[channels.c channels.h clientloop.c kex.c kex.h serverloop.c
sshconnect2.c sshd.c]
more robust rekeying
don't send channel data after rekeying is started.
[clientloop.c kex.c kex.h serverloop.c sshconnect2.c sshd.c]
enable server side rekeying + some rekey related clientup.
todo: we should not send any non-KEX messages after we send KEXINIT
[kex.c kex.h packet.c sshconnect2.c sshd.c]
undo parts of recent my changes: main part of keyexchange does not
need dispatch-callbacks, since application data is delayed until
the keyexchange completes (if i understand the drafts correctly).
add some infrastructure for re-keying.
[compat.c compat.h dh.c dh.h ssh2.h sshconnect2.c sshd.c version.h]
make dh group exchange more flexible, allow min and max group size,
okay markus@, deraadt@
[kex.c kex.h sshconnect2.c sshd.c]
generate a 2*need size (~300 instead of 1024/2048) random private
exponent during the DH key agreement. according to Niels (the great
german advisor) this is safe since /etc/primes contains strong
primes only.
References:
P. C. van Oorschot and M. J. Wiener, On Diffie-Hellman key
agreement with short exponents, In Advances in Cryptology
- EUROCRYPT'96, LNCS 1070, Springer-Verlag, 1996, pp.332-343.
[authfd.c channels.c dh.c log.c readconf.c servconf.c sftp-int.c
ssh.c sshconnect.c sshd.c]
log functions should not be passed strings that end in newline as they
get passed on to syslog() and when logging to stderr, do_log() appends
its own newline.
[sshd.c]
the random session key depends now on the session_key_int
sent by the 'attacker'
dig1 = md5(cookie|session_key_int);
dig2 = md5(dig1|cookie|session_key_int);
fake_session_key = dig1|dig2;
this change is caused by a mail from [email protected]
patch based on discussions with my german advisor [email protected]
[Makefile.in sshd.8 sshconnect2.c readconf.h readconf.c packet.c
sshd.c ssh.c ssh.1 servconf.h servconf.c myproposal.h kex.h kex.c]
1) clean up the MAC support for SSH-2
2) allow you to specify the MAC with 'ssh -m'
3) or the 'MACs' keyword in ssh(d)_config
4) add hmac-{md5,sha1}-96
ok stevesk@, provos@
that I was able to get all the portable bits in the right location. As for
the SKEY comment there is an email out to Markus as to how it should be
resolved. Until then I just #ifdef SKEY/#endif out the whole block.
- (bal) OpenBSD Resync
- [email protected] 2001/01/18 16:20:21
[log-client.c log-server.c log.c readconf.c servconf.c ssh.1 ssh.h
sshd.8 sshd.c]
log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many
systems
- [email protected] 2001/01/18 16:59:59
[auth-passwd.c auth.c auth.h auth1.c auth2.c serverloop.c session.c
session.h sshconnect1.c]
1) removes fake skey from sshd, since this will be much
harder with /usr/libexec/auth/login_XXX
2) share/unify code used in ssh-1 and ssh-2 authentication (server side)
3) make addition of BSD_AUTH and other challenge reponse methods
easier.
- [email protected] 2001/01/18 17:12:43
[auth-chall.c auth2-chall.c]
rename *-skey.c *-chall.c since the files are not skey specific
NEED TO BE GENERATED* =) Refer to to entry "2001/01/16 19:20:06"
for more details.
20010118
- (bal) Super Sized OpenBSD Resync
- [email protected] 2001/01/11 22:14:20 GMT 2001 by markus
[sshd.c]
maxfd+1
- [email protected] 2001/01/13 17:59:18
[ssh-keygen.1]
small ssh-keygen manpage cleanup; [email protected]
- [email protected] 2001/01/13 18:03:07
[scp.c ssh-keygen.c sshd.c]
getopt() returns -1 not EOF; [email protected]
- [email protected] 2001/01/13 18:06:54
[ssh-keyscan.c]
use SSH_DEFAULT_PORT; from [email protected]
- [email protected] 2001/01/13 18:12:47
[ssh-keyscan.c]
free() -> xfree(); fix memory leak; from [email protected]
- [email protected] 2001/01/13 18:14:13
[ssh-add.c]
typo, from [email protected]
- [email protected] 2001/01/13 18:32:50
[packet.c session.c ssh.c sshconnect.c sshd.c]
split out keepalive from packet_interactive (from [email protected])
set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too.
- [email protected] 2001/01/13 18:36:45
[packet.c packet.h]
reorder, typo
- [email protected] 2001/01/13 18:38:00
[auth-options.c]
fix comment
- [email protected] 2001/01/13 18:43:31
[session.c]
Wall
- [email protected] 2001/01/13 19:14:08
[clientloop.h clientloop.c ssh.c]
move callback to headerfile
- [email protected] 2001/01/15 21:40:10
[ssh.c]
use log() instead of stderr
- [email protected] 2001/01/15 21:43:51
[dh.c]
use error() not stderr!
- [email protected] 2001/01/15 21:45:29
[sftp-server.c]
rename must fail if newpath exists, debug off by default
- [email protected] 2001/01/15 21:46:38
[sftp-server.c]
readable long listing for sftp-server, ok deraadt@
- [email protected] 2001/01/16 19:20:06
[key.c ssh-rsa.c]
make "ssh-rsa" key format for ssh2 confirm to the ietf-drafts; from
[email protected]. note that you have to delete older ssh2-rsa keys,
since they are in the wrong format, too. they must be removed from
.ssh/authorized_keys2 and .ssh/known_hosts2, etc.
(cd; grep -v ssh-rsa .ssh/authorized_keys2 > TMP && mv TMP
.ssh/authorized_keys2) additionally, we now check that
BN_num_bits(rsa->n) >= 768.
- [email protected] 2001/01/16 20:54:27
[sftp-server.c]
remove some statics. simpler handles; idea from [email protected]
- [email protected] 2001/01/16 23:58:08
[bufaux.c radix.c sshconnect.h sshconnect1.c]
indent
- (bal) Added bsd-strmode.[ch] since some non-OpenBSD platforms may
be missing such feature.
- (bal) OpenBSD Sync
- [email protected] 2001/01/10 22:56:22
[bufaux.h bufaux.c sftp-server.c sftp.h getput.h]
cleanup sftp-server implementation:
add buffer_get_int64, buffer_put_int64, GET_64BIT, PUT_64BIT
parse SSH2_FILEXFER_ATTR_EXTENDED
send SSH2_FX_EOF if readdir returns no more entries
reply to SSH2_FXP_EXTENDED message
use #defines from the draft
move #definations to sftp.h
more info:
http://www.ietf.org/internet-drafts/draft-ietf-secsh-filexfer-00.txt
- [email protected] 2001/01/10 19:43:20
[sshd.c]
XXX - generate_empheral_server_key() is not safe against races,
because it calls log()
- [email protected] 2001/01/09 21:19:50
[packet.c]
allow TCP_NDELAY for ipv6; from netbsd via itojun@
- [email protected] 2000/12/28 14:25:51
[auth.h auth2.c]
count authentication failures only
- [email protected] 2000/12/28 14:25:03
[sshconnect.c]
fingerprint for MITM attacks, too.
- [email protected] 2000/12/28 12:03:57
[sshd.8 sshd.c]
document -D
- [email protected] 2000/12/27 14:19:21
[serverloop.c]
less chatty
- [email protected] 2000/12/27 12:34
[auth1.c sshconnect2.c sshd.c]
typo
- [email protected] 2000/12/27 12:30:19
[readconf.c readconf.h ssh.1 sshconnect.c]
new option: HostKeyAlias: allow the user to record the host key
under a different name. This is useful for ssh tunneling over
forwarded connections or if you run multiple sshd's on different
ports on the same machine.
- [email protected] 2000/12/27 11:51:53
[ssh.1 ssh.c]
multiple -t force pty allocation, document ORIGINAL_COMMAND
- [email protected] 2000/12/27 11:41:31
[sshd.8]
update for ssh-2
[sshd.c]
source port < 1024 is no longer required for rhosts-rsa since it
adds no additional security.
- [email protected] 2000/12/12 16:11:49
[ssh.1 ssh.c]
rhosts-rsa is no longer automagically disabled if ssh is not privileged.
UsePrivilegedPort=no disables rhosts-rsa _only_ for old servers.
these changes should not change the visible default behaviour of the ssh client.
- (bal) OpenBSD CVS updates:
- [email protected] 2000/11/30 22:54:31
[channels.c]
debug->warn if tried to do -R style fwd w/o client requesting this;
ok neils@
- [email protected] 2000/11/29 20:39:17
[cipher.c]
des_cbc_encrypt -> des_ncbc_encrypt since it already updates the IV
- [email protected] 2000/11/30 18:33:05
[ssh-agent.c]
agents must not dump core, ok niels@
- [email protected] 2000/11/30 07:04:02
[ssh.1]
T is for both protocols
- [email protected] 2000/12/01 00:00:51
[ssh.1]
typo; from [email protected]
- [email protected] 2000/11/30 07:02:35
[ssh.c]
check -T before isatty()
- [email protected] 2000/11/29 13:51:27
[sshconnect.c]
show IP address and hostname when new key is encountered. okay markus@
- [email protected] 2000/11/30 22:53:35
[sshconnect.c]
disable agent/x11/port fwding if hostkey has changed; ok niels@
- [email protected] 2000/11/29 21:11:59
[sshd.c]
sshd -D, startup w/o deamon(), for monitoring scripts or inittab;
from [email protected] and [email protected]; ok niels@
Ben Lindstrom