summaryrefslogtreecommitdiff
path: root/other/ssharp/ChangeLog
diff options
context:
space:
mode:
Diffstat (limited to 'other/ssharp/ChangeLog')
-rw-r--r--other/ssharp/ChangeLog5288
1 files changed, 5288 insertions, 0 deletions
diff --git a/other/ssharp/ChangeLog b/other/ssharp/ChangeLog
new file mode 100644
index 0000000..ccc3980
--- /dev/null
+++ b/other/ssharp/ChangeLog
@@ -0,0 +1,5288 @@
1Stealth:
2
3- version 0.4
4 Now MiM also works the ssh-dss<->ssh-rsa way. New hack!
5
6- version 0.33
7 tagged it to ensure it works. I tested it and it worked ;-)
8 Some minor code cleanups.
9
10- version 0.31 works with passwd-MiM.
11 c/r MiM wont work with protocol translation.
12 versions > 0.31 are experimental.
13
1420010429
15 - (bal) Updated INSTALL. PCRE moved to a new place.
16 - (djm) Add Theo Schlossnagle's <jesus@omniti.com> SecurID patch to contrib/
17 - (djm) Release 2.9p1
18
1920010427
20 - (bal) Fixed uidswap.c so it should work on non-posix complient systems.
21 patch based on 2.5.2 version by djm.
22 - (bal) Build manpages and config files once unless changed. Patch by
23 Carson Gaspar <carson@taltos.org>
24 - (bal) arpa/nameser.h does not exist on Cygwin. Patch by Corinna
25 Vinschen <vinschen@redhat.com>
26 - (bal) Add /etc/sysconfig/sshd support to redhat's sshd.init. Patch by
27 Pekka Savola <pekkas@netcore.fi>
28 - (bal) Cygwin lacks setgroups() API. Patch by Corinna Vinschen
29 <vinschen@redhat.com>
30 - (bal) version.h synced, RPM specs updated for 2.9
31 - (tim) update contrib/caldera files with what Caldera is using.
32 <sps@caldera.de>
33
3420010425
35 - OpenBSD CVS Sync
36 - markus@cvs.openbsd.org 2001/04/23 21:57:07
37 [ssh-keygen.1 ssh-keygen.c]
38 allow public key for -e, too
39 - markus@cvs.openbsd.org 2001/04/23 22:14:13
40 [ssh-keygen.c]
41 remove debug
42 - (bal) Whitespace resync w/ OpenBSD for uidswap.c
43 - (djm) Add new server configuration directive 'PAMAuthenticationViaKbdInt'
44 (default: off), implies KbdInteractiveAuthentication. Suggestion from
45 markus@
46 - (djm) Include crypt.h if available in auth-passwd.c
47 - tim@mindrot.org 2001/04/25 21:38:01 [configure.in]
48 man page detection fixes for SCO
49
5020010424
51 - OpenBSD CVS Sync
52 - markus@cvs.openbsd.org 2001/04/22 23:58:36
53 [ssh-keygen.1 ssh.1 sshd.8]
54 document hostbased and other cleanup
55 - (stevesk) start_pam() doesn't use DNS now for sshd -u0.
56 - (stevesk) auth-pam.c: use PERMIT_NO_PASSWD
57 - (bal) sys/queue.h is bogus for NCR platform. Patch by Daniel Carroll
58 <dan@mesastate.edu>
59 - (bal) Fixed contrib/postinstall.in. Patch by wsanders@wsanders.net
60
6120010422
62 - OpenBSD CVS Sync
63 - markus@cvs.openbsd.org 2001/04/20 16:32:22
64 [uidswap.c]
65 set non-privileged gid before uid; tholo@ and deraadt@
66 - mouring@cvs.openbsd.org 2001/04/21 00:55:57
67 [sftp.1]
68 Spelling
69 - djm@cvs.openbsd.org 2001/04/22 08:13:30
70 [ssh.1]
71 typos spotted by stevesk@; ok deraadt@
72 - markus@cvs.openbsd.org 2001/04/22 12:34:05
73 [scp.c]
74 scp > 2GB; niles@scyld.com; ok deraadt@, djm@
75 - markus@cvs.openbsd.org 2001/04/22 13:25:37
76 [ssh-keygen.1 ssh-keygen.c]
77 rename arguments -x -> -e (export key), -X -> -i (import key)
78 xref draft-ietf-secsh-publickeyfile-01.txt
79 - markus@cvs.openbsd.org 2001/04/22 13:32:27
80 [sftp-server.8 sftp.1 ssh.1 sshd.8]
81 xref draft-ietf-secsh-*
82 - markus@cvs.openbsd.org 2001/04/22 13:41:02
83 [ssh-keygen.1 ssh-keygen.c]
84 style, noted by stevesk; sort flags in usage
85
8620010421
87 - OpenBSD CVS Sync
88 - djm@cvs.openbsd.org 2001/04/20 07:17:51
89 [clientloop.c ssh.1]
90 Split out and improve escape character documentation, mention ~R in
91 ~? help text; ok markus@
92 - Update RPM spec files for CVS version.h
93 - (stevesk) set the default PAM service name to __progname instead
94 of the hard-coded value "sshd"; from Mark D. Roth <roth@feep.net>
95 - (stevesk) document PAM service name change in INSTALL
96 - tim@mindrot.org 2001/04/21 14:25:57 [Makefile.in configure.in]
97 fix perl test, fix nroff test, fix Makefile to build outside source tree
98
9920010420
100 - OpenBSD CVS Sync
101 - ian@cvs.openbsd.org 2001/04/18 16:21:05
102 [ssh-keyscan.1]
103 Fix typo reported in PR/1779
104 - markus@cvs.openbsd.org 2001/04/18 21:57:42
105 [readpass.c ssh-add.c]
106 call askpass from ssh, too, based on work by roth@feep.net, ok deraadt
107 - markus@cvs.openbsd.org 2001/04/18 22:03:45
108 [auth2.c sshconnect2.c]
109 use FDQN with trailing dot in the hostbased auth packets, ok deraadt@
110 - markus@cvs.openbsd.org 2001/04/18 22:48:26
111 [auth2.c]
112 no longer const
113 - markus@cvs.openbsd.org 2001/04/18 23:43:26
114 [auth2.c compat.c sshconnect2.c]
115 more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works now
116 (however the 2.1.0 server seems to work only if debug is enabled...)
117 - markus@cvs.openbsd.org 2001/04/18 23:44:51
118 [authfile.c]
119 error->debug; noted by fries@
120 - markus@cvs.openbsd.org 2001/04/19 00:05:11
121 [auth2.c]
122 use local variable, no function call needed.
123 (btw, hostbased works now with ssh.com >= 2.0.13)
124 - (bal) Put scp-common.h back into scp.c (it exists in the upstream
125 tree) pointed out by Tom Holroyd <tomh@po.crl.go.jp>
126
12720010418
128 - OpenBSD CVS Sync
129 - markus@cvs.openbsd.org 2001/04/17 19:34:25
130 [session.c]
131 move auth_approval to do_authenticated().
132 do_child(): nuke hostkeys from memory
133 don't source .ssh/rc for subsystems.
134 - markus@cvs.openbsd.org 2001/04/18 14:15:00
135 [canohost.c]
136 debug->debug3
137 - (bal) renabled 'catman-do:' and fixed it. So now catman pages should
138 be working again.
139 - (bal) Makfile day... Cleaned up multiple mantype support (Patch by
140 Mark D. Roth <roth+openssh@feep.net>), and fixed PIDDIR support.
141
14220010417
143 - (bal) Add perl5 check for HP/UX, Removed GNUness from Makefile.in
144 and temporary commented out 'catman-do:' since it is broken. Patches
145 for the first two by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
146 - OpenBSD CVS Sync
147 - deraadt@cvs.openbsd.org 2001/04/16 08:26:04
148 [key.c]
149 better safe than sorry in later mods; yongari@kt-is.co.kr
150 - markus@cvs.openbsd.org 2001/04/17 08:14:01
151 [sshconnect1.c]
152 check for key!=NULL, thanks to costa
153 - markus@cvs.openbsd.org 2001/04/17 09:52:48
154 [clientloop.c]
155 handle EINTR/EAGAIN on read; ok deraadt@
156 - markus@cvs.openbsd.org 2001/04/17 10:53:26
157 [key.c key.h readconf.c readconf.h ssh.1 sshconnect2.c]
158 add HostKeyAlgorithms; based on patch from res@shore.net; ok provos@
159 - markus@cvs.openbsd.org 2001/04/17 12:55:04
160 [channels.c ssh.c]
161 undo socks5 and https support since they are not really used and
162 only bloat ssh. remove -D from usage(), since '-D' is experimental.
163
16420010416
165 - OpenBSD CVS Sync
166 - stevesk@cvs.openbsd.org 2001/04/15 01:35:22
167 [ttymodes.c]
168 fix comments
169 - markus@cvs.openbsd.org 2001/04/15 08:43:47
170 [dh.c sftp-glob.c sftp-glob.h sftp-int.c sshconnect2.c sshd.c]
171 some unused variable and typos; from tomh@po.crl.go.jp
172 - markus@cvs.openbsd.org 2001/04/15 16:58:03
173 [authfile.c ssh-keygen.c sshd.c]
174 don't use errno for key_{load,save}_private; discussion w/ solar@openwall
175 - markus@cvs.openbsd.org 2001/04/15 17:16:00
176 [clientloop.c]
177 set stdin/out/err to nonblocking in SSH proto 1, too. suggested by ho@
178 should fix some of the blocking problems for rsync over SSH-1
179 - stevesk@cvs.openbsd.org 2001/04/15 19:41:21
180 [sshd.8]
181 some ClientAlive cleanup; ok markus@
182 - stevesk@cvs.openbsd.org 2001/04/15 21:28:35
183 [readconf.c servconf.c]
184 use fatal() or error() vs. fprintf(); ok markus@
185 - (djm) Convert mandoc manpages to man automatically. Patch from Mark D.
186 Roth <roth+openssh@feep.net>
187 - (bal) CVS ID fix up and slight manpage fix from OpenBSD tree.
188 - (djm) OpenBSD CVS Sync
189 - mouring@cvs.openbsd.org 2001/04/16 02:31:44
190 [scp.c sftp.c]
191 IPv6 support for sftp (which I bungled in my last patch) which is
192 borrowed from scp.c. Thanks to Markus@ for pointing it out.
193 - deraadt@cvs.openbsd.org 2001/04/16 08:05:34
194 [xmalloc.c]
195 xrealloc dealing with ptr == nULL; mouring
196 - djm@cvs.openbsd.org 2001/04/16 08:19:31
197 [session.c]
198 Split motd and hushlogin checks into seperate functions, helps for
199 portable. From Chris Adams <cmadams@hiwaay.net>; ok markus@
200 - Fix OSF SIA support displaying too much information for quiet
201 logins and logins where access was denied by SIA. Patch from Chris Adams
202 <cmadams@hiwaay.net>
203
20420010415
205 - OpenBSD CVS Sync
206 - deraadt@cvs.openbsd.org 2001/04/14 04:31:01
207 [ssh-add.c]
208 do not double free
209 - markus@cvs.openbsd.org 2001/04/14 16:17:14
210 [channels.c]
211 remove some channels that are not appropriate for keepalive.
212 - markus@cvs.openbsd.org 2001/04/14 16:27:57
213 [ssh-add.c]
214 use clear_pass instead of xfree()
215 - stevesk@cvs.openbsd.org 2001/04/14 16:33:20
216 [clientloop.c packet.h session.c ssh.c ttymodes.c ttymodes.h]
217 protocol 2 tty modes support; ok markus@
218 - stevesk@cvs.openbsd.org 2001/04/14 17:04:42
219 [scp.c]
220 'T' handling rcp/scp sync; ok markus@
221 - Missed sshtty.[ch] in Sync.
222
22320010414
224 - Sync with OpenBSD glob.c, strlcat.c and vis.c changes
225 - Cygwin sftp/sftp-server binary mode patch from Corinna Vinschen
226 <vinschen@redhat.com>
227 - OpenBSD CVS Sync
228 - beck@cvs.openbsd.org 2001/04/13 22:46:54
229 [channels.c channels.h servconf.c servconf.h serverloop.c sshd.8]
230 Add options ClientAliveInterval and ClientAliveCountMax to sshd.
231 This gives the ability to do a "keepalive" via the encrypted channel
232 which can't be spoofed (unlike TCP keepalives). Useful for when you want
233 to use ssh connections to authenticate people for something, and know
234 relatively quickly when they are no longer authenticated. Disabled
235 by default (of course). ok markus@
236
23720010413
238 - OpenBSD CVS Sync
239 - markus@cvs.openbsd.org 2001/04/12 14:29:09
240 [ssh.c]
241 show debug output during option processing, report from
242 pekkas@netcore.fi
243 - markus@cvs.openbsd.org 2001/04/12 19:15:26
244 [auth-rhosts.c auth.h auth2.c buffer.c canohost.c canohost.h
245 compat.c compat.h hostfile.c pathnames.h readconf.c readconf.h
246 servconf.c servconf.h ssh.c sshconnect.c sshconnect.h sshconnect1.c
247 sshconnect2.c sshd_config]
248 implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
249 similar to RhostRSAAuthentication unless you enable (the experimental)
250 HostbasedUsesNameFromPacketOnly option. please test. :)
251 - markus@cvs.openbsd.org 2001/04/12 19:39:27
252 [readconf.c]
253 typo
254 - stevesk@cvs.openbsd.org 2001/04/12 20:09:38
255 [misc.c misc.h readconf.c servconf.c ssh.c sshd.c]
256 robust port validation; ok markus@ jakob@
257 - mouring@cvs.openbsd.org 2001/04/12 23:17:54
258 [sftp-int.c sftp-int.h sftp.1 sftp.c]
259 Add support for:
260 sftp [user@]host[:file [file]] - Fetch remote file(s)
261 sftp [user@]host[:dir[/]] - Start in remote dir/
262 OK deraadt@
263 - stevesk@cvs.openbsd.org 2001/04/13 01:26:17
264 [ssh.c]
265 missing \n in error message
266 - (bal) Added openbsd-compat/inet_ntop.[ch] since HP/UX (and others)
267 lack it.
268
26920010412
270 - OpenBSD CVS Sync
271 - markus@cvs.openbsd.org 2001/04/10 07:46:58
272 [channels.c]
273 cleanup socks4 handling
274 - itojun@cvs.openbsd.org 2001/04/10 09:13:22
275 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
276 document id_rsa{.pub,}. markus ok
277 - markus@cvs.openbsd.org 2001/04/10 12:15:23
278 [channels.c]
279 debug cleanup
280 - djm@cvs.openbsd.org 2001/04/11 07:06:22
281 [sftp-int.c]
282 'mget' and 'mput' aliases; ok markus@
283 - markus@cvs.openbsd.org 2001/04/11 10:59:01
284 [ssh.c]
285 use strtol() for ports, thanks jakob@
286 - markus@cvs.openbsd.org 2001/04/11 13:56:13
287 [channels.c ssh.c]
288 https-connect and socks5 support. i feel so bad.
289 - lebel@cvs.openbsd.org 2001/04/11 16:25:30
290 [sshd.8 sshd.c]
291 implement the -e option into sshd:
292 -e When this option is specified, sshd will send the output to the
293 standard error instead of the system log.
294 markus@ OK.
295
29620010410
297 - OpenBSD CVS Sync
298 - deraadt@cvs.openbsd.org 2001/04/08 20:52:55
299 [sftp.c]
300 do not modify an actual argv[] entry
301 - stevesk@cvs.openbsd.org 2001/04/08 23:28:27
302 [sshd.8]
303 spelling
304 - stevesk@cvs.openbsd.org 2001/04/09 00:42:05
305 [sftp.1]
306 spelling
307 - markus@cvs.openbsd.org 2001/04/09 15:12:23
308 [ssh-add.c]
309 passphrase caching: ssh-add tries last passphrase, clears passphrase if
310 not successful and after last try.
311 based on discussions with espie@, jakob@, ... and code from jakob@ and
312 wolfgang@wsrcc.com
313 - markus@cvs.openbsd.org 2001/04/09 15:19:49
314 [ssh-add.1]
315 ssh-add retries the last passphrase...
316 - stevesk@cvs.openbsd.org 2001/04/09 18:00:15
317 [sshd.8]
318 ListenAddress mandoc from aaron@
319
32020010409
321 - (stevesk) use setresgid() for setegid() if needed
322 - (stevesk) configure.in: typo
323 - OpenBSD CVS Sync
324 - stevesk@cvs.openbsd.org 2001/04/08 16:01:36
325 [sshd.8]
326 document ListenAddress addr:port
327 - markus@cvs.openbsd.org 2001/04/08 13:03:00
328 [ssh-add.c]
329 init pointers with NULL, thanks to danimal@danimal.org
330 - markus@cvs.openbsd.org 2001/04/08 11:27:33
331 [clientloop.c]
332 leave_raw_mode if ssh2 "session" is closed
333 - markus@cvs.openbsd.org 2001/04/06 21:00:17
334 [auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth2.c channels.c session.c
335 ssh.c sshconnect.c sshconnect.h uidswap.c uidswap.h]
336 do gid/groups-swap in addition to uid-swap, should help if /home/group
337 is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks
338 to olar@openwall.com is comments. we had many requests for this.
339 - markus@cvs.openbsd.org 2001/04/07 08:55:18
340 [buffer.c channels.c channels.h readconf.c ssh.c]
341 allow the ssh client act as a SOCKS4 proxy (dynamic local
342 portforwarding). work by Dan Kaminsky <dankamin@cisco.com> and me.
343 thanks to Dan for this great patch: use 'ssh -D 1080 host' and make
344 netscape use localhost:1080 as a socks proxy.
345 - markus@cvs.openbsd.org 2001/04/08 11:24:33
346 [uidswap.c]
347 KNF
348
34920010408
350 - OpenBSD CVS Sync
351 - stevesk@cvs.openbsd.org 2001/04/06 22:12:47
352 [hostfile.c]
353 unused; typo in comment
354 - stevesk@cvs.openbsd.org 2001/04/06 22:25:25
355 [servconf.c]
356 in addition to:
357 ListenAddress host|ipv4_addr|ipv6_addr
358 permit:
359 ListenAddress [host|ipv4_addr|ipv6_addr]:port
360 ListenAddress host|ipv4_addr:port
361 sshd.8 updates coming. ok markus@
362
36320010407
364 - (bal) CVS ID Resync of version.h
365 - OpenBSD CVS Sync
366 - markus@cvs.openbsd.org 2001/04/05 23:39:20
367 [serverloop.c]
368 keep the ssh session even if there is no active channel.
369 this is more in line with the protocol spec and makes
370 ssh -N -L 1234:server:110 host
371 more useful.
372 based on discussion with <mats@mindbright.se> long time ago
373 and recent mail from <res@shore.net>
374 - deraadt@cvs.openbsd.org 2001/04/06 16:46:59
375 [scp.c]
376 remove trailing / from source paths; fixes pr#1756
377
37820010406
379 - (stevesk) logintest.c: fix for systems without __progname
380 - (stevesk) Makefile.in: log.o is in libssh.a
381 - OpenBSD CVS Sync
382 - markus@cvs.openbsd.org 2001/04/05 10:00:06
383 [compat.c]
384 2.3.x does old GEX, too; report jakob@
385 - markus@cvs.openbsd.org 2001/04/05 10:39:03
386 [compress.c compress.h packet.c]
387 reset compress state per direction when rekeying.
388 - markus@cvs.openbsd.org 2001/04/05 10:39:48
389 [version.h]
390 temporary version 2.5.4 (supports rekeying).
391 this is not an official release.
392 - markus@cvs.openbsd.org 2001/04/05 10:42:57
393 [auth-chall.c authfd.c channels.c clientloop.c kex.c kexgex.c key.c
394 mac.c packet.c serverloop.c sftp-client.c sftp-client.h sftp-glob.c
395 sftp-glob.h sftp-int.c sftp-server.c sftp.c ssh-keygen.c sshconnect.c
396 sshconnect2.c sshd.c]
397 fix whitespace: unexpand + trailing spaces.
398 - markus@cvs.openbsd.org 2001/04/05 11:09:17
399 [clientloop.c compat.c compat.h]
400 add SSH_BUG_NOREKEY and detect broken (=all old) openssh versions.
401 - markus@cvs.openbsd.org 2001/04/05 15:45:43
402 [ssh.1]
403 ssh defaults to protocol v2; from quisar@quisar.ambre.net
404 - stevesk@cvs.openbsd.org 2001/04/05 15:48:18
405 [canohost.c canohost.h session.c]
406 move get_remote_name_or_ip() to canohost.[ch]; for portable. ok markus@
407 - markus@cvs.openbsd.org 2001/04/05 20:01:10
408 [clientloop.c]
409 for ~R print message if server does not support rekeying. (and fix ~R).
410 - markus@cvs.openbsd.org 2001/04/05 21:02:46
411 [buffer.c]
412 better error message
413 - markus@cvs.openbsd.org 2001/04/05 21:05:24
414 [clientloop.c ssh.c]
415 don't request a session for 'ssh -N', pointed out slade@shore.net
416
41720010405
418 - OpenBSD CVS Sync
419 - markus@cvs.openbsd.org 2001/04/04 09:48:35
420 [kex.c kex.h kexdh.c kexgex.c packet.c sshconnect2.c sshd.c]
421 don't sent multiple kexinit-requests.
422 send newkeys, block while waiting for newkeys.
423 fix comments.
424 - markus@cvs.openbsd.org 2001/04/04 14:34:58
425 [clientloop.c kex.c kex.h serverloop.c sshconnect2.c sshd.c]
426 enable server side rekeying + some rekey related clientup.
427 todo: we should not send any non-KEX messages after we send KEXINIT
428 - markus@cvs.openbsd.org 2001/04/04 15:50:55
429 [compat.c]
430 f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov
431 - markus@cvs.openbsd.org 2001/04/04 20:25:38
432 [channels.c channels.h clientloop.c kex.c kex.h serverloop.c
433 sshconnect2.c sshd.c]
434 more robust rekeying
435 don't send channel data after rekeying is started.
436 - markus@cvs.openbsd.org 2001/04/04 20:32:56
437 [auth2.c]
438 we don't care about missing bannerfiles; from tsoome@ut.ee, ok deraadt@
439 - markus@cvs.openbsd.org 2001/04/04 22:04:35
440 [kex.c kexgex.c serverloop.c]
441 parse full kexinit packet.
442 make server-side more robust, too.
443 - markus@cvs.openbsd.org 2001/04/04 23:09:18
444 [dh.c kex.c packet.c]
445 clear+free keys,iv for rekeying.
446 + fix DH mem leaks. ok niels@
447 - (stevesk) don't use vhangup() if defined(HAVE_DEV_PTMX); also removes
448 BROKEN_VHANGUP
449
45020010404
451 - OpenBSD CVS Sync
452 - deraadt@cvs.openbsd.org 2001/04/02 17:32:23
453 [ssh-agent.1]
454 grammar; slade@shore.net
455 - stevesk@cvs.openbsd.org 2001/04/03 13:56:11
456 [sftp-glob.c ssh-agent.c ssh-keygen.c]
457 free() -> xfree()
458 - markus@cvs.openbsd.org 2001/04/03 19:53:29
459 [dh.c dh.h kex.c kex.h sshconnect2.c sshd.c]
460 move kex to kex*.c, used dispatch_set() callbacks for kex. should
461 make rekeying easier.
462 - todd@cvs.openbsd.org 2001/04/03 21:19:38
463 [ssh_config]
464 id_rsa1/2 -> id_rsa; ok markus@
465 - markus@cvs.openbsd.org 2001/04/03 23:32:12
466 [kex.c kex.h packet.c sshconnect2.c sshd.c]
467 undo parts of recent my changes: main part of keyexchange does not
468 need dispatch-callbacks, since application data is delayed until
469 the keyexchange completes (if i understand the drafts correctly).
470 add some infrastructure for re-keying.
471 - markus@cvs.openbsd.org 2001/04/04 00:06:54
472 [clientloop.c sshconnect2.c]
473 enable client rekeying
474 (1) force rekeying with ~R, or
475 (2) if the server requests rekeying.
476 works against ssh-2.0.12/2.0.13/2.1.0/2.2.0/2.3.0/2.3.1/2.4.0
477 - (bal) Oops.. Missed including kexdh.c and kexgex.c in OpenBSD sync.
478
47920010403
480 - OpenBSD CVS Sync
481 - stevesk@cvs.openbsd.org 2001/04/02 14:15:31
482 [sshd.8]
483 typo; ok markus@
484 - stevesk@cvs.openbsd.org 2001/04/02 14:20:23
485 [readconf.c servconf.c]
486 correct comment; ok markus@
487 - (stevesk) nchan.c: remove ostate checks and add EINVAL to
488 shutdown(SHUT_RD) error() bypass for HP-UX.
489
49020010402
491 - (stevesk) log.c openbsd sync; missing newlines
492 - (stevesk) sshpty.h openbsd sync; PTY_H -> SSHPTY_H
493
49420010330
495 - (djm) Another openbsd-compat/glob.c sync
496 - (djm) OpenBSD CVS Sync
497 - provos@cvs.openbsd.org 2001/03/28 21:59:41
498 [kex.c kex.h sshconnect2.c sshd.c]
499 forgot to include min and max params in hash, okay markus@
500 - provos@cvs.openbsd.org 2001/03/28 22:04:57
501 [dh.c]
502 more sanity checking on primes file
503 - markus@cvs.openbsd.org 2001/03/28 22:43:31
504 [auth.h auth2.c auth2-chall.c]
505 check auth_root_allowed for kbd-int auth, too.
506 - provos@cvs.openbsd.org 2001/03/29 14:24:59
507 [sshconnect2.c]
508 use recommended defaults
509 - stevesk@cvs.openbsd.org 2001/03/29 21:06:21
510 [sshconnect2.c sshd.c]
511 need to set both STOC and CTOS for SSH_BUG_BIGENDIANAES; ok markus@
512 - markus@cvs.openbsd.org 2001/03/29 21:17:40
513 [dh.c dh.h kex.c kex.h]
514 prepare for rekeying: move DH code to dh.c
515 - djm@cvs.openbsd.org 2001/03/29 23:42:01
516 [sshd.c]
517 Protocol 1 key regeneration log => verbose, some KNF; ok markus@
518
51920010329
520 - OpenBSD CVS Sync
521 - stevesk@cvs.openbsd.org 2001/03/26 15:47:59
522 [ssh.1]
523 document more defaults; misc. cleanup. ok markus@
524 - markus@cvs.openbsd.org 2001/03/26 23:12:42
525 [authfile.c]
526 KNF
527 - markus@cvs.openbsd.org 2001/03/26 23:23:24
528 [rsa.c rsa.h ssh-agent.c ssh-keygen.c]
529 try to read private f-secure ssh v2 rsa keys.
530 - markus@cvs.openbsd.org 2001/03/27 10:34:08
531 [ssh-rsa.c sshd.c]
532 use EVP_get_digestbynid, reorder some calls and fix missing free.
533 - markus@cvs.openbsd.org 2001/03/27 10:57:00
534 [compat.c compat.h ssh-rsa.c]
535 some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5
536 signatures in SSH protocol 2, ok djm@
537 - provos@cvs.openbsd.org 2001/03/27 17:46:50
538 [compat.c compat.h dh.c dh.h ssh2.h sshconnect2.c sshd.c version.h]
539 make dh group exchange more flexible, allow min and max group size,
540 okay markus@, deraadt@
541 - stevesk@cvs.openbsd.org 2001/03/28 19:56:23
542 [scp.c]
543 start to sync scp closer to rcp; ok markus@
544 - stevesk@cvs.openbsd.org 2001/03/28 20:04:38
545 [scp.c]
546 usage more like rcp and add missing -B to usage; ok markus@
547 - markus@cvs.openbsd.org 2001/03/28 20:50:45
548 [sshd.c]
549 call refuse() before close(); from olemx@ans.pl
550
55120010328
552 - (djm) Reorder tests and library inclusion for Krb4/AFS to try to
553 resolve linking conflicts with libcrypto. Report and suggested fix
554 from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
555 - (djm) Work around Solaris' broken struct dirent. Diagnosis and suggested
556 fix from Philippe Levan <levan@epix.net>
557 - (djm) Rework krbIV tests to get us closer to building on Redhat. Still
558 doesn't work because of conflicts between krbIV's and OpenSSL's des.h
559 - (djm) Sync openbsd-compat/glob.c
560
56120010327
562 - Attempt sync with sshlogin.c w/ OpenBSD (mainly CVS ID)
563 - Fix pointer issues in waitpid() and wait() replaces. Patch by Lutz
564 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
565 - OpenBSD CVS Sync
566 - djm@cvs.openbsd.org 2001/03/25 00:01:34
567 [session.c]
568 shorten; ok markus@
569 - stevesk@cvs.openbsd.org 2001/03/25 13:16:11
570 [servconf.c servconf.h session.c sshd.8 sshd_config]
571 PrintLastLog option; from chip@valinux.com with some minor
572 changes by me. ok markus@
573 - markus@cvs.openbsd.org 2001/03/26 08:07:09
574 [authfile.c authfile.h ssh-add.c ssh-keygen.c ssh.c sshconnect.c
575 sshconnect.h sshconnect1.c sshconnect2.c sshd.c]
576 simpler key load/save interface, see authfile.h
577 - (djm) Reestablish PAM credentials (which can be supplemental group
578 memberships) after initgroups() blows them away. Report and suggested
579 fix from Nalin Dahyabhai <nalin@redhat.com>
580
58120010324
582 - Fixed permissions ssh-keyscan. Thanks to Christopher Linn <celinn@mtu.edu>.
583 - OpenBSD CVS Sync
584 - djm@cvs.openbsd.org 2001/03/23 11:04:07
585 [compat.c compat.h sshconnect2.c sshd.c]
586 Compat for OpenSSH with broken Rijndael/AES. ok markus@
587 - markus@cvs.openbsd.org 2001/03/23 12:02:49
588 [auth1.c]
589 authctxt is now passed to do_authenticated
590 - markus@cvs.openbsd.org 2001/03/23 13:10:57
591 [sftp-int.c]
592 fix put, upload to _absolute_ path, ok djm@
593 - markus@cvs.openbsd.org 2001/03/23 14:28:32
594 [session.c sshd.c]
595 ignore SIGPIPE, restore in child, fixes x11-fwd crashes; with djm@
596 - (djm) Pull out our own SIGPIPE hacks
597
59820010323
599 - OpenBSD CVS Sync
600 - deraadt@cvs.openbsd.org 2001/03/22 20:22:55
601 [sshd.c]
602 do not place linefeeds in buffer
603
60420010322
605 - (djm) Better AIX no tty fix, spotted by Gert Doering <gert@greenie.muc.de>
606 - (bal) version.c CVS ID resync
607 - (bal) auth-chall.c auth-passwd.c auth.h auth1.c auth2.c session.c CVS ID
608 resync
609 - (bal) scp.c CVS ID resync
610 - OpenBSD CVS Sync
611 - markus@cvs.openbsd.org 2001/03/20 19:10:16
612 [readconf.c]
613 default to SSH protocol version 2
614 - markus@cvs.openbsd.org 2001/03/20 19:21:21
615 [session.c]
616 remove unused arg
617 - markus@cvs.openbsd.org 2001/03/20 19:21:21
618 [session.c]
619 remove unused arg
620 - markus@cvs.openbsd.org 2001/03/21 11:43:45
621 [auth1.c auth2.c session.c session.h]
622 merge common ssh v1/2 code
623 - jakob@cvs.openbsd.org 2001/03/21 14:20:45
624 [ssh-keygen.c]
625 add -B flag to usage
626 - markus@cvs.openbsd.org 2001/03/21 21:06:30
627 [session.c]
628 missing init; from mib@unimelb.edu.au
629
63020010321
631 - (djm) Fix ttyname breakage for AIX and Tru64. Patch from Steve
632 VanDevender <stevev@darkwing.uoregon.edu>
633 - (djm) Make sure pam_retval is initialised on call to pam_end. Patch
634 from Solar Designer <solar@openwall.com>
635 - (djm) Don't loop forever when changing password via PAM. Patch
636 from Solar Designer <solar@openwall.com>
637 - (djm) Generate config files before build
638 - (djm) Correctly handle SIA and AIX when no tty present. Spotted and
639 suggested fix from Mike Battersby <mib@unimelb.edu.au>
640
64120010320
642 - (bal) glob.c update to added GLOB_LIMITS (OpenBSD CVS).
643 - (bal) glob.c update to set gl_pathv to NULL (OpenBSD CVS).
644 - (bal) Oops. Missed globc.h change (OpenBSD CVS).
645 - (djm) OpenBSD CVS Sync
646 - markus@cvs.openbsd.org 2001/03/19 17:07:23
647 [auth.c readconf.c]
648 undo /etc/shell and proto 2,1 change for openssh-2.5.2
649 - markus@cvs.openbsd.org 2001/03/19 17:12:10
650 [version.h]
651 version 2.5.2
652 - (djm) Update RPM spec version
653 - (djm) Release 2.5.2p1
654- tim@mindrot.org 2001/03/19 18:33:47 [defines.h]
655 change S_ISLNK macro to work for UnixWare 2.03
656- tim@mindrot.org 2001/03/19 20:45:11 [openbsd-compat/glob.c]
657 add get_arg_max(). Use sysconf() if ARG_MAX is not defined
658
65920010319
660 - (djm) Seed PRNG at startup, rather than waiting for arc4random calls to
661 do it implicitly.
662 - (djm) Add getusershell() functions from OpenBSD CVS
663 - OpenBSD CVS Sync
664 - markus@cvs.openbsd.org 2001/03/18 12:07:52
665 [auth-options.c]
666 ignore permitopen="host:port" if AllowTcpForwarding==no
667 - (djm) Make scp work on systems without 64-bit ints
668 - tim@mindrot.org 2001/03/18 18:28:39 [defines.h]
669 move HAVE_LONG_LONG_INT where it works
670 - (bal) Use 'NGROUPS' for NeXT Since 'MAX_NGROUPS' is wrapped up in -lposix
671 stuff. Change suggested by Mark Miller <markm@swoon.net>
672 - (bal) Small fix to scp. %lu vs %ld
673 - (bal) NeXTStep lacks S_ISLNK. Plus split up S_IS*
674 - (djm) OpenBSD CVS Sync
675 - djm@cvs.openbsd.org 2001/03/19 03:52:51
676 [sftp-client.c]
677 Report ssh connection closing correctly; ok deraadt@
678 - deraadt@cvs.openbsd.org 2001/03/18 23:30:55
679 [compat.c compat.h sshd.c]
680 specifically version match on ssh scanners. do not log scan
681 information to the console
682 - djm@cvs.openbsd.org 2001/03/19 12:10:17
683 [sshd.8]
684 Document permitopen authorized_keys option; ok markus@
685 - djm@cvs.openbsd.org 2001/03/19 05:49:52
686 [ssh.1]
687 document PreferredAuthentications option; ok markus@
688 - (bal) Minor NeXT fixed. Forgot to #undef NGROUPS_MAX
689
69020010318
691 - (bal) Fixed scp type casing issue which causes "scp: protocol error:
692 size not delimited" fatal errors when tranfering.
693 - OpenBSD CVS Sync
694 - markus@cvs.openbsd.org 2001/03/17 17:27:59
695 [auth.c]
696 check /etc/shells, too
697 - tim@mindrot.org 2001/03/17 18:45:25 [compat.c]
698 openbsd-compat/fake-regex.h
699
70020010317
701 - Support usrinfo() on AIX. Based on patch from Gert Doering
702 <gert@greenie.muc.de>
703 - OpenBSD CVS Sync
704 - markus@cvs.openbsd.org 2001/03/15 15:05:59
705 [scp.c]
706 use %lld in printf, ok millert@/deraadt@; report from ssh@client.fi
707 - markus@cvs.openbsd.org 2001/03/15 22:07:08
708 [session.c]
709 pass Session to do_child + KNF
710 - djm@cvs.openbsd.org 2001/03/16 08:16:18
711 [sftp-client.c sftp-client.h sftp-glob.c sftp-int.c]
712 Revise globbing for get/put to be more shell-like. In particular,
713 "get/put file* directory/" now works. ok markus@
714 - markus@cvs.openbsd.org 2001/03/16 09:55:53
715 [sftp-int.c]
716 fix memset and whitespace
717 - markus@cvs.openbsd.org 2001/03/16 13:44:24
718 [sftp-int.c]
719 discourage strcat/strcpy
720 - markus@cvs.openbsd.org 2001/03/16 19:06:30
721 [auth-options.c channels.c channels.h serverloop.c session.c]
722 implement "permitopen" key option, restricts -L style forwarding to
723 to specified host:port pairs. based on work by harlan@genua.de
724 - Check for gl_matchc support in glob_t and fall back to the
725 openbsd-compat/glob.[ch] support if it does not exist.
726
72720010315
728 - OpenBSD CVS Sync
729 - markus@cvs.openbsd.org 2001/03/14 08:57:14
730 [sftp-client.c]
731 Wall
732 - markus@cvs.openbsd.org 2001/03/14 15:15:58
733 [sftp-int.c]
734 add version command
735 - deraadt@cvs.openbsd.org 2001/03/14 22:50:25
736 [sftp-server.c]
737 note no getopt()
738 - (stevesk) ssh-keyscan.c: specify "openbsd-compat/fake-queue.h"
739 - (bal) Cygwin README change by Corinna Vinschen <vinschen@redhat.com>
740
74120010314
742 - OpenBSD CVS Sync
743 - markus@cvs.openbsd.org 2001/03/13 17:34:42
744 [auth-options.c]
745 missing xfree, deny key on parse error; ok stevesk@
746 - djm@cvs.openbsd.org 2001/03/13 22:42:54
747 [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c]
748 sftp client filename globbing for get, put, ch{mod,grp,own}. ok markus@
749 - (bal) Fix strerror() in bsd-misc.c
750 - (djm) Add replacement glob() from OpenBSD libc if the system glob is
751 missing or lacks the GLOB_ALTDIRFUNC extension
752 - (djm) Remove -I$(srcdir)/openbsd-compat from CFLAGS, refer to headers
753 relatively. Avoids conflict between glob.h and /usr/include/glob.h
754
75520010313
756 - OpenBSD CVS Sync
757 - markus@cvs.openbsd.org 2001/03/12 22:02:02
758 [key.c key.h ssh-add.c ssh-keygen.c sshconnect.c sshconnect2.c]
759 remove old key_fingerprint interface, s/_ex//
760
76120010312
762 - OpenBSD CVS Sync
763 - markus@cvs.openbsd.org 2001/03/11 13:25:36
764 [auth2.c key.c]
765 debug
766 - jakob@cvs.openbsd.org 2001/03/11 15:03:16
767 [key.c key.h]
768 add improved fingerprint functions. based on work by Carsten
769 Raskgaard <cara@int.tele.dk> and modified by me. ok markus@.
770 - jakob@cvs.openbsd.org 2001/03/11 15:04:16
771 [ssh-keygen.1 ssh-keygen.c]
772 print both md5, sha1 and bubblebabble fingerprints when using
773 ssh-keygen -l -v. ok markus@.
774 - jakob@cvs.openbsd.org 2001/03/11 15:13:09
775 [key.c]
776 cleanup & shorten some var names key_fingerprint_bubblebabble.
777 - deraadt@cvs.openbsd.org 2001/03/11 16:39:03
778 [ssh-keygen.c]
779 KNF, and SHA1 binary output is just creeping featurism
780 - tim@mindrot.org 2001/03/11 17:29:32 [configure.in]
781 test if snprintf() supports %ll
782 add /dev to search path for PRNGD/EGD socket
783 fix my mistake in USER_PATH test program
784 - OpenBSD CVS Sync
785 - markus@cvs.openbsd.org 2001/03/11 18:29:51
786 [key.c]
787 style+cleanup
788 - markus@cvs.openbsd.org 2001/03/11 22:33:24
789 [ssh-keygen.1 ssh-keygen.c]
790 remove -v again. use -B instead for bubblebabble. make -B consistent
791 with -l and make -B work with /path/to/known_hosts. ok deraadt@
792 - (djm) Bump portable version number for generating test RPMs
793 - (djm) Add "static_openssl" RPM build option, remove rsh build dependency
794 - (bal) Reorder includes in Makefile.
795
79620010311
797 - OpenBSD CVS Sync
798 - markus@cvs.openbsd.org 2001/03/10 12:48:27
799 [sshconnect2.c]
800 ignore nonexisting private keys; report rjmooney@mediaone.net
801 - deraadt@cvs.openbsd.org 2001/03/10 12:53:51
802 [readconf.c ssh_config]
803 default to SSH2, now that m68k runs fast
804 - stevesk@cvs.openbsd.org 2001/03/10 15:02:05
805 [ttymodes.c ttymodes.h]
806 remove unused sgtty macros; ok markus@
807 - deraadt@cvs.openbsd.org 2001/03/10 15:31:00
808 [compat.c compat.h sshconnect.c]
809 all known netscreen ssh versions, and older versions of OSU ssh cannot
810 handle password padding (newer OSU is fixed)
811 - tim@mindrot.org 2001/03/10 16:33:42 [configure.in Makefile.in sshd_config]
812 make sure $bindir is in USER_PATH so scp will work
813 - OpenBSD CVS Sync
814 - markus@cvs.openbsd.org 2001/03/10 17:51:04
815 [kex.c match.c match.h readconf.c readconf.h sshconnect2.c]
816 add PreferredAuthentications
817
81820010310
819 - OpenBSD CVS Sync
820 - deraadt@cvs.openbsd.org 2001/03/09 03:14:39
821 [ssh-keygen.c]
822 create *.pub files with umask 0644, so that you can mv them to
823 authorized_keys
824 - deraadt@cvs.openbsd.org 2001/03/09 12:30:29
825 [sshd.c]
826 typo; slade@shore.net
827 - Removed log.o from sftp client. Not needed.
828
82920010309
830 - OpenBSD CVS Sync
831 - stevesk@cvs.openbsd.org 2001/03/08 18:47:12
832 [auth1.c]
833 unused; ok markus@
834 - stevesk@cvs.openbsd.org 2001/03/08 20:44:48
835 [sftp.1]
836 spelling, cleanup; ok deraadt@
837 - markus@cvs.openbsd.org 2001/03/08 21:42:33
838 [compat.c compat.h readconf.h ssh.c sshconnect1.c sshconnect2.c]
839 implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->
840 no need to do enter passphrase or do expensive sign operations if the
841 server does not accept key).
842
84320010308
844 - OpenBSD CVS Sync
845 - djm@cvs.openbsd.org 2001/03/07 10:11:23
846 [sftp-client.c sftp-client.h sftp-int.c sftp-server.c sftp.1 sftp.c sftp.h]
847 Support for new draft (draft-ietf-secsh-filexfer-01). New symlink handling
848 functions and small protocol change.
849 - markus@cvs.openbsd.org 2001/03/08 00:15:48
850 [readconf.c ssh.1]
851 turn off useprivilegedports by default. only rhost-auth needs
852 this. older sshd's may need this, too.
853 - (stevesk) Reliant Unix (SNI) needs HAVE_BOGUS_SYS_QUEUE_H;
854 Dirk Markwardt <D.Markwardt@tu-bs.de>
855
85620010307
857 - (bal) OpenBSD CVS Sync
858 - deraadt@cvs.openbsd.org 2001/03/06 06:11:18
859 [ssh-keyscan.c]
860 appease gcc
861 - deraadt@cvs.openbsd.org 2001/03/06 06:11:44
862 [sftp-int.c sftp.1 sftp.c]
863 sftp -b batchfile; mouring@etoh.eviladmin.org
864 - deraadt@cvs.openbsd.org 2001/03/06 15:10:42
865 [sftp.1]
866 order things
867 - deraadt@cvs.openbsd.org 2001/03/07 01:19:06
868 [ssh.1 sshd.8]
869 the name "secure shell" is boring, noone ever uses it
870 - deraadt@cvs.openbsd.org 2001/03/07 04:05:58
871 [ssh.1]
872 removed dated comment
873 - Cygwin contrib improvements from Corinna Vinschen <vinschen@redhat.com>
874
87520010306
876 - (bal) OpenBSD CVS Sync
877 - deraadt@cvs.openbsd.org 2001/03/05 14:28:47
878 [sshd.8]
879 alpha order; jcs@rt.fm
880 - stevesk@cvs.openbsd.org 2001/03/05 15:44:51
881 [servconf.c]
882 sync error message; ok markus@
883 - deraadt@cvs.openbsd.org 2001/03/05 15:56:16
884 [myproposal.h ssh.1]
885 switch to aes128-cbc/hmac-md5 by default in SSH2 -- faster;
886 provos & markus ok
887 - deraadt@cvs.openbsd.org 2001/03/05 16:07:15
888 [sshd.8]
889 detail default hmac setup too
890 - markus@cvs.openbsd.org 2001/03/05 17:17:21
891 [kex.c kex.h sshconnect2.c sshd.c]
892 generate a 2*need size (~300 instead of 1024/2048) random private
893 exponent during the DH key agreement. according to Niels (the great
894 german advisor) this is safe since /etc/primes contains strong
895 primes only.
896
897 References:
898 P. C. van Oorschot and M. J. Wiener, On Diffie-Hellman key
899 agreement with short exponents, In Advances in Cryptology
900 - EUROCRYPT'96, LNCS 1070, Springer-Verlag, 1996, pp.332-343.
901 - stevesk@cvs.openbsd.org 2001/03/05 17:40:48
902 [ssh.1]
903 more ssh_known_hosts2 documentation; ok markus@
904 - stevesk@cvs.openbsd.org 2001/03/05 17:58:22
905 [dh.c]
906 spelling
907 - deraadt@cvs.openbsd.org 2001/03/06 00:33:04
908 [authfd.c cli.c ssh-agent.c]
909 EINTR/EAGAIN handling is required in more cases
910 - millert@cvs.openbsd.org 2001/03/06 01:06:03
911 [ssh-keyscan.c]
912 Don't assume we wil get the version string all in one read().
913 deraadt@ OK'd
914 - millert@cvs.openbsd.org 2001/03/06 01:08:27
915 [clientloop.c]
916 If read() fails with EINTR deal with it the same way we treat EAGAIN
917
91820010305
919 - (bal) CVS ID touch up on sshpty.[ch] and sshlogin.[ch]
920 - (bal) CVS ID touch up on sftp-int.c
921 - (bal) CVS ID touch up on uuencode.c
922 - (bal) CVS ID touch up on auth2.c, serverloop.c, session.c & sshd.c
923 - (bal) OpenBSD CVS Sync
924 - deraadt@cvs.openbsd.org 2001/02/17 23:48:48
925 [sshd.8]
926 it's the OpenSSH one
927 - deraadt@cvs.openbsd.org 2001/02/21 07:37:04
928 [ssh-keyscan.c]
929 inline -> __inline__, and some indent
930 - deraadt@cvs.openbsd.org 2001/02/21 09:05:54
931 [authfile.c]
932 improve fd handling
933 - deraadt@cvs.openbsd.org 2001/02/21 09:12:56
934 [sftp-server.c]
935 careful with & and &&; markus ok
936 - stevesk@cvs.openbsd.org 2001/02/21 21:14:04
937 [ssh.c]
938 -i supports DSA identities now; ok markus@
939 - deraadt@cvs.openbsd.org 2001/02/22 04:29:37
940 [servconf.c]
941 grammar; slade@shore.net
942 - deraadt@cvs.openbsd.org 2001/02/22 06:43:55
943 [ssh-keygen.1 ssh-keygen.c]
944 document -d, and -t defaults to rsa1
945 - deraadt@cvs.openbsd.org 2001/02/22 08:03:51
946 [ssh-keygen.1 ssh-keygen.c]
947 bye bye -d
948 - deraadt@cvs.openbsd.org 2001/02/22 18:09:06
949 [sshd_config]
950 activate RSA 2 key
951 - markus@cvs.openbsd.org 2001/02/22 21:57:27
952 [ssh.1 sshd.8]
953 typos/grammar from matt@anzen.com
954 - markus@cvs.openbsd.org 2001/02/22 21:59:44
955 [auth.c auth.h auth1.c auth2.c misc.c misc.h ssh.c]
956 use pwcopy in ssh.c, too
957 - markus@cvs.openbsd.org 2001/02/23 15:34:53
958 [serverloop.c]
959 debug2->3
960 - markus@cvs.openbsd.org 2001/02/23 18:15:13
961 [sshd.c]
962 the random session key depends now on the session_key_int
963 sent by the 'attacker'
964 dig1 = md5(cookie|session_key_int);
965 dig2 = md5(dig1|cookie|session_key_int);
966 fake_session_key = dig1|dig2;
967 this change is caused by a mail from anakin@pobox.com
968 patch based on discussions with my german advisor niels@openbsd.org
969 - deraadt@cvs.openbsd.org 2001/02/24 10:37:55
970 [readconf.c]
971 look for id_rsa by default, before id_dsa
972 - deraadt@cvs.openbsd.org 2001/02/24 10:37:26
973 [sshd_config]
974 ssh2 rsa key before dsa key
975 - markus@cvs.openbsd.org 2001/02/27 10:35:27
976 [packet.c]
977 fix random padding
978 - markus@cvs.openbsd.org 2001/02/27 11:00:11
979 [compat.c]
980 support SSH-2.0-2.1 ; from Christophe_Moret@hp.com
981 - deraadt@cvs.openbsd.org 2001/02/28 05:34:28
982 [misc.c]
983 pull in protos
984 - deraadt@cvs.openbsd.org 2001/02/28 05:36:28
985 [sftp.c]
986 do not kill the subprocess on termination (we will see if this helps
987 things or hurts things)
988 - markus@cvs.openbsd.org 2001/02/28 08:45:39
989 [clientloop.c]
990 fix byte counts for ssh protocol v1
991 - markus@cvs.openbsd.org 2001/02/28 08:54:55
992 [channels.c nchan.c nchan.h]
993 make sure remote stderr does not get truncated.
994 remove closed fd's from the select mask.
995 - markus@cvs.openbsd.org 2001/02/28 09:57:07
996 [packet.c packet.h sshconnect2.c]
997 in ssh protocol v2 use ignore messages for padding (instead of
998 trailing \0).
999 - markus@cvs.openbsd.org 2001/02/28 12:55:07
1000 [channels.c]
1001 unify debug messages
1002 - deraadt@cvs.openbsd.org 2001/02/28 17:52:54
1003 [misc.c]
1004 for completeness, copy pw_gecos too
1005 - markus@cvs.openbsd.org 2001/02/28 21:21:41
1006 [sshd.c]
1007 generate a fake session id, too
1008 - markus@cvs.openbsd.org 2001/02/28 21:27:48
1009 [channels.c packet.c packet.h serverloop.c]
1010 use ignore message to simulate a SSH2_MSG_CHANNEL_DATA message
1011 use random content in ignore messages.
1012 - markus@cvs.openbsd.org 2001/02/28 21:31:32
1013 [channels.c]
1014 typo
1015 - deraadt@cvs.openbsd.org 2001/03/01 02:11:25
1016 [authfd.c]
1017 split line so that p will have an easier time next time around
1018 - deraadt@cvs.openbsd.org 2001/03/01 02:29:04
1019 [ssh.c]
1020 shorten usage by a line
1021 - deraadt@cvs.openbsd.org 2001/03/01 02:45:10
1022 [auth-rsa.c auth2.c deattack.c packet.c]
1023 KNF
1024 - deraadt@cvs.openbsd.org 2001/03/01 03:38:33
1025 [cli.c cli.h rijndael.h ssh-keyscan.1]
1026 copyright notices on all source files
1027 - markus@cvs.openbsd.org 2001/03/01 22:46:37
1028 [ssh.c]
1029 don't truncate remote ssh-2 commands; from mkubita@securities.cz
1030 use min, not max for logging, fixes overflow.
1031 - deraadt@cvs.openbsd.org 2001/03/02 06:21:01
1032 [sshd.8]
1033 explain SIGHUP better
1034 - deraadt@cvs.openbsd.org 2001/03/02 09:42:49
1035 [sshd.8]
1036 doc the dsa/rsa key pair files
1037 - deraadt@cvs.openbsd.org 2001/03/02 18:54:31
1038 [atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h
1039 scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c
1040 ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8]
1041 make copyright lines the same format
1042 - deraadt@cvs.openbsd.org 2001/03/03 06:53:12
1043 [ssh-keyscan.c]
1044 standard theo sweep
1045 - millert@cvs.openbsd.org 2001/03/03 21:19:41
1046 [ssh-keyscan.c]
1047 Dynamically allocate read_wait and its copies. Since maxfd is
1048 based on resource limits it is often (usually?) larger than FD_SETSIZE.
1049 - millert@cvs.openbsd.org 2001/03/03 21:40:30
1050 [sftp-server.c]
1051 Dynamically allocate fd_set; deraadt@ OK
1052 - millert@cvs.openbsd.org 2001/03/03 21:41:07
1053 [packet.c]
1054 Dynamically allocate fd_set; deraadt@ OK
1055 - deraadt@cvs.openbsd.org 2001/03/03 22:07:50
1056 [sftp-server.c]
1057 KNF
1058 - markus@cvs.openbsd.org 2001/03/03 23:52:22
1059 [sftp.c]
1060 clean up arg processing. based on work by Christophe_Moret@hp.com
1061 - markus@cvs.openbsd.org 2001/03/03 23:59:34
1062 [log.c ssh.c]
1063 log*.c -> log.c
1064 - markus@cvs.openbsd.org 2001/03/04 00:03:59
1065 [channels.c]
1066 debug1->2
1067 - stevesk@cvs.openbsd.org 2001/03/04 10:57:53
1068 [ssh.c]
1069 add -m to usage; ok markus@
1070 - stevesk@cvs.openbsd.org 2001/03/04 11:04:41
1071 [sshd.8]
1072 small cleanup and clarify for PermitRootLogin; ok markus@
1073 - stevesk@cvs.openbsd.org 2001/03/04 11:16:06
1074 [servconf.c sshd.8]
1075 kill obsolete RandomSeed; ok markus@ deraadt@
1076 - stevesk@cvs.openbsd.org 2001/03/04 12:54:04
1077 [sshd.8]
1078 spelling
1079 - millert@cvs.openbsd.org 2001/03/04 17:42:28
1080 [authfd.c channels.c dh.c log.c readconf.c servconf.c sftp-int.c
1081 ssh.c sshconnect.c sshd.c]
1082 log functions should not be passed strings that end in newline as they
1083 get passed on to syslog() and when logging to stderr, do_log() appends
1084 its own newline.
1085 - deraadt@cvs.openbsd.org 2001/03/04 18:21:28
1086 [sshd.8]
1087 list SSH2 ciphers
1088 - (bal) Put HAVE_PW_CLASS_IN_PASSWD back into pwcopy()
1089 - (bal) Fix up logging since it changed. removed log-*.c
1090 - (djm) Fix up LOG_AUTHPRIV for systems that have it
1091 - (stevesk) OpenBSD sync:
1092 - deraadt@cvs.openbsd.org 2001/03/05 08:37:27
1093 [ssh-keyscan.c]
1094 skip inlining, why bother
1095 - (stevesk) sftp.c: handle __progname
1096
109720010304
1098 - (bal) Remove make-ssh-known-hosts.1 since it's no longer valid.
1099 - (bal) Updated contrib/README to remove 'make-ssh-known-hosts' and
1100 give Mark Roth credit for mdoc2man.pl
1101
110220010303
1103 - (djm) Remove make-ssh-known-hosts.pl, ssh-keyscan is better.
1104 - (djm) Document PAM ChallengeResponseAuthentication in sshd.8
1105 - (djm) Disable and comment ChallengeResponseAuthentication in sshd_config
1106 - (djm) Allow PRNGd entropy collection from localhost TCP socket. Replace
1107 "--with-egd-pool" configure option with "--with-prngd-socket" and
1108 "--with-prngd-port" options. Debugged and improved by Lutz Jaenicke
1109 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
1110
111120010301
1112 - (djm) Properly add -lcrypt if needed.
1113 - (djm) Force standard PAM conversation function in a few more places.
1114 Patch from Redhat 2.5.1p1-2 RPM, probably Nalin Dahyabhai
1115 <nalin@redhat.com>
1116 - (djm) Cygwin needs pw->pw_gecos copied too. Patch from Corinna Vinschen
1117 <vinschen@redhat.com>
1118 - (djm) Released 2.5.1p2
1119
112020010228
1121 - (djm) Detect endianness in configure and use it in rijndael.c. Fixes
1122 "Bad packet length" bugs.
1123 - (djm) Fully revert PAM session patch (again). All PAM session init is
1124 now done before the final fork().
1125 - (djm) EGD detection patch from Tim Rice <tim@multitalents.net>
1126 - (djm) Remove /tmp from EGD socket search list
1127
112820010227
1129 - (bal) Applied shutdown() patch for sftp.c by Corinna Vinschen
1130 <vinschen@redhat.com>
1131 - (bal) OpenBSD Sync
1132 - markus@cvs.openbsd.org 2001/02/23 15:37:45
1133 [session.c]
1134 handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
1135 - (bal) sshd.init support for all Redhat release. Patch by Jim Knoble
1136 <jmknoble@jmknoble.cx>
1137 - (djm) Fix up POSIX saved uid support. Report from Mark Miller
1138 <markm@swoon.net>
1139 - (djm) Search for -lcrypt on FreeBSD too
1140 - (djm) fatal() on OpenSSL version mismatch
1141 - (djm) Move PAM init to after fork for non-Solaris derived PAMs
1142 - (djm) Warning fix on entropy.c saved uid stuff. Patch from Mark Miller
1143 <markm@swoon.net>
1144 - (djm) Fix PAM fix
1145 - (djm) Remove 'noreplace' flag from sshd_config in RPM spec files. This
1146 change is being made as 2.5.x configfiles are not back-compatible with
1147 2.3.x.
1148 - (djm) Avoid warnings for missing broken IP_TOS. Patch from Mark Miller
1149 <markm@swoon.net>
1150 - (djm) Open Server 5 doesn't need BROKEN_SAVED_UIDS. Patch from Tim Rice
1151 <tim@multitalents.net>
1152 - (djm) Avoid multiple definition of _PATH_LS. Patch from Tim Rice
1153 <tim@multitalents.net>
1154
115520010226
1156 - (bal) Fixed bsd-snprinf.c so it now honors 'BROKEN_SNPRINTF' again.
1157 - (djm) Some systems (SCO3, NeXT) have weird saved uid semantics.
1158 Based on patch from Tim Rice <tim@multitalents.net>
1159
116020010225
1161 - (djm) Use %{_libexecdir} rather than hardcoded path in RPM specfile
1162 Patch from Adrian Ho <lexfiend@usa.net>
1163 - (bal) Replace 'unsigned long long' to 'u_int64_t' since not every
1164 platform defines u_int64_t as being that.
1165
116620010224
1167 - (bal) Missed part of the UNIX sockets patch. Patch by Corinna
1168 Vinschen <vinschen@redhat.com>
1169 - (bal) Reorder where 'strftime' is detected to resolve linking
1170 issues on SCO. Patch by Tim Rice <tim@multitalents.net>
1171
117220010224
1173 - (bal) pam_stack fix to correctly detect between RH7 and older RHs.
1174 Patch by Pekka Savola <pekkas@netcore.fi>
1175 - (bal) Renamed sigaction.[ch] to sigact.[ch]. Causes problems with
1176 some platforms.
1177 - (bal) Generalize lack of UNIX sockets since this also effects Cray
1178 not just Cygwin. Based on patch by Wendy Palm <wendyp@cray.com>
1179
118020010223
1181 - (bal) Fix --define rh7 in openssh.spec file. Patch by Steve Tell
1182 <tell@telltronics.org>
1183 - (bal) Patch to force OpenSSH rpm to require the same version of OpenSSL
1184 that it was compiled against. Patch by Pekka Savola <pekkas@netcore.fi>
1185 - (bal) Double -I for OpenSSL on SCO. Patch by Tim Rice
1186 <tim@multitalents.net>
1187
118820010222
1189 - (bal) Corrected SCO luid patch by svaughan <svaughan@asterion.com>
1190 - (bal) Added mdoc2man.pl from Mark Roth <roth@feep.net>
1191 - (bal) Removed reference to liblogin from contrib/README. It was
1192 integrated into OpenSSH a long while ago.
1193 - (stevesk) remove erroneous #ifdef sgi code.
1194 Michael Stone <mstone@cs.loyola.edu>
1195
119620010221
1197 - (bal) Removed -L/usr/ucblib -R/usr/ucblib for Solaris platform.
1198 - (bal) Fixed OpenSSL rework to use $saved_*. Patch by Tim Rice
1199 <tim@multitalents.net>
1200 - (bal) Reverted out of 2001/02/15 patch by djm below because it
1201 breaks Solaris.
1202 - (djm) Move PAM session setup back to before setuid to user.
1203 fixes problems on Solaris-drived PAMs.
1204 - (stevesk) session.c: back out to where we were before:
1205 - (djm) Move PAM session initialisation until after fork in sshd. Patch
1206 from Nalin Dahyabhai <nalin@redhat.com>
1207
120820010220
1209 - (bal) Fix mixed up params to memmove() from Jan 5th in setenv.c and
1210 getcwd.c.
1211 - (bal) OpenBSD CVS Sync:
1212 - deraadt@cvs.openbsd.org 2001/02/19 23:09:05
1213 [sshd.c]
1214 clarify message to make it not mention "ident"
1215
121620010219
1217 - (bal) Markus' blessing to rename login.[ch] -> sshlogin.[ch] and
1218 pty.[ch] -> sshpty.[ch]
1219 - (djm) Rework search for OpenSSL location. Skip directories which don't
1220 exist, don't add -L$ssldir/lib if it doesn't exist. Should help SCO
1221 with its limit of 6 -L options.
1222 - OpenBSD CVS Sync:
1223 - reinhard@cvs.openbsd.org 2001/02/17 08:24:40
1224 [sftp.1]
1225 typo
1226 - deraadt@cvs.openbsd.org 2001/02/17 16:28:58
1227 [ssh.c]
1228 cleanup -V output; noted by millert
1229 - deraadt@cvs.openbsd.org 2001/02/17 16:48:48
1230 [sshd.8]
1231 it's the OpenSSH one
1232 - markus@cvs.openbsd.org 2001/02/18 11:33:54
1233 [dispatch.c]
1234 typo, SSH2_MSG_KEXINIT, from aspa@kronodoc.fi
1235 - markus@cvs.openbsd.org 2001/02/19 02:53:32
1236 [compat.c compat.h serverloop.c]
1237 ssh-1.2.{18-22} has broken handling of ignore messages; report from
1238 itojun@
1239 - markus@cvs.openbsd.org 2001/02/19 03:35:23
1240 [version.h]
1241 OpenSSH_2.5.1 adds bug compat with 1.2.{18-22}
1242 - deraadt@cvs.openbsd.org 2001/02/19 03:36:25
1243 [scp.c]
1244 np is changed by recursion; vinschen@redhat.com
1245 - Update versions in RPM spec files
1246 - Release 2.5.1p1
1247
124820010218
1249 - (bal) Patch for fix FCHMOD reference in ftp-client.c by Tim Rice
1250 <tim@multitalents.net>
1251 - (Bal) Patch for lack of RA_RESTART in misc.c for mysignal by
1252 stevesk
1253 - (djm) Fix my breaking of cygwin builds, Patch from Corinna Vinschen
1254 <vinschen@redhat.com> and myself.
1255 - (djm) Close listen_sock on bind() failures. Patch from Arkadiusz
1256 Miskiewicz <misiek@pld.ORG.PL>
1257 - (djm) Robustify EGD/PRNGd code in face of socket closures. Patch from
1258 Todd C. Miller <Todd.Miller@courtesan.com>
1259 - (djm) Use ttyname() to determine name of tty returned by openpty()
1260 rather then risking overflow. Patch from Marek Michalkiewicz
1261 <marekm@amelek.gda.pl>
1262 - (djm) Swapped tests for no_libsocket and no_libnsl in configure.in.
1263 Patch from Marek Michalkiewicz <marekm@amelek.gda.pl>
1264 - (djm) Doc fixes from Pekka Savola <pekkas@netcore.fi>
1265 - (djm) Use SA_INTERRUPT along SA_RESTART if present (equivalent for
1266 SunOS)
1267 - (djm) SCO needs librpc for libwrap. Patch from Tim Rice
1268 <tim@multitalents.net>
1269 - (stevesk) misc.c: cpp rework of SA_(INTERRUPT|RESTART) handling.
1270 - (stevesk) scp.c: use mysignal() for updateprogressmeter() handler.
1271 - (djm) SA_INTERRUPT is the converse of SA_RESTART, apply it only for
1272 SIGALRM.
1273 - (djm) Move entropy.c over to mysignal()
1274 - (djm) SunOS 4.x also needs to define HAVE_BOGUS_SYS_QUEUE_H as it has
1275 a <sys/queue.h> that lacks the TAILQ_* macros. Patch from Todd C.
1276 Miller <Todd.Miller@courtesan.com>
1277 - (djm) Update RPM spec files for 2.5.0p1
1278 - (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie
1279 enable with --with-bsd-auth.
1280 - (stevesk) entropy.c: typo; should be SIGPIPE
1281
128220010217
1283 - (bal) OpenBSD Sync:
1284 - markus@cvs.openbsd.org 2001/02/16 13:38:18
1285 [channel.c]
1286 remove debug
1287 - markus@cvs.openbsd.org 2001/02/16 14:03:43
1288 [session.c]
1289 proper payload-length check for x11 w/o screen-number
1290
129120010216
1292 - (bal) added '--with-prce' to allow overriding of system regex when
1293 required (tested by David Dulek <ddulek@fastenal.com>)
1294 - (bal) Added DG/UX case and set that they have a broken IPTOS.
1295 - (djm) Mini-configure reorder patch from Tim Rice <tim@multitalents.net>
1296 Fixes linking on SCO.
1297 - (djm) Make gnome-ssh-askpass handle multi-line prompts. Patch from
1298 Nalin Dahyabhai <nalin@redhat.com>
1299 - (djm) BSD license for gnome-ssh-askpass (was X11)
1300 - (djm) KNF on gnome-ssh-askpass
1301 - (djm) USE_PIPES for a few more sysv platforms
1302 - (djm) Cleanup configure.in a little
1303 - (djm) Ask users to check config.log when we can't find necessary libs
1304 - (djm) Set "login ID" on systems with setluid. Only enabled for SCO
1305 OpenServer for now. Based on patch from svaughan <svaughan@asterion.com>
1306 - (djm) OpenBSD CVS:
1307 - markus@cvs.openbsd.org 2001/02/15 16:19:59
1308 [channels.c channels.h serverloop.c sshconnect.c sshconnect.h]
1309 [sshconnect1.c sshconnect2.c]
1310 genericize password padding function for SSH1 and SSH2.
1311 add stylized echo to 2, too.
1312 - (djm) Add roundup() macro to defines.h
1313 - (stevesk) set SA_RESTART flag in mysignal() for SIGCHLD;
1314 needed on Unixware 2.x.
1315
131620010215
1317 - (djm) Move PAM session setup back to before setuid to user. Fixes
1318 problems on Solaris-derived PAMs.
1319 - (djm) Clean up PAM namespace. Suggested by Darren Moffat
1320 <Darren.Moffat@eng.sun.com>
1321 - (bal) Sync w/ OpenSSH for new release
1322 - markus@cvs.openbsd.org 2001/02/12 12:45:06
1323 [sshconnect1.c]
1324 fix xmalloc(0), ok dugsong@
1325 - markus@cvs.openbsd.org 2001/02/11 12:59:25
1326 [Makefile.in sshd.8 sshconnect2.c readconf.h readconf.c packet.c
1327 sshd.c ssh.c ssh.1 servconf.h servconf.c myproposal.h kex.h kex.c]
1328 1) clean up the MAC support for SSH-2
1329 2) allow you to specify the MAC with 'ssh -m'
1330 3) or the 'MACs' keyword in ssh(d)_config
1331 4) add hmac-{md5,sha1}-96
1332 ok stevesk@, provos@
1333 - markus@cvs.openbsd.org 2001/02/12 16:16:23
1334 [auth-passwd.c auth.c auth.h auth1.c auth2.c servconf.c servconf.h
1335 ssh-keygen.c sshd.8]
1336 PermitRootLogin={yes,without-password,forced-commands-only,no}
1337 (before this change, root could login even if PermitRootLogin==no)
1338 - deraadt@cvs.openbsd.org 2001/02/12 22:56:09
1339 [clientloop.c packet.c ssh-keyscan.c]
1340 deal with EAGAIN/EINTR selects which were skipped
1341 - markus@cvs.openssh.org 2001/02/13 22:49:40
1342 [auth1.c auth2.c]
1343 setproctitle(user) only if getpwnam succeeds
1344 - markus@cvs.openbsd.org 2001/02/12 23:26:20
1345 [sshd.c]
1346 missing memset; from solar@openwall.com
1347 - stevesk@cvs.openbsd.org 2001/02/12 20:53:33
1348 [sftp-int.c]
1349 lumask now works with 1 numeric arg; ok markus@, djm@
1350 - djm@cvs.openbsd.org 2001/02/14 9:46:03
1351 [sftp-client.c sftp-int.c sftp.1]
1352 Fix and document 'preserve modes & times' option ('-p' flag in sftp);
1353 ok markus@
1354 - (bal) replaced PATH_MAX in sftp-int.c w/ MAXPATHLEN.
1355 - (djm) Move to Jim's 1.2.0 X11 askpass program
1356 - (stevesk) OpenBSD sync:
1357 - deraadt@cvs.openbsd.org 2001/02/15 01:38:04
1358 [serverloop.c]
1359 indent
1360
136120010214
1362 - (djm) Don't try to close PAM session or delete credentials if the
1363 session has not been open or credentials not set. Based on patch from
1364 Andrew Bartlett <abartlet@pcug.org.au>
1365 - (djm) Move PAM session initialisation until after fork in sshd. Patch
1366 from Nalin Dahyabhai <nalin@redhat.com>
1367 - (bal) Missing function prototype in bsd-snprintf.c patch by
1368 Mark Miller <markm@swoon.net>
1369 - (djm) Split out and improve OSF SIA auth code. Patch from Chris Adams
1370 <cmadams@hiwaay.net> with a little modification and KNF.
1371 - (stevesk) fix for SIA patch, misplaced session_setup_sia()
1372
137320010213
1374 - (djm) Only test -S potential EGD sockets if they exist and are readable.
1375 - (bal) Cleaned out bsd-snprintf.c. VARARGS have been banished and
1376 I did a base KNF over the whe whole file to make it more acceptable.
1377 (backed out of original patch and removed it from ChangeLog)
1378 - (bal) Use chown() if fchown() does not exist in ftp-server.c patch by
1379 Tim Rice <tim@multitalents.net>
1380 - (stevesk) auth1.c: fix PAM passwordless check.
1381
138220010212
1383 - (djm) Update Redhat specfile to allow --define "skip_x11_askpass 1",
1384 --define "skip_gnome_askpass 1", --define "rh7 1" and make the
1385 implicit rpm-3.0.5 dependancy explicit. Patch and suggestions from
1386 Pekka Savola <pekkas@netcore.fi>
1387 - (djm) Clean up PCRE text in INSTALL
1388 - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby
1389 <mib@unimelb.edu.au>
1390 - (bal) NCR SVR4 compatiblity provide by Don Bragg <thewizarddon@yahoo.com>
1391 - (stevesk) session.c: remove debugging code.
1392
139320010211
1394 - (bal) OpenBSD Sync
1395 - markus@cvs.openbsd.org 2001/02/07 22:35:46
1396 [auth1.c auth2.c sshd.c]
1397 move k_setpag() to a central place; ok dugsong@
1398 - markus@cvs.openbsd.org 2001/02/10 12:52:02
1399 [auth2.c]
1400 offer passwd before s/key
1401 - markus@cvs.openbsd.org 2001/02/8 22:37:10
1402 [canohost.c]
1403 remove last call to sprintf; ok deraadt@
1404 - markus@cvs.openbsd.org 2001/02/10 1:33:32
1405 [canohost.c]
1406 add debug message, since sshd blocks here if DNS is not available
1407 - markus@cvs.openbsd.org 2001/02/10 12:44:02
1408 [cli.c]
1409 don't call vis() for \r
1410 - danh@cvs.openbsd.org 2001/02/10 0:12:43
1411 [scp.c]
1412 revert a small change to allow -r option to work again; ok deraadt@
1413 - danh@cvs.openbsd.org 2001/02/10 15:14:11
1414 [scp.c]
1415 fix memory leak; ok markus@
1416 - djm@cvs.openbsd.org 2001/02/10 0:45:52
1417 [scp.1]
1418 Mention that you can quote pathnames with spaces in them
1419 - markus@cvs.openbsd.org 2001/02/10 1:46:28
1420 [ssh.c]
1421 remove mapping of argv[0] -> hostname
1422 - markus@cvs.openbsd.org 2001/02/06 22:26:17
1423 [sshconnect2.c]
1424 do not ask for passphrase in batch mode; report from ejb@ql.org
1425 - itojun@cvs.opebsd.org 2001/02/08 10:47:05
1426 [sshconnect.c sshconnect1.c sshconnect2.c]
1427 %.30s is too short for IPv6 numeric address. use %.128s for now.
1428 markus ok
1429 - markus@cvs.openbsd.org 2001/02/09 12:28:35
1430 [sshconnect2.c]
1431 do not free twice, thanks to /etc/malloc.conf
1432 - markus@cvs.openbsd.org 2001/02/09 17:10:53
1433 [sshconnect2.c]
1434 partial success: debug->log; "Permission denied" if no more auth methods
1435 - markus@cvs.openbsd.org 2001/02/10 12:09:21
1436 [sshconnect2.c]
1437 remove some lines
1438 - markus@cvs.openbsd.org 2001/02/09 13:38:07
1439 [auth-options.c]
1440 reset options if no option is given; from han.holl@prismant.nl
1441 - markus@cvs.openbsd.org 2001/02/08 21:58:28
1442 [channels.c]
1443 nuke sprintf, ok deraadt@
1444 - markus@cvs.openbsd.org 2001/02/08 21:58:28
1445 [channels.c]
1446 nuke sprintf, ok deraadt@
1447 - markus@cvs.openbsd.org 2001/02/06 22:43:02
1448 [clientloop.h]
1449 remove confusing callback code
1450 - deraadt@cvs.openbsd.org 2001/02/08 14:39:36
1451 [readconf.c]
1452 snprintf
1453 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
1454 sync with netbsd tree changes.
1455 - more strict prototypes, include necessary headers
1456 - use paths.h/pathnames.h decls
1457 - size_t typecase to int -> u_long
1458 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
1459 [ssh-keyscan.c]
1460 fix size_t -> int cast (use u_long). markus ok
1461 - markus@cvs.openbsd.org 2001/02/07 22:43:16
1462 [ssh-keyscan.c]
1463 s/getline/Linebuf_getline/; from roumen.petrov@skalasoft.com
1464 - itojun@cvs.openbsd.org 2001/02/09 9:04:59
1465 [ssh-keyscan.c]
1466 do not assume malloc() returns zero-filled region. found by
1467 malloc.conf=AJ.
1468 - markus@cvs.openbsd.org 2001/02/08 22:35:30
1469 [sshconnect.c]
1470 don't connect if batch_mode is true and stricthostkeychecking set to
1471 'ask'
1472 - djm@cvs.openbsd.org 2001/02/04 21:26:07
1473 [sshd_config]
1474 type: ok markus@
1475 - deraadt@cvs.openbsd.org 2001/02/06 22:07:50
1476 [sshd_config]
1477 enable sftp-server by default
1478 - deraadt 2001/02/07 8:57:26
1479 [xmalloc.c]
1480 deal with new ANSI malloc stuff
1481 - markus@cvs.openbsd.org 2001/02/07 16:46:08
1482 [xmalloc.c]
1483 typo in fatal()
1484 - itojun@cvs.openbsd.org 2001/02/07 18:04:50
1485 [xmalloc.c]
1486 fix size_t -> int cast (use u_long). markus ok
1487 - 1.47 Thu Feb 8 23:11:42 GMT 2001 by dugsong
1488 [serverloop.c sshconnect1.c]
1489 mitigate SSH1 traffic analysis - from Solar Designer
1490 <solar@openwall.com>, ok provos@
1491 - (bal) fixed sftp-client.c. Return 'status' instead of '0'
1492 (from the OpenBSD tree)
1493 - (bal) Synced ssh.1, ssh-add.1 and sshd.8 w/ OpenBSD
1494 - (bal) sftp-sever.c '%8lld' to '%8llu' (OpenBSD Sync)
1495 - (bal) uuencode.c resync w/ OpenBSD tree, plus whitespace.
1496 - (bal) A bit more whitespace cleanup
1497 - (djm) Set PAM_RHOST earlier, patch from Andrew Bartlett
1498 <abartlet@pcug.org.au>
1499 - (stevesk) misc.c: ssh.h not needed.
1500 - (stevesk) compat.c: more friendly cpp error
1501 - (stevesk) OpenBSD sync:
1502 - stevesk@cvs.openbsd.org 2001/02/11 06:15:57
1503 [LICENSE]
1504 typos and small cleanup; ok deraadt@
1505
150620010210
1507 - (djm) Sync sftp and scp stuff from OpenBSD:
1508 - djm@cvs.openbsd.org 2001/02/07 03:55:13
1509 [sftp-client.c]
1510 Don't free handles before we are done with them. Based on work from
1511 Corinna Vinschen <vinschen@redhat.com>. ok markus@
1512 - djm@cvs.openbsd.org 2001/02/06 22:32:53
1513 [sftp.1]
1514 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
1515 - deraadt@cvs.openbsd.org 2001/02/07 04:07:29
1516 [sftp.1]
1517 pretty up significantly
1518 - itojun@cvs.openbsd.org 2001/02/07 06:49:42
1519 [sftp.1]
1520 .Bl-.El mismatch. markus ok
1521 - djm@cvs.openbsd.org 2001/02/07 06:12:30
1522 [sftp-int.c]
1523 Check that target is a directory before doing ls; ok markus@
1524 - itojun@cvs.openbsd.org 2001/02/07 11:01:18
1525 [scp.c sftp-client.c sftp-server.c]
1526 unsigned long long -> %llu, not %qu. markus ok
1527 - stevesk@cvs.openbsd.org 2001/02/07 11:10:39
1528 [sftp.1 sftp-int.c]
1529 more man page cleanup and sync of help text with man page; ok markus@
1530 - markus@cvs.openbsd.org 2001/02/07 14:58:34
1531 [sftp-client.c]
1532 older servers reply with SSH2_FXP_NAME + count==0 instead of EOF
1533 - djm@cvs.openbsd.org 2001/02/07 15:27:19
1534 [sftp.c]
1535 Don't forward agent and X11 in sftp. Suggestion from Roumen Petrov
1536 <roumen.petrov@skalasoft.com>
1537 - stevesk@cvs.openbsd.org 2001/02/07 15:36:04
1538 [sftp-int.c]
1539 portable; ok markus@
1540 - stevesk@cvs.openbsd.org 2001/02/07 15:55:47
1541 [sftp-int.c]
1542 lowercase cmds[].c also; ok markus@
1543 - markus@cvs.openbsd.org 2001/02/07 17:04:52
1544 [pathnames.h sftp.c]
1545 allow sftp over ssh protocol 1; ok djm@
1546 - deraadt@cvs.openbsd.org 2001/02/08 07:38:55
1547 [scp.c]
1548 memory leak fix, and snprintf throughout
1549 - deraadt@cvs.openbsd.org 2001/02/08 08:02:02
1550 [sftp-int.c]
1551 plug a memory leak
1552 - stevesk@cvs.openbsd.org 2001/02/08 10:11:23
1553 [session.c sftp-client.c]
1554 %i -> %d
1555 - stevesk@cvs.openbsd.org 2001/02/08 10:57:59
1556 [sftp-int.c]
1557 typo
1558 - stevesk@cvs.openbsd.org 2001/02/08 15:28:07
1559 [sftp-int.c pathnames.h]
1560 _PATH_LS; ok markus@
1561 - djm@cvs.openbsd.org 2001/02/09 04:46:25
1562 [sftp-int.c]
1563 Check for NULL attribs for chown, chmod & chgrp operations, only send
1564 relevant attribs back to server; ok markus@
1565 - djm@cvs.openbsd.org 2001/02/06 15:05:25
1566 [sftp.c]
1567 Use getopt to process commandline arguments
1568 - djm@cvs.openbsd.org 2001/02/06 15:06:21
1569 [sftp.c ]
1570 Wait for ssh subprocess at exit
1571 - djm@cvs.openbsd.org 2001/02/06 15:18:16
1572 [sftp-int.c]
1573 stat target for remote chdir before doing chdir
1574 - djm@cvs.openbsd.org 2001/02/06 15:32:54
1575 [sftp.1]
1576 Punctuation fix from Pekka Savola <pekkas@netcore.fi>
1577 - provos@cvs.openbsd.org 2001/02/05 22:22:02
1578 [sftp-int.c]
1579 cleanup get_pathname, fix pwd after failed cd. okay djm@
1580 - (djm) Update makefile.in for _PATH_SFTP_SERVER
1581 - (bal) sftp-client.c replace NULL w/ 0 in do_ls() (pending in OpenBSD tree)
1582
158320010209
1584 - (bal) patch to vis.c to deal with HAVE_VIS right by Robert Mooney
1585 <rjmooney@mediaone.net>
1586 - (bal) .c.o rule in openbsd-compat/Makefile.in did not make it to the
1587 main tree while porting forward. Pointed out by Lutz Jaenicke
1588 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
1589 - (bal) double entry in configure.in. Pointed out by Lutz Jaenicke
1590 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
1591 - (stevesk) OpenBSD sync:
1592 - markus@cvs.openbsd.org 2001/02/08 11:20:01
1593 [auth2.c]
1594 strict checking
1595 - markus@cvs.openbsd.org 2001/02/08 11:15:22
1596 [version.h]
1597 update to 2.3.2
1598 - markus@cvs.openbsd.org 2001/02/08 11:12:30
1599 [auth2.c]
1600 fix typo
1601 - (djm) Update spec files
1602 - (bal) OpenBSD sync:
1603 - deraadt@cvs.openbsd.org 2001/02/08 14:38:54
1604 [scp.c]
1605 memory leak fix, and snprintf throughout
1606 - markus@cvs.openbsd.org 2001/02/06 22:43:02
1607 [clientloop.c]
1608 remove confusing callback code
1609 - (djm) Add CVS Id's to files that we have missed
1610 - (bal) OpenBSD Sync (more):
1611 - itojun@cvs.openbsd.org 2001/02/08 19:30:52
1612 sync with netbsd tree changes.
1613 - more strict prototypes, include necessary headers
1614 - use paths.h/pathnames.h decls
1615 - size_t typecase to int -> u_long
1616 - markus@cvs.openbsd.org 2001/02/06 22:07:42
1617 [ssh.c]
1618 fatal() if subsystem fails
1619 - markus@cvs.openbsd.org 2001/02/06 22:43:02
1620 [ssh.c]
1621 remove confusing callback code
1622 - jakob@cvs.openbsd.org 2001/02/06 23:03:24
1623 [ssh.c]
1624 add -1 option (force protocol version 1). ok markus@
1625 - jakob@cvs.openbsd.org 2001/02/06 23:06:21
1626 [ssh.c]
1627 reorder -{1,2,4,6} options. ok markus@
1628 - (bal) Missing 'const' in readpass.h
1629 - (bal) OpenBSD Sync (so at least the thing compiles for 2.3.2 =)
1630 - djm@cvs.openbsd.org 2001/02/06 23:30:28
1631 [sftp-client.c]
1632 replace arc4random with counter for request ids; ok markus@
1633 - (djm) Define _PATH_TTY for systems that don't. Report from Lutz
1634 Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
1635
163620010208
1637 - (djm) Don't delete external askpass program in make uninstall target.
1638 Report and fix from Roumen Petrov <roumen.petrov@skalasoft.com>
1639 - (djm) Fix linking of sftp, don't need arc4random any more.
1640 - (djm) Try to use shell that supports "test -S" for EGD socket search.
1641 Based on patch from Tim Rice <tim@multitalents.net>
1642
164320010207
1644 - (bal) Save the whole path to AR in configure. Some Solaris 2.7 installs
1645 seem lose track of it while in openbsd-compat/ (two confirmed reports)
1646 - (djm) Much KNF on PAM code
1647 - (djm) Revise auth-pam.c conversation function to be a little more
1648 readable.
1649 - (djm) Revise kbd-int PAM conversation function to fold all text messages
1650 to before first prompt. Fixes hangs if last pam_message did not require
1651 a reply.
1652 - (djm) Fix password changing when using PAM kbd-int authentication
1653
165420010205
1655 - (bal) Disable groupaccess by setting NGROUPS_MAX to 0 for platforms
1656 that don't have NGROUPS_MAX.
1657 - (bal) AIX patch for auth1.c by William L. Jones <jones@hpc.utexas.edu>
1658 - (stevesk) OpenBSD sync:
1659 - stevesk@cvs.openbsd.org 2001/02/04 08:32:27
1660 [many files; did this manually to our top-level source dir]
1661 unexpand and remove end-of-line whitespace; ok markus@
1662 - stevesk@cvs.openbsd.org 2001/02/04 15:21:19
1663 [sftp-server.c]
1664 SSH2_FILEXFER_ATTR_UIDGID support; ok markus@
1665 - deraadt@cvs.openbsd.org 2001/02/04 17:02:32
1666 [sftp-int.c]
1667 ? == help
1668 - deraadt@cvs.openbsd.org 2001/02/04 16:47:46
1669 [sftp-int.c]
1670 sort commands, so that abbreviations work as expected
1671 - stevesk@cvs.openbsd.org 2001/02/04 15:17:52
1672 [sftp-int.c]
1673 debugging sftp: precedence and missing break. chmod, chown, chgrp
1674 seem to be working now.
1675 - markus@cvs.openbsd.org 2001/02/04 14:41:21
1676 [sftp-int.c]
1677 use base 8 for umask/chmod
1678 - markus@cvs.openbsd.org 2001/02/04 11:11:54
1679 [sftp-int.c]
1680 fix LCD
1681 - markus@cvs.openbsd.org 2001/02/04 08:10:44
1682 [ssh.1]
1683 typo; dpo@club-internet.fr
1684 - stevesk@cvs.openbsd.org 2001/02/04 06:30:12
1685 [auth2.c authfd.c packet.c]
1686 remove duplicate #include's; ok markus@
1687 - deraadt@cvs.openbsd.org 2001/02/04 16:56:23
1688 [scp.c sshd.c]
1689 alpha happiness
1690 - stevesk@cvs.openbsd.org 2001/02/04 15:12:17
1691 [sshd.c]
1692 precedence; ok markus@
1693 - deraadt@cvs.openbsd.org 2001/02/04 08:14:15
1694 [ssh.c sshd.c]
1695 make the alpha happy
1696 - markus@cvs.openbsd.org 2001/01/31 13:37:24
1697 [channels.c channels.h serverloop.c ssh.c]
1698 do not disconnect if local port forwarding fails, e.g. if port is
1699 already in use
1700 - markus@cvs.openbsd.org 2001/02/01 14:58:09
1701 [channels.c]
1702 use ipaddr in channel messages, ietf-secsh wants this
1703 - markus@cvs.openbsd.org 2001/01/31 12:26:20
1704 [channels.c]
1705 ssh.com-2.0.1x does not send additional info in CHANNEL_OPEN_FAILURE
1706 messages; bug report from edmundo@rano.org
1707 - markus@cvs.openbsd.org 2001/01/31 13:48:09
1708 [sshconnect2.c]
1709 unused
1710 - deraadt@cvs.openbsd.org 2001/02/04 08:23:08
1711 [sftp-client.c sftp-server.c]
1712 make gcc on the alpha even happier
1713
171420010204
1715 - (bal) I think this is the last of the bsd-*.h that don't belong.
1716 - (bal) Minor Makefile fix
1717 - (bal) openbsd-compat/Makefile minor fix. Ensure dependancies are done
1718 right.
1719 - (bal) Changed order of LIB="" in -with-skey due to library resolving.
1720 - (bal) next-posix.h changed to bsd-nextstep.h
1721 - (djm) OpenBSD CVS sync:
1722 - markus@cvs.openbsd.org 2001/02/03 03:08:38
1723 [auth-options.c auth-rh-rsa.c auth-rhosts.c auth.c canohost.c]
1724 [canohost.h servconf.c servconf.h session.c sshconnect1.c sshd.8]
1725 [sshd_config]
1726 make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@
1727 - markus@cvs.openbsd.org 2001/02/03 03:19:51
1728 [ssh.1 sshd.8 sshd_config]
1729 Skey is now called ChallengeResponse
1730 - markus@cvs.openbsd.org 2001/02/03 03:43:09
1731 [sshd.8]
1732 use no-pty option in .ssh/authorized_keys* if you need a 8-bit clean
1733 channel. note from Erik.Anggard@cygate.se (pr/1659)
1734 - stevesk@cvs.openbsd.org 2001/02/03 10:03:06
1735 [ssh.1]
1736 typos; ok markus@
1737 - djm@cvs.openbsd.org 2001/02/04 04:11:56
1738 [scp.1 sftp-server.c ssh.1 sshd.8 sftp-client.c sftp-client.h]
1739 [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c]
1740 Basic interactive sftp client; ok theo@
1741 - (djm) Update RPM specs for new sftp binary
1742 - (djm) Update several bits for new optional reverse lookup stuff. I
1743 think I got them all.
1744 - (djm) Makefile.in fixes
1745 - (stevesk) add mysignal() wrapper and use it for the protocol 2
1746 SIGCHLD handler.
1747 - (djm) Use setvbuf() instead of setlinebuf(). Suggest from stevesk@
1748
174920010203
1750 - (bal) Cygwin clean up by Corinna Vinschen <vinschen@redhat.com>
1751 - (bal) renamed queue.h to fake-queue.h (even if it's an OpenBSD
1752 based file) to ensure #include space does not get confused.
1753 - (bal) Minor Makefile.in tweak. dirname may not exist on some
1754 platforms so builds fail. (NeXT being a well known one)
1755
175620010202
1757 - (bal) Makefile fix where sourcedir != builddir by Corinna Vinschen
1758 <vinschen@redhat.com>
1759 - (bal) Makefile fix to use $(MAKE) instead of 'make' for platforms
1760 that use 'gmake'. Patch by Tim Rice <tim@multitalents.net>
1761
176220010201
1763 - (bal) Minor fix to Makefile to stop rebuilding executables if no
1764 changes have occured to any of the supporting code. Patch by
1765 Roumen Petrov <roumen.petrov@skalasoft.com>
1766
176720010131
1768 - (djm) OpenBSD CVS Sync:
1769 - djm@cvs.openbsd.org 2001/01/30 15:48:53
1770 [sshconnect.c]
1771 Make warning message a little more consistent. ok markus@
1772 - (djm) Fix autoconf logic for --with-lastlog=no Report and diagnosis from
1773 Philipp Buehler <lists@fips.de> and Kevin Steves <stevesk@sweden.hp.com>
1774 respectively.
1775 - (djm) Don't log SSH2 PAM KbdInt responses to debug, they may contain
1776 passwords.
1777 - (bal) Reorder. Move all bsd-*, fake-*, next-*, and cygwin* stuff to
1778 openbsd-compat/. And resolve all ./configure and Makefile.in issues
1779 assocated.
1780
178120010130
1782 - (djm) OpenBSD CVS Sync:
1783 - markus@cvs.openbsd.org 2001/01/29 09:55:37
1784 [channels.c channels.h clientloop.c serverloop.c]
1785 fix select overflow; ok deraadt@ and stevesk@
1786 - markus@cvs.openbsd.org 2001/01/29 12:42:35
1787 [canohost.c canohost.h channels.c clientloop.c]
1788 add get_peer_ipaddr(socket), x11-fwd in ssh2 requires ipaddr, not DNS
1789 - markus@cvs.openbsd.org 2001/01/29 12:47:32
1790 [rsa.c rsa.h ssh-agent.c sshconnect1.c sshd.c]
1791 handle rsa_private_decrypt failures; helps against the Bleichenbacher
1792 pkcs#1 attack
1793 - djm@cvs.openbsd.org 2001/01/29 05:36:11
1794 [ssh.1 ssh.c]
1795 Allow invocation of sybsystem by commandline (-s); ok markus@
1796 - (stevesk) configure.in: remove duplicate PROG_LS
1797
179820010129
1799 - (stevesk) sftp-server.c: use %lld vs. %qd
1800
180120010128
1802 - (bal) Put USE_PIPES back into sco3.2v5
1803 - (bal) OpenBSD Sync
1804 - markus@cvs.openbsd.org 2001/01/28 10:15:34
1805 [dispatch.c]
1806 re-keying is not supported; ok deraadt@
1807 - markus@cvs.openbsd.org 2001/01/28 10:24:04
1808 [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
1809 cleanup AUTHORS sections
1810 - markus@cvs.openbsd.org 2001/01/28 10:37:26
1811 [sshd.c sshd.8]
1812 remove -Q, no longer needed
1813 - stevesk@cvs.openbsd.org 2001/01/28 20:36:16
1814 [readconf.c ssh.1]
1815 ``StrictHostKeyChecking ask'' documentation and small cleanup.
1816 ok markus@
1817 - stevesk@cvs.openbsd.org 2001/01/28 20:43:25
1818 [sshd.8]
1819 spelling. ok markus@
1820 - stevesk@cvs.openbsd.org 2001/01/28 20:53:21
1821 [xmalloc.c]
1822 use size_t for strlen() return. ok markus@
1823 - stevesk@cvs.openbsd.org 2001/01/28 22:27:05
1824 [authfile.c]
1825 spelling. use sizeof vs. strlen(). ok markus@
1826 - niklas@cvs.openbsd.org 2001/01/29 1:59:14
1827 [atomicio.h canohost.h clientloop.h deattack.h dh.h dispatch.h
1828 groupaccess.c groupaccess.h hmac.h hostfile.h includes.h kex.h
1829 key.h log.h login.h match.h misc.h myproposal.h nchan.ms pathnames.h
1830 radix.h readpass.h rijndael.h serverloop.h session.h sftp.h ssh-add.1
1831 ssh-dss.h ssh-keygen.1 ssh-keyscan.1 ssh-rsa.h ssh1.h ssh_config
1832 sshconnect.h sshd_config tildexpand.h uidswap.h uuencode.h]
1833 $OpenBSD$
1834 - (bal) Minor auth2.c resync. Whitespace and moving of an #include.
1835
183620010126
1837 - (bal) SSH_PROGRAM vs _PATH_SSH_PROGRAM fix pointed out by Roumen
1838 Petrov <roumen.petrov@skalasoft.com>
1839 - (bal) OpenBSD Sync
1840 - deraadt@cvs.openbsd.org 2001/01/25 8:06:33
1841 [ssh-agent.c]
1842 call _exit() in signal handler
1843
184420010125
1845 - (djm) Sync bsd-* support files:
1846 - deraadt@cvs.openbsd.org 2000/01/26 03:43:20
1847 [rresvport.c bindresvport.c]
1848 new bindresvport() semantics that itojun, shin, jean-luc and i have
1849 agreed on, which will be happy for the future. bindresvport_sa() for
1850 sockaddr *, too. docs later..
1851 - deraadt@cvs.openbsd.org 2000/01/24 02:24:21
1852 [bindresvport.c]
1853 in bindresvport(), if sin is non-NULL, example sin->sin_family for
1854 the actual family being processed
1855 - (djm) Mention PRNGd in documentation, it is nicer than EGD
1856 - (djm) Automatically search for "well-known" EGD/PRNGd sockets in autoconf
1857 - (bal) AC_FUNC_STRFTIME added to autoconf
1858 - (bal) OpenBSD Resync
1859 - stevesk@cvs.openbsd.org 2001/01/24 21:03:50
1860 [channels.c]
1861 missing freeaddrinfo(); ok markus@
1862
186320010124
1864 - (bal) OpenBSD Resync
1865 - markus@cvs.openbsd.org 2001/01/23 10:45:10
1866 [ssh.h]
1867 nuke comment
1868 - (bal) no 64bit support patch from Tim Rice <tim@multitalents.net>
1869 - (bal) #ifdef around S_IFSOCK if platform does not support it.
1870 patch by Tim Rice <tim@multitalents.net>
1871 - (bal) fake-regex.h cleanup based on Tim Rice's patch.
1872 - (stevesk) sftp-server.c: fix chmod() mode mask
1873
187420010123
1875 - (bal) regexp.h typo in configure.in. Should have been regex.h
1876 - (bal) SSH_USER_DIR to _PATH_SSH_USER_DIR patch by stevesk@
1877 - (bal) SSH_ASKPASS_DEFAULT to _PATH_SSH_ASKPASS_DEFAULT
1878 - (bal) OpenBSD Resync
1879 - markus@cvs.openbsd.org 2001/01/22 8:15:00
1880 [auth-krb4.c sshconnect1.c]
1881 only AFS needs radix.[ch]
1882 - markus@cvs.openbsd.org 2001/01/22 8:32:53
1883 [auth2.c]
1884 no need to include; from mouring@etoh.eviladmin.org
1885 - stevesk@cvs.openbsd.org 2001/01/22 16:55:21
1886 [key.c]
1887 free() -> xfree(); ok markus@
1888 - stevesk@cvs.openbsd.org 2001/01/22 17:22:28
1889 [sshconnect2.c sshd.c]
1890 fix memory leaks in SSH2 key exchange; ok markus@
1891 - markus@cvs.openbsd.org 2001/01/22 23:06:39
1892 [auth1.c auth2.c readconf.c readconf.h servconf.c servconf.h
1893 sshconnect1.c sshconnect2.c sshd.c]
1894 rename skey -> challenge response.
1895 auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.
1896
1897
189820010122
1899 - (bal) OpenBSD Resync
1900 - markus@cvs.openbsd.org 2001/01/19 12:45:26 GMT 2001 by markus
1901 [servconf.c ssh.h sshd.c]
1902 only auth-chall.c needs #ifdef SKEY
1903 - markus@cvs.openbsd.org 2001/01/19 15:55:10 GMT 2001 by markus
1904 [auth-krb4.c auth-options.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
1905 auth1.c auth2.c channels.c clientloop.c dh.c dispatch.c nchan.c
1906 packet.c pathname.h readconf.c scp.c servconf.c serverloop.c
1907 session.c ssh-add.c ssh-keygen.c ssh-keyscan.c ssh.c ssh.h
1908 ssh1.h sshconnect1.c sshd.c ttymodes.c]
1909 move ssh1 definitions to ssh1.h, pathnames to pathnames.h
1910 - markus@cvs.openbsd.org 2001/01/19 16:48:14
1911 [sshd.8]
1912 fix typo; from stevesk@
1913 - markus@cvs.openbsd.org 2001/01/19 16:50:58
1914 [ssh-dss.c]
1915 clear and free digest, make consistent with other code (use dlen); from
1916 stevesk@
1917 - markus@cvs.openbsd.org 2001/01/20 15:55:20 GMT 2001 by markus
1918 [auth-options.c auth-options.h auth-rsa.c auth2.c]
1919 pass the filename to auth_parse_options()
1920 - markus@cvs.openbsd.org 2001/01/20 17:59:40 GMT 2001
1921 [readconf.c]
1922 fix SIGSEGV from -o ""; problem noted by jehsom@togetherweb.com
1923 - stevesk@cvs.openbsd.org 2001/01/20 18:20:29
1924 [sshconnect2.c]
1925 dh_new_group() does not return NULL. ok markus@
1926 - markus@cvs.openbsd.org 2001/01/20 21:33:42
1927 [ssh-add.c]
1928 do not loop forever if askpass does not exist; from
1929 andrew@pimlott.ne.mediaone.net
1930 - djm@cvs.openbsd.org 2001/01/20 23:00:56
1931 [servconf.c]
1932 Check for NULL return from strdelim; ok markus
1933 - djm@cvs.openbsd.org 2001/01/20 23:02:07
1934 [readconf.c]
1935 KNF; ok markus
1936 - jakob@cvs.openbsd.org 2001/01/21 9:00:33
1937 [ssh-keygen.1]
1938 remove -R flag; ok markus@
1939 - markus@cvs.openbsd.org 2001/01/21 19:05:40
1940 [atomicio.c automicio.h auth-chall.c auth-krb4.c auth-options.c
1941 auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
1942 auth.c auth.h auth1.c auth2-chall.c auth2.c authfd.c authfile.c
1943 bufaux.c bufaux.h buffer.c canahost.c canahost.h channels.c
1944 cipher.c cli.c clientloop.c clientloop.h compat.c compress.c
1945 deattack.c dh.c dispatch.c groupaccess.c hmac.c hostfile.c kex.c
1946 key.c key.h log-client.c log-server.c log.c log.h login.c login.h
1947 match.c misc.c misc.h nchan.c packet.c pty.c radix.h readconf.c
1948 readpass.c readpass.h rsa.c scp.c servconf.c serverloop.c serverloop.h
1949 session.c sftp-server.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c
1950 ssh-keyscan.c ssh-rsa.c ssh.c ssh.h sshconnect.c sshconnect.h
1951 sshconnect1.c sshconnect2.c sshd.c tildexpand.c tildexpand.h
1952 ttysmodes.c uidswap.c xmalloc.c]
1953 split ssh.h and try to cleanup the #include mess. remove unnecessary
1954 #includes. rename util.[ch] -> misc.[ch]
1955 - (bal) renamed 'PIDDIR' to '_PATH_SSH_PIDDIR' to match OpenBSD tree
1956 - (bal) Moved #ifdef KRB4 in auth-krb4.c above the #include to resolve
1957 conflict when compiling for non-kerb install
1958 - (bal) removed the #ifdef SKEY in auth1.c to match Markus' changes
1959 on 1/19.
1960
196120010120
1962 - (bal) OpenBSD Resync
1963 - markus@cvs.openbsd.org 2001/01/19 12:45:26
1964 [ssh-chall.c servconf.c servconf.h ssh.h sshd.c]
1965 only auth-chall.c needs #ifdef SKEY
1966 - (bal) Slight auth2-pam.c clean up.
1967 - (bal) Includes a fake-regexp.h to be only used if regcomp() is found,
1968 but no 'regexp.h' found (SCO OpenServer 3 lacks the header).
1969
197020010119
1971 - (djm) Update versions in RPM specfiles
1972 - (bal) OpenBSD Resync
1973 - markus@cvs.openbsd.org 2001/01/18 16:20:21
1974 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1 ssh.h
1975 sshd.8 sshd.c]
1976 log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many
1977 systems
1978 - markus@cvs.openbsd.org 2001/01/18 16:59:59
1979 [auth-passwd.c auth.c auth.h auth1.c auth2.c serverloop.c session.c
1980 session.h sshconnect1.c]
1981 1) removes fake skey from sshd, since this will be much
1982 harder with /usr/libexec/auth/login_XXX
1983 2) share/unify code used in ssh-1 and ssh-2 authentication (server side)
1984 3) make addition of BSD_AUTH and other challenge reponse methods
1985 easier.
1986 - markus@cvs.openbsd.org 2001/01/18 17:12:43
1987 [auth-chall.c auth2-chall.c]
1988 rename *-skey.c *-chall.c since the files are not skey specific
1989 - (djm) Merge patch from Tim Waugh (via Nalin Dahyabhai <nalin@redhat.com>)
1990 to fix NULL pointer deref and fake authloop breakage in PAM code.
1991 - (bal) Updated contrib/cygwin/ by Corinna Vinschen <vinschen@redhat.com>
1992 - (bal) Minor cygwin patch to auth1.c. Suggested by djm.
1993
199420010118
1995 - (bal) Super Sized OpenBSD Resync
1996 - markus@cvs.openbsd.org 2001/01/11 22:14:20 GMT 2001 by markus
1997 [sshd.c]
1998 maxfd+1
1999 - markus@cvs.openbsd.org 2001/01/13 17:59:18
2000 [ssh-keygen.1]
2001 small ssh-keygen manpage cleanup; stevesk@pobox.com
2002 - markus@cvs.openbsd.org 2001/01/13 18:03:07
2003 [scp.c ssh-keygen.c sshd.c]
2004 getopt() returns -1 not EOF; stevesk@pobox.com
2005 - markus@cvs.openbsd.org 2001/01/13 18:06:54
2006 [ssh-keyscan.c]
2007 use SSH_DEFAULT_PORT; from stevesk@pobox.com
2008 - markus@cvs.openbsd.org 2001/01/13 18:12:47
2009 [ssh-keyscan.c]
2010 free() -> xfree(); fix memory leak; from stevesk@pobox.com
2011 - markus@cvs.openbsd.org 2001/01/13 18:14:13
2012 [ssh-add.c]
2013 typo, from stevesk@sweden.hp.com
2014 - markus@cvs.openbsd.org 2001/01/13 18:32:50
2015 [packet.c session.c ssh.c sshconnect.c sshd.c]
2016 split out keepalive from packet_interactive (from dale@accentre.com)
2017 set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too.
2018 - markus@cvs.openbsd.org 2001/01/13 18:36:45
2019 [packet.c packet.h]
2020 reorder, typo
2021 - markus@cvs.openbsd.org 2001/01/13 18:38:00
2022 [auth-options.c]
2023 fix comment
2024 - markus@cvs.openbsd.org 2001/01/13 18:43:31
2025 [session.c]
2026 Wall
2027 - markus@cvs.openbsd.org 2001/01/13 19:14:08
2028 [clientloop.h clientloop.c ssh.c]
2029 move callback to headerfile
2030 - markus@cvs.openbsd.org 2001/01/15 21:40:10
2031 [ssh.c]
2032 use log() instead of stderr
2033 - markus@cvs.openbsd.org 2001/01/15 21:43:51
2034 [dh.c]
2035 use error() not stderr!
2036 - markus@cvs.openbsd.org 2001/01/15 21:45:29
2037 [sftp-server.c]
2038 rename must fail if newpath exists, debug off by default
2039 - markus@cvs.openbsd.org 2001/01/15 21:46:38
2040 [sftp-server.c]
2041 readable long listing for sftp-server, ok deraadt@
2042 - markus@cvs.openbsd.org 2001/01/16 19:20:06
2043 [key.c ssh-rsa.c]
2044 make "ssh-rsa" key format for ssh2 confirm to the ietf-drafts; from
2045 galb@vandyke.com. note that you have to delete older ssh2-rsa keys,
2046 since they are in the wrong format, too. they must be removed from
2047 .ssh/authorized_keys2 and .ssh/known_hosts2, etc.
2048 (cd; grep -v ssh-rsa .ssh/authorized_keys2 > TMP && mv TMP
2049 .ssh/authorized_keys2) additionally, we now check that
2050 BN_num_bits(rsa->n) >= 768.
2051 - markus@cvs.openbsd.org 2001/01/16 20:54:27
2052 [sftp-server.c]
2053 remove some statics. simpler handles; idea from nisse@lysator.liu.se
2054 - deraadt@cvs.openbsd.org 2001/01/16 23:58:08
2055 [bufaux.c radix.c sshconnect.h sshconnect1.c]
2056 indent
2057 - (bal) Added bsd-strmode.[ch] since some non-OpenBSD platforms may
2058 be missing such feature.
2059
2060
206120010117
2062 - (djm) Only write random seed file at exit
2063 - (djm) Make PAM support optional, enable with --with-pam
2064 - (djm) Try to use libcrypt on Linux, but link it after OpenSSL (which
2065 provides a crypt() of its own)
2066 - (djm) Avoid a warning in bsd-bindresvport.c
2067 - (djm) Try to avoid adding -I/usr/include to CPPFLAGS during SSL tests. This
2068 can cause weird segfaults errors on Solaris
2069 - (djm) Avoid warning in PAM code by making read_passphrase arguments const
2070 - (djm) Add --with-pam to RPM spec files
2071
207220010115
2073 - (bal) sftp-server.c change to use chmod() if fchmod() does not exist.
2074 - (bal) utimes() support via utime() interface on machine that lack utimes().
2075
207620010114
2077 - (stevesk) initial work for OpenBSD "support supplementary group in
2078 {Allow,Deny}Groups" patch:
2079 - import getgrouplist.c from OpenBSD (bsd-getgrouplist.c)
2080 - add bsd-getgrouplist.h
2081 - new files groupaccess.[ch]
2082 - build but don't use yet (need to merge auth.c changes)
2083 - (stevesk) complete:
2084 - markus@cvs.openbsd.org 2001/01/13 11:56:48
2085 [auth.c sshd.8]
2086 support supplementary group in {Allow,Deny}Groups
2087 from stevesk@pobox.com
2088
208920010112
2090 - (bal) OpenBSD Sync
2091 - markus@cvs.openbsd.org 2001/01/10 22:56:22
2092 [bufaux.h bufaux.c sftp-server.c sftp.h getput.h]
2093 cleanup sftp-server implementation:
2094 add buffer_get_int64, buffer_put_int64, GET_64BIT, PUT_64BIT
2095 parse SSH2_FILEXFER_ATTR_EXTENDED
2096 send SSH2_FX_EOF if readdir returns no more entries
2097 reply to SSH2_FXP_EXTENDED message
2098 use #defines from the draft
2099 move #definations to sftp.h
2100 more info:
2101 http://www.ietf.org/internet-drafts/draft-ietf-secsh-filexfer-00.txt
2102 - markus@cvs.openbsd.org 2001/01/10 19:43:20
2103 [sshd.c]
2104 XXX - generate_empheral_server_key() is not safe against races,
2105 because it calls log()
2106 - markus@cvs.openbsd.org 2001/01/09 21:19:50
2107 [packet.c]
2108 allow TCP_NDELAY for ipv6; from netbsd via itojun@
2109
211020010110
2111 - (djm) SNI/Reliant Unix needs USE_PIPES and $DISPLAY hack. Report from
2112 Bladt Norbert <Norbert.Bladt@adi.ch>
2113
211420010109
2115 - (bal) Resync CVS ID of cli.c
2116 - (stevesk) auth1.c: free should be after WITH_AIXAUTHENTICATE
2117 code.
2118 - (bal) OpenBSD Sync
2119 - markus@cvs.openbsd.org 2001/01/08 22:29:05
2120 [auth2.c compat.c compat.h servconf.c servconf.h sshd.8
2121 sshd_config version.h]
2122 implement option 'Banner /etc/issue.net' for ssh2, move version to
2123 2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
2124 is enabled).
2125 - markus@cvs.openbsd.org 2001/01/08 22:03:23
2126 [channels.c ssh-keyscan.c]
2127 O_NDELAY -> O_NONBLOCK; thanks stevesk@pobox.com
2128 - markus@cvs.openbsd.org 2001/01/08 21:55:41
2129 [sshconnect1.c]
2130 more cleanups and fixes from stevesk@pobox.com:
2131 1) try_agent_authentication() for loop will overwrite key just
2132 allocated with key_new(); don't alloc
2133 2) call ssh_close_authentication_connection() before exit
2134 try_agent_authentication()
2135 3) free mem on bad passphrase in try_rsa_authentication()
2136 - markus@cvs.openbsd.org 2001/01/08 21:48:17
2137 [kex.c]
2138 missing free; thanks stevesk@pobox.com
2139 - (bal) Detect if clock_t structure exists, if not define it.
2140 - (bal) Detect if O_NONBLOCK exists, if not define it.
2141 - (bal) removed news4-posix.h (now empty)
2142 - (bal) changed bsd-bindresvport.c and bsd-rresvport.c to use 'socklen_t'
2143 instead of 'int'
2144 - (stevesk) sshd_config: sync
2145 - (stevesk) defines.h: remove spurious ``;''
2146
214720010108
2148 - (bal) Fixed another typo in cli.c
2149 - (bal) OpenBSD Sync
2150 - markus@cvs.openbsd.org 2001/01/07 21:26:55
2151 [cli.c]
2152 typo
2153 - markus@cvs.openbsd.org 2001/01/07 21:26:55
2154 [cli.c]
2155 missing free, stevesk@pobox.com
2156 - markus@cvs.openbsd.org 2001/01/07 19:06:25
2157 [auth1.c]
2158 missing free, stevesk@pobox.com
2159 - markus@cvs.openbsd.org 2001/01/07 11:28:04
2160 [log-client.c log-server.c log.c readconf.c servconf.c ssh.1
2161 ssh.h sshd.8 sshd.c]
2162 rename SYSLOG_LEVEL_INFO->SYSLOG_LEVEL_NOTICE
2163 syslog priority changes:
2164 fatal() LOG_ERR -> LOG_CRIT
2165 log() LOG_INFO -> LOG_NOTICE
2166 - Updated TODO
2167
216820010107
2169 - (bal) OpenBSD Sync
2170 - markus@cvs.openbsd.org 2001/01/06 11:23:27
2171 [ssh-rsa.c]
2172 remove unused
2173 - itojun@cvs.openbsd.org 2001/01/05 08:23:29
2174 [ssh-keyscan.1]
2175 missing .El
2176 - markus@cvs.openbsd.org 2001/01/04 22:41:03
2177 [session.c sshconnect.c]
2178 consistent use of _PATH_BSHELL; from stevesk@pobox.com
2179 - djm@cvs.openbsd.org 2001/01/04 22:35:32
2180 [ssh.1 sshd.8]
2181 Mention AES as available SSH2 Cipher; ok markus
2182 - markus@cvs.openbsd.org 2001/01/04 22:25:58
2183 [sshd.c]
2184 sync usage()/man with defaults; from stevesk@pobox.com
2185 - markus@cvs.openbsd.org 2001/01/04 22:21:26
2186 [sshconnect2.c]
2187 handle SSH2_MSG_USERAUTH_BANNER; fixes bug when connecting to a server
2188 that prints a banner (e.g. /etc/issue.net)
2189
219020010105
2191 - (bal) contrib/caldera/ provided by Tim Rice <tim@multitalents.net>
2192 - (bal) bsd-getcwd.c and bsd-setenv.c changed from bcopy() to memmove()
2193
219420010104
2195 - (djm) Fix memory leak on systems with BROKEN_GETADDRINFO. Based on
2196 work by Chris Vaughan <vaughan99@yahoo.com>
2197
219820010103
2199 - (bal) fixed up sshconnect.c so it was closer inline with the OpenBSD
2200 tree (mainly positioning)
2201 - (bal) OpenSSH CVS Update
2202 - markus@cvs.openbsd.org 2001/01/02 20:41:02
2203 [packet.c]
2204 log remote ip on disconnect; PR 1600 from jcs@rt.fm
2205 - markus@cvs.openbsd.org 2001/01/02 20:50:56
2206 [sshconnect.c]
2207 strict_host_key_checking for host_status != HOST_CHANGED &&
2208 ip_status == HOST_CHANGED
2209 - (bal) authfile.c: Synced CVS ID tag
2210 - (bal) UnixWare 2.0 fixes by Tim Rice <tim@multitalents.net>
2211 - (bal) Disable sftp-server if no 64bit int support exists. Based on
2212 patch by Tim Rice <tim@multitalents.net>
2213 - (bal) Makefile.in changes to uninstall: target to remove sftp-server
2214 and sftp-server.8 manpage.
2215
221620010102
2217 - (bal) OpenBSD CVS Update
2218 - markus@cvs.openbsd.org 2001/01/01 14:52:49
2219 [scp.c]
2220 use shared fatal(); from stevesk@pobox.com
2221
222220001231
2223 - (bal) Reverted out of MAXHOSTNAMELEN. This should be set per OS.
2224 for multiple reasons.
2225 - (bal) Reverted out of a partial NeXT patch.
2226
222720001230
2228 - (bal) OpenBSD CVS Update
2229 - markus@cvs.openbsd.org 2000/12/28 18:58:30
2230 [ssh-keygen.c]
2231 enable 'ssh-keygen -l -f ~/.ssh/{authorized_keys,known_hosts}{,2}
2232 - markus@cvs.openbsd.org 2000/12/29 22:19:13
2233 [channels.c]
2234 missing xfree; from vaughan99@yahoo.com
2235 - (bal) Resynced CVS ID with OpenBSD for channel.c and uidswap.c
2236 - (bal) if no MAXHOSTNAMELEN is defined. Default to 64 character defination.
2237 Suggested by Christian Kurz <shorty@debian.org>
2238 - (bal) Add in '.c.o' section to Makefile.in to address make programs that
2239 don't honor CPPFLAGS by default. Suggested by Lutz Jaenicke
2240 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
2241
224220001229
2243 - (bal) Fixed spelling of 'authorized_keys' in ssh-copy-id.1 by Christian
2244 Kurz <shorty@debian.org>
2245 - (bal) OpenBSD CVS Update
2246 - markus@cvs.openbsd.org 2000/12/28 14:25:51
2247 [auth.h auth2.c]
2248 count authentication failures only
2249 - markus@cvs.openbsd.org 2000/12/28 14:25:03
2250 [sshconnect.c]
2251 fingerprint for MITM attacks, too.
2252 - markus@cvs.openbsd.org 2000/12/28 12:03:57
2253 [sshd.8 sshd.c]
2254 document -D
2255 - markus@cvs.openbsd.org 2000/12/27 14:19:21
2256 [serverloop.c]
2257 less chatty
2258 - markus@cvs.openbsd.org 2000/12/27 12:34
2259 [auth1.c sshconnect2.c sshd.c]
2260 typo
2261 - markus@cvs.openbsd.org 2000/12/27 12:30:19
2262 [readconf.c readconf.h ssh.1 sshconnect.c]
2263 new option: HostKeyAlias: allow the user to record the host key
2264 under a different name. This is useful for ssh tunneling over
2265 forwarded connections or if you run multiple sshd's on different
2266 ports on the same machine.
2267 - markus@cvs.openbsd.org 2000/12/27 11:51:53
2268 [ssh.1 ssh.c]
2269 multiple -t force pty allocation, document ORIGINAL_COMMAND
2270 - markus@cvs.openbsd.org 2000/12/27 11:41:31
2271 [sshd.8]
2272 update for ssh-2
2273 - (stevesk) compress.[ch] sync with openbsd; missed in prototype
2274 fix merge.
2275
227620001228
2277 - (bal) Patch to add libutil.h to loginrec.c only if the platform has
2278 libutil.h. Suggested by Pekka Savola <pekka@netcore.fi>
2279 - (djm) Update to new x11-askpass in RPM spec
2280 - (bal) SCO patch to not include <sys/queue.h> since it's unrelated
2281 header. Patch by Tim Rice <tim@multitalents.net>
2282 - Updated TODO w/ known HP/UX issue
2283 - (bal) removed extra <netdb.h> noticed by Kevin Steves and removed the
2284 bad reference to 'NeXT including it else were' on the #ifdef version.
2285
228620001227
2287 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
2288 Takumi Yamane <yamtak@b-session.com>
2289 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
2290 by Corinna Vinschen <vinschen@redhat.com>
2291 - (djm) Fix catman-do target for non-bash
2292 - (bal) Typo in configure.in: entut?ent should be endut?ent. Suggested by
2293 Takumi Yamane <yamtak@b-session.com>
2294 - (bal) Checks for getrlimit(), sysconf(), and setdtablesize(). Patch
2295 by Corinna Vinschen <vinschen@redhat.com>
2296 - (djm) Fix catman-do target for non-bash
2297 - (bal) Fixed NeXT's lack of CPPFLAGS honoring.
2298 - (bal) ssh-keyscan.c: NeXT (and older BSDs) don't support getrlimit() w/
2299 'RLIMIT_NOFILE'
2300 - (djm) Remove *.Ylonen files. They are no longer in the OpenBSD tree,
2301 the info in COPYING.Ylonen has been moved to the start of each
2302 SSH1-derived file and README.Ylonen is well out of date.
2303
230420001223
2305 - (bal) Fixed Makefile.in to support recompile of all ssh and sshd objects
2306 if a change to config.h has occurred. Suggested by Gert Doering
2307 <gert@greenie.muc.de>
2308 - (bal) OpenBSD CVS Update:
2309 - markus@cvs.openbsd.org 2000/12/22 16:49:40
2310 [ssh-keygen.c]
2311 fix ssh-keygen -x -t type > file; from Roumen.Petrov@skalasoft.com
2312
231320001222
2314 - Updated RCSID for pty.c
2315 - (bal) OpenBSD CVS Updates:
2316 - markus@cvs.openbsd.org 2000/12/21 15:10:16
2317 [auth-rh-rsa.c hostfile.c hostfile.h sshconnect.c]
2318 print keyfile:line for changed hostkeys, for deraadt@, ok deraadt@
2319 - markus@cvs.openbsd.org 2000/12/20 19:26:56
2320 [authfile.c]
2321 allow ssh -i userkey for root
2322 - markus@cvs.openbsd.org 2000/12/20 19:37:21
2323 [authfd.c authfd.h kex.c sshconnect2.c sshd.c uidswap.c uidswap.h]
2324 fix prototypes; from stevesk@pobox.com
2325 - markus@cvs.openbsd.org 2000/12/20 19:32:08
2326 [sshd.c]
2327 init pointer to NULL; report from Jan.Ivan@cern.ch
2328 - markus@cvs.openbsd.org 2000/12/19 23:17:54
2329 [auth-krb4.c auth-options.c auth-options.h auth-rhosts.c auth-rsa.c
2330 auth1.c auth2-skey.c auth2.c authfd.c authfd.h authfile.c bufaux.c
2331 bufaux.h buffer.c canohost.c channels.c clientloop.c compress.c
2332 crc32.c deattack.c getput.h hmac.c hmac.h hostfile.c kex.c kex.h
2333 key.c key.h log.c login.c match.c match.h mpaux.c mpaux.h packet.c
2334 packet.h radix.c readconf.c rsa.c scp.c servconf.c servconf.h
2335 serverloop.c session.c sftp-server.c ssh-agent.c ssh-dss.c ssh-dss.h
2336 ssh-keygen.c ssh-keyscan.c ssh-rsa.c ssh-rsa.h ssh.c ssh.h uuencode.c
2337 uuencode.h sshconnect1.c sshconnect2.c sshd.c tildexpand.c]
2338 replace 'unsigned bla' with 'u_bla' everywhere. also replace 'char
2339 unsigned' with u_char.
2340
234120001221
2342 - (stevesk) OpenBSD CVS updates:
2343 - markus@cvs.openbsd.org 2000/12/19 15:43:45
2344 [authfile.c channels.c sftp-server.c ssh-agent.c]
2345 remove() -> unlink() for consistency
2346 - markus@cvs.openbsd.org 2000/12/19 15:48:09
2347 [ssh-keyscan.c]
2348 replace <ssl/x.h> with <openssl/x.h>
2349 - markus@cvs.openbsd.org 2000/12/17 02:33:40
2350 [uidswap.c]
2351 typo; from wsanchez@apple.com
2352
235320001220
2354 - (djm) Workaround PAM inconsistencies between Solaris derived PAM code
2355 and Linux-PAM. Based on report and fix from Andrew Morgan
2356 <morgan@transmeta.com>
2357
235820001218
2359 - (stevesk) rsa.c: entropy.h not needed.
2360 - (bal) split CFLAGS into CFLAGS and CPPFLAGS in configure.in and Makefile.
2361 Suggested by Wilfredo Sanchez <wsanchez@apple.com>
2362
236320001216
2364 - (stevesk) OpenBSD CVS updates:
2365 - markus@cvs.openbsd.org 2000/12/16 02:53:57
2366 [scp.c]
2367 allow + in usernames; request from Florian.Weimer@RUS.Uni-Stuttgart.DE
2368 - markus@cvs.openbsd.org 2000/12/16 02:39:57
2369 [scp.c]
2370 unused; from stevesk@pobox.com
2371
237220001215
2373 - (stevesk) Old OpenBSD patch wasn't completely applied:
2374 - markus@cvs.openbsd.org 2000/01/24 22:11:20
2375 [scp.c]
2376 allow '.' in usernames; from jedgar@fxp.org
2377 - (stevesk) OpenBSD CVS updates:
2378 - markus@cvs.openbsd.org 2000/12/13 16:26:53
2379 [ssh-keyscan.c]
2380 fatal already adds \n; from stevesk@pobox.com
2381 - markus@cvs.openbsd.org 2000/12/13 16:25:44
2382 [ssh-agent.c]
2383 remove redundant spaces; from stevesk@pobox.com
2384 - ho@cvs.openbsd.org 2000/12/12 15:50:21
2385 [pty.c]
2386 When failing to set tty owner and mode on a read-only filesystem, don't
2387 abort if the tty already has correct owner and reasonably sane modes.
2388 Example; permit 'root' to login to a firewall with read-only root fs.
2389 (markus@ ok)
2390 - deraadt@cvs.openbsd.org 2000/12/13 06:36:05
2391 [pty.c]
2392 KNF
2393 - markus@cvs.openbsd.org 2000/12/12 14:45:21
2394 [sshd.c]
2395 source port < 1024 is no longer required for rhosts-rsa since it
2396 adds no additional security.
2397 - markus@cvs.openbsd.org 2000/12/12 16:11:49
2398 [ssh.1 ssh.c]
2399 rhosts-rsa is no longer automagically disabled if ssh is not privileged.
2400 UsePrivilegedPort=no disables rhosts-rsa _only_ for old servers.
2401 these changes should not change the visible default behaviour of the ssh client.
2402 - deraadt@cvs.openbsd.org 2000/12/11 10:27:33
2403 [scp.c]
2404 when copying 0-sized files, do not re-print ETA time at completion
2405 - provos@cvs.openbsd.org 2000/12/15 10:30:15
2406 [kex.c kex.h sshconnect2.c sshd.c]
2407 compute diffie-hellman in parallel between server and client. okay markus@
2408
240920001213
2410 - (djm) Make sure we reset the SIGPIPE disposition after we fork. Report
2411 from Andreas M. Kirchwitz <amk@krell.zikzak.de>
2412 - (stevesk) OpenBSD CVS update:
2413 - markus@cvs.openbsd.org 2000/12/12 15:30:02
2414 [ssh-keyscan.c ssh.c sshd.c]
2415 consistently use __progname; from stevesk@pobox.com
2416
241720001211
2418 - (bal) Applied patch to include ssh-keyscan into Redhat's package, and
2419 patch to install ssh-keyscan manpage. Patch by Pekka Savola
2420 <pekka@netcore.fi>
2421 - (bal) OpenbSD CVS update
2422 - markus@cvs.openbsd.org 2000/12/10 17:01:53
2423 [sshconnect1.c]
2424 always request new challenge for skey/tis-auth, fixes interop with
2425 other implementations; report from roth@feep.net
2426
242720001210
2428 - (bal) OpenBSD CVS updates
2429 - markus@cvs.openbsd.org 2000/12/09 13:41:51
2430 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
2431 undo rijndael changes
2432 - markus@cvs.openbsd.org 2000/12/09 13:48:31
2433 [rijndael.c]
2434 fix byte order bug w/o introducing new implementation
2435 - markus@cvs.openbsd.org 2000/12/09 14:08:27
2436 [sftp-server.c]
2437 "" -> "." for realpath; from vinschen@redhat.com
2438 - markus@cvs.openbsd.org 2000/12/09 14:06:54
2439 [ssh-agent.c]
2440 extern int optind; from stevesk@sweden.hp.com
2441 - provos@cvs.openbsd.org 2000/12/09 23:51:11
2442 [compat.c]
2443 remove unnecessary '\n'
2444
244520001209
2446 - (bal) OpenBSD CVS updates:
2447 - djm@cvs.openbsd.org 2000/12/07 4:24:59
2448 [ssh.1]
2449 Typo fix from Wilfredo Sanchez <wsanchez@apple.com>; ok theo
2450
245120001207
2452 - (bal) OpenBSD CVS updates:
2453 - markus@cvs.openbsd.org 2000/12/06 22:58:14
2454 [compat.c compat.h packet.c]
2455 disable debug messages for ssh.com/f-secure 2.0.1x, 2.1.0
2456 - markus@cvs.openbsd.org 2000/12/06 23:10:39
2457 [rijndael.c]
2458 unexpand(1)
2459 - markus@cvs.openbsd.org 2000/12/06 23:05:43
2460 [cipher.c cipher.h rijndael.c rijndael.h rijndael_boxes.h]
2461 new rijndael implementation. fixes endian bugs
2462
246320001206
2464 - (bal) OpenBSD CVS updates:
2465 - markus@cvs.openbsd.org 2000/12/05 20:34:09
2466 [channels.c channels.h clientloop.c serverloop.c]
2467 async connects for -R/-L; ok deraadt@
2468 - todd@cvs.openssh.org 2000/12/05 16:47:28
2469 [sshd.c]
2470 tweak comment to reflect real location of pid file; ok provos@
2471 - (stevesk) Import <sys/queue.h> from OpenBSD for systems that don't
2472 have it (used in ssh-keyscan).
2473 - (stevesk) OpenBSD CVS update:
2474 - markus@cvs.openbsd.org 2000/12/06 19:57:48
2475 [ssh-keyscan.c]
2476 err(3) -> internal error(), from stevesk@sweden.hp.com
2477
247820001205
2479 - (bal) OpenBSD CVS updates:
2480 - markus@cvs.openbsd.org 2000/12/04 19:24:02
2481 [ssh-keyscan.c ssh-keyscan.1]
2482 David Maziere's ssh-keyscan, ok niels@
2483 - (bal) Updated Makefile.in to include ssh-keyscan that was just added
2484 to the recent OpenBSD source tree.
2485 - (stevesk) fix typos in contrib/hpux/README
2486
248720001204
2488 - (bal) More C functions defined in NeXT that are unaccessable without
2489 defining -POSIX.
2490 - (bal) OpenBSD CVS updates:
2491 - markus@cvs.openbsd.org 2000/12/03 11:29:04
2492 [compat.c]
2493 remove fallback to SSH_BUG_HMAC now that the drafts are updated
2494 - markus@cvs.openbsd.org 2000/12/03 11:27:55
2495 [compat.c]
2496 correctly match "2.1.0.pl2 SSH" etc; from
2497 pekkas@netcore.fi/bugzilla.redhat
2498 - markus@cvs.openbsd.org 2000/12/03 11:15:03
2499 [auth2.c compat.c compat.h sshconnect2.c]
2500 support f-secure/ssh.com 2.0.12; ok niels@
2501
250220001203
2503 - (bal) OpenBSD CVS updates:
2504 - markus@cvs.openbsd.org 2000/11/30 22:54:31
2505 [channels.c]
2506 debug->warn if tried to do -R style fwd w/o client requesting this;
2507 ok neils@
2508 - markus@cvs.openbsd.org 2000/11/29 20:39:17
2509 [cipher.c]
2510 des_cbc_encrypt -> des_ncbc_encrypt since it already updates the IV
2511 - markus@cvs.openbsd.org 2000/11/30 18:33:05
2512 [ssh-agent.c]
2513 agents must not dump core, ok niels@
2514 - markus@cvs.openbsd.org 2000/11/30 07:04:02
2515 [ssh.1]
2516 T is for both protocols
2517 - markus@cvs.openbsd.org 2000/12/01 00:00:51
2518 [ssh.1]
2519 typo; from green@FreeBSD.org
2520 - markus@cvs.openbsd.org 2000/11/30 07:02:35
2521 [ssh.c]
2522 check -T before isatty()
2523 - provos@cvs.openbsd.org 2000/11/29 13:51:27
2524 [sshconnect.c]
2525 show IP address and hostname when new key is encountered. okay markus@
2526 - markus@cvs.openbsd.org 2000/11/30 22:53:35
2527 [sshconnect.c]
2528 disable agent/x11/port fwding if hostkey has changed; ok niels@
2529 - marksu@cvs.openbsd.org 2000/11/29 21:11:59
2530 [sshd.c]
2531 sshd -D, startup w/o deamon(), for monitoring scripts or inittab;
2532 from handler@sub-rosa.com and eric@urbanrange.com; ok niels@
2533 - (djm) Added patch from Nalin Dahyabhai <nalin@redhat.com> to enable
2534 PAM authentication using KbdInteractive.
2535 - (djm) Added another TODO
2536
253720001202
2538 - (bal) Backed out of part of Alain St-Denis' loginrec.c patch.
2539 - (bal) Irix need some sort of mansubdir, patch by Michael Stone
2540 <mstone@cs.loyola.edu>
2541
254220001129
2543 - (djm) Back out all the serverloop.c hacks. sshd will now hang again
2544 if there are background children with open fds.
2545 - (djm) bsd-rresvport.c bzero -> memset
2546 - (djm) Don't fail in defines.h on absence of 64 bit types (we will
2547 still fail during compilation of sftp-server).
2548 - (djm) Fail if ar is not found during configure
2549 - (djm) OpenBSD CVS updates:
2550 - provos@cvs.openbsd.org 2000/11/22 08:38:31
2551 [sshd.8]
2552 talk about /etc/primes, okay markus@
2553 - markus@cvs.openbsd.org 2000/11/23 14:03:48
2554 [ssh.c sshconnect1.c sshconnect2.c]
2555 complain about invalid ciphers for ssh1/ssh2, fall back to reasonable
2556 defaults
2557 - markus@cvs.openbsd.org 2000/11/25 09:42:53
2558 [sshconnect1.c]
2559 reorder check for illegal ciphers, bugreport from espie@
2560 - markus@cvs.openbsd.org 2000/11/25 10:19:34
2561 [ssh-keygen.c ssh.h]
2562 print keytype when generating a key.
2563 reasonable defaults for RSA1/RSA/DSA keys.
2564 - (djm) Patch from Pekka Savola <Pekka.Savola@netcore.fi> to include a few
2565 more manpage paths in fixpaths calls
2566 - (djm) Also add xauth path at Pekka's suggestion.
2567 - (djm) Add Redhat RPM patch for AUTHPRIV SyslogFacility
2568
256920001125
2570 - (djm) Give up privs when reading seed file
2571
257220001123
2573 - (bal) Merge OpenBSD changes:
2574 - markus@cvs.openbsd.org 2000/11/15 22:31:36
2575 [auth-options.c]
2576 case insensitive key options; from stevesk@sweeden.hp.com
2577 - markus@cvs.openbsd.org 2000/11/16 17:55:43
2578 [dh.c]
2579 do not use perror() in sshd, after child is forked()
2580 - markus@cvs.openbsd.org 2000/11/14 23:42:40
2581 [auth-rsa.c]
2582 parse option only if key matches; fix some confusing seen by the client
2583 - markus@cvs.openbsd.org 2000/11/14 23:44:19
2584 [session.c]
2585 check no_agent_forward_flag for ssh-2, too
2586 - markus@cvs.openbsd.org 2000/11/15
2587 [ssh-agent.1]
2588 reorder SYNOPSIS; typo, use .It
2589 - markus@cvs.openbsd.org 2000/11/14 23:48:55
2590 [ssh-agent.c]
2591 do not reorder keys if a key is removed
2592 - markus@cvs.openbsd.org 2000/11/15 19:58:08
2593 [ssh.c]
2594 just ignore non existing user keys
2595 - millert@cvs.openbsd.org 200/11/15 20:24:43
2596 [ssh-keygen.c]
2597 Add missing \n at end of error message.
2598
259920001122
2600 - (bal) Minor patch to ensure platforms lacking IRIX job limit supports
2601 are compilable.
2602 - (bal) Updated TODO as of 11/18/2000 with known things to resolve.
2603
260420001117
2605 - (bal) Changed from 'primes' to 'primes.out' for consistancy sake. It
2606 has no affect the output. Patch by Corinna Vinschen <vinschen@redhat.com>
2607 - (stevesk) Reworked progname support.
2608 - (bal) Misplaced #include "includes.h" in bsd-setproctitle.c. Patch by
2609 Shinichi Maruyama <marya@st.jip.co.jp>
2610
261120001116
2612 - (bal) Added in MAXSYMLINK test in bsd-realpath.c. Required for some SCO
2613 releases.
2614 - (bal) Make builds work outside of source tree. Patch by Mark D. Roth
2615 <roth@feep.net>
2616
261720001113
2618 - (djm) Add pointer to http://www.imasy.or.jp/~gotoh/connect.c to
2619 contrib/README
2620 - (djm) Merge OpenBSD changes:
2621 - markus@cvs.openbsd.org 2000/11/06 16:04:56
2622 [channels.c channels.h clientloop.c nchan.c serverloop.c]
2623 [session.c ssh.c]
2624 agent forwarding and -R for ssh2, based on work from
2625 jhuuskon@messi.uku.fi
2626 - markus@cvs.openbsd.org 2000/11/06 16:13:27
2627 [ssh.c sshconnect.c sshd.c]
2628 do not disabled rhosts(rsa) if server port > 1024; from
2629 pekkas@netcore.fi
2630 - markus@cvs.openbsd.org 2000/11/06 16:16:35
2631 [sshconnect.c]
2632 downgrade client to 1.3 if server is 1.4; help from mdb@juniper.net
2633 - markus@cvs.openbsd.org 2000/11/09 18:04:40
2634 [auth1.c]
2635 typo; from mouring@pconline.com
2636 - markus@cvs.openbsd.org 2000/11/12 12:03:28
2637 [ssh-agent.c]
2638 off-by-one when removing a key from the agent
2639 - markus@cvs.openbsd.org 2000/11/12 12:50:39
2640 [auth-rh-rsa.c auth2.c authfd.c authfd.h]
2641 [authfile.c hostfile.c kex.c kex.h key.c key.h myproposal.h]
2642 [readconf.c readconf.h rsa.c rsa.h servconf.c servconf.h ssh-add.c]
2643 [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config]
2644 [sshconnect1.c sshconnect2.c sshd.8 sshd.c sshd_config ssh-dss.c]
2645 [ssh-dss.h ssh-rsa.c ssh-rsa.h dsa.c dsa.h]
2646 add support for RSA to SSH2. please test.
2647 there are now 3 types of keys: RSA1 is used by ssh-1 only,
2648 RSA and DSA are used by SSH2.
2649 you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
2650 keys for SSH2 and use the RSA keys for hostkeys or for user keys.
2651 SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.
2652 - (djm) Fix up Makefile and Redhat init script to create RSA host keys
2653 - (djm) Change to interim version
2654 - (djm) Fix RPM spec file stupidity
2655 - (djm) fixpaths to DSA and RSA keys too
2656
265720001112
2658 - (bal) SCO Patch to add needed libraries for configure.in. Patch by
2659 Phillips Porch <root@theporch.com>
2660 - (bal) IRIX patch to adding Job Limits. Patch by Denis Parker
2661 <dcp@sgi.com>
2662 - (stevesk) pty.c: HP-UX 10 and 11 don't define TIOCSCTTY. Add error() to
2663 failed ioctl(TIOCSCTTY) call.
2664
266520001111
2666 - (djm) Added /etc/primes for kex DH group neg, fixup Makefile.in and
2667 packaging files
2668 - (djm) Fix new Makefile.in warnings
2669 - (djm) Fix vsprintf("%h") in bsd-snprintf.c, short int va_args are
2670 promoted to type int. Report and fix from Dan Astoorian
2671 <djast@cs.toronto.edu>
2672 - (djm) Hardwire sysconfdir in RPM spec files as some RPM versions get
2673 it wrong. Report from Bennett Todd <bet@rahul.net>
2674
267520001110
2676 - (bal) Fixed dropped answer from skey_keyinfo() in auth1.c
2677 - (bal) Changed from --with-skey to --with-skey=PATH in configure.in
2678 - (bal) Added in check to verify S/Key library is being detected in
2679 configure.in
2680 - (bal) next-posix.h - added another prototype wrapped in POSIX ifdef/endif.
2681 Patch by Mark Miller <markm@swoon.net>
2682 - (bal) Added 'util.h' header to loginrec.c only if HAVE_UTIL_H is defined
2683 to remove warnings under MacOS X. Patch by Mark Miller <markm@swoon.net>
2684 - (bal) Fixed LDFLAG mispelling in configure.in for --with-afs
2685
268620001107
2687 - (bal) acconfig.in - removed the double "USE_PIPES" entry. Patch by
2688 Mark Miller <markm@swoon.net>
2689 - (bal) sshd.init files corrected to assign $? to RETVAL. Patch by
2690 Jarno Huuskonen <jhuuskon@messi.uku.fi>
2691 - (bal) fixpaths fixed to stop it from quitely failing. Patch by
2692 Mark D. Roth <roth@feep.net>
2693
269420001106
2695 - (djm) Use Jim's new 1.0.3 askpass in Redhat RPMs
2696 - (djm) Manually fix up missed diff hunks (mainly RCS idents)
2697 - (djm) Remove UPGRADING document in favour of a link to the better
2698 maintained FAQ on www.openssh.com
2699 - (djm) Fix multiple dependancy on gnome-libs from Pekka Savola
2700 <pekkas@netcore.fi>
2701 - (djm) Don't need X11-askpass in RPM spec file if building without it
2702 from Pekka Savola <pekkas@netcore.fi>
2703 - (djm) Release 2.3.0p1
2704 - (bal) typo in configure.in in regards to --with-ldflags from Marko
2705 Asplund <aspa@kronodoc.fi>
2706 - (bal) fixed next-posix.h. Forgot prototype of getppid().
2707
270820001105
2709 - (bal) Sync with OpenBSD:
2710 - markus@cvs.openbsd.org 2000/10/31 9:31:58
2711 [compat.c]
2712 handle all old openssh versions
2713 - markus@cvs.openbsd.org 2000/10/31 13:1853
2714 [deattack.c]
2715 so that large packets do not wrap "n"; from netbsd
2716 - (bal) rijndel.c - fix up RCSID to match OpenBSD tree
2717 - (bal) auth2-skey.c - Checked in. Missing from portable tree.
2718 - (bal) Reworked NEWS-OS and NeXT ports to extract waitpid() and
2719 setsid() into more common files
2720 - (stevesk) pty.c: use __hpux to identify HP-UX.
2721 - (bal) Missed auth-skey.o in Makefile.in and minor correction to
2722 bsd-waitpid.c
2723
272420001029
2725 - (stevesk) Fix typo in auth.c: USE_PAM not PAM
2726 - (stevesk) Create contrib/cygwin/ directory; patch from
2727 Corinna Vinschen <vinschen@redhat.com>
2728 - (bal) Resolved more $xno and $xyes issues in configure.in
2729 - (bal) next-posix.h - spelling and forgot a prototype
2730
273120001028
2732 - (djm) fix select hack in serverloop.c from Philippe WILLEM
2733 <Philippe.WILLEM@urssaf.fr>
2734 - (djm) Fix mangled AIXAUTHENTICATE code
2735 - (djm) authctxt->pw may be NULL. Fix from Markus Friedl
2736 <markus.friedl@informatik.uni-erlangen.de>
2737 - (djm) Sync with OpenBSD:
2738 - markus@cvs.openbsd.org 2000/10/16 15:46:32
2739 [ssh.1]
2740 fixes from pekkas@netcore.fi
2741 - markus@cvs.openbsd.org 2000/10/17 14:28:11
2742 [atomicio.c]
2743 return number of characters processed; ok deraadt@
2744 - markus@cvs.openbsd.org 2000/10/18 12:04:02
2745 [atomicio.c]
2746 undo
2747 - markus@cvs.openbsd.org 2000/10/18 12:23:02
2748 [scp.c]
2749 replace atomicio(read,...) with read(); ok deraadt@
2750 - markus@cvs.openbsd.org 2000/10/18 12:42:00
2751 [session.c]
2752 restore old record login behaviour
2753 - deraadt@cvs.openbsd.org 2000/10/19 10:41:13
2754 [auth-skey.c]
2755 fmt string problem in unused code
2756 - provos@cvs.openbsd.org 2000/10/19 10:45:16
2757 [sshconnect2.c]
2758 don't reference freed memory. okay deraadt@
2759 - markus@cvs.openbsd.org 2000/10/21 11:04:23
2760 [canohost.c]
2761 typo, eramore@era-t.ericsson.se; ok niels@
2762 - markus@cvs.openbsd.org 2000/10/23 13:31:55
2763 [cipher.c]
2764 non-alignment dependent swap_bytes(); from
2765 simonb@wasabisystems.com/netbsd
2766 - markus@cvs.openbsd.org 2000/10/26 12:38:28
2767 [compat.c]
2768 add older vandyke products
2769 - markus@cvs.openbsd.org 2000/10/27 01:32:19
2770 [channels.c channels.h clientloop.c serverloop.c session.c]
2771 [ssh.c util.c]
2772 enable non-blocking IO on channels, and tty's (except for the
2773 client ttys).
2774
277520001027
2776 - (djm) Increase REKEY_BYTES to 2^24 for arc4random
2777
277820001025
2779 - (djm) Added WARNING.RNG file and modified configure to ask users of the
2780 builtin entropy code to read it.
2781 - (djm) Prefer builtin regex to PCRE.
2782 - (bal) Added USE_PIPS defined to NeXT configure.in since scp hangs randomly.
2783 - (bal) Apply fixes to configure.in pointed out by Pavel Roskin
2784 <proski@gnu.org>
2785
278620001020
2787 - (djm) Don't define _REENTRANT for SNI/Reliant Unix
2788 - (bal) Imported NEWS-OS waitpid() macros into NeXT. Since implementation
2789 is more correct then current version.
2790
279120001018
2792 - (stevesk) Add initial support for setproctitle(). Current
2793 support is for the HP-UX pstat(PSTAT_SETCMD, ...) method.
2794 - (stevesk) Add egd startup scripts to contrib/hpux/
2795
279620001017
2797 - (djm) Add -lregex to cywin libs from Corinna Vinschen
2798 <vinschen@cygnus.com>
2799 - (djm) Don't rely on atomicio's retval to determine length of askpass
2800 supplied passphrase. Problem report from Lutz Jaenicke
2801 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
2802 - (bal) Changed from GNU rx to PCRE on suggestion from djm.
2803 - (bal) Integrated Sony NEWS-OS patches from NAKAJI Hirouyuki
2804 <nakaji@tutrp.tut.ac.jp>
2805
280620001016
2807 - (djm) Sync with OpenBSD:
2808 - markus@cvs.openbsd.org 2000/10/14 04:01:15
2809 [cipher.c]
2810 debug3
2811 - markus@cvs.openbsd.org 2000/10/14 04:07:23
2812 [scp.c]
2813 remove spaces from arguments; from djm@mindrot.org
2814 - markus@cvs.openbsd.org 2000/10/14 06:09:46
2815 [ssh.1]
2816 Cipher is for SSH-1 only
2817 - markus@cvs.openbsd.org 2000/10/14 06:12:09
2818 [servconf.c servconf.h serverloop.c session.c sshd.8]
2819 AllowTcpForwarding; from naddy@
2820 - markus@cvs.openbsd.org 2000/10/14 06:16:56
2821 [auth2.c compat.c compat.h sshconnect2.c version.h]
2822 OpenSSH_2.3; note that is is not complete, but the version number
2823 needs to be changed for interoperability reasons
2824 - markus@cvs.openbsd.org 2000/10/14 06:19:45
2825 [auth-rsa.c]
2826 do not send RSA challenge if key is not allowed by key-options; from
2827 eivind@ThinkSec.com
2828 - markus@cvs.openbsd.org 2000/10/15 08:14:01
2829 [rijndael.c session.c]
2830 typos; from stevesk@sweden.hp.com
2831 - markus@cvs.openbsd.org 2000/10/15 08:18:31
2832 [rijndael.c]
2833 typo
2834 - (djm) Copy manpages back over from OpenBSD - too tedious to wade
2835 through diffs
2836 - (djm) Added condrestart to Redhat init script. Patch from Pekka Savola
2837 <pekkas@netcore.fi>
2838 - (djm) Update version in Redhat spec file
2839 - (djm) Merge some of Nalin Dahyabhai <nalin@redhat.com> changes from the
2840 Redhat 7.0 spec file
2841 - (djm) Make inability to read/write PRNG seedfile non-fatal
2842
2843
284420001015
2845 - (djm) Fix ssh2 hang on background processes at logout.
2846
284720001014
2848 - (bal) Add support for realpath and getcwd for platforms with broken
2849 or missing realpath implementations for sftp-server.
2850 - (bal) Corrected mistake in INSTALL in regards to GNU rx library
2851 - (bal) Add support for GNU rx library for those lacking regexp support
2852 - (djm) Don't accept PAM_PROMPT_ECHO_ON messages during initial auth
2853 - (djm) Revert SSH2 serverloop hack, will find a better way.
2854 - (djm) Add workaround for Linux 2.4's gratuitious errno change. Patch
2855 from Martin Johansson <fatbob@acc.umu.se>
2856 - (djm) Big OpenBSD sync:
2857 - markus@cvs.openbsd.org 2000/09/30 10:27:44
2858 [log.c]
2859 allow loglevel debug
2860 - markus@cvs.openbsd.org 2000/10/03 11:59:57
2861 [packet.c]
2862 hmac->mac
2863 - markus@cvs.openbsd.org 2000/10/03 12:03:03
2864 [auth-krb4.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth1.c]
2865 move fake-auth from auth1.c to individual auth methods, disables s/key in
2866 debug-msg
2867 - markus@cvs.openbsd.org 2000/10/03 12:16:48
2868 ssh.c
2869 do not resolve canonname, i have no idea why this was added oin ossh
2870 - markus@cvs.openbsd.org 2000/10/09 15:30:44
2871 ssh-keygen.1 ssh-keygen.c
2872 -X now reads private ssh.com DSA keys, too.
2873 - markus@cvs.openbsd.org 2000/10/09 15:32:34
2874 auth-options.c
2875 clear options on every call.
2876 - markus@cvs.openbsd.org 2000/10/09 15:51:00
2877 authfd.c authfd.h
2878 interop with ssh-agent2, from <res@shore.net>
2879 - markus@cvs.openbsd.org 2000/10/10 14:20:45
2880 compat.c
2881 use rexexp for version string matching
2882 - provos@cvs.openbsd.org 2000/10/10 22:02:18
2883 [kex.c kex.h myproposal.h ssh.h ssh2.h sshconnect2.c sshd.c dh.c dh.h]
2884 First rough implementation of the diffie-hellman group exchange. The
2885 client can ask the server for bigger groups to perform the diffie-hellman
2886 in, thus increasing the attack complexity when using ciphers with longer
2887 keys. University of Windsor provided network, T the company.
2888 - markus@cvs.openbsd.org 2000/10/11 13:59:52
2889 [auth-rsa.c auth2.c]
2890 clear auth options unless auth sucessfull
2891 - markus@cvs.openbsd.org 2000/10/11 14:00:27
2892 [auth-options.h]
2893 clear auth options unless auth sucessfull
2894 - markus@cvs.openbsd.org 2000/10/11 14:03:27
2895 [scp.1 scp.c]
2896 support 'scp -o' with help from mouring@pconline.com
2897 - markus@cvs.openbsd.org 2000/10/11 14:11:35
2898 [dh.c]
2899 Wall
2900 - markus@cvs.openbsd.org 2000/10/11 14:14:40
2901 [auth.h auth2.c readconf.c readconf.h readpass.c servconf.c servconf.h]
2902 [ssh.h sshconnect2.c sshd_config auth2-skey.c cli.c cli.h]
2903 add support for s/key (kbd-interactive) to ssh2, based on work by
2904 mkiernan@avantgo.com and me
2905 - markus@cvs.openbsd.org 2000/10/11 14:27:24
2906 [auth.c auth1.c auth2.c authfile.c cipher.c cipher.h kex.c kex.h]
2907 [myproposal.h packet.c readconf.c session.c ssh.c ssh.h sshconnect1.c]
2908 [sshconnect2.c sshd.c]
2909 new cipher framework
2910 - markus@cvs.openbsd.org 2000/10/11 14:45:21
2911 [cipher.c]
2912 remove DES
2913 - markus@cvs.openbsd.org 2000/10/12 03:59:20
2914 [cipher.c cipher.h sshconnect1.c sshconnect2.c sshd.c]
2915 enable DES in SSH-1 clients only
2916 - markus@cvs.openbsd.org 2000/10/12 08:21:13
2917 [kex.h packet.c]
2918 remove unused
2919 - markus@cvs.openbsd.org 2000/10/13 12:34:46
2920 [sshd.c]
2921 Kludge for F-Secure Macintosh < 1.0.2; appro@fy.chalmers.se
2922 - markus@cvs.openbsd.org 2000/10/13 12:59:15
2923 [cipher.c cipher.h myproposal.h rijndael.c rijndael.h]
2924 rijndael/aes support
2925 - markus@cvs.openbsd.org 2000/10/13 13:10:54
2926 [sshd.8]
2927 more info about -V
2928 - markus@cvs.openbsd.org 2000/10/13 13:12:02
2929 [myproposal.h]
2930 prefer no compression
2931 - (djm) Fix scp user@host handling
2932 - (djm) Don't clobber ssh_prng_cmds on install
2933 - (stevesk) Include config.h in rijndael.c so we define intXX_t and
2934 u_intXX_t types on all platforms.
2935 - (stevesk) rijndael.c: cleanup missing declaration warnings.
2936 - (stevesk) ~/.hushlogin shouldn't cause required password change to
2937 be bypassed.
2938 - (stevesk) Display correct path to ssh-askpass in configure output.
2939 Report from Lutz Jaenicke.
2940
294120001007
2942 - (stevesk) Print PAM return value in PAM log messages to aid
2943 with debugging.
2944 - (stevesk) Fix detection of pw_class struct member in configure;
2945 patch from KAMAHARA Junzo <kamahara@cc.kshosen.ac.jp>
2946
294720001002
2948 - (djm) Fix USER_PATH, report from Kevin Steves <stevesk@sweden.hp.com>
2949 - (djm) Add host system and CC to end-of-configure report. Suggested by
2950 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
2951
295220000931
2953 - (djm) Cygwin fixes from Corinna Vinschen <vinschen@cygnus.com>
2954
295520000930
2956 - (djm) Irix ssh_prng_cmds path fix from Pekka Savola <pekkas@netcore.fi>
2957 - (djm) Support in bsd-snprintf.c for long long conversions from
2958 Ben Lindstrom <mouring@pconline.com>
2959 - (djm) Cleanup NeXT support from Ben Lindstrom <mouring@pconline.com>
2960 - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with
2961 very short lived X connections. Bug report from Tobias Oetiker
2962 <oetiker@ee.ethz.ch>. Fix from Markus Friedl <markus@cvs.openbsd.org>
2963 - (djm) Add recent InitScripts as a RPM dependancy for openssh-server
2964 patch from Pekka Savola <pekkas@netcore.fi>
2965 - (djm) Forgot to cvs add LICENSE file
2966 - (djm) Add LICENSE to RPM spec files
2967 - (djm) CVS OpenBSD sync:
2968 - markus@cvs.openbsd.org 2000/09/26 13:59:59
2969 [clientloop.c]
2970 use debug2
2971 - markus@cvs.openbsd.org 2000/09/27 15:41:34
2972 [auth2.c sshconnect2.c]
2973 use key_type()
2974 - markus@cvs.openbsd.org 2000/09/28 12:03:18
2975 [channels.c]
2976 debug -> debug2 cleanup
2977 - (djm) Irix strips "/dev/tty" from [uw]tmp entries (other systems only
2978 strip "/dev/"). Fix loginrec.c based on patch from Alain St-Denis
2979 <Alain.St-Denis@ec.gc.ca>
2980 - (djm) Fix 9 character passphrase failure with gnome-ssh-askpass.
2981 Problem was caused by interrupted read in ssh-add. Report from Donald
2982 J. Barry <don@astro.cornell.edu>
2983
298420000929
2985 - (djm) Fix SSH2 not terminating until all background tasks done problem.
2986 - (djm) Another off-by-one fix from Pavel Kankovsky
2987 <peak@argo.troja.mff.cuni.cz>
2988 - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code,
2989 tidy necessary differences. Use Markus' new debugN() in entropy.c
2990 - (djm) Merged big SCO portability patch from Tim Rice
2991 <tim@multitalents.net>
2992
299320000926
2994 - (djm) Update X11-askpass to 1.0.2 in RPM spec file
2995 - (djm) Define _REENTRANT to pickup strtok_r() on HP/UX
2996 - (djm) Security: fix off-by-one buffer overrun in fake-getnameinfo.c.
2997 Report and fix from Pavel Kankovsky <peak@argo.troja.mff.cuni.cz>
2998
299920000924
3000 - (djm) Merged cleanup patch from Mark Miller <markm@swoon.net>
3001 - (djm) A bit more cleanup - created cygwin_util.h
3002 - (djm) Include strtok_r() from OpenBSD libc. Fixes report from Mark Miller
3003 <markm@swoon.net>
3004
300520000923
3006 - (djm) Fix address logging in utmp from Kevin Steves
3007 <stevesk@sweden.hp.com>
3008 - (djm) Redhat spec and manpage fixes from Pekka Savola <pekkas@netcore.fi>
3009 - (djm) Seperate tests for int64_t and u_int64_t types
3010 - (djm) Tweak password expiry checking at suggestion of Kevin Steves
3011 <stevesk@sweden.hp.com>
3012 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
3013 - (djm) Use printf %lld instead of %qd in sftp-server.c. Fix from
3014 Michael Stone <mstone@cs.loyola.edu>
3015 - (djm) OpenBSD CVS sync:
3016 - markus@cvs.openbsd.org 2000/09/17 09:38:59
3017 [sshconnect2.c sshd.c]
3018 fix DEBUG_KEXDH
3019 - markus@cvs.openbsd.org 2000/09/17 09:52:51
3020 [sshconnect.c]
3021 yes no; ok niels@
3022 - markus@cvs.openbsd.org 2000/09/21 04:55:11
3023 [sshd.8]
3024 typo
3025 - markus@cvs.openbsd.org 2000/09/21 05:03:54
3026 [serverloop.c]
3027 typo
3028 - markus@cvs.openbsd.org 2000/09/21 05:11:42
3029 scp.c
3030 utime() to utimes(); mouring@pconline.com
3031 - markus@cvs.openbsd.org 2000/09/21 05:25:08
3032 sshconnect2.c
3033 change login logic in ssh2, allows plugin of other auth methods
3034 - markus@cvs.openbsd.org 2000/09/21 05:25:35
3035 [auth2.c channels.c channels.h clientloop.c dispatch.c dispatch.h]
3036 [serverloop.c]
3037 add context to dispatch_run
3038 - markus@cvs.openbsd.org 2000/09/21 05:07:52
3039 authfd.c authfd.h ssh-agent.c
3040 bug compat for old ssh.com software
3041
304220000920
3043 - (djm) Fix bad path substitution. Report from Andrew Miner
3044 <asminer@cs.iastate.edu>
3045
304620000916
3047 - (djm) Fix SSL search order from Lutz Jaenicke
3048 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3049 - (djm) New SuSE spec from Corinna Vinschen <corinna@vinschen.de>
3050 - (djm) Update CygWin support from Corinna Vinschen <vinschen@cygnus.com>
3051 - (djm) Use a real struct sockaddr inside the fake struct sockaddr_storage.
3052 Patch from Larry Jones <larry.jones@sdrc.com>
3053 - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM
3054 password change patch.
3055 - (djm) Bring licenses on my stuff in line with OpenBSD's
3056 - (djm) Cleanup auth-passwd.c and unify HP/UX authentication. Patch from
3057 Kevin Steves <stevesk@sweden.hp.com>
3058 - (djm) Shadow expiry check fix from Pavel Troller <patrol@omni.sinus.cz>
3059 - (djm) Re-enable int64_t types - we need them for sftp
3060 - (djm) Use libexecdir from configure , rather than libexecdir/ssh
3061 - (djm) Update Redhat SPEC file accordingly
3062 - (djm) Add Kevin Steves <stevesk@sweden.hp.com> HP/UX contrib files
3063 - (djm) Add Charles Levert <charles@comm.polymtl.ca> getpgrp patch
3064 - (djm) Fix password auth on HP/UX 10.20. Patch from Dirk De Wachter
3065 <Dirk.DeWachter@rug.ac.be>
3066 - (djm) Fixprogs and entropy list fixes from Larry Jones
3067 <larry.jones@sdrc.com>
3068 - (djm) Fix for SuSE spec file from Takashi YOSHIDA
3069 <tyoshida@gemini.rc.kyushu-u.ac.jp>
3070 - (djm) Merge OpenBSD changes:
3071 - markus@cvs.openbsd.org 2000/09/05 02:59:57
3072 [session.c]
3073 print hostname (not hushlogin)
3074 - markus@cvs.openbsd.org 2000/09/05 13:18:48
3075 [authfile.c ssh-add.c]
3076 enable ssh-add -d for DSA keys
3077 - markus@cvs.openbsd.org 2000/09/05 13:20:49
3078 [sftp-server.c]
3079 cleanup
3080 - markus@cvs.openbsd.org 2000/09/06 03:46:41
3081 [authfile.h]
3082 prototype
3083 - deraadt@cvs.openbsd.org 2000/09/07 14:27:56
3084 [ALL]
3085 cleanup copyright notices on all files. I have attempted to be
3086 accurate with the details. everything is now under Tatu's licence
3087 (which I copied from his readme), and/or the core-sdi bsd-ish thing
3088 for deattack, or various openbsd developers under a 2-term bsd
3089 licence. We're not changing any rules, just being accurate.
3090 - markus@cvs.openbsd.org 2000/09/07 14:40:30
3091 [channels.c channels.h clientloop.c serverloop.c ssh.c]
3092 cleanup window and packet sizes for ssh2 flow control; ok niels
3093 - markus@cvs.openbsd.org 2000/09/07 14:53:00
3094 [scp.c]
3095 typo
3096 - markus@cvs.openbsd.org 2000/09/07 15:13:37
3097 [auth-options.c auth-options.h auth-rh-rsa.c auth-rsa.c auth.c]
3098 [authfile.h canohost.c channels.h compat.c hostfile.h log.c match.h]
3099 [pty.c readconf.c]
3100 some more Copyright fixes
3101 - markus@cvs.openbsd.org 2000/09/08 03:02:51
3102 [README.openssh2]
3103 bye bye
3104 - deraadt@cvs.openbsd.org 2000/09/11 18:38:33
3105 [LICENCE cipher.c]
3106 a few more comments about it being ARC4 not RC4
3107 - markus@cvs.openbsd.org 2000/09/12 14:53:11
3108 [log-client.c log-server.c log.c ssh.1 ssh.c ssh.h sshd.8 sshd.c]
3109 multiple debug levels
3110 - markus@cvs.openbsd.org 2000/09/14 14:25:15
3111 [clientloop.c]
3112 typo
3113 - deraadt@cvs.openbsd.org 2000/09/15 01:13:51
3114 [ssh-agent.c]
3115 check return value for setenv(3) for failure, and deal appropriately
3116
311720000913
3118 - (djm) Fix server not exiting with jobs in background.
3119
312020000905
3121 - (djm) Import OpenBSD CVS changes
3122 - markus@cvs.openbsd.org 2000/08/31 15:52:24
3123 [Makefile sshd.8 sshd_config sftp-server.8 sftp-server.c]
3124 implement a SFTP server. interops with sftp2, scp2 and the windows
3125 client from ssh.com
3126 - markus@cvs.openbsd.org 2000/08/31 15:56:03
3127 [README.openssh2]
3128 sync
3129 - markus@cvs.openbsd.org 2000/08/31 16:05:42
3130 [session.c]
3131 Wall
3132 - markus@cvs.openbsd.org 2000/08/31 16:09:34
3133 [authfd.c ssh-agent.c]
3134 add a flag to SSH2_AGENTC_SIGN_REQUEST for future extensions
3135 - deraadt@cvs.openbsd.org 2000/09/01 09:25:13
3136 [scp.1 scp.c]
3137 cleanup and fix -S support; stevesk@sweden.hp.com
3138 - markus@cvs.openbsd.org 2000/09/01 16:29:32
3139 [sftp-server.c]
3140 portability fixes
3141 - markus@cvs.openbsd.org 2000/09/01 16:32:41
3142 [sftp-server.c]
3143 fix cast; mouring@pconline.com
3144 - itojun@cvs.openbsd.org 2000/09/03 09:23:28
3145 [ssh-add.1 ssh.1]
3146 add missing .El against .Bl.
3147 - markus@cvs.openbsd.org 2000/09/04 13:03:41
3148 [session.c]
3149 missing close; ok theo
3150 - markus@cvs.openbsd.org 2000/09/04 13:07:21
3151 [session.c]
3152 fix get_last_login_time order; from andre@van-veen.de
3153 - markus@cvs.openbsd.org 2000/09/04 13:10:09
3154 [sftp-server.c]
3155 more cast fixes; from mouring@pconline.com
3156 - markus@cvs.openbsd.org 2000/09/04 13:06:04
3157 [session.c]
3158 set SSH_ORIGINAL_COMMAND; from Leakin@dfw.nostrum.com, bet@rahul.net
3159 - (djm) Cleanup after import. Fix sftp-server compilation, Makefile
3160 - (djm) Merge cygwin support from Corinna Vinschen <vinschen@cygnus.com>
3161
316220000903
3163 - (djm) Fix Redhat init script
3164
316520000901
3166 - (djm) Pick up Jim's new X11-askpass
3167 - (djm) Release 2.2.0p1
3168
316920000831
3170 - (djm) Workaround SIGPIPE problems on SCO. Fix from Aran Cox
3171 <acox@cv.telegroup.com>
3172 - (djm) Pick up new version (2.2.0) from OpenBSD CVS
3173
317420000830
3175 - (djm) Compile warning fixes from Mark Miller <markm@swoon.net>
3176 - (djm) Periodically rekey arc4random
3177 - (djm) Clean up diff against OpenBSD.
3178 - (djm) HPUX 11 needs USE_PIPES as well: Kevin Steves
3179 <stevesk@sweden.hp.com>
3180 - (djm) Quieten the pam delete credentials error message
3181 - (djm) Fix printing of $DISPLAY hack if set by system type. Report from
3182 Kevin Steves <stevesk@sweden.hp.com>
3183 - (djm) NeXT patch from Ben Lindstrom <mouring@pconline.com>
3184 - (djm) Fix doh in bsd-arc4random.c
3185
318620000829
3187 - (djm) Fix ^C ignored issue on Solaris. Diagnosis from Gert
3188 Doering <gert@greenie.muc.de>, John Horne <J.Horne@plymouth.ac.uk> and
3189 Garrick James <garrick@james.net>
3190 - (djm) Check for SCO pty naming style (ptyp%d/ttyp%d). Based on fix from
3191 Bastian Trompetter <btrompetter@firemail.de>
3192 - (djm) NeXT tweaks from Ben Lindstrom <mouring@pconline.com>
3193 - More OpenBSD updates:
3194 - deraadt@cvs.openbsd.org 2000/08/24 15:46:59
3195 [scp.c]
3196 off_t in sink, to fix files > 2GB, i think, test is still running ;-)
3197 - deraadt@cvs.openbsd.org 2000/08/25 10:10:06
3198 [session.c]
3199 Wall
3200 - markus@cvs.openbsd.org 2000/08/26 04:33:43
3201 [compat.c]
3202 ssh.com-2.3.0
3203 - markus@cvs.openbsd.org 2000/08/27 12:18:05
3204 [compat.c]
3205 compatibility with future ssh.com versions
3206 - deraadt@cvs.openbsd.org 2000/08/27 21:50:55
3207 [auth-krb4.c session.c ssh-add.c sshconnect.c uidswap.c]
3208 print uid/gid as unsigned
3209 - markus@cvs.openbsd.org 2000/08/28 13:51:00
3210 [ssh.c]
3211 enable -n and -f for ssh2
3212 - markus@cvs.openbsd.org 2000/08/28 14:19:53
3213 [ssh.c]
3214 allow combination of -N and -f
3215 - markus@cvs.openbsd.org 2000/08/28 14:20:56
3216 [util.c]
3217 util.c
3218 - markus@cvs.openbsd.org 2000/08/28 14:22:02
3219 [util.c]
3220 undo
3221 - markus@cvs.openbsd.org 2000/08/28 14:23:38
3222 [util.c]
3223 don't complain if setting NONBLOCK fails with ENODEV
3224
322520000823
3226 - (djm) Define USE_PIPES to avoid socketpair problems on HPUX 10 and SunOS 4
3227 Avoids "scp never exits" problem. Reports from Lutz Jaenicke
3228 <Lutz.Jaenicke@aet.TU-Cottbus.DE> and Tamito KAJIYAMA
3229 <kajiyama@grad.sccs.chukyo-u.ac.jp>
3230 - (djm) Pick up LOGIN_PROGRAM from environment or PATH if not set by headers
3231 - (djm) Add local version to version.h
3232 - (djm) Don't reseed arc4random everytime it is used
3233 - (djm) OpenBSD CVS updates:
3234 - deraadt@cvs.openbsd.org 2000/08/18 20:07:23
3235 [ssh.c]
3236 accept remsh as a valid name as well; roman@buildpoint.com
3237 - deraadt@cvs.openbsd.org 2000/08/18 20:17:13
3238 [deattack.c crc32.c packet.c]
3239 rename crc32() to ssh_crc32() to avoid zlib name clash. do not move to
3240 libz crc32 function yet, because it has ugly "long"'s in it;
3241 oneill@cs.sfu.ca
3242 - deraadt@cvs.openbsd.org 2000/08/18 20:26:08
3243 [scp.1 scp.c]
3244 -S prog support; tv@debian.org
3245 - deraadt@cvs.openbsd.org 2000/08/18 20:50:07
3246 [scp.c]
3247 knf
3248 - deraadt@cvs.openbsd.org 2000/08/18 20:57:33
3249 [log-client.c]
3250 shorten
3251 - markus@cvs.openbsd.org 2000/08/19 12:48:11
3252 [channels.c channels.h clientloop.c ssh.c ssh.h]
3253 support for ~. in ssh2
3254 - deraadt@cvs.openbsd.org 2000/08/19 15:29:40
3255 [crc32.h]
3256 proper prototype
3257 - markus@cvs.openbsd.org 2000/08/19 15:34:44
3258 [authfd.c authfd.h key.c key.h ssh-add.1 ssh-add.c ssh-agent.1]
3259 [ssh-agent.c ssh-keygen.c sshconnect1.c sshconnect2.c Makefile]
3260 [fingerprint.c fingerprint.h]
3261 add SSH2/DSA support to the agent and some other DSA related cleanups.
3262 (note that we cannot talk to ssh.com's ssh2 agents)
3263 - markus@cvs.openbsd.org 2000/08/19 15:55:52
3264 [channels.c channels.h clientloop.c]
3265 more ~ support for ssh2
3266 - markus@cvs.openbsd.org 2000/08/19 16:21:19
3267 [clientloop.c]
3268 oops
3269 - millert@cvs.openbsd.org 2000/08/20 12:25:53
3270 [session.c]
3271 We have to stash the result of get_remote_name_or_ip() before we
3272 close our socket or getpeername() will get EBADF and the process
3273 will exit. Only a problem for "UseLogin yes".
3274 - millert@cvs.openbsd.org 2000/08/20 12:30:59
3275 [session.c]
3276 Only check /etc/nologin if "UseLogin no" since login(1) may have its
3277 own policy on determining who is allowed to login when /etc/nologin
3278 is present. Also use the _PATH_NOLOGIN define.
3279 - millert@cvs.openbsd.org 2000/08/20 12:42:43
3280 [auth1.c auth2.c session.c ssh.c]
3281 Add calls to setusercontext() and login_get*(). We basically call
3282 setusercontext() in most places where previously we did a setlogin().
3283 Add default login.conf file and put root in the "daemon" login class.
3284 - millert@cvs.openbsd.org 2000/08/21 10:23:31
3285 [session.c]
3286 Fix incorrect PATH setting; noted by Markus.
3287
328820000818
3289 - (djm) OpenBSD CVS changes:
3290 - markus@cvs.openbsd.org 2000/07/22 03:14:37
3291 [servconf.c servconf.h sshd.8 sshd.c sshd_config]
3292 random early drop; ok theo, niels
3293 - deraadt@cvs.openbsd.org 2000/07/26 11:46:51
3294 [ssh.1]
3295 typo
3296 - deraadt@cvs.openbsd.org 2000/08/01 11:46:11
3297 [sshd.8]
3298 many fixes from pepper@mail.reppep.com
3299 - provos@cvs.openbsd.org 2000/08/01 13:01:42
3300 [Makefile.in util.c aux.c]
3301 rename aux.c to util.c to help with cygwin port
3302 - deraadt@cvs.openbsd.org 2000/08/02 00:23:31
3303 [authfd.c]
3304 correct sun_len; Alexander@Leidinger.net
3305 - provos@cvs.openbsd.org 2000/08/02 10:27:17
3306 [readconf.c sshd.8]
3307 disable kerberos authentication by default
3308 - provos@cvs.openbsd.org 2000/08/02 11:27:05
3309 [sshd.8 readconf.c auth-krb4.c]
3310 disallow kerberos authentication if we can't verify the TGT; from
3311 dugsong@
3312 kerberos authentication is on by default only if you have a srvtab.
3313 - markus@cvs.openbsd.org 2000/08/04 14:30:07
3314 [auth.c]
3315 unused
3316 - markus@cvs.openbsd.org 2000/08/04 14:30:35
3317 [sshd_config]
3318 MaxStartups
3319 - markus@cvs.openbsd.org 2000/08/15 13:20:46
3320 [authfd.c]
3321 cleanup; ok niels@
3322 - markus@cvs.openbsd.org 2000/08/17 14:05:10
3323 [session.c]
3324 cleanup login(1)-like jobs, no duplicate utmp entries
3325 - markus@cvs.openbsd.org 2000/08/17 14:06:34
3326 [session.c sshd.8 sshd.c]
3327 sshd -u len, similar to telnetd
3328 - (djm) Lastlog was not getting closed after writing login entry
3329 - (djm) Add Solaris package support from Rip Loomis <loomisg@cist.saic.com>
3330
333120000816
3332 - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc)
3333 - (djm) Fix strerror replacement for old SunOS. Based on patch from
3334 Charles Levert <charles@comm.polymtl.ca>
3335 - (djm) Seperate arc4random into seperate file and use OpenSSL's RC4
3336 implementation.
3337 - (djm) SUN_LEN macro for systems which lack it
3338
333920000815
3340 - (djm) More SunOS 4.1.x fixes from Nate Itkin <nitkin@europa.com>
3341 - (djm) Avoid failures on Irix when ssh is not setuid. Fix from
3342 Michael Stone <mstone@cs.loyola.edu>
3343 - (djm) Don't seek in directory based lastlogs
3344 - (djm) Fix --with-ipaddr-display configure option test. Patch from
3345 Jarno Huuskonen <jhuuskon@messi.uku.fi>
3346 - (djm) Fix AIX limits from Alexandre Oliva <oliva@lsd.ic.unicamp.br>
3347
334820000813
3349 - (djm) Add $(srcdir) to includes when compiling (for VPATH). Report from
3350 Fabrice bacchella <fabrice.bacchella@marchfirst.fr>
3351
335220000809
3353 - (djm) Define AIX hard limits if headers don't. Report from
3354 Bill Painter <william.t.painter@lmco.com>
3355 - (djm) utmp direct write & SunOS 4 patch from Charles Levert
3356 <charles@comm.polymtl.ca>
3357
335820000808
3359 - (djm) Cleanup Redhat RPMs. Generate keys at runtime rather than install
3360 time, spec file cleanup.
3361
336220000807
3363 - (djm) Set 0755 on binaries during install. Report from Lutz Jaenicke
3364 - (djm) Suppress error messages on channel close shutdown() failurs
3365 works around Linux bug. Patch from Zack Weinberg <zack@wolery.cumb.org>
3366 - (djm) Add some more entropy collection commands from Lutz Jaenicke
3367
336820000725
3369 - (djm) Fix autoconf typo: HAVE_BINRESVPORT_AF -> HAVE_BINDRESVPORT_AF
3370
337120000721
3372 - (djm) OpenBSD CVS updates:
3373 - markus@cvs.openbsd.org 2000/07/16 02:27:22
3374 [authfd.c authfd.h channels.c clientloop.c ssh-add.c ssh-agent.c ssh.c]
3375 [sshconnect1.c sshconnect2.c]
3376 make ssh-add accept dsa keys (the agent does not)
3377 - djm@cvs.openbsd.org 2000/07/17 19:25:02
3378 [sshd.c]
3379 Another closing of stdin; ok deraadt
3380 - markus@cvs.openbsd.org 2000/07/19 18:33:12
3381 [dsa.c]
3382 missing free, reorder
3383 - markus@cvs.openbsd.org 2000/07/20 16:23:14
3384 [ssh-keygen.1]
3385 document input and output files
3386
338720000720
3388 - (djm) Spec file fix from Petr Novotny <Petr.Novotny@antek.cz>
3389
339020000716
3391 - (djm) Release 2.1.1p4
3392
339320000715
3394 - (djm) OpenBSD CVS updates
3395 - provos@cvs.openbsd.org 2000/07/13 16:53:22
3396 [aux.c readconf.c servconf.c ssh.h]
3397 allow multiple whitespace but only one '=' between tokens, bug report from
3398 Ralf S. Engelschall <rse@engelschall.com> but different fix. okay deraadt@
3399 - provos@cvs.openbsd.org 2000/07/13 17:14:09
3400 [clientloop.c]
3401 typo; todd@fries.net
3402 - provos@cvs.openbsd.org 2000/07/13 17:19:31
3403 [scp.c]
3404 close can fail on AFS, report error; from Greg Hudson <ghudson@mit.edu>
3405 - markus@cvs.openbsd.org 2000/07/14 16:59:46
3406 [readconf.c servconf.c]
3407 allow leading whitespace. ok niels
3408 - djm@cvs.openbsd.org 2000/07/14 22:01:38
3409 [ssh-keygen.c ssh.c]
3410 Always create ~/.ssh with mode 700; ok Markus
3411 - Fixes for SunOS 4.1.4 from Gordon Atwood <gordon@cs.ualberta.ca>
3412 - Include floatingpoint.h for entropy.c
3413 - strerror replacement
3414
341520000712
3416 - (djm) Remove -lresolve for Reliant Unix
3417 - (djm) OpenBSD CVS Updates:
3418 - deraadt@cvs.openbsd.org 2000/07/11 02:11:34
3419 [session.c sshd.c ]
3420 make MaxStartups code still work with -d; djm
3421 - deraadt@cvs.openbsd.org 2000/07/11 13:17:45
3422 [readconf.c ssh_config]
3423 disable FallBackToRsh by default
3424 - (djm) Replace in_addr_t with u_int32_t in bsd-inet_aton.c. Report from
3425 Ben Lindstrom <mouring@pconline.com>
3426 - (djm) Make building of X11-Askpass and GNOME-Askpass optional in RPM
3427 spec file.
3428 - (djm) Released 2.1.1p3
3429
343020000711
3431 - (djm) Fixup for AIX getuserattr() support from Tom Bertelson
3432 <tbert@abac.com>
3433 - (djm) ReliantUNIX support from Udo Schweigert <ust@cert.siemens.de>
3434 - (djm) NeXT: dirent structures to get scp working from Ben Lindstrom
3435 <mouring@pconline.com>
3436 - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report
3437 from Jim Watt <jimw@peisj.pebio.com>
3438 - (djm) Replaced bsd-snprintf.c with one from Mutt source tree, it is known
3439 to compile on more platforms (incl NeXT).
3440 - (djm) Added bsd-inet_aton and configure support for NeXT
3441 - (djm) Misc NeXT fixes from Ben Lindstrom <mouring@pconline.com>
3442 - (djm) OpenBSD CVS updates:
3443 - markus@cvs.openbsd.org 2000/06/26 03:22:29
3444 [authfd.c]
3445 cleanup, less cut&paste
3446 - markus@cvs.openbsd.org 2000/06/26 15:59:19
3447 [servconf.c servconf.h session.c sshd.8 sshd.c]
3448 MaxStartups: limit number of unauthenticated connections, work by
3449 theo and me
3450 - deraadt@cvs.openbsd.org 2000/07/05 14:18:07
3451 [session.c]
3452 use no_x11_forwarding_flag correctly; provos ok
3453 - provos@cvs.openbsd.org 2000/07/05 15:35:57
3454 [sshd.c]
3455 typo
3456 - aaron@cvs.openbsd.org 2000/07/05 22:06:58
3457 [scp.1 ssh-agent.1 ssh-keygen.1 sshd.8]
3458 Insert more missing .El directives. Our troff really should identify
3459 these and spit out a warning.
3460 - todd@cvs.openbsd.org 2000/07/06 21:55:04
3461 [auth-rsa.c auth2.c ssh-keygen.c]
3462 clean code is good code
3463 - deraadt@cvs.openbsd.org 2000/07/07 02:14:29
3464 [serverloop.c]
3465 sense of port forwarding flag test was backwards
3466 - provos@cvs.openbsd.org 2000/07/08 17:17:31
3467 [compat.c readconf.c]
3468 replace strtok with strsep; from David Young <dyoung@onthejob.net>
3469 - deraadt@cvs.openbsd.org 2000/07/08 19:21:15
3470 [auth.h]
3471 KNF
3472 - ho@cvs.openbsd.org 2000/07/08 19:27:33
3473 [compat.c readconf.c]
3474 Better conditions for strsep() ending.
3475 - ho@cvs.openbsd.org 2000/07/10 10:27:05
3476 [readconf.c]
3477 Get the correct message on errors. (niels@ ok)
3478 - ho@cvs.openbsd.org 2000/07/10 10:30:25
3479 [cipher.c kex.c servconf.c]
3480 strtok() --> strsep(). (niels@ ok)
3481 - (djm) Fix problem with debug mode and MaxStartups
3482 - (djm) Don't generate host keys when $(DESTDIR) is set (e.g. during RPM
3483 builds)
3484 - (djm) Add strsep function from OpenBSD libc for systems that lack it
3485
348620000709
3487 - (djm) Only enable PAM_TTY kludge for Linux. Problem report from
3488 Kevin Steves <stevesk@sweden.hp.com>
3489 - (djm) Match prototype and function declaration for rresvport_af.
3490 Problem report from Niklas Edmundsson <nikke@ing.umu.se>
3491 - (djm) Missing $(DESTDIR) on host-key target causing problems with RPM
3492 builds. Problem report from Gregory Leblanc <GLeblanc@cu-portland.edu>
3493 - (djm) Replace ut_name with ut_user. Patch from Jim Watt
3494 <jimw@peisj.pebio.com>
3495 - (djm) Fix pam sprintf fix
3496 - (djm) Cleanup entropy collection code a little more. Split initialisation
3497 from seeding, perform intialisation immediatly at start, be careful with
3498 uids. Based on problem report from Jim Watt <jimw@peisj.pebio.com>
3499 - (djm) More NeXT compatibility from Ben Lindstrom <mouring@pconline.com>
3500 Including sigaction() et al. replacements
3501 - (djm) AIX getuserattr() session initialisation from Tom Bertelson
3502 <tbert@abac.com>
3503
350420000708
3505 - (djm) Fix bad fprintf format handling in auth-pam.c. Patch from
3506 Aaron Hopkins <aaron@die.net>
3507 - (djm) Fix incorrect configure handling of --with-rsh-path option. Fix from
3508 Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3509 - (djm) Fixed undefined variables for OSF SIA. Report from
3510 Baars, Henk <Hendrik.Baars@nl.origin-it.com>
3511 - (djm) Handle EWOULDBLOCK returns from read() and write() in atomicio.c
3512 Fix from Marquess, Steve Mr JMLFDC <Steve.Marquess@DET.AMEDD.ARMY.MIL>
3513 - (djm) Don't use inet_addr.
3514
351520000702
3516 - (djm) Fix brace mismatch from Corinna Vinschen <vinschen@cygnus.com>
3517 - (djm) Stop shadow expiry checking from preventing logins with NIS. Based
3518 on fix from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
3519 - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from
3520 Chris, the Young One <cky@pobox.com>
3521 - (djm) Fix scp progress meter on really wide terminals. Based on patch
3522 from James H. Cloos Jr. <cloos@jhcloos.com>
3523
352420000701
3525 - (djm) Fix Tru64 SIA problems reported by John P Speno <speno@isc.upenn.edu>
3526 - (djm) Login fixes from Tom Bertelson <tbert@abac.com>
3527 - (djm) Replace "/bin/sh" with _PATH_BSHELL. Report from Corinna Vinschen
3528 <vinschen@cygnus.com>
3529 - (djm) Replace "/usr/bin/login" with LOGIN_PROGRAM
3530 - (djm) Added check for broken snprintf() functions which do not correctly
3531 terminate output string and attempt to use replacement.
3532 - (djm) Released 2.1.1p2
3533
353420000628
3535 - (djm) Fixes to lastlog code for Irix
3536 - (djm) Use atomicio in loginrec
3537 - (djm) Patch from Michael Stone <mstone@cs.loyola.edu> to add support for
3538 Irix 6.x array sessions, project id's, and system audit trail id.
3539 - (djm) Added 'distprep' make target to simplify packaging
3540 - (djm) Added patch from Chris Adams <cmadams@hiwaay.net> to add OSF SIA
3541 support. Enable using "USE_SIA=1 ./configure [options]"
3542
354320000627
3544 - (djm) Fixes to login code - not setting li->uid, cleanups
3545 - (djm) Formatting
3546
354720000626
3548 - (djm) Better fix to aclocal tests from Garrick James <garrick@james.net>
3549 - (djm) Account expiry support from Andreas Steinmetz <ast@domdv.de>
3550 - (djm) Added password expiry checking (no password change support)
3551 - (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK
3552 based on patch from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3553 - (djm) Fix fixed EGD code.
3554 - OpenBSD CVS update
3555 - provos@cvs.openbsd.org 2000/06/25 14:17:58
3556 [channels.c]
3557 correct check for bad channel ids; from Wei Dai <weidai@eskimo.com>
3558
355920000623
3560 - (djm) Use sa_family_t in prototype for rresvport_af. Patch from
3561 Svante Signell <svante.signell@telia.com>
3562 - (djm) Autoconf logic to define sa_family_t if it is missing
3563 - OpenBSD CVS Updates:
3564 - markus@cvs.openbsd.org 2000/06/22 10:32:27
3565 [sshd.c]
3566 missing atomicio; report from Steve.Marquess@DET.AMEDD.ARMY.MIL
3567 - djm@cvs.openbsd.org 2000/06/22 17:55:00
3568 [auth-krb4.c key.c radix.c uuencode.c]
3569 Missing CVS idents; ok markus
3570
357120000622
3572 - (djm) Automatically generate host key during "make install". Suggested
3573 by Gary E. Miller <gem@rellim.com>
3574 - (djm) Paranoia before kill() system call
3575 - OpenBSD CVS Updates:
3576 - markus@cvs.openbsd.org 2000/06/18 18:50:11
3577 [auth2.c compat.c compat.h sshconnect2.c]
3578 make userauth+pubkey interop with ssh.com-2.2.0
3579 - markus@cvs.openbsd.org 2000/06/18 20:56:17
3580 [dsa.c]
3581 mem leak + be more paranoid in dsa_verify.
3582 - markus@cvs.openbsd.org 2000/06/18 21:29:50
3583 [key.c]
3584 cleanup fingerprinting, less hardcoded sizes
3585 - markus@cvs.openbsd.org 2000/06/19 19:39:45
3586 [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
3587 [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h]
3588 [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h]
3589 [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h]
3590 [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c]
3591 [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c]
3592 [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c]
3593 [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c]
3594 [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h]
3595 OpenBSD tag
3596 - markus@cvs.openbsd.org 2000/06/21 10:46:10
3597 sshconnect2.c missing free; nuke old comment
3598
359920000620
3600 - (djm) Replace use of '-o' and '-a' logical operators in configure tests
3601 with '||' and '&&'. As suggested by Jim Knoble <jmknoble@jmknoble.cx>
3602 to fix SCO Unixware problem reported by Gary E. Miller <gem@rellim.com>
3603 - (djm) Typo in loginrec.c
3604
360520000618
3606 - (djm) Add summary of configure options to end of ./configure run
3607 - (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from
3608 Michael Stone <mstone@cs.loyola.edu>
3609 - (djm) rusage is a privileged operation on some Unices (incl.
3610 Solaris 2.5.1). Report from Paul D. Smith <pausmith@nortelnetworks.com>
3611 - (djm) Avoid PAM failures when running without a TTY. Report from
3612 Martin Petrak <petrak@spsknm.schools.sk>
3613 - (djm) Include sys/types.h when including netinet/in.h in configure tests.
3614 Patch from Jun-ichiro itojun Hagino <itojun@iijlab.net>
3615 - (djm) Started merge of Ben Lindstrom's <mouring@pconline.com> NeXT support
3616 - OpenBSD CVS updates:
3617 - deraadt@cvs.openbsd.org 2000/06/17 09:58:46
3618 [channels.c]
3619 everyone says "nix it" (remove protocol 2 debugging message)
3620 - markus@cvs.openbsd.org 2000/06/17 13:24:34
3621 [sshconnect.c]
3622 allow extended server banners
3623 - markus@cvs.openbsd.org 2000/06/17 14:30:10
3624 [sshconnect.c]
3625 missing atomicio, typo
3626 - jakob@cvs.openbsd.org 2000/06/17 16:52:34
3627 [servconf.c servconf.h session.c sshd.8 sshd_config]
3628 add support for ssh v2 subsystems. ok markus@.
3629 - deraadt@cvs.openbsd.org 2000/06/17 18:57:48
3630 [readconf.c servconf.c]
3631 include = in WHITESPACE; markus ok
3632 - markus@cvs.openbsd.org 2000/06/17 19:09:10
3633 [auth2.c]
3634 implement bug compatibility with ssh-2.0.13 pubkey, server side
3635 - markus@cvs.openbsd.org 2000/06/17 21:00:28
3636 [compat.c]
3637 initial support for ssh.com's 2.2.0
3638 - markus@cvs.openbsd.org 2000/06/17 21:16:09
3639 [scp.c]
3640 typo
3641 - markus@cvs.openbsd.org 2000/06/17 22:05:02
3642 [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
3643 split auth-rsa option parsing into auth-options
3644 add options support to authorized_keys2
3645 - markus@cvs.openbsd.org 2000/06/17 22:42:54
3646 [session.c]
3647 typo
3648
364920000613
3650 - (djm) Fixes from Andrew McGill <andrewm@datrix.co.za>:
3651 - Platform define for SCO 3.x which breaks on /dev/ptmx
3652 - Detect and try to fix missing MAXPATHLEN
3653 - (djm) Fix short copy in loginrec.c (based on patch from Phill Camp
3654 <P.S.S.Camp@ukc.ac.uk>
3655
365620000612
3657 - (djm) Glob manpages in RPM spec files to catch compressed files
3658 - (djm) Full license in auth-pam.c
3659 - (djm) Configure fixes from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
3660 - (andre) AIX, lastlog, configure fixes from Tom Bertelson <tbert@abac.com>:
3661 - Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is
3662 def'd
3663 - Set AIX to use preformatted manpages
3664
366520000610
3666 - (djm) Minor doc tweaks
3667 - (djm) Fix for configure on bash2 from Jim Knoble <jmknoble@jmknoble.cx>
3668
366920000609
3670 - (djm) Patch from Kenji Miyake <kenji@miyake.org> to disable utmp usage
3671 (in favour of utmpx) on Solaris 8
3672
367320000606
3674 - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through
3675 list of commands (by default). Removed verbose debugging (by default).
3676 - (djm) Increased command entropy estimates and default entropy collection
3677 timeout
3678 - (djm) Remove duplicate headers from loginrec.c
3679 - (djm) Don't add /usr/local/lib to library search path on Irix
3680 - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III
3681 <tibbs@math.uh.edu>
3682 - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg
3683 <zack@wolery.cumb.org>
3684 - (djm) OpenBSD CVS updates:
3685 - todd@cvs.openbsd.org
3686 [sshconnect2.c]
3687 teach protocol v2 to count login failures properly and also enable an
3688 explanation of why the password prompt comes up again like v1; this is NOT
3689 crypto
3690 - markus@cvs.openbsd.org
3691 [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8]
3692 xauth_location support; pr 1234
3693 [readconf.c sshconnect2.c]
3694 typo, unused
3695 [session.c]
3696 allow use_login only for login sessions, otherwise remote commands are
3697 execed with uid==0
3698 [sshd.8]
3699 document UseLogin better
3700 [version.h]
3701 OpenSSH 2.1.1
3702 [auth-rsa.c]
3703 fix match_hostname() logic for auth-rsa: deny access if we have a
3704 negative match or no match at all
3705 [channels.c hostfile.c match.c]
3706 don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via
3707 kris@FreeBSD.org
3708
370920000606
3710 - (djm) Added --with-cflags, --with-ldflags and --with-libs options to
3711 configure.
3712
371320000604
3714 - Configure tweaking for new login code on Irix 5.3
3715 - (andre) login code changes based on djm feedback
3716
371720000603
3718 - (andre) New login code
3719 - Remove bsd-login.[ch] and all the OpenBSD-derived code in login.c
3720 - Add loginrec.[ch], logintest.c and autoconf code
3721
372220000531
3723 - Cleanup of auth.c, login.c and fake-*
3724 - Cleanup of auth-pam.c, save and print "account expired" error messages
3725 - Fix EGD read bug by IWAMURO Motonori <iwa@mmp.fujitsu.co.jp>
3726 - Rewrote bsd-login to use proper utmp API if available. Major cleanup
3727 of fallback DIY code.
3728
372920000530
3730 - Define atexit for old Solaris
3731 - Fix buffer overrun in login.c for systems which use syslen in utmpx.
3732 patch from YOSHIFUJI Hideaki <yoshfuji@cerberus.nemoto.ecei.tohoku.ac.jp>
3733 - OpenBSD CVS updates:
3734 - markus@cvs.openbsd.org
3735 [session.c]
3736 make x11-fwd work w/ localhost (xauth add host/unix:11)
3737 [cipher.c compat.c readconf.c servconf.c]
3738 check strtok() != NULL; ok niels@
3739 [key.c]
3740 fix key_read() for uuencoded keys w/o '='
3741 [serverloop.c]
3742 group ssh1 vs. ssh2 in serverloop
3743 [kex.c kex.h myproposal.h sshconnect2.c sshd.c]
3744 split kexinit/kexdh, factor out common code
3745 [readconf.c ssh.1 ssh.c]
3746 forwardagent defaults to no, add ssh -A
3747 - theo@cvs.openbsd.org
3748 [session.c]
3749 just some line shortening
3750 - Released 2.1.0p3
3751
375220000520
3753 - Xauth fix from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
3754 - Don't touch utmp if USE_UTMPX defined
3755 - SunOS 4.x support from Todd C. Miller <Todd.Miller@courtesan.com>
3756 - SIGCHLD fix for AIX and HPUX from Tom Bertelson <tbert@abac.com>
3757 - HPUX and Configure fixes from Lutz Jaenicke
3758 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3759 - Use mkinstalldirs script to make directories instead of non-portable
3760 "install -d". Suggested by Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3761 - Doc cleanup
3762
376320000518
3764 - Include Andre Lucas' fixprogs script. Forgot to "cvs add" it yesterday
3765 - OpenBSD CVS updates:
3766 - markus@cvs.openbsd.org
3767 [sshconnect.c]
3768 copy only ai_addrlen bytes; misiek@pld.org.pl
3769 [auth.c]
3770 accept an empty shell in authentication; bug reported by
3771 chris@tinker.ucr.edu
3772 [serverloop.c]
3773 we don't have stderr for interactive terminal sessions (fcntl errors)
3774
377520000517
3776 - Fix from Andre Lucas <andre.lucas@dial.pipex.com>
3777 - Fixes command line printing segfaults (spotter: Bladt Norbert)
3778 - Fixes erroneous printing of debug messages to syslog
3779 - Fixes utmp for MacOS X (spotter: Aristedes Maniatis)
3780 - Gives useful error message if PRNG initialisation fails
3781 - Reduced ssh startup delay
3782 - Measures cumulative command time rather than the time between reads
3783 after select()
3784 - 'fixprogs' perl script to eliminate non-working entropy commands, and
3785 optionally run 'ent' to measure command entropy
3786 - Applied Tom Bertelson's <tbert@abac.com> AIX authentication fix
3787 - Avoid WCOREDUMP complation errors for systems that lack it
3788 - Avoid SIGCHLD warnings from entropy commands
3789 - Fix HAVE_PAM_GETENVLIST setting from Simon Wilkinson <sxw@dcs.ed.ac.uk>
3790 - OpenBSD CVS update:
3791 - markus@cvs.openbsd.org
3792 [ssh.c]
3793 fix usage()
3794 [ssh2.h]
3795 draft-ietf-secsh-architecture-05.txt
3796 [ssh.1]
3797 document ssh -T -N (ssh2 only)
3798 [channels.c serverloop.c ssh.h sshconnect.c sshd.c aux.c]
3799 enable nonblocking IO for sshd w/ proto 1, too; split out common code
3800 [aux.c]
3801 missing include
3802 - Several patches from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp>
3803 - INSTALL typo and URL fix
3804 - Makefile fix
3805 - Solaris fixes
3806 - Checking for ssize_t and memmove. Based on patch from SAKAI Kiyotaka
3807 <ksakai@kso.netwk.ntt-at.co.jp>
3808 - RSAless operation patch from kevin_oconnor@standardandpoors.com
3809 - Detect OpenSSL seperatly from RSA
3810 - Better test for RSA (more compatible with RSAref). Based on work by
3811 Ed Eden <ede370@stl.rural.usda.gov>
3812
381320000513
3814 - Fix for non-recognised DSA keys from Arkadiusz Miskiewicz
3815 <misiek@pld.org.pl>
3816
381720000511
3818 - Fix for prng_seed permissions checking from Lutz Jaenicke
3819 <Lutz.Jaenicke@aet.TU-Cottbus.DE>
3820 - "make host-key" fix for Irix
3821
382220000509
3823 - OpenBSD CVS update
3824 - markus@cvs.openbsd.org
3825 [cipher.h myproposal.h readconf.c readconf.h servconf.c ssh.1 ssh.c]
3826 [ssh.h sshconnect1.c sshconnect2.c sshd.8]
3827 - complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)
3828 - hugh@cvs.openbsd.org
3829 [ssh.1]
3830 - zap typo
3831 [ssh-keygen.1]
3832 - One last nit fix. (markus approved)
3833 [sshd.8]
3834 - some markus certified spelling adjustments
3835 - markus@cvs.openbsd.org
3836 [auth2.c channels.c clientloop.c compat compat.h dsa.c kex.c]
3837 [sshconnect2.c ]
3838 - bug compat w/ ssh-2.0.13 x11, split out bugs
3839 [nchan.c]
3840 - no drain if ibuf_empty, fixes x11fwd problems; tests by fries@
3841 [ssh-keygen.c]
3842 - handle escapes in real and original key format, ok millert@
3843 [version.h]
3844 - OpenSSH-2.1
3845 - Moved all the bsd-* and fake-* stuff into new libopenbsd-compat.a
3846 - Doc updates
3847 - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported
3848 by Andre Lucas <andre.lucas@dial.pipex.com>
3849
385020000508
3851 - Makefile and RPM spec fixes
3852 - Generate DSA host keys during "make key" or RPM installs
3853 - OpenBSD CVS update
3854 - markus@cvs.openbsd.org
3855 [clientloop.c sshconnect2.c]
3856 - make x11-fwd interop w/ ssh-2.0.13
3857 [README.openssh2]
3858 - interop w/ SecureFX
3859 - Release 2.0.0beta2
3860
3861 - Configure caching and cleanup patch from Andre Lucas'
3862 <andre.lucas@dial.pipex.com>
3863
386420000507
3865 - Remove references to SSLeay.
3866 - Big OpenBSD CVS update
3867 - markus@cvs.openbsd.org
3868 [clientloop.c]
3869 - typo
3870 [session.c]
3871 - update proctitle on pty alloc/dealloc, e.g. w/ windows client
3872 [session.c]
3873 - update proctitle for proto 1, too
3874 [channels.h nchan.c serverloop.c session.c sshd.c]
3875 - use c-style comments
3876 - deraadt@cvs.openbsd.org
3877 [scp.c]
3878 - more atomicio
3879 - markus@cvs.openbsd.org
3880 [channels.c]
3881 - set O_NONBLOCK
3882 [ssh.1]
3883 - update AUTHOR
3884 [readconf.c ssh-keygen.c ssh.h]
3885 - default DSA key file ~/.ssh/id_dsa
3886 [clientloop.c]
3887 - typo, rm verbose debug
3888 - deraadt@cvs.openbsd.org
3889 [ssh-keygen.1]
3890 - document DSA use of ssh-keygen
3891 [sshd.8]
3892 - a start at describing what i understand of the DSA side
3893 [ssh-keygen.1]
3894 - document -X and -x
3895 [ssh-keygen.c]
3896 - simplify usage
3897 - markus@cvs.openbsd.org
3898 [sshd.8]
3899 - there is no rhosts_dsa
3900 [ssh-keygen.1]
3901 - document -y, update -X,-x
3902 [nchan.c]
3903 - fix close for non-open ssh1 channels
3904 [servconf.c servconf.h ssh.h sshd.8 sshd.c ]
3905 - s/DsaKey/HostDSAKey/, document option
3906 [sshconnect2.c]
3907 - respect number_of_password_prompts
3908 [channels.c channels.h servconf.c servconf.h session.c sshd.8]
3909 - GatewayPorts for sshd, ok deraadt@
3910 [ssh-add.1 ssh-agent.1 ssh.1]
3911 - more doc on: DSA, id_dsa, known_hosts2, authorized_keys2
3912 [ssh.1]
3913 - more info on proto 2
3914 [sshd.8]
3915 - sync AUTHOR w/ ssh.1
3916 [key.c key.h sshconnect.c]
3917 - print key type when talking about host keys
3918 [packet.c]
3919 - clear padding in ssh2
3920 [dsa.c key.c radix.c ssh.h sshconnect1.c uuencode.c uuencode.h]
3921 - replace broken uuencode w/ libc b64_ntop
3922 [auth2.c]
3923 - log failure before sending the reply
3924 [key.c radix.c uuencode.c]
3925 - remote trailing comments before calling __b64_pton
3926 [auth2.c readconf.c readconf.h servconf.c servconf.h ssh.1]
3927 [sshconnect2.c sshd.8]
3928 - add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8
3929 - Bring in b64_ntop and b64_pton from OpenBSD libc (bsd-base64.[ch])
3930
393120000502
3932 - OpenBSD CVS update
3933 [channels.c]
3934 - init all fds, close all fds.
3935 [sshconnect2.c]
3936 - check whether file exists before asking for passphrase
3937 [servconf.c servconf.h sshd.8 sshd.c]
3938 - PidFile, pr 1210
3939 [channels.c]
3940 - EINTR
3941 [channels.c]
3942 - unbreak, ok niels@
3943 [sshd.c]
3944 - unlink pid file, ok niels@
3945 [auth2.c]
3946 - Add missing #ifdefs; ok - markus
3947 - Add Andre Lucas' <andre.lucas@dial.pipex.com> patch to read entropy
3948 gathering commands from a text file
3949 - Release 2.0.0beta1
3950
395120000501
3952 - OpenBSD CVS update
3953 [packet.c]
3954 - send debug messages in SSH2 format
3955 [scp.c]
3956 - fix very rare EAGAIN/EINTR issues; based on work by djm
3957 [packet.c]
3958 - less debug, rm unused
3959 [auth2.c]
3960 - disable kerb,s/key in ssh2
3961 [sshd.8]
3962 - Minor tweaks and typo fixes.
3963 [ssh-keygen.c]
3964 - Put -d into usage and reorder. markus ok.
3965 - Include missing headers for OpenSSL tests. Fix from Phil Karn
3966 <karn@ka9q.ampr.org>
3967 - Fixed __progname symbol collisions reported by Andre Lucas
3968 <andre.lucas@dial.pipex.com>
3969 - Merged bsd-login ttyslot and AIX utmp patch from Gert Doering
3970 <gd@hilb1.medat.de>
3971 - Add some missing ifdefs to auth2.c
3972 - Deprecate perl-tk askpass.
3973 - Irix portability fixes - don't include netinet headers more than once
3974 - Make sure we don't save PRNG seed more than once
3975
397620000430
3977 - Merge HP-UX fixes and TCB support from Ged Lodder <lodder@yacc.com.au>
3978 - Integrate Andre Lucas' <andre.lucas@dial.pipex.com> entropy collection
3979 patch.
3980 - Adds timeout to entropy collection
3981 - Disables slow entropy sources
3982 - Load and save seed file
3983 - Changed entropy seed code to user per-user seeds only (server seed is
3984 saved in root's .ssh directory)
3985 - Use atexit() and fatal cleanups to save seed on exit
3986 - More OpenBSD updates:
3987 [session.c]
3988 - don't call chan_write_failed() if we are not writing
3989 [auth-rsa.c auth1.c authfd.c hostfile.c ssh-agent.c]
3990 - keysize warnings error() -> log()
3991
399220000429
3993 - Merge big update to OpenSSH-2.0 from OpenBSD CVS
3994 [README.openssh2]
3995 - interop w/ F-secure windows client
3996 - sync documentation
3997 - ssh_host_dsa_key not ssh_dsa_key
3998 [auth-rsa.c]
3999 - missing fclose
4000 [auth.c authfile.c compat.c dsa.c dsa.h hostfile.c key.c key.h radix.c]
4001 [readconf.c readconf.h ssh-add.c ssh-keygen.c ssh.c ssh.h sshconnect.c]
4002 [sshd.c uuencode.c uuencode.h authfile.h]
4003 - add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX]
4004 for trading keys with the real and the original SSH, directly from the
4005 people who invented the SSH protocol.
4006 [auth.c auth.h authfile.c sshconnect.c auth1.c auth2.c sshconnect.h]
4007 [sshconnect1.c sshconnect2.c]
4008 - split auth/sshconnect in one file per protocol version
4009 [sshconnect2.c]
4010 - remove debug
4011 [uuencode.c]
4012 - add trailing =
4013 [version.h]
4014 - OpenSSH-2.0
4015 [ssh-keygen.1 ssh-keygen.c]
4016 - add -R flag: exit code indicates if RSA is alive
4017 [sshd.c]
4018 - remove unused
4019 silent if -Q is specified
4020 [ssh.h]
4021 - host key becomes /etc/ssh_host_dsa_key
4022 [readconf.c servconf.c ]
4023 - ssh/sshd default to proto 1 and 2
4024 [uuencode.c]
4025 - remove debug
4026 [auth2.c ssh-keygen.c sshconnect2.c sshd.c]
4027 - xfree DSA blobs
4028 [auth2.c serverloop.c session.c]
4029 - cleanup logging for sshd/2, respect PasswordAuth no
4030 [sshconnect2.c]
4031 - less debug, respect .ssh/config
4032 [README.openssh2 channels.c channels.h]
4033 - clientloop.c session.c ssh.c
4034 - support for x11-fwding, client+server
4035
403620000421
4037 - Merge fix from OpenBSD CVS
4038 [ssh-agent.c]
4039 - Fix memory leak per connection. Report from Andy Spiegl <Andy@Spiegl.de>
4040 via Debian bug #59926
4041 - Define __progname in session.c if libc doesn't
4042 - Remove indentation on autoconf #include statements to avoid bug in
4043 DEC Tru64 compiler. Report and fix from David Del Piero
4044 <David.DelPiero@qed.qld.gov.au>
4045
404620000420
4047 - Make fixpaths work with perl4, patch from Andre Lucas
4048 <andre.lucas@dial.pipex.com>
4049 - Sync with OpenBSD CVS:
4050 [clientloop.c login.c serverloop.c ssh-agent.c ssh.h sshconnect.c sshd.c]
4051 - pid_t
4052 [session.c]
4053 - remove bogus chan_read_failed. this could cause data
4054 corruption (missing data) at end of a SSH2 session.
4055 - Merge fixes from Debian patch from Phil Hands <phil@hands.com>
4056 - Allow setting of PAM service name through CFLAGS (SSHD_PAM_SERVICE)
4057 - Use vhangup to clean up Linux ttys
4058 - Force posix getopt processing on GNU libc systems
4059 - Debian bug #55910 - remove references to ssl(8) manpages
4060 - Debian bug #58031 - ssh_config lies about default cipher
4061
406220000419
4063 - OpenBSD CVS updates
4064 [channels.c]
4065 - fix pr 1196, listen_port and port_to_connect interchanged
4066 [scp.c]
4067 - after completion, replace the progress bar ETA counter with a final
4068 elapsed time; my idea, aaron wrote the patch
4069 [ssh_config sshd_config]
4070 - show 'Protocol' as an example, ok markus@
4071 [sshd.c]
4072 - missing xfree()
4073 - Add missing header to bsd-misc.c
4074
407520000416
4076 - Reduce diff against OpenBSD source
4077 - All OpenSSL includes are now unconditionally referenced as
4078 openssl/foo.h
4079 - Pick up formatting changes
4080 - Other minor changed (typecasts, etc) that I missed
4081
408220000415
4083 - OpenBSD CVS updates.
4084 [ssh.1 ssh.c]
4085 - ssh -2
4086 [auth.c channels.c clientloop.c packet.c packet.h serverloop.c]
4087 [session.c sshconnect.c]
4088 - check payload for (illegal) extra data
4089 [ALL]
4090 whitespace cleanup
4091
409220000413
4093 - INSTALL doc updates
4094 - Merged OpenBSD updates to include paths.
4095
409620000412
4097 - OpenBSD CVS updates:
4098 - [channels.c]
4099 repair x11-fwd
4100 - [sshconnect.c]
4101 fix passwd prompt for ssh2, less debugging output.
4102 - [clientloop.c compat.c dsa.c kex.c sshd.c]
4103 less debugging output
4104 - [kex.c kex.h sshconnect.c sshd.c]
4105 check for reasonable public DH values
4106 - [README.openssh2 cipher.c cipher.h compat.c compat.h readconf.c]
4107 [readconf.h servconf.c servconf.h ssh.c ssh.h sshconnect.c sshd.c]
4108 add Cipher and Protocol options to ssh/sshd, e.g.:
4109 ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers
4110 arcfour,3des-cbc'
4111 - [sshd.c]
4112 print 1.99 only if server supports both
4113
411420000408
4115 - Avoid some compiler warnings in fake-get*.c
4116 - Add IPTOS macros for systems which lack them
4117 - Only set define entropy collection macros if they are found
4118 - More large OpenBSD CVS updates:
4119 - [auth.c auth.h servconf.c servconf.h serverloop.c session.c]
4120 [session.h ssh.h sshd.c README.openssh2]
4121 ssh2 server side, see README.openssh2; enable with 'sshd -2'
4122 - [channels.c]
4123 no adjust after close
4124 - [sshd.c compat.c ]
4125 interop w/ latest ssh.com windows client.
4126
412720000406
4128 - OpenBSD CVS update:
4129 - [channels.c]
4130 close efd on eof
4131 - [clientloop.c compat.c ssh.c sshconnect.c myproposal.h]
4132 ssh2 client implementation, interops w/ ssh.com and lsh servers.
4133 - [sshconnect.c]
4134 missing free.
4135 - [authfile.c cipher.c cipher.h packet.c sshconnect.c sshd.c]
4136 remove unused argument, split cipher_mask()
4137 - [clientloop.c]
4138 re-order: group ssh1 vs. ssh2
4139 - Make Redhat spec require openssl >= 0.9.5a
4140
414120000404
4142 - Add tests for RAND_add function when searching for OpenSSL
4143 - OpenBSD CVS update:
4144 - [packet.h packet.c]
4145 ssh2 packet format
4146 - [packet.h packet.c nchan2.ms nchan.h compat.h compat.c]
4147 [channels.h channels.c]
4148 channel layer support for ssh2
4149 - [kex.h kex.c hmac.h hmac.c dsa.c dsa.h]
4150 DSA, keyexchange, algorithm agreement for ssh2
4151 - Generate manpages before make install not at the end of make all
4152 - Don't seed the rng quite so often
4153 - Always reseed rng when requested
4154
415520000403
4156 - Wrote entropy collection routines for systems that lack /dev/random
4157 and EGD
4158 - Disable tests and typedefs for 64 bit types. They are currently unused.
4159
416020000401
4161 - Big OpenBSD CVS update (mainly beginnings of SSH2 infrastructure)
4162 - [auth.c session.c sshd.c auth.h]
4163 split sshd.c -> auth.c session.c sshd.c plus cleanup and goto-removal
4164 - [bufaux.c bufaux.h]
4165 support ssh2 bignums
4166 - [channels.c channels.h clientloop.c sshd.c nchan.c nchan.h packet.c]
4167 [readconf.c ssh.c ssh.h serverloop.c]
4168 replace big switch() with function tables (prepare for ssh2)
4169 - [ssh2.h]
4170 ssh2 message type codes
4171 - [sshd.8]
4172 reorder Xr to avoid cutting
4173 - [serverloop.c]
4174 close(fdin) if fdin != fdout, shutdown otherwise, ok theo@
4175 - [channels.c]
4176 missing close
4177 allow bigger packets
4178 - [cipher.c cipher.h]
4179 support ssh2 ciphers
4180 - [compress.c]
4181 cleanup, less code
4182 - [dispatch.c dispatch.h]
4183 function tables for different message types
4184 - [log-server.c]
4185 do not log() if debuggin to stderr
4186 rename a cpp symbol, to avoid param.h collision
4187 - [mpaux.c]
4188 KNF
4189 - [nchan.c]
4190 sync w/ channels.c
4191
419220000326
4193 - Better tests for OpenSSL w/ RSAref
4194 - Added replacement setenv() function from OpenBSD libc. Suggested by
4195 Ben Lindstrom <mouring@pconline.com>
4196 - OpenBSD CVS update
4197 - [auth-krb4.c]
4198 -Wall
4199 - [auth-rh-rsa.c auth-rsa.c hostfile.c hostfile.h key.c key.h match.c]
4200 [match.h ssh.c ssh.h sshconnect.c sshd.c]
4201 initial support for DSA keys. ok deraadt@, niels@
4202 - [cipher.c cipher.h]
4203 remove unused cipher_attack_detected code
4204 - [scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
4205 Fix some formatting problems I missed before.
4206 - [ssh.1 sshd.8]
4207 fix spelling errors, From: FreeBSD
4208 - [ssh.c]
4209 switch to raw mode only if he _get_ a pty (not if we _want_ a pty).
4210
421120000324
4212 - Released 1.2.3
4213
421420000317
4215 - Clarified --with-default-path option.
4216 - Added -blibpath handling for AIX to work around stupid runtime linking.
4217 Problem elucidated by gshapiro@SENDMAIL.ORG by way of Jim Knoble
4218 <jmknoble@jmknoble.cx>
4219 - Checks for 64 bit int types. Problem report from Mats Fredholm
4220 <matsf@init.se>
4221 - OpenBSD CVS updates:
4222 - [atomicio.c auth-krb4.c bufaux.c channels.c compress.c fingerprint.c]
4223 [packet.h radix.c rsa.c scp.c ssh-agent.c ssh-keygen.c sshconnect.c]
4224 [sshd.c]
4225 pedantic: signed vs. unsigned, void*-arithm, etc
4226 - [ssh.1 sshd.8]
4227 Various cleanups and standardizations.
4228 - Runtime error fix for HPUX from Otmar Stahl
4229 <O.Stahl@lsw.uni-heidelberg.de>
4230
423120000316
4232 - Fixed configure not passing LDFLAGS to Solaris. Report from David G.
4233 Hesprich <dghespri@sprintparanet.com>
4234 - Propogate LD through to Makefile
4235 - Doc cleanups
4236 - Added blurb about "scp: command not found" errors to UPGRADING
4237
423820000315
4239 - Fix broken CFLAGS handling during search for OpenSSL. Fixes va_list
4240 problems with gcc/Solaris.
4241 - Don't free argument to putenv() after use (in setenv() replacement).
4242 Report from Seigo Tanimura <tanimura@r.dl.itc.u-tokyo.ac.jp>
4243 - Created contrib/ subdirectory. Included helpers from Phil Hands'
4244 Debian package, README file and chroot patch from Ricardo Cerqueira
4245 <rmcc@clix.pt>
4246 - Moved gnome-ssh-askpass.c to contrib directory and removed config
4247 option.
4248 - Slight cleanup to doc files
4249 - Configure fix from Bratislav ILICH <bilic@zepter.ru>
4250
425120000314
4252 - Include macro for IN6_IS_ADDR_V4MAPPED. Report from
4253 peter@frontierflying.com
4254 - Include /usr/local/include and /usr/local/lib for systems that don't
4255 do it themselves
4256 - -R/usr/local/lib for Solaris
4257 - Fix RSAref detection
4258 - Fix IN6_IS_ADDR_V4MAPPED macro
4259
426020000311
4261 - Detect RSAref
4262 - OpenBSD CVS change
4263 [sshd.c]
4264 - disallow guessing of root password
4265 - More configure fixes
4266 - IPv6 workarounds from Hideaki YOSHIFUJI <yoshfuji@ecei.tohoku.ac.jp>
4267
426820000309
4269 - OpenBSD CVS updates to v1.2.3
4270 [ssh.h atomicio.c]
4271 - int atomicio -> ssize_t (for alpha). ok deraadt@
4272 [auth-rsa.c]
4273 - delay MD5 computation until client sends response, free() early, cleanup.
4274 [cipher.c]
4275 - void* -> unsigned char*, ok niels@
4276 [hostfile.c]
4277 - remove unused variable 'len'. fix comments.
4278 - remove unused variable
4279 [log-client.c log-server.c]
4280 - rename a cpp symbol, to avoid param.h collision
4281 [packet.c]
4282 - missing xfree()
4283 - getsockname() requires initialized tolen; andy@guildsoftware.com
4284 - use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
4285 from Holger.Trapp@Informatik.TU-Chemnitz.DE
4286 [pty.c pty.h]
4287 - register cleanup for pty earlier. move code for pty-owner handling to
4288 pty.c ok provos@, dugsong@
4289 [readconf.c]
4290 - turn off x11-fwd for the client, too.
4291 [rsa.c]
4292 - PKCS#1 padding
4293 [scp.c]
4294 - allow '.' in usernames; from jedgar@fxp.org
4295 [servconf.c]
4296 - typo: ignore_user_known_hosts int->flag; naddy@mips.rhein-neckar.de
4297 - sync with sshd_config
4298 [ssh-keygen.c]
4299 - enable ssh-keygen -l -f ~/.ssh/known_hosts, ok deraadt@
4300 [ssh.1]
4301 - Change invalid 'CHAT' loglevel to 'VERBOSE'
4302 [ssh.c]
4303 - suppress AAAA query host when '-4' is used; from shin@nd.net.fujitsu.co.jp
4304 - turn off x11-fwd for the client, too.
4305 [sshconnect.c]
4306 - missing xfree()
4307 - retry rresvport_af(), too. from sumikawa@ebina.hitachi.co.jp.
4308 - read error vs. "Connection closed by remote host"
4309 [sshd.8]
4310 - ie. -> i.e.,
4311 - do not link to a commercial page..
4312 - sync with sshd_config
4313 [sshd.c]
4314 - no need for poll.h; from bright@wintelcom.net
4315 - log with level log() not fatal() if peer behaves badly.
4316 - don't panic if client behaves strange. ok deraadt@
4317 - make no-port-forwarding for RSA keys deny both -L and -R style fwding
4318 - delay close() of pty until the pty has been chowned back to root
4319 - oops, fix comment, too.
4320 - missing xfree()
4321 - move XAUTHORITY to subdir. ok dugsong@. fixes debian bug #57907, too.
4322 (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907)
4323 - register cleanup for pty earlier. move code for pty-owner handling to
4324 pty.c ok provos@, dugsong@
4325 - create x11 cookie file
4326 - fix pr 1113, fclose() -> pclose(), todo: remote popen()
4327 - version 1.2.3
4328 - Cleaned up
4329 - Removed warning workaround for Linux and devpts filesystems (no longer
4330 required after OpenBSD updates)
4331
433220000308
4333 - Configure fix from Hiroshi Takekawa <takekawa@sr3.t.u-tokyo.ac.jp>
4334
433520000307
4336 - Released 1.2.2p1
4337
433820000305
4339 - Fix DEC compile fix
4340 - Explicitly seed OpenSSL's PRNG before checking rsa_alive()
4341 - Check for getpagesize in libucb.a if not found in libc. Fix for old
4342 Solaris from Andre Lucas <andre.lucas@dial.pipex.com>
4343 - Check for libwrap if --with-tcp-wrappers option specified. Suggestion
4344 Mate Wierdl <mw@moni.msci.memphis.edu>
4345
434620000303
4347 - Added "make host-key" target, Suggestion from Dominik Brettnacher
4348 <domi@saargate.de>
4349 - Don't permanently fail on bind() if getaddrinfo has more choices left for
4350 us. Needed to work around messy IPv6 on Linux. Patch from Arkadiusz
4351 Miskiewicz <misiek@pld.org.pl>
4352 - DEC Unix compile fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
4353 - Manpage fix from David Del Piero <David.DelPiero@qed.qld.gov.au>
4354
435520000302
4356 - Big cleanup of autoconf code
4357 - Rearranged to be a little more logical
4358 - Added -R option for Solaris
4359 - Rewrote OpenSSL detection code. Now uses AC_TRY_RUN with a test program
4360 to detect library and header location _and_ ensure library has proper
4361 RSA support built in (this is a problem with OpenSSL 0.9.5).
4362 - Applied pty cleanup patch from markus.friedl@informatik.uni-erlangen.de
4363 - Avoid warning message with Unix98 ptys
4364 - Warning was valid - possible race condition on PTYs. Avoided using
4365 platform-specific code.
4366 - Document some common problems
4367 - Allow root access to any key. Patch from
4368 markus.friedl@informatik.uni-erlangen.de
4369
437020000207
4371 - Removed SOCKS code. Will support through a ProxyCommand.
4372
437320000203
4374 - Fixed SEGVs in authloop, fix from vbzoli@hbrt.hu
4375 - Add --with-ssl-dir option
4376
437720000202
4378 - Fix lastlog code for directory based lastlogs. Fix from Josh Durham
4379 <jmd@aoe.vt.edu>
4380 - Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
4381 - Added URLs to Japanese translations of documents by HARUYAMA Seigo
4382 <haruyama@nt.phys.s.u-tokyo.ac.jp>
4383
438420000201
4385 - Use socket pairs by default (instead of pipes). Prevents race condition
4386 on several (buggy) OSs. Report and fix from tridge@linuxcare.com
4387
438820000127
4389 - Seed OpenSSL's random number generator before generating RSA keypairs
4390 - Split random collector into seperate file
4391 - Compile fix from Andre Lucas <andre.lucas@dial.pipex.com>
4392
439320000126
4394 - Released 1.2.2 stable
4395
4396 - NeXT keeps it lastlog in /usr/adm. Report from
4397 mouring@newton.pconline.com
4398 - Added note in UPGRADING re interop with commercial SSH using idea.
4399 Report from Jim Knoble <jmknoble@jmknoble.cx>
4400 - Fix linking order for Kerberos/AFS. Fix from Holget Trapp
4401 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
4402
440320000125
4404 - Fix NULL pointer dereference in login.c. Fix from Andre Lucas
4405 <andre.lucas@dial.pipex.com>
4406 - Reorder PAM initialisation so it does not mess up lastlog. Reported
4407 by Andre Lucas <andre.lucas@dial.pipex.com>
4408 - Use preformatted manpages on SCO, report from Gary E. Miller
4409 <gem@rellim.com>
4410 - New URL for x11-ssh-askpass.
4411 - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble
4412 <jmknoble@jmknoble.cx>
4413 - Added 'DESTDIR' option to Makefile to ease package building. Patch from
4414 Jim Knoble <jmknoble@jmknoble.cx>
4415 - Updated RPM spec files to use DESTDIR
4416
441720000124
4418 - Pick up version 1.2.2 from OpenBSD CVS (no changes, just version number
4419 increment)
4420
442120000123
4422 - OpenBSD CVS:
4423 - [packet.c]
4424 getsockname() requires initialized tolen; andy@guildsoftware.com
4425 - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin
4426 <drankin@bohemians.lexington.ky.us>
4427 - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com>
4428
442920000122
4430 - Fix compilation of bsd-snprintf.c on Solaris, fix from Ben Taylor
4431 <bent@clark.net>
4432 - Merge preformatted manpage patch from Andre Lucas
4433 <andre.lucas@dial.pipex.com>
4434 - Make IPv4 use the default in RPM packages
4435 - Irix uses preformatted manpages
4436 - Missing htons() in bsd-bindresvport.c, fix from Holger Trapp
4437 <Holger.Trapp@Informatik.TU-Chemnitz.DE>
4438 - OpenBSD CVS updates:
4439 - [packet.c]
4440 use getpeername() in packet_connection_is_on_socket(), fixes sshd -i;
4441 from Holger.Trapp@Informatik.TU-Chemnitz.DE
4442 - [sshd.c]
4443 log with level log() not fatal() if peer behaves badly.
4444 - [readpass.c]
4445 instead of blocking SIGINT, catch it ourselves, so that we can clean
4446 the tty modes up and kill ourselves -- instead of our process group
4447 leader (scp, cvs, ...) going away and leaving us in noecho mode.
4448 people with cbreak shells never even noticed..
4449 - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8]
4450 ie. -> i.e.,
4451
445220000120
4453 - Don't use getaddrinfo on AIX
4454 - Update to latest OpenBSD CVS:
4455 - [auth-rsa.c]
4456 - fix user/1056, sshd keeps restrictions; dbt@meat.net
4457 - [sshconnect.c]
4458 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
4459 - destroy keys earlier
4460 - split key exchange (kex) and user authentication (user-auth),
4461 ok: provos@
4462 - [sshd.c]
4463 - no need for poll.h; from bright@wintelcom.net
4464 - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags.
4465 - split key exchange (kex) and user authentication (user-auth),
4466 ok: provos@
4467 - Big manpage and config file cleanup from Andre Lucas
4468 <andre.lucas@dial.pipex.com>
4469 - Re-added latest (unmodified) OpenBSD manpages
4470 - Doc updates
4471 - NetBSD patch from David Rankin <drankin@bohemians.lexington.ky.us> and
4472 Christos Zoulas <christos@netbsd.org>
4473
447420000119
4475 - SCO compile fixes from Gary E. Miller <gem@rellim.com>
4476 - Compile fix from Darren_Hall@progressive.com
4477 - Linux/glibc-2.1.2 takes a *long* time to look up names for AF_UNSPEC
4478 addresses using getaddrinfo(). Added a configure switch to make the
4479 default lookup mode AF_INET
4480
448120000118
4482 - Fixed --with-pid-dir option
4483 - Makefile fix from Gary E. Miller <gem@rellim.com>
4484 - Compile fix for HPUX and Solaris from Andre Lucas
4485 <andre.lucas@dial.pipex.com>
4486
448720000117
4488 - Clean up bsd-bindresvport.c. Use arc4random() for picking initial
4489 port, ignore EINVAL errors (Linux) when searching for free port.
4490 - Revert __snprintf -> snprintf aliasing. Apparently Solaris
4491 __snprintf isn't. Report from Theo de Raadt <theo@cvs.openbsd.org>
4492 - Document location of Redhat PAM file in INSTALL.
4493 - Fixed X11 forwarding bug on Linux. libc advertises AF_INET6
4494 INADDR_ANY_INIT addresses via getaddrinfo, but may not be able to
4495 deliver (no IPv6 kernel support)
4496 - Released 1.2.1pre27
4497
4498 - Fix rresvport_af failure errors (logic error in bsd-bindresvport.c)
4499 - Fix --with-ipaddr-display option test. Fix from Jarno Huuskonen
4500 <jhuuskon@hytti.uku.fi>
4501 - Fix hang on logout if processes are still using the pty. Needs
4502 further testing.
4503 - Patch from Christos Zoulas <christos@zoulas.com>
4504 - Try $prefix first when looking for OpenSSL.
4505 - Include sys/types.h when including sys/socket.h in test programs
4506 - Substitute PID directory in sshd.8. Suggestion from Andrew
4507 Stribblehill <a.d.stribblehill@durham.ac.uk>
4508
450920000116
4510 - Renamed --with-xauth-path to --with-xauth
4511 - Added --with-pid-dir option
4512 - Released 1.2.1pre26
4513
4514 - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
4515 - Fixed broken bugfix for /dev/ptmx on Linux systems which lack
4516 openpty(). Report from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
4517
451820000115
4519 - Add --with-xauth-path configure directive and explicit test for
4520 /usr/openwin/bin/xauth for Solaris systems. Report from Anders
4521 Nordby <anders@fix.no>
4522 - Fix incorrect detection of /dev/ptmx on Linux systems that lack
4523 openpty. Report from John Seifarth <john@waw.be>
4524 - Look for intXX_t and u_intXX_t in sys/bitypes.h if they are not in
4525 sys/types.h. Fixes problems on SCO, report from Gary E. Miller
4526 <gem@rellim.com>
4527 - Use __snprintf and __vnsprintf if they are found where snprintf and
4528 vnsprintf are lacking. Suggested by Ben Taylor <bent@shell.clark.net>
4529 and others.
4530
453120000114
4532 - Merged OpenBSD IPv6 patch:
4533 - [sshd.c sshd.8 sshconnect.c ssh.h ssh.c servconf.h servconf.c scp.1]
4534 [scp.c packet.h packet.c login.c log.c canohost.c channels.c]
4535 [hostfile.c sshd_config]
4536 ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new
4537 features: sshd allows multiple ListenAddress and Port options. note
4538 that libwrap is not IPv6-ready. (based on patches from
4539 fujiwara@rcac.tdi.co.jp)
4540 - [ssh.c canohost.c]
4541 more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo,
4542 from itojun@
4543 - [channels.c]
4544 listen on _all_ interfaces for X11-Fwd (hints.ai_flags = AI_PASSIVE)
4545 - [packet.h]
4546 allow auth-kerberos for IPv4 only
4547 - [scp.1 sshd.8 servconf.h scp.c]
4548 document -4, -6, and 'ssh -L 2022/::1/22'
4549 - [ssh.c]
4550 'ssh @host' is illegal (null user name), from
4551 karsten@gedankenpolizei.de
4552 - [sshconnect.c]
4553 better error message
4554 - [sshd.c]
4555 allow auth-kerberos for IPv4 only
4556 - Big IPv6 merge:
4557 - Cleanup overrun in sockaddr copying on RHL 6.1
4558 - Replacements for getaddrinfo, getnameinfo, etc based on versions
4559 from patch from KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>
4560 - Replacement for missing structures on systems that lack IPv6
4561 - record_login needed to know about AF_INET6 addresses
4562 - Borrowed more code from OpenBSD: rresvport_af and requisites
4563
456420000110
4565 - Fixes to auth-skey to enable it to use the standard OpenSSL libraries
4566
456720000107
4568 - New config.sub and config.guess to fix problems on SCO. Supplied
4569 by Gary E. Miller <gem@rellim.com>
4570 - SCO build fix from Gary E. Miller <gem@rellim.com>
4571 - Released 1.2.1pre25
4572
457320000106
4574 - Documentation update & cleanup
4575 - Better KrbIV / AFS detection, based on patch from:
4576 Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
4577
457820000105
4579 - Fixed annoying DES corruption problem. libcrypt has been
4580 overriding symbols in libcrypto. Removed libcrypt and crypt.h
4581 altogether (libcrypto includes its own crypt(1) replacement)
4582 - Added platform-specific rules for Irix 6.x. Included warning that
4583 they are untested.
4584
458520000103
4586 - Add explicit make rules for files proccessed by fixpaths.
4587 - Fix "make install" in RPM spec files. Report from Tenkou N. Hattori
4588 <tnh@kondara.org>
4589 - Removed "nullok" directive from default PAM configuration files.
4590 Added information on enabling EmptyPasswords on openssh+PAM in
4591 UPGRADING file.
4592 - OpenBSD CVS updates
4593 - [ssh-agent.c]
4594 cleanup_exit() for SIGTERM/SIGHUP, too. from fgsch@ and
4595 dgaudet@arctic.org
4596 - [sshconnect.c]
4597 compare correct version for 1.3 compat mode
4598
459920000102
4600 - Prevent multiple inclusion of config.h and defines.h. Suggested
4601 by Andre Lucas <andre.lucas@dial.pipex.com>
4602 - Properly clean up on exit of ssh-agent. Patch from Dean Gaudet
4603 <dgaudet@arctic.org>
4604
460519991231
4606 - Fix password support on systems with a mixture of shadowed and
4607 non-shadowed passwords (e.g. NIS). Report and fix from
4608 HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
4609 - Fix broken autoconf typedef detection. Report from Marc G.
4610 Fournier <marc.fournier@acadiau.ca>
4611 - Fix occasional crash on LinuxPPC. Patch from Franz Sirl
4612 <Franz.Sirl-kernel@lauterbach.com>
4613 - Prevent typedefs from being compiled more than once. Report from
4614 Marc G. Fournier <marc.fournier@acadiau.ca>
4615 - Fill in ut_utaddr utmp field. Report from Benjamin Charron
4616 <iretd@bigfoot.com>
4617 - Really fix broken default path. Fix from Jim Knoble
4618 <jmknoble@jmknoble.cx>
4619 - Remove test for quad_t. No longer needed.
4620 - Released 1.2.1pre24
4621
4622 - Added support for directory-based lastlogs
4623 - Really fix typedefs, patch from Ben Taylor <bent@clark.net>
4624
462519991230
4626 - OpenBSD CVS updates:
4627 - [auth-passwd.c]
4628 check for NULL 1st
4629 - Removed most of the pam code into its own file auth-pam.[ch]. This
4630 cleaned up sshd.c up significantly.
4631 - PAM authentication was incorrectly interpreting
4632 "PermitRootLogin without-password". Report from Matthias Andree
4633 <ma@dt.e-technik.uni-dortmund.de
4634 - Several other cleanups
4635 - Merged Dante SOCKS support patch from David Rankin
4636 <drankin@bohemians.lexington.ky.us>
4637 - Updated documentation with ./configure options
4638 - Released 1.2.1pre23
4639
464019991229
4641 - Applied another NetBSD portability patch from David Rankin
4642 <drankin@bohemians.lexington.ky.us>
4643 - Fix --with-default-path option.
4644 - Autodetect perl, patch from David Rankin
4645 <drankin@bohemians.lexington.ky.us>
4646 - Print whether OpenSSH was compiled with RSARef, patch from
4647 Nalin Dahyabhai <nalin@thermo.stat.ncsu.edu>
4648 - Calls to pam_setcred, patch from Nalin Dahyabhai
4649 <nalin@thermo.stat.ncsu.edu>
4650 - Detect missing size_t and typedef it.
4651 - Rename helper.[ch] to (more appropriate) bsd-misc.[ch]
4652 - Minor Makefile cleaning
4653
465419991228
4655 - Replacement for getpagesize() for systems which lack it
4656 - NetBSD login.c compile fix from David Rankin
4657 <drankin@bohemians.lexington.ky.us>
4658 - Fully set ut_tv if present in utmp or utmpx
4659 - Portability fixes for Irix 5.3 (now compiles OK!)
4660 - autoconf and other misc cleanups
4661 - Merged AIX patch from Darren Hall <dhall@virage.org>
4662 - Cleaned up defines.h
4663 - Released 1.2.1pre22
4664
466519991227
4666 - Automatically correct paths in manpages and configuration files. Patch
4667 and script from Andre Lucas <andre.lucas@dial.pipex.com>
4668 - Removed credits from README to CREDITS file, updated.
4669 - Added --with-default-path to specify custom path for server
4670 - Removed #ifdef trickery from acconfig.h into defines.h
4671 - PAM bugfix. PermitEmptyPassword was being ignored.
4672 - Fixed PAM config files to allow empty passwords if server does.
4673 - Explained spurious PAM auth warning workaround in UPGRADING
4674 - Use last few chars of tty line as ut_id
4675 - New SuSE RPM spec file from Chris Saia <csaia@wtower.com>
4676 - OpenBSD CVS updates:
4677 - [packet.h auth-rhosts.c]
4678 check format string for packet_disconnect and packet_send_debug, too
4679 - [channels.c]
4680 use packet_get_maxsize for channels. consistence.
4681
468219991226
4683 - Enabled utmpx support by default for Solaris
4684 - Cleanup sshd.c PAM a little more
4685 - Revised RPM package to include Jim Knoble's <jmknoble@jmknoble.cx>
4686 X11 ssh-askpass program.
4687 - Disable logging of PAM success and failures, PAM is verbose enough.
4688 Unfortunatly there is currently no way to disable auth failure
4689 messages. Mention this in UPGRADING file and sent message to PAM
4690 developers
4691 - OpenBSD CVS update:
4692 - [ssh-keygen.1 ssh.1]
4693 remove ref to .ssh/random_seed, mention .ssh/environment in
4694 .Sh FILES, too
4695 - Released 1.2.1pre21
4696 - Fixed implicit '.' in default path, report from Jim Knoble
4697 <jmknoble@jmknoble.cx>
4698 - Redhat RPM spec fixes from Jim Knoble <jmknoble@jmknoble.cx>
4699
470019991225
4701 - More fixes from Andre Lucas <andre.lucas@dial.pipex.com>
4702 - Cleanup of auth-passwd.c for shadow and MD5 passwords
4703 - Cleanup and bugfix of PAM authentication code
4704 - Released 1.2.1pre20
4705
4706 - Merged fixes from Ben Taylor <bent@clark.net>
4707 - Fixed configure support for PAM. Reported by Naz <96na@eng.cam.ac.uk>
4708 - Disabled logging of PAM password authentication failures when password
4709 is empty. (e.g start of authentication loop). Reported by Naz
4710 <96na@eng.cam.ac.uk>)
4711
471219991223
4713 - Merged later HPUX patch from Andre Lucas
4714 <andre.lucas@dial.pipex.com>
4715 - Above patch included better utmpx support from Ben Taylor
4716 <bent@clark.net>
4717
471819991222
4719 - Fix undefined fd_set type in ssh.h from Povl H. Pedersen
4720 <pope@netguide.dk>
4721 - Fix login.c breakage on systems which lack ut_host in struct
4722 utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com>
4723
472419991221
4725 - Integration of large HPUX patch from Andre Lucas
4726 <andre.lucas@dial.pipex.com>. Integrating it had a few other
4727 benefits:
4728 - Ability to disable shadow passwords at configure time
4729 - Ability to disable lastlog support at configure time
4730 - Support for IP address in $DISPLAY
4731 - OpenBSD CVS update:
4732 - [sshconnect.c]
4733 say "REMOTE HOST IDENTIFICATION HAS CHANGED"
4734 - Fix DISABLE_SHADOW support
4735 - Allow MD5 passwords even if shadow passwords are disabled
4736 - Release 1.2.1pre19
4737
473819991218
4739 - Redhat init script patch from Chun-Chung Chen
4740 <cjj@u.washington.edu>
4741 - Avoid breakage on systems without IPv6 headers
4742
474319991216
4744 - Makefile changes for Solaris from Peter Kocks
4745 <peter.kocks@baygate.com>
4746 - Minor updates to docs
4747 - Merged OpenBSD CVS changes:
4748 - [authfd.c ssh-agent.c]
4749 keysize warnings talk about identity files
4750 - [packet.c]
4751 "Connection closed by x.x.x.x": fatal() -> log()
4752 - Correctly handle empty passwords in shadow file. Patch from:
4753 "Chris, the Young One" <cky@pobox.com>
4754 - Released 1.2.1pre18
4755
475619991215
4757 - Integrated patchs from Juergen Keil <jk@tools.de>
4758 - Avoid void* pointer arithmatic
4759 - Use LDFLAGS correctly
4760 - Fix SIGIO error in scp
4761 - Simplify status line printing in scp
4762 - Added better test for inline functions compiler support from
4763 Darren_Hall@progressive.com
4764
476519991214
4766 - OpenBSD CVS Changes
4767 - [canohost.c]
4768 fix get_remote_port() and friends for sshd -i;
4769 Holger.Trapp@Informatik.TU-Chemnitz.DE
4770 - [mpaux.c]
4771 make code simpler. no need for memcpy. niels@ ok
4772 - [pty.c]
4773 namebuflen not sizeof namebuflen; bnd@ep-ag.com via djm@mindrot.org
4774 fix proto; markus
4775 - [ssh.1]
4776 typo; mark.baushke@solipsa.com
4777 - [channels.c ssh.c ssh.h sshd.c]
4778 type conflict for 'extern Type *options' in channels.c; dot@dotat.at
4779 - [sshconnect.c]
4780 move checking of hostkey into own function.
4781 - [version.h]
4782 OpenSSH-1.2.1
4783 - Clean up broken includes in pty.c
4784 - Some older systems don't have poll.h, they use sys/poll.h instead
4785 - Doc updates
4786
478719991211
4788 - Fix compilation on systems with AFS. Reported by
4789 aloomis@glue.umd.edu
4790 - Fix installation on Solaris. Reported by
4791 Gordon Rowell <gordonr@gormand.com.au>
4792 - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com,
4793 patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
4794 - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com>
4795 - Compile fix from David Agraz <dagraz@jahoopa.com>
4796 - Avoid compiler warning in bsd-snprintf.c
4797 - Added pam_limits.so to default PAM config. Suggested by
4798 Jim Knoble <jmknoble@jmknoble.cx>
4799
480019991209
4801 - Import of patch from Ben Taylor <bent@clark.net>:
4802 - Improved PAM support
4803 - "uninstall" rule for Makefile
4804 - utmpx support
4805 - Should fix PAM problems on Solaris
4806 - OpenBSD CVS updates:
4807 - [readpass.c]
4808 avoid stdio; based on work by markus, millert, and I
4809 - [sshd.c]
4810 make sure the client selects a supported cipher
4811 - [sshd.c]
4812 fix sighup handling. accept would just restart and daemon handled
4813 sighup only after the next connection was accepted. use poll on
4814 listen sock now.
4815 - [sshd.c]
4816 make that a fatal
4817 - Applied patch from David Rankin <drankin@bohemians.lexington.ky.us>
4818 to fix libwrap support on NetBSD
4819 - Released 1.2pre17
4820
482119991208
4822 - Compile fix for Solaris with /dev/ptmx from
4823 David Agraz <dagraz@jahoopa.com>
4824
482519991207
4826 - sshd Redhat init script patch from Jim Knoble <jmknoble@jmknoble.cx>
4827 fixes compatability with 4.x and 5.x
4828 - Fixed default SSH_ASKPASS
4829 - Fix PAM account and session being called multiple times. Problem
4830 reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>
4831 - Merged more OpenBSD changes:
4832 - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c]
4833 move atomicio into it's own file. wrap all socket write()s which
4834 were doing write(sock, buf, len) != len, with atomicio() calls.
4835 - [auth-skey.c]
4836 fd leak
4837 - [authfile.c]
4838 properly name fd variable
4839 - [channels.c]
4840 display great hatred towards strcpy
4841 - [pty.c pty.h sshd.c]
4842 use openpty() if it exists (it does on BSD4_4)
4843 - [tildexpand.c]
4844 check for ~ expansion past MAXPATHLEN
4845 - Modified helper.c to use new atomicio function.
4846 - Reformat Makefile a little
4847 - Moved RC4 routines from rc4.[ch] into helper.c
4848 - Added autoconf code to detect /dev/ptmx (Solaris) and /dev/ptc (AIX)
4849 - Updated SuSE spec from Chris Saia <csaia@wtower.com>
4850 - Tweaked Redhat spec
4851 - Clean up bad imports of a few files (forgot -kb)
4852 - Released 1.2pre16
4853
485419991204
4855 - Small cleanup of PAM code in sshd.c
4856 - Merged OpenBSD CVS changes:
4857 - [auth-krb4.c auth-passwd.c auth-skey.c ssh.h]
4858 move skey-auth from auth-passwd.c to auth-skey.c, same for krb4
4859 - [auth-rsa.c]
4860 warn only about mismatch if key is _used_
4861 warn about keysize-mismatch with log() not error()
4862 channels.c readconf.c readconf.h ssh.c ssh.h sshconnect.c
4863 ports are u_short
4864 - [hostfile.c]
4865 indent, shorter warning
4866 - [nchan.c]
4867 use error() for internal errors
4868 - [packet.c]
4869 set loglevel for SSH_MSG_DISCONNECT to log(), not fatal()
4870 serverloop.c
4871 indent
4872 - [ssh-add.1 ssh-add.c ssh.h]
4873 document $SSH_ASKPASS, reasonable default
4874 - [ssh.1]
4875 CheckHostIP is not available for connects via proxy command
4876 - [sshconnect.c]
4877 typo
4878 easier to read client code for passwd and skey auth
4879 turn of checkhostip for proxy connects, since we don't know the remote ip
4880
488119991126
4882 - Add definition for __P()
4883 - Added [v]snprintf() replacement for systems that lack it
4884
488519991125
4886 - More reformatting merged from OpenBSD CVS
4887 - Merged OpenBSD CVS changes:
4888 - [channels.c]
4889 fix packet_integrity_check() for !have_hostname_in_open.
4890 report from mrwizard@psu.edu via djm@ibs.com.au
4891 - [channels.c]
4892 set SO_REUSEADDR and SO_LINGER for forwarded ports.
4893 chip@valinux.com via damien@ibs.com.au
4894 - [nchan.c]
4895 it's not an error() if shutdown_write failes in nchan.
4896 - [readconf.c]
4897 remove dead #ifdef-0-code
4898 - [readconf.c servconf.c]
4899 strcasecmp instead of tolower
4900 - [scp.c]
4901 progress meter overflow fix from damien@ibs.com.au
4902 - [ssh-add.1 ssh-add.c]
4903 SSH_ASKPASS support
4904 - [ssh.1 ssh.c]
4905 postpone fork_after_authentication until command execution,
4906 request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
4907 plus: use daemon() for backgrounding
4908 - Added BSD compatible install program and autoconf test, thanks to
4909 Niels Kristian Bech Jensen <nkbj@image.dk>
4910 - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
4911 - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
4912 - Release 1.2pre15
4913
491419991124
4915 - Merged very large OpenBSD source code reformat
4916 - OpenBSD CVS updates
4917 - [channels.c cipher.c compat.c log-client.c scp.c serverloop.c]
4918 [ssh.h sshd.8 sshd.c]
4919 syslog changes:
4920 * Unified Logmessage for all auth-types, for success and for failed
4921 * Standard connections get only ONE line in the LOG when level==LOG:
4922 Auth-attempts are logged only, if authentication is:
4923 a) successfull or
4924 b) with passwd or
4925 c) we had more than AUTH_FAIL_LOG failues
4926 * many log() became verbose()
4927 * old behaviour with level=VERBOSE
4928 - [readconf.c readconf.h ssh.1 ssh.h sshconnect.c sshd.c]
4929 tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
4930 messages. allows use of s/key in windows (ttssh, securecrt) and
4931 ssh-1.2.27 clients without 'ssh -v', ok: niels@
4932 - [sshd.8]
4933 -V, for fallback to openssh in SSH2 compatibility mode
4934 - [sshd.c]
4935 fix sigchld race; cjc5@po.cwru.edu
4936
493719991123
4938 - Added SuSE package files from Chris Saia <csaia@wtower.com>
4939 - Restructured package-related files under packages/*
4940 - Added generic PAM config
4941 - Numerous little Solaris fixes
4942 - Add recommendation to use GNU make to INSTALL document
4943
494419991122
4945 - Make <enter> close gnome-ssh-askpass (Debian bug #50299)
4946 - OpenBSD CVS Changes
4947 - [ssh-keygen.c]
4948 don't create ~/.ssh only if the user wants to store the private
4949 key there. show fingerprint instead of public-key after
4950 keygeneration. ok niels@
4951 - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h
4952 - Added timersub() macro
4953 - Tidy RCSIDs of bsd-*.c
4954 - Added autoconf test and macro to deal with old PAM libraries
4955 pam_strerror definition (one arg vs two).
4956 - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>)
4957 - Retry /dev/urandom reads interrupted by signal (report from
4958 Robert Hardy <rhardy@webcon.net>)
4959 - Added a setenv replacement for systems which lack it
4960 - Only display public key comment when presenting ssh-askpass dialog
4961 - Released 1.2pre14
4962
4963 - Configure, Make and changelog corrections from Tudor Bosman
4964 <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk>
4965
496619991121
4967 - OpenBSD CVS Changes:
4968 - [channels.c]
4969 make this compile, bad markus
4970 - [log.c readconf.c servconf.c ssh.h]
4971 bugfix: loglevels are per host in clientconfig,
4972 factor out common log-level parsing code.
4973 - [servconf.c]
4974 remove unused index (-Wall)
4975 - [ssh-agent.c]
4976 only one 'extern char *__progname'
4977 - [sshd.8]
4978 document SIGHUP, -Q to synopsis
4979 - [sshconnect.c serverloop.c sshd.c packet.c packet.h]
4980 [channels.c clientloop.c]
4981 SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
4982 [hope this time my ISP stays alive during commit]
4983 - [OVERVIEW README] typos; green@freebsd
4984 - [ssh-keygen.c]
4985 replace xstrdup+strcat with strlcat+fixed buffer, fixes OF (bad me)
4986 exit if writing the key fails (no infinit loop)
4987 print usage() everytime we get bad options
4988 - [ssh-keygen.c] overflow, djm@mindrot.org
4989 - [sshd.c] fix sigchld race; cjc5@po.cwru.edu
4990
499119991120
4992 - Merged more Solaris support from Marc G. Fournier
4993 <marc.fournier@acadiau.ca>
4994 - Wrote autoconf tests for integer bit-types
4995 - Fixed enabling kerberos support
4996 - Fix segfault in ssh-keygen caused by buffer overrun in filename
4997 handling.
4998
499919991119
5000 - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>
5001 - Merged OpenBSD CVS changes
5002 - [auth-rhosts.c auth-rsa.c ssh-agent.c sshconnect.c sshd.c]
5003 more %d vs. %s in fmt-strings
5004 - [authfd.c]
5005 Integers should not be printed with %s
5006 - EGD uses a socket, not a named pipe. Duh.
5007 - Fix includes in fingerprint.c
5008 - Fix scp progress bar bug again.
5009 - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of
5010 David Rankin <drankin@bohemians.lexington.ky.us>
5011 - Added autoconf option to enable Kerberos 4 support (untested)
5012 - Added autoconf option to enable AFS support (untested)
5013 - Added autoconf option to enable S/Key support (untested)
5014 - Added autoconf option to enable TCP wrappers support (compiles OK)
5015 - Renamed BSD helper function files to bsd-*
5016 - Added tests for login and daemon and enable OpenBSD replacements for
5017 when they are absent.
5018 - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu>
5019
502019991118
5021 - Merged OpenBSD CVS changes
5022 - [scp.c] foregroundproc() in scp
5023 - [sshconnect.h] include fingerprint.h
5024 - [sshd.c] bugfix: the log() for passwd-auth escaped during logging
5025 changes.
5026 - [ssh.1] Spell my name right.
5027 - Added openssh.com info to README
5028
502919991117
5030 - Merged OpenBSD CVS changes
5031 - [ChangeLog.Ylonen] noone needs this anymore
5032 - [authfd.c] close-on-exec for auth-socket, ok deraadt
5033 - [hostfile.c]
5034 in known_hosts key lookup the entry for the bits does not need
5035 to match, all the information is contained in n and e. This
5036 solves the problem with buggy servers announcing the wrong
5037 modulus length. markus and me.
5038 - [serverloop.c]
5039 bugfix: check for space if child has terminated, from:
5040 iedowse@maths.tcd.ie
5041 - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c]
5042 [fingerprint.c fingerprint.h]
5043 rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>
5044 - [ssh-agent.1] typo
5045 - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@
5046 - [sshd.c]
5047 force logging to stderr while loading private key file
5048 (lost while converting to new log-levels)
5049
505019991116
5051 - Fix some Linux libc5 problems reported by Miles Wilson <mw@mctitle.com>
5052 - Merged OpenBSD CVS changes:
5053 - [auth-rh-rsa.c auth-rsa.c authfd.c authfd.h hostfile.c mpaux.c]
5054 [mpaux.h ssh-add.c ssh-agent.c ssh.h ssh.c sshd.c]
5055 the keysize of rsa-parameter 'n' is passed implizit,
5056 a few more checks and warnings about 'pretended' keysizes.
5057 - [cipher.c cipher.h packet.c packet.h sshd.c]
5058 remove support for cipher RC4
5059 - [ssh.c]
5060 a note for legay systems about secuity issues with permanently_set_uid(),
5061 the private hostkey and ptrace()
5062 - [sshconnect.c]
5063 more detailed messages about adding and checking hostkeys
5064
506519991115
5066 - Merged OpenBSD CVS changes:
5067 - [ssh-add.c] change passphrase loop logic and remove ref to
5068 $DISPLAY, ok niels
5069 - Changed to ssh-add.c broke askpass support. Revised it to be a little more
5070 modular.
5071 - Revised autoconf support for enabling/disabling askpass support.
5072 - Merged more OpenBSD CVS changes:
5073 [auth-krb4.c]
5074 - disconnect if getpeername() fails
5075 - missing xfree(*client)
5076 [canohost.c]
5077 - disconnect if getpeername() fails
5078 - fix comment: we _do_ disconnect if ip-options are set
5079 [sshd.c]
5080 - disconnect if getpeername() fails
5081 - move checking of remote port to central place
5082 [auth-rhosts.c] move checking of remote port to central place
5083 [log-server.c] avoid extra fd per sshd, from millert@
5084 [readconf.c] print _all_ bad config-options in ssh(1), too
5085 [readconf.h] print _all_ bad config-options in ssh(1), too
5086 [ssh.c] print _all_ bad config-options in ssh(1), too
5087 [sshconnect.c] disconnect if getpeername() fails
5088 - OpenBSD's changes to sshd.c broke the PAM stuff, re-merged it.
5089 - Various small cleanups to bring diff (against OpenBSD) size down.
5090 - Merged more Solaris compability from Marc G. Fournier
5091 <marc.fournier@acadiau.ca>
5092 - Wrote autoconf tests for __progname symbol
5093 - RPM spec file fixes from Jim Knoble <jmknoble@jmknoble.cx>
5094 - Released 1.2pre12
5095
5096 - Another OpenBSD CVS update:
5097 - [ssh-keygen.1] fix .Xr
5098
509919991114
5100 - Solaris compilation fixes (still imcomplete)
5101
510219991113
5103 - Build patch from Niels Kristian Bech Jensen <nkbj@image.dk>
5104 - Don't install config files if they already exist
5105 - Fix inclusion of additional preprocessor directives from acconfig.h
5106 - Removed redundant inclusions of config.h
5107 - Added 'Obsoletes' lines to RPM spec file
5108 - Merged OpenBSD CVS changes:
5109 - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels
5110 - [scp.c] fix overflow reported by damien@ibs.com.au: off_t
5111 totalsize, ok niels,aaron
5112 - Delay fork (-f option) in ssh until after port forwarded connections
5113 have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi>
5114 - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de>
5115 - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled
5116 - Tidied default config file some more
5117 - Revised Redhat initscript to fix bug: sshd (re)start would fail
5118 if executed from inside a ssh login.
5119
512019991112
5121 - Merged changes from OpenBSD CVS
5122 - [sshd.c] session_key_int may be zero
5123 - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config]
5124 IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok
5125 deraadt,millert
5126 - Brought default sshd_config more in line with OpenBSD's
5127 - Grab server in gnome-ssh-askpass (Debian bug #49872)
5128 - Released 1.2pre10
5129
5130 - Added INSTALL documentation
5131 - Merged yet more changes from OpenBSD CVS
5132 - [auth-rh-rsa.c auth-rhosts.c auth-rsa.c channels.c clientloop.c]
5133 [ssh.c ssh.h sshconnect.c sshd.c]
5134 make all access to options via 'extern Options options'
5135 and 'extern ServerOptions options' respectively;
5136 options are no longer passed as arguments:
5137 * make options handling more consistent
5138 * remove #include "readconf.h" from ssh.h
5139 * readconf.h is only included if necessary
5140 - [mpaux.c] clear temp buffer
5141 - [servconf.c] print _all_ bad options found in configfile
5142 - Make ssh-askpass support optional through autoconf
5143 - Fix nasty division-by-zero error in scp.c
5144 - Released 1.2pre11
5145
514619991111
5147 - Added (untested) Entropy Gathering Daemon (EGD) support
5148 - Fixed /dev/urandom fd leak (Debian bug #49722)
5149 - Merged OpenBSD CVS changes:
5150 - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
5151 - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
5152 - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
5153 - Fix integer overflow which was messing up scp's progress bar for large
5154 file transfers. Fix submitted to OpenBSD developers. Report and fix
5155 from Kees Cook <cook@cpoint.net>
5156 - Merged more OpenBSD CVS changes:
5157 - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal()
5158 + krb-cleanup cleanup
5159 - [clientloop.c log-client.c log-server.c ]
5160 [readconf.c readconf.h servconf.c servconf.h ]
5161 [ssh.1 ssh.c ssh.h sshd.8]
5162 add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
5163 obsoletes QuietMode and FascistLogging in sshd.
5164 - [sshd.c] fix fatal/assert() bug reported by damien@ibs.com.au:
5165 allow session_key_int != sizeof(session_key)
5166 [this should fix the pre-assert-removal-core-files]
5167 - Updated default config file to use new LogLevel option and to improve
5168 readability
5169
517019991110
5171 - Merged several minor fixes:
5172 - ssh-agent commandline parsing
5173 - RPM spec file now installs ssh setuid root
5174 - Makefile creates libdir
5175 - Merged beginnings of Solaris compability from Marc G. Fournier
5176 <marc.fournier@acadiau.ca>
5177
517819991109
5179 - Autodetection of SSL/Crypto library location via autoconf
5180 - Fixed location of ssh-askpass to follow autoconf
5181 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
5182 - Autodetection of RSAref library for US users
5183 - Minor doc updates
5184 - Merged OpenBSD CVS changes:
5185 - [rsa.c] bugfix: use correct size for memset()
5186 - [sshconnect.c] warn if announced size of modulus 'n' != real size
5187 - Added GNOME passphrase requestor (use --with-gnome-askpass)
5188 - RPM build now creates subpackages
5189 - Released 1.2pre9
5190
519119991108
5192 - Removed debian/ directory. This is now being maintained separately.
5193 - Added symlinks for slogin in RPM spec file
5194 - Fixed permissions on manpages in RPM spec file
5195 - Added references to required libraries in README file
5196 - Removed config.h.in from CVS
5197 - Removed pwdb support (better pluggable auth is provided by glibc)
5198 - Made PAM and requisite libdl optional
5199 - Removed lots of unnecessary checks from autoconf
5200 - Added support and autoconf test for openpty() function (Unix98 pty support)
5201 - Fix for scp not finding ssh if not installed as /usr/bin/ssh
5202 - Added TODO file
5203 - Merged parts of Debian patch From Phil Hands <phil@hands.com>:
5204 - Added ssh-askpass program
5205 - Added ssh-askpass support to ssh-add.c
5206 - Create symlinks for slogin on install
5207 - Fix "distclean" target in makefile
5208 - Added example for ssh-agent to manpage
5209 - Added support for PAM_TEXT_INFO messages
5210 - Disable internal /etc/nologin support if PAM enabled
5211 - Merged latest OpenBSD CVS changes:
5212 - [all] replace assert() with error, fatal or packet_disconnect
5213 - [sshd.c] don't send fail-msg but disconnect if too many authentication
5214 failures
5215 - [sshd.c] remove unused argument. ok dugsong
5216 - [sshd.c] typo
5217 - [rsa.c] clear buffers used for encryption. ok: niels
5218 - [rsa.c] replace assert() with error, fatal or packet_disconnect
5219 - [auth-krb4.c] remove unused argument. ok dugsong
5220 - Fixed coredump after merge of OpenBSD rsa.c patch
5221 - Released 1.2pre8
5222
522319991102
5224 - Merged change from OpenBSD CVS
5225 - One-line cleanup in sshd.c
5226
522719991030
5228 - Integrated debian package support from Dan Brosemer <odin@linuxfreak.com>
5229 - Merged latest updates for OpenBSD CVS:
5230 - channels.[ch] - remove broken x11 fix and document istate/ostate
5231 - ssh-agent.c - call setsid() regardless of argv[]
5232 - ssh.c - save a few lines when disabling rhosts-{rsa-}auth
5233 - Documentation cleanups
5234 - Renamed README -> README.Ylonen
5235 - Renamed README.openssh ->README
5236
523719991029
5238 - Renamed openssh* back to ssh* at request of Theo de Raadt
5239 - Incorporated latest changes from OpenBSD's CVS
5240 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
5241 - Integrated PAM env patch from Nalin Dahyabhai <nalin.dahyabhai@pobox.com>
5242 - Make distclean now removed configure script
5243 - Improved PAM logging
5244 - Added some debug() calls for PAM
5245 - Removed redundant subdirectories
5246 - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for
5247 building on Debian.
5248 - Fixed off-by-one error in PAM env patch
5249 - Released 1.2pre6
5250
525119991028
5252 - Further PAM enhancements.
5253 - Much cleaner
5254 - Now uses account and session modules for all logins.
5255 - Integrated patch from Dan Brosemer <odin@linuxfreak.com>
5256 - Build fixes
5257 - Autoconf
5258 - Change binary names to open*
5259 - Fixed autoconf script to detect PAM on RH6.1
5260 - Added tests for libpwdb, and OpenBSD functions to autoconf
5261 - Released 1.2pre4
5262
5263 - Imported latest OpenBSD CVS code
5264 - Updated README.openssh
5265 - Released 1.2pre5
5266
526719991027
5268 - Adapted PAM patch.
5269 - Released 1.0pre2
5270
5271 - Excised my buggy replacements for strlcpy and mkdtemp
5272 - Imported correct OpenBSD strlcpy and mkdtemp routines.
5273 - Reduced arc4random_stir entropy read to 32 bytes (256 bits)
5274 - Picked up correct version number from OpenBSD
5275 - Added sshd.pam PAM configuration file
5276 - Added sshd.init Redhat init script
5277 - Added openssh.spec RPM spec file
5278 - Released 1.2pre3
5279
528019991026
5281 - Fixed include paths of OpenSSL functions
5282 - Use OpenSSL MD5 routines
5283 - Imported RC4 code from nanocrypt
5284 - Wrote replacements for OpenBSD arc4random* functions
5285 - Wrote replacements for strlcpy and mkdtemp
5286 - Released 1.0pre1
5287
5288$Id: ChangeLog,v 1.3 2002/05/10 22:24:35 stealth Exp $