blob: bbb51c11f66a5bde5a7f4b9b42a91bad1c68c8bd [file] [log] [blame]
Ben Lindstrombeecf742002-05-15 15:59:17 +0000120020515
2 - (bal) CVS ID fix up on auth-passwd.c
Ben Lindstrom1650ba32002-05-15 16:07:11 +00003 - (bal) OpenBSD CVS Sync
4 - deraadt@cvs.openbsd.org 2002/05/07 19:54:36
5 [ssh.h]
6 use ssh uid
Ben Lindstrom973be002002-05-15 16:08:48 +00007 - deraadt@cvs.openbsd.org 2002/05/08 21:06:34
8 [ssh.h]
9 move to sshd.sshd instead
Ben Lindstrombeecf742002-05-15 15:59:17 +000010
Kevin Stevesf8defa22002-05-13 23:31:09 +00001120020514
12 - (stevesk) [README.privsep] PAM+privsep works with Solaris 8.
Tim Rice1e28c9e2002-05-13 17:07:18 -070013 - (tim) [sshpty.c] set tty modes when allocating old style bsd ptys to
14 match what newer style ptys have when allocated. Based on a patch by
15 Roger Cornelius <rac@tenzing.org>
Tim Ricefd6fd242002-05-13 20:50:38 -070016 - (tim) [README.privsep] UnixWare 7 and OpenUNIX 8 work.
17 - (tim) [README.privsep] remove reference to UnixWare 7 and OpenUNIX 8
18 from PAM-enabled pragraph. UnixWare has no PAM.
Tim Rice8dd6feb2002-05-14 09:03:46 -070019 - (tim) [contrib/caldera/openssh.spec] update version.
Kevin Stevesf8defa22002-05-13 23:31:09 +000020
Damien Millera18bbd32002-05-13 10:48:57 +10002120020513
Kevin Steves02281552002-05-13 03:57:04 +000022 - (stevesk) add initial README.privsep
Kevin Stevesc81e1292002-05-13 03:51:40 +000023 - (stevesk) [configure.ac] nicer message: --with-privsep-user=user
Damien Miller860e9292002-05-15 10:12:29 +100024 - (djm) Add --with-superuser-path=xxx configure option to specify
25 what $PATH the superuser receives.
Damien Miller5ad9fd92002-05-13 11:07:41 +100026 - (djm) Bug #231: UsePrivilegeSeparation turns off Banner.
Damien Millerf58c6722002-05-13 13:15:42 +100027 - (djm) Add --with-privsep-path configure option
Damien Millerb7cb9692002-05-13 13:26:57 +100028 - (djm) Update RPM spec file: different superuser path, use
29 /var/empty/sshd for privsep
Damien Millerf71d2a52002-05-13 15:14:08 +100030 - (djm) Bug #234: missing readpassphrase declaration and defines
Damien Miller860e9292002-05-15 10:12:29 +100031 - (djm) Add INSTALL warning about SSH protocol 1 blowfish w/
32 OpenSSL < 0.9.6
Damien Millera18bbd32002-05-13 10:48:57 +100033
Tim Riceaef73712002-05-11 13:17:42 -07003420020511
35 - (tim) [configure.ac] applied a rework of djm's OpenSSL search cleanup patch.
36 Now only searches system and /usr/local/ssl (OpenSSL's default install path)
37 Others must use --with-ssl-dir=....
Tim Rice802b9562002-05-11 15:30:04 -070038 - (tim) [monitor_fdpass.c] fix for systems that have both
Damien Miller860e9292002-05-15 10:12:29 +100039 HAVE_ACCRIGHTS_IN_MSGHDR and HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h
40 has #define msg_accrights msg_control
Tim Riceaef73712002-05-11 13:17:42 -070041
Damien Millercfe4a892002-05-10 12:19:23 +10004220020510
Kevin Stevesf98fb722002-05-10 15:48:52 +000043 - (stevesk) [auth.c] Shadow account and expiration cleanup. Now
44 check for root forced expire. Still don't check for inactive.
Damien Millercfe4a892002-05-10 12:19:23 +100045 - (djm) Rework RedHat RPM files. Based on spec from Nalin
46 Dahyabhai <nalin@redhat.com> and patches from
47 Pekka Savola <pekkas@netcore.fi>
Damien Miller87aea252002-05-10 12:20:24 +100048 - (djm) Try to drop supplemental groups at daemon startup. Patch from
49 RedHat
Ben Lindstrom0b478142002-05-10 02:40:15 +000050 - (bal) Back all the way out of auth-passwd.c changes. Breaks too many
51 things that don't set pw->pw_passwd.
Damien Millercfe4a892002-05-10 12:19:23 +100052
Tim Ricea7a5d6d2002-05-09 07:05:59 -07005320020509
54 - (tim) [Makefile.in] Unbreak make -f Makefile.in distprep
Damien Millerffc868f2002-05-09 15:59:13 +100055
Tim Ricea7a5d6d2002-05-09 07:05:59 -07005620020508
Tim Rice63cf8412002-05-08 15:57:18 -070057 - (tim) [openbsd-compat/bsd-arc4random.c] fix logic on when seed_rng() is
58 called. Report by Chris Maxwell <maxwell@cs.dal.ca>
Tim Rice0502a472002-05-08 16:04:14 -070059 - (tim) [Makefile.in configure.ac] set SHELL variable in Makefile
Tim Ricea7a5d6d2002-05-09 07:05:59 -070060 - (djm) Disable PAM kbd-int auth if privsep is turned on (it doesn't work)
Tim Rice63cf8412002-05-08 15:57:18 -070061
6220020507
Tim Rice4bd2a192002-05-07 19:51:31 -070063 - (tim) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
64 Add truncate() emulation to address Bug 208
65
Ben Lindstrom532bbdb2002-05-06 23:06:08 +00006620020506
Damien Miller52910dd2002-05-08 12:18:26 +100067 - (djm) Unbreak auth-passwd.c for PAM and SIA
Damien Millera33501b2002-05-08 12:24:42 +100068 - (djm) Unbreak PAM auth for protocol 1. Report from Pekka Savola
69 <pekkas@netcore.fi>
Damien Millerf762a4b2002-05-08 12:27:55 +100070 - (djm) Don't reinitialise PAM credentials before we have started PAM.
71 Report from Pekka Savola <pekkas@netcore.fi>
72
Damien Miller52910dd2002-05-08 12:18:26 +10007320020506
Ben Lindstrom532bbdb2002-05-06 23:06:08 +000074 - (bal) Fixed auth-passwd.c to resolve PermitEmptyPassword issue
75
Damien Miller38cd4352002-05-01 13:17:33 +10007620020501
77 - (djm) Import OpenBSD regression tests. Requires BSD make to run
Damien Miller804357a2002-05-01 22:00:22 +100078 - (djm) Fix readpassphase compilation for systems which have it
Damien Miller38cd4352002-05-01 13:17:33 +100079
Tim Rice2f092892002-04-29 20:53:12 -07008020020429
81 - (tim) [contrib/caldera/openssh.spec] update fixUP to reflect changes in
82 sshd_config.
83 - (tim) [contrib/cygwin/README] remove reference to regex.
84 patch from Corinna Vinschen <vinschen@redhat.com>
85
Damien Miller13ce9222002-04-26 11:25:40 +10008620020426
87 - (djm) Bug #137, #209: fix make problems for scard/Ssh.bin, do uudecode
88 during distprep only
Damien Miller860e9292002-05-15 10:12:29 +100089 - (djm) Disable PAM password expiry until a complete fix for bug #188
90 exists
Damien Milleraa100c52002-04-26 16:54:34 +100091 - (djm) Bug #180: Set ToS bits on IPv4-in-IPv6 mapped addresses. Based on
92 patch from openssh@misc.tecq.org
Damien Miller13ce9222002-04-26 11:25:40 +100093
Kevin Steves30e494f2002-04-25 17:56:07 +00009420020425
95 - (stevesk) [defines.h] remove USE_TIMEVAL; unused
Kevin Steves0ea1d9d2002-04-25 18:17:04 +000096 - (stevesk) [acconfig.h auth-passwd.c configure.ac sshd.c] HP-UX 10.26
97 support. bug #184. most from dcole@keysoftsys.com.
Kevin Steves30e494f2002-04-25 17:56:07 +000098
Damien Miller11ec2812002-04-24 09:48:14 +10009920020424
100 - (djm) OpenBSD CVS Sync
101 - markus@cvs.openbsd.org 2002/04/23 12:54:10
102 [version.h]
103 3.2.1
Damien Miller0150c652002-04-24 09:49:09 +1000104 - djm@cvs.openbsd.org 2002/04/23 22:16:29
105 [sshd.c]
106 Improve error message; ok markus@ stevesk@
Damien Miller11ec2812002-04-24 09:48:14 +1000107
Damien Miller594a71b2002-04-23 20:22:59 +100010820020423
Kevin Steves5feaaef2002-04-23 20:45:55 +0000109 - (stevesk) [acconfig.h configure.ac session.c] LOGIN_NO_ENDOPT for HP-UX
Kevin Steves03df6cd2002-04-23 20:11:13 +0000110 - (stevesk) [acconfig.h] NEED_IN_SYSTM_H unused
Markus Friedl78cf8c32002-04-23 16:41:12 +0200111 - (markus) OpenBSD CVS Sync
112 - markus@cvs.openbsd.org 2002/04/23 12:58:26
113 [radix.c]
114 send complete ticket; semerad@ss1000.ms.mff.cuni.cz
Damien Milleref7c11d2002-04-23 21:13:32 +1000115 - (djm) Trim ChangeLog to include only post-3.1 changes
Damien Miller0b3894d2002-04-23 21:15:31 +1000116 - (djm) Update RPM spec file versions
Damien Miller654a4ef2002-04-23 21:17:17 +1000117 - (djm) Redhat spec enables KrbV by default
Damien Millerf5fea442002-04-23 22:52:45 +1000118 - (djm) Applied OpenSC smartcard updates from Markus &
119 Antti Tapaninen <aet@cc.hut.fi>
120 - (djm) Define BROKEN_REALPATH for AIX, patch from
121 Antti Tapaninen <aet@cc.hut.fi>
Damien Millerf1b9d112002-04-23 23:09:19 +1000122 - (djm) Bug #214: Fix utmp for Irix (don't strip "tty"). Patch from
123 Kevin Taylor <no@nowhere.org> (??) via Philipp Grau
124 <phgrau@zedat.fu-berlin.de>
Damien Millerd77facd2002-04-23 22:59:51 +1000125 - (djm) Bug #213: Simplify CMSG_ALIGN macros to avoid symbol clashes.
126 Reported by Doug Manton <dmanton@emea.att.com>
Damien Miller594a71b2002-04-23 20:22:59 +1000127 - (djm) Bug #222: Fix tests for getaddrinfo on OSF/1. Spotted by
128 Robert Urban <urban@spielwiese.de>
Damien Millerfa2bb692002-04-23 23:22:25 +1000129 - (djm) Bug #206 - blibpath isn't always needed for AIX ld, avoid
130 sizeof(long long int) == 4 breakage. Patch from Matthew Clarke
131 <Matthew_Clarke@mindlink.bc.ca>
Damien Miller79418552002-04-23 20:28:48 +1000132 - (djm) Make privsep work with PAM (still experimental)
Damien Miller3b235662002-04-23 20:42:36 +1000133 - (djm) OpenBSD CVS Sync
134 - deraadt@cvs.openbsd.org 2002/04/20 09:02:03
135 [servconf.c]
136 No, afs requires explicit enabling
137 - markus@cvs.openbsd.org 2002/04/20 09:14:58
138 [bufaux.c bufaux.h]
139 add buffer_{get,put}_short
Damien Millerbad0e012002-04-23 20:46:56 +1000140 - markus@cvs.openbsd.org 2002/04/20 09:17:19
141 [radix.c]
142 rewrite using the buffer_* API, fixes overflow; ok deraadt@
Damien Miller7a8558d2002-04-23 20:51:15 +1000143 - stevesk@cvs.openbsd.org 2002/04/21 16:19:27
144 [sshd.8 sshd_config]
145 document default AFSTokenPassing no; ok deraadt@
Damien Millerf61c0152002-04-23 20:56:02 +1000146 - stevesk@cvs.openbsd.org 2002/04/21 16:25:06
147 [sshconnect1.c]
148 spelling in error message; ok markus@
Damien Miller635fe982002-04-23 21:00:33 +1000149 - markus@cvs.openbsd.org 2002/04/22 06:15:47
150 [radix.c]
151 fix check for overflow
Damien Millerd7de14b2002-04-23 21:04:51 +1000152 - markus@cvs.openbsd.org 2002/04/22 16:16:53
153 [servconf.c sshd.8 sshd_config]
154 do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@
Damien Miller2797f7f2002-04-23 21:09:44 +1000155 - markus@cvs.openbsd.org 2002/04/22 21:04:52
156 [channels.c clientloop.c clientloop.h ssh.c]
157 request reply (success/failure) for -R style fwd in protocol v2,
158 depends on ordered replies.
159 fixes http://bugzilla.mindrot.org/show_bug.cgi?id=215; ok provos@
Damien Miller594a71b2002-04-23 20:22:59 +1000160
Tim Ricef02dccc2002-04-21 11:26:10 -070016120020421
162 - (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0).
Damien Miller860e9292002-05-15 10:12:29 +1000163 entropy.c needs seteuid(getuid()) for the setuid(original_uid) to
164 succeed. Patch by gert@greenie.muc.de. This fixes one part of Bug 208
Tim Ricef02dccc2002-04-21 11:26:10 -0700165
Damien Millera370f4d2002-04-18 22:53:22 +100016620020418
167 - (djm) Avoid SIGCHLD breakage when run from rsync. Fix from
168 Sturle Sunde <sturle.sunde@usit.uio.no>
169
Damien Millerbd638742002-04-17 12:22:58 +100017020020417
Damien Miller860e9292002-05-15 10:12:29 +1000171 - (djm) Tell users to configure /dev/random support into OpenSSL in
172 INSTALL
Damien Miller5efd7102002-04-17 12:30:45 +1000173 - (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca
Tim Rice43a1c132002-04-17 21:19:14 -0700174 - (tim) [configure.ac] Issue warning on --with-default-path=/some_path
175 if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com>
Damien Millerbd638742002-04-17 12:22:58 +1000176
Damien Miller8be24f32002-04-15 13:23:59 +100017720020415
Damien Miller860e9292002-05-15 10:12:29 +1000178 - (djm) Unbreak "make install". Fix from Darren Tucker
179 <dtucker@zip.com.au>
Kevin Steveseb363022002-04-15 22:00:51 +0000180 - (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen
Tim Rice66480f12002-04-15 21:10:09 -0700181 - (tim) [configure.ac] add tests for recvmsg and sendmsg.
182 [monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for
183 systems that HAVE_ACCRIGHTS_IN_MSGHDR but no recvmsg or sendmsg.
Damien Miller8be24f32002-04-15 13:23:59 +1000184
Damien Miller32e48182002-04-14 19:27:12 +100018520020414
186 - (djm) ssh-rand-helper improvements
187 - Add commandline debugging options
188 - Don't write binary data if stdout is a tty (use hex instead)
189 - Give it a manpage
Damien Miller49411ff2002-04-14 23:16:04 +1000190 - (djm) Random number collection doc fixes from Ben
Damien Miller32e48182002-04-14 19:27:12 +1000191
Damien Millerfd4c9ee2002-04-13 11:04:40 +100019220020413
193 - (djm) Add KrbV support patch from Simon Wilkinson <simon@sxw.org.uk>
194
Kevin Steves19fa9b52002-04-12 15:36:07 +000019520020412
196 - (stevesk) [auth-sia.[ch]] add BSD license from Chris Adams
Tim Riceae49fe62002-04-12 10:26:21 -0700197 - (tim) [configure.ac] add <sys/types.h> to msghdr tests. Change -L
198 to -h on testing for /bin being symbolic link
Ben Lindstromc42f7cf2002-04-12 17:44:13 +0000199 - (bal) Mistaken in Cygwin scripts for ssh starting. Patch by
200 Corinna Vinschen <vinschen@redhat.com>
Ben Lindstrom927dfd22002-04-12 18:51:22 +0000201 - (bal) disable privsep if no MAP_ANON. We can re-enable it
202 after the release when we can do more testing.
Kevin Steves19fa9b52002-04-12 15:36:07 +0000203
Kevin Steves0c283d82002-04-11 20:39:40 +000020420020411
205 - (stevesk) [auth-sia.c] cleanup
Tim Rice813f0452002-04-11 20:35:39 -0700206 - (tim) [acconfig.h defines.h includes.h] put includes in includes.h and
207 defines in defines.h [rijndael.c openbsd-compat/fake-socket.h
208 openbsd-compat/inet_aton.c] include "includes.h" instead of "config.h"
209 ok stevesk@
Kevin Steves0c283d82002-04-11 20:39:40 +0000210
Kevin Steves6939b232002-04-10 16:09:51 +000021120020410
Kevin Stevesfe6ca542002-04-10 22:04:54 +0000212 - (stevesk) [configure.ac monitor.c] HAVE_SOCKETPAIR
Kevin Steves6939b232002-04-10 16:09:51 +0000213 - (stevesk) [auth-sia.c] compile fix Chris Adams <cmadams@hiwaay.net>
Ben Lindstromb5115ea2002-04-10 16:17:34 +0000214 - (bal) OpenBSD CVS Sync
215 - markus@cvs.openbsd.org 2002/04/10 08:21:47
216 [auth1.c compat.c compat.h]
Damien Miller860e9292002-05-15 10:12:29 +1000217 strip '@' from username only for KerbV and known broken clients,
218 bug #204
Ben Lindstrom027e4de2002-04-10 16:26:20 +0000219 - markus@cvs.openbsd.org 2002/04/10 08:56:01
220 [version.h]
221 OpenSSH_3.2
222 - Added p1 to idenify Portable release version.
Kevin Steves6939b232002-04-10 16:09:51 +0000223
Ben Lindstrom34b73202002-04-08 18:37:07 +000022420020408
225 - (bal) Minor OpenSC updates. Fix up header locations and update
226 README.smartcard provided by Juha Yrjölä <jyrjola@cc.hut.fi>
227
Kevin Stevesa44e0352002-04-07 16:18:03 +000022820020407
229 - (stevesk) HAVE_CONTROL_IN_MSGHDR; not used right now.
230 Future: we may want to test if fd passing works correctly.
Kevin Stevesc3c82552002-04-07 16:39:12 +0000231 - (stevesk) [monitor_fdpass.c] fatal() for UsePrivilegeSeparation=yes
232 and no fd passing support.
Kevin Steves86b9fe62002-04-07 17:08:53 +0000233 - (stevesk) HAVE_MMAP and HAVE_SYS_MMAN_H and use them in
234 monitor_mm.c
Kevin Stevesb1184bb2002-04-07 18:12:03 +0000235 - (stevesk) remove configure support for poll.h; it was removed
236 from sshd.c a long time ago.
Kevin Steves7ff91122002-04-07 19:22:54 +0000237 - (stevesk) --with-privsep-user; default sshd
Kevin Steves265c9d02002-04-07 22:36:49 +0000238 - (stevesk) wrap munmap() with HAVE_MMAP also.
Kevin Stevesa44e0352002-04-07 16:18:03 +0000239
Damien Miller12db56b2002-04-06 11:12:52 +100024020020406
241 - (djm) Typo in Suse SPEC file. Fix from Carsten Grohmann
242 <carsten.grohmann@dr-baldeweg.de>
Ben Lindstromdc0594c2002-04-06 04:11:28 +0000243 - (bal) Added MAP_FAILED to allow AIX and Trusted HP to compile.
Ben Lindstrom06e95152002-04-06 04:16:45 +0000244 - (bal) OpenBSD CVS Sync
245 - djm@cvs.openbsd.org 2002/04/06 00:30:08
246 [sftp-client.c]
Damien Millerf75fcc62002-04-23 23:32:38 +1000247 Fix occasional corruption on upload due to bad reuse of request
248 id, spotted by chombier@mac.com; ok markus@
Ben Lindstromde3895d2002-04-06 18:29:59 +0000249 - mouring@cvs.openbsd.org 2002/04/06 18:24:09
250 [scp.c]
251 Fixes potental double // within path.
252 http://bugzilla.mindrot.org/show_bug.cgi?id=76
Ben Lindstrom8d601752002-04-06 18:19:38 +0000253 - (bal) Slight update to OpenSC support. Better version checking. patch
254 by Juha Yrjölä <jyrjola@cc.hut.fi>
Ben Lindstrom8ff2a8d2002-04-06 18:58:31 +0000255 - (bal) Revered out of runtime IRIX detection of joblimits. Code is
256 incomplete.
Ben Lindstrom03188012002-04-06 20:30:07 +0000257 - (bal) Quiet down configure.ac if /bin/test does not exist.
Ben Lindstromfdee8ef2002-04-06 23:52:02 +0000258 - (bal) We no longer use atexit()/xatexit()/on_exit()
Damien Miller12db56b2002-04-06 11:12:52 +1000259
Ben Lindstroma42694f2002-04-05 16:11:45 +000026020020405
261 - (bal) Patch for OpenSC SmartCard library; ok markus@; patch by
262 Juha Yrjölä <jyrjola@cc.hut.fi>
263 - (bal) Minor documentation update to reflect smartcard library
264 support changes.
Ben Lindstrom924144e2002-04-05 20:23:35 +0000265 - (bal) Too many <sys/queue.h> issues. Remove all workarounds and
266 using internal version only.
Ben Lindstroma11e2702002-04-05 22:18:48 +0000267 - (bal) OpenBSD CVS Sync
268 - stevesk@cvs.openbsd.org 2002/04/05 20:56:21
269 [sshd.8]
270 clarify sshrc some and handle X11UseLocalhost=yes; ok markus@
Ben Lindstroma42694f2002-04-05 16:11:45 +0000271
Kevin Stevese683e762002-04-04 19:02:28 +000027220020404
273 - (stevesk) [auth-pam.c auth-pam.h auth-passwd.c auth-sia.c auth-sia.h
274 auth1.c auth2.c] PAM, OSF_SIA password auth cleanup; from djm.
Ben Lindstrom8a725a82002-04-04 22:10:38 +0000275 - (bal) OpenBSD CVS Sync
276 - markus@cvs.openbsd.org 2002/04/03 09:26:11
277 [cipher.c myproposal.h]
278 re-add rijndael-cbc@lysator.liu.se for MacSSH; ash@lab.poc.net
Kevin Stevese683e762002-04-04 19:02:28 +0000279
Ben Lindstromcdb66e02002-04-02 20:17:43 +000028020020402
281 - (bal) Hand Sync of scp.c (reverted to upstream code)
282 - deraadt@cvs.openbsd.org 2002/03/30 17:45:46
283 [scp.c]
284 stretch banners
Ben Lindstrom1e259bb2002-04-02 20:53:39 +0000285 - (bal) CVS ID sync of uidswap.c
Ben Lindstrom155b9812002-04-02 20:26:26 +0000286 - (bal) OpenBSD CVS Sync (now for the real sync)
287 - markus@cvs.openbsd.org 2002/03/27 22:21:45
288 [ssh-keygen.c]
Damien Miller860e9292002-05-15 10:12:29 +1000289 try to import keys with extra trailing === (seen with ssh.com <
290 2.0.12)
Ben Lindstrom2bf56e22002-04-02 20:32:46 +0000291 - markus@cvs.openbsd.org 2002/03/28 15:34:51
292 [session.c]
293 do not call record_login twice (for use_privsep)
Ben Lindstromc447fee2002-04-02 20:35:35 +0000294 - markus@cvs.openbsd.org 2002/03/29 18:59:32
295 [session.c session.h]
Damien Miller860e9292002-05-15 10:12:29 +1000296 retrieve last login time before the pty is allocated, store per
297 session
Ben Lindstrom0d0be022002-04-02 20:39:29 +0000298 - stevesk@cvs.openbsd.org 2002/03/29 19:16:22
299 [sshd.8]
300 RSA key modulus size minimum 768; ok markus@
Ben Lindstrom03f39322002-04-02 20:43:11 +0000301 - stevesk@cvs.openbsd.org 2002/03/29 19:18:33
302 [auth-rsa.c ssh-rsa.c ssh.h]
303 make RSA modulus minimum #define; ok markus@
Ben Lindstrom47fd8112002-04-02 20:48:19 +0000304 - markus@cvs.openbsd.org 2002/03/30 18:51:15
305 [monitor.c serverloop.c sftp-int.c sftp.c sshd.c]
306 check waitpid for EINTR; based on patch from peter@ifm.liu.se
Ben Lindstroma1d81142002-04-02 20:58:11 +0000307 - markus@cvs.openbsd.org 2002/04/01 22:02:16
308 [sftp-client.c]
309 20480 is an upper limit for older server
Ben Lindstromf26ff5b2002-04-02 21:00:31 +0000310 - markus@cvs.openbsd.org 2002/04/01 22:07:17
311 [sftp-client.c]
312 fallback to stat if server does not support lstat
Ben Lindstromeecdf232002-04-02 21:03:51 +0000313 - markus@cvs.openbsd.org 2002/04/02 11:49:39
314 [ssh-agent.c]
315 check $SHELL for -k and -d, too;
316 http://bugzilla.mindrot.org/show_bug.cgi?id=199
Ben Lindstrom2f3d52a2002-04-02 21:06:18 +0000317 - markus@cvs.openbsd.org 2002/04/02 17:37:48
318 [sftp.c]
319 always call log_init()
Ben Lindstrom07739fe2002-04-03 03:03:04 +0000320 - markus@cvs.openbsd.org 2002/04/02 20:11:38
321 [ssh-rsa.c]
322 ignore SSH_BUG_SIGBLOB for ssh-rsa; #187
Ben Lindstromaf40bc62002-04-03 03:36:54 +0000323 - (bal) mispelling in uidswap.c (portable only)
Ben Lindstromcdb66e02002-04-02 20:17:43 +0000324
Kevin Stevesbd1901b2002-04-01 18:04:35 +000032520020401
326 - (stevesk) [monitor.c] PAM should work again; will *not* work with
327 UsePrivilegeSeparation=yes.
Kevin Steves38c4a282002-04-02 03:24:56 +0000328 - (stevesk) [auth1.c] fix password auth for protocol 1 when
329 !USE_PAM && !HAVE_OSF_SIA; merge issue.
Kevin Stevesbd1901b2002-04-01 18:04:35 +0000330
Tim Rice49e457c2002-03-31 11:23:06 -080033120020331
332 - (tim) [configure.ac] use /bin/test -L to work around broken builtin on
333 Solaris 8
Tim Ricec8549622002-03-31 12:49:38 -0800334 - (tim) [sshconnect2.c] change uint32_t to u_int32_t
Tim Rice49e457c2002-03-31 11:23:06 -0800335
Kevin Steves117b06d2002-03-30 17:55:21 +000033620020330
337 - (stevesk) [configure.ac] remove header check for sys/ttcompat.h
338 bug 167
339
Ben Lindstrom53f18302002-03-27 16:50:03 +000034020020327
341 - (bal) 'pw' should be 'authctxt->pw' in auth1.c spotted by
342 kent@lysator.liu.se
Ben Lindstromf1813842002-03-27 17:18:31 +0000343 - (bal) OpenBSD CVS Sync
344 - markus@cvs.openbsd.org 2002/03/26 11:34:49
345 [ssh.1 sshd.8]
346 update to recent drafts
Ben Lindstromeb041dc2002-03-27 17:20:38 +0000347 - markus@cvs.openbsd.org 2002/03/26 11:37:05
348 [ssh.c]
349 update Copyright
Ben Lindstromcd8bbce2002-03-27 17:23:44 +0000350 - markus@cvs.openbsd.org 2002/03/26 15:23:40
351 [bufaux.c]
352 do not talk about packets in bufaux
Ben Lindstrom43a5e2f2002-03-27 17:33:17 +0000353 - rees@cvs.openbsd.org 2002/03/26 18:46:59
354 [scard.c]
Damien Miller860e9292002-05-15 10:12:29 +1000355 try_AUT0 in read_pubkey too, for those paranoid few who want to
356 acl 'sh'
Ben Lindstrom57686a82002-03-27 17:36:41 +0000357 - markus@cvs.openbsd.org 2002/03/26 22:50:39
358 [channels.h]
359 CHANNEL_EFD_OUTPUT_ACTIVE is false for CHAN_CLOSE_RCVD, too
Ben Lindstrome1f9e322002-03-27 17:38:43 +0000360 - markus@cvs.openbsd.org 2002/03/26 23:13:03
361 [auth-rsa.c]
362 disallow RSA keys < 768 for protocol 1, too (rhosts-rsa and rsa auth)
Ben Lindstrom59971722002-03-27 17:42:57 +0000363 - markus@cvs.openbsd.org 2002/03/26 23:14:51
364 [kex.c]
365 generate a new cookie for each SSH2_MSG_KEXINIT message we send out
Ben Lindstromb57a4bf2002-03-27 18:00:59 +0000366 - mouring@cvs.openbsd.org 2002/03/27 11:45:42
367 [monitor.c]
368 monitor_allowed_key() returns int instead of pointer. ok markus@
369
Kevin Steves6205a182002-03-26 00:12:49 +000037020020325
371 - (stevesk) import OpenBSD <sys/tree.h> as "openbsd-compat/tree.h"
Ben Lindstromf90f58d2002-03-26 01:53:03 +0000372 - (bal) OpenBSD CVS Sync
373 - stevesk@cvs.openbsd.org 2002/03/23 20:57:26
374 [sshd.c]
375 setproctitle() after preauth child; ok markus@
Ben Lindstrom3dc40f92002-03-26 02:01:30 +0000376 - markus@cvs.openbsd.org 2002/03/24 16:00:27
377 [serverloop.c]
378 remove unused debug
Ben Lindstrom8b08d812002-03-26 02:09:41 +0000379 - markus@cvs.openbsd.org 2002/03/24 16:01:13
380 [packet.c]
381 debug->debug3 for extra padding
Ben Lindstromfcad1c92002-03-26 02:20:06 +0000382 - stevesk@cvs.openbsd.org 2002/03/24 17:27:03
383 [kexgex.c]
384 typo; ok markus@
Ben Lindstrom31ee7ae2002-03-26 02:36:29 +0000385 - stevesk@cvs.openbsd.org 2002/03/24 17:53:16
386 [monitor_fdpass.c]
387 minor cleanup and more error checking; ok markus@
Ben Lindstromc2c6cbc2002-03-26 02:44:44 +0000388 - markus@cvs.openbsd.org 2002/03/24 18:05:29
389 [scard.c]
390 we need to figure out AUT0 for sc_private_encrypt, too
Ben Lindstrom2e9d8662002-03-26 02:49:34 +0000391 - stevesk@cvs.openbsd.org 2002/03/24 23:20:00
392 [monitor.c]
393 remove "\n" from fatal()
Ben Lindstromf6d367b2002-03-26 02:59:31 +0000394 - markus@cvs.openbsd.org 2002/03/25 09:21:13
395 [auth-rsa.c]
396 return 0 (not NULL); tomh@po.crl.go.jp
Ben Lindstrom5facb2b2002-03-26 03:08:47 +0000397 - markus@cvs.openbsd.org 2002/03/25 09:25:06
398 [auth-rh-rsa.c]
399 rm bogus comment
Ben Lindstrom0936a5b2002-03-26 03:17:42 +0000400 - markus@cvs.openbsd.org 2002/03/25 17:34:27
401 [scard.c scard.h ssh-agent.c ssh-keygen.c ssh.c]
402 change sc_get_key to sc_get_keys and hide smartcard details in scard.c
Ben Lindstromc8615472002-03-26 03:20:45 +0000403 - stevesk@cvs.openbsd.org 2002/03/25 20:12:10
404 [monitor_mm.c monitor_wrap.c]
405 ssize_t args use "%ld" and cast to (long)
406 size_t args use "%lu" and cast to (u_long)
407 ok markus@ and thanks millert@
Ben Lindstrom4f054602002-03-26 03:23:00 +0000408 - markus@cvs.openbsd.org 2002/03/25 21:04:02
409 [ssh.c]
410 simplify num_identity_files handling
Ben Lindstromcf159442002-03-26 03:26:24 +0000411 - markus@cvs.openbsd.org 2002/03/25 21:13:51
412 [channels.c channels.h compat.c compat.h nchan.c]
Damien Miller860e9292002-05-15 10:12:29 +1000413 don't send stderr data after EOF, accept this from older known
414 (broken) sshd servers only, fixes
415 http://bugzilla.mindrot.org/show_bug.cgi?id=179
Ben Lindstrom28364ec2002-03-26 03:42:20 +0000416 - stevesk@cvs.openbsd.org 2002/03/26 03:24:01
417 [monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h]
418 $OpenBSD$
Kevin Steves6205a182002-03-26 00:12:49 +0000419
Kevin Stevesb4799a32002-03-24 23:19:54 +000042020020324
421 - (stevesk) [session.c] disable LOGIN_NEEDS_TERM until we are sure
422 it can be removed. only used on solaris. will no longer compile with
423 privsep shuffling.
424
Kevin Steves939c9db2002-03-22 17:23:25 +000042520020322
426 - (stevesk) HAVE_ACCRIGHTS_IN_MSGHDR configure support
Kevin Steves7e147602002-03-22 18:07:17 +0000427 - (stevesk) [monitor.c monitor_wrap.c] #ifdef HAVE_PW_CLASS_IN_PASSWD
Kevin Steves4846f4a2002-03-22 18:19:53 +0000428 - (stevesk) configure and cpp __FUNCTION__ gymnastics to handle nielsisms
Kevin Steves1adb1202002-03-22 19:32:53 +0000429 - (stevesk) [monitor_fdpass.c] support for access rights style file
430 descriptor passing
Kevin Steves205cc1e2002-03-22 20:43:05 +0000431 - (stevesk) [auth2.c] merge cleanup/sync
Kevin Steves219bef12002-03-22 20:53:32 +0000432 - (stevesk) [defines.h] hp-ux 11 has ancillary data style fd passing, but
433 is missing CMSG_LEN() and CMSG_SPACE() macros.
Kevin Steves4435a552002-03-22 21:08:03 +0000434 - (stevesk) [defines.h] #define MAP_ANON MAP_ANONYMOUS for HP-UX; other
435 platforms may need this--I'm not sure. mmap() issues will need to be
436 addressed further.
Tim Ricef29a6532002-03-22 13:27:40 -0800437 - (tim) [cipher.c] fix problem with OpenBSD sync
Kevin Steves4408c202002-03-23 02:20:07 +0000438 - (stevesk) [LICENCE] OpenBSD sync
Kevin Steves939c9db2002-03-22 17:23:25 +0000439
Ben Lindstromd45f28c2002-03-22 01:00:57 +000044020020321
441 - (bal) OpenBSD CVS Sync
442 - itojun@cvs.openbsd.org 2002/03/08 06:10:16
443 [sftp-client.c]
444 printf type mismatch
Ben Lindstromeb505452002-03-22 01:03:15 +0000445 - itojun@cvs.openbsd.org 2002/03/11 03:18:49
446 [sftp-client.c]
447 correct type mismatches (u_int64_t != unsigned long long)
Ben Lindstrom83b79e42002-03-22 01:05:27 +0000448 - itojun@cvs.openbsd.org 2002/03/11 03:19:53
449 [sftp-client.c]
450 indent
Ben Lindstrom5c159582002-03-22 01:08:07 +0000451 - markus@cvs.openbsd.org 2002/03/14 15:24:27
452 [sshconnect1.c]
Damien Miller860e9292002-05-15 10:12:29 +1000453 don't trust size sent by (rogue) server; noted by
454 s.esser@e-matters.de
Ben Lindstromabcb1452002-03-22 01:10:21 +0000455 - markus@cvs.openbsd.org 2002/03/14 16:38:26
456 [sshd.c]
457 split out ssh1 session key decryption; ok provos@
Ben Lindstrom9c8aefe2002-03-22 01:12:58 +0000458 - markus@cvs.openbsd.org 2002/03/14 16:56:33
459 [auth-rh-rsa.c auth-rsa.c auth.h]
460 split auth_rsa() for better readability and privsep; ok provos@
Ben Lindstromb61e6df2002-03-22 01:15:33 +0000461 - itojun@cvs.openbsd.org 2002/03/15 11:00:38
462 [auth.c]
463 fix file type checking (use S_ISREG). ok by markus
Ben Lindstromce398b22002-03-22 01:17:52 +0000464 - markus@cvs.openbsd.org 2002/03/16 11:24:53
465 [compress.c]
466 skip inflateEnd if inflate fails; ok provos@
Ben Lindstrom186b7da2002-03-22 01:20:32 +0000467 - markus@cvs.openbsd.org 2002/03/16 17:22:09
468 [auth-rh-rsa.c auth.h]
469 split auth_rhosts_rsa(), ok provos@
Ben Lindstromeacc71b2002-03-22 01:22:27 +0000470 - stevesk@cvs.openbsd.org 2002/03/16 17:41:25
471 [auth-krb5.c]
472 BSD license. from Daniel Kouril via Dug Song. ok markus@
Ben Lindstrom2ae18f42002-03-22 01:24:38 +0000473 - provos@cvs.openbsd.org 2002/03/17 20:25:56
474 [auth.c auth.h auth1.c auth2.c]
Damien Miller860e9292002-05-15 10:12:29 +1000475 getpwnamallow returns struct passwd * only if user valid;
476 okay markus@
Ben Lindstrom73ab9ba2002-03-22 01:27:35 +0000477 - provos@cvs.openbsd.org 2002/03/18 01:12:14
478 [auth.h auth1.c auth2.c sshd.c]
479 have the authentication functions return the authentication context
480 and then do_authenticated; okay millert@
Ben Lindstromabf31442002-03-22 01:30:40 +0000481 - dugsong@cvs.openbsd.org 2002/03/18 01:30:10
482 [auth-krb4.c]
483 set client to NULL after xfree(), from Rolf Braun
484 <rbraun+ssh@andrew.cmu.edu>
Ben Lindstromb481e132002-03-22 01:35:47 +0000485 - provos@cvs.openbsd.org 2002/03/18 03:41:08
486 [auth.c session.c]
487 move auth_approval into getpwnamallow with help from millert@
Ben Lindstrom212faca2002-03-22 01:39:44 +0000488 - markus@cvs.openbsd.org 2002/03/18 17:13:15
489 [cipher.c cipher.h]
490 export/import cipher states; needed by ssh-privsep
Ben Lindstromf6027d32002-03-22 01:42:04 +0000491 - markus@cvs.openbsd.org 2002/03/18 17:16:38
492 [packet.c packet.h]
493 export/import cipher state, iv and ssh2 seqnr; needed by ssh-privsep
Ben Lindstroma674e8d2002-03-22 01:45:53 +0000494 - markus@cvs.openbsd.org 2002/03/18 17:23:31
495 [key.c key.h]
496 add key_demote() for ssh-privsep
Ben Lindstrom88aa1b42002-03-22 01:47:52 +0000497 - provos@cvs.openbsd.org 2002/03/18 17:25:29
498 [bufaux.c bufaux.h]
499 buffer_skip_string and extra sanity checking; needed by ssh-privsep
Ben Lindstrom0f345f52002-03-22 01:51:24 +0000500 - provos@cvs.openbsd.org 2002/03/18 17:31:54
501 [compress.c]
502 export compression streams for ssh-privsep
Ben Lindstrom7a2073c2002-03-22 02:30:41 +0000503 - provos@cvs.openbsd.org 2002/03/18 17:50:31
Damien Milleree5e3b22002-05-15 10:08:17 +1000504 [auth-bsdauth.c auth-options.c auth-rh-rsa.c auth-rsa.c]
505 [auth-skey.c auth.h auth1.c auth2-chall.c auth2.c kex.c kex.h kexdh.c]
506 [kexgex.c servconf.c]
507 [session.h servconf.h serverloop.c session.c sshd.c]
508 integrate privilege separated openssh; its turned off by default
509 for now. work done by me and markus@
Ben Lindstrom000dda52002-03-22 02:33:12 +0000510 - provos@cvs.openbsd.org 2002/03/18 17:53:08
511 [sshd.8]
512 credits for privsep
Ben Lindstrom191c8e52002-03-22 02:37:50 +0000513 - provos@cvs.openbsd.org 2002/03/18 17:59:09
514 [sshd.8]
515 document UsePrivilegeSeparation
Ben Lindstrom01426a62002-03-22 02:40:03 +0000516 - stevesk@cvs.openbsd.org 2002/03/18 23:52:51
517 [servconf.c]
518 UnprivUser/UnprivGroup usable now--specify numeric user/group; ok
519 provos@
Ben Lindstrom7a7edf72002-03-22 02:42:37 +0000520 - stevesk@cvs.openbsd.org 2002/03/19 03:03:43
521 [pathnames.h servconf.c servconf.h sshd.c]
522 _PATH_PRIVSEP_CHROOT_DIR; ok provos@
Ben Lindstrom85520a62002-03-22 02:44:40 +0000523 - stevesk@cvs.openbsd.org 2002/03/19 05:23:08
524 [sshd.8]
525 Banner has no default.
Ben Lindstromcb1f60e2002-03-22 02:47:28 +0000526 - mpech@cvs.openbsd.org 2002/03/19 06:32:56
527 [sftp-int.c]
528 use xfree() after xstrdup().
529
530 markus@ ok
Ben Lindstrom08105192002-03-22 02:50:06 +0000531 - markus@cvs.openbsd.org 2002/03/19 10:35:39
532 [auth-options.c auth.h session.c session.h sshd.c]
533 clean up prototypes
Ben Lindstrom6328ab32002-03-22 02:54:23 +0000534 - markus@cvs.openbsd.org 2002/03/19 10:49:35
Damien Milleree5e3b22002-05-15 10:08:17 +1000535 [auth-krb5.c auth-rh-rsa.c auth.c cipher.c key.c misc.h]
536 [packet.c session.c sftp-client.c sftp-glob.h sftp.c ssh-add.c ssh.c]
537 [sshconnect2.c sshd.c ttymodes.c]
Ben Lindstrom6328ab32002-03-22 02:54:23 +0000538 KNF whitespace
Ben Lindstrom7ebb6352002-03-22 03:04:08 +0000539 - markus@cvs.openbsd.org 2002/03/19 14:27:39
540 [auth.c auth1.c auth2.c]
541 make getpwnamallow() allways call pwcopy()
Ben Lindstromf34e4eb2002-03-22 03:08:30 +0000542 - markus@cvs.openbsd.org 2002/03/19 15:31:47
543 [auth.c]
544 check for NULL; from provos@
Ben Lindstromc7431342002-03-22 03:11:49 +0000545 - stevesk@cvs.openbsd.org 2002/03/20 19:12:25
546 [servconf.c servconf.h ssh.h sshd.c]
547 for unprivileged user, group do:
548 pw=getpwnam(SSH_PRIVSEP_USER); do_setusercontext(pw). ok provos@
Ben Lindstrom58b391b2002-03-22 03:21:16 +0000549 - stevesk@cvs.openbsd.org 2002/03/20 21:08:08
550 [sshd.c]
551 strerror() on chdir() fail; ok provos@
Ben Lindstrom1ee9ec32002-03-22 03:14:45 +0000552 - markus@cvs.openbsd.org 2002/03/21 10:21:20
553 [ssh-add.c]
554 ignore errors for nonexisting default keys in ssh-add,
555 fixes http://bugzilla.mindrot.org/show_bug.cgi?id=158
Ben Lindstrom5589f4b2002-03-22 03:24:32 +0000556 - jakob@cvs.openbsd.org 2002/03/21 15:17:26
557 [clientloop.c ssh.1]
558 add built-in command line for adding new port forwardings on the fly.
559 based on a patch from brian wellington. ok markus@.
Ben Lindstrom0b675b12002-03-22 03:28:11 +0000560 - markus@cvs.openbsd.org 2002/03/21 16:38:06
561 [scard.c]
562 make compile w/ openssl 0.9.7
Ben Lindstrom70e3ad82002-03-22 03:33:43 +0000563 - markus@cvs.openbsd.org 2002/03/21 16:54:53
564 [scard.c scard.h ssh-keygen.c]
565 move key upload to scard.[ch]
566 - markus@cvs.openbsd.org 2002/03/21 16:57:15
567 [scard.c]
568 remove const
Ben Lindstromeda98a72002-03-22 03:35:48 +0000569 - markus@cvs.openbsd.org 2002/03/21 16:58:13
570 [clientloop.c]
571 remove unused
Ben Lindstrom818659a2002-03-22 03:38:35 +0000572 - rees@cvs.openbsd.org 2002/03/21 18:08:15
573 [scard.c]
574 In sc_put_key(), sc_reader_id should be id.
Ben Lindstromfa1336f2002-03-22 03:40:58 +0000575 - markus@cvs.openbsd.org 2002/03/21 20:51:12
576 [sshd_config]
577 add privsep (off)
Ben Lindstrom943481c2002-03-22 03:43:46 +0000578 - markus@cvs.openbsd.org 2002/03/21 21:23:34
579 [sshd.c]
580 add privsep_preauth() and remove 1 goto; ok provos@
Ben Lindstrom266ec632002-03-22 03:47:38 +0000581 - rees@cvs.openbsd.org 2002/03/21 21:54:34
582 [scard.c scard.h ssh-keygen.c]
583 Add PIN-protection for secret key.
Ben Lindstromba72d302002-03-22 03:51:06 +0000584 - rees@cvs.openbsd.org 2002/03/21 22:44:05
585 [authfd.c authfd.h ssh-add.c ssh-agent.c ssh.c]
586 Add PIN-protection for secret key.
Ben Lindstrom681d9322002-03-22 03:53:00 +0000587 - markus@cvs.openbsd.org 2002/03/21 23:07:37
588 [clientloop.c]
589 remove unused, sync w/ cmdline patch in my tree.
Ben Lindstromfa1336f2002-03-22 03:40:58 +0000590
Tim Rice88f2ab52002-03-17 12:17:34 -080059120020317
Damien Miller860e9292002-05-15 10:12:29 +1000592 - (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is
593 wanted, warn if directory does not exist. Put system directories in
594 front of PATH for finding entorpy commands.
Tim Rice3a423462002-03-17 14:05:24 -0800595 - (tim) [contrib/aix/buildbff.sh contrib/aix/inventory.sh] AIX package
596 build fixes. Patch by Darren Tucker <dtucker@zip.com.au>
597 [contrib/solaris/buildpkg.sh] add missing dirs to SYSTEM_DIR. Have
598 postinstall check for $piddir and add if necessary.
Tim Rice88f2ab52002-03-17 12:17:34 -0800599
Tim Rice29bdd2c2002-03-11 20:55:53 -080060020020311
601 - (tim) [contrib/solaris/buildpkg.sh, contrib/solaris/README] Updated to
602 build on all platforms that support SVR4 style package tools. Now runs
603 from build dir. Parts are based on patches from Antonio Navarro, and
604 Darren Tucker.
605
Damien Millerff8f94c2002-03-11 10:48:53 +110060620020308
Damien Millerc7375ac2002-03-11 10:51:17 +1100607 - (djm) Revert bits of Markus' OpenSSL compat patch which was
608 accidentally committed.
609 - (djm) Add Markus' patch for compat wih OpenSSL < 0.9.6.
610 Known issue: Blowfish for SSH1 does not work
Kevin Steves58193072002-03-11 00:16:34 +0000611 - (stevesk) entropy.c: typo in debug message
Damien Miller4a10d2e2002-03-11 22:53:29 +1100612 - (djm) ssh-keygen -i needs seeded RNG; report from markus@
Damien Millerff8f94c2002-03-11 10:48:53 +1100613
Ben Lindstrom973be002002-05-15 16:08:48 +0000614$Id: ChangeLog,v 1.2123 2002/05/15 16:08:48 mouring Exp $