Commit Graph
2633 Commits
Author SHA1 Message Date
Damien Miller f6d9e22189 - OpenBSD CVS updates:
- [email protected] 2000/06/17 09:58:46
     [channels.c]
     everyone says "nix it" (remove protocol 2 debugging message)
   - [email protected]  2000/06/17 13:24:34
     [sshconnect.c]
     allow extended server banners
   - [email protected]  2000/06/17 14:30:10
     [sshconnect.c]
     missing atomicio, typo
   - [email protected]   2000/06/17 16:52:34
     [servconf.c servconf.h session.c sshd.8 sshd_config]
     add support for ssh v2 subsystems. ok markus@.
   - [email protected] 2000/06/17 18:57:48
     [readconf.c servconf.c]
     include = in WHITESPACE; markus ok
   - [email protected]  2000/06/17 19:09:10
     [auth2.c]
     implement bug compatibility with ssh-2.0.13 pubkey, server side
   - [email protected]  2000/06/17 21:00:28
     [compat.c]
     initial support for ssh.com's 2.2.0
   - [email protected]  2000/06/17 21:16:09
     [scp.c]
     typo
   - [email protected]  2000/06/17 22:05:02
     [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
     split auth-rsa option parsing into auth-options
     add options support to authorized_keys2
   - [email protected]  2000/06/17 22:42:54
     [session.c]
     typo
2000-06-18 14:50:44 +10:00
Damien Miller 7b22d65034 - (djm) Add summary of configure options to end of ./configure run
- (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from
   Michael Stone <[email protected]>
 - (djm) rusage is a privileged operation on some Unices (incl.
   Solaris 2.5.1). Report from Paul D. Smith <[email protected]>
 - (djm) Avoid PAM failures when running without a TTY. Report from
   Martin Petrak <[email protected]>
 - (djm) Include sys/types.h when including netinet/in.h in configure tests.
   Patch from Jun-ichiro itojun Hagino <[email protected]>
2000-06-18 14:07:04 +10:00
Damien Miller 1a13225d87 - (djm) Fix short copy in loginrec.c (based on patch from Phill Camp
<[email protected]>
2000-06-13 21:23:17 +10:00
Damien Miller a66626b2d5 - (djm) Fixes from Andrew McGill <[email protected]>:
- Platform define for SCO 3.x which breaks on /dev/ptmx
  - Detect and try to fix missing MAXPATHLEN
2000-06-13 18:57:53 +10:00
andre 35ad6bee4b - (andre) AIX, lastlog, configure fixes from Tom Bertelson <[email protected]>:
- Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is
     def'd
  - Set AIX to use preformatted manpages
2000-06-12 22:41:27 +00:00
Damien Miller c29de955f4 - (djm) Configure fixes from SAKAI Kiyotaka <[email protected]> 2000-06-12 23:04:18 +10:00
Damien Miller e69f18cbff - (djm) Glob manpages in RPM spec files to catch compressed files
- (djm) Full license in auth-pam.c
2000-06-12 16:38:54 +10:00
Damien Miller d900e45faa - (djm) Fix for configure on bash2 from Jim Knoble <[email protected]> 2000-06-10 16:51:33 +10:00
Damien Miller c601a7596f - (djm) Minor doc tweaks 2000-06-10 08:33:38 +10:00
Damien Miller a1cb64484e - (djm) Patch from Kenji Miyake <[email protected]> to disable utmp usage
(in favour of utmpx) on Solaris 8
2000-06-09 11:58:35 +10:00
Damien Miller 14c12cb000 - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through
list of commands (by default). Removed verbose debugging (by default).
 - (djm) Increased command entropy estimates and default entropy collection
   timeout
2000-06-07 22:20:23 +10:00
Damien Miller d5bf307f7b - (djm) Remove duplicate headers from loginrec.c 2000-06-07 21:32:13 +10:00
Damien Miller 9e11089afb - (djm) Don't add /usr/local/lib to library search path on Irix 2000-06-07 21:05:46 +10:00
Damien Miller 5314ae7855 - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg
<[email protected]>
2000-06-07 20:08:19 +10:00
Damien Miller d3a185709d - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III
<[email protected]>
 - (djm) OpenBSD CVS updates:
  - [email protected]
    [sshconnect2.c]
    teach protocol v2 to count login failures properly and also enable an
    explanation of why the password prompt comes up again like v1; this is NOT
    crypto
  - [email protected]
    [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8]
    xauth_location support; pr 1234
    [readconf.c sshconnect2.c]
    typo, unused
    [session.c]
    allow use_login only for login sessions, otherwise remote commands are
    execed with uid==0
    [sshd.8]
    document UseLogin better
    [version.h]
    OpenSSH 2.1.1
    [auth-rsa.c]
    fix match_hostname() logic for auth-rsa: deny access if we have a
    negative match or no match at all
    [channels.c hostfile.c match.c]
    don't panic if mkdtemp fails for authfwd; [email protected] via
    [email protected]
2000-06-07 19:55:44 +10:00
Damien Miller e37bfc19f7 - (djm) Added --with-cflags, --with-ldflags and --with-libs options to
configure.
2000-06-05 09:37:43 +10:00
andre a86c7eccbf Added missed info for 20000603 login code update
Noted 20000604 updates
2000-06-04 17:00:15 +00:00
Damien Miller 2994e0891b - Configure tweaking for new login code on Irix 5.3 2000-06-04 15:51:47 +10:00
Damien Miller 1c77392bce - Rewrote bsd-login to use proper utmp API if available. Major cleanup
of fallback DIY code.
2000-05-31 13:57:18 +10:00
Damien Miller 1ea8ac7b90 - Fix EGD read bug by IWAMURO Motonori <[email protected]>
update credits
2000-05-31 11:24:34 +10:00
Damien Miller 2f6a0ad191 - Cleanup of auth.c, login.c and fake-*
- Cleanup of auth-pam.c, save and print "account expired" error messages
2000-05-31 11:20:11 +10:00
Damien Miller 03934f2eef doc 2000-05-30 14:01:10 +10:00
Damien Miller b1715dc0cf - OpenBSD CVS updates:
- [email protected]
    [session.c]
    make x11-fwd work w/ localhost (xauth add host/unix:11)
    [cipher.c compat.c readconf.c servconf.c]
    check strtok() != NULL; ok niels@
    [key.c]
    fix key_read() for uuencoded keys w/o '='
    [serverloop.c]
    group ssh1 vs. ssh2 in serverloop
    [kex.c kex.h myproposal.h sshconnect2.c sshd.c]
    split kexinit/kexdh, factor out common code
    [readconf.c ssh.1 ssh.c]
    forwardagent defaults to no, add ssh -A
  - [email protected]
    [session.c]
    just some line shortening
2000-05-30 13:44:51 +10:00
Damien Miller c252e2efa1 - Fix buffer overrun in login.c for systems which use syslen in utmpx.
patch from YOSHIFUJI Hideaki <[email protected]>
2000-05-30 13:12:46 +10:00
Damien Miller be260a0f0d - Define atexit for old Solaris 2000-05-30 12:57:46 +10:00
Damien Miller 7b63b0f66e - Doc cleanup 2000-05-20 15:41:26 +10:00
Damien Miller fda78d9bd0 - HPUX and Configure fixes from Lutz Jaenicke
<[email protected]>
 - Use mkinstalldirs script to make directories instead of non-portable
   "install -d". Suggested by Lutz Jaenicke <[email protected]>
2000-05-20 15:33:44 +10:00
Damien Miller dfc83f42eb - SunOS 4.x support from Todd C. Miller <[email protected]> 2000-05-20 15:02:59 +10:00
Damien Miller ad1bc5f986 - Don't touch utmp if USE_UTMPX defined 2000-05-20 14:53:09 +10:00
Damien Miller d999ae26b7 - Xauth fix from Markus Friedl <[email protected]> 2000-05-20 12:49:31 +10:00
Damien Miller ef7df54073 - Include Andre Lucas' fixprogs script. Forgot to "cvs add" it yesterday
- OpenBSD CVS updates:
  - [email protected]
    [sshconnect.c]
    copy only ai_addrlen bytes; [email protected]
    [auth.c]
    accept an empty shell in authentication; bug reported by
    [email protected]
    [serverloop.c]
    we don't have stderr for interactive terminal sessions (fcntl errors)
2000-05-19 00:03:23 +10:00
Damien Miller 3b512e18dc - Detect OpenSSL seperatly from RSA
- Better test for RSA (more compatible with RSAref). Based on work by
   Ed Eden <[email protected]>
2000-05-17 23:29:18 +10:00
Damien Miller c4be7ce669 - RSAless operation patch from [email protected] 2000-05-17 23:02:03 +10:00
Damien Miller 615f939ebb - Several patches from SAKAI Kiyotaka <[email protected]>
- INSTALL typo and URL fix
  - Makefile fix
  - Solaris fixes
 - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka
   <[email protected]>
2000-05-17 22:53:33 +10:00
Damien Miller dcb6ecd1b3 - OpenBSD CVS update:
- [email protected]
    [ssh.c]
    fix usage()
    [ssh2.h]
    draft-ietf-secsh-architecture-05.txt
    [ssh.1]
    document ssh -T -N (ssh2 only)
    [channels.c serverloop.c ssh.h sshconnect.c sshd.c aux.c]
    enable nonblocking IO for sshd w/ proto 1, too; split out common code
    [aux.c]
    missing include
2000-05-17 22:34:22 +10:00
Damien Miller 0e65eed58a - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <[email protected]> 2000-05-17 22:16:05 +10:00
Damien Miller f3c6cf1383 - Avoid WCOREDUMP complation errors for systems that lack it
- Avoid SIGCHLD warnings from entropy commands
2000-05-17 22:08:29 +10:00
Damien Miller d2c208a2d3 - Applied Tom Bertelson's <[email protected]> AIX authentication fix 2000-05-17 22:00:02 +10:00
Damien Miller 8d1fd57a97 - Fix from Andre Lucas <[email protected]>
- Fixes command line printing segfaults (spotter: Bladt Norbert)
  - Fixes erroneous printing of debug messages to syslog
  - Fixes utmp for MacOS X (spotter: Aristedes Maniatis)
  - Gives useful error message if PRNG initialisation fails
  - Reduced ssh startup delay
  - Measures cumulative command time rather than the time between reads
	 after select()
  - 'fixprogs' perl script to eliminate non-working entropy commands, and
	 optionally run 'ent' to measure command entropy
2000-05-17 21:34:07 +10:00
Damien Miller 95fe91bd84 - Fix for non-recognised DSA keys from Arkadiusz Miskiewicz
<[email protected]>
2000-05-13 12:31:22 +10:00
Damien Miller accfeb3afe - Fix for prng_seed permissions checking from Lutz Jaenicke
<[email protected]>
2000-05-11 19:10:58 +10:00
Damien Miller 95e8963429 idoh 2000-05-09 15:28:50 +10:00
Damien Miller 54057c2b9b - Doc updates 2000-05-09 15:03:37 +10:00
Damien Miller 16e519cb9c - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.a 2000-05-09 14:28:55 +10:00
Damien Miller 30c3d42930 - OpenBSD CVS update
- [email protected]
    [cipher.h myproposal.h readconf.c readconf.h servconf.c ssh.1 ssh.c]
    [ssh.h sshconnect1.c sshconnect2.c sshd.8]
    - complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)
  - [email protected]
    [ssh.1]
    - zap typo
    [ssh-keygen.1]
    - One last nit fix. (markus approved)
    [sshd.8]
    - some markus certified spelling adjustments
  - [email protected]
    [auth2.c channels.c clientloop.c compat compat.h dsa.c kex.c]
    [sshconnect2.c ]
    - bug compat w/ ssh-2.0.13 x11, split out bugs
    [nchan.c]
    - no drain if ibuf_empty, fixes x11fwd problems; tests by fries@
    [ssh-keygen.c]
    - handle escapes in real and original key format, ok millert@
    [version.h]
    - OpenSSH-2.1
2000-05-09 11:02:59 +10:00
Damien Miller 61e50f10c2 - Configure caching and cleanup patch from Andre Lucas'
<[email protected]>
2000-05-08 20:49:37 +10:00
Damien Miller 6d48871faf - OpenBSD CVS update
- [email protected]
    [clientloop.c sshconnect2.c]
    - make x11-fwd interop w/ ssh-2.0.13
    [README.openssh2]
    - interop w/ SecureFX
 - Release 2.0.0beta2
2000-05-08 13:44:52 +10:00
Damien Miller 58e579bcd9 - Generate DSA host keys during "make key" or RPM installs 2000-05-08 00:05:31 +10:00
Damien Miller e247cc402b - Remove references to SSLeay.
- Big OpenBSD CVS update
  - [email protected]
    [clientloop.c]
    - typo
    [session.c]
    - update proctitle on pty alloc/dealloc, e.g. w/ windows client
    [session.c]
    - update proctitle for proto 1, too
    [channels.h nchan.c serverloop.c session.c sshd.c]
    - use c-style comments
  - [email protected]
    [scp.c]
    - more atomicio
  - [email protected]
    [channels.c]
    - set O_NONBLOCK
    [ssh.1]
    - update AUTHOR
    [readconf.c ssh-keygen.c ssh.h]
    - default DSA key file ~/.ssh/id_dsa
    [clientloop.c]
    - typo, rm verbose debug
  - [email protected]
    [ssh-keygen.1]
    - document DSA use of ssh-keygen
    [sshd.8]
    - a start at describing what i understand of the DSA side
    [ssh-keygen.1]
    - document -X and -x
    [ssh-keygen.c]
    - simplify usage
  - [email protected]
    [sshd.8]
    - there is no rhosts_dsa
    [ssh-keygen.1]
    - document -y, update -X,-x
    [nchan.c]
    - fix close for non-open ssh1 channels
    [servconf.c servconf.h ssh.h sshd.8 sshd.c ]
    - s/DsaKey/HostDSAKey/, document option
    [sshconnect2.c]
    - respect number_of_password_prompts
    [channels.c channels.h servconf.c servconf.h session.c sshd.8]
    - GatewayPorts for sshd, ok deraadt@
    [ssh-add.1 ssh-agent.1 ssh.1]
    - more doc on: DSA, id_dsa, known_hosts2, authorized_keys2
    [ssh.1]
    - more info on proto 2
    [sshd.8]
    - sync AUTHOR w/ ssh.1
    [key.c key.h sshconnect.c]
    - print key type when talking about host keys
    [packet.c]
    - clear padding in ssh2
    [dsa.c key.c radix.c ssh.h sshconnect1.c uuencode.c uuencode.h]
    - replace broken uuencode w/ libc b64_ntop
    [auth2.c]
    - log failure before sending the reply
    [key.c radix.c uuencode.c]
    - remote trailing comments before calling __b64_pton
    [auth2.c readconf.c readconf.h servconf.c servconf.h ssh.1]
    [sshconnect2.c sshd.8]
    - add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8
 - Bring in b64_ntop and b64_pton from OpenBSD libc (bsd-base64.[ch])
2000-05-07 12:03:14 +10:00
Damien Miller 0437b33e54 - Add Andre Lucas' <[email protected]> patch to read entropy
gathering commands from a text file
2000-05-02 09:56:41 +10:00