summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2005-11-04remove hardcoded hash lengths in key exchange code, allowingDamien Miller
implementation of KEX methods with different hashes (e.g. SHA-256); ok markus@ dtucker@ stevesk@
2005-11-03Cache reverse lookups with and without DNS separately; ok markus@Darren Tucker
2005-10-31grammar;Jason McIntyre
2005-10-31make sure we clean up wtmp, etc. file when we receive a SIGTERM,Damien Miller
SIGINT or SIGQUIT when running without privilege separation (the normal privsep case is already OK). Patch mainly by dtucker@ and senthilkumar_sen AT hotpop.com; ok dtucker@
2005-10-31generate a protocol 2 RSA key by defaultDamien Miller
2005-10-31Fix sorting with "ls -1" command. From Robert Tsai, "looks right" deraadt@Darren Tucker
2005-10-30no need to escape single quotes in comments, no binary changeDamien Miller
2005-10-30remove trailing whitespace;Jason McIntyre
2005-10-30Check for connections with IP options earlier and drop silently. ok djm@Darren Tucker
2005-10-30fix misleading debug message; ok dtucker@Damien Miller
2005-10-30make ssh-keygen discard junk from server before SSH- ident, spotted byDamien Miller
dave AT cirt.net; ok dtucker@
2005-10-30mention control socket fallback behaviour, reported by tryponraj AT gmail.comDamien Miller
2005-10-17more cleanups; ok jakob@Kevin Steves
2005-10-17remove #ifdef LWRES; ok jakob@Kevin Steves
2005-10-17fix memory leaks from 2 sources:Kevin Steves
1) key_fingerprint_raw() 2) malloc in dns_read_rdata() ok jakob@
2005-10-15make external definition static; ok deraadt@Kevin Steves
2005-10-14free()->xfree(); ok djm@Kevin Steves
2005-10-14no trailing "\n" for log functions; ok djm@Kevin Steves
2005-10-13KNF; ok djm@Kevin Steves
2005-10-13unneeded #include, unused declaration, little knf; ok deraadt@Kevin Steves
2005-10-13unused declarations; ok deraadt@Kevin Steves
2005-10-13spelling in commentsKevin Steves
2005-10-13remove unneeded #includes; ok markus@Kevin Steves
2005-10-11bz #1076 set SO_REUSEADDR on X11 forwarding listner sockets, preventingDamien Miller
bind() failure when a previous connection's listeners are in TIME_WAIT, reported by plattner AT inf.ethz.ch; ok dtucker@
2005-10-10fix regression I introduced in 4.2: X11 forwardings initiated afterDamien Miller
a session has exited (e.g. "(sleep 5; xterm) &") would not start. bz #1086 reported by t8m AT centrum.cz; ok markus@ dtucker@
2005-10-07change DSA default back to 1024, as it's defined for 1024 bits onlyMarkus Friedl
and this causes interop problems with other clients. moreover, in order to improve the security of DSA you need to change more components of DSA key generation (e.g. the internal SHA1 hash); ok deraadt
2005-10-03Relocate check_ip_options call to prevent logging of garbage for connectionsDarren Tucker
with IP options set. bz#1092 from David Leonard, "looks good" deraadt@
2005-09-30deploy .An -nosplit; ok jmcJared Yanovich
2005-09-21change label at markus@'s requestDamien Miller
2005-09-21aquire -> acquire, from stevesk@Damien Miller
2005-09-19spelling nit from stevesk@Damien Miller
2005-09-19update -D usage here too;Jason McIntyre
2005-09-19some more .Bk/.Ek to avoid ugly line split;Jason McIntyre
2005-09-19typoDamien Miller
2005-09-19stop connection abort on rekey with delayed compression enabled whenDamien Miller
post-auth privsep is disabled (e.g. when root is logged in); ok dtucker@
2005-09-19mention ability to specify bind_address for DynamicForward and -D options;Damien Miller
bz#1077 spotted by Haruyama Seigo
2005-09-13ensure that stdio fds are attached; ok deraadt@Damien Miller
2005-09-09typo; from mark at mcs.vuw.ac.nz, bug #1082Markus Friedl
2005-09-07enforce chanid != NULL; ok djmMarkus Friedl
2005-08-314.2Markus Friedl
2005-08-30destroy credentials if krb5_kuserok() call fails. Stops credentials beingDamien Miller
delegated to users who are not authorised for GSSAPIAuthentication when GSSAPIDeletegateCredentials=yes and another authentication mechanism succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
2005-08-08sftp prompt enhancements:Jared Yanovich
- in non-interactive mode, do not print an empty prompt at the end before finishing - print newline after EOF in editline mode - call el_end() in editline mode ok dtucker djm
2005-08-06Unbreak sshd ListenAddress for bare IPv6 addresses.Darren Tucker
Report from Janusz Mucka; ok djm@
2005-07-30listen_hosts initialisation here too; spotted greg AT y2005.nest.cxDamien Miller
2005-07-30fix -D listen_host initialisation, so it picks up gateway_ports settingDamien Miller
correctly
2005-07-28missing packet_init_compression(); from solarMarkus Friedl
2005-07-27Silence bogus -Wuninitialized warnings; ok djm@Darren Tucker
2005-07-25add a new compression method that delays compression until the userMarkus Friedl
has been authenticated successfully and set compression to 'delayed' for sshd. this breaks older openssh clients (< 3.5) if they insist on compression, so you have to re-enable compression in sshd_config. ok djm@
2005-07-19auth_usercheck(3) can return NULL, so check for that. Report fromOtto Moerbeek
mpech@. ok markus@
2005-07-17knf says that a 2nd level indent is four (not three or five) spacesDamien Miller