-
Notifications
You must be signed in to change notification settings - Fork 52
/
Copy pathChangeLog
8584 lines (6287 loc) · 295 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
commit 9f82e5a9042f2d872e98f48a876fcab3e25dd9bb
Author: Tim Rice <tim@multitalents.net>
Date: Mon Mar 16 22:49:20 2015 -0700
portability fix: Solaris systems may not have a grep that understands -q
commit 8ef691f7d9ef500257a549d0906d78187490668f
Author: Damien Miller <djm@google.com>
Date: Wed Mar 11 10:35:26 2015 +1100
fix compile with clang
commit 4df590cf8dc799e8986268d62019b487a8ed63ad
Author: Damien Miller <djm@google.com>
Date: Wed Mar 11 10:02:39 2015 +1100
make unit tests work for !OPENSSH_HAS_ECC
commit 307bb40277ca2c32e97e61d70d1ed74b571fd6ba
Author: djm@openbsd.org <djm@openbsd.org>
Date: Sat Mar 7 04:41:48 2015 +0000
upstream commit
unbreak for w/SSH1 (default) case; ok markus@ deraadt@
commit b44ee0c998fb4c5f3c3281f2398af5ce42840b6f
Author: Damien Miller <djm@mindrot.org>
Date: Thu Mar 5 18:39:20 2015 -0800
unbreak hostkeys test for w/ SSH1 case
commit 55e5bdeb519cb60cc18b7ba0545be581fb8598b4
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Mar 6 01:40:56 2015 +0000
upstream commit
fix sshkey_certify() return value for unsupported key types;
ok markus@ deraadt@
commit be8f658e550a434eac04256bfbc4289457a24e99
Author: Damien Miller <djm@mindrot.org>
Date: Wed Mar 4 15:38:03 2015 -0800
update version numbers to match version.h
commit ac5e8acefa253eb5e5ba186e34236c0e8007afdc
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Mar 4 23:22:35 2015 +0000
upstream commit
make these work with !SSH1; ok markus@ deraadt@
commit 2f04af92f036b0c87a23efb259c37da98cd81fe6
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Mar 4 21:12:59 2015 +0000
upstream commit
make ssh-add -D work with !SSH1 agent
commit a05adf95d2af6abb2b7826ddaa7a0ec0cdc1726b
Author: Damien Miller <djm@mindrot.org>
Date: Wed Mar 4 00:55:48 2015 -0800
netcat needs poll.h portability goop
commit dad2b1892b4c1b7e58df483a8c5b983c4454e099
Author: markus@openbsd.org <markus@openbsd.org>
Date: Tue Mar 3 22:35:19 2015 +0000
upstream commit
make it possible to run tests w/o ssh1 support; ok djm@
commit d48a22601bdd3eec054794c535f4ae8d8ae4c6e2
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Mar 4 18:53:53 2015 +0000
upstream commit
crank; ok markus, deraadt
commit bbffb23daa0b002dd9f296e396a9ab8a5866b339
Author: Damien Miller <djm@mindrot.org>
Date: Tue Mar 3 13:50:27 2015 -0800
more --without-ssh1 fixes
commit 6c2039286f503e2012a58a1d109e389016e7a99b
Author: Damien Miller <djm@mindrot.org>
Date: Tue Mar 3 13:48:48 2015 -0800
fix merge both that broke --without-ssh1 compile
commit 111dfb225478a76f89ecbcd31e96eaf1311b59d3
Author: djm@openbsd.org <djm@openbsd.org>
Date: Tue Mar 3 21:21:13 2015 +0000
upstream commit
add SSH1 Makefile knob to make it easier to build without
SSH1 support; ok markus@
commit 3f7f5e6c5d2aa3f6710289c1a30119e534e56c5c
Author: djm@openbsd.org <djm@openbsd.org>
Date: Tue Mar 3 20:42:49 2015 +0000
upstream commit
expand __unused to full __attribute__ for better portability
commit 2fab9b0f8720baf990c931e3f68babb0bf9949c6
Author: Damien Miller <djm@mindrot.org>
Date: Wed Mar 4 07:41:27 2015 +1100
avoid warning
commit d1bc844322461f882b4fd2277ba9a8d4966573d2
Author: Damien Miller <djm@mindrot.org>
Date: Wed Mar 4 06:31:45 2015 +1100
Revert "define __unused to nothing if not already defined"
This reverts commit 1598419e38afbaa8aa5df8dd6b0af98301e2c908.
Some system headers have objects named __unused
commit 00797e86b2d98334d1bb808f65fa1fd47f328ff1
Author: Damien Miller <djm@mindrot.org>
Date: Wed Mar 4 05:02:45 2015 +1100
check for crypt and DES_crypt in openssl block
fixes builds on systems that use DES_crypt; based on patch
from Roumen Petrov
commit 1598419e38afbaa8aa5df8dd6b0af98301e2c908
Author: Damien Miller <djm@mindrot.org>
Date: Wed Mar 4 04:59:13 2015 +1100
define __unused to nothing if not already defined
fixes builds on BSD/OS
commit d608a51daad4f14ad6ab43d7cf74ef4801cc3fe9
Author: djm@openbsd.org <djm@openbsd.org>
Date: Tue Mar 3 17:53:40 2015 +0000
upstream commit
reorder logic for better portability; patch from Roumen
Petrov
commit 68d2dfc464fbcdf8d6387884260f9801f4352393
Author: djm@openbsd.org <djm@openbsd.org>
Date: Tue Mar 3 06:48:58 2015 +0000
upstream commit
Allow "ssh -Q protocol-version" to list supported SSH
protocol versions. Useful for detecting builds without SSH v.1 support; idea
and ok markus@
commit 39e2f1229562e1195169905607bc12290d21f021
Author: millert@openbsd.org <millert@openbsd.org>
Date: Sun Mar 1 15:44:40 2015 +0000
upstream commit
Make sure we only call getnameinfo() for AF_INET or AF_INET6
sockets. getpeername() of a Unix domain socket may return without error on
some systems without actually setting ss_family so getnameinfo() was getting
called with ss_family set to AF_UNSPEC. OK djm@
commit e47536ba9692d271b8ad89078abdecf0a1c11707
Author: Damien Miller <djm@mindrot.org>
Date: Sat Feb 28 08:20:11 2015 -0800
portability fixes for regress/netcat.c
Mostly avoiding "err(1, NULL)"
commit 02973ad5f6f49d8420e50a392331432b0396c100
Author: Damien Miller <djm@mindrot.org>
Date: Sat Feb 28 08:05:27 2015 -0800
twiddle another test for portability
from Tom G. Christensen
commit f7f3116abf2a6e2f309ab096b08c58d19613e5d0
Author: Damien Miller <djm@mindrot.org>
Date: Fri Feb 27 15:52:49 2015 -0800
twiddle test for portability
commit 1ad3a77cc9d5568f5437ff99d377aa7a41859b83
Author: Damien Miller <djm@mindrot.org>
Date: Thu Feb 26 20:33:22 2015 -0800
make regress/netcat.c fd passing (more) portable
commit 9e1cfca7e1fe9cf8edb634fc894e43993e4da1ea
Author: Damien Miller <djm@mindrot.org>
Date: Thu Feb 26 20:32:58 2015 -0800
create OBJ/valgrind-out before running unittests
commit bd58853102cee739f0e115e6d4b5334332ab1442
Author: Damien Miller <djm@mindrot.org>
Date: Wed Feb 25 16:58:22 2015 -0800
valgrind support
commit f43d17269194761eded9e89f17456332f4c83824
Author: djm@openbsd.org <djm@openbsd.org>
Date: Thu Feb 26 20:45:47 2015 +0000
upstream commit
don't printf NULL key comments; reported by Tom Christensen
commit 6e6458b476ec854db33e3e68ebf4f489d0ab3df8
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Feb 25 23:05:47 2015 +0000
upstream commit
zero cmsgbuf before use; we initialise the bits we use
but valgrind still spams warning on it
commit a63cfa26864b93ab6afefad0b630e5358ed8edfa
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Feb 25 19:54:02 2015 +0000
upstream commit
fix small memory leak when UpdateHostkeys=no
commit e6b950341dd75baa8526f1862bca39e52f5b879b
Author: Tim Rice <tim@multitalents.net>
Date: Wed Feb 25 09:56:48 2015 -0800
Revert "Work around finicky USL linker so netcat will build."
This reverts commit d1db656021d0cd8c001a6692f772f1de29b67c8b.
No longer needed with commit 678e473e2af2e4802f24dd913985864d9ead7fb3
commit 6f621603f9cff2a5d6016a404c96cb2f8ac2dec0
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Feb 25 17:29:38 2015 +0000
upstream commit
don't leak validity of user in "too many authentication
failures" disconnect message; reported by Sebastian Reitenbach
commit 6288e3a935494df12519164f52ca5c8c65fc3ca5
Author: naddy@openbsd.org <naddy@openbsd.org>
Date: Tue Feb 24 15:24:05 2015 +0000
upstream commit
add -v (show ASCII art) to -l's synopsis; ok djm@
commit 678e473e2af2e4802f24dd913985864d9ead7fb3
Author: Darren Tucker <dtucker@zip.com.au>
Date: Thu Feb 26 04:12:58 2015 +1100
Remove dependency on xmalloc.
Remove ssh_get_progname's dependency on xmalloc, which should reduce
link order problems. ok djm@
commit 5d5ec165c5b614b03678afdad881f10e25832e46
Author: Darren Tucker <dtucker@zip.com.au>
Date: Wed Feb 25 15:32:49 2015 +1100
Restrict ECDSA and ECDH tests.
ifdef out some more ECDSA and ECDH tests when built against an OpenSSL
that does not have eliptic curve functionality.
commit 1734e276d99b17e92d4233fac7aef3a3180aaca7
Author: Darren Tucker <dtucker@zip.com.au>
Date: Wed Feb 25 13:40:45 2015 +1100
Move definition of _NSIG.
_NSIG is only unsed in one file, so move it there prevent redefinition
warnings reported by Kevin Brott.
commit a47ead7c95cfbeb72721066c4da2312e5b1b9f3d
Author: Darren Tucker <dtucker@zip.com.au>
Date: Wed Feb 25 13:17:40 2015 +1100
Add includes.h for compatibility stuff.
commit 38806bda6d2e48ad32812b461eebe17672ada771
Author: Damien Miller <djm@mindrot.org>
Date: Tue Feb 24 16:50:06 2015 -0800
include netdb.h to look for MAXHOSTNAMELEN; ok tim
commit d1db656021d0cd8c001a6692f772f1de29b67c8b
Author: Tim Rice <tim@multitalents.net>
Date: Tue Feb 24 10:42:08 2015 -0800
Work around finicky USL linker so netcat will build.
commit cb030ce25f555737e8ba97bdd7883ac43f3ff2a3
Author: Damien Miller <djm@mindrot.org>
Date: Tue Feb 24 09:23:04 2015 -0800
include includes.h to avoid build failure on AIX
commit 13af342458f5064144abbb07e5ac9bbd4eb42567
Author: Tim Rice <tim@multitalents.net>
Date: Tue Feb 24 07:56:47 2015 -0800
Original portability patch from djm@ for platforms missing err.h.
Fix name space clash on Solaris 10. Still more to do for Solaris 10
to deal with msghdr structure differences. ok djm@
commit 910209203d0cd60c5083901cbcc0b7b44d9f48d2
Author: Tim Rice <tim@multitalents.net>
Date: Mon Feb 23 22:06:56 2015 -0800
cleaner way fix dispatch.h portion of commit
a88dd1da119052870bb2654c1a32c51971eade16
(some systems have sig_atomic_t in signal.h, some in sys/signal.h)
Sounds good to me djm@
commit 676c38d7cbe65b76bbfff796861bb6615cc6a596
Author: Tim Rice <tim@multitalents.net>
Date: Mon Feb 23 21:51:33 2015 -0800
portability fix: if we can't dind a better define for HOST_NAME_MAX, use 255
commit 1221b22023dce38cbc90ba77eae4c5d78c77a5e6
Author: Tim Rice <tim@multitalents.net>
Date: Mon Feb 23 21:50:34 2015 -0800
portablity fix: s/__inline__/inline/
commit 4c356308a88d309c796325bb75dce90ca16591d5
Author: Darren Tucker <dtucker@zip.com.au>
Date: Tue Feb 24 13:49:31 2015 +1100
Wrap stdint.h includes in HAVE_STDINT_H.
commit c9c88355c6a27a908e7d1e5003a2b35ea99c1614
Author: Darren Tucker <dtucker@zip.com.au>
Date: Tue Feb 24 13:43:57 2015 +1100
Add AI_NUMERICSERV to fake-rfc2553.
Our getaddrinfo implementation always returns numeric values already.
commit ef342ab1ce6fb9a4b30186c89c309d0ae9d0eeb4
Author: Darren Tucker <dtucker@zip.com.au>
Date: Tue Feb 24 13:39:57 2015 +1100
Include OpenSSL's objects.h before bn.h.
Prevents compile errors on some platforms (at least old GCCs and AIX's
XLC compilers).
commit dcc8997d116f615195aa7c9ec019fb36c28c6228
Author: Darren Tucker <dtucker@zip.com.au>
Date: Tue Feb 24 12:30:59 2015 +1100
Convert two macros into functions.
Convert packet_send_debug and packet_disconnect from macros to
functions. Some older GCCs (2.7.x, 2.95.x) see to have problems with
variadic macros with only one argument so we convert these two into
functions. ok djm@
commit 2285c30d51b7e2052c6526445abe7e7cc7e170a1
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 23 22:21:21 2015 +0000
upstream commit
further silence spurious error message even when -v is
specified (e.g. to get visual host keys); reported by naddy@
commit 9af21979c00652029e160295e988dea40758ece2
Author: Damien Miller <djm@mindrot.org>
Date: Tue Feb 24 09:04:32 2015 +1100
don't include stdint.h unless HAVE_STDINT_H set
commit 62f678dd51660d6f8aee1da33d3222c5de10a89e
Author: Damien Miller <djm@mindrot.org>
Date: Tue Feb 24 09:02:54 2015 +1100
nother sys/queue.h -> sys-queue.h fix
spotted by Tom Christensen
commit b3c19151cba2c0ed01b27f55de0d723ad07ca98f
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 23 20:32:15 2015 +0000
upstream commit
fix a race condition by using a mux socket rather than an
ineffectual wait statement
commit a88dd1da119052870bb2654c1a32c51971eade16
Author: Damien Miller <djm@mindrot.org>
Date: Tue Feb 24 06:30:29 2015 +1100
various include fixes for portable
commit 5248429b5ec524d0a65507cff0cdd6e0cb99effd
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 23 16:55:51 2015 +0000
upstream commit
add an XXX to remind me to improve sshkey_load_public
commit e94e4b07ef2eaead38b085a60535df9981cdbcdb
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 23 16:55:31 2015 +0000
upstream commit
silence a spurious error message when listing
fingerprints for known_hosts; bz#2342
commit f2293a65392b54ac721f66bc0b44462e8d1d81f8
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 23 16:33:25 2015 +0000
upstream commit
fix setting/clearing of TTY raw mode around
UpdateHostKeys=ask confirmation question; reported by Herb Goldman
commit f2004cd1adf34492eae0a44b1ef84e0e31b06088
Author: Darren Tucker <dtucker@zip.com.au>
Date: Mon Feb 23 05:04:21 2015 +1100
Repair for non-ECC OpenSSL.
Ifdef out the ECC parts when building with an OpenSSL that doesn't have
it.
commit 37f9220db8d1a52c75894c3de1e5f2ae5bd71b6f
Author: Darren Tucker <dtucker@zip.com.au>
Date: Mon Feb 23 03:07:24 2015 +1100
Wrap stdint.h includes in ifdefs.
commit f81f1bbc5b892c8614ea740b1f92735652eb43f0
Author: Tim Rice <tim@multitalents.net>
Date: Sat Feb 21 18:12:10 2015 -0800
out of tree build fix
commit 2e13a1e4d22f3b503c3bfc878562cc7386a1d1ae
Author: Tim Rice <tim@multitalents.net>
Date: Sat Feb 21 18:08:51 2015 -0800
mkdir kex unit test directory so testing out of tree builds works
commit 1797f49b1ba31e8700231cd6b1d512d80bb50d2c
Author: halex@openbsd.org <halex@openbsd.org>
Date: Sat Feb 21 21:46:57 2015 +0000
upstream commit
make "ssh-add -d" properly remove a corresponding
certificate, and also not whine and fail if there is none
ok djm@
commit 7faaa32da83a609059d95dbfcb0649fdb04caaf6
Author: Damien Miller <djm@mindrot.org>
Date: Sun Feb 22 07:57:27 2015 +1100
mkdir hostkey and bitmap unit test directories
commit bd49da2ef197efac5e38f5399263a8b47990c538
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Feb 20 23:46:01 2015 +0000
upstream commit
sort options useable under Match case-insensitively; prodded
jmc@
commit 1a779a0dd6cd8b4a1a40ea33b5415ab8408128ac
Author: djm@openbsd.org <djm@openbsd.org>
Date: Sat Feb 21 20:51:02 2015 +0000
upstream commit
correct paths to configuration files being written/updated;
they live in $OBJ not cwd; some by Roumen Petrov
commit 28ba006c1acddff992ae946d0bc0b500b531ba6b
Author: Darren Tucker <dtucker@zip.com.au>
Date: Sat Feb 21 15:41:07 2015 +1100
More correct checking of HAVE_DECL_AI_NUMERICSERV.
commit e50e8c97a9cecae1f28febccaa6ca5ab3bc10f54
Author: Darren Tucker <dtucker@zip.com.au>
Date: Sat Feb 21 15:10:33 2015 +1100
Add null declaration of AI_NUMERICINFO.
Some platforms (older FreeBSD and DragonFly versions) do have
getaddrinfo() but do not have AI_NUMERICINFO. so define it to zero
in those cases.
commit 18a208d6a460d707a45916db63a571e805f5db46
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Feb 20 22:40:32 2015 +0000
upstream commit
more options that are available under Match; bz#2353 reported
by calestyo AT scientia.net
commit 44732de06884238049f285f1455b2181baa7dc82
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Feb 20 22:17:21 2015 +0000
upstream commit
UpdateHostKeys fixes:
I accidentally changed the format of the hostkeys@openssh.com messages
last week without changing the extension name, and this has been causing
connection failures for people who are running -current. First reported
by sthen@
s/hostkeys@openssh.com/hostkeys-00@openssh.com/
Change the name of the proof message too, and reorder it a little.
Also, UpdateHostKeys=ask is incompatible with ControlPersist (no TTY
available to read the response) so disable UpdateHostKeys if it is in
ask mode and ControlPersist is active (and document this)
commit 13a39414d25646f93e6d355521d832a03aaaffe2
Author: djm@openbsd.org <djm@openbsd.org>
Date: Tue Feb 17 00:14:05 2015 +0000
upstream commit
Regression: I broke logging of public key fingerprints in
1.46. Pointed out by Pontus Lundkvist
commit 773dda25e828c4c9a52f7bdce6e1e5924157beab
Author: Damien Miller <djm@mindrot.org>
Date: Fri Jan 30 23:10:17 2015 +1100
repair --without-openssl; broken in refactor
commit e89c780886b23600de1e1c8d74aabd1ff61f43f0
Author: Damien Miller <djm@google.com>
Date: Tue Feb 17 10:04:55 2015 +1100
hook up hostkeys unittest to portable Makefiles
commit 0abf41f99aa16ff09b263bead242d6cb2dbbcf99
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 16 22:21:03 2015 +0000
upstream commit
enable hostkeys unit tests
commit 68a5d647ccf0fb6782b2f749433a1eee5bc9044b
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 16 22:20:50 2015 +0000
upstream commit
check string/memory compare arguments aren't NULL
commit ef575ef20d09f20722e26b45dab80b3620469687
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 16 22:18:34 2015 +0000
upstream commit
unit tests for hostfile.c code, just hostkeys_foreach so
far
commit 8ea3365e6aa2759ccf5c76eaea62cbc8a280b0e7
Author: markus@openbsd.org <markus@openbsd.org>
Date: Sat Feb 14 12:43:16 2015 +0000
upstream commit
test server rekey limit
commit ce63c4b063c39b2b22d4ada449c9e3fbde788cb3
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 16 22:30:03 2015 +0000
upstream commit
partial backout of:
revision 1.441
date: 2015/01/31 20:30:05; author: djm; state: Exp; lines: +17 -10; commitid
: x8klYPZMJSrVlt3O;
Let sshd load public host keys even when private keys are missing.
Allows sshd to advertise additional keys for future key rotation.
Also log fingerprint of hostkeys loaded; ok markus@
hostkey updates now require access to the private key, so we can't
load public keys only. The improved log messages (fingerprints of keys
loaded) are kept.
commit 523463a3a2a9bfc6cfc5afa01bae9147f76a37cc
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 16 22:13:32 2015 +0000
upstream commit
Revise hostkeys@openssh.com hostkey learning extension.
The client will not ask the server to prove ownership of the private
halves of any hitherto-unseen hostkeys it offers to the client.
Allow UpdateHostKeys option to take an 'ask' argument to let the
user manually review keys offered.
ok markus@
commit 6c5c949782d86a6e7d58006599c7685bfcd01685
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 16 22:08:57 2015 +0000
upstream commit
Refactor hostkeys_foreach() and dependent code Deal with
IP addresses (i.e. CheckHostIP) Don't clobber known_hosts when nothing
changed ok markus@ as part of larger commit
commit 51b082ccbe633dc970df1d1f4c9c0497115fe721
Author: miod@openbsd.org <miod@openbsd.org>
Date: Mon Feb 16 18:26:26 2015 +0000
upstream commit
Declare ge25519_base as extern, to prevent it from
becoming a common. Gets us rid of ``lignment 4 of symbol
`crypto_sign_ed25519_ref_ge25519_base' in mod_ge25519.o is smaller than 16 in
mod_ed25519.o'' warnings at link time.
commit 02db468bf7e3281a8e3c058ced571b38b6407c34
Author: markus@openbsd.org <markus@openbsd.org>
Date: Fri Feb 13 18:57:00 2015 +0000
upstream commit
make rekey_limit for sshd w/privsep work; ok djm@
dtucker@
commit 8ec67d505bd23c8bf9e17b7a364b563a07a58ec8
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date: Thu Feb 12 20:34:19 2015 +0000
upstream commit
Prevent sshd spamming syslog with
"ssh_dispatch_run_fatal: disconnected". ok markus@
commit d4c0295d1afc342057ba358237acad6be8af480b
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Feb 11 01:20:38 2015 +0000
upstream commit
Some packet error messages show the address of the peer,
but might be generated after the socket to the peer has suffered a TCP reset.
In these cases, getpeername() won't work so cache the address earlier.
spotted in the wild via deraadt@ and tedu@
commit 4af1709cf774475ce5d1bc3ddcc165f6c222897d
Author: jsg@openbsd.org <jsg@openbsd.org>
Date: Mon Feb 9 23:22:37 2015 +0000
upstream commit
fix some leaks in error paths ok markus@
commit fd36834871d06a03e1ff8d69e41992efa1bbf85f
Author: millert@openbsd.org <millert@openbsd.org>
Date: Fri Feb 6 23:21:59 2015 +0000
upstream commit
SIZE_MAX is standard, we should be using it in preference to
the obsolete SIZE_T_MAX. OK miod@ beck@
commit 1910a286d7771eab84c0b047f31c0a17505236fa
Author: millert@openbsd.org <millert@openbsd.org>
Date: Thu Feb 5 12:59:57 2015 +0000
upstream commit
Include stdint.h, not limits.h to get SIZE_MAX. OK guenther@
commit ce4f59b2405845584f45e0b3214760eb0008c06c
Author: deraadt@openbsd.org <deraadt@openbsd.org>
Date: Tue Feb 3 08:07:20 2015 +0000
upstream commit
missing ; djm and mlarkin really having great
interactions recently
commit 5d34aa94938abb12b877a25be51862757f25d54b
Author: halex@openbsd.org <halex@openbsd.org>
Date: Tue Feb 3 00:34:14 2015 +0000
upstream commit
slightly extend the passphrase prompt if running with -c
in order to give the user a chance to notice if unintentionally running
without it
wording tweak and ok djm@
commit cb3bde373e80902c7d5d0db429f85068d19b2918
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 2 22:48:53 2015 +0000
upstream commit
handle PKCS#11 C_Login returning
CKR_USER_ALREADY_LOGGED_IN; based on patch from Yuri Samoilenko; ok markus@
commit 15ad750e5ec3cc69765b7eba1ce90060e7083399
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Feb 2 07:41:40 2015 +0000
upstream commit
turn UpdateHostkeys off by default until I figure out
mlarkin@'s warning message; requested by deraadt@
commit 3cd5103c1e1aaa59bd66f7f52f6ebbcd5deb12f9
Author: deraadt@openbsd.org <deraadt@openbsd.org>
Date: Mon Feb 2 01:57:44 2015 +0000
upstream commit
increasing encounters with difficult DNS setups in
darknets has convinced me UseDNS off by default is better ok djm
commit 6049a548a8a68ff0bbe581ab1748ea6a59ecdc38
Author: djm@openbsd.org <djm@openbsd.org>
Date: Sat Jan 31 20:30:05 2015 +0000
upstream commit
Let sshd load public host keys even when private keys are
missing. Allows sshd to advertise additional keys for future key rotation.
Also log fingerprint of hostkeys loaded; ok markus@
commit 46347ed5968f582661e8a70a45f448e0179ca0ab
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Jan 30 11:43:14 2015 +0000
upstream commit
Add a ssh_config HostbasedKeyType option to control which
host public key types are tried during hostbased authentication.
This may be used to prevent too many keys being sent to the server,
and blowing past its MaxAuthTries limit.
bz#2211 based on patch by Iain Morgan; ok markus@
commit 802660cb70453fa4d230cb0233bc1bbdf8328de1
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Jan 30 10:44:49 2015 +0000
upstream commit
set a timeout to prevent hangs when talking to busted
servers; ok markus@
commit 86936ec245a15c7abe71a0722610998b0a28b194
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Jan 30 01:11:39 2015 +0000
upstream commit
regression test for 'wildcard CA' serial/key ID revocations
commit 4509b5d4a4fa645a022635bfa7e86d09b285001f
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Jan 30 01:13:33 2015 +0000
upstream commit
avoid more fatal/exit in the packet.c paths that
ssh-keyscan uses; feedback and "looks good" markus@
commit 669aee994348468af8b4b2ebd29b602cf2860b22
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Jan 30 01:10:33 2015 +0000
upstream commit
permit KRLs that revoke certificates by serial number or
key ID without scoping to a particular CA; ok markus@
commit 7a2c368477e26575d0866247d3313da4256cb2b5
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Jan 30 00:59:19 2015 +0000
upstream commit
missing parentheses after if in do_convert_from() broke
private key conversion from other formats some time in 2010; bz#2345 reported
by jjelen AT redhat.com
commit 25f5f78d8bf5c22d9cea8b49de24ebeee648a355
Author: djm@openbsd.org <djm@openbsd.org>
Date: Fri Jan 30 00:22:25 2015 +0000
upstream commit
fix ssh protocol 1, spotted by miod@
commit 9ce86c926dfa6e0635161b035e3944e611cbccf0
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Jan 28 22:36:00 2015 +0000
upstream commit
update to new API (key_fingerprint => sshkey_fingerprint)
check sshkey_fingerprint return values; ok markus
commit 9125525c37bf73ad3ee4025520889d2ce9d10f29
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Jan 28 22:05:31 2015 +0000
upstream commit
avoid fatal() calls in packet code makes ssh-keyscan more
reliable against server failures ok dtucker@ markus@
commit fae7bbe544cba7a9e5e4ab47ff6faa3d978646eb
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Jan 28 21:15:47 2015 +0000
upstream commit
avoid fatal() calls in packet code makes ssh-keyscan more
reliable against server failures ok dtucker@ markus@
commit 1a3d14f6b44a494037c7deab485abe6496bf2c60
Author: djm@openbsd.org <djm@openbsd.org>
Date: Wed Jan 28 11:07:25 2015 +0000
upstream commit
remove obsolete comment
commit 80c25b7bc0a71d75c43a4575d9a1336f589eb639
Author: okan@openbsd.org <okan@openbsd.org>
Date: Tue Jan 27 12:54:06 2015 +0000
upstream commit
Since r1.2 removed the use of PRI* macros, inttypes.h is
no longer required.
ok djm@
commit 69ff64f69615c2a21c97cb5878a0996c21423257
Author: Damien Miller <djm@mindrot.org>
Date: Tue Jan 27 23:07:43 2015 +1100
compile on systems without TCP_MD5SIG (e.g. OSX)
commit 358964f3082fb90b2ae15bcab07b6105cfad5a43
Author: Damien Miller <djm@mindrot.org>
Date: Tue Jan 27 23:07:25 2015 +1100
use ssh-keygen under test rather than system's
commit a2c95c1bf33ea53038324d1fdd774bc953f98236
Author: Damien Miller <djm@mindrot.org>
Date: Tue Jan 27 23:06:59 2015 +1100
OSX lacks HOST_NAME_MAX, has _POSIX_HOST_NAME_MAX
commit ade31d7b6f608a19b85bee29a7a00b1e636a2919
Author: Damien Miller <djm@mindrot.org>
Date: Tue Jan 27 23:06:23 2015 +1100
these need active_state defined to link on OSX
temporary measure until active_state goes away entirely
commit e56aa87502f22c5844918c10190e8b4f785f067b
Author: djm@openbsd.org <djm@openbsd.org>
Date: Tue Jan 27 12:01:36 2015 +0000
upstream commit
use printf instead of echo -n to reduce diff against
-portable
commit 9f7637f56eddfaf62ce3c0af89c25480f2cf1068
Author: jmc@openbsd.org <jmc@openbsd.org>
Date: Mon Jan 26 13:55:29 2015 +0000
upstream commit
sort previous;
commit 3076ee7d530d5b16842fac7a6229706c7e5acd26
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Jan 26 13:36:53 2015 +0000
upstream commit
properly restore umask
commit d411d395556b73ba1b9e451516a0bd6697c4b03d
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Jan 26 06:12:18 2015 +0000
upstream commit
regression test for host key rotation
commit fe8a3a51699afbc6407a8fae59b73349d01e49f8
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Jan 26 06:11:28 2015 +0000
upstream commit
adapt to sshkey API tweaks
commit 7dd355fb1f0038a3d5cdca57ebab4356c7a5b434
Author: miod@openbsd.org <miod@openbsd.org>
Date: Sat Jan 24 10:39:21 2015 +0000
upstream commit
Move -lz late in the linker commandline for things to
build on static arches.
commit 0dad3b806fddb93c475b30853b9be1a25d673a33
Author: miod@openbsd.org <miod@openbsd.org>
Date: Fri Jan 23 21:21:23 2015 +0000
upstream commit
-Wpointer-sign is supported by gcc 4 only.
commit 2b3b1c1e4bd9577b6e780c255c278542ea66c098
Author: djm@openbsd.org <djm@openbsd.org>
Date: Tue Jan 20 22:58:57 2015 +0000
upstream commit
use SUBDIR to recuse into unit tests; makes "make obj"
actually work
commit 1d1092bff8db27080155541212b420703f8b9c92
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Jan 26 12:16:36 2015 +0000
upstream commit
correct description of UpdateHostKeys in ssh_config.5 and
add it to -o lists for ssh, scp and sftp; pointed out by jmc@
commit 5104db7cbd6cdd9c5971f4358e74414862fc1022
Author: djm@openbsd.org <djm@openbsd.org>
Date: Mon Jan 26 06:10:03 2015 +0000
upstream commit
correctly match ECDSA subtype (== curve) for
offered/recevied host keys. Fixes connection-killing host key mismatches when