| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2018-02-05 | Add a couple of non-negativity checks to avoid close(-1). | Theo Buehler | |
| ok djm | |||
| 2018-02-05 | The file descriptors for socket, stdin, stdout and stderr aren't | Theo Buehler | |
| necessarily distinct, so check if they are the same to avoid closing the same fd several times. ok djm | |||
| 2018-02-05 | I accidentially a word | Damien Miller | |
| 2018-01-25 | certificate options are case-sensitive; fix case on one that had it wrong. | Damien Miller | |
| move a badly-place sentence to a less bad place | |||
| 2018-01-23 | Fix a logic bug in sshd_exchange_identification which prevented clients | Stefan Sperling | |
| using major protocol version 2 from connecting to the server. ok millert@ | |||
| 2018-01-23 | Add missing braces; fixes 'write: Socket is not connected' error in ssh. | Stefan Sperling | |
| ok deraadt@ | |||
| 2018-01-23 | Drop compatibility hacks for some ancient SSH implementations, including | Damien Miller | |
| ssh.com <=2.* and OpenSSH <= 3.*. These versions were all released in or before 2001 and predate the final SSH RFCs. The hacks in question aren't necessary for RFC- compliant SSH implementations. ok markus@ | |||
| 2018-01-23 | try harder to preserve errno during ssh_connect_direct() to make the | Damien Miller | |
| final error message possibly accurate; bz#2814, ok dtucker@ | |||
| 2018-01-23 | unbreak support for clients that advertise a protocol version | Damien Miller | |
| of "1.99" (indicating both v2 and v1 support). Busted by me during SSHv1 purge in r1.358; bz2810, ok dtucker | |||
| 2018-01-23 | don't attempt to force hostnames that are addresses to lowercase, but | Damien Miller | |
| instead canonicalise them through getnameinfo/getaddrinfo to remove ambiguities (e.g. ::0001 => ::1) before they are matched against known_hosts; bz#2763, ok dtucker@ | |||
| 2018-01-23 | avoid modifying pw->pw_passwd; let endpwent() clean up for us, but | Damien Miller | |
| keep a scrubbed copy; bz2777, ok dtucker@ | |||
| 2018-01-13 | clarify authorship; prodded by and ok markus@ | Christian Weisgerber | |
| 2018-01-08 | group shared source files (e.g. SRCS_KEX) and allow compilation w/o OPENSSL | Markus Friedl | |
| ok djm@ | |||
| 2018-01-08 | move subprocess() so scp/sftp do not need uidswap.o; ok djm@ | Markus Friedl | |
| 2018-01-08 | switch ssh-pkcs11-helper to new API; ok djm@ | Markus Friedl | |
| 2018-01-08 | split client/server kex; only ssh-keygen needs uuencode.o; | Markus Friedl | |
| only scp/sftp use progressmeter.o; ok djm@ | |||
| 2018-01-08 | only ssh-keygen needs uuencode.o; only scp/sftp use progressmeter.o | Markus Friedl | |
| 2018-01-08 | uuencode.h is not used | Markus Friedl | |
| 2017-12-21 | revert stricter key type / signature type checking in userauth path; | Damien Miller | |
| too much software generates inconsistent messages, so we need a better plan. | |||
| 2017-12-19 | include signature type and CA key (if applicable) in some debug messages | Damien Miller | |
| 2017-12-18 | unbreak hostkey rotation; attempting to sign with a desired signature | Damien Miller | |
| algorithm of kex->hostkey_alg is incorrect when the key type isn't capable of making those signatures. ok markus@ | |||
| 2017-12-18 | log mismatched RSA signature types; ok markus@ | Damien Miller | |
| 2017-12-18 | pass kex->hostkey_alg and kex->hostkey_nid from pre-auth to post-auth | Damien Miller | |
| unpriviledged child processes; ok markus@ | |||
| 2017-12-18 | Add helper function for uri handing in scp where a missing path | Todd C. Miller | |
| simply means ".". Also fix exit code and add warnings when an invalid uri is encountered. OK otto@ | |||
| 2017-12-18 | pass negotiated signing algorithm though to sshkey_verify() and | Damien Miller | |
| check that the negotiated algorithm matches the type in the signature (only matters for RSA SHA1/SHA2 sigs). ok markus@ | |||
| 2017-12-18 | sshkey_sigtype() function to return the type of a signature; | Damien Miller | |
| ok markus@ | |||
| 2017-12-14 | Replace ED25519's private SHA-512 implementation with a call to the | Christian Weisgerber | |
| regular digest code. This speeds up compilation considerably. ok markus@ | |||
| 2017-12-12 | Create a persistent umac128.c source file: #define the output size and | Christian Weisgerber | |
| the name of the entry points for UMAC-128 before including umac.c. Idea from FreeBSD. ok dtucker@ | |||
| 2017-12-10 | ssh/lib hasn't worked towards our code-sharing goals for a quit while, | Theo de Raadt | |
| perhaps it is too verbose? Change each */Makefile to specifying exactly what sources that program requires, compiling it seperate. Maybe we'll iterate by sorting those into seperatable chunks, splitting up files which contain common code + server/client specific code, or whatnot. But this isn't one step, or we'd have done it a long time ago.. ok dtucker markus djm | |||
| 2017-12-10 | Put remote client info back into the ClientAlive connection termination | Darren Tucker | |
| message. Based in part on diff from lars.nooden at gmail, ok djm | |||
| 2017-12-08 | time_t printing needs %lld and (long long) casts | Theo de Raadt | |
| ok djm | |||
| 2017-12-08 | fix ordering in previous to ensure errno isn't clobbered before | Damien Miller | |
| logging. | |||
| 2017-12-08 | for some reason unix_listener() logged most errors twice with each | Damien Miller | |
| message containing only some of the useful information; merge these | |||
| 2017-12-06 | don't accept junk after "yes" or "no" responses to hostkey prompts. | Damien Miller | |
| bz#2803 reported by Maksim Derbasov; ok dtucker@ | |||
| 2017-12-05 | Replace atoi and strtol conversions for integer arguments to config | Darren Tucker | |
| keywords with a checking wrapper around strtonum. This will prevent and flag invalid and negative arguments to these keywords. ok djm@ | |||
| 2017-12-05 | Add missing break for rdomain. Prevents spurious "Deprecated option" | Darren Tucker | |
| warnings. ok djm@ | |||
| 2017-12-05 | include the addr:port in bind/listen failure messages | Damien Miller | |
| 2017-11-29 | Import updated moduli. | Darren Tucker | |
| 2017-11-28 | Have sftp print a warning about shell cleanliness when decoding the first | Darren Tucker | |
| packet fails, which is usually caused by shells polluting stdout of non-interactive starups. bz#2800, ok markus@ deraadt@. | |||
| 2017-11-28 | more whitespace errors | Damien Miller | |
| 2017-11-28 | whitespace at EOL | Damien Miller | |
| 2017-11-25 | Add monotime_ts and monotime_tv that return monotonic timespec and | Darren Tucker | |
| timeval respectively. Replace calls to gettimeofday() in packet timing with monotime_tv so that the callers will work over a clock step. Should prevent integer overflow during clock steps reported by wangle6 at huawei.com. "I like" markus@ | |||
| 2017-11-25 | Remove get_current_time() and replace with calls to monotime_double() | Darren Tucker | |
| which uses CLOCK_MONOTONIC and works over clock steps. "I like" markus@ | |||
| 2017-11-15 | downgrade a couple more request parsing errors from process-fatal to | Damien Miller | |
| just returning failure, making them consistent with the others that were already like that. | |||
| 2017-11-15 | fix regression in 7.6: failure to parse a signature request message | Damien Miller | |
| shouldn't be fatal to the process, just the request. Reported by Ron Frederick | |||
| 2017-11-14 | fix problem in configuration parsing when in config dump mode (sshd -T) | Damien Miller | |
| without providing a full connection specification (sshd -T -C ...) spotted by bluhm@ | |||
| 2017-11-03 | reuse parse_multistate for parse_flag (yes/no arguments). Saves | Damien Miller | |
| a few lines of code and makes the parser more consistent wrt case- sensitivity. bz#2664 ok dtucker@ | |||
| 2017-11-03 | allow certificate validity intervals that specify only a start or | Damien Miller | |
| stop time (we already support specifying both or neither) | |||
| 2017-11-03 | allow "cd" and "lcd" commands with no explicit path argument. | Damien Miller | |
| lcd will change to the local user's home directory as usual. cd will change to the starting directory for session (because the protocol offers no way to obtain the remote user's home directory). bz#2760 ok dtucker@ | |||
| 2017-11-03 | When doing a config test with sshd -T, only require the attributes | Darren Tucker | |
| that are actually used in Match criteria rather than (an incomplete list of) all criteria. ok djm@, man page help jmc@ | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |