summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2010-06-26oops, forgot to #include <canohost.h>; spotted and patch from chl@Damien Miller
2010-06-26tweak previous;Jason McIntyre
2010-06-25Add X11ForwardTimeout option to specify timeout for untrusted X11Damien Miller
authentication cookies to avoid fallback in X11 code to fully-trusted implicit authentication using SO_PEERCRED described at: http://lists.x.org/archives/xorg-devel/2010-May/008636.html After the X11ForwardTimeout has expired the client will now refuse incoming X11 channel opens. based on patch from Tavis Ormandy; "nice" markus@
2010-06-25log the hostname and address that we connected to at LogLevel=verboseDamien Miller
after authentication is successful to mitigate "phishing" attacks by servers with trusted keys that accept authentication silently and automatically before presenting fake password/passphrase prompts; "nice!" markus@
2010-06-25skip the initial check for access with an empty password whenDamien Miller
PermitEmptyPasswords=no;
2010-06-25bz#1750: fix requirement for /dev/null inside ChrootDirectory forDamien Miller
internal-sftp accidentally introduced in r1.253 by removing the code that opens and dup /dev/null to stderr and modifying the channels code to read stderr but discard it instead; ok markus@
2010-06-25bz#1327: remove hardcoded limit of 100 permitopen clauses and portDamien Miller
forwards per direction; ok markus@ stevesk@
2010-06-23fix printing of extensions in v01 certificates that I broke in r1.190Damien Miller
2010-06-22include the user name on "subsystem request for ..." log messages;Damien Miller
bz#1571; ok dtucker@
2010-06-22replace verbose and overflow-prone Linebuf code with read_keyfile_line()Damien Miller
based on patch from joachim AT joachimschipper.nl; bz#1565; ok dtucker@
2010-06-22queue auth debug messages for bad ownership or permissions on the user'sDamien Miller
keyfiles. These messages will be sent after the user has successfully authenticated (where our client will display them with LogLevel=debug). bz#1554; ok dtucker@
2010-06-22standardise error messages when attempting to open private keyDamien Miller
files to include "progname: filename: error reason" bz#1783; ok dtucker@
2010-06-22expose some more sshd_config options inside Match blocks:Damien Miller
AuthorizedKeysFile AuthorizedPrincipalsFile HostbasedUsesNameFromPacketOnly PermitTunnel bz#1764; feedback from imorgan AT nas.nasa.gov; ok dtucker@
2010-06-18fix memory leak in do_realpath() error path; bz#1771, patch fromDamien Miller
anicka AT suse.cz
2010-06-18Missing check for chroot_director == "none" (we already checked againstDamien Miller
NULL); bz#1564 from Jan.Pechanec AT Sun.COM
2010-06-18unbreak ls in working directories that contains globbing characters inDamien Miller
their pathnames. bz#1655 reported by vgiffin AT apple.com
2010-06-17Correct sizing of object to be allocated by calloc(), replacingDamien Miller
sizeof(state) with sizeof(*state). This worked by accident since the struct contained a single int at present, but could have broken in the future. patch from hyc AT symas.com
2010-06-08check length of value returned C_GetAttributValue for != 0Markus Friedl
from mdrtbugzilla@codefive.co.uk; bugzilla #1773; ok dtucker@
2010-05-21colon() returns char*, so s/return (0)/return NULL/Damien Miller
2010-05-20Move the permit-* options to the non-critical "extensions" field for v01Damien Miller
certificates. The logic is that if another implementation fails to implement them then the connection just loses features rather than fails outright. ok markus@
2010-05-20fix logspam when key options (from="..." especially) deny non-matching keys;Damien Miller
reported by henning@ also bz#1765; ok markus@ dtucker@
2010-05-16mux support for remote forwarding with dynamic port allocation,Markus Friedl
use with LPORT=`ssh -S muxsocket -R0:localhost:25 -O forward somehost` feedback and ok djm@
2010-05-14Pause the mux channel while waiting for reply from aynch callbacks.Damien Miller
Prevents misordering of replies if new requests arrive while waiting. Extend channel open confirm callback to allow signalling failure conditions as well as success. Use this to 1) fix a memory leak, 2) start using the above pause mechanism and 3) delay sending a success/ failure message on mux slave session open until we receive a reply from the server. motivated by and with feedback from markus@
2010-05-14check that the certificate matches the corresponding private key beforeDamien Miller
grafting it on
2010-05-11don't accept certificates marked as "cert-authority" here; ok markus@Damien Miller
2010-05-07tweak previous;Jason McIntyre
2010-05-07add some optional indirection to matching of principal names listedDamien Miller
in certificates. Currently, a certificate must include the a user's name to be accepted for authentication. This change adds the ability to specify a list of certificate principal names that are acceptable. When authenticating using a CA trusted through ~/.ssh/authorized_keys, this adds a new principals="name1[,name2,...]" key option. For CAs listed through sshd_config's TrustedCAKeys option, a new config option "AuthorizedPrincipalsFile" specifies a per-user file containing the list of acceptable names. If either option is absent, the current behaviour of requiring the username to appear in principals continues to apply. These options are useful for role accounts, disjoint account namespaces and "user@realm"-style naming policies in certificates. feedback and ok markus@
2010-05-05restore mput and mget which got lost in the tab-completion changes.Darren Tucker
found by Kenneth Whitaker, ok djm@
2010-05-01typo; jmeltzer@Damien Miller
2010-04-26bz#1502: authctxt.success is declared as an int, but passed byDamien Miller
reference to function that accepts sig_atomic_t*. Convert it to the latter; ok markus@ dtucker@
2010-04-23refuse to generate keys longer than OPENSSL_[RD]SA_MAX_MODULUS_BITS,Damien Miller
since we would refuse to use them anyway. bz#1516; ok dtucker@
2010-04-23set stderr to /dev/null for subsystems rather than just closing it.Damien Miller
avoids hangs if a subsystem or shell initialisation writes to stderr. bz#1750; ok markus@
2010-04-23set "detach_close" flag when registering channel cleanup callbacks.Damien Miller
This causes the channel to close normally when its fds close and hangs when terminating a mux slave using ~. bz#1758; ok markus@
2010-04-23bz#1740: display a more helpful error message when $HOME isDamien Miller
inaccessible while trying to create .ssh directory. Based on patch from jchadima AT redhat.com; ok dtucker@
2010-04-16oops, %r => remote username, not %uDamien Miller
2010-04-16tweak previous; ok djmJason McIntyre
2010-04-16tweak previous; ok djmJason McIntyre
2010-04-16revised certificate format ssh-{dss,rsa}-cert-v01@openssh.com with theDamien Miller
following changes: move the nonce field to the beginning of the certificate where it can better protect against chosen-prefix attacks on the signature hash Rename "constraints" field to "critical options" Add a new non-critical "extensions" field Add a serial number The older format is still support for authentication and cert generation (use "ssh-keygen -t v00 -s ca_key ..." to generate a v00 certificate) ok markus@
2010-04-15retry lookup for private key if there's no matching key with CKA_SIGNMarkus Friedl
attribute enabled; this fixes fixes MuscleCard support (bugzilla #1736) ok djm@
2010-04-14expand %r => remote username in ssh_config:ProxyCommand;Damien Miller
ok deraadt markus
2010-04-10fix NULL dereference; from matthew.haub AT alumni.adelaide.edu.auDamien Miller
2010-04-10show the key type that we are offering in debug(), helps distinguishDamien Miller
between certs and plain keys as the path to the private key is usually the same.
2010-04-10bz#1698: kill channel when pty allocation requests fail. FixedDamien Miller
stuck client if the server refuses pty allocation. ok dtucker@ "think so" markus@
2010-04-10fix terminology: we didn't find a certificate in known_hosts, we foundDamien Miller
a CA key
2010-04-10bz#1746 - suppress spurious tty warning when using -O and stdinDamien Miller
is not a tty; ok dtucker@ markus@
2010-03-27tweak previous; ok dtuckerJason McIntyre
2010-03-26tweak previous;Jason McIntyre
2010-03-26allow buffer_get_int_ret/buffer_get_int64_ret to take a NULL pointerDamien Miller
argument to allow skipping past values in a buffer
2010-03-26Reformat default value of PreferredAuthentications entry (current formattingDarren Tucker
implies ", " is acceptable as a separator, which it's not. ok djm@
2010-03-26mention that -S none disables connection sharing; from Colin WatsonDamien Miller
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-13 11:07:09 +0000