summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2007-05-22zap double include; from p_nowaczyk AT o2.plDamien Miller
2007-05-17djm owes me a vb and a tism cd for breaking ssh compilationJolan Luff
2007-05-17pass received SIGINT from monitor to postauth child so it can cleanDamien Miller
up properly. bz#1196, patch from senthilkumar_sen AT hotpop.com; ok markus@
2007-05-17fall back to gethostname() when the outgoing connection is notDamien Miller
on a socket, such as is the case when ProxyCommand is used. Gives hostbased auth an opportunity to work; bz#616, report and feedback stuart AT kaloram.com; ok markus@
2007-05-17bz#1286 stop reading and processing commands when input or output bufferDamien Miller
is nearly full, otherwise sftp-server would happily try to grow the input/output buffers past the maximum supported by the buffer API and promptly fatal() based on patch from Thue Janus Kristensen; feedback & ok dtucker@
2007-05-17save and restore errno when logging; ok deraadt@Damien Miller
2007-04-23Remove debug() left over from development. ok deraadt@Darren Tucker
2007-04-18cast "%llu" format spec to (unsigned long long); do not assume aKevin Steves
u_int64_t arg is the same as 'unsigned long long'. from Dmitry V. Levin <ldv@altlinux.org> ok markus@ 'Yes, that looks correct' millert@
2007-04-14remove unused macro; from Dmitry V. Levin <ldv@altlinux.org>Kevin Steves
2007-03-20- let synopsis and description agree for -fJason McIntyre
- sort FILES - +.Xr ssh-keyscan 1 , from Igor Sobrado
2007-03-20remove some bogus *p tests from charles longeauTed Unangst
ok deraadt millert
2007-03-19Remove the signal handler that checks if the agent's parent processDarren Tucker
has gone away, instead check when the select loop returns. Record when the next key will expire when scanning for expired keys. Set the select timeout to whichever of these two things happens next. With djm@, with & ok deraadt@ markus@
2007-03-19Disable the legacy SSH protocol 1 for new installations viaDamien Miller
a configuration override. In the future, we will change the server's default itself so users who need the legacy protocol will need to turn it on explicitly
2007-03-09Move C/R -> kbdint special case to after the defaults have beenDarren Tucker
loaded, which makes ChallengeResponse default to yes again. This was broken by the Match changes and not fixed properly subsequently. Found by okan at demirmen.com, ok djm@ "please do it" deraadt@
2007-03-06openssh-4.6; "please" deraadt@Damien Miller
2007-03-01sort the `match' keywords;Jason McIntyre
2007-03-01Remove ChallengeResponseAuthentication support inside a MatchDarren Tucker
block as its interaction with KbdInteractive makes it difficult to support. Also, relocate the CR/kbdint option special-case code into servconf. "please commit" djm@, ok markus@ for the relocation.
2007-02-28Remove expired keys periodically so they don't remain in memory whenDarren Tucker
the agent is entirely idle, as noted by David R. Piegdon. This is the simple fix, a more efficient one will be done later. With markus, deraadt, with & ok djm.
2007-02-24- strlen returns size_t, not int.Ray Lai
- Pass full buffer size to fgets. OK djm@, millert@, and moritz@.
2007-02-22Check activep so Match and GatewayPorts work together; ok markus@Darren Tucker
2007-02-21Clear alarm() before restarting sshd on SIGHUP. Without this, if there'sDarren Tucker
a SIGALRM pending (for SSH1 key regeneration) when sshd is SIGHUP'ed, the newly exec'ed sshd will get the SIGALRM and not have a handler for it, and the default action will terminate the listening sshd. Analysis and patch from andrew at gaul.org.
2007-02-20set maximum packet and window sizes the same for multiplexed clientsDamien Miller
as normal connections; ok markus@
2007-02-19Teach Match how handle config directives that are used before authentication.Darren Tucker
This allows configurations such as permitting password authentication from the local net only while requiring pubkey from offsite. ok djm@, man page bits ok jmc@
2007-02-14typos in comments; ok jmc@Kevin Steves
2007-01-22fix detection of whether we should show progress meter or not: scpDamien Miller
tested isatty(stderr) but wrote the progress meter to stdout. This patch makes it test stdout. bz#1265 reported by junkmail AT bitsculpture.com; of dtucker@
2007-01-22return error from do_upload() when a write fails. fixes bz#1252: zeroDamien Miller
exit status from sftp when uploading to a full device. report from jirkat AT atlas.cz; ok dtucker@
2007-01-21spacesKevin Steves
2007-01-21spacesKevin Steves
2007-01-17Honour activep for times (eg ServerAliveInterval) while parsingDarren Tucker
ssh_config and ~/.ssh/config so they work properly with Host directives. From mario.lorenz@wincor-nixdorf.com via bz #1275. ok markus@
2007-01-12more secsh -> rfc 4716 updates;Jason McIntyre
spotted by wiz@netbsd ok markus
2007-01-10do not use a list for SYNOPSIS;Jason McIntyre
this is actually part of a larger report sent by eric s. raymond and forwarded by brad, but i only read half of it. spotted by brad.
2007-01-03spacesKevin Steves
2007-01-03ARGSUSED for lintKevin Steves
2007-01-03spacesKevin Steves
2007-01-03remove small dead code; arnaud.lacombe.1@ulaval.ca via Coverity scanKevin Steves
2007-01-02do not use lists for SYNOPSIS;Jason McIntyre
from eric s. raymond via brad
2006-12-14Make "PermitOpen all" first-match within a block to match the way otherDarren Tucker
options work. ok markus@ djm@
2006-12-13Make PermitOpen work with multiple values like the man pages says. bz #1267Darren Tucker
with details from peter at dmtz.com, with & ok djm@
2006-12-12bz #1019: some ssh.com versions apparently can't cope with the remote portDamien Miller
forwarding bind_address being a hostname, so send them an address for cases where they are not explicitly specified (wildcard or localhost bind). reported by daveroth AT acm.org; ok dtucker@ deraadt@
2006-12-11add rfc 4716 (public key format); ok jmcMarkus Friedl
2006-11-23Don't access buf[strlen(buf) - 1] for zero-length strings.Ray Lai
``ok by me'' djm@.
2006-11-14use argc and argv not some made up short formTheo de Raadt
2006-11-07BN_hex2bn returns int; from dtucker@Markus Friedl
2006-11-07correctly check for bad signatures in the monitor, otherwise the monitor andMarkus Friedl
the unpriv process can get out of sync. with dtucker@, ok djm@, dtucker@
2006-11-06add missing checks for openssl return codes; with & ok djm@Markus Friedl
2006-10-31check DH_compute_key() for -1 even if it should not happen because ofMarkus Friedl
earlier calls to dh_pub_is_valid(); report krahmer at suse.de; ok djm
2006-10-28correct/expand example of usage of -w; ok jmc@ stevesk@Otto Moerbeek
2006-10-22cancel progress meter when upload write fails; ok deraadt@Damien Miller
2006-10-11exit instead of doing a blocking tcp send if we detect a client/server timeout,Markus Friedl
since the tcp sendqueue might be already full (of alive requests); ok dtucker, report mpf
2006-10-10sleep before retrying (not after) since sleep changes errno; fixesMarkus Friedl
pr 5250; rad@twig.com; ok dtucker djm