120120828 2 - (djm) Release openssh-6.1 3 420120828 5 - (dtucker) [openbsd-compat/bsd-cygwin_util.h] define WIN32_LEAN_AND_MEAN 6 for compatibility with future mingw-w64 headers. Patch from vinschen at 7 redhat com. 8 920120822 10 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 11 [contrib/suse/openssh.spec] Update version numbers 12 1320120731 14 - (djm) OpenBSD CVS Sync 15 - jmc@cvs.openbsd.org 2012/07/06 06:38:03 16 [ssh-keygen.c] 17 missing full stop in usage(); 18 - djm@cvs.openbsd.org 2012/07/10 02:19:15 19 [servconf.c servconf.h sshd.c sshd_config] 20 Turn on systrace sandboxing of pre-auth sshd by default for new installs 21 by shipping a config that overrides the current UsePrivilegeSeparation=yes 22 default. Make it easier to flip the default in the future by adding too. 23 prodded markus@ feedback dtucker@ "get it in" deraadt@ 24 - dtucker@cvs.openbsd.org 2012/07/13 01:35:21 25 [servconf.c] 26 handle long comments in config files better. bz#2025, ok markus 27 - markus@cvs.openbsd.org 2012/07/22 18:19:21 28 [version.h] 29 openssh 6.1 30 3120120720 32 - (dtucker) Import regened moduli file. 33 3420120706 35 - (djm) [sandbox-seccomp-filter.c] fallback to rlimit if seccomp filter is 36 not available. Allows use of sshd compiled on host with a filter-capable 37 kernel on hosts that lack the support. bz#2011 ok dtucker@ 38 - (djm) [configure.ac] Recursively expand $(bindir) to ensure it has no 39 unexpanded $(prefix) embedded. bz#2007 patch from nix-corp AT 40 esperi.org.uk; ok dtucker@ 41- (djm) OpenBSD CVS Sync 42 - dtucker@cvs.openbsd.org 2012/07/06 00:41:59 43 [moduli.c ssh-keygen.1 ssh-keygen.c] 44 Add options to specify starting line number and number of lines to process 45 when screening moduli candidates. This allows processing of different 46 parts of a candidate moduli file in parallel. man page help jmc@, ok djm@ 47 - djm@cvs.openbsd.org 2012/07/06 01:37:21 48 [mux.c] 49 fix memory leak of passed-in environment variables and connection 50 context when new session message is malformed; bz#2003 from Bert.Wesarg 51 AT googlemail.com 52 - djm@cvs.openbsd.org 2012/07/06 01:47:38 53 [ssh.c] 54 move setting of tty_flag to after config parsing so RequestTTY options 55 are correctly picked up. bz#1995 patch from przemoc AT gmail.com; 56 ok dtucker@ 57 5820120704 59 - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] Add setlinebuf for 60 platforms that don't have it. "looks good" tim@ 61 6220120703 63 - (dtucker) [configure.ac] Detect platforms that can't use select(2) with 64 setrlimit(RLIMIT_NOFILE, rl_zero) and disable the rlimit sandbox on those. 65 - (dtucker) [configure.ac sandbox-rlimit.c] Test whether or not 66 setrlimit(RLIMIT_FSIZE, rl_zero) and skip it if it's not supported. Its 67 benefit is minor, so it's not worth disabling the sandbox if it doesn't 68 work. 69 7020120702 71- (dtucker) OpenBSD CVS Sync 72 - naddy@cvs.openbsd.org 2012/06/29 13:57:25 73 [ssh_config.5 sshd_config.5] 74 match the documented MAC order of preference to the actual one; 75 ok dtucker@ 76 - markus@cvs.openbsd.org 2012/06/30 14:35:09 77 [sandbox-systrace.c sshd.c] 78 fix a during the load of the sandbox policies (child can still make 79 the read-syscall and wait forever for systrace-answers) by replacing 80 the read/write synchronisation with SIGSTOP/SIGCONT; 81 report and help hshoexer@; ok djm@, dtucker@ 82 - dtucker@cvs.openbsd.org 2012/07/02 08:50:03 83 [ssh.c] 84 set interactive ToS for forwarded X11 sessions. ok djm@ 85 - dtucker@cvs.openbsd.org 2012/07/02 12:13:26 86 [ssh-pkcs11-helper.c sftp-client.c] 87 fix a couple of "assigned but not used" warnings. ok markus@ 88 - dtucker@cvs.openbsd.org 2012/07/02 14:37:06 89 [regress/connect-privsep.sh] 90 remove exit from end of test since it prevents reporting failure 91 - (dtucker) [regress/reexec.sh regress/sftp-cmds.sh regress/test-exec.sh] 92 Move cygwin detection to test-exec and use to skip reexec test on cygwin. 93 - (dtucker) [regress/test-exec.sh] Correct uname for cygwin/w2k. 94 9520120629 96 - OpenBSD CVS Sync 97 - dtucker@cvs.openbsd.org 2012/06/21 00:16:07 98 [addrmatch.c] 99 fix strlcpy truncation check. from carsten at debian org, ok markus 100 - dtucker@cvs.openbsd.org 2012/06/22 12:30:26 101 [monitor.c sshconnect2.c] 102 remove dead code following 'for (;;)' loops. 103 From Steve.McClellan at radisys com, ok markus@ 104 - dtucker@cvs.openbsd.org 2012/06/22 14:36:33 105 [sftp.c] 106 Remove unused variable leftover from tab-completion changes. 107 From Steve.McClellan at radisys com, ok markus@ 108 - dtucker@cvs.openbsd.org 2012/06/26 11:02:30 109 [sandbox-systrace.c] 110 Add mquery to the list of allowed syscalls for "UsePrivilegeSeparation 111 sandbox" since malloc now uses it. From johnw.mail at gmail com. 112 - dtucker@cvs.openbsd.org 2012/06/28 05:07:45 113 [mac.c myproposal.h ssh_config.5 sshd_config.5] 114 Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs since they were removed 115 from draft6 of the spec and will not be in the RFC when published. Patch 116 from mdb at juniper net via bz#2023, ok markus. 117 - naddy@cvs.openbsd.org 2012/06/29 13:57:25 118 [ssh_config.5 sshd_config.5] 119 match the documented MAC order of preference to the actual one; ok dtucker@ 120 - dtucker@cvs.openbsd.org 2012/05/13 01:42:32 121 [regress/addrmatch.sh] 122 Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust tests 123 to match. Feedback and ok djm@ markus@. 124 - djm@cvs.openbsd.org 2012/06/01 00:47:35 125 [regress/multiplex.sh regress/forwarding.sh] 126 append to rather than truncate test log; bz#2013 from openssh AT 127 roumenpetrov.info 128 - djm@cvs.openbsd.org 2012/06/01 00:52:52 129 [regress/sftp-cmds.sh] 130 don't delete .* on cleanup due to unintended env expansion; pointed out in 131 bz#2014 by openssh AT roumenpetrov.info 132 - dtucker@cvs.openbsd.org 2012/06/26 12:06:59 133 [regress/connect-privsep.sh] 134 test sandbox with every malloc option 135 - dtucker@cvs.openbsd.org 2012/06/28 05:07:45 136 [regress/try-ciphers.sh regress/cipher-speed.sh] 137 Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs since they were removed 138 from draft6 of the spec and will not be in the RFC when published. Patch 139 from mdb at juniper net via bz#2023, ok markus. 140 - (dtucker) [myproposal.h] Remove trailing backslash to fix compile error. 141 - (dtucker) [key.c] ifdef out sha256 key types on platforms that don't have 142 the required functions in libcrypto. 143 14420120628 145 - (dtucker) [openbsd-compat/getrrsetbyname-ldns.c] bz #2022: prevent null 146 pointer deref in the client when built with LDNS and using DNSSEC with a 147 CNAME. Patch from gregdlg+mr at hochet info. 148 14920120622 150 - (dtucker) [contrib/cygwin/ssh-host-config] Ensure that user sshd runs as 151 can logon as a service. Patch from vinschen at redhat com. 152 15320120620 154 - (djm) OpenBSD CVS Sync 155 - djm@cvs.openbsd.org 2011/12/02 00:41:56 156 [mux.c] 157 fix bz#1948: ssh -f doesn't fork for multiplexed connection. 158 ok dtucker@ 159 - djm@cvs.openbsd.org 2011/12/04 23:16:12 160 [mux.c] 161 revert: 162 > revision 1.32 163 > date: 2011/12/02 00:41:56; author: djm; state: Exp; lines: +4 -1 164 > fix bz#1948: ssh -f doesn't fork for multiplexed connection. 165 > ok dtucker@ 166 it interacts badly with ControlPersist 167 - djm@cvs.openbsd.org 2012/01/07 21:11:36 168 [mux.c] 169 fix double-free in new session handler 170 NB. Id sync only 171 - djm@cvs.openbsd.org 2012/05/23 03:28:28 172 [dns.c dns.h key.c key.h ssh-keygen.c] 173 add support for RFC6594 SSHFP DNS records for ECDSA key types. 174 patch from bugzilla-m67 AT nulld.me in bz#1978; ok + tweak markus@ 175 - djm@cvs.openbsd.org 2012/06/01 00:49:35 176 [PROTOCOL.mux] 177 correct types of port numbers (integers, not strings); bz#2004 from 178 bert.wesarg AT googlemail.com 179 - djm@cvs.openbsd.org 2012/06/01 01:01:22 180 [mux.c] 181 fix memory leak when mux socket creation fails; bz#2002 from bert.wesarg 182 AT googlemail.com 183 - dtucker@cvs.openbsd.org 2012/06/18 11:43:53 184 [jpake.c] 185 correct sizeof usage. patch from saw at online.de, ok deraadt 186 - dtucker@cvs.openbsd.org 2012/06/18 11:49:58 187 [ssh_config.5] 188 RSA instead of DSA twice. From Steve.McClellan at radisys com 189 - dtucker@cvs.openbsd.org 2012/06/18 12:07:07 190 [ssh.1 sshd.8] 191 Remove mention of 'three' key files since there are now four. From 192 Steve.McClellan at radisys com. 193 - dtucker@cvs.openbsd.org 2012/06/18 12:17:18 194 [ssh.1] 195 Clarify description of -W. Noted by Steve.McClellan at radisys com, 196 ok jmc 197 - markus@cvs.openbsd.org 2012/06/19 18:25:28 198 [servconf.c servconf.h sshd_config.5] 199 sshd_config: extend Match to allow AcceptEnv and {Allow,Deny}{Users,Groups} 200 this allows 'Match LocalPort 1022' combined with 'AllowUser bauer' 201 ok djm@ (back in March) 202 - jmc@cvs.openbsd.org 2012/06/19 21:35:54 203 [sshd_config.5] 204 tweak previous; ok markus 205 - djm@cvs.openbsd.org 2012/06/20 04:42:58 206 [clientloop.c serverloop.c] 207 initialise accept() backoff timer to avoid EINVAL from select(2) in 208 rekeying 209 21020120519 211 - (dtucker) [configure.ac] bz#2010: fix non-portable shell construct. Patch 212 from cjwatson at debian org. 213 - (dtucker) [configure.ac contrib/Makefile] bz#1996: use AC_PATH_TOOL to find 214 pkg-config so it does the right thing when cross-compiling. Patch from 215 cjwatson at debian org. 216- (dtucker) OpenBSD CVS Sync 217 - dtucker@cvs.openbsd.org 2012/05/13 01:42:32 218 [servconf.h servconf.c sshd.8 sshd.c auth.c sshd_config.5] 219 Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust tests 220 to match. Feedback and ok djm@ markus@. 221 - dtucker@cvs.openbsd.org 2012/05/19 06:30:30 222 [sshd_config.5] 223 Document PermitOpen none. bz#2001, patch from Loganaden Velvindron 224 22520120504 226 - (dtucker) [configure.ac] Include <sys/param.h> rather than <sys/types.h> 227 to fix building on some plaforms. Fom bowman at math utah edu and 228 des at des no. 229 23020120427 231 - (dtucker) [regress/addrmatch.sh] skip tests when running on a non-ipv6 232 platform rather than exiting early, so that we still clean up and return 233 success or failure to test-exec.sh 234 23520120426 236 - (djm) [auth-passwd.c] Handle crypt() returning NULL; from Paul Wouters 237 via Niels 238 - (djm) [auth-krb5.c] Save errno across calls that might modify it; 239 ok dtucker@ 240 24120120423 242 - OpenBSD CVS Sync 243 - djm@cvs.openbsd.org 2012/04/23 08:18:17 244 [channels.c] 245 fix function proto/source mismatch 246 24720120422 248 - OpenBSD CVS Sync 249 - djm@cvs.openbsd.org 2012/02/29 11:21:26 250 [ssh-keygen.c] 251 allow conversion of RSA1 keys to public PEM and PKCS8; "nice" markus@ 252 - guenther@cvs.openbsd.org 2012/03/15 03:10:27 253 [session.c] 254 root should always be excluded from the test for /etc/nologin instead 255 of having it always enforced even when marked as ignorenologin. This 256 regressed when the logic was incompletely flipped around in rev 1.251 257 ok halex@ millert@ 258 - djm@cvs.openbsd.org 2012/03/28 07:23:22 259 [PROTOCOL.certkeys] 260 explain certificate extensions/crit split rationale. Mention requirement 261 that each appear at most once per cert. 262 - dtucker@cvs.openbsd.org 2012/03/29 23:54:36 263 [channels.c channels.h servconf.c] 264 Add PermitOpen none option based on patch from Loganaden Velvindron 265 (bz #1949). ok djm@ 266 - djm@cvs.openbsd.org 2012/04/11 13:16:19 267 [channels.c channels.h clientloop.c serverloop.c] 268 don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for a 269 while; ok deraadt@ markus@ 270 - djm@cvs.openbsd.org 2012/04/11 13:17:54 271 [auth.c] 272 Support "none" as an argument for AuthorizedPrincipalsFile to indicate 273 no file should be read. 274 - djm@cvs.openbsd.org 2012/04/11 13:26:40 275 [sshd.c] 276 don't spin in accept() when out of fds (ENFILE/ENFILE) - back off for a 277 while; ok deraadt@ markus@ 278 - djm@cvs.openbsd.org 2012/04/11 13:34:17 279 [ssh-keyscan.1 ssh-keyscan.c] 280 now that sshd defaults to offering ECDSA keys, ssh-keyscan should also 281 look for them by default; bz#1971 282 - djm@cvs.openbsd.org 2012/04/12 02:42:32 283 [servconf.c servconf.h sshd.c sshd_config sshd_config.5] 284 VersionAddendum option to allow server operators to append some arbitrary 285 text to the SSH-... banner; ok deraadt@ "don't care" markus@ 286 - djm@cvs.openbsd.org 2012/04/12 02:43:55 287 [sshd_config sshd_config.5] 288 mention AuthorizedPrincipalsFile=none default 289 - djm@cvs.openbsd.org 2012/04/20 03:24:23 290 [sftp.c] 291 setlinebuf(3) is more readable than setvbuf(.., _IOLBF, ...) 292 - jmc@cvs.openbsd.org 2012/04/20 16:26:22 293 [ssh.1] 294 use "brackets" instead of "braces", for consistency; 295 29620120420 297 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 298 [contrib/suse/openssh.spec] Update for release 6.0 299 - (djm) [README] Update URL to release notes. 300 - (djm) Release openssh-6.0 301 30220120419 303 - (djm) [configure.ac] Fix compilation error on FreeBSD, whose libutil 304 contains openpty() but not login() 305 30620120404 307 - (djm) [Makefile.in configure.ac sandbox-seccomp-filter.c] Add sandbox 308 mode for Linux's new seccomp filter; patch from Will Drewry; feedback 309 and ok dtucker@ 310 31120120330 312 - (dtucker) [contrib/redhat/openssh.spec] Bug #1992: remove now-gone WARNING 313 file from spec file. From crighter at nuclioss com. 314 - (djm) [entropy.c] bz#1991: relax OpenSSL version test to allow running 315 openssh binaries on a newer fix release than they were compiled on. 316 with and ok dtucker@ 317 - (djm) [openbsd-compat/bsd-cygwin_util.h] #undef _WIN32 to avoid incorrect 318 assumptions when building on Cygwin; patch from Corinna Vinschen 319 32020120309 321 - (djm) [openbsd-compat/port-linux.c] bz#1960: fix crash on SELinux 322 systems where sshd is run in te wrong context. Patch from Sven 323 Vermeulen; ok dtucker@ 324 - (djm) [packet.c] bz#1963: Fix IPQoS not being set on non-mapped v4-in-v6 325 addressed connections. ok dtucker@ 326 32720120224 328 - (dtucker) [audit-bsm.c configure.ac] bug #1968: enable workarounds for BSM 329 audit breakage in Solaris 11. Patch from Magnus Johansson. 330 33120120215 332 - (tim) [openbsd-compat/bsd-misc.h sshd.c] Fix conflicting return type for 333 unsetenv due to rev 1.14 change to setenv.c. Cast unsetenv to void in sshd.c 334 ok dtucker@ 335 - (tim) [defines.h] move chunk introduced in 1.125 before MAXPATHLEN so 336 it actually works. 337 - (tim) [regress/keytype.sh] stderr redirection needs to be inside back quote 338 to work. Spotted by Angel Gonzalez 339 34020120214 341 - (djm) [openbsd-compat/bsd-cygwin_util.c] Add PROGRAMFILES to list of 342 preserved Cygwin environment variables; from Corinna Vinschen 343 34420120211 345 - (djm) OpenBSD CVS Sync 346 - djm@cvs.openbsd.org 2012/01/05 00:16:56 347 [monitor.c] 348 memleak on error path 349 - djm@cvs.openbsd.org 2012/01/07 21:11:36 350 [mux.c] 351 fix double-free in new session handler 352 - miod@cvs.openbsd.org 2012/01/08 13:17:11 353 [ssh-ecdsa.c] 354 Fix memory leak in ssh_ecdsa_verify(); from Loganaden Velvindron, 355 ok markus@ 356 - miod@cvs.openbsd.org 2012/01/16 20:34:09 357 [ssh-pkcs11-client.c] 358 Fix a memory leak in pkcs11_rsa_private_encrypt(), reported by Jan Klemkow. 359 While there, be sure to buffer_clear() between send_msg() and recv_msg(). 360 ok markus@ 361 - dtucker@cvs.openbsd.org 2012/01/18 21:46:43 362 [clientloop.c] 363 Ensure that $DISPLAY contains only valid characters before using it to 364 extract xauth data so that it can't be used to play local shell 365 metacharacter games. Report from r00t_ati at ihteam.net, ok markus. 366 - markus@cvs.openbsd.org 2012/01/25 19:26:43 367 [packet.c] 368 do not permit SSH2_MSG_SERVICE_REQUEST/ACCEPT during rekeying; 369 ok dtucker@, djm@ 370 - markus@cvs.openbsd.org 2012/01/25 19:36:31 371 [authfile.c] 372 memleak in key_load_file(); from Jan Klemkow 373 - markus@cvs.openbsd.org 2012/01/25 19:40:09 374 [packet.c packet.h] 375 packet_read_poll() is not used anymore. 376 - markus@cvs.openbsd.org 2012/02/09 20:00:18 377 [version.h] 378 move from 6.0-beta to 6.0 379 38020120206 381 - (djm) [ssh-keygen.c] Don't fail in do_gen_all_hostkeys on platforms 382 that don't support ECC. Patch from Phil Oleson 383 38420111219 385 - OpenBSD CVS Sync 386 - djm@cvs.openbsd.org 2011/12/02 00:41:56 387 [mux.c] 388 fix bz#1948: ssh -f doesn't fork for multiplexed connection. 389 ok dtucker@ 390 - djm@cvs.openbsd.org 2011/12/02 00:43:57 391 [mac.c] 392 fix bz#1934: newer OpenSSL versions will require HMAC_CTX_Init before 393 HMAC_init (this change in policy seems insane to me) 394 ok dtucker@ 395 - djm@cvs.openbsd.org 2011/12/04 23:16:12 396 [mux.c] 397 revert: 398 > revision 1.32 399 > date: 2011/12/02 00:41:56; author: djm; state: Exp; lines: +4 -1 400 > fix bz#1948: ssh -f doesn't fork for multiplexed connection. 401 > ok dtucker@ 402 it interacts badly with ControlPersist 403 - djm@cvs.openbsd.org 2011/12/07 05:44:38 404 [auth2.c dh.c packet.c roaming.h roaming_client.c roaming_common.c] 405 fix some harmless and/or unreachable int overflows; 406 reported Xi Wang, ok markus@ 407 40820111125 409 - OpenBSD CVS Sync 410 - oga@cvs.openbsd.org 2011/11/16 12:24:28 411 [sftp.c] 412 Don't leak list in complete_cmd_parse if there are no commands found. 413 Discovered when I was ``borrowing'' this code for something else. 414 ok djm@ 415 41620111121 417 - (dtucker) [configure.ac] Set _FORTIFY_SOURCE. ok djm@ 418 41920111104 420 - (dtucker) OpenBSD CVS Sync 421 - djm@cvs.openbsd.org 2011/10/18 05:15:28 422 [ssh.c] 423 ssh(1): skip attempting to create ~/.ssh when -F is passed; ok markus@ 424 - djm@cvs.openbsd.org 2011/10/18 23:37:42 425 [ssh-add.c] 426 add -k to usage(); reminded by jmc@ 427 - djm@cvs.openbsd.org 2011/10/19 00:06:10 428 [moduli.c] 429 s/tmpfile/tmp/ to make this -Wshadow clean 430 - djm@cvs.openbsd.org 2011/10/19 10:39:48 431 [umac.c] 432 typo in comment; patch from Michael W. Bombardieri 433 - djm@cvs.openbsd.org 2011/10/24 02:10:46 434 [ssh.c] 435 bz#1943: unbreak stdio forwarding when ControlPersist is in user - ssh 436 was incorrectly requesting the forward in both the control master and 437 slave. skip requesting it in the master to fix. ok markus@ 438 - djm@cvs.openbsd.org 2011/10/24 02:13:13 439 [session.c] 440 bz#1859: send tty break to pty master instead of (probably already 441 closed) slave side; "looks good" markus@ 442 - dtucker@cvs.openbsd.org 011/11/04 00:09:39 443 [moduli] 444 regenerated moduli file; ok deraadt 445 - (dtucker) [INSTALL LICENCE configure.ac openbsd-compat/Makefile.in 446 openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/getrrsetbyname.c] 447 bz 1320: Add optional support for LDNS, a BSD licensed DNS resolver library 448 which supports DNSSEC. Patch from Simon Vallet (svallet at genoscope cns fr) 449 with some rework from myself and djm. ok djm. 450 45120111025 452 - (dtucker) [contrib/cygwin/Makefile] Continue if installing a doc file 453 fails. Patch from Corinna Vinschen. 454 45520111018 456 - (djm) OpenBSD CVS Sync 457 - djm@cvs.openbsd.org 2011/10/04 14:17:32 458 [sftp-glob.c] 459 silence error spam for "ls */foo" in directory with files; bz#1683 460 - dtucker@cvs.openbsd.org 2011/10/16 11:02:46 461 [moduli.c ssh-keygen.1 ssh-keygen.c] 462 Add optional checkpoints for moduli screening. feedback & ok deraadt 463 - jmc@cvs.openbsd.org 2011/10/16 15:02:41 464 [ssh-keygen.c] 465 put -K in the right place (usage()); 466 - stsp@cvs.openbsd.org 2011/10/16 15:51:39 467 [moduli.c] 468 add missing includes to unbreak tree; fix from rpointel 469 - djm@cvs.openbsd.org 2011/10/18 04:58:26 470 [auth-options.c key.c] 471 remove explict search for \0 in packet strings, this job is now done 472 implicitly by buffer_get_cstring; ok markus 473 - djm@cvs.openbsd.org 2011/10/18 05:00:48 474 [ssh-add.1 ssh-add.c] 475 new "ssh-add -k" option to load plain keys (skipping certificates); 476 "looks ok" markus@ 477 47820111001 479 - (dtucker) [openbsd-compat/mktemp.c] Fix compiler warning. ok djm 480 - (dtucker) OpenBSD CVS Sync 481 - dtucker@cvs.openbsd.org 2011/09/23 00:22:04 482 [channels.c auth-options.c servconf.c channels.h sshd.8] 483 Add wildcard support to PermitOpen, allowing things like "PermitOpen 484 localhost:*". bz #1857, ok djm markus. 485 - markus@cvs.openbsd.org 2011/09/23 07:45:05 486 [mux.c readconf.h channels.h compat.h compat.c ssh.c readconf.c channels.c 487 version.h] 488 unbreak remote portforwarding with dynamic allocated listen ports: 489 1) send the actual listen port in the open message (instead of 0). 490 this allows multiple forwardings with a dynamic listen port 491 2) update the matching permit-open entry, so we can identify where 492 to connect to 493 report: den at skbkontur.ru and P. Szczygielski 494 feedback and ok djm@ 495 - djm@cvs.openbsd.org 2011/09/25 05:44:47 496 [auth2-pubkey.c] 497 improve the AuthorizedPrincipalsFile debug log message to include 498 file and line number 499 - dtucker@cvs.openbsd.org 2011/09/30 00:47:37 500 [sshd.c] 501 don't attempt privsep cleanup when not using privsep; ok markus@ 502 - djm@cvs.openbsd.org 2011/09/30 21:22:49 503 [sshd.c] 504 fix inverted test that caused logspam; spotted by henning@ 505 50620110929 507 - (djm) [configure.ac defines.h] No need to detect sizeof(char); patch 508 from des AT des.no 509 - (dtucker) [configure.ac openbsd-compat/Makefile.in 510 openbsd-compat/strnlen.c] Add strnlen to the compat library. 511 51220110923 513 - (djm) [openbsd-compat/getcwd.c] Remove OpenBSD rcsid marker since we no 514 longer want to sync this file (OpenBSD uses a __getcwd syscall now, we 515 want this longhand version) 516 - (djm) [openbsd-compat/getgrouplist.c] Remove OpenBSD rcsid marker: the 517 upstream version is YPified and we don't want this 518 - (djm) [openbsd-compat/mktemp.c] forklift upgrade to -current version. 519 The file was totally rewritten between what we had in tree and -current. 520 - (djm) [openbsd-compat/sha2.c openbsd-compat/sha2.h] Remove OpenBSD rcsid 521 marker. The upstream API has changed (function and structure names) 522 enough to put it out of sync with other providers of this interface. 523 - (djm) [openbsd-compat/setenv.c] Forklift upgrade, including inclusion 524 of static __findenv() function from upstream setenv.c 525 - OpenBSD CVS Sync 526 - millert@cvs.openbsd.org 2006/05/05 15:27:38 527 [openbsd-compat/strlcpy.c] 528 Convert do {} while loop -> while {} for clarity. No binary change 529 on most architectures. From Oliver Smith. OK deraadt@ and henning@ 530 - tobias@cvs.openbsd.org 2007/10/21 11:09:30 531 [openbsd-compat/mktemp.c] 532 Comment fix about time consumption of _gettemp. 533 FreeBSD did this in revision 1.20. 534 OK deraadt@, krw@ 535 - deraadt@cvs.openbsd.org 2008/07/22 21:47:45 536 [openbsd-compat/mktemp.c] 537 use arc4random_uniform(); ok djm millert 538 - millert@cvs.openbsd.org 2008/08/21 16:54:44 539 [openbsd-compat/mktemp.c] 540 Remove useless code, the kernel will set errno appropriately if an 541 element in the path does not exist. OK deraadt@ pvalchev@ 542 - otto@cvs.openbsd.org 2008/12/09 19:38:38 543 [openbsd-compat/inet_ntop.c] 544 fix inet_ntop(3) prototype; ok millert@ libc to be bumbed very soon 545 54620110922 547 - OpenBSD CVS Sync 548 - pyr@cvs.openbsd.org 2011/05/12 07:15:10 549 [openbsd-compat/glob.c] 550 When the max number of items for a directory has reached GLOB_LIMIT_READDIR 551 an error is returned but closedir() is not called. 552 spotted and fix provided by Frank Denis obsd-tech@pureftpd.org 553 ok otto@, millert@ 554 - stsp@cvs.openbsd.org 2011/09/20 10:18:46 555 [glob.c] 556 In glob(3), limit recursion during matching attempts. Similar to 557 fnmatch fix. Also collapse consecutive '*' (from NetBSD). 558 ok miod deraadt 559 - djm@cvs.openbsd.org 2011/09/22 06:27:29 560 [glob.c] 561 fix GLOB_KEEPSTAT without GLOB_NOSORT; the implicit sort was being 562 applied only to the gl_pathv vector and not the corresponding gl_statv 563 array. reported in OpenSSH bz#1935; feedback and okay matthew@ 564 - djm@cvs.openbsd.org 2011/08/26 01:45:15 565 [ssh.1] 566 Add some missing ssh_config(5) options that can be used in ssh(1)'s 567 -o argument. Patch from duclare AT guu.fi 568 - djm@cvs.openbsd.org 2011/09/05 05:56:13 569 [scp.1 sftp.1] 570 mention ControlPersist and KbdInteractiveAuthentication in the -o 571 verbiage in these pages too (prompted by jmc@) 572 - djm@cvs.openbsd.org 2011/09/05 05:59:08 573 [misc.c] 574 fix typo in IPQoS parsing: there is no "AF14" class, but there is 575 an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk 576 - jmc@cvs.openbsd.org 2011/09/05 07:01:44 577 [scp.1] 578 knock out a useless Ns; 579 - deraadt@cvs.openbsd.org 2011/09/07 02:18:31 580 [ssh-keygen.1] 581 typo (they vs the) found by Lawrence Teo 582 - djm@cvs.openbsd.org 2011/09/09 00:43:00 583 [ssh_config.5 sshd_config.5] 584 fix typo in IPQoS parsing: there is no "AF14" class, but there is 585 an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk 586 - djm@cvs.openbsd.org 2011/09/09 00:44:07 587 [PROTOCOL.mux] 588 MUX_C_CLOSE_FWD includes forward type in message (though it isn't 589 implemented anyway) 590 - djm@cvs.openbsd.org 2011/09/09 22:37:01 591 [scp.c] 592 suppress adding '--' to remote commandlines when the first argument 593 does not start with '-'. saves breakage on some difficult-to-upgrade 594 embedded/router platforms; feedback & ok dtucker ok markus 595 - djm@cvs.openbsd.org 2011/09/09 22:38:21 596 [sshd.c] 597 kill the preauth privsep child on fatal errors in the monitor; 598 ok markus@ 599 - djm@cvs.openbsd.org 2011/09/09 22:46:44 600 [channels.c channels.h clientloop.h mux.c ssh.c] 601 support for cancelling local and remote port forwards via the multiplex 602 socket. Use ssh -O cancel -L xx:xx:xx -R yy:yy:yy user@host" to request 603 the cancellation of the specified forwardings; ok markus@ 604 - markus@cvs.openbsd.org 2011/09/10 22:26:34 605 [channels.c channels.h clientloop.c ssh.1] 606 support cancellation of local/dynamic forwardings from ~C commandline; 607 ok & feedback djm@ 608 - okan@cvs.openbsd.org 2011/09/11 06:59:05 609 [ssh.1] 610 document new -O cancel command; ok djm@ 611 - markus@cvs.openbsd.org 2011/09/11 16:07:26 612 [sftp-client.c] 613 fix leaks in do_hardlink() and do_readlink(); bz#1921 614 from Loganaden Velvindron 615 - markus@cvs.openbsd.org 2011/09/12 08:46:15 616 [sftp-client.c] 617 fix leak in do_lsreaddir(); ok djm 618 - djm@cvs.openbsd.org 2011/09/22 06:29:03 619 [sftp.c] 620 don't let remote_glob() implicitly sort its results in do_globbed_ls() - 621 in all likelihood, they will be resorted anyway 622 62320110909 624 - (dtucker) [entropy.h] Bug #1932: remove old definition of init_rng. From 625 Colin Watson. 626 62720110906 628 - (djm) [README version.h] Correct version 629 - (djm) [contrib/redhat/openssh.spec] Correct restorcon => restorecon 630 - (djm) Respin OpenSSH-5.9p1 release 631 63220110905 633 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 634 [contrib/suse/openssh.spec] Update version numbers. 635 63620110904 637 - (djm) [regress/connect-privsep.sh regress/test-exec.sh] demote fatal 638 regress errors for the sandbox to warnings. ok tim dtucker 639 - (dtucker) [ssh-keygen.c ssh-pkcs11.c] Bug #1929: add null implementations 640 ofsh-pkcs11.cpkcs_init and pkcs_terminate for building without dlopen 641 support. 642 64320110829 644 - (djm) [openbsd-compat/port-linux.c] Suppress logging when attempting 645 to switch SELinux context away from unconfined_t, based on patch from 646 Jan Chadima; bz#1919 ok dtucker@ 647 64820110827 649 - (dtucker) [auth-skey.c] Add log.h to fix build --with-skey. 650 65120110818 652 - (tim) [configure.ac] Typo in error message spotted by Andy Tsouladze 653 65420110817 655 - (tim) [mac.c myproposal.h] Wrap SHA256 and SHA512 in ifdefs for 656 OpenSSL 0.9.7. ok djm 657 - (djm) [ openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h] 658 binary_pipe is no longer required on Cygwin; patch from Corinna Vinschen 659 - (djm) [configure.ac] error out if the host lacks the necessary bits for 660 an explicitly requested sandbox type 661 - (djm) [contrib/ssh-copy-id] Missing backlslash; spotted by 662 bisson AT archlinux.org 663 - (djm) OpenBSD CVS Sync 664 - dtucker@cvs.openbsd.org 2011/06/03 05:35:10 665 [regress/cfgmatch.sh] 666 use OBJ to find test configs, patch from Tim Rice 667 - markus@cvs.openbsd.org 2011/06/30 22:44:43 668 [regress/connect-privsep.sh] 669 test with sandbox enabled; ok djm@ 670 - djm@cvs.openbsd.org 2011/08/02 01:23:41 671 [regress/cipher-speed.sh regress/try-ciphers.sh] 672 add SHA256/SHA512 based HMAC modes 673 - (djm) [regress/cipher-speed.sh regress/try-ciphers.sh] disable HMAC-SHA2 674 MAC tests for platforms that hack EVP_SHA2 support 675 67620110812 677 - (dtucker) [openbsd-compat/port-linux.c] Bug 1924: Improve selinux context 678 change error by reporting old and new context names Patch from 679 jchadima at redhat. 680 - (djm) [contrib/redhat/openssh.spec contrib/redhat/sshd.init] 681 [contrib/suse/openssh.spec contrib/suse/rc.sshd] Updated RHEL and SLES 682 init scrips from imorgan AT nas.nasa.gov; bz#1920 683 - (djm) [contrib/ssh-copy-id] Fix failure for cases where the path to the 684 identify file contained whitespace. bz#1828 patch from gwenael.lambrouin 685 AT gmail.com; ok dtucker@ 686 68720110807 688 - (dtucker) OpenBSD CVS Sync 689 - jmc@cvs.openbsd.org 2008/06/26 06:59:39 690 [moduli.5] 691 tweak previous; 692 - sobrado@cvs.openbsd.org 2009/10/28 08:56:54 693 [moduli.5] 694 "Diffie-Hellman" is the usual spelling for the cryptographic protocol 695 first published by Whitfield Diffie and Martin Hellman in 1976. 696 ok jmc@ 697 - jmc@cvs.openbsd.org 2010/10/14 20:41:28 698 [moduli.5] 699 probabalistic -> probabilistic; from naddy 700 - dtucker@cvs.openbsd.org 2011/08/07 12:55:30 701 [sftp.1] 702 typo, fix from Laurent Gautrot 703 70420110805 705 - OpenBSD CVS Sync 706 - djm@cvs.openbsd.org 2011/06/23 23:35:42 707 [monitor.c] 708 ignore EINTR errors from poll() 709 - tedu@cvs.openbsd.org 2011/07/06 18:09:21 710 [authfd.c] 711 bzero the agent address. the kernel was for a while very cranky about 712 these things. evne though that's fixed, always good to initialize 713 memory. ok deraadt djm 714 - djm@cvs.openbsd.org 2011/07/29 14:42:45 715 [sandbox-systrace.c] 716 fail open(2) with EPERM rather than SIGKILLing the whole process. libc 717 will call open() to do strerror() when NLS is enabled; 718 feedback and ok markus@ 719 - markus@cvs.openbsd.org 2011/08/01 19:18:15 720 [gss-serv.c] 721 prevent post-auth resource exhaustion (int overflow leading to 4GB malloc); 722 report Adam Zabrock; ok djm@, deraadt@ 723 - djm@cvs.openbsd.org 2011/08/02 01:22:11 724 [mac.c myproposal.h ssh.1 ssh_config.5 sshd.8 sshd_config.5] 725 Add new SHA256 and SHA512 based HMAC modes from 726 http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt 727 Patch from mdb AT juniper.net; feedback and ok markus@ 728 - djm@cvs.openbsd.org 2011/08/02 23:13:01 729 [version.h] 730 crank now, release later 731 - djm@cvs.openbsd.org 2011/08/02 23:15:03 732 [ssh.c] 733 typo in comment 734 73520110624 736 - (djm) [configure.ac Makefile.in sandbox-darwin.c] Add a sandbox for 737 Darwin/OS X using sandbox_init() + setrlimit(); feedback and testing 738 markus@ 739 74020110623 741 - OpenBSD CVS Sync 742 - djm@cvs.openbsd.org 2011/06/22 21:47:28 743 [servconf.c] 744 reuse the multistate option arrays to pretty-print options for "sshd -T" 745 - djm@cvs.openbsd.org 2011/06/22 21:57:01 746 [servconf.c servconf.h sshd.c sshd_config.5] 747 [configure.ac Makefile.in] 748 introduce sandboxing of the pre-auth privsep child using systrace(4). 749 750 This introduces a new "UsePrivilegeSeparation=sandbox" option for 751 sshd_config that applies mandatory restrictions on the syscalls the 752 privsep child can perform. This prevents a compromised privsep child 753 from being used to attack other hosts (by opening sockets and proxying) 754 or probing local kernel attack surface. 755 756 The sandbox is implemented using systrace(4) in unsupervised "fast-path" 757 mode, where a list of permitted syscalls is supplied. Any syscall not 758 on the list results in SIGKILL being sent to the privsep child. Note 759 that this requires a kernel with the new SYSTR_POLICY_KILL option. 760 761 UsePrivilegeSeparation=sandbox will become the default in the future 762 so please start testing it now. 763 764 feedback dtucker@; ok markus@ 765 - djm@cvs.openbsd.org 2011/06/22 22:08:42 766 [channels.c channels.h clientloop.c clientloop.h mux.c ssh.c] 767 hook up a channel confirm callback to warn the user then requested X11 768 forwarding was refused by the server; ok markus@ 769 - djm@cvs.openbsd.org 2011/06/23 09:34:13 770 [sshd.c ssh-sandbox.h sandbox.h sandbox-rlimit.c sandbox-systrace.c] 771 [sandbox-null.c] 772 rename sandbox.h => ssh-sandbox.h to make things easier for portable 773 - (djm) [sandbox-null.c] Dummy sandbox for platforms that don't support 774 setrlimit(2) 775 77620110620 777 - OpenBSD CVS Sync 778 - djm@cvs.openbsd.org 2011/06/04 00:10:26 779 [ssh_config.5] 780 explain IdentifyFile's semantics a little better, prompted by bz#1898 781 ok dtucker jmc 782 - markus@cvs.openbsd.org 2011/06/14 22:49:18 783 [authfile.c] 784 make sure key_parse_public/private_rsa1() no longer consumes its input 785 buffer. fixes ssh-add for passphrase-protected ssh1-keys; 786 noted by naddy@; ok djm@ 787 - djm@cvs.openbsd.org 2011/06/17 21:44:31 788 [log.c log.h monitor.c monitor.h monitor_wrap.c monitor_wrap.h sshd.c] 789 make the pre-auth privsep slave log via a socketpair shared with the 790 monitor rather than /var/empty/dev/log; ok dtucker@ deraadt@ markus@ 791 - djm@cvs.openbsd.org 2011/06/17 21:46:16 792 [sftp-server.c] 793 the protocol version should be unsigned; bz#1913 reported by mb AT 794 smartftp.com 795 - djm@cvs.openbsd.org 2011/06/17 21:47:35 796 [servconf.c] 797 factor out multi-choice option parsing into a parse_multistate label 798 and some support structures; ok dtucker@ 799 - djm@cvs.openbsd.org 2011/06/17 21:57:25 800 [clientloop.c] 801 setproctitle for a mux master that has been gracefully stopped; 802 bz#1911 from Bert.Wesarg AT googlemail.com 803 80420110603 805 - (dtucker) [README version.h contrib/caldera/openssh.spec 806 contrib/redhat/openssh.spec contrib/suse/openssh.spec] Pull the version 807 bumps from the 5.8p2 branch into HEAD. ok djm. 808 - (tim) [configure.ac defines.h] Run test program to detect system mail 809 directory. Add --with-maildir option to override. Fixed OpenServer 6 810 getting it wrong. Fixed many systems having MAIL=/var/mail//username 811 ok dtucker 812 - (dtucker) [monitor.c] Remove the !HAVE_SOCKETPAIR case. We use socketpair 813 unconditionally in other places and the survey data we have does not show 814 any systems that use it. "nuke it" djm@ 815 - (djm) [configure.ac] enable setproctitle emulation for OS X 816 - (djm) OpenBSD CVS Sync 817 - djm@cvs.openbsd.org 2011/06/03 00:54:38 818 [ssh.c] 819 bz#1883 - setproctitle() to identify mux master; patch from Bert.Wesarg 820 AT googlemail.com; ok dtucker@ 821 NB. includes additional portability code to enable setproctitle emulation 822 on platforms that don't support it. 823 - dtucker@cvs.openbsd.org 2011/06/03 01:37:40 824 [ssh-agent.c] 825 Check current parent process ID against saved one to determine if the parent 826 has exited, rather than attempting to send a zero signal, since the latter 827 won't work if the parent has changed privs. bz#1905, patch from Daniel Kahn 828 Gillmor, ok djm@ 829 - dtucker@cvs.openbsd.org 2011/05/31 02:01:58 830 [regress/dynamic-forward.sh] 831 back out revs 1.6 and 1.5 since it's not reliable 832 - dtucker@cvs.openbsd.org 2011/05/31 02:03:34 833 [regress/dynamic-forward.sh] 834 work around startup and teardown races; caught by deraadt 835 - dtucker@cvs.openbsd.org 2011/06/03 00:29:52 836 [regress/dynamic-forward.sh] 837 Retry establishing the port forwarding after a small delay, should make 838 the tests less flaky when the previous test is slow to shut down and free 839 up the port. 840 - (tim) [regress/cfgmatch.sh] Build/test out of tree fix. 841 84220110529 843 - (djm) OpenBSD CVS Sync 844 - djm@cvs.openbsd.org 2011/05/23 03:30:07 845 [auth-rsa.c auth.c auth.h auth2-pubkey.c monitor.c monitor_wrap.c] 846 [pathnames.h servconf.c servconf.h sshd.8 sshd_config sshd_config.5] 847 allow AuthorizedKeysFile to specify multiple files, separated by spaces. 848 Bring back authorized_keys2 as a default search path (to avoid breaking 849 existing users of this file), but override this in sshd_config so it will 850 be no longer used on fresh installs. Maybe in 2015 we can remove it 851 entierly :) 852 853 feedback and ok markus@ dtucker@ 854 - djm@cvs.openbsd.org 2011/05/23 03:33:38 855 [auth.c] 856 make secure_filename() spam debug logs less 857 - djm@cvs.openbsd.org 2011/05/23 03:52:55 858 [sshconnect.c] 859 remove extra newline 860 - jmc@cvs.openbsd.org 2011/05/23 07:10:21 861 [sshd.8 sshd_config.5] 862 tweak previous; ok djm 863 - djm@cvs.openbsd.org 2011/05/23 07:24:57 864 [authfile.c] 865 read in key comments for v.2 keys (though note that these are not 866 passed over the agent protocol); bz#439, based on patch from binder 867 AT arago.de; ok markus@ 868 - djm@cvs.openbsd.org 2011/05/24 07:15:47 869 [readconf.c readconf.h ssh.c ssh_config.5 sshconnect.c sshconnect2.c] 870 Remove undocumented legacy options UserKnownHostsFile2 and 871 GlobalKnownHostsFile2 by making UserKnownHostsFile/GlobalKnownHostsFile 872 accept multiple paths per line and making their defaults include 873 known_hosts2; ok markus 874 - djm@cvs.openbsd.org 2011/05/23 03:31:31 875 [regress/cfgmatch.sh] 876 include testing of multiple/overridden AuthorizedKeysFiles 877 refactor to simply daemon start/stop and get rid of racy constructs 878 87920110520 880 - (djm) [session.c] call setexeccon() before executing passwd for pw 881 changes; bz#1891 reported by jchadima AT redhat.com; ok dtucker@ 882 - (djm) [aclocal.m4 configure.ac] since gcc-4.x ignores all -Wno-options 883 options, we should corresponding -W-option when trying to determine 884 whether it is accepted. Also includes a warning fix on the program 885 fragment uses (bad main() return type). 886 bz#1900 and bz#1901 reported by g.esp AT free.fr; ok dtucker@ 887 - (djm) [servconf.c] remove leftover droppings of AuthorizedKeysFile2 888 - OpenBSD CVS Sync 889 - djm@cvs.openbsd.org 2011/05/15 08:09:01 890 [authfd.c monitor.c serverloop.c] 891 use FD_CLOEXEC consistently; patch from zion AT x96.org 892 - djm@cvs.openbsd.org 2011/05/17 07:13:31 893 [key.c] 894 fatal() if asked to generate a legacy ECDSA cert (these don't exist) 895 and fix the regress test that was trying to generate them :) 896 - djm@cvs.openbsd.org 2011/05/20 00:55:02 897 [servconf.c] 898 the options TrustedUserCAKeys, RevokedKeysFile, AuthorizedKeysFile 899 and AuthorizedPrincipalsFile were not being correctly applied in 900 Match blocks, despite being overridable there; ok dtucker@ 901 - dtucker@cvs.openbsd.org 2011/05/20 02:00:19 902 [servconf.c] 903 Add comment documenting what should be after the preauth check. ok djm 904 - djm@cvs.openbsd.org 2011/05/20 03:25:45 905 [monitor.c monitor_wrap.c servconf.c servconf.h] 906 use a macro to define which string options to copy between configs 907 for Match. This avoids problems caused by forgetting to keep three 908 code locations in perfect sync and ordering 909 910 "this is at once beautiful and horrible" + ok dtucker@ 911 - djm@cvs.openbsd.org 2011/05/17 07:13:31 912 [regress/cert-userkey.sh] 913 fatal() if asked to generate a legacy ECDSA cert (these don't exist) 914 and fix the regress test that was trying to generate them :) 915 - djm@cvs.openbsd.org 2011/05/20 02:43:36 916 [cert-hostkey.sh] 917 another attempt to generate a v00 ECDSA key that broke the test 918 ID sync only - portable already had this somehow 919 - dtucker@cvs.openbsd.org 2011/05/20 05:19:50 920 [dynamic-forward.sh] 921 Prevent races in dynamic forwarding test; ok djm 922 - dtucker@cvs.openbsd.org 2011/05/20 06:32:30 923 [dynamic-forward.sh] 924 fix dumb error in dynamic-forward test 925 92620110515 927 - (djm) OpenBSD CVS Sync 928 - djm@cvs.openbsd.org 2011/05/05 05:12:08 929 [mux.c] 930 gracefully fall back when ControlPath is too large for a 931 sockaddr_un. ok markus@ as part of a larger diff 932 - dtucker@cvs.openbsd.org 2011/05/06 01:03:35 933 [sshd_config] 934 clarify language about overriding defaults. bz#1892, from Petr Cerny 935 - djm@cvs.openbsd.org 2011/05/06 01:09:53 936 [sftp.1] 937 mention that IPv6 addresses must be enclosed in square brackets; 938 bz#1845 939 - djm@cvs.openbsd.org 2011/05/06 02:05:41 940 [sshconnect2.c] 941 fix memory leak; bz#1849 ok dtucker@ 942 - djm@cvs.openbsd.org 2011/05/06 21:14:05 943 [packet.c packet.h] 944 set traffic class for IPv6 traffic as we do for IPv4 TOS; 945 patch from lionel AT mamane.lu via Colin Watson in bz#1855; 946 ok markus@ 947 - djm@cvs.openbsd.org 2011/05/06 21:18:02 948 [ssh.c ssh_config.5] 949 add a %L expansion (short-form of the local host name) for ControlPath; 950 sync some more expansions with LocalCommand; ok markus@ 951 - djm@cvs.openbsd.org 2011/05/06 21:31:38 952 [readconf.c ssh_config.5] 953 support negated Host matching, e.g. 954 955 Host *.example.org !c.example.org 956 User mekmitasdigoat 957 958 Will match "a.example.org", "b.example.org", but not "c.example.org" 959 ok markus@ 960 - djm@cvs.openbsd.org 2011/05/06 21:34:32 961 [clientloop.c mux.c readconf.c readconf.h ssh.c ssh_config.5] 962 Add a RequestTTY ssh_config option to allow configuration-based 963 control over tty allocation (like -t/-T); ok markus@ 964 - djm@cvs.openbsd.org 2011/05/06 21:38:58 965 [ssh.c] 966 fix dropping from previous diff 967 - djm@cvs.openbsd.org 2011/05/06 22:20:10 968 [PROTOCOL.mux] 969 fix numbering; from bert.wesarg AT googlemail.com 970 - jmc@cvs.openbsd.org 2011/05/07 23:19:39 971 [ssh_config.5] 972 - tweak previous 973 - come consistency fixes 974 ok djm 975 - jmc@cvs.openbsd.org 2011/05/07 23:20:25 976 [ssh.1] 977 +.It RequestTTY 978 - djm@cvs.openbsd.org 2011/05/08 12:52:01 979 [PROTOCOL.mux clientloop.c clientloop.h mux.c] 980 improve our behaviour when TTY allocation fails: if we are in 981 RequestTTY=auto mode (the default), then do not treat at TTY 982 allocation error as fatal but rather just restore the local TTY 983 to cooked mode and continue. This is more graceful on devices that 984 never allocate TTYs. 985 986 If RequestTTY is set to "yes" or "force", then failure to allocate 987 a TTY is fatal. 988 989 ok markus@ 990 - djm@cvs.openbsd.org 2011/05/10 05:46:46 991 [authfile.c] 992 despam debug() logs by detecting that we are trying to load a private key 993 in key_try_load_public() and returning early; ok markus@ 994 - djm@cvs.openbsd.org 2011/05/11 04:47:06 995 [auth.c auth.h auth2-pubkey.c pathnames.h servconf.c servconf.h] 996 remove support for authorized_keys2; it is a relic from the early days 997 of protocol v.2 support and has been undocumented for many years; 998 ok markus@ 999 - djm@cvs.openbsd.org 2011/05/13 00:05:36 1000 [authfile.c] 1001 warn on unexpected key type in key_parse_private_type() 1002 - (djm) [packet.c] unbreak portability #endif 1003 100420110510 1005 - (dtucker) [openbsd-compat/openssl-compat.{c,h}] Bug #1882: fix 1006 --with-ssl-engine which was broken with the change from deprecated 1007 SSLeay_add_all_algorithms(). ok djm 1008 100920110506 1010 - (dtucker) [openbsd-compat/regress/closefromtest.c] Bug #1875: add prototype 1011 for closefrom() in test code. Report from Dan Wallis via Gentoo. 1012 101320110505 1014 - (djm) [defines.h] Move up include of netinet/ip.h for IPTOS 1015 definitions. From des AT des.no 1016 - (djm) [Makefile.in WARNING.RNG aclocal.m4 buildpkg.sh.in configure.ac] 1017 [entropy.c ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c] 1018 [ssh-keysign.c ssh-pkcs11-helper.c ssh-rand-helper.8 ssh-rand-helper.c] 1019 [ssh.c ssh_prng_cmds.in sshd.c contrib/aix/buildbff.sh] 1020 [regress/README.regress] Remove ssh-rand-helper and all its 1021 tentacles. PRNGd seeding has been rolled into entropy.c directly. 1022 Thanks to tim@ for testing on affected platforms. 1023 - OpenBSD CVS Sync 1024 - djm@cvs.openbsd.org 2011/03/10 02:52:57 1025 [auth2-gss.c auth2.c auth.h] 1026 allow GSSAPI authentication to detect when a server-side failure causes 1027 authentication failure and don't count such failures against MaxAuthTries; 1028 bz#1244 from simon AT sxw.org.uk; ok markus@ before lock 1029 - okan@cvs.openbsd.org 2011/03/15 10:36:02 1030 [ssh-keyscan.c] 1031 use timerclear macro 1032 ok djm@ 1033 - stevesk@cvs.openbsd.org 2011/03/23 15:16:22 1034 [ssh-keygen.1 ssh-keygen.c] 1035 Add -A option. For each of the key types (rsa1, rsa, dsa and ecdsa) 1036 for which host keys do not exist, generate the host keys with the 1037 default key file path, an empty passphrase, default bits for the key 1038 type, and default comment. This will be used by /etc/rc to generate 1039 new host keys. Idea from deraadt. 1040 ok deraadt 1041 - stevesk@cvs.openbsd.org 2011/03/23 16:24:56 1042 [ssh-keygen.1] 1043 -q not used in /etc/rc now so remove statement. 1044 - stevesk@cvs.openbsd.org 2011/03/23 16:50:04 1045 [ssh-keygen.c] 1046 remove -d, documentation removed >10 years ago; ok markus 1047 - jmc@cvs.openbsd.org 2011/03/24 15:29:30 1048 [ssh-keygen.1] 1049 zap trailing whitespace; 1050 - stevesk@cvs.openbsd.org 2011/03/24 22:14:54 1051 [ssh-keygen.c] 1052 use strcasecmp() for "clear" cert permission option also; ok djm 1053 - stevesk@cvs.openbsd.org 2011/03/29 18:54:17 1054 [misc.c misc.h servconf.c] 1055 print ipqos friendly string for sshd -T; ok markus 1056 # sshd -Tf sshd_config|grep ipqos 1057 ipqos lowdelay throughput 1058 - djm@cvs.openbsd.org 2011/04/12 04:23:50 1059 [ssh-keygen.c] 1060 fix -Wshadow 1061 - djm@cvs.openbsd.org 2011/04/12 05:32:49 1062 [sshd.c] 1063 exit with 0 status on SIGTERM; bz#1879 1064 - djm@cvs.openbsd.org 2011/04/13 04:02:48 1065 [ssh-keygen.1] 1066 improve wording; bz#1861 1067 - djm@cvs.openbsd.org 2011/04/13 04:09:37 1068 [ssh-keygen.1] 1069 mention valid -b sizes for ECDSA keys; bz#1862 1070 - djm@cvs.openbsd.org 2011/04/17 22:42:42 1071 [PROTOCOL.mux clientloop.c clientloop.h mux.c ssh.1 ssh.c] 1072 allow graceful shutdown of multiplexing: request that a mux server 1073 removes its listener socket and refuse future multiplexing requests; 1074 ok markus@ 1075 - djm@cvs.openbsd.org 2011/04/18 00:46:05 1076 [ssh-keygen.c] 1077 certificate options are supposed to be packed in lexical order of 1078 option name (though we don't actually enforce this at present). 1079 Move one up that was out of sequence 1080 - djm@cvs.openbsd.org 2011/05/04 21:15:29 1081 [authfile.c authfile.h ssh-add.c] 1082 allow "ssh-add - < key"; feedback and ok markus@ 1083 - (tim) [configure.ac] Add AC_LANG_SOURCE to OPENSSH_CHECK_CFLAG_COMPILE 1084 so autoreconf 2.68 is happy. 1085 - (tim) [defines.h] Deal with platforms that do not have S_IFSOCK ok djm@ 1086 108720110221 1088 - (dtucker) [contrib/cygwin/ssh-host-config] From Corinna: revamp of the 1089 Cygwin-specific service installer script ssh-host-config. The actual 1090 functionality is the same, the revisited version is just more 1091 exact when it comes to check for problems which disallow to run 1092 certain aspects of the script. So, part of this script and the also 1093 rearranged service helper script library "csih" is to check if all 1094 the tools required to run the script are available on the system. 1095 The new script also is more thorough to inform the user why the 1096 script failed. Patch from vinschen at redhat com. 1097 109820110218 1099 - OpenBSD CVS Sync 1100 - djm@cvs.openbsd.org 2011/02/16 00:31:14 1101 [ssh-keysign.c] 1102 make hostbased auth with ECDSA keys work correctly. Based on patch 1103 by harvey.eneman AT oracle.com in bz#1858; ok markus@ (pre-lock) 1104 110520110206 1106 - (dtucker) [openbsd-compat/port-linux.c] Bug #1851: fix syntax error in 1107 selinux code. Patch from Leonardo Chiquitto 1108 - (dtucker) [contrib/cygwin/ssh-{host,user}-config] Add ECDSA key 1109 generation and simplify. Patch from Corinna Vinschen. 1110 111120110204 1112 - OpenBSD CVS Sync 1113 - djm@cvs.openbsd.org 2011/01/31 21:42:15 1114 [PROTOCOL.mux] 1115 cut'n'pasto; from bert.wesarg AT googlemail.com 1116 - djm@cvs.openbsd.org 2011/02/04 00:44:21 1117 [key.c] 1118 fix uninitialised nonce variable; reported by Mateusz Kocielski 1119 - djm@cvs.openbsd.org 2011/02/04 00:44:43 1120 [version.h] 1121 openssh-5.8 1122 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 1123 [contrib/suse/openssh.spec] update versions in docs and spec files. 1124 - Release OpenSSH 5.8p1 1125 112620110128 1127 - (djm) [openbsd-compat/port-linux.c] Check whether SELinux is enabled 1128 before attempting setfscreatecon(). Check whether matchpathcon() 1129 succeeded before using its result. Patch from cjwatson AT debian.org; 1130 bz#1851 1131 113220110127 1133 - (tim) [config.guess config.sub] Sync with upstream. 1134 - (tim) [configure.ac] Consistent M4 quoting throughout, updated obsolete 1135 AC_TRY_COMPILE with AC_COMPILE_IFELSE, updated obsolete AC_TRY_LINK with 1136 AC_LINK_IFELSE, updated obsolete AC_TRY_RUN with AC_RUN_IFELSE, misc white 1137 space changes for consistency/readability. Makes autoconf 2.68 happy. 1138 "Nice work" djm 1139 114020110125 1141 - (djm) [configure.ac Makefile.in ssh.c openbsd-compat/port-linux.c 1142 openbsd-compat/port-linux.h] Move SELinux-specific code from ssh.c to 1143 port-linux.c to avoid compilation errors. Add -lselinux to ssh when 1144 building with SELinux support to avoid linking failure; report from 1145 amk AT spamfence.net; ok dtucker 1146 114720110122 1148 - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] Add 1149 RSA_get_default_method() for the benefit of openssl versions that don't 1150 have it (at least openssl-engine-0.9.6b). Found and tested by Kevin Brott, 1151 ok djm@. 1152 - OpenBSD CVS Sync 1153 - djm@cvs.openbsd.org 2011/01/22 09:18:53 1154 [version.h] 1155 crank to OpenSSH-5.7 1156 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 1157 [contrib/suse/openssh.spec] update versions in docs and spec files. 1158 - (djm) Release 5.7p1 1159 116020110119 1161 - (tim) [contrib/caldera/openssh.spec] Use CFLAGS from Makefile instead 1162 of RPM so build completes. Signatures were changed to .asc since 4.1p1. 1163 - (djm) [configure.ac] Disable ECC on OpenSSL <0.9.8g. Releases prior to 1164 0.9.8 lacked it, and 0.9.8a through 0.9.8d have proven buggy in pre- 1165 release testing (random crashes and failure to load ECC keys). 1166 ok dtucker@ 1167 116820110117 1169 - (djm) [regress/Makefile] use $TEST_SSH_KEYGEN instead of the one in 1170 $PATH, fix cleanup of droppings; reported by openssh AT 1171 roumenpetrov.info; ok dtucker@ 1172 - (djm) [regress/agent-ptrace.sh] Fix false failure on OS X by adding 1173 its unique snowflake of a gdb error to the ones we look for. 1174 - (djm) [regress/agent-getpeereid.sh] leave stdout attached when running 1175 ssh-add to avoid $SUDO failures on Linux 1176 - (dtucker) [openbsd-compat/port-linux.c] Bug #1838: Add support for the new 1177 Linux OOM-killer magic values that changed in 2.6.36 kernels, with fallback 1178 to the old values. Feedback from vapier at gentoo org and djm, ok djm. 1179 - (djm) [configure.ac regress/agent-getpeereid.sh regress/multiplex.sh] 1180 [regress/sftp-glob.sh regress/test-exec.sh] Rework how feature tests are 1181 disabled on platforms that do not support them; add a "config_defined()" 1182 shell function that greps for defines in config.h and use them to decide 1183 on feature tests. 1184 Convert a couple of existing grep's over config.h to use the new function 1185 Add a define "FILESYSTEM_NO_BACKSLASH" for filesystem that can't represent 1186 backslash characters in filenames, enable it for Cygwin and use it to turn 1187 of tests for quotes backslashes in sftp-glob.sh. 1188 based on discussion with vinschen AT redhat.com and dtucker@; ok dtucker@ 1189 - (tim) [regress/agent-getpeereid.sh] shell portability fix. 1190 - (dtucker) [openbsd-compat/port-linux.c] Fix minor bug caught by -Werror on 1191 the tinderbox. 1192 - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 1193 configure.ac defines.h loginrec.c] Bug #1402: add linux audit subsystem 1194 support, based on patches from Tomas Mraz and jchadima at redhat. 1195 119620110116 1197 - (dtucker) [Makefile.in configure.ac regress/kextype.sh] Skip sha256-based 1198 on configurations that don't have it. 1199 - OpenBSD CVS Sync 1200 - djm@cvs.openbsd.org 2011/01/16 11:50:05 1201 [clientloop.c] 1202 Use atomicio when flushing protocol 1 std{out,err} buffers at 1203 session close. This was a latent bug exposed by setting a SIGCHLD 1204 handler and spotted by kevin.brott AT gmail.com; ok dtucker@ 1205 - djm@cvs.openbsd.org 2011/01/16 11:50:36 1206 [sshconnect.c] 1207 reset the SIGPIPE handler when forking to execute child processes; 1208 ok dtucker@ 1209 - djm@cvs.openbsd.org 2011/01/16 12:05:59 1210 [clientloop.c] 1211 a couple more tweaks to the post-close protocol 1 stderr/stdout flush: 1212 now that we use atomicio(), convert them from while loops to if statements 1213 add test and cast to compile cleanly with -Wsigned 1214 121520110114 1216 - OpenBSD CVS Sync 1217 - djm@cvs.openbsd.org 2011/01/13 21:54:53 1218 [mux.c] 1219 correct error messages; patch from bert.wesarg AT googlemail.com 1220 - djm@cvs.openbsd.org 2011/01/13 21:55:25 1221 [PROTOCOL.mux] 1222 correct protocol names and add a couple of missing protocol number 1223 defines; patch from bert.wesarg AT googlemail.com 1224 - (djm) [Makefile.in] Use shell test to disable ecdsa key generating in 1225 host-key-force target rather than a substitution that is replaced with a 1226 comment so that the Makefile.in is still a syntactically valid Makefile 1227 (useful to run the distprep target) 1228 - (tim) [regress/cert-hostkey.sh] Typo. Missing $ on variable name. 1229 - (tim) [regress/cert-hostkey.sh] Add missing TEST_SSH_ECC guard around some 1230 ecdsa bits. 1231 123220110113 1233 - (djm) [misc.c] include time.h for nanosleep() prototype 1234 - (tim) [Makefile.in] test the ECC bits if we have the capability. ok djm 1235 - (tim) [Makefile.in configure.ac opensshd.init.in] Add support for generating 1236 ecdsa keys. ok djm. 1237 - (djm) [entropy.c] cast OPENSSL_VERSION_NUMBER to u_long to avoid 1238 gcc warning on platforms where it defaults to int 1239 - (djm) [regress/Makefile] add a few more generated files to the clean 1240 target 1241 - (djm) [myproposal.h] Fix reversed OPENSSL_VERSION_NUMBER test and bad 1242 #define that was causing diffie-hellman-group-exchange-sha256 to be 1243 incorrectly disabled 1244 - (djm) [regress/kextype.sh] Testing diffie-hellman-group-exchange-sha256 1245 should not depend on ECC support 1246 124720110112 1248 - OpenBSD CVS Sync 1249 - nicm@cvs.openbsd.org 2010/10/08 21:48:42 1250 [openbsd-compat/glob.c] 1251 Extend GLOB_LIMIT to cover readdir and stat and bump the malloc limit 1252 from ARG_MAX to 64K. 1253 Fixes glob-using programs (notably ftp) able to be triggered to hit 1254 resource limits. 1255 Idea from a similar NetBSD change, original problem reported by jasper@. 1256 ok millert tedu jasper 1257 - djm@cvs.openbsd.org 2011/01/12 01:53:14 1258 avoid some integer overflows mostly with GLOB_APPEND and GLOB_DOOFFS 1259 and sanity check arguments (these will be unnecessary when we switch 1260 struct glob members from being type into to size_t in the future); 1261 "looks ok" tedu@ feedback guenther@ 1262 - (djm) [configure.ac] Turn on -Wno-unused-result for gcc >= 4.4 to avoid 1263 silly warnings on write() calls we don't care succeed or not. 1264 - (djm) [configure.ac] Fix broken test for gcc >= 4.4 with per-compiler 1265 flag tests that don't depend on gcc version at all; suggested by and 1266 ok dtucker@ 1267 126820110111 1269 - (tim) [regress/host-expand.sh] Fix for building outside of read only 1270 source tree. 1271 - (djm) [platform.c] Some missing includes that show up under -Werror 1272 - OpenBSD CVS Sync 1273 - djm@cvs.openbsd.org 2011/01/08 10:51:51 1274 [clientloop.c] 1275 use host and not options.hostname, as the latter may have unescaped 1276 substitution characters 1277 - djm@cvs.openbsd.org 2011/01/11 06:06:09 1278 [sshlogin.c] 1279 fd leak on error paths; from zinovik@ 1280 NB. Id sync only; we use loginrec.c that was also audited and fixed 1281 recently 1282 - djm@cvs.openbsd.org 2011/01/11 06:13:10 1283 [clientloop.c ssh-keygen.c sshd.c] 1284 some unsigned long long casts that make things a bit easier for 1285 portable without resorting to dropping PRIu64 formats everywhere 1286 128720110109 1288 - (djm) [Makefile.in] list ssh_host_ecdsa key in PATHSUBS; spotted by 1289 openssh AT roumenpetrov.info 1290 129120110108 1292 - (djm) [regress/keytype.sh] s/echo -n/echon/ to repair failing regress 1293 test on OSX and others. Reported by imorgan AT nas.nasa.gov 1294 129520110107 1296 - (djm) [regress/cert-hostkey.sh regress/cert-userkey.sh] fix shell test 1297 for no-ECC case. Patch from cristian.ionescu-idbohrn AT axis.com 1298 - djm@cvs.openbsd.org 2011/01/06 22:23:53 1299 [ssh.c] 1300 unbreak %n expansion in LocalCommand; patch from bert.wesarg AT 1301 googlemail.com; ok markus@ 1302 - djm@cvs.openbsd.org 2011/01/06 22:23:02 1303 [clientloop.c] 1304 when exiting due to ServerAliveTimeout, mention the hostname that caused 1305 it (useful with backgrounded controlmaster) 1306 - djm@cvs.openbsd.org 2011/01/06 22:46:21 1307 [regress/Makefile regress/host-expand.sh] 1308 regress test for LocalCommand %n expansion from bert.wesarg AT 1309 googlemail.com; ok markus@ 1310 - djm@cvs.openbsd.org 2011/01/06 23:01:35 1311 [sshconnect.c] 1312 reset SIGCHLD handler to SIG_DFL when execuring LocalCommand; 1313 ok markus@ 1314 131520110106 1316 - (djm) OpenBSD CVS Sync 1317 - markus@cvs.openbsd.org 2010/12/08 22:46:03 1318 [scp.1 scp.c] 1319 add a new -3 option to scp: Copies between two remote hosts are 1320 transferred through the local host. Without this option the data 1321 is copied directly between the two remote hosts. ok djm@ (bugzilla #1837) 1322 - jmc@cvs.openbsd.org 2010/12/09 14:13:33 1323 [scp.1 scp.c] 1324 scp.1: grammer fix 1325 scp.c: add -3 to usage() 1326 - markus@cvs.openbsd.org 2010/12/14 11:59:06 1327 [sshconnect.c] 1328 don't mention key type in key-changed-warning, since we also print 1329 this warning if a new key type appears. ok djm@ 1330 - djm@cvs.openbsd.org 2010/12/15 00:49:27 1331 [readpass.c] 1332 fix ControlMaster=ask regression 1333 reset SIGCHLD handler before fork (and restore it after) so we don't miss 1334 the the askpass child's exit status. Correct test for exit status/signal to 1335 account for waitpid() failure; with claudio@ ok claudio@ markus@ 1336 - djm@cvs.openbsd.org 2010/12/24 21:41:48 1337 [auth-options.c] 1338 don't send the actual forced command in a debug message; ok markus deraadt 1339 - otto@cvs.openbsd.org 2011/01/04 20:44:13 1340 [ssh-keyscan.c] 1341 handle ecdsa-sha2 with various key lengths; hint and ok djm@ 1342 134320110104 1344 - (djm) [configure.ac Makefile.in] Use mandoc as preferred manpage 1345 formatter if it is present, followed by nroff and groff respectively. 1346 Fixes distprep target on OpenBSD (which has bumped groff/nroff to ports 1347 in favour of mandoc). feedback and ok tim 1348 134920110103 1350 - (djm) [Makefile.in] revert local hack I didn't intend to commit 1351 135220110102 1353 - (djm) [loginrec.c] Fix some fd leaks on error paths. ok dtucker 1354 - (djm) [configure.ac] Check whether libdes is needed when building 1355 with Heimdal krb5 support. On OpenBSD this library no longer exists, 1356 so linking it unconditionally causes a build failure; ok dtucker 1357 135820101226 1359 - (dtucker) OpenBSD CVS Sync 1360 - djm@cvs.openbsd.org 2010/12/08 04:02:47 1361 [ssh_config.5 sshd_config.5] 1362 explain that IPQoS arguments are separated by whitespace; iirc requested 1363 by jmc@ a while back 1364 136520101205 1366 - (dtucker) openbsd-compat/openssl-compat.c] remove sleep leftover from 1367 debugging. Spotted by djm. 1368 - (dtucker) OpenBSD CVS Sync 1369 - djm@cvs.openbsd.org 2010/12/03 23:49:26 1370 [schnorr.c] 1371 check that g^x^q === 1 mod p; recommended by JPAKE author Feng Hao 1372 (this code is still disabled, but apprently people are treating it as 1373 a reference implementation) 1374 - djm@cvs.openbsd.org 2010/12/03 23:55:27 1375 [auth-rsa.c] 1376 move check for revoked keys to run earlier (in auth_rsa_key_allowed) 1377 bz#1829; patch from ldv AT altlinux.org; ok markus@ 1378 - djm@cvs.openbsd.org 2010/12/04 00:18:01 1379 [sftp-server.c sftp.1 sftp-client.h sftp.c PROTOCOL sftp-client.c] 1380 add a protocol extension to support a hard link operation. It is 1381 available through the "ln" command in the client. The old "ln" 1382 behaviour of creating a symlink is available using its "-s" option 1383 or through the preexisting "symlink" command; based on a patch from 1384 miklos AT szeredi.hu in bz#1555; ok markus@ 1385 - djm@cvs.openbsd.org 2010/12/04 13:31:37 1386 [hostfile.c] 1387 fix fd leak; spotted and ok dtucker 1388 - djm@cvs.openbsd.org 2010/12/04 00:21:19 1389 [regress/sftp-cmds.sh] 1390 adjust for hard-link support 1391 - (dtucker) [regress/Makefile] Id sync. 1392 139320101204 1394 - (djm) [openbsd-compat/bindresvport.c] Use arc4random_uniform(range) 1395 instead of (arc4random() % range) 1396 - (dtucker) [configure.ac moduli.c openbsd-compat/openssl-compat.{c,h}] Add 1397 shims for the new, non-deprecated OpenSSL key generation functions for 1398 platforms that don't have the new interfaces. 1399 140020101201 1401 - OpenBSD CVS Sync 1402 - deraadt@cvs.openbsd.org 2010/11/20 05:12:38 1403 [auth2-pubkey.c] 1404 clean up cases of ;; 1405 - djm@cvs.openbsd.org 2010/11/21 01:01:13 1406 [clientloop.c misc.c misc.h ssh-agent.1 ssh-agent.c] 1407 honour $TMPDIR for client xauth and ssh-agent temporary directories; 1408 feedback and ok markus@ 1409 - djm@cvs.openbsd.org 2010/11/21 10:57:07 1410 [authfile.c] 1411 Refactor internals of private key loading and saving to work on memory 1412 buffers rather than directly on files. This will make a few things 1413 easier to do in the future; ok markus@ 1414 - djm@cvs.openbsd.org 2010/11/23 02:35:50 1415 [auth.c] 1416 use strict_modes already passed as function argument over referencing 1417 global options.strict_modes 1418 - djm@cvs.openbsd.org 2010/11/23 23:57:24 1419 [clientloop.c] 1420 avoid NULL deref on receiving a channel request on an unknown or invalid 1421 channel; report bz#1842 from jchadima AT redhat.com; ok dtucker@ 1422 - djm@cvs.openbsd.org 2010/11/24 01:24:14 1423 [channels.c] 1424 remove a debug() that pollutes stderr on client connecting to a server 1425 in debug mode (channel_close_fds is called transitively from the session 1426 code post-fork); bz#1719, ok dtucker 1427 - djm@cvs.openbsd.org 2010/11/25 04:10:09 1428 [session.c] 1429 replace close() loop for fds 3->64 with closefrom(); 1430 ok markus deraadt dtucker 1431 - djm@cvs.openbsd.org 2010/11/26 05:52:49 1432 [scp.c] 1433 Pass through ssh command-line flags and options when doing remote-remote 1434 transfers, e.g. to enable agent forwarding which is particularly useful 1435 in this case; bz#1837 ok dtucker@ 1436 - markus@cvs.openbsd.org 2010/11/29 18:57:04 1437 [authfile.c] 1438 correctly load comment for encrypted rsa1 keys; 1439 report/fix Joachim Schipper; ok djm@ 1440 - djm@cvs.openbsd.org 2010/11/29 23:45:51 1441 [auth.c hostfile.c hostfile.h ssh.c ssh_config.5 sshconnect.c] 1442 [sshconnect.h sshconnect2.c] 1443 automatically order the hostkeys requested by the client based on 1444 which hostkeys are already recorded in known_hosts. This avoids 1445 hostkey warnings when connecting to servers with new ECDSA keys 1446 that are preferred by default; with markus@ 1447 144820101124 1449 - (dtucker) [platform.c session.c] Move the getluid call out of session.c and 1450 into the platform-specific code Only affects SCO, tested by and ok tim@. 1451 - (djm) [loginrec.c] Relax permission requirement on btmp logs to allow 1452 group read/write. ok dtucker@ 1453 - (dtucker) [packet.c] Remove redundant local declaration of "int tos". 1454 - (djm) [defines.h] Add IP DSCP defines 1455 145620101122 1457 - (dtucker) Bug #1840: fix warning when configuring --with-ssl-engine, patch 1458 from vapier at gentoo org. 1459 146020101120 1461 - OpenBSD CVS Sync 1462 - djm@cvs.openbsd.org 2010/11/05 02:46:47 1463 [packet.c] 1464 whitespace KNF 1465 - djm@cvs.openbsd.org 2010/11/10 01:33:07 1466 [kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c moduli.c] 1467 use only libcrypto APIs that are retained with OPENSSL_NO_DEPRECATED. 1468 these have been around for years by this time. ok markus 1469 - djm@cvs.openbsd.org 2010/11/13 23:27:51 1470 [clientloop.c misc.c misc.h packet.c packet.h readconf.c readconf.h] 1471 [servconf.c servconf.h session.c ssh.c ssh_config.5 sshd_config.5] 1472 allow ssh and sshd to set arbitrary TOS/DSCP/QoS values instead of 1473 hardcoding lowdelay/throughput. 1474 1475 bz#1733 patch from philipp AT redfish-solutions.com; ok markus@ deraadt@ 1476 - jmc@cvs.openbsd.org 2010/11/15 07:40:14 1477 [ssh_config.5] 1478 libary -> library; 1479 - jmc@cvs.openbsd.org 2010/11/18 15:01:00 1480 [scp.1 sftp.1 ssh.1 sshd_config.5] 1481 add IPQoS to the various -o lists, and zap some trailing whitespace; 1482 148320101111 1484 - (djm) [servconf.c ssh-add.c ssh-keygen.c] don't look for ECDSA keys on 1485 platforms that don't support ECC. Fixes some spurious warnings reported 1486 by tim@ 1487 148820101109 1489 - (tim) [regress/kextype.sh] Not all platforms have time in /usr/bin. 1490 Feedback from dtucker@ 1491 - (tim) [configure.ac openbsd-compat/bsd-misc.h openbsd-compat/bsd-misc.c] Add 1492 support for platforms missing isblank(). ok djm@ 1493 149420101108 1495 - (tim) [regress/Makefile] Fixes to allow building/testing outside source 1496 tree. 1497 - (tim) [regress/kextype.sh] Shell portability fix. 1498 149920101107 1500 - (dtucker) [platform.c] includes.h instead of defines.h so that we get 1501 the correct typedefs. 1502 150320101105 1504 - (djm) [loginrec.c loginrec.h] Use correct uid_t/pid_t types instead of 1505 int. Should fix bz#1817 cleanly; ok dtucker@ 1506 - OpenBSD CVS Sync 1507 - djm@cvs.openbsd.org 2010/09/22 12:26:05 1508 [regress/Makefile regress/kextype.sh] 1509 regress test for each of the key exchange algorithms that we support 1510 - djm@cvs.openbsd.org 2010/10/28 11:22:09 1511 [authfile.c key.c key.h ssh-keygen.c] 1512 fix a possible NULL deref on loading a corrupt ECDH key 1513 1514 store ECDH group information in private keys files as "named groups" 1515 rather than as a set of explicit group parameters (by setting 1516 the OPENSSL_EC_NAMED_CURVE flag). This makes for shorter key files and 1517 retrieves the group's OpenSSL NID that we need for various things. 1518 - jmc@cvs.openbsd.org 2010/10/28 18:33:28 1519 [scp.1 ssh-add.1 ssh-keygen.1 ssh.1 ssh_config.5 sshd.8 sshd_config.5] 1520 knock out some "-*- nroff -*-" lines; 1521 - djm@cvs.openbsd.org 2010/11/04 02:45:34 1522 [sftp-server.c] 1523 umask should be parsed as octal. reported by candland AT xmission.com; 1524 ok markus@ 1525 - (dtucker) [configure.ac platform.{c,h} session.c 1526 openbsd-compat/port-solaris.{c,h}] Bug #1824: Add Solaris Project support. 1527 Patch from cory.erickson at csu mnscu edu with a bit of rework from me. 1528 ok djm@ 1529 - (dtucker) [platform.c platform.h session.c] Add a platform hook to run 1530 after the user's groups are established and move the selinux calls into it. 1531 - (dtucker) [platform.c session.c] Move the AIX setpcred+chroot hack into 1532 platform.c 1533 - (dtucker) [platform.c session.c] Move the BSDI setpgrp into platform.c. 1534 - (dtucker) [platform.c] Only call setpgrp on BSDI if running as root to 1535 retain previous behavior. 1536 - (dtucker) [platform.c session.c] Move the PAM credential establishment for 1537 the LOGIN_CAP case into platform.c. 1538 - (dtucker) platform.c session.c] Move the USE_LIBIAF fragment into 1539 platform.c 1540 - (dtucker) [platform.c session.c] Move aix_usrinfo frament into platform.c. 1541 - (dtucker) [platform.c session.c] Move irix setusercontext fragment into 1542 platform.c. 1543 - (dtucker) [platform.c session.c] Move PAM credential establishment for the 1544 non-LOGIN_CAP case into platform.c. 1545 - (dtucker) [platform.c platform.h session.c] Move the Cygwin special-case 1546 check into platform.c 1547 - (dtucker) [regress/keytype.sh] Import new test. 1548 - (dtucker) [Makefile configure.ac regress/Makefile regress/keytype.sh] 1549 Import recent changes to regress/Makefile, pass a flag to enable ECC tests 1550 from configure through to regress/Makefile and use it in the tests. 1551 - (dtucker) [regress/kextype.sh] Add missing "test". 1552 - (dtucker) [regress/kextype.sh] Make sha256 test depend on ECC. This is not 1553 strictly correct since while ECC requires sha256 the reverse is not true 1554 however it does prevent spurious test failures. 1555 - (dtucker) [platform.c] Need servconf.h and extern options. 1556 155720101025 1558 - (tim) [openbsd-compat/glob.h] Remove sys/cdefs.h include that came with 1559 1.12 to unbreak Solaris build. 1560 ok djm@ 1561 - (dtucker) [defines.h] Use SIZE_T_MAX for SIZE_MAX for platforms that have a 1562 native one. 1563 156420101024 1565 - (dtucker) [includes.h] Add missing ifdef GLOB_HAS_GL_STATV to fix build. 1566 - (dtucker) [regress/cert-hostkey.sh] Disable ECC-based tests on platforms 1567 which don't have ECC support in libcrypto. 1568 - (dtucker) [regress/cert-userkey.sh] Disable ECC-based tests on platforms 1569 which don't have ECC support in libcrypto. 1570 - (dtucker) [defines.h] Add SIZE_MAX for the benefit of platforms that don't 1571 have it. 1572 - (dtucker) OpenBSD CVS Sync 1573 - sthen@cvs.openbsd.org 2010/10/23 22:06:12 1574 [sftp.c] 1575 escape '[' in filename tab-completion; fix a type while there. 1576 ok djm@ 1577 157820101021 1579 - OpenBSD CVS Sync 1580 - dtucker@cvs.openbsd.org 2010/10/12 02:22:24 1581 [mux.c] 1582 Typo in confirmation message. bz#1827, patch from imorgan at 1583 nas nasa gov 1584 - djm@cvs.openbsd.org 2010/08/31 12:24:09 1585 [regress/cert-hostkey.sh regress/cert-userkey.sh] 1586 tests for ECDSA certificates 1587 158820101011 1589 - (djm) [canohost.c] Zero a4 instead of addr to better match type. 1590 bz#1825, reported by foo AT mailinator.com 1591 - (djm) [sshconnect.c] Need signal.h for prototype for kill(2) 1592 159320101011 1594 - (djm) [configure.ac] Use = instead of == in shell tests. Patch from 1595 dr AT vasco.com 1596 159720101007 1598 - (djm) [ssh-agent.c] Fix type for curve name. 1599 - (djm) OpenBSD CVS Sync 1600 - matthew@cvs.openbsd.org 2010/09/24 13:33:00 1601 [misc.c misc.h configure.ac openbsd-compat/openbsd-compat.h] 1602 [openbsd-compat/timingsafe_bcmp.c] 1603 Add timingsafe_bcmp(3) to libc, mention that it's already in the 1604 kernel in kern(9), and remove it from OpenSSH. 1605 ok deraadt@, djm@ 1606 NB. re-added under openbsd-compat/ for portable OpenSSH 1607 - djm@cvs.openbsd.org 2010/09/25 09:30:16 1608 [sftp.c configure.ac openbsd-compat/glob.c openbsd-compat/glob.h] 1609 make use of new glob(3) GLOB_KEEPSTAT extension to save extra server 1610 rountrips to fetch per-file stat(2) information. 1611 NB. update openbsd-compat/ glob(3) implementation from OpenBSD libc to 1612 match. 1613 - djm@cvs.openbsd.org 2010/09/26 22:26:33 1614 [sftp.c] 1615 when performing an "ls" in columnated (short) mode, only call 1616 ioctl(TIOCGWINSZ) once to get the window width instead of per- 1617 filename 1618 - djm@cvs.openbsd.org 2010/09/30 11:04:51 1619 [servconf.c] 1620 prevent free() of string in .rodata when overriding AuthorizedKeys in 1621 a Match block; patch from rein AT basefarm.no 1622 - djm@cvs.openbsd.org 2010/10/01 23:05:32 1623 [cipher-3des1.c cipher-bf1.c cipher-ctr.c openbsd-compat/openssl-compat.h] 1624 adapt to API changes in openssl-1.0.0a 1625 NB. contains compat code to select correct API for older OpenSSL 1626 - djm@cvs.openbsd.org 2010/10/05 05:13:18 1627 [sftp.c sshconnect.c] 1628 use default shell /bin/sh if $SHELL is ""; ok markus@ 1629 - djm@cvs.openbsd.org 2010/10/06 06:39:28 1630 [clientloop.c ssh.c sshconnect.c sshconnect.h] 1631 kill proxy command on fatal() (we already kill it on clean exit); 1632 ok markus@ 1633 - djm@cvs.openbsd.org 2010/10/06 21:10:21 1634 [sshconnect.c] 1635 swapped args to kill(2) 1636 - (djm) [openbsd-compat/glob.c] restore ARG_MAX compat code. 1637 - (djm) [cipher-acss.c] Add missing header. 1638 - (djm) [openbsd-compat/Makefile.in] Actually link timingsafe_bcmp 1639 164020100924 1641 - (djm) OpenBSD CVS Sync 1642 - naddy@cvs.openbsd.org 2010/09/10 15:19:29 1643 [ssh-keygen.1] 1644 * mention ECDSA in more places 1645 * less repetition in FILES section 1646 * SSHv1 keys are still encrypted with 3DES 1647 help and ok jmc@ 1648 - djm@cvs.openbsd.org 2010/09/11 21:44:20 1649 [ssh.1] 1650 mention RFC 5656 for ECC stuff 1651 - jmc@cvs.openbsd.org 2010/09/19 21:30:05 1652 [sftp.1] 1653 more wacky macro fixing; 1654 - djm@cvs.openbsd.org 2010/09/20 04:41:47 1655 [ssh.c] 1656 install a SIGCHLD handler to reap expiried child process; ok markus@ 1657 - djm@cvs.openbsd.org 2010/09/20 04:50:53 1658 [jpake.c schnorr.c] 1659 check that received values are smaller than the group size in the 1660 disabled and unfinished J-PAKE code. 1661 avoids catastrophic security failure found by Sebastien Martini 1662 - djm@cvs.openbsd.org 2010/09/20 04:54:07 1663 [jpake.c] 1664 missing #include 1665 - djm@cvs.openbsd.org 2010/09/20 07:19:27 1666 [mux.c] 1667 "atomically" create the listening mux socket by binding it on a temorary 1668 name and then linking it into position after listen() has succeeded. 1669 this allows the mux clients to determine that the server socket is 1670 either ready or stale without races. stale server sockets are now 1671 automatically removed 1672 ok deraadt 1673 - djm@cvs.openbsd.org 2010/09/22 05:01:30 1674 [kex.c kex.h kexecdh.c kexecdhc.c kexecdhs.c readconf.c readconf.h] 1675 [servconf.c servconf.h ssh_config.5 sshconnect2.c sshd.c sshd_config.5] 1676 add a KexAlgorithms knob to the client and server configuration to allow 1677 selection of which key exchange methods are used by ssh(1) and sshd(8) 1678 and their order of preference. 1679 ok markus@ 1680 - jmc@cvs.openbsd.org 2010/09/22 08:30:08 1681 [ssh.1 ssh_config.5] 1682 ssh.1: add kexalgorithms to the -o list 1683 ssh_config.5: format the kexalgorithms in a more consistent 1684 (prettier!) way 1685 ok djm 1686 - djm@cvs.openbsd.org 2010/09/22 22:58:51 1687 [atomicio.c atomicio.h misc.c misc.h scp.c sftp-client.c] 1688 [sftp-client.h sftp.1 sftp.c] 1689 add an option per-read/write callback to atomicio 1690 1691 factor out bandwidth limiting code from scp(1) into a generic bandwidth 1692 limiter that can be attached using the atomicio callback mechanism 1693 1694 add a bandwidth limit option to sftp(1) using the above 1695 "very nice" markus@ 1696 - jmc@cvs.openbsd.org 2010/09/23 13:34:43 1697 [sftp.c] 1698 add [-l limit] to usage(); 1699 - jmc@cvs.openbsd.org 2010/09/23 13:36:46 1700 [scp.1 sftp.1] 1701 add KexAlgorithms to the -o list; 1702 170320100910 1704 - (dtucker) [openbsd-compat/port-linux.c] Check is_selinux_enabled for exact 1705 return code since it can apparently return -1 under some conditions. From 1706 openssh bugs werbittewas de, ok djm@ 1707 - OpenBSD CVS Sync 1708 - djm@cvs.openbsd.org 2010/08/31 12:33:38 1709 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keysign.c ssh.c sshd.c] 1710 reintroduce commit from tedu@, which I pulled out for release 1711 engineering: 1712 OpenSSL_add_all_algorithms is the name of the function we have a 1713 man page for, so use that. ok djm 1714 - jmc@cvs.openbsd.org 2010/08/31 17:40:54 1715 [ssh-agent.1] 1716 fix some macro abuse; 1717 - jmc@cvs.openbsd.org 2010/08/31 21:14:58 1718 [ssh.1] 1719 small text tweak to accommodate previous; 1720 - naddy@cvs.openbsd.org 2010/09/01 15:21:35 1721 [servconf.c] 1722 pick up ECDSA host key by default; ok djm@ 1723 - markus@cvs.openbsd.org 2010/09/02 16:07:25 1724 [ssh-keygen.c] 1725 permit -b 256, 384 or 521 as key size for ECDSA; ok djm@ 1726 - markus@cvs.openbsd.org 2010/09/02 16:08:39 1727 [ssh.c] 1728 unbreak ControlPersist=yes for ControlMaster=yes; ok djm@ 1729 - naddy@cvs.openbsd.org 2010/09/02 17:21:50 1730 [ssh-keygen.c] 1731 Switch ECDSA default key size to 256 bits, which according to RFC5656 1732 should still be better than our current RSA-2048 default. 1733 ok djm@, markus@ 1734 - jmc@cvs.openbsd.org 2010/09/03 11:09:29 1735 [scp.1] 1736 add an EXIT STATUS section for /usr/bin; 1737 - jmc@cvs.openbsd.org 2010/09/04 09:38:34 1738 [ssh-add.1 ssh.1] 1739 two more EXIT STATUS sections; 1740 - naddy@cvs.openbsd.org 2010/09/06 17:10:19 1741 [sshd_config] 1742 add ssh_host_ecdsa_key to /etc; from Mattieu Baptiste 1743 <mattieu.b@gmail.com> 1744 ok deraadt@ 1745 - djm@cvs.openbsd.org 2010/09/08 03:54:36 1746 [authfile.c] 1747 typo 1748 - deraadt@cvs.openbsd.org 2010/09/08 04:13:31 1749 [compress.c] 1750 work around name-space collisions some buggy compilers (looking at you 1751 gcc, at least in earlier versions, but this does not forgive your current 1752 transgressions) seen between zlib and openssl 1753 ok djm 1754 - djm@cvs.openbsd.org 2010/09/09 10:45:45 1755 [kex.c kex.h kexecdh.c key.c key.h monitor.c ssh-ecdsa.c] 1756 ECDH/ECDSA compliance fix: these methods vary the hash function they use 1757 (SHA256/384/512) depending on the length of the curve in use. The previous 1758 code incorrectly used SHA256 in all cases. 1759 1760 This fix will cause authentication failure when using 384 or 521-bit curve 1761 keys if one peer hasn't been upgraded and the other has. (256-bit curve 1762 keys work ok). In particular you may need to specify HostkeyAlgorithms 1763 when connecting to a server that has not been upgraded from an upgraded 1764 client. 1765 1766 ok naddy@ 1767 - (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c] 1768 [kexecdhc.c kexecdhs.c key.c key.h myproposal.h packet.c readconf.c] 1769 [ssh-agent.c ssh-ecdsa.c ssh-keygen.c ssh.c] Disable ECDH and ECDSA on 1770 platforms that don't have the requisite OpenSSL support. ok dtucker@ 1771 - (dtucker) [kex.h key.c packet.h ssh-agent.c ssh.c] A few more ECC ifdefs 1772 for missing headers and compiler warnings. 1773 177420100831 1775 - OpenBSD CVS Sync 1776 - jmc@cvs.openbsd.org 2010/08/08 19:36:30 1777 [ssh-keysign.8 ssh.1 sshd.8] 1778 use the same template for all FILES sections; i.e. -compact/.Pp where we 1779 have multiple items, and .Pa for path names; 1780 - tedu@cvs.openbsd.org 2010/08/12 23:34:39 1781 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keysign.c ssh.c sshd.c] 1782 OpenSSL_add_all_algorithms is the name of the function we have a man page 1783 for, so use that. ok djm 1784 - djm@cvs.openbsd.org 2010/08/16 04:06:06 1785 [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keysign.c ssh.c sshd.c] 1786 backout previous temporarily; discussed with deraadt@ 1787 - djm@cvs.openbsd.org 2010/08/31 09:58:37 1788 [auth-options.c auth1.c auth2.c bufaux.c buffer.h kex.c key.c packet.c] 1789 [packet.h ssh-dss.c ssh-rsa.c] 1790 Add buffer_get_cstring() and related functions that verify that the 1791 string extracted from the buffer contains no embedded \0 characters* 1792 This prevents random (possibly malicious) crap from being appended to 1793 strings where it would not be noticed if the string is used with 1794 a string(3) function. 1795 1796 Use the new API in a few sensitive places. 1797 1798 * actually, we allow a single one at the end of the string for now because 1799 we don't know how many deployed implementations get this wrong, but don't 1800 count on this to remain indefinitely. 1801 - djm@cvs.openbsd.org 2010/08/31 11:54:45 1802 [PROTOCOL PROTOCOL.agent PROTOCOL.certkeys auth2-jpake.c authfd.c] 1803 [authfile.c buffer.h dns.c kex.c kex.h key.c key.h monitor.c] 1804 [monitor_wrap.c myproposal.h packet.c packet.h pathnames.h readconf.c] 1805 [ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c] 1806 [ssh-keyscan.1 ssh-keyscan.c ssh-keysign.8 ssh.1 ssh.c ssh2.h] 1807 [ssh_config.5 sshconnect.c sshconnect2.c sshd.8 sshd.c sshd_config.5] 1808 [uuencode.c uuencode.h bufec.c kexecdh.c kexecdhc.c kexecdhs.c ssh-ecdsa.c] 1809 Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and 1810 host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer 1811 better performance than plain DH and DSA at the same equivalent symmetric 1812 key length, as well as much shorter keys. 1813 1814 Only the mandatory sections of RFC5656 are implemented, specifically the 1815 three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and 1816 ECDSA. Point compression (optional in RFC5656 is NOT implemented). 1817 1818 Certificate host and user keys using the new ECDSA key types are supported. 1819 1820 Note that this code has not been tested for interoperability and may be 1821 subject to change. 1822 1823 feedback and ok markus@ 1824 - (djm) [Makefile.in] Add new ECC files 1825 - (djm) [bufec.c kexecdh.c kexecdhc.c kexecdhs.c ssh-ecdsa.c] include 1826 includes.h 1827 182820100827 1829 - (dtucker) [contrib/redhat/sshd.init] Bug #1810: initlog is deprecated, 1830 remove. Patch from martynas at venck us 1831 183220100823 1833 - (djm) Release OpenSSH-5.6p1 1834 183520100816 1836 - (dtucker) [configure.ac openbsd-compat/Makefile.in 1837 openbsd-compat/openbsd-compat.h openbsd-compat/strptime.c] Add strptime to 1838 the compat library which helps on platforms like old IRIX. Based on work 1839 by djm, tested by Tom Christensen. 1840 - OpenBSD CVS Sync 1841 - djm@cvs.openbsd.org 2010/08/12 21:49:44 1842 [ssh.c] 1843 close any extra file descriptors inherited from parent at start and 1844 reopen stdin/stdout to /dev/null when forking for ControlPersist. 1845 1846 prevents tools that fork and run a captive ssh for communication from 1847 failing to exit when the ssh completes while they wait for these fds to 1848 close. The inherited fds may persist arbitrarily long if a background 1849 mux master has been started by ControlPersist. cvs and scp were effected 1850 by this. 1851 1852 "please commit" markus@ 1853 - (djm) [regress/README.regress] typo 1854 185520100812 1856 - (tim) [regress/login-timeout.sh regress/reconfigure.sh regress/reexec.sh 1857 regress/test-exec.sh] Under certain conditions when testing with sudo 1858 tests would fail because the pidfile could not be read by a regular user. 1859 "cat: cannot open ...../regress/pidfile: Permission denied (error 13)" 1860 Make sure cat is run by $SUDO. no objection from me. djm@ 1861 - (tim) [auth.c] add cast to quiet compiler. Change only affects SVR5 systems. 1862 186320100809 1864 - (djm) bz#1561: don't bother setting IFF_UP on tun(4) device if it is 1865 already set. Makes FreeBSD user openable tunnels useful; patch from 1866 richard.burakowski+ossh AT mrburak.net, ok dtucker@ 1867 - (dtucker) bug #1530: strip trailing ":" from hostname in ssh-copy-id. 1868 based in part on a patch from Colin Watson, ok djm@ 1869 187020100809 1871 - OpenBSD CVS Sync 1872 - djm@cvs.openbsd.org 2010/08/08 16:26:42 1873 [version.h] 1874 crank to 5.6 1875 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 1876 [contrib/suse/openssh.spec] Crank version numbers 1877 187820100805 1879 - OpenBSD CVS Sync 1880 - djm@cvs.openbsd.org 2010/08/04 05:37:01 1881 [ssh.1 ssh_config.5 sshd.8] 1882 Remove mentions of weird "addr/port" alternate address format for IPv6 1883 addresses combinations. It hasn't worked for ages and we have supported 1884 the more commen "[addr]:port" format for a long time. ok jmc@ markus@ 1885 - djm@cvs.openbsd.org 2010/08/04 05:40:39 1886 [PROTOCOL.certkeys ssh-keygen.c] 1887 tighten the rules for certificate encoding by requiring that options 1888 appear in lexical order and make our ssh-keygen comply. ok markus@ 1889 - djm@cvs.openbsd.org 2010/08/04 05:42:47 1890 [auth.c auth2-hostbased.c authfile.c authfile.h ssh-keysign.8] 1891 [ssh-keysign.c ssh.c] 1892 enable certificates for hostbased authentication, from Iain Morgan; 1893 "looks ok" markus@ 1894 - djm@cvs.openbsd.org 2010/08/04 05:49:22 1895 [authfile.c] 1896 commited the wrong version of the hostbased certificate diff; this 1897 version replaces some strlc{py,at} verbosity with xasprintf() at 1898 the request of markus@ 1899 - djm@cvs.openbsd.org 2010/08/04 06:07:11 1900 [ssh-keygen.1 ssh-keygen.c] 1901 Support CA keys in PKCS#11 tokens; feedback and ok markus@ 1902 - djm@cvs.openbsd.org 2010/08/04 06:08:40 1903 [ssh-keysign.c] 1904 clean for -Wuninitialized (Id sync only; portable had this change) 1905 - djm@cvs.openbsd.org 2010/08/05 13:08:42 1906 [channels.c] 1907 Fix a trio of bugs in the local/remote window calculation for datagram 1908 data channels (i.e. TunnelForward): 1909 1910 Calculate local_consumed correctly in channel_handle_wfd() by measuring 1911 the delta to buffer_len(c->output) from when we start to when we finish. 1912 The proximal problem here is that the output_filter we use in portable 1913 modified the length of the dequeued datagram (to futz with the headers 1914 for !OpenBSD). 1915 1916 In channel_output_poll(), don't enqueue datagrams that won't fit in the 1917 peer's advertised packet size (highly unlikely to ever occur) or which 1918 won't fit in the peer's remaining window (more likely). 1919 1920 In channel_input_data(), account for the 4-byte string header in 1921 datagram packets that we accept from the peer and enqueue in c->output. 1922 1923 report, analysis and testing 2/3 cases from wierbows AT us.ibm.com; 1924 "looks good" markus@ 1925 192620100803 1927 - (dtucker) [monitor.c] Bug #1795: Initialize the values to be returned from 1928 PAM to sane values in case the PAM method doesn't write to them. Spotted by 1929 Bitman Zhou, ok djm@. 1930 - OpenBSD CVS Sync 1931 - djm@cvs.openbsd.org 2010/07/16 04:45:30 1932 [ssh-keygen.c] 1933 avoid bogus compiler warning 1934 - djm@cvs.openbsd.org 2010/07/16 14:07:35 1935 [ssh-rsa.c] 1936 more timing paranoia - compare all parts of the expected decrypted 1937 data before returning. AFAIK not exploitable in the SSH protocol. 1938 "groovy" deraadt@ 1939 - djm@cvs.openbsd.org 2010/07/19 03:16:33 1940 [sftp-client.c] 1941 bz#1797: fix swapped args in upload_dir_internal(), breaking recursive 1942 upload depth checks and causing verbose printing of transfers to always 1943 be turned on; patch from imorgan AT nas.nasa.gov 1944 - djm@cvs.openbsd.org 2010/07/19 09:15:12 1945 [clientloop.c readconf.c readconf.h ssh.c ssh_config.5] 1946 add a "ControlPersist" option that automatically starts a background 1947 ssh(1) multiplex master when connecting. This connection can stay alive 1948 indefinitely, or can be set to automatically close after a user-specified 1949 duration of inactivity. bz#1330 - patch by dwmw2 AT infradead.org, but 1950 further hacked on by wmertens AT cisco.com, apb AT cequrux.com, 1951 martin-mindrot-bugzilla AT earth.li and myself; "looks ok" markus@ 1952 - djm@cvs.openbsd.org 2010/07/21 02:10:58 1953 [misc.c] 1954 sync timingsafe_bcmp() with the one dempsky@ committed to sys/lib/libkern 1955 - dtucker@cvs.openbsd.org 2010/07/23 08:49:25 1956 [ssh.1] 1957 Ciphers is documented in ssh_config(5) these days 1958 195920100819 1960 - (dtucker) [contrib/ssh-copy-ud.1] Bug #1786: update ssh-copy-id.1 with more 1961 details about its behaviour WRT existing directories. Patch from 1962 asguthrie at gmail com, ok djm. 1963 196420100716 1965 - (djm) OpenBSD CVS Sync 1966 - djm@cvs.openbsd.org 2010/07/02 04:32:44 1967 [misc.c] 1968 unbreak strdelim() skipping past quoted strings, e.g. 1969 AllowUsers "blah blah" blah 1970 was broken; report and fix in bz#1757 from bitman.zhou AT centrify.com 1971 ok dtucker; 1972 - djm@cvs.openbsd.org 2010/07/12 22:38:52 1973 [ssh.c] 1974 Make ExitOnForwardFailure work with fork-after-authentication ("ssh -f") 1975 for protocol 2. ok markus@ 1976 - djm@cvs.openbsd.org 2010/07/12 22:41:13 1977 [ssh.c ssh_config.5] 1978 expand %h to the hostname in ssh_config Hostname options. While this 1979 sounds useless, it is actually handy for working with unqualified 1980 hostnames: 1981 1982 Host *.* 1983 Hostname %h 1984 Host * 1985 Hostname %h.example.org 1986 1987 "I like it" markus@ 1988 - djm@cvs.openbsd.org 2010/07/13 11:52:06 1989 [auth-rsa.c channels.c jpake.c key.c misc.c misc.h monitor.c] 1990 [packet.c ssh-rsa.c] 1991 implement a timing_safe_cmp() function to compare memory without leaking 1992 timing information by short-circuiting like memcmp() and use it for 1993 some of the more sensitive comparisons (though nothing high-value was 1994 readily attackable anyway); "looks ok" markus@ 1995 - djm@cvs.openbsd.org 2010/07/13 23:13:16 1996 [auth-rsa.c channels.c jpake.c key.c misc.c misc.h monitor.c packet.c] 1997 [ssh-rsa.c] 1998 s/timing_safe_cmp/timingsafe_bcmp/g 1999 - jmc@cvs.openbsd.org 2010/07/14 17:06:58 2000 [ssh.1] 2001 finally ssh synopsis looks nice again! this commit just removes a ton of 2002 hacks we had in place to make it work with old groff; 2003 - schwarze@cvs.openbsd.org 2010/07/15 21:20:38 2004 [ssh-keygen.1] 2005 repair incorrect block nesting, which screwed up indentation; 2006 problem reported and fix OK by jmc@ 2007 200820100714 2009 - (tim) [contrib/redhat/openssh.spec] Bug 1796: Test for skip_x11_askpass 2010 (line 77) should have been for no_x11_askpass. 2011 201220100702 2013 - (djm) OpenBSD CVS Sync 2014 - jmc@cvs.openbsd.org 2010/06/26 00:57:07 2015 [ssh_config.5] 2016 tweak previous; 2017 - djm@cvs.openbsd.org 2010/06/26 23:04:04 2018 [ssh.c] 2019 oops, forgot to #include <canohost.h>; spotted and patch from chl@ 2020 - djm@cvs.openbsd.org 2010/06/29 23:15:30 2021 [ssh-keygen.1 ssh-keygen.c] 2022 allow import (-i) and export (-e) of PEM and PKCS#8 encoded keys; 2023 bz#1749; ok markus@ 2024 - djm@cvs.openbsd.org 2010/06/29 23:16:46 2025 [auth2-pubkey.c sshd_config.5] 2026 allow key options (command="..." and friends) in AuthorizedPrincipals; 2027 ok markus@ 2028 - jmc@cvs.openbsd.org 2010/06/30 07:24:25 2029 [ssh-keygen.1] 2030 tweak previous; 2031 - jmc@cvs.openbsd.org 2010/06/30 07:26:03 2032 [ssh-keygen.c] 2033 sort usage(); 2034 - jmc@cvs.openbsd.org 2010/06/30 07:28:34 2035 [sshd_config.5] 2036 tweak previous; 2037 - millert@cvs.openbsd.org 2010/07/01 13:06:59 2038 [scp.c] 2039 Fix a longstanding problem where if you suspend scp at the 2040 password/passphrase prompt the terminal mode is not restored. 2041 OK djm@ 2042 - phessler@cvs.openbsd.org 2010/06/27 19:19:56 2043 [regress/Makefile] 2044 fix how we run the tests so we can successfully use SUDO='sudo -E' 2045 in our env 2046 - djm@cvs.openbsd.org 2010/06/29 23:59:54 2047 [cert-userkey.sh] 2048 regress tests for key options in AuthorizedPrincipals 2049 205020100627 2051 - (tim) [openbsd-compat/port-uw.c] Reorder includes. auth-options.h now needs 2052 key.h. 2053 205420100626 2055 - (djm) OpenBSD CVS Sync 2056 - djm@cvs.openbsd.org 2010/05/21 05:00:36 2057 [misc.c] 2058 colon() returns char*, so s/return (0)/return NULL/ 2059 - markus@cvs.openbsd.org 2010/06/08 21:32:19 2060 [ssh-pkcs11.c] 2061 check length of value returned C_GetAttributValue for != 0 2062 from mdrtbugzilla@codefive.co.uk; bugzilla #1773; ok dtucker@ 2063 - djm@cvs.openbsd.org 2010/06/17 07:07:30 2064 [mux.c] 2065 Correct sizing of object to be allocated by calloc(), replacing 2066 sizeof(state) with sizeof(*state). This worked by accident since 2067 the struct contained a single int at present, but could have broken 2068 in the future. patch from hyc AT symas.com 2069 - djm@cvs.openbsd.org 2010/06/18 00:58:39 2070 [sftp.c] 2071 unbreak ls in working directories that contains globbing characters in 2072 their pathnames. bz#1655 reported by vgiffin AT apple.com 2073 - djm@cvs.openbsd.org 2010/06/18 03:16:03 2074 [session.c] 2075 Missing check for chroot_director == "none" (we already checked against 2076 NULL); bz#1564 from Jan.Pechanec AT Sun.COM 2077 - djm@cvs.openbsd.org 2010/06/18 04:43:08 2078 [sftp-client.c] 2079 fix memory leak in do_realpath() error path; bz#1771, patch from 2080 anicka AT suse.cz 2081 - djm@cvs.openbsd.org 2010/06/22 04:22:59 2082 [servconf.c sshd_config.5] 2083 expose some more sshd_config options inside Match blocks: 2084 AuthorizedKeysFile AuthorizedPrincipalsFile 2085 HostbasedUsesNameFromPacketOnly PermitTunnel 2086 bz#1764; feedback from imorgan AT nas.nasa.gov; ok dtucker@ 2087 - djm@cvs.openbsd.org 2010/06/22 04:32:06 2088 [ssh-keygen.c] 2089 standardise error messages when attempting to open private key 2090 files to include "progname: filename: error reason" 2091 bz#1783; ok dtucker@ 2092 - djm@cvs.openbsd.org 2010/06/22 04:49:47 2093 [auth.c] 2094 queue auth debug messages for bad ownership or permissions on the user's 2095 keyfiles. These messages will be sent after the user has successfully 2096 authenticated (where our client will display them with LogLevel=debug). 2097 bz#1554; ok dtucker@ 2098 - djm@cvs.openbsd.org 2010/06/22 04:54:30 2099 [ssh-keyscan.c] 2100 replace verbose and overflow-prone Linebuf code with read_keyfile_line() 2101 based on patch from joachim AT joachimschipper.nl; bz#1565; ok dtucker@ 2102 - djm@cvs.openbsd.org 2010/06/22 04:59:12 2103 [session.c] 2104 include the user name on "subsystem request for ..." log messages; 2105 bz#1571; ok dtucker@ 2106 - djm@cvs.openbsd.org 2010/06/23 02:59:02 2107 [ssh-keygen.c] 2108 fix printing of extensions in v01 certificates that I broke in r1.190 2109 - djm@cvs.openbsd.org 2010/06/25 07:14:46 2110 [channels.c mux.c readconf.c readconf.h ssh.h] 2111 bz#1327: remove hardcoded limit of 100 permitopen clauses and port 2112 forwards per direction; ok markus@ stevesk@ 2113 - djm@cvs.openbsd.org 2010/06/25 07:20:04 2114 [channels.c session.c] 2115 bz#1750: fix requirement for /dev/null inside ChrootDirectory for 2116 internal-sftp accidentally introduced in r1.253 by removing the code 2117 that opens and dup /dev/null to stderr and modifying the channels code 2118 to read stderr but discard it instead; ok markus@ 2119 - djm@cvs.openbsd.org 2010/06/25 08:46:17 2120 [auth1.c auth2-none.c] 2121 skip the initial check for access with an empty password when 2122 PermitEmptyPasswords=no; bz#1638; ok markus@ 2123 - djm@cvs.openbsd.org 2010/06/25 23:10:30 2124 [ssh.c] 2125 log the hostname and address that we connected to at LogLevel=verbose 2126 after authentication is successful to mitigate "phishing" attacks by 2127 servers with trusted keys that accept authentication silently and 2128 automatically before presenting fake password/passphrase prompts; 2129 "nice!" markus@ 2130 - djm@cvs.openbsd.org 2010/06/25 23:10:30 2131 [ssh.c] 2132 log the hostname and address that we connected to at LogLevel=verbose 2133 after authentication is successful to mitigate "phishing" attacks by 2134 servers with trusted keys that accept authentication silently and 2135 automatically before presenting fake password/passphrase prompts; 2136 "nice!" markus@ 2137 213820100622 2139 - (djm) [loginrec.c] crank LINFO_NAMESIZE (username length) to 512 2140 bz#1579; ok dtucker 2141 214220100618 2143 - (djm) [contrib/ssh-copy-id] Update key file explicitly under ~ 2144 rather than assuming that $CWD == $HOME. bz#1500, patch from 2145 timothy AT gelter.com 2146 214720100617 2148 - (tim) [contrib/cygwin/README] Remove a reference to the obsolete 2149 minires-devel package, and to add the reference to the libedit-devel 2150 package since CYgwin now provides libedit. Patch from Corinna Vinschen. 2151 215220100521 2153 - (djm) OpenBSD CVS Sync 2154 - djm@cvs.openbsd.org 2010/05/07 11:31:26 2155 [regress/Makefile regress/cert-userkey.sh] 2156 regress tests for AuthorizedPrincipalsFile and "principals=" key option. 2157 feedback and ok markus@ 2158 - djm@cvs.openbsd.org 2010/05/11 02:58:04 2159 [auth-rsa.c] 2160 don't accept certificates marked as "cert-authority" here; ok markus@ 2161 - djm@cvs.openbsd.org 2010/05/14 00:47:22 2162 [ssh-add.c] 2163 check that the certificate matches the corresponding private key before 2164 grafting it on 2165 - djm@cvs.openbsd.org 2010/05/14 23:29:23 2166 [channels.c channels.h mux.c ssh.c] 2167 Pause the mux channel while waiting for reply from aynch callbacks. 2168 Prevents misordering of replies if new requests arrive while waiting. 2169 2170 Extend channel open confirm callback to allow signalling failure 2171 conditions as well as success. Use this to 1) fix a memory leak, 2) 2172 start using the above pause mechanism and 3) delay sending a success/ 2173 failure message on mux slave session open until we receive a reply from 2174 the server. 2175 2176 motivated by and with feedback from markus@ 2177 - markus@cvs.openbsd.org 2010/05/16 12:55:51 2178 [PROTOCOL.mux clientloop.h mux.c readconf.c readconf.h ssh.1 ssh.c] 2179 mux support for remote forwarding with dynamic port allocation, 2180 use with 2181 LPORT=`ssh -S muxsocket -R0:localhost:25 -O forward somehost` 2182 feedback and ok djm@ 2183 - djm@cvs.openbsd.org 2010/05/20 11:25:26 2184 [auth2-pubkey.c] 2185 fix logspam when key options (from="..." especially) deny non-matching 2186 keys; reported by henning@ also bz#1765; ok markus@ dtucker@ 2187 - djm@cvs.openbsd.org 2010/05/20 23:46:02 2188 [PROTOCOL.certkeys auth-options.c ssh-keygen.c] 2189 Move the permit-* options to the non-critical "extensions" field for v01 2190 certificates. The logic is that if another implementation fails to 2191 implement them then the connection just loses features rather than fails 2192 outright. 2193 2194 ok markus@ 2195 219620100511 2197 - (dtucker) [Makefile.in] Bug #1770: Link libopenbsd-compat twice to solve 2198 circular dependency problem on old or odd platforms. From Tom Lane, ok 2199 djm@. 2200 - (djm) [openbsd-compat/openssl-compat.h] Fix build breakage on older 2201 libcrypto by defining OPENSSL_[DR]SA_MAX_MODULUS_BITS if they aren't 2202 already. ok dtucker@ 2203 220420100510 2205 - OpenBSD CVS Sync 2206 - djm@cvs.openbsd.org 2010/04/23 01:47:41 2207 [ssh-keygen.c] 2208 bz#1740: display a more helpful error message when $HOME is 2209 inaccessible while trying to create .ssh directory. Based on patch 2210 from jchadima AT redhat.com; ok dtucker@ 2211 - djm@cvs.openbsd.org 2010/04/23 22:27:38 2212 [mux.c] 2213 set "detach_close" flag when registering channel cleanup callbacks. 2214 This causes the channel to close normally when its fds close and 2215 hangs when terminating a mux slave using ~. bz#1758; ok markus@ 2216 - djm@cvs.openbsd.org 2010/04/23 22:42:05 2217 [session.c] 2218 set stderr to /dev/null for subsystems rather than just closing it. 2219 avoids hangs if a subsystem or shell initialisation writes to stderr. 2220 bz#1750; ok markus@ 2221 - djm@cvs.openbsd.org 2010/04/23 22:48:31 2222 [ssh-keygen.c] 2223 refuse to generate keys longer than OPENSSL_[RD]SA_MAX_MODULUS_BITS, 2224 since we would refuse to use them anyway. bz#1516; ok dtucker@ 2225 - djm@cvs.openbsd.org 2010/04/26 22:28:24 2226 [sshconnect2.c] 2227 bz#1502: authctxt.success is declared as an int, but passed by 2228 reference to function that accepts sig_atomic_t*. Convert it to 2229 the latter; ok markus@ dtucker@ 2230 - djm@cvs.openbsd.org 2010/05/01 02:50:50 2231 [PROTOCOL.certkeys] 2232 typo; jmeltzer@ 2233 - dtucker@cvs.openbsd.org 2010/05/05 04:22:09 2234 [sftp.c] 2235 restore mput and mget which got lost in the tab-completion changes. 2236 found by Kenneth Whitaker, ok djm@ 2237 - djm@cvs.openbsd.org 2010/05/07 11:30:30 2238 [auth-options.c auth-options.h auth.c auth.h auth2-pubkey.c] 2239 [key.c servconf.c servconf.h sshd.8 sshd_config.5] 2240 add some optional indirection to matching of principal names listed 2241 in certificates. Currently, a certificate must include the a user's name 2242 to be accepted for authentication. This change adds the ability to 2243 specify a list of certificate principal names that are acceptable. 2244 2245 When authenticating using a CA trusted through ~/.ssh/authorized_keys, 2246 this adds a new principals="name1[,name2,...]" key option. 2247 2248 For CAs listed through sshd_config's TrustedCAKeys option, a new config 2249 option "AuthorizedPrincipalsFile" specifies a per-user file containing 2250 the list of acceptable names. 2251 2252 If either option is absent, the current behaviour of requiring the 2253 username to appear in principals continues to apply. 2254 2255 These options are useful for role accounts, disjoint account namespaces 2256 and "user@realm"-style naming policies in certificates. 2257 2258 feedback and ok markus@ 2259 - jmc@cvs.openbsd.org 2010/05/07 12:49:17 2260 [sshd_config.5] 2261 tweak previous; 2262 226320100423 2264 - (dtucker) [configure.ac] Bug #1756: Check for the existence of a lib64 dir 2265 in the openssl install directory (some newer openssl versions do this on at 2266 least some amd64 platforms). 2267 226820100418 2269 - OpenBSD CVS Sync 2270 - jmc@cvs.openbsd.org 2010/04/16 06:45:01 2271 [ssh_config.5] 2272 tweak previous; ok djm 2273 - jmc@cvs.openbsd.org 2010/04/16 06:47:04 2274 [ssh-keygen.1 ssh-keygen.c] 2275 tweak previous; ok djm 2276 - djm@cvs.openbsd.org 2010/04/16 21:14:27 2277 [sshconnect.c] 2278 oops, %r => remote username, not %u 2279 - djm@cvs.openbsd.org 2010/04/16 01:58:45 2280 [regress/cert-hostkey.sh regress/cert-userkey.sh] 2281 regression tests for v01 certificate format 2282 includes interop tests for v00 certs 2283 - (dtucker) [contrib/aix/buildbff.sh] Fix creation of ssh_prng_cmds.default 2284 file. 2285 228620100416 2287 - (djm) Release openssh-5.5p1 2288 - OpenBSD CVS Sync 2289 - djm@cvs.openbsd.org 2010/03/26 03:13:17 2290 [bufaux.c] 2291 allow buffer_get_int_ret/buffer_get_int64_ret to take a NULL pointer 2292 argument to allow skipping past values in a buffer 2293 - jmc@cvs.openbsd.org 2010/03/26 06:54:36 2294 [ssh.1] 2295 tweak previous; 2296 - jmc@cvs.openbsd.org 2010/03/27 14:26:55 2297 [ssh_config.5] 2298 tweak previous; ok dtucker 2299 - djm@cvs.openbsd.org 2010/04/10 00:00:16 2300 [ssh.c] 2301 bz#1746 - suppress spurious tty warning when using -O and stdin 2302 is not a tty; ok dtucker@ markus@ 2303 - djm@cvs.openbsd.org 2010/04/10 00:04:30 2304 [sshconnect.c] 2305 fix terminology: we didn't find a certificate in known_hosts, we found 2306 a CA key 2307 - djm@cvs.openbsd.org 2010/04/10 02:08:44 2308 [clientloop.c] 2309 bz#1698: kill channel when pty allocation requests fail. Fixed 2310 stuck client if the server refuses pty allocation. 2311 ok dtucker@ "think so" markus@ 2312 - djm@cvs.openbsd.org 2010/04/10 02:10:56 2313 [sshconnect2.c] 2314 show the key type that we are offering in debug(), helps distinguish 2315 between certs and plain keys as the path to the private key is usually 2316 the same. 2317 - djm@cvs.openbsd.org 2010/04/10 05:48:16 2318 [mux.c] 2319 fix NULL dereference; from matthew.haub AT alumni.adelaide.edu.au 2320 - djm@cvs.openbsd.org 2010/04/14 22:27:42 2321 [ssh_config.5 sshconnect.c] 2322 expand %r => remote username in ssh_config:ProxyCommand; 2323 ok deraadt markus 2324 - markus@cvs.openbsd.org 2010/04/15 20:32:55 2325 [ssh-pkcs11.c] 2326 retry lookup for private key if there's no matching key with CKA_SIGN 2327 attribute enabled; this fixes fixes MuscleCard support (bugzilla #1736) 2328 ok djm@ 2329 - djm@cvs.openbsd.org 2010/04/16 01:47:26 2330 [PROTOCOL.certkeys auth-options.c auth-options.h auth-rsa.c] 2331 [auth2-pubkey.c authfd.c key.c key.h myproposal.h ssh-add.c] 2332 [ssh-agent.c ssh-dss.c ssh-keygen.1 ssh-keygen.c ssh-rsa.c] 2333 [sshconnect.c sshconnect2.c sshd.c] 2334 revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with the 2335 following changes: 2336 2337 move the nonce field to the beginning of the certificate where it can 2338 better protect against chosen-prefix attacks on the signature hash 2339 2340 Rename "constraints" field to "critical options" 2341 2342 Add a new non-critical "extensions" field 2343 2344 Add a serial number 2345 2346 The older format is still support for authentication and cert generation 2347 (use "ssh-keygen -t v00 -s ca_key ..." to generate a v00 certificate) 2348 2349 ok markus@ 2350