| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2019-12-17 | Use the message that has already been built rather than the va_list. | Nicholas Marriott | |
| 2019-12-16 | Delete tests for P_THREAD that predate the existence of | Philip Guenther | |
| KERN_PROC_SHOW_THREADS and have been rendered superfluous by it. Similarly, some P_SYSTEM tests can be deleted or pushed to the kernel by using KERN_PROC_ALL instead of KERN_PROC_KTHREAD. ok visa@ mpi@ | |||
| 2019-12-16 | If /dev/fd/X is a symlink and realpath() expands symlinks, /dev/fd/X | Nicholas Marriott | |
| ends up pointing to the wrong place before it is passed to the client. The path is only used internally so there is no real need for realpath(), remove it and move the get_path function to file.c where all the callers are. | |||
| 2019-12-16 | Need to include message size in the maximum buffer calculation. | Nicholas Marriott | |
| 2019-12-16 | Instead of using large buffers in imsgs, add the data or path onto the end. | Nicholas Marriott | |
| 2019-12-16 | strdup may return NULL if memory allocation fails. Use the safer xstrdup | tobhe | |
| which fatals on allocation failures. ok markus@ | |||
| 2019-12-16 | sort sk-* methods behind their plain key methods cousins for now | Damien Miller | |
| 2019-12-15 | don't treat HostKeyAgent=none as a path either; avoids spurious | Damien Miller | |
| warnings from the cfgparse regress test | |||
| 2019-12-15 | do not attempt to find an absolute path for sshd_config | Damien Miller | |
| SecurityKeyProvider=internal - unbreaks cfgparse regress test | |||
| 2019-12-15 | allow ssh-keyscan to find security key hostkeys | Damien Miller | |
| 2019-12-15 | allow security keys to act as host keys as well as user keys. | Damien Miller | |
| Previously we didn't do this because we didn't want to expose the attack surface presented by USB and FIDO protocol handling, but now that this is insulated behind ssh-sk-helper there is less risk. ok markus@ | |||
| 2019-12-13 | actually commit the ssh-sk-helper client code; ok markus | Damien Miller | |
| 2019-12-13 | perform security key enrollment via ssh-sk-helper too. This means | Damien Miller | |
| that ssh-keygen no longer needs to link against ssh-sk-helper, and only ssh-sk-helper needs libfido2 and /dev/uhid* access; feedback & ok markus@ | |||
| 2019-12-13 | allow sshbuf_put_stringb(buf, NULL); ok markus@ | Damien Miller | |
| 2019-12-13 | use ssh-sk-helper for all security key signing operations | Damien Miller | |
| This extracts and refactors the client interface for ssh-sk-helper from ssh-agent and generalises it for use by the other programs. This means that most OpenSSH tools no longer need to link against libfido2 or directly interact with /dev/uhid* requested by, feedback and ok markus@ | |||
| 2019-12-13 | Show UTF-8 in choose-buffer mode. From KOIE Hidetaka. | Nicholas Marriott | |
| 2019-12-13 | Need to check in the error callback also. | Nicholas Marriott | |
| 2019-12-13 | Do not spin waiting for exit, instead check in the write callback. | Nicholas Marriott | |
| 2019-12-12 | Do not crash in tree modes if the pane is only 1 in width, reported by | Nicholas Marriott | |
| KOIE Hidetaka in GitHub issue 2015. | |||
| 2019-12-12 | Add function to the right file. | Nicholas Marriott | |
| 2019-12-12 | Change source-file to use new file code which allows it to read from | Nicholas Marriott | |
| stdin. | |||
| 2019-12-12 | Do not check if client is dead if it is NULL. | Nicholas Marriott | |
| 2019-12-12 | Rewrite the code for reading and writing files. Now, if the client is | Nicholas Marriott | |
| not attached, the server process asks it to open the file, similar to how works for stdin, stdout, stderr. This makes special files like /dev/fd/X work (used by some shells). stdin, stdout and stderr and control mode are now just special cases of the same mechanism. This will also make it easier to use for other commands that read files such as source-file. | |||
| 2019-12-11 | add a note about the 'extensions' field in the signed object | Damien Miller | |
| 2019-12-11 | Merge existing decls and decls introduced in rev 1.10 | Jeremie Courreges-Anglas | |
| Also: - sort declarations in the same order as definitions in pch.c - delete an extra pfetch() declaration ok tobias@ | |||
| 2019-12-11 | Tweak previous to check the wrapped flag and stop if not set. | Nicholas Marriott | |
| 2019-12-11 | Allow search across wrapped lines and fix some inconsistencies in how th | Nicholas Marriott | |
| position is represented, GitHub issue 2014 from Anindya Mukherjee. | |||
| 2019-12-11 | Do not set cursor colour to default unless it has been changed, GitHub | Nicholas Marriott | |
| issue 2013. | |||
| 2019-12-10 | some more corrections for documentation problems spotted by Ron Frederick | Damien Miller | |
| document certifiate private key format correct flags type for sk-ssh-ed25519@openssh.com keys | |||
| 2019-12-10 | loading security keys into ssh-agent used the extension constraint | Damien Miller | |
| "sk-provider@openssh.com", not "sk@openssh.com"; spotted by Ron Frederick | |||
| 2019-12-10 | add security key types to list of keys allowed to act as CAs; | Damien Miller | |
| spotted by Ron Frederick | |||
| 2019-12-10 | when acting as a CA and using a security key as the CA key, remind the | Damien Miller | |
| user to touch they key to authorise the signature. | |||
| 2019-12-10 | chop some unnecessary and confusing verbiage from the security key | Damien Miller | |
| protocol description; feedback from Ron Frederick | |||
| 2019-12-10 | Make TMUX_CONF a list of files and expand leading $FOO or ~. | Nicholas Marriott | |
| 2019-12-10 | In HTML, display straight quotes, not curly quotes, for Qq/Qo/Qc macros. | Anthony J. Bentley | |
| This is the intended behavior and already the case in terminal output. Incorrect output noticed by Eldred Habert. ok schwarze@ | |||
| 2019-12-09 | Reinstate ftp_printf to log sent HTTP headers | Jeremie Courreges-Anglas | |
| On SMALL builds ftp_printf is just a #define to avoid a size increase. ok millert@ | |||
| 2019-12-09 | Move RCS Id to the top of the file | Jeremie Courreges-Anglas | |
| 2019-12-09 | tweak -z mode verification to save the header and actually output it, | Marc Espie | |
| so that signify -zV >saved.tgz keeps the signature for later checks. Uses slightly more memory, but simplifies some processes. okay tedu@ | |||
| 2019-12-09 | With NOSSL let url_get() print a nice error message for https urls | Jeremie Courreges-Anglas | |
| Input from deraadt@ | |||
| 2019-12-08 | For chunked transfers always restore the SIGINFO handler (not just on error) | Jeremie Courreges-Anglas | |
| Overlooked when shuffling the HTTP/1.1 code. | |||
| 2019-12-08 | cosmetic changes to conform to style of other existing OpenBSD code. | Marc Espie | |
| Okay jasper@ | |||
| 2019-12-08 | Make sure packet destination address matches interface address, | Alexandr Nedvedicky | |
| where such packet is bound to. This check is enforced if and only IP forwarding is disabled. Change discussed with bluhm@, claudio@, deraadt@, markus@, tobhe@ OK bluhm@, claudio@, tobhe@ | |||
| 2019-12-07 | In -L (loop) mode, reset the login class each time through the loop. | Todd C. Miller | |
| Otherwise, it is possible to log in with another user's login class. Fixes CVE-2019-19519. OK deraadt@ markus@ | |||
| 2019-12-06 | replace links to uvm(9) to uvm_init(9); ok mpi | Jason McIntyre | |
| 2019-12-06 | fix setting of $SSH_ASKPASS_PROMPT - it shouldn't be set when asking | Damien Miller | |
| passphrases, only when confirming the use of a key (i.e. for ssh-agent keys added with "ssh-add -c keyfile") | |||
| 2019-12-06 | bring the __func__ | Damien Miller | |
| 2019-12-05 | Fix #ifndef NOSSL vs SMALL inconsistencies | Jeremie Courreges-Anglas | |
| from Hiltjo Posthuma | |||
| 2019-12-04 | libc's authentication privsep layer performed insufficient username | Theo de Raadt | |
| validation. Repair work mostly by markus and millert, first of all solving the primary problem, then adding some additional validation points. And then futher validation in login and su. This will be 6.5/021_libcauth.patch.sig and 6.6/010_libcauth.patch.sig Reported by Qualys | |||
| 2019-12-03 | Style nits in function arguments. | Nicholas Marriott | |
| 2019-12-03 | With -R and an implicit ".", don't prepend file paths with "./" | Jeremie Courreges-Anglas | |
| Looks nicer and matches the output of GNU grep. ok millert@ deraadt@ visa@ miod@ | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |