blob: 3ba4b6248f1095230d88c028711c8055482004fa [file] [log] [blame]
Damien Miller6bd90df2000-10-28 13:30:55 +1100120001028
2 - (djm) fix select hack in serverloop.c from Philippe WILLEM
3 <Philippe.WILLEM@urssaf.fr>
Damien Millerc05e0182000-10-28 13:38:34 +11004 - (djm) Fix mangled AIXAUTHENTICATE code
Damien Millerd425d4d2000-10-28 21:05:57 +11005 - (djm) authctxt->pw may be NULL. Fix from Markus Friedl
6 <markus.friedl@informatik.uni-erlangen.de>
Damien Miller69b69aa2000-10-28 14:19:58 +11007 - (djm) Sync with OpenBSD:
8 - markus@cvs.openbsd.org 2000/10/16 15:46:32
9 [ssh.1]
10 fixes from pekkas@netcore.fi
11 - markus@cvs.openbsd.org 2000/10/17 14:28:11
12 [atomicio.c]
13 return number of characters processed; ok deraadt@
14 - markus@cvs.openbsd.org 2000/10/18 12:04:02
15 [atomicio.c]
16 undo
17 - markus@cvs.openbsd.org 2000/10/18 12:23:02
18 [scp.c]
19 replace atomicio(read,...) with read(); ok deraadt@
20 - markus@cvs.openbsd.org 2000/10/18 12:42:00
21 [session.c]
22 restore old record login behaviour
23 - deraadt@cvs.openbsd.org 2000/10/19 10:41:13
24 [auth-skey.c]
25 fmt string problem in unused code
26 - provos@cvs.openbsd.org 2000/10/19 10:45:16
27 [sshconnect2.c]
28 don't reference freed memory. okay deraadt@
29 - markus@cvs.openbsd.org 2000/10/21 11:04:23
30 [canohost.c]
31 typo, eramore@era-t.ericsson.se; ok niels@
32 - markus@cvs.openbsd.org 2000/10/23 13:31:55
33 [cipher.c]
34 non-alignment dependent swap_bytes(); from
35 simonb@wasabisystems.com/netbsd
36 - markus@cvs.openbsd.org 2000/10/26 12:38:28
37 [compat.c]
38 add older vandyke products
39 - markus@cvs.openbsd.org 2000/10/27 01:32:19
40 [channels.c channels.h clientloop.c serverloop.c session.c]
41 [ssh.c util.c]
42 enable non-blocking IO on channels, and tty's (except for the
43 client ttys).
Damien Miller6bd90df2000-10-28 13:30:55 +110044
Damien Miller656d7172000-10-27 09:27:32 +11004520001027
46 - (djm) Increase REKEY_BYTES to 2^24 for arc4random
47
Damien Miller6f9c3372000-10-25 10:06:04 +11004820001025
49 - (djm) Added WARNING.RNG file and modified configure to ask users of the
50 builtin entropy code to read it.
51 - (djm) Prefer builtin regex to PCRE.
Ben Lindstrom76020ba2000-10-25 16:55:00 +000052 - (bal) Added USE_PIPS defined to NeXT configure.in since scp hangs randomly.
53 - (bal) Apply fixes to configure.in pointed out by Pavel Roskin
54 <proski@gnu.org>
Damien Miller6f9c3372000-10-25 10:06:04 +110055
Damien Miller81fa28a2000-10-20 09:14:04 +11005620001020
57 - (djm) Don't define _REENTRANT for SNI/Reliant Unix
Ben Lindstrome5a85252000-10-19 23:43:24 +000058 - (bal) Imported NEWS-OS waitpid() macros into NeXT. Since implementation
59 is more correct then current version.
Damien Miller81fa28a2000-10-20 09:14:04 +110060
Kevin Steves8848b242000-10-18 13:11:44 +00006120001018
62 - (stevesk) Add initial support for setproctitle(). Current
63 support is for the HP-UX pstat(PSTAT_SETCMD, ...) method.
Kevin Stevesee184da2000-10-18 13:45:40 +000064 - (stevesk) Add egd startup scripts to contrib/hpux/
Kevin Steves8848b242000-10-18 13:11:44 +000065
Damien Milleref767ac2000-10-17 23:14:08 +11006620001017
67 - (djm) Add -lregex to cywin libs from Corinna Vinschen
68 <vinschen@cygnus.com>
Damien Miller2594de82000-10-17 23:22:28 +110069 - (djm) Don't rely on atomicio's retval to determine length of askpass
70 supplied passphrase. Problem report from Lutz Jaenicke
71 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
Ben Lindstromb5628642000-10-18 00:02:25 +000072 - (bal) Changed from GNU rx to PCRE on suggestion from djm.
73 - (bal) Integrated Sony NEWS-OS patches from NAKAJI Hirouyuki
74 <nakaji@tutrp.tut.ac.jp>
Damien Milleref767ac2000-10-17 23:14:08 +110075
Damien Miller50a41ed2000-10-16 12:14:42 +11007620001016
77 - (djm) Sync with OpenBSD:
78 - markus@cvs.openbsd.org 2000/10/14 04:01:15
79 [cipher.c]
80 debug3
81 - markus@cvs.openbsd.org 2000/10/14 04:07:23
82 [scp.c]
83 remove spaces from arguments; from djm@mindrot.org
84 - markus@cvs.openbsd.org 2000/10/14 06:09:46
85 [ssh.1]
86 Cipher is for SSH-1 only
87 - markus@cvs.openbsd.org 2000/10/14 06:12:09
88 [servconf.c servconf.h serverloop.c session.c sshd.8]
89 AllowTcpForwarding; from naddy@
90 - markus@cvs.openbsd.org 2000/10/14 06:16:56
91 [auth2.c compat.c compat.h sshconnect2.c version.h]
92 OpenSSH_2.3; note that is is not complete, but the version number
93 needs to be changed for interoperability reasons
94 - markus@cvs.openbsd.org 2000/10/14 06:19:45
95 [auth-rsa.c]
96 do not send RSA challenge if key is not allowed by key-options; from
97 eivind@ThinkSec.com
98 - markus@cvs.openbsd.org 2000/10/15 08:14:01
99 [rijndael.c session.c]
100 typos; from stevesk@sweden.hp.com
101 - markus@cvs.openbsd.org 2000/10/15 08:18:31
102 [rijndael.c]
103 typo
Damien Miller2b2cf522000-10-16 12:25:17 +1100104 - (djm) Copy manpages back over from OpenBSD - too tedious to wade
105 through diffs
Damien Millerff649d82000-10-16 13:35:19 +1100106 - (djm) Added condrestart to Redhat init script. Patch from Pekka Savola
Damien Miller2b2cf522000-10-16 12:25:17 +1100107 <pekkas@netcore.fi>
Damien Millerff649d82000-10-16 13:35:19 +1100108 - (djm) Update version in Redhat spec file
109 - (djm) Merge some of Nalin Dahyabhai <nalin@redhat.com> changes from the
110 Redhat 7.0 spec file
Damien Miller52dc96b2000-10-16 20:13:43 +1100111 - (djm) Make inability to read/write PRNG seedfile non-fatal
112
Damien Miller50a41ed2000-10-16 12:14:42 +1100113
Damien Miller59939352000-10-15 12:21:32 +110011420001015
115 - (djm) Fix ssh2 hang on background processes at logout.
116
Damien Miller60819b42000-10-14 11:16:12 +110011720001014
Ben Lindstromb4df15d2000-10-15 00:17:36 +0000118 - (bal) Add support for realpath and getcwd for platforms with broken
119 or missing realpath implementations for sftp-server.
120 - (bal) Corrected mistake in INSTALL in regards to GNU rx library
Ben Lindstromca1c2a02000-10-14 21:33:19 +0000121 - (bal) Add support for GNU rx library for those lacking regexp support
Damien Miller60819b42000-10-14 11:16:12 +1100122 - (djm) Don't accept PAM_PROMPT_ECHO_ON messages during initial auth
Damien Miller15b29522000-10-14 12:33:48 +1100123 - (djm) Revert SSH2 serverloop hack, will find a better way.
Damien Miller89d97962000-10-14 12:37:19 +1100124 - (djm) Add workaround for Linux 2.4's gratuitious errno change. Patch
125 from Martin Johansson <fatbob@acc.umu.se>
Damien Miller874d77b2000-10-14 16:23:11 +1100126 - (djm) Big OpenBSD sync:
127 - markus@cvs.openbsd.org 2000/09/30 10:27:44
128 [log.c]
129 allow loglevel debug
130 - markus@cvs.openbsd.org 2000/10/03 11:59:57
131 [packet.c]
132 hmac->mac
133 - markus@cvs.openbsd.org 2000/10/03 12:03:03
134 [auth-krb4.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth1.c]
135 move fake-auth from auth1.c to individual auth methods, disables s/key in
136 debug-msg
137 - markus@cvs.openbsd.org 2000/10/03 12:16:48
138 ssh.c
139 do not resolve canonname, i have no idea why this was added oin ossh
140 - markus@cvs.openbsd.org 2000/10/09 15:30:44
141 ssh-keygen.1 ssh-keygen.c
142 -X now reads private ssh.com DSA keys, too.
143 - markus@cvs.openbsd.org 2000/10/09 15:32:34
144 auth-options.c
145 clear options on every call.
146 - markus@cvs.openbsd.org 2000/10/09 15:51:00
147 authfd.c authfd.h
148 interop with ssh-agent2, from <res@shore.net>
149 - markus@cvs.openbsd.org 2000/10/10 14:20:45
150 compat.c
151 use rexexp for version string matching
152 - provos@cvs.openbsd.org 2000/10/10 22:02:18
153 [kex.c kex.h myproposal.h ssh.h ssh2.h sshconnect2.c sshd.c dh.c dh.h]
154 First rough implementation of the diffie-hellman group exchange. The
155 client can ask the server for bigger groups to perform the diffie-hellman
156 in, thus increasing the attack complexity when using ciphers with longer
157 keys. University of Windsor provided network, T the company.
158 - markus@cvs.openbsd.org 2000/10/11 13:59:52
159 [auth-rsa.c auth2.c]
160 clear auth options unless auth sucessfull
161 - markus@cvs.openbsd.org 2000/10/11 14:00:27
162 [auth-options.h]
163 clear auth options unless auth sucessfull
164 - markus@cvs.openbsd.org 2000/10/11 14:03:27
165 [scp.1 scp.c]
166 support 'scp -o' with help from mouring@pconline.com
167 - markus@cvs.openbsd.org 2000/10/11 14:11:35
168 [dh.c]
169 Wall
170 - markus@cvs.openbsd.org 2000/10/11 14:14:40
171 [auth.h auth2.c readconf.c readconf.h readpass.c servconf.c servconf.h]
172 [ssh.h sshconnect2.c sshd_config auth2-skey.c cli.c cli.h]
173 add support for s/key (kbd-interactive) to ssh2, based on work by
174 mkiernan@avantgo.com and me
175 - markus@cvs.openbsd.org 2000/10/11 14:27:24
176 [auth.c auth1.c auth2.c authfile.c cipher.c cipher.h kex.c kex.h]
177 [myproposal.h packet.c readconf.c session.c ssh.c ssh.h sshconnect1.c]
178 [sshconnect2.c sshd.c]
179 new cipher framework
180 - markus@cvs.openbsd.org 2000/10/11 14:45:21
181 [cipher.c]
182 remove DES
183 - markus@cvs.openbsd.org 2000/10/12 03:59:20
184 [cipher.c cipher.h sshconnect1.c sshconnect2.c sshd.c]
185 enable DES in SSH-1 clients only
186 - markus@cvs.openbsd.org 2000/10/12 08:21:13
187 [kex.h packet.c]
188 remove unused
189 - markus@cvs.openbsd.org 2000/10/13 12:34:46
190 [sshd.c]
191 Kludge for F-Secure Macintosh < 1.0.2; appro@fy.chalmers.se
192 - markus@cvs.openbsd.org 2000/10/13 12:59:15
193 [cipher.c cipher.h myproposal.h rijndael.c rijndael.h]
194 rijndael/aes support
195 - markus@cvs.openbsd.org 2000/10/13 13:10:54
196 [sshd.8]
197 more info about -V
198 - markus@cvs.openbsd.org 2000/10/13 13:12:02
199 [myproposal.h]
200 prefer no compression
Damien Millere4041c92000-10-14 17:45:58 +1100201 - (djm) Fix scp user@host handling
202 - (djm) Don't clobber ssh_prng_cmds on install
Kevin Stevescee23de2000-10-14 10:51:18 +0000203 - (stevesk) Include config.h in rijndael.c so we define intXX_t and
204 u_intXX_t types on all platforms.
Kevin Stevesf16b9d22000-10-14 10:57:04 +0000205 - (stevesk) rijndael.c: cleanup missing declaration warnings.
Kevin Steves092f2ef2000-10-14 13:36:13 +0000206 - (stevesk) ~/.hushlogin shouldn't cause required password change to
207 be bypassed.
Kevin Stevese0f49142000-10-14 17:51:48 +0000208 - (stevesk) Display correct path to ssh-askpass in configure output.
209 Report from Lutz Jaenicke.
Damien Miller60819b42000-10-14 11:16:12 +1100210
Kevin Stevescccca272000-10-07 11:16:55 +000021120001007
212 - (stevesk) Print PAM return value in PAM log messages to aid
213 with debugging.
Kevin Steves48b7cc02000-10-07 13:24:00 +0000214 - (stevesk) Fix detection of pw_class struct member in configure;
215 patch from KAMAHARA Junzo <kamahara@cc.kshosen.ac.jp>
216
Damien Millere68f92b2000-10-02 21:42:15 +110021720001002
218 - (djm) Fix USER_PATH, report from Kevin Steves <stevesk@sweden.hp.com>
219 - (djm) Add host system and CC to end-of-configure report. Suggested by
220 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
221
Damien Miller05dd7952000-10-01 00:42:48 +110022220000931
223 - (djm) Cygwin fixes from Corinna Vinschen <vinschen@cygnus.com>
224
Damien Miller190d5a82000-09-30 09:43:19 +110022520000930
Damien Millerbea034a2000-09-30 09:43:32 +1100226 - (djm) Irix ssh_prng_cmds path fix from Pekka Savola <pekkas@netcore.fi>
Damien Millerb88532e2000-09-30 09:53:59 +1100227 - (djm) Support in bsd-snprintf.c for long long conversions from
228 Ben Lindstrom <mouring@pconline.com>
229 - (djm) Cleanup NeXT support from Ben Lindstrom <mouring@pconline.com>
Damien Millercf3888d2000-09-30 14:17:52 +1100230 - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with
231 very short lived X connections. Bug report from Tobias Oetiker
232 <oetiker@ee.ethz.ch>. Fix from Markus Friedl <markus@cvs.openbsd.org>
Damien Millerb27ef9e2000-09-30 14:29:44 +1100233 - (djm) Add recent InitScripts as a RPM dependancy for openssh-server
234 patch from Pekka Savola <pekkas@netcore.fi>
Damien Miller7294baa2000-09-30 14:40:39 +1100235 - (djm) Forgot to cvs add LICENSE file
Damien Miller51155a72000-09-30 14:41:38 +1100236 - (djm) Add LICENSE to RPM spec files
Damien Millerd3444942000-09-30 14:20:03 +1100237 - (djm) CVS OpenBSD sync:
238 - markus@cvs.openbsd.org 2000/09/26 13:59:59
239 [clientloop.c]
240 use debug2
241 - markus@cvs.openbsd.org 2000/09/27 15:41:34
242 [auth2.c sshconnect2.c]
243 use key_type()
244 - markus@cvs.openbsd.org 2000/09/28 12:03:18
245 [channels.c]
246 debug -> debug2 cleanup
Damien Miller87f43ff2000-09-30 21:36:54 +1100247 - (djm) Irix strips "/dev/tty" from [uw]tmp entries (other systems only
248 strip "/dev/"). Fix loginrec.c based on patch from Alain St-Denis
249 <Alain.St-Denis@ec.gc.ca>
250 - (djm) Fix 9 character passphrase failure with gnome-ssh-askpass.
251 Problem was caused by interrupted read in ssh-add. Report from Donald
252 J. Barry <don@astro.cornell.edu>
Damien Miller190d5a82000-09-30 09:43:19 +1100253
Damien Miller15e7d4b2000-09-29 10:57:35 +110025420000929
255 - (djm) Fix SSH2 not terminating until all background tasks done problem.
Damien Miller280e71b2000-09-29 10:59:28 +1100256 - (djm) Another off-by-one fix from Pavel Kankovsky
257 <peak@argo.troja.mff.cuni.cz>
Damien Millercb5e44a2000-09-29 12:12:36 +1100258 - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code,
259 tidy necessary differences. Use Markus' new debugN() in entropy.c
Damien Miller78315eb2000-09-29 23:01:36 +1100260 - (djm) Merged big SCO portability patch from Tim Rice
261 <tim@multitalents.net>
Damien Miller15e7d4b2000-09-29 10:57:35 +1100262
Damien Miller96f0c722000-09-26 12:09:48 +110026320000926
264 - (djm) Update X11-askpass to 1.0.2 in RPM spec file
Damien Millere772b682000-09-26 13:10:37 +1100265 - (djm) Define _REENTRANT to pickup strtok_r() on HP/UX
266 - (djm) Security: fix off-by-one buffer overrun in fake-getnameinfo.c.
267 Report and fix from Pavel Kankovsky <peak@argo.troja.mff.cuni.cz>
Damien Miller96f0c722000-09-26 12:09:48 +1100268
Damien Miller72c9a7e2000-09-24 11:10:13 +110026920000924
270 - (djm) Merged cleanup patch from Mark Miller <markm@swoon.net>
271 - (djm) A bit more cleanup - created cygwin_util.h
Damien Miller80ecfe82000-09-24 11:21:31 +1100272 - (djm) Include strtok_r() from OpenBSD libc. Fixes report from Mark Miller
273 <markm@swoon.net>
Damien Miller72c9a7e2000-09-24 11:10:13 +1100274
Damien Millerd6f204d2000-09-23 13:57:27 +110027520000923
276 - (djm) Fix address logging in utmp from Kevin Steves
277 <stevesk@sweden.hp.com>
Damien Miller96002332000-09-23 14:00:09 +1100278 - (djm) Redhat spec and manpage fixes from Pekka Savola <pekkas@netcore.fi>
Damien Miller578783e2000-09-23 14:12:24 +1100279 - (djm) Seperate tests for int64_t and u_int64_t types
Damien Miller62dd94b2000-09-23 14:26:32 +1100280 - (djm) Tweak password expiry checking at suggestion of Kevin Steves
281 <stevesk@sweden.hp.com>
Damien Millerb9c2ce82000-09-23 14:52:50 +1100282 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
Damien Millerf056e232000-09-23 14:58:32 +1100283 - (djm) Use printf %lld instead of %qd in sftp-server.c. Fix from
284 Michael Stone <mstone@cs.loyola.edu>
Damien Miller62cee002000-09-23 17:15:56 +1100285 - (djm) OpenBSD CVS sync:
286 - markus@cvs.openbsd.org 2000/09/17 09:38:59
287 [sshconnect2.c sshd.c]
288 fix DEBUG_KEXDH
289 - markus@cvs.openbsd.org 2000/09/17 09:52:51
290 [sshconnect.c]
291 yes no; ok niels@
292 - markus@cvs.openbsd.org 2000/09/21 04:55:11
293 [sshd.8]
294 typo
295 - markus@cvs.openbsd.org 2000/09/21 05:03:54
296 [serverloop.c]
297 typo
298 - markus@cvs.openbsd.org 2000/09/21 05:11:42
299 scp.c
300 utime() to utimes(); mouring@pconline.com
301 - markus@cvs.openbsd.org 2000/09/21 05:25:08
302 sshconnect2.c
303 change login logic in ssh2, allows plugin of other auth methods
304 - markus@cvs.openbsd.org 2000/09/21 05:25:35
305 [auth2.c channels.c channels.h clientloop.c dispatch.c dispatch.h]
306 [serverloop.c]
307 add context to dispatch_run
308 - markus@cvs.openbsd.org 2000/09/21 05:07:52
309 authfd.c authfd.h ssh-agent.c
310 bug compat for old ssh.com software
Damien Millerd6f204d2000-09-23 13:57:27 +1100311
Damien Millerf13f75d2000-09-21 21:51:07 +110031220000920
313 - (djm) Fix bad path substitution. Report from Andrew Miner
314 <asminer@cs.iastate.edu>
315
Damien Millere4340be2000-09-16 13:29:08 +110031620000916
Damien Millera1b61e12000-09-16 17:02:16 +1100317 - (djm) Fix SSL search order from Lutz Jaenicke
318 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
Damien Miller2efcd3c2000-09-16 16:30:55 +1100319 - (djm) New SuSE spec from Corinna Vinschen <corinna@vinschen.de>
Damien Millerb70b61f2000-09-16 16:25:12 +1100320 - (djm) Update CygWin support from Corinna Vinschen <vinschen@cygnus.com>
Damien Miller52cbcbf2000-09-16 16:21:28 +1100321 - (djm) Use a real struct sockaddr inside the fake struct sockaddr_storage.
322 Patch from Larry Jones <larry.jones@sdrc.com>
Damien Miller9d5705a2000-09-16 16:09:27 +1100323 - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM
324 password change patch.
325 - (djm) Bring licenses on my stuff in line with OpenBSD's
Damien Miller8a1e6a62000-09-16 15:55:52 +1100326 - (djm) Cleanup auth-passwd.c and unify HP/UX authentication. Patch from
327 Kevin Steves <stevesk@sweden.hp.com>
Damien Miller606f8802000-09-16 15:39:56 +1100328 - (djm) Shadow expiry check fix from Pavel Troller <patrol@omni.sinus.cz>
329 - (djm) Re-enable int64_t types - we need them for sftp
330 - (djm) Use libexecdir from configure , rather than libexecdir/ssh
331 - (djm) Update Redhat SPEC file accordingly
332 - (djm) Add Kevin Steves <stevesk@sweden.hp.com> HP/UX contrib files
333 - (djm) Add Charles Levert <charles@comm.polymtl.ca> getpgrp patch
334 - (djm) Fix password auth on HP/UX 10.20. Patch from Dirk De Wachter
335 <Dirk.DeWachter@rug.ac.be>
336 - (djm) Fixprogs and entropy list fixes from Larry Jones
337 <larry.jones@sdrc.com>
338 - (djm) Fix for SuSE spec file from Takashi YOSHIDA
339 <tyoshida@gemini.rc.kyushu-u.ac.jp>
Damien Millere4340be2000-09-16 13:29:08 +1100340 - (djm) Merge OpenBSD changes:
341 - markus@cvs.openbsd.org 2000/09/05 02:59:57
342 [session.c]
343 print hostname (not hushlogin)
344 - markus@cvs.openbsd.org 2000/09/05 13:18:48
345 [authfile.c ssh-add.c]
346 enable ssh-add -d for DSA keys
347 - markus@cvs.openbsd.org 2000/09/05 13:20:49
348 [sftp-server.c]
349 cleanup
350 - markus@cvs.openbsd.org 2000/09/06 03:46:41
351 [authfile.h]
352 prototype
353 - deraadt@cvs.openbsd.org 2000/09/07 14:27:56
354 [ALL]
355 cleanup copyright notices on all files. I have attempted to be
356 accurate with the details. everything is now under Tatu's licence
357 (which I copied from his readme), and/or the core-sdi bsd-ish thing
358 for deattack, or various openbsd developers under a 2-term bsd
359 licence. We're not changing any rules, just being accurate.
360 - markus@cvs.openbsd.org 2000/09/07 14:40:30
361 [channels.c channels.h clientloop.c serverloop.c ssh.c]
362 cleanup window and packet sizes for ssh2 flow control; ok niels
363 - markus@cvs.openbsd.org 2000/09/07 14:53:00
364 [scp.c]
365 typo
366 - markus@cvs.openbsd.org 2000/09/07 15:13:37
367 [auth-options.c auth-options.h auth-rh-rsa.c auth-rsa.c auth.c]
368 [authfile.h canohost.c channels.h compat.c hostfile.h log.c match.h]
369 [pty.c readconf.c]
370 some more Copyright fixes
371 - markus@cvs.openbsd.org 2000/09/08 03:02:51
372 [README.openssh2]
373 bye bye
374 - deraadt@cvs.openbsd.org 2000/09/11 18:38:33
375 [LICENCE cipher.c]
376 a few more comments about it being ARC4 not RC4
377 - markus@cvs.openbsd.org 2000/09/12 14:53:11
378 [log-client.c log-server.c log.c ssh.1 ssh.c ssh.h sshd.8 sshd.c]
379 multiple debug levels
380 - markus@cvs.openbsd.org 2000/09/14 14:25:15
381 [clientloop.c]
382 typo
383 - deraadt@cvs.openbsd.org 2000/09/15 01:13:51
384 [ssh-agent.c]
385 check return value for setenv(3) for failure, and deal appropriately
386
Damien Millerf384c362000-09-13 10:43:26 +110038720000913
388 - (djm) Fix server not exiting with jobs in background.
389
Damien Miller7b28dc52000-09-05 13:34:53 +110039020000905
391 - (djm) Import OpenBSD CVS changes
392 - markus@cvs.openbsd.org 2000/08/31 15:52:24
393 [Makefile sshd.8 sshd_config sftp-server.8 sftp-server.c]
394 implement a SFTP server. interops with sftp2, scp2 and the windows
395 client from ssh.com
396 - markus@cvs.openbsd.org 2000/08/31 15:56:03
397 [README.openssh2]
398 sync
399 - markus@cvs.openbsd.org 2000/08/31 16:05:42
400 [session.c]
401 Wall
402 - markus@cvs.openbsd.org 2000/08/31 16:09:34
403 [authfd.c ssh-agent.c]
404 add a flag to SSH2_AGENTC_SIGN_REQUEST for future extensions
405 - deraadt@cvs.openbsd.org 2000/09/01 09:25:13
406 [scp.1 scp.c]
407 cleanup and fix -S support; stevesk@sweden.hp.com
408 - markus@cvs.openbsd.org 2000/09/01 16:29:32
409 [sftp-server.c]
410 portability fixes
411 - markus@cvs.openbsd.org 2000/09/01 16:32:41
412 [sftp-server.c]
413 fix cast; mouring@pconline.com
414 - itojun@cvs.openbsd.org 2000/09/03 09:23:28
415 [ssh-add.1 ssh.1]
416 add missing .El against .Bl.
417 - markus@cvs.openbsd.org 2000/09/04 13:03:41
418 [session.c]
419 missing close; ok theo
420 - markus@cvs.openbsd.org 2000/09/04 13:07:21
421 [session.c]
422 fix get_last_login_time order; from andre@van-veen.de
423 - markus@cvs.openbsd.org 2000/09/04 13:10:09
424 [sftp-server.c]
425 more cast fixes; from mouring@pconline.com
426 - markus@cvs.openbsd.org 2000/09/04 13:06:04
427 [session.c]
428 set SSH_ORIGINAL_COMMAND; from Leakin@dfw.nostrum.com, bet@rahul.net
429 - (djm) Cleanup after import. Fix sftp-server compilation, Makefile
Damien Millerbac2d8a2000-09-05 16:13:06 +1100430 - (djm) Merge cygwin support from Corinna Vinschen <vinschen@cygnus.com>
431
Damien Miller123cbe82000-09-03 19:14:58 +110043220000903
433 - (djm) Fix Redhat init script
434
Damien Miller50f14f82000-09-01 14:14:37 +110043520000901
436 - (djm) Pick up Jim's new X11-askpass
437 - (djm) Release 2.2.0p1
438
Damien Miller238a9fa2000-08-31 09:20:05 +110043920000831
Damien Millere4340be2000-09-16 13:29:08 +1100440 - (djm) Workaround SIGPIPE problems on SCO. Fix from Aran Cox
Damien Miller238a9fa2000-08-31 09:20:05 +1100441 <acox@cv.telegroup.com>
Damien Millerb5c42d92000-08-31 11:13:10 +1100442 - (djm) Pick up new version (2.2.0) from OpenBSD CVS
Damien Miller238a9fa2000-08-31 09:20:05 +1100443
Damien Miller87d29ed2000-08-30 09:21:22 +110044420000830
445 - (djm) Compile warning fixes from Mark Miller <markm@swoon.net>
Damien Millerc30d35c2000-08-30 09:40:09 +1100446 - (djm) Periodically rekey arc4random
447 - (djm) Clean up diff against OpenBSD.
Damien Millere4340be2000-09-16 13:29:08 +1100448 - (djm) HPUX 11 needs USE_PIPES as well: Kevin Steves
Damien Miller5552d7a2000-08-30 09:53:24 +1100449 <stevesk@sweden.hp.com>
Damien Miller7cfaaf22000-08-30 09:57:49 +1100450 - (djm) Quieten the pam delete credentials error message
Damien Miller9a947342000-08-30 10:03:33 +1100451 - (djm) Fix printing of $DISPLAY hack if set by system type. Report from
452 Kevin Steves <stevesk@sweden.hp.com>
Damien Miller77aba9d2000-08-30 10:11:30 +1100453 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
Damien Miller250ee8b2000-08-30 14:06:35 +1100454 - (djm) Fix doh in bsd-arc4random.c
Damien Miller87d29ed2000-08-30 09:21:22 +1100455
Damien Miller4e0f5e12000-08-29 11:05:50 +110045620000829
Damien Millere4340be2000-09-16 13:29:08 +1100457 - (djm) Fix ^C ignored issue on Solaris. Diagnosis from Gert
458 Doering <gert@greenie.muc.de>, John Horne <J.Horne@plymouth.ac.uk> and
Damien Miller4e0f5e12000-08-29 11:05:50 +1100459 Garrick James <garrick@james.net>
Damien Miller6d8c11f2000-08-29 11:52:38 +1100460 - (djm) Check for SCO pty naming style (ptyp%d/ttyp%d). Based on fix from
461 Bastian Trompetter <btrompetter@firemail.de>
Damien Millere5192fa2000-08-29 14:30:37 +1100462 - (djm) NeXT tweaks from Ben Lindstrom <mouring@pconline.com>
Damien Millercaf6dd62000-08-29 11:33:50 +1100463 - More OpenBSD updates:
464 - deraadt@cvs.openbsd.org 2000/08/24 15:46:59
465 [scp.c]
466 off_t in sink, to fix files > 2GB, i think, test is still running ;-)
467 - deraadt@cvs.openbsd.org 2000/08/25 10:10:06
468 [session.c]
469 Wall
470 - markus@cvs.openbsd.org 2000/08/26 04:33:43
471 [compat.c]
472 ssh.com-2.3.0
473 - markus@cvs.openbsd.org 2000/08/27 12:18:05
474 [compat.c]
475 compatibility with future ssh.com versions
476 - deraadt@cvs.openbsd.org 2000/08/27 21:50:55
477 [auth-krb4.c session.c ssh-add.c sshconnect.c uidswap.c]
478 print uid/gid as unsigned
479 - markus@cvs.openbsd.org 2000/08/28 13:51:00
480 [ssh.c]
481 enable -n and -f for ssh2
482 - markus@cvs.openbsd.org 2000/08/28 14:19:53
483 [ssh.c]
484 allow combination of -N and -f
485 - markus@cvs.openbsd.org 2000/08/28 14:20:56
486 [util.c]
487 util.c
488 - markus@cvs.openbsd.org 2000/08/28 14:22:02
489 [util.c]
490 undo
491 - markus@cvs.openbsd.org 2000/08/28 14:23:38
492 [util.c]
493 don't complain if setting NONBLOCK fails with ENODEV
Damien Miller4e0f5e12000-08-29 11:05:50 +1100494
Damien Millerb0785672000-08-23 09:10:39 +100049520000823
496 - (djm) Define USE_PIPES to avoid socketpair problems on HPUX 10 and SunOS 4
Damien Millere4340be2000-09-16 13:29:08 +1100497 Avoids "scp never exits" problem. Reports from Lutz Jaenicke
498 <Lutz.Jaenicke@aet.TU-Cottbus.DE> and Tamito KAJIYAMA
Damien Millerb0785672000-08-23 09:10:39 +1000499 <kajiyama@grad.sccs.chukyo-u.ac.jp>
Damien Millerad833b32000-08-23 10:46:23 +1000500 - (djm) Pick up LOGIN_PROGRAM from environment or PATH if not set by headers
Damien Miller37e7f182000-08-23 10:52:50 +1000501 - (djm) Add local version to version.h
Damien Millerf3df0522000-08-23 15:31:41 +1000502 - (djm) Don't reseed arc4random everytime it is used
Damien Millerad833b32000-08-23 10:46:23 +1000503 - (djm) OpenBSD CVS updates:
504 - deraadt@cvs.openbsd.org 2000/08/18 20:07:23
505 [ssh.c]
506 accept remsh as a valid name as well; roman@buildpoint.com
507 - deraadt@cvs.openbsd.org 2000/08/18 20:17:13
508 [deattack.c crc32.c packet.c]
509 rename crc32() to ssh_crc32() to avoid zlib name clash. do not move to
510 libz crc32 function yet, because it has ugly "long"'s in it;
511 oneill@cs.sfu.ca
512 - deraadt@cvs.openbsd.org 2000/08/18 20:26:08
513 [scp.1 scp.c]
514 -S prog support; tv@debian.org
515 - deraadt@cvs.openbsd.org 2000/08/18 20:50:07
516 [scp.c]
517 knf
518 - deraadt@cvs.openbsd.org 2000/08/18 20:57:33
519 [log-client.c]
520 shorten
521 - markus@cvs.openbsd.org 2000/08/19 12:48:11
522 [channels.c channels.h clientloop.c ssh.c ssh.h]
523 support for ~. in ssh2
524 - deraadt@cvs.openbsd.org 2000/08/19 15:29:40
525 [crc32.h]
526 proper prototype
527 - markus@cvs.openbsd.org 2000/08/19 15:34:44
Damien Millere4340be2000-09-16 13:29:08 +1100528 [authfd.c authfd.h key.c key.h ssh-add.1 ssh-add.c ssh-agent.1]
529 [ssh-agent.c ssh-keygen.c sshconnect1.c sshconnect2.c Makefile]
Damien Millerad833b32000-08-23 10:46:23 +1000530 [fingerprint.c fingerprint.h]
531 add SSH2/DSA support to the agent and some other DSA related cleanups.
532 (note that we cannot talk to ssh.com's ssh2 agents)
533 - markus@cvs.openbsd.org 2000/08/19 15:55:52
534 [channels.c channels.h clientloop.c]
535 more ~ support for ssh2
536 - markus@cvs.openbsd.org 2000/08/19 16:21:19
537 [clientloop.c]
538 oops
539 - millert@cvs.openbsd.org 2000/08/20 12:25:53
540 [session.c]
541 We have to stash the result of get_remote_name_or_ip() before we
542 close our socket or getpeername() will get EBADF and the process
543 will exit. Only a problem for "UseLogin yes".
544 - millert@cvs.openbsd.org 2000/08/20 12:30:59
545 [session.c]
546 Only check /etc/nologin if "UseLogin no" since login(1) may have its
547 own policy on determining who is allowed to login when /etc/nologin
548 is present. Also use the _PATH_NOLOGIN define.
549 - millert@cvs.openbsd.org 2000/08/20 12:42:43
550 [auth1.c auth2.c session.c ssh.c]
551 Add calls to setusercontext() and login_get*(). We basically call
552 setusercontext() in most places where previously we did a setlogin().
553 Add default login.conf file and put root in the "daemon" login class.
554 - millert@cvs.openbsd.org 2000/08/21 10:23:31
555 [session.c]
556 Fix incorrect PATH setting; noted by Markus.
Damien Millerb0785672000-08-23 09:10:39 +1000557
Damien Miller942da032000-08-18 13:59:06 +100055820000818
559 - (djm) OpenBSD CVS changes:
560 - markus@cvs.openbsd.org 2000/07/22 03:14:37
561 [servconf.c servconf.h sshd.8 sshd.c sshd_config]
562 random early drop; ok theo, niels
563 - deraadt@cvs.openbsd.org 2000/07/26 11:46:51
564 [ssh.1]
565 typo
566 - deraadt@cvs.openbsd.org 2000/08/01 11:46:11
567 [sshd.8]
568 many fixes from pepper@mail.reppep.com
569 - provos@cvs.openbsd.org 2000/08/01 13:01:42
570 [Makefile.in util.c aux.c]
571 rename aux.c to util.c to help with cygwin port
572 - deraadt@cvs.openbsd.org 2000/08/02 00:23:31
573 [authfd.c]
574 correct sun_len; Alexander@Leidinger.net
575 - provos@cvs.openbsd.org 2000/08/02 10:27:17
576 [readconf.c sshd.8]
577 disable kerberos authentication by default
578 - provos@cvs.openbsd.org 2000/08/02 11:27:05
579 [sshd.8 readconf.c auth-krb4.c]
580 disallow kerberos authentication if we can't verify the TGT; from
581 dugsong@
582 kerberos authentication is on by default only if you have a srvtab.
583 - markus@cvs.openbsd.org 2000/08/04 14:30:07
584 [auth.c]
585 unused
586 - markus@cvs.openbsd.org 2000/08/04 14:30:35
587 [sshd_config]
588 MaxStartups
589 - markus@cvs.openbsd.org 2000/08/15 13:20:46
590 [authfd.c]
591 cleanup; ok niels@
592 - markus@cvs.openbsd.org 2000/08/17 14:05:10
593 [session.c]
594 cleanup login(1)-like jobs, no duplicate utmp entries
595 - markus@cvs.openbsd.org 2000/08/17 14:06:34
596 [session.c sshd.8 sshd.c]
597 sshd -u len, similar to telnetd
Damien Millerc1132e72000-08-18 14:08:38 +1000598 - (djm) Lastlog was not getting closed after writing login entry
Damien Millera7f58292000-08-18 14:43:41 +1000599 - (djm) Add Solaris package support from Rip Loomis <loomisg@cist.saic.com>
Damien Miller942da032000-08-18 13:59:06 +1000600
Damien Miller11fa2cc2000-08-16 10:35:58 +100060120000816
602 - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc)
Damien Millere4340be2000-09-16 13:29:08 +1100603 - (djm) Fix strerror replacement for old SunOS. Based on patch from
Damien Miller11fa2cc2000-08-16 10:35:58 +1000604 Charles Levert <charles@comm.polymtl.ca>
Damien Millere4340be2000-09-16 13:29:08 +1100605 - (djm) Seperate arc4random into seperate file and use OpenSSL's RC4
Damien Miller11fa2cc2000-08-16 10:35:58 +1000606 implementation.
Damien Miller3241fa12000-08-18 14:59:59 +1000607 - (djm) SUN_LEN macro for systems which lack it
Damien Miller11fa2cc2000-08-16 10:35:58 +1000608
Damien Miller348c9b72000-08-15 10:01:22 +100060920000815
610 - (djm) More SunOS 4.1.x fixes from Nate Itkin <nitkin@europa.com>
Damien Millerc83aa832000-08-15 10:08:00 +1000611 - (djm) Avoid failures on Irix when ssh is not setuid. Fix from
612 Michael Stone <mstone@cs.loyola.edu>
Damien Millere477ef62000-08-15 10:21:17 +1000613 - (djm) Don't seek in directory based lastlogs
Damien Millere4340be2000-09-16 13:29:08 +1100614 - (djm) Fix --with-ipaddr-display configure option test. Patch from
Damien Millere477ef62000-08-15 10:21:17 +1000615 Jarno Huuskonen <jhuuskon@messi.uku.fi>
Damien Miller0da2eaa2000-08-15 11:32:59 +1000616 - (djm) Fix AIX limits from Alexandre Oliva <oliva@lsd.ic.unicamp.br>
Damien Miller348c9b72000-08-15 10:01:22 +1000617
Damien Milleref7ed5e2000-08-13 10:31:12 +100061820000813
619 - (djm) Add $(srcdir) to includes when compiling (for VPATH). Report from
620 Fabrice bacchella <fabrice.bacchella@marchfirst.fr>
621
Damien Millerd17b8d52000-08-09 14:42:28 +100062220000809
Damien Millere4340be2000-09-16 13:29:08 +1100623 - (djm) Define AIX hard limits if headers don't. Report from
Damien Millerd17b8d52000-08-09 14:42:28 +1000624 Bill Painter <william.t.painter@lmco.com>
Damien Millere4340be2000-09-16 13:29:08 +1100625 - (djm) utmp direct write & SunOS 4 patch from Charles Levert
Damien Miller36ccb5c2000-08-09 16:34:27 +1000626 <charles@comm.polymtl.ca>
Damien Millerd17b8d52000-08-09 14:42:28 +1000627
Damien Millerab8d1922000-08-08 16:53:28 +100062820000808
629 - (djm) Cleanup Redhat RPMs. Generate keys at runtime rather than install
630 time, spec file cleanup.
631
Damien Miller729e1f12000-08-07 15:39:13 +100063220000807
Damien Miller52652f52000-08-07 15:54:39 +1000633 - (djm) Set 0755 on binaries during install. Report from Lutz Jaenicke
Damien Miller0f091bd2000-08-07 15:47:48 +1000634 - (djm) Suppress error messages on channel close shutdown() failurs
635 works around Linux bug. Patch from Zack Weinberg <zack@wolery.cumb.org>
Damien Miller52652f52000-08-07 15:54:39 +1000636 - (djm) Add some more entropy collection commands from Lutz Jaenicke
Damien Miller729e1f12000-08-07 15:39:13 +1000637
Damien Miller7b60a172000-07-25 09:04:37 +100063820000725
639 - (djm) Fix autoconf typo: HAVE_BINRESVPORT_AF -> HAVE_BINDRESVPORT_AF
640
Damien Miller994cf142000-07-21 10:19:44 +100064120000721
642 - (djm) OpenBSD CVS updates:
643 - markus@cvs.openbsd.org 2000/07/16 02:27:22
644 [authfd.c authfd.h channels.c clientloop.c ssh-add.c ssh-agent.c ssh.c]
645 [sshconnect1.c sshconnect2.c]
646 make ssh-add accept dsa keys (the agent does not)
647 - djm@cvs.openbsd.org 2000/07/17 19:25:02
648 [sshd.c]
649 Another closing of stdin; ok deraadt
650 - markus@cvs.openbsd.org 2000/07/19 18:33:12
651 [dsa.c]
652 missing free, reorder
653 - markus@cvs.openbsd.org 2000/07/20 16:23:14
654 [ssh-keygen.1]
655 document input and output files
656
Damien Miller9dec7762000-07-20 10:00:59 +100065720000720
Damien Miller994cf142000-07-21 10:19:44 +1000658 - (djm) Spec file fix from Petr Novotny <Petr.Novotny@antek.cz>
Damien Miller9dec7762000-07-20 10:00:59 +1000659
Damien Millera8dbd9d2000-07-16 13:25:00 +100066020000716
Damien Miller994cf142000-07-21 10:19:44 +1000661 - (djm) Release 2.1.1p4
Damien Millera8dbd9d2000-07-16 13:25:00 +1000662
Damien Millerecbb26d2000-07-15 14:59:14 +100066320000715
Damien Millerbe484b52000-07-15 14:14:16 +1000664 - (djm) OpenBSD CVS updates
665 - provos@cvs.openbsd.org 2000/07/13 16:53:22
666 [aux.c readconf.c servconf.c ssh.h]
667 allow multiple whitespace but only one '=' between tokens, bug report from
668 Ralf S. Engelschall <rse@engelschall.com> but different fix. okay deraadt@
669 - provos@cvs.openbsd.org 2000/07/13 17:14:09
670 [clientloop.c]
671 typo; todd@fries.net
672 - provos@cvs.openbsd.org 2000/07/13 17:19:31
673 [scp.c]
674 close can fail on AFS, report error; from Greg Hudson <ghudson@mit.edu>
675 - markus@cvs.openbsd.org 2000/07/14 16:59:46
676 [readconf.c servconf.c]
677 allow leading whitespace. ok niels
678 - djm@cvs.openbsd.org 2000/07/14 22:01:38
679 [ssh-keygen.c ssh.c]
680 Always create ~/.ssh with mode 700; ok Markus
Damien Millerecbb26d2000-07-15 14:59:14 +1000681 - Fixes for SunOS 4.1.4 from Gordon Atwood <gordon@cs.ualberta.ca>
682 - Include floatingpoint.h for entropy.c
683 - strerror replacement
Damien Millerbe484b52000-07-15 14:14:16 +1000684
Damien Miller182ee6e2000-07-12 09:45:27 +100068520000712
Damien Miller5de43db2000-07-12 11:12:55 +1000686 - (djm) Remove -lresolve for Reliant Unix
Damien Miller182ee6e2000-07-12 09:45:27 +1000687 - (djm) OpenBSD CVS Updates:
688 - deraadt@cvs.openbsd.org 2000/07/11 02:11:34
689 [session.c sshd.c ]
690 make MaxStartups code still work with -d; djm
691 - deraadt@cvs.openbsd.org 2000/07/11 13:17:45
692 [readconf.c ssh_config]
693 disable FallBackToRsh by default
Damien Miller5de43db2000-07-12 11:12:55 +1000694 - (djm) Replace in_addr_t with u_int32_t in bsd-inet_aton.c. Report from
695 Ben Lindstrom <mouring@pconline.com>
Damien Miller5a119bc2000-07-12 14:34:11 +1000696 - (djm) Make building of X11-Askpass and GNOME-Askpass optional in RPM
697 spec file.
Damien Miller2e7ba692000-07-12 21:10:23 +1000698 - (djm) Released 2.1.1p3
Damien Miller182ee6e2000-07-12 09:45:27 +1000699
Damien Miller65964d62000-07-11 09:16:22 +100070020000711
701 - (djm) Fixup for AIX getuserattr() support from Tom Bertelson
702 <tbert@abac.com>
Damien Miller2ae714f2000-07-11 09:29:50 +1000703 - (djm) ReliantUNIX support from Udo Schweigert <ust@cert.siemens.de>
Damien Millere4340be2000-09-16 13:29:08 +1100704 - (djm) NeXT: dirent structures to get scp working from Ben Lindstrom
Damien Miller99bca602000-07-11 12:02:36 +1000705 <mouring@pconline.com>
Damien Millere4340be2000-09-16 13:29:08 +1100706 - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report
Damien Miller7a0e5dc2000-07-11 12:15:54 +1000707 from Jim Watt <jimw@peisj.pebio.com>
Damien Miller168e6ac2000-07-11 12:23:01 +1000708 - (djm) Replaced bsd-snprintf.c with one from Mutt source tree, it is known
709 to compile on more platforms (incl NeXT).
Damien Miller3b9734c2000-07-11 14:54:22 +1000710 - (djm) Added bsd-inet_aton and configure support for NeXT
Damien Millerbc33bd42000-07-11 14:59:08 +1000711 - (djm) Misc NeXT fixes from Ben Lindstrom <mouring@pconline.com>
Damien Miller37023962000-07-11 17:31:38 +1000712 - (djm) OpenBSD CVS updates:
713 - markus@cvs.openbsd.org 2000/06/26 03:22:29
714 [authfd.c]
715 cleanup, less cut&paste
716 - markus@cvs.openbsd.org 2000/06/26 15:59:19
717 [servconf.c servconf.h session.c sshd.8 sshd.c]
Damien Millere4340be2000-09-16 13:29:08 +1100718 MaxStartups: limit number of unauthenticated connections, work by
Damien Miller37023962000-07-11 17:31:38 +1000719 theo and me
720 - deraadt@cvs.openbsd.org 2000/07/05 14:18:07
721 [session.c]
722 use no_x11_forwarding_flag correctly; provos ok
723 - provos@cvs.openbsd.org 2000/07/05 15:35:57
724 [sshd.c]
725 typo
726 - aaron@cvs.openbsd.org 2000/07/05 22:06:58
727 [scp.1 ssh-agent.1 ssh-keygen.1 sshd.8]
Damien Millere4340be2000-09-16 13:29:08 +1100728 Insert more missing .El directives. Our troff really should identify
Damien Miller37023962000-07-11 17:31:38 +1000729 these and spit out a warning.
730 - todd@cvs.openbsd.org 2000/07/06 21:55:04
731 [auth-rsa.c auth2.c ssh-keygen.c]
732 clean code is good code
733 - deraadt@cvs.openbsd.org 2000/07/07 02:14:29
734 [serverloop.c]
735 sense of port forwarding flag test was backwards
736 - provos@cvs.openbsd.org 2000/07/08 17:17:31
737 [compat.c readconf.c]
738 replace strtok with strsep; from David Young <dyoung@onthejob.net>
739 - deraadt@cvs.openbsd.org 2000/07/08 19:21:15
740 [auth.h]
741 KNF
742 - ho@cvs.openbsd.org 2000/07/08 19:27:33
743 [compat.c readconf.c]
744 Better conditions for strsep() ending.
745 - ho@cvs.openbsd.org 2000/07/10 10:27:05
746 [readconf.c]
747 Get the correct message on errors. (niels@ ok)
748 - ho@cvs.openbsd.org 2000/07/10 10:30:25
749 [cipher.c kex.c servconf.c]
750 strtok() --> strsep(). (niels@ ok)
Damien Miller4d97ba22000-07-11 18:15:50 +1000751 - (djm) Fix problem with debug mode and MaxStartups
Damien Miller54ba4692000-07-11 18:39:20 +1000752 - (djm) Don't generate host keys when $(DESTDIR) is set (e.g. during RPM
753 builds)
Damien Miller3077fb92000-07-11 21:34:34 +1000754 - (djm) Add strsep function from OpenBSD libc for systems that lack it
Damien Miller65964d62000-07-11 09:16:22 +1000755
Damien Miller4e997202000-07-09 21:21:52 +100075620000709
757 - (djm) Only enable PAM_TTY kludge for Linux. Problem report from
758 Kevin Steves <stevesk@sweden.hp.com>
Damien Miller8148fa32000-07-09 21:23:52 +1000759 - (djm) Match prototype and function declaration for rresvport_af.
760 Problem report from Niklas Edmundsson <nikke@ing.umu.se>
Damien Millere4340be2000-09-16 13:29:08 +1100761 - (djm) Missing $(DESTDIR) on host-key target causing problems with RPM
Damien Miller01006272000-07-09 21:29:37 +1000762 builds. Problem report from Gregory Leblanc <GLeblanc@cu-portland.edu>
Damien Millerb38ea862000-07-09 21:37:49 +1000763 - (djm) Replace ut_name with ut_user. Patch from Jim Watt
764 <jimw@peisj.pebio.com>
Damien Millerf9b625c2000-07-09 22:42:32 +1000765 - (djm) Fix pam sprintf fix
766 - (djm) Cleanup entropy collection code a little more. Split initialisation
767 from seeding, perform intialisation immediatly at start, be careful with
768 uids. Based on problem report from Jim Watt <jimw@peisj.pebio.com>
Damien Miller31abc9a2000-07-09 23:26:27 +1000769 - (djm) More NeXT compatibility from Ben Lindstrom <mouring@pconline.com>
770 Including sigaction() et al. replacements
Damien Millere4340be2000-09-16 13:29:08 +1100771 - (djm) AIX getuserattr() session initialisation from Tom Bertelson
Damien Miller39c0a1c2000-07-09 23:55:08 +1000772 <tbert@abac.com>
Damien Miller4e997202000-07-09 21:21:52 +1000773
Damien Millerce40c702000-07-08 10:14:08 +100077420000708
Damien Millere4340be2000-09-16 13:29:08 +1100775 - (djm) Fix bad fprintf format handling in auth-pam.c. Patch from
Damien Millerce40c702000-07-08 10:14:08 +1000776 Aaron Hopkins <aaron@die.net>
Damien Miller90dcc052000-07-08 10:17:40 +1000777 - (djm) Fix incorrect configure handling of --with-rsh-path option. Fix from
778 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
Damien Millere4340be2000-09-16 13:29:08 +1100779 - (djm) Fixed undefined variables for OSF SIA. Report from
Damien Millerfe668e42000-07-08 10:44:13 +1000780 Baars, Henk <Hendrik.Baars@nl.origin-it.com>
Damien Millere4340be2000-09-16 13:29:08 +1100781 - (djm) Handle EWOULDBLOCK returns from read() and write() in atomicio.c
Damien Millerf2fdbe52000-07-08 10:57:08 +1000782 Fix from Marquess, Steve Mr JMLFDC <Steve.Marquess@DET.AMEDD.ARMY.MIL>
Damien Millere4340be2000-09-16 13:29:08 +1100783 - (djm) Don't use inet_addr.
Damien Millerce40c702000-07-08 10:14:08 +1000784
Damien Miller9b6d4ab2000-07-02 08:43:18 +100078520000702
786 - (djm) Fix brace mismatch from Corinna Vinschen <vinschen@cygnus.com>
Damien Millerc7088432000-07-02 18:44:54 +1000787 - (djm) Stop shadow expiry checking from preventing logins with NIS. Based
788 on fix from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
Damien Miller484118e2000-07-02 19:13:56 +1000789 - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from
790 Chris, the Young One <cky@pobox.com>
Damien Millere4340be2000-09-16 13:29:08 +1100791 - (djm) Fix scp progress meter on really wide terminals. Based on patch
Damien Miller0809a0a2000-07-02 19:33:54 +1000792 from James H. Cloos Jr. <cloos@jhcloos.com>
Damien Miller9b6d4ab2000-07-02 08:43:18 +1000793
Damien Millerd8cfda62000-07-01 12:56:09 +100079420000701
795 - (djm) Fix Tru64 SIA problems reported by John P Speno <speno@isc.upenn.edu>
Damien Miller8e81ed32000-07-01 13:17:42 +1000796 - (djm) Login fixes from Tom Bertelson <tbert@abac.com>
Damien Miller28adeef2000-07-01 13:29:26 +1000797 - (djm) Replace "/bin/sh" with _PATH_BSHELL. Report from Corinna Vinschen
798 <vinschen@cygnus.com>
Damien Miller7b413d22000-07-01 13:24:21 +1000799 - (djm) Replace "/usr/bin/login" with LOGIN_PROGRAM
Damien Millercb170cb2000-07-01 16:52:55 +1000800 - (djm) Added check for broken snprintf() functions which do not correctly
801 terminate output string and attempt to use replacement.
Damien Millerc9270992000-07-01 19:42:32 +1000802 - (djm) Released 2.1.1p2
Damien Millerd8cfda62000-07-01 12:56:09 +1000803
Damien Miller53c5d462000-06-28 00:50:50 +100080420000628
805 - (djm) Fixes to lastlog code for Irix
806 - (djm) Use atomicio in loginrec
Damien Miller91606b12000-06-28 08:22:29 +1000807 - (djm) Patch from Michael Stone <mstone@cs.loyola.edu> to add support for
808 Irix 6.x array sessions, project id's, and system audit trail id.
Damien Miller262ff172000-06-28 08:24:49 +1000809 - (djm) Added 'distprep' make target to simplify packaging
Damien Millere4340be2000-09-16 13:29:08 +1100810 - (djm) Added patch from Chris Adams <cmadams@hiwaay.net> to add OSF SIA
Damien Millerb8c656e2000-06-28 15:22:41 +1000811 support. Enable using "USE_SIA=1 ./configure [options]"
Damien Millere4340be2000-09-16 13:29:08 +1100812
Damien Millerf8af08d2000-06-27 09:40:06 +100081320000627
814 - (djm) Fixes to login code - not setting li->uid, cleanups
Damien Millerdd47aa22000-06-27 11:18:27 +1000815 - (djm) Formatting
Damien Millerf8af08d2000-06-27 09:40:06 +1000816
Damien Miller8dd33fd2000-06-26 10:20:19 +100081720000626
Damien Millerc0fd17f2000-06-26 10:22:53 +1000818 - (djm) Better fix to aclocal tests from Garrick James <garrick@james.net>
Damien Miller1f335fb2000-06-26 11:31:33 +1000819 - (djm) Account expiry support from Andreas Steinmetz <ast@domdv.de>
820 - (djm) Added password expiry checking (no password change support)
Damien Miller64681252000-06-26 13:01:33 +1000821 - (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK
822 based on patch from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
Damien Miller08006472000-06-26 13:55:31 +1000823 - (djm) Fix fixed EGD code.
Damien Millerc0fd17f2000-06-26 10:22:53 +1000824 - OpenBSD CVS update
825 - provos@cvs.openbsd.org 2000/06/25 14:17:58
826 [channels.c]
827 correct check for bad channel ids; from Wei Dai <weidai@eskimo.com>
828
Damien Millerb54b40e2000-06-23 08:23:34 +100082920000623
Damien Millere4340be2000-09-16 13:29:08 +1100830 - (djm) Use sa_family_t in prototype for rresvport_af. Patch from
Damien Millerb54b40e2000-06-23 08:23:34 +1000831 Svante Signell <svante.signell@telia.com>
832 - (djm) Autoconf logic to define sa_family_t if it is missing
Damien Millerbf7f4662000-06-23 10:16:38 +1000833 - OpenBSD CVS Updates:
834 - markus@cvs.openbsd.org 2000/06/22 10:32:27
835 [sshd.c]
836 missing atomicio; report from Steve.Marquess@DET.AMEDD.ARMY.MIL
837 - djm@cvs.openbsd.org 2000/06/22 17:55:00
838 [auth-krb4.c key.c radix.c uuencode.c]
839 Missing CVS idents; ok markus
Damien Millerb54b40e2000-06-23 08:23:34 +1000840
Damien Miller099f5052000-06-22 20:57:11 +100084120000622
842 - (djm) Automatically generate host key during "make install". Suggested
843 by Gary E. Miller <gem@rellim.com>
844 - (djm) Paranoia before kill() system call
Damien Miller6536c7d2000-06-22 21:32:31 +1000845 - OpenBSD CVS Updates:
846 - markus@cvs.openbsd.org 2000/06/18 18:50:11
847 [auth2.c compat.c compat.h sshconnect2.c]
848 make userauth+pubkey interop with ssh.com-2.2.0
849 - markus@cvs.openbsd.org 2000/06/18 20:56:17
850 [dsa.c]
851 mem leak + be more paranoid in dsa_verify.
852 - markus@cvs.openbsd.org 2000/06/18 21:29:50
853 [key.c]
854 cleanup fingerprinting, less hardcoded sizes
855 - markus@cvs.openbsd.org 2000/06/19 19:39:45
856 [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
857 [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h]
Damien Millere4340be2000-09-16 13:29:08 +1100858 [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h]
Damien Miller6536c7d2000-06-22 21:32:31 +1000859 [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h]
860 [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c]
Damien Millere4340be2000-09-16 13:29:08 +1100861 [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c]
862 [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c]
Damien Miller6536c7d2000-06-22 21:32:31 +1000863 [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c]
864 [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h]
865 OpenBSD tag
866 - markus@cvs.openbsd.org 2000/06/21 10:46:10
867 sshconnect2.c missing free; nuke old comment
Damien Miller099f5052000-06-22 20:57:11 +1000868
Damien Milleredb82922000-06-20 13:25:52 +100086920000620
870 - (djm) Replace use of '-o' and '-a' logical operators in configure tests
Damien Millere4340be2000-09-16 13:29:08 +1100871 with '||' and '&&'. As suggested by Jim Knoble <jmknoble@pint-stowp.cx>
Damien Milleredb82922000-06-20 13:25:52 +1000872 to fix SCO Unixware problem reported by Gary E. Miller <gem@rellim.com>
Damien Miller2f022952000-06-20 13:50:01 +1000873 - (djm) Typo in loginrec.c
Damien Milleredb82922000-06-20 13:25:52 +1000874
Damien Miller7b22d652000-06-18 14:07:04 +100087520000618
876 - (djm) Add summary of configure options to end of ./configure run
Damien Millere4340be2000-09-16 13:29:08 +1100877 - (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from
Damien Miller7b22d652000-06-18 14:07:04 +1000878 Michael Stone <mstone@cs.loyola.edu>
Damien Millere4340be2000-09-16 13:29:08 +1100879 - (djm) rusage is a privileged operation on some Unices (incl.
Damien Miller7b22d652000-06-18 14:07:04 +1000880 Solaris 2.5.1). Report from Paul D. Smith <pausmith@nortelnetworks.com>
Damien Millere4340be2000-09-16 13:29:08 +1100881 - (djm) Avoid PAM failures when running without a TTY. Report from
Damien Miller7b22d652000-06-18 14:07:04 +1000882 Martin Petrak <petrak@spsknm.schools.sk>
883 - (djm) Include sys/types.h when including netinet/in.h in configure tests.
884 Patch from Jun-ichiro itojun Hagino <itojun@iijlab.net>
Damien Miller0f91b4e2000-06-18 15:43:25 +1000885 - (djm) Started merge of Ben Lindstrom's <mouring@pconline.com> NeXT support
Damien Millerf6d9e222000-06-18 14:50:44 +1000886 - OpenBSD CVS updates:
887 - deraadt@cvs.openbsd.org 2000/06/17 09:58:46
888 [channels.c]
889 everyone says "nix it" (remove protocol 2 debugging message)
890 - markus@cvs.openbsd.org 2000/06/17 13:24:34
891 [sshconnect.c]
892 allow extended server banners
893 - markus@cvs.openbsd.org 2000/06/17 14:30:10
894 [sshconnect.c]
895 missing atomicio, typo
896 - jakob@cvs.openbsd.org 2000/06/17 16:52:34
897 [servconf.c servconf.h session.c sshd.8 sshd_config]
898 add support for ssh v2 subsystems. ok markus@.
899 - deraadt@cvs.openbsd.org 2000/06/17 18:57:48
900 [readconf.c servconf.c]
901 include = in WHITESPACE; markus ok
902 - markus@cvs.openbsd.org 2000/06/17 19:09:10
903 [auth2.c]
904 implement bug compatibility with ssh-2.0.13 pubkey, server side
905 - markus@cvs.openbsd.org 2000/06/17 21:00:28
906 [compat.c]
907 initial support for ssh.com's 2.2.0
908 - markus@cvs.openbsd.org 2000/06/17 21:16:09
909 [scp.c]
910 typo
911 - markus@cvs.openbsd.org 2000/06/17 22:05:02
912 [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
913 split auth-rsa option parsing into auth-options
914 add options support to authorized_keys2
915 - markus@cvs.openbsd.org 2000/06/17 22:42:54
916 [session.c]
917 typo
Damien Miller7b22d652000-06-18 14:07:04 +1000918
Damien Millera66626b2000-06-13 18:57:53 +100091920000613
920 - (djm) Fixes from Andrew McGill <andrewm@datrix.co.za>:
921 - Platform define for SCO 3.x which breaks on /dev/ptmx
922 - Detect and try to fix missing MAXPATHLEN
Damien Miller1a132252000-06-13 21:23:17 +1000923 - (djm) Fix short copy in loginrec.c (based on patch from Phill Camp
924 <P.S.S.Camp@ukc.ac.uk>
Damien Millera66626b2000-06-13 18:57:53 +1000925
Damien Millere69f18c2000-06-12 16:38:54 +100092620000612
927 - (djm) Glob manpages in RPM spec files to catch compressed files
928 - (djm) Full license in auth-pam.c
Damien Millerc29de952000-06-12 23:04:18 +1000929 - (djm) Configure fixes from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
andre35ad6be2000-06-12 22:41:27 +0000930 - (andre) AIX, lastlog, configure fixes from Tom Bertelson <tbert@abac.com>:
931 - Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is
932 def'd
933 - Set AIX to use preformatted manpages
Damien Millere4340be2000-09-16 13:29:08 +1100934
Damien Millerc601a752000-06-10 08:33:38 +100093520000610
936 - (djm) Minor doc tweaks
Damien Millerd900e452000-06-10 16:51:33 +1000937 - (djm) Fix for configure on bash2 from Jim Knoble <jmknoble@jmknoble.cx>
Damien Millerc601a752000-06-10 08:33:38 +1000938
Damien Millera1cb6442000-06-09 11:58:35 +100093920000609
940 - (djm) Patch from Kenji Miyake <kenji@miyake.org> to disable utmp usage
941 (in favour of utmpx) on Solaris 8
942
Damien Millere37bfc12000-06-05 09:37:43 +100094320000606
Damien Miller14c12cb2000-06-07 22:20:23 +1000944 - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through
945 list of commands (by default). Removed verbose debugging (by default).
Damien Millere4340be2000-09-16 13:29:08 +1100946 - (djm) Increased command entropy estimates and default entropy collection
Damien Miller14c12cb2000-06-07 22:20:23 +1000947 timeout
Damien Millerd5bf3072000-06-07 21:32:13 +1000948 - (djm) Remove duplicate headers from loginrec.c
Damien Miller9e110892000-06-07 21:05:46 +1000949 - (djm) Don't add /usr/local/lib to library search path on Irix
Damien Millere4340be2000-09-16 13:29:08 +1100950 - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III
Damien Millerd3a18572000-06-07 19:55:44 +1000951 <tibbs@math.uh.edu>
Damien Miller5314ae72000-06-07 20:08:19 +1000952 - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg
953 <zack@wolery.cumb.org>
Damien Millerd3a18572000-06-07 19:55:44 +1000954 - (djm) OpenBSD CVS updates:
955 - todd@cvs.openbsd.org
956 [sshconnect2.c]
957 teach protocol v2 to count login failures properly and also enable an
958 explanation of why the password prompt comes up again like v1; this is NOT
959 crypto
Damien Millere4340be2000-09-16 13:29:08 +1100960 - markus@cvs.openbsd.org
Damien Millerd3a18572000-06-07 19:55:44 +1000961 [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8]
962 xauth_location support; pr 1234
963 [readconf.c sshconnect2.c]
964 typo, unused
965 [session.c]
966 allow use_login only for login sessions, otherwise remote commands are
967 execed with uid==0
968 [sshd.8]
969 document UseLogin better
970 [version.h]
971 OpenSSH 2.1.1
972 [auth-rsa.c]
Damien Millere4340be2000-09-16 13:29:08 +1100973 fix match_hostname() logic for auth-rsa: deny access if we have a
Damien Millerd3a18572000-06-07 19:55:44 +1000974 negative match or no match at all
975 [channels.c hostfile.c match.c]
Damien Millere4340be2000-09-16 13:29:08 +1100976 don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via
Damien Millerd3a18572000-06-07 19:55:44 +1000977 kris@FreeBSD.org
978
97920000606
Damien Millere4340be2000-09-16 13:29:08 +1100980 - (djm) Added --with-cflags, --with-ldflags and --with-libs options to
Damien Millere37bfc12000-06-05 09:37:43 +1000981 configure.
982
Damien Miller2994e082000-06-04 15:51:47 +100098320000604
984 - Configure tweaking for new login code on Irix 5.3
andrea86c7ec2000-06-04 17:00:15 +0000985 - (andre) login code changes based on djm feedback
Damien Miller2994e082000-06-04 15:51:47 +1000986
andrea86c7ec2000-06-04 17:00:15 +000098720000603
988 - (andre) New login code
989 - Remove bsd-login.[ch] and all the OpenBSD-derived code in login.c
990 - Add loginrec.[ch], logintest.c and autoconf code
Damien Millere4340be2000-09-16 13:29:08 +1100991
Damien Miller2f6a0ad2000-05-31 11:20:11 +100099220000531
993 - Cleanup of auth.c, login.c and fake-*
994 - Cleanup of auth-pam.c, save and print "account expired" error messages
Damien Miller1ea8ac72000-05-31 11:24:34 +1000995 - Fix EGD read bug by IWAMURO Motonori <iwa@mmp.fujitsu.co.jp>
Damien Miller1c773922000-05-31 13:57:18 +1000996 - Rewrote bsd-login to use proper utmp API if available. Major cleanup
997 of fallback DIY code.
Damien Miller2f6a0ad2000-05-31 11:20:11 +1000998
Damien Millerbe260a02000-05-30 12:57:46 +100099920000530
1000 - Define atexit for old Solaris
Damien Millerc252e2e2000-05-30 13:12:46 +10001001 - Fix buffer overrun in login.c for systems which use syslen in utmpx.
1002 patch from YOSHIFUJI Hideaki <yoshfuji@cerberus.nemoto.ecei.tohoku.ac.jp>
Damien Millerb1715dc2000-05-30 13:44:51 +10001003 - OpenBSD CVS updates:
1004 - markus@cvs.openbsd.org
1005 [session.c]
1006 make x11-fwd work w/ localhost (xauth add host/unix:11)
1007 [cipher.c compat.c readconf.c servconf.c]
1008 check strtok() != NULL; ok niels@
1009 [key.c]
1010 fix key_read() for uuencoded keys w/o '='
1011 [serverloop.c]
1012 group ssh1 vs. ssh2 in serverloop
1013 [kex.c kex.h myproposal.h sshconnect2.c sshd.c]
1014 split kexinit/kexdh, factor out common code
1015 [readconf.c ssh.1 ssh.c]
1016 forwardagent defaults to no, add ssh -A
1017 - theo@cvs.openbsd.org
1018 [session.c]
1019 just some line shortening
Damien Miller03934f22000-05-30 14:01:10 +10001020 - Released 2.1.0p3
Damien Millerbe260a02000-05-30 12:57:46 +10001021
Damien Millerd999ae22000-05-20 12:49:31 +1000102220000520
1023 - Xauth fix from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
Damien Millerad1bc5f2000-05-20 14:53:09 +10001024 - Don't touch utmp if USE_UTMPX defined
Damien Millerdfc83f42000-05-20 15:02:59 +10001025 - SunOS 4.x support from Todd C. Miller <Todd.Miller@courtesan.com>
Damien Millerfda78d92000-05-20 15:33:44 +10001026 - SIGCHLD fix for AIX and HPUX from Tom Bertelson <tbert@abac.com>
Damien Millere4340be2000-09-16 13:29:08 +11001027 - HPUX and Configure fixes from Lutz Jaenicke
Damien Millerfda78d92000-05-20 15:33:44 +10001028 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
Damien Millere4340be2000-09-16 13:29:08 +11001029 - Use mkinstalldirs script to make directories instead of non-portable
Damien Millerfda78d92000-05-20 15:33:44 +10001030 "install -d". Suggested by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
Damien Miller7b63b0f2000-05-20 15:41:26 +10001031 - Doc cleanup
Damien Millerd999ae22000-05-20 12:49:31 +10001032
Damien Milleref7df542000-05-19 00:03:23 +1000103320000518
1034 - Include Andre Lucas' fixprogs script. Forgot to "cvs add" it yesterday
1035 - OpenBSD CVS updates:
1036 - markus@cvs.openbsd.org
1037 [sshconnect.c]
1038 copy only ai_addrlen bytes; misiek@pld.org.pl
1039 [auth.c]
Damien Millere4340be2000-09-16 13:29:08 +11001040 accept an empty shell in authentication; bug reported by
Damien Milleref7df542000-05-19 00:03:23 +10001041 chris@tinker.ucr.edu
1042 [serverloop.c]
1043 we don't have stderr for interactive terminal sessions (fcntl errors)
1044
Damien Miller8d1fd572000-05-17 21:34:07 +1000104520000517
1046 - Fix from Andre Lucas <andre.lucas@dial.pipex.com>
1047 - Fixes command line printing segfaults (spotter: Bladt Norbert)
1048 - Fixes erroneous printing of debug messages to syslog
1049 - Fixes utmp for MacOS X (spotter: Aristedes Maniatis)
1050 - Gives useful error message if PRNG initialisation fails
1051 - Reduced ssh startup delay
1052 - Measures cumulative command time rather than the time between reads
Damien Millerbe484b52000-07-15 14:14:16 +10001053 after select()
Damien Miller8d1fd572000-05-17 21:34:07 +10001054 - 'fixprogs' perl script to eliminate non-working entropy commands, and
Damien Millerbe484b52000-07-15 14:14:16 +10001055 optionally run 'ent' to measure command entropy
Damien Millerd2c208a2000-05-17 22:00:02 +10001056 - Applied Tom Bertelson's <tbert@abac.com> AIX authentication fix
Damien Millerf3c6cf12000-05-17 22:08:29 +10001057 - Avoid WCOREDUMP complation errors for systems that lack it
Damien Millere4340be2000-09-16 13:29:08 +11001058 - Avoid SIGCHLD warnings from entropy commands
Damien Miller0e65eed2000-05-17 22:16:05 +10001059 - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <sxw@dcs.ed.ac.uk>
Damien Millerdcb6ecd2000-05-17 22:34:22 +10001060 - OpenBSD CVS update:
Damien Millere4340be2000-09-16 13:29:08 +11001061 - markus@cvs.openbsd.org
Damien Millerdcb6ecd2000-05-17 22:34:22 +10001062 [ssh.c]
1063 fix usage()
1064 [ssh2.h]
1065 draft-ietf-secsh-architecture-05.txt
1066 [ssh.1]
1067 document ssh -T -N (ssh2 only)
1068 [channels.c serverloop.c ssh.h sshconnect.c sshd.c aux.c]
1069 enable nonblocking IO for sshd w/ proto 1, too; split out common code
1070 [aux.c]
1071 missing include
Damien Miller615f9392000-05-17 22:53:33 +10001072 - Several patches from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
1073 - INSTALL typo and URL fix
1074 - Makefile fix
1075 - Solaris fixes
Damien Millere4340be2000-09-16 13:29:08 +11001076 - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka
Damien Miller615f9392000-05-17 22:53:33 +10001077 <ksakai@kso.netwk.ntt-at.co.jp>
Damien Millerc4be7ce2000-05-17 23:02:03 +10001078 - RSAless operation patch from kevin_oconnor@standardandpoors.com
Damien Miller3b512e12000-05-17 23:29:18 +10001079 - Detect OpenSSL seperatly from RSA
Damien Millere4340be2000-09-16 13:29:08 +11001080 - Better test for RSA (more compatible with RSAref). Based on work by
Damien Miller3b512e12000-05-17 23:29:18 +10001081 Ed Eden <ede370@stl.rural.usda.gov>
Damien Miller8d1fd572000-05-17 21:34:07 +10001082
Damien Miller95fe91b2000-05-13 12:31:22 +1000108320000513
Damien Millere4340be2000-09-16 13:29:08 +11001084 - Fix for non-recognised DSA keys from Arkadiusz Miskiewicz
Damien Miller95fe91b2000-05-13 12:31:22 +10001085 <misiek@pld.org.pl>
1086
Damien Milleraccfeb32000-05-11 19:10:58 +1000108720000511
Damien Millere4340be2000-09-16 13:29:08 +11001088 - Fix for prng_seed permissions checking from Lutz Jaenicke
Damien Milleraccfeb32000-05-11 19:10:58 +10001089 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
Damien Miller95fe91b2000-05-13 12:31:22 +10001090 - "make host-key" fix for Irix
Damien Milleraccfeb32000-05-11 19:10:58 +10001091
Damien Miller30c3d422000-05-09 11:02:59 +1000109220000509
1093 - OpenBSD CVS update
1094 - markus@cvs.openbsd.org
1095 [cipher.h myproposal.h readconf.c readconf.h servconf.c ssh.1 ssh.c]
1096 [ssh.h sshconnect1.c sshconnect2.c sshd.8]
1097 - complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)
1098 - hugh@cvs.openbsd.org
1099 [ssh.1]
1100 - zap typo
1101 [ssh-keygen.1]
1102 - One last nit fix. (markus approved)
1103 [sshd.8]
1104 - some markus certified spelling adjustments
1105 - markus@cvs.openbsd.org
1106 [auth2.c channels.c clientloop.c compat compat.h dsa.c kex.c]
1107 [sshconnect2.c ]
1108 - bug compat w/ ssh-2.0.13 x11, split out bugs
1109 [nchan.c]
1110 - no drain if ibuf_empty, fixes x11fwd problems; tests by fries@
1111 [ssh-keygen.c]
1112 - handle escapes in real and original key format, ok millert@
1113 [version.h]
1114 - OpenSSH-2.1
Damien Miller16e519c2000-05-09 14:28:55 +10001115 - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.a
Damien Miller54057c22000-05-09 15:03:37 +10001116 - Doc updates
Damien Millere4340be2000-09-16 13:29:08 +11001117 - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported
Damien Miller95e89632000-05-09 15:28:50 +10001118 by Andre Lucas <andre.lucas@dial.pipex.com>
Damien Miller30c3d422000-05-09 11:02:59 +10001119
Damien Miller58e579b2000-05-08 00:05:31 +1000112020000508
1121 - Makefile and RPM spec fixes
1122 - Generate DSA host keys during "make key" or RPM installs
Damien Miller6d488712000-05-08 13:44:52 +10001123 - OpenBSD CVS update
1124 - markus@cvs.openbsd.org
1125 [clientloop.c sshconnect2.c]
1126 - make x11-fwd interop w/ ssh-2.0.13
1127 [README.openssh2]
1128 - interop w/ SecureFX
1129 - Release 2.0.0beta2
Damien Miller58e579b2000-05-08 00:05:31 +10001130
Damien Millere4340be2000-09-16 13:29:08 +11001131 - Configure caching and cleanup patch from Andre Lucas'
Damien Miller61e50f12000-05-08 20:49:37 +10001132 <andre.lucas@dial.pipex.com>
1133
Damien Millere247cc42000-05-07 12:03:14 +1000113420000507
1135 - Remove references to SSLeay.
1136 - Big OpenBSD CVS update
1137 - markus@cvs.openbsd.org
1138 [clientloop.c]
1139 - typo
1140 [session.c]
1141 - update proctitle on pty alloc/dealloc, e.g. w/ windows client
1142 [session.c]
1143 - update proctitle for proto 1, too
1144 [channels.h nchan.c serverloop.c session.c sshd.c]
1145 - use c-style comments
1146 - deraadt@cvs.openbsd.org
1147 [scp.c]
1148 - more atomicio
Damien Millere4340be2000-09-16 13:29:08 +11001149 - markus@cvs.openbsd.org
Damien Millere247cc42000-05-07 12:03:14 +10001150 [channels.c]
1151 - set O_NONBLOCK
1152 [ssh.1]
1153 - update AUTHOR
1154 [readconf.c ssh-keygen.c ssh.h]
1155 - default DSA key file ~/.ssh/id_dsa
1156 [clientloop.c]
1157 - typo, rm verbose debug
1158 - deraadt@cvs.openbsd.org
1159 [ssh-keygen.1]
1160 - document DSA use of ssh-keygen
1161 [sshd.8]
1162 - a start at describing what i understand of the DSA side
1163 [ssh-keygen.1]
1164 - document -X and -x
1165 [ssh-keygen.c]
1166 - simplify usage
Damien Millere4340be2000-09-16 13:29:08 +11001167 - markus@cvs.openbsd.org
Damien Millere247cc42000-05-07 12:03:14 +10001168 [sshd.8]
1169 - there is no rhosts_dsa
1170 [ssh-keygen.1]
1171 - document -y, update -X,-x
1172 [nchan.c]
1173 - fix close for non-open ssh1 channels
1174 [servconf.c servconf.h ssh.h sshd.8 sshd.c ]
1175 - s/DsaKey/HostDSAKey/, document option
1176 [sshconnect2.c]
1177 - respect number_of_password_prompts
1178 [channels.c channels.h servconf.c servconf.h session.c sshd.8]
1179 - GatewayPorts for sshd, ok deraadt@
1180 [ssh-add.1 ssh-agent.1 ssh.1]
1181 - more doc on: DSA, id_dsa, known_hosts2, authorized_keys2
1182 [ssh.1]
1183 - more info on proto 2
1184 [sshd.8]
1185 - sync AUTHOR w/ ssh.1
1186 [key.c key.h sshconnect.c]
1187 - print key type when talking about host keys
1188 [packet.c]
1189 - clear padding in ssh2
1190 [dsa.c key.c radix.c ssh.h sshconnect1.c uuencode.c uuencode.h]
1191 - replace broken uuencode w/ libc b64_ntop
1192 [auth2.c]
1193 - log failure before sending the reply
1194 [key.c radix.c uuencode.c]
1195 - remote trailing comments before calling __b64_pton
1196 [auth2.c readconf.c readconf.h servconf.c servconf.h ssh.1]
1197 [sshconnect2.c sshd.8]
1198 - add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8
1199 - Bring in b64_ntop and b64_pton from OpenBSD libc (bsd-base64.[ch])
1200
Damien Miller63560f92000-05-02 09:06:04 +1000120120000502
Damien Miller6f83b8e2000-05-02 09:23:45 +10001202 - OpenBSD CVS update
1203 [channels.c]
1204 - init all fds, close all fds.
1205 [sshconnect2.c]
1206 - check whether file exists before asking for passphrase
1207 [servconf.c servconf.h sshd.8 sshd.c]
1208 - PidFile, pr 1210
1209 [channels.c]
1210 - EINTR
1211 [channels.c]
1212 - unbreak, ok niels@
1213 [sshd.c]
1214 - unlink pid file, ok niels@
1215 [auth2.c]
1216 - Add missing #ifdefs; ok - markus
Damien Millere4340be2000-09-16 13:29:08 +11001217 - Add Andre Lucas' <andre.lucas@dial.pipex.com> patch to read entropy
Damien Miller0437b332000-05-02 09:56:41 +10001218 gathering commands from a text file
Damien Miller63560f92000-05-02 09:06:04 +10001219 - Release 2.0.0beta1
1220
Damien Miller7c8af4f2000-05-01 08:24:07 +1000122120000501
1222 - OpenBSD CVS update
1223 [packet.c]
1224 - send debug messages in SSH2 format
Damien Miller35dabd02000-05-01 21:10:33 +10001225 [scp.c]
1226 - fix very rare EAGAIN/EINTR issues; based on work by djm
1227 [packet.c]
1228 - less debug, rm unused
1229 [auth2.c]
1230 - disable kerb,s/key in ssh2
1231 [sshd.8]
1232 - Minor tweaks and typo fixes.
1233 [ssh-keygen.c]
1234 - Put -d into usage and reorder. markus ok.
Damien Millere4340be2000-09-16 13:29:08 +11001235 - Include missing headers for OpenSSL tests. Fix from Phil Karn
Damien Millere59ce622000-05-01 20:54:17 +10001236 <karn@ka9q.ampr.org>
Damien Millere4340be2000-09-16 13:29:08 +11001237 - Fixed __progname symbol collisions reported by Andre Lucas
Damien Miller70fb6712000-05-01 20:59:50 +10001238 <andre.lucas@dial.pipex.com>
Damien Miller0e489dc2000-05-01 22:53:53 +10001239 - Merged bsd-login ttyslot and AIX utmp patch from Gert Doering
1240 <gd@hilb1.medat.de>
Damien Miller1cead2c2000-05-01 22:55:23 +10001241 - Add some missing ifdefs to auth2.c
Damien Miller7c004262000-05-01 22:57:46 +10001242 - Deprecate perl-tk askpass.
Damien Millerfc0b11b2000-05-02 00:03:55 +10001243 - Irix portability fixes - don't include netinet headers more than once
1244 - Make sure we don't save PRNG seed more than once
Damien Miller7c8af4f2000-05-01 08:24:07 +10001245
Damien Miller1bead332000-04-30 00:47:29 +1000124620000430
1247 - Merge HP-UX fixes and TCB support from Ged Lodder <lodder@yacc.com.au>
Damien Miller4018c192000-04-30 09:30:44 +10001248 - Integrate Andre Lucas' <andre.lucas@dial.pipex.com> entropy collection
1249 patch.
1250 - Adds timeout to entropy collection
1251 - Disables slow entropy sources
1252 - Load and save seed file
Damien Millere4340be2000-09-16 13:29:08 +11001253 - Changed entropy seed code to user per-user seeds only (server seed is
Damien Miller4018c192000-04-30 09:30:44 +10001254 saved in root's .ssh directory)
1255 - Use atexit() and fatal cleanups to save seed on exit
Damien Millerbd483e72000-04-30 10:00:53 +10001256 - More OpenBSD updates:
1257 [session.c]
1258 - don't call chan_write_failed() if we are not writing
1259 [auth-rsa.c auth1.c authfd.c hostfile.c ssh-agent.c]
1260 - keysize warnings error() -> log()
Damien Miller1bead332000-04-30 00:47:29 +10001261
Damien Millereba71ba2000-04-29 23:57:08 +1000126220000429
1263 - Merge big update to OpenSSH-2.0 from OpenBSD CVS
1264 [README.openssh2]
1265 - interop w/ F-secure windows client
1266 - sync documentation
1267 - ssh_host_dsa_key not ssh_dsa_key
1268 [auth-rsa.c]
1269 - missing fclose
1270 [auth.c authfile.c compat.c dsa.c dsa.h hostfile.c key.c key.h radix.c]
1271 [readconf.c readconf.h ssh-add.c ssh-keygen.c ssh.c ssh.h sshconnect.c]
1272 [sshd.c uuencode.c uuencode.h authfile.h]
1273 - add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX]
1274 for trading keys with the real and the original SSH, directly from the
1275 people who invented the SSH protocol.
1276 [auth.c auth.h authfile.c sshconnect.c auth1.c auth2.c sshconnect.h]
1277 [sshconnect1.c sshconnect2.c]
1278 - split auth/sshconnect in one file per protocol version
1279 [sshconnect2.c]
1280 - remove debug
1281 [uuencode.c]
1282 - add trailing =
1283 [version.h]
1284 - OpenSSH-2.0
1285 [ssh-keygen.1 ssh-keygen.c]
1286 - add -R flag: exit code indicates if RSA is alive
1287 [sshd.c]
1288 - remove unused
1289 silent if -Q is specified
1290 [ssh.h]
1291 - host key becomes /etc/ssh_host_dsa_key
1292 [readconf.c servconf.c ]
1293 - ssh/sshd default to proto 1 and 2
1294 [uuencode.c]
1295 - remove debug
1296 [auth2.c ssh-keygen.c sshconnect2.c sshd.c]
1297 - xfree DSA blobs
1298 [auth2.c serverloop.c session.c]
1299 - cleanup logging for sshd/2, respect PasswordAuth no
1300 [sshconnect2.c]
1301 - less debug, respect .ssh/config
1302 [README.openssh2 channels.c channels.h]
Damien Millere4340be2000-09-16 13:29:08 +11001303 - clientloop.c session.c ssh.c
Damien Millereba71ba2000-04-29 23:57:08 +10001304 - support for x11-fwding, client+server
1305
Damien Millera552faf2000-04-21 15:55:20 +1000130620000421
1307 - Merge fix from OpenBSD CVS
1308 [ssh-agent.c]
1309 - Fix memory leak per connection. Report from Andy Spiegl <Andy@Spiegl.de>
1310 via Debian bug #59926
Damien Miller81171112000-04-23 11:14:01 +10001311 - Define __progname in session.c if libc doesn't
1312 - Remove indentation on autoconf #include statements to avoid bug in
Damien Millere4340be2000-09-16 13:29:08 +11001313 DEC Tru64 compiler. Report and fix from David Del Piero
Damien Miller81171112000-04-23 11:14:01 +10001314 <David.DelPiero@qed.qld.gov.au>
Damien Millera552faf2000-04-21 15:55:20 +10001315
Damien Miller3ef692a2000-04-20 07:33:24 +1000131620000420
Damien Millere4340be2000-09-16 13:29:08 +11001317 - Make fixpaths work with perl4, patch from Andre Lucas
Damien Miller3ef692a2000-04-20 07:33:24 +10001318 <andre.lucas@dial.pipex.com>
Damien Miller166fca82000-04-20 07:42:21 +10001319 - Sync with OpenBSD CVS:
1320 [clientloop.c login.c serverloop.c ssh-agent.c ssh.h sshconnect.c sshd.c]
1321 - pid_t
1322 [session.c]
1323 - remove bogus chan_read_failed. this could cause data
1324 corruption (missing data) at end of a SSH2 session.
Damien Millerd0cff3e2000-04-20 23:12:58 +10001325 - Merge fixes from Debian patch from Phil Hands <phil@hands.com>
1326 - Allow setting of PAM service name through CFLAGS (SSHD_PAM_SERVICE)
1327 - Use vhangup to clean up Linux ttys
1328 - Force posix getopt processing on GNU libc systems
Damien Millercfabe862000-04-20 23:27:27 +10001329 - Debian bug #55910 - remove references to ssl(8) manpages
Damien Millerf3a3fee2000-04-20 23:32:48 +10001330 - Debian bug #58031 - ssh_config lies about default cipher
Damien Miller3ef692a2000-04-20 07:33:24 +10001331
Damien Miller8bb73be2000-04-19 16:26:12 +1000133220000419
1333 - OpenBSD CVS updates
1334 [channels.c]
1335 - fix pr 1196, listen_port and port_to_connect interchanged
1336 [scp.c]
Damien Millere4340be2000-09-16 13:29:08 +11001337 - after completion, replace the progress bar ETA counter with a final
Damien Miller8bb73be2000-04-19 16:26:12 +10001338 elapsed time; my idea, aaron wrote the patch
1339 [ssh_config sshd_config]
1340 - show 'Protocol' as an example, ok markus@
1341 [sshd.c]
1342 - missing xfree()
1343 - Add missing header to bsd-misc.c
1344
Damien Miller5f056372000-04-16 12:31:48 +1000134520000416
1346 - Reduce diff against OpenBSD source
Damien Millere4340be2000-09-16 13:29:08 +11001347 - All OpenSSL includes are now unconditionally referenced as
Damien Miller5f056372000-04-16 12:31:48 +10001348 openssl/foo.h
1349 - Pick up formatting changes
1350 - Other minor changed (typecasts, etc) that I missed
1351
Damien Miller4af51302000-04-16 11:18:38 +1000135220000415
1353 - OpenBSD CVS updates.
1354 [ssh.1 ssh.c]
1355 - ssh -2
1356 [auth.c channels.c clientloop.c packet.c packet.h serverloop.c]
1357 [session.c sshconnect.c]
1358 - check payload for (illegal) extra data
1359 [ALL]
1360 whitespace cleanup
1361
Damien Millere71eb912000-04-13 12:19:32 +1000136220000413
1363 - INSTALL doc updates
Damien Miller22c77262000-04-13 12:26:34 +10001364 - Merged OpenBSD updates to include paths.
Damien Millere4340be2000-09-16 13:29:08 +11001365
Damien Miller78928792000-04-12 20:17:38 +1000136620000412
1367 - OpenBSD CVS updates:
1368 - [channels.c]
1369 repair x11-fwd
1370 - [sshconnect.c]
1371 fix passwd prompt for ssh2, less debugging output.
1372 - [clientloop.c compat.c dsa.c kex.c sshd.c]
1373 less debugging output
1374 - [kex.c kex.h sshconnect.c sshd.c]
1375 check for reasonable public DH values
1376 - [README.openssh2 cipher.c cipher.h compat.c compat.h readconf.c]
1377 [readconf.h servconf.c servconf.h ssh.c ssh.h sshconnect.c sshd.c]
1378 add Cipher and Protocol options to ssh/sshd, e.g.:
1379 ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers
1380 arcfour,3des-cbc'
1381 - [sshd.c]
1382 print 1.99 only if server supports both
1383
Damien Millerbc7c7cc2000-04-08 17:48:56 +1000138420000408
1385 - Avoid some compiler warnings in fake-get*.c
1386 - Add IPTOS macros for systems which lack them
Damien Miller11e37f62000-04-08 18:23:30 +10001387 - Only set define entropy collection macros if they are found
Damien Millerefb4afe2000-04-12 18:45:05 +10001388 - More large OpenBSD CVS updates:
1389 - [auth.c auth.h servconf.c servconf.h serverloop.c session.c]
1390 [session.h ssh.h sshd.c README.openssh2]
1391 ssh2 server side, see README.openssh2; enable with 'sshd -2'
1392 - [channels.c]
1393 no adjust after close
1394 - [sshd.c compat.c ]
1395 interop w/ latest ssh.com windows client.
Damien Millere4340be2000-09-16 13:29:08 +11001396
Damien Miller1383bd82000-04-06 12:32:37 +1000139720000406
1398 - OpenBSD CVS update:
1399 - [channels.c]
1400 close efd on eof
1401 - [clientloop.c compat.c ssh.c sshconnect.c myproposal.h]
1402 ssh2 client implementation, interops w/ ssh.com and lsh servers.
1403 - [sshconnect.c]
1404 missing free.
1405 - [authfile.c cipher.c cipher.h packet.c sshconnect.c sshd.c]
1406 remove unused argument, split cipher_mask()
1407 - [clientloop.c]
1408 re-order: group ssh1 vs. ssh2
1409 - Make Redhat spec require openssl >= 0.9.5a
1410
Damien Miller193ba882000-04-04 10:21:09 +1000141120000404
1412 - Add tests for RAND_add function when searching for OpenSSL
Damien Miller33b13562000-04-04 14:38:59 +10001413 - OpenBSD CVS update:
1414 - [packet.h packet.c]
1415 ssh2 packet format
1416 - [packet.h packet.c nchan2.ms nchan.h compat.h compat.c]
1417 [channels.h channels.c]
1418 channel layer support for ssh2
1419 - [kex.h kex.c hmac.h hmac.c dsa.c dsa.h]
1420 DSA, keyexchange, algorithm agreement for ssh2
Damien Miller74a333b2000-04-04 15:04:09 +10001421 - Generate manpages before make install not at the end of make all
1422 - Don't seed the rng quite so often
1423 - Always reseed rng when requested
Damien Miller193ba882000-04-04 10:21:09 +10001424
Damien Miller040f3832000-04-03 14:50:43 +1000142520000403
1426 - Wrote entropy collection routines for systems that lack /dev/random
1427 and EGD
Damien Miller70494d12000-04-03 15:57:06 +10001428 - Disable tests and typedefs for 64 bit types. They are currently unused.
Damien Miller040f3832000-04-03 14:50:43 +10001429
Damien Millerb38eff82000-04-01 11:09:21 +1000143020000401
1431 - Big OpenBSD CVS update (mainly beginnings of SSH2 infrastructure)
1432 - [auth.c session.c sshd.c auth.h]
1433 split sshd.c -> auth.c session.c sshd.c plus cleanup and goto-removal
1434 - [bufaux.c bufaux.h]
1435 support ssh2 bignums
1436 - [channels.c channels.h clientloop.c sshd.c nchan.c nchan.h packet.c]
1437 [readconf.c ssh.c ssh.h serverloop.c]
1438 replace big switch() with function tables (prepare for ssh2)
1439 - [ssh2.h]
1440 ssh2 message type codes
1441 - [sshd.8]
1442 reorder Xr to avoid cutting
1443 - [serverloop.c]
1444 close(fdin) if fdin != fdout, shutdown otherwise, ok theo@
1445 - [channels.c]
1446 missing close
1447 allow bigger packets
1448 - [cipher.c cipher.h]
1449 support ssh2 ciphers
1450 - [compress.c]
1451 cleanup, less code
1452 - [dispatch.c dispatch.h]
1453 function tables for different message types
1454 - [log-server.c]
1455 do not log() if debuggin to stderr
1456 rename a cpp symbol, to avoid param.h collision
1457 - [mpaux.c]
1458 KNF
1459 - [nchan.c]
1460 sync w/ channels.c
1461
Damien Miller2c9279f2000-03-26 12:12:34 +1000146220000326
1463 - Better tests for OpenSSL w/ RSAref
Damien Millere4340be2000-09-16 13:29:08 +11001464 - Added replacement setenv() function from OpenBSD libc. Suggested by
Damien Miller2c9279f2000-03-26 12:12:34 +10001465 Ben Lindstrom <mouring@pconline.com>
Damien Miller450a7a12000-03-26 13:04:51 +10001466 - OpenBSD CVS update
1467 - [auth-krb4.c]
1468 -Wall
1469 - [auth-rh-rsa.c auth-rsa.c hostfile.c hostfile.h key.c key.h match.c]
1470 [match.h ssh.c ssh.h sshconnect.c sshd.c]
1471 initial support for DSA keys. ok deraadt@, niels@
1472 - [cipher.c cipher.h]
1473 remove unused cipher_attack_detected code
1474 - [scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
1475 Fix some formatting problems I missed before.
1476 - [ssh.1 sshd.8]
1477 fix spelling errors, From: FreeBSD
1478 - [ssh.c]
1479 switch to raw mode only if he _get_ a pty (not if we _want_ a pty).
Damien Miller2c9279f2000-03-26 12:12:34 +10001480
Damien Miller63a46cc2000-03-24 09:24:33 +1100148120000324
1482 - Released 1.2.3
1483
Damien Miller29ea30d2000-03-17 10:54:15 +1100148420000317
1485 - Clarified --with-default-path option.
1486 - Added -blibpath handling for AIX to work around stupid runtime linking.
1487 Problem elucidated by gshapiro@SENDMAIL.ORG by way of Jim Knoble
1488 <jmknoble@pobox.com>
Damien Millerd6121d22000-03-17 23:26:46 +11001489 - Checks for 64 bit int types. Problem report from Mats Fredholm
1490 <matsf@init.se>
Damien Miller7684ee12000-03-17 23:40:15 +11001491 - OpenBSD CVS updates:
Damien Millere4340be2000-09-16 13:29:08 +11001492 - [atomicio.c auth-krb4.c bufaux.c channels.c compress.c fingerprint.c]
Damien Miller7684ee12000-03-17 23:40:15 +11001493 [packet.h radix.c rsa.c scp.c ssh-agent.c ssh-keygen.c sshconnect.c]
1494 [sshd.c]
1495 pedantic: signed vs. unsigned, void*-arithm, etc
1496 - [ssh.1 sshd.8]
1497 Various cleanups and standardizations.
Damien Millere4340be2000-09-16 13:29:08 +11001498 - Runtime error fix for HPUX from Otmar Stahl
Damien Millere37ac5a2000-03-17 23:58:59 +11001499 <O.Stahl@lsw.uni-heidelberg.de>
Damien Miller29ea30d2000-03-17 10:54:15 +11001500
Damien Miller08c788a2000-03-16 07:52:29 +1100150120000316
Damien Millere4340be2000-09-16 13:29:08 +11001502 - Fixed configure not passing LDFLAGS to Solaris. Report from David G.
Damien Miller08c788a2000-03-16 07:52:29 +11001503 Hesprich <dghespri@sprintparanet.com>
Damien Miller166bd442000-03-16 10:48:25 +11001504 - Propogate LD through to Makefile
Damien Millerfd263682000-03-16 11:51:09 +11001505 - Doc cleanups
Damien Millerca9a49c2000-03-16 12:23:13 +11001506 - Added blurb about "scp: command not found" errors to UPGRADING
Damien Miller08c788a2000-03-16 07:52:29 +11001507
Damien Millera1ad4802000-03-15 10:04:54 +1100150820000315
1509 - Fix broken CFLAGS handling during search for OpenSSL. Fixes va_list
1510 problems with gcc/Solaris.
Damien Millere4340be2000-09-16 13:29:08 +11001511 - Don't free argument to putenv() after use (in setenv() replacement).
Damien Millerf09b07a2000-03-15 11:23:48 +11001512 Report from Seigo Tanimura <tanimura@r.dl.itc.u-tokyo.ac.jp>
Damien Millere4340be2000-09-16 13:29:08 +11001513 - Created contrib/ subdirectory. Included helpers from Phil Hands'
Damien Miller8b1c22b2000-03-15 12:13:01 +11001514 Debian package, README file and chroot patch from Ricardo Cerqueira
1515 <rmcc@clix.pt>
Damien Millere4340be2000-09-16 13:29:08 +11001516 - Moved gnome-ssh-askpass.c to contrib directory and removed config
Damien Miller8b1c22b2000-03-15 12:13:01 +11001517 option.
1518 - Slight cleanup to doc files
Damien Miller856799b2000-03-15 21:18:10 +11001519 - Configure fix from Bratislav ILICH <bilic@zepter.ru>
Damien Millera1ad4802000-03-15 10:04:54 +11001520
Damien Miller1c67c992000-03-14 10:16:34 +1100152120000314
Damien Millere4340be2000-09-16 13:29:08 +11001522 - Include macro for IN6_IS_ADDR_V4MAPPED. Report from
Damien Miller1c67c992000-03-14 10:16:34 +11001523 peter@frontierflying.com
Damien Millerdb819592000-03-14 13:44:01 +11001524 - Include /usr/local/include and /usr/local/lib for systems that don't
1525 do it themselves
1526 - -R/usr/local/lib for Solaris
1527 - Fix RSAref detection
1528 - Fix IN6_IS_ADDR_V4MAPPED macro
Damien Miller1c67c992000-03-14 10:16:34 +11001529
Damien Millerb85dcad2000-03-11 11:37:00 +1100153020000311
1531 - Detect RSAref
Damien Miller02491e92000-03-11 11:58:28 +11001532 - OpenBSD CVS change
1533 [sshd.c]
1534 - disallow guessing of root password
Damien Millerd58b3ab2000-03-11 20:05:11 +11001535 - More configure fixes
Damien Miller7bcb0892000-03-11 20:45:40 +11001536 - IPv6 workarounds from Hideaki YOSHIFUJI <yoshfuji@ecei.tohoku.ac.jp>
Damien Millerb85dcad2000-03-11 11:37:00 +11001537
Damien Miller98c7ad62000-03-09 21:27:49 +1100153820000309
1539 - OpenBSD CVS updates to v1.2.3
Damien Millerbe484b52000-07-15 14:14:16 +10001540 [ssh.h atomicio.c]
1541 - int atomicio -> ssize_t (for alpha). ok deraadt@
1542 [auth-rsa.c]
1543 - delay MD5 computation until client sends response, free() early, cleanup.
1544 [cipher.c]
1545 - void* -> unsigned char*, ok niels@
1546 [hostfile.c]
1547 - remove unused variable 'len'. fix comments.
1548 - remove unused variable
1549 [log-client.c log-server.c]
1550 - rename a cpp symbol, to avoid param.h collision
1551 [packet.c]
1552 - missing xfree()
1553 - getsockname() requires initialized tolen; andy@guildsoftware.com
1554 - use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
1555 from Holger.Trapp@Informatik.TU-Chemnitz.DE
1556 [pty.c pty.h]
Damien Millere4340be2000-09-16 13:29:08 +11001557 - register cleanup for pty earlier. move code for pty-owner handling to
Damien Miller98c7ad62000-03-09 21:27:49 +11001558 pty.c ok provos@, dugsong@
Damien Millerbe484b52000-07-15 14:14:16 +10001559 [readconf.c]
1560 - turn off x11-fwd for the client, too.
1561 [rsa.c]
1562 - PKCS#1 padding
1563 [scp.c]
1564 - allow '.' in usernames; from jedgar@fxp.org
1565 [servconf.c]
1566 - typo: ignore_user_known_hosts int->flag; naddy@mips.rhein-neckar.de
1567 - sync with sshd_config
1568 [ssh-keygen.c]
1569 - enable ssh-keygen -l -f ~/.ssh/known_hosts, ok deraadt@
1570 [ssh.1]
1571 - Change invalid 'CHAT' loglevel to 'VERBOSE'
1572 [ssh.c]
1573 - suppress AAAA query host when '-4' is used; from shin@nd.net.fujitsu.co.jp
1574 - turn off x11-fwd for the client, too.
1575 [sshconnect.c]
1576 - missing xfree()
1577 - retry rresvport_af(), too. from sumikawa@ebina.hitachi.co.jp.
1578 - read error vs. "Connection closed by remote host"
1579 [sshd.8]
1580 - ie. -> i.e.,
1581 - do not link to a commercial page..
1582 - sync with sshd_config
1583 [sshd.c]
1584 - no need for poll.h; from bright@wintelcom.net
1585 - log with level log() not fatal() if peer behaves badly.
1586 - don't panic if client behaves strange. ok deraadt@
1587 - make no-port-forwarding for RSA keys deny both -L and -R style fwding
1588 - delay close() of pty until the pty has been chowned back to root
1589 - oops, fix comment, too.
1590 - missing xfree()
1591 - move XAUTHORITY to subdir. ok dugsong@. fixes debian bug #57907, too.
1592 (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907)
Damien Millere4340be2000-09-16 13:29:08 +11001593 - register cleanup for pty earlier. move code for pty-owner handling to
Damien Millerbe484b52000-07-15 14:14:16 +10001594 pty.c ok provos@, dugsong@
1595 - create x11 cookie file
1596 - fix pr 1113, fclose() -> pclose(), todo: remote popen()
1597 - version 1.2.3
Damien Miller98c7ad62000-03-09 21:27:49 +11001598 - Cleaned up
Damien Millere4340be2000-09-16 13:29:08 +11001599 - Removed warning workaround for Linux and devpts filesystems (no longer
Damien Miller8f975b62000-03-09 22:31:13 +11001600 required after OpenBSD updates)
Damien Miller98c7ad62000-03-09 21:27:49 +11001601
Damien Miller1a07ebd2000-03-08 09:03:44 +1100160220000308
1603 - Configure fix from Hiroshi Takekawa <takekawa@sr3.t.u-tokyo.ac.jp>
1604
160520000307
1606 - Released 1.2.2p1
1607
Damien Miller01bedb82000-03-05 16:10:03 +1100160820000305
1609 - Fix DEC compile fix
Damien Millerfac99cd2000-03-05 16:10:45 +11001610 - Explicitly seed OpenSSL's PRNG before checking rsa_alive()
Damien Miller9fb07e42000-03-05 16:22:59 +11001611 - Check for getpagesize in libucb.a if not found in libc. Fix for old
1612 Solaris from Andre Lucas <andre.lucas@dial.pipex.com>
Damien Millere4340be2000-09-16 13:29:08 +11001613 - Check for libwrap if --with-tcp-wrappers option specified. Suggestion
Damien Miller65165f82000-03-05 17:02:45 +11001614 Mate Wierdl <mw@moni.msci.memphis.edu>
Damien Miller01bedb82000-03-05 16:10:03 +11001615
Damien Miller4095f892000-03-03 22:13:52 +1100161620000303
1617 - Added "make host-key" target, Suggestion from Dominik Brettnacher
1618 <domi@saargate.de>
Damien Millere4340be2000-09-16 13:29:08 +11001619 - Don't permanently fail on bind() if getaddrinfo has more choices left for
Damien Miller3c7eeb22000-03-03 22:35:33 +11001620 us. Needed to work around messy IPv6 on Linux. Patch from Arkadiusz
1621 Miskiewicz <misiek@pld.org.pl>
Damien Miller00d4bb12000-03-03 22:48:49 +11001622 - DEC Unix compile fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
1623 - Manpage fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
Damien Miller4095f892000-03-03 22:13:52 +11001624
Damien Millera22ba012000-03-02 23:09:20 +1100162520000302
1626 - Big cleanup of autoconf code
1627 - Rearranged to be a little more logical
1628 - Added -R option for Solaris
1629 - Rewrote OpenSSL detection code. Now uses AC_TRY_RUN with a test program
1630 to detect library and header location _and_ ensure library has proper
1631 RSA support built in (this is a problem with OpenSSL 0.9.5).
Damien Millerc7d8dbb2000-03-02 23:30:53 +11001632 - Applied pty cleanup patch from markus.friedl@informatik.uni-erlangen.de
Damien Millerc4cea3e2000-03-02 23:31:50 +11001633 - Avoid warning message with Unix98 ptys
Damien Millere4340be2000-09-16 13:29:08 +11001634 - Warning was valid - possible race condition on PTYs. Avoided using
Damien Miller204ad072000-03-02 23:56:12 +11001635 platform-specific code.
1636 - Document some common problems
Damien Millere4340be2000-09-16 13:29:08 +11001637 - Allow root access to any key. Patch from
Damien Miller2453d012000-03-02 23:57:18 +11001638 markus.friedl@informatik.uni-erlangen.de
Damien Millera22ba012000-03-02 23:09:20 +11001639
Damien Miller36143d72000-02-07 13:20:26 +1100164020000207
1641 - Removed SOCKS code. Will support through a ProxyCommand.
1642
Damien Miller18522462000-02-03 01:07:07 +1100164320000203
1644 - Fixed SEGVs in authloop, fix from vbzoli@hbrt.hu
Damien Miller0c0e4bf2000-02-03 13:58:51 +11001645 - Add --with-ssl-dir option
Damien Miller18522462000-02-03 01:07:07 +11001646
Damien Miller65527582000-02-02 19:17:40 +1100164720000202
Damien Millere4340be2000-09-16 13:29:08 +11001648 - Fix lastlog code for directory based lastlogs. Fix from Josh Durham
Damien Miller65527582000-02-02 19:17:40 +11001649 <jmd@aoe.vt.edu>
Damien Miller17872522000-02-02 20:56:20 +11001650 - Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
Damien Millere4340be2000-09-16 13:29:08 +11001651 - Added URLs to Japanese translations of documents by HARUYAMA Seigo
Damien Miller17872522000-02-02 20:56:20 +11001652 <haruyama@nt.phys.s.u-tokyo.ac.jp>
Damien Miller65527582000-02-02 19:17:40 +11001653
Damien Miller9e53f352000-02-01 23:05:30 +1100165420000201
1655 - Use socket pairs by default (instead of pipes). Prevents race condition
1656 on several (buggy) OSs. Report and fix from tridge@linuxcare.com
1657
Damien Millerf07390e2000-01-29 20:40:22 +1100165820000127
1659 - Seed OpenSSL's random number generator before generating RSA keypairs
1660 - Split random collector into seperate file
Damien Miller6034fdf2000-01-29 20:55:09 +11001661 - Compile fix from Andre Lucas <andre.lucas@dial.pipex.com>
Damien Millerf07390e2000-01-29 20:40:22 +11001662
Damien Miller27f4c782000-01-27 18:22:13 +1100166320000126
1664 - Released 1.2.2 stable
1665
Damien Millere4340be2000-09-16 13:29:08 +11001666 - NeXT keeps it lastlog in /usr/adm. Report from
Damien Miller27f4c782000-01-27 18:22:13 +11001667 mouring@newton.pconline.com
Damien Millere4340be2000-09-16 13:29:08 +11001668 - Added note in UPGRADING re interop with commercial SSH using idea.
Damien Millerc85f9b42000-01-29 10:20:21 +11001669 Report from Jim Knoble <jmknoble@pobox.com>
1670 - Fix linking order for Kerberos/AFS. Fix from Holget Trapp
1671 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
Damien Miller27f4c782000-01-27 18:22:13 +11001672
Damien Millerd89c24b2000-01-26 11:04:48 +1100167320000125
Damien Millere4340be2000-09-16 13:29:08 +11001674 - Fix NULL pointer dereference in login.c. Fix from Andre Lucas
Damien Millerd89c24b2000-01-26 11:04:48 +11001675 <andre.lucas@dial.pipex.com>
Damien Millerfa51a832000-01-26 11:07:22 +11001676 - Reorder PAM initialisation so it does not mess up lastlog. Reported
1677 by Andre Lucas <andre.lucas@dial.pipex.com>
Damien Millere4340be2000-09-16 13:29:08 +11001678 - Use preformatted manpages on SCO, report from Gary E. Miller
Damien Miller0e1cf7c2000-01-26 12:15:30 +11001679 <gem@rellim.com>
1680 - New URL for x11-ssh-askpass.
Damien Millere4340be2000-09-16 13:29:08 +11001681 - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble
Damien Miller6d844932000-01-26 12:17:50 +11001682 <jmknoble@pobox.com>
Damien Millere4340be2000-09-16 13:29:08 +11001683 - Added 'DESTDIR' option to Makefile to ease package building. Patch from
Damien Miller7d7c60d2000-01-26 14:37:48 +11001684 Jim Knoble <jmknoble@pobox.com>
1685 - Updated RPM spec files to use DESTDIR
Damien Millerd89c24b2000-01-26 11:04:48 +11001686
Damien Miller68cee102000-01-24 17:02:27 +1100168720000124
1688 - Pick up version 1.2.2 from OpenBSD CVS (no changes, just version number
1689 increment)
1690
Damien Miller6fe375d2000-01-23 09:38:00 +1100169120000123
1692 - OpenBSD CVS:
1693 - [packet.c]
1694 getsockname() requires initialized tolen; andy@guildsoftware.com
Damien Millere4340be2000-09-16 13:29:08 +11001695 - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin
Damien Miller1fa154b2000-01-23 10:32:03 +11001696 <drankin@bohemians.lexington.ky.us>
Damien Millerdef0dc92000-01-23 20:18:35 +11001697 - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com>
Damien Miller6fe375d2000-01-23 09:38:00 +11001698
Damien Miller91427002000-01-22 13:25:13 +1100169920000122
1700 - Fix compilation of bsd-snprintf.c on Solaris, fix from Ben Taylor
1701 <bent@clark.net>
Damien Miller670a4b82000-01-22 13:53:11 +11001702 - Merge preformatted manpage patch from Andre Lucas
1703 <andre.lucas@dial.pipex.com>
Damien Miller07278932000-01-22 14:05:37 +11001704 - Make IPv4 use the default in RPM packages
1705 - Irix uses preformatted manpages
Damien Miller8dbbe6e2000-01-22 18:17:42 +11001706 - Missing htons() in bsd-bindresvport.c, fix from Holger Trapp
1707 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
Damien Millerf052aaf2000-01-22 19:47:21 +11001708 - OpenBSD CVS updates:
1709 - [packet.c]
1710 use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
1711 from Holger.Trapp@Informatik.TU-Chemnitz.DE
1712 - [sshd.c]
1713 log with level log() not fatal() if peer behaves badly.
1714 - [readpass.c]
Damien Millere4340be2000-09-16 13:29:08 +11001715 instead of blocking SIGINT, catch it ourselves, so that we can clean
1716 the tty modes up and kill ourselves -- instead of our process group
1717 leader (scp, cvs, ...) going away and leaving us in noecho mode.
Damien Millerf052aaf2000-01-22 19:47:21 +11001718 people with cbreak shells never even noticed..
Damien Miller14537852000-01-22 19:57:40 +11001719 - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
1720 ie. -> i.e.,
Damien Miller91427002000-01-22 13:25:13 +11001721
Damien Millereca71f82000-01-20 22:38:27 +1100172220000120
1723 - Don't use getaddrinfo on AIX
Damien Miller396691a2000-01-20 22:44:08 +11001724 - Update to latest OpenBSD CVS:
1725 - [auth-rsa.c]
1726 - fix user/1056, sshd keeps restrictions; dbt@meat.net
1727 - [sshconnect.c]
1728 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
1729 - destroy keys earlier
Damien Millere4340be2000-09-16 13:29:08 +11001730 - split key exchange (kex) and user authentication (user-auth),
Damien Milleree1c0b32000-01-21 00:18:15 +11001731 ok: provos@
Damien Miller396691a2000-01-20 22:44:08 +11001732 - [sshd.c]
1733 - no need for poll.h; from bright@wintelcom.net
1734 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
Damien Millere4340be2000-09-16 13:29:08 +11001735 - split key exchange (kex) and user authentication (user-auth),
Damien Milleree1c0b32000-01-21 00:18:15 +11001736 ok: provos@
Damien Miller88b86e42000-01-20 23:13:35 +11001737 - Big manpage and config file cleanup from Andre Lucas
1738 <andre.lucas@dial.pipex.com>
Damien Miller886c63a2000-01-20 23:13:36 +11001739 - Re-added latest (unmodified) OpenBSD manpages
Damien Millereab2ce02000-01-20 23:58:22 +11001740 - Doc updates
Damien Milleree1c0b32000-01-21 00:18:15 +11001741 - NetBSD patch from David Rankin <drankin@bohemians.lexington.ky.us> and
1742 Christos Zoulas <christos@netbsd.org>
Damien Millereca71f82000-01-20 22:38:27 +11001743
Damien Miller9550a242000-01-19 10:41:23 +1100174420000119
Damien Millereaf99942000-01-19 13:45:07 +11001745 - SCO compile fixes from Gary E. Miller <gem@rellim.com>
Damien Miller9550a242000-01-19 10:41:23 +11001746 - Compile fix from Darren_Hall@progressive.com
Damien Miller7d80e342000-01-19 14:36:49 +11001747 - Linux/glibc-2.1.2 takes a *long* time to look up names for AF_UNSPEC
1748 addresses using getaddrinfo(). Added a configure switch to make the
1749 default lookup mode AF_INET
Damien Miller9550a242000-01-19 10:41:23 +11001750
Damien Millerdbd250f2000-01-18 08:57:14 +1100175120000118
1752 - Fixed --with-pid-dir option
Damien Millerca673b32000-01-18 09:01:27 +11001753 - Makefile fix from Gary E. Miller <gem@rellim.com>
Damien Millere4340be2000-09-16 13:29:08 +11001754 - Compile fix for HPUX and Solaris from Andre Lucas
Damien Millere0f45742000-01-18 09:12:06 +11001755 <andre.lucas@dial.pipex.com>
Damien Millerdbd250f2000-01-18 08:57:14 +11001756
Damien Millerb9b94a72000-01-17 09:52:46 +1100175720000117
1758 - Clean up bsd-bindresvport.c. Use arc4random() for picking initial
1759 port, ignore EINVAL errors (Linux) when searching for free port.
Damien Millere4340be2000-09-16 13:29:08 +11001760 - Revert __snprintf -> snprintf aliasing. Apparently Solaris
Damien Miller834171e2000-01-17 09:59:41 +11001761 __snprintf isn't. Report from Theo de Raadt <theo@cvs.openbsd.org>
Damien Millerf693d3b2000-01-17 11:56:27 +11001762 - Document location of Redhat PAM file in INSTALL.
Damien Millere4340be2000-09-16 13:29:08 +11001763 - Fixed X11 forwarding bug on Linux. libc advertises AF_INET6
1764 INADDR_ANY_INIT addresses via getaddrinfo, but may not be able to
Damien Miller19fe9c72000-01-17 15:23:01 +11001765 deliver (no IPv6 kernel support)
Damien Millere2192732000-01-17 13:22:55 +11001766 - Released 1.2.1pre27
Damien Millerb9b94a72000-01-17 09:52:46 +11001767
Damien Miller19fe9c72000-01-17 15:23:01 +11001768 - Fix rresvport_af failure errors (logic error in bsd-bindresvport.c)
Damien Millere4340be2000-09-16 13:29:08 +11001769 - Fix --with-ipaddr-display option test. Fix from Jarno Huuskonen
Damien Millerd426ed62000-01-17 19:22:36 +11001770 <jhuuskon@hytti.uku.fi>
Damien Millere4340be2000-09-16 13:29:08 +11001771 - Fix hang on logout if processes are still using the pty. Needs
Damien Millerb284b542000-01-17 20:55:18 +11001772 further testing.
Damien Miller66409952000-01-17 21:40:06 +11001773 - Patch from Christos Zoulas <christos@zoulas.com>
1774 - Try $prefix first when looking for OpenSSL.
1775 - Include sys/types.h when including sys/socket.h in test programs
Damien Millere4340be2000-09-16 13:29:08 +11001776 - Substitute PID directory in sshd.8. Suggestion from Andrew
Damien Millerb13c73e2000-01-17 22:02:17 +11001777 Stribblehill <a.d.stribblehill@durham.ac.uk>
Damien Miller19fe9c72000-01-17 15:23:01 +11001778
Damien Miller5eed6a22000-01-16 12:05:18 +1100177920000116
1780 - Renamed --with-xauth-path to --with-xauth
1781 - Added --with-pid-dir option
1782 - Released 1.2.1pre26
1783
Damien Miller8f926492000-01-16 18:19:25 +11001784 - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
Damien Millere4340be2000-09-16 13:29:08 +11001785 - Fixed broken bugfix for /dev/ptmx on Linux systems which lack
Damien Miller62a52ef2000-01-16 23:03:56 +11001786 openpty(). Report from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
Damien Miller8f926492000-01-16 18:19:25 +11001787
Damien Millerb29ea912000-01-15 14:12:03 +1100178820000115
1789 - Add --with-xauth-path configure directive and explicit test for
Damien Millere4340be2000-09-16 13:29:08 +11001790 /usr/openwin/bin/xauth for Solaris systems. Report from Anders
Damien Millerb29ea912000-01-15 14:12:03 +11001791 Nordby <anders@fix.no>
Damien Millere4340be2000-09-16 13:29:08 +11001792 - Fix incorrect detection of /dev/ptmx on Linux systems that lack
Damien Millerb29ea912000-01-15 14:12:03 +11001793 openpty. Report from John Seifarth <john@waw.be>
1794 - Look for intXX_t and u_intXX_t in sys/bitypes.h if they are not in
Damien Millere4340be2000-09-16 13:29:08 +11001795 sys/types.h. Fixes problems on SCO, report from Gary E. Miller
Damien Millerb29ea912000-01-15 14:12:03 +11001796 <gem@rellim.com>
1797 - Use __snprintf and __vnsprintf if they are found where snprintf and
1798 vnsprintf are lacking. Suggested by Ben Taylor <bent@shell.clark.net>
1799 and others.
1800
Damien Miller34132e52000-01-14 15:45:46 +1100180120000114
1802 - Merged OpenBSD IPv6 patch:
1803 - [sshd.c sshd.8 sshconnect.c ssh.h ssh.c servconf.h servconf.c scp.1]
1804 [scp.c packet.h packet.c login.c log.c canohost.c channels.c]
1805 [hostfile.c sshd_config]
1806 ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new
Damien Millere4340be2000-09-16 13:29:08 +11001807 features: sshd allows multiple ListenAddress and Port options. note
1808 that libwrap is not IPv6-ready. (based on patches from
Damien Miller34132e52000-01-14 15:45:46 +11001809 fujiwara@rcac.tdi.co.jp)
1810 - [ssh.c canohost.c]
Damien Millere4340be2000-09-16 13:29:08 +11001811 more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo,
Damien Miller34132e52000-01-14 15:45:46 +11001812 from itojun@
1813 - [channels.c]
1814 listen on _all_ interfaces for X11-Fwd (hints.ai_flags = AI_PASSIVE)
1815 - [packet.h]
1816 allow auth-kerberos for IPv4 only
1817 - [scp.1 sshd.8 servconf.h scp.c]
1818 document -4, -6, and 'ssh -L 2022/::1/22'
1819 - [ssh.c]
Damien Millere4340be2000-09-16 13:29:08 +11001820 'ssh @host' is illegal (null user name), from
Damien Miller34132e52000-01-14 15:45:46 +11001821 karsten@gedankenpolizei.de
1822 - [sshconnect.c]
1823 better error message
1824 - [sshd.c]
1825 allow auth-kerberos for IPv4 only
1826 - Big IPv6 merge:
1827 - Cleanup overrun in sockaddr copying on RHL 6.1
1828 - Replacements for getaddrinfo, getnameinfo, etc based on versions
1829 from patch from KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>
1830 - Replacement for missing structures on systems that lack IPv6
1831 - record_login needed to know about AF_INET6 addresses
1832 - Borrowed more code from OpenBSD: rresvport_af and requisites
1833
Damien Miller25e42562000-01-11 10:59:47 +1100183420000110
1835 - Fixes to auth-skey to enable it to use the standard OpenSSL libraries
1836
Damien Miller2edcda52000-01-07 08:56:05 +1100183720000107
1838 - New config.sub and config.guess to fix problems on SCO. Supplied
1839 by Gary E. Miller <gem@rellim.com>
Damien Millerfa824cb2000-01-07 18:51:27 +11001840 - SCO build fix from Gary E. Miller <gem@rellim.com>
Damien Miller25e42562000-01-11 10:59:47 +11001841 - Released 1.2.1pre25
Damien Miller2edcda52000-01-07 08:56:05 +11001842
Damien Miller105b7f02000-01-07 08:45:55 +1100184320000106
1844 - Documentation update & cleanup
1845 - Better KrbIV / AFS detection, based on patch from:
1846 Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
1847
Damien Miller1808f382000-01-06 12:03:12 +1100184820000105
Damien Millere4340be2000-09-16 13:29:08 +11001849 - Fixed annoying DES corruption problem. libcrypt has been
Damien Miller1808f382000-01-06 12:03:12 +11001850 overriding symbols in libcrypto. Removed libcrypt and crypt.h
1851 altogether (libcrypto includes its own crypt(1) replacement)
1852 - Added platform-specific rules for Irix 6.x. Included warning that
1853 they are untested.
1854
Damien Miller645c5982000-01-03 14:42:09 +1100185520000103
1856 - Add explicit make rules for files proccessed by fixpaths.
Damien Millere4340be2000-09-16 13:29:08 +11001857 - Fix "make install" in RPM spec files. Report from Tenkou N. Hattori
Damien Miller645c5982000-01-03 14:42:09 +11001858 <tnh@kondara.org>
Damien Millere4340be2000-09-16 13:29:08 +11001859 - Removed "nullok" directive from default PAM configuration files.
1860 Added information on enabling EmptyPasswords on openssh+PAM in
Damien Millere9c8f4d2000-01-03 20:00:52 +11001861 UPGRADING file.
Damien Miller62ab38a2000-01-03 23:41:05 +11001862 - OpenBSD CVS updates
1863 - [ssh-agent.c]
Damien Millere4340be2000-09-16 13:29:08 +11001864 cleanup_exit() for SIGTERM/SIGHUP, too. from fgsch@ and
Damien Miller62ab38a2000-01-03 23:41:05 +11001865 dgaudet@arctic.org
1866 - [sshconnect.c]
1867 compare correct version for 1.3 compat mode
Damien Miller645c5982000-01-03 14:42:09 +11001868
Damien Miller5121e3a2000-01-02 11:49:28 +1100186920000102
1870 - Prevent multiple inclusion of config.h and defines.h. Suggested
1871 by Andre Lucas <andre.lucas@dial.pipex.com>
1872 - Properly clean up on exit of ssh-agent. Patch from Dean Gaudet
1873 <dgaudet@arctic.org>
1874
Damien Miller8eb0fd61999-12-31 08:49:13 +1100187519991231
Damien Millere4340be2000-09-16 13:29:08 +11001876 - Fix password support on systems with a mixture of shadowed and
1877 non-shadowed passwords (e.g. NIS). Report and fix from
Damien Miller8eb0fd61999-12-31 08:49:13 +11001878 HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
Damien Millere4340be2000-09-16 13:29:08 +11001879 - Fix broken autoconf typedef detection. Report from Marc G.
Damien Millerf3e8be81999-12-31 08:59:04 +11001880 Fournier <marc.fournier@acadiau.ca>
Damien Miller03783f01999-12-31 09:16:40 +11001881 - Fix occasional crash on LinuxPPC. Patch from Franz Sirl
1882 <Franz.Sirl-kernel@lauterbach.com>
Damien Millere4340be2000-09-16 13:29:08 +11001883 - Prevent typedefs from being compiled more than once. Report from
Damien Millerb2532b31999-12-31 09:18:12 +11001884 Marc G. Fournier <marc.fournier@acadiau.ca>
Damien Miller3131d8b1999-12-31 09:42:24 +11001885 - Fill in ut_utaddr utmp field. Report from Benjamin Charron
1886 <iretd@bigfoot.com>
Damien Millere4340be2000-09-16 13:29:08 +11001887 - Really fix broken default path. Fix from Jim Knoble
Damien Millere7f626c1999-12-31 09:49:44 +11001888 <jmknoble@pobox.com>
Damien Milleraa7b64d1999-12-31 09:55:34 +11001889 - Remove test for quad_t. No longer needed.
Damien Miller6b85a7f2000-01-02 11:45:33 +11001890 - Released 1.2.1pre24
1891
1892 - Added support for directory-based lastlogs
1893 - Really fix typedefs, patch from Ben Taylor <bent@clark.net>
Damien Miller8eb0fd61999-12-31 08:49:13 +11001894
Damien Millerece22a81999-12-30 09:48:15 +1100189519991230
1896 - OpenBSD CVS updates:
1897 - [auth-passwd.c]
1898 check for NULL 1st
Damien Millere4340be2000-09-16 13:29:08 +11001899 - Removed most of the pam code into its own file auth-pam.[ch]. This
Damien Millere72b7af1999-12-30 15:08:44 +11001900 cleaned up sshd.c up significantly.
Damien Millere4340be2000-09-16 13:29:08 +11001901 - PAM authentication was incorrectly interpreting
Damien Miller8eb0fd61999-12-31 08:49:13 +11001902 "PermitRootLogin without-password". Report from Matthias Andree
1903 <ma@dt.e-technik.uni-dortmund.de
Damien Millere72b7af1999-12-30 15:08:44 +11001904 - Several other cleanups
Damien Miller8bdeee21999-12-30 15:50:54 +11001905 - Merged Dante SOCKS support patch from David Rankin
1906 <drankin@bohemians.lexington.ky.us>
1907 - Updated documentation with ./configure options
Damien Miller8eb0fd61999-12-31 08:49:13 +11001908 - Released 1.2.1pre23
Damien Millerece22a81999-12-30 09:48:15 +11001909
Damien Miller9550a761999-12-29 02:32:22 +1100191019991229
Damien Millere4340be2000-09-16 13:29:08 +11001911 - Applied another NetBSD portability patch from David Rankin
Damien Miller9550a761999-12-29 02:32:22 +11001912 <drankin@bohemians.lexington.ky.us>
1913 - Fix --with-default-path option.
Damien Millere4340be2000-09-16 13:29:08 +11001914 - Autodetect perl, patch from David Rankin
Damien Millere79334a1999-12-29 10:03:37 +11001915 <drankin@bohemians.lexington.ky.us>
Damien Millere4340be2000-09-16 13:29:08 +11001916 - Print whether OpenSSH was compiled with RSARef, patch from
Damien Millerd00d1611999-12-29 10:17:09 +11001917 Nalin Dahyabhai <nalin@thermo.stat.ncsu.edu>
Damien Millere4340be2000-09-16 13:29:08 +11001918 - Calls to pam_setcred, patch from Nalin Dahyabhai
Damien Millerac3a4b41999-12-29 10:25:40 +11001919 <nalin@thermo.stat.ncsu.edu>
Damien Miller95058511999-12-29 10:36:45 +11001920 - Detect missing size_t and typedef it.
Damien Miller58ca7d81999-12-29 19:56:30 +11001921 - Rename helper.[ch] to (more appropriate) bsd-misc.[ch]
1922 - Minor Makefile cleaning
Damien Miller9550a761999-12-29 02:32:22 +11001923
Damien Miller13bc0be1999-12-28 10:19:16 +1100192419991228
1925 - Replacement for getpagesize() for systems which lack it
Damien Millere4340be2000-09-16 13:29:08 +11001926 - NetBSD login.c compile fix from David Rankin
Damien Miller4ff2b9b1999-12-28 10:41:12 +11001927 <drankin@bohemians.lexington.ky.us>
1928 - Fully set ut_tv if present in utmp or utmpx
Damien Millerbeb4ba51999-12-28 15:09:35 +11001929 - Portability fixes for Irix 5.3 (now compiles OK!)
1930 - autoconf and other misc cleanups
Damien Miller74d0d4a1999-12-29 02:24:35 +11001931 - Merged AIX patch from Darren Hall <dhall@virage.org>
1932 - Cleaned up defines.h
Damien Miller06b472b1999-12-29 19:47:06 +11001933 - Released 1.2.1pre22
Damien Miller13bc0be1999-12-28 10:19:16 +11001934
Damien Millerc0d73901999-12-27 09:23:58 +1100193519991227
1936 - Automatically correct paths in manpages and configuration files. Patch
1937 and script from Andre Lucas <andre.lucas@dial.pipex.com>
1938 - Removed credits from README to CREDITS file, updated.
Damien Miller5a3e6831999-12-27 09:48:56 +11001939 - Added --with-default-path to specify custom path for server
1940 - Removed #ifdef trickery from acconfig.h into defines.h
Damien Miller373d2911999-12-27 10:45:54 +11001941 - PAM bugfix. PermitEmptyPassword was being ignored.
1942 - Fixed PAM config files to allow empty passwords if server does.
1943 - Explained spurious PAM auth warning workaround in UPGRADING
Damien Millere1276241999-12-27 11:33:56 +11001944 - Use last few chars of tty line as ut_id
Damien Miller6a5d4d61999-12-27 16:46:17 +11001945 - New SuSE RPM spec file from Chris Saia <csaia@wtower.com>
Damien Miller68e45de1999-12-27 23:54:55 +11001946 - OpenBSD CVS updates:
1947 - [packet.h auth-rhosts.c]
1948 check format string for packet_disconnect and packet_send_debug, too
1949 - [channels.c]
1950 use packet_get_maxsize for channels. consistence.
Damien Millerc0d73901999-12-27 09:23:58 +11001951
Damien Miller32b3cf21999-12-26 10:21:48 +1100195219991226
1953 - Enabled utmpx support by default for Solaris
1954 - Cleanup sshd.c PAM a little more
Damien Miller36884401999-12-26 12:26:21 +11001955 - Revised RPM package to include Jim Knoble's <jmknoble@pobox.com>
1956 X11 ssh-askpass program.
Damien Millerd49621e1999-12-26 14:04:33 +11001957 - Disable logging of PAM success and failures, PAM is verbose enough.
Damien Millere4340be2000-09-16 13:29:08 +11001958 Unfortunatly there is currently no way to disable auth failure
1959 messages. Mention this in UPGRADING file and sent message to PAM
Damien Millerd49621e1999-12-26 14:04:33 +11001960 developers
Damien Miller4f0fa561999-12-26 14:24:41 +11001961 - OpenBSD CVS update:
1962 - [ssh-keygen.1 ssh.1]
Damien Millere4340be2000-09-16 13:29:08 +11001963 remove ref to .ssh/random_seed, mention .ssh/environment in
Damien Miller4f0fa561999-12-26 14:24:41 +11001964 .Sh FILES, too
Damien Miller9673b2b1999-12-26 19:10:30 +11001965 - Released 1.2.1pre21
Damien Millere4340be2000-09-16 13:29:08 +11001966 - Fixed implicit '.' in default path, report from Jim Knoble
Damien Miller9673b2b1999-12-26 19:10:30 +11001967 <jmknoble@pobox.com>
Damien Milleraae10931999-12-26 19:38:17 +11001968 - Redhat RPM spec fixes from Jim Knoble <jmknoble@pobox.com>
Damien Miller32b3cf21999-12-26 10:21:48 +11001969
Damien Miller2e1b0821999-12-25 10:11:29 +1100197019991225
1971 - More fixes from Andre Lucas <andre.lucas@dial.pipex.com>
1972 - Cleanup of auth-passwd.c for shadow and MD5 passwords
1973 - Cleanup and bugfix of PAM authentication code
Damien Miller32b3cf21999-12-26 10:21:48 +11001974 - Released 1.2.1pre20
1975
1976 - Merged fixes from Ben Taylor <bent@clark.net>
1977 - Fixed configure support for PAM. Reported by Naz <96na@eng.cam.ac.uk>
1978 - Disabled logging of PAM password authentication failures when password
1979 is empty. (e.g start of authentication loop). Reported by Naz
1980 <96na@eng.cam.ac.uk>)
Damien Miller2e1b0821999-12-25 10:11:29 +11001981
198219991223
Damien Millere4340be2000-09-16 13:29:08 +11001983 - Merged later HPUX patch from Andre Lucas
Damien Miller2e1b0821999-12-25 10:11:29 +11001984 <andre.lucas@dial.pipex.com>
1985 - Above patch included better utmpx support from Ben Taylor
Damien Miller32b3cf21999-12-26 10:21:48 +11001986 <bent@clark.net>
Damien Miller2e1b0821999-12-25 10:11:29 +11001987
Damien Miller365199d1999-12-22 00:12:38 +1100198819991222
Damien Millere4340be2000-09-16 13:29:08 +11001989 - Fix undefined fd_set type in ssh.h from Povl H. Pedersen
Damien Miller365199d1999-12-22 00:12:38 +11001990 <pope@netguide.dk>
Damien Miller1b0c2281999-12-22 16:09:48 +11001991 - Fix login.c breakage on systems which lack ut_host in struct
1992 utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com>
Damien Miller365199d1999-12-22 00:12:38 +11001993
Damien Miller76112de1999-12-21 11:18:08 +1100199419991221
Damien Millere4340be2000-09-16 13:29:08 +11001995 - Integration of large HPUX patch from Andre Lucas
1996 <andre.lucas@dial.pipex.com>. Integrating it had a few other
Damien Miller76112de1999-12-21 11:18:08 +11001997 benefits:
1998 - Ability to disable shadow passwords at configure time
1999 - Ability to disable lastlog support at configure time
2000 - Support for IP address in $DISPLAY
Damien Millerf039bad1999-12-21 20:57:20 +11002001 - OpenBSD CVS update:
2002 - [sshconnect.c]
2003 say "REMOTE HOST IDENTIFICATION HAS CHANGED"
Damien Millercb7e5f91999-12-21 21:03:09 +11002004 - Fix DISABLE_SHADOW support
2005 - Allow MD5 passwords even if shadow passwords are disabled
Damien Millere8852911999-12-21 22:50:50 +11002006 - Release 1.2.1pre19
Damien Miller76112de1999-12-21 11:18:08 +11002007
Damien Millerc4c647f1999-12-18 20:54:52 +1100200819991218
Damien Millere4340be2000-09-16 13:29:08 +11002009 - Redhat init script patch from Chun-Chung Chen
Damien Millerc4c647f1999-12-18 20:54:52 +11002010 <cjj@u.washington.edu>
Damien Millerfdb7caf1999-12-18 20:57:40 +11002011 - Avoid breakage on systems without IPv6 headers
Damien Millerc4c647f1999-12-18 20:54:52 +11002012
Damien Millerab8a4da1999-12-16 13:05:30 +1100201319991216
Damien Millere4340be2000-09-16 13:29:08 +11002014 - Makefile changes for Solaris from Peter Kocks
Damien Millerab8a4da1999-12-16 13:05:30 +11002015 <peter.kocks@baygate.com>
Damien Miller5e7c10e1999-12-16 13:18:04 +11002016 - Minor updates to docs
2017 - Merged OpenBSD CVS changes:
2018 - [authfd.c ssh-agent.c]
2019 keysize warnings talk about identity files
2020 - [packet.c]
2021 "Connection closed by x.x.x.x": fatal() -> log()
Damien Millere4340be2000-09-16 13:29:08 +11002022 - Correctly handle empty passwords in shadow file. Patch from:
Damien Miller8f9d5071999-12-16 15:10:45 +11002023 "Chris, the Young One" <cky@pobox.com>
2024 - Released 1.2.1pre18
Damien Millerab8a4da1999-12-16 13:05:30 +11002025
Damien Miller84093e91999-12-15 09:06:28 +1100202619991215
2027 - Integrated patchs from Juergen Keil <jk@tools.de>
2028 - Avoid void* pointer arithmatic
2029 - Use LDFLAGS correctly
Damien Miller864ea591999-12-15 11:04:25 +11002030 - Fix SIGIO error in scp
2031 - Simplify status line printing in scp
Damien Millere4340be2000-09-16 13:29:08 +11002032 - Added better test for inline functions compiler support from
Damien Miller3b9d5e91999-12-15 09:34:31 +11002033 Darren_Hall@progressive.com
Damien Miller84093e91999-12-15 09:06:28 +11002034
Damien Millera34a28b1999-12-14 10:47:15 +1100203519991214
2036 - OpenBSD CVS Changes
2037 - [canohost.c]
Damien Millere4340be2000-09-16 13:29:08 +11002038 fix get_remote_port() and friends for sshd -i;
Damien Millera34a28b1999-12-14 10:47:15 +11002039 Holger.Trapp@Informatik.TU-Chemnitz.DE
2040 - [mpaux.c]
2041 make code simpler. no need for memcpy. niels@ ok
2042 - [pty.c]
2043 namebuflen not sizeof namebuflen; bnd@ep-ag.com via djm@mindrot.org
2044 fix proto; markus
2045 - [ssh.1]
2046 typo; mark.baushke@solipsa.com
2047 - [channels.c ssh.c ssh.h sshd.c]
2048 type conflict for 'extern Type *options' in channels.c; dot@dotat.at
2049 - [sshconnect.c]
2050 move checking of hostkey into own function.
2051 - [version.h]
2052 OpenSSH-1.2.1
Damien Miller36b339a1999-12-14 10:54:47 +11002053 - Clean up broken includes in pty.c
Damien Miller6ae00d61999-12-14 15:43:03 +11002054 - Some older systems don't have poll.h, they use sys/poll.h instead
2055 - Doc updates
Damien Millera34a28b1999-12-14 10:47:15 +11002056
Damien Millerc6b3bbe1999-12-13 08:27:33 +1100205719991211
Damien Millere4340be2000-09-16 13:29:08 +11002058 - Fix compilation on systems with AFS. Reported by
Damien Millerc6b3bbe1999-12-13 08:27:33 +11002059 aloomis@glue.umd.edu
Damien Millere4340be2000-09-16 13:29:08 +11002060 - Fix installation on Solaris. Reported by
Damien Millerc6b3bbe1999-12-13 08:27:33 +11002061 Gordon Rowell <gordonr@gormand.com.au>
2062 - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com,
2063 patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
2064 - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com>
2065 - Compile fix from David Agraz <dagraz@jahoopa.com>
2066 - Avoid compiler warning in bsd-snprintf.c
Damien Millere4340be2000-09-16 13:29:08 +11002067 - Added pam_limits.so to default PAM config. Suggested by
Damien Millerc6b3bbe1999-12-13 08:27:33 +11002068 Jim Knoble <jmknoble@pobox.com>
2069
Damien Millerbf1c9b21999-12-09 10:16:54 +1100207019991209
2071 - Import of patch from Ben Taylor <bent@clark.net>:
2072 - Improved PAM support
2073 - "uninstall" rule for Makefile
2074 - utmpx support
2075 - Should fix PAM problems on Solaris
Damien Miller50945fa1999-12-09 10:31:37 +11002076 - OpenBSD CVS updates:
2077 - [readpass.c]
2078 avoid stdio; based on work by markus, millert, and I
2079 - [sshd.c]
2080 make sure the client selects a supported cipher
2081 - [sshd.c]
Damien Millere4340be2000-09-16 13:29:08 +11002082 fix sighup handling. accept would just restart and daemon handled
2083 sighup only after the next connection was accepted. use poll on
Damien Miller50945fa1999-12-09 10:31:37 +11002084 listen sock now.
2085 - [sshd.c]
2086 make that a fatal
Damien Millerd7f66151999-12-09 10:48:58 +11002087 - Applied patch from David Rankin <drankin@bohemians.lexington.ky.us>
2088 to fix libwrap support on NetBSD
Damien Miller6646bad1999-12-09 10:42:10 +11002089 - Released 1.2pre17
Damien Millerbf1c9b21999-12-09 10:16:54 +11002090
Damien Millerfce16481999-12-08 08:53:52 +1100209119991208
Damien Millere4340be2000-09-16 13:29:08 +11002092 - Compile fix for Solaris with /dev/ptmx from
Damien Millerfce16481999-12-08 08:53:52 +11002093 David Agraz <dagraz@jahoopa.com>
2094
Damien Miller0c078c61999-12-07 14:53:57 +1100209519991207
2096 - sshd Redhat init script patch from Jim Knoble <jmknoble@pobox.com>
2097 fixes compatability with 4.x and 5.x
Damien Miller3bc14dd1999-12-07 14:54:53 +11002098 - Fixed default SSH_ASKPASS
Damien Millere4340be2000-09-16 13:29:08 +11002099 - Fix PAM account and session being called multiple times. Problem
Damien Millereabf3411999-12-07 14:56:27 +11002100 reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>
Damien Miller037a0dc1999-12-07 15:38:31 +11002101 - Merged more OpenBSD changes:
2102 - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c]
Damien Millere4340be2000-09-16 13:29:08 +11002103 move atomicio into it's own file. wrap all socket write()s which
Damien Miller037a0dc1999-12-07 15:38:31 +11002104 were doing write(sock, buf, len) != len, with atomicio() calls.
2105 - [auth-skey.c]
2106 fd leak
2107 - [authfile.c]
2108 properly name fd variable
2109 - [channels.c]
2110 display great hatred towards strcpy
2111 - [pty.c pty.h sshd.c]
2112 use openpty() if it exists (it does on BSD4_4)
2113 - [tildexpand.c]
2114 check for ~ expansion past MAXPATHLEN
2115 - Modified helper.c to use new atomicio function.
2116 - Reformat Makefile a little
2117 - Moved RC4 routines from rc4.[ch] into helper.c
2118 - Added autoconf code to detect /dev/ptmx (Solaris) and /dev/ptc (AIX)
Damien Milleraf2604a1999-12-07 16:21:40 +11002119 - Updated SuSE spec from Chris Saia <csaia@wtower.com>
2120 - Tweaked Redhat spec
Damien Millerf5d69a51999-12-07 16:55:04 +11002121 - Clean up bad imports of a few files (forgot -kb)
2122 - Released 1.2pre16
Damien Miller0c078c61999-12-07 14:53:57 +11002123
Damien Millerdc33fc31999-12-04 20:24:48 +1100212419991204
2125 - Small cleanup of PAM code in sshd.c
Damien Milleraae6c611999-12-06 11:47:28 +11002126 - Merged OpenBSD CVS changes:
2127 - [auth-krb4.c auth-passwd.c auth-skey.c ssh.h]
2128 move skey-auth from auth-passwd.c to auth-skey.c, same for krb4
2129 - [auth-rsa.c]
2130 warn only about mismatch if key is _used_
2131 warn about keysize-mismatch with log() not error()
2132 channels.c readconf.c readconf.h ssh.c ssh.h sshconnect.c
2133 ports are u_short
2134 - [hostfile.c]
2135 indent, shorter warning
2136 - [nchan.c]
2137 use error() for internal errors
2138 - [packet.c]
2139 set loglevel for SSH_MSG_DISCONNECT to log(), not fatal()
2140 serverloop.c
2141 indent
2142 - [ssh-add.1 ssh-add.c ssh.h]
2143 document $SSH_ASKPASS, reasonable default
2144 - [ssh.1]
2145 CheckHostIP is not available for connects via proxy command
2146 - [sshconnect.c]
2147 typo
2148 easier to read client code for passwd and skey auth
2149 turn of checkhostip for proxy connects, since we don't know the remote ip
Damien Millerdc33fc31999-12-04 20:24:48 +11002150
Damien Miller42b81ff1999-11-26 12:21:24 +1100215119991126
2152 - Add definition for __P()
2153 - Added [v]snprintf() replacement for systems that lack it
2154
Damien Miller78224a01999-11-25 11:55:45 +1100215519991125
2156 - More reformatting merged from OpenBSD CVS
2157 - Merged OpenBSD CVS changes:
2158 - [channels.c]
2159 fix packet_integrity_check() for !have_hostname_in_open.
2160 report from mrwizard@psu.edu via djm@ibs.com.au
2161 - [channels.c]
2162 set SO_REUSEADDR and SO_LINGER for forwarded ports.
2163 chip@valinux.com via damien@ibs.com.au
2164 - [nchan.c]
2165 it's not an error() if shutdown_write failes in nchan.
2166 - [readconf.c]
2167 remove dead #ifdef-0-code
2168 - [readconf.c servconf.c]
2169 strcasecmp instead of tolower
2170 - [scp.c]
2171 progress meter overflow fix from damien@ibs.com.au
2172 - [ssh-add.1 ssh-add.c]
2173 SSH_ASKPASS support
2174 - [ssh.1 ssh.c]
2175 postpone fork_after_authentication until command execution,
2176 request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
2177 plus: use daemon() for backgrounding
Damien Millerd8087f61999-11-25 12:31:26 +11002178 - Added BSD compatible install program and autoconf test, thanks to
2179 Niels Kristian Bech Jensen <nkbj@image.dk>
2180 - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
Damien Miller063fdf81999-11-25 13:08:31 +11002181 - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
Damien Millerbf3f6ef1999-11-25 13:50:10 +11002182 - Release 1.2pre15
Damien Miller78224a01999-11-25 11:55:45 +11002183
Damien Miller95def091999-11-25 00:26:21 +1100218419991124
2185 - Merged very large OpenBSD source code reformat
2186 - OpenBSD CVS updates
2187 - [channels.c cipher.c compat.c log-client.c scp.c serverloop.c]
2188 [ssh.h sshd.8 sshd.c]
2189 syslog changes:
2190 * Unified Logmessage for all auth-types, for success and for failed
2191 * Standard connections get only ONE line in the LOG when level==LOG:
2192 Auth-attempts are logged only, if authentication is:
2193 a) successfull or
2194 b) with passwd or
2195 c) we had more than AUTH_FAIL_LOG failues
2196 * many log() became verbose()
2197 * old behaviour with level=VERBOSE
2198 - [readconf.c readconf.h ssh.1 ssh.h sshconnect.c sshd.c]
2199 tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
2200 messages. allows use of s/key in windows (ttssh, securecrt) and
2201 ssh-1.2.27 clients without 'ssh -v', ok: niels@
2202 - [sshd.8]
2203 -V, for fallback to openssh in SSH2 compatibility mode
2204 - [sshd.c]
2205 fix sigchld race; cjc5@po.cwru.edu
2206
Damien Miller294df781999-11-23 10:11:29 +1100220719991123
2208 - Added SuSE package files from Chris Saia <csaia@wtower.com>
Damien Miller3744b511999-11-23 11:24:32 +11002209 - Restructured package-related files under packages/*
Damien Miller294df781999-11-23 10:11:29 +11002210 - Added generic PAM config
Damien Miller3744b511999-11-23 11:24:32 +11002211 - Numerous little Solaris fixes
Damien Miller4d2f15f1999-11-23 12:36:29 +11002212 - Add recommendation to use GNU make to INSTALL document
Damien Miller294df781999-11-23 10:11:29 +11002213
Damien Miller22218721999-11-22 12:51:42 +1100221419991122
2215 - Make <enter> close gnome-ssh-askpass (Debian bug #50299)
Damien Miller83df0691999-11-22 13:22:29 +11002216 - OpenBSD CVS Changes
Damien Millere4340be2000-09-16 13:29:08 +11002217 - [ssh-keygen.c]
2218 don't create ~/.ssh only if the user wants to store the private
2219 key there. show fingerprint instead of public-key after
Damien Miller83df0691999-11-22 13:22:29 +11002220 keygeneration. ok niels@
Damien Millerb3ca3aa1999-11-22 13:57:07 +11002221 - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h
Damien Miller859cec01999-11-22 14:27:24 +11002222 - Added timersub() macro
Damien Millerb3ca3aa1999-11-22 13:57:07 +11002223 - Tidy RCSIDs of bsd-*.c
Damien Millere4340be2000-09-16 13:29:08 +11002224 - Added autoconf test and macro to deal with old PAM libraries
Damien Miller859cec01999-11-22 14:27:24 +11002225 pam_strerror definition (one arg vs two).
Damien Millerd71b12e1999-11-22 15:24:34 +11002226 - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>)
Damien Millere4340be2000-09-16 13:29:08 +11002227 - Retry /dev/urandom reads interrupted by signal (report from
Damien Millerd71b12e1999-11-22 15:24:34 +11002228 Robert Hardy <rhardy@webcon.net>)
Damien Millerd7702521999-11-22 16:11:05 +11002229 - Added a setenv replacement for systems which lack it
Damien Millerd733c911999-11-22 18:11:23 +11002230 - Only display public key comment when presenting ssh-askpass dialog
2231 - Released 1.2pre14
Damien Miller22218721999-11-22 12:51:42 +11002232
Damien Millere4340be2000-09-16 13:29:08 +11002233 - Configure, Make and changelog corrections from Tudor Bosman
Damien Millerf7c0f821999-11-22 22:31:49 +11002234 <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk>
2235
Damien Miller6162d121999-11-21 13:23:52 +1100223619991121
Damien Miller83df0691999-11-22 13:22:29 +11002237 - OpenBSD CVS Changes:
Damien Miller22218721999-11-22 12:51:42 +11002238 - [channels.c]
2239 make this compile, bad markus
2240 - [log.c readconf.c servconf.c ssh.h]
2241 bugfix: loglevels are per host in clientconfig,
2242 factor out common log-level parsing code.
2243 - [servconf.c]
2244 remove unused index (-Wall)
2245 - [ssh-agent.c]
2246 only one 'extern char *__progname'
2247 - [sshd.8]
2248 document SIGHUP, -Q to synopsis
2249 - [sshconnect.c serverloop.c sshd.c packet.c packet.h]
2250 [channels.c clientloop.c]
2251 SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
2252 [hope this time my ISP stays alive during commit]
2253 - [OVERVIEW README] typos; green@freebsd
2254 - [ssh-keygen.c]
2255 replace xstrdup+strcat with strlcat+fixed buffer, fixes OF (bad me)
2256 exit if writing the key fails (no infinit loop)
2257 print usage() everytime we get bad options
2258 - [ssh-keygen.c] overflow, djm@mindrot.org
2259 - [sshd.c] fix sigchld race; cjc5@po.cwru.edu
Damien Millere4340be2000-09-16 13:29:08 +11002260
Damien Millerc6398ef1999-11-20 12:18:40 +1100226119991120
Damien Millere4340be2000-09-16 13:29:08 +11002262 - Merged more Solaris support from Marc G. Fournier
Damien Millerc6398ef1999-11-20 12:18:40 +11002263 <marc.fournier@acadiau.ca>
2264 - Wrote autoconf tests for integer bit-types
2265 - Fixed enabling kerberos support
Damien Millere4340be2000-09-16 13:29:08 +11002266 - Fix segfault in ssh-keygen caused by buffer overrun in filename
Damien Millerf58db381999-11-20 17:02:56 +11002267 handling.
Damien Millerc6398ef1999-11-20 12:18:40 +11002268
Damien Miller5bbbd361999-11-19 07:56:21 +1100226919991119
2270 - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>
Damien Miller23b78391999-11-19 08:25:48 +11002271 - Merged OpenBSD CVS changes
2272 - [auth-rhosts.c auth-rsa.c ssh-agent.c sshconnect.c sshd.c]
2273 more %d vs. %s in fmt-strings
2274 - [authfd.c]
2275 Integers should not be printed with %s
Damien Miller58fc4731999-11-19 12:05:01 +11002276 - EGD uses a socket, not a named pipe. Duh.
2277 - Fix includes in fingerprint.c
Damien Millerdc9365b1999-11-19 12:34:14 +11002278 - Fix scp progress bar bug again.
Damien Millere4340be2000-09-16 13:29:08 +11002279 - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of
Damien Miller18ac1711999-11-19 12:43:19 +11002280 David Rankin <drankin@bohemians.lexington.ky.us>
Damien Miller80297751999-11-19 13:03:25 +11002281 - Added autoconf option to enable Kerberos 4 support (untested)
2282 - Added autoconf option to enable AFS support (untested)
2283 - Added autoconf option to enable S/Key support (untested)
2284 - Added autoconf option to enable TCP wrappers support (compiles OK)
Damien Miller04f80141999-11-19 15:32:34 +11002285 - Renamed BSD helper function files to bsd-*
Damien Millere4340be2000-09-16 13:29:08 +11002286 - Added tests for login and daemon and enable OpenBSD replacements for
Damien Millerdd1c7ba1999-11-19 15:53:20 +11002287 when they are absent.
2288 - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu>
Damien Miller5bbbd361999-11-19 07:56:21 +11002289
Damien Miller81428f91999-11-18 09:28:11 +1100229019991118
2291 - Merged OpenBSD CVS changes
2292 - [scp.c] foregroundproc() in scp
2293 - [sshconnect.h] include fingerprint.h
Damien Millere4340be2000-09-16 13:29:08 +11002294 - [sshd.c] bugfix: the log() for passwd-auth escaped during logging
Damien Miller81428f91999-11-18 09:28:11 +11002295 changes.
Damien Miller6ee95641999-11-18 11:35:13 +11002296 - [ssh.1] Spell my name right.
Damien Miller81428f91999-11-18 09:28:11 +11002297 - Added openssh.com info to README
2298
Damien Miller10f6f6b1999-11-17 17:29:08 +1100229919991117
2300 - Merged OpenBSD CVS changes
2301 - [ChangeLog.Ylonen] noone needs this anymore
2302 - [authfd.c] close-on-exec for auth-socket, ok deraadt
Damien Millere4340be2000-09-16 13:29:08 +11002303 - [hostfile.c]
2304 in known_hosts key lookup the entry for the bits does not need
2305 to match, all the information is contained in n and e. This
2306 solves the problem with buggy servers announcing the wrong
Damien Miller10f6f6b1999-11-17 17:29:08 +11002307 modulus length. markus and me.
Damien Millere4340be2000-09-16 13:29:08 +11002308 - [serverloop.c]
2309 bugfix: check for space if child has terminated, from:
Damien Miller10f6f6b1999-11-17 17:29:08 +11002310 iedowse@maths.tcd.ie
2311 - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c]
2312 [fingerprint.c fingerprint.h]
2313 rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>
2314 - [ssh-agent.1] typo
2315 - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@
Damien Millere4340be2000-09-16 13:29:08 +11002316 - [sshd.c]
Damien Miller10f6f6b1999-11-17 17:29:08 +11002317 force logging to stderr while loading private key file
2318 (lost while converting to new log-levels)
2319
Damien Miller7e8e8201999-11-16 13:37:16 +1100232019991116
2321 - Fix some Linux libc5 problems reported by Miles Wilson <mw@mctitle.com>
2322 - Merged OpenBSD CVS changes:
2323 - [auth-rh-rsa.c auth-rsa.c authfd.c authfd.h hostfile.c mpaux.c]
2324 [mpaux.h ssh-add.c ssh-agent.c ssh.h ssh.c sshd.c]
2325 the keysize of rsa-parameter 'n' is passed implizit,
2326 a few more checks and warnings about 'pretended' keysizes.
2327 - [cipher.c cipher.h packet.c packet.h sshd.c]
2328 remove support for cipher RC4
2329 - [ssh.c]
2330 a note for legay systems about secuity issues with permanently_set_uid(),
2331 the private hostkey and ptrace()
2332 - [sshconnect.c]
2333 more detailed messages about adding and checking hostkeys
2334
Damien Millerd05a2471999-11-15 14:25:30 +1100233519991115
2336 - Merged OpenBSD CVS changes:
Damien Millere4340be2000-09-16 13:29:08 +11002337 - [ssh-add.c] change passphrase loop logic and remove ref to
Damien Millerd05a2471999-11-15 14:25:30 +11002338 $DISPLAY, ok niels
2339 - Changed to ssh-add.c broke askpass support. Revised it to be a little more
Damien Millere4340be2000-09-16 13:29:08 +11002340 modular.
Damien Millerd05a2471999-11-15 14:25:30 +11002341 - Revised autoconf support for enabling/disabling askpass support.
Damien Miller2ccf6611999-11-15 15:25:10 +11002342 - Merged more OpenBSD CVS changes:
Damien Millerbe484b52000-07-15 14:14:16 +10002343 [auth-krb4.c]
2344 - disconnect if getpeername() fails
2345 - missing xfree(*client)
2346 [canohost.c]
2347 - disconnect if getpeername() fails
2348 - fix comment: we _do_ disconnect if ip-options are set
2349 [sshd.c]
2350 - disconnect if getpeername() fails
2351 - move checking of remote port to central place
2352 [auth-rhosts.c] move checking of remote port to central place
2353 [log-server.c] avoid extra fd per sshd, from millert@
2354 [readconf.c] print _all_ bad config-options in ssh(1), too
2355 [readconf.h] print _all_ bad config-options in ssh(1), too
2356 [ssh.c] print _all_ bad config-options in ssh(1), too
2357 [sshconnect.c] disconnect if getpeername() fails
Damien Miller2ccf6611999-11-15 15:25:10 +11002358 - OpenBSD's changes to sshd.c broke the PAM stuff, re-merged it.
Damien Miller3bd49ec1999-11-15 15:40:55 +11002359 - Various small cleanups to bring diff (against OpenBSD) size down.
Damien Miller3f905871999-11-15 17:10:57 +11002360 - Merged more Solaris compability from Marc G. Fournier
2361 <marc.fournier@acadiau.ca>
2362 - Wrote autoconf tests for __progname symbol
Damien Miller36682061999-11-15 17:19:24 +11002363 - RPM spec file fixes from Jim Knoble <jmknoble@pobox.com>
Damien Miller2e8b1c81999-11-15 23:33:56 +11002364 - Released 1.2pre12
2365
2366 - Another OpenBSD CVS update:
2367 - [ssh-keygen.1] fix .Xr
Damien Millerd05a2471999-11-15 14:25:30 +11002368
Damien Miller0a6e6681999-11-15 09:56:06 +1100236919991114
2370 - Solaris compilation fixes (still imcomplete)
2371
Damien Millerb0284381999-11-13 13:30:28 +1100237219991113
Damien Miller192bd011999-11-13 23:56:35 +11002373 - Build patch from Niels Kristian Bech Jensen <nkbj@image.dk>
2374 - Don't install config files if they already exist
2375 - Fix inclusion of additional preprocessor directives from acconfig.h
Damien Millerb0284381999-11-13 13:30:28 +11002376 - Removed redundant inclusions of config.h
Damien Millerc6d5ce81999-11-15 16:01:07 +11002377 - Added 'Obsoletes' lines to RPM spec file
Damien Millerb0284381999-11-13 13:30:28 +11002378 - Merged OpenBSD CVS changes:
2379 - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels
Damien Millere4340be2000-09-16 13:29:08 +11002380 - [scp.c] fix overflow reported by damien@ibs.com.au: off_t
Damien Millerb0284381999-11-13 13:30:28 +11002381 totalsize, ok niels,aaron
Damien Millere4340be2000-09-16 13:29:08 +11002382 - Delay fork (-f option) in ssh until after port forwarded connections
Damien Millerb0284381999-11-13 13:30:28 +11002383 have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi>
Damien Miller2cb210f1999-11-13 15:40:10 +11002384 - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de>
2385 - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled
Damien Miller192bd011999-11-13 23:56:35 +11002386 - Tidied default config file some more
2387 - Revised Redhat initscript to fix bug: sshd (re)start would fail
2388 if executed from inside a ssh login.
Damien Millerb0284381999-11-13 13:30:28 +11002389
Damien Miller776af5d1999-11-12 08:49:09 +1100239019991112
2391 - Merged changes from OpenBSD CVS
2392 - [sshd.c] session_key_int may be zero
Damien Miller32265091999-11-12 11:33:04 +11002393 - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config]
Damien Millere4340be2000-09-16 13:29:08 +11002394 IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok
Damien Miller32265091999-11-12 11:33:04 +11002395 deraadt,millert
2396 - Brought default sshd_config more in line with OpenBSD's
Damien Millerb9a692d1999-11-12 12:09:36 +11002397 - Grab server in gnome-ssh-askpass (Debian bug #49872)
2398 - Released 1.2pre10
Damien Miller776af5d1999-11-12 08:49:09 +11002399
Damien Millerb5f89271999-11-12 14:35:58 +11002400 - Added INSTALL documentation
Damien Miller6d7b2cd1999-11-12 15:19:27 +11002401 - Merged yet more changes from OpenBSD CVS
2402 - [auth-rh-rsa.c auth-rhosts.c auth-rsa.c channels.c clientloop.c]
2403 [ssh.c ssh.h sshconnect.c sshd.c]
2404 make all access to options via 'extern Options options'
2405 and 'extern ServerOptions options' respectively;
2406 options are no longer passed as arguments:
2407 * make options handling more consistent
2408 * remove #include "readconf.h" from ssh.h
2409 * readconf.h is only included if necessary
2410 - [mpaux.c] clear temp buffer
2411 - [servconf.c] print _all_ bad options found in configfile
Damien Miller3d1b22c1999-11-12 15:46:08 +11002412 - Make ssh-askpass support optional through autoconf
Damien Miller9c8da3c1999-11-12 16:28:02 +11002413 - Fix nasty division-by-zero error in scp.c
2414 - Released 1.2pre11
Damien Millerb5f89271999-11-12 14:35:58 +11002415
Damien Millerab18c411999-11-11 10:40:23 +1100241619991111
2417 - Added (untested) Entropy Gathering Daemon (EGD) support
Damien Miller4236f6e1999-11-12 12:22:31 +11002418 - Fixed /dev/urandom fd leak (Debian bug #49722)
Damien Miller33e511e1999-11-11 11:43:13 +11002419 - Merged OpenBSD CVS changes:
2420 - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
2421 - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
2422 - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
Damien Millere4340be2000-09-16 13:29:08 +11002423 - Fix integer overflow which was messing up scp's progress bar for large
Damien Millerc4c647f1999-12-18 20:54:52 +11002424 file transfers. Fix submitted to OpenBSD developers. Report and fix
2425 from Kees Cook <cook@cpoint.net>
Damien Miller5ce662a1999-11-11 17:57:39 +11002426 - Merged more OpenBSD CVS changes:
Damien Millere4340be2000-09-16 13:29:08 +11002427 - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal()
Damien Miller5ce662a1999-11-11 17:57:39 +11002428 + krb-cleanup cleanup
2429 - [clientloop.c log-client.c log-server.c ]
2430 [readconf.c readconf.h servconf.c servconf.h ]
2431 [ssh.1 ssh.c ssh.h sshd.8]
2432 add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
2433 obsoletes QuietMode and FascistLogging in sshd.
Damien Miller776af5d1999-11-12 08:49:09 +11002434 - [sshd.c] fix fatal/assert() bug reported by damien@ibs.com.au:
2435 allow session_key_int != sizeof(session_key)
2436 [this should fix the pre-assert-removal-core-files]
2437 - Updated default config file to use new LogLevel option and to improve
2438 readability
2439
Damien Millerb77870f1999-11-10 12:48:08 +1100244019991110
Damien Miller4236f6e1999-11-12 12:22:31 +11002441 - Merged several minor fixes:
Damien Millerb77870f1999-11-10 12:48:08 +11002442 - ssh-agent commandline parsing
2443 - RPM spec file now installs ssh setuid root
2444 - Makefile creates libdir
Damien Millerab18c411999-11-11 10:40:23 +11002445 - Merged beginnings of Solaris compability from Marc G. Fournier
2446 <marc.fournier@acadiau.ca>
Damien Millerb77870f1999-11-10 12:48:08 +11002447
Damien Millerc7b38ce1999-11-09 10:28:04 +1100244819991109
2449 - Autodetection of SSL/Crypto library location via autoconf
2450 - Fixed location of ssh-askpass to follow autoconf
2451 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
2452 - Autodetection of RSAref library for US users
2453 - Minor doc updates
Damien Millerda217a01999-11-09 10:35:52 +11002454 - Merged OpenBSD CVS changes:
2455 - [rsa.c] bugfix: use correct size for memset()
2456 - [sshconnect.c] warn if announced size of modulus 'n' != real size
Damien Miller742d2cb1999-11-09 14:28:26 +11002457 - Added GNOME passphrase requestor (use --with-gnome-askpass)
Damien Miller3f51bf51999-11-09 14:46:02 +11002458 - RPM build now creates subpackages
Damien Miller74389c91999-11-09 15:03:01 +11002459 - Released 1.2pre9
Damien Millerc7b38ce1999-11-09 10:28:04 +11002460
Damien Miller356a0b01999-11-08 15:30:59 +1100246119991108
2462 - Removed debian/ directory. This is now being maintained separately.
2463 - Added symlinks for slogin in RPM spec file
2464 - Fixed permissions on manpages in RPM spec file
2465 - Added references to required libraries in README file
2466 - Removed config.h.in from CVS
2467 - Removed pwdb support (better pluggable auth is provided by glibc)
2468 - Made PAM and requisite libdl optional
2469 - Removed lots of unnecessary checks from autoconf
2470 - Added support and autoconf test for openpty() function (Unix98 pty support)
2471 - Fix for scp not finding ssh if not installed as /usr/bin/ssh
2472 - Added TODO file
2473 - Merged parts of Debian patch From Phil Hands <phil@hands.com>:
2474 - Added ssh-askpass program
2475 - Added ssh-askpass support to ssh-add.c
2476 - Create symlinks for slogin on install
2477 - Fix "distclean" target in makefile
2478 - Added example for ssh-agent to manpage
2479 - Added support for PAM_TEXT_INFO messages
2480 - Disable internal /etc/nologin support if PAM enabled
2481 - Merged latest OpenBSD CVS changes:
Damien Millerfd7c9111999-11-08 16:15:55 +11002482 - [all] replace assert() with error, fatal or packet_disconnect
Damien Miller356a0b01999-11-08 15:30:59 +11002483 - [sshd.c] don't send fail-msg but disconnect if too many authentication
2484 failures
Damien Miller356a0b01999-11-08 15:30:59 +11002485 - [sshd.c] remove unused argument. ok dugsong
2486 - [sshd.c] typo
2487 - [rsa.c] clear buffers used for encryption. ok: niels
2488 - [rsa.c] replace assert() with error, fatal or packet_disconnect
Damien Miller5ac5f1c1999-11-08 15:50:14 +11002489 - [auth-krb4.c] remove unused argument. ok dugsong
Damien Miller356a0b01999-11-08 15:30:59 +11002490 - Fixed coredump after merge of OpenBSD rsa.c patch
Damien Millere8d90681999-11-08 18:09:57 +11002491 - Released 1.2pre8
Damien Miller356a0b01999-11-08 15:30:59 +11002492
Damien Miller0aa8e531999-11-02 19:05:02 +1100249319991102
2494 - Merged change from OpenBSD CVS
2495 - One-line cleanup in sshd.c
2496
Damien Miller744da801999-10-30 09:12:25 +1000249719991030
2498 - Integrated debian package support from Dan Brosemer <odin@linuxfreak.com>
Damien Miller1e4772c1999-10-30 11:39:56 +10002499 - Merged latest updates for OpenBSD CVS:
2500 - channels.[ch] - remove broken x11 fix and document istate/ostate
2501 - ssh-agent.c - call setsid() regardless of argv[]
2502 - ssh.c - save a few lines when disabling rhosts-{rsa-}auth
2503 - Documentation cleanups
2504 - Renamed README -> README.Ylonen
2505 - Renamed README.openssh ->README
Damien Miller744da801999-10-30 09:12:25 +10002506
Damien Miller070f7a11999-10-29 10:29:29 +1000250719991029
2508 - Renamed openssh* back to ssh* at request of Theo de Raadt
2509 - Incorporated latest changes from OpenBSD's CVS
2510 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
2511 - Integrated PAM env patch from Nalin Dahyabhai <nalin.dahyabhai@pobox.com>
Damien Miller07a826d1999-10-29 11:49:20 +10002512 - Make distclean now removed configure script
2513 - Improved PAM logging
2514 - Added some debug() calls for PAM
Damien Miller65b3c131999-10-29 12:37:01 +10002515 - Removed redundant subdirectories
Damien Millere4340be2000-09-16 13:29:08 +11002516 - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for
Damien Miller65b3c131999-10-29 12:37:01 +10002517 building on Debian.
Damien Millerd0562b31999-10-29 13:09:40 +10002518 - Fixed off-by-one error in PAM env patch
2519 - Released 1.2pre6
Damien Miller070f7a11999-10-29 10:29:29 +10002520
Damien Miller7f6ea021999-10-28 13:25:17 +1000252119991028
2522 - Further PAM enhancements.
2523 - Much cleaner
2524 - Now uses account and session modules for all logins.
2525 - Integrated patch from Dan Brosemer <odin@linuxfreak.com>
2526 - Build fixes
2527 - Autoconf
2528 - Change binary names to open*
2529 - Fixed autoconf script to detect PAM on RH6.1
2530 - Added tests for libpwdb, and OpenBSD functions to autoconf
Damien Millereff18d61999-10-28 14:14:38 +10002531 - Released 1.2pre4
Damien Miller29b5a591999-10-28 15:46:27 +10002532
2533 - Imported latest OpenBSD CVS code
2534 - Updated README.openssh
Damien Miller34d0b611999-10-28 17:51:40 +10002535 - Released 1.2pre5
Damien Miller29b5a591999-10-28 15:46:27 +10002536
Damien Miller7f6ea021999-10-28 13:25:17 +1000253719991027
2538 - Adapted PAM patch.
2539 - Released 1.0pre2
Damien Millerd4a8b7e1999-10-27 13:42:43 +10002540
Damien Miller7f6ea021999-10-28 13:25:17 +10002541 - Excised my buggy replacements for strlcpy and mkdtemp
2542 - Imported correct OpenBSD strlcpy and mkdtemp routines.
2543 - Reduced arc4random_stir entropy read to 32 bytes (256 bits)
2544 - Picked up correct version number from OpenBSD
2545 - Added sshd.pam PAM configuration file
2546 - Added sshd.init Redhat init script
2547 - Added openssh.spec RPM spec file
2548 - Released 1.2pre3
Damien Millerd4a8b7e1999-10-27 13:42:43 +10002549
Damien Miller7f6ea021999-10-28 13:25:17 +1000255019991026
2551 - Fixed include paths of OpenSSL functions
2552 - Use OpenSSL MD5 routines
2553 - Imported RC4 code from nanocrypt
2554 - Wrote replacements for OpenBSD arc4random* functions
2555 - Wrote replacements for strlcpy and mkdtemp
2556 - Released 1.0pre1