summaryrefslogtreecommitdiffstats
path: root/mac.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2020-10-18upstream: variants of the log methods that append a ssherr.h stringdjm@openbsd.org5-39/+80
from a supplied error code; ok markus@ OpenBSD-Commit-ID: aed98c4435d48d036ae6740300f6a8357b7cc0bf
2020-10-18upstream: remove a level of macro indirection; ok markus@djm@openbsd.org1-35/+11
OpenBSD-Commit-ID: 0c529d06e902c5d1a6b231e1bec6157f76dc67c9
2020-10-18upstream: add some variant log.h calls that prepend the callingdjm@openbsd.org1-1/+13
function name; ok markus@ OpenBSD-Commit-ID: 4be1b2e2455b271ddb7457bc195c5367644f4e48
2020-10-17missing headerDamien Miller1-0/+2
2020-10-17sync regress/misc/sk-dummy/fatal.cDamien Miller1-3/+6
2020-10-17upstream: make the log functions that exit (sshlogdie(),djm@openbsd.org4-22/+28
sshfatal(), etc) have identical signatures. Makes things a bit more consistent... OpenBSD-Commit-ID: bd0ae124733389d7c0042e135c71ee9091362eb9
2020-10-17upstream: add space between macro arg and punctuation;jmc@openbsd.org2-4/+4
OpenBSD-Commit-ID: bb81e2ed5a77832fe62ab30a915ae67cda57633e
2020-10-17check for and require a C99 capable compilerDamien Miller1-0/+6
recent logging changes use __VA_ARGS__.
2020-10-17logging is now macros, remove function pointersDamien Miller1-5/+5
2020-10-17adapt sk-dummy's fatal implementation to changesDamien Miller1-2/+5
2020-10-17fix netcat build problemDamien Miller1-0/+3
2020-10-16upstream: LogVerbose keyword for ssh and sshddjm@openbsd.org10-17/+99
Allows forcing maximum debug logging by file/function/line pattern- lists. ok markus@ OpenBSD-Commit-ID: c294c25732d1b4fe7e345cb3e044df00531a6356
2020-10-16upstream: revised log infrastructure for OpenSSHdjm@openbsd.org7-133/+154
log functions receive function, filename and line number of caller. We can use this to selectively enable logging via pattern-lists. ok markus@ OpenBSD-Commit-ID: 51a472610cbe37834ce6ce4a3f0e0b1ccc95a349
2020-10-16upstream: use do_log2 instead of function pointers to different logdjm@openbsd.org1-3/+4
functions OpenBSD-Commit-ID: 88077b826d348c58352a6b394755520f4e484480
2020-10-14upstream: make UpdateHostkeys still more conservative: refuse todjm@openbsd.org1-38/+76
proceed if one of the keys offered by the server is already in known_hosts under another name. This avoid collisions between address entries for different host aliases when CheckHostIP=yes Also, do not attempt to fix known_hosts with incomplete host/ip matches when there are no new or deprecated hostkeys. OpenBSD-Commit-ID: 95c19842f7c41f9bd9c92aa6441a278c0fd0c4a3
2020-10-14upstream: Zap unused family parameter from ssh_connect_direct()kn@openbsd.org3-9/+9
sshconnect.c r1.241 from 2013 made it unused; found while reading code. OK djm OpenBSD-Commit-ID: 219ba6d7f9925d0b7992918612680399d86712b5
2020-10-13shift contents of long $() into filter_ids()Philip Hands1-38/+40
This was prompted by the fact that posh does not deal with $() that contains comments where the comment includes an odd number of single-quotes. It seems to get befuddled into trying to find the matching quote. Regardless, making a function for filtering the unneeded ids seems much neater than avoiding apostrophes, so that's what I've done. SSH-Copy-ID-Upstream: 3dab3366a584427045c8a690a93282f02c09cf24
2020-10-13combine if/elif to avoid duplication of the actionPhilip Hands1-4/+5
SSH-Copy-ID-Upstream: 42aeb1cc53d3f7f6e78edc210fb121fda0834914
2020-10-13shellcheck tidyagePhilip Hands1-3/+7
SSH-Copy-ID-Upstream: 5b08f840e78ac544288b3983010a1b0585e966fd
2020-10-13tidy up test of $SCRATCH_DIR creationPhilip Hands1-8/+6
SSH-Copy-ID-Upstream: 2d8b22d96c105d87743ffe8874887b06f8989b93
2020-10-13add -s flag: to install keys via SFTPPhilip Hands2-28/+80
This is prompted by: https://bugzilla.mindrot.org/show_bug.cgi?id=3201 Thanks go to Matthias Blümel for the idea, and the helpful patch, from which this patch grew. SSH-Copy-ID-Upstream: f7c76dc64427cd20287a6868f672423b62057614
2020-10-12upstream: UpdateHostkeys: check for keys under other namesdjm@openbsd.org1-7/+82
Stop UpdateHostkeys from automatically removing deprecated keys from known_hosts files if the same keys exist under a different name or address to the host that is being connected to. This avoids UpdateHostkeys from making known_hosts inconsistent in some cases. For example, multiple host aliases sharing address-based known_hosts on different lines, or hosts that resolves to multiple addresses. ok markus@ OpenBSD-Commit-ID: 6444a705ba504c3c8ccddccd8d1b94aa33bd11c1
2020-10-12upstream: UpdateHostkeys: better CheckHostIP handlingdjm@openbsd.org2-53/+95
When preparing to update the known_hosts file, fully check both entries for both the host and the address (if CheckHostIP enabled) and ensure that, at the end of the operation, entries for both are recorded. Make sure this works with HashKnownHosts too, which requires maintaining a list of entry-types seen across the whole file for each key. ok markus@ OpenBSD-Commit-ID: 374dc263103f6b343d9671f87dbf81ffd0d6abdd
2020-10-12upstream: UpdateHostkeys: better detect manual host entriesdjm@openbsd.org1-17/+37
Disable UpdateHostkeys if the known_hosts line has more than two entries in the pattern-list. ssh(1) only writes "host" or "host,ip" lines so anything else was added by a different tool or by a human. ok markus@ OpenBSD-Commit-ID: e434828191fb5f3877d4887c218682825aa59820
2020-10-09upstream: don't misdetect comma-separated hostkey names as wildcards;djm@openbsd.org1-4/+4
spotted by naddy@ OpenBSD-Commit-ID: 4b874edfec7fc324a21b130bdb42f912177739ce
2020-10-08fix TEST_MALLOC_OPTIONS varwangxp0061-1/+1
2020-10-08upstream: clarify conditions for UpdateHostkeysdjm@openbsd.org1-3/+9
OpenBSD-Commit-ID: 9cba714cf6aeed769f998ccbe8c483077a618e27
2020-10-07upstream: remove GlobalKnownHostsFile for this test afterdjm@openbsd.org1-2/+5
UpdateHostkeys change OpenBSD-Regress-ID: a940ad79d59343319613ba8fc46b6ef24aa3f8e1
2020-10-07upstream: Disable UpdateHostkeys when hostkey checking failsdjm@openbsd.org1-1/+6
If host key checking fails (i.e. a wrong host key is recorded for the server) and the user elects to continue (via StrictHostKeyChecking=no), then disable UpdateHostkeys for the session. reminded by Mark D. Baushke; ok markus@ OpenBSD-Commit-ID: 98b524f121f4252309dd21becd8c4cacb0c6042a
2020-10-07upstream: Fix UpdateHostkeys/HashKnownHosts/CheckHostIP bugdjm@openbsd.org1-1/+4
When all of UpdateHostkeys, HashKnownHosts and ChechHostIP were enabled and new host keys were learned, known_hosts IP entries were not being recorded for new host keys. reported by matthieu@ ok markus@ OpenBSD-Commit-ID: a654a8290bd1c930aac509e8158cf85e42e49cb7
2020-10-07upstream: don't UpdateHostkeys when the hostkey is verified by thedjm@openbsd.org1-4/+28
GlobalKnownHostsFile file, support only UserKnownHostsFile matches suggested by Mark D. Baushke; feedback and ok markus@ OpenBSD-Commit-ID: eabb771a6add676c398d38a143a1aff5f04abbb9
2020-10-07upstream: revert kex->flags cert hostkey downgrade back to a plaindjm@openbsd.org5-64/+20
key (commitid VtF8vozGOF8DMKVg). We now do this a simpler way that needs less plumbing. ok markus@ OpenBSD-Commit-ID: fb92d25b216bff8c136da818ac2221efaadf18ed
2020-10-07upstream: simply disable UpdateHostkeys when a certificatedjm@openbsd.org1-2/+7
successfully authenticated the host; simpler than the complicated plumbing via kex->flags we have now. ok markus@ OpenBSD-Commit-ID: 80e39644eed75717d563a7f177e8117a0e14f42c
2020-10-07upstream: disable UpdateHostkeys by default if VerifyHostKeyDNS isdjm@openbsd.org2-6/+9
enabled; suggested by Mark D. Baushke OpenBSD-Commit-ID: 85a1b88592c81bc85df7ee7787dbbe721a0542bf
2020-10-07upstream: Agent protocol draft is now at rev 4. ok djm@dtucker@openbsd.org1-5/+3
OpenBSD-Commit-ID: 8c01ea3aae48aab45e01b7421b0fca2dad5e7837
2020-10-07upstream: when ordering host key algorithms in the client, considerdjm@openbsd.org4-12/+19
the ECDSA key subtype; ok markus@ OpenBSD-Commit-ID: 3097686f853c61ff61772ea35f8b699931392ece
2020-10-07upstream: Allow full range of UIDs and GIDs for sftp chown anddtucker@openbsd.org1-6/+6
chgrp on 32bit platforms instead of being limited by LONG_MAX. bz#3206, found by booking00 at sina.cn, ok markus@ OpenBSD-Commit-ID: 373b7bbf1f15ae482d39567ce30d18b51c9229b5
2020-10-03upstream: There are lots of place where we want to redirect stdin,djm@openbsd.org9-135/+60
stdout and/or stderr to /dev/null. Factor all these out to a single stdfd_devnull() function that allows selection of which of these to redirect. ok markus@ OpenBSD-Commit-ID: 3033ba5a4c47cacfd5def020d42cabc52fad3099
2020-10-03upstream: enable UpdateHostkeys by default when the configurationdjm@openbsd.org2-4/+10
has not overridden UserKnownHostsFile; ok markus@ "The timing is perfect" deraadt@ OpenBSD-Commit-ID: 62df71c9c5242da5763cb473c2a2deefbd0cef60
2020-10-03upstream: disable UpdateHostkeys when a wildcard hostname patterndjm@openbsd.org1-2/+31
is encountered or when a certificate host key is in use. feedback/ok markus@ OpenBSD-Commit-ID: b6e5575af7e6732322be82ec299e09051a5413bd
2020-10-03upstream: record when the host key checking code downgrades adjm@openbsd.org4-19/+57
certificate host key to a plain key. This occurs when the user connects to a host with a certificate host key but no corresponding CA key configured in known_hosts; feedback and ok markus@ OpenBSD-Commit-ID: 2ada81853ff9ee7824c62f440bcf4ad62030c901
2020-10-03upstream: prefer ed25519 signature algorithm variants to ECDSA; okdjm@openbsd.org3-33/+39
markus@ OpenBSD-Commit-ID: 82187926fca96d35a5b5afbc091afa84e0966e5b
2020-10-03upstream: want time.h here toodjm@openbsd.org1-1/+2
OpenBSD-Commit-ID: fafee8f1108c64ad8b282f9a1ed5ea830d8c58a7
2020-10-03upstream: split introductory paragraph, and insert ominous words aboutderaadt@openbsd.org1-4/+8
the glob issue, which cannot be fully fixed and really requires completely replacing scp with a completely different subsystem. team effort to find the right words.. OpenBSD-Commit-ID: 58e1f72d292687f63eb357183036ee242513691c
2020-10-03use relative rather than system include hereDamien Miller1-1/+1
2020-10-03add some openbsd-compat licenses we missedDamien Miller1-0/+62
2020-10-03un-nest $() to make ksh cheerfulPhilip Hands1-1/+2
2020-10-03ksh doesn't grok 'local'Philip Hands1-6/+5
and AFAICT it's not actually doing anything useful in the code, so let's see how things go without it.
2020-10-03Fix `EOF: command not found` error in ssh-copy-idOleg1-1/+2
2020-09-30upstream: Regen moduli.dtucker@openbsd.org1-453/+406
OpenBSD-Commit-ID: 04967f8c43e9854ac34b917bcd6f5ac96c53a693
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-18 20:23:39 +0100