Age | Commit message (Collapse) | Author | |
---|---|---|---|
2005-12-13 | if forced_tun_device is not set, it is -1 and not SSH_TUNID_ANY | Reyk Floeter | |
2005-12-08 | two changes to the new ssh tunnel support. this breaks compatibility | Reyk Floeter | |
with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@ | |||
2005-12-06 | Add support for tun(4) forwarding over OpenSSH, based on an idea and | Reyk Floeter | |
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others | |||
2005-10-31 | make sure we clean up wtmp, etc. file when we receive a SIGTERM, | Damien Miller | |
SIGINT or SIGQUIT when running without privilege separation (the normal privsep case is already OK). Patch mainly by dtucker@ and senthilkumar_sen AT hotpop.com; ok dtucker@ | |||
2005-10-30 | no need to escape single quotes in comments, no binary change | Damien Miller | |
2005-10-10 | fix regression I introduced in 4.2: X11 forwardings initiated after | Damien Miller | |
a session has exited (e.g. "(sleep 5; xterm) &") would not start. bz #1086 reported by t8m AT centrum.cz; ok markus@ dtucker@ | |||
2005-07-17 | knf says that a 2nd level indent is four (not three or five) spaces | Damien Miller | |
2004-08-11 | some signed/unsigned int comparison cleanups; markus@ ok | Anil Madhavapeddy | |
2004-05-21 | bz #756: add support for the cancel-tcpip-forward request for the server and | Damien Miller | |
the client (through the ~C commandline). reported by z3p AT twistedmatrix.com; ok markus@ | |||
2004-01-19 | fix mem leaks; some fixes from Pete Flugstad; tested dtucker@ | Markus Friedl | |
2003-12-09 | make ClientKeepAlive work for ssh -N, too (no login shell requested). | Markus Friedl | |
1) send a bogus channel request if we find a channel 2) send a bogus global request if we don't have a channel ok + test beck@ | |||
2003-11-18 | Correct check for authctxt->valid. ok djm@ | Darren Tucker | |
2003-11-04 | standardise arguments to auth methods - they should all take authctxt. | Damien Miller | |
check authctxt->valid rather then pw != NULL; ok markus@ | |||
2003-09-23 | replace fatal_cleanup() and linked list of fatal callbacks with static | Markus Friedl | |
cleanup_exit() function. re-refine cleanup_exit() where appropriate, allocate sshd's authctxt eary to allow simpler cleanup in sshd. tested by many, ok deraadt@ | |||
2003-06-24 | int -> u_int; ok djm@, deraadt@, mouring@ | Markus Friedl | |
2003-06-04 | remove bitrotten commet; ok markus@ | Damien Miller | |
2003-05-11 | make channel_new() strdup the 'remote_name' (not the caller); ok theo | Markus Friedl | |
2003-04-02 | reapply rekeying chage, tested by henning@, ok djm@ | Markus Friedl | |
2003-04-01 | backout rekeying changes (for 3.6.1) | Markus Friedl | |
2003-04-01 | rekeying bugfixes and automatic rekeying: | Markus Friedl | |
* both client and server rekey _automatically_ (a) after 2^31 packets, because after 2^32 packets the sequence number for packets wraps (b) after 2^(blocksize_in_bits/4) blocks (see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt) (a) and (b) are _enabled_ by default, and only disabled for known openssh versions, that don't support rekeying properly. * client option 'RekeyLimit' * do not reply to requests during rekeying | |||
2002-09-19 | log IP address also; ok markus@ | Kevin Steves | |
2002-06-24 | move channel counter to u_int | Markus Friedl | |
2002-06-11 | pid_t cleanup. Markus need this now to keep hacking. | Mike Pechkin | |
markus@, millert@ ok Note: big usr.bin/ cleanup is comming. Now I'm waiting Ok from espie@ for make/. | |||
2002-03-30 | check waitpid for EINTR; based on patch from peter@ifm.liu.se | Markus Friedl | |
2002-03-24 | remove unused debug | Markus Friedl | |
2002-03-18 | integrate privilege separated openssh; its turned off by default for now. | Niels Provos | |
work done by me and markus@ | |||
2002-02-06 | channel_new never returns NULL, mouring@; ok djm@ | Markus Friedl | |
2002-02-03 | don't use channel_input_channel_request and callback | Markus Friedl | |
use new server_input_channel_req() instead: server_input_channel_req does generic request parsing on server side session_input_channel_req handles just session specific things now ok djm@ | |||
2002-01-31 | no need for WNOHANG; ok stevesk@ | Markus Friedl | |
2002-01-16 | wrapper for channel_setup_fwd_listener | Markus Friedl | |
2002-01-10 | skip client_alive_check until there are channels; ok beck@ | Markus Friedl | |
2001-12-28 | remove plen from the dispatch fn. it's no longer used. | Markus Friedl | |
2001-12-28 | packet_read* no longer return the packet length, since it's not used. | Markus Friedl | |
2001-12-28 | s/packet_done/packet_check_eom/ (end-of-message); ok djm@ | Markus Friedl | |
2001-12-27 | get rid of packet_integrity_check, use packet_done() instead. | Markus Friedl | |
2001-12-21 | remove ifdef for USE_PIPES since fdin != fdout; ok djm@ | Markus Friedl | |
2001-12-20 | Conformance fix: we should send failing packet sequence number when | Damien Miller | |
responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by yakk@yakk.dot.net; ok markus@ | |||
2001-12-19 | fix race between SIGCHLD and select with an additional pipe. writing | Markus Friedl | |
to the pipe on SIGCHLD wakes up select(). using pselect() is not portable and siglongjmp() ugly. W. R. Stevens suggests similar solution. initial idea by pmenage@ensim.com; ok deraadt@, djm@ | |||
2001-12-19 | basic KNF done while i was looking for something else | Theo de Raadt | |
2001-12-05 | deal with LP64 printf issue with sig_atomic_t. from thorpej | Jun-ichiro itojun Hagino | |
2001-11-22 | volatile sig_atomic_t | Markus Friedl | |
2001-11-09 | don't memset too much memory, ok millert@ | Markus Friedl | |
original patch from jlk@kamens.brookline.ma.us via nalin@redhat.com | |||
2001-10-10 | try to keep channels open until an exit-status message is sent. | Markus Friedl | |
don't kill the login shells if the shells stdin/out/err is closed. this should now work: ssh -2n localhost 'exec > /dev/null 2>&1; sleep 10; exit 5'; echo ? | |||
2001-10-09 | simplify session close: no more delayed session_close, no more blocking ↵ | Markus Friedl | |
wait() calls. | |||
2001-10-09 | close all channels if the connection to the remote host has been closed, | Markus Friedl | |
should fix sshd's hanging with WCHAN==wait | |||
2001-10-04 | client_alive_check cleanup | Markus Friedl | |
2001-10-04 | comment out bogus conditions for selecting on connection_in | Markus Friedl | |
2001-09-17 | don't send fake dummy packets on CR (\r) | Markus Friedl | |
bugreport from yyua@cs.sfu.ca via solar@@openwall.com | |||
2001-07-17 | keep track of both maxfd and the size of the malloc'ed fdsets. | Markus Friedl | |
update maxfd if maxfd gets closed. | |||
2001-07-15 | schedule client alive for ssh2 only, greg@cheers.bungi.com | Markus Friedl | |