aboutsummaryrefslogtreecommitdiffstats
path: root/security/openssh-portable
Commit message (Collapse)AuthorAgeFilesLines
* - Update OpenSSH to 4.6p1mnag2007-03-134-1828/+2353
| | | | | | - Update GSSKEX patch to 20061220 - Update HPN patch to hpn12v16 - Update LPK patch to 0.3.8
* - Use RC_SUBR_SUFFIXrafan2007-02-061-6/+1
| | | | Approved by: mnag (maintainer)
* Update HPN patch to v14 for openssh 4.5p1.ale2006-11-182-4/+4
| | | | Approved by: mnag
* - Fix CHROOT patch using chroot() before setusercontext() and add strerror() ↵mnag2006-11-101-18/+14
| | | | | | in message if chroot() fail. Notified by: Chris Gardner <chris_g_g___hotmail.com>
* - Update to 4.5p1mnag2006-11-103-6/+5
| | | | | | | - patch-sshd.c unconditionally includes <gssapi.h>. Include "ssh-gss.h" instead. [1] PR: 104481 [1] Submitted by: Mark Andrews <Mark_Andrews___isc.org> [1]
* - Update HPN patch. Patch are renamed, the only content differences are two ↵mnag2006-10-172-7/+8
| | | | | | | rows now enclosed in an "else" block. Submitted by: ale Approved by: portmgr (erwin)
* - Add OPTION to enable Kerberos/GSSAPI patch [1]mnag2006-10-083-11/+1850
| | | | | | | - Add OPTION to enable LPK patch (ldap stored public key) [2] PR: 86384 [1], 103399 [2] Submitted by: Garrett Wollman <wollman___khavrinen.csail.mit.edu> [1], Dmitriy Kirhlarov <dkirhlarov___oilspace.com> [2]
* - Fix package creation. [1]mnag2006-10-043-4/+9
| | | | | | | | - Update HPN patch and remove IGNORE. [2] - Bump PORTREVISION PR: 103961 Submitted by: Phil Oleson <oz___nixil.net> [1], ale [2]
* - Install ssh_config-dist and sshd_config-dist in OVERWRITE_BASE too.mnag2006-10-022-4/+2
|
* - Update to 4.4p1.mnag2006-10-0121-448/+467
| | | | | | | | | - Disable temporary HPN patch until HPN release new version. - Fix rc.d script path in sshd.8 - Add FreeBSD-${PKGNAME} in SSH_VERSION and SSH_RELEASE like src does. - Sync patches with src. Security: CVE-2006-4924, CVE-2006-5051
* Update HPN-12 patch to version 8 (no functional changes,ale2006-08-302-4/+4
| | | | | | only documentation changes and a small bug fix on option parsing). Approved by: mnag
* Add optional OpenSC PIN patch which make it possible for OpenSSH to asksimon2006-08-092-0/+137
| | | | | | | for a PIN when using an OpenSC smartcard. Approved by: mnag (maintainer) Patch obtained from: http://bugzilla.mindrot.org/show_bug.cgi?id=608
* - Remove unecessary ?= in PKGNAMESUFFIX [1]mnag2006-07-052-21/+5
| | | | | | - Update HPN patch to hpn12. Now none cipher are configured in run time. [2] Notified by: Peter Losher <plosher___plosh.net> [1], Scott Larson <stl___iowainteractive.com> [2]
* Add support for smart cards.ale2006-06-131-0/+6
| | | | Approved by: maintainer
* - Fix order in rc.d script. Because of pidfile are empty, reload [2] and ↵mnag2006-02-222-14/+18
| | | | | | | | | | | restart [1] commands kill all connections. - Separate keygen part and create keygen command. - Bump PORTREVISION PR: 93228 [1] Reported by: DanGer on #bsdports [2]
* Forget to add HPN patches.mnag2006-02-122-2/+8
|
* - Update to 4.3p2mnag2006-02-122-10/+4
|
* - Update to 4.3p1mnag2006-02-088-88/+194
| | | | | | | | | | | | | | | | - Use DISTVERSION - Add most configuration in OPTIONS - Enable support to libedit in sftp [1] - Add OPTIONS to HPN patches [2] - Add new rc.d script [3] - New rc.d script are responsible to check configuration and create host keys - Using USE_RC_SUBR - Modify pkg-message to reflect new rc.d script - Fix pkg-plist Reviewd by: dougb [3] Submitted by: vs [1], brooks [2] Tested by: me, John E Hein
* - Reorganize Makefile in preparation to update to 4.3p1mnag2006-02-082-74/+75
| | | | | - Add one http in MASTER_SITES - Update WWW
* Add SHA256mnag2005-11-091-0/+1
|
* Update my emailmnag2005-09-171-1/+1
| | | | Approved by: pav (mentor)
* - Pass maintainership to submitter, since he sent the last patch.garga2005-09-061-1/+1
| | | | | PR: ports/85775 Submitted by: Marcus Alves Grando <marcus@corp.grupos.com.br>
* - Update to 4.2p1garga2005-09-025-146/+70
| | | | | PR: ports/85578 Submitted by: Marcus Grando <marcus@corp.grupos.com.br>
* - Update to 4.1p1pav2005-06-072-5/+5
| | | | | PR: ports/81948 Submitted by: Daniel Gerzo <danger@rulez.sk>
* - Don't specify --with-ssl-dir when using the system's OpenSSLpav2005-04-121-0/+2
| | | | | PR: ports/79355 Submitted by: Mark Andrews <Mark_Andrews@isc.org>
* - Update to 4.0p1ahze2005-03-209-68/+137
| | | | | PR: ports/79029 Submitted by: Dimitry Andric <dimitry@andric.com>
* - sshd child process crashes when user with expired password logs in.pav2004-12-191-1/+1
| | | | | | | Fix unitialized pointer in our local patch. PR: ports/75204 Submitted by: Andriy Gapon <avg@icyb.net.ua>
* - drop maintainershipdinoex2004-10-141-1/+1
|
* - new option WITH_OPENSSH_CHROOTdinoex2004-10-122-24/+62
| | | | Submitted by: KANAI Makoto
* - cleanup patchesdinoex2004-10-125-21/+21
| | | | (only context changed)
* - update to 3.9p1dinoex2004-08-186-63/+46
| | | | | | | set PORTVERSION 3.9.0.1 to avoid another bump of PORTEPOCH if 3.9.1p1 come out. - new option OPENSSH_SNAPSHOT
* - bump PORTEPOCHdinoex2004-04-291-0/+1
| | | | Reported by kriS
* - update to 3.8.1p1dinoex2004-04-292-3/+3
|
* - force kerberos by option WITH_GSSAPIdinoex2004-04-031-2/+2
|
* - make PKGNAMESUFFIX more flexibledinoex2004-03-271-4/+6
|
* - add SIZEdinoex2004-02-261-16/+16
|
* - update to 3.8p1dinoex2004-02-253-11/+13
|
* - fix Usagedinoex2003-12-041-2/+2
|
* - new option WITHOUT_KERBEROSdinoex2003-10-181-1/+1
| | | | | PR: 58156 Submitted by: matt@peterson.org
* - fix build with kerberos5 from base and missing libdesdinoex2003-10-131-16/+6
| | | | - get rid of autoconf dependency
* - fix spelling of gssapidinoex2003-10-131-2/+2
|
* - add CONFLICTSdinoex2003-10-121-2/+6
| | | | Submitted by: eikemeier@fillmore-labs.com
* - GSSAPI patch improved for kerbers5 and hemidaldinoex2003-10-102-0/+23
| | | | Submitted by: bg@sics.se
* - cleanup GSSAPI optiondinoex2003-09-292-7/+0
|
* - Fix BATCH=yes patch for bento.dinoex2003-09-281-31/+6
|
* - update to 3.7.1p2dinoex2003-09-2724-1426/+84
| | | | more regressions tests successfull
* - Security Fix in PAM handlingdinoex2003-09-265-80/+508
| | | | Obtained from: des
* - mark FORBIDDEN until fixed.dinoex2003-09-261-0/+2
|
* - Security Fix obtained from OpenBSDdinoex2003-09-242-4/+5
| | | | | | http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/buffer.c.diff?r1=1.18&r2=1.19 Submitted by: ash@lab.poc.net
* Add Solar Designer's additional fixes to buffer management.nectar2003-09-185-9/+126
|
* - Securitry Fix revision 2dinoex2003-09-172-40/+111
| | | | | http://www.openssh.com/txt/buffer.adv Approved by: lioux (portmgr)
* Do not record expanded size before attempting to reallocate associatednectar2003-09-162-0/+40
| | | | | | memory. Obtained from: OpenBSD
* - use OPENSSLRPATH from bsd.openssl.mkdinoex2003-08-301-1/+2
| | | | - strip CONFIGURE_ENV, LDFLAGS is set in bsd.openssl.mk
* - use hook for bsd.openssl.mkdinoex2003-08-281-1/+1
|
* - Update to gssapi-20030430dinoex2003-05-082-8/+12
| | | | Submitted by: wollman@lcs.mit.edu
* - Update to 3.6.1p2dinoex2003-04-302-2/+2
|
* - honor any given LDFLAGSdinoex2003-04-161-0/+1
|
* - Change all USE_OPENSSL_* to WITH_OPENSSL_*dinoex2003-04-131-1/+1
|
* - use bsd.openssl.mkdinoex2003-04-041-1/+1
|
* - Update to 3.6.1p1dinoex2003-04-022-3/+2
|
* - extend regression testsdinoex2003-04-013-1/+31
|
* - Update to 3.6p1dinoex2003-04-014-33/+21
|
* - add USE_PERL5_BUILDdinoex2003-03-231-0/+1
|
* - retire pkg-commentdinoex2003-02-211-1/+0
|
* - add COMMENTdinoex2003-02-211-0/+1
|
* - openssh-3.5p1 doesn't log utmp for IPv6 connection correctlydinoex2003-01-022-0/+12
| | | | Submitted by: ume
* openssh-gssapi-3.5p1 is marked as brokendinoex2002-11-221-1/+2
|
* - cleanup of mor patchesdinoex2002-10-266-84/+43
| | | | - fix Makefile to avoid key-generation on bento.
* remove an disfuntional MASTER_SITEdinoex2002-10-211-1/+0
|
* Update to 3.5p1dinoex2002-10-177-85/+34
|
* Craete moduli on bento.dinoex2002-09-171-15/+5
|
* add bugfix from CURRENTdinoex2002-08-072-1/+10
|
* Fix resolver problem with privilege-separation.dinoex2002-07-272-1/+32
| | | | PR: 39953
* - add pam_cleanup from CURRENTdinoex2002-07-253-5/+29
| | | | | - Fix build problems < 4.0 PR: 40576
* Add bits for regression testsdinoex2002-07-223-1/+26
| | | | Fix build for /var/empty is schg and have open permissions.
* - Fix Problem with HAVE_HOST_IN_UTMPdinoex2002-07-163-6/+19
| | | | | | | - update monitor.c PR: 40576 Submitted by: lxv@a-send-pr.sink.omut.org
* merge PAM buffer management from current.dinoex2002-07-082-118/+67
|
* PermitRootLogin no explanation added.dinoex2002-07-051-5/+12
|
* 'PermitRootLogin no' is the new default for the OpenSSH port.dinoex2002-07-0510-12/+728
| | | | | | | | | | | | | | | This now matches the PermitRootLogin configuration of OpenSSH in the base system. Please be aware of this when upgrading your OpenSSH port, and if truly necessary, re-enable remote root login by readjusting this option in your sshd_config. Users are encouraged to create single-purpose users with ssh keys and very narrowly defined sudo privileges instead of using root for automated tasks. - PKGNAMESUFFIX for GSSAPI set. - Merged some patches from current to improve PAM. - Fix BATCH=yes for bento.
* Cleanup patch to avoid conflicts with GSSAPI patchesdinoex2002-07-021-19/+30
|
* Revert changes.dinoex2002-07-011-1/+1
|
* give Enviroment from login.conf priority over all others,dinoex2002-07-013-19/+29
| | | | problem found by drs@rucus.ru.ac.za.
* Update gssapi patchdinoex2002-06-282-1/+2
|
* Defaults changed: (Gregory Sutter)dinoex2002-06-286-8/+58
| | | | | | | | | | ChallengeResponseAuthentication no UseLogin no patch for configure, to detect MAP_ANON submitted by: Christophe Labouisse,Michael Handler,Gert Doering,Phil Oleson,Dave Baker fix missing includes for "canohost.h"
* nuke obsolete filedinoex2002-06-271-61/+0
|
* update patch for 3.4dinoex2002-06-271-16/+44
|
* Update to openssh-3.4dinoex2002-06-272-4/+2
| | | | Update to openssh-3.4p1
* Security FIX, Please update to this Version.dinoex2002-06-263-1/+68
| | | | | | | | | | | Options for both: USE_OPENSSL_BASE=yes uses an older opensssl in the base system. Options for portable: OPENSSH_OVERWRITE_BASE=yes includes USE_OPENSSL_BASE=yes installls in the paths of the base system
* Thanks to max@wide.ad.jp, maxim, obraun@informatik.unibw-muenchen.de, fjoedinoex2002-06-263-19/+51
| | | | | Patch from current, noted by drs@rucus.ru.ac.za: environment variables in the 'setenv' field of login.conf are set now.
* Streamline OPENSSH_OVERWRITE_BASE=yesdinoex2002-06-262-20/+24
|
* Migrate configuration files to $PREFIX/etc/ssh/dinoex2002-06-264-26/+78
| | | | Add ${PREFIX}/etc/rc.d/sshd.sh.sample
* change --with-privsep-path if OPENSSH_OVERWRITE_BASE is in effect.dinoex2002-06-251-3/+6
| | | | Submitted by: brad@brad-x.com
* Fix a typo, only affects when installing a packae on a clean system.dinoex2002-06-251-1/+1
| | | | Submitted by: anders@fix.no
* Create user when package is extracteddinoex2002-06-251-0/+3
|
* Create user for privsepdinoex2002-06-252-0/+9
|
* Update: openssh-3.2.3p1dinoex2002-06-233-4/+5
| | | | | New manpages: ssh-keysign.8 sftp-server.8 sshd.8 New program ssh-keysign
* - Get rid of PERL and use SEDdinoex2002-06-161-1/+1
|
* Fix typing error in OPTIONdinoex2002-06-081-1/+1
| | | | Submitted by: joseph@randomnetworks.com
* Honor Option ENABLE_SUID_SSHdinoex2002-06-041-1/+5
| | | | Build defaults witouth SUID
* - get rid of duplicate code in Makefiles.dinoex2002-06-012-14/+5
| | | | | - Fix USE_OPENSSL_PORT and USE_OPENSSL_BASE - drop obsolete/broken USE_OPENSSL
* Update to OpenSSH 3.2.3dinoex2002-05-314-67/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | - patch openssh-3.1-adv.token.patch is now obsolete. - remerged PAM changes form previous port - declare CMSG_* macros. - fixed bad type in function input_userauth_passwd_changereq Update to OpenSSH-portable-3.2.3p1 - patch openssh-3.1p1-adv.token.patch is now obsolete - keep previously declared CONFIGURE_ARGS - remove openssh-mit-krb5-20020326.diff (should be in the distribution now) - patch patch-readpassphrase.c is now in teh distribution - merged previous patches. - extend CONFIGURE_ARGS so it find OPENSSL again. - new patches for GSSAPI, not fully tested. If you have the patch applied: http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/36080 Builds with openssl-0.9.6d under: 2.2.8-RELEASE 3.2-RELEASE 4.2-RELEASE 4.6-RC
* Use crypto.3 as dependeny.dinoex2002-05-091-1/+1
| | | | To keep consistent with USE_SSL in bsd.port.mk
* Chase openssl shlib version increase.sobomax2002-05-071-1/+1
| | | | Pointy hat to: dinoex
* openssl:dinoex2002-05-041-3/+3
| | | | | | | | | - some configure scripts check the version of the lib so we need to update SHLIBVER - bump PORTREVISION openssh: - build ports with local openssl, if it exists
* Security fix for token passing, see bugtraq for details.dinoex2002-05-032-4/+9
| | | | | - fetch and use openssh-3.1-adv.token.patch to build. - bump PORTREVISION
* - Fix build for 5.0-CURRENTdinoex2002-03-301-0/+25
|
* Updated Patch on openBSD website,dinoex2002-03-281-1/+1
| | | | patch openssh/files/patch-cipher.c is now obsolete.
* - Make KERBEROS patch build with heimdal portdinoex2002-03-251-0/+17
|
* - Fix problem with auth_ttyok and ttynamedinoex2002-03-252-13/+24
| | | | - Make KERBEROS patch build with heimdal port
* - Update patches for Option KRB5_HOMEdinoex2002-03-232-4/+5
| | | | | openssh-3.1p1-gssapi-20020321.diff openssh-mit-krb5-20020319.diff
* Merged patches for HAVE_LOGIN_CAP from stabledinoex2002-03-185-13/+297
| | | | PR: 35904
* Fixed Build in 4.2dinoex2002-03-161-1/+13
| | | | | Add correct Version of OPENSSL in dependencies if older than 4.3 (bsd.ports.mk) is still not sufficent.
* Extend the description for openssh-portabledinoex2002-03-101-0/+12
| | | | Fix description for openssh
* Allow IPv6 connection if detected by configure.dinoex2002-03-092-1/+2
| | | | Submitted by: ume
* fix patch for build on bentodinoex2002-03-091-5/+5
|
* - patch to fix undefined (ulong)dinoex2002-03-091-0/+11
| | | | - builds now for FreeBSD 2.2.8
* Fix thinko and make it possible to disable Kerberos support on thewollman2002-03-091-1/+1
| | | | make command line even if KRB5_HOME is set in make.conf.
* Mark BROKEN in Kerberos case: Simon Wilkinson has not releasedwollman2002-03-091-1/+2
| | | | updated patches yet. (I hope dinoex doesn't mind my committing this.)
* Update to OpenSSH 3.1 OpennSSH-portable 3.1p1dinoex2002-03-084-31/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - update patch-au,patch-session.c for password changes. - patch-channel.c is now integrated Excerpt from Changelog: 20020304 - OpenBSD CVS Sync - deraadt@cvs.openbsd.org 2002/02/26 18:52:32 [sftp.1] Ic cannot have that many arguments; spotted by mouring@etoh.eviladmin.org - mouring@cvs.openbsd.org 2002/02/26 19:04:37 [sftp.1] > Ic cannot have that many arguments; spotted by mouring@etoh.eviladmin.org Last Ic on the first line should not have a space between it and the final comma. - deraadt@cvs.openbsd.org 2002/02/26 19:06:43 [sftp.1] no, look closely. the comma was highlighted. split .Ic even more - stevesk@cvs.openbsd.org 2002/02/26 20:03:51 [misc.c] use socklen_t - stevesk@cvs.openbsd.org 2002/02/27 21:23:13 [canohost.c channels.c packet.c sshd.c] remove unneeded casts in [gs]etsockopt(); ok markus@ - markus@cvs.openbsd.org 2002/02/28 15:46:33 [authfile.c kex.c kexdh.c kexgex.c key.c ssh-dss.c] add some const EVP_MD for openssl-0.9.7 - stevesk@cvs.openbsd.org 2002/02/28 19:36:28 [auth.c match.c match.h] delay hostname lookup until we see a ``@'' in DenyUsers and AllowUsers for sshd -u0; ok markus@ - stevesk@cvs.openbsd.org 2002/02/28 20:36:42 [sshd.8] DenyUsers allows user@host pattern also - stevesk@cvs.openbsd.org 2002/02/28 20:46:10 [sshd.8] -u0 DNS for user@host - stevesk@cvs.openbsd.org 2002/02/28 20:56:00 [auth.c] log user not allowed details, from dwd@bell-labs.com; ok markus@ - markus@cvs.openbsd.org 2002/03/01 13:12:10 [auth.c match.c match.h] undo the 'delay hostname lookup' change match.c must not use compress.c (via canonhost.c/packet.c) thanks to wilfried@ - markus@cvs.openbsd.org 2002/03/04 12:43:06 [auth-passwd.c auth-rh-rsa.c auth-rhosts.c] - markus@cvs.openbsd.org 2002/03/04 13:10:46 [misc.c] error-> debug, because O_NONBLOCK for /dev/null causes too many different errnos; ok stevesk@, deraadt@ unused include - stevesk@cvs.openbsd.org 2002/03/04 17:27:39 [auth-krb5.c auth-options.h auth.h authfd.h authfile.h bufaux.h buffer.h channels.h cipher.h compat.h compress.h crc32.h deattack.c getput.h groupaccess.c misc.c mpaux.h packet.h readconf.h rsa.h scard.h servconf.h ssh-agent.c ssh.h ssh2.h sshpty.h sshtty.c ttymodes.h uuencode.c xmalloc.h] $OpenBSD$ and RCSID() cleanup: don't use RCSID() in .h files; add missing RCSID() to .c files and remove dup /*$OpenBSD$*/ from .c files. ok markus@ - stevesk@cvs.openbsd.org 2002/03/04 18:30:23 [ssh-keyscan.c] handle connection close during read of protocol version string. fixes erroneous "bad greeting". ok markus@ - markus@cvs.openbsd.org 2002/03/04 19:37:58 [channels.c] off by one; thanks to joost@pine.nl 20020226 - (tim) Bug 12 [configure.ac] add sys/bitypes.h to int64_t tests based on patch by mooney@dogbert.cc.ndsu.nodak.edu (Tim Mooney) Bug 45 [configure.ac] modify skey test to work around conflict with autoconf reported by nolan@naic.edu (Michael Nolan) patch by Pekka Savola <pekkas@netcore.fi> Bug 74 [configure.ac defines.h] add sig_atomic_t test reported by dwd@bell-labs.com (Dave Dykstra) Bug 102 [defines.h] UNICOS fixes. patch by wendyp@cray.com [configure.ac Makefile.in] link libwrap only with sshd based on patch by Maciej W. Rozycki <macro@ds2.pg.gda.pl> Bug 123 link libpam only with sshd reported by peak@argo.troja.mff.cuni.cz (Pavel Kankovsky) [configure.ac defines.h] modify previous SCO3 fix to not break Solaris 7 [acconfig.h] remove unused HAVE_REGCOMP [configure.ac] put back in search for prngd-socket - (stevesk) openbsd-compat/base64.h: typo in comment - (bal) OpenBSD CVS Sync - markus@cvs.openbsd.org 2002/02/15 23:54:10 [auth-krb5.c] krb5_get_err_text() does not like context==NULL; he@nordu.net via google; ok provos@ - markus@cvs.openbsd.org 2002/02/22 12:20:34 [log.c log.h ssh-keyscan.c] overwrite fatal() in ssh-keyscan.c; fixes pr 2354; ok provos@ - markus@cvs.openbsd.org 2002/02/23 17:59:02 [kex.c kexdh.c kexgex.c] don't allow garbage after payload. - stevesk@cvs.openbsd.org 2002/02/24 16:09:52 [sshd.c] use u_char* here; ok markus@ - markus@cvs.openbsd.org 2002/02/24 16:57:19 [sftp-client.c] early close(), missing free; ok stevesk@ - markus@cvs.openbsd.org 2002/02/24 16:58:32 [packet.c] make 'cp' unsigned and merge with 'ucp'; ok stevesk@ - markus@cvs.openbsd.org 2002/02/24 18:31:09 [uuencode.c] typo in comment - markus@cvs.openbsd.org 2002/02/24 19:14:59 [auth2.c authfd.c authfd.h authfile.c kexdh.c kexgex.c key.c key.h ssh-dss.c ssh-dss.h ssh-keygen.c ssh-rsa.c ssh-rsa.h sshconnect2.c] signed vs. unsigned: make size arguments u_int, ok stevesk@ - stevesk@cvs.openbsd.org 2002/02/24 19:59:42 [channels.c misc.c] disable Nagle in connect_to() and channel_post_port_listener() (port forwarding endpoints). the intention is to preserve the on-the-wire appearance to applications at either end; the applications can then enable TCP_NODELAY according to their requirements. ok markus@ - markus@cvs.openbsd.org 2002/02/25 16:33:27 [ssh-keygen.c sshconnect2.c uuencode.c uuencode.h] more u_* fixes - (bal) Imported missing fatal.c and fixed up Makefile.in - (tim) [configure.ac] correction to Bug 123 fix [configure.ac] correction to sig_atomic_t test 20020224 - (tim) [loginrec.c session.c sshlogin.c sshlogin.h] Bug 84 patch by wknox@mitre.org (William Knox). [sshlogin.h] declare record_utmp_only for session.c 20020219 - (djm) OpenBSD CVS Sync - mpech@cvs.openbsd.org 2002/02/13 08:33:47 [ssh-keyscan.1] When you give command examples and etc., in a manual page prefix them with: $ command or # command - markus@cvs.openbsd.org 2002/02/14 23:27:59 [channels.c] increase the SSH v2 window size to 4 packets. comsumes a little bit more memory for slow receivers but increases througput. - markus@cvs.openbsd.org 2002/02/14 23:28:00 [channels.h session.c ssh.c] increase the SSH v2 window size to 4 packets. comsumes a little bit more memory for slow receivers but increases througput. - markus@cvs.openbsd.org 2002/02/14 23:41:01 [authfile.c cipher.c cipher.h kex.c kex.h packet.c] hide some more implementation details of cipher.[ch] and prepares for move to EVP, ok deraadt@ - stevesk@cvs.openbsd.org 2002/02/16 14:53:37 [ssh-keygen.1] -t required now for key generation - stevesk@cvs.openbsd.org 2002/02/16 20:40:08 [ssh-keygen.c] default to rsa keyfile path for non key generation operations where keyfile not specified. fixes core dump in those cases. ok markus@ - millert@cvs.openbsd.org 2002/02/16 21:27:53 [auth.h] Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically. - millert@cvs.openbsd.org 2002/02/17 19:42:32 [auth.h] Manual cleanup of remaining userland __P use (excluding packages maintained outside the tree) - markus@cvs.openbsd.org 2002/02/18 13:05:32 [cipher.c cipher.h] switch to EVP, ok djm@ deraadt@ - markus@cvs.openbsd.org 2002/02/18 17:55:20 [ssh.1] -q: Fatal errors are _not_ displayed. - deraadt@cvs.openbsd.org 2002/02/19 02:50:59 [sshd_config] stategy is not an english word - (bal) OpenBSD CVS Sync - markus@cvs.openbsd.org 2002/02/15 23:11:26 [session.c] split do_child(), ok mouring@ - markus@cvs.openbsd.org 2002/02/16 00:51:44 [session.c] typo 20020218 - (tim) newer config.guess from ftp://ftp.gnu.org/gnu/config/config.guess 20020213 - (djm) Bug #114 - not starting PAM for SSH protocol 1 invalid users 20020213 - (djm) OpenBSD CVS Sync - markus@cvs.openbsd.org 2002/02/11 16:10:15 [kex.c] restore kexinit handler if we reset the dispatcher, this unbreaks rekeying s/kex_clear_dispatch/kex_reset_dispatch/ - markus@cvs.openbsd.org 2002/02/11 16:15:46 [sshconnect1.c] include md5.h, not evp.h - markus@cvs.openbsd.org 2002/02/11 16:17:55 [sshd.c] do not complain about port > 1024 if rhosts-auth is disabled - markus@cvs.openbsd.org 2002/02/11 16:19:39 [sshd.c] include md5.h not hmac.h - markus@cvs.openbsd.org 2002/02/11 16:21:42 [match.c] support up to 40 algorithms per proposal - djm@cvs.openbsd.org 2002/02/12 12:32:27 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c] Perform multiple overlapping read/write requests in file transfer. Mostly done by Tobias Ringstrom <tori@ringstrom.mine.nu>; ok markus@ - djm@cvs.openbsd.org 2002/02/12 12:44:46 [sftp-client.c] Let overlapped upload path handle servers which reorder ACKs. This may be permitted by the protocol spec; ok markus@ - markus@cvs.openbsd.org 2002/02/13 00:28:13 [sftp-server.c] handle SSH2_FILEXFER_ATTR_SIZE in SSH2_FXP_(F)SETSTAT; ok djm@ - markus@cvs.openbsd.org 2002/02/13 00:39:15 [readpass.c] readpass.c is not longer from UCB, since we now use readpassphrase(3) - djm@cvs.openbsd.org 2002/02/13 00:59:23 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp.h] [sftp-int.c sftp-int.h] API cleanup and backwards compat for filexfer v.0 servers; ok markus@ - (djm) Sync openbsd-compat with OpenBSD CVS too - (djm) Bug #106: Add --without-rpath configure option. Patch from Nicolas.Williams@ubsw.com 20020210 - (djm) OpenBSD CVS Sync - deraadt@cvs.openbsd.org 2002/02/09 17:37:34 [pathnames.h session.c ssh.1 sshd.8 sshd_config ssh-keyscan.1] move ssh config files to /etc/ssh - (djm) Adjust portable Makefile.in tnd ssh-rand-helper.c o match - deraadt@cvs.openbsd.org 2002/02/10 01:07:05 [readconf.h sshd.8] more /etc/ssh; openbsd@davidkrause.com 20020208 - (djm) OpenBSD CVS Sync - markus@cvs.openbsd.org 2002/02/04 12:15:25 [sshd.c] add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1, fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@ - stevesk@cvs.openbsd.org 2002/02/04 20:41:16 [ssh-agent.1] more sync for default ssh-add identities; ok markus@ - djm@cvs.openbsd.org 2002/02/05 00:00:46 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c] Add "-B" option to specify copy buffer length (default 32k); ok markus@ - markus@cvs.openbsd.org 2002/02/05 14:32:55 [channels.c channels.h ssh.c] merge channel_request() into channel_request_start() - markus@cvs.openbsd.org 2002/02/06 14:22:42 [sftp.1] sort options; ok mpech@, stevesk@ - mpech@cvs.openbsd.org 2002/02/06 14:27:23 [sftp.c] sync usage() with manual. - markus@cvs.openbsd.org 2002/02/06 14:37:22 [session.c] minor KNF - markus@cvs.openbsd.org 2002/02/06 14:55:16 [channels.c clientloop.c serverloop.c ssh.c] channel_new never returns NULL, mouring@; ok djm@ - markus@cvs.openbsd.org 2002/02/07 09:35:39 [ssh.c] remove bogus comments 20020205 - (djm) Cleanup after sync: - :%s/reverse_mapping_check/verify_reverse_mapping/g - (djm) OpenBSD CVS Sync - stevesk@cvs.openbsd.org 2002/01/24 21:09:25 [channels.c misc.c misc.h packet.c] add set_nodelay() to set TCP_NODELAY on a socket (prep for nagle tuning). no nagle changes just yet; ok djm@ markus@ - stevesk@cvs.openbsd.org 2002/01/24 21:13:23 [packet.c] need misc.h for set_nodelay() - markus@cvs.openbsd.org 2002/01/25 21:00:24 [sshconnect2.c] unused include - markus@cvs.openbsd.org 2002/01/25 21:42:11 [ssh-dss.c ssh-rsa.c] use static EVP_MAX_MD_SIZE buffers for EVP_DigestFinal; ok stevesk@ don't use evp_md->md_size, it's not public. - markus@cvs.openbsd.org 2002/01/25 22:07:40 [kex.c kexdh.c kexgex.c key.c mac.c] use EVP_MD_size(evp_md) and not evp_md->md_size; ok steveks@ - stevesk@cvs.openbsd.org 2002/01/26 16:44:22 [includes.h session.c] revert code to add x11 localhost display authorization entry for hostname/unix:d and uts.nodename/unix:d if nodename was different than hostname. just add entry for unix:d instead. ok markus@ - stevesk@cvs.openbsd.org 2002/01/27 14:57:46 [channels.c servconf.c servconf.h session.c sshd.8 sshd_config] add X11UseLocalhost; ok markus@ - stevesk@cvs.openbsd.org 2002/01/27 18:08:17 [ssh.c] handle simple case to identify FamilyLocal display; ok markus@ - markus@cvs.openbsd.org 2002/01/29 14:27:57 [ssh-add.c] exit 2 if no agent, exit 1 if list fails; debian#61078; ok djm@ - markus@cvs.openbsd.org 2002/01/29 14:32:03 [auth2.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c canohost.c] [servconf.c servconf.h session.c sshd.8 sshd_config] s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@ - stevesk@cvs.openbsd.org 2002/01/29 16:29:02 [session.c] limit subsystem length in log; ok markus@ - markus@cvs.openbsd.org 2002/01/29 16:41:19 [ssh-add.1] add DIAGNOSTICS; ok stevesk@ - markus@cvs.openbsd.org 2002/01/29 22:46:41 [session.c] don't depend on servconf.c; ok djm@ - markus@cvs.openbsd.org 2002/01/29 23:50:37 [scp.1 ssh.1] mention exit status; ok stevesk@ - markus@cvs.openbsd.org 2002/01/31 13:35:11 [kexdh.c kexgex.c] cross check announced key type and type from key blob - markus@cvs.openbsd.org 2002/01/31 15:00:05 [serverloop.c] no need for WNOHANG; ok stevesk@ - markus@cvs.openbsd.org 2002/02/03 17:53:25 [auth1.c serverloop.c session.c session.h] don't use channel_input_channel_request and callback use new server_input_channel_req() instead: server_input_channel_req does generic request parsing on server side session_input_channel_req handles just session specific things now ok djm@ - markus@cvs.openbsd.org 2002/02/03 17:55:55 [channels.c channels.h] remove unused channel_input_channel_request - markus@cvs.openbsd.org 2002/02/03 17:58:21 [channels.c channels.h ssh.c] generic callbacks are not really used, remove and add a callback for msg of type SSH2_MSG_CHANNEL_OPEN_CONFIRMATION ok djm@ - markus@cvs.openbsd.org 2002/02/03 17:59:23 [sshconnect2.c] more cross checking if announced vs. used key type; ok stevesk@ - stevesk@cvs.openbsd.org 2002/02/03 22:35:57 [ssh.1 sshd.8] some KeepAlive cleanup/clarify; ok markus@ - stevesk@cvs.openbsd.org 2002/02/03 23:22:59 [ssh-agent.1] ssh-add also adds $HOME/.ssh/id_rsa and $HOME/.ssh/id_dsa now. - stevesk@cvs.openbsd.org 2002/02/04 00:53:39 [ssh-agent.c] unneeded includes - markus@cvs.openbsd.org 2002/02/04 11:58:10 [auth2.c] cross checking of announced vs actual pktype in pubkey/hostbaed auth; ok stevesk@ - markus@cvs.openbsd.org 2002/02/04 12:15:25 [log.c log.h readconf.c servconf.c] add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1, fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@ - stevesk@cvs.openbsd.org 2002/02/04 20:41:16 [ssh-add.1] more sync for default ssh-add identities; ok markus@ - djm@cvs.openbsd.org 2002/02/04 21:53:12 [sftp.1 sftp.c] Add "-P" option to directly connect to a local sftp-server. Should be useful for regression testing; ok markus@ - djm@cvs.openbsd.org 2002/02/05 00:00:46 [sftp.1 sftp.c sftp-client.c sftp-client.h sftp-int.c] Add "-B" option to specify copy buffer length (default 32k); ok markus@ 20020130 - (djm) Delay PRNG seeding until we need it in ssh-keygen, from markus@ - (tim) [configure.ac] fix logic on when ssh-rand-helper is installed. [sshd_config] put back in line that tells what PATH was compiled into sshd. 20020125 - (djm) Don't grab Xserver or pointer by default. x11-ssh-askpass doesn't and grabbing can cause deadlocks with kinput2. 20020124 - (stevesk) Makefile.in: bug #61; delete commented line for now. 20020123 - (djm) Fix non-standard shell syntax in autoconf. Patch from Dave Dykstra <dwd@bell-labs.com> - (stevesk) fix --with-zlib= - (djm) Use case statements in autoconf to clean up some tests 20020122 - (djm) autoconf hacking: - We don't support --without-zlib currently, so don't allow it. - Rework cryptographic random number support detection. We now detect whether OpenSSL seeds itself. If it does, then we don't bother with the ssh-rand-helper program. You can force the use of ssh-rand-helper using the --with-rand-helper configure argument - Simplify and clean up ssh-rand-helper configuration - Add OpenSSL sanity check: verify that header version matches version reported by library - (djm) Fix some bugs I introduced into ssh-rand-helper yesterday - OpenBSD CVS Sync - djm@cvs.openbsd.org 2001/12/21 08:52:22 [ssh-keygen.1 ssh-keygen.c] Remove default (rsa1) key type; ok markus@ - djm@cvs.openbsd.org 2001/12/21 08:53:45 [readpass.c] Avoid interruptable passphrase read; ok markus@ - djm@cvs.openbsd.org 2001/12/21 10:06:43 [ssh-add.1 ssh-add.c] Try all standard key files (id_rsa, id_dsa, identity) when invoked with no arguments; ok markus@ - markus@cvs.openbsd.org 2001/12/21 12:17:33 [serverloop.c] remove ifdef for USE_PIPES since fdin != fdout; ok djm@ - deraadt@cvs.openbsd.org 2001/12/24 07:29:43 [ssh-add.c] try all listed keys.. how did this get broken? - markus@cvs.openbsd.org 2001/12/25 18:49:56 [key.c] be more careful on allocation - markus@cvs.openbsd.org 2001/12/25 18:53:00 [auth1.c] be more carefull on allocation - markus@cvs.openbsd.org 2001/12/27 18:10:29 [ssh-keygen.c] -t is only needed for key generation (unbreaks -i, -e, etc). - markus@cvs.openbsd.org 2001/12/27 18:22:16 [auth1.c authfile.c auth-rsa.c dh.c kexdh.c kexgex.c key.c rsa.c] [scard.c ssh-agent.c sshconnect1.c sshd.c ssh-dss.c] call fatal() for openssl allocation failures - stevesk@cvs.openbsd.org 2001/12/27 18:22:53 [sshd.8] clarify -p; ok markus@ - markus@cvs.openbsd.org 2001/12/27 18:26:13 [authfile.c] missing include - markus@cvs.openbsd.org 2001/12/27 19:37:23 [dh.c kexdh.c kexgex.c] always use BN_clear_free instead of BN_free - markus@cvs.openbsd.org 2001/12/27 19:54:53 [auth1.c auth.h auth-rh-rsa.c] auth_rhosts_rsa now accept generic keys. - markus@cvs.openbsd.org 2001/12/27 20:39:58 [auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h] [serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c] get rid of packet_integrity_check, use packet_done() instead. - markus@cvs.openbsd.org 2001/12/28 12:14:27 [auth1.c auth2.c auth2-chall.c auth-rsa.c channels.c clientloop.c] [kex.c kexdh.c kexgex.c packet.c packet.h serverloop.c session.c] [ssh.c sshconnect1.c sshconnect2.c sshd.c] s/packet_done/packet_check_eom/ (end-of-message); ok djm@ - markus@cvs.openbsd.org 2001/12/28 13:57:33 [auth1.c kexdh.c kexgex.c packet.c packet.h sshconnect1.c sshd.c] packet_get_bignum* no longer returns a size - markus@cvs.openbsd.org 2001/12/28 14:13:13 [bufaux.c bufaux.h packet.c] buffer_get_bignum: int -> void - markus@cvs.openbsd.org 2001/12/28 14:50:54 [auth1.c auth-rsa.c channels.c dispatch.c kex.c kexdh.c kexgex.c] [packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c] [sshconnect2.c sshd.c] packet_read* no longer return the packet length, since it's not used. - markus@cvs.openbsd.org 2001/12/28 15:06:00 [auth2.c auth2-chall.c channels.c channels.h clientloop.c dispatch.c] [dispatch.h kex.c kex.h serverloop.c ssh.c sshconnect2.c] remove plen from the dispatch fn. it's no longer used. - stevesk@cvs.openbsd.org 2001/12/28 22:37:48 [ssh.1 sshd.8] document LogLevel DEBUG[123]; ok markus@ - stevesk@cvs.openbsd.org 2001/12/29 21:56:01 [authfile.c channels.c compress.c packet.c sftp-server.c] [ssh-agent.c ssh-keygen.c] remove unneeded casts and some char->u_char cleanup; ok markus@ - stevesk@cvs.openbsd.org 2002/01/03 04:11:08 [ssh_config] grammar in comment - stevesk@cvs.openbsd.org 2002/01/04 17:59:17 [readconf.c servconf.c] remove #ifdef _PATH_XAUTH/#endif; ok markus@ - stevesk@cvs.openbsd.org 2002/01/04 18:14:16 [servconf.c sshd.8] protocol 2 HostKey code default is now /etc/ssh_host_rsa_key and /etc/ssh_host_dsa_key like we have in sshd_config. ok markus@ - markus@cvs.openbsd.org 2002/01/05 10:43:40 [channels.c] fix hanging x11 channels for rejected cookies (e.g. XAUTHORITY=/dev/null xbiff) bug #36, based on patch from djast@cs.toronto.edu - stevesk@cvs.openbsd.org 2002/01/05 21:51:56 [ssh.1 sshd.8] some missing and misplaced periods - markus@cvs.openbsd.org 2002/01/09 13:49:27 [ssh-keygen.c] append \n only for public keys - markus@cvs.openbsd.org 2002/01/09 17:16:00 [channels.c] merge channel_pre_open_15/channel_pre_open_20; ok provos@ - markus@cvs.openbsd.org 2002/01/09 17:26:35 [channels.c nchan.c] replace buffer_consume(b, buffer_len(b)) with buffer_clear(b); ok provos@ - markus@cvs.openbsd.org 2002/01/10 11:13:29 [serverloop.c] skip client_alive_check until there are channels; ok beck@ - markus@cvs.openbsd.org 2002/01/10 11:24:04 [clientloop.c] handle SSH2_MSG_GLOBAL_REQUEST (just reply with failure); ok djm@ - markus@cvs.openbsd.org 2002/01/10 12:38:26 [nchan.c] remove dead code (skip drain) - markus@cvs.openbsd.org 2002/01/10 12:47:59 [nchan.c] more unused code (with channels.c:1.156) - markus@cvs.openbsd.org 2002/01/11 10:31:05 [packet.c] handle received SSH2_MSG_UNIMPLEMENTED messages; ok djm@ - markus@cvs.openbsd.org 2002/01/11 13:36:43 [ssh2.h] add defines for msg type ranges - markus@cvs.openbsd.org 2002/01/11 13:39:36 [auth2.c dispatch.c dispatch.h kex.c] a single dispatch_protocol_error() that sends a message of type 'UNIMPLEMENTED' dispatch_range(): set handler for a ranges message types use dispatch_protocol_ignore() for authentication requests after successful authentication (the drafts requirement). serverloop/clientloop now send a 'UNIMPLEMENTED' message instead of exiting. - markus@cvs.openbsd.org 2002/01/11 20:14:11 [auth2-chall.c auth-skey.c] use strlcpy not strlcat; mouring@ - markus@cvs.openbsd.org 2002/01/11 23:02:18 [readpass.c] use _PATH_TTY - markus@cvs.openbsd.org 2002/01/11 23:02:51 [auth2-chall.c] use snprintf; mouring@ - markus@cvs.openbsd.org 2002/01/11 23:26:30 [auth-skey.c] use snprintf; mouring@ - markus@cvs.openbsd.org 2002/01/12 13:10:29 [auth-skey.c] undo local change - provos@cvs.openbsd.org 2002/01/13 17:27:07 [ssh-agent.c] change to use queue.h macros; okay markus@ - markus@cvs.openbsd.org 2002/01/13 17:57:37 [auth2.c auth2-chall.c compat.c sshconnect2.c sshd.c] use buffer API and avoid static strings of fixed size; ok provos@/mouring@ - markus@cvs.openbsd.org 2002/01/13 21:31:20 [channels.h nchan.c] add chan_set_[io]state(), order states, state is now an u_int, simplifies debugging messages; ok provos@ - markus@cvs.openbsd.org 2002/01/14 13:22:35 [nchan.c] chan_send_oclose1() no longer calls chan_shutdown_write(); ok provos@ - markus@cvs.openbsd.org 2002/01/14 13:34:07 [nchan.c] merge chan_[io]buf_empty[12]; ok provos@ - markus@cvs.openbsd.org 2002/01/14 13:40:10 [nchan.c] correct fn names for ssh2, do not switch from closed to closed; ok provos@ - markus@cvs.openbsd.org 2002/01/14 13:41:13 [nchan.c] remove duplicated code; ok provos@ - markus@cvs.openbsd.org 2002/01/14 13:55:55 [channels.c channels.h nchan.c] remove function pointers for events, remove chan_init*; ok provos@ - markus@cvs.openbsd.org 2002/01/14 13:57:03 [channels.h nchan.c] (c) 2002 - markus@cvs.openbsd.org 2002/01/16 13:17:51 [channels.c channels.h serverloop.c ssh.c] wrapper for channel_setup_fwd_listener - stevesk@cvs.openbsd.org 2002/01/16 17:40:23 [sshd_config] The stategy now used for options in the default sshd_config shipped with OpenSSH is to specify options with their default value where possible, but leave them commented. Uncommented options change a default value. Subsystem is currently the only default option changed. ok markus@ - stevesk@cvs.openbsd.org 2002/01/16 17:42:33 [ssh.1] correct defaults for -i/IdentityFile; ok markus@ - stevesk@cvs.openbsd.org 2002/01/16 17:55:33 [ssh_config] correct some commented defaults. add Ciphers default. ok markus@ - stevesk@cvs.openbsd.org 2002/01/17 04:27:37 [log.c] casts to silence enum type warnings for bugzilla bug 37; ok markus@ - stevesk@cvs.openbsd.org 2002/01/18 17:14:16 [sshd.8] correct Ciphers default; paola.mannaro@ubs.com - stevesk@cvs.openbsd.org 2002/01/18 18:14:17 [authfd.c bufaux.c buffer.c cipher.c packet.c ssh-agent.c ssh-keygen.c] unneeded cast cleanup; ok markus@ - stevesk@cvs.openbsd.org 2002/01/18 20:46:34 [sshd.8] clarify Allow(Groups|Users) and Deny(Groups|Users); suggestion from allard@oceanpark.com; ok markus@ - markus@cvs.openbsd.org 2002/01/21 15:13:51 [sshconnect.c] use read_passphrase+ECHO in confirm(), allows use of ssh-askpass for hostkey confirm. - markus@cvs.openbsd.org 2002/01/21 22:30:12 [cipher.c compat.c myproposal.h] remove "rijndael-*", just use "aes-" since this how rijndael is called in the drafts; ok stevesk@ - markus@cvs.openbsd.org 2002/01/21 23:27:10 [channels.c nchan.c] cleanup channels faster if the are empty and we are in drain-state; ok deraadt@ - stevesk@cvs.openbsd.org 2002/01/22 02:52:41 [servconf.c] typo in error message; from djast@cs.toronto.edu - (djm) Make auth2-pam.c compile again after dispatch.h and packet.h changes - (djm) Recent Glibc includes an incompatible sys/queue.h. Treat it as bogus in configure - (djm) Use local sys/queue.h if necessary in ssh-agent.c 20020121 - (djm) Rework ssh-rand-helper: - Reduce quantity of ifdef code, in preparation for ssh_rand_conf - Always seed from system calls, even when doing PRNGd seeding - Tidy and comment #define knobs - Remove unused facility for multiple runs through command list - KNF, cleanup, update copyright 20020114 - (djm) Bug #50 - make autoconf entropy path checks more robust 20020108 - (djm) Merge Cygwin copy_environment with do_pam_environment, removing fixed env var size limit in the process. Report from Corinna Vinschen <vinschen@redhat.com> - (stevesk) defines.h: use "/var/spool/sockets/X11/%u" for HP-UX. does not depend on transition links. from Lutz Jaenicke. 20020106 - (stevesk) defines.h: determine _PATH_UNIX_X; currently "/tmp/.X11-unix/X%u" for all platforms except HP-UX, which is "/usr/spool/sockets/X11/%u". 20020103 - (djm) Use bigcrypt() on systems with SCO_PROTECTED_PW. Patch from Roger Cornelius <rac@tenzing.org>
* Fix off-by-one error.nectar2002-03-062-0/+12
| | | | | | Obtained from: OpenBSD Bump PORTREVISION.
* Add option to support patches:dinoex2002-02-172-0/+26
| | | | | | | | | | | | | | | OpenSSH supports Kerberos v5 authentication, but this is not enabled in the portable version. A patch is available to correct this deficiency for those wishing to use this port with Kerberos. In addition, a patch is also available from Simon Wilkinson to implement the GSS-API key-exchange mechanism for SSHv2, which is currently being standardized. Use of this mechanism with Kerberos v5 obviates the need for manual management of host keys, a considerable improvement for large Kerberos sites. PR: 34363 Submitted by: wollman@hergotha.lcs.mit.edu
* Add patch for: readpassphrase.hdinoex2002-01-282-1/+24
| | | | | | | | | Someone in the OpenSSH world doesn't understand the difference between application and implementation namespaces. This causes conflicts with <readpassphrase.h>. PR: 34362 Submitted by: wollman@hergotha.lcs.mit.edu
* PKGNAMESUFFIX set for Option OPENSSH_OVERWRITE_BASEdinoex2002-01-051-0/+1
|
* Fix MANPREFIX, so manpages are compresseddinoex2002-01-051-1/+2
|
* strip trailing \dinoex2002-01-031-1/+1
|
* adding a knob to the OpenSSH port to allow peopledinoex2002-01-031-0/+6
| | | | | | | to overwrite the ssh in the base system. make OPENSSH_OVERWRITE_BASE=yes Submitted by: n@nectar.cc (Jacques A. Vidrine)
* - extend patch for batch mode, so no site-specifc files are installed.dinoex2001-12-021-1/+39
|
* - Udate to OpenSSH-3.0.2dinoex2001-12-023-5/+17
| | | | | | | | | | | - make batch-processing cleaner 20011202 - (djm) Syn with OpenBSD OpenSSH-3.0.2 - markus@cvs.openbsd.org [session.c sshd.8 version.h] Don't allow authorized_keys specified environment variables when UseLogin in active
* In BATCH mode - clean generated host keys.dinoex2001-12-021-1/+8
|
* Give dinoex@ maintainership since he's really been maintaining it anddwcjr2001-11-201-1/+1
| | | | is better suited for maintaining this port.
* Update to openssh-3.0.1 and openssh-portable-3.0.1p1dinoex2001-11-182-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - now in protocol2: Background ssh at logout when waiting for forwarded connection / X11 sessions to terminate disabled -DSKEY from Changelog (not complete): 20011115 - (djm) Fix IPv4 default in ssh-keyscan. Spotted by Dan Astoorian <djast@cs.toronto.edu> Fix from markus@ - (djm) Release 3.0.1p1 20011113 - (djm) Fix early (and double) free of remote user when using Kerberos. Patch from Simon Wilkinson <simon@sxw.org.uk> - (djm) AIX login{success,failed} changes. Move loginsuccess call to do_authenticated. Call loginfailed for protocol 2 failures > MAX like we do for protocol 1. Reports from Ralf Wenk <wera0003@fh-karlsruhe.de>, K.Wolkersdorfer@fz-juelich.de and others - (djm) OpenBSD CVS Sync - dugsong@cvs.openbsd.org 2001/11/11 18:47:10 [auth-krb5.c] fix krb5 authorization check. found by <jhawk@MIT.EDU>. from art@, deraadt@ ok - markus@cvs.openbsd.org 2001/11/12 11:17:07 [servconf.c] enable authorized_keys2 again. tested by fries@ 20011112 - OpenBSD CVS Sync - markus@cvs.openbsd.org 2001/10/24 08:41:41 [sshd.c] mention remote port in debug message - markus@cvs.openbsd.org 2001/10/24 08:51:35 [clientloop.c ssh.c] ignore SIGPIPE early, makes ssh work if agent dies, netbsd-pr via itojun@ - markus@cvs.openbsd.org 2001/10/24 19:57:40 [clientloop.c] make ~& (backgrounding) work again for proto v1; add support ~& for v2, too - markus@cvs.openbsd.org 2001/10/25 21:14:32 [ssh-keygen.1 ssh-keygen.c] better docu for fingerprinting, ok deraadt@ - markus@cvs.openbsd.org 2001/10/29 19:27:15 [sshconnect2.c] hostbased: check for client hostkey before building chost - markus@cvs.openbsd.org 2001/11/07 16:03:17 [packet.c packet.h sshconnect2.c] pad using the padding field from the ssh2 packet instead of sending extra ignore messages. tested against several other ssh servers. - markus@cvs.openbsd.org 2001/11/07 21:40:21 [ssh-rsa.c] ssh_rsa_sign/verify: SSH_BUG_SIGBLOB not supported - markus@cvs.openbsd.org 2001/11/07 22:10:28 [ssh-dss.c ssh-rsa.c] missing free and sync dss/rsa code. - markus@cvs.openbsd.org 2001/11/07 22:53:21 [channels.h] crank c->path to 256 so they can hold a full hostname; dwd@bell-labs.com - markus@cvs.openbsd.org 2001/11/08 10:51:08 [readpass.c] don't strdup too much data; from gotoh@taiyo.co.jp; ok millert. - markus@cvs.openbsd.org 2001/11/10 13:22:42 [ssh-rsa.c] KNF (unexpand) - markus@cvs.openbsd.org 2001/11/11 13:02:31 [servconf.c] make AuthorizedKeysFile2 fallback to AuthorizedKeysFile if AuthorizedKeysFile is specified. 20011109 - (stevesk) auth-pam.c: use do_pam_authenticate(PAM_DISALLOW_NULL_AUTHTOK) if permit_empty_passwd == 0 so null password check cannot be bypassed. jayaraj@amritapuri.com OpenBSD bug 2168
* Update to OpenSSH 3.0 and OpenSSH-portable 3.0p1dinoex2001-11-072-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Extracted from Changelog (not complete): 20011012 - markus@cvs.openbsd.org 2001/10/10 22:18:47 [channels.c channels.h clientloop.c nchan.c serverloop.c] [session.c session.h] try to keep channels open until an exit-status message is sent. don't kill the login shells if the shells stdin/out/err is closed. this should now work: ssh -2n localhost 'exec > /dev/null 2>&1; sleep 10; exit 5'; echo ? - markus@cvs.openbsd.org 2001/10/11 13:45:21 [session.c] delay detach of session if a channel gets closed but the child is still alive. however, release pty, since the fd's to the child are already closed. - markus@cvs.openbsd.org 2001/10/11 15:24:00 [clientloop.c] clear select masks if we return before calling select(). 20011010 - markus@cvs.openbsd.org 2001/10/04 14:34:16 [key.c] call OPENSSL_free() for memory allocated by openssl; from chombier@mac.com - markus@cvs.openbsd.org 2001/10/04 15:05:40 [channels.c serverloop.c] comment out bogus conditions for selecting on connection_in - markus@cvs.openbsd.org 2001/10/04 15:12:37 [serverloop.c] client_alive_check cleanup - markus@cvs.openbsd.org 2001/10/06 00:14:50 [sshconnect.c] remove unused argument - markus@cvs.openbsd.org 2001/10/06 00:36:42 [session.c] fix typo in error message, sync with do_exec_nopty - markus@cvs.openbsd.org 2001/10/06 11:18:19 [sshconnect1.c sshconnect2.c sshconnect.c] unify hostkey check error messages, simplify prompt. - markus@cvs.openbsd.org 2001/10/07 10:29:52 [authfile.c] grammer; Matthew_Clarke@mindlink.bc.ca - markus@cvs.openbsd.org 2001/10/07 17:49:40 [channels.c channels.h] avoid possible FD_ISSET overflow for channels established during channnel_after_select() (used for dynamic channels). - markus@cvs.openbsd.org 2001/10/08 11:48:57 [channels.c] better debug - markus@cvs.openbsd.org 2001/10/08 16:15:47 [sshconnect.c] use correct family for -b option - markus@cvs.openbsd.org 2001/10/08 19:05:05 [ssh.c sshconnect.c sshconnect.h ssh-keyscan.c] some more IPv4or6 cleanup - markus@cvs.openbsd.org 2001/10/09 10:12:08 [session.c] chdir $HOME after krb_afslog(); from bbense@networking.stanford.edu - markus@cvs.openbsd.org 2001/10/09 19:32:49 [session.c] stat subsystem command before calling do_exec, and return error to client. - markus@cvs.openbsd.org 2001/10/09 19:51:18 [serverloop.c] close all channels if the connection to the remote host has been closed, should fix sshd's hanging with WCHAN==wait - markus@cvs.openbsd.org 2001/10/09 21:59:41 [channels.c channels.h serverloop.c session.c session.h] simplify session close: no more delayed session_close, no more blocking wait() calls. - (bal) seed_init() and seed_rng() required in ssh-keyscan.c 20011003 - markus@cvs.openbsd.org 2001/09/27 11:58:16 [compress.c] mem leak; chombier@mac.com - markus@cvs.openbsd.org 2001/09/27 11:59:37 [packet.c] missing called=1; chombier@mac.com - markus@cvs.openbsd.org 2001/09/27 15:31:17 [auth2.c auth2-chall.c sshconnect1.c] typos; from solar - camield@cvs.openbsd.org 2001/09/27 17:53:24 [sshd.8] don't talk about compile-time options ok markus@ - djm@cvs.openbsd.org 2001/09/28 12:07:09 [ssh-keygen.c] bzero private key after loading to smartcard; ok markus@ - markus@cvs.openbsd.org 2001/09/28 15:46:29 [ssh.c] bug: read user config first; report kaukasoi@elektroni.ee.tut.fi - markus@cvs.openbsd.org 2001/10/01 08:06:28 [scp.c] skip filenames containing \n; report jdamery@chiark.greenend.org.uk and matthew@debian.org - markus@cvs.openbsd.org 2001/10/01 21:38:53 [channels.c channels.h ssh.c sshd.c] remove ugliness; vp@drexel.edu via angelos - markus@cvs.openbsd.org 2001/10/01 21:51:16 [readconf.c readconf.h ssh.1 sshconnect.c] add NoHostAuthenticationForLocalhost; note that the hostkey is now check for localhost, too. - djm@cvs.openbsd.org 2001/10/02 08:38:50 [ssh-add.c] return non-zero exit code on error; ok markus@ - stevesk@cvs.openbsd.org 2001/10/02 22:56:09 [sshd.c] #include "channels.h" for channel_set_af() - markus@cvs.openbsd.org 2001/10/03 10:01:20 [auth.c] use realpath() for homedir, too. from jinmei@isl.rdc.toshiba.co.jp 20011001 - (stevesk) loginrec.c: fix type conversion problems exposed when using 64-bit off_t. 20010928 - djm@cvs.openbsd.org 2001/09/28 09:49:31 [scard.c] Fix segv when smartcard communication error occurs during key load. ok markus@ - (djm) Update spec files for new x11-askpass 20010927 - (stevesk) session.c: declare do_pre_login() before use wayned@users.sourceforge.net 20010925 - (djm) Pull in auth-krb5.c from OpenBSD CVS. NB. it is not currently used. - (djm) Sync $sysconfdir/moduli - (djm) Avoid bad and unportable sprintf usage in compat code
* cvs rm'ing patch-coredump, as the current versions are safe.dinoex2001-10-261-11/+0
| | | | It does no harm, so a second bump of PORTVERSION is not needed.
* - included an patch that solves a coredump in sshddinoex2001-10-242-0/+12
| | | | | | - Bumped PORTREVISION Submitted by: ryanb@goddamnbastard.org
* - Update to OpenSSH 2.9.9p2dinoex2001-10-036-83/+20
| | | | | | | - security-patch for cookie files obsolete - MD5 password support activated Approved by: dwcjr@FreeBSD.org
* - Update to p2:dinoex2001-08-203-147/+19
| | | | | | | | | | | | | | | | | | | | | | - stripped down some patches 20010617 - (djm) Pull in small fix from -CURRENT for session.c: typo, use pid not s->pid, mstone@cs.loyola.edu 20010615 - (stevesk) don't set SA_RESTART and set SIGCHLD to SIG_DFL around grantpt(). 20010614 - (bal) Applied X11 Cookie Patch. X11 Cookie behavior has changed to no longer use /tmp/ssh-XXXXX/ 20010528 - (tim) [conifgure.in] add setvbuf test needed for sftp-int.c Patch by Corinna Vinschen <vinschen@redhat.com> Approved by: dwcjr@freebsd.org
* Fix package building, slogin and its manpage is an linkdinoex2001-08-192-2/+4
|
* - slogin and manpage added to package, bumped PORTREVISIONdinoex2001-08-012-2/+3
|
* Fix FreeBSD specific patch, exit now if change of password fails.dwcjr2001-06-112-11/+13
| | | | | Submitted by: Udo.Schweigert@cert.siemens.de Reviewed by: dinoex,will
* - Switch to the user's uid before attempting to unlink the auth forwardingdinoex2001-06-092-0/+194
| | | | | | | | file, nullifying the effects of a race. - Bump PORTREVISION Submitted by: green@FreeBSD.org Approved by: dwcjr@inethouston.net
* Update maintainer emaildwcjr2001-06-091-1/+1
| | | | Reviewed by: will
* New port:dinoex2001-06-0111-0/+220
OpenSSH portable, which has GNU-configure and more. Diffs to OpenSSH-OPenBSD are huge. So this is here a complete diffrent branch, no repro-copy - Did a bit cleanup in the Makefile Submitted by: dwcjr@inethouston.net
generated by cgit (git 2.34.1) at 2024-12-30 08:51:39 +0800