blob: a89fcdc9c140c08f6e673330ad7f43f370c98221 [file] [log] [blame]
Damien Miller32b3cf21999-12-26 10:21:48 +1100119991226
2 - Enabled utmpx support by default for Solaris
3 - Cleanup sshd.c PAM a little more
4
Damien Miller2e1b0821999-12-25 10:11:29 +1100519991225
6 - More fixes from Andre Lucas <andre.lucas@dial.pipex.com>
7 - Cleanup of auth-passwd.c for shadow and MD5 passwords
8 - Cleanup and bugfix of PAM authentication code
Damien Miller32b3cf21999-12-26 10:21:48 +11009 - Released 1.2.1pre20
10
11 - Merged fixes from Ben Taylor <bent@clark.net>
12 - Fixed configure support for PAM. Reported by Naz <96na@eng.cam.ac.uk>
13 - Disabled logging of PAM password authentication failures when password
14 is empty. (e.g start of authentication loop). Reported by Naz
15 <96na@eng.cam.ac.uk>)
Damien Miller2e1b0821999-12-25 10:11:29 +110016
1719991223
18 - Merged later HPUX patch from Andre Lucas
19 <andre.lucas@dial.pipex.com>
20 - Above patch included better utmpx support from Ben Taylor
Damien Miller32b3cf21999-12-26 10:21:48 +110021 <bent@clark.net>
Damien Miller2e1b0821999-12-25 10:11:29 +110022
Damien Miller365199d1999-12-22 00:12:38 +11002319991222
24 - Fix undefined fd_set type in ssh.h from Povl H. Pedersen
25 <pope@netguide.dk>
Damien Miller1b0c2281999-12-22 16:09:48 +110026 - Fix login.c breakage on systems which lack ut_host in struct
27 utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com>
Damien Miller365199d1999-12-22 00:12:38 +110028
Damien Miller76112de1999-12-21 11:18:08 +11002919991221
30 - Integration of large HPUX patch from Andre Lucas
31 <andre.lucas@dial.pipex.com>. Integrating it had a few other
32 benefits:
33 - Ability to disable shadow passwords at configure time
34 - Ability to disable lastlog support at configure time
35 - Support for IP address in $DISPLAY
Damien Millerf039bad1999-12-21 20:57:20 +110036 - OpenBSD CVS update:
37 - [sshconnect.c]
38 say "REMOTE HOST IDENTIFICATION HAS CHANGED"
Damien Millercb7e5f91999-12-21 21:03:09 +110039 - Fix DISABLE_SHADOW support
40 - Allow MD5 passwords even if shadow passwords are disabled
Damien Millere8852911999-12-21 22:50:50 +110041 - Release 1.2.1pre19
Damien Miller76112de1999-12-21 11:18:08 +110042
Damien Millerc4c647f1999-12-18 20:54:52 +11004319991218
44 - Redhat init script patch from Chun-Chung Chen
45 <cjj@u.washington.edu>
Damien Millerfdb7caf1999-12-18 20:57:40 +110046 - Avoid breakage on systems without IPv6 headers
Damien Millerc4c647f1999-12-18 20:54:52 +110047
Damien Millerab8a4da1999-12-16 13:05:30 +11004819991216
49 - Makefile changes for Solaris from Peter Kocks
50 <peter.kocks@baygate.com>
Damien Miller5e7c10e1999-12-16 13:18:04 +110051 - Minor updates to docs
52 - Merged OpenBSD CVS changes:
53 - [authfd.c ssh-agent.c]
54 keysize warnings talk about identity files
55 - [packet.c]
56 "Connection closed by x.x.x.x": fatal() -> log()
Damien Miller8f9d5071999-12-16 15:10:45 +110057 - Correctly handle empty passwords in shadow file. Patch from:
58 "Chris, the Young One" <cky@pobox.com>
59 - Released 1.2.1pre18
Damien Millerab8a4da1999-12-16 13:05:30 +110060
Damien Miller84093e91999-12-15 09:06:28 +11006119991215
62 - Integrated patchs from Juergen Keil <jk@tools.de>
63 - Avoid void* pointer arithmatic
64 - Use LDFLAGS correctly
Damien Miller864ea591999-12-15 11:04:25 +110065 - Fix SIGIO error in scp
66 - Simplify status line printing in scp
Damien Miller3b9d5e91999-12-15 09:34:31 +110067 - Added better test for inline functions compiler support from
68 Darren_Hall@progressive.com
Damien Miller84093e91999-12-15 09:06:28 +110069
Damien Millera34a28b1999-12-14 10:47:15 +11007019991214
71 - OpenBSD CVS Changes
72 - [canohost.c]
73 fix get_remote_port() and friends for sshd -i;
74 Holger.Trapp@Informatik.TU-Chemnitz.DE
75 - [mpaux.c]
76 make code simpler. no need for memcpy. niels@ ok
77 - [pty.c]
78 namebuflen not sizeof namebuflen; bnd@ep-ag.com via djm@mindrot.org
79 fix proto; markus
80 - [ssh.1]
81 typo; mark.baushke@solipsa.com
82 - [channels.c ssh.c ssh.h sshd.c]
83 type conflict for 'extern Type *options' in channels.c; dot@dotat.at
84 - [sshconnect.c]
85 move checking of hostkey into own function.
86 - [version.h]
87 OpenSSH-1.2.1
Damien Miller36b339a1999-12-14 10:54:47 +110088 - Clean up broken includes in pty.c
Damien Miller6ae00d61999-12-14 15:43:03 +110089 - Some older systems don't have poll.h, they use sys/poll.h instead
90 - Doc updates
Damien Millera34a28b1999-12-14 10:47:15 +110091
Damien Millerc6b3bbe1999-12-13 08:27:33 +11009219991211
93 - Fix compilation on systems with AFS. Reported by
94 aloomis@glue.umd.edu
95 - Fix installation on Solaris. Reported by
96 Gordon Rowell <gordonr@gormand.com.au>
97 - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com,
98 patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
99 - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com>
100 - Compile fix from David Agraz <dagraz@jahoopa.com>
101 - Avoid compiler warning in bsd-snprintf.c
102 - Added pam_limits.so to default PAM config. Suggested by
103 Jim Knoble <jmknoble@pobox.com>
104
Damien Millerbf1c9b21999-12-09 10:16:54 +110010519991209
106 - Import of patch from Ben Taylor <bent@clark.net>:
107 - Improved PAM support
108 - "uninstall" rule for Makefile
109 - utmpx support
110 - Should fix PAM problems on Solaris
Damien Miller50945fa1999-12-09 10:31:37 +1100111 - OpenBSD CVS updates:
112 - [readpass.c]
113 avoid stdio; based on work by markus, millert, and I
114 - [sshd.c]
115 make sure the client selects a supported cipher
116 - [sshd.c]
117 fix sighup handling. accept would just restart and daemon handled
118 sighup only after the next connection was accepted. use poll on
119 listen sock now.
120 - [sshd.c]
121 make that a fatal
Damien Millerd7f66151999-12-09 10:48:58 +1100122 - Applied patch from David Rankin <drankin@bohemians.lexington.ky.us>
123 to fix libwrap support on NetBSD
Damien Miller6646bad1999-12-09 10:42:10 +1100124 - Released 1.2pre17
Damien Millerbf1c9b21999-12-09 10:16:54 +1100125
Damien Millerfce16481999-12-08 08:53:52 +110012619991208
127 - Compile fix for Solaris with /dev/ptmx from
128 David Agraz <dagraz@jahoopa.com>
129
Damien Miller0c078c61999-12-07 14:53:57 +110013019991207
131 - sshd Redhat init script patch from Jim Knoble <jmknoble@pobox.com>
132 fixes compatability with 4.x and 5.x
Damien Miller3bc14dd1999-12-07 14:54:53 +1100133 - Fixed default SSH_ASKPASS
Damien Millereabf3411999-12-07 14:56:27 +1100134 - Fix PAM account and session being called multiple times. Problem
135 reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>
Damien Miller037a0dc1999-12-07 15:38:31 +1100136 - Merged more OpenBSD changes:
137 - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c]
138 move atomicio into it's own file. wrap all socket write()s which
139 were doing write(sock, buf, len) != len, with atomicio() calls.
140 - [auth-skey.c]
141 fd leak
142 - [authfile.c]
143 properly name fd variable
144 - [channels.c]
145 display great hatred towards strcpy
146 - [pty.c pty.h sshd.c]
147 use openpty() if it exists (it does on BSD4_4)
148 - [tildexpand.c]
149 check for ~ expansion past MAXPATHLEN
150 - Modified helper.c to use new atomicio function.
151 - Reformat Makefile a little
152 - Moved RC4 routines from rc4.[ch] into helper.c
153 - Added autoconf code to detect /dev/ptmx (Solaris) and /dev/ptc (AIX)
Damien Milleraf2604a1999-12-07 16:21:40 +1100154 - Updated SuSE spec from Chris Saia <csaia@wtower.com>
155 - Tweaked Redhat spec
Damien Millerf5d69a51999-12-07 16:55:04 +1100156 - Clean up bad imports of a few files (forgot -kb)
157 - Released 1.2pre16
Damien Miller0c078c61999-12-07 14:53:57 +1100158
Damien Millerdc33fc31999-12-04 20:24:48 +110015919991204
160 - Small cleanup of PAM code in sshd.c
Damien Milleraae6c611999-12-06 11:47:28 +1100161 - Merged OpenBSD CVS changes:
162 - [auth-krb4.c auth-passwd.c auth-skey.c ssh.h]
163 move skey-auth from auth-passwd.c to auth-skey.c, same for krb4
164 - [auth-rsa.c]
165 warn only about mismatch if key is _used_
166 warn about keysize-mismatch with log() not error()
167 channels.c readconf.c readconf.h ssh.c ssh.h sshconnect.c
168 ports are u_short
169 - [hostfile.c]
170 indent, shorter warning
171 - [nchan.c]
172 use error() for internal errors
173 - [packet.c]
174 set loglevel for SSH_MSG_DISCONNECT to log(), not fatal()
175 serverloop.c
176 indent
177 - [ssh-add.1 ssh-add.c ssh.h]
178 document $SSH_ASKPASS, reasonable default
179 - [ssh.1]
180 CheckHostIP is not available for connects via proxy command
181 - [sshconnect.c]
182 typo
183 easier to read client code for passwd and skey auth
184 turn of checkhostip for proxy connects, since we don't know the remote ip
Damien Millerdc33fc31999-12-04 20:24:48 +1100185
Damien Miller42b81ff1999-11-26 12:21:24 +110018619991126
187 - Add definition for __P()
188 - Added [v]snprintf() replacement for systems that lack it
189
Damien Miller78224a01999-11-25 11:55:45 +110019019991125
191 - More reformatting merged from OpenBSD CVS
192 - Merged OpenBSD CVS changes:
193 - [channels.c]
194 fix packet_integrity_check() for !have_hostname_in_open.
195 report from mrwizard@psu.edu via djm@ibs.com.au
196 - [channels.c]
197 set SO_REUSEADDR and SO_LINGER for forwarded ports.
198 chip@valinux.com via damien@ibs.com.au
199 - [nchan.c]
200 it's not an error() if shutdown_write failes in nchan.
201 - [readconf.c]
202 remove dead #ifdef-0-code
203 - [readconf.c servconf.c]
204 strcasecmp instead of tolower
205 - [scp.c]
206 progress meter overflow fix from damien@ibs.com.au
207 - [ssh-add.1 ssh-add.c]
208 SSH_ASKPASS support
209 - [ssh.1 ssh.c]
210 postpone fork_after_authentication until command execution,
211 request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
212 plus: use daemon() for backgrounding
Damien Millerd8087f61999-11-25 12:31:26 +1100213 - Added BSD compatible install program and autoconf test, thanks to
214 Niels Kristian Bech Jensen <nkbj@image.dk>
215 - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
Damien Miller063fdf81999-11-25 13:08:31 +1100216 - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
Damien Millerbf3f6ef1999-11-25 13:50:10 +1100217 - Release 1.2pre15
Damien Miller78224a01999-11-25 11:55:45 +1100218
Damien Miller95def091999-11-25 00:26:21 +110021919991124
220 - Merged very large OpenBSD source code reformat
221 - OpenBSD CVS updates
222 - [channels.c cipher.c compat.c log-client.c scp.c serverloop.c]
223 [ssh.h sshd.8 sshd.c]
224 syslog changes:
225 * Unified Logmessage for all auth-types, for success and for failed
226 * Standard connections get only ONE line in the LOG when level==LOG:
227 Auth-attempts are logged only, if authentication is:
228 a) successfull or
229 b) with passwd or
230 c) we had more than AUTH_FAIL_LOG failues
231 * many log() became verbose()
232 * old behaviour with level=VERBOSE
233 - [readconf.c readconf.h ssh.1 ssh.h sshconnect.c sshd.c]
234 tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
235 messages. allows use of s/key in windows (ttssh, securecrt) and
236 ssh-1.2.27 clients without 'ssh -v', ok: niels@
237 - [sshd.8]
238 -V, for fallback to openssh in SSH2 compatibility mode
239 - [sshd.c]
240 fix sigchld race; cjc5@po.cwru.edu
241
Damien Miller294df781999-11-23 10:11:29 +110024219991123
243 - Added SuSE package files from Chris Saia <csaia@wtower.com>
Damien Miller3744b511999-11-23 11:24:32 +1100244 - Restructured package-related files under packages/*
Damien Miller294df781999-11-23 10:11:29 +1100245 - Added generic PAM config
Damien Miller3744b511999-11-23 11:24:32 +1100246 - Numerous little Solaris fixes
Damien Miller4d2f15f1999-11-23 12:36:29 +1100247 - Add recommendation to use GNU make to INSTALL document
Damien Miller294df781999-11-23 10:11:29 +1100248
Damien Miller22218721999-11-22 12:51:42 +110024919991122
250 - Make <enter> close gnome-ssh-askpass (Debian bug #50299)
Damien Miller83df0691999-11-22 13:22:29 +1100251 - OpenBSD CVS Changes
252 - [ssh-keygen.c]
253 don't create ~/.ssh only if the user wants to store the private
254 key there. show fingerprint instead of public-key after
255 keygeneration. ok niels@
Damien Millerb3ca3aa1999-11-22 13:57:07 +1100256 - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h
Damien Miller859cec01999-11-22 14:27:24 +1100257 - Added timersub() macro
Damien Millerb3ca3aa1999-11-22 13:57:07 +1100258 - Tidy RCSIDs of bsd-*.c
Damien Miller859cec01999-11-22 14:27:24 +1100259 - Added autoconf test and macro to deal with old PAM libraries
260 pam_strerror definition (one arg vs two).
Damien Millerd71b12e1999-11-22 15:24:34 +1100261 - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>)
262 - Retry /dev/urandom reads interrupted by signal (report from
263 Robert Hardy <rhardy@webcon.net>)
Damien Millerd7702521999-11-22 16:11:05 +1100264 - Added a setenv replacement for systems which lack it
Damien Millerd733c911999-11-22 18:11:23 +1100265 - Only display public key comment when presenting ssh-askpass dialog
266 - Released 1.2pre14
Damien Miller22218721999-11-22 12:51:42 +1100267
Damien Millerf7c0f821999-11-22 22:31:49 +1100268 - Configure, Make and changelog corrections from Tudor Bosman
269 <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk>
270
Damien Miller6162d121999-11-21 13:23:52 +110027119991121
Damien Miller83df0691999-11-22 13:22:29 +1100272 - OpenBSD CVS Changes:
Damien Miller22218721999-11-22 12:51:42 +1100273 - [channels.c]
274 make this compile, bad markus
275 - [log.c readconf.c servconf.c ssh.h]
276 bugfix: loglevels are per host in clientconfig,
277 factor out common log-level parsing code.
278 - [servconf.c]
279 remove unused index (-Wall)
280 - [ssh-agent.c]
281 only one 'extern char *__progname'
282 - [sshd.8]
283 document SIGHUP, -Q to synopsis
284 - [sshconnect.c serverloop.c sshd.c packet.c packet.h]
285 [channels.c clientloop.c]
286 SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
287 [hope this time my ISP stays alive during commit]
288 - [OVERVIEW README] typos; green@freebsd
289 - [ssh-keygen.c]
290 replace xstrdup+strcat with strlcat+fixed buffer, fixes OF (bad me)
291 exit if writing the key fails (no infinit loop)
292 print usage() everytime we get bad options
293 - [ssh-keygen.c] overflow, djm@mindrot.org
294 - [sshd.c] fix sigchld race; cjc5@po.cwru.edu
295
Damien Millerc6398ef1999-11-20 12:18:40 +110029619991120
297 - Merged more Solaris support from Marc G. Fournier
298 <marc.fournier@acadiau.ca>
299 - Wrote autoconf tests for integer bit-types
300 - Fixed enabling kerberos support
Damien Millerf58db381999-11-20 17:02:56 +1100301 - Fix segfault in ssh-keygen caused by buffer overrun in filename
302 handling.
Damien Millerc6398ef1999-11-20 12:18:40 +1100303
Damien Miller5bbbd361999-11-19 07:56:21 +110030419991119
305 - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>
Damien Miller23b78391999-11-19 08:25:48 +1100306 - Merged OpenBSD CVS changes
307 - [auth-rhosts.c auth-rsa.c ssh-agent.c sshconnect.c sshd.c]
308 more %d vs. %s in fmt-strings
309 - [authfd.c]
310 Integers should not be printed with %s
Damien Miller58fc4731999-11-19 12:05:01 +1100311 - EGD uses a socket, not a named pipe. Duh.
312 - Fix includes in fingerprint.c
Damien Millerdc9365b1999-11-19 12:34:14 +1100313 - Fix scp progress bar bug again.
Damien Millerf7c0f821999-11-22 22:31:49 +1100314 - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of
Damien Miller18ac1711999-11-19 12:43:19 +1100315 David Rankin <drankin@bohemians.lexington.ky.us>
Damien Miller80297751999-11-19 13:03:25 +1100316 - Added autoconf option to enable Kerberos 4 support (untested)
317 - Added autoconf option to enable AFS support (untested)
318 - Added autoconf option to enable S/Key support (untested)
319 - Added autoconf option to enable TCP wrappers support (compiles OK)
Damien Miller04f80141999-11-19 15:32:34 +1100320 - Renamed BSD helper function files to bsd-*
Damien Millerdd1c7ba1999-11-19 15:53:20 +1100321 - Added tests for login and daemon and enable OpenBSD replacements for
322 when they are absent.
323 - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu>
Damien Miller5bbbd361999-11-19 07:56:21 +1100324
Damien Miller81428f91999-11-18 09:28:11 +110032519991118
326 - Merged OpenBSD CVS changes
327 - [scp.c] foregroundproc() in scp
328 - [sshconnect.h] include fingerprint.h
329 - [sshd.c] bugfix: the log() for passwd-auth escaped during logging
330 changes.
Damien Miller6ee95641999-11-18 11:35:13 +1100331 - [ssh.1] Spell my name right.
Damien Miller81428f91999-11-18 09:28:11 +1100332 - Added openssh.com info to README
333
Damien Miller10f6f6b1999-11-17 17:29:08 +110033419991117
335 - Merged OpenBSD CVS changes
336 - [ChangeLog.Ylonen] noone needs this anymore
337 - [authfd.c] close-on-exec for auth-socket, ok deraadt
338 - [hostfile.c]
339 in known_hosts key lookup the entry for the bits does not need
340 to match, all the information is contained in n and e. This
341 solves the problem with buggy servers announcing the wrong
342 modulus length. markus and me.
343 - [serverloop.c]
344 bugfix: check for space if child has terminated, from:
345 iedowse@maths.tcd.ie
346 - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c]
347 [fingerprint.c fingerprint.h]
348 rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>
349 - [ssh-agent.1] typo
350 - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@
351 - [sshd.c]
352 force logging to stderr while loading private key file
353 (lost while converting to new log-levels)
354
Damien Miller7e8e8201999-11-16 13:37:16 +110035519991116
356 - Fix some Linux libc5 problems reported by Miles Wilson <mw@mctitle.com>
357 - Merged OpenBSD CVS changes:
358 - [auth-rh-rsa.c auth-rsa.c authfd.c authfd.h hostfile.c mpaux.c]
359 [mpaux.h ssh-add.c ssh-agent.c ssh.h ssh.c sshd.c]
360 the keysize of rsa-parameter 'n' is passed implizit,
361 a few more checks and warnings about 'pretended' keysizes.
362 - [cipher.c cipher.h packet.c packet.h sshd.c]
363 remove support for cipher RC4
364 - [ssh.c]
365 a note for legay systems about secuity issues with permanently_set_uid(),
366 the private hostkey and ptrace()
367 - [sshconnect.c]
368 more detailed messages about adding and checking hostkeys
369
Damien Millerd05a2471999-11-15 14:25:30 +110037019991115
371 - Merged OpenBSD CVS changes:
372 - [ssh-add.c] change passphrase loop logic and remove ref to
373 $DISPLAY, ok niels
374 - Changed to ssh-add.c broke askpass support. Revised it to be a little more
375 modular.
376 - Revised autoconf support for enabling/disabling askpass support.
Damien Miller2ccf6611999-11-15 15:25:10 +1100377 - Merged more OpenBSD CVS changes:
378 [auth-krb4.c]
379 - disconnect if getpeername() fails
380 - missing xfree(*client)
381 [canohost.c]
382 - disconnect if getpeername() fails
383 - fix comment: we _do_ disconnect if ip-options are set
384 [sshd.c]
385 - disconnect if getpeername() fails
386 - move checking of remote port to central place
387 [auth-rhosts.c] move checking of remote port to central place
388 [log-server.c] avoid extra fd per sshd, from millert@
389 [readconf.c] print _all_ bad config-options in ssh(1), too
390 [readconf.h] print _all_ bad config-options in ssh(1), too
391 [ssh.c] print _all_ bad config-options in ssh(1), too
392 [sshconnect.c] disconnect if getpeername() fails
393 - OpenBSD's changes to sshd.c broke the PAM stuff, re-merged it.
Damien Miller3bd49ec1999-11-15 15:40:55 +1100394 - Various small cleanups to bring diff (against OpenBSD) size down.
Damien Miller3f905871999-11-15 17:10:57 +1100395 - Merged more Solaris compability from Marc G. Fournier
396 <marc.fournier@acadiau.ca>
397 - Wrote autoconf tests for __progname symbol
Damien Miller36682061999-11-15 17:19:24 +1100398 - RPM spec file fixes from Jim Knoble <jmknoble@pobox.com>
Damien Miller2e8b1c81999-11-15 23:33:56 +1100399 - Released 1.2pre12
400
401 - Another OpenBSD CVS update:
402 - [ssh-keygen.1] fix .Xr
Damien Millerd05a2471999-11-15 14:25:30 +1100403
Damien Miller0a6e6681999-11-15 09:56:06 +110040419991114
405 - Solaris compilation fixes (still imcomplete)
406
Damien Millerb0284381999-11-13 13:30:28 +110040719991113
Damien Miller192bd011999-11-13 23:56:35 +1100408 - Build patch from Niels Kristian Bech Jensen <nkbj@image.dk>
409 - Don't install config files if they already exist
410 - Fix inclusion of additional preprocessor directives from acconfig.h
Damien Millerb0284381999-11-13 13:30:28 +1100411 - Removed redundant inclusions of config.h
Damien Millerc6d5ce81999-11-15 16:01:07 +1100412 - Added 'Obsoletes' lines to RPM spec file
Damien Millerb0284381999-11-13 13:30:28 +1100413 - Merged OpenBSD CVS changes:
414 - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels
415 - [scp.c] fix overflow reported by damien@ibs.com.au: off_t
416 totalsize, ok niels,aaron
417 - Delay fork (-f option) in ssh until after port forwarded connections
418 have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi>
Damien Miller2cb210f1999-11-13 15:40:10 +1100419 - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de>
420 - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled
Damien Miller192bd011999-11-13 23:56:35 +1100421 - Tidied default config file some more
422 - Revised Redhat initscript to fix bug: sshd (re)start would fail
423 if executed from inside a ssh login.
Damien Millerb0284381999-11-13 13:30:28 +1100424
Damien Miller776af5d1999-11-12 08:49:09 +110042519991112
426 - Merged changes from OpenBSD CVS
427 - [sshd.c] session_key_int may be zero
Damien Miller32265091999-11-12 11:33:04 +1100428 - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config]
429 IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok
430 deraadt,millert
431 - Brought default sshd_config more in line with OpenBSD's
Damien Millerb9a692d1999-11-12 12:09:36 +1100432 - Grab server in gnome-ssh-askpass (Debian bug #49872)
433 - Released 1.2pre10
Damien Miller776af5d1999-11-12 08:49:09 +1100434
Damien Millerb5f89271999-11-12 14:35:58 +1100435 - Added INSTALL documentation
Damien Miller6d7b2cd1999-11-12 15:19:27 +1100436 - Merged yet more changes from OpenBSD CVS
437 - [auth-rh-rsa.c auth-rhosts.c auth-rsa.c channels.c clientloop.c]
438 [ssh.c ssh.h sshconnect.c sshd.c]
439 make all access to options via 'extern Options options'
440 and 'extern ServerOptions options' respectively;
441 options are no longer passed as arguments:
442 * make options handling more consistent
443 * remove #include "readconf.h" from ssh.h
444 * readconf.h is only included if necessary
445 - [mpaux.c] clear temp buffer
446 - [servconf.c] print _all_ bad options found in configfile
Damien Miller3d1b22c1999-11-12 15:46:08 +1100447 - Make ssh-askpass support optional through autoconf
Damien Miller9c8da3c1999-11-12 16:28:02 +1100448 - Fix nasty division-by-zero error in scp.c
449 - Released 1.2pre11
Damien Millerb5f89271999-11-12 14:35:58 +1100450
Damien Millerab18c411999-11-11 10:40:23 +110045119991111
452 - Added (untested) Entropy Gathering Daemon (EGD) support
Damien Miller4236f6e1999-11-12 12:22:31 +1100453 - Fixed /dev/urandom fd leak (Debian bug #49722)
Damien Miller33e511e1999-11-11 11:43:13 +1100454 - Merged OpenBSD CVS changes:
455 - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
456 - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
457 - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
Damien Miller428f2471999-11-11 12:48:35 +1100458 - Fix integer overflow which was messing up scp's progress bar for large
Damien Millerc4c647f1999-12-18 20:54:52 +1100459 file transfers. Fix submitted to OpenBSD developers. Report and fix
460 from Kees Cook <cook@cpoint.net>
Damien Miller5ce662a1999-11-11 17:57:39 +1100461 - Merged more OpenBSD CVS changes:
462 - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal()
463 + krb-cleanup cleanup
464 - [clientloop.c log-client.c log-server.c ]
465 [readconf.c readconf.h servconf.c servconf.h ]
466 [ssh.1 ssh.c ssh.h sshd.8]
467 add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
468 obsoletes QuietMode and FascistLogging in sshd.
Damien Miller776af5d1999-11-12 08:49:09 +1100469 - [sshd.c] fix fatal/assert() bug reported by damien@ibs.com.au:
470 allow session_key_int != sizeof(session_key)
471 [this should fix the pre-assert-removal-core-files]
472 - Updated default config file to use new LogLevel option and to improve
473 readability
474
Damien Millerb77870f1999-11-10 12:48:08 +110047519991110
Damien Miller4236f6e1999-11-12 12:22:31 +1100476 - Merged several minor fixes:
Damien Millerb77870f1999-11-10 12:48:08 +1100477 - ssh-agent commandline parsing
478 - RPM spec file now installs ssh setuid root
479 - Makefile creates libdir
Damien Millerab18c411999-11-11 10:40:23 +1100480 - Merged beginnings of Solaris compability from Marc G. Fournier
481 <marc.fournier@acadiau.ca>
Damien Millerb77870f1999-11-10 12:48:08 +1100482
Damien Millerc7b38ce1999-11-09 10:28:04 +110048319991109
484 - Autodetection of SSL/Crypto library location via autoconf
485 - Fixed location of ssh-askpass to follow autoconf
486 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
487 - Autodetection of RSAref library for US users
488 - Minor doc updates
Damien Millerda217a01999-11-09 10:35:52 +1100489 - Merged OpenBSD CVS changes:
490 - [rsa.c] bugfix: use correct size for memset()
491 - [sshconnect.c] warn if announced size of modulus 'n' != real size
Damien Miller742d2cb1999-11-09 14:28:26 +1100492 - Added GNOME passphrase requestor (use --with-gnome-askpass)
Damien Miller3f51bf51999-11-09 14:46:02 +1100493 - RPM build now creates subpackages
Damien Miller74389c91999-11-09 15:03:01 +1100494 - Released 1.2pre9
Damien Millerc7b38ce1999-11-09 10:28:04 +1100495
Damien Miller356a0b01999-11-08 15:30:59 +110049619991108
497 - Removed debian/ directory. This is now being maintained separately.
498 - Added symlinks for slogin in RPM spec file
499 - Fixed permissions on manpages in RPM spec file
500 - Added references to required libraries in README file
501 - Removed config.h.in from CVS
502 - Removed pwdb support (better pluggable auth is provided by glibc)
503 - Made PAM and requisite libdl optional
504 - Removed lots of unnecessary checks from autoconf
505 - Added support and autoconf test for openpty() function (Unix98 pty support)
506 - Fix for scp not finding ssh if not installed as /usr/bin/ssh
507 - Added TODO file
508 - Merged parts of Debian patch From Phil Hands <phil@hands.com>:
509 - Added ssh-askpass program
510 - Added ssh-askpass support to ssh-add.c
511 - Create symlinks for slogin on install
512 - Fix "distclean" target in makefile
513 - Added example for ssh-agent to manpage
514 - Added support for PAM_TEXT_INFO messages
515 - Disable internal /etc/nologin support if PAM enabled
516 - Merged latest OpenBSD CVS changes:
Damien Millerfd7c9111999-11-08 16:15:55 +1100517 - [all] replace assert() with error, fatal or packet_disconnect
Damien Miller356a0b01999-11-08 15:30:59 +1100518 - [sshd.c] don't send fail-msg but disconnect if too many authentication
519 failures
Damien Miller356a0b01999-11-08 15:30:59 +1100520 - [sshd.c] remove unused argument. ok dugsong
521 - [sshd.c] typo
522 - [rsa.c] clear buffers used for encryption. ok: niels
523 - [rsa.c] replace assert() with error, fatal or packet_disconnect
Damien Miller5ac5f1c1999-11-08 15:50:14 +1100524 - [auth-krb4.c] remove unused argument. ok dugsong
Damien Miller356a0b01999-11-08 15:30:59 +1100525 - Fixed coredump after merge of OpenBSD rsa.c patch
Damien Millere8d90681999-11-08 18:09:57 +1100526 - Released 1.2pre8
Damien Miller356a0b01999-11-08 15:30:59 +1100527
Damien Miller0aa8e531999-11-02 19:05:02 +110052819991102
529 - Merged change from OpenBSD CVS
530 - One-line cleanup in sshd.c
531
Damien Miller744da801999-10-30 09:12:25 +100053219991030
533 - Integrated debian package support from Dan Brosemer <odin@linuxfreak.com>
Damien Miller1e4772c1999-10-30 11:39:56 +1000534 - Merged latest updates for OpenBSD CVS:
535 - channels.[ch] - remove broken x11 fix and document istate/ostate
536 - ssh-agent.c - call setsid() regardless of argv[]
537 - ssh.c - save a few lines when disabling rhosts-{rsa-}auth
538 - Documentation cleanups
539 - Renamed README -> README.Ylonen
540 - Renamed README.openssh ->README
Damien Miller744da801999-10-30 09:12:25 +1000541
Damien Miller070f7a11999-10-29 10:29:29 +100054219991029
543 - Renamed openssh* back to ssh* at request of Theo de Raadt
544 - Incorporated latest changes from OpenBSD's CVS
545 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
546 - Integrated PAM env patch from Nalin Dahyabhai <nalin.dahyabhai@pobox.com>
Damien Miller07a826d1999-10-29 11:49:20 +1000547 - Make distclean now removed configure script
548 - Improved PAM logging
549 - Added some debug() calls for PAM
Damien Miller65b3c131999-10-29 12:37:01 +1000550 - Removed redundant subdirectories
551 - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for
552 building on Debian.
Damien Millerd0562b31999-10-29 13:09:40 +1000553 - Fixed off-by-one error in PAM env patch
554 - Released 1.2pre6
Damien Miller070f7a11999-10-29 10:29:29 +1000555
Damien Miller7f6ea021999-10-28 13:25:17 +100055619991028
557 - Further PAM enhancements.
558 - Much cleaner
559 - Now uses account and session modules for all logins.
560 - Integrated patch from Dan Brosemer <odin@linuxfreak.com>
561 - Build fixes
562 - Autoconf
563 - Change binary names to open*
564 - Fixed autoconf script to detect PAM on RH6.1
565 - Added tests for libpwdb, and OpenBSD functions to autoconf
Damien Millereff18d61999-10-28 14:14:38 +1000566 - Released 1.2pre4
Damien Miller29b5a591999-10-28 15:46:27 +1000567
568 - Imported latest OpenBSD CVS code
569 - Updated README.openssh
Damien Miller34d0b611999-10-28 17:51:40 +1000570 - Released 1.2pre5
Damien Miller29b5a591999-10-28 15:46:27 +1000571
Damien Miller7f6ea021999-10-28 13:25:17 +100057219991027
573 - Adapted PAM patch.
574 - Released 1.0pre2
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000575
Damien Miller7f6ea021999-10-28 13:25:17 +1000576 - Excised my buggy replacements for strlcpy and mkdtemp
577 - Imported correct OpenBSD strlcpy and mkdtemp routines.
578 - Reduced arc4random_stir entropy read to 32 bytes (256 bits)
579 - Picked up correct version number from OpenBSD
580 - Added sshd.pam PAM configuration file
581 - Added sshd.init Redhat init script
582 - Added openssh.spec RPM spec file
583 - Released 1.2pre3
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000584
Damien Miller7f6ea021999-10-28 13:25:17 +100058519991026
586 - Fixed include paths of OpenSSL functions
587 - Use OpenSSL MD5 routines
588 - Imported RC4 code from nanocrypt
589 - Wrote replacements for OpenBSD arc4random* functions
590 - Wrote replacements for strlcpy and mkdtemp
591 - Released 1.0pre1