120130913 2 - (djm) [channels.c] Fix unaligned access on sparc machines in SOCKS5 code; 3 ok dtucker@ 4 - (djm) [channels.c] sigh, typo s/buffet_/buffer_/ 5 - (djm) Release 6.3p1 6 720130808 8 - (dtucker) [regress/Makefile regress/test-exec.sh] Don't try to use test -nt 9 since some platforms (eg really old FreeBSD) don't have it. Instead, 10 run "make clean" before a complete regress run. ok djm. 11 - (dtucker) [misc.c] Fall back to time(2) at runtime if clock_gettime( 12 CLOCK_MONOTONIC...) fails. Some older versions of RHEL have the 13 CLOCK_MONOTONIC define but don't actually support it. Found and tested 14 by Kevin Brott, ok djm. 15 - (dtucker) [misc.c] Remove define added for fallback testing that was 16 mistakenly included in the previous commit. 17 - (dtucker) [regress/Makefile regress/test-exec.sh] Roll back the -nt 18 removal. The "make clean" removes modpipe which is built by the top-level 19 directory before running the tests. Spotted by tim@ 20 2120130804 22 - (dtucker) [auth-krb5.c configure.ac openbsd-compat/bsd-misc.h] Add support 23 for building with older Heimdal versions. ok djm. 24 2520130801 26 - (djm) [channels.c channels.h] bz#2135: On Solaris, isatty() on a non- 27 blocking connecting socket will clear any stored errno that might 28 otherwise have been retrievable via getsockopt(). A hack to limit writes 29 to TTYs on AIX was triggering this. Since only AIX needs the hack, wrap 30 it in an #ifdef. Diagnosis and patch from Ivo Raisr. 31 - (djm) [sshlogin.h] Fix prototype merge botch from 2006; bz#2134 32 3320130725 34 - (djm) OpenBSD CVS Sync 35 - djm@cvs.openbsd.org 2013/07/20 22:20:42 36 [krl.c] 37 fix verification error in (as-yet usused) KRL signature checking path 38 - djm@cvs.openbsd.org 2013/07/22 05:00:17 39 [umac.c] 40 make MAC key, data to be hashed and nonce for final hash const; 41 checked with -Wcast-qual 42 - djm@cvs.openbsd.org 2013/07/22 12:20:02 43 [umac.h] 44 oops, forgot to commit corresponding header change; 45 spotted by jsg and jasper 46 - djm@cvs.openbsd.org 2013/07/25 00:29:10 47 [ssh.c] 48 daemonise backgrounded (ControlPersist'ed) multiplexing master to ensure 49 it is fully detached from its controlling terminal. based on debugging 50 - djm@cvs.openbsd.org 2013/07/25 00:56:52 51 [sftp-client.c sftp-client.h sftp.1 sftp.c] 52 sftp support for resuming partial downloads; patch mostly by Loganaden 53 Velvindron/AfriNIC with some tweaks by me; feedback and ok dtucker@ 54 "Just be careful" deraadt@ 55 - djm@cvs.openbsd.org 2013/07/25 00:57:37 56 [version.h] 57 openssh-6.3 for release 58 - dtucker@cvs.openbsd.org 2013/05/30 20:12:32 59 [regress/test-exec.sh] 60 use ssh and sshd as testdata since it needs to be >256k for the rekey test 61 - dtucker@cvs.openbsd.org 2013/06/10 21:56:43 62 [regress/forwarding.sh] 63 Add test for forward config parsing 64 - djm@cvs.openbsd.org 2013/06/21 02:26:26 65 [regress/sftp-cmds.sh regress/test-exec.sh] 66 unbreak sftp-cmds for renamed test data (s/ls/data/) 67 - (tim) [sftp-client.c] Use of a gcc extension trips up native compilers on 68 Solaris and UnixWare. Feedback and OK djm@ 69 - (tim) [regress/forwarding.sh] Fix for building outside source tree. 70 7120130720 72 - (djm) OpenBSD CVS Sync 73 - markus@cvs.openbsd.org 2013/07/19 07:37:48 74 [auth.h kex.h kexdhs.c kexecdhs.c kexgexs.c monitor.c servconf.c] 75 [servconf.h session.c sshd.c sshd_config.5] 76 add ssh-agent(1) support to sshd(8); allows encrypted hostkeys, 77 or hostkeys on smartcards; most of the work by Zev Weiss; bz #1974 78 ok djm@ 79 - djm@cvs.openbsd.org 2013/07/20 01:43:46 80 [umac.c] 81 use a union to ensure correct alignment; ok deraadt 82 - djm@cvs.openbsd.org 2013/07/20 01:44:37 83 [ssh-keygen.c ssh.c] 84 More useful error message on missing current user in /etc/passwd 85 - djm@cvs.openbsd.org 2013/07/20 01:50:20 86 [ssh-agent.c] 87 call cleanup_handler on SIGINT when in debug mode to ensure sockets 88 are cleaned up on manual exit; bz#2120 89 - djm@cvs.openbsd.org 2013/07/20 01:55:13 90 [auth-krb5.c gss-serv-krb5.c gss-serv.c] 91 fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@ 92 9320130718 94 - (djm) OpenBSD CVS Sync 95 - dtucker@cvs.openbsd.org 2013/06/10 19:19:44 96 [readconf.c] 97 revert 1.203 while we investigate crashes reported by okan@ 98 - guenther@cvs.openbsd.org 2013/06/17 04:48:42 99 [scp.c] 100 Handle time_t values as long long's when formatting them and when 101 parsing them from remote servers. 102 Improve error checking in parsing of 'T' lines. 103 ok dtucker@ deraadt@ 104 - markus@cvs.openbsd.org 2013/06/20 19:15:06 105 [krl.c] 106 don't leak the rdata blob on errors; ok djm@ 107 - djm@cvs.openbsd.org 2013/06/21 00:34:49 108 [auth-rsa.c auth.h auth2-hostbased.c auth2-pubkey.c monitor.c] 109 for hostbased authentication, print the client host and user on 110 the auth success/failure line; bz#2064, ok dtucker@ 111 - djm@cvs.openbsd.org 2013/06/21 00:37:49 112 [ssh_config.5] 113 explicitly mention that IdentitiesOnly can be used with IdentityFile 114 to control which keys are offered from an agent. 115 - djm@cvs.openbsd.org 2013/06/21 05:42:32 116 [dh.c] 117 sprinkle in some error() to explain moduli(5) parse failures 118 - djm@cvs.openbsd.org 2013/06/21 05:43:10 119 [scp.c] 120 make this -Wsign-compare clean after time_t conversion 121 - djm@cvs.openbsd.org 2013/06/22 06:31:57 122 [scp.c] 123 improved time_t overflow check suggested by guenther@ 124 - jmc@cvs.openbsd.org 2013/06/27 14:05:37 125 [ssh-keygen.1 ssh.1 ssh_config.5 sshd.8 sshd_config.5] 126 do not use Sx for sections outwith the man page - ingo informs me that 127 stuff like html will render with broken links; 128 issue reported by Eric S. Raymond, via djm 129 - markus@cvs.openbsd.org 2013/07/02 12:31:43 130 [dh.c] 131 remove extra whitespace 132 - djm@cvs.openbsd.org 2013/07/12 00:19:59 133 [auth-options.c auth-rsa.c bufaux.c buffer.h channels.c hostfile.c] 134 [hostfile.h mux.c packet.c packet.h roaming_common.c serverloop.c] 135 fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@ 136 - djm@cvs.openbsd.org 2013/07/12 00:20:00 137 [sftp.c ssh-keygen.c ssh-pkcs11.c] 138 fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@ 139 - djm@cvs.openbsd.org 2013/07/12 00:43:50 140 [misc.c] 141 in ssh_gai_strerror() don't fallback to strerror for EAI_SYSTEM when 142 errno == 0. Avoids confusing error message in some broken resolver 143 cases. bz#2122 patch from plautrba AT redhat.com; ok dtucker 144 - djm@cvs.openbsd.org 2013/07/12 05:42:03 145 [ssh-keygen.c] 146 do_print_resource_record() can never be called with a NULL filename, so 147 don't attempt (and bungle) asking for one if it has not been specified 148 bz#2127 ok dtucker@ 149 - djm@cvs.openbsd.org 2013/07/12 05:48:55 150 [ssh.c] 151 set TCP nodelay for connections started with -N; bz#2124 ok dtucker@ 152 - schwarze@cvs.openbsd.org 2013/07/16 00:07:52 153 [scp.1 sftp-server.8 ssh-keyscan.1 ssh-keysign.8 ssh-pkcs11-helper.8] 154 use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@ 155 - djm@cvs.openbsd.org 2013/07/18 01:12:26 156 [ssh.1] 157 be more exact wrt perms for ~/.ssh/config; bz#2078 158 15920130702 160 - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config 161 contrib/cygwin/ssh-user-config] Modernizes and improve readability of 162 the Cygwin README file (which hasn't been updated for ages), drop 163 unsupported OSes from the ssh-host-config help text, and drop an 164 unneeded option from ssh-user-config. Patch from vinschen at redhat com. 165 16620130610 167 - (djm) OpenBSD CVS Sync 168 - dtucker@cvs.openbsd.org 2013/06/07 15:37:52 169 [channels.c channels.h clientloop.c] 170 Add an "ABANDONED" channel state and use for mux sessions that are 171 disconnected via the ~. escape sequence. Channels in this state will 172 be able to close if the server responds, but do not count as active channels. 173 This means that if you ~. all of the mux clients when using ControlPersist 174 on a broken network, the backgrounded mux master will exit when the 175 Control Persist time expires rather than hanging around indefinitely. 176 bz#1917, also reported and tested by tedu@. ok djm@ markus@. 177 - (dtucker) [Makefile.in configure.ac fixalgorithms] Remove unsupported 178 algorithms (Ciphers, MACs and HostKeyAlgorithms) from man pages. 179 - (dtucker) [myproposal.h] Do not advertise AES GSM ciphers if we don't have 180 the required OpenSSL support. Patch from naddy at freebsd. 181 - (dtucker) [myproposal.h] Make the conditional algorithm support consistent 182 and add some comments so it's clear what goes where. 183 18420130605 185 - (dtucker) [myproposal.h] Enable sha256 kex methods based on the presence of 186 the necessary functions, not from the openssl version. 187 - (dtucker) [contrib/ssh-copy-id] bz#2117: Use portable operator in test. 188 Patch from cjwatson at debian. 189 - (dtucker) [regress/forwarding.sh] For (as yet unknown) reason, the 190 forwarding test is extremely slow copying data on some machines so switch 191 back to copying the much smaller ls binary until we can figure out why 192 this is. 193 - (dtucker) [Makefile.in] append $CFLAGS to compiler options when building 194 modpipe in case there's anything in there we need. 195 - (dtucker) OpenBSD CVS Sync 196 - dtucker@cvs.openbsd.org 2013/06/02 21:01:51 197 [channels.h] 198 typo in comment 199 - dtucker@cvs.openbsd.org 2013/06/02 23:36:29 200 [clientloop.h clientloop.c mux.c] 201 No need for the mux cleanup callback to be visible so restore it to static 202 and call it through the detach_user function pointer. ok djm@ 203 - dtucker@cvs.openbsd.org 2013/06/03 00:03:18 204 [mac.c] 205 force the MAC output to be 64-bit aligned so umac won't see unaligned 206 accesses on strict-alignment architectures. bz#2101, patch from 207 tomas.kuthan at oracle.com, ok djm@ 208 - dtucker@cvs.openbsd.org 2013/06/04 19:12:23 209 [scp.c] 210 use MAXPATHLEN for buffer size instead of fixed value. ok markus 211 - dtucker@cvs.openbsd.org 2013/06/04 20:42:36 212 [sftp.c] 213 Make sftp's libedit interface marginally multibyte aware by building up 214 the quoted string by character instead of by byte. Prevents failures 215 when linked against a libedit built with wide character support (bz#1990). 216 "looks ok" djm 217 - dtucker@cvs.openbsd.org 2013/06/05 02:07:29 218 [mux.c] 219 fix leaks in mux error paths, from Zhenbo Xu, found by Melton. bz#1967, 220 ok djm 221 - dtucker@cvs.openbsd.org 2013/06/05 02:27:50 222 [sshd.c] 223 When running sshd -D, close stderr unless we have explicitly requesting 224 logging to stderr. From james.hunt at ubuntu.com via bz#1976, djm's patch 225 so, err, ok dtucker. 226 - dtucker@cvs.openbsd.org 2013/06/05 12:52:38 227 [sshconnect2.c] 228 Fix memory leaks found by Zhenbo Xu and the Melton tool. bz#1967, ok djm 229 - dtucker@cvs.openbsd.org 2013/06/05 22:00:28 230 [readconf.c] 231 plug another memleak. bz#1967, from Zhenbo Xu, detected by Melton, ok djm 232 - (dtucker) [configure.ac sftp.c openbsd-compat/openbsd-compat.h] Cater for 233 platforms that don't have multibyte character support (specifically, 234 mblen). 235 23620130602 237 - (tim) [Makefile.in] Make Solaris, UnixWare, & OpenServer linkers happy 238 linking regress/modpipe. 239 - (dtucker) OpenBSD CVS Sync 240 - dtucker@cvs.openbsd.org 2013/06/02 13:33:05 241 [progressmeter.c] 242 Add misc.h for monotime prototype. (ID sync only). 243 - dtucker@cvs.openbsd.org 2013/06/02 13:35:58 244 [ssh-agent.c] 245 Make parent_alive_interval time_t to avoid signed/unsigned comparison 246 - (dtucker) [configure.ac] sys/un.h needs sys/socket.h on some platforms 247 to prevent noise from configure. Patch from Nathan Osman. (bz#2114). 248 - (dtucker) [configure.ac] bz#2111: don't try to use lastlog on Android. 249 Patch from Nathan Osman. 250 - (tim) [configure.ac regress/Makefile] With rev 1.47 of test-exec.sh we 251 need a shell that can handle "[ file1 -nt file2 ]". Rather than keep 252 dealing with shell portability issues in regression tests, we let 253 configure find us a capable shell on those platforms with an old /bin/sh. 254 - (tim) [aclocal.m4] Enhance OSSH_CHECK_CFLAG_COMPILE to check stderr. 255 feedback and ok dtucker 256 - (tim) [regress/sftp-chroot.sh] skip if no sudo. ok dtucker 257 - (dtucker) [configure.ac] Some platforms need sys/types.h before sys/un.h. 258 - (dtucker) [configure.ac] Some other platforms need sys/types.h before 259 sys/socket.h. 260 26120130601 262 - (dtucker) [configure.ac openbsd-compat/xcrypt.c] bz#2112: fall back to 263 using openssl's DES_crypt function on platorms that don't have a native 264 one, eg Android. Based on a patch from Nathan Osman. 265 - (dtucker) [configure.ac defines.h] Test for fd_mask, howmany and NFDBITS 266 rather than trying to enumerate the plaforms that don't have them. 267 Based on a patch from Nathan Osman, with help from tim@. 268 - (dtucker) OpenBSD CVS Sync 269 - djm@cvs.openbsd.org 2013/05/17 00:13:13 270 [xmalloc.h cipher.c sftp-glob.c ssh-keyscan.c ssh.c sftp-common.c 271 ssh-ecdsa.c auth2-chall.c compat.c readconf.c kexgexs.c monitor.c 272 gss-genr.c cipher-3des1.c kex.c monitor_wrap.c ssh-pkcs11-client.c 273 auth-options.c rsa.c auth2-pubkey.c sftp.c hostfile.c auth2.c 274 servconf.c auth.c authfile.c xmalloc.c uuencode.c sftp-client.c 275 auth2-gss.c sftp-server.c bufaux.c mac.c session.c jpake.c kexgexc.c 276 sshconnect.c auth-chall.c auth2-passwd.c sshconnect1.c buffer.c 277 kexecdhs.c kexdhs.c ssh-rsa.c auth1.c ssh-pkcs11.c auth2-kbdint.c 278 kexdhc.c sshd.c umac.c ssh-dss.c auth2-jpake.c bufbn.c clientloop.c 279 monitor_mm.c scp.c roaming_client.c serverloop.c key.c auth-rsa.c 280 ssh-pkcs11-helper.c ssh-keysign.c ssh-keygen.c match.c channels.c 281 sshconnect2.c addrmatch.c mux.c canohost.c kexecdhc.c schnorr.c 282 ssh-add.c misc.c auth2-hostbased.c ssh-agent.c bufec.c groupaccess.c 283 dns.c packet.c readpass.c authfd.c moduli.c] 284 bye, bye xfree(); ok markus@ 285 - djm@cvs.openbsd.org 2013/05/19 02:38:28 286 [auth2-pubkey.c] 287 fix failure to recognise cert-authority keys if a key of a different type 288 appeared in authorized_keys before it; ok markus@ 289 - djm@cvs.openbsd.org 2013/05/19 02:42:42 290 [auth.h auth.c key.c monitor.c auth-rsa.c auth2.c auth1.c key.h] 291 Standardise logging of supplemental information during userauth. Keys 292 and ruser is now logged in the auth success/failure message alongside 293 the local username, remote host/port and protocol in use. Certificates 294 contents and CA are logged too. 295 Pushing all logging onto a single line simplifies log analysis as it is 296 no longer necessary to relate information scattered across multiple log 297 entries. "I like it" markus@ 298 - dtucker@cvs.openbsd.org 2013/05/31 12:28:10 299 [ssh-agent.c] 300 Use time_t where appropriate. ok djm 301 - dtucker@cvs.openbsd.org 2013/06/01 13:15:52 302 [ssh-agent.c clientloop.c misc.h packet.c progressmeter.c misc.c 303 channels.c sandbox-systrace.c] 304 Use clock_gettime(CLOCK_MONOTONIC ...) for ssh timers so that things like 305 keepalives and rekeying will work properly over clock steps. Suggested by 306 markus@, "looks good" djm@. 307 - dtucker@cvs.openbsd.org 2013/06/01 20:59:25 308 [scp.c sftp-client.c] 309 Replace S_IWRITE, which isn't standardized, with S_IWUSR, which is. Patch 310 from Nathan Osman via bz#2085. ok deraadt. 311 - dtucker@cvs.openbsd.org 2013/06/01 22:34:50 312 [sftp-client.c] 313 Update progressmeter when data is acked, not when it's sent. bz#2108, from 314 Debian via Colin Watson, ok djm@ 315 - (dtucker) [M auth-chall.c auth-krb5.c auth-pam.c cipher-aes.c cipher-ctr.c 316 groupaccess.c loginrec.c monitor.c monitor_wrap.c session.c sshd.c 317 sshlogin.c uidswap.c openbsd-compat/bsd-cygwin_util.c 318 openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/port-aix.c 319 openbsd-compat/port-linux.c] Replace portable-specific instances of xfree 320 with the equivalent calls to free. 321 - (dtucker) [configure.ac misc.c] Look for clock_gettime in librt and fall 322 back to time(NULL) if we can't find it anywhere. 323 - (dtucker) [sandbox-seccomp-filter.c] Allow clock_gettimeofday. 324 32520130529 326 - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] bz#2087: Add a null 327 implementation of endgrent for platforms that don't have it (eg Android). 328 Loosely based on a patch from Nathan Osman, ok djm 329 330 20130517 331 - (dtucker) OpenBSD CVS Sync 332 - djm@cvs.openbsd.org 2013/03/07 00:20:34 333 [regress/proxy-connect.sh] 334 repeat test with a style appended to the username 335 - dtucker@cvs.openbsd.org 2013/03/23 11:09:43 336 [regress/test-exec.sh] 337 Only regenerate host keys if they don't exist or if ssh-keygen has changed 338 since they were. Reduces test runtime by 5-30% depending on machine 339 speed. 340 - dtucker@cvs.openbsd.org 2013/04/06 06:00:22 341 [regress/rekey.sh regress/test-exec.sh regress/integrity.sh 342 regress/multiplex.sh Makefile regress/cfgmatch.sh] 343 Split the regress log into 3 parts: the debug output from ssh, the debug 344 log from sshd and the output from the client command (ssh, scp or sftp). 345 Somewhat functional now, will become more useful when ssh/sshd -E is added. 346 - dtucker@cvs.openbsd.org 2013/04/07 02:16:03 347 [regress/Makefile regress/rekey.sh regress/integrity.sh 348 regress/sshd-log-wrapper.sh regress/forwarding.sh regress/test-exec.sh] 349 use -E option for ssh and sshd to write debuging logs to ssh{,d}.log and 350 save the output from any failing tests. If a test fails the debug output 351 from ssh and sshd for the failing tests (and only the failing tests) should 352 be available in failed-ssh{,d}.log. 353 - djm@cvs.openbsd.org 2013/04/18 02:46:12 354 [regress/Makefile regress/sftp-chroot.sh] 355 test sshd ChrootDirectory+internal-sftp; feedback & ok dtucker@ 356 - dtucker@cvs.openbsd.org 2013/04/22 07:23:08 357 [regress/multiplex.sh] 358 Write mux master logs to regress.log instead of ssh.log to keep separate 359 - djm@cvs.openbsd.org 2013/05/10 03:46:14 360 [regress/modpipe.c] 361 sync some portability changes from portable OpenSSH (id sync only) 362 - dtucker@cvs.openbsd.org 2013/05/16 02:10:35 363 [regress/rekey.sh] 364 Add test for time-based rekeying 365 - dtucker@cvs.openbsd.org 2013/05/16 03:33:30 366 [regress/rekey.sh] 367 test rekeying when there's no data being transferred 368 - dtucker@cvs.openbsd.org 2013/05/16 04:26:10 369 [regress/rekey.sh] 370 add server-side rekey test 371 - dtucker@cvs.openbsd.org 2013/05/16 05:48:31 372 [regress/rekey.sh] 373 add tests for RekeyLimit parsing 374 - dtucker@cvs.openbsd.org 2013/05/17 00:37:40 375 [regress/agent.sh regress/keytype.sh regress/cfgmatch.sh 376 regress/forcecommand.sh regress/proto-version.sh regress/test-exec.sh 377 regress/cipher-speed.sh regress/cert-hostkey.sh regress/cert-userkey.sh 378 regress/ssh-com.sh] 379 replace 'echo -n' with 'printf' since it's more portable 380 also remove "echon" hack. 381 - dtucker@cvs.openbsd.org 2013/05/17 01:16:09 382 [regress/agent-timeout.sh] 383 Pull back some portability changes from -portable: 384 - TIMEOUT is a read-only variable in some shells 385 - not all greps have -q so redirect to /dev/null instead. 386 (ID sync only) 387 - dtucker@cvs.openbsd.org 2013/05/17 01:32:11 388 [regress/integrity.sh] 389 don't print output from ssh before getting it (it's available in ssh.log) 390 - dtucker@cvs.openbsd.org 2013/05/17 04:29:14 391 [regress/sftp.sh regress/putty-ciphers.sh regress/cipher-speed.sh 392 regress/test-exec.sh regress/sftp-batch.sh regress/dynamic-forward.sh 393 regress/putty-transfer.sh regress/conch-ciphers.sh regress/sftp-cmds.sh 394 regress/scp.sh regress/ssh-com-sftp.sh regress/rekey.sh 395 regress/putty-kex.sh regress/stderr-data.sh regress/stderr-after-eof.sh 396 regress/sftp-badcmds.sh regress/reexec.sh regress/ssh-com-client.sh 397 regress/sftp-chroot.sh regress/forwarding.sh regress/transfer.sh 398 regress/multiplex.sh] 399 Move the setting of DATA and COPY into test-exec.sh 400 - dtucker@cvs.openbsd.org 2013/05/17 10:16:26 401 [regress/try-ciphers.sh] 402 use expr for math to keep diffs vs portable down 403 (id sync only) 404 - dtucker@cvs.openbsd.org 2013/05/17 10:23:52 405 [regress/login-timeout.sh regress/reexec.sh regress/test-exec.sh] 406 Use SUDO when cat'ing pid files and running the sshd log wrapper so that 407 it works with a restrictive umask and the pid files are not world readable. 408 Changes from -portable. (id sync only) 409 - dtucker@cvs.openbsd.org 2013/05/17 10:24:48 410 [regress/localcommand.sh] 411 use backticks for portability. (id sync only) 412 - dtucker@cvs.openbsd.org 2013/05/17 10:26:26 413 [regress/sftp-badcmds.sh] 414 remove unused BATCH variable. (id sync only) 415 - dtucker@cvs.openbsd.org 2013/05/17 10:28:11 416 [regress/sftp.sh] 417 only compare copied data if sftp succeeds. from portable (id sync only) 418 - dtucker@cvs.openbsd.org 2013/05/17 10:30:07 419 [regress/test-exec.sh] 420 wait a bit longer for startup and use case for absolute path. 421 from portable (id sync only) 422 - dtucker@cvs.openbsd.org 2013/05/17 10:33:09 423 [regress/agent-getpeereid.sh] 424 don't redirect stdout from sudo. from portable (id sync only) 425 - dtucker@cvs.openbsd.org 2013/05/17 10:34:30 426 [regress/portnum.sh] 427 use a more portable negated if structure. from portable (id sync only) 428 - dtucker@cvs.openbsd.org 2013/05/17 10:35:43 429 [regress/scp.sh] 430 use a file extention that's not special on some platforms. from portable 431 (id sync only) 432 - (dtucker) [regress/bsd.regress.mk] Remove unused file. We've never used it 433 in portable and it's long gone in openbsd. 434 - (dtucker) [regress/integrity.sh]. Force fixed Diffie-Hellman key exchange 435 methods. When the openssl version doesn't support ECDH then next one on 436 the list is DH group exchange, but that causes a bit more traffic which can 437 mean that the tests flip bits in the initial exchange rather than the MACed 438 traffic and we get different errors to what the tests look for. 439 - (dtucker) [openbsd-compat/getopt.h] Remove unneeded bits. 440 - (dtucker) [regress/cfgmatch.sh] Resync config file setup with openbsd. 441 - (dtucker) [regress/agent-getpeereid.sh] Resync spaces with openbsd. 442 - (dtucker) [regress/integrity.sh regress/krl.sh regress/test-exec.sh] 443 Move the jot helper function to portable-specific part of test-exec.sh. 444 - (dtucker) [regress/test-exec.sh] Move the portable-specific functions 445 together and add a couple of missing lines from openbsd. 446 - (dtucker) [regress/stderr-after-eof.sh regress/test-exec.sh] Move the md5 447 helper function to the portable part of test-exec.sh. 448 - (dtucker) [regress/runtests.sh] Remove obsolete test driver script. 449 - (dtucker) [regress/cfgmatch.sh] Remove unneeded sleep renderd obsolete by 450 rev 1.6 which calls wait. 451 45220130516 453 - (djm) [contrib/ssh-copy-id] Fix bug that could cause "rm *" to be 454 executed if mktemp failed; bz#2105 ok dtucker@ 455 - (dtucker) OpenBSD CVS Sync 456 - tedu@cvs.openbsd.org 2013/04/23 17:49:45 457 [misc.c] 458 use xasprintf instead of a series of strlcats and strdup. ok djm 459 - tedu@cvs.openbsd.org 2013/04/24 16:01:46 460 [misc.c] 461 remove extra parens noticed by nicm 462 - dtucker@cvs.openbsd.org 2013/05/06 07:35:12 463 [sftp-server.8] 464 Reference the version of the sftp draft we actually implement. ok djm@ 465 - djm@cvs.openbsd.org 2013/05/10 03:40:07 466 [sshconnect2.c] 467 fix bzero(ptr_to_struct, sizeof(ptr_to_struct)); bz#2100 from 468 Colin Watson 469 - djm@cvs.openbsd.org 2013/05/10 04:08:01 470 [key.c] 471 memleak in cert_free(), wasn't actually freeing the struct; 472 bz#2096 from shm AT digitalsun.pl 473 - dtucker@cvs.openbsd.org 2013/05/10 10:13:50 474 [ssh-pkcs11-helper.c] 475 remove unused extern optarg. ok markus@ 476 - dtucker@cvs.openbsd.org 2013/05/16 02:00:34 477 [ssh_config sshconnect2.c packet.c readconf.h readconf.c clientloop.c 478 ssh_config.5 packet.h] 479 Add an optional second argument to RekeyLimit in the client to allow 480 rekeying based on elapsed time in addition to amount of traffic. 481 with djm@ jmc@, ok djm 482 - dtucker@cvs.openbsd.org 2013/05/16 04:09:14 483 [sshd_config.5 servconf.c servconf.h packet.c serverloop.c monitor.c sshd_config 484 sshd.c] Add RekeyLimit to sshd with the same syntax as the client allowing 485 rekeying based on traffic volume or time. ok djm@, help & ok jmc@ for the man 486 page. 487 - djm@cvs.openbsd.org 2013/05/16 04:27:50 488 [ssh_config.5 readconf.h readconf.c] 489 add the ability to ignore specific unrecognised ssh_config options; 490 bz#866; ok markus@ 491 - jmc@cvs.openbsd.org 2013/05/16 06:28:45 492 [ssh_config.5] 493 put IgnoreUnknown in the right place; 494 - jmc@cvs.openbsd.org 2013/05/16 06:30:06 495 [sshd_config.5] 496 oops! avoid Xr to self; 497 - dtucker@cvs.openbsd.org 2013/05/16 09:08:41 498 [log.c scp.c sshd.c serverloop.c schnorr.c sftp.c] 499 Fix some "unused result" warnings found via clang and -portable. 500 ok markus@ 501 - dtucker@cvs.openbsd.org 2013/05/16 09:12:31 502 [readconf.c servconf.c] 503 switch RekeyLimit traffic volume parsing to scan_scaled. ok djm@ 504 - dtucker@cvs.openbsd.org 2013/05/16 10:43:34 505 [servconf.c readconf.c] 506 remove now-unused variables 507 - dtucker@cvs.openbsd.org 2013/05/16 10:44:06 508 [servconf.c] 509 remove another now-unused variable 510 - (dtucker) [configure.ac readconf.c servconf.c 511 openbsd-compat/openbsd-compat.h] Add compat bits for scan_scaled. 512 51320130510 514 - (dtucker) [configure.ac] Enable -Wsizeof-pointer-memaccess if the compiler 515 supports it. Mentioned by Colin Watson in bz#2100, ok djm. 516 - (dtucker) [openbsd-compat/getopt.c] Factor out portibility changes to 517 getopt.c. Preprocessed source is identical other than line numbers. 518 - (dtucker) [openbsd-compat/getopt_long.c] Import from OpenBSD. No 519 portability changes yet. 520 - (dtucker) [openbsd-compat/Makefile.in openbsd-compat/getopt.c 521 openbsd-compat/getopt_long.c regress/modpipe.c] Remove getopt.c, add 522 portability code to getopt_long.c and switch over Makefile and the ugly 523 hack in modpipe.c. Fixes bz#1448. 524 - (dtucker) [openbsd-compat/getopt.h openbsd-compat/getopt_long.c 525 openbsd-compat/openbsd-compat.h] pull in getopt.h from openbsd and plumb 526 in to use it when we're using our own getopt. 527 - (dtucker) [kex.c] Only include sha256 and ECC key exchange methods when the 528 underlying libraries support them. 529 - (dtucker) [configure.ac] Add -Werror to the -Qunused-arguments test so 530 we don't get a warning on compilers that *don't* support it. Add 531 -Wno-unknown-warning-option. Move both to the start of the list for 532 maximum noise suppression. Tested with gcc 4.6.3, gcc 2.95.4 and clang 2.9. 533 53420130423 535 - (djm) [auth.c configure.ac misc.c monitor.c monitor_wrap.c] Support 536 platforms, such as Android, that lack struct passwd.pw_gecos. Report 537 and initial patch from Nathan Osman bz#2086; feedback tim@ ok dtucker@ 538 - (djm) OpenBSD CVS Sync 539 - markus@cvs.openbsd.org 2013/03/05 20:16:09 540 [sshconnect2.c] 541 reset pubkey order on partial success; ok djm@ 542 - djm@cvs.openbsd.org 2013/03/06 23:35:23 543 [session.c] 544 fatal() when ChrootDirectory specified by running without root privileges; 545 ok markus@ 546 - djm@cvs.openbsd.org 2013/03/06 23:36:53 547 [readconf.c] 548 g/c unused variable (-Wunused) 549 - djm@cvs.openbsd.org 2013/03/07 00:19:59 550 [auth2-pubkey.c monitor.c] 551 reconstruct the original username that was sent by the client, which may 552 have included a style (e.g. "root:skey") when checking public key 553 signatures. Fixes public key and hostbased auth when the client specified 554 a style; ok markus@ 555 - markus@cvs.openbsd.org 2013/03/07 19:27:25 556 [auth.h auth2-chall.c auth2.c monitor.c sshd_config.5] 557 add submethod support to AuthenticationMethods; ok and freedback djm@ 558 - djm@cvs.openbsd.org 2013/03/08 06:32:58 559 [ssh.c] 560 allow "ssh -f none ..." ok markus@ 561 - djm@cvs.openbsd.org 2013/04/05 00:14:00 562 [auth2-gss.c krl.c sshconnect2.c] 563 hush some {unused, printf type} warnings 564 - djm@cvs.openbsd.org 2013/04/05 00:31:49 565 [pathnames.h] 566 use the existing _PATH_SSH_USER_RC define to construct the other 567 pathnames; bz#2077, ok dtucker@ (no binary change) 568 - djm@cvs.openbsd.org 2013/04/05 00:58:51 569 [mux.c] 570 cleanup mux-created channels that are in SSH_CHANNEL_OPENING state too 571 (in addition to ones already in OPEN); bz#2079, ok dtucker@ 572 - markus@cvs.openbsd.org 2013/04/06 16:07:00 573 [channels.c sshd.c] 574 handle ECONNABORTED for accept(); ok deraadt some time ago... 575 - dtucker@cvs.openbsd.org 2013/04/07 02:10:33 576 [log.c log.h ssh.1 ssh.c sshd.8 sshd.c] 577 Add -E option to ssh and sshd to append debugging logs to a specified file 578 instead of stderr or syslog. ok markus@, man page help jmc@ 579 - dtucker@cvs.openbsd.org 2013/04/07 09:40:27 580 [sshd.8] 581 clarify -e text. suggested by & ok jmc@ 582 - djm@cvs.openbsd.org 2013/04/11 02:27:50 583 [packet.c] 584 quiet disconnect notifications on the server from error() back to logit() 585 if it is a normal client closure; bz#2057 ok+feedback dtucker@ 586 - dtucker@cvs.openbsd.org 2013/04/17 09:04:09 587 [session.c] 588 revert rev 1.262; it fails because uid is already set here. ok djm@ 589 - djm@cvs.openbsd.org 2013/04/18 02:16:07 590 [sftp.c] 591 make "sftp -q" do what it says on the sticker: hush everything but errors; 592 ok dtucker@ 593 - djm@cvs.openbsd.org 2013/04/19 01:00:10 594 [sshd_config.5] 595 document the requirment that the AuthorizedKeysCommand be owned by root; 596 ok dtucker@ markus@ 597 - djm@cvs.openbsd.org 2013/04/19 01:01:00 598 [ssh-keygen.c] 599 fix some memory leaks; bz#2088 ok dtucker@ 600 - djm@cvs.openbsd.org 2013/04/19 01:03:01 601 [session.c] 602 reintroduce 1.262 without the connection-killing bug: 603 fatal() when ChrootDirectory specified by running without root privileges; 604 ok markus@ 605 - djm@cvs.openbsd.org 2013/04/19 01:06:50 606 [authfile.c cipher.c cipher.h kex.c kex.h kexecdh.c kexecdhc.c kexecdhs.c] 607 [key.c key.h mac.c mac.h packet.c ssh.1 ssh.c] 608 add the ability to query supported ciphers, MACs, key type and KEX 609 algorithms to ssh. Includes some refactoring of KEX and key type handling 610 to be table-driven; ok markus@ 611 - djm@cvs.openbsd.org 2013/04/19 11:10:18 612 [ssh.c] 613 add -Q to usage; reminded by jmc@ 614 - djm@cvs.openbsd.org 2013/04/19 12:07:08 615 [kex.c] 616 remove duplicated list entry pointed out by naddy@ 617 - dtucker@cvs.openbsd.org 2013/04/22 01:17:18 618 [mux.c] 619 typo in debug output: evitval->exitval 620 62120130418 622 - (djm) [config.guess config.sub] Update to last versions before they switch 623 to GPL3. ok dtucker@ 624 - (dtucker) [configure.ac] Use -Qunused-arguments to suppress warnings from 625 unused argument warnings (in particular, -fno-builtin-memset) from clang. 626 62720130404 628 - (dtucker) OpenBSD CVS Sync 629 - dtucker@cvs.openbsd.org 2013/02/17 23:16:57 630 [readconf.c ssh.c readconf.h sshconnect2.c] 631 Keep track of which IndentityFile options were manually supplied and which 632 were default options, and don't warn if the latter are missing. 633 ok markus@ 634 - dtucker@cvs.openbsd.org 2013/02/19 02:12:47 635 [krl.c] 636 Remove bogus include. ok djm 637 - dtucker@cvs.openbsd.org 2013/02/22 04:45:09 638 [ssh.c readconf.c readconf.h] 639 Don't complain if IdentityFiles specified in system-wide configs are 640 missing. ok djm, deraadt. 641 - markus@cvs.openbsd.org 2013/02/22 19:13:56 642 [sshconnect.c] 643 support ProxyCommand=- (stdin/out already point to the proxy); ok djm@ 644 - djm@cvs.openbsd.org 2013/02/22 22:09:01 645 [ssh.c] 646 Allow IdenityFile=none; ok markus deraadt (and dtucker for an earlier 647 version) 648 64920130401 650 - (dtucker) [openbsd-compat/bsd-cygwin_util.{c,h}] Don't include windows.h 651 to avoid conflicting definitions of __int64, adding the required bits. 652 Patch from Corinna Vinschen. 653 65420120323 655 - (tim) [Makefile.in] remove some duplication introduced in 20130220 commit. 656 65720120322 658 - (djm) [contrib/ssh-copy-id contrib/ssh-copy-id.1] Updated to Phil 659 Hands' greatly revised version. 660 - (djm) Release 6.2p1 661 - (dtucker) [configure.ac] Add stdlib.h to zlib check for exit() prototype. 662 - (dtucker) [includes.h] Check if _GNU_SOURCE is already defined before 663 defining it again. Prevents warnings if someone, eg, sets it in CFLAGS. 664 66520120318 666 - (djm) [configure.ac log.c scp.c sshconnect2.c openbsd-compat/vis.c] 667 [openbsd-compat/vis.h] FreeBSD's strnvis isn't compatible with OpenBSD's 668 so mark it as broken. Patch from des AT des.no 669 67020120317 671 - (tim) [configure.ac] OpenServer 5 wants lastlog even though it has none 672 of the bits the configure test looks for. 673 67420120316 675 - (djm) [configure.ac] Disable utmp, wtmp and/or lastlog if the platform 676 is unable to successfully compile them. Based on patch from des AT 677 des.no 678 - (djm) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] 679 Add a usleep replacement for platforms that lack it; ok dtucker 680 - (djm) [session.c] FreeBSD needs setusercontext(..., LOGIN_SETUMASK) to 681 occur after UID switch; patch from John Marshall via des AT des.no; 682 ok dtucker@ 683 68420120312 685 - (dtucker) [regress/Makefile regress/cipher-speed.sh regress/test-exec.sh] 686 Improve portability of cipher-speed test, based mostly on a patch from 687 Iain Morgan. 688 - (dtucker) [auth.c configure.ac platform.c platform.h] Accept uid 2 ("bin") 689 in addition to root as an owner of system directories on AIX and HP-UX. 690 ok djm@ 691 69220130307 693 - (dtucker) [INSTALL] Bump documented autoconf version to what we're 694 currently using. 695 - (dtucker) [defines.h] Remove SIZEOF_CHAR bits since the test for it 696 was removed in configure.ac rev 1.481 as it was redundant. 697 - (tim) [Makefile.in] Add another missing $(EXEEXT) I should have seen 3 days 698 ago. 699 - (djm) [configure.ac] Add a timeout to the select/rlimit test to give it a 700 chance to complete on broken systems; ok dtucker@ 701 70220130306 703 - (dtucker) [regress/forward-control.sh] Wait longer for the forwarding 704 connection to start so that the test works on slower machines. 705 - (dtucker) [configure.ac] test that we can set number of file descriptors 706 to zero with setrlimit before enabling the rlimit sandbox. This affects 707 (at least) HPUX 11.11. 708 70920130305 710 - (djm) [regress/modpipe.c] Compilation fix for AIX and parsing fix for 711 HP/UX. Spotted by Kevin Brott 712 - (dtucker) [configure.ac] use "=" for shell test and not "==". Spotted by 713 Amit Kulkarni and Kevin Brott. 714 - (dtucker) [Makefile.in] Remove trailing "\" on PATHS, which caused obscure 715 build breakage on (at least) HP-UX 11.11. Found by Amit Kulkarni and Kevin 716 Brott. 717 - (tim) [Makefile.in] Add missing $(EXEEXT). Found by Roumen Petrov. 718 71920130227 720 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 721 [contrib/suse/openssh.spec] Crank version numbers 722 - (tim) [regress/forward-control.sh] use sh in case login shell is csh. 723 - (tim) [regress/integrity.sh] shell portability fix. 724 - (tim) [regress/integrity.sh] keep old solaris awk from hanging. 725 - (tim) [regress/krl.sh] keep old solaris awk from hanging. 726 72720130226 728 - OpenBSD CVS Sync 729 - djm@cvs.openbsd.org 2013/02/20 08:27:50 730 [integrity.sh] 731 Add an option to modpipe that warns if the modification offset it not 732 reached in it's stream and turn it on for t-integrity. This should catch 733 cases where the session is not fuzzed for being too short (cf. my last 734 "oops" commit) 735 - (djm) [regress/integrity.sh] Run sshd via $SUDO; fixes tinderbox breakage 736 for UsePAM=yes configuration 737 73820130225 739 - (dtucker) [configure.ac ssh-gss.h] bz#2073: additional #includes needed 740 to use Solaris native GSS libs. Patch from Pierre Ossman. 741 74220130223 743 - (djm) [configure.ac includes.h loginrec.c mux.c sftp.c] Prefer 744 bsd/libutil.h to libutil.h to avoid deprecation warnings on Ubuntu. 745 ok tim 746 74720130222 748 - (dtucker) [Makefile.in configure.ac] bz#2072: don't link krb5 libs to 749 ssh(1) since they're not needed. Patch from Pierre Ossman, ok djm. 750 - (dtucker) [configure.ac] bz#2073: look for Solaris' differently-named 751 libgss too. Patch from Pierre Ossman, ok djm. 752 - (djm) [configure.ac sandbox-seccomp-filter.c] Support for Linux 753 seccomp-bpf sandbox on ARM. Patch from shawnlandden AT gmail.com; 754 ok dtucker 755 75620130221 757 - (tim) [regress/forward-control.sh] shell portability fix. 758 75920130220 760 - (tim) [regress/cipher-speed.sh regress/try-ciphers.sh] shell portability fix. 761 - (tim) [krl.c Makefile.in regress/Makefile regress/modpipe.c] remove unneeded 762 err.h include from krl.c. Additional portability fixes for modpipe. OK djm 763 - OpenBSD CVS Sync 764 - djm@cvs.openbsd.org 2013/02/20 08:27:50 765 [regress/integrity.sh regress/modpipe.c] 766 Add an option to modpipe that warns if the modification offset it not 767 reached in it's stream and turn it on for t-integrity. This should catch 768 cases where the session is not fuzzed for being too short (cf. my last 769 "oops" commit) 770 - djm@cvs.openbsd.org 2013/02/20 08:29:27 771 [regress/modpipe.c] 772 s/Id/OpenBSD/ in RCS tag 773 77420130219 775 - OpenBSD CVS Sync 776 - djm@cvs.openbsd.org 2013/02/18 22:26:47 777 [integrity.sh] 778 crank the offset yet again; it was still fuzzing KEX one of Darren's 779 portable test hosts at 2800 780 - djm@cvs.openbsd.org 2013/02/19 02:14:09 781 [integrity.sh] 782 oops, forgot to increase the output of the ssh command to ensure that 783 we actually reach $offset 784 - (djm) [regress/integrity.sh] Skip SHA2-based MACs on configurations that 785 lack support for SHA2. 786 - (djm) [regress/modpipe.c] Add local err, and errx functions for platforms 787 that do not have them. 788 78920130217 790 - OpenBSD CVS Sync 791 - djm@cvs.openbsd.org 2013/02/17 23:16:55 792 [integrity.sh] 793 make the ssh command generates some output to ensure that there are at 794 least offset+tries bytes in the stream. 795 79620130216 797 - OpenBSD CVS Sync 798 - djm@cvs.openbsd.org 2013/02/16 06:08:45 799 [integrity.sh] 800 make sure the fuzz offset is actually past the end of KEX for all KEX 801 types. diffie-hellman-group-exchange-sha256 requires an offset around 802 2700. Noticed via test failures in portable OpenSSH on platforms that 803 lack ECC and this the more byte-frugal ECDH KEX algorithms. 804 80520130215 806 - (djm) [contrib/suse/rc.sshd] Use SSHD_BIN consistently; bz#2056 from 807 Iain Morgan 808 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] 809 Use getpgrp() if we don't have getpgid() (old BSDs, maybe others). 810 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoull.c 811 openbsd-compat/openbsd-compat.h] Add strtoull to compat library for 812 platforms that don't have it. 813 - (dtucker) [openbsd-compat/openbsd-compat.h] Add prototype for strtoul, 814 group strto* function prototypes together. 815 - (dtucker) [openbsd-compat/bsd-misc.c] Handle the case where setpgrp() takes 816 an argument. Pointed out by djm. 817 - (djm) OpenBSD CVS Sync 818 - djm@cvs.openbsd.org 2013/02/14 21:35:59 819 [auth2-pubkey.c] 820 Correct error message that had a typo and was logging the wrong thing; 821 patch from Petr Lautrbach 822 - dtucker@cvs.openbsd.org 2013/02/15 00:21:01 823 [sshconnect2.c] 824 Warn more loudly if an IdentityFile provided by the user cannot be read. 825 bz #1981, ok djm@ 826 82720130214 828 - (djm) [regress/krl.sh] Don't use ecdsa keys in environment that lack ECC. 829 - (djm) [regress/krl.sh] typo; found by Iain Morgan 830 - (djm) [regress/integrity.sh] Start fuzzing from offset 2500 (instead 831 of 2300) to avoid clobbering the end of (non-MAC'd) KEX. Verified by 832 Iain Morgan 833 83420130212 835 - (djm) OpenBSD CVS Sync 836 - djm@cvs.openbsd.org 2013/01/24 21:45:37 837 [krl.c] 838 fix handling of (unused) KRL signatures; skip string in correct buffer 839 - djm@cvs.openbsd.org 2013/01/24 22:08:56 840 [krl.c] 841 skip serial lookup when cert's serial number is zero 842 - krw@cvs.openbsd.org 2013/01/25 05:00:27 843 [krl.c] 844 Revert last. Breaks due to likely typo. Let djm@ fix later. 845 ok djm@ via dlg@ 846 - djm@cvs.openbsd.org 2013/01/25 10:22:19 847 [krl.c] 848 redo last commit without the vi-vomit that snuck in: 849 skip serial lookup when cert's serial number is zero 850 (now with 100% better comment) 851 - djm@cvs.openbsd.org 2013/01/26 06:11:05 852 [Makefile.in acss.c acss.h cipher-acss.c cipher.c] 853 [openbsd-compat/openssl-compat.h] 854 remove ACSS, now that it is gone from libcrypto too 855 - djm@cvs.openbsd.org 2013/01/27 10:06:12 856 [krl.c] 857 actually use the xrealloc() return value; spotted by xi.wang AT gmail.com 858 - dtucker@cvs.openbsd.org 2013/02/06 00:20:42 859 [servconf.c sshd_config sshd_config.5] 860 Change default of MaxStartups to 10:30:100 to start doing random early 861 drop at 10 connections up to 100 connections. This will make it harder 862 to DoS as CPUs have come a long way since the original value was set 863 back in 2000. Prompted by nion at debian org, ok markus@ 864 - dtucker@cvs.openbsd.org 2013/02/06 00:22:21 865 [auth.c] 866 Fix comment, from jfree.e1 at gmail 867 - djm@cvs.openbsd.org 2013/02/08 00:41:12 868 [sftp.c] 869 fix NULL deref when built without libedit and control characters 870 entered as command; debugging and patch from Iain Morgan an 871 Loganaden Velvindron in bz#1956 872 - markus@cvs.openbsd.org 2013/02/10 21:19:34 873 [version.h] 874 openssh 6.2 875 - djm@cvs.openbsd.org 2013/02/10 23:32:10 876 [ssh-keygen.c] 877 append to moduli file when screening candidates rather than overwriting. 878 allows resumption of interrupted screen; patch from Christophe Garault 879 in bz#1957; ok dtucker@ 880 - djm@cvs.openbsd.org 2013/02/10 23:35:24 881 [packet.c] 882 record "Received disconnect" messages at ERROR rather than INFO priority, 883 since they are abnormal and result in a non-zero ssh exit status; patch 884 from Iain Morgan in bz#2057; ok dtucker@ 885 - dtucker@cvs.openbsd.org 2013/02/11 21:21:58 886 [sshd.c] 887 Add openssl version to debug output similar to the client. ok markus@ 888 - djm@cvs.openbsd.org 2013/02/11 23:58:51 889 [regress/try-ciphers.sh] 890 remove acss here too 891 - (djm) [regress/try-ciphers.sh] clean up CVS merge botch 892 89320130211 894 - (djm) [configure.ac openbsd-compat/openssl-compat.h] Repair build on old 895 libcrypto that lacks EVP_CIPHER_CTX_ctrl 896 89720130208 898 - (djm) [contrib/redhat/sshd.init] treat RETVAL as an integer; 899 patch from Iain Morgan in bz#2059 900 - (dtucker) [configure.ac openbsd-compat/sys-tree.h] Test if compiler allows 901 __attribute__ on return values and work around if necessary. ok djm@ 902 90320130207 904 - (djm) [configure.ac] Don't probe seccomp capability of running kernel 905 at configure time; the seccomp sandbox will fall back to rlimit at 906 runtime anyway. Patch from plautrba AT redhat.com in bz#2011 907 90820130120 909 - (djm) [cipher-aes.c cipher-ctr.c openbsd-compat/openssl-compat.h] 910 Move prototypes for replacement ciphers to openssl-compat.h; fix EVP 911 prototypes for openssl-1.0.0-fips. 912 - (djm) OpenBSD CVS Sync 913 - jmc@cvs.openbsd.org 2013/01/18 07:57:47 914 [ssh-keygen.1] 915 tweak previous; 916 - jmc@cvs.openbsd.org 2013/01/18 07:59:46 917 [ssh-keygen.c] 918 -u before -V in usage(); 919 - jmc@cvs.openbsd.org 2013/01/18 08:00:49 920 [sshd_config.5] 921 tweak previous; 922 - jmc@cvs.openbsd.org 2013/01/18 08:39:04 923 [ssh-keygen.1] 924 add -Q to the options list; ok djm 925 - jmc@cvs.openbsd.org 2013/01/18 21:48:43 926 [ssh-keygen.1] 927 command-line (adj.) -> command line (n.); 928 - jmc@cvs.openbsd.org 2013/01/19 07:13:25 929 [ssh-keygen.1] 930 fix some formatting; ok djm 931 - markus@cvs.openbsd.org 2013/01/19 12:34:55 932 [krl.c] 933 RB_INSERT does not remove existing elments; ok djm@ 934 - (djm) [openbsd-compat/sys-tree.h] Sync with OpenBSD. krl.c needs newer 935 version. 936 - (djm) [regress/krl.sh] replacement for jot; most platforms lack it 937 93820130118 939 - (djm) OpenBSD CVS Sync 940 - djm@cvs.openbsd.org 2013/01/17 23:00:01 941 [auth.c key.c key.h ssh-keygen.1 ssh-keygen.c sshd_config.5] 942 [krl.c krl.h PROTOCOL.krl] 943 add support for Key Revocation Lists (KRLs). These are a compact way to 944 represent lists of revoked keys and certificates, taking as little as 945 a single bit of incremental cost to revoke a certificate by serial number. 946 KRLs are loaded via the existing RevokedKeys sshd_config option. 947 feedback and ok markus@ 948 - djm@cvs.openbsd.org 2013/01/18 00:45:29 949 [regress/Makefile regress/cert-userkey.sh regress/krl.sh] 950 Tests for Key Revocation Lists (KRLs) 951 - djm@cvs.openbsd.org 2013/01/18 03:00:32 952 [krl.c] 953 fix KRL generation bug for list sections 954 95520130117 956 - (djm) [regress/cipher-speed.sh regress/integrity.sh regress/try-ciphers.sh] 957 check for GCM support before testing GCM ciphers. 958 95920130112 960 - (djm) OpenBSD CVS Sync 961 - djm@cvs.openbsd.org 2013/01/12 11:22:04 962 [cipher.c] 963 improve error message for integrity failure in AES-GCM modes; ok markus@ 964 - djm@cvs.openbsd.org 2013/01/12 11:23:53 965 [regress/cipher-speed.sh regress/integrity.sh regress/try-ciphers.sh] 966 test AES-GCM modes; feedback markus@ 967 - (djm) [regress/integrity.sh] repair botched merge 968 96920130109 970 - (djm) OpenBSD CVS Sync 971 - dtucker@cvs.openbsd.org 2012/12/14 05:26:43 972 [auth.c] 973 use correct string in error message; from rustybsd at gmx.fr 974 - djm@cvs.openbsd.org 2013/01/02 00:32:07 975 [clientloop.c mux.c] 976 channel_setup_local_fwd_listener() returns 0 on failure, not -ve 977 bz#2055 reported by mathieu.lacage AT gmail.com 978 - djm@cvs.openbsd.org 2013/01/02 00:33:49 979 [PROTOCOL.agent] 980 correct format description for SSH_AGENTC_ADD_RSA_ID_CONSTRAINED 981 bz#2051 from david AT lechnology.com 982 - djm@cvs.openbsd.org 2013/01/03 05:49:36 983 [servconf.h] 984 add a couple of ServerOptions members that should be copied to the privsep 985 child (for consistency, in this case they happen only to be accessed in 986 the monitor); ok dtucker@ 987 - djm@cvs.openbsd.org 2013/01/03 12:49:01 988 [PROTOCOL] 989 fix description of MAC calculation for EtM modes; ok markus@ 990 - djm@cvs.openbsd.org 2013/01/03 12:54:49 991 [sftp-server.8 sftp-server.c] 992 allow specification of an alternate start directory for sftp-server(8) 993 "I like this" markus@ 994 - djm@cvs.openbsd.org 2013/01/03 23:22:58 995 [ssh-keygen.c] 996 allow fingerprinting of keys hosted in PKCS#11 tokens: ssh-keygen -lD ... 997 ok markus@ 998 - jmc@cvs.openbsd.org 2013/01/04 19:26:38 999 [sftp-server.8 sftp-server.c] 1000 sftp-server.8: add argument name to -d 1001 sftp-server.c: add -d to usage() 1002 ok djm 1003 - markus@cvs.openbsd.org 2013/01/08 18:49:04 1004 [PROTOCOL authfile.c cipher.c cipher.h kex.c kex.h monitor_wrap.c] 1005 [myproposal.h packet.c ssh_config.5 sshd_config.5] 1006 support AES-GCM as defined in RFC 5647 (but with simpler KEX handling) 1007 ok and feedback djm@ 1008 - djm@cvs.openbsd.org 2013/01/09 05:40:17 1009 [ssh-keygen.c] 1010 correctly initialise fingerprint type for fingerprinting PKCS#11 keys 1011 - (djm) [cipher.c configure.ac openbsd-compat/openssl-compat.h] 1012 Fix merge botch, automatically detect AES-GCM in OpenSSL, move a little 1013 cipher compat code to openssl-compat.h 1014 101520121217 1016 - (dtucker) [Makefile.in] Add some scaffolding so that the new regress 1017 tests will work with VPATH directories. 1018 101920121213 1020 - (djm) OpenBSD CVS Sync 1021 - markus@cvs.openbsd.org 2012/12/12 16:45:52 1022 [packet.c] 1023 reset incoming_packet buffer for each new packet in EtM-case, too; 1024 this happens if packets are parsed only parially (e.g. ignore 1025 messages sent when su/sudo turn off echo); noted by sthen/millert 1026 - naddy@cvs.openbsd.org 2012/12/12 16:46:10 1027 [cipher.c] 1028 use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolled 1029 counter mode code; ok djm@ 1030 - (djm) [configure.ac cipher-ctr.c] Adapt EVP AES CTR change to retain our 1031 compat code for older OpenSSL 1032 - (djm) [cipher.c] Fix missing prototype for compat code 1033 103420121212 1035 - (djm) OpenBSD CVS Sync 1036 - markus@cvs.openbsd.org 2012/12/11 22:16:21 1037 [monitor.c] 1038 drain the log messages after receiving the keystate from the unpriv 1039 child. otherwise it might block while sending. ok djm@ 1040 - markus@cvs.openbsd.org 2012/12/11 22:31:18 1041 [PROTOCOL authfile.c cipher.c cipher.h kex.h mac.c myproposal.h] 1042 [packet.c ssh_config.5 sshd_config.5] 1043 add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithms 1044 that change the packet format and compute the MAC over the encrypted 1045 message (including the packet size) instead of the plaintext data; 1046 these EtM modes are considered more secure and used by default. 1047 feedback and ok djm@ 1048 - sthen@cvs.openbsd.org 2012/12/11 22:51:45 1049 [mac.c] 1050 fix typo, s/tem/etm in hmac-ripemd160-tem. ok markus@ 1051 - markus@cvs.openbsd.org 2012/12/11 22:32:56 1052 [regress/try-ciphers.sh] 1053 add etm modes 1054 - markus@cvs.openbsd.org 2012/12/11 22:42:11 1055 [regress/Makefile regress/modpipe.c regress/integrity.sh] 1056 test the integrity of the packets; with djm@ 1057 - markus@cvs.openbsd.org 2012/12/11 23:12:13 1058 [try-ciphers.sh] 1059 add hmac-ripemd160-etm@openssh.com 1060 - (djm) [mac.c] fix merge botch 1061 - (djm) [regress/Makefile regress/integrity.sh] Make the integrity.sh test 1062 work on platforms without 'jot' 1063 - (djm) [regress/integrity.sh] Fix awk quoting, packet length skip 1064 - (djm) [regress/Makefile] fix t-exec rule 1065 106620121207 1067 - (dtucker) OpenBSD CVS Sync 1068 - dtucker@cvs.openbsd.org 2012/12/06 06:06:54 1069 [regress/keys-command.sh] 1070 Fix some problems with the keys-command test: 1071 - use string comparison rather than numeric comparison 1072 - check for existing KEY_COMMAND file and don't clobber if it exists 1073 - clean up KEY_COMMAND file if we do create it. 1074 - check that KEY_COMMAND is executable (which it won't be if eg /var/run 1075 is mounted noexec). 1076 ok djm. 1077 - jmc@cvs.openbsd.org 2012/12/03 08:33:03 1078 [ssh-add.1 sshd_config.5] 1079 tweak previous; 1080 - markus@cvs.openbsd.org 2012/12/05 15:42:52 1081 [ssh-add.c] 1082 prevent double-free of comment; ok djm@ 1083 - dtucker@cvs.openbsd.org 2012/12/07 01:51:35 1084 [serverloop.c] 1085 Cast signal to int for logging. A no-op on openbsd (they're always ints) 1086 but will prevent warnings in portable. ok djm@ 1087 108820121205 1089 - (tim) [defines.h] Some platforms are missing ULLONG_MAX. Feedback djm@. 1090 109120121203 1092 - (djm) [openbsd-compat/sys-queue.h] Sync with OpenBSD to get 1093 TAILQ_FOREACH_SAFE needed for upcoming changes. 1094 - (djm) OpenBSD CVS Sync 1095 - djm@cvs.openbsd.org 2012/12/02 20:26:11 1096 [ssh_config.5 sshconnect2.c] 1097 Make IdentitiesOnly apply to keys obtained from a PKCS11Provider. 1098 This allows control of which keys are offered from tokens using 1099 IdentityFile. ok markus@ 1100 - djm@cvs.openbsd.org 2012/12/02 20:42:15 1101 [ssh-add.1 ssh-add.c] 1102 make deleting explicit keys "ssh-add -d" symmetric with adding keys - 1103 try to delete the corresponding certificate too and respect the -k option 1104 to allow deleting of the key only; feedback and ok markus@ 1105 - djm@cvs.openbsd.org 2012/12/02 20:46:11 1106 [auth-options.c channels.c servconf.c servconf.h serverloop.c session.c] 1107 [sshd_config.5] 1108 make AllowTcpForwarding accept "local" and "remote" in addition to its 1109 current "yes"/"no" to allow the server to specify whether just local or 1110 remote TCP forwarding is enabled. ok markus@ 1111 - dtucker@cvs.openbsd.org 2012/10/05 02:20:48 1112 [regress/cipher-speed.sh regress/try-ciphers.sh] 1113 Add umac-128@openssh.com to the list of MACs to be tested 1114 - djm@cvs.openbsd.org 2012/10/19 05:10:42 1115 [regress/cert-userkey.sh] 1116 include a serial number when generating certs 1117 - djm@cvs.openbsd.org 2012/11/22 22:49:30 1118 [regress/Makefile regress/keys-command.sh] 1119 regress for AuthorizedKeysCommand; hints from markus@ 1120 - djm@cvs.openbsd.org 2012/12/02 20:47:48 1121 [Makefile regress/forward-control.sh] 1122 regress for AllowTcpForwarding local/remote; ok markus@ 1123 - djm@cvs.openbsd.org 2012/12/03 00:14:06 1124 [auth2-chall.c ssh-keygen.c] 1125 Fix compilation with -Wall -Werror (trivial type fixes) 1126 - (djm) [configure.ac] Turn on -g for gcc compilers. Helps pre-installation 1127 debugging. ok dtucker@ 1128 - (djm) [configure.ac] Revert previous. configure.ac already does this 1129 for us. 1130 113120121114 1132 - (djm) OpenBSD CVS Sync 1133 - djm@cvs.openbsd.org 2012/11/14 02:24:27 1134 [auth2-pubkey.c] 1135 fix username passed to helper program 1136 prepare stdio fds before closefrom() 1137 spotted by landry@ 1138 - djm@cvs.openbsd.org 2012/11/14 02:32:15 1139 [ssh-keygen.c] 1140 allow the full range of unsigned serial numbers; 'fine' deraadt@ 1141 - djm@cvs.openbsd.org 2012/12/02 20:34:10 1142 [auth.c auth.h auth1.c auth2-chall.c auth2-gss.c auth2-jpake.c auth2.c] 1143 [monitor.c monitor.h] 1144 Fixes logging of partial authentication when privsep is enabled 1145 Previously, we recorded "Failed xxx" since we reset authenticated before 1146 calling auth_log() in auth2.c. This adds an explcit "Partial" state. 1147 1148 Add a "submethod" to auth_log() to report which submethod is used 1149 for keyboard-interactive. 1150 1151 Fix multiple authentication when one of the methods is 1152 keyboard-interactive. 1153 1154 ok markus@ 1155 - dtucker@cvs.openbsd.org 2012/10/05 02:05:30 1156 [regress/multiplex.sh] 1157 Use 'kill -0' to test for the presence of a pid since it's more portable 1158 115920121107 1160 - (djm) OpenBSD CVS Sync 1161 - eric@cvs.openbsd.org 2011/11/28 08:46:27 1162 [moduli.5] 1163 fix formula 1164 ok djm@ 1165 - jmc@cvs.openbsd.org 2012/09/26 17:34:38 1166 [moduli.5] 1167 last stage of rfc changes, using consistent Rs/Re blocks, and moving the 1168 references into a STANDARDS section; 1169 117020121105 1171 - (dtucker) [uidswap.c openbsd-compat/Makefile.in 1172 openbsd-compat/bsd-setres_id.c openbsd-compat/bsd-setres_id.h 1173 openbsd-compat/openbsd-compat.h] Move the fallback code for setting uids 1174 and gids from uidswap.c to the compat library, which allows it to work with 1175 the new setresuid calls in auth2-pubkey. with tim@, ok djm@ 1176 - (dtucker) [auth2-pubkey.c] wrap paths.h in an ifdef for platforms that 1177 don't have it. Spotted by tim@. 1178 117920121104 1180 - (djm) OpenBSD CVS Sync 1181 - jmc@cvs.openbsd.org 2012/10/31 08:04:50 1182 [sshd_config.5] 1183 tweak previous; 1184 - djm@cvs.openbsd.org 2012/11/04 10:38:43 1185 [auth2-pubkey.c sshd.c sshd_config.5] 1186 Remove default of AuthorizedCommandUser. Administrators are now expected 1187 to explicitly specify a user. feedback and ok markus@ 1188 - djm@cvs.openbsd.org 2012/11/04 11:09:15 1189 [auth.h auth1.c auth2.c monitor.c servconf.c servconf.h sshd.c] 1190 [sshd_config.5] 1191 Support multiple required authentication via an AuthenticationMethods 1192 option. This option lists one or more comma-separated lists of 1193 authentication method names. Successful completion of all the methods in 1194 any list is required for authentication to complete; 1195 feedback and ok markus@ 1196 119720121030 1198 - (djm) OpenBSD CVS Sync 1199 - markus@cvs.openbsd.org 2012/10/05 12:34:39 1200 [sftp.c] 1201 fix signed vs unsigned warning; feedback & ok: djm@ 1202 - djm@cvs.openbsd.org 2012/10/30 21:29:55 1203 [auth-rsa.c auth.c auth.h auth2-pubkey.c servconf.c servconf.h] 1204 [sshd.c sshd_config sshd_config.5] 1205 new sshd_config option AuthorizedKeysCommand to support fetching 1206 authorized_keys from a command in addition to (or instead of) from 1207 the filesystem. The command is run as the target server user unless 1208 another specified via a new AuthorizedKeysCommandUser option. 1209 1210 patch originally by jchadima AT redhat.com, reworked by me; feedback 1211 and ok markus@ 1212 121320121019 1214 - (tim) [buildpkg.sh.in] Double up on some backslashes so they end up in 1215 the generated file as intended. 1216 121720121005 1218 - (dtucker) OpenBSD CVS Sync 1219 - djm@cvs.openbsd.org 2012/09/17 09:54:44 1220 [sftp.c] 1221 an XXX for later 1222 - markus@cvs.openbsd.org 2012/09/17 13:04:11 1223 [packet.c] 1224 clear old keys on rekeing; ok djm 1225 - dtucker@cvs.openbsd.org 2012/09/18 10:36:12 1226 [sftp.c] 1227 Add bounds check on sftp tab-completion. Part of a patch from from 1228 Jean-Marc Robert via tech@, ok djm 1229 - dtucker@cvs.openbsd.org 2012/09/21 10:53:07 1230 [sftp.c] 1231 Fix improper handling of absolute paths when PWD is part of the completed 1232 path. Patch from Jean-Marc Robert via tech@, ok djm. 1233 - dtucker@cvs.openbsd.org 2012/09/21 10:55:04 1234 [sftp.c] 1235 Fix handling of filenames containing escaped globbing characters and 1236 escape "#" and "*". Patch from Jean-Marc Robert via tech@, ok djm. 1237 - jmc@cvs.openbsd.org 2012/09/26 16:12:13 1238 [ssh.1] 1239 last stage of rfc changes, using consistent Rs/Re blocks, and moving the 1240 references into a STANDARDS section; 1241 - naddy@cvs.openbsd.org 2012/10/01 13:59:51 1242 [monitor_wrap.c] 1243 pasto; ok djm@ 1244 - djm@cvs.openbsd.org 2012/10/02 07:07:45 1245 [ssh-keygen.c] 1246 fix -z option, broken in revision 1.215 1247 - markus@cvs.openbsd.org 2012/10/04 13:21:50 1248 [myproposal.h ssh_config.5 umac.h sshd_config.5 ssh.1 sshd.8 mac.c] 1249 add umac128 variant; ok djm@ at n2k12 1250 - dtucker@cvs.openbsd.org 2012/09/06 04:11:07 1251 [regress/try-ciphers.sh] 1252 Restore missing space. (Id sync only). 1253 - dtucker@cvs.openbsd.org 2012/09/09 11:51:25 1254 [regress/multiplex.sh] 1255 Add test for ssh -Ostop 1256 - dtucker@cvs.openbsd.org 2012/09/10 00:49:21 1257 [regress/multiplex.sh] 1258 Log -O cmd output to the log file and make logging consistent with the 1259 other tests. Test clean shutdown of an existing channel when testing 1260 "stop". 1261 - dtucker@cvs.openbsd.org 2012/09/10 01:51:19 1262 [regress/multiplex.sh] 1263 use -Ocheck and waiting for completions by PID to make multiplexing test 1264 less racy and (hopefully) more reliable on slow hardware. 1265 - [Makefile umac.c] Add special-case target to build umac128.o. 1266 - [umac.c] Enforce allowed umac output sizes. From djm@. 1267 - [Makefile.in] "Using $< in a non-suffix rule context is a GNUmake idiom". 1268 126920120917 1270 - (dtucker) OpenBSD CVS Sync 1271 - dtucker@cvs.openbsd.org 2012/09/13 23:37:36 1272 [servconf.c] 1273 Fix comment line length 1274 - markus@cvs.openbsd.org 2012/09/14 16:51:34 1275 [sshconnect.c] 1276 remove unused variable 1277 127820120907 1279 - (dtucker) OpenBSD CVS Sync 1280 - dtucker@cvs.openbsd.org 2012/09/06 09:50:13 1281 [clientloop.c] 1282 Make the escape command help (~?) context sensitive so that only commands 1283 that will work in the current session are shown. ok markus@ 1284 - jmc@cvs.openbsd.org 2012/09/06 13:57:42 1285 [ssh.1] 1286 missing letter in previous; 1287 - dtucker@cvs.openbsd.org 2012/09/07 00:30:19 1288 [clientloop.c] 1289 Print '^Z' instead of a raw ^Z when the sequence is not supported. ok djm@ 1290 - dtucker@cvs.openbsd.org 2012/09/07 01:10:21 1291 [clientloop.c] 1292 Merge escape help text for ~v and ~V; ok djm@ 1293 - dtucker@cvs.openbsd.org 2012/09/07 06:34:21 1294 [clientloop.c] 1295 when muxmaster is run with -N, make it shut down gracefully when a client 1296 sends it "-O stop" rather than hanging around (bz#1985). ok djm@ 1297 129820120906 1299 - (dtucker) OpenBSD CVS Sync 1300 - jmc@cvs.openbsd.org 2012/08/15 18:25:50 1301 [ssh-keygen.1] 1302 a little more info on certificate validity; 1303 requested by Ross L Richardson, and provided by djm 1304 - dtucker@cvs.openbsd.org 2012/08/17 00:45:45 1305 [clientloop.c clientloop.h mux.c] 1306 Force a clean shutdown of ControlMaster client sessions when the ~. escape 1307 sequence is used. This means that ~. should now work in mux clients even 1308 if the server is no longer responding. Found by tedu, ok djm. 1309 - djm@cvs.openbsd.org 2012/08/17 01:22:56 1310 [kex.c] 1311 add some comments about better handling first-KEX-follows notifications 1312 from the server. Nothing uses these right now. No binary change 1313 - djm@cvs.openbsd.org 2012/08/17 01:25:58 1314 [ssh-keygen.c] 1315 print details of which host lines were deleted when using 1316 "ssh-keygen -R host"; ok markus@ 1317 - djm@cvs.openbsd.org 2012/08/17 01:30:00 1318 [compat.c sshconnect.c] 1319 Send client banner immediately, rather than waiting for the server to 1320 move first for SSH protocol 2 connections (the default). Patch based on 1321 one in bz#1999 by tls AT panix.com, feedback dtucker@ ok markus@ 1322 - dtucker@cvs.openbsd.org 2012/09/06 04:37:39 1323 [clientloop.c log.c ssh.1 log.h] 1324 Add ~v and ~V escape sequences to raise and lower the logging level 1325 respectively. Man page help from jmc, ok deraadt jmc 1326 132720120830 1328 - (dtucker) [moduli] Import new moduli file. 1329 133020120828 1331 - (djm) Release openssh-6.1 1332 133320120828 1334 - (dtucker) [openbsd-compat/bsd-cygwin_util.h] define WIN32_LEAN_AND_MEAN 1335 for compatibility with future mingw-w64 headers. Patch from vinschen at 1336 redhat com. 1337 133820120822 1339 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 1340 [contrib/suse/openssh.spec] Update version numbers 1341 134220120731 1343 - (djm) OpenBSD CVS Sync 1344 - jmc@cvs.openbsd.org 2012/07/06 06:38:03 1345 [ssh-keygen.c] 1346 missing full stop in usage(); 1347 - djm@cvs.openbsd.org 2012/07/10 02:19:15 1348 [servconf.c servconf.h sshd.c sshd_config] 1349 Turn on systrace sandboxing of pre-auth sshd by default for new installs 1350 by shipping a config that overrides the current UsePrivilegeSeparation=yes 1351 default. Make it easier to flip the default in the future by adding too. 1352 prodded markus@ feedback dtucker@ "get it in" deraadt@ 1353 - dtucker@cvs.openbsd.org 2012/07/13 01:35:21 1354 [servconf.c] 1355 handle long comments in config files better. bz#2025, ok markus 1356 - markus@cvs.openbsd.org 2012/07/22 18:19:21 1357 [version.h] 1358 openssh 6.1 1359 136020120720 1361 - (dtucker) Import regened moduli file. 1362 136320120706 1364 - (djm) [sandbox-seccomp-filter.c] fallback to rlimit if seccomp filter is 1365 not available. Allows use of sshd compiled on host with a filter-capable 1366 kernel on hosts that lack the support. bz#2011 ok dtucker@ 1367 - (djm) [configure.ac] Recursively expand $(bindir) to ensure it has no 1368 unexpanded $(prefix) embedded. bz#2007 patch from nix-corp AT 1369 esperi.org.uk; ok dtucker@ 1370- (djm) OpenBSD CVS Sync 1371 - dtucker@cvs.openbsd.org 2012/07/06 00:41:59 1372 [moduli.c ssh-keygen.1 ssh-keygen.c] 1373 Add options to specify starting line number and number of lines to process 1374 when screening moduli candidates. This allows processing of different 1375 parts of a candidate moduli file in parallel. man page help jmc@, ok djm@ 1376 - djm@cvs.openbsd.org 2012/07/06 01:37:21 1377 [mux.c] 1378 fix memory leak of passed-in environment variables and connection 1379 context when new session message is malformed; bz#2003 from Bert.Wesarg 1380 AT googlemail.com 1381 - djm@cvs.openbsd.org 2012/07/06 01:47:38 1382 [ssh.c] 1383 move setting of tty_flag to after config parsing so RequestTTY options 1384 are correctly picked up. bz#1995 patch from przemoc AT gmail.com; 1385 ok dtucker@ 1386 138720120704 1388 - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] Add setlinebuf for 1389 platforms that don't have it. "looks good" tim@ 1390 139120120703 1392 - (dtucker) [configure.ac] Detect platforms that can't use select(2) with 1393 setrlimit(RLIMIT_NOFILE, rl_zero) and disable the rlimit sandbox on those. 1394 - (dtucker) [configure.ac sandbox-rlimit.c] Test whether or not 1395 setrlimit(RLIMIT_FSIZE, rl_zero) and skip it if it's not supported. Its 1396 benefit is minor, so it's not worth disabling the sandbox if it doesn't 1397 work. 1398 139920120702 1400- (dtucker) OpenBSD CVS Sync 1401 - naddy@cvs.openbsd.org 2012/06/29 13:57:25 1402 [ssh_config.5 sshd_config.5] 1403 match the documented MAC order of preference to the actual one; 1404 ok dtucker@ 1405 - markus@cvs.openbsd.org 2012/06/30 14:35:09 1406 [sandbox-systrace.c sshd.c] 1407 fix a during the load of the sandbox policies (child can still make 1408 the read-syscall and wait forever for systrace-answers) by replacing 1409 the read/write synchronisation with SIGSTOP/SIGCONT; 1410 report and help hshoexer@; ok djm@, dtucker@ 1411 - dtucker@cvs.openbsd.org 2012/07/02 08:50:03 1412 [ssh.c] 1413 set interactive ToS for forwarded X11 sessions. ok djm@ 1414 - dtucker@cvs.openbsd.org 2012/07/02 12:13:26 1415 [ssh-pkcs11-helper.c sftp-client.c] 1416 fix a couple of "assigned but not used" warnings. ok markus@ 1417 - dtucker@cvs.openbsd.org 2012/07/02 14:37:06 1418 [regress/connect-privsep.sh] 1419 remove exit from end of test since it prevents reporting failure 1420 - (dtucker) [regress/reexec.sh regress/sftp-cmds.sh regress/test-exec.sh] 1421 Move cygwin detection to test-exec and use to skip reexec test on cygwin. 1422 - (dtucker) [regress/test-exec.sh] Correct uname for cygwin/w2k. 1423 142420120629 1425 - OpenBSD CVS Sync 1426 - dtucker@cvs.openbsd.org 2012/06/21 00:16:07 1427 [addrmatch.c] 1428 fix strlcpy truncation check. from carsten at debian org, ok markus 1429 - dtucker@cvs.openbsd.org 2012/06/22 12:30:26 1430 [monitor.c sshconnect2.c] 1431 remove dead code following 'for (;;)' loops. 1432 From Steve.McClellan at radisys com, ok markus@ 1433 - dtucker@cvs.openbsd.org 2012/06/22 14:36:33 1434 [sftp.c] 1435 Remove unused variable leftover from tab-completion changes. 1436 From Steve.McClellan at radisys com, ok markus@ 1437 - dtucker@cvs.openbsd.org 2012/06/26 11:02:30 1438 [sandbox-systrace.c] 1439 Add mquery to the list of allowed syscalls for "UsePrivilegeSeparation 1440 sandbox" since malloc now uses it. From johnw.mail at gmail com. 1441 - dtucker@cvs.openbsd.org 2012/06/28 05:07:45 1442 [mac.c myproposal.h ssh_config.5 sshd_config.5] 1443 Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs since they were removed 1444 from draft6 of the spec and will not be in the RFC when published. Patch 1445 from mdb at juniper net via bz#2023, ok markus. 1446 - naddy@cvs.openbsd.org 2012/06/29 13:57:25 1447 [ssh_config.5 sshd_config.5] 1448 match the documented MAC order of preference to the actual one; ok dtucker@ 1449 - dtucker@cvs.openbsd.org 2012/05/13 01:42:32 1450 [regress/addrmatch.sh] 1451 Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust tests 1452 to match. Feedback and ok djm@ markus@. 1453 - djm@cvs.openbsd.org 2012/06/01 00:47:35 1454 [regress/multiplex.sh regress/forwarding.sh] 1455 append to rather than truncate test log; bz#2013 from openssh AT 1456 roumenpetrov.info 1457 - djm@cvs.openbsd.org 2012/06/01 00:52:52 1458 [regress/sftp-cmds.sh] 1459 don't delete .* on cleanup due to unintended env expansion; pointed out in 1460 bz#2014 by openssh AT roumenpetrov.info 1461 - dtucker@cvs.openbsd.org 2012/06/26 12:06:59 1462 [regress/connect-privsep.sh] 1463 test sandbox with every malloc option 1464 - dtucker@cvs.openbsd.org 2012/06/28 05:07:45 1465 [regress/try-ciphers.sh regress/cipher-speed.sh] 1466 Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs since they were removed 1467 from draft6 of the spec and will not be in the RFC when published. Patch 1468 from mdb at juniper net via bz#2023, ok markus. 1469 - (dtucker) [myproposal.h] Remove trailing backslash to fix compile error. 1470 - (dtucker) [key.c] ifdef out sha256 key types on platforms that don't have 1471 the required functions in libcrypto. 1472 147320120628 1474 - (dtucker) [openbsd-compat/getrrsetbyname-ldns.c] bz #2022: prevent null 1475 pointer deref in the client when built with LDNS and using DNSSEC with a 1476 CNAME. Patch from gregdlg+mr at hochet info. 1477 147820120622 1479 - (dtucker) [contrib/cygwin/ssh-host-config] Ensure that user sshd runs as 1480 can logon as a service. Patch from vinschen at redhat com. 1481 148220120620 1483 - (djm) OpenBSD CVS Sync 1484 - djm@cvs.openbsd.org 2011/12/02 00:41:56 1485 [mux.c] 1486 fix bz#1948: ssh -f doesn't fork for multiplexed connection. 1487 ok dtucker@ 1488 - djm@cvs.openbsd.org 2011/12/04 23:16:12 1489 [mux.c] 1490 revert: 1491 > revision 1.32 1492 > date: 2011/12/02 00:41:56; author: djm; state: Exp; lines: +4 -1 1493 > fix bz#1948: ssh -f doesn't fork for multiplexed connection. 1494 > ok dtucker@ 1495 it interacts badly with ControlPersist 1496 - djm@cvs.openbsd.org 2012/01/07 21:11:36 1497 [mux.c] 1498 fix double-free in new session handler 1499 NB. Id sync only 1500 - djm@cvs.openbsd.org 2012/05/23 03:28:28 1501 [dns.c dns.h key.c key.h ssh-keygen.c] 1502 add support for RFC6594 SSHFP DNS records for ECDSA key types. 1503 patch from bugzilla-m67 AT nulld.me in bz#1978; ok + tweak markus@ 1504 (Original authors Ondřej Surý, Ondřej Caletka and Daniel Black) 1505 - djm@cvs.openbsd.org 2012/06/01 00:49:35 1506 [PROTOCOL.mux] 1507 correct types of port numbers (integers, not strings); bz#2004 from 1508 bert.wesarg AT googlemail.com 1509 - djm@cvs.openbsd.org 2012/06/01 01:01:22 1510 [mux.c] 1511 fix memory leak when mux socket creation fails; bz#2002 from bert.wesarg 1512 AT googlemail.com 1513 - dtucker@cvs.openbsd.org 2012/06/18 11:43:53 1514 [jpake.c] 1515 correct sizeof usage. patch from saw at online.de, ok deraadt 1516 - dtucker@cvs.openbsd.org 2012/06/18 11:49:58 1517 [ssh_config.5] 1518 RSA instead of DSA twice. From Steve.McClellan at radisys com 1519 - dtucker@cvs.openbsd.org 2012/06/18 12:07:07 1520 [ssh.1 sshd.8] 1521 Remove mention of 'three' key files since there are now four. From 1522 Steve.McClellan at radisys com. 1523 - dtucker@cvs.openbsd.org 2012/06/18 12:17:18 1524 [ssh.1] 1525 Clarify description of -W. Noted by Steve.McClellan at radisys com, 1526 ok jmc 1527 - markus@cvs.openbsd.org 2012/06/19 18:25:28 1528 [servconf.c servconf.h sshd_config.5] 1529 sshd_config: extend Match to allow AcceptEnv and {Allow,Deny}{Users,Groups} 1530 this allows 'Match LocalPort 1022' combined with 'AllowUser bauer' 1531 ok djm@ (back in March) 1532 - jmc@cvs.openbsd.org 2012/06/19 21:35:54 1533 [sshd_config.5] 1534 tweak previous; ok markus 1535 - djm@cvs.openbsd.org 2012/06/20 04:42:58 1536 [clientloop.c serverloop.c] 1537 initialise accept() backoff timer to avoid EINVAL from select(2) in 1538 rekeying 1539 154020120519 1541 - (dtucker) [configure.ac] bz#2010: fix non-portable shell construct. Patch 1542 from cjwatson at debian org. 1543 - (dtucker) [configure.ac contrib/Makefile] bz#1996: use AC_PATH_TOOL to find 1544 pkg-config so it does the right thing when cross-compiling. Patch from 1545 cjwatson at debian org. 1546- (dtucker) OpenBSD CVS Sync 1547 - dtucker@cvs.openbsd.org 2012/05/13 01:42:32 1548 [servconf.h servconf.c sshd.8 sshd.c auth.c sshd_config.5] 1549 Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust tests 1550 to match. Feedback and ok djm@ markus@. 1551 - dtucker@cvs.openbsd.org 2012/05/19 06:30:30 1552 [sshd_config.5] 1553 Document PermitOpen none. bz#2001, patch from Loganaden Velvindron 1554 155520120504 1556 - (dtucker) [configure.ac] Include <sys/param.h> rather than <sys/types.h> 1557 to fix building on some plaforms. Fom bowman at math utah edu and 1558 des at des no. 1559 156020120427 1561 - (dtucker) [regress/addrmatch.sh] skip tests when running on a non-ipv6 1562 platform rather than exiting early, so that we still clean up and return 1563 success or failure to test-exec.sh 1564 156520120426 1566 - (djm) [auth-passwd.c] Handle crypt() returning NULL; from Paul Wouters 1567 via Niels 1568 - (djm) [auth-krb5.c] Save errno across calls that might modify it; 1569 ok dtucker@ 1570 157120120423 1572 - OpenBSD CVS Sync 1573 - djm@cvs.openbsd.org 2012/04/23 08:18:17 1574 [channels.c] 1575 fix function proto/source mismatch 1576 157720120422 1578 - OpenBSD CVS Sync 1579 - djm@cvs.openbsd.org 2012/02/29 11:21:26 1580 [ssh-keygen.c] 1581 allow conversion of RSA1 keys to public PEM and PKCS8; "nice" markus@ 1582 - guenther@cvs.openbsd.org 2012/03/15 03:10:27 1583 [session.c] 1584 root should always be excluded from the test for /etc/nologin instead 1585 of having it always enforced even when marked as ignorenologin. This 1586 regressed when the logic was incompletely flipped around in rev 1.251 1587 ok halex@ millert@ 1588 - djm@cvs.openbsd.org 2012/03/28 07:23:22 1589 [PROTOCOL.certkeys] 1590 explain certificate extensions/crit split rationale. Mention requirement 1591 that each appear at most once per cert. 1592 - dtucker@cvs.openbsd.org 2012/03/29 23:54:36 1593 [channels.c channels.h servconf.c] 1594 Add PermitOpen none option based on patch from Loganaden Velvindron 1595 (bz #1949). ok djm@ 1596 - djm@cvs.openbsd.org 2012/04/11 13:16:19 1597 [channels.c channels.h clientloop.c serverloop.c] 1598 don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for a 1599 while; ok deraadt@ markus@ 1600 - djm@cvs.openbsd.org 2012/04/11 13:17:54 1601 [auth.c] 1602 Support "none" as an argument for AuthorizedPrincipalsFile to indicate 1603 no file should be read. 1604 - djm@cvs.openbsd.org 2012/04/11 13:26:40 1605 [sshd.c] 1606 don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for a 1607 while; ok deraadt@ markus@ 1608 - djm@cvs.openbsd.org 2012/04/11 13:34:17 1609 [ssh-keyscan.1 ssh-keyscan.c] 1610 now that sshd defaults to offering ECDSA keys, ssh-keyscan should also 1611 look for them by default; bz#1971 1612 - djm@cvs.openbsd.org 2012/04/12 02:42:32 1613 [servconf.c servconf.h sshd.c sshd_config sshd_config.5] 1614 VersionAddendum option to allow server operators to append some arbitrary 1615 text to the SSH-... banner; ok deraadt@ "don't care" markus@ 1616 - djm@cvs.openbsd.org 2012/04/12 02:43:55 1617 [sshd_config sshd_config.5] 1618 mention AuthorizedPrincipalsFile=none default 1619 - djm@cvs.openbsd.org 2012/04/20 03:24:23 1620 [sftp.c] 1621 setlinebuf(3) is more readable than setvbuf(.., _IOLBF, ...) 1622 - jmc@cvs.openbsd.org 2012/04/20 16:26:22 1623 [ssh.1] 1624 use "brackets" instead of "braces", for consistency; 1625 162620120420 1627 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 1628 [contrib/suse/openssh.spec] Update for release 6.0 1629 - (djm) [README] Update URL to release notes. 1630 - (djm) Release openssh-6.0 1631 163220120419 1633 - (djm) [configure.ac] Fix compilation error on FreeBSD, whose libutil 1634 contains openpty() but not login() 1635 163620120404 1637 - (djm) [Makefile.in configure.ac sandbox-seccomp-filter.c] Add sandbox 1638 mode for Linux's new seccomp filter; patch from Will Drewry; feedback 1639 and ok dtucker@ 1640 164120120330 1642 - (dtucker) [contrib/redhat/openssh.spec] Bug #1992: remove now-gone WARNING 1643 file from spec file. From crighter at nuclioss com. 1644 - (djm) [entropy.c] bz#1991: relax OpenSSL version test to allow running 1645 openssh binaries on a newer fix release than they were compiled on. 1646 with and ok dtucker@ 1647 - (djm) [openbsd-compat/bsd-cygwin_util.h] #undef _WIN32 to avoid incorrect 1648 assumptions when building on Cygwin; patch from Corinna Vinschen 1649 165020120309 1651 - (djm) [openbsd-compat/port-linux.c] bz#1960: fix crash on SELinux 1652 systems where sshd is run in te wrong context. Patch from Sven 1653 Vermeulen; ok dtucker@ 1654 - (djm) [packet.c] bz#1963: Fix IPQoS not being set on non-mapped v4-in-v6 1655 addressed connections. ok dtucker@ 1656 165720120224 1658 - (dtucker) [audit-bsm.c configure.ac] bug #1968: enable workarounds for BSM 1659 audit breakage in Solaris 11. Patch from Magnus Johansson. 1660 166120120215 1662 - (tim) [openbsd-compat/bsd-misc.h sshd.c] Fix conflicting return type for 1663 unsetenv due to rev 1.14 change to setenv.c. Cast unsetenv to void in sshd.c 1664 ok dtucker@ 1665 - (tim) [defines.h] move chunk introduced in 1.125 before MAXPATHLEN so 1666 it actually works. 1667 - (tim) [regress/keytype.sh] stderr redirection needs to be inside back quote 1668 to work. Spotted by Angel Gonzalez 1669 167020120214 1671 - (djm) [openbsd-compat/bsd-cygwin_util.c] Add PROGRAMFILES to list of 1672 preserved Cygwin environment variables; from Corinna Vinschen 1673 167420120211 1675 - (djm) OpenBSD CVS Sync 1676 - djm@cvs.openbsd.org 2012/01/05 00:16:56 1677 [monitor.c] 1678 memleak on error path 1679 - djm@cvs.openbsd.org 2012/01/07 21:11:36 1680 [mux.c] 1681 fix double-free in new session handler 1682 - miod@cvs.openbsd.org 2012/01/08 13:17:11 1683 [ssh-ecdsa.c] 1684 Fix memory leak in ssh_ecdsa_verify(); from Loganaden Velvindron, 1685 ok markus@ 1686 - miod@cvs.openbsd.org 2012/01/16 20:34:09 1687 [ssh-pkcs11-client.c] 1688 Fix a memory leak in pkcs11_rsa_private_encrypt(), reported by Jan Klemkow. 1689 While there, be sure to buffer_clear() between send_msg() and recv_msg(). 1690 ok markus@ 1691 - dtucker@cvs.openbsd.org 2012/01/18 21:46:43 1692 [clientloop.c] 1693 Ensure that $DISPLAY contains only valid characters before using it to 1694 extract xauth data so that it can't be used to play local shell 1695 metacharacter games. Report from r00t_ati at ihteam.net, ok markus. 1696 - markus@cvs.openbsd.org 2012/01/25 19:26:43 1697 [packet.c] 1698 do not permit SSH2_MSG_SERVICE_REQUEST/ACCEPT during rekeying; 1699 ok dtucker@, djm@ 1700 - markus@cvs.openbsd.org 2012/01/25 19:36:31 1701 [authfile.c] 1702 memleak in key_load_file(); from Jan Klemkow 1703 - markus@cvs.openbsd.org 2012/01/25 19:40:09 1704 [packet.c packet.h] 1705 packet_read_poll() is not used anymore. 1706 - markus@cvs.openbsd.org 2012/02/09 20:00:18 1707 [version.h] 1708 move from 6.0-beta to 6.0 1709 171020120206 1711 - (djm) [ssh-keygen.c] Don't fail in do_gen_all_hostkeys on platforms 1712 that don't support ECC. Patch from Phil Oleson 1713 171420111219 1715 - OpenBSD CVS Sync 1716 - djm@cvs.openbsd.org 2011/12/02 00:41:56 1717 [mux.c] 1718 fix bz#1948: ssh -f doesn't fork for multiplexed connection. 1719 ok dtucker@ 1720 - djm@cvs.openbsd.org 2011/12/02 00:43:57 1721 [mac.c] 1722 fix bz#1934: newer OpenSSL versions will require HMAC_CTX_Init before 1723 HMAC_init (this change in policy seems insane to me) 1724 ok dtucker@ 1725 - djm@cvs.openbsd.org 2011/12/04 23:16:12 1726 [mux.c] 1727 revert: 1728 > revision 1.32 1729 > date: 2011/12/02 00:41:56; author: djm; state: Exp; lines: +4 -1 1730 > fix bz#1948: ssh -f doesn't fork for multiplexed connection. 1731 > ok dtucker@ 1732 it interacts badly with ControlPersist 1733 - djm@cvs.openbsd.org 2011/12/07 05:44:38 1734 [auth2.c dh.c packet.c roaming.h roaming_client.c roaming_common.c] 1735 fix some harmless and/or unreachable int overflows; 1736 reported Xi Wang, ok markus@ 1737 173820111125 1739 - OpenBSD CVS Sync 1740 - oga@cvs.openbsd.org 2011/11/16 12:24:28 1741 [sftp.c] 1742 Don't leak list in complete_cmd_parse if there are no commands found. 1743 Discovered when I was ``borrowing'' this code for something else. 1744 ok djm@ 1745 174620111121 1747 - (dtucker) [configure.ac] Set _FORTIFY_SOURCE. ok djm@ 1748 174920111104 1750 - (dtucker) OpenBSD CVS Sync 1751 - djm@cvs.openbsd.org 2011/10/18 05:15:28 1752 [ssh.c] 1753 ssh(1): skip attempting to create ~/.ssh when -F is passed; ok markus@ 1754 - djm@cvs.openbsd.org 2011/10/18 23:37:42 1755 [ssh-add.c] 1756 add -k to usage(); reminded by jmc@ 1757 - djm@cvs.openbsd.org 2011/10/19 00:06:10 1758 [moduli.c] 1759 s/tmpfile/tmp/ to make this -Wshadow clean 1760 - djm@cvs.openbsd.org 2011/10/19 10:39:48 1761 [umac.c] 1762 typo in comment; patch from Michael W. Bombardieri 1763 - djm@cvs.openbsd.org 2011/10/24 02:10:46 1764 [ssh.c] 1765 bz#1943: unbreak stdio forwarding when ControlPersist is in user - ssh 1766 was incorrectly requesting the forward in both the control master and 1767 slave. skip requesting it in the master to fix. ok markus@ 1768 - djm@cvs.openbsd.org 2011/10/24 02:13:13 1769 [session.c] 1770 bz#1859: send tty break to pty master instead of (probably already 1771 closed) slave side; "looks good" markus@ 1772 - dtucker@cvs.openbsd.org 011/11/04 00:09:39 1773 [moduli] 1774 regenerated moduli file; ok deraadt 1775 - (dtucker) [INSTALL LICENCE configure.ac openbsd-compat/Makefile.in 1776 openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/getrrsetbyname.c] 1777 bz 1320: Add optional support for LDNS, a BSD licensed DNS resolver library 1778 which supports DNSSEC. Patch from Simon Vallet (svallet at genoscope cns fr) 1779 with some rework from myself and djm. ok djm. 1780 178120111025 1782 - (dtucker) [contrib/cygwin/Makefile] Continue if installing a doc file 1783 fails. Patch from Corinna Vinschen. 1784 178520111018 1786 - (djm) OpenBSD CVS Sync 1787 - djm@cvs.openbsd.org 2011/10/04 14:17:32 1788 [sftp-glob.c] 1789 silence error spam for "ls */foo" in directory with files; bz#1683 1790 - dtucker@cvs.openbsd.org 2011/10/16 11:02:46 1791 [moduli.c ssh-keygen.1 ssh-keygen.c] 1792 Add optional checkpoints for moduli screening. feedback & ok deraadt 1793 - jmc@cvs.openbsd.org 2011/10/16 15:02:41 1794 [ssh-keygen.c] 1795 put -K in the right place (usage()); 1796 - stsp@cvs.openbsd.org 2011/10/16 15:51:39 1797 [moduli.c] 1798 add missing includes to unbreak tree; fix from rpointel 1799 - djm@cvs.openbsd.org 2011/10/18 04:58:26 1800 [auth-options.c key.c] 1801 remove explict search for \0 in packet strings, this job is now done 1802 implicitly by buffer_get_cstring; ok markus 1803 - djm@cvs.openbsd.org 2011/10/18 05:00:48 1804 [ssh-add.1 ssh-add.c] 1805 new "ssh-add -k" option to load plain keys (skipping certificates); 1806 "looks ok" markus@ 1807 180820111001 1809 - (dtucker) [openbsd-compat/mktemp.c] Fix compiler warning. ok djm 1810 - (dtucker) OpenBSD CVS Sync 1811 - dtucker@cvs.openbsd.org 2011/09/23 00:22:04 1812 [channels.c auth-options.c servconf.c channels.h sshd.8] 1813 Add wildcard support to PermitOpen, allowing things like "PermitOpen 1814 localhost:*". bz #1857, ok djm markus. 1815 - markus@cvs.openbsd.org 2011/09/23 07:45:05 1816 [mux.c readconf.h channels.h compat.h compat.c ssh.c readconf.c channels.c 1817 version.h] 1818 unbreak remote portforwarding with dynamic allocated listen ports: 1819 1) send the actual listen port in the open message (instead of 0). 1820 this allows multiple forwardings with a dynamic listen port 1821 2) update the matching permit-open entry, so we can identify where 1822 to connect to 1823 report: den at skbkontur.ru and P. Szczygielski 1824 feedback and ok djm@ 1825 - djm@cvs.openbsd.org 2011/09/25 05:44:47 1826 [auth2-pubkey.c] 1827 improve the AuthorizedPrincipalsFile debug log message to include 1828 file and line number 1829 - dtucker@cvs.openbsd.org 2011/09/30 00:47:37 1830 [sshd.c] 1831 don't attempt privsep cleanup when not using privsep; ok markus@ 1832 - djm@cvs.openbsd.org 2011/09/30 21:22:49 1833 [sshd.c] 1834 fix inverted test that caused logspam; spotted by henning@ 1835 183620110929 1837 - (djm) [configure.ac defines.h] No need to detect sizeof(char); patch 1838 from des AT des.no 1839 - (dtucker) [configure.ac openbsd-compat/Makefile.in 1840 openbsd-compat/strnlen.c] Add strnlen to the compat library. 1841 184220110923 1843 - (djm) [openbsd-compat/getcwd.c] Remove OpenBSD rcsid marker since we no 1844 longer want to sync this file (OpenBSD uses a __getcwd syscall now, we 1845 want this longhand version) 1846 - (djm) [openbsd-compat/getgrouplist.c] Remove OpenBSD rcsid marker: the 1847 upstream version is YPified and we don't want this 1848 - (djm) [openbsd-compat/mktemp.c] forklift upgrade to -current version. 1849 The file was totally rewritten between what we had in tree and -current. 1850 - (djm) [openbsd-compat/sha2.c openbsd-compat/sha2.h] Remove OpenBSD rcsid 1851 marker. The upstream API has changed (function and structure names) 1852 enough to put it out of sync with other providers of this interface. 1853 - (djm) [openbsd-compat/setenv.c] Forklift upgrade, including inclusion 1854 of static __findenv() function from upstream setenv.c 1855 - OpenBSD CVS Sync 1856 - millert@cvs.openbsd.org 2006/05/05 15:27:38 1857 [openbsd-compat/strlcpy.c] 1858 Convert do {} while loop -> while {} for clarity. No binary change 1859 on most architectures. From Oliver Smith. OK deraadt@ and henning@ 1860 - tobias@cvs.openbsd.org 2007/10/21 11:09:30 1861 [openbsd-compat/mktemp.c] 1862 Comment fix about time consumption of _gettemp. 1863 FreeBSD did this in revision 1.20. 1864 OK deraadt@, krw@ 1865 - deraadt@cvs.openbsd.org 2008/07/22 21:47:45 1866 [openbsd-compat/mktemp.c] 1867 use arc4random_uniform(); ok djm millert 1868 - millert@cvs.openbsd.org 2008/08/21 16:54:44 1869 [openbsd-compat/mktemp.c] 1870 Remove useless code, the kernel will set errno appropriately if an 1871 element in the path does not exist. OK deraadt@ pvalchev@ 1872 - otto@cvs.openbsd.org 2008/12/09 19:38:38 1873 [openbsd-compat/inet_ntop.c] 1874 fix inet_ntop(3) prototype; ok millert@ libc to be bumbed very soon 1875 187620110922 1877 - OpenBSD CVS Sync 1878 - pyr@cvs.openbsd.org 2011/05/12 07:15:10 1879 [openbsd-compat/glob.c] 1880 When the max number of items for a directory has reached GLOB_LIMIT_READDIR 1881 an error is returned but closedir() is not called. 1882 spotted and fix provided by Frank Denis obsd-tech@pureftpd.org 1883 ok otto@, millert@ 1884 - stsp@cvs.openbsd.org 2011/09/20 10:18:46 1885 [glob.c] 1886 In glob(3), limit recursion during matching attempts. Similar to 1887 fnmatch fix. Also collapse consecutive '*' (from NetBSD). 1888 ok miod deraadt 1889 - djm@cvs.openbsd.org 2011/09/22 06:27:29 1890 [glob.c] 1891 fix GLOB_KEEPSTAT without GLOB_NOSORT; the implicit sort was being 1892 applied only to the gl_pathv vector and not the corresponding gl_statv 1893 array. reported in OpenSSH bz#1935; feedback and okay matthew@ 1894 - djm@cvs.openbsd.org 2011/08/26 01:45:15 1895 [ssh.1] 1896 Add some missing ssh_config(5) options that can be used in ssh(1)'s 1897 -o argument. Patch from duclare AT guu.fi 1898 - djm@cvs.openbsd.org 2011/09/05 05:56:13 1899 [scp.1 sftp.1] 1900 mention ControlPersist and KbdInteractiveAuthentication in the -o 1901 verbiage in these pages too (prompted by jmc@) 1902 - djm@cvs.openbsd.org 2011/09/05 05:59:08 1903 [misc.c] 1904 fix typo in IPQoS parsing: there is no "AF14" class, but there is 1905 an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk 1906 - jmc@cvs.openbsd.org 2011/09/05 07:01:44 1907 [scp.1] 1908 knock out a useless Ns; 1909 - deraadt@cvs.openbsd.org 2011/09/07 02:18:31 1910 [ssh-keygen.1] 1911 typo (they vs the) found by Lawrence Teo 1912 - djm@cvs.openbsd.org 2011/09/09 00:43:00 1913 [ssh_config.5 sshd_config.5] 1914 fix typo in IPQoS parsing: there is no "AF14" class, but there is 1915 an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk 1916 - djm@cvs.openbsd.org 2011/09/09 00:44:07 1917 [PROTOCOL.mux] 1918 MUX_C_CLOSE_FWD includes forward type in message (though it isn't 1919 implemented anyway) 1920 - djm@cvs.openbsd.org 2011/09/09 22:37:01 1921 [scp.c] 1922 suppress adding '--' to remote commandlines when the first argument 1923 does not start with '-'. saves breakage on some difficult-to-upgrade 1924 embedded/router platforms; feedback & ok dtucker ok markus 1925 - djm@cvs.openbsd.org 2011/09/09 22:38:21 1926 [sshd.c] 1927 kill the preauth privsep child on fatal errors in the monitor; 1928 ok markus@ 1929 - djm@cvs.openbsd.org 2011/09/09 22:46:44 1930 [channels.c channels.h clientloop.h mux.c ssh.c] 1931 support for cancelling local and remote port forwards via the multiplex 1932 socket. Use ssh -O cancel -L xx:xx:xx -R yy:yy:yy user@host" to request 1933 the cancellation of the specified forwardings; ok markus@ 1934 - markus@cvs.openbsd.org 2011/09/10 22:26:34 1935 [channels.c channels.h clientloop.c ssh.1] 1936 support cancellation of local/dynamic forwardings from ~C commandline; 1937 ok & feedback djm@ 1938 - okan@cvs.openbsd.org 2011/09/11 06:59:05 1939 [ssh.1] 1940 document new -O cancel command; ok djm@ 1941 - markus@cvs.openbsd.org 2011/09/11 16:07:26 1942 [sftp-client.c] 1943 fix leaks in do_hardlink() and do_readlink(); bz#1921 1944 from Loganaden Velvindron 1945 - markus@cvs.openbsd.org 2011/09/12 08:46:15 1946 [sftp-client.c] 1947 fix leak in do_lsreaddir(); ok djm 1948 - djm@cvs.openbsd.org 2011/09/22 06:29:03 1949 [sftp.c] 1950 don't let remote_glob() implicitly sort its results in do_globbed_ls() - 1951 in all likelihood, they will be resorted anyway 1952 195320110909 1954 - (dtucker) [entropy.h] Bug #1932: remove old definition of init_rng. From 1955 Colin Watson. 1956 195720110906 1958 - (djm) [README version.h] Correct version 1959 - (djm) [contrib/redhat/openssh.spec] Correct restorcon => restorecon 1960 - (djm) Respin OpenSSH-5.9p1 release 1961 196220110905 1963 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 1964 [contrib/suse/openssh.spec] Update version numbers. 1965 196620110904 1967 - (djm) [regress/connect-privsep.sh regress/test-exec.sh] demote fatal 1968 regress errors for the sandbox to warnings. ok tim dtucker 1969 - (dtucker) [ssh-keygen.c ssh-pkcs11.c] Bug #1929: add null implementations 1970 ofsh-pkcs11.cpkcs_init and pkcs_terminate for building without dlopen 1971 support. 1972 197320110829 1974 - (djm) [openbsd-compat/port-linux.c] Suppress logging when attempting 1975 to switch SELinux context away from unconfined_t, based on patch from 1976 Jan Chadima; bz#1919 ok dtucker@ 1977 197820110827 1979 - (dtucker) [auth-skey.c] Add log.h to fix build --with-skey. 1980 198120110818 1982 - (tim) [configure.ac] Typo in error message spotted by Andy Tsouladze 1983 198420110817 1985 - (tim) [mac.c myproposal.h] Wrap SHA256 and SHA512 in ifdefs for 1986 OpenSSL 0.9.7. ok djm 1987 - (djm) [ openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h] 1988 binary_pipe is no longer required on Cygwin; patch from Corinna Vinschen 1989 - (djm) [configure.ac] error out if the host lacks the necessary bits for 1990 an explicitly requested sandbox type 1991 - (djm) [contrib/ssh-copy-id] Missing backlslash; spotted by 1992 bisson AT archlinux.org 1993 - (djm) OpenBSD CVS Sync 1994 - dtucker@cvs.openbsd.org 2011/06/03 05:35:10 1995 [regress/cfgmatch.sh] 1996 use OBJ to find test configs, patch from Tim Rice 1997 - markus@cvs.openbsd.org 2011/06/30 22:44:43 1998 [regress/connect-privsep.sh] 1999 test with sandbox enabled; ok djm@ 2000 - djm@cvs.openbsd.org 2011/08/02 01:23:41 2001 [regress/cipher-speed.sh regress/try-ciphers.sh] 2002 add SHA256/SHA512 based HMAC modes 2003 - (djm) [regress/cipher-speed.sh regress/try-ciphers.sh] disable HMAC-SHA2 2004 MAC tests for platforms that hack EVP_SHA2 support 2005 200620110812 2007 - (dtucker) [openbsd-compat/port-linux.c] Bug 1924: Improve selinux context 2008 change error by reporting old and new context names Patch from 2009 jchadima at redhat. 2010 - (djm) [contrib/redhat/openssh.spec contrib/redhat/sshd.init] 2011 [contrib/suse/openssh.spec contrib/suse/rc.sshd] Updated RHEL and SLES 2012 init scrips from imorgan AT nas.nasa.gov; bz#1920 2013 - (djm) [contrib/ssh-copy-id] Fix failure for cases where the path to the 2014 identify file contained whitespace. bz#1828 patch from gwenael.lambrouin 2015 AT gmail.com; ok dtucker@ 2016 201720110807 2018 - (dtucker) OpenBSD CVS Sync 2019 - jmc@cvs.openbsd.org 2008/06/26 06:59:39 2020 [moduli.5] 2021 tweak previous; 2022 - sobrado@cvs.openbsd.org 2009/10/28 08:56:54 2023 [moduli.5] 2024 "Diffie-Hellman" is the usual spelling for the cryptographic protocol 2025 first published by Whitfield Diffie and Martin Hellman in 1976. 2026 ok jmc@ 2027 - jmc@cvs.openbsd.org 2010/10/14 20:41:28 2028 [moduli.5] 2029 probabalistic -> probabilistic; from naddy 2030 - dtucker@cvs.openbsd.org 2011/08/07 12:55:30 2031 [sftp.1] 2032 typo, fix from Laurent Gautrot 2033 203420110805 2035 - OpenBSD CVS Sync 2036 - djm@cvs.openbsd.org 2011/06/23 23:35:42 2037 [monitor.c] 2038 ignore EINTR errors from poll() 2039 - tedu@cvs.openbsd.org 2011/07/06 18:09:21 2040 [authfd.c] 2041 bzero the agent address. the kernel was for a while very cranky about 2042 these things. evne though that's fixed, always good to initialize 2043 memory. ok deraadt djm 2044 - djm@cvs.openbsd.org 2011/07/29 14:42:45 2045 [sandbox-systrace.c] 2046 fail open(2) with EPERM rather than SIGKILLing the whole process. libc 2047 will call open() to do strerror() when NLS is enabled; 2048 feedback and ok markus@ 2049 - markus@cvs.openbsd.org 2011/08/01 19:18:15 2050 [gss-serv.c] 2051 prevent post-auth resource exhaustion (int overflow leading to 4GB malloc); 2052 report Adam Zabrock; ok djm@, deraadt@ 2053 - djm@cvs.openbsd.org 2011/08/02 01:22:11 2054 [mac.c myproposal.h ssh.1 ssh_config.5 sshd.8 sshd_config.5] 2055 Add new SHA256 and SHA512 based HMAC modes from 2056 http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt 2057 Patch from mdb AT juniper.net; feedback and ok markus@ 2058 - djm@cvs.openbsd.org 2011/08/02 23:13:01 2059 [version.h] 2060 crank now, release later 2061 - djm@cvs.openbsd.org 2011/08/02 23:15:03 2062 [ssh.c] 2063 typo in comment 2064 206520110624 2066 - (djm) [configure.ac Makefile.in sandbox-darwin.c] Add a sandbox for 2067 Darwin/OS X using sandbox_init() + setrlimit(); feedback and testing 2068 markus@ 2069 207020110623 2071 - OpenBSD CVS Sync 2072 - djm@cvs.openbsd.org 2011/06/22 21:47:28 2073 [servconf.c] 2074 reuse the multistate option arrays to pretty-print options for "sshd -T" 2075 - djm@cvs.openbsd.org 2011/06/22 21:57:01 2076 [servconf.c servconf.h sshd.c sshd_config.5] 2077 [configure.ac Makefile.in] 2078 introduce sandboxing of the pre-auth privsep child using systrace(4). 2079 2080 This introduces a new "UsePrivilegeSeparation=sandbox" option for 2081 sshd_config that applies mandatory restrictions on the syscalls the 2082 privsep child can perform. This prevents a compromised privsep child 2083 from being used to attack other hosts (by opening sockets and proxying) 2084 or probing local kernel attack surface. 2085 2086 The sandbox is implemented using systrace(4) in unsupervised "fast-path" 2087 mode, where a list of permitted syscalls is supplied. Any syscall not 2088 on the list results in SIGKILL being sent to the privsep child. Note 2089 that this requires a kernel with the new SYSTR_POLICY_KILL option. 2090 2091 UsePrivilegeSeparation=sandbox will become the default in the future 2092 so please start testing it now. 2093 2094 feedback dtucker@; ok markus@ 2095 - djm@cvs.openbsd.org 2011/06/22 22:08:42 2096 [channels.c channels.h clientloop.c clientloop.h mux.c ssh.c] 2097 hook up a channel confirm callback to warn the user then requested X11 2098 forwarding was refused by the server; ok markus@ 2099 - djm@cvs.openbsd.org 2011/06/23 09:34:13 2100 [sshd.c ssh-sandbox.h sandbox.h sandbox-rlimit.c sandbox-systrace.c] 2101 [sandbox-null.c] 2102 rename sandbox.h => ssh-sandbox.h to make things easier for portable 2103 - (djm) [sandbox-null.c] Dummy sandbox for platforms that don't support 2104 setrlimit(2) 2105 210620110620 2107 - OpenBSD CVS Sync 2108 - djm@cvs.openbsd.org 2011/06/04 00:10:26 2109 [ssh_config.5] 2110 explain IdentifyFile's semantics a little better, prompted by bz#1898 2111 ok dtucker jmc 2112 - markus@cvs.openbsd.org 2011/06/14 22:49:18 2113 [authfile.c] 2114 make sure key_parse_public/private_rsa1() no longer consumes its input 2115 buffer. fixes ssh-add for passphrase-protected ssh1-keys; 2116 noted by naddy@; ok djm@ 2117 - djm@cvs.openbsd.org 2011/06/17 21:44:31 2118 [log.c log.h monitor.c monitor.h monitor_wrap.c monitor_wrap.h sshd.c] 2119 make the pre-auth privsep slave log via a socketpair shared with the 2120 monitor rather than /var/empty/dev/log; ok dtucker@ deraadt@ markus@ 2121 - djm@cvs.openbsd.org 2011/06/17 21:46:16 2122 [sftp-server.c] 2123 the protocol version should be unsigned; bz#1913 reported by mb AT 2124 smartftp.com 2125 - djm@cvs.openbsd.org 2011/06/17 21:47:35 2126 [servconf.c] 2127 factor out multi-choice option parsing into a parse_multistate label 2128 and some support structures; ok dtucker@ 2129 - djm@cvs.openbsd.org 2011/06/17 21:57:25 2130 [clientloop.c] 2131 setproctitle for a mux master that has been gracefully stopped; 2132 bz#1911 from Bert.Wesarg AT googlemail.com 2133 213420110603 2135 - (dtucker) [README version.h contrib/caldera/openssh.spec 2136 contrib/redhat/openssh.spec contrib/suse/openssh.spec] Pull the version 2137 bumps from the 5.8p2 branch into HEAD. ok djm. 2138 - (tim) [configure.ac defines.h] Run test program to detect system mail 2139 directory. Add --with-maildir option to override. Fixed OpenServer 6 2140 getting it wrong. Fixed many systems having MAIL=/var/mail//username 2141 ok dtucker 2142 - (dtucker) [monitor.c] Remove the !HAVE_SOCKETPAIR case. We use socketpair 2143 unconditionally in other places and the survey data we have does not show 2144 any systems that use it. "nuke it" djm@ 2145 - (djm) [configure.ac] enable setproctitle emulation for OS X 2146 - (djm) OpenBSD CVS Sync 2147 - djm@cvs.openbsd.org 2011/06/03 00:54:38 2148 [ssh.c] 2149 bz#1883 - setproctitle() to identify mux master; patch from Bert.Wesarg 2150 AT googlemail.com; ok dtucker@ 2151 NB. includes additional portability code to enable setproctitle emulation 2152 on platforms that don't support it. 2153 - dtucker@cvs.openbsd.org 2011/06/03 01:37:40 2154 [ssh-agent.c] 2155 Check current parent process ID against saved one to determine if the parent 2156 has exited, rather than attempting to send a zero signal, since the latter 2157 won't work if the parent has changed privs. bz#1905, patch from Daniel Kahn 2158 Gillmor, ok djm@ 2159 - dtucker@cvs.openbsd.org 2011/05/31 02:01:58 2160 [regress/dynamic-forward.sh] 2161 back out revs 1.6 and 1.5 since it's not reliable 2162 - dtucker@cvs.openbsd.org 2011/05/31 02:03:34 2163 [regress/dynamic-forward.sh] 2164 work around startup and teardown races; caught by deraadt 2165 - dtucker@cvs.openbsd.org 2011/06/03 00:29:52 2166 [regress/dynamic-forward.sh] 2167 Retry establishing the port forwarding after a small delay, should make 2168 the tests less flaky when the previous test is slow to shut down and free 2169 up the port. 2170 - (tim) [regress/cfgmatch.sh] Build/test out of tree fix. 2171 217220110529 2173 - (djm) OpenBSD CVS Sync 2174 - djm@cvs.openbsd.org 2011/05/23 03:30:07 2175 [auth-rsa.c auth.c auth.h auth2-pubkey.c monitor.c monitor_wrap.c] 2176 [pathnames.h servconf.c servconf.h sshd.8 sshd_config sshd_config.5] 2177 allow AuthorizedKeysFile to specify multiple files, separated by spaces. 2178 Bring back authorized_keys2 as a default search path (to avoid breaking 2179 existing users of this file), but override this in sshd_config so it will 2180 be no longer used on fresh installs. Maybe in 2015 we can remove it 2181 entierly :) 2182 2183 feedback and ok markus@ dtucker@ 2184 - djm@cvs.openbsd.org 2011/05/23 03:33:38 2185 [auth.c] 2186 make secure_filename() spam debug logs less 2187 - djm@cvs.openbsd.org 2011/05/23 03:52:55 2188 [sshconnect.c] 2189 remove extra newline 2190 - jmc@cvs.openbsd.org 2011/05/23 07:10:21 2191 [sshd.8 sshd_config.5] 2192 tweak previous; ok djm 2193 - djm@cvs.openbsd.org 2011/05/23 07:24:57 2194 [authfile.c] 2195 read in key comments for v.2 keys (though note that these are not 2196 passed over the agent protocol); bz#439, based on patch from binder 2197 AT arago.de; ok markus@ 2198 - djm@cvs.openbsd.org 2011/05/24 07:15:47 2199 [readconf.c readconf.h ssh.c ssh_config.5 sshconnect.c sshconnect2.c] 2200 Remove undocumented legacy options UserKnownHostsFile2 and 2201 GlobalKnownHostsFile2 by making UserKnownHostsFile/GlobalKnownHostsFile 2202 accept multiple paths per line and making their defaults include 2203 known_hosts2; ok markus 2204 - djm@cvs.openbsd.org 2011/05/23 03:31:31 2205 [regress/cfgmatch.sh] 2206 include testing of multiple/overridden AuthorizedKeysFiles 2207 refactor to simply daemon start/stop and get rid of racy constructs 2208 220920110520 2210 - (djm) [session.c] call setexeccon() before executing passwd for pw 2211 changes; bz#1891 reported by jchadima AT redhat.com; ok dtucker@ 2212 - (djm) [aclocal.m4 configure.ac] since gcc-4.x ignores all -Wno-options 2213 options, we should corresponding -W-option when trying to determine 2214 whether it is accepted. Also includes a warning fix on the program 2215 fragment uses (bad main() return type). 2216 bz#1900 and bz#1901 reported by g.esp AT free.fr; ok dtucker@ 2217 - (djm) [servconf.c] remove leftover droppings of AuthorizedKeysFile2 2218 - OpenBSD CVS Sync 2219 - djm@cvs.openbsd.org 2011/05/15 08:09:01 2220 [authfd.c monitor.c serverloop.c] 2221 use FD_CLOEXEC consistently; patch from zion AT x96.org 2222 - djm@cvs.openbsd.org 2011/05/17 07:13:31 2223 [key.c] 2224 fatal() if asked to generate a legacy ECDSA cert (these don't exist) 2225 and fix the regress test that was trying to generate them :) 2226 - djm@cvs.openbsd.org 2011/05/20 00:55:02 2227 [servconf.c] 2228 the options TrustedUserCAKeys, RevokedKeysFile, AuthorizedKeysFile 2229 and AuthorizedPrincipalsFile were not being correctly applied in 2230 Match blocks, despite being overridable there; ok dtucker@ 2231 - dtucker@cvs.openbsd.org 2011/05/20 02:00:19 2232 [servconf.c] 2233 Add comment documenting what should be after the preauth check. ok djm 2234 - djm@cvs.openbsd.org 2011/05/20 03:25:45 2235 [monitor.c monitor_wrap.c servconf.c servconf.h] 2236 use a macro to define which string options to copy between configs 2237 for Match. This avoids problems caused by forgetting to keep three 2238 code locations in perfect sync and ordering 2239 2240 "this is at once beautiful and horrible" + ok dtucker@ 2241 - djm@cvs.openbsd.org 2011/05/17 07:13:31 2242 [regress/cert-userkey.sh] 2243 fatal() if asked to generate a legacy ECDSA cert (these don't exist) 2244 and fix the regress test that was trying to generate them :) 2245 - djm@cvs.openbsd.org 2011/05/20 02:43:36 2246 [cert-hostkey.sh] 2247 another attempt to generate a v00 ECDSA key that broke the test 2248 ID sync only - portable already had this somehow 2249 - dtucker@cvs.openbsd.org 2011/05/20 05:19:50 2250 [dynamic-forward.sh] 2251 Prevent races in dynamic forwarding test; ok djm 2252 - dtucker@cvs.openbsd.org 2011/05/20 06:32:30 2253 [dynamic-forward.sh] 2254 fix dumb error in dynamic-forward test 2255 225620110515 2257 - (djm) OpenBSD CVS Sync 2258 - djm@cvs.openbsd.org 2011/05/05 05:12:08 2259 [mux.c] 2260 gracefully fall back when ControlPath is too large for a 2261 sockaddr_un. ok markus@ as part of a larger diff 2262 - dtucker@cvs.openbsd.org 2011/05/06 01:03:35 2263 [sshd_config] 2264 clarify language about overriding defaults. bz#1892, from Petr Cerny 2265 - djm@cvs.openbsd.org 2011/05/06 01:09:53 2266 [sftp.1] 2267 mention that IPv6 addresses must be enclosed in square brackets; 2268 bz#1845 2269 - djm@cvs.openbsd.org 2011/05/06 02:05:41 2270 [sshconnect2.c] 2271 fix memory leak; bz#1849 ok dtucker@ 2272 - djm@cvs.openbsd.org 2011/05/06 21:14:05 2273 [packet.c packet.h] 2274 set traffic class for IPv6 traffic as we do for IPv4 TOS; 2275 patch from lionel AT mamane.lu via Colin Watson in bz#1855; 2276 ok markus@ 2277 - djm@cvs.openbsd.org 2011/05/06 21:18:02 2278 [ssh.c ssh_config.5] 2279 add a %L expansion (short-form of the local host name) for ControlPath; 2280 sync some more expansions with LocalCommand; ok markus@ 2281 - djm@cvs.openbsd.org 2011/05/06 21:31:38 2282 [readconf.c ssh_config.5] 2283 support negated Host matching, e.g. 2284 2285 Host *.example.org !c.example.org 2286 User mekmitasdigoat 2287 2288 Will match "a.example.org", "b.example.org", but not "c.example.org" 2289 ok markus@ 2290 - djm@cvs.openbsd.org 2011/05/06 21:34:32 2291 [clientloop.c mux.c readconf.c readconf.h ssh.c ssh_config.5] 2292 Add a RequestTTY ssh_config option to allow configuration-based 2293 control over tty allocation (like -t/-T); ok markus@ 2294 - djm@cvs.openbsd.org 2011/05/06 21:38:58 2295 [ssh.c] 2296 fix dropping from previous diff 2297 - djm@cvs.openbsd.org 2011/05/06 22:20:10 2298 [PROTOCOL.mux] 2299 fix numbering; from bert.wesarg AT googlemail.com 2300 - jmc@cvs.openbsd.org 2011/05/07 23:19:39 2301 [ssh_config.5] 2302 - tweak previous 2303 - come consistency fixes 2304 ok djm 2305 - jmc@cvs.openbsd.org 2011/05/07 23:20:25 2306 [ssh.1] 2307 +.It RequestTTY 2308 - djm@cvs.openbsd.org 2011/05/08 12:52:01 2309 [PROTOCOL.mux clientloop.c clientloop.h mux.c] 2310 improve our behaviour when TTY allocation fails: if we are in 2311 RequestTTY=auto mode (the default), then do not treat at TTY 2312 allocation error as fatal but rather just restore the local TTY 2313 to cooked mode and continue. This is more graceful on devices that 2314 never allocate TTYs. 2315 2316 If RequestTTY is set to "yes" or "force", then failure to allocate 2317 a TTY is fatal. 2318 2319 ok markus@ 2320 - djm@cvs.openbsd.org 2011/05/10 05:46:46 2321 [authfile.c] 2322 despam debug() logs by detecting that we are trying to load a private key 2323 in key_try_load_public() and returning early; ok markus@ 2324 - djm@cvs.openbsd.org 2011/05/11 04:47:06 2325 [auth.c auth.h auth2-pubkey.c pathnames.h servconf.c servconf.h] 2326 remove support for authorized_keys2; it is a relic from the early days 2327 of protocol v.2 support and has been undocumented for many years; 2328 ok markus@ 2329 - djm@cvs.openbsd.org 2011/05/13 00:05:36 2330 [authfile.c] 2331 warn on unexpected key type in key_parse_private_type() 2332 - (djm) [packet.c] unbreak portability #endif 2333 233420110510 2335 - (dtucker) [openbsd-compat/openssl-compat.{c,h}] Bug #1882: fix 2336 --with-ssl-engine which was broken with the change from deprecated 2337 SSLeay_add_all_algorithms(). ok djm 2338 233920110506 2340 - (dtucker) [openbsd-compat/regress/closefromtest.c] Bug #1875: add prototype 2341 for closefrom() in test code. Report from Dan Wallis via Gentoo. 2342 234320110505 2344 - (djm) [defines.h] Move up include of netinet/ip.h for IPTOS 2345 definitions. From des AT des.no 2346 - (djm) [Makefile.in WARNING.RNG aclocal.m4 buildpkg.sh.in configure.ac] 2347 [entropy.c ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c] 2348 [ssh-keysign.c ssh-pkcs11-helper.c ssh-rand-helper.8 ssh-rand-helper.c] 2349 [ssh.c ssh_prng_cmds.in sshd.c contrib/aix/buildbff.sh] 2350 [regress/README.regress] Remove ssh-rand-helper and all its 2351 tentacles. PRNGd seeding has been rolled into entropy.c directly. 2352 Thanks to tim@ for testing on affected platforms. 2353 - OpenBSD CVS Sync 2354 - djm@cvs.openbsd.org 2011/03/10 02:52:57 2355 [auth2-gss.c auth2.c auth.h] 2356 allow GSSAPI authentication to detect when a server-side failure causes 2357 authentication failure and don't count such failures against MaxAuthTries; 2358 bz#1244 from simon AT sxw.org.uk; ok markus@ before lock 2359 - okan@cvs.openbsd.org 2011/03/15 10:36:02 2360 [ssh-keyscan.c] 2361 use timerclear macro 2362 ok djm@ 2363 - stevesk@cvs.openbsd.org 2011/03/23 15:16:22 2364 [ssh-keygen.1 ssh-keygen.c] 2365 Add -A option. For each of the key types (rsa1, rsa, dsa and ecdsa) 2366 for which host keys do not exist, generate the host keys with the 2367 default key file path, an empty passphrase, default bits for the key 2368 type, and default comment. This will be used by /etc/rc to generate 2369 new host keys. Idea from deraadt. 2370 ok deraadt 2371 - stevesk@cvs.openbsd.org 2011/03/23 16:24:56 2372 [ssh-keygen.1] 2373 -q not used in /etc/rc now so remove statement. 2374 - stevesk@cvs.openbsd.org 2011/03/23 16:50:04 2375 [ssh-keygen.c] 2376 remove -d, documentation removed >10 years ago; ok markus 2377 - jmc@cvs.openbsd.org 2011/03/24 15:29:30 2378 [ssh-keygen.1] 2379 zap trailing whitespace; 2380 - stevesk@cvs.openbsd.org 2011/03/24 22:14:54 2381 [ssh-keygen.c] 2382 use strcasecmp() for "clear" cert permission option also; ok djm 2383 - stevesk@cvs.openbsd.org 2011/03/29 18:54:17 2384 [misc.c misc.h servconf.c] 2385 print ipqos friendly string for sshd -T; ok markus 2386 # sshd -Tf sshd_config|grep ipqos 2387 ipqos lowdelay throughput 2388 - djm@cvs.openbsd.org 2011/04/12 04:23:50 2389 [ssh-keygen.c] 2390 fix -Wshadow 2391 - djm@cvs.openbsd.org 2011/04/12 05:32:49 2392 [sshd.c] 2393 exit with 0 status on SIGTERM; bz#1879 2394 - djm@cvs.openbsd.org 2011/04/13 04:02:48 2395 [ssh-keygen.1] 2396 improve wording; bz#1861 2397 - djm@cvs.openbsd.org 2011/04/13 04:09:37 2398 [ssh-keygen.1] 2399 mention valid -b sizes for ECDSA keys; bz#1862 2400 - djm@cvs.openbsd.org 2011/04/17 22:42:42 2401 [PROTOCOL.mux clientloop.c clientloop.h mux.c ssh.1 ssh.c] 2402 allow graceful shutdown of multiplexing: request that a mux server 2403 removes its listener socket and refuse future multiplexing requests; 2404 ok markus@ 2405 - djm@cvs.openbsd.org 2011/04/18 00:46:05 2406 [ssh-keygen.c] 2407 certificate options are supposed to be packed in lexical order of 2408 option name (though we don't actually enforce this at present). 2409 Move one up that was out of sequence 2410 - djm@cvs.openbsd.org 2011/05/04 21:15:29 2411 [authfile.c authfile.h ssh-add.c] 2412 allow "ssh-add - < key"; feedback and ok markus@ 2413 - (tim) [configure.ac] Add AC_LANG_SOURCE to OPENSSH_CHECK_CFLAG_COMPILE 2414 so autoreconf 2.68 is happy. 2415 - (tim) [defines.h] Deal with platforms that do not have S_IFSOCK ok djm@ 2416 241720110221 2418 - (dtucker) [contrib/cygwin/ssh-host-config] From Corinna: revamp of the 2419 Cygwin-specific service installer script ssh-host-config. The actual 2420 functionality is the same, the revisited version is just more 2421 exact when it comes to check for problems which disallow to run 2422 certain aspects of the script. So, part of this script and the also 2423 rearranged service helper script library "csih" is to check if all 2424 the tools required to run the script are available on the system. 2425 The new script also is more thorough to inform the user why the 2426 script failed. Patch from vinschen at redhat com. 2427 242820110218 2429 - OpenBSD CVS Sync 2430 - djm@cvs.openbsd.org 2011/02/16 00:31:14 2431 [ssh-keysign.c] 2432 make hostbased auth with ECDSA keys work correctly. Based on patch 2433 by harvey.eneman AT oracle.com in bz#1858; ok markus@ (pre-lock) 2434 243520110206 2436 - (dtucker) [openbsd-compat/port-linux.c] Bug #1851: fix syntax error in 2437 selinux code. Patch from Leonardo Chiquitto 2438 - (dtucker) [contrib/cygwin/ssh-{host,user}-config] Add ECDSA key 2439 generation and simplify. Patch from Corinna Vinschen. 2440 244120110204 2442 - OpenBSD CVS Sync 2443 - djm@cvs.openbsd.org 2011/01/31 21:42:15 2444 [PROTOCOL.mux] 2445 cut'n'pasto; from bert.wesarg AT googlemail.com 2446 - djm@cvs.openbsd.org 2011/02/04 00:44:21 2447 [key.c] 2448 fix uninitialised nonce variable; reported by Mateusz Kocielski 2449 - djm@cvs.openbsd.org 2011/02/04 00:44:43 2450 [version.h] 2451 openssh-5.8 2452 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 2453 [contrib/suse/openssh.spec] update versions in docs and spec files. 2454 - Release OpenSSH 5.8p1 2455 245620110128 2457 - (djm) [openbsd-compat/port-linux.c] Check whether SELinux is enabled 2458 before attempting setfscreatecon(). Check whether matchpathcon() 2459 succeeded before using its result. Patch from cjwatson AT debian.org; 2460 bz#1851 2461 246220110127 2463 - (tim) [config.guess config.sub] Sync with upstream. 2464 - (tim) [configure.ac] Consistent M4 quoting throughout, updated obsolete 2465 AC_TRY_COMPILE with AC_COMPILE_IFELSE, updated obsolete AC_TRY_LINK with 2466 AC_LINK_IFELSE, updated obsolete AC_TRY_RUN with AC_RUN_IFELSE, misc white 2467 space changes for consistency/readability. Makes autoconf 2.68 happy. 2468 "Nice work" djm 2469 247020110125 2471 - (djm) [configure.ac Makefile.in ssh.c openbsd-compat/port-linux.c 2472 openbsd-compat/port-linux.h] Move SELinux-specific code from ssh.c to 2473 port-linux.c to avoid compilation errors. Add -lselinux to ssh when 2474 building with SELinux support to avoid linking failure; report from 2475 amk AT spamfence.net; ok dtucker 2476 247720110122 2478 - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] Add 2479 RSA_get_default_method() for the benefit of openssl versions that don't 2480 have it (at least openssl-engine-0.9.6b). Found and tested by Kevin Brott, 2481 ok djm@. 2482 - OpenBSD CVS Sync 2483 - djm@cvs.openbsd.org 2011/01/22 09:18:53 2484 [version.h] 2485 crank to OpenSSH-5.7 2486 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 2487 [contrib/suse/openssh.spec] update versions in docs and spec files. 2488 - (djm) Release 5.7p1 2489 249020110119 2491 - (tim) [contrib/caldera/openssh.spec] Use CFLAGS from Makefile instead 2492 of RPM so build completes. Signatures were changed to .asc since 4.1p1. 2493 - (djm) [configure.ac] Disable ECC on OpenSSL <0.9.8g. Releases prior to 2494 0.9.8 lacked it, and 0.9.8a through 0.9.8d have proven buggy in pre- 2495 release testing (random crashes and failure to load ECC keys). 2496 ok dtucker@ 2497 249820110117 2499 - (djm) [regress/Makefile] use $TEST_SSH_KEYGEN instead of the one in 2500 $PATH, fix cleanup of droppings; reported by openssh AT 2501 roumenpetrov.info; ok dtucker@ 2502 - (djm) [regress/agent-ptrace.sh] Fix false failure on OS X by adding 2503 its unique snowflake of a gdb error to the ones we look for. 2504 - (djm) [regress/agent-getpeereid.sh] leave stdout attached when running 2505 ssh-add to avoid $SUDO failures on Linux 2506 - (dtucker) [openbsd-compat/port-linux.c] Bug #1838: Add support for the new 2507 Linux OOM-killer magic values that changed in 2.6.36 kernels, with fallback 2508 to the old values. Feedback from vapier at gentoo org and djm, ok djm. 2509 - (djm) [configure.ac regress/agent-getpeereid.sh regress/multiplex.sh] 2510 [regress/sftp-glob.sh regress/test-exec.sh] Rework how feature tests are 2511 disabled on platforms that do not support them; add a "config_defined()" 2512 shell function that greps for defines in config.h and use them to decide 2513 on feature tests. 2514 Convert a couple of existing grep's over config.h to use the new function 2515 Add a define "FILESYSTEM_NO_BACKSLASH" for filesystem that can't represent 2516 backslash characters in filenames, enable it for Cygwin and use it to turn 2517 of tests for quotes backslashes in sftp-glob.sh. 2518 based on discussion with vinschen AT redhat.com and dtucker@; ok dtucker@ 2519 - (tim) [regress/agent-getpeereid.sh] shell portability fix. 2520 - (dtucker) [openbsd-compat/port-linux.c] Fix minor bug caught by -Werror on 2521 the tinderbox. 2522 - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2523 configure.ac defines.h loginrec.c] Bug #1402: add linux audit subsystem 2524 support, based on patches from Tomas Mraz and jchadima at redhat. 2525 252620110116 2527 - (dtucker) [Makefile.in configure.ac regress/kextype.sh] Skip sha256-based 2528 on configurations that don't have it. 2529 - OpenBSD CVS Sync 2530 - djm@cvs.openbsd.org 2011/01/16 11:50:05 2531 [clientloop.c] 2532 Use atomicio when flushing protocol 1 std{out,err} buffers at 2533 session close. This was a latent bug exposed by setting a SIGCHLD 2534 handler and spotted by kevin.brott AT gmail.com; ok dtucker@ 2535 - djm@cvs.openbsd.org 2011/01/16 11:50:36 2536 [sshconnect.c] 2537 reset the SIGPIPE handler when forking to execute child processes; 2538 ok dtucker@ 2539 - djm@cvs.openbsd.org 2011/01/16 12:05:59 2540 [clientloop.c] 2541 a couple more tweaks to the post-close protocol 1 stderr/stdout flush: 2542 now that we use atomicio(), convert them from while loops to if statements 2543 add test and cast to compile cleanly with -Wsigned 2544 254520110114 2546 - OpenBSD CVS Sync 2547 - djm@cvs.openbsd.org 2011/01/13 21:54:53 2548 [mux.c] 2549 correct error messages; patch from bert.wesarg AT googlemail.com 2550 - djm@cvs.openbsd.org 2011/01/13 21:55:25 2551 [PROTOCOL.mux] 2552 correct protocol names and add a couple of missing protocol number 2553 defines; patch from bert.wesarg AT googlemail.com 2554 - (djm) [Makefile.in] Use shell test to disable ecdsa key generating in 2555 host-key-force target rather than a substitution that is replaced with a 2556 comment so that the Makefile.in is still a syntactically valid Makefile 2557 (useful to run the distprep target) 2558 - (tim) [regress/cert-hostkey.sh] Typo. Missing $ on variable name. 2559 - (tim) [regress/cert-hostkey.sh] Add missing TEST_SSH_ECC guard around some 2560 ecdsa bits. 2561 256220110113 2563 - (djm) [misc.c] include time.h for nanosleep() prototype 2564 - (tim) [Makefile.in] test the ECC bits if we have the capability. ok djm 2565 - (tim) [Makefile.in configure.ac opensshd.init.in] Add support for generating 2566 ecdsa keys. ok djm. 2567 - (djm) [entropy.c] cast OPENSSL_VERSION_NUMBER to u_long to avoid 2568 gcc warning on platforms where it defaults to int 2569 - (djm) [regress/Makefile] add a few more generated files to the clean 2570 target 2571 - (djm) [myproposal.h] Fix reversed OPENSSL_VERSION_NUMBER test and bad 2572 #define that was causing diffie-hellman-group-exchange-sha256 to be 2573 incorrectly disabled 2574 - (djm) [regress/kextype.sh] Testing diffie-hellman-group-exchange-sha256 2575 should not depend on ECC support 2576 257720110112 2578 - OpenBSD CVS Sync 2579 - nicm@cvs.openbsd.org 2010/10/08 21:48:42 2580 [openbsd-compat/glob.c] 2581 Extend GLOB_LIMIT to cover readdir and stat and bump the malloc limit 2582 from ARG_MAX to 64K. 2583 Fixes glob-using programs (notably ftp) able to be triggered to hit 2584 resource limits. 2585 Idea from a similar NetBSD change, original problem reported by jasper@. 2586 ok millert tedu jasper 2587 - djm@cvs.openbsd.org 2011/01/12 01:53:14 2588 avoid some integer overflows mostly with GLOB_APPEND and GLOB_DOOFFS 2589 and sanity check arguments (these will be unnecessary when we switch 2590 struct glob members from being type into to size_t in the future); 2591 "looks ok" tedu@ feedback guenther@ 2592 - (djm) [configure.ac] Turn on -Wno-unused-result for gcc >= 4.4 to avoid 2593 silly warnings on write() calls we don't care succeed or not. 2594 - (djm) [configure.ac] Fix broken test for gcc >= 4.4 with per-compiler 2595 flag tests that don't depend on gcc version at all; suggested by and 2596 ok dtucker@ 2597 259820110111 2599 - (tim) [regress/host-expand.sh] Fix for building outside of read only 2600 source tree. 2601 - (djm) [platform.c] Some missing includes that show up under -Werror 2602 - OpenBSD CVS Sync 2603 - djm@cvs.openbsd.org 2011/01/08 10:51:51 2604 [clientloop.c] 2605 use host and not options.hostname, as the latter may have unescaped 2606 substitution characters 2607 - djm@cvs.openbsd.org 2011/01/11 06:06:09 2608 [sshlogin.c] 2609 fd leak on error paths; from zinovik@ 2610 NB. Id sync only; we use loginrec.c that was also audited and fixed 2611 recently 2612 - djm@cvs.openbsd.org 2011/01/11 06:13:10 2613 [clientloop.c ssh-keygen.c sshd.c] 2614 some unsigned long long casts that make things a bit easier for 2615 portable without resorting to dropping PRIu64 formats everywhere 2616 261720110109 2618 - (djm) [Makefile.in] list ssh_host_ecdsa key in PATHSUBS; spotted by 2619 openssh AT roumenpetrov.info 2620 262120110108 2622 - (djm) [regress/keytype.sh] s/echo -n/echon/ to repair failing regress 2623 test on OSX and others. Reported by imorgan AT nas.nasa.gov 2624 262520110107 2626 - (djm) [regress/cert-hostkey.sh regress/cert-userkey.sh] fix shell test 2627 for no-ECC case. Patch from cristian.ionescu-idbohrn AT axis.com 2628 - djm@cvs.openbsd.org 2011/01/06 22:23:53 2629 [ssh.c] 2630 unbreak %n expansion in LocalCommand; patch from bert.wesarg AT 2631 googlemail.com; ok markus@ 2632 - djm@cvs.openbsd.org 2011/01/06 22:23:02 2633 [clientloop.c] 2634 when exiting due to ServerAliveTimeout, mention the hostname that caused 2635 it (useful with backgrounded controlmaster) 2636 - djm@cvs.openbsd.org 2011/01/06 22:46:21 2637 [regress/Makefile regress/host-expand.sh] 2638 regress test for LocalCommand %n expansion from bert.wesarg AT 2639 googlemail.com; ok markus@ 2640 - djm@cvs.openbsd.org 2011/01/06 23:01:35 2641 [sshconnect.c] 2642 reset SIGCHLD handler to SIG_DFL when execuring LocalCommand; 2643 ok markus@ 2644 264520110106 2646 - (djm) OpenBSD CVS Sync 2647 - markus@cvs.openbsd.org 2010/12/08 22:46:03 2648 [scp.1 scp.c] 2649 add a new -3 option to scp: Copies between two remote hosts are 2650 transferred through the local host. Without this option the data 2651 is copied directly between the two remote hosts. ok djm@ (bugzilla #1837) 2652 - jmc@cvs.openbsd.org 2010/12/09 14:13:33 2653 [scp.1 scp.c] 2654 scp.1: grammer fix 2655 scp.c: add -3 to usage() 2656 - markus@cvs.openbsd.org 2010/12/14 11:59:06 2657 [sshconnect.c] 2658 don't mention key type in key-changed-warning, since we also print 2659 this warning if a new key type appears. ok djm@ 2660 - djm@cvs.openbsd.org 2010/12/15 00:49:27 2661 [readpass.c] 2662 fix ControlMaster=ask regression 2663 reset SIGCHLD handler before fork (and restore it after) so we don't miss 2664 the the askpass child's exit status. Correct test for exit status/signal to 2665 account for waitpid() failure; with claudio@ ok claudio@ markus@ 2666 - djm@cvs.openbsd.org 2010/12/24 21:41:48 2667 [auth-options.c] 2668 don't send the actual forced command in a debug message; ok markus deraadt 2669 - otto@cvs.openbsd.org 2011/01/04 20:44:13 2670 [ssh-keyscan.c] 2671 handle ecdsa-sha2 with various key lengths; hint and ok djm@ 2672 267320110104 2674 - (djm) [configure.ac Makefile.in] Use mandoc as preferred manpage 2675 formatter if it is present, followed by nroff and groff respectively. 2676 Fixes distprep target on OpenBSD (which has bumped groff/nroff to ports 2677 in favour of mandoc). feedback and ok tim 2678 267920110103 2680 - (djm) [Makefile.in] revert local hack I didn't intend to commit 2681 268220110102 2683 - (djm) [loginrec.c] Fix some fd leaks on error paths. ok dtucker 2684 - (djm) [configure.ac] Check whether libdes is needed when building 2685 with Heimdal krb5 support. On OpenBSD this library no longer exists, 2686 so linking it unconditionally causes a build failure; ok dtucker 2687 268820101226 2689 - (dtucker) OpenBSD CVS Sync 2690 - djm@cvs.openbsd.org 2010/12/08 04:02:47 2691 [ssh_config.5 sshd_config.5] 2692 explain that IPQoS arguments are separated by whitespace; iirc requested 2693 by jmc@ a while back 2694 269520101205 2696 - (dtucker) openbsd-compat/openssl-compat.c] remove sleep leftover from 2697 debugging. Spotted by djm. 2698 - (dtucker) OpenBSD CVS Sync 2699 - djm@cvs.openbsd.org 2010/12/03 23:49:26 2700 [schnorr.c] 2701 check that g^x^q === 1 mod p; recommended by JPAKE author Feng Hao 2702 (this code is still disabled, but apprently people are treating it as 2703 a reference implementation) 2704 - djm@cvs.openbsd.org 2010/12/03 23:55:27 2705 [auth-rsa.c] 2706 move check for revoked keys to run earlier (in auth_rsa_key_allowed) 2707 bz#1829; patch from ldv AT altlinux.org; ok markus@ 2708 - djm@cvs.openbsd.org 2010/12/04 00:18:01 2709 [sftp-server.c sftp.1 sftp-client.h sftp.c PROTOCOL sftp-client.c] 2710 add a protocol extension to support a hard link operation. It is 2711 available through the "ln" command in the client. The old "ln" 2712 behaviour of creating a symlink is available using its "-s" option 2713 or through the preexisting "symlink" command; based on a patch from 2714 miklos AT szeredi.hu in bz#1555; ok markus@ 2715 - djm@cvs.openbsd.org 2010/12/04 13:31:37 2716 [hostfile.c] 2717 fix fd leak; spotted and ok dtucker 2718 - djm@cvs.openbsd.org 2010/12/04 00:21:19 2719 [regress/sftp-cmds.sh] 2720 adjust for hard-link support 2721 - (dtucker) [regress/Makefile] Id sync. 2722 272320101204 2724 - (djm) [openbsd-compat/bindresvport.c] Use arc4random_uniform(range) 2725 instead of (arc4random() % range) 2726 - (dtucker) [configure.ac moduli.c openbsd-compat/openssl-compat.{c,h}] Add 2727 shims for the new, non-deprecated OpenSSL key generation functions for 2728 platforms that don't have the new interfaces. 2729 273020101201 2731 - OpenBSD CVS Sync 2732 - deraadt@cvs.openbsd.org 2010/11/20 05:12:38 2733 [auth2-pubkey.c] 2734 clean up cases of ;; 2735 - djm@cvs.openbsd.org 2010/11/21 01:01:13 2736 [clientloop.c misc.c misc.h ssh-agent.1 ssh-agent.c] 2737 honour $TMPDIR for client xauth and ssh-agent temporary directories; 2738 feedback and ok markus@ 2739 - djm@cvs.openbsd.org 2010/11/21 10:57:07 2740 [authfile.c] 2741 Refactor internals of private key loading and saving to work on memory 2742 buffers rather than directly on files. This will make a few things 2743 easier to do in the future; ok markus@ 2744 - djm@cvs.openbsd.org 2010/11/23 02:35:50 2745 [auth.c] 2746 use strict_modes already passed as function argument over referencing 2747 global options.strict_modes 2748 - djm@cvs.openbsd.org 2010/11/23 23:57:24 2749 [clientloop.c] 2750 avoid NULL deref on receiving a channel request on an unknown or invalid 2751 channel; report bz#1842 from jchadima AT redhat.com; ok dtucker@ 2752 - djm@cvs.openbsd.org 2010/11/24 01:24:14 2753 [channels.c] 2754 remove a debug() that pollutes stderr on client connecting to a server 2755 in debug mode (channel_close_fds is called transitively from the session 2756 code post-fork); bz#1719, ok dtucker 2757 - djm@cvs.openbsd.org 2010/11/25 04:10:09 2758 [session.c] 2759 replace close() loop for fds 3->64 with closefrom(); 2760 ok markus deraadt dtucker 2761 - djm@cvs.openbsd.org 2010/11/26 05:52:49 2762 [scp.c] 2763 Pass through ssh command-line flags and options when doing remote-remote 2764 transfers, e.g. to enable agent forwarding which is particularly useful 2765 in this case; bz#1837 ok dtucker@ 2766 - markus@cvs.openbsd.org 2010/11/29 18:57:04 2767 [authfile.c] 2768 correctly load comment for encrypted rsa1 keys; 2769 report/fix Joachim Schipper; ok djm@ 2770 - djm@cvs.openbsd.org 2010/11/29 23:45:51 2771 [auth.c hostfile.c hostfile.h ssh.c ssh_config.5 sshconnect.c] 2772 [sshconnect.h sshconnect2.c] 2773 automatically order the hostkeys requested by the client based on 2774 which hostkeys are already recorded in known_hosts. This avoids 2775 hostkey warnings when connecting to servers with new ECDSA keys 2776 that are preferred by default; with markus@ 2777 277820101124 2779 - (dtucker) [platform.c session.c] Move the getluid call out of session.c and 2780 into the platform-specific code Only affects SCO, tested by and ok tim@. 2781 - (djm) [loginrec.c] Relax permission requirement on btmp logs to allow 2782 group read/write. ok dtucker@ 2783 - (dtucker) [packet.c] Remove redundant local declaration of "int tos". 2784 - (djm) [defines.h] Add IP DSCP defines 2785 278620101122 2787 - (dtucker) Bug #1840: fix warning when configuring --with-ssl-engine, patch 2788 from vapier at gentoo org. 2789 279020101120 2791 - OpenBSD CVS Sync 2792 - djm@cvs.openbsd.org 2010/11/05 02:46:47 2793 [packet.c] 2794 whitespace KNF 2795 - djm@cvs.openbsd.org 2010/11/10 01:33:07 2796 [kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c moduli.c] 2797 use only libcrypto APIs that are retained with OPENSSL_NO_DEPRECATED. 2798 these have been around for years by this time. ok markus 2799 - djm@cvs.openbsd.org 2010/11/13 23:27:51 2800 [clientloop.c misc.c misc.h packet.c packet.h readconf.c readconf.h] 2801 [servconf.c servconf.h session.c ssh.c ssh_config.5 sshd_config.5] 2802 allow ssh and sshd to set arbitrary TOS/DSCP/QoS values instead of 2803 hardcoding lowdelay/throughput. 2804 2805 bz#1733 patch from philipp AT redfish-solutions.com; ok markus@ deraadt@ 2806 - jmc@cvs.openbsd.org 2010/11/15 07:40:14 2807 [ssh_config.5] 2808 libary -> library; 2809 - jmc@cvs.openbsd.org 2010/11/18 15:01:00 2810 [scp.1 sftp.1 ssh.1 sshd_config.5] 2811 add IPQoS to the various -o lists, and zap some trailing whitespace; 2812 281320101111 2814 - (djm) [servconf.c ssh-add.c ssh-keygen.c] don't look for ECDSA keys on 2815 platforms that don't support ECC. Fixes some spurious warnings reported 2816 by tim@ 2817 281820101109 2819 - (tim) [regress/kextype.sh] Not all platforms have time in /usr/bin. 2820 Feedback from dtucker@ 2821 - (tim) [configure.ac openbsd-compat/bsd-misc.h openbsd-compat/bsd-misc.c] Add 2822 support for platforms missing isblank(). ok djm@ 2823 282420101108 2825 - (tim) [regress/Makefile] Fixes to allow building/testing outside source 2826 tree. 2827 - (tim) [regress/kextype.sh] Shell portability fix. 2828 282920101107 2830 - (dtucker) [platform.c] includes.h instead of defines.h so that we get 2831 the correct typedefs. 2832 283320101105 2834 - (djm) [loginrec.c loginrec.h] Use correct uid_t/pid_t types instead of 2835 int. Should fix bz#1817 cleanly; ok dtucker@ 2836 - OpenBSD CVS Sync 2837 - djm@cvs.openbsd.org 2010/09/22 12:26:05 2838 [regress/Makefile regress/kextype.sh] 2839 regress test for each of the key exchange algorithms that we support 2840 - djm@cvs.openbsd.org 2010/10/28 11:22:09 2841 [authfile.c key.c key.h ssh-keygen.c] 2842 fix a possible NULL deref on loading a corrupt ECDH key 2843 2844 store ECDH group information in private keys files as "named groups" 2845 rather than as a set of explicit group parameters (by setting 2846 the OPENSSL_EC_NAMED_CURVE flag). This makes for shorter key files and 2847 retrieves the group's OpenSSL NID that we need for various things. 2848 - jmc@cvs.openbsd.org 2010/10/28 18:33:28 2849 [scp.1 ssh-add.1 ssh-keygen.1 ssh.1 ssh_config.5 sshd.8 sshd_config.5] 2850 knock out some "-*- nroff -*-" lines; 2851 - djm@cvs.openbsd.org 2010/11/04 02:45:34 2852 [sftp-server.c] 2853 umask should be parsed as octal. reported by candland AT xmission.com; 2854 ok markus@ 2855 - (dtucker) [configure.ac platform.{c,h} session.c 2856 openbsd-compat/port-solaris.{c,h}] Bug #1824: Add Solaris Project support. 2857 Patch from cory.erickson at csu mnscu edu with a bit of rework from me. 2858 ok djm@ 2859 - (dtucker) [platform.c platform.h session.c] Add a platform hook to run 2860 after the user's groups are established and move the selinux calls into it. 2861 - (dtucker) [platform.c session.c] Move the AIX setpcred+chroot hack into 2862 platform.c 2863 - (dtucker) [platform.c session.c] Move the BSDI setpgrp into platform.c. 2864 - (dtucker) [platform.c] Only call setpgrp on BSDI if running as root to 2865 retain previous behavior. 2866 - (dtucker) [platform.c session.c] Move the PAM credential establishment for 2867 the LOGIN_CAP case into platform.c. 2868 - (dtucker) platform.c session.c] Move the USE_LIBIAF fragment into 2869 platform.c 2870 - (dtucker) [platform.c session.c] Move aix_usrinfo frament into platform.c. 2871 - (dtucker) [platform.c session.c] Move irix setusercontext fragment into 2872 platform.c. 2873 - (dtucker) [platform.c session.c] Move PAM credential establishment for the 2874 non-LOGIN_CAP case into platform.c. 2875 - (dtucker) [platform.c platform.h session.c] Move the Cygwin special-case 2876 check into platform.c 2877 - (dtucker) [regress/keytype.sh] Import new test. 2878 - (dtucker) [Makefile configure.ac regress/Makefile regress/keytype.sh] 2879 Import recent changes to regress/Makefile, pass a flag to enable ECC tests 2880 from configure through to regress/Makefile and use it in the tests. 2881 - (dtucker) [regress/kextype.sh] Add missing "test". 2882 - (dtucker) [regress/kextype.sh] Make sha256 test depend on ECC. This is not 2883 strictly correct since while ECC requires sha256 the reverse is not true 2884 however it does prevent spurious test failures. 2885 - (dtucker) [platform.c] Need servconf.h and extern options. 2886 288720101025 2888 - (tim) [openbsd-compat/glob.h] Remove sys/cdefs.h include that came with 2889 1.12 to unbreak Solaris build. 2890 ok djm@ 2891 - (dtucker) [defines.h] Use SIZE_T_MAX for SIZE_MAX for platforms that have a 2892 native one. 2893 289420101024 2895 - (dtucker) [includes.h] Add missing ifdef GLOB_HAS_GL_STATV to fix build. 2896 - (dtucker) [regress/cert-hostkey.sh] Disable ECC-based tests on platforms 2897 which don't have ECC support in libcrypto. 2898 - (dtucker) [regress/cert-userkey.sh] Disable ECC-based tests on platforms 2899 which don't have ECC support in libcrypto. 2900 - (dtucker) [defines.h] Add SIZE_MAX for the benefit of platforms that don't 2901 have it. 2902 - (dtucker) OpenBSD CVS Sync 2903 - sthen@cvs.openbsd.org 2010/10/23 22:06:12 2904 [sftp.c] 2905 escape '[' in filename tab-completion; fix a type while there. 2906 ok djm@ 2907 290820101021 2909 - OpenBSD CVS Sync 2910 - dtucker@cvs.openbsd.org 2010/10/12 02:22:24 2911 [mux.c] 2912 Typo in confirmation message. bz#1827, patch from imorgan at 2913 nas nasa gov 2914 - djm@cvs.openbsd.org 2010/08/31 12:24:09 2915 [regress/cert-hostkey.sh regress/cert-userkey.sh] 2916 tests for ECDSA certificates 2917 291820101011 2919 - (djm) [canohost.c] Zero a4 instead of addr to better match type. 2920 bz#1825, reported by foo AT mailinator.com 2921 - (djm) [sshconnect.c] Need signal.h for prototype for kill(2) 2922 292320101011 2924 - (djm) [configure.ac] Use = instead of == in shell tests. Patch from 2925 dr AT vasco.com 2926 292720101007 2928 - (djm) [ssh-agent.c] Fix type for curve name. 2929 - (djm) OpenBSD CVS Sync 2930 - matthew@cvs.openbsd.org 2010/09/24 13:33:00 2931 [misc.c misc.h configure.ac openbsd-compat/openbsd-compat.h] 2932 [openbsd-compat/timingsafe_bcmp.c] 2933 Add timingsafe_bcmp(3) to libc, mention that it's already in the 2934 kernel in kern(9), and remove it from OpenSSH. 2935 ok deraadt@, djm@ 2936 NB. re-added under openbsd-compat/ for portable OpenSSH 2937 - djm@cvs.openbsd.org 2010/09/25 09:30:16 2938 [sftp.c configure.ac openbsd-compat/glob.c openbsd-compat/glob.h] 2939 make use of new glob(3) GLOB_KEEPSTAT extension to save extra server 2940 rountrips to fetch per-file stat(2) information. 2941 NB. update openbsd-compat/ glob(3) implementation from OpenBSD libc to 2942 match. 2943 - djm@cvs.openbsd.org 2010/09/26 22:26:33 2944 [sftp.c] 2945 when performing an "ls" in columnated (short) mode, only call 2946 ioctl(TIOCGWINSZ) once to get the window width instead of per- 2947 filename 2948 - djm@cvs.openbsd.org 2010/09/30 11:04:51 2949 [servconf.c] 2950 prevent free() of string in .rodata when overriding AuthorizedKeys in 2951 a Match block; patch from rein AT basefarm.no 2952 - djm@cvs.openbsd.org 2010/10/01 23:05:32 2953 [cipher-3des1.c cipher-bf1.c cipher-ctr.c openbsd-compat/openssl-compat.h] 2954 adapt to API changes in openssl-1.0.0a 2955 NB. contains compat code to select correct API for older OpenSSL 2956 - djm@cvs.openbsd.org 2010/10/05 05:13:18 2957 [sftp.c sshconnect.c] 2958 use default shell /bin/sh if $SHELL is ""; ok markus@ 2959 - djm@cvs.openbsd.org 2010/10/06 06:39:28 2960 [clientloop.c ssh.c sshconnect.c sshconnect.h] 2961 kill proxy command on fatal() (we already kill it on clean exit); 2962 ok markus@ 2963 - djm@cvs.openbsd.org 2010/10/06 21:10:21 2964 [sshconnect.c] 2965 swapped args to kill(2) 2966 - (djm) [openbsd-compat/glob.c] restore ARG_MAX compat code. 2967 - (djm) [cipher-acss.c] Add missing header. 2968 - (djm) [openbsd-compat/Makefile.in] Actually link timingsafe_bcmp 2969 297020100924 2971 - (djm) OpenBSD CVS Sync 2972 - naddy@cvs.openbsd.org 2010/09/10 15:19:29 2973 [ssh-keygen.1] 2974 * mention ECDSA in more places 2975 * less repetition in FILES section 2976 * SSHv1 keys are still encrypted with 3DES 2977 help and ok jmc@ 2978 - djm@cvs.openbsd.org 2010/09/11 21:44:20 2979 [ssh.1] 2980 mention RFC 5656 for ECC stuff 2981 - jmc@cvs.openbsd.org 2010/09/19 21:30:05 2982 [sftp.1] 2983 more wacky macro fixing; 2984 - djm@cvs.openbsd.org 2010/09/20 04:41:47 2985 [ssh.c] 2986 install a SIGCHLD handler to reap expiried child process; ok markus@ 2987 - djm@cvs.openbsd.org 2010/09/20 04:50:53 2988 [jpake.c schnorr.c] 2989 check that received values are smaller than the group size in the 2990 disabled and unfinished J-PAKE code. 2991 avoids catastrophic security failure found by Sebastien Martini 2992 - djm@cvs.openbsd.org 2010/09/20 04:54:07 2993 [jpake.c] 2994 missing #include 2995 - djm@cvs.openbsd.org 2010/09/20 07:19:27 2996 [mux.c] 2997 "atomically" create the listening mux socket by binding it on a temorary 2998 name and then linking it into position after listen() has succeeded. 2999 this allows the mux clients to determine that the server socket is 3000 either ready or stale without races. stale server sockets are now 3001 automatically removed 3002 ok deraadt 3003 - djm@cvs.openbsd.org 2010/09/22 05:01:30 3004 [kex.c kex.h kexecdh.c kexecdhc.c kexecdhs.c readconf.c readconf.h] 3005 [servconf.c servconf.h ssh_config.5 sshconnect2.c sshd.c sshd_config.5] 3006 add a KexAlgorithms knob to the client and server configuration to allow 3007 selection of which key exchange methods are used by ssh(1) and sshd(8) 3008 and their order of preference. 3009 ok markus@ 3010 - jmc@cvs.openbsd.org 2010/09/22 08:30:08 3011 [ssh.1 ssh_config.5] 3012 ssh.1: add kexalgorithms to the -o list 3013 ssh_config.5: format the kexalgorithms in a more consistent 3014 (prettier!) way 3015 ok djm 3016 - djm@cvs.openbsd.org 2010/09/22 22:58:51 3017 [atomicio.c atomicio.h misc.c misc.h scp.c sftp-client.c] 3018 [sftp-client.h sftp.1 sftp.c] 3019 add an option per-read/write callback to atomicio 3020 3021 factor out bandwidth limiting code from scp(1) into a generic bandwidth 3022 limiter that can be attached using the atomicio callback mechanism 3023 3024 add a bandwidth limit option to sftp(1) using the above 3025 "very nice" markus@ 3026 - jmc@cvs.openbsd.org 2010/09/23 13:34:43 3027 [sftp.c] 3028 add [-l limit] to usage(); 3029 - jmc@cvs.openbsd.org 2010/09/23 13:36:46 3030 [scp.1 sftp.1] 3031 add KexAlgorithms to the -o list; 3032 303320100910 3034 - (dtucker) [openbsd-compat/port-linux.c] Check is_selinux_enabled for exact 3035 return code since it can apparently return -1 under some conditions. From 3036 openssh bugs werbittewas de, ok djm@ 3037 - OpenBSD CVS Sync 3038 - djm@cvs.openbsd.org 2010/08/31 12:33:38 3039 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keysign.c ssh.c sshd.c] 3040 reintroduce commit from tedu@, which I pulled out for release 3041 engineering: 3042 OpenSSL_add_all_algorithms is the name of the function we have a 3043 man page for, so use that. ok djm 3044 - jmc@cvs.openbsd.org 2010/08/31 17:40:54 3045 [ssh-agent.1] 3046 fix some macro abuse; 3047 - jmc@cvs.openbsd.org 2010/08/31 21:14:58 3048 [ssh.1] 3049 small text tweak to accommodate previous; 3050 - naddy@cvs.openbsd.org 2010/09/01 15:21:35 3051 [servconf.c] 3052 pick up ECDSA host key by default; ok djm@ 3053 - markus@cvs.openbsd.org 2010/09/02 16:07:25 3054 [ssh-keygen.c] 3055 permit -b 256, 384 or 521 as key size for ECDSA; ok djm@ 3056 - markus@cvs.openbsd.org 2010/09/02 16:08:39 3057 [ssh.c] 3058 unbreak ControlPersist=yes for ControlMaster=yes; ok djm@ 3059 - naddy@cvs.openbsd.org 2010/09/02 17:21:50 3060 [ssh-keygen.c] 3061 Switch ECDSA default key size to 256 bits, which according to RFC5656 3062 should still be better than our current RSA-2048 default. 3063 ok djm@, markus@ 3064 - jmc@cvs.openbsd.org 2010/09/03 11:09:29 3065 [scp.1] 3066 add an EXIT STATUS section for /usr/bin; 3067 - jmc@cvs.openbsd.org 2010/09/04 09:38:34 3068 [ssh-add.1 ssh.1] 3069 two more EXIT STATUS sections; 3070 - naddy@cvs.openbsd.org 2010/09/06 17:10:19 3071 [sshd_config] 3072 add ssh_host_ecdsa_key to /etc; from Mattieu Baptiste 3073 <mattieu.b@gmail.com> 3074 ok deraadt@ 3075 - djm@cvs.openbsd.org 2010/09/08 03:54:36 3076 [authfile.c] 3077 typo 3078 - deraadt@cvs.openbsd.org 2010/09/08 04:13:31 3079 [compress.c] 3080 work around name-space collisions some buggy compilers (looking at you 3081 gcc, at least in earlier versions, but this does not forgive your current 3082 transgressions) seen between zlib and openssl 3083 ok djm 3084 - djm@cvs.openbsd.org 2010/09/09 10:45:45 3085 [kex.c kex.h kexecdh.c key.c key.h monitor.c ssh-ecdsa.c] 3086 ECDH/ECDSA compliance fix: these methods vary the hash function they use 3087 (SHA256/384/512) depending on the length of the curve in use. The previous 3088 code incorrectly used SHA256 in all cases. 3089 3090 This fix will cause authentication failure when using 384 or 521-bit curve 3091 keys if one peer hasn't been upgraded and the other has. (256-bit curve 3092 keys work ok). In particular you may need to specify HostkeyAlgorithms 3093 when connecting to a server that has not been upgraded from an upgraded 3094 client. 3095 3096 ok naddy@ 3097 - (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c] 3098 [kexecdhc.c kexecdhs.c key.c key.h myproposal.h packet.c readconf.c] 3099 [ssh-agent.c ssh-ecdsa.c ssh-keygen.c ssh.c] Disable ECDH and ECDSA on 3100 platforms that don't have the requisite OpenSSL support. ok dtucker@ 3101 - (dtucker) [kex.h key.c packet.h ssh-agent.c ssh.c] A few more ECC ifdefs 3102 for missing headers and compiler warnings. 3103 310420100831 3105 - OpenBSD CVS Sync 3106 - jmc@cvs.openbsd.org 2010/08/08 19:36:30 3107 [ssh-keysign.8 ssh.1 sshd.8] 3108 use the same template for all FILES sections; i.e. -compact/.Pp where we 3109 have multiple items, and .Pa for path names; 3110 - tedu@cvs.openbsd.org 2010/08/12 23:34:39 3111 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keysign.c ssh.c sshd.c] 3112 OpenSSL_add_all_algorithms is the name of the function we have a man page 3113 for, so use that. ok djm 3114 - djm@cvs.openbsd.org 2010/08/16 04:06:06 3115 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keysign.c ssh.c sshd.c] 3116 backout previous temporarily; discussed with deraadt@ 3117 - djm@cvs.openbsd.org 2010/08/31 09:58:37 3118 [auth-options.c auth1.c auth2.c bufaux.c buffer.h kex.c key.c packet.c] 3119 [packet.h ssh-dss.c ssh-rsa.c] 3120 Add buffer_get_cstring() and related functions that verify that the 3121 string extracted from the buffer contains no embedded \0 characters* 3122 This prevents random (possibly malicious) crap from being appended to 3123 strings where it would not be noticed if the string is used with 3124 a string(3) function. 3125 3126 Use the new API in a few sensitive places. 3127 3128 * actually, we allow a single one at the end of the string for now because 3129 we don't know how many deployed implementations get this wrong, but don't 3130 count on this to remain indefinitely. 3131 - djm@cvs.openbsd.org 2010/08/31 11:54:45 3132 [PROTOCOL PROTOCOL.agent PROTOCOL.certkeys auth2-jpake.c authfd.c] 3133 [authfile.c buffer.h dns.c kex.c kex.h key.c key.h monitor.c] 3134 [monitor_wrap.c myproposal.h packet.c packet.h pathnames.h readconf.c] 3135 [ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c] 3136 [ssh-keyscan.1 ssh-keyscan.c ssh-keysign.8 ssh.1 ssh.c ssh2.h] 3137 [ssh_config.5 sshconnect.c sshconnect2.c sshd.8 sshd.c sshd_config.5] 3138 [uuencode.c uuencode.h bufec.c kexecdh.c kexecdhc.c kexecdhs.c ssh-ecdsa.c] 3139 Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and 3140 host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer 3141 better performance than plain DH and DSA at the same equivalent symmetric 3142 key length, as well as much shorter keys. 3143 3144 Only the mandatory sections of RFC5656 are implemented, specifically the 3145 three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and 3146 ECDSA. Point compression (optional in RFC5656 is NOT implemented). 3147 3148 Certificate host and user keys using the new ECDSA key types are supported. 3149 3150 Note that this code has not been tested for interoperability and may be 3151 subject to change. 3152 3153 feedback and ok markus@ 3154 - (djm) [Makefile.in] Add new ECC files 3155 - (djm) [bufec.c kexecdh.c kexecdhc.c kexecdhs.c ssh-ecdsa.c] include 3156 includes.h 3157 315820100827 3159 - (dtucker) [contrib/redhat/sshd.init] Bug #1810: initlog is deprecated, 3160 remove. Patch from martynas at venck us 3161 316220100823 3163 - (djm) Release OpenSSH-5.6p1 3164 316520100816 3166 - (dtucker) [configure.ac openbsd-compat/Makefile.in 3167 openbsd-compat/openbsd-compat.h openbsd-compat/strptime.c] Add strptime to 3168 the compat library which helps on platforms like old IRIX. Based on work 3169 by djm, tested by Tom Christensen. 3170 - OpenBSD CVS Sync 3171 - djm@cvs.openbsd.org 2010/08/12 21:49:44 3172 [ssh.c] 3173 close any extra file descriptors inherited from parent at start and 3174 reopen stdin/stdout to /dev/null when forking for ControlPersist. 3175 3176 prevents tools that fork and run a captive ssh for communication from 3177 failing to exit when the ssh completes while they wait for these fds to 3178 close. The inherited fds may persist arbitrarily long if a background 3179 mux master has been started by ControlPersist. cvs and scp were effected 3180 by this. 3181 3182 "please commit" markus@ 3183 - (djm) [regress/README.regress] typo 3184 318520100812 3186 - (tim) [regress/login-timeout.sh regress/reconfigure.sh regress/reexec.sh 3187 regress/test-exec.sh] Under certain conditions when testing with sudo 3188 tests would fail because the pidfile could not be read by a regular user. 3189 "cat: cannot open ...../regress/pidfile: Permission denied (error 13)" 3190 Make sure cat is run by $SUDO. no objection from me. djm@ 3191 - (tim) [auth.c] add cast to quiet compiler. Change only affects SVR5 systems. 3192 319320100809 3194 - (djm) bz#1561: don't bother setting IFF_UP on tun(4) device if it is 3195 already set. Makes FreeBSD user openable tunnels useful; patch from 3196 richard.burakowski+ossh AT mrburak.net, ok dtucker@ 3197 - (dtucker) bug #1530: strip trailing ":" from hostname in ssh-copy-id. 3198 based in part on a patch from Colin Watson, ok djm@ 3199 320020100809 3201 - OpenBSD CVS Sync 3202 - djm@cvs.openbsd.org 2010/08/08 16:26:42 3203 [version.h] 3204 crank to 5.6 3205 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 3206 [contrib/suse/openssh.spec] Crank version numbers 3207 320820100805 3209 - OpenBSD CVS Sync 3210 - djm@cvs.openbsd.org 2010/08/04 05:37:01 3211 [ssh.1 ssh_config.5 sshd.8] 3212 Remove mentions of weird "addr/port" alternate address format for IPv6 3213 addresses combinations. It hasn't worked for ages and we have supported 3214 the more commen "[addr]:port" format for a long time. ok jmc@ markus@ 3215 - djm@cvs.openbsd.org 2010/08/04 05:40:39 3216 [PROTOCOL.certkeys ssh-keygen.c] 3217 tighten the rules for certificate encoding by requiring that options 3218 appear in lexical order and make our ssh-keygen comply. ok markus@ 3219 - djm@cvs.openbsd.org 2010/08/04 05:42:47 3220 [auth.c auth2-hostbased.c authfile.c authfile.h ssh-keysign.8] 3221 [ssh-keysign.c ssh.c] 3222 enable certificates for hostbased authentication, from Iain Morgan; 3223 "looks ok" markus@ 3224 - djm@cvs.openbsd.org 2010/08/04 05:49:22 3225 [authfile.c] 3226 commited the wrong version of the hostbased certificate diff; this 3227 version replaces some strlc{py,at} verbosity with xasprintf() at 3228 the request of markus@ 3229 - djm@cvs.openbsd.org 2010/08/04 06:07:11 3230 [ssh-keygen.1 ssh-keygen.c] 3231 Support CA keys in PKCS#11 tokens; feedback and ok markus@ 3232 - djm@cvs.openbsd.org 2010/08/04 06:08:40 3233 [ssh-keysign.c] 3234 clean for -Wuninitialized (Id sync only; portable had this change) 3235 - djm@cvs.openbsd.org 2010/08/05 13:08:42 3236 [channels.c] 3237 Fix a trio of bugs in the local/remote window calculation for datagram 3238 data channels (i.e. TunnelForward): 3239 3240 Calculate local_consumed correctly in channel_handle_wfd() by measuring 3241 the delta to buffer_len(c->output) from when we start to when we finish. 3242 The proximal problem here is that the output_filter we use in portable 3243 modified the length of the dequeued datagram (to futz with the headers 3244 for !OpenBSD). 3245 3246 In channel_output_poll(), don't enqueue datagrams that won't fit in the 3247 peer's advertised packet size (highly unlikely to ever occur) or which 3248 won't fit in the peer's remaining window (more likely). 3249 3250 In channel_input_data(), account for the 4-byte string header in 3251 datagram packets that we accept from the peer and enqueue in c->output. 3252 3253 report, analysis and testing 2/3 cases from wierbows AT us.ibm.com; 3254 "looks good" markus@ 3255 325620100803 3257 - (dtucker) [monitor.c] Bug #1795: Initialize the values to be returned from 3258 PAM to sane values in case the PAM method doesn't write to them. Spotted by 3259 Bitman Zhou, ok djm@. 3260 - OpenBSD CVS Sync 3261 - djm@cvs.openbsd.org 2010/07/16 04:45:30 3262 [ssh-keygen.c] 3263 avoid bogus compiler warning 3264 - djm@cvs.openbsd.org 2010/07/16 14:07:35 3265 [ssh-rsa.c] 3266 more timing paranoia - compare all parts of the expected decrypted 3267 data before returning. AFAIK not exploitable in the SSH protocol. 3268 "groovy" deraadt@ 3269 - djm@cvs.openbsd.org 2010/07/19 03:16:33 3270 [sftp-client.c] 3271 bz#1797: fix swapped args in upload_dir_internal(), breaking recursive 3272 upload depth checks and causing verbose printing of transfers to always 3273 be turned on; patch from imorgan AT nas.nasa.gov 3274 - djm@cvs.openbsd.org 2010/07/19 09:15:12 3275 [clientloop.c readconf.c readconf.h ssh.c ssh_config.5] 3276 add a "ControlPersist" option that automatically starts a background 3277 ssh(1) multiplex master when connecting. This connection can stay alive 3278 indefinitely, or can be set to automatically close after a user-specified 3279 duration of inactivity. bz#1330 - patch by dwmw2 AT infradead.org, but 3280 further hacked on by wmertens AT cisco.com, apb AT cequrux.com, 3281 martin-mindrot-bugzilla AT earth.li and myself; "looks ok" markus@ 3282 - djm@cvs.openbsd.org 2010/07/21 02:10:58 3283 [misc.c] 3284 sync timingsafe_bcmp() with the one dempsky@ committed to sys/lib/libkern 3285 - dtucker@cvs.openbsd.org 2010/07/23 08:49:25 3286 [ssh.1] 3287 Ciphers is documented in ssh_config(5) these days 3288 328920100819 3290 - (dtucker) [contrib/ssh-copy-ud.1] Bug #1786: update ssh-copy-id.1 with more 3291 details about its behaviour WRT existing directories. Patch from 3292 asguthrie at gmail com, ok djm. 3293 329420100716 3295 - (djm) OpenBSD CVS Sync 3296 - djm@cvs.openbsd.org 2010/07/02 04:32:44 3297 [misc.c] 3298 unbreak strdelim() skipping past quoted strings, e.g. 3299 AllowUsers "blah blah" blah 3300 was broken; report and fix in bz#1757 from bitman.zhou AT centrify.com 3301 ok dtucker; 3302 - djm@cvs.openbsd.org 2010/07/12 22:38:52 3303 [ssh.c] 3304 Make ExitOnForwardFailure work with fork-after-authentication ("ssh -f") 3305 for protocol 2. ok markus@ 3306 - djm@cvs.openbsd.org 2010/07/12 22:41:13 3307 [ssh.c ssh_config.5] 3308 expand %h to the hostname in ssh_config Hostname options. While this 3309 sounds useless, it is actually handy for working with unqualified 3310 hostnames: 3311 3312 Host *.* 3313 Hostname %h 3314 Host * 3315 Hostname %h.example.org 3316 3317 "I like it" markus@ 3318 - djm@cvs.openbsd.org 2010/07/13 11:52:06 3319 [auth-rsa.c channels.c jpake.c key.c misc.c misc.h monitor.c] 3320 [packet.c ssh-rsa.c] 3321 implement a timing_safe_cmp() function to compare memory without leaking 3322 timing information by short-circuiting like memcmp() and use it for 3323 some of the more sensitive comparisons (though nothing high-value was 3324 readily attackable anyway); "looks ok" markus@ 3325 - djm@cvs.openbsd.org 2010/07/13 23:13:16 3326 [auth-rsa.c channels.c jpake.c key.c misc.c misc.h monitor.c packet.c] 3327 [ssh-rsa.c] 3328 s/timing_safe_cmp/timingsafe_bcmp/g 3329 - jmc@cvs.openbsd.org 2010/07/14 17:06:58 3330 [ssh.1] 3331 finally ssh synopsis looks nice again! this commit just removes a ton of 3332 hacks we had in place to make it work with old groff; 3333 - schwarze@cvs.openbsd.org 2010/07/15 21:20:38 3334 [ssh-keygen.1] 3335 repair incorrect block nesting, which screwed up indentation; 3336 problem reported and fix OK by jmc@ 3337 333820100714 3339 - (tim) [contrib/redhat/openssh.spec] Bug 1796: Test for skip_x11_askpass 3340 (line 77) should have been for no_x11_askpass. 3341 334220100702 3343 - (djm) OpenBSD CVS Sync 3344 - jmc@cvs.openbsd.org 2010/06/26 00:57:07 3345 [ssh_config.5] 3346 tweak previous; 3347 - djm@cvs.openbsd.org 2010/06/26 23:04:04 3348 [ssh.c] 3349 oops, forgot to #include <canohost.h>; spotted and patch from chl@ 3350 - djm@cvs.openbsd.org 2010/06/29 23:15:30 3351 [ssh-keygen.1 ssh-keygen.c] 3352 allow import (-i) and export (-e) of PEM and PKCS#8 encoded keys; 3353 bz#1749; ok markus@ 3354 - djm@cvs.openbsd.org 2010/06/29 23:16:46 3355 [auth2-pubkey.c sshd_config.5] 3356 allow key options (command="..." and friends) in AuthorizedPrincipals; 3357 ok markus@ 3358 - jmc@cvs.openbsd.org 2010/06/30 07:24:25 3359 [ssh-keygen.1] 3360 tweak previous; 3361 - jmc@cvs.openbsd.org 2010/06/30 07:26:03 3362 [ssh-keygen.c] 3363 sort usage(); 3364 - jmc@cvs.openbsd.org 2010/06/30 07:28:34 3365 [sshd_config.5] 3366 tweak previous; 3367 - millert@cvs.openbsd.org 2010/07/01 13:06:59 3368 [scp.c] 3369 Fix a longstanding problem where if you suspend scp at the 3370 password/passphrase prompt the terminal mode is not restored. 3371 OK djm@ 3372 - phessler@cvs.openbsd.org 2010/06/27 19:19:56 3373 [regress/Makefile] 3374 fix how we run the tests so we can successfully use SUDO='sudo -E' 3375 in our env 3376 - djm@cvs.openbsd.org 2010/06/29 23:59:54 3377 [cert-userkey.sh] 3378 regress tests for key options in AuthorizedPrincipals 3379 338020100627 3381 - (tim) [openbsd-compat/port-uw.c] Reorder includes. auth-options.h now needs 3382 key.h. 3383 338420100626 3385 - (djm) OpenBSD CVS Sync 3386 - djm@cvs.openbsd.org 2010/05/21 05:00:36 3387 [misc.c] 3388 colon() returns char*, so s/return (0)/return NULL/ 3389 - markus@cvs.openbsd.org 2010/06/08 21:32:19 3390 [ssh-pkcs11.c] 3391 check length of value returned C_GetAttributValue for != 0 3392 from mdrtbugzilla@codefive.co.uk; bugzilla #1773; ok dtucker@ 3393 - djm@cvs.openbsd.org 2010/06/17 07:07:30 3394 [mux.c] 3395 Correct sizing of object to be allocated by calloc(), replacing 3396 sizeof(state) with sizeof(*state). This worked by accident since 3397 the struct contained a single int at present, but could have broken 3398 in the future. patch from hyc AT symas.com 3399 - djm@cvs.openbsd.org 2010/06/18 00:58:39 3400 [sftp.c] 3401 unbreak ls in working directories that contains globbing characters in 3402 their pathnames. bz#1655 reported by vgiffin AT apple.com 3403 - djm@cvs.openbsd.org 2010/06/18 03:16:03 3404 [session.c] 3405 Missing check for chroot_director == "none" (we already checked against 3406 NULL); bz#1564 from Jan.Pechanec AT Sun.COM 3407 - djm@cvs.openbsd.org 2010/06/18 04:43:08 3408 [sftp-client.c] 3409 fix memory leak in do_realpath() error path; bz#1771, patch from 3410 anicka AT suse.cz 3411 - djm@cvs.openbsd.org 2010/06/22 04:22:59 3412 [servconf.c sshd_config.5] 3413 expose some more sshd_config options inside Match blocks: 3414 AuthorizedKeysFile AuthorizedPrincipalsFile 3415 HostbasedUsesNameFromPacketOnly PermitTunnel 3416 bz#1764; feedback from imorgan AT nas.nasa.gov; ok dtucker@ 3417 - djm@cvs.openbsd.org 2010/06/22 04:32:06 3418 [ssh-keygen.c] 3419 standardise error messages when attempting to open private key 3420 files to include "progname: filename: error reason" 3421 bz#1783; ok dtucker@ 3422 - djm@cvs.openbsd.org 2010/06/22 04:49:47 3423 [auth.c] 3424 queue auth debug messages for bad ownership or permissions on the user's 3425 keyfiles. These messages will be sent after the user has successfully 3426 authenticated (where our client will display them with LogLevel=debug). 3427 bz#1554; ok dtucker@ 3428 - djm@cvs.openbsd.org 2010/06/22 04:54:30 3429 [ssh-keyscan.c] 3430 replace verbose and overflow-prone Linebuf code with read_keyfile_line() 3431 based on patch from joachim AT joachimschipper.nl; bz#1565; ok dtucker@ 3432 - djm@cvs.openbsd.org 2010/06/22 04:59:12 3433 [session.c] 3434 include the user name on "subsystem request for ..." log messages; 3435 bz#1571; ok dtucker@ 3436 - djm@cvs.openbsd.org 2010/06/23 02:59:02 3437 [ssh-keygen.c] 3438 fix printing of extensions in v01 certificates that I broke in r1.190 3439 - djm@cvs.openbsd.org 2010/06/25 07:14:46 3440 [channels.c mux.c readconf.c readconf.h ssh.h] 3441 bz#1327: remove hardcoded limit of 100 permitopen clauses and port 3442 forwards per direction; ok markus@ stevesk@ 3443 - djm@cvs.openbsd.org 2010/06/25 07:20:04 3444 [channels.c session.c] 3445 bz#1750: fix requirement for /dev/null inside ChrootDirectory for 3446 internal-sftp accidentally introduced in r1.253 by removing the code 3447 that opens and dup /dev/null to stderr and modifying the channels code 3448 to read stderr but discard it instead; ok markus@ 3449 - djm@cvs.openbsd.org 2010/06/25 08:46:17 3450 [auth1.c auth2-none.c] 3451 skip the initial check for access with an empty password when 3452 PermitEmptyPasswords=no; bz#1638; ok markus@ 3453 - djm@cvs.openbsd.org 2010/06/25 23:10:30 3454 [ssh.c] 3455 log the hostname and address that we connected to at LogLevel=verbose 3456 after authentication is successful to mitigate "phishing" attacks by 3457 servers with trusted keys that accept authentication silently and 3458 automatically before presenting fake password/passphrase prompts; 3459 "nice!" markus@ 3460 - djm@cvs.openbsd.org 2010/06/25 23:10:30 3461 [ssh.c] 3462 log the hostname and address that we connected to at LogLevel=verbose 3463 after authentication is successful to mitigate "phishing" attacks by 3464 servers with trusted keys that accept authentication silently and 3465 automatically before presenting fake password/passphrase prompts; 3466 "nice!" markus@ 3467 346820100622 3469 - (djm) [loginrec.c] crank LINFO_NAMESIZE (username length) to 512 3470 bz#1579; ok dtucker 3471 347220100618 3473 - (djm) [contrib/ssh-copy-id] Update key file explicitly under ~ 3474 rather than assuming that $CWD == $HOME. bz#1500, patch from 3475 timothy AT gelter.com 3476 347720100617 3478 - (tim) [contrib/cygwin/README] Remove a reference to the obsolete 3479 minires-devel package, and to add the reference to the libedit-devel 3480 package since CYgwin now provides libedit. Patch from Corinna Vinschen. 3481 348220100521 3483 - (djm) OpenBSD CVS Sync 3484 - djm@cvs.openbsd.org 2010/05/07 11:31:26 3485 [regress/Makefile regress/cert-userkey.sh] 3486 regress tests for AuthorizedPrincipalsFile and "principals=" key option. 3487 feedback and ok markus@ 3488 - djm@cvs.openbsd.org 2010/05/11 02:58:04 3489 [auth-rsa.c] 3490 don't accept certificates marked as "cert-authority" here; ok markus@ 3491 - djm@cvs.openbsd.org 2010/05/14 00:47:22 3492 [ssh-add.c] 3493 check that the certificate matches the corresponding private key before 3494 grafting it on 3495 - djm@cvs.openbsd.org 2010/05/14 23:29:23 3496 [channels.c channels.h mux.c ssh.c] 3497 Pause the mux channel while waiting for reply from aynch callbacks. 3498 Prevents misordering of replies if new requests arrive while waiting. 3499 3500 Extend channel open confirm callback to allow signalling failure 3501 conditions as well as success. Use this to 1) fix a memory leak, 2) 3502 start using the above pause mechanism and 3) delay sending a success/ 3503 failure message on mux slave session open until we receive a reply from 3504 the server. 3505 3506 motivated by and with feedback from markus@ 3507 - markus@cvs.openbsd.org 2010/05/16 12:55:51 3508 [PROTOCOL.mux clientloop.h mux.c readconf.c readconf.h ssh.1 ssh.c] 3509 mux support for remote forwarding with dynamic port allocation, 3510 use with 3511 LPORT=`ssh -S muxsocket -R0:localhost:25 -O forward somehost` 3512 feedback and ok djm@ 3513 - djm@cvs.openbsd.org 2010/05/20 11:25:26 3514 [auth2-pubkey.c] 3515 fix logspam when key options (from="..." especially) deny non-matching 3516 keys; reported by henning@ also bz#1765; ok markus@ dtucker@ 3517 - djm@cvs.openbsd.org 2010/05/20 23:46:02 3518 [PROTOCOL.certkeys auth-options.c ssh-keygen.c] 3519 Move the permit-* options to the non-critical "extensions" field for v01 3520 certificates. The logic is that if another implementation fails to 3521 implement them then the connection just loses features rather than fails 3522 outright. 3523 3524 ok markus@ 3525 352620100511 3527 - (dtucker) [Makefile.in] Bug #1770: Link libopenbsd-compat twice to solve 3528 circular dependency problem on old or odd platforms. From Tom Lane, ok 3529 djm@. 3530 - (djm) [openbsd-compat/openssl-compat.h] Fix build breakage on older 3531 libcrypto by defining OPENSSL_[DR]SA_MAX_MODULUS_BITS if they aren't 3532 already. ok dtucker@ 3533 353420100510 3535 - OpenBSD CVS Sync 3536 - djm@cvs.openbsd.org 2010/04/23 01:47:41 3537 [ssh-keygen.c] 3538 bz#1740: display a more helpful error message when $HOME is 3539 inaccessible while trying to create .ssh directory. Based on patch 3540 from jchadima AT redhat.com; ok dtucker@ 3541 - djm@cvs.openbsd.org 2010/04/23 22:27:38 3542 [mux.c] 3543 set "detach_close" flag when registering channel cleanup callbacks. 3544 This causes the channel to close normally when its fds close and 3545 hangs when terminating a mux slave using ~. bz#1758; ok markus@ 3546 - djm@cvs.openbsd.org 2010/04/23 22:42:05 3547 [session.c] 3548 set stderr to /dev/null for subsystems rather than just closing it. 3549 avoids hangs if a subsystem or shell initialisation writes to stderr. 3550 bz#1750; ok markus@ 3551 - djm@cvs.openbsd.org 2010/04/23 22:48:31 3552 [ssh-keygen.c] 3553 refuse to generate keys longer than OPENSSL_[RD]SA_MAX_MODULUS_BITS, 3554 since we would refuse to use them anyway. bz#1516; ok dtucker@ 3555 - djm@cvs.openbsd.org 2010/04/26 22:28:24 3556 [sshconnect2.c] 3557 bz#1502: authctxt.success is declared as an int, but passed by 3558 reference to function that accepts sig_atomic_t*. Convert it to 3559 the latter; ok markus@ dtucker@ 3560 - djm@cvs.openbsd.org 2010/05/01 02:50:50 3561 [PROTOCOL.certkeys] 3562 typo; jmeltzer@ 3563 - dtucker@cvs.openbsd.org 2010/05/05 04:22:09 3564 [sftp.c] 3565 restore mput and mget which got lost in the tab-completion changes. 3566 found by Kenneth Whitaker, ok djm@ 3567 - djm@cvs.openbsd.org 2010/05/07 11:30:30 3568 [auth-options.c auth-options.h auth.c auth.h auth2-pubkey.c] 3569 [key.c servconf.c servconf.h sshd.8 sshd_config.5] 3570 add some optional indirection to matching of principal names listed 3571 in certificates. Currently, a certificate must include the a user's name 3572 to be accepted for authentication. This change adds the ability to 3573 specify a list of certificate principal names that are acceptable. 3574 3575 When authenticating using a CA trusted through ~/.ssh/authorized_keys, 3576 this adds a new principals="name1[,name2,...]" key option. 3577 3578 For CAs listed through sshd_config's TrustedCAKeys option, a new config 3579 option "AuthorizedPrincipalsFile" specifies a per-user file containing 3580 the list of acceptable names. 3581 3582 If either option is absent, the current behaviour of requiring the 3583 username to appear in principals continues to apply. 3584 3585 These options are useful for role accounts, disjoint account namespaces 3586 and "user@realm"-style naming policies in certificates. 3587 3588 feedback and ok markus@ 3589 - jmc@cvs.openbsd.org 2010/05/07 12:49:17 3590 [sshd_config.5] 3591 tweak previous; 3592 359320100423 3594 - (dtucker) [configure.ac] Bug #1756: Check for the existence of a lib64 dir 3595 in the openssl install directory (some newer openssl versions do this on at 3596 least some amd64 platforms). 3597 359820100418 3599 - OpenBSD CVS Sync 3600 - jmc@cvs.openbsd.org 2010/04/16 06:45:01 3601 [ssh_config.5] 3602 tweak previous; ok djm 3603 - jmc@cvs.openbsd.org 2010/04/16 06:47:04 3604 [ssh-keygen.1 ssh-keygen.c] 3605 tweak previous; ok djm 3606 - djm@cvs.openbsd.org 2010/04/16 21:14:27 3607 [sshconnect.c] 3608 oops, %r => remote username, not %u 3609 - djm@cvs.openbsd.org 2010/04/16 01:58:45 3610 [regress/cert-hostkey.sh regress/cert-userkey.sh] 3611 regression tests for v01 certificate format 3612 includes interop tests for v00 certs 3613 - (dtucker) [contrib/aix/buildbff.sh] Fix creation of ssh_prng_cmds.default 3614 file. 3615 361620100416 3617 - (djm) Release openssh-5.5p1 3618 - OpenBSD CVS Sync 3619 - djm@cvs.openbsd.org 2010/03/26 03:13:17 3620 [bufaux.c] 3621 allow buffer_get_int_ret/buffer_get_int64_ret to take a NULL pointer 3622 argument to allow skipping past values in a buffer 3623 - jmc@cvs.openbsd.org 2010/03/26 06:54:36 3624 [ssh.1] 3625 tweak previous; 3626 - jmc@cvs.openbsd.org 2010/03/27 14:26:55 3627 [ssh_config.5] 3628 tweak previous; ok dtucker 3629 - djm@cvs.openbsd.org 2010/04/10 00:00:16 3630 [ssh.c] 3631 bz#1746 - suppress spurious tty warning when using -O and stdin 3632 is not a tty; ok dtucker@ markus@ 3633 - djm@cvs.openbsd.org 2010/04/10 00:04:30 3634 [sshconnect.c] 3635 fix terminology: we didn't find a certificate in known_hosts, we found 3636 a CA key 3637 - djm@cvs.openbsd.org 2010/04/10 02:08:44 3638 [clientloop.c] 3639 bz#1698: kill channel when pty allocation requests fail. Fixed 3640 stuck client if the server refuses pty allocation. 3641 ok dtucker@ "think so" markus@ 3642 - djm@cvs.openbsd.org 2010/04/10 02:10:56 3643 [sshconnect2.c] 3644 show the key type that we are offering in debug(), helps distinguish 3645 between certs and plain keys as the path to the private key is usually 3646 the same. 3647 - djm@cvs.openbsd.org 2010/04/10 05:48:16 3648 [mux.c] 3649 fix NULL dereference; from matthew.haub AT alumni.adelaide.edu.au 3650 - djm@cvs.openbsd.org 2010/04/14 22:27:42 3651 [ssh_config.5 sshconnect.c] 3652 expand %r => remote username in ssh_config:ProxyCommand; 3653 ok deraadt markus 3654 - markus@cvs.openbsd.org 2010/04/15 20:32:55 3655 [ssh-pkcs11.c] 3656 retry lookup for private key if there's no matching key with CKA_SIGN 3657 attribute enabled; this fixes fixes MuscleCard support (bugzilla #1736) 3658 ok djm@ 3659 - djm@cvs.openbsd.org 2010/04/16 01:47:26 3660 [PROTOCOL.certkeys auth-options.c auth-options.h auth-rsa.c] 3661 [auth2-pubkey.c authfd.c key.c key.h myproposal.h ssh-add.c] 3662 [ssh-agent.c ssh-dss.c ssh-keygen.1 ssh-keygen.c ssh-rsa.c] 3663 [sshconnect.c sshconnect2.c sshd.c] 3664 revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with the 3665 following changes: 3666 3667 move the nonce field to the beginning of the certificate where it can 3668 better protect against chosen-prefix attacks on the signature hash 3669 3670 Rename "constraints" field to "critical options" 3671 3672 Add a new non-critical "extensions" field 3673 3674 Add a serial number 3675 3676 The older format is still support for authentication and cert generation 3677 (use "ssh-keygen -t v00 -s ca_key ..." to generate a v00 certificate) 3678 3679 ok markus@ 3680