summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2018-02-23After opening a file with gzdopen(3), we have to call gzclose(3) orIngo Schwarze
we leak memory internally used by zlib to keep compression state. Bug reported by Wolfgang Mueller <vehk at vehk dot de> who also provided an incomplete patch, part of which i'm using in this commit.
2018-02-23clarify documentation of macro keysIngo Schwarze
2018-02-23Logically, the following are are type names - just like .Vt,Ingo Schwarze
some of them with an optional variable name following: - .Ft - .Fa in the SYNOPSIS - .Fn second and later arguments in the SYNOPSIS So add these to the .Vt macro table in the mandoc.db(5) database. During my LibreSSL work, i'm getting really tired of typing $ man -k Vt,Ft,Fa=some_type_name over and over again; now, this becomes just: $ man -k Vt=some_type_name
2018-02-23Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures)Markus Friedl
The code is not compiled in by default (see WITH_XMSS in Makefile.inc) Joint work with stefan-lukas_gazdag at genua.eu See https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-12 ok djm@
2018-02-23some cleanup for BindInterface and ssh-keyscan;Jason McIntyre
2018-02-23Add ssh-keyscan -D option to make it print its results in SSHFP formatDamien Miller
bz#2821, ok dtucker@
2018-02-23Add missing braces.Darren Tucker
Caught by the tinderbox's -Werror=misleading-indentation, ok djm@
2018-02-23Add BindInterface ssh_config directive and -B command-line argumentDamien Miller
to ssh(1) that directs it to bind its outgoing connection to the address of the specified network interface. BindInterface prefers to use addresses that aren't loopback or link- local, but will fall back to those if no other addresses of the required family are available on that interface. Based on patch by Mike Manning in bz#2820, ok dtucker@
2018-02-22Remove an unused variable.Nicholas Marriott
2018-02-22Check prefix when retrying so it is checked while repeat flag isNicholas Marriott
set. GitHub issue 1239.
2018-02-22Add exit-empty option to exit server if no sessions (defaults to on).Nicholas Marriott
2018-02-20Do not leak memory when working out job name in formats.Nicholas Marriott
2018-02-19Support ISO colon-separated SGR.Nicholas Marriott
2018-02-19emphasise that the hostkey rotation may send key types that the clientDamien Miller
may not support, and that the client should simply disregard such keys (this is what ssh does already).
2018-02-18document s_client -groups;Jason McIntyre
2018-02-16Reflowing the grid in-place involved way too much memmove() for a bigNicholas Marriott
performance cost with a large history. Instead change back to using a second grid and copying modified lines over which is much faster (this doesn't revert to the old code however which didn't support UTF-8 properly). GitHub issue 1249.
2018-02-16Don't send IUTF8 to servers that don't like them.Darren Tucker
Some SSH servers eg "ConfD" drop the connection if the client sends the new IUTF8 (RFC8160) terminal mode even if it's not set. Add a bug bit for such servers and avoid sending IUTF8 to them. ok djm@
2018-02-16Mention recent DH KEX methods:Damien Miller
diffie-hellman-group14-sha256 diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 From Jakub Jelen via bz#2826
2018-02-16stop loading DSA keys by default, remove sshd_config stanza and manpageDamien Miller
bits; from Colin Watson via bz#2662, ok dtucker@
2018-02-14Zero as (un)mount flag is valid; ok millert@Otto Moerbeek
2018-02-14Ensure that D mod (P-1) and D mod (Q-1) are calculated in constant time.Joel Sing
This avoids a potential side channel timing leak. ok djm@ markus@
2018-02-14Some obvious freezero() conversions.Joel Sing
This also zeros an ed25519_pk when it was not being zeroed previously. ok djm@ dtucker@
2018-02-13remove space before tabDamien Miller
2018-02-12Simplify documentation of split-screen mode, avoiding abuse of []Ingo Schwarze
to sometimes mean "character set", which conflicts with the normal meaning of "optional element" in manual pages. While here, add a few related clarifications and tweak a few details. Triggered by a minor bug report from <trondd at kagu-tsuchi dot com>, and by bentley@ subsequently pointing out the abuse of []. Patch using input from jmc@, who also agreed with some previous versions.
2018-02-11Don't reset signal handlers inside handlers.Darren Tucker
The signal handlers from the original ssh1 code on which OpenSSH is based assume unreliable signals and reinstall their handlers. Since OpenBSD (and pretty much every current system) has reliable signals this is not needed. In the unlikely even that -portable is still being used on such systems we will deal with it in the compat layer. ok deraadt@
2018-02-11typo in output string; from edgar pettijohnJason McIntyre
2018-02-11fix madvise(2) flags matching; ok deraadt@ tom@Otto Moerbeek
2018-02-11Make sorting in the pcache view work. This allows us to sort on allMartijn van Duren
shown columns. There's still parts that could do with a good polishing, but it's an improvement. OK tedu@
2018-02-10constify some private key-related functions; based onDamien Miller
https://github.com/openssh/openssh-portable/pull/56 by Vincent Brillault
2018-02-10Mention ServerAliveTimeout in context of TCPKeepAlives; prompted byDamien Miller
Christoph Anton Mitterer via github
2018-02-10clarify IgnoreUserKnownHosts; based on github PR fromDamien Miller
Christoph Anton Mitterer.
2018-02-10Shorter, more accurate explanation of NoHostAuthenticationForLocalhostDamien Miller
without the confusing example. Prompted by Christoph Anton Mitterer via github and bz#2293.
2018-02-10Add TLS session support to ftp(1).Joel Sing
If a session file is specified via the `-S session=...', ftp(1) will attempt to resume TLS sessions based on the session data contained within this file. Upon completion of a successful TLS handshake the session file will be updated with new session data, if available. Discussed with deraadt@ and beck@. Requested by and input from espie@.
2018-02-10Disable RemoteCommand and RequestTTY in the ssh session started byDamien Miller
scp. sftp is already doing this. From Camden Narzt via github; ok dtucker
2018-02-10Refuse to create a certificate with an unusable number of principals;Damien Miller
Prompted by gdestuynder via github
2018-02-10fatal if we're unable to write all the public key; previously weDamien Miller
would silently ignore errors writing the comment and terminating newline. Prompted by github PR from WillerZ; ok dtucker
2018-02-10Use return instead of exit from main.Theo Buehler
2018-02-09Schedule alarm for start of minute if departure time is absolute.cheloha
e.g., "leave 1530" goes off closer to 15:30:00. Timezone-related bug caught by tb@ in review. ok tb@ tedu@
2018-02-09Remove unused sKerberosTgtPassing from enum. From calestyo via githubDarren Tucker
pull req #11, ok djm@
2018-02-08Make pool order on size actually order on size instead of size*inuse.Martijn van Duren
Prompted by and OK otto@
2018-02-08Convert option handling for openssl(1) genpkey.Joel Sing
ok beck@ inoguchi@
2018-02-08Add the order keyword to systat global command interpreter.Martijn van Duren
This command shows the available orderings for the current view, which ordering is active, their shortcuts, and if they're in reverse order. manpage nits jmc@ OK tedu@
2018-02-08Rename struct umac_ctx to umac128_ctx too. In portable some linkersDarren Tucker
complain about two symbols with the same name having differing sizes. ok djm@
2018-02-08Invalidate the tag_files.tfd after fclose(3)ing the stram associated withTheo Buehler
it. In main assert that the tfd was actually invalidated. This avoids closing an invalid fd. ok deraadt on earlier version, tweak & ok schwarze
2018-02-07rename var 's' -> 'fd' to ease finding it in a long functionRichard Procter
ok tb@ deraadt@
2018-02-07eliminate close()/fclose() dance.Richard Procter
ok tb@ deraadt@
2018-02-07ssh_free checks for and handles NULL args, remove NULL checks from remainingDarren Tucker
callers. ok djm@
2018-02-07In man(7) and cat pages, cut off excessive one line descriptions.Ingo Schwarze
An extreme example of how rogue files could mess up apropos(1) output was reported by bentley@: qwtlicense(3) in the x11/qwt port.
2018-02-07Fix the mandoc_strndup() utility function. All existing callers seemIngo Schwarze
safe so far, but implementing it with an unchecked memcpy(3) is just wrong and quite dangerous.
2018-02-07Restore a check before BN_free() that needs to exist and write it such thatJoel Sing
the intent is more obvious.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-29 06:56:19 +0000