blob: 6563597ac0814223097fda0b423221a88178132e [file] [log] [blame]
Damien Miller2e774462010-06-26 09:30:47 +1000120100626
2 - (djm) OpenBSD CVS Sync
3 - djm@cvs.openbsd.org 2010/05/21 05:00:36
4 [misc.c]
5 colon() returns char*, so s/return (0)/return NULL/
Damien Miller4fe686d2010-06-26 09:36:10 +10006 - markus@cvs.openbsd.org 2010/06/08 21:32:19
7 [ssh-pkcs11.c]
8 check length of value returned C_GetAttributValue for != 0
9 from mdrtbugzilla@codefive.co.uk; bugzilla #1773; ok dtucker@
Damien Millerc094d1e2010-06-26 09:36:34 +100010 - djm@cvs.openbsd.org 2010/06/17 07:07:30
11 [mux.c]
12 Correct sizing of object to be allocated by calloc(), replacing
13 sizeof(state) with sizeof(*state). This worked by accident since
14 the struct contained a single int at present, but could have broken
15 in the future. patch from hyc AT symas.com
Damien Miller99ac4e92010-06-26 09:36:58 +100016 - djm@cvs.openbsd.org 2010/06/18 00:58:39
17 [sftp.c]
18 unbreak ls in working directories that contains globbing characters in
19 their pathnames. bz#1655 reported by vgiffin AT apple.com
Damien Miller7aa46ec2010-06-26 09:37:57 +100020 - djm@cvs.openbsd.org 2010/06/18 03:16:03
21 [session.c]
22 Missing check for chroot_director == "none" (we already checked against
23 NULL); bz#1564 from Jan.Pechanec AT Sun.COM
Damien Miller49566312010-06-26 09:38:23 +100024 - djm@cvs.openbsd.org 2010/06/18 04:43:08
25 [sftp-client.c]
26 fix memory leak in do_realpath() error path; bz#1771, patch from
27 anicka AT suse.cz
Damien Miller2e774462010-06-26 09:30:47 +100028
Damien Millerd82a2602010-06-22 15:02:39 +10002920100622
30 - (djm) [loginrec.c] crank LINFO_NAMESIZE (username length) to 512
31 bz#1579; ok dtucker
32
Damien Millerea909792010-06-18 11:09:24 +10003320100618
34 - (djm) [contrib/ssh-copy-id] Update key file explicitly under ~
35 rather than assuming that $CWD == $HOME. bz#1500, patch from
36 timothy AT gelter.com
37
Tim Riceb9ae4ec2010-06-17 11:11:44 -07003820100617
39 - (tim) [contrib/cygwin/README] Remove a reference to the obsolete
40 minires-devel package, and to add the reference to the libedit-devel
41 package since CYgwin now provides libedit. Patch from Corinna Vinschen.
42
Damien Miller3bcce802010-05-21 14:48:16 +10004320100521
44 - (djm) OpenBSD CVS Sync
45 - djm@cvs.openbsd.org 2010/05/07 11:31:26
46 [regress/Makefile regress/cert-userkey.sh]
47 regress tests for AuthorizedPrincipalsFile and "principals=" key option.
48 feedback and ok markus@
Damien Miller3b903822010-05-21 14:56:25 +100049 - djm@cvs.openbsd.org 2010/05/11 02:58:04
50 [auth-rsa.c]
51 don't accept certificates marked as "cert-authority" here; ok markus@
Damien Millerc6afb5f2010-05-21 14:56:47 +100052 - djm@cvs.openbsd.org 2010/05/14 00:47:22
53 [ssh-add.c]
54 check that the certificate matches the corresponding private key before
55 grafting it on
Damien Millerd530f5f2010-05-21 14:57:10 +100056 - djm@cvs.openbsd.org 2010/05/14 23:29:23
57 [channels.c channels.h mux.c ssh.c]
58 Pause the mux channel while waiting for reply from aynch callbacks.
59 Prevents misordering of replies if new requests arrive while waiting.
60
61 Extend channel open confirm callback to allow signalling failure
62 conditions as well as success. Use this to 1) fix a memory leak, 2)
63 start using the above pause mechanism and 3) delay sending a success/
64 failure message on mux slave session open until we receive a reply from
65 the server.
66
67 motivated by and with feedback from markus@
Damien Miller388f6fc2010-05-21 14:57:35 +100068 - markus@cvs.openbsd.org 2010/05/16 12:55:51
69 [PROTOCOL.mux clientloop.h mux.c readconf.c readconf.h ssh.1 ssh.c]
70 mux support for remote forwarding with dynamic port allocation,
71 use with
72 LPORT=`ssh -S muxsocket -R0:localhost:25 -O forward somehost`
73 feedback and ok djm@
Damien Miller84399552010-05-21 14:58:12 +100074 - djm@cvs.openbsd.org 2010/05/20 11:25:26
75 [auth2-pubkey.c]
76 fix logspam when key options (from="..." especially) deny non-matching
77 keys; reported by henning@ also bz#1765; ok markus@ dtucker@
Damien Millerd0e4a8e2010-05-21 14:58:32 +100078 - djm@cvs.openbsd.org 2010/05/20 23:46:02
79 [PROTOCOL.certkeys auth-options.c ssh-keygen.c]
80 Move the permit-* options to the non-critical "extensions" field for v01
81 certificates. The logic is that if another implementation fails to
82 implement them then the connection just loses features rather than fails
83 outright.
84
85 ok markus@
Damien Miller3bcce802010-05-21 14:48:16 +100086
Darren Tucker5b6d0d02010-05-12 16:51:38 +10008720100511
88 - (dtucker) [Makefile.in] Bug #1770: Link libopenbsd-compat twice to solve
89 circular dependency problem on old or odd platforms. From Tom Lane, ok
90 djm@.
Damien Miller4b1ec832010-05-12 17:49:59 +100091 - (djm) [openbsd-compat/openssl-compat.h] Fix build breakage on older
92 libcrypto by defining OPENSSL_[DR]SA_MAX_MODULUS_BITS if they aren't
93 already. ok dtucker@
Darren Tucker5b6d0d02010-05-12 16:51:38 +100094
Damien Miller50af79b2010-05-10 11:52:00 +10009520100510
96 - OpenBSD CVS Sync
97 - djm@cvs.openbsd.org 2010/04/23 01:47:41
98 [ssh-keygen.c]
99 bz#1740: display a more helpful error message when $HOME is
100 inaccessible while trying to create .ssh directory. Based on patch
101 from jchadima AT redhat.com; ok dtucker@
Damien Miller85c50d72010-05-10 11:53:02 +1000102 - djm@cvs.openbsd.org 2010/04/23 22:27:38
103 [mux.c]
104 set "detach_close" flag when registering channel cleanup callbacks.
105 This causes the channel to close normally when its fds close and
106 hangs when terminating a mux slave using ~. bz#1758; ok markus@
Damien Miller22a29882010-05-10 11:53:54 +1000107 - djm@cvs.openbsd.org 2010/04/23 22:42:05
108 [session.c]
109 set stderr to /dev/null for subsystems rather than just closing it.
110 avoids hangs if a subsystem or shell initialisation writes to stderr.
111 bz#1750; ok markus@
Damien Millerbebbb7e2010-05-10 11:54:38 +1000112 - djm@cvs.openbsd.org 2010/04/23 22:48:31
113 [ssh-keygen.c]
114 refuse to generate keys longer than OPENSSL_[RD]SA_MAX_MODULUS_BITS,
115 since we would refuse to use them anyway. bz#1516; ok dtucker@
Damien Miller79442c02010-05-10 11:55:38 +1000116 - djm@cvs.openbsd.org 2010/04/26 22:28:24
117 [sshconnect2.c]
118 bz#1502: authctxt.success is declared as an int, but passed by
119 reference to function that accepts sig_atomic_t*. Convert it to
120 the latter; ok markus@ dtucker@
Damien Miller2725c212010-05-10 11:56:14 +1000121 - djm@cvs.openbsd.org 2010/05/01 02:50:50
122 [PROTOCOL.certkeys]
123 typo; jmeltzer@
Damien Miller099fc162010-05-10 11:56:50 +1000124 - dtucker@cvs.openbsd.org 2010/05/05 04:22:09
125 [sftp.c]
126 restore mput and mget which got lost in the tab-completion changes.
127 found by Kenneth Whitaker, ok djm@
Damien Miller30da3442010-05-10 11:58:03 +1000128 - djm@cvs.openbsd.org 2010/05/07 11:30:30
129 [auth-options.c auth-options.h auth.c auth.h auth2-pubkey.c]
130 [key.c servconf.c servconf.h sshd.8 sshd_config.5]
131 add some optional indirection to matching of principal names listed
132 in certificates. Currently, a certificate must include the a user's name
133 to be accepted for authentication. This change adds the ability to
134 specify a list of certificate principal names that are acceptable.
135
136 When authenticating using a CA trusted through ~/.ssh/authorized_keys,
137 this adds a new principals="name1[,name2,...]" key option.
138
139 For CAs listed through sshd_config's TrustedCAKeys option, a new config
140 option "AuthorizedPrincipalsFile" specifies a per-user file containing
141 the list of acceptable names.
142
143 If either option is absent, the current behaviour of requiring the
144 username to appear in principals continues to apply.
145
146 These options are useful for role accounts, disjoint account namespaces
147 and "user@realm"-style naming policies in certificates.
148
149 feedback and ok markus@
Damien Miller81d3fc52010-05-10 11:58:45 +1000150 - jmc@cvs.openbsd.org 2010/05/07 12:49:17
151 [sshd_config.5]
152 tweak previous;
Damien Miller50af79b2010-05-10 11:52:00 +1000153
Darren Tucker9f8703b2010-04-23 11:12:06 +100015420100423
155 - (dtucker) [configure.ac] Bug #1756: Check for the existence of a lib64 dir
156 in the openssl install directory (some newer openssl versions do this on at
157 least some amd64 platforms).
158
Damien Millerc4eddee2010-04-18 08:07:43 +100015920100418
160 - OpenBSD CVS Sync
161 - jmc@cvs.openbsd.org 2010/04/16 06:45:01
162 [ssh_config.5]
163 tweak previous; ok djm
Damien Miller1f181422010-04-18 08:08:03 +1000164 - jmc@cvs.openbsd.org 2010/04/16 06:47:04
165 [ssh-keygen.1 ssh-keygen.c]
166 tweak previous; ok djm
Damien Millerc617aa92010-04-18 08:08:20 +1000167 - djm@cvs.openbsd.org 2010/04/16 21:14:27
168 [sshconnect.c]
169 oops, %r => remote username, not %u
Damien Miller53f4bb62010-04-18 08:15:14 +1000170 - djm@cvs.openbsd.org 2010/04/16 01:58:45
171 [regress/cert-hostkey.sh regress/cert-userkey.sh]
172 regression tests for v01 certificate format
173 includes interop tests for v00 certs
Darren Tuckere25a9bd2010-04-18 13:35:00 +1000174 - (dtucker) [contrib/aix/buildbff.sh] Fix creation of ssh_prng_cmds.default
175 file.
Damien Millerc4eddee2010-04-18 08:07:43 +1000176
Damien Millera45f1c02010-04-16 15:51:34 +100017720100416
178 - (djm) Release openssh-5.5p1
Damien Millerd6fc3062010-04-16 15:51:45 +1000179 - OpenBSD CVS Sync
180 - djm@cvs.openbsd.org 2010/03/26 03:13:17
181 [bufaux.c]
182 allow buffer_get_int_ret/buffer_get_int64_ret to take a NULL pointer
183 argument to allow skipping past values in a buffer
Damien Miller67f30d72010-04-16 15:52:03 +1000184 - jmc@cvs.openbsd.org 2010/03/26 06:54:36
185 [ssh.1]
186 tweak previous;
Damien Miller544378d2010-04-16 15:52:24 +1000187 - jmc@cvs.openbsd.org 2010/03/27 14:26:55
188 [ssh_config.5]
189 tweak previous; ok dtucker
Damien Millerdeb5a142010-04-16 15:52:43 +1000190 - djm@cvs.openbsd.org 2010/04/10 00:00:16
191 [ssh.c]
192 bz#1746 - suppress spurious tty warning when using -O and stdin
193 is not a tty; ok dtucker@ markus@
Damien Miller67283992010-04-16 15:53:02 +1000194 - djm@cvs.openbsd.org 2010/04/10 00:04:30
195 [sshconnect.c]
196 fix terminology: we didn't find a certificate in known_hosts, we found
197 a CA key
Damien Miller22c97f12010-04-16 15:53:23 +1000198 - djm@cvs.openbsd.org 2010/04/10 02:08:44
199 [clientloop.c]
200 bz#1698: kill channel when pty allocation requests fail. Fixed
201 stuck client if the server refuses pty allocation.
202 ok dtucker@ "think so" markus@
Damien Miller88680652010-04-16 15:53:43 +1000203 - djm@cvs.openbsd.org 2010/04/10 02:10:56
204 [sshconnect2.c]
205 show the key type that we are offering in debug(), helps distinguish
206 between certs and plain keys as the path to the private key is usually
207 the same.
Damien Miller601a23c2010-04-16 15:54:01 +1000208 - djm@cvs.openbsd.org 2010/04/10 05:48:16
209 [mux.c]
210 fix NULL dereference; from matthew.haub AT alumni.adelaide.edu.au
Damien Millerb1b17042010-04-16 15:54:19 +1000211 - djm@cvs.openbsd.org 2010/04/14 22:27:42
212 [ssh_config.5 sshconnect.c]
213 expand %r => remote username in ssh_config:ProxyCommand;
214 ok deraadt markus
Damien Miller031c9102010-04-16 15:54:44 +1000215 - markus@cvs.openbsd.org 2010/04/15 20:32:55
216 [ssh-pkcs11.c]
217 retry lookup for private key if there's no matching key with CKA_SIGN
218 attribute enabled; this fixes fixes MuscleCard support (bugzilla #1736)
219 ok djm@
Damien Miller4e270b02010-04-16 15:56:21 +1000220 - djm@cvs.openbsd.org 2010/04/16 01:47:26
221 [PROTOCOL.certkeys auth-options.c auth-options.h auth-rsa.c]
222 [auth2-pubkey.c authfd.c key.c key.h myproposal.h ssh-add.c]
223 [ssh-agent.c ssh-dss.c ssh-keygen.1 ssh-keygen.c ssh-rsa.c]
224 [sshconnect.c sshconnect2.c sshd.c]
225 revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with the
226 following changes:
227
228 move the nonce field to the beginning of the certificate where it can
229 better protect against chosen-prefix attacks on the signature hash
230
231 Rename "constraints" field to "critical options"
232
233 Add a new non-critical "extensions" field
234
235 Add a serial number
236
237 The older format is still support for authentication and cert generation
238 (use "ssh-keygen -t v00 -s ca_key ..." to generate a v00 certificate)
239
240 ok markus@
Damien Millera45f1c02010-04-16 15:51:34 +1000241
Darren Tucker627337d2010-04-10 22:58:01 +100024220100410
243 - (dtucker) [configure.ac] Put the check for the existence of getaddrinfo
244 back so we disable the IPv6 tests if we don't have it.
245
Darren Tucker537d4dc2010-04-09 13:35:23 +100024620100409
247 - (dtucker) [contrib/cygwin/Makefile] Don't overwrite files with the wrong
248 ones. Based on a patch from Roumen Petrov.
Darren Tuckerc4ccb122010-04-09 14:04:35 +1000249 - (dtucker) [configure.ac] Bug #1744: use pkg-config for libedit flags if we
250 have it and the path is not provided to --with-libedit. Based on a patch
251 from Iain Morgan.
Darren Tucker261d93a2010-04-09 18:13:27 +1000252 - (dtucker) [configure.ac defines.h loginrec.c logintest.c] Bug #1732: enable
253 utmpx support on FreeBSD where possible. Patch from Ed Schouten, ok djm@
Darren Tucker537d4dc2010-04-09 13:35:23 +1000254
Damien Miller7d09b8f2010-03-26 08:52:02 +110025520100326
256 - (djm) [openbsd-compat/bsd-arc4random.c] Fix preprocessor detection
257 for arc4random_buf() and arc4random_uniform(); from Josh Gilkerson
Darren Tuckera83d90f2010-03-26 10:27:33 +1100258 - (dtucker) [configure.ac] Bug #1741: Add section for Haiku, patch originally
259 by Ingo Weinhold via Scott McCreary, ok djm@
Damien Miller44451d02010-03-26 10:40:04 +1100260 - (djm) OpenBSD CVS Sync
261 - djm@cvs.openbsd.org 2010/03/25 23:38:28
262 [servconf.c]
263 from portable: getcwd(NULL, 0) doesn't work on all platforms, so
264 use a stack buffer; ok dtucker@
Damien Miller9c60f242010-03-26 11:28:35 +1100265 - djm@cvs.openbsd.org 2010/03/26 00:26:58
266 [ssh.1]
267 mention that -S none disables connection sharing; from Colin Watson
Damien Miller8b906422010-03-26 11:04:09 +1100268 - (djm) [session.c] Allow ChrootDirectory to work on SELinux platforms -
269 set up SELinux execution context before chroot() call. From Russell
270 Coker via Colin watson; bz#1726 ok dtucker@
Damien Miller6480c632010-03-26 11:09:44 +1100271 - (djm) [channels.c] Check for EPFNOSUPPORT as a socket() errno; bz#1721
272 ok dtucker@
Darren Tuckerffd1eaa2010-03-26 11:16:39 +1100273 - (dtucker) Bug #1725: explicitly link libX11 into gnome-ssh-askpass2 using
274 pkg-config, patch from Colin Watson. Needed for newer linkers (ie gold).
Damien Millerdf083412010-03-26 11:18:27 +1100275 - (djm) [contrib/ssh-copy-id] Don't blow up when the agent has no keys;
276 bz#1723 patch from Adeodato Simóvia Colin Watson; ok dtucker@
Darren Tuckerce3754b2010-03-26 12:09:13 +1100277 - (dtucker) OpenBSD CVS Sync
278 - dtucker@cvs.openbsd.org 2010/03/26 01:06:13
279 [ssh_config.5]
280 Reformat default value of PreferredAuthentications entry (current
281 formatting implies ", " is acceptable as a separator, which it's not.
282 ok djm@
Damien Miller7d09b8f2010-03-26 08:52:02 +1100283
Darren Tucker62131dc2010-03-24 13:03:32 +110028420100324
285 - (dtucker) [contrib/cygwin/ssh-host-config] Mount the Windows directory
286 containing the services file explicitely case-insensitive. This allows to
287 tweak the Windows services file reliably. Patch from vinschen at redhat.
288
Damien Millerc59e2442010-03-22 05:50:31 +110028920100321
290 - (djm) OpenBSD CVS Sync
291 - jmc@cvs.openbsd.org 2010/03/08 09:41:27
292 [ssh-keygen.1]
293 sort the list of constraints (to -O); ok djm
Damien Miller77497e12010-03-22 05:50:51 +1100294 - jmc@cvs.openbsd.org 2010/03/10 07:40:35
295 [ssh-keygen.1]
296 typos; from Ross Richardson
297 closes prs 6334 and 6335
Damien Millere513a912010-03-22 05:51:21 +1100298 - djm@cvs.openbsd.org 2010/03/10 23:27:17
299 [auth2-pubkey.c]
300 correct certificate logging and make it more consistent between
301 authorized_keys and TrustedCAKeys; ok markus@
Damien Millerc4cb47b2010-03-22 05:52:26 +1100302 - djm@cvs.openbsd.org 2010/03/12 01:06:25
303 [servconf.c]
304 unbreak AuthorizedKeys option with a $HOME-relative path; reported by
305 vinschen AT redhat.com, ok dtucker@
Damien Miller4a5f0d32010-03-22 05:53:04 +1100306 - markus@cvs.openbsd.org 2010/03/12 11:37:40
307 [servconf.c]
308 do not prepend AuthorizedKeysFile with getcwd(), unbreaks relative paths
309 free() (not xfree()) the buffer returned by getcwd()
Damien Miller8ddc71c2010-03-22 05:54:02 +1100310 - djm@cvs.openbsd.org 2010/03/13 21:10:38
311 [clientloop.c]
312 protocol conformance fix: send language tag when disconnecting normally;
313 spotted by 1.41421 AT gmail.com, ok markus@ deraadt@
Damien Miller1b61a282010-03-22 05:55:06 +1100314 - djm@cvs.openbsd.org 2010/03/13 21:45:46
315 [ssh-keygen.1]
316 Certificates are named *-cert.pub, not *_cert.pub; committing a diff
317 from stevesk@ ok me
Damien Miller5a5d94b2010-03-22 05:57:49 +1100318 - jmc@cvs.openbsd.org 2010/03/13 23:38:13
319 [ssh-keygen.1]
320 fix a formatting error (args need quoted); noted by stevesk
Damien Miller1cfbfaf2010-03-22 05:58:24 +1100321 - stevesk@cvs.openbsd.org 2010/03/15 19:40:02
322 [key.c key.h ssh-keygen.c]
323 also print certificate type (user or host) for ssh-keygen -L
324 ok djm kettenis
Damien Miller33334b22010-03-22 05:59:02 +1100325 - stevesk@cvs.openbsd.org 2010/03/16 15:46:52
326 [auth-options.c]
327 spelling in error message. ok djm kettenis
Damien Miller13a9f722010-03-22 05:59:22 +1100328 - djm@cvs.openbsd.org 2010/03/16 16:36:49
329 [version.h]
330 crank version to openssh-5.5 since we have a few fixes since 5.4;
331 requested deraadt@ kettenis@
Damien Millerb086d4a2010-03-22 06:11:55 +1100332 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
333 [contrib/suse/openssh.spec] Crank version numbers
Damien Millerc59e2442010-03-22 05:50:31 +1100334
Damien Miller47f9a412010-03-14 08:37:49 +110033520100314
336 - (djm) [ssh-pkcs11-helper.c] Move #ifdef to after #defines to fix
337 compilation failure when !HAVE_DLOPEN. Reported by felix-mindrot
338 AT fefe.de
Damien Miller1f574b22010-03-14 08:41:34 +1100339 - (djm) [Makefile.in] Respecify -lssh after -lopenbsd-compat for
340 ssh-pkcs11-helper to repair static builds (we do the same for
341 ssh-keyscan). Reported by felix-mindrot AT fefe.de
Damien Miller47f9a412010-03-14 08:37:49 +1100342
Tim Rice2bde3ee2010-03-11 22:18:13 -080034320100312
Tim Riceded8fa02010-03-11 22:32:02 -0800344 - (tim) [Makefile.in] Now that scard is gone, no need to make $(datadir)
345 - (tim) [Makefile.in] Add missing $(EXEEXT) to install targets.
346 Patch from Corinna Vinschen.
Tim Rice4e0cea82010-03-11 22:35:19 -0800347 - (tim) [contrib/cygwin/Makefile] Fix list of documentation files to install
348 on a Cygwin installation. Patch from Corinna Vinschen.
Tim Rice2bde3ee2010-03-11 22:18:13 -0800349
Tim Ricefa233ba2010-03-10 16:12:02 -080035020100311
351 - (tim) [contrib/suse/openssh.spec] crank version number here too.
352 report by imorgan AT nas.nasa.gov
353
Darren Tuckerc9fe39b2010-03-09 20:42:30 +110035420100309
355 - (dtucker) [configure.ac] Use a proper AC_CHECK_DECL for BROKEN_GETADDRINFO
356 so setting it in CFLAGS correctly skips IPv6 tests.
357
35820100308
Damien Millerb3bc3312010-03-08 09:03:33 +1100359 - (djm) OpenBSD CVS Sync
Damien Miller3e1ee492010-03-08 09:24:11 +1100360 - djm@cvs.openbsd.org 2010/03/07 22:16:01
361 [ssh-keygen.c]
362 make internal strptime string match strftime format;
363 suggested by vinschen AT redhat.com and markus@
Damien Miller081c9762010-03-08 11:30:00 +1100364 - djm@cvs.openbsd.org 2010/03/08 00:28:55
365 [ssh-keygen.1]
366 document permit-agent-forwarding certificate constraint; patch from
367 stevesk@
Damien Millerb3bc3312010-03-08 09:03:33 +1100368 - djm@cvs.openbsd.org 2010/03/07 22:01:32
369 [version.h]
370 openssh-5.4
Damien Miller6bf31782010-03-08 09:41:02 +1100371 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
372 crank version numbers
Damien Miller95867872010-03-08 09:50:17 +1100373 - (djm) Release OpenSSH-5.4p1
Damien Millerb3bc3312010-03-08 09:03:33 +1100374
37520100307
Darren Tuckerb3d20a32010-03-07 11:56:59 +1100376 - (dtucker) [auth.c] Bug #1710: call setauthdb on AIX before getpwuid so that
377 it gets the passwd struct from the LAM that knows about the user which is
378 not necessarily the default. Patch from Alexandre Letourneau.
Darren Tuckerc738e6c2010-03-07 13:21:12 +1100379 - (dtucker) [session.c] Bug #1567: move setpcred call to before chroot and
380 do not set real uid, since that's needed for the chroot, and will be set
381 by permanently_set_uid.
Darren Tuckerac0c4c92010-03-07 13:32:16 +1100382 - (dtucker) [session.c] Also initialize creds to NULL for handing to
383 setpcred.
Darren Tuckercd70e1b2010-03-07 23:05:17 +1100384 - (dtucker) OpenBSD CVS Sync
385 - dtucker@cvs.openbsd.org 2010/03/07 11:57:13
386 [auth-rhosts.c monitor.c monitor_wrap.c session.c auth-options.c sshd.c]
387 Hold authentication debug messages until after successful authentication.
388 Fixes an info leak of environment variables specified in authorized_keys,
389 reported by Jacob Appelbaum. ok djm@
Darren Tuckerb3d20a32010-03-07 11:56:59 +1100390
Damien Miller72b33822010-03-05 07:39:01 +110039120100305
392 - OpenBSD CVS Sync
393 - jmc@cvs.openbsd.org 2010/03/04 12:51:25
394 [ssh.1 sshd_config.5]
395 tweak previous;
Damien Millerf2b70ca2010-03-05 07:39:35 +1100396 - djm@cvs.openbsd.org 2010/03/04 20:35:08
397 [ssh-keygen.1 ssh-keygen.c]
398 Add a -L flag to print the contents of a certificate; ok markus@
Damien Miller8f6c3372010-03-05 10:41:26 +1100399 - jmc@cvs.openbsd.org 2010/03/04 22:52:40
400 [ssh-keygen.1]
401 fix Bk/Ek;
Damien Millerc6db99e2010-03-05 10:41:45 +1100402 - djm@cvs.openbsd.org 2010/03/04 23:17:25
403 [sshd_config.5]
404 missing word; spotted by jmc@
Damien Millera7dab8b2010-03-05 10:42:05 +1100405 - djm@cvs.openbsd.org 2010/03/04 23:19:29
406 [ssh.1 sshd.8]
407 move section on CA and revoked keys from ssh.1 to sshd.8's known hosts
408 format section and rework it a bit; requested by jmc@
Damien Miller689b8722010-03-05 10:42:24 +1100409 - djm@cvs.openbsd.org 2010/03/04 23:27:25
410 [auth-options.c ssh-keygen.c]
411 "force-command" is not spelled "forced-command"; spotted by
412 imorgan AT nas.nasa.gov
Damien Millerb068d0a2010-03-05 14:03:03 +1100413 - djm@cvs.openbsd.org 2010/03/05 02:58:11
414 [auth.c]
415 make the warning for a revoked key louder and more noticable
Damien Miller98339052010-03-05 21:30:35 +1100416 - jmc@cvs.openbsd.org 2010/03/05 06:50:35
417 [ssh.1 sshd.8]
418 tweak previous;
Damien Miller922b5412010-03-05 21:30:54 +1100419 - jmc@cvs.openbsd.org 2010/03/05 08:31:20
420 [ssh.1]
421 document certificate authentication; help/ok djm
Damien Miller5059d8d2010-03-05 21:31:11 +1100422 - djm@cvs.openbsd.org 2010/03/05 10:28:21
423 [ssh-add.1 ssh.1 ssh_config.5]
424 mention loading of certificate files from [private]-cert.pub when
425 they are present; feedback and ok jmc@
Tim Rice179eee02010-03-04 12:48:05 -0800426 - (tim) [ssh-pkcs11.c] Fix "non-constant initializer" errors in older
427 compilers. OK djm@
Damien Miller48b60212010-03-05 11:40:19 +1100428 - (djm) [ssh-rand-helper.c] declare optind, avoiding compilation failure
429 on some platforms
Damien Miller9527f222010-03-05 15:04:35 +1100430 - (djm) [configure.ac] set -fno-strict-aliasing for gcc4; ok dtucker@
Damien Miller72b33822010-03-05 07:39:01 +1100431
Damien Miller910f2092010-03-04 14:17:22 +110043220100304
433 - (djm) [ssh-keygen.c] Use correct local variable, instead of
434 maybe-undefined global "optarg"
Damien Miller661ffc12010-03-04 21:09:24 +1100435 - (djm) [contrib/redhat/openssh.spec] Replace obsolete BuildPreReq
436 on XFree86-devel with neutral /usr/include/X11/Xlib.h;
437 imorgan AT nas.nasa.gov in bz#1731
Damien Millerd45f3b62010-03-04 21:09:46 +1100438 - (djm) [.cvsignore] Ignore ssh-pkcs11-helper
Damien Millere1abf4d2010-03-04 21:41:29 +1100439 - (djm) [regress/Makefile] Cleanup sshd_proxy_orig
Damien Miller41396572010-03-04 21:51:11 +1100440 - OpenBSD CVS Sync
441 - djm@cvs.openbsd.org 2010/03/03 01:44:36
442 [auth-options.c key.c]
443 reject strings with embedded ASCII nul chars in certificate key IDs,
444 principal names and constraints
Damien Millercd38c9c2010-03-04 21:51:37 +1100445 - djm@cvs.openbsd.org 2010/03/03 22:49:50
446 [sshd.8]
447 the authorized_keys option for CA keys is "cert-authority", not
448 "from=cert-authority". spotted by imorgan AT nas.nasa.gov
Damien Millerfe588e32010-03-04 21:52:00 +1100449 - djm@cvs.openbsd.org 2010/03/03 22:50:40
450 [PROTOCOL.certkeys]
451 s/similar same/similar/; from imorgan AT nas.nasa.gov
Damien Miller2befbad2010-03-04 21:52:18 +1100452 - djm@cvs.openbsd.org 2010/03/04 01:44:57
453 [key.c]
454 use buffer_get_string_ptr_ret() where we are checking the return
455 value explicitly instead of the fatal()-causing buffer_get_string_ptr()
Damien Miller1aed65e2010-03-04 21:53:35 +1100456 - djm@cvs.openbsd.org 2010/03/04 10:36:03
457 [auth-rh-rsa.c auth-rsa.c auth.c auth.h auth2-hostbased.c auth2-pubkey.c]
458 [authfile.c authfile.h hostfile.c hostfile.h servconf.c servconf.h]
459 [ssh-keygen.c ssh.1 sshconnect.c sshd_config.5]
460 Add a TrustedUserCAKeys option to sshd_config to specify CA keys that
461 are trusted to authenticate users (in addition than doing it per-user
462 in authorized_keys).
463
464 Add a RevokedKeys option to sshd_config and a @revoked marker to
465 known_hosts to allow keys to me revoked and banned for user or host
466 authentication.
467
468 feedback and ok markus@
Damien Miller017d1e72010-03-04 21:57:21 +1100469 - djm@cvs.openbsd.org 2010/03/03 00:47:23
470 [regress/cert-hostkey.sh regress/cert-userkey.sh]
471 add an extra test to ensure that authentication with the wrong
472 certificate fails as it should (and it does)
Damien Miller700dcfa2010-03-04 21:58:01 +1100473 - djm@cvs.openbsd.org 2010/03/04 10:38:23
474 [regress/cert-hostkey.sh regress/cert-userkey.sh]
475 additional regression tests for revoked keys and TrustedUserCAKeys
Damien Miller910f2092010-03-04 14:17:22 +1100476
Damien Miller25b97dd2010-03-03 10:24:00 +110047720100303
478 - (djm) [PROTOCOL.certkeys] Add RCS Ident
Damien Miller15f5b562010-03-03 10:25:21 +1100479 - OpenBSD CVS Sync
480 - jmc@cvs.openbsd.org 2010/02/26 22:09:28
481 [ssh-keygen.1 ssh.1 sshd.8]
482 tweak previous;
Damien Miller0bd41862010-03-03 10:25:41 +1100483 - otto@cvs.openbsd.org 2010/03/01 11:07:06
484 [ssh-add.c]
485 zap what seems to be a left-over debug message; ok markus@
Damien Millerfb84e592010-03-03 10:26:04 +1100486 - djm@cvs.openbsd.org 2010/03/02 23:20:57
487 [ssh-keygen.c]
488 POSIX strptime is stricter than OpenBSD's so do a little dance to
489 appease it.
Damien Miller386dbc02010-03-03 13:22:41 +1100490 - (djm) [regress/cert-userkey.sh] s/echo -n/echon/ here too
Damien Miller25b97dd2010-03-03 10:24:00 +1100491
Tim Ricec5b0cb32010-03-01 15:57:42 -080049220100302
493 - (tim) [config.guess config.sub] Bug 1722: Update to latest versions from
494 http://git.savannah.gnu.org/gitweb/ (2009-12-30 and 2010-01-22
495 respectively).
496
Darren Tuckerc614c782010-03-01 12:49:05 +110049720100301
498 - (dtucker) [regress/{cert-hostkey,cfgmatch,cipher-speed}.sh} Replace
499 "echo -n" with "echon" for portability.
Darren Tucker9af0cb92010-03-01 15:52:49 +1100500 - (dtucker) [openbsd-compat/port-linux.c] Make failure to write to the OOM
501 adjust log at verbose only, since according to cjwatson in bug #1470
502 some virtualization platforms don't allow writes.
Darren Tuckerc614c782010-03-01 12:49:05 +1100503
Damien Milleracc9b292010-03-01 04:36:54 +110050420100228
505 - (djm) [auth.c] On Cygwin, refuse usernames that have differences in
506 case from that matched in the system password database. On this
507 platform, passwords are stored case-insensitively, but sshd requires
508 exact case matching for Match blocks in sshd_config(5). Based on
509 a patch from vinschen AT redhat.com.
Tim Ricebff24b82010-02-28 14:51:56 -0800510 - (tim) [ssh-pkcs11-helper.c] Move declarations before calling functions
511 to make older compilers (gcc 2.95) happy.
Damien Milleracc9b292010-03-01 04:36:54 +1100512
Damien Miller09a24db2010-02-28 03:28:05 +110051320100227
Damien Millerd05951f2010-02-28 03:29:33 +1100514 - (djm) [ssh-pkcs11-helper.c ] Ensure RNG is initialised and seeded
515 - (djm) [openbsd-compat/bsd-cygwin_util.c] Reduce the set of environment
516 variables copied into sshd child processes. From vinschen AT redhat.com
Damien Miller09a24db2010-02-28 03:28:05 +1100517
Damien Miller0a80ca12010-02-27 07:55:05 +110051820100226
519 - OpenBSD CVS Sync
520 - djm@cvs.openbsd.org 2010/02/26 20:29:54
521 [PROTOCOL PROTOCOL.agent PROTOCOL.certkeys addrmatch.c auth-options.c]
522 [auth-options.h auth.h auth2-pubkey.c authfd.c dns.c dns.h hostfile.c]
523 [hostfile.h kex.h kexdhs.c kexgexs.c key.c key.h match.h monitor.c]
524 [myproposal.h servconf.c servconf.h ssh-add.c ssh-agent.c ssh-dss.c]
525 [ssh-keygen.1 ssh-keygen.c ssh-rsa.c ssh.1 ssh.c ssh2.h sshconnect.c]
526 [sshconnect2.c sshd.8 sshd.c sshd_config.5]
527 Add support for certificate key types for users and hosts.
528
529 OpenSSH certificate key types are not X.509 certificates, but a much
530 simpler format that encodes a public key, identity information and
531 some validity constraints and signs it with a CA key. CA keys are
532 regular SSH keys. This certificate style avoids the attack surface
533 of X.509 certificates and is very easy to deploy.
534
535 Certified host keys allow automatic acceptance of new host keys
536 when a CA certificate is marked as trusted in ~/.ssh/known_hosts.
537 see VERIFYING HOST KEYS in ssh(1) for details.
538
539 Certified user keys allow authentication of users when the signing
540 CA key is marked as trusted in authorized_keys. See "AUTHORIZED_KEYS
541 FILE FORMAT" in sshd(8) for details.
542
543 Certificates are minted using ssh-keygen(1), documentation is in
544 the "CERTIFICATES" section of that manpage.
545
546 Documentation on the format of certificates is in the file
547 PROTOCOL.certkeys
548
549 feedback and ok markus@
Damien Miller58ac6de2010-02-27 07:57:12 +1100550 - djm@cvs.openbsd.org 2010/02/26 20:33:21
551 [Makefile regress/cert-hostkey.sh regress/cert-userkey.sh]
552 regression tests for certified keys
Damien Miller0a80ca12010-02-27 07:55:05 +1100553
Damien Miller05abd2c2010-02-24 17:16:08 +110055420100224
555 - (djm) [pkcs11.h ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c]
556 [ssh-pkcs11.h] Add $OpenBSD$ RCS idents so we can sync portable
Damien Millera80f1402010-02-24 17:17:58 +1100557 - (djm) OpenBSD CVS Sync
558 - djm@cvs.openbsd.org 2010/02/11 20:37:47
559 [pathnames.h]
560 correct comment
Damien Millerb6bd3c22010-02-24 17:24:56 +1100561 - dtucker@cvs.openbsd.org 2009/11/09 04:20:04
562 [regress/Makefile]
563 add regression test for ssh-keygen pubkey conversions
Damien Miller0dff9c72010-02-24 17:25:58 +1100564 - dtucker@cvs.openbsd.org 2010/01/11 02:53:44
565 [regress/forwarding.sh]
566 regress test for stdio forwarding
Damien Millerbb4ae552010-02-24 17:26:38 +1100567 - djm@cvs.openbsd.org 2010/02/09 04:57:36
568 [regress/addrmatch.sh]
569 clean up droppings
Damien Miller8f9492c2010-02-24 17:28:45 +1100570 - djm@cvs.openbsd.org 2010/02/09 06:29:02
571 [regress/Makefile]
572 turn on all the malloc(3) checking options when running regression
573 tests. this has caught a few bugs for me in the past; ok dtucker@
Damien Millerc1739212010-02-24 17:29:34 +1100574 - djm@cvs.openbsd.org 2010/02/24 06:21:56
575 [regress/test-exec.sh]
576 wait for sshd to fully stop in cleanup() function; avoids races in tests
577 that do multiple start_sshd/cleanup cycles; "I hate pidfiles" deraadt@
Damien Millercfa42d22010-02-24 17:31:20 +1100578 - markus@cvs.openbsd.org 2010/02/08 10:52:47
579 [regress/agent-pkcs11.sh]
580 test for PKCS#11 support (currently disabled)
Damien Miller43001b32010-02-24 18:18:51 +1100581 - (djm) [Makefile.in ssh-pkcs11-helper.8] Add manpage for PKCS#11 helper
Damien Millerd27d85d2010-02-24 18:21:45 +1100582 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
583 [contrib/suse/openssh.spec] Add PKCS#11 helper binary and manpage
Damien Miller05abd2c2010-02-24 17:16:08 +1100584
Damien Miller17751bc2010-02-12 07:35:08 +110058520100212
586 - (djm) OpenBSD CVS Sync
587 - djm@cvs.openbsd.org 2010/02/02 22:49:34
588 [bufaux.c]
589 make buffer_get_string_ret() really non-fatal in all cases (it was
590 using buffer_get_int(), which could fatal() on buffer empty);
591 ok markus dtucker
Damien Miller7ea845e2010-02-12 09:21:02 +1100592 - markus@cvs.openbsd.org 2010/02/08 10:50:20
593 [pathnames.h readconf.c readconf.h scp.1 sftp.1 ssh-add.1 ssh-add.c]
594 [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config.5]
595 replace our obsolete smartcard code with PKCS#11.
596 ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf
597 ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11
598 provider (shared library) while ssh-agent(1) delegates PKCS#11 to
599 a forked a ssh-pkcs11-helper process.
600 PKCS#11 is currently a compile time option.
601 feedback and ok djm@; inspired by patches from Alon Bar-Lev
Damien Miller048dc932010-02-12 09:22:04 +1100602 - jmc@cvs.openbsd.org 2010/02/08 22:03:05
603 [ssh-add.1 ssh-keygen.1 ssh.1 ssh.c]
604 tweak previous; ok markus
Damien Millera183c6e2010-02-12 09:22:31 +1100605 - djm@cvs.openbsd.org 2010/02/09 00:50:36
606 [ssh-agent.c]
607 fallout from PKCS#11: unbreak -D
Damien Miller86cbb442010-02-12 09:22:57 +1100608 - djm@cvs.openbsd.org 2010/02/09 00:50:59
609 [ssh-keygen.c]
610 fix -Wall
Damien Miller89221062010-02-12 09:23:40 +1100611 - djm@cvs.openbsd.org 2010/02/09 03:56:28
612 [buffer.c buffer.h]
613 constify the arguments to buffer_len, buffer_ptr and buffer_dump
Damien Miller47cf16b2010-02-12 09:25:29 +1100614 - djm@cvs.openbsd.org 2010/02/09 06:18:46
615 [auth.c]
616 unbreak ChrootDirectory+internal-sftp by skipping check for executable
617 shell when chrooting; reported by danh AT wzrd.com; ok dtucker@
Damien Millera7618442010-02-12 09:26:02 +1100618 - markus@cvs.openbsd.org 2010/02/10 23:20:38
619 [ssh-add.1 ssh-keygen.1 ssh.1 ssh_config.5]
620 pkcs#11 is no longer optional; improve wording; ok jmc@
Damien Millerd400da52010-02-12 09:26:23 +1100621 - jmc@cvs.openbsd.org 2010/02/11 13:23:29
622 [ssh.1]
623 libarary -> library;
Damien Millerd8f60022010-02-12 09:34:22 +1100624 - (djm) [INSTALL Makefile.in README.smartcard configure.ac scard-opensc.c]
625 [scard.c scard.h pkcs11.h scard/Makefile.in scard/Ssh.bin.uu scard/Ssh.java]
626 Remove obsolete smartcard support
Damien Miller8ad0fbd2010-02-12 09:49:06 +1100627 - (djm) [ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c]
628 Make it compile on OSX
Damien Millerdfa41562010-02-12 10:06:28 +1100629 - (djm) [ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c]
630 Use ssh_get_progname to fill __progname
Damien Millerb3c9f782010-02-12 10:11:34 +1100631 - (djm) [configure.ac] Enable PKCS#11 support only when we find a working
632 dlopen()
Damien Miller17751bc2010-02-12 07:35:08 +1100633
Damien Miller1d2bfc42010-02-10 10:19:29 +110063420100210
635 - (djm) add -lselinux to LIBS before calling AC_CHECK_FUNCS for
636 getseuserbyname; patch from calebcase AT gmail.com via
637 cjwatson AT debian.org
638
Damien Miller74d98252010-02-02 17:01:46 +110063920100202
640 - (djm) OpenBSD CVS Sync
641 - djm@cvs.openbsd.org 2010/01/30 21:08:33
642 [sshd.8]
643 debug output goes to stderr, not "the system log"; ok markus dtucker
Damien Millerd6369432010-02-02 17:02:07 +1100644 - djm@cvs.openbsd.org 2010/01/30 21:12:08
645 [channels.c]
646 fake local addr:port when stdio fowarding as some servers (Tectia at
647 least) validate that they are well-formed;
648 reported by imorgan AT nas.nasa.gov
649 ok dtucker
Damien Miller74d98252010-02-02 17:01:46 +1100650
Damien Miller36f57eb2010-01-30 17:28:34 +110065120100130
652 - (djm) OpenBSD CVS Sync
653 - djm@cvs.openbsd.org 2010/01/28 00:21:18
654 [clientloop.c]
655 downgrade an error() to a debug() - this particular case can be hit in
656 normal operation for certain sequences of mux slave vs session closure
657 and is harmless
Damien Miller133d9d32010-01-30 17:30:04 +1100658 - djm@cvs.openbsd.org 2010/01/29 00:20:41
659 [sshd.c]
660 set FD_CLOEXEC on sock_in/sock_out; bz#1706 from jchadima AT redhat.com
661 ok dtucker@
Damien Miller0dac03f2010-01-30 17:36:33 +1100662 - djm@cvs.openbsd.org 2010/01/29 20:16:17
663 [mux.c]
664 kill correct channel (was killing already-dead mux channel, not
665 its session channel)
Damien Millerc3ca35f2010-01-30 17:42:01 +1100666 - djm@cvs.openbsd.org 2010/01/30 02:54:53
667 [mux.c]
668 don't mark channel as read failed if it is already closing; suppresses
669 harmless error messages when connecting to SSH.COM Tectia server
670 report by imorgan AT nas.nasa.gov
Damien Miller36f57eb2010-01-30 17:28:34 +1100671
Darren Tucker19d32cb2010-01-29 10:54:11 +110067220100129
673 - (dtucker) [openbsd-compat/openssl-compat.c] Bug #1707: Call OPENSSL_config()
674 after registering the hardware engines, which causes the openssl.cnf file to
675 be processed. See OpenSSL's man page for OPENSSL_config(3) for details.
676 Patch from Solomon Peachy, ok djm@.
677
Damien Miller45a81a02010-01-28 06:26:20 +110067820100128
679 - (djm) OpenBSD CVS Sync
680 - djm@cvs.openbsd.org 2010/01/26 02:15:20
681 [mux.c]
682 -Wuninitialized and remove a // comment; from portable
683 (Id sync only)
Damien Millera21cdfa2010-01-28 06:26:59 +1100684 - djm@cvs.openbsd.org 2010/01/27 13:26:17
685 [mux.c]
686 fix bug introduced in mux rewrite:
687
688 In a mux master, when a socket to a mux slave closes before its server
689 session (as may occur when the slave has been signalled), gracefully
690 close the server session rather than deleting its channel immediately.
691 A server may have more messages on that channel to send (e.g. an exit
692 message) that will fatal() the client if they are sent to a channel that
693 has been prematurely deleted.
694
695 spotted by imorgan AT nas.nasa.gov
Damien Millera1162982010-01-28 06:27:54 +1100696 - djm@cvs.openbsd.org 2010/01/27 19:21:39
697 [sftp.c]
698 add missing "p" flag to getopt optstring;
699 bz#1704 from imorgan AT nas.nasa.gov
Damien Miller45a81a02010-01-28 06:26:20 +1100700
Damien Miller2e68d792010-01-26 12:51:13 +110070120100126
702 - (djm) OpenBSD CVS Sync
703 - tedu@cvs.openbsd.org 2010/01/17 21:49:09
704 [ssh-agent.1]
705 Correct and clarify ssh-add's password asking behavior.
706 Improved text dtucker and ok jmc
Damien Millerf589fd12010-01-26 12:53:06 +1100707 - dtucker@cvs.openbsd.org 2010/01/18 01:50:27
708 [roaming_client.c]
709 s/long long unsigned/unsigned long long/, from tim via portable
710 (Id sync only, change already in portable)
Damien Millere1537f92010-01-26 13:26:22 +1100711 - djm@cvs.openbsd.org 2010/01/26 01:28:35
712 [channels.c channels.h clientloop.c clientloop.h mux.c nchan.c ssh.c]
713 rewrite ssh(1) multiplexing code to a more sensible protocol.
714
715 The new multiplexing code uses channels for the listener and
716 accepted control sockets to make the mux master non-blocking, so
717 no stalls when processing messages from a slave.
718
719 avoid use of fatal() in mux master protocol parsing so an errant slave
720 process cannot take down a running master.
721
722 implement requesting of port-forwards over multiplexed sessions. Any
723 port forwards requested by the slave are added to those the master has
724 established.
725
726 add support for stdio forwarding ("ssh -W host:port ...") in mux slaves.
727
728 document master/slave mux protocol so that other tools can use it to
729 control a running ssh(1). Note: there are no guarantees that this
730 protocol won't be incompatibly changed (though it is versioned).
731
732 feedback Salvador Fandino, dtucker@
733 channel changes ok markus@
Damien Miller2e68d792010-01-26 12:51:13 +1100734
Tim Rice6761c742010-01-22 10:25:15 -080073520100122
736 - (tim) [configure.ac] Due to constraints in Windows Sockets in terms of
737 socket inheritance, reduce the default SO_RCVBUF/SO_SNDBUF buffer size
738 in Cygwin to 65535. Patch from Corinna Vinschen.
739
Tim Rice7ab7b932010-01-17 12:48:22 -080074020100117
741 - (tim) [configure.ac] OpenServer 5 needs BROKEN_GETADDRINFO too.
Tim Rice7bb74712010-01-17 22:49:57 -0800742 - (tim) [configure.ac] On SVR5 systems, use the C99-conforming functions
743 snprintf() and vsnprintf() named _xsnprintf() and _xvsnprintf().
Tim Rice7ab7b932010-01-17 12:48:22 -0800744
Darren Tuckerca944852010-01-16 11:48:27 +110074520100116
746 - (dtucker) [openbsd-compat/pwcache.c] Pull in includes.h and thus defines.h
747 so we correctly detect whether or not we have a native user_from_uid.
Darren Tucker2563e3f2010-01-16 11:53:07 +1100748 - (dtucker) [openbsd-compat/openbsd-compat.h] Prototypes for user_from_uid
749 and group_from_gid.
Darren Tucker69371b52010-01-16 13:30:30 +1100750 - (dtucker) [openbsd-compat/openbsd-compat.h] Fix prototypes, spotted by
751 Tim.
Darren Tuckerdab129b2010-01-16 13:43:50 +1100752 - (dtucker) OpenBSD CVS Sync
753 - markus@cvs.openbsd.org 2010/01/15 09:24:23
754 [sftp-common.c]
755 unused
Darren Tucker612e4002010-01-16 13:53:52 +1100756 - (dtucker) [openbsd-compat/pwcache.c] Shrink ifdef area to prevent unused
757 variable warnings.
Darren Tucker4e218552010-01-16 23:58:37 +1100758 - (dtucker) [openbsd-compat/openbsd-compat.h] Typo.
Tim Rice999aaf42010-01-16 11:37:53 -0800759 - (tim) [regress/portnum.sh] Shell portability fix.
Tim Rice4a7db1c2010-01-16 12:23:25 -0800760 - (tim) [configure.ac] Define BROKEN_GETADDRINFO on SVR5 systems. The native
761 getaddrinfo() is too old and limited for addr_pton() in addrmatch.c.
Tim Rice33e48ac2010-01-17 07:12:40 -0800762 - (tim) [roaming_client.c] Use of <sys/queue.h> is not really portable so we
763 use "openbsd-compat/sys-queue.h". s/long long unsigned/unsigned long long/
764 to keep USL compilers happy.
Darren Tuckerca944852010-01-16 11:48:27 +1100765
Darren Tucker75fe6262010-01-15 11:42:51 +110076620100115
767 - (dtucker) OpenBSD CVS Sync
768 - jmc@cvs.openbsd.org 2010/01/13 12:48:34
769 [sftp.1 sftp.c]
770 sftp.1: put ls -h in the right place
771 sftp.c: as above, plus add -p to get/put, and shorten their arg names
772 to keep the help usage nicely aligned
773 ok djm
Darren Tucker94881d82010-01-15 11:44:46 +1100774 - djm@cvs.openbsd.org 2010/01/13 23:47:26
775 [auth.c]
776 when using ChrootDirectory, make sure we test for the existence of the
777 user's shell inside the chroot; bz #1679, patch from alex AT rtfs.hu;
778 ok dtucker
Darren Tuckera788de22010-01-15 11:45:33 +1100779 - dtucker@cvs.openbsd.org 2010/01/14 23:41:49
780 [sftp-common.c]
781 use user_from{uid,gid} to lookup up ids since it keeps a small cache.
782 ok djm
Darren Tuckerb8b17e92010-01-15 11:46:03 +1100783 - guenther@cvs.openbsd.org 2010/01/15 00:05:22
784 [sftp.c]
785 Reset SIGTERM to SIG_DFL before executing ssh, so that even if sftp
786 inherited SIGTERM as ignored it will still be able to kill the ssh it
787 starts.
788 ok dtucker@
Darren Tucker7fa3a852010-01-15 13:12:10 +1100789 - (dtucker) [openbsd-compat/pwcache.c] Pull in pwcache.c from OpenBSD (no
Darren Tucker9d1fd5b2010-01-15 12:14:45 +1100790 changes yet but there will be some to come).
Darren Tucker909a3902010-01-15 12:38:30 +1100791 - (dtucker) [configure.ac openbsd-compat/{Makefile.in,pwcache.c} Portability
792 for pwcache. Also, added caching of negative hits.
Darren Tucker75fe6262010-01-15 11:42:51 +1100793
Damien Miller6abc9f62010-01-14 12:44:16 +110079420100114
795 - (djm) [platform.h] Add missing prototype for
796 platform_krb5_get_principal_name
797
Darren Tuckera8f20cf2010-01-13 10:54:46 +110079820100113
799 - (dtucker) [monitor_fdpass.c] Wrap poll.h include in ifdefs.
Darren Tuckerab3c2ca2010-01-13 18:27:32 +1100800 - (dtucker) [openbsd-compat/readpassphrase.c] Resync against OpenBSD's r1.18:
801 missing restore of SIGTTOU and some whitespace.
Darren Tucker1035cb42010-01-13 18:32:59 +1100802 - (dtucker) [openbsd-compat/readpassphrase.c] Update to OpenBSD's r1.21.
Darren Tuckerd59487a2010-01-13 21:32:44 +1100803 - (dtucker) [openbsd-compat/readpassphrase.c] Update to OpenBSD's r1.22.
804 Fixes bz #1590, where sometimes you could not interrupt a connection while
805 ssh was prompting for a passphrase or password.
Darren Tuckere2b36742010-01-13 22:42:34 +1100806 - (dtucker) OpenBSD CVS Sync
807 - dtucker@cvs.openbsd.org 2010/01/13 00:19:04
808 [sshconnect.c auth.c]
809 Fix a couple of typos/mispellings in comments
Darren Tucker561724f2010-01-13 22:43:05 +1100810 - dtucker@cvs.openbsd.org 2010/01/13 01:10:56
811 [key.c]
812 Ignore and log any Protocol 1 keys where the claimed size is not equal to
813 the actual size. Noted by Derek Martin, ok djm@
Darren Tuckerdaaa4502010-01-13 22:43:33 +1100814 - dtucker@cvs.openbsd.org 2010/01/13 01:20:20
815 [canohost.c ssh-keysign.c sshconnect2.c]
816 Make HostBased authentication work with a ProxyCommand. bz #1569, patch
817 from imorgan at nas nasa gov, ok djm@
Darren Tucker2901e2d2010-01-13 22:44:06 +1100818 - djm@cvs.openbsd.org 2010/01/13 01:40:16
819 [sftp.c sftp-server.c sftp.1 sftp-common.c sftp-common.h]
820 support '-h' (human-readable units) for sftp's ls command, just like
821 ls(1); ok dtucker@
Darren Tucker88b6fb22010-01-13 22:44:29 +1100822 - djm@cvs.openbsd.org 2010/01/13 03:48:13
823 [servconf.c servconf.h sshd.c]
824 avoid run-time failures when specifying hostkeys via a relative
825 path by prepending the cwd in these cases; bz#1290; ok dtucker@
Darren Tucker9c3ba072010-01-13 22:45:03 +1100826 - djm@cvs.openbsd.org 2010/01/13 04:10:50
827 [sftp.c]
828 don't append a space after inserting a completion of a directory (i.e.
829 a path ending in '/') for a slightly better user experience; ok dtucker@
Darren Tucker096630d2010-01-13 23:00:38 +1100830 - (dtucker) [sftp-common.c] Wrap include of util.h in an ifdef.
Tim Riced4a7fcb2010-01-13 15:44:34 -0800831 - (tim) [defines.h] openbsd-compat/readpassphrase.c now needs _NSIG.
832 feedback and ok dtucker@
Darren Tuckera8f20cf2010-01-13 10:54:46 +1100833
Darren Tucker09aa4c02010-01-12 19:51:48 +110083420100112
Darren Tucker7ad8dd22010-01-12 19:40:27 +1100835 - (dtucker) OpenBSD CVS Sync
836 - dtucker@cvs.openbsd.org 2010/01/11 01:39:46
837 [ssh_config channels.c ssh.1 channels.h ssh.c]
838 Add a 'netcat mode' (ssh -W). This connects stdio on the client to a
839 single port forward on the server. This allows, for example, using ssh as
840 a ProxyCommand to route connections via intermediate servers.
841 bz #1618, man page help from jmc@, ok markus@
Darren Tuckerd4c86b12010-01-12 19:41:22 +1100842 - dtucker@cvs.openbsd.org 2010/01/11 04:46:45
843 [authfile.c sshconnect2.c]
844 Do not prompt for a passphrase if we fail to open a keyfile, and log the
845 reason the open failed to debug.
846 bz #1693, found by tj AT castaglia org, ok djm@
Darren Tuckerd04758d2010-01-12 19:41:57 +1100847 - djm@cvs.openbsd.org 2010/01/11 10:51:07
848 [ssh-keygen.c]
849 when converting keys, truncate key comments at 72 chars as per RFC4716;
850 bz#1630 reported by tj AT castaglia.org; ok markus@
Darren Tucker69c01b12010-01-12 19:42:29 +1100851 - dtucker@cvs.openbsd.org 2010/01/12 00:16:47
852 [authfile.c]
853 Fix bug introduced in r1.78 (incorrect brace location) that broke key auth.
854 Patch from joachim joachimschipper nl.
Darren Tuckere371a132010-01-12 19:43:12 +1100855 - djm@cvs.openbsd.org 2010/01/12 00:58:25
856 [monitor_fdpass.c]
857 avoid spinning when fd passing on nonblocking sockets by calling poll()
858 in the EINTR/EAGAIN path, much like we do in atomicio; ok dtucker@
Darren Tuckerc6cc90b2010-01-12 19:43:46 +1100859 - djm@cvs.openbsd.org 2010/01/12 00:59:29
860 [roaming_common.c]
861 delete with extreme prejudice a debug() that fired with every keypress;
862 ok dtucker deraadt
Darren Tucker1b0c2452010-01-12 19:45:26 +1100863 - dtucker@cvs.openbsd.org 2010/01/12 01:31:05
864 [session.c]
865 Do not allow logins if /etc/nologin exists but is not readable by the user
866 logging in. Noted by Jan.Pechanec at Sun, ok djm@ deraadt@
Darren Tuckerebc71d92010-01-12 19:45:59 +1100867 - djm@cvs.openbsd.org 2010/01/12 01:36:08
868 [buffer.h bufaux.c]
869 add a buffer_get_string_ptr_ret() that does the same as
870 buffer_get_string_ptr() but does not fatal() on error; ok dtucker@
Darren Tucker09aa4c02010-01-12 19:51:48 +1100871 - dtucker@cvs.openbsd.org 2010/01/12 08:33:17
872 [session.c]
873 Add explicit stat so we reliably detect nologin with bad perms.
874 ok djm markus
Darren Tucker7ad8dd22010-01-12 19:40:27 +1100875
87620100110
Darren Tucker8c65f642010-01-10 10:26:57 +1100877 - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c]
878 Remove hacks add for RoutingDomain in preparation for its removal.
Darren Tuckerd3300452010-01-10 19:26:43 +1100879 - (dtucker) OpenBSD CVS Sync
Darren Tucker7bd98e72010-01-10 10:31:12 +1100880 - dtucker@cvs.openbsd.org 2010/01/09 23:04:13
881 [channels.c ssh.1 servconf.c sshd_config.5 sshd.c channels.h servconf.h
882 ssh-keyscan.1 ssh-keyscan.c readconf.c sshconnect.c misc.c ssh.c
883 readconf.h scp.1 sftp.1 ssh_config.5 misc.h]
884 Remove RoutingDomain from ssh since it's now not needed. It can be
885 replaced with "route exec" or "nc -V" as a proxycommand. "route exec"
886 also ensures that trafic such as DNS lookups stays withing the specified
887 routingdomain. For example (from reyk):
888 # route -T 2 exec /usr/sbin/sshd
889 or inherited from the parent process
890 $ route -T 2 exec sh
891 $ ssh 10.1.2.3
892 ok deraadt@ markus@ stevesk@ reyk@
Darren Tuckerd3300452010-01-10 19:26:43 +1100893 - dtucker@cvs.openbsd.org 2010/01/10 03:51:17
894 [servconf.c]
895 Add ChrootDirectory to sshd.c test-mode output
Darren Tucker43551522010-01-10 19:27:17 +1100896 - dtucker@cvs.openbsd.org 2010/01/10 07:15:56
897 [auth.c]
898 Output a debug if we can't open an existing keyfile. bz#1694, ok djm@
Darren Tucker8c65f642010-01-10 10:26:57 +1100899
Darren Tucker7ad8dd22010-01-12 19:40:27 +110090020100109
Darren Tucker9eba40c2010-01-09 09:02:07 +1100901 - (dtucker) Wrap use of IPPROTO_IPV6 in an ifdef for platforms that don't
902 have it.
Darren Tucker709d0ce2010-01-09 09:25:54 +1100903 - (dtucker) [defines.h] define PRIu64 for platforms that don't have it.
Darren Tucker11b5c072010-01-09 16:40:48 +1100904 - (dtucker) [roaming_client.c] Wrap inttypes.h in an ifdef.
Darren Tucker0b8a2262010-01-09 18:18:04 +1100905 - (dtucker) [loginrec.c] Use the SUSv3 specified name for the user name
906 when using utmpx. Patch from Ed Schouten.
Darren Tuckerdb7bf822010-01-09 22:24:33 +1100907 - (dtucker) OpenBSD CVS Sync
908 - djm@cvs.openbsd.org 2010/01/09 00:20:26
909 [sftp-server.c sftp-server.8]
910 add a 'read-only' mode to sftp-server(8) that disables open in write mode
911 and all other fs-modifying protocol methods. bz#430 ok dtucker@
Darren Tuckera2e10482010-01-09 22:25:14 +1100912 - djm@cvs.openbsd.org 2010/01/09 00:57:10
913 [PROTOCOL]
914 tweak language
Darren Tucker838891f2010-01-09 22:25:46 +1100915 - jmc@cvs.openbsd.org 2010/01/09 03:36:00
916 [sftp-server.8]
917 bad place to forget a comma...
Darren Tucker37c1b3d2010-01-09 22:26:23 +1100918 - djm@cvs.openbsd.org 2010/01/09 05:04:24
919 [mux.c sshpty.h clientloop.c sshtty.c]
920 quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we
921 usually don't actually have a tty to read/set; bz#1686 ok dtucker@
Darren Tucker4b282512010-01-09 22:27:06 +1100922 - dtucker@cvs.openbsd.org 2010/01/09 05:17:00
923 [roaming_client.c]
924 Remove a PRIu64 format string that snuck in with roaming. ok djm@
Darren Tucker70cc0922010-01-09 22:28:03 +1100925 - dtucker@cvs.openbsd.org 2010/01/09 11:13:02
926 [sftp.c]
927 Prevent sftp from derefing a null pointer when given a "-" without a
928 command. Also, allow whitespace to follow a "-". bz#1691, path from
929 Colin Watson via Debian. ok djm@ deraadt@
Darren Tucker2c671bf2010-01-09 22:28:43 +1100930 - dtucker@cvs.openbsd.org 2010/01/09 11:17:56
931 [sshd.c]
932 Afer sshd receives a SIGHUP, ignore subsequent HUPs while sshd re-execs
933 itself. Prevents two HUPs in quick succession from resulting in sshd
934 dying. bz#1692, patch from Colin Watson via Ubuntu.
Darren Tucker269275c2010-01-09 22:33:37 +1100935 - (dtucker) [defines.h] Remove now-undeeded PRIu64 define.
Darren Tucker9eba40c2010-01-09 09:02:07 +1100936
Darren Tucker7ad8dd22010-01-12 19:40:27 +110093720100108
Darren Tuckerb7b17be2010-01-08 16:49:52 +1100938 - (dtucker) OpenBSD CVS Sync
939 - andreas@cvs.openbsd.org 2009/10/24 11:11:58
940 [roaming.h]
941 Declarations needed for upcoming changes.
942 ok markus@
Darren Tucker36331b52010-01-08 16:50:41 +1100943 - andreas@cvs.openbsd.org 2009/10/24 11:13:54
944 [sshconnect2.c kex.h kex.c]
945 Let the client detect if the server supports roaming by looking
946 for the resume@appgate.com kex algorithm.
947 ok markus@
Darren Tuckere32cf432010-01-08 16:51:40 +1100948 - andreas@cvs.openbsd.org 2009/10/24 11:15:29
949 [clientloop.c]
950 client_loop() must detect if the session has been suspended and resumed,
951 and take appropriate action in that case.
952 From Martin Forssen, maf at appgate dot com
Darren Tuckerf9e6eb82010-01-08 16:52:32 +1100953 - andreas@cvs.openbsd.org 2009/10/24 11:19:17
954 [ssh2.h]
955 Define the KEX messages used when resuming a suspended connection.
Darren Tuckere32cf432010-01-08 16:51:40 +1100956 ok markus@
Darren Tuckere7301182010-01-08 16:53:31 +1100957 - andreas@cvs.openbsd.org 2009/10/24 11:22:37
958 [roaming_common.c]
959 Do the actual suspend/resume in the client. This won't be useful until
960 the server side supports roaming.
961 Most code from Martin Forssen, maf at appgate dot com. Some changes by
962 me and markus@
963 ok markus@
Darren Tuckerf1de4e52010-01-08 16:54:59 +1100964 - andreas@cvs.openbsd.org 2009/10/24 11:23:42
965 [ssh.c]
966 Request roaming to be enabled if UseRoaming is true and the server
967 supports it.
968 ok markus@
Darren Tucker34e314d2010-01-08 17:03:46 +1100969 - reyk@cvs.openbsd.org 2009/10/28 16:38:18
970 [ssh_config.5 sshd.c misc.h ssh-keyscan.1 readconf.h sshconnect.c
971 channels.c channels.h servconf.h servconf.c ssh.1 ssh-keyscan.c scp.1
972 sftp.1 sshd_config.5 readconf.c ssh.c misc.c]
973 Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan.
974 ok markus@
Darren Tuckercc117f02010-01-08 17:05:26 +1100975 - jmc@cvs.openbsd.org 2009/10/28 21:45:08
976 [sshd_config.5 sftp.1]
977 tweak previous;
Darren Tucker78be8c52010-01-08 17:05:59 +1100978 - djm@cvs.openbsd.org 2009/11/10 02:56:22
979 [ssh_config.5]
980 explain the constraints on LocalCommand some more so people don't
981 try to abuse it.
Darren Tuckerf788a912010-01-08 17:06:47 +1100982 - djm@cvs.openbsd.org 2009/11/10 02:58:56
983 [sshd_config.5]
984 clarify that StrictModes does not apply to ChrootDirectory. Permissions
985 and ownership are always checked when chrooting. bz#1532
Darren Tucker6e7fe1c2010-01-08 17:07:22 +1100986 - dtucker@cvs.openbsd.org 2009/11/10 04:30:45
987 [sshconnect2.c channels.c sshconnect.c]
988 Set close-on-exec on various descriptors so they don't get leaked to
989 child processes. bz #1643, patch from jchadima at redhat, ok deraadt.
Darren Tucker876045b2010-01-08 17:08:00 +1100990 - markus@cvs.openbsd.org 2009/11/11 21:37:03
991 [channels.c channels.h]
992 fix race condition in x11/agent channel allocation: don't read after
993 the end of the select read/write fdset and make sure a reused FD
994 is not touched before the pre-handlers are called.
995 with and ok djm@
Darren Tucker29440822010-01-08 17:08:35 +1100996 - djm@cvs.openbsd.org 2009/11/17 05:31:44
997 [clientloop.c]
998 fix incorrect exit status when multiplexing and channel ID 0 is recycled
999 bz#1570 reported by peter.oliver AT eon-is.co.uk; ok dtucker
Darren Tuckerd6b06a92010-01-08 17:09:11 +11001000 - djm@cvs.openbsd.org 2009/11/19 23:39:50
1001 [session.c]
1002 bz#1606: error when an attempt is made to connect to a server
1003 with ForceCommand=internal-sftp with a shell session (i.e. not a
1004 subsystem session). Avoids stuck client when attempting to ssh to such a
1005 service. ok dtucker@
Darren Tuckerc3dc4042010-01-08 17:09:50 +11001006 - dtucker@cvs.openbsd.org 2009/11/20 00:15:41
1007 [session.c]
1008 Warn but do not fail if stat()ing the subsystem binary fails. This helps
1009 with chrootdirectory+forcecommand=sftp-server and restricted shells.
1010 bz #1599, ok djm.
Darren Tucker21063192010-01-08 17:10:36 +11001011 - djm@cvs.openbsd.org 2009/11/20 00:54:01
1012 [sftp.c]
1013 bz#1588 change "Connecting to host..." message to "Connected to host."
1014 and delay it until after the sftp protocol connection has been established.
1015 Avoids confusing sequence of messages when the underlying ssh connection
1016 experiences problems. ok dtucker@
Darren Tuckerab791692010-01-08 18:48:02 +11001017 - dtucker@cvs.openbsd.org 2009/11/20 00:59:36
1018 [sshconnect2.c]
1019 Use the HostKeyAlias when prompting for passwords. bz#1039, ok djm@
Darren Tucker70d87692010-01-08 18:49:16 +11001020 - djm@cvs.openbsd.org 2009/11/20 03:24:07
1021 [misc.c]
1022 correct off-by-one in percent_expand(): we would fatal() when trying
1023 to expand EXPAND_MAX_KEYS, allowing only EXPAND_MAX_KEYS-1 to actually
1024 work. Note that nothing in OpenSSH actually uses close to this limit at
1025 present. bz#1607 from Jan.Pechanec AT Sun.COM
Darren Tuckerc4dc4f52010-01-08 18:50:04 +11001026 - halex@cvs.openbsd.org 2009/11/22 13:18:00
1027 [sftp.c]
1028 make passing of zero-length arguments to ssh safe by
1029 passing "-<switch>" "<value>" rather than "-<switch><value>"
1030 ok dtucker@, guenther@, djm@
Darren Tucker5246df42010-01-08 18:50:46 +11001031 - dtucker@cvs.openbsd.org 2009/12/06 23:41:15
1032 [sshconnect2.c]
1033 zap unused variable and strlen; from Steve McClellan, ok djm
Darren Tucker75694db2010-01-08 18:51:14 +11001034 - djm@cvs.openbsd.org 2009/12/06 23:53:45
1035 [roaming_common.c]
1036 use socklen_t for getsockopt optlen parameter; reported by
1037 Steve.McClellan AT radisys.com, ok dtucker@
Darren Tuckerb5082e92010-01-08 18:51:47 +11001038 - dtucker@cvs.openbsd.org 2009/12/06 23:53:54
1039 [sftp.c]
1040 fix potential divide-by-zero in sftp's "df" output when talking to a server
1041 that reports zero files on the filesystem (Unix filesystems always have at
1042 least the root inode). From Steve McClellan at radisys, ok djm@
Darren Tucker57e0d012010-01-08 18:52:27 +11001043 - markus@cvs.openbsd.org 2009/12/11 18:16:33
1044 [key.c]
1045 switch from 35 to the more common value of RSA_F4 == (2**16)+1 == 65537
1046 for the RSA public exponent; discussed with provos; ok djm@
Darren Tuckerb8c884a2010-01-08 18:53:43 +11001047 - guenther@cvs.openbsd.org 2009/12/20 07:28:36
1048 [ssh.c sftp.c scp.c]
1049 When passing user-controlled options with arguments to other programs,
1050 pass the option and option argument as separate argv entries and
1051 not smashed into one (e.g., as -l foo and not -lfoo). Also, always
1052 pass a "--" argument to stop option parsing, so that a positional
1053 argument that starts with a '-' isn't treated as an option. This
1054 fixes some error cases as well as the handling of hostnames and
1055 filenames that start with a '-'.
1056 Based on a diff by halex@
1057 ok halex@ djm@ deraadt@
Darren Tuckerf2705c82010-01-08 18:54:17 +11001058 - djm@cvs.openbsd.org 2009/12/20 23:20:40
1059 [PROTOCOL]
1060 fix an incorrect magic number and typo in PROTOCOL; bz#1688
1061 report and fix from ueno AT unixuser.org
Darren Tucker75456e82010-01-08 18:55:58 +11001062 - stevesk@cvs.openbsd.org 2009/12/25 19:40:21
1063 [readconf.c servconf.c misc.h ssh-keyscan.c misc.c]
1064 validate routing domain is in range 0-RT_TABLEID_MAX.
1065 'Looks right' deraadt@
Darren Tucker535b5e12010-01-08 18:56:48 +11001066 - stevesk@cvs.openbsd.org 2009/12/29 16:38:41
1067 [sshd_config.5 readconf.c ssh_config.5 scp.1 servconf.c sftp.1 ssh.1]
1068 Rename RDomain config option to RoutingDomain to be more clear and
1069 consistent with other options.
1070 NOTE: if you currently use RDomain in the ssh client or server config,
1071 or ssh/sshd -o, you must update to use RoutingDomain.
1072 ok markus@ djm@
Darren Tucker98e5d9a2010-01-08 18:57:39 +11001073 - jmc@cvs.openbsd.org 2009/12/29 18:03:32
1074 [sshd_config.5 ssh_config.5]
1075 sort previous;
Darren Tucker0c348f52010-01-08 18:58:05 +11001076 - dtucker@cvs.openbsd.org 2010/01/04 01:45:30
1077 [sshconnect2.c]
1078 Don't escape backslashes in the SSH2 banner. bz#1533, patch from
1079 Michal Gorny via Gentoo.
Darren Tucker909d8582010-01-08 19:02:40 +11001080 - djm@cvs.openbsd.org 2010/01/04 02:03:57
1081 [sftp.c]
1082 Implement tab-completion of commands, local and remote filenames for sftp.
1083 Hacked on and off for some time by myself, mouring, Carlos Silva (via 2009
1084 Google Summer of Code) and polished to a fine sheen by myself again.
1085 It should deal more-or-less correctly with the ikky corner-cases presented
1086 by quoted filenames, but the UI could still be slightly improved.
1087 In particular, it is quite slow for remote completion on large directories.
1088 bz#200; ok markus@
Darren Tuckeraaf51d22010-01-08 19:04:49 +11001089 - djm@cvs.openbsd.org 2010/01/04 02:25:15
1090 [sftp-server.c]
1091 bz#1566 don't unnecessarily dup() in and out fds for sftp-server;
1092 ok markus@
Darren Tucker340d1682010-01-09 08:54:31 +11001093 - dtucker@cvs.openbsd.org 2010/01/08 21:50:49
1094 [sftp.c]
1095 Fix two warnings: possibly used unitialized and use a nul byte instead of
1096 NULL pointer. ok djm@
Darren Tucker8cbd4032010-01-08 19:13:25 +11001097 - (dtucker) [Makefile.in added roaming_client.c roaming_serv.c] Import new
1098 files for roaming and add to Makefile.
Darren Tuckerdce7a922010-01-08 19:27:57 +11001099 - (dtucker) [Makefile.in] .c files do not belong in the OBJ lines.
Darren Tuckere67f7db2010-01-08 19:50:02 +11001100 - (dtucker) [sftp.c] ifdef out the sftp completion bits for platforms that
1101 don't have libedit.
Darren Tucker1f5e3dc2010-01-08 19:53:52 +11001102 - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] Make
1103 RoutingDomain an unsupported option on platforms that don't have it.
Darren Tucker843f0fa2010-01-08 19:56:33 +11001104 - (dtucker) [sftp.c] Expand ifdef for libedit to cover complete_is_remote
1105 too.
Darren Tuckere83c3ea2010-01-08 20:03:56 +11001106 - (dtucker) [misc.c] Move the routingdomain ifdef to allow the socket to
1107 be created.
Darren Tuckercb5a1b62010-01-08 20:09:01 +11001108 - (dtucker] [misc.c] Shrink the area covered by USE_ROUTINGDOMAIN more
1109 to eliminate an unused variable warning.
Darren Tucker1a8f5352010-01-08 20:45:42 +11001110 - (dtucker) [roaming_serv.c] Include includes.h for u_intXX_t types.
Darren Tuckerb7b17be2010-01-08 16:49:52 +11001111
Tim Rice880ab0d2009-12-26 15:40:47 -0800111220091226
1113 - (tim) [contrib/cygwin/Makefile] Install ssh-copy-id and ssh-copy-id.1
1114 Gzip all man pages. Patch from Corinna Vinschen.
1115
Darren Tucker1bf35032009-12-21 10:49:21 +1100111620091221
1117 - (dtucker) [auth-krb5.c platform.{c,h} openbsd-compat/port-aix.{c,h}]
1118 Bug #1583: Use system's kerberos principal name on AIX if it's available.
1119 Based on a patch from and tested by Miguel Sanders
1120
Darren Tuckerc8802aa2009-12-08 13:39:48 +1100112120091208
1122 - (dtucker) Bug #1470: Disable OOM-killing of the listening sshd on Linux,
1123 based on a patch from Vaclav Ovsik and Colin Watson. ok djm.
1124
Darren Tucker15333112009-12-07 11:15:43 +1100112520091207
1126 - (dtucker) Bug #1160: use pkg-config for opensc config if it's available.
1127 Tested by Martin Paljak.
Darren Tuckerd35e0ef2009-12-07 11:32:36 +11001128 - (dtucker) Bug #1677: add conditionals around the source for ssh-askpass.
Darren Tucker15333112009-12-07 11:15:43 +11001129
Tim Rice53e99742009-11-20 19:32:15 -0800113020091121
1131 - (tim) [opensshd.init.in] If PidFile is set in sshd_config, use it.
1132 Bug 1628. OK dtucker@
1133
Damien Miller409661f2009-11-20 15:16:35 +1100113420091120
1135 - (djm) [ssh-rand-helper.c] Print error and usage() when passed command-
1136 line arguments as none are supported. Exit when passed unrecognised
1137 commandline flags. bz#1568 from gson AT araneus.fi
1138
113920091118
Damien Miller04ee0f82009-11-18 17:48:30 +11001140 - (djm) [channels.c misc.c misc.h sshd.c] add missing setsockopt() to
1141 set IPV6_V6ONLY for local forwarding with GatwayPorts=yes. Unify
1142 setting IPV6_V6ONLY behind a new function misc.c:sock_set_v6only()
Damien Miller2191e042009-11-18 17:51:59 +11001143 bz#1648, report and fix from jan.kratochvil AT redhat.com
1144 - (djm) [contrib/gnome-ssh-askpass2.c] Make askpass dialog desktop-modal.
1145 bz#1645, patch from jchadima AT redhat.com
Damien Miller04ee0f82009-11-18 17:48:30 +11001146
114720091107
Darren Tuckerdf6578b2009-11-07 16:03:14 +11001148 - (dtucker) [authfile.c] Fall back to 3DES for the encryption of private
1149 keys when built with OpenSSL versions that don't do AES.
1150
Darren Tuckere89ed1c2009-11-05 20:43:16 +1100115120091105
1152 - (dtucker) [authfile.c] Add OpenSSL compat header so this still builds with
1153 older versions of OpenSSL.
1154
Darren Tucker1b118882009-10-24 11:40:32 +1100115520091024
1156 - (dtucker) OpenBSD CVS Sync
1157 - djm@cvs.openbsd.org 2009/10/11 23:03:15
1158 [hostfile.c]
1159 mention the host name that we are looking for in check_host_in_hostfile()
Darren Tucker49b7e232009-10-24 11:41:05 +11001160 - sobrado@cvs.openbsd.org 2009/10/17 12:10:39
1161 [sftp-server.c]
1162 sort flags.
Darren Tuckerae69e1d2009-10-24 11:41:34 +11001163 - sobrado@cvs.openbsd.org 2009/10/22 12:35:53
1164 [ssh.1 ssh-agent.1 ssh-add.1]
1165 use the UNIX-related macros (.At and .Ux) where appropriate.
1166 ok jmc@
Darren Tucker98c9aec2009-10-24 11:42:44 +11001167 - sobrado@cvs.openbsd.org 2009/10/22 15:02:12
1168 [ssh-agent.1 ssh-add.1 ssh.1]
1169 write UNIX-domain in a more consistent way; while here, replace a
1170 few remaining ".Tn UNIX" macros with ".Ux" ones.
1171 pointed out by ratchov@, thanks!
1172 ok jmc@
Darren Tuckerdfb9b712009-10-24 11:46:43 +11001173 - djm@cvs.openbsd.org 2009/10/22 22:26:13
1174 [authfile.c]
1175 switch from 3DES to AES-128 for encryption of passphrase-protected
1176 SSH protocol 2 private keys; ok several
Darren Tucker2f29a8c2009-10-24 11:47:58 +11001177 - djm@cvs.openbsd.org 2009/10/23 01:57:11
1178 [sshconnect2.c]
1179 disallow a hostile server from checking jpake auth by sending an
1180 out-of-sequence success message. (doesn't affect code enabled by default)
Darren Tucker199ee6f2009-10-24 11:50:17 +11001181 - dtucker@cvs.openbsd.org 2009/10/24 00:48:34
1182 [ssh-keygen.1]
1183 ssh-keygen now uses AES-128 for private keys
Darren Tucker6ac91a72009-10-24 11:52:42 +11001184 - (dtucker) [mdoc2man.awk] Teach it to understand the .Ux macro.
Darren Tucker4d6656b2009-10-24 15:04:12 +11001185 - (dtucker) [session.c openbsd-compat/port-linux.{c,h}] Bug #1637: if selinux
1186 is enabled set the security context to "sftpd_t" before running the
1187 internal sftp server Based on a patch from jchadima at redhat.
Darren Tucker1b118882009-10-24 11:40:32 +11001188
Darren Tuckerc182d992009-10-11 21:50:20 +1100118920091011
1190 - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for
1191 dirent d_type and DTTOIF as we've switched OpenBSD to the more portable
1192 lstat.
Darren Tuckerbad50762009-10-11 21:51:08 +11001193 - (dtucker) OpenBSD CVS Sync
1194 - markus@cvs.openbsd.org 2009/10/08 14:03:41
1195 [sshd_config readconf.c ssh_config.5 servconf.c sshd_config.5]
1196 disable protocol 1 by default (after a transition period of about 10 years)
1197 ok deraadt
Darren Tucker7a4a7652009-10-11 21:51:40 +11001198 - jmc@cvs.openbsd.org 2009/10/08 20:42:12
1199 [sshd_config.5 ssh_config.5 sshd.8 ssh.1]
1200 some tweaks now that protocol 1 is not offered by default; ok markus
Darren Tucker438b4732009-10-11 21:52:10 +11001201 - dtucker@cvs.openbsd.org 2009/10/11 10:41:26
1202 [sftp-client.c]
1203 d_type isn't portable so use lstat to get dirent modes. Suggested by and
1204 "looks sane" deraadt@
Darren Tuckere23a79c2009-10-12 09:37:22 +11001205 - markus@cvs.openbsd.org 2009/10/08 18:04:27
1206 [regress/test-exec.sh]
1207 re-enable protocol v1 for the tests.
Darren Tuckerc182d992009-10-11 21:50:20 +11001208
Darren Tucker46bbbe32009-10-07 08:21:48 +1100120920091007
1210 - (dtucker) OpenBSD CVS Sync
1211 - djm@cvs.openbsd.org 2009/08/12 00:13:00
1212 [sftp.c sftp.1]
1213 support most of scp(1)'s commandline arguments in sftp(1), as a first
1214 step towards making sftp(1) a drop-in replacement for scp(1).
1215 One conflicting option (-P) has not been changed, pending further
1216 discussion.
1217 Patch from carlosvsilvapt@gmail.com as part of his work in the
1218 Google Summer of Code
Darren Tuckeradba1ba2009-10-07 08:22:20 +11001219 - jmc@cvs.openbsd.org 2009/08/12 06:31:42
1220 [sftp.1]
1221 sort options;
Darren Tucker282b4022009-10-07 08:23:06 +11001222 - djm@cvs.openbsd.org 2009/08/13 01:11:19
1223 [sftp.1 sftp.c]
1224 Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
1225 add "-P port" to match scp(1). Fortunately, the -P option is only really
1226 used by our regression scripts.
1227 part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
1228 of Code work; ok deraadt markus
Darren Tuckerc07138e2009-10-07 08:23:44 +11001229 - jmc@cvs.openbsd.org 2009/08/13 13:39:54
1230 [sftp.1 sftp.c]
1231 sync synopsis and usage();
Darren Tuckerc22f0902009-10-07 08:24:19 +11001232 - djm@cvs.openbsd.org 2009/08/14 18:17:49
1233 [sftp-client.c]
1234 make the "get_handle: ..." error messages vaguely useful by allowing
1235 callers to specify their own error message strings.
Darren Tuckere54a0362009-10-07 08:35:32 +11001236 - fgsch@cvs.openbsd.org 2009/08/15 18:56:34
1237 [auth.h]
1238 remove unused define. markus@ ok.
1239 (Id sync only, Portable still uses this.)
Darren Tucker1477ea12009-10-07 08:36:05 +11001240 - dtucker@cvs.openbsd.org 2009/08/16 23:29:26
1241 [sshd_config.5]
1242 Add PubkeyAuthentication to the list allowed in a Match block (bz #1577)
Darren Tucker1b0dd172009-10-07 08:37:48 +11001243 - djm@cvs.openbsd.org 2009/08/18 18:36:21
1244 [sftp-client.h sftp.1 sftp-client.c sftp.c]
1245 recursive transfer support for get/put and on the commandline
1246 work mostly by carlosvsilvapt@gmail.com for the Google Summer of Code
1247 with some tweaks by me; "go for it" deraadt@
Darren Tucker05016b22009-10-07 08:38:23 +11001248 - djm@cvs.openbsd.org 2009/08/18 21:15:59
1249 [sftp.1]
1250 fix "get" command usage, spotted by jmc@
Darren Tuckerb3b40a82009-10-07 08:39:09 +11001251 - jmc@cvs.openbsd.org 2009/08/19 04:56:03
1252 [sftp.1]
1253 ether -> either;
Darren Tucker8ec4fd82009-10-07 08:39:57 +11001254 - dtucker@cvs.openbsd.org 2009/08/20 23:54:28
1255 [mux.c]
1256 subsystem_flag is defined in ssh.c so it's extern; ok djm
Darren Tucker7dc48502009-10-07 08:44:42 +11001257 - djm@cvs.openbsd.org 2009/08/27 17:28:52
1258 [sftp-server.c]
1259 allow setting an explicit umask on the commandline to override whatever
1260 default the user has. bz#1229; ok dtucker@ deraadt@ markus@
Darren Tucker9bcd25b2009-10-07 08:45:48 +11001261 - djm@cvs.openbsd.org 2009/08/27 17:33:49
1262 [ssh-keygen.c]
1263 force use of correct hash function for random-art signature display
1264 as it was inheriting the wrong one when bubblebabble signatures were
1265 activated; bz#1611 report and patch from fwojcik+openssh AT besh.com;
1266 ok markus@
Darren Tucker6b286a42009-10-07 08:46:21 +11001267 - djm@cvs.openbsd.org 2009/08/27 17:43:00
1268 [sftp-server.8]
1269 allow setting an explicit umask on the commandline to override whatever
1270 default the user has. bz#1229; ok dtucker@ deraadt@ markus@
Darren Tucker893d7352009-10-07 08:47:02 +11001271 - djm@cvs.openbsd.org 2009/08/27 17:44:52
1272 [authfd.c ssh-add.c authfd.h]
1273 Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
1274 when the agent refuses the constrained add request. This was a useful
1275 migration measure back in 2002 when constraints were new, but just
1276 adds risk now.
1277 bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@
Darren Tucker30359e12009-10-07 08:47:24 +11001278 - djm@cvs.openbsd.org 2009/08/31 20:56:02
1279 [sftp-server.c]
1280 check correct variable for error message, spotted by martynas@
Darren Tucker7bee06a2009-10-07 08:47:47 +11001281 - djm@cvs.openbsd.org 2009/08/31 21:01:29
1282 [sftp-server.8]
1283 document -e and -h; prodded by jmc@
Darren Tucker72473c62009-10-07 09:01:03 +11001284 - djm@cvs.openbsd.org 2009/09/01 14:43:17
1285 [ssh-agent.c]
1286 fix a race condition in ssh-agent that could result in a wedged or
1287 spinning agent: don't read off the end of the allocated fd_sets, and
1288 don't issue blocking read/write on agent sockets - just fall back to
1289 select() on retriable read/write errors. bz#1633 reported and tested
1290 by "noodle10000 AT googlemail.com"; ok dtucker@ markus@
Darren Tucker759cb2a2009-10-07 09:01:50 +11001291 - grunk@cvs.openbsd.org 2009/10/01 11:37:33
1292 [dh.c]
1293 fix a cast
1294 ok djm@ markus@
Darren Tucker695ed392009-10-07 09:02:18 +11001295 - djm@cvs.openbsd.org 2009/10/06 04:46:40
1296 [session.c]
1297 bz#1596: fflush(NULL) before exec() to ensure that everying (motd
1298 in particular) has made it out before the streams go away.
Darren Tucker7023d162009-10-07 10:30:06 +11001299 - djm@cvs.openbsd.org 2008/12/07 22:17:48
1300 [regress/addrmatch.sh]
1301 match string "passwordauthentication" only at start of line, not anywhere
1302 in sshd -T output
Darren Tucker79885532009-10-07 10:30:57 +11001303 - dtucker@cvs.openbsd.org 2009/05/05 07:51:36
1304 [regress/multiplex.sh]
1305 Always specify ssh_config for multiplex tests: prevents breakage caused
1306 by options in ~/.ssh/config. From Dan Peterson.
Darren Tucker287b9322009-10-07 10:31:56 +11001307 - djm@cvs.openbsd.org 2009/08/13 00:57:17
1308 [regress/Makefile]
1309 regression test for port number parsing. written as part of the a2port
1310 change that went into 5.2 but I forgot to commit it at the time...
Darren Tuckered6b0c52009-10-07 10:43:57 +11001311 - djm@cvs.openbsd.org 2009/08/13 01:11:55
Darren Tuckerb707a242009-10-07 10:54:31 +11001312 [regress/sftp-batch.sh regress/sftp-badcmds.sh regress/sftp.sh
1313 regress/sftp-cmds.sh regres/sftp-glob.sh]
Darren Tuckered6b0c52009-10-07 10:43:57 +11001314 date: 2009/08/13 01:11:19; author: djm; state: Exp; lines: +10 -7
1315 Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",
1316 add "-P port" to match scp(1). Fortunately, the -P option is only really
1317 used by our regression scripts.
1318 part of larger patch from carlosvsilvapt@gmail.com for his Google Summer
1319 of Code work; ok deraadt markus
Darren Tuckerc8638952009-10-07 10:46:29 +11001320 - djm@cvs.openbsd.org 2009/08/20 18:43:07
Darren Tuckerb707a242009-10-07 10:54:31 +11001321 [regress/ssh-com-sftp.sh]
Darren Tuckerc8638952009-10-07 10:46:29 +11001322 fix one sftp -D ... => sftp -P ... conversion that I missed; from Carlos
1323 Silva for Google Summer of Code
Darren Tuckerb707a242009-10-07 10:54:31 +11001324 - dtucker@cvs.openbsd.org 2009/10/06 23:51:49
1325 [regress/ssh2putty.sh]
1326 Add OpenBSD tag to make syncs easier
Darren Tuckera25ab012009-10-07 11:00:58 +11001327 - (dtucker) [regress/portnum.sh] Import new test.
Darren Tucker538738d2009-10-07 18:56:10 +11001328 - (dtucker) [configure.ac sftp-client.c] DTOTIF is in fs/ffs/dir.h on at
Darren Tucker4adeac72009-10-07 15:49:48 +11001329 least dragonflybsd.
Darren Tucker538738d2009-10-07 18:56:10 +11001330 - (dtucker) d_type is not mandated by POSIX, so add fallback code using
1331 stat(), needed on at least cygwin.
Darren Tucker46bbbe32009-10-07 08:21:48 +11001332
Damien Miller350666d2009-10-02 11:50:55 +1000133320091002
1334 - (djm) [Makefile.in] Mention readconf.o in ssh-keysign's make deps.
1335 spotted by des AT des.no
1336
Damien Millerea437422009-10-02 11:49:03 +1000133720090926
1338 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
1339 [contrib/suse/openssh.spec] Update for release
1340 - (djm) [README] update relnotes URL
1341 - (djm) [packet.c] Restore EWOULDBLOCK handling that got lost somewhere
1342 - (djm) Release 5.3p1
1343
Darren Tuckere02b49a2009-09-11 14:56:08 +1000134420090911
1345 - (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X
1346 10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query). Patch
1347 from jbasney at ncsa uiuc edu.
1348
Damien Millere5d5a172009-09-09 11:07:28 +1000134920090908
1350 - (djm) [serverloop.c] Fix test for server-assigned remote forwarding port
1351 (-R 0:...); bz#1578, spotted and fix by gavin AT emf.net; ok dtucker@
1352
Darren Tuckerdad48e72009-09-01 18:26:00 +1000135320090901
1354 - (dtucker) [configure.ac] Bug #1639: use AC_PATH_PROG to search the path for
1355 krb5-config if it's not in the location specified by --with-kerberos5.
1356 Patch from jchadima at redhat.
1357
Darren Tucker427adf12009-08-29 09:14:48 +1000135820090829
1359 - (dtucker) [README.platform] Add text about development packages, based on
1360 text from Chris Pepper in bug #1631.
1361
Darren Tucker28b973e2009-08-28 10:16:44 +1000136220090828
1363 - dtucker [auth-sia.c] Roll back the change for bug #1241 as it apparently
1364 causes problems in some Tru64 configurations.
Damien Miller8aac9932009-08-28 10:40:30 +10001365 - (djm) [sshd_config.5] downgrade mention of login.conf to be an example
1366 and mention PAM as another provider for ChallengeResponseAuthentication;
1367 bz#1408; ok dtucker@
Damien Miller0e265512009-08-28 10:43:13 +10001368 - (djm) [sftp-server.c] bz#1535: accept ENOSYS as a fallback error when
1369 attempting atomic rename(); ok dtucker@
Damien Miller7d4a2682009-08-28 10:47:38 +10001370 - (djm) [Makefile.in] bz#1505: Solaris make(1) doesn't accept make variables
1371 in argv, so pass them in the environment; ok dtucker@
Darren Tucker3980b632009-08-28 11:02:37 +10001372 - (dtucker) [channels.c configure.ac] Bug #1528: skip the tcgetattr call on
1373 the pty master on Solaris, since it never succeeds and can hang if large
1374 amounts of data is sent to the slave (eg a copy-paste). Based on a patch
1375 originally from Doke Scott, ok djm@
Darren Tucker86e30a02009-08-28 11:21:06 +10001376 - (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer
1377 size a compile-time option and set it to 64k on Cygwin, since Corinna
1378 reports that it makes a significant difference to performance. ok djm@
Darren Tuckerac9f1b92009-08-28 15:01:20 +10001379 - (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry.
Darren Tucker28b973e2009-08-28 10:16:44 +10001380
Darren Tucker2a5588d2009-08-20 16:16:01 +1000138120090820
1382 - (dtucker) [includes.h] Bug #1634: do not include system glob.h if we're not
1383 using it since the type conflicts can cause problems on FreeBSD. Patch
1384 from Jonathan Chen.
Darren Tucker82edf232009-08-20 16:20:50 +10001385 - (dtucker) [session.c openbsd-compat/port-aix.h] Bugs #1249 and #1567: move
1386 the setpcred call on AIX to immediately before the permanently_set_uid().
1387 Ensures that we still have privileges when we call chroot and
1388 pam_open_sesson. Based on a patch from David Leonard.
Darren Tucker2a5588d2009-08-20 16:16:01 +10001389
Darren Tucker83d8f282009-08-17 09:35:22 +1000139020090817
1391 - (dtucker) [configure.ac] Check for headers before libraries for openssl an
1392 zlib, which should make the errors slightly more meaningful on platforms
1393 where there's separate "-devel" packages for those.
Darren Tuckerb5d5ee12009-08-17 09:40:00 +10001394 - (dtucker) [sshlogin.c openbsd-compat/port-aix.{c,h}] Bug #1595: make
1395 PrintLastLog work on AIX. Based in part on a patch from Miguel Sanders.
Darren Tucker83d8f282009-08-17 09:35:22 +10001396
Tim Ricecaeb1642009-07-29 07:21:13 -0700139720090729
1398 - (tim) [contrib/cygwin/ssh-user-config] Change script to call correct error
1399 function. Patch from Corinna Vinschen.
1400
Darren Tucker440089a2009-07-13 11:38:23 +1000140120090713
1402 - (dtucker) [openbsd-compat/getrrsetbyname.c] Reduce answer buffer size so it
1403 fits into 16 bits to work around a bug in glibc's resolver where it masks
1404 off the buffer size at 16 bits. Patch from Hauke Lampe, ok djm jakob.
1405
Darren Tuckerc4b22ca2009-07-12 21:56:29 +1000140620090712
1407 - (dtucker) [configure.ac] Include sys/param.h for the sys/mount.h test,
1408 prevents configure complaining on older BSDs.
Darren Tucker8fdcba52009-07-12 21:58:42 +10001409 - (dtucker [contrib/cygwin/ssh-{host,user}-config] Add license text. Patch
1410 from Corinna Vinschen.
Darren Tucker622d5c52009-07-12 22:07:21 +10001411 - (dtucker) [auth-pam.c] Bug #1534: move the deletion of PAM credentials on
Darren Tucker916fdda2009-07-12 22:12:28 +10001412 logout to after the session close. Patch from Anicka Bernathova,
1413 originally from Andreas Schwab via Novelll ok djm.
Darren Tuckerc4b22ca2009-07-12 21:56:29 +10001414
Darren Tucker4d4fdc02009-07-07 21:19:11 +1000141520090707
1416 - (dtucker) [contrib/cygwin/ssh-host-config] better support for automated
1417 scripts and fix usage of eval. Patch from Corinna Vinschen.
1418
141920090705
Darren Tuckere841eb02009-07-06 07:11:13 +10001420 - (dtucker) OpenBSD CVS Sync
1421 - andreas@cvs.openbsd.org 2009/06/27 09:29:06
1422 [packet.h packet.c]
1423 packet_bacup_state() and packet_restore_state() will be used to
1424 temporarily save the current state ren resuming a suspended connection.
1425 ok markus@
Darren Tucker466df212009-07-06 07:11:52 +10001426 - andreas@cvs.openbsd.org 2009/06/27 09:32:43
1427 [roaming_common.c roaming.h]
1428 It may be necessary to retransmit some data when resuming, so add it
1429 to a buffer when roaming is enabled.
1430 Most of this code was written by Martin Forssen, maf at appgate dot com.
1431 ok markus@
Darren Tucker71e4d542009-07-06 07:12:27 +10001432 - andreas@cvs.openbsd.org 2009/06/27 09:35:06
1433 [readconf.h readconf.c]
1434 Add client option UseRoaming. It doesn't do anything yet but will
1435 control whether the client tries to use roaming if enabled on the
1436 server. From Martin Forssen.
1437 ok markus@
Darren Tuckercd6b1a22009-07-06 07:13:04 +10001438 - markus@cvs.openbsd.org 2009/06/30 14:54:40
1439 [version.h]
1440 crank version; ok deraadt
Darren Tucker199b1342009-07-06 07:16:56 +10001441 - dtucker@cvs.openbsd.org 2009/07/02 02:11:47
1442 [ssh.c]
1443 allow for long home dir paths (bz #1615). ok deraadt
1444 (based in part on a patch from jchadima at redhat)
Darren Tuckerde0c0252009-07-06 07:17:35 +10001445 - stevesk@cvs.openbsd.org 2009/07/05 19:28:33
1446 [clientloop.c]
1447 only send SSH2_MSG_DISCONNECT if we're in compat20; from dtucker@
1448 ok deraadt@ markus@
Darren Tuckere841eb02009-07-06 07:11:13 +10001449
Darren Tucker821d3db2009-06-22 16:11:06 +1000145020090622
1451 - (dtucker) OpenBSD CVS Sync
1452 - dtucker@cvs.openbsd.org 2009/06/22 05:39:28
1453 [monitor_wrap.c monitor_mm.c ssh-keygen.c auth2.c gss-genr.c sftp-client.c]
1454 alphabetize includes; reduces diff vs portable and style(9).
1455 ok stevesk djm
1456 (Id sync only; these were already in order in -portable)
1457
Darren Tucker72efd742009-06-21 17:48:00 +1000145820090621
1459 - (dtucker) OpenBSD CVS Sync
1460 - markus@cvs.openbsd.org 2009/03/17 21:37:00
1461 [ssh.c]
1462 pass correct argv[0] to openlog(); ok djm@
Darren Tucker3a6a51f2009-06-21 17:48:52 +10001463 - jmc@cvs.openbsd.org 2009/03/19 15:15:09
1464 [ssh.1]
1465 for "Ciphers", just point the reader to the keyword in ssh_config(5), just
1466 as we do for "MACs": this stops us getting out of sync when the lists
1467 change;
1468 fixes documentation/6102, submitted by Peter J. Philipp
1469 alternative fix proposed by djm
1470 ok markus
Darren Tuckera0964502009-06-21 17:49:36 +10001471 - tobias@cvs.openbsd.org 2009/03/23 08:31:19
1472 [ssh-agent.c]
1473 Fixed a possible out-of-bounds memory access if the environment variable
1474 SHELL is shorter than 3 characters.
1475 with input by and ok dtucker
Darren Tucker90133232009-06-21 17:50:15 +10001476 - tobias@cvs.openbsd.org 2009/03/23 19:38:04
1477 [ssh-agent.c]
1478 My previous commit didn't fix the problem at all, so stick at my first
1479 version of the fix presented to dtucker.
1480 Issue notified by Matthias Barkhoff (matthias dot barkhoff at gmx dot de).
1481 ok dtucker
Darren Tucker5837b512009-06-21 17:52:27 +10001482 - sobrado@cvs.openbsd.org 2009/03/26 08:38:39
1483 [sftp-server.8 sshd.8 ssh-agent.1]
1484 fix a few typographical errors found by spell(1).
1485 ok dtucker@, jmc@
Darren Tuckeraf501cf2009-06-21 17:53:04 +10001486 - stevesk@cvs.openbsd.org 2009/04/13 19:07:44
1487 [sshd_config.5]
1488 fix possessive; ok djm@
Darren Tuckerb62f1a82009-06-21 17:53:48 +10001489 - stevesk@cvs.openbsd.org 2009/04/14 16:33:42
1490 [sftp-server.c]
1491 remove unused option character from getopt() optstring; ok markus@
Darren Tucker3b59dfa2009-06-21 17:54:47 +10001492 - jj@cvs.openbsd.org 2009/04/14 21:10:54
1493 [servconf.c]
1494 Fixed a few the-the misspellings in comments. Skipped a bunch in
1495 binutils,gcc and so on. ok jmc@
Darren Tuckerac46a912009-06-21 17:55:23 +10001496 - stevesk@cvs.openbsd.org 2009/04/17 19:23:06
1497 [session.c]
1498 use INTERNAL_SFTP_NAME for setproctitle() of in-process sftp-server;
1499 ok djm@ markus@
Darren Tucker00fcd712009-06-21 17:56:00 +10001500 - stevesk@cvs.openbsd.org 2009/04/17 19:40:17
1501 [sshd_config.5]
1502 clarify that even internal-sftp needs /dev/log for logging to work; ok
1503 markus@
Darren Tuckerf92077f2009-06-21 17:56:25 +10001504 - jmc@cvs.openbsd.org 2009/04/18 18:39:10
1505 [sshd_config.5]
1506 tweak previous; ok stevesk
Darren Tucker51dbe502009-06-21 17:56:51 +10001507 - stevesk@cvs.openbsd.org 2009/04/21 15:13:17
1508 [sshd_config.5]
1509 clarify we cd to user's home after chroot; ok markus@ on
1510 earlier version; tweaks and ok jmc@
Darren Tuckerf7288d72009-06-21 18:12:20 +10001511 - andreas@cvs.openbsd.org 2009/05/25 06:48:01
1512 [channels.c packet.c clientloop.c packet.h serverloop.c monitor_wrap.c
1513 monitor.c]
1514 Put the globals in packet.c into a struct and don't access it directly
1515 from other files. No functional changes.
1516 ok markus@ djm@
1517 - andreas@cvs.openbsd.org 2009/05/27 06:31:25
1518 [canohost.h canohost.c]
1519 Add clear_cached_addr(), needed for upcoming changes allowing the peer
1520 address to change.
1521 ok markus@
Darren Tucker39c76322009-06-21 18:13:57 +10001522 - andreas@cvs.openbsd.org 2009/05/27 06:33:39
1523 [clientloop.c]
1524 Send SSH2_MSG_DISCONNECT when the client disconnects. From a larger
1525 change from Martin Forssen, maf at appgate dot com.
1526 ok markus@
Darren Tucker12b4a652009-06-21 18:14:48 +10001527 - andreas@cvs.openbsd.org 2009/05/27 06:34:36
1528 [kex.c kex.h]
1529 Move the KEX_COOKIE_LEN define to kex.h
1530 ok markus@
Darren Tucker5b48cdd2009-06-21 18:15:25 +10001531 - andreas@cvs.openbsd.org 2009/05/27 06:36:07
1532 [packet.h packet.c]
1533 Add packet_put_int64() and packet_get_int64(), part of a larger change
1534 from Martin Forssen.
Darren Tucker761c3892009-06-21 18:16:26 +10001535 ok markus@
1536 - andreas@cvs.openbsd.org 2009/05/27 06:38:16
1537 [sshconnect.h sshconnect.c]
1538 Un-static ssh_exchange_identification(), part of a larger change from
1539 Martin Forssen and needed for upcoming changes.
1540 ok markus@
Darren Tucker1cc55d72009-06-21 18:17:19 +10001541 - andreas@cvs.openbsd.org 2009/05/28 16:50:16
1542 [sshd.c packet.c serverloop.c monitor_wrap.c clientloop.c sshconnect.c
Darren Tuckerc5564e12009-06-21 18:53:53 +10001543 monitor.c Added roaming.h roaming_common.c roaming_dummy.c]
Darren Tucker1cc55d72009-06-21 18:17:19 +10001544 Keep track of number of bytes read and written. Needed for upcoming
1545 changes. Most code from Martin Forssen, maf at appgate dot com.
1546 ok markus@
Darren Tuckerc5564e12009-06-21 18:53:53 +10001547 Also, applied appropriate changes to Makefile.in
Darren Tuckerb422afa2009-06-21 18:58:46 +10001548 - andreas@cvs.openbsd.org 2009/06/12 20:43:22
1549 [monitor.c packet.c]
1550 Fix warnings found by chl@ and djm@ and change roaming_atomicio's
1551 return type to match atomicio's
1552 Diff from djm@, ok markus@
Darren Tucker7b935c72009-06-21 18:59:36 +10001553 - andreas@cvs.openbsd.org 2009/06/12 20:58:32
1554 [packet.c]
1555 Move some more statics into session_state
1556 ok markus@ djm@
Darren Tucker6ae35ac2009-06-21 19:00:20 +10001557 - dtucker@cvs.openbsd.org 2009/06/21 07:37:15
1558 [kexdhs.c kexgexs.c]
1559 abort if key_sign fails, preventing possible null deref. Based on report
1560 from Paolo Ganci, ok markus@ djm@
Darren Tuckere6b590e2009-06-21 19:08:48 +10001561 - dtucker@cvs.openbsd.org 2009/06/21 09:04:03
1562 [roaming.h roaming_common.c roaming_dummy.c]
1563 Add tags for the benefit of the sync scripts
1564 Also: pull in the changes for 1.1->1.2 missed in the previous sync.
Darren Tucker43e7a352009-06-21 19:50:08 +10001565 - (dtucker) [auth2-jpake.c auth2.c canohost.h session.c] Whitespace and
1566 header-order changes to reduce diff vs OpenBSD.
Darren Tucker64cee362009-06-21 20:26:17 +10001567 - (dtucker) [servconf.c sshd.c] More whitespace sync.
Darren Tucker828c96d2009-06-21 22:22:08 +10001568 - (dtucker) [roaming_common.c roaming_dummy.c] Wrap #include <inttypes.h> in
1569 ifdef.
Darren Tucker72efd742009-06-21 17:48:00 +10001570
Darren Tucker32780622009-06-16 16:11:02 +1000157120090616
1572 - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t
1573 is a struct with a __val member. Fixes build on, eg, Redhat 6.2.
1574
Darren Tuckera422d972009-05-04 12:52:47 +1000157520090504
1576 - (dtucker) [sshlogin.c] Move the NO_SSH_LASTLOG #ifndef line to include
1577 variable declarations. Should prevent unused warnings anywhere it's set
1578 (only Crays as far as I can tell) and be a no-op everywhere else.
1579
Tim Ricea74000e2009-03-18 11:25:02 -0700158020090318
1581 - (tim) [configure.ac] Remove setting IP_TOS_IS_BROKEN for Cygwin. The problem
1582 that setsockopt(IP_TOS) doesn't work on Cygwin has been fixed since 2005.
1583 Based on patch from vinschen at redhat com.
1584
Darren Tucker9d86e5d2009-03-08 11:40:27 +1100158520090308
1586 - (dtucker) [auth-passwd.c auth1.c auth2-kbdint.c auth2-none.c auth2-passwd.c
1587 auth2-pubkey.c session.c openbsd-compat/bsd-cygwin_util.{c,h}
1588 openbsd-compat/daemon.c] Remove support for Windows 95/98/ME and very old
1589 version of Cygwin. Patch from vinschen at redhat com.
1590
Darren Tucker558d6ca2009-03-07 10:22:10 +1100159120090307
1592 - (dtucker) [contrib/aix/buildbff.sh] Only try to rename ssh_prng_cmds if it
1593 exists (it's not created if OpenSSL's PRNG is self-seeded, eg if the OS
1594 has a /dev/random).
Darren Tucker8aae6ff2009-03-07 12:01:47 +11001595 - (dtucker) [schnorr.c openbsd-compat/openssl-compat.{c,h}] Add
1596 EVP_DigestUpdate to the OLD_EVP compatibility functions and tell schnorr.c
1597 to use them. Allows building with older OpenSSL versions.
Darren Tuckerccfee052009-03-07 12:32:22 +11001598 - (dtucker) [configure.ac defines.h] Check for in_port_t and typedef if needed.
Darren Tucker30ed6682009-03-07 18:06:22 +11001599 - (dtucker) [configure.ac] Missing comma in type list.
Darren Tucker3e7e15f2009-03-07 22:22:35 +11001600 - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}]
1601 EVP_DigestUpdate does not exactly match the other OLD_EVP functions (eg
1602 in openssl 0.9.6) so add an explicit test for it.
Darren Tucker558d6ca2009-03-07 10:22:10 +11001603
Damien Millercee85232009-03-06 00:58:22 +1100160420090306
1605 - (djm) OpenBSD CVS Sync
1606 - djm@cvs.openbsd.org 2009/03/05 07:18:19
1607 [auth2-jpake.c jpake.c jpake.h monitor_wrap.c monitor_wrap.h schnorr.c]
1608 [sshconnect2.c]
1609 refactor the (disabled) Schnorr proof code to make it a little more
1610 generally useful
Damien Miller447e3872009-03-06 00:58:39 +11001611 - djm@cvs.openbsd.org 2009/03/05 11:30:50
1612 [uuencode.c]
1613 document what these functions do so I don't ever have to recuse into
1614 b64_pton/ntop to remember their return values
Damien Millercee85232009-03-06 00:58:22 +11001615
Damien Miller19913842009-02-23 10:53:58 +1100161620090223
1617 - (djm) OpenBSD CVS Sync
1618 - djm@cvs.openbsd.org 2009/02/22 23:50:57
1619 [ssh_config.5 sshd_config.5]
1620 don't advertise experimental options
Damien Miller0296ae82009-02-23 11:00:24 +11001621 - djm@cvs.openbsd.org 2009/02/22 23:59:25
1622 [sshd_config.5]
1623 missing period
Damien Miller582ca6b2009-02-23 11:09:25 +11001624 - djm@cvs.openbsd.org 2009/02/23 00:06:15
1625 [version.h]
1626 openssh-5.2
Damien Miller5d0d5302009-02-23 11:11:57 +11001627 - (djm) [README] update for 5.2
Damien Millerfaec50b2009-02-23 11:12:29 +11001628 - (djm) Release openssh-5.2p1
Damien Miller19913842009-02-23 10:53:58 +11001629
Damien Miller9eab9562009-02-22 08:47:02 +1100163020090222
1631 - (djm) OpenBSD CVS Sync
1632 - tobias@cvs.openbsd.org 2009/02/21 19:32:04
1633 [misc.c sftp-server-main.c ssh-keygen.c]
1634 Added missing newlines in error messages.
1635 ok dtucker
1636
Damien Millere8001d42009-02-21 12:45:02 +1100163720090221
1638 - (djm) OpenBSD CVS Sync
1639 - djm@cvs.openbsd.org 2009/02/17 01:28:32
1640 [ssh_config]
1641 sync with revised default ciphers; pointed out by dkrause@
Damien Miller25918382009-02-21 12:45:18 +11001642 - djm@cvs.openbsd.org 2009/02/18 04:31:21
1643 [schnorr.c]
1644 signature should hash over the entire group, not just the generator
1645 (this is still disabled code)
Damien Miller7691e5f2009-02-21 18:03:04 +11001646 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
1647 [contrib/suse/openssh.spec] Prepare for 5.2p1
Damien Millere8001d42009-02-21 12:45:02 +11001648
Damien Miller3f94aaf2009-02-16 15:21:39 +1100164920090216
1650 - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh]
1651 [regress/putty-kex.sh regress/putty-transfer.sh] Downgrade disabled
1652 interop tests from FATAL error to a warning. Allows some interop
1653 tests to proceed if others are missing necessary prerequisites.
Damien Miller90551722009-02-16 15:37:03 +11001654 - (djm) [configure.ac] support GNU/kFreeBSD and GNU/kOpensolaris
1655 systems; patch from Aurelien Jarno via rmh AT aybabtu.com
Damien Miller3f94aaf2009-02-16 15:21:39 +11001656
Damien Millerfdd66fc2009-02-14 16:26:19 +1100165720090214
1658 - (djm) OpenBSD CVS Sync
1659 - dtucker@cvs.openbsd.org 2009/02/02 11:15:14
1660 [sftp.c]
1661 Initialize a few variables to prevent spurious "may be used
1662 uninitialized" warnings from newer gcc's. ok djm@
Damien Miller4bf648f2009-02-14 16:28:21 +11001663 - djm@cvs.openbsd.org 2009/02/12 03:00:56
1664 [canohost.c canohost.h channels.c channels.h clientloop.c readconf.c]
1665 [readconf.h serverloop.c ssh.c]
1666 support remote port forwarding with a zero listen port (-R0:...) to
1667 dyamically allocate a listen port at runtime (this is actually
1668 specified in rfc4254); bz#1003 ok markus@
Damien Miller330d5852009-02-14 16:33:09 +11001669 - djm@cvs.openbsd.org 2009/02/12 03:16:01
1670 [serverloop.c]
1671 tighten check for -R0:... forwarding: only allow dynamic allocation
1672 if want_reply is set in the packet
Damien Miller923e8bb2009-02-14 16:33:31 +11001673 - djm@cvs.openbsd.org 2009/02/12 03:26:22
1674 [monitor.c]
1675 some paranoia: check that the serialised key is really KEY_RSA before
1676 diddling its internals
Damien Millere2f4cc52009-02-14 16:33:49 +11001677 - djm@cvs.openbsd.org 2009/02/12 03:42:09
1678 [ssh.1]
1679 document -R0:... usage
Damien Miller65fa4ca2009-02-14 16:34:05 +11001680 - djm@cvs.openbsd.org 2009/02/12 03:44:25
1681 [ssh.1]
1682 consistency: Dq => Ql
Damien Miller85c6d8a2009-02-14 16:34:21 +11001683 - djm@cvs.openbsd.org 2009/02/12 03:46:17
1684 [ssh_config.5]
1685 document RemoteForward usage with 0 listen port
Damien Millere379e102009-02-14 16:34:39 +11001686 - jmc@cvs.openbsd.org 2009/02/12 07:34:20
1687 [ssh_config.5]
1688 kill trailing whitespace;
Damien Miller61433be2009-02-14 16:35:01 +11001689 - markus@cvs.openbsd.org 2009/02/13 11:50:21
1690 [packet.c]
1691 check for enc !=NULL in packet_start_discard
Damien Miller6385e752009-02-14 18:00:52 +11001692 - djm@cvs.openbsd.org 2009/02/14 06:35:49
1693 [PROTOCOL]
1694 mention that eow and no-more-sessions extensions are sent only to
1695 OpenSSH peers
Damien Millerfdd66fc2009-02-14 16:26:19 +11001696
169720090212
Damien Miller2de76242009-02-12 12:19:20 +11001698 - (djm) [sshpty.c] bz#1419: OSX uses cloning ptys that automagically
1699 set ownership and modes, so avoid explicitly setting them
Damien Miller20e231f2009-02-12 13:12:21 +11001700 - (djm) [configure.ac loginrec.c] bz#1421: fix lastlog support for OSX.
1701 OSX provides a getlastlogxbyname function that automates the reading of
1702 a lastlog file. Also, the pututxline function will update lastlog so
1703 there is no need for loginrec.c to do it explicitly. Collapse some
1704 overly verbose code while I'm in there.
Damien Miller2de76242009-02-12 12:19:20 +11001705
Darren Tucker642ebe52009-02-01 22:19:54 +1100170620090201
1707 - (dtucker) [defines.h sshconnect.c] INET6_ADDRSTRLEN is now needed in
1708 channels.c too, so move the definition for non-IP6 platforms to defines.h
1709 where it can be shared.
1710
Tim Rice6a325342009-01-29 12:30:01 -0800171120090129
1712 - (tim) [contrib/cygwin/ssh-host-config] Patch from Corinna Vinschen.
1713 If the CYGWIN environment variable is empty, the installer script
1714 should not install the service with an empty CYGWIN variable, but
1715 rather without setting CYGWNI entirely.
Tim Rice0d8f2f32009-01-29 12:40:30 -08001716 - (tim) [contrib/cygwin/ssh-host-config] Whitespace cleanup. No code changes.
Tim Rice6a325342009-01-29 12:30:01 -08001717
Tim Riceca3692d2009-01-28 12:50:04 -0800171820090128
1719 - (tim) [contrib/cygwin/ssh-host-config] Patch from Corinna Vinschen.
1720 Changes to work on Cygwin 1.5.x as well as on the new Cygwin 1.7.x.
1721 The information given for the setting of the CYGWIN environment variable
1722 is wrong for both releases so I just removed it, together with the
1723 unnecessary (Cygwin 1.5.x) or wrong (Cygwin 1.7.x) default setting.
1724
Damien Millerb53d8a12009-01-28 16:13:04 +1100172520081228
1726 - (djm) OpenBSD CVS Sync
1727 - stevesk@cvs.openbsd.org 2008/12/09 03:20:42
1728 [channels.c servconf.c]
1729 channel_print_adm_permitted_opens() should deal with all the printing
1730 for that config option. suggested by markus@; ok markus@ djm@
1731 dtucker@
Damien Millerc30def92009-01-28 16:13:39 +11001732 - djm@cvs.openbsd.org 2008/12/09 04:32:22
1733 [auth2-chall.c]
1734 replace by-hand string building with xasprinf(); ok deraadt@
Damien Miller62fd18a2009-01-28 16:14:09 +11001735 - sobrado@cvs.openbsd.org 2008/12/09 15:35:00
1736 [sftp.1 sftp.c]
1737 update for the synopses displayed by the 'help' command, there are a
1738 few missing flags; add 'bye' to the output of 'help'; sorting and spacing.
1739 jmc@ suggested replacing .Oo/.Oc with a single .Op macro.
1740 ok jmc@
Damien Millerb3f2c9f2009-01-28 16:15:30 +11001741 - stevesk@cvs.openbsd.org 2008/12/09 22:37:33
1742 [clientloop.c]
1743 fix typo in error message
Damien Miller7375fe22009-01-28 16:16:00 +11001744 - stevesk@cvs.openbsd.org 2008/12/10 03:55:20
1745 [addrmatch.c]
1746 o cannot be NULL here but use xfree() to be consistent; ok djm@
Damien Millerb2c17d42009-01-28 16:18:03 +11001747 - stevesk@cvs.openbsd.org 2008/12/29 01:12:36
1748 [ssh-keyscan.1]
1749 fix example, default key type is rsa for 3+ years; from
1750 frederic.perrin@resel.fr
Damien Millera70ac762009-01-28 16:19:52 +11001751 - stevesk@cvs.openbsd.org 2008/12/29 02:23:26
1752 [pathnames.h]
1753 no need to escape single quotes in comments
Damien Miller17819012009-01-28 16:20:17 +11001754 - okan@cvs.openbsd.org 2008/12/30 00:46:56
1755 [sshd_config.5]
1756 add AllowAgentForwarding to available Match keywords list
1757 ok djm
Damien Miller7a606212009-01-28 16:22:34 +11001758 - djm@cvs.openbsd.org 2009/01/01 21:14:35
1759 [channels.c]
1760 call channel destroy callbacks on receipt of open failure messages.
1761 fixes client hangs when connecting to a server that has MaxSessions=0
1762 set spotted by imorgan AT nas.nasa.gov; ok markus@
Damien Millerccf7e222009-01-28 16:23:06 +11001763 - djm@cvs.openbsd.org 2009/01/01 21:17:36
1764 [kexgexs.c]
1765 fix hash calculation for KEXGEX: hash over the original client-supplied
1766 values and not the sanity checked versions that we acutally use;
1767 bz#1540 reported by john.smith AT arrows.demon.co.uk
1768 ok markus@
Damien Miller1781f532009-01-28 16:24:41 +11001769 - djm@cvs.openbsd.org 2009/01/14 01:38:06
1770 [channels.c]
1771 support SOCKS4A protocol, from dwmw2 AT infradead.org via bz#1482;
1772 "looks ok" markus@
Damien Miller5bc6aae2009-01-28 16:27:31 +11001773 - stevesk@cvs.openbsd.org 2009/01/15 17:38:43
1774 [readconf.c]
1775 1) use obsolete instead of alias for consistency
1776 2) oUserKnownHostsFile not obsolete but oGlobalKnownHostsFile2 is
1777 so move the comment.
1778 3) reorder so like options are together
1779 ok djm@
Damien Millera1c1b6c2009-01-28 16:29:49 +11001780 - djm@cvs.openbsd.org 2009/01/22 09:46:01
1781 [channels.c channels.h session.c]
1782 make Channel->path an allocated string, saving a few bytes here and
1783 there and fixing bz#1380 in the process; ok markus@
Damien Miller9576ac42009-01-28 16:30:33 +11001784 - djm@cvs.openbsd.org 2009/01/22 09:49:57
1785 [channels.c]
1786 oops! I committed the wrong version of the Channel->path diff,
1787 it was missing some tweaks suggested by stevesk@
Damien Miller3dc71ad2009-01-28 16:31:22 +11001788 - djm@cvs.openbsd.org 2009/01/22 10:02:34
1789 [clientloop.c misc.c readconf.c readconf.h servconf.c servconf.h]
1790 [serverloop.c ssh-keyscan.c ssh.c sshd.c]
1791 make a2port() return -1 when it encounters an invalid port number
1792 rather than 0, which it will now treat as valid (needed for future work)
1793 adjust current consumers of a2port() to check its return value is <= 0,
1794 which in turn required some things to be converted from u_short => int
1795 make use of int vs. u_short consistent in some other places too
1796 feedback & ok markus@
Damien Millere37dde02009-01-28 16:33:01 +11001797 - djm@cvs.openbsd.org 2009/01/22 10:09:16
1798 [auth-options.c]
1799 another chunk of a2port() diff that got away. wtfdjm??
Damien Miller67081b52009-01-28 16:33:31 +11001800 - djm@cvs.openbsd.org 2009/01/23 07:58:11
1801 [myproposal.h]
1802 prefer CTR modes and revised arcfour (i.e w/ discard) modes to CBC
1803 modes; ok markus@
Damien Miller9aa72ba2009-01-28 16:34:00 +11001804 - naddy@cvs.openbsd.org 2009/01/24 17:10:22
1805 [ssh_config.5 sshd_config.5]
1806 sync list of preferred ciphers; ok djm@
Damien Miller13ae44c2009-01-28 16:38:41 +11001807 - markus@cvs.openbsd.org 2009/01/26 09:58:15
1808 [cipher.c cipher.h packet.c]
1809 Work around the CPNI-957037 Plaintext Recovery Attack by always
1810 reading 256K of data on packet size or HMAC errors (in CBC mode only).
1811 Help, feedback and ok djm@
1812 Feedback from Martin Albrecht and Paterson Kenny
Damien Millerb53d8a12009-01-28 16:13:04 +11001813
Tim Rice351529c2009-01-07 10:04:12 -0800181420090107
Damien Miller1598d6b2009-01-21 16:04:24 +11001815 - (djm) [uidswap.c] bz#1412: Support >16 supplemental groups in OS X.
1816 Patch based on one from vgiffin AT apple.com; ok dtucker@
Damien Miller819dbb62009-01-21 16:46:26 +11001817 - (djm) [channels.c] bz#1419: support "on demand" X11 forwarding via
1818 launchd on OS X; patch from vgiffin AT apple.com, slightly tweaked;
1819 ok dtucker@
Damien Miller02666772009-01-21 20:29:20 +11001820 - (djm) [contrib/ssh-copy-id.1 contrib/ssh-copy-id] bz#1492: Make
1821 ssh-copy-id copy id_rsa.pub by default (instead of the legacy "identity"
1822 key). Patch from cjwatson AT debian.org
Damien Miller1598d6b2009-01-21 16:04:24 +11001823
182420090107
Tim Rice351529c2009-01-07 10:04:12 -08001825 - (tim) [configure.ac defines.h openbsd-compat/port-uw.c
1826 openbsd-compat/xcrypt.c] Add SECUREWARE support to OpenServer 6 SVR5 ABI.
1827 OK djm@ dtucker@
Tim Rice26767912009-01-07 20:50:08 -08001828 - (tim) [configure.ac] Move check_for_libcrypt_later=1 in *-*-sysv5*) section.
1829 OpenServer 6 doesn't need libcrypt.
Tim Rice351529c2009-01-07 10:04:12 -08001830
Damien Miller586b0052008-12-09 14:11:32 +1100183120081209
1832 - (djm) OpenBSD CVS Sync
1833 - djm@cvs.openbsd.org 2008/12/09 02:38:18
1834 [clientloop.c]
1835 The ~C escape handler does not work correctly for multiplexed sessions -
1836 it opens a commandline on the master session, instead of on the slave
1837 that requested it. Disable it on slave sessions until such time as it
1838 is fixed; bz#1543 report from Adrian Bridgett via Colin Watson
1839 ok markus@
Damien Miller1be2cc42008-12-09 14:11:49 +11001840 - djm@cvs.openbsd.org 2008/12/09 02:39:59
1841 [sftp.c]
1842 Deal correctly with failures in remote stat() operation in sftp,
1843 correcting fail-on-error behaviour in batchmode. bz#1541 report and
1844 fix from anedvedicky AT gmail.com; ok markus@
Damien Miller0d772d92008-12-09 14:12:05 +11001845 - djm@cvs.openbsd.org 2008/12/09 02:58:16
1846 [readconf.c]
1847 don't leave junk (free'd) pointers around in Forward *fwd argument on
1848 failure; avoids double-free in ~C -L handler when given an invalid
1849 forwarding specification; bz#1539 report from adejong AT debian.org
1850 via Colin Watson; ok markus@ dtucker@
Damien Miller7ebfad72008-12-09 14:12:33 +11001851 - djm@cvs.openbsd.org 2008/12/09 03:02:37
1852 [sftp.1 sftp.c]
1853 correct sftp(1) and corresponding usage syntax;
1854 bz#1518 patch from imorgan AT nas.nasa.gov; ok deraadt@ improved diff jmc@
Damien Miller586b0052008-12-09 14:11:32 +11001855
Damien Miller7df2e402008-12-08 09:35:36 +1100185620081208
1857 - (djm) [configure.ac] bz#1538: better test for ProPolice/SSP: actually
1858 use some stack in main().
1859 Report and suggested fix from vapier AT gentoo.org
Damien Miller8533c782008-12-08 09:54:40 +11001860 - (djm) OpenBSD CVS Sync
1861 - markus@cvs.openbsd.org 2008/12/02 19:01:07
1862 [clientloop.c]
1863 we have to use the recipient's channel number (RFC 4254) for
1864 SSH2_MSG_CHANNEL_SUCCESS/SSH2_MSG_CHANNEL_FAILURE messages,
1865 otherwise we trigger 'Non-public channel' error messages on sshd
1866 systems with clientkeepalive enabled; noticed by sturm; ok djm;
Damien Miller5a33ec62008-12-08 09:55:02 +11001867 - markus@cvs.openbsd.org 2008/12/02 19:08:59
1868 [serverloop.c]
1869 backout 1.149, since it's not necessary and openssh clients send
1870 broken CHANNEL_FAILURE/SUCCESS messages since about 2004; ok djm@
Damien Miller16a73072008-12-08 09:55:25 +11001871 - markus@cvs.openbsd.org 2008/12/02 19:09:38
1872 [channels.c]
1873 s/remote_id/id/ to be more consistent with other code; ok djm@
Damien Miller7df2e402008-12-08 09:35:36 +11001874
Darren Tucker83795d62008-12-01 21:34:28 +1100187520081201
1876 - (dtucker) [contrib/cygwin/{Makefile,ssh-host-config}] Add new doc files
1877 and tweak the is-sshd-running check in ssh-host-config. Patch from
1878 vinschen at redhat com.
Darren Tucker99d11a32008-12-01 21:40:48 +11001879 - (dtucker) OpenBSD CVS Sync
1880 - markus@cvs.openbsd.org 2008/11/21 15:47:38
1881 [packet.c]
1882 packet_disconnect() on padding error, too. should reduce the success
1883 probability for the CPNI-957037 Plaintext Recovery Attack to 2^-18
1884 ok djm@
Darren Tucker23645642008-12-01 21:42:13 +11001885 - dtucker@cvs.openbsd.org 2008/11/30 11:59:26
1886 [monitor_fdpass.c]
1887 Retry sendmsg/recvmsg on EAGAIN and EINTR; ok djm@
Darren Tucker83795d62008-12-01 21:34:28 +11001888
Darren Tucker69087ea2008-11-23 14:03:19 +1100188920081123
1890 - (dtucker) [monitor_fdpass.c] Reduce diff vs OpenBSD by moving some
1891 declarations, removing an unnecessary union member and adding whitespace.
Darren Tuckerd3782b42008-11-23 19:05:53 +11001892 cmsgbuf.tmp thing spotted by des at des no, ok djm some time ago.
Darren Tucker69087ea2008-11-23 14:03:19 +11001893
Tim Rice0f4d2c02008-11-18 21:26:41 -0800189420081118
1895 - (tim) [addrmatch.c configure.ac] Some platforms do not have sin6_scope_id
1896 member of sockaddr_in6. Also reported in Bug 1491 by David Leonard. OK and
1897 feedback by djm@
1898
Darren Tuckerff4350e2008-11-11 16:31:05 +1100189920081111
1900 - (dtucker) OpenBSD CVS Sync
1901 - jmc@cvs.openbsd.org 2008/11/05 11:22:54
1902 [servconf.c]
1903 passord -> password;
1904 fixes user/5975 from Rene Maroufi
Darren Tuckere15fb092008-11-11 16:31:43 +11001905 - stevesk@cvs.openbsd.org 2008/11/07 00:42:12
1906 [ssh-keygen.c]
1907 spelling/typo in comment
Darren Tuckerb57fab62008-11-11 16:32:25 +11001908 - stevesk@cvs.openbsd.org 2008/11/07 18:50:18
1909 [nchan.c]
1910 add space to some log/debug messages for readability; ok djm@ markus@
Darren Tuckerc6d744e2008-11-11 16:33:03 +11001911 - dtucker@cvs.openbsd.org 2008/11/07 23:34:48
1912 [auth2-jpake.c]
1913 Move JPAKE define to make life easier for portable. ok djm@
Darren Tucker63917bd2008-11-11 16:33:48 +11001914 - tobias@cvs.openbsd.org 2008/11/09 12:34:47
1915 [session.c ssh.1]
1916 typo fixed (overriden -> overridden)
1917 ok espie, jmc
Darren Tucker49c31c42008-11-11 16:39:44 +11001918 - stevesk@cvs.openbsd.org 2008/11/11 02:58:09
1919 [servconf.c]
1920 USE_AFS not referenced so remove #ifdef. fixes sshd -T not printing
1921 kerberosgetafstoken. ok dtucker@
1922 (Id sync only, we still want the ifdef in portable)
Darren Tucker22662e82008-11-11 16:40:22 +11001923 - stevesk@cvs.openbsd.org 2008/11/11 03:55:11
1924 [channels.c]
1925 for sshd -T print 'permitopen any' vs. 'permitopen' for case of no
1926 permitopen's; ok and input dtucker@
Darren Tucker4a6f62d2008-11-11 16:55:25 +11001927 - djm@cvs.openbsd.org 2008/11/10 02:06:35
1928 [regress/putty-ciphers.sh]
1929 PuTTY supports AES CTR modes, so interop test against them too
Darren Tuckerff4350e2008-11-11 16:31:05 +11001930
Damien Miller7fc5c0f2008-11-05 16:12:11 +1100193120081105
1932 - OpenBSD CVS Sync
1933 - djm@cvs.openbsd.org 2008/11/03 08:59:41
1934 [servconf.c]
1935 include MaxSessions in sshd -T output; patch from imorgan AT nas.nasa.gov
Damien Miller6f66d342008-11-05 16:12:54 +11001936 - djm@cvs.openbsd.org 2008/11/04 07:58:09
1937 [auth.c]
1938 need unistd.h for close() prototype
1939 (ID sync only)
Damien Miller01ed2272008-11-05 16:20:46 +11001940 - djm@cvs.openbsd.org 2008/11/04 08:22:13
1941 [auth.h auth2.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h]
1942 [readconf.c readconf.h servconf.c servconf.h ssh2.h ssh_config.5]
1943 [sshconnect2.c sshd_config.5 jpake.c jpake.h schnorr.c auth2-jpake.c]
1944 [Makefile.in]
1945 Add support for an experimental zero-knowledge password authentication
1946 method using the J-PAKE protocol described in F. Hao, P. Ryan,
1947 "Password Authenticated Key Exchange by Juggling", 16th Workshop on
1948 Security Protocols, Cambridge, April 2008.
1949
1950 This method allows password-based authentication without exposing
1951 the password to the server. Instead, the client and server exchange
1952 cryptographic proofs to demonstrate of knowledge of the password while
1953 revealing nothing useful to an attacker or compromised endpoint.
1954
1955 This is experimental, work-in-progress code and is presently
1956 compiled-time disabled (turn on -DJPAKE in Makefile.inc).
1957
1958 "just commit it. It isn't too intrusive." deraadt@
Damien Miller1a0442f2008-11-05 16:30:06 +11001959 - stevesk@cvs.openbsd.org 2008/11/04 19:18:00
1960 [readconf.c]
1961 because parse_forward() is now used to parse all forward types (DLR),
1962 and it malloc's space for host variables, we don't need to malloc
1963 here. fixes small memory leaks.
1964
1965 previously dynamic forwards were not parsed in parse_forward() and
1966 space was not malloc'd in that case.
1967
1968 ok djm@
Damien Miller0164cb82008-11-05 16:30:31 +11001969 - stevesk@cvs.openbsd.org 2008/11/05 03:23:09
1970 [clientloop.c ssh.1]
1971 add dynamic forward escape command line; ok djm@
Damien Miller7fc5c0f2008-11-05 16:12:11 +11001972
Damien Miller9f6fb562008-11-03 19:15:44 +1100197320081103
1974 - OpenBSD CVS Sync
1975 - sthen@cvs.openbsd.org 2008/07/24 23:55:30
1976 [ssh-keygen.1]
1977 Add "ssh-keygen -F -l" to synopsis (displays fingerprint from
1978 known_hosts). ok djm@
1979 - grunk@cvs.openbsd.org 2008/07/25 06:56:35
1980 [ssh_config]
1981 Add VisualHostKey to example file, ok djm@
Damien Millerc6aadd92008-11-03 19:16:20 +11001982 - grunk@cvs.openbsd.org 2008/07/25 07:05:16
1983 [key.c]
1984 In random art visualization, make sure to use the end marker only at the
1985 end. Initial diff by Dirk Loss, tweaks and ok djm@
Damien Millerc674d582008-11-03 19:16:57 +11001986 - markus@cvs.openbsd.org 2008/07/31 14:48:28
1987 [sshconnect2.c]
1988 don't allocate space for empty banners; report t8m at centrum.cz;
1989 ok deraadt
Damien Millerfa51b162008-11-03 19:17:33 +11001990 - krw@cvs.openbsd.org 2008/08/02 04:29:51
1991 [ssh_config.5]
1992 whitepsace -> whitespace. From Matthew Clarke via bugs@.
Damien Millerad793d52008-11-03 19:17:57 +11001993 - djm@cvs.openbsd.org 2008/08/21 04:09:57
1994 [session.c]
1995 allow ForceCommand internal-sftp with arguments. based on patch from
1996 michael.barabanov AT gmail.com; ok markus@
Damien Miller15bce6b2008-11-03 19:19:12 +11001997 - djm@cvs.openbsd.org 2008/09/06 12:24:13
1998 [kex.c]
1999 OpenSSL 0.9.8h supplies a real EVP_sha256 so we do not need our
2000 replacement anymore
2001 (ID sync only for portable - we still need this)
Damien Miller456e6f02008-11-03 19:20:10 +11002002 - markus@cvs.openbsd.org 2008/09/11 14:22:37
2003 [compat.c compat.h nchan.c ssh.c]
2004 only send eow and no-more-sessions requests to openssh 5 and newer;
2005 fixes interop problems with broken ssh v2 implementations; ok djm@
Damien Millerd58f5602008-11-03 19:20:49 +11002006 - millert@cvs.openbsd.org 2008/10/02 14:39:35
2007 [session.c]
2008 Convert an unchecked strdup to xstrdup. OK deraadt@
Damien Miller49b78d42008-11-03 19:21:21 +11002009 - jmc@cvs.openbsd.org 2008/10/03 13:08:12
2010 [sshd.8]
2011 do not give an example of how to chmod files: we can presume the user
2012 knows that. removes an ambiguity in the permission of authorized_keys;
2013 ok deraadt
Damien Millerc4d1b362008-11-03 19:22:09 +11002014 - deraadt@cvs.openbsd.org 2008/10/03 23:56:28
2015 [sshconnect2.c]
2016 Repair strnvis() buffersize of 4*n+1, with termination gauranteed by the
2017 function.
2018 spotted by des@freebsd, who commited an incorrect fix to the freebsd tree
2019 and (as is fairly typical) did not report the problem to us. But this fix
2020 is correct.
2021 ok djm
Damien Millere272a5b2008-11-03 19:22:37 +11002022 - djm@cvs.openbsd.org 2008/10/08 23:34:03
2023 [ssh.1 ssh.c]
2024 Add -y option to force logging via syslog rather than stderr.
2025 Useful for daemonised ssh connection (ssh -f). Patch originally from
2026 and ok'd by markus@
Damien Miller51bde602008-11-03 19:23:10 +11002027 - djm@cvs.openbsd.org 2008/10/09 03:50:54
2028 [servconf.c sshd_config.5]
2029 support setting PermitEmptyPasswords in a Match block
2030 requested in PR3891; ok dtucker@
Damien Millerc13c3ee2008-11-03 19:23:28 +11002031 - jmc@cvs.openbsd.org 2008/10/09 06:54:22
2032 [ssh.c]
2033 add -y to usage();
Damien Millerb4acb472008-11-03 19:23:45 +11002034 - stevesk@cvs.openbsd.org 2008/10/10 04:55:16
2035 [scp.c]
2036 spelling in comment; ok djm@
Damien Miller2f54ada2008-11-03 19:24:16 +11002037 - stevesk@cvs.openbsd.org 2008/10/10 05:00:12
2038 [key.c]
2039 typo in error message; ok djm@
Damien Millerece92c82008-11-03 19:25:03 +11002040 - stevesk@cvs.openbsd.org 2008/10/10 16:43:27
2041 [ssh_config.5]
2042 use 'Privileged ports can be forwarded only when logging in as root on
2043 the remote machine.' for RemoteForward just like ssh.1 -R.
2044 ok djm@ jmc@
2045 - stevesk@cvs.openbsd.org 2008/10/14 18:11:33
2046 [sshconnect.c]
2047 use #define ROQUIET here; no binary change. ok dtucker@
Damien Millera414cd32008-11-03 19:25:21 +11002048 - stevesk@cvs.openbsd.org 2008/10/17 18:36:24
2049 [ssh_config.5]
2050 correct and clarify VisualHostKey; ok jmc@
Damien Millere7261c72008-11-03 19:25:40 +11002051 - stevesk@cvs.openbsd.org 2008/10/30 19:31:16
2052 [clientloop.c sshd.c]
2053 don't need to #include "monitor_fdpass.h"
Damien Miller2b20a922008-11-03 19:26:00 +11002054 - stevesk@cvs.openbsd.org 2008/10/31 15:05:34
2055 [dispatch.c]
2056 remove unused #define DISPATCH_MIN; ok markus@
Damien Millerf7475d72008-11-03 19:26:18 +11002057 - djm@cvs.openbsd.org 2008/11/01 04:50:08
2058 [sshconnect2.c]
2059 sprinkle ARGSUSED on dispatch handlers
2060 nuke stale unusued prototype
Damien Millera0094332008-11-03 19:26:35 +11002061 - stevesk@cvs.openbsd.org 2008/11/01 06:43:33
2062 [channels.c]
2063 fix some typos in log messages; ok djm@
Damien Millerc1719f72008-11-03 19:27:07 +11002064 - sobrado@cvs.openbsd.org 2008/11/01 11:14:36
2065 [ssh-keyscan.1 ssh-keyscan.c]
2066 the ellipsis is not an optional argument; while here, improve spacing.
Damien Millera699d952008-11-03 19:27:34 +11002067 - stevesk@cvs.openbsd.org 2008/11/01 17:40:33
2068 [clientloop.c readconf.c readconf.h ssh.c]
2069 merge dynamic forward parsing into parse_forward();
2070 'i think this is OK' djm@
Damien Miller660d7da2008-11-03 19:27:52 +11002071 - stevesk@cvs.openbsd.org 2008/11/02 00:16:16
2072 [ttymodes.c]
2073 protocol 2 tty modes support is now 7.5 years old so remove these
2074 debug3()s; ok deraadt@
Damien Millera279d252008-11-03 19:28:07 +11002075 - stevesk@cvs.openbsd.org 2008/11/03 01:07:02
2076 [readconf.c]
2077 remove valueless comment
Damien Millerf4b39532008-11-03 19:28:21 +11002078 - stevesk@cvs.openbsd.org 2008/11/03 02:44:41
2079 [readconf.c]
2080 fix comment
Damien Miller85dec732008-11-03 20:16:01 +11002081 - (djm) [contrib/caldera/ssh-host-keygen contrib/suse/rc.sshd]
2082 Make example scripts generate keys with default sizes rather than fixed,
2083 non-default 1024 bits; patch from imorgan AT nas.nasa.gov
Damien Miller250071f2008-11-03 20:18:12 +11002084 - (djm) [contrib/sshd.pam.generic contrib/caldera/sshd.pam]
2085 [contrib/redhat/sshd.pam] Move pam_nologin to account group from
2086 incorrect auth group in example files;
2087 patch from imorgan AT nas.nasa.gov
Damien Miller9f6fb562008-11-03 19:15:44 +11002088
Darren Tuckerc570ff72008-09-06 18:20:57 +1000208920080906
2090 - (dtucker) [config.guess config.sub] Update to latest versions from
2091 http://git.savannah.gnu.org/gitweb/ (2008-04-14 and 2008-06-16
2092 respectively).
2093
Darren Tucker661f63b2008-08-30 07:32:37 +1000209420080830
2095 - (dtucker) [openbsd-compat/bsd-poll.c] correctly check for number of FDs
2096 larger than FD_SETSIZE (OpenSSH only ever uses poll with one fd). Patch
2097 from Nicholas Marriott.
2098
Damien Milleraa5f4332008-07-21 18:20:39 +1000209920080721
2100 - (djm) OpenBSD CVS Sync
Damien Miller6ef430d2008-07-23 17:40:04 +10002101 - djm@cvs.openbsd.org 2008/07/23 07:36:55
2102 [servconf.c]
2103 do not try to print options that have been compile-time disabled
2104 in config test mode (sshd -T); report from nix-corp AT esperi.org.uk
2105 ok dtucker@
Damien Miller212f0b02008-07-23 17:42:29 +10002106 - (djm) [servconf.c] Print UsePAM option in config test mode (when it
2107 has been compiled in); report from nix-corp AT esperi.org.uk
2108 ok dtucker@
Damien Miller6ef430d2008-07-23 17:40:04 +10002109
211020080721
2111 - (djm) OpenBSD CVS Sync
Damien Milleraa5f4332008-07-21 18:20:39 +10002112 - jmc@cvs.openbsd.org 2008/07/18 22:51:01
2113 [sftp-server.8]
2114 no need for .Pp before or after .Sh;
Damien Milleraaae43e2008-07-21 18:21:05 +10002115 - djm@cvs.openbsd.org 2008/07/21 08:19:07
2116 [version.h]
2117 openssh-5.1
Damien Miller1f8909c2008-07-21 18:21:52 +10002118 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2119 [contrib/suse/openssh.spec] Update version number in README and RPM specs
Damien Miller8f42e9b2008-07-21 18:22:25 +10002120 - (djm) Release OpenSSH-5.1
Damien Milleraa5f4332008-07-21 18:20:39 +10002121
Damien Miller7ba0ca72008-07-17 18:57:06 +1000212220080717
2123 - (djm) OpenBSD CVS Sync
2124 - djm@cvs.openbsd.org 2008/07/17 08:48:00
2125 [sshconnect2.c]
2126 strnvis preauth banner; pointed out by mpf@ ok markus@
Damien Millera1d03a52008-07-17 18:57:19 +10002127 - djm@cvs.openbsd.org 2008/07/17 08:51:07
2128 [auth2-hostbased.c]
2129 strip trailing '.' from hostname when HostbasedUsesNameFromPacketOnly=yes
2130 report and patch from res AT qoxp.net (bz#1200); ok markus@
Darren Tucker9a3f2b42008-07-17 19:03:49 +10002131 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Remove long-unneeded compat
2132 code, replace with equivalent cygwin library call. Patch from vinschen
Damien Miller2e28d862008-07-17 19:15:43 +10002133 at redhat.com, ok djm@.
2134 - (djm) [sshconnect2.c] vis.h isn't available everywhere
Damien Miller7ba0ca72008-07-17 18:57:06 +10002135
Damien Miller94717b02008-07-16 21:17:23 +1000213620080716
2137 - OpenBSD CVS Sync
2138 - djm@cvs.openbsd.org 2008/07/15 02:23:14
2139 [sftp.1]
2140 number of pipelined requests is now 64;
2141 prodded by Iain.Morgan AT nasa.gov
Damien Millerb9d3bee2008-07-16 22:40:52 +10002142 - djm@cvs.openbsd.org 2008/07/16 11:51:14
2143 [clientloop.c]
2144 rename variable first_gc -> last_gc (since it is actually the last
2145 in the list).
Damien Miller6ef17492008-07-16 22:42:06 +10002146 - djm@cvs.openbsd.org 2008/07/16 11:52:19
2147 [channels.c]
2148 this loop index should be automatic, not static
Damien Miller94717b02008-07-16 21:17:23 +10002149
Damien Miller81dec052008-07-14 11:28:29 +1000215020080714
2151 - (djm) OpenBSD CVS Sync
2152 - sthen@cvs.openbsd.org 2008/07/13 21:22:52
2153 [ssh-keygen.c]
2154 Change "ssh-keygen -F [host] -l" to not display random art unless
2155 -v is also specified, making it consistent with the manual and other
2156 uses of -l.
2157 ok grunk@
Damien Miller163886f2008-07-14 11:28:58 +10002158 - djm@cvs.openbsd.org 2008/07/13 22:13:07
2159 [channels.c]
2160 use struct sockaddr_storage instead of struct sockaddr for accept(2)
2161 address argument. from visibilis AT yahoo.com in bz#1485; ok markus@
Damien Miller7f980d12008-07-14 11:29:24 +10002162 - djm@cvs.openbsd.org 2008/07/13 22:16:03
2163 [sftp.c]
2164 increase number of piplelined requests so they properly fill the
2165 (recently increased) channel window. prompted by rapier AT psc.edu;
2166 ok markus@
Damien Miller276571c2008-07-14 12:09:57 +10002167 - djm@cvs.openbsd.org 2008/07/14 01:55:56
2168 [sftp-server.8]
2169 mention requirement for /dev/log inside chroot when using sftp-server
2170 with ChrootDirectory
Damien Millerce02e5e2008-07-14 12:02:24 +10002171 - (djm) [openbsd-compat/bindresvport.c] Rename variables s/sin/in/ to
2172 avoid clash with sin(3) function; reported by
2173 cristian.ionescu-idbohrn AT axis.com
Damien Miller639ce592008-07-14 12:03:27 +10002174 - (djm) [openbsd-compat/rresvport.c] Add unistd.h for missing close()
2175 prototype; reported by cristian.ionescu-idbohrn AT axis.com
Damien Miller36d70562008-07-14 12:04:43 +10002176 - (djm) [umac.c] Rename variable s/buffer_ptr/bufp/ to avoid clash;
2177 reported by cristian.ionescu-idbohrn AT axis.com
Damien Miller1fc231c2008-07-14 12:12:52 +10002178 - (djm) [contrib/cygwin/Makefile contrib/cygwin/ssh-host-config]
2179 [contrib/cygwin/ssh-user-config contrib/cygwin/sshd-inetd]
2180 Revamped and simplified Cygwin ssh-host-config script that uses
2181 unified csih configuration tool. Requires recent Cygwin.
2182 Patch from vinschen AT redhat.com
Damien Miller81dec052008-07-14 11:28:29 +10002183
Damien Miller2bcb8662008-07-12 17:12:29 +1000218420080712
2185 - (djm) OpenBSD CVS Sync
2186 - djm@cvs.openbsd.org 2008/07/12 04:52:50
2187 [channels.c]
2188 unbreak; move clearing of cctx struct to before first use
2189 reported by dkrause@
Damien Millera034baf2008-07-12 17:12:49 +10002190 - djm@cvs.openbsd.org 2008/07/12 05:33:41
2191 [scp.1]
2192 better description for -i flag:
2193 s/RSA authentication/public key authentication/
Damien Millerc4657ef2008-07-14 21:37:36 +10002194 - (djm) [openbsd-compat/fake-rfc2553.c openbsd-compat/fake-rfc2553.h]
2195 return EAI_FAMILY when trying to lookup unsupported address family;
2196 from vinschen AT redhat.com
Damien Miller2bcb8662008-07-12 17:12:29 +10002197
Damien Miller2f7faf12008-07-11 17:34:35 +1000219820080711
2199 - (djm) OpenBSD CVS Sync
2200 - stevesk@cvs.openbsd.org 2008/07/07 00:31:41
2201 [ttymodes.c]
2202 we don't need arg after the debug3() was removed. from lint.
2203 ok djm@
Damien Miller87dd5f22008-07-11 17:35:09 +10002204 - stevesk@cvs.openbsd.org 2008/07/07 23:32:51
2205 [key.c]
2206 /*NOTREACHED*/ for lint warning:
2207 warning: function key_equal falls off bottom without returning value
2208 ok djm@
Damien Millerdda5fff2008-07-11 17:35:37 +10002209 - markus@cvs.openbsd.org 2008/07/10 18:05:58
2210 [channels.c]
2211 missing bzero; from mickey; ok djm@
Damien Millerb61f3fc2008-07-11 17:36:48 +10002212 - markus@cvs.openbsd.org 2008/07/10 18:08:11
2213 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h sshd.c]
2214 sync v1 and v2 traffic accounting; add it to sshd, too;
2215 ok djm@, dtucker@
Damien Miller2f7faf12008-07-11 17:34:35 +10002216
Damien Millerd9648ee2008-07-09 00:21:12 +1000221720080709
2218 - (djm) [Makefile.in] Print "all tests passed" when all regress tests pass
Damien Miller773a7b92008-07-09 20:54:05 +10002219 - (djm) [auth1.c] Fix format string vulnerability in protocol 1 PAM
2220 account check failure path. The vulnerable format buffer is supplied
2221 from PAM and should not contain attacker-supplied data.
Damien Miller7acf5502008-07-09 20:54:37 +10002222 - (djm) [auth.c] Missing unistd.h for close()
Damien Miller73193b32008-07-09 21:07:19 +10002223 - (djm) [configure.ac] Add -Wformat-security to CFLAGS for gcc 3.x and 4.x
Damien Millerd9648ee2008-07-09 00:21:12 +10002224
Damien Miller22989f12008-07-05 08:59:43 +1000222520080705
2226 - (djm) [auth.c] Fixed test for locked account on HP/UX with shadowed
2227 passwords disabled. bz#1083 report & patch from senthilkumar_sen AT
2228 hotpop.com, w/ dtucker@
Damien Miller20d16942008-07-05 09:36:58 +10002229 - (djm) [atomicio.c configure.ac] Disable poll() fallback in atomiciov for
2230 Tru64. readv doesn't seem to be a comparable object there.
2231 bz#1386, patch from dtucker@ ok me
Damien Miller42743cb2008-07-05 09:50:23 +10002232 - (djm) [Makefile.in] Pass though pass to conch for interop tests
Damien Millerff2e4922008-07-05 09:52:03 +10002233 - (djm) [configure.ac] unbreak: remove extra closing brace
Damien Millerd874fa52008-07-05 09:40:56 +10002234 - (djm) OpenBSD CVS Sync
2235 - djm@cvs.openbsd.org 2008/07/04 23:08:25
2236 [packet.c]
2237 handle EINTR in packet_write_poll()l ok dtucker@
Damien Miller0b4d48b2008-07-05 09:44:53 +10002238 - djm@cvs.openbsd.org 2008/07/04 23:30:16
2239 [auth1.c auth2.c]
2240 Make protocol 1 MaxAuthTries logic match protocol 2's.
2241 Do not treat the first protocol 2 authentication attempt as
2242 a failure IFF it is for method "none".
2243 Makes MaxAuthTries' user-visible behaviour identical for
2244 protocol 1 vs 2.
2245 ok dtucker@
Damien Millerc9c96f22008-07-05 15:17:48 +10002246 - djm@cvs.openbsd.org 2008/07/05 05:16:01
2247 [PROTOCOL]
2248 grammar
Damien Miller22989f12008-07-05 08:59:43 +10002249
Darren Tucker7c99b1c2008-07-04 12:53:23 +1000225020080704
2251 - (dtucker) OpenBSD CVS Sync
2252 - djm@cvs.openbsd.org 2008/07/02 13:30:34
2253 [auth2.c]
2254 really really remove the freebie "none" auth try for protocol 2
Darren Tucker9a2a6092008-07-04 12:53:50 +10002255 - djm@cvs.openbsd.org 2008/07/02 13:47:39
2256 [ssh.1 ssh.c]
2257 When forking after authentication ("ssh -f") with ExitOnForwardFailure
2258 enabled, delay the fork until after replies for any -R forwards have
2259 been seen. Allows for robust detection of -R forward failure when
2260 using -f (similar to bz#92); ok dtucker@
Darren Tuckerf5cafb02008-07-04 12:54:25 +10002261 - otto@cvs.openbsd.org 2008/07/03 21:46:58
2262 [auth2-pubkey.c]
2263 avoid nasty double free; ok dtucker@ djm@
Darren Tuckerb03fd022008-07-04 13:51:12 +10002264 - djm@cvs.openbsd.org 2008/07/04 03:44:59
2265 [servconf.c groupaccess.h groupaccess.c]
2266 support negation of groups in "Match group" block (bz#1315); ok dtucker@
Darren Tucker2784f1f2008-07-04 13:51:45 +10002267 - dtucker@cvs.openbsd.org 2008/07/04 03:47:02
2268 [monitor.c]
2269 Make debug a little clearer. ok djm@
Darren Tucker8c7a14e2008-07-04 17:08:58 +10002270 - djm@cvs.openbsd.org 2008/06/30 08:07:34
2271 [regress/key-options.sh]
2272 shell portability: use "=" instead of "==" in test(1) expressions,
2273 double-quote string with backslash escaped /
Darren Tucker5d6d70a2008-07-04 17:10:30 +10002274 - djm@cvs.openbsd.org 2008/06/30 10:31:11
2275 [regress/{putty-transfer,putty-kex,putty-ciphers}.sh]
2276 remove "set -e" left over from debugging
Darren Tuckerb01bac12008-07-04 17:11:30 +10002277 - djm@cvs.openbsd.org 2008/06/30 10:43:03
2278 [regress/conch-ciphers.sh]
2279 explicitly disable conch options that could interfere with the test
Darren Tuckerf7fa7062008-07-04 14:10:19 +10002280 - (dtucker) [sftp-server.c] Bug #1447: fall back to racy rename if link
2281 returns EXDEV. Patch from Mike Garrison, ok djm@
Damien Millerd8968ad2008-07-04 23:10:49 +10002282 - (djm) [atomicio.c channels.c clientloop.c defines.h includes.h]
2283 [packet.c scp.c serverloop.c sftp-client.c ssh-agent.c ssh-keyscan.c]
2284 [sshd.c] Explicitly handle EWOULDBLOCK wherever we handle EAGAIN, on
2285 some platforms (HP nonstop) it is a distinct errno;
2286 bz#1467 reported by sconeu AT yahoo.com; ok dtucker@
2287
Darren Tucker00f00f02008-07-02 22:31:31 +1000228820080702
2289 - (dtucker) OpenBSD CVS Sync
2290 - djm@cvs.openbsd.org 2008/06/30 08:05:59
2291 [PROTOCOL.agent]
2292 typo: s/constraint_date/constraint_data/
Darren Tucker8810dd42008-07-02 22:32:14 +10002293 - djm@cvs.openbsd.org 2008/06/30 12:15:39
2294 [serverloop.c]
2295 only pass channel requests on session channels through to the session
2296 channel handler, avoiding spurious log messages; ok! markus@
Darren Tucker8748b962008-07-02 22:32:43 +10002297 - djm@cvs.openbsd.org 2008/06/30 12:16:02
2298 [nchan.c]
2299 only send eow@openssh.com notifications for session channels; ok! markus@
Darren Tucker1f781b12008-07-02 22:33:16 +10002300 - djm@cvs.openbsd.org 2008/06/30 12:18:34
2301 [PROTOCOL]
2302 clarify that eow@openssh.com is only sent on session channels
Darren Tucker068e01f2008-07-02 22:33:55 +10002303 - dtucker@cvs.openbsd.org 2008/07/01 07:20:52
2304 [sshconnect.c]
2305 Check ExitOnForwardFailure if forwardings are disabled due to a failed
2306 host key check. ok djm@
Darren Tuckerd7bdc0c2008-07-02 22:34:30 +10002307 - dtucker@cvs.openbsd.org 2008/07/01 07:24:22
2308 [sshconnect.c sshd.c]
2309 Send CR LF during protocol banner exchanges, but only for Protocol 2 only,
2310 in order to comply with RFC 4253. bz #1443, ok djm@
Darren Tuckerf2e21de2008-07-02 22:35:00 +10002311 - stevesk@cvs.openbsd.org 2008/07/01 23:12:47
2312 [PROTOCOL.agent]
2313 fix some typos; ok djm@
Darren Tucker7499b0c2008-07-02 22:35:43 +10002314 - djm@cvs.openbsd.org 2008/07/02 02:24:18
2315 [sshd_config sshd_config.5 sshd.8 servconf.c]
2316 increase default size of ssh protocol 1 ephemeral key from 768 to 1024
2317 bits; prodded by & ok dtucker@ ok deraadt@
Darren Tucker33c787f2008-07-02 22:37:30 +10002318 - dtucker@cvs.openbsd.org 2008/07/02 12:03:51
2319 [auth-rsa.c auth.c auth2-pubkey.c auth.h]
2320 Merge duplicate host key file checks, based in part on a patch from Rob
2321 Holland via bz #1348 . Also checks for non-regular files during protocol
2322 1 RSA auth. ok djm@
Darren Tucker4230a5d2008-07-02 22:56:09 +10002323 - djm@cvs.openbsd.org 2008/07/02 12:36:39
2324 [auth2-none.c auth2.c]
2325 Make protocol 2 MaxAuthTries behaviour a little more sensible:
2326 Check whether client has exceeded MaxAuthTries before running
2327 an authentication method and skip it if they have, previously it
2328 would always allow one try (for "none" auth).
2329 Preincrement failure count before post-auth test - previously this
2330 checked and postincremented, also to allow one "none" try.
2331 Together, these two changes always count the "none" auth method
2332 which could be skipped by a malicious client (e.g. an SSH worm)
2333 to get an extra attempt at a real auth method. They also make
2334 MaxAuthTries=0 a useful way to block users entirely (esp. in a
2335 sshd_config Match block).
2336 Also, move sending of any preauth banner from "none" auth method
2337 to the first call to input_userauth_request(), so worms that skip
2338 the "none" method get to see it too.
Darren Tucker00f00f02008-07-02 22:31:31 +10002339
Damien Miller2e80cf22008-06-30 08:06:25 +1000234020080630
2341 - (djm) OpenBSD CVS Sync
2342 - dtucker@cvs.openbsd.org 2008/06/10 23:13:43
2343 [regress/Makefile regress/key-options.sh]
2344 Add regress test for key options. ok djm@
Damien Millerd9bfce82008-06-30 08:06:51 +10002345 - dtucker@cvs.openbsd.org 2008/06/11 23:11:40
Damien Miller4268a132008-06-30 08:07:56 +10002346 [regress/Makefile]
Damien Millerd9bfce82008-06-30 08:06:51 +10002347 Don't run cipher-speed test by default; mistakenly enabled by me
Damien Miller4268a132008-06-30 08:07:56 +10002348 - djm@cvs.openbsd.org 2008/06/28 13:57:25
2349 [regress/Makefile regress/test-exec.sh regress/conch-ciphers.sh]
2350 very basic regress test against Twisted Conch in "make interop"
2351 target (conch is available in ports/devel/py-twisted/conch);
2352 ok markus@
Damien Millera766cea2008-06-30 08:12:37 +10002353 - (djm) [regress/Makefile] search for conch by path, like we do putty
Damien Miller2e80cf22008-06-30 08:06:25 +10002354
Damien Millerf184bcf2008-06-29 22:45:13 +1000235520080629
2356 - (djm) OpenBSD CVS Sync
2357 - martynas@cvs.openbsd.org 2008/06/21 07:46:46
2358 [sftp.c]
2359 use optopt to get invalid flag, instead of return value of getopt,
2360 which is always '?'; ok djm@
Damien Miller007132a2008-06-29 22:45:37 +10002361 - otto@cvs.openbsd.org 2008/06/25 11:13:43
2362 [key.c]
2363 add key length to visual fingerprint; zap magical constants;
2364 ok grunk@ djm@
Damien Miller9e720282008-06-29 22:46:35 +10002365 - djm@cvs.openbsd.org 2008/06/26 06:10:09
2366 [sftp-client.c sftp-server.c]
2367 allow the sftp chmod(2)-equivalent operation to set set[ug]id/sticky
2368 bits. Note that this only affects explicit setting of modes (e.g. via
2369 sftp(1)'s chmod command) and not file transfers. (bz#1310)
2370 ok deraadt@ at c2k8
Damien Miller2e9cf492008-06-29 22:47:04 +10002371 - djm@cvs.openbsd.org 2008/06/26 09:19:40
2372 [dh.c dh.h moduli.c]
2373 when loading moduli from /etc/moduli in sshd(8), check that they
2374 are of the expected "safe prime" structure and have had
2375 appropriate primality tests performed;
2376 feedback and ok dtucker@
Damien Miller10288242008-06-30 00:04:03 +10002377 - grunk@cvs.openbsd.org 2008/06/26 11:46:31
2378 [readconf.c readconf.h ssh.1 ssh_config.5 sshconnect.c]
2379 Move SSH Fingerprint Visualization away from sharing the config option
2380 CheckHostIP to an own config option named VisualHostKey.
2381 While there, fix the behaviour that ssh would draw a random art picture
2382 on every newly seen host even when the option was not enabled.
2383 prodded by deraadt@, discussions,
2384 help and ok markus@ djm@ dtucker@
Damien Miller86399202008-06-30 00:04:31 +10002385 - jmc@cvs.openbsd.org 2008/06/26 21:11:46
2386 [ssh.1]
2387 add VisualHostKey to the list of options listed in -o;
Damien Millerbd45afb2008-06-30 00:04:57 +10002388 - djm@cvs.openbsd.org 2008/06/28 07:25:07
2389 [PROTOCOL]
2390 spelling fixes
Damien Miller1cfadab2008-06-30 00:05:21 +10002391 - djm@cvs.openbsd.org 2008/06/28 13:58:23
2392 [ssh-agent.c]
2393 refuse to add a key that has unknown constraints specified;
2394 ok markus
Damien Miller471db5c2008-06-30 00:05:48 +10002395 - djm@cvs.openbsd.org 2008/06/28 14:05:15
2396 [ssh-agent.c]
2397 reset global compat flag after processing a protocol 2 signature
2398 request with the legacy DSA encoding flag set; ok markus
Damien Miller1e18beb2008-06-30 00:07:00 +10002399 - djm@cvs.openbsd.org 2008/06/28 14:08:30
2400 [PROTOCOL PROTOCOL.agent]
2401 document the protocol used by ssh-agent; "looks ok" markus@
Damien Millerf184bcf2008-06-29 22:45:13 +10002402
Damien Miller493f0322008-06-28 16:01:35 +1000240320080628
2404 - (djm) [RFC.nroff contrib/cygwin/Makefile contrib/suse/openssh.spec]
2405 RFC.nroff lacks a license, remove it (it is long gone in OpenBSD).
2406
Damien Miller60dcc622008-06-26 15:59:32 +1000240720080626
2408 - (djm) [Makefile.in moduli.5] Include moduli(5) manpage from OpenBSD.
2409 (bz#1372)
Damien Millerf299ff82008-06-26 16:01:56 +10002410 - (djm) [ contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2411 [contrib/suse/openssh.spec] Include moduli.5 in RPM spec files.
Damien Miller60dcc622008-06-26 15:59:32 +10002412
Darren Tuckered3cdc02008-06-16 23:29:18 +1000241320080616
2414 - (dtucker) OpenBSD CVS Sync
2415 - dtucker@cvs.openbsd.org 2008/06/16 13:22:53
2416 [session.c channels.c]
2417 Rename the isatty argument to is_tty so we don't shadow
2418 isatty(3). ok markus@
Darren Tucker1a48aec2008-06-16 23:35:56 +10002419 - (dtucker) [channels.c] isatty -> is_tty here too.
Darren Tuckered3cdc02008-06-16 23:29:18 +10002420
Darren Tucker330c93f2008-06-16 02:27:48 +1000242120080615
2422 - (dtucker) [configure.ac] Enable -fno-builtin-memset when using gcc.
Damien Miller2a628472008-06-16 07:50:24 +10002423 - OpenBSD CVS Sync
2424 - dtucker@cvs.openbsd.org 2008/06/14 15:49:48
2425 [sshd.c]
2426 wrap long line at 80 chars
Damien Miller6ca16c62008-06-16 07:50:58 +10002427 - dtucker@cvs.openbsd.org 2008/06/14 17:07:11
2428 [sshd.c]
2429 ensure default umask disallows at least group and world write; ok djm@
Damien Miller6051c942008-06-16 07:53:16 +10002430 - djm@cvs.openbsd.org 2008/06/14 18:33:43
2431 [session.c]
2432 suppress the warning message from chdir(homedir) failures
2433 when chrooted (bz#1461); ok dtucker
Damien Millerc7ce0da2008-06-16 07:55:06 +10002434 - dtucker@cvs.openbsd.org 2008/06/14 19:42:10
2435 [scp.1]
2436 Mention that scp follows symlinks during -r. bz #1466,
2437 from nectar at apple
Damien Millerc62a5af2008-06-16 07:55:46 +10002438 - dtucker@cvs.openbsd.org 2008/06/15 16:55:38
2439 [sshd_config.5]
2440 MaxSessions is allowed in a Match block too
Damien Miller307c1d12008-06-16 07:56:20 +10002441 - dtucker@cvs.openbsd.org 2008/06/15 16:58:40
2442 [servconf.c sshd_config.5]
2443 Allow MaxAuthTries within a Match block. ok djm@
Damien Millerd310d512008-06-16 07:59:23 +10002444 - djm@cvs.openbsd.org 2008/06/15 20:06:26
2445 [channels.c channels.h session.c]
2446 don't call isatty() on a pty master, instead pass a flag down to
2447 channel_set_fds() indicating that te fds refer to a tty. Fixes a
2448 hang on exit on Solaris (bz#1463) in portable but is actually
2449 a generic bug; ok dtucker deraadt markus
Darren Tucker330c93f2008-06-16 02:27:48 +10002450
Damien Miller8b7ab962008-06-15 10:55:34 +1000245120080614
2452 - (djm) [openbsd-compat/sigact.c] Avoid NULL derefs in ancient sigaction
2453 replacement code; patch from ighighi AT gmail.com in bz#1240;
2454 ok dtucker
2455
Darren Tucker99bb7612008-06-13 22:02:50 +1000245620080613
2457 - (dtucker) OpenBSD CVS Sync
2458 - deraadt@cvs.openbsd.org 2008/06/13 09:44:36
2459 [packet.c]
2460 compile on older gcc; no decl after code
Darren Tuckerf2c16d32008-06-14 08:59:49 +10002461 - dtucker@cvs.openbsd.org 2008/06/13 13:56:59
2462 [monitor.c]
2463 Clear key options in the monitor on failed authentication, prevents
2464 applying additional restrictions to non-pubkey authentications in
2465 the case where pubkey fails but another method subsequently succeeds.
2466 bz #1472, found by Colin Watson, ok markus@ djm@
Darren Tuckerd9526a52008-06-14 09:01:24 +10002467 - dtucker@cvs.openbsd.org 2008/06/13 14:18:51
2468 [auth2-pubkey.c auth-rhosts.c]
2469 Include unistd.h for close(), prevents warnings in -portable
Darren Tucker47e713b2008-06-14 09:01:54 +10002470 - dtucker@cvs.openbsd.org 2008/06/13 17:21:20
2471 [mux.c]
2472 Friendlier error messages for mux fallback. ok djm@
Darren Tucker03ccc9b2008-06-14 09:02:25 +10002473 - dtucker@cvs.openbsd.org 2008/06/13 18:55:22
2474 [scp.c]
2475 Prevent -Wsign-compare warnings on LP64 systems. bz #1192, ok deraadt@
Darren Tuckerf6bffb12008-06-14 09:04:26 +10002476 - grunk@cvs.openbsd.org 2008/06/13 20:13:26
2477 [ssh.1]
2478 Explain the use of SSH fpr visualization using random art, and cite the
2479 original scientific paper inspiring that technique.
2480 Much help with English and nroff by jmc@, thanks.
Darren Tucker30fd49e2008-06-14 09:14:46 +10002481 - (dtucker) [configure.ac] Bug #1276: avoid linking against libgssapi, which
2482 despite its name doesn't seem to implement all of GSSAPI. Patch from
2483 Jan Engelhardt, sanity checked by Simon Wilkinson.
Darren Tucker99bb7612008-06-13 22:02:50 +10002484
Darren Tucker11996732008-06-13 04:32:00 +1000248520080612
2486 - (dtucker) OpenBSD CVS Sync
2487 - jmc@cvs.openbsd.org 2008/06/11 07:30:37
2488 [sshd.8]
2489 kill trailing whitespace;
Darren Tucker9c16ac92008-06-13 04:40:35 +10002490 - grunk@cvs.openbsd.org 2008/06/11 21:01:35
2491 [ssh_config.5 key.h readconf.c readconf.h ssh-keygen.1 ssh-keygen.c key.c
2492 sshconnect.c]
2493 Introduce SSH Fingerprint ASCII Visualization, a technique inspired by the
2494 graphical hash visualization schemes known as "random art", and by
2495 Dan Kaminsky's musings on the subject during a BlackOp talk at the
2496 23C3 in Berlin.
2497 Scientific publication (original paper):
2498 "Hash Visualization: a New Technique to improve Real-World Security",
2499 Perrig A. and Song D., 1999, International Workshop on Cryptographic
2500 Techniques and E-Commerce (CrypTEC '99)
2501 http://sparrow.ece.cmu.edu/~adrian/projects/validation/validation.pdf
2502 The algorithm used here is a worm crawling over a discrete plane,
2503 leaving a trace (augmenting the field) everywhere it goes.
2504 Movement is taken from dgst_raw 2bit-wise. Bumping into walls
2505 makes the respective movement vector be ignored for this turn,
2506 thus switching to the other color of the chessboard.
2507 Graphs are not unambiguous for now, because circles in graphs can be
2508 walked in either direction.
2509 discussions with several people,
2510 help, corrections and ok markus@ djm@
Darren Tuckera376a322008-06-13 04:42:14 +10002511 - grunk@cvs.openbsd.org 2008/06/11 21:38:25
2512 [ssh-keygen.c]
2513 ssh-keygen -lv -f /etc/ssh/ssh_host_rsa_key.pub
2514 would not display you the random art as intended, spotted by canacar@
Darren Tucker35c45532008-06-13 04:43:15 +10002515 - grunk@cvs.openbsd.org 2008/06/11 22:20:46
2516 [ssh-keygen.c ssh-keygen.1]
2517 ssh-keygen would write fingerprints to STDOUT, and random art to STDERR,
2518 that is not how it was envisioned.
2519 Also correct manpage saying that -v is needed along with -l for it to work.
2520 spotted by naddy@
Darren Tucker014d76f2008-06-13 04:43:51 +10002521 - otto@cvs.openbsd.org 2008/06/11 23:02:22
2522 [key.c]
2523 simpler way of computing the augmentations; ok grunk@
Darren Tuckerdcc1ab52008-06-13 04:44:25 +10002524 - grunk@cvs.openbsd.org 2008/06/11 23:03:56
2525 [ssh_config.5]
2526 CheckHostIP set to ``fingerprint'' will display both hex and random art
2527 spotted by naddy@
Darren Tuckerd32b28a2008-06-13 04:45:50 +10002528 - grunk@cvs.openbsd.org 2008/06/11 23:51:57
2529 [key.c]
2530 #define statements that are not atoms need braces around them, else they
2531 will cause trouble in some cases.
2532 Also do a computation of -1 once, and not in a loop several times.
2533 spotted by otto@
Darren Tucker78913e02008-06-13 04:47:34 +10002534 - dtucker@cvs.openbsd.org 2008/06/12 00:03:49
2535 [dns.c canohost.c sshconnect.c]
2536 Do not pass "0" strings as ports to getaddrinfo because the lookups
2537 can slow things down and we never use the service info anyway. bz
2538 #859, patch from YOSHIFUJI Hideaki and John Devitofranceschi. ok
2539 deraadt@ djm@
2540 djm belives that the reason for the "0" strings is to ensure that
2541 it's not possible to call getaddrinfo with both host and port being
2542 NULL. In the case of canohost.c host is a local array. In the
2543 case of sshconnect.c, it's checked for null immediately before use.
2544 In dns.c it ultimately comes from ssh.c:main() and is guaranteed to
2545 be non-null but it's not obvious, so I added a warning message in
2546 case it is ever passed a null.
2547 - grunk@cvs.openbsd.org 2008/06/12 00:13:55
2548 [sshconnect.c]
2549 Make ssh print the random art also when ssh'ing to a host using IP only.
2550 spotted by naddy@, ok and help djm@ dtucker@
Darren Tucker267e28b2008-06-13 04:48:11 +10002551 - otto@cvs.openbsd.org 2008/06/12 00:13:13
2552 [key.c]
2553 use an odd number of rows and columns and a separate start marker, looks
2554 better; ok grunk@
Darren Tucker2fb66ca2008-06-13 04:49:33 +10002555 - djm@cvs.openbsd.org 2008/06/12 03:40:52
2556 [clientloop.h mux.c channels.c clientloop.c channels.h]
2557 Enable ~ escapes for multiplex slave sessions; give each channel
2558 its own escape state and hook the escape filters up to muxed
2559 channels. bz #1331
2560 Mux slaves do not currently support the ~^Z and ~& escapes.
2561 NB. this change cranks the mux protocol version, so a new ssh
2562 mux client will not be able to connect to a running old ssh
2563 mux master.
2564 ok dtucker@
Darren Tucker9f407c42008-06-13 04:50:27 +10002565 - djm@cvs.openbsd.org 2008/06/12 04:06:00
2566 [clientloop.h ssh.c clientloop.c]
2567 maintain an ordered queue of outstanding global requests that we
2568 expect replies to, similar to the per-channel confirmation queue.
2569 Use this queue to verify success or failure for remote forward
2570 establishment in a race free way.
2571 ok dtucker@
Darren Tucker4d5cd332008-06-13 04:51:14 +10002572 - djm@cvs.openbsd.org 2008/06/12 04:17:47
2573 [clientloop.c]
2574 thall shalt not code past the eightieth column
Darren Tuckerd6173c02008-06-13 04:52:53 +10002575 - djm@cvs.openbsd.org 2008/06/12 04:24:06
2576 [ssh.c]
2577 thal shalt not code past the eightieth column
Darren Tuckere5d98292008-06-13 04:53:27 +10002578 - djm@cvs.openbsd.org 2008/06/12 05:15:41
2579 [PROTOCOL]
2580 document tun@openssh.com forwarding method
Darren Tuckerba69c7a2008-06-13 04:54:05 +10002581 - djm@cvs.openbsd.org 2008/06/12 05:32:30
2582 [mux.c]
2583 some more TODO for me
Darren Tucker4b3b9772008-06-13 04:55:10 +10002584 - grunk@cvs.openbsd.org 2008/06/12 05:42:46
2585 [key.c]
2586 supply the key type (rsa1, rsa, dsa) as a caption in the frame of the
2587 random art. while there, stress the fact that the field base should at
2588 least be 8 characters for the pictures to make sense.
2589 comment and ok djm@
2590 - grunk@cvs.openbsd.org 2008/06/12 06:32:59
2591 [key.c]
2592 We already mark the start of the worm, now also mark the end of the worm
2593 in our random art drawings.
2594 ok djm@
Darren Tucker84c56f52008-06-13 04:55:46 +10002595 - djm@cvs.openbsd.org 2008/06/12 15:19:17
2596 [clientloop.h channels.h clientloop.c channels.c mux.c]
2597 The multiplexing escape char handler commit last night introduced a
2598 small memory leak per session; plug it.
Darren Tuckerf6b01b72008-06-13 04:56:37 +10002599 - dtucker@cvs.openbsd.org 2008/06/12 16:35:31
2600 [ssh_config.5 ssh.c]
2601 keyword expansion for localcommand. ok djm@
Darren Tuckerf09e8252008-06-13 05:18:03 +10002602 - jmc@cvs.openbsd.org 2008/06/12 19:10:09
2603 [ssh_config.5 ssh-keygen.1]
2604 tweak the ascii art text; ok grunk
Darren Tucker3fc464e2008-06-13 06:42:45 +10002605 - dtucker@cvs.openbsd.org 2008/06/12 20:38:28
2606 [sshd.c sshconnect.c packet.h misc.c misc.h packet.c]
2607 Make keepalive timeouts apply while waiting for a packet, particularly
2608 during key renegotiation (bz #1363). With djm and Matt Day, ok djm@
Darren Tuckera64ab332008-06-13 07:01:29 +10002609 - djm@cvs.openbsd.org 2008/06/12 20:47:04
2610 [sftp-client.c]
2611 print extension revisions for extensions that we understand
Darren Tuckerbabc1d52008-06-13 08:56:01 +10002612 - djm@cvs.openbsd.org 2008/06/12 21:06:25
2613 [clientloop.c]
2614 I was coalescing expected global request confirmation replies at
2615 the wrong end of the queue - fix; prompted by markus@
Darren Tuckerb68fb4a2008-06-13 08:57:27 +10002616 - grunk@cvs.openbsd.org 2008/06/12 21:14:46
2617 [ssh-keygen.c]
2618 make ssh-keygen -lf show the key type just as ssh-add -l would do it
2619 ok djm@ markus@
Darren Tucker0f0ef0a2008-06-13 08:58:05 +10002620 - grunk@cvs.openbsd.org 2008/06/12 22:03:36
2621 [key.c]
2622 add my copyright, ok djm@
Darren Tuckerff4454d2008-06-13 10:21:51 +10002623 - ian@cvs.openbsd.org 2008/06/12 23:24:58
2624 [sshconnect.c]
2625 tweak wording in message, ok deraadt@ jmc@
Darren Tuckerf8b7eb72008-06-13 10:22:54 +10002626 - dtucker@cvs.openbsd.org 2008/06/13 00:12:02
2627 [sftp.h log.h]
2628 replace __dead with __attribute__((noreturn)), makes things
2629 a little easier to port. Also, add it to sigdie(). ok djm@
Darren Tuckerca19bfe2008-06-13 10:24:03 +10002630 - djm@cvs.openbsd.org 2008/06/13 00:16:49
2631 [mux.c]
2632 fall back to creating a new TCP connection on most multiplexing errors
2633 (socket connect fail, invalid version, refused permittion, corrupted
2634 messages, etc.); bz #1329 ok dtucker@
Darren Tucker1adfd362008-06-13 10:58:10 +10002635 - dtucker@cvs.openbsd.org 2008/06/13 00:47:53
2636 [mux.c]
2637 upcast size_t to u_long to match format arg; ok djm@
Darren Tuckerc7e030f2008-06-13 10:58:50 +10002638 - dtucker@cvs.openbsd.org 2008/06/13 00:51:47
2639 [mac.c]
2640 upcast another size_t to u_long to match format
Darren Tucker7517b5b2008-06-13 14:48:59 +10002641 - dtucker@cvs.openbsd.org 2008/06/13 01:38:23
2642 [misc.c]
2643 upcast uid to long with matching %ld, prevents warnings in portable
Darren Tucker06db5842008-06-13 14:51:28 +10002644 - djm@cvs.openbsd.org 2008/06/13 04:40:22
2645 [auth2-pubkey.c auth-rhosts.c]
2646 refuse to read ~/.shosts or ~/.ssh/authorized_keys that are not
2647 regular files; report from Solar Designer via Colin Watson in bz#1471
2648 ok dtucker@ deraadt
Darren Tucker1cf65ae2008-06-13 05:09:18 +10002649 - (dtucker) [clientloop.c serverloop.c] channel_register_filter now
2650 takes 2 more args. with djm@
Darren Tucker61b06952008-06-13 10:28:57 +10002651 - (dtucker) [defines.h] Bug #1112: __dead is, well dead. Based on a patch
2652 from Todd Vierling.
Darren Tucker2c1eb822008-06-13 11:13:13 +10002653 - (dtucker) [auth-sia.c] Bug #1241: support password expiry on Tru64 SIA
2654 systems. Patch from R. Scott Bailey.
Darren Tucker2c91b282008-06-13 12:40:55 +10002655 - (dtucker) [umac.c] STORE_UINT32_REVERSED and endian_convert are never used
2656 on big endian machines, so ifdef them for little-endian only to prevent
2657 unused function warnings on big-endians.
Darren Tuckerf387e592008-06-13 15:03:14 +10002658 - (dtucker) [openbsd-compat/setenv.c] Make offsets size_t to prevent
2659 compiler warnings on some platforms. Based on a discussion with otto@
Darren Tucker11996732008-06-13 04:32:00 +10002660
Damien Miller4401e452008-06-12 06:05:12 +1000266120080611
2662 - (djm) [channels.c configure.ac]
2663 Do not set SO_REUSEADDR on wildcard X11 listeners (X11UseLocalhost=no)
2664 bz#1464; ok dtucker
2665
Darren Tucker7a3935d2008-06-10 22:59:10 +1000266620080610
2667 - (dtucker) OpenBSD CVS Sync
2668 - djm@cvs.openbsd.org 2008/06/10 03:57:27
2669 [servconf.c match.h sshd_config.5]
2670 support CIDR address matching in sshd_config "Match address" blocks, with
2671 full support for negation and fall-back to classic wildcard matching.
2672 For example:
2673 Match address 192.0.2.0/24,3ffe:ffff::/32,!10.*
2674 PasswordAuthentication yes
2675 addrmatch.c code mostly lifted from flowd's addr.c
2676 feedback and ok dtucker@
Darren Tuckerb06cc4a2008-06-10 22:59:53 +10002677 - djm@cvs.openbsd.org 2008/06/10 04:17:46
2678 [sshd_config.5]
2679 better reference for pattern-list
Darren Tuckere7140f22008-06-10 23:01:51 +10002680 - dtucker@cvs.openbsd.org 2008/06/10 04:50:25
2681 [sshd.c channels.h channels.c log.c servconf.c log.h servconf.h sshd.8]
2682 Add extended test mode (-T) and connection parameters for test mode (-C).
2683 -T causes sshd to write its effective configuration to stdout and exit.
2684 -C causes any relevant Match rules to be applied before output. The
2685 combination allows tesing of the parser and config files. ok deraadt djm
Darren Tucker6a2a4002008-06-10 23:03:04 +10002686 - jmc@cvs.openbsd.org 2008/06/10 07:12:00
2687 [sshd_config.5]
2688 tweak previous;
Darren Tuckere7f3f752008-06-10 23:06:01 +10002689 - jmc@cvs.openbsd.org 2008/06/10 08:17:40
2690 [sshd.8 sshd.c]
2691 - update usage()
2692 - fix SYNOPSIS, and sort options
2693 - some minor additional fixes
Darren Tuckerd788b7c2008-06-10 23:15:54 +10002694 - dtucker@cvs.openbsd.org 2008/06/09 18:06:32
2695 [regress/test-exec.sh]
2696 Don't generate putty keys if we're not going to use them. ok djm
Darren Tucker10f92422008-06-10 23:16:46 +10002697 - dtucker@cvs.openbsd.org 2008/06/10 05:23:32
2698 [regress/addrmatch.sh regress/Makefile]
2699 Regress test for Match CIDR rules. ok djm@
Darren Tucker5f346642008-06-11 01:38:52 +10002700 - dtucker@cvs.openbsd.org 2008/06/10 15:21:41
2701 [test-exec.sh]
2702 Use a more portable construct for checking if we're running a putty test
Darren Tuckerd8bafea2008-06-11 01:39:38 +10002703 - dtucker@cvs.openbsd.org 2008/06/10 15:28:49
2704 [test-exec.sh]
2705 Add quotes
Darren Tuckerc9807e82008-06-11 09:33:01 +10002706 - dtucker@cvs.openbsd.org 2008/06/10 18:21:24
2707 [ssh_config.5]
2708 clarify that Host patterns are space-separated. ok deraadt
Darren Tucker8901fa92008-06-11 09:34:01 +10002709 - djm@cvs.openbsd.org 2008/06/10 22:15:23
2710 [PROTOCOL ssh.c serverloop.c]
2711 Add a no-more-sessions@openssh.com global request extension that the
2712 client sends when it knows that it will never request another session
2713 (i.e. when session multiplexing is disabled). This allows a server to
2714 disallow further session requests and terminate the session.
2715 Why would a non-multiplexing client ever issue additional session
2716 requests? It could have been attacked with something like SSH'jack:
2717 http://www.storm.net.nz/projects/7
2718 feedback & ok markus
Darren Tucker896ad5a2008-06-11 09:34:46 +10002719 - djm@cvs.openbsd.org 2008/06/10 23:06:19
2720 [auth-options.c match.c servconf.c addrmatch.c sshd.8]
2721 support CIDR address matching in .ssh/authorized_keys from="..." stanzas
2722 ok and extensive testing dtucker@
Darren Tucker2a8b1382008-06-11 09:35:37 +10002723 - dtucker@cvs.openbsd.org 2008/06/10 23:21:34
2724 [bufaux.c]
2725 Use '\0' for a nul byte rather than unadorned 0. ok djm@
Darren Tuckere045e0c2008-06-11 09:38:12 +10002726 - dtucker@cvs.openbsd.org 2008/06/10 23:13:43
2727 [Makefile regress/key-options.sh]
2728 Add regress test for key options. ok djm@
Darren Tucker5d376902008-06-11 04:15:05 +10002729 - (dtucker) [openbsd-compat/fake-rfc2553.h] Add sin6_scope_id to sockaddr_in6
2730 since the new CIDR code in addmatch.c references it.
2731 - (dtucker) [Makefile.in configure.ac regress/addrmatch.sh] Skip IPv6
2732 specific tests on platforms that don't do IPv6.
Darren Tucker34f49c62008-06-11 05:15:51 +10002733 - (dtucker) [Makefile.in] Define TEST_SSH_IPV6 in make's arguments as well
2734 as environment.
Darren Tuckerb8e05002008-06-11 09:47:59 +10002735 - (dtucker) [Makefile.in] Move addrmatch.o to libssh.a where it's needed now.
Darren Tucker7a3935d2008-06-10 22:59:10 +10002736
Darren Tucker422c34c2008-06-09 22:48:31 +1000273720080609
2738 - (dtucker) OpenBSD CVS Sync
2739 - dtucker@cvs.openbsd.org 2008/06/08 17:04:41
2740 [sftp-server.c]
2741 Add case for ENOSYS in errno_to_portable; ok deraadt
Darren Tucker7b598892008-06-09 22:49:36 +10002742 - dtucker@cvs.openbsd.org 2008/06/08 20:15:29
2743 [sftp.c sftp-client.c sftp-client.h]
2744 Have the sftp client store the statvfs replies in wire format,
2745 which prevents problems when the server's native sizes exceed the
2746 client's.
2747 Also extends the sizes of the remaining 32bit wire format to 64bit,
2748 they're specified as unsigned long in the standard.
Darren Tucker3463aca2008-06-09 23:06:55 +10002749 - dtucker@cvs.openbsd.org 2008/06/09 13:02:39
Darren Tucker588fe0e2008-06-09 23:52:22 +10002750 [sftp-server.c]
Darren Tucker3463aca2008-06-09 23:06:55 +10002751 Extend 32bit -> 64bit values for statvfs extension missed in previous
2752 commit.
Darren Tucker588fe0e2008-06-09 23:52:22 +10002753 - dtucker@cvs.openbsd.org 2008/06/09 13:38:46
2754 [PROTOCOL]
2755 Use a $OpenBSD tag so our scripts will sync changes.
Darren Tucker422c34c2008-06-09 22:48:31 +10002756
Darren Tucker598eaa62008-06-09 03:32:29 +1000275720080608
2758 - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c
2759 openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h
2760 openbsd-compat/bsd-statvfs.{c,h}] Add a null implementation of statvfs and
2761 fstatvfs and remove #defines around statvfs code. ok djm@
Darren Tucker77001382008-06-09 06:17:53 +10002762 - (dtucker) [configure.ac defines.h sftp-client.c M sftp-server.c] Add a
2763 macro to convert fsid to unsigned long for platforms where fsid is a
2764 2-member array.
Darren Tucker598eaa62008-06-09 03:32:29 +10002765
Darren Tuckerce38d822008-06-07 06:25:15 +1000276620080607
2767 - (dtucker) [mux.c] Include paths.h inside ifdef HAVE_PATHS_H.
Darren Tucker5b2e2ba2008-06-08 09:25:28 +10002768 - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c]
2769 Do not enable statvfs extensions on platforms that do not have statvfs.
Darren Tucker136e56f2008-06-08 12:49:30 +10002770 - (dtucker) OpenBSD CVS Sync
2771 - djm@cvs.openbsd.org 2008/05/19 06:14:02
2772 [packet.c] unbreak protocol keepalive timeouts bz#1465; ok dtucker@
Darren Tuckerdd392642008-06-08 12:53:20 +10002773 - djm@cvs.openbsd.org 2008/05/19 15:45:07
2774 [sshtty.c ttymodes.c sshpty.h]
2775 Fix sending tty modes when stdin is not a tty (bz#1199). Previously
2776 we would send the modes corresponding to a zeroed struct termios,
2777 whereas we should have been sending an empty list of modes.
2778 Based on patch from daniel.ritz AT alcatel.ch; ok dtucker@ markus@
Darren Tucker0f7e9102008-06-08 12:54:29 +10002779 - djm@cvs.openbsd.org 2008/05/19 15:46:31
2780 [ssh-keygen.c]
2781 support -l (print fingerprint) in combination with -F (find host) to
2782 search for a host in ~/.ssh/known_hosts and display its fingerprint;
2783 ok markus@
Darren Tuckerdf189fb2008-06-08 12:55:32 +10002784 - djm@cvs.openbsd.org 2008/05/19 20:53:52
2785 [clientloop.c]
2786 unbreak tree by committing this bit that I missed from:
2787 Fix sending tty modes when stdin is not a tty (bz#1199). Previously
2788 we would send the modes corresponding to a zeroed struct termios,
2789 whereas we should have been sending an empty list of modes.
2790 Based on patch from daniel.ritz AT alcatel.ch; ok dtucker@ markus@
Darren Tuckerce38d822008-06-07 06:25:15 +10002791
Damien Miller58ea61b2008-06-04 10:54:00 +1000279220080604
2793 - (djm) [openbsd-compat/bsd-arc4random.c] Fix math bug that caused bias
2794 in arc4random_uniform with upper_bound in (2^30,2*31). Note that
2795 OpenSSH did not make requests with upper bounds in this range.
2796
Damien Millera7058ec2008-05-20 08:57:06 +1000279720080519
2798 - (djm) [configure.ac mux.c sftp.c openbsd-compat/Makefile.in]
2799 [openbsd-compat/fmt_scaled.c openbsd-compat/openbsd-compat.h]
2800 Fix compilation on Linux, including pulling in fmt_scaled(3)
2801 implementation from OpenBSD's libutil.
2802
Damien Miller797e3d12008-05-19 14:27:42 +1000280320080518
2804 - (djm) OpenBSD CVS Sync
2805 - djm@cvs.openbsd.org 2008/04/04 05:14:38
2806 [sshd_config.5]
2807 ChrootDirectory is supported in Match blocks (in fact, it is most useful
2808 there). Spotted by Minstrel AT minstrel.org.uk
Damien Miller56f41dd2008-05-19 14:28:19 +10002809 - djm@cvs.openbsd.org 2008/04/04 06:44:26
2810 [sshd_config.5]
2811 oops, some unrelated stuff crept into that commit - backout.
2812 spotted by jmc@
Damien Miller25434de2008-05-19 14:29:08 +10002813 - djm@cvs.openbsd.org 2008/04/05 02:46:02
2814 [sshd_config.5]
2815 HostbasedAuthentication is supported under Match too
Damien Millera4be7c22008-05-19 14:47:37 +10002816 - (djm) [openbsd-compat/bsd-arc4random.c openbsd-compat/openbsd-compat.c]
2817 [configure.ac] Implement arc4random_buf(), import implementation of
2818 arc4random_uniform() from OpenBSD
Damien Millercaaed012008-05-19 15:26:54 +10002819 - (djm) [openbsd-compat/bsd-arc4random.c] Warning fixes
Damien Miller94178312008-05-19 15:28:35 +10002820 - (djm) [openbsd-compat/port-tun.c] needs sys/queue.h
Damien Miller354c48c2008-05-19 14:50:00 +10002821 - (djm) OpenBSD CVS Sync
2822 - djm@cvs.openbsd.org 2008/04/13 00:22:17
2823 [dh.c sshd.c]
2824 Use arc4random_buf() when requesting more than a single word of output
2825 Use arc4random_uniform() when the desired random number upper bound
2826 is not a power of two
2827 ok deraadt@ millert@
Damien Millerd671e5a2008-05-19 14:53:33 +10002828 - djm@cvs.openbsd.org 2008/04/18 12:32:11
2829 [sftp-client.c sftp-client.h sftp-server.c sftp.1 sftp.c sftp.h]
2830 introduce sftp extension methods statvfs@openssh.com and
2831 fstatvfs@openssh.com that implement statvfs(2)-like operations,
2832 based on a patch from miklos AT szeredi.hu (bz#1399)
2833 also add a "df" command to the sftp client that uses the
2834 statvfs@openssh.com to produce a df(1)-like display of filesystem
2835 space and inode utilisation
2836 ok markus@
Damien Miller64058cb2008-05-19 14:54:25 +10002837 - jmc@cvs.openbsd.org 2008/04/18 17:15:47
2838 [sftp.1]
2839 macro fixage;
Damien Millerff0dd882008-05-19 14:55:02 +10002840 - djm@cvs.openbsd.org 2008/04/18 22:01:33
2841 [session.c]
2842 remove unneccessary parentheses
Damien Miller0b4c1652008-05-19 14:55:29 +10002843 - otto@cvs.openbsd.org 2008/04/29 11:20:31
2844 [monitor_mm.h]
2845 garbage collect two unused fields in struct mm_master; ok markus@
Damien Millerbacb7fb2008-05-19 14:56:33 +10002846 - djm@cvs.openbsd.org 2008/04/30 10:14:03
2847 [ssh-keyscan.1 ssh-keyscan.c]
2848 default to rsa (protocol 2) keys, instead of rsa1 keys; spotted by
2849 larsnooden AT openoffice.org
Damien Miller4f755cd2008-05-19 14:57:41 +10002850 - pyr@cvs.openbsd.org 2008/05/07 05:49:37
2851 [servconf.c servconf.h session.c sshd_config.5]
2852 Enable the AllowAgentForwarding option in sshd_config (global and match
2853 context), to specify if agents should be permitted on the server.
2854 As the man page states:
2855 ``Note that disabling Agent forwarding does not improve security
2856 unless users are also denied shell access, as they can always install
2857 their own forwarders.''
2858 ok djm@, ok and a mild frown markus@
Damien Millerba3a6592008-05-19 14:58:22 +10002859 - pyr@cvs.openbsd.org 2008/05/07 06:43:35
2860 [sshd_config]
2861 push the sshd_config bits in, spotted by ajacoutot@
Damien Millere9890192008-05-19 14:59:02 +10002862 - jmc@cvs.openbsd.org 2008/05/07 08:00:14
2863 [sshd_config.5]
2864 sort;
Damien Millerdb255ca2008-05-19 14:59:37 +10002865 - markus@cvs.openbsd.org 2008/05/08 06:59:01
2866 [bufaux.c buffer.h channels.c packet.c packet.h]
2867 avoid extra malloc/copy/free when receiving data over the net;
2868 ~10% speedup for localhost-scp; ok djm@
Damien Millerb84886b2008-05-19 15:05:07 +10002869 - djm@cvs.openbsd.org 2008/05/08 12:02:23
2870 [auth-options.c auth1.c channels.c channels.h clientloop.c gss-serv.c]
2871 [monitor.c monitor_wrap.c nchan.c servconf.c serverloop.c session.c]
2872 [ssh.c sshd.c]
2873 Implement a channel success/failure status confirmation callback
2874 mechanism. Each channel maintains a queue of callbacks, which will
2875 be drained in order (RFC4253 guarantees confirm messages are not
2876 reordered within an channel).
2877 Also includes a abandonment callback to clean up if a channel is
2878 closed without sending confirmation messages. This probably
2879 shouldn't happen in compliant implementations, but it could be
2880 abused to leak memory.
2881 ok markus@ (as part of a larger diff)
Damien Miller7207f642008-05-19 15:34:50 +10002882 - djm@cvs.openbsd.org 2008/05/08 12:21:16
2883 [monitor.c monitor_wrap.c session.h servconf.c servconf.h session.c]
2884 [sshd_config sshd_config.5]
2885 Make the maximum number of sessions run-time controllable via
2886 a sshd_config MaxSessions knob. This is useful for disabling
2887 login/shell/subsystem access while leaving port-forwarding working
2888 (MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or
2889 simply increasing the number of allows multiplexed sessions.
2890 Because some bozos are sure to configure MaxSessions in excess of the
2891 number of available file descriptors in sshd (which, at peak, might be
2892 as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak fds
2893 on error paths, and make it fail gracefully on out-of-fd conditions -
2894 sending channel errors instead of than exiting with fatal().
2895 bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com
2896 ok markus@
Damien Miller5771ed72008-05-19 15:35:33 +10002897 - djm@cvs.openbsd.org 2008/05/08 13:06:11
2898 [clientloop.c clientloop.h ssh.c]
2899 Use new channel status confirmation callback system to properly deal
2900 with "important" channel requests that fail, in particular command exec,
2901 shell and subsystem requests. Previously we would optimistically assume
2902 that the requests would always succeed, which could cause hangs if they
2903 did not (e.g. when the server runs out of fds) or were unimplemented by
2904 the server (bz #1384)
2905 Also, properly report failing multiplex channel requests via the mux
2906 client stderr (subject to LogLevel in the mux master) - better than
2907 silently failing.
2908 most bits ok markus@ (as part of a larger diff)
Damien Millerbd740252008-05-19 15:37:09 +10002909 - djm@cvs.openbsd.org 2008/05/09 04:55:56
2910 [channels.c channels.h clientloop.c serverloop.c]
2911 Try additional addresses when connecting to a port forward destination
2912 whose DNS name resolves to more than one address. The previous behaviour
2913 was to try the first address and give up.
2914 Reported by stig AT venaas.com in bz#343
2915 great feedback and ok markus@
Damien Millerb1cbfa22008-05-19 16:00:08 +10002916 - djm@cvs.openbsd.org 2008/05/09 14:18:44
2917 [clientloop.c clientloop.h ssh.c mux.c]
2918 tidy up session multiplexing code, moving it into its own file and
2919 making the function names more consistent - making ssh.c and
2920 clientloop.c a fair bit more readable.
2921 ok markus@
Damien Millerb3da5932008-05-19 16:02:37 +10002922 - djm@cvs.openbsd.org 2008/05/09 14:26:08
2923 [ssh.c]
2924 dingo stole my diff hunk
Damien Miller2ff1ca52008-05-19 16:04:56 +10002925 - markus@cvs.openbsd.org 2008/05/09 16:16:06
2926 [session.c]
2927 re-add the USE_PIPES code and enable it.
2928 without pipes shutdown-read from the sshd does not trigger
2929 a SIGPIPE when the forked program does a write.
2930 ok djm@
2931 (Id sync only, USE_PIPES never left portable OpenSSH)
Damien Millerd654dd22008-05-19 16:05:41 +10002932 - markus@cvs.openbsd.org 2008/05/09 16:17:51
2933 [channels.c]
2934 error-fd race: don't enable the error fd in the select bitmask
2935 for channels with both in- and output closed, since the channel
2936 will go away before we call select();
2937 report, lots of debugging help and ok djm@
Damien Millerbab9bd42008-05-19 16:06:47 +10002938 - markus@cvs.openbsd.org 2008/05/09 16:21:13
2939 [channels.h clientloop.c nchan.c serverloop.c]
2940 unbreak
2941 ssh -2 localhost od /bin/ls | true
2942 ignoring SIGPIPE by adding a new channel message (EOW) that signals
2943 the peer that we're not interested in any data it might send.
2944 fixes bz #85; discussion, debugging and ok djm@
Damien Miller0f30c872008-05-19 16:07:45 +10002945 - pvalchev@cvs.openbsd.org 2008/05/12 20:52:20
2946 [umac.c]
2947 Ensure nh_result lies on a 64-bit boundary (fixes warnings observed
2948 on Itanium on Linux); from Dale Talcott (bug #1462); ok djm@
Damien Miller5159bdd2008-05-19 16:08:20 +10002949 - djm@cvs.openbsd.org 2008/05/15 23:52:24
2950 [nchan2.ms]
2951 document eow message in ssh protocol 2 channel state machine;
2952 feedback and ok markus@
Damien Millera7e0d5a2008-05-19 16:08:41 +10002953 - djm@cvs.openbsd.org 2008/05/18 21:29:05
2954 [sftp-server.c]
2955 comment extension announcement
Damien Miller58a81142008-05-19 16:11:56 +10002956 - djm@cvs.openbsd.org 2008/05/16 08:30:42
2957 [PROTOCOL]
2958 document our protocol extensions and deviations; ok markus@
2959 - djm@cvs.openbsd.org 2008/05/17 01:31:56
2960 [PROTOCOL]
2961 grammar and correctness fixes from stevesk@
Damien Miller797e3d12008-05-19 14:27:42 +10002962
Damien Miller5f5cd742008-04-03 08:43:57 +1100296320080403
Damien Miller55754fb2008-04-04 16:16:35 +11002964 - (djm) [openbsd-compat/bsd-poll.c] Include stdlib.h to avoid compile-
2965 time warnings on LynxOS. Patch from ops AT iki.fi
Damien Millerc5750222008-05-16 10:01:54 +10002966 - (djm) Force string arguments to replacement setproctitle() though
2967 strnvis first. Ok dtucker@
Damien Miller55754fb2008-04-04 16:16:35 +11002968
296920080403
Damien Miller5f5cd742008-04-03 08:43:57 +11002970 - (djm) OpenBSD CVS sync:
2971 - markus@cvs.openbsd.org 2008/04/02 15:36:51
2972 [channels.c]
2973 avoid possible hijacking of x11-forwarded connections (back out 1.183)
2974 CVE-2008-1483; ok djm@
Damien Miller13ba9c22008-04-03 20:52:51 +11002975 - jmc@cvs.openbsd.org 2008/03/27 22:37:57
2976 [sshd.8]
2977 remove trailing whitespace;
Damien Millera68d31b2008-04-03 20:53:08 +11002978 - djm@cvs.openbsd.org 2008/04/03 09:50:14
2979 [version.h]
2980 openssh-5.0
Damien Miller5a4b6462008-04-03 20:55:44 +11002981 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2982 [contrib/suse/openssh.spec] Crank version numbers in RPM spec files
Damien Millerffa83022008-04-03 20:56:38 +11002983 - (djm) [README] Update link to release notes
Damien Miller79a1bc92008-04-03 20:57:05 +11002984 - (djm) Release 5.0p1