blob: 55b2975bada2a64cdd51946147e62bcdefe92547 [file] [log] [blame]
Ben Lindstrom515d0f92003-08-29 16:59:52 +0000120030829
Damien Miller55c47ed2003-09-02 22:14:07 +10002 - (djm) OpenBSD CVS Sync
3 - deraadt@cvs.openbsd.org 2003/08/24 17:36:51
4 [auth2-gss.c]
5 64 bit cleanups; markus ok
Damien Miller1a0c0b92003-09-02 22:51:17 +10006 - markus@cvs.openbsd.org 2003/08/28 12:54:34
7 [auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c]
8 [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5]
9 [sshconnect1.c sshd.c sshd_config sshd_config.5]
10 remove kerberos support from ssh1, since it has been replaced with GSSAPI;
11 but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
Damien Miller7630ee22003-09-02 22:52:00 +100012 - markus@cvs.openbsd.org 2003/08/29 10:03:15
13 [compat.c compat.h]
14 SSH_BUG_K5USER is unused; ok henning@
Damien Miller55c47ed2003-09-02 22:14:07 +100015
1620030829
Ben Lindstrom4d5dffc2003-08-30 00:11:56 +000017 - (bal) openbsd-compat/ clean up. Considate headers, add in Id on our
Ben Lindstrom515d0f92003-08-29 16:59:52 +000018 files, and added missing license to header.
19
Damien Miller30912f72003-08-26 10:48:14 +10002020030826
21 - (djm) Bug #629: Mark ssh_config option "pamauthenticationviakbdint"
22 as deprecated. Remove mention from README.privsep. Patch from
23 aet AT cc.hut.fi
Darren Tucker0efd1552003-08-26 11:49:55 +100024 - (dtucker) OpenBSD CVS Sync
25 - markus@cvs.openbsd.org 2003/08/22 10:56:09
26 [auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c
27 gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c
28 readconf.h servconf.c servconf.h session.c session.h ssh-gss.h
29 ssh_config.5 sshconnect2.c sshd_config sshd_config.5]
30 support GSS API user authentication; patches from Simon Wilkinson,
31 stripped down and tested by Jakob and myself.
Darren Tuckerbe1a9012003-08-26 12:04:31 +100032 - markus@cvs.openbsd.org 2003/08/22 13:20:03
33 [sshconnect2.c]
34 remove support for "kerberos-2@ssh.com"
Darren Tucker1e66a392003-08-26 12:08:15 +100035 - markus@cvs.openbsd.org 2003/08/22 13:22:27
36 [auth2.c] (auth2-krb5.c removed)
37 nuke "kerberos-2@ssh.com"
Darren Tucker6b191a22003-08-26 12:09:53 +100038 - markus@cvs.openbsd.org 2003/08/22 20:55:06
39 [LICENCE]
40 add Simon Wilkinson
Darren Tucker600ad8d2003-08-26 12:10:48 +100041 - deraadt@cvs.openbsd.org 2003/08/24 17:36:52
42 [monitor.c monitor_wrap.c sshconnect2.c]
43 64 bit cleanups; markus ok
Darren Tucker78587262003-08-26 12:12:56 +100044 - fgsch@cvs.openbsd.org 2003/08/25 08:13:09
45 [sftp-int.c]
46 fix div by zero when listing for filename lengths longer than width.
47 markus@ ok.
Darren Tucker08bbb2f2003-08-26 12:14:05 +100048 - djm@cvs.openbsd.org 2003/08/25 10:33:33
49 [sshconnect2.c]
50 fprintf->logit to silence login banner with "ssh -q"; ok markus@
Darren Tucker49aaf4a2003-08-26 11:58:16 +100051 - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h
52 configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
53 sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
Darren Tucker6ad50432003-08-26 12:22:04 +100054 - (dtucker) [Makefile.in] Remove auth2-krb5.
Darren Tucker2fae8672003-08-26 13:43:12 +100055 - (dtucker) [contrib/aix/inventory.sh] Add public domain notice. ok mouring@
56 (the original author)
Darren Tucker43a0dc62003-08-26 14:22:12 +100057 - (dtucker) [auth.c] Do not check for locked accounts when PAM is enabled.
Damien Miller30912f72003-08-26 10:48:14 +100058
Damien Miller331b6af2003-08-25 10:58:26 +10005920030825
60 - (djm) Bug #621: Select OpenSC keys by usage attributes. Patch from
61 larsch@trustcenter.de
Ben Lindstromaf4a6c32003-08-25 01:10:51 +000062 - (bal) openbsd-compat/ OpenBSD updates. Mostly licensing, ansifications
Ben Lindstrom5ade9ab2003-08-25 01:16:21 +000063 and minor fixes. OK djm@
64 - (bal) redo how we handle 'mysignal()'. Move it to
65 openbsd-compat/bsd-misc.c, s/mysignal/signal/ and #define signal to
66 be our 'mysignal' by default. OK djm@
Darren Tuckere41bba52003-08-25 11:51:19 +100067 - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny
68 any access to locked accounts. ok djm@
Damien Miller1f499fd2003-08-25 13:08:49 +100069 - (djm) Bug #564: Perform PAM account checks for all authentications when
70 UsePAM=yes; ok dtucker
Darren Tucker3c8e1e12003-08-25 13:27:40 +100071 - (dtucker) [configure.ac] Bug #533, #551: define BROKEN_GETADDRINFO on
72 Tru64, solves getnameinfo and "bad addr or host" errors. ok djm@
Darren Tucker36ca53a2003-08-25 15:01:04 +100073 - (dtucker) [README buildbff.sh inventory.sh] (all in contrib/aix)
74 Update package builder: correctly handle config variables, use lsuser
75 rather than /etc/passwd, fix typos, add Id's.
Damien Miller331b6af2003-08-25 10:58:26 +100076
Damien Miller59d3d5b2003-08-22 09:34:41 +10007720030822
78 - (djm) s/get_progname/ssh_get_progname/g to avoid conflict with Heimdal
79 -lbroken; ok dtucker
Darren Tucker49d32562003-08-22 18:43:48 +100080 - (dtucker) [contrib/cygwin/ssh-user-config] Put keys in authorized_keys
81 rather that authorized_keys2. Patch from vinschen@redhat.com.
Damien Miller59d3d5b2003-08-22 09:34:41 +100082
Darren Tuckerf4220e62003-08-21 16:44:07 +10008320030821
84 - (dtucker) OpenBSD CVS Sync
85 - markus@cvs.openbsd.org 2003/08/14 16:08:58
86 [ssh-keygen.c]
87 exit after primetest, ok djm@
Darren Tucker8e3653d2003-08-21 16:49:41 +100088 - (dtucker) [defines.h] Put CMSG_DATA, CMSG_FIRSTHDR with other CMSG* macros,
89 change CMSG_DATA to use __CMSG_ALIGN (and thus work properly), reformat for
90 consistency.
Darren Tucker70a3d552003-08-21 17:58:29 +100091 - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement
92 and after normal openpty test.
Darren Tuckerf4220e62003-08-21 16:44:07 +100093
Darren Tuckerd85efee2003-08-13 20:28:14 +10009420030813
95 - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge.
Darren Tucker3bdbd842003-08-13 20:31:05 +100096 - (dtucker) OpenBSD CVS Sync
97 - markus@cvs.openbsd.org 2003/08/13 08:33:02
98 [session.c]
99 use more portable tcsendbreak(3) and ignore break_length;
100 ok deraadt, millert
Darren Tuckerec960f22003-08-13 20:37:05 +1000101 - markus@cvs.openbsd.org 2003/08/13 08:46:31
102 [auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
103 ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
104 remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
105 fgsch@, miod@, henning@, jakob@ and others
Darren Tucker1c52ee32003-08-13 20:38:36 +1000106 - markus@cvs.openbsd.org 2003/08/13 09:07:10
107 [readconf.c ssh.c]
108 socks4->socks, since with support both 4 and 5; dtucker@zip.com.au
Darren Tuckerf38ea772003-08-13 20:48:07 +1000109 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
110 Add a tcsendbreak function for platforms that don't have one, based on the
111 one from OpenBSD.
Darren Tuckerd85efee2003-08-13 20:28:14 +1000112
Darren Tuckerec0943a2003-08-11 22:55:36 +100011320030811
114 - (dtucker) OpenBSD CVS Sync
115 (thanks to Simon Wilkinson for help with this -dt)
116 - markus@cvs.openbsd.org 2003/07/16 15:02:06
117 [auth-krb5.c]
118 mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
119 otherwise the kerberos credentinal is stored in a memory cache
120 in the privileged sshd. ok jabob@, hin@ (some time ago)
Darren Tuckerbc8c8f32003-08-11 23:00:33 +1000121 - (dtucker) [openbsd-compat/xcrypt.c] Remove Cygwin #ifdef block (duplicate
122 in bsd-cygwin_util.h).
Darren Tuckerec0943a2003-08-11 22:55:36 +1000123
Darren Tucker65914f12003-08-08 12:15:11 +100012420030808
125 - (dtucker) [openbsd-compat/fake-rfc2553.h] Older Linuxes have AI_PASSIVE and
126 AI_CANONNAME in netdb.h but not AI_NUMERICHOST, so check each definition
127 separately before defining them.
Darren Tuckerf38db7f2003-08-08 13:43:37 +1000128 - (dtucker) [auth-pam.c] Don't set PAM_TTY if tty is null. ok djm@
Darren Tucker65914f12003-08-08 12:15:11 +1000129
Darren Tuckerb9d3f412003-08-07 13:24:24 +100013020030807
131 - (dtucker) [session.c] Have session_break_req not attempt to send a break
132 if TIOCSBRK and TIOCCBRK are not defined (eg Cygwin).
Darren Tucker89f4cf02003-08-07 13:29:04 +1000133 - (dtucker) [canohost.c] Bug #336: Only check ip options if IP_OPTIONS is
Darren Tuckerf3152242003-08-07 15:58:28 +1000134 defined (fixes compile error on really old Linuxes).
135 - (dtucker) [defines.h] Bug #336: Add CMSG_DATA and CMSG_FIRSTHDR macros if
136 not already defined (eg Linux with some versions of libc5), based on those
137 from OpenBSD.
Darren Tucker854d7fd2003-08-07 16:23:43 +1000138 - (dtucker) [openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h]
139 Remove incorrect filenames from comments (file names are in Id tags).
Darren Tucker80649c52003-08-07 16:28:16 +1000140 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.h] Move Cygwin
141 specific defines and includes to bsd-cygwin_util.h. Fixes build error too.
Darren Tuckerb9d3f412003-08-07 13:24:24 +1000142
Darren Tucker4c29dd92003-08-02 20:37:03 +100014320030802
144 - (dtucker) [monitor.h monitor_wrap.h] Remove excess ident tags.
Darren Tucker6aaa58c2003-08-02 22:24:49 +1000145 - (dtucker) OpenBSD CVS Sync
146 - markus@cvs.openbsd.org 2003/07/22 13:35:22
147 [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c
148 monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1
149 ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h]
150 remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
151 test+ok henning@
152 - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support.
153 - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files.
Darren Tuckerc20c60b2003-08-02 22:31:45 +1000154 - (dtucker) OpenBSD CVS Sync
155 - markus@cvs.openbsd.org 2003/07/23 07:42:43
156 [sshd_config]
157 remove AFS; itojun@
Darren Tucker019cefe2003-08-02 22:40:07 +1000158 - djm@cvs.openbsd.org 2003/07/28 09:49:56
159 [ssh-keygen.1 ssh-keygen.c]
160 Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
161 Based on code from Phil Karn, William Allen Simpson and Niels Provos.
162 ok markus@, thanks jmc@
Darren Tucker06ef75b2003-08-02 23:28:38 +1000163 - markus@cvs.openbsd.org 2003/07/29 18:24:00
164 [LICENCE progressmeter.c]
165 replace 4 clause BSD licensed progressmeter code with a replacement
166 from Nils Nordman and myself; ok deraadt@
167 (copied from OpenBSD an re-applied portable changes)
Darren Tucker40311f22003-08-03 00:00:47 +1000168 - markus@cvs.openbsd.org 2003/07/29 18:26:46
169 [progressmeter.c]
170 fix length for "- stalled -" (included with previous import)
171 - markus@cvs.openbsd.org 2003/07/30 07:44:14
172 [progressmeter.c]
173 use only 4 digits in format_size (included with previous import)
174 - markus@cvs.openbsd.org 2003/07/30 07:53:27
175 [progressmeter.c]
176 whitespace (included with previous import)
Darren Tucker4b609662003-08-03 00:05:01 +1000177 - markus@cvs.openbsd.org 2003/07/31 09:21:02
178 [auth2-none.c]
179 check whether passwd auth is allowd, similar to proto 1; rob@pitman.co.za
180 ok henning
Darren Tucker85f04c62003-08-03 00:05:58 +1000181 - avsm@cvs.openbsd.org 2003/07/31 15:50:16
182 [atomicio.c]
183 correct comment: atomicio takes vwrite, not write; deraadt@ ok
Darren Tuckerdb732b12003-08-03 00:07:35 +1000184 - markus@cvs.openbsd.org 2003/07/31 22:34:03
185 [progressmeter.c]
186 print rate similar old version; round instead truncate;
187 (included in previous progressmeter.c commit)
Darren Tucker2e9c9cf2003-08-02 23:31:42 +1000188 - (dtucker) [openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
189 Add a tcgetpgrp function.
Darren Tuckerb2f9d412003-08-02 23:51:38 +1000190 - (dtucker) [Makefile.in moduli.c moduli.h] Add new files and to Makefile.
Darren Tuckerbdf571b2003-08-03 00:36:16 +1000191 - (dtucker) [openbsd-compat/bsd-misc.c] Fix cut-and-paste bug in tcgetpgrp.
Darren Tucker4c29dd92003-08-02 20:37:03 +1000192
Damien Miller7f2d7952003-07-30 14:53:11 +100019320030730
194 - (djm) [auth-pam.c] Don't use crappy APIs like sprintf. Thanks bal
195
Darren Tuckerfbba5a02003-07-26 19:38:30 +100019620030726
197 - (dtucker) [openbsd-compat/xcrypt.c] Fix typo: DISABLED_SHADOW ->
198 DISABLE_SHADOW. Fixes HP-UX compile error.
199
Ben Lindstrom0410e322003-07-24 06:52:13 +000020020030724
201 - (bal) [auth-passwd.c openbsd-compat/Makefile.in openbsd-compat/xcrypt.c
202 openbsd-compat/xcrypt.h] Split off encryption into xcrypt() interface,
203 and isolate shadow password functions. Tested in Solaris, but should
204 not break other platforms too badly (except maybe HP =). Also brings
205 auth-passwd.c into full sync with OpenBSD tree.
206
Darren Tuckeracb98492003-07-23 14:33:10 +100020720030723
208 - (dtucker) [configure.ac] Back out change for bug #620.
209
Darren Tucker394b8c82003-07-19 19:49:45 +100021020030719
211 - (dtucker) [configure.ac] Bug #620: Define BROKEN_GETADDRINFO for
212 Solaris/x86. Patch from jrhett at isite.net.
Darren Tuckerfe0078a2003-07-19 19:52:28 +1000213 - (dtucker) OpenBSD CVS Sync
214 - markus@cvs.openbsd.org 2003/07/14 12:36:37
215 [sshd.c]
216 remove undocumented -V option. would be only useful if openssh is used
217 as ssh v1 server for ssh.com's ssh v2.
Darren Tuckere98dfa32003-07-19 19:54:31 +1000218 - markus@cvs.openbsd.org 2003/07/16 10:34:53
219 [ssh.c sshd.c]
220 don't exit on multiple -v or -d; ok deraadt@
Darren Tucker538d1802003-07-19 19:56:18 +1000221 - markus@cvs.openbsd.org 2003/07/16 10:36:28
222 [sshtty.c]
223 clear IUCLC in enter_raw_mode; from rob@pitman.co.za; ok deraadt@, fgs@
Darren Tucker03a29ba2003-07-19 20:07:45 +1000224 - deraadt@cvs.openbsd.org 2003/07/18 01:54:25
225 [scp.c]
226 userid is unsigned, but well, force it anyways; andrushock@korovino.net
Darren Tucker554d5b52003-07-19 20:09:21 +1000227 - djm@cvs.openbsd.org 2003/07/19 00:45:53
228 [sftp-int.c]
229 fix sftp filename parsing for arguments with escaped quotes. bz #517;
230 ok markus
Darren Tuckercca1bdb2003-07-19 20:11:54 +1000231 - djm@cvs.openbsd.org 2003/07/19 00:46:31
232 [regress/sftp-cmds.sh]
233 regress test for sftp arguments with escaped quotes; ok markus
Darren Tucker394b8c82003-07-19 19:49:45 +1000234
Darren Tucker5c6a91a2003-07-14 16:21:44 +100023520030714
236 - (dtucker) [acconfig.h configure.ac port-aix.c] Older AIXes don't declare
237 loginfailed at all, so assume 3-arg loginfailed if not declared.
Darren Tucker30317e32003-07-14 16:26:51 +1000238 - (dtucker) [port-aix.h] Work around name collision on AIX for r_type by
239 undef'ing it.
Darren Tuckerfc3454e2003-07-14 16:41:55 +1000240 - (dtucker) Bug #543: [configure.ac port-aix.c port-aix.h]
241 Call setauthdb() before loginfailed(), which may load password registry-
Darren Tucker394b8c82003-07-19 19:49:45 +1000242 specific functions. Based on patch by cawlfiel at us.ibm.com.
Darren Tucker0abf13b2003-07-14 16:43:42 +1000243 - (dtucker) [port-aix.h] Fix prototypes.
Darren Tucker29588612003-07-14 17:28:34 +1000244 - (dtucker) OpenBSD CVS Sync
245 - avsm@cvs.openbsd.org 2003/07/09 13:58:19
246 [key.c]
247 minor tweak: when generating the hex fingerprint, give strlcat the full
248 bound to the buffer, and add a comment below explaining why the
249 zero-termination is one less than the bound. markus@ ok
Darren Tucker81a0b372003-07-14 17:31:06 +1000250 - markus@cvs.openbsd.org 2003/07/10 14:42:28
251 [packet.c]
252 the 2^(blocksize*2) rekeying limit is too expensive for 3DES,
253 blowfish, etc, so enforce a 1GB limit for small blocksizes.
Darren Tucker1a721152003-07-14 17:32:29 +1000254 - markus@cvs.openbsd.org 2003/07/10 20:05:55
255 [sftp.c]
256 sync usage with manpage, add missing -R
Darren Tucker5c6a91a2003-07-14 16:21:44 +1000257
Darren Tuckera0c0b632003-07-08 20:52:12 +100025820030708
259 - (dtucker) [acconfig.h auth-passwd.c configure.ac session.c port-aix.[ch]]
260 Include AIX headers for authentication functions and make calls match
Darren Tucker5c6a91a2003-07-14 16:21:44 +1000261 prototypes. Test for and handle 3-arg and 4-arg variants of loginfailed.
Darren Tuckerb9aa0a02003-07-08 22:59:59 +1000262 - (dtucker) [session.c] Check return value of setpcred().
263 - (dtucker) [auth-passwd.c auth.c session.c sshd.c port-aix.c port-aix.h]
264 Convert aixloginmsg into platform-independant Buffer loginmsg.
Darren Tuckera0c0b632003-07-08 20:52:12 +1000265
Darren Tuckerf1159b52003-07-07 19:44:01 +100026620030707
267 - (dtucker) [configure.ac] Bug #600: Check that getrusage is declared before
268 searching libraries for it. Fixes build errors on NCR MP-RAS.
269
Darren Tucker8661b562003-07-06 15:20:46 +100027020030706
271 - (dtucker) [ssh-rand-helper.c loginrec.c]
272 Apply atomicio typing change to these too.
273
Darren Tuckere5327042003-07-03 13:40:44 +100027420030703
275 - (dtucker) OpenBSD CVS Sync
276 - djm@cvs.openbsd.org 2003/06/28 07:48:10
277 [sshd.c]
278 report pidfile creation errors, based on patch from Roumen Petrov;
279 ok markus@
Darren Tucker9f63f222003-07-03 13:46:56 +1000280 - deraadt@cvs.openbsd.org 2003/06/28 16:23:06
281 [atomicio.c atomicio.h authfd.c clientloop.c monitor_wrap.c msg.c
282 progressmeter.c scp.c sftp-client.c ssh-keyscan.c ssh.h sshconnect.c
283 sshd.c]
284 deal with typing of write vs read in atomicio
Darren Tuckeredeb1f72003-07-03 13:48:04 +1000285 - markus@cvs.openbsd.org 2003/06/29 12:44:38
286 [sshconnect.c]
287 memset 0, not \0; andrushock@korovino.net
Darren Tucker9189ff82003-07-03 13:52:04 +1000288 - markus@cvs.openbsd.org 2003/07/02 12:56:34
289 [channels.c]
290 deny dynamic forwarding with -R for v1, too; ok djm@
Darren Tucker46471c92003-07-03 13:55:19 +1000291 - markus@cvs.openbsd.org 2003/07/02 14:51:16
292 [channels.c ssh.1 ssh_config.5]
293 (re)add socks5 suppport to -D; ok djm@
294 now ssh(1) can act both as a socks 4 and socks 5 server and
295 dynamically forward ports.
Darren Tucker3f521e22003-07-03 16:20:42 +1000296 - markus@cvs.openbsd.org 2003/07/02 20:37:48
297 [ssh.c]
298 convert hostkeyalias to lowercase, otherwise uppercase aliases will
299 not match at all; ok henning@
Darren Tucker7a246622003-07-03 20:26:04 +1000300 - markus@cvs.openbsd.org 2003/07/03 08:21:46
301 [regress/dynamic-forward.sh]
302 add socks5; speedup; reformat; based on patch from dtucker@zip.com.au
Darren Tuckere2f2be72003-07-03 20:27:55 +1000303 - markus@cvs.openbsd.org 2003/07/03 08:24:13
304 [regress/Makefile]
305 enable tests for dynamic fwd via socks (-D), uses nc(1)
Darren Tucker0a4f04b2003-07-03 20:37:47 +1000306 - djm@cvs.openbsd.org 2003/07/03 08:09:06
307 [readconf.c readconf.h ssh-keysign.c ssh.c]
308 fix AddressFamily option in config file, from brent@graveland.net;
309 ok markus@
Darren Tuckere5327042003-07-03 13:40:44 +1000310
Damien Miller200d0a72003-06-30 19:21:36 +100031120030630
312 - (djm) Search for support functions necessary to build our
313 getrrsetbyname() replacement. Patch from Roumen Petrov
314
Darren Tuckercc9fd542003-06-29 21:23:37 +100031520030629
Darren Tucker6eb93042003-06-29 21:30:41 +1000316 - (dtucker) [includes.h] Bug #602: move #include of netdb.h to after in.h
317 (fixes compiler warnings on Solaris 2.5.1).
318 - (dtucker) [configure.ac] Add sanity test after system-dependant compiler
319 flag modifications.
Darren Tuckercc9fd542003-06-29 21:23:37 +1000320
Darren Tucker674f71d2003-06-28 12:33:12 +100032120030628
Damien Miller4a8e2842003-06-28 18:02:47 +1000322 - (djm) Bug #591: use PKCS#15 private key label as a comment in case
323 of OpenSC. Report and patch from larsch@trustcenter.de
Damien Miller723569b2003-06-28 18:08:16 +1000324 - (djm) Bug #593: Sanity check OpenSC card reader number; patch from
325 aj@dungeon.inka.de
Darren Tucker674f71d2003-06-28 12:33:12 +1000326 - (dtucker) OpenBSD CVS Sync
327 - markus@cvs.openbsd.org 2003/06/23 09:02:44
328 [ssh_config.5]
329 document EnableSSHKeysign; bugzilla #599; ok deraadt@, jmc@
Darren Tucker502d3842003-06-28 12:38:01 +1000330 - markus@cvs.openbsd.org 2003/06/24 08:23:46
331 [auth2-hostbased.c auth2-pubkey.c auth2.c channels.c key.c key.h
332 monitor.c packet.c packet.h serverloop.c sshconnect2.c sshd.c]
333 int -> u_int; ok djm@, deraadt@, mouring@
Darren Tuckera6612d42003-06-28 12:39:03 +1000334 - miod@cvs.openbsd.org 2003/06/25 22:39:36
335 [sftp-server.c]
336 Typo police: attribute is better written with an 'r'.
Darren Tuckera99c1b72003-06-28 12:40:12 +1000337 - markus@cvs.openbsd.org 2003/06/26 20:08:33
338 [readconf.c]
339 do not dump core for 'ssh -o proxycommand host'; ok deraadt@
Darren Tuckerb611c122003-06-28 12:42:09 +1000340 - (dtucker) [regress/dynamic-forward.sh] Import new regression test.
Darren Tuckera3020db2003-06-28 12:54:33 +1000341 - (dtucker) [configure.ac] Bug #570: Have ./configure --enable-FEATURE
342 actually enable the feature, for those normally disabled. Patch by
343 openssh (at) roumenpetrov.info.
Darren Tucker674f71d2003-06-28 12:33:12 +1000344
Darren Tuckera0472e02003-06-24 20:22:09 +100034520030624
346 - (dtucker) Have configure refer the user to config.log and
347 contrib/findssl.sh for OpenSSL header/library mismatches.
348
Darren Tuckere0194e52003-06-22 12:33:27 +100034920030622
Darren Tuckera251f802003-06-22 20:45:15 +1000350 - (dtucker) OpenBSD CVS Sync
Darren Tuckere0194e52003-06-22 12:33:27 +1000351 - markus@cvs.openbsd.org 2003/06/21 09:14:05
Darren Tuckera251f802003-06-22 20:45:15 +1000352 [regress/reconfigure.sh]
Darren Tuckere0194e52003-06-22 12:33:27 +1000353 missing $SUDO; from dtucker@zip.com.au
Darren Tucker89b249b2003-06-22 21:22:04 +1000354 - markus@cvs.openbsd.org 2003/06/18 11:28:11
Darren Tuckera251f802003-06-22 20:45:15 +1000355 [ssh-rsa.c]
356 backout last change, since it violates pkcs#1
357 switch to share/misc/license.template
Darren Tucker91cf2612003-06-22 20:46:53 +1000358 - djm@cvs.openbsd.org 2003/06/20 05:47:58
359 [sshd_config.5]
360 sync description of protocol 2 cipher proposal; ok markus
Darren Tuckerb8dae8e2003-06-22 20:48:45 +1000361 - djm@cvs.openbsd.org 2003/06/20 05:48:21
362 [sshd_config]
363 sync some implemented options; ok markus@
Darren Tuckere0194e52003-06-22 12:33:27 +1000364 - (dtucker) [regress/authorized_keys_root] Remove temp data file from CVS.
Darren Tucker6cf1a2c2003-06-22 18:32:10 +1000365 - (dtucker) [openbsd-compat/setproctitle.c] Ensure SPT_TYPE is defined before
366 testing its value.
Darren Tuckere0194e52003-06-22 12:33:27 +1000367
Damien Miller469954d2003-06-18 20:25:33 +100036820030618
369 - (djm) OpenBSD CVS Sync
370 - markus@cvs.openbsd.org 2003/06/12 07:57:38
371 [monitor.c sshlogin.c sshpty.c]
372 typos; dtucker at zip.com.au
Damien Miller116aabb2003-06-18 20:26:13 +1000373 - djm@cvs.openbsd.org 2003/06/12 12:22:47
374 [LICENCE]
375 mention more copyright holders; ok markus@
Damien Millerb2cdcb52003-06-18 20:26:34 +1000376 - nino@cvs.openbsd.org 2003/06/12 15:34:09
377 [scp.c]
378 Typo. Ok markus@.
Damien Miller56a0bb02003-06-18 20:28:40 +1000379 - markus@cvs.openbsd.org 2003/06/12 19:12:03
380 [scard.c scard.h ssh-agent.c ssh.c]
381 add sc_get_key_label; larsch at trustcenter.de; bugzilla#591
Damien Miller8c1d2e32003-06-18 20:29:01 +1000382 - markus@cvs.openbsd.org 2003/06/16 08:22:35
383 [ssh-rsa.c]
384 make sure the signature has at least the expected length (don't
385 insist on len == hlen + oidlen, since this breaks some smartcards)
386 bugzilla #592; ok djm@
Damien Miller80163e12003-06-18 20:29:18 +1000387 - markus@cvs.openbsd.org 2003/06/16 10:22:45
388 [ssh-add.c]
389 print out key comment on each prompt; make ssh-askpass more useable; ok djm@
Damien Miller0275b522003-06-18 20:29:35 +1000390 - markus@cvs.openbsd.org 2003/06/17 18:14:23
391 [cipher-ctr.c]
392 use license from /usr/share/misc/license.template for new code
Darren Tuckerfc8a7ea2003-06-18 22:18:57 +1000393 - (dtucker) [reconfigure.sh rekey.sh sftp-badcmds.sh]
394 Import new regression tests from OpenBSD
Darren Tucker3a222ac2003-06-18 22:21:33 +1000395 - (dtucker) [regress/copy.1 regress/copy.2] Remove temp data files from CVS.
Darren Tuckerd57a76e2003-06-18 22:32:51 +1000396 - (dtucker) OpenBSD CVS Sync (regress/)
397 - markus@cvs.openbsd.org 2003/04/02 12:21:13
398 [Makefile]
399 enable rekey test
Darren Tuckera4040f52003-06-18 22:35:11 +1000400 - djm@cvs.openbsd.org 2003/04/04 09:34:22
401 [Makefile sftp-cmds.sh]
402 More regression tests, including recent directory rename bug; ok markus@
Darren Tuckeree5f83d2003-06-18 22:36:48 +1000403 - markus@cvs.openbsd.org 2003/05/14 22:08:27
404 [ssh-com-client.sh ssh-com-keygen.sh ssh-com-sftp.sh ssh-com.sh]
405 test against some new commerical versions
Darren Tuckerc43362c2003-06-18 22:41:41 +1000406 - mouring@cvs.openbsd.org 2003/05/15 04:07:12
407 [sftp-cmds.sh]
408 Advanced put/get testing for sftp. OK @djm
Darren Tucker76437602003-06-18 22:43:13 +1000409 - markus@cvs.openbsd.org 2003/06/12 15:40:01
410 [try-ciphers.sh]
411 add ctr
Darren Tucker50cea672003-06-18 22:45:34 +1000412 - markus@cvs.openbsd.org 2003/06/12 15:43:32
413 [Makefile]
414 test -HUP; dtucker at zip.com.au
Damien Miller469954d2003-06-18 20:25:33 +1000415
Damien Miller53950b62003-06-14 08:43:22 +100041620030614
417 - (djm) Update license on fake-rfc2553.[ch]; ok itojun@
418
Damien Millerf1ce5052003-06-11 22:04:39 +100041920030611
Damien Miller141efa72003-06-11 22:50:56 +1000420 - (djm) Mention portable copyright holders in LICENSE
Damien Milleraf639512003-06-11 22:51:32 +1000421 - (djm) Put licenses on substantial header files
Damien Miller4bfeb142003-06-11 22:08:36 +1000422 - (djm) Sync LICENSE against OpenBSD
Damien Millerf1ce5052003-06-11 22:04:39 +1000423 - (djm) OpenBSD CVS Sync
424 - jmc@cvs.openbsd.org 2003/06/10 09:12:11
425 [scp.1 sftp-server.8 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5]
426 [sshd.8 sshd_config.5 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
427 - section reorder
428 - COMPATIBILITY merge
429 - macro cleanup
430 - kill whitespace at EOL
431 - new sentence, new line
432 ssh pages ok markus@
Damien Miller2b92d322003-06-11 22:05:06 +1000433 - deraadt@cvs.openbsd.org 2003/06/10 22:20:52
434 [packet.c progressmeter.c]
435 mostly ansi cleanup; pval ok
Damien Miller7392ae62003-06-11 22:05:25 +1000436 - jakob@cvs.openbsd.org 2003/06/11 10:16:16
437 [sshconnect.c]
438 clean up check_host_key() and improve SSHFP feedback. ok markus@
Damien Miller0e1b9372003-06-11 22:05:45 +1000439 - jakob@cvs.openbsd.org 2003/06/11 10:18:47
440 [dns.c]
441 sync with check_host_key() change
Damien Millerd94f20d2003-06-11 22:06:33 +1000442 - djm@cvs.openbsd.org 2003/06/11 11:18:38
443 [authfd.c authfd.h ssh-add.c ssh-agent.c]
444 make agent constraints (lifetime, confirm) work with smartcard keys;
445 ok markus@
Damien Millerf1ce5052003-06-11 22:04:39 +1000446
447
Damien Millerc18c06e2003-06-10 18:55:22 +100044820030609
449 - (djm) Sync README.smartcard with OpenBSD -current
Damien Miller78f2e5c2003-06-10 21:09:09 +1000450 - (djm) Re-merge OpenSC info into README.smartcard
Damien Millerc18c06e2003-06-10 18:55:22 +1000451
Darren Tucker400b8782003-06-06 10:46:04 +100045220030606
453 - (dtucker) [uidswap.c] Fix setreuid and add missing args to fatal(). ok djm@
454
Damien Miller10eac0c2003-06-05 09:48:32 +100045520030605
456 - (djm) Support AI_NUMERICHOST in fake-getaddrinfo.c. Needed for recent
457 canohost.c changes.
Damien Miller5fe46a42003-06-05 09:53:31 +1000458 - (djm) Implement paranoid priv dropping checks, based on:
459 "SetUID demystified" - Hao Chen, David Wagner and Drew Dean
460 Proceedings of USENIX Security Symposium 2002
Damien Millerb95bb7f2003-06-05 10:04:12 +1000461 - (djm) Don't use xmalloc() or pull in toplevel headers in fake-* code
Damien Millerc28e38d2003-06-05 18:52:47 +1000462 - (djm) Merge all the openbsd/fake-* into fake-rfc2553.[ch]
Damien Millerf49078d2003-06-05 18:53:42 +1000463 - (djm) Bug #588 - Add scard-opensc.o back to Makefile.in
464 Patch from larsch@trustcenter.de
Damien Miller76b5c8a2003-06-05 19:19:35 +1000465 - (djm) Bug #589 - scard-opensc: load only keys with a private keys
466 Patch from larsch@trustcenter.de
Darren Tucker4aff13f2003-06-05 19:37:30 +1000467 - (dtucker) Add includes.h to fake-rfc2553.c so it will build.
Darren Tucker881753b2003-06-05 22:20:11 +1000468 - (dtucker) Define EAI_NONAME in fake-rfc2553.h (used by fake-rfc2553.c).
Damien Miller10eac0c2003-06-05 09:48:32 +1000469
Damien Miller9fc7c692003-06-04 22:50:54 +100047020030604
Damien Miller865173e2003-06-04 19:06:59 +1000471 - (djm) Bug #573 - Remove unneeded Krb headers and compat goop. Patch from
472 simon@sxw.org.uk (Also matches a change in OpenBSD a while ago)
Damien Miller485397c2003-06-04 19:15:10 +1000473 - (djm) Bug #577 - wrong flag in scard-opensc.c sc_private_decrypt.
Damien Miller2527f572003-06-04 19:22:06 +1000474 Patch from larsch@trustcenter.de; ok markus@
475 - (djm) Bug #584: scard-opensc.c doesn't work without PIN. Patch from
476 larsch@trustcenter.de; ok markus@
Damien Miller941ac452003-06-04 20:31:53 +1000477 - (djm) OpenBSD CVS Sync
478 - djm@cvs.openbsd.org 2003/06/04 08:25:18
479 [sshconnect.c]
480 disable challenge/response and keyboard-interactive auth methods
481 upon hostkey mismatch. based on patch from fcusack AT fcusack.com.
482 bz #580; ok markus@
Damien Miller31b3a0a2003-06-04 20:32:12 +1000483 - djm@cvs.openbsd.org 2003/06/04 10:23:48
484 [sshd.c]
485 remove duplicated group-dropping code; ok markus@
Damien Miller9fc7c692003-06-04 22:50:54 +1000486 - djm@cvs.openbsd.org 2003/06/04 12:03:59
487 [serverloop.c]
488 remove bitrotten commet; ok markus@
Damien Miller65d1f572003-06-04 22:51:08 +1000489 - djm@cvs.openbsd.org 2003/06/04 12:18:49
490 [scp.c]
491 ansify; ok markus@
Damien Millerb69aaa82003-06-04 22:51:24 +1000492 - djm@cvs.openbsd.org 2003/06/04 12:40:39
493 [scp.c]
494 kill ssh process upon receipt of signal, bz #241.
495 based on patch from esb AT hawaii.edu; ok markus@
Damien Millercc685c12003-06-04 22:51:38 +1000496 - djm@cvs.openbsd.org 2003/06/04 12:41:22
497 [sftp.c]
498 kill ssh process on receipt of signal; ok markus@
Damien Miller4c322482003-06-04 22:12:17 +1000499 - (djm) Update to fix of bug #584: lock card before return.
500 From larsch@trustcenter.de
Damien Miller0cbb9de2003-06-04 22:56:15 +1000501 - (djm) Always use mysignal() for SIGALRM
Damien Miller865173e2003-06-04 19:06:59 +1000502
50320030603
Damien Miller35276252003-06-03 10:14:28 +1000504 - (djm) Replace setproctitle replacement with code derived from
505 UCB sendmail
Damien Miller3a961dc2003-06-03 10:25:48 +1000506 - (djm) OpenBSD CVS Sync
507 - markus@cvs.openbsd.org 2003/06/02 09:17:34
508 [auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c]
509 [canohost.c monitor.c servconf.c servconf.h session.c sshd_config]
510 [sshd_config.5]
511 deprecate VerifyReverseMapping since it's dangerous if combined
512 with IP based access control as noted by Mike Harding; replace with
513 a UseDNS option, UseDNS is on by default and includes the
514 VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@
515 ok deraadt@, djm@
Damien Millerdafb12e2003-06-03 13:06:18 +1000516 - millert@cvs.openbsd.org 2003/06/03 02:56:16
517 [scp.c]
518 Remove the advertising clause in the UCB license which Berkeley
519 rescinded 22 July 1999. Proofed by myself and Theo.
Damien Miller3a961dc2003-06-03 10:25:48 +1000520 - (djm) Fix portable-specific uses of verify_reverse_mapping too
Damien Miller329638e2003-06-03 12:12:50 +1000521 - (djm) Sync openbsd-compat with OpenBSD CVS.
Damien Millerd311c4e2003-06-03 13:09:16 +1000522 - No more 4-term BSD licenses in linked code
Darren Tuckereb28cbc2003-06-03 12:45:27 +1000523 - (dtucker) [port-aix.c bsd-cray.c] Fix uses of verify_reverse_mapping.
Damien Miller35276252003-06-03 10:14:28 +1000524
Damien Millerf3bff942003-06-02 12:13:40 +100052520030602
526 - (djm) Fix segv from bad reordering in auth-pam.c
Damien Millerf2e3e9d2003-06-02 12:15:54 +1000527 - (djm) Always use saved_argv in sshd.c as compat_init_setproctitle may
528 clobber
Tim Rice237ca4a2003-06-01 19:25:27 -0700529 - (tim) openbsd-compat/xmmap.[ch] License clarifications. Add missing
530 CVS ID.
Damien Millerdba59502003-06-02 17:43:19 +1000531 - (djm) Remove "noip6" option from RedHat spec file. This may now be
532 set at runtime using AddressFamily option.
Damien Millerdcc83122003-06-02 18:57:59 +1000533 - (djm) Fix use of macro before #define in cipher-aes.c
Damien Millerf4684422003-06-02 18:59:08 +1000534 - (djm) Sync license on openbsd-compat/bindresvport.c with OpenBSD CVS
Damien Millerab2db412003-06-02 19:09:13 +1000535 - (djm) OpenBSD CVS Sync
536 - djm@cvs.openbsd.org 2003/05/26 12:54:40
537 [sshconnect.c]
538 fix format strings; ok markus@
Damien Miller61d36802003-06-02 19:09:48 +1000539 - deraadt@cvs.openbsd.org 2003/05/29 16:58:45
540 [sshd.c uidswap.c]
541 seteuid and setegid; markus ok
Damien Millereacbb4f2003-06-02 19:10:41 +1000542 - jakob@cvs.openbsd.org 2003/06/02 08:31:10
543 [ssh_config.5]
544 VerifyHostKeyDNS is v2 only. ok markus@
Damien Millerf3bff942003-06-02 12:13:40 +1000545
Darren Tucker3cb84e52003-05-30 16:58:22 +100054620030530
547 - (dtucker) Add missing semicolon in md5crypt.c, patch from openssh at
548 roumenpetrov.info
Darren Tucker2972d6c2003-05-30 17:43:42 +1000549 - (dtucker) Define SSHD_ACQUIRES_CTTY for NCR MP-RAS and Reliant Unix.
Darren Tucker3cb84e52003-05-30 16:58:22 +1000550
Damien Millera6a7c192003-05-26 21:36:13 +100055120030526
552 - (djm) Avoid auth2-chall.c warning when compiling without
553 PAM, BSD_AUTH and SKEY
554
Damien Millerc11fe252003-05-25 14:38:02 +100055520030525
556- (djm) OpenBSD CVS Sync
557 - djm@cvs.openbsd.org 2003/05/24 09:02:22
558 [log.c]
559 pass logged data through strnvis; ok markus
Damien Miller04bd8b02003-05-25 14:38:33 +1000560 - djm@cvs.openbsd.org 2003/05/24 09:30:40
561 [authfile.c monitor.c sftp-common.c sshpty.c]
562 cast some types for printing; ok markus@
Damien Millerc11fe252003-05-25 14:38:02 +1000563
Darren Tucker60145782003-05-24 11:41:16 +100056420030524
565 - (dtucker) Correct --osfsia in INSTALL. Patch by skeleten at shillest.net
566
Damien Millerd419bda2003-05-23 18:43:40 +100056720030523
568 - (djm) Use VIS_SAFE on logged strings rather than default strnvis
569 encoding (which encodes many more characters)
Damien Miller50677922003-05-23 18:44:04 +1000570 - OpenBSD CVS Sync
571 - jmc@cvs.openbsd.org 2003/05/20 12:03:35
572 [sftp.1]
573 - new sentence, new line
574 - added .Xr's
575 - typos
576 ok djm@
Damien Millerfbf486b2003-05-23 18:44:23 +1000577 - jmc@cvs.openbsd.org 2003/05/20 12:09:31
578 [ssh.1 ssh_config.5 sshd.8 sshd_config.5 ssh-keygen.1]
579 new sentence, new line
Damien Miller08293fa2003-05-23 18:44:41 +1000580 - djm@cvs.openbsd.org 2003/05/23 08:29:30
581 [sshconnect.c]
582 fix leak; ok markus@
Damien Millerd419bda2003-05-23 18:43:40 +1000583
Damien Miller74a34422003-05-20 09:24:17 +100058420030520
585 - (djm) OpenBSD CVS Sync
586 - deraadt@cvs.openbsd.org 2003/05/18 23:22:01
587 [log.c]
588 use syslog_r() in a signal handler called place; markus ok
Damien Miller1340ec22003-05-20 09:24:42 +1000589 - (djm) Configure logic to detect syslog_r and friends
Damien Miller74a34422003-05-20 09:24:17 +1000590
Damien Millereb0e9692003-05-19 11:28:44 +100059120030519
592 - (djm) Sync auth-pam.h with what we actually implement
593
59420030518
Damien Miller25d93422003-05-18 20:45:47 +1000595 - (djm) Return of the dreaded PAM_TTY_KLUDGE, which went missing in
596 recent merge
Damien Miller20a8f972003-05-18 20:50:30 +1000597 - (djm) OpenBSD CVS Sync
598 - djm@cvs.openbsd.org 2003/05/16 03:27:12
599 [readconf.c ssh_config ssh_config.5 ssh-keysign.c]
600 add AddressFamily option to ssh_config (like -4, -6 on commandline).
601 Portable bug #534; ok markus@
Damien Millera9825782003-05-18 20:53:10 +1000602 - itojun@cvs.openbsd.org 2003/05/17 03:25:58
603 [auth-rhosts.c]
604 just in case, put numbers to sscanf %s arg.
Damien Millerf5399c22003-05-18 20:53:59 +1000605 - markus@cvs.openbsd.org 2003/05/17 04:27:52
606 [cipher.c cipher-ctr.c myproposal.h]
607 experimental support for aes-ctr modes from
608 http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt
609 ok djm@
Damien Miller7e1bbc52003-05-18 20:52:40 +1000610 - (djm) Remove IPv4 by default hack now that we can specify AF in config
Damien Miller0b8e9002003-05-18 21:44:07 +1000611 - (djm) Tidy and trim TODO
Damien Millere323df62003-05-18 22:24:09 +1000612 - (djm) Sync openbsd-compat/ with OpenBSD CVS head
Damien Miller31741252003-05-19 00:13:38 +1000613 - (djm) Big KNF on openbsd-compat/
Damien Miller5b5ca192003-05-19 00:50:02 +1000614 - (djm) KNF on md5crypt.[ch]
615 - (djm) KNF on auth-sia.[ch]
Damien Miller25d93422003-05-18 20:45:47 +1000616
61720030517
Ben Lindstrom4c9e9ab2003-05-18 01:22:43 +0000618 - (bal) strcat -> strlcat on openbsd-compat/realpath.c (rev 1.8 OpenBSD)
619
Damien Miller6e80c362003-05-16 11:38:00 +100062020030516
621 - (djm) OpenBSD CVS Sync
622 - djm@cvs.openbsd.org 2003/05/15 13:52:10
623 [ssh.c]
624 Make "ssh -V" print the OpenSSL version in a human readable form. Patch
625 from Craig Leres (mindrot at ee.lbl.gov); ok markus@
Damien Millerf9b3feb2003-05-16 11:38:32 +1000626 - jakob@cvs.openbsd.org 2003/05/15 14:02:47
627 [readconf.c servconf.c]
628 warn for unsupported config option. ok markus@
Damien Miller99b4b882003-05-16 11:38:46 +1000629 - markus@cvs.openbsd.org 2003/05/15 14:09:21
630 [auth2-krb5.c]
631 fix 64bit issue; report itojun@
Damien Millerb78d5eb2003-05-16 11:39:04 +1000632 - djm@cvs.openbsd.org 2003/05/15 14:55:25
633 [readconf.c readconf.h ssh_config ssh_config.5 sshconnect.c]
634 add a ConnectTimeout option to ssh, based on patch from
635 Jean-Charles Longuet (jclonguet at free.fr); portable #207 ok markus@
Damien Miller6ac2c482003-05-16 11:42:35 +1000636 - (djm) Add warning for UsePAM when built without PAM support
Damien Millerc46b6bc2003-05-16 15:51:44 +1000637 - (djm) A few type mismatch fixes from Bug #565
Damien Millere27c6cc2003-05-16 18:21:01 +1000638 - (djm) Guard free_pam_environment against NULL argument. Works around
639 HP/UX PAM problems debugged by dtucker
Damien Miller6e80c362003-05-16 11:38:00 +1000640
Damien Millerabbae982003-05-15 10:16:21 +100064120030515
642 - (djm) OpenBSD CVS Sync
643 - jmc@cvs.openbsd.org 2003/05/14 13:11:56
644 [ssh-agent.1]
645 setup -> set up;
646 from wiz@netbsd
Damien Miller37876e92003-05-15 10:19:46 +1000647 - jakob@cvs.openbsd.org 2003/05/14 18:16:20
648 [key.c key.h readconf.c readconf.h ssh_config.5 sshconnect.c]
649 [dns.c dns.h README.dns ssh-keygen.1 ssh-keygen.c]
650 add experimental support for verifying hos keys using DNS as described
651 in draft-ietf-secsh-dns-xx.txt. more information in README.dns.
652 ok markus@ and henning@
Damien Miller54c45982003-05-15 10:20:13 +1000653 - markus@cvs.openbsd.org 2003/05/14 22:24:42
654 [clientloop.c session.c ssh.1]
655 allow to send a BREAK to the remote system; ok various
Damien Millerf842fcb2003-05-15 12:01:28 +1000656 - markus@cvs.openbsd.org 2003/05/15 00:28:28
657 [sshconnect2.c]
658 cleanup unregister of per-method packet handlers; ok djm@
Damien Miller2aa0ab42003-05-15 12:05:28 +1000659 - jakob@cvs.openbsd.org 2003/05/15 01:48:10
660 [readconf.c readconf.h servconf.c servconf.h]
661 always parse kerberos options. ok djm@ markus@
Damien Millerb0622652003-05-15 13:27:28 +1000662 - jakob@cvs.openbsd.org 2003/05/15 02:27:15
663 [dns.c]
664 add missing freerrset
Damien Miller3a3261f2003-05-15 13:37:19 +1000665 - markus@cvs.openbsd.org 2003/05/15 03:08:29
666 [cipher.c cipher-bf1.c cipher-aes.c cipher-3des1.c]
667 split out custom EVP ciphers
Damien Millered12a262003-05-15 13:37:43 +1000668 - djm@cvs.openbsd.org 2003/05/15 03:10:52
669 [ssh-keygen.c]
670 avoid warning; ok jakob@
Damien Miller4962ed62003-05-15 13:48:59 +1000671 - mouring@cvs.openbsd.org 2003/05/15 03:39:07
672 [sftp-int.c]
673 Make put/get (globed and nonglobed) code more consistant. OK djm@
Damien Miller19c8f2b2003-05-15 13:49:21 +1000674 - mouring@cvs.openbsd.org 2003/05/15 03:43:59
Damien Miller34bb5672003-05-15 13:49:58 +1000675 [sftp-int.c sftp.c]
Damien Miller19c8f2b2003-05-15 13:49:21 +1000676 Teach ls how to display multiple column display and allow users
677 to return to single column format via 'ls -1'. OK @djm
Damien Miller156cbe82003-05-15 14:16:41 +1000678 - jakob@cvs.openbsd.org 2003/05/15 04:08:44
679 [readconf.c servconf.c]
680 disable kerberos when not supported. ok markus@
Damien Miller46a7b402003-05-15 14:17:28 +1000681 - markus@cvs.openbsd.org 2003/05/15 04:08:41
682 [ssh.1]
683 ~B is ssh2 only
Damien Miller2aa0ab42003-05-15 12:05:28 +1000684 - (djm) Always parse UsePAM
Damien Miller7abe09b2003-05-15 10:53:49 +1000685 - (djm) Configure glue for DNS support (code doesn't work in portable yet)
Damien Millerd9ec3702003-05-15 12:27:08 +1000686 - (djm) Import getrrsetbyname() function from OpenBSD libc (for DNS support)
Damien Millera47f5262003-05-15 13:23:07 +1000687 - (djm) Tidy Makefile clean targets
Damien Miller5975cf12003-05-15 13:23:36 +1000688 - (djm) Adapt README.dns for portable
Damien Millerffda4cb2003-05-15 13:57:51 +1000689 - (djm) Avoid uuencode.c warnings
Damien Miller156cbe82003-05-15 14:16:41 +1000690 - (djm) Enable UsePAM when built --with-pam
Damien Millerb10f1cd2003-05-15 20:55:27 +1000691 - (djm) Only build getrrsetbyname replacement when using --with-dns
Damien Miller04cb5362003-05-15 21:29:10 +1000692 - (djm) Bug #529: sshd doesn't work correctly after SIGHUP (copy argv
693 correctly)
Damien Millereff041d2003-05-15 21:33:46 +1000694 - (djm) Bug #444: Wrong paths after reconfigure
Darren Tucker5d0ccf32003-05-15 21:42:59 +1000695 - (dtucker) HP-UX needs to include <sys/strtio.h> for TIOCSBRK
Damien Miller04cb5362003-05-15 21:29:10 +1000696
Damien Miller1a27a1e2003-05-14 10:27:09 +100069720030514
698 - (djm) Bug #117: Don't lie to PAM about username
Damien Millerd5580922003-05-14 13:40:06 +1000699 - (djm) RCSID sync w/ OpenBSD
Damien Millerc652cac2003-05-14 13:40:54 +1000700 - (djm) OpenBSD CVS Sync
701 - djm@cvs.openbsd.org 2003/04/09 12:00:37
702 [readconf.c]
703 strip trailing whitespace from config lines before parsing.
704 Fixes bz 528; ok markus@
Damien Millera201bb32003-05-14 13:41:23 +1000705 - markus@cvs.openbsd.org 2003/04/12 10:13:57
706 [cipher.c]
707 hide cipher details; ok djm@
Damien Milleref095ce2003-05-14 13:41:39 +1000708 - markus@cvs.openbsd.org 2003/04/12 10:15:36
709 [misc.c]
710 debug->debug2
Damien Miller44e72a72003-05-14 13:42:08 +1000711 - naddy@cvs.openbsd.org 2003/04/12 11:40:15
712 [ssh.1]
713 document -V switch, fix wording; ok markus@
Damien Miller2372ace2003-05-14 13:42:23 +1000714 - markus@cvs.openbsd.org 2003/04/14 14:17:50
715 [channels.c sshconnect.c sshd.c ssh-keyscan.c]
716 avoid hardcoded SOCK_xx; with itojun@; should allow ssh over SCTP
Damien Miller8ce778a2003-05-14 13:43:25 +1000717 - mouring@cvs.openbsd.org 2003/04/14 21:31:27
718 [sftp-int.c]
719 Missing globfree(&g) in process_put() spotted by Vince Brimhall
720 <VBrimhall@novell.com>. ok@ Theo
721 - markus@cvs.openbsd.org 2003/04/16 14:35:27
722 [auth.h]
723 document struct Authctxt; with solar
Damien Millerea5ade22003-05-14 13:43:53 +1000724 - deraadt@cvs.openbsd.org 2003/04/26 04:29:49
725 [ssh-keyscan.c]
726 -t in usage(); rogier@quaak.org
Damien Miller049245d2003-05-14 13:44:42 +1000727 - mouring@cvs.openbsd.org 2003/04/30 01:16:20
728 [sshd.8 sshd_config.5]
729 Escape ?, * and ! in .Ql for nroff compatibility. OpenSSH Portable
730 Bug #550 and * escaping suggested by jmc@.
Damien Miller31554322003-05-14 13:44:58 +1000731 - david@cvs.openbsd.org 2003/04/30 20:41:07
732 [sshd.8]
733 fix invalid .Pf macro usage introduced in previous commit
734 ok jmc@ mouring@
Damien Millerdb274722003-05-14 13:45:22 +1000735 - markus@cvs.openbsd.org 2003/05/11 16:56:48
736 [authfile.c ssh-keygen.c]
737 change key_load_public to try to read a public from:
738 rsa1 private or rsa1 public and ssh2 keys.
739 this makes ssh-keygen -e fail for ssh1 keys more gracefully
740 for example; report from itojun (netbsd pr 20550).
Damien Millerb1ca8bb2003-05-14 13:45:42 +1000741 - markus@cvs.openbsd.org 2003/05/11 20:30:25
742 [channels.c clientloop.c serverloop.c session.c ssh.c]
743 make channel_new() strdup the 'remote_name' (not the caller); ok theo
Damien Miller280ecfb2003-05-14 13:46:00 +1000744 - markus@cvs.openbsd.org 2003/05/12 16:55:37
745 [sshconnect2.c]
746 for pubkey authentication try the user keys in the following order:
747 1. agent keys that are found in the config file
748 2. other agent keys
749 3. keys that are only listed in the config file
750 this helps when an agent has many keys, where the server might
751 close the connection before the correct key is used. report & ok pb@
Damien Miller93506352003-05-14 13:46:33 +1000752 - markus@cvs.openbsd.org 2003/05/12 18:35:18
753 [ssh-keyscan.1]
754 typo: DSA keys are of type ssh-dss; Brian Poole
Damien Millerfb7508e2003-05-14 13:47:07 +1000755 - markus@cvs.openbsd.org 2003/05/14 00:52:59
756 [ssh2.h]
757 ranges for per auth method messages
758 - djm@cvs.openbsd.org 2003/05/14 01:00:44
759 [sftp.1]
760 emphasise the batchmode functionality and make reference to pubkey auth,
761 both of which are FAQs; ok markus@
Damien Miller3ab496b2003-05-14 13:47:37 +1000762 - markus@cvs.openbsd.org 2003/05/14 02:15:47
763 [auth2.c monitor.c sshconnect2.c auth2-krb5.c]
764 implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@
765 server interops with commercial client; ok jakob@ djm@
Damien Millerd6ead282003-05-14 19:30:38 +1000766 - jmc@cvs.openbsd.org 2003/05/14 08:25:39
767 [sftp.1]
768 - better formatting in SYNOPSIS
769 - whitespace at EOL
770 ok djm@
Damien Millerbe64d432003-05-14 19:31:12 +1000771 - markus@cvs.openbsd.org 2003/05/14 08:57:49
772 [monitor.c]
773 http://bugzilla.mindrot.org/show_bug.cgi?id=560
774 Privsep child continues to run after monitor killed.
775 Pass monitor signals through to child; Darren Tucker
Damien Miller9c617692003-05-14 14:31:11 +1000776 - (djm) Make portable build with MIT krb5 (some issues remain)
Damien Miller4e448a32003-05-14 15:11:48 +1000777 - (djm) Add new UsePAM configuration directive to allow runtime control
778 over usage of PAM. This allows non-root use of sshd when built with
779 --with-pam
Damien Miller9d507da2003-05-14 15:31:12 +1000780 - (djm) Die screaming if start_pam() is called when UsePAM=no
Damien Miller4d995192003-05-14 19:23:56 +1000781 - (djm) Avoid KrbV leak for MIT Kerberos
Darren Tuckerabef5622003-05-14 21:48:51 +1000782 - (dtucker) Set ai_socktype and ai_protocol in fake-getaddrinfo.c. ok djm@
Damien Miller1ea71662003-05-14 22:33:58 +1000783 - (djm) Bug #258: sscanf("[0-9]") -> sscanf("[0123456789]") for portability
Damien Miller1a27a1e2003-05-14 10:27:09 +1000784
Damien Miller75d3b052003-05-12 18:15:49 +100078520030512
786 - (djm) Redhat spec: Don't install profile.d scripts when not
787 building with GNOME/GTK askpass (patch from bet@rahul.net)
788
Darren Tuckere8831092003-05-10 16:48:23 +100078920030510
790 - (dtucker) Bug #318: Create ssh_prng_cmds.out during "make" rather than
791 "make install". Patch by roth@feep.net.
Darren Tuckerc437cda2003-05-10 17:05:46 +1000792 - (dtucker) Bug #536: Test for and work around openpty/controlling tty
793 problem on Linux (fixes "could not set controlling tty" errors).
Damien Miller4f9f42a2003-05-10 19:28:02 +1000794 - (djm) Merge FreeBSD PAM code: replaces PAM password auth kludge with
795 proper challenge-response module
Damien Miller0d8b7922003-05-10 23:42:12 +1000796 - (djm) 2-clause license on loginrec.c, with permission from
797 andre@ae-35.com
Darren Tuckere8831092003-05-10 16:48:23 +1000798
Darren Tucker70a08cd2003-05-04 10:41:20 +100079920030504
Darren Tuckerac279282003-05-04 11:36:25 +1000800 - (dtucker) Bug #497: Move #include of bsd-cygwin_util.h to openbsd-compat.h.
801 Patch from vinschen@redhat.com.
Darren Tucker70a08cd2003-05-04 10:41:20 +1000802
Darren Tucker04cc5382003-05-03 07:32:56 +100080320030503
804 - (dtucker) Add missing "void" to record_failed_login in bsd-cray.c. Noted
805 by wendyp@cray.com.
806
Darren Tucker3c016542003-05-02 20:48:21 +100080720030502
808 - (dtucker) Bug #544: ignore invalid cmsg_type on Linux 2.0 kernels,
809 privsep should now work.
Darren Tucker97363a82003-05-02 23:42:25 +1000810 - (dtucker) Move handling of bad password authentications into a platform
Darren Tuckerbd570d72003-05-02 23:50:09 +1000811 specific record_failed_login() function (affects AIX & Unicos). ok mouring@
Darren Tucker3c016542003-05-02 20:48:21 +1000812
Damien Millereab4bae2003-04-29 23:22:40 +100081320030429
814 - (djm) Add back radix.o (used by AFS support), after it went missing from
815 Makefile many moons ago
816 - (djm) Apply "owl-always-auth" patch from Openwall/Solar Designer
817 - (djm) Fix blibpath specification for AIX/gcc
818 - (djm) Some systems have basename in -lgen. Fix from ayamura@ayamura.org
819
Ben Lindstrom0e7f4362003-04-28 23:30:43 +000082020030428
821 - (bal) [defines.h progressmeter.c scp.c] Some more culling of non 64bit
822 hacked code.
823
Ben Lindstrom93b6b772003-04-27 17:55:33 +000082420030427
825 - (bal) Bug #541: return; was dropped by mistake. Reported by
826 furrier@iglou.com
Ben Lindstrom796b9a52003-04-27 18:01:37 +0000827 - (bal) Since we don't support platforms lacking u_int_64. We may
828 as well clean out some of those evil #ifdefs
Ben Lindstrom683036e2003-04-27 18:41:30 +0000829 - (bal) auth1.c minor resync while looking at the code.
Ben Lindstromf50ad1f2003-04-27 18:44:31 +0000830 - (bal) auth2.c same changed as above.
Ben Lindstrom93b6b772003-04-27 17:55:33 +0000831
Damien Millerd186d742003-04-09 19:40:33 +100083220030409
833 - (djm) Bug #539: Specify creation mode with O_CREAT for lastlog. Report
834 from matth@eecs.berkeley.edu
Damien Millera92a5892003-04-09 19:41:25 +1000835 - (djm) Make the spec work with Redhat 9.0 (which renames sharutils)
Damien Millera5539d22003-04-09 20:50:06 +1000836 - (djm) OpenBSD CVS Sync
837 - markus@cvs.openbsd.org 2003/04/02 09:48:07
838 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
839 [readconf.h serverloop.c sshconnect2.c]
840 reapply rekeying chage, tested by henning@, ok djm@
Damien Miller703ced52003-04-09 20:50:26 +1000841 - markus@cvs.openbsd.org 2003/04/02 14:36:26
842 [ssh-keysign.c]
843 potential segfault if KEY_UNSPEC; cjwatson@debian.org; bug #526
Damien Miller3bed1912003-04-09 20:50:59 +1000844 - itojun@cvs.openbsd.org 2003/04/03 07:25:27
845 [progressmeter.c]
846 $OpenBSD$
847 - itojun@cvs.openbsd.org 2003/04/03 10:17:35
848 [progressmeter.c]
849 remove $OpenBSD$, as other *.c does not have it.
Damien Millerb1ecd9c2003-04-09 20:51:24 +1000850 - markus@cvs.openbsd.org 2003/04/07 08:29:57
851 [monitor_wrap.c]
852 typo: get correct counters; introduced during rekeying change.
Damien Millera0898b82003-04-09 21:05:52 +1000853 - millert@cvs.openbsd.org 2003/04/07 21:58:05
854 [progressmeter.c]
855 The UCB copyright here is incorrect. This code did not originate
856 at UCB, it was written by Luke Mewburn. Updated the copyright at
857 the author's request. markus@ OK
858 - itojun@cvs.openbsd.org 2003/04/08 20:21:29
859 [*.c *.h]
860 rename log() into logit() to avoid name conflict. markus ok, from
861 netbsd
862 - (djm) XXX - Performed locally using:
863 "perl -p -i -e 's/(\s|^)log\(/$1logit\(/g' *.c *.h"
Damien Millerbf2a0172003-04-09 21:07:14 +1000864 - hin@cvs.openbsd.org 2003/04/09 08:23:52
865 [servconf.c]
866 Don't include <krb.h> when compiling with Kerberos 5 support
Damien Millera0898b82003-04-09 21:05:52 +1000867 - (djm) Fix up missing include for packet.c
Damien Miller2a3f20e2003-04-09 21:12:00 +1000868 - (djm) Fix missed log => logit occurance (reference by function pointer)
Damien Millerd186d742003-04-09 19:40:33 +1000869
Ben Lindstromc8a49d72003-04-02 15:18:22 +000087020030402
871 - (bal) if IP_TOS is not found or broken don't try to compile in
872 packet_set_tos() function call. bug #527
873
Damien Miller495dca32003-04-01 21:42:14 +100087420030401
875 - (djm) OpenBSD CVS Sync
876 - jmc@cvs.openbsd.org 2003/03/28 10:11:43
877 [scp.1 sftp.1 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5 sshd_config.5]
878 [ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
879 - killed whitespace
880 - new sentence new line
881 - .Bk for arguments
882 ok markus@
Damien Miller2dc074e2003-04-01 21:43:39 +1000883 - markus@cvs.openbsd.org 2003/04/01 10:10:23
884 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
885 [readconf.h serverloop.c sshconnect2.c]
886 rekeying bugfixes and automatic rekeying:
887 * both client and server rekey _automatically_
888 (a) after 2^31 packets, because after 2^32 packets
889 the sequence number for packets wraps
890 (b) after 2^(blocksize_in_bits/4) blocks
891 (see: draft-ietf-secsh-newmodes-00.txt)
892 (a) and (b) are _enabled_ by default, and only disabled for known
893 openssh versions, that don't support rekeying properly.
894 * client option 'RekeyLimit'
895 * do not reply to requests during rekeying
896 - markus@cvs.openbsd.org 2003/04/01 10:22:21
897 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
898 [readconf.h serverloop.c sshconnect2.c]
899 backout rekeying changes (for 3.6.1)
Damien Millerd3209042003-04-01 21:44:37 +1000900 - markus@cvs.openbsd.org 2003/04/01 10:31:26
901 [compat.c compat.h kex.c]
902 bugfix causes stalled connections for ssh.com < 3.0; noticed by ho@;
903 tested by ho@ and myself
Damien Miller13c1c7a2003-04-01 21:45:26 +1000904 - markus@cvs.openbsd.org 2003/04/01 10:56:46
905 [version.h]
906 3.6.1
Damien Millerb80e52a2003-04-01 21:46:53 +1000907 - (djm) Crank spec file versions
Damien Millera0ab6692003-04-01 21:47:16 +1000908 - (djm) Release 3.6.1p1
Damien Miller495dca32003-04-01 21:42:14 +1000909
Damien Millerb3207e82003-03-26 16:01:11 +110091020030326
911 - (djm) OpenBSD CVS Sync
912 - deraadt@cvs.openbsd.org 2003/03/26 04:02:51
913 [sftp-server.c]
914 one last fix to the tree: race fix broke stuff; pr 3169;
915 srp@srparish.net, help from djm
916
Damien Miller68d893d2003-03-25 09:07:52 +110091720030325
918 - (djm) Fix getpeerid support for 64 bit BE systems. From
919 Arnd Bergmann <arndb@de.ibm.com>
920
Damien Millerb062c292003-03-24 09:12:09 +110092120030324
922 - (djm) OpenBSD CVS Sync
923 - markus@cvs.openbsd.org 2003/03/23 19:02:00
924 [monitor.c]
925 unbreak rekeying for privsep; ok millert@
926 - Release 3.6p1
Damien Miller62b6b172003-03-24 13:35:58 +1100927 - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
928 Report from murple@murple.net, diagnosis from dtucker@zip.com.au
Damien Millerb062c292003-03-24 09:12:09 +1100929
Damien Miller7630ee22003-09-02 22:52:00 +1000930$Id: ChangeLog,v 1.2922 2003/09/02 12:52:00 djm Exp $