summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2009-09-01fix a race condition in ssh-agent that could result in a wedged orDamien Miller
spinning agent: don't read off the end of the allocated fd_sets, and don't issue blocking read/write on agent sockets - just fall back to select() on retriable read/write errors. bz#1633 reported and tested by "noodle10000 AT googlemail.com"; ok dtucker@ markus@
2009-08-31document -e and -h; prodded by jmc@Damien Miller
2009-08-31check correct variable for error message, spotted by martynas@Damien Miller
2009-08-27Do not fall back to adding keys without contraints (ssh-add -c / -t ...)Damien Miller
when the agent refuses the constrained add request. This was a useful migration measure back in 2002 when constraints were new, but just adds risk now. bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@
2009-08-27allow setting an explicit umask on the commandline to override whateverDamien Miller
default the user has. bz#1229; ok dtucker@ deraadt@ markus@
2009-08-27force use of correct hash function for random-art signature displayDamien Miller
as it was inheriting the wrong one when bubblebabble signatures were activated; bz#1611 report and patch from fwojcik+openssh AT besh.com; ok markus@
2009-08-27allow setting an explicit umask on the commandline to override whateverDamien Miller
default the user has. bz#1229; ok dtucker@ deraadt@ markus@
2009-08-20subsystem_flag is defined in ssh.c so it's extern; ok djmDarren Tucker
2009-08-19ether -> either;Jason McIntyre
2009-08-18fix "get" command usage, spotted by jmc@Damien Miller
2009-08-18recursive transfer support for get/put and on the commandlineDamien Miller
work mostly by carlosvsilvapt@gmail.com for the Google Summer of Code with some tweaks by me; "go for it" deraadt@
2009-08-16Add PubkeyAuthentication to the list allowed in a Match block (bz #1577)Darren Tucker
2009-08-15remove unused define. markus@ ok.Federico G. Schwindt
2009-08-14make the "get_handle: ..." error messages vaguely useful by allowingDamien Miller
callers to specify their own error message strings.
2009-08-13sync synopsis and usage();Jason McIntyre
2009-08-13Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path",Damien Miller
add "-P port" to match scp(1). Fortunately, the -P option is only really used by our regression scripts. part of larger patch from carlosvsilvapt@gmail.com for his Google Summer of Code work; ok deraadt markus
2009-08-12sort options;Jason McIntyre
2009-08-12support most of scp(1)'s commandline arguments in sftp(1), as a firstDamien Miller
step towards making sftp(1) a drop-in replacement for scp(1). One conflicting option (-P) has not been changed, pending further discussion. Patch from carlosvsilvapt@gmail.com as part of his work in the Google Summer of Code
2009-07-05only send SSH2_MSG_DISCONNECT if we're in compat20; from dtucker@Kevin Steves
ok deraadt@ markus@
2009-07-02allow for long home dir paths (bz #1615). ok deraadtDarren Tucker
2009-06-30crank version; ok deraadtMarkus Friedl
2009-06-27Add client option UseRoaming. It doesn't do anything yet but willAndreas Gunnarsson
control whether the client tries to use roaming if enabled on the server. From Martin Forssen. ok markus@
2009-06-27It may be necessary to retransmit some data when resuming, so add itAndreas Gunnarsson
to a buffer when roaming is enabled. Most of this code was written by Martin Forssen, maf at appgate dot com. ok markus@
2009-06-27packet_bacup_state() and packet_restore_state() will be used toAndreas Gunnarsson
temporarily save the current state ren resuming a suspended connection. ok markus@
2009-06-22alphabetize includes; reduces diff vs portable and style(9). ok stevesk djmDarren Tucker
2009-06-21Add tags for the benefit of the sync scriptsDarren Tucker
2009-06-21abort if key_sign fails, preventing possible null deref. Based on reportDarren Tucker
from Paolo Ganci, ok markus@ djm@
2009-06-13Use debug3() instead of debug(), requested by markus@Andreas Gunnarsson
ok dtucker@
2009-06-12Move some more statics into session_stateAndreas Gunnarsson
ok markus@ djm@
2009-06-12Fix warnings.Andreas Gunnarsson
ok markus@ djm@
2009-06-12Fix warnings found by chl@ and djm@ and change roaming_atomicio'sAndreas Gunnarsson
return type to match atomicio's Diff from djm@, ok markus@
2009-05-28Keep track of number of bytes read and written. Needed for upcomingAndreas Gunnarsson
changes. Most code from Martin Forssen, maf at appgate dot com. ok markus@
2009-05-27Un-static ssh_exchange_identification(), part of a larger change fromAndreas Gunnarsson
Martin Forssen and needed for upcoming changes. ok markus@
2009-05-27Add packet_put_int64() and packet_get_int64(), part of a larger changeAndreas Gunnarsson
from Martin Forssen. ok markus@
2009-05-27Move the KEX_COOKIE_LEN define to kex.hAndreas Gunnarsson
ok markus@
2009-05-27Send SSH2_MSG_DISCONNECT when the client disconnects. From a largerAndreas Gunnarsson
change from Martin Forssen, maf at appgate dot com. ok markus@
2009-05-27Add clear_cached_addr(), needed for upcoming changes allowing the peerAndreas Gunnarsson
address to change. ok markus@
2009-05-25Put the globals in packet.c into a struct and don't access it directlyAndreas Gunnarsson
from other files. No functional changes. ok markus@ djm@
2009-04-21clarify we cd to user's home after chroot; ok markus@ onKevin Steves
earlier version; tweaks and ok jmc@
2009-04-18tweak previous; ok steveskJason McIntyre
2009-04-17clarify that even internal-sftp needs /dev/log for logging to work; okKevin Steves
markus@
2009-04-17use INTERNAL_SFTP_NAME for setproctitle() of in-process sftp-server;Kevin Steves
ok djm@ markus@
2009-04-14Fixed a few the-the misspellings in comments. Skipped a bunch in ↵Janne Johansson
binutils,gcc and so on. ok jmc@
2009-04-14remove unused option character from getopt() optstring; ok markus@Kevin Steves
2009-04-13fix possessive; ok djm@Kevin Steves
2009-03-26fix a few typographical errors found by spell(1).Igor Sobrado
ok dtucker@, jmc@
2009-03-23My previous commit didn't fix the problem at all, so stick at my firstTobias Stoeckmann
version of the fix presented to dtucker. Issue notified by Matthias Barkhoff (matthias dot barkhoff at gmx dot de). ok dtucker
2009-03-23Fixed a possible out-of-bounds memory access if the environment variableTobias Stoeckmann
SHELL is shorter than 3 characters. with input by and ok dtucker
2009-03-19for "Ciphers", just point the reader to the keyword in ssh_config(5), justJason McIntyre
as we do for "MACs": this stops us getting out of sync when the lists change; fixes documentation/6102, submitted by Peter J. Philipp alternative fix proposed by djm ok markus
2009-03-17pass correct argv[0] to openlog(); ok djm@Markus Friedl