summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/ssh.c
AgeCommit message (Collapse)Author
2005-12-20exit(255) on error to match description in ssh(1); bz #1137; ok deraadt@Darren Tucker
2005-12-08two changes to the new ssh tunnel support. this breaks compatibilityReyk Floeter
with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@
2005-12-06Add support for tun(4) forwarding over OpenSSH, based on an idea andReyk Floeter
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others
2005-10-30no need to escape single quotes in comments, no binary changeDamien Miller
2005-10-30fix misleading debug message; ok dtucker@Damien Miller
2005-10-14no trailing "\n" for log functions; ok djm@Kevin Steves
2005-09-19update -D usage here too;Jason McIntyre
2005-09-13ensure that stdio fds are attached; ok deraadt@Damien Miller
2005-07-30fix -D listen_host initialisation, so it picks up gateway_ports settingDamien Miller
correctly
2005-07-16spacingDamien Miller
2005-07-04implement support for X11 and agent forwarding over multiplex slaveDamien Miller
connections. Because of protocol limitations, the slave connections inherit the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding their own. ok dtucker@ "put it in" deraadt@
2005-06-25do the default port filling code a few lines earlier, so it really does fix %pDamien Miller
2005-06-18allow ControlPath=none, patch from dwmw2 AT infradead.org; ok dtucker@Damien Miller
2005-06-17Fix ControlPath's %p expanding to "0" for a default port,Damien Miller
spotted dwmw2 AT infradead.org; ok markus@
2005-06-16move x11_get_proto from ssh.c to clientloop.c, to make muliplexed xfwd easierDamien Miller
later; ok deraadt@
2005-06-08add ControlMaster=auto/autoask options to support opportunistic multiplexing;Damien Miller
tested avsm@ and jakob@, ok markus@
2005-06-06introduce a generic %foo expansion function. replace existing % expansion andDamien Miller
add expansion to ControlPath; ok markus@
2005-05-27fix -O for cases where no ControlPath has been specified or socket atDamien Miller
ControlPath is not contactable; spotted by and ok avsm@
2005-05-10report real errors on fallback from ControlMaster=no to normal connectDamien Miller
2005-05-10print nice error message for EADDRINUSE as wellDamien Miller
2005-04-26fallback gracefully if client cannot connect to ControlPath. ok djm@Jakob Schlyter
2005-04-21don't allocate a pty when -n flag (/dev/null stdin) is set, patch fromDamien Miller
ignasi.roca AT fujitsu-siemens.com (bz #829); ok dtucker@
2005-04-06Fix debug call for port forwards; patch from pete at seebeyond.com, ok djm@Darren Tucker
2005-03-10spacingTheo de Raadt
2005-03-01sync usage() w/ man SYNOPSIS;Jason McIntyre
ok markus@
2005-03-01bz#413: allow optional specification of bind address for port forwardings.Damien Miller
Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports. ok markus@
2005-02-16Better diagnostic if an identity file is not accesible. ok markus@ djm@Otto Moerbeek
2004-11-07usage():Jason McIntyre
- add -O - sync -S w/ manpage - remove -h
2004-11-07add basic control of a running multiplex master connection; including theDamien Miller
ability to check its status and request it to exit; ok markus@
2004-09-23correctly honour -n in multiplex client mode; spotted by sturm@ ok markus@Damien Miller
2004-09-15/* fallthrough */ is something a programmer understands. ButTheo de Raadt
/* FALLTHROUGH */ is also understood by lint, so that is better.
2004-09-07cleanup multiplex control socket on SIGHUP too, spotted by sturm@Damien Miller
ok markus@ deraadt@
2004-08-23Use permanently_set_uid() in ssh and ssh-keysign for consistency, matchesDarren Tucker
change in Portable; ok markus@
2004-07-28more s/illegal/invalid/Markus Friedl
2004-07-11spacesTheo de Raadt
2004-06-23Fix counting in master/slave when passing environment variables; ok djm@Darren Tucker
2004-06-21make ssh -Wshadow clean, no functional changesAnil Madhavapeddy
markus@ ok
2004-06-20filter passed env vars at slave in connection sharing case; ok markus@Damien Miller
2004-06-18trim synopsis for -S, allow -S and -oControlMaster, -MM means 'ask'; ok djmMarkus Friedl
2004-06-18delay signal handler setup until we have finished talking to the master.Damien Miller
allow interrupting of setup (e.g. if master is stuck); ok markus@
2004-06-17sync usage() and SYNPOSIS with connection sharing changesDamien Miller
2004-06-17Add option for confirmation (ControlMaster=ask) via ssh-askpass before openingDamien Miller
shared connections; ok markus@
2004-06-17support environment passing over shared connections; ok markus@Damien Miller
2004-06-13implement session multiplexing in the client (the server has supported thisDamien Miller
since 2.0); ok markus@
2004-05-08make two tiny header files go away; djm okTheo de Raadt
2004-04-27bz #815: implement ability to pass specified environment variables from theDamien Miller
client to the server; ok markus@
2004-04-19fix idiot typo that i introduced in my last commit;Damien Miller
spotted by cschneid AT cschneid.com
2004-04-18perform strict ownership and modes checks for ~/.ssh/config files, as theseDamien Miller
can be used to execute arbitrary programs; ok markus@ NB. ssh will now exit when it detects a config with poor permissions
2004-03-11ssh, sshd: sync version output, ok djmMarkus Friedl
2004-03-10trim usage to match ssh(1) and look more like unix. ok djm@Markus Friedl