summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* - djm@cvs.openbsd.org 2013/07/25 00:29:10Damien Miller2013-07-252-1/+6
| | | | | | [ssh.c] daemonise backgrounded (ControlPersist'ed) multiplexing master to ensure it is fully detached from its controlling terminal. based on debugging
* - djm@cvs.openbsd.org 2013/07/22 12:20:02Damien Miller2013-07-252-7/+11
| | | | | | [umac.h] oops, forgot to commit corresponding header change; spotted by jsg and jasper
* - djm@cvs.openbsd.org 2013/07/22 05:00:17Damien Miller2013-07-252-31/+35
| | | | | | [umac.c] make MAC key, data to be hashed and nonce for final hash const; checked with -Wcast-qual
* - djm@cvs.openbsd.org 2013/07/20 22:20:42Damien Miller2013-07-252-2/+8
| | | | | [krl.c] fix verification error in (as-yet usused) KRL signature checking path
* - djm@cvs.openbsd.org 2013/07/20 01:55:13Damien Miller2013-07-204-29/+43
| | | | | [auth-krb5.c gss-serv-krb5.c gss-serv.c] fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@
* - djm@cvs.openbsd.org 2013/07/20 01:50:20Damien Miller2013-07-202-3/+6
| | | | | | [ssh-agent.c] call cleanup_handler on SIGINT when in debug mode to ensure sockets are cleaned up on manual exit; bz#2120
* - djm@cvs.openbsd.org 2013/07/20 01:44:37Damien Miller2013-07-203-4/+7
| | | | | [ssh-keygen.c ssh.c] More useful error message on missing current user in /etc/passwd
* - djm@cvs.openbsd.org 2013/07/20 01:43:46Damien Miller2013-07-202-7/+12
| | | | | [umac.c] use a union to ensure correct alignment; ok deraadt
* - markus@cvs.openbsd.org 2013/07/19 07:37:48Damien Miller2013-07-2012-42/+153
| | | | | | | | [auth.h kex.h kexdhs.c kexecdhs.c kexgexs.c monitor.c servconf.c] [servconf.h session.c sshd.c sshd_config.5] add ssh-agent(1) support to sshd(8); allows encrypted hostkeys, or hostkeys on smartcards; most of the work by Zev Weiss; bz #1974 ok djm@
* - djm@cvs.openbsd.org 2013/07/18 01:12:26Damien Miller2013-07-182-3/+6
| | | | | [ssh.1] be more exact wrt perms for ~/.ssh/config; bz#2078
* - schwarze@cvs.openbsd.org 2013/07/16 00:07:52Damien Miller2013-07-186-17/+20
| | | | | [scp.1 sftp-server.8 ssh-keyscan.1 ssh-keysign.8 ssh-pkcs11-helper.8] use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@
* - djm@cvs.openbsd.org 2013/07/12 05:48:55Damien Miller2013-07-182-1/+9
| | | | | [ssh.c] set TCP nodelay for connections started with -N; bz#2124 ok dtucker@
* - djm@cvs.openbsd.org 2013/07/12 05:42:03Damien Miller2013-07-182-2/+7
| | | | | | | [ssh-keygen.c] do_print_resource_record() can never be called with a NULL filename, so don't attempt (and bungle) asking for one if it has not been specified bz#2127 ok dtucker@
* - djm@cvs.openbsd.org 2013/07/12 00:43:50Damien Miller2013-07-182-2/+7
| | | | | | | [misc.c] in ssh_gai_strerror() don't fallback to strerror for EAI_SYSTEM when errno == 0. Avoids confusing error message in some broken resolver cases. bz#2122 patch from plautrba AT redhat.com; ok dtucker
* - djm@cvs.openbsd.org 2013/07/12 00:20:00Damien Miller2013-07-184-11/+16
| | | | | [sftp.c ssh-keygen.c ssh-pkcs11.c] fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@
* - djm@cvs.openbsd.org 2013/07/12 00:19:59Damien Miller2013-07-1813-42/+60
| | | | | | [auth-options.c auth-rsa.c bufaux.c buffer.h channels.c hostfile.c] [hostfile.h mux.c packet.c packet.h roaming_common.c serverloop.c] fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@
* - markus@cvs.openbsd.org 2013/07/02 12:31:43Damien Miller2013-07-182-2/+5
| | | | | [dh.c] remove extra whitespace
* - jmc@cvs.openbsd.org 2013/06/27 14:05:37Damien Miller2013-07-186-55/+32
| | | | | | | | [ssh-keygen.1 ssh.1 ssh_config.5 sshd.8 sshd_config.5] do not use Sx for sections outwith the man page - ingo informs me that stuff like html will render with broken links; issue reported by Eric S. Raymond, via djm
* - djm@cvs.openbsd.org 2013/06/22 06:31:57Damien Miller2013-07-182-3/+8
| | | | | [scp.c] improved time_t overflow check suggested by guenther@
* - djm@cvs.openbsd.org 2013/06/21 05:43:10Damien Miller2013-07-182-3/+6
| | | | | [scp.c] make this -Wsign-compare clean after time_t conversion
* - djm@cvs.openbsd.org 2013/06/21 05:42:32Damien Miller2013-07-182-27/+50
| | | | | [dh.c] sprinkle in some error() to explain moduli(5) parse failures
* - djm@cvs.openbsd.org 2013/06/21 00:37:49Damien Miller2013-07-182-3/+14
| | | | | | [ssh_config.5] explicitly mention that IdentitiesOnly can be used with IdentityFile to control which keys are offered from an agent.
* - djm@cvs.openbsd.org 2013/06/21 00:34:49Damien Miller2013-07-186-14/+40
| | | | | | [auth-rsa.c auth.h auth2-hostbased.c auth2-pubkey.c monitor.c] for hostbased authentication, print the client host and user on the auth success/failure line; bz#2064, ok dtucker@
* - markus@cvs.openbsd.org 2013/06/20 19:15:06Damien Miller2013-07-182-8/+14
| | | | | [krl.c] don't leak the rdata blob on errors; ok djm@
* - guenther@cvs.openbsd.org 2013/06/17 04:48:42Damien Miller2013-07-182-25/+44
| | | | | | | | | [scp.c] Handle time_t values as long long's when formatting them and when parsing them from remote servers. Improve error checking in parsing of 'T' lines. ok dtucker@ deraadt@
* - dtucker@cvs.openbsd.org 2013/06/10 19:19:44Damien Miller2013-07-182-3/+7
| | | | | [readconf.c] revert 1.203 while we investigate crashes reported by okan@
* - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-configDarren Tucker2013-07-024-187/+42
| | | | | | | contrib/cygwin/ssh-user-config] Modernizes and improve readability of the Cygwin README file (which hasn't been updated for ages), drop unsupported OSes from the ssh-host-config help text, and drop an unneeded option from ssh-user-config. Patch from vinschen at redhat com.
* - (dtucker) [myproposal.h] Make the conditional algorithm support consistentDarren Tucker2013-06-112-8/+11
| | | | and add some comments so it's clear what goes where.
* - (dtucker) [myproposal.h] Do not advertise AES GSM ciphers if we don't haveDarren Tucker2013-06-112-1/+10
| | | | the required OpenSSL support. Patch from naddy at freebsd.
* - (dtucker) [Makefile.in configure.ac fixalgorithms] Remove unsupportedDarren Tucker2013-06-114-7/+54
| | | | algorithms (Ciphers, MACs and HostKeyAlgorithms) from man pages.
* - dtucker@cvs.openbsd.org 2013/06/07 15:37:52Damien Miller2013-06-104-5/+25
| | | | | | | | | | | [channels.c channels.h clientloop.c] Add an "ABANDONED" channel state and use for mux sessions that are disconnected via the ~. escape sequence. Channels in this state will be able to close if the server responds, but do not count as active channels. This means that if you ~. all of the mux clients when using ControlPersist on a broken network, the backgrounded mux master will exit when the Control Persist time expires rather than hanging around indefinitely. bz#1917, also reported and tested by tedu@. ok djm@ markus@.
* - (dtucker) [configure.ac sftp.c openbsd-compat/openbsd-compat.h] Cater forDarren Tucker2013-06-064-4/+16
| | | | | platforms that don't have multibyte character support (specifically, mblen).
* - dtucker@cvs.openbsd.org 2013/06/05 22:00:28Darren Tucker2013-06-062-1/+6
| | | | | [readconf.c] plug another memleak. bz#1967, from Zhenbo Xu, detected by Melton, ok djm
* - dtucker@cvs.openbsd.org 2013/06/05 12:52:38Darren Tucker2013-06-062-2/+9
| | | | | [sshconnect2.c] Fix memory leaks found by Zhenbo Xu and the Melton tool. bz#1967, ok djm
* - dtucker@cvs.openbsd.org 2013/06/05 02:27:50Darren Tucker2013-06-062-2/+9
| | | | | | | [sshd.c] When running sshd -D, close stderr unless we have explicitly requesting logging to stderr. From james.hunt at ubuntu.com via bz#1976, djm's patch so, err, ok dtucker.
* - dtucker@cvs.openbsd.org 2013/06/05 02:07:29Darren Tucker2013-06-062-2/+10
| | | | | | [mux.c] fix leaks in mux error paths, from Zhenbo Xu, found by Melton. bz#1967, ok djm
* - dtucker@cvs.openbsd.org 2013/06/04 20:42:36Darren Tucker2013-06-062-5/+17
| | | | | | | | [sftp.c] Make sftp's libedit interface marginally multibyte aware by building up the quoted string by character instead of by byte. Prevents failures when linked against a libedit built with wide character support (bz#1990). "looks ok" djm
* - dtucker@cvs.openbsd.org 2013/06/04 19:12:23Darren Tucker2013-06-062-2/+5
| | | | | [scp.c] use MAXPATHLEN for buffer size instead of fixed value. ok markus
* - dtucker@cvs.openbsd.org 2013/06/03 00:03:18Darren Tucker2013-06-062-8/+16
| | | | | | | [mac.c] force the MAC output to be 64-bit aligned so umac won't see unaligned accesses on strict-alignment architectures. bz#2101, patch from tomas.kuthan at oracle.com, ok djm@
* - dtucker@cvs.openbsd.org 2013/06/02 23:36:29Darren Tucker2013-06-064-7/+10
| | | | | | [clientloop.h clientloop.c mux.c] No need for the mux cleanup callback to be visible so restore it to static and call it through the detach_user function pointer. ok djm@
* - dtucker@cvs.openbsd.org 2013/06/02 21:01:51Darren Tucker2013-06-062-2/+6
| | | | | [channels.h] typo in comment
* - (dtucker) [Makefile.in] append $CFLAGS to compiler options when buildingDarren Tucker2013-06-052-2/+4
| | | | modpipe in case there's anything in there we need.
* - (dtucker) [regress/forwarding.sh] For (as yet unknown) reason, theDarren Tucker2013-06-052-0/+6
| | | | | | forwarding test is extremely slow copying data on some machines so switch back to copying the much smaller ls binary until we can figure out why this is.
* - (dtucker) [contrib/ssh-copy-id] bz#2117: Use portable operator in test.Darren Tucker2013-06-052-3/+5
| | | | Patch from cjwatson at debian.
* - (dtucker) Enable sha256 kex methods based on the presence of the necessaryDarren Tucker2013-06-052-1/+5
| | | | functions, not from the openssl version.
* - (dtucker) [configure.ac] Some other platforms need sys/types.h beforeDarren Tucker2013-06-042-3/+5
| | | | sys/socket.h.
* - (dtucker) [configure.ac] Some platforms need sys/types.h before sys/un.h.Darren Tucker2013-06-032-2/+4
|
* - (tim) [regress/sftp-chroot.sh] skip if no sudo. ok dtuckerTim Rice2013-06-032-1/+3
|
* - (tim) [aclocal.m4] Enhance OSSH_CHECK_CFLAG_COMPILE to check stderr.Tim Rice2013-06-022-3/+12
| | | | feedback and ok dtucker
* - (tim) [configure.ac regress/Makefile] With rev 1.47 of test-exec.sh weTim Rice2013-06-023-6/+12
| | | | | | need a shell that can handle "[ file1 -nt file2 ]". Rather than keep dealing with shell portability issues in regression tests, we let configure find us a capable shell on those platforms with an old /bin/sh.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-19 13:44:34 +0100