Lines Matching +full:vm +full:- +full:active +full:- +full:channels
5 openssh-9.9p2
15 OpenBSD-Commit-ID: 7bcd4ffe0fa1e27ff98d451fb9c22f5fae6e610d
25 OpenBSD-Commit-ID: c656ac4abd1504389d1733d85152044b15830217
31 upstream: fix "Match invalid-user" from incorrectly being activated
36 OpenBSD-Commit-ID: 02703b4bd207fafd03788bc4e7774bf80be6c9a8
56 OpenBSD-Commit-ID: 13511fdef7535bdbc35b644c90090013da43a318
62 upstream: fix ML-KEM768x25519 KEX on big-endian systems; spotted by
66 OpenBSD-Commit-ID: 26d81a430811672bc762687166986cad40d28cc0
76 OpenBSD-Commit-ID: b1c6acec66cd5bd1252feff1d02ad7129ced37c7
84 criteria tokeniser to a more shell-like one. Apparently the old tokeniser
93 OpenBSD-Commit-ID: d1eebedb8c902002b75b75debfe1eeea1801f58a
99 gss-serv.c needs sys/param.h
117 02e16ad95fb1f56ab004b01a10aab89f7103c55d did a copy-paste for
124 Remove non-9.9 branch statuses.
148 upstream: openssh-9.9
150 OpenBSD-Commit-ID: 303417285f1a73b9cb7a2ae78d3f493bbbe31f98
156 include openbsd-compat/base64.c license in LICENSE
168 fix bug in recently-added sntrup761 fuzzer
179 relies on using -fwrapv to provide defined over/underflow behaviour, but we
180 use -ftrapv to catch integer errors and abort the program. ok dtucker@
182 OpenBSD-Commit-ID: 8933369b33c17b5f02479503d0a92d87bc3a574b
190 OpenBSD-Commit-ID: 1c81f37b138b8b66abba811fec836388a0f3e6da
204 OpenBSD-Commit-ID: d899c13b0e8061d209298eaf58fe53e3643e967c
212 Simpler and removes some code with the old-style BSD license.
227 OpenBSD-Commit-ID: bf1a77924c125ecdbf03e2f3df8ad13bd3dafdcb
233 upstream: document Match invalid-user
235 OpenBSD-Commit-ID: 2c84a9b517283e9711e2812c1f268081dcb02081
241 upstream: add a "Match invalid-user" predicate to sshd_config Match
249 Match invalid-user
257 OpenBSD-Commit-ID: 93d3a46ca04bbd9d84a94d1e1d9d3a21073fbb07
270 OpenBSD-Commit-ID: 3c8443c427470bb3eac1880aa075cb4864463cb6
283 OpenBSD-Commit-ID: 43cc2533984074c44d0d2f92eb93f661e7a0b09c
293 OpenBSD-Commit-ID: b74b5b0385f2e0379670e2b869318a65b0bc3923
301 string tokeniser, making it possible to use shell-like quoting in Match
304 OpenBSD-Commit-ID: 0877309650b76f624b2194c35dbacaf065e769a5
310 upstream: include pathname in some of the ssh-keygen passphrase
312 prompts. Helps the user know what's going on when ssh-keygen is invoked via
315 OpenBSD-Commit-ID: 613b0bb6cf845b7e787d69a5b314057ceda6a8b6
326 OpenBSD-Commit-ID: ba3776d9da4642443c19dbc015a1333622eb5a4e
346 OpenBSD-Commit-ID: 25c57f22764897242d942853f8cccc5e991ea058
352 upstream: document the mlkem768x25519-sha256 key exchange algorithm
354 OpenBSD-Commit-ID: fa18dccdd9753dd287e62ecab189b3de45672521
384 stubs for ML-KEM KEX functions
394 I can't find a reliable way to detect the features the ML-KEM code
396 can detect) as a proxy for "old compiler" and turn off ML-KEM if
406 ML-KEM code is actually using compound literals, so test for them.
412 test for compiler feature needed for ML-KEM
414 The ML-KEM implementation we uses need the compiler to support
415 C99-style named struct initialisers (e.g foo = {.bar = 1}). We
423 upstream: test mlkem768x25519-sha256
425 OpenBSD-Regress-ID: 7baf6bc39ae55648db1a2bfdc55a624954847611
431 upstream: pull post-quantum ML-KEM/x25519 key exchange out from
433 compile-time flag now than an IANA codepoint has been assigned for the
436 Add mlkem768x25519-sha256 in 2nd KexAlgorithms preference slot.
440 OpenBSD-Commit-ID: 9f50a0fae7d7ae8b27fcca11f8dc6f979207451a
450 MIME-Version: 1.0
451 Content-Type: text/plain; charset=UTF-8
452 Content-Transfer-Encoding: 8bit
456 OpenBSD-Commit-ID: 0b16eec246cda15469ebdcf3b1e2479810e394c5
464 shortnames (e.g "rsa") in user-interface code and require full SSH protocol
465 names (e.g. "ssh-rsa") everywhere else.
469 OpenBSD-Commit-ID: b3d8de9dac37992eab78adbf84fab2fe0d84b187
477 OpenBSD-Commit-ID: 889ae07f2d2193ddc4351711919134664951dd76
483 upstream: envrionment -> environment;
485 OpenBSD-Commit-ID: b719f39c20e8c671ec6135c832d6cc67a595af9c
499 OpenBSD-Regress-ID: 35477da3ba1abd9ca64bc49080c50a9c1350c6ca
507 %-tokens that "Match Exec" and environment variables.
511 OpenBSD-Commit-ID: 12ef521eaa966a9241e684258564f52f1f3c5d37
519 OpenBSD-Commit-ID: 85f09da957dd39fd0abe08fe5ee19393f25c2021
525 upstream: Add experimental support for hybrid post-quantum key exchange
527 ML-KEM768 with ECDH/X25519 from the Internet-draft:
528 https://datatracker.ietf.org/doc/html/draft-kampanakis-curdle-ssh-pq-ke-03
531 final FIPS203 standard ML-KEM using a formally-verified implementation
541 OpenBSD-Commit-ID: 02a8730a570b63fa8acd9913ec66353735dea42c
562 upstream: fix test: -F is the argument to specify a non-default
564 ssh_config, not -f (this is sadly not a new bug)
566 OpenBSD-Regress-ID: 45a7bda4cf33f2cea218507d8b6a55cddbcfb322
576 was added to sshd, and this required a shared-memory hack so the two
577 processes could see what was going on in the dataflow. This shared-memory
581 delayed-compression). That change also permitted removal of the
582 shared-memory hack. Despite removal from the server, the old "zlib" support
583 remained in the client, to allow negotiation with non-OpenSSH daemons which
584 lack the delayed-compression option. This commit deletes support for the
587 different enough that compressed-key-material attacks like BEAST are
589 who care about optional compression support to add delayed-zlib support.
592 OpenBSD-Commit-ID: 6df986f38e4ab389f795a6e39e7c6857a763ba72
598 upstream: sntrup761x25519-sha512 now has an IANA codepoint assigned, so
603 OpenBSD-Commit-ID: eeed8fcde688143a737729d3d56d20ab4353770f
609 Move rekey test into valgrind-2.
612 its own valgrind test, so move it into valgrind-2, which is currently
620 upstream: Use aes128-ctr for MAC tests since default has implicit MAC.
625 OpenBSD-Regress-ID: ff43fed30552afe23d1364526fe8cf88cbfafe1d
643 OpenBSD-Regress-ID: 44a96d6d2f8341d89b7d5fff777502b92ac9e9ba
651 OpenBSD-Commit-ID: 5db7049ad5558dee5b2079d3422e8ddab187c1cc
657 upstream: Use curve25519-sha256 kex where possible.
660 curve25519-sha256 since it's faster than the default and supported even
664 OpenBSD-Regress-ID: 3b27fcc2ae953cb08fd82a0d3155c498b226d6e0
675 OpenBSD-Regress-ID: 7bf9292b4803357efcf0baf7cfbdc8521f212da1
691 OpenBSD-Regress-ID: 5e5c9ff3f7588091ed369e34ac28520490ad2619
699 Used unless overridden by a command-line flag, which simplifies some of
702 OpenBSD-Regress-ID: e7cffa57027088e10336e412b34113969f88cb87
713 OpenBSD-Regress-ID: dab7ce10f4cf6c68827eb8658141272aab3ea262
719 upstream: Remove duplicate curve25519-sha256 kex.
721 curve25519-sha256@libssh.org is the pre-standardization name for the same
724 OpenBSD-Regress-ID: 5a5ee5fa1595a6e140b1cc16040bedf5996a5715
732 ssh uses the same parsing code, now has "-G" to dump its config and is
737 OpenBSD-Regress-ID: 07c3acaf4c728e641033071f4441afc88141b0d0
748 OpenBSD-Commit-ID: 4aecce232c2fe9b16e9217ff6bcb3c848d853e7e
771 OpenBSD-Commit-ID: cbbae59f337a00c9858d6358bc65f74e62261369
779 clarify that rsa-sha2-512 is the default signature scheme when RSA is in use.
782 OpenBSD-Commit-ID: 1d90df71636a04601685d2a10a8233bcc8d4f4c5
792 OpenBSD-Commit-ID: fff3bbefd1b2c45c98cbe45c6b857b15d8a2d364
802 OpenBSD-Commit-ID: 24d4cbb86325275df1f037545aa3b91456e52d25
819 SSH-Copy-ID-Upstream: da5b1abe55b72a16e0430e7598e1573da01779c0
831 SSH-Copy-ID-Upstream: 0e4c4d072747a6568b11a790c29dd1b4ce663d7f
837 restore optionality of -i's argument
839 SSH-Copy-ID-Upstream: f70e3abb510e4eeb040b47894e41828246c1b720
847 SSH-Copy-ID-Upstream: 0b9e08b7707ad16de3c8e6a0410d9f42fbd56997
855 SSH-Copy-ID-Upstream: 1bee96f4793e8ec3fab9f9361204ae58f5cc7cae
863 SSH-Copy-ID-Upstream: ebef3e9c06e0447bff06e9d84b33023cf592e0ba
871 SSH-Copy-ID-Upstream: ecb2b9d10883b9a16df56c83896c9bb47a80cde2
879 SSH-Copy-ID-Upstream: f379adbe06ac2ef1daf0f130752234c7f8b97e3c
887 SSH-Copy-ID-Upstream: ac394b05eead3b91feb7c2ae4129a3e9b892f1e2
893 avoid extra space when no arg given to -i option
895 SSH-Copy-ID-Upstream: feca9e67e6e37c5653445d1c733569d7abb1770e
901 put the -i before -[pP] (matching man pages)
903 The man pages (ssh, sftp & ssh-copy-id) all list -i before the port
907 SSH-Copy-ID-Upstream: 34d5d614172c78f9a42249466c4b81975b8883a1
915 SSH-Copy-ID-Upstream: 335e44d7be78b03962a54c3a5c99a2ff45294a54
923 …- Previously no identity file is shown in "ssh" command output on the line "Now try logging into t…
924 …- This commit makes sure whenever "ssh-copy-id" with "-i" is invoked, it also reflects in "ssh" co…
926 SSH-Copy-ID-Upstream: 58e022ec26cb2315eb3be581d01e0ba787082428
977 OpenBSD-Regress-ID: 0e2d4efb0ed0e392e23cd8fda183fe56531ac446
985 OpenBSD-Regress-ID: 2edfc980628cfef3550649cab8d69fa23b5cd6c4
1001 OpenBSD-Commit-ID: d098744e89f1dc7e5952a6817bef234eced648b5
1017 OpenBSD-Commit-ID: 711ad6f7bd7fb48bf52208f2cf9f108cddb6d41a
1030 detect A->B->A linkages though for performance reason and the fact that it
1037 OpenBSD-Commit-ID: fb3fa9ee2cad3c7e842ebadfd7f5db220c4aaf16
1050 OpenBSD-Commit-ID: 939fbe9ccf52d0d48c5fa53694d6f3bb9927970c
1062 OpenBSD-Commit-ID: 829160ac8ef3ad3409695ce3a3ade835061cae57
1074 OpenBSD-Commit-ID: abd3c57aaa5861517529b322df79b6be35ee67f4
1082 OpenBSD-Commit-ID: 9b63e0e3599d524ddc10edc4f978081382c3548b
1088 Explicitly install libssl-devel cygwin.
1103 OpenBSD-Commit-ID: cee1f7d17597c97bff8e5092af5d136fdb08f81d
1109 upstream: Fix proxy multiplexing (-O proxy) bug
1116 This was caused by my stupidly reusing c->remote_id for mux channel
1121 OpenBSD-Commit-ID: c9f474e0124e3fe456c5e43749b97d75e65b82b2
1129 OpenBSD-Commit-ID: fd77a77779f06d316a314e4540dc57c93fc3369a
1137 OpenBSD-Commit-ID: e6aff005914fa350b896d2be030be3d3b56ec0e8
1151 Class-imposed login restrictions
1167 OpenBSD-Commit-ID: 81c778c76dea7ef407603caa157eb0c381c52ad2
1175 OpenBSD-Commit-ID: 42d322d37f13aa075ae7b1ad9eef591e20b89717
1181 upstream: fix grammar: "a pattern lists" -> "one or more pattern
1185 OpenBSD-Commit-ID: f3c844763398faa9800687e8ff6621225498202a
1199 Add 9.8 branch to ci-status page.
1202 Author: Samuel Thibault <samuel.thibault@ens-lyon.org>
1209 -Werror=implicit-function-declaration this is really required. While at
1223 upstream: openssh-9.8
1225 OpenBSD-Commit-ID: 5f8b89e38a4c5f7c6d52ffa19f796d49f36fab19
1234 flag indicates that the channels code enqueued a packet on _this_ ppoll()
1238 OpenBSD-Commit-ID: 009b74fd2769b36b5284a0188ade182f00564136
1249 OpenBSD-Regress-ID: 821feca4a4bebe491944e624c8f7f2990b891415
1257 OpenBSD-Commit-ID: 5fb04f298ed155053f3fbfdf0c6fe7cdf84bbfa2
1265 OpenBSD-Commit-ID: 3e30d7b0615e2707f6bbe70f61b1c2f72f78161b
1273 OpenBSD-Commit-ID: 83b7ff34433d79595e9c2a5d2a561a6660251245
1283 OpenBSD-Commit-ID: 65815a39564e431414aed7c5ace8076f4e9ca741
1292 signal-safe rules. This is a good rule of thumb: Handlers should be written
1297 OpenBSD-Commit-ID: 14168ae8368aab76e4ed79e17a667cb46f404ecd
1308 OpenBSD-Commit-ID: 7749b56419a7c9dcfe4c6c04811e429813346c62
1314 upstream: - uppercase start of sentence - correct sentence grammar
1318 OpenBSD-Commit-ID: 1ec4b0fdb633a43667f2c8fff1d600bd647dde25
1326 OpenBSD-Commit-ID: c29734d36c21003973b15c1c9965c35f36cef30c
1341 a host arg when querying supported ciphers and macs via "-c/-m
1345 OpenBSD-Regress-ID: 98eb863a3f0363416922efb273885e6b3c7f68d4
1356 OpenBSD-Regress-ID: e0129eb2b1d31771105903a8055216fbba20a770
1364 OpenBSD-Commit-ID: 7df01e648a0723418c554e64a9f2b6d38db060a6
1375 OpenBSD-Commit-ID: eb7eb36371e1ac01050b32b70fb2b3e5d98e72f5
1383 OpenBSD-Commit-ID: 8515f55a15f02836ba657df341415f63c60526ca
1389 Move -f to the place needed to restart sshd.
1395 Need to supply "-f" to restart sshd.
1404 v2024.85) "-m help" doesn't seem to work. Enable all supported pubkey
1407 OpenBSD-Regress-ID: 4f95556a49ee9f621789f25217c367a33d2745ca
1416 Only test diffie-hellman kex if OpenSSH is compiled with support for it.
1418 OpenBSD-Regress-ID: a5d09ef9bbd171f9e4ec73ed0d9eeb49a8878e97
1429 OpenBSD-Regress-ID: 8f91f12604cddb9f8d93aa34f3f93a3f6074395d
1438 the running sshd and newly installed sshd-session will cause the
1445 Remove macos-11 runner.
1459 upstream: Re-enable ssh-dss tests
1463 OpenBSD-Regress-ID: bbfaf8c17f2b50a2d46ac35cb97af99b990c990d
1471 OpenBSD-Regress-ID: abfd4457d99d8cc1417fd22ca2c570270f74c1cf
1496 OpenBSD-Commit-ID: 961ef594e46dd2dcade8dd5721fa565cee79ffed
1502 upstream: promote connection-closed messages from verbose to info
1507 OpenBSD-Commit-ID: 0c8bfaf5e9fdff945cee09ac21e641f6c5d65d3c
1534 OpenBSD-Regress-ID: d0cc9efca7833e673ea7b0cb3a679a3acee8d4c7
1542 OpenBSD-Regress-ID: 90c9ac224db454637baf1ebee5857e007321e824
1552 OpenBSD-Regress-ID: 70bda39c83e3fc9d0f3c1fad4542ed33e173d468
1558 upstream: sort -q in the options list;
1560 OpenBSD-Commit-ID: 6839b38378f38f754de638a5e988c13b4164cc7c
1570 OpenBSD-Commit-ID: e698e69bea19bd52971d253f2b1094490c4701f7
1576 upstream: ssh-keyscan -q man bits
1578 OpenBSD-Commit-ID: ba28d0e1ac609a4c99c453e57e86560c79079db1
1584 skip penalty-expire test in valgrind test env
1596 OpenBSD-Regress-ID: f56811064f3e3cb52ee73a206b8c2a06af1c8791
1614 upstream: don't redirect stderr for ssh-keyscan we expect to succeed
1616 OpenBSD-Regress-ID: 8878b8eb4e070ed2e343166d3eb86db4a08a216c
1627 Add a -q flag to shut them up.
1631 OpenBSD-Commit-ID: bec813de56a71adb5c1a76adcf49621130d24264
1639 OpenBSD-Commit-ID: d65a99666202a8188c4991c18d14374a229f7be5
1645 upstream: specify an algorithm for ssh-keyscan, otherwise it will make
1649 OpenBSD-Regress-ID: 6e910f3315c4345053db1bf5cbf61826b194d0b9
1659 differently-named copies/links to the sshd binary.
1661 Splitting sshd into sshd/sshd-session broke this, as the process
1662 that starts PAM is always sshd-session and the user has no control
1676 this shuffles the contents of this file to make it easy to un-ignore
1691 Cygwin doesn't support FD passing and so used to disable post-auth
1699 the post-auth user process rather than the monitor.
1702 with (this appears to be the case on Cygwin), or the post-auth
1706 Keeping privileges here is bad, but the non-Cygwin systems that set
1716 sshd-session attempting to use options.kerberos_authentication to
1743 OpenBSD-Commit-ID: 12637ed0aa4d5f1f3e702da42ea967cbd8bfdfd9
1751 OpenBSD-Commit-ID: 54151ecdecfa1b67dcdda4fd24826ef6e2148ad4
1761 OpenBSD-Commit-ID: 02a093f4ab4f8f83f0cd1ea2bb35b9ca420448f0
1771 OpenBSD-Regress-ID: 96fec579af228f87a036e94801eb294af9074625
1777 upstream: reap the pre-auth [net] child if it hangs up during privsep
1781 OpenBSD-Commit-ID: f7341605bf08c4c15830910446e6775323f2f8cb
1789 OpenBSD-Commit-ID: 8dc2fd21eebd8830c4a4d25461ac4fe228e11156
1795 upstream: fix off-by-one comparison for PerSourcePenalty
1797 OpenBSD-Commit-ID: af4f5d01c41ef870b23e55655bfbf73474a6c02b
1805 OpenBSD-Commit-ID: 72e2c5b69f151c08a7c5bf5ad929b97a92c273df
1815 OpenBSD-Commit-ID: b981288bddfb097aad269f62df4081c688ce0034
1825 OpenBSD-Commit-ID: 24dbd400aa381ac96be7ed2dd49018487dfef6ce
1833 OpenBSD-Commit-ID: b317930e06b51819c1a2bc6a4359764fecfb1c2d
1841 OpenBSD-Commit-ID: 581f60f73099083392887206860229ab104620ed
1851 OpenBSD-Commit-ID: 1e89572397dda83433d58c4fa6333a08f51170d4
1861 OpenBSD-Commit-ID: 0a9fb10bc9f7d577afe2da3f498a08bc431115b9
1880 OpenBSD-Commit-ID: 24a0e5c23d37e5a63e16d2c6da3920a51078f6ce
1888 in-progress connections.
1890 OpenBSD-Commit-ID: 20389da6264f2c97ac3463edfaa1182c212d420c
1898 OpenBSD-Regress-ID: a1af13d411b25a727742644459d26480b9a1b0f1
1906 OpenBSD-Regress-ID: de4ef0e32e3ab85ff3a6c36eb08d1909c0dd1b4a
1914 OpenBSD-Regress-ID: 50316e0d1ae0c0a057a45af042253e54ce23d11c
1924 OpenBSD-Regress-ID: 5236c6d1c823997aac5a35e2915da30f1903bec7
1932 OpenBSD-Commit-ID: d42cb895ee4542098050367fc35321c9303f003a
1944 status of its child pre-auth session processes. Through the exit
1971 OpenBSD-Commit-ID: 89ded70eccb2b4926ef0366a4d58a693de366cca
1983 upstream: enable -fret-clean on amd64, for libc libcrypto ld.so
1985 kernel, and all the ssh tools. The dynamic objects are entirely ret-clean,
1986 static binaries will contain a blend of cleaning and non-cleaning callers.
1988 OpenBSD-Commit-ID: 112aacedd3b61cc5c34b1fa6d9fb759214179172
2002 separate sshd-session process - reserve them early and fatal if we can't
2003 dup2(2) them later. The pre-split fallback to re-reading the configuration
2004 files is not possible, so sshd-session absolutely requires the fd the
2009 OpenBSD-Commit-ID: 308a98ef3c8a6665ebf92c7c9a0fc9600ccd7065
2024 sshd as non-root)
2036 upstream: warn when -r (deprecated option to disable re-exec) is
2040 OpenBSD-Commit-ID: 73145ef5150edbe3ce7889f0844ed8fa6155f551
2048 OpenBSD-Commit-ID: edfa72eb06bfa65da30fabf7d2fe76d2d33f77bf
2056 OpenBSD-Commit-ID: dd137396828171eb19e4911581812ca58de6c578
2064 OpenBSD-Commit-ID: 57cc1c98d4f998981473734f144b904af7d178a2
2074 OpenBSD-Commit-ID: 416fb3970b7e73c76d2963c4f00cf96f2b2ee2fb
2080 upstream: Do not pass -Werror twice when building with clang.
2082 OpenBSD-Commit-ID: 5f378c38ad8976d507786dc4db9283a879ec8cd0
2088 upstream: Do not pass -Werror if building with gcc 3, for asn1.h
2092 OpenBSD-Commit-ID: fb39324748824cb0387e9d67c41d1bef945c54ea
2105 OpenBSD-Regress-ID: 48f4f5946276f975667141957d25441b3c9a50e2
2111 upstream: Add missing kex-names.c source file required since the
2115 OpenBSD-Regress-ID: ca666223f828fc4b069cb9016bff1eb50faf9fbb
2121 upstream: remove duplicate copy of relink kit for sshd-session
2123 OpenBSD-Commit-ID: 6d2ded4cd91d4d727c2b26e099b91ea935bed504
2131 OpenBSD-Commit-ID: 6d9065dadea5f14a01bece0dbfe2fba1be31c693
2139 OpenBSD-Commit-ID: f51ea791d45c15d4927eb4ae7d877ccc1e5a2aab
2145 upstream: -Werror was turned on (probably just for development),
2149 OpenBSD-Commit-ID: 7f698df54384b437ce33ab7405f0b86c87019e86
2155 attempt at updating RPM specs for sshd-session
2163 OpenBSD-Commit-ID: aa6ef0778a1f1bde0d73efba72a777c48d2bd010
2171 OpenBSD-Commit-ID: bdea29bb3ed2a5a7782999c4c663b219d2270483
2177 upstream: allow overriding the sshd-session binary path
2179 OpenBSD-Regress-ID: 5058cd1c4b6ca1a15474e33546142931d9f964da
2185 upstream: Since ssh-agent(1) is only readable by root by now, use
2189 OpenBSD-Regress-ID: 24eb40de2e6b0ace185caaba35e2d470331ffe68
2199 OpenBSD-Commit-ID: 66d69e22b1c072c694a7267c847f212284614ed3
2205 upstream: construct and install a relink-kit for sshd-session ok
2209 OpenBSD-Commit-ID: 8b3820adb4da4e139c4b3cffbcc0bde9f08bf0c6
2215 Makefile support for sshd-session
2223 OpenBSD-Commit-ID: 4b7be4434d8799f02365552b641a7a70a7ebeb2f
2236 session handling will be performed by a new sshd-session binary that the
2240 up for future work on the sshd-session binary.
2247 OpenBSD-Commit-ID: 43c04a1ab96cdbdeb53d2df0125a6d42c5f19934
2257 OpenBSD-Commit-ID: 8b0cd2c0dee75fb053718f442aa89510b684610b
2265 Authored with Space Meyer <git at the-space dot agency>
2269 OpenBSD-Commit-ID: 81db602e4cb407baae472689db1c222ed7b2afa3
2284 echo localhost | ssh-keyscan -f - -f -
2286 While at it, make stdin-related error messages nicer.
2292 OpenBSD-Commit-ID: 48e9b7938e2fa2f9bd47e6de6df66a31e0b375d3
2304 upstream: fix home-directory extension implementation, it always
2310 OpenBSD-Commit-ID: 5afd775eab7f9cbe222d7fbae4c793de6c3b3d28
2322 OpenBSD-Commit-ID: 80bdc7ffe0358dc090eb9b93e6dedb2b087b24cd
2332 OpenBSD-Commit-ID: 73dbbe82ea16f73ce1d044d3232bc869ae2f2ce8
2344 OpenBSD-Commit-ID: 0dfb69998cfdb3fa00cbb0e7809e7d2f6126e3df
2360 OpenBSD-Commit-ID: c0c0f89de5294a166578f071eade2501929c4686
2371 OpenBSD-Commit-ID: 364087e4a395ff9b2f42bf3aefdb2090bb23643a
2379 OpenBSD-Commit-ID: dd9702fd43de546bc6a3f4f025c74d6f3692a0d4
2385 upstream: set right mode on ssh-agent at boot-time
2390 OpenBSD-Commit-ID: 662b5056a2c6171563e1626f9c69f27862b5e7af
2402 OpenBSD-Commit-ID: 866cfcc1955aef8f3fc32da0b70c353a1b859f2e
2412 OpenBSD-Commit-ID: cec14a76af2eb7b225300c80fc0e21052be67b05
2422 OpenBSD-Commit-ID: 7bb2dd3d6d1f288dac14247d1de446e3d7ba8b8e
2428 upstream: rewrite convtime() to use a isdigit-scanner and
2433 OpenBSD-Commit-ID: 4b1ef826bb16047aea3f3bdcb385b72ffd450abc
2443 OpenBSD-Commit-ID: 3d14433e39fd558f662d3b0431c4c555ef920481
2449 upstream: Replace non-idiomatic strtoul(, 16) to parse a region
2451 of 2-character hex sequences with a low-level replacement designed just for
2454 OpenBSD-Commit-ID: 67bab8b8a4329a19a0add5085eacd6f4cc215e85
2460 upstream: Use strtonum() instead of severely non-idomatic
2465 OpenBSD-Commit-ID: c82d95e3ccbfedfc91a8041c2f8bf0cf987d1501
2471 upstream: also create a relink kit for ssh-agent, since it is a
2473 long-running setgid program carrying keys with some (not very powerful)
2474 communication channels. solution for testing the binary from dtucker.
2477 OpenBSD-Commit-ID: 2fe8d707ae35ba23c7916adcb818bb5b66837ba0
2483 upstream: new-style relink kit for sshd. The old scheme created
2486 new way a narrow-purposed install.sh script is created and shipped with the
2489 OpenBSD-Commit-ID: ef9341d5a50f0d33e3a6fbe995e92964bc7ef2d3
2497 Signed-off-by: renmingshuai <renmingshuai@huawei.com>
2510 [0] https://openssl.org/policies/general/versioning-policy.html
2525 Add newly-released OpenSSL 3.3.0, and add tests against the 3.1 and
2558 If --enable/disable-dsa-keys is not specified, set based on what OpenSSL
2570 OpenBSD-Commit-ID: d17dbf47554de2d752061592f95b5d772baab50b
2573 Author: Eero Häkkinen <Eero+git@xn--Hkkinen-5wa.fi>
2580 when a keyboard-interactive authentication method is in use.
2586 Rearrange selfhosted VM scheduling.
2592 VM: tests run in a virtual machine.
2597 EPHEMERAL VMs can have multiple instances of any given VM can exist
2604 DEBUG_ACTIONS: enable "set -x" in scripts for debugging.
2610 add new token-based signing key for dtucker@
2617 Date: Tue Mar 12 03:59:12 2024 -0700
2632 OpenBSD-Commit-ID: 1ac1f9c45da44eabbae89375393c662349239257
2638 upstream: Use egrep instead of grep -E.
2641 in -portable.
2643 OpenBSD-Regress-ID: ff82260eb0db1f11130200b25d820cf73753bbe3
2649 upstream: test -h is the POSIXly way of testing for a symlink. Reduces
2653 OpenBSD-Regress-ID: 6f31cd6e231e3b8c5c2ca0307573ccb7484bff7d
2673 OpenBSD-Regress-ID: b4852bf97ac8fb2e3530f2d5f999edd66058d7bc
2681 OpenBSD-Regress-ID: 5039bde24d33d809aebfa8d3ad7fe9053224e6f8
2687 upstream: Improve shell portability: grep -q is not portable so
2694 OpenBSD-Regress-ID: 9ae876a8ec4c4725f1e9820a0667360ee2398337
2705 OpenBSD-Regress-ID: da32e5be19299cb4f0f7de7f29c11257a62d6949
2715 OpenBSD-Regress-ID: 6a83a693602eb0312f06a4ad2cd6f40d99d24b26
2725 OpenBSD-Regress-ID: 835ed03c1b04ad46be82e674495521f11b840191
2769 OpenBSD-Commit-ID: ad3d1486d105b008c93e952d158e5af4d9d4c531
2775 upstream: Clarify how literal IPv6 addresses can be used in -J mode
2779 OpenBSD-Commit-ID: 524ddae97746b3563ad4a887dfd0a6e6ba114c50
2791 Move xpg4 'id' handling into test-exec.sh.
2794 replacements in test-exec.sh. This brings percent.sh back into sync
2801 Update branches shown on ci-status to 9.7 and 9.6.
2807 Improve detection of -fzero-call-used-regs=used.
2812 Signed-off-by: Darren Tucker <dtucker@dtucker.net>
2830 upstream: openssh-9.7
2832 OpenBSD-Commit-ID: 618ececf58b8cdae016b149787af06240f7b0cbc
2859 OpenBSD-Commit-ID: e58f18042b86425405ca09e6e9d7dfa1df9f5f7f
2865 upstream: skip more whitespace, fixes find-principals on
2869 OpenBSD-Commit-ID: b3a22a2afd753d70766f34bc7f309c03706b5298
2880 OpenBSD-Regress-ID: f68d79e7f00caa8d216ebe00ee5f0adbb944062a
2886 Prefer openssl binary from --with-ssl-dir directory.
2888 Use openssl in the directory specified by --with-ssl-dir as long
2899 OpenBSD-Commit-ID: 97d96a166b1ad4b8d229864a553e3e56d3116860
2905 upstream: wrap a few PKCS#11-specific bits in ENABLE_PKCS11
2907 OpenBSD-Commit-ID: 463e4a69eef3426a43a2b922c4e7b2011885d923
2915 Unbreaks "make test" when compiled --without-openssl.
2923 add a --without-retpoline configure option
2935 OpenBSD-Commit-ID: 208839699939721f452a4418afc028a9f9d3d8af
2943 to the active configuration. This fixes the config parser from erroneously
2952 OpenBSD-Commit-ID: 7f196cba634c2a3dba115f3fac3c4635a2199491
2970 upstream: explain arguments of internal-sftp GHPR#454 from Niklas
2973 MIME-Version: 1.0
2974 Content-Type: text/plain; charset=UTF-8
2975 Content-Transfer-Encoding: 8bit
2977 OpenBSD-Commit-ID: 0335d641ae6b5b6201b9ffd5dd06345ebbd0a3f3
2986 MIME-Version: 1.0
2987 Content-Type: text/plain; charset=UTF-8
2988 Content-Transfer-Encoding: 8bit
2990 OpenBSD-Commit-ID: d37bc8786317a11649c62ff5e2936441186ef7a0
2998 OpenBSD-Commit-ID: d59c52559f926fa82859035d79749fbb4a3ce18a
3008 OpenBSD-Commit-ID: 05b23b772677d48aa82eefd7ebebd369ae758908
3018 OpenBSD-Commit-ID: 4e412d59b3f557d431f1d81c715a3bc0491cc677
3028 OpenBSD-Commit-ID: e11023aeb3f30b77a674e37b8292c862926d5dc6
3036 OpenBSD-Regress-ID: b4c0ccfa4006a1bc5dfd99ccf21c854d3ce2aee0
3047 OpenBSD-Regress-ID: dd28d97d48efe7329a396d0d505ee2907bf7fc57
3060 OpenBSD-Regress-ID: c25eaccc3c91bc874400f7c85ce40e9032358c1c
3068 OpenBSD-Commit-ID: 509bb19bb9762a4b3b589af98bac2e730541b6d4
3076 OpenBSD-Commit-ID: b24680bc755b621ea801ff8edf6f0f02b68edae1
3105 Add --disable-fd-passing option.
3107 .. and enable for the minix3 test VM. This will cause it to more reliably
3128 OpenBSD-Commit-ID: bf9e4a1049562ee4322684fbdce07142f04fdbb7
3147 OpenBSD-Regress-ID: 8780a7250bf742b33010e9336359a1c516f2d7b5
3157 OpenBSD-Regress-ID: dfc27b5574e3f19dc4043395594cea5f90b8572a
3167 OpenBSD-Commit-ID: 9dd417b6eec3cf67e870f147464a8d93f076dce7
3173 upstream: make DSA key support compile-time optional, defaulting to
3179 OpenBSD-Commit-ID: 4f8e98fc1fd6de399d0921d5b31b3127a03f581d
3187 OpenBSD-Commit-ID: cb07eb06e15fa2334660ac73e98f29b6a1931984
3197 OpenBSD-Regress-ID: f10d19f697024e9941acad7c2057f73d6eacb8a2
3205 that watches all open channels and will close all open channels if there is
3207 the existing per-channel timeouts added a few releases ago.
3209 This supports use-cases like having a session + x11 forwarding channel
3211 actively used. The global timeout would allow closing both channels when
3216 OpenBSD-Commit-ID: 0054157d24d2eaa5dc1a9a9859afefc13d1d7eb3
3222 upstream: adapt ssh_api.c code for kex-strict
3226 OpenBSD-Commit-ID: 4d9f256852af2a5b882b12cae9447f8f00f933ac
3242 Date: Tue Dec 19 11:48:20 2023 -0500
3244 Fix compilation error in ssh-pcks11-client.c
3261 OpenBSD-Commit-ID: ad0734fe5916d2dc7dd02b588906cea4df0482fb
3267 upstream: fix missing field in users-groups-by-id@openssh.com reply
3273 OpenBSD-Commit-ID: ff5733ff6ef4cd24e0758ebeed557aa91184c674
3279 upstream: make kex-strict section more explicit about its intent:
3283 OpenBSD-Commit-ID: fc33a2d7f3b7013a7fb7500bdbaa8254ebc88116
3295 unbreak fuzzers - missing pkcs11_make_cert()
3312 upstream: remove ext-info-* in the kex.c code, not in callers;
3316 OpenBSD-Commit-ID: c06fe2d3a0605c517ff7d65e38ec7b2d1b0b2799
3324 OpenBSD-Commit-ID: 77140b520a43375b886e535eb8bd842a268f9368
3332 OpenBSD-Commit-ID: 5a636f6ca7f25bfe775df4952f7aac90a7fcbbee
3340 OpenBSD-Commit-ID: 9d01f2e9d59a999d5d42fc3b3efcf8dfb892e31b
3346 upstream: sort -C, and add to usage(); ok djm
3348 OpenBSD-Commit-ID: 80141b2a5d60c8593e3c65ca3c53c431262c812f
3356 OpenBSD-Commit-ID: e289576ee5651528404cb2fb68945556052cf83f
3364 OpenBSD-Commit-ID: 9422289747c35ccb7b31d0e1888ccd5e74ad566a
3370 better detection of broken -fzero-call-used-regs
3376 > for ‘-fzero-call-used-regs’ on this target
3378 This extends the autoconf will-it-work test with a similarly-
3399 upstream: regress test for agent PKCS#11-backed certificates
3401 OpenBSD-Regress-ID: 38f681777cb944a8cc3bf9d0ad62959a16764df9
3409 OpenBSD-Regress-ID: b2f26ae95d609d12257b43aef7cd7714c82618ff
3415 upstream: openssh-9.6
3417 OpenBSD-Commit-ID: 21759837cf0e0092d9a2079f8fb562071c11016b
3423 upstream: ssh-agent: record failed session-bind attempts
3425 Record failed attempts to session-bind a connection and refuse signing
3429 recognised by an older ssh-agent, that consequently causes session-bind
3431 and ssh-agent(1) of different versions on the same host). Previously,
3437 OpenBSD-Commit-ID: b0fdd023e920aa4831413f640de4c5307b53552e
3450 interactions with user-specified ProxyCommand and other directives
3467 OpenBSD-Commit-ID: 3b487348b5964f3e77b6b4d3da4c3b439e94b2d9
3475 This makes ssh/sshd more strict in handling non-compliant peers that
3483 OpenBSD-Commit-ID: 811e21b41831eba3dd7f67b3d409a438f20d3037
3492 ssh-add to keys loaded from PKCS#11 tokens in the agent.
3496 OpenBSD-Commit-ID: bb5433cd28ede2bc910996eb3c0b53e20f86037f
3508 OpenBSD-Commit-ID: 36df3afb8eb94eec6b2541f063d0d164ef8b488d
3514 upstream: add "ext-info-in-auth@openssh.com" extension
3527 OpenBSD-Commit-ID: 1de7da7f2b6c32a46043d75fcd49b0cbb7db7779
3543 OpenBSD-Commit-ID: 2a66ac962f0a630d7945fee54004ed9e9c439f14
3549 better detection of broken -fzero-call-used-regs
3570 OpenBSD-Commit-ID: 5cfabc0b7c6c7ab473666df314f377b1f15420b1
3578 OpenBSD-Commit-ID: 594f61ad4819ff5c72dfe99ba666a17f0e1030ae
3588 OpenBSD-Commit-ID: 2bcddd695872a1bef137cfff7823044dcded90ea
3600 Use non-zero arg in compiler test program.
3603 can cause divide-by-zero exceptions which might show up in logs.
3613 OpenBSD-Commit-ID: bf85362addbe2134c3d8c4b80f16601fbff823b7
3621 OpenBSD-Commit-ID: 1c3641be10c2f4fbad2a1b088a441d072e18bf16
3627 Add an Ubuntu 22.04 test VM.
3630 it is over there, but having a local VM makes debugging much easier.
3636 Add gcc-12 -Werror test on Ubuntu 22.04.
3638 Explictly specify gcc-11 on Ubuntu 22.04 (it's the system compiler).
3646 ... and since we're testing for flags with -Werror, this caused
3647 configure to mis-detect compiler flags.
3669 Add fbsd14 VM to test pool.
3675 Expand -fzero-call-used-regs test to cover gcc 11.
3677 It turns out that gcc also has some problems with -fzero-call-used-regs,
3687 Stop using -fzero-call-used-regs=all
3690 clang. Only use -fzero-call-used-regs=used which is less
3712 OpenBSD-Commit-ID: 29cea900ddd8b04a4d1968da5c4a893be2ebd9e6
3724 OpenBSD-Commit-ID: 6c7d7751f6cd055126b2b268a7b64dcafa447439
3737 OpenBSD-Commit-ID: c292f738db410f729190f92de100c39ec931a4f1
3751 OpenBSD-Commit-ID: 1c177d7c3becc1d71bc8763eecf61873a1d3884c
3767 ... instead of relying on installed one. Fixes test failures in -portable
3770 OpenBSD-Regress-ID: b6d6ba71c23209c616efc805a60d9a445d53a685
3776 Put long-running test targets on hipri runners.
3779 reasons, so label them for "libvirt-hipri" runners so that they can
3790 OpenBSD-Regress-ID: eb48610282f6371672bdf2a8b5d2aa33cfbd322b
3805 OpenBSD-Regress-ID: 70d58df7503db699de579a9479300e5f3735f4ee
3815 OpenBSD-Regress-ID: dbad2f5ece839658ef8af3376cb1fb1cabe2e324
3821 upstream: move PKCS#11 setup code to test-exec.sh so it can be reused
3825 OpenBSD-Regress-ID: 1d29e6be40f994419795d9e660a8d07f538f0acb
3841 OpenBSD-Regress-ID: 07705c31de30bab9601a95daf1ee6bef821dd262
3847 Add obsd74 test VM and retire obsd69 and obsd70.
3881 OpenBSD-Regress-ID: f1b20a476734e885078c481f1324c9ea03af991e
3891 OpenBSD-Regress-ID: 7ea21b5f6fc4506165093b2123d88d20ff13a4f0
3899 OpenBSD-Regress-ID: b0abf81c24ac6c21f367233663228ba16fa96a46
3907 OpenBSD-Commit-ID: 95f5dd6107e8902b87dc5b005ef2b53f1ff378b8
3917 OpenBSD-Regress-ID: cbf2701bc347c2f19d907f113779c666f1ecae4a
3929 OpenBSD-Regress-ID: 3b7f65c8f409c328bcd4b704f60cb3d31746f045
3943 Now that configure finds these for us we can remove these -portable
3952 This will let us remove some -portable specific changes from
3953 test-exec.sh.
3963 OpenBSD-Regress-ID: 7de0e00518fb0c8fdc5f243b7f82f523c936049c
3974 OpenBSD-Regress-ID: 8cb898c414fcdb252ca6328896b0687acdaee496
3980 Update openssl-devel dependency in RPM spec.
3983 build with --without-openssl elsewhere.
4002 This lets us compile Portable with -Werror with when OpenSSL doesn't have
4005 OpenBSD-Commit-ID: e02e4b4af351946562a7caee905da60eff16ba29
4011 run t-extra regress tests
4013 This exposes the t-extra regress tests (including agent-pkcs11.sh) as
4014 a new extra-tests target in the top level Makefile and runs them by
4021 Don't use make -j2.
4039 OpenBSD-Regress-ID: 98a2a6b9333743274359e3c0f0e65cf919a591d1
4049 OpenBSD-Regress-ID: c3297af8f07717f1d400a5d34529962f1a76b5a3
4055 upstream: 64 %-expansion keys ought to be enough for anybody; ok
4059 OpenBSD-Commit-ID: 84070f8001ec22ff5d669f836b62f206e08c5787
4067 OpenBSD-Commit-ID: 251c0263e1759a921341c7efe7f1d4c73e1c70f4
4087 OpenBSD-Commit-ID: ce9983f7efe6a178db90dc5c1698df025df5e339
4097 OpenBSD-Commit-ID: 0daa41e0525ae63cae4483519ecaa37ac485d94c
4108 OpenBSD-Commit-ID: 5c14e1aabcddedb95cdf972283d9c0d5083229e7
4116 OpenBSD-Commit-ID: 191a85639477dcb5fa1616d270d93b7c8d5c1dfd
4122 upstream: ssh -Q does not make sense with other command-line options,
4126 OpenBSD-Commit-ID: 00a747f0655c12122bbb77c2796be0013c105361
4136 OpenBSD-Commit-ID: 55630b26f390ac063980cfe7ad8c54b03284ef02
4146 OpenBSD-Commit-ID: 01b85c91757e6b057e9b23b8a23f96415c3c7174
4154 OpenBSD-Commit-ID: 1b4fb590ef731099349a7d468b77f02b240ac926
4166 OpenBSD-Commit-ID: 0bd8db8a595334ca86bca8f36e23fc0395315765
4172 upstream: s/%.100s/%s/ in SSH- banner construction as there's no
4177 OpenBSD-Commit-ID: 0ef73304b9bf3e534c60900cd84ab699f859ebcd
4189 OpenBSD-Commit-ID: 91fa5497c9dc6883064624ac27813a567883fdce
4199 OpenBSD-Commit-ID: e61795b453d4892d2c99ce1039112c4a00250e03
4207 OpenBSD-Regress-ID: 6a8edf0dc39941298e3780b147b10c0a600b4fee
4218 OpenBSD-Regress-ID: b3f1292115fed65765d0a95414df16e27772d81c
4228 OpenBSD-Regress-ID: f063330f1bebbcd373100afccebc91a965b14496
4236 OpenBSD-Commit-ID: 493f95121567e5ab0d9dd1150f873b5535ca0195
4248 upstream: openssh-9.5
4250 OpenBSD-Commit-ID: 5e0af680480bd3b6f5560cf840ad032d48fd6b16
4260 OpenBSD-Commit-ID: aa1450a54fcee2f153ef70368d90edb1e7019113
4268 OpenBSD-Commit-ID: ff5bda21a83ec013db683e282256a85201d2dc4b
4284 OpenBSD-Commit-ID: 2f5fba917b5d4fcf93d9e0b0756c7f63189e228e
4290 upstream: rename remote_glob() -> sftp_glob() to match other API
4292 OpenBSD-Commit-ID: d9dfb3708d824ec02970a84d96cf5937e0887229
4300 OpenBSD-Commit-ID: 69285e0ce962a7c6b0ab5f17a293c60a0a360a18
4306 Use zero-call-used-regs=used with Apple compilers.
4310 have the clang-15 zero-call-used-regs=all bug, so for now use the value
4323 OpenBSD-Commit-ID: 05f61d051ab418fcfc4857ff306e420037502382
4333 OpenBSD-Commit-ID: c61caa4a5a667ee20bb1042098861e6c72c69002
4339 upstream: regress test recursive remote-remote directories copies where
4343 also remove errant `set -x` that snuck in at some point
4345 OpenBSD-Regress-ID: 1c94a48bdbd633ef2285954ee257725cd7bc456f
4351 upstream: fix recursive remote-remote copies of directories that
4355 OpenBSD-Commit-ID: 7e19d2ae09b4f941bf8eecc3955c9120171da37f
4365 OpenBSD-Regress-ID: eaa4c29cc5cddff4e72a16bcce14aeb1ecfc94b9
4373 OpenSSH and it shows - the function names are terrible.
4378 change from returning a pointer to a static variable (error-prone) to
4379 taking a pointer to a caller-provided receiver.
4381 OpenBSD-Commit-ID: eb54d6a72d0bbba4d623e2175cf5cc4c75dc2ba4
4392 OpenBSD-Commit-ID: 9760fda668eaa94a992250d7670dfbc62a45197c
4400 OpenBSD-Regress-ID: 5f8135da3bfda71067084c048d717b0e8793e87c
4410 OpenBSD-Commit-ID: 3911d18a826a2d2fe7e4519075cf3e57af439722
4421 OpenBSD-Commit-ID: e683dfca6bdcbc3cc339bb6c6517c0c4736a547f
4430 subsystem configuration (sftp-server) is unlikely to be affected.
4432 OpenBSD-Commit-ID: 8ffa296aeca981de5b0945242ce75aa6dee479bf
4443 OpenBSD-Commit-ID: fc90ed2cc0c18d4eb8e33d2c5e98d25f282588ce
4453 OpenBSD-Commit-ID: 647460a212b916540016d066568816507375fd7f
4466 OpenBSD-Commit-ID: f498beaad19c8cdcc357381a60df4a9c69858b3f
4472 upstream: trigger keystroke timing obfucation only if the channels
4475 obfuscatior for non-channels data like ClientAlive probes and also fixes a
4481 OpenBSD-Commit-ID: d98f32dc62d7663ff4660e4556e184032a0db123
4492 OpenBSD-Commit-ID: 5c270d35f7d2974db5c1646e9c64188f9393be31
4503 OpenBSD-Commit-ID: f9776c7b0065ba7c3bbe50431fd3b629f44314d0
4514 OpenBSD-Commit-ID: 72783a26254202e2f3f41a2818a19956fe49a772
4523 by setting -std=gnu99, at which point we won't be testing C89 any more.
4530 upstream: make PerSourceMaxStartups first-match-wins; ok dtucker@
4532 OpenBSD-Commit-ID: dac0c24cb709e3c595b8b4f422a0355dc5a3b4e7
4540 OpenBSD-Commit-ID: b1afaeb456a52bc8a58f4f9f8b2f9fa8f6bf651b
4551 OpenBSD-Commit-ID: 85b364676dd84cf1de0e98fc2fbdcb1a844ce515
4559 OpenBSD-Commit-ID: e80343c16ce0420b2aec98701527cf90371bd0db
4567 matter, since the range is pre-clamped)
4569 OpenBSD-Commit-ID: f786ed902d04a5b8ecc581d068fea1a79aa772de
4577 This attempts to hide inter-keystroke timings by sending interactive
4585 OpenBSD-Commit-ID: 02231ddd4f442212820976068c34a36e3c1b15be
4591 upstream: Introduce a transport-level ping facility
4596 ext-info message with a string version number of "0".
4600 OpenBSD-Commit-ID: b6b3c4cb2084c62f85a8dc67cf74954015eb547f
4614 OpenBSD-Commit-ID: bd47dab4695b134a44c379f0e9a39eed33047809
4624 OpenBSD-Commit-ID: 641153e7c05117436ddfc58267aa267ca8b80038
4638 obsd-arm64 host is real hardware...
4660 OpenBSD-Commit-ID: 743af3c6e3ce5e6cecd051668f0327a01f44af29
4685 OpenBSD-Commit-ID: 4d5c6c894664f50149153fd4764f21f43e7d7e5a
4691 upstream: defence-in-depth MaxAuthTries check in monitor; ok markus
4693 OpenBSD-Commit-ID: 65a4225dc708e2dae71315adf93677edace46c21
4701 OpenBSD-Commit-ID: 6c984171c96ed67effd7b5092f3d3975d55d6028
4715 OpenBSD-Commit-ID: 82237567fcd4098797cbdd17efa6ade08e1a36b0
4723 OpenBSD-Commit-ID: 5c11fbb9592a29b37bbf36f66df50db9d38182c6
4747 upstream: openssh-9.4
4749 OpenBSD-Commit-ID: 71fc1e01a4c4ea061b252bd399cda7be757e6e35
4773 OpenBSD-Commit-ID: 2fbe1a36d4a24b98531b2d298a6557c8285dc1b4
4781 When sshd is built with an OpenSSL that does not self-seed, it would
4791 commented- out config option match. From Ed Maste
4793 OpenBSD-Commit-ID: e66e934c45a9077cb1d51fc4f8d3df4505db58d9
4803 OpenBSD-Commit-ID: 2b6b0dde4407e039f58f86c8d2ff584a8205ea55
4813 OpenBSD-Commit-ID: 538cfcddbbb59dc3a8739604319491dcb8e0c0c9
4819 upstream: don't need to start a command here; use ssh -N instead.
4823 OpenBSD-Regress-ID: ff678a8cc69160a3b862733d935ec4a383f93cfb
4831 a specific point. e.g. "make LTESTS_FROM=t-sftp" will only run the sftp.sh
4834 OpenBSD-Regress-ID: 07f653de731def074b29293db946042706fcead3
4842 OpenBSD-Regress-ID: a6150262f39065939f025e546af2a346ffe674c1
4850 OpenBSD-Regress-ID: 55e4186604e80259496d841e690ea2090981bc7a
4860 OpenBSD-Commit-ID: 7ed1082f23a13b38c373008f856fd301d50012f9
4869 address/port 4-tuple) as expansion sequences; ok markus
4871 OpenBSD-Commit-ID: ee9a48bf1a74c4ace71b69de69cfdaa2a7388565
4877 upstream: increase default KDF work-factor for OpenSSH format
4881 OpenBSD-Commit-ID: a3afb1383f8ff0a49613d449f02395d9e8d4a9ec
4887 Prefer OpenSSL's SHA256 in sk-dummy.so
4889 Previously sk-dummy.so used libc's (or compat's) SHA256 since it may be
4906 Retire dfly58 test VM. Add dfly64.
4912 upstream: make ssh -f (fork after authentication) work properly in
4917 OpenBSD-Commit-ID: a7a2976a54b93e6767dc846b85647e6ec26969ac
4925 OpenBSD-Commit-ID: e6ddfef94b0eb867ad88abe07cedc8ed581c07f0
4931 upstream: tweak the allow-remote-pkcs11 text;
4933 OpenBSD-Commit-ID: bc965460a89edf76865b7279b45cf9cbdebd558a
4939 Handle a couple more OpenSSL no-ecc cases.
4953 Bring back OPENSSL_HAS_ECC to ssh-pkcs11-client
4959 upstream: Separate ssh-pkcs11-helpers for each p11 module
4961 Make ssh-pkcs11-client start an independent helper for each provider,
4965 This also implements reference counting of PKCS#11-hosted keys,
4966 allowing ssh-pkcs11-helper subprocesses to be automatically reaped
4973 OpenBSD-Commit-ID: 0ce188b14fe271ab0568f4500070d96c5657244e
4987 OpenBSD-Commit-ID: 1508a5fbd74e329e69a55b56c453c292029aefbe
4995 libraries to ssh-agent by default.
4998 can be restored using `ssh-agent -O allow-remote-pkcs11`.
5001 the `session-bind@openssh.com` extension. Forwarding access to a
5002 ssh-agent socket using non-OpenSSH tools may circumvent this control.
5006 OpenBSD-Commit-ID: 4c2bdf79b214ae7e60cc8c39a45501344fa7bd7c
5016 OpenBSD-Commit-ID: 39532cf18b115881bb4cfaee32084497aadfa05c
5046 OpenBSD-Commit-ID: 9a08ed8dae27d3f38cf280f1b28d4e0ff41a737a
5052 upstream: - add -P to usage() - sync the arg name to -J in usage()
5054 with that in ssh.1 - reformat usage() to match what "man ssh" does on 80width
5056 OpenBSD-Commit-ID: 5235dd7aa42e5bf90ae54579d519f92fc107036e
5062 upstream: -P before -p in SYNOPSIS;
5064 OpenBSD-Commit-ID: 535f5257c779e26c6a662a038d241b017f8cab7c
5070 upstream: configuation -> configuration
5072 OpenBSD-Commit-ID: 4776ced33b780f1db0b2902faec99312f26a726b
5082 OpenBSD-Commit-ID: ef5bf46b57726e4260a63b032b0b5ac3b4fe9cd4
5090 where it caused merge conflict in -portable for each commit :(
5092 OpenBSD-Commit-ID: 756ebac963df3245258b962e88150ebab9d5fc20
5101 to fall back to text revocation lists in some cases; fixes t-cert-hostkey.
5103 OpenBSD-Commit-ID: 5c670a6c0f027e99b7774ef29f18ba088549c7e1
5124 OpenBSD-Commit-ID: dc08358e70e702b59ac3e591827e5a96141b06a3
5139 OpenBSD-Commit-ID: cffb6ff9a3803abfc52b5cad0aa190c5e424c139
5151 Now, some years later, we have SSHSIG support in ssh-keygen that is
5153 semi-finished KRL signing/verification support from OpenSSH and
5154 refactors the remaining code to realise the benefit - primarily, we
5159 OpenBSD-Commit-ID: 517437bab3d8180f695c775410c052340e038804
5173 OpenBSD-Commit-ID: ae2fcde9a22a9ba7f765bd4f36b3f5901d8c3fa7
5181 OpenBSD-Commit-ID: e7c31034a5434f2ead3579b13a7892960651e6b0
5193 portable-specific int overflow defence-in-depth
5202 upstream: add defence-in-depth checks for some unreachable integer
5206 OpenBSD-Commit-ID: 52af085f4e7ef9f9d8423d8c1840a6a88bda90bd
5214 OpenBSD-Commit-ID: d0f12af0a5067a756aa707bc39a83fa6f58bf7e5
5223 supposed replacement is is non-existent, so this follows the approach
5236 OpenBSD-Commit-ID: 0514cd51db3ec60239966622a0d3495b15406ddd
5242 upstream: add support for unix domain sockets to ssh -W
5246 OpenBSD-Commit-ID: 3e6d47567b895c7c28855c7bd614e106c987a6d8
5252 gss-serv.c: `MAXHOSTNAMELEN` -> `HOST_NAME_MAX`
5289 OpenBSD-Commit-ID: a992d410c8a78ec982701bc3f91043dbdb359912
5295 upstream: make `ssh -Q CASignatureAlgorithms` only list signature
5301 OpenBSD-Commit-ID: 99c2b072dbac0f44fd1f2269e3ff6c1b5d7d3e59
5311 OpenBSD-Commit-ID: 31cf59c041becc0e5ccb0a77106f812c4cd1cd74
5319 using ssh -W by explicitly decoding PORT_STREAMLOCAL (a negative number) from
5323 OpenBSD-Commit-ID: e5ac5f40d354096c51e8c118a5c1b2d2b7a31384
5331 fixes "no comment" not showing on when running `ssh-keygen -l` on multiple
5335 OpenBSD-Commit-ID: 3cce84456fdcd67dc6b84e369f92c6686d111d9b
5343 INT_MAX. Fixes sign compare warnings systems with 32-bit time_t due to type
5346 OpenBSD-Commit-ID: 48081e9ad35705c5f1705711704a4c2ff94e87b7
5352 fixup! if -s & -p specified, mention 'sftp -P' on
5356 SSH-Copy-ID-Upstream: 32686e7c65b4fa2846e474d3315102dfa0f043b0
5362 Make ssh-copy-id(1) consistent with OpenSSH.
5364 This makes the ssh-copy-id man page more consistent with the rest of the
5366 - new sentence, new line
5367 - no sentences >80
5368 - N.B. -> NB
5369 - zap unused .Pp
5370 - zap trailing whitespace
5374 SSH-Copy-ID-Upstream: d8974cfb6242316460ed22a1ccc662800a50c5d3
5380 if -s & -p specified, mention 'sftp -P' on success
5383 https://github.com/openssh/openssh-portable/pull/321
5387 the lowercase -p in there, even if sftp is in use, is that the sftp call
5388 is using the already-established ssh master connection, so the port was
5391 SSH-Copy-ID-Upstream: 1c124d9bfafdbe28a00b683367ebf5750ce12eb2
5399 SSH-Copy-ID-Upstream: e604fae1cdee35c18055d35dcec530cf12ef00ad
5405 make -x also apply to the target script
5407 SSH-Copy-ID-Upstream: 3c4214704f427bd0654adf9b0fc079253db21cf4
5413 add -t option to specify the target path
5415 Allow the default target path (.ssh/authorized_files) to be over-riden
5419 https://gitlab.com/phil_hands/ssh-copy-id/-/merge_requests/8
5421 SSH-Copy-ID-Upstream: a942a0e076874adb6d8b2f0fb76d6c7918190fcd
5424 Author: Carlos Rodríguez Gili <carlos.rodriguez-gili@upc.edu>
5429 On Solaris 10 and older targets /bin/sh is not POSIX-compliant.
5430 Test -z `...` fails with error 'sh: test: argument expected'.
5434 SSH-Copy-ID-Upstream: 98394072a3f985b2650c1e8eab2fef84e38cc065
5444 SSH-Copy-ID-Upstream: 930d39f238117cd53810240ec989d0356aa1c1f6
5457 SSH-Copy-ID-Upstream: 0e1f5d443a9967483c33945793107ae3f3e4af2d
5463 ssh-copy-id: add -x option (for debugging)
5465 This option causes the ssh-copy-id to run with set -x
5467 SSH-Copy-ID-Upstream: a0ee367ea8c0a29c8b4515245e408d2d349e7844
5475 SSH-Copy-ID-Upstream: c284ed33b361814ea48ff68cbd01ca525b2bf117
5486 OpenBSD-Commit-ID: 1c92e4517284386703936e1d3abaa36cfacf1951
5496 OpenBSD-Commit-ID: 379a5afa8b7a0f3cba0c8a9bcceb4e5e33a5c1ef
5532 Skip agent-peereid test on macos13.
5534 sudo -S nobody doesn't work on the github runners (probably a
5559 OpenBSD-Commit-ID: 3d5f811cfcaed8cc4a97e1db49ac61bdf118113c
5565 Add macos-13 test target.
5581 requests - a misfeature strictly permitted by the protocol but seldom
5587 prompted by https://github.com/openssh/openssh-portable/commit/9b733#commitcomment-110679778
5589 OpenBSD-Commit-ID: 4af7fac75958ad8507b4fea58706f3ff0cfddb1b
5602 OpenBSD-Commit-ID: 80a58e43c3a32f97361282f756ec8d3f37989efd
5610 OpenBSD-Commit-ID: 30c0a34d74d91ddd0e6992525da70d3293392f70
5618 OpenBSD-Commit-ID: 44d3223902fbce5276422bdc8063ab72a4078489
5630 remove unused upper-case const strings in fmtfp
5632 no float format that uses upper-case is supported nor are hex floats.
5643 OpenBSD-Commit-ID: a493e628d4d6c08f878c276d998f4313ba61702d
5653 OpenBSD-Commit-ID: 852bf12591ec5a9fb12dcbde9b1fd3945ad0df3c
5663 OpenBSD-Commit-ID: fa3518346c21483e9e01a2e4b9436ae501daf8ea
5671 OpenBSD-Commit-ID: 85bb82fea90478a482e9f65a1bec0aa24227fd66
5684 OpenBSD-Commit-ID: de36e5ad6fde0fe263ca134e986b9095dc59380a
5700 OpenBSD-Commit-ID: eef2403df083c61028969fc679ee370373eacacb
5710 OpenBSD-Commit-ID: 1ffb03038ba1b6b72667be50cf5e5e396b5f2740
5721 OpenBSD-Commit-ID: de1c1130646230c2eda559831fc6bfd1b61d9618
5731 OpenBSD-Commit-ID: 7d0270ad3dd102412ca76add2b3760518abdef75
5739 OpenBSD-Commit-ID: ce66db603a913d3dd57063e330cb5494d70722c4
5749 OpenBSD-Commit-ID: ad42971a6ee5a46feab2d79f7f656f8cf4b119f3
5757 OpenBSD-Commit-ID: 6a0b719f9b1ae9d42ad8c5b144c7962c93792f7c
5767 OpenBSD-Commit-ID: 1a34f4b6896155b80327d15dc7ccf294b538a9f2
5775 OpenBSD-Commit-ID: 4c7d20ef776887b0ba1aabcfc1b14690e4ad0a40
5786 OpenBSD-Commit-ID: 4a95f3f7330394dffee5c749d52713cbf3b54846
5797 OpenBSD-Commit-ID: ab3fde6da384ea588226037c38635a6b2e015295
5816 OpenBSD-Commit-ID: 898a1e817cda9869554b1f586a434f67bcc3b650
5827 OpenBSD-Commit-ID: c0d6089b3fb725015462040cd94e23237449f0c8
5835 If child_set env was called with a NULL env pointer and a non-zero count
5848 OpenBSD-Commit-ID: 710b57ba954c139240895e23feea41f203201f04
5859 OpenBSD-Commit-ID: a01616503a185519b16f00dde25d34ceaf4ae1a3
5869 OpenBSD-Commit-ID: 37f80cb5d075ead5a00ad1b74175684ab1156ff8
5882 OpenBSD-Commit-ID: 85f7404e9d47fd28b222fbc412678f3361d2dffc
5890 since -portable no longer supports them.
5892 OpenBSD-Commit-ID: ea2893783331947cd29a67612b4e56f818f185ff
5900 versions now that -portable has dropped support for those versions.
5902 OpenBSD-Regress-ID: 82a8eacd87aec28e4aa19f17246ddde9d5ce7fe7
5935 Configure with --target instead of deprecated form.
5947 Explicitly disable OpenSSL on AIX test VM.
5955 OpenBSD-Regress-ID: c077fd12a38005dd53d878c5b944154dec88d2ff
5965 OpenBSD-Commit-ID: ce5d8e0219b63cded594c17d4c2958c06918ec0d
5971 upstream: fix test: getnameinfo returns a non-zero value on error, not
5973 (neccessarily) -1. From GHPR#384
5975 OpenBSD-Commit-ID: d35e2b71268f66f5543a7ea68751972b3ae22b25
5981 upstream: scp: when copying local->remote, check that source file
5986 OpenBSD-Commit-ID: b4dd68e15bfe22ce4fac9960a1066a2b721e54fb
5998 Explicitly disable security key test on aix51 VM.
6113 upstream: openssh-9.3
6115 OpenBSD-Commit-ID: 8011495f2449c1029bb316bd015eab2e00509848
6125 OpenBSD-Commit-ID: f146ba08b1b43af4e0d7ad8c4dae3748b4fa31b6
6136 OpenBSD-Commit-ID: a0a97113f192a7cb1a2c97b932f677f573cda7a4
6147 OpenBSD-Commit-ID: aea023819aa44a2dcb9dd0fbec10561896fc3a09
6157 OpenBSD-Commit-ID: 50204b755f66b2ec7ac3cfe379d07d85ca161d2b
6167 OpenBSD-Commit-ID: 99d8b3da9d0be1d07ca8dd8e98800a890349e9b5
6183 OpenBSD-Commit-ID: 8212ca05d01966fb5e72205c592b2257708a2aac
6201 OpenBSD-Commit-ID: 051429dd07af8db3fec10d82cdc78d90bb051729
6209 first-match-wins. sshd_config.5 was fixed in r1.348, this is the same for
6212 OpenBSD-Commit-ID: 7be55b9351cde449b136afcc52d07aa4113b215e
6218 upstream: Remove no-op (int) > INT_MAX checks
6222 OpenBSD-Commit-ID: 9df3783b181e056595e2bb9edf7ed41d61cf8e84
6231 mkstemp created the world-writable. Wrap mkstemp to set and restore
6244 OpenBSD-Commit-ID: 19c10baa46ae559474409f75a5cb3d0eade7a9b8
6250 upstream: Re-split the merge of the reorder-hostkeys test.
6257 OpenBSD-Commit-ID: a7469f25a738db5567395d1881e32479a7ffc9de
6267 OpenBSD-Commit-ID: add879fac6903a1cb1d1e42c4309e5359c3d870f
6292 OpenBSD-Commit-ID: 175f09349387c292f626da68f65f334faaa085f2
6298 upstream: ssh-pkcs11: synchronize error messages with errors
6305 OpenBSD-Commit-ID: 165a15db52f75b31e1804b043480c36af09f3411
6315 OpenBSD-Commit-ID: 7be168a570264d59e96a7d2d22e927d45fee0e4c
6331 OpenBSD-Commit-ID: fe1382e2fdf23fcae631308e72342bad56066a56
6341 OpenBSD-Commit-ID: 0ef414cc363a832f9fab92a5da0234448bce2eba
6349 Coverity CID 405048 which was a false-positive fd leak; ok dtucker@
6351 OpenBSD-Commit-ID: fc55ec2af622a017defb9b768bf26faefc792c00
6367 OpenBSD-Commit-ID: 9f9e4ba3cac003e6f81da3bcebd1b9ec43e7f353
6375 OpenBSD-Regress-ID: bdb211d80d572a08bf14b49fe2a58b9ff265c006
6385 OpenBSD-Commit-ID: cdc2d98e6478b7e7f3a36976845adae3820429d8
6395 OpenBSD-Commit-ID: 2eb017d10705bb623d4418691f961c930eafaec0
6409 OpenBSD-Commit-ID: f2f99da4aae2233cb18bf9c749320c5e040a9c7b
6417 If multiple -Ocheckpoint= options are passed, the earlier ones would
6421 OpenBSD-Commit-ID: a4d9d15f572926f841788912e2b282485ad09e8b
6431 OpenBSD-Commit-ID: 9b1aba2d049741ae21c8dc4560a7e29ab17310f4
6443 OpenBSD-Commit-ID: 5af8baa194be00a3092d17598e88a5b29f7ea2b4
6454 OpenBSD-Commit-ID: 356685bfa1fc3d81bd95722d3fc47101cc1a4972
6465 OpenBSD-Commit-ID: a50e0541cf823f8d1c72f71ccde925d3dbe6dfac
6471 upstream: Check for non-NULL before string
6475 OpenBSD-Commit-ID: 0d9b2e0cac88a311b5766b1aef737082583c285f
6481 upstream: guard against getsockname(-1, ...) from Coverity CID
6485 OpenBSD-Commit-ID: e58d5227327917d189229b7f0b37d2780f360d5f
6491 upstream: some options are not first-match-wins. Mention that there
6496 OpenBSD-Commit-ID: 3b74728446fa6fc8742769eeb8c3674e233e84c4
6506 OpenBSD-Commit-ID: b074b52bf138b75f08264e8da15880b29c7a630f
6520 OpenBSD-Commit-ID: 19fb1b53072826d00c67df677731d2f6c1dd602b
6531 OpenBSD-Commit-ID: c69c4c3152cdaab953706db4ccf4d5fd682f7d8d
6541 OpenBSD-Commit-ID: 2097c7db3cf657f1e3a6c5077041bacc63143cab
6551 OpenBSD-Regress-ID: 6cf22fda32a89c16915f31a6ed9bbdbef2a3bac9
6564 OpenBSD-Regress-ID: 9c44fb9cd418e6ff31165e7a6c1f9f11a6d19f5b
6572 OpenBSD-Regress-ID: 3823d9063127169736aa274b1784cb28e15b64d4
6584 OpenBSD-Commit-ID: 73c7ccc5d4fcc235f54c6b20767a2815408525ef
6592 before creating new ones. In -portable some platforms don't like
6595 OpenBSD-Regress-ID: 7e7ddc0beb73e945e1c4c58d51c8a125b518120f
6623 OpenBSD-Regress-ID: f802aa9e7fa51d1a01225c05fb0412d015c33e24
6633 OpenBSD-Commit-ID: 74e8d228ac00552e96e9e968dfcccf8dd1f46ad5
6643 OpenBSD-Commit-ID: fdc5287dcee0860b5a493186414226c655b0eb0a
6653 OpenBSD-Commit-ID: de28476025db29820a9a2e56e98b964d8a02861c
6719 OpenBSD-Commit-ID: f4affee067cec7c182f3e0b307d758e0472762a3
6732 OpenBSD-Commit-ID: 33e680dcd8110582a93a40a8491024e961f45137