blob: a51117c88b5195220fa0f2611156a9ab863ed0ee [file] [log] [blame]
Darren Tucker1e80e402006-09-21 12:59:33 +1000120060921
2 - (dtucker) OpenBSD CVS Sync
3 - otto@cvs.openbsd.org 2006/09/19 05:52:23
4 [sftp.c]
5 Use S_IS* macros insted of masking with S_IF* flags. The latter may
6 have multiple bits set, which lead to surprising results. Spotted by
7 Paul Stoeber, more to come. ok millert@ pedro@ jaredy@ djm@
Darren Tucker4aa665b2006-09-21 13:00:25 +10008 - markus@cvs.openbsd.org 2006/09/19 21:14:08
9 [packet.c]
10 client NULL deref on protocol error; Tavis Ormandy, Google Security Team
Darren Tucker0dc54842006-09-21 23:13:30 +100011 - (dtucker) [defines.h] Include unistd.h before defining getpgrp; fixes
12 build error on Ultrix. From Bernhard Simon.
Darren Tucker1e80e402006-09-21 12:59:33 +100013
Darren Tucker9216c372006-09-18 23:17:40 +10001420060918
15 - (dtucker) [configure.ac] On AIX, check to see if the compiler will allow
16 macro redefinitions, and if not, remove "-qlanglvl=ansi" from the flags.
17 Allows build out of the box with older VAC and XLC compilers. Found by
18 David Bronder and Bernhard Simon.
Darren Tuckerc70ce7b2006-09-18 23:54:32 +100019 - (dtucker) [openbsd-compat/port-aix.{c,h}] Reduce scope of includes.
20 Prevents macro redefinition warnings of "RDONLY".
Darren Tucker9216c372006-09-18 23:17:40 +100021
Damien Miller3c9c1fb2006-09-17 06:08:53 +10002220060916
23 - OpenBSD CVS Sync
24 - djm@cvs.openbsd.org 2006/09/16 19:53:37
25 [deattack.c deattack.h packet.c]
26 limit maximum work performed by the CRC compensation attack detector,
27 problem reported by Tavis Ormandy, Google Security Team;
28 ok markus@ deraadt@
Damien Millerdd1f9b32006-09-17 08:05:03 +100029 - (djm) Add openssh.xml to .cvsignore and sort it
Darren Tucker54e1b222006-09-17 11:57:46 +100030 - (dtucker) [auth-pam.c] Propogate TZ environment variable to PAM auth
31 process so that any logging it does is with the right timezone. From
32 Scott Strickler, ok djm@.
Darren Tucker5965ae12006-09-17 12:00:13 +100033 - (dtucker) [monitor.c] Correctly handle auditing of single commands when
34 using Protocol 1. From jhb at freebsd.
Damien Miller1f062ca2006-09-17 14:04:46 +100035 - (djm) [sshd.c] Fix warning/API abuse; ok dtucker@
Darren Tucker83bbb032006-09-17 22:55:52 +100036 - (dtucker) [INSTALL] Add info about audit support.
Damien Miller3c9c1fb2006-09-17 06:08:53 +100037
Damien Miller223897a2006-09-12 21:54:10 +10003820060912
39 - (djm) [Makefile.in buildpkg.sh.in configure.ac openssh.xml.in]
40 Support SMF in Solaris Packages if enabled by configure. Patch from
41 Chad Mynhier, tested by dtucker@
42
Darren Tucker5d8a9ac2006-09-11 20:46:13 +10004320060911
44 - (dtucker) [cipher-aes.c] Include string.h for memcpy and friends. Noted
45 by Pekka Savola.
46
Darren Tuckerf3766692006-09-10 13:24:18 +10004720060910
48 - (dtucker) [contrib/aix/buildbff.sh] Ensure that perl is available.
Darren Tucker57b29202006-09-10 20:25:51 +100049 - (dtucker) [configure.ac] Add -lcrypt to let DragonFly build OOTB.
Darren Tuckerf3766692006-09-10 13:24:18 +100050
Darren Tucker08432d52006-09-09 15:59:43 +10005120060909
52 - (dtucker) [openbsd-compat/bsd-snprintf.c] Add stdarg.h.
Darren Tucker19a66db2006-09-09 20:34:15 +100053 - (dtucker) [contrib/aix/buildbff.sh] Always create privsep user.
Darren Tucker733a2922006-09-09 20:41:25 +100054 - (dtucker) [buildpkg.sh.in] Always create privsep user. ok djm@
Darren Tucker08432d52006-09-09 15:59:43 +100055
Darren Tucker17da5302006-09-08 09:54:41 +10005620060908
57 - (dtucker) [auth-sia.c] Add includes required for build on Tru64. Patch
58 from Chris Adams.
Darren Tucker6d0d6fb2006-09-09 01:05:21 +100059 - (dtucker) [configure.ac] The BSM header test needs time.h in some cases.
Darren Tucker17da5302006-09-08 09:54:41 +100060
Damien Miller6433df02006-09-07 10:36:43 +10006120060907
62 - (djm) [sshd.c auth.c] Set up fakepw() with privsep uid/gid, so it can
63 be used to drop privilege to; fixes Solaris GSSAPI crash reported by
64 Magnus Abrante; suggestion and feedback dtucker@
65 NB. this change will require that the privilege separation user must
66 exist on all the time, not just when UsePrivilegeSeparation=yes
Tim Riceb8f00192006-09-06 18:11:29 -070067 - (tim) [configure.ac] s/BROKEN_UPDWTMP/BROKEN_UPDWTMPX/ on SCO OSR6
Darren Tuckerf19bbc32006-09-07 22:57:53 +100068 - (dtucker) [loginrec.c] Wrap paths.h in HAVE_PATHS_H.
Darren Tucker89f59ce2006-09-08 00:03:05 +100069 - (dtucker) [regress/cfgmatch.sh] stop_client is racy, so give us a better
70 chance of winning.
Damien Miller6433df02006-09-07 10:36:43 +100071
Darren Tuckere1fe0992006-09-05 07:53:38 +10007220060905
73 - (dtucker) [configure.ac] s/AC_DEFINES/AC_DEFINE/ spotted by Roumen Petrov.
Darren Tucker6e103332006-09-05 19:25:19 +100074 - (dtucker) [loginrec.c] Include paths.h for _PATH_BTMP.
Darren Tuckere1fe0992006-09-05 07:53:38 +100075
Darren Tucker3e089102006-09-04 22:37:41 +10007620060904
77 - (dtucker) [configure.ac] Define BROKEN_UPDWTMP on SCO OSR6 as the native
78 updwdtmp seems to generate invalid wtmp entries. From Roger Cornelius,
79 ok djm@
80
Darren Tuckered0b5922006-09-03 22:44:49 +10008120060903
82 - (dtucker) [configure.ac openbsd-compat/openbsd-compat.h] Check for
83 declaration of writev(2) and declare it ourselves if necessary. Makes
84 the atomiciov() calls build on really old systems. ok djm@
85
Darren Tucker25fa0ee2006-09-02 12:38:56 +10008620060902
87 - (dtucker) [openbsd-compat/port-irix.c] Add errno.h, found by Iain Morgan.
Darren Tucker46aa3e02006-09-02 15:32:40 +100088 - (dtucker) [ssh-keyscan.c ssh-rand-helper.c ssh.c sshconnect.c
89 openbsd-compat/bindresvport.c openbsd-compat/getrrsetbyname.c
90 openbsd-compat/port-tun.c openbsd-compat/rresvport.c] Include <arpa/inet.h>
91 for hton* and ntoh* macros. Required on (at least) HP-UX since we define
92 _XOPEN_SOURCE_EXTENDED. Found by santhi.amirta at gmail com.
Darren Tucker25fa0ee2006-09-02 12:38:56 +100093
Damien Millerded319c2006-09-01 15:38:36 +10009420060901
95 - (djm) [audit-bsm.c audit.c auth-bsdauth.c auth-chall.c auth-pam.c]
96 [auth-rsa.c auth-shadow.c auth-sia.c auth1.c auth2-chall.c]
97 [auth2-gss.c auth2-kbdint.c auth2-none.c authfd.c authfile.c]
98 [cipher-3des1.c cipher-aes.c cipher-bf1.c cipher-ctr.c clientloop.c]
99 [dh.c dns.c entropy.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c]
100 [kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c loginrec.c mac.c]
101 [md5crypt.c monitor.c monitor_wrap.c readconf.c rsa.c]
102 [scard-opensc.c scard.c session.c ssh-add.c ssh-agent.c ssh-dss.c]
103 [ssh-keygen.c ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c]
Damien Miller607aede2006-09-01 15:48:19 +1000104 [sshconnect1.c sshconnect2.c sshd.c]
Damien Millerded319c2006-09-01 15:38:36 +1000105 [openbsd-compat/bsd-cray.c openbsd-compat/port-aix.c]
106 [openbsd-compat/port-linux.c openbsd-compat/port-solaris.c]
107 [openbsd-compat/port-uw.c]
108 Lots of headers for SCO OSR6, mainly adding stdarg.h for log.h;
109 compile problems reported by rac AT tenzing.org
Damien Miller607aede2006-09-01 15:48:19 +1000110 - (djm) [includes.h monitor.c openbsd-compat/bindresvport.c]
111 [openbsd-compat/rresvport.c] Some more headers: netinet/in.h
112 sys/socket.h and unistd.h in various places
Darren Tucker0646ca62006-09-01 19:29:01 +1000113 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Fix implict declaration
114 warnings for binary_open and binary_close. Patch from Corinna Vinschen.
Darren Tucker096faec2006-09-01 20:29:10 +1000115 - (dtucker) [configure.ac includes.h openbsd-compat/glob.{c,h}] Explicitly
116 test for GLOB_NOMATCH and use our glob functions if it's not found.
117 Stops sftp from segfaulting when attempting to get a nonexistent file on
118 Cygwin (previous versions of OpenSSH didn't use the native glob). Partly
119 from and tested by Corinna Vinschen.
Darren Tucker9fdeb662006-09-01 21:32:53 +1000120 - (dtucker) [README contrib/{caldera,redhat,suse}/openssh.spec] Crank
121 versions.
Damien Millerded319c2006-09-01 15:38:36 +1000122
Damien Miller1b06dc32006-08-31 03:24:41 +100012320060831
124 - (djm) [CREDITS LICENCE Makefile.in auth.c configure.ac includes.h ]
125 [platform.c platform.h sshd.c openbsd-compat/Makefile.in]
126 [openbsd-compat/openbsd-compat.h openbsd-compat/port-solaris.c]
127 [openbsd-compat/port-solaris.h] Add support for Solaris process
128 contracts, enabled with --use-solaris-contracts. Patch from Chad
129 Mynhier, tweaked by dtucker@ and myself; ok dtucker@
Darren Tucker288cbbd2006-08-31 11:28:49 +1000130 - (dtucker) [contrib/cygwin/ssh-host-config] Add SeTcbPrivilege privilege
131 while setting up the ssh service account. Patch from Corinna Vinschen.
Damien Miller1b06dc32006-08-31 03:24:41 +1000132
Damien Millerb594f382006-08-30 11:06:34 +100013320060830
134 - (djm) OpenBSD CVS Sync
135 - dtucker@cvs.openbsd.org 2006/08/21 08:14:01
136 [sshd_config.5]
137 Document HostbasedUsesNameFromPacketOnly. Corrections from jmc@,
138 ok jmc@ djm@
Damien Miller5d43d492006-08-30 11:07:00 +1000139 - dtucker@cvs.openbsd.org 2006/08/21 08:15:57
140 [sshd.8]
141 Add more detail about what permissions are and aren't accepted for
142 authorized_keys files. Corrections jmc@, ok djm@, "looks good" jmc@
Damien Millerd5fe0ba2006-08-30 11:07:39 +1000143 - djm@cvs.openbsd.org 2006/08/29 10:40:19
144 [channels.c session.c]
145 normalise some inconsistent (but harmless) NULL pointer checks
146 spotted by the Stanford SATURN tool, via Isil Dillig;
147 ok markus@ deraadt@
Damien Miller76758b62006-08-30 11:08:04 +1000148 - dtucker@cvs.openbsd.org 2006/08/29 12:02:30
149 [gss-genr.c]
150 Work around a problem in Heimdal that occurs when KRB5CCNAME file is
151 missing, by checking whether or not kerberos allocated us a context
152 before attempting to free it. Patch from Simon Wilkinson, tested by
153 biorn@, ok djm@
Damien Miller21258872006-08-30 11:08:33 +1000154 - dtucker@cvs.openbsd.org 2006/08/30 00:06:51
155 [sshconnect2.c]
156 Fix regression where SSH2 banner is printed at loglevels ERROR and FATAL
157 where previously it weren't. bz #1221, found by Dean Kopesky, ok djm@
Damien Miller6ba57402006-08-30 11:09:01 +1000158 - djm@cvs.openbsd.org 2006/08/30 00:14:37
159 [version.h]
160 crank to 4.4
Damien Miller8ff1da82006-08-30 17:52:03 +1000161 - (djm) [openbsd-compat/xcrypt.c] needs unistd.h
Darren Tucker26d4e192006-08-30 22:33:09 +1000162 - (dtucker) [auth.c openbsd-compat/port-aix.c] Bug #1207: always call
163 loginsuccess on AIX immediately after authentication to clear the failed
164 login count. Previously this would only happen when an interactive
165 session starts (ie when a pty is allocated) but this means that accounts
166 that have primarily non-interactive sessions (eg scp's) may gradually
167 accumulate enough failures to lock out an account. This change may have
168 a side effect of creating two audit records, one with a tty of "ssh"
169 corresponding to the authentication and one with the allocated pty per
170 interactive session.
Damien Millerb594f382006-08-30 11:06:34 +1000171
Darren Tuckerfe408b42006-08-24 19:41:03 +100017220060824
173 - (dtucker) [openbsd-compat/basename.c] Include errno.h.
Darren Tuckere0869552006-08-24 19:43:16 +1000174 - (dtucker) [openbsd-compat/bsd-misc.c] Add includes needed for select(2) on
175 older systems.
Darren Tucker450d2af2006-08-24 19:45:33 +1000176 - (dtucker) [openbsd-compat/bsd-misc.c] Include <sys/select.h> for select(2)
177 on POSIX systems.
Darren Tuckerf80f5ec2006-08-24 19:52:30 +1000178 - (dtucker) [openbsd-compat/bsd-openpty.c] Include for ioctl(2).
Darren Tuckerc1abe8e2006-08-24 19:53:40 +1000179 - (dtucker) [openbsd-compat/rresvport.c] Include <stdlib.h> for malloc.
Darren Tuckere83a83c2006-08-24 19:55:41 +1000180 - (dtucker) [openbsd-compat/xmmap.c] Move #define HAVE_MMAP to prevent
181 unused variable warning when we have a broken or missing mmap(2).
Darren Tuckerfe408b42006-08-24 19:41:03 +1000182
Darren Tucker12259d92006-08-22 22:24:10 +100018320060822
184 - (dtucker) [Makefile.in] Bug #1177: fix incorrect path for sshrc in
185 Makefile. Patch from santhi.amirta at gmail, ok djm.
186
Darren Tuckeraa1517c2006-08-20 17:55:54 +100018720060820
188 - (dtucker) [log.c] Move ifdef to prevent unused variable warning.
Darren Tucker4ba38732006-08-20 19:55:02 +1000189 - (dtucker) [configure.ac] Save $LIBS during PAM library tests and restore
190 afterward. Removes the need to mangle $LIBS later to remove -lpam and -ldl.
Darren Tucker3e6bde42006-08-20 20:03:50 +1000191 - (dtucker) [configure.ac] Relocate --with-pam parts in preparation for
192 fixing bug #1181. No changes yet.
Darren Tucker639bbe82006-08-20 20:17:53 +1000193 - (dtucker) [configure.ac] Bug #1181: Explicitly test to see if OpenSSL
194 (0.9.8a and presumably newer) requires -ldl to successfully link.
Darren Tucker0eb81002006-08-20 21:43:19 +1000195 - (dtucker) [configure.ac] Remove errant "-".
Darren Tuckeraa1517c2006-08-20 17:55:54 +1000196
Damien Millerdeccaa72006-08-19 08:50:57 +100019720060819
198 - (djm) OpenBSD CVS Sync
199 - djm@cvs.openbsd.org 2006/08/18 22:41:29
200 [gss-genr.c]
201 GSSAPI error code should be 0 and not -1; from simon@sxw.org.uk
Darren Tuckerf0625692006-08-19 19:12:14 +1000202 - (dtucker) [openbsd-compat/regress/Makefile.in] Add $(EXEEXT) and add a
203 single rule for the test progs.
Damien Millerdeccaa72006-08-19 08:50:57 +1000204
Darren Tuckerd018b2e2006-08-18 18:51:20 +100020520060818
206 - (dtucker) [configure.ac openbsd-compat/bsd-closefrom.c] Resync with
207 closefrom.c from sudo.
Darren Tucker43d3ccd2006-08-18 19:49:58 +1000208 - (dtucker) [openbsd-compat/bsd-closefrom.c] Comment out rcsid.
Darren Tuckerec4e4da2006-08-18 20:09:32 +1000209 - (dtucker) [openbsd-compat/regress/snprintftest.c] Newline on error.
Darren Tucker637c80a2006-08-18 20:56:18 +1000210 - (dtucker) [openbsd-compat/regress/Makefile.in] Use implicit rules for the
211 test progs instead; they work better than what we have.
Damien Miller63b94122006-08-19 00:21:46 +1000212 - (djm) OpenBSD CVS Sync
213 - stevesk@cvs.openbsd.org 2006/08/06 01:13:32
214 [compress.c monitor.c monitor_wrap.c]
215 "zlib.h" can be <zlib.h>; ok djm@ markus@
Damien Miller1c89ce02006-08-19 00:22:40 +1000216 - miod@cvs.openbsd.org 2006/08/12 20:46:46
217 [monitor.c monitor_wrap.c]
218 Revert previous include file ordering change, for ssh to compile under
219 gcc2 (or until openssl include files are cleaned of parameter names
220 in function prototypes)
Damien Miller565ca3f2006-08-19 00:23:15 +1000221 - dtucker@cvs.openbsd.org 2006/08/14 12:40:25
222 [servconf.c servconf.h sshd_config.5]
223 Add ability to match groups to Match keyword in sshd_config. Feedback
224 djm@, stevesk@, ok stevesk@.
Damien Millera1f68402006-08-19 00:31:39 +1000225 - djm@cvs.openbsd.org 2006/08/16 11:47:15
226 [sshd.c]
227 factor inetd connection, TCP listen and main TCP accept loop out of
228 main() into separate functions to improve readability; ok markus@
Damien Miller99a648e2006-08-19 00:32:20 +1000229 - deraadt@cvs.openbsd.org 2006/08/18 09:13:26
230 [log.c log.h sshd.c]
231 make signal handler termination path shorter; risky code pointed out by
232 mark dowd; ok djm markus
Damien Miller3f8123c2006-08-19 00:32:46 +1000233 - markus@cvs.openbsd.org 2006/08/18 09:15:20
234 [auth.h session.c sshd.c]
235 delay authentication related cleanups until we're authenticated and
236 all alarms have been cancelled; ok deraadt
Damien Millerbdf00ca2006-08-19 00:33:05 +1000237 - djm@cvs.openbsd.org 2006/08/18 10:27:16
238 [misc.h]
239 reorder so prototypes are sorted by the files they refer to; no
240 binary change
Damien Millera1cb9f32006-08-19 00:33:34 +1000241 - djm@cvs.openbsd.org 2006/08/18 13:54:54
242 [gss-genr.c ssh-gss.h sshconnect2.c]
243 bz #1218 - disable SPNEGO as per RFC4462; diff from simon AT sxw.org.uk
244 ok markus@
Damien Miller3d2d6e92006-08-19 00:46:43 +1000245 - djm@cvs.openbsd.org 2006/08/18 14:40:34
246 [gss-genr.c ssh-gss.h]
247 constify host argument to match the rest of the GSSAPI functions and
248 unbreak compilation with -Werror
Damien Millerbb598142006-08-19 08:38:23 +1000249 - (djm) Disable sigdie() for platforms that cannot safely syslog inside
250 a signal handler (basically all of them, excepting OpenBSD);
251 ok dtucker@
Darren Tuckerd018b2e2006-08-18 18:51:20 +1000252
Darren Tuckere6b641a2006-08-17 18:55:27 +100025320060817
254 - (dtucker) [openbsd-compat/fake-rfc2553.c openbsd-compat/setproctitle.c]
255 Include stdlib.h for malloc and friends.
Darren Tucker3083bc22006-08-17 19:35:49 +1000256 - (dtucker) [configure.ac openbsd-compat/bsd-closefrom.c] Use F_CLOSEM fcntl
257 for closefrom() on AIX. Pointed out by William Ahern.
Darren Tuckerc889ffd2006-08-17 19:40:35 +1000258 - (dtucker) [openbsd-compat/regress/{Makefile.in,closefromtest.c}] Regress
259 test for closefrom() in compat code.
Darren Tuckere6b641a2006-08-17 18:55:27 +1000260
Damien Miller56799c32006-08-16 11:40:45 +100026120060816
262 - (djm) [audit-bsm.c] Sprinkle in some headers
263
Darren Tucker53341812006-08-15 18:21:32 +100026420060815
265 - (dtucker) [LICENCE] Add Reyk to the list for the compat dir.
266
Damien Miller0e5143e2006-08-07 11:26:36 +100026720060806
268 - (djm) [openbsd-compat/bsd-getpeereid.c] Add some headers to quiet warnings
269 on Solaris 10
270
27120060806
Darren Tucker32ab2ae2006-08-06 21:23:27 +1000272 - (dtucker) [defines.h] With the includes.h changes we no longer get the
273 name clash on "YES" so we can remove the workaround for it.
Darren Tuckerf78fb542006-08-06 21:25:24 +1000274 - (dtucker) [openbsd-compat/{bsd-asprintf.c,bsd-openpty.c,bsd-snprintf.c,
275 glob.c}] Include stdlib.h for malloc and friends in compat code.
Darren Tucker32ab2ae2006-08-06 21:23:27 +1000276
Damien Miller437edb92006-08-05 09:11:13 +100027720060805
278 - (djm) OpenBSD CVS Sync
279 - stevesk@cvs.openbsd.org 2006/07/24 13:58:22
280 [sshconnect.c]
281 disable tunnel forwarding when no strict host key checking
282 and key changed; ok djm@ markus@ dtucker@
Damien Miller7c6e4b02006-08-05 09:33:15 +1000283 - stevesk@cvs.openbsd.org 2006/07/25 02:01:34
284 [scard.c]
285 need #include <string.h>
Damien Miller9aec9192006-08-05 10:57:45 +1000286 - stevesk@cvs.openbsd.org 2006/07/25 02:59:21
287 [channels.c clientloop.c packet.c scp.c serverloop.c sftp-client.c]
288 [sftp-server.c ssh-agent.c ssh-keyscan.c sshconnect.c sshd.c]
289 move #include <sys/time.h> out of includes.h
Damien Miller8dbffe72006-08-05 11:02:17 +1000290 - stevesk@cvs.openbsd.org 2006/07/26 02:35:17
291 [atomicio.c auth.c dh.c authfile.c buffer.c clientloop.c kex.c]
292 [groupaccess.c gss-genr.c kexgexs.c misc.c monitor.c monitor_mm.c]
293 [packet.c scp.c serverloop.c session.c sftp-client.c sftp-common.c]
294 [sftp-server.c sftp.c ssh-add.c ssh-agent.c ssh-keygen.c sshlogin.c]
295 [uidswap.c xmalloc.c]
296 move #include <sys/param.h> out of includes.h
Damien Millere7a1e5c2006-08-05 11:34:19 +1000297 - stevesk@cvs.openbsd.org 2006/07/26 13:57:17
298 [authfd.c authfile.c dh.c canohost.c channels.c clientloop.c compat.c]
299 [hostfile.c kex.c log.c misc.c moduli.c monitor.c packet.c readpass.c]
300 [scp.c servconf.c session.c sftp-server.c sftp.c ssh-add.c ssh-agent.c]
301 [ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh.c sshconnect.c]
302 [sshconnect1.c sshd.c xmalloc.c]
303 move #include <stdlib.h> out of includes.h
Damien Miller858bb7d2006-08-05 11:34:51 +1000304 - jmc@cvs.openbsd.org 2006/07/27 08:00:50
305 [ssh_config.5]
306 avoid confusing wording in HashKnownHosts:
307 originally spotted by alan amesbury;
308 ok deraadt
Damien Miller1a5b4042006-08-05 11:35:23 +1000309 - jmc@cvs.openbsd.org 2006/07/27 08:00:50
310 [ssh_config.5]
311 avoid confusing wording in HashKnownHosts:
312 originally spotted by alan amesbury;
313 ok deraadt
Damien Millerda828392006-08-05 11:35:45 +1000314 - dtucker@cvs.openbsd.org 2006/08/01 11:34:36
315 [sshconnect.c]
316 Allow fallback to known_hosts entries without port qualifiers for
317 non-standard ports too, so that all existing known_hosts entries will be
318 recognised. Requested by, feedback and ok markus@
Damien Millera7a73ee2006-08-05 11:37:59 +1000319 - stevesk@cvs.openbsd.org 2006/08/01 23:22:48
320 [auth-passwd.c auth-rhosts.c auth-rsa.c auth.c auth.h auth1.c]
321 [auth2-chall.c auth2-pubkey.c authfile.c buffer.c canohost.c]
322 [channels.c clientloop.c dh.c dns.c dns.h hostfile.c kex.c kexdhc.c]
323 [kexgexc.c kexgexs.c key.c key.h log.c misc.c misc.h moduli.c]
324 [monitor_wrap.c packet.c progressmeter.c readconf.c readpass.c scp.c]
325 [servconf.c session.c sftp-client.c sftp-common.c sftp-server.c sftp.c]
326 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c ssh.c sshconnect.c]
327 [sshconnect1.c sshconnect2.c sshd.c sshlogin.c sshtty.c uuencode.c]
328 [uuencode.h xmalloc.c]
329 move #include <stdio.h> out of includes.h
Damien Miller4dec5d72006-08-05 11:38:40 +1000330 - stevesk@cvs.openbsd.org 2006/08/01 23:36:12
331 [authfile.c channels.c progressmeter.c scard.c servconf.c ssh.c]
332 clean extra spaces
Damien Millerd7834352006-08-05 12:39:39 +1000333 - deraadt@cvs.openbsd.org 2006/08/03 03:34:42
334 [OVERVIEW atomicio.c atomicio.h auth-bsdauth.c auth-chall.c auth-krb5.c]
335 [auth-options.c auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
336 [auth-rsa.c auth-skey.c auth.c auth.h auth1.c auth2-chall.c auth2-gss.c]
337 [auth2-hostbased.c auth2-kbdint.c auth2-none.c auth2-passwd.c ]
338 [auth2-pubkey.c auth2.c authfd.c authfd.h authfile.c bufaux.c bufbn.c]
339 [buffer.c buffer.h canohost.c channels.c channels.h cipher-3des1.c]
340 [cipher-bf1.c cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c]
341 [compress.c deattack.c dh.c dispatch.c dns.c dns.h fatal.c groupaccess.c]
342 [groupaccess.h gss-genr.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c]
343 [kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c]
344 [key.h log.c log.h mac.c match.c md-sha256.c misc.c misc.h moduli.c]
345 [monitor.c monitor_fdpass.c monitor_mm.c monitor_mm.h monitor_wrap.c]
346 [monitor_wrap.h msg.c nchan.c packet.c progressmeter.c readconf.c]
347 [readconf.h readpass.c rsa.c scard.c scard.h scp.c servconf.c servconf.h]
348 [serverloop.c session.c session.h sftp-client.c sftp-common.c]
349 [sftp-common.h sftp-glob.c sftp-server.c sftp.c ssh-add.c ssh-agent.c]
350 [ssh-dss.c ssh-gss.h ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rsa.c]
351 [ssh.c ssh.h sshconnect.c sshconnect.h sshconnect1.c sshconnect2.c]
352 [sshd.c sshlogin.c sshlogin.h sshpty.c sshpty.h sshtty.c ttymodes.c]
353 [uidswap.c uidswap.h uuencode.c uuencode.h xmalloc.c xmalloc.h]
354 [loginrec.c loginrec.h openbsd-compat/port-aix.c openbsd-compat/port-tun.h]
355 almost entirely get rid of the culture of ".h files that include .h files"
356 ok djm, sort of ok stevesk
357 makes the pain stop in one easy step
358 NB. portable commit contains everything *except* removing includes.h, as
359 that will take a fair bit more work as we move headers that are required
360 for portability workarounds to defines.h. (also, this step wasn't "easy")
Damien Miller9ab00b42006-08-05 12:40:11 +1000361 - stevesk@cvs.openbsd.org 2006/08/04 20:46:05
362 [monitor.c session.c ssh-agent.c]
363 spaces
Damien Miller2ab323e2006-08-05 12:43:32 +1000364 - (djm) [auth-pam.c defines.h] Move PAM related bits to auth-pam.c
Damien Miller4cbfe8e2006-08-05 12:49:30 +1000365 - (djm) [auth-pam.c auth.c bufaux.h entropy.c openbsd-compat/port-tun.c]
366 remove last traces of bufaux.h - it was merged into buffer.h in the big
367 includes.h commit
Damien Miller36cbe412006-08-05 12:54:24 +1000368 - (djm) [auth.c loginrec.c] Missing netinet/in.h for loginrec
Damien Millerd04db592006-08-05 13:27:29 +1000369 - (djm) [openbsd-compat/regress/snprintftest.c]
370 [openbsd-compat/regress/strduptest.c] Add missing includes so they pass
371 compilation with "-Wall -Werror"
Damien Miller75bb6642006-08-05 14:07:20 +1000372 - (djm) [auth-pam.c auth-shadow.c auth2-none.c cleanup.c sshd.c]
373 [openbsd-compat/port-tun.c openbsd-compat/port-tun.h] Sprinkle more
374 includes for Linux in
Darren Tucker90659f82006-08-05 14:46:27 +1000375 - (dtucker) [cleanup.c] Need defines.h for __dead.
Darren Tucker8c6feda2006-08-05 15:24:59 +1000376 - (dtucker) [auth2-gss.c] We still need the #ifdef GSSAPI in -portable.
Darren Tuckere7eec902006-08-05 15:47:26 +1000377 - (dtucker) [openbsd-compat/{bsd-arc4random.c,port-tun.c,xmmap.c}] Lots of
378 #include stdarg.h, needed for log.h.
Darren Tuckerecf28ba2006-08-05 15:50:20 +1000379 - (dtucker) [entropy.c] Needs unistd.h too.
Darren Tucker4c655432006-08-05 15:57:40 +1000380 - (dtucker) [ssh-rand-helper.c] Needs stdarg.h for log.h.
Darren Tuckerd8aec102006-08-05 16:12:15 +1000381 - (dtucker) [openbsd-compat/getrrsetbyname.c] Nees stdlib.h for malloc.
Darren Tucker8a15f012006-08-05 16:27:20 +1000382 - (dtucker) [openbsd-compat/strtonum.c] Include stdlib.h for strtoll,
383 otherwise it is implicitly declared as returning an int.
Darren Tucker1a3d6e72006-08-05 18:46:47 +1000384 - (dtucker) OpenBSD CVS Sync
385 - dtucker@cvs.openbsd.org 2006/08/05 07:52:52
386 [auth2-none.c sshd.c monitor_wrap.c]
387 Add headers required to build with KERBEROS5=no. ok djm@
Darren Tucker260cb352006-08-05 18:48:01 +1000388 - dtucker@cvs.openbsd.org 2006/08/05 08:00:33
389 [auth-skey.c]
390 Add headers required to build with -DSKEY. ok djm@
Darren Tuckerd6a23f22006-08-05 18:50:35 +1000391 - dtucker@cvs.openbsd.org 2006/08/05 08:28:24
392 [monitor_wrap.c auth-skey.c auth2-chall.c]
393 Zap unused variables in -DSKEY code. ok djm@
Darren Tuckerf676c572006-08-05 18:51:08 +1000394 - dtucker@cvs.openbsd.org 2006/08/05 08:34:04
395 [packet.c]
396 Typo in comment
Darren Tucker92350102006-08-05 19:08:16 +1000397 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Add headers required to compile
398 on Cygwin.
Darren Tucker2b4e38b2006-08-05 19:18:08 +1000399 - (dtucker) [openbsd-compat/fake-rfc2553.c] Add headers needed for inet_ntoa.
Darren Tucker6e1a9aa2006-08-05 19:56:00 +1000400 - (dtucker) [auth-skey.c] monitor_wrap.h needs ssh-gss.h.
Darren Tucker79ba8682006-08-06 00:05:09 +1000401 - (dtucker) [audit.c audit.h] Repair headers.
Darren Tucker3e714512006-08-06 00:12:54 +1000402 - (dtucker) [audit-bsm.c] Add additional headers now required.
Damien Miller437edb92006-08-05 09:11:13 +1000403
Darren Tuckerf1f4bdd2006-08-04 19:44:23 +100040420060804
405 - (dtucker) [configure.ac] The "crippled AES" test does not work on recent
406 versions of Solaris, so use AC_LINK_IFELSE to actually link the test program
407 rather than just compiling it. Spotted by dlg@.
408
Darren Tucker88fdc832006-08-02 23:33:54 +100040920060802
410 - (dtucker) [openbsd-compat/daemon.c] Add unistd.h for fork() prototype.
411
Darren Tucker94346f82006-07-25 19:52:07 +100041220060725
413 - (dtucker) [openbsd-compat/xmmap.c] Need fcntl.h for O_RDRW.
414
Damien Millerd04f3572006-07-24 13:46:50 +100041520060724
416 - (djm) OpenBSD CVS Sync
417 - jmc@cvs.openbsd.org 2006/07/12 13:39:55
418 [sshd_config.5]
419 - new sentence, new line
420 - s/The the/The/
421 - kill a bad comma
Damien Millerbe43ebf2006-07-24 13:51:51 +1000422 - stevesk@cvs.openbsd.org 2006/07/12 22:28:52
Damien Miller939878b2006-07-24 13:52:06 +1000423 [auth-options.c canohost.c channels.c includes.h readconf.c]
424 [servconf.c ssh-keyscan.c ssh.c sshconnect.c sshd.c]
Damien Millerbe43ebf2006-07-24 13:51:51 +1000425 move #include <netdb.h> out of includes.h; ok djm@
Damien Miller2d00e632006-07-24 13:53:19 +1000426 - stevesk@cvs.openbsd.org 2006/07/12 22:42:32
427 [includes.h ssh.c ssh-rand-helper.c]
428 move #include <stddef.h> out of includes.h
Damien Millerdef915b2006-07-24 13:55:56 +1000429 - stevesk@cvs.openbsd.org 2006/07/14 01:15:28
430 [monitor_wrap.h]
431 don't need incompletely-typed 'struct passwd' now with
432 #include <pwd.h>; ok markus@
Damien Millere6b3b612006-07-24 14:01:23 +1000433 - stevesk@cvs.openbsd.org 2006/07/17 01:31:10
434 [authfd.c authfile.c channels.c cleanup.c clientloop.c groupaccess.c]
435 [includes.h log.c misc.c msg.c packet.c progressmeter.c readconf.c]
436 [readpass.c scp.c servconf.c sftp-client.c sftp-server.c sftp.c]
437 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh.c]
438 [sshconnect.c sshlogin.c sshpty.c uidswap.c]
439 move #include <unistd.h> out of includes.h
Damien Miller98299262006-07-24 14:01:43 +1000440 - dtucker@cvs.openbsd.org 2006/07/17 12:02:24
441 [auth-options.c]
442 Use '\0' rather than 0 to terminates strings; ok djm@
Damien Miller9b439df2006-07-24 14:04:00 +1000443 - dtucker@cvs.openbsd.org 2006/07/17 12:06:00
444 [channels.c channels.h servconf.c sshd_config.5]
445 Add PermitOpen directive to sshd_config which is equivalent to the
446 "permitopen" key option. Allows server admin to allow TCP port
447 forwarding only two specific host/port pairs. Useful when combined
448 with Match.
449 If permitopen is used in both sshd_config and a key option, both
450 must allow a given connection before it will be permitted.
451 Note that users can still use external forwarders such as netcat,
452 so to be those must be controlled too for the limits to be effective.
453 Feedback & ok djm@, man page corrections & ok jmc@.
Damien Miller65bc2c42006-07-24 14:04:16 +1000454 - jmc@cvs.openbsd.org 2006/07/18 07:50:40
455 [sshd_config.5]
456 tweak; ok dtucker
Damien Miller22d47ab2006-07-24 14:04:36 +1000457 - jmc@cvs.openbsd.org 2006/07/18 07:56:28
458 [scp.1]
459 replace DIAGNOSTICS with .Ex;
Damien Miller393821a2006-07-24 14:04:53 +1000460 - jmc@cvs.openbsd.org 2006/07/18 08:03:09
461 [ssh-agent.1 sshd_config.5]
462 mark up angle brackets;
Damien Miller8c234032006-07-24 14:05:08 +1000463 - dtucker@cvs.openbsd.org 2006/07/18 08:22:23
464 [sshd_config.5]
465 Clarify description of Match, with minor correction from jmc@
Damien Millerf757d222006-07-24 14:05:24 +1000466 - stevesk@cvs.openbsd.org 2006/07/18 22:27:55
467 [dh.c]
468 remove unneeded includes; ok djm@
Damien Millerd1de9952006-07-24 14:05:48 +1000469 - dtucker@cvs.openbsd.org 2006/07/19 08:56:41
470 [servconf.c sshd_config.5]
471 Add support for X11Forwaring, X11DisplayOffset and X11UseLocalhost to
472 Match. ok djm@
Damien Millere2754432006-07-24 14:06:47 +1000473 - dtucker@cvs.openbsd.org 2006/07/19 13:07:10
474 [servconf.c servconf.h session.c sshd.8 sshd_config sshd_config.5]
475 Add ForceCommand keyword to sshd_config, equivalent to the "command="
476 key option, man page entry and example in sshd_config.
477 Feedback & ok djm@, man page corrections & ok jmc@
Damien Miller1cdde6f2006-07-24 14:07:35 +1000478 - stevesk@cvs.openbsd.org 2006/07/20 15:26:15
479 [auth1.c serverloop.c session.c sshconnect2.c]
480 missed some needed #include <unistd.h> when KERBEROS5=no; issue from
481 massimo@cedoc.mo.it
Damien Millera765cf42006-07-24 14:08:13 +1000482 - dtucker@cvs.openbsd.org 2006/07/21 12:43:36
483 [channels.c channels.h servconf.c servconf.h sshd_config.5]
484 Make PermitOpen take a list of permitted ports and act more like most
485 other keywords (ie the first match is the effective setting). This
486 also makes it easier to override a previously set PermitOpen. ok djm@
Damien Miller8473dd82006-07-24 14:08:32 +1000487 - stevesk@cvs.openbsd.org 2006/07/21 21:13:30
488 [channels.c]
489 more ARGSUSED (lint) for dispatch table-driven functions; ok djm@
Damien Milleree0d0db2006-07-24 14:08:50 +1000490 - stevesk@cvs.openbsd.org 2006/07/21 21:26:55
491 [progressmeter.c]
492 ARGSUSED for signal handler
Damien Miller5598b4f2006-07-24 14:09:40 +1000493 - stevesk@cvs.openbsd.org 2006/07/22 19:08:54
494 [includes.h moduli.c progressmeter.c scp.c sftp-common.c]
495 [sftp-server.c ssh-agent.c sshlogin.c]
496 move #include <time.h> out of includes.h
Damien Millere3476ed2006-07-24 14:13:33 +1000497 - stevesk@cvs.openbsd.org 2006/07/22 20:48:23
498 [atomicio.c auth-options.c auth-passwd.c auth-rhosts.c auth-rsa.c]
499 [auth.c auth1.c auth2-chall.c auth2-hostbased.c auth2-passwd.c auth2.c]
500 [authfd.c authfile.c bufaux.c bufbn.c buffer.c canohost.c channels.c]
501 [cipher-3des1.c cipher-bf1.c cipher-ctr.c cipher.c clientloop.c]
502 [compat.c deattack.c dh.c dns.c gss-genr.c gss-serv.c hostfile.c]
503 [includes.h kex.c kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c log.c]
504 [mac.c match.c md-sha256.c misc.c moduli.c monitor.c monitor_fdpass.c]
505 [monitor_mm.c monitor_wrap.c msg.c nchan.c packet.c rsa.c]
506 [progressmeter.c readconf.c readpass.c scp.c servconf.c serverloop.c]
507 [session.c sftp-client.c sftp-common.c sftp-glob.c sftp-server.c sftp.c]
508 [ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c]
509 [ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c sshconnect2.c]
510 [sshd.c sshlogin.c sshpty.c ttymodes.c uidswap.c xmalloc.c]
511 move #include <string.h> out of includes.h
Damien Millerd8337c52006-07-24 14:14:19 +1000512 - stevesk@cvs.openbsd.org 2006/07/23 01:11:05
513 [auth.h dispatch.c kex.h sftp-client.c]
514 #include <signal.h> for sig_atomic_t; need this prior to <sys/param.h>
515 move
Damien Millerb8fe89c2006-07-24 14:51:00 +1000516 - (djm) [acss.c auth-krb5.c auth-options.c auth-pam.c auth-shadow.c]
517 [canohost.c channels.c cipher-acss.c defines.h dns.c gss-genr.c]
518 [gss-serv-krb5.c gss-serv.c log.h loginrec.c logintest.c readconf.c]
519 [servconf.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c]
520 [ssh.c sshconnect.c sshd.c openbsd-compat/bindresvport.c]
521 [openbsd-compat/bsd-arc4random.c openbsd-compat/bsd-misc.c]
522 [openbsd-compat/getrrsetbyname.c openbsd-compat/glob.c]
523 [openbsd-compat/mktemp.c openbsd-compat/port-linux.c]
524 [openbsd-compat/port-tun.c openbsd-compat/readpassphrase.c]
525 [openbsd-compat/setproctitle.c openbsd-compat/xmmap.c]
526 make the portable tree compile again - sprinkle unistd.h and string.h
527 back in. Don't redefine __unused, as it turned out to be used in
528 headers on Linux, and replace its use in auth-pam.c with ARGSUSED
Damien Miller8b373ba2006-07-24 14:55:47 +1000529 - (djm) [openbsd-compat/glob.c]
530 Move get_arg_max() into the ifdef HAVE_GLOB block so that it compiles
531 on OpenBSD (or other platforms with a decent glob implementation) with
532 -Werror
Damien Miller874bc482006-07-24 14:58:07 +1000533 - (djm) [uuencode.c]
534 Add resolv.h, is it contains the prototypes for __b64_ntop/__b64_pton on
535 some platforms
Damien Millerad5ecbf2006-07-24 15:03:06 +1000536 - (djm) [session.c]
537 fix compile error with -Werror -Wall: 'path' is only used in
538 do_setup_env() if HAVE_LOGIN_CAP is not defined
Damien Miller62da44f2006-07-24 15:08:35 +1000539 - (djm) [openbsd-compat/basename.c openbsd-compat/bsd-closefrom.c]
540 [openbsd-compat/bsd-cray.c openbsd-compat/bsd-openpty.c]
541 [openbsd-compat/bsd-snprintf.c openbsd-compat/fake-rfc2553.c]
542 [openbsd-compat/port-aix.c openbsd-compat/port-irix.c]
543 [openbsd-compat/rresvport.c]
544 These look to need string.h and/or unistd.h (based on a grep for function
545 names)
Damien Miller24f2a422006-07-24 15:30:18 +1000546 - (djm) [Makefile.in]
547 Remove generated openbsd-compat/regress/Makefile in distclean target
Damien Miller7b1877c2006-07-24 15:31:41 +1000548 - (djm) [regress/Makefile regress/agent-getpeereid.sh regress/cfgmatch.sh]
549 [regress/cipher-speed.sh regress/forcecommand.sh regress/forwarding.sh]
550 Sync regress tests to -current; include dtucker@'s new cfgmatch and
551 forcecommand tests. Add cipher-speed.sh test (not linked in yet)
Darren Tucker22c58b02006-07-24 23:19:40 +1000552 - (dtucker) [cleanup.c] Since config.h defines _LARGE_FILES on AIX, including
553 system headers before defines.h will cause conflicting definitions.
Darren Tucker28e9ad12006-07-24 23:50:23 +1000554 - (dtucker) [regress/forcecommand.sh] Portablize.
Damien Miller62da44f2006-07-24 15:08:35 +1000555
Darren Tucker341dae52006-07-13 08:45:14 +100055620060713
557 - (dtucker) [auth-krb5.c auth-pam.c] Still more errno.h
558
Darren Tucker248469b2006-07-12 14:14:31 +100055920060712
Darren Tucker250f1a62006-07-12 19:01:29 +1000560 - (dtucker) [configure.ac defines.h] Only define SHUT_RD (and friends) and
561 O_NONBLOCK if they're really needed. Fixes build errors on HP-UX, old
562 Linuxes and probably more.
Darren Tucker128a0892006-07-12 19:02:56 +1000563 - (dtucker) [configure.ac] OpenBSD needs <sys/types.h> before <sys/socket.h>
564 for SHUT_RD.
Darren Tucker686852f2006-07-12 19:05:56 +1000565 - (dtucker) [openbsd-compat/port-tun.c] OpenBSD needs <netinet/in.h> before
566 <netinet/ip.h>.
Darren Tuckera5362452006-07-12 22:07:08 +1000567 - (dtucker) OpenBSD CVS Sync
568 - stevesk@cvs.openbsd.org 2006/07/10 16:01:57
569 [sftp-glob.c sftp-common.h sftp.c]
570 buffer.h only needed in sftp-common.h and remove some unneeded
571 user includes; ok djm@
Darren Tucker11318472006-07-12 22:07:59 +1000572 - jmc@cvs.openbsd.org 2006/07/10 16:04:21
573 [sshd.8]
574 s/and and/and/
Darren Tucker5d196262006-07-12 22:15:16 +1000575 - stevesk@cvs.openbsd.org 2006/07/10 16:37:36
576 [readpass.c log.h scp.c fatal.c xmalloc.c includes.h ssh-keyscan.c misc.c
577 auth.c packet.c log.c]
578 move #include <stdarg.h> out of includes.h; ok markus@
Darren Tucker284706a2006-07-12 22:16:23 +1000579 - dtucker@cvs.openbsd.org 2006/07/11 10:12:07
580 [ssh.c]
581 Only copy the part of environment variable that we actually use. Prevents
582 ssh bailing when SendEnv is used and an environment variable with a really
583 long value exists. ok djm@
Darren Tuckere7d4b192006-07-12 22:17:10 +1000584 - markus@cvs.openbsd.org 2006/07/11 18:50:48
585 [clientloop.c ssh.1 ssh.c channels.c ssh_config.5 readconf.h session.c
586 channels.h readconf.c]
587 add ExitOnForwardFailure: terminate the connection if ssh(1)
588 cannot set up all requested dynamic, local, and remote port
589 forwardings. ok djm, dtucker, stevesk, jmc
Darren Tucker39972492006-07-12 22:22:46 +1000590 - stevesk@cvs.openbsd.org 2006/07/11 20:07:25
591 [scp.c auth.c monitor.c serverloop.c sftp-server.c sshpty.c readpass.c
592 sshd.c monitor_wrap.c monitor_fdpass.c ssh-agent.c ttymodes.c atomicio.c
593 includes.h session.c sshlogin.c monitor_mm.c packet.c sshconnect2.c
594 sftp-client.c nchan.c clientloop.c sftp.c misc.c canohost.c channels.c
595 ssh-keygen.c progressmeter.c uidswap.c msg.c readconf.c sshconnect.c]
596 move #include <errno.h> out of includes.h; ok markus@
Darren Tucker57f42242006-07-12 22:23:35 +1000597 - stevesk@cvs.openbsd.org 2006/07/11 20:16:43
598 [ssh.c]
599 cast asterisk field precision argument to int to remove warning;
600 ok markus@
Darren Tuckerba724052006-07-12 22:24:22 +1000601 - stevesk@cvs.openbsd.org 2006/07/11 20:27:56
602 [authfile.c ssh.c]
603 need <errno.h> here also (it's also included in <openssl/err.h>)
Darren Tucker45150472006-07-12 22:34:17 +1000604 - dtucker@cvs.openbsd.org 2006/07/12 11:34:58
605 [sshd.c servconf.h servconf.c sshd_config.5 auth.c]
606 Add support for conditional directives to sshd_config via a "Match"
607 keyword, which works similarly to the "Host" directive in ssh_config.
608 Lines after a Match line override the default set in the main section
609 if the condition on the Match line is true, eg
610 AllowTcpForwarding yes
611 Match User anoncvs
612 AllowTcpForwarding no
613 will allow port forwarding by all users except "anoncvs".
614 Currently only a very small subset of directives are supported.
615 ok djm@
Darren Tucker2c1a02a2006-07-12 22:40:50 +1000616 - (dtucker) [loginrec.c openbsd-compat/xmmap.c openbsd-compat/bindresvport.c
617 openbsd-compat/glob.c openbsd-compat/mktemp.c openbsd-compat/port-tun.c
618 openbsd-compat/readpassphrase.c openbsd-compat/strtonum.c] Include <errno.h>.
Darren Tucker767e4132006-07-12 22:43:28 +1000619 - (dtucker) [openbsd-compat/setproctitle.c] Include stdarg.h.
Darren Tuckerdeecec92006-07-12 22:44:34 +1000620 - (dtucker) [ssh-keyscan.c ssh-rand-helper.c] More errno.h here too.
Darren Tucker5998ed02006-07-12 23:10:33 +1000621 - (dtucker) [openbsd-compat/openbsd-compat.h] v*printf needs stdarg.h.
Darren Tucker2eaea992006-07-12 23:41:33 +1000622 - (dtucker) [openbsd-compat/bsd-asprintf.c openbsd-compat/port-aix.c
623 openbsd-compat/rresvport.c] More errno.h.
624
Darren Tucker44c828f2006-07-11 18:00:06 +100062520060711
626 - (dtucker) [configure.ac ssh-keygen.c openbsd-compat/bsd-openpty.c
627 openbsd-compat/daemon.c] Add includes needed by open(2). Conditionally
628 include paths.h. Fixes build error on Solaris.
Darren Tuckere0e4aad2006-07-11 19:01:51 +1000629 - (dtucker) [entropy.c] More fcntl.h, this time on AIX (and probably
630 others).
Darren Tucker44c828f2006-07-11 18:00:06 +1000631
Darren Tuckere34c96a2006-07-10 12:55:24 +100063220060710
633 - (dtucker) [INSTALL] New autoconf version: 2.60.
Damien Miller1e88ea62006-07-10 20:15:56 +1000634 - OpenBSD CVS Sync
635 - djm@cvs.openbsd.org 2006/06/14 10:50:42
636 [sshconnect.c]
637 limit the number of pre-banner characters we will accept; ok markus@
Damien Miller43020952006-07-10 20:16:12 +1000638 - djm@cvs.openbsd.org 2006/06/26 10:36:15
639 [clientloop.c]
640 mention optional bind_address in runtime port forwarding setup
641 command-line help. patch from santhi.amirta AT gmail.com
Damien Miller991dba42006-07-10 20:16:27 +1000642 - stevesk@cvs.openbsd.org 2006/07/02 17:12:58
643 [ssh.1 ssh.c ssh_config.5 sshd_config.5]
644 more details and clarity for tun(4) device forwarding; ok and help
645 jmc@
Damien Miller5d3ac7f2006-07-10 20:17:55 +1000646 - stevesk@cvs.openbsd.org 2006/07/02 18:36:47
647 [gss-serv-krb5.c gss-serv.c]
648 no "servconf.h" needed here
649 (gss-serv-krb5.c change not applied, portable needs the server options)
Damien Miller427a1d52006-07-10 20:20:33 +1000650 - stevesk@cvs.openbsd.org 2006/07/02 22:45:59
651 [groupaccess.c groupaccess.h includes.h session.c sftp-common.c sshpty.c]
652 move #include <grp.h> out of includes.h
653 (portable needed uidswap.c too)
Damien Miller57e8ad32006-07-10 20:20:52 +1000654 - stevesk@cvs.openbsd.org 2006/07/02 23:01:55
655 [clientloop.c ssh.1]
656 use -KR[bind_address:]port here; ok djm@
Damien Millerb7576772006-07-10 20:23:39 +1000657 - stevesk@cvs.openbsd.org 2006/07/03 08:54:20
658 [includes.h ssh.c sshconnect.c sshd.c]
659 move #include "version.h" out of includes.h; ok markus@
Damien Millerefc04e72006-07-10 20:26:27 +1000660 - stevesk@cvs.openbsd.org 2006/07/03 17:59:32
661 [channels.c includes.h]
662 move #include <arpa/inet.h> out of includes.h; old ok djm@
663 (portable needed session.c too)
Damien Miller8ec8c3e2006-07-10 20:35:38 +1000664 - stevesk@cvs.openbsd.org 2006/07/05 02:42:09
665 [canohost.c hostfile.c includes.h misc.c packet.c readconf.c]
666 [serverloop.c sshconnect.c uuencode.c]
667 move #include <netinet/in.h> out of includes.h; ok deraadt@
668 (also ssh-rand-helper.c logintest.c loginrec.c)
Damien Miller917f9b62006-07-10 20:36:47 +1000669 - djm@cvs.openbsd.org 2006/07/06 10:47:05
670 [servconf.c servconf.h session.c sshd_config.5]
671 support arguments to Subsystem commands; ok markus@
Damien Millerfef95ad2006-07-10 20:46:55 +1000672 - djm@cvs.openbsd.org 2006/07/06 10:47:57
673 [sftp-server.8 sftp-server.c]
674 add commandline options to enable logging of transactions; ok markus@
Damien Miller9f2abc42006-07-10 20:53:08 +1000675 - stevesk@cvs.openbsd.org 2006/07/06 16:03:53
676 [auth-options.c auth-options.h auth-passwd.c auth-rh-rsa.c]
677 [auth-rhosts.c auth-rsa.c auth.c auth.h auth2-hostbased.c]
678 [auth2-pubkey.c auth2.c includes.h misc.c misc.h monitor.c]
679 [monitor_wrap.c monitor_wrap.h scp.c serverloop.c session.c]
680 [session.h sftp-common.c ssh-add.c ssh-keygen.c ssh-keysign.c]
681 [ssh.c sshconnect.c sshconnect.h sshd.c sshpty.c sshpty.h uidswap.c]
682 [uidswap.h]
683 move #include <pwd.h> out of includes.h; ok markus@
Damien Miller69996102006-07-10 20:53:31 +1000684 - stevesk@cvs.openbsd.org 2006/07/06 16:22:39
685 [ssh-keygen.c]
686 move #include "dns.h" up
Damien Miller58059ae2006-07-10 20:53:45 +1000687 - stevesk@cvs.openbsd.org 2006/07/06 17:36:37
688 [monitor_wrap.h]
689 typo in comment
Damien Millere3b60b52006-07-10 21:08:03 +1000690 - stevesk@cvs.openbsd.org 2006/07/08 21:47:12
691 [authfd.c canohost.c clientloop.c dns.c dns.h includes.h]
692 [monitor_fdpass.c nchan.c packet.c servconf.c sftp.c ssh-agent.c]
693 [ssh-keyscan.c ssh.c sshconnect.h sshd.c sshlogin.h]
694 move #include <sys/socket.h> out of includes.h
Damien Millere33b6032006-07-10 21:08:34 +1000695 - stevesk@cvs.openbsd.org 2006/07/08 21:48:53
696 [monitor.c session.c]
697 missed these from last commit:
698 move #include <sys/socket.h> out of includes.h
Damien Miller194a1cb2006-07-10 21:09:22 +1000699 - stevesk@cvs.openbsd.org 2006/07/08 23:30:06
700 [log.c]
701 move user includes after /usr/include files
Damien Miller57cf6382006-07-10 21:13:46 +1000702 - stevesk@cvs.openbsd.org 2006/07/09 15:15:11
703 [auth2-none.c authfd.c authfile.c includes.h misc.c monitor.c]
704 [readpass.c scp.c serverloop.c sftp-client.c sftp-server.c]
705 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keysign.c ssh.c sshd.c]
706 [sshlogin.c sshpty.c]
707 move #include <fcntl.h> out of includes.h
Damien Miller211838d2006-07-10 21:14:00 +1000708 - stevesk@cvs.openbsd.org 2006/07/09 15:27:59
709 [ssh-add.c]
710 use O_RDONLY vs. 0 in open(); no binary change
Damien Millerc718c742006-07-10 21:31:00 +1000711 - djm@cvs.openbsd.org 2006/07/10 11:24:54
712 [sftp-server.c]
713 remove optind - it isn't used here
Damien Miller6444fe92006-07-10 21:31:27 +1000714 - djm@cvs.openbsd.org 2006/07/10 11:25:53
715 [sftp-server.c]
716 don't log variables that aren't yet set
Damien Millera1738e42006-07-10 21:33:04 +1000717 - (djm) [loginrec.c ssh-rand-helper.c sshd.c openbsd-compat/glob.c]
718 [openbsd-compat/mktemp.c openbsd-compat/openbsd-compat.h]
719 [openbsd-compat/port-tun.c openbsd-compat/readpassphrase.c]
720 [openbsd-compat/xcrypt.c] Fix includes.h fallout, mainly fcntl.h
Damien Miller3d1a9f42006-07-10 22:19:53 +1000721 - OpenBSD CVS Sync
722 - djm@cvs.openbsd.org 2006/07/10 12:03:20
723 [scp.c]
724 duplicate argv at the start of main() because it gets modified later;
725 pointed out by deraadt@ ok markus@
Damien Miller0f077072006-07-10 22:21:02 +1000726 - djm@cvs.openbsd.org 2006/07/10 12:08:08
727 [channels.c]
728 fix misparsing of SOCKS 5 packets that could result in a crash;
729 reported by mk@ ok markus@
Darren Tuckerda345532006-07-10 23:04:19 +1000730 - dtucker@cvs.openbsd.org 2006/07/10 12:46:51
731 [misc.c misc.h sshd.8 sshconnect.c]
732 Add port identifier to known_hosts for non-default ports, based originally
733 on a patch from Devin Nate in bz#910.
734 For any connection using the default port or using a HostKeyAlias the
735 format is unchanged, otherwise the host name or address is enclosed
736 within square brackets in the same format as sshd's ListenAddress.
737 Tested by many, ok markus@.
Darren Tucker4e880e62006-07-11 00:20:51 +1000738 - (dtucker) [openbsd-compat/openbsd-compat.h] Need to include <sys/socket.h>
739 for struct sockaddr on platforms that use the fake-rfc stuff.
Darren Tuckere34c96a2006-07-10 12:55:24 +1000740
Darren Tuckerbdc12122006-07-06 11:56:25 +100074120060706
742 - (dtucker) [configure.ac] Try AIX blibpath test in different order when
743 compiling with gcc. gcc 4.1.x will accept (but ignore) -b flags so
744 configure would not select the correct libpath linker flags.
Darren Tuckerf32f5522006-07-06 19:12:08 +1000745 - (dtucker) [INSTALL] A bit more info on autoconf.
Darren Tuckerbdc12122006-07-06 11:56:25 +1000746
Darren Tuckerdaf6ff42006-07-05 21:35:48 +100074720060705
748 - (dtucker) [ssh-rand-helper.c] Don't exit if mkdir fails because the
749 target already exists.
750
Darren Tucker66c32d52006-06-30 10:51:32 +100075120060630
752 - (dtucker) [openbsd-compat/openbsd-compat.h] SNPRINTF_CONST for snprintf
753 declaration too. Patch from russ at sludge.net.
Darren Tucker7243f9d2006-06-30 11:47:49 +1000754 - (dtucker) [openbsd-compat/getrrsetbyname.c] Undef _res before defining it,
755 prevents warnings on platforms where _res is in the system headers.
Darren Tuckerdb4c54b2006-06-30 16:20:58 +1000756 - (dtucker) [INSTALL] Bug #1202: Note when autoconf is required and which
757 version.
Darren Tucker66c32d52006-06-30 10:51:32 +1000758
Darren Tucker8b272ab2006-06-27 11:20:28 +100075920060627
760 - (dtucker) [configure.ac] Bug #1203: Add missing '[', which causes problems
761 with autoconf 2.60. Patch from vapier at gentoo.org.
762
Darren Tucker144e8d62006-06-25 08:25:25 +100076320060625
764 - (dtucker) [channels.c serverloop.c] Apply the bug #1102 workaround to ptys
765 only, otherwise sshd can hang exiting non-interactive sessions.
766
Darren Tucker0249f932006-06-24 12:10:07 +100076720060624
768 - (dtucker) [configure.ac] Bug #1193: Define PASSWD_NEEDS_USERNAME on Solaris.
769 Works around limitation in Solaris' passwd program for changing passwords
770 where the username is longer than 8 characters. ok djm@
Darren Tucker03890e42006-06-24 16:58:45 +1000771 - (dtucker) [serverloop.c] Get ifdef/ifndef the right way around for the bug
772 #1102 workaround.
Darren Tucker0249f932006-06-24 12:10:07 +1000773
Darren Tucker3eb48342006-06-23 21:05:12 +100077420060623
775 - (dtucker) [README.platform configure.ac openbsd-compat/port-tun.c] Add
776 tunnel support for Mac OS X/Darwin via a third-party tun driver. Patch
777 from reyk@, tested by anil@
Darren Tucker9afe1152006-06-23 21:24:12 +1000778 - (dtucker) [channels.c configure.ac serverloop.c] Bug #1102: Around AIX
779 4.3.3 ML3 or so, the AIX pty layer starting passing zero-length writes
780 on the pty slave as zero-length reads on the pty master, which sshd
781 interprets as the descriptor closing. Since most things don't do zero
782 length writes this rarely matters, but occasionally it happens, and when
783 it does the SSH pty session appears to hang, so we add a special case for
784 this condition. ok djm@
Darren Tucker3eb48342006-06-23 21:05:12 +1000785
Damien Millere250a942006-06-13 12:59:53 +100078620060613
Damien Miller64346082006-06-13 13:15:54 +1000787 - (djm) [getput.h] This file has been replaced by functions in misc.c
Damien Millere250a942006-06-13 12:59:53 +1000788 - OpenBSD CVS Sync
789 - djm@cvs.openbsd.org 2006/05/08 10:49:48
790 [sshconnect2.c]
791 uint32_t -> u_int32_t (which we use everywhere else)
792 (Id sync only - portable already had this)
Damien Miller24fd8dd2006-06-13 13:00:09 +1000793 - markus@cvs.openbsd.org 2006/05/16 09:00:00
794 [clientloop.c]
795 missing free; from Kylene Hall
Damien Miller40b59852006-06-13 13:00:25 +1000796 - markus@cvs.openbsd.org 2006/05/17 12:43:34
797 [scp.c sftp.c ssh-agent.c ssh-keygen.c sshconnect.c]
798 fix leak; coverity via Kylene Jo Hall
Damien Millerad6b14d2006-06-13 13:00:41 +1000799 - miod@cvs.openbsd.org 2006/05/18 21:27:25
800 [kexdhc.c kexgexc.c]
801 paramter -> parameter
Damien Miller658f9452006-06-13 13:00:55 +1000802 - dtucker@cvs.openbsd.org 2006/05/29 12:54:08
803 [ssh_config.5]
804 Add gssapi-with-mic to PreferredAuthentications default list; ok jmc
Damien Miller81a38922006-06-13 13:01:09 +1000805 - dtucker@cvs.openbsd.org 2006/05/29 12:56:33
806 [ssh_config]
Damien Miller3c6ed7b2006-06-13 13:01:41 +1000807 Add GSSAPIAuthentication and GSSAPIDelegateCredentials to examples in
808 sample ssh_config. ok markus@
809 - jmc@cvs.openbsd.org 2006/05/29 16:10:03
810 [ssh_config.5]
811 oops - previous was too long; split the list of auths up
Damien Millerfbc94c82006-06-13 13:03:16 +1000812 - mk@cvs.openbsd.org 2006/05/30 11:46:38
813 [ssh-add.c]
814 Sync usage() with man page and reality.
815 ok deraadt dtucker
816 - jmc@cvs.openbsd.org 2006/05/29 16:13:23
817 [ssh.1]
818 add GSSAPI to the list of authentication methods supported;
Damien Miller7b1e7572006-06-13 13:03:34 +1000819 - mk@cvs.openbsd.org 2006/05/30 11:46:38
820 [ssh-add.c]
821 Sync usage() with man page and reality.
822 ok deraadt dtucker
Damien Millereb13e552006-06-13 13:03:53 +1000823 - markus@cvs.openbsd.org 2006/06/01 09:21:48
824 [sshd.c]
825 call get_remote_ipaddr() early; fixes logging after client disconnects;
826 report mpf@; ok dtucker@
Damien Miller6b4069a2006-06-13 13:05:15 +1000827 - markus@cvs.openbsd.org 2006/06/06 10:20:20
828 [readpass.c sshconnect.c sshconnect.h sshconnect2.c uidswap.c]
829 replace remaining setuid() calls with permanently_set_uid() and
830 check seteuid() return values; report Marcus Meissner; ok dtucker djm
Damien Miller2e5fe882006-06-13 13:10:00 +1000831 - markus@cvs.openbsd.org 2006/06/08 14:45:49
832 [readpass.c sshconnect.c sshconnect2.c uidswap.c uidswap.h]
833 do not set the gid, noted by solar; ok djm
Damien Millera6680a42006-06-13 13:10:18 +1000834 - djm@cvs.openbsd.org 2006/06/13 01:18:36
835 [ssh-agent.c]
836 always use a format string, even when printing a constant
837 - djm@cvs.openbsd.org 2006/06/13 02:17:07
838 [ssh-agent.c]
839 revert; i am on drugs. spotted by alexander AT beard.se
Damien Millere250a942006-06-13 12:59:53 +1000840
Darren Tuckerf14b2aa2006-05-21 18:26:40 +100084120060521
842 - (dtucker) [auth.c monitor.c] Now that we don't log from both the monitor
843 and slave, we can remove the special-case handling in the audit hook in
844 auth_log.
845
84620060517
Darren Tuckerf58b29d2006-05-17 22:24:56 +1000847 - (dtucker) [ssh-rand-helper.c] Check return code of mkdir and fix file
848 pointer leak. From kjhall at us.ibm.com, found by coverity.
849
Darren Tuckerf14b2aa2006-05-21 18:26:40 +100085020060515
Darren Tucker13c539a2006-05-15 17:15:56 +1000851 - (dtucker) [openbsd-compat/getrrsetbyname.c] Use _compat_res instead of
852 _res, prevents problems on some platforms that have _res as a global but
853 don't have getrrsetbyname(), eg IRIX 5.3. Found and tested by
854 georg.schwarz at freenet.de, ok djm@.
Darren Tuckercefd8bb2006-05-15 17:17:29 +1000855 - (dtucker) [defines.h] Find a value for IOV_MAX or use a conservative
856 default. Patch originally from tim@, ok djm
Darren Tucker2c77b7f2006-05-15 17:22:33 +1000857 - (dtucker) [auth-pam.c] Bug #1188: pass result of do_pam_account back and
858 do not allow kbdint again after the PAM account check fails. ok djm@
Darren Tucker13c539a2006-05-15 17:15:56 +1000859
Darren Tuckerf14b2aa2006-05-21 18:26:40 +100086020060506
Darren Tucker73373872006-05-15 17:24:25 +1000861 - (dtucker) OpenBSD CVS Sync
Darren Tucker232b76f2006-05-06 17:41:51 +1000862 - dtucker@cvs.openbsd.org 2006/04/25 08:02:27
863 [authfile.c authfile.h sshconnect2.c ssh.c sshconnect1.c]
864 Prevent ssh from trying to open private keys with bad permissions more than
865 once or prompting for their passphrases (which it subsequently ignores
866 anyway), similar to a previous change in ssh-add. bz #1186, ok djm@
Darren Tucker31cde682006-05-06 17:43:33 +1000867 - djm@cvs.openbsd.org 2006/05/04 14:55:23
868 [dh.c]
869 tighter DH exponent checks here too; feedback and ok markus@
Darren Tuckerf779f672006-05-06 17:48:48 +1000870 - djm@cvs.openbsd.org 2006/04/01 05:37:46
871 [OVERVIEW]
872 $OpenBSD$ in here too
Darren Tucker43ff44e2006-05-06 18:40:53 +1000873 - dtucker@cvs.openbsd.org 2006/05/06 08:35:40
874 [auth-krb5.c]
875 Add $OpenBSD$ in comment here too
Darren Tucker232b76f2006-05-06 17:41:51 +1000876
Darren Tuckerd8093e42006-05-04 16:24:34 +100087720060504
878 - (dtucker) [auth-pam.c groupaccess.c monitor.c monitor_wrap.c scard-opensc.c
879 session.c ssh-rand-helper.c sshd.c openbsd-compat/bsd-cygwin_util.c
880 openbsd-compat/setproctitle.c] Convert malloc(foo*bar) -> calloc(foo,bar)
881 in Portable-only code; since calloc zeros, remove now-redundant memsets.
882 Also add a couple of sanity checks. With & ok djm@
883
Darren Tucker596d3382006-05-03 19:01:09 +100088420060503
885 - (dtucker) [packet.c] Remove in_systm.h since it's also in includes.h
886 and double including it on IRIX 5.3 causes problems. From Georg Schwarz,
887 "no objections" tim@
888
Damien Miller07aa1322006-04-23 12:04:27 +100088920060423
890 - (djm) OpenBSD CVS Sync
891 - deraadt@cvs.openbsd.org 2006/04/01 05:42:20
892 [scp.c]
893 minimal lint cleanup (unused crud, and some size_t); ok djm
Damien Miller7a656f72006-04-23 12:04:46 +1000894 - djm@cvs.openbsd.org 2006/04/01 05:50:29
895 [scp.c]
896 xasprintification; ok deraadt@
Damien Miller603e68f2006-04-23 12:05:32 +1000897 - djm@cvs.openbsd.org 2006/04/01 05:51:34
898 [atomicio.c]
899 ANSIfy; requested deraadt@
900 - dtucker@cvs.openbsd.org 2006/04/02 08:34:52
901 [ssh-keysign.c]
902 sessionid can be 32 bytes now too when sha256 kex is used; ok djm@
Damien Miller63e437f2006-04-23 12:05:46 +1000903 - djm@cvs.openbsd.org 2006/04/03 07:10:38
904 [gss-genr.c]
905 GSSAPI buffers shouldn't be nul-terminated, spotted in bugzilla #1066
906 by dleonard AT vintela.com. use xasprintf() to simplify code while in
907 there; "looks right" deraadt@
Damien Miller499a0d52006-04-23 12:06:03 +1000908 - djm@cvs.openbsd.org 2006/04/16 00:48:52
909 [buffer.c buffer.h channels.c]
910 Fix condition where we could exit with a fatal error when an input
911 buffer became too large and the remote end had advertised a big window.
912 The problem was a mismatch in the backoff math between the channels code
913 and the buffer code, so make a buffer_check_alloc() function that the
914 channels code can use to propsectivly check whether an incremental
915 allocation will succeed. bz #1131, debugged with the assistance of
916 cove AT wildpackets.com; ok dtucker@ deraadt@
Damien Miller6aa139c2006-04-23 12:06:20 +1000917 - djm@cvs.openbsd.org 2006/04/16 00:52:55
918 [atomicio.c atomicio.h]
919 introduce atomiciov() function that wraps readv/writev to retry
920 interrupted transfers like atomicio() does for read/write;
921 feedback deraadt@ dtucker@ stevesk@ ok deraadt@
Damien Miller58ca98b2006-04-23 12:06:35 +1000922 - djm@cvs.openbsd.org 2006/04/16 00:54:10
923 [sftp-client.c]
924 avoid making a tiny 4-byte write to send the packet length of sftp
925 commands, which would result in a separate tiny packet on the wire by
926 using atomiciov(writev, ...) to write the length and the command in one
927 pass; ok deraadt@
Damien Millerb5ea7e72006-04-23 12:06:49 +1000928 - djm@cvs.openbsd.org 2006/04/16 07:59:00
929 [atomicio.c]
930 reorder sanity test so that it cannot dereference past the end of the
931 iov array; well spotted canacar@!
Damien Miller58629fa2006-04-23 12:08:19 +1000932 - dtucker@cvs.openbsd.org 2006/04/18 10:44:28
Damien Miller7b50b202006-04-23 12:31:27 +1000933 [bufaux.c bufbn.c Makefile.in]
Damien Miller58629fa2006-04-23 12:08:19 +1000934 Move Buffer bignum functions into their own file, bufbn.c. This means
935 that sftp and sftp-server (which use the Buffer functions in bufaux.c
936 but not the bignum ones) no longer need to be linked with libcrypto.
937 ok markus@
Damien Miller97c91f62006-04-23 12:08:37 +1000938 - djm@cvs.openbsd.org 2006/04/20 09:27:09
939 [auth.h clientloop.c dispatch.c dispatch.h kex.h]
940 replace the last non-sig_atomic_t flag used in a signal handler with a
941 sig_atomic_t, unfortunately with some knock-on effects in other (non-
942 signal) contexts in which it is used; ok markus@
Damien Miller56e5e6a2006-04-23 12:08:59 +1000943 - markus@cvs.openbsd.org 2006/04/20 09:47:59
944 [sshconnect.c]
945 simplify; ok djm@
Damien Miller525a0b02006-04-23 12:10:49 +1000946 - djm@cvs.openbsd.org 2006/04/20 21:53:44
947 [includes.h session.c sftp.c]
948 Switch from using pipes to socketpairs for communication between
949 sftp/scp and ssh, and between sshd and its subprocesses. This saves
950 a file descriptor per session and apparently makes userland ppp over
951 ssh work; ok markus@ deraadt@ (ID Sync only - portable makes this
952 decision on a per-platform basis)
Damien Miller2282c6e2006-04-23 12:11:57 +1000953 - djm@cvs.openbsd.org 2006/04/22 04:06:51
954 [uidswap.c]
955 use setres[ug]id() to permanently revoke privileges; ok deraadt@
956 (ID Sync only - portable already uses setres[ug]id() whenever possible)
Damien Miller08d4b0c2006-04-23 12:12:24 +1000957 - stevesk@cvs.openbsd.org 2006/04/22 18:29:33
958 [crc32.c]
959 remove extra spaces
Damien Miller2bdd1c12006-04-23 12:28:53 +1000960 - (djm) [auth.h dispatch.h kex.h] sprinkle in signal.h to get
961 sig_atomic_t
Damien Miller07aa1322006-04-23 12:04:27 +1000962
Damien Miller73b42d22006-04-22 21:26:08 +100096320060421
964 - (djm) [Makefile.in configure.ac session.c sshpty.c]
965 [contrib/redhat/sshd.init openbsd-compat/Makefile.in]
966 [openbsd-compat/openbsd-compat.h openbsd-compat/port-linux.c]
967 [openbsd-compat/port-linux.h] Add support for SELinux, setting
968 the execution and TTY contexts. based on patch from Daniel Walsh,
969 bz #880; ok dtucker@
970
Damien Miller2eaf37d2006-04-18 15:13:16 +100097120060418
Damien Miller73b42d22006-04-22 21:26:08 +1000972 - (djm) [canohost.c] Reorder IP options check so that it isn't broken
973 by mapped addresses; bz #1179 reported by markw wtech-llc.com;
Damien Miller2eaf37d2006-04-18 15:13:16 +1000974 ok dtucker@
975
Damien Millerda380be2006-03-31 23:09:17 +110097620060331
977 - OpenBSD CVS Sync
978 - deraadt@cvs.openbsd.org 2006/03/27 01:21:18
979 [xmalloc.c]
980 we can do the size & nmemb check before the integer overflow check;
981 evol
Damien Miller5a73c1a2006-03-31 23:09:41 +1100982 - deraadt@cvs.openbsd.org 2006/03/27 13:03:54
983 [dh.c]
984 use strtonum() instead of atoi(), limit dhg size to 64k; ok djm
Damien Miller2b5a0de2006-03-31 23:10:31 +1100985 - djm@cvs.openbsd.org 2006/03/27 23:15:46
986 [sftp.c]
987 always use a format string for addargs; spotted by mouring@
Damien Millerddd63ab2006-03-31 23:10:51 +1100988 - deraadt@cvs.openbsd.org 2006/03/28 00:12:31
989 [README.tun ssh.c]
990 spacing
Damien Miller57c4e872006-03-31 23:11:07 +1100991 - deraadt@cvs.openbsd.org 2006/03/28 01:52:28
992 [channels.c]
993 do not accept unreasonable X ports numbers; ok djm
Damien Miller89c3fe42006-03-31 23:11:28 +1100994 - deraadt@cvs.openbsd.org 2006/03/28 01:53:43
995 [ssh-agent.c]
996 use strtonum() to parse the pid from the file, and range check it
997 better; ok djm
Damien Millerd79b4242006-03-31 23:11:44 +1100998 - djm@cvs.openbsd.org 2006/03/30 09:41:25
999 [channels.c]
1000 ARGSUSED for dispatch table-driven functions
Damien Miller3f941882006-03-31 23:13:02 +11001001 - djm@cvs.openbsd.org 2006/03/30 09:58:16
1002 [authfd.c bufaux.c deattack.c gss-serv.c mac.c misc.c misc.h]
1003 [monitor_wrap.c msg.c packet.c sftp-client.c sftp-server.c ssh-agent.c]
1004 replace {GET,PUT}_XXBIT macros with functionally similar functions,
1005 silencing a heap of lint warnings. also allows them to use
1006 __bounded__ checking which can't be applied to macros; requested
1007 by and feedback from deraadt@
Damien Miller6b1d53c2006-03-31 23:13:21 +11001008 - djm@cvs.openbsd.org 2006/03/30 10:41:25
1009 [ssh.c ssh_config.5]
1010 add percent escape chars to the IdentityFile option, bz #1159 based
1011 on a patch by imaging AT math.ualberta.ca; feedback and ok dtucker@
Damien Millere23209f2006-03-31 23:13:35 +11001012 - dtucker@cvs.openbsd.org 2006/03/30 11:05:17
1013 [ssh-keygen.c]
1014 Correctly handle truncated files while converting keys; ok djm@
Damien Miller7a8f5b32006-03-31 23:14:23 +11001015 - dtucker@cvs.openbsd.org 2006/03/30 11:40:21
1016 [auth.c monitor.c]
1017 Prevent duplicate log messages when privsep=yes; ok djm@
Damien Millerc6437cf2006-03-31 23:14:41 +11001018 - jmc@cvs.openbsd.org 2006/03/31 09:09:30
1019 [ssh_config.5]
1020 kill trailing whitespace;
Damien Millerdfc61832006-03-31 23:14:57 +11001021 - djm@cvs.openbsd.org 2006/03/31 09:13:56
1022 [ssh_config.5]
1023 remote user escape is %r not %h; spotted by jmc@
Damien Millerda380be2006-03-31 23:09:17 +11001024
Damien Millercb314822006-03-26 13:48:01 +1100102520060326
1026 - OpenBSD CVS Sync
1027 - jakob@cvs.openbsd.org 2006/03/15 08:46:44
1028 [ssh-keygen.c]
1029 if no key file are given when printing the DNS host record, use the
1030 host key file(s) as default. ok djm@
Damien Miller745570c2006-03-26 13:49:43 +11001031 - biorn@cvs.openbsd.org 2006/03/16 10:31:45
1032 [scp.c]
1033 Try to display errormessage even if remout == -1
1034 ok djm@, markus@
Damien Miller5b832322006-03-26 13:50:14 +11001035 - djm@cvs.openbsd.org 2006/03/17 22:31:50
1036 [authfd.c]
1037 another unreachable found by lint
Damien Miller304a9402006-03-26 13:50:37 +11001038 - djm@cvs.openbsd.org 2006/03/17 22:31:11
1039 [authfd.c]
1040 unreachanble statement, found by lint
Damien Miller6f98a1f2006-03-26 13:51:08 +11001041 - djm@cvs.openbsd.org 2006/03/19 02:22:32
1042 [serverloop.c]
1043 memory leaks detected by Coverity via elad AT netbsd.org;
1044 ok deraadt@ dtucker@
Damien Millere0b90a62006-03-26 13:51:44 +11001045 - djm@cvs.openbsd.org 2006/03/19 02:22:56
1046 [sftp.c]
1047 more memory leaks detected by Coverity via elad AT netbsd.org;
1048 deraadt@ ok
Damien Miller6db780e2006-03-26 13:52:20 +11001049 - djm@cvs.openbsd.org 2006/03/19 02:23:26
1050 [hostfile.c]
1051 FILE* leak detected by Coverity via elad AT netbsd.org;
1052 ok deraadt@
Damien Miller928b2362006-03-26 13:53:32 +11001053 - djm@cvs.openbsd.org 2006/03/19 02:24:05
1054 [dh.c readconf.c servconf.c]
1055 potential NULL pointer dereferences detected by Coverity
1056 via elad AT netbsd.org; ok deraadt@
Damien Miller5790b592006-03-26 13:54:03 +11001057 - djm@cvs.openbsd.org 2006/03/19 07:41:30
1058 [sshconnect2.c]
1059 memory leaks detected by Coverity via elad AT netbsd.org;
1060 deraadt@ ok
Damien Miller78f16cb2006-03-26 13:54:37 +11001061 - dtucker@cvs.openbsd.org 2006/03/19 11:51:52
1062 [servconf.c]
1063 Correct strdelim null test; ok djm@
Damien Millerd62f2ca2006-03-26 13:57:41 +11001064 - deraadt@cvs.openbsd.org 2006/03/19 18:52:11
1065 [auth1.c authfd.c channels.c]
1066 spacing
Damien Millerc91e5562006-03-26 13:58:55 +11001067 - deraadt@cvs.openbsd.org 2006/03/19 18:53:12
1068 [kex.c kex.h monitor.c myproposal.h session.c]
1069 spacing
Damien Millerf0b15df2006-03-26 13:59:20 +11001070 - deraadt@cvs.openbsd.org 2006/03/19 18:56:41
1071 [clientloop.c progressmeter.c serverloop.c sshd.c]
1072 ARGSUSED for signal handlers
Damien Miller3bbaba62006-03-26 13:59:38 +11001073 - deraadt@cvs.openbsd.org 2006/03/19 18:59:49
1074 [ssh-keyscan.c]
1075 please lint
Damien Miller4662d342006-03-26 13:59:59 +11001076 - deraadt@cvs.openbsd.org 2006/03/19 18:59:30
1077 [ssh.c]
1078 spacing
Damien Miller3305f552006-03-26 14:00:31 +11001079 - deraadt@cvs.openbsd.org 2006/03/19 18:59:09
1080 [authfile.c]
1081 whoever thought that break after return was a good idea needs to
1082 get their head examimed
Damien Miller96937bd2006-03-26 14:01:54 +11001083 - djm@cvs.openbsd.org 2006/03/20 04:09:44
1084 [monitor.c]
1085 memory leaks detected by Coverity via elad AT netbsd.org;
1086 deraadt@ ok
1087 that should be all of them now
Damien Miller429fcc22006-03-26 14:02:16 +11001088 - djm@cvs.openbsd.org 2006/03/20 11:38:46
1089 [key.c]
1090 (really) last of the Coverity diffs: avoid possible NULL deref in
1091 key_free. via elad AT netbsd.org; markus@ ok
Damien Miller69b72032006-03-26 14:02:35 +11001092 - deraadt@cvs.openbsd.org 2006/03/20 17:10:19
1093 [auth.c key.c misc.c packet.c ssh-add.c]
1094 in a switch (), break after return or goto is stupid
Damien Millerbbaad772006-03-26 14:03:03 +11001095 - deraadt@cvs.openbsd.org 2006/03/20 17:13:16
1096 [key.c]
1097 djm did a typo
Damien Miller6d39bcf2006-03-26 14:03:21 +11001098 - deraadt@cvs.openbsd.org 2006/03/20 17:17:23
1099 [ssh-rsa.c]
1100 in a switch (), break after return or goto is stupid
Damien Miller71a73672006-03-26 14:04:36 +11001101 - deraadt@cvs.openbsd.org 2006/03/20 18:14:02
Damien Miller1b81a492006-03-26 14:05:02 +11001102 [channels.c clientloop.c monitor_wrap.c monitor_wrap.h serverloop.c]
1103 [ssh.c sshpty.c sshpty.h]
Damien Miller71a73672006-03-26 14:04:36 +11001104 sprinkle u_int throughout pty subsystem, ok markus
Damien Miller91d4b122006-03-26 14:05:20 +11001105 - deraadt@cvs.openbsd.org 2006/03/20 18:17:20
1106 [auth1.c auth2.c sshd.c]
1107 sprinkle some ARGSUSED for table driven functions (which sometimes
1108 must ignore their args)
Damien Miller90967402006-03-26 14:07:26 +11001109 - deraadt@cvs.openbsd.org 2006/03/20 18:26:55
1110 [channels.c monitor.c session.c session.h ssh-agent.c ssh-keygen.c]
1111 [ssh-rsa.c ssh.c sshlogin.c]
1112 annoying spacing fixes getting in the way of real diffs
Damien Miller9f3bd532006-03-26 14:07:52 +11001113 - deraadt@cvs.openbsd.org 2006/03/20 18:27:50
1114 [monitor.c]
1115 spacing
Damien Miller4ae97f12006-03-26 14:08:10 +11001116 - deraadt@cvs.openbsd.org 2006/03/20 18:35:12
1117 [channels.c]
1118 x11_fake_data is only ever used as u_char *
Damien Miller1ff7c642006-03-26 14:09:09 +11001119 - deraadt@cvs.openbsd.org 2006/03/20 18:41:43
1120 [dns.c]
1121 cast xstrdup to propert u_char *
Damien Miller1d2b6702006-03-26 14:09:54 +11001122 - deraadt@cvs.openbsd.org 2006/03/20 18:42:27
1123 [canohost.c match.c ssh.c sshconnect.c]
1124 be strict with tolower() casting
Damien Miller4f7becb2006-03-26 14:10:14 +11001125 - deraadt@cvs.openbsd.org 2006/03/20 18:48:34
1126 [channels.c fatal.c kex.c packet.c serverloop.c]
1127 spacing
Damien Millera5a28592006-03-26 14:10:34 +11001128 - deraadt@cvs.openbsd.org 2006/03/20 21:11:53
1129 [ttymodes.c]
1130 spacing
Damien Miller07d86be2006-03-26 14:19:21 +11001131 - djm@cvs.openbsd.org 2006/03/25 00:05:41
1132 [auth-bsdauth.c auth-skey.c auth.c auth2-chall.c channels.c]
1133 [clientloop.c deattack.c gss-genr.c kex.c key.c misc.c moduli.c]
1134 [monitor.c monitor_wrap.c packet.c scard.c sftp-server.c ssh-agent.c]
1135 [ssh-keyscan.c ssh.c sshconnect.c sshconnect2.c sshd.c uuencode.c]
1136 [xmalloc.c xmalloc.h]
1137 introduce xcalloc() and xasprintf() failure-checked allocations
1138 functions and use them throughout openssh
1139
1140 xcalloc is particularly important because malloc(nmemb * size) is a
1141 dangerous idiom (subject to integer overflow) and it is time for it
1142 to die
1143
1144 feedback and ok deraadt@
Damien Miller36812092006-03-26 14:22:47 +11001145 - djm@cvs.openbsd.org 2006/03/25 01:13:23
1146 [buffer.c channels.c deattack.c misc.c scp.c session.c sftp-client.c]
1147 [sftp-server.c ssh-agent.c ssh-rsa.c xmalloc.c xmalloc.h auth-pam.c]
1148 [uidswap.c]
1149 change OpenSSH's xrealloc() function from being xrealloc(p, new_size)
1150 to xrealloc(p, new_nmemb, new_itemsize).
1151
1152 realloc is particularly prone to integer overflows because it is
1153 almost always allocating "n * size" bytes, so this is a far safer
1154 API; ok deraadt@
Damien Miller55b04f12006-03-26 14:23:17 +11001155 - djm@cvs.openbsd.org 2006/03/25 01:30:23
1156 [sftp.c]
1157 "abormally" is a perfectly cromulent word, but "abnormally" is better
Damien Miller57c30112006-03-26 14:24:48 +11001158 - djm@cvs.openbsd.org 2006/03/25 13:17:03
Damien Miller48c4ed22006-03-26 14:25:05 +11001159 [atomicio.c auth-bsdauth.c auth-chall.c auth-options.c auth-passwd.c]
1160 [auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth-skey.c auth.c auth1.c]
1161 [auth2-chall.c auth2-hostbased.c auth2-kbdint.c auth2-none.c]
1162 [auth2-passwd.c auth2-pubkey.c auth2.c authfd.c authfile.c bufaux.c]
1163 [buffer.c canohost.c channels.c cipher-3des1.c cipher-bf1.c]
1164 [cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c compress.c]
1165 [deattack.c dh.c dispatch.c fatal.c groupaccess.c hostfile.c kex.c]
1166 [kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c log.c]
1167 [mac.c match.c md-sha256.c misc.c monitor.c monitor_fdpass.c]
1168 [monitor_mm.c monitor_wrap.c msg.c nchan.c packet.c progressmeter.c]
1169 [readconf.c readpass.c rsa.c scard.c scp.c servconf.c serverloop.c]
1170 [session.c sftp-client.c sftp-common.c sftp-glob.c sftp-server.c]
1171 [sftp.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c]
1172 [ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c]
1173 [sshconnect2.c sshd.c sshlogin.c sshpty.c sshtty.c ttymodes.c]
1174 [uidswap.c uuencode.c xmalloc.c]
Damien Miller57c30112006-03-26 14:24:48 +11001175 Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
1176 Theo nuked - our scripts to sync -portable need them in the files
Damien Miller8ba29fe2006-03-26 14:25:19 +11001177 - deraadt@cvs.openbsd.org 2006/03/25 18:29:35
1178 [auth-rsa.c authfd.c packet.c]
1179 needed casts (always will be needed)
Damien Miller90fdfaf2006-03-26 14:25:37 +11001180 - deraadt@cvs.openbsd.org 2006/03/25 18:30:55
1181 [clientloop.c serverloop.c]
1182 spacing
Damien Millera1690d02006-03-26 14:27:35 +11001183 - deraadt@cvs.openbsd.org 2006/03/25 18:36:15
1184 [sshlogin.c sshlogin.h]
1185 nicer size_t and time_t types
Damien Miller5f340062006-03-26 14:27:57 +11001186 - deraadt@cvs.openbsd.org 2006/03/25 18:40:14
1187 [ssh-keygen.c]
1188 cast strtonum() result to right type
Damien Miller1c13bd82006-03-26 14:28:14 +11001189 - deraadt@cvs.openbsd.org 2006/03/25 18:41:45
1190 [ssh-agent.c]
1191 mark two more signal handlers ARGSUSED
Damien Miller08d61502006-03-26 14:28:32 +11001192 - deraadt@cvs.openbsd.org 2006/03/25 18:43:30
1193 [channels.c]
1194 use strtonum() instead of atoi() [limit X screens to 400, sorry]
Damien Millera0fdce92006-03-26 14:28:50 +11001195 - deraadt@cvs.openbsd.org 2006/03/25 18:56:55
1196 [bufaux.c channels.c packet.c]
1197 remove (char *) casts to a function that accepts void * for the arg
Damien Millere3b21a52006-03-26 14:29:06 +11001198 - deraadt@cvs.openbsd.org 2006/03/25 18:58:10
1199 [channels.c]
1200 delete cast not required
Damien Miller51096382006-03-26 14:30:00 +11001201 - djm@cvs.openbsd.org 2006/03/25 22:22:43
1202 [atomicio.h auth-options.h auth.h auth2-gss.c authfd.h authfile.h]
1203 [bufaux.h buffer.h canohost.h channels.h cipher.h clientloop.h]
1204 [compat.h compress.h crc32.c crc32.h deattack.h dh.h dispatch.h]
1205 [dns.c dns.h getput.h groupaccess.h gss-genr.c gss-serv-krb5.c]
1206 [gss-serv.c hostfile.h includes.h kex.h key.h log.h mac.h match.h]
1207 [misc.h monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h msg.h]
1208 [myproposal.h packet.h pathnames.h progressmeter.h readconf.h rsa.h]
1209 [scard.h servconf.h serverloop.h session.h sftp-common.h sftp.h]
1210 [ssh-gss.h ssh.h ssh1.h ssh2.h sshconnect.h sshlogin.h sshpty.h]
1211 [ttymodes.h uidswap.h uuencode.h xmalloc.h]
1212 standardise spacing in $OpenBSD$ tags; requested by deraadt@
Damien Millerb3cdc222006-03-26 14:30:33 +11001213 - deraadt@cvs.openbsd.org 2006/03/26 01:31:48
1214 [uuencode.c]
1215 typo
Damien Millercb314822006-03-26 13:48:01 +11001216
Damien Miller3e96d742006-03-25 23:39:29 +1100121720060325
1218 - OpenBSD CVS Sync
1219 - djm@cvs.openbsd.org 2006/03/16 04:24:42
1220 [ssh.1]
1221 Add RFC4419 (Diffie-Hellman group exchange KEX) to the list of SSH RFCs
1222 that OpenSSH supports
Damien Millerb0fb6872006-03-26 00:03:21 +11001223 - deraadt@cvs.openbsd.org 2006/03/19 18:51:18
1224 [atomicio.c auth-bsdauth.c auth-chall.c auth-krb5.c auth-options.c]
1225 [auth-pam.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c]
1226 [auth-shadow.c auth-skey.c auth.c auth1.c auth2-chall.c]
1227 [auth2-hostbased.c auth2-kbdint.c auth2-none.c auth2-passwd.c]
1228 [auth2-pubkey.c auth2.c authfd.c authfile.c bufaux.c buffer.c]
1229 [canohost.c channels.c cipher-3des1.c cipher-acss.c cipher-aes.c]
1230 [cipher-bf1.c cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c]
1231 [compress.c deattack.c dh.c dispatch.c dns.c entropy.c fatal.c]
1232 [groupaccess.c hostfile.c includes.h kex.c kexdh.c kexdhc.c]
1233 [kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c log.c loginrec.c]
1234 [loginrec.h logintest.c mac.c match.c md-sha256.c md5crypt.c misc.c]
1235 [monitor.c monitor_fdpass.c monitor_mm.c monitor_wrap.c msg.c]
1236 [nchan.c packet.c progressmeter.c readconf.c readpass.c rsa.c]
1237 [scard.c scp.c servconf.c serverloop.c session.c sftp-client.c]
1238 [sftp-common.c sftp-glob.c sftp-server.c sftp.c ssh-add.c]
1239 [ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c]
1240 [ssh-rand-helper.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c]
1241 [sshconnect2.c sshd.c sshlogin.c sshpty.c sshtty.c ttymodes.c]
1242 [uidswap.c uuencode.c xmalloc.c openbsd-compat/bsd-arc4random.c]
1243 [openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-cygwin_util.c]
1244 [openbsd-compat/bsd-getpeereid.c openbsd-compat/bsd-misc.c]
1245 [openbsd-compat/bsd-nextstep.c openbsd-compat/bsd-snprintf.c]
1246 [openbsd-compat/bsd-waitpid.c openbsd-compat/fake-rfc2553.c]
1247 RCSID() can die
Damien Miller51b4f822006-03-26 00:04:32 +11001248 - deraadt@cvs.openbsd.org 2006/03/19 18:53:12
1249 [kex.h myproposal.h]
1250 spacing
Damien Millerf23c0962006-03-26 00:04:53 +11001251 - djm@cvs.openbsd.org 2006/03/20 04:07:22
1252 [auth2-gss.c]
1253 GSSAPI related leaks detected by Coverity via elad AT netbsd.org;
1254 reviewed by simon AT sxw.org.uk; deraadt@ ok
Damien Millera66cf682006-03-26 00:05:23 +11001255 - djm@cvs.openbsd.org 2006/03/20 04:07:49
1256 [gss-genr.c]
1257 more GSSAPI related leaks detected by Coverity via elad AT netbsd.org;
1258 reviewed by simon AT sxw.org.uk; deraadt@ ok
Damien Miller91a2d972006-03-26 00:05:44 +11001259 - djm@cvs.openbsd.org 2006/03/20 04:08:18
1260 [gss-serv.c]
1261 last lot of GSSAPI related leaks detected by Coverity via
1262 elad AT netbsd.org; reviewed by simon AT sxw.org.uk; deraadt@ ok
Damien Millered3986a2006-03-26 00:06:14 +11001263 - deraadt@cvs.openbsd.org 2006/03/20 18:14:02
1264 [monitor_wrap.h sshpty.h]
1265 sprinkle u_int throughout pty subsystem, ok markus
Damien Miller1345e612006-03-26 00:06:32 +11001266 - deraadt@cvs.openbsd.org 2006/03/20 18:26:55
1267 [session.h]
1268 annoying spacing fixes getting in the way of real diffs
Damien Miller59962942006-03-26 00:06:48 +11001269 - deraadt@cvs.openbsd.org 2006/03/20 18:41:43
1270 [dns.c]
1271 cast xstrdup to propert u_char *
Damien Millera1b3d632006-03-26 00:07:02 +11001272 - jakob@cvs.openbsd.org 2006/03/22 21:16:24
1273 [ssh.1]
1274 simplify SSHFP example; ok jmc@
Damien Miller2dbbf8e2006-03-26 00:11:46 +11001275 - djm@cvs.openbsd.org 2006/03/22 21:27:15
1276 [deattack.c deattack.h]
1277 remove IV support from the CRC attack detector, OpenSSH has never used
1278 it - it only applied to IDEA-CFB, which we don't support.
1279 prompted by NetBSD Coverity report via elad AT netbsd.org;
1280 feedback markus@ "nuke it" deraadt@
Damien Miller3e96d742006-03-25 23:39:29 +11001281
Damien Miller66f9eb62006-03-18 23:04:49 +1100128220060318
Darren Tucker9834cab2006-03-19 00:07:07 +11001283 - (djm) [auth-pam.c] Fix memleak in error path, from Coverity via
1284 elad AT NetBSD.org
1285 - (dtucker) [openbsd-compat/bsd-snprintf.c] Bug #1173: make fmtint() take
1286 a LLONG rather than a long. Fixes scp'ing of large files on platforms
1287 with missing/broken snprintfs. Patch from e.borovac at bom.gov.au.
Damien Miller66f9eb62006-03-18 23:04:49 +11001288
Darren Tuckerd82cbcb2006-03-16 07:21:35 +1100128920060316
1290 - (dtucker) [entropy.c] Add headers for WIFEXITED and friends.
Darren Tuckerc4953012006-03-16 08:14:34 +11001291 - (dtucker) [configure.ac md-sha256.c] NetBSD has sha2.h in
1292 /usr/include/crypto. Hint from djm@.
Tim Rice425a6882006-03-15 20:17:05 -08001293 - (tim) [kex.c myproposal.h md-sha256.c openbsd-compat/sha2.c,h]
1294 Disable sha256 when openssl < 0.9.7. Patch from djm@.
Damien Millerb3092032006-03-16 18:22:18 +11001295 - (djm) [kex.c] Slightly more clean deactivation of dhgex-sha256 on old
1296 OpenSSL; ok tim
Darren Tuckerd82cbcb2006-03-16 07:21:35 +11001297
Damien Miller9f67a212006-03-15 11:05:35 +1100129820060315
1299 - (djm) OpenBSD CVS Sync:
1300 - msf@cvs.openbsd.org 2006/02/06 15:54:07
1301 [ssh.1]
1302 - typo fix
1303 ok jmc@
Damien Millere93eaaa2006-03-15 11:05:59 +11001304 - jmc@cvs.openbsd.org 2006/02/06 21:44:47
1305 [ssh.1]
1306 make this a little less ambiguous...
Damien Miller015cd792006-03-15 11:08:02 +11001307 - stevesk@cvs.openbsd.org 2006/02/07 01:08:04
1308 [auth-rhosts.c includes.h]
1309 move #include <netgroup.h> out of includes.h; ok markus@
Damien Miller2eb63402006-03-15 11:09:42 +11001310 - stevesk@cvs.openbsd.org 2006/02/07 01:18:09
1311 [includes.h ssh-agent.c ssh-keyscan.c sshconnect2.c]
1312 move #include <sys/queue.h> out of includes.h; ok markus@
Damien Miller99bd21e2006-03-15 11:11:28 +11001313 - stevesk@cvs.openbsd.org 2006/02/07 01:42:00
1314 [channels.c clientloop.c clientloop.h includes.h packet.h]
1315 [serverloop.c sshpty.c sshpty.h sshtty.c ttymodes.c]
1316 move #include <termios.h> out of includes.h; ok markus@
Damien Miller972c84b2006-03-15 11:11:56 +11001317 - stevesk@cvs.openbsd.org 2006/02/07 01:52:50
1318 [sshtty.c]
1319 "log.h" not needed
Damien Miller5d771052006-03-15 11:12:13 +11001320 - stevesk@cvs.openbsd.org 2006/02/07 03:47:05
1321 [hostfile.c]
1322 "packet.h" not needed
Damien Millerde6dd0a2006-03-15 11:12:38 +11001323 - stevesk@cvs.openbsd.org 2006/02/07 03:59:20
1324 [deattack.c]
1325 duplicate #include
Damien Miller03e20032006-03-15 11:16:59 +11001326 - stevesk@cvs.openbsd.org 2006/02/08 12:15:27
1327 [auth.c clientloop.c includes.h misc.c monitor.c readpass.c]
1328 [session.c sftp.c ssh-agent.c ssh-keysign.c ssh.c sshconnect.c]
1329 [sshd.c sshpty.c]
1330 move #include <paths.h> out of includes.h; ok markus@
Damien Miller3a4051e2006-03-15 11:19:42 +11001331 - stevesk@cvs.openbsd.org 2006/02/08 12:32:49
1332 [includes.h misc.c]
1333 move #include <netinet/tcp.h> out of includes.h; ok markus@
Damien Miller0b70b542006-03-15 11:20:03 +11001334 - stevesk@cvs.openbsd.org 2006/02/08 13:15:44
1335 [gss-serv.c monitor.c]
1336 small KNF
Damien Miller52ab0842006-03-15 11:20:46 +11001337 - stevesk@cvs.openbsd.org 2006/02/08 14:16:59
1338 [sshconnect.c]
1339 <openssl/bn.h> not needed
Damien Millercd4223c2006-03-15 11:22:47 +11001340 - stevesk@cvs.openbsd.org 2006/02/08 14:31:30
1341 [includes.h ssh-agent.c ssh-keyscan.c ssh.c]
1342 move #include <sys/resource.h> out of includes.h; ok markus@
Damien Miller68f8e992006-03-15 11:24:12 +11001343 - stevesk@cvs.openbsd.org 2006/02/08 14:38:18
1344 [includes.h packet.c]
1345 move #include <netinet/in_systm.h> and <netinet/ip.h> out of
1346 includes.h; ok markus@
Damien Miller88f254b2006-03-15 11:25:13 +11001347 - stevesk@cvs.openbsd.org 2006/02/08 23:51:24
1348 [includes.h scp.c sftp-glob.c sftp-server.c]
1349 move #include <dirent.h> out of includes.h; ok markus@
Damien Miller1d905402006-03-15 11:26:55 +11001350 - stevesk@cvs.openbsd.org 2006/02/09 00:32:07
1351 [includes.h]
1352 #include <sys/endian.h> not needed; ok djm@
1353 NB. ID Sync only - we still need this (but it may move later)
Damien Millerc47d7e92006-03-15 11:27:20 +11001354 - jmc@cvs.openbsd.org 2006/02/09 10:10:47
1355 [sshd.8]
1356 - move some text into a CAVEATS section
1357 - merge the COMMAND EXECUTION... section into AUTHENTICATION
Damien Miller17e91c02006-03-15 11:28:34 +11001358 - stevesk@cvs.openbsd.org 2006/02/10 00:27:13
1359 [channels.c clientloop.c includes.h misc.c progressmeter.c sftp.c]
1360 [ssh.c sshd.c sshpty.c]
1361 move #include <sys/ioctl.h> out of includes.h; ok markus@
Damien Miller9cf6d072006-03-15 11:29:24 +11001362 - stevesk@cvs.openbsd.org 2006/02/10 01:44:27
1363 [includes.h monitor.c readpass.c scp.c serverloop.c session.c]
1364 [sftp.c sshconnect.c sshconnect2.c sshd.c]
1365 move #include <sys/wait.h> out of includes.h; ok markus@
Damien Miller3fd019e2006-03-15 11:29:51 +11001366 - otto@cvs.openbsd.org 2006/02/11 19:31:18
1367 [atomicio.c]
1368 type correctness; from Ray Lai in PR 5011; ok millert@
Damien Miller3ec54c72006-03-15 11:30:13 +11001369 - djm@cvs.openbsd.org 2006/02/12 06:45:34
1370 [ssh.c ssh_config.5]
1371 add a %l expansion code to the ControlPath, which is filled in with the
1372 local hostname at runtime. Requested by henning@ to avoid some problems
1373 with /home on NFS; ok dtucker@
Damien Millerb59d4fe2006-03-15 11:30:38 +11001374 - djm@cvs.openbsd.org 2006/02/12 10:44:18
1375 [readconf.c]
1376 raise error when the user specifies a RekeyLimit that is smaller than 16
1377 (the smallest of our cipher's blocksize) or big enough to cause integer
1378 wraparound; ok & feedback dtucker@
Damien Miller20c2ec42006-03-15 11:31:01 +11001379 - jmc@cvs.openbsd.org 2006/02/12 10:49:44
1380 [ssh_config.5]
1381 slight rewording; ok djm
Damien Millerdcfea272006-03-15 11:31:22 +11001382 - jmc@cvs.openbsd.org 2006/02/12 10:52:41
1383 [sshd.8]
1384 rework the description of authorized_keys a little;
Damien Miller31bdc522006-03-15 11:31:44 +11001385 - jmc@cvs.openbsd.org 2006/02/12 17:57:19
1386 [sshd.8]
1387 sort the list of options permissable w/ authorized_keys;
1388 ok djm dtucker
Damien Miller7d2ef022006-03-15 11:32:06 +11001389 - jmc@cvs.openbsd.org 2006/02/13 10:16:39
1390 [sshd.8]
1391 no need to subsection the authorized_keys examples - instead, convert
1392 this to look like an actual file. also use proto 2 keys, and use IETF
1393 example addresses;
Damien Miller9a7f2012006-03-15 11:32:42 +11001394 - jmc@cvs.openbsd.org 2006/02/13 10:21:25
1395 [sshd.8]
1396 small tweaks for the ssh_known_hosts section;
Damien Millercc00f5e2006-03-15 11:33:00 +11001397 - jmc@cvs.openbsd.org 2006/02/13 11:02:26
1398 [sshd.8]
1399 turn this into an example ssh_known_hosts file; ok djm
Damien Millerc8f61cf2006-03-15 11:33:25 +11001400 - jmc@cvs.openbsd.org 2006/02/13 11:08:43
1401 [sshd.8]
1402 - avoid nasty line split
1403 - `*' does not need to be escaped
Damien Millerd8702e82006-03-15 11:33:56 +11001404 - jmc@cvs.openbsd.org 2006/02/13 11:27:25
1405 [sshd.8]
1406 sort FILES and use a -compact list;
Damien Miller0c8d8f62006-03-15 11:34:25 +11001407 - david@cvs.openbsd.org 2006/02/15 05:08:24
1408 [sftp-client.c]
1409 typo in comment; ok djm@
Damien Miller39a93a32006-03-15 11:34:45 +11001410 - jmc@cvs.openbsd.org 2006/02/15 16:53:20
1411 [ssh.1]
1412 remove the IETF draft references and replace them with some updated RFCs;
Damien Millerbc1936a2006-03-15 11:35:05 +11001413 - jmc@cvs.openbsd.org 2006/02/15 16:55:33
1414 [sshd.8]
1415 remove ietf draft references; RFC list now maintained in ssh.1;
Damien Milleradc35b92006-03-15 11:35:27 +11001416 - jmc@cvs.openbsd.org 2006/02/16 09:05:34
1417 [sshd.8]
1418 sync some of the FILES entries w/ ssh.1;
Damien Millerfd725cf2006-03-15 11:35:54 +11001419 - jmc@cvs.openbsd.org 2006/02/19 19:52:10
1420 [sshd.8]
1421 move the sshrc stuff out of FILES, and into its own section:
1422 FILES is not a good place to document how stuff works;
Damien Miller445121f2006-03-15 11:36:18 +11001423 - jmc@cvs.openbsd.org 2006/02/19 20:02:17
1424 [sshd.8]
1425 sync the (s)hosts.equiv FILES entries w/ those from ssh.1;
Damien Milleredd03752006-03-15 11:36:45 +11001426 - jmc@cvs.openbsd.org 2006/02/19 20:05:00
1427 [sshd.8]
1428 grammar;
Damien Miller5c853b52006-03-15 11:37:02 +11001429 - jmc@cvs.openbsd.org 2006/02/19 20:12:25
1430 [ssh_config.5]
1431 add some vertical space;
Damien Miller574c41f2006-03-15 11:40:10 +11001432 - stevesk@cvs.openbsd.org 2006/02/20 16:36:15
1433 [authfd.c channels.c includes.h session.c ssh-agent.c ssh.c]
1434 move #include <sys/un.h> out of includes.h; ok djm@
Damien Millerf17883e2006-03-15 11:45:54 +11001435 - stevesk@cvs.openbsd.org 2006/02/20 17:02:44
1436 [clientloop.c includes.h monitor.c progressmeter.c scp.c]
1437 [serverloop.c session.c sftp.c ssh-agent.c ssh.c sshd.c]
1438 move #include <signal.h> out of includes.h; ok markus@
Damien Miller6ff3cad2006-03-15 11:52:09 +11001439 - stevesk@cvs.openbsd.org 2006/02/20 17:19:54
1440 [auth-rhosts.c auth-rsa.c auth.c auth2-none.c auth2-pubkey.c]
1441 [authfile.c clientloop.c includes.h readconf.c scp.c session.c]
1442 [sftp-client.c sftp-common.c sftp-common.h sftp-glob.c]
1443 [sftp-server.c sftp.c ssh-add.c ssh-keygen.c ssh.c sshconnect.c]
1444 [sshconnect2.c sshd.c sshpty.c]
1445 move #include <sys/stat.h> out of includes.h; ok markus@
Damien Millerc7b06362006-03-15 11:53:45 +11001446 - stevesk@cvs.openbsd.org 2006/02/22 00:04:45
1447 [canohost.c clientloop.c includes.h match.c readconf.c scp.c ssh.c]
1448 [sshconnect.c]
1449 move #include <ctype.h> out of includes.h; ok djm@
Damien Miller6def5512006-03-15 11:54:05 +11001450 - jmc@cvs.openbsd.org 2006/02/24 10:25:14
1451 [ssh_config.5]
1452 add section on patterns;
1453 from dtucker + myself
Damien Miller0c2079d2006-03-15 11:54:21 +11001454 - jmc@cvs.openbsd.org 2006/02/24 10:33:54
1455 [sshd_config.5]
1456 signpost to PATTERNS;
Damien Millerf54a4b92006-03-15 11:54:36 +11001457 - jmc@cvs.openbsd.org 2006/02/24 10:37:07
1458 [ssh_config.5]
1459 tidy up the refs to PATTERNS;
Damien Millerc7d5b5e2006-03-15 11:55:08 +11001460 - jmc@cvs.openbsd.org 2006/02/24 10:39:52
1461 [sshd.8]
1462 signpost to PATTERNS section;
Damien Miller1faa7132006-03-15 11:55:31 +11001463 - jmc@cvs.openbsd.org 2006/02/24 20:22:16
1464 [ssh-keysign.8 ssh_config.5 sshd_config.5]
1465 some consistency fixes;
Damien Miller208f1ed2006-03-15 11:56:03 +11001466 - jmc@cvs.openbsd.org 2006/02/24 20:31:31
1467 [ssh.1 ssh_config.5 sshd.8 sshd_config.5]
1468 more consistency fixes;
Damien Miller45ee2b92006-03-15 11:56:18 +11001469 - jmc@cvs.openbsd.org 2006/02/24 23:20:07
1470 [ssh_config.5]
1471 some grammar/wording fixes;
Damien Miller5b0d63f2006-03-15 11:56:56 +11001472 - jmc@cvs.openbsd.org 2006/02/24 23:43:57
1473 [sshd_config.5]
1474 some grammar/wording fixes;
Damien Millerf4f22b52006-03-15 11:57:25 +11001475 - jmc@cvs.openbsd.org 2006/02/24 23:51:17
1476 [sshd_config.5]
1477 oops - bits i missed;
Damien Miller9cfbaec2006-03-15 11:57:55 +11001478 - jmc@cvs.openbsd.org 2006/02/25 12:26:17
1479 [ssh_config.5]
1480 document the possible values for KbdInteractiveDevices;
Damien Millerd450f492006-03-15 11:58:25 +11001481 help/ok dtucker
Damien Millerac73e512006-03-15 11:58:49 +11001482 - jmc@cvs.openbsd.org 2006/02/25 12:28:34
1483 [sshd_config.5]
1484 document the order in which allow/deny directives are processed;
1485 help/ok dtucker
Damien Millerb5282c22006-03-15 11:59:08 +11001486 - jmc@cvs.openbsd.org 2006/02/26 17:17:18
1487 [ssh_config.5]
1488 move PATTERNS to the end of the main body; requested by dtucker
Damien Millere3beba22006-03-15 11:59:25 +11001489 - jmc@cvs.openbsd.org 2006/02/26 18:01:13
1490 [sshd_config.5]
1491 subsection is pointless here;
Damien Miller4aea9742006-03-15 11:59:39 +11001492 - jmc@cvs.openbsd.org 2006/02/26 18:03:10
1493 [ssh_config.5]
1494 comma;
Damien Miller1cf76d92006-03-15 12:01:14 +11001495 - djm@cvs.openbsd.org 2006/02/28 01:10:21
1496 [session.c]
1497 fix logout recording when privilege separation is disabled, analysis and
1498 patch from vinschen at redhat.com; tested by dtucker@ ok deraadt@
1499 NB. ID sync only - patch already in portable
Damien Millerec04f362006-03-15 12:01:34 +11001500 - djm@cvs.openbsd.org 2006/03/04 04:12:58
1501 [serverloop.c]
1502 move a debug() outside of a signal handler; ok markus@ a little while back
Damien Miller2ecb6bd2006-03-15 12:03:53 +11001503 - djm@cvs.openbsd.org 2006/03/12 04:23:07
1504 [ssh.c]
1505 knf nit
Damien Millerb24c2f82006-03-15 12:04:36 +11001506 - djm@cvs.openbsd.org 2006/03/13 08:16:00
1507 [sshd.c]
1508 don't log that we are listening on a socket before the listen() call
1509 actually succeeds, bz #1162 reported by Senthil Kumar; ok dtucker@
Damien Miller314dd4b2006-03-15 12:05:22 +11001510 - dtucker@cvs.openbsd.org 2006/03/13 08:33:00
1511 [packet.c]
1512 Set TCP_NODELAY for all connections not just "interactive" ones. Fixes
1513 poor performance and protocol stalls under some network conditions (mindrot
1514 bugs #556 and #981). Patch originally from markus@, ok djm@
Damien Miller8056a9d2006-03-15 12:05:40 +11001515 - dtucker@cvs.openbsd.org 2006/03/13 08:43:16
1516 [ssh-keygen.c]
1517 Make ssh-keygen handle CR and CRLF line termination when converting IETF
1518 format keys, in adition to vanilla LF. mindrot #1157, tested by Chris
1519 Pepper, ok djm@
Damien Miller306d1182006-03-15 12:05:59 +11001520 - dtucker@cvs.openbsd.org 2006/03/13 10:14:29
1521 [misc.c ssh_config.5 sshd_config.5]
1522 Allow config directives to contain whitespace by surrounding them by double
1523 quotes. mindrot #482, man page help from jmc@, ok djm@
Damien Miller8275fad2006-03-15 12:06:23 +11001524 - dtucker@cvs.openbsd.org 2006/03/13 10:26:52
1525 [authfile.c authfile.h ssh-add.c]
1526 Make ssh-add check file permissions before attempting to load private
1527 key files multiple times; it will fail anyway and this prevents confusing
1528 multiple prompts and warnings. mindrot #1138, ok djm@
Damien Millerde85a282006-03-15 12:06:41 +11001529 - djm@cvs.openbsd.org 2006/03/14 00:15:39
1530 [canohost.c]
1531 log the originating address and not just the name when a reverse
1532 mapping check fails, requested by linux AT linuon.com
Damien Millercc3e8ba2006-03-15 12:06:55 +11001533 - markus@cvs.openbsd.org 2006/03/14 16:32:48
1534 [ssh_config.5 sshd_config.5]
1535 *AliveCountMax applies to protcol v2 only; ok dtucker, djm
Damien Millera63128d2006-03-15 12:08:28 +11001536 - djm@cvs.openbsd.org 2006/03/07 09:07:40
1537 [kex.c kex.h monitor.c myproposal.h ssh-keyscan.c sshconnect2.c sshd.c]
1538 Implement the diffie-hellman-group-exchange-sha256 key exchange method
1539 using the SHA256 code in libc (and wrapper to make it into an OpenSSL
1540 EVP), interop tested against CVS PuTTY
1541 NB. no portability bits committed yet
Damien Milleraf87af12006-03-15 13:02:28 +11001542 - (djm) [configure.ac defines.h kex.c md-sha256.c]
1543 [openbsd-compat/sha2.h openbsd-compat/openbsd-compat.h]
1544 [openbsd-compat/sha2.c] First stab at portability glue for SHA256
1545 KEX support, should work with libc SHA256 support or OpenSSL
1546 EVP_sha256 if present
Damien Millerdcf4ca12006-03-15 13:07:48 +11001547 - (djm) [includes.h] Restore accidentally dropped netinet/in.h
Damien Miller471e9b32006-03-15 13:09:18 +11001548 - (djm) [Makefile.in openbsd-compat/Makefile.in] Add added files
Damien Miller41e364b2006-03-15 13:12:41 +11001549 - (djm) [md-sha256.c configure.ac] md-sha256.c needs sha2.h if present
Damien Millerb3b4ba32006-03-15 13:13:27 +11001550 - (djm) [regress/.cvsignore] Ignore Makefile here
Damien Miller62772522006-03-15 14:01:11 +11001551 - (djm) [loginrec.c] Need stat.h
Damien Millera6238072006-03-15 14:02:01 +11001552 - (djm) [openbsd-compat/sha2.h] Avoid include macro clash with
1553 system sha2.h
Damien Miller3717cda2006-03-15 14:02:36 +11001554 - (djm) [ssh-rand-helper.c] Needs a bunch of headers
Damien Miller42fb0682006-03-15 14:03:06 +11001555 - (djm) [ssh-agent.c] Restore dropped stat.h
Damien Miller34877d22006-03-15 14:36:55 +11001556 - (djm) [openbsd-compat/sha2.h openbsd-compat/sha2.c] Comment out
1557 SHA384, which we don't need and doesn't compile without tweaks
Damien Miller6645e7a2006-03-15 14:42:54 +11001558 - (djm) [auth-pam.c clientloop.c includes.h monitor.c session.c]
1559 [sftp-client.c ssh-keysign.c ssh.c sshconnect.c sshconnect2.c]
1560 [sshd.c openbsd-compat/bsd-misc.c openbsd-compat/bsd-openpty.c]
1561 [openbsd-compat/glob.c openbsd-compat/mktemp.c]
1562 [openbsd-compat/readpassphrase.c] Lots of include fixes for
1563 OpenSolaris
Tim Rice7a4cf232006-03-14 21:04:18 -08001564 - (tim) [includes.h] put sys/stat.h back in to quiet some "macro redefined:"
Tim Rice4b23f7c2006-03-14 22:09:50 -08001565 - (tim) [openssh/sshpty.c openssh/openbsd-compat/port-tun.c] put in some
1566 includes removed from includes.h
Darren Tucker486d95e2006-03-15 21:31:39 +11001567 - (dtucker) [configure.ac] Fix glob test conversion to AC_TRY_COMPILE
Damien Millerb0024912006-03-15 21:48:54 +11001568 - (djm) [includes.h] Put back paths.h, it is needed in defines.h
Darren Tuckerdc6118e2006-03-15 22:25:54 +11001569 - (dtucker) [openbsd-compat/openbsd-compat.h] AIX (at least) needs
1570 sys/ioctl.h for struct winsize.
Darren Tucker8bb9e2c2006-03-15 22:28:17 +11001571 - (dtucker) [configure.ac] login_cap.h requires sys/types.h on NetBSD.
Damien Miller9f67a212006-03-15 11:05:35 +11001572
Darren Tuckerd1450db2006-03-13 19:06:51 +1100157320060313
1574 - (dtucker) [configure.ac] Bug #1171: Don't use printf("%lld", longlong)
1575 since not all platforms support it. Instead, use internal equivalent while
1576 computing LLONG_MIN and LLONG_MAX. Remove special case for alpha-dec-osf*
1577 as it's no longer required. Tested by Bernhard Simon, ok djm@
1578
Darren Tucker18614c22006-03-04 08:50:31 +1100157920060304
1580 - (dtucker) [contrib/cygwin/ssh-host-config] Require use of lastlog as a
1581 file rather than directory, required as Cygwin will be importing lastlog(1).
1582 Also tightens up permissions on the file. Patch from vinschen@redhat.com.
Darren Tucker890909e2006-03-04 08:59:39 +11001583 - (dtucker) [gss-serv-krb5.c] Bug #1166: Correct #ifdefs for gssapi_krb5.h
1584 includes. Patch from gentoo.riverrat at gmail.com.
Darren Tucker18614c22006-03-04 08:50:31 +11001585
Darren Tucker54b75fe2006-02-26 12:31:48 +1100158620060226
1587 - (dtucker) [configure.ac] Bug #1156: QNX apparently needs SSHD_ACQUIRES_CTTY
1588 patch from kraai at ftbfs.org.
1589
159020060223
Darren Tuckera4904f72006-02-23 21:35:30 +11001591 - (dtucker) [sshd_config sshd_config.5] Update UsePAM to reflect current
1592 reality. Pointed out by tryponraj at gmail.com.
1593
Darren Tucker54b75fe2006-02-26 12:31:48 +1100159420060222
Darren Tucker94413cf2006-02-22 22:24:47 +11001595 - (dtucker) [openbsd-compat/openssl-compat.{c,h}] Minor tidy up: only
1596 compile in compat code if required.
1597
Darren Tucker3322e0d2006-02-22 00:00:27 +1100159820060221
1599 - (dtucker) [openbsd-compat/openssl-compat.h] Prevent warning about
1600 redefinition of SSLeay_add_all_algorithms.
1601
Darren Tuckerfabdb6c2006-02-20 20:17:35 +1100160220060220
1603 - (dtucker) [INSTALL configure.ac openbsd-compat/openssl-compat.{c,h}]
1604 Add optional enabling of OpenSSL's (hardware) Engine support, via
1605 configure --with-ssl-engine. Based in part on a diff by michal at
1606 logix.cz.
1607
Darren Tucker4881c372006-02-19 22:50:20 +1100160820060219
1609 - (dtucker) [Makefile.in configure.ac, added openbsd-compat/regress/]
1610 Add first attempt at regress tests for compat library. ok djm@
1611
Tim Ricebf209f52006-02-13 12:46:44 -0800161220060214
1613 - (tim) [buildpkg.sh.in] Make the names consistent.
1614 s/pkg_post_make_install_fixes.sh/pkg-post-make-install-fixes.sh/ OK dtucker@
1615
Darren Tucker84af6152006-02-12 11:59:08 +1100161620060212
1617 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Make loop counter unsigned
1618 to silence compiler warning, from vinschen at redhat.com.
Tim Rice2f993462006-02-11 18:37:48 -08001619 - (tim) [configure.ac] Bug #1149. Disable /etc/default/login check for QNX.
Darren Tucker61633502006-02-12 16:48:56 +11001620 - (dtucker) [README version.h contrib/caldera/openssh.spec
1621 contrib/redhat/openssh.spec contrib/suse/openssh.spec] Bump version
1622 strings to match 4.3p2 release.
Darren Tucker84af6152006-02-12 11:59:08 +11001623
Tim Rice83d2f5f2006-02-07 15:17:44 -0800162420060208
1625 - (tim) [session.c] Logout records were not updated on systems with
1626 post auth privsep disabled due to bug 1086 changes. Analysis and patch
1627 by vinschen at redhat.com. OK tim@, dtucker@.
Darren Tucker988b3fd2006-02-08 22:11:27 +11001628 - (dtucker) [configure.ac] Typo in Ultrix and NewsOS sections (NEED_SETPRGP
Darren Tuckerf35014a2006-03-04 09:00:19 +11001629 -> NEED_SETPGRP), reported by Bernhard Simon. ok tim@
Tim Rice83d2f5f2006-02-07 15:17:44 -08001630
Tim Riceac9b0602006-02-05 11:27:10 -0800163120060206
1632 - (tim) [configure.ac] Remove unnecessary tests for net/if.h and
1633 netinet/in_systm.h. OK dtucker@.
1634
Tim Rice0daad782006-02-04 17:33:55 -0800163520060205
1636 - (tim) [configure.ac] Add AC_REVISION. Add sys/time.h to lastlog.h test
1637 for Solaris. OK dtucker@.
Tim Rice70335a62006-02-04 17:42:58 -08001638 - (tim) [configure.ac] Bug #1149. Changes in QNX section only. Patch by
1639 kraai at ftbfs.org.
Tim Rice0daad782006-02-04 17:33:55 -08001640
Tim Ricefd80ddc2006-02-02 19:11:56 -0800164120060203
1642 - (tim) [configure.ac] test for egrep (AC_PROG_EGREP) before first
1643 AC_CHECK_HEADERS test. Without it, if AC_CHECK_HEADERS is first run
1644 by a platform specific check, builtin standard includes tests will be
1645 skipped on the other platforms.
1646 Analysis and suggestion by vinschen at redhat.com, patch by dtucker@.
1647 OK tim@, djm@.
1648
Darren Tuckercc7c2122006-02-02 18:44:19 +1100164920060202
1650 - (dtucker) [configure.ac] Bug #1148: Fix "crippled AES" test so that it
1651 works with picky compilers. Patch from alex.kiernan at thus.net.
1652
Damien Millere682cb02006-02-01 11:21:01 +1100165320060201
1654 - (djm) [regress/test-exec.sh] Try 'logname' as well as 'whoami' to
1655 determine the user's login name - needed for regress tests on Solaris
1656 10 and OpenSolaris
Damien Miller8bbdf902006-02-01 22:05:25 +11001657 - (djm) OpenBSD CVS Sync
1658 - jmc@cvs.openbsd.org 2006/02/01 09:06:50
1659 [sshd.8]
1660 - merge sections on protocols 1 and 2 into a single section
1661 - remove configuration file section
1662 ok markus
Damien Miller2ac05772006-02-01 22:05:42 +11001663 - jmc@cvs.openbsd.org 2006/02/01 09:11:41
1664 [sshd.8]
1665 small tweak;
Damien Miller0d689562006-02-01 22:10:47 +11001666 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
1667 [contrib/suse/openssh.spec] Update versions ahead of release
Damien Millerc79824b2006-02-01 22:27:31 +11001668 - markus@cvs.openbsd.org 2006/02/01 11:27:22
1669 [version.h]
1670 openssh 4.3
Damien Millerbfd52192006-02-01 22:32:17 +11001671 - (djm) Release OpenSSH 4.3p1
Damien Millere682cb02006-02-01 11:21:01 +11001672
Damien Millerddfddf12006-01-31 21:39:03 +1100167320060131
1674 - (djm) OpenBSD CVS Sync
1675 - jmc@cvs.openbsd.org 2006/01/20 11:21:45
1676 [ssh_config.5]
1677 - word change, agreed w/ markus
1678 - consistency fixes
Damien Miller99cc4a82006-01-31 21:45:53 +11001679 - jmc@cvs.openbsd.org 2006/01/25 09:04:34
1680 [sshd.8]
1681 move the options description up the page, and a few additional tweaks
1682 whilst in here;
1683 ok markus
Damien Miller7602cba2006-01-31 21:46:20 +11001684 - jmc@cvs.openbsd.org 2006/01/25 09:07:22
1685 [sshd.8]
1686 move subsections to full sections;
Damien Millerbbc59092006-01-31 21:46:51 +11001687 - jmc@cvs.openbsd.org 2006/01/26 08:47:56
1688 [ssh.1]
1689 add a section on verifying host keys in dns;
1690 written with a lot of help from jakob;
1691 feedback dtucker/markus;
1692 ok markus
Damien Millere204f6a2006-01-31 21:47:15 +11001693 - reyk@cvs.openbsd.org 2006/01/30 12:22:22
1694 [channels.c]
1695 mark channel as write failed or dead instead of read failed on error
1696 of the channel output filter.
1697 ok markus@
Damien Millerb5dd55c2006-01-31 21:47:58 +11001698 - jmc@cvs.openbsd.org 2006/01/30 13:37:49
1699 [ssh.1]
1700 remove an incorrect sentence;
1701 reported by roumen petrov;
1702 ok djm markus
Damien Miller3eec6b72006-01-31 21:49:27 +11001703 - djm@cvs.openbsd.org 2006/01/31 10:19:02
1704 [misc.c misc.h scp.c sftp.c]
1705 fix local arbitrary command execution vulnerability on local/local and
1706 remote/remote copies (CVE-2006-0225, bz #1094), patch by
1707 t8m AT centrum.cz, polished by dtucker@ and myself; ok markus@
Damien Miller923f1ce2006-01-31 22:11:37 +11001708 - djm@cvs.openbsd.org 2006/01/31 10:35:43
1709 [scp.c]
1710 "scp a b c" shouldn't clobber "c" when it is not a directory, report and
1711 fix from biorn@; ok markus@
Damien Millerc34940c2006-01-31 21:57:27 +11001712 - (djm) Sync regress tests to OpenBSD:
1713 - dtucker@cvs.openbsd.org 2005/03/10 10:20:39
1714 [regress/forwarding.sh]
1715 Regress test for ClearAllForwardings (bz #994); ok markus@
Damien Miller76be6b82006-01-31 21:59:01 +11001716 - dtucker@cvs.openbsd.org 2005/04/25 09:54:09
1717 [regress/multiplex.sh]
1718 Don't call cleanup in multiplex as test-exec will cleanup anyway
1719 found by tim@, ok djm@
1720 NB. ID sync only, we already had this
1721 - djm@cvs.openbsd.org 2005/05/20 23:14:15
1722 [regress/test-exec.sh]
1723 force addressfamily=inet for tests, unbreaking dynamic-forward regress for
1724 recently committed nc SOCKS5 changes
Damien Millerec7b2f12006-01-31 21:59:35 +11001725 - djm@cvs.openbsd.org 2005/05/24 04:10:54
Damien Miller10c5fa72006-01-31 22:01:42 +11001726 [regress/try-ciphers.sh]
Damien Millerec7b2f12006-01-31 21:59:35 +11001727 oops, new arcfour modes here too
Damien Miller10c5fa72006-01-31 22:01:42 +11001728 - markus@cvs.openbsd.org 2005/06/30 11:02:37
1729 [regress/scp.sh]
1730 allow SUDO=sudo; from Alexander Bluhm
Damien Miller27a0dfa2006-01-31 22:02:16 +11001731 - grunk@cvs.openbsd.org 2005/11/14 21:25:56
1732 [regress/agent-getpeereid.sh]
1733 all other scripts in this dir use $SUDO, not 'sudo', so pull this even
1734 ok markus@
Damien Miller15a815b2006-01-31 22:03:11 +11001735 - dtucker@cvs.openbsd.org 2005/12/14 04:36:39
1736 [regress/scp-ssh-wrapper.sh]
1737 Fix assumption about how many args scp will pass; ok djm@
1738 NB. ID sync only, we already had this
Damien Miller0b996462006-01-31 22:05:23 +11001739 - djm@cvs.openbsd.org 2006/01/27 06:49:21
1740 [scp.sh]
1741 regress test for local to local scp copies; ok dtucker@
Damien Miller7410ad72006-01-31 22:06:14 +11001742 - djm@cvs.openbsd.org 2006/01/31 10:23:23
1743 [scp.sh]
1744 regression test for CVE-2006-0225 written by dtucker@
Damien Miller50c6eed2006-01-31 22:06:41 +11001745 - djm@cvs.openbsd.org 2006/01/31 10:36:33
1746 [scp.sh]
1747 regress test for "scp a b c" where "c" is not a directory
Damien Millerddfddf12006-01-31 21:39:03 +11001748
Darren Tuckerfbea7642006-01-30 00:22:39 +1100174920060129
1750 - (dtucker) [configure.ac opensshd.init.in] Bug #1144: Use /bin/sh for the
1751 opensshd.init script interpretter if /sbin/sh does not exist. ok tim@
1752
Darren Tucker94299ec2006-01-20 11:30:14 +1100175320060120
1754 - (dtucker) OpenBSD CVS Sync
1755 - jmc@cvs.openbsd.org 2006/01/15 17:37:05
1756 [ssh.1]
1757 correction from deraadt
Darren Tucker248dd132006-01-20 11:30:58 +11001758 - jmc@cvs.openbsd.org 2006/01/18 10:53:29
1759 [ssh.1]
1760 add a section on ssh-based vpn, based on reyk's README.tun;
Darren Tucker62388b22006-01-20 11:31:47 +11001761 - dtucker@cvs.openbsd.org 2006/01/20 00:14:55
1762 [scp.1 ssh.1 ssh_config.5 sftp.1]
1763 Document RekeyLimit. Based on patch from jan.iven at cern.ch from mindrot
1764 #1056 with feedback from jmc, djm and markus; ok jmc@ djm@
Darren Tucker94299ec2006-01-20 11:30:14 +11001765
Damien Millere87eb4c2006-01-14 10:08:36 +1100176620060114
1767 - (djm) OpenBSD CVS Sync
1768 - jmc@cvs.openbsd.org 2006/01/06 13:27:32
1769 [ssh.1]
1770 weed out some duplicate info in the known_hosts FILES entries;
1771 ok djm
Damien Miller7e76e1f2006-01-14 10:08:57 +11001772 - jmc@cvs.openbsd.org 2006/01/06 13:29:10
1773 [ssh.1]
1774 final round of whacking FILES for duplicate info, and some consistency
1775 fixes;
1776 ok djm
Damien Millerf3177182006-01-14 10:09:13 +11001777 - jmc@cvs.openbsd.org 2006/01/12 14:44:12
1778 [ssh.1]
1779 split sections on tcp and x11 forwarding into two sections.
1780 add an example in the tcp section, based on sth i wrote for ssh faq;
1781 help + ok: djm markus dtucker
Damien Miller8bfaf932006-01-14 10:09:30 +11001782 - jmc@cvs.openbsd.org 2006/01/12 18:48:48
1783 [ssh.1]
1784 refer to `TCP' rather than `TCP/IP' in the context of connection
1785 forwarding;
1786 ok markus
Damien Miller7c24b812006-01-14 10:09:56 +11001787 - jmc@cvs.openbsd.org 2006/01/12 22:20:00
1788 [sshd.8]
1789 refer to TCP forwarding, rather than TCP/IP forwarding;
Damien Millere9d001e2006-01-14 10:10:17 +11001790 - jmc@cvs.openbsd.org 2006/01/12 22:26:02
1791 [ssh_config.5]
1792 refer to TCP forwarding, rather than TCP/IP forwarding;
Damien Miller4a8dc9e2006-01-14 10:10:31 +11001793 - jmc@cvs.openbsd.org 2006/01/12 22:34:12
1794 [ssh.1]
1795 back out a sentence - AUTHENTICATION already documents this;
Damien Millere87eb4c2006-01-14 10:08:36 +11001796
Darren Tuckere78c6ce2006-01-10 00:02:44 +1100179720060109
1798 - (dtucker) [contrib/cygwin/ssh-host-config] Make sshd service depend on
1799 tcpip service so it's always started after IP is up. Patch from
1800 vinschen at redhat.com.
1801
Damien Miller7655f5c2006-01-06 14:48:18 +1100180220060106
1803 - (djm) OpenBSD CVS Sync
1804 - jmc@cvs.openbsd.org 2006/01/03 16:31:10
1805 [ssh.1]
1806 move FILES to a -compact list, and make each files an item in that list.
1807 this avoids nastly line wrap when we have long pathnames, and treats
1808 each file as a separate item;
1809 remove the .Pa too, since it is useless.
Damien Miller6aa22902006-01-06 14:48:34 +11001810 - jmc@cvs.openbsd.org 2006/01/03 16:35:30
1811 [ssh.1]
1812 use a larger width for the ENVIRONMENT list;
Damien Millerfb8ea742006-01-06 14:48:52 +11001813 - jmc@cvs.openbsd.org 2006/01/03 16:52:36
1814 [ssh.1]
1815 put FILES in some sort of order: sort by pathname
Damien Miller4c102ee2006-01-06 14:49:17 +11001816 - jmc@cvs.openbsd.org 2006/01/03 16:55:18
1817 [ssh.1]
1818 tweak the description of ~/.ssh/environment
Damien Miller1bcdb502006-01-06 14:49:38 +11001819 - jmc@cvs.openbsd.org 2006/01/04 18:42:46
1820 [ssh.1]
1821 chop out some duplication in the .{r,s}hosts/{h,sh}osts.equiv FILES
1822 entries;
1823 ok markus
Damien Millera246d3b2006-01-06 14:49:54 +11001824 - jmc@cvs.openbsd.org 2006/01/04 18:45:01
1825 [ssh.1]
1826 remove .Xr's to rsh(1) and telnet(1): they are hardly needed;
Damien Miller128a0f12006-01-06 14:50:11 +11001827 - jmc@cvs.openbsd.org 2006/01/04 19:40:24
1828 [ssh.1]
1829 +.Xr ssh-keyscan 1 ,
Damien Millerc27f83a2006-01-06 14:50:26 +11001830 - jmc@cvs.openbsd.org 2006/01/04 19:50:09
1831 [ssh.1]
1832 -.Xr gzip 1 ,
Damien Miller72c5b7d2006-01-06 14:50:44 +11001833 - djm@cvs.openbsd.org 2006/01/05 23:43:53
1834 [misc.c]
1835 check that stdio file descriptors are actually closed before clobbering
1836 them in sanitise_stdfd(). problems occurred when a lower numbered fd was
1837 closed, but higher ones weren't. spotted by, and patch tested by
1838 Frédéric Olivié
Damien Miller7655f5c2006-01-06 14:48:18 +11001839
Damien Millerb7977702006-01-03 18:47:31 +1100184020060103
Damien Millera9694372006-01-04 07:27:50 +11001841 - (djm) [channels.c] clean up harmless merge error, from reyk@
1842
184320060103
Damien Millerb7977702006-01-03 18:47:31 +11001844 - (djm) OpenBSD CVS Sync
1845 - jmc@cvs.openbsd.org 2006/01/02 17:09:49
1846 [ssh_config.5 sshd_config.5]
1847 some corrections from michael knudsen;
1848
Damien Miller90cd1c52006-01-02 20:23:18 +1100184920060102
1850 - (djm) [README.tun] Add README.tun, missed during sync of tun(4) support
Damien Miller48c94ab2006-01-02 23:38:00 +11001851 - (djm) OpenBSD CVS Sync
1852 - jmc@cvs.openbsd.org 2005/12/31 10:46:17
1853 [ssh.1]
1854 merge the "LOGIN SESSION AND REMOTE EXECUTION" and "SERVER
1855 AUTHENTICATION" sections into "AUTHENTICATION";
1856 some rewording done to make the text read better, plus some
1857 improvements from djm;
1858 ok djm
Damien Miller14af93e2006-01-02 23:38:21 +11001859 - jmc@cvs.openbsd.org 2005/12/31 13:44:04
1860 [ssh.1]
1861 clean up ENVIRONMENT a little;
Damien Miller1164c292006-01-02 23:38:37 +11001862 - jmc@cvs.openbsd.org 2005/12/31 13:45:19
1863 [ssh.1]
1864 .Nm does not require an argument;
Damien Miller3beb8522006-01-02 23:40:10 +11001865 - stevesk@cvs.openbsd.org 2006/01/01 08:59:27
1866 [includes.h misc.c]
1867 move <net/if.h>; ok djm@
Damien Millera210d522006-01-02 23:40:30 +11001868 - stevesk@cvs.openbsd.org 2006/01/01 10:08:48
1869 [misc.c]
1870 no trailing "\n" for debug()
Damien Miller54446182006-01-02 23:40:50 +11001871 - djm@cvs.openbsd.org 2006/01/02 01:20:31
1872 [sftp-client.c sftp-common.h sftp-server.c]
1873 use a common max. packet length, no binary change
Damien Millera1d9a182006-01-02 23:41:21 +11001874 - reyk@cvs.openbsd.org 2006/01/02 07:53:44
1875 [misc.c]
1876 clarify tun(4) opening - set the mode and bring the interface up. also
1877 (re)sets the tun(4) layer 2 LINK0 flag for existing tunnel interfaces.
1878 suggested and ok by djm@
Damien Millera07a5912006-01-02 23:41:37 +11001879 - jmc@cvs.openbsd.org 2006/01/02 12:31:06
1880 [ssh.1]
1881 start to cut some duplicate info from FILES;
1882 help/ok djm
Damien Miller90cd1c52006-01-02 20:23:18 +11001883
Damien Miller2dcddbf2006-01-01 19:47:05 +1100188420060101
1885 - (djm) [Makefile.in configure.ac includes.h misc.c]
1886 [openbsd-compat/port-tun.c openbsd-compat/port-tun.h] Add support
1887 for tunnel forwarding for FreeBSD and NetBSD. NetBSD's support is
1888 limited to IPv4 tunnels only, and most versions don't support the
1889 tap(4) device at all.
Damien Millerbd4e4102006-01-01 21:03:30 +11001890 - (djm) [configure.ac] Fix linux/if_tun.h test
Damien Miller5df52e82006-01-01 21:15:50 +11001891 - (djm) [openbsd-compat/port-tun.c] Linux needs linux/if.h too
Damien Miller2dcddbf2006-01-01 19:47:05 +11001892
Tim Rice8db70e22005-12-28 14:28:08 -0800189320051229
Damien Miller5eb137c2005-12-31 16:19:53 +11001894 - (djm) OpenBSD CVS Sync
1895 - stevesk@cvs.openbsd.org 2005/12/28 22:46:06
1896 [canohost.c channels.c clientloop.c]
1897 use 'break-in' for consistency; ok deraadt@ ok and input jmc@
Damien Miller077b2382005-12-31 16:22:32 +11001898 - reyk@cvs.openbsd.org 2005/12/30 15:56:37
1899 [channels.c channels.h clientloop.c]
1900 add channel output filter interface.
1901 ok djm@, suggested by markus@
Damien Miller134eb812005-12-31 16:22:55 +11001902 - jmc@cvs.openbsd.org 2005/12/30 16:59:00
1903 [sftp.1]
1904 do not suggest that interactive authentication will work
1905 with the -b flag;
1906 based on a diff from john l. scarfone;
1907 ok djm
Damien Miller88b25522005-12-31 16:23:15 +11001908 - stevesk@cvs.openbsd.org 2005/12/31 01:38:45
1909 [ssh.1]
1910 document -MM; ok djm@
Damien Miller598bbc22005-12-31 16:33:36 +11001911 - (djm) [openbsd-compat/port-tun.c openbsd-compat/port-tun.h configure.ac]
1912 [serverloop.c ssh.c openbsd-compat/Makefile.in]
1913 [openbsd-compat/openbsd-compat.h] Implement tun(4) forwarding
1914 compatability support for Linux, diff from reyk@
Damien Miller89e03ba2005-12-31 16:42:03 +11001915 - (djm) [configure.ac] Disable Linux tun(4) compat code if linux/tun.h does
1916 not exist
Damien Millerc4bcc912005-12-31 17:05:58 +11001917 - (djm) [configure.ac] oops, make that linux/if_tun.h
Damien Miller5eb137c2005-12-31 16:19:53 +11001918
191920051229
Tim Rice8db70e22005-12-28 14:28:08 -08001920 - (tim) [buildpkg.sh.in] grep for $SSHDUID instead of $SSHDGID on /etc/passwd
1921
Damien Millerc93a8132005-12-24 14:52:13 +1100192220051224
1923 - (djm) OpenBSD CVS Sync
1924 - jmc@cvs.openbsd.org 2005/12/20 21:59:43
1925 [ssh.1]
1926 merge the sections on protocols 1 and 2 into one section on
1927 authentication;
1928 feedback djm dtucker
1929 ok deraadt markus dtucker
Damien Miller52d20612005-12-24 14:52:36 +11001930 - jmc@cvs.openbsd.org 2005/12/20 22:02:50
1931 [ssh.1]
1932 .Ss -> .Sh: subsections have not made this page more readable
Damien Millere9b333a2005-12-24 14:53:04 +11001933 - jmc@cvs.openbsd.org 2005/12/20 22:09:41
1934 [ssh.1]
1935 move info on ssh return values and config files up into the main
1936 description;
Damien Miller329cb012005-12-24 14:53:23 +11001937 - jmc@cvs.openbsd.org 2005/12/21 11:48:16
1938 [ssh.1]
1939 -L and -R descriptions are now above, not below, ~C description;
Damien Miller9a765b22005-12-24 14:53:44 +11001940 - jmc@cvs.openbsd.org 2005/12/21 11:57:25
1941 [ssh.1]
1942 options now described `above', rather than `later';
Damien Miller1530f242005-12-24 14:54:03 +11001943 - jmc@cvs.openbsd.org 2005/12/21 12:53:31
1944 [ssh.1]
1945 -Y does X11 forwarding too;
1946 ok markus
Damien Millerd7f308f2005-12-24 14:55:16 +11001947 - stevesk@cvs.openbsd.org 2005/12/21 22:44:26
1948 [sshd.8]
1949 clarify precedence of -p, Port, ListenAddress; ok and help jmc@
Damien Millere8cd7412005-12-24 14:55:47 +11001950 - jmc@cvs.openbsd.org 2005/12/22 10:31:40
1951 [ssh_config.5]
1952 put the description of "UsePrivilegedPort" in the correct place;
Damien Millercf1e3422005-12-24 14:56:04 +11001953 - jmc@cvs.openbsd.org 2005/12/22 11:23:42
1954 [ssh.1]
1955 expand the description of -w somewhat;
1956 help/ok reyk
Damien Miller2142ba02005-12-24 14:56:29 +11001957 - jmc@cvs.openbsd.org 2005/12/23 14:55:53
1958 [ssh.1]
1959 - sync the description of -e w/ synopsis
1960 - simplify the description of -I
1961 - note that -I is only available if support compiled in, and that it
1962 isn't by default
1963 feedback/ok djm@
Damien Miller35978212005-12-24 14:56:47 +11001964 - jmc@cvs.openbsd.org 2005/12/23 23:46:23
1965 [ssh.1]
1966 less mark up for -c;
Damien Miller7bff1a92005-12-24 14:59:12 +11001967 - djm@cvs.openbsd.org 2005/12/24 02:27:41
1968 [session.c sshd.c]
1969 eliminate some code duplicated in privsep and non-privsep paths, and
1970 explicitly clear SIGALRM handler; "groovy" deraadt@
Damien Millerc93a8132005-12-24 14:52:13 +11001971
Darren Tucker0d0e8f02005-12-20 16:08:42 +1100197220051220
1973 - (dtucker) OpenBSD CVS Sync
1974 - reyk@cvs.openbsd.org 2005/12/13 15:03:02
1975 [serverloop.c]
1976 if forced_tun_device is not set, it is -1 and not SSH_TUNID_ANY
Darren Tuckerd3877b92005-12-20 16:09:36 +11001977 - jmc@cvs.openbsd.org 2005/12/16 18:07:08
1978 [ssh.1]
1979 move the option descriptions up the page: start of a restructure;
1980 ok markus deraadt
Darren Tuckerb18c8672005-12-20 16:10:09 +11001981 - jmc@cvs.openbsd.org 2005/12/16 18:08:53
1982 [ssh.1]
1983 simplify a sentence;
Darren Tucker56529242005-12-20 16:12:24 +11001984 - jmc@cvs.openbsd.org 2005/12/16 18:12:22
1985 [ssh.1]
1986 make the description of -c a little nicer;
Darren Tucker5434cfe2005-12-20 16:11:35 +11001987 - jmc@cvs.openbsd.org 2005/12/16 18:14:40
1988 [ssh.1]
1989 signpost the protocol sections;
Darren Tucker63551872005-12-20 16:14:15 +11001990 - stevesk@cvs.openbsd.org 2005/12/17 21:13:05
1991 [ssh_config.5 session.c]
1992 spelling: fowarding, fowarded
Darren Tucker7eba8202005-12-20 16:15:14 +11001993 - stevesk@cvs.openbsd.org 2005/12/17 21:36:42
1994 [ssh_config.5]
1995 spelling: intented -> intended
Darren Tuckere9a9b712005-12-20 16:15:51 +11001996 - dtucker@cvs.openbsd.org 2005/12/20 04:41:07
1997 [ssh.c]
1998 exit(255) on error to match description in ssh(1); bz #1137; ok deraadt@
Darren Tucker0d0e8f02005-12-20 16:08:42 +11001999
Darren Tucker129d0bb2005-12-19 17:40:40 +1100200020051219
2001 - (dtucker) [cipher-aes.c cipher-ctr.c cipher.c configure.ac
2002 openbsd-compat/openssl-compat.h] Check for and work around broken AES
2003 ciphers >128bit on (some) Solaris 10 systems. ok djm@
2004
Darren Tucker98cfc4c2005-12-17 22:04:08 +1100200520051217
2006 - (dtucker) [defines.h] HP-UX system headers define "YES" and "NO" which
2007 scp.c also uses, so undef them here.
Darren Tuckerd40c66c2005-12-17 22:32:03 +11002008 - (dtucker) [configure.ac openbsd-compat/bsd-snprintf.c] Bug #1133: Our
2009 snprintf replacement can have a conflicting declaration in HP-UX's system
2010 headers (const vs. no const) so we now check for and work around it. Patch
2011 from the dynamic duo of David Leonard and Ted Percival.
Darren Tucker98cfc4c2005-12-17 22:04:08 +11002012
Darren Tucker31543582005-12-14 15:39:20 +1100201320051214
2014 - (dtucker) OpenBSD CVS Sync (regress/)
2015 - dtucker@cvs.openbsd.org 2005/12/30 04:36:39
2016 [regress/scp-ssh-wrapper.sh]
2017 Fix assumption about how many args scp will pass; ok djm@
2018
Damien Millerc94ebbc2005-12-13 19:25:21 +1100201920051213
2020 - (djm) OpenBSD CVS Sync
2021 - jmc@cvs.openbsd.org 2005/11/30 11:18:27
2022 [ssh.1]
2023 timezone -> time zone
Damien Miller6dbdb6a2005-12-13 19:25:43 +11002024 - jmc@cvs.openbsd.org 2005/11/30 11:45:20
2025 [ssh.1]
2026 avoid ambiguities in describing TZ;
2027 ok djm@
Damien Millerd27b9472005-12-13 19:29:02 +11002028 - reyk@cvs.openbsd.org 2005/12/06 22:38:28
2029 [auth-options.c auth-options.h channels.c channels.h clientloop.c]
2030 [misc.c misc.h readconf.c readconf.h scp.c servconf.c servconf.h]
2031 [serverloop.c sftp.c ssh.1 ssh.c ssh_config ssh_config.5 sshconnect.c]
2032 [sshconnect.h sshd.8 sshd_config sshd_config.5]
2033 Add support for tun(4) forwarding over OpenSSH, based on an idea and
2034 initial channel code bits by markus@. This is a simple and easy way to
2035 use OpenSSH for ad hoc virtual private network connections, e.g.
2036 administrative tunnels or secure wireless access. It's based on a new
2037 ssh channel and works similar to the existing TCP forwarding support,
2038 except that it depends on the tun(4) network interface on both ends of
2039 the connection for layer 2 or layer 3 tunneling. This diff also adds
2040 support for LocalCommand in the ssh(1) client.
Damien Millerd27b9472005-12-13 19:29:02 +11002041 ok djm@, markus@, jmc@ (manpages), tested and discussed with others
Damien Milleraeb31d62005-12-13 19:29:36 +11002042 - djm@cvs.openbsd.org 2005/12/07 03:52:22
2043 [clientloop.c]
2044 reyk forgot to compile with -Werror (missing header)
Damien Millerf0c8c152005-12-13 19:29:58 +11002045 - jmc@cvs.openbsd.org 2005/12/07 10:52:13
2046 [ssh.1]
2047 - avoid line split in SYNOPSIS
2048 - add args to -w
2049 - kill trailing whitespace
Damien Miller4b2319f2005-12-13 19:30:27 +11002050 - jmc@cvs.openbsd.org 2005/12/08 14:59:44
2051 [ssh.1 ssh_config.5]
2052 make `!command' a little clearer;
2053 ok reyk
Damien Miller957d4e42005-12-13 19:30:45 +11002054 - jmc@cvs.openbsd.org 2005/12/08 15:06:29
2055 [ssh_config.5]
2056 keep options in order;
Damien Miller7b58e802005-12-13 19:33:19 +11002057 - reyk@cvs.openbsd.org 2005/12/08 18:34:11
2058 [auth-options.c includes.h misc.c misc.h readconf.c servconf.c]
2059 [serverloop.c ssh.c ssh_config.5 sshd_config.5 configure.ac]
2060 two changes to the new ssh tunnel support. this breaks compatibility
2061 with the initial commit but is required for a portable approach.
2062 - make the tunnel id u_int and platform friendly, use predefined types.
2063 - support configuration of layer 2 (ethernet) or layer 3
2064 (point-to-point, default) modes. configuration is done using the
2065 Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and
2066 restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option
2067 in sshd_config(5).
2068 ok djm@, man page bits by jmc@
Damien Miller7746c392005-12-13 19:33:37 +11002069 - jmc@cvs.openbsd.org 2005/12/08 21:37:50
2070 [ssh_config.5]
2071 new sentence, new line;
Damien Millerd47c62a2005-12-13 19:33:57 +11002072 - markus@cvs.openbsd.org 2005/12/12 13:46:18
2073 [channels.c channels.h session.c]
2074 make sure protocol messages for internal channels are ignored.
2075 allow adjust messages for non-open channels; with and ok djm@
Damien Miller62a31c92005-12-13 20:44:13 +11002076 - (djm) [misc.c] Disable tunnel code for non-OpenBSD (for now), enable
2077 again by providing a sys_tun_open() function for your platform and
2078 setting the CUSTOM_SYS_TUN_OPEN define. More work is required to match
2079 OpenBSD's tunnel protocol, which prepends the address family to the
2080 packet
Damien Millerc94ebbc2005-12-13 19:25:21 +11002081
Damien Miller7677be52005-12-01 12:51:59 +1100208220051201
2083 - (djm) [envpass.sh] Remove regress script that was accidentally committed
2084 in top level directory and not noticed for over a year :)
2085
Tim Rice660c3402005-11-28 17:45:32 -0800208620051129
2087 - (tim) [ssh-keygen.c] Move DSA length test after setting default when
2088 bits == 0.
Darren Tucker3af2ac52005-11-29 13:10:24 +11002089 - (dtucker) OpenBSD CVS Sync
2090 - dtucker@cvs.openbsd.org 2005/11/29 02:04:55
2091 [ssh-keygen.c]
2092 Populate default key sizes before checking them; from & ok tim@
Tim Rice46259d82005-11-28 18:40:34 -08002093 - (tim) [configure.ac sshd.8] Enable locked account check (a "*LK*" string)
2094 for UnixWare.
Tim Rice660c3402005-11-28 17:45:32 -08002095
Darren Tuckerb1a87772005-11-28 16:41:03 +1100209620051128
2097 - (dtucker) [regress/yes-head.sh] Work around breakage caused by some
2098 versions of GNU head. Based on patch from zappaman at buraphalinux.org
Darren Tuckerac0c8a52005-11-28 22:28:59 +11002099 - (dtucker) [includes.h] Bug #1122: __USE_GNU is a glibc internal macro, use
2100 _GNU_SOURCE instead. Patch from t8m at centrum.cz.
Darren Tucker9f647332005-11-28 16:41:46 +11002101 - (dtucker) OpenBSD CVS Sync
2102 - dtucker@cvs.openbsd.org 2005/11/28 05:16:53
2103 [ssh-keygen.1 ssh-keygen.c]
2104 Enforce DSA key length of exactly 1024 bits to comply with FIPS-186-2,
2105 increase minumum RSA key size to 768 bits and update man page to reflect
2106 these. Patch originally bz#1119 (senthilkumar_sen at hotpop.com),
2107 ok djm@, grudging ok deraadt@.
Darren Tucker3a4634f2005-11-28 17:05:40 +11002108 - dtucker@cvs.openbsd.org 2005/11/28 06:02:56
2109 [ssh-agent.1]
2110 Update agent socket path templates to reflect reality, correct xref for
2111 time formats. bz#1121, patch from openssh at roumenpetrov.info, ok djm@
Darren Tuckerb1a87772005-11-28 16:41:03 +11002112
Darren Tucker91d25a02005-11-26 22:24:09 +1100211320051126
2114 - (dtucker) [configure.ac] Bug #1126: AIX 5.2 and 5.3 (and presumably newer,
2115 when they're available) need the real UID set otherwise pam_chauthtok will
2116 set ADMCHG after changing the password, forcing the user to change it
2117 again immediately.
2118
Darren Tucker58e298d2005-11-25 13:14:58 +1100211920051125
2120 - (dtucker) [configure.ac] Apply tim's fix for older systems where the
2121 resolver state in resolv.h is "state" not "__res_state". With slight
2122 modification by me to also work on old AIXes. ok djm@
Darren Tuckere0be3042005-11-25 14:44:55 +11002123 - (dtucker) [progressmeter.c scp.c sftp-server.c] Use correct casts for
2124 snprintf formats, fixes warnings on some 64 bit platforms. Patch from
2125 shaw at vranix.com, ok djm@
Darren Tucker58e298d2005-11-25 13:14:58 +11002126
212720051124
Damien Miller57f39152005-11-24 19:58:19 +11002128 - (djm) [configure.ac openbsd-compat/Makefile.in openbsd-compat/bsd-asprintf.c
2129 openbsd-compat/bsd-snprintf.c openbsd-compat/openbsd-compat.h] Add an
2130 asprintf() implementation, after syncing our {v,}snprintf() implementation
2131 with some extra fixes from Samba's version. With help and debugging from
2132 dtucker and tim; ok dtucker@
Darren Tucker79d09fa2005-11-24 22:34:54 +11002133 - (dtucker) [configure.ac] Fix typos in comments and AC_SEARCH_LIB argument
2134 order in Reliant Unix block. Patch from johane at lysator.liu.se.
Darren Tuckerfaec5ca2005-11-24 23:18:54 +11002135 - (dtucker) [regress/test-exec.sh] Use 1024 bit keys since we generate so
2136 many and use them only once. Speeds up testing on older/slower hardware.
Damien Miller57f39152005-11-24 19:58:19 +11002137
213820051122
Darren Tuckerb736d8d2005-11-22 19:37:08 +11002139 - (dtucker) OpenBSD CVS Sync
2140 - deraadt@cvs.openbsd.org 2005/11/12 18:37:59
2141 [ssh-add.c]
2142 space
Darren Tucker33f86bc2005-11-22 19:38:06 +11002143 - deraadt@cvs.openbsd.org 2005/11/12 18:38:15
2144 [scp.c]
2145 avoid close(-1), as in rcp; ok cloder
Darren Tuckere8400da2005-11-22 19:41:33 +11002146 - millert@cvs.openbsd.org 2005/11/15 11:59:54
2147 [includes.h]
2148 Include sys/queue.h explicitly instead of assuming some other header
2149 will pull it in. At the moment it gets pulled in by sys/select.h
2150 (which ssh has no business including) via event.h. OK markus@
2151 (ID sync only in -portable)
Darren Tuckerf4732f62005-11-22 19:42:42 +11002152 - dtucker@cvs.openbsd.org 2005/11/21 09:42:10
2153 [auth-krb5.c]
2154 Perform Kerberos calls even for invalid users to prevent leaking
2155 information about account validity. bz #975, patch originally from
2156 Senthil Kumar, sanity checked by Simon Wilkinson, tested by djm@, biorn@,
2157 ok markus@
Darren Tucker593bae72005-11-22 19:43:26 +11002158 - dtucker@cvs.openbsd.org 2005/11/22 03:36:03
2159 [hostfile.c]
2160 Correct format/arguments to debug call; spotted by shaw at vranix.com
2161 ok djm@
Darren Tuckerefc17472005-11-22 19:55:13 +11002162 - (dtucker) [loginrec.c] Add casts to prevent compiler warnings, patch
2163 from shaw at vranix.com.
Darren Tuckerb736d8d2005-11-22 19:37:08 +11002164
Darren Tucker41236362005-11-20 14:09:59 +1100216520051120
2166 - (dtucker) [openbsd-compat/openssl-compat.h] Add comment explaining what
2167 is going on.
2168
Darren Tucker16fd99c2005-11-12 14:06:29 +1100216920051112
2170 - (dtucker) [openbsd-compat/getrrsetbyname.c] Restore Portable-specific
2171 ifdef lost during sync. Spotted by tim@.
Darren Tucker5a0bdf72005-11-12 14:28:05 +11002172 - (dtucker) [openbsd-compat/{realpath.c,stroll.c,rresvport.c}] $OpenBSD tag.
Darren Tucker3f9545e2005-11-12 15:20:52 +11002173 - (dtucker) [configure.ac] Use "$AWK" instead of "awk" in gcc version test.
Darren Tucker5bfe1682005-11-12 18:42:36 +11002174 - (dtucker) [configure.ac] Remove duplicate utimes() check. ok djm@
Darren Tuckercb6ecde2005-11-12 21:30:07 +11002175 - (dtucker) [regress/reconfigure.sh] Fix potential race in the reconfigure
2176 test: if sshd takes too long to reconfigure the subsequent connection will
2177 fail. Zap pidfile before HUPing sshd which will rewrite it when it's ready.
Darren Tucker16fd99c2005-11-12 14:06:29 +11002178
Darren Tuckerb8c89d12005-11-10 10:10:10 +1100217920051110
Darren Tucker063ba742005-11-10 10:38:45 +11002180 - (dtucker) [openbsd-compat/setenv.c] Merge changes for __findenv from
Darren Tuckerb8c89d12005-11-10 10:10:10 +11002181 OpenBSD getenv.c revs 1.4 - 1.8 (ANSIfication of arguments, removal of
2182 "register").
Darren Tucker063ba742005-11-10 10:38:45 +11002183 - (dtucker) [openbsd-compat/setenv.c] Make __findenv static, remove
Darren Tucker32b53102005-11-10 10:13:06 +11002184 unnecessary prototype.
Darren Tucker063ba742005-11-10 10:38:45 +11002185 - (dtucker) [openbsd-compat/setenv.c] Sync changes from OpenBSD setenv.c
2186 revs 1.7 - 1.9.
Darren Tucker618db972005-11-10 14:43:11 +11002187 - (dtucker) [auth-krb5.c] Fix -Wsign-compare warning in non-Heimdal path.
2188 Patch from djm@.
Darren Tuckerb0288092005-11-10 14:46:48 +11002189 - (dtucker) [configure.ac] Disable pointer-sign warnings on gcc 4.0+
2190 since they're not useful right now. Patch from djm@.
Darren Tuckere5a2b522005-11-10 15:56:44 +11002191 - (dtucker) [openbsd-compat/getgrouplist.c] Sync OpenBSD revs 1.10 - 1.2 (ANSI
2192 prototypes, removal of "register").
Darren Tucker80c0d7e2005-11-10 16:05:37 +11002193 - (dtucker) [openbsd-compat/strlcat.c] Sync OpenBSD revs 1.11 - 1.12 (removal
2194 of "register").
Darren Tucker7f24a0e2005-11-10 16:18:56 +11002195 - (dtucker) [openbsd-compat/{LOTS}] Move the "OPENBSD ORIGINAL" markers to
2196 after the copyright notices. Having them at the top next to the CVSIDs
2197 guarantees a conflict for each and every sync.
Darren Tucker52245662005-11-10 16:26:17 +11002198 - (dtucker) [openbsd-compat/strlcpy.c] Update from OpenBSD 1.8 -> 1.10.
Darren Tucker925d1de2005-11-10 16:31:55 +11002199 - (dtucker) [openbsd-compat/sigact.h] Add "OPENBSD ORIGINAL" marker.
Darren Tucker09471d82005-11-10 16:38:54 +11002200 - (dtucker) [openbsd-compat/strmode.c] Update from OpenBSD 1.5 -> 1.7.
2201 Removal of rcsid, "whiteout" inode type.
Darren Tuckerad1dada2005-11-10 16:42:51 +11002202 - (dtucker) [openbsd-compat/basename.c] Update from OpenBSD 1.11 -> 1.14.
2203 Removal of rcsid, will no longer strlcpy parts of the string.
Darren Tuckerf976e6f2005-11-10 16:46:26 +11002204 - (dtucker) [openbsd-compat/strtoll.c] Update from OpenBSD 1.4 -> 1.5.
Darren Tuckerf5ebfe92005-11-10 16:48:10 +11002205 - (dtucker) [openbsd-compat/strtoul.c] Update from OpenBSD 1.5 -> 1.7.
Darren Tuckerdbb631c2005-11-10 16:56:28 +11002206 - (dtucker) [openbsd-compat/readpassphrase.c] Update from OpenBSD 1.16 -> 1.18.
Darren Tuckerd76b4c72005-11-10 16:58:47 +11002207 - (dtucker) [openbsd-compat/readpassphrase.h] Update from OpenBSD 1.3 -> 1.5.
Darren Tucker6524d4f2005-11-10 17:02:21 +11002208 - (dtucker) [openbsd-compat/glob.c] Update from OpenBSD 1.22 -> 1.25.
Darren Tucker50a221b2005-11-10 17:03:22 +11002209 - (dtucker) [openbsd-compat/glob.h] Update from OpenBSD 1.8 -> 1.9.
Darren Tucker31ba53e2005-11-10 17:11:29 +11002210 - (dtucker) [openbsd-compat/getcwd.c] Update from OpenBSD 1.9 -> 1.14.
Darren Tucker0a149d12005-11-10 17:15:06 +11002211 - (dtucker) [openbsd-compat/getcwd.c] Replace lstat with fstat to match up
2212 with OpenBSD code since we don't support platforms without fstat any more.
Darren Tuckerc7e05d62005-11-10 17:21:21 +11002213 - (dtucker) [openbsd-compat/inet_aton.c] Update from OpenBSD 1.7 -> 1.9.
Darren Tucker28640392005-11-10 17:25:26 +11002214 - (dtucker) [openbsd-compat/inet_ntoa.c] Update from OpenBSD 1.4 -> 1.6.
2215 - (dtucker) [openbsd-compat/inet_ntop.c] Update from OpenBSD 1.5 -> 1.7.
Darren Tuckerb10b4972005-11-10 17:27:25 +11002216 - (dtucker) [openbsd-compat/daemon.c] Update from OpenBSD 1.5 -> 1.6.
Darren Tucker4e8c2492005-11-10 17:28:35 +11002217 - (dtucker) [openbsd-compat/strsep.c] Update from OpenBSD 1.5 -> 1.6.
Darren Tucker8f0d8f82005-11-10 17:33:00 +11002218 - (dtucker) [openbsd-compat/daemon.c] Update from OpenBSD 1.10 -> 1.13.
Darren Tuckerffcd0ec2005-11-10 17:37:02 +11002219 - (dtucker) [openbsd-compat/mktemp.c] Update from OpenBSD 1.17 -> 1.19.
Darren Tucker91b34dc2005-11-10 17:42:40 +11002220 - (dtucker) [openbsd-compat/rresvport.c] Update from OpenBSD 1.6 -> 1.8.
Darren Tucker6f15c072005-11-10 17:52:08 +11002221 - (dtucker) [openbsd-compat/bindresvport.c] Add "OPENBSD ORIGINAL" marker.
Darren Tuckerfe80d7a2005-11-10 17:54:46 +11002222 - (dtucker) [openbsd-compat/bindresvport.c] Update from OpenBSD 1.16 -> 1.17.
Darren Tucker30d69742005-11-10 19:29:12 +11002223 - (dtucker) [openbsd-compat/sigact.c] Update from OpenBSD 1.3 -> 1.4.
2224 Id and copyright sync only, there were no substantial changes we need.
Darren Tuckerce1cb1f2005-11-10 19:31:08 +11002225 - (dtucker) [openbsd-compat/bsd-closefrom.c openbsd-compat/base64.c]
Darren Tucker58120342005-11-10 19:31:37 +11002226 -Wsign-compare fixes from djm.
Darren Tucker9d30d132005-11-10 19:43:48 +11002227 - (dtucker) [openbsd-compat/sigact.h] Update from OpenBSD 1.2 -> 1.3.
2228 Id and copyright sync only, there were no substantial changes we need.
Darren Tuckerf0324352005-11-10 21:30:36 +11002229 - (dtucker) [configure.ac] Try to get the gcc version number in a way that
2230 doesn't change between versions, and use a safer default.
Darren Tuckerb8c89d12005-11-10 10:10:10 +11002231
Damien Miller3f54a9f2005-11-05 14:52:18 +1100223220051105
2233 - (djm) OpenBSD CVS Sync
2234 - markus@cvs.openbsd.org 2005/10/07 11:13:57
2235 [ssh-keygen.c]
2236 change DSA default back to 1024, as it's defined for 1024 bits only
2237 and this causes interop problems with other clients. moreover,
2238 in order to improve the security of DSA you need to change more
2239 components of DSA key generation (e.g. the internal SHA1 hash);
2240 ok deraadt
Damien Miller39eda6e2005-11-05 14:52:50 +11002241 - djm@cvs.openbsd.org 2005/10/10 10:23:08
2242 [channels.c channels.h clientloop.c serverloop.c session.c]
2243 fix regression I introduced in 4.2: X11 forwardings initiated after
2244 a session has exited (e.g. "(sleep 5; xterm) &") would not start.
2245 bz #1086 reported by t8m AT centrum.cz; ok markus@ dtucker@
Damien Miller5e7fd072005-11-05 14:53:39 +11002246 - djm@cvs.openbsd.org 2005/10/11 23:37:37
2247 [channels.c]
2248 bz #1076 set SO_REUSEADDR on X11 forwarding listner sockets, preventing
2249 bind() failure when a previous connection's listeners are in TIME_WAIT,
2250 reported by plattner AT inf.ethz.ch; ok dtucker@
Damien Miller5434eb22005-11-05 15:03:24 +11002251 - stevesk@cvs.openbsd.org 2005/10/13 14:03:01
2252 [auth2-gss.c gss-genr.c gss-serv.c]
2253 remove unneeded #includes; ok markus@
Damien Miller9fac2632005-11-05 15:03:48 +11002254 - stevesk@cvs.openbsd.org 2005/10/13 14:20:37
2255 [gss-serv.c]
2256 spelling in comments
Damien Miller5f916c82005-11-05 15:05:28 +11002257 - stevesk@cvs.openbsd.org 2005/10/13 19:08:08
2258 [gss-serv-krb5.c gss-serv.c]
2259 unused declarations; ok deraadt@
2260 (id sync only for gss-serv-krb5.c)
Damien Miller20afc242005-11-05 15:06:38 +11002261 - stevesk@cvs.openbsd.org 2005/10/13 19:13:41
2262 [dns.c]
2263 unneeded #include, unused declaration, little knf; ok deraadt@
Damien Miller6fd6def2005-11-05 15:07:05 +11002264 - stevesk@cvs.openbsd.org 2005/10/13 22:24:31
2265 [auth2-gss.c gss-genr.c gss-serv.c monitor.c]
2266 KNF; ok djm@
Damien Miller15d72a02005-11-05 15:07:33 +11002267 - stevesk@cvs.openbsd.org 2005/10/14 02:17:59
2268 [ssh-keygen.c ssh.c sshconnect2.c]
2269 no trailing "\n" for log functions; ok djm@
Damien Miller0a0176e2005-11-05 15:07:59 +11002270 - stevesk@cvs.openbsd.org 2005/10/14 02:29:37
2271 [channels.c clientloop.c]
2272 free()->xfree(); ok djm@
Damien Millerc1af1d52005-11-05 15:08:57 +11002273 - stevesk@cvs.openbsd.org 2005/10/15 15:28:12
2274 [sshconnect.c]
2275 make external definition static; ok deraadt@
Damien Miller7e8795d2005-11-05 15:10:42 +11002276 - stevesk@cvs.openbsd.org 2005/10/17 13:45:05
2277 [dns.c]
2278 fix memory leaks from 2 sources:
2279 1) key_fingerprint_raw()
2280 2) malloc in dns_read_rdata()
2281 ok jakob@
2282 - stevesk@cvs.openbsd.org 2005/10/17 14:01:28
2283 [dns.c]
2284 remove #ifdef LWRES; ok jakob@
Damien Miller319550a2005-11-05 15:11:15 +11002285 - stevesk@cvs.openbsd.org 2005/10/17 14:13:35
2286 [dns.c dns.h]
2287 more cleanups; ok jakob@
Damien Millerb3bfbb72005-11-05 15:11:48 +11002288 - djm@cvs.openbsd.org 2005/10/30 01:23:19
2289 [ssh_config.5]
2290 mention control socket fallback behaviour, reported by
2291 tryponraj AT gmail.com
Damien Miller4bbacb72005-11-05 15:12:28 +11002292 - djm@cvs.openbsd.org 2005/10/30 04:01:03
2293 [ssh-keyscan.c]
2294 make ssh-keygen discard junk from server before SSH- ident, spotted by
2295 dave AT cirt.net; ok dtucker@
Damien Milleraa3bb102005-11-05 15:12:59 +11002296 - djm@cvs.openbsd.org 2005/10/30 04:03:24
2297 [ssh.c]
2298 fix misleading debug message; ok dtucker@
Damien Miller4d3fd542005-11-05 15:13:24 +11002299 - dtucker@cvs.openbsd.org 2005/10/30 08:29:29
2300 [canohost.c sshd.c]
2301 Check for connections with IP options earlier and drop silently. ok djm@
Damien Miller713de762005-11-05 15:13:49 +11002302 - jmc@cvs.openbsd.org 2005/10/30 08:43:47
2303 [ssh_config.5]
2304 remove trailing whitespace;
Damien Miller788f2122005-11-05 15:14:59 +11002305 - djm@cvs.openbsd.org 2005/10/30 08:52:18
2306 [clientloop.c packet.c serverloop.c session.c ssh-agent.c ssh-keygen.c]
2307 [ssh.c sshconnect.c sshconnect1.c sshd.c]
2308 no need to escape single quotes in comments, no binary change
Damien Miller653b93b2005-11-05 15:15:23 +11002309 - dtucker@cvs.openbsd.org 2005/10/31 06:15:04
2310 [sftp.c]
2311 Fix sorting with "ls -1" command. From Robert Tsai, "looks right" deraadt@
Damien Millerf14be5c2005-11-05 15:15:49 +11002312 - djm@cvs.openbsd.org 2005/10/31 11:12:49
2313 [ssh-keygen.1 ssh-keygen.c]
2314 generate a protocol 2 RSA key by default
Damien Millerc7e2d3f2005-11-05 15:16:12 +11002315 - djm@cvs.openbsd.org 2005/10/31 11:48:29
2316 [serverloop.c]
2317 make sure we clean up wtmp, etc. file when we receive a SIGTERM,
2318 SIGINT or SIGQUIT when running without privilege separation (the
2319 normal privsep case is already OK). Patch mainly by dtucker@ and
2320 senthilkumar_sen AT hotpop.com; ok dtucker@
Damien Miller83d0d392005-11-05 15:16:27 +11002321 - jmc@cvs.openbsd.org 2005/10/31 19:55:25
2322 [ssh-keygen.1]
2323 grammar;
Damien Miller24ecf612005-11-05 15:16:52 +11002324 - dtucker@cvs.openbsd.org 2005/11/03 13:38:29
2325 [canohost.c]
2326 Cache reverse lookups with and without DNS separately; ok markus@
Damien Miller19bb3a52005-11-05 15:19:35 +11002327 - djm@cvs.openbsd.org 2005/11/04 05:15:59
2328 [kex.c kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c]
2329 remove hardcoded hash lengths in key exchange code, allowing
2330 implementation of KEX methods with different hashes (e.g. SHA-256);
2331 ok markus@ dtucker@ stevesk@
Damien Miller5fd8b022005-11-05 16:04:36 +11002332 - djm@cvs.openbsd.org 2005/11/05 05:01:15
2333 [bufaux.c]
2334 Fix leaks in error paths, bz #1109 and #1110 reported by kremenek AT
2335 cs.stanford.edu; ok dtucker@
Darren Tucker3a38c5a2005-11-05 16:28:35 +11002336 - (dtucker) [README.platform] Add PAM section.
Damien Miller9b59ada2005-11-05 16:56:52 +11002337 - (djm) [openbsd-compat/getrrsetbyname.c] Sync to latest OpenBSD version,
2338 resolving memory leak bz#1111 reported by kremenek AT cs.stanford.edu;
2339 ok dtucker@
Damien Miller3f54a9f2005-11-05 14:52:18 +11002340
Darren Tuckerd32e2932005-11-02 09:07:31 +1100234120051102
2342 - (dtucker) [openbsd-compat/bsd-misc.c] Bug #1108: fix broken strdup().
2343 Reported by olavi at ipunplugged.com and antoine.brodin at laposte.net
2344 via FreeBSD.
2345
Damien Miller88edf622005-10-30 11:55:45 +1100234620051030
2347 - (djm) [contrib/suse/openssh.spec contrib/suse/rc.
2348 sshd contrib/suse/sysconfig.ssh] Bug #1106: Updated SuSE spec and init
2349 files from imorgan AT nas.nasa.gov
Darren Tucker42308a42005-10-30 15:31:55 +11002350 - (dtucker) [session.c] Bug #1045do not check /etc/nologin when PAM is
2351 enabled, instead allow PAM to handle it. Note that on platforms using PAM,
2352 the pam_nologin module should be added to sshd's session stack in order to
2353 maintain exising behaviour. Based on patch and discussion from t8m at
2354 centrum.cz, ok djm@
Damien Miller88edf622005-10-30 11:55:45 +11002355
Darren Tucker537f1ed2005-10-25 18:38:33 +1000235620051025
2357 - (dtucker) [configure.ac] Relocate LLONG_MAX calculation to after the
2358 sizeof(long long) checks, to make fixing bug #1104 easier (no changes
2359 yet).
Darren Tuckere7374552005-10-25 18:52:31 +10002360 - (dtucker) [configure.ac] Bug #1104: Tru64's printf family doesn't
2361 understand "%lld", even though the compiler has "long long", so handle
2362 it as a special case. Patch tested by mcaskill.scott at epa.gov.
Darren Tuckera841dce2005-10-25 18:55:00 +10002363 - (dtucker) [contrib/cygwin/ssh-user-config] Remove duplicate yes/no
2364 prompt. Patch from vinschen at redhat.com.
Darren Tucker537f1ed2005-10-25 18:38:33 +10002365
Darren Tucker314d89e2005-10-17 23:29:23 +1000236620051017
2367 - (dtucker) [configure.ac] Bug #1097: Fix configure for cross-compiling.
2368 /etc/default/login report and testing from aabaker at iee.org, corrections
2369 from tim@.
2370
Darren Tucker9ac1a652005-10-09 11:40:03 +1000237120051009
2372 - (dtucker) [configure.ac defines.h openbsd-compat/vis.{c,h}] Sync current
2373 versions from OpenBSD. ok djm@
2374
Darren Tucker1e6616b2005-10-08 12:07:01 +1000237520051008
2376 - (dtucker) [configure.ac] Bug #1098: define $MAIL for HP-UX; report from
2377 brian.smith at agilent com.
Damien Millere04ec6f2005-10-08 16:21:19 +10002378 - (djm) [configure.ac] missing 'test' call for -with-Werror test
Darren Tucker1e6616b2005-10-08 12:07:01 +10002379
Darren Tuckerb18f1512005-10-05 23:02:16 +1000238020051005
2381 - (dtucker) [configure.ac sshd.8] Enable locked account check (a prepended
2382 "*LOCKED*" string) for FreeBSD. Patch jeremie at le-hen.org and
2383 senthilkumar_sen at hotpop.com.
2384
Darren Tuckerd3d0fa12005-10-03 18:03:05 +1000238520051003
2386 - (dtucker) OpenBSD CVS Sync
2387 - markus@cvs.openbsd.org 2005/09/07 08:53:53
2388 [channels.c]
2389 enforce chanid != NULL; ok djm
Darren Tuckerd89dbf22005-10-03 18:05:26 +10002390 - markus@cvs.openbsd.org 2005/09/09 19:18:05
2391 [clientloop.c]
2392 typo; from mark at mcs.vuw.ac.nz, bug #1082
Darren Tuckerce321d82005-10-03 18:11:24 +10002393 - djm@cvs.openbsd.org 2005/09/13 23:40:07
2394 [sshd.c ssh.c misc.h sftp.c ssh-keygen.c ssh-keysign.c sftp-server.c
2395 scp.c misc.c ssh-keyscan.c ssh-add.c ssh-agent.c]
2396 ensure that stdio fds are attached; ok deraadt@
Darren Tuckerc8d64212005-10-03 18:13:42 +10002397 - djm@cvs.openbsd.org 2005/09/19 11:37:34
2398 [ssh_config.5 ssh.1]
2399 mention ability to specify bind_address for DynamicForward and -D options;
2400 bz#1077 spotted by Haruyama Seigo
Darren Tuckera2cdbda2005-10-03 18:16:02 +10002401 - djm@cvs.openbsd.org 2005/09/19 11:47:09
2402 [sshd.c]
2403 stop connection abort on rekey with delayed compression enabled when
2404 post-auth privsep is disabled (e.g. when root is logged in); ok dtucker@
Darren Tucker8813bbb2005-10-03 18:17:02 +10002405 - djm@cvs.openbsd.org 2005/09/19 11:48:10
2406 [gss-serv.c]
2407 typo
Darren Tucker05d4dfe2005-10-03 18:17:38 +10002408 - jmc@cvs.openbsd.org 2005/09/19 15:38:27
2409 [ssh.1]
2410 some more .Bk/.Ek to avoid ugly line split;
Darren Tucker895d6982005-10-03 18:18:05 +10002411 - jmc@cvs.openbsd.org 2005/09/19 15:42:44
2412 [ssh.c]
2413 update -D usage here too;
Darren Tucker1e4308e2005-10-03 18:18:40 +10002414 - djm@cvs.openbsd.org 2005/09/19 23:31:31
2415 [ssh.1]
2416 spelling nit from stevesk@
Darren Tuckere2dd2d52005-10-03 18:19:06 +10002417 - djm@cvs.openbsd.org 2005/09/21 23:36:54
2418 [sshd_config.5]
2419 aquire -> acquire, from stevesk@
Darren Tucker45b01422005-10-03 18:20:00 +10002420 - djm@cvs.openbsd.org 2005/09/21 23:37:11
2421 [sshd.c]
2422 change label at markus@'s request
Darren Tucker28e8e592005-10-03 18:20:28 +10002423 - jaredy@cvs.openbsd.org 2005/09/30 20:34:26
2424 [ssh-keyscan.1]
2425 deploy .An -nosplit; ok jmc
Darren Tuckerb0b12292005-10-03 18:23:44 +10002426 - dtucker@cvs.openbsd.org 2005/10/03 07:44:42
2427 [canohost.c]
2428 Relocate check_ip_options call to prevent logging of garbage for
2429 connections with IP options set. bz#1092 from David Leonard,
2430 "looks good" deraadt@
Darren Tucker1f85dc72005-10-03 20:14:18 +10002431 - (dtucker) [regress/README.regress] Bug #989: Document limitation that scp
2432 is required in the system path for the multiplex test to work.
Darren Tuckerd3d0fa12005-10-03 18:03:05 +10002433
Darren Tucker6e422112005-09-30 09:55:49 +1000243420050930
2435 - (dtucker) [openbsd-compat/openbsd-compat.h] Bug #1096: Add prototype
2436 for strtoll. Patch from o.flebbe at science-computing.de.
Darren Tuckerd4f04ae2005-09-30 10:23:21 +10002437 - (dtucker) [monitor.c] Bug #1087: Send loginmsg to preauth privsep
2438 child during PAM account check without clearing it. This restores the
2439 post-login warnings such as LDAP password expiry. Patch from Tomas Mraz
2440 with help from several others.
Darren Tucker6e422112005-09-30 09:55:49 +10002441
Darren Tucker372c8fb2005-09-29 22:01:10 +1000244220050929
2443 - (dtucker) [monitor_wrap.c] Remove duplicate definition of loginmsg
2444 introduced during sync.
2445
Darren Tucker46e7ba52005-09-28 08:26:30 +1000244620050928
2447 - (dtucker) [entropy.c] Use u_char for receiving RNG seed for consistency.
Darren Tucker7b1e6952005-09-28 22:33:27 +10002448 - (dtucker) [auth-pam.c] Bug #1028: send final non-query messages from
2449 PAM via keyboard-interactive. Patch tested by the folks at Vintela.
Darren Tucker46e7ba52005-09-28 08:26:30 +10002450
Darren Tuckerf1377bd2005-09-27 19:50:25 +1000245120050927
2452 - (dtucker) [entropy.c] Remove unnecessary tests for getuid and geteuid
2453 calls, since they can't possibly fail. ok djm@
Darren Tuckerc6f82192005-09-27 22:46:32 +10002454 - (dtucker) [entropy.c entropy.h sshd.c] Pass RNG seed to the reexec'ed
2455 process when sshd relies on ssh-random-helper. Should result in faster
2456 logins on systems without a real random device or prngd. ok djm@
Darren Tuckerf1377bd2005-09-27 19:50:25 +10002457
Darren Tuckerd3eff2b2005-09-24 12:43:51 +1000245820050924
2459 - (dtucker) [auth2.c] Move start_pam() calls out of if-else block to remove
2460 duplicate call. ok djm@
2461
Darren Tuckerc373a562005-09-22 20:15:08 +1000246220050922
2463 - (dtucker) [configure.ac] Use -R linker flag for libedit too; patch from
2464 skeleten at shillest.net.
Darren Tucker82171c62005-09-22 20:19:54 +10002465 - (dtucker) [configure.ac] Fix help for --with-opensc; patch from skeleten at
2466 shillest.net.
Darren Tuckerc373a562005-09-22 20:15:08 +10002467
Tim Rice7df8d392005-09-19 09:33:39 -0700246820050919
2469 - (tim) [aclocal.m4 configure.ac] Delete acconfig.h and add templates to
2470 AC_DEFINE and AC_DEFINE_UNQUOTED to quiet autoconf 2.59 warning messages.
Tim Rice542f62b2005-09-19 09:36:55 -07002471 ok dtucker@
Tim Rice7df8d392005-09-19 09:33:39 -07002472
Tim Ricefd9e9e32005-09-12 17:36:10 -0700247320050912
2474 - (tim) [configure.ac] Bug 1078. Fix --without-kerberos5. Reported by
2475 Mike Frysinger.
2476
Tim Rice64ead482005-09-08 21:56:33 -0700247720050908
2478 - (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to
2479 OpenServer 6 and add osr5bigcrypt support so when someone migrates
2480 passwords between UnixWare and OpenServer they will still work. OK dtucker@
2481
Damien Millerc8ab8ce2005-09-01 19:10:48 +1000248220050901
2483 - (djm) Update RPM spec file versions
2484
Tim Rice66fd2172005-08-31 09:59:49 -0700248520050831
Damien Millerda9984f2005-08-31 19:46:26 +10002486 - (djm) OpenBSD CVS Sync
2487 - djm@cvs.openbsd.org 2005/08/30 22:08:05
2488 [gss-serv.c sshconnect2.c]
2489 destroy credentials if krb5_kuserok() call fails. Stops credentials being
2490 delegated to users who are not authorised for GSSAPIAuthentication when
2491 GSSAPIDeletegateCredentials=yes and another authentication mechanism
2492 succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
2493 simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
Damien Millerae379592005-08-31 19:47:07 +10002494 - markus@cvs.openbsd.org 2005/08/31 09:28:42
2495 [version.h]
2496 4.2
Darren Tuckerd0a47cd2005-09-01 00:05:56 +10002497 - (dtucker) [README] Update release note URL to 4.2
Tim Rice66fd2172005-08-31 09:59:49 -07002498 - (tim) [configure.ac auth.c defines.h session.c openbsd-compat/port-uw.c
2499 openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] libiaf cleanup. Disable
2500 libiaf bits for OpenServer6. Free memory allocated by ia_get_logpwd().
2501 Feedback and OK dtucker@
Damien Millerda9984f2005-08-31 19:46:26 +10002502
250320050830
Tim Riceeb456542005-08-30 07:12:02 -07002504 - (tim) [configure.ac] Back out last change. It needs to be done differently.
2505
Tim Rice20168652005-08-29 17:17:37 -0700250620050829
2507 - (tim) [configure.ac] ia_openinfo() seems broken on OSR6. Limit UW long
2508 password support to 7.x for now.
2509
Tim Rice2291c002005-08-26 13:15:19 -0700251020050826
2511 - (tim) [CREDITS LICENCE auth.c configure.ac defines.h includes.h session.c
2512 openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h
2513 openbsd-compat/xcrypt.c] New files [openssh/openbsd-compat/port-uw.c
2514 openssh/openbsd-compat/port-uw.h] Support long passwords (> 8-char)
2515 on UnixWare 7 from Dhiraj Gulati and Ahsan Rashid. Cleanup and testing
2516 by tim@. Feedback and OK dtucker@
2517
Darren Tucker114572f2005-08-23 23:32:05 +1000251820050823
2519 - (dtucker) [regress/test-exec.sh] Do not prepend an extra "/" to a fully-
2520 qualified sshd pathname since some systems (eg Cygwin) may consider "/foo"
2521 and "//foo" to be different. Spotted by vinschen at redhat.com.
Tim Rice8cc2ad62005-08-23 17:18:21 -07002522 - (tim) [configure.ac] Not all gcc's support -Wsign-compare. Enhancements
2523 and OK dtucker@
2524 - (tim) [defines.h] PATH_MAX bits for OpenServer OK dtucker@
Darren Tucker114572f2005-08-23 23:32:05 +10002525
Darren Tucker93e7e8f2005-08-23 08:06:55 +1000252620050821
2527 - (dtucker) [configure.ac defines.h includes.h sftp.c] Add support for
2528 LynxOS, patch from Olli Savia (ops at iki.fi). ok djm@
2529
Damien Miller1d109762005-08-16 21:32:09 +1000253020050816
Damien Millerca9ce952005-08-31 19:42:20 +10002531 - (djm) [ttymodes.c] bugzilla #1025: Fix encoding of _POSIX_VDISABLE,
Damien Miller1d109762005-08-16 21:32:09 +10002532 from Jacob Nevins; ok dtucker@
2533
Tim Rice027e8b12005-08-15 14:52:50 -0700253420050815
Tim Ricec1819c82005-08-15 17:48:40 -07002535 - (tim) [sftp.c] wrap el_end() in #ifdef USE_LIBEDIT
2536 - (tim) [configure.ac] corrections to libedit tests. Report and patches
2537 by skeleten AT shillest.net
Tim Rice027e8b12005-08-15 14:52:50 -07002538
Damien Millerb5c01252005-08-12 22:10:28 +1000253920050812
2540 - (djm) OpenBSD CVS Sync
2541 - markus@cvs.openbsd.org 2005/07/28 17:36:22
2542 [packet.c]
2543 missing packet_init_compression(); from solar
Damien Millerbe1045d2005-08-12 22:10:56 +10002544 - djm@cvs.openbsd.org 2005/07/30 01:26:16
2545 [ssh.c]
2546 fix -D listen_host initialisation, so it picks up gateway_ports setting
2547 correctly
Damien Miller43f6db62005-08-12 22:11:18 +10002548 - djm@cvs.openbsd.org 2005/07/30 02:03:47
2549 [readconf.c]
2550 listen_hosts initialisation here too; spotted greg AT y2005.nest.cx
Damien Miller203c7052005-08-12 22:11:37 +10002551 - dtucker@cvs.openbsd.org 2005/08/06 10:03:12
2552 [servconf.c]
2553 Unbreak sshd ListenAddress for bare IPv6 addresses.
Damien Miller8e489482005-08-12 22:11:58 +10002554 Report from Janusz Mucka; ok djm@
Damien Miller0e2c1022005-08-12 22:16:22 +10002555 - jaredy@cvs.openbsd.org 2005/08/08 13:22:48
2556 [sftp.c]
2557 sftp prompt enhancements:
2558 - in non-interactive mode, do not print an empty prompt at the end
2559 before finishing
2560 - print newline after EOF in editline mode
2561 - call el_end() in editline mode
2562 ok dtucker djm
Damien Millerb5c01252005-08-12 22:10:28 +10002563
Darren Tuckerc7572b22005-08-10 20:34:15 +1000256420050810
2565 - (dtucker) [configure.ac] Test libedit library and headers for compatibility.
2566 Report from skeleten AT shillest.net, ok djm@
Darren Tucker73f671a2005-08-10 21:52:36 +10002567 - (dtucker) [LICENCE configure.ac defines.h openbsd-compat/realpath.c]
2568 Sync current (thread-safe) version of realpath.c from OpenBSD (which is
2569 in turn based on FreeBSD's). ok djm@
Darren Tuckerc7572b22005-08-10 20:34:15 +10002570
Tim Rice8bc6b902005-08-09 10:09:53 -0700257120050809
2572 - (tim) [configure.ac] Allow --with-audit=no. OK dtucker@
2573 Report by skeleten AT shillest.net
2574
Darren Tucker212cfc42005-08-03 10:57:15 +1000257520050803
2576 - (dtucker) [openbsd-compat/fake-rfc2553.h] Check for EAI_* defines
2577 individually and use a value less likely to collide with real values from
2578 netdb.h. Fixes compile warnings on FreeBSD 5.3. ok djm@
Darren Tucker98256972005-08-03 15:36:21 +10002579 - (dtucker) [openbsd-compat/fake-rfc2553.h] MAX_INT -> INT_MAX since the
2580 latter is specified in the standard.
Darren Tucker212cfc42005-08-03 10:57:15 +10002581
Darren Tucker40858532005-08-02 17:07:07 +1000258220050802
2583 - (dtucker) OpenBSD CVS Sync
2584 - dtucker@cvs.openbsd.org 2005/07/27 10:39:03
2585 [scp.c hostfile.c sftp-client.c]
2586 Silence bogus -Wuninitialized warnings; ok djm@
Darren Tuckerdd352b62005-08-02 17:21:29 +10002587 - (dtucker) [configure.ac] Enable -Wuninitialized by default when compiling
2588 with gcc. ok djm@
Darren Tucker7da23cb2005-08-03 00:20:15 +10002589 - (dtucker) [configure.ac] Add a --with-Werror option to configure for
2590 adding -Werror to CFLAGS when all of the configure tests are done. ok djm@
Darren Tucker40858532005-08-02 17:07:07 +10002591
Darren Tuckerac1910f2005-07-26 12:00:42 +1000259220050726
2593 - (dtucker) [configure.ac] Update zlib warning message too, pointed out by
2594 tim@.
Damien Miller47655ee2005-07-26 21:54:11 +10002595 - (djm) OpenBSD CVS Sync
2596 - otto@cvs.openbsd.org 2005/07/19 15:32:26
2597 [auth-passwd.c]
2598 auth_usercheck(3) can return NULL, so check for that. Report from
2599 mpech@. ok markus@
Damien Miller9786e6e2005-07-26 21:54:56 +10002600 - markus@cvs.openbsd.org 2005/07/25 11:59:40
2601 [kex.c kex.h myproposal.h packet.c packet.h servconf.c session.c]
2602 [sshconnect2.c sshd.c sshd_config sshd_config.5]
2603 add a new compression method that delays compression until the user
2604 has been authenticated successfully and set compression to 'delayed'
2605 for sshd.
2606 this breaks older openssh clients (< 3.5) if they insist on
2607 compression, so you have to re-enable compression in sshd_config.
2608 ok djm@
Darren Tuckerac1910f2005-07-26 12:00:42 +10002609
Darren Tucker41097ed2005-07-25 15:24:21 +1000261020050725
2611 - (dtucker) [configure.ac] Update zlib version check for CAN-2005-2096.
2612
Damien Miller46d38de2005-07-17 17:02:09 +1000261320050717
2614- OpenBSD CVS Sync
2615 - djm@cvs.openbsd.org 2005/07/16 01:35:24
2616 [auth1.c channels.c cipher.c clientloop.c kex.c session.c ssh.c]
2617 [sshconnect.c]
2618 spacing
Damien Miller94cf4c82005-07-17 17:04:47 +10002619 - (djm) [acss.c auth-pam.c auth-shadow.c auth-skey.c auth1.c canohost.c]
2620 [cipher-acss.c loginrec.c ssh-rand-helper.c sshd.c] Fix whitespace at EOL
2621 in portable too ("perl -p -i -e 's/\s+$/\n/' *.[ch]")
Damien Miller37294fb2005-07-17 17:18:49 +10002622 - (djm) [auth-pam.c sftp.c] spaces vs. tabs at start of line
Damien Miller2b9b0452005-07-17 17:19:24 +10002623 - djm@cvs.openbsd.org 2005/07/17 06:49:04
2624 [channels.c channels.h session.c session.h]
2625 Fix a number of X11 forwarding channel leaks:
2626 1. Refuse multiple X11 forwarding requests on the same session
2627 2. Clean up all listeners after a single_connection X11 forward, not just
2628 the one that made the single connection
2629 3. Destroy X11 listeners when the session owning them goes away
2630 testing and ok dtucker@
Damien Miller0dc1bef2005-07-17 17:22:45 +10002631 - djm@cvs.openbsd.org 2005/07/17 07:17:55
2632 [auth-rh-rsa.c auth-rhosts.c auth2-chall.c auth2-gss.c channels.c]
2633 [cipher-ctr.c gss-genr.c gss-serv.c kex.c moduli.c readconf.c]
2634 [serverloop.c session.c sftp-client.c sftp.c ssh-add.c ssh-keygen.c]
2635 [sshconnect.c sshconnect2.c]
2636 knf says that a 2nd level indent is four (not three or five) spaces
Damien Millerb6f72f52005-07-17 17:26:43 +10002637 -(djm) [audit.c auth1.c auth2.c entropy.c loginrec.c serverloop.c]
2638 [ssh-rand-helper.c] fix portable 2nd level indents at 4 spaces too
Damien Miller04b65332005-07-17 17:53:31 +10002639 - (djm) [monitor.c monitor_wrap.c] -Wsign-compare for PAM monitor calls
2640
Darren Tucker4f1adad2005-07-16 11:33:06 +1000264120050716
2642 - (dtucker) [auth-pam.c] Ensure that only one side of the authentication
2643 socketpair stays open on in both the monitor and PAM process. Patch from
2644 Joerg Sonnenberger.
2645
Darren Tuckera5cf8552005-07-14 17:04:18 +1000264620050714
2647 - (dtucker) OpenBSD CVS Sync
2648 - dtucker@cvs.openbsd.org 2005/07/06 09:33:05
2649 [ssh.1]
2650 clarify meaning of ssh -b ; with & ok jmc@
Darren Tuckerbee73d52005-07-14 17:05:02 +10002651 - dtucker@cvs.openbsd.org 2005/07/08 09:26:18
2652 [misc.c]
2653 Make comment match code; ok djm@
Darren Tuckerce377c32005-07-14 17:05:51 +10002654 - markus@cvs.openbsd.org 2005/07/08 09:41:33
2655 [channels.h]
2656 race when efd gets closed while there is still buffered data:
2657 change CHANNEL_EFD_OUTPUT_ACTIVE()
2658 1) c->efd must always be valid AND
2659 2a) no EOF has been seen OR
2660 2b) there is buffered data
2661 report, initial fix and testing Chuck Cranor
Darren Tucker89f4d472005-07-14 17:06:21 +10002662 - dtucker@cvs.openbsd.org 2005/07/08 10:20:41
2663 [ssh_config.5]
2664 change BindAddress to match recent ssh -b change; prompted by markus@
Darren Tucker6c71d202005-07-14 17:06:50 +10002665 - jmc@cvs.openbsd.org 2005/07/08 12:53:10
2666 [ssh_config.5]
2667 new sentence, new line;
Darren Tucker8e2eb302005-07-14 17:07:21 +10002668 - dtucker@cvs.openbsd.org 2005/07/14 04:00:43
2669 [misc.h]
2670 use __sentinel__ attribute; ok deraadt@ djm@ markus@
Darren Tucker4a422572005-07-14 17:22:11 +10002671 - (dtucker) [configure.ac defines.h] Define __sentinel__ to nothing if the
2672 compiler doesn't understand it to prevent warnings. If any mainstream
2673 compiler versions acquire it we can test for those versions. Based on
2674 discussion with djm@.
Darren Tuckera5cf8552005-07-14 17:04:18 +10002675
Darren Tuckera916d142005-07-07 11:50:20 +1000267620050707
Darren Tuckera83f2612005-07-07 20:09:35 +10002677 - dtucker [auth-krb5.c auth.h gss-serv-krb5.c] Move KRB5CCNAME generation for
2678 the MIT Kerberos code path into a common function and expand mkstemp
2679 template to be consistent with the rest of OpenSSH. From sxw at
2680 inf.ed.ac.uk, ok djm@
2681 - (dtucker) [auth-krb5.c] There's no guarantee that snprintf will set errno
2682 in the case where the buffer is insufficient, so always return ENOMEM.
2683 Also pointed out by sxw at inf.ed.ac.uk.
Darren Tucker893c6022005-07-07 20:33:36 +10002684 - (dtucker) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Remove
2685 calls to krb5_init_ets, which has not been required since krb-1.1.x and
2686 most Kerberos versions no longer export in their public API. From sxw
2687 at inf.ed.ac.uk, ok djm@
Darren Tuckera916d142005-07-07 11:50:20 +10002688
Damien Millera7270302005-07-06 09:36:05 +1000268920050706
2690 - (djm) OpenBSD CVS Sync
2691 - markus@cvs.openbsd.org 2005/07/01 13:19:47
2692 [channels.c]
2693 don't free() if getaddrinfo() fails; report mpech@
Damien Miller13390022005-07-06 09:44:19 +10002694 - djm@cvs.openbsd.org 2005/07/04 00:58:43
2695 [channels.c clientloop.c clientloop.h misc.c misc.h ssh.c ssh_config.5]
2696 implement support for X11 and agent forwarding over multiplex slave
2697 connections. Because of protocol limitations, the slave connections inherit
2698 the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding
2699 their own.
2700 ok dtucker@ "put it in" deraadt@
Damien Millerfd94fba2005-07-06 09:44:59 +10002701 - jmc@cvs.openbsd.org 2005/07/04 11:29:51
2702 [ssh_config.5]
2703 fix Xr and a little grammar;
Damien Millerf92c0792005-07-06 09:45:26 +10002704 - markus@cvs.openbsd.org 2005/07/04 14:04:11
2705 [channels.c]
2706 don't forget to set x11_saved_display
Damien Millera7270302005-07-06 09:36:05 +10002707
Damien Miller9651fe62005-06-26 08:55:25 +1000270820050626
2709 - (djm) OpenBSD CVS Sync
2710 - djm@cvs.openbsd.org 2005/06/17 22:53:47
2711 [ssh.c sshconnect.c]
2712 Fix ControlPath's %p expanding to "0" for a default port,
2713 spotted dwmw2 AT infradead.org; ok markus@
Damien Miller8f74c8f2005-06-26 08:56:03 +10002714 - djm@cvs.openbsd.org 2005/06/18 04:30:36
2715 [ssh.c ssh_config.5]
2716 allow ControlPath=none, patch from dwmw2 AT infradead.org; ok dtucker@
Damien Miller7c71cc72005-06-26 08:56:31 +10002717 - djm@cvs.openbsd.org 2005/06/25 22:47:49
2718 [ssh.c]
Damien Millerdba63542005-06-26 08:56:48 +10002719 do the default port filling code a few lines earlier, so it really
2720 does fix %p
Damien Miller9651fe62005-06-26 08:55:25 +10002721
Damien Miller6abf57c2005-06-19 07:31:37 +1000272220050618
2723 - (djm) OpenBSD CVS Sync
2724 - djm@cvs.openbsd.org 2005/05/20 12:57:01;
2725 [auth1.c] split protocol 1 auth methods into separate functions, makes
2726 authloop much more readable; fixes and ok markus@ (portable ok &
2727 polish dtucker@)
Damien Miller06221f12005-06-19 07:36:10 +10002728 - djm@cvs.openbsd.org 2005/06/17 02:44:33
2729 [auth1.c] make this -Wsign-compare clean; ok avsm@ markus@
Damien Miller52c8afe2005-06-19 10:19:43 +10002730 - (djm) [loginrec.c ssh-rand-helper.c] Fix -Wsign-compare for portable,
2731 tested and fixes tim@
Damien Miller6abf57c2005-06-19 07:31:37 +10002732
Damien Miller17e7ed02005-06-17 12:54:33 +1000273320050617
2734 - (djm) OpenBSD CVS Sync
2735 - djm@cvs.openbsd.org 2005/06/16 03:38:36
2736 [channels.c channels.h clientloop.c clientloop.h ssh.c]
2737 move x11_get_proto from ssh.c to clientloop.c, to make muliplexed xfwd
2738 easier later; ok deraadt@
Damien Miller677257f2005-06-17 12:55:03 +10002739 - markus@cvs.openbsd.org 2005/06/16 08:00:00
2740 [canohost.c channels.c sshd.c]
2741 don't exit if getpeername fails for forwarded ports; bugzilla #1054;
2742 ok djm
Damien Millereccb9de2005-06-17 12:59:34 +10002743 - djm@cvs.openbsd.org 2005/06/17 02:44:33
2744 [auth-rsa.c auth.c auth1.c auth2-chall.c auth2-gss.c authfd.c authfile.c]
2745 [bufaux.c canohost.c channels.c cipher.c clientloop.c dns.c gss-serv.c]
2746 [kex.c kex.h key.c mac.c match.c misc.c packet.c packet.h scp.c]
2747 [servconf.c session.c session.h sftp-client.c sftp-server.c sftp.c]
2748 [ssh-keyscan.c ssh-rsa.c sshconnect.c sshconnect1.c sshconnect2.c sshd.c]
2749 make this -Wsign-compare clean; ok avsm@ markus@
2750 NB. auth1.c changes not committed yet (conflicts with uncommitted sync)
2751 NB2. more work may be needed to make portable Wsign-compare clean
Darren Tuckerf0bd3522005-06-17 21:15:20 +10002752 - (dtucker) [cipher.c openbsd-compat/openbsd-compat.h
2753 openbsd-compat/openssl-compat.c] only include openssl compat stuff where
2754 it's needed as it can cause conflicts elsewhere (eg xcrypt.c). Found by
2755 and ok tim@
Damien Miller17e7ed02005-06-17 12:54:33 +10002756
Damien Miller05656962005-06-16 13:18:04 +1000275720050616
2758 - (djm) OpenBSD CVS Sync
2759 - jaredy@cvs.openbsd.org 2005/06/07 13:25:23
2760 [progressmeter.c]
2761 catch SIGWINCH and resize progress meter accordingly; ok markus dtucker
Damien Miller6476cad2005-06-16 13:18:34 +10002762 - djm@cvs.openbsd.org 2005/06/06 11:20:36
2763 [auth.c auth.h misc.c misc.h ssh.c ssh_config.5 sshconnect.c]
2764 introduce a generic %foo expansion function. replace existing % expansion
2765 and add expansion to ControlPath; ok markus@
Damien Millerac7ef6a2005-06-16 13:19:06 +10002766 - djm@cvs.openbsd.org 2005/06/08 03:50:00
2767 [ssh-keygen.1 ssh-keygen.c sshd.8]
2768 increase default rsa/dsa key length from 1024 to 2048 bits;
2769 ok markus@ deraadt@
Damien Millerd14b1e72005-06-16 13:19:41 +10002770 - djm@cvs.openbsd.org 2005/06/08 11:25:09
2771 [clientloop.c readconf.c readconf.h ssh.c ssh_config.5]
2772 add ControlMaster=auto/autoask options to support opportunistic
2773 multiplexing; tested avsm@ and jakob@, ok markus@
Damien Miller46f55d32005-06-16 13:21:17 +10002774 - dtucker@cvs.openbsd.org 2005/06/09 13:43:49
2775 [cipher.c]
2776 Correctly initialize end of array sentinel; ok djm@
2777 (Id sync only, change already in portable)
Damien Miller05656962005-06-16 13:18:04 +10002778
Darren Tuckera55ec772005-06-09 21:45:10 +1000277920050609
2780 - (dtucker) [cipher.c openbsd-compat/Makefile.in
Darren Tucker488d6022005-06-09 23:40:39 +10002781 openbsd-compat/openbsd-compat.h openbsd-compat/openssl-compat.{c,h}]
Darren Tuckera55ec772005-06-09 21:45:10 +10002782 Move compatibility code for supporting older OpenSSL versions to the
2783 compat layer. Suggested by and "no objection" djm@
2784
Darren Tucker431f0222005-06-07 17:53:40 +1000278520050607
2786 - (dtucker) [configure.ac] Continue the hunt for LLONG_MIN and LLONG_MAX:
2787 in today's episode we attempt to coax it from limits.h where it may be
2788 hiding, failing that we take the DIY approach. Tested by tim@
2789
Darren Tucker67b37032005-06-03 17:58:31 +1000279020050603
2791 - (dtucker) [configure.ac] Only try gcc -std=gnu99 if LLONG_MAX isn't
2792 defined, and check that it helps before keeping it in CFLAGS. Some old
2793 gcc's don't set an error code when encountering an unknown value in -std.
2794 Found and tested by tim@.
Darren Tucker6a45f3d2005-06-03 19:33:10 +10002795 - (dtucker) [configure.ac] Point configure's reporting address at the
2796 openssh-unix-dev list. ok tim@ djm@
Darren Tucker67b37032005-06-03 17:58:31 +10002797
Tim Ricefcc7ff12005-06-02 20:28:29 -0700279820050602
2799 - (tim) [configure.ac] Some platforms need sys/types.h for arpa/nameser.h.
2800 Take AC_CHECK_HEADERS test out of ultrix section. It caused other platforms
2801 to skip builtin standard includes tests. (first AC_CHECK_HEADERS test
2802 must be run on all platforms) Add missing ;; to case statement. OK dtucker@
2803
Darren Tuckerd886e1c2005-06-01 18:57:45 +1000280420050601
2805 - (dtucker) [configure.ac] Look for _getshort and _getlong in
2806 arpa/nameser.h.
Darren Tucker81eb5d52005-06-01 21:39:33 +10002807 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoll.c]
2808 Add strtoll to the compat library, from OpenBSD.
Darren Tuckerfc4f2dd2005-06-01 23:01:12 +10002809 - (dtucker) OpenBSD CVS Sync
2810 - avsm@cvs.openbsd.org 2005/05/26 02:08:05
2811 [scp.c]
2812 If copying multiple files to a target file (which normally fails, as it
2813 must be a target directory), kill the spawned ssh child before exiting.
2814 This stops it trying to authenticate and spewing lots of output.
2815 deraadt@ ok
Darren Tucker2db8ae62005-06-01 23:02:25 +10002816 - dtucker@cvs.openbsd.org 2005/05/26 09:08:12
2817 [ssh-keygen.c]
2818 uint32_t -> u_int32_t for consistency; ok djm@
Darren Tucker0814d312005-06-01 23:08:51 +10002819 - djm@cvs.openbsd.org 2005/05/27 08:30:37
2820 [ssh.c]
2821 fix -O for cases where no ControlPath has been specified or socket at
2822 ControlPath is not contactable; spotted by and ok avsm@
Tim Rice5f707582005-06-01 19:57:45 -07002823 - (tim) [config.guess config.sub] Update to '2005-05-27' version.
Tim Rice4dbacff2005-06-01 20:09:28 -07002824 - (tim) [configure.ac] set TEST_SHELL for OpenServer 6
Darren Tuckerd886e1c2005-06-01 18:57:45 +10002825
Darren Tucker11fb0f22005-05-31 16:51:07 +1000282620050531
2827 - (dtucker) [contrib/aix/pam.conf] Correct comments. From davidl at
2828 vintela.com.
Darren Tuckerf5615962005-05-31 16:59:16 +10002829 - (dtucker) [mdoc2man.awk] Teach it to understand .Ox.
Darren Tucker11fb0f22005-05-31 16:51:07 +10002830
283120050530
2832 - (dtucker) [README] Link to new release notes. Beter late than never...
2833
Darren Tucker782727a2005-05-29 10:28:48 +1000283420050529
2835 - (dtucker) [openbsd-compat/port-aix.c] Bug #1046: AIX 5.3 expects the
2836 argument to passwdexpired to be initialized to NULL. Suggested by tim@
2837 While at it, initialize the other arguments to auth functions in case they
2838 ever acquire this behaviour.
Darren Tucker6b2fe312005-05-29 10:32:47 +10002839 - (dtucker) [openbsd-compat/port-aix.c] Whitespace cleanups while there.
Darren Tuckerf9fea652005-05-29 10:54:27 +10002840 - (dtucker) [openbsd-compat/port-aix.c] Minor correction to debug message,
2841 spotted by tim@.
Darren Tucker782727a2005-05-29 10:28:48 +10002842
Darren Tucker0c9653f2005-05-28 15:58:14 +1000284320050528
2844 - (dtucker) [configure.ac] For AC_CHECK_HEADERS() and AC_CHECK_FUNCS() have
2845 one entry per line to make it easier to merge changes. ok djm@
Darren Tucker390b6d52005-05-28 16:54:36 +10002846 - (dtucker) [configure.ac] strsep() may be defined in string.h, so check
2847 for its presence and include it in the strsep check.
Darren Tucker7d2171b2005-05-28 16:57:00 +10002848 - (dtucker) [configure.ac] getpgrp may be defined in unistd.h, so check for
2849 its presence before doing AC_FUNC_GETPGRP.
Darren Tuckerfd333282005-05-28 18:31:42 +10002850 - (dtucker) [configure.ac] Merge HP-UX blocks into a common block with minor
2851 version-specific variations as required.
Darren Tucker5d72a402005-05-28 20:28:39 +10002852 - (dtucker) [openbsd-compat/port-aix.h] Use the HAVE_DECL_* definitions as
2853 per the autoconf man page. Configure should always define them but it
2854 doesn't hurt to check.
Darren Tucker0c9653f2005-05-28 15:58:14 +10002855
Damien Miller287b4592005-05-27 19:36:56 +1000285620050527
2857 - (djm) [defines.h] Use our realpath if we have to define PATH_MAX, spotted by
2858 David Leach; ok dtucker@
Darren Tucker2be1cbb2005-05-27 21:13:40 +10002859 - (dtucker) [acconfig.h configure.ac defines.h includes.h sshpty.c
2860 openbsd-compat/bsd-misc.c] Add support for Ultrix. No, that's not a typo.
2861 Required changes from Bernhard Simon, integrated by me. ok djm@
Damien Miller287b4592005-05-27 19:36:56 +10002862
Damien Miller2c04deb2005-05-26 11:35:37 +1000286320050525
2864 - (djm) [mpaux.c mpaux.h Makefile.in] Remove old mpaux.[ch] code, it has not
2865 been used for a while
Damien Miller9278ffa2005-05-26 11:59:06 +10002866 - (djm) OpenBSD CVS Sync
2867 - otto@cvs.openbsd.org 2005/04/05 13:45:31
2868 [ssh-keygen.c]
Damien Miller4f1d6b22005-05-26 11:59:32 +10002869 - djm@cvs.openbsd.org 2005/04/06 09:43:59
2870 [sshd.c]
2871 avoid harmless logspam by not performing setsockopt() on non-socket;
2872 ok markus@
Damien Miller1b0de9a2005-05-26 12:01:22 +10002873 - dtucker@cvs.openbsd.org 2005/04/06 12:26:06
2874 [ssh.c]
2875 Fix debug call for port forwards; patch from pete at seebeyond.com,
2876 ok djm@ (ID sync only - change already in portable)
Damien Miller5fd38c02005-05-26 12:02:14 +10002877 - djm@cvs.openbsd.org 2005/04/09 04:32:54
2878 [misc.c misc.h tildexpand.c Makefile.in]
2879 replace tilde_expand_filename with a simpler implementation, ahead of
2880 more whacking; ok deraadt@
Damien Miller3dc967e2005-05-26 12:03:15 +10002881 - jmc@cvs.openbsd.org 2005/04/14 12:30:30
2882 [ssh.1]
2883 arg to -b is an address, not if_name;
2884 ok markus@
Damien Millera31c9292005-05-26 12:03:31 +10002885 - jakob@cvs.openbsd.org 2005/04/20 10:05:45
2886 [dns.c]
2887 do not try to look up SSHFP for numerical hostname. ok djm@
Damien Miller167ea5d2005-05-26 12:04:02 +10002888 - djm@cvs.openbsd.org 2005/04/21 06:17:50
2889 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 ssh_config.5 sshd.8]
2890 [sshd_config.5] OpenSSH doesn't ever look at the $HOME environment
2891 variable, so don't say that we do (bz #623); ok deraadt@
Damien Millerddee5752005-05-26 12:05:05 +10002892 - djm@cvs.openbsd.org 2005/04/21 11:47:19
2893 [ssh.c]
2894 don't allocate a pty when -n flag (/dev/null stdin) is set, patch from
2895 ignasi.roca AT fujitsu-siemens.com (bz #829); ok dtucker@
Damien Millerddeb7522005-05-26 12:05:28 +10002896 - dtucker@cvs.openbsd.org 2005/04/23 23:43:47
2897 [readpass.c]
2898 Add debug message if read_passphrase can't open /dev/tty; bz #471;
2899 ok djm@
Damien Millerac7a0052005-05-26 12:05:49 +10002900 - jmc@cvs.openbsd.org 2005/04/26 12:59:02
2901 [sftp-client.h]
2902 spelling correction in comment from wiz@netbsd;
Damien Millerdadfd4d2005-05-26 12:07:13 +10002903 - jakob@cvs.openbsd.org 2005/04/26 13:08:37
2904 [ssh.c ssh_config.5]
2905 fallback gracefully if client cannot connect to ControlPath. ok djm@
Damien Miller41bfc292005-05-26 12:07:32 +10002906 - moritz@cvs.openbsd.org 2005/04/28 10:17:56
2907 [progressmeter.c ssh-keyscan.c]
2908 add snprintf checks. ok djm@ markus@
Damien Millerd2ebd452005-05-26 12:07:47 +10002909 - markus@cvs.openbsd.org 2005/05/02 21:13:22
2910 [readpass.c]
2911 missing {}
Damien Miller924c25a2005-05-26 12:09:32 +10002912 - djm@cvs.openbsd.org 2005/05/10 10:28:11
2913 [ssh.c]
2914 print nice error message for EADDRINUSE as well (ID sync only)
Damien Miller538c9b72005-05-26 12:11:28 +10002915 - djm@cvs.openbsd.org 2005/05/10 10:30:43
2916 [ssh.c]
2917 report real errors on fallback from ControlMaster=no to normal connect
Damien Miller17b23d82005-05-26 12:11:56 +10002918 - markus@cvs.openbsd.org 2005/05/16 15:30:51
2919 [readconf.c servconf.c]
2920 check return value from strdelim() for NULL (AddressFamily); mpech
Damien Miller1594ad52005-05-26 12:12:19 +10002921 - djm@cvs.openbsd.org 2005/05/19 02:39:55
2922 [sshd_config.5]
2923 sort config options, from grunk AT pestilenz.org; ok jmc@
Damien Miller06b75ad2005-05-26 12:12:37 +10002924 - djm@cvs.openbsd.org 2005/05/19 02:40:52
2925 [sshd_config]
2926 whitespace nit, from grunk AT pestilenz.org
Damien Miller459735a2005-05-26 12:13:42 +10002927 - djm@cvs.openbsd.org 2005/05/19 02:42:26
2928 [includes.h]
2929 fix cast, from grunk AT pestilenz.org
Damien Millerebcfedc2005-05-26 12:13:56 +10002930 - djm@cvs.openbsd.org 2005/05/20 10:50:55
2931 [ssh_config.5]
2932 give a ProxyCommand example using nc(1), with and ok jmc@
Damien Millerdfec2942005-05-26 12:14:32 +10002933 - jmc@cvs.openbsd.org 2005/05/20 11:23:32
2934 [ssh_config.5]
2935 oops - article and spacing;
Damien Millerb089fb52005-05-26 12:16:18 +10002936 - avsm@cvs.openbsd.org 2005/05/23 22:44:01
2937 [moduli.c ssh-keygen.c]
2938 - removes signed/unsigned comparisons in moduli generation
2939 - use strtonum instead of atoi where its easier
2940 - check some strlcpy overflow and fatal instead of truncate
Damien Miller3710f272005-05-26 12:19:17 +10002941 - djm@cvs.openbsd.org 2005/05/23 23:32:46
2942 [cipher.c myproposal.h ssh.1 ssh_config.5 sshd_config.5]
2943 add support for draft-harris-ssh-arcfour-fixes-02 improved arcfour modes;
2944 ok markus@
Damien Miller02e754f2005-05-26 12:19:39 +10002945 - avsm@cvs.openbsd.org 2005/05/24 02:05:09
2946 [ssh-keygen.c]
2947 some style nits from dmiller@, and use a fatal() instead of a printf()/exit
Damien Millerb253cc42005-05-26 12:23:44 +10002948 - avsm@cvs.openbsd.org 2005/05/24 17:32:44
2949 [atomicio.c atomicio.h authfd.c monitor_wrap.c msg.c scp.c sftp-client.c]
2950 [ssh-keyscan.c sshconnect.c]
2951 Switch atomicio to use a simpler interface; it now returns a size_t
2952 (containing number of bytes read/written), and indicates error by
2953 returning 0. EOF is signalled by errno==EPIPE.
2954 Typical use now becomes:
2955
2956 if (atomicio(read, ..., len) != len)
2957 err(1,"read");
2958
2959 ok deraadt@, cloder@, djm@
Darren Tuckerd98dce62005-05-26 13:43:57 +10002960 - (dtucker) [regress/reexec.sh] Add ${EXEEXT} so this test also works on
2961 Cygwin.
Darren Tuckerf08bdb52005-05-26 19:59:48 +10002962 - (dtucker) [auth-pam.c] Bug #1033: Fix warnings building with PAM on Linux:
Darren Tucker84ce9b42005-05-26 20:12:15 +10002963 warning: dereferencing type-punned pointer will break strict-aliasing rules
2964 warning: passing arg 3 of `pam_get_item' from incompatible pointer type
2965 The type-punned pointer fix is based on a patch from SuSE's rpm. ok djm@
2966 - (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Bug #1033: Provide
2967 templates for _getshort and _getlong if missing to prevent compiler warnings
2968 on Linux.
Damien Millerde3cb0a2005-05-26 20:48:25 +10002969 - (djm) [configure.ac openbsd-compat/Makefile.in]
2970 [openbsd-compat/openbsd-compat.h openbsd-compat/strtonum.c]
2971 Add strtonum(3) from OpenBSD libc, new code needs it.
2972 Unfortunately Linux forces us to do a bizarre dance with compiler
2973 options to get LLONG_MIN/MAX; Spotted by and ok dtucker@
Damien Miller2c04deb2005-05-26 11:35:37 +10002974
Damien Miller4d8f5602005-05-25 14:43:47 +1000297520050524
2976 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2977 [contrib/suse/openssh.spec] Update spec file versions to 4.1p1
Darren Tucker328118a2005-05-25 16:18:09 +10002978 - (dtucker) [auth-pam.c] Since people don't seem to be getting the message
2979 that USE_POSIX_THREADS is unsupported, not recommended and generally a bad
2980 idea, it is now known as UNSUPPORTED_POSIX_THREADS_HACK. Attempting to use
2981 USE_POSIX_THREADS will now generate an error so we don't silently change
2982 behaviour. ok djm@
Darren Tuckerae8c91e2005-05-25 19:42:10 +10002983 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Ensure sufficient memory
2984 allocation when retrieving core Windows environment. Add CYGWIN variable
2985 to propagated variables. Patch from vinschen at redhat.com, ok djm@
Damien Miller6b6d5be2005-05-26 11:34:36 +10002986 - Release 4.1p1
Damien Miller4d8f5602005-05-25 14:43:47 +10002987
298820050524
Damien Millerdf548bc2005-05-24 15:54:27 +10002989 - (djm) [openbsd-compat/readpassphrase.c] bz #950: Retry tcsetattr to ensure
2990 terminal modes are reset correctly. Fix from peak AT argo.troja.mff.cuni.cz;
2991 "looks ok" dtucker@
2992
299320050512
Tim Riceb58bd032005-05-12 10:32:19 -07002994 - (tim) [buildpkg.sh.in] missing ${PKG_INSTALL_ROOT} in init script
2995 hard link section. Bug 1038.
2996
Darren Tuckerfa2211d2005-05-09 23:48:17 +1000299720050509
2998 - (dtucker) [contrib/cygwin/ssh-host-config] Add a test and warning for a
2999 user-mode mounts in Cygwin installation. Patch from vinschen at redhat.com.
3000
Damien Miller4f10e252005-05-04 15:33:09 +1000300120050504
3002 - (djm) [ssh.c] some systems return EADDRINUSE on a bind to an already-used
3003 unix domain socket, so catch that too; from jakob@ ok dtucker@
3004
Darren Tucker5b115d42005-05-03 19:05:32 +1000300520050503
3006 - (dtucker) [canohost.c] normalise socket addresses returned by
3007 get_remote_hostname(). This means that IPv4 addresses in log messages
3008 on IPv6 enabled machines will no longer be prefixed by "::ffff:" and
3009 AllowUsers, DenyUsers, AllowGroups, DenyGroups will match IPv4-style
3010 addresses only for 4-in-6 mapped connections, regardless of whether
3011 or not the machine is IPv6 enabled. ok djm@
3012
Darren Tuckerfaefd2e2005-04-25 14:48:22 +1000301320050425
3014 - (dtucker) [regress/multiplex.sh] Use "kill -0 $pid" to check for the
3015 existence of a process since it's more portable. Found by jbasney at
3016 ncsa.uiuc.edu; ok tim@
Darren Tuckerbf2b3982005-04-25 14:49:48 +10003017 - (dtucker) [regress/multiplex.sh] Remove cleanup call since test-exec.sh
3018 will clean up anyway. From tim@
Darren Tuckeraf342552005-04-25 17:01:26 +10003019 - (dtucker) [regress/multiplex.sh] Put control socket in /tmp so running
Darren Tucker149da852005-04-25 17:03:29 +10003020 "make tests" works even if you're building on a filesystem that doesn't
Darren Tuckeraf342552005-04-25 17:01:26 +10003021 support sockets. From deengert at anl.gov, ok djm@
Darren Tuckerfaefd2e2005-04-25 14:48:22 +10003022
Darren Tucker2f0b5c42005-04-24 17:52:22 +1000302320050424
3024 - (dtucker) [INSTALL configure.ac] Make zlib version check test for 1.1.4 or
3025 1.2.1.2 or higher. With tim@, ok djm@
3026
Tim Rice4149ebc2005-04-23 18:17:29 -0700302720050423
3028 - (tim) [config.guess] Add support for OpenServer 6.
3029
Darren Tucker48554152005-04-21 19:50:55 +1000303020050421
3031 - (dtucker) [session.c] Bug #1024: Don't check pam_session_is_open if
3032 UseLogin is set as PAM is not used to establish credentials in that
3033 case. Found by Michael Selvesteen, ok djm@
3034
Darren Tuckerd9c88132005-04-19 12:21:21 +1000303520050419
3036 - (dtucker) [INSTALL] Reference README.privsep for the privilege separation
3037 requirements. Pointed out by Bengt Svensson.
Darren Tuckerad1e5e22005-04-19 15:31:49 +10003038 - (dtucker) [INSTALL] Put the s/key text and URL back together.
Darren Tucker8d158c92005-04-19 15:40:51 +10003039 - (dtucker) [INSTALL] Fix s/key text too.
Darren Tuckerd9c88132005-04-19 12:21:21 +10003040
Tim Rice2f97b8b2005-04-11 19:00:18 -0700304120050411
3042 - (tim) [configure.ac] UnixWare needs PASSWD_NEEDS_USERNAME
3043
Darren Tucker9d2562c2005-04-05 19:22:45 +1000304420050405
3045 - (dtucker) [configure.ac] Define HAVE_SO_PEERCRED if we have it. ok djm@
Darren Tucker00cadb82005-04-05 20:58:37 +10003046 - (dtucker) [auth-sia.c] Constify sys_auth_passwd, fixes build error on
3047 Tru64. Patch from cmadams at hiwaay.net.
Darren Tucker0f5eeff2005-04-05 21:00:47 +10003048 - (dtucker) [auth-passwd.c auth-sia.h] Remove duplicate definitions of
3049 sys_auth_passwd, pointed out by cmadams at hiwaay.net.
Darren Tucker9d2562c2005-04-05 19:22:45 +10003050
Damien Miller3dae15c2005-04-03 10:16:11 +1000305120050403
3052 - (djm) OpenBSD CVS Sync
3053 - deraadt@cvs.openbsd.org 2005/03/31 18:39:21
3054 [scp.c]
3055 copy argv[] element instead of smashing the one that ps will see; ok otto
Damien Miller4942de52005-04-03 10:16:39 +10003056 - djm@cvs.openbsd.org 2005/04/02 12:41:16
3057 [scp.c]
3058 since ssh has xstrdup, use it instead of strdup+test. unbreaks -Werror
3059 build
Darren Tucker69152292005-04-03 12:44:23 +10003060 - (dtucker) [monitor.c] Don't free buffers in audit functions, monitor_read
3061 will free as needed. ok tim@ djm@
Damien Miller3dae15c2005-04-03 10:16:11 +10003062
Darren Tucker5ede2ad2005-03-31 21:31:10 +1000306320050331
3064 - (dtucker) OpenBSD CVS Sync
3065 - jmc@cvs.openbsd.org 2005/03/16 11:10:38
3066 [ssh_config.5]
3067 get the syntax right for {Local,Remote}Forward;
3068 based on a diff from markus;
3069 problem report from ponraj;
3070 ok dtucker@ markus@ deraadt@
Darren Tucker1f04ca22005-03-31 21:31:54 +10003071 - markus@cvs.openbsd.org 2005/03/16 21:17:39
3072 [version.h]
3073 4.1
Darren Tucker83d5a982005-03-31 21:33:50 +10003074 - jmc@cvs.openbsd.org 2005/03/18 17:05:00
3075 [sshd_config.5]
3076 typo;
Darren Tuckerf3bb4342005-03-31 21:39:25 +10003077 - (dtucker) [auth.h sshd.c openbsd-compat/port-aix.c] Bug #1006: fix bug in
3078 handling of password expiry messages returned by AIX's authentication
3079 routines, originally reported by robvdwal at sara.nl.
Darren Tucker73ba4372005-03-31 21:51:54 +10003080 - (dtucker) [ssh.c] Prevent null pointer deref in port forwarding debug
3081 message on some platforms. Patch from pete at seebeyond.com via djm.
Darren Tuckerde0de392005-03-31 23:52:04 +10003082 - (dtucker) [monitor.c] Remaining part of fix for bug #1006.
Darren Tucker5ede2ad2005-03-31 21:31:10 +10003083
Darren Tucker6e1defd2005-03-29 23:24:12 +1000308420050329
3085 - (dtucker) [contrib/aix/buildbff.sh] Bug #1005: Look up only the user we're
3086 interested in which is much faster in large (eg LDAP or NIS) environments.
3087 Patch from dleonard at vintela.com.
3088
Darren Tucker86a5f8d2005-03-21 09:55:17 +1100308920050321
3090 - (dtucker) [configure.ac] Prevent configure --with-zlib from adding -Iyes
3091 and -Lyes to CFLAGS and LIBS. Pointed out by peter at slagheap.net,
3092 with & ok tim@
Darren Tucker1df61452005-03-21 09:58:07 +11003093 - (dtucker) [configure.ac] Make configure error out if the user specifies
3094 --with-libedit but the required libs can't be found, rather than silently
3095 ignoring and continuing. ok tim@
Darren Tuckere66519d2005-03-21 22:46:34 +11003096 - (dtucker) [configure.ac openbsd-compat/port-aix.h] Prevent redefinitions
3097 of setauthdb on AIX 5.3, reported by anders.liljegren at its.uu.se.
Darren Tucker86a5f8d2005-03-21 09:55:17 +11003098
Tim Rice12ee8e22005-03-17 13:37:04 -0800309920050317
3100 - (tim) [configure.ac] Bug 998. Make path for --with-opensc optional.
3101 Make --without-opensc work.
Tim Rice8bb561b2005-03-17 16:23:19 -08003102 - (tim) [configure.ac] portability changes on test statements. Some shells
3103 have problems with -a operator.
Tim Rice35cc69d2005-03-17 16:44:25 -08003104 - (tim) [configure.ac] make some configure options a little more error proof.
Tim Riceeae17cc2005-03-17 16:52:20 -08003105 - (tim) [configure.ac] remove trailing white space.
Tim Rice12ee8e22005-03-17 13:37:04 -08003106
Darren Tucker1d55ca72005-03-14 22:58:40 +1100310720050314
3108 - (dtucker) OpenBSD CVS Sync
3109 - dtucker@cvs.openbsd.org 2005/03/10 10:15:02
3110 [readconf.c]
3111 Check listen addresses for null, prevents xfree from dying during
3112 ClearAllForwardings (bz #996). From Craig Leres, ok markus@
Darren Tucker47eede72005-03-14 23:08:12 +11003113 - deraadt@cvs.openbsd.org 2005/03/10 22:01:05
3114 [misc.c ssh-keygen.c servconf.c clientloop.c auth-options.c ssh-add.c
3115 monitor.c sftp-client.c bufaux.h hostfile.c ssh.c sshconnect.c channels.c
3116 readconf.c bufaux.c sftp.c]
3117 spacing
Darren Tucker90b9e022005-03-14 23:08:50 +11003118 - deraadt@cvs.openbsd.org 2005/03/10 22:40:38
3119 [auth-options.c]
3120 spacing
Darren Tucker9f438a92005-03-14 23:09:18 +11003121 - markus@cvs.openbsd.org 2005/03/11 14:59:06
3122 [ssh-keygen.c]
3123 typo, missing \n; mpech
Darren Tucker1adc2bd2005-03-14 23:14:20 +11003124 - jmc@cvs.openbsd.org 2005/03/12 11:55:03
3125 [ssh_config.5]
3126 escape `.' at eol to avoid double spacing issues;
Darren Tuckerda1adbc2005-03-14 23:15:58 +11003127 - dtucker@cvs.openbsd.org 2005/03/14 10:09:03
3128 [ssh-keygen.1]
3129 Correct description of -H (bz #997); ok markus@, punctuation jmc@
Darren Tuckera8f553d2005-03-14 23:17:27 +11003130 - dtucker@cvs.openbsd.org 2005/03/14 11:44:42
3131 [auth.c]
3132 Populate host for log message for logins denied by AllowUsers and
Darren Tuckerc53c3a42005-03-14 23:24:43 +11003133 DenyUsers (bz #999); ok markus@ (patch by tryponraj at gmail.com)
Darren Tucker11327cc2005-03-14 23:22:25 +11003134 - markus@cvs.openbsd.org 2005/03/14 11:46:56
3135 [buffer.c buffer.h channels.c]
3136 limit input buffer size for channels; bugzilla #896; with and ok dtucker@
Tim Ricec3939e22005-03-14 17:24:51 -08003137 - (tim) [contrib/caldera/openssh.spec] links in rc?.d were getting trashed
3138 with a rpm -F
Darren Tucker1d55ca72005-03-14 22:58:40 +11003139
Darren Tuckera21380b2005-03-13 21:20:18 +1100314020050313
3141 - (dtucker) [contrib/cygwin/ssh-host-config] Makes the query for the
3142 localized name of the local administrators group more reliable. From
3143 vinschen at redhat.com.
3144
Darren Tuckerf899e6a2005-03-14 23:02:46 +1100314520050312
3146 - (dtucker) [regress/test-exec.sh] DEBUG can cause problems where debug
3147 output ends up in the client's output, causing regress failures. Found
3148 by Corinna Vinschen.
3149
Darren Tucker50c7db92005-03-09 10:02:55 +1100315020050309
3151 - (dtucker) [regress/test-exec.sh] Set BIN_SH=xpg4 on OSF1/Digital Unix/Tru64
3152 so that regress tests behave. From Chris Adams.
Damien Millerb096ac42005-03-09 11:00:05 +11003153 - (djm) OpenBSD CVS Sync
3154 - jmc@cvs.openbsd.org 2005/03/07 23:41:54
3155 [ssh.1 ssh_config.5]
3156 more macro simplification;
Damien Milleraca86262005-03-09 11:00:42 +11003157 - djm@cvs.openbsd.org 2005/03/08 23:49:48
3158 [version.h]
3159 OpenSSH 4.0
Damien Miller6f632bf2005-03-09 11:02:41 +11003160 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
3161 [contrib/suse/openssh.spec] Update spec file versions
Darren Tucker835903d2005-03-09 20:12:47 +11003162 - (djm) [log.c] Fix dumb syntax error; ok dtucker@
Damien Milleraa1dba62005-03-09 11:03:08 +11003163 - (djm) Release OpenSSH 4.0p1
Darren Tucker50c7db92005-03-09 10:02:55 +11003164
Darren Tucker0d096692005-03-07 17:34:45 +1100316520050307
3166 - (dtucker) [configure.ac] Disable gettext search when configuring with
3167 BSM audit support for the time being. ok djm@
Darren Tucker1c56ef62005-03-07 17:36:18 +11003168 - (dtucker) OpenBSD CVS Sync (regress/)
3169 - fgsch@cvs.openbsd.org 2004/12/10 01:31:30
Darren Tucker68f72132005-03-07 18:25:53 +11003170 [Makefile sftp-glob.sh]
Darren Tucker1c56ef62005-03-07 17:36:18 +11003171 some globbing regress; prompted and ok djm@
Darren Tuckerb712fcc2005-03-07 18:27:28 +11003172 - david@cvs.openbsd.org 2005/01/14 04:21:18
3173 [Makefile test-exec.sh]
3174 pass the SUDO make variable to the individual sh tests; ok dtucker@ markus@
Darren Tuckera0f3ba72005-03-07 18:33:02 +11003175 - dtucker@cvs.openbsd.org 2005/02/27 11:33:30
3176 [multiplex.sh test-exec.sh sshd-log-wrapper.sh]
3177 Add optional capability to log output from regress commands; ok markus@
3178 Use with: make TEST_SSH_LOGFILE=/tmp/regress.log
Darren Tucker894823e2005-03-07 18:34:04 +11003179 - djm@cvs.openbsd.org 2005/02/27 23:13:36
3180 [login-timeout.sh]
3181 avoid nameservice lookups in regress test; ok dtucker@
Darren Tucker5d909f02005-03-07 18:35:34 +11003182 - djm@cvs.openbsd.org 2005/03/04 08:48:46
3183 [Makefile envpass.sh]
3184 regress test for SendEnv config parsing bug; ok dtucker@
Darren Tucker4b9ac332005-03-07 19:15:06 +11003185 - (dtucker) [regress/test-exec.sh] Put SUDO in the right place.
Tim Ricec390c8d2005-03-07 01:21:37 -08003186 - (tim) [configure.ac] SCO 3.2v4.2 no longer supported.
Darren Tucker0d096692005-03-07 17:34:45 +11003187
Darren Tucker3745e2b2005-03-06 22:31:35 +1100318820050306
3189 - (dtucker) [monitor.c] Bug #125 comment #47: fix errors returned by monitor
3190 when attempting to audit disconnect events. Reported by Phil Dibowitz.
Darren Tucker2b59a6d2005-03-06 22:38:51 +11003191 - (dtucker) [session.c sshd.c] Bug #125 comment #49: Send disconnect audit
3192 events earlier, prevents mm_request_send errors reported by Matt Goebel.
Darren Tucker3745e2b2005-03-06 22:31:35 +11003193
Damien Miller7ffa3672005-03-05 11:20:40 +1100319420050305
3195 - (djm) [contrib/cygwin/README] Improve Cygwin build documentation. Patch
3196 from vinschen at redhat.com
Damien Millerb022b232005-03-05 11:22:36 +11003197 - (djm) OpenBSD CVS Sync
3198 - jmc@cvs.openbsd.org 2005/03/02 11:45:01
3199 [ssh.1]
3200 missing word;
Damien Millerf8e7acc2005-03-05 11:22:50 +11003201 - djm@cvs.openbsd.org 2005/03/04 08:48:06
3202 [readconf.c]
3203 fix SendEnv config parsing bug found by Roumen Petrov; ok dtucker@
Damien Miller7ffa3672005-03-05 11:20:40 +11003204
Damien Miller36bf7dd2005-03-02 12:02:47 +1100320520050302
3206 - (djm) OpenBSD CVS sync:
3207 - jmc@cvs.openbsd.org 2005/03/01 14:47:58
3208 [ssh.1]
3209 remove some unneccesary macros;
3210 do not mark up punctuation;
Damien Millerf8c55462005-03-02 12:03:05 +11003211 - jmc@cvs.openbsd.org 2005/03/01 14:55:23
3212 [ssh_config.5]
3213 do not mark up punctuation;
3214 whitespace;
Damien Miller718fd4b2005-03-02 12:03:23 +11003215 - jmc@cvs.openbsd.org 2005/03/01 14:59:49
3216 [sshd.8]
3217 new sentence, new line;
3218 whitespace;
Damien Miller4c9c6fd2005-03-02 12:03:43 +11003219 - jmc@cvs.openbsd.org 2005/03/01 15:05:00
3220 [ssh-keygen.1]
3221 whitespace;
Damien Miller9a2fdbd2005-03-02 12:04:01 +11003222 - jmc@cvs.openbsd.org 2005/03/01 15:47:14
3223 [ssh-keyscan.1 ssh-keyscan.c]
3224 sort options and sync usage();
Damien Miller27e9c512005-03-02 12:04:16 +11003225 - jmc@cvs.openbsd.org 2005/03/01 17:19:35
3226 [scp.1 sftp.1]
3227 add HashKnownHosts to -o list;
3228 ok markus@
Damien Miller02faece2005-03-02 12:04:32 +11003229 - jmc@cvs.openbsd.org 2005/03/01 17:22:06
3230 [ssh.c]
3231 sync usage() w/ man SYNOPSIS;
3232 ok markus@
Damien Miller792c0172005-03-02 12:04:50 +11003233 - jmc@cvs.openbsd.org 2005/03/01 17:32:19
3234 [ssh-add.1]
3235 sort options;
Damien Miller265d3092005-03-02 12:05:06 +11003236 - jmc@cvs.openbsd.org 2005/03/01 18:15:56
3237 [ssh-keygen.1]
3238 sort options (no attempt made at synopsis clean up though);
3239 spelling (occurance -> occurrence);
3240 use prompt before examples;
3241 grammar;
Damien Miller1227d4c2005-03-02 12:06:51 +11003242 - djm@cvs.openbsd.org 2005/03/02 01:00:06
3243 [sshconnect.c]
3244 fix addition of new hashed hostnames when CheckHostIP=yes;
3245 found and ok dtucker@
Damien Miller89eac802005-03-02 12:33:04 +11003246 - djm@cvs.openbsd.org 2005/03/02 01:27:41
3247 [ssh-keygen.c]
3248 ignore hostnames with metachars when hashing; ok deraadt@
Damien Miller947219e2005-03-02 13:22:30 +11003249 - djm@cvs.openbsd.org 2005/03/02 02:21:07
3250 [ssh.1]
3251 bz#987: mention ForwardX11Trusted in ssh.1,
3252 reported by andrew.benham AT thus.net; ok deraadt@
Tim Ricef8f30162005-03-02 21:49:56 -08003253 - (tim) [regress/agent-ptrace.sh] add another possible gdb error.
Damien Miller36bf7dd2005-03-02 12:02:47 +11003254
Damien Miller3eb48b62005-03-01 21:15:46 +1100325520050301
3256 - (djm) OpenBSD CVS sync:
3257 - otto@cvs.openbsd.org 2005/02/16 09:56:44
3258 [ssh.c]
3259 Better diagnostic if an identity file is not accesible. ok markus@ djm@
Damien Miller9b8073e2005-03-01 21:16:18 +11003260 - djm@cvs.openbsd.org 2005/02/18 03:05:53
3261 [canohost.c]
3262 better error messages for getnameinfo failures; ok dtucker@
Damien Miller64e8d442005-03-01 21:16:47 +11003263 - djm@cvs.openbsd.org 2005/02/20 22:59:06
3264 [sftp.c]
3265 turn on ssh batch mode when in sftp batch mode, patch from
3266 jdmossh AT nand.net;
3267 ok markus@
Damien Miller70a908e2005-03-01 21:17:09 +11003268 - jmc@cvs.openbsd.org 2005/02/25 10:55:13
3269 [sshd.8]
3270 add /etc/motd and $HOME/.hushlogin to FILES;
3271 from michael knudsen;
Damien Miller1717fd42005-03-01 21:17:31 +11003272 - djm@cvs.openbsd.org 2005/02/28 00:54:10
3273 [ssh_config.5]
3274 bz#849: document timeout on untrusted x11 forwarding sessions. Reported by
3275 orion AT cora.nwra.com; ok markus@
Damien Millerf91ee4c2005-03-01 21:24:33 +11003276 - djm@cvs.openbsd.org 2005/03/01 10:09:52
3277 [auth-options.c channels.c channels.h clientloop.c compat.c compat.h]
3278 [misc.c misc.h readconf.c readconf.h servconf.c ssh.1 ssh.c ssh_config.5]
3279 [sshd_config.5]
3280 bz#413: allow optional specification of bind address for port forwardings.
3281 Patch originally by Dan Astorian, but worked on by several people
3282 Adds GatewayPorts=clientspecified option on server to allow remote
3283 forwards to bind to client-specified ports.
Damien Millere1776152005-03-01 21:47:37 +11003284 - djm@cvs.openbsd.org 2005/03/01 10:40:27
3285 [hostfile.c hostfile.h readconf.c readconf.h ssh.1 ssh_config.5]
3286 [sshconnect.c sshd.8]
3287 add support for hashing host names and addresses added to known_hosts
3288 files, to improve privacy of which hosts user have been visiting; ok
3289 markus@ deraadt@
Damien Millerdb7b8172005-03-01 21:48:03 +11003290 - djm@cvs.openbsd.org 2005/03/01 10:41:28
3291 [ssh-keyscan.1 ssh-keyscan.c]
3292 option to hash hostnames output by ssh-keyscan; ok markus@ deraadt@
Damien Miller4b42d7f2005-03-01 21:48:35 +11003293 - djm@cvs.openbsd.org 2005/03/01 10:42:49
3294 [ssh-keygen.1 ssh-keygen.c ssh_config.5]
3295 add tools for managing known_hosts files with hashed hostnames, including
3296 hashing existing files and deleting hosts by name; ok markus@ deraadt@
Damien Miller3eb48b62005-03-01 21:15:46 +11003297
Darren Tucker34233832005-02-26 10:04:28 +1100329820050226
3299 - (dtucker) [openbsd-compat/bsd-openpty.c openbsd-compat/inet_ntop.c]
3300 Remove two obsolete Cygwin #ifdefs. Patch from vinschen at redhat.com.
Darren Tucker38049032005-02-26 10:07:37 +11003301 - (dtucker) [acconfig.h configure.ac openbsd-compat/bsd-misc.{c,h}]
3302 Remove SETGROUPS_NOOP, was only used by Cygwin, which doesn't need it any
3303 more. Patch from vinschen at redhat.com.
Darren Tuckerdc8fc622005-02-26 10:12:38 +11003304 - (dtucker) [Makefile.in] Add a install-nosysconf target for installing the
3305 binaries without the config files. Primarily useful for packaging.
3306 Patch from phil at usc.edu. ok djm@
Darren Tucker34233832005-02-26 10:04:28 +11003307
330820050224
Damien Miller848b9932005-02-24 12:12:34 +11003309 - (djm) [configure.ac] in_addr_t test needs sys/types.h too
3310
331120050222
Darren Tucker2ea9b182005-02-22 17:57:13 +11003312 - (dtucker) [uidswap.c] Skip uid restore test on Cygwin. Patch from
3313 vinschen at redhat.com.
3314
Darren Tuckerd9f88912005-02-20 21:01:48 +1100331520050220
3316 - (dtucker) [LICENCE Makefile.in README.platform audit-bsm.c configure.ac
3317 defines.h] Bug #125: Add *EXPERIMENTAL* BSM audit support. Configure
3318 --with-audit=bsm to enable. Patch originally from Sun Microsystems,
3319 parts by John R. Jackson. ok djm@
Darren Tucker04cfbe02005-02-20 23:27:11 +11003320 - (dtucker) [configure.ac] Missing comma in AIX section, somehow causes
3321 unrelated platforms to be configured incorrectly.
Darren Tuckerd9f88912005-02-20 21:01:48 +11003322
Damien Millered462d92005-02-16 13:02:45 +1100332320050216
3324 - (djm) write seed to temporary file and atomically rename into place;
3325 ok dtucker@
Darren Tucker7b48d252005-02-16 13:20:07 +11003326 - (dtucker) [ssh-rand-helper.c] Provide seed_rng since it may be called
3327 via mkstemp in some configurations. ok djm@
Darren Tuckera91f5ee2005-02-16 14:20:06 +11003328 - (dtucker) [auth-shadow.c] Prevent compiler warnings if "DAY" is defined
3329 by the system headers.
Darren Tuckerca6e7a72005-02-16 16:19:17 +11003330 - (dtucker) [configure.ac] Bug #893: check for libresolv early on Reliant
3331 Unix; prevents problems relating to the location of -lresolv in the
3332 link order.
Darren Tuckerc97b01a2005-02-16 16:47:37 +11003333 - (dtucker) [session.c] Bug #918: store credentials from gssapi-with-mic
3334 authentication early enough to be available to PAM session modules when
3335 privsep=yes. Patch from deengert at anl.gov, ok'ed in principle by Sam
3336 Hartman and similar to Debian's ssh-krb5 package.
Darren Tucker3c774c52005-02-16 22:49:31 +11003337 - (dtucker) [configure.ac openbsd-compat/port-aix.{c,h}] Silence some more
3338 compiler warnings on AIX.
Damien Millered462d92005-02-16 13:02:45 +11003339
Darren Tuckerf04c3612005-02-15 21:26:32 +1100334020050215
3341 - (dtucker) [config.sh.in] Collect oslevel -r too.
Darren Tucker691d5232005-02-15 21:45:57 +11003342 - (dtucker) [README.platform auth.c configure.ac loginrec.c
3343 openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Bug #835: enable IPv6
3344 on AIX where possible (see README.platform for details) and work around
3345 a misfeature of AIX's getnameinfo. ok djm@
Darren Tuckera39f83e2005-02-15 22:19:28 +11003346 - (dtucker) [loginrec.c] Add missing #include.
Darren Tuckerf04c3612005-02-15 21:26:32 +11003347
Darren Tucker1b6f2292005-02-11 16:11:49 +1100334820050211
3349 - (dtucker) [configure.ac] Tidy up configure --help output.
Darren Tucker15af68f2005-02-11 18:32:13 +11003350 - (dtucker) [openbsd-compat/fake-rfc2553.h] We now need EAI_SYSTEM too.
Darren Tucker1b6f2292005-02-11 16:11:49 +11003351
Darren Tucker2f9573d2005-02-10 22:28:54 +1100335220050210
3353 - (dtucker) [configure.ac] Bug #919: Provide visible feedback for the
3354 --disable-etc-default-login configure option.
3355
Darren Tucker3f166df2005-02-09 09:46:47 +1100335620050209
3357 - (dtucker) OpenBSD CVS Sync
3358 - dtucker@cvs.openbsd.org 2005/01/28 09:45:53
3359 [ssh_config]
3360 Make it clear that the example entries in ssh_config are only some of the
3361 commonly-used options and refer the user to ssh_config(5) for more
3362 details; ok djm@
Darren Tucker79a7acf2005-02-09 09:48:57 +11003363 - jmc@cvs.openbsd.org 2005/01/28 15:05:43
3364 [ssh_config.5]
3365 grammar;
Darren Tucker43d8e282005-02-09 09:51:08 +11003366 - jmc@cvs.openbsd.org 2005/01/28 18:14:09
3367 [ssh_config.5]
3368 wording;
3369 ok markus@
Darren Tucker5b530262005-02-09 09:52:17 +11003370 - dtucker@cvs.openbsd.org 2005/01/30 11:18:08
3371 [monitor.c]
3372 Make code match intent; ok djm@
Darren Tucker96d47102005-02-09 09:53:48 +11003373 - dtucker@cvs.openbsd.org 2005/02/08 22:24:57
3374 [sshd.c]
3375 Provide reason in error message if getnameinfo fails; ok markus@
Darren Tucker92170a82005-02-09 17:08:23 +11003376 - (dtucker) [auth-passwd.c openbsd-compat/port-aix.c] Don't call
3377 disable_forwarding() from compat library. Prevent linker errrors trying
3378 to resolve it for binaries other than sshd. ok djm@
Darren Tuckerc7e38d52005-02-09 22:12:30 +11003379 - (dtucker) [configure.ac] Bug #854: prepend pwd to relative --with-ssl-dir
3380 paths. ok djm@
Darren Tucker33370e02005-02-09 22:17:28 +11003381 - (dtucker) [configure.ac session.c] Some platforms (eg some SCO) require
3382 the username to be passed to the passwd command when changing expired
3383 passwords. ok djm@
Darren Tucker3f166df2005-02-09 09:46:47 +11003384
Darren Tuckerfeb6f7f2005-02-08 20:17:17 +1100338520050208
3386 - (dtucker) [regress/test-exec.sh] Bug #912: Set _POSIX2_VERSION for the
3387 regress tests so newer versions of GNU head(1) behave themselves. Patch
3388 by djm, so ok me.
Darren Tuckerb4d30122005-02-08 21:06:55 +11003389 - (dtucker) [openbsd-compat/port-aix.c] Silence compiler warnings.
Darren Tucker2e0cf0d2005-02-08 21:52:47 +11003390 - (dtucker) [audit.c audit.h auth.c auth1.c auth2.c loginrec.c monitor.c
3391 monitor_wrap.c monitor_wrap.h session.c sshd.c]: Prepend all of the audit
3392 defines and enums with SSH_ to prevent namespace collisions on some
3393 platforms (eg AIX).
Darren Tuckerfeb6f7f2005-02-08 20:17:17 +11003394
Darren Tucker598ba7b2005-02-04 15:05:08 +1100339520050204
3396 - (dtucker) [monitor.c] Permit INVALID_USER audit events from slave too.
Darren Tucker40d9a632005-02-04 15:19:44 +11003397 - (dtucker) [auth.c] Fix parens in audit log check.
Darren Tucker598ba7b2005-02-04 15:05:08 +11003398
Darren Tuckerad7646a2005-02-02 10:43:59 +1100339920050202
3400 - (dtucker) [configure.ac openbsd-compat/realpath.c] Sync up with realpath
3401 rev 1.11 from OpenBSD and make it use fchdir if available. ok djm@
Darren Tucker42d9dc72005-02-02 17:10:11 +11003402 - (dtucker) [auth.c loginrec.h openbsd-compat/{bsd-cray,port-aix}.{c,h}]
3403 Make record_failed_login() call provide hostname rather than having the
3404 implementations having to do lookups themselves. Only affects AIX and
3405 UNICOS (the latter only uses the "user" parameter anyway). ok djm@
Darren Tucker9dc6c7d2005-02-02 18:30:33 +11003406 - (dtucker) [session.c sshd.c] Bug #445: Propogate KRB5CCNAME if set to child
3407 the process. Since we also unset KRB5CCNAME at startup, if it's set after
3408 authentication it must have been set by the platform's native auth system.
3409 This was already done for AIX; this enables it for the general case.
Darren Tucker2fba9932005-02-02 23:30:24 +11003410 - (dtucker) [auth.c canohost.c canohost.h configure.ac defines.h loginrec.c]
3411 Bug #974: Teach sshd to write failed login records to btmp for failed auth
3412 attempts (currently only for password, kbdint and C/R, only on Linux and
3413 HP-UX), based on code from login.c from util-linux. With ashok_kovai at
3414 hotmail.com, ok djm@
Darren Tucker269a1ea2005-02-03 00:20:53 +11003415 - (dtucker) [Makefile.in auth.c auth.h auth1.c auth2.c loginrec.c monitor.c
3416 monitor.h monitor_wrap.c monitor_wrap.h session.c sshd.c] Bug #125:
3417 (first stage) Add audit instrumentation to sshd, currently disabled by
Darren Tucker6dce9912005-02-03 15:07:37 +11003418 default. with suggestions from and ok djm@
Darren Tuckerad7646a2005-02-02 10:43:59 +11003419
Darren Tucker9b5495d2005-02-01 17:35:09 +1100342020050201
3421 - (dtucker) [log.c] Bug #973: force log_init() to open syslog, since on some
3422 platforms syslog will revert to its default values. This may result in
3423 messages from external libraries (eg libwrap) being sent to a different
3424 facility.
Darren Tucker9dca0992005-02-01 19:16:45 +11003425 - (dtucker) [sshd_config.5] Bug #701: remove warning about
3426 keyboard-interactive since this is no longer the case.
Darren Tucker9b5495d2005-02-01 17:35:09 +11003427
Darren Tucker5c14c732005-01-24 21:55:49 +1100342820050124
3429 - (dtucker) OpenBSD CVS Sync
3430 - otto@cvs.openbsd.org 2005/01/21 08:32:02
3431 [auth-passwd.c sshd.c]
3432 Warn in advance for password and account expiry; initialize loginmsg
3433 buffer earlier and clear it after privsep fork. ok and help dtucker@
3434 markus@
Darren Tucker094cd0b2005-01-24 21:56:48 +11003435 - dtucker@cvs.openbsd.org 2005/01/22 08:17:59
3436 [auth.c]
3437 Log source of connections denied by AllowUsers, DenyUsers, AllowGroups and
3438 DenyGroups. bz #909, ok djm@
Darren Tucker660db782005-01-24 21:57:11 +11003439 - djm@cvs.openbsd.org 2005/01/23 10:18:12
3440 [cipher.c]
3441 config option "Ciphers" should be case-sensitive; ok dtucker@
Darren Tuckerba66df82005-01-24 21:57:40 +11003442 - dtucker@cvs.openbsd.org 2005/01/24 10:22:06
3443 [scp.c sftp.c]
3444 Have scp and sftp wait for the spawned ssh to exit before they exit
3445 themselves. This prevents ssh from being unable to restore terminal
3446 modes (not normally a problem on OpenBSD but common with -Portable
3447 on POSIX platforms). From peak at argo.troja.mff.cuni.cz (bz#950);
3448 ok djm@ markus@
Darren Tucker1b7223c2005-01-24 22:00:40 +11003449 - dtucker@cvs.openbsd.org 2005/01/24 10:29:06
3450 [moduli]
3451 Import new moduli; requested by deraadt@ a week ago
Darren Tucker218f1782005-01-24 22:50:47 +11003452 - dtucker@cvs.openbsd.org 2005/01/24 11:47:13
3453 [auth-passwd.c]
3454 #if -> #ifdef so builds without HAVE_LOGIN_CAP work too; ok djm@ otto@
Darren Tucker5c14c732005-01-24 21:55:49 +11003455
Darren Tucker172a5e82005-01-20 10:55:46 +1100345620050120
3457 - (dtucker) OpenBSD CVS Sync
3458 - markus@cvs.openbsd.org 2004/12/23 17:35:48
3459 [session.c]
3460 check for NULL; from mpech
Darren Tucker7cfeecf2005-01-20 10:56:31 +11003461 - markus@cvs.openbsd.org 2004/12/23 17:38:07
3462 [ssh-keygen.c]
3463 leak; from mpech
Darren Tucker0f383232005-01-20 10:57:56 +11003464 - djm@cvs.openbsd.org 2004/12/23 23:11:00
3465 [servconf.c servconf.h sshd.c sshd_config sshd_config.5]
3466 bz #898: support AddressFamily in sshd_config. from
3467 peak@argo.troja.mff.cuni.cz; ok deraadt@
Darren Tuckerb2161e32005-01-20 11:00:46 +11003468 - markus@cvs.openbsd.org 2005/01/05 08:51:32
3469 [sshconnect.c]
3470 remove dead code, log connect() failures with level error, ok djm@
Darren Tuckerb3509012005-01-20 11:01:46 +11003471 - jmc@cvs.openbsd.org 2005/01/08 00:41:19
3472 [sshd_config.5]
3473 `login'(n) -> `log in'(v);
Darren Tuckerf0e792e2005-01-20 11:02:26 +11003474 - dtucker@cvs.openbsd.org 2005/01/17 03:25:46
3475 [moduli.c]
3476 Correct spelling: SCHNOOR->SCHNORR; ok djm@
Darren Tuckerea7c8122005-01-20 11:03:08 +11003477 - dtucker@cvs.openbsd.org 2005/01/17 22:48:39
3478 [sshd.c]
3479 Make debugging output continue after reexec; ok djm@
Darren Tucker611649e2005-01-20 11:05:34 +11003480 - dtucker@cvs.openbsd.org 2005/01/19 13:11:47
3481 [auth-bsdauth.c auth2-chall.c]
3482 Have keyboard-interactive code call the drivers even for responses for
3483 invalid logins. This allows the drivers themselves to decide how to
3484 handle them and prevent leaking information where possible. Existing
3485 behaviour for bsdauth is maintained by checking authctxt->valid in the
3486 bsdauth driver. Note that any third-party kbdint drivers will now need
3487 to be able to handle responses for invalid logins. ok markus@
Darren Tuckerd2311862005-01-20 13:27:56 +11003488 - djm@cvs.openbsd.org 2004/12/22 02:13:19
3489 [cipher-ctr.c cipher.c]
3490 remove fallback AES support for old OpenSSL, as OpenBSD has had it for
3491 many years now; ok deraadt@
3492 (Id sync only: Portable will continue to support older OpenSSLs)
Darren Tucker36a3d602005-01-20 12:43:38 +11003493 - (dtucker) [auth-pam.c] Bug #971: Prevent leaking information about user
3494 existence via keyboard-interactive/pam, in conjunction with previous
3495 auth2-chall.c change; with Colin Watson and djm.
Darren Tucker33bc3342005-01-20 22:07:29 +11003496 - (dtucker) [loginrec.h] Bug #952: Increase size of username field to 128
3497 bytes to prevent errors from login_init_entry() when the username is
3498 exactly 64 bytes(!) long. From brhamon at cisco.com, ok djm@
Darren Tucker3c660802005-01-20 22:20:50 +11003499 - (dtucker) [auth-chall.c auth.h auth2-chall.c] Bug #936: Remove pam from
3500 the list of available kbdint devices if UsePAM=no. ok djm@
Darren Tucker172a5e82005-01-20 10:55:46 +11003501
350220050118
Darren Tucker72c025d2005-01-18 12:05:18 +11003503 - (dtucker) [INSTALL Makefile.in configure.ac survey.sh.in] Implement
3504 "make survey" and "make send-survey". This will provide data on the
3505 configure parameters, platform and platform features to the development
3506 team, which will allow (among other things) better targetting of testing.
3507 It's entirely voluntary and is off be default. ok djm@
Darren Tucker24c710e2005-01-18 12:45:42 +11003508 - (dtucker) [survey.sh.in] Remove any blank lines from the output of
3509 ccver-v and ccver-V.
Darren Tucker72c025d2005-01-18 12:05:18 +11003510
Darren Tucker8686ed72004-12-20 12:05:08 +1100351120041220
3512 - (dtucker) [ssh-rand-helper.c] Fall back to command-based seeding if reading
3513 from prngd is enabled at compile time but fails at run time, eg because
3514 prngd is not running. Note that if you have prngd running when OpenSSH is
3515 built, OpenSSL will consider itself internally seeded and rand-helper won't
3516 be built at all unless explicitly enabled via --with-rand-helper. ok djm@
Darren Tucker5caa78b2004-12-20 12:35:42 +11003517 - (dtucker) [regress/rekey.sh] Touch datafile before filling with dd, since
3518 on some wacky platforms (eg old AIXes), dd will refuse to create an output
3519 file if it doesn't exist.
Darren Tucker8686ed72004-12-20 12:05:08 +11003520
Darren Tucker442a3832004-12-13 18:08:32 +1100352120041213
3522 - (dtucker) [contrib/findssh.sh] Clean up on interrupt; from
3523 amarendra.godbole at ge com.
3524
Darren Tucker56c95982004-12-11 13:34:56 +1100352520041211
3526 - (dtucker) OpenBSD CVS Sync
3527 - markus@cvs.openbsd.org 2004/12/06 16:00:43
3528 [bufaux.c]
3529 use 0x00 not \0 since buf[] is a bignum
Darren Tucker596dcfa2004-12-11 13:37:22 +11003530 - fgsch@cvs.openbsd.org 2004/12/10 03:10:42
3531 [sftp.c]
3532 - fix globbed ls for paths the same lenght as the globbed path when
3533 we have a unique matching.
3534 - fix globbed ls in case of a directory when we have a unique matching.
3535 - as a side effect, if the path does not exist error (used to silently
3536 ignore).
3537 - don't do extra do_lstat() if we only have one matching file.
3538 djm@ ok
Darren Tuckerf0f90982004-12-11 13:39:50 +11003539 - dtucker@cvs.openbsd.org 2004/12/11 01:48:56
3540 [auth-rsa.c auth2-pubkey.c authfile.c misc.c misc.h]
3541 Fix debug call in error path of authorized_keys processing and fix related
3542 warnings; ok djm@
Darren Tucker56c95982004-12-11 13:34:56 +11003543
Tim Rice0f83d292004-12-08 18:29:58 -0800354420041208
3545 - (tim) [configure.ac] Comment some non obvious platforms in the
3546 target-specific case statement. Suggested and OK by dtucker@
3547
Darren Tucker641b34c2004-12-07 11:26:15 +1100354820041207
3549 - (dtucker) [regress/scp.sh] Use portable-friendly $DIFFOPTs in new test.
3550
Darren Tuckerba2abb32004-12-06 22:40:10 +1100355120041206
3552 - (dtucker) [TODO WARNING.RNG] Update to reflect current reality. ok djm@
Darren Tuckercd516ef2004-12-06 22:43:43 +11003553 - (dtucker) OpenBSD CVS Sync
3554 - markus@cvs.openbsd.org 2004/11/25 22:22:14
3555 [sftp-client.c sftp.c]
3556 leak; from mpech
Darren Tucker0133a722004-12-06 22:44:32 +11003557 - jmc@cvs.openbsd.org 2004/11/29 00:05:17
3558 [sftp.1]
3559 missing full stop;
Darren Tuckere2f189a2004-12-06 22:45:53 +11003560 - djm@cvs.openbsd.org 2004/11/29 07:41:24
3561 [sftp-client.h sftp.c]
3562 Some small fixes from moritz@jodeit.org. ok deraadt@
Darren Tucker16e254d2004-12-06 22:46:45 +11003563 - jaredy@cvs.openbsd.org 2004/12/05 23:55:07
3564 [sftp.1]
3565 - explain that patterns can be used as arguments in get/put/ls/etc
3566 commands (prodded by Michael Knudsen)
3567 - describe ls flags as a list
3568 - other minor improvements
3569 ok jmc, djm
Darren Tucker22cc7412004-12-06 22:47:41 +11003570 - dtucker@cvs.openbsd.org 2004/12/06 11:41:03
3571 [auth-rsa.c auth2-pubkey.c authfile.c misc.c misc.h ssh.h sshd.8]
3572 Discard over-length authorized_keys entries rather than complaining when
3573 they don't decode. bz #884, with & ok djm@
Darren Tuckera3729602004-12-06 23:00:27 +11003574 - (dtucker) OpenBSD CVS Sync (regress/)
3575 - djm@cvs.openbsd.org 2004/06/26 06:16:07
3576 [reexec.sh]
3577 don't change the name of the copied sshd for the reexec fallback test,
3578 makes life simpler for portable
Darren Tuckerccf07792004-12-06 23:03:27 +11003579 - dtucker@cvs.openbsd.org 2004/07/08 12:59:35
3580 [scp.sh]
3581 Regress test for bz #863 (scp double-error), requires $SUDO. ok markus@
Darren Tucker3206e572004-12-06 23:04:57 +11003582 - david@cvs.openbsd.org 2004/07/09 19:45:43
3583 [Makefile]
3584 add a missing CLEANFILES used in the re-exec test
Darren Tucker71b56432004-12-06 23:05:52 +11003585 - djm@cvs.openbsd.org 2004/10/08 02:01:50
3586 [reexec.sh]
3587 shrink and tidy; ok dtucker@
Darren Tucker124f58e2004-12-06 23:07:37 +11003588 - djm@cvs.openbsd.org 2004/10/29 23:59:22
3589 [Makefile added brokenkeys.sh]
3590 regression test for handling of corrupt keys in authorized_keys file
Darren Tucker79ec66e2004-12-06 23:12:15 +11003591 - djm@cvs.openbsd.org 2004/11/07 00:32:41
3592 [multiplex.sh]
3593 regression tests for new multiplex commands
Darren Tuckercc0603d2004-12-06 23:13:50 +11003594 - dtucker@cvs.openbsd.org 2004/11/25 09:39:27
3595 [test-exec.sh]
3596 Remove obsolete RhostsAuthentication from test config; ok markus@
Darren Tuckerd028fea2004-12-06 23:16:29 +11003597 - dtucker@cvs.openbsd.org 2004/12/06 10:49:56
3598 [test-exec.sh]
3599 Check if TEST_SSH_SSHD is a full path to sshd before searching; ok markus@
Darren Tuckerba2abb32004-12-06 22:40:10 +11003600
Darren Tuckere04644c2004-12-03 14:08:45 +1100360120041203
3602 - (dtucker) OpenBSD CVS Sync
3603 - jmc@cvs.openbsd.org 2004/11/07 17:42:36
3604 [ssh.1]
3605 options sort, and whitespace;
Darren Tucker9c6bf322004-12-03 14:10:19 +11003606 - jmc@cvs.openbsd.org 2004/11/07 17:57:30
3607 [ssh.c]
3608 usage():
3609 - add -O
3610 - sync -S w/ manpage
3611 - remove -h
Darren Tuckerc1386672004-12-03 14:33:47 +11003612 - (dtucker) [auth1.c auth2.c] If the user successfully authenticates but is
3613 subsequently denied by the PAM auth stack, send the PAM message to the
3614 user via packet_disconnect (Protocol 1) or userauth_banner (Protocol 2).
3615 ok djm@
Darren Tuckere04644c2004-12-03 14:08:45 +11003616
Darren Tucker2d963d82004-11-07 20:04:10 +1100361720041107
3618 - (dtucker) OpenBSD CVS Sync
3619 - djm@cvs.openbsd.org 2004/11/05 12:19:56
3620 [sftp.c]
3621 command editing and history support via libedit; ok markus@
3622 thanks to hshoexer@ and many testers on tech@ too
Darren Tucker7ebfc102004-11-07 20:06:19 +11003623 - djm@cvs.openbsd.org 2004/11/07 00:01:46
3624 [clientloop.c clientloop.h ssh.1 ssh.c]
3625 add basic control of a running multiplex master connection; including the
3626 ability to check its status and request it to exit; ok markus@
Darren Tucker16bcc1c2004-11-07 20:14:34 +11003627 - (dtucker) [INSTALL Makefile.in configure.ac] Add --with-libedit configure
3628 option and supporting makefile bits and documentation.
Darren Tucker2d963d82004-11-07 20:04:10 +11003629
Darren Tuckerc0161342004-11-05 20:00:03 +1100363020041105
3631 - (dtucker) OpenBSD CVS Sync
3632 - markus@cvs.openbsd.org 2004/08/30 09:18:08
3633 [LICENCE]
3634 s/keygen/keyscan/
Darren Tucker4e4fe002004-11-05 20:01:03 +11003635 - jmc@cvs.openbsd.org 2004/08/30 21:22:49
3636 [ssh-add.1 ssh.1]
3637 .Xsession -> .xsession;
3638 originally from a pr from f at obiit dot org, but missed by myself;
3639 ok markus@ matthieu@
Darren Tucker07336da2004-11-05 20:02:16 +11003640 - djm@cvs.openbsd.org 2004/09/07 23:41:30
3641 [clientloop.c ssh.c]
3642 cleanup multiplex control socket on SIGHUP too, spotted by sturm@
3643 ok markus@ deraadt@
Darren Tuckere9bf9842004-11-05 20:05:32 +11003644 - deraadt@cvs.openbsd.org 2004/09/15 00:46:01
3645 [ssh.c]
3646 /* fallthrough */ is something a programmer understands. But
3647 /* FALLTHROUGH */ is also understood by lint, so that is better.
Darren Tucker7cc5c232004-11-05 20:06:59 +11003648 - jaredy@cvs.openbsd.org 2004/09/15 03:25:41
3649 [sshd_config.5]
3650 mention PrintLastLog only prints last login time for interactive
3651 sessions, like PrintMotd mentions.
3652 From Michael Knudsen, with wording changed slightly to match the
3653 PrintMotd description.
3654 ok djm
Darren Tucker178fa662004-11-05 20:09:09 +11003655 - mickey@cvs.openbsd.org 2004/09/15 18:42:27
3656 [sshd.c]
3657 use less doubles in daemons; markus@ ok
Darren Tuckerf30e1ac2004-11-05 20:10:02 +11003658 - deraadt@cvs.openbsd.org 2004/09/15 18:46:04
3659 [scp.c]
3660 scratch that do { } while (0) wrapper in this case
Darren Tucker39207a42004-11-05 20:19:51 +11003661 - djm@cvs.openbsd.org 2004/09/23 13:00:04
3662 [ssh.c]
3663 correctly honour -n in multiplex client mode; spotted by sturm@ ok markus@
Darren Tucker3269b132004-11-05 20:20:59 +11003664 - djm@cvs.openbsd.org 2004/09/25 03:45:14
3665 [sshd.c]
3666 these printf args are no longer double; ok deraadt@ markus@
Darren Tucker636ca902004-11-05 20:22:00 +11003667 - djm@cvs.openbsd.org 2004/10/07 10:10:24
3668 [scp.1 sftp.1 ssh.1 ssh_config.5]
3669 document KbdInteractiveDevices; ok markus@
Darren Tucker1dee8682004-11-05 20:26:49 +11003670 - djm@cvs.openbsd.org 2004/10/07 10:12:36
3671 [ssh-agent.c]
3672 don't unlink agent socket when bind() fails, spotted by rich AT
3673 rich-paul.net, ok markus@
Darren Tuckerb2694f02004-11-05 20:27:54 +11003674 - markus@cvs.openbsd.org 2004/10/20 11:48:53
3675 [packet.c ssh1.h]
3676 disconnect for invalid (out of range) message types.
Darren Tucker5d78de62004-11-05 20:35:44 +11003677 - djm@cvs.openbsd.org 2004/10/29 21:47:15
3678 [channels.c channels.h clientloop.c]
3679 fix some window size change bugs for multiplexed connections: windows sizes
3680 were not being updated if they had changed after ~^Z suspends and SIGWINCH
3681 was not being processed unless the first connection had requested a tty;
3682 ok markus
Darren Tuckerce327b62004-11-05 20:38:03 +11003683 - djm@cvs.openbsd.org 2004/10/29 22:53:56
3684 [clientloop.c misc.h readpass.c ssh-agent.c]
3685 factor out common permission-asking code to separate function; ok markus@
Darren Tucker50dbe832004-11-05 20:41:24 +11003686 - djm@cvs.openbsd.org 2004/10/29 23:56:17
3687 [bufaux.c bufaux.h buffer.c buffer.h]
3688 introduce a new buffer API that returns an error rather than fatal()ing
3689 when presented with bad data; ok markus@
Darren Tucker08d04fa2004-11-05 20:42:28 +11003690 - djm@cvs.openbsd.org 2004/10/29 23:57:05
3691 [key.c]
3692 use new buffer API to avoid fatal errors on corrupt keys in authorized_keys
3693 files; ok markus@
Darren Tuckerc0161342004-11-05 20:00:03 +11003694
Darren Tuckera56f1912004-11-02 20:30:54 +1100369520041102
3696 - (dtucker) [configure.ac includes.h] Bug #947: Fix compile error on HP-UX
3697 10.x by testing for conflicts in shadow.h and undef'ing _INCLUDE__STDC__
3698 only if a conflict is detected.
3699
Darren Tucker35beadd2004-10-19 16:33:33 +1000370020041019
3701 - (dtucker) [uidswap.c] Don't test dropping of gids for the root user or
3702 on Cygwin. Cygwin parts from vinschen at redhat com; ok djm@
3703
Damien Millerdaffc6a2004-10-16 18:52:44 +1000370420041016
Damien Miller0e035d82004-10-16 18:53:28 +10003705 - (djm) [auth-pam.c] snprintf->strl*, fix server message length calculations;
3706 ok dtucker@
Damien Millerdaffc6a2004-10-16 18:52:44 +10003707
Darren Tuckerb7d55e32004-10-06 20:09:32 +1000370820041006
3709 - (dtucker) [README.privsep] Bug #939: update info about HP-UX Trusted Mode
3710 and other PAM platforms.
Darren Tuckerdbc22962004-10-06 23:15:44 +10003711 - (dtucker) [monitor_mm.c openbsd-compat/xmmap.c] Bug #940: cast constants
3712 to void * to appease picky compilers (eg Tru64's "cc -std1").
Darren Tuckerb7d55e32004-10-06 20:09:32 +10003713
Darren Tucker59f79c42004-09-30 21:17:08 +1000371420040930
3715 - (dtucker) [configure.ac] Set AC_PACKAGE_NAME. ok djm@
3716
Darren Tucker4127f552004-09-23 21:35:09 +1000371720040923
3718 - (dtucker) [openbsd-compat/bsd-snprintf.c] Previous change was off by one,
3719 which could have caused the justification to be wrong. ok djm@
3720
Darren Tucker50fbb452004-09-21 21:32:12 +1000372120040921
3722 - (dtucker) [openbsd-compat/bsd-snprintf.c] Check for max length too.
3723 ok djm@
Darren Tucker5d596132004-09-21 21:35:55 +10003724 - (dtucker) [contrib/cygwin/ssh-host-config] Update to match current Cygwin
3725 install process. Patch from vinschen at redhat.com.
Darren Tucker50fbb452004-09-21 21:32:12 +10003726
Damien Miller8899ed32004-09-12 15:18:55 +1000372720040912
3728 - (djm) [loginrec.c] Start KNF and tidy up of this long-neglected file.
3729 No change in resultant binary
Damien Miller6b0279c2004-09-12 15:25:17 +10003730 - (djm) [loginrec.c] __func__ifiy
Damien Millerb0aae332004-09-12 15:26:00 +10003731 - (djm) [loginrec.c] xmalloc
Damien Miller2aa6d3c2004-09-12 16:53:04 +10003732 - (djm) [ssh.c sshd.c version.h] Don't divulge portable version in protocol
3733 banner. Suggested by deraadt@, ok mouring@, dtucker@
Darren Tucker623d92f2004-09-12 22:36:15 +10003734 - (dtucker) [configure.ac] Fix incorrect quoting and tests for cross-compile.
3735 Partly by & ok djm@.
Damien Miller8899ed32004-09-12 15:18:55 +10003736
Damien Miller928a19a2004-09-11 15:18:05 +1000373720040911
3738 - (djm) [ssh-agent.c] unifdef some cygwin code; ok dtucker@
Darren Tucker69687f42004-09-11 22:17:26 +10003739 - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #890: Send output from
3740 failing PAM session modules to user then exit, similar to the way
3741 /etc/nologin is handled. ok djm@
Darren Tucker0a7e3c62004-09-11 22:28:01 +10003742 - (dtucker) [auth-pam.c] Relocate sshpam_store_conv(), no code change.
Damien Miller47656792004-09-11 22:42:09 +10003743 - (djm) [auth2-kbdint.c auth2-none.c auth2-passwd.c auth2-pubkey.c]
3744 Make cygwin code more consistent with that which surrounds it
Darren Tucker77fc29e2004-09-11 23:07:03 +10003745 - (dtucker) [auth-pam.c auth.h auth2-none.c auth2.c monitor.c monitor_wrap.c]
3746 Bug #892: Send messages from failing PAM account modules to the client via
3747 SSH2_MSG_USERAUTH_BANNER messages. Note that this will not happen with
3748 SSH2 kbdint authentication, which need to be dealt with separately. ok djm@
Darren Tuckera2a3ed02004-09-11 23:09:53 +10003749 - (dtucker) [session.c] Bug #927: make .hushlogin silent again. ok djm@
Darren Tuckera0c2b392004-09-11 23:26:37 +10003750 - (dtucker) [configure.ac] Bug #321: Add cross-compile support to configure.
3751 Parts by chua at ayrnetworks.com, astrand at lysator.liu.se and me. ok djm@
Darren Tucker5614d8f2004-09-11 23:32:09 +10003752 - (dtucker) [auth-krb5.c] Bug #922: Pass KRB5CCNAME to PAM. From deengert
3753 at anl.gov, ok djm@
Damien Miller928a19a2004-09-11 15:18:05 +10003754
Darren Tucker14c372d2004-08-30 20:42:08 +1000375520040830
3756 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.{c,h}] Bug #915: only
3757 copy required environment variables on Cygwin. Patch from vinschen at
3758 redhat.com, ok djm@
Darren Tucker476b7ec2004-08-30 21:13:49 +10003759 - (dtucker) [regress/Makefile] Clean scp-ssh-wrapper.scp too. Patch from
3760 vinschen at redhat.com.
Darren Tucker25a12342004-08-30 21:33:02 +10003761 - (dtucker) [Makefile.in contrib/ssh-copy-id] Bug #894: Improve portability
3762 of shell constructs. Patch from cjwatson at debian.org.
Darren Tucker14c372d2004-08-30 20:42:08 +10003763
Darren Tuckerf00e51d2004-08-29 16:12:29 +1000376420040829
3765 - (dtucker) [openbsd-compat/getrrsetbyname.c] Prevent getrrsetbyname from
3766 failing with NOMEMORY if no sigs are returned and malloc(0) returns NULL.
3767 From Martin.Kraemer at Fujitsu-Siemens.com; ok djm@
Darren Tuckerf4b43712004-08-29 16:28:39 +10003768 - (dtucker) OpenBSD CVS Sync
3769 - djm@cvs.openbsd.org 2004/08/23 11:48:09
3770 [authfile.c]
3771 fix error path, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
Darren Tuckere6ed8392004-08-29 16:29:44 +10003772 - djm@cvs.openbsd.org 2004/08/23 11:48:47
3773 [channels.c]
3774 typo, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
Darren Tucker27a8f6b2004-08-29 16:31:28 +10003775 - dtucker@cvs.openbsd.org 2004/08/23 14:26:38
3776 [ssh-keysign.c ssh.c]
3777 Use permanently_set_uid() in ssh and ssh-keysign for consistency, matches
3778 change in Portable; ok markus@ (CVS ID sync only)
Darren Tucker34620d62004-08-29 16:32:59 +10003779 - dtucker@cvs.openbsd.org 2004/08/23 14:29:23
3780 [ssh-keysign.c]
3781 Remove duplicate getuid(), suggested by & ok markus@
Darren Tuckerdb693902004-08-29 16:37:24 +10003782 - markus@cvs.openbsd.org 2004/08/26 16:00:55
3783 [ssh.1 sshd.8]
3784 get rid of references to rhosts authentication; with jmc@
Darren Tucker0f56ed12004-08-29 16:38:41 +10003785 - djm@cvs.openbsd.org 2004/08/28 01:01:48
3786 [sshd.c]
3787 don't erroneously close stdin for !reexec case, from Dave Johnson;
3788 ok markus@
Darren Tucker48d99d32004-08-29 17:04:50 +10003789 - (dtucker) [configure.ac] Include sys/stream.h in sys/ptms.h header check,
3790 fixes configure warning on Solaris reported by wknox at mitre.org.
Darren Tucker2a81adc2004-08-29 17:09:34 +10003791 - (dtucker) [regress/multiplex.sh] Skip test on platforms that do not
3792 support FD passing since multiplex requires it. Noted by tim@
Darren Tucker07d30e42004-08-29 17:14:31 +10003793 - (dtucker) [regress/dynamic-forward.sh] Allow time for connections to be torn
3794 down, needed on some platforms, should be harmless on others. Patch from
3795 jason at devrandom.org.
Darren Tucker0521dcb2004-08-29 19:39:09 +10003796 - (dtucker) [regress/scp.sh] Make this work on Cygwin too, which doesn't like
3797 files ending in .exe that aren't binaries; patch from vinschen at redhat.com.
Darren Tucker2a502ff2004-08-29 19:52:32 +10003798 - (dtucker) [Makefile.in] Get regress/Makefile symlink right for out-of-tree
3799 builds too, from vinschen at redhat.com.
Darren Tuckerb17035f2004-08-29 20:33:07 +10003800 - (dtucker) [regress/agent-ptrace.sh] Skip ptrace test on OSF1/DUnix/Tru64
3801 too; patch from cmadams at hiwaay.net.
Darren Tuckercf59d312004-08-29 21:18:09 +10003802 - (dtucker) [configure.ac] Replace non-portable echo \n with extra echo.
Darren Tucker5a88d002004-08-29 21:43:33 +10003803 - (dtucker) [openbsd-compat/port-aix.c] Bug #712: Explicitly check for
3804 accounts with authentication configs that sshd can't support (ie
3805 SYSTEM=NONE and AUTH1=something).
Darren Tuckerf00e51d2004-08-29 16:12:29 +10003806
Darren Tuckerf0c2aea2004-08-28 15:46:57 +1000380720040828
Darren Tucker11bdc012004-08-28 16:17:35 +10003808 - (dtucker) [openbsd-compat/mktemp.c] Remove superfluous Cygwin #ifdef; from
3809 vinschen at redhat.com.
Darren Tuckerf0c2aea2004-08-28 15:46:57 +10003810
Damien Miller7daf0442004-08-23 21:52:08 +1000381120040823
3812 - (djm) [ssh-rand-helper.c] Typo. Found by
3813 Martin.Kraemer AT Fujitsu-Siemens.com
Damien Millerb0419f22004-08-23 21:53:28 +10003814 - (djm) [loginrec.c] Typo and bad args in error messages; Spotted by
3815 Martin.Kraemer AT Fujitsu-Siemens.com
Damien Miller7daf0442004-08-23 21:52:08 +10003816
Darren Tuckerbad5f2d2004-08-17 22:31:32 +1000381720040817
3818 - (dtucker) [regress/README.regress] Note compatibility issues with GNU head.
Damien Miller87c9cca2004-08-17 22:47:41 +10003819 - (djm) OpenBSD CVS Sync
3820 - markus@cvs.openbsd.org 2004/08/16 08:17:01
3821 [version.h]
3822 3.9
Damien Millerd5452852004-08-17 22:49:12 +10003823 - (djm) Crank RPM spec version numbers
Damien Millere17cc752004-08-17 22:50:40 +10003824 - (djm) Release 3.9p1
Darren Tuckerbad5f2d2004-08-17 22:31:32 +10003825
Darren Tucker21dd0892004-08-16 23:12:05 +1000382620040816
3827 - (dtucker) [acconfig.h auth-pam.c configure.ac] Set real uid to non-root
3828 to convince Solaris PAM to honour password complexity rules. ok djm@
3829
Darren Tucker25f60a72004-08-15 17:23:34 +1000383020040815
3831 - (dtucker) [Makefile.in ssh-keysign.c ssh.c] Use permanently_set_uid() since
3832 it does the right thing on all platforms. ok djm@
Damien Miller36f49652004-08-15 18:40:59 +10003833 - (djm) [acconfig.h configure.ac openbsd-compat/Makefile.in
3834 openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-misc.c
3835 openbsd-compat/bsd-misc.h openbsd-compat/openbsd-compat.h] Use smarter
3836 closefrom() replacement from sudo; ok dtucker@
Damien Miller81409592004-08-15 19:12:52 +10003837 - (djm) [loginrec.c] Check that seek succeeded here too; ok dtucker
Darren Tucker0cbc3c62004-08-15 21:01:37 +10003838 - (dtucker) [Makefile.in] Fix typo.
Darren Tucker25f60a72004-08-15 17:23:34 +10003839
Darren Tucker06696932004-08-14 23:55:37 +1000384020040814
3841 - (dtucker) [auth-krb5.c gss-serv-krb5.c openbsd-compat/xmmap.c]
3842 Explicitly set umask for mkstemp; ok djm@
Darren Tucker3d50c9b2004-08-15 00:01:48 +10003843 - (dtucker) [includes.h] Undef _INCLUDE__STDC__ on HP-UX, otherwise
3844 prot.h and shadow.h provide conflicting declarations of getspnam. ok djm@
Darren Tucker397a2f22004-08-15 00:09:11 +10003845 - (dtucker) [loginrec.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]
3846 Plug AIX login recording into login_write so logins will be recorded for
3847 all auth types.
Darren Tucker06696932004-08-14 23:55:37 +10003848
Darren Tucker03669a32004-08-13 18:37:21 +1000384920040813
3850 - (dtucker) [openbsd-compat/bsd-misc.c] Typo in #ifdef; from vinschen at
3851 redhat.com
Darren Tuckerc7a6fc42004-08-13 21:18:00 +10003852- (dtucker) OpenBSD CVS Sync
3853 - avsm@cvs.openbsd.org 2004/08/11 21:43:05
3854 [channels.c channels.h clientloop.c misc.c misc.h serverloop.c ssh-agent.c]
3855 some signed/unsigned int comparison cleanups; markus@ ok
Darren Tuckerfe6649d2004-08-13 21:19:37 +10003856 - avsm@cvs.openbsd.org 2004/08/11 21:44:32
3857 [authfd.c scp.c ssh-keyscan.c]
3858 use atomicio instead of homegrown equivalents or read/write.
3859 markus@ ok
Darren Tuckerbcf27972004-08-13 21:21:47 +10003860 - djm@cvs.openbsd.org 2004/08/12 09:18:24
3861 [sshlogin.c]
3862 typo in error message, spotted by moritz AT jodeit.org (Id sync only)
Darren Tucker0b42e6d2004-08-13 21:22:40 +10003863 - jakob@cvs.openbsd.org 2004/08/12 21:41:13
3864 [ssh-keygen.1 ssh.1]
3865 improve SSHFP documentation; ok deraadt@
Darren Tucker6e370372004-08-13 21:23:25 +10003866 - jmc@cvs.openbsd.org 2004/08/13 00:01:43
3867 [ssh-keygen.1]
3868 kill whitespace at eol;
Darren Tucker1ef0bc02004-08-13 21:29:02 +10003869 - djm@cvs.openbsd.org 2004/08/13 02:51:48
3870 [monitor_fdpass.c]
3871 extra check for no message case; ok markus, deraadt, hshoexer, henning
Darren Tucker137e9c92004-08-13 21:30:24 +10003872 - dtucker@cvs.openbsd.org 2004/08/13 11:09:24
3873 [servconf.c]
3874 Fix line numbers off-by-one in error messages, from tortay at cc.in2p3.fr
3875 ok markus@, djm@
Darren Tucker03669a32004-08-13 18:37:21 +10003876
Darren Tucker8ae66a52004-08-12 22:16:55 +1000387720040812
3878 - (dtucker) [sshd.c] Remove duplicate variable imported during sync.
Darren Tucker6832b832004-08-12 22:36:51 +10003879 - (dtucker) OpenBSD CVS Sync
3880 - markus@cvs.openbsd.org 2004/07/28 08:56:22
3881 [sshd.c]
3882 call setsid() _before_ re-exec
Darren Tucker5cb30ad2004-08-12 22:40:24 +10003883 - markus@cvs.openbsd.org 2004/07/28 09:40:29
3884 [auth.c auth1.c auth2.c cipher.c cipher.h key.c session.c ssh.c
3885 sshconnect1.c]
3886 more s/illegal/invalid/
Darren Tucker9a2bd112004-08-12 22:40:59 +10003887 - djm@cvs.openbsd.org 2004/08/04 10:37:52
3888 [dh.c]
3889 return group14 when no primes found - fixes hang on empty /etc/moduli;
3890 ok markus@
Darren Tucker9fbac712004-08-12 22:41:44 +10003891 - dtucker@cvs.openbsd.org 2004/08/11 11:09:54
3892 [servconf.c]
3893 Fix minor leak; "looks right" deraadt@
Darren Tuckerd8835932004-08-12 22:42:29 +10003894 - dtucker@cvs.openbsd.org 2004/08/11 11:50:09
3895 [sshd.c]
3896 Don't try to close startup_pipe if it's not open; ok djm@
Darren Tucker9c5049a2004-08-12 22:49:00 +10003897 - djm@cvs.openbsd.org 2004/08/11 11:59:22
3898 [sshlogin.c]
3899 check that lseek went were we told it to; ok markus@
3900 (Id sync only, but similar changes are needed in loginrec.c)
Darren Tucker133b7572004-08-12 22:50:03 +10003901 - djm@cvs.openbsd.org 2004/08/11 12:01:16
3902 [sshlogin.c]
3903 make store_lastlog_message() static to appease -Wall; ok markus
Darren Tuckereb578622004-08-12 23:08:14 +10003904 - (dtucker) [sshd.c] Clear loginmsg in postauth monitor, prevents doubling
3905 messages generated before the postauth privsep split.
Darren Tucker8ae66a52004-08-12 22:16:55 +10003906
Damien Millerb5a21442004-07-21 20:44:05 +1000390720040720
Damien Millera22f2d72004-07-21 20:48:24 +10003908 - (djm) OpenBSD CVS Sync
3909 - markus@cvs.openbsd.org 2004/07/21 08:56:12
3910 [auth.c]
3911 s/Illegal user/Invalid user/; many requests; ok djm, millert, niklas,
3912 miod, ...
Damien Miller30d1f842004-07-21 20:48:53 +10003913 - djm@cvs.openbsd.org 2004/07/21 10:33:31
3914 [auth1.c auth2.c]
3915 bz#899: Don't display invalid usernames in setproctitle
Damien Miller10a445b2004-07-21 20:49:39 +10003916 from peak AT argo.troja.mff.cuni.cz; ok markus@
3917 - djm@cvs.openbsd.org 2004/07/21 10:36:23
3918 [gss-serv-krb5.c]
3919 fix function declaration
Damien Miller0670c732004-07-21 21:53:34 +10003920 - djm@cvs.openbsd.org 2004/07/21 11:51:29
3921 [canohost.c]
3922 bz#902: cache remote port so we don't fatal() in auth_log when remote
3923 connection goes away quickly. from peak AT argo.troja.mff.cuni.cz;
3924 ok markus@
Damien Miller2d2ed3d2004-07-21 20:54:47 +10003925 - (djm) [auth-pam.c] Portable parts of bz#899: Don't display invalid
3926 usernames in setproctitle from peak AT argo.troja.mff.cuni.cz;
Damien Millera22f2d72004-07-21 20:48:24 +10003927
392820040720
Damien Miller23a70272004-07-21 10:52:13 +10003929 - (djm) [log.c] bz #111: Escape more control characters when sending data
3930 to syslog; from peak AT argo.troja.mff.cuni.cz
Damien Miller8fe01052004-07-21 11:01:41 +10003931 - (djm) [contrib/redhat/sshd.pam] bz #903: Remove redundant entries; from
3932 peak AT argo.troja.mff.cuni.cz
Damien Millerb5a21442004-07-21 20:44:05 +10003933 - (djm) [regress/README.regress] Remove caveat regarding TCP wrappers, now
3934 that sshd is fixed to behave better; suggested by tim
Damien Miller23a70272004-07-21 10:52:13 +10003935
393620040719
Damien Miller65df1742004-07-19 09:30:38 +10003937 - (djm) [openbsd-compat/bsd-arc4random.c] Discard early keystream, like OpenBSD
3938 ok dtucker@
Damien Millera6fb77f2004-07-19 09:39:11 +10003939 - (djm) [auth-pam.c] Avoid use of xstrdup and friends in conversation function,
3940 instead return PAM_CONV_ERR, avoiding another path to fatal(); ok dtucker@
Tim Rice816bd0d2004-07-19 10:19:26 -07003941 - (tim) [configure.ac] updwtmpx() on OpenServer seems to add duplicate entry.
3942 Report by rac AT tenzing.org
Damien Miller65df1742004-07-19 09:30:38 +10003943
Darren Tuckerba6de952004-07-17 14:07:42 +1000394420040717
3945 - (dtucker) [logintest.c scp.c sftp-server.c sftp.c ssh-add.c ssh-agent.c
3946 ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c ssh.c sshd.c
3947 openbsd-compat/bsd-misc.c] Move "char *__progname" to bsd-misc.c. Reduces
3948 diff vs OpenBSD; ok mouring@, tested by tim@ too.
Darren Tuckerfc959702004-07-17 16:12:08 +10003949 - (dtucker) OpenBSD CVS Sync
3950 - deraadt@cvs.openbsd.org 2004/07/11 17:48:47
3951 [channels.c cipher.c clientloop.c clientloop.h compat.h moduli.c
3952 readconf.c nchan.c pathnames.h progressmeter.c readconf.h servconf.c
3953 session.c sftp-client.c sftp.c ssh-agent.1 ssh-keygen.c ssh.c ssh1.h
3954 sshd.c ttymodes.h]
3955 spaces
Darren Tucker3ca45082004-07-17 16:13:15 +10003956 - brad@cvs.openbsd.org 2004/07/12 23:34:25
3957 [ssh-keyscan.1]
3958 Fix incorrect macro, .I -> .Em
3959 From: Eric S. Raymond <esr at thyrsus dot com>
3960 ok jmc@
Darren Tucker09991742004-07-17 17:05:14 +10003961 - dtucker@cvs.openbsd.org 2004/07/17 05:31:41
3962 [monitor.c monitor_wrap.c session.c session.h sshd.c sshlogin.c]
3963 Move "Last logged in at.." message generation to the monitor, right
3964 before recording the new login. Fixes missing lastlog message when
3965 /var/log/lastlog is not world-readable and incorrect datestamp when
3966 multiple sessions are used (bz #463); much assistance & ok markus@
Darren Tuckerba6de952004-07-17 14:07:42 +10003967
Darren Tucker5d423f42004-07-11 16:54:08 +1000396820040711
3969 - (dtucker) [auth-pam.c] Check for zero from waitpid() too, which allows
3970 the monitor to properly clean up the PAM thread (Debian bug #252676).
3971
Tim Rice3b376f02004-07-09 10:45:26 -0700397220040709
3973 - (tim) [contrib/cygwin/README] add minires-devel requirement. Patch from
3974 vinschen AT redhat.com
3975
Darren Tuckercd99fa02004-07-08 23:08:26 +1000397620040708
3977 - (dtucker) OpenBSD CVS Sync
3978 - dtucker@cvs.openbsd.org 2004/07/03 05:11:33
3979 [sshlogin.c] (RCSID sync only, the corresponding code is not in Portable)
3980 Use '\0' not 0 for string; ok djm@, deraadt@
Darren Tucker042e2e82004-07-08 23:09:42 +10003981 - dtucker@cvs.openbsd.org 2004/07/03 11:02:25
3982 [monitor_wrap.c]
3983 Put s/key functions inside #ifdef SKEY same as monitor.c,
3984 from des@freebsd via bz #330, ok markus@
Darren Tuckere1f17052004-07-08 23:11:44 +10003985 - dtucker@cvs.openbsd.org 2004/07/08 12:47:21
3986 [scp.c]
3987 Prevent scp from skipping the file following a double-error.
3988 bz #863, ok markus@
Darren Tuckercd99fa02004-07-08 23:08:26 +10003989
Darren Tuckerd062da52004-07-02 18:43:09 +1000399020040702
3991 - (dtucker) [mdoc2man.awk] Teach it to ignore .Bk -words, reported by
3992 strube at physik3.gwdg.de a long time ago.
3993
Darren Tucker0a44d1e2004-07-01 09:48:29 +1000399420040701
3995 - (dtucker) [session.c] Call display_loginmsg again after do_pam_session.
3996 Ensures messages from PAM modules are displayed when privsep=no.
Darren Tuckere2ba9c22004-07-01 12:38:14 +10003997 - (dtucker) [auth-pam.c] Bug #705: Make arguments match PAM specs, fixes
3998 warnings on compliant platforms. From paul.a.bolton at bt.com. ok djm@
Darren Tucker1f7e4082004-07-01 14:00:14 +10003999 - (dtucker) [auth-pam.c] Bug #559 (last piece): Pass DISALLOW_NULL_AUTHTOK
4000 to pam_authenticate for challenge-response auth too. Originally from
4001 fcusack at fcusack.com, ok djm@
Tim Ricea5757f02004-07-01 20:41:15 -07004002 - (tim) [buildpkg.sh.in] Add $REV to bump the package revision within
4003 the same version. Handle the case where someone uses --with-privsep-user=
4004 and the user name does not match the group name. ok dtucker@
Darren Tucker0a44d1e2004-07-01 09:48:29 +10004005
Darren Tucker59e06022004-06-30 20:34:31 +1000400620040630
4007 - (dtucker) [auth-pam.c] Check for buggy PAM modules that return a NULL
4008 appdata_ptr to the conversation function. ok djm@
Damien Miller5d1eceb2004-06-30 22:37:57 +10004009 - (djm) OpenBSD CVS Sync
4010 - jmc@cvs.openbsd.org 2004/06/26 09:03:21
4011 [ssh.1]
4012 - remove double word
4013 - rearrange .Bk to keep SYNOPSIS nice
4014 - -M before -m in options description
Damien Miller2234bac2004-06-30 22:38:52 +10004015 - jmc@cvs.openbsd.org 2004/06/26 09:11:14
4016 [ssh_config.5]
4017 punctuation and grammar fixes. also, keep the options in order.
Damien Miller26213e52004-06-30 22:39:34 +10004018 - jmc@cvs.openbsd.org 2004/06/26 09:14:40
4019 [sshd_config.5]
4020 new sentence, new line;
Damien Miller386c6a22004-06-30 22:40:20 +10004021 - avsm@cvs.openbsd.org 2004/06/26 20:07:16
4022 [sshd.c]
4023 initialise some fd variables to -1, djm@ ok
Damien Millera6b1d162004-06-30 22:41:07 +10004024 - djm@cvs.openbsd.org 2004/06/30 08:36:59
4025 [session.c]
4026 unbreak TTY break, diagnosed by darren AT dazwin.com; ok markus@
Darren Tucker59e06022004-06-30 20:34:31 +10004027
Tim Rice52879022004-06-27 20:50:35 -0700402820040627
4029 - (tim) update README files.
Darren Tucker58cef1f2004-06-28 15:45:08 +10004030 - (dtucker) [mdoc2man.awk] Bug #883: correctly recognise .Pa and .Ev macros.
Darren Tuckerf9eb2b02004-06-28 15:52:50 +10004031 - (dtucker) [regress/README.regress] Document new variables.
Darren Tuckere59b5082004-06-28 16:01:19 +10004032 - (dtucker) [acconfig.h configure.ac sftp-server.c] Bug #823: add sftp
4033 rename handling for Linux which returns EPERM for link() on (at least some)
4034 filesystems that do not support hard links. sftp-server will fall back to
4035 stat+rename() in such cases.
Darren Tucker5288cb22004-06-28 18:11:19 +10004036 - (dtucker) [openbsd-compat/port-aix.c] Missing __func__.
Tim Rice52879022004-06-27 20:50:35 -07004037
Damien Miller035a5b42004-06-26 08:16:31 +1000403820040626
4039 - (djm) OpenBSD CVS Sync
4040 - djm@cvs.openbsd.org 2004/06/25 18:43:36
4041 [sshd.c]
4042 fix broken fd handling in the re-exec fallback path, particularly when
4043 /dev/crypto is in use; ok deraadt@ markus@
Damien Miller96d6d7d2004-06-26 09:21:06 +10004044 - djm@cvs.openbsd.org 2004/06/25 23:21:38
4045 [sftp.c]
4046 bz #875: fix bad escape char error message; reported by f_mohr AT yahoo.de
Damien Miller035a5b42004-06-26 08:16:31 +10004047
Darren Tucker645ab752004-06-25 13:33:20 +1000404820040625
4049 - (dtucker) OpenBSD CVS Sync
4050 - djm@cvs.openbsd.org 2004/06/24 19:30:54
4051 [servconf.c servconf.h sshd.c]
4052 re-exec sshd on accept(); initial work, final debugging and ok markus@
Darren Tucker586b0b92004-06-25 13:34:31 +10004053 - djm@cvs.openbsd.org 2004/06/25 01:16:09
4054 [sshd.c]
4055 only perform tcp wrappers checks when the incoming connection is on a
4056 socket. silences useless warnings from regress tests that use
4057 proxycommand="sshd -i". prompted by david@ ok markus@
Darren Tucker977a9d22004-06-25 13:45:18 +10004058 - djm@cvs.openbsd.org 2004/06/24 19:32:00
4059 [regress/Makefile regress/test-exec.sh, added regress/reexec.sh]
4060 regress test for re-exec corner cases
Darren Tuckeref3b47a2004-06-25 13:46:08 +10004061 - djm@cvs.openbsd.org 2004/06/25 01:25:12
4062 [regress/test-exec.sh]
4063 clean reexec-specific junk out of text-exec.sh and simplify; idea markus@
Darren Tuckeraedc1d62004-06-25 17:06:02 +10004064 - dtucker@cvs.openbsd.org 2004/06/25 05:38:48
4065 [sftp-server.c]
4066 Fall back to stat+rename if filesystem doesn't doesn't support hard
4067 links. bz#823, ok djm@
Darren Tucker60bd4092004-06-25 14:03:34 +10004068 - (dtucker) [configure.ac openbsd-compat/misc.c [openbsd-compat/misc.h]
4069 Add closefrom() for platforms that don't have it.
Darren Tucker17c5d032004-06-25 14:22:23 +10004070 - (dtucker) [sshd.c] add line missing from reexec sync.
Darren Tucker645ab752004-06-25 13:33:20 +10004071
Darren Tuckera8c73d32004-06-23 09:17:54 +1000407220040623
4073 - (dtucker) [auth1.c] Ensure do_pam_account is called for Protocol 1
4074 connections with empty passwords. Patch from davidwu at nbttech.com,
4075 ok djm@
Darren Tucker6eabe642004-06-23 09:23:58 +10004076 - (dtucker) OpenBSD CVS Sync
4077 - dtucker@cvs.openbsd.org 2004/06/22 22:42:02
4078 [regress/envpass.sh]
4079 Add quoting for test -z; ok markus@
Darren Tucker6223eea2004-06-23 09:25:02 +10004080 - dtucker@cvs.openbsd.org 2004/06/22 22:45:52
4081 [regress/test-exec.sh]
4082 Add TEST_SSH_SSHD_CONFOPTS and TEST_SSH_SSH_CONFOPTS to allow adding
4083 arbitary options to sshd_config and ssh_config during tests. ok markus@
Darren Tucker3b9c0ad2004-06-23 09:28:20 +10004084 - dtucker@cvs.openbsd.org 2004/06/22 22:55:56
4085 [regress/dynamic-forward.sh regress/test-exec.sh]
4086 Allow setting of port for regress from TEST_SSH_PORT variable; ok markus@
Darren Tuckerede07fb2004-06-24 00:33:48 +10004087 - mouring@cvs.openbsd.org 2004/06/23 00:39:38
4088 [rijndael.c]
4089 -Wshadow fix up s/encrypt/do_encrypt/. OK djm@, markus@
Darren Tuckerb5bc1a62004-06-24 00:34:53 +10004090 - dtucker@cvs.openbsd.org 2004/06/23 14:31:01
4091 [ssh.c]
4092 Fix counting in master/slave when passing environment variables; ok djm@
Darren Tuckere5a604f2004-06-23 12:28:31 +10004093 - (dtucker) [cipher.c] encrypt->do_encrypt inside SSH_OLD_EVP to match
4094 -Wshadow change.
Ben Lindstromca372192004-06-23 04:04:45 +00004095 - (bal) [Makefile.in] Remove opensshd.init on 'make distclean'
Darren Tucker0a9d43d2004-06-23 13:45:24 +10004096 - (dtucker) [auth.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]
4097 Move loginrestrictions test to port-aix.c, replace with a generic hook.
Tim Riceaf4ab6c2004-06-22 20:53:02 -07004098 - (tim) [regress/try-ciphers.sh] "if ! some_command" is not portable.
Ben Lindstromca372192004-06-23 04:04:45 +00004099 - (bal) [contrib/README] Removed "mdoc2man.pl" reference and added
4100 reference to "findssl.sh"
Darren Tuckera8c73d32004-06-23 09:17:54 +10004101
Darren Tucker365433f2004-06-22 12:29:23 +1000410220040622
4103 - (dtucker) OpenBSD CVS Sync
4104 - djm@cvs.openbsd.org 2004/06/20 17:36:59
4105 [ssh.c]
4106 filter passed env vars at slave in connection sharing case; ok markus@
Darren Tuckerb215c5d2004-06-22 12:30:53 +10004107 - djm@cvs.openbsd.org 2004/06/20 18:53:39
4108 [sftp.c]
4109 make "ls -l" listings print user/group names, add "ls -n" to show uid/gid
4110 (like /bin/ls); idea & ok markus@
Darren Tuckerb357afc2004-06-22 12:31:23 +10004111 - djm@cvs.openbsd.org 2004/06/20 19:28:12
4112 [sftp.1]
4113 mention new -n flag
Darren Tucker3f9fdc72004-06-22 12:56:01 +10004114 - avsm@cvs.openbsd.org 2004/06/21 17:36:31
4115 [auth-rsa.c auth2-gss.c auth2-pubkey.c authfile.c canohost.c channels.c
4116 cipher.c dns.c kex.c monitor.c monitor_fdpass.c monitor_wrap.c
4117 monitor_wrap.h nchan.c packet.c progressmeter.c scp.c sftp-server.c sftp.c
4118 ssh-gss.h ssh-keygen.c ssh.c sshconnect.c sshconnect1.c sshlogin.c
4119 sshpty.c]
4120 make ssh -Wshadow clean, no functional changes
4121 markus@ ok
Darren Tucker723e9452004-06-22 12:57:08 +10004122 - djm@cvs.openbsd.org 2004/06/21 17:53:03
4123 [session.c]
4124 fix fd leak for multiple subsystem connections; with markus@
Darren Tuckerefa62f92004-06-22 12:57:44 +10004125 - djm@cvs.openbsd.org 2004/06/21 22:02:58
4126 [log.h]
4127 mark fatal and cleanup exit as __dead; ok markus@
Darren Tuckerb9123452004-06-22 13:06:45 +10004128 - djm@cvs.openbsd.org 2004/06/21 22:04:50
4129 [sftp.c]
4130 introduce sorting for ls, same options as /bin/ls; ok markus@
Darren Tuckera4e9ffa2004-06-22 13:07:58 +10004131 - djm@cvs.openbsd.org 2004/06/21 22:30:45
4132 [sftp.c]
4133 prefix ls option flags with LS_
Darren Tucker15ca6e82004-06-22 13:08:21 +10004134 - djm@cvs.openbsd.org 2004/06/21 22:41:31
4135 [sftp.1]
4136 document sort options
Darren Tucker9a526452004-06-22 13:09:55 +10004137 - djm@cvs.openbsd.org 2004/06/22 01:16:39
4138 [sftp.c]
4139 don't show .files by default in ls, add -a option to turn them back on;
4140 ok markus
Darren Tucker430c6a12004-06-22 13:38:56 +10004141 - markus@cvs.openbsd.org 2004/06/22 03:12:13
4142 [regress/envpass.sh regress/multiplex.sh]
4143 more portable env passing tests
Darren Tuckerb09b6772004-06-22 15:06:46 +10004144 - dtucker@cvs.openbsd.org 2004/06/22 05:05:45
4145 [monitor.c monitor_wrap.c]
4146 Change login->username, will prevent -Wshadow errors in Portable;
4147 ok markus@
Darren Tucker5e4e2722004-06-22 13:26:00 +10004148 - (dtucker) [monitor.c] Fix Portable-specific -Wshadow warnings on "socket".
Darren Tucker59bf4a92004-06-22 13:27:16 +10004149 - (dtucker) [defines.h] Define __dead if not already defined.
Ben Lindstromca372192004-06-23 04:04:45 +00004150 - (bal) [auth-passwd.c auth1.c] Clean up unused variables.
Darren Tucker365433f2004-06-22 12:29:23 +10004151
Tim Ricef7ba8f62004-06-20 10:37:32 -0700415220040620
4153 - (tim) [configure.ac Makefile.in] Only change TEST_SHELL on broken platforms.
4154
Darren Tucker17db1c42004-06-19 12:54:38 +1000415520040619
4156 - (dtucker) [auth-pam.c] Don't use PAM namespace for
4157 pam_password_change_required either.
Tim Rice5af9db92004-06-19 19:31:06 -07004158 - (tim) [configure.ac buildpkg.sh.in contrib/solaris/README] move opensshd
4159 init script to top level directory. Add opensshd.init.in.
4160 Remove contrib/solaris/buildpkg.sh, contrib/solaris/opensshd.in
Darren Tucker17db1c42004-06-19 12:54:38 +10004161
Damien Miller3756dce2004-06-18 01:17:29 +1000416220040618
4163 - (djm) OpenBSD CVS Sync
4164 - djm@cvs.openbsd.org 2004/06/17 14:52:48
4165 [clientloop.c clientloop.h ssh.c]
4166 support environment passing over shared connections; ok markus@
Damien Miller23f07702004-06-18 01:19:03 +10004167 - djm@cvs.openbsd.org 2004/06/17 15:10:14
4168 [clientloop.c misc.h readconf.c readpass.c ssh.c ssh_config.5]
4169 Add option for confirmation (ControlMaster=ask) via ssh-askpass before
4170 opening shared connections; ok markus@
Damien Millere826a8c2004-06-18 01:23:03 +10004171 - djm@cvs.openbsd.org 2004/06/17 14:53:27
4172 [regress/multiplex.sh]
4173 shared connection env passing regress test
Darren Tucker13fbe572004-06-18 14:14:43 +10004174 - (dtucker) [regress/README.regress] Add detail on how to run a single
4175 test from the top-level Makefile.
Darren Tuckerba5c5922004-06-18 16:22:39 +10004176 - (dtucker) OpenBSD CVS Sync
4177 - djm@cvs.openbsd.org 2004/06/17 23:56:57
4178 [ssh.1 ssh.c]
4179 sync usage() and SYNPOSIS with connection sharing changes
Darren Tuckerbd12f172004-06-18 16:23:43 +10004180 - dtucker@cvs.openbsd.org 2004/06/18 06:13:25
4181 [sftp.c]
4182 Use execvp instead of execv so sftp -S ssh works. "makes sense" markus@
Darren Tucker6288dc12004-06-18 16:25:35 +10004183 - dtucker@cvs.openbsd.org 2004/06/18 06:15:51
4184 [multiplex.sh]
4185 Use -S for scp/sftp to force the use of the ssh being tested.
4186 ok djm@,markus@
Damien Miller0809e232004-06-18 22:20:57 +10004187 - (djm) OpenBSD CVS Sync
4188 - djm@cvs.openbsd.org 2004/06/18 10:40:19
4189 [ssh.c]
4190 delay signal handler setup until we have finished talking to the master.
4191 allow interrupting of setup (e.g. if master is stuck); ok markus@
Damien Millerb8ea2482004-06-18 22:21:55 +10004192 - markus@cvs.openbsd.org 2004/06/18 10:55:43
4193 [ssh.1 ssh.c]
4194 trim synopsis for -S, allow -S and -oControlMaster, -MM means 'ask';
4195 ok djm
Damien Miller3bbd8782004-06-18 22:23:22 +10004196 - djm@cvs.openbsd.org 2004/06/18 11:11:54
4197 [channels.c clientloop.c]
4198 Don't explode in clientloop when we receive a bogus channel id, but
4199 also don't generate them to begin with; ok markus@
Damien Miller3756dce2004-06-18 01:17:29 +10004200
Darren Tucker8a2f1b32004-06-17 15:18:32 +1000420120040617
4202 - (dtucker) [regress/scp.sh] diff -N is not portable (but needed for some
4203 platforms), so test if diff understands it. Pointed out by tim@, ok djm@
Darren Tuckerddea13d2004-06-17 16:27:43 +10004204 - (dtucker) OpenBSD CVS Sync regress/
4205 - dtucker@cvs.openbsd.org 2004/06/17 05:51:59
4206 [regress/multiplex.sh]
4207 Remove datafile between and after tests, kill sshd rather than wait;
4208 ok djm@
Darren Tuckerffaa6a52004-06-17 16:32:45 +10004209 - dtucker@cvs.openbsd.org 2004/06/17 06:00:05
4210 [regress/multiplex.sh]
4211 Use DATA and COPY for test data rather than hard-coded paths; ok djm@
Darren Tucker3e86fc42004-06-17 16:34:02 +10004212 - dtucker@cvs.openbsd.org 2004/06/17 06:19:06
4213 [regress/multiplex.sh]
4214 Add small description of failing test to failure message; ok djm@
Darren Tucker10e7f192004-06-17 16:36:27 +10004215 - (dtucker) [regress/multiplex.sh] add EXEEXT for those platforms that need
4216 it.
Darren Tuckera9972e12004-06-17 17:01:21 +10004217 - (dtucker) [regress/multiplex.sh] Increase sleep time to 120 sec (60 is not
4218 enough for slow systems, especially if they don't have a kernel RNG).
Darren Tucker8a2f1b32004-06-17 15:18:32 +10004219
Darren Tuckera7ea5462004-06-16 12:01:15 +1000422020040616
4221 - (dtucker) [openbsd-compat/port-aix.c] Expand whitespace -> tabs. No
4222 code changes.
Darren Tucker4c37ef02004-06-16 20:08:56 +10004223 - (dtucker) OpenBSD CVS Sync regress/
4224 - djm@cvs.openbsd.org 2004/04/27 09:47:30
Darren Tucker9fe95da2004-06-16 20:33:55 +10004225 [regress/Makefile regress/test-exec.sh, added regress/envpass.sh]
Darren Tucker4c37ef02004-06-16 20:08:56 +10004226 regress test for environment passing, SendEnv & AcceptEnv options;
4227 ok markus@
Darren Tucker50433a92004-06-16 20:15:59 +10004228 - dtucker@cvs.openbsd.org 2004/06/13 13:51:02
Darren Tucker9fe95da2004-06-16 20:33:55 +10004229 [regress/Makefile regress/test-exec.sh, added regress/scp-ssh-wrapper.sh
4230 regress/scp.sh]
Darren Tucker50433a92004-06-16 20:15:59 +10004231 Add scp regression test; with & ok markus@
Darren Tuckere7d05832004-06-16 20:22:22 +10004232 - djm@cvs.openbsd.org 2004/06/13 15:04:08
Darren Tucker9fe95da2004-06-16 20:33:55 +10004233 [regress/Makefile regress/test-exec.sh, added regress/envpass.sh]
Darren Tuckere7d05832004-06-16 20:22:22 +10004234 regress test for client multiplexing; ok markus@
Darren Tuckera4039562004-06-16 20:31:18 +10004235 - djm@cvs.openbsd.org 2004/06/13 15:16:54
4236 [regress/test-exec.sh]
4237 remove duplicate setting of $SCP; spotted by markus@
Darren Tucker6f0e35b2004-06-16 23:22:37 +10004238 - dtucker@cvs.openbsd.org 2004/06/16 13:15:09
4239 [regress/scp.sh]
4240 Make scp -r tests use diff -rN not cmp (which won't do dirs. ok markus@
Darren Tucker5711dca2004-06-16 23:23:50 +10004241 - dtucker@cvs.openbsd.org 2004/06/16 13:16:40
Darren Tuckeraf161542004-06-16 23:24:19 +10004242 [regress/multiplex.sh]
Darren Tucker5711dca2004-06-16 23:23:50 +10004243 Silence multiplex sftp and scp tests. ok markus@
Darren Tucker7a06f622004-06-16 21:08:32 +10004244 - (dtucker) [regress/test-exec.sh]
4245 Move Portable-only StrictModes to top of list to make syncs easier.
4246 - (dtucker) [regress/README.regress]
4247 Add $TEST_SHELL to readme.
Darren Tuckera7ea5462004-06-16 12:01:15 +10004248
Damien Miller350327c2004-06-15 10:24:13 +1000424920040615
4250 - (djm) OpenBSD CVS Sync
4251 - djm@cvs.openbsd.org 2004/05/26 08:59:57
4252 [sftp.c]
4253 exit -> _exit in forked child on error; from andrushock AT korovino.net
Damien Miller3e4dffb2004-06-15 10:27:15 +10004254 - markus@cvs.openbsd.org 2004/05/26 23:02:39
4255 [channels.c]
4256 missing freeaddrinfo; Andrey Matveev
Damien Miller33793852004-06-15 10:27:55 +10004257 - dtucker@cvs.openbsd.org 2004/05/27 00:50:13
4258 [readconf.c]
4259 Kill dead code after fatal(); ok djm@
Damien Miller16ea6492004-06-15 10:28:24 +10004260 - dtucker@cvs.openbsd.org 2004/06/01 14:20:45
4261 [auth2-chall.c]
4262 Remove redundant #include; ok markus@
Damien Miller7cf17eb2004-06-15 10:28:56 +10004263 - pedro@cvs.openbsd.org 2004/06/03 12:22:20
4264 [sftp-client.c sftp.c]
4265 initialize pointers, ok markus@
Damien Millerf675fc42004-06-15 10:30:09 +10004266 - djm@cvs.openbsd.org 2004/06/13 12:53:24
4267 [dh.c dh.h kex.c kex.h kexdhc.c kexdhs.c monitor.c myproposal.h]
4268 [ssh-keyscan.c sshconnect2.c sshd.c]
4269 implement diffie-hellman-group14-sha1 kex method (trivial extension to
4270 existing diffie-hellman-group1-sha1); ok markus@
Damien Miller05202ff2004-06-15 10:30:39 +10004271 - dtucker@cvs.openbsd.org 2004/06/13 14:01:42
4272 [ssh.1 ssh_config.5 sshd_config.5]
4273 List supported ciphers in man pages, tidy up ssh -c;
4274 "looks fine" jmc@, ok markus@
Damien Miller0e220db2004-06-15 10:34:08 +10004275 - djm@cvs.openbsd.org 2004/06/13 15:03:02
4276 [channels.c channels.h clientloop.c clientloop.h includes.h readconf.c]
4277 [readconf.h scp.1 sftp.1 ssh.1 ssh.c ssh_config.5]
4278 implement session multiplexing in the client (the server has supported
4279 this since 2.0); ok markus@
Damien Miller232711f2004-06-15 10:35:30 +10004280 - djm@cvs.openbsd.org 2004/06/14 01:44:39
4281 [channels.c clientloop.c misc.c misc.h packet.c ssh-agent.c ssh-keyscan.c]
4282 [sshd.c]
Damien Miller03e66f62004-06-15 15:47:51 +10004283 set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@
4284 - djm@cvs.openbsd.org 2004/06/15 05:45:04
4285 [clientloop.c]
4286 missed one unset_nonblock; spotted by Tim Rice
Damien Miller5e6f4db2004-06-15 10:44:40 +10004287 - (djm) Fix Makefile.in for connection sharing changes
Damien Miller07b6ff12004-06-15 11:14:45 +10004288 - (djm) [ssh.c] Use separate var for address length
Damien Miller350327c2004-06-15 10:24:13 +10004289
Darren Tucker94befab2004-06-03 14:53:12 +1000429020040603
4291 - (dtucker) [auth-pam.c] Don't use pam_* namespace for sshd's PAM functions.
4292 ok djm@
4293
Damien Miller26314f62004-06-01 11:28:20 +1000429420040601
4295 - (djm) [auth-pam.c] Add copyright for local changes
4296
Darren Tucker450a1582004-05-30 20:43:59 +1000429720040530
Darren Tuckere061b152004-05-30 22:04:56 +10004298 - (dtucker) [auth-pam.c auth-pam.h auth-passwd.c] Bug #874: Re-add PAM
Darren Tucker450a1582004-05-30 20:43:59 +10004299 support for PasswordAuthentication=yes. ok djm@
Darren Tuckere061b152004-05-30 22:04:56 +10004300 - (dtucker) [auth-pam.c] Use an invalid password for root if
4301 PermitRootLogin != yes or the login is invalid, to prevent leaking
4302 information. Based on Openwall's owl-always-auth patch. ok djm@
Tim Rice6f1f7582004-05-30 21:38:51 -07004303 - (tim) [configure.ac Makefile.in] Add support for "make package" ok djm@
4304 - (tim) [buildpkg.sh.in] New file. A more flexible version of
4305 contrib/solaris/buildpkg.sh used for "make package".
Tim Rice2d2b9f72004-05-30 21:48:40 -07004306 - (tim) [buildpkg.sh.in] Last minute fix didn't make it in the .in file.
Darren Tucker450a1582004-05-30 20:43:59 +10004307
Darren Tucker0ffe6382004-05-27 09:59:31 +1000430820040527
4309 - (dtucker) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec
4310 contrib/README CREDITS INSTALL] Bug #873: Correct URLs for x11-ssh-askpass
4311 and Jim Knoble's email address , from Jim himself.
4312
Darren Tuckercdf547a2004-05-24 10:12:19 +1000431320040524
4314 - (dtucker) OpenBSD CVS Sync
4315 - djm@cvs.openbsd.org 2004/05/19 12:17:33
4316 [sftp-client.c sftp.c]
4317 gracefully abort transfers on receipt of SIGINT, also ignore SIGINT while
4318 waiting for a command; ok markus@
Darren Tuckere1675822004-05-24 10:13:07 +10004319 - dtucker@cvs.openbsd.org 2004/05/20 10:58:05
4320 [clientloop.c]
4321 Trivial type fix 0 -> '\0'; ok markus@
Darren Tuckere4ab1152004-05-24 10:14:24 +10004322 - markus@cvs.openbsd.org 2004/05/21 08:43:03
4323 [kex.h moduli.c tildexpand.c]
4324 add prototypes for -Wall; ok djm
Darren Tuckere7066df2004-05-24 10:18:05 +10004325 - djm@cvs.openbsd.org 2004/05/21 11:33:11
4326 [channels.c channels.h clientloop.c serverloop.c ssh.1]
Darren Tuckerb53355e2004-05-24 11:55:36 +10004327 bz #756: add support for the cancel-tcpip-forward request for the server
4328 and the client (through the ~C commandline). reported by z3p AT
4329 twistedmatrix.com; ok markus@
Darren Tucker1973c882004-05-24 10:34:36 +10004330 - djm@cvs.openbsd.org 2004/05/22 06:32:12
4331 [clientloop.c ssh.1]
4332 use '-h' for help in ~C commandline instead of '-?'; inspired by jmc@
Darren Tuckere534e122004-05-24 10:35:14 +10004333 - jmc@cvs.openbsd.org 2004/05/22 16:01:05
4334 [ssh.1]
4335 kill whitespace at eol;
Darren Tucker89413db2004-05-24 10:36:23 +10004336 - dtucker@cvs.openbsd.org 2004/05/23 23:59:53
Darren Tuckerb53355e2004-05-24 11:55:36 +10004337 [auth.c auth.h auth1.c auth2.c servconf.c servconf.h sshd_config
4338 sshd_config.5]
Darren Tucker89413db2004-05-24 10:36:23 +10004339 Add MaxAuthTries sshd config option; ok markus@
Darren Tuckerb53355e2004-05-24 11:55:36 +10004340 - (dtucker) [auth-pam.c] Bug #839: Ensure that pam authentication "thread"
4341 is terminated if the privsep slave exits during keyboard-interactive
4342 authentication. ok djm@
Darren Tucker12984962004-05-24 13:37:13 +10004343 - (dtucker) [sshd.c] Fix typo in comment.
Darren Tuckercdf547a2004-05-24 10:12:19 +10004344
Damien Miller701d0512004-05-23 11:47:58 +1000434520040523
Damien Millerb4097182004-05-23 14:09:40 +10004346 - (djm) [sshd_config] Explain consequences of UsePAM=yes a little better in
4347 sshd_config; ok dtucker@
4348 - (djm) [configure.ac] Warn if the system has no known way of figuring out
4349 which user is on the other end of a Unix domain socket; ok dtucker@
Ben Lindstromefec7c22004-05-23 06:22:27 +00004350 - (bal) [openbsd-compat/sys-queue.h] Reintroduce machinary to handle
4351 old/broken/incomplete <sys/queue.h>.
Damien Miller701d0512004-05-23 11:47:58 +10004352
Darren Tucker8e968a52004-05-13 11:56:16 +1000435320040513
4354 - (dtucker) [configure.ac] Bug #867: Additional tests for res_query in
4355 libresolv, fixes problems detecting it on some platforms
4356 (eg Linux/x86-64). From Kurt Roeckx via Debian, ok mouring@
Darren Tucker2e578f62004-05-13 13:03:04 +10004357 - (dtucker) OpenBSD CVS Sync
4358 - jmc@cvs.openbsd.org 2004/05/04 18:36:07
4359 [scp.1]
4360 SendEnv here too;
Darren Tuckerdcf6ec42004-05-13 13:03:56 +10004361 - jmc@cvs.openbsd.org 2004/05/06 11:24:23
4362 [ssh_config.5]
4363 typo from John Cosimano (PR 3770);
Darren Tucker06f2bd82004-05-13 16:06:46 +10004364 - deraadt@cvs.openbsd.org 2004/05/08 00:01:37
4365 [auth.c clientloop.c misc.h servconf.c ssh.c sshpty.h sshtty.c
4366 tildexpand.c], removed: sshtty.h tildexpand.h
4367 make two tiny header files go away; djm ok
Darren Tuckere608ca22004-05-13 16:15:47 +10004368 - djm@cvs.openbsd.org 2004/05/08 00:21:31
4369 [clientloop.c misc.h readpass.c scard.c ssh-add.c ssh-agent.c ssh-keygen.c
4370 sshconnect.c sshconnect1.c sshconnect2.c] removed: readpass.h
4371 kill a tiny header; ok deraadt@
Darren Tucker770fc012004-05-13 16:24:32 +10004372 - djm@cvs.openbsd.org 2004/05/09 00:06:47
4373 [moduli.c ssh-keygen.c] removed: moduli.h
4374 zap another tiny header; ok deraadt@
Darren Tuckere14e0052004-05-13 16:30:44 +10004375 - djm@cvs.openbsd.org 2004/05/09 01:19:28
4376 [OVERVIEW auth-rsa.c auth1.c kex.c monitor.c session.c sshconnect1.c
4377 sshd.c] removed: mpaux.c mpaux.h
4378 kill some more tiny files; ok deraadt@
Darren Tuckerb42714e2004-05-13 16:31:48 +10004379 - djm@cvs.openbsd.org 2004/05/09 01:26:48
4380 [kex.c]
4381 don't overwrite what we are trying to compute
Darren Tucker1f8311c2004-05-13 16:39:33 +10004382 - deraadt@cvs.openbsd.org 2004/05/11 19:01:43
4383 [auth.c auth2-none.c authfile.c channels.c monitor.c monitor_mm.c
4384 packet.c packet.h progressmeter.c session.c openbsd-compat/xmmap.c]
4385 improve some code lint did not like; djm millert ok
Darren Tuckera86b4532004-05-13 16:45:46 +10004386 - dtucker@cvs.openbsd.org 2004/05/13 02:47:50
4387 [ssh-agent.1]
4388 Add examples to ssh-agent.1, bz#481 from Ralf Hauser; ok deraadt@
Darren Tucker1dcff9a2004-05-13 16:51:40 +10004389 - (dtucker) [sshd.8] Bug #843: Add warning about PasswordAuthentication to
4390 UsePAM section. Parts from djm@ and jmc@.
Darren Tuckerb6db1722004-05-13 17:29:35 +10004391 - (dtucker) [auth-pam.c scard-opensc.c] Tinderbox says auth-pam.c uses
4392 readpass.h, grep says scard-opensc.c does too. Replace with misc.h.
Darren Tuckercc268552004-05-13 20:10:38 +10004393 - (dtucker) [openbsd-compat/getrrsetbyname.c] Check that HAVE_DECL_H_ERROR
4394 is defined before using.
Darren Tucker991d95f2004-05-13 20:24:10 +10004395 - (dtucker) [openbsd-compat/getrrsetbyname.c] Fix typo too: HAVE_DECL_H_ERROR
4396 -> HAVE_DECL_H_ERRNO.
Darren Tucker8e968a52004-05-13 11:56:16 +10004397
439820040502
Darren Tucker47abce42004-05-02 22:09:00 +10004399 - (dtucker) OpenBSD CVS Sync
4400 - djm@cvs.openbsd.org 2004/04/22 11:56:57
4401 [moduli.c]
4402 Bugzilla #850: Sophie Germain is the correct name of the French
4403 mathematician, "Sophie Germaine" isn't; from Luc.Maisonobe@c-s.fr
Darren Tucker46bc0752004-05-02 22:11:30 +10004404 - djm@cvs.openbsd.org 2004/04/27 09:46:37
4405 [readconf.c readconf.h servconf.c servconf.h session.c session.h ssh.c
4406 ssh_config.5 sshd_config.5]
4407 bz #815: implement ability to pass specified environment variables from
4408 the client to the server; ok markus@
Darren Tucker1e0c9bf2004-05-02 22:12:48 +10004409 - djm@cvs.openbsd.org 2004/04/28 05:17:10
4410 [ssh_config.5 sshd_config.5]
4411 manpage fixes in envpass stuff from Brian Poole (raj AT cerias.purdue.edu)
Darren Tuckerb2a601c2004-05-02 22:13:20 +10004412 - jmc@cvs.openbsd.org 2004/04/28 07:02:56
4413 [sshd_config.5]
4414 remove unnecessary .Pp;
Darren Tucker7a6c0662004-05-02 22:14:03 +10004415 - jmc@cvs.openbsd.org 2004/04/28 07:13:42
4416 [sftp.1 ssh.1]
4417 add SendEnv to -o list;
Darren Tucker097e1e92004-05-02 22:15:08 +10004418 - dtucker@cvs.openbsd.org 2004/05/02 11:54:31
4419 [sshd.8]
4420 Man page grammar fix (bz #858), from damerell at chiark.greenend.org.uk
4421 via Debian; ok djm@
Darren Tuckeredae0ec2004-05-02 22:15:52 +10004422 - dtucker@cvs.openbsd.org 2004/05/02 11:57:52
4423 [ssh.1]
4424 ConnectionTimeout -> ConnectTimeout, from m.a.ellis at ncl.ac.uk via
4425 Debian. ok djm@
Darren Tucker3d5cbb72004-05-03 09:13:15 +10004426 - dtucker@cvs.openbsd.org 2004/05/02 23:02:17
4427 [sftp.1]
4428 ConnectionTimeout -> ConnectTimeout here too, pointed out by jmc@
Darren Tuckerc0796d72004-05-03 09:19:03 +10004429 - dtucker@cvs.openbsd.org 2004/05/02 23:17:51
4430 [scp.1]
4431 ConnectionTimeout -> ConnectTimeout for scp.1 too.
Darren Tucker47abce42004-05-02 22:09:00 +10004432
Darren Tucker5bb14002004-04-23 18:53:10 +1000443320040423
4434 - (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Declare h_errno
4435 as extern int if not already declared. Fixes compile errors on old SCO
4436 platforms. ok tim@
Darren Tucker7749c512004-04-23 18:57:13 +10004437 - (dtucker) [README.platform] List prereqs for building on Cygwin.
Darren Tucker5bb14002004-04-23 18:53:10 +10004438
Damien Miller752e4e62004-04-21 12:29:13 +1000443920040421
4440 - (djm) Update config.guess and config.sub to autoconf-2.59 versions; ok tim@
4441
Damien Miller0b51a522004-04-20 20:07:19 +1000444220040420
4443 - (djm) OpenBSD CVS Sync
4444 - henning@cvs.openbsd.org 2004/04/08 16:08:21
4445 [sshconnect2.c]
Damien Miller50bec892004-04-20 20:20:40 +10004446 swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what
4447 FreeBSD and NetBSD do.
Damien Miller0b51a522004-04-20 20:07:19 +10004448 ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@
Damien Miller57a44762004-04-20 20:11:57 +10004449 - djm@cvs.openbsd.org 2004/04/18 23:10:26
4450 [readconf.c readconf.h ssh-keysign.c ssh.c]
4451 perform strict ownership and modes checks for ~/.ssh/config files,
4452 as these can be used to execute arbitrary programs; ok markus@
4453 NB. ssh will now exit when it detects a config with poor permissions
Damien Millerc970cb92004-04-20 20:12:53 +10004454 - djm@cvs.openbsd.org 2004/04/19 13:02:40
4455 [ssh.1 ssh_config.5]
4456 document strict permission checks on ~/.ssh/config; prompted by,
4457 with & ok jmc@
Damien Miller1a812582004-04-20 20:13:32 +10004458 - jmc@cvs.openbsd.org 2004/04/19 16:12:14
4459 [ssh_config.5]
4460 kill whitespace at eol;
Damien Miller914420f2004-04-20 20:14:07 +10004461 - djm@cvs.openbsd.org 2004/04/19 21:51:49
4462 [ssh.c]
4463 fix idiot typo that i introduced in my last commit;
4464 spotted by cschneid AT cschneid.com
Damien Miller50bec892004-04-20 20:20:40 +10004465 - (djm) [openbsd-compat/sys-queue.h] Sync with OpenBSD, needed for
4466 above change
Damien Miller5561e0b2004-04-20 20:28:55 +10004467 - (djm) [configure.ac] Check whether libroken is required when building
4468 with Heimdal
Damien Miller0b51a522004-04-20 20:07:19 +10004469
Darren Tucker9929d1f2004-04-19 22:01:37 +1000447020040419
4471 - (dtucker) OpenBSD CVS Sync
4472 - dtucker@cvs.openbsd.org 2004/02/29 22:04:45
4473 [regress/login-timeout.sh]
4474 Use sudo when restarting daemon during test. ok markus@
Darren Tucker0a74ae72004-04-19 22:04:21 +10004475 - dtucker@cvs.openbsd.org 2004/03/08 10:17:12
4476 [regress/login-timeout.sh]
4477 Missing OBJ, from tim@. ok markus@ (Already fixed, ID sync only)
Darren Tuckerdca6a4d2004-04-19 22:10:52 +10004478 - djm@cvs.openbsd.org 2004/03/30 12:41:56
4479 [sftp-client.c]
4480 sync comment with reality
Darren Tuckerd04121f2004-04-19 22:16:53 +10004481 - djm@cvs.openbsd.org 2004/03/31 21:58:47
4482 [canohost.c]
4483 don't skip ip options check when UseDNS=no; ok markus@ (ID sync only)
Darren Tuckerbddc2b02004-04-19 23:50:16 +10004484 - markus@cvs.openbsd.org 2004/04/01 12:19:57
4485 [scp.c]
4486 limit trust between local and remote rcp/scp process,
4487 noticed by lcamtuf; ok deraadt@, djm@
Darren Tucker9929d1f2004-04-19 22:01:37 +10004488
Darren Tucker2a9bf4b2004-04-18 11:00:26 +1000448920040418
4490 - (dtucker) [auth-pam.c] Log username and source host for failed PAM
4491 authentication attempts. With & ok djm@
Damien Miller2eb42362004-04-18 21:15:43 +10004492 - (djm) [openbsd-compat/bsd-cygwin_util.c] Recent versions of Cygwin allow
4493 change of user context without a password, so relax auth method
4494 restrictions; from vinschen AT redhat.com; ok dtucker@
Darren Tucker2a9bf4b2004-04-18 11:00:26 +10004495
Darren Tuckerc99a19b2004-04-16 17:58:28 +1000449620040416
4497 - (dtucker) [regress/sftp-cmds.sh] Skip quoting test on Cygwin, since
4498 FAT/NTFS does not permit quotes in filenames. From vinschen at redhat.com
Damien Miller9c870f92004-04-16 22:47:55 +10004499 - (djm) [auth-krb5.c auth.h session.c] Explicitly refer to Kerberos ccache
4500 file using FILE: method, fixes problems on Mac OSX.
4501 Patch from simon@sxw.org.uk; ok dtucker@
Tim Ricefe6d5aa2004-04-16 20:03:07 -07004502 - (tim) [configure.ac] Set SETEUID_BREAKS_SETUID, BROKEN_SETREUID and
4503 BROKEN_SETREGID for SCO OpenServer 3
Darren Tuckerc99a19b2004-04-16 17:58:28 +10004504
Darren Tucker96cc26b2004-04-14 13:04:35 +1000450520040412
4506 - (dtucker) [sshd_config.5] Add PermitRootLogin without-password warning
4507 from bug #701 (text from jfh at cise.ufl.edu).
Darren Tucker3b908f62004-04-14 15:26:39 +10004508 - (dtucker) [acconfig.h configure.ac defines.h] Bug #673: check for 4-arg
4509 skeychallenge(), eg on NetBSD. ok mouring@
Darren Tucker06a8cfe2004-04-14 17:24:30 +10004510 - (dtucker) [auth-skey.c defines.h monitor.c] Make skeychallenge explicitly
4511 4-arg, with compatibility for 3-arg versions. From djm@, ok me.
Damien Miller0ac45002004-04-14 20:14:26 +10004512 - (djm) [configure.ac] Fix detection of libwrap on OpenBSD; ok dtucker@
Darren Tucker96cc26b2004-04-14 13:04:35 +10004513
Darren Tucker4d2f3612004-04-08 10:57:05 +1000451420040408
4515 - (dtucker) [loginrec.c] Use UT_LINESIZE if available, prevents truncating
4516 pty name on Linux 2.6.x systems. Patch from jpe at eisenmenger.org.
Ben Lindstrom1b9f2a62004-04-08 05:11:03 +00004517 - (bal) [monitor.c monitor_wrap.c] Second try. Put the zlib.h headers
4518 back and #undef TARGET_OS_MAC instead. (Bug report pending with Apple)
Darren Tucker11f18292004-04-08 16:16:06 +10004519 - (dtucker) [defines.h loginrec.c] Define UT_LINESIZE if not defined and
4520 simplify loginrec.c. ok tim@
Ben Lindstrom036768e2004-04-08 16:12:30 +00004521 - (bal) [monitor.c monitor_wrap.c] Ok.. Last time. Promise. Tim suggested
4522 limiting scope and dtucker@ agreed.
Darren Tucker4d2f3612004-04-08 10:57:05 +10004523
Darren Tuckerac7c9982004-04-07 08:04:09 +1000452420040407
4525 - (dtucker) [session.c] Flush stdout after displaying loginmsg. From
4526 f_mohr at yahoo.de.
Ben Lindstroma8104b52004-04-07 04:16:11 +00004527 - (bal) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Check to see
4528 if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X)
4529 are starting to restrict it as internal since it is not needed by
4530 developers any more. (Patch based on Apple tree)
4531 - (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since
4532 krb5 on MacOS/X conflicts. There may be a better solution, but this will
4533 work for now.
Darren Tuckerac7c9982004-04-07 08:04:09 +10004534
Darren Tucker8db9a0f2004-04-06 21:31:12 +1000453520040406
4536 - (dtucker) [acconfig.h configure.ac defines.h] Bug #820: don't use
4537 updwtmpx() on IRIX since it seems to clobber utmp. ok djm@
Darren Tucker4398cf52004-04-06 21:39:02 +10004538 - (dtucker) [configure.ac] Bug #816, #748 (again): Attempt to detect
4539 broken getaddrinfo and friends on HP-UX. ok djm@
Darren Tucker8db9a0f2004-04-06 21:31:12 +10004540
Darren Tucker809031f2004-03-30 14:03:45 +1000454120040330
4542 - (dtucker) [configure.ac] Bug #811: Use "!" for LOCKED_PASSWD_PREFIX on
4543 Linuxes, since that's what many use. ok djm@
Darren Tucker17addf02004-03-30 20:57:57 +10004544 - (dtucker) [auth-pam.c] rename the_authctxt to sshpam_authctxt in auth-pam.c
4545 to reduce potential confusion with the one in sshd.c. ok djm@
Damien Millerccea0202004-03-31 15:17:54 +10004546 - (djm) Bug #825: Fix ip_options_check() for mapped IPv4/IPv6 connection;
4547 with & ok dtucker@
Darren Tucker809031f2004-03-30 14:03:45 +10004548
Darren Tuckerb3850592004-03-27 16:44:21 +1100454920040327
4550 - (dtucker) [session.c] Bug #817: Clear loginmsg after fork to prevent
4551 duplicate login messages for mutli-session logins. ok djm@
4552
Damien Miller3df755e2004-03-22 09:34:26 +1100455320040322
Damien Millerbfba3542004-03-22 09:29:57 +11004554 - (djm) [sshd.c] Drop supplemental groups if started as root
Damien Miller3df755e2004-03-22 09:34:26 +11004555 - (djm) OpenBSD CVS Sync
4556 - markus@cvs.openbsd.org 2004/03/09 22:11:05
4557 [ssh.c]
4558 increase x11 cookie lifetime to 20 minutes; ok djm
Damien Miller50955102004-03-22 09:34:58 +11004559 - markus@cvs.openbsd.org 2004/03/10 09:45:06
4560 [ssh.c]
4561 trim usage to match ssh(1) and look more like unix. ok djm@
Damien Millerb4087862004-03-22 09:35:21 +11004562 - markus@cvs.openbsd.org 2004/03/11 08:36:26
4563 [sshd.c]
4564 trim usage; ok deraadt
Damien Miller0c889cd2004-03-22 09:36:00 +11004565 - markus@cvs.openbsd.org 2004/03/11 10:21:17
4566 [ssh.c sshd.c]
4567 ssh, sshd: sync version output, ok djm
Damien Milleraed7cee2004-03-22 09:39:09 +11004568 - markus@cvs.openbsd.org 2004/03/20 10:40:59
4569 [version.h]
4570 3.8.1
Damien Miller154e8b82004-03-22 09:40:01 +11004571 - (djm) Crank RPM spec versions
Damien Millerbfba3542004-03-22 09:29:57 +11004572
Damien Miller4fefe242004-03-11 14:20:10 +1100457320040311
4574 - (djm) [configure.ac] Add standard license to configure.ac; ok ben, dtucker
4575
Darren Tucker7c991ab2004-03-10 21:06:32 +1100457620040310
4577 - (dtucker) [openbsd-compat/fake-rfc2553.h] Bug #812: #undef getaddrinfo
4578 before redefining it, silences warnings on Tru64.
4579
Darren Tucker112aaac2004-03-08 22:13:12 +1100458020040308
4581 - (dtucker) [sshd.c] Back out rev 1.270 as it caused problems on some
Darren Tuckerdbf7a742004-03-08 23:04:06 +11004582 platforms (eg SCO, HP-UX) with logging in the wrong TZ. ok djm@
4583 - (dtucker) [configure.ac sshd.c openbsd-compat/bsd-misc.h
4584 openbsd-compat/setenv.c] Unset KRB5CCNAME on AIX to prevent it from being
4585 inherited by the child. ok djm@
4586 - (dtucker) [auth-pam.c auth-pam.h auth1.c auth2.c monitor.c monitor_wrap.c
4587 monitor_wrap.h] Bug #808: Ensure force_pwchange is correctly initialized
Damien Miller57aae982004-03-08 23:11:25 +11004588 even if keyboard-interactive is not used by the client. Prevents
4589 segfaults in some cases where the user's password is expired (note this
4590 is not considered a security exposure). ok djm@
4591 - (djm) OpenBSD CVS Sync
4592 - markus@cvs.openbsd.org 2004/03/03 06:47:52
4593 [sshd.c]
4594 change proctiltle after accept(2); ok henning, deraadt, djm
Damien Miller9ba30692004-03-08 23:12:02 +11004595 - djm@cvs.openbsd.org 2004/03/03 09:30:42
4596 [sftp-client.c]
4597 Don't print duplicate messages when progressmeter is off
4598 Spotted by job317 AT mailvault.com; ok markus@
Damien Millerc0f27d82004-03-08 23:12:19 +11004599 - djm@cvs.openbsd.org 2004/03/03 09:31:20
4600 [sftp.c]
4601 Fix initialisation of progress meter; ok markus@
Damien Millerbd394c32004-03-08 23:12:36 +11004602 - markus@cvs.openbsd.org 2004/03/05 10:53:58
4603 [readconf.c readconf.h scp.1 sftp.1 ssh.1 ssh_config.5 sshconnect2.c]
4604 add IdentitiesOnly; ok djm@, pb@
Damien Miller3b513012004-03-08 23:13:00 +11004605 - djm@cvs.openbsd.org 2004/03/08 09:38:05
4606 [ssh-keyscan.c]
4607 explicitly initialise remote_major and remote_minor.
4608 from cjwatson AT debian.org; ok markus@
Damien Miller8448e662004-03-08 23:13:15 +11004609 - dtucker@cvs.openbsd.org 2004/03/08 10:18:57
4610 [sshd_config.5]
4611 Document KerberosGetAFSToken; ok markus@
Tim Riceaa538322004-03-08 12:12:18 -08004612 - (tim) [regress/README.regress] Document ssh-rand-helper issue. ok bal
Darren Tucker112aaac2004-03-08 22:13:12 +11004613
Tim Ricef45eff22004-03-07 10:40:01 -0800461420040307
4615 - (tim) [regress/login-timeout.sh] fix building outside of source tree.
4616
Darren Tucker4b385d42004-03-04 19:54:10 +1100461720040304
4618 - (dtucker) [auth-pam.c] Don't try to export PAM when compiled with
4619 -DUSE_POSIX_THREADS. From antoine.verheijen at ualbert ca. ok djm@
Darren Tuckerb9b60212004-03-04 20:03:54 +11004620 - (dtucker) [auth-pam.c] Reset signal status when starting pam auth thread,
4621 prevent hanging during PAM keyboard-interactive authentications. ok djm@
Darren Tucker91bf45c2004-03-04 22:59:36 +11004622 - (dtucker) [auth-passwd.c auth-sia.c auth-sia.h defines.h
4623 openbsd-compat/xcrypt.c] Bug #802: Fix build error on Tru64 when
4624 configured --with-osfsia. ok djm@
Darren Tucker4b385d42004-03-04 19:54:10 +11004625
Darren Tucker6e26bf12004-03-04 19:47:29 +1100462620040303
Damien Miller6c4914a2004-03-03 11:08:59 +11004627 - (djm) [configure.ac ssh-agent.c] Use prctl to prevent ptrace on ssh-agent
4628 ok dtucker
4629
Darren Tuckerd5920482004-02-29 20:11:30 +1100463020040229
Tim Ricead4a1882004-02-29 15:53:37 -08004631 - (tim) [configure.ac] Put back bits mistakenly removed from Rev 1.188
4632
463320040229
Darren Tuckerd5920482004-02-29 20:11:30 +11004634 - (dtucker) OpenBSD CVS Sync
4635 - djm@cvs.openbsd.org 2004/02/25 00:22:45
4636 [sshd.c]
4637 typo in comment
Darren Tuckerfc113c92004-02-29 20:12:33 +11004638 - dtucker@cvs.openbsd.org 2004/02/27 22:42:47
4639 [dh.c]
4640 Prevent sshd from sending DH groups with a primitive generator of zero or
4641 one, even if they are listed in /etc/moduli. ok markus@
Darren Tuckerc56c7ef2004-02-29 20:13:34 +11004642 - dtucker@cvs.openbsd.org 2004/02/27 22:44:56
4643 [dh.c]
4644 Make /etc/moduli line buffer big enough for 8kbit primes, in case anyone
4645 ever uses one. ok markus@
Darren Tuckereffc84c2004-02-29 20:15:08 +11004646 - dtucker@cvs.openbsd.org 2004/02/27 22:49:27
4647 [dh.c]
4648 Reset bit counter at the right time, fixes debug output in the case where
4649 the DH group is rejected. ok markus@
Darren Tucker017fd612004-02-29 20:30:17 +11004650 - dtucker@cvs.openbsd.org 2004/02/17 08:23:20
4651 [regress/Makefile regress/login-timeout.sh]
4652 Add regression test for LoginGraceTime; ok markus@
Darren Tucker03c907a2004-02-29 20:31:08 +11004653 - markus@cvs.openbsd.org 2004/02/24 16:56:30
4654 [regress/test-exec.sh]
4655 allow arguments in ${TEST_SSH_XXX}
Darren Tucker437a5f02004-02-29 20:33:51 +11004656 - markus@cvs.openbsd.org 2004/02/24 17:06:52
4657 [regress/ssh-com-client.sh regress/ssh-com-keygen.sh
4658 regress/ssh-com-sftp.sh regress/ssh-com.sh]
4659 test against recent ssh.com releases
Darren Tucker68b184c2004-02-29 20:37:06 +11004660 - dtucker@cvs.openbsd.org 2004/02/28 12:16:57
4661 [regress/dynamic-forward.sh]
4662 Make dynamic-forward understand nc's new output. ok markus@
Darren Tucker9468ba32004-02-29 20:38:26 +11004663 - dtucker@cvs.openbsd.org 2004/02/28 13:44:45
4664 [regress/try-ciphers.sh]
4665 Test acss too; ok markus@
Darren Tuckerb099d852004-02-29 21:30:05 +11004666 - (dtucker) [regress/try-ciphers.sh] Skip acss if not compiled in (eg if we
4667 built with openssl < 0.9.7)
Darren Tuckerd5920482004-02-29 20:11:30 +11004668
Ben Lindstrom78ffe262004-02-27 03:01:19 +0000466920040226
4670 - (bal) KNF our sshlogin.c even if the code looks nothing like upstream
4671 code due to diversity issues.
4672
Damien Millerd8913952004-02-25 10:56:31 +1100467320040225
4674 - (djm) Trim ChangeLog
Damien Miller124055d2004-02-25 10:57:45 +11004675 - (djm) Don't specify path to PAM modules in Redhat sshd.pam; from Fedora
Damien Millerd8913952004-02-25 10:56:31 +11004676
Darren Tucker37bd3662004-02-24 09:19:15 +1100467720040224
4678 - (dtucker) OpenBSD CVS Sync
4679 - markus@cvs.openbsd.org 2004/02/19 21:15:04
4680 [sftp-server.c]
4681 switch to new license.template
Darren Tuckerefa37062004-02-24 09:20:29 +11004682 - markus@cvs.openbsd.org 2004/02/23 12:02:33
4683 [sshd.c]
4684 backout revision 1.279; set listen socket to non-block; ok henning.
Darren Tucker0acc92a2004-02-24 09:21:41 +11004685 - markus@cvs.openbsd.org 2004/02/23 15:12:46
4686 [bufaux.c]
4687 encode 0 correctly in buffer_put_bignum2; noted by Mikulas Patocka
4688 and drop support for negative BNs; ok otto@
Darren Tuckera6ea4202004-02-24 09:24:01 +11004689 - markus@cvs.openbsd.org 2004/02/23 15:16:46
4690 [version.h]
4691 enter 3.8
Darren Tucker0d27ed12004-02-24 10:37:33 +11004692 - (dtucker) [configure.ac gss-serv-krb5.c ssh-gss.h] Define GSSAPI when found
4693 with krb5-config, hunt down gssapi.h and friends. Based partially on patch
Darren Tucker8a4e4f82004-02-24 10:58:10 +11004694 from deengert at anl.gov. ok djm@
Damien Millera811d9a2004-02-24 13:05:11 +11004695 - (djm) [groupaccess.c uidswap.c] Bug #787: Size group arrays at runtime
4696 using sysconf() if available Based on patches from
4697 holger AT van-lengerich.de and openssh_bugzilla AT hockin.org
Darren Tucker2359aa92004-02-24 13:17:30 +11004698 - (dtucker) [uidswap.c] Minor KNF. ok djm@
Tim Rice18959002004-02-23 20:51:06 -08004699 - (tim) [openbsd-compat/getrrsetbyname.c] Make gcc 2.7.2.3 happy. ok djm@
Damien Miller9fc475f2004-02-24 16:00:02 +11004700 - (djm) Crank RPM spec versions
Darren Tucker5ce131f2004-02-24 16:13:24 +11004701 - (dtucker) [README] Add pointer to release notes. ok djm@
Darren Tucker149543e2004-02-24 16:14:41 +11004702 - (dtucker) {README.platform] Add platform-specific notes.
Tim Ricee8c898a2004-02-23 21:47:04 -08004703 - (tim) [configure.ac] SCO3 needs -lcrypt_i for -lprot
Damien Miller33424702004-02-24 17:13:28 +11004704 - (djm) Release 3.8p1
Darren Tucker37bd3662004-02-24 09:19:15 +11004705
Darren Tucker1825f262004-02-24 00:01:27 +1100470620040223
4707 - (dtucker) [session.c] Bug #789: Only make setcred call for !privsep in the
4708 non-interactive path. ok djm@
4709
Darren Tucker15ee7482004-02-22 09:43:15 +1100471020040222
4711 - (dtucker) [auth-shadow.c auth.c auth.h] Move shadow account expiry test
4712 to auth-shadow.c, no functional change. ok djm@
Darren Tuckere828d0c2004-02-22 11:55:07 +11004713 - (dtucker) [auth-shadow.c auth.h] Provide warnings of impending account or
4714 password expiry. ok djm@
4715 - (dtucker) [auth-passwd.c] Only check password expiry once. Prevents
4716 multiple warnings if a wrong password is entered.
4717 - (dtucker) [configure.ac] Apply krb5-config --libs fix to non-gssapi path
4718 too.
Darren Tucker15ee7482004-02-22 09:43:15 +11004719
Damien Miller2e45cb02004-02-20 20:37:44 +1100472020040220
4721 - (djm) [openbsd-compat/setproctitle.c] fix comments; from grange@
4722
Darren Tuckera22897d2004-02-18 11:21:12 +1100472320040218
4724 - (dtucker) [configure.ac] Handle case where krb5-config --libs returns a
4725 path with a "-" in it. From Sergio.Gelato at astro.su.se.
Damien Millerd7d46bb2004-02-18 14:11:13 +11004726 - (djm) OpenBSD CVS Sync
4727 - djm@cvs.openbsd.org 2004/02/17 07:17:29
4728 [sftp-glob.c sftp.c]
4729 Remove useless headers; ok deraadt@
Damien Miller20e1fab2004-02-18 14:30:55 +11004730 - djm@cvs.openbsd.org 2004/02/17 11:03:08
4731 [sftp.c]
4732 sftp.c and sftp-int.c, together at last; ok markus@
Damien Miller05a75b62004-02-18 14:31:23 +11004733 - jmc@cvs.openbsd.org 2004/02/17 19:35:21
4734 [sshd_config.5]
4735 remove cruft left over from RhostsAuthentication removal;
4736 ok markus@
Damien Miller82c78b32004-02-18 15:42:31 +11004737 - (djm) [log.c] Correct use of HAVE_OPENLOG_R
Damien Miller051b0ac2004-02-18 22:59:43 +11004738 - (djm) [log.c] Tighten openlog_r tests
Darren Tuckera22897d2004-02-18 11:21:12 +11004739
Damien Miller98225c22004-02-17 16:49:41 +1100474020040217
4741 - (djm) Simplify the license on code I have written. No code changes.
Damien Miller4e60ed72004-02-17 17:07:59 +11004742 - (djm) OpenBSD CVS Sync
4743 - djm@cvs.openbsd.org 2004/02/17 05:39:51
4744 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c]
4745 [sftp-int.h sftp.c]
4746 switch to license.template for code written by me (belated, I know...)
Damien Miller34255b92004-02-17 20:33:52 +11004747 - (djm) Bug #698: Specify FILE: for KRB5CCNAME; patch from
4748 stadal@suse.cz and simon@sxw.org.uk
Darren Tuckerba53b832004-02-17 20:46:59 +11004749 - (dtucker) [auth-pam.c] Tidy up PAM debugging. ok djm@
Darren Tucker5cf8ef72004-02-17 23:20:07 +11004750 - (dtucker) [auth-pam.c] Store output from pam_session and pam_setcred for
4751 display after login. Should fix problems like pam_motd not displaying
4752 anything, noticed by cjwatson at debian.org. ok djm@
Damien Miller98225c22004-02-17 16:49:41 +11004753
Tim Rice9ad7e0e2004-02-12 07:17:10 -0800475420040212
4755 - (tim) [Makefile.in regress/sftp-badcmds.sh regress/test-exec.sh]
4756 Portablity fixes. Data sftp transfers needs to be world readable. Some
4757 older shells hang on while loops when doing sh -n some_script. OK dtucker@
Tim Rice3d5352e2004-02-12 09:27:21 -08004758 - (tim) [configure.ac] Make sure -lcrypto is before -lsocket for sco3.
4759 ok mouring@
Tim Rice9ad7e0e2004-02-12 07:17:10 -08004760
Darren Tuckercee6d4c2004-02-11 18:48:52 +1100476120040211
4762 - (dtucker) [auth-passwd.c auth-shadow.c] Only enable shadow expiry check
4763 if HAS_SHADOW_EXPIRY is set.
Tim Rice43fa5572004-02-11 14:46:40 -08004764 - (tim) [configure.ac] Fix comment to match code changes in ver 1.117
Darren Tuckercee6d4c2004-02-11 18:48:52 +11004765
Darren Tuckere3dba822004-02-10 12:50:19 +1100476620040210
4767 - (dtucker) [auth-passwd.c auth.h openbsd-compat/port-aix.c
Darren Tucker9df3def2004-02-10 13:01:14 +11004768 openbsd-compat/port-aix.h] Bug #14: Use do_pwchange to support AIX's
4769 native password expiry.
4770 - (dtucker) [LICENCE Makefile.in auth-passwd.c auth-shadow.c auth.c auth.h
4771 defines.h] Bug #14: Use do_pwchange to support password expiry and force
4772 change for platforms using /etc/shadow. ok djm@
Darren Tuckerffae5322004-02-10 13:05:40 +11004773 - (dtucker) [openbsd-compat/fake-rfc2553.h] Bug #563: Prepend ssh_ to compat
4774 functions to avoid conflicts with Heimdal's libroken. ok djm@
Darren Tucker1921ed92004-02-10 13:23:28 +11004775 - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #14: Use do_pwchange to
4776 change expired PAM passwords for SSHv1 connections without privsep.
4777 pam_chauthtok is still used when privsep is disabled. ok djm@
Darren Tuckercfea2062004-02-10 15:27:34 +11004778 - (dtucker) [openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Move
4779 include from port-aix.h to port-aix.c and remove unnecessary function
4780 definition. Fixes build errors on AIX.
Darren Tuckerc28b88a2004-02-10 16:49:35 +11004781 - (dtucker) [configure.ac loginrec.c] Bug #464: Use updwtmpx on platforms
4782 that support it. from & ok mouring@
Darren Tucker13a707b2004-02-10 17:15:05 +11004783 - (dtucker) [configure.ac] Bug #345: Do not disable utmp on HP-UX 10.x.
Darren Tuckercee6d4c2004-02-11 18:48:52 +11004784 ok djm@
Darren Tuckere3dba822004-02-10 12:50:19 +11004785
Darren Tuckerfc57f712004-02-07 10:41:48 +1100478620040207
4787 - (dtucker) OpenBSD CVS Sync
4788 - dtucker@cvs.openbsd.org 2004/02/06 23:41:13
4789 [cipher-ctr.c]
4790 Use EVP_CIPHER_CTX_key_length for key length. ok markus@
4791 (This will fix builds with OpenSSL 0.9.5)
Darren Tucker693f8a82004-02-07 12:29:39 +11004792 - (dtucker) [cipher.c] enable AES counter modes with OpenSSL 0.9.5.
4793 ok djm@, markus@
Darren Tuckerfc57f712004-02-07 10:41:48 +11004794
Darren Tucker99762462004-02-06 15:22:43 +1100479520040206
4796 - (dtucker) [acss.c acss.h] Fix $Id tags.
Darren Tucker6977fe72004-02-06 15:26:10 +11004797 - (dtucker) [cipher-acss.c cipher.c] Enable acss only if building with
4798 OpenSSL >= 0.9.7. ok djm@
Darren Tuckeref3a4a22004-02-06 15:30:50 +11004799 - (dtucker) [session.c] Bug #789: Do not call do_pam_setcred as a non-root
4800 user, since some modules might fail due to lack of privilege. ok djm@
Darren Tuckerf58fb7e2004-02-06 15:59:06 +11004801 - (dtucker) [configure.ac] Bug #748: Always define BROKEN_GETADDRINFO
4802 for HP-UX 11.11. If there are known-good configs where this is not
4803 required, please report them. ok djm@
Darren Tuckerecc9d462004-02-06 16:04:08 +11004804 - (dtucker) [sshd.c] Bug #757: Clear child's environment to prevent
4805 accidentally inheriting from root's environment. ok djm@
Darren Tucker819d4522004-02-06 16:18:47 +11004806 - (dtucker) [openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Bug #796:
4807 Restore previous authdb setting after auth calls. Fixes problems with
4808 setpcred failing on accounts that use AFS or NIS password registries.
Darren Tucker07459352004-02-06 21:29:41 +11004809 - (dtucker) [configure.ac includes.h] Include <sys/stream.h> if present,
4810 required on Solaris 2.5.1 for queue_t, which is used by <sys/ptms.h>.
Darren Tucker23bc8d02004-02-06 16:24:31 +11004811 - (dtucker) OpenBSD CVS Sync
4812 - markus@cvs.openbsd.org 2004/01/30 09:48:57
4813 [auth-passwd.c auth.h pathnames.h session.c]
4814 support for password change; ok dtucker@
4815 (set password-dead=1w in login.conf to use this).
4816 In -Portable, this is currently only platforms using bsdauth.
Darren Tuckera8be9e22004-02-06 16:40:27 +11004817 - dtucker@cvs.openbsd.org 2004/02/05 05:37:17
4818 [monitor.c sshd.c]
4819 Pass SIGALRM through to privsep child if LoginGraceTime expires. ok markus@
Darren Tucker7f73a492004-02-06 16:41:37 +11004820 - markus@cvs.openbsd.org 2004/02/05 15:33:33
4821 [progressmeter.c]
4822 fix ETA for > 4GB; bugzilla #791; ok henning@ deraadt@
Darren Tucker99762462004-02-06 15:22:43 +11004823
Darren Tucker22991ba2004-01-30 12:58:51 +1100482420040129
4825 - (dtucker) OpenBSD CVS Sync regress/
4826 - dtucker@cvs.openbsd.org 2003/10/11 11:49:49
4827 [Makefile banner.sh]
4828 Test missing banner file, suppression of banner with ssh -q, check return
4829 code from ssh. ok markus@
Darren Tucker633f3e02004-01-30 13:00:29 +11004830 - jmc@cvs.openbsd.org 2003/11/07 10:16:44
4831 [ssh-com.sh]
4832 adress -> address, and a few more; all from Jonathon Gray;
Darren Tucker46662bf2004-01-30 13:02:55 +11004833 - djm@cvs.openbsd.org 2004/01/13 09:49:06
4834 [sftp-batch.sh]
Darren Tuckerdcc736b2004-01-30 14:20:59 +11004835 - (dtucker) [configure.ac] Add --without-zlib-version-check. Feedback from
4836 tim@, ok several
Darren Tucker2df33432004-01-30 14:34:21 +11004837 - (dtucker) [configure.ac openbsd-compat/bsd-cray.c openbsd-compat/bsd-cray.h]
4838 Bug #775: Cray fixes from wendy at cray.com
Darren Tucker22991ba2004-01-30 12:58:51 +11004839
Darren Tucker4f9f6792004-01-28 12:26:14 +1100484020040128
4841 - (dtucker) [regress/README.regress] Add tcpwrappers issue, noted by tim@
Darren Tucker77970692004-01-28 15:44:04 +11004842 - (dtucker) [moduli] Import new moduli file from OpenBSD.
Darren Tucker4f9f6792004-01-28 12:26:14 +11004843
Damien Miller4f0fe682004-01-27 21:19:21 +1100484420040127
4845 - (djm) OpenBSD CVS Sync
4846 - hshoexer@cvs.openbsd.org 2004/01/23 17:06:03
4847 [cipher.c]
4848 enable acss for ssh
4849 ok deraadt@ markus@
Damien Millerb21be842004-01-27 21:20:11 +11004850 - mouring@cvs.openbsd.org 2004/01/23 17:57:48
4851 [sftp-int.c]
4852 Fix issue pointed out with ls not handling large directories
4853 with embeded paths correctly. OK damien@
Damien Millerb2d1c2b2004-01-27 21:20:59 +11004854 - hshoexer@cvs.openbsd.org 2004/01/23 19:26:33
4855 [cipher.c]
4856 rename acss@opebsd.org to acss@openssh.org
4857 ok deraadt@
Damien Millerf6723f02004-01-27 21:21:27 +11004858 - djm@cvs.openbsd.org 2004/01/25 03:49:09
4859 [sshconnect.c]
4860 reset nonblocking flag after ConnectTimeout > 0 connect; (bugzilla #785)
4861 from jclonguet AT free.fr; ok millert@
Damien Millerec692032004-01-27 21:22:00 +11004862 - djm@cvs.openbsd.org 2004/01/27 10:08:10
4863 [sftp.c]
4864 reorder parsing so user:skey@host:file works (bugzilla #777)
4865 patch from admorten AT umich.edu; ok markus@
Damien Miller4f0fe682004-01-27 21:19:21 +11004866 - (djm) [acss.c acss.h cipher-acss.c] Portable support for ACSS
4867 if libcrypto lacks it
4868
Tim Rice3084a612004-01-26 09:37:09 -0800486920040126
4870 - (tim) Typo in regress/README.regress
Tim Riceeafd8e92004-01-26 14:10:10 -08004871 - (tim) [regress/test-exec.sh] RhostsAuthentication is deprecated.
Tim Riceba1c2b82004-01-26 16:02:17 -08004872 - (tim) [defines.h] Add defines for HFIXEDSZ and T_SIG
Tim Rice2597bfd2004-01-26 19:03:39 -08004873 - (tim) [configure.ac includes.h] add <sys/ptms.h> for grantpt() and friends.
Tim Rice01326eb2004-01-26 21:40:35 -08004874 - (tim) [defines.h openbsd-compat/getrrsetbyname.h] Move defines for HFIXEDSZ
4875 and T_SIG to getrrsetbyname.h
Tim Rice3084a612004-01-26 09:37:09 -08004876
Damien Miller68144112004-01-24 13:50:39 +1100487720040124
4878 - (djm) Typo in openbsd-compat/bsd-openpty.c; from wendyp AT cray.com
4879
Damien Millerd3526362004-01-23 14:16:26 +1100488020040123
4881 - (djm) Do pam_session processing for systems with HAVE_LOGIN_CAP; from
4882 ralf.hack AT pipex.net; ok dtucker@
Damien Miller84938142004-01-23 16:30:03 +11004883 - (djm) Bug #776: Update contrib/redhat/openssh.spec to dynamically detect
4884 Kerberos location (and thus work with Fedora Core 1);
4885 from jason AT devrandom.org
Darren Tucker2dcd2392004-01-23 17:13:33 +11004886 - (dtucker) [configure.ac] Bug #788: Test for zlib.h presence and for
4887 zlib >= 1.1.4. Partly from jbasney at ncsa.uiuc.edu. ok djm@
Darren Tucker63699582004-01-23 21:35:44 +11004888 - (dtucker) [contrib/cygwin/README] Document new ssh-host-config options.
4889 Patch from vinschen at redhat.com.
Darren Tucker3c78c5e2004-01-23 22:03:10 +11004890 - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]
4891 Change AFS symbol to USE_AFS to prevent namespace collisions, do not
4892 include kafs.h unless necessary. From deengert at anl.gov.
Tim Ricefcb62202004-01-23 18:35:16 -08004893 - (tim) [configure.ac] Remove hard coded -L/usr/local/lib and
4894 -I/usr/local/include. Users can do LDFLAGS="-L/usr/local/lib" \
4895 CPPFLAGS="-I/usr/local/include" ./configure if needed.
Damien Millerd3526362004-01-23 14:16:26 +11004896
Darren Tucker1d3ca582004-01-22 12:05:34 +1100489720040122
4898 - (dtucker) [configure.ac] Use krb5-config where available for Kerberos/
4899 GSSAPI detection, libs and includes. ok djm@
Darren Tucker7fe8b722004-01-22 12:48:26 +11004900 - (dtucker) [session.c] Enable AFS support in conjunction with KRB5 not
4901 just HEIMDAL.
Tim Ricec9001282004-01-22 16:10:03 -08004902 - (tim) [contrib/solaris/buildpkg.sh] Allow for the possibility of
4903 /usr/local being a symbolic link. Fixes problem reported by Henry Grebler.
Darren Tucker1d3ca582004-01-22 12:05:34 +11004904
Damien Miller44f75c12004-01-21 10:58:47 +1100490520040121
4906 - (djm) OpenBSD CVS Sync
4907 - djm@cvs.openbsd.org 2004/01/13 09:25:05
4908 [sftp-int.c sftp.1 sftp.c]
4909 Tidy sftp batchmode handling, eliminate junk to stderr (bugzilla #754) and
4910 enable use of "-b -" to accept batchfile from stdin; ok markus@
Damien Miller86a39682004-01-21 11:00:04 +11004911 - jmc@cvs.openbsd.org 2004/01/13 12:17:33
4912 [sftp.1]
4913 remove unnecessary Ic's;
4914 kill whitespace at EOL;
4915 ok djm@
Damien Miller8f341f82004-01-21 11:00:46 +11004916 - markus@cvs.openbsd.org 2004/01/13 19:23:15
4917 [compress.c session.c]
4918 -Wall; ok henning
Damien Millerf84fed62004-01-21 11:01:23 +11004919 - markus@cvs.openbsd.org 2004/01/13 19:45:15
4920 [compress.c]
4921 cast for portability; millert@
Damien Millera04ad492004-01-21 11:02:09 +11004922 - markus@cvs.openbsd.org 2004/01/19 09:24:21
4923 [channels.c]
4924 fake consumption for half closed channels since the peer is waiting for
4925 window adjust messages; bugzilla #790 Matthew Dillon; test + ok dtucker@
4926 reproduce with sh -c 'ulimit -f 10; ssh host -n od /bsd | cat > foo'
Damien Millerfb1310e2004-01-21 11:02:50 +11004927 - markus@cvs.openbsd.org 2004/01/19 21:25:15
4928 [auth2-hostbased.c auth2-pubkey.c serverloop.c ssh-keysign.c sshconnect2.c]
4929 fix mem leaks; some fixes from Pete Flugstad; tested dtucker@
Damien Millere4f5a822004-01-21 14:11:05 +11004930 - djm@cvs.openbsd.org 2004/01/21 03:07:59
4931 [sftp.c]
4932 initialise infile in main, rather than statically - from portable
Damien Millerf4da3bb2004-01-21 17:07:16 +11004933 - deraadt@cvs.openbsd.org 2004/01/11 21:55:06
4934 [sshpty.c]
4935 for pty opening, only use the openpty() path. the other stuff only needs
4936 to be in openssh-p; markus ok
4937 - (djm) [openbsd-compat/bsd-openpty.c] Rework old sshpty.c code into an
4938 openpty() replacement
Damien Miller44f75c12004-01-21 10:58:47 +11004939
Darren Tucker749bc952004-01-14 22:14:04 +1100494020040114
4941 - (dtucker) [auth-pam.c] Have monitor die if PAM authentication thread exits
4942 unexpectedly. with & ok djm@
Darren Tucker7ae09622004-01-14 23:07:56 +11004943 - (dtucker) [auth-pam.c] Reset signal handler in pthread_cancel too, add
4944 test for case where cleanup has already run.
Darren Tuckera8df9242004-01-15 00:15:07 +11004945 - (dtucker) [auth-pam.c] Add minor debugging.
Darren Tucker749bc952004-01-14 22:14:04 +11004946
Darren Tucker1b27c8f2004-01-13 22:35:58 +1100494720040113
4948 - (dtucker) [auth-pam.c] Relocate struct pam_ctxt and prototypes. No
4949 functional changes.
4950
Darren Tucker0234e862004-01-08 23:32:04 +1100495120040108
4952 - (dtucker) [auth-pam.c defines.h] Bug #783: move __unused to defines.h and
4953 only define if not already. From des at freebsd.org.
Darren Tuckerfd0894a2004-01-09 00:19:25 +11004954 - (dtucker) [configure.ac] Remove extra (typo) comma.
Darren Tucker0234e862004-01-08 23:32:04 +11004955
Darren Tuckere9183182004-01-05 08:16:34 +1100495620040105
4957 - (dtucker) [contrib/ssh-copy-id] Bug #781: exit if ssh fails. Patch from
4958 cjwatson at debian.org.
Darren Tucker409cb322004-01-05 22:36:51 +11004959 - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]
4960 Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@
Darren Tuckere9183182004-01-05 08:16:34 +11004961
Damien Miller7a2ea782004-01-02 17:52:10 +1100496220040102
4963 - (djm) OSX/Darwin needs BIND_8_COMPAT to build getrrsetbyname. Report from
4964 jakob@
Damien Millerc8ec1662004-01-02 17:53:04 +11004965 - (djm) Remove useless DNS support configure summary message. from jakob@
Damien Miller0f47c532004-01-02 18:01:30 +11004966 - (djm) OSX/Darwin put the PAM headers in a different place, detect this.
4967 Report from jakob@
Damien Miller7a2ea782004-01-02 17:52:10 +11004968
Darren Tucker06930c72003-12-31 11:34:51 +1100496920031231
4970 - (dtucker) OpenBSD CVS Sync
4971 - djm@cvs.openbsd.org 2003/12/22 09:16:58
4972 [moduli.c ssh-keygen.1 ssh-keygen.c]
4973 tidy up moduli generation debugging, add -v (verbose/debug) option to
4974 ssh-keygen; ok markus@
Darren Tuckera32e19c2003-12-31 11:36:00 +11004975 - markus@cvs.openbsd.org 2003/12/22 20:29:55
4976 [cipher-3des1.c]
4977 EVP_CIPHER_CTX_cleanup() for the des contexts; pruiksma@freesurf.fr
Darren Tucker22ef5082003-12-31 11:37:34 +11004978 - jakob@cvs.openbsd.org 2003/12/23 16:12:10
4979 [servconf.c servconf.h session.c sshd_config]
4980 implement KerberosGetAFSToken server option. ok markus@, beck@
Darren Tucker0b3b9752003-12-31 11:38:32 +11004981 - millert@cvs.openbsd.org 2003/12/29 16:39:50
4982 [sshd_config]
4983 KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK
Darren Tuckerea287062003-12-31 11:43:24 +11004984 - dtucker@cvs.openbsd.org 2003/12/31 00:24:50
4985 [auth2-passwd.c]
4986 Ignore password change request during password auth (which we currently
4987 don't support) and discard proposed new password. corrections/ok markus@
Darren Tucker2a6b0292003-12-31 14:59:17 +11004988 - (dtucker) [configure.ac] Only test setresuid and setresgid if they exist.
Darren Tucker06930c72003-12-31 11:34:51 +11004989
Darren Tucker3715be32003-12-19 10:58:43 +1100499020031219
4991 - (dtucker) [defines.h] Bug #458: Define SIZE_T_MAX as UINT_MAX if we
4992 typedef size_t ourselves.
4993
Darren Tucker454da0b2003-12-18 12:52:19 +1100499420031218
4995 - (dtucker) [configure.ac] Don't use setre[ug]id on DG-UX, from Tom Orban.
Darren Tucker07705c72003-12-18 15:34:31 +11004996 - (dtucker) [auth-pam.c] Do PAM chauthtok during SSH2 keyboard-interactive
4997 authentication. Partially fixes bug #423. Feedback & ok djm@
Darren Tucker454da0b2003-12-18 12:52:19 +11004998
Damien Millerb5820f42003-12-17 16:27:32 +1100499920031217
5000 - (djm) OpenBSD CVS Sync
5001 - markus@cvs.openbsd.org 2003/12/09 15:28:43
5002 [serverloop.c]
5003 make ClientKeepAlive work for ssh -N, too (no login shell requested).
5004 1) send a bogus channel request if we find a channel
5005 2) send a bogus global request if we don't have a channel
5006 ok + test beck@
Damien Millerb9997192003-12-17 16:29:22 +11005007 - markus@cvs.openbsd.org 2003/12/09 17:29:04
5008 [sshd.c]
5009 fix -o and HUP; ok henning@
Damien Miller9836cf82003-12-17 16:30:06 +11005010 - markus@cvs.openbsd.org 2003/12/09 17:30:05
5011 [ssh.c]
5012 don't modify argv for ssh -o; similar to sshd.c 1.283
Damien Miller12c150e2003-12-17 16:31:10 +11005013 - markus@cvs.openbsd.org 2003/12/09 21:53:37
5014 [readconf.c readconf.h scp.1 servconf.c servconf.h sftp.1 ssh.1]
5015 [ssh_config.5 sshconnect.c sshd.c sshd_config.5]
5016 rename keepalive to tcpkeepalive; the old name causes too much
5017 confusion; ok djm, dtucker; with help from jmc@
Damien Millerd6965512003-12-17 16:31:53 +11005018 - dtucker@cvs.openbsd.org 2003/12/09 23:45:32
5019 [clientloop.c]
5020 Clear exit code when ssh -N is terminated with a SIGTERM. ok markus@
Damien Millerbaafb982003-12-17 16:32:23 +11005021 - markus@cvs.openbsd.org 2003/12/14 12:37:21
5022 [ssh_config.5]
5023 we don't support GSS KEX; from Simon Wilkinson
Damien Miller509b0102003-12-17 16:33:10 +11005024 - markus@cvs.openbsd.org 2003/12/16 15:49:51
5025 [clientloop.c clientloop.h readconf.c readconf.h scp.1 sftp.1 ssh.1]
5026 [ssh.c ssh_config.5]
5027 application layer keep alive (ServerAliveInterval ServerAliveCountMax)
5028 for ssh(1), similar to the sshd(8) option; ok beck@; with help from
5029 jmc and dtucker@
Damien Miller8975ddf2003-12-17 16:33:53 +11005030 - markus@cvs.openbsd.org 2003/12/16 15:51:54
5031 [dh.c]
5032 use <= instead of < in dh_estimate; ok provos/hshoexer;
5033 do not return < DH_GRP_MIN
Darren Tuckere937be32003-12-17 18:53:26 +11005034 - (dtucker) [acconfig.h configure.ac uidswap.c] Bug #645: Check for
5035 setres[ug]id() present but not implemented (eg some Linux/glibc
5036 combinations).
Ben Lindstrom563eb992003-12-18 00:34:06 +00005037 - (bal) [openbsd-compat/bsd-misc.c] unset 'signal' defined if we are
5038 using a real 'signal()' (Noticed by a NeXT Compile)
Damien Millerb5820f42003-12-17 16:27:32 +11005039
Darren Tucker4c568432003-12-09 19:01:51 +1100504020031209
5041 - (dtucker) OpenBSD CVS Sync
5042 - matthieu@cvs.openbsd.org 2003/11/25 23:10:08
5043 [ssh-add.1]
5044 ssh-add doesn't need to be a descendant of ssh-agent. Ok markus@, jmc@.
Darren Tucker37afa9d2003-12-09 19:05:42 +11005045 - djm@cvs.openbsd.org 2003/11/26 21:44:29
5046 [cipher-aes.c]
5047 fix #ifdef before #define; ok markus@
5048 (RCS ID sync only, Portable already had this)
Darren Tucker1fb04252003-12-09 19:07:13 +11005049 - markus@cvs.openbsd.org 2003/12/02 12:15:10
5050 [progressmeter.c]
5051 improvments from andreas@:
5052 * saner speed estimate for transfers that takes less than a second by
5053 rounding the time to 1 second.
5054 * when the transfer is finished calculate the actual total speed
5055 rather than the current speed which is given during the transfer
Darren Tucker3175eb92003-12-09 19:15:11 +11005056 - markus@cvs.openbsd.org 2003/12/02 17:01:15
5057 [channels.c session.c ssh-agent.c ssh.h sshd.c]
5058 use SSH_LISTEN_BACKLOG (=128) in listen(2).
Darren Tucker1cbc4442003-12-09 19:19:38 +11005059 - djm@cvs.openbsd.org 2003/12/07 06:34:18
5060 [moduli.c]
5061 remove unused debugging #define templates
Darren Tucker564f19e2003-12-09 19:18:07 +11005062 - markus@cvs.openbsd.org 2003/12/08 11:00:47
5063 [kexgexc.c]
5064 print requested group size in debug; ok djm
Darren Tucker5cd9d442003-12-10 00:54:38 +11005065 - dtucker@cvs.openbsd.org 2003/12/09 13:52:55
5066 [moduli.c]
5067 Prevent ssh-keygen -T from outputting moduli with a generator of 0, since
5068 they can't be used for Diffie-Hellman. Assistance and ok djm@
Darren Tuckera6153142003-12-10 00:52:37 +11005069 - (dtucker) [ssh-keyscan.c] Sync RCSIDs, missed in SSH_SSFDMAX change below.
Darren Tucker4c568432003-12-09 19:01:51 +11005070
Tim Rice88368a32003-12-08 12:35:59 -0800507120031208
5072 - (tim) [configure.ac] Bug 770. Fix --without-rpath.
5073
Damien Miller927f5272003-11-24 12:57:25 +1100507420031123
5075 - (djm) [canohost.c] Move IPv4inV6 mapped address normalisation to its own
5076 function and call it unconditionally
Damien Millere00074a2003-11-24 13:07:45 +11005077 - (djm) OpenBSD CVS Sync
5078 - djm@cvs.openbsd.org 2003/11/23 23:17:34
5079 [ssh-keyscan.c]
5080 from portable - use sysconf to detect fd limit; ok markus@
5081 (tidy diff by adding SSH_SSFDMAX macro to defines.h)
Damien Millera4b33df2003-11-24 13:09:27 +11005082 - djm@cvs.openbsd.org 2003/11/23 23:18:45
5083 [ssh-keygen.c]
5084 consistency PATH_MAX -> MAXPATHLEN; ok markus@
5085 (RCS ID sync only)
5086 - djm@cvs.openbsd.org 2003/11/23 23:21:21
5087 [scp.c]
5088 from portable: rename clashing variable limit-> limit_rate; ok markus@
5089 (RCS ID sync only)
Damien Millere0113cc2003-11-24 13:10:09 +11005090 - dtucker@cvs.openbsd.org 2003/11/24 00:16:35
5091 [ssh.1 ssh.c]
5092 Make ssh -k mean GSSAPIDelegateCredentials=no. Suggestion & ok markus@
Damien Miller3db2e4d2003-11-24 13:33:34 +11005093 - (djm) Annotate OpenBSD-derived files in openbsd-compat/ with original
5094 source file path (in OpenBSD tree).
Damien Miller927f5272003-11-24 12:57:25 +11005095
Darren Tucker240fdfa2003-11-22 14:10:02 +1100509620031122
5097 - (dtucker) [channels.c] Make AIX write limit code clearer. Suggested by djm@
Darren Tuckerd7634162003-11-22 14:16:56 +11005098 - (dtucker) [auth-passwd.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]
5099 Move AIX specific password authentication code to port-aix.c, call
5100 authenticate() until reenter flag is clear.
Darren Tucker4e06a1d2003-11-22 14:25:15 +11005101 - (dtucker) [auth-sia.c configure.ac] Tru64 update from cmadams at hiwaay.net.
5102 Use permanently_set_uid for SIA, only define DISABLE_FD_PASSING when SIA
5103 is enabled, rely on SIA to check for locked accounts if enabled. ok djm@
Damien Miller4da295c2003-11-22 14:39:04 +11005104 - (djm) [scp.c] Rename limitbw -> limit_rate to match upstreamed patch
Damien Miller841b9f12003-11-22 14:48:49 +11005105 - (djm) [sftp-int.c] Remove duplicated code from bogus sync
Damien Miller5924ceb2003-11-22 15:02:42 +11005106 - (djm) [packet.c] Shuffle #ifdef to reduce conditionally compiled code
Darren Tucker240fdfa2003-11-22 14:10:02 +11005107
Damien Miller8c5e91c2003-11-21 23:09:10 +1100510820031121
5109 - (djm) OpenBSD CVS Sync
5110 - markus@cvs.openbsd.org 2003/11/20 11:39:28
5111 [progressmeter.c]
5112 fix rounding errors; from andreas@
Damien Millera8e06ce2003-11-21 23:48:55 +11005113 - djm@cvs.openbsd.org 2003/11/21 11:57:03
5114 [everything]
5115 unexpand and delete whitespace at EOL; ok markus@
5116 (done locally and RCS IDs synced)
Damien Miller8c5e91c2003-11-21 23:09:10 +11005117
Darren Tucker18df00c2003-11-18 12:42:07 +1100511820031118
Damien Miller6aef38f2003-11-18 10:45:20 +11005119 - (djm) Fix early exit for root auth success when UsePAM=yes and
5120 PermitRootLogin=no
Darren Tucker18df00c2003-11-18 12:42:07 +11005121 - (dtucker) [auth-pam.c] Convert chauthtok_conv into a generic tty_conv,
Damien Miller4bb1dd32003-11-18 22:01:25 +11005122 and use it for do_pam_session. Fixes problems like pam_motd not
5123 displaying anything. ok djm@
Darren Tucker8a1624c2003-11-18 12:45:35 +11005124 - (dtucker) [auth-pam.c] Only use pam_putenv if our platform has it. ok djm@
Damien Miller4bb1dd32003-11-18 22:01:25 +11005125 - (djm) OpenBSD CVS Sync
5126 - dtucker@cvs.openbsd.org 2003/11/18 00:40:05
5127 [serverloop.c]
5128 Correct check for authctxt->valid. ok djm@
Damien Millerf96d1832003-11-18 22:01:48 +11005129 - djm@cvs.openbsd.org 2003/11/18 10:53:07
5130 [monitor.c]
5131 unbreak fake authloop for non-existent users (my screwup). Spotted and
5132 tested by dtucker@; ok markus@
Damien Miller6aef38f2003-11-18 10:45:20 +11005133
513420031117
Damien Miller3e8f41e2003-11-17 21:09:50 +11005135 - (djm) OpenBSD CVS Sync
5136 - djm@cvs.openbsd.org 2003/11/03 09:03:37
5137 [auth-chall.c]
5138 make this a little more idiot-proof; ok markus@
5139 (includes portable-specific changes)
Damien Miller5a388972003-11-17 21:10:47 +11005140 - jakob@cvs.openbsd.org 2003/11/03 09:09:41
5141 [sshconnect.c]
5142 move changed key warning into warn_changed_key(). ok markus@
Damien Miller8f746ec2003-11-17 21:11:15 +11005143 - jakob@cvs.openbsd.org 2003/11/03 09:37:32
5144 [sshconnect.c]
5145 do not free static type pointer in warn_changed_key()
Damien Miller3e3b5142003-11-17 21:13:40 +11005146 - djm@cvs.openbsd.org 2003/11/04 08:54:09
5147 [auth1.c auth2.c auth2-pubkey.c auth.h auth-krb5.c auth-passwd.c]
5148 [auth-rhosts.c auth-rh-rsa.c auth-rsa.c monitor.c serverloop.c]
5149 [session.c]
5150 standardise arguments to auth methods - they should all take authctxt.
5151 check authctxt->valid rather then pw != NULL; ok markus@
Damien Millera9fcd3a2003-11-17 21:16:55 +11005152 - jakob@cvs.openbsd.org 2003/11/08 16:02:40
5153 [auth1.c]
5154 remove unused variable (pw). ok djm@
5155 (id sync only - still used in portable)
Damien Miller939cd382003-11-17 21:17:24 +11005156 - jmc@cvs.openbsd.org 2003/11/08 19:17:29
5157 [sftp-int.c]
5158 typos from Jonathon Gray;
Damien Millerf58b58c2003-11-17 21:18:23 +11005159 - jakob@cvs.openbsd.org 2003/11/10 16:23:41
5160 [bufaux.c bufaux.h cipher.c cipher.h hostfile.c hostfile.h key.c]
5161 [key.h sftp-common.c sftp-common.h sftp-server.c sshconnect.c sshd.c]
5162 [ssh-dss.c ssh-rsa.c uuencode.c uuencode.h]
5163 constify. ok markus@ & djm@
Damien Millerc1f27922003-11-17 21:19:05 +11005164 - dtucker@cvs.openbsd.org 2003/11/12 10:12:15
5165 [scp.c]
5166 When called with -q, pass -q to ssh; suppresses SSH2 banner. ok markus@
Damien Miller150b5572003-11-17 21:19:29 +11005167 - jakob@cvs.openbsd.org 2003/11/12 16:39:58
5168 [dns.c dns.h readconf.c ssh_config.5 sshconnect.c]
5169 update SSHFP validation. ok markus@
Damien Millerfe448472003-11-17 21:19:49 +11005170 - jmc@cvs.openbsd.org 2003/11/12 20:14:51
5171 [ssh_config.5]
5172 make verb agree with subject, and kill some whitespace;
Damien Miller91c6aa42003-11-17 21:20:18 +11005173 - markus@cvs.openbsd.org 2003/11/14 13:19:09
5174 [sshconnect2.c]
5175 cleanup and minor fixes for the client code; from Simon Wilkinson
Damien Miller51bf11f2003-11-17 21:20:47 +11005176 - djm@cvs.openbsd.org 2003/11/17 09:45:39
5177 [msg.c msg.h sshconnect2.c ssh-keysign.c]
5178 return error on msg send/receive failure (rather than fatal); ok markus@
Damien Miller0425d402003-11-17 22:18:21 +11005179 - markus@cvs.openbsd.org 2003/11/17 11:06:07
5180 [auth2-gss.c gss-genr.c gss-serv.c monitor.c monitor.h monitor_wrap.c]
5181 [monitor_wrap.h sshconnect2.c ssh-gss.h]
5182 replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson;
5183 test + ok jakob.
Damien Miller9bdba702003-11-17 21:27:55 +11005184 - (djm) Bug #632: Don't call pam_end indirectly from within kbd-int
5185 conversation function
Damien Millerc756e9b2003-11-17 21:41:42 +11005186 - (djm) Export environment variables from authentication subprocess to
5187 parent. Part of Bug #717
Damien Miller3e8f41e2003-11-17 21:09:50 +11005188
Darren Tucker203c40b2003-11-15 12:13:16 +1100518920031115
5190 - (dtucker) [regress/agent-ptrace.sh] Test for GDB output from Solaris and
5191 HP-UX, skip test on AIX.
5192
Darren Tucker0947ddf2003-11-13 11:21:31 +1100519320031113
5194 - (dtucker) [auth-pam.c] Append newlines to lines output by the
5195 pam_chauthtok_conv().
Darren Tucker798ca842003-11-13 11:28:49 +11005196 - (dtucker) [README ssh-host-config ssh-user-config Makefile] (All
5197 contrib/cygwin). Major update from vinschen at redhat.com.
5198 - Makefile provides a `cygwin-postinstall' target to run right after
5199 `make install'.
5200 - Better support for Windows 2003 Server.
5201 - Try to get permissions as correct as possible.
5202 - New command line options to allow full automated host configuration.
5203 - Create configs from skeletons in /etc/defaults/etc.
5204 - Use /bin/bash, allows reading user input with readline support.
5205 - Remove really old configs from /usr/local.
Darren Tuckerae52b7c2003-11-13 19:52:31 +11005206 - (dtucker) [auth-pam.c] Add newline to accumulated PAM_TEXT_INFO and
5207 PAM_ERROR_MSG messages.
Darren Tucker0947ddf2003-11-13 11:21:31 +11005208
Damien Miller418a3862003-11-06 20:27:51 +1100520920031106
5210 - (djm) Clarify UsePAM consequences a little more
5211
Darren Tucker7c582db2003-11-03 18:59:29 +1100521220031103
5213 - (dtucker) [contrib/cygwin/ssh-host-config] Ensure entries in /etc/services
5214 are created correctly with CRLF line terminations. Patch from vinschen at
5215 redhat.com.
Darren Tuckera47c9bc2003-11-03 20:03:25 +11005216 - (dtucker) OpenBSD CVS Sync
5217 - markus@cvs.openbsd.org 2003/10/15 09:48:45
5218 [monitor_wrap.c]
5219 check pmonitor != NULL
Darren Tucker8cc39782003-11-03 20:05:03 +11005220 - markus@cvs.openbsd.org 2003/10/21 09:50:06
5221 [auth2-gss.c]
5222 make sure the doid is larger than 2
Darren Tucker56afe142003-11-03 20:06:14 +11005223 - avsm@cvs.openbsd.org 2003/10/26 16:57:43
5224 [sshconnect2.c]
5225 rename 'supported' static var in userauth_gssapi() to 'gss_supported'
5226 to avoid shadowing the global version. markus@ ok
Darren Tucker6db8f932003-11-03 20:07:14 +11005227 - markus@cvs.openbsd.org 2003/10/28 09:08:06
5228 [misc.c]
5229 error->debug for getsockopt+TCP_NODELAY; several requests
Darren Tucker655a5e02003-11-03 20:09:03 +11005230 - markus@cvs.openbsd.org 2003/11/02 11:01:03
5231 [auth2-gss.c compat.c compat.h sshconnect2.c]
5232 remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk
Darren Tuckerbe8a7712003-11-03 22:52:52 +11005233 - (dtucker) [regress/agent-ptrace.sh] Use numeric uid and gid.
Darren Tucker7c582db2003-11-03 18:59:29 +11005234
Darren Tucker0d37b5c2003-10-21 12:41:14 +1000523520031021
5236 - (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords
5237 directly. Noted by Darren.Moffat at sun.com.
Darren Tuckerea4c6702003-10-21 22:27:08 +10005238 - (dtucker) [regress/agent-ptrace.sh] Skip agent-test unless SUDO is set,
5239 make agent setgid during test.
Darren Tucker0d37b5c2003-10-21 12:41:14 +10005240
Darren Tucker9568ad92003-10-17 16:32:11 +1000524120031017
5242 - (dtucker) [INSTALL] Note that --with-md5 is now required on platforms with
5243 MD5 passwords even if PAM support is enabled. From steev at detritus.net.
5244
Darren Tucker1f203942003-10-15 15:50:42 +1000524520031015
5246 - (dtucker) OpenBSD CVS Sync
5247 - jmc@cvs.openbsd.org 2003/10/08 08:27:36
5248 [scp.1 scp.c sftp-server.8 sftp.1 sftp.c ssh.1 sshd.8]
5249 scp and sftp: add options list and sort options. options list requested
5250 by deraadt@
5251 sshd: use same format as ssh
5252 ssh: remove wrong option from list
5253 sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)
5254 ok deraadt@ markus@
Darren Tuckera044f472003-10-15 15:52:03 +10005255 - markus@cvs.openbsd.org 2003/10/08 15:21:24
5256 [readconf.c ssh_config.5]
5257 default GSS API to no in client, too; ok jakob, deraadt@
Darren Tucker0a118da2003-10-15 15:54:32 +10005258 - markus@cvs.openbsd.org 2003/10/11 08:24:08
5259 [readconf.c readconf.h ssh.1 ssh.c ssh_config.5]
5260 remote x11 clients are now untrusted by default, uses xauth(8) to generate
5261 untrusted cookies; ForwardX11Trusted=yes restores old behaviour.
5262 ok deraadt; feedback and ok djm/fries
Darren Tuckerd05b6012003-10-15 15:55:59 +10005263 - markus@cvs.openbsd.org 2003/10/11 08:26:43
5264 [sshconnect2.c]
5265 search keys in reverse order; fixes #684
Darren Tucker7eb3de02003-10-15 15:56:58 +10005266 - markus@cvs.openbsd.org 2003/10/11 11:36:23
5267 [monitor_wrap.c]
5268 return NULL for missing banner; ok djm@
Darren Tuckerf132c672003-10-15 15:58:18 +10005269 - jmc@cvs.openbsd.org 2003/10/12 13:12:13
5270 [ssh_config.5]
5271 note that EnableSSHKeySign should be in the non-hostspecific section;
5272 remove unnecessary .Pp;
5273 ok markus@
Darren Tuckerb370ca92003-10-15 15:59:26 +10005274 - markus@cvs.openbsd.org 2003/10/13 08:22:25
5275 [scp.1 sftp.1]
5276 don't refer to options related to forwarding; ok jmc@
Darren Tuckerdda19d62003-10-15 16:00:47 +10005277 - jakob@cvs.openbsd.org 2003/10/14 19:42:10
5278 [dns.c dns.h readconf.c ssh-keygen.c sshconnect.c]
5279 include SSHFP lookup code (not enabled by default). ok markus@
Darren Tucker64b77bc2003-10-15 16:07:53 +10005280 - jakob@cvs.openbsd.org 2003/10/14 19:43:23
5281 [README.dns]
5282 update
Darren Tucker072a7b12003-10-15 16:10:25 +10005283 - markus@cvs.openbsd.org 2003/10/14 19:54:39
5284 [session.c ssh-agent.c]
5285 10X for mkdtemp; djm@
Darren Tucker5f88d342003-10-15 16:57:57 +10005286 - (dtucker) [acconfig.h configure.ac dns.c openbsd-compat/getrrsetbyname.c
5287 openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always
5288 compiled in but disabled in config.
Darren Tuckerc6020652003-10-15 17:48:20 +10005289 - (dtucker) [auth.c] Check for disabled password expiry on HP-UX Trusted Mode.
Tim Rice6b1f8a32003-10-15 09:22:39 -07005290 - (tim) [regress/banner.sh] portability fix.
Darren Tucker1f203942003-10-15 15:50:42 +10005291
Darren Tucker6c0c0702003-10-09 14:13:53 +1000529220031009
5293 - (dtucker) [sshd_config.5] UsePAM defaults to "no". ok djm@
5294
Darren Tucker046dff22003-10-08 17:32:02 +1000529520031008
5296 - (dtucker) OpenBSD CVS Sync
5297 - dtucker@cvs.openbsd.org 2003/10/07 01:47:27
5298 [sshconnect2.c]
Darren Tucker79644822003-10-08 17:37:58 +10005299 Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 &
5300 #707. ok markus@
Darren Tucker64dbccc2003-10-08 17:34:38 +10005301 - djm@cvs.openbsd.org 2003/10/07 07:04:16
5302 [sftp-int.c]
5303 sftp quoting fix from admorten AT umich.edu; ok markus@
Darren Tucker79644822003-10-08 17:37:58 +10005304 - deraadt@cvs.openbsd.org 2003/10/07 21:58:28
5305 [sshconnect2.c]
5306 set ptr to NULL after free
Darren Tuckerdc001a52003-10-08 17:47:19 +10005307 - dtucker@cvs.openbsd.org 2003/10/07 01:52:13
5308 [regress/Makefile regress/banner.sh]
5309 Test SSH2 banner. ok markus@
Darren Tucker0240ff72003-10-08 17:52:10 +10005310 - djm@cvs.openbsd.org 2003/10/07 07:04:52
5311 [regress/sftp-cmds.sh]
5312 more sftp quoting regress tests; ok markus
Darren Tucker046dff22003-10-08 17:32:02 +10005313
Damien Miller6f1f6112003-10-07 10:18:22 +1000531420031007
5315 - (djm) Delete autom4te.cache after autoreconf
Darren Tucker8846a072003-10-07 11:30:15 +10005316 - (dtucker) [auth-pam.c auth-pam.h session.c] Make PAM use the new static
5317 cleanup functions. With & ok djm@
Darren Tuckerdfe6d912003-10-07 17:40:56 +10005318 - (dtucker) [contrib/redhat/openssh.spec] Bug #714: Now that UsePAM is a
5319 run-time switch, always build --with-md5-passwords.
Darren Tucker2e8c0cc2003-10-07 17:49:56 +10005320 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoul.c]
5321 Bug #670: add strtoul() to openbsd-compat for platforms lacking it. ok djm@
Darren Tucker3b2a06c2003-10-07 18:37:11 +10005322 - (dtucker) [configure.ac] Bug #715: Set BROKEN_SETREUID and BROKEN_SETREGID
5323 on Reliant Unix. Patch from Robert.Dahlem at siemens.com.
Darren Tucker89df7a32003-10-07 20:35:57 +10005324 - (dtucker) [configure.ac] Bug #710: Check for dlsym() in libdl on
5325 Reliant Unix. Based on patch from Robert.Dahlem at siemens.com.
Damien Miller6f1f6112003-10-07 10:18:22 +10005326
Darren Tucker4a250542003-10-03 17:57:24 +1000532720031003
Darren Tuckerf4bf5d02003-10-07 11:31:22 +10005328 - (dtucker) OpenBSD CVS Sync
Darren Tucker4a250542003-10-03 17:57:24 +10005329 - markus@cvs.openbsd.org 2003/10/02 10:41:59
5330 [sshd.c]
5331 print openssl version, too, several requests; ok henning/djm.
Darren Tuckere3ca82e2003-10-03 18:02:30 +10005332 - markus@cvs.openbsd.org 2003/10/02 08:26:53
5333 [ssh-gss.h]
5334 missing $OpenBSD:; dtucker
Tim Rice30aa44c2003-10-03 22:30:23 -07005335 - (tim) [contrib/caldera/openssh.spec] Remove obsolete --with-ipv4-default
5336 option.
Darren Tucker4a250542003-10-03 17:57:24 +10005337
Darren Tucker3e33cec2003-10-02 16:12:36 +1000533820031002
Darren Tuckerf4bf5d02003-10-07 11:31:22 +10005339 - (dtucker) OpenBSD CVS Sync
Darren Tucker3e33cec2003-10-02 16:12:36 +10005340 - markus@cvs.openbsd.org 2003/09/23 20:17:11
5341 [Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c
5342 cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h
5343 monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h
5344 ssh-agent.c sshd.c]
5345 replace fatal_cleanup() and linked list of fatal callbacks with static
5346 cleanup_exit() function. re-refine cleanup_exit() where appropriate,
5347 allocate sshd's authctxt eary to allow simpler cleanup in sshd.
5348 tested by many, ok deraadt@
Darren Tucker6cc310b2003-10-02 16:15:15 +10005349 - markus@cvs.openbsd.org 2003/09/23 20:18:52
5350 [progressmeter.c]
5351 don't print trailing \0; bug #709; Robert.Dahlem@siemens.com
5352 ok millert/deraadt@
Darren Tucker5dcdd212003-10-02 16:17:00 +10005353 - markus@cvs.openbsd.org 2003/09/23 20:41:11
5354 [channels.c channels.h clientloop.c]
5355 move client only agent code to clientloop.c
Darren Tucker8fca6b52003-10-02 16:18:22 +10005356 - markus@cvs.openbsd.org 2003/09/26 08:19:29
5357 [sshd.c]
5358 no need to set the listen sockets to non-block; ok deraadt@
Darren Tucker61776952003-10-02 16:19:47 +10005359 - jmc@cvs.openbsd.org 2003/09/29 11:40:51
5360 [ssh.1]
5361 - add list of options to -o and .Xr ssh_config(5)
5362 - some other cleanup
5363 requested by deraadt@;
5364 ok deraadt@ markus@
Darren Tuckera49d36e2003-10-02 16:20:54 +10005365 - markus@cvs.openbsd.org 2003/09/29 20:19:57
5366 [servconf.c sshd_config]
5367 GSSAPICleanupCreds -> GSSAPICleanupCredentials
Darren Tucker0ccb59b2003-10-02 16:26:34 +10005368 - (dtucker) [configure.ac] Don't set DISABLE_SHADOW when configuring
5369 --with-pam. ok djm@
Darren Tucker7596d682003-10-02 17:32:30 +10005370 - (dtucker) [ssh-gss.h] Prototype change missed in sync.
Darren Tuckerf391ba62003-10-02 20:07:09 +10005371 - (dtucker) [session.c] Fix bus errors on some 64-bit Solaris configurations.
5372 Based on patches by Matthias Koeppe and Thomas Baden. ok djm@
Darren Tucker3e33cec2003-10-02 16:12:36 +10005373
Ben Lindstromb210aa22003-09-30 23:49:06 +0000537420030930
5375 - (bal) Fix issues in openbsd-compat/realpath.c
5376
Darren Tuckerb88fcc72003-09-25 20:18:33 +1000537720030925
5378 - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove
5379 DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam. Patch from
5380 michael_steffens at hp.com, ok djm@
Tim Riced4d18152003-09-25 19:04:34 -07005381 - (tim) [sshd_config] UsePAM defaults to no.
Darren Tuckerb88fcc72003-09-25 20:18:33 +10005382
Damien Millerdbb10472003-09-24 08:30:18 +1000538320030924
5384 - (djm) Update version.h and spec files for HEAD
Darren Tuckerbeaf6792003-09-24 20:03:48 +10005385 - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6.
Damien Millerdbb10472003-09-24 08:30:18 +10005386
Darren Tucker782390e2003-09-22 10:58:55 +1000538720030923
Darren Tucker8a49dd12003-09-22 10:59:34 +10005388 - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-tree
Darren Tucker782390e2003-09-22 10:58:55 +10005389 builds. Portability corrections from tim@.
Tim Rice480ef8d2003-09-21 21:38:11 -07005390 - (dtucker) [configure.ac] Bug #665: uid swapping issues on Mac OS X.
Darren Tucker20379a32003-09-22 11:07:40 +10005391 Patch from max at quendi.de.
Darren Tuckered92b212003-09-22 11:26:16 +10005392 - (dtucker) [configure.ac] Bug #657: uid swapping issues on BSDi.
5393 - (dtucker) [configure.ac] Bug #653: uid swapping issues on Tru64.
Darren Tucker00130112003-09-22 11:40:24 +10005394 - (dtucker) [configure.ac] Bug #693: uid swapping issues on NCR MP-RAS.
5395 Patch from david.haughton at ncr.com
Darren Tuckerbe79af12003-09-22 11:58:21 +10005396 - (dtucker) [configure.ac] Bug #659: uid swapping issues on IRIX 6.
5397 Part of patch supplied by bugzilla-openssh at thewrittenword.com
Darren Tuckerd5e082f2003-09-22 12:08:23 +10005398 - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c
5399 openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with
5400 where gai_strerror is defined as "const char *". Part of patch supplied
5401 by bugzilla-openssh at thewrittenword.com
Darren Tucker8daf4b42003-09-22 12:32:00 +10005402 - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config] Update
5403 ssh-host-config to match current defaults, bump README version. Patch from
5404 vinschen at redhat.com.
Darren Tuckerfbe3b362003-09-22 12:54:37 +10005405 - (dtucker) [uidswap.c] Don't test restoration of uid on Cygwin since the
5406 OS does not support permanently dropping privileges. Patch from
5407 vinschen at redhat.com.
Darren Tucker051c2702003-09-22 13:05:26 +10005408 - (dtucker) [openbsd-compat/port-aix.c] Use correct include for xmalloc.h,
5409 add canohost.h to stop warning. Based on patch from openssh-unix-dev at
5410 thewrittenword.com
Darren Tucker42d30822003-09-22 13:28:36 +10005411 - (dtucker) [INSTALL] Bug #686: Document requirement for zlib 1.1.4 or
5412 higher.
Tim Rice7a74c6b2003-09-21 21:00:59 -07005413 - (tim) Fix typo. s/SETEIUD_BREAKS_SETUID/SETEUID_BREAKS_SETUID/
Tim Rice480ef8d2003-09-21 21:38:11 -07005414 - (tim) [configure.ac] Bug 665: move 3 new AC_DEFINES outside of AC_TRY_RUN.
5415 Report by distler AT golem ph utexas edu.
Darren Tucker220bf132003-09-22 20:41:40 +10005416 - (dtucker) [contrib/aix/pam.conf] Include example pam.conf for AIX from
5417 article by genty at austin.ibm.com, included with the author's permission.
Darren Tuckerbd5361b2003-09-22 20:59:16 +10005418 - (dtucker) OpenBSD CVS Sync
5419 - markus@cvs.openbsd.org 2003/09/18 07:52:54
5420 [sshconnect.c]
5421 missing {}; bug #656; jclonguet at free.fr
Darren Tuckerd2730d32003-09-22 21:00:19 +10005422 - markus@cvs.openbsd.org 2003/09/18 07:54:48
5423 [buffer.c]
5424 protect against double free; #660; zardoz at users.sf.net
Darren Tuckerd1d41b32003-09-22 21:01:27 +10005425 - markus@cvs.openbsd.org 2003/09/18 07:56:05
5426 [authfile.c]
5427 missing buffer_free(&encrypted); #662; zardoz at users.sf.net
Darren Tuckerfb16b242003-09-22 21:04:23 +10005428 - markus@cvs.openbsd.org 2003/09/18 08:49:45
5429 [deattack.c misc.c session.c ssh-agent.c]
5430 more buffer allocation fixes; from Solar Designer; CAN-2003-0682;
5431 ok millert@
Darren Tuckerc0815c92003-09-22 21:05:50 +10005432 - miod@cvs.openbsd.org 2003/09/18 13:02:21
5433 [authfd.c bufaux.c dh.c mac.c ssh-keygen.c]
5434 A few signedness fixes for harmless situations; markus@ ok
Darren Tuckera8151da2003-09-22 21:06:46 +10005435 - markus@cvs.openbsd.org 2003/09/19 09:02:02
5436 [packet.c]
5437 buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471
Darren Tucker631a4a92003-09-22 21:08:21 +10005438 - markus@cvs.openbsd.org 2003/09/19 09:03:00
5439 [buffer.c]
5440 sign fix in buffer_dump; Jedi/Sector One; pr 3473
Darren Tucker6fa8abd2003-09-22 21:10:21 +10005441 - markus@cvs.openbsd.org 2003/09/19 11:29:40
5442 [ssh-agent.c]
5443 provide a ssh-agent specific fatal() function; ok deraadt
Darren Tucker3d326222003-09-22 21:11:20 +10005444 - markus@cvs.openbsd.org 2003/09/19 11:30:39
5445 [ssh-keyscan.c]
5446 avoid fatal_cleanup, just call exit(); ok deraadt
Darren Tucker3dbff2a2003-09-22 21:12:56 +10005447 - markus@cvs.openbsd.org 2003/09/19 11:31:33
5448 [channels.c]
5449 do not call channel_free_all on fatal; ok deraadt
Darren Tuckeraaa56cb2003-09-22 21:13:59 +10005450 - markus@cvs.openbsd.org 2003/09/19 11:33:09
5451 [packet.c sshd.c]
5452 do not call packet_close on fatal; ok deraadt
Darren Tucker8654d162003-09-22 21:14:55 +10005453 - markus@cvs.openbsd.org 2003/09/19 17:40:20
5454 [scp.c]
5455 error handling for remote-remote copy; #638; report Harald Koenig;
5456 ok millert, fgs, henning, deraadt
Darren Tucker9a2c4cd2003-09-22 21:16:05 +10005457 - markus@cvs.openbsd.org 2003/09/19 17:43:35
5458 [clientloop.c sshtty.c sshtty.h]
5459 remove fatal callbacks from client code; ok deraadt
Ben Lindstromda4d9cf2003-09-22 15:36:15 +00005460 - (bal) "extration" -> "extraction" in ssh-rand-helper.c; repoted by john
5461 on #unixhelp@efnet
Tim Rice7ff4e6d2003-09-22 19:50:14 -07005462 - (tim) [configure.ac] add --disable-etc-default-login option. ok djm
Damien Miller5c3a5582003-09-23 22:12:38 +10005463 - (djm) Sync with V_3_7 branch:
5464 - (djm) Fix SSH1 challenge kludge
5465 - (djm) Bug #671: Fix builds on OpenBSD
5466 - (djm) Bug #676: Fix PAM stack corruption
5467 - (djm) Fix bad free() in PAM code
5468 - (djm) Don't call pam_end before pam_init
5469 - (djm) Enable build with old OpenSSL again
5470 - (djm) Trim deprecated options from INSTALL. Mention UsePAM
5471 - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
Darren Tucker782390e2003-09-22 10:58:55 +10005472
Darren Tucker0dc54842006-09-21 23:13:30 +10005473$Id: ChangeLog,v 1.4555 2006/09/21 13:13:30 dtucker Exp $