.c sshd.8]
2812 support CIDR address matching in .ssh/authorized_keys from="..." stanzas
2813 ok and extensive testing dtucker@
Darren Tucker2a8b1382008-06-11 09:35:37 +10002814 - dtucker@cvs.openbsd.org 2008/06/10 23:21:34
2815 [bufaux.c]
2816 Use '\0' for a nul byte rather than unadorned 0. ok djm@
Darren Tuckere045e0c2008-06-11 09:38:12 +10002817 - dtucker@cvs.openbsd.org 2008/06/10 23:13:43
2818 [Makefile regress/key-options.sh]
2819 Add regress test for key options. ok djm@
Darren Tucker5d376902008-06-11 04:15:05 +10002820 - (dtucker) [openbsd-compat/fake-rfc2553.h] Add sin6_scope_id to sockaddr_in6
2821 since the new CIDR code in addmatch.c references it.
2822 - (dtucker) [Makefile.in configure.ac regress/addrmatch.sh] Skip IPv6
2823 specific tests on platforms that don't do IPv6.
Darren Tucker34f49c62008-06-11 05:15:51 +10002824 - (dtucker) [Makefile.in] Define TEST_SSH_IPV6 in make's arguments as well
2825 as environment.
Darren Tuckerb8e05002008-06-11 09:47:59 +10002826 - (dtucker) [Makefile.in] Move addrmatch.o to libssh.a where it's needed now.
Darren Tucker7a3935d2008-06-10 22:59:10 +10002827
Darren Tucker422c34c2008-06-09 22:48:31 +1000282820080609
2829 - (dtucker) OpenBSD CVS Sync
2830 - dtucker@cvs.openbsd.org 2008/06/08 17:04:41
2831 [sftp-server.c]
2832 Add case for ENOSYS in errno_to_portable; ok deraadt
Darren Tucker7b598892008-06-09 22:49:36 +10002833 - dtucker@cvs.openbsd.org 2008/06/08 20:15:29
2834 [sftp.c sftp-client.c sftp-client.h]
2835 Have the sftp client store the statvfs replies in wire format,
2836 which prevents problems when the server's native sizes exceed the
2837 client's.
2838 Also extends the sizes of the remaining 32bit wire format to 64bit,
2839 they're specified as unsigned long in the standard.
Darren Tucker3463aca2008-06-09 23:06:55 +10002840 - dtucker@cvs.openbsd.org 2008/06/09 13:02:39
Darren Tucker588fe0e2008-06-09 23:52:22 +10002841 [sftp-server.c]
Darren Tucker3463aca2008-06-09 23:06:55 +10002842 Extend 32bit -> 64bit values for statvfs extension missed in previous
2843 commit.
Darren Tucker588fe0e2008-06-09 23:52:22 +10002844 - dtucker@cvs.openbsd.org 2008/06/09 13:38:46
2845 [PROTOCOL]
2846 Use a $OpenBSD tag so our scripts will sync changes.
Darren Tucker422c34c2008-06-09 22:48:31 +10002847
Darren Tucker598eaa62008-06-09 03:32:29 +1000284820080608
2849 - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c
2850 openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h
2851 openbsd-compat/bsd-statvfs.{c,h}] Add a null implementation of statvfs and
2852 fstatvfs and remove #defines around statvfs code. ok djm@
Darren Tucker77001382008-06-09 06:17:53 +10002853 - (dtucker) [configure.ac defines.h sftp-client.c M sftp-server.c] Add a
2854 macro to convert fsid to unsigned long for platforms where fsid is a
2855 2-member array.
Darren Tucker598eaa62008-06-09 03:32:29 +10002856
Darren Tuckerce38d822008-06-07 06:25:15 +1000285720080607
2858 - (dtucker) [mux.c] Include paths.h inside ifdef HAVE_PATHS_H.
Darren Tucker5b2e2ba2008-06-08 09:25:28 +10002859 - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c]
2860 Do not enable statvfs extensions on platforms that do not have statvfs.
Darren Tucker136e56f2008-06-08 12:49:30 +10002861 - (dtucker) OpenBSD CVS Sync
2862 - djm@cvs.openbsd.org 2008/05/19 06:14:02
2863 [packet.c] unbreak protocol keepalive timeouts bz#1465; ok dtucker@
Darren Tuckerdd392642008-06-08 12:53:20 +10002864 - djm@cvs.openbsd.org 2008/05/19 15:45:07
2865 [sshtty.c ttymodes.c sshpty.h]
2866 Fix sending tty modes when stdin is not a tty (bz#1199). Previously
2867 we would send the modes corresponding to a zeroed struct termios,
2868 whereas we should have been sending an empty list of modes.
2869 Based on patch from daniel.ritz AT alcatel.ch; ok dtucker@ markus@
Darren Tucker0f7e9102008-06-08 12:54:29 +10002870 - djm@cvs.openbsd.org 2008/05/19 15:46:31
2871 [ssh-keygen.c]
2872 support -l (print fingerprint) in combination with -F (find host) to
2873 search for a host in ~/.ssh/known_hosts and display its fingerprint;
2874 ok markus@
Darren Tuckerdf189fb2008-06-08 12:55:32 +10002875 - djm@cvs.openbsd.org 2008/05/19 20:53:52
2876 [clientloop.c]
2877 unbreak tree by committing this bit that I missed from:
2878 Fix sending tty modes when stdin is not a tty (bz#1199). Previously
2879 we would send the modes corresponding to a zeroed struct termios,
2880 whereas we should have been sending an empty list of modes.
2881 Based on patch from daniel.ritz AT alcatel.ch; ok dtucker@ markus@
Darren Tuckerce38d822008-06-07 06:25:15 +10002882
Damien Miller58ea61b2008-06-04 10:54:00 +1000288320080604
2884 - (djm) [openbsd-compat/bsd-arc4random.c] Fix math bug that caused bias
2885 in arc4random_uniform with upper_bound in (2^30,2*31). Note that
2886 OpenSSH did not make requests with upper bounds in this range.
2887
Damien Millera7058ec2008-05-20 08:57:06 +1000288820080519
2889 - (djm) [configure.ac mux.c sftp.c openbsd-compat/Makefile.in]
2890 [openbsd-compat/fmt_scaled.c openbsd-compat/openbsd-compat.h]
2891 Fix compilation on Linux, including pulling in fmt_scaled(3)
2892 implementation from OpenBSD's libutil.
2893
Damien Miller797e3d12008-05-19 14:27:42 +1000289420080518
2895 - (djm) OpenBSD CVS Sync
2896 - djm@cvs.openbsd.org 2008/04/04 05:14:38
2897 [sshd_config.5]
2898 ChrootDirectory is supported in Match blocks (in fact, it is most useful
2899 there). Spotted by Minstrel AT minstrel.org.uk
Damien Miller56f41dd2008-05-19 14:28:19 +10002900 - djm@cvs.openbsd.org 2008/04/04 06:44:26
2901 [sshd_config.5]
2902 oops, some unrelated stuff crept into that commit - backout.
2903 spotted by jmc@
Damien Miller25434de2008-05-19 14:29:08 +10002904 - djm@cvs.openbsd.org 2008/04/05 02:46:02
2905 [sshd_config.5]
2906 HostbasedAuthentication is supported under Match too
Damien Millera4be7c22008-05-19 14:47:37 +10002907 - (djm) [openbsd-compat/bsd-arc4random.c openbsd-compat/openbsd-compat.c]
2908 [configure.ac] Implement arc4random_buf(), import implementation of
2909 arc4random_uniform() from OpenBSD
Damien Millercaaed012008-05-19 15:26:54 +10002910 - (djm) [openbsd-compat/bsd-arc4random.c] Warning fixes
Damien Miller94178312008-05-19 15:28:35 +10002911 - (djm) [openbsd-compat/port-tun.c] needs sys/queue.h
Damien Miller354c48c2008-05-19 14:50:00 +10002912 - (djm) OpenBSD CVS Sync
2913 - djm@cvs.openbsd.org 2008/04/13 00:22:17
2914 [dh.c sshd.c]
2915 Use arc4random_buf() when requesting more than a single word of output
2916 Use arc4random_uniform() when the desired random number upper bound
2917 is not a power of two
2918 ok deraadt@ millert@
Damien Millerd671e5a2008-05-19 14:53:33 +10002919 - djm@cvs.openbsd.org 2008/04/18 12:32:11
2920 [sftp-client.c sftp-client.h sftp-server.c sftp.1 sftp.c sftp.h]
2921 introduce sftp extension methods statvfs@openssh.com and
2922 fstatvfs@openssh.com that implement statvfs(2)-like operations,
2923 based on a patch from miklos AT szeredi.hu (bz#1399)
2924 also add a "df" command to the sftp client that uses the
2925 statvfs@openssh.com to produce a df(1)-like display of filesystem
2926 space and inode utilisation
2927 ok markus@
Damien Miller64058cb2008-05-19 14:54:25 +10002928 - jmc@cvs.openbsd.org 2008/04/18 17:15:47
2929 [sftp.1]
2930 macro fixage;
Damien Millerff0dd882008-05-19 14:55:02 +10002931 - djm@cvs.openbsd.org 2008/04/18 22:01:33
2932 [session.c]
2933 remove unneccessary parentheses
Damien Miller0b4c1652008-05-19 14:55:29 +10002934 - otto@cvs.openbsd.org 2008/04/29 11:20:31
2935 [monitor_mm.h]
2936 garbage collect two unused fields in struct mm_master; ok markus@
Damien Millerbacb7fb2008-05-19 14:56:33 +10002937 - djm@cvs.openbsd.org 2008/04/30 10:14:03
2938 [ssh-keyscan.1 ssh-keyscan.c]
2939 default to rsa (protocol 2) keys, instead of rsa1 keys; spotted by
2940 larsnooden AT openoffice.org
Damien Miller4f755cd2008-05-19 14:57:41 +10002941 - pyr@cvs.openbsd.org 2008/05/07 05:49:37
2942 [servconf.c servconf.h session.c sshd_config.5]
2943 Enable the AllowAgentForwarding option in sshd_config (global and match
2944 context), to specify if agents should be permitted on the server.
2945 As the man page states:
2946 ``Note that disabling Agent forwarding does not improve security
2947 unless users are also denied shell access, as they can always install
2948 their own forwarders.''
2949 ok djm@, ok and a mild frown markus@
Damien Millerba3a6592008-05-19 14:58:22 +10002950 - pyr@cvs.openbsd.org 2008/05/07 06:43:35
2951 [sshd_config]
2952 push the sshd_config bits in, spotted by ajacoutot@
Damien Millere9890192008-05-19 14:59:02 +10002953 - jmc@cvs.openbsd.org 2008/05/07 08:00:14
2954 [sshd_config.5]
2955 sort;
Damien Millerdb255ca2008-05-19 14:59:37 +10002956 - markus@cvs.openbsd.org 2008/05/08 06:59:01
2957 [bufaux.c buffer.h channels.c packet.c packet.h]
2958 avoid extra malloc/copy/free when receiving data over the net;
2959 ~10% speedup for localhost-scp; ok djm@
Damien Millerb84886b2008-05-19 15:05:07 +10002960 - djm@cvs.openbsd.org 2008/05/08 12:02:23
2961 [auth-options.c auth1.c channels.c channels.h clientloop.c gss-serv.c]
2962 [monitor.c monitor_wrap.c nchan.c servconf.c serverloop.c session.c]
2963 [ssh.c sshd.c]
2964 Implement a channel success/failure status confirmation callback
2965 mechanism. Each channel maintains a queue of callbacks, which will
2966 be drained in order (RFC4253 guarantees confirm messages are not
2967 reordered within an channel).
2968 Also includes a abandonment callback to clean up if a channel is
2969 closed without sending confirmation messages. This probably
2970 shouldn't happen in compliant implementations, but it could be
2971 abused to leak memory.
2972 ok markus@ (as part of a larger diff)
Damien Miller7207f642008-05-19 15:34:50 +10002973 - djm@cvs.openbsd.org 2008/05/08 12:21:16
2974 [monitor.c monitor_wrap.c session.h servconf.c servconf.h session.c]
2975 [sshd_config sshd_config.5]
2976 Make the maximum number of sessions run-time controllable via
2977 a sshd_config MaxSessions knob. This is useful for disabling
2978 login/shell/subsystem access while leaving port-forwarding working
2979 (MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or
2980 simply increasing the number of allows multiplexed sessions.
2981 Because some bozos are sure to configure MaxSessions in excess of the
2982 number of available file descriptors in sshd (which, at peak, might be
2983 as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak fds
2984 on error paths, and make it fail gracefully on out-of-fd conditions -
2985 sending channel errors instead of than exiting with fatal().
2986 bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com
2987 ok markus@
Damien Miller5771ed72008-05-19 15:35:33 +10002988 - djm@cvs.openbsd.org 2008/05/08 13:06:11
2989 [clientloop.c clientloop.h ssh.c]
2990 Use new channel status confirmation callback system to properly deal
2991 with "important" channel requests that fail, in particular command exec,
2992 shell and subsystem requests. Previously we would optimistically assume
2993 that the requests would always succeed, which could cause hangs if they
2994 did not (e.g. when the server runs out of fds) or were unimplemented by
2995 the server (bz #1384)
2996 Also, properly report failing multiplex channel requests via the mux
2997 client stderr (subject to LogLevel in the mux master) - better than
2998 silently failing.
2999 most bits ok markus@ (as part of a larger diff)
Damien Millerbd740252008-05-19 15:37:09 +10003000 - djm@cvs.openbsd.org 2008/05/09 04:55:56
3001 [channels.c channels.h clientloop.c serverloop.c]
3002 Try additional addresses when connecting to a port forward destination
3003 whose DNS name resolves to more than one address. The previous behaviour
3004 was to try the first address and give up.
3005 Reported by stig AT venaas.com in bz#343
3006 great feedback and ok markus@
Damien Millerb1cbfa22008-05-19 16:00:08 +10003007 - djm@cvs.openbsd.org 2008/05/09 14:18:44
3008 [clientloop.c clientloop.h ssh.c mux.c]
3009 tidy up session multiplexing code, moving it into its own file and
3010 making the function names more consistent - making ssh.c and
3011 clientloop.c a fair bit more readable.
3012 ok markus@
Damien Millerb3da5932008-05-19 16:02:37 +10003013 - djm@cvs.openbsd.org 2008/05/09 14:26:08
3014 [ssh.c]
3015 dingo stole my diff hunk
Damien Miller2ff1ca52008-05-19 16:04:56 +10003016 - markus@cvs.openbsd.org 2008/05/09 16:16:06
3017 [session.c]
3018 re-add the USE_PIPES code and enable it.
3019 without pipes shutdown-read from the sshd does not trigger
3020 a SIGPIPE when the forked program does a write.
3021 ok djm@
3022 (Id sync only, USE_PIPES never left portable OpenSSH)
Damien Millerd654dd22008-05-19 16:05:41 +10003023 - markus@cvs.openbsd.org 2008/05/09 16:17:51
3024 [channels.c]
3025 error-fd race: don't enable the error fd in the select bitmask
3026 for channels with both in- and output closed, since the channel
3027 will go away before we call select();
3028 report, lots of debugging help and ok djm@
Damien Millerbab9bd42008-05-19 16:06:47 +10003029 - markus@cvs.openbsd.org 2008/05/09 16:21:13
3030 [channels.h clientloop.c nchan.c serverloop.c]
3031 unbreak
3032 ssh -2 localhost od /bin/ls | true
3033 ignoring SIGPIPE by adding a new channel message (EOW) that signals
3034 the peer that we're not interested in any data it might send.
3035 fixes bz #85; discussion, debugging and ok djm@
Damien Miller0f30c872008-05-19 16:07:45 +10003036 - pvalchev@cvs.openbsd.org 2008/05/12 20:52:20
3037 [umac.c]
3038 Ensure nh_result lies on a 64-bit boundary (fixes warnings observed
3039 on Itanium on Linux); from Dale Talcott (bug #1462); ok djm@
Damien Miller5159bdd2008-05-19 16:08:20 +10003040 - djm@cvs.openbsd.org 2008/05/15 23:52:24
3041 [nchan2.ms]
3042 document eow message in ssh protocol 2 channel state machine;
3043 feedback and ok markus@
Damien Millera7e0d5a2008-05-19 16:08:41 +10003044 - djm@cvs.openbsd.org 2008/05/18 21:29:05
3045 [sftp-server.c]
3046 comment extension announcement
Damien Miller58a81142008-05-19 16:11:56 +10003047 - djm@cvs.openbsd.org 2008/05/16 08:30:42
3048 [PROTOCOL]
3049 document our protocol extensions and deviations; ok markus@
3050 - djm@cvs.openbsd.org 2008/05/17 01:31:56
3051 [PROTOCOL]
3052 grammar and correctness fixes from stevesk@
Damien Miller797e3d12008-05-19 14:27:42 +10003053
Damien Miller5f5cd742008-04-03 08:43:57 +1100305420080403
Damien Miller55754fb2008-04-04 16:16:35 +11003055 - (djm) [openbsd-compat/bsd-poll.c] Include stdlib.h to avoid compile-
3056 time warnings on LynxOS. Patch from ops AT iki.fi
Damien Millerc5750222008-05-16 10:01:54 +10003057 - (djm) Force string arguments to replacement setproctitle() though
3058 strnvis first. Ok dtucker@
Damien Miller55754fb2008-04-04 16:16:35 +11003059
306020080403
Damien Miller5f5cd742008-04-03 08:43:57 +11003061 - (djm) OpenBSD CVS sync:
3062 - markus@cvs.openbsd.org 2008/04/02 15:36:51
3063 [channels.c]
3064 avoid possible hijacking of x11-forwarded connections (back out 1.183)
3065 CVE-2008-1483; ok djm@
Damien Miller13ba9c22008-04-03 20:52:51 +11003066 - jmc@cvs.openbsd.org 2008/03/27 22:37:57
3067 [sshd.8]
3068 remove trailing whitespace;
Damien Millera68d31b2008-04-03 20:53:08 +11003069 - djm@cvs.openbsd.org 2008/04/03 09:50:14
3070 [version.h]
3071 openssh-5.0
Damien Miller5a4b6462008-04-03 20:55:44 +11003072 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
3073 [contrib/suse/openssh.spec] Crank version numbers in RPM spec files
Damien Millerffa83022008-04-03 20:56:38 +11003074 - (djm) [README] Update link to release notes
Damien Miller79a1bc92008-04-03 20:57:05 +11003075 - (djm) Release 5.0p1