summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshd.c
AgeCommit message (Collapse)Author
2007-05-22zap double include; from p_nowaczyk AT o2.plDamien Miller
2007-03-09Move C/R -> kbdint special case to after the defaults have beenDarren Tucker
loaded, which makes ChallengeResponse default to yes again. This was broken by the Match changes and not fixed properly subsequently. Found by okan at demirmen.com, ok djm@ "please do it" deraadt@
2007-02-21Clear alarm() before restarting sshd on SIGHUP. Without this, if there'sDarren Tucker
a SIGALRM pending (for SSH1 key regeneration) when sshd is SIGHUP'ed, the newly exec'ed sshd will get the SIGALRM and not have a handler for it, and the default action will terminate the listening sshd. Analysis and patch from andrew at gaul.org.
2006-11-06add missing checks for openssl return codes; with & ok djm@Markus Friedl
2006-08-18delay authentication related cleanups until we're authenticated andMarkus Friedl
all alarms have been cancelled; ok deraadt
2006-08-18make signal handler termination path shorter; risky code pointed out byTheo de Raadt
mark dowd; ok djm markus
2006-08-16factor inetd connection, TCP listen and main TCP accept loop out of main()Damien Miller
into separate functions to improve readability; ok markus@
2006-08-05Add headers required to build with KERBEROS5=no. ok djm@Darren Tucker
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
ok djm, sort of ok stevesk makes the pain stop in one easy step
2006-08-01move #include <stdio.h> out of includes.hKevin Steves
2006-07-26move #include <stdlib.h> out of includes.hKevin Steves
2006-07-25move #include <sys/time.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-07-12move #include <netdb.h> out of includes.h; ok djm@Kevin Steves
2006-07-12Add support for conditional directives to sshd_config via a "Match" keyword,Darren Tucker
which works similarly to the "Host" directive in ssh_config. Lines after a Match line override the default set in the main section if the condition on the Match line is true, eg AllowTcpForwarding yes Match User anoncvs AllowTcpForwarding no will allow port forwarding by all users except "anoncvs". Currently only a very small subset of directives are supported. ok djm@
2006-07-11move #include <errno.h> out of includes.h; ok markus@Kevin Steves
2006-07-09move #include <fcntl.h> out of includes.hKevin Steves
2006-07-08move #include <sys/socket.h> out of includes.hKevin Steves
2006-07-06move #include <pwd.h> out of includes.h; ok markus@Kevin Steves
2006-07-03move #include "version.h" out of includes.h; ok markus@Kevin Steves
2006-06-01call get_remote_ipaddr() early; fixes logging after client disconnects;Markus Friedl
report mpf@; ok dtucker@
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
Theo nuked - our scripts to sync -portable need them in the files
2006-03-25introduce xcalloc() and xasprintf() failure-checked allocations functionsDamien Miller
and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@
2006-03-20sprinkle some ARGSUSED for table driven functions (which sometimes must ↵Theo de Raadt
ignore their args)
2006-03-19ARGSUSED for signal handlersTheo de Raadt
2006-03-19RCSID() can dieTheo de Raadt
2006-03-13don't log that we are listening on a socket before the listen() callDamien Miller
actually succeeds, bz #1162 reported by Senthil Kumar; ok dtucker@
2006-03-07Implement the diffie-hellman-group-exchange-sha256 key exchange methodDamien Miller
using the SHA256 code in libc (and wrapper to make it into an OpenSSL EVP), interop tested against CVS PuTTY
2006-02-20move #include <sys/stat.h> out of includes.h; ok markus@Kevin Steves
2006-02-20move #include <signal.h> out of includes.h; ok markus@Kevin Steves
2006-02-10move #include <sys/wait.h> out of includes.h; ok markus@Kevin Steves
2006-02-10move #include <sys/ioctl.h> out of includes.h; ok markus@Kevin Steves
2006-02-08move #include <paths.h> out of includes.h; ok markus@Kevin Steves
2005-12-24eliminate some code duplicated in privsep and non-privsep paths, andDamien Miller
explicitly clear SIGALRM handler; "groovy" deraadt@
2005-10-30no need to escape single quotes in comments, no binary changeDamien Miller
2005-10-30Check for connections with IP options earlier and drop silently. ok djm@Darren Tucker
2005-09-21change label at markus@'s requestDamien Miller
2005-09-19stop connection abort on rekey with delayed compression enabled whenDamien Miller
post-auth privsep is disabled (e.g. when root is logged in); ok dtucker@
2005-09-13ensure that stdio fds are attached; ok deraadt@Damien Miller
2005-07-25add a new compression method that delays compression until the userMarkus Friedl
has been authenticated successfully and set compression to 'delayed' for sshd. this breaks older openssh clients (< 3.5) if they insist on compression, so you have to re-enable compression in sshd_config. ok djm@
2005-06-17make this -Wsign-compare clean; ok avsm@ markus@Damien Miller
2005-06-16don't exit if getpeername fails for forwarded ports; bugzilla #1054; ok djmMarkus Friedl
2005-04-06avoid harmless logspam by not performing setsockopt() on non-socket; ok markus@Damien Miller
2005-02-08Provide reason in error message if getnameinfo fails; ok markus@Darren Tucker
2005-01-21Warn in advance for password and account expiry; initialize loginmsgOtto Moerbeek
buffer earlier and clear it after privsep fork. ok and help dtucker@ markus@
2005-01-17Make debugging output continue after reexec; ok djm@Darren Tucker
2004-12-23bz #898: support AddressFamily in sshd_config. from peak@argo.troja.mff.cuni.czDamien Miller
ok deraadt@
2004-09-25these printf args are no longer double; ok deraadt@ markus@Damien Miller
2004-09-15use less doubles in daemons; markus@ okMichael Shalayeff
2004-08-28don't erroneously close stdin for !reexec case, from Dave Johnson; ok markus@Damien Miller
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-27 06:41:07 +0000