blob: d74b4d00b9daa5ae53ff9625135ac8788f85488c [file] [log] [blame]
Damien Miller32b3cf21999-12-26 10:21:48 +1100119991226
2 - Enabled utmpx support by default for Solaris
3 - Cleanup sshd.c PAM a little more
Damien Miller36884401999-12-26 12:26:21 +11004 - Revised RPM package to include Jim Knoble's <jmknoble@pobox.com>
5 X11 ssh-askpass program.
Damien Millerd49621e1999-12-26 14:04:33 +11006 - Disable logging of PAM success and failures, PAM is verbose enough.
7 Unfortunatly there is currently no way to disable auth failure
8 messages. Mention this in UPGRADING file and sent message to PAM
9 developers
Damien Miller4f0fa561999-12-26 14:24:41 +110010 - OpenBSD CVS update:
11 - [ssh-keygen.1 ssh.1]
12 remove ref to .ssh/random_seed, mention .ssh/environment in
13 .Sh FILES, too
Damien Miller32b3cf21999-12-26 10:21:48 +110014
Damien Miller2e1b0821999-12-25 10:11:29 +11001519991225
16 - More fixes from Andre Lucas <andre.lucas@dial.pipex.com>
17 - Cleanup of auth-passwd.c for shadow and MD5 passwords
18 - Cleanup and bugfix of PAM authentication code
Damien Miller32b3cf21999-12-26 10:21:48 +110019 - Released 1.2.1pre20
20
21 - Merged fixes from Ben Taylor <bent@clark.net>
22 - Fixed configure support for PAM. Reported by Naz <96na@eng.cam.ac.uk>
23 - Disabled logging of PAM password authentication failures when password
24 is empty. (e.g start of authentication loop). Reported by Naz
25 <96na@eng.cam.ac.uk>)
Damien Miller2e1b0821999-12-25 10:11:29 +110026
2719991223
28 - Merged later HPUX patch from Andre Lucas
29 <andre.lucas@dial.pipex.com>
30 - Above patch included better utmpx support from Ben Taylor
Damien Miller32b3cf21999-12-26 10:21:48 +110031 <bent@clark.net>
Damien Miller2e1b0821999-12-25 10:11:29 +110032
Damien Miller365199d1999-12-22 00:12:38 +11003319991222
34 - Fix undefined fd_set type in ssh.h from Povl H. Pedersen
35 <pope@netguide.dk>
Damien Miller1b0c2281999-12-22 16:09:48 +110036 - Fix login.c breakage on systems which lack ut_host in struct
37 utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com>
Damien Miller365199d1999-12-22 00:12:38 +110038
Damien Miller76112de1999-12-21 11:18:08 +11003919991221
40 - Integration of large HPUX patch from Andre Lucas
41 <andre.lucas@dial.pipex.com>. Integrating it had a few other
42 benefits:
43 - Ability to disable shadow passwords at configure time
44 - Ability to disable lastlog support at configure time
45 - Support for IP address in $DISPLAY
Damien Millerf039bad1999-12-21 20:57:20 +110046 - OpenBSD CVS update:
47 - [sshconnect.c]
48 say "REMOTE HOST IDENTIFICATION HAS CHANGED"
Damien Millercb7e5f91999-12-21 21:03:09 +110049 - Fix DISABLE_SHADOW support
50 - Allow MD5 passwords even if shadow passwords are disabled
Damien Millere8852911999-12-21 22:50:50 +110051 - Release 1.2.1pre19
Damien Miller76112de1999-12-21 11:18:08 +110052
Damien Millerc4c647f1999-12-18 20:54:52 +11005319991218
54 - Redhat init script patch from Chun-Chung Chen
55 <cjj@u.washington.edu>
Damien Millerfdb7caf1999-12-18 20:57:40 +110056 - Avoid breakage on systems without IPv6 headers
Damien Millerc4c647f1999-12-18 20:54:52 +110057
Damien Millerab8a4da1999-12-16 13:05:30 +11005819991216
59 - Makefile changes for Solaris from Peter Kocks
60 <peter.kocks@baygate.com>
Damien Miller5e7c10e1999-12-16 13:18:04 +110061 - Minor updates to docs
62 - Merged OpenBSD CVS changes:
63 - [authfd.c ssh-agent.c]
64 keysize warnings talk about identity files
65 - [packet.c]
66 "Connection closed by x.x.x.x": fatal() -> log()
Damien Miller8f9d5071999-12-16 15:10:45 +110067 - Correctly handle empty passwords in shadow file. Patch from:
68 "Chris, the Young One" <cky@pobox.com>
69 - Released 1.2.1pre18
Damien Millerab8a4da1999-12-16 13:05:30 +110070
Damien Miller84093e91999-12-15 09:06:28 +11007119991215
72 - Integrated patchs from Juergen Keil <jk@tools.de>
73 - Avoid void* pointer arithmatic
74 - Use LDFLAGS correctly
Damien Miller864ea591999-12-15 11:04:25 +110075 - Fix SIGIO error in scp
76 - Simplify status line printing in scp
Damien Miller3b9d5e91999-12-15 09:34:31 +110077 - Added better test for inline functions compiler support from
78 Darren_Hall@progressive.com
Damien Miller84093e91999-12-15 09:06:28 +110079
Damien Millera34a28b1999-12-14 10:47:15 +11008019991214
81 - OpenBSD CVS Changes
82 - [canohost.c]
83 fix get_remote_port() and friends for sshd -i;
84 Holger.Trapp@Informatik.TU-Chemnitz.DE
85 - [mpaux.c]
86 make code simpler. no need for memcpy. niels@ ok
87 - [pty.c]
88 namebuflen not sizeof namebuflen; bnd@ep-ag.com via djm@mindrot.org
89 fix proto; markus
90 - [ssh.1]
91 typo; mark.baushke@solipsa.com
92 - [channels.c ssh.c ssh.h sshd.c]
93 type conflict for 'extern Type *options' in channels.c; dot@dotat.at
94 - [sshconnect.c]
95 move checking of hostkey into own function.
96 - [version.h]
97 OpenSSH-1.2.1
Damien Miller36b339a1999-12-14 10:54:47 +110098 - Clean up broken includes in pty.c
Damien Miller6ae00d61999-12-14 15:43:03 +110099 - Some older systems don't have poll.h, they use sys/poll.h instead
100 - Doc updates
Damien Millera34a28b1999-12-14 10:47:15 +1100101
Damien Millerc6b3bbe1999-12-13 08:27:33 +110010219991211
103 - Fix compilation on systems with AFS. Reported by
104 aloomis@glue.umd.edu
105 - Fix installation on Solaris. Reported by
106 Gordon Rowell <gordonr@gormand.com.au>
107 - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com,
108 patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
109 - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com>
110 - Compile fix from David Agraz <dagraz@jahoopa.com>
111 - Avoid compiler warning in bsd-snprintf.c
112 - Added pam_limits.so to default PAM config. Suggested by
113 Jim Knoble <jmknoble@pobox.com>
114
Damien Millerbf1c9b21999-12-09 10:16:54 +110011519991209
116 - Import of patch from Ben Taylor <bent@clark.net>:
117 - Improved PAM support
118 - "uninstall" rule for Makefile
119 - utmpx support
120 - Should fix PAM problems on Solaris
Damien Miller50945fa1999-12-09 10:31:37 +1100121 - OpenBSD CVS updates:
122 - [readpass.c]
123 avoid stdio; based on work by markus, millert, and I
124 - [sshd.c]
125 make sure the client selects a supported cipher
126 - [sshd.c]
127 fix sighup handling. accept would just restart and daemon handled
128 sighup only after the next connection was accepted. use poll on
129 listen sock now.
130 - [sshd.c]
131 make that a fatal
Damien Millerd7f66151999-12-09 10:48:58 +1100132 - Applied patch from David Rankin <drankin@bohemians.lexington.ky.us>
133 to fix libwrap support on NetBSD
Damien Miller6646bad1999-12-09 10:42:10 +1100134 - Released 1.2pre17
Damien Millerbf1c9b21999-12-09 10:16:54 +1100135
Damien Millerfce16481999-12-08 08:53:52 +110013619991208
137 - Compile fix for Solaris with /dev/ptmx from
138 David Agraz <dagraz@jahoopa.com>
139
Damien Miller0c078c61999-12-07 14:53:57 +110014019991207
141 - sshd Redhat init script patch from Jim Knoble <jmknoble@pobox.com>
142 fixes compatability with 4.x and 5.x
Damien Miller3bc14dd1999-12-07 14:54:53 +1100143 - Fixed default SSH_ASKPASS
Damien Millereabf3411999-12-07 14:56:27 +1100144 - Fix PAM account and session being called multiple times. Problem
145 reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>
Damien Miller037a0dc1999-12-07 15:38:31 +1100146 - Merged more OpenBSD changes:
147 - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c]
148 move atomicio into it's own file. wrap all socket write()s which
149 were doing write(sock, buf, len) != len, with atomicio() calls.
150 - [auth-skey.c]
151 fd leak
152 - [authfile.c]
153 properly name fd variable
154 - [channels.c]
155 display great hatred towards strcpy
156 - [pty.c pty.h sshd.c]
157 use openpty() if it exists (it does on BSD4_4)
158 - [tildexpand.c]
159 check for ~ expansion past MAXPATHLEN
160 - Modified helper.c to use new atomicio function.
161 - Reformat Makefile a little
162 - Moved RC4 routines from rc4.[ch] into helper.c
163 - Added autoconf code to detect /dev/ptmx (Solaris) and /dev/ptc (AIX)
Damien Milleraf2604a1999-12-07 16:21:40 +1100164 - Updated SuSE spec from Chris Saia <csaia@wtower.com>
165 - Tweaked Redhat spec
Damien Millerf5d69a51999-12-07 16:55:04 +1100166 - Clean up bad imports of a few files (forgot -kb)
167 - Released 1.2pre16
Damien Miller0c078c61999-12-07 14:53:57 +1100168
Damien Millerdc33fc31999-12-04 20:24:48 +110016919991204
170 - Small cleanup of PAM code in sshd.c
Damien Milleraae6c611999-12-06 11:47:28 +1100171 - Merged OpenBSD CVS changes:
172 - [auth-krb4.c auth-passwd.c auth-skey.c ssh.h]
173 move skey-auth from auth-passwd.c to auth-skey.c, same for krb4
174 - [auth-rsa.c]
175 warn only about mismatch if key is _used_
176 warn about keysize-mismatch with log() not error()
177 channels.c readconf.c readconf.h ssh.c ssh.h sshconnect.c
178 ports are u_short
179 - [hostfile.c]
180 indent, shorter warning
181 - [nchan.c]
182 use error() for internal errors
183 - [packet.c]
184 set loglevel for SSH_MSG_DISCONNECT to log(), not fatal()
185 serverloop.c
186 indent
187 - [ssh-add.1 ssh-add.c ssh.h]
188 document $SSH_ASKPASS, reasonable default
189 - [ssh.1]
190 CheckHostIP is not available for connects via proxy command
191 - [sshconnect.c]
192 typo
193 easier to read client code for passwd and skey auth
194 turn of checkhostip for proxy connects, since we don't know the remote ip
Damien Millerdc33fc31999-12-04 20:24:48 +1100195
Damien Miller42b81ff1999-11-26 12:21:24 +110019619991126
197 - Add definition for __P()
198 - Added [v]snprintf() replacement for systems that lack it
199
Damien Miller78224a01999-11-25 11:55:45 +110020019991125
201 - More reformatting merged from OpenBSD CVS
202 - Merged OpenBSD CVS changes:
203 - [channels.c]
204 fix packet_integrity_check() for !have_hostname_in_open.
205 report from mrwizard@psu.edu via djm@ibs.com.au
206 - [channels.c]
207 set SO_REUSEADDR and SO_LINGER for forwarded ports.
208 chip@valinux.com via damien@ibs.com.au
209 - [nchan.c]
210 it's not an error() if shutdown_write failes in nchan.
211 - [readconf.c]
212 remove dead #ifdef-0-code
213 - [readconf.c servconf.c]
214 strcasecmp instead of tolower
215 - [scp.c]
216 progress meter overflow fix from damien@ibs.com.au
217 - [ssh-add.1 ssh-add.c]
218 SSH_ASKPASS support
219 - [ssh.1 ssh.c]
220 postpone fork_after_authentication until command execution,
221 request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
222 plus: use daemon() for backgrounding
Damien Millerd8087f61999-11-25 12:31:26 +1100223 - Added BSD compatible install program and autoconf test, thanks to
224 Niels Kristian Bech Jensen <nkbj@image.dk>
225 - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
Damien Miller063fdf81999-11-25 13:08:31 +1100226 - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
Damien Millerbf3f6ef1999-11-25 13:50:10 +1100227 - Release 1.2pre15
Damien Miller78224a01999-11-25 11:55:45 +1100228
Damien Miller95def091999-11-25 00:26:21 +110022919991124
230 - Merged very large OpenBSD source code reformat
231 - OpenBSD CVS updates
232 - [channels.c cipher.c compat.c log-client.c scp.c serverloop.c]
233 [ssh.h sshd.8 sshd.c]
234 syslog changes:
235 * Unified Logmessage for all auth-types, for success and for failed
236 * Standard connections get only ONE line in the LOG when level==LOG:
237 Auth-attempts are logged only, if authentication is:
238 a) successfull or
239 b) with passwd or
240 c) we had more than AUTH_FAIL_LOG failues
241 * many log() became verbose()
242 * old behaviour with level=VERBOSE
243 - [readconf.c readconf.h ssh.1 ssh.h sshconnect.c sshd.c]
244 tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
245 messages. allows use of s/key in windows (ttssh, securecrt) and
246 ssh-1.2.27 clients without 'ssh -v', ok: niels@
247 - [sshd.8]
248 -V, for fallback to openssh in SSH2 compatibility mode
249 - [sshd.c]
250 fix sigchld race; cjc5@po.cwru.edu
251
Damien Miller294df781999-11-23 10:11:29 +110025219991123
253 - Added SuSE package files from Chris Saia <csaia@wtower.com>
Damien Miller3744b511999-11-23 11:24:32 +1100254 - Restructured package-related files under packages/*
Damien Miller294df781999-11-23 10:11:29 +1100255 - Added generic PAM config
Damien Miller3744b511999-11-23 11:24:32 +1100256 - Numerous little Solaris fixes
Damien Miller4d2f15f1999-11-23 12:36:29 +1100257 - Add recommendation to use GNU make to INSTALL document
Damien Miller294df781999-11-23 10:11:29 +1100258
Damien Miller22218721999-11-22 12:51:42 +110025919991122
260 - Make <enter> close gnome-ssh-askpass (Debian bug #50299)
Damien Miller83df0691999-11-22 13:22:29 +1100261 - OpenBSD CVS Changes
262 - [ssh-keygen.c]
263 don't create ~/.ssh only if the user wants to store the private
264 key there. show fingerprint instead of public-key after
265 keygeneration. ok niels@
Damien Millerb3ca3aa1999-11-22 13:57:07 +1100266 - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h
Damien Miller859cec01999-11-22 14:27:24 +1100267 - Added timersub() macro
Damien Millerb3ca3aa1999-11-22 13:57:07 +1100268 - Tidy RCSIDs of bsd-*.c
Damien Miller859cec01999-11-22 14:27:24 +1100269 - Added autoconf test and macro to deal with old PAM libraries
270 pam_strerror definition (one arg vs two).
Damien Millerd71b12e1999-11-22 15:24:34 +1100271 - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>)
272 - Retry /dev/urandom reads interrupted by signal (report from
273 Robert Hardy <rhardy@webcon.net>)
Damien Millerd7702521999-11-22 16:11:05 +1100274 - Added a setenv replacement for systems which lack it
Damien Millerd733c911999-11-22 18:11:23 +1100275 - Only display public key comment when presenting ssh-askpass dialog
276 - Released 1.2pre14
Damien Miller22218721999-11-22 12:51:42 +1100277
Damien Millerf7c0f821999-11-22 22:31:49 +1100278 - Configure, Make and changelog corrections from Tudor Bosman
279 <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk>
280
Damien Miller6162d121999-11-21 13:23:52 +110028119991121
Damien Miller83df0691999-11-22 13:22:29 +1100282 - OpenBSD CVS Changes:
Damien Miller22218721999-11-22 12:51:42 +1100283 - [channels.c]
284 make this compile, bad markus
285 - [log.c readconf.c servconf.c ssh.h]
286 bugfix: loglevels are per host in clientconfig,
287 factor out common log-level parsing code.
288 - [servconf.c]
289 remove unused index (-Wall)
290 - [ssh-agent.c]
291 only one 'extern char *__progname'
292 - [sshd.8]
293 document SIGHUP, -Q to synopsis
294 - [sshconnect.c serverloop.c sshd.c packet.c packet.h]
295 [channels.c clientloop.c]
296 SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
297 [hope this time my ISP stays alive during commit]
298 - [OVERVIEW README] typos; green@freebsd
299 - [ssh-keygen.c]
300 replace xstrdup+strcat with strlcat+fixed buffer, fixes OF (bad me)
301 exit if writing the key fails (no infinit loop)
302 print usage() everytime we get bad options
303 - [ssh-keygen.c] overflow, djm@mindrot.org
304 - [sshd.c] fix sigchld race; cjc5@po.cwru.edu
305
Damien Millerc6398ef1999-11-20 12:18:40 +110030619991120
307 - Merged more Solaris support from Marc G. Fournier
308 <marc.fournier@acadiau.ca>
309 - Wrote autoconf tests for integer bit-types
310 - Fixed enabling kerberos support
Damien Millerf58db381999-11-20 17:02:56 +1100311 - Fix segfault in ssh-keygen caused by buffer overrun in filename
312 handling.
Damien Millerc6398ef1999-11-20 12:18:40 +1100313
Damien Miller5bbbd361999-11-19 07:56:21 +110031419991119
315 - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>
Damien Miller23b78391999-11-19 08:25:48 +1100316 - Merged OpenBSD CVS changes
317 - [auth-rhosts.c auth-rsa.c ssh-agent.c sshconnect.c sshd.c]
318 more %d vs. %s in fmt-strings
319 - [authfd.c]
320 Integers should not be printed with %s
Damien Miller58fc4731999-11-19 12:05:01 +1100321 - EGD uses a socket, not a named pipe. Duh.
322 - Fix includes in fingerprint.c
Damien Millerdc9365b1999-11-19 12:34:14 +1100323 - Fix scp progress bar bug again.
Damien Millerf7c0f821999-11-22 22:31:49 +1100324 - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of
Damien Miller18ac1711999-11-19 12:43:19 +1100325 David Rankin <drankin@bohemians.lexington.ky.us>
Damien Miller80297751999-11-19 13:03:25 +1100326 - Added autoconf option to enable Kerberos 4 support (untested)
327 - Added autoconf option to enable AFS support (untested)
328 - Added autoconf option to enable S/Key support (untested)
329 - Added autoconf option to enable TCP wrappers support (compiles OK)
Damien Miller04f80141999-11-19 15:32:34 +1100330 - Renamed BSD helper function files to bsd-*
Damien Millerdd1c7ba1999-11-19 15:53:20 +1100331 - Added tests for login and daemon and enable OpenBSD replacements for
332 when they are absent.
333 - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu>
Damien Miller5bbbd361999-11-19 07:56:21 +1100334
Damien Miller81428f91999-11-18 09:28:11 +110033519991118
336 - Merged OpenBSD CVS changes
337 - [scp.c] foregroundproc() in scp
338 - [sshconnect.h] include fingerprint.h
339 - [sshd.c] bugfix: the log() for passwd-auth escaped during logging
340 changes.
Damien Miller6ee95641999-11-18 11:35:13 +1100341 - [ssh.1] Spell my name right.
Damien Miller81428f91999-11-18 09:28:11 +1100342 - Added openssh.com info to README
343
Damien Miller10f6f6b1999-11-17 17:29:08 +110034419991117
345 - Merged OpenBSD CVS changes
346 - [ChangeLog.Ylonen] noone needs this anymore
347 - [authfd.c] close-on-exec for auth-socket, ok deraadt
348 - [hostfile.c]
349 in known_hosts key lookup the entry for the bits does not need
350 to match, all the information is contained in n and e. This
351 solves the problem with buggy servers announcing the wrong
352 modulus length. markus and me.
353 - [serverloop.c]
354 bugfix: check for space if child has terminated, from:
355 iedowse@maths.tcd.ie
356 - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c]
357 [fingerprint.c fingerprint.h]
358 rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>
359 - [ssh-agent.1] typo
360 - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@
361 - [sshd.c]
362 force logging to stderr while loading private key file
363 (lost while converting to new log-levels)
364
Damien Miller7e8e8201999-11-16 13:37:16 +110036519991116
366 - Fix some Linux libc5 problems reported by Miles Wilson <mw@mctitle.com>
367 - Merged OpenBSD CVS changes:
368 - [auth-rh-rsa.c auth-rsa.c authfd.c authfd.h hostfile.c mpaux.c]
369 [mpaux.h ssh-add.c ssh-agent.c ssh.h ssh.c sshd.c]
370 the keysize of rsa-parameter 'n' is passed implizit,
371 a few more checks and warnings about 'pretended' keysizes.
372 - [cipher.c cipher.h packet.c packet.h sshd.c]
373 remove support for cipher RC4
374 - [ssh.c]
375 a note for legay systems about secuity issues with permanently_set_uid(),
376 the private hostkey and ptrace()
377 - [sshconnect.c]
378 more detailed messages about adding and checking hostkeys
379
Damien Millerd05a2471999-11-15 14:25:30 +110038019991115
381 - Merged OpenBSD CVS changes:
382 - [ssh-add.c] change passphrase loop logic and remove ref to
383 $DISPLAY, ok niels
384 - Changed to ssh-add.c broke askpass support. Revised it to be a little more
385 modular.
386 - Revised autoconf support for enabling/disabling askpass support.
Damien Miller2ccf6611999-11-15 15:25:10 +1100387 - Merged more OpenBSD CVS changes:
388 [auth-krb4.c]
389 - disconnect if getpeername() fails
390 - missing xfree(*client)
391 [canohost.c]
392 - disconnect if getpeername() fails
393 - fix comment: we _do_ disconnect if ip-options are set
394 [sshd.c]
395 - disconnect if getpeername() fails
396 - move checking of remote port to central place
397 [auth-rhosts.c] move checking of remote port to central place
398 [log-server.c] avoid extra fd per sshd, from millert@
399 [readconf.c] print _all_ bad config-options in ssh(1), too
400 [readconf.h] print _all_ bad config-options in ssh(1), too
401 [ssh.c] print _all_ bad config-options in ssh(1), too
402 [sshconnect.c] disconnect if getpeername() fails
403 - OpenBSD's changes to sshd.c broke the PAM stuff, re-merged it.
Damien Miller3bd49ec1999-11-15 15:40:55 +1100404 - Various small cleanups to bring diff (against OpenBSD) size down.
Damien Miller3f905871999-11-15 17:10:57 +1100405 - Merged more Solaris compability from Marc G. Fournier
406 <marc.fournier@acadiau.ca>
407 - Wrote autoconf tests for __progname symbol
Damien Miller36682061999-11-15 17:19:24 +1100408 - RPM spec file fixes from Jim Knoble <jmknoble@pobox.com>
Damien Miller2e8b1c81999-11-15 23:33:56 +1100409 - Released 1.2pre12
410
411 - Another OpenBSD CVS update:
412 - [ssh-keygen.1] fix .Xr
Damien Millerd05a2471999-11-15 14:25:30 +1100413
Damien Miller0a6e6681999-11-15 09:56:06 +110041419991114
415 - Solaris compilation fixes (still imcomplete)
416
Damien Millerb0284381999-11-13 13:30:28 +110041719991113
Damien Miller192bd011999-11-13 23:56:35 +1100418 - Build patch from Niels Kristian Bech Jensen <nkbj@image.dk>
419 - Don't install config files if they already exist
420 - Fix inclusion of additional preprocessor directives from acconfig.h
Damien Millerb0284381999-11-13 13:30:28 +1100421 - Removed redundant inclusions of config.h
Damien Millerc6d5ce81999-11-15 16:01:07 +1100422 - Added 'Obsoletes' lines to RPM spec file
Damien Millerb0284381999-11-13 13:30:28 +1100423 - Merged OpenBSD CVS changes:
424 - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels
425 - [scp.c] fix overflow reported by damien@ibs.com.au: off_t
426 totalsize, ok niels,aaron
427 - Delay fork (-f option) in ssh until after port forwarded connections
428 have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi>
Damien Miller2cb210f1999-11-13 15:40:10 +1100429 - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de>
430 - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled
Damien Miller192bd011999-11-13 23:56:35 +1100431 - Tidied default config file some more
432 - Revised Redhat initscript to fix bug: sshd (re)start would fail
433 if executed from inside a ssh login.
Damien Millerb0284381999-11-13 13:30:28 +1100434
Damien Miller776af5d1999-11-12 08:49:09 +110043519991112
436 - Merged changes from OpenBSD CVS
437 - [sshd.c] session_key_int may be zero
Damien Miller32265091999-11-12 11:33:04 +1100438 - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config]
439 IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok
440 deraadt,millert
441 - Brought default sshd_config more in line with OpenBSD's
Damien Millerb9a692d1999-11-12 12:09:36 +1100442 - Grab server in gnome-ssh-askpass (Debian bug #49872)
443 - Released 1.2pre10
Damien Miller776af5d1999-11-12 08:49:09 +1100444
Damien Millerb5f89271999-11-12 14:35:58 +1100445 - Added INSTALL documentation
Damien Miller6d7b2cd1999-11-12 15:19:27 +1100446 - Merged yet more changes from OpenBSD CVS
447 - [auth-rh-rsa.c auth-rhosts.c auth-rsa.c channels.c clientloop.c]
448 [ssh.c ssh.h sshconnect.c sshd.c]
449 make all access to options via 'extern Options options'
450 and 'extern ServerOptions options' respectively;
451 options are no longer passed as arguments:
452 * make options handling more consistent
453 * remove #include "readconf.h" from ssh.h
454 * readconf.h is only included if necessary
455 - [mpaux.c] clear temp buffer
456 - [servconf.c] print _all_ bad options found in configfile
Damien Miller3d1b22c1999-11-12 15:46:08 +1100457 - Make ssh-askpass support optional through autoconf
Damien Miller9c8da3c1999-11-12 16:28:02 +1100458 - Fix nasty division-by-zero error in scp.c
459 - Released 1.2pre11
Damien Millerb5f89271999-11-12 14:35:58 +1100460
Damien Millerab18c411999-11-11 10:40:23 +110046119991111
462 - Added (untested) Entropy Gathering Daemon (EGD) support
Damien Miller4236f6e1999-11-12 12:22:31 +1100463 - Fixed /dev/urandom fd leak (Debian bug #49722)
Damien Miller33e511e1999-11-11 11:43:13 +1100464 - Merged OpenBSD CVS changes:
465 - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
466 - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
467 - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
Damien Miller428f2471999-11-11 12:48:35 +1100468 - Fix integer overflow which was messing up scp's progress bar for large
Damien Millerc4c647f1999-12-18 20:54:52 +1100469 file transfers. Fix submitted to OpenBSD developers. Report and fix
470 from Kees Cook <cook@cpoint.net>
Damien Miller5ce662a1999-11-11 17:57:39 +1100471 - Merged more OpenBSD CVS changes:
472 - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal()
473 + krb-cleanup cleanup
474 - [clientloop.c log-client.c log-server.c ]
475 [readconf.c readconf.h servconf.c servconf.h ]
476 [ssh.1 ssh.c ssh.h sshd.8]
477 add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
478 obsoletes QuietMode and FascistLogging in sshd.
Damien Miller776af5d1999-11-12 08:49:09 +1100479 - [sshd.c] fix fatal/assert() bug reported by damien@ibs.com.au:
480 allow session_key_int != sizeof(session_key)
481 [this should fix the pre-assert-removal-core-files]
482 - Updated default config file to use new LogLevel option and to improve
483 readability
484
Damien Millerb77870f1999-11-10 12:48:08 +110048519991110
Damien Miller4236f6e1999-11-12 12:22:31 +1100486 - Merged several minor fixes:
Damien Millerb77870f1999-11-10 12:48:08 +1100487 - ssh-agent commandline parsing
488 - RPM spec file now installs ssh setuid root
489 - Makefile creates libdir
Damien Millerab18c411999-11-11 10:40:23 +1100490 - Merged beginnings of Solaris compability from Marc G. Fournier
491 <marc.fournier@acadiau.ca>
Damien Millerb77870f1999-11-10 12:48:08 +1100492
Damien Millerc7b38ce1999-11-09 10:28:04 +110049319991109
494 - Autodetection of SSL/Crypto library location via autoconf
495 - Fixed location of ssh-askpass to follow autoconf
496 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
497 - Autodetection of RSAref library for US users
498 - Minor doc updates
Damien Millerda217a01999-11-09 10:35:52 +1100499 - Merged OpenBSD CVS changes:
500 - [rsa.c] bugfix: use correct size for memset()
501 - [sshconnect.c] warn if announced size of modulus 'n' != real size
Damien Miller742d2cb1999-11-09 14:28:26 +1100502 - Added GNOME passphrase requestor (use --with-gnome-askpass)
Damien Miller3f51bf51999-11-09 14:46:02 +1100503 - RPM build now creates subpackages
Damien Miller74389c91999-11-09 15:03:01 +1100504 - Released 1.2pre9
Damien Millerc7b38ce1999-11-09 10:28:04 +1100505
Damien Miller356a0b01999-11-08 15:30:59 +110050619991108
507 - Removed debian/ directory. This is now being maintained separately.
508 - Added symlinks for slogin in RPM spec file
509 - Fixed permissions on manpages in RPM spec file
510 - Added references to required libraries in README file
511 - Removed config.h.in from CVS
512 - Removed pwdb support (better pluggable auth is provided by glibc)
513 - Made PAM and requisite libdl optional
514 - Removed lots of unnecessary checks from autoconf
515 - Added support and autoconf test for openpty() function (Unix98 pty support)
516 - Fix for scp not finding ssh if not installed as /usr/bin/ssh
517 - Added TODO file
518 - Merged parts of Debian patch From Phil Hands <phil@hands.com>:
519 - Added ssh-askpass program
520 - Added ssh-askpass support to ssh-add.c
521 - Create symlinks for slogin on install
522 - Fix "distclean" target in makefile
523 - Added example for ssh-agent to manpage
524 - Added support for PAM_TEXT_INFO messages
525 - Disable internal /etc/nologin support if PAM enabled
526 - Merged latest OpenBSD CVS changes:
Damien Millerfd7c9111999-11-08 16:15:55 +1100527 - [all] replace assert() with error, fatal or packet_disconnect
Damien Miller356a0b01999-11-08 15:30:59 +1100528 - [sshd.c] don't send fail-msg but disconnect if too many authentication
529 failures
Damien Miller356a0b01999-11-08 15:30:59 +1100530 - [sshd.c] remove unused argument. ok dugsong
531 - [sshd.c] typo
532 - [rsa.c] clear buffers used for encryption. ok: niels
533 - [rsa.c] replace assert() with error, fatal or packet_disconnect
Damien Miller5ac5f1c1999-11-08 15:50:14 +1100534 - [auth-krb4.c] remove unused argument. ok dugsong
Damien Miller356a0b01999-11-08 15:30:59 +1100535 - Fixed coredump after merge of OpenBSD rsa.c patch
Damien Millere8d90681999-11-08 18:09:57 +1100536 - Released 1.2pre8
Damien Miller356a0b01999-11-08 15:30:59 +1100537
Damien Miller0aa8e531999-11-02 19:05:02 +110053819991102
539 - Merged change from OpenBSD CVS
540 - One-line cleanup in sshd.c
541
Damien Miller744da801999-10-30 09:12:25 +100054219991030
543 - Integrated debian package support from Dan Brosemer <odin@linuxfreak.com>
Damien Miller1e4772c1999-10-30 11:39:56 +1000544 - Merged latest updates for OpenBSD CVS:
545 - channels.[ch] - remove broken x11 fix and document istate/ostate
546 - ssh-agent.c - call setsid() regardless of argv[]
547 - ssh.c - save a few lines when disabling rhosts-{rsa-}auth
548 - Documentation cleanups
549 - Renamed README -> README.Ylonen
550 - Renamed README.openssh ->README
Damien Miller744da801999-10-30 09:12:25 +1000551
Damien Miller070f7a11999-10-29 10:29:29 +100055219991029
553 - Renamed openssh* back to ssh* at request of Theo de Raadt
554 - Incorporated latest changes from OpenBSD's CVS
555 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
556 - Integrated PAM env patch from Nalin Dahyabhai <nalin.dahyabhai@pobox.com>
Damien Miller07a826d1999-10-29 11:49:20 +1000557 - Make distclean now removed configure script
558 - Improved PAM logging
559 - Added some debug() calls for PAM
Damien Miller65b3c131999-10-29 12:37:01 +1000560 - Removed redundant subdirectories
561 - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for
562 building on Debian.
Damien Millerd0562b31999-10-29 13:09:40 +1000563 - Fixed off-by-one error in PAM env patch
564 - Released 1.2pre6
Damien Miller070f7a11999-10-29 10:29:29 +1000565
Damien Miller7f6ea021999-10-28 13:25:17 +100056619991028
567 - Further PAM enhancements.
568 - Much cleaner
569 - Now uses account and session modules for all logins.
570 - Integrated patch from Dan Brosemer <odin@linuxfreak.com>
571 - Build fixes
572 - Autoconf
573 - Change binary names to open*
574 - Fixed autoconf script to detect PAM on RH6.1
575 - Added tests for libpwdb, and OpenBSD functions to autoconf
Damien Millereff18d61999-10-28 14:14:38 +1000576 - Released 1.2pre4
Damien Miller29b5a591999-10-28 15:46:27 +1000577
578 - Imported latest OpenBSD CVS code
579 - Updated README.openssh
Damien Miller34d0b611999-10-28 17:51:40 +1000580 - Released 1.2pre5
Damien Miller29b5a591999-10-28 15:46:27 +1000581
Damien Miller7f6ea021999-10-28 13:25:17 +100058219991027
583 - Adapted PAM patch.
584 - Released 1.0pre2
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000585
Damien Miller7f6ea021999-10-28 13:25:17 +1000586 - Excised my buggy replacements for strlcpy and mkdtemp
587 - Imported correct OpenBSD strlcpy and mkdtemp routines.
588 - Reduced arc4random_stir entropy read to 32 bytes (256 bits)
589 - Picked up correct version number from OpenBSD
590 - Added sshd.pam PAM configuration file
591 - Added sshd.init Redhat init script
592 - Added openssh.spec RPM spec file
593 - Released 1.2pre3
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000594
Damien Miller7f6ea021999-10-28 13:25:17 +100059519991026
596 - Fixed include paths of OpenSSL functions
597 - Use OpenSSL MD5 routines
598 - Imported RC4 code from nanocrypt
599 - Wrote replacements for OpenBSD arc4random* functions
600 - Wrote replacements for strlcpy and mkdtemp
601 - Released 1.0pre1