summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2018-07-06Rename COMP_DELAYED to COMP_ZLIBStefan Fritsch
Only delayed compression is supported nowadays. ok markus@
2018-07-06Remove leftovers from pre-authentication compressionStefan Fritsch
Support for this has been removed in 2016. COMP_DELAYED will be renamed in a later commit. ok markus@
2018-07-06Remove unused ssh_packet_start_compression()Stefan Fritsch
ok markus@
2018-07-06Add a rectangle_toggle format, from Hirokazu Hata.Nicholas Marriott
2018-07-04More whitespace.rob
2018-07-04remove ambiguity; from ross l richardsonJason McIntyre
2018-07-04repair PubkeyAcceptedKeyTypes (and friends) after RSA signature work -Damien Miller
returns ability to add/remove/specify algorithms by wildcard. Algorithm lists are now fully expanded when the server/client configs are finalised, so errors are reported early and the config dumps (e.g. "ssh -G ...") now list the actual algorithms selected. Clarify that, while wildcards are accepted in algorithm lists, they aren't full pattern-lists that support negation. (lots of) feedback, ok markus@
2018-07-04Cleanup some whitespace.rob
2018-07-04whitespace needed between macro args and punctuation;Jason McIntyre
2018-07-04Relocate the update of br_offs from ber_read() to ber_readbuf() so ber_getc()rob
can call ber_readbuf() in all cases. This resolves a problem previously encountered with SNMPv3 authentication, simplifies the code, and completes a full synchronization of all ber instances. Proposed by claudio@. Problematic use case in snmpd tested by sthen@ and me. ldap(s) appear happy as well. looks good to claudio@
2018-07-04Add set-hook -R to run a hook immediately (useful to set multiple hooksNicholas Marriott
to the same thing).
2018-07-04Add pane focus hooks.Nicholas Marriott
2018-07-04minor tweaks to improve readability;Jason McIntyre
ok rob reyk
2018-07-04Add accessors for grid linedata member, for some future work. From DanNicholas Marriott
Aloni.
2018-07-04Add HISTORY to ldap.1rob
Ok reyk@
2018-07-03Synchronize ber changes from the snmpd instance to ldap, ldapd, and ypldap.rob
See usr.sbin/snmpd/ber.c revision 1.24 commit log for a summary of these changes (e.g. SNMPv2 traps, User-based Security Model, callback for USM HMAC calculations). There is one final ber piece to copy from the snmpd instance related to ber_getc() which will be done in a separate diff. "looks good to me" deraadt@
2018-07-03some finesse to fix RSA-SHA2 certificate authentication for certsDamien Miller
hosted in ssh-agent
2018-07-03check correct variable; unbreak agent keysDamien Miller
2018-07-03crank version number to 7.8; needed for new compat flag for priorDamien Miller
version; part of RSA-SHA2 strictification, ok markus@
2018-07-03Improve strictness and control over RSA-SHA2 signature types:Damien Miller
In ssh, when an agent fails to return a RSA-SHA2 signature when requested and falls back to RSA-SHA1 instead, retry the signature to ensure that the public key algorithm sent in the SSH_MSG_USERAUTH matches the one in the signature itself. In sshd, strictly enforce that the public key algorithm sent in the SSH_MSG_USERAUTH message matches what appears in the signature. Make the sshd_config PubkeyAcceptedKeyTypes and HostbasedAcceptedKeyTypes options control accepted signature algorithms (previously they selected supported key types). This allows these options to ban RSA-SHA1 in favour of RSA-SHA2. Add new signature algorithms "rsa-sha2-256-cert-v01@openssh.com" and "rsa-sha2-512-cert-v01@openssh.com" to force use of RSA-SHA2 signatures with certificate keys. feedback and ok markus@
2018-07-03allow sshd_config PermitUserEnvironment to accept a pattern-list ofDamien Miller
whitelisted environment variable names in addition to yes|no. bz#1800, feedback and ok markus@
2018-07-03- instead of trying to show a 100% accurate synopsis for -H, simplify itJason McIntyre
and add some explanatory text: originally from a diff proposed by matthew martin, with an adjusted text by him - while here, sync synopsis and usage(), and some other minor tweaks
2018-07-02Fire notify for select-layout, from George Nachman.Nicholas Marriott
2018-07-01s/constructive/constructed in DPRINTF output.rob
2018-07-01update currency exchanges rates;Jason McIntyre
2018-06-29Consistent use of copyright notices.rob
Ok reyk@
2018-06-29Synchronize ber.c and ber.h across ldap, ldapd, and ypldap, and reduce diffrob
with snmpd. More tweaks to come once things are fully synchronized. Feedback from claudio and Robert Klein. Ok claudio@
2018-06-13Import ldap(1), a simple ldap search client.Reyk Floeter
We have an ldapd(8) server and ypldap in base, so it makes sense to have a simple LDAP client without depending on the OpenLDAP package. This tool can be used in an ssh(1) AuthorizedKeysCommand script. With feedback from many including millert@ schwarze@ gilles@ dlg@ jsing@ OK deraadt@
2018-06-27Synchronize some comments.rob
2018-06-27Consistent use of calloc in ber.c.rob
Ok claudio@, "looks right" gsoares@
2018-06-27Allow any punctuation (except :) as separator in s/x/y/, not onlyNicholas Marriott
/. From JINNOUCHI Yasushi in GitHub issue 1386.
2018-06-27Synchronize correct processing of BER_TYPE_EOC. Fixes support for empty LDAProb
passwords. A similar fix was applied to snmpd in 2010 (rev 1.23). Pointers from Reyk. Ok claudio@
2018-06-13Import ldap(1), a simple ldap search client.Reyk Floeter
We have an ldapd(8) server and ypldap in base, so it makes sense to have a simple LDAP client without depending on the OpenLDAP package. This tool can be used in an ssh(1) AuthorizedKeysCommand script. With feedback from many including millert@ schwarze@ gilles@ dlg@ jsing@ OK deraadt@
2018-06-26Style nit.Nicholas Marriott
2018-06-26Fix "WARNING: line 6 disappeared in /etc/moduli, giving up" whenTodd C. Miller
choosing a prime. An extra increment of linenum snuck in as part of the conversion to getline(). OK djm@ markus@
2018-06-26Do not take address of a member of a NULL pointer. GitHub issue 1382Nicholas Marriott
from Kamil Rytarowski.
2018-06-26Allow to read the password from a file with -yReyk Floeter
Pointed out by Tim Chase OK rob@ gsoares@ jmc@
2018-06-26Initialize the slot->skip counter in slot_start() instead ofAlexandre Ratchov
slot_attach(). Now this makes no difference, because slot_attach() is always called right after slot_start(). However this will allow us to call slot_{attach,detach}() routines, while preserving the state of the slot.
2018-06-13Import ldap(1), a simple ldap search client.Reyk Floeter
We have an ldapd(8) server and ypldap in base, so it makes sense to have a simple LDAP client without depending on the OpenLDAP package. This tool can be used in an ssh(1) AuthorizedKeysCommand script. With feedback from many including millert@ schwarze@ gilles@ dlg@ jsing@ OK deraadt@
2018-06-26Remove redundant slot->tstate variable.Alexandre Ratchov
It was used to determine whether the slot obeys MMC and is ready to start. The stop->opt->mmc flag indicates if it obeys MMC and the slot->pstate == SLOT_READY indicates if it's ready. So slot->tstate can be safely removed.
2018-06-26Remove useless check if s->ops == NULL from slot_setvol().Alexandre Ratchov
2018-06-26No need to initialize slot->mix.weight as it's recalculated andAlexandre Ratchov
overwritten in dev_mix_adjvol(), which is always called.
2018-06-26Move slot-related debug printfs from sock_hello() to slot_new().Alexandre Ratchov
2018-06-26Convert all the slot_xxx() routines to use the number of channelsAlexandre Ratchov
instead of the maximum channel number. This way the code is simpler. No behaviour change.
2018-06-26Remove {mix,sub}.slot_cmin fields from the slot structure, as the sameAlexandre Ratchov
information is already available in the opt structure.
2018-06-26Remove dev_{cmin,cmax} from the slot structure as the same informationAlexandre Ratchov
is available in the opt structure.
2018-06-26Remove slot->dup which is a copy of opt->dup, and just use the latterAlexandre Ratchov
everywhere.
2018-06-26Remove slot->maxweight, because it's a copy of opt->maxweight. JustAlexandre Ratchov
use the latter everywhere.
2018-06-26Don't set slot's {slot,dev}_cmin parameters in slot_setpar() routine,Alexandre Ratchov
as their value doesn't change once the slot is initialized.
2018-06-26Initialize slot with parameters from the opt struct.Alexandre Ratchov
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-03 08:35:54 +0000