summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2021-07-19Ensure that all returned SSHFP records for the specified host name andDarren Tucker
hostkey type match instead of only one. While there, simplify the code somewhat and add some debugging. Based on discussion in bz#3322, ok djm@.
2021-07-19Put dh_set_moduli_file call inside ifdef WITH_OPENSSL. Fixes build withDarren Tucker
OPENSSL=no.
2021-07-18Support auto-tagging for ".It Va".Ingo Schwarze
This combination is somewhat rare because few libraries expose so many global variables that they need a list to enumerate them, but when the idiom does occur, tagging the variable names is generally useful. For example, this helps awk(1), dc(1), make(1), rc.subr(8), ... Missing feature reported and patch reviewed, tested, and OK'ed by kn@.
2021-07-17Remove setpassent(3) leftoverskn
Those should have gone with the switch to uid_from_user(3) in r1.95; OK millert
2021-07-17wrap some long linesDamien Miller
2021-07-17fix sftp on ControlPersist connections, broken by recent SessionTypeDamien Miller
change; spotted by sthen@
2021-07-16Update the default block size in the manual, in sndiod.c r1.37 it wasStuart Henderson
reduced to 480 frames. ok ratchov@
2021-07-16Explicitly check for and start time-based rekeying in the clientDamien Miller
and server mainloops. Previously the rekey timeout could expire but rekeying would not start until a packet was sent or received. This could cause us to spin in select() on the rekey timeout if the connection was quiet. ok markus@
2021-07-15Wrap over 80 long lines in ca.cKinichiro Inoguchi
2021-07-15Explicitly check pointer variable if it is NULL or not in ca.cKinichiro Inoguchi
2021-07-15Remove space between '*' and pointer variable in ca.cKinichiro Inoguchi
2021-07-15Use 'serial' rather than 'ser' in ca.cKinichiro Inoguchi
input from jsing@
2021-07-15Convert openssl(1) ca option handlingKinichiro Inoguchi
New option handling for openssl(1) ca. This diff is just replacing with new option handling, no functional change. I'm using the word DN or RDN in description as manual uses them, rather than replacing with "Distinguished Name" or "Relative Distinguished Name". I would like to add another fixes below by follow-up diffs. - remove space between '*' and pointer variable - wrap 80+ long lines - explicitly check pointer variable if it is NULL or not comments and ok from jsing@
2021-07-14Remove unneeded calls to tls_init(3)kn
As per the manual and lib/libtls/tls.c revision 1.79 from 2018 "Automatically handle library initialisation for libtls." initialisation is handled automatically by other tls_*(3) functions. Remove explicit tls_init() calls from base to not give the impression of it being needed. Feedback tb OK Tests mestre
2021-07-14Restructure the getopt_long options. Sort them mostly by name with theClaudio Jeker
exception of no-xyz options that are grouped with the coresponding xyz option. Fix --no-motd to use the internal flag setting of getopt_long. Also use some defines instead of numbers for pure long options that need special handling. OK benno@
2021-07-14Move default value for TERM into tmux.h.Nicholas Marriott
2021-07-14reorder SessionType; ok djmJason McIntyre
2021-07-13add a SessionType directive to ssh_config, allowing the configurationDamien Miller
file to offer equivalent control to the -N (no session) and -s (subsystem) command-line flags. Part of GHPR#231 by Volker Diels-Grabsch with some minor tweaks; feedback and ok dtucker@
2021-07-13Give #() commands a one second grace period where the output is emptyNicholas Marriott
before telling the user they aren't doing anything. GitHub issue 2774.
2021-07-13Only use client for sizing when not detached, GitHub issue 2772.Nicholas Marriott
2021-07-12Change the error reporting pattern throughout the tree when unveilBob Beck
fails to report the path that the failure occured on. Suggested by deraadt@ after some tech discussion. Work done and verified by Ashton Fagg <ashton@fagg.id.au> ok deraadt@ semarie@ claudio@
2021-07-12Make limit for time_t test unconditional in the format_absolute_timeDarren Tucker
fix for bz#3329 that allows printing of timestamps past INT_MAX. This was incorrectly included with the previous commit. Based on discussion with djm@.
2021-07-12Use existing format_absolute_time() function when printing cert validityDarren Tucker
instead of doing it inline. Part of bz#3329.
2021-07-09silence redundant error message; reported by Fabian StelzerDamien Miller
2021-07-08Avoid a potential buffer overflow in backslash escaping.Todd C. Miller
https://github.com/onetrueawk/awk/issues/121
2021-07-08Fix mouse_word format now word-separators has no space and position ofNicholas Marriott
menu if too close to the bottom.
2021-07-08csplit(1): Fix extraneous output in edge caseTodd C. Miller
When the input to csplit contains fewer lines than the number of matches specified, extra output was mistakenly included in some output files. From FreeBSD via Tim Chase.
2021-07-06Improve error reporting when the tmux /tmp directory cannot be createdNicholas Marriott
or used, GitHub issue 2765 from Uwe Kleine-Koenig.
2021-07-06Forbid empty session names, GitHub issue 2758.Nicholas Marriott
2021-07-05Fix off-by-one array access when 64 channel stream is resampledAlexandre Ratchov
2021-07-05Fix a couple of whitespace things. Portable already has these so thisDarren Tucker
removes two diffs between the two.
2021-07-05Order includes as per style(9). Portable already has these so thisDarren Tucker
removes a handful of diffs between the two.
2021-07-05Remove comment referencing now-removed RhostsRSAAuthentication. ok djm@Darren Tucker
2021-07-05allow spaces to appear in usernames for local to remote, and scp -3Damien Miller
remote to remote copies. with & ok dtucker bz#1164
2021-07-04The mandoc(1) manual already mentions that -T man output modeIngo Schwarze
neither supports tbl(7) nor eqn(7) input. If an input file contains such code anyway, tell the user rather than failing an assert(3)ion. Fixing a crash reported by Bjarni Ingi Gislason <bjarniig at rhi dot hi dot is> in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901636 which the Debian maintainer of mandoc, Michael at Stapelberg dot ch, forwarded to me.
2021-07-02Use nanosleep() and setitimer() instead of usleep() and ualarm().Todd C. Miller
Both usleep() and ualarm() are obsolete and were removed from POSIX. OK deraadt@
2021-07-02Remove obsolete comments about SSHv1 auth methods. ok djm@Darren Tucker
2021-07-02Remove references to ChallengeResponseAuthentication in favour ofDarren Tucker
KbdInteractiveAuthentication. The former is what was in SSHv1, the latter is what is in SSHv2 (RFC4256) and they were treated as somewhat but not entirely equivalent. We retain the old name as deprecated alias so config files continue to work and a reference in the man page for people looking for it. Prompted by bz#3303 which pointed out the discrepancy between the two when used with Match. Man page help & ok jmc@, with & ok djm@
2021-06-30... way too much white space!Claudio Jeker
2021-06-30Remove TODO.md, this file is not up-to-date and also not really a goodClaudio Jeker
todo list for rsync.
2021-06-30Replace Id: tags with OpenBSD: tagsClaudio Jeker
OK deraadt@
2021-06-28In terminal output of man(7) documents, stop printing two extra blankIngo Schwarze
lines before the NAME section and before the page footer. While these blank lines had a long tradition, they didn't really serve any purpose and merely wasted screen real estate. Besides, this makes output from man(7) more similar to output from mdoc(7). This commit keeps mandoc compatible with groff-current, where G. Branden Robinson committed the same change on June 16 (groff commit 2278d6ed).
2021-06-27add a style message about overlong text lines,Ingo Schwarze
trying very hard to avoid false positives, not at all trying to catch as many cases as possible; feature originally suggested by tb@, OK tb@ kn@ jmc@
2021-06-25fix decoding of X.509 subject name; from Leif Thuresson via bz3327Damien Miller
ok markus@
2021-06-25Use better language to refer to the user. From l1ving via githubDarren Tucker
PR#250, ok jmc@
2021-06-25Replace SIGCHLD/notify_pipe kludge with pselect.Darren Tucker
Previously sshd's SIGCHLD handler would wake up select() by writing a byte to notify_pipe. We can remove this by blocking SIGCHLD, checking for child terminations then passing the original signal mask through to pselect. This ensures that the pselect will immediately wake up if a child terminates between wait()ing on them and the pselect. In -portable, for platforms that do not have pselect the kludge is still there but is hidden behind a pselect interface. Based on other changes for bz#2158, ok djm@
2021-06-23substantially shorten the usage() messageTheo de Raadt
pieces by jmc, pieces by me
2021-06-22reduce verbosity in usage and make it match SYNOPSIS;Jason McIntyre
i reformatted it to match 80w, and removed two functions that had been used to populate usage: getdistoptlist and msgprusage; ok millert
2021-06-22reduce verbosity in usage and make it match SYNOPSIS;Jason McIntyre
ok millert
2021-06-22reduce verbosity in usage and make it match SYNOPSIS;Jason McIntyre
ok millert