blob: 8eba44a972e42ff1c651bace4d489ee1bae22b42 [file] [log] [blame]
Damien Miller3e8f41e2003-11-17 21:09:50 +1100120031117
2 - (djm) OpenBSD CVS Sync
3 - djm@cvs.openbsd.org 2003/11/03 09:03:37
4 [auth-chall.c]
5 make this a little more idiot-proof; ok markus@
6 (includes portable-specific changes)
Damien Miller5a388972003-11-17 21:10:47 +11007 - jakob@cvs.openbsd.org 2003/11/03 09:09:41
8 [sshconnect.c]
9 move changed key warning into warn_changed_key(). ok markus@
Damien Miller8f746ec2003-11-17 21:11:15 +110010 - jakob@cvs.openbsd.org 2003/11/03 09:37:32
11 [sshconnect.c]
12 do not free static type pointer in warn_changed_key()
Damien Miller3e3b5142003-11-17 21:13:40 +110013 - djm@cvs.openbsd.org 2003/11/04 08:54:09
14 [auth1.c auth2.c auth2-pubkey.c auth.h auth-krb5.c auth-passwd.c]
15 [auth-rhosts.c auth-rh-rsa.c auth-rsa.c monitor.c serverloop.c]
16 [session.c]
17 standardise arguments to auth methods - they should all take authctxt.
18 check authctxt->valid rather then pw != NULL; ok markus@
Damien Millera9fcd3a2003-11-17 21:16:55 +110019 - jakob@cvs.openbsd.org 2003/11/08 16:02:40
20 [auth1.c]
21 remove unused variable (pw). ok djm@
22 (id sync only - still used in portable)
Damien Miller939cd382003-11-17 21:17:24 +110023 - jmc@cvs.openbsd.org 2003/11/08 19:17:29
24 [sftp-int.c]
25 typos from Jonathon Gray;
Damien Millerf58b58c2003-11-17 21:18:23 +110026 - jakob@cvs.openbsd.org 2003/11/10 16:23:41
27 [bufaux.c bufaux.h cipher.c cipher.h hostfile.c hostfile.h key.c]
28 [key.h sftp-common.c sftp-common.h sftp-server.c sshconnect.c sshd.c]
29 [ssh-dss.c ssh-rsa.c uuencode.c uuencode.h]
30 constify. ok markus@ & djm@
Damien Millerc1f27922003-11-17 21:19:05 +110031 - dtucker@cvs.openbsd.org 2003/11/12 10:12:15
32 [scp.c]
33 When called with -q, pass -q to ssh; suppresses SSH2 banner. ok markus@
Damien Miller150b5572003-11-17 21:19:29 +110034 - jakob@cvs.openbsd.org 2003/11/12 16:39:58
35 [dns.c dns.h readconf.c ssh_config.5 sshconnect.c]
36 update SSHFP validation. ok markus@
Damien Millerfe448472003-11-17 21:19:49 +110037 - jmc@cvs.openbsd.org 2003/11/12 20:14:51
38 [ssh_config.5]
39 make verb agree with subject, and kill some whitespace;
Damien Miller91c6aa42003-11-17 21:20:18 +110040 - markus@cvs.openbsd.org 2003/11/14 13:19:09
41 [sshconnect2.c]
42 cleanup and minor fixes for the client code; from Simon Wilkinson
Damien Miller3e8f41e2003-11-17 21:09:50 +110043
Darren Tucker203c40b2003-11-15 12:13:16 +11004420031115
45 - (dtucker) [regress/agent-ptrace.sh] Test for GDB output from Solaris and
46 HP-UX, skip test on AIX.
47
Darren Tucker0947ddf2003-11-13 11:21:31 +11004820031113
49 - (dtucker) [auth-pam.c] Append newlines to lines output by the
50 pam_chauthtok_conv().
Darren Tucker798ca842003-11-13 11:28:49 +110051 - (dtucker) [README ssh-host-config ssh-user-config Makefile] (All
52 contrib/cygwin). Major update from vinschen at redhat.com.
53 - Makefile provides a `cygwin-postinstall' target to run right after
54 `make install'.
55 - Better support for Windows 2003 Server.
56 - Try to get permissions as correct as possible.
57 - New command line options to allow full automated host configuration.
58 - Create configs from skeletons in /etc/defaults/etc.
59 - Use /bin/bash, allows reading user input with readline support.
60 - Remove really old configs from /usr/local.
Darren Tuckerae52b7c2003-11-13 19:52:31 +110061 - (dtucker) [auth-pam.c] Add newline to accumulated PAM_TEXT_INFO and
62 PAM_ERROR_MSG messages.
Darren Tucker0947ddf2003-11-13 11:21:31 +110063
Damien Miller418a3862003-11-06 20:27:51 +11006420031106
65 - (djm) Clarify UsePAM consequences a little more
66
Darren Tucker7c582db2003-11-03 18:59:29 +11006720031103
68 - (dtucker) [contrib/cygwin/ssh-host-config] Ensure entries in /etc/services
69 are created correctly with CRLF line terminations. Patch from vinschen at
70 redhat.com.
Darren Tuckera47c9bc2003-11-03 20:03:25 +110071 - (dtucker) OpenBSD CVS Sync
72 - markus@cvs.openbsd.org 2003/10/15 09:48:45
73 [monitor_wrap.c]
74 check pmonitor != NULL
Darren Tucker8cc39782003-11-03 20:05:03 +110075 - markus@cvs.openbsd.org 2003/10/21 09:50:06
76 [auth2-gss.c]
77 make sure the doid is larger than 2
Darren Tucker56afe142003-11-03 20:06:14 +110078 - avsm@cvs.openbsd.org 2003/10/26 16:57:43
79 [sshconnect2.c]
80 rename 'supported' static var in userauth_gssapi() to 'gss_supported'
81 to avoid shadowing the global version. markus@ ok
Darren Tucker6db8f932003-11-03 20:07:14 +110082 - markus@cvs.openbsd.org 2003/10/28 09:08:06
83 [misc.c]
84 error->debug for getsockopt+TCP_NODELAY; several requests
Darren Tucker655a5e02003-11-03 20:09:03 +110085 - markus@cvs.openbsd.org 2003/11/02 11:01:03
86 [auth2-gss.c compat.c compat.h sshconnect2.c]
87 remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk
Darren Tuckerbe8a7712003-11-03 22:52:52 +110088 - (dtucker) [regress/agent-ptrace.sh] Use numeric uid and gid.
Darren Tucker7c582db2003-11-03 18:59:29 +110089
Darren Tucker0d37b5c2003-10-21 12:41:14 +10009020031021
91 - (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords
92 directly. Noted by Darren.Moffat at sun.com.
Darren Tuckerea4c6702003-10-21 22:27:08 +100093 - (dtucker) [regress/agent-ptrace.sh] Skip agent-test unless SUDO is set,
94 make agent setgid during test.
Darren Tucker0d37b5c2003-10-21 12:41:14 +100095
Darren Tucker9568ad92003-10-17 16:32:11 +10009620031017
97 - (dtucker) [INSTALL] Note that --with-md5 is now required on platforms with
98 MD5 passwords even if PAM support is enabled. From steev at detritus.net.
99
Darren Tucker1f203942003-10-15 15:50:42 +100010020031015
101 - (dtucker) OpenBSD CVS Sync
102 - jmc@cvs.openbsd.org 2003/10/08 08:27:36
103 [scp.1 scp.c sftp-server.8 sftp.1 sftp.c ssh.1 sshd.8]
104 scp and sftp: add options list and sort options. options list requested
105 by deraadt@
106 sshd: use same format as ssh
107 ssh: remove wrong option from list
108 sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)
109 ok deraadt@ markus@
Darren Tuckera044f472003-10-15 15:52:03 +1000110 - markus@cvs.openbsd.org 2003/10/08 15:21:24
111 [readconf.c ssh_config.5]
112 default GSS API to no in client, too; ok jakob, deraadt@
Darren Tucker0a118da2003-10-15 15:54:32 +1000113 - markus@cvs.openbsd.org 2003/10/11 08:24:08
114 [readconf.c readconf.h ssh.1 ssh.c ssh_config.5]
115 remote x11 clients are now untrusted by default, uses xauth(8) to generate
116 untrusted cookies; ForwardX11Trusted=yes restores old behaviour.
117 ok deraadt; feedback and ok djm/fries
Darren Tuckerd05b6012003-10-15 15:55:59 +1000118 - markus@cvs.openbsd.org 2003/10/11 08:26:43
119 [sshconnect2.c]
120 search keys in reverse order; fixes #684
Darren Tucker7eb3de02003-10-15 15:56:58 +1000121 - markus@cvs.openbsd.org 2003/10/11 11:36:23
122 [monitor_wrap.c]
123 return NULL for missing banner; ok djm@
Darren Tuckerf132c672003-10-15 15:58:18 +1000124 - jmc@cvs.openbsd.org 2003/10/12 13:12:13
125 [ssh_config.5]
126 note that EnableSSHKeySign should be in the non-hostspecific section;
127 remove unnecessary .Pp;
128 ok markus@
Darren Tuckerb370ca92003-10-15 15:59:26 +1000129 - markus@cvs.openbsd.org 2003/10/13 08:22:25
130 [scp.1 sftp.1]
131 don't refer to options related to forwarding; ok jmc@
Darren Tuckerdda19d62003-10-15 16:00:47 +1000132 - jakob@cvs.openbsd.org 2003/10/14 19:42:10
133 [dns.c dns.h readconf.c ssh-keygen.c sshconnect.c]
134 include SSHFP lookup code (not enabled by default). ok markus@
Darren Tucker64b77bc2003-10-15 16:07:53 +1000135 - jakob@cvs.openbsd.org 2003/10/14 19:43:23
136 [README.dns]
137 update
Darren Tucker072a7b12003-10-15 16:10:25 +1000138 - markus@cvs.openbsd.org 2003/10/14 19:54:39
139 [session.c ssh-agent.c]
140 10X for mkdtemp; djm@
Darren Tucker5f88d342003-10-15 16:57:57 +1000141 - (dtucker) [acconfig.h configure.ac dns.c openbsd-compat/getrrsetbyname.c
142 openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always
143 compiled in but disabled in config.
Darren Tuckerc6020652003-10-15 17:48:20 +1000144 - (dtucker) [auth.c] Check for disabled password expiry on HP-UX Trusted Mode.
Tim Rice6b1f8a32003-10-15 09:22:39 -0700145 - (tim) [regress/banner.sh] portability fix.
Darren Tucker1f203942003-10-15 15:50:42 +1000146
Darren Tucker6c0c0702003-10-09 14:13:53 +100014720031009
148 - (dtucker) [sshd_config.5] UsePAM defaults to "no". ok djm@
149
Darren Tucker046dff22003-10-08 17:32:02 +100015020031008
151 - (dtucker) OpenBSD CVS Sync
152 - dtucker@cvs.openbsd.org 2003/10/07 01:47:27
153 [sshconnect2.c]
Darren Tucker79644822003-10-08 17:37:58 +1000154 Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 &
155 #707. ok markus@
Darren Tucker64dbccc2003-10-08 17:34:38 +1000156 - djm@cvs.openbsd.org 2003/10/07 07:04:16
157 [sftp-int.c]
158 sftp quoting fix from admorten AT umich.edu; ok markus@
Darren Tucker79644822003-10-08 17:37:58 +1000159 - deraadt@cvs.openbsd.org 2003/10/07 21:58:28
160 [sshconnect2.c]
161 set ptr to NULL after free
Darren Tuckerdc001a52003-10-08 17:47:19 +1000162 - dtucker@cvs.openbsd.org 2003/10/07 01:52:13
163 [regress/Makefile regress/banner.sh]
164 Test SSH2 banner. ok markus@
Darren Tucker0240ff72003-10-08 17:52:10 +1000165 - djm@cvs.openbsd.org 2003/10/07 07:04:52
166 [regress/sftp-cmds.sh]
167 more sftp quoting regress tests; ok markus
Darren Tucker046dff22003-10-08 17:32:02 +1000168
Damien Miller6f1f6112003-10-07 10:18:22 +100016920031007
170 - (djm) Delete autom4te.cache after autoreconf
Darren Tucker8846a072003-10-07 11:30:15 +1000171 - (dtucker) [auth-pam.c auth-pam.h session.c] Make PAM use the new static
172 cleanup functions. With & ok djm@
Darren Tuckerdfe6d912003-10-07 17:40:56 +1000173 - (dtucker) [contrib/redhat/openssh.spec] Bug #714: Now that UsePAM is a
174 run-time switch, always build --with-md5-passwords.
Darren Tucker2e8c0cc2003-10-07 17:49:56 +1000175 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoul.c]
176 Bug #670: add strtoul() to openbsd-compat for platforms lacking it. ok djm@
Darren Tucker3b2a06c2003-10-07 18:37:11 +1000177 - (dtucker) [configure.ac] Bug #715: Set BROKEN_SETREUID and BROKEN_SETREGID
178 on Reliant Unix. Patch from Robert.Dahlem at siemens.com.
Darren Tucker89df7a32003-10-07 20:35:57 +1000179 - (dtucker) [configure.ac] Bug #710: Check for dlsym() in libdl on
180 Reliant Unix. Based on patch from Robert.Dahlem at siemens.com.
Damien Miller6f1f6112003-10-07 10:18:22 +1000181
Darren Tucker4a250542003-10-03 17:57:24 +100018220031003
Darren Tuckerf4bf5d02003-10-07 11:31:22 +1000183 - (dtucker) OpenBSD CVS Sync
Darren Tucker4a250542003-10-03 17:57:24 +1000184 - markus@cvs.openbsd.org 2003/10/02 10:41:59
185 [sshd.c]
186 print openssl version, too, several requests; ok henning/djm.
Darren Tuckere3ca82e2003-10-03 18:02:30 +1000187 - markus@cvs.openbsd.org 2003/10/02 08:26:53
188 [ssh-gss.h]
189 missing $OpenBSD:; dtucker
Tim Rice30aa44c2003-10-03 22:30:23 -0700190 - (tim) [contrib/caldera/openssh.spec] Remove obsolete --with-ipv4-default
191 option.
Darren Tucker4a250542003-10-03 17:57:24 +1000192
Darren Tucker3e33cec2003-10-02 16:12:36 +100019320031002
Darren Tuckerf4bf5d02003-10-07 11:31:22 +1000194 - (dtucker) OpenBSD CVS Sync
Darren Tucker3e33cec2003-10-02 16:12:36 +1000195 - markus@cvs.openbsd.org 2003/09/23 20:17:11
196 [Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c
197 cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h
198 monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h
199 ssh-agent.c sshd.c]
200 replace fatal_cleanup() and linked list of fatal callbacks with static
201 cleanup_exit() function. re-refine cleanup_exit() where appropriate,
202 allocate sshd's authctxt eary to allow simpler cleanup in sshd.
203 tested by many, ok deraadt@
Darren Tucker6cc310b2003-10-02 16:15:15 +1000204 - markus@cvs.openbsd.org 2003/09/23 20:18:52
205 [progressmeter.c]
206 don't print trailing \0; bug #709; Robert.Dahlem@siemens.com
207 ok millert/deraadt@
Darren Tucker5dcdd212003-10-02 16:17:00 +1000208 - markus@cvs.openbsd.org 2003/09/23 20:41:11
209 [channels.c channels.h clientloop.c]
210 move client only agent code to clientloop.c
Darren Tucker8fca6b52003-10-02 16:18:22 +1000211 - markus@cvs.openbsd.org 2003/09/26 08:19:29
212 [sshd.c]
213 no need to set the listen sockets to non-block; ok deraadt@
Darren Tucker61776952003-10-02 16:19:47 +1000214 - jmc@cvs.openbsd.org 2003/09/29 11:40:51
215 [ssh.1]
216 - add list of options to -o and .Xr ssh_config(5)
217 - some other cleanup
218 requested by deraadt@;
219 ok deraadt@ markus@
Darren Tuckera49d36e2003-10-02 16:20:54 +1000220 - markus@cvs.openbsd.org 2003/09/29 20:19:57
221 [servconf.c sshd_config]
222 GSSAPICleanupCreds -> GSSAPICleanupCredentials
Darren Tucker0ccb59b2003-10-02 16:26:34 +1000223 - (dtucker) [configure.ac] Don't set DISABLE_SHADOW when configuring
224 --with-pam. ok djm@
Darren Tucker7596d682003-10-02 17:32:30 +1000225 - (dtucker) [ssh-gss.h] Prototype change missed in sync.
Darren Tuckerf391ba62003-10-02 20:07:09 +1000226 - (dtucker) [session.c] Fix bus errors on some 64-bit Solaris configurations.
227 Based on patches by Matthias Koeppe and Thomas Baden. ok djm@
Darren Tucker3e33cec2003-10-02 16:12:36 +1000228
Ben Lindstromb210aa22003-09-30 23:49:06 +000022920030930
230 - (bal) Fix issues in openbsd-compat/realpath.c
231
Darren Tuckerb88fcc72003-09-25 20:18:33 +100023220030925
233 - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove
234 DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam. Patch from
235 michael_steffens at hp.com, ok djm@
Tim Riced4d18152003-09-25 19:04:34 -0700236 - (tim) [sshd_config] UsePAM defaults to no.
Darren Tuckerb88fcc72003-09-25 20:18:33 +1000237
Damien Millerdbb10472003-09-24 08:30:18 +100023820030924
239 - (djm) Update version.h and spec files for HEAD
Darren Tuckerbeaf6792003-09-24 20:03:48 +1000240 - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6.
Damien Millerdbb10472003-09-24 08:30:18 +1000241
Darren Tucker782390e2003-09-22 10:58:55 +100024220030923
Darren Tucker8a49dd12003-09-22 10:59:34 +1000243 - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-tree
Darren Tucker782390e2003-09-22 10:58:55 +1000244 builds. Portability corrections from tim@.
Tim Rice480ef8d2003-09-21 21:38:11 -0700245 - (dtucker) [configure.ac] Bug #665: uid swapping issues on Mac OS X.
Darren Tucker20379a32003-09-22 11:07:40 +1000246 Patch from max at quendi.de.
Darren Tuckered92b212003-09-22 11:26:16 +1000247 - (dtucker) [configure.ac] Bug #657: uid swapping issues on BSDi.
248 - (dtucker) [configure.ac] Bug #653: uid swapping issues on Tru64.
Darren Tucker00130112003-09-22 11:40:24 +1000249 - (dtucker) [configure.ac] Bug #693: uid swapping issues on NCR MP-RAS.
250 Patch from david.haughton at ncr.com
Darren Tuckerbe79af12003-09-22 11:58:21 +1000251 - (dtucker) [configure.ac] Bug #659: uid swapping issues on IRIX 6.
252 Part of patch supplied by bugzilla-openssh at thewrittenword.com
Darren Tuckerd5e082f2003-09-22 12:08:23 +1000253 - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c
254 openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with
255 where gai_strerror is defined as "const char *". Part of patch supplied
256 by bugzilla-openssh at thewrittenword.com
Darren Tucker8daf4b42003-09-22 12:32:00 +1000257 - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config] Update
258 ssh-host-config to match current defaults, bump README version. Patch from
259 vinschen at redhat.com.
Darren Tuckerfbe3b362003-09-22 12:54:37 +1000260 - (dtucker) [uidswap.c] Don't test restoration of uid on Cygwin since the
261 OS does not support permanently dropping privileges. Patch from
262 vinschen at redhat.com.
Darren Tucker051c2702003-09-22 13:05:26 +1000263 - (dtucker) [openbsd-compat/port-aix.c] Use correct include for xmalloc.h,
264 add canohost.h to stop warning. Based on patch from openssh-unix-dev at
265 thewrittenword.com
Darren Tucker42d30822003-09-22 13:28:36 +1000266 - (dtucker) [INSTALL] Bug #686: Document requirement for zlib 1.1.4 or
267 higher.
Tim Rice7a74c6b2003-09-21 21:00:59 -0700268 - (tim) Fix typo. s/SETEIUD_BREAKS_SETUID/SETEUID_BREAKS_SETUID/
Tim Rice480ef8d2003-09-21 21:38:11 -0700269 - (tim) [configure.ac] Bug 665: move 3 new AC_DEFINES outside of AC_TRY_RUN.
270 Report by distler AT golem ph utexas edu.
Darren Tucker220bf132003-09-22 20:41:40 +1000271 - (dtucker) [contrib/aix/pam.conf] Include example pam.conf for AIX from
272 article by genty at austin.ibm.com, included with the author's permission.
Darren Tuckerbd5361b2003-09-22 20:59:16 +1000273 - (dtucker) OpenBSD CVS Sync
274 - markus@cvs.openbsd.org 2003/09/18 07:52:54
275 [sshconnect.c]
276 missing {}; bug #656; jclonguet at free.fr
Darren Tuckerd2730d32003-09-22 21:00:19 +1000277 - markus@cvs.openbsd.org 2003/09/18 07:54:48
278 [buffer.c]
279 protect against double free; #660; zardoz at users.sf.net
Darren Tuckerd1d41b32003-09-22 21:01:27 +1000280 - markus@cvs.openbsd.org 2003/09/18 07:56:05
281 [authfile.c]
282 missing buffer_free(&encrypted); #662; zardoz at users.sf.net
Darren Tuckerfb16b242003-09-22 21:04:23 +1000283 - markus@cvs.openbsd.org 2003/09/18 08:49:45
284 [deattack.c misc.c session.c ssh-agent.c]
285 more buffer allocation fixes; from Solar Designer; CAN-2003-0682;
286 ok millert@
Darren Tuckerc0815c92003-09-22 21:05:50 +1000287 - miod@cvs.openbsd.org 2003/09/18 13:02:21
288 [authfd.c bufaux.c dh.c mac.c ssh-keygen.c]
289 A few signedness fixes for harmless situations; markus@ ok
Darren Tuckera8151da2003-09-22 21:06:46 +1000290 - markus@cvs.openbsd.org 2003/09/19 09:02:02
291 [packet.c]
292 buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471
Darren Tucker631a4a92003-09-22 21:08:21 +1000293 - markus@cvs.openbsd.org 2003/09/19 09:03:00
294 [buffer.c]
295 sign fix in buffer_dump; Jedi/Sector One; pr 3473
Darren Tucker6fa8abd2003-09-22 21:10:21 +1000296 - markus@cvs.openbsd.org 2003/09/19 11:29:40
297 [ssh-agent.c]
298 provide a ssh-agent specific fatal() function; ok deraadt
Darren Tucker3d326222003-09-22 21:11:20 +1000299 - markus@cvs.openbsd.org 2003/09/19 11:30:39
300 [ssh-keyscan.c]
301 avoid fatal_cleanup, just call exit(); ok deraadt
Darren Tucker3dbff2a2003-09-22 21:12:56 +1000302 - markus@cvs.openbsd.org 2003/09/19 11:31:33
303 [channels.c]
304 do not call channel_free_all on fatal; ok deraadt
Darren Tuckeraaa56cb2003-09-22 21:13:59 +1000305 - markus@cvs.openbsd.org 2003/09/19 11:33:09
306 [packet.c sshd.c]
307 do not call packet_close on fatal; ok deraadt
Darren Tucker8654d162003-09-22 21:14:55 +1000308 - markus@cvs.openbsd.org 2003/09/19 17:40:20
309 [scp.c]
310 error handling for remote-remote copy; #638; report Harald Koenig;
311 ok millert, fgs, henning, deraadt
Darren Tucker9a2c4cd2003-09-22 21:16:05 +1000312 - markus@cvs.openbsd.org 2003/09/19 17:43:35
313 [clientloop.c sshtty.c sshtty.h]
314 remove fatal callbacks from client code; ok deraadt
Ben Lindstromda4d9cf2003-09-22 15:36:15 +0000315 - (bal) "extration" -> "extraction" in ssh-rand-helper.c; repoted by john
316 on #unixhelp@efnet
Tim Rice7ff4e6d2003-09-22 19:50:14 -0700317 - (tim) [configure.ac] add --disable-etc-default-login option. ok djm
Damien Miller5c3a5582003-09-23 22:12:38 +1000318 - (djm) Sync with V_3_7 branch:
319 - (djm) Fix SSH1 challenge kludge
320 - (djm) Bug #671: Fix builds on OpenBSD
321 - (djm) Bug #676: Fix PAM stack corruption
322 - (djm) Fix bad free() in PAM code
323 - (djm) Don't call pam_end before pam_init
324 - (djm) Enable build with old OpenSSL again
325 - (djm) Trim deprecated options from INSTALL. Mention UsePAM
326 - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
Darren Tucker782390e2003-09-22 10:58:55 +1000327
Damien Miller677179f2003-09-19 16:30:14 +100032820030919
329 - (djm) Bug #683: Remove reference to --with-ipv4-default from INSTALL;
330 djast AT cs.toronto.edu
Damien Millerf09ad862003-09-19 16:41:01 +1000331 - (djm) Bug #661: Remove duplicate check for basename; from
332 bugzilla-openssh AT thewrittenword.com
Damien Miller968c8d22003-09-19 16:58:21 +1000333 - (djm) Bug #641: Allow RedHat RPM building without GTK-2; Patch from
334 jason AT devrandom.org
Damien Miller80409392003-09-19 17:05:24 +1000335 - (djm) Bug #646: Fix location of x11-ssh-askpass; Jim
Darren Tucker91acbf22003-09-19 20:43:38 +1000336 - (dtucker) [openbsd-compat/port-aix.h] Bug #640: Don't include audit.h
337 unless required. Reorder to reduce warnings.
Darren Tuckerc11b1e82003-09-19 20:56:51 +1000338 - (dtucker) [session.c] Bug #643: Fix size_t -> u_int and fix null deref
339 when /etc/default/login doesn't exist or isn't readable. Fixes from
340 jparsons-lists at saffron.net and georg.oppenberg at deu mci com.
Darren Tucker4724d962003-09-19 21:25:23 +1000341 - (dtucker) [acconfig.h] Updated basename test needs HAVE_BASENAME
Damien Miller677179f2003-09-19 16:30:14 +1000342
Damien Miller5d07e6d2003-09-18 18:25:46 +100034320030918
344 - (djm) Bug #652: Fix empty password auth
345
Damien Millerf2728092003-09-17 07:24:25 +100034620030917
347 - (djm) Sync with V_3_7 branch
Damien Miller5efcecc2003-09-17 07:31:14 +1000348 - (djm) OpenBSD Sync
349 - markus@cvs.openbsd.org 2003/09/16 21:02:40
350 [buffer.c channels.c version.h]
351 more malloc/fatal fixes; ok millert/deraadt; ghudson at MIT.EDU
Damien Millere007cf72003-09-17 07:32:17 +1000352 - (djm) Crank RPM spec file versions
Tim Rice628c8732003-09-17 13:20:33 -0700353 - (tim) [openbsd-compat/inet_ntoa.c] 20030917 "Sync with V_3_7 branch" undid
354 20030916 "Missed dead header in inet_ntoa.c"
Damien Millere007cf72003-09-17 07:32:17 +1000355
Darren Tuckere1a790d2003-09-16 11:52:19 +100035620030916
357 - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: Retrieve
358 PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it
Ben Lindstromf2b4e4e2003-09-16 03:31:03 +0000359 (eg Solaris, Reliant Unix). Patch from Robert.Dahlem at siemens.com.
360 ok djm@
361 - (bal) OpenBSD Sync
362 - deraadt@cvs.openbsd.org 2003/09/16 03:03:47
363 [buffer.c]
364 do not expand buffer before attempting to reallocate it; markus ok
Tim Riceb925b4b2003-09-15 22:40:49 -0700365 - (tim) [configure.ac] Fix portability issues.
Ben Lindstrome1210482003-09-16 17:23:29 +0000366 - (bal) Missed dead header in inet_ntoa.c
Darren Tuckere1a790d2003-09-16 11:52:19 +1000367
Darren Tuckerb12d16f2003-09-14 11:40:35 +100036820030914
369 - (dtucker) [Makefile regress/Makefile] Fix portability issues preventing
370 the regression tests from running with Solaris' make. Patch from Brian
371 Poole (raj at cerias.purdue.edu).
Darren Tucker7b6cb5c2003-09-14 13:16:55 +1000372 - (dtucker) [regress/Makefile] AIX's make doesn't like " +=", so replace
373 with vanilla "=".
Darren Tuckerb12d16f2003-09-14 11:40:35 +1000374
Darren Tuckerdc7e6562003-09-13 09:46:03 +100037520030913
376 - (dtucker) [regress/agent-timeout.sh] Timeout of 5 sec is borderline for
377 slower hosts, increase to 10 sec.
Darren Tucker2270c7e2003-09-13 10:41:56 +1000378 - (dtucker) [auth-passwd.c] On AIX, call setauthdb() before loginsuccess(),
379 required to correctly reset failed login count when using a password
380 registry other than "files" (eg LDAP, see bug #543).
Tim Riceae477e92003-09-12 18:15:15 -0700381 - (tim) [configure.ac] define WITH_ABBREV_NO_TTY for SCO.
382 Report by Roger Cornelius.
Darren Tuckerc58c2ee2003-09-13 22:02:05 +1000383 - (dtucker) [auth-pam.c] Use SSHD_PAM_SERVICE for PAM service name, patch
384 from cjwatson at debian.org.
Darren Tuckerdc7e6562003-09-13 09:46:03 +1000385
Tim Riceb7efb632003-09-12 11:20:32 -070038620030912
387 - (tim) [regress/agent-ptrace.sh] sh doesn't like "if ! shell_function; then".
Tim Riceec28ca12003-09-12 13:02:16 -0700388 - (tim) [Makefile.in] only mkdir regress if it does not exist.
Tim Ricee660ede2003-09-12 13:21:14 -0700389 - (tim) [regress/yes-head.sh] shell portability fix.
Tim Riceb7efb632003-09-12 11:20:32 -0700390
Darren Tuckerc82afd52003-09-11 14:42:55 +100039120030911
392 - (dtucker) [configure.ac] Bug #588, #615: Move other libgen tests to after
393 the dirname test, to allow a broken dirname to be detected correctly.
394 Based partially on patch supplied by alex.kiernan at thus.net. ok djm@
Tim Rice1e1ef642003-09-11 22:19:31 -0700395 - (tim) [configure.ac] Move libgen tests to before libwrap to unbreak
396 UnixWare 2.03 using --with-tcp-wrappers.
Tim Riced546a842003-09-11 22:24:36 -0700397 - (tim) [configure.ac] Prefer setuid/setgid on UnixWare and Open Server.
Tim Rice23ee3592003-09-11 22:32:17 -0700398 - (tim) [regress/agent-ptrace.sh regress/dynamic-forward.sh
399 regress/sftp-cmds.sh regress/stderr-after-eof.sh regress/test-exec.sh]
400 no longer depends on which(1). patch by dtucker@
Darren Tuckerc82afd52003-09-11 14:42:55 +1000401
Darren Tucker9f7ffc52003-09-10 11:39:05 +100040220030910
403 - (dtucker) [configure.ac] Bug #636: Add support for Cray's new X1 machine.
404 Patch from wendyp at cray.com.
Darren Tuckerb2427c82003-09-10 15:22:44 +1000405 - (dtucker) [configure.ac] Part of bug #615: tcsendbreak might be a macro.
Darren Tucker9a959ea2003-09-10 20:17:40 +1000406 - (dtucker) [regressh/yes-head.sh] Some platforms (eg Solaris) don't have
407 "yes".
Darren Tucker9f7ffc52003-09-10 11:39:05 +1000408
Tim Rice8b2157d2003-09-09 06:07:10 -070040920030909
410 - (tim) [regress/Makefile] Fixes for building outside of a read-only
411 source tree.
Tim Rice55439472003-09-09 08:27:40 -0700412 - (tim) [regress/agent-timeout.sh] s/TIMEOUT/SSHAGENT_TIMEOUT/ Fixes conflict
413 with shell read-only variable.
Tim Rice1eb40cf2003-09-09 08:35:20 -0700414 - (tim) [regress/sftp-badcmds.sh regress/sftp-cmds.sh] Fix errors like
415 UX:rm: ERROR: Cannot remove '.' or '..'
Tim Rice8b2157d2003-09-09 06:07:10 -0700416
Tim Rice0ac16a42003-09-08 06:33:33 -070041720030908
418 - (tim) [configure.ac openbsd-compat/getrrsetbyname.c] wrap _getshort and
419 _getlong in #ifndef
Tim Riceb284e162003-09-08 14:35:16 -0700420 - (tim) [configure.ac acconfig.h openbsd-compat/getrrsetbyname.c] test for
421 HEADER.ad in arpa/nameser.h
Tim Rice2e0e38e2003-09-08 16:11:33 -0700422 - (tim) [ssh-keygen.c] s/PATH_MAX/MAXPATHLEN/ ok mouring@
Tim Rice0ac16a42003-09-08 06:33:33 -0700423
Darren Tucker57ac36f2003-09-07 09:22:21 +100042420030907
425 - (dtucker) [agent-ptrace.sh dynamic-forward.sh (all regress/)]
426 Put "which" inside quotes.
Darren Tuckerd199b6d2003-09-07 09:28:03 +1000427 - (dtucker) [dynamic-forward.sh forwarding.sh sftp-batch.sh (all regress/)]
428 Add ${EXEEXT}: required to work on Cygwin.
Darren Tuckere1e26a62003-09-07 09:31:02 +1000429 - (dtucker) [regress/sftp-batch.sh] Make temporary batch file name more
430 distinctive, so "rm ${BATCH}.*" doesn't match the script itself.
Darren Tuckere7f75802003-09-07 09:32:58 +1000431 - (dtucker) [regress/sftp-cmds.sh] Skip quoted file test on Cygwin.
Darren Tucker7c600f22003-09-07 11:37:27 +1000432 - (dtucker) [openbsd-compat/xcrypt.c] #elsif -> #elif
433 - (dtucker) [acconfig.h] Typo.
Darren Tucker167bd9c2003-09-07 12:34:54 +1000434 - (dtucker) [CREDITS Makefile.in configure.ac mdoc2man.awk mdoc2man.pl]
435 Replace mdoc2man.pl with mdoc2man.awk, provided by Peter Stuge.
Darren Tucker57ac36f2003-09-07 09:22:21 +1000436
Darren Tucker9f18be62003-09-06 16:44:39 +100043720030906
438 - (dtucker) [acconfig.h configure.ac uidswap.c] Prefer setuid/setgid on AIX.
439
Darren Tuckerb2db4e82003-09-05 11:35:52 +100044020030905
441 - (dtucker) [Makefile.in] Add distclean target for regress/, fix clean target.
442
Darren Tucker150a81c2003-09-04 13:41:06 +100044320030904
444 - (dtucker) Portablize regression tests. Parts contributed by Roumen
445 Petrov, David M. Williams and Corinna Vinschen.
446 - [Makefile.in] Add "make tests" target and "make clean" hooks.
Darren Tucker2297ac42003-09-04 13:49:30 +1000447 - [regress/agent-getpeereid.sh] Skip test on platforms that don't support
448 getpeereid.
Darren Tucker55697592003-09-04 13:55:25 +1000449 - [regress/agent-ptrace.sh] Skip tests if platform doesn't support it or
450 gdb cannot be found.
Darren Tucker871f7402003-09-04 13:59:48 +1000451 - [regress/reconfigure/sh] Make path to sshd fully qualified if required.
Darren Tucker60de9f12003-09-04 14:02:56 +1000452 - [regress/rekey.sh] Remove dependence on /dev/zero (not all platforms have
453 it). The sparse file will take less disk space too.
Darren Tucker11857652003-09-04 18:04:16 +1000454 - [regress/sftp-cmds.sh] Ensure files used for test are readable.
Darren Tuckerc376a882003-09-04 14:32:02 +1000455 - [regress/stderr-after-eof.sh] Search for a usable checksum program.
Darren Tuckerc2c42232003-09-04 14:54:39 +1000456 - [regress/sftp-badcmds.sh regress/sftp-cmds.sh regress/sftp.sh
457 regress/ssh-com-client.sh regress/ssh-com-sftp.sh regress/stderr-data.sh
458 regress/transfer.sh] Use ${EXEEXT} where appropriate.
Darren Tuckerbd056092003-09-04 15:26:57 +1000459 - [regress/sftp.sh regress/ssh-com-sftp.sh] Remove dependency on /dev/stdin.
Darren Tucker58f89bc2003-09-04 15:07:59 +1000460 - [regress/agent-ptrace.sh regress/agent-timeout.sh]
461 "grep -q" -> "grep >/dev/null"
Darren Tucker53c55f42003-09-04 15:16:56 +1000462 - [regress/agent.sh regress/proto-version.sh regress/ssh-com.sh
Darren Tucker57ac36f2003-09-07 09:22:21 +1000463 regress/test-exec.sh] Handle different ways of echoing without newlines.
Darren Tuckera241d872003-09-04 15:22:01 +1000464 - [regress/dynamic-forward.sh] Some "which" programs output on stderr.
Darren Tucker47351152003-09-04 15:24:50 +1000465 - [regress/sftp-cmds.sh] Use portable "test" option.
Darren Tucker6d3921f2003-09-04 15:35:48 +1000466 - [regress/test-exec.sh] Use sudo, search for "whoami" equivalent, always
467 use Strictmodes no, wait longer for sshd startup.
Darren Tuckerebc3c132003-09-04 15:37:58 +1000468 - [regress/Makefile] Remove BSDisms.
Darren Tucker9d9d4482003-09-04 15:39:54 +1000469 - [regress/README.regress] Add a basic readme.
Darren Tucker11857652003-09-04 18:04:16 +1000470 - [Makefile.in regress/agent-getpeereid.sh] config.h is now in $BUILDDIR
471 not $OBJ.
Darren Tucker77d07e92003-09-04 22:06:16 +1000472 - [Makefile.in regress/agent-ptrace] Fix minor regress issues on Cygwin.
Darren Tucker150a81c2003-09-04 13:41:06 +1000473
Damien Miller856f0be2003-09-03 07:32:45 +100047420030903
475 - (djm) OpenBSD CVS Sync
476 - markus@cvs.openbsd.org 2003/08/26 09:58:43
477 [auth-passwd.c auth.c auth.h auth1.c auth2-none.c auth2-passwd.c]
478 [auth2.c monitor.c]
479 fix passwd auth for 'username leaks via timing'; with djm@, original
480 patches from solar
Damien Millera256c652003-09-03 12:11:30 +1000481 - markus@cvs.openbsd.org 2003/08/28 12:54:34
482 [auth.h]
483 remove kerberos support from ssh1, since it has been replaced with GSSAPI;
484 but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
Damien Millerf117f872003-09-03 12:12:54 +1000485 - markus@cvs.openbsd.org 2003/09/02 16:40:29
486 [version.h]
487 enter 3.7
Damien Millerc2b98272003-09-03 12:13:30 +1000488 - jmc@cvs.openbsd.org 2003/09/02 18:50:06
489 [sftp.1 ssh_config.5]
490 escape punctuation;
491 ok deraadt@
Damien Miller856f0be2003-09-03 07:32:45 +1000492
Damien Miller0b56b452003-09-02 23:09:41 +100049320030902
Damien Miller55c47ed2003-09-02 22:14:07 +1000494 - (djm) OpenBSD CVS Sync
495 - deraadt@cvs.openbsd.org 2003/08/24 17:36:51
496 [auth2-gss.c]
497 64 bit cleanups; markus ok
Damien Miller1a0c0b92003-09-02 22:51:17 +1000498 - markus@cvs.openbsd.org 2003/08/28 12:54:34
499 [auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c]
500 [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5]
501 [sshconnect1.c sshd.c sshd_config sshd_config.5]
502 remove kerberos support from ssh1, since it has been replaced with GSSAPI;
503 but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
Damien Miller7630ee22003-09-02 22:52:00 +1000504 - markus@cvs.openbsd.org 2003/08/29 10:03:15
505 [compat.c compat.h]
506 SSH_BUG_K5USER is unused; ok henning@
Damien Millerfbdeece2003-09-02 22:52:31 +1000507 - markus@cvs.openbsd.org 2003/08/29 10:04:36
508 [channels.c nchan.c]
509 be less chatty; debug -> debug2, cleanup; ok henning@
Damien Miller17af1762003-09-02 22:53:01 +1000510 - markus@cvs.openbsd.org 2003/08/31 10:26:04
511 [progressmeter.c]
512 pass file_size + 1 to snprintf: fixes printing of truncated
513 file names; fix based on patch/report from sturm@;
Damien Millerb5829f52003-09-02 22:53:32 +1000514 - markus@cvs.openbsd.org 2003/08/31 12:14:22
515 [progressmeter.c]
516 do write to buf[-1]
Damien Miller324948b2003-09-02 22:55:45 +1000517 - markus@cvs.openbsd.org 2003/08/31 13:29:05
518 [session.c]
519 call ssh_gssapi_storecreds conditionally from do_exec();
520 with sxw@inf.ed.ac.uk
Damien Millera0c4ad22003-09-02 22:56:18 +1000521 - markus@cvs.openbsd.org 2003/08/31 13:30:18
522 [gss-serv.c]
523 correct string termination in parse_ename(); sxw@inf.ed.ac.uk
Damien Miller134350c2003-09-02 22:56:42 +1000524 - markus@cvs.openbsd.org 2003/08/31 13:31:57
525 [gss-serv.c]
526 whitspace KNF
Damien Miller9b7b03b2003-09-02 22:57:05 +1000527 - markus@cvs.openbsd.org 2003/09/01 09:50:04
528 [sshd_config.5]
529 gss kex is not supported; sxw@inf.ed.ac.uk
Damien Miller84d03ef2003-09-02 22:57:27 +1000530 - markus@cvs.openbsd.org 2003/09/01 12:50:46
531 [readconf.c]
532 rm gssapidelegatecreds alias; never supported before
Damien Miller46aa3b92003-09-02 22:57:54 +1000533 - markus@cvs.openbsd.org 2003/09/01 13:52:18
534 [ssh.h]
535 rm whitespace
Damien Millerfb10e9a2003-09-02 22:58:22 +1000536 - markus@cvs.openbsd.org 2003/09/01 18:15:50
537 [readconf.c readconf.h servconf.c servconf.h ssh.c]
538 remove unused kerberos code; ok henning@
Damien Miller982d3262003-09-02 22:59:01 +1000539 - markus@cvs.openbsd.org 2003/09/01 20:44:54
540 [auth2-gss.c]
541 fix leak
Damien Millerf4b6f102003-09-02 23:12:06 +1000542 - (djm) Don't initialise pam_conv structures inline. Avoids HP/UX compiler
543 error. Part of Bug #423, patch from michael_steffens AT hp.com
Damien Miller341c6e62003-09-02 23:18:52 +1000544 - (djm) Bug #423: reorder setting of PAM_TTY and calling of PAM session
545 management (now done in do_setusercontext). Largely from
546 michael_steffens AT hp.com
Damien Miller39638b62003-09-02 23:33:42 +1000547 - (djm) Fix openbsd-compat/ again - remove references to strl(cpy|cat).h
548
Damien Miller55c47ed2003-09-02 22:14:07 +100054920030829
Ben Lindstrom4d5dffc2003-08-30 00:11:56 +0000550 - (bal) openbsd-compat/ clean up. Considate headers, add in Id on our
Ben Lindstrom515d0f92003-08-29 16:59:52 +0000551 files, and added missing license to header.
552
Damien Miller30912f72003-08-26 10:48:14 +100055320030826
554 - (djm) Bug #629: Mark ssh_config option "pamauthenticationviakbdint"
555 as deprecated. Remove mention from README.privsep. Patch from
556 aet AT cc.hut.fi
Darren Tucker0efd1552003-08-26 11:49:55 +1000557 - (dtucker) OpenBSD CVS Sync
558 - markus@cvs.openbsd.org 2003/08/22 10:56:09
559 [auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c
560 gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c
561 readconf.h servconf.c servconf.h session.c session.h ssh-gss.h
562 ssh_config.5 sshconnect2.c sshd_config sshd_config.5]
563 support GSS API user authentication; patches from Simon Wilkinson,
564 stripped down and tested by Jakob and myself.
Darren Tuckerbe1a9012003-08-26 12:04:31 +1000565 - markus@cvs.openbsd.org 2003/08/22 13:20:03
566 [sshconnect2.c]
567 remove support for "kerberos-2@ssh.com"
Darren Tucker1e66a392003-08-26 12:08:15 +1000568 - markus@cvs.openbsd.org 2003/08/22 13:22:27
569 [auth2.c] (auth2-krb5.c removed)
570 nuke "kerberos-2@ssh.com"
Darren Tucker6b191a22003-08-26 12:09:53 +1000571 - markus@cvs.openbsd.org 2003/08/22 20:55:06
572 [LICENCE]
573 add Simon Wilkinson
Darren Tucker600ad8d2003-08-26 12:10:48 +1000574 - deraadt@cvs.openbsd.org 2003/08/24 17:36:52
575 [monitor.c monitor_wrap.c sshconnect2.c]
576 64 bit cleanups; markus ok
Darren Tucker78587262003-08-26 12:12:56 +1000577 - fgsch@cvs.openbsd.org 2003/08/25 08:13:09
578 [sftp-int.c]
579 fix div by zero when listing for filename lengths longer than width.
580 markus@ ok.
Darren Tucker08bbb2f2003-08-26 12:14:05 +1000581 - djm@cvs.openbsd.org 2003/08/25 10:33:33
582 [sshconnect2.c]
583 fprintf->logit to silence login banner with "ssh -q"; ok markus@
Darren Tucker49aaf4a2003-08-26 11:58:16 +1000584 - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h
585 configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
586 sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
Darren Tucker6ad50432003-08-26 12:22:04 +1000587 - (dtucker) [Makefile.in] Remove auth2-krb5.
Darren Tucker2fae8672003-08-26 13:43:12 +1000588 - (dtucker) [contrib/aix/inventory.sh] Add public domain notice. ok mouring@
589 (the original author)
Darren Tucker43a0dc62003-08-26 14:22:12 +1000590 - (dtucker) [auth.c] Do not check for locked accounts when PAM is enabled.
Damien Miller30912f72003-08-26 10:48:14 +1000591
Damien Miller331b6af2003-08-25 10:58:26 +100059220030825
593 - (djm) Bug #621: Select OpenSC keys by usage attributes. Patch from
594 larsch@trustcenter.de
Ben Lindstromaf4a6c32003-08-25 01:10:51 +0000595 - (bal) openbsd-compat/ OpenBSD updates. Mostly licensing, ansifications
Ben Lindstrom5ade9ab2003-08-25 01:16:21 +0000596 and minor fixes. OK djm@
597 - (bal) redo how we handle 'mysignal()'. Move it to
598 openbsd-compat/bsd-misc.c, s/mysignal/signal/ and #define signal to
599 be our 'mysignal' by default. OK djm@
Darren Tuckere41bba52003-08-25 11:51:19 +1000600 - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny
601 any access to locked accounts. ok djm@
Damien Miller1f499fd2003-08-25 13:08:49 +1000602 - (djm) Bug #564: Perform PAM account checks for all authentications when
603 UsePAM=yes; ok dtucker
Darren Tucker3c8e1e12003-08-25 13:27:40 +1000604 - (dtucker) [configure.ac] Bug #533, #551: define BROKEN_GETADDRINFO on
605 Tru64, solves getnameinfo and "bad addr or host" errors. ok djm@
Darren Tucker36ca53a2003-08-25 15:01:04 +1000606 - (dtucker) [README buildbff.sh inventory.sh] (all in contrib/aix)
607 Update package builder: correctly handle config variables, use lsuser
608 rather than /etc/passwd, fix typos, add Id's.
Damien Miller331b6af2003-08-25 10:58:26 +1000609
Damien Miller59d3d5b2003-08-22 09:34:41 +100061020030822
611 - (djm) s/get_progname/ssh_get_progname/g to avoid conflict with Heimdal
612 -lbroken; ok dtucker
Darren Tucker49d32562003-08-22 18:43:48 +1000613 - (dtucker) [contrib/cygwin/ssh-user-config] Put keys in authorized_keys
614 rather that authorized_keys2. Patch from vinschen@redhat.com.
Damien Miller59d3d5b2003-08-22 09:34:41 +1000615
Darren Tuckerf4220e62003-08-21 16:44:07 +100061620030821
617 - (dtucker) OpenBSD CVS Sync
618 - markus@cvs.openbsd.org 2003/08/14 16:08:58
619 [ssh-keygen.c]
620 exit after primetest, ok djm@
Darren Tucker8e3653d2003-08-21 16:49:41 +1000621 - (dtucker) [defines.h] Put CMSG_DATA, CMSG_FIRSTHDR with other CMSG* macros,
622 change CMSG_DATA to use __CMSG_ALIGN (and thus work properly), reformat for
623 consistency.
Darren Tucker70a3d552003-08-21 17:58:29 +1000624 - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement
625 and after normal openpty test.
Darren Tuckerf4220e62003-08-21 16:44:07 +1000626
Darren Tuckerd85efee2003-08-13 20:28:14 +100062720030813
628 - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge.
Darren Tucker3bdbd842003-08-13 20:31:05 +1000629 - (dtucker) OpenBSD CVS Sync
630 - markus@cvs.openbsd.org 2003/08/13 08:33:02
631 [session.c]
632 use more portable tcsendbreak(3) and ignore break_length;
633 ok deraadt, millert
Darren Tuckerec960f22003-08-13 20:37:05 +1000634 - markus@cvs.openbsd.org 2003/08/13 08:46:31
635 [auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
636 ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
637 remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
638 fgsch@, miod@, henning@, jakob@ and others
Darren Tucker1c52ee32003-08-13 20:38:36 +1000639 - markus@cvs.openbsd.org 2003/08/13 09:07:10
640 [readconf.c ssh.c]
641 socks4->socks, since with support both 4 and 5; dtucker@zip.com.au
Darren Tuckerf38ea772003-08-13 20:48:07 +1000642 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
643 Add a tcsendbreak function for platforms that don't have one, based on the
644 one from OpenBSD.
Darren Tuckerd85efee2003-08-13 20:28:14 +1000645
Darren Tuckerec0943a2003-08-11 22:55:36 +100064620030811
647 - (dtucker) OpenBSD CVS Sync
648 (thanks to Simon Wilkinson for help with this -dt)
649 - markus@cvs.openbsd.org 2003/07/16 15:02:06
650 [auth-krb5.c]
651 mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
652 otherwise the kerberos credentinal is stored in a memory cache
653 in the privileged sshd. ok jabob@, hin@ (some time ago)
Darren Tuckerbc8c8f32003-08-11 23:00:33 +1000654 - (dtucker) [openbsd-compat/xcrypt.c] Remove Cygwin #ifdef block (duplicate
655 in bsd-cygwin_util.h).
Darren Tuckerec0943a2003-08-11 22:55:36 +1000656
Darren Tucker65914f12003-08-08 12:15:11 +100065720030808
658 - (dtucker) [openbsd-compat/fake-rfc2553.h] Older Linuxes have AI_PASSIVE and
659 AI_CANONNAME in netdb.h but not AI_NUMERICHOST, so check each definition
660 separately before defining them.
Darren Tuckerf38db7f2003-08-08 13:43:37 +1000661 - (dtucker) [auth-pam.c] Don't set PAM_TTY if tty is null. ok djm@
Darren Tucker65914f12003-08-08 12:15:11 +1000662
Darren Tuckerb9d3f412003-08-07 13:24:24 +100066320030807
664 - (dtucker) [session.c] Have session_break_req not attempt to send a break
665 if TIOCSBRK and TIOCCBRK are not defined (eg Cygwin).
Darren Tucker89f4cf02003-08-07 13:29:04 +1000666 - (dtucker) [canohost.c] Bug #336: Only check ip options if IP_OPTIONS is
Darren Tuckerf3152242003-08-07 15:58:28 +1000667 defined (fixes compile error on really old Linuxes).
668 - (dtucker) [defines.h] Bug #336: Add CMSG_DATA and CMSG_FIRSTHDR macros if
669 not already defined (eg Linux with some versions of libc5), based on those
670 from OpenBSD.
Darren Tucker854d7fd2003-08-07 16:23:43 +1000671 - (dtucker) [openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h]
672 Remove incorrect filenames from comments (file names are in Id tags).
Darren Tucker80649c52003-08-07 16:28:16 +1000673 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.h] Move Cygwin
674 specific defines and includes to bsd-cygwin_util.h. Fixes build error too.
Darren Tuckerb9d3f412003-08-07 13:24:24 +1000675
Darren Tucker4c29dd92003-08-02 20:37:03 +100067620030802
677 - (dtucker) [monitor.h monitor_wrap.h] Remove excess ident tags.
Darren Tucker6aaa58c2003-08-02 22:24:49 +1000678 - (dtucker) OpenBSD CVS Sync
679 - markus@cvs.openbsd.org 2003/07/22 13:35:22
680 [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c
681 monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1
682 ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h]
683 remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
684 test+ok henning@
685 - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support.
686 - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files.
Darren Tuckerc20c60b2003-08-02 22:31:45 +1000687 - (dtucker) OpenBSD CVS Sync
688 - markus@cvs.openbsd.org 2003/07/23 07:42:43
689 [sshd_config]
690 remove AFS; itojun@
Darren Tucker019cefe2003-08-02 22:40:07 +1000691 - djm@cvs.openbsd.org 2003/07/28 09:49:56
692 [ssh-keygen.1 ssh-keygen.c]
693 Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
694 Based on code from Phil Karn, William Allen Simpson and Niels Provos.
695 ok markus@, thanks jmc@
Darren Tucker06ef75b2003-08-02 23:28:38 +1000696 - markus@cvs.openbsd.org 2003/07/29 18:24:00
697 [LICENCE progressmeter.c]
698 replace 4 clause BSD licensed progressmeter code with a replacement
699 from Nils Nordman and myself; ok deraadt@
700 (copied from OpenBSD an re-applied portable changes)
Darren Tucker40311f22003-08-03 00:00:47 +1000701 - markus@cvs.openbsd.org 2003/07/29 18:26:46
702 [progressmeter.c]
703 fix length for "- stalled -" (included with previous import)
704 - markus@cvs.openbsd.org 2003/07/30 07:44:14
705 [progressmeter.c]
706 use only 4 digits in format_size (included with previous import)
707 - markus@cvs.openbsd.org 2003/07/30 07:53:27
708 [progressmeter.c]
709 whitespace (included with previous import)
Darren Tucker4b609662003-08-03 00:05:01 +1000710 - markus@cvs.openbsd.org 2003/07/31 09:21:02
711 [auth2-none.c]
712 check whether passwd auth is allowd, similar to proto 1; rob@pitman.co.za
713 ok henning
Darren Tucker85f04c62003-08-03 00:05:58 +1000714 - avsm@cvs.openbsd.org 2003/07/31 15:50:16
715 [atomicio.c]
716 correct comment: atomicio takes vwrite, not write; deraadt@ ok
Darren Tuckerdb732b12003-08-03 00:07:35 +1000717 - markus@cvs.openbsd.org 2003/07/31 22:34:03
718 [progressmeter.c]
719 print rate similar old version; round instead truncate;
720 (included in previous progressmeter.c commit)
Darren Tucker2e9c9cf2003-08-02 23:31:42 +1000721 - (dtucker) [openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
722 Add a tcgetpgrp function.
Darren Tuckerb2f9d412003-08-02 23:51:38 +1000723 - (dtucker) [Makefile.in moduli.c moduli.h] Add new files and to Makefile.
Darren Tuckerbdf571b2003-08-03 00:36:16 +1000724 - (dtucker) [openbsd-compat/bsd-misc.c] Fix cut-and-paste bug in tcgetpgrp.
Darren Tucker4c29dd92003-08-02 20:37:03 +1000725
Damien Miller7f2d7952003-07-30 14:53:11 +100072620030730
727 - (djm) [auth-pam.c] Don't use crappy APIs like sprintf. Thanks bal
728
Darren Tuckerfbba5a02003-07-26 19:38:30 +100072920030726
730 - (dtucker) [openbsd-compat/xcrypt.c] Fix typo: DISABLED_SHADOW ->
731 DISABLE_SHADOW. Fixes HP-UX compile error.
732
Ben Lindstrom0410e322003-07-24 06:52:13 +000073320030724
734 - (bal) [auth-passwd.c openbsd-compat/Makefile.in openbsd-compat/xcrypt.c
735 openbsd-compat/xcrypt.h] Split off encryption into xcrypt() interface,
736 and isolate shadow password functions. Tested in Solaris, but should
737 not break other platforms too badly (except maybe HP =). Also brings
738 auth-passwd.c into full sync with OpenBSD tree.
739
Darren Tuckeracb98492003-07-23 14:33:10 +100074020030723
741 - (dtucker) [configure.ac] Back out change for bug #620.
742
Darren Tucker394b8c82003-07-19 19:49:45 +100074320030719
744 - (dtucker) [configure.ac] Bug #620: Define BROKEN_GETADDRINFO for
745 Solaris/x86. Patch from jrhett at isite.net.
Darren Tuckerfe0078a2003-07-19 19:52:28 +1000746 - (dtucker) OpenBSD CVS Sync
747 - markus@cvs.openbsd.org 2003/07/14 12:36:37
748 [sshd.c]
749 remove undocumented -V option. would be only useful if openssh is used
750 as ssh v1 server for ssh.com's ssh v2.
Darren Tuckere98dfa32003-07-19 19:54:31 +1000751 - markus@cvs.openbsd.org 2003/07/16 10:34:53
752 [ssh.c sshd.c]
753 don't exit on multiple -v or -d; ok deraadt@
Darren Tucker538d1802003-07-19 19:56:18 +1000754 - markus@cvs.openbsd.org 2003/07/16 10:36:28
755 [sshtty.c]
756 clear IUCLC in enter_raw_mode; from rob@pitman.co.za; ok deraadt@, fgs@
Darren Tucker03a29ba2003-07-19 20:07:45 +1000757 - deraadt@cvs.openbsd.org 2003/07/18 01:54:25
758 [scp.c]
759 userid is unsigned, but well, force it anyways; andrushock@korovino.net
Darren Tucker554d5b52003-07-19 20:09:21 +1000760 - djm@cvs.openbsd.org 2003/07/19 00:45:53
761 [sftp-int.c]
762 fix sftp filename parsing for arguments with escaped quotes. bz #517;
763 ok markus
Darren Tuckercca1bdb2003-07-19 20:11:54 +1000764 - djm@cvs.openbsd.org 2003/07/19 00:46:31
765 [regress/sftp-cmds.sh]
766 regress test for sftp arguments with escaped quotes; ok markus
Darren Tucker394b8c82003-07-19 19:49:45 +1000767
Darren Tucker5c6a91a2003-07-14 16:21:44 +100076820030714
769 - (dtucker) [acconfig.h configure.ac port-aix.c] Older AIXes don't declare
770 loginfailed at all, so assume 3-arg loginfailed if not declared.
Darren Tucker30317e32003-07-14 16:26:51 +1000771 - (dtucker) [port-aix.h] Work around name collision on AIX for r_type by
772 undef'ing it.
Darren Tuckerfc3454e2003-07-14 16:41:55 +1000773 - (dtucker) Bug #543: [configure.ac port-aix.c port-aix.h]
774 Call setauthdb() before loginfailed(), which may load password registry-
Darren Tucker394b8c82003-07-19 19:49:45 +1000775 specific functions. Based on patch by cawlfiel at us.ibm.com.
Darren Tucker0abf13b2003-07-14 16:43:42 +1000776 - (dtucker) [port-aix.h] Fix prototypes.
Darren Tucker29588612003-07-14 17:28:34 +1000777 - (dtucker) OpenBSD CVS Sync
778 - avsm@cvs.openbsd.org 2003/07/09 13:58:19
779 [key.c]
780 minor tweak: when generating the hex fingerprint, give strlcat the full
781 bound to the buffer, and add a comment below explaining why the
782 zero-termination is one less than the bound. markus@ ok
Darren Tucker81a0b372003-07-14 17:31:06 +1000783 - markus@cvs.openbsd.org 2003/07/10 14:42:28
784 [packet.c]
785 the 2^(blocksize*2) rekeying limit is too expensive for 3DES,
786 blowfish, etc, so enforce a 1GB limit for small blocksizes.
Darren Tucker1a721152003-07-14 17:32:29 +1000787 - markus@cvs.openbsd.org 2003/07/10 20:05:55
788 [sftp.c]
789 sync usage with manpage, add missing -R
Darren Tucker5c6a91a2003-07-14 16:21:44 +1000790
Darren Tuckera0c0b632003-07-08 20:52:12 +100079120030708
792 - (dtucker) [acconfig.h auth-passwd.c configure.ac session.c port-aix.[ch]]
793 Include AIX headers for authentication functions and make calls match
Darren Tucker5c6a91a2003-07-14 16:21:44 +1000794 prototypes. Test for and handle 3-arg and 4-arg variants of loginfailed.
Darren Tuckerb9aa0a02003-07-08 22:59:59 +1000795 - (dtucker) [session.c] Check return value of setpcred().
796 - (dtucker) [auth-passwd.c auth.c session.c sshd.c port-aix.c port-aix.h]
797 Convert aixloginmsg into platform-independant Buffer loginmsg.
Darren Tuckera0c0b632003-07-08 20:52:12 +1000798
Darren Tuckerf1159b52003-07-07 19:44:01 +100079920030707
800 - (dtucker) [configure.ac] Bug #600: Check that getrusage is declared before
801 searching libraries for it. Fixes build errors on NCR MP-RAS.
802
Darren Tucker8661b562003-07-06 15:20:46 +100080320030706
804 - (dtucker) [ssh-rand-helper.c loginrec.c]
805 Apply atomicio typing change to these too.
806
Darren Tuckere5327042003-07-03 13:40:44 +100080720030703
808 - (dtucker) OpenBSD CVS Sync
809 - djm@cvs.openbsd.org 2003/06/28 07:48:10
810 [sshd.c]
811 report pidfile creation errors, based on patch from Roumen Petrov;
812 ok markus@
Darren Tucker9f63f222003-07-03 13:46:56 +1000813 - deraadt@cvs.openbsd.org 2003/06/28 16:23:06
814 [atomicio.c atomicio.h authfd.c clientloop.c monitor_wrap.c msg.c
815 progressmeter.c scp.c sftp-client.c ssh-keyscan.c ssh.h sshconnect.c
816 sshd.c]
817 deal with typing of write vs read in atomicio
Darren Tuckeredeb1f72003-07-03 13:48:04 +1000818 - markus@cvs.openbsd.org 2003/06/29 12:44:38
819 [sshconnect.c]
820 memset 0, not \0; andrushock@korovino.net
Darren Tucker9189ff82003-07-03 13:52:04 +1000821 - markus@cvs.openbsd.org 2003/07/02 12:56:34
822 [channels.c]
823 deny dynamic forwarding with -R for v1, too; ok djm@
Darren Tucker46471c92003-07-03 13:55:19 +1000824 - markus@cvs.openbsd.org 2003/07/02 14:51:16
825 [channels.c ssh.1 ssh_config.5]
826 (re)add socks5 suppport to -D; ok djm@
827 now ssh(1) can act both as a socks 4 and socks 5 server and
828 dynamically forward ports.
Darren Tucker3f521e22003-07-03 16:20:42 +1000829 - markus@cvs.openbsd.org 2003/07/02 20:37:48
830 [ssh.c]
831 convert hostkeyalias to lowercase, otherwise uppercase aliases will
832 not match at all; ok henning@
Darren Tucker7a246622003-07-03 20:26:04 +1000833 - markus@cvs.openbsd.org 2003/07/03 08:21:46
834 [regress/dynamic-forward.sh]
835 add socks5; speedup; reformat; based on patch from dtucker@zip.com.au
Darren Tuckere2f2be72003-07-03 20:27:55 +1000836 - markus@cvs.openbsd.org 2003/07/03 08:24:13
837 [regress/Makefile]
838 enable tests for dynamic fwd via socks (-D), uses nc(1)
Darren Tucker0a4f04b2003-07-03 20:37:47 +1000839 - djm@cvs.openbsd.org 2003/07/03 08:09:06
840 [readconf.c readconf.h ssh-keysign.c ssh.c]
841 fix AddressFamily option in config file, from brent@graveland.net;
842 ok markus@
Darren Tuckere5327042003-07-03 13:40:44 +1000843
Damien Miller200d0a72003-06-30 19:21:36 +100084420030630
845 - (djm) Search for support functions necessary to build our
846 getrrsetbyname() replacement. Patch from Roumen Petrov
847
Darren Tuckercc9fd542003-06-29 21:23:37 +100084820030629
Darren Tucker6eb93042003-06-29 21:30:41 +1000849 - (dtucker) [includes.h] Bug #602: move #include of netdb.h to after in.h
850 (fixes compiler warnings on Solaris 2.5.1).
851 - (dtucker) [configure.ac] Add sanity test after system-dependant compiler
852 flag modifications.
Darren Tuckercc9fd542003-06-29 21:23:37 +1000853
Darren Tucker674f71d2003-06-28 12:33:12 +100085420030628
Damien Miller4a8e2842003-06-28 18:02:47 +1000855 - (djm) Bug #591: use PKCS#15 private key label as a comment in case
856 of OpenSC. Report and patch from larsch@trustcenter.de
Damien Miller723569b2003-06-28 18:08:16 +1000857 - (djm) Bug #593: Sanity check OpenSC card reader number; patch from
858 aj@dungeon.inka.de
Darren Tucker674f71d2003-06-28 12:33:12 +1000859 - (dtucker) OpenBSD CVS Sync
860 - markus@cvs.openbsd.org 2003/06/23 09:02:44
861 [ssh_config.5]
862 document EnableSSHKeysign; bugzilla #599; ok deraadt@, jmc@
Darren Tucker502d3842003-06-28 12:38:01 +1000863 - markus@cvs.openbsd.org 2003/06/24 08:23:46
864 [auth2-hostbased.c auth2-pubkey.c auth2.c channels.c key.c key.h
865 monitor.c packet.c packet.h serverloop.c sshconnect2.c sshd.c]
866 int -> u_int; ok djm@, deraadt@, mouring@
Darren Tuckera6612d42003-06-28 12:39:03 +1000867 - miod@cvs.openbsd.org 2003/06/25 22:39:36
868 [sftp-server.c]
869 Typo police: attribute is better written with an 'r'.
Darren Tuckera99c1b72003-06-28 12:40:12 +1000870 - markus@cvs.openbsd.org 2003/06/26 20:08:33
871 [readconf.c]
872 do not dump core for 'ssh -o proxycommand host'; ok deraadt@
Darren Tuckerb611c122003-06-28 12:42:09 +1000873 - (dtucker) [regress/dynamic-forward.sh] Import new regression test.
Darren Tuckera3020db2003-06-28 12:54:33 +1000874 - (dtucker) [configure.ac] Bug #570: Have ./configure --enable-FEATURE
875 actually enable the feature, for those normally disabled. Patch by
876 openssh (at) roumenpetrov.info.
Darren Tucker674f71d2003-06-28 12:33:12 +1000877
Darren Tuckera0472e02003-06-24 20:22:09 +100087820030624
879 - (dtucker) Have configure refer the user to config.log and
880 contrib/findssl.sh for OpenSSL header/library mismatches.
881
Darren Tuckere0194e52003-06-22 12:33:27 +100088220030622
Darren Tuckera251f802003-06-22 20:45:15 +1000883 - (dtucker) OpenBSD CVS Sync
Darren Tuckere0194e52003-06-22 12:33:27 +1000884 - markus@cvs.openbsd.org 2003/06/21 09:14:05
Darren Tuckera251f802003-06-22 20:45:15 +1000885 [regress/reconfigure.sh]
Darren Tuckere0194e52003-06-22 12:33:27 +1000886 missing $SUDO; from dtucker@zip.com.au
Darren Tucker89b249b2003-06-22 21:22:04 +1000887 - markus@cvs.openbsd.org 2003/06/18 11:28:11
Darren Tuckera251f802003-06-22 20:45:15 +1000888 [ssh-rsa.c]
889 backout last change, since it violates pkcs#1
890 switch to share/misc/license.template
Darren Tucker91cf2612003-06-22 20:46:53 +1000891 - djm@cvs.openbsd.org 2003/06/20 05:47:58
892 [sshd_config.5]
893 sync description of protocol 2 cipher proposal; ok markus
Darren Tuckerb8dae8e2003-06-22 20:48:45 +1000894 - djm@cvs.openbsd.org 2003/06/20 05:48:21
895 [sshd_config]
896 sync some implemented options; ok markus@
Darren Tuckere0194e52003-06-22 12:33:27 +1000897 - (dtucker) [regress/authorized_keys_root] Remove temp data file from CVS.
Darren Tucker6cf1a2c2003-06-22 18:32:10 +1000898 - (dtucker) [openbsd-compat/setproctitle.c] Ensure SPT_TYPE is defined before
899 testing its value.
Darren Tuckere0194e52003-06-22 12:33:27 +1000900
Damien Miller469954d2003-06-18 20:25:33 +100090120030618
902 - (djm) OpenBSD CVS Sync
903 - markus@cvs.openbsd.org 2003/06/12 07:57:38
904 [monitor.c sshlogin.c sshpty.c]
905 typos; dtucker at zip.com.au
Damien Miller116aabb2003-06-18 20:26:13 +1000906 - djm@cvs.openbsd.org 2003/06/12 12:22:47
907 [LICENCE]
908 mention more copyright holders; ok markus@
Damien Millerb2cdcb52003-06-18 20:26:34 +1000909 - nino@cvs.openbsd.org 2003/06/12 15:34:09
910 [scp.c]
911 Typo. Ok markus@.
Damien Miller56a0bb02003-06-18 20:28:40 +1000912 - markus@cvs.openbsd.org 2003/06/12 19:12:03
913 [scard.c scard.h ssh-agent.c ssh.c]
914 add sc_get_key_label; larsch at trustcenter.de; bugzilla#591
Damien Miller8c1d2e32003-06-18 20:29:01 +1000915 - markus@cvs.openbsd.org 2003/06/16 08:22:35
916 [ssh-rsa.c]
917 make sure the signature has at least the expected length (don't
918 insist on len == hlen + oidlen, since this breaks some smartcards)
919 bugzilla #592; ok djm@
Damien Miller80163e12003-06-18 20:29:18 +1000920 - markus@cvs.openbsd.org 2003/06/16 10:22:45
921 [ssh-add.c]
922 print out key comment on each prompt; make ssh-askpass more useable; ok djm@
Damien Miller0275b522003-06-18 20:29:35 +1000923 - markus@cvs.openbsd.org 2003/06/17 18:14:23
924 [cipher-ctr.c]
925 use license from /usr/share/misc/license.template for new code
Darren Tuckerfc8a7ea2003-06-18 22:18:57 +1000926 - (dtucker) [reconfigure.sh rekey.sh sftp-badcmds.sh]
927 Import new regression tests from OpenBSD
Darren Tucker3a222ac2003-06-18 22:21:33 +1000928 - (dtucker) [regress/copy.1 regress/copy.2] Remove temp data files from CVS.
Darren Tuckerd57a76e2003-06-18 22:32:51 +1000929 - (dtucker) OpenBSD CVS Sync (regress/)
930 - markus@cvs.openbsd.org 2003/04/02 12:21:13
931 [Makefile]
932 enable rekey test
Darren Tuckera4040f52003-06-18 22:35:11 +1000933 - djm@cvs.openbsd.org 2003/04/04 09:34:22
934 [Makefile sftp-cmds.sh]
935 More regression tests, including recent directory rename bug; ok markus@
Darren Tuckeree5f83d2003-06-18 22:36:48 +1000936 - markus@cvs.openbsd.org 2003/05/14 22:08:27
937 [ssh-com-client.sh ssh-com-keygen.sh ssh-com-sftp.sh ssh-com.sh]
938 test against some new commerical versions
Darren Tuckerc43362c2003-06-18 22:41:41 +1000939 - mouring@cvs.openbsd.org 2003/05/15 04:07:12
940 [sftp-cmds.sh]
941 Advanced put/get testing for sftp. OK @djm
Darren Tucker76437602003-06-18 22:43:13 +1000942 - markus@cvs.openbsd.org 2003/06/12 15:40:01
943 [try-ciphers.sh]
944 add ctr
Darren Tucker50cea672003-06-18 22:45:34 +1000945 - markus@cvs.openbsd.org 2003/06/12 15:43:32
946 [Makefile]
947 test -HUP; dtucker at zip.com.au
Damien Miller469954d2003-06-18 20:25:33 +1000948
Damien Miller53950b62003-06-14 08:43:22 +100094920030614
950 - (djm) Update license on fake-rfc2553.[ch]; ok itojun@
951
Damien Millerf1ce5052003-06-11 22:04:39 +100095220030611
Damien Miller141efa72003-06-11 22:50:56 +1000953 - (djm) Mention portable copyright holders in LICENSE
Damien Milleraf639512003-06-11 22:51:32 +1000954 - (djm) Put licenses on substantial header files
Damien Miller4bfeb142003-06-11 22:08:36 +1000955 - (djm) Sync LICENSE against OpenBSD
Damien Millerf1ce5052003-06-11 22:04:39 +1000956 - (djm) OpenBSD CVS Sync
957 - jmc@cvs.openbsd.org 2003/06/10 09:12:11
958 [scp.1 sftp-server.8 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5]
959 [sshd.8 sshd_config.5 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
960 - section reorder
961 - COMPATIBILITY merge
962 - macro cleanup
963 - kill whitespace at EOL
964 - new sentence, new line
965 ssh pages ok markus@
Damien Miller2b92d322003-06-11 22:05:06 +1000966 - deraadt@cvs.openbsd.org 2003/06/10 22:20:52
967 [packet.c progressmeter.c]
968 mostly ansi cleanup; pval ok
Damien Miller7392ae62003-06-11 22:05:25 +1000969 - jakob@cvs.openbsd.org 2003/06/11 10:16:16
970 [sshconnect.c]
971 clean up check_host_key() and improve SSHFP feedback. ok markus@
Damien Miller0e1b9372003-06-11 22:05:45 +1000972 - jakob@cvs.openbsd.org 2003/06/11 10:18:47
973 [dns.c]
974 sync with check_host_key() change
Damien Millerd94f20d2003-06-11 22:06:33 +1000975 - djm@cvs.openbsd.org 2003/06/11 11:18:38
976 [authfd.c authfd.h ssh-add.c ssh-agent.c]
977 make agent constraints (lifetime, confirm) work with smartcard keys;
978 ok markus@
Damien Millerf1ce5052003-06-11 22:04:39 +1000979
980
Damien Millerc18c06e2003-06-10 18:55:22 +100098120030609
982 - (djm) Sync README.smartcard with OpenBSD -current
Damien Miller78f2e5c2003-06-10 21:09:09 +1000983 - (djm) Re-merge OpenSC info into README.smartcard
Damien Millerc18c06e2003-06-10 18:55:22 +1000984
Darren Tucker400b8782003-06-06 10:46:04 +100098520030606
986 - (dtucker) [uidswap.c] Fix setreuid and add missing args to fatal(). ok djm@
987
Damien Miller10eac0c2003-06-05 09:48:32 +100098820030605
989 - (djm) Support AI_NUMERICHOST in fake-getaddrinfo.c. Needed for recent
990 canohost.c changes.
Damien Miller5fe46a42003-06-05 09:53:31 +1000991 - (djm) Implement paranoid priv dropping checks, based on:
992 "SetUID demystified" - Hao Chen, David Wagner and Drew Dean
993 Proceedings of USENIX Security Symposium 2002
Damien Millerb95bb7f2003-06-05 10:04:12 +1000994 - (djm) Don't use xmalloc() or pull in toplevel headers in fake-* code
Damien Millerc28e38d2003-06-05 18:52:47 +1000995 - (djm) Merge all the openbsd/fake-* into fake-rfc2553.[ch]
Damien Millerf49078d2003-06-05 18:53:42 +1000996 - (djm) Bug #588 - Add scard-opensc.o back to Makefile.in
997 Patch from larsch@trustcenter.de
Damien Miller76b5c8a2003-06-05 19:19:35 +1000998 - (djm) Bug #589 - scard-opensc: load only keys with a private keys
999 Patch from larsch@trustcenter.de
Darren Tucker4aff13f2003-06-05 19:37:30 +10001000 - (dtucker) Add includes.h to fake-rfc2553.c so it will build.
Darren Tucker881753b2003-06-05 22:20:11 +10001001 - (dtucker) Define EAI_NONAME in fake-rfc2553.h (used by fake-rfc2553.c).
Damien Miller10eac0c2003-06-05 09:48:32 +10001002
Damien Miller9fc7c692003-06-04 22:50:54 +1000100320030604
Damien Miller865173e2003-06-04 19:06:59 +10001004 - (djm) Bug #573 - Remove unneeded Krb headers and compat goop. Patch from
1005 simon@sxw.org.uk (Also matches a change in OpenBSD a while ago)
Damien Miller485397c2003-06-04 19:15:10 +10001006 - (djm) Bug #577 - wrong flag in scard-opensc.c sc_private_decrypt.
Damien Miller2527f572003-06-04 19:22:06 +10001007 Patch from larsch@trustcenter.de; ok markus@
1008 - (djm) Bug #584: scard-opensc.c doesn't work without PIN. Patch from
1009 larsch@trustcenter.de; ok markus@
Damien Miller941ac452003-06-04 20:31:53 +10001010 - (djm) OpenBSD CVS Sync
1011 - djm@cvs.openbsd.org 2003/06/04 08:25:18
1012 [sshconnect.c]
1013 disable challenge/response and keyboard-interactive auth methods
1014 upon hostkey mismatch. based on patch from fcusack AT fcusack.com.
1015 bz #580; ok markus@
Damien Miller31b3a0a2003-06-04 20:32:12 +10001016 - djm@cvs.openbsd.org 2003/06/04 10:23:48
1017 [sshd.c]
1018 remove duplicated group-dropping code; ok markus@
Damien Miller9fc7c692003-06-04 22:50:54 +10001019 - djm@cvs.openbsd.org 2003/06/04 12:03:59
1020 [serverloop.c]
1021 remove bitrotten commet; ok markus@
Damien Miller65d1f572003-06-04 22:51:08 +10001022 - djm@cvs.openbsd.org 2003/06/04 12:18:49
1023 [scp.c]
1024 ansify; ok markus@
Damien Millerb69aaa82003-06-04 22:51:24 +10001025 - djm@cvs.openbsd.org 2003/06/04 12:40:39
1026 [scp.c]
1027 kill ssh process upon receipt of signal, bz #241.
1028 based on patch from esb AT hawaii.edu; ok markus@
Damien Millercc685c12003-06-04 22:51:38 +10001029 - djm@cvs.openbsd.org 2003/06/04 12:41:22
1030 [sftp.c]
1031 kill ssh process on receipt of signal; ok markus@
Damien Miller4c322482003-06-04 22:12:17 +10001032 - (djm) Update to fix of bug #584: lock card before return.
1033 From larsch@trustcenter.de
Damien Miller0cbb9de2003-06-04 22:56:15 +10001034 - (djm) Always use mysignal() for SIGALRM
Damien Miller865173e2003-06-04 19:06:59 +10001035
103620030603
Damien Miller35276252003-06-03 10:14:28 +10001037 - (djm) Replace setproctitle replacement with code derived from
1038 UCB sendmail
Damien Miller3a961dc2003-06-03 10:25:48 +10001039 - (djm) OpenBSD CVS Sync
1040 - markus@cvs.openbsd.org 2003/06/02 09:17:34
1041 [auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c]
1042 [canohost.c monitor.c servconf.c servconf.h session.c sshd_config]
1043 [sshd_config.5]
1044 deprecate VerifyReverseMapping since it's dangerous if combined
1045 with IP based access control as noted by Mike Harding; replace with
1046 a UseDNS option, UseDNS is on by default and includes the
1047 VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@
1048 ok deraadt@, djm@
Damien Millerdafb12e2003-06-03 13:06:18 +10001049 - millert@cvs.openbsd.org 2003/06/03 02:56:16
1050 [scp.c]
1051 Remove the advertising clause in the UCB license which Berkeley
1052 rescinded 22 July 1999. Proofed by myself and Theo.
Damien Miller3a961dc2003-06-03 10:25:48 +10001053 - (djm) Fix portable-specific uses of verify_reverse_mapping too
Damien Miller329638e2003-06-03 12:12:50 +10001054 - (djm) Sync openbsd-compat with OpenBSD CVS.
Damien Millerd311c4e2003-06-03 13:09:16 +10001055 - No more 4-term BSD licenses in linked code
Darren Tuckereb28cbc2003-06-03 12:45:27 +10001056 - (dtucker) [port-aix.c bsd-cray.c] Fix uses of verify_reverse_mapping.
Damien Miller35276252003-06-03 10:14:28 +10001057
Damien Millerf3bff942003-06-02 12:13:40 +1000105820030602
1059 - (djm) Fix segv from bad reordering in auth-pam.c
Damien Millerf2e3e9d2003-06-02 12:15:54 +10001060 - (djm) Always use saved_argv in sshd.c as compat_init_setproctitle may
1061 clobber
Tim Rice237ca4a2003-06-01 19:25:27 -07001062 - (tim) openbsd-compat/xmmap.[ch] License clarifications. Add missing
1063 CVS ID.
Damien Millerdba59502003-06-02 17:43:19 +10001064 - (djm) Remove "noip6" option from RedHat spec file. This may now be
1065 set at runtime using AddressFamily option.
Damien Millerdcc83122003-06-02 18:57:59 +10001066 - (djm) Fix use of macro before #define in cipher-aes.c
Damien Millerf4684422003-06-02 18:59:08 +10001067 - (djm) Sync license on openbsd-compat/bindresvport.c with OpenBSD CVS
Damien Millerab2db412003-06-02 19:09:13 +10001068 - (djm) OpenBSD CVS Sync
1069 - djm@cvs.openbsd.org 2003/05/26 12:54:40
1070 [sshconnect.c]
1071 fix format strings; ok markus@
Damien Miller61d36802003-06-02 19:09:48 +10001072 - deraadt@cvs.openbsd.org 2003/05/29 16:58:45
1073 [sshd.c uidswap.c]
1074 seteuid and setegid; markus ok
Damien Millereacbb4f2003-06-02 19:10:41 +10001075 - jakob@cvs.openbsd.org 2003/06/02 08:31:10
1076 [ssh_config.5]
1077 VerifyHostKeyDNS is v2 only. ok markus@
Damien Millerf3bff942003-06-02 12:13:40 +10001078
Darren Tucker3cb84e52003-05-30 16:58:22 +1000107920030530
1080 - (dtucker) Add missing semicolon in md5crypt.c, patch from openssh at
1081 roumenpetrov.info
Darren Tucker2972d6c2003-05-30 17:43:42 +10001082 - (dtucker) Define SSHD_ACQUIRES_CTTY for NCR MP-RAS and Reliant Unix.
Darren Tucker3cb84e52003-05-30 16:58:22 +10001083
Damien Millera6a7c192003-05-26 21:36:13 +1000108420030526
1085 - (djm) Avoid auth2-chall.c warning when compiling without
1086 PAM, BSD_AUTH and SKEY
1087
Damien Millerc11fe252003-05-25 14:38:02 +1000108820030525
1089- (djm) OpenBSD CVS Sync
1090 - djm@cvs.openbsd.org 2003/05/24 09:02:22
1091 [log.c]
1092 pass logged data through strnvis; ok markus
Damien Miller04bd8b02003-05-25 14:38:33 +10001093 - djm@cvs.openbsd.org 2003/05/24 09:30:40
1094 [authfile.c monitor.c sftp-common.c sshpty.c]
1095 cast some types for printing; ok markus@
Damien Millerc11fe252003-05-25 14:38:02 +10001096
Darren Tucker60145782003-05-24 11:41:16 +1000109720030524
1098 - (dtucker) Correct --osfsia in INSTALL. Patch by skeleten at shillest.net
1099
Damien Millerd419bda2003-05-23 18:43:40 +1000110020030523
1101 - (djm) Use VIS_SAFE on logged strings rather than default strnvis
1102 encoding (which encodes many more characters)
Damien Miller50677922003-05-23 18:44:04 +10001103 - OpenBSD CVS Sync
1104 - jmc@cvs.openbsd.org 2003/05/20 12:03:35
1105 [sftp.1]
1106 - new sentence, new line
1107 - added .Xr's
1108 - typos
1109 ok djm@
Damien Millerfbf486b2003-05-23 18:44:23 +10001110 - jmc@cvs.openbsd.org 2003/05/20 12:09:31
1111 [ssh.1 ssh_config.5 sshd.8 sshd_config.5 ssh-keygen.1]
1112 new sentence, new line
Damien Miller08293fa2003-05-23 18:44:41 +10001113 - djm@cvs.openbsd.org 2003/05/23 08:29:30
1114 [sshconnect.c]
1115 fix leak; ok markus@
Damien Millerd419bda2003-05-23 18:43:40 +10001116
Damien Miller74a34422003-05-20 09:24:17 +1000111720030520
1118 - (djm) OpenBSD CVS Sync
1119 - deraadt@cvs.openbsd.org 2003/05/18 23:22:01
1120 [log.c]
1121 use syslog_r() in a signal handler called place; markus ok
Damien Miller1340ec22003-05-20 09:24:42 +10001122 - (djm) Configure logic to detect syslog_r and friends
Damien Miller74a34422003-05-20 09:24:17 +10001123
Damien Millereb0e9692003-05-19 11:28:44 +1000112420030519
1125 - (djm) Sync auth-pam.h with what we actually implement
1126
112720030518
Damien Miller25d93422003-05-18 20:45:47 +10001128 - (djm) Return of the dreaded PAM_TTY_KLUDGE, which went missing in
1129 recent merge
Damien Miller20a8f972003-05-18 20:50:30 +10001130 - (djm) OpenBSD CVS Sync
1131 - djm@cvs.openbsd.org 2003/05/16 03:27:12
1132 [readconf.c ssh_config ssh_config.5 ssh-keysign.c]
1133 add AddressFamily option to ssh_config (like -4, -6 on commandline).
1134 Portable bug #534; ok markus@
Damien Millera9825782003-05-18 20:53:10 +10001135 - itojun@cvs.openbsd.org 2003/05/17 03:25:58
1136 [auth-rhosts.c]
1137 just in case, put numbers to sscanf %s arg.
Damien Millerf5399c22003-05-18 20:53:59 +10001138 - markus@cvs.openbsd.org 2003/05/17 04:27:52
1139 [cipher.c cipher-ctr.c myproposal.h]
1140 experimental support for aes-ctr modes from
1141 http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt
1142 ok djm@
Damien Miller7e1bbc52003-05-18 20:52:40 +10001143 - (djm) Remove IPv4 by default hack now that we can specify AF in config
Damien Miller0b8e9002003-05-18 21:44:07 +10001144 - (djm) Tidy and trim TODO
Damien Millere323df62003-05-18 22:24:09 +10001145 - (djm) Sync openbsd-compat/ with OpenBSD CVS head
Damien Miller31741252003-05-19 00:13:38 +10001146 - (djm) Big KNF on openbsd-compat/
Damien Miller5b5ca192003-05-19 00:50:02 +10001147 - (djm) KNF on md5crypt.[ch]
1148 - (djm) KNF on auth-sia.[ch]
Damien Miller25d93422003-05-18 20:45:47 +10001149
115020030517
Ben Lindstrom4c9e9ab2003-05-18 01:22:43 +00001151 - (bal) strcat -> strlcat on openbsd-compat/realpath.c (rev 1.8 OpenBSD)
1152
Damien Miller6e80c362003-05-16 11:38:00 +1000115320030516
1154 - (djm) OpenBSD CVS Sync
1155 - djm@cvs.openbsd.org 2003/05/15 13:52:10
1156 [ssh.c]
1157 Make "ssh -V" print the OpenSSL version in a human readable form. Patch
1158 from Craig Leres (mindrot at ee.lbl.gov); ok markus@
Damien Millerf9b3feb2003-05-16 11:38:32 +10001159 - jakob@cvs.openbsd.org 2003/05/15 14:02:47
1160 [readconf.c servconf.c]
1161 warn for unsupported config option. ok markus@
Damien Miller99b4b882003-05-16 11:38:46 +10001162 - markus@cvs.openbsd.org 2003/05/15 14:09:21
1163 [auth2-krb5.c]
1164 fix 64bit issue; report itojun@
Damien Millerb78d5eb2003-05-16 11:39:04 +10001165 - djm@cvs.openbsd.org 2003/05/15 14:55:25
1166 [readconf.c readconf.h ssh_config ssh_config.5 sshconnect.c]
1167 add a ConnectTimeout option to ssh, based on patch from
1168 Jean-Charles Longuet (jclonguet at free.fr); portable #207 ok markus@
Damien Miller6ac2c482003-05-16 11:42:35 +10001169 - (djm) Add warning for UsePAM when built without PAM support
Damien Millerc46b6bc2003-05-16 15:51:44 +10001170 - (djm) A few type mismatch fixes from Bug #565
Damien Millere27c6cc2003-05-16 18:21:01 +10001171 - (djm) Guard free_pam_environment against NULL argument. Works around
1172 HP/UX PAM problems debugged by dtucker
Damien Miller6e80c362003-05-16 11:38:00 +10001173
Damien Millerabbae982003-05-15 10:16:21 +1000117420030515
1175 - (djm) OpenBSD CVS Sync
1176 - jmc@cvs.openbsd.org 2003/05/14 13:11:56
1177 [ssh-agent.1]
1178 setup -> set up;
1179 from wiz@netbsd
Damien Miller37876e92003-05-15 10:19:46 +10001180 - jakob@cvs.openbsd.org 2003/05/14 18:16:20
1181 [key.c key.h readconf.c readconf.h ssh_config.5 sshconnect.c]
1182 [dns.c dns.h README.dns ssh-keygen.1 ssh-keygen.c]
1183 add experimental support for verifying hos keys using DNS as described
1184 in draft-ietf-secsh-dns-xx.txt. more information in README.dns.
1185 ok markus@ and henning@
Damien Miller54c45982003-05-15 10:20:13 +10001186 - markus@cvs.openbsd.org 2003/05/14 22:24:42
1187 [clientloop.c session.c ssh.1]
1188 allow to send a BREAK to the remote system; ok various
Damien Millerf842fcb2003-05-15 12:01:28 +10001189 - markus@cvs.openbsd.org 2003/05/15 00:28:28
1190 [sshconnect2.c]
1191 cleanup unregister of per-method packet handlers; ok djm@
Damien Miller2aa0ab42003-05-15 12:05:28 +10001192 - jakob@cvs.openbsd.org 2003/05/15 01:48:10
1193 [readconf.c readconf.h servconf.c servconf.h]
1194 always parse kerberos options. ok djm@ markus@
Damien Millerb0622652003-05-15 13:27:28 +10001195 - jakob@cvs.openbsd.org 2003/05/15 02:27:15
1196 [dns.c]
1197 add missing freerrset
Damien Miller3a3261f2003-05-15 13:37:19 +10001198 - markus@cvs.openbsd.org 2003/05/15 03:08:29
1199 [cipher.c cipher-bf1.c cipher-aes.c cipher-3des1.c]
1200 split out custom EVP ciphers
Damien Millered12a262003-05-15 13:37:43 +10001201 - djm@cvs.openbsd.org 2003/05/15 03:10:52
1202 [ssh-keygen.c]
1203 avoid warning; ok jakob@
Damien Miller4962ed62003-05-15 13:48:59 +10001204 - mouring@cvs.openbsd.org 2003/05/15 03:39:07
1205 [sftp-int.c]
1206 Make put/get (globed and nonglobed) code more consistant. OK djm@
Damien Miller19c8f2b2003-05-15 13:49:21 +10001207 - mouring@cvs.openbsd.org 2003/05/15 03:43:59
Damien Miller34bb5672003-05-15 13:49:58 +10001208 [sftp-int.c sftp.c]
Damien Miller19c8f2b2003-05-15 13:49:21 +10001209 Teach ls how to display multiple column display and allow users
1210 to return to single column format via 'ls -1'. OK @djm
Damien Miller156cbe82003-05-15 14:16:41 +10001211 - jakob@cvs.openbsd.org 2003/05/15 04:08:44
1212 [readconf.c servconf.c]
1213 disable kerberos when not supported. ok markus@
Damien Miller46a7b402003-05-15 14:17:28 +10001214 - markus@cvs.openbsd.org 2003/05/15 04:08:41
1215 [ssh.1]
1216 ~B is ssh2 only
Damien Miller2aa0ab42003-05-15 12:05:28 +10001217 - (djm) Always parse UsePAM
Damien Miller7abe09b2003-05-15 10:53:49 +10001218 - (djm) Configure glue for DNS support (code doesn't work in portable yet)
Damien Millerd9ec3702003-05-15 12:27:08 +10001219 - (djm) Import getrrsetbyname() function from OpenBSD libc (for DNS support)
Damien Millera47f5262003-05-15 13:23:07 +10001220 - (djm) Tidy Makefile clean targets
Damien Miller5975cf12003-05-15 13:23:36 +10001221 - (djm) Adapt README.dns for portable
Damien Millerffda4cb2003-05-15 13:57:51 +10001222 - (djm) Avoid uuencode.c warnings
Damien Miller156cbe82003-05-15 14:16:41 +10001223 - (djm) Enable UsePAM when built --with-pam
Damien Millerb10f1cd2003-05-15 20:55:27 +10001224 - (djm) Only build getrrsetbyname replacement when using --with-dns
Damien Miller04cb5362003-05-15 21:29:10 +10001225 - (djm) Bug #529: sshd doesn't work correctly after SIGHUP (copy argv
1226 correctly)
Damien Millereff041d2003-05-15 21:33:46 +10001227 - (djm) Bug #444: Wrong paths after reconfigure
Darren Tucker5d0ccf32003-05-15 21:42:59 +10001228 - (dtucker) HP-UX needs to include <sys/strtio.h> for TIOCSBRK
Damien Miller04cb5362003-05-15 21:29:10 +10001229
Damien Miller1a27a1e2003-05-14 10:27:09 +1000123020030514
1231 - (djm) Bug #117: Don't lie to PAM about username
Damien Millerd5580922003-05-14 13:40:06 +10001232 - (djm) RCSID sync w/ OpenBSD
Damien Millerc652cac2003-05-14 13:40:54 +10001233 - (djm) OpenBSD CVS Sync
1234 - djm@cvs.openbsd.org 2003/04/09 12:00:37
1235 [readconf.c]
1236 strip trailing whitespace from config lines before parsing.
1237 Fixes bz 528; ok markus@
Damien Millera201bb32003-05-14 13:41:23 +10001238 - markus@cvs.openbsd.org 2003/04/12 10:13:57
1239 [cipher.c]
1240 hide cipher details; ok djm@
Damien Milleref095ce2003-05-14 13:41:39 +10001241 - markus@cvs.openbsd.org 2003/04/12 10:15:36
1242 [misc.c]
1243 debug->debug2
Damien Miller44e72a72003-05-14 13:42:08 +10001244 - naddy@cvs.openbsd.org 2003/04/12 11:40:15
1245 [ssh.1]
1246 document -V switch, fix wording; ok markus@
Damien Miller2372ace2003-05-14 13:42:23 +10001247 - markus@cvs.openbsd.org 2003/04/14 14:17:50
1248 [channels.c sshconnect.c sshd.c ssh-keyscan.c]
1249 avoid hardcoded SOCK_xx; with itojun@; should allow ssh over SCTP
Damien Miller8ce778a2003-05-14 13:43:25 +10001250 - mouring@cvs.openbsd.org 2003/04/14 21:31:27
1251 [sftp-int.c]
1252 Missing globfree(&g) in process_put() spotted by Vince Brimhall
1253 <VBrimhall@novell.com>. ok@ Theo
1254 - markus@cvs.openbsd.org 2003/04/16 14:35:27
1255 [auth.h]
1256 document struct Authctxt; with solar
Damien Millerea5ade22003-05-14 13:43:53 +10001257 - deraadt@cvs.openbsd.org 2003/04/26 04:29:49
1258 [ssh-keyscan.c]
1259 -t in usage(); rogier@quaak.org
Damien Miller049245d2003-05-14 13:44:42 +10001260 - mouring@cvs.openbsd.org 2003/04/30 01:16:20
1261 [sshd.8 sshd_config.5]
1262 Escape ?, * and ! in .Ql for nroff compatibility. OpenSSH Portable
1263 Bug #550 and * escaping suggested by jmc@.
Damien Miller31554322003-05-14 13:44:58 +10001264 - david@cvs.openbsd.org 2003/04/30 20:41:07
1265 [sshd.8]
1266 fix invalid .Pf macro usage introduced in previous commit
1267 ok jmc@ mouring@
Damien Millerdb274722003-05-14 13:45:22 +10001268 - markus@cvs.openbsd.org 2003/05/11 16:56:48
1269 [authfile.c ssh-keygen.c]
1270 change key_load_public to try to read a public from:
1271 rsa1 private or rsa1 public and ssh2 keys.
1272 this makes ssh-keygen -e fail for ssh1 keys more gracefully
1273 for example; report from itojun (netbsd pr 20550).
Damien Millerb1ca8bb2003-05-14 13:45:42 +10001274 - markus@cvs.openbsd.org 2003/05/11 20:30:25
1275 [channels.c clientloop.c serverloop.c session.c ssh.c]
1276 make channel_new() strdup the 'remote_name' (not the caller); ok theo
Damien Miller280ecfb2003-05-14 13:46:00 +10001277 - markus@cvs.openbsd.org 2003/05/12 16:55:37
1278 [sshconnect2.c]
1279 for pubkey authentication try the user keys in the following order:
1280 1. agent keys that are found in the config file
1281 2. other agent keys
1282 3. keys that are only listed in the config file
1283 this helps when an agent has many keys, where the server might
1284 close the connection before the correct key is used. report & ok pb@
Damien Miller93506352003-05-14 13:46:33 +10001285 - markus@cvs.openbsd.org 2003/05/12 18:35:18
1286 [ssh-keyscan.1]
1287 typo: DSA keys are of type ssh-dss; Brian Poole
Damien Millerfb7508e2003-05-14 13:47:07 +10001288 - markus@cvs.openbsd.org 2003/05/14 00:52:59
1289 [ssh2.h]
1290 ranges for per auth method messages
1291 - djm@cvs.openbsd.org 2003/05/14 01:00:44
1292 [sftp.1]
1293 emphasise the batchmode functionality and make reference to pubkey auth,
1294 both of which are FAQs; ok markus@
Damien Miller3ab496b2003-05-14 13:47:37 +10001295 - markus@cvs.openbsd.org 2003/05/14 02:15:47
1296 [auth2.c monitor.c sshconnect2.c auth2-krb5.c]
1297 implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@
1298 server interops with commercial client; ok jakob@ djm@
Damien Millerd6ead282003-05-14 19:30:38 +10001299 - jmc@cvs.openbsd.org 2003/05/14 08:25:39
1300 [sftp.1]
1301 - better formatting in SYNOPSIS
1302 - whitespace at EOL
1303 ok djm@
Damien Millerbe64d432003-05-14 19:31:12 +10001304 - markus@cvs.openbsd.org 2003/05/14 08:57:49
1305 [monitor.c]
1306 http://bugzilla.mindrot.org/show_bug.cgi?id=560
1307 Privsep child continues to run after monitor killed.
1308 Pass monitor signals through to child; Darren Tucker
Damien Miller9c617692003-05-14 14:31:11 +10001309 - (djm) Make portable build with MIT krb5 (some issues remain)
Damien Miller4e448a32003-05-14 15:11:48 +10001310 - (djm) Add new UsePAM configuration directive to allow runtime control
1311 over usage of PAM. This allows non-root use of sshd when built with
1312 --with-pam
Damien Miller9d507da2003-05-14 15:31:12 +10001313 - (djm) Die screaming if start_pam() is called when UsePAM=no
Damien Miller4d995192003-05-14 19:23:56 +10001314 - (djm) Avoid KrbV leak for MIT Kerberos
Darren Tuckerabef5622003-05-14 21:48:51 +10001315 - (dtucker) Set ai_socktype and ai_protocol in fake-getaddrinfo.c. ok djm@
Damien Miller1ea71662003-05-14 22:33:58 +10001316 - (djm) Bug #258: sscanf("[0-9]") -> sscanf("[0123456789]") for portability
Damien Miller1a27a1e2003-05-14 10:27:09 +10001317
Damien Miller75d3b052003-05-12 18:15:49 +1000131820030512
1319 - (djm) Redhat spec: Don't install profile.d scripts when not
1320 building with GNOME/GTK askpass (patch from bet@rahul.net)
1321
Darren Tuckere8831092003-05-10 16:48:23 +1000132220030510
1323 - (dtucker) Bug #318: Create ssh_prng_cmds.out during "make" rather than
1324 "make install". Patch by roth@feep.net.
Darren Tuckerc437cda2003-05-10 17:05:46 +10001325 - (dtucker) Bug #536: Test for and work around openpty/controlling tty
1326 problem on Linux (fixes "could not set controlling tty" errors).
Damien Miller4f9f42a2003-05-10 19:28:02 +10001327 - (djm) Merge FreeBSD PAM code: replaces PAM password auth kludge with
1328 proper challenge-response module
Damien Miller0d8b7922003-05-10 23:42:12 +10001329 - (djm) 2-clause license on loginrec.c, with permission from
1330 andre@ae-35.com
Darren Tuckere8831092003-05-10 16:48:23 +10001331
Darren Tucker70a08cd2003-05-04 10:41:20 +1000133220030504
Darren Tuckerac279282003-05-04 11:36:25 +10001333 - (dtucker) Bug #497: Move #include of bsd-cygwin_util.h to openbsd-compat.h.
1334 Patch from vinschen@redhat.com.
Darren Tucker70a08cd2003-05-04 10:41:20 +10001335
Darren Tucker04cc5382003-05-03 07:32:56 +1000133620030503
1337 - (dtucker) Add missing "void" to record_failed_login in bsd-cray.c. Noted
1338 by wendyp@cray.com.
1339
Darren Tucker3c016542003-05-02 20:48:21 +1000134020030502
1341 - (dtucker) Bug #544: ignore invalid cmsg_type on Linux 2.0 kernels,
1342 privsep should now work.
Darren Tucker97363a82003-05-02 23:42:25 +10001343 - (dtucker) Move handling of bad password authentications into a platform
Darren Tuckerbd570d72003-05-02 23:50:09 +10001344 specific record_failed_login() function (affects AIX & Unicos). ok mouring@
Darren Tucker3c016542003-05-02 20:48:21 +10001345
Damien Millereab4bae2003-04-29 23:22:40 +1000134620030429
1347 - (djm) Add back radix.o (used by AFS support), after it went missing from
1348 Makefile many moons ago
1349 - (djm) Apply "owl-always-auth" patch from Openwall/Solar Designer
1350 - (djm) Fix blibpath specification for AIX/gcc
1351 - (djm) Some systems have basename in -lgen. Fix from ayamura@ayamura.org
1352
Ben Lindstrom0e7f4362003-04-28 23:30:43 +0000135320030428
1354 - (bal) [defines.h progressmeter.c scp.c] Some more culling of non 64bit
1355 hacked code.
1356
Ben Lindstrom93b6b772003-04-27 17:55:33 +0000135720030427
1358 - (bal) Bug #541: return; was dropped by mistake. Reported by
1359 furrier@iglou.com
Ben Lindstrom796b9a52003-04-27 18:01:37 +00001360 - (bal) Since we don't support platforms lacking u_int_64. We may
1361 as well clean out some of those evil #ifdefs
Ben Lindstrom683036e2003-04-27 18:41:30 +00001362 - (bal) auth1.c minor resync while looking at the code.
Ben Lindstromf50ad1f2003-04-27 18:44:31 +00001363 - (bal) auth2.c same changed as above.
Ben Lindstrom93b6b772003-04-27 17:55:33 +00001364
Damien Millerd186d742003-04-09 19:40:33 +1000136520030409
1366 - (djm) Bug #539: Specify creation mode with O_CREAT for lastlog. Report
1367 from matth@eecs.berkeley.edu
Damien Millera92a5892003-04-09 19:41:25 +10001368 - (djm) Make the spec work with Redhat 9.0 (which renames sharutils)
Damien Millera5539d22003-04-09 20:50:06 +10001369 - (djm) OpenBSD CVS Sync
1370 - markus@cvs.openbsd.org 2003/04/02 09:48:07
1371 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
1372 [readconf.h serverloop.c sshconnect2.c]
1373 reapply rekeying chage, tested by henning@, ok djm@
Damien Miller703ced52003-04-09 20:50:26 +10001374 - markus@cvs.openbsd.org 2003/04/02 14:36:26
1375 [ssh-keysign.c]
1376 potential segfault if KEY_UNSPEC; cjwatson@debian.org; bug #526
Damien Miller3bed1912003-04-09 20:50:59 +10001377 - itojun@cvs.openbsd.org 2003/04/03 07:25:27
1378 [progressmeter.c]
1379 $OpenBSD$
1380 - itojun@cvs.openbsd.org 2003/04/03 10:17:35
1381 [progressmeter.c]
1382 remove $OpenBSD$, as other *.c does not have it.
Damien Millerb1ecd9c2003-04-09 20:51:24 +10001383 - markus@cvs.openbsd.org 2003/04/07 08:29:57
1384 [monitor_wrap.c]
1385 typo: get correct counters; introduced during rekeying change.
Damien Millera0898b82003-04-09 21:05:52 +10001386 - millert@cvs.openbsd.org 2003/04/07 21:58:05
1387 [progressmeter.c]
1388 The UCB copyright here is incorrect. This code did not originate
1389 at UCB, it was written by Luke Mewburn. Updated the copyright at
1390 the author's request. markus@ OK
1391 - itojun@cvs.openbsd.org 2003/04/08 20:21:29
1392 [*.c *.h]
1393 rename log() into logit() to avoid name conflict. markus ok, from
1394 netbsd
1395 - (djm) XXX - Performed locally using:
1396 "perl -p -i -e 's/(\s|^)log\(/$1logit\(/g' *.c *.h"
Damien Millerbf2a0172003-04-09 21:07:14 +10001397 - hin@cvs.openbsd.org 2003/04/09 08:23:52
1398 [servconf.c]
1399 Don't include <krb.h> when compiling with Kerberos 5 support
Damien Millera0898b82003-04-09 21:05:52 +10001400 - (djm) Fix up missing include for packet.c
Damien Miller2a3f20e2003-04-09 21:12:00 +10001401 - (djm) Fix missed log => logit occurance (reference by function pointer)
Damien Millerd186d742003-04-09 19:40:33 +10001402
Ben Lindstromc8a49d72003-04-02 15:18:22 +0000140320030402
1404 - (bal) if IP_TOS is not found or broken don't try to compile in
1405 packet_set_tos() function call. bug #527
1406
Damien Miller495dca32003-04-01 21:42:14 +1000140720030401
1408 - (djm) OpenBSD CVS Sync
1409 - jmc@cvs.openbsd.org 2003/03/28 10:11:43
1410 [scp.1 sftp.1 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5 sshd_config.5]
1411 [ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
1412 - killed whitespace
1413 - new sentence new line
1414 - .Bk for arguments
1415 ok markus@
Damien Miller2dc074e2003-04-01 21:43:39 +10001416 - markus@cvs.openbsd.org 2003/04/01 10:10:23
1417 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
1418 [readconf.h serverloop.c sshconnect2.c]
1419 rekeying bugfixes and automatic rekeying:
1420 * both client and server rekey _automatically_
1421 (a) after 2^31 packets, because after 2^32 packets
1422 the sequence number for packets wraps
1423 (b) after 2^(blocksize_in_bits/4) blocks
1424 (see: draft-ietf-secsh-newmodes-00.txt)
1425 (a) and (b) are _enabled_ by default, and only disabled for known
1426 openssh versions, that don't support rekeying properly.
1427 * client option 'RekeyLimit'
1428 * do not reply to requests during rekeying
1429 - markus@cvs.openbsd.org 2003/04/01 10:22:21
1430 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
1431 [readconf.h serverloop.c sshconnect2.c]
1432 backout rekeying changes (for 3.6.1)
Damien Millerd3209042003-04-01 21:44:37 +10001433 - markus@cvs.openbsd.org 2003/04/01 10:31:26
1434 [compat.c compat.h kex.c]
1435 bugfix causes stalled connections for ssh.com < 3.0; noticed by ho@;
1436 tested by ho@ and myself
Damien Miller13c1c7a2003-04-01 21:45:26 +10001437 - markus@cvs.openbsd.org 2003/04/01 10:56:46
1438 [version.h]
1439 3.6.1
Damien Millerb80e52a2003-04-01 21:46:53 +10001440 - (djm) Crank spec file versions
Damien Millera0ab6692003-04-01 21:47:16 +10001441 - (djm) Release 3.6.1p1
Damien Miller495dca32003-04-01 21:42:14 +10001442
Damien Millerb3207e82003-03-26 16:01:11 +1100144320030326
1444 - (djm) OpenBSD CVS Sync
1445 - deraadt@cvs.openbsd.org 2003/03/26 04:02:51
1446 [sftp-server.c]
1447 one last fix to the tree: race fix broke stuff; pr 3169;
1448 srp@srparish.net, help from djm
1449
Damien Miller68d893d2003-03-25 09:07:52 +1100145020030325
1451 - (djm) Fix getpeerid support for 64 bit BE systems. From
1452 Arnd Bergmann <arndb@de.ibm.com>
1453
Damien Millerb062c292003-03-24 09:12:09 +1100145420030324
1455 - (djm) OpenBSD CVS Sync
1456 - markus@cvs.openbsd.org 2003/03/23 19:02:00
1457 [monitor.c]
1458 unbreak rekeying for privsep; ok millert@
1459 - Release 3.6p1
Damien Miller62b6b172003-03-24 13:35:58 +11001460 - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
1461 Report from murple@murple.net, diagnosis from dtucker@zip.com.au
Damien Millerb062c292003-03-24 09:12:09 +11001462
Damien Miller91c6aa42003-11-17 21:20:18 +11001463$Id: ChangeLog,v 1.3108 2003/11/17 10:20:18 djm Exp $