summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2013-10-17tweak previous;Jason McIntyre
2013-10-17rearrange check to reduce diff against -portableDamien Miller
2013-10-17fsync@openssh.com protocol extension for sftp-serverDamien Miller
client support to allow calling fsync() faster successful transfer patch mostly by imorgan AT nas.nasa.gov; bz#1798 "fine" markus@ "grumble OK" deraadt@ "doesn't sound bad to me" millert@
2013-10-16one I missed in previous: s/isation/ization/Damien Miller
2013-10-16s/canonicalise/canonicalize/ for consistency with existing spelling,Damien Miller
e.g. authorized_keys; pointed out by naddy@
2013-10-16tweak previous;Jason McIntyre
2013-10-16Implement client-side hostname canonicalisation to allow an explicitDamien Miller
search path of domain suffixes to use to convert unqualified host names to fully-qualified ones for host key matching. This is particularly useful for host certificates, which would otherwise need to list unqualified names alongside fully-qualified ones (and this causes a number of problems). "looks fine" markus@
2013-10-15tweak previous;Jason McIntyre
2013-10-14whitespace at EOL; pointed out by markus@Damien Miller
2013-10-14refactor client config code a little:Damien Miller
add multistate option partsing to readconf.c, similar to servconf.c's existing code. move checking of options that accept "none" as an argument to readconf.c add a lowercase() function and use it instead of explicit tolower() in loops part of a larger diff that was ok markus@
2013-10-14add a "Match" keyword to ssh_config that allows matching on hostname,Damien Miller
user and result of arbitrary commands. "nice work" markus@
2013-10-14Add logging of session starts in a useful format; ok markus@ feedback andDamien Miller
ok dtucker@
2013-10-14tweak previous;Jason McIntyre
ok djm
2013-10-14add 7.5kbit DH groupsDarren Tucker
2013-10-14count number of lines in moduli input file and pass to the testingDarren Tucker
ssh-keygen process. this will let it provide an completion time estimate.
2013-10-11obsolete commentDamien Miller
2013-10-11missed one arg reorderDamien Miller
2013-10-11rename flag arguments to be more clear and consistent.Damien Miller
reorder some internal function arguments to make adding additional flags easier. no functional change
2013-10-10Regenerate moduliDarren Tucker
2013-10-10bz#2139: fix re-exec fallback by ensuring that startup_pipe is correctlyDamien Miller
updated; ok dtucker@
2013-10-10Move moduli generation to usr.bin/ssh/moduli-gen and keep track ofDarren Tucker
the fragments separately. "No substantive objection" djm@
2013-10-10add -Q, -P and -p to usage() before jmc@ catches meDamien Miller
2013-10-09Add ability to whitelist and/or blacklist sftp protocol requests by name.Damien Miller
Refactor dispatch loop and consolidate read-only mode checks. Make global variables static, since sftp-server is linked into sshd(8). ok dtucker@
2013-10-08Increase the size of the Diffie-Hellman groups requested for a each symmetricDarren Tucker
key size. New values from NIST Special Publication 800-57 with the upper limit specified by RFC4419. Pointed out by Peter Backes, ok djm@.
2013-09-19bz#1211: make BindAddress work with UsePrivilegedPort=yes; patch fromDamien Miller
swp AT swp.pp.ru; ok dtucker@
2013-09-19bz#1297 - tell the client (via packet_send_debug) when their preferredDamien Miller
listen address has been overridden by the server's GatewayPorts; ok dtucker@
2013-09-19fix swapped pflag and printflag in sftp upload_dir; from Iain MorganDamien Miller
2013-09-19store the initial file offset so the progress meter doesn't freak outDamien Miller
when resuming sftp transfers. bz#2137; patch from Iain Morgan; ok dtucker@
2013-09-16Remove gssapi config parts from ssh_config, as was already done for sshd_config.Stuart Henderson
Req by/ok ajacoutot@
2013-09-13avoid unaligned access in code that reused a buffer to send aDamien Miller
struct in_addr in a reply; simpler just use use buffer_put_int(); from portable; spotted by and ok dtucker@
2013-09-12fix connection crash when sending break (~B) on ControlPersist'd session;Damien Miller
ok dtucker@
2013-09-07Remove commented-out kerberos/gssapi config options from sample config,Stuart Henderson
kerberos support is currently not enabled in ssh in OpenBSD. Discussed with various people; ok deraadt@
2013-09-02All the instances of arc4random_stir() are bogus, since arc4random()Theo de Raadt
does this itself, inside itself, and has for a very long time.. Actually, this was probably reducing the entropy available. ok djm
2013-08-31make ^w match ksh behaviour (delete previous word instead of entire line)Damien Miller
2013-08-28improve batch processing a bit by making use of the quite flag a bitMike Belopuhov
more often and exit with a non zero code if asked to find a hostname in a known_hosts file and it wasn't there; originally from reyk@, ok djm
2013-08-22Stir PRNG after post-accept fork. The child gets a different PRNG stateDamien Miller
anyway via rexec and explicit privsep reseeds, but it's good to be sure. ok markus@
2013-08-20some proxyusefdpass tweaks;Jason McIntyre
2013-08-20Add a ssh_config ProxyUseFDPass option that supports the use ofDamien Miller
ProxyCommands that establish a connection and then pass a connected file descriptor back to ssh(1). This allows the ProxyCommand to exit rather than have to shuffle data back and forth and enables ssh to use getpeername, etc. to obtain address information just like it does with regular directly-connected sockets. ok markus@
2013-08-14some Bx/Ox conversion;Jason McIntyre
From: Jan Stary
2013-08-13another of the same typoDamien Miller
2013-08-13typo in error message; from Stephan RickauerDamien Miller
2013-08-10libkafs5 -> libkafs (unused in build, so no functional change)Antoine Jacoutot
2013-08-09enable ctrl-left-arrow and ctrl-right-arrow to move forward/back a word;Damien Miller
matching ksh's relatively recent change.
2013-08-09two problems found by a to-be-committed regress test: 1) msg_id was notDamien Miller
being initialised so was starting at a random value from the heap (harmless, but confusing). 2) some error conditions were not being propagated back to the caller
2013-08-09do getopt parsing for all sftp commands (with an empty optstring forDamien Miller
commands without arguments) to ensure consistent behaviour
2013-08-08add a "-l" flag for the rename command to force it to use the sillyDamien Miller
standard SSH_FXP_RENAME command instead of the POSIX-rename- like posix-rename@openssh.com extension. intended for use in regress tests, so no documentation.
2013-08-08fix two year old regression: symlinking a file would incorrectlyDamien Miller
canonicalise the target path. bz#2129 report from delphij AT freebsd.org
2013-08-07sort -a;Jason McIntyre
2013-08-06add cast to avoid format warning; from portableDamien Miller
2013-08-06document top-level -a option (the -a option to 'get' was already documented)Damien Miller