blob: 24cffde6b1b6ed5a851401091096584027023755 [file] [log] [blame]
Tim Rice1363b3c2002-07-12 09:04:06 -0700120020712
2 - (tim) [Makefile.in] quiet down install-files: and check-user:
Tim Rice4796a292002-07-12 18:11:24 -07003 - (tim) [configure.ac] remove unused filepriv line
Tim Rice1363b3c2002-07-12 09:04:06 -07004
Tim Rice68273952002-07-10 07:40:11 -0700520020710
6 - (tim) [contrib/cygwin/ssh-host-config] explicitely sets the permissions
7 on /var/empty to 755 Patch by vinschen@redhat.com
Ben Lindstromefee0592002-07-11 03:54:43 +00008 - (bal) OpenBSD CVS Sync
9 - itojun@cvs.openbsd.org 2002/07/09 11:56:50
10 [sshconnect.c]
11 silently try next address on connect(2). markus ok
Ben Lindstrome9827732002-07-11 03:56:46 +000012 - itojun@cvs.openbsd.org 2002/07/09 11:56:27
13 [canohost.c]
14 suppress log on reverse lookup failiure, as there's no real value in
15 doing so.
16 markus ok
Ben Lindstromba8df7d2002-07-11 03:58:11 +000017 - itojun@cvs.openbsd.org 2002/07/09 12:04:02
18 [sshconnect.c]
19 ed static function (less warnings)
Ben Lindstrom9c445542002-07-11 03:59:18 +000020 - stevesk@cvs.openbsd.org 2002/07/09 17:46:25
21 [sshd_config.5]
22 clarify no preference ordering in protocol list; ok markus@
Ben Lindstroma6cd75c2002-07-11 04:00:19 +000023 - itojun@cvs.openbsd.org 2002/07/10 10:28:15
24 [sshconnect.c]
25 bark if all connection attempt fails.
Ben Lindstrom6f893882002-07-11 04:01:29 +000026 - deraadt@cvs.openbsd.org 2002/07/10 17:53:54
27 [rijndael.c]
28 use right sizeof in memcpy; markus ok
Tim Rice68273952002-07-10 07:40:11 -070029
Ben Lindstrom99a4e142002-07-09 14:06:40 +00003020020709
31 - (bal) NO_IPPORT_RESERVED_CONCEPT used instead of CYGWIN so other platforms
32 lacking that concept can share it. Patch by vinschen@redhat.com
33
Tim Rice88177242002-07-08 19:02:10 -07003420020708
35 - (tim) [openssh/contrib/solaris/buildpkg.sh] add PKG_INSTALL_ROOT to
36 work in a jumpstart environment. patch by kbrint@rufus.net
Tim Rice2d0bf3d2002-07-08 19:10:05 -070037 - (tim) [Makefile.in] workaround for broken pakadd on some systems.
Tim Ricecbb90662002-07-08 19:17:10 -070038 - (tim) [configure.ac] fix libc89 utimes test. Mention default path for
39 --with-privsep-path=
Tim Rice88177242002-07-08 19:02:10 -070040
Tim Ricecc252062002-07-07 13:30:45 -07004120020707
42 - (tim) [Makefile.in] use umask instead of chmod on $(PRIVSEP_PATH)
Tim Rice9dd30812002-07-07 13:43:36 -070043 - (tim) [acconfig.h configure.ac sshd.c]
44 s/BROKEN_FD_PASSING/DISABLE_FD_PASSING/
Tim Ricee475a3c2002-07-07 14:07:46 -070045 - (tim) [contrib/cygwin/ssh-host-config] sshd account creation fixes
46 patch from vinschen@redhat.com
Ben Lindstrom8abe7362002-07-07 22:07:10 +000047 - (bal) [realpath.c] Updated with OpenBSD tree.
Ben Lindstromc51b9242002-07-07 22:10:15 +000048 - (bal) OpenBSD CVS Sync
49 - deraadt@cvs.openbsd.org 2002/07/04 04:15:33
50 [key.c monitor_wrap.c sftp-glob.c ssh-dss.c ssh-rsa.c]
51 patch memory leaks; grendel@zeitbombe.org
Ben Lindstrom8b2eecd2002-07-07 22:11:51 +000052 - deraadt@cvs.openbsd.org 2002/07/04 08:12:15
53 [channels.c packet.c]
54 blah blah minor nothing as i read and re-read and re-read...
Ben Lindstrom2bf759c2002-07-07 22:13:31 +000055 - markus@cvs.openbsd.org 2002/07/04 10:41:47
56 [key.c monitor_wrap.c ssh-dss.c ssh-rsa.c]
57 don't allocate, copy, and discard if there is not interested in the data;
58 ok deraadt@
Ben Lindstrom8e8ef2a2002-07-07 22:14:55 +000059 - deraadt@cvs.openbsd.org 2002/07/06 01:00:49
60 [log.c]
61 KNF
Ben Lindstrom965710f2002-07-07 22:17:22 +000062 - deraadt@cvs.openbsd.org 2002/07/06 01:01:26
63 [ssh-keyscan.c]
64 KNF, realloc fix, and clean usage
Ben Lindstrom6a9fbc92002-07-07 22:19:13 +000065 - stevesk@cvs.openbsd.org 2002/07/06 17:47:58
66 [ssh-keyscan.c]
67 unused variable
Ben Lindstrom5c98db52002-07-07 22:25:29 +000068 - (bal) Minor KNF on ssh-keyscan.c
Tim Ricecc252062002-07-07 13:30:45 -070069
Tim Ricee958ed32002-07-05 07:12:33 -07007020020705
71 - (tim) [configure.ac] AIX 4.2.1 has authenticate() in libs.
72 Reported by Darren Tucker <dtucker@zip.com.au>
Tim Riceb66e2922002-07-05 16:22:32 -070073 - (tim) [contrib/cygwin/ssh-host-config] double slash corrction
74 from vinschen@redhat.com
Tim Ricee958ed32002-07-05 07:12:33 -070075
Ben Lindstrom92ea0ea2002-07-04 18:11:09 +00007620020704
77 - (bal) Limit data to TTY for AIX only (Newer versions can't handle the
78 faster data rate) Bug #124
Ben Lindstrom604de562002-07-04 18:20:51 +000079 - (bal) glob.c defines TILDE and AIX also defines it. #undef it first.
80 bug #265
Ben Lindstromd00a1a12002-07-04 19:33:49 +000081 - (bal) One too many nulls in ports-aix.c
Ben Lindstrom92ea0ea2002-07-04 18:11:09 +000082
Ben Lindstrom6dbf3002002-07-03 23:33:19 +00008320020703
84 - (bal) Updated contrib/cygwin/ patch by vinschen@redhat.com
Ben Lindstrom723e29a2002-07-03 23:50:00 +000085 - (bal) minor correction to utimes() replacement. Patch by
86 onoe@sm.sony.co.jp
Ben Lindstrom04f9af72002-07-04 00:03:56 +000087 - OpenBSD CVS Sync
88 - markus@cvs.openbsd.org 2002/06/27 08:49:44
89 [dh.c ssh-keyscan.c sshconnect.c]
90 more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@
Ben Lindstrom35a2cb92002-07-04 00:05:06 +000091 - deraadt@cvs.openbsd.org 2002/06/27 09:08:00
92 [monitor.c]
93 improve mm_zalloc check; markus ok
Ben Lindstromeec16fc2002-07-04 00:06:15 +000094 - deraadt@cvs.openbsd.org 2002/06/27 10:35:47
95 [auth2-none.c monitor.c sftp-client.c]
96 use xfree()
Ben Lindstromedd098b2002-07-04 00:07:13 +000097 - stevesk@cvs.openbsd.org 2002/06/27 19:49:08
98 [ssh-keyscan.c]
99 use convtime(); ok markus@
Ben Lindstroma7961622002-07-04 00:08:23 +0000100 - millert@cvs.openbsd.org 2002/06/28 01:49:31
101 [monitor_mm.c]
102 tree(3) wants an int return value for its compare functions and
103 the difference between two pointers is not an int. Just do the
104 safest thing and store the result in a long and then return 0,
105 -1, or 1 based on that result.
Ben Lindstromb1bdc5a2002-07-04 00:09:26 +0000106 - deraadt@cvs.openbsd.org 2002/06/28 01:50:37
107 [monitor_wrap.c]
108 use ssize_t
Ben Lindstromfbbfa842002-07-04 00:10:34 +0000109 - deraadt@cvs.openbsd.org 2002/06/28 10:08:25
110 [sshd.c]
111 range check -u option at invocation
Ben Lindstrom810af962002-07-04 00:11:40 +0000112 - deraadt@cvs.openbsd.org 2002/06/28 23:05:06
113 [sshd.c]
114 gidset[2] -> gidset[1]; markus ok
Ben Lindstrom5a9d0ea2002-07-04 00:12:53 +0000115 - deraadt@cvs.openbsd.org 2002/06/30 21:54:16
116 [auth2.c session.c sshd.c]
117 lint asks that we use names that do not overlap
Ben Lindstroma962c2f2002-07-04 00:14:17 +0000118 - deraadt@cvs.openbsd.org 2002/06/30 21:59:45
119 [auth-bsdauth.c auth-skey.c auth2-chall.c clientloop.c key.c
120 monitor_wrap.c monitor_wrap.h scard.h session.h sftp-glob.c ssh.c
121 sshconnect2.c sshd.c]
122 minor KNF
Ben Lindstromfd2aace2002-07-04 00:15:22 +0000123 - deraadt@cvs.openbsd.org 2002/07/01 16:15:25
124 [msg.c]
125 %u
Ben Lindstrom343010a2002-07-04 00:16:25 +0000126 - markus@cvs.openbsd.org 2002/07/01 19:48:46
127 [sshconnect2.c]
128 for compression=yes, we fallback to no-compression if the server does
129 not support compression, vice versa for compression=no. ok mouring@
Ben Lindstrom43ce2c82002-07-04 00:17:33 +0000130 - markus@cvs.openbsd.org 2002/07/03 09:55:38
131 [ssh-keysign.c]
132 use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
133 in order to avoid a possible Kocher timing attack pointed out by Charles
134 Hannum; ok provos@
Ben Lindstrom5d35a2f2002-07-04 00:19:40 +0000135 - markus@cvs.openbsd.org 2002/07/03 14:21:05
136 [ssh-keysign.8 ssh-keysign.c ssh.c ssh_config]
137 re-enable ssh-keysign's sbit, but make ssh-keysign read
138 /etc/ssh/ssh_config and exit if HostbasedAuthentication is disabled
139 globally. based on discussions with deraadt, itojun and sommerfeld;
140 ok itojun@
Ben Lindstrome06eb682002-07-04 00:27:21 +0000141 - (bal) Failed password attempts don't increment counter on AIX. Bug #145
Ben Lindstromee3a8e42002-07-04 03:07:15 +0000142 - (bal) Missed Makefile.in change. keysign needs readconf.o
Ben Lindstrom51b24882002-07-04 03:08:40 +0000143 - (bal) Clean up aix_usrinfo(). Ignore TTY= period I guess.
Ben Lindstrome06eb682002-07-04 00:27:21 +0000144
Damien Miller23fe57c2002-07-02 17:08:23 +100014520020702
146 - (djm) Use PAM_MSG_MEMBER for PAM_TEXT_INFO messages, use xmalloc &
147 friends consistently. Spotted by Solar Designer <solar@openwall.com>
148
Ben Lindstromde07cbf2002-06-28 16:48:11 +000014920020629
150 - (bal) fix to auth2-pam.c to swap fatal() arguments, A bit of style
151 clean up while I'm near it.
152
Kevin Stevesbdf3e892002-06-27 16:59:50 +000015320020628
154 - (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented
155 options should contain default value. from solar.
Ben Lindstrom59627352002-06-27 18:02:21 +0000156 - (bal) Cygwin uid0 fix by vinschen@redhat.com
Ben Lindstromdd21fe92002-06-27 18:23:20 +0000157 - (bal) s/config.h/includes.h/ in openbsd-compat/ for *.c. Otherwise wise
158 have issues of our fixes not propogating right (ie bcopy instead of
159 memmove). OK tim
Ben Lindstrom68e83112002-06-28 00:37:33 +0000160 - (bal) FreeBSD needs <sys/types.h> to detect if mmap() is supported.
161 Bug #303
Kevin Stevesbdf3e892002-06-27 16:59:50 +0000162
Ben Lindstromd5502182002-06-27 00:12:57 +0000163200206027
164 - OpenBSD CVS Sync
165 - deraadt@cvs.openbsd.org 2002/06/26 14:49:36
166 [monitor.c]
167 correct %u
Ben Lindstromd5bf46e2002-06-27 00:21:03 +0000168 - deraadt@cvs.openbsd.org 2002/06/26 14:50:04
169 [monitor_fdpass.c]
170 use ssize_t for recvmsg() and sendmsg() return
Ben Lindstrom33907492002-06-27 00:21:59 +0000171 - markus@cvs.openbsd.org 2002/06/26 14:51:33
172 [ssh-add.c]
173 fix exit code for -X/-x
Ben Lindstrom08512492002-06-27 00:23:02 +0000174 - deraadt@cvs.openbsd.org 2002/06/26 15:00:32
175 [monitor_wrap.c]
176 more %u
Ben Lindstromfe275982002-06-27 00:25:07 +0000177 - markus@cvs.openbsd.org 2002/06/26 22:27:32
178 [ssh-keysign.c]
179 bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu
Ben Lindstromd5502182002-06-27 00:12:57 +0000180
Kevin Stevescfae58c2002-06-25 22:43:19 +000018120020626
182 - (stevesk) [monitor.c] remove duplicate proto15 dispatch entry for PAM
Ben Lindstromdaa21792002-06-25 23:15:30 +0000183 - (bal) OpenBSD CVS Sync
184 - markus@cvs.openbsd.org 2002/06/23 21:34:07
185 [channels.c]
186 tcode is u_int
Ben Lindstromb48057b2002-06-25 23:16:31 +0000187 - markus@cvs.openbsd.org 2002/06/24 13:12:23
188 [ssh-agent.1]
189 the socket name contains ssh-agent's ppid; via mpech@ from form@
Ben Lindstrom4fed2be2002-06-25 23:17:36 +0000190 - markus@cvs.openbsd.org 2002/06/24 14:33:27
191 [channels.c channels.h clientloop.c serverloop.c]
192 move channel counter to u_int
Ben Lindstromc5a7f4f2002-06-25 23:19:13 +0000193 - markus@cvs.openbsd.org 2002/06/24 14:55:38
194 [authfile.c kex.c ssh-agent.c]
195 cat to (void) when output from buffer_get_X is ignored
Ben Lindstrom9b413972002-06-25 23:20:18 +0000196 - itojun@cvs.openbsd.org 2002/06/24 15:49:22
197 [msg.c]
198 printf type pedant
Ben Lindstromc2df3ec2002-06-25 23:21:41 +0000199 - deraadt@cvs.openbsd.org 2002/06/24 17:57:20
200 [sftp-server.c sshpty.c]
201 explicit (u_int) for uid and gid
Ben Lindstrom6398a0e2002-06-25 23:22:54 +0000202 - markus@cvs.openbsd.org 2002/06/25 16:22:42
203 [authfd.c]
204 unnecessary cast
Ben Lindstromfbcc3f72002-06-25 23:24:18 +0000205 - markus@cvs.openbsd.org 2002/06/25 18:51:04
206 [sshd.c]
207 lightweight do_setusercontext after chroot()
Ben Lindstrom52237272002-06-25 23:38:47 +0000208 - (bal) Updated AIX package build. Patch by dtucker@zip.com.au
Tim Rice2b3897c2002-06-25 16:45:42 -0700209 - (tim) [Makefile.in] fix test on installing ssh-rand-helper.8
Ben Lindstroma95fd3f2002-06-26 00:22:57 +0000210 - (bal) added back in error check for mmap(). I screwed up, Pointed
211 out by stevesk@
Tim Ricee04ee922002-06-25 17:25:47 -0700212 - (tim) [README.privsep] UnixWare tip no longer needed.
Ben Lindstrom4e3c6312002-06-26 00:29:02 +0000213 - (bal) fixed NeXTStep missing munmap() issue. It defines HAVE_MMAP,
214 but it all damned lies.
Kevin Steves40b011c2002-06-26 00:43:57 +0000215 - (stevesk) [README.privsep] more for sshd pseudo-account.
Tim Rice6de3dfd2002-06-25 19:28:55 -0700216 - (tim) [contrib/caldera/openssh.spec] add support for privsep
Damien Millerf18cd162002-06-26 19:12:59 +1000217 - (djm) setlogin needs pgid==pid on BSD/OS; from itojun@
Damien Milleraa151372002-06-26 19:14:08 +1000218 - (djm) OpenBSD CVS Sync
219 - markus@cvs.openbsd.org 2002/06/26 08:53:12
220 [bufaux.c]
221 limit size of BNs to 8KB; ok provos/deraadt
Damien Miller468cd712002-06-26 19:14:25 +1000222 - markus@cvs.openbsd.org 2002/06/26 08:54:18
223 [buffer.c]
224 limit append to 1MB and buffers to 10MB
Damien Miller9403aa22002-06-26 19:14:43 +1000225 - markus@cvs.openbsd.org 2002/06/26 08:55:02
226 [channels.c]
227 limit # of channels to 10000
Damien Millera0796ca2002-06-26 19:15:07 +1000228 - markus@cvs.openbsd.org 2002/06/26 08:58:26
229 [session.c]
230 limit # of env vars to 1000; ok deraadt/djm
Damien Miller530a7542002-06-26 23:27:11 +1000231 - deraadt@cvs.openbsd.org 2002/06/26 13:20:57
232 [monitor.c]
233 be careful in mm_zalloc
Damien Miller990070a2002-06-26 23:51:06 +1000234 - deraadt@cvs.openbsd.org 2002/06/26 13:49:26
235 [session.c]
236 disclose less information from environment files; based on input
237 from djm, and dschultz@uclink.Berkeley.EDU
Damien Millerfb7fd952002-06-26 23:58:39 +1000238 - markus@cvs.openbsd.org 2002/06/26 13:55:37
239 [auth2-chall.c]
240 make sure # of response matches # of queries, fixes int overflow;
241 from ISS
Damien Miller3e36f9f2002-06-26 23:59:10 +1000242 - markus@cvs.openbsd.org 2002/06/26 13:56:27
243 [version.h]
244 3.4
Damien Millerf49035a2002-06-26 19:42:52 +1000245 - (djm) Require krb5 devel for RPM build w/ KrbV
Damien Miller136d4412002-06-26 23:05:16 +1000246 - (djm) Improve PAMAuthenticationViaKbdInt text from Nalin Dahyabhai
247 <nalin@redhat.com>
Damien Millerd4b11d62002-06-26 23:57:12 +1000248 - (djm) Update spec files for release
Damien Miller78682022002-06-26 23:57:59 +1000249 - (djm) Fix int overflow in auth2-pam.c, similar to one discovered by ISS
Damien Miller3e36f9f2002-06-26 23:59:10 +1000250 - (djm) Release 3.4p1
Tim Ricea8959ae2002-06-26 11:05:32 -0700251 - (tim) [contrib/caldera/openssh.spec] remove 2 configure options I put in
252 by mistake
Kevin Stevescfae58c2002-06-25 22:43:19 +0000253
Kevin Steves34f0d8f2002-06-24 16:26:49 +000025420020625
255 - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
Kevin Stevesd4866362002-06-24 16:49:22 +0000256 - (stevesk) [README.privsep] minor updates
Damien Millerd3f6ad22002-06-25 10:24:47 +1000257 - (djm) Create privsep directory and warn if privsep user is missing
258 during make install
Ben Lindstromaa83b982002-06-25 02:28:22 +0000259 - (bal) Started list of PrivSep issues in TODO
Ben Lindstrom6b0c96a2002-06-25 03:22:03 +0000260 - (bal) if mmap() is substandard, don't allow compression on server side.
261 Post 'event' we will add more options.
Tim Rice78688d72002-06-25 10:07:25 -0700262 - (tim) [contrib/caldera/openssh.spec] Sync with Caldera
Ben Lindstromb129be62002-06-25 17:12:26 +0000263 - (bal) moved aix_usrinfo() and noted not setting real TTY. Patch by
264 dtucker@zip.com.au
Tim Rice8eff3192002-06-25 15:35:15 -0700265 - (tim) [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus
266 for Cygwin, Cray, & SCO
Kevin Steves34f0d8f2002-06-24 16:26:49 +0000267
Ben Lindstrom2953d0f2002-06-23 21:20:34 +000026820020624
269 - OpenBSD CVS Sync
270 - deraadt@cvs.openbsd.org 2002/06/23 03:25:50
271 [tildexpand.c]
272 KNF
Ben Lindstrom836f0e92002-06-23 21:21:30 +0000273 - deraadt@cvs.openbsd.org 2002/06/23 03:26:19
274 [cipher.c key.c]
275 KNF
Ben Lindstrom5c385522002-06-23 21:23:20 +0000276 - deraadt@cvs.openbsd.org 2002/06/23 03:30:58
277 [scard.c ssh-dss.c ssh-rsa.c sshconnect.c sshconnect2.c sshd.c sshlogin.c
278 sshpty.c]
279 various KNF and %d for unsigned
Ben Lindstromb1f483f2002-06-23 21:27:18 +0000280 - deraadt@cvs.openbsd.org 2002/06/23 09:30:14
281 [sftp-client.c sftp-client.h sftp-common.c sftp-int.c sftp-server.c
282 sftp.c]
283 bunch of u_int vs int stuff
Ben Lindstrom58d3b722002-06-23 21:28:13 +0000284 - deraadt@cvs.openbsd.org 2002/06/23 09:39:55
285 [ssh-keygen.c]
286 u_int stuff
Ben Lindstrome1353632002-06-23 21:29:23 +0000287 - deraadt@cvs.openbsd.org 2002/06/23 09:46:51
288 [bufaux.c servconf.c]
289 minor KNF. things the fingers do while you read
Ben Lindstrom822b6342002-06-23 21:38:49 +0000290 - deraadt@cvs.openbsd.org 2002/06/23 10:29:52
291 [ssh-agent.c sshd.c]
292 some minor KNF and %u
Ben Lindstrome23f4a32002-06-23 21:40:16 +0000293 - deraadt@cvs.openbsd.org 2002/06/23 20:39:45
294 [session.c]
295 compression_level is u_int
Ben Lindstrom8ada5d02002-06-23 21:42:50 +0000296 - deraadt@cvs.openbsd.org 2002/06/23 21:06:13
297 [sshpty.c]
298 KNF
Ben Lindstroma9d2c892002-06-23 21:48:28 +0000299 - deraadt@cvs.openbsd.org 2002/06/23 21:06:41
300 [channels.c channels.h session.c session.h]
301 display, screen, row, col, xpixel, ypixel are u_int; markus ok
Ben Lindstrom3f584742002-06-23 21:49:25 +0000302 - deraadt@cvs.openbsd.org 2002/06/23 21:10:02
303 [packet.c]
304 packet_get_int() returns unsigned for reason & seqnr
Ben Lindstroma9d2c892002-06-23 21:48:28 +0000305 - (bal) Also fixed IPADDR_IN_DISPLAY case where display, screen, row, col,
306 xpixel are u_int.
307
Ben Lindstrom2953d0f2002-06-23 21:20:34 +0000308
Kevin Steves90d5de72002-06-22 18:51:48 +000030920020623
310 - (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX.
Ben Lindstrom1a1b8512002-06-23 00:18:15 +0000311 - (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset.
Ben Lindstrom883844d2002-06-23 00:20:50 +0000312 - (bal) add extern char *getopt. Based on report by dtucker@zip.com.au
Ben Lindstrom5590aa52002-06-23 00:30:30 +0000313 - OpenBSD CVS Sync
314 - stevesk@cvs.openbsd.org 2002/06/22 02:00:29
315 [ssh.h]
316 correct comment
Ben Lindstrombf69e3b2002-06-23 00:31:24 +0000317 - stevesk@cvs.openbsd.org 2002/06/22 02:40:23
318 [ssh.1]
319 section 5 not 4 for ssh_config
Ben Lindstromc001cd32002-06-23 00:32:11 +0000320 - naddy@cvs.openbsd.org 2002/06/22 11:51:39
321 [ssh.1]
322 typo
Ben Lindstrom624e3f22002-06-23 00:32:57 +0000323 - stevesk@cvs.openbsd.org 2002/06/22 16:32:54
324 [sshd.8]
325 add /var/empty in FILES section
Ben Lindstrom2dfacb32002-06-23 00:33:47 +0000326 - stevesk@cvs.openbsd.org 2002/06/22 16:40:19
327 [sshd.c]
328 check /var/empty owner mode; ok provos@
Ben Lindstromc06bf702002-06-23 00:34:37 +0000329 - stevesk@cvs.openbsd.org 2002/06/22 16:41:57
330 [scp.1]
331 typo
Ben Lindstrom959de992002-06-23 00:35:25 +0000332 - stevesk@cvs.openbsd.org 2002/06/22 16:45:29
333 [ssh-agent.1 sshd.8 sshd_config.5]
334 use process ID vs. pid/PID/process identifier
Ben Lindstrom57f08002002-06-23 00:37:10 +0000335 - stevesk@cvs.openbsd.org 2002/06/22 20:05:27
336 [sshd.c]
337 don't call setsid() if debugging or run from inetd; no "Operation not
338 permitted" errors now; ok millert@ markus@
Ben Lindstrome1c09122002-06-23 00:38:24 +0000339 - stevesk@cvs.openbsd.org 2002/06/22 23:09:51
340 [monitor.c]
341 save auth method before monitor_reset_key_state(); bugzilla bug #284;
342 ok provos@
Kevin Steves90d5de72002-06-22 18:51:48 +0000343
Damien Miller263d68f2002-06-22 00:45:50 +100034420020622
345 - (djm) Update README.privsep; spotted by fries@
Damien Millerf102bf62002-06-22 01:44:45 +1000346 - (djm) Release 3.3p1
Ben Lindstromee9ac352002-06-22 00:26:59 +0000347 - (bal) getopt now can be staticly compiled on those platforms missing
348 optreset. Patch by binder@arago.de
Damien Miller263d68f2002-06-22 00:45:50 +1000349
Damien Miller2d6b8332002-06-21 15:59:49 +100035020020621
351 - (djm) Sync:
352 - djm@cvs.openbsd.org 2002/06/21 05:50:51
353 [monitor.c]
354 Don't initialise compression buffers when compression=no in sshd_config;
355 ok Niels@
Damien Miller444f9fc2002-06-21 16:05:12 +1000356 - ID sync for auth-passwd.c
Damien Miller4903eb42002-06-21 16:20:44 +1000357 - (djm) Warn and disable compression on platforms which can't handle both
358 useprivilegeseparation=yes and compression=yes
Damien Miller53baddb2002-06-21 16:42:41 +1000359 - (djm) contrib/redhat/openssh.spec hacking:
360 - Merge in spec changes from seba@iq.pl (Sebastian Pachuta)
361 - Add new {ssh,sshd}_config.5 manpages
362 - Add new ssh-keysign program and remove setuid from ssh client
Damien Miller2d6b8332002-06-21 15:59:49 +1000363
Ben Lindstrom3c73dfe2002-06-20 23:53:53 +000036420020620
Ben Lindstromf0bfa832002-06-21 00:01:18 +0000365 - (bal) Fixed AIX environment handling, use setpcred() instead of existing
366 code. (Bugzilla Bug 261)
Ben Lindstrom3c73dfe2002-06-20 23:53:53 +0000367 - (bal) OpenBSD CVS Sync
368 - todd@cvs.openbsd.org 2002/06/14 21:35:00
369 [monitor_wrap.c]
370 spelling; from Brian Poole <raj@cerias.purdue.edu>
Ben Lindstrom4eb4c4e2002-06-21 00:04:48 +0000371 - markus@cvs.openbsd.org 2002/06/15 00:01:36
372 [authfd.c authfd.h ssh-add.c ssh-agent.c]
373 break agent key lifetime protocol and allow other contraints for key
374 usage.
Ben Lindstromc90f8a92002-06-21 00:06:54 +0000375 - markus@cvs.openbsd.org 2002/06/15 00:07:38
376 [authfd.c authfd.h ssh-add.c ssh-agent.c]
377 fix stupid typo
Ben Lindstrom45933dd2002-06-21 00:10:58 +0000378 - markus@cvs.openbsd.org 2002/06/15 01:27:48
Ben Lindstrom2b266b72002-06-21 00:08:39 +0000379 [authfd.c authfd.h ssh-add.c ssh-agent.c]
380 remove the CONSTRAIN_IDENTITY messages and introduce a new
381 ADD_ID message with contraints instead. contraints can be
382 only added together with the private key.
Ben Lindstrom61c183b2002-06-21 00:09:54 +0000383 - itojun@cvs.openbsd.org 2002/06/16 21:30:58
384 [ssh-keyscan.c]
385 use TAILQ_xx macro. from lukem@netbsd. markus ok
Ben Lindstrom45933dd2002-06-21 00:10:58 +0000386 - deraadt@cvs.openbsd.org 2002/06/17 06:05:56
387 [scp.c]
388 make usage like man page
Ben Lindstromcb72e4f2002-06-21 00:41:51 +0000389 - deraadt@cvs.openbsd.org 2002/06/19 00:27:55
390 [auth-bsdauth.c auth-skey.c auth1.c auth2-chall.c auth2-none.c authfd.c
391 authfd.h monitor_wrap.c msg.c nchan.c radix.c readconf.c scp.c sftp.1
392 ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c
393 ssh-keysign.c ssh.1 sshconnect.c sshconnect.h sshconnect2.c ttymodes.c
394 xmalloc.h]
395 KNF done automatically while reading....
Ben Lindstrom402c6cc2002-06-21 00:43:42 +0000396 - markus@cvs.openbsd.org 2002/06/19 18:01:00
397 [cipher.c monitor.c monitor_wrap.c packet.c packet.h]
398 make the monitor sync the transfer ssh1 session key;
399 transfer keycontext only for RC4 (this is still depends on EVP
400 implementation details and is broken).
Ben Lindstrom9f049032002-06-21 00:59:05 +0000401 - stevesk@cvs.openbsd.org 2002/06/20 19:56:07
402 [ssh.1 sshd.8]
403 move configuration file options from ssh.1/sshd.8 to
404 ssh_config.5/sshd_config.5; ok deraadt@ millert@
Ben Lindstromba8e0dd2002-06-21 01:00:40 +0000405 - stevesk@cvs.openbsd.org 2002/06/20 20:00:05
406 [scp.1 sftp.1]
407 ssh_config(5)
Ben Lindstrom9721e922002-06-21 01:06:03 +0000408 - stevesk@cvs.openbsd.org 2002/06/20 20:03:34
409 [ssh_config sshd_config]
410 refer to config file man page
Ben Lindstrom23e0f662002-06-21 01:09:47 +0000411 - markus@cvs.openbsd.org 2002/06/20 23:05:56
412 [servconf.c servconf.h session.c sshd.c]
413 allow Compression=yes/no in sshd_config
Ben Lindstrom1b8d7302002-06-21 01:11:36 +0000414 - markus@cvs.openbsd.org 2002/06/20 23:37:12
415 [sshd_config]
416 add Compression
Ben Lindstrom47e1b402002-06-21 01:19:12 +0000417 - stevesk@cvs.openbsd.org 2002/05/25 20:40:08
418 [LICENCE]
419 missed Per Allansson (auth2-chall.c)
Ben Lindstrom115422f2002-06-21 00:26:22 +0000420 - (bal) Cygwin special handling of empty passwords wrong. Patch by
421 vinschen@redhat.com
Ben Lindstrom900464e2002-06-21 01:24:01 +0000422 - (bal) Missed integrating ssh_config.5 and sshd_config.5
Ben Lindstrom90ac0b52002-06-21 01:38:53 +0000423 - (bal) Still more Makefile.in updates for ssh{d}_config.5
Ben Lindstrom3c73dfe2002-06-20 23:53:53 +0000424
Ben Lindstrom0e23ebc2002-06-13 21:34:57 +000042520020613
426 - (bal) typo of setgroup for cygwin. Patch by vinschen@redhat.com
427
Ben Lindstrom24157572002-06-12 16:09:39 +000042820020612
429 - (bal) OpenBSD CVS Sync
430 - markus@cvs.openbsd.org 2002/06/11 23:03:54
431 [ssh.c]
432 remove unused cruft.
Ben Lindstromda394ca2002-06-12 16:11:12 +0000433 - markus@cvs.openbsd.org 2002/06/12 01:09:52
434 [ssh.c]
435 ssh_connect returns 0 on success
Ben Lindstrom837461b2002-06-12 16:57:14 +0000436 - (bal) Build noop setgroups() for cygwin to clean up code (For other
437 platforms without the setgroups() requirement, you MUST define
438 SETGROUPS_NOOP in the configure.ac) Based on patch by vinschen@redhat.com
Ben Lindstromb7ae94d2002-06-12 17:32:30 +0000439 - (bal) Some platforms don't have ONLCR (Notable Mint)
Ben Lindstrom24157572002-06-12 16:09:39 +0000440
Ben Lindstrom494709d2002-06-11 15:42:53 +000044120020611
442 - (bal) ssh-agent.c RCSD fix (|unexpand already done)
Ben Lindstrom5cac4232002-06-11 15:45:02 +0000443 - (bal) OpenBSD CVS Sync
444 - stevesk@cvs.openbsd.org 2002/06/09 22:15:15
445 [ssh.1]
446 update for no setuid root and ssh-keysign; ok deraadt@
Ben Lindstrom18a32a72002-06-11 15:46:34 +0000447 - itojun@cvs.openbsd.org 2002/06/09 22:17:21
448 [sshconnect.c]
449 pass salen to sockaddr_ntop so that we are happy on linux/solaris
Ben Lindstrom2779d282002-06-11 15:47:42 +0000450 - stevesk@cvs.openbsd.org 2002/06/10 16:53:06
451 [auth-rsa.c ssh-rsa.c]
452 display minimum RSA modulus in error(); ok markus@
Ben Lindstrom11d470d2002-06-11 15:50:13 +0000453 - stevesk@cvs.openbsd.org 2002/06/10 16:56:30
454 [ssh-keysign.8]
455 merge in stuff from my man page; ok markus@
Ben Lindstrom1775c9c2002-06-11 15:51:54 +0000456 - stevesk@cvs.openbsd.org 2002/06/10 17:36:23
457 [ssh-add.1 ssh-add.c]
458 use convtime() to parse and validate key lifetime. can now
459 use '-t 2h' etc. ok markus@ provos@
Ben Lindstrom2bf82762002-06-11 15:53:05 +0000460 - stevesk@cvs.openbsd.org 2002/06/10 17:45:20
461 [readconf.c ssh.1]
462 change RhostsRSAAuthentication and RhostsAuthentication default to no
463 since ssh is no longer setuid root by default; ok markus@
Ben Lindstrom914d0372002-06-11 15:55:01 +0000464 - stevesk@cvs.openbsd.org 2002/06/10 21:21:10
465 [ssh_config]
466 update defaults for RhostsRSAAuthentication and RhostsAuthentication
467 here too (all options commented out with default value).
Ben Lindstrom8bb6f362002-06-11 15:59:02 +0000468 - markus@cvs.openbsd.org 2002/06/10 22:28:41
469 [channels.c channels.h session.c]
470 move creation of agent socket to session.c; no need for uidswapping
471 in channel.c.
Ben Lindstromf9c48842002-06-11 16:37:51 +0000472 - markus@cvs.openbsd.org 2002/06/11 04:14:26
473 [ssh.c sshconnect.c sshconnect.h]
474 no longer use uidswap.[ch] from the ssh client
475 run less code with euid==0 if ssh is installed setuid root
476 just switch the euid, don't switch the complete set of groups
477 (this is only needed by sshd). ok provos@
Ben Lindstromce0f6342002-06-11 16:42:49 +0000478 - mpech@cvs.openbsd.org 2002/06/11 05:46:20
479 [auth-krb4.c monitor.h serverloop.c session.c ssh-agent.c sshd.c]
480 pid_t cleanup. Markus need this now to keep hacking.
481 markus@, millert@ ok
Ben Lindstrom9a17c9a2002-06-11 16:47:22 +0000482 - itojun@cvs.openbsd.org 2002/06/11 08:11:45
483 [canohost.c]
484 use "ntop" only after initialized
Ben Lindstrom1aa64272002-06-11 20:28:05 +0000485 - (bal) Cygwin fix up from swap uid clean up in ssh.c patch by
486 vinschen@redhat.com
Ben Lindstrom494709d2002-06-11 15:42:53 +0000487
Ben Lindstromece42042002-06-09 20:00:09 +000048820020609
489 - (bal) OpenBSD CVS Sync
490 - markus@cvs.openbsd.org 2002/06/08 05:07:56
491 [ssh.c]
492 nuke ptrace comment
Ben Lindstroma2071572002-06-09 20:01:48 +0000493 - markus@cvs.openbsd.org 2002/06/08 05:07:09
494 [ssh-keysign.c]
495 only accept 20 byte session ids
Ben Lindstrom4daea862002-06-09 20:04:02 +0000496 - markus@cvs.openbsd.org 2002/06/08 05:17:01
497 [readconf.c readconf.h ssh.1 ssh.c]
498 deprecate FallBackToRsh and UseRsh; patch from djm@
Ben Lindstrom1c2bafe2002-06-09 20:04:50 +0000499 - markus@cvs.openbsd.org 2002/06/08 05:40:01
500 [readconf.c]
501 just warn about Deprecated options for now
Ben Lindstrom7a7483d2002-06-09 20:05:35 +0000502 - markus@cvs.openbsd.org 2002/06/08 05:41:18
503 [ssh_config]
504 remove FallBackToRsh/UseRsh
Ben Lindstromaf0c6d62002-06-09 20:06:29 +0000505 - markus@cvs.openbsd.org 2002/06/08 12:36:53
506 [scp.c]
507 remove FallBackToRsh
Ben Lindstrom2e17b082002-06-09 20:13:27 +0000508 - markus@cvs.openbsd.org 2002/06/08 12:46:14
509 [readconf.c]
510 silently ignore deprecated options, since FallBackToRsh might be passed
511 by remote scp commands.
Ben Lindstrom159ac2e2002-06-09 20:14:54 +0000512 - itojun@cvs.openbsd.org 2002/06/08 21:15:27
513 [sshconnect.c]
514 always use getnameinfo. (diag message only)
Ben Lindstrom2749e1c2002-06-09 20:16:22 +0000515 - markus@cvs.openbsd.org 2002/06/09 04:33:27
516 [sshconnect.c]
517 abort() - > fatal()
Ben Lindstrom05efee12002-06-09 20:20:58 +0000518 - (bal) RCSID tag updates on channels.c, clientloop.c, nchan.c,
519 sftp-client.c, ssh-agenet.c, ssh-keygen.c and connect.h (we did unexpand
520 independant of them)
Ben Lindstromece42042002-06-09 20:00:09 +0000521
Ben Lindstrom35453522002-06-07 14:37:00 +000052220020607
Ben Lindstrom2ab19682002-06-07 16:49:11 +0000523 - (bal) Removed --{enable/disable}-suid-ssh
Ben Lindstrom35453522002-06-07 14:37:00 +0000524 - (bal) Missed __progname in ssh-keysign.c patch by dtucker@zip.com.au
Ben Lindstrom378a4172002-06-07 14:49:56 +0000525 - (bal) use 'LOGIN_PROGRAM' not '/usr/bin/login' in session.c patch by
526 Bertrand.Velle@apogee-com.fr
Ben Lindstrom35453522002-06-07 14:37:00 +0000527
Ben Lindstromfb62a692002-06-06 19:47:11 +000052820020606
529 - (bal) OpenBSD CVS Sync
530 - markus@cvs.openbsd.org 2002/05/15 21:56:38
531 [servconf.c sshd.8 sshd_config]
532 re-enable privsep and disable setuid for post-3.2.2
Ben Lindstrom6a246412002-06-06 19:48:16 +0000533 - markus@cvs.openbsd.org 2002/05/16 22:02:50
534 [cipher.c kex.h mac.c]
535 fix warnings (openssl 0.9.7 requires const)
Ben Lindstromfac77692002-06-06 19:49:54 +0000536 - stevesk@cvs.openbsd.org 2002/05/16 22:09:59
537 [session.c ssh.c]
538 don't limit xauth pathlen on client side and longer print length on
539 server when debug; ok markus@
Ben Lindstrom38ed63d2002-06-06 19:51:06 +0000540 - deraadt@cvs.openbsd.org 2002/05/19 20:54:52
541 [log.h]
542 extra commas in enum not 100% portable
Ben Lindstromf666fec2002-06-06 19:51:58 +0000543 - deraadt@cvs.openbsd.org 2002/05/22 23:18:25
544 [ssh.c sshd.c]
545 spelling; abishoff@arc.nasa.gov
Ben Lindstrom1bad2562002-06-06 19:57:33 +0000546 - markus@cvs.openbsd.org 2002/05/23 19:24:30
547 [authfile.c authfile.h pathnames.h ssh.c sshconnect.c sshconnect.h
548 sshconnect1.c sshconnect2.c ssh-keysign.8 ssh-keysign.c Makefile.in]
549 add /usr/libexec/ssh-keysign: a setuid helper program for hostbased
550 authentication in protocol v2 (needs to access the hostkeys).
Ben Lindstrom9e5bb572002-06-06 19:58:27 +0000551 - markus@cvs.openbsd.org 2002/05/23 19:39:34
552 [ssh.c]
553 add comment about ssh-keysign
Ben Lindstrom5206b952002-06-06 19:59:29 +0000554 - markus@cvs.openbsd.org 2002/05/24 08:45:14
555 [sshconnect2.c]
556 stat ssh-keysign first, print error if stat fails;
557 some debug->error; fix comment
Ben Lindstrom4887da22002-06-06 20:05:57 +0000558 - markus@cvs.openbsd.org 2002/05/25 08:50:39
559 [sshconnect2.c]
560 execlp->execl; from stevesk
Ben Lindstrom855bf3a2002-06-06 20:27:55 +0000561 - markus@cvs.openbsd.org 2002/05/25 18:51:07
562 [auth.h auth2.c auth2-hostbased.c auth2-kbdint.c auth2-none.c
563 auth2-passwd.c auth2-pubkey.c Makefile.in]
564 split auth2.c into one file per method; ok provos@/deraadt@
Ben Lindstrom033a49c2002-06-06 20:30:28 +0000565 - stevesk@cvs.openbsd.org 2002/05/26 20:35:10
566 [ssh.1]
567 sort ChallengeResponseAuthentication; ok markus@
Ben Lindstrom105ccbe2002-06-06 20:33:06 +0000568 - stevesk@cvs.openbsd.org 2002/05/28 16:45:27
569 [monitor_mm.c]
570 print strerror(errno) on mmap/munmap error; ok markus@
Ben Lindstromabff1dd2002-06-06 20:38:49 +0000571 - stevesk@cvs.openbsd.org 2002/05/28 17:28:02
572 [uidswap.c]
573 format spec change/casts and some KNF; ok markus@
Ben Lindstrom10d99362002-06-06 20:44:06 +0000574 - stevesk@cvs.openbsd.org 2002/05/28 21:24:00
575 [uidswap.c]
576 use correct function name in fatal()
Ben Lindstrom20abb752002-06-06 20:45:33 +0000577 - stevesk@cvs.openbsd.org 2002/05/29 03:06:30
578 [ssh.1 sshd.8]
579 spelling
Ben Lindstroma26ea632002-06-06 20:46:25 +0000580 - markus@cvs.openbsd.org 2002/05/29 11:21:57
581 [sshd.c]
582 don't start if privsep is enabled and SSH_PRIVSEP_USER or
583 _PATH_PRIVSEP_CHROOT_DIR are missing; ok deraadt@
Ben Lindstromf088f432002-06-06 20:50:07 +0000584 - markus@cvs.openbsd.org 2002/05/30 08:07:31
585 [cipher.c]
586 use rijndael/aes from libcrypto (openssl >= 0.9.7) instead of
587 our own implementation. allow use of AES hardware via libcrypto,
588 ok deraadt@
Ben Lindstromcec2ea82002-06-06 20:51:04 +0000589 - markus@cvs.openbsd.org 2002/05/31 10:30:33
590 [sshconnect2.c]
591 extent ssh-keysign protocol:
592 pass # of socket-fd to ssh-keysign, keysign verfies locally used
593 ip-address using this socket-fd, restricts fake local hostnames
594 to actual local hostnames; ok stevesk@
Ben Lindstrom511bb242002-06-06 20:52:37 +0000595 - markus@cvs.openbsd.org 2002/05/31 11:35:15
596 [auth.h auth2.c]
597 move Authmethod definitons to per-method file.
Ben Lindstrom01fff0c2002-06-06 20:54:07 +0000598 - markus@cvs.openbsd.org 2002/05/31 13:16:48
599 [key.c]
600 add comment:
601 key_verify returns 1 for a correct signature, 0 for an incorrect signature
602 and -1 on error.
Ben Lindstromceae9d12002-06-06 20:55:04 +0000603 - markus@cvs.openbsd.org 2002/05/31 13:20:50
604 [ssh-rsa.c]
605 pad received signature with leading zeros, because RSA_verify expects
606 a signature of RSA_size. the drafts says the signature is transmitted
607 unpadded (e.g. putty does not pad), reported by anakin@pobox.com
Ben Lindstrom2e14bc72002-06-06 20:56:07 +0000608 - deraadt@cvs.openbsd.org 2002/06/03 12:04:07
609 [ssh.h]
610 compatiblity -> compatibility
611 decriptor -> descriptor
612 authentciated -> authenticated
613 transmition -> transmission
Ben Lindstromdcf6bfb2002-06-06 20:57:17 +0000614 - markus@cvs.openbsd.org 2002/06/04 19:42:35
615 [monitor.c]
616 only allow enabled authentication methods; ok provos@
Ben Lindstromf67e0772002-06-06 20:58:19 +0000617 - markus@cvs.openbsd.org 2002/06/04 19:53:40
618 [monitor.c]
619 save the session id (hash) for ssh2 (it will be passed with the
620 initial sign request) and verify that this value is used during
621 authentication; ok provos@
Ben Lindstrom3dca4f52002-06-06 20:59:25 +0000622 - markus@cvs.openbsd.org 2002/06/04 23:02:06
623 [packet.c]
624 remove __FUNCTION__
Ben Lindstrom7d9c38f2002-06-06 21:40:51 +0000625 - markus@cvs.openbsd.org 2002/06/04 23:05:49
626 [cipher.c monitor.c monitor_fdpass.c monitor_mm.c monitor_wrap.c]
627 __FUNCTION__ -> __func__
Ben Lindstrom22fa01c2002-06-06 21:46:07 +0000628 - markus@cvs.openbsd.org 2002/06/05 16:08:07
629 [ssh-agent.1 ssh-agent.c]
630 '-a bind_address' binds the agent to user-specified unix-domain
631 socket instead of /tmp/ssh-XXXXXXXX/agent.<pid>; ok djm@ (some time ago).
Ben Lindstromb7788f32002-06-06 21:46:08 +0000632 - markus@cvs.openbsd.org 2002/06/05 16:08:07
633 [ssh-agent.1 ssh-agent.c]
634 '-a bind_address' binds the agent to user-specified unix-domain
635 socket instead of /tmp/ssh-XXXXXXXX/agent.<pid>; ok djm@ (some time ago).
Ben Lindstrom21d1ed82002-06-06 21:48:57 +0000636 - markus@cvs.openbsd.org 2002/06/05 16:48:54
637 [ssh-agent.c]
638 copy current request into an extra buffer and just flush this
639 request on errors, ok provos@
Ben Lindstrom2f717042002-06-06 21:52:03 +0000640 - markus@cvs.openbsd.org 2002/06/05 19:57:12
641 [authfd.c authfd.h ssh-add.1 ssh-add.c ssh-agent.c]
642 ssh-add -x for lock and -X for unlocking the agent.
643 todo: encrypt private keys with locked...
Ben Lindstrom163f3b82002-06-06 21:53:11 +0000644 - markus@cvs.openbsd.org 2002/06/05 20:56:39
645 [ssh-add.c]
646 add -x/-X to usage
Ben Lindstrom61d328a2002-06-06 21:54:57 +0000647 - markus@cvs.openbsd.org 2002/06/05 21:55:44
648 [authfd.c authfd.h ssh-add.1 ssh-add.c ssh-agent.c]
649 ssh-add -t life, Set lifetime (in seconds) when adding identities;
650 ok provos@
Ben Lindstromd9d6ab62002-06-06 21:57:01 +0000651 - stevesk@cvs.openbsd.org 2002/06/06 01:09:41
652 [monitor.h]
653 no trailing comma in enum; china@thewrittenword.com
Ben Lindstrom2c140472002-06-06 21:57:54 +0000654 - markus@cvs.openbsd.org 2002/06/06 17:12:44
655 [sftp-server.c]
656 discard remaining bytes of current request; ok provos@
Ben Lindstrom937df1d2002-06-06 21:58:35 +0000657 - markus@cvs.openbsd.org 2002/06/06 17:30:11
658 [sftp-server.c]
659 use get_int() macro (hide iqueue)
Ben Lindstroma93f12f2002-06-07 01:51:06 +0000660 - (bal) Missed msg.[ch] in merge. Required for ssh-keysign.
Ben Lindstrom88d26ed2002-06-07 01:53:59 +0000661 - (bal) Forgot to add msg.c Makefile.in.
Ben Lindstrom4eeccc72002-06-07 01:57:25 +0000662 - (bal) monitor_mm.c typos.
Ben Lindstromb85ab302002-06-07 02:05:25 +0000663 - (bal) Refixed auth2.c. It was never fully commited while spliting out
Ben Lindstrom03bab282002-06-07 03:19:35 +0000664 authentication to different files.
Ben Lindstromdb41d232002-06-07 03:11:38 +0000665 - (bal) ssh-keysign should build and install correctly now. Phase two
666 would be to clean out any dead wood and disable ssh setuid on install.
Ben Lindstrom03bab282002-06-07 03:19:35 +0000667 - (bal) Reverse logic, use __func__ first since it's C99
Ben Lindstromca8943e2002-06-06 20:42:04 +0000668
Kevin Stevesdf75dd22002-06-04 20:52:19 +000066920020604
670 - (stevesk) [channels.c] bug #164 patch from YOSHIFUJI Hideaki (changed
671 setsockopt from debug to error for now).
672
Tim Rice28bbb0c2002-05-27 17:37:32 -070067320020527
674 - (tim) [configure.ac.orig monitor_fdpass.c] Enahnce msghdr tests to address
675 build problem on Irix reported by Dave Love <d.love@dl.ac.uk>. Back out
676 last monitor_fdpass.c changes that are no longer needed with new tests.
677 Patch tested on Irix by Jan-Frode Myklebust <janfrode@parallab.uib.no>
678
Damien Miller74cc5bb2002-05-22 11:02:15 +100067920020522
680 - (djm) Fix spelling mistakes, spotted by Solar Designer i
681 <solar@openwall.com>
Damien Miller8ce82962002-05-22 14:24:01 +1000682 - Sync scard/ (not sure when it drifted)
Damien Miller667fb252002-05-22 14:14:00 +1000683 - (djm) OpenBSD CVS Sync:
684 [auth.c]
685 Fix typo/thinko. Pass in as to auth_approval(), not NULL.
686 Closes PR 2659.
687 - Crank version
Damien Miller23dc10d2002-05-22 14:14:54 +1000688 - Crank RPM spec versions
Damien Miller74cc5bb2002-05-22 11:02:15 +1000689
Kevin Stevesc5041ac2002-05-21 17:50:21 +000069020020521
691 - (stevesk) [sshd.c] bug 245; disable setsid() for now
Kevin Stevesbc5bb552002-05-21 17:59:13 +0000692 - (stevesk) [sshd.c] #ifndef HAVE_CYGWIN for setgroups()
Kevin Stevesc5041ac2002-05-21 17:50:21 +0000693
Tim Rice9de793c2002-05-17 08:59:22 -070069420020517
695 - (tim) [configure.ac] remove extra MD5_MSG="no" line.
696
Ben Lindstrombeecf742002-05-15 15:59:17 +000069720020515
698 - (bal) CVS ID fix up on auth-passwd.c
Ben Lindstrom1650ba32002-05-15 16:07:11 +0000699 - (bal) OpenBSD CVS Sync
700 - deraadt@cvs.openbsd.org 2002/05/07 19:54:36
701 [ssh.h]
702 use ssh uid
Ben Lindstrom973be002002-05-15 16:08:48 +0000703 - deraadt@cvs.openbsd.org 2002/05/08 21:06:34
704 [ssh.h]
705 move to sshd.sshd instead
Ben Lindstrom966bfda2002-05-15 16:09:57 +0000706 - stevesk@cvs.openbsd.org 2002/05/11 20:24:48
707 [ssh.h]
708 typo in comment
Ben Lindstrom58d4daf2002-05-15 16:14:36 +0000709 - itojun@cvs.openbsd.org 2002/05/13 02:37:39
710 [auth-skey.c auth2.c]
711 less warnings. skey_{respond,query} are public (in auth.h)
Ben Lindstroma574cda2002-05-15 16:16:14 +0000712 - markus@cvs.openbsd.org 2002/05/13 20:44:58
713 [auth-options.c auth.c auth.h]
714 move the packet_send_debug handling from auth-options.c to auth.c;
715 ok provos@
Ben Lindstrom17401b62002-05-15 16:17:56 +0000716 - millert@cvs.openbsd.org 2002/05/13 15:53:19
717 [sshd.c]
718 Call setsid() in the child after sshd accepts the connection and forks.
719 This is needed for privsep which calls setlogin() when it changes uids.
720 Without this, there is a race where the login name of an existing
721 connection, as returned by getlogin(), may be changed to the privsep
722 user (sshd). markus@ OK
Ben Lindstrombdde3302002-05-15 16:19:37 +0000723 - markus@cvs.openbsd.org 2002/05/13 21:26:49
724 [auth-rhosts.c]
725 handle debug messages during rhosts-rsa and hostbased authentication;
726 ok provos@
Ben Lindstrom7339b2a2002-05-15 16:25:01 +0000727 - mouring@cvs.openbsd.org 2002/05/15 15:47:49
728 [kex.c monitor.c monitor_wrap.c sshd.c]
729 'monitor' variable clashes with at least one lame platform (NeXT). i
730 Renamed to 'pmonitor'. provos@
Ben Lindstrombb2ce362002-05-15 21:35:43 +0000731 - deraadt@cvs.openbsd.org 2002/05/04 02:39:35
732 [servconf.c sshd.8 sshd_config]
733 enable privsep by default; provos ok
Ben Lindstromc57bbf12002-05-15 21:36:45 +0000734 - millert@cvs.openbsd.org 2002/05/06 23:34:33
735 [ssh.1 sshd.8]
736 Kill/adjust r(login|exec)d? references now that those are no longer in
737 the tree.
Ben Lindstromc5c15dd2002-05-15 21:37:34 +0000738 - markus@cvs.openbsd.org 2002/05/15 21:02:53
739 [servconf.c sshd.8 sshd_config]
740 disable privsep and enable setuid for the 3.2.2 release
Ben Lindstrom7339b2a2002-05-15 16:25:01 +0000741 - (bal) Fixed up PAM case. I think.
Ben Lindstrom2b70e562002-05-15 16:39:51 +0000742 - (bal) Clarified openbsd-compat/*-cray.* Licence provided by Wendy
Ben Lindstrom4e67d382002-05-15 21:50:14 +0000743 - (bal) OpenBSD CVS Sync
744 - markus@cvs.openbsd.org 2002/05/15 21:05:29
745 [version.h]
746 enter OpenSSH_3.2.2
747 - (bal) Caldara, Suse, and Redhat openssh.specs updated.
Ben Lindstrombeecf742002-05-15 15:59:17 +0000748
Kevin Stevesf8defa22002-05-13 23:31:09 +000074920020514
750 - (stevesk) [README.privsep] PAM+privsep works with Solaris 8.
Tim Rice1e28c9e2002-05-13 17:07:18 -0700751 - (tim) [sshpty.c] set tty modes when allocating old style bsd ptys to
752 match what newer style ptys have when allocated. Based on a patch by
753 Roger Cornelius <rac@tenzing.org>
Tim Ricefd6fd242002-05-13 20:50:38 -0700754 - (tim) [README.privsep] UnixWare 7 and OpenUNIX 8 work.
755 - (tim) [README.privsep] remove reference to UnixWare 7 and OpenUNIX 8
756 from PAM-enabled pragraph. UnixWare has no PAM.
Tim Rice8dd6feb2002-05-14 09:03:46 -0700757 - (tim) [contrib/caldera/openssh.spec] update version.
Kevin Stevesf8defa22002-05-13 23:31:09 +0000758
Damien Millera18bbd32002-05-13 10:48:57 +100075920020513
Kevin Steves02281552002-05-13 03:57:04 +0000760 - (stevesk) add initial README.privsep
Kevin Stevesc81e1292002-05-13 03:51:40 +0000761 - (stevesk) [configure.ac] nicer message: --with-privsep-user=user
Damien Miller860e9292002-05-15 10:12:29 +1000762 - (djm) Add --with-superuser-path=xxx configure option to specify
763 what $PATH the superuser receives.
Damien Miller5ad9fd92002-05-13 11:07:41 +1000764 - (djm) Bug #231: UsePrivilegeSeparation turns off Banner.
Damien Millerf58c6722002-05-13 13:15:42 +1000765 - (djm) Add --with-privsep-path configure option
Damien Millerb7cb9692002-05-13 13:26:57 +1000766 - (djm) Update RPM spec file: different superuser path, use
767 /var/empty/sshd for privsep
Damien Millerf71d2a52002-05-13 15:14:08 +1000768 - (djm) Bug #234: missing readpassphrase declaration and defines
Damien Miller860e9292002-05-15 10:12:29 +1000769 - (djm) Add INSTALL warning about SSH protocol 1 blowfish w/
770 OpenSSL < 0.9.6
Damien Millera18bbd32002-05-13 10:48:57 +1000771
Tim Riceaef73712002-05-11 13:17:42 -070077220020511
773 - (tim) [configure.ac] applied a rework of djm's OpenSSL search cleanup patch.
774 Now only searches system and /usr/local/ssl (OpenSSL's default install path)
775 Others must use --with-ssl-dir=....
Tim Rice802b9562002-05-11 15:30:04 -0700776 - (tim) [monitor_fdpass.c] fix for systems that have both
Damien Miller860e9292002-05-15 10:12:29 +1000777 HAVE_ACCRIGHTS_IN_MSGHDR and HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h
778 has #define msg_accrights msg_control
Tim Riceaef73712002-05-11 13:17:42 -0700779
Damien Millercfe4a892002-05-10 12:19:23 +100078020020510
Kevin Stevesf98fb722002-05-10 15:48:52 +0000781 - (stevesk) [auth.c] Shadow account and expiration cleanup. Now
782 check for root forced expire. Still don't check for inactive.
Damien Millercfe4a892002-05-10 12:19:23 +1000783 - (djm) Rework RedHat RPM files. Based on spec from Nalin
784 Dahyabhai <nalin@redhat.com> and patches from
785 Pekka Savola <pekkas@netcore.fi>
Damien Miller87aea252002-05-10 12:20:24 +1000786 - (djm) Try to drop supplemental groups at daemon startup. Patch from
787 RedHat
Ben Lindstrom0b478142002-05-10 02:40:15 +0000788 - (bal) Back all the way out of auth-passwd.c changes. Breaks too many
789 things that don't set pw->pw_passwd.
Damien Millercfe4a892002-05-10 12:19:23 +1000790
Tim Ricea7a5d6d2002-05-09 07:05:59 -070079120020509
792 - (tim) [Makefile.in] Unbreak make -f Makefile.in distprep
Damien Millerffc868f2002-05-09 15:59:13 +1000793
Tim Ricea7a5d6d2002-05-09 07:05:59 -070079420020508
Tim Rice63cf8412002-05-08 15:57:18 -0700795 - (tim) [openbsd-compat/bsd-arc4random.c] fix logic on when seed_rng() is
796 called. Report by Chris Maxwell <maxwell@cs.dal.ca>
Tim Rice0502a472002-05-08 16:04:14 -0700797 - (tim) [Makefile.in configure.ac] set SHELL variable in Makefile
Tim Ricea7a5d6d2002-05-09 07:05:59 -0700798 - (djm) Disable PAM kbd-int auth if privsep is turned on (it doesn't work)
Tim Rice63cf8412002-05-08 15:57:18 -0700799
80020020507
Tim Rice4bd2a192002-05-07 19:51:31 -0700801 - (tim) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
802 Add truncate() emulation to address Bug 208
803
Ben Lindstrom532bbdb2002-05-06 23:06:08 +000080420020506
Damien Miller52910dd2002-05-08 12:18:26 +1000805 - (djm) Unbreak auth-passwd.c for PAM and SIA
Damien Millera33501b2002-05-08 12:24:42 +1000806 - (djm) Unbreak PAM auth for protocol 1. Report from Pekka Savola
807 <pekkas@netcore.fi>
Damien Millerf762a4b2002-05-08 12:27:55 +1000808 - (djm) Don't reinitialise PAM credentials before we have started PAM.
809 Report from Pekka Savola <pekkas@netcore.fi>
810
Damien Miller52910dd2002-05-08 12:18:26 +100081120020506
Ben Lindstrom532bbdb2002-05-06 23:06:08 +0000812 - (bal) Fixed auth-passwd.c to resolve PermitEmptyPassword issue
813
Damien Miller38cd4352002-05-01 13:17:33 +100081420020501
815 - (djm) Import OpenBSD regression tests. Requires BSD make to run
Damien Miller804357a2002-05-01 22:00:22 +1000816 - (djm) Fix readpassphase compilation for systems which have it
Damien Miller38cd4352002-05-01 13:17:33 +1000817
Tim Rice2f092892002-04-29 20:53:12 -070081820020429
819 - (tim) [contrib/caldera/openssh.spec] update fixUP to reflect changes in
820 sshd_config.
821 - (tim) [contrib/cygwin/README] remove reference to regex.
822 patch from Corinna Vinschen <vinschen@redhat.com>
823
Damien Miller13ce9222002-04-26 11:25:40 +100082420020426
825 - (djm) Bug #137, #209: fix make problems for scard/Ssh.bin, do uudecode
826 during distprep only
Damien Miller860e9292002-05-15 10:12:29 +1000827 - (djm) Disable PAM password expiry until a complete fix for bug #188
828 exists
Damien Milleraa100c52002-04-26 16:54:34 +1000829 - (djm) Bug #180: Set ToS bits on IPv4-in-IPv6 mapped addresses. Based on
830 patch from openssh@misc.tecq.org
Damien Miller13ce9222002-04-26 11:25:40 +1000831
Kevin Steves30e494f2002-04-25 17:56:07 +000083220020425
833 - (stevesk) [defines.h] remove USE_TIMEVAL; unused
Kevin Steves0ea1d9d2002-04-25 18:17:04 +0000834 - (stevesk) [acconfig.h auth-passwd.c configure.ac sshd.c] HP-UX 10.26
835 support. bug #184. most from dcole@keysoftsys.com.
Kevin Steves30e494f2002-04-25 17:56:07 +0000836
Damien Miller11ec2812002-04-24 09:48:14 +100083720020424
838 - (djm) OpenBSD CVS Sync
839 - markus@cvs.openbsd.org 2002/04/23 12:54:10
840 [version.h]
841 3.2.1
Damien Miller0150c652002-04-24 09:49:09 +1000842 - djm@cvs.openbsd.org 2002/04/23 22:16:29
843 [sshd.c]
844 Improve error message; ok markus@ stevesk@
Damien Miller11ec2812002-04-24 09:48:14 +1000845
Damien Miller594a71b2002-04-23 20:22:59 +100084620020423
Kevin Steves5feaaef2002-04-23 20:45:55 +0000847 - (stevesk) [acconfig.h configure.ac session.c] LOGIN_NO_ENDOPT for HP-UX
Kevin Steves03df6cd2002-04-23 20:11:13 +0000848 - (stevesk) [acconfig.h] NEED_IN_SYSTM_H unused
Markus Friedl78cf8c32002-04-23 16:41:12 +0200849 - (markus) OpenBSD CVS Sync
850 - markus@cvs.openbsd.org 2002/04/23 12:58:26
851 [radix.c]
852 send complete ticket; semerad@ss1000.ms.mff.cuni.cz
Damien Milleref7c11d2002-04-23 21:13:32 +1000853 - (djm) Trim ChangeLog to include only post-3.1 changes
Damien Miller0b3894d2002-04-23 21:15:31 +1000854 - (djm) Update RPM spec file versions
Damien Miller654a4ef2002-04-23 21:17:17 +1000855 - (djm) Redhat spec enables KrbV by default
Damien Millerf5fea442002-04-23 22:52:45 +1000856 - (djm) Applied OpenSC smartcard updates from Markus &
857 Antti Tapaninen <aet@cc.hut.fi>
858 - (djm) Define BROKEN_REALPATH for AIX, patch from
859 Antti Tapaninen <aet@cc.hut.fi>
Damien Millerf1b9d112002-04-23 23:09:19 +1000860 - (djm) Bug #214: Fix utmp for Irix (don't strip "tty"). Patch from
861 Kevin Taylor <no@nowhere.org> (??) via Philipp Grau
862 <phgrau@zedat.fu-berlin.de>
Damien Millerd77facd2002-04-23 22:59:51 +1000863 - (djm) Bug #213: Simplify CMSG_ALIGN macros to avoid symbol clashes.
864 Reported by Doug Manton <dmanton@emea.att.com>
Damien Miller594a71b2002-04-23 20:22:59 +1000865 - (djm) Bug #222: Fix tests for getaddrinfo on OSF/1. Spotted by
866 Robert Urban <urban@spielwiese.de>
Damien Millerfa2bb692002-04-23 23:22:25 +1000867 - (djm) Bug #206 - blibpath isn't always needed for AIX ld, avoid
868 sizeof(long long int) == 4 breakage. Patch from Matthew Clarke
869 <Matthew_Clarke@mindlink.bc.ca>
Damien Miller79418552002-04-23 20:28:48 +1000870 - (djm) Make privsep work with PAM (still experimental)
Damien Miller3b235662002-04-23 20:42:36 +1000871 - (djm) OpenBSD CVS Sync
872 - deraadt@cvs.openbsd.org 2002/04/20 09:02:03
873 [servconf.c]
874 No, afs requires explicit enabling
875 - markus@cvs.openbsd.org 2002/04/20 09:14:58
876 [bufaux.c bufaux.h]
877 add buffer_{get,put}_short
Damien Millerbad0e012002-04-23 20:46:56 +1000878 - markus@cvs.openbsd.org 2002/04/20 09:17:19
879 [radix.c]
880 rewrite using the buffer_* API, fixes overflow; ok deraadt@
Damien Miller7a8558d2002-04-23 20:51:15 +1000881 - stevesk@cvs.openbsd.org 2002/04/21 16:19:27
882 [sshd.8 sshd_config]
883 document default AFSTokenPassing no; ok deraadt@
Damien Millerf61c0152002-04-23 20:56:02 +1000884 - stevesk@cvs.openbsd.org 2002/04/21 16:25:06
885 [sshconnect1.c]
886 spelling in error message; ok markus@
Damien Miller635fe982002-04-23 21:00:33 +1000887 - markus@cvs.openbsd.org 2002/04/22 06:15:47
888 [radix.c]
889 fix check for overflow
Damien Millerd7de14b2002-04-23 21:04:51 +1000890 - markus@cvs.openbsd.org 2002/04/22 16:16:53
891 [servconf.c sshd.8 sshd_config]
892 do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@
Damien Miller2797f7f2002-04-23 21:09:44 +1000893 - markus@cvs.openbsd.org 2002/04/22 21:04:52
894 [channels.c clientloop.c clientloop.h ssh.c]
895 request reply (success/failure) for -R style fwd in protocol v2,
896 depends on ordered replies.
897 fixes http://bugzilla.mindrot.org/show_bug.cgi?id=215; ok provos@
Damien Miller594a71b2002-04-23 20:22:59 +1000898
Tim Ricef02dccc2002-04-21 11:26:10 -070089920020421
900 - (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0).
Damien Miller860e9292002-05-15 10:12:29 +1000901 entropy.c needs seteuid(getuid()) for the setuid(original_uid) to
902 succeed. Patch by gert@greenie.muc.de. This fixes one part of Bug 208
Tim Ricef02dccc2002-04-21 11:26:10 -0700903
Damien Millera370f4d2002-04-18 22:53:22 +100090420020418
905 - (djm) Avoid SIGCHLD breakage when run from rsync. Fix from
906 Sturle Sunde <sturle.sunde@usit.uio.no>
907
Damien Millerbd638742002-04-17 12:22:58 +100090820020417
Damien Miller860e9292002-05-15 10:12:29 +1000909 - (djm) Tell users to configure /dev/random support into OpenSSL in
910 INSTALL
Damien Miller5efd7102002-04-17 12:30:45 +1000911 - (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca
Tim Rice43a1c132002-04-17 21:19:14 -0700912 - (tim) [configure.ac] Issue warning on --with-default-path=/some_path
913 if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com>
Damien Millerbd638742002-04-17 12:22:58 +1000914
Damien Miller8be24f32002-04-15 13:23:59 +100091520020415
Damien Miller860e9292002-05-15 10:12:29 +1000916 - (djm) Unbreak "make install". Fix from Darren Tucker
917 <dtucker@zip.com.au>
Kevin Steveseb363022002-04-15 22:00:51 +0000918 - (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen
Tim Rice66480f12002-04-15 21:10:09 -0700919 - (tim) [configure.ac] add tests for recvmsg and sendmsg.
920 [monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for
921 systems that HAVE_ACCRIGHTS_IN_MSGHDR but no recvmsg or sendmsg.
Damien Miller8be24f32002-04-15 13:23:59 +1000922
Damien Miller32e48182002-04-14 19:27:12 +100092320020414
924 - (djm) ssh-rand-helper improvements
925 - Add commandline debugging options
926 - Don't write binary data if stdout is a tty (use hex instead)
927 - Give it a manpage
Damien Miller49411ff2002-04-14 23:16:04 +1000928 - (djm) Random number collection doc fixes from Ben
Damien Miller32e48182002-04-14 19:27:12 +1000929
Damien Millerfd4c9ee2002-04-13 11:04:40 +100093020020413
931 - (djm) Add KrbV support patch from Simon Wilkinson <simon@sxw.org.uk>
932
Kevin Steves19fa9b52002-04-12 15:36:07 +000093320020412
934 - (stevesk) [auth-sia.[ch]] add BSD license from Chris Adams
Tim Riceae49fe62002-04-12 10:26:21 -0700935 - (tim) [configure.ac] add <sys/types.h> to msghdr tests. Change -L
936 to -h on testing for /bin being symbolic link
Ben Lindstromc42f7cf2002-04-12 17:44:13 +0000937 - (bal) Mistaken in Cygwin scripts for ssh starting. Patch by
938 Corinna Vinschen <vinschen@redhat.com>
Ben Lindstrom927dfd22002-04-12 18:51:22 +0000939 - (bal) disable privsep if no MAP_ANON. We can re-enable it
940 after the release when we can do more testing.
Kevin Steves19fa9b52002-04-12 15:36:07 +0000941
Kevin Steves0c283d82002-04-11 20:39:40 +000094220020411
943 - (stevesk) [auth-sia.c] cleanup
Tim Rice813f0452002-04-11 20:35:39 -0700944 - (tim) [acconfig.h defines.h includes.h] put includes in includes.h and
945 defines in defines.h [rijndael.c openbsd-compat/fake-socket.h
946 openbsd-compat/inet_aton.c] include "includes.h" instead of "config.h"
947 ok stevesk@
Kevin Steves0c283d82002-04-11 20:39:40 +0000948
Kevin Steves6939b232002-04-10 16:09:51 +000094920020410
Kevin Stevesfe6ca542002-04-10 22:04:54 +0000950 - (stevesk) [configure.ac monitor.c] HAVE_SOCKETPAIR
Kevin Steves6939b232002-04-10 16:09:51 +0000951 - (stevesk) [auth-sia.c] compile fix Chris Adams <cmadams@hiwaay.net>
Ben Lindstromb5115ea2002-04-10 16:17:34 +0000952 - (bal) OpenBSD CVS Sync
953 - markus@cvs.openbsd.org 2002/04/10 08:21:47
954 [auth1.c compat.c compat.h]
Damien Miller860e9292002-05-15 10:12:29 +1000955 strip '@' from username only for KerbV and known broken clients,
956 bug #204
Ben Lindstrom027e4de2002-04-10 16:26:20 +0000957 - markus@cvs.openbsd.org 2002/04/10 08:56:01
958 [version.h]
959 OpenSSH_3.2
960 - Added p1 to idenify Portable release version.
Kevin Steves6939b232002-04-10 16:09:51 +0000961
Ben Lindstrom34b73202002-04-08 18:37:07 +000096220020408
963 - (bal) Minor OpenSC updates. Fix up header locations and update
964 README.smartcard provided by Juha Yrjölä <jyrjola@cc.hut.fi>
965
Kevin Stevesa44e0352002-04-07 16:18:03 +000096620020407
967 - (stevesk) HAVE_CONTROL_IN_MSGHDR; not used right now.
968 Future: we may want to test if fd passing works correctly.
Kevin Stevesc3c82552002-04-07 16:39:12 +0000969 - (stevesk) [monitor_fdpass.c] fatal() for UsePrivilegeSeparation=yes
970 and no fd passing support.
Kevin Steves86b9fe62002-04-07 17:08:53 +0000971 - (stevesk) HAVE_MMAP and HAVE_SYS_MMAN_H and use them in
972 monitor_mm.c
Kevin Stevesb1184bb2002-04-07 18:12:03 +0000973 - (stevesk) remove configure support for poll.h; it was removed
974 from sshd.c a long time ago.
Kevin Steves7ff91122002-04-07 19:22:54 +0000975 - (stevesk) --with-privsep-user; default sshd
Kevin Steves265c9d02002-04-07 22:36:49 +0000976 - (stevesk) wrap munmap() with HAVE_MMAP also.
Kevin Stevesa44e0352002-04-07 16:18:03 +0000977
Damien Miller12db56b2002-04-06 11:12:52 +100097820020406
979 - (djm) Typo in Suse SPEC file. Fix from Carsten Grohmann
980 <carsten.grohmann@dr-baldeweg.de>
Ben Lindstromdc0594c2002-04-06 04:11:28 +0000981 - (bal) Added MAP_FAILED to allow AIX and Trusted HP to compile.
Ben Lindstrom06e95152002-04-06 04:16:45 +0000982 - (bal) OpenBSD CVS Sync
983 - djm@cvs.openbsd.org 2002/04/06 00:30:08
984 [sftp-client.c]
Damien Millerf75fcc62002-04-23 23:32:38 +1000985 Fix occasional corruption on upload due to bad reuse of request
986 id, spotted by chombier@mac.com; ok markus@
Ben Lindstromde3895d2002-04-06 18:29:59 +0000987 - mouring@cvs.openbsd.org 2002/04/06 18:24:09
988 [scp.c]
989 Fixes potental double // within path.
990 http://bugzilla.mindrot.org/show_bug.cgi?id=76
Ben Lindstrom8d601752002-04-06 18:19:38 +0000991 - (bal) Slight update to OpenSC support. Better version checking. patch
992 by Juha Yrjölä <jyrjola@cc.hut.fi>
Ben Lindstrom8ff2a8d2002-04-06 18:58:31 +0000993 - (bal) Revered out of runtime IRIX detection of joblimits. Code is
994 incomplete.
Ben Lindstrom03188012002-04-06 20:30:07 +0000995 - (bal) Quiet down configure.ac if /bin/test does not exist.
Ben Lindstromfdee8ef2002-04-06 23:52:02 +0000996 - (bal) We no longer use atexit()/xatexit()/on_exit()
Damien Miller12db56b2002-04-06 11:12:52 +1000997
Ben Lindstroma42694f2002-04-05 16:11:45 +000099820020405
999 - (bal) Patch for OpenSC SmartCard library; ok markus@; patch by
1000 Juha Yrjölä <jyrjola@cc.hut.fi>
1001 - (bal) Minor documentation update to reflect smartcard library
1002 support changes.
Ben Lindstrom924144e2002-04-05 20:23:35 +00001003 - (bal) Too many <sys/queue.h> issues. Remove all workarounds and
1004 using internal version only.
Ben Lindstroma11e2702002-04-05 22:18:48 +00001005 - (bal) OpenBSD CVS Sync
1006 - stevesk@cvs.openbsd.org 2002/04/05 20:56:21
1007 [sshd.8]
1008 clarify sshrc some and handle X11UseLocalhost=yes; ok markus@
Ben Lindstroma42694f2002-04-05 16:11:45 +00001009
Kevin Stevese683e762002-04-04 19:02:28 +0000101020020404
1011 - (stevesk) [auth-pam.c auth-pam.h auth-passwd.c auth-sia.c auth-sia.h
1012 auth1.c auth2.c] PAM, OSF_SIA password auth cleanup; from djm.
Ben Lindstrom8a725a82002-04-04 22:10:38 +00001013 - (bal) OpenBSD CVS Sync
1014 - markus@cvs.openbsd.org 2002/04/03 09:26:11
1015 [cipher.c myproposal.h]
1016 re-add rijndael-cbc@lysator.liu.se for MacSSH; ash@lab.poc.net
Kevin Stevese683e762002-04-04 19:02:28 +00001017
Ben Lindstromcdb66e02002-04-02 20:17:43 +0000101820020402
1019 - (bal) Hand Sync of scp.c (reverted to upstream code)
1020 - deraadt@cvs.openbsd.org 2002/03/30 17:45:46
1021 [scp.c]
1022 stretch banners
Ben Lindstrom1e259bb2002-04-02 20:53:39 +00001023 - (bal) CVS ID sync of uidswap.c
Ben Lindstrom155b9812002-04-02 20:26:26 +00001024 - (bal) OpenBSD CVS Sync (now for the real sync)
1025 - markus@cvs.openbsd.org 2002/03/27 22:21:45
1026 [ssh-keygen.c]
Damien Miller860e9292002-05-15 10:12:29 +10001027 try to import keys with extra trailing === (seen with ssh.com <
1028 2.0.12)
Ben Lindstrom2bf56e22002-04-02 20:32:46 +00001029 - markus@cvs.openbsd.org 2002/03/28 15:34:51
1030 [session.c]
1031 do not call record_login twice (for use_privsep)
Ben Lindstromc447fee2002-04-02 20:35:35 +00001032 - markus@cvs.openbsd.org 2002/03/29 18:59:32
1033 [session.c session.h]
Damien Miller860e9292002-05-15 10:12:29 +10001034 retrieve last login time before the pty is allocated, store per
1035 session
Ben Lindstrom0d0be022002-04-02 20:39:29 +00001036 - stevesk@cvs.openbsd.org 2002/03/29 19:16:22
1037 [sshd.8]
1038 RSA key modulus size minimum 768; ok markus@
Ben Lindstrom03f39322002-04-02 20:43:11 +00001039 - stevesk@cvs.openbsd.org 2002/03/29 19:18:33
1040 [auth-rsa.c ssh-rsa.c ssh.h]
1041 make RSA modulus minimum #define; ok markus@
Ben Lindstrom47fd8112002-04-02 20:48:19 +00001042 - markus@cvs.openbsd.org 2002/03/30 18:51:15
1043 [monitor.c serverloop.c sftp-int.c sftp.c sshd.c]
1044 check waitpid for EINTR; based on patch from peter@ifm.liu.se
Ben Lindstroma1d81142002-04-02 20:58:11 +00001045 - markus@cvs.openbsd.org 2002/04/01 22:02:16
1046 [sftp-client.c]
1047 20480 is an upper limit for older server
Ben Lindstromf26ff5b2002-04-02 21:00:31 +00001048 - markus@cvs.openbsd.org 2002/04/01 22:07:17
1049 [sftp-client.c]
1050 fallback to stat if server does not support lstat
Ben Lindstromeecdf232002-04-02 21:03:51 +00001051 - markus@cvs.openbsd.org 2002/04/02 11:49:39
1052 [ssh-agent.c]
1053 check $SHELL for -k and -d, too;
1054 http://bugzilla.mindrot.org/show_bug.cgi?id=199
Ben Lindstrom2f3d52a2002-04-02 21:06:18 +00001055 - markus@cvs.openbsd.org 2002/04/02 17:37:48
1056 [sftp.c]
1057 always call log_init()
Ben Lindstrom07739fe2002-04-03 03:03:04 +00001058 - markus@cvs.openbsd.org 2002/04/02 20:11:38
1059 [ssh-rsa.c]
1060 ignore SSH_BUG_SIGBLOB for ssh-rsa; #187
Ben Lindstromaf40bc62002-04-03 03:36:54 +00001061 - (bal) mispelling in uidswap.c (portable only)
Ben Lindstromcdb66e02002-04-02 20:17:43 +00001062
Kevin Stevesbd1901b2002-04-01 18:04:35 +0000106320020401
1064 - (stevesk) [monitor.c] PAM should work again; will *not* work with
1065 UsePrivilegeSeparation=yes.
Kevin Steves38c4a282002-04-02 03:24:56 +00001066 - (stevesk) [auth1.c] fix password auth for protocol 1 when
1067 !USE_PAM && !HAVE_OSF_SIA; merge issue.
Kevin Stevesbd1901b2002-04-01 18:04:35 +00001068
Tim Rice49e457c2002-03-31 11:23:06 -0800106920020331
1070 - (tim) [configure.ac] use /bin/test -L to work around broken builtin on
1071 Solaris 8
Tim Ricec8549622002-03-31 12:49:38 -08001072 - (tim) [sshconnect2.c] change uint32_t to u_int32_t
Tim Rice49e457c2002-03-31 11:23:06 -08001073
Kevin Steves117b06d2002-03-30 17:55:21 +0000107420020330
1075 - (stevesk) [configure.ac] remove header check for sys/ttcompat.h
1076 bug 167
1077
Ben Lindstrom53f18302002-03-27 16:50:03 +0000107820020327
1079 - (bal) 'pw' should be 'authctxt->pw' in auth1.c spotted by
1080 kent@lysator.liu.se
Ben Lindstromf1813842002-03-27 17:18:31 +00001081 - (bal) OpenBSD CVS Sync
1082 - markus@cvs.openbsd.org 2002/03/26 11:34:49
1083 [ssh.1 sshd.8]
1084 update to recent drafts
Ben Lindstromeb041dc2002-03-27 17:20:38 +00001085 - markus@cvs.openbsd.org 2002/03/26 11:37:05
1086 [ssh.c]
1087 update Copyright
Ben Lindstromcd8bbce2002-03-27 17:23:44 +00001088 - markus@cvs.openbsd.org 2002/03/26 15:23:40
1089 [bufaux.c]
1090 do not talk about packets in bufaux
Ben Lindstrom43a5e2f2002-03-27 17:33:17 +00001091 - rees@cvs.openbsd.org 2002/03/26 18:46:59
1092 [scard.c]
Damien Miller860e9292002-05-15 10:12:29 +10001093 try_AUT0 in read_pubkey too, for those paranoid few who want to
1094 acl 'sh'
Ben Lindstrom57686a82002-03-27 17:36:41 +00001095 - markus@cvs.openbsd.org 2002/03/26 22:50:39
1096 [channels.h]
1097 CHANNEL_EFD_OUTPUT_ACTIVE is false for CHAN_CLOSE_RCVD, too
Ben Lindstrome1f9e322002-03-27 17:38:43 +00001098 - markus@cvs.openbsd.org 2002/03/26 23:13:03
1099 [auth-rsa.c]
1100 disallow RSA keys < 768 for protocol 1, too (rhosts-rsa and rsa auth)
Ben Lindstrom59971722002-03-27 17:42:57 +00001101 - markus@cvs.openbsd.org 2002/03/26 23:14:51
1102 [kex.c]
1103 generate a new cookie for each SSH2_MSG_KEXINIT message we send out
Ben Lindstromb57a4bf2002-03-27 18:00:59 +00001104 - mouring@cvs.openbsd.org 2002/03/27 11:45:42
1105 [monitor.c]
1106 monitor_allowed_key() returns int instead of pointer. ok markus@
1107
Kevin Steves6205a182002-03-26 00:12:49 +0000110820020325
1109 - (stevesk) import OpenBSD <sys/tree.h> as "openbsd-compat/tree.h"
Ben Lindstromf90f58d2002-03-26 01:53:03 +00001110 - (bal) OpenBSD CVS Sync
1111 - stevesk@cvs.openbsd.org 2002/03/23 20:57:26
1112 [sshd.c]
1113 setproctitle() after preauth child; ok markus@
Ben Lindstrom3dc40f92002-03-26 02:01:30 +00001114 - markus@cvs.openbsd.org 2002/03/24 16:00:27
1115 [serverloop.c]
1116 remove unused debug
Ben Lindstrom8b08d812002-03-26 02:09:41 +00001117 - markus@cvs.openbsd.org 2002/03/24 16:01:13
1118 [packet.c]
1119 debug->debug3 for extra padding
Ben Lindstromfcad1c92002-03-26 02:20:06 +00001120 - stevesk@cvs.openbsd.org 2002/03/24 17:27:03
1121 [kexgex.c]
1122 typo; ok markus@
Ben Lindstrom31ee7ae2002-03-26 02:36:29 +00001123 - stevesk@cvs.openbsd.org 2002/03/24 17:53:16
1124 [monitor_fdpass.c]
1125 minor cleanup and more error checking; ok markus@
Ben Lindstromc2c6cbc2002-03-26 02:44:44 +00001126 - markus@cvs.openbsd.org 2002/03/24 18:05:29
1127 [scard.c]
1128 we need to figure out AUT0 for sc_private_encrypt, too
Ben Lindstrom2e9d8662002-03-26 02:49:34 +00001129 - stevesk@cvs.openbsd.org 2002/03/24 23:20:00
1130 [monitor.c]
1131 remove "\n" from fatal()
Ben Lindstromf6d367b2002-03-26 02:59:31 +00001132 - markus@cvs.openbsd.org 2002/03/25 09:21:13
1133 [auth-rsa.c]
1134 return 0 (not NULL); tomh@po.crl.go.jp
Ben Lindstrom5facb2b2002-03-26 03:08:47 +00001135 - markus@cvs.openbsd.org 2002/03/25 09:25:06
1136 [auth-rh-rsa.c]
1137 rm bogus comment
Ben Lindstrom0936a5b2002-03-26 03:17:42 +00001138 - markus@cvs.openbsd.org 2002/03/25 17:34:27
1139 [scard.c scard.h ssh-agent.c ssh-keygen.c ssh.c]
1140 change sc_get_key to sc_get_keys and hide smartcard details in scard.c
Ben Lindstromc8615472002-03-26 03:20:45 +00001141 - stevesk@cvs.openbsd.org 2002/03/25 20:12:10
1142 [monitor_mm.c monitor_wrap.c]
1143 ssize_t args use "%ld" and cast to (long)
1144 size_t args use "%lu" and cast to (u_long)
1145 ok markus@ and thanks millert@
Ben Lindstrom4f054602002-03-26 03:23:00 +00001146 - markus@cvs.openbsd.org 2002/03/25 21:04:02
1147 [ssh.c]
1148 simplify num_identity_files handling
Ben Lindstromcf159442002-03-26 03:26:24 +00001149 - markus@cvs.openbsd.org 2002/03/25 21:13:51
1150 [channels.c channels.h compat.c compat.h nchan.c]
Damien Miller860e9292002-05-15 10:12:29 +10001151 don't send stderr data after EOF, accept this from older known
1152 (broken) sshd servers only, fixes
1153 http://bugzilla.mindrot.org/show_bug.cgi?id=179
Ben Lindstrom28364ec2002-03-26 03:42:20 +00001154 - stevesk@cvs.openbsd.org 2002/03/26 03:24:01
1155 [monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h]
1156 $OpenBSD$
Kevin Steves6205a182002-03-26 00:12:49 +00001157
Kevin Stevesb4799a32002-03-24 23:19:54 +0000115820020324
1159 - (stevesk) [session.c] disable LOGIN_NEEDS_TERM until we are sure
1160 it can be removed. only used on solaris. will no longer compile with
1161 privsep shuffling.
1162
Kevin Steves939c9db2002-03-22 17:23:25 +0000116320020322
1164 - (stevesk) HAVE_ACCRIGHTS_IN_MSGHDR configure support
Kevin Steves7e147602002-03-22 18:07:17 +00001165 - (stevesk) [monitor.c monitor_wrap.c] #ifdef HAVE_PW_CLASS_IN_PASSWD
Kevin Steves4846f4a2002-03-22 18:19:53 +00001166 - (stevesk) configure and cpp __FUNCTION__ gymnastics to handle nielsisms
Kevin Steves1adb1202002-03-22 19:32:53 +00001167 - (stevesk) [monitor_fdpass.c] support for access rights style file
1168 descriptor passing
Kevin Steves205cc1e2002-03-22 20:43:05 +00001169 - (stevesk) [auth2.c] merge cleanup/sync
Kevin Steves219bef12002-03-22 20:53:32 +00001170 - (stevesk) [defines.h] hp-ux 11 has ancillary data style fd passing, but
1171 is missing CMSG_LEN() and CMSG_SPACE() macros.
Kevin Steves4435a552002-03-22 21:08:03 +00001172 - (stevesk) [defines.h] #define MAP_ANON MAP_ANONYMOUS for HP-UX; other
1173 platforms may need this--I'm not sure. mmap() issues will need to be
1174 addressed further.
Tim Ricef29a6532002-03-22 13:27:40 -08001175 - (tim) [cipher.c] fix problem with OpenBSD sync
Kevin Steves4408c202002-03-23 02:20:07 +00001176 - (stevesk) [LICENCE] OpenBSD sync
Kevin Steves939c9db2002-03-22 17:23:25 +00001177
Ben Lindstromd45f28c2002-03-22 01:00:57 +0000117820020321
1179 - (bal) OpenBSD CVS Sync
1180 - itojun@cvs.openbsd.org 2002/03/08 06:10:16
1181 [sftp-client.c]
1182 printf type mismatch
Ben Lindstromeb505452002-03-22 01:03:15 +00001183 - itojun@cvs.openbsd.org 2002/03/11 03:18:49
1184 [sftp-client.c]
1185 correct type mismatches (u_int64_t != unsigned long long)
Ben Lindstrom83b79e42002-03-22 01:05:27 +00001186 - itojun@cvs.openbsd.org 2002/03/11 03:19:53
1187 [sftp-client.c]
1188 indent
Ben Lindstrom5c159582002-03-22 01:08:07 +00001189 - markus@cvs.openbsd.org 2002/03/14 15:24:27
1190 [sshconnect1.c]
Damien Miller860e9292002-05-15 10:12:29 +10001191 don't trust size sent by (rogue) server; noted by
1192 s.esser@e-matters.de
Ben Lindstromabcb1452002-03-22 01:10:21 +00001193 - markus@cvs.openbsd.org 2002/03/14 16:38:26
1194 [sshd.c]
1195 split out ssh1 session key decryption; ok provos@
Ben Lindstrom9c8aefe2002-03-22 01:12:58 +00001196 - markus@cvs.openbsd.org 2002/03/14 16:56:33
1197 [auth-rh-rsa.c auth-rsa.c auth.h]
1198 split auth_rsa() for better readability and privsep; ok provos@
Ben Lindstromb61e6df2002-03-22 01:15:33 +00001199 - itojun@cvs.openbsd.org 2002/03/15 11:00:38
1200 [auth.c]
1201 fix file type checking (use S_ISREG). ok by markus
Ben Lindstromce398b22002-03-22 01:17:52 +00001202 - markus@cvs.openbsd.org 2002/03/16 11:24:53
1203 [compress.c]
1204 skip inflateEnd if inflate fails; ok provos@
Ben Lindstrom186b7da2002-03-22 01:20:32 +00001205 - markus@cvs.openbsd.org 2002/03/16 17:22:09
1206 [auth-rh-rsa.c auth.h]
1207 split auth_rhosts_rsa(), ok provos@
Ben Lindstromeacc71b2002-03-22 01:22:27 +00001208 - stevesk@cvs.openbsd.org 2002/03/16 17:41:25
1209 [auth-krb5.c]
1210 BSD license. from Daniel Kouril via Dug Song. ok markus@
Ben Lindstrom2ae18f42002-03-22 01:24:38 +00001211 - provos@cvs.openbsd.org 2002/03/17 20:25:56
1212 [auth.c auth.h auth1.c auth2.c]
Damien Miller860e9292002-05-15 10:12:29 +10001213 getpwnamallow returns struct passwd * only if user valid;
1214 okay markus@
Ben Lindstrom73ab9ba2002-03-22 01:27:35 +00001215 - provos@cvs.openbsd.org 2002/03/18 01:12:14
1216 [auth.h auth1.c auth2.c sshd.c]
1217 have the authentication functions return the authentication context
1218 and then do_authenticated; okay millert@
Ben Lindstromabf31442002-03-22 01:30:40 +00001219 - dugsong@cvs.openbsd.org 2002/03/18 01:30:10
1220 [auth-krb4.c]
1221 set client to NULL after xfree(), from Rolf Braun
1222 <rbraun+ssh@andrew.cmu.edu>
Ben Lindstromb481e132002-03-22 01:35:47 +00001223 - provos@cvs.openbsd.org 2002/03/18 03:41:08
1224 [auth.c session.c]
1225 move auth_approval into getpwnamallow with help from millert@
Ben Lindstrom212faca2002-03-22 01:39:44 +00001226 - markus@cvs.openbsd.org 2002/03/18 17:13:15
1227 [cipher.c cipher.h]
1228 export/import cipher states; needed by ssh-privsep
Ben Lindstromf6027d32002-03-22 01:42:04 +00001229 - markus@cvs.openbsd.org 2002/03/18 17:16:38
1230 [packet.c packet.h]
1231 export/import cipher state, iv and ssh2 seqnr; needed by ssh-privsep
Ben Lindstroma674e8d2002-03-22 01:45:53 +00001232 - markus@cvs.openbsd.org 2002/03/18 17:23:31
1233 [key.c key.h]
1234 add key_demote() for ssh-privsep
Ben Lindstrom88aa1b42002-03-22 01:47:52 +00001235 - provos@cvs.openbsd.org 2002/03/18 17:25:29
1236 [bufaux.c bufaux.h]
1237 buffer_skip_string and extra sanity checking; needed by ssh-privsep
Ben Lindstrom0f345f52002-03-22 01:51:24 +00001238 - provos@cvs.openbsd.org 2002/03/18 17:31:54
1239 [compress.c]
1240 export compression streams for ssh-privsep
Ben Lindstrom7a2073c2002-03-22 02:30:41 +00001241 - provos@cvs.openbsd.org 2002/03/18 17:50:31
Damien Milleree5e3b22002-05-15 10:08:17 +10001242 [auth-bsdauth.c auth-options.c auth-rh-rsa.c auth-rsa.c]
1243 [auth-skey.c auth.h auth1.c auth2-chall.c auth2.c kex.c kex.h kexdh.c]
1244 [kexgex.c servconf.c]
1245 [session.h servconf.h serverloop.c session.c sshd.c]
1246 integrate privilege separated openssh; its turned off by default
1247 for now. work done by me and markus@
Ben Lindstrom000dda52002-03-22 02:33:12 +00001248 - provos@cvs.openbsd.org 2002/03/18 17:53:08
1249 [sshd.8]
1250 credits for privsep
Ben Lindstrom191c8e52002-03-22 02:37:50 +00001251 - provos@cvs.openbsd.org 2002/03/18 17:59:09
1252 [sshd.8]
1253 document UsePrivilegeSeparation
Ben Lindstrom01426a62002-03-22 02:40:03 +00001254 - stevesk@cvs.openbsd.org 2002/03/18 23:52:51
1255 [servconf.c]
1256 UnprivUser/UnprivGroup usable now--specify numeric user/group; ok
1257 provos@
Ben Lindstrom7a7edf72002-03-22 02:42:37 +00001258 - stevesk@cvs.openbsd.org 2002/03/19 03:03:43
1259 [pathnames.h servconf.c servconf.h sshd.c]
1260 _PATH_PRIVSEP_CHROOT_DIR; ok provos@
Ben Lindstrom85520a62002-03-22 02:44:40 +00001261 - stevesk@cvs.openbsd.org 2002/03/19 05:23:08
1262 [sshd.8]
1263 Banner has no default.
Ben Lindstromcb1f60e2002-03-22 02:47:28 +00001264 - mpech@cvs.openbsd.org 2002/03/19 06:32:56
1265 [sftp-int.c]
1266 use xfree() after xstrdup().
1267
1268 markus@ ok
Ben Lindstrom08105192002-03-22 02:50:06 +00001269 - markus@cvs.openbsd.org 2002/03/19 10:35:39
1270 [auth-options.c auth.h session.c session.h sshd.c]
1271 clean up prototypes
Ben Lindstrom6328ab32002-03-22 02:54:23 +00001272 - markus@cvs.openbsd.org 2002/03/19 10:49:35
Damien Milleree5e3b22002-05-15 10:08:17 +10001273 [auth-krb5.c auth-rh-rsa.c auth.c cipher.c key.c misc.h]
1274 [packet.c session.c sftp-client.c sftp-glob.h sftp.c ssh-add.c ssh.c]
1275 [sshconnect2.c sshd.c ttymodes.c]
Ben Lindstrom6328ab32002-03-22 02:54:23 +00001276 KNF whitespace
Ben Lindstrom7ebb6352002-03-22 03:04:08 +00001277 - markus@cvs.openbsd.org 2002/03/19 14:27:39
1278 [auth.c auth1.c auth2.c]
1279 make getpwnamallow() allways call pwcopy()
Ben Lindstromf34e4eb2002-03-22 03:08:30 +00001280 - markus@cvs.openbsd.org 2002/03/19 15:31:47
1281 [auth.c]
1282 check for NULL; from provos@
Ben Lindstromc7431342002-03-22 03:11:49 +00001283 - stevesk@cvs.openbsd.org 2002/03/20 19:12:25
1284 [servconf.c servconf.h ssh.h sshd.c]
1285 for unprivileged user, group do:
1286 pw=getpwnam(SSH_PRIVSEP_USER); do_setusercontext(pw). ok provos@
Ben Lindstrom58b391b2002-03-22 03:21:16 +00001287 - stevesk@cvs.openbsd.org 2002/03/20 21:08:08
1288 [sshd.c]
1289 strerror() on chdir() fail; ok provos@
Ben Lindstrom1ee9ec32002-03-22 03:14:45 +00001290 - markus@cvs.openbsd.org 2002/03/21 10:21:20
1291 [ssh-add.c]
1292 ignore errors for nonexisting default keys in ssh-add,
1293 fixes http://bugzilla.mindrot.org/show_bug.cgi?id=158
Ben Lindstrom5589f4b2002-03-22 03:24:32 +00001294 - jakob@cvs.openbsd.org 2002/03/21 15:17:26
1295 [clientloop.c ssh.1]
1296 add built-in command line for adding new port forwardings on the fly.
1297 based on a patch from brian wellington. ok markus@.
Ben Lindstrom0b675b12002-03-22 03:28:11 +00001298 - markus@cvs.openbsd.org 2002/03/21 16:38:06
1299 [scard.c]
1300 make compile w/ openssl 0.9.7
Ben Lindstrom70e3ad82002-03-22 03:33:43 +00001301 - markus@cvs.openbsd.org 2002/03/21 16:54:53
1302 [scard.c scard.h ssh-keygen.c]
1303 move key upload to scard.[ch]
1304 - markus@cvs.openbsd.org 2002/03/21 16:57:15
1305 [scard.c]
1306 remove const
Ben Lindstromeda98a72002-03-22 03:35:48 +00001307 - markus@cvs.openbsd.org 2002/03/21 16:58:13
1308 [clientloop.c]
1309 remove unused
Ben Lindstrom818659a2002-03-22 03:38:35 +00001310 - rees@cvs.openbsd.org 2002/03/21 18:08:15
1311 [scard.c]
1312 In sc_put_key(), sc_reader_id should be id.
Ben Lindstromfa1336f2002-03-22 03:40:58 +00001313 - markus@cvs.openbsd.org 2002/03/21 20:51:12
1314 [sshd_config]
1315 add privsep (off)
Ben Lindstrom943481c2002-03-22 03:43:46 +00001316 - markus@cvs.openbsd.org 2002/03/21 21:23:34
1317 [sshd.c]
1318 add privsep_preauth() and remove 1 goto; ok provos@
Ben Lindstrom266ec632002-03-22 03:47:38 +00001319 - rees@cvs.openbsd.org 2002/03/21 21:54:34
1320 [scard.c scard.h ssh-keygen.c]
1321 Add PIN-protection for secret key.
Ben Lindstromba72d302002-03-22 03:51:06 +00001322 - rees@cvs.openbsd.org 2002/03/21 22:44:05
1323 [authfd.c authfd.h ssh-add.c ssh-agent.c ssh.c]
1324 Add PIN-protection for secret key.
Ben Lindstrom681d9322002-03-22 03:53:00 +00001325 - markus@cvs.openbsd.org 2002/03/21 23:07:37
1326 [clientloop.c]
1327 remove unused, sync w/ cmdline patch in my tree.
Ben Lindstromfa1336f2002-03-22 03:40:58 +00001328
Tim Rice88f2ab52002-03-17 12:17:34 -0800132920020317
Damien Miller860e9292002-05-15 10:12:29 +10001330 - (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is
1331 wanted, warn if directory does not exist. Put system directories in
1332 front of PATH for finding entorpy commands.
Tim Rice3a423462002-03-17 14:05:24 -08001333 - (tim) [contrib/aix/buildbff.sh contrib/aix/inventory.sh] AIX package
1334 build fixes. Patch by Darren Tucker <dtucker@zip.com.au>
1335 [contrib/solaris/buildpkg.sh] add missing dirs to SYSTEM_DIR. Have
1336 postinstall check for $piddir and add if necessary.
Tim Rice88f2ab52002-03-17 12:17:34 -08001337
Tim Rice29bdd2c2002-03-11 20:55:53 -0800133820020311
1339 - (tim) [contrib/solaris/buildpkg.sh, contrib/solaris/README] Updated to
1340 build on all platforms that support SVR4 style package tools. Now runs
1341 from build dir. Parts are based on patches from Antonio Navarro, and
1342 Darren Tucker.
1343
Damien Millerff8f94c2002-03-11 10:48:53 +1100134420020308
Damien Millerc7375ac2002-03-11 10:51:17 +11001345 - (djm) Revert bits of Markus' OpenSSL compat patch which was
1346 accidentally committed.
1347 - (djm) Add Markus' patch for compat wih OpenSSL < 0.9.6.
1348 Known issue: Blowfish for SSH1 does not work
Kevin Steves58193072002-03-11 00:16:34 +00001349 - (stevesk) entropy.c: typo in debug message
Damien Miller4a10d2e2002-03-11 22:53:29 +11001350 - (djm) ssh-keygen -i needs seeded RNG; report from markus@
Damien Millerff8f94c2002-03-11 10:48:53 +11001351
Tim Rice4796a292002-07-12 18:11:24 -07001352$Id: ChangeLog,v 1.2361 2002/07/13 01:11:24 tim Exp $