blob: 324084562a893e42535243f5f7fad8f7f0bba851 [file] [log] [blame]
Darren Tuckerb8c89d12005-11-10 10:10:10 +1100120051110
Darren Tucker063ba742005-11-10 10:38:45 +11002 - (dtucker) [openbsd-compat/setenv.c] Merge changes for __findenv from
Darren Tuckerb8c89d12005-11-10 10:10:10 +11003 OpenBSD getenv.c revs 1.4 - 1.8 (ANSIfication of arguments, removal of
4 "register").
Darren Tucker063ba742005-11-10 10:38:45 +11005 - (dtucker) [openbsd-compat/setenv.c] Make __findenv static, remove
Darren Tucker32b53102005-11-10 10:13:06 +11006 unnecessary prototype.
Darren Tucker063ba742005-11-10 10:38:45 +11007 - (dtucker) [openbsd-compat/setenv.c] Sync changes from OpenBSD setenv.c
8 revs 1.7 - 1.9.
Darren Tucker618db972005-11-10 14:43:11 +11009 - (dtucker) [auth-krb5.c] Fix -Wsign-compare warning in non-Heimdal path.
10 Patch from djm@.
Darren Tuckerb0288092005-11-10 14:46:48 +110011 - (dtucker) [configure.ac] Disable pointer-sign warnings on gcc 4.0+
12 since they're not useful right now. Patch from djm@.
Darren Tuckere5a2b522005-11-10 15:56:44 +110013 - (dtucker) [openbsd-compat/getgrouplist.c] Sync OpenBSD revs 1.10 - 1.2 (ANSI
14 prototypes, removal of "register").
Darren Tucker80c0d7e2005-11-10 16:05:37 +110015 - (dtucker) [openbsd-compat/strlcat.c] Sync OpenBSD revs 1.11 - 1.12 (removal
16 of "register").
Darren Tucker7f24a0e2005-11-10 16:18:56 +110017 - (dtucker) [openbsd-compat/{LOTS}] Move the "OPENBSD ORIGINAL" markers to
18 after the copyright notices. Having them at the top next to the CVSIDs
19 guarantees a conflict for each and every sync.
Darren Tucker52245662005-11-10 16:26:17 +110020 - (dtucker) [openbsd-compat/strlcpy.c] Update from OpenBSD 1.8 -> 1.10.
Darren Tucker925d1de2005-11-10 16:31:55 +110021 - (dtucker) [openbsd-compat/sigact.h] Add "OPENBSD ORIGINAL" marker.
Darren Tucker09471d82005-11-10 16:38:54 +110022 - (dtucker) [openbsd-compat/strmode.c] Update from OpenBSD 1.5 -> 1.7.
23 Removal of rcsid, "whiteout" inode type.
Darren Tuckerad1dada2005-11-10 16:42:51 +110024 - (dtucker) [openbsd-compat/basename.c] Update from OpenBSD 1.11 -> 1.14.
25 Removal of rcsid, will no longer strlcpy parts of the string.
Darren Tuckerf976e6f2005-11-10 16:46:26 +110026 - (dtucker) [openbsd-compat/strtoll.c] Update from OpenBSD 1.4 -> 1.5.
Darren Tuckerf5ebfe92005-11-10 16:48:10 +110027 - (dtucker) [openbsd-compat/strtoul.c] Update from OpenBSD 1.5 -> 1.7.
Darren Tuckerdbb631c2005-11-10 16:56:28 +110028 - (dtucker) [openbsd-compat/readpassphrase.c] Update from OpenBSD 1.16 -> 1.18.
Darren Tuckerd76b4c72005-11-10 16:58:47 +110029 - (dtucker) [openbsd-compat/readpassphrase.h] Update from OpenBSD 1.3 -> 1.5.
Darren Tucker6524d4f2005-11-10 17:02:21 +110030 - (dtucker) [openbsd-compat/glob.c] Update from OpenBSD 1.22 -> 1.25.
Darren Tucker50a221b2005-11-10 17:03:22 +110031 - (dtucker) [openbsd-compat/glob.h] Update from OpenBSD 1.8 -> 1.9.
Darren Tucker31ba53e2005-11-10 17:11:29 +110032 - (dtucker) [openbsd-compat/getcwd.c] Update from OpenBSD 1.9 -> 1.14.
Darren Tucker0a149d12005-11-10 17:15:06 +110033 - (dtucker) [openbsd-compat/getcwd.c] Replace lstat with fstat to match up
34 with OpenBSD code since we don't support platforms without fstat any more.
Darren Tuckerc7e05d62005-11-10 17:21:21 +110035 - (dtucker) [openbsd-compat/inet_aton.c] Update from OpenBSD 1.7 -> 1.9.
Darren Tuckerde9d6232005-11-10 17:23:54 +110036 - (dtucker) [openbsd-compat/inet_nto.c] Update from OpenBSD 1.4 -> 1.6.
Darren Tuckerb8c89d12005-11-10 10:10:10 +110037
Damien Miller3f54a9f2005-11-05 14:52:18 +11003820051105
39 - (djm) OpenBSD CVS Sync
40 - markus@cvs.openbsd.org 2005/10/07 11:13:57
41 [ssh-keygen.c]
42 change DSA default back to 1024, as it's defined for 1024 bits only
43 and this causes interop problems with other clients. moreover,
44 in order to improve the security of DSA you need to change more
45 components of DSA key generation (e.g. the internal SHA1 hash);
46 ok deraadt
Damien Miller39eda6e2005-11-05 14:52:50 +110047 - djm@cvs.openbsd.org 2005/10/10 10:23:08
48 [channels.c channels.h clientloop.c serverloop.c session.c]
49 fix regression I introduced in 4.2: X11 forwardings initiated after
50 a session has exited (e.g. "(sleep 5; xterm) &") would not start.
51 bz #1086 reported by t8m AT centrum.cz; ok markus@ dtucker@
Damien Miller5e7fd072005-11-05 14:53:39 +110052 - djm@cvs.openbsd.org 2005/10/11 23:37:37
53 [channels.c]
54 bz #1076 set SO_REUSEADDR on X11 forwarding listner sockets, preventing
55 bind() failure when a previous connection's listeners are in TIME_WAIT,
56 reported by plattner AT inf.ethz.ch; ok dtucker@
Damien Miller5434eb22005-11-05 15:03:24 +110057 - stevesk@cvs.openbsd.org 2005/10/13 14:03:01
58 [auth2-gss.c gss-genr.c gss-serv.c]
59 remove unneeded #includes; ok markus@
Damien Miller9fac2632005-11-05 15:03:48 +110060 - stevesk@cvs.openbsd.org 2005/10/13 14:20:37
61 [gss-serv.c]
62 spelling in comments
Damien Miller5f916c82005-11-05 15:05:28 +110063 - stevesk@cvs.openbsd.org 2005/10/13 19:08:08
64 [gss-serv-krb5.c gss-serv.c]
65 unused declarations; ok deraadt@
66 (id sync only for gss-serv-krb5.c)
Damien Miller20afc242005-11-05 15:06:38 +110067 - stevesk@cvs.openbsd.org 2005/10/13 19:13:41
68 [dns.c]
69 unneeded #include, unused declaration, little knf; ok deraadt@
Damien Miller6fd6def2005-11-05 15:07:05 +110070 - stevesk@cvs.openbsd.org 2005/10/13 22:24:31
71 [auth2-gss.c gss-genr.c gss-serv.c monitor.c]
72 KNF; ok djm@
Damien Miller15d72a02005-11-05 15:07:33 +110073 - stevesk@cvs.openbsd.org 2005/10/14 02:17:59
74 [ssh-keygen.c ssh.c sshconnect2.c]
75 no trailing "\n" for log functions; ok djm@
Damien Miller0a0176e2005-11-05 15:07:59 +110076 - stevesk@cvs.openbsd.org 2005/10/14 02:29:37
77 [channels.c clientloop.c]
78 free()->xfree(); ok djm@
Damien Millerc1af1d52005-11-05 15:08:57 +110079 - stevesk@cvs.openbsd.org 2005/10/15 15:28:12
80 [sshconnect.c]
81 make external definition static; ok deraadt@
Damien Miller7e8795d2005-11-05 15:10:42 +110082 - stevesk@cvs.openbsd.org 2005/10/17 13:45:05
83 [dns.c]
84 fix memory leaks from 2 sources:
85 1) key_fingerprint_raw()
86 2) malloc in dns_read_rdata()
87 ok jakob@
88 - stevesk@cvs.openbsd.org 2005/10/17 14:01:28
89 [dns.c]
90 remove #ifdef LWRES; ok jakob@
Damien Miller319550a2005-11-05 15:11:15 +110091 - stevesk@cvs.openbsd.org 2005/10/17 14:13:35
92 [dns.c dns.h]
93 more cleanups; ok jakob@
Damien Millerb3bfbb72005-11-05 15:11:48 +110094 - djm@cvs.openbsd.org 2005/10/30 01:23:19
95 [ssh_config.5]
96 mention control socket fallback behaviour, reported by
97 tryponraj AT gmail.com
Damien Miller4bbacb72005-11-05 15:12:28 +110098 - djm@cvs.openbsd.org 2005/10/30 04:01:03
99 [ssh-keyscan.c]
100 make ssh-keygen discard junk from server before SSH- ident, spotted by
101 dave AT cirt.net; ok dtucker@
Damien Milleraa3bb102005-11-05 15:12:59 +1100102 - djm@cvs.openbsd.org 2005/10/30 04:03:24
103 [ssh.c]
104 fix misleading debug message; ok dtucker@
Damien Miller4d3fd542005-11-05 15:13:24 +1100105 - dtucker@cvs.openbsd.org 2005/10/30 08:29:29
106 [canohost.c sshd.c]
107 Check for connections with IP options earlier and drop silently. ok djm@
Damien Miller713de762005-11-05 15:13:49 +1100108 - jmc@cvs.openbsd.org 2005/10/30 08:43:47
109 [ssh_config.5]
110 remove trailing whitespace;
Damien Miller788f2122005-11-05 15:14:59 +1100111 - djm@cvs.openbsd.org 2005/10/30 08:52:18
112 [clientloop.c packet.c serverloop.c session.c ssh-agent.c ssh-keygen.c]
113 [ssh.c sshconnect.c sshconnect1.c sshd.c]
114 no need to escape single quotes in comments, no binary change
Damien Miller653b93b2005-11-05 15:15:23 +1100115 - dtucker@cvs.openbsd.org 2005/10/31 06:15:04
116 [sftp.c]
117 Fix sorting with "ls -1" command. From Robert Tsai, "looks right" deraadt@
Damien Millerf14be5c2005-11-05 15:15:49 +1100118 - djm@cvs.openbsd.org 2005/10/31 11:12:49
119 [ssh-keygen.1 ssh-keygen.c]
120 generate a protocol 2 RSA key by default
Damien Millerc7e2d3f2005-11-05 15:16:12 +1100121 - djm@cvs.openbsd.org 2005/10/31 11:48:29
122 [serverloop.c]
123 make sure we clean up wtmp, etc. file when we receive a SIGTERM,
124 SIGINT or SIGQUIT when running without privilege separation (the
125 normal privsep case is already OK). Patch mainly by dtucker@ and
126 senthilkumar_sen AT hotpop.com; ok dtucker@
Damien Miller83d0d392005-11-05 15:16:27 +1100127 - jmc@cvs.openbsd.org 2005/10/31 19:55:25
128 [ssh-keygen.1]
129 grammar;
Damien Miller24ecf612005-11-05 15:16:52 +1100130 - dtucker@cvs.openbsd.org 2005/11/03 13:38:29
131 [canohost.c]
132 Cache reverse lookups with and without DNS separately; ok markus@
Damien Miller19bb3a52005-11-05 15:19:35 +1100133 - djm@cvs.openbsd.org 2005/11/04 05:15:59
134 [kex.c kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c]
135 remove hardcoded hash lengths in key exchange code, allowing
136 implementation of KEX methods with different hashes (e.g. SHA-256);
137 ok markus@ dtucker@ stevesk@
Damien Miller5fd8b022005-11-05 16:04:36 +1100138 - djm@cvs.openbsd.org 2005/11/05 05:01:15
139 [bufaux.c]
140 Fix leaks in error paths, bz #1109 and #1110 reported by kremenek AT
141 cs.stanford.edu; ok dtucker@
Darren Tucker3a38c5a2005-11-05 16:28:35 +1100142 - (dtucker) [README.platform] Add PAM section.
Damien Miller9b59ada2005-11-05 16:56:52 +1100143 - (djm) [openbsd-compat/getrrsetbyname.c] Sync to latest OpenBSD version,
144 resolving memory leak bz#1111 reported by kremenek AT cs.stanford.edu;
145 ok dtucker@
Damien Miller3f54a9f2005-11-05 14:52:18 +1100146
Darren Tuckerd32e2932005-11-02 09:07:31 +110014720051102
148 - (dtucker) [openbsd-compat/bsd-misc.c] Bug #1108: fix broken strdup().
149 Reported by olavi at ipunplugged.com and antoine.brodin at laposte.net
150 via FreeBSD.
151
Damien Miller88edf622005-10-30 11:55:45 +110015220051030
153 - (djm) [contrib/suse/openssh.spec contrib/suse/rc.
154 sshd contrib/suse/sysconfig.ssh] Bug #1106: Updated SuSE spec and init
155 files from imorgan AT nas.nasa.gov
Darren Tucker42308a42005-10-30 15:31:55 +1100156 - (dtucker) [session.c] Bug #1045do not check /etc/nologin when PAM is
157 enabled, instead allow PAM to handle it. Note that on platforms using PAM,
158 the pam_nologin module should be added to sshd's session stack in order to
159 maintain exising behaviour. Based on patch and discussion from t8m at
160 centrum.cz, ok djm@
Damien Miller88edf622005-10-30 11:55:45 +1100161
Darren Tucker537f1ed2005-10-25 18:38:33 +100016220051025
163 - (dtucker) [configure.ac] Relocate LLONG_MAX calculation to after the
164 sizeof(long long) checks, to make fixing bug #1104 easier (no changes
165 yet).
Darren Tuckere7374552005-10-25 18:52:31 +1000166 - (dtucker) [configure.ac] Bug #1104: Tru64's printf family doesn't
167 understand "%lld", even though the compiler has "long long", so handle
168 it as a special case. Patch tested by mcaskill.scott at epa.gov.
Darren Tuckera841dce2005-10-25 18:55:00 +1000169 - (dtucker) [contrib/cygwin/ssh-user-config] Remove duplicate yes/no
170 prompt. Patch from vinschen at redhat.com.
Darren Tucker537f1ed2005-10-25 18:38:33 +1000171
Darren Tucker314d89e2005-10-17 23:29:23 +100017220051017
173 - (dtucker) [configure.ac] Bug #1097: Fix configure for cross-compiling.
174 /etc/default/login report and testing from aabaker at iee.org, corrections
175 from tim@.
176
Darren Tucker9ac1a652005-10-09 11:40:03 +100017720051009
178 - (dtucker) [configure.ac defines.h openbsd-compat/vis.{c,h}] Sync current
179 versions from OpenBSD. ok djm@
180
Darren Tucker1e6616b2005-10-08 12:07:01 +100018120051008
182 - (dtucker) [configure.ac] Bug #1098: define $MAIL for HP-UX; report from
183 brian.smith at agilent com.
Damien Millere04ec6f2005-10-08 16:21:19 +1000184 - (djm) [configure.ac] missing 'test' call for -with-Werror test
Darren Tucker1e6616b2005-10-08 12:07:01 +1000185
Darren Tuckerb18f1512005-10-05 23:02:16 +100018620051005
187 - (dtucker) [configure.ac sshd.8] Enable locked account check (a prepended
188 "*LOCKED*" string) for FreeBSD. Patch jeremie at le-hen.org and
189 senthilkumar_sen at hotpop.com.
190
Darren Tuckerd3d0fa12005-10-03 18:03:05 +100019120051003
192 - (dtucker) OpenBSD CVS Sync
193 - markus@cvs.openbsd.org 2005/09/07 08:53:53
194 [channels.c]
195 enforce chanid != NULL; ok djm
Darren Tuckerd89dbf22005-10-03 18:05:26 +1000196 - markus@cvs.openbsd.org 2005/09/09 19:18:05
197 [clientloop.c]
198 typo; from mark at mcs.vuw.ac.nz, bug #1082
Darren Tuckerce321d82005-10-03 18:11:24 +1000199 - djm@cvs.openbsd.org 2005/09/13 23:40:07
200 [sshd.c ssh.c misc.h sftp.c ssh-keygen.c ssh-keysign.c sftp-server.c
201 scp.c misc.c ssh-keyscan.c ssh-add.c ssh-agent.c]
202 ensure that stdio fds are attached; ok deraadt@
Darren Tuckerc8d64212005-10-03 18:13:42 +1000203 - djm@cvs.openbsd.org 2005/09/19 11:37:34
204 [ssh_config.5 ssh.1]
205 mention ability to specify bind_address for DynamicForward and -D options;
206 bz#1077 spotted by Haruyama Seigo
Darren Tuckera2cdbda2005-10-03 18:16:02 +1000207 - djm@cvs.openbsd.org 2005/09/19 11:47:09
208 [sshd.c]
209 stop connection abort on rekey with delayed compression enabled when
210 post-auth privsep is disabled (e.g. when root is logged in); ok dtucker@
Darren Tucker8813bbb2005-10-03 18:17:02 +1000211 - djm@cvs.openbsd.org 2005/09/19 11:48:10
212 [gss-serv.c]
213 typo
Darren Tucker05d4dfe2005-10-03 18:17:38 +1000214 - jmc@cvs.openbsd.org 2005/09/19 15:38:27
215 [ssh.1]
216 some more .Bk/.Ek to avoid ugly line split;
Darren Tucker895d6982005-10-03 18:18:05 +1000217 - jmc@cvs.openbsd.org 2005/09/19 15:42:44
218 [ssh.c]
219 update -D usage here too;
Darren Tucker1e4308e2005-10-03 18:18:40 +1000220 - djm@cvs.openbsd.org 2005/09/19 23:31:31
221 [ssh.1]
222 spelling nit from stevesk@
Darren Tuckere2dd2d52005-10-03 18:19:06 +1000223 - djm@cvs.openbsd.org 2005/09/21 23:36:54
224 [sshd_config.5]
225 aquire -> acquire, from stevesk@
Darren Tucker45b01422005-10-03 18:20:00 +1000226 - djm@cvs.openbsd.org 2005/09/21 23:37:11
227 [sshd.c]
228 change label at markus@'s request
Darren Tucker28e8e592005-10-03 18:20:28 +1000229 - jaredy@cvs.openbsd.org 2005/09/30 20:34:26
230 [ssh-keyscan.1]
231 deploy .An -nosplit; ok jmc
Darren Tuckerb0b12292005-10-03 18:23:44 +1000232 - dtucker@cvs.openbsd.org 2005/10/03 07:44:42
233 [canohost.c]
234 Relocate check_ip_options call to prevent logging of garbage for
235 connections with IP options set. bz#1092 from David Leonard,
236 "looks good" deraadt@
Darren Tucker1f85dc72005-10-03 20:14:18 +1000237 - (dtucker) [regress/README.regress] Bug #989: Document limitation that scp
238 is required in the system path for the multiplex test to work.
Darren Tuckerd3d0fa12005-10-03 18:03:05 +1000239
Darren Tucker6e422112005-09-30 09:55:49 +100024020050930
241 - (dtucker) [openbsd-compat/openbsd-compat.h] Bug #1096: Add prototype
242 for strtoll. Patch from o.flebbe at science-computing.de.
Darren Tuckerd4f04ae2005-09-30 10:23:21 +1000243 - (dtucker) [monitor.c] Bug #1087: Send loginmsg to preauth privsep
244 child during PAM account check without clearing it. This restores the
245 post-login warnings such as LDAP password expiry. Patch from Tomas Mraz
246 with help from several others.
Darren Tucker6e422112005-09-30 09:55:49 +1000247
Darren Tucker372c8fb2005-09-29 22:01:10 +100024820050929
249 - (dtucker) [monitor_wrap.c] Remove duplicate definition of loginmsg
250 introduced during sync.
251
Darren Tucker46e7ba52005-09-28 08:26:30 +100025220050928
253 - (dtucker) [entropy.c] Use u_char for receiving RNG seed for consistency.
Darren Tucker7b1e6952005-09-28 22:33:27 +1000254 - (dtucker) [auth-pam.c] Bug #1028: send final non-query messages from
255 PAM via keyboard-interactive. Patch tested by the folks at Vintela.
Darren Tucker46e7ba52005-09-28 08:26:30 +1000256
Darren Tuckerf1377bd2005-09-27 19:50:25 +100025720050927
258 - (dtucker) [entropy.c] Remove unnecessary tests for getuid and geteuid
259 calls, since they can't possibly fail. ok djm@
Darren Tuckerc6f82192005-09-27 22:46:32 +1000260 - (dtucker) [entropy.c entropy.h sshd.c] Pass RNG seed to the reexec'ed
261 process when sshd relies on ssh-random-helper. Should result in faster
262 logins on systems without a real random device or prngd. ok djm@
Darren Tuckerf1377bd2005-09-27 19:50:25 +1000263
Darren Tuckerd3eff2b2005-09-24 12:43:51 +100026420050924
265 - (dtucker) [auth2.c] Move start_pam() calls out of if-else block to remove
266 duplicate call. ok djm@
267
Darren Tuckerc373a562005-09-22 20:15:08 +100026820050922
269 - (dtucker) [configure.ac] Use -R linker flag for libedit too; patch from
270 skeleten at shillest.net.
Darren Tucker82171c62005-09-22 20:19:54 +1000271 - (dtucker) [configure.ac] Fix help for --with-opensc; patch from skeleten at
272 shillest.net.
Darren Tuckerc373a562005-09-22 20:15:08 +1000273
Tim Rice7df8d392005-09-19 09:33:39 -070027420050919
275 - (tim) [aclocal.m4 configure.ac] Delete acconfig.h and add templates to
276 AC_DEFINE and AC_DEFINE_UNQUOTED to quiet autoconf 2.59 warning messages.
Tim Rice542f62b2005-09-19 09:36:55 -0700277 ok dtucker@
Tim Rice7df8d392005-09-19 09:33:39 -0700278
Tim Ricefd9e9e32005-09-12 17:36:10 -070027920050912
280 - (tim) [configure.ac] Bug 1078. Fix --without-kerberos5. Reported by
281 Mike Frysinger.
282
Tim Rice64ead482005-09-08 21:56:33 -070028320050908
284 - (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to
285 OpenServer 6 and add osr5bigcrypt support so when someone migrates
286 passwords between UnixWare and OpenServer they will still work. OK dtucker@
287
Damien Millerc8ab8ce2005-09-01 19:10:48 +100028820050901
289 - (djm) Update RPM spec file versions
290
Tim Rice66fd2172005-08-31 09:59:49 -070029120050831
Damien Millerda9984f2005-08-31 19:46:26 +1000292 - (djm) OpenBSD CVS Sync
293 - djm@cvs.openbsd.org 2005/08/30 22:08:05
294 [gss-serv.c sshconnect2.c]
295 destroy credentials if krb5_kuserok() call fails. Stops credentials being
296 delegated to users who are not authorised for GSSAPIAuthentication when
297 GSSAPIDeletegateCredentials=yes and another authentication mechanism
298 succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
299 simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
Damien Millerae379592005-08-31 19:47:07 +1000300 - markus@cvs.openbsd.org 2005/08/31 09:28:42
301 [version.h]
302 4.2
Darren Tuckerd0a47cd2005-09-01 00:05:56 +1000303 - (dtucker) [README] Update release note URL to 4.2
Tim Rice66fd2172005-08-31 09:59:49 -0700304 - (tim) [configure.ac auth.c defines.h session.c openbsd-compat/port-uw.c
305 openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] libiaf cleanup. Disable
306 libiaf bits for OpenServer6. Free memory allocated by ia_get_logpwd().
307 Feedback and OK dtucker@
Damien Millerda9984f2005-08-31 19:46:26 +1000308
30920050830
Tim Riceeb456542005-08-30 07:12:02 -0700310 - (tim) [configure.ac] Back out last change. It needs to be done differently.
311
Tim Rice20168652005-08-29 17:17:37 -070031220050829
313 - (tim) [configure.ac] ia_openinfo() seems broken on OSR6. Limit UW long
314 password support to 7.x for now.
315
Tim Rice2291c002005-08-26 13:15:19 -070031620050826
317 - (tim) [CREDITS LICENCE auth.c configure.ac defines.h includes.h session.c
318 openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h
319 openbsd-compat/xcrypt.c] New files [openssh/openbsd-compat/port-uw.c
320 openssh/openbsd-compat/port-uw.h] Support long passwords (> 8-char)
321 on UnixWare 7 from Dhiraj Gulati and Ahsan Rashid. Cleanup and testing
322 by tim@. Feedback and OK dtucker@
323
Darren Tucker114572f2005-08-23 23:32:05 +100032420050823
325 - (dtucker) [regress/test-exec.sh] Do not prepend an extra "/" to a fully-
326 qualified sshd pathname since some systems (eg Cygwin) may consider "/foo"
327 and "//foo" to be different. Spotted by vinschen at redhat.com.
Tim Rice8cc2ad62005-08-23 17:18:21 -0700328 - (tim) [configure.ac] Not all gcc's support -Wsign-compare. Enhancements
329 and OK dtucker@
330 - (tim) [defines.h] PATH_MAX bits for OpenServer OK dtucker@
Darren Tucker114572f2005-08-23 23:32:05 +1000331
Darren Tucker93e7e8f2005-08-23 08:06:55 +100033220050821
333 - (dtucker) [configure.ac defines.h includes.h sftp.c] Add support for
334 LynxOS, patch from Olli Savia (ops at iki.fi). ok djm@
335
Damien Miller1d109762005-08-16 21:32:09 +100033620050816
Damien Millerca9ce952005-08-31 19:42:20 +1000337 - (djm) [ttymodes.c] bugzilla #1025: Fix encoding of _POSIX_VDISABLE,
Damien Miller1d109762005-08-16 21:32:09 +1000338 from Jacob Nevins; ok dtucker@
339
Tim Rice027e8b12005-08-15 14:52:50 -070034020050815
Tim Ricec1819c82005-08-15 17:48:40 -0700341 - (tim) [sftp.c] wrap el_end() in #ifdef USE_LIBEDIT
342 - (tim) [configure.ac] corrections to libedit tests. Report and patches
343 by skeleten AT shillest.net
Tim Rice027e8b12005-08-15 14:52:50 -0700344
Damien Millerb5c01252005-08-12 22:10:28 +100034520050812
346 - (djm) OpenBSD CVS Sync
347 - markus@cvs.openbsd.org 2005/07/28 17:36:22
348 [packet.c]
349 missing packet_init_compression(); from solar
Damien Millerbe1045d2005-08-12 22:10:56 +1000350 - djm@cvs.openbsd.org 2005/07/30 01:26:16
351 [ssh.c]
352 fix -D listen_host initialisation, so it picks up gateway_ports setting
353 correctly
Damien Miller43f6db62005-08-12 22:11:18 +1000354 - djm@cvs.openbsd.org 2005/07/30 02:03:47
355 [readconf.c]
356 listen_hosts initialisation here too; spotted greg AT y2005.nest.cx
Damien Miller203c7052005-08-12 22:11:37 +1000357 - dtucker@cvs.openbsd.org 2005/08/06 10:03:12
358 [servconf.c]
359 Unbreak sshd ListenAddress for bare IPv6 addresses.
Damien Miller8e489482005-08-12 22:11:58 +1000360 Report from Janusz Mucka; ok djm@
Damien Miller0e2c1022005-08-12 22:16:22 +1000361 - jaredy@cvs.openbsd.org 2005/08/08 13:22:48
362 [sftp.c]
363 sftp prompt enhancements:
364 - in non-interactive mode, do not print an empty prompt at the end
365 before finishing
366 - print newline after EOF in editline mode
367 - call el_end() in editline mode
368 ok dtucker djm
Damien Millerb5c01252005-08-12 22:10:28 +1000369
Darren Tuckerc7572b22005-08-10 20:34:15 +100037020050810
371 - (dtucker) [configure.ac] Test libedit library and headers for compatibility.
372 Report from skeleten AT shillest.net, ok djm@
Darren Tucker73f671a2005-08-10 21:52:36 +1000373 - (dtucker) [LICENCE configure.ac defines.h openbsd-compat/realpath.c]
374 Sync current (thread-safe) version of realpath.c from OpenBSD (which is
375 in turn based on FreeBSD's). ok djm@
Darren Tuckerc7572b22005-08-10 20:34:15 +1000376
Tim Rice8bc6b902005-08-09 10:09:53 -070037720050809
378 - (tim) [configure.ac] Allow --with-audit=no. OK dtucker@
379 Report by skeleten AT shillest.net
380
Darren Tucker212cfc42005-08-03 10:57:15 +100038120050803
382 - (dtucker) [openbsd-compat/fake-rfc2553.h] Check for EAI_* defines
383 individually and use a value less likely to collide with real values from
384 netdb.h. Fixes compile warnings on FreeBSD 5.3. ok djm@
Darren Tucker98256972005-08-03 15:36:21 +1000385 - (dtucker) [openbsd-compat/fake-rfc2553.h] MAX_INT -> INT_MAX since the
386 latter is specified in the standard.
Darren Tucker212cfc42005-08-03 10:57:15 +1000387
Darren Tucker40858532005-08-02 17:07:07 +100038820050802
389 - (dtucker) OpenBSD CVS Sync
390 - dtucker@cvs.openbsd.org 2005/07/27 10:39:03
391 [scp.c hostfile.c sftp-client.c]
392 Silence bogus -Wuninitialized warnings; ok djm@
Darren Tuckerdd352b62005-08-02 17:21:29 +1000393 - (dtucker) [configure.ac] Enable -Wuninitialized by default when compiling
394 with gcc. ok djm@
Darren Tucker7da23cb2005-08-03 00:20:15 +1000395 - (dtucker) [configure.ac] Add a --with-Werror option to configure for
396 adding -Werror to CFLAGS when all of the configure tests are done. ok djm@
Darren Tucker40858532005-08-02 17:07:07 +1000397
Darren Tuckerac1910f2005-07-26 12:00:42 +100039820050726
399 - (dtucker) [configure.ac] Update zlib warning message too, pointed out by
400 tim@.
Damien Miller47655ee2005-07-26 21:54:11 +1000401 - (djm) OpenBSD CVS Sync
402 - otto@cvs.openbsd.org 2005/07/19 15:32:26
403 [auth-passwd.c]
404 auth_usercheck(3) can return NULL, so check for that. Report from
405 mpech@. ok markus@
Damien Miller9786e6e2005-07-26 21:54:56 +1000406 - markus@cvs.openbsd.org 2005/07/25 11:59:40
407 [kex.c kex.h myproposal.h packet.c packet.h servconf.c session.c]
408 [sshconnect2.c sshd.c sshd_config sshd_config.5]
409 add a new compression method that delays compression until the user
410 has been authenticated successfully and set compression to 'delayed'
411 for sshd.
412 this breaks older openssh clients (< 3.5) if they insist on
413 compression, so you have to re-enable compression in sshd_config.
414 ok djm@
Darren Tuckerac1910f2005-07-26 12:00:42 +1000415
Darren Tucker41097ed2005-07-25 15:24:21 +100041620050725
417 - (dtucker) [configure.ac] Update zlib version check for CAN-2005-2096.
418
Damien Miller46d38de2005-07-17 17:02:09 +100041920050717
420- OpenBSD CVS Sync
421 - djm@cvs.openbsd.org 2005/07/16 01:35:24
422 [auth1.c channels.c cipher.c clientloop.c kex.c session.c ssh.c]
423 [sshconnect.c]
424 spacing
Damien Miller94cf4c82005-07-17 17:04:47 +1000425 - (djm) [acss.c auth-pam.c auth-shadow.c auth-skey.c auth1.c canohost.c]
426 [cipher-acss.c loginrec.c ssh-rand-helper.c sshd.c] Fix whitespace at EOL
427 in portable too ("perl -p -i -e 's/\s+$/\n/' *.[ch]")
Damien Miller37294fb2005-07-17 17:18:49 +1000428 - (djm) [auth-pam.c sftp.c] spaces vs. tabs at start of line
Damien Miller2b9b0452005-07-17 17:19:24 +1000429 - djm@cvs.openbsd.org 2005/07/17 06:49:04
430 [channels.c channels.h session.c session.h]
431 Fix a number of X11 forwarding channel leaks:
432 1. Refuse multiple X11 forwarding requests on the same session
433 2. Clean up all listeners after a single_connection X11 forward, not just
434 the one that made the single connection
435 3. Destroy X11 listeners when the session owning them goes away
436 testing and ok dtucker@
Damien Miller0dc1bef2005-07-17 17:22:45 +1000437 - djm@cvs.openbsd.org 2005/07/17 07:17:55
438 [auth-rh-rsa.c auth-rhosts.c auth2-chall.c auth2-gss.c channels.c]
439 [cipher-ctr.c gss-genr.c gss-serv.c kex.c moduli.c readconf.c]
440 [serverloop.c session.c sftp-client.c sftp.c ssh-add.c ssh-keygen.c]
441 [sshconnect.c sshconnect2.c]
442 knf says that a 2nd level indent is four (not three or five) spaces
Damien Millerb6f72f52005-07-17 17:26:43 +1000443 -(djm) [audit.c auth1.c auth2.c entropy.c loginrec.c serverloop.c]
444 [ssh-rand-helper.c] fix portable 2nd level indents at 4 spaces too
Damien Miller04b65332005-07-17 17:53:31 +1000445 - (djm) [monitor.c monitor_wrap.c] -Wsign-compare for PAM monitor calls
446
Darren Tucker4f1adad2005-07-16 11:33:06 +100044720050716
448 - (dtucker) [auth-pam.c] Ensure that only one side of the authentication
449 socketpair stays open on in both the monitor and PAM process. Patch from
450 Joerg Sonnenberger.
451
Darren Tuckera5cf8552005-07-14 17:04:18 +100045220050714
453 - (dtucker) OpenBSD CVS Sync
454 - dtucker@cvs.openbsd.org 2005/07/06 09:33:05
455 [ssh.1]
456 clarify meaning of ssh -b ; with & ok jmc@
Darren Tuckerbee73d52005-07-14 17:05:02 +1000457 - dtucker@cvs.openbsd.org 2005/07/08 09:26:18
458 [misc.c]
459 Make comment match code; ok djm@
Darren Tuckerce377c32005-07-14 17:05:51 +1000460 - markus@cvs.openbsd.org 2005/07/08 09:41:33
461 [channels.h]
462 race when efd gets closed while there is still buffered data:
463 change CHANNEL_EFD_OUTPUT_ACTIVE()
464 1) c->efd must always be valid AND
465 2a) no EOF has been seen OR
466 2b) there is buffered data
467 report, initial fix and testing Chuck Cranor
Darren Tucker89f4d472005-07-14 17:06:21 +1000468 - dtucker@cvs.openbsd.org 2005/07/08 10:20:41
469 [ssh_config.5]
470 change BindAddress to match recent ssh -b change; prompted by markus@
Darren Tucker6c71d202005-07-14 17:06:50 +1000471 - jmc@cvs.openbsd.org 2005/07/08 12:53:10
472 [ssh_config.5]
473 new sentence, new line;
Darren Tucker8e2eb302005-07-14 17:07:21 +1000474 - dtucker@cvs.openbsd.org 2005/07/14 04:00:43
475 [misc.h]
476 use __sentinel__ attribute; ok deraadt@ djm@ markus@
Darren Tucker4a422572005-07-14 17:22:11 +1000477 - (dtucker) [configure.ac defines.h] Define __sentinel__ to nothing if the
478 compiler doesn't understand it to prevent warnings. If any mainstream
479 compiler versions acquire it we can test for those versions. Based on
480 discussion with djm@.
Darren Tuckera5cf8552005-07-14 17:04:18 +1000481
Darren Tuckera916d142005-07-07 11:50:20 +100048220050707
Darren Tuckera83f2612005-07-07 20:09:35 +1000483 - dtucker [auth-krb5.c auth.h gss-serv-krb5.c] Move KRB5CCNAME generation for
484 the MIT Kerberos code path into a common function and expand mkstemp
485 template to be consistent with the rest of OpenSSH. From sxw at
486 inf.ed.ac.uk, ok djm@
487 - (dtucker) [auth-krb5.c] There's no guarantee that snprintf will set errno
488 in the case where the buffer is insufficient, so always return ENOMEM.
489 Also pointed out by sxw at inf.ed.ac.uk.
Darren Tucker893c6022005-07-07 20:33:36 +1000490 - (dtucker) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Remove
491 calls to krb5_init_ets, which has not been required since krb-1.1.x and
492 most Kerberos versions no longer export in their public API. From sxw
493 at inf.ed.ac.uk, ok djm@
Darren Tuckera916d142005-07-07 11:50:20 +1000494
Damien Millera7270302005-07-06 09:36:05 +100049520050706
496 - (djm) OpenBSD CVS Sync
497 - markus@cvs.openbsd.org 2005/07/01 13:19:47
498 [channels.c]
499 don't free() if getaddrinfo() fails; report mpech@
Damien Miller13390022005-07-06 09:44:19 +1000500 - djm@cvs.openbsd.org 2005/07/04 00:58:43
501 [channels.c clientloop.c clientloop.h misc.c misc.h ssh.c ssh_config.5]
502 implement support for X11 and agent forwarding over multiplex slave
503 connections. Because of protocol limitations, the slave connections inherit
504 the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding
505 their own.
506 ok dtucker@ "put it in" deraadt@
Damien Millerfd94fba2005-07-06 09:44:59 +1000507 - jmc@cvs.openbsd.org 2005/07/04 11:29:51
508 [ssh_config.5]
509 fix Xr and a little grammar;
Damien Millerf92c0792005-07-06 09:45:26 +1000510 - markus@cvs.openbsd.org 2005/07/04 14:04:11
511 [channels.c]
512 don't forget to set x11_saved_display
Damien Millera7270302005-07-06 09:36:05 +1000513
Damien Miller9651fe62005-06-26 08:55:25 +100051420050626
515 - (djm) OpenBSD CVS Sync
516 - djm@cvs.openbsd.org 2005/06/17 22:53:47
517 [ssh.c sshconnect.c]
518 Fix ControlPath's %p expanding to "0" for a default port,
519 spotted dwmw2 AT infradead.org; ok markus@
Damien Miller8f74c8f2005-06-26 08:56:03 +1000520 - djm@cvs.openbsd.org 2005/06/18 04:30:36
521 [ssh.c ssh_config.5]
522 allow ControlPath=none, patch from dwmw2 AT infradead.org; ok dtucker@
Damien Miller7c71cc72005-06-26 08:56:31 +1000523 - djm@cvs.openbsd.org 2005/06/25 22:47:49
524 [ssh.c]
Damien Millerdba63542005-06-26 08:56:48 +1000525 do the default port filling code a few lines earlier, so it really
526 does fix %p
Damien Miller9651fe62005-06-26 08:55:25 +1000527
Damien Miller6abf57c2005-06-19 07:31:37 +100052820050618
529 - (djm) OpenBSD CVS Sync
530 - djm@cvs.openbsd.org 2005/05/20 12:57:01;
531 [auth1.c] split protocol 1 auth methods into separate functions, makes
532 authloop much more readable; fixes and ok markus@ (portable ok &
533 polish dtucker@)
Damien Miller06221f12005-06-19 07:36:10 +1000534 - djm@cvs.openbsd.org 2005/06/17 02:44:33
535 [auth1.c] make this -Wsign-compare clean; ok avsm@ markus@
Damien Miller52c8afe2005-06-19 10:19:43 +1000536 - (djm) [loginrec.c ssh-rand-helper.c] Fix -Wsign-compare for portable,
537 tested and fixes tim@
Damien Miller6abf57c2005-06-19 07:31:37 +1000538
Damien Miller17e7ed02005-06-17 12:54:33 +100053920050617
540 - (djm) OpenBSD CVS Sync
541 - djm@cvs.openbsd.org 2005/06/16 03:38:36
542 [channels.c channels.h clientloop.c clientloop.h ssh.c]
543 move x11_get_proto from ssh.c to clientloop.c, to make muliplexed xfwd
544 easier later; ok deraadt@
Damien Miller677257f2005-06-17 12:55:03 +1000545 - markus@cvs.openbsd.org 2005/06/16 08:00:00
546 [canohost.c channels.c sshd.c]
547 don't exit if getpeername fails for forwarded ports; bugzilla #1054;
548 ok djm
Damien Millereccb9de2005-06-17 12:59:34 +1000549 - djm@cvs.openbsd.org 2005/06/17 02:44:33
550 [auth-rsa.c auth.c auth1.c auth2-chall.c auth2-gss.c authfd.c authfile.c]
551 [bufaux.c canohost.c channels.c cipher.c clientloop.c dns.c gss-serv.c]
552 [kex.c kex.h key.c mac.c match.c misc.c packet.c packet.h scp.c]
553 [servconf.c session.c session.h sftp-client.c sftp-server.c sftp.c]
554 [ssh-keyscan.c ssh-rsa.c sshconnect.c sshconnect1.c sshconnect2.c sshd.c]
555 make this -Wsign-compare clean; ok avsm@ markus@
556 NB. auth1.c changes not committed yet (conflicts with uncommitted sync)
557 NB2. more work may be needed to make portable Wsign-compare clean
Darren Tuckerf0bd3522005-06-17 21:15:20 +1000558 - (dtucker) [cipher.c openbsd-compat/openbsd-compat.h
559 openbsd-compat/openssl-compat.c] only include openssl compat stuff where
560 it's needed as it can cause conflicts elsewhere (eg xcrypt.c). Found by
561 and ok tim@
Damien Miller17e7ed02005-06-17 12:54:33 +1000562
Damien Miller05656962005-06-16 13:18:04 +100056320050616
564 - (djm) OpenBSD CVS Sync
565 - jaredy@cvs.openbsd.org 2005/06/07 13:25:23
566 [progressmeter.c]
567 catch SIGWINCH and resize progress meter accordingly; ok markus dtucker
Damien Miller6476cad2005-06-16 13:18:34 +1000568 - djm@cvs.openbsd.org 2005/06/06 11:20:36
569 [auth.c auth.h misc.c misc.h ssh.c ssh_config.5 sshconnect.c]
570 introduce a generic %foo expansion function. replace existing % expansion
571 and add expansion to ControlPath; ok markus@
Damien Millerac7ef6a2005-06-16 13:19:06 +1000572 - djm@cvs.openbsd.org 2005/06/08 03:50:00
573 [ssh-keygen.1 ssh-keygen.c sshd.8]
574 increase default rsa/dsa key length from 1024 to 2048 bits;
575 ok markus@ deraadt@
Damien Millerd14b1e72005-06-16 13:19:41 +1000576 - djm@cvs.openbsd.org 2005/06/08 11:25:09
577 [clientloop.c readconf.c readconf.h ssh.c ssh_config.5]
578 add ControlMaster=auto/autoask options to support opportunistic
579 multiplexing; tested avsm@ and jakob@, ok markus@
Damien Miller46f55d32005-06-16 13:21:17 +1000580 - dtucker@cvs.openbsd.org 2005/06/09 13:43:49
581 [cipher.c]
582 Correctly initialize end of array sentinel; ok djm@
583 (Id sync only, change already in portable)
Damien Miller05656962005-06-16 13:18:04 +1000584
Darren Tuckera55ec772005-06-09 21:45:10 +100058520050609
586 - (dtucker) [cipher.c openbsd-compat/Makefile.in
Darren Tucker488d6022005-06-09 23:40:39 +1000587 openbsd-compat/openbsd-compat.h openbsd-compat/openssl-compat.{c,h}]
Darren Tuckera55ec772005-06-09 21:45:10 +1000588 Move compatibility code for supporting older OpenSSL versions to the
589 compat layer. Suggested by and "no objection" djm@
590
Darren Tucker431f0222005-06-07 17:53:40 +100059120050607
592 - (dtucker) [configure.ac] Continue the hunt for LLONG_MIN and LLONG_MAX:
593 in today's episode we attempt to coax it from limits.h where it may be
594 hiding, failing that we take the DIY approach. Tested by tim@
595
Darren Tucker67b37032005-06-03 17:58:31 +100059620050603
597 - (dtucker) [configure.ac] Only try gcc -std=gnu99 if LLONG_MAX isn't
598 defined, and check that it helps before keeping it in CFLAGS. Some old
599 gcc's don't set an error code when encountering an unknown value in -std.
600 Found and tested by tim@.
Darren Tucker6a45f3d2005-06-03 19:33:10 +1000601 - (dtucker) [configure.ac] Point configure's reporting address at the
602 openssh-unix-dev list. ok tim@ djm@
Darren Tucker67b37032005-06-03 17:58:31 +1000603
Tim Ricefcc7ff12005-06-02 20:28:29 -070060420050602
605 - (tim) [configure.ac] Some platforms need sys/types.h for arpa/nameser.h.
606 Take AC_CHECK_HEADERS test out of ultrix section. It caused other platforms
607 to skip builtin standard includes tests. (first AC_CHECK_HEADERS test
608 must be run on all platforms) Add missing ;; to case statement. OK dtucker@
609
Darren Tuckerd886e1c2005-06-01 18:57:45 +100061020050601
611 - (dtucker) [configure.ac] Look for _getshort and _getlong in
612 arpa/nameser.h.
Darren Tucker81eb5d52005-06-01 21:39:33 +1000613 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoll.c]
614 Add strtoll to the compat library, from OpenBSD.
Darren Tuckerfc4f2dd2005-06-01 23:01:12 +1000615 - (dtucker) OpenBSD CVS Sync
616 - avsm@cvs.openbsd.org 2005/05/26 02:08:05
617 [scp.c]
618 If copying multiple files to a target file (which normally fails, as it
619 must be a target directory), kill the spawned ssh child before exiting.
620 This stops it trying to authenticate and spewing lots of output.
621 deraadt@ ok
Darren Tucker2db8ae62005-06-01 23:02:25 +1000622 - dtucker@cvs.openbsd.org 2005/05/26 09:08:12
623 [ssh-keygen.c]
624 uint32_t -> u_int32_t for consistency; ok djm@
Darren Tucker0814d312005-06-01 23:08:51 +1000625 - djm@cvs.openbsd.org 2005/05/27 08:30:37
626 [ssh.c]
627 fix -O for cases where no ControlPath has been specified or socket at
628 ControlPath is not contactable; spotted by and ok avsm@
Tim Rice5f707582005-06-01 19:57:45 -0700629 - (tim) [config.guess config.sub] Update to '2005-05-27' version.
Tim Rice4dbacff2005-06-01 20:09:28 -0700630 - (tim) [configure.ac] set TEST_SHELL for OpenServer 6
Darren Tuckerd886e1c2005-06-01 18:57:45 +1000631
Darren Tucker11fb0f22005-05-31 16:51:07 +100063220050531
633 - (dtucker) [contrib/aix/pam.conf] Correct comments. From davidl at
634 vintela.com.
Darren Tuckerf5615962005-05-31 16:59:16 +1000635 - (dtucker) [mdoc2man.awk] Teach it to understand .Ox.
Darren Tucker11fb0f22005-05-31 16:51:07 +1000636
63720050530
638 - (dtucker) [README] Link to new release notes. Beter late than never...
639
Darren Tucker782727a2005-05-29 10:28:48 +100064020050529
641 - (dtucker) [openbsd-compat/port-aix.c] Bug #1046: AIX 5.3 expects the
642 argument to passwdexpired to be initialized to NULL. Suggested by tim@
643 While at it, initialize the other arguments to auth functions in case they
644 ever acquire this behaviour.
Darren Tucker6b2fe312005-05-29 10:32:47 +1000645 - (dtucker) [openbsd-compat/port-aix.c] Whitespace cleanups while there.
Darren Tuckerf9fea652005-05-29 10:54:27 +1000646 - (dtucker) [openbsd-compat/port-aix.c] Minor correction to debug message,
647 spotted by tim@.
Darren Tucker782727a2005-05-29 10:28:48 +1000648
Darren Tucker0c9653f2005-05-28 15:58:14 +100064920050528
650 - (dtucker) [configure.ac] For AC_CHECK_HEADERS() and AC_CHECK_FUNCS() have
651 one entry per line to make it easier to merge changes. ok djm@
Darren Tucker390b6d52005-05-28 16:54:36 +1000652 - (dtucker) [configure.ac] strsep() may be defined in string.h, so check
653 for its presence and include it in the strsep check.
Darren Tucker7d2171b2005-05-28 16:57:00 +1000654 - (dtucker) [configure.ac] getpgrp may be defined in unistd.h, so check for
655 its presence before doing AC_FUNC_GETPGRP.
Darren Tuckerfd333282005-05-28 18:31:42 +1000656 - (dtucker) [configure.ac] Merge HP-UX blocks into a common block with minor
657 version-specific variations as required.
Darren Tucker5d72a402005-05-28 20:28:39 +1000658 - (dtucker) [openbsd-compat/port-aix.h] Use the HAVE_DECL_* definitions as
659 per the autoconf man page. Configure should always define them but it
660 doesn't hurt to check.
Darren Tucker0c9653f2005-05-28 15:58:14 +1000661
Damien Miller287b4592005-05-27 19:36:56 +100066220050527
663 - (djm) [defines.h] Use our realpath if we have to define PATH_MAX, spotted by
664 David Leach; ok dtucker@
Darren Tucker2be1cbb2005-05-27 21:13:40 +1000665 - (dtucker) [acconfig.h configure.ac defines.h includes.h sshpty.c
666 openbsd-compat/bsd-misc.c] Add support for Ultrix. No, that's not a typo.
667 Required changes from Bernhard Simon, integrated by me. ok djm@
Damien Miller287b4592005-05-27 19:36:56 +1000668
Damien Miller2c04deb2005-05-26 11:35:37 +100066920050525
670 - (djm) [mpaux.c mpaux.h Makefile.in] Remove old mpaux.[ch] code, it has not
671 been used for a while
Damien Miller9278ffa2005-05-26 11:59:06 +1000672 - (djm) OpenBSD CVS Sync
673 - otto@cvs.openbsd.org 2005/04/05 13:45:31
674 [ssh-keygen.c]
Damien Miller4f1d6b22005-05-26 11:59:32 +1000675 - djm@cvs.openbsd.org 2005/04/06 09:43:59
676 [sshd.c]
677 avoid harmless logspam by not performing setsockopt() on non-socket;
678 ok markus@
Damien Miller1b0de9a2005-05-26 12:01:22 +1000679 - dtucker@cvs.openbsd.org 2005/04/06 12:26:06
680 [ssh.c]
681 Fix debug call for port forwards; patch from pete at seebeyond.com,
682 ok djm@ (ID sync only - change already in portable)
Damien Miller5fd38c02005-05-26 12:02:14 +1000683 - djm@cvs.openbsd.org 2005/04/09 04:32:54
684 [misc.c misc.h tildexpand.c Makefile.in]
685 replace tilde_expand_filename with a simpler implementation, ahead of
686 more whacking; ok deraadt@
Damien Miller3dc967e2005-05-26 12:03:15 +1000687 - jmc@cvs.openbsd.org 2005/04/14 12:30:30
688 [ssh.1]
689 arg to -b is an address, not if_name;
690 ok markus@
Damien Millera31c9292005-05-26 12:03:31 +1000691 - jakob@cvs.openbsd.org 2005/04/20 10:05:45
692 [dns.c]
693 do not try to look up SSHFP for numerical hostname. ok djm@
Damien Miller167ea5d2005-05-26 12:04:02 +1000694 - djm@cvs.openbsd.org 2005/04/21 06:17:50
695 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 ssh_config.5 sshd.8]
696 [sshd_config.5] OpenSSH doesn't ever look at the $HOME environment
697 variable, so don't say that we do (bz #623); ok deraadt@
Damien Millerddee5752005-05-26 12:05:05 +1000698 - djm@cvs.openbsd.org 2005/04/21 11:47:19
699 [ssh.c]
700 don't allocate a pty when -n flag (/dev/null stdin) is set, patch from
701 ignasi.roca AT fujitsu-siemens.com (bz #829); ok dtucker@
Damien Millerddeb7522005-05-26 12:05:28 +1000702 - dtucker@cvs.openbsd.org 2005/04/23 23:43:47
703 [readpass.c]
704 Add debug message if read_passphrase can't open /dev/tty; bz #471;
705 ok djm@
Damien Millerac7a0052005-05-26 12:05:49 +1000706 - jmc@cvs.openbsd.org 2005/04/26 12:59:02
707 [sftp-client.h]
708 spelling correction in comment from wiz@netbsd;
Damien Millerdadfd4d2005-05-26 12:07:13 +1000709 - jakob@cvs.openbsd.org 2005/04/26 13:08:37
710 [ssh.c ssh_config.5]
711 fallback gracefully if client cannot connect to ControlPath. ok djm@
Damien Miller41bfc292005-05-26 12:07:32 +1000712 - moritz@cvs.openbsd.org 2005/04/28 10:17:56
713 [progressmeter.c ssh-keyscan.c]
714 add snprintf checks. ok djm@ markus@
Damien Millerd2ebd452005-05-26 12:07:47 +1000715 - markus@cvs.openbsd.org 2005/05/02 21:13:22
716 [readpass.c]
717 missing {}
Damien Miller924c25a2005-05-26 12:09:32 +1000718 - djm@cvs.openbsd.org 2005/05/10 10:28:11
719 [ssh.c]
720 print nice error message for EADDRINUSE as well (ID sync only)
Damien Miller538c9b72005-05-26 12:11:28 +1000721 - djm@cvs.openbsd.org 2005/05/10 10:30:43
722 [ssh.c]
723 report real errors on fallback from ControlMaster=no to normal connect
Damien Miller17b23d82005-05-26 12:11:56 +1000724 - markus@cvs.openbsd.org 2005/05/16 15:30:51
725 [readconf.c servconf.c]
726 check return value from strdelim() for NULL (AddressFamily); mpech
Damien Miller1594ad52005-05-26 12:12:19 +1000727 - djm@cvs.openbsd.org 2005/05/19 02:39:55
728 [sshd_config.5]
729 sort config options, from grunk AT pestilenz.org; ok jmc@
Damien Miller06b75ad2005-05-26 12:12:37 +1000730 - djm@cvs.openbsd.org 2005/05/19 02:40:52
731 [sshd_config]
732 whitespace nit, from grunk AT pestilenz.org
Damien Miller459735a2005-05-26 12:13:42 +1000733 - djm@cvs.openbsd.org 2005/05/19 02:42:26
734 [includes.h]
735 fix cast, from grunk AT pestilenz.org
Damien Millerebcfedc2005-05-26 12:13:56 +1000736 - djm@cvs.openbsd.org 2005/05/20 10:50:55
737 [ssh_config.5]
738 give a ProxyCommand example using nc(1), with and ok jmc@
Damien Millerdfec2942005-05-26 12:14:32 +1000739 - jmc@cvs.openbsd.org 2005/05/20 11:23:32
740 [ssh_config.5]
741 oops - article and spacing;
Damien Millerb089fb52005-05-26 12:16:18 +1000742 - avsm@cvs.openbsd.org 2005/05/23 22:44:01
743 [moduli.c ssh-keygen.c]
744 - removes signed/unsigned comparisons in moduli generation
745 - use strtonum instead of atoi where its easier
746 - check some strlcpy overflow and fatal instead of truncate
Damien Miller3710f272005-05-26 12:19:17 +1000747 - djm@cvs.openbsd.org 2005/05/23 23:32:46
748 [cipher.c myproposal.h ssh.1 ssh_config.5 sshd_config.5]
749 add support for draft-harris-ssh-arcfour-fixes-02 improved arcfour modes;
750 ok markus@
Damien Miller02e754f2005-05-26 12:19:39 +1000751 - avsm@cvs.openbsd.org 2005/05/24 02:05:09
752 [ssh-keygen.c]
753 some style nits from dmiller@, and use a fatal() instead of a printf()/exit
Damien Millerb253cc42005-05-26 12:23:44 +1000754 - avsm@cvs.openbsd.org 2005/05/24 17:32:44
755 [atomicio.c atomicio.h authfd.c monitor_wrap.c msg.c scp.c sftp-client.c]
756 [ssh-keyscan.c sshconnect.c]
757 Switch atomicio to use a simpler interface; it now returns a size_t
758 (containing number of bytes read/written), and indicates error by
759 returning 0. EOF is signalled by errno==EPIPE.
760 Typical use now becomes:
761
762 if (atomicio(read, ..., len) != len)
763 err(1,"read");
764
765 ok deraadt@, cloder@, djm@
Darren Tuckerd98dce62005-05-26 13:43:57 +1000766 - (dtucker) [regress/reexec.sh] Add ${EXEEXT} so this test also works on
767 Cygwin.
Darren Tuckerf08bdb52005-05-26 19:59:48 +1000768 - (dtucker) [auth-pam.c] Bug #1033: Fix warnings building with PAM on Linux:
Darren Tucker84ce9b42005-05-26 20:12:15 +1000769 warning: dereferencing type-punned pointer will break strict-aliasing rules
770 warning: passing arg 3 of `pam_get_item' from incompatible pointer type
771 The type-punned pointer fix is based on a patch from SuSE's rpm. ok djm@
772 - (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Bug #1033: Provide
773 templates for _getshort and _getlong if missing to prevent compiler warnings
774 on Linux.
Damien Millerde3cb0a2005-05-26 20:48:25 +1000775 - (djm) [configure.ac openbsd-compat/Makefile.in]
776 [openbsd-compat/openbsd-compat.h openbsd-compat/strtonum.c]
777 Add strtonum(3) from OpenBSD libc, new code needs it.
778 Unfortunately Linux forces us to do a bizarre dance with compiler
779 options to get LLONG_MIN/MAX; Spotted by and ok dtucker@
Damien Miller2c04deb2005-05-26 11:35:37 +1000780
Damien Miller4d8f5602005-05-25 14:43:47 +100078120050524
782 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
783 [contrib/suse/openssh.spec] Update spec file versions to 4.1p1
Darren Tucker328118a2005-05-25 16:18:09 +1000784 - (dtucker) [auth-pam.c] Since people don't seem to be getting the message
785 that USE_POSIX_THREADS is unsupported, not recommended and generally a bad
786 idea, it is now known as UNSUPPORTED_POSIX_THREADS_HACK. Attempting to use
787 USE_POSIX_THREADS will now generate an error so we don't silently change
788 behaviour. ok djm@
Darren Tuckerae8c91e2005-05-25 19:42:10 +1000789 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Ensure sufficient memory
790 allocation when retrieving core Windows environment. Add CYGWIN variable
791 to propagated variables. Patch from vinschen at redhat.com, ok djm@
Damien Miller6b6d5be2005-05-26 11:34:36 +1000792 - Release 4.1p1
Damien Miller4d8f5602005-05-25 14:43:47 +1000793
79420050524
Damien Millerdf548bc2005-05-24 15:54:27 +1000795 - (djm) [openbsd-compat/readpassphrase.c] bz #950: Retry tcsetattr to ensure
796 terminal modes are reset correctly. Fix from peak AT argo.troja.mff.cuni.cz;
797 "looks ok" dtucker@
798
79920050512
Tim Riceb58bd032005-05-12 10:32:19 -0700800 - (tim) [buildpkg.sh.in] missing ${PKG_INSTALL_ROOT} in init script
801 hard link section. Bug 1038.
802
Darren Tuckerfa2211d2005-05-09 23:48:17 +100080320050509
804 - (dtucker) [contrib/cygwin/ssh-host-config] Add a test and warning for a
805 user-mode mounts in Cygwin installation. Patch from vinschen at redhat.com.
806
Damien Miller4f10e252005-05-04 15:33:09 +100080720050504
808 - (djm) [ssh.c] some systems return EADDRINUSE on a bind to an already-used
809 unix domain socket, so catch that too; from jakob@ ok dtucker@
810
Darren Tucker5b115d42005-05-03 19:05:32 +100081120050503
812 - (dtucker) [canohost.c] normalise socket addresses returned by
813 get_remote_hostname(). This means that IPv4 addresses in log messages
814 on IPv6 enabled machines will no longer be prefixed by "::ffff:" and
815 AllowUsers, DenyUsers, AllowGroups, DenyGroups will match IPv4-style
816 addresses only for 4-in-6 mapped connections, regardless of whether
817 or not the machine is IPv6 enabled. ok djm@
818
Darren Tuckerfaefd2e2005-04-25 14:48:22 +100081920050425
820 - (dtucker) [regress/multiplex.sh] Use "kill -0 $pid" to check for the
821 existence of a process since it's more portable. Found by jbasney at
822 ncsa.uiuc.edu; ok tim@
Darren Tuckerbf2b3982005-04-25 14:49:48 +1000823 - (dtucker) [regress/multiplex.sh] Remove cleanup call since test-exec.sh
824 will clean up anyway. From tim@
Darren Tuckeraf342552005-04-25 17:01:26 +1000825 - (dtucker) [regress/multiplex.sh] Put control socket in /tmp so running
Darren Tucker149da852005-04-25 17:03:29 +1000826 "make tests" works even if you're building on a filesystem that doesn't
Darren Tuckeraf342552005-04-25 17:01:26 +1000827 support sockets. From deengert at anl.gov, ok djm@
Darren Tuckerfaefd2e2005-04-25 14:48:22 +1000828
Darren Tucker2f0b5c42005-04-24 17:52:22 +100082920050424
830 - (dtucker) [INSTALL configure.ac] Make zlib version check test for 1.1.4 or
831 1.2.1.2 or higher. With tim@, ok djm@
832
Tim Rice4149ebc2005-04-23 18:17:29 -070083320050423
834 - (tim) [config.guess] Add support for OpenServer 6.
835
Darren Tucker48554152005-04-21 19:50:55 +100083620050421
837 - (dtucker) [session.c] Bug #1024: Don't check pam_session_is_open if
838 UseLogin is set as PAM is not used to establish credentials in that
839 case. Found by Michael Selvesteen, ok djm@
840
Darren Tuckerd9c88132005-04-19 12:21:21 +100084120050419
842 - (dtucker) [INSTALL] Reference README.privsep for the privilege separation
843 requirements. Pointed out by Bengt Svensson.
Darren Tuckerad1e5e22005-04-19 15:31:49 +1000844 - (dtucker) [INSTALL] Put the s/key text and URL back together.
Darren Tucker8d158c92005-04-19 15:40:51 +1000845 - (dtucker) [INSTALL] Fix s/key text too.
Darren Tuckerd9c88132005-04-19 12:21:21 +1000846
Tim Rice2f97b8b2005-04-11 19:00:18 -070084720050411
848 - (tim) [configure.ac] UnixWare needs PASSWD_NEEDS_USERNAME
849
Darren Tucker9d2562c2005-04-05 19:22:45 +100085020050405
851 - (dtucker) [configure.ac] Define HAVE_SO_PEERCRED if we have it. ok djm@
Darren Tucker00cadb82005-04-05 20:58:37 +1000852 - (dtucker) [auth-sia.c] Constify sys_auth_passwd, fixes build error on
853 Tru64. Patch from cmadams at hiwaay.net.
Darren Tucker0f5eeff2005-04-05 21:00:47 +1000854 - (dtucker) [auth-passwd.c auth-sia.h] Remove duplicate definitions of
855 sys_auth_passwd, pointed out by cmadams at hiwaay.net.
Darren Tucker9d2562c2005-04-05 19:22:45 +1000856
Damien Miller3dae15c2005-04-03 10:16:11 +100085720050403
858 - (djm) OpenBSD CVS Sync
859 - deraadt@cvs.openbsd.org 2005/03/31 18:39:21
860 [scp.c]
861 copy argv[] element instead of smashing the one that ps will see; ok otto
Damien Miller4942de52005-04-03 10:16:39 +1000862 - djm@cvs.openbsd.org 2005/04/02 12:41:16
863 [scp.c]
864 since ssh has xstrdup, use it instead of strdup+test. unbreaks -Werror
865 build
Darren Tucker69152292005-04-03 12:44:23 +1000866 - (dtucker) [monitor.c] Don't free buffers in audit functions, monitor_read
867 will free as needed. ok tim@ djm@
Damien Miller3dae15c2005-04-03 10:16:11 +1000868
Darren Tucker5ede2ad2005-03-31 21:31:10 +100086920050331
870 - (dtucker) OpenBSD CVS Sync
871 - jmc@cvs.openbsd.org 2005/03/16 11:10:38
872 [ssh_config.5]
873 get the syntax right for {Local,Remote}Forward;
874 based on a diff from markus;
875 problem report from ponraj;
876 ok dtucker@ markus@ deraadt@
Darren Tucker1f04ca22005-03-31 21:31:54 +1000877 - markus@cvs.openbsd.org 2005/03/16 21:17:39
878 [version.h]
879 4.1
Darren Tucker83d5a982005-03-31 21:33:50 +1000880 - jmc@cvs.openbsd.org 2005/03/18 17:05:00
881 [sshd_config.5]
882 typo;
Darren Tuckerf3bb4342005-03-31 21:39:25 +1000883 - (dtucker) [auth.h sshd.c openbsd-compat/port-aix.c] Bug #1006: fix bug in
884 handling of password expiry messages returned by AIX's authentication
885 routines, originally reported by robvdwal at sara.nl.
Darren Tucker73ba4372005-03-31 21:51:54 +1000886 - (dtucker) [ssh.c] Prevent null pointer deref in port forwarding debug
887 message on some platforms. Patch from pete at seebeyond.com via djm.
Darren Tuckerde0de392005-03-31 23:52:04 +1000888 - (dtucker) [monitor.c] Remaining part of fix for bug #1006.
Darren Tucker5ede2ad2005-03-31 21:31:10 +1000889
Darren Tucker6e1defd2005-03-29 23:24:12 +100089020050329
891 - (dtucker) [contrib/aix/buildbff.sh] Bug #1005: Look up only the user we're
892 interested in which is much faster in large (eg LDAP or NIS) environments.
893 Patch from dleonard at vintela.com.
894
Darren Tucker86a5f8d2005-03-21 09:55:17 +110089520050321
896 - (dtucker) [configure.ac] Prevent configure --with-zlib from adding -Iyes
897 and -Lyes to CFLAGS and LIBS. Pointed out by peter at slagheap.net,
898 with & ok tim@
Darren Tucker1df61452005-03-21 09:58:07 +1100899 - (dtucker) [configure.ac] Make configure error out if the user specifies
900 --with-libedit but the required libs can't be found, rather than silently
901 ignoring and continuing. ok tim@
Darren Tuckere66519d2005-03-21 22:46:34 +1100902 - (dtucker) [configure.ac openbsd-compat/port-aix.h] Prevent redefinitions
903 of setauthdb on AIX 5.3, reported by anders.liljegren at its.uu.se.
Darren Tucker86a5f8d2005-03-21 09:55:17 +1100904
Tim Rice12ee8e22005-03-17 13:37:04 -080090520050317
906 - (tim) [configure.ac] Bug 998. Make path for --with-opensc optional.
907 Make --without-opensc work.
Tim Rice8bb561b2005-03-17 16:23:19 -0800908 - (tim) [configure.ac] portability changes on test statements. Some shells
909 have problems with -a operator.
Tim Rice35cc69d2005-03-17 16:44:25 -0800910 - (tim) [configure.ac] make some configure options a little more error proof.
Tim Riceeae17cc2005-03-17 16:52:20 -0800911 - (tim) [configure.ac] remove trailing white space.
Tim Rice12ee8e22005-03-17 13:37:04 -0800912
Darren Tucker1d55ca72005-03-14 22:58:40 +110091320050314
914 - (dtucker) OpenBSD CVS Sync
915 - dtucker@cvs.openbsd.org 2005/03/10 10:15:02
916 [readconf.c]
917 Check listen addresses for null, prevents xfree from dying during
918 ClearAllForwardings (bz #996). From Craig Leres, ok markus@
Darren Tucker47eede72005-03-14 23:08:12 +1100919 - deraadt@cvs.openbsd.org 2005/03/10 22:01:05
920 [misc.c ssh-keygen.c servconf.c clientloop.c auth-options.c ssh-add.c
921 monitor.c sftp-client.c bufaux.h hostfile.c ssh.c sshconnect.c channels.c
922 readconf.c bufaux.c sftp.c]
923 spacing
Darren Tucker90b9e022005-03-14 23:08:50 +1100924 - deraadt@cvs.openbsd.org 2005/03/10 22:40:38
925 [auth-options.c]
926 spacing
Darren Tucker9f438a92005-03-14 23:09:18 +1100927 - markus@cvs.openbsd.org 2005/03/11 14:59:06
928 [ssh-keygen.c]
929 typo, missing \n; mpech
Darren Tucker1adc2bd2005-03-14 23:14:20 +1100930 - jmc@cvs.openbsd.org 2005/03/12 11:55:03
931 [ssh_config.5]
932 escape `.' at eol to avoid double spacing issues;
Darren Tuckerda1adbc2005-03-14 23:15:58 +1100933 - dtucker@cvs.openbsd.org 2005/03/14 10:09:03
934 [ssh-keygen.1]
935 Correct description of -H (bz #997); ok markus@, punctuation jmc@
Darren Tuckera8f553d2005-03-14 23:17:27 +1100936 - dtucker@cvs.openbsd.org 2005/03/14 11:44:42
937 [auth.c]
938 Populate host for log message for logins denied by AllowUsers and
Darren Tuckerc53c3a42005-03-14 23:24:43 +1100939 DenyUsers (bz #999); ok markus@ (patch by tryponraj at gmail.com)
Darren Tucker11327cc2005-03-14 23:22:25 +1100940 - markus@cvs.openbsd.org 2005/03/14 11:46:56
941 [buffer.c buffer.h channels.c]
942 limit input buffer size for channels; bugzilla #896; with and ok dtucker@
Tim Ricec3939e22005-03-14 17:24:51 -0800943 - (tim) [contrib/caldera/openssh.spec] links in rc?.d were getting trashed
944 with a rpm -F
Darren Tucker1d55ca72005-03-14 22:58:40 +1100945
Darren Tuckera21380b2005-03-13 21:20:18 +110094620050313
947 - (dtucker) [contrib/cygwin/ssh-host-config] Makes the query for the
948 localized name of the local administrators group more reliable. From
949 vinschen at redhat.com.
950
Darren Tuckerf899e6a2005-03-14 23:02:46 +110095120050312
952 - (dtucker) [regress/test-exec.sh] DEBUG can cause problems where debug
953 output ends up in the client's output, causing regress failures. Found
954 by Corinna Vinschen.
955
Darren Tucker50c7db92005-03-09 10:02:55 +110095620050309
957 - (dtucker) [regress/test-exec.sh] Set BIN_SH=xpg4 on OSF1/Digital Unix/Tru64
958 so that regress tests behave. From Chris Adams.
Damien Millerb096ac42005-03-09 11:00:05 +1100959 - (djm) OpenBSD CVS Sync
960 - jmc@cvs.openbsd.org 2005/03/07 23:41:54
961 [ssh.1 ssh_config.5]
962 more macro simplification;
Damien Milleraca86262005-03-09 11:00:42 +1100963 - djm@cvs.openbsd.org 2005/03/08 23:49:48
964 [version.h]
965 OpenSSH 4.0
Damien Miller6f632bf2005-03-09 11:02:41 +1100966 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
967 [contrib/suse/openssh.spec] Update spec file versions
Darren Tucker835903d2005-03-09 20:12:47 +1100968 - (djm) [log.c] Fix dumb syntax error; ok dtucker@
Damien Milleraa1dba62005-03-09 11:03:08 +1100969 - (djm) Release OpenSSH 4.0p1
Darren Tucker50c7db92005-03-09 10:02:55 +1100970
Darren Tucker0d096692005-03-07 17:34:45 +110097120050307
972 - (dtucker) [configure.ac] Disable gettext search when configuring with
973 BSM audit support for the time being. ok djm@
Darren Tucker1c56ef62005-03-07 17:36:18 +1100974 - (dtucker) OpenBSD CVS Sync (regress/)
975 - fgsch@cvs.openbsd.org 2004/12/10 01:31:30
Darren Tucker68f72132005-03-07 18:25:53 +1100976 [Makefile sftp-glob.sh]
Darren Tucker1c56ef62005-03-07 17:36:18 +1100977 some globbing regress; prompted and ok djm@
Darren Tuckerb712fcc2005-03-07 18:27:28 +1100978 - david@cvs.openbsd.org 2005/01/14 04:21:18
979 [Makefile test-exec.sh]
980 pass the SUDO make variable to the individual sh tests; ok dtucker@ markus@
Darren Tuckera0f3ba72005-03-07 18:33:02 +1100981 - dtucker@cvs.openbsd.org 2005/02/27 11:33:30
982 [multiplex.sh test-exec.sh sshd-log-wrapper.sh]
983 Add optional capability to log output from regress commands; ok markus@
984 Use with: make TEST_SSH_LOGFILE=/tmp/regress.log
Darren Tucker894823e2005-03-07 18:34:04 +1100985 - djm@cvs.openbsd.org 2005/02/27 23:13:36
986 [login-timeout.sh]
987 avoid nameservice lookups in regress test; ok dtucker@
Darren Tucker5d909f02005-03-07 18:35:34 +1100988 - djm@cvs.openbsd.org 2005/03/04 08:48:46
989 [Makefile envpass.sh]
990 regress test for SendEnv config parsing bug; ok dtucker@
Darren Tucker4b9ac332005-03-07 19:15:06 +1100991 - (dtucker) [regress/test-exec.sh] Put SUDO in the right place.
Tim Ricec390c8d2005-03-07 01:21:37 -0800992 - (tim) [configure.ac] SCO 3.2v4.2 no longer supported.
Darren Tucker0d096692005-03-07 17:34:45 +1100993
Darren Tucker3745e2b2005-03-06 22:31:35 +110099420050306
995 - (dtucker) [monitor.c] Bug #125 comment #47: fix errors returned by monitor
996 when attempting to audit disconnect events. Reported by Phil Dibowitz.
Darren Tucker2b59a6d2005-03-06 22:38:51 +1100997 - (dtucker) [session.c sshd.c] Bug #125 comment #49: Send disconnect audit
998 events earlier, prevents mm_request_send errors reported by Matt Goebel.
Darren Tucker3745e2b2005-03-06 22:31:35 +1100999
Damien Miller7ffa3672005-03-05 11:20:40 +1100100020050305
1001 - (djm) [contrib/cygwin/README] Improve Cygwin build documentation. Patch
1002 from vinschen at redhat.com
Damien Millerb022b232005-03-05 11:22:36 +11001003 - (djm) OpenBSD CVS Sync
1004 - jmc@cvs.openbsd.org 2005/03/02 11:45:01
1005 [ssh.1]
1006 missing word;
Damien Millerf8e7acc2005-03-05 11:22:50 +11001007 - djm@cvs.openbsd.org 2005/03/04 08:48:06
1008 [readconf.c]
1009 fix SendEnv config parsing bug found by Roumen Petrov; ok dtucker@
Damien Miller7ffa3672005-03-05 11:20:40 +11001010
Damien Miller36bf7dd2005-03-02 12:02:47 +1100101120050302
1012 - (djm) OpenBSD CVS sync:
1013 - jmc@cvs.openbsd.org 2005/03/01 14:47:58
1014 [ssh.1]
1015 remove some unneccesary macros;
1016 do not mark up punctuation;
Damien Millerf8c55462005-03-02 12:03:05 +11001017 - jmc@cvs.openbsd.org 2005/03/01 14:55:23
1018 [ssh_config.5]
1019 do not mark up punctuation;
1020 whitespace;
Damien Miller718fd4b2005-03-02 12:03:23 +11001021 - jmc@cvs.openbsd.org 2005/03/01 14:59:49
1022 [sshd.8]
1023 new sentence, new line;
1024 whitespace;
Damien Miller4c9c6fd2005-03-02 12:03:43 +11001025 - jmc@cvs.openbsd.org 2005/03/01 15:05:00
1026 [ssh-keygen.1]
1027 whitespace;
Damien Miller9a2fdbd2005-03-02 12:04:01 +11001028 - jmc@cvs.openbsd.org 2005/03/01 15:47:14
1029 [ssh-keyscan.1 ssh-keyscan.c]
1030 sort options and sync usage();
Damien Miller27e9c512005-03-02 12:04:16 +11001031 - jmc@cvs.openbsd.org 2005/03/01 17:19:35
1032 [scp.1 sftp.1]
1033 add HashKnownHosts to -o list;
1034 ok markus@
Damien Miller02faece2005-03-02 12:04:32 +11001035 - jmc@cvs.openbsd.org 2005/03/01 17:22:06
1036 [ssh.c]
1037 sync usage() w/ man SYNOPSIS;
1038 ok markus@
Damien Miller792c0172005-03-02 12:04:50 +11001039 - jmc@cvs.openbsd.org 2005/03/01 17:32:19
1040 [ssh-add.1]
1041 sort options;
Damien Miller265d3092005-03-02 12:05:06 +11001042 - jmc@cvs.openbsd.org 2005/03/01 18:15:56
1043 [ssh-keygen.1]
1044 sort options (no attempt made at synopsis clean up though);
1045 spelling (occurance -> occurrence);
1046 use prompt before examples;
1047 grammar;
Damien Miller1227d4c2005-03-02 12:06:51 +11001048 - djm@cvs.openbsd.org 2005/03/02 01:00:06
1049 [sshconnect.c]
1050 fix addition of new hashed hostnames when CheckHostIP=yes;
1051 found and ok dtucker@
Damien Miller89eac802005-03-02 12:33:04 +11001052 - djm@cvs.openbsd.org 2005/03/02 01:27:41
1053 [ssh-keygen.c]
1054 ignore hostnames with metachars when hashing; ok deraadt@
Damien Miller947219e2005-03-02 13:22:30 +11001055 - djm@cvs.openbsd.org 2005/03/02 02:21:07
1056 [ssh.1]
1057 bz#987: mention ForwardX11Trusted in ssh.1,
1058 reported by andrew.benham AT thus.net; ok deraadt@
Tim Ricef8f30162005-03-02 21:49:56 -08001059 - (tim) [regress/agent-ptrace.sh] add another possible gdb error.
Damien Miller36bf7dd2005-03-02 12:02:47 +11001060
Damien Miller3eb48b62005-03-01 21:15:46 +1100106120050301
1062 - (djm) OpenBSD CVS sync:
1063 - otto@cvs.openbsd.org 2005/02/16 09:56:44
1064 [ssh.c]
1065 Better diagnostic if an identity file is not accesible. ok markus@ djm@
Damien Miller9b8073e2005-03-01 21:16:18 +11001066 - djm@cvs.openbsd.org 2005/02/18 03:05:53
1067 [canohost.c]
1068 better error messages for getnameinfo failures; ok dtucker@
Damien Miller64e8d442005-03-01 21:16:47 +11001069 - djm@cvs.openbsd.org 2005/02/20 22:59:06
1070 [sftp.c]
1071 turn on ssh batch mode when in sftp batch mode, patch from
1072 jdmossh AT nand.net;
1073 ok markus@
Damien Miller70a908e2005-03-01 21:17:09 +11001074 - jmc@cvs.openbsd.org 2005/02/25 10:55:13
1075 [sshd.8]
1076 add /etc/motd and $HOME/.hushlogin to FILES;
1077 from michael knudsen;
Damien Miller1717fd42005-03-01 21:17:31 +11001078 - djm@cvs.openbsd.org 2005/02/28 00:54:10
1079 [ssh_config.5]
1080 bz#849: document timeout on untrusted x11 forwarding sessions. Reported by
1081 orion AT cora.nwra.com; ok markus@
Damien Millerf91ee4c2005-03-01 21:24:33 +11001082 - djm@cvs.openbsd.org 2005/03/01 10:09:52
1083 [auth-options.c channels.c channels.h clientloop.c compat.c compat.h]
1084 [misc.c misc.h readconf.c readconf.h servconf.c ssh.1 ssh.c ssh_config.5]
1085 [sshd_config.5]
1086 bz#413: allow optional specification of bind address for port forwardings.
1087 Patch originally by Dan Astorian, but worked on by several people
1088 Adds GatewayPorts=clientspecified option on server to allow remote
1089 forwards to bind to client-specified ports.
Damien Millere1776152005-03-01 21:47:37 +11001090 - djm@cvs.openbsd.org 2005/03/01 10:40:27
1091 [hostfile.c hostfile.h readconf.c readconf.h ssh.1 ssh_config.5]
1092 [sshconnect.c sshd.8]
1093 add support for hashing host names and addresses added to known_hosts
1094 files, to improve privacy of which hosts user have been visiting; ok
1095 markus@ deraadt@
Damien Millerdb7b8172005-03-01 21:48:03 +11001096 - djm@cvs.openbsd.org 2005/03/01 10:41:28
1097 [ssh-keyscan.1 ssh-keyscan.c]
1098 option to hash hostnames output by ssh-keyscan; ok markus@ deraadt@
Damien Miller4b42d7f2005-03-01 21:48:35 +11001099 - djm@cvs.openbsd.org 2005/03/01 10:42:49
1100 [ssh-keygen.1 ssh-keygen.c ssh_config.5]
1101 add tools for managing known_hosts files with hashed hostnames, including
1102 hashing existing files and deleting hosts by name; ok markus@ deraadt@
Damien Miller3eb48b62005-03-01 21:15:46 +11001103
Darren Tucker34233832005-02-26 10:04:28 +1100110420050226
1105 - (dtucker) [openbsd-compat/bsd-openpty.c openbsd-compat/inet_ntop.c]
1106 Remove two obsolete Cygwin #ifdefs. Patch from vinschen at redhat.com.
Darren Tucker38049032005-02-26 10:07:37 +11001107 - (dtucker) [acconfig.h configure.ac openbsd-compat/bsd-misc.{c,h}]
1108 Remove SETGROUPS_NOOP, was only used by Cygwin, which doesn't need it any
1109 more. Patch from vinschen at redhat.com.
Darren Tuckerdc8fc622005-02-26 10:12:38 +11001110 - (dtucker) [Makefile.in] Add a install-nosysconf target for installing the
1111 binaries without the config files. Primarily useful for packaging.
1112 Patch from phil at usc.edu. ok djm@
Darren Tucker34233832005-02-26 10:04:28 +11001113
111420050224
Damien Miller848b9932005-02-24 12:12:34 +11001115 - (djm) [configure.ac] in_addr_t test needs sys/types.h too
1116
111720050222
Darren Tucker2ea9b182005-02-22 17:57:13 +11001118 - (dtucker) [uidswap.c] Skip uid restore test on Cygwin. Patch from
1119 vinschen at redhat.com.
1120
Darren Tuckerd9f88912005-02-20 21:01:48 +1100112120050220
1122 - (dtucker) [LICENCE Makefile.in README.platform audit-bsm.c configure.ac
1123 defines.h] Bug #125: Add *EXPERIMENTAL* BSM audit support. Configure
1124 --with-audit=bsm to enable. Patch originally from Sun Microsystems,
1125 parts by John R. Jackson. ok djm@
Darren Tucker04cfbe02005-02-20 23:27:11 +11001126 - (dtucker) [configure.ac] Missing comma in AIX section, somehow causes
1127 unrelated platforms to be configured incorrectly.
Darren Tuckerd9f88912005-02-20 21:01:48 +11001128
Damien Millered462d92005-02-16 13:02:45 +1100112920050216
1130 - (djm) write seed to temporary file and atomically rename into place;
1131 ok dtucker@
Darren Tucker7b48d252005-02-16 13:20:07 +11001132 - (dtucker) [ssh-rand-helper.c] Provide seed_rng since it may be called
1133 via mkstemp in some configurations. ok djm@
Darren Tuckera91f5ee2005-02-16 14:20:06 +11001134 - (dtucker) [auth-shadow.c] Prevent compiler warnings if "DAY" is defined
1135 by the system headers.
Darren Tuckerca6e7a72005-02-16 16:19:17 +11001136 - (dtucker) [configure.ac] Bug #893: check for libresolv early on Reliant
1137 Unix; prevents problems relating to the location of -lresolv in the
1138 link order.
Darren Tuckerc97b01a2005-02-16 16:47:37 +11001139 - (dtucker) [session.c] Bug #918: store credentials from gssapi-with-mic
1140 authentication early enough to be available to PAM session modules when
1141 privsep=yes. Patch from deengert at anl.gov, ok'ed in principle by Sam
1142 Hartman and similar to Debian's ssh-krb5 package.
Darren Tucker3c774c52005-02-16 22:49:31 +11001143 - (dtucker) [configure.ac openbsd-compat/port-aix.{c,h}] Silence some more
1144 compiler warnings on AIX.
Damien Millered462d92005-02-16 13:02:45 +11001145
Darren Tuckerf04c3612005-02-15 21:26:32 +1100114620050215
1147 - (dtucker) [config.sh.in] Collect oslevel -r too.
Darren Tucker691d5232005-02-15 21:45:57 +11001148 - (dtucker) [README.platform auth.c configure.ac loginrec.c
1149 openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Bug #835: enable IPv6
1150 on AIX where possible (see README.platform for details) and work around
1151 a misfeature of AIX's getnameinfo. ok djm@
Darren Tuckera39f83e2005-02-15 22:19:28 +11001152 - (dtucker) [loginrec.c] Add missing #include.
Darren Tuckerf04c3612005-02-15 21:26:32 +11001153
Darren Tucker1b6f2292005-02-11 16:11:49 +1100115420050211
1155 - (dtucker) [configure.ac] Tidy up configure --help output.
Darren Tucker15af68f2005-02-11 18:32:13 +11001156 - (dtucker) [openbsd-compat/fake-rfc2553.h] We now need EAI_SYSTEM too.
Darren Tucker1b6f2292005-02-11 16:11:49 +11001157
Darren Tucker2f9573d2005-02-10 22:28:54 +1100115820050210
1159 - (dtucker) [configure.ac] Bug #919: Provide visible feedback for the
1160 --disable-etc-default-login configure option.
1161
Darren Tucker3f166df2005-02-09 09:46:47 +1100116220050209
1163 - (dtucker) OpenBSD CVS Sync
1164 - dtucker@cvs.openbsd.org 2005/01/28 09:45:53
1165 [ssh_config]
1166 Make it clear that the example entries in ssh_config are only some of the
1167 commonly-used options and refer the user to ssh_config(5) for more
1168 details; ok djm@
Darren Tucker79a7acf2005-02-09 09:48:57 +11001169 - jmc@cvs.openbsd.org 2005/01/28 15:05:43
1170 [ssh_config.5]
1171 grammar;
Darren Tucker43d8e282005-02-09 09:51:08 +11001172 - jmc@cvs.openbsd.org 2005/01/28 18:14:09
1173 [ssh_config.5]
1174 wording;
1175 ok markus@
Darren Tucker5b530262005-02-09 09:52:17 +11001176 - dtucker@cvs.openbsd.org 2005/01/30 11:18:08
1177 [monitor.c]
1178 Make code match intent; ok djm@
Darren Tucker96d47102005-02-09 09:53:48 +11001179 - dtucker@cvs.openbsd.org 2005/02/08 22:24:57
1180 [sshd.c]
1181 Provide reason in error message if getnameinfo fails; ok markus@
Darren Tucker92170a82005-02-09 17:08:23 +11001182 - (dtucker) [auth-passwd.c openbsd-compat/port-aix.c] Don't call
1183 disable_forwarding() from compat library. Prevent linker errrors trying
1184 to resolve it for binaries other than sshd. ok djm@
Darren Tuckerc7e38d52005-02-09 22:12:30 +11001185 - (dtucker) [configure.ac] Bug #854: prepend pwd to relative --with-ssl-dir
1186 paths. ok djm@
Darren Tucker33370e02005-02-09 22:17:28 +11001187 - (dtucker) [configure.ac session.c] Some platforms (eg some SCO) require
1188 the username to be passed to the passwd command when changing expired
1189 passwords. ok djm@
Darren Tucker3f166df2005-02-09 09:46:47 +11001190
Darren Tuckerfeb6f7f2005-02-08 20:17:17 +1100119120050208
1192 - (dtucker) [regress/test-exec.sh] Bug #912: Set _POSIX2_VERSION for the
1193 regress tests so newer versions of GNU head(1) behave themselves. Patch
1194 by djm, so ok me.
Darren Tuckerb4d30122005-02-08 21:06:55 +11001195 - (dtucker) [openbsd-compat/port-aix.c] Silence compiler warnings.
Darren Tucker2e0cf0d2005-02-08 21:52:47 +11001196 - (dtucker) [audit.c audit.h auth.c auth1.c auth2.c loginrec.c monitor.c
1197 monitor_wrap.c monitor_wrap.h session.c sshd.c]: Prepend all of the audit
1198 defines and enums with SSH_ to prevent namespace collisions on some
1199 platforms (eg AIX).
Darren Tuckerfeb6f7f2005-02-08 20:17:17 +11001200
Darren Tucker598ba7b2005-02-04 15:05:08 +1100120120050204
1202 - (dtucker) [monitor.c] Permit INVALID_USER audit events from slave too.
Darren Tucker40d9a632005-02-04 15:19:44 +11001203 - (dtucker) [auth.c] Fix parens in audit log check.
Darren Tucker598ba7b2005-02-04 15:05:08 +11001204
Darren Tuckerad7646a2005-02-02 10:43:59 +1100120520050202
1206 - (dtucker) [configure.ac openbsd-compat/realpath.c] Sync up with realpath
1207 rev 1.11 from OpenBSD and make it use fchdir if available. ok djm@
Darren Tucker42d9dc72005-02-02 17:10:11 +11001208 - (dtucker) [auth.c loginrec.h openbsd-compat/{bsd-cray,port-aix}.{c,h}]
1209 Make record_failed_login() call provide hostname rather than having the
1210 implementations having to do lookups themselves. Only affects AIX and
1211 UNICOS (the latter only uses the "user" parameter anyway). ok djm@
Darren Tucker9dc6c7d2005-02-02 18:30:33 +11001212 - (dtucker) [session.c sshd.c] Bug #445: Propogate KRB5CCNAME if set to child
1213 the process. Since we also unset KRB5CCNAME at startup, if it's set after
1214 authentication it must have been set by the platform's native auth system.
1215 This was already done for AIX; this enables it for the general case.
Darren Tucker2fba9932005-02-02 23:30:24 +11001216 - (dtucker) [auth.c canohost.c canohost.h configure.ac defines.h loginrec.c]
1217 Bug #974: Teach sshd to write failed login records to btmp for failed auth
1218 attempts (currently only for password, kbdint and C/R, only on Linux and
1219 HP-UX), based on code from login.c from util-linux. With ashok_kovai at
1220 hotmail.com, ok djm@
Darren Tucker269a1ea2005-02-03 00:20:53 +11001221 - (dtucker) [Makefile.in auth.c auth.h auth1.c auth2.c loginrec.c monitor.c
1222 monitor.h monitor_wrap.c monitor_wrap.h session.c sshd.c] Bug #125:
1223 (first stage) Add audit instrumentation to sshd, currently disabled by
Darren Tucker6dce9912005-02-03 15:07:37 +11001224 default. with suggestions from and ok djm@
Darren Tuckerad7646a2005-02-02 10:43:59 +11001225
Darren Tucker9b5495d2005-02-01 17:35:09 +1100122620050201
1227 - (dtucker) [log.c] Bug #973: force log_init() to open syslog, since on some
1228 platforms syslog will revert to its default values. This may result in
1229 messages from external libraries (eg libwrap) being sent to a different
1230 facility.
Darren Tucker9dca0992005-02-01 19:16:45 +11001231 - (dtucker) [sshd_config.5] Bug #701: remove warning about
1232 keyboard-interactive since this is no longer the case.
Darren Tucker9b5495d2005-02-01 17:35:09 +11001233
Darren Tucker5c14c732005-01-24 21:55:49 +1100123420050124
1235 - (dtucker) OpenBSD CVS Sync
1236 - otto@cvs.openbsd.org 2005/01/21 08:32:02
1237 [auth-passwd.c sshd.c]
1238 Warn in advance for password and account expiry; initialize loginmsg
1239 buffer earlier and clear it after privsep fork. ok and help dtucker@
1240 markus@
Darren Tucker094cd0b2005-01-24 21:56:48 +11001241 - dtucker@cvs.openbsd.org 2005/01/22 08:17:59
1242 [auth.c]
1243 Log source of connections denied by AllowUsers, DenyUsers, AllowGroups and
1244 DenyGroups. bz #909, ok djm@
Darren Tucker660db782005-01-24 21:57:11 +11001245 - djm@cvs.openbsd.org 2005/01/23 10:18:12
1246 [cipher.c]
1247 config option "Ciphers" should be case-sensitive; ok dtucker@
Darren Tuckerba66df82005-01-24 21:57:40 +11001248 - dtucker@cvs.openbsd.org 2005/01/24 10:22:06
1249 [scp.c sftp.c]
1250 Have scp and sftp wait for the spawned ssh to exit before they exit
1251 themselves. This prevents ssh from being unable to restore terminal
1252 modes (not normally a problem on OpenBSD but common with -Portable
1253 on POSIX platforms). From peak at argo.troja.mff.cuni.cz (bz#950);
1254 ok djm@ markus@
Darren Tucker1b7223c2005-01-24 22:00:40 +11001255 - dtucker@cvs.openbsd.org 2005/01/24 10:29:06
1256 [moduli]
1257 Import new moduli; requested by deraadt@ a week ago
Darren Tucker218f1782005-01-24 22:50:47 +11001258 - dtucker@cvs.openbsd.org 2005/01/24 11:47:13
1259 [auth-passwd.c]
1260 #if -> #ifdef so builds without HAVE_LOGIN_CAP work too; ok djm@ otto@
Darren Tucker5c14c732005-01-24 21:55:49 +11001261
Darren Tucker172a5e82005-01-20 10:55:46 +1100126220050120
1263 - (dtucker) OpenBSD CVS Sync
1264 - markus@cvs.openbsd.org 2004/12/23 17:35:48
1265 [session.c]
1266 check for NULL; from mpech
Darren Tucker7cfeecf2005-01-20 10:56:31 +11001267 - markus@cvs.openbsd.org 2004/12/23 17:38:07
1268 [ssh-keygen.c]
1269 leak; from mpech
Darren Tucker0f383232005-01-20 10:57:56 +11001270 - djm@cvs.openbsd.org 2004/12/23 23:11:00
1271 [servconf.c servconf.h sshd.c sshd_config sshd_config.5]
1272 bz #898: support AddressFamily in sshd_config. from
1273 peak@argo.troja.mff.cuni.cz; ok deraadt@
Darren Tuckerb2161e32005-01-20 11:00:46 +11001274 - markus@cvs.openbsd.org 2005/01/05 08:51:32
1275 [sshconnect.c]
1276 remove dead code, log connect() failures with level error, ok djm@
Darren Tuckerb3509012005-01-20 11:01:46 +11001277 - jmc@cvs.openbsd.org 2005/01/08 00:41:19
1278 [sshd_config.5]
1279 `login'(n) -> `log in'(v);
Darren Tuckerf0e792e2005-01-20 11:02:26 +11001280 - dtucker@cvs.openbsd.org 2005/01/17 03:25:46
1281 [moduli.c]
1282 Correct spelling: SCHNOOR->SCHNORR; ok djm@
Darren Tuckerea7c8122005-01-20 11:03:08 +11001283 - dtucker@cvs.openbsd.org 2005/01/17 22:48:39
1284 [sshd.c]
1285 Make debugging output continue after reexec; ok djm@
Darren Tucker611649e2005-01-20 11:05:34 +11001286 - dtucker@cvs.openbsd.org 2005/01/19 13:11:47
1287 [auth-bsdauth.c auth2-chall.c]
1288 Have keyboard-interactive code call the drivers even for responses for
1289 invalid logins. This allows the drivers themselves to decide how to
1290 handle them and prevent leaking information where possible. Existing
1291 behaviour for bsdauth is maintained by checking authctxt->valid in the
1292 bsdauth driver. Note that any third-party kbdint drivers will now need
1293 to be able to handle responses for invalid logins. ok markus@
Darren Tuckerd2311862005-01-20 13:27:56 +11001294 - djm@cvs.openbsd.org 2004/12/22 02:13:19
1295 [cipher-ctr.c cipher.c]
1296 remove fallback AES support for old OpenSSL, as OpenBSD has had it for
1297 many years now; ok deraadt@
1298 (Id sync only: Portable will continue to support older OpenSSLs)
Darren Tucker36a3d602005-01-20 12:43:38 +11001299 - (dtucker) [auth-pam.c] Bug #971: Prevent leaking information about user
1300 existence via keyboard-interactive/pam, in conjunction with previous
1301 auth2-chall.c change; with Colin Watson and djm.
Darren Tucker33bc3342005-01-20 22:07:29 +11001302 - (dtucker) [loginrec.h] Bug #952: Increase size of username field to 128
1303 bytes to prevent errors from login_init_entry() when the username is
1304 exactly 64 bytes(!) long. From brhamon at cisco.com, ok djm@
Darren Tucker3c660802005-01-20 22:20:50 +11001305 - (dtucker) [auth-chall.c auth.h auth2-chall.c] Bug #936: Remove pam from
1306 the list of available kbdint devices if UsePAM=no. ok djm@
Darren Tucker172a5e82005-01-20 10:55:46 +11001307
130820050118
Darren Tucker72c025d2005-01-18 12:05:18 +11001309 - (dtucker) [INSTALL Makefile.in configure.ac survey.sh.in] Implement
1310 "make survey" and "make send-survey". This will provide data on the
1311 configure parameters, platform and platform features to the development
1312 team, which will allow (among other things) better targetting of testing.
1313 It's entirely voluntary and is off be default. ok djm@
Darren Tucker24c710e2005-01-18 12:45:42 +11001314 - (dtucker) [survey.sh.in] Remove any blank lines from the output of
1315 ccver-v and ccver-V.
Darren Tucker72c025d2005-01-18 12:05:18 +11001316
Darren Tucker8686ed72004-12-20 12:05:08 +1100131720041220
1318 - (dtucker) [ssh-rand-helper.c] Fall back to command-based seeding if reading
1319 from prngd is enabled at compile time but fails at run time, eg because
1320 prngd is not running. Note that if you have prngd running when OpenSSH is
1321 built, OpenSSL will consider itself internally seeded and rand-helper won't
1322 be built at all unless explicitly enabled via --with-rand-helper. ok djm@
Darren Tucker5caa78b2004-12-20 12:35:42 +11001323 - (dtucker) [regress/rekey.sh] Touch datafile before filling with dd, since
1324 on some wacky platforms (eg old AIXes), dd will refuse to create an output
1325 file if it doesn't exist.
Darren Tucker8686ed72004-12-20 12:05:08 +11001326
Darren Tucker442a3832004-12-13 18:08:32 +1100132720041213
1328 - (dtucker) [contrib/findssh.sh] Clean up on interrupt; from
1329 amarendra.godbole at ge com.
1330
Darren Tucker56c95982004-12-11 13:34:56 +1100133120041211
1332 - (dtucker) OpenBSD CVS Sync
1333 - markus@cvs.openbsd.org 2004/12/06 16:00:43
1334 [bufaux.c]
1335 use 0x00 not \0 since buf[] is a bignum
Darren Tucker596dcfa2004-12-11 13:37:22 +11001336 - fgsch@cvs.openbsd.org 2004/12/10 03:10:42
1337 [sftp.c]
1338 - fix globbed ls for paths the same lenght as the globbed path when
1339 we have a unique matching.
1340 - fix globbed ls in case of a directory when we have a unique matching.
1341 - as a side effect, if the path does not exist error (used to silently
1342 ignore).
1343 - don't do extra do_lstat() if we only have one matching file.
1344 djm@ ok
Darren Tuckerf0f90982004-12-11 13:39:50 +11001345 - dtucker@cvs.openbsd.org 2004/12/11 01:48:56
1346 [auth-rsa.c auth2-pubkey.c authfile.c misc.c misc.h]
1347 Fix debug call in error path of authorized_keys processing and fix related
1348 warnings; ok djm@
Darren Tucker56c95982004-12-11 13:34:56 +11001349
Tim Rice0f83d292004-12-08 18:29:58 -0800135020041208
1351 - (tim) [configure.ac] Comment some non obvious platforms in the
1352 target-specific case statement. Suggested and OK by dtucker@
1353
Darren Tucker641b34c2004-12-07 11:26:15 +1100135420041207
1355 - (dtucker) [regress/scp.sh] Use portable-friendly $DIFFOPTs in new test.
1356
Darren Tuckerba2abb32004-12-06 22:40:10 +1100135720041206
1358 - (dtucker) [TODO WARNING.RNG] Update to reflect current reality. ok djm@
Darren Tuckercd516ef2004-12-06 22:43:43 +11001359 - (dtucker) OpenBSD CVS Sync
1360 - markus@cvs.openbsd.org 2004/11/25 22:22:14
1361 [sftp-client.c sftp.c]
1362 leak; from mpech
Darren Tucker0133a722004-12-06 22:44:32 +11001363 - jmc@cvs.openbsd.org 2004/11/29 00:05:17
1364 [sftp.1]
1365 missing full stop;
Darren Tuckere2f189a2004-12-06 22:45:53 +11001366 - djm@cvs.openbsd.org 2004/11/29 07:41:24
1367 [sftp-client.h sftp.c]
1368 Some small fixes from moritz@jodeit.org. ok deraadt@
Darren Tucker16e254d2004-12-06 22:46:45 +11001369 - jaredy@cvs.openbsd.org 2004/12/05 23:55:07
1370 [sftp.1]
1371 - explain that patterns can be used as arguments in get/put/ls/etc
1372 commands (prodded by Michael Knudsen)
1373 - describe ls flags as a list
1374 - other minor improvements
1375 ok jmc, djm
Darren Tucker22cc7412004-12-06 22:47:41 +11001376 - dtucker@cvs.openbsd.org 2004/12/06 11:41:03
1377 [auth-rsa.c auth2-pubkey.c authfile.c misc.c misc.h ssh.h sshd.8]
1378 Discard over-length authorized_keys entries rather than complaining when
1379 they don't decode. bz #884, with & ok djm@
Darren Tuckera3729602004-12-06 23:00:27 +11001380 - (dtucker) OpenBSD CVS Sync (regress/)
1381 - djm@cvs.openbsd.org 2004/06/26 06:16:07
1382 [reexec.sh]
1383 don't change the name of the copied sshd for the reexec fallback test,
1384 makes life simpler for portable
Darren Tuckerccf07792004-12-06 23:03:27 +11001385 - dtucker@cvs.openbsd.org 2004/07/08 12:59:35
1386 [scp.sh]
1387 Regress test for bz #863 (scp double-error), requires $SUDO. ok markus@
Darren Tucker3206e572004-12-06 23:04:57 +11001388 - david@cvs.openbsd.org 2004/07/09 19:45:43
1389 [Makefile]
1390 add a missing CLEANFILES used in the re-exec test
Darren Tucker71b56432004-12-06 23:05:52 +11001391 - djm@cvs.openbsd.org 2004/10/08 02:01:50
1392 [reexec.sh]
1393 shrink and tidy; ok dtucker@
Darren Tucker124f58e2004-12-06 23:07:37 +11001394 - djm@cvs.openbsd.org 2004/10/29 23:59:22
1395 [Makefile added brokenkeys.sh]
1396 regression test for handling of corrupt keys in authorized_keys file
Darren Tucker79ec66e2004-12-06 23:12:15 +11001397 - djm@cvs.openbsd.org 2004/11/07 00:32:41
1398 [multiplex.sh]
1399 regression tests for new multiplex commands
Darren Tuckercc0603d2004-12-06 23:13:50 +11001400 - dtucker@cvs.openbsd.org 2004/11/25 09:39:27
1401 [test-exec.sh]
1402 Remove obsolete RhostsAuthentication from test config; ok markus@
Darren Tuckerd028fea2004-12-06 23:16:29 +11001403 - dtucker@cvs.openbsd.org 2004/12/06 10:49:56
1404 [test-exec.sh]
1405 Check if TEST_SSH_SSHD is a full path to sshd before searching; ok markus@
Darren Tuckerba2abb32004-12-06 22:40:10 +11001406
Darren Tuckere04644c2004-12-03 14:08:45 +1100140720041203
1408 - (dtucker) OpenBSD CVS Sync
1409 - jmc@cvs.openbsd.org 2004/11/07 17:42:36
1410 [ssh.1]
1411 options sort, and whitespace;
Darren Tucker9c6bf322004-12-03 14:10:19 +11001412 - jmc@cvs.openbsd.org 2004/11/07 17:57:30
1413 [ssh.c]
1414 usage():
1415 - add -O
1416 - sync -S w/ manpage
1417 - remove -h
Darren Tuckerc1386672004-12-03 14:33:47 +11001418 - (dtucker) [auth1.c auth2.c] If the user successfully authenticates but is
1419 subsequently denied by the PAM auth stack, send the PAM message to the
1420 user via packet_disconnect (Protocol 1) or userauth_banner (Protocol 2).
1421 ok djm@
Darren Tuckere04644c2004-12-03 14:08:45 +11001422
Darren Tucker2d963d82004-11-07 20:04:10 +1100142320041107
1424 - (dtucker) OpenBSD CVS Sync
1425 - djm@cvs.openbsd.org 2004/11/05 12:19:56
1426 [sftp.c]
1427 command editing and history support via libedit; ok markus@
1428 thanks to hshoexer@ and many testers on tech@ too
Darren Tucker7ebfc102004-11-07 20:06:19 +11001429 - djm@cvs.openbsd.org 2004/11/07 00:01:46
1430 [clientloop.c clientloop.h ssh.1 ssh.c]
1431 add basic control of a running multiplex master connection; including the
1432 ability to check its status and request it to exit; ok markus@
Darren Tucker16bcc1c2004-11-07 20:14:34 +11001433 - (dtucker) [INSTALL Makefile.in configure.ac] Add --with-libedit configure
1434 option and supporting makefile bits and documentation.
Darren Tucker2d963d82004-11-07 20:04:10 +11001435
Darren Tuckerc0161342004-11-05 20:00:03 +1100143620041105
1437 - (dtucker) OpenBSD CVS Sync
1438 - markus@cvs.openbsd.org 2004/08/30 09:18:08
1439 [LICENCE]
1440 s/keygen/keyscan/
Darren Tucker4e4fe002004-11-05 20:01:03 +11001441 - jmc@cvs.openbsd.org 2004/08/30 21:22:49
1442 [ssh-add.1 ssh.1]
1443 .Xsession -> .xsession;
1444 originally from a pr from f at obiit dot org, but missed by myself;
1445 ok markus@ matthieu@
Darren Tucker07336da2004-11-05 20:02:16 +11001446 - djm@cvs.openbsd.org 2004/09/07 23:41:30
1447 [clientloop.c ssh.c]
1448 cleanup multiplex control socket on SIGHUP too, spotted by sturm@
1449 ok markus@ deraadt@
Darren Tuckere9bf9842004-11-05 20:05:32 +11001450 - deraadt@cvs.openbsd.org 2004/09/15 00:46:01
1451 [ssh.c]
1452 /* fallthrough */ is something a programmer understands. But
1453 /* FALLTHROUGH */ is also understood by lint, so that is better.
Darren Tucker7cc5c232004-11-05 20:06:59 +11001454 - jaredy@cvs.openbsd.org 2004/09/15 03:25:41
1455 [sshd_config.5]
1456 mention PrintLastLog only prints last login time for interactive
1457 sessions, like PrintMotd mentions.
1458 From Michael Knudsen, with wording changed slightly to match the
1459 PrintMotd description.
1460 ok djm
Darren Tucker178fa662004-11-05 20:09:09 +11001461 - mickey@cvs.openbsd.org 2004/09/15 18:42:27
1462 [sshd.c]
1463 use less doubles in daemons; markus@ ok
Darren Tuckerf30e1ac2004-11-05 20:10:02 +11001464 - deraadt@cvs.openbsd.org 2004/09/15 18:46:04
1465 [scp.c]
1466 scratch that do { } while (0) wrapper in this case
Darren Tucker39207a42004-11-05 20:19:51 +11001467 - djm@cvs.openbsd.org 2004/09/23 13:00:04
1468 [ssh.c]
1469 correctly honour -n in multiplex client mode; spotted by sturm@ ok markus@
Darren Tucker3269b132004-11-05 20:20:59 +11001470 - djm@cvs.openbsd.org 2004/09/25 03:45:14
1471 [sshd.c]
1472 these printf args are no longer double; ok deraadt@ markus@
Darren Tucker636ca902004-11-05 20:22:00 +11001473 - djm@cvs.openbsd.org 2004/10/07 10:10:24
1474 [scp.1 sftp.1 ssh.1 ssh_config.5]
1475 document KbdInteractiveDevices; ok markus@
Darren Tucker1dee8682004-11-05 20:26:49 +11001476 - djm@cvs.openbsd.org 2004/10/07 10:12:36
1477 [ssh-agent.c]
1478 don't unlink agent socket when bind() fails, spotted by rich AT
1479 rich-paul.net, ok markus@
Darren Tuckerb2694f02004-11-05 20:27:54 +11001480 - markus@cvs.openbsd.org 2004/10/20 11:48:53
1481 [packet.c ssh1.h]
1482 disconnect for invalid (out of range) message types.
Darren Tucker5d78de62004-11-05 20:35:44 +11001483 - djm@cvs.openbsd.org 2004/10/29 21:47:15
1484 [channels.c channels.h clientloop.c]
1485 fix some window size change bugs for multiplexed connections: windows sizes
1486 were not being updated if they had changed after ~^Z suspends and SIGWINCH
1487 was not being processed unless the first connection had requested a tty;
1488 ok markus
Darren Tuckerce327b62004-11-05 20:38:03 +11001489 - djm@cvs.openbsd.org 2004/10/29 22:53:56
1490 [clientloop.c misc.h readpass.c ssh-agent.c]
1491 factor out common permission-asking code to separate function; ok markus@
Darren Tucker50dbe832004-11-05 20:41:24 +11001492 - djm@cvs.openbsd.org 2004/10/29 23:56:17
1493 [bufaux.c bufaux.h buffer.c buffer.h]
1494 introduce a new buffer API that returns an error rather than fatal()ing
1495 when presented with bad data; ok markus@
Darren Tucker08d04fa2004-11-05 20:42:28 +11001496 - djm@cvs.openbsd.org 2004/10/29 23:57:05
1497 [key.c]
1498 use new buffer API to avoid fatal errors on corrupt keys in authorized_keys
1499 files; ok markus@
Darren Tuckerc0161342004-11-05 20:00:03 +11001500
Darren Tuckera56f1912004-11-02 20:30:54 +1100150120041102
1502 - (dtucker) [configure.ac includes.h] Bug #947: Fix compile error on HP-UX
1503 10.x by testing for conflicts in shadow.h and undef'ing _INCLUDE__STDC__
1504 only if a conflict is detected.
1505
Darren Tucker35beadd2004-10-19 16:33:33 +1000150620041019
1507 - (dtucker) [uidswap.c] Don't test dropping of gids for the root user or
1508 on Cygwin. Cygwin parts from vinschen at redhat com; ok djm@
1509
Damien Millerdaffc6a2004-10-16 18:52:44 +1000151020041016
Damien Miller0e035d82004-10-16 18:53:28 +10001511 - (djm) [auth-pam.c] snprintf->strl*, fix server message length calculations;
1512 ok dtucker@
Damien Millerdaffc6a2004-10-16 18:52:44 +10001513
Darren Tuckerb7d55e32004-10-06 20:09:32 +1000151420041006
1515 - (dtucker) [README.privsep] Bug #939: update info about HP-UX Trusted Mode
1516 and other PAM platforms.
Darren Tuckerdbc22962004-10-06 23:15:44 +10001517 - (dtucker) [monitor_mm.c openbsd-compat/xmmap.c] Bug #940: cast constants
1518 to void * to appease picky compilers (eg Tru64's "cc -std1").
Darren Tuckerb7d55e32004-10-06 20:09:32 +10001519
Darren Tucker59f79c42004-09-30 21:17:08 +1000152020040930
1521 - (dtucker) [configure.ac] Set AC_PACKAGE_NAME. ok djm@
1522
Darren Tucker4127f552004-09-23 21:35:09 +1000152320040923
1524 - (dtucker) [openbsd-compat/bsd-snprintf.c] Previous change was off by one,
1525 which could have caused the justification to be wrong. ok djm@
1526
Darren Tucker50fbb452004-09-21 21:32:12 +1000152720040921
1528 - (dtucker) [openbsd-compat/bsd-snprintf.c] Check for max length too.
1529 ok djm@
Darren Tucker5d596132004-09-21 21:35:55 +10001530 - (dtucker) [contrib/cygwin/ssh-host-config] Update to match current Cygwin
1531 install process. Patch from vinschen at redhat.com.
Darren Tucker50fbb452004-09-21 21:32:12 +10001532
Damien Miller8899ed32004-09-12 15:18:55 +1000153320040912
1534 - (djm) [loginrec.c] Start KNF and tidy up of this long-neglected file.
1535 No change in resultant binary
Damien Miller6b0279c2004-09-12 15:25:17 +10001536 - (djm) [loginrec.c] __func__ifiy
Damien Millerb0aae332004-09-12 15:26:00 +10001537 - (djm) [loginrec.c] xmalloc
Damien Miller2aa6d3c2004-09-12 16:53:04 +10001538 - (djm) [ssh.c sshd.c version.h] Don't divulge portable version in protocol
1539 banner. Suggested by deraadt@, ok mouring@, dtucker@
Darren Tucker623d92f2004-09-12 22:36:15 +10001540 - (dtucker) [configure.ac] Fix incorrect quoting and tests for cross-compile.
1541 Partly by & ok djm@.
Damien Miller8899ed32004-09-12 15:18:55 +10001542
Damien Miller928a19a2004-09-11 15:18:05 +1000154320040911
1544 - (djm) [ssh-agent.c] unifdef some cygwin code; ok dtucker@
Darren Tucker69687f42004-09-11 22:17:26 +10001545 - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #890: Send output from
1546 failing PAM session modules to user then exit, similar to the way
1547 /etc/nologin is handled. ok djm@
Darren Tucker0a7e3c62004-09-11 22:28:01 +10001548 - (dtucker) [auth-pam.c] Relocate sshpam_store_conv(), no code change.
Damien Miller47656792004-09-11 22:42:09 +10001549 - (djm) [auth2-kbdint.c auth2-none.c auth2-passwd.c auth2-pubkey.c]
1550 Make cygwin code more consistent with that which surrounds it
Darren Tucker77fc29e2004-09-11 23:07:03 +10001551 - (dtucker) [auth-pam.c auth.h auth2-none.c auth2.c monitor.c monitor_wrap.c]
1552 Bug #892: Send messages from failing PAM account modules to the client via
1553 SSH2_MSG_USERAUTH_BANNER messages. Note that this will not happen with
1554 SSH2 kbdint authentication, which need to be dealt with separately. ok djm@
Darren Tuckera2a3ed02004-09-11 23:09:53 +10001555 - (dtucker) [session.c] Bug #927: make .hushlogin silent again. ok djm@
Darren Tuckera0c2b392004-09-11 23:26:37 +10001556 - (dtucker) [configure.ac] Bug #321: Add cross-compile support to configure.
1557 Parts by chua at ayrnetworks.com, astrand at lysator.liu.se and me. ok djm@
Darren Tucker5614d8f2004-09-11 23:32:09 +10001558 - (dtucker) [auth-krb5.c] Bug #922: Pass KRB5CCNAME to PAM. From deengert
1559 at anl.gov, ok djm@
Damien Miller928a19a2004-09-11 15:18:05 +10001560
Darren Tucker14c372d2004-08-30 20:42:08 +1000156120040830
1562 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.{c,h}] Bug #915: only
1563 copy required environment variables on Cygwin. Patch from vinschen at
1564 redhat.com, ok djm@
Darren Tucker476b7ec2004-08-30 21:13:49 +10001565 - (dtucker) [regress/Makefile] Clean scp-ssh-wrapper.scp too. Patch from
1566 vinschen at redhat.com.
Darren Tucker25a12342004-08-30 21:33:02 +10001567 - (dtucker) [Makefile.in contrib/ssh-copy-id] Bug #894: Improve portability
1568 of shell constructs. Patch from cjwatson at debian.org.
Darren Tucker14c372d2004-08-30 20:42:08 +10001569
Darren Tuckerf00e51d2004-08-29 16:12:29 +1000157020040829
1571 - (dtucker) [openbsd-compat/getrrsetbyname.c] Prevent getrrsetbyname from
1572 failing with NOMEMORY if no sigs are returned and malloc(0) returns NULL.
1573 From Martin.Kraemer at Fujitsu-Siemens.com; ok djm@
Darren Tuckerf4b43712004-08-29 16:28:39 +10001574 - (dtucker) OpenBSD CVS Sync
1575 - djm@cvs.openbsd.org 2004/08/23 11:48:09
1576 [authfile.c]
1577 fix error path, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
Darren Tuckere6ed8392004-08-29 16:29:44 +10001578 - djm@cvs.openbsd.org 2004/08/23 11:48:47
1579 [channels.c]
1580 typo, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
Darren Tucker27a8f6b2004-08-29 16:31:28 +10001581 - dtucker@cvs.openbsd.org 2004/08/23 14:26:38
1582 [ssh-keysign.c ssh.c]
1583 Use permanently_set_uid() in ssh and ssh-keysign for consistency, matches
1584 change in Portable; ok markus@ (CVS ID sync only)
Darren Tucker34620d62004-08-29 16:32:59 +10001585 - dtucker@cvs.openbsd.org 2004/08/23 14:29:23
1586 [ssh-keysign.c]
1587 Remove duplicate getuid(), suggested by & ok markus@
Darren Tuckerdb693902004-08-29 16:37:24 +10001588 - markus@cvs.openbsd.org 2004/08/26 16:00:55
1589 [ssh.1 sshd.8]
1590 get rid of references to rhosts authentication; with jmc@
Darren Tucker0f56ed12004-08-29 16:38:41 +10001591 - djm@cvs.openbsd.org 2004/08/28 01:01:48
1592 [sshd.c]
1593 don't erroneously close stdin for !reexec case, from Dave Johnson;
1594 ok markus@
Darren Tucker48d99d32004-08-29 17:04:50 +10001595 - (dtucker) [configure.ac] Include sys/stream.h in sys/ptms.h header check,
1596 fixes configure warning on Solaris reported by wknox at mitre.org.
Darren Tucker2a81adc2004-08-29 17:09:34 +10001597 - (dtucker) [regress/multiplex.sh] Skip test on platforms that do not
1598 support FD passing since multiplex requires it. Noted by tim@
Darren Tucker07d30e42004-08-29 17:14:31 +10001599 - (dtucker) [regress/dynamic-forward.sh] Allow time for connections to be torn
1600 down, needed on some platforms, should be harmless on others. Patch from
1601 jason at devrandom.org.
Darren Tucker0521dcb2004-08-29 19:39:09 +10001602 - (dtucker) [regress/scp.sh] Make this work on Cygwin too, which doesn't like
1603 files ending in .exe that aren't binaries; patch from vinschen at redhat.com.
Darren Tucker2a502ff2004-08-29 19:52:32 +10001604 - (dtucker) [Makefile.in] Get regress/Makefile symlink right for out-of-tree
1605 builds too, from vinschen at redhat.com.
Darren Tuckerb17035f2004-08-29 20:33:07 +10001606 - (dtucker) [regress/agent-ptrace.sh] Skip ptrace test on OSF1/DUnix/Tru64
1607 too; patch from cmadams at hiwaay.net.
Darren Tuckercf59d312004-08-29 21:18:09 +10001608 - (dtucker) [configure.ac] Replace non-portable echo \n with extra echo.
Darren Tucker5a88d002004-08-29 21:43:33 +10001609 - (dtucker) [openbsd-compat/port-aix.c] Bug #712: Explicitly check for
1610 accounts with authentication configs that sshd can't support (ie
1611 SYSTEM=NONE and AUTH1=something).
Darren Tuckerf00e51d2004-08-29 16:12:29 +10001612
Darren Tuckerf0c2aea2004-08-28 15:46:57 +1000161320040828
Darren Tucker11bdc012004-08-28 16:17:35 +10001614 - (dtucker) [openbsd-compat/mktemp.c] Remove superfluous Cygwin #ifdef; from
1615 vinschen at redhat.com.
Darren Tuckerf0c2aea2004-08-28 15:46:57 +10001616
Damien Miller7daf0442004-08-23 21:52:08 +1000161720040823
1618 - (djm) [ssh-rand-helper.c] Typo. Found by
1619 Martin.Kraemer AT Fujitsu-Siemens.com
Damien Millerb0419f22004-08-23 21:53:28 +10001620 - (djm) [loginrec.c] Typo and bad args in error messages; Spotted by
1621 Martin.Kraemer AT Fujitsu-Siemens.com
Damien Miller7daf0442004-08-23 21:52:08 +10001622
Darren Tuckerbad5f2d2004-08-17 22:31:32 +1000162320040817
1624 - (dtucker) [regress/README.regress] Note compatibility issues with GNU head.
Damien Miller87c9cca2004-08-17 22:47:41 +10001625 - (djm) OpenBSD CVS Sync
1626 - markus@cvs.openbsd.org 2004/08/16 08:17:01
1627 [version.h]
1628 3.9
Damien Millerd5452852004-08-17 22:49:12 +10001629 - (djm) Crank RPM spec version numbers
Damien Millere17cc752004-08-17 22:50:40 +10001630 - (djm) Release 3.9p1
Darren Tuckerbad5f2d2004-08-17 22:31:32 +10001631
Darren Tucker21dd0892004-08-16 23:12:05 +1000163220040816
1633 - (dtucker) [acconfig.h auth-pam.c configure.ac] Set real uid to non-root
1634 to convince Solaris PAM to honour password complexity rules. ok djm@
1635
Darren Tucker25f60a72004-08-15 17:23:34 +1000163620040815
1637 - (dtucker) [Makefile.in ssh-keysign.c ssh.c] Use permanently_set_uid() since
1638 it does the right thing on all platforms. ok djm@
Damien Miller36f49652004-08-15 18:40:59 +10001639 - (djm) [acconfig.h configure.ac openbsd-compat/Makefile.in
1640 openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-misc.c
1641 openbsd-compat/bsd-misc.h openbsd-compat/openbsd-compat.h] Use smarter
1642 closefrom() replacement from sudo; ok dtucker@
Damien Miller81409592004-08-15 19:12:52 +10001643 - (djm) [loginrec.c] Check that seek succeeded here too; ok dtucker
Darren Tucker0cbc3c62004-08-15 21:01:37 +10001644 - (dtucker) [Makefile.in] Fix typo.
Darren Tucker25f60a72004-08-15 17:23:34 +10001645
Darren Tucker06696932004-08-14 23:55:37 +1000164620040814
1647 - (dtucker) [auth-krb5.c gss-serv-krb5.c openbsd-compat/xmmap.c]
1648 Explicitly set umask for mkstemp; ok djm@
Darren Tucker3d50c9b2004-08-15 00:01:48 +10001649 - (dtucker) [includes.h] Undef _INCLUDE__STDC__ on HP-UX, otherwise
1650 prot.h and shadow.h provide conflicting declarations of getspnam. ok djm@
Darren Tucker397a2f22004-08-15 00:09:11 +10001651 - (dtucker) [loginrec.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]
1652 Plug AIX login recording into login_write so logins will be recorded for
1653 all auth types.
Darren Tucker06696932004-08-14 23:55:37 +10001654
Darren Tucker03669a32004-08-13 18:37:21 +1000165520040813
1656 - (dtucker) [openbsd-compat/bsd-misc.c] Typo in #ifdef; from vinschen at
1657 redhat.com
Darren Tuckerc7a6fc42004-08-13 21:18:00 +10001658- (dtucker) OpenBSD CVS Sync
1659 - avsm@cvs.openbsd.org 2004/08/11 21:43:05
1660 [channels.c channels.h clientloop.c misc.c misc.h serverloop.c ssh-agent.c]
1661 some signed/unsigned int comparison cleanups; markus@ ok
Darren Tuckerfe6649d2004-08-13 21:19:37 +10001662 - avsm@cvs.openbsd.org 2004/08/11 21:44:32
1663 [authfd.c scp.c ssh-keyscan.c]
1664 use atomicio instead of homegrown equivalents or read/write.
1665 markus@ ok
Darren Tuckerbcf27972004-08-13 21:21:47 +10001666 - djm@cvs.openbsd.org 2004/08/12 09:18:24
1667 [sshlogin.c]
1668 typo in error message, spotted by moritz AT jodeit.org (Id sync only)
Darren Tucker0b42e6d2004-08-13 21:22:40 +10001669 - jakob@cvs.openbsd.org 2004/08/12 21:41:13
1670 [ssh-keygen.1 ssh.1]
1671 improve SSHFP documentation; ok deraadt@
Darren Tucker6e370372004-08-13 21:23:25 +10001672 - jmc@cvs.openbsd.org 2004/08/13 00:01:43
1673 [ssh-keygen.1]
1674 kill whitespace at eol;
Darren Tucker1ef0bc02004-08-13 21:29:02 +10001675 - djm@cvs.openbsd.org 2004/08/13 02:51:48
1676 [monitor_fdpass.c]
1677 extra check for no message case; ok markus, deraadt, hshoexer, henning
Darren Tucker137e9c92004-08-13 21:30:24 +10001678 - dtucker@cvs.openbsd.org 2004/08/13 11:09:24
1679 [servconf.c]
1680 Fix line numbers off-by-one in error messages, from tortay at cc.in2p3.fr
1681 ok markus@, djm@
Darren Tucker03669a32004-08-13 18:37:21 +10001682
Darren Tucker8ae66a52004-08-12 22:16:55 +1000168320040812
1684 - (dtucker) [sshd.c] Remove duplicate variable imported during sync.
Darren Tucker6832b832004-08-12 22:36:51 +10001685 - (dtucker) OpenBSD CVS Sync
1686 - markus@cvs.openbsd.org 2004/07/28 08:56:22
1687 [sshd.c]
1688 call setsid() _before_ re-exec
Darren Tucker5cb30ad2004-08-12 22:40:24 +10001689 - markus@cvs.openbsd.org 2004/07/28 09:40:29
1690 [auth.c auth1.c auth2.c cipher.c cipher.h key.c session.c ssh.c
1691 sshconnect1.c]
1692 more s/illegal/invalid/
Darren Tucker9a2bd112004-08-12 22:40:59 +10001693 - djm@cvs.openbsd.org 2004/08/04 10:37:52
1694 [dh.c]
1695 return group14 when no primes found - fixes hang on empty /etc/moduli;
1696 ok markus@
Darren Tucker9fbac712004-08-12 22:41:44 +10001697 - dtucker@cvs.openbsd.org 2004/08/11 11:09:54
1698 [servconf.c]
1699 Fix minor leak; "looks right" deraadt@
Darren Tuckerd8835932004-08-12 22:42:29 +10001700 - dtucker@cvs.openbsd.org 2004/08/11 11:50:09
1701 [sshd.c]
1702 Don't try to close startup_pipe if it's not open; ok djm@
Darren Tucker9c5049a2004-08-12 22:49:00 +10001703 - djm@cvs.openbsd.org 2004/08/11 11:59:22
1704 [sshlogin.c]
1705 check that lseek went were we told it to; ok markus@
1706 (Id sync only, but similar changes are needed in loginrec.c)
Darren Tucker133b7572004-08-12 22:50:03 +10001707 - djm@cvs.openbsd.org 2004/08/11 12:01:16
1708 [sshlogin.c]
1709 make store_lastlog_message() static to appease -Wall; ok markus
Darren Tuckereb578622004-08-12 23:08:14 +10001710 - (dtucker) [sshd.c] Clear loginmsg in postauth monitor, prevents doubling
1711 messages generated before the postauth privsep split.
Darren Tucker8ae66a52004-08-12 22:16:55 +10001712
Damien Millerb5a21442004-07-21 20:44:05 +1000171320040720
Damien Millera22f2d72004-07-21 20:48:24 +10001714 - (djm) OpenBSD CVS Sync
1715 - markus@cvs.openbsd.org 2004/07/21 08:56:12
1716 [auth.c]
1717 s/Illegal user/Invalid user/; many requests; ok djm, millert, niklas,
1718 miod, ...
Damien Miller30d1f842004-07-21 20:48:53 +10001719 - djm@cvs.openbsd.org 2004/07/21 10:33:31
1720 [auth1.c auth2.c]
1721 bz#899: Don't display invalid usernames in setproctitle
Damien Miller10a445b2004-07-21 20:49:39 +10001722 from peak AT argo.troja.mff.cuni.cz; ok markus@
1723 - djm@cvs.openbsd.org 2004/07/21 10:36:23
1724 [gss-serv-krb5.c]
1725 fix function declaration
Damien Miller0670c732004-07-21 21:53:34 +10001726 - djm@cvs.openbsd.org 2004/07/21 11:51:29
1727 [canohost.c]
1728 bz#902: cache remote port so we don't fatal() in auth_log when remote
1729 connection goes away quickly. from peak AT argo.troja.mff.cuni.cz;
1730 ok markus@
Damien Miller2d2ed3d2004-07-21 20:54:47 +10001731 - (djm) [auth-pam.c] Portable parts of bz#899: Don't display invalid
1732 usernames in setproctitle from peak AT argo.troja.mff.cuni.cz;
Damien Millera22f2d72004-07-21 20:48:24 +10001733
173420040720
Damien Miller23a70272004-07-21 10:52:13 +10001735 - (djm) [log.c] bz #111: Escape more control characters when sending data
1736 to syslog; from peak AT argo.troja.mff.cuni.cz
Damien Miller8fe01052004-07-21 11:01:41 +10001737 - (djm) [contrib/redhat/sshd.pam] bz #903: Remove redundant entries; from
1738 peak AT argo.troja.mff.cuni.cz
Damien Millerb5a21442004-07-21 20:44:05 +10001739 - (djm) [regress/README.regress] Remove caveat regarding TCP wrappers, now
1740 that sshd is fixed to behave better; suggested by tim
Damien Miller23a70272004-07-21 10:52:13 +10001741
174220040719
Damien Miller65df1742004-07-19 09:30:38 +10001743 - (djm) [openbsd-compat/bsd-arc4random.c] Discard early keystream, like OpenBSD
1744 ok dtucker@
Damien Millera6fb77f2004-07-19 09:39:11 +10001745 - (djm) [auth-pam.c] Avoid use of xstrdup and friends in conversation function,
1746 instead return PAM_CONV_ERR, avoiding another path to fatal(); ok dtucker@
Tim Rice816bd0d2004-07-19 10:19:26 -07001747 - (tim) [configure.ac] updwtmpx() on OpenServer seems to add duplicate entry.
1748 Report by rac AT tenzing.org
Damien Miller65df1742004-07-19 09:30:38 +10001749
Darren Tuckerba6de952004-07-17 14:07:42 +1000175020040717
1751 - (dtucker) [logintest.c scp.c sftp-server.c sftp.c ssh-add.c ssh-agent.c
1752 ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c ssh.c sshd.c
1753 openbsd-compat/bsd-misc.c] Move "char *__progname" to bsd-misc.c. Reduces
1754 diff vs OpenBSD; ok mouring@, tested by tim@ too.
Darren Tuckerfc959702004-07-17 16:12:08 +10001755 - (dtucker) OpenBSD CVS Sync
1756 - deraadt@cvs.openbsd.org 2004/07/11 17:48:47
1757 [channels.c cipher.c clientloop.c clientloop.h compat.h moduli.c
1758 readconf.c nchan.c pathnames.h progressmeter.c readconf.h servconf.c
1759 session.c sftp-client.c sftp.c ssh-agent.1 ssh-keygen.c ssh.c ssh1.h
1760 sshd.c ttymodes.h]
1761 spaces
Darren Tucker3ca45082004-07-17 16:13:15 +10001762 - brad@cvs.openbsd.org 2004/07/12 23:34:25
1763 [ssh-keyscan.1]
1764 Fix incorrect macro, .I -> .Em
1765 From: Eric S. Raymond <esr at thyrsus dot com>
1766 ok jmc@
Darren Tucker09991742004-07-17 17:05:14 +10001767 - dtucker@cvs.openbsd.org 2004/07/17 05:31:41
1768 [monitor.c monitor_wrap.c session.c session.h sshd.c sshlogin.c]
1769 Move "Last logged in at.." message generation to the monitor, right
1770 before recording the new login. Fixes missing lastlog message when
1771 /var/log/lastlog is not world-readable and incorrect datestamp when
1772 multiple sessions are used (bz #463); much assistance & ok markus@
Darren Tuckerba6de952004-07-17 14:07:42 +10001773
Darren Tucker5d423f42004-07-11 16:54:08 +1000177420040711
1775 - (dtucker) [auth-pam.c] Check for zero from waitpid() too, which allows
1776 the monitor to properly clean up the PAM thread (Debian bug #252676).
1777
Tim Rice3b376f02004-07-09 10:45:26 -0700177820040709
1779 - (tim) [contrib/cygwin/README] add minires-devel requirement. Patch from
1780 vinschen AT redhat.com
1781
Darren Tuckercd99fa02004-07-08 23:08:26 +1000178220040708
1783 - (dtucker) OpenBSD CVS Sync
1784 - dtucker@cvs.openbsd.org 2004/07/03 05:11:33
1785 [sshlogin.c] (RCSID sync only, the corresponding code is not in Portable)
1786 Use '\0' not 0 for string; ok djm@, deraadt@
Darren Tucker042e2e82004-07-08 23:09:42 +10001787 - dtucker@cvs.openbsd.org 2004/07/03 11:02:25
1788 [monitor_wrap.c]
1789 Put s/key functions inside #ifdef SKEY same as monitor.c,
1790 from des@freebsd via bz #330, ok markus@
Darren Tuckere1f17052004-07-08 23:11:44 +10001791 - dtucker@cvs.openbsd.org 2004/07/08 12:47:21
1792 [scp.c]
1793 Prevent scp from skipping the file following a double-error.
1794 bz #863, ok markus@
Darren Tuckercd99fa02004-07-08 23:08:26 +10001795
Darren Tuckerd062da52004-07-02 18:43:09 +1000179620040702
1797 - (dtucker) [mdoc2man.awk] Teach it to ignore .Bk -words, reported by
1798 strube at physik3.gwdg.de a long time ago.
1799
Darren Tucker0a44d1e2004-07-01 09:48:29 +1000180020040701
1801 - (dtucker) [session.c] Call display_loginmsg again after do_pam_session.
1802 Ensures messages from PAM modules are displayed when privsep=no.
Darren Tuckere2ba9c22004-07-01 12:38:14 +10001803 - (dtucker) [auth-pam.c] Bug #705: Make arguments match PAM specs, fixes
1804 warnings on compliant platforms. From paul.a.bolton at bt.com. ok djm@
Darren Tucker1f7e4082004-07-01 14:00:14 +10001805 - (dtucker) [auth-pam.c] Bug #559 (last piece): Pass DISALLOW_NULL_AUTHTOK
1806 to pam_authenticate for challenge-response auth too. Originally from
1807 fcusack at fcusack.com, ok djm@
Tim Ricea5757f02004-07-01 20:41:15 -07001808 - (tim) [buildpkg.sh.in] Add $REV to bump the package revision within
1809 the same version. Handle the case where someone uses --with-privsep-user=
1810 and the user name does not match the group name. ok dtucker@
Darren Tucker0a44d1e2004-07-01 09:48:29 +10001811
Darren Tucker59e06022004-06-30 20:34:31 +1000181220040630
1813 - (dtucker) [auth-pam.c] Check for buggy PAM modules that return a NULL
1814 appdata_ptr to the conversation function. ok djm@
Damien Miller5d1eceb2004-06-30 22:37:57 +10001815 - (djm) OpenBSD CVS Sync
1816 - jmc@cvs.openbsd.org 2004/06/26 09:03:21
1817 [ssh.1]
1818 - remove double word
1819 - rearrange .Bk to keep SYNOPSIS nice
1820 - -M before -m in options description
Damien Miller2234bac2004-06-30 22:38:52 +10001821 - jmc@cvs.openbsd.org 2004/06/26 09:11:14
1822 [ssh_config.5]
1823 punctuation and grammar fixes. also, keep the options in order.
Damien Miller26213e52004-06-30 22:39:34 +10001824 - jmc@cvs.openbsd.org 2004/06/26 09:14:40
1825 [sshd_config.5]
1826 new sentence, new line;
Damien Miller386c6a22004-06-30 22:40:20 +10001827 - avsm@cvs.openbsd.org 2004/06/26 20:07:16
1828 [sshd.c]
1829 initialise some fd variables to -1, djm@ ok
Damien Millera6b1d162004-06-30 22:41:07 +10001830 - djm@cvs.openbsd.org 2004/06/30 08:36:59
1831 [session.c]
1832 unbreak TTY break, diagnosed by darren AT dazwin.com; ok markus@
Darren Tucker59e06022004-06-30 20:34:31 +10001833
Tim Rice52879022004-06-27 20:50:35 -0700183420040627
1835 - (tim) update README files.
Darren Tucker58cef1f2004-06-28 15:45:08 +10001836 - (dtucker) [mdoc2man.awk] Bug #883: correctly recognise .Pa and .Ev macros.
Darren Tuckerf9eb2b02004-06-28 15:52:50 +10001837 - (dtucker) [regress/README.regress] Document new variables.
Darren Tuckere59b5082004-06-28 16:01:19 +10001838 - (dtucker) [acconfig.h configure.ac sftp-server.c] Bug #823: add sftp
1839 rename handling for Linux which returns EPERM for link() on (at least some)
1840 filesystems that do not support hard links. sftp-server will fall back to
1841 stat+rename() in such cases.
Darren Tucker5288cb22004-06-28 18:11:19 +10001842 - (dtucker) [openbsd-compat/port-aix.c] Missing __func__.
Tim Rice52879022004-06-27 20:50:35 -07001843
Damien Miller035a5b42004-06-26 08:16:31 +1000184420040626
1845 - (djm) OpenBSD CVS Sync
1846 - djm@cvs.openbsd.org 2004/06/25 18:43:36
1847 [sshd.c]
1848 fix broken fd handling in the re-exec fallback path, particularly when
1849 /dev/crypto is in use; ok deraadt@ markus@
Damien Miller96d6d7d2004-06-26 09:21:06 +10001850 - djm@cvs.openbsd.org 2004/06/25 23:21:38
1851 [sftp.c]
1852 bz #875: fix bad escape char error message; reported by f_mohr AT yahoo.de
Damien Miller035a5b42004-06-26 08:16:31 +10001853
Darren Tucker645ab752004-06-25 13:33:20 +1000185420040625
1855 - (dtucker) OpenBSD CVS Sync
1856 - djm@cvs.openbsd.org 2004/06/24 19:30:54
1857 [servconf.c servconf.h sshd.c]
1858 re-exec sshd on accept(); initial work, final debugging and ok markus@
Darren Tucker586b0b92004-06-25 13:34:31 +10001859 - djm@cvs.openbsd.org 2004/06/25 01:16:09
1860 [sshd.c]
1861 only perform tcp wrappers checks when the incoming connection is on a
1862 socket. silences useless warnings from regress tests that use
1863 proxycommand="sshd -i". prompted by david@ ok markus@
Darren Tucker977a9d22004-06-25 13:45:18 +10001864 - djm@cvs.openbsd.org 2004/06/24 19:32:00
1865 [regress/Makefile regress/test-exec.sh, added regress/reexec.sh]
1866 regress test for re-exec corner cases
Darren Tuckeref3b47a2004-06-25 13:46:08 +10001867 - djm@cvs.openbsd.org 2004/06/25 01:25:12
1868 [regress/test-exec.sh]
1869 clean reexec-specific junk out of text-exec.sh and simplify; idea markus@
Darren Tuckeraedc1d62004-06-25 17:06:02 +10001870 - dtucker@cvs.openbsd.org 2004/06/25 05:38:48
1871 [sftp-server.c]
1872 Fall back to stat+rename if filesystem doesn't doesn't support hard
1873 links. bz#823, ok djm@
Darren Tucker60bd4092004-06-25 14:03:34 +10001874 - (dtucker) [configure.ac openbsd-compat/misc.c [openbsd-compat/misc.h]
1875 Add closefrom() for platforms that don't have it.
Darren Tucker17c5d032004-06-25 14:22:23 +10001876 - (dtucker) [sshd.c] add line missing from reexec sync.
Darren Tucker645ab752004-06-25 13:33:20 +10001877
Darren Tuckera8c73d32004-06-23 09:17:54 +1000187820040623
1879 - (dtucker) [auth1.c] Ensure do_pam_account is called for Protocol 1
1880 connections with empty passwords. Patch from davidwu at nbttech.com,
1881 ok djm@
Darren Tucker6eabe642004-06-23 09:23:58 +10001882 - (dtucker) OpenBSD CVS Sync
1883 - dtucker@cvs.openbsd.org 2004/06/22 22:42:02
1884 [regress/envpass.sh]
1885 Add quoting for test -z; ok markus@
Darren Tucker6223eea2004-06-23 09:25:02 +10001886 - dtucker@cvs.openbsd.org 2004/06/22 22:45:52
1887 [regress/test-exec.sh]
1888 Add TEST_SSH_SSHD_CONFOPTS and TEST_SSH_SSH_CONFOPTS to allow adding
1889 arbitary options to sshd_config and ssh_config during tests. ok markus@
Darren Tucker3b9c0ad2004-06-23 09:28:20 +10001890 - dtucker@cvs.openbsd.org 2004/06/22 22:55:56
1891 [regress/dynamic-forward.sh regress/test-exec.sh]
1892 Allow setting of port for regress from TEST_SSH_PORT variable; ok markus@
Darren Tuckerede07fb2004-06-24 00:33:48 +10001893 - mouring@cvs.openbsd.org 2004/06/23 00:39:38
1894 [rijndael.c]
1895 -Wshadow fix up s/encrypt/do_encrypt/. OK djm@, markus@
Darren Tuckerb5bc1a62004-06-24 00:34:53 +10001896 - dtucker@cvs.openbsd.org 2004/06/23 14:31:01
1897 [ssh.c]
1898 Fix counting in master/slave when passing environment variables; ok djm@
Darren Tuckere5a604f2004-06-23 12:28:31 +10001899 - (dtucker) [cipher.c] encrypt->do_encrypt inside SSH_OLD_EVP to match
1900 -Wshadow change.
Ben Lindstromca372192004-06-23 04:04:45 +00001901 - (bal) [Makefile.in] Remove opensshd.init on 'make distclean'
Darren Tucker0a9d43d2004-06-23 13:45:24 +10001902 - (dtucker) [auth.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]
1903 Move loginrestrictions test to port-aix.c, replace with a generic hook.
Tim Riceaf4ab6c2004-06-22 20:53:02 -07001904 - (tim) [regress/try-ciphers.sh] "if ! some_command" is not portable.
Ben Lindstromca372192004-06-23 04:04:45 +00001905 - (bal) [contrib/README] Removed "mdoc2man.pl" reference and added
1906 reference to "findssl.sh"
Darren Tuckera8c73d32004-06-23 09:17:54 +10001907
Darren Tucker365433f2004-06-22 12:29:23 +1000190820040622
1909 - (dtucker) OpenBSD CVS Sync
1910 - djm@cvs.openbsd.org 2004/06/20 17:36:59
1911 [ssh.c]
1912 filter passed env vars at slave in connection sharing case; ok markus@
Darren Tuckerb215c5d2004-06-22 12:30:53 +10001913 - djm@cvs.openbsd.org 2004/06/20 18:53:39
1914 [sftp.c]
1915 make "ls -l" listings print user/group names, add "ls -n" to show uid/gid
1916 (like /bin/ls); idea & ok markus@
Darren Tuckerb357afc2004-06-22 12:31:23 +10001917 - djm@cvs.openbsd.org 2004/06/20 19:28:12
1918 [sftp.1]
1919 mention new -n flag
Darren Tucker3f9fdc72004-06-22 12:56:01 +10001920 - avsm@cvs.openbsd.org 2004/06/21 17:36:31
1921 [auth-rsa.c auth2-gss.c auth2-pubkey.c authfile.c canohost.c channels.c
1922 cipher.c dns.c kex.c monitor.c monitor_fdpass.c monitor_wrap.c
1923 monitor_wrap.h nchan.c packet.c progressmeter.c scp.c sftp-server.c sftp.c
1924 ssh-gss.h ssh-keygen.c ssh.c sshconnect.c sshconnect1.c sshlogin.c
1925 sshpty.c]
1926 make ssh -Wshadow clean, no functional changes
1927 markus@ ok
Darren Tucker723e9452004-06-22 12:57:08 +10001928 - djm@cvs.openbsd.org 2004/06/21 17:53:03
1929 [session.c]
1930 fix fd leak for multiple subsystem connections; with markus@
Darren Tuckerefa62f92004-06-22 12:57:44 +10001931 - djm@cvs.openbsd.org 2004/06/21 22:02:58
1932 [log.h]
1933 mark fatal and cleanup exit as __dead; ok markus@
Darren Tuckerb9123452004-06-22 13:06:45 +10001934 - djm@cvs.openbsd.org 2004/06/21 22:04:50
1935 [sftp.c]
1936 introduce sorting for ls, same options as /bin/ls; ok markus@
Darren Tuckera4e9ffa2004-06-22 13:07:58 +10001937 - djm@cvs.openbsd.org 2004/06/21 22:30:45
1938 [sftp.c]
1939 prefix ls option flags with LS_
Darren Tucker15ca6e82004-06-22 13:08:21 +10001940 - djm@cvs.openbsd.org 2004/06/21 22:41:31
1941 [sftp.1]
1942 document sort options
Darren Tucker9a526452004-06-22 13:09:55 +10001943 - djm@cvs.openbsd.org 2004/06/22 01:16:39
1944 [sftp.c]
1945 don't show .files by default in ls, add -a option to turn them back on;
1946 ok markus
Darren Tucker430c6a12004-06-22 13:38:56 +10001947 - markus@cvs.openbsd.org 2004/06/22 03:12:13
1948 [regress/envpass.sh regress/multiplex.sh]
1949 more portable env passing tests
Darren Tuckerb09b6772004-06-22 15:06:46 +10001950 - dtucker@cvs.openbsd.org 2004/06/22 05:05:45
1951 [monitor.c monitor_wrap.c]
1952 Change login->username, will prevent -Wshadow errors in Portable;
1953 ok markus@
Darren Tucker5e4e2722004-06-22 13:26:00 +10001954 - (dtucker) [monitor.c] Fix Portable-specific -Wshadow warnings on "socket".
Darren Tucker59bf4a92004-06-22 13:27:16 +10001955 - (dtucker) [defines.h] Define __dead if not already defined.
Ben Lindstromca372192004-06-23 04:04:45 +00001956 - (bal) [auth-passwd.c auth1.c] Clean up unused variables.
Darren Tucker365433f2004-06-22 12:29:23 +10001957
Tim Ricef7ba8f62004-06-20 10:37:32 -0700195820040620
1959 - (tim) [configure.ac Makefile.in] Only change TEST_SHELL on broken platforms.
1960
Darren Tucker17db1c42004-06-19 12:54:38 +1000196120040619
1962 - (dtucker) [auth-pam.c] Don't use PAM namespace for
1963 pam_password_change_required either.
Tim Rice5af9db92004-06-19 19:31:06 -07001964 - (tim) [configure.ac buildpkg.sh.in contrib/solaris/README] move opensshd
1965 init script to top level directory. Add opensshd.init.in.
1966 Remove contrib/solaris/buildpkg.sh, contrib/solaris/opensshd.in
Darren Tucker17db1c42004-06-19 12:54:38 +10001967
Damien Miller3756dce2004-06-18 01:17:29 +1000196820040618
1969 - (djm) OpenBSD CVS Sync
1970 - djm@cvs.openbsd.org 2004/06/17 14:52:48
1971 [clientloop.c clientloop.h ssh.c]
1972 support environment passing over shared connections; ok markus@
Damien Miller23f07702004-06-18 01:19:03 +10001973 - djm@cvs.openbsd.org 2004/06/17 15:10:14
1974 [clientloop.c misc.h readconf.c readpass.c ssh.c ssh_config.5]
1975 Add option for confirmation (ControlMaster=ask) via ssh-askpass before
1976 opening shared connections; ok markus@
Damien Millere826a8c2004-06-18 01:23:03 +10001977 - djm@cvs.openbsd.org 2004/06/17 14:53:27
1978 [regress/multiplex.sh]
1979 shared connection env passing regress test
Darren Tucker13fbe572004-06-18 14:14:43 +10001980 - (dtucker) [regress/README.regress] Add detail on how to run a single
1981 test from the top-level Makefile.
Darren Tuckerba5c5922004-06-18 16:22:39 +10001982 - (dtucker) OpenBSD CVS Sync
1983 - djm@cvs.openbsd.org 2004/06/17 23:56:57
1984 [ssh.1 ssh.c]
1985 sync usage() and SYNPOSIS with connection sharing changes
Darren Tuckerbd12f172004-06-18 16:23:43 +10001986 - dtucker@cvs.openbsd.org 2004/06/18 06:13:25
1987 [sftp.c]
1988 Use execvp instead of execv so sftp -S ssh works. "makes sense" markus@
Darren Tucker6288dc12004-06-18 16:25:35 +10001989 - dtucker@cvs.openbsd.org 2004/06/18 06:15:51
1990 [multiplex.sh]
1991 Use -S for scp/sftp to force the use of the ssh being tested.
1992 ok djm@,markus@
Damien Miller0809e232004-06-18 22:20:57 +10001993 - (djm) OpenBSD CVS Sync
1994 - djm@cvs.openbsd.org 2004/06/18 10:40:19
1995 [ssh.c]
1996 delay signal handler setup until we have finished talking to the master.
1997 allow interrupting of setup (e.g. if master is stuck); ok markus@
Damien Millerb8ea2482004-06-18 22:21:55 +10001998 - markus@cvs.openbsd.org 2004/06/18 10:55:43
1999 [ssh.1 ssh.c]
2000 trim synopsis for -S, allow -S and -oControlMaster, -MM means 'ask';
2001 ok djm
Damien Miller3bbd8782004-06-18 22:23:22 +10002002 - djm@cvs.openbsd.org 2004/06/18 11:11:54
2003 [channels.c clientloop.c]
2004 Don't explode in clientloop when we receive a bogus channel id, but
2005 also don't generate them to begin with; ok markus@
Damien Miller3756dce2004-06-18 01:17:29 +10002006
Darren Tucker8a2f1b32004-06-17 15:18:32 +1000200720040617
2008 - (dtucker) [regress/scp.sh] diff -N is not portable (but needed for some
2009 platforms), so test if diff understands it. Pointed out by tim@, ok djm@
Darren Tuckerddea13d2004-06-17 16:27:43 +10002010 - (dtucker) OpenBSD CVS Sync regress/
2011 - dtucker@cvs.openbsd.org 2004/06/17 05:51:59
2012 [regress/multiplex.sh]
2013 Remove datafile between and after tests, kill sshd rather than wait;
2014 ok djm@
Darren Tuckerffaa6a52004-06-17 16:32:45 +10002015 - dtucker@cvs.openbsd.org 2004/06/17 06:00:05
2016 [regress/multiplex.sh]
2017 Use DATA and COPY for test data rather than hard-coded paths; ok djm@
Darren Tucker3e86fc42004-06-17 16:34:02 +10002018 - dtucker@cvs.openbsd.org 2004/06/17 06:19:06
2019 [regress/multiplex.sh]
2020 Add small description of failing test to failure message; ok djm@
Darren Tucker10e7f192004-06-17 16:36:27 +10002021 - (dtucker) [regress/multiplex.sh] add EXEEXT for those platforms that need
2022 it.
Darren Tuckera9972e12004-06-17 17:01:21 +10002023 - (dtucker) [regress/multiplex.sh] Increase sleep time to 120 sec (60 is not
2024 enough for slow systems, especially if they don't have a kernel RNG).
Darren Tucker8a2f1b32004-06-17 15:18:32 +10002025
Darren Tuckera7ea5462004-06-16 12:01:15 +1000202620040616
2027 - (dtucker) [openbsd-compat/port-aix.c] Expand whitespace -> tabs. No
2028 code changes.
Darren Tucker4c37ef02004-06-16 20:08:56 +10002029 - (dtucker) OpenBSD CVS Sync regress/
2030 - djm@cvs.openbsd.org 2004/04/27 09:47:30
Darren Tucker9fe95da2004-06-16 20:33:55 +10002031 [regress/Makefile regress/test-exec.sh, added regress/envpass.sh]
Darren Tucker4c37ef02004-06-16 20:08:56 +10002032 regress test for environment passing, SendEnv & AcceptEnv options;
2033 ok markus@
Darren Tucker50433a92004-06-16 20:15:59 +10002034 - dtucker@cvs.openbsd.org 2004/06/13 13:51:02
Darren Tucker9fe95da2004-06-16 20:33:55 +10002035 [regress/Makefile regress/test-exec.sh, added regress/scp-ssh-wrapper.sh
2036 regress/scp.sh]
Darren Tucker50433a92004-06-16 20:15:59 +10002037 Add scp regression test; with & ok markus@
Darren Tuckere7d05832004-06-16 20:22:22 +10002038 - djm@cvs.openbsd.org 2004/06/13 15:04:08
Darren Tucker9fe95da2004-06-16 20:33:55 +10002039 [regress/Makefile regress/test-exec.sh, added regress/envpass.sh]
Darren Tuckere7d05832004-06-16 20:22:22 +10002040 regress test for client multiplexing; ok markus@
Darren Tuckera4039562004-06-16 20:31:18 +10002041 - djm@cvs.openbsd.org 2004/06/13 15:16:54
2042 [regress/test-exec.sh]
2043 remove duplicate setting of $SCP; spotted by markus@
Darren Tucker6f0e35b2004-06-16 23:22:37 +10002044 - dtucker@cvs.openbsd.org 2004/06/16 13:15:09
2045 [regress/scp.sh]
2046 Make scp -r tests use diff -rN not cmp (which won't do dirs. ok markus@
Darren Tucker5711dca2004-06-16 23:23:50 +10002047 - dtucker@cvs.openbsd.org 2004/06/16 13:16:40
Darren Tuckeraf161542004-06-16 23:24:19 +10002048 [regress/multiplex.sh]
Darren Tucker5711dca2004-06-16 23:23:50 +10002049 Silence multiplex sftp and scp tests. ok markus@
Darren Tucker7a06f622004-06-16 21:08:32 +10002050 - (dtucker) [regress/test-exec.sh]
2051 Move Portable-only StrictModes to top of list to make syncs easier.
2052 - (dtucker) [regress/README.regress]
2053 Add $TEST_SHELL to readme.
Darren Tuckera7ea5462004-06-16 12:01:15 +10002054
Damien Miller350327c2004-06-15 10:24:13 +1000205520040615
2056 - (djm) OpenBSD CVS Sync
2057 - djm@cvs.openbsd.org 2004/05/26 08:59:57
2058 [sftp.c]
2059 exit -> _exit in forked child on error; from andrushock AT korovino.net
Damien Miller3e4dffb2004-06-15 10:27:15 +10002060 - markus@cvs.openbsd.org 2004/05/26 23:02:39
2061 [channels.c]
2062 missing freeaddrinfo; Andrey Matveev
Damien Miller33793852004-06-15 10:27:55 +10002063 - dtucker@cvs.openbsd.org 2004/05/27 00:50:13
2064 [readconf.c]
2065 Kill dead code after fatal(); ok djm@
Damien Miller16ea6492004-06-15 10:28:24 +10002066 - dtucker@cvs.openbsd.org 2004/06/01 14:20:45
2067 [auth2-chall.c]
2068 Remove redundant #include; ok markus@
Damien Miller7cf17eb2004-06-15 10:28:56 +10002069 - pedro@cvs.openbsd.org 2004/06/03 12:22:20
2070 [sftp-client.c sftp.c]
2071 initialize pointers, ok markus@
Damien Millerf675fc42004-06-15 10:30:09 +10002072 - djm@cvs.openbsd.org 2004/06/13 12:53:24
2073 [dh.c dh.h kex.c kex.h kexdhc.c kexdhs.c monitor.c myproposal.h]
2074 [ssh-keyscan.c sshconnect2.c sshd.c]
2075 implement diffie-hellman-group14-sha1 kex method (trivial extension to
2076 existing diffie-hellman-group1-sha1); ok markus@
Damien Miller05202ff2004-06-15 10:30:39 +10002077 - dtucker@cvs.openbsd.org 2004/06/13 14:01:42
2078 [ssh.1 ssh_config.5 sshd_config.5]
2079 List supported ciphers in man pages, tidy up ssh -c;
2080 "looks fine" jmc@, ok markus@
Damien Miller0e220db2004-06-15 10:34:08 +10002081 - djm@cvs.openbsd.org 2004/06/13 15:03:02
2082 [channels.c channels.h clientloop.c clientloop.h includes.h readconf.c]
2083 [readconf.h scp.1 sftp.1 ssh.1 ssh.c ssh_config.5]
2084 implement session multiplexing in the client (the server has supported
2085 this since 2.0); ok markus@
Damien Miller232711f2004-06-15 10:35:30 +10002086 - djm@cvs.openbsd.org 2004/06/14 01:44:39
2087 [channels.c clientloop.c misc.c misc.h packet.c ssh-agent.c ssh-keyscan.c]
2088 [sshd.c]
Damien Miller03e66f62004-06-15 15:47:51 +10002089 set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@
2090 - djm@cvs.openbsd.org 2004/06/15 05:45:04
2091 [clientloop.c]
2092 missed one unset_nonblock; spotted by Tim Rice
Damien Miller5e6f4db2004-06-15 10:44:40 +10002093 - (djm) Fix Makefile.in for connection sharing changes
Damien Miller07b6ff12004-06-15 11:14:45 +10002094 - (djm) [ssh.c] Use separate var for address length
Damien Miller350327c2004-06-15 10:24:13 +10002095
Darren Tucker94befab2004-06-03 14:53:12 +1000209620040603
2097 - (dtucker) [auth-pam.c] Don't use pam_* namespace for sshd's PAM functions.
2098 ok djm@
2099
Damien Miller26314f62004-06-01 11:28:20 +1000210020040601
2101 - (djm) [auth-pam.c] Add copyright for local changes
2102
Darren Tucker450a1582004-05-30 20:43:59 +1000210320040530
Darren Tuckere061b152004-05-30 22:04:56 +10002104 - (dtucker) [auth-pam.c auth-pam.h auth-passwd.c] Bug #874: Re-add PAM
Darren Tucker450a1582004-05-30 20:43:59 +10002105 support for PasswordAuthentication=yes. ok djm@
Darren Tuckere061b152004-05-30 22:04:56 +10002106 - (dtucker) [auth-pam.c] Use an invalid password for root if
2107 PermitRootLogin != yes or the login is invalid, to prevent leaking
2108 information. Based on Openwall's owl-always-auth patch. ok djm@
Tim Rice6f1f7582004-05-30 21:38:51 -07002109 - (tim) [configure.ac Makefile.in] Add support for "make package" ok djm@
2110 - (tim) [buildpkg.sh.in] New file. A more flexible version of
2111 contrib/solaris/buildpkg.sh used for "make package".
Tim Rice2d2b9f72004-05-30 21:48:40 -07002112 - (tim) [buildpkg.sh.in] Last minute fix didn't make it in the .in file.
Darren Tucker450a1582004-05-30 20:43:59 +10002113
Darren Tucker0ffe6382004-05-27 09:59:31 +1000211420040527
2115 - (dtucker) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec
2116 contrib/README CREDITS INSTALL] Bug #873: Correct URLs for x11-ssh-askpass
2117 and Jim Knoble's email address , from Jim himself.
2118
Darren Tuckercdf547a2004-05-24 10:12:19 +1000211920040524
2120 - (dtucker) OpenBSD CVS Sync
2121 - djm@cvs.openbsd.org 2004/05/19 12:17:33
2122 [sftp-client.c sftp.c]
2123 gracefully abort transfers on receipt of SIGINT, also ignore SIGINT while
2124 waiting for a command; ok markus@
Darren Tuckere1675822004-05-24 10:13:07 +10002125 - dtucker@cvs.openbsd.org 2004/05/20 10:58:05
2126 [clientloop.c]
2127 Trivial type fix 0 -> '\0'; ok markus@
Darren Tuckere4ab1152004-05-24 10:14:24 +10002128 - markus@cvs.openbsd.org 2004/05/21 08:43:03
2129 [kex.h moduli.c tildexpand.c]
2130 add prototypes for -Wall; ok djm
Darren Tuckere7066df2004-05-24 10:18:05 +10002131 - djm@cvs.openbsd.org 2004/05/21 11:33:11
2132 [channels.c channels.h clientloop.c serverloop.c ssh.1]
Darren Tuckerb53355e2004-05-24 11:55:36 +10002133 bz #756: add support for the cancel-tcpip-forward request for the server
2134 and the client (through the ~C commandline). reported by z3p AT
2135 twistedmatrix.com; ok markus@
Darren Tucker1973c882004-05-24 10:34:36 +10002136 - djm@cvs.openbsd.org 2004/05/22 06:32:12
2137 [clientloop.c ssh.1]
2138 use '-h' for help in ~C commandline instead of '-?'; inspired by jmc@
Darren Tuckere534e122004-05-24 10:35:14 +10002139 - jmc@cvs.openbsd.org 2004/05/22 16:01:05
2140 [ssh.1]
2141 kill whitespace at eol;
Darren Tucker89413db2004-05-24 10:36:23 +10002142 - dtucker@cvs.openbsd.org 2004/05/23 23:59:53
Darren Tuckerb53355e2004-05-24 11:55:36 +10002143 [auth.c auth.h auth1.c auth2.c servconf.c servconf.h sshd_config
2144 sshd_config.5]
Darren Tucker89413db2004-05-24 10:36:23 +10002145 Add MaxAuthTries sshd config option; ok markus@
Darren Tuckerb53355e2004-05-24 11:55:36 +10002146 - (dtucker) [auth-pam.c] Bug #839: Ensure that pam authentication "thread"
2147 is terminated if the privsep slave exits during keyboard-interactive
2148 authentication. ok djm@
Darren Tucker12984962004-05-24 13:37:13 +10002149 - (dtucker) [sshd.c] Fix typo in comment.
Darren Tuckercdf547a2004-05-24 10:12:19 +10002150
Damien Miller701d0512004-05-23 11:47:58 +1000215120040523
Damien Millerb4097182004-05-23 14:09:40 +10002152 - (djm) [sshd_config] Explain consequences of UsePAM=yes a little better in
2153 sshd_config; ok dtucker@
2154 - (djm) [configure.ac] Warn if the system has no known way of figuring out
2155 which user is on the other end of a Unix domain socket; ok dtucker@
Ben Lindstromefec7c22004-05-23 06:22:27 +00002156 - (bal) [openbsd-compat/sys-queue.h] Reintroduce machinary to handle
2157 old/broken/incomplete <sys/queue.h>.
Damien Miller701d0512004-05-23 11:47:58 +10002158
Darren Tucker8e968a52004-05-13 11:56:16 +1000215920040513
2160 - (dtucker) [configure.ac] Bug #867: Additional tests for res_query in
2161 libresolv, fixes problems detecting it on some platforms
2162 (eg Linux/x86-64). From Kurt Roeckx via Debian, ok mouring@
Darren Tucker2e578f62004-05-13 13:03:04 +10002163 - (dtucker) OpenBSD CVS Sync
2164 - jmc@cvs.openbsd.org 2004/05/04 18:36:07
2165 [scp.1]
2166 SendEnv here too;
Darren Tuckerdcf6ec42004-05-13 13:03:56 +10002167 - jmc@cvs.openbsd.org 2004/05/06 11:24:23
2168 [ssh_config.5]
2169 typo from John Cosimano (PR 3770);
Darren Tucker06f2bd82004-05-13 16:06:46 +10002170 - deraadt@cvs.openbsd.org 2004/05/08 00:01:37
2171 [auth.c clientloop.c misc.h servconf.c ssh.c sshpty.h sshtty.c
2172 tildexpand.c], removed: sshtty.h tildexpand.h
2173 make two tiny header files go away; djm ok
Darren Tuckere608ca22004-05-13 16:15:47 +10002174 - djm@cvs.openbsd.org 2004/05/08 00:21:31
2175 [clientloop.c misc.h readpass.c scard.c ssh-add.c ssh-agent.c ssh-keygen.c
2176 sshconnect.c sshconnect1.c sshconnect2.c] removed: readpass.h
2177 kill a tiny header; ok deraadt@
Darren Tucker770fc012004-05-13 16:24:32 +10002178 - djm@cvs.openbsd.org 2004/05/09 00:06:47
2179 [moduli.c ssh-keygen.c] removed: moduli.h
2180 zap another tiny header; ok deraadt@
Darren Tuckere14e0052004-05-13 16:30:44 +10002181 - djm@cvs.openbsd.org 2004/05/09 01:19:28
2182 [OVERVIEW auth-rsa.c auth1.c kex.c monitor.c session.c sshconnect1.c
2183 sshd.c] removed: mpaux.c mpaux.h
2184 kill some more tiny files; ok deraadt@
Darren Tuckerb42714e2004-05-13 16:31:48 +10002185 - djm@cvs.openbsd.org 2004/05/09 01:26:48
2186 [kex.c]
2187 don't overwrite what we are trying to compute
Darren Tucker1f8311c2004-05-13 16:39:33 +10002188 - deraadt@cvs.openbsd.org 2004/05/11 19:01:43
2189 [auth.c auth2-none.c authfile.c channels.c monitor.c monitor_mm.c
2190 packet.c packet.h progressmeter.c session.c openbsd-compat/xmmap.c]
2191 improve some code lint did not like; djm millert ok
Darren Tuckera86b4532004-05-13 16:45:46 +10002192 - dtucker@cvs.openbsd.org 2004/05/13 02:47:50
2193 [ssh-agent.1]
2194 Add examples to ssh-agent.1, bz#481 from Ralf Hauser; ok deraadt@
Darren Tucker1dcff9a2004-05-13 16:51:40 +10002195 - (dtucker) [sshd.8] Bug #843: Add warning about PasswordAuthentication to
2196 UsePAM section. Parts from djm@ and jmc@.
Darren Tuckerb6db1722004-05-13 17:29:35 +10002197 - (dtucker) [auth-pam.c scard-opensc.c] Tinderbox says auth-pam.c uses
2198 readpass.h, grep says scard-opensc.c does too. Replace with misc.h.
Darren Tuckercc268552004-05-13 20:10:38 +10002199 - (dtucker) [openbsd-compat/getrrsetbyname.c] Check that HAVE_DECL_H_ERROR
2200 is defined before using.
Darren Tucker991d95f2004-05-13 20:24:10 +10002201 - (dtucker) [openbsd-compat/getrrsetbyname.c] Fix typo too: HAVE_DECL_H_ERROR
2202 -> HAVE_DECL_H_ERRNO.
Darren Tucker8e968a52004-05-13 11:56:16 +10002203
220420040502
Darren Tucker47abce42004-05-02 22:09:00 +10002205 - (dtucker) OpenBSD CVS Sync
2206 - djm@cvs.openbsd.org 2004/04/22 11:56:57
2207 [moduli.c]
2208 Bugzilla #850: Sophie Germain is the correct name of the French
2209 mathematician, "Sophie Germaine" isn't; from Luc.Maisonobe@c-s.fr
Darren Tucker46bc0752004-05-02 22:11:30 +10002210 - djm@cvs.openbsd.org 2004/04/27 09:46:37
2211 [readconf.c readconf.h servconf.c servconf.h session.c session.h ssh.c
2212 ssh_config.5 sshd_config.5]
2213 bz #815: implement ability to pass specified environment variables from
2214 the client to the server; ok markus@
Darren Tucker1e0c9bf2004-05-02 22:12:48 +10002215 - djm@cvs.openbsd.org 2004/04/28 05:17:10
2216 [ssh_config.5 sshd_config.5]
2217 manpage fixes in envpass stuff from Brian Poole (raj AT cerias.purdue.edu)
Darren Tuckerb2a601c2004-05-02 22:13:20 +10002218 - jmc@cvs.openbsd.org 2004/04/28 07:02:56
2219 [sshd_config.5]
2220 remove unnecessary .Pp;
Darren Tucker7a6c0662004-05-02 22:14:03 +10002221 - jmc@cvs.openbsd.org 2004/04/28 07:13:42
2222 [sftp.1 ssh.1]
2223 add SendEnv to -o list;
Darren Tucker097e1e92004-05-02 22:15:08 +10002224 - dtucker@cvs.openbsd.org 2004/05/02 11:54:31
2225 [sshd.8]
2226 Man page grammar fix (bz #858), from damerell at chiark.greenend.org.uk
2227 via Debian; ok djm@
Darren Tuckeredae0ec2004-05-02 22:15:52 +10002228 - dtucker@cvs.openbsd.org 2004/05/02 11:57:52
2229 [ssh.1]
2230 ConnectionTimeout -> ConnectTimeout, from m.a.ellis at ncl.ac.uk via
2231 Debian. ok djm@
Darren Tucker3d5cbb72004-05-03 09:13:15 +10002232 - dtucker@cvs.openbsd.org 2004/05/02 23:02:17
2233 [sftp.1]
2234 ConnectionTimeout -> ConnectTimeout here too, pointed out by jmc@
Darren Tuckerc0796d72004-05-03 09:19:03 +10002235 - dtucker@cvs.openbsd.org 2004/05/02 23:17:51
2236 [scp.1]
2237 ConnectionTimeout -> ConnectTimeout for scp.1 too.
Darren Tucker47abce42004-05-02 22:09:00 +10002238
Darren Tucker5bb14002004-04-23 18:53:10 +1000223920040423
2240 - (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Declare h_errno
2241 as extern int if not already declared. Fixes compile errors on old SCO
2242 platforms. ok tim@
Darren Tucker7749c512004-04-23 18:57:13 +10002243 - (dtucker) [README.platform] List prereqs for building on Cygwin.
Darren Tucker5bb14002004-04-23 18:53:10 +10002244
Damien Miller752e4e62004-04-21 12:29:13 +1000224520040421
2246 - (djm) Update config.guess and config.sub to autoconf-2.59 versions; ok tim@
2247
Damien Miller0b51a522004-04-20 20:07:19 +1000224820040420
2249 - (djm) OpenBSD CVS Sync
2250 - henning@cvs.openbsd.org 2004/04/08 16:08:21
2251 [sshconnect2.c]
Damien Miller50bec892004-04-20 20:20:40 +10002252 swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what
2253 FreeBSD and NetBSD do.
Damien Miller0b51a522004-04-20 20:07:19 +10002254 ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@
Damien Miller57a44762004-04-20 20:11:57 +10002255 - djm@cvs.openbsd.org 2004/04/18 23:10:26
2256 [readconf.c readconf.h ssh-keysign.c ssh.c]
2257 perform strict ownership and modes checks for ~/.ssh/config files,
2258 as these can be used to execute arbitrary programs; ok markus@
2259 NB. ssh will now exit when it detects a config with poor permissions
Damien Millerc970cb92004-04-20 20:12:53 +10002260 - djm@cvs.openbsd.org 2004/04/19 13:02:40
2261 [ssh.1 ssh_config.5]
2262 document strict permission checks on ~/.ssh/config; prompted by,
2263 with & ok jmc@
Damien Miller1a812582004-04-20 20:13:32 +10002264 - jmc@cvs.openbsd.org 2004/04/19 16:12:14
2265 [ssh_config.5]
2266 kill whitespace at eol;
Damien Miller914420f2004-04-20 20:14:07 +10002267 - djm@cvs.openbsd.org 2004/04/19 21:51:49
2268 [ssh.c]
2269 fix idiot typo that i introduced in my last commit;
2270 spotted by cschneid AT cschneid.com
Damien Miller50bec892004-04-20 20:20:40 +10002271 - (djm) [openbsd-compat/sys-queue.h] Sync with OpenBSD, needed for
2272 above change
Damien Miller5561e0b2004-04-20 20:28:55 +10002273 - (djm) [configure.ac] Check whether libroken is required when building
2274 with Heimdal
Damien Miller0b51a522004-04-20 20:07:19 +10002275
Darren Tucker9929d1f2004-04-19 22:01:37 +1000227620040419
2277 - (dtucker) OpenBSD CVS Sync
2278 - dtucker@cvs.openbsd.org 2004/02/29 22:04:45
2279 [regress/login-timeout.sh]
2280 Use sudo when restarting daemon during test. ok markus@
Darren Tucker0a74ae72004-04-19 22:04:21 +10002281 - dtucker@cvs.openbsd.org 2004/03/08 10:17:12
2282 [regress/login-timeout.sh]
2283 Missing OBJ, from tim@. ok markus@ (Already fixed, ID sync only)
Darren Tuckerdca6a4d2004-04-19 22:10:52 +10002284 - djm@cvs.openbsd.org 2004/03/30 12:41:56
2285 [sftp-client.c]
2286 sync comment with reality
Darren Tuckerd04121f2004-04-19 22:16:53 +10002287 - djm@cvs.openbsd.org 2004/03/31 21:58:47
2288 [canohost.c]
2289 don't skip ip options check when UseDNS=no; ok markus@ (ID sync only)
Darren Tuckerbddc2b02004-04-19 23:50:16 +10002290 - markus@cvs.openbsd.org 2004/04/01 12:19:57
2291 [scp.c]
2292 limit trust between local and remote rcp/scp process,
2293 noticed by lcamtuf; ok deraadt@, djm@
Darren Tucker9929d1f2004-04-19 22:01:37 +10002294
Darren Tucker2a9bf4b2004-04-18 11:00:26 +1000229520040418
2296 - (dtucker) [auth-pam.c] Log username and source host for failed PAM
2297 authentication attempts. With & ok djm@
Damien Miller2eb42362004-04-18 21:15:43 +10002298 - (djm) [openbsd-compat/bsd-cygwin_util.c] Recent versions of Cygwin allow
2299 change of user context without a password, so relax auth method
2300 restrictions; from vinschen AT redhat.com; ok dtucker@
Darren Tucker2a9bf4b2004-04-18 11:00:26 +10002301
Darren Tuckerc99a19b2004-04-16 17:58:28 +1000230220040416
2303 - (dtucker) [regress/sftp-cmds.sh] Skip quoting test on Cygwin, since
2304 FAT/NTFS does not permit quotes in filenames. From vinschen at redhat.com
Damien Miller9c870f92004-04-16 22:47:55 +10002305 - (djm) [auth-krb5.c auth.h session.c] Explicitly refer to Kerberos ccache
2306 file using FILE: method, fixes problems on Mac OSX.
2307 Patch from simon@sxw.org.uk; ok dtucker@
Tim Ricefe6d5aa2004-04-16 20:03:07 -07002308 - (tim) [configure.ac] Set SETEUID_BREAKS_SETUID, BROKEN_SETREUID and
2309 BROKEN_SETREGID for SCO OpenServer 3
Darren Tuckerc99a19b2004-04-16 17:58:28 +10002310
Darren Tucker96cc26b2004-04-14 13:04:35 +1000231120040412
2312 - (dtucker) [sshd_config.5] Add PermitRootLogin without-password warning
2313 from bug #701 (text from jfh at cise.ufl.edu).
Darren Tucker3b908f62004-04-14 15:26:39 +10002314 - (dtucker) [acconfig.h configure.ac defines.h] Bug #673: check for 4-arg
2315 skeychallenge(), eg on NetBSD. ok mouring@
Darren Tucker06a8cfe2004-04-14 17:24:30 +10002316 - (dtucker) [auth-skey.c defines.h monitor.c] Make skeychallenge explicitly
2317 4-arg, with compatibility for 3-arg versions. From djm@, ok me.
Damien Miller0ac45002004-04-14 20:14:26 +10002318 - (djm) [configure.ac] Fix detection of libwrap on OpenBSD; ok dtucker@
Darren Tucker96cc26b2004-04-14 13:04:35 +10002319
Darren Tucker4d2f3612004-04-08 10:57:05 +1000232020040408
2321 - (dtucker) [loginrec.c] Use UT_LINESIZE if available, prevents truncating
2322 pty name on Linux 2.6.x systems. Patch from jpe at eisenmenger.org.
Ben Lindstrom1b9f2a62004-04-08 05:11:03 +00002323 - (bal) [monitor.c monitor_wrap.c] Second try. Put the zlib.h headers
2324 back and #undef TARGET_OS_MAC instead. (Bug report pending with Apple)
Darren Tucker11f18292004-04-08 16:16:06 +10002325 - (dtucker) [defines.h loginrec.c] Define UT_LINESIZE if not defined and
2326 simplify loginrec.c. ok tim@
Ben Lindstrom036768e2004-04-08 16:12:30 +00002327 - (bal) [monitor.c monitor_wrap.c] Ok.. Last time. Promise. Tim suggested
2328 limiting scope and dtucker@ agreed.
Darren Tucker4d2f3612004-04-08 10:57:05 +10002329
Darren Tuckerac7c9982004-04-07 08:04:09 +1000233020040407
2331 - (dtucker) [session.c] Flush stdout after displaying loginmsg. From
2332 f_mohr at yahoo.de.
Ben Lindstroma8104b52004-04-07 04:16:11 +00002333 - (bal) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Check to see
2334 if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X)
2335 are starting to restrict it as internal since it is not needed by
2336 developers any more. (Patch based on Apple tree)
2337 - (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since
2338 krb5 on MacOS/X conflicts. There may be a better solution, but this will
2339 work for now.
Darren Tuckerac7c9982004-04-07 08:04:09 +10002340
Darren Tucker8db9a0f2004-04-06 21:31:12 +1000234120040406
2342 - (dtucker) [acconfig.h configure.ac defines.h] Bug #820: don't use
2343 updwtmpx() on IRIX since it seems to clobber utmp. ok djm@
Darren Tucker4398cf52004-04-06 21:39:02 +10002344 - (dtucker) [configure.ac] Bug #816, #748 (again): Attempt to detect
2345 broken getaddrinfo and friends on HP-UX. ok djm@
Darren Tucker8db9a0f2004-04-06 21:31:12 +10002346
Darren Tucker809031f2004-03-30 14:03:45 +1000234720040330
2348 - (dtucker) [configure.ac] Bug #811: Use "!" for LOCKED_PASSWD_PREFIX on
2349 Linuxes, since that's what many use. ok djm@
Darren Tucker17addf02004-03-30 20:57:57 +10002350 - (dtucker) [auth-pam.c] rename the_authctxt to sshpam_authctxt in auth-pam.c
2351 to reduce potential confusion with the one in sshd.c. ok djm@
Damien Millerccea0202004-03-31 15:17:54 +10002352 - (djm) Bug #825: Fix ip_options_check() for mapped IPv4/IPv6 connection;
2353 with & ok dtucker@
Darren Tucker809031f2004-03-30 14:03:45 +10002354
Darren Tuckerb3850592004-03-27 16:44:21 +1100235520040327
2356 - (dtucker) [session.c] Bug #817: Clear loginmsg after fork to prevent
2357 duplicate login messages for mutli-session logins. ok djm@
2358
Damien Miller3df755e2004-03-22 09:34:26 +1100235920040322
Damien Millerbfba3542004-03-22 09:29:57 +11002360 - (djm) [sshd.c] Drop supplemental groups if started as root
Damien Miller3df755e2004-03-22 09:34:26 +11002361 - (djm) OpenBSD CVS Sync
2362 - markus@cvs.openbsd.org 2004/03/09 22:11:05
2363 [ssh.c]
2364 increase x11 cookie lifetime to 20 minutes; ok djm
Damien Miller50955102004-03-22 09:34:58 +11002365 - markus@cvs.openbsd.org 2004/03/10 09:45:06
2366 [ssh.c]
2367 trim usage to match ssh(1) and look more like unix. ok djm@
Damien Millerb4087862004-03-22 09:35:21 +11002368 - markus@cvs.openbsd.org 2004/03/11 08:36:26
2369 [sshd.c]
2370 trim usage; ok deraadt
Damien Miller0c889cd2004-03-22 09:36:00 +11002371 - markus@cvs.openbsd.org 2004/03/11 10:21:17
2372 [ssh.c sshd.c]
2373 ssh, sshd: sync version output, ok djm
Damien Milleraed7cee2004-03-22 09:39:09 +11002374 - markus@cvs.openbsd.org 2004/03/20 10:40:59
2375 [version.h]
2376 3.8.1
Damien Miller154e8b82004-03-22 09:40:01 +11002377 - (djm) Crank RPM spec versions
Damien Millerbfba3542004-03-22 09:29:57 +11002378
Damien Miller4fefe242004-03-11 14:20:10 +1100237920040311
2380 - (djm) [configure.ac] Add standard license to configure.ac; ok ben, dtucker
2381
Darren Tucker7c991ab2004-03-10 21:06:32 +1100238220040310
2383 - (dtucker) [openbsd-compat/fake-rfc2553.h] Bug #812: #undef getaddrinfo
2384 before redefining it, silences warnings on Tru64.
2385
Darren Tucker112aaac2004-03-08 22:13:12 +1100238620040308
2387 - (dtucker) [sshd.c] Back out rev 1.270 as it caused problems on some
Darren Tuckerdbf7a742004-03-08 23:04:06 +11002388 platforms (eg SCO, HP-UX) with logging in the wrong TZ. ok djm@
2389 - (dtucker) [configure.ac sshd.c openbsd-compat/bsd-misc.h
2390 openbsd-compat/setenv.c] Unset KRB5CCNAME on AIX to prevent it from being
2391 inherited by the child. ok djm@
2392 - (dtucker) [auth-pam.c auth-pam.h auth1.c auth2.c monitor.c monitor_wrap.c
2393 monitor_wrap.h] Bug #808: Ensure force_pwchange is correctly initialized
Damien Miller57aae982004-03-08 23:11:25 +11002394 even if keyboard-interactive is not used by the client. Prevents
2395 segfaults in some cases where the user's password is expired (note this
2396 is not considered a security exposure). ok djm@
2397 - (djm) OpenBSD CVS Sync
2398 - markus@cvs.openbsd.org 2004/03/03 06:47:52
2399 [sshd.c]
2400 change proctiltle after accept(2); ok henning, deraadt, djm
Damien Miller9ba30692004-03-08 23:12:02 +11002401 - djm@cvs.openbsd.org 2004/03/03 09:30:42
2402 [sftp-client.c]
2403 Don't print duplicate messages when progressmeter is off
2404 Spotted by job317 AT mailvault.com; ok markus@
Damien Millerc0f27d82004-03-08 23:12:19 +11002405 - djm@cvs.openbsd.org 2004/03/03 09:31:20
2406 [sftp.c]
2407 Fix initialisation of progress meter; ok markus@
Damien Millerbd394c32004-03-08 23:12:36 +11002408 - markus@cvs.openbsd.org 2004/03/05 10:53:58
2409 [readconf.c readconf.h scp.1 sftp.1 ssh.1 ssh_config.5 sshconnect2.c]
2410 add IdentitiesOnly; ok djm@, pb@
Damien Miller3b513012004-03-08 23:13:00 +11002411 - djm@cvs.openbsd.org 2004/03/08 09:38:05
2412 [ssh-keyscan.c]
2413 explicitly initialise remote_major and remote_minor.
2414 from cjwatson AT debian.org; ok markus@
Damien Miller8448e662004-03-08 23:13:15 +11002415 - dtucker@cvs.openbsd.org 2004/03/08 10:18:57
2416 [sshd_config.5]
2417 Document KerberosGetAFSToken; ok markus@
Tim Riceaa538322004-03-08 12:12:18 -08002418 - (tim) [regress/README.regress] Document ssh-rand-helper issue. ok bal
Darren Tucker112aaac2004-03-08 22:13:12 +11002419
Tim Ricef45eff22004-03-07 10:40:01 -0800242020040307
2421 - (tim) [regress/login-timeout.sh] fix building outside of source tree.
2422
Darren Tucker4b385d42004-03-04 19:54:10 +1100242320040304
2424 - (dtucker) [auth-pam.c] Don't try to export PAM when compiled with
2425 -DUSE_POSIX_THREADS. From antoine.verheijen at ualbert ca. ok djm@
Darren Tuckerb9b60212004-03-04 20:03:54 +11002426 - (dtucker) [auth-pam.c] Reset signal status when starting pam auth thread,
2427 prevent hanging during PAM keyboard-interactive authentications. ok djm@
Darren Tucker91bf45c2004-03-04 22:59:36 +11002428 - (dtucker) [auth-passwd.c auth-sia.c auth-sia.h defines.h
2429 openbsd-compat/xcrypt.c] Bug #802: Fix build error on Tru64 when
2430 configured --with-osfsia. ok djm@
Darren Tucker4b385d42004-03-04 19:54:10 +11002431
Darren Tucker6e26bf12004-03-04 19:47:29 +1100243220040303
Damien Miller6c4914a2004-03-03 11:08:59 +11002433 - (djm) [configure.ac ssh-agent.c] Use prctl to prevent ptrace on ssh-agent
2434 ok dtucker
2435
Darren Tuckerd5920482004-02-29 20:11:30 +1100243620040229
Tim Ricead4a1882004-02-29 15:53:37 -08002437 - (tim) [configure.ac] Put back bits mistakenly removed from Rev 1.188
2438
243920040229
Darren Tuckerd5920482004-02-29 20:11:30 +11002440 - (dtucker) OpenBSD CVS Sync
2441 - djm@cvs.openbsd.org 2004/02/25 00:22:45
2442 [sshd.c]
2443 typo in comment
Darren Tuckerfc113c92004-02-29 20:12:33 +11002444 - dtucker@cvs.openbsd.org 2004/02/27 22:42:47
2445 [dh.c]
2446 Prevent sshd from sending DH groups with a primitive generator of zero or
2447 one, even if they are listed in /etc/moduli. ok markus@
Darren Tuckerc56c7ef2004-02-29 20:13:34 +11002448 - dtucker@cvs.openbsd.org 2004/02/27 22:44:56
2449 [dh.c]
2450 Make /etc/moduli line buffer big enough for 8kbit primes, in case anyone
2451 ever uses one. ok markus@
Darren Tuckereffc84c2004-02-29 20:15:08 +11002452 - dtucker@cvs.openbsd.org 2004/02/27 22:49:27
2453 [dh.c]
2454 Reset bit counter at the right time, fixes debug output in the case where
2455 the DH group is rejected. ok markus@
Darren Tucker017fd612004-02-29 20:30:17 +11002456 - dtucker@cvs.openbsd.org 2004/02/17 08:23:20
2457 [regress/Makefile regress/login-timeout.sh]
2458 Add regression test for LoginGraceTime; ok markus@
Darren Tucker03c907a2004-02-29 20:31:08 +11002459 - markus@cvs.openbsd.org 2004/02/24 16:56:30
2460 [regress/test-exec.sh]
2461 allow arguments in ${TEST_SSH_XXX}
Darren Tucker437a5f02004-02-29 20:33:51 +11002462 - markus@cvs.openbsd.org 2004/02/24 17:06:52
2463 [regress/ssh-com-client.sh regress/ssh-com-keygen.sh
2464 regress/ssh-com-sftp.sh regress/ssh-com.sh]
2465 test against recent ssh.com releases
Darren Tucker68b184c2004-02-29 20:37:06 +11002466 - dtucker@cvs.openbsd.org 2004/02/28 12:16:57
2467 [regress/dynamic-forward.sh]
2468 Make dynamic-forward understand nc's new output. ok markus@
Darren Tucker9468ba32004-02-29 20:38:26 +11002469 - dtucker@cvs.openbsd.org 2004/02/28 13:44:45
2470 [regress/try-ciphers.sh]
2471 Test acss too; ok markus@
Darren Tuckerb099d852004-02-29 21:30:05 +11002472 - (dtucker) [regress/try-ciphers.sh] Skip acss if not compiled in (eg if we
2473 built with openssl < 0.9.7)
Darren Tuckerd5920482004-02-29 20:11:30 +11002474
Ben Lindstrom78ffe262004-02-27 03:01:19 +0000247520040226
2476 - (bal) KNF our sshlogin.c even if the code looks nothing like upstream
2477 code due to diversity issues.
2478
Damien Millerd8913952004-02-25 10:56:31 +1100247920040225
2480 - (djm) Trim ChangeLog
Damien Miller124055d2004-02-25 10:57:45 +11002481 - (djm) Don't specify path to PAM modules in Redhat sshd.pam; from Fedora
Damien Millerd8913952004-02-25 10:56:31 +11002482
Darren Tucker37bd3662004-02-24 09:19:15 +1100248320040224
2484 - (dtucker) OpenBSD CVS Sync
2485 - markus@cvs.openbsd.org 2004/02/19 21:15:04
2486 [sftp-server.c]
2487 switch to new license.template
Darren Tuckerefa37062004-02-24 09:20:29 +11002488 - markus@cvs.openbsd.org 2004/02/23 12:02:33
2489 [sshd.c]
2490 backout revision 1.279; set listen socket to non-block; ok henning.
Darren Tucker0acc92a2004-02-24 09:21:41 +11002491 - markus@cvs.openbsd.org 2004/02/23 15:12:46
2492 [bufaux.c]
2493 encode 0 correctly in buffer_put_bignum2; noted by Mikulas Patocka
2494 and drop support for negative BNs; ok otto@
Darren Tuckera6ea4202004-02-24 09:24:01 +11002495 - markus@cvs.openbsd.org 2004/02/23 15:16:46
2496 [version.h]
2497 enter 3.8
Darren Tucker0d27ed12004-02-24 10:37:33 +11002498 - (dtucker) [configure.ac gss-serv-krb5.c ssh-gss.h] Define GSSAPI when found
2499 with krb5-config, hunt down gssapi.h and friends. Based partially on patch
Darren Tucker8a4e4f82004-02-24 10:58:10 +11002500 from deengert at anl.gov. ok djm@
Damien Millera811d9a2004-02-24 13:05:11 +11002501 - (djm) [groupaccess.c uidswap.c] Bug #787: Size group arrays at runtime
2502 using sysconf() if available Based on patches from
2503 holger AT van-lengerich.de and openssh_bugzilla AT hockin.org
Darren Tucker2359aa92004-02-24 13:17:30 +11002504 - (dtucker) [uidswap.c] Minor KNF. ok djm@
Tim Rice18959002004-02-23 20:51:06 -08002505 - (tim) [openbsd-compat/getrrsetbyname.c] Make gcc 2.7.2.3 happy. ok djm@
Damien Miller9fc475f2004-02-24 16:00:02 +11002506 - (djm) Crank RPM spec versions
Darren Tucker5ce131f2004-02-24 16:13:24 +11002507 - (dtucker) [README] Add pointer to release notes. ok djm@
Darren Tucker149543e2004-02-24 16:14:41 +11002508 - (dtucker) {README.platform] Add platform-specific notes.
Tim Ricee8c898a2004-02-23 21:47:04 -08002509 - (tim) [configure.ac] SCO3 needs -lcrypt_i for -lprot
Damien Miller33424702004-02-24 17:13:28 +11002510 - (djm) Release 3.8p1
Darren Tucker37bd3662004-02-24 09:19:15 +11002511
Darren Tucker1825f262004-02-24 00:01:27 +1100251220040223
2513 - (dtucker) [session.c] Bug #789: Only make setcred call for !privsep in the
2514 non-interactive path. ok djm@
2515
Darren Tucker15ee7482004-02-22 09:43:15 +1100251620040222
2517 - (dtucker) [auth-shadow.c auth.c auth.h] Move shadow account expiry test
2518 to auth-shadow.c, no functional change. ok djm@
Darren Tuckere828d0c2004-02-22 11:55:07 +11002519 - (dtucker) [auth-shadow.c auth.h] Provide warnings of impending account or
2520 password expiry. ok djm@
2521 - (dtucker) [auth-passwd.c] Only check password expiry once. Prevents
2522 multiple warnings if a wrong password is entered.
2523 - (dtucker) [configure.ac] Apply krb5-config --libs fix to non-gssapi path
2524 too.
Darren Tucker15ee7482004-02-22 09:43:15 +11002525
Damien Miller2e45cb02004-02-20 20:37:44 +1100252620040220
2527 - (djm) [openbsd-compat/setproctitle.c] fix comments; from grange@
2528
Darren Tuckera22897d2004-02-18 11:21:12 +1100252920040218
2530 - (dtucker) [configure.ac] Handle case where krb5-config --libs returns a
2531 path with a "-" in it. From Sergio.Gelato at astro.su.se.
Damien Millerd7d46bb2004-02-18 14:11:13 +11002532 - (djm) OpenBSD CVS Sync
2533 - djm@cvs.openbsd.org 2004/02/17 07:17:29
2534 [sftp-glob.c sftp.c]
2535 Remove useless headers; ok deraadt@
Damien Miller20e1fab2004-02-18 14:30:55 +11002536 - djm@cvs.openbsd.org 2004/02/17 11:03:08
2537 [sftp.c]
2538 sftp.c and sftp-int.c, together at last; ok markus@
Damien Miller05a75b62004-02-18 14:31:23 +11002539 - jmc@cvs.openbsd.org 2004/02/17 19:35:21
2540 [sshd_config.5]
2541 remove cruft left over from RhostsAuthentication removal;
2542 ok markus@
Damien Miller82c78b32004-02-18 15:42:31 +11002543 - (djm) [log.c] Correct use of HAVE_OPENLOG_R
Damien Miller051b0ac2004-02-18 22:59:43 +11002544 - (djm) [log.c] Tighten openlog_r tests
Darren Tuckera22897d2004-02-18 11:21:12 +11002545
Damien Miller98225c22004-02-17 16:49:41 +1100254620040217
2547 - (djm) Simplify the license on code I have written. No code changes.
Damien Miller4e60ed72004-02-17 17:07:59 +11002548 - (djm) OpenBSD CVS Sync
2549 - djm@cvs.openbsd.org 2004/02/17 05:39:51
2550 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c]
2551 [sftp-int.h sftp.c]
2552 switch to license.template for code written by me (belated, I know...)
Damien Miller34255b92004-02-17 20:33:52 +11002553 - (djm) Bug #698: Specify FILE: for KRB5CCNAME; patch from
2554 stadal@suse.cz and simon@sxw.org.uk
Darren Tuckerba53b832004-02-17 20:46:59 +11002555 - (dtucker) [auth-pam.c] Tidy up PAM debugging. ok djm@
Darren Tucker5cf8ef72004-02-17 23:20:07 +11002556 - (dtucker) [auth-pam.c] Store output from pam_session and pam_setcred for
2557 display after login. Should fix problems like pam_motd not displaying
2558 anything, noticed by cjwatson at debian.org. ok djm@
Damien Miller98225c22004-02-17 16:49:41 +11002559
Tim Rice9ad7e0e2004-02-12 07:17:10 -0800256020040212
2561 - (tim) [Makefile.in regress/sftp-badcmds.sh regress/test-exec.sh]
2562 Portablity fixes. Data sftp transfers needs to be world readable. Some
2563 older shells hang on while loops when doing sh -n some_script. OK dtucker@
Tim Rice3d5352e2004-02-12 09:27:21 -08002564 - (tim) [configure.ac] Make sure -lcrypto is before -lsocket for sco3.
2565 ok mouring@
Tim Rice9ad7e0e2004-02-12 07:17:10 -08002566
Darren Tuckercee6d4c2004-02-11 18:48:52 +1100256720040211
2568 - (dtucker) [auth-passwd.c auth-shadow.c] Only enable shadow expiry check
2569 if HAS_SHADOW_EXPIRY is set.
Tim Rice43fa5572004-02-11 14:46:40 -08002570 - (tim) [configure.ac] Fix comment to match code changes in ver 1.117
Darren Tuckercee6d4c2004-02-11 18:48:52 +11002571
Darren Tuckere3dba822004-02-10 12:50:19 +1100257220040210
2573 - (dtucker) [auth-passwd.c auth.h openbsd-compat/port-aix.c
Darren Tucker9df3def2004-02-10 13:01:14 +11002574 openbsd-compat/port-aix.h] Bug #14: Use do_pwchange to support AIX's
2575 native password expiry.
2576 - (dtucker) [LICENCE Makefile.in auth-passwd.c auth-shadow.c auth.c auth.h
2577 defines.h] Bug #14: Use do_pwchange to support password expiry and force
2578 change for platforms using /etc/shadow. ok djm@
Darren Tuckerffae5322004-02-10 13:05:40 +11002579 - (dtucker) [openbsd-compat/fake-rfc2553.h] Bug #563: Prepend ssh_ to compat
2580 functions to avoid conflicts with Heimdal's libroken. ok djm@
Darren Tucker1921ed92004-02-10 13:23:28 +11002581 - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #14: Use do_pwchange to
2582 change expired PAM passwords for SSHv1 connections without privsep.
2583 pam_chauthtok is still used when privsep is disabled. ok djm@
Darren Tuckercfea2062004-02-10 15:27:34 +11002584 - (dtucker) [openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Move
2585 include from port-aix.h to port-aix.c and remove unnecessary function
2586 definition. Fixes build errors on AIX.
Darren Tuckerc28b88a2004-02-10 16:49:35 +11002587 - (dtucker) [configure.ac loginrec.c] Bug #464: Use updwtmpx on platforms
2588 that support it. from & ok mouring@
Darren Tucker13a707b2004-02-10 17:15:05 +11002589 - (dtucker) [configure.ac] Bug #345: Do not disable utmp on HP-UX 10.x.
Darren Tuckercee6d4c2004-02-11 18:48:52 +11002590 ok djm@
Darren Tuckere3dba822004-02-10 12:50:19 +11002591
Darren Tuckerfc57f712004-02-07 10:41:48 +1100259220040207
2593 - (dtucker) OpenBSD CVS Sync
2594 - dtucker@cvs.openbsd.org 2004/02/06 23:41:13
2595 [cipher-ctr.c]
2596 Use EVP_CIPHER_CTX_key_length for key length. ok markus@
2597 (This will fix builds with OpenSSL 0.9.5)
Darren Tucker693f8a82004-02-07 12:29:39 +11002598 - (dtucker) [cipher.c] enable AES counter modes with OpenSSL 0.9.5.
2599 ok djm@, markus@
Darren Tuckerfc57f712004-02-07 10:41:48 +11002600
Darren Tucker99762462004-02-06 15:22:43 +1100260120040206
2602 - (dtucker) [acss.c acss.h] Fix $Id tags.
Darren Tucker6977fe72004-02-06 15:26:10 +11002603 - (dtucker) [cipher-acss.c cipher.c] Enable acss only if building with
2604 OpenSSL >= 0.9.7. ok djm@
Darren Tuckeref3a4a22004-02-06 15:30:50 +11002605 - (dtucker) [session.c] Bug #789: Do not call do_pam_setcred as a non-root
2606 user, since some modules might fail due to lack of privilege. ok djm@
Darren Tuckerf58fb7e2004-02-06 15:59:06 +11002607 - (dtucker) [configure.ac] Bug #748: Always define BROKEN_GETADDRINFO
2608 for HP-UX 11.11. If there are known-good configs where this is not
2609 required, please report them. ok djm@
Darren Tuckerecc9d462004-02-06 16:04:08 +11002610 - (dtucker) [sshd.c] Bug #757: Clear child's environment to prevent
2611 accidentally inheriting from root's environment. ok djm@
Darren Tucker819d4522004-02-06 16:18:47 +11002612 - (dtucker) [openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Bug #796:
2613 Restore previous authdb setting after auth calls. Fixes problems with
2614 setpcred failing on accounts that use AFS or NIS password registries.
Darren Tucker07459352004-02-06 21:29:41 +11002615 - (dtucker) [configure.ac includes.h] Include <sys/stream.h> if present,
2616 required on Solaris 2.5.1 for queue_t, which is used by <sys/ptms.h>.
Darren Tucker23bc8d02004-02-06 16:24:31 +11002617 - (dtucker) OpenBSD CVS Sync
2618 - markus@cvs.openbsd.org 2004/01/30 09:48:57
2619 [auth-passwd.c auth.h pathnames.h session.c]
2620 support for password change; ok dtucker@
2621 (set password-dead=1w in login.conf to use this).
2622 In -Portable, this is currently only platforms using bsdauth.
Darren Tuckera8be9e22004-02-06 16:40:27 +11002623 - dtucker@cvs.openbsd.org 2004/02/05 05:37:17
2624 [monitor.c sshd.c]
2625 Pass SIGALRM through to privsep child if LoginGraceTime expires. ok markus@
Darren Tucker7f73a492004-02-06 16:41:37 +11002626 - markus@cvs.openbsd.org 2004/02/05 15:33:33
2627 [progressmeter.c]
2628 fix ETA for > 4GB; bugzilla #791; ok henning@ deraadt@
Darren Tucker99762462004-02-06 15:22:43 +11002629
Darren Tucker22991ba2004-01-30 12:58:51 +1100263020040129
2631 - (dtucker) OpenBSD CVS Sync regress/
2632 - dtucker@cvs.openbsd.org 2003/10/11 11:49:49
2633 [Makefile banner.sh]
2634 Test missing banner file, suppression of banner with ssh -q, check return
2635 code from ssh. ok markus@
Darren Tucker633f3e02004-01-30 13:00:29 +11002636 - jmc@cvs.openbsd.org 2003/11/07 10:16:44
2637 [ssh-com.sh]
2638 adress -> address, and a few more; all from Jonathon Gray;
Darren Tucker46662bf2004-01-30 13:02:55 +11002639 - djm@cvs.openbsd.org 2004/01/13 09:49:06
2640 [sftp-batch.sh]
Darren Tuckerdcc736b2004-01-30 14:20:59 +11002641 - (dtucker) [configure.ac] Add --without-zlib-version-check. Feedback from
2642 tim@, ok several
Darren Tucker2df33432004-01-30 14:34:21 +11002643 - (dtucker) [configure.ac openbsd-compat/bsd-cray.c openbsd-compat/bsd-cray.h]
2644 Bug #775: Cray fixes from wendy at cray.com
Darren Tucker22991ba2004-01-30 12:58:51 +11002645
Darren Tucker4f9f6792004-01-28 12:26:14 +1100264620040128
2647 - (dtucker) [regress/README.regress] Add tcpwrappers issue, noted by tim@
Darren Tucker77970692004-01-28 15:44:04 +11002648 - (dtucker) [moduli] Import new moduli file from OpenBSD.
Darren Tucker4f9f6792004-01-28 12:26:14 +11002649
Damien Miller4f0fe682004-01-27 21:19:21 +1100265020040127
2651 - (djm) OpenBSD CVS Sync
2652 - hshoexer@cvs.openbsd.org 2004/01/23 17:06:03
2653 [cipher.c]
2654 enable acss for ssh
2655 ok deraadt@ markus@
Damien Millerb21be842004-01-27 21:20:11 +11002656 - mouring@cvs.openbsd.org 2004/01/23 17:57:48
2657 [sftp-int.c]
2658 Fix issue pointed out with ls not handling large directories
2659 with embeded paths correctly. OK damien@
Damien Millerb2d1c2b2004-01-27 21:20:59 +11002660 - hshoexer@cvs.openbsd.org 2004/01/23 19:26:33
2661 [cipher.c]
2662 rename acss@opebsd.org to acss@openssh.org
2663 ok deraadt@
Damien Millerf6723f02004-01-27 21:21:27 +11002664 - djm@cvs.openbsd.org 2004/01/25 03:49:09
2665 [sshconnect.c]
2666 reset nonblocking flag after ConnectTimeout > 0 connect; (bugzilla #785)
2667 from jclonguet AT free.fr; ok millert@
Damien Millerec692032004-01-27 21:22:00 +11002668 - djm@cvs.openbsd.org 2004/01/27 10:08:10
2669 [sftp.c]
2670 reorder parsing so user:skey@host:file works (bugzilla #777)
2671 patch from admorten AT umich.edu; ok markus@
Damien Miller4f0fe682004-01-27 21:19:21 +11002672 - (djm) [acss.c acss.h cipher-acss.c] Portable support for ACSS
2673 if libcrypto lacks it
2674
Tim Rice3084a612004-01-26 09:37:09 -0800267520040126
2676 - (tim) Typo in regress/README.regress
Tim Riceeafd8e92004-01-26 14:10:10 -08002677 - (tim) [regress/test-exec.sh] RhostsAuthentication is deprecated.
Tim Riceba1c2b82004-01-26 16:02:17 -08002678 - (tim) [defines.h] Add defines for HFIXEDSZ and T_SIG
Tim Rice2597bfd2004-01-26 19:03:39 -08002679 - (tim) [configure.ac includes.h] add <sys/ptms.h> for grantpt() and friends.
Tim Rice01326eb2004-01-26 21:40:35 -08002680 - (tim) [defines.h openbsd-compat/getrrsetbyname.h] Move defines for HFIXEDSZ
2681 and T_SIG to getrrsetbyname.h
Tim Rice3084a612004-01-26 09:37:09 -08002682
Damien Miller68144112004-01-24 13:50:39 +1100268320040124
2684 - (djm) Typo in openbsd-compat/bsd-openpty.c; from wendyp AT cray.com
2685
Damien Millerd3526362004-01-23 14:16:26 +1100268620040123
2687 - (djm) Do pam_session processing for systems with HAVE_LOGIN_CAP; from
2688 ralf.hack AT pipex.net; ok dtucker@
Damien Miller84938142004-01-23 16:30:03 +11002689 - (djm) Bug #776: Update contrib/redhat/openssh.spec to dynamically detect
2690 Kerberos location (and thus work with Fedora Core 1);
2691 from jason AT devrandom.org
Darren Tucker2dcd2392004-01-23 17:13:33 +11002692 - (dtucker) [configure.ac] Bug #788: Test for zlib.h presence and for
2693 zlib >= 1.1.4. Partly from jbasney at ncsa.uiuc.edu. ok djm@
Darren Tucker63699582004-01-23 21:35:44 +11002694 - (dtucker) [contrib/cygwin/README] Document new ssh-host-config options.
2695 Patch from vinschen at redhat.com.
Darren Tucker3c78c5e2004-01-23 22:03:10 +11002696 - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]
2697 Change AFS symbol to USE_AFS to prevent namespace collisions, do not
2698 include kafs.h unless necessary. From deengert at anl.gov.
Tim Ricefcb62202004-01-23 18:35:16 -08002699 - (tim) [configure.ac] Remove hard coded -L/usr/local/lib and
2700 -I/usr/local/include. Users can do LDFLAGS="-L/usr/local/lib" \
2701 CPPFLAGS="-I/usr/local/include" ./configure if needed.
Damien Millerd3526362004-01-23 14:16:26 +11002702
Darren Tucker1d3ca582004-01-22 12:05:34 +1100270320040122
2704 - (dtucker) [configure.ac] Use krb5-config where available for Kerberos/
2705 GSSAPI detection, libs and includes. ok djm@
Darren Tucker7fe8b722004-01-22 12:48:26 +11002706 - (dtucker) [session.c] Enable AFS support in conjunction with KRB5 not
2707 just HEIMDAL.
Tim Ricec9001282004-01-22 16:10:03 -08002708 - (tim) [contrib/solaris/buildpkg.sh] Allow for the possibility of
2709 /usr/local being a symbolic link. Fixes problem reported by Henry Grebler.
Darren Tucker1d3ca582004-01-22 12:05:34 +11002710
Damien Miller44f75c12004-01-21 10:58:47 +1100271120040121
2712 - (djm) OpenBSD CVS Sync
2713 - djm@cvs.openbsd.org 2004/01/13 09:25:05
2714 [sftp-int.c sftp.1 sftp.c]
2715 Tidy sftp batchmode handling, eliminate junk to stderr (bugzilla #754) and
2716 enable use of "-b -" to accept batchfile from stdin; ok markus@
Damien Miller86a39682004-01-21 11:00:04 +11002717 - jmc@cvs.openbsd.org 2004/01/13 12:17:33
2718 [sftp.1]
2719 remove unnecessary Ic's;
2720 kill whitespace at EOL;
2721 ok djm@
Damien Miller8f341f82004-01-21 11:00:46 +11002722 - markus@cvs.openbsd.org 2004/01/13 19:23:15
2723 [compress.c session.c]
2724 -Wall; ok henning
Damien Millerf84fed62004-01-21 11:01:23 +11002725 - markus@cvs.openbsd.org 2004/01/13 19:45:15
2726 [compress.c]
2727 cast for portability; millert@
Damien Millera04ad492004-01-21 11:02:09 +11002728 - markus@cvs.openbsd.org 2004/01/19 09:24:21
2729 [channels.c]
2730 fake consumption for half closed channels since the peer is waiting for
2731 window adjust messages; bugzilla #790 Matthew Dillon; test + ok dtucker@
2732 reproduce with sh -c 'ulimit -f 10; ssh host -n od /bsd | cat > foo'
Damien Millerfb1310e2004-01-21 11:02:50 +11002733 - markus@cvs.openbsd.org 2004/01/19 21:25:15
2734 [auth2-hostbased.c auth2-pubkey.c serverloop.c ssh-keysign.c sshconnect2.c]
2735 fix mem leaks; some fixes from Pete Flugstad; tested dtucker@
Damien Millere4f5a822004-01-21 14:11:05 +11002736 - djm@cvs.openbsd.org 2004/01/21 03:07:59
2737 [sftp.c]
2738 initialise infile in main, rather than statically - from portable
Damien Millerf4da3bb2004-01-21 17:07:16 +11002739 - deraadt@cvs.openbsd.org 2004/01/11 21:55:06
2740 [sshpty.c]
2741 for pty opening, only use the openpty() path. the other stuff only needs
2742 to be in openssh-p; markus ok
2743 - (djm) [openbsd-compat/bsd-openpty.c] Rework old sshpty.c code into an
2744 openpty() replacement
Damien Miller44f75c12004-01-21 10:58:47 +11002745
Darren Tucker749bc952004-01-14 22:14:04 +1100274620040114
2747 - (dtucker) [auth-pam.c] Have monitor die if PAM authentication thread exits
2748 unexpectedly. with & ok djm@
Darren Tucker7ae09622004-01-14 23:07:56 +11002749 - (dtucker) [auth-pam.c] Reset signal handler in pthread_cancel too, add
2750 test for case where cleanup has already run.
Darren Tuckera8df9242004-01-15 00:15:07 +11002751 - (dtucker) [auth-pam.c] Add minor debugging.
Darren Tucker749bc952004-01-14 22:14:04 +11002752
Darren Tucker1b27c8f2004-01-13 22:35:58 +1100275320040113
2754 - (dtucker) [auth-pam.c] Relocate struct pam_ctxt and prototypes. No
2755 functional changes.
2756
Darren Tucker0234e862004-01-08 23:32:04 +1100275720040108
2758 - (dtucker) [auth-pam.c defines.h] Bug #783: move __unused to defines.h and
2759 only define if not already. From des at freebsd.org.
Darren Tuckerfd0894a2004-01-09 00:19:25 +11002760 - (dtucker) [configure.ac] Remove extra (typo) comma.
Darren Tucker0234e862004-01-08 23:32:04 +11002761
Darren Tuckere9183182004-01-05 08:16:34 +1100276220040105
2763 - (dtucker) [contrib/ssh-copy-id] Bug #781: exit if ssh fails. Patch from
2764 cjwatson at debian.org.
Darren Tucker409cb322004-01-05 22:36:51 +11002765 - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]
2766 Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@
Darren Tuckere9183182004-01-05 08:16:34 +11002767
Damien Miller7a2ea782004-01-02 17:52:10 +1100276820040102
2769 - (djm) OSX/Darwin needs BIND_8_COMPAT to build getrrsetbyname. Report from
2770 jakob@
Damien Millerc8ec1662004-01-02 17:53:04 +11002771 - (djm) Remove useless DNS support configure summary message. from jakob@
Damien Miller0f47c532004-01-02 18:01:30 +11002772 - (djm) OSX/Darwin put the PAM headers in a different place, detect this.
2773 Report from jakob@
Damien Miller7a2ea782004-01-02 17:52:10 +11002774
Darren Tucker06930c72003-12-31 11:34:51 +1100277520031231
2776 - (dtucker) OpenBSD CVS Sync
2777 - djm@cvs.openbsd.org 2003/12/22 09:16:58
2778 [moduli.c ssh-keygen.1 ssh-keygen.c]
2779 tidy up moduli generation debugging, add -v (verbose/debug) option to
2780 ssh-keygen; ok markus@
Darren Tuckera32e19c2003-12-31 11:36:00 +11002781 - markus@cvs.openbsd.org 2003/12/22 20:29:55
2782 [cipher-3des1.c]
2783 EVP_CIPHER_CTX_cleanup() for the des contexts; pruiksma@freesurf.fr
Darren Tucker22ef5082003-12-31 11:37:34 +11002784 - jakob@cvs.openbsd.org 2003/12/23 16:12:10
2785 [servconf.c servconf.h session.c sshd_config]
2786 implement KerberosGetAFSToken server option. ok markus@, beck@
Darren Tucker0b3b9752003-12-31 11:38:32 +11002787 - millert@cvs.openbsd.org 2003/12/29 16:39:50
2788 [sshd_config]
2789 KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK
Darren Tuckerea287062003-12-31 11:43:24 +11002790 - dtucker@cvs.openbsd.org 2003/12/31 00:24:50
2791 [auth2-passwd.c]
2792 Ignore password change request during password auth (which we currently
2793 don't support) and discard proposed new password. corrections/ok markus@
Darren Tucker2a6b0292003-12-31 14:59:17 +11002794 - (dtucker) [configure.ac] Only test setresuid and setresgid if they exist.
Darren Tucker06930c72003-12-31 11:34:51 +11002795
Darren Tucker3715be32003-12-19 10:58:43 +1100279620031219
2797 - (dtucker) [defines.h] Bug #458: Define SIZE_T_MAX as UINT_MAX if we
2798 typedef size_t ourselves.
2799
Darren Tucker454da0b2003-12-18 12:52:19 +1100280020031218
2801 - (dtucker) [configure.ac] Don't use setre[ug]id on DG-UX, from Tom Orban.
Darren Tucker07705c72003-12-18 15:34:31 +11002802 - (dtucker) [auth-pam.c] Do PAM chauthtok during SSH2 keyboard-interactive
2803 authentication. Partially fixes bug #423. Feedback & ok djm@
Darren Tucker454da0b2003-12-18 12:52:19 +11002804
Damien Millerb5820f42003-12-17 16:27:32 +1100280520031217
2806 - (djm) OpenBSD CVS Sync
2807 - markus@cvs.openbsd.org 2003/12/09 15:28:43
2808 [serverloop.c]
2809 make ClientKeepAlive work for ssh -N, too (no login shell requested).
2810 1) send a bogus channel request if we find a channel
2811 2) send a bogus global request if we don't have a channel
2812 ok + test beck@
Damien Millerb9997192003-12-17 16:29:22 +11002813 - markus@cvs.openbsd.org 2003/12/09 17:29:04
2814 [sshd.c]
2815 fix -o and HUP; ok henning@
Damien Miller9836cf82003-12-17 16:30:06 +11002816 - markus@cvs.openbsd.org 2003/12/09 17:30:05
2817 [ssh.c]
2818 don't modify argv for ssh -o; similar to sshd.c 1.283
Damien Miller12c150e2003-12-17 16:31:10 +11002819 - markus@cvs.openbsd.org 2003/12/09 21:53:37
2820 [readconf.c readconf.h scp.1 servconf.c servconf.h sftp.1 ssh.1]
2821 [ssh_config.5 sshconnect.c sshd.c sshd_config.5]
2822 rename keepalive to tcpkeepalive; the old name causes too much
2823 confusion; ok djm, dtucker; with help from jmc@
Damien Millerd6965512003-12-17 16:31:53 +11002824 - dtucker@cvs.openbsd.org 2003/12/09 23:45:32
2825 [clientloop.c]
2826 Clear exit code when ssh -N is terminated with a SIGTERM. ok markus@
Damien Millerbaafb982003-12-17 16:32:23 +11002827 - markus@cvs.openbsd.org 2003/12/14 12:37:21
2828 [ssh_config.5]
2829 we don't support GSS KEX; from Simon Wilkinson
Damien Miller509b0102003-12-17 16:33:10 +11002830 - markus@cvs.openbsd.org 2003/12/16 15:49:51
2831 [clientloop.c clientloop.h readconf.c readconf.h scp.1 sftp.1 ssh.1]
2832 [ssh.c ssh_config.5]
2833 application layer keep alive (ServerAliveInterval ServerAliveCountMax)
2834 for ssh(1), similar to the sshd(8) option; ok beck@; with help from
2835 jmc and dtucker@
Damien Miller8975ddf2003-12-17 16:33:53 +11002836 - markus@cvs.openbsd.org 2003/12/16 15:51:54
2837 [dh.c]
2838 use <= instead of < in dh_estimate; ok provos/hshoexer;
2839 do not return < DH_GRP_MIN
Darren Tuckere937be32003-12-17 18:53:26 +11002840 - (dtucker) [acconfig.h configure.ac uidswap.c] Bug #645: Check for
2841 setres[ug]id() present but not implemented (eg some Linux/glibc
2842 combinations).
Ben Lindstrom563eb992003-12-18 00:34:06 +00002843 - (bal) [openbsd-compat/bsd-misc.c] unset 'signal' defined if we are
2844 using a real 'signal()' (Noticed by a NeXT Compile)
Damien Millerb5820f42003-12-17 16:27:32 +11002845
Darren Tucker4c568432003-12-09 19:01:51 +1100284620031209
2847 - (dtucker) OpenBSD CVS Sync
2848 - matthieu@cvs.openbsd.org 2003/11/25 23:10:08
2849 [ssh-add.1]
2850 ssh-add doesn't need to be a descendant of ssh-agent. Ok markus@, jmc@.
Darren Tucker37afa9d2003-12-09 19:05:42 +11002851 - djm@cvs.openbsd.org 2003/11/26 21:44:29
2852 [cipher-aes.c]
2853 fix #ifdef before #define; ok markus@
2854 (RCS ID sync only, Portable already had this)
Darren Tucker1fb04252003-12-09 19:07:13 +11002855 - markus@cvs.openbsd.org 2003/12/02 12:15:10
2856 [progressmeter.c]
2857 improvments from andreas@:
2858 * saner speed estimate for transfers that takes less than a second by
2859 rounding the time to 1 second.
2860 * when the transfer is finished calculate the actual total speed
2861 rather than the current speed which is given during the transfer
Darren Tucker3175eb92003-12-09 19:15:11 +11002862 - markus@cvs.openbsd.org 2003/12/02 17:01:15
2863 [channels.c session.c ssh-agent.c ssh.h sshd.c]
2864 use SSH_LISTEN_BACKLOG (=128) in listen(2).
Darren Tucker1cbc4442003-12-09 19:19:38 +11002865 - djm@cvs.openbsd.org 2003/12/07 06:34:18
2866 [moduli.c]
2867 remove unused debugging #define templates
Darren Tucker564f19e2003-12-09 19:18:07 +11002868 - markus@cvs.openbsd.org 2003/12/08 11:00:47
2869 [kexgexc.c]
2870 print requested group size in debug; ok djm
Darren Tucker5cd9d442003-12-10 00:54:38 +11002871 - dtucker@cvs.openbsd.org 2003/12/09 13:52:55
2872 [moduli.c]
2873 Prevent ssh-keygen -T from outputting moduli with a generator of 0, since
2874 they can't be used for Diffie-Hellman. Assistance and ok djm@
Darren Tuckera6153142003-12-10 00:52:37 +11002875 - (dtucker) [ssh-keyscan.c] Sync RCSIDs, missed in SSH_SSFDMAX change below.
Darren Tucker4c568432003-12-09 19:01:51 +11002876
Tim Rice88368a32003-12-08 12:35:59 -0800287720031208
2878 - (tim) [configure.ac] Bug 770. Fix --without-rpath.
2879
Damien Miller927f5272003-11-24 12:57:25 +1100288020031123
2881 - (djm) [canohost.c] Move IPv4inV6 mapped address normalisation to its own
2882 function and call it unconditionally
Damien Millere00074a2003-11-24 13:07:45 +11002883 - (djm) OpenBSD CVS Sync
2884 - djm@cvs.openbsd.org 2003/11/23 23:17:34
2885 [ssh-keyscan.c]
2886 from portable - use sysconf to detect fd limit; ok markus@
2887 (tidy diff by adding SSH_SSFDMAX macro to defines.h)
Damien Millera4b33df2003-11-24 13:09:27 +11002888 - djm@cvs.openbsd.org 2003/11/23 23:18:45
2889 [ssh-keygen.c]
2890 consistency PATH_MAX -> MAXPATHLEN; ok markus@
2891 (RCS ID sync only)
2892 - djm@cvs.openbsd.org 2003/11/23 23:21:21
2893 [scp.c]
2894 from portable: rename clashing variable limit-> limit_rate; ok markus@
2895 (RCS ID sync only)
Damien Millere0113cc2003-11-24 13:10:09 +11002896 - dtucker@cvs.openbsd.org 2003/11/24 00:16:35
2897 [ssh.1 ssh.c]
2898 Make ssh -k mean GSSAPIDelegateCredentials=no. Suggestion & ok markus@
Damien Miller3db2e4d2003-11-24 13:33:34 +11002899 - (djm) Annotate OpenBSD-derived files in openbsd-compat/ with original
2900 source file path (in OpenBSD tree).
Damien Miller927f5272003-11-24 12:57:25 +11002901
Darren Tucker240fdfa2003-11-22 14:10:02 +1100290220031122
2903 - (dtucker) [channels.c] Make AIX write limit code clearer. Suggested by djm@
Darren Tuckerd7634162003-11-22 14:16:56 +11002904 - (dtucker) [auth-passwd.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]
2905 Move AIX specific password authentication code to port-aix.c, call
2906 authenticate() until reenter flag is clear.
Darren Tucker4e06a1d2003-11-22 14:25:15 +11002907 - (dtucker) [auth-sia.c configure.ac] Tru64 update from cmadams at hiwaay.net.
2908 Use permanently_set_uid for SIA, only define DISABLE_FD_PASSING when SIA
2909 is enabled, rely on SIA to check for locked accounts if enabled. ok djm@
Damien Miller4da295c2003-11-22 14:39:04 +11002910 - (djm) [scp.c] Rename limitbw -> limit_rate to match upstreamed patch
Damien Miller841b9f12003-11-22 14:48:49 +11002911 - (djm) [sftp-int.c] Remove duplicated code from bogus sync
Damien Miller5924ceb2003-11-22 15:02:42 +11002912 - (djm) [packet.c] Shuffle #ifdef to reduce conditionally compiled code
Darren Tucker240fdfa2003-11-22 14:10:02 +11002913
Damien Miller8c5e91c2003-11-21 23:09:10 +1100291420031121
2915 - (djm) OpenBSD CVS Sync
2916 - markus@cvs.openbsd.org 2003/11/20 11:39:28
2917 [progressmeter.c]
2918 fix rounding errors; from andreas@
Damien Millera8e06ce2003-11-21 23:48:55 +11002919 - djm@cvs.openbsd.org 2003/11/21 11:57:03
2920 [everything]
2921 unexpand and delete whitespace at EOL; ok markus@
2922 (done locally and RCS IDs synced)
Damien Miller8c5e91c2003-11-21 23:09:10 +11002923
Darren Tucker18df00c2003-11-18 12:42:07 +1100292420031118
Damien Miller6aef38f2003-11-18 10:45:20 +11002925 - (djm) Fix early exit for root auth success when UsePAM=yes and
2926 PermitRootLogin=no
Darren Tucker18df00c2003-11-18 12:42:07 +11002927 - (dtucker) [auth-pam.c] Convert chauthtok_conv into a generic tty_conv,
Damien Miller4bb1dd32003-11-18 22:01:25 +11002928 and use it for do_pam_session. Fixes problems like pam_motd not
2929 displaying anything. ok djm@
Darren Tucker8a1624c2003-11-18 12:45:35 +11002930 - (dtucker) [auth-pam.c] Only use pam_putenv if our platform has it. ok djm@
Damien Miller4bb1dd32003-11-18 22:01:25 +11002931 - (djm) OpenBSD CVS Sync
2932 - dtucker@cvs.openbsd.org 2003/11/18 00:40:05
2933 [serverloop.c]
2934 Correct check for authctxt->valid. ok djm@
Damien Millerf96d1832003-11-18 22:01:48 +11002935 - djm@cvs.openbsd.org 2003/11/18 10:53:07
2936 [monitor.c]
2937 unbreak fake authloop for non-existent users (my screwup). Spotted and
2938 tested by dtucker@; ok markus@
Damien Miller6aef38f2003-11-18 10:45:20 +11002939
294020031117
Damien Miller3e8f41e2003-11-17 21:09:50 +11002941 - (djm) OpenBSD CVS Sync
2942 - djm@cvs.openbsd.org 2003/11/03 09:03:37
2943 [auth-chall.c]
2944 make this a little more idiot-proof; ok markus@
2945 (includes portable-specific changes)
Damien Miller5a388972003-11-17 21:10:47 +11002946 - jakob@cvs.openbsd.org 2003/11/03 09:09:41
2947 [sshconnect.c]
2948 move changed key warning into warn_changed_key(). ok markus@
Damien Miller8f746ec2003-11-17 21:11:15 +11002949 - jakob@cvs.openbsd.org 2003/11/03 09:37:32
2950 [sshconnect.c]
2951 do not free static type pointer in warn_changed_key()
Damien Miller3e3b5142003-11-17 21:13:40 +11002952 - djm@cvs.openbsd.org 2003/11/04 08:54:09
2953 [auth1.c auth2.c auth2-pubkey.c auth.h auth-krb5.c auth-passwd.c]
2954 [auth-rhosts.c auth-rh-rsa.c auth-rsa.c monitor.c serverloop.c]
2955 [session.c]
2956 standardise arguments to auth methods - they should all take authctxt.
2957 check authctxt->valid rather then pw != NULL; ok markus@
Damien Millera9fcd3a2003-11-17 21:16:55 +11002958 - jakob@cvs.openbsd.org 2003/11/08 16:02:40
2959 [auth1.c]
2960 remove unused variable (pw). ok djm@
2961 (id sync only - still used in portable)
Damien Miller939cd382003-11-17 21:17:24 +11002962 - jmc@cvs.openbsd.org 2003/11/08 19:17:29
2963 [sftp-int.c]
2964 typos from Jonathon Gray;
Damien Millerf58b58c2003-11-17 21:18:23 +11002965 - jakob@cvs.openbsd.org 2003/11/10 16:23:41
2966 [bufaux.c bufaux.h cipher.c cipher.h hostfile.c hostfile.h key.c]
2967 [key.h sftp-common.c sftp-common.h sftp-server.c sshconnect.c sshd.c]
2968 [ssh-dss.c ssh-rsa.c uuencode.c uuencode.h]
2969 constify. ok markus@ & djm@
Damien Millerc1f27922003-11-17 21:19:05 +11002970 - dtucker@cvs.openbsd.org 2003/11/12 10:12:15
2971 [scp.c]
2972 When called with -q, pass -q to ssh; suppresses SSH2 banner. ok markus@
Damien Miller150b5572003-11-17 21:19:29 +11002973 - jakob@cvs.openbsd.org 2003/11/12 16:39:58
2974 [dns.c dns.h readconf.c ssh_config.5 sshconnect.c]
2975 update SSHFP validation. ok markus@
Damien Millerfe448472003-11-17 21:19:49 +11002976 - jmc@cvs.openbsd.org 2003/11/12 20:14:51
2977 [ssh_config.5]
2978 make verb agree with subject, and kill some whitespace;
Damien Miller91c6aa42003-11-17 21:20:18 +11002979 - markus@cvs.openbsd.org 2003/11/14 13:19:09
2980 [sshconnect2.c]
2981 cleanup and minor fixes for the client code; from Simon Wilkinson
Damien Miller51bf11f2003-11-17 21:20:47 +11002982 - djm@cvs.openbsd.org 2003/11/17 09:45:39
2983 [msg.c msg.h sshconnect2.c ssh-keysign.c]
2984 return error on msg send/receive failure (rather than fatal); ok markus@
Damien Miller0425d402003-11-17 22:18:21 +11002985 - markus@cvs.openbsd.org 2003/11/17 11:06:07
2986 [auth2-gss.c gss-genr.c gss-serv.c monitor.c monitor.h monitor_wrap.c]
2987 [monitor_wrap.h sshconnect2.c ssh-gss.h]
2988 replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson;
2989 test + ok jakob.
Damien Miller9bdba702003-11-17 21:27:55 +11002990 - (djm) Bug #632: Don't call pam_end indirectly from within kbd-int
2991 conversation function
Damien Millerc756e9b2003-11-17 21:41:42 +11002992 - (djm) Export environment variables from authentication subprocess to
2993 parent. Part of Bug #717
Damien Miller3e8f41e2003-11-17 21:09:50 +11002994
Darren Tucker203c40b2003-11-15 12:13:16 +1100299520031115
2996 - (dtucker) [regress/agent-ptrace.sh] Test for GDB output from Solaris and
2997 HP-UX, skip test on AIX.
2998
Darren Tucker0947ddf2003-11-13 11:21:31 +1100299920031113
3000 - (dtucker) [auth-pam.c] Append newlines to lines output by the
3001 pam_chauthtok_conv().
Darren Tucker798ca842003-11-13 11:28:49 +11003002 - (dtucker) [README ssh-host-config ssh-user-config Makefile] (All
3003 contrib/cygwin). Major update from vinschen at redhat.com.
3004 - Makefile provides a `cygwin-postinstall' target to run right after
3005 `make install'.
3006 - Better support for Windows 2003 Server.
3007 - Try to get permissions as correct as possible.
3008 - New command line options to allow full automated host configuration.
3009 - Create configs from skeletons in /etc/defaults/etc.
3010 - Use /bin/bash, allows reading user input with readline support.
3011 - Remove really old configs from /usr/local.
Darren Tuckerae52b7c2003-11-13 19:52:31 +11003012 - (dtucker) [auth-pam.c] Add newline to accumulated PAM_TEXT_INFO and
3013 PAM_ERROR_MSG messages.
Darren Tucker0947ddf2003-11-13 11:21:31 +11003014
Damien Miller418a3862003-11-06 20:27:51 +1100301520031106
3016 - (djm) Clarify UsePAM consequences a little more
3017
Darren Tucker7c582db2003-11-03 18:59:29 +1100301820031103
3019 - (dtucker) [contrib/cygwin/ssh-host-config] Ensure entries in /etc/services
3020 are created correctly with CRLF line terminations. Patch from vinschen at
3021 redhat.com.
Darren Tuckera47c9bc2003-11-03 20:03:25 +11003022 - (dtucker) OpenBSD CVS Sync
3023 - markus@cvs.openbsd.org 2003/10/15 09:48:45
3024 [monitor_wrap.c]
3025 check pmonitor != NULL
Darren Tucker8cc39782003-11-03 20:05:03 +11003026 - markus@cvs.openbsd.org 2003/10/21 09:50:06
3027 [auth2-gss.c]
3028 make sure the doid is larger than 2
Darren Tucker56afe142003-11-03 20:06:14 +11003029 - avsm@cvs.openbsd.org 2003/10/26 16:57:43
3030 [sshconnect2.c]
3031 rename 'supported' static var in userauth_gssapi() to 'gss_supported'
3032 to avoid shadowing the global version. markus@ ok
Darren Tucker6db8f932003-11-03 20:07:14 +11003033 - markus@cvs.openbsd.org 2003/10/28 09:08:06
3034 [misc.c]
3035 error->debug for getsockopt+TCP_NODELAY; several requests
Darren Tucker655a5e02003-11-03 20:09:03 +11003036 - markus@cvs.openbsd.org 2003/11/02 11:01:03
3037 [auth2-gss.c compat.c compat.h sshconnect2.c]
3038 remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk
Darren Tuckerbe8a7712003-11-03 22:52:52 +11003039 - (dtucker) [regress/agent-ptrace.sh] Use numeric uid and gid.
Darren Tucker7c582db2003-11-03 18:59:29 +11003040
Darren Tucker0d37b5c2003-10-21 12:41:14 +1000304120031021
3042 - (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords
3043 directly. Noted by Darren.Moffat at sun.com.
Darren Tuckerea4c6702003-10-21 22:27:08 +10003044 - (dtucker) [regress/agent-ptrace.sh] Skip agent-test unless SUDO is set,
3045 make agent setgid during test.
Darren Tucker0d37b5c2003-10-21 12:41:14 +10003046
Darren Tucker9568ad92003-10-17 16:32:11 +1000304720031017
3048 - (dtucker) [INSTALL] Note that --with-md5 is now required on platforms with
3049 MD5 passwords even if PAM support is enabled. From steev at detritus.net.
3050
Darren Tucker1f203942003-10-15 15:50:42 +1000305120031015
3052 - (dtucker) OpenBSD CVS Sync
3053 - jmc@cvs.openbsd.org 2003/10/08 08:27:36
3054 [scp.1 scp.c sftp-server.8 sftp.1 sftp.c ssh.1 sshd.8]
3055 scp and sftp: add options list and sort options. options list requested
3056 by deraadt@
3057 sshd: use same format as ssh
3058 ssh: remove wrong option from list
3059 sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)
3060 ok deraadt@ markus@
Darren Tuckera044f472003-10-15 15:52:03 +10003061 - markus@cvs.openbsd.org 2003/10/08 15:21:24
3062 [readconf.c ssh_config.5]
3063 default GSS API to no in client, too; ok jakob, deraadt@
Darren Tucker0a118da2003-10-15 15:54:32 +10003064 - markus@cvs.openbsd.org 2003/10/11 08:24:08
3065 [readconf.c readconf.h ssh.1 ssh.c ssh_config.5]
3066 remote x11 clients are now untrusted by default, uses xauth(8) to generate
3067 untrusted cookies; ForwardX11Trusted=yes restores old behaviour.
3068 ok deraadt; feedback and ok djm/fries
Darren Tuckerd05b6012003-10-15 15:55:59 +10003069 - markus@cvs.openbsd.org 2003/10/11 08:26:43
3070 [sshconnect2.c]
3071 search keys in reverse order; fixes #684
Darren Tucker7eb3de02003-10-15 15:56:58 +10003072 - markus@cvs.openbsd.org 2003/10/11 11:36:23
3073 [monitor_wrap.c]
3074 return NULL for missing banner; ok djm@
Darren Tuckerf132c672003-10-15 15:58:18 +10003075 - jmc@cvs.openbsd.org 2003/10/12 13:12:13
3076 [ssh_config.5]
3077 note that EnableSSHKeySign should be in the non-hostspecific section;
3078 remove unnecessary .Pp;
3079 ok markus@
Darren Tuckerb370ca92003-10-15 15:59:26 +10003080 - markus@cvs.openbsd.org 2003/10/13 08:22:25
3081 [scp.1 sftp.1]
3082 don't refer to options related to forwarding; ok jmc@
Darren Tuckerdda19d62003-10-15 16:00:47 +10003083 - jakob@cvs.openbsd.org 2003/10/14 19:42:10
3084 [dns.c dns.h readconf.c ssh-keygen.c sshconnect.c]
3085 include SSHFP lookup code (not enabled by default). ok markus@
Darren Tucker64b77bc2003-10-15 16:07:53 +10003086 - jakob@cvs.openbsd.org 2003/10/14 19:43:23
3087 [README.dns]
3088 update
Darren Tucker072a7b12003-10-15 16:10:25 +10003089 - markus@cvs.openbsd.org 2003/10/14 19:54:39
3090 [session.c ssh-agent.c]
3091 10X for mkdtemp; djm@
Darren Tucker5f88d342003-10-15 16:57:57 +10003092 - (dtucker) [acconfig.h configure.ac dns.c openbsd-compat/getrrsetbyname.c
3093 openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always
3094 compiled in but disabled in config.
Darren Tuckerc6020652003-10-15 17:48:20 +10003095 - (dtucker) [auth.c] Check for disabled password expiry on HP-UX Trusted Mode.
Tim Rice6b1f8a32003-10-15 09:22:39 -07003096 - (tim) [regress/banner.sh] portability fix.
Darren Tucker1f203942003-10-15 15:50:42 +10003097
Darren Tucker6c0c0702003-10-09 14:13:53 +1000309820031009
3099 - (dtucker) [sshd_config.5] UsePAM defaults to "no". ok djm@
3100
Darren Tucker046dff22003-10-08 17:32:02 +1000310120031008
3102 - (dtucker) OpenBSD CVS Sync
3103 - dtucker@cvs.openbsd.org 2003/10/07 01:47:27
3104 [sshconnect2.c]
Darren Tucker79644822003-10-08 17:37:58 +10003105 Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 &
3106 #707. ok markus@
Darren Tucker64dbccc2003-10-08 17:34:38 +10003107 - djm@cvs.openbsd.org 2003/10/07 07:04:16
3108 [sftp-int.c]
3109 sftp quoting fix from admorten AT umich.edu; ok markus@
Darren Tucker79644822003-10-08 17:37:58 +10003110 - deraadt@cvs.openbsd.org 2003/10/07 21:58:28
3111 [sshconnect2.c]
3112 set ptr to NULL after free
Darren Tuckerdc001a52003-10-08 17:47:19 +10003113 - dtucker@cvs.openbsd.org 2003/10/07 01:52:13
3114 [regress/Makefile regress/banner.sh]
3115 Test SSH2 banner. ok markus@
Darren Tucker0240ff72003-10-08 17:52:10 +10003116 - djm@cvs.openbsd.org 2003/10/07 07:04:52
3117 [regress/sftp-cmds.sh]
3118 more sftp quoting regress tests; ok markus
Darren Tucker046dff22003-10-08 17:32:02 +10003119
Damien Miller6f1f6112003-10-07 10:18:22 +1000312020031007
3121 - (djm) Delete autom4te.cache after autoreconf
Darren Tucker8846a072003-10-07 11:30:15 +10003122 - (dtucker) [auth-pam.c auth-pam.h session.c] Make PAM use the new static
3123 cleanup functions. With & ok djm@
Darren Tuckerdfe6d912003-10-07 17:40:56 +10003124 - (dtucker) [contrib/redhat/openssh.spec] Bug #714: Now that UsePAM is a
3125 run-time switch, always build --with-md5-passwords.
Darren Tucker2e8c0cc2003-10-07 17:49:56 +10003126 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoul.c]
3127 Bug #670: add strtoul() to openbsd-compat for platforms lacking it. ok djm@
Darren Tucker3b2a06c2003-10-07 18:37:11 +10003128 - (dtucker) [configure.ac] Bug #715: Set BROKEN_SETREUID and BROKEN_SETREGID
3129 on Reliant Unix. Patch from Robert.Dahlem at siemens.com.
Darren Tucker89df7a32003-10-07 20:35:57 +10003130 - (dtucker) [configure.ac] Bug #710: Check for dlsym() in libdl on
3131 Reliant Unix. Based on patch from Robert.Dahlem at siemens.com.
Damien Miller6f1f6112003-10-07 10:18:22 +10003132
Darren Tucker4a250542003-10-03 17:57:24 +1000313320031003
Darren Tuckerf4bf5d02003-10-07 11:31:22 +10003134 - (dtucker) OpenBSD CVS Sync
Darren Tucker4a250542003-10-03 17:57:24 +10003135 - markus@cvs.openbsd.org 2003/10/02 10:41:59
3136 [sshd.c]
3137 print openssl version, too, several requests; ok henning/djm.
Darren Tuckere3ca82e2003-10-03 18:02:30 +10003138 - markus@cvs.openbsd.org 2003/10/02 08:26:53
3139 [ssh-gss.h]
3140 missing $OpenBSD:; dtucker
Tim Rice30aa44c2003-10-03 22:30:23 -07003141 - (tim) [contrib/caldera/openssh.spec] Remove obsolete --with-ipv4-default
3142 option.
Darren Tucker4a250542003-10-03 17:57:24 +10003143
Darren Tucker3e33cec2003-10-02 16:12:36 +1000314420031002
Darren Tuckerf4bf5d02003-10-07 11:31:22 +10003145 - (dtucker) OpenBSD CVS Sync
Darren Tucker3e33cec2003-10-02 16:12:36 +10003146 - markus@cvs.openbsd.org 2003/09/23 20:17:11
3147 [Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c
3148 cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h
3149 monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h
3150 ssh-agent.c sshd.c]
3151 replace fatal_cleanup() and linked list of fatal callbacks with static
3152 cleanup_exit() function. re-refine cleanup_exit() where appropriate,
3153 allocate sshd's authctxt eary to allow simpler cleanup in sshd.
3154 tested by many, ok deraadt@
Darren Tucker6cc310b2003-10-02 16:15:15 +10003155 - markus@cvs.openbsd.org 2003/09/23 20:18:52
3156 [progressmeter.c]
3157 don't print trailing \0; bug #709; Robert.Dahlem@siemens.com
3158 ok millert/deraadt@
Darren Tucker5dcdd212003-10-02 16:17:00 +10003159 - markus@cvs.openbsd.org 2003/09/23 20:41:11
3160 [channels.c channels.h clientloop.c]
3161 move client only agent code to clientloop.c
Darren Tucker8fca6b52003-10-02 16:18:22 +10003162 - markus@cvs.openbsd.org 2003/09/26 08:19:29
3163 [sshd.c]
3164 no need to set the listen sockets to non-block; ok deraadt@
Darren Tucker61776952003-10-02 16:19:47 +10003165 - jmc@cvs.openbsd.org 2003/09/29 11:40:51
3166 [ssh.1]
3167 - add list of options to -o and .Xr ssh_config(5)
3168 - some other cleanup
3169 requested by deraadt@;
3170 ok deraadt@ markus@
Darren Tuckera49d36e2003-10-02 16:20:54 +10003171 - markus@cvs.openbsd.org 2003/09/29 20:19:57
3172 [servconf.c sshd_config]
3173 GSSAPICleanupCreds -> GSSAPICleanupCredentials
Darren Tucker0ccb59b2003-10-02 16:26:34 +10003174 - (dtucker) [configure.ac] Don't set DISABLE_SHADOW when configuring
3175 --with-pam. ok djm@
Darren Tucker7596d682003-10-02 17:32:30 +10003176 - (dtucker) [ssh-gss.h] Prototype change missed in sync.
Darren Tuckerf391ba62003-10-02 20:07:09 +10003177 - (dtucker) [session.c] Fix bus errors on some 64-bit Solaris configurations.
3178 Based on patches by Matthias Koeppe and Thomas Baden. ok djm@
Darren Tucker3e33cec2003-10-02 16:12:36 +10003179
Ben Lindstromb210aa22003-09-30 23:49:06 +0000318020030930
3181 - (bal) Fix issues in openbsd-compat/realpath.c
3182
Darren Tuckerb88fcc72003-09-25 20:18:33 +1000318320030925
3184 - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove
3185 DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam. Patch from
3186 michael_steffens at hp.com, ok djm@
Tim Riced4d18152003-09-25 19:04:34 -07003187 - (tim) [sshd_config] UsePAM defaults to no.
Darren Tuckerb88fcc72003-09-25 20:18:33 +10003188
Damien Millerdbb10472003-09-24 08:30:18 +1000318920030924
3190 - (djm) Update version.h and spec files for HEAD
Darren Tuckerbeaf6792003-09-24 20:03:48 +10003191 - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6.
Damien Millerdbb10472003-09-24 08:30:18 +10003192
Darren Tucker782390e2003-09-22 10:58:55 +1000319320030923
Darren Tucker8a49dd12003-09-22 10:59:34 +10003194 - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-tree
Darren Tucker782390e2003-09-22 10:58:55 +10003195 builds. Portability corrections from tim@.
Tim Rice480ef8d2003-09-21 21:38:11 -07003196 - (dtucker) [configure.ac] Bug #665: uid swapping issues on Mac OS X.
Darren Tucker20379a32003-09-22 11:07:40 +10003197 Patch from max at quendi.de.
Darren Tuckered92b212003-09-22 11:26:16 +10003198 - (dtucker) [configure.ac] Bug #657: uid swapping issues on BSDi.
3199 - (dtucker) [configure.ac] Bug #653: uid swapping issues on Tru64.
Darren Tucker00130112003-09-22 11:40:24 +10003200 - (dtucker) [configure.ac] Bug #693: uid swapping issues on NCR MP-RAS.
3201 Patch from david.haughton at ncr.com
Darren Tuckerbe79af12003-09-22 11:58:21 +10003202 - (dtucker) [configure.ac] Bug #659: uid swapping issues on IRIX 6.
3203 Part of patch supplied by bugzilla-openssh at thewrittenword.com
Darren Tuckerd5e082f2003-09-22 12:08:23 +10003204 - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c
3205 openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with
3206 where gai_strerror is defined as "const char *". Part of patch supplied
3207 by bugzilla-openssh at thewrittenword.com
Darren Tucker8daf4b42003-09-22 12:32:00 +10003208 - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config] Update
3209 ssh-host-config to match current defaults, bump README version. Patch from
3210 vinschen at redhat.com.
Darren Tuckerfbe3b362003-09-22 12:54:37 +10003211 - (dtucker) [uidswap.c] Don't test restoration of uid on Cygwin since the
3212 OS does not support permanently dropping privileges. Patch from
3213 vinschen at redhat.com.
Darren Tucker051c2702003-09-22 13:05:26 +10003214 - (dtucker) [openbsd-compat/port-aix.c] Use correct include for xmalloc.h,
3215 add canohost.h to stop warning. Based on patch from openssh-unix-dev at
3216 thewrittenword.com
Darren Tucker42d30822003-09-22 13:28:36 +10003217 - (dtucker) [INSTALL] Bug #686: Document requirement for zlib 1.1.4 or
3218 higher.
Tim Rice7a74c6b2003-09-21 21:00:59 -07003219 - (tim) Fix typo. s/SETEIUD_BREAKS_SETUID/SETEUID_BREAKS_SETUID/
Tim Rice480ef8d2003-09-21 21:38:11 -07003220 - (tim) [configure.ac] Bug 665: move 3 new AC_DEFINES outside of AC_TRY_RUN.
3221 Report by distler AT golem ph utexas edu.
Darren Tucker220bf132003-09-22 20:41:40 +10003222 - (dtucker) [contrib/aix/pam.conf] Include example pam.conf for AIX from
3223 article by genty at austin.ibm.com, included with the author's permission.
Darren Tuckerbd5361b2003-09-22 20:59:16 +10003224 - (dtucker) OpenBSD CVS Sync
3225 - markus@cvs.openbsd.org 2003/09/18 07:52:54
3226 [sshconnect.c]
3227 missing {}; bug #656; jclonguet at free.fr
Darren Tuckerd2730d32003-09-22 21:00:19 +10003228 - markus@cvs.openbsd.org 2003/09/18 07:54:48
3229 [buffer.c]
3230 protect against double free; #660; zardoz at users.sf.net
Darren Tuckerd1d41b32003-09-22 21:01:27 +10003231 - markus@cvs.openbsd.org 2003/09/18 07:56:05
3232 [authfile.c]
3233 missing buffer_free(&encrypted); #662; zardoz at users.sf.net
Darren Tuckerfb16b242003-09-22 21:04:23 +10003234 - markus@cvs.openbsd.org 2003/09/18 08:49:45
3235 [deattack.c misc.c session.c ssh-agent.c]
3236 more buffer allocation fixes; from Solar Designer; CAN-2003-0682;
3237 ok millert@
Darren Tuckerc0815c92003-09-22 21:05:50 +10003238 - miod@cvs.openbsd.org 2003/09/18 13:02:21
3239 [authfd.c bufaux.c dh.c mac.c ssh-keygen.c]
3240 A few signedness fixes for harmless situations; markus@ ok
Darren Tuckera8151da2003-09-22 21:06:46 +10003241 - markus@cvs.openbsd.org 2003/09/19 09:02:02
3242 [packet.c]
3243 buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471
Darren Tucker631a4a92003-09-22 21:08:21 +10003244 - markus@cvs.openbsd.org 2003/09/19 09:03:00
3245 [buffer.c]
3246 sign fix in buffer_dump; Jedi/Sector One; pr 3473
Darren Tucker6fa8abd2003-09-22 21:10:21 +10003247 - markus@cvs.openbsd.org 2003/09/19 11:29:40
3248 [ssh-agent.c]
3249 provide a ssh-agent specific fatal() function; ok deraadt
Darren Tucker3d326222003-09-22 21:11:20 +10003250 - markus@cvs.openbsd.org 2003/09/19 11:30:39
3251 [ssh-keyscan.c]
3252 avoid fatal_cleanup, just call exit(); ok deraadt
Darren Tucker3dbff2a2003-09-22 21:12:56 +10003253 - markus@cvs.openbsd.org 2003/09/19 11:31:33
3254 [channels.c]
3255 do not call channel_free_all on fatal; ok deraadt
Darren Tuckeraaa56cb2003-09-22 21:13:59 +10003256 - markus@cvs.openbsd.org 2003/09/19 11:33:09
3257 [packet.c sshd.c]
3258 do not call packet_close on fatal; ok deraadt
Darren Tucker8654d162003-09-22 21:14:55 +10003259 - markus@cvs.openbsd.org 2003/09/19 17:40:20
3260 [scp.c]
3261 error handling for remote-remote copy; #638; report Harald Koenig;
3262 ok millert, fgs, henning, deraadt
Darren Tucker9a2c4cd2003-09-22 21:16:05 +10003263 - markus@cvs.openbsd.org 2003/09/19 17:43:35
3264 [clientloop.c sshtty.c sshtty.h]
3265 remove fatal callbacks from client code; ok deraadt
Ben Lindstromda4d9cf2003-09-22 15:36:15 +00003266 - (bal) "extration" -> "extraction" in ssh-rand-helper.c; repoted by john
3267 on #unixhelp@efnet
Tim Rice7ff4e6d2003-09-22 19:50:14 -07003268 - (tim) [configure.ac] add --disable-etc-default-login option. ok djm
Damien Miller5c3a5582003-09-23 22:12:38 +10003269 - (djm) Sync with V_3_7 branch:
3270 - (djm) Fix SSH1 challenge kludge
3271 - (djm) Bug #671: Fix builds on OpenBSD
3272 - (djm) Bug #676: Fix PAM stack corruption
3273 - (djm) Fix bad free() in PAM code
3274 - (djm) Don't call pam_end before pam_init
3275 - (djm) Enable build with old OpenSSL again
3276 - (djm) Trim deprecated options from INSTALL. Mention UsePAM
3277 - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
Darren Tucker782390e2003-09-22 10:58:55 +10003278
Darren Tuckerde9d6232005-11-10 17:23:54 +11003279$Id: ChangeLog,v 1.3976 2005/11/10 06:23:54 dtucker Exp $