summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/readconf.c
AgeCommit message (Collapse)Author
2008-01-19promote rekeylimit to a int64 so it can hold the maximum useful limitDamien Miller
of 2^32; report and patch from Jan.Pechanec AT Sun.COM, ok dtucker@
2007-12-31Prevent strict-aliasing warnings on newer gcc versions. bz #1355, patchDarren Tucker
from Dmitry V. Levin, ok djm@
2007-10-22make sure that both the local and remote port are correct whenMarkus Friedl
parsing -L; Jan Pechanec (bz #1378)
2007-03-20remove some bogus *p tests from charles longeauTed Unangst
ok deraadt millert
2007-01-21spacesKevin Steves
2007-01-17Honour activep for times (eg ServerAliveInterval) while parsingDarren Tucker
ssh_config and ~/.ssh/config so they work properly with Host directives. From mario.lorenz@wincor-nixdorf.com via bz #1275. ok markus@
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
ok djm, sort of ok stevesk makes the pain stop in one easy step
2006-08-01move #include <stdio.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-07-17move #include <unistd.h> out of includes.hKevin Steves
2006-07-12move #include <netdb.h> out of includes.h; ok djm@Kevin Steves
2006-07-11move #include <errno.h> out of includes.h; ok markus@Kevin Steves
2006-07-11add ExitOnForwardFailure: terminate the connection if ssh(1)Markus Friedl
cannot set up all requested dynamic, local, and remote port forwardings. ok djm, dtucker, stevesk, jmc
2006-07-05move #include <netinet/in.h> out of includes.h; ok deraadt@Kevin Steves
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
Theo nuked - our scripts to sync -portable need them in the files
2006-03-19RCSID() can dieTheo de Raadt
2006-03-19potential NULL pointer dereferences detected by CoverityDamien Miller
via elad AT netbsd.org; ok deraadt@
2006-02-22move #include <ctype.h> out of includes.h; ok djm@Kevin Steves
2006-02-20move #include <sys/stat.h> out of includes.h; ok markus@Kevin Steves
2006-02-12raise error when the user specifies a RekeyLimit that is smaller than 16Damien Miller
(the smallest of our cipher's blocksize) or big enough to cause integer wraparound; ok & feedback dtucker@
2005-12-08two changes to the new ssh tunnel support. this breaks compatibilityReyk Floeter
with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@
2005-12-06Add support for tun(4) forwarding over OpenSSH, based on an idea andReyk Floeter
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others
2005-07-30listen_hosts initialisation here too; spotted greg AT y2005.nest.cxDamien Miller
2005-07-17knf says that a 2nd level indent is four (not three or five) spacesDamien Miller
2005-06-08add ControlMaster=auto/autoask options to support opportunistic multiplexing;Damien Miller
tested avsm@ and jakob@, ok markus@
2005-05-16check return value from strdelim() for NULL (AddressFamily); mpechMarkus Friedl
2005-03-10spacingTheo de Raadt
2005-03-10Check listen addresses for null, prevents xfree from dying duringDarren Tucker
ClearAllForwardings (bz #996). From Craig Leres, ok markus@
2005-03-04fix SendEnv config parsing bug found by Roumen Petrov; ok dtucker@Damien Miller
2005-03-01add support for hashing host names and addresses added to known_hosts files,Damien Miller
to improve privacy of which hosts user have been visiting; ok markus@ deraadt@
2005-03-01bz#413: allow optional specification of bind address for port forwardings.Damien Miller
Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports. ok markus@
2004-07-11spacesTheo de Raadt
2004-06-17Add option for confirmation (ControlMaster=ask) via ssh-askpass before openingDamien Miller
shared connections; ok markus@
2004-06-13implement session multiplexing in the client (the server has supported thisDamien Miller
since 2.0); ok markus@
2004-05-27Kill dead code after fatal(); ok djm@Darren Tucker
2004-04-27bz #815: implement ability to pass specified environment variables from theDamien Miller
client to the server; ok markus@
2004-04-18perform strict ownership and modes checks for ~/.ssh/config files, as theseDamien Miller
can be used to execute arbitrary programs; ok markus@ NB. ssh will now exit when it detects a config with poor permissions
2004-03-05add IdentitiesOnly; ok djm@, pb@Markus Friedl
2003-12-16application layer keep alive (ServerAliveInterval ServerAliveCountMax)Markus Friedl
for ssh(1), similar to the sshd(8) option; ok beck@; with help from jmc and dtucker@
2003-12-09rename keepalive to tcpkeepalive; the old name causes too muchMarkus Friedl
confusion; ok djm, dtucker; with help from jmc@
2003-11-12update SSHFP validation. ok markus@Jakob Schlyter
2003-10-14include SSHFP lookup code (not enabled by default). ok markus@Jakob Schlyter
2003-10-11remote x11 clients are now untrusted by default, uses xauth(8) to generateMarkus Friedl
untrusted cookies; ForwardX11Trusted=yes restores old behaviour. ok deraadt; feedback and ok djm/fries
2003-10-08default GSS API to no in client, too; ok jakob, deraadt@Markus Friedl
2003-09-01remove unused kerberos code; ok henning@Markus Friedl
2003-09-01rm gssapidelegatecreds alias; never supported beforeMarkus Friedl
2003-08-28remove kerberos support from ssh1, since it has been replaced with GSSAPI;Markus Friedl
but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
2003-08-22support GSS API user authentication; patches from Simon Wilkinson,Markus Friedl
stripped down and tested by Jakob and myself.
2003-08-13socks4->socks, since with support both 4 and 5; dtucker@zip.com.auMarkus Friedl
2003-08-13remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,Markus Friedl
fgsch@, miod@, henning@, jakob@ and others