xref: /freebsd/crypto/openssh/ChangeLog (revision bc96366c864c07ef352edb92017357917c75b36c)
120140313
2 - (djm) Release OpenSSH 6.6
3
420140304
5 - OpenBSD CVS Sync
6   - djm@cvs.openbsd.org 2014/03/03 22:22:30
7     [session.c]
8     ignore enviornment variables with embedded '=' or '\0' characters;
9     spotted by Jann Horn; ok deraadt@
10
1120140301
12 - (djm) [regress/Makefile] Disable dhgex regress test; it breaks when
13   no moduli file exists at the expected location.
14
1520140228
16 - OpenBSD CVS Sync
17   - djm@cvs.openbsd.org 2014/02/27 00:41:49
18     [bufbn.c]
19     fix unsigned overflow that could lead to reading a short ssh protocol
20     1 bignum value; found by Ben Hawkes; ok deraadt@
21   - djm@cvs.openbsd.org 2014/02/27 08:25:09
22     [bufbn.c]
23     off by one in range check
24   - djm@cvs.openbsd.org 2014/02/27 22:47:07
25     [sshd_config.5]
26     bz#2184 clarify behaviour of a keyword that appears in multiple
27     matching Match blocks; ok dtucker@
28   - djm@cvs.openbsd.org 2014/02/27 22:57:40
29     [version.h]
30     openssh-6.6
31   - dtucker@cvs.openbsd.org 2014/01/19 23:43:02
32     [regress/sftp-chroot.sh]
33     Don't use -q on sftp as it suppresses logging, instead redirect the
34     output to the regress logfile.
35   - dtucker@cvs.openbsd.org 2014/01/20 00:00:30
36     [sregress/ftp-chroot.sh]
37     append to rather than truncating the log file
38   - dtucker@cvs.openbsd.org 2014/01/25 04:35:32
39     [regress/Makefile regress/dhgex.sh]
40     Add a test for DH GEX sizes
41   - djm@cvs.openbsd.org 2014/01/26 10:22:10
42     [regress/cert-hostkey.sh]
43     automatically generate revoked keys from listed keys rather than
44     manually specifying each type; from portable
45     (Id sync only)
46   - djm@cvs.openbsd.org 2014/01/26 10:49:17
47     [scp-ssh-wrapper.sh scp.sh]
48     make sure $SCP is tested on the remote end rather than whichever one
49     happens to be in $PATH; from portable
50     (Id sync only)
51   - djm@cvs.openbsd.org 2014/02/27 20:04:16
52     [login-timeout.sh]
53     remove any existing LoginGraceTime from sshd_config before adding
54     a specific one for the test back in
55   - djm@cvs.openbsd.org 2014/02/27 21:21:25
56     [agent-ptrace.sh agent.sh]
57     keep return values that are printed in error messages;
58     from portable
59     (Id sync only)
60 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
61   [contrib/suse/openssh.spec] Crank version numbers
62 - (djm) [regress/host-expand.sh] Add RCS Id
63
6420140227
65 - OpenBSD CVS Sync
66   - djm@cvs.openbsd.org 2014/02/26 20:18:37
67     [ssh.c]
68     bz#2205: avoid early hostname lookups unless canonicalisation is enabled;
69     ok dtucker@ markus@
70   - djm@cvs.openbsd.org 2014/02/26 20:28:44
71     [auth2-gss.c gss-serv.c ssh-gss.h sshd.c]
72     bz#2107 - cache OIDs of supported GSSAPI mechanisms before privsep
73     sandboxing, as running this code in the sandbox can cause violations;
74     ok markus@
75   - djm@cvs.openbsd.org 2014/02/26 20:29:29
76     [channels.c]
77     don't assume that the socks4 username is \0 terminated;
78     spotted by Ben Hawkes; ok markus@
79   - markus@cvs.openbsd.org 2014/02/26 21:53:37
80     [sshd.c]
81     ssh_gssapi_prepare_supported_oids needs GSSAPI
82
8320140224
84 - OpenBSD CVS Sync
85   - djm@cvs.openbsd.org 2014/02/07 06:55:54
86     [cipher.c mac.c]
87     remove some logging that makes ssh debugging output very verbose;
88     ok markus
89   - djm@cvs.openbsd.org 2014/02/15 23:05:36
90     [channels.c]
91     avoid spurious "getsockname failed: Bad file descriptor" errors in ssh -W;
92     bz#2200, debian#738692 via Colin Watson; ok dtucker@
93   - djm@cvs.openbsd.org 2014/02/22 01:32:19
94     [readconf.c]
95     when processing Match blocks, skip 'exec' clauses if previous predicates
96     failed to match; ok markus@
97   - djm@cvs.openbsd.org 2014/02/23 20:03:42
98     [ssh-ed25519.c]
99     check for unsigned overflow; not reachable in OpenSSH but others might
100     copy our code...
101   - djm@cvs.openbsd.org 2014/02/23 20:11:36
102     [readconf.c readconf.h ssh.c ssh_config.5]
103     reparse ssh_config and ~/.ssh/config if hostname canonicalisation changes
104     the hostname. This allows users to write configurations that always
105     refer to canonical hostnames, e.g.
106
107     CanonicalizeHostname yes
108     CanonicalDomains int.example.org example.org
109     CanonicalizeFallbackLocal no
110
111     Host *.int.example.org
112         Compression off
113     Host *.example.org
114         User djm
115
116     ok markus@
117
11820140213
119 - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}]  Add compat
120   code for older OpenSSL versions that don't have EVP_MD_CTX_copy_ex.
121
12220140207
123 - OpenBSD CVS Sync
124   - naddy@cvs.openbsd.org 2014/02/05 20:13:25
125     [ssh-keygen.1 ssh-keygen.c]
126     tweak synopsis: calling ssh-keygen without any arguments is fine; ok jmc@
127     while here, fix ordering in usage(); requested by jmc@
128   - djm@cvs.openbsd.org 2014/02/06 22:21:01
129     [sshconnect.c]
130     in ssh_create_socket(), only do the getaddrinfo for BindAddress when
131     BindAddress is actually specified. Fixes regression in 6.5 for
132     UsePrivilegedPort=yes; patch from Corinna Vinschen
133
13420140206
135 - (dtucker) [openbsd-compat/bsd-poll.c] Don't bother checking for non-NULL
136   before freeing since free(NULL) is a no-op.  ok djm.
137 - (djm) [sandbox-seccomp-filter.c] Not all Linux architectures define
138   __NR_shutdown; some go via the socketcall(2) multiplexer.
139
14020140205
141 - (djm) [sandbox-capsicum.c] Don't fatal if Capsicum is offered by
142   headers/libc but not supported by the kernel. Patch from Loganaden
143   Velvindron @ AfriNIC
144
14520140204
146 - OpenBSD CVS Sync
147   - markus@cvs.openbsd.org 2014/01/27 18:58:14
148     [Makefile.in digest.c digest.h hostfile.c kex.h mac.c hmac.c hmac.h]
149     replace openssl HMAC with an implementation based on our ssh_digest_*
150     ok and feedback djm@
151   - markus@cvs.openbsd.org 2014/01/27 19:18:54
152     [auth-rsa.c cipher.c ssh-agent.c sshconnect1.c sshd.c]
153     replace openssl MD5 with our ssh_digest_*; ok djm@
154   - markus@cvs.openbsd.org 2014/01/27 20:13:46
155     [digest.c digest-openssl.c digest-libc.c Makefile.in]
156     rename digest.c to digest-openssl.c and add libc variant; ok djm@
157   - jmc@cvs.openbsd.org 2014/01/28 14:13:39
158     [ssh-keyscan.1]
159     kill some bad Pa;
160     From: Jan Stary
161   - djm@cvs.openbsd.org 2014/01/29 00:19:26
162     [sshd.c]
163     use kill(0, ...) instead of killpg(0, ...); on most operating systems
164     they are equivalent, but SUSv2 describes the latter as having undefined
165     behaviour; from portable; ok dtucker
166     (Id sync only; change is already in portable)
167   - djm@cvs.openbsd.org 2014/01/29 06:18:35
168     [Makefile.in auth.h auth2-jpake.c auth2.c jpake.c jpake.h monitor.c]
169     [monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h]
170     [schnorr.c schnorr.h servconf.c servconf.h ssh2.h sshconnect2.c]
171     remove experimental, never-enabled JPAKE code; ok markus@
172   - jmc@cvs.openbsd.org 2014/01/29 14:04:51
173     [sshd_config.5]
174     document kbdinteractiveauthentication;
175     requested From: Ross L Richardson
176
177     dtucker/markus helped explain its workings;
178   - djm@cvs.openbsd.org 2014/01/30 22:26:14
179     [sandbox-systrace.c]
180     allow shutdown(2) syscall in sandbox - it may be called by packet_close()
181     from portable
182     (Id sync only; change is already in portable)
183   - tedu@cvs.openbsd.org 2014/01/31 16:39:19
184     [auth2-chall.c authfd.c authfile.c bufaux.c bufec.c canohost.c]
185     [channels.c cipher-chachapoly.c clientloop.c configure.ac hostfile.c]
186     [kexc25519.c krl.c monitor.c sandbox-systrace.c session.c]
187     [sftp-client.c ssh-keygen.c ssh.c sshconnect2.c sshd.c sshlogin.c]
188     [openbsd-compat/explicit_bzero.c openbsd-compat/openbsd-compat.h]
189     replace most bzero with explicit_bzero, except a few that cna be memset
190     ok djm dtucker
191   - djm@cvs.openbsd.org 2014/02/02 03:44:32
192     [auth1.c auth2-chall.c auth2-passwd.c authfile.c bufaux.c bufbn.c]
193     [buffer.c cipher-3des1.c cipher.c clientloop.c gss-serv.c kex.c]
194     [kexdhc.c kexdhs.c kexecdhc.c kexgexc.c kexecdhs.c kexgexs.c key.c]
195     [monitor.c monitor_wrap.c packet.c readpass.c rsa.c serverloop.c]
196     [ssh-add.c ssh-agent.c ssh-dss.c ssh-ecdsa.c ssh-ed25519.c]
197     [ssh-keygen.c ssh-rsa.c sshconnect.c sshconnect1.c sshconnect2.c]
198     [sshd.c]
199     convert memset of potentially-private data to explicit_bzero()
200   - djm@cvs.openbsd.org 2014/02/03 23:28:00
201     [ssh-ecdsa.c]
202     fix memory leak; ECDSA_SIG_new() allocates 'r' and 's' for us, unlike
203     DSA_SIG_new. Reported by Batz Spear; ok markus@
204   - djm@cvs.openbsd.org 2014/02/02 03:44:31
205     [digest-libc.c digest-openssl.c]
206     convert memset of potentially-private data to explicit_bzero()
207   - djm@cvs.openbsd.org 2014/02/04 00:24:29
208     [ssh.c]
209     delay lowercasing of hostname until right before hostname
210     canonicalisation to unbreak case-sensitive matching of ssh_config;
211     reported by Ike Devolder; ok markus@
212 - (djm) [openbsd-compat/Makefile.in] Add missing explicit_bzero.o
213 - (djm) [regress/setuid-allowed.c] Missing string.h for strerror()
214
21520140131
216 - (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2)
217   syscall from sandboxes; it may be called by packet_close.
218 - (dtucker) [readconf.c] Include <arpa/inet.h> for the hton macros.  Fixes
219   build with HP-UX's compiler.  Patch from Kevin Brott.
220 - (tim) [Makefile.in] build regress/setuid-allow.
221
22220140130
223 - (djm) [configure.ac] Only check for width-specified integer types
224   in headers that actually exist. patch from Tom G. Christensen;
225   ok dtucker@
226 - (djm) [configure.ac atomicio.c] Kludge around NetBSD offering
227   different symbols for 'read' when various compiler flags are
228   in use, causing atomicio.c comparisons against it to break and
229   read/write operations to hang; ok dtucker
230 - (djm) Release openssh-6.5p1
231
23220140129
233 - (djm) [configure.ac] Fix broken shell test '==' vs '='; patch from
234   Tom G. Christensen
235
23620140128
237 - (djm) [configure.ac] Search for inet_ntop in libnsl and libresovl;
238   ok dtucker
239 - (djm) [sshd.c] Use kill(0, ...) instead of killpg(0, ...); the
240   latter being specified to have undefined behaviour in SUSv3;
241   ok dtucker
242 - (tim) [regress/agent.sh regress/agent-ptrace.sh] Assign $? to a variable
243   when used as an error message inside an if statement so we display the
244   correct into. agent.sh patch from Petr Lautrbach.
245
24620140127
247 - (dtucker) [Makefile.in] Remove trailing backslash which some make
248   implementations (eg older Solaris) do not cope with.
249
25020140126
251 - OpenBSD CVS Sync
252   - dtucker@cvs.openbsd.org 2014/01/25 10:12:50
253     [cipher.c cipher.h kex.c kex.h kexgexc.c]
254     Add a special case for the DH group size for 3des-cbc, which has an
255     effective strength much lower than the key size.  This causes problems
256     with some cryptlib implementations, which don't support group sizes larger
257     than 4k but also don't use the largest group size it does support as
258     specified in the RFC.  Based on a patch from Petr Lautrbach at Redhat,
259     reduced by me with input from Markus.  ok djm@ markus@
260   - markus@cvs.openbsd.org 2014/01/25 20:35:37
261     [kex.c]
262     dh_need needs to be set to max(seclen, blocksize, ivlen, mac_len)
263     ok dtucker@, noted by mancha
264  - (djm) [configure.ac sandbox-capsicum.c sandbox-rlimit.c] Disable
265    RLIMIT_NOFILE pseudo-sandbox on FreeBSD. In some configurations,
266    libc will attempt to open additional file descriptors for crypto
267    offload and crash if they cannot be opened.
268 - (djm) [configure.ac] correct AC_DEFINE for previous.
269
27020140125
271 - (djm) [configure.ac] Fix detection of capsicum sandbox on FreeBSD
272 - (djm) [configure.ac] Do not attempt to use capsicum sandbox unless
273   sys/capability.h exists and cap_rights_limit is in libc. Fixes
274   build on FreeBSD9x which provides the header but not the libc
275   support.
276 - (djm) [configure.ac] autoconf sets finds to 'yes' not '1', so test
277   against the correct thing.
278
27920140124
280 - (djm) [Makefile.in regress/scp-ssh-wrapper.sh regress/scp.sh] Make
281   the scp regress test actually test the built scp rather than the one
282   in $PATH. ok dtucker@
283
28420140123
285 - (tim) [session.c] Improve error reporting on set_id().
286 - (dtucker) [configure.ac] NetBSD's (and FreeBSD's) strnvis is gratuitously
287   incompatible with OpenBSD's despite post-dating it by more than a decade.
288   Declare it as broken, and document FreeBSD's as the same.  ok djm@
289
29020140122
291 - (djm) [openbsd-compat/setproctitle.c] Don't fail to compile if a
292   platform that is expected to use the reuse-argv style setproctitle
293   hack surprises us by providing a setproctitle in libc; ok dtucker
294 - (djm) [configure.ac] Unless specifically requested, only attempt
295   to build Position Independent Executables on gcc >= 4.x; ok dtucker
296 - (djm) [configure.ac aclocal.m4] More tests to detect fallout from
297   platform hardening options: include some long long int arithmatic
298   to detect missing support functions for -ftrapv in libgcc and
299   equivalents, actually test linking when -ftrapv is supplied and
300   set either both -pie/-fPIE or neither. feedback and ok dtucker@
301
30220140121
303 - (dtucker) [configure.ac] Make PIE a configure-time option which defaults
304   to on platforms where it's known to be reliably detected and off elsewhere.
305   Works around platforms such as FreeBSD 9.1 where it does not interop with
306   -ftrapv (it seems to work but fails when trying to link ssh).  ok djm@
307 - (dtucker) [aclocal.m4] Differentiate between compile-time and link-time
308   tests in the configure output.  ok djm.
309 - (tim) [platform.c session.c] Fix bug affecting SVR5 platforms introduced
310   with sftp chroot support. Move set_id call after chroot.
311 - (djm) [aclocal.m4] Flesh out the code run in the OSSH_CHECK_CFLAG_COMPILE
312   and OSSH_CHECK_LDFLAG_LINK tests to give them a better chance of
313   detecting toolchain-related problems; ok dtucker
314
31520140120
316 - (dtucker) [gss-serv-krb5.c] Fall back to krb5_cc_gen_new if the Kerberos
317   implementation does not have krb5_cc_new_unique, similar to what we do
318   in auth-krb5.c.
319 - (djm) [regress/cert-hostkey.sh] Fix regress failure on platforms that
320   skip one or more key types (e.g. RHEL/CentOS 6.5); ok dtucker@
321 - (djm) OpenBSD CVS Sync
322   - djm@cvs.openbsd.org 2014/01/20 00:08:48
323     [digest.c]
324     memleak; found by Loganaden Velvindron @ AfriNIC; ok markus@
325
32620140119
327 - (dtucker) OpenBSD CVS Sync
328   - dtucker@cvs.openbsd.org 2014/01/17 06:23:24
329     [sftp-server.c]
330     fix log message statvfs.  ok djm
331   - dtucker@cvs.openbsd.org 2014/01/18 09:36:26
332     [session.c]
333     explicitly define USE_PIPES to 1 to prevent redefinition warnings in
334     portable on platforms that use pipes for everything.  From vinschen at
335     redhat.
336   - dtucker@cvs.openbsd.org 2014/01/19 04:17:29
337     [canohost.c addrmatch.c]
338     Cast socklen_t when comparing to size_t and use socklen_t to iterate over
339     the ip options, both to prevent signed/unsigned comparison warnings.
340     Patch from vinschen at redhat via portable openssh, begrudging ok deraadt.
341   - djm@cvs.openbsd.org 2014/01/19 04:48:08
342     [ssh_config.5]
343     fix inverted meaning of 'no' and 'yes' for CanonicalizeFallbackLocal
344   - dtucker@cvs.openbsd.org 2014/01/19 11:21:51
345     [addrmatch.c]
346     Cast the sizeof to socklen_t so it'll work even if the supplied len is
347     negative.  Suggested by and ok djm, ok deraadt.
348
34920140118
350 - (dtucker) [uidswap.c] Prevent unused variable warnings on Cygwin.  Patch
351   from vinschen at redhat.com
352 - (dtucker) [openbsd-compat/bsd-cygwin_util.h] Add missing function
353   declarations that stopped being included when we stopped including
354   <windows.h> from openbsd-compat/bsd-cygwin_util.h.  Patch from vinschen at
355   redhat.com.
356 - (dtucker) [configure.ac] On Cygwin the getopt variables (like optargs,
357   optind) are defined in getopt.h already.  Unfortunately they are defined as
358   "declspec(dllimport)" for historical reasons, because the GNU linker didn't
359   allow auto-import on PE/COFF targets way back when.  The problem is the
360   dllexport attributes collide with the definitions in the various source
361   files in OpenSSH, which obviousy define the variables without
362   declspec(dllimport).  The least intrusive way to get rid of these warnings
363   is to disable warnings for GCC compiler attributes when building on Cygwin.
364   Patch from vinschen at redhat.com.
365 - (dtucker) [sandbox-capsicum.c] Correct some error messages and make the
366   return value check for cap_enter() consistent with the other uses in
367   FreeBSD.  From by Loganaden Velvindron @ AfriNIC via bz#2140.
368
36920140117
370 - (dtucker) [aclocal.m4 configure.ac] Add some additional compiler/toolchain
371   hardening flags including -fstack-protector-strong.  These default to on
372   if the toolchain supports them, but there is a configure-time knob
373   (--without-hardening) to disable them if necessary.  ok djm@
374 - (djm) [sftp-client.c] signed/unsigned comparison fix
375 - (dtucker) [loginrec.c] Cast to the types specfied in the format
376    specification to prevent warnings.
377 - (dtucker) [crypto_api.h] Wrap stdlib.h include inside #ifdef HAVE_STDINT_H.
378 - (dtucker) [poly1305.c] Wrap stdlib.h include inside #ifdef HAVE_STDINT_H.
379 - (dtucker) [blocks.c fe25519.c ge25519.c hash.c sc25519.c verify.c] Include
380   includes.h to pull in all of the compatibility stuff.
381 - (dtucker) [openbsd-compat/bcrypt_pbkdf.c] Wrap stdlib.h include inside
382   #ifdef HAVE_STDINT_H.
383 - (dtucker) [defines.h] Add typedefs for uintXX_t types for platforms that
384   don't have them.
385 - (dtucker) [configure.ac] Split AC_CHECK_FUNCS for OpenSSL functions into
386   separate lines and alphabetize for easier diffing of changes.
387 - (dtucker) OpenBSD CVS Sync
388   - djm@cvs.openbsd.org 2014/01/17 00:21:06
389     [sftp-client.c]
390     signed/unsigned comparison warning fix; from portable (Id sync only)
391   - dtucker@cvs.openbsd.org 2014/01/17 05:26:41
392     [digest.c]
393     remove unused includes.  ok djm@
394 - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c]
395   [sandbox-null.c sandbox-rlimit.c sandbox-seccomp-filter.c]
396   [sandbox-systrace.c ssh-sandbox.h sshd.c] Support preauth sandboxing
397   using the Capsicum API introduced in FreeBSD 10. Patch by Dag-Erling
398   Smorgrav, updated by Loganaden Velvindron @ AfriNIC; ok dtucker@
399 - (dtucker) [configure.ac digest.c openbsd-compat/openssl-compat.c
400   openbsd-compat/openssl-compat.h]  Add compatibility layer for older
401   openssl versions.  ok djm@
402 - (dtucker) Fix typo in #ifndef.
403 - (dtucker) [configure.ac openbsd-compat/bsd-statvfs.c
404   openbsd-compat/bsd-statvfs.h] Implement enough of statvfs on top of statfs
405   to be useful (and for the regression tests to pass) on platforms that
406   have statfs and fstatfs.  ok djm@
407 - (dtucker) [openbsd-compat/bsd-statvfs.h] Only start including headers if we
408   need them to cut down on the name collisions.
409 - (dtucker) [configure.ac] Also look in inttypes.h for uintXX_t types.
410 - (dtucker) [configure.ac] Have --without-hardening not turn off
411   stack-protector since that has a separate flag that's been around a while.
412 - (dtucker) [readconf.c] Wrap paths.h inside an ifdef.  Allows building on
413   Solaris.
414 - (dtucker) [defines.h] Move our definitions of uintXX_t types down to after
415   they're defined if we have to define them ourselves.  Fixes builds on old
416   AIX.
417
41820140118
419 - (djm) OpenBSD CVS Sync
420   - djm@cvs.openbsd.org 2014/01/16 07:31:09
421     [sftp-client.c]
422     needless and incorrect cast to size_t can break resumption of
423     large download; patch from tobias@
424   - djm@cvs.openbsd.org 2014/01/16 07:32:00
425     [version.h]
426     openssh-6.5
427 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
428   [contrib/suse/openssh.spec] Crank RPM spec version numbers.
429 - (djm) [README] update release notes URL.
430
43120140112
432 - (djm) OpenBSD CVS Sync
433   - djm@cvs.openbsd.org 2014/01/10 05:59:19
434     [sshd_config]
435     the /etc/ssh/ssh_host_ed25519_key is loaded by default too
436   - djm@cvs.openbsd.org 2014/01/12 08:13:13
437     [bufaux.c buffer.h kex.c kex.h kexc25519.c kexc25519c.c kexc25519s.c]
438     [kexdhc.c kexdhs.c kexecdhc.c kexecdhs.c kexgexc.c kexgexs.c]
439     avoid use of OpenSSL BIGNUM type and functions for KEX with
440     Curve25519 by adding a buffer_put_bignum2_from_string() that stores
441     a string using the bignum encoding rules. Will make it easier to
442     build a reduced-feature OpenSSH without OpenSSL in the future;
443     ok markus@
444
44520140110
446 - (djm) OpenBSD CVS Sync
447   - tedu@cvs.openbsd.org 2014/01/04 17:50:55
448     [mac.c monitor_mm.c monitor_mm.h xmalloc.c]
449     use standard types and formats for size_t like variables. ok dtucker
450   - guenther@cvs.openbsd.org 2014/01/09 03:26:00
451     [sftp-common.c]
452     When formating the time for "ls -l"-style output, show dates in the future
453     with the year, and rearrange a comparison to avoid a potentional signed
454     arithmetic overflow that would give the wrong result.
455     ok djm@
456   - djm@cvs.openbsd.org 2014/01/09 23:20:00
457     [digest.c digest.h hostfile.c kex.c kex.h kexc25519.c kexc25519c.c]
458     [kexc25519s.c kexdh.c kexecdh.c kexecdhc.c kexecdhs.c kexgex.c kexgexc.c]
459     [kexgexs.c key.c key.h roaming_client.c roaming_common.c schnorr.c]
460     [schnorr.h ssh-dss.c ssh-ecdsa.c ssh-rsa.c sshconnect2.c]
461     Introduce digest API and use it to perform all hashing operations
462     rather than calling OpenSSL EVP_Digest* directly. Will make it easier
463     to build a reduced-feature OpenSSH without OpenSSL in future;
464     feedback, ok markus@
465   - djm@cvs.openbsd.org 2014/01/09 23:26:48
466     [sshconnect.c sshd.c]
467     ban clients/servers that suffer from SSH_BUG_DERIVEKEY, they are ancient,
468     deranged and might make some attacks on KEX easier; ok markus@
469
47020140108
471 - (djm) [regress/.cvsignore] Ignore regress test droppings; ok dtucker@
472
47320131231
474 - (djm) OpenBSD CVS Sync
475   - djm@cvs.openbsd.org 2013/12/30 23:52:28
476     [auth2-hostbased.c auth2-pubkey.c compat.c compat.h ssh-rsa.c]
477     [sshconnect.c sshconnect2.c sshd.c]
478     refuse RSA keys from old proprietary clients/servers that use the
479     obsolete RSA+MD5 signature scheme. it will still be possible to connect
480     with these clients/servers but only DSA keys will be accepted, and we'll
481     deprecate them entirely in a future release. ok markus@
482
48320131229
484 - (djm) [loginrec.c] Check for username truncation when looking up lastlog
485   entries
486 - (djm) [regress/Makefile] Add some generated files for cleaning
487 - (djm) OpenBSD CVS Sync
488   - djm@cvs.openbsd.org 2013/12/19 00:10:30
489     [ssh-add.c]
490     skip requesting smartcard PIN when removing keys from agent; bz#2187
491     patch from jay AT slushpupie.com; ok dtucker
492   - dtucker@cvs.openbsd.org 2013/12/19 00:19:12
493     [serverloop.c]
494     Cast client_alive_interval to u_int64_t before assinging to
495     max_time_milliseconds to avoid potential integer overflow in the timeout.
496     bz#2170, patch from Loganaden Velvindron, ok djm@
497   - djm@cvs.openbsd.org 2013/12/19 00:27:57
498     [auth-options.c]
499     simplify freeing of source-address certificate restriction
500   - djm@cvs.openbsd.org 2013/12/19 01:04:36
501     [channels.c]
502     bz#2147: fix multiple remote forwardings with dynamically assigned
503     listen ports. In the s->c message to open the channel we were sending
504     zero (the magic number to request a dynamic port) instead of the actual
505     listen port. The client therefore had no way of discriminating between
506     them.
507
508     Diagnosis and fix by ronf AT timeheart.net
509   - djm@cvs.openbsd.org 2013/12/19 01:19:41
510     [ssh-agent.c]
511     bz#2186: don't crash (NULL deref) when deleting PKCS#11 keys from an agent
512     that has a mix of normal and PKCS#11 keys; fix from jay AT slushpupie.com;
513     ok dtucker
514   - djm@cvs.openbsd.org 2013/12/19 22:57:13
515     [poly1305.c poly1305.h]
516     use full name for author, with his permission
517   - tedu@cvs.openbsd.org 2013/12/21 07:10:47
518     [ssh-keygen.1]
519     small typo
520   - djm@cvs.openbsd.org 2013/12/27 22:30:17
521     [ssh-dss.c ssh-ecdsa.c ssh-rsa.c]
522     make the original RSA and DSA signing/verification code look more like
523     the ECDSA/Ed25519 ones: use key_type_plain() when checking the key type
524     rather than tediously listing all variants, use __func__ for debug/
525     error messages
526   - djm@cvs.openbsd.org 2013/12/27 22:37:18
527     [ssh-rsa.c]
528     correct comment
529   - djm@cvs.openbsd.org 2013/12/29 02:28:10
530     [key.c]
531     allow ed25519 keys to appear as certificate authorities
532   - djm@cvs.openbsd.org 2013/12/29 02:37:04
533     [key.c]
534     correct comment for key_to_certified()
535   - djm@cvs.openbsd.org 2013/12/29 02:49:52
536     [key.c]
537     correct comment for key_drop_cert()
538   - djm@cvs.openbsd.org 2013/12/29 04:20:04
539     [key.c]
540     to make sure we don't omit any key types as valid CA keys again,
541     factor the valid key type check into a key_type_is_valid_ca()
542     function
543   - djm@cvs.openbsd.org 2013/12/29 04:29:25
544     [authfd.c]
545     allow deletion of ed25519 keys from the agent
546   - djm@cvs.openbsd.org 2013/12/29 04:35:50
547     [authfile.c]
548     don't refuse to load Ed25519 certificates
549   - djm@cvs.openbsd.org 2013/12/29 05:42:16
550     [ssh.c]
551     don't forget to load Ed25519 certs too
552   - djm@cvs.openbsd.org 2013/12/29 05:57:02
553     [sshconnect.c]
554     when showing other hostkeys, don't forget Ed25519 keys
555
55620131221
557 - (dtucker) [regress/keytype.sh] Actually test ecdsa key types.
558
55920131219
560 - (dtucker) [configure.ac] bz#2178: Don't try to use BSM on Solaris versions
561   greater than 11 either rather than just 11.  Patch from Tomas Kuthan.
562 - (dtucker) [auth-pam.c] bz#2163: check return value from pam_get_item().
563   Patch from Loganaden Velvindron.
564
56520131218
566 - (djm) OpenBSD CVS Sync
567   - djm@cvs.openbsd.org 2013/12/07 08:08:26
568     [ssh-keygen.1]
569     document -a and -o wrt new key format
570   - naddy@cvs.openbsd.org 2013/12/07 11:58:46
571     [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8 ssh.1]
572     [ssh_config.5 sshd.8 sshd_config.5]
573     add missing mentions of ed25519; ok djm@
574   - dtucker@cvs.openbsd.org 2013/12/08 09:53:27
575     [sshd_config.5]
576     Use a literal for the default value of KEXAlgorithms.  ok deraadt jmc
577   - markus@cvs.openbsd.org 2013/12/09 11:03:45
578     [blocks.c ed25519.c fe25519.c fe25519.h ge25519.c ge25519.h]
579     [ge25519_base.data hash.c sc25519.c sc25519.h verify.c]
580     Add Authors for the public domain ed25519/nacl code.
581     see also http://nacl.cr.yp.to/features.html
582        All of the NaCl software is in the public domain.
583     and http://ed25519.cr.yp.to/software.html
584        The Ed25519 software is in the public domain.
585   - markus@cvs.openbsd.org 2013/12/09 11:08:17
586     [crypto_api.h]
587     remove unused defines
588   - pascal@cvs.openbsd.org 2013/12/15 18:17:26
589     [ssh-add.c]
590     Make ssh-add also add .ssh/id_ed25519; fixes lie in manual page.
591     ok markus@
592   - djm@cvs.openbsd.org 2013/12/15 21:42:35
593     [cipher-chachapoly.c]
594     add some comments and constify a constant
595   - markus@cvs.openbsd.org 2013/12/17 10:36:38
596     [crypto_api.h]
597     I've assempled the header file by cut&pasting from generated headers
598     and the source files.
599
60020131208
601 - (djm) [openbsd-compat/bsd-setres_id.c] Missing header; from Corinna
602   Vinschen
603 - (djm) [Makefile.in regress/Makefile regress/agent-ptrace.sh]
604   [regress/setuid-allowed.c] Check that ssh-agent is not on a no-setuid
605   filesystem before running agent-ptrace.sh; ok dtucker
606
60720131207
608 - (djm) OpenBSD CVS Sync
609   - djm@cvs.openbsd.org 2013/12/05 22:59:45
610     [sftp-client.c]
611     fix memory leak in error path in do_readdir(); pointed out by
612     Loganaden Velvindron @ AfriNIC in bz#2163
613   - djm@cvs.openbsd.org 2013/12/06 03:40:51
614     [ssh-keygen.c]
615     remove duplicated character ('g') in getopt() string;
616     document the (few) remaining option characters so we don't have to
617     rummage next time.
618   - markus@cvs.openbsd.org 2013/12/06 13:30:08
619     [authfd.c key.c key.h ssh-agent.c]
620     move private key (de)serialization to key.c; ok djm
621   - markus@cvs.openbsd.org 2013/12/06 13:34:54
622     [authfile.c authfile.h cipher.c cipher.h key.c packet.c ssh-agent.c]
623     [ssh-keygen.c PROTOCOL.key] new private key format, bcrypt as KDF by
624     default; details in PROTOCOL.key; feedback and lots help from djm;
625     ok djm@
626   - markus@cvs.openbsd.org 2013/12/06 13:39:49
627     [authfd.c authfile.c key.c key.h myproposal.h pathnames.h readconf.c]
628     [servconf.c ssh-agent.c ssh-keygen.c ssh-keyscan.1 ssh-keyscan.c]
629     [ssh-keysign.c ssh.c ssh_config.5 sshd.8 sshd.c verify.c ssh-ed25519.c]
630     [sc25519.h sc25519.c hash.c ge25519_base.data ge25519.h ge25519.c]
631     [fe25519.h fe25519.c ed25519.c crypto_api.h blocks.c]
632     support ed25519 keys (hostkeys and user identities) using the public
633     domain ed25519 reference code from SUPERCOP, see
634     http://ed25519.cr.yp.to/software.html
635     feedback, help & ok djm@
636   - jmc@cvs.openbsd.org 2013/12/06 15:29:07
637     [sshd.8]
638     missing comma;
639   - djm@cvs.openbsd.org 2013/12/07 00:19:15
640     [key.c]
641     set k->cert = NULL after freeing it
642   - markus@cvs.openbsd.org 2013/12/06 13:52:46
643     [regress/Makefile regress/agent.sh regress/cert-hostkey.sh]
644     [regress/cert-userkey.sh regress/keytype.sh]
645     test ed25519 support; from djm@
646 - (djm) [blocks.c ed25519.c fe25519.c fe25519.h ge25519.c ge25519.h]
647   [ge25519_base.data hash.c sc25519.c sc25519.h verify.c] Fix RCS idents
648 - (djm) [Makefile.in] Add ed25519 sources
649 - (djm) [authfile.c] Conditionalise inclusion of util.h
650 - (djm) [configure.ac openbsd-compat/Makefile.in openbsd-compat/bcrypt_pbkdf.c]
651   [openbsd-compat/blf.h openbsd-compat/blowfish.c]
652   [openbsd-compat/openbsd-compat.h] Start at supporting bcrypt_pbkdf in
653   portable.
654 - (djm) [ed25519.c ssh-ed25519.c openbsd-compat/Makefile.in]
655   [openbsd-compat/bcrypt_pbkdf.c] Make ed25519/new key format compile on
656   Linux
657 - (djm) [regress/cert-hostkey.sh] Fix merge botch
658 - (djm) [Makefile.in] PATHSUBS and keygen bits for Ed25519; from
659   Loganaden Velvindron @ AfriNIC in bz#2179
660
66120131205
662 - (djm) OpenBSD CVS Sync
663   - jmc@cvs.openbsd.org 2013/11/21 08:05:09
664     [ssh_config.5 sshd_config.5]
665     no need for .Pp before displays;
666   - deraadt@cvs.openbsd.org 2013/11/25 18:04:21
667     [ssh.1 ssh.c]
668     improve -Q usage and such.  One usage change is that the option is now
669     case-sensitive
670     ok dtucker markus djm
671   - jmc@cvs.openbsd.org 2013/11/26 12:14:54
672     [ssh.1 ssh.c]
673     - put -Q in the right place
674     - Ar was a poor choice for the arguments to -Q. i've chosen an
675       admittedly equally poor Cm, at least consistent with the rest
676       of the docs. also no need for multiple instances
677     - zap a now redundant Nm
678     - usage() sync
679   - deraadt@cvs.openbsd.org 2013/11/26 19:15:09
680     [pkcs11.h]
681     cleanup 1 << 31 idioms.  Resurrection of this issue pointed out by
682     Eitan Adler ok markus for ssh, implies same change in kerberosV
683   - djm@cvs.openbsd.org 2013/12/01 23:19:05
684     [PROTOCOL]
685     mention curve25519-sha256@libssh.org key exchange algorithm
686   - djm@cvs.openbsd.org 2013/12/02 02:50:27
687     [PROTOCOL.chacha20poly1305]
688     typo; from Jon Cave
689   - djm@cvs.openbsd.org 2013/12/02 02:56:17
690     [ssh-pkcs11-helper.c]
691     use-after-free; bz#2175 patch from Loganaden Velvindron @ AfriNIC
692   - djm@cvs.openbsd.org 2013/12/02 03:09:22
693     [key.c]
694     make key_to_blob() return a NULL blob on failure; part of
695     bz#2175 from Loganaden Velvindron @ AfriNIC
696   - djm@cvs.openbsd.org 2013/12/02 03:13:14
697     [cipher.c]
698     correct bzero of chacha20+poly1305 key context. bz#2177 from
699     Loganaden Velvindron @ AfriNIC
700
701     Also make it a memset for consistency with the rest of cipher.c
702   - djm@cvs.openbsd.org 2013/12/04 04:20:01
703     [sftp-client.c]
704     bz#2171: don't leak local_fd on error; from Loganaden Velvindron @
705     AfriNIC
706   - djm@cvs.openbsd.org 2013/12/05 01:16:41
707     [servconf.c servconf.h]
708     bz#2161 - fix AuthorizedKeysCommand inside a Match block and
709     rearrange things so the same error is harder to make next time;
710     with and ok dtucker@
711 - (dtucker) [configure.ac] bz#2173: use pkg-config --libs to include correct
712   -L location for libedit.  Patch from Serge van den Boom.
713
71420131121
715 - (djm) OpenBSD CVS Sync
716   - dtucker@cvs.openbsd.org 2013/11/08 11:15:19
717     [bufaux.c bufbn.c buffer.c sftp-client.c sftp-common.c sftp-glob.c]
718     [uidswap.c] Include stdlib.h for free() as per the man page.
719   - markus@cvs.openbsd.org 2013/11/13 13:48:20
720     [ssh-pkcs11.c]
721     add missing braces found by pedro
722   - djm@cvs.openbsd.org 2013/11/20 02:19:01
723     [sshd.c]
724     delay closure of in/out fds until after "Bad protocol version
725     identification..." message, as get_remote_ipaddr/get_remote_port
726     require them open.
727   - deraadt@cvs.openbsd.org 2013/11/20 20:53:10
728     [scp.c]
729     unsigned casts for ctype macros where neccessary
730     ok guenther millert markus
731   - deraadt@cvs.openbsd.org 2013/11/20 20:54:10
732     [canohost.c clientloop.c match.c readconf.c sftp.c]
733     unsigned casts for ctype macros where neccessary
734     ok guenther millert markus
735   - djm@cvs.openbsd.org 2013/11/21 00:45:44
736     [Makefile.in PROTOCOL PROTOCOL.chacha20poly1305 authfile.c chacha.c]
737     [chacha.h cipher-chachapoly.c cipher-chachapoly.h cipher.c cipher.h]
738     [dh.c myproposal.h packet.c poly1305.c poly1305.h servconf.c ssh.1]
739     [ssh.c ssh_config.5 sshd_config.5] Add a new protocol 2 transport
740     cipher "chacha20-poly1305@openssh.com" that combines Daniel
741     Bernstein's ChaCha20 stream cipher and Poly1305 MAC to build an
742     authenticated encryption mode.
743
744     Inspired by and similar to Adam Langley's proposal for TLS:
745     http://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-03
746     but differs in layout used for the MAC calculation and the use of a
747     second ChaCha20 instance to separately encrypt packet lengths.
748     Details are in the PROTOCOL.chacha20poly1305 file.
749
750     Feedback markus@, naddy@; manpage bits Loganden Velvindron @ AfriNIC
751     ok markus@ naddy@
752   - naddy@cvs.openbsd.org 2013/11/18 05:09:32
753     [regress/forward-control.sh]
754     bump timeout to 10 seconds to allow slow machines (e.g. Alpha PC164)
755     to successfully run this; ok djm@
756   - djm@cvs.openbsd.org 2013/11/21 03:15:46
757     [regress/krl.sh]
758     add some reminders for additional tests that I'd like to implement
759   - djm@cvs.openbsd.org 2013/11/21 03:16:47
760     [regress/modpipe.c]
761     use unsigned long long instead of u_int64_t here to avoid warnings
762     on some systems portable OpenSSH is built on.
763   - djm@cvs.openbsd.org 2013/11/21 03:18:51
764     [regress/cipher-speed.sh regress/integrity.sh regress/rekey.sh]
765     [regress/try-ciphers.sh]
766     use new "ssh -Q cipher-auth" query to obtain lists of authenticated
767     encryption ciphers instead of specifying them manually; ensures that
768     the new chacha20poly1305@openssh.com mode is tested;
769
770     ok markus@ and naddy@ as part of the diff to add
771     chacha20poly1305@openssh.com
772
77320131110
774 - (dtucker) [regress/keytype.sh] Populate ECDSA key types to be tested by
775   querying the ones that are compiled in.
776
77720131109
778 - (dtucker) OpenBSD CVS Sync
779   - dtucker@cvs.openbsd.org 2013/11/09 05:41:34
780     [regress/test-exec.sh regress/rekey.sh]
781     Use smaller test data files to speed up tests.  Grow test datafiles
782     where necessary for a specific test.
783 - (dtucker) [configure.ac kex.c key.c myproposal.h] Test for the presence of
784   NID_X9_62_prime256v1, NID_secp384r1 and NID_secp521r1 and test that the
785   latter actually works before using it.  Fedora (at least) has NID_secp521r1
786   that doesn't work (see https://bugzilla.redhat.com/show_bug.cgi?id=1021897).
787 - (dtucker) [configure.ac] Fix brackets in NID_secp521r1 test.
788 - (dtucker) [configure.ac] Add missing "test".
789 - (dtucker) [key.c] Check for the correct defines for NID_secp521r1.
790
79120131108
792 - (dtucker) OpenBSD CVS Sync
793    - dtucker@cvs.openbsd.org 2013/11/08 01:06:14
794      [regress/rekey.sh]
795      Rekey less frequently during tests to speed them up
796 - (djm) OpenBSD CVS Sync
797   - dtucker@cvs.openbsd.org 2013/11/07 11:58:27
798     [cipher.c cipher.h kex.c kex.h mac.c mac.h servconf.c ssh.c]
799     Output the effective values of Ciphers, MACs and KexAlgorithms when
800     the default has not been overridden.  ok markus@
801   - djm@cvs.openbsd.org 2013/11/08 00:39:15
802     [auth-options.c auth2-chall.c authfd.c channels.c cipher-3des1.c]
803     [clientloop.c gss-genr.c monitor_mm.c packet.c schnorr.c umac.c]
804     [sftp-client.c sftp-glob.c]
805     use calloc for all structure allocations; from markus@
806   - djm@cvs.openbsd.org 2013/11/08 01:38:11
807     [version.h]
808     openssh-6.4
809 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
810   [contrib/suse/openssh.spec] Update version numbers following release.
811 - (dtucker) [openbsd-compat/openbsd-compat.h] Add null implementation of
812   arc4random_stir for platforms that have arc4random but don't have
813   arc4random_stir (right now this is only OpenBSD -current).
814 - (dtucker) [kex.c] Only enable CURVE25519_SHA256 if we actually have
815   EVP_sha256.
816 - (dtucker) [myproposal.h] Conditionally enable CURVE25519_SHA256.
817 - (dtucker) [openbsd-compat/bsd-poll.c] Add headers to prevent compile
818   warnings.
819 - (dtucker) [Makefile.in configure.ac] Set MALLOC_OPTIONS per platform
820   and pass in TEST_ENV.  use stderr to get polluted
821   and the stderr-data test to fail.
822 - (dtucker) [contrib/cygwin/ssh-host-config] Simplify host key generation:
823   rather than testing and generating each key, call ssh-keygen -A.
824   Patch from vinschen at redhat.com.
825 - (dtucker) OpenBSD CVS Sync
826   - dtucker@cvs.openbsd.org 2013/11/09 05:41:34
827     [regress/test-exec.sh regress/rekey.sh]
828     Use smaller test data files to speed up tests.  Grow test datafiles
829     where necessary for a specific test.
830
83120131107
832 - (djm) [ssh-pkcs11.c] Bring back "non-constant initialiser" fix (rev 1.5)
833   that got lost in recent merge.
834 - (djm) [Makefile.in monitor.c] Missed chunks of curve25519 KEX diff
835 - (djm) [regress/modpipe.c regress/rekey.sh] Never intended to commit these
836 - (djm) [configure.ac defines.h] Skip arc4random_stir() calls on platforms
837   that lack it but have arc4random_uniform()
838 - (djm) OpenBSD CVS Sync
839   - markus@cvs.openbsd.org 2013/11/04 11:51:16
840     [monitor.c]
841     fix rekeying for KEX_C25519_SHA256; noted by dtucker@
842     RCSID sync only; I thought this was a merge botch and fixed it already
843   - markus@cvs.openbsd.org 2013/11/06 16:52:11
844     [monitor_wrap.c]
845     fix rekeying for AES-GCM modes; ok deraadt
846   - djm@cvs.openbsd.org 2013/11/06 23:05:59
847     [ssh-pkcs11.c]
848     from portable: s/true/true_val/ to avoid name collisions on dump platforms
849     RCSID sync only
850 - (dtucker) OpenBSD CVS Sync
851   - djm@cvs.openbsd.org 2013/10/09 23:44:14
852     [regress/Makefile] (ID sync only)
853     regression test for sftp request white/blacklisting and readonly mode.
854   - markus@cvs.openbsd.org 2013/11/02 22:39:53
855     [regress/kextype.sh]
856     add curve25519-sha256@libssh.org
857   - dtucker@cvs.openbsd.org 2013/11/04 12:27:42
858     [regress/rekey.sh]
859     Test rekeying with all KexAlgorithms.
860   - dtucker@cvs.openbsd.org 2013/11/07 00:12:05
861     [regress/rekey.sh]
862     Test rekeying for every Cipher, MAC and KEX, plus test every KEX with
863     the GCM ciphers.
864   - dtucker@cvs.openbsd.org 2013/11/07 01:12:51
865     [regress/rekey.sh]
866     Factor out the data transfer rekey tests
867   - dtucker@cvs.openbsd.org 2013/11/07 02:48:38
868     [regress/integrity.sh regress/cipher-speed.sh regress/try-ciphers.sh]
869     Use ssh -Q instead of hardcoding lists of ciphers or MACs.
870   - dtucker@cvs.openbsd.org 2013/11/07 03:55:41
871     [regress/kextype.sh]
872     Use ssh -Q to get kex types instead of a static list.
873   - dtucker@cvs.openbsd.org 2013/11/07 04:26:56
874     [regress/kextype.sh]
875     trailing space
876 - (dtucker) [Makefile.in configure.ac] Remove TEST_SSH_SHA256 environment
877   variable.  It's no longer used now that we get the supported MACs from
878   ssh -Q.
879
88020131104
881 - (djm) OpenBSD CVS Sync
882   - markus@cvs.openbsd.org 2013/11/02 20:03:54
883     [ssh-pkcs11.c]
884     support pkcs#11 tokes that only provide x509 zerts instead of raw pubkeys;
885     fixes bz#1908; based on patch from Laurent Barbe; ok djm
886   - markus@cvs.openbsd.org 2013/11/02 21:59:15
887     [kex.c kex.h myproposal.h ssh-keyscan.c sshconnect2.c sshd.c]
888     use curve25519 for default key exchange (curve25519-sha256@libssh.org);
889     initial patch from Aris Adamantiadis; ok djm@
890   - markus@cvs.openbsd.org 2013/11/02 22:10:15
891     [kexdhs.c kexecdhs.c]
892     no need to include monitor_wrap.h
893   - markus@cvs.openbsd.org 2013/11/02 22:24:24
894     [kexdhs.c kexecdhs.c]
895     no need to include ssh-gss.h
896   - markus@cvs.openbsd.org 2013/11/02 22:34:01
897     [auth-options.c]
898     no need to include monitor_wrap.h and ssh-gss.h
899   - markus@cvs.openbsd.org 2013/11/02 22:39:19
900     [ssh_config.5 sshd_config.5]
901     the default kex is now curve25519-sha256@libssh.org
902   - djm@cvs.openbsd.org 2013/11/03 10:37:19
903     [roaming_common.c]
904     fix a couple of function definitions foo() -> foo(void)
905     (-Wold-style-definition)
906 - (djm) [kexc25519.c kexc25519c.c kexc25519s.c] Import missed files from
907   KEX/curve25519 change
908
90920131103
910 - (dtucker) [openbsd-compat/bsd-misc.c] Include time.h for nanosleep.
911   From OpenSMTPD where it prevents "implicit declaration" warnings (it's
912   a no-op in OpenSSH).  From chl at openbsd.
913 - (dtucker) [openbsd-compat/setproctitle.c] Handle error case form the 2nd
914   vsnprintf.  From eric at openbsd via chl@.
915 - (dtucker) [configure.ac defines.h] Add typedefs for intmax_t and uintmax_t
916   for platforms that don't have them.
917
91820131030
919 - (djm) OpenBSD CVS Sync
920   - djm@cvs.openbsd.org 2013/10/29 09:42:11
921     [key.c key.h]
922     fix potential stack exhaustion caused by nested certificates;
923     report by Mateusz Kocielski; ok dtucker@ markus@
924   - djm@cvs.openbsd.org 2013/10/29 09:48:02
925     [servconf.c servconf.h session.c sshd_config sshd_config.5]
926     shd_config PermitTTY to disallow TTY allocation, mirroring the
927     longstanding no-pty authorized_keys option;
928     bz#2070, patch from Teran McKinney; ok markus@
929   - jmc@cvs.openbsd.org 2013/10/29 18:49:32
930     [sshd_config.5]
931     pty(4), not pty(7);
932
93320131026
934 - (djm) OpenBSD CVS Sync
935   - djm@cvs.openbsd.org 2013/10/25 23:04:51
936     [ssh.c]
937     fix crash when using ProxyCommand caused by previous commit - was calling
938     freeaddrinfo(NULL); spotted by sthen@ and Tim Ruehsen, patch by sthen@
939
94020131025
941 - (djm) [ssh-keygen.c ssh-keysign.c sshconnect1.c sshd.c] Remove
942   unnecessary arc4random_stir() calls. The only ones left are to ensure
943   that the PRNG gets a different state after fork() for platforms that
944   have broken the API.
945
94620131024
947 - (djm) [auth-krb5.c] bz#2032 - use local username in krb5_kuserok check
948   rather than full client name which may be of form user@REALM;
949   patch from Miguel Sanders; ok dtucker@
950 - (djm) OpenBSD CVS Sync
951   - dtucker@cvs.openbsd.org 2013/10/23 05:40:58
952     [servconf.c]
953     fix comment
954   - djm@cvs.openbsd.org 2013/10/23 23:35:32
955     [sshd.c]
956     include local address and port in "Connection from ..." message (only
957     shown at loglevel>=verbose)
958   - dtucker@cvs.openbsd.org 2013/10/24 00:49:49
959     [moduli.c]
960     Periodically print progress and, if possible, expected time to completion
961     when screening moduli for DH groups.  ok deraadt djm
962   - dtucker@cvs.openbsd.org 2013/10/24 00:51:48
963     [readconf.c servconf.c ssh_config.5 sshd_config.5]
964     Disallow empty Match statements and add "Match all" which matches
965     everything.  ok djm, man page help jmc@
966   - djm@cvs.openbsd.org 2013/10/24 08:19:36
967     [ssh.c]
968     fix bug introduced in hostname canonicalisation commit: don't try to
969     resolve hostnames when a ProxyCommand is set unless the user has forced
970     canonicalisation; spotted by Iain Morgan
971 - (tim) [regress/sftp-perm.sh] We need a shell that understands "! somecmd"
972
97320131023
974 - (djm) OpenBSD CVS Sync
975   - djm@cvs.openbsd.org 2013/10/20 04:39:28
976     [ssh_config.5]
977     document % expansions performed by "Match command ..."
978   - djm@cvs.openbsd.org 2013/10/20 06:19:28
979     [readconf.c ssh_config.5]
980     rename "command" subclause of the recently-added "Match" keyword to
981     "exec"; it's shorter, clearer in intent and we might want to add the
982     ability to match against the command being executed at the remote end in
983     the future.
984   - djm@cvs.openbsd.org 2013/10/20 09:51:26
985     [scp.1 sftp.1]
986     add canonicalisation options to -o lists
987   - jmc@cvs.openbsd.org 2013/10/20 18:00:13
988     [ssh_config.5]
989     tweak the "exec" description, as worded by djm;
990   - djm@cvs.openbsd.org 2013/10/23 03:03:07
991     [readconf.c]
992     Hostname may have %h sequences that should be expanded prior to Match
993     evaluation; spotted by Iain Morgan
994   - djm@cvs.openbsd.org 2013/10/23 03:05:19
995     [readconf.c ssh.c]
996     comment
997   - djm@cvs.openbsd.org 2013/10/23 04:16:22
998     [ssh-keygen.c]
999     Make code match documentation: relative-specified certificate expiry time
1000     should be relative to current time and not the validity start time.
1001     Reported by Petr Lautrbach; ok deraadt@
1002
100320131018
1004 - (djm) OpenBSD CVS Sync
1005   - djm@cvs.openbsd.org 2013/10/09 23:44:14
1006     [regress/Makefile regress/sftp-perm.sh]
1007     regression test for sftp request white/blacklisting and readonly mode.
1008   - jmc@cvs.openbsd.org 2013/10/17 07:35:48
1009     [sftp.1 sftp.c]
1010     tweak previous;
1011   - djm@cvs.openbsd.org 2013/10/17 22:08:04
1012     [sshd.c]
1013     include remote port in bad banner message; bz#2162
1014
101520131017
1016 - (djm) OpenBSD CVS Sync
1017   - jmc@cvs.openbsd.org 2013/10/15 14:10:25
1018     [ssh.1 ssh_config.5]
1019     tweak previous;
1020   - djm@cvs.openbsd.org 2013/10/16 02:31:47
1021     [readconf.c readconf.h roaming_client.c ssh.1 ssh.c ssh_config.5]
1022     [sshconnect.c sshconnect.h]
1023     Implement client-side hostname canonicalisation to allow an explicit
1024     search path of domain suffixes to use to convert unqualified host names
1025     to fully-qualified ones for host key matching.
1026     This is particularly useful for host certificates, which would otherwise
1027     need to list unqualified names alongside fully-qualified ones (and this
1028     causes a number of problems).
1029     "looks fine" markus@
1030   - jmc@cvs.openbsd.org 2013/10/16 06:42:25
1031     [ssh_config.5]
1032     tweak previous;
1033   - djm@cvs.openbsd.org 2013/10/16 22:49:39
1034     [readconf.c readconf.h ssh.1 ssh.c ssh_config.5]
1035     s/canonicalise/canonicalize/ for consistency with existing spelling,
1036     e.g. authorized_keys; pointed out by naddy@
1037   - djm@cvs.openbsd.org 2013/10/16 22:58:01
1038     [ssh.c ssh_config.5]
1039     one I missed in previous: s/isation/ization/
1040   - djm@cvs.openbsd.org 2013/10/17 00:30:13
1041     [PROTOCOL sftp-client.c sftp-client.h sftp-server.c sftp.1 sftp.c]
1042     fsync@openssh.com protocol extension for sftp-server
1043     client support to allow calling fsync() faster successful transfer
1044     patch mostly by imorgan AT nas.nasa.gov; bz#1798
1045     "fine" markus@ "grumble OK" deraadt@ "doesn't sound bad to me" millert@
1046   - djm@cvs.openbsd.org 2013/10/17 00:46:49
1047     [ssh.c]
1048     rearrange check to reduce diff against -portable
1049     (Id sync only)
1050
105120131015
1052 - (djm) OpenBSD CVS Sync
1053   - djm@cvs.openbsd.org 2013/10/09 23:42:17
1054     [sftp-server.8 sftp-server.c]
1055     Add ability to whitelist and/or blacklist sftp protocol requests by name.
1056     Refactor dispatch loop and consolidate read-only mode checks.
1057     Make global variables static, since sftp-server is linked into sshd(8).
1058     ok dtucker@
1059   - djm@cvs.openbsd.org 2013/10/10 00:53:25
1060     [sftp-server.c]
1061     add -Q, -P and -p to usage() before jmc@ catches me
1062   - djm@cvs.openbsd.org 2013/10/10 01:43:03
1063     [sshd.c]
1064     bz#2139: fix re-exec fallback by ensuring that startup_pipe is correctly
1065     updated; ok dtucker@
1066   - djm@cvs.openbsd.org 2013/10/11 02:45:36
1067     [sftp-client.c]
1068     rename flag arguments to be more clear and consistent.
1069     reorder some internal function arguments to make adding additional flags
1070     easier.
1071     no functional change
1072   - djm@cvs.openbsd.org 2013/10/11 02:52:23
1073     [sftp-client.c]
1074     missed one arg reorder
1075   - djm@cvs.openbsd.org 2013/10/11 02:53:45
1076     [sftp-client.h]
1077     obsolete comment
1078   - jmc@cvs.openbsd.org 2013/10/14 14:18:56
1079     [sftp-server.8 sftp-server.c]
1080     tweak previous;
1081     ok djm
1082   - djm@cvs.openbsd.org 2013/10/14 21:20:52
1083     [session.c session.h]
1084     Add logging of session starts in a useful format; ok markus@ feedback and
1085     ok dtucker@
1086   - djm@cvs.openbsd.org 2013/10/14 22:22:05
1087     [readconf.c readconf.h ssh-keysign.c ssh.c ssh_config.5]
1088     add a "Match" keyword to ssh_config that allows matching on hostname,
1089     user and result of arbitrary commands. "nice work" markus@
1090   - djm@cvs.openbsd.org 2013/10/14 23:28:23
1091     [canohost.c misc.c misc.h readconf.c sftp-server.c ssh.c]
1092     refactor client config code a little:
1093     add multistate option partsing to readconf.c, similar to servconf.c's
1094     existing code.
1095     move checking of options that accept "none" as an argument to readconf.c
1096     add a lowercase() function and use it instead of explicit tolower() in
1097     loops
1098     part of a larger diff that was ok markus@
1099   - djm@cvs.openbsd.org 2013/10/14 23:31:01
1100     [ssh.c]
1101     whitespace at EOL; pointed out by markus@
1102 - [ssh.c] g/c unused variable.
1103
110420131010
1105 - (dtucker) OpenBSD CVS Sync
1106   - sthen@cvs.openbsd.org 2013/09/16 11:35:43
1107     [ssh_config]
1108     Remove gssapi config parts from ssh_config, as was already done for
1109     sshd_config.  Req by/ok ajacoutot@
1110     ID SYNC ONLY for portable; kerberos/gssapi is still pretty popular
1111   - djm@cvs.openbsd.org 2013/09/19 00:24:52
1112     [progressmeter.c]
1113     store the initial file offset so the progress meter doesn't freak out
1114     when resuming sftp transfers. bz#2137; patch from Iain Morgan; ok dtucker@`
1115   - djm@cvs.openbsd.org 2013/09/19 00:49:12
1116     [sftp-client.c]
1117     fix swapped pflag and printflag in sftp upload_dir; from Iain Morgan
1118   - djm@cvs.openbsd.org 2013/09/19 01:24:46
1119     [channels.c]
1120     bz#1297 - tell the client (via packet_send_debug) when their preferred
1121     listen address has been overridden by the server's GatewayPorts;
1122     ok dtucker@
1123   - djm@cvs.openbsd.org 2013/09/19 01:26:29
1124     [sshconnect.c]
1125     bz#1211: make BindAddress work with UsePrivilegedPort=yes; patch from
1126     swp AT swp.pp.ru; ok dtucker@
1127   - dtucker@cvs.openbsd.org 2013/10/08 11:42:13
1128     [dh.c dh.h]
1129     Increase the size of the Diffie-Hellman groups requested for a each
1130     symmetric key size.  New values from NIST Special Publication 800-57 with
1131     the upper limit specified by RFC4419.  Pointed out by Peter Backes, ok
1132     djm@.
1133
113420131009
1135 - (djm) [openbsd-compat/arc4random.c openbsd-compat/chacha_private.h] Pull
1136   in OpenBSD implementation of arc4random, shortly to replace the existing
1137   bsd-arc4random.c
1138 - (djm) [openbsd-compat/Makefile.in openbsd-compat/arc4random.c]
1139   [openbsd-compat/bsd-arc4random.c] Replace old RC4-based arc4random
1140   implementation with recent OpenBSD's ChaCha-based PRNG. ok dtucker@,
1141   tested tim@
1142
114320130922
1144 - (dtucker) [platform.c platform.h sshd.c] bz#2156: restore Linux oom_adj
1145   setting when handling SIGHUP to maintain behaviour over retart.  Patch
1146   from Matthew Ife.
1147
114820130918
1149 - (dtucker) [sshd_config] Trailing whitespace; from jstjohn at purdue edu.
1150
115120130914
1152 - (djm) OpenBSD CVS Sync
1153   - djm@cvs.openbsd.org 2013/08/22 19:02:21
1154     [sshd.c]
1155     Stir PRNG after post-accept fork. The child gets a different PRNG state
1156     anyway via rexec and explicit privsep reseeds, but it's good to be sure.
1157     ok markus@
1158   - mikeb@cvs.openbsd.org 2013/08/28 12:34:27
1159     [ssh-keygen.c]
1160     improve batch processing a bit by making use of the quite flag a bit
1161     more often and exit with a non zero code if asked to find a hostname
1162     in a known_hosts file and it wasn't there;
1163     originally from reyk@,  ok djm
1164   - djm@cvs.openbsd.org 2013/08/31 00:13:54
1165     [sftp.c]
1166     make ^w match ksh behaviour (delete previous word instead of entire line)
1167   - deraadt@cvs.openbsd.org 2013/09/02 22:00:34
1168     [ssh-keygen.c sshconnect1.c sshd.c]
1169     All the instances of arc4random_stir() are bogus, since arc4random()
1170     does this itself, inside itself, and has for a very long time..  Actually,
1171     this was probably reducing the entropy available.
1172     ok djm
1173     ID SYNC ONLY for portable; we don't trust other arc4random implementations
1174     to do this right.
1175   - sthen@cvs.openbsd.org 2013/09/07 13:53:11
1176     [sshd_config]
1177     Remove commented-out kerberos/gssapi config options from sample config,
1178     kerberos support is currently not enabled in ssh in OpenBSD. Discussed with
1179     various people; ok deraadt@
1180     ID SYNC ONLY for portable; kerberos/gssapi is still pretty popular
1181   - djm@cvs.openbsd.org 2013/09/12 01:41:12
1182     [clientloop.c]
1183     fix connection crash when sending break (~B) on ControlPersist'd session;
1184     ok dtucker@
1185   - djm@cvs.openbsd.org 2013/09/13 06:54:34
1186     [channels.c]
1187     avoid unaligned access in code that reused a buffer to send a
1188     struct in_addr in a reply; simpler just use use buffer_put_int();
1189     from portable; spotted by and ok dtucker@
1190
119120130828
1192 - (djm) [openbsd-compat/bsd-snprintf.c] teach our local snprintf code the
1193   'j' (intmax_t/uintmax_t) and 'z' (size_t/ssize_t) conversions in case we
1194   start to use them in the future.
1195 - (djm) [openbsd-compat/bsd-snprintf.c] #ifdef noytet for intmax_t bits
1196   until we have configure support.
1197
119820130821
1199 - (djm) OpenBSD CVS Sync
1200   - djm@cvs.openbsd.org 2013/08/06 23:03:49
1201     [sftp.c]
1202     fix some whitespace at EOL
1203     make list of commands an enum rather than a long list of defines
1204     add -a to usage()
1205   - djm@cvs.openbsd.org 2013/08/06 23:05:01
1206     [sftp.1]
1207     document top-level -a option (the -a option to 'get' was already
1208     documented)
1209   - djm@cvs.openbsd.org 2013/08/06 23:06:01
1210     [servconf.c]
1211     add cast to avoid format warning; from portable
1212   - jmc@cvs.openbsd.org 2013/08/07 06:24:51
1213     [sftp.1 sftp.c]
1214     sort -a;
1215   - djm@cvs.openbsd.org 2013/08/08 04:52:04
1216     [sftp.c]
1217     fix two year old regression: symlinking a file would incorrectly
1218     canonicalise the target path. bz#2129 report from delphij AT freebsd.org
1219   - djm@cvs.openbsd.org 2013/08/08 05:04:03
1220     [sftp-client.c sftp-client.h sftp.c]
1221     add a "-l" flag for the rename command to force it to use the silly
1222     standard SSH_FXP_RENAME command instead of the POSIX-rename- like
1223     posix-rename@openssh.com extension.
1224
1225     intended for use in regress tests, so no documentation.
1226   - djm@cvs.openbsd.org 2013/08/09 03:37:25
1227     [sftp.c]
1228     do getopt parsing for all sftp commands (with an empty optstring for
1229     commands without arguments) to ensure consistent behaviour
1230   - djm@cvs.openbsd.org 2013/08/09 03:39:13
1231     [sftp-client.c]
1232     two problems found by a to-be-committed regress test: 1) msg_id was not
1233     being initialised so was starting at a random value from the heap
1234     (harmless, but confusing). 2) some error conditions were not being
1235     propagated back to the caller
1236   - djm@cvs.openbsd.org 2013/08/09 03:56:42
1237     [sftp.c]
1238     enable ctrl-left-arrow and ctrl-right-arrow to move forward/back a word;
1239     matching ksh's relatively recent change.
1240   - djm@cvs.openbsd.org 2013/08/13 18:32:08
1241     [ssh-keygen.c]
1242     typo in error message; from Stephan Rickauer
1243   - djm@cvs.openbsd.org 2013/08/13 18:33:08
1244     [ssh-keygen.c]
1245     another of the same typo
1246   - jmc@cvs.openbsd.org 2013/08/14 08:39:27
1247     [scp.1 ssh.1]
1248     some Bx/Ox conversion;
1249     From: Jan Stary
1250   - djm@cvs.openbsd.org 2013/08/20 00:11:38
1251     [readconf.c readconf.h ssh_config.5 sshconnect.c]
1252     Add a ssh_config ProxyUseFDPass option that supports the use of
1253     ProxyCommands that establish a connection and then pass a connected
1254     file descriptor back to ssh(1). This allows the ProxyCommand to exit
1255     rather than have to shuffle data back and forth and enables ssh to use
1256     getpeername, etc. to obtain address information just like it does with
1257     regular directly-connected sockets. ok markus@
1258   - jmc@cvs.openbsd.org 2013/08/20 06:56:07
1259     [ssh.1 ssh_config.5]
1260     some proxyusefdpass tweaks;
1261
126220130808
1263 - (dtucker) [regress/Makefile regress/test-exec.sh] Don't try to use test -nt
1264   since some platforms (eg really old FreeBSD) don't have it.  Instead,
1265   run "make clean" before a complete regress run.  ok djm.
1266 - (dtucker) [misc.c] Fall back to time(2) at runtime if clock_gettime(
1267   CLOCK_MONOTONIC...) fails.  Some older versions of RHEL have the
1268   CLOCK_MONOTONIC define but don't actually support it.  Found and tested
1269   by Kevin Brott, ok djm.
1270 - (dtucker) [misc.c] Remove define added for fallback testing that was
1271   mistakenly included in the previous commit.
1272 - (dtucker) [regress/Makefile regress/test-exec.sh] Roll back the -nt
1273   removal.  The "make clean" removes modpipe which is built by the top-level
1274   directory before running the tests.  Spotted by tim@
1275 - (djm) Release 6.3p1
1276
127720130804
1278 - (dtucker) [auth-krb5.c configure.ac openbsd-compat/bsd-misc.h] Add support
1279   for building with older Heimdal versions.  ok djm.
1280
128120130801
1282 - (djm) [channels.c channels.h] bz#2135: On Solaris, isatty() on a non-
1283   blocking connecting socket will clear any stored errno that might
1284   otherwise have been retrievable via getsockopt(). A hack to limit writes
1285   to TTYs on AIX was triggering this. Since only AIX needs the hack, wrap
1286   it in an #ifdef. Diagnosis and patch from Ivo Raisr.
1287 - (djm) [sshlogin.h] Fix prototype merge botch from 2006; bz#2134
1288
128920130725
1290 - (djm) OpenBSD CVS Sync
1291   - djm@cvs.openbsd.org 2013/07/20 22:20:42
1292     [krl.c]
1293     fix verification error in (as-yet usused) KRL signature checking path
1294   - djm@cvs.openbsd.org 2013/07/22 05:00:17
1295     [umac.c]
1296     make MAC key, data to be hashed and nonce for final hash const;
1297     checked with -Wcast-qual
1298   - djm@cvs.openbsd.org 2013/07/22 12:20:02
1299     [umac.h]
1300     oops, forgot to commit corresponding header change;
1301     spotted by jsg and jasper
1302   - djm@cvs.openbsd.org 2013/07/25 00:29:10
1303     [ssh.c]
1304     daemonise backgrounded (ControlPersist'ed) multiplexing master to ensure
1305     it is fully detached from its controlling terminal. based on debugging
1306   - djm@cvs.openbsd.org 2013/07/25 00:56:52
1307     [sftp-client.c sftp-client.h sftp.1 sftp.c]
1308     sftp support for resuming partial downloads; patch mostly by Loganaden
1309     Velvindron/AfriNIC with some tweaks by me; feedback and ok dtucker@
1310     "Just be careful" deraadt@
1311   - djm@cvs.openbsd.org 2013/07/25 00:57:37
1312     [version.h]
1313     openssh-6.3 for release
1314   - dtucker@cvs.openbsd.org 2013/05/30 20:12:32
1315     [regress/test-exec.sh]
1316     use ssh and sshd as testdata since it needs to be >256k for the rekey test
1317   - dtucker@cvs.openbsd.org 2013/06/10 21:56:43
1318     [regress/forwarding.sh]
1319     Add test for forward config parsing
1320   - djm@cvs.openbsd.org 2013/06/21 02:26:26
1321     [regress/sftp-cmds.sh regress/test-exec.sh]
1322     unbreak sftp-cmds for renamed test data (s/ls/data/)
1323 - (tim) [sftp-client.c] Use of a gcc extension trips up native compilers on
1324   Solaris and UnixWare. Feedback and OK djm@
1325 - (tim) [regress/forwarding.sh] Fix for building outside source tree.
1326
132720130720
1328 - (djm) OpenBSD CVS Sync
1329   - markus@cvs.openbsd.org 2013/07/19 07:37:48
1330     [auth.h kex.h kexdhs.c kexecdhs.c kexgexs.c monitor.c servconf.c]
1331     [servconf.h session.c sshd.c sshd_config.5]
1332     add ssh-agent(1) support to sshd(8); allows encrypted hostkeys,
1333     or hostkeys on smartcards; most of the work by Zev Weiss; bz #1974
1334     ok djm@
1335   - djm@cvs.openbsd.org 2013/07/20 01:43:46
1336     [umac.c]
1337     use a union to ensure correct alignment; ok deraadt
1338   - djm@cvs.openbsd.org 2013/07/20 01:44:37
1339     [ssh-keygen.c ssh.c]
1340     More useful error message on missing current user in /etc/passwd
1341   - djm@cvs.openbsd.org 2013/07/20 01:50:20
1342     [ssh-agent.c]
1343     call cleanup_handler on SIGINT when in debug mode to ensure sockets
1344     are cleaned up on manual exit; bz#2120
1345   - djm@cvs.openbsd.org 2013/07/20 01:55:13
1346     [auth-krb5.c gss-serv-krb5.c gss-serv.c]
1347     fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@
1348
134920130718
1350 - (djm) OpenBSD CVS Sync
1351   - dtucker@cvs.openbsd.org 2013/06/10 19:19:44
1352     [readconf.c]
1353     revert 1.203 while we investigate crashes reported by okan@
1354   - guenther@cvs.openbsd.org 2013/06/17 04:48:42
1355     [scp.c]
1356     Handle time_t values as long long's when formatting them and when
1357     parsing them from remote servers.
1358     Improve error checking in parsing of 'T' lines.
1359     ok dtucker@ deraadt@
1360   - markus@cvs.openbsd.org 2013/06/20 19:15:06
1361     [krl.c]
1362     don't leak the rdata blob on errors; ok djm@
1363   - djm@cvs.openbsd.org 2013/06/21 00:34:49
1364     [auth-rsa.c auth.h auth2-hostbased.c auth2-pubkey.c monitor.c]
1365     for hostbased authentication, print the client host and user on
1366     the auth success/failure line; bz#2064, ok dtucker@
1367   - djm@cvs.openbsd.org 2013/06/21 00:37:49
1368     [ssh_config.5]
1369     explicitly mention that IdentitiesOnly can be used with IdentityFile
1370     to control which keys are offered from an agent.
1371   - djm@cvs.openbsd.org 2013/06/21 05:42:32
1372     [dh.c]
1373     sprinkle in some error() to explain moduli(5) parse failures
1374   - djm@cvs.openbsd.org 2013/06/21 05:43:10
1375     [scp.c]
1376     make this -Wsign-compare clean after time_t conversion
1377   - djm@cvs.openbsd.org 2013/06/22 06:31:57
1378     [scp.c]
1379     improved time_t overflow check suggested by guenther@
1380   - jmc@cvs.openbsd.org 2013/06/27 14:05:37
1381     [ssh-keygen.1 ssh.1 ssh_config.5 sshd.8 sshd_config.5]
1382     do not use Sx for sections outwith the man page - ingo informs me that
1383     stuff like html will render with broken links;
1384     issue reported by Eric S. Raymond, via djm
1385   - markus@cvs.openbsd.org 2013/07/02 12:31:43
1386     [dh.c]
1387     remove extra whitespace
1388   - djm@cvs.openbsd.org 2013/07/12 00:19:59
1389     [auth-options.c auth-rsa.c bufaux.c buffer.h channels.c hostfile.c]
1390     [hostfile.h mux.c packet.c packet.h roaming_common.c serverloop.c]
1391     fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@
1392   - djm@cvs.openbsd.org 2013/07/12 00:20:00
1393     [sftp.c ssh-keygen.c ssh-pkcs11.c]
1394     fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@
1395   - djm@cvs.openbsd.org 2013/07/12 00:43:50
1396     [misc.c]
1397     in ssh_gai_strerror() don't fallback to strerror for EAI_SYSTEM when
1398     errno == 0. Avoids confusing error message in some broken resolver
1399     cases. bz#2122 patch from plautrba AT redhat.com; ok dtucker
1400   - djm@cvs.openbsd.org 2013/07/12 05:42:03
1401     [ssh-keygen.c]
1402     do_print_resource_record() can never be called with a NULL filename, so
1403     don't attempt (and bungle) asking for one if it has not been specified
1404     bz#2127 ok dtucker@
1405   - djm@cvs.openbsd.org 2013/07/12 05:48:55
1406     [ssh.c]
1407     set TCP nodelay for connections started with -N; bz#2124 ok dtucker@
1408   - schwarze@cvs.openbsd.org 2013/07/16 00:07:52
1409     [scp.1 sftp-server.8 ssh-keyscan.1 ssh-keysign.8 ssh-pkcs11-helper.8]
1410     use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@
1411   - djm@cvs.openbsd.org 2013/07/18 01:12:26
1412     [ssh.1]
1413     be more exact wrt perms for ~/.ssh/config; bz#2078
1414
141520130702
1416 - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config
1417   contrib/cygwin/ssh-user-config] Modernizes and improve readability of
1418   the Cygwin README file (which hasn't been updated for ages), drop
1419   unsupported OSes from the ssh-host-config help text, and drop an
1420   unneeded option from ssh-user-config.  Patch from vinschen at redhat com.
1421
142220130610
1423 - (djm) OpenBSD CVS Sync
1424   - dtucker@cvs.openbsd.org 2013/06/07 15:37:52
1425     [channels.c channels.h clientloop.c]
1426     Add an "ABANDONED" channel state and use for mux sessions that are
1427     disconnected via the ~. escape sequence.  Channels in this state will
1428     be able to close if the server responds, but do not count as active channels.
1429     This means that if you ~. all of the mux clients when using ControlPersist
1430     on a broken network, the backgrounded mux master will exit when the
1431     Control Persist time expires rather than hanging around indefinitely.
1432     bz#1917, also reported and tested by tedu@.  ok djm@ markus@.
1433 - (dtucker) [Makefile.in configure.ac fixalgorithms] Remove unsupported
1434   algorithms (Ciphers, MACs and HostKeyAlgorithms) from man pages.
1435 - (dtucker) [myproposal.h] Do not advertise AES GSM ciphers if we don't have
1436   the required OpenSSL support.  Patch from naddy at freebsd.
1437 - (dtucker) [myproposal.h] Make the conditional algorithm support consistent
1438   and add some comments so it's clear what goes where.
1439
144020130605
1441 - (dtucker) [myproposal.h] Enable sha256 kex methods based on the presence of
1442   the necessary functions, not from the openssl version.
1443 - (dtucker) [contrib/ssh-copy-id] bz#2117: Use portable operator in test.
1444   Patch from cjwatson at debian.
1445 - (dtucker) [regress/forwarding.sh] For (as yet unknown) reason, the
1446   forwarding test is extremely slow copying data on some machines so switch
1447   back to copying the much smaller ls binary until we can figure out why
1448   this is.
1449 - (dtucker) [Makefile.in] append $CFLAGS to compiler options when building
1450   modpipe in case there's anything in there we need.
1451 - (dtucker) OpenBSD CVS Sync
1452   - dtucker@cvs.openbsd.org 2013/06/02 21:01:51
1453     [channels.h]
1454     typo in comment
1455   - dtucker@cvs.openbsd.org 2013/06/02 23:36:29
1456     [clientloop.h clientloop.c mux.c]
1457     No need for the mux cleanup callback to be visible so restore it to static
1458     and call it through the detach_user function pointer.  ok djm@
1459   - dtucker@cvs.openbsd.org 2013/06/03 00:03:18
1460     [mac.c]
1461     force the MAC output to be 64-bit aligned so umac won't see unaligned
1462     accesses on strict-alignment architectures.  bz#2101, patch from
1463     tomas.kuthan at oracle.com, ok djm@
1464   - dtucker@cvs.openbsd.org 2013/06/04 19:12:23
1465     [scp.c]
1466     use MAXPATHLEN for buffer size instead of fixed value.  ok markus
1467   - dtucker@cvs.openbsd.org 2013/06/04 20:42:36
1468     [sftp.c]
1469     Make sftp's libedit interface marginally multibyte aware by building up
1470     the quoted string by character instead of by byte.  Prevents failures
1471     when linked against a libedit built with wide character support (bz#1990).
1472     "looks ok" djm
1473   - dtucker@cvs.openbsd.org 2013/06/05 02:07:29
1474     [mux.c]
1475     fix leaks in mux error paths, from Zhenbo Xu, found by Melton. bz#1967,
1476     ok djm
1477   - dtucker@cvs.openbsd.org 2013/06/05 02:27:50
1478     [sshd.c]
1479     When running sshd -D, close stderr unless we have explicitly requesting
1480     logging to stderr. From james.hunt at ubuntu.com via bz#1976, djm's patch
1481     so, err, ok dtucker.
1482   - dtucker@cvs.openbsd.org 2013/06/05 12:52:38
1483     [sshconnect2.c]
1484     Fix memory leaks found by Zhenbo Xu and the Melton tool.  bz#1967, ok djm
1485   - dtucker@cvs.openbsd.org 2013/06/05 22:00:28
1486     [readconf.c]
1487     plug another memleak.  bz#1967, from Zhenbo Xu, detected by Melton, ok djm
1488 - (dtucker) [configure.ac sftp.c openbsd-compat/openbsd-compat.h] Cater for
1489    platforms that don't have multibyte character support (specifically,
1490    mblen).
1491
149220130602
1493 - (tim) [Makefile.in] Make Solaris, UnixWare, & OpenServer linkers happy
1494   linking regress/modpipe.
1495 - (dtucker) OpenBSD CVS Sync
1496   - dtucker@cvs.openbsd.org 2013/06/02 13:33:05
1497     [progressmeter.c]
1498     Add misc.h for monotime prototype. (ID sync only).
1499   - dtucker@cvs.openbsd.org 2013/06/02 13:35:58
1500     [ssh-agent.c]
1501     Make parent_alive_interval time_t to avoid signed/unsigned comparison
1502 - (dtucker) [configure.ac]  sys/un.h needs sys/socket.h on some platforms
1503   to prevent noise from configure. Patch from Nathan Osman. (bz#2114).
1504 - (dtucker) [configure.ac] bz#2111: don't try to use lastlog on Android.
1505   Patch from Nathan Osman.
1506 - (tim) [configure.ac regress/Makefile] With rev 1.47 of test-exec.sh we
1507   need a shell that can handle "[ file1 -nt file2 ]". Rather than keep
1508   dealing with shell portability issues in regression tests, we let
1509   configure find us a capable shell on those platforms with an old /bin/sh.
1510 - (tim) [aclocal.m4] Enhance OSSH_CHECK_CFLAG_COMPILE to check stderr.
1511   feedback and ok dtucker
1512 - (tim) [regress/sftp-chroot.sh] skip if no sudo. ok dtucker
1513 - (dtucker) [configure.ac] Some platforms need sys/types.h before sys/un.h.
1514 - (dtucker) [configure.ac] Some other platforms need sys/types.h before
1515   sys/socket.h.
1516
151720130601
1518 - (dtucker) [configure.ac openbsd-compat/xcrypt.c] bz#2112: fall back to
1519   using openssl's DES_crypt function on platorms that don't have a native
1520   one, eg Android.  Based on a patch from Nathan Osman.
1521 - (dtucker) [configure.ac defines.h] Test for fd_mask, howmany and NFDBITS
1522   rather than trying to enumerate the plaforms that don't have them.
1523   Based on a patch from Nathan Osman, with help from tim@.
1524 - (dtucker) OpenBSD CVS Sync
1525   - djm@cvs.openbsd.org 2013/05/17 00:13:13
1526     [xmalloc.h cipher.c sftp-glob.c ssh-keyscan.c ssh.c sftp-common.c
1527     ssh-ecdsa.c auth2-chall.c compat.c readconf.c kexgexs.c monitor.c
1528     gss-genr.c cipher-3des1.c kex.c monitor_wrap.c ssh-pkcs11-client.c
1529     auth-options.c rsa.c auth2-pubkey.c sftp.c hostfile.c auth2.c
1530     servconf.c auth.c authfile.c xmalloc.c uuencode.c sftp-client.c
1531     auth2-gss.c sftp-server.c bufaux.c mac.c session.c jpake.c kexgexc.c
1532     sshconnect.c auth-chall.c auth2-passwd.c sshconnect1.c buffer.c
1533     kexecdhs.c kexdhs.c ssh-rsa.c auth1.c ssh-pkcs11.c auth2-kbdint.c
1534     kexdhc.c sshd.c umac.c ssh-dss.c auth2-jpake.c bufbn.c clientloop.c
1535     monitor_mm.c scp.c roaming_client.c serverloop.c key.c auth-rsa.c
1536     ssh-pkcs11-helper.c ssh-keysign.c ssh-keygen.c match.c channels.c
1537     sshconnect2.c addrmatch.c mux.c canohost.c kexecdhc.c schnorr.c
1538     ssh-add.c misc.c auth2-hostbased.c ssh-agent.c bufec.c groupaccess.c
1539     dns.c packet.c readpass.c authfd.c moduli.c]
1540     bye, bye xfree(); ok markus@
1541   - djm@cvs.openbsd.org 2013/05/19 02:38:28
1542     [auth2-pubkey.c]
1543     fix failure to recognise cert-authority keys if a key of a different type
1544     appeared in authorized_keys before it; ok markus@
1545   - djm@cvs.openbsd.org 2013/05/19 02:42:42
1546     [auth.h auth.c key.c monitor.c auth-rsa.c auth2.c auth1.c key.h]
1547     Standardise logging of supplemental information during userauth. Keys
1548     and ruser is now logged in the auth success/failure message alongside
1549     the local username, remote host/port and protocol in use. Certificates
1550     contents and CA are logged too.
1551     Pushing all logging onto a single line simplifies log analysis as it is
1552     no longer necessary to relate information scattered across multiple log
1553     entries. "I like it" markus@
1554   - dtucker@cvs.openbsd.org 2013/05/31 12:28:10
1555     [ssh-agent.c]
1556     Use time_t where appropriate.  ok djm
1557   - dtucker@cvs.openbsd.org 2013/06/01 13:15:52
1558     [ssh-agent.c clientloop.c misc.h packet.c progressmeter.c misc.c
1559     channels.c sandbox-systrace.c]
1560     Use clock_gettime(CLOCK_MONOTONIC ...) for ssh timers so that things like
1561     keepalives and rekeying will work properly over clock steps.  Suggested by
1562     markus@, "looks good" djm@.
1563   - dtucker@cvs.openbsd.org 2013/06/01 20:59:25
1564     [scp.c sftp-client.c]
1565     Replace S_IWRITE, which isn't standardized, with S_IWUSR, which is.  Patch
1566     from Nathan Osman via bz#2085.  ok deraadt.
1567   - dtucker@cvs.openbsd.org 2013/06/01 22:34:50
1568     [sftp-client.c]
1569     Update progressmeter when data is acked, not when it's sent.  bz#2108, from
1570     Debian via Colin Watson, ok djm@
1571 - (dtucker) [M auth-chall.c auth-krb5.c auth-pam.c cipher-aes.c cipher-ctr.c
1572   groupaccess.c loginrec.c monitor.c monitor_wrap.c session.c sshd.c
1573   sshlogin.c uidswap.c openbsd-compat/bsd-cygwin_util.c
1574   openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/port-aix.c
1575   openbsd-compat/port-linux.c] Replace portable-specific instances of xfree
1576   with the equivalent calls to free.
1577 - (dtucker) [configure.ac misc.c] Look for clock_gettime in librt and fall
1578   back to time(NULL) if we can't find it anywhere.
1579 - (dtucker) [sandbox-seccomp-filter.c] Allow clock_gettimeofday.
1580
158120130529
1582  - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] bz#2087: Add a null
1583    implementation of endgrent for platforms that don't have it (eg Android).
1584    Loosely based on a patch from Nathan Osman, ok djm
1585
1586 20130517
1587 - (dtucker) OpenBSD CVS Sync
1588   - djm@cvs.openbsd.org 2013/03/07 00:20:34
1589     [regress/proxy-connect.sh]
1590     repeat test with a style appended to the username
1591   - dtucker@cvs.openbsd.org 2013/03/23 11:09:43
1592     [regress/test-exec.sh]
1593     Only regenerate host keys if they don't exist or if ssh-keygen has changed
1594     since they were.  Reduces test runtime by 5-30% depending on machine
1595     speed.
1596   - dtucker@cvs.openbsd.org 2013/04/06 06:00:22
1597     [regress/rekey.sh regress/test-exec.sh regress/integrity.sh
1598     regress/multiplex.sh Makefile regress/cfgmatch.sh]
1599     Split the regress log into 3 parts: the debug output from ssh, the debug
1600     log from sshd and the output from the client command (ssh, scp or sftp).
1601     Somewhat functional now, will become more useful when ssh/sshd -E is added.
1602   - dtucker@cvs.openbsd.org 2013/04/07 02:16:03
1603     [regress/Makefile regress/rekey.sh regress/integrity.sh
1604     regress/sshd-log-wrapper.sh regress/forwarding.sh regress/test-exec.sh]
1605     use -E option for ssh and sshd to write debuging logs to ssh{,d}.log and
1606     save the output from any failing tests.  If a test fails the debug output
1607     from ssh and sshd for the failing tests (and only the failing tests) should
1608     be available in failed-ssh{,d}.log.
1609   - djm@cvs.openbsd.org 2013/04/18 02:46:12
1610     [regress/Makefile regress/sftp-chroot.sh]
1611     test sshd ChrootDirectory+internal-sftp; feedback & ok dtucker@
1612   - dtucker@cvs.openbsd.org 2013/04/22 07:23:08
1613     [regress/multiplex.sh]
1614     Write mux master logs to regress.log instead of ssh.log to keep separate
1615   - djm@cvs.openbsd.org 2013/05/10 03:46:14
1616     [regress/modpipe.c]
1617     sync some portability changes from portable OpenSSH (id sync only)
1618   - dtucker@cvs.openbsd.org 2013/05/16 02:10:35
1619     [regress/rekey.sh]
1620     Add test for time-based rekeying
1621   - dtucker@cvs.openbsd.org 2013/05/16 03:33:30
1622     [regress/rekey.sh]
1623     test rekeying when there's no data being transferred
1624   - dtucker@cvs.openbsd.org 2013/05/16 04:26:10
1625     [regress/rekey.sh]
1626     add server-side rekey test
1627   - dtucker@cvs.openbsd.org 2013/05/16 05:48:31
1628     [regress/rekey.sh]
1629     add tests for RekeyLimit parsing
1630   - dtucker@cvs.openbsd.org 2013/05/17 00:37:40
1631     [regress/agent.sh regress/keytype.sh regress/cfgmatch.sh
1632     regress/forcecommand.sh regress/proto-version.sh regress/test-exec.sh
1633     regress/cipher-speed.sh regress/cert-hostkey.sh regress/cert-userkey.sh
1634     regress/ssh-com.sh]
1635     replace 'echo -n' with 'printf' since it's more portable
1636     also remove "echon" hack.
1637   - dtucker@cvs.openbsd.org 2013/05/17 01:16:09
1638     [regress/agent-timeout.sh]
1639     Pull back some portability changes from -portable:
1640      - TIMEOUT is a read-only variable in some shells
1641      - not all greps have -q so redirect to /dev/null instead.
1642     (ID sync only)
1643   - dtucker@cvs.openbsd.org 2013/05/17 01:32:11
1644     [regress/integrity.sh]
1645     don't print output from ssh before getting it (it's available in ssh.log)
1646   - dtucker@cvs.openbsd.org 2013/05/17 04:29:14
1647     [regress/sftp.sh regress/putty-ciphers.sh regress/cipher-speed.sh
1648     regress/test-exec.sh regress/sftp-batch.sh regress/dynamic-forward.sh
1649     regress/putty-transfer.sh regress/conch-ciphers.sh regress/sftp-cmds.sh
1650     regress/scp.sh regress/ssh-com-sftp.sh regress/rekey.sh
1651     regress/putty-kex.sh regress/stderr-data.sh regress/stderr-after-eof.sh
1652     regress/sftp-badcmds.sh regress/reexec.sh regress/ssh-com-client.sh
1653     regress/sftp-chroot.sh regress/forwarding.sh regress/transfer.sh
1654     regress/multiplex.sh]
1655     Move the setting of DATA and COPY into test-exec.sh
1656   - dtucker@cvs.openbsd.org 2013/05/17 10:16:26
1657     [regress/try-ciphers.sh]
1658     use expr for math to keep diffs vs portable down
1659     (id sync only)
1660   - dtucker@cvs.openbsd.org 2013/05/17 10:23:52
1661     [regress/login-timeout.sh regress/reexec.sh regress/test-exec.sh]
1662     Use SUDO when cat'ing pid files and running the sshd log wrapper so that
1663     it works with a restrictive umask and the pid files are not world readable.
1664     Changes from -portable.  (id sync only)
1665   - dtucker@cvs.openbsd.org 2013/05/17 10:24:48
1666     [regress/localcommand.sh]
1667     use backticks for portability. (id sync only)
1668   - dtucker@cvs.openbsd.org 2013/05/17 10:26:26
1669     [regress/sftp-badcmds.sh]
1670     remove unused BATCH variable. (id sync only)
1671   - dtucker@cvs.openbsd.org 2013/05/17 10:28:11
1672     [regress/sftp.sh]
1673     only compare copied data if sftp succeeds.  from portable (id sync only)
1674   - dtucker@cvs.openbsd.org 2013/05/17 10:30:07
1675     [regress/test-exec.sh]
1676     wait a bit longer for startup and use case for absolute path.
1677     from portable (id sync only)
1678   - dtucker@cvs.openbsd.org 2013/05/17 10:33:09
1679     [regress/agent-getpeereid.sh]
1680     don't redirect stdout from sudo.  from portable (id sync only)
1681   - dtucker@cvs.openbsd.org 2013/05/17 10:34:30
1682     [regress/portnum.sh]
1683     use a more portable negated if structure.  from portable (id sync only)
1684   - dtucker@cvs.openbsd.org 2013/05/17 10:35:43
1685     [regress/scp.sh]
1686     use a file extention that's not special on some platforms.  from portable
1687     (id sync only)
1688 - (dtucker) [regress/bsd.regress.mk] Remove unused file.  We've never used it
1689   in portable and it's long gone in openbsd.
1690 - (dtucker) [regress/integrity.sh].  Force fixed Diffie-Hellman key exchange
1691   methods.  When the openssl version doesn't support ECDH then next one on
1692   the list is DH group exchange, but that causes a bit more traffic which can
1693   mean that the tests flip bits in the initial exchange rather than the MACed
1694   traffic and we get different errors to what the tests look for.
1695 - (dtucker) [openbsd-compat/getopt.h] Remove unneeded bits.
1696 - (dtucker) [regress/cfgmatch.sh] Resync config file setup with openbsd.
1697 - (dtucker) [regress/agent-getpeereid.sh] Resync spaces with openbsd.
1698 - (dtucker) [regress/integrity.sh regress/krl.sh regress/test-exec.sh]
1699   Move the jot helper function to portable-specific part of test-exec.sh.
1700 - (dtucker) [regress/test-exec.sh] Move the portable-specific functions
1701   together and add a couple of missing lines from openbsd.
1702 - (dtucker) [regress/stderr-after-eof.sh regress/test-exec.sh] Move the md5
1703   helper function to the portable part of test-exec.sh.
1704 - (dtucker) [regress/runtests.sh] Remove obsolete test driver script.
1705 - (dtucker) [regress/cfgmatch.sh] Remove unneeded sleep renderd obsolete by
1706   rev 1.6 which calls wait.
1707
170820130516
1709 - (djm) [contrib/ssh-copy-id] Fix bug that could cause "rm *" to be
1710    executed if mktemp failed; bz#2105 ok dtucker@
1711 - (dtucker) OpenBSD CVS Sync
1712   - tedu@cvs.openbsd.org 2013/04/23 17:49:45
1713     [misc.c]
1714     use xasprintf instead of a series of strlcats and strdup. ok djm
1715   - tedu@cvs.openbsd.org 2013/04/24 16:01:46
1716     [misc.c]
1717     remove extra parens noticed by nicm
1718   - dtucker@cvs.openbsd.org 2013/05/06 07:35:12
1719     [sftp-server.8]
1720     Reference the version of the sftp draft we actually implement.  ok djm@
1721   - djm@cvs.openbsd.org 2013/05/10 03:40:07
1722     [sshconnect2.c]
1723     fix bzero(ptr_to_struct, sizeof(ptr_to_struct)); bz#2100 from
1724     Colin Watson
1725   - djm@cvs.openbsd.org 2013/05/10 04:08:01
1726     [key.c]
1727     memleak in cert_free(), wasn't actually freeing the struct;
1728     bz#2096 from shm AT digitalsun.pl
1729   - dtucker@cvs.openbsd.org 2013/05/10 10:13:50
1730     [ssh-pkcs11-helper.c]
1731     remove unused extern optarg.  ok markus@
1732   - dtucker@cvs.openbsd.org 2013/05/16 02:00:34
1733     [ssh_config sshconnect2.c packet.c readconf.h readconf.c clientloop.c
1734     ssh_config.5 packet.h]
1735     Add an optional second argument to RekeyLimit in the client to allow
1736     rekeying based on elapsed time in addition to amount of traffic.
1737     with djm@ jmc@, ok djm
1738   - dtucker@cvs.openbsd.org 2013/05/16 04:09:14
1739     [sshd_config.5 servconf.c servconf.h packet.c serverloop.c monitor.c sshd_config
1740     sshd.c] Add RekeyLimit to sshd with the same syntax as the client allowing
1741     rekeying based on traffic volume or time.  ok djm@, help & ok jmc@ for the man
1742     page.
1743   - djm@cvs.openbsd.org 2013/05/16 04:27:50
1744     [ssh_config.5 readconf.h readconf.c]
1745     add the ability to ignore specific unrecognised ssh_config options;
1746     bz#866; ok markus@
1747   - jmc@cvs.openbsd.org 2013/05/16 06:28:45
1748     [ssh_config.5]
1749     put IgnoreUnknown in the right place;
1750   - jmc@cvs.openbsd.org 2013/05/16 06:30:06
1751     [sshd_config.5]
1752     oops! avoid Xr to self;
1753   - dtucker@cvs.openbsd.org 2013/05/16 09:08:41
1754     [log.c scp.c sshd.c serverloop.c schnorr.c sftp.c]
1755     Fix some "unused result" warnings found via clang and -portable.
1756     ok markus@
1757   - dtucker@cvs.openbsd.org 2013/05/16 09:12:31
1758     [readconf.c servconf.c]
1759     switch RekeyLimit traffic volume parsing to scan_scaled.  ok djm@
1760   - dtucker@cvs.openbsd.org 2013/05/16 10:43:34
1761     [servconf.c readconf.c]
1762     remove now-unused variables
1763   - dtucker@cvs.openbsd.org 2013/05/16 10:44:06
1764     [servconf.c]
1765     remove another now-unused variable
1766 - (dtucker) [configure.ac readconf.c servconf.c
1767     openbsd-compat/openbsd-compat.h] Add compat bits for scan_scaled.
1768
176920130510
1770 - (dtucker) [configure.ac] Enable -Wsizeof-pointer-memaccess if the compiler
1771   supports it.  Mentioned by Colin Watson in bz#2100, ok djm.
1772 - (dtucker) [openbsd-compat/getopt.c] Factor out portibility changes to
1773   getopt.c.  Preprocessed source is identical other than line numbers.
1774 - (dtucker) [openbsd-compat/getopt_long.c] Import from OpenBSD.  No
1775   portability changes yet.
1776 - (dtucker) [openbsd-compat/Makefile.in openbsd-compat/getopt.c
1777   openbsd-compat/getopt_long.c regress/modpipe.c] Remove getopt.c, add
1778   portability code to getopt_long.c and switch over Makefile and the ugly
1779   hack in modpipe.c.  Fixes bz#1448.
1780 - (dtucker) [openbsd-compat/getopt.h openbsd-compat/getopt_long.c
1781   openbsd-compat/openbsd-compat.h] pull in getopt.h from openbsd and plumb
1782   in to use it when we're using our own getopt.
1783 - (dtucker) [kex.c] Only include sha256 and ECC key exchange methods when the
1784   underlying libraries support them.
1785 - (dtucker) [configure.ac] Add -Werror to the -Qunused-arguments test so
1786   we don't get a warning on compilers that *don't* support it.  Add
1787   -Wno-unknown-warning-option.  Move both to the start of the list for
1788   maximum noise suppression.  Tested with gcc 4.6.3, gcc 2.95.4 and clang 2.9.
1789
179020130423
1791 - (djm) [auth.c configure.ac misc.c monitor.c monitor_wrap.c] Support
1792   platforms, such as Android, that lack struct passwd.pw_gecos. Report
1793   and initial patch from Nathan Osman bz#2086; feedback tim@ ok dtucker@
1794 - (djm) OpenBSD CVS Sync
1795   - markus@cvs.openbsd.org 2013/03/05 20:16:09
1796     [sshconnect2.c]
1797     reset pubkey order on partial success; ok djm@
1798   - djm@cvs.openbsd.org 2013/03/06 23:35:23
1799     [session.c]
1800     fatal() when ChrootDirectory specified by running without root privileges;
1801     ok markus@
1802   - djm@cvs.openbsd.org 2013/03/06 23:36:53
1803     [readconf.c]
1804     g/c unused variable (-Wunused)
1805   - djm@cvs.openbsd.org 2013/03/07 00:19:59
1806     [auth2-pubkey.c monitor.c]
1807     reconstruct the original username that was sent by the client, which may
1808     have included a style (e.g. "root:skey") when checking public key
1809     signatures. Fixes public key and hostbased auth when the client specified
1810     a style; ok markus@
1811   - markus@cvs.openbsd.org 2013/03/07 19:27:25
1812     [auth.h auth2-chall.c auth2.c monitor.c sshd_config.5]
1813     add submethod support to AuthenticationMethods; ok and freedback djm@
1814   - djm@cvs.openbsd.org 2013/03/08 06:32:58
1815     [ssh.c]
1816     allow "ssh -f none ..." ok markus@
1817   - djm@cvs.openbsd.org 2013/04/05 00:14:00
1818     [auth2-gss.c krl.c sshconnect2.c]
1819     hush some {unused, printf type} warnings
1820   - djm@cvs.openbsd.org 2013/04/05 00:31:49
1821     [pathnames.h]
1822     use the existing _PATH_SSH_USER_RC define to construct the other
1823     pathnames; bz#2077, ok dtucker@ (no binary change)
1824   - djm@cvs.openbsd.org 2013/04/05 00:58:51
1825     [mux.c]
1826     cleanup mux-created channels that are in SSH_CHANNEL_OPENING state too
1827     (in addition to ones already in OPEN); bz#2079, ok dtucker@
1828   - markus@cvs.openbsd.org 2013/04/06 16:07:00
1829     [channels.c sshd.c]
1830     handle ECONNABORTED for accept(); ok deraadt some time ago...
1831   - dtucker@cvs.openbsd.org 2013/04/07 02:10:33
1832     [log.c log.h ssh.1 ssh.c sshd.8 sshd.c]
1833     Add -E option to ssh and sshd to append debugging logs to a specified file
1834     instead of stderr or syslog.  ok markus@, man page help jmc@
1835   - dtucker@cvs.openbsd.org 2013/04/07 09:40:27
1836     [sshd.8]
1837     clarify -e text. suggested by & ok jmc@
1838   - djm@cvs.openbsd.org 2013/04/11 02:27:50
1839     [packet.c]
1840     quiet disconnect notifications on the server from error() back to logit()
1841     if it is a normal client closure; bz#2057 ok+feedback dtucker@
1842   - dtucker@cvs.openbsd.org 2013/04/17 09:04:09
1843     [session.c]
1844     revert rev 1.262; it fails because uid is already set here.  ok djm@
1845   - djm@cvs.openbsd.org 2013/04/18 02:16:07
1846     [sftp.c]
1847     make "sftp -q" do what it says on the sticker: hush everything but errors;
1848     ok dtucker@
1849   - djm@cvs.openbsd.org 2013/04/19 01:00:10
1850     [sshd_config.5]
1851     document the requirment that the AuthorizedKeysCommand be owned by root;
1852     ok dtucker@ markus@
1853   - djm@cvs.openbsd.org 2013/04/19 01:01:00
1854     [ssh-keygen.c]
1855     fix some memory leaks; bz#2088 ok dtucker@
1856   - djm@cvs.openbsd.org 2013/04/19 01:03:01
1857     [session.c]
1858     reintroduce 1.262 without the connection-killing bug:
1859     fatal() when ChrootDirectory specified by running without root privileges;
1860     ok markus@
1861   - djm@cvs.openbsd.org 2013/04/19 01:06:50
1862     [authfile.c cipher.c cipher.h kex.c kex.h kexecdh.c kexecdhc.c kexecdhs.c]
1863     [key.c key.h mac.c mac.h packet.c ssh.1 ssh.c]
1864     add the ability to query supported ciphers, MACs, key type and KEX
1865     algorithms to ssh. Includes some refactoring of KEX and key type handling
1866     to be table-driven; ok markus@
1867   - djm@cvs.openbsd.org 2013/04/19 11:10:18
1868     [ssh.c]
1869     add -Q to usage; reminded by jmc@
1870   - djm@cvs.openbsd.org 2013/04/19 12:07:08
1871     [kex.c]
1872     remove duplicated list entry pointed out by naddy@
1873   - dtucker@cvs.openbsd.org 2013/04/22 01:17:18
1874     [mux.c]
1875     typo in debug output: evitval->exitval
1876
187720130418
1878 - (djm) [config.guess config.sub] Update to last versions before they switch
1879   to GPL3. ok dtucker@
1880 - (dtucker) [configure.ac] Use -Qunused-arguments to suppress warnings from
1881   unused argument warnings (in particular, -fno-builtin-memset) from clang.
1882
188320130404
1884 - (dtucker) OpenBSD CVS Sync
1885   - dtucker@cvs.openbsd.org 2013/02/17 23:16:57
1886     [readconf.c ssh.c readconf.h sshconnect2.c]
1887     Keep track of which IndentityFile options were manually supplied and which
1888     were default options, and don't warn if the latter are missing.
1889     ok markus@
1890   - dtucker@cvs.openbsd.org 2013/02/19 02:12:47
1891     [krl.c]
1892     Remove bogus include.  ok djm
1893   - dtucker@cvs.openbsd.org 2013/02/22 04:45:09
1894     [ssh.c readconf.c readconf.h]
1895     Don't complain if IdentityFiles specified in system-wide configs are
1896     missing.  ok djm, deraadt.
1897   - markus@cvs.openbsd.org 2013/02/22 19:13:56
1898     [sshconnect.c]
1899     support ProxyCommand=- (stdin/out already point to the proxy); ok djm@
1900   - djm@cvs.openbsd.org 2013/02/22 22:09:01
1901     [ssh.c]
1902     Allow IdenityFile=none; ok markus deraadt (and dtucker for an earlier
1903     version)
1904
190520130401
1906 - (dtucker) [openbsd-compat/bsd-cygwin_util.{c,h}] Don't include windows.h
1907   to avoid conflicting definitions of __int64, adding the required bits.
1908   Patch from Corinna Vinschen.
1909
191020130323
1911 - (tim) [Makefile.in] remove some duplication introduced in 20130220 commit.
1912
191320130322
1914 - (djm) [contrib/ssh-copy-id contrib/ssh-copy-id.1] Updated to Phil
1915   Hands' greatly revised version.
1916 - (djm) Release 6.2p1
1917 - (dtucker) [configure.ac] Add stdlib.h to zlib check for exit() prototype.
1918 - (dtucker) [includes.h] Check if _GNU_SOURCE is already defined before
1919   defining it again.  Prevents warnings if someone, eg, sets it in CFLAGS.
1920
192120130318
1922 - (djm) [configure.ac log.c scp.c sshconnect2.c openbsd-compat/vis.c]
1923   [openbsd-compat/vis.h] FreeBSD's strnvis isn't compatible with OpenBSD's
1924   so mark it as broken. Patch from des AT des.no
1925
192620130317
1927 - (tim) [configure.ac] OpenServer 5 wants lastlog even though it has none
1928   of the bits the configure test looks for.
1929
193020130316
1931 - (djm) [configure.ac] Disable utmp, wtmp and/or lastlog if the platform
1932   is unable to successfully compile them. Based on patch from des AT
1933   des.no
1934 - (djm) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
1935   Add a usleep replacement for platforms that lack it; ok dtucker
1936 - (djm) [session.c] FreeBSD needs setusercontext(..., LOGIN_SETUMASK) to
1937   occur after UID switch; patch from John Marshall via des AT des.no;
1938   ok dtucker@
1939
194020130312
1941 - (dtucker) [regress/Makefile regress/cipher-speed.sh regress/test-exec.sh]
1942   Improve portability of cipher-speed test, based mostly on a patch from
1943   Iain Morgan.
1944 - (dtucker) [auth.c configure.ac platform.c platform.h] Accept uid 2 ("bin")
1945   in addition to root as an owner of system directories on AIX and HP-UX.
1946   ok djm@
1947
194820130307
1949 - (dtucker) [INSTALL] Bump documented autoconf version to what we're
1950   currently using.
1951 - (dtucker) [defines.h] Remove SIZEOF_CHAR bits since the test for it
1952   was removed in configure.ac rev 1.481 as it was redundant.
1953 - (tim) [Makefile.in] Add another missing $(EXEEXT) I should have seen 3 days
1954   ago.
1955 - (djm) [configure.ac] Add a timeout to the select/rlimit test to give it a
1956   chance to complete on broken systems; ok dtucker@
1957
195820130306
1959 - (dtucker) [regress/forward-control.sh] Wait longer for the forwarding
1960  connection to start so that the test works on slower machines.
1961 - (dtucker) [configure.ac] test that we can set number of file descriptors
1962   to zero with setrlimit before enabling the rlimit sandbox.  This affects
1963   (at least) HPUX 11.11.
1964
196520130305
1966 - (djm) [regress/modpipe.c] Compilation fix for AIX and parsing fix for
1967   HP/UX. Spotted by Kevin Brott
1968 - (dtucker) [configure.ac] use "=" for shell test and not "==".  Spotted by
1969   Amit Kulkarni and Kevin Brott.
1970 - (dtucker) [Makefile.in] Remove trailing "\" on PATHS, which caused obscure
1971   build breakage on (at least) HP-UX 11.11.  Found by Amit Kulkarni and Kevin
1972   Brott.
1973 - (tim) [Makefile.in] Add missing $(EXEEXT). Found by Roumen Petrov.
1974
197520130227
1976 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
1977   [contrib/suse/openssh.spec] Crank version numbers
1978 - (tim) [regress/forward-control.sh] use sh in case login shell is csh.
1979 - (tim) [regress/integrity.sh] shell portability fix.
1980 - (tim) [regress/integrity.sh] keep old solaris awk from hanging.
1981 - (tim) [regress/krl.sh] keep old solaris awk from hanging.
1982
198320130226
1984 - OpenBSD CVS Sync
1985   - djm@cvs.openbsd.org 2013/02/20 08:27:50
1986     [integrity.sh]
1987     Add an option to modpipe that warns if the modification offset it not
1988     reached in it's stream and turn it on for t-integrity. This should catch
1989     cases where the session is not fuzzed for being too short (cf. my last
1990     "oops" commit)
1991 - (djm) [regress/integrity.sh] Run sshd via $SUDO; fixes tinderbox breakage
1992   for UsePAM=yes configuration
1993
199420130225
1995 - (dtucker) [configure.ac ssh-gss.h] bz#2073: additional #includes needed
1996   to use Solaris native GSS libs.  Patch from Pierre Ossman.
1997
199820130223
1999 - (djm) [configure.ac includes.h loginrec.c mux.c sftp.c] Prefer
2000   bsd/libutil.h to libutil.h to avoid deprecation warnings on Ubuntu.
2001   ok tim
2002
200320130222
2004 - (dtucker) [Makefile.in configure.ac] bz#2072: don't link krb5 libs to
2005   ssh(1) since they're not needed.  Patch from Pierre Ossman, ok djm.
2006 - (dtucker) [configure.ac] bz#2073: look for Solaris' differently-named
2007   libgss too.  Patch from Pierre Ossman, ok djm.
2008 - (djm) [configure.ac sandbox-seccomp-filter.c] Support for Linux
2009   seccomp-bpf sandbox on ARM. Patch from shawnlandden AT gmail.com;
2010   ok dtucker
2011
201220130221
2013 - (tim) [regress/forward-control.sh] shell portability fix.
2014
201520130220
2016 - (tim) [regress/cipher-speed.sh regress/try-ciphers.sh] shell portability fix.
2017 - (tim) [krl.c Makefile.in regress/Makefile regress/modpipe.c] remove unneeded
2018   err.h include from krl.c. Additional portability fixes for modpipe. OK djm
2019 - OpenBSD CVS Sync
2020   - djm@cvs.openbsd.org 2013/02/20 08:27:50
2021     [regress/integrity.sh regress/modpipe.c]
2022     Add an option to modpipe that warns if the modification offset it not
2023     reached in it's stream and turn it on for t-integrity. This should catch
2024     cases where the session is not fuzzed for being too short (cf. my last
2025     "oops" commit)
2026   - djm@cvs.openbsd.org 2013/02/20 08:29:27
2027     [regress/modpipe.c]
2028     s/Id/OpenBSD/ in RCS tag
2029
203020130219
2031 - OpenBSD CVS Sync
2032   - djm@cvs.openbsd.org 2013/02/18 22:26:47
2033     [integrity.sh]
2034     crank the offset yet again; it was still fuzzing KEX one of Darren's
2035     portable test hosts at 2800
2036   - djm@cvs.openbsd.org 2013/02/19 02:14:09
2037     [integrity.sh]
2038     oops, forgot to increase the output of the ssh command to ensure that
2039     we actually reach $offset
2040 - (djm) [regress/integrity.sh] Skip SHA2-based MACs on configurations that
2041   lack support for SHA2.
2042 - (djm) [regress/modpipe.c] Add local err, and errx functions for platforms
2043   that do not have them.
2044
204520130217
2046 - OpenBSD CVS Sync
2047   - djm@cvs.openbsd.org 2013/02/17 23:16:55
2048     [integrity.sh]
2049     make the ssh command generates some output to ensure that there are at
2050     least offset+tries bytes in the stream.
2051
205220130216
2053 - OpenBSD CVS Sync
2054   - djm@cvs.openbsd.org 2013/02/16 06:08:45
2055     [integrity.sh]
2056     make sure the fuzz offset is actually past the end of KEX for all KEX
2057     types. diffie-hellman-group-exchange-sha256 requires an offset around
2058     2700. Noticed via test failures in portable OpenSSH on platforms that
2059     lack ECC and this the more byte-frugal ECDH KEX algorithms.
2060
206120130215
2062 - (djm) [contrib/suse/rc.sshd] Use SSHD_BIN consistently; bz#2056 from
2063   Iain Morgan
2064 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
2065   Use getpgrp() if we don't have getpgid() (old BSDs, maybe others).
2066 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoull.c
2067   openbsd-compat/openbsd-compat.h] Add strtoull to compat library for
2068   platforms that don't have it.
2069 - (dtucker) [openbsd-compat/openbsd-compat.h] Add prototype for strtoul,
2070   group strto* function prototypes together.
2071 - (dtucker) [openbsd-compat/bsd-misc.c] Handle the case where setpgrp() takes
2072   an argument.  Pointed out by djm.
2073 - (djm) OpenBSD CVS Sync
2074   - djm@cvs.openbsd.org 2013/02/14 21:35:59
2075     [auth2-pubkey.c]
2076     Correct error message that had a typo and was logging the wrong thing;
2077     patch from Petr Lautrbach
2078   - dtucker@cvs.openbsd.org 2013/02/15 00:21:01
2079     [sshconnect2.c]
2080     Warn more loudly if an IdentityFile provided by the user cannot be read.
2081     bz #1981, ok djm@
2082
208320130214
2084 - (djm) [regress/krl.sh] Don't use ecdsa keys in environment that lack ECC.
2085 - (djm) [regress/krl.sh] typo; found by Iain Morgan
2086 - (djm) [regress/integrity.sh] Start fuzzing from offset 2500 (instead
2087   of 2300) to avoid clobbering the end of (non-MAC'd) KEX. Verified by
2088   Iain Morgan
2089
209020130212
2091 - (djm) OpenBSD CVS Sync
2092   - djm@cvs.openbsd.org 2013/01/24 21:45:37
2093     [krl.c]
2094     fix handling of (unused) KRL signatures; skip string in correct buffer
2095   - djm@cvs.openbsd.org 2013/01/24 22:08:56
2096     [krl.c]
2097     skip serial lookup when cert's serial number is zero
2098   - krw@cvs.openbsd.org 2013/01/25 05:00:27
2099     [krl.c]
2100     Revert last. Breaks due to likely typo. Let djm@ fix later.
2101     ok djm@ via dlg@
2102   - djm@cvs.openbsd.org 2013/01/25 10:22:19
2103     [krl.c]
2104     redo last commit without the vi-vomit that snuck in:
2105     skip serial lookup when cert's serial number is zero
2106     (now with 100% better comment)
2107   - djm@cvs.openbsd.org 2013/01/26 06:11:05
2108     [Makefile.in acss.c acss.h cipher-acss.c cipher.c]
2109     [openbsd-compat/openssl-compat.h]
2110     remove ACSS, now that it is gone from libcrypto too
2111   - djm@cvs.openbsd.org 2013/01/27 10:06:12
2112     [krl.c]
2113     actually use the xrealloc() return value; spotted by xi.wang AT gmail.com
2114   - dtucker@cvs.openbsd.org 2013/02/06 00:20:42
2115     [servconf.c sshd_config sshd_config.5]
2116     Change default of MaxStartups to 10:30:100 to start doing random early
2117     drop at 10 connections up to 100 connections.  This will make it harder
2118     to DoS as CPUs have come a long way since the original value was set
2119     back in 2000.  Prompted by nion at debian org, ok markus@
2120   - dtucker@cvs.openbsd.org 2013/02/06 00:22:21
2121     [auth.c]
2122     Fix comment, from jfree.e1 at gmail
2123   - djm@cvs.openbsd.org 2013/02/08 00:41:12
2124     [sftp.c]
2125     fix NULL deref when built without libedit and control characters
2126     entered as command; debugging and patch from Iain Morgan an
2127     Loganaden Velvindron in bz#1956
2128   - markus@cvs.openbsd.org 2013/02/10 21:19:34
2129     [version.h]
2130     openssh 6.2
2131   - djm@cvs.openbsd.org 2013/02/10 23:32:10
2132     [ssh-keygen.c]
2133     append to moduli file when screening candidates rather than overwriting.
2134     allows resumption of interrupted screen; patch from Christophe Garault
2135     in bz#1957; ok dtucker@
2136   - djm@cvs.openbsd.org 2013/02/10 23:35:24
2137     [packet.c]
2138     record "Received disconnect" messages at ERROR rather than INFO priority,
2139     since they are abnormal and result in a non-zero ssh exit status; patch
2140     from Iain Morgan in bz#2057; ok dtucker@
2141   - dtucker@cvs.openbsd.org 2013/02/11 21:21:58
2142     [sshd.c]
2143     Add openssl version to debug output similar to the client.  ok markus@
2144   - djm@cvs.openbsd.org 2013/02/11 23:58:51
2145     [regress/try-ciphers.sh]
2146     remove acss here too
2147 - (djm) [regress/try-ciphers.sh] clean up CVS merge botch
2148
214920130211
2150 - (djm) [configure.ac openbsd-compat/openssl-compat.h] Repair build on old
2151   libcrypto that lacks EVP_CIPHER_CTX_ctrl
2152
215320130208
2154 - (djm) [contrib/redhat/sshd.init] treat RETVAL as an integer;
2155   patch from Iain Morgan in bz#2059
2156 - (dtucker) [configure.ac openbsd-compat/sys-tree.h] Test if compiler allows
2157   __attribute__ on return values and work around if necessary.  ok djm@
2158
215920130207
2160 - (djm) [configure.ac] Don't probe seccomp capability of running kernel
2161   at configure time; the seccomp sandbox will fall back to rlimit at
2162   runtime anyway. Patch from plautrba AT redhat.com in bz#2011
2163
216420130120
2165 - (djm) [cipher-aes.c cipher-ctr.c openbsd-compat/openssl-compat.h]
2166   Move prototypes for replacement ciphers to openssl-compat.h; fix EVP
2167   prototypes for openssl-1.0.0-fips.
2168 - (djm) OpenBSD CVS Sync
2169   - jmc@cvs.openbsd.org 2013/01/18 07:57:47
2170     [ssh-keygen.1]
2171     tweak previous;
2172   - jmc@cvs.openbsd.org 2013/01/18 07:59:46
2173     [ssh-keygen.c]
2174     -u before -V in usage();
2175   - jmc@cvs.openbsd.org 2013/01/18 08:00:49
2176     [sshd_config.5]
2177     tweak previous;
2178   - jmc@cvs.openbsd.org 2013/01/18 08:39:04
2179     [ssh-keygen.1]
2180     add -Q to the options list; ok djm
2181   - jmc@cvs.openbsd.org 2013/01/18 21:48:43
2182     [ssh-keygen.1]
2183     command-line (adj.) -> command line (n.);
2184   - jmc@cvs.openbsd.org 2013/01/19 07:13:25
2185     [ssh-keygen.1]
2186     fix some formatting; ok djm
2187   - markus@cvs.openbsd.org 2013/01/19 12:34:55
2188     [krl.c]
2189     RB_INSERT does not remove existing elments; ok djm@
2190 - (djm) [openbsd-compat/sys-tree.h] Sync with OpenBSD. krl.c needs newer
2191   version.
2192 - (djm) [regress/krl.sh] replacement for jot; most platforms lack it
2193
219420130118
2195 - (djm) OpenBSD CVS Sync
2196   - djm@cvs.openbsd.org 2013/01/17 23:00:01
2197     [auth.c key.c key.h ssh-keygen.1 ssh-keygen.c sshd_config.5]
2198     [krl.c krl.h PROTOCOL.krl]
2199     add support for Key Revocation Lists (KRLs). These are a compact way to
2200     represent lists of revoked keys and certificates, taking as little as
2201     a single bit of incremental cost to revoke a certificate by serial number.
2202     KRLs are loaded via the existing RevokedKeys sshd_config option.
2203     feedback and ok markus@
2204   - djm@cvs.openbsd.org 2013/01/18 00:45:29
2205     [regress/Makefile regress/cert-userkey.sh regress/krl.sh]
2206     Tests for Key Revocation Lists (KRLs)
2207   - djm@cvs.openbsd.org 2013/01/18 03:00:32
2208     [krl.c]
2209     fix KRL generation bug for list sections
2210
221120130117
2212 - (djm) [regress/cipher-speed.sh regress/integrity.sh regress/try-ciphers.sh]
2213   check for GCM support before testing GCM ciphers.
2214
221520130112
2216 - (djm) OpenBSD CVS Sync
2217   - djm@cvs.openbsd.org 2013/01/12 11:22:04
2218     [cipher.c]
2219     improve error message for integrity failure in AES-GCM modes; ok markus@
2220   - djm@cvs.openbsd.org 2013/01/12 11:23:53
2221     [regress/cipher-speed.sh regress/integrity.sh regress/try-ciphers.sh]
2222     test AES-GCM modes; feedback markus@
2223 - (djm) [regress/integrity.sh] repair botched merge
2224
222520130109
2226 - (djm) OpenBSD CVS Sync
2227   - dtucker@cvs.openbsd.org 2012/12/14 05:26:43
2228     [auth.c]
2229     use correct string in error message; from rustybsd at gmx.fr
2230   - djm@cvs.openbsd.org 2013/01/02 00:32:07
2231     [clientloop.c mux.c]
2232     channel_setup_local_fwd_listener() returns 0 on failure, not -ve
2233     bz#2055 reported by mathieu.lacage AT gmail.com
2234   - djm@cvs.openbsd.org 2013/01/02 00:33:49
2235     [PROTOCOL.agent]
2236     correct format description for SSH_AGENTC_ADD_RSA_ID_CONSTRAINED
2237     bz#2051 from david AT lechnology.com
2238   - djm@cvs.openbsd.org 2013/01/03 05:49:36
2239     [servconf.h]
2240     add a couple of ServerOptions members that should be copied to the privsep
2241     child (for consistency, in this case they happen only to be accessed in
2242     the monitor); ok dtucker@
2243   - djm@cvs.openbsd.org 2013/01/03 12:49:01
2244     [PROTOCOL]
2245     fix description of MAC calculation for EtM modes; ok markus@
2246   - djm@cvs.openbsd.org 2013/01/03 12:54:49
2247     [sftp-server.8 sftp-server.c]
2248     allow specification of an alternate start directory for sftp-server(8)
2249     "I like this" markus@
2250   - djm@cvs.openbsd.org 2013/01/03 23:22:58
2251     [ssh-keygen.c]
2252     allow fingerprinting of keys hosted in PKCS#11 tokens: ssh-keygen -lD ...
2253     ok markus@
2254   - jmc@cvs.openbsd.org 2013/01/04 19:26:38
2255     [sftp-server.8 sftp-server.c]
2256     sftp-server.8: add argument name to -d
2257     sftp-server.c: add -d to usage()
2258     ok djm
2259   - markus@cvs.openbsd.org 2013/01/08 18:49:04
2260     [PROTOCOL authfile.c cipher.c cipher.h kex.c kex.h monitor_wrap.c]
2261     [myproposal.h packet.c ssh_config.5 sshd_config.5]
2262     support AES-GCM as defined in RFC 5647 (but with simpler KEX handling)
2263     ok and feedback djm@
2264   - djm@cvs.openbsd.org 2013/01/09 05:40:17
2265     [ssh-keygen.c]
2266     correctly initialise fingerprint type for fingerprinting PKCS#11 keys
2267 - (djm) [cipher.c configure.ac openbsd-compat/openssl-compat.h]
2268   Fix merge botch, automatically detect AES-GCM in OpenSSL, move a little
2269   cipher compat code to openssl-compat.h
2270
227120121217
2272 - (dtucker) [Makefile.in] Add some scaffolding so that the new regress
2273   tests will work with VPATH directories.
2274
227520121213
2276 - (djm) OpenBSD CVS Sync
2277   - markus@cvs.openbsd.org 2012/12/12 16:45:52
2278     [packet.c]
2279     reset incoming_packet buffer for each new packet in EtM-case, too;
2280     this happens if packets are parsed only parially (e.g. ignore
2281     messages sent when su/sudo turn off echo); noted by sthen/millert
2282   - naddy@cvs.openbsd.org 2012/12/12 16:46:10
2283     [cipher.c]
2284     use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolled
2285     counter mode code; ok djm@
2286 - (djm) [configure.ac cipher-ctr.c] Adapt EVP AES CTR change to retain our
2287   compat code for older OpenSSL
2288 - (djm) [cipher.c] Fix missing prototype for compat code
2289
229020121212
2291 - (djm) OpenBSD CVS Sync
2292   - markus@cvs.openbsd.org 2012/12/11 22:16:21
2293     [monitor.c]
2294     drain the log messages after receiving the keystate from the unpriv
2295     child. otherwise it might block while sending. ok djm@
2296   - markus@cvs.openbsd.org 2012/12/11 22:31:18
2297     [PROTOCOL authfile.c cipher.c cipher.h kex.h mac.c myproposal.h]
2298     [packet.c ssh_config.5 sshd_config.5]
2299     add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithms
2300     that change the packet format and compute the MAC over the encrypted
2301     message (including the packet size) instead of the plaintext data;
2302     these EtM modes are considered more secure and used by default.
2303     feedback and ok djm@
2304   - sthen@cvs.openbsd.org 2012/12/11 22:51:45
2305     [mac.c]
2306     fix typo, s/tem/etm in hmac-ripemd160-tem. ok markus@
2307   - markus@cvs.openbsd.org 2012/12/11 22:32:56
2308     [regress/try-ciphers.sh]
2309     add etm modes
2310   - markus@cvs.openbsd.org 2012/12/11 22:42:11
2311     [regress/Makefile regress/modpipe.c regress/integrity.sh]
2312     test the integrity of the packets; with djm@
2313   - markus@cvs.openbsd.org 2012/12/11 23:12:13
2314     [try-ciphers.sh]
2315     add hmac-ripemd160-etm@openssh.com
2316 - (djm) [mac.c] fix merge botch
2317 - (djm) [regress/Makefile regress/integrity.sh] Make the integrity.sh test
2318   work on platforms without 'jot'
2319 - (djm) [regress/integrity.sh] Fix awk quoting, packet length skip
2320 - (djm) [regress/Makefile] fix t-exec rule
2321
232220121207
2323 - (dtucker) OpenBSD CVS Sync
2324   - dtucker@cvs.openbsd.org 2012/12/06 06:06:54
2325     [regress/keys-command.sh]
2326     Fix some problems with the keys-command test:
2327      - use string comparison rather than numeric comparison
2328      - check for existing KEY_COMMAND file and don't clobber if it exists
2329      - clean up KEY_COMMAND file if we do create it.
2330      - check that KEY_COMMAND is executable (which it won't be if eg /var/run
2331        is mounted noexec).
2332     ok djm.
2333   - jmc@cvs.openbsd.org 2012/12/03 08:33:03
2334     [ssh-add.1 sshd_config.5]
2335     tweak previous;
2336   - markus@cvs.openbsd.org 2012/12/05 15:42:52
2337     [ssh-add.c]
2338     prevent double-free of comment; ok djm@
2339   - dtucker@cvs.openbsd.org 2012/12/07 01:51:35
2340     [serverloop.c]
2341     Cast signal to int for logging.  A no-op on openbsd (they're always ints)
2342     but will prevent warnings in portable.  ok djm@
2343
234420121205
2345 - (tim) [defines.h] Some platforms are missing ULLONG_MAX. Feedback djm@.
2346
234720121203
2348 - (djm) [openbsd-compat/sys-queue.h] Sync with OpenBSD to get
2349   TAILQ_FOREACH_SAFE needed for upcoming changes.
2350 - (djm) OpenBSD CVS Sync
2351   - djm@cvs.openbsd.org 2012/12/02 20:26:11
2352     [ssh_config.5 sshconnect2.c]
2353     Make IdentitiesOnly apply to keys obtained from a PKCS11Provider.
2354     This allows control of which keys are offered from tokens using
2355     IdentityFile. ok markus@
2356   - djm@cvs.openbsd.org 2012/12/02 20:42:15
2357     [ssh-add.1 ssh-add.c]
2358     make deleting explicit keys "ssh-add -d" symmetric with adding keys -
2359     try to delete the corresponding certificate too and respect the -k option
2360     to allow deleting of the key only; feedback and ok markus@
2361   - djm@cvs.openbsd.org 2012/12/02 20:46:11
2362     [auth-options.c channels.c servconf.c servconf.h serverloop.c session.c]
2363     [sshd_config.5]
2364     make AllowTcpForwarding accept "local" and "remote" in addition to its
2365     current "yes"/"no" to allow the server to specify whether just local or
2366     remote TCP forwarding is enabled. ok markus@
2367   - dtucker@cvs.openbsd.org 2012/10/05 02:20:48
2368     [regress/cipher-speed.sh regress/try-ciphers.sh]
2369     Add umac-128@openssh.com to the list of MACs to be tested
2370   - djm@cvs.openbsd.org 2012/10/19 05:10:42
2371     [regress/cert-userkey.sh]
2372     include a serial number when generating certs
2373   - djm@cvs.openbsd.org 2012/11/22 22:49:30
2374     [regress/Makefile regress/keys-command.sh]
2375     regress for AuthorizedKeysCommand; hints from markus@
2376   - djm@cvs.openbsd.org 2012/12/02 20:47:48
2377     [Makefile regress/forward-control.sh]
2378     regress for AllowTcpForwarding local/remote; ok markus@
2379   - djm@cvs.openbsd.org 2012/12/03 00:14:06
2380     [auth2-chall.c ssh-keygen.c]
2381     Fix compilation with -Wall -Werror (trivial type fixes)
2382 - (djm) [configure.ac] Turn on -g for gcc compilers. Helps pre-installation
2383   debugging. ok dtucker@
2384 - (djm) [configure.ac] Revert previous. configure.ac already does this
2385   for us.
2386
238720121114
2388 - (djm) OpenBSD CVS Sync
2389   - djm@cvs.openbsd.org 2012/11/14 02:24:27
2390     [auth2-pubkey.c]
2391     fix username passed to helper program
2392     prepare stdio fds before closefrom()
2393     spotted by landry@
2394   - djm@cvs.openbsd.org 2012/11/14 02:32:15
2395     [ssh-keygen.c]
2396     allow the full range of unsigned serial numbers; 'fine' deraadt@
2397   - djm@cvs.openbsd.org 2012/12/02 20:34:10
2398     [auth.c auth.h auth1.c auth2-chall.c auth2-gss.c auth2-jpake.c auth2.c]
2399     [monitor.c monitor.h]
2400     Fixes logging of partial authentication when privsep is enabled
2401     Previously, we recorded "Failed xxx" since we reset authenticated before
2402     calling auth_log() in auth2.c. This adds an explcit "Partial" state.
2403
2404     Add a "submethod" to auth_log() to report which submethod is used
2405     for keyboard-interactive.
2406
2407     Fix multiple authentication when one of the methods is
2408     keyboard-interactive.
2409
2410     ok markus@
2411   - dtucker@cvs.openbsd.org 2012/10/05 02:05:30
2412     [regress/multiplex.sh]
2413     Use 'kill -0' to test for the presence of a pid since it's more portable
2414
241520121107
2416 - (djm) OpenBSD CVS Sync
2417   - eric@cvs.openbsd.org 2011/11/28 08:46:27
2418     [moduli.5]
2419     fix formula
2420     ok djm@
2421   - jmc@cvs.openbsd.org 2012/09/26 17:34:38
2422     [moduli.5]
2423     last stage of rfc changes, using consistent Rs/Re blocks, and moving the
2424     references into a STANDARDS section;
2425
242620121105
2427 - (dtucker) [uidswap.c openbsd-compat/Makefile.in
2428   openbsd-compat/bsd-setres_id.c openbsd-compat/bsd-setres_id.h
2429   openbsd-compat/openbsd-compat.h]  Move the fallback code for setting uids
2430   and gids from uidswap.c to the compat library, which allows it to work with
2431   the new setresuid calls in auth2-pubkey.  with tim@, ok djm@
2432 - (dtucker) [auth2-pubkey.c] wrap paths.h in an ifdef for platforms that
2433   don't have it.  Spotted by tim@.
2434
243520121104
2436 - (djm) OpenBSD CVS Sync
2437   - jmc@cvs.openbsd.org 2012/10/31 08:04:50
2438     [sshd_config.5]
2439     tweak previous;
2440   - djm@cvs.openbsd.org 2012/11/04 10:38:43
2441     [auth2-pubkey.c sshd.c sshd_config.5]
2442     Remove default of AuthorizedCommandUser. Administrators are now expected
2443     to explicitly specify a user. feedback and ok markus@
2444   - djm@cvs.openbsd.org 2012/11/04 11:09:15
2445     [auth.h auth1.c auth2.c monitor.c servconf.c servconf.h sshd.c]
2446     [sshd_config.5]
2447     Support multiple required authentication via an AuthenticationMethods
2448     option. This option lists one or more comma-separated lists of
2449     authentication method names. Successful completion of all the methods in
2450     any list is required for authentication to complete;
2451     feedback and ok markus@
2452
245320121030
2454 - (djm) OpenBSD CVS Sync
2455   - markus@cvs.openbsd.org 2012/10/05 12:34:39
2456     [sftp.c]
2457     fix signed vs unsigned warning; feedback & ok: djm@
2458   - djm@cvs.openbsd.org 2012/10/30 21:29:55
2459     [auth-rsa.c auth.c auth.h auth2-pubkey.c servconf.c servconf.h]
2460     [sshd.c sshd_config sshd_config.5]
2461     new sshd_config option AuthorizedKeysCommand to support fetching
2462     authorized_keys from a command in addition to (or instead of) from
2463     the filesystem. The command is run as the target server user unless
2464     another specified via a new AuthorizedKeysCommandUser option.
2465
2466     patch originally by jchadima AT redhat.com, reworked by me; feedback
2467     and ok markus@
2468
246920121019
2470 - (tim) [buildpkg.sh.in] Double up on some backslashes so they end up in
2471   the generated file as intended.
2472
247320121005
2474 - (dtucker) OpenBSD CVS Sync
2475   - djm@cvs.openbsd.org 2012/09/17 09:54:44
2476     [sftp.c]
2477     an XXX for later
2478   - markus@cvs.openbsd.org 2012/09/17 13:04:11
2479     [packet.c]
2480     clear old keys on rekeing; ok djm
2481   - dtucker@cvs.openbsd.org 2012/09/18 10:36:12
2482     [sftp.c]
2483     Add bounds check on sftp tab-completion.  Part of a patch from from
2484     Jean-Marc Robert via tech@, ok djm
2485   - dtucker@cvs.openbsd.org 2012/09/21 10:53:07
2486     [sftp.c]
2487     Fix improper handling of absolute paths when PWD is part of the completed
2488     path.  Patch from Jean-Marc Robert via tech@, ok djm.
2489  - dtucker@cvs.openbsd.org 2012/09/21 10:55:04
2490     [sftp.c]
2491     Fix handling of filenames containing escaped globbing characters and
2492     escape "#" and "*".  Patch from Jean-Marc Robert via tech@, ok djm.
2493   - jmc@cvs.openbsd.org 2012/09/26 16:12:13
2494     [ssh.1]
2495     last stage of rfc changes, using consistent Rs/Re blocks, and moving the
2496     references into a STANDARDS section;
2497   - naddy@cvs.openbsd.org 2012/10/01 13:59:51
2498     [monitor_wrap.c]
2499     pasto; ok djm@
2500   - djm@cvs.openbsd.org 2012/10/02 07:07:45
2501     [ssh-keygen.c]
2502     fix -z option, broken in revision 1.215
2503   - markus@cvs.openbsd.org 2012/10/04 13:21:50
2504     [myproposal.h ssh_config.5 umac.h sshd_config.5 ssh.1 sshd.8 mac.c]
2505     add umac128 variant; ok djm@ at n2k12
2506  - dtucker@cvs.openbsd.org 2012/09/06 04:11:07
2507     [regress/try-ciphers.sh]
2508     Restore missing space.  (Id sync only).
2509   - dtucker@cvs.openbsd.org 2012/09/09 11:51:25
2510     [regress/multiplex.sh]
2511     Add test for ssh -Ostop
2512   - dtucker@cvs.openbsd.org 2012/09/10 00:49:21
2513     [regress/multiplex.sh]
2514     Log -O cmd output to the log file and make logging consistent with the
2515     other tests.  Test clean shutdown of an existing channel when testing
2516     "stop".
2517   - dtucker@cvs.openbsd.org 2012/09/10 01:51:19
2518     [regress/multiplex.sh]
2519     use -Ocheck and waiting for completions by PID to make multiplexing test
2520     less racy and (hopefully) more reliable on slow hardware.
2521 - [Makefile umac.c] Add special-case target to build umac128.o.
2522 - [umac.c] Enforce allowed umac output sizes.  From djm@.
2523 - [Makefile.in] "Using $< in a non-suffix rule context is a GNUmake idiom".
2524
252520120917
2526 - (dtucker) OpenBSD CVS Sync
2527   - dtucker@cvs.openbsd.org 2012/09/13 23:37:36
2528     [servconf.c]
2529     Fix comment line length
2530   - markus@cvs.openbsd.org 2012/09/14 16:51:34
2531     [sshconnect.c]
2532     remove unused variable
2533
253420120907
2535 - (dtucker) OpenBSD CVS Sync
2536   - dtucker@cvs.openbsd.org 2012/09/06 09:50:13
2537     [clientloop.c]
2538     Make the escape command help (~?) context sensitive so that only commands
2539     that will work in the current session are shown.  ok markus@
2540   - jmc@cvs.openbsd.org 2012/09/06 13:57:42
2541     [ssh.1]
2542     missing letter in previous;
2543   - dtucker@cvs.openbsd.org 2012/09/07 00:30:19
2544     [clientloop.c]
2545     Print '^Z' instead of a raw ^Z when the sequence is not supported.  ok djm@
2546   - dtucker@cvs.openbsd.org 2012/09/07 01:10:21
2547     [clientloop.c]
2548     Merge escape help text for ~v and ~V; ok djm@
2549   - dtucker@cvs.openbsd.org 2012/09/07 06:34:21
2550     [clientloop.c]
2551     when muxmaster is run with -N, make it shut down gracefully when a client
2552     sends it "-O stop" rather than hanging around (bz#1985).  ok djm@
2553
255420120906
2555 - (dtucker) OpenBSD CVS Sync
2556   - jmc@cvs.openbsd.org 2012/08/15 18:25:50
2557     [ssh-keygen.1]
2558     a little more info on certificate validity;
2559     requested by Ross L Richardson, and provided by djm
2560   - dtucker@cvs.openbsd.org 2012/08/17 00:45:45
2561     [clientloop.c clientloop.h mux.c]
2562     Force a clean shutdown of ControlMaster client sessions when the ~. escape
2563     sequence is used.  This means that ~. should now work in mux clients even
2564     if the server is no longer responding.  Found by tedu, ok djm.
2565   - djm@cvs.openbsd.org 2012/08/17 01:22:56
2566     [kex.c]
2567     add some comments about better handling first-KEX-follows notifications
2568     from the server. Nothing uses these right now. No binary change
2569   - djm@cvs.openbsd.org 2012/08/17 01:25:58
2570     [ssh-keygen.c]
2571     print details of which host lines were deleted when using
2572     "ssh-keygen -R host"; ok markus@
2573   - djm@cvs.openbsd.org 2012/08/17 01:30:00
2574     [compat.c sshconnect.c]
2575     Send client banner immediately, rather than waiting for the server to
2576     move first for SSH protocol 2 connections (the default). Patch based on
2577     one in bz#1999 by tls AT panix.com, feedback dtucker@ ok markus@
2578   - dtucker@cvs.openbsd.org 2012/09/06 04:37:39
2579     [clientloop.c log.c ssh.1 log.h]
2580     Add ~v and ~V escape sequences to raise and lower the logging level
2581     respectively. Man page help from jmc, ok deraadt jmc
2582
258320120830
2584 - (dtucker) [moduli] Import new moduli file.
2585
258620120828
2587 - (djm) Release openssh-6.1
2588
258920120828
2590 - (dtucker) [openbsd-compat/bsd-cygwin_util.h] define WIN32_LEAN_AND_MEAN
2591   for compatibility with future mingw-w64 headers.  Patch from vinschen at
2592   redhat com.
2593
259420120822
2595 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2596   [contrib/suse/openssh.spec] Update version numbers
2597
259820120731
2599 - (djm) OpenBSD CVS Sync
2600   - jmc@cvs.openbsd.org 2012/07/06 06:38:03
2601     [ssh-keygen.c]
2602     missing full stop in usage();
2603   - djm@cvs.openbsd.org 2012/07/10 02:19:15
2604     [servconf.c servconf.h sshd.c sshd_config]
2605     Turn on systrace sandboxing of pre-auth sshd by default for new installs
2606     by shipping a config that overrides the current UsePrivilegeSeparation=yes
2607     default. Make it easier to flip the default in the future by adding too.
2608     prodded markus@ feedback dtucker@ "get it in" deraadt@
2609   - dtucker@cvs.openbsd.org 2012/07/13 01:35:21
2610     [servconf.c]
2611     handle long comments in config files better.  bz#2025, ok markus
2612   - markus@cvs.openbsd.org 2012/07/22 18:19:21
2613     [version.h]
2614     openssh 6.1
2615
261620120720
2617 - (dtucker) Import regened moduli file.
2618
261920120706
2620 - (djm) [sandbox-seccomp-filter.c] fallback to rlimit if seccomp filter is
2621   not available. Allows use of sshd compiled on host with a filter-capable
2622   kernel on hosts that lack the support. bz#2011 ok dtucker@
2623 - (djm) [configure.ac] Recursively expand $(bindir) to ensure it has no
2624   unexpanded $(prefix) embedded. bz#2007 patch from nix-corp AT
2625   esperi.org.uk; ok dtucker@
2626- (djm) OpenBSD CVS Sync
2627   - dtucker@cvs.openbsd.org 2012/07/06 00:41:59
2628     [moduli.c ssh-keygen.1 ssh-keygen.c]
2629     Add options to specify starting line number and number of lines to process
2630     when screening moduli candidates.  This allows processing of different
2631     parts of a candidate moduli file in parallel.  man page help jmc@, ok djm@
2632   - djm@cvs.openbsd.org 2012/07/06 01:37:21
2633     [mux.c]
2634     fix memory leak of passed-in environment variables and connection
2635     context when new session message is malformed; bz#2003 from Bert.Wesarg
2636     AT googlemail.com
2637   - djm@cvs.openbsd.org 2012/07/06 01:47:38
2638     [ssh.c]
2639     move setting of tty_flag to after config parsing so RequestTTY options
2640     are correctly picked up. bz#1995 patch from przemoc AT gmail.com;
2641     ok dtucker@
2642
264320120704
2644 - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] Add setlinebuf for
2645   platforms that don't have it.  "looks good" tim@
2646
264720120703
2648 - (dtucker) [configure.ac] Detect platforms that can't use select(2) with
2649   setrlimit(RLIMIT_NOFILE, rl_zero) and disable the rlimit sandbox on those.
2650 - (dtucker) [configure.ac sandbox-rlimit.c] Test whether or not
2651   setrlimit(RLIMIT_FSIZE, rl_zero) and skip it if it's not supported.  Its
2652   benefit is minor, so it's not worth disabling the sandbox if it doesn't
2653   work.
2654
265520120702
2656- (dtucker) OpenBSD CVS Sync
2657   - naddy@cvs.openbsd.org 2012/06/29 13:57:25
2658     [ssh_config.5 sshd_config.5]
2659     match the documented MAC order of preference to the actual one;
2660     ok dtucker@
2661   - markus@cvs.openbsd.org 2012/06/30 14:35:09
2662     [sandbox-systrace.c sshd.c]
2663     fix a during the load of the sandbox policies (child can still make
2664     the read-syscall and wait forever for systrace-answers) by replacing
2665     the read/write synchronisation with SIGSTOP/SIGCONT;
2666     report and help hshoexer@; ok djm@, dtucker@
2667   - dtucker@cvs.openbsd.org 2012/07/02 08:50:03
2668     [ssh.c]
2669     set interactive ToS for forwarded X11 sessions.  ok djm@
2670   - dtucker@cvs.openbsd.org 2012/07/02 12:13:26
2671     [ssh-pkcs11-helper.c sftp-client.c]
2672     fix a couple of "assigned but not used" warnings.  ok markus@
2673   - dtucker@cvs.openbsd.org 2012/07/02 14:37:06
2674     [regress/connect-privsep.sh]
2675     remove exit from end of test since it prevents reporting failure
2676 - (dtucker) [regress/reexec.sh regress/sftp-cmds.sh regress/test-exec.sh]
2677   Move cygwin detection to test-exec and use to skip reexec test on cygwin.
2678 - (dtucker) [regress/test-exec.sh] Correct uname for cygwin/w2k.
2679
268020120629
2681 - OpenBSD CVS Sync
2682   - dtucker@cvs.openbsd.org 2012/06/21 00:16:07
2683     [addrmatch.c]
2684     fix strlcpy truncation check.  from carsten at debian org, ok markus
2685   - dtucker@cvs.openbsd.org 2012/06/22 12:30:26
2686     [monitor.c sshconnect2.c]
2687     remove dead code following 'for (;;)' loops.
2688     From Steve.McClellan at radisys com, ok markus@
2689   - dtucker@cvs.openbsd.org 2012/06/22 14:36:33
2690     [sftp.c]
2691     Remove unused variable leftover from tab-completion changes.
2692     From Steve.McClellan at radisys com, ok markus@
2693   - dtucker@cvs.openbsd.org 2012/06/26 11:02:30
2694     [sandbox-systrace.c]
2695     Add mquery to the list of allowed syscalls for "UsePrivilegeSeparation
2696     sandbox" since malloc now uses it.  From johnw.mail at gmail com.
2697   - dtucker@cvs.openbsd.org 2012/06/28 05:07:45
2698     [mac.c myproposal.h ssh_config.5 sshd_config.5]
2699     Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs since they were removed
2700     from draft6 of the spec and will not be in the RFC when published.  Patch
2701     from mdb at juniper net via bz#2023, ok markus.
2702   - naddy@cvs.openbsd.org 2012/06/29 13:57:25
2703     [ssh_config.5 sshd_config.5]
2704     match the documented MAC order of preference to the actual one; ok dtucker@
2705   - dtucker@cvs.openbsd.org 2012/05/13 01:42:32
2706     [regress/addrmatch.sh]
2707     Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust tests
2708     to match.  Feedback and ok djm@ markus@.
2709   - djm@cvs.openbsd.org 2012/06/01 00:47:35
2710     [regress/multiplex.sh regress/forwarding.sh]
2711     append to rather than truncate test log; bz#2013 from openssh AT
2712     roumenpetrov.info
2713   - djm@cvs.openbsd.org 2012/06/01 00:52:52
2714     [regress/sftp-cmds.sh]
2715     don't delete .* on cleanup due to unintended env expansion; pointed out in
2716     bz#2014 by openssh AT roumenpetrov.info
2717   - dtucker@cvs.openbsd.org 2012/06/26 12:06:59
2718     [regress/connect-privsep.sh]
2719     test sandbox with every malloc option
2720   - dtucker@cvs.openbsd.org 2012/06/28 05:07:45
2721     [regress/try-ciphers.sh regress/cipher-speed.sh]
2722     Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs since they were removed
2723     from draft6 of the spec and will not be in the RFC when published.  Patch
2724     from mdb at juniper net via bz#2023, ok markus.
2725 - (dtucker) [myproposal.h] Remove trailing backslash to fix compile error.
2726 - (dtucker) [key.c] ifdef out sha256 key types on platforms that don't have
2727   the required functions in libcrypto.
2728
272920120628
2730 - (dtucker) [openbsd-compat/getrrsetbyname-ldns.c] bz #2022: prevent null
2731   pointer deref in the client when built with LDNS and using DNSSEC with a
2732   CNAME.  Patch from gregdlg+mr at hochet info.
2733
273420120622
2735 - (dtucker) [contrib/cygwin/ssh-host-config] Ensure that user sshd runs as
2736   can logon as a service.  Patch from vinschen at redhat com.
2737
273820120620
2739 - (djm) OpenBSD CVS Sync
2740   - djm@cvs.openbsd.org 2011/12/02 00:41:56
2741     [mux.c]
2742     fix bz#1948: ssh -f doesn't fork for multiplexed connection.
2743     ok dtucker@
2744   - djm@cvs.openbsd.org 2011/12/04 23:16:12
2745     [mux.c]
2746     revert:
2747     > revision 1.32
2748     > date: 2011/12/02 00:41:56;  author: djm;  state: Exp;  lines: +4 -1
2749     > fix bz#1948: ssh -f doesn't fork for multiplexed connection.
2750     > ok dtucker@
2751     it interacts badly with ControlPersist
2752   - djm@cvs.openbsd.org 2012/01/07 21:11:36
2753     [mux.c]
2754     fix double-free in new session handler
2755     NB. Id sync only
2756   - djm@cvs.openbsd.org 2012/05/23 03:28:28
2757     [dns.c dns.h key.c key.h ssh-keygen.c]
2758     add support for RFC6594 SSHFP DNS records for ECDSA key types.
2759     patch from bugzilla-m67 AT nulld.me in bz#1978; ok + tweak markus@
2760     (Original authors Ondřej Surý,  Ondřej Caletka and Daniel Black)
2761   - djm@cvs.openbsd.org 2012/06/01 00:49:35
2762     [PROTOCOL.mux]
2763     correct types of port numbers (integers, not strings); bz#2004 from
2764     bert.wesarg AT googlemail.com
2765   - djm@cvs.openbsd.org 2012/06/01 01:01:22
2766     [mux.c]
2767     fix memory leak when mux socket creation fails; bz#2002 from bert.wesarg
2768     AT googlemail.com
2769   - dtucker@cvs.openbsd.org 2012/06/18 11:43:53
2770     [jpake.c]
2771     correct sizeof usage.  patch from saw at online.de, ok deraadt
2772   - dtucker@cvs.openbsd.org 2012/06/18 11:49:58
2773     [ssh_config.5]
2774     RSA instead of DSA twice.  From Steve.McClellan at radisys com
2775   - dtucker@cvs.openbsd.org 2012/06/18 12:07:07
2776     [ssh.1 sshd.8]
2777     Remove mention of 'three' key files since there are now four.  From
2778     Steve.McClellan at radisys com.
2779   - dtucker@cvs.openbsd.org 2012/06/18 12:17:18
2780     [ssh.1]
2781     Clarify description of -W.  Noted by Steve.McClellan at radisys com,
2782     ok jmc
2783   - markus@cvs.openbsd.org 2012/06/19 18:25:28
2784     [servconf.c servconf.h sshd_config.5]
2785     sshd_config: extend Match to allow AcceptEnv and {Allow,Deny}{Users,Groups}
2786     this allows 'Match LocalPort 1022' combined with 'AllowUser bauer'
2787     ok djm@ (back in March)
2788   - jmc@cvs.openbsd.org 2012/06/19 21:35:54
2789     [sshd_config.5]
2790     tweak previous; ok markus
2791   - djm@cvs.openbsd.org 2012/06/20 04:42:58
2792     [clientloop.c serverloop.c]
2793     initialise accept() backoff timer to avoid EINVAL from select(2) in
2794     rekeying
2795
279620120519
2797 - (dtucker) [configure.ac] bz#2010: fix non-portable shell construct.  Patch
2798   from cjwatson at debian org.
2799 - (dtucker) [configure.ac contrib/Makefile] bz#1996: use AC_PATH_TOOL to find
2800   pkg-config so it does the right thing when cross-compiling.  Patch from
2801   cjwatson at debian org.
2802- (dtucker) OpenBSD CVS Sync
2803   - dtucker@cvs.openbsd.org 2012/05/13 01:42:32
2804     [servconf.h servconf.c sshd.8 sshd.c auth.c sshd_config.5]
2805     Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust tests
2806     to match.  Feedback and ok djm@ markus@.
2807   - dtucker@cvs.openbsd.org 2012/05/19 06:30:30
2808     [sshd_config.5]
2809     Document PermitOpen none.  bz#2001, patch from Loganaden Velvindron
2810
281120120504
2812 - (dtucker) [configure.ac] Include <sys/param.h> rather than <sys/types.h>
2813   to fix building on some plaforms.  Fom bowman at math utah edu and
2814   des at des no.
2815
281620120427
2817 - (dtucker) [regress/addrmatch.sh] skip tests when running on a non-ipv6
2818   platform rather than exiting early, so that we still clean up and return
2819   success or failure to test-exec.sh
2820
282120120426
2822 - (djm) [auth-passwd.c] Handle crypt() returning NULL; from Paul Wouters
2823   via Niels
2824 - (djm) [auth-krb5.c] Save errno across calls that might modify it;
2825   ok dtucker@
2826
282720120423
2828 - OpenBSD CVS Sync
2829   - djm@cvs.openbsd.org 2012/04/23 08:18:17
2830     [channels.c]
2831     fix function proto/source mismatch
2832
283320120422
2834 - OpenBSD CVS Sync
2835   - djm@cvs.openbsd.org 2012/02/29 11:21:26
2836     [ssh-keygen.c]
2837     allow conversion of RSA1 keys to public PEM and PKCS8; "nice" markus@
2838   - guenther@cvs.openbsd.org 2012/03/15 03:10:27
2839     [session.c]
2840     root should always be excluded from the test for /etc/nologin instead
2841     of having it always enforced even when marked as ignorenologin.  This
2842     regressed when the logic was incompletely flipped around in rev 1.251
2843     ok halex@ millert@
2844   - djm@cvs.openbsd.org 2012/03/28 07:23:22
2845     [PROTOCOL.certkeys]
2846     explain certificate extensions/crit split rationale. Mention requirement
2847     that each appear at most once per cert.
2848   - dtucker@cvs.openbsd.org 2012/03/29 23:54:36
2849     [channels.c channels.h servconf.c]
2850     Add PermitOpen none option based on patch from Loganaden Velvindron
2851     (bz #1949).  ok djm@
2852   - djm@cvs.openbsd.org 2012/04/11 13:16:19
2853     [channels.c channels.h clientloop.c serverloop.c]
2854     don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for a
2855     while; ok deraadt@ markus@
2856   - djm@cvs.openbsd.org 2012/04/11 13:17:54
2857     [auth.c]
2858     Support "none" as an argument for AuthorizedPrincipalsFile to indicate
2859     no file should be read.
2860   - djm@cvs.openbsd.org 2012/04/11 13:26:40
2861     [sshd.c]
2862     don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for a
2863     while; ok deraadt@ markus@
2864   - djm@cvs.openbsd.org 2012/04/11 13:34:17
2865     [ssh-keyscan.1 ssh-keyscan.c]
2866     now that sshd defaults to offering ECDSA keys, ssh-keyscan should also
2867     look for them by default; bz#1971
2868   - djm@cvs.openbsd.org 2012/04/12 02:42:32
2869     [servconf.c servconf.h sshd.c sshd_config sshd_config.5]
2870     VersionAddendum option to allow server operators to append some arbitrary
2871     text to the SSH-... banner; ok deraadt@ "don't care" markus@
2872   - djm@cvs.openbsd.org 2012/04/12 02:43:55
2873     [sshd_config sshd_config.5]
2874     mention AuthorizedPrincipalsFile=none default
2875   - djm@cvs.openbsd.org 2012/04/20 03:24:23
2876     [sftp.c]
2877     setlinebuf(3) is more readable than setvbuf(.., _IOLBF, ...)
2878   - jmc@cvs.openbsd.org 2012/04/20 16:26:22
2879     [ssh.1]
2880     use "brackets" instead of "braces", for consistency;
2881
288220120420
2883 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
2884   [contrib/suse/openssh.spec] Update for release 6.0
2885 - (djm) [README] Update URL to release notes.
2886 - (djm) Release openssh-6.0
2887
2888