OpenBSD CVS

src/usr.bin/ssh/


Click on a directory to enter that directory. Click on a file to display its revision history and to get a chance to display diffs between revisions.

Current directory: [local] / src / usr.bin / ssh

Current tag: OPENBSD_4_5_BASE


File Rev. Age Author Last log entry
[BACK] Parent Directory        
[DIR] lib/        
[DIR] moduli-gen/        
[DIR] scard/        
[DIR] scp/        
[DIR] sftp/        
[DIR] sftp-server/        
[DIR] ssh/        
[DIR] ssh-add/        
[DIR] ssh-agent/        
[DIR] ssh-keygen/        
[DIR] ssh-keyscan/        
[DIR] ssh-keysign/        
[DIR] ssh-pkcs11-helper/        
[DIR] ssh-sk-helper/        
[DIR] sshd/        
[DIR] sshd-session/        
[TXT] LICENCE  1.19   19 years  markus   s/keygen/keyscan/
[TXT] Makefile  1.12   20 years  grange   Use ${INSTALL} instead of install; from art's amd64 tree. ok markus@
[TXT] Makefile.inc  1.33   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] OVERVIEW  1.11   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] PROTOCOL  1.12   15 years  djm   mention that eow and no-more-sessions extensions are sent only to OpenSSH peers
[TXT] PROTOCOL.agent  1.4   15 years  stevesk   fix some typos; ok djm@
[TXT] README  1.7   18 years  djm   $OpenBSD$ in here too
[TXT] addrmatch.c  1.4   15 years  stevesk   o cannot be NULL here but use xfree() to be consistent; ok djm@
[TXT] atomicio.c  1.25   16 years  dtucker   Include <poll.h> like the man page says rather than <sys/poll.h>. ok djm@
[TXT] atomicio.h  1.10   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] auth-bsdauth.c  1.11   16 years  djm   unifdef -DBSD_AUTH unifdef -USKEY These options have been in use for some years...
[TXT] auth-krb5.c  1.19   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] auth-options.c  1.44   15 years  djm   another chunk of a2port() diff that got away. wtfdjm??
[TXT] auth-options.h  1.17   16 years  djm   add no-user-rc authorized_keys option to disable execution of ~/.ssh/rc
[TXT] auth-passwd.c  1.43   16 years  djm   unifdef -DBSD_AUTH unifdef -USKEY These options have been in use for some years...
[TXT] auth-rhosts.c  1.43   15 years  dtucker   Include unistd.h for close(), prevents warnings in -portable
[TXT] auth.c  1.80   15 years  djm   need unistd.h for close() prototype
[TXT] auth.h  1.62   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] auth2-chall.c  1.34   15 years  djm   replace by-hand string building with xasprinf(); ok deraadt@
[TXT] auth2-gss.c  1.16   16 years  dtucker   Allow build without -DGSSAPI; ok deraadt@
[TXT] auth2-hostbased.c  1.12   15 years  djm   strip trailing '.' from hostname when HostbasedUsesNameFromPacketOnly=yes report...
[TXT] auth2-kbdint.c  1.5   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] auth2-none.c  1.15   15 years  djm   Make protocol 2 MaxAuthTries behaviour a little more sensible: Check whether cl...
[TXT] auth2-passwd.c  1.9   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] auth2-pubkey.c  1.19   15 years  otto   avoid nasty double free; ok dtucker@ djm@
[TXT] auth2.c  1.120   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] authfd.c  1.80   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] authfd.h  1.36   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] authfile.c  1.76   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] authfile.h  1.13   18 years  dtucker   Prevent ssh from trying to open private keys with bad permissions more than once...
[TXT] canohost.c  1.64   15 years  djm   support remote port forwarding with a zero listen port (-R0:...) to dyamically a...
[TXT] canohost.h  1.10   15 years  djm   support remote port forwarding with a zero listen port (-R0:...) to dyamically a...
[TXT] channels.c  1.295   15 years  djm   support remote port forwarding with a zero listen port (-R0:...) to dyamically a...
[TXT] channels.h  1.98   15 years  djm   support remote port forwarding with a zero listen port (-R0:...) to dyamically a...
[TXT] cipher.c  1.82   15 years  markus   Work around the CPNI-957037 Plaintext Recovery Attack by always reading 256K of ...
[TXT] cipher.h  1.37   15 years  markus   Work around the CPNI-957037 Plaintext Recovery Attack by always reading 256K of ...
[TXT] cleanup.c  1.5   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] clientloop.c  1.209   15 years  djm   support remote port forwarding with a zero listen port (-R0:...) to dyamically a...
[TXT] clientloop.h  1.22   15 years  djm   The multiplexing escape char handler commit last night introduced a small memory...
[TXT] compat.c  1.78   15 years  markus   only send eow and no-more-sessions requests to openssh 5 and newer; fixes intero...
[TXT] compat.h  1.42   15 years  markus   only send eow and no-more-sessions requests to openssh 5 and newer; fixes intero...
[TXT] dh.c  1.47   15 years  djm   when loading moduli from /etc/moduli in sshd(8), check that they are of the expe...
[TXT] dh.h  1.10   15 years  djm   when loading moduli from /etc/moduli in sshd(8), check that they are of the expe...
[TXT] dispatch.c  1.22   15 years  stevesk   remove unused #define DISPATCH_MIN; ok markus@
[TXT] dispatch.h  1.11   18 years  djm   replace the last non-sig_atomic_t flag used in a signal handler with a sig_atomi...
[TXT] dns.c  1.25   15 years  dtucker   Do not pass "0" strings as ports to getaddrinfo because the lookups can slow thi...
[TXT] dns.h  1.10   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] fatal.c  1.7   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] groupaccess.c  1.13   15 years  djm   support negation of groups in "Match group" block (bz#1315); ok dtucker@
[TXT] groupaccess.h  1.8   15 years  djm   support negation of groups in "Match group" block (bz#1315); ok dtucker@
[TXT] gss-genr.c  1.19   16 years  dtucker   Pass GSS OID to gss_display_status to provide better information in error messag...
[TXT] gss-serv-krb5.c  1.7   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] gss-serv.c  1.22   16 years  djm   Implement a channel success/failure status confirmation callback mechanism. Each...
[TXT] hostfile.c  1.45   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] hostfile.h  1.16   18 years  djm   standardise spacing in $OpenBSD$ tags; requested by deraadt@
[TXT] kex.c  1.80   15 years  djm   OpenSSL 0.9.8h supplies a real EVP_sha256 so we do not need our replacement anym...
[TXT] kex.h  1.46   16 years  pvalchev   Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must speci...
[TXT] kexdh.c  1.23   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] kexgex.c  1.27   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] kexgexc.c  1.11   17 years  markus   add missing checks for openssl return codes; with & ok djm@
[TXT] kexgexs.c  1.11   15 years  djm   fix hash calculation for KEXGEX: hash over the original client-supplied values a...
[TXT] log.c  1.41   15 years  dtucker   Add extended test mode (-T) and connection parameters for test mode (-C). -T cau...
[TXT] log.h  1.17   15 years  dtucker   replace __dead with __attribute__((noreturn)), makes things a little easier to p...
[TXT] mac.c  1.15   15 years  dtucker   upcast another size_t to u_long to match format
[TXT] mac.h  1.6   16 years  pvalchev   Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must speci...
[TXT] match.c  1.27   15 years  djm   support CIDR address matching in .ssh/authorized_keys from="..." stanzas ok and...
[TXT] match.h  1.14   15 years  djm   support CIDR address matching in sshd_config "Match address" blocks, with full s...
[TXT] misc.c  1.71   15 years  tobias   Added missing newlines in error messages. ok dtucker
[TXT] misc.h  1.38   15 years  dtucker   Make keepalive timeouts apply while waiting for a packet, particularly during ke...
[TXT] moduli.c  1.21   15 years  djm   when loading moduli from /etc/moduli in sshd(8), check that they are of the expe...
[TXT] monitor.c  1.101   15 years  djm   some paranoia: check that the serialised key is really KEY_RSA before diddling i...
[TXT] monitor.h  1.15   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] monitor_fdpass.c  1.18   15 years  dtucker   Retry sendmsg/recvmsg on EAGAIN and EINTR; ok djm@
[TXT] monitor_fdpass.h  1.4   16 years  djm   make file descriptor passing code return an error rather than call fatal() when ...
[TXT] monitor_wrap.c  1.64   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] monitor_wrap.h  1.21   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] msg.c  1.15   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] msg.h  1.4   18 years  djm   standardise spacing in $OpenBSD$ tags; requested by deraadt@
[TXT] mux.c  1.7   15 years  dtucker   Friendlier error messages for mux fallback. ok djm@
[TXT] myproposal.h  1.23   15 years  djm   prefer CTR modes and revised arcfour (i.e w/ discard) modes to CBC modes; ok mar...
[TXT] nchan.c  1.62   15 years  stevesk   add space to some log/debug messages for readability; ok djm@ markus@
[TXT] nchan.ms  1.8   20 years  djm   unexpand and delete whitespace at EOL; ok markus@
[TXT] nchan2.ms  1.4   16 years  djm   document eow message in ssh protocol 2 channel state machine; feedback and ok ma...
[TXT] packet.c  1.160   15 years  markus   check for enc !=NULL in packet_start_discard
[TXT] packet.h  1.49   15 years  markus   sync v1 and v2 traffic accounting; add it to sshd, too; ok djm@, dtucker@
[TXT] pathnames.h  1.17   15 years  stevesk   no need to escape single quotes in comments
[TXT] progressmeter.c  1.37   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] progressmeter.h  1.2   18 years  djm   standardise spacing in $OpenBSD$ tags; requested by deraadt@
[TXT] readconf.c  1.176   15 years  djm   support remote port forwarding with a zero listen port (-R0:...) to dyamically a...
[TXT] readconf.h  1.78   15 years  djm   support remote port forwarding with a zero listen port (-R0:...) to dyamically a...
[TXT] readpass.c  1.47   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] scp.1  1.46   15 years  djm   better description for -i flag: s/RSA authentication/public key authentication/
[TXT] scp.c  1.164   15 years  stevesk   spelling in comment; ok djm@
[TXT] servconf.c  1.194   15 years  djm   make a2port() return -1 when it encounters an invalid port number rather than 0,...
[TXT] servconf.h  1.87   15 years  djm   make a2port() return -1 when it encounters an invalid port number rather than 0,...
[TXT] serverloop.c  1.157   15 years  djm   tighten check for -R0:... forwarding: only allow dynamic allocation if want_repl...
[TXT] serverloop.h  1.6   18 years  djm   standardise spacing in $OpenBSD$ tags; requested by deraadt@
[TXT] session.c  1.245   15 years  djm   make Channel->path an allocated string, saving a few bytes here and there and fi...
[TXT] session.h  1.30   16 years  djm   Make the maximum number of sessions run-time controllable via a sshd_config MaxS...
[TXT] sftp-client.c  1.86   15 years  djm   allow the sftp chmod(2)-equivalent operation to set set[ug]id/sticky bits. Note ...
[TXT] sftp-client.h  1.17   15 years  dtucker   Have the sftp client store the statvfs replies in wire format, which prevents pr...
[TXT] sftp-common.c  1.20   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] sftp-common.h  1.10   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] sftp-glob.c  1.22   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] sftp-server-main.c  1.4   15 years  tobias   Added missing newlines in error messages. ok dtucker
[TXT] sftp-server.8  1.14   15 years  jmc   no need for .Pp before or after .Sh;
[TXT] sftp-server.c  1.84   15 years  djm   allow the sftp chmod(2)-equivalent operation to set set[ug]id/sticky bits. Note ...
[TXT] sftp.1  1.69   15 years  sobrado   update for the synopses displayed by the 'help' command, there are a few missing...
[TXT] sftp.c  1.107   15 years  dtucker   Initialize a few variables to prevent spurious "may be used uninitialized" warni...
[TXT] sftp.h  1.9   15 years  dtucker   replace __dead with __attribute__((noreturn)), makes things a little easier to p...
[TXT] ssh-add.1  1.46   16 years  jmc   identies -> identities;
[TXT] ssh-add.c  1.90   16 years  sobrado   sort synopsis and options in ssh-agent(1); usage is lowercase ok jmc@
[TXT] ssh-agent.1  1.46   16 years  sobrado   sort synopsis and options in ssh-agent(1); usage is lowercase ok jmc@
[TXT] ssh-agent.c  1.159   15 years  djm   reset global compat flag after processing a protocol 2 signature request with th...
[TXT] ssh-dss.c  1.24   17 years  markus   add missing checks for openssl return codes; with & ok djm@
[TXT] ssh-gss.h  1.10   16 years  djm   relocate server-only GSSAPI code from libssh to server; bz #1225 patch from simo...
[TXT] ssh-keygen.1  1.79   15 years  sthen   Add "ssh-keygen -F -l" to synopsis (displays fingerprint from known_hosts). ok ...
[TXT] ssh-keygen.c  1.173   15 years  tobias   Added missing newlines in error messages. ok dtucker
[TXT] ssh-keyscan.1  1.26   15 years  stevesk   fix example, default key type is rsa for 3+ years; from frederic.perrin@resel.fr...
[TXT] ssh-keyscan.c  1.78   15 years  djm   make a2port() return -1 when it encounters an invalid port number rather than 0,...
[TXT] ssh-keysign.8  1.9   17 years  jmc   convert to new .Dd format;
[TXT] ssh-keysign.c  1.29   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] ssh-rsa.c  1.39   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] ssh.1  1.282   15 years  djm   consistency: Dq => Ql
[TXT] ssh.c  1.324   15 years  djm   support remote port forwarding with a zero listen port (-R0:...) to dyamically a...
[TXT] ssh.h  1.78   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] ssh2.h  1.11   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] ssh_config  1.25   15 years  djm   sync with revised default ciphers; pointed out by dkrause@
[TXT] ssh_config.5  1.119   15 years  djm   don't advertise experimental options
[TXT] sshconnect.c  1.212   15 years  stevesk   use #define ROQUIET here; no binary change. ok dtucker@
[TXT] sshconnect.h  1.24   16 years  djm   make ssh(1)'s ConnectTimeout option apply to both the TCP connection and SSH ban...
[TXT] sshconnect2.c  1.170   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] sshd.8  1.247   15 years  jmc   do not give an example of how to chmod files: we can presume the user knows that...
[TXT] sshd.c  1.366   15 years  djm   make a2port() return -1 when it encounters an invalid port number rather than 0,...
[TXT] sshd_config  1.80   15 years  djm   increase default size of ssh protocol 1 ephemeral key from 768 to 1024 bits; pro...
[TXT] sshd_config.5  1.102   15 years  djm   missing period
[TXT] sshlogin.c  1.26   16 years  gilles   use strcspn to properly overwrite '\n' in fgets returned buffer ok pyr@, ray@, ...
[TXT] sshlogin.h  1.8   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] sshpty.c  1.28   16 years  stevesk   remove #if defined block not needed; ok markus@ dtucker@
[TXT] sshpty.h  1.11   16 years  djm   Fix sending tty modes when stdin is not a tty (bz#1199). Previously we would sen...
[TXT] sshtty.c  1.13   16 years  djm   Fix sending tty modes when stdin is not a tty (bz#1199). Previously we would sen...
[TXT] ttymodes.c  1.29   15 years  stevesk   protocol 2 tty modes support is now 7.5 years old so remove these debug3()s; ok ...
[TXT] ttymodes.h  1.14   18 years  djm   standardise spacing in $OpenBSD$ tags; requested by deraadt@
[TXT] uidswap.c  1.35   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] uidswap.h  1.13   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] umac.c  1.3   16 years  pvalchev   Ensure nh_result lies on a 64-bit boundary (fixes warnings observed on Itanium o...
[TXT] umac.h  1.1   16 years  pvalchev   Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must speci...
[TXT] version.h  1.55   15 years  djm   openssh-5.2
[TXT] xmalloc.c  1.27   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] xmalloc.h  1.13   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] README.smartcard (in the Attic) [Hide]  1.9   20 years  djm   unexpand and delete whitespace at EOL; ok markus@
[TXT] auth-chall.c (in the Attic) [Hide]  1.12   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] auth-rh-rsa.c (in the Attic) [Hide]  1.42   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] auth-rsa.c (in the Attic) [Hide]  1.73   15 years  dtucker   Merge duplicate host key file checks, based in part on a patch from Rob Holland ...
[TXT] auth1.c (in the Attic) [Hide]  1.73   15 years  djm   Make protocol 1 MaxAuthTries logic match protocol 2's. Do not treat the first p...
[TXT] auth2-jpake.c (in the Attic) [Hide]  1.2   15 years  dtucker   Move JPAKE define to make life easier for portable. ok djm@
[TXT] bufaux.c (in the Attic) [Hide]  1.46   15 years  dtucker   Use '\0' for a nul byte rather than unadorned 0. ok djm@
[TXT] bufbn.c (in the Attic) [Hide]  1.6   17 years  djm   memory leak on error path; from arnaud.lacombe.1 AT ulaval.ca
[TXT] buffer.c (in the Attic) [Hide]  1.31   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] buffer.h (in the Attic) [Hide]  1.17   16 years  markus   avoid extra malloc/copy/free when receiving data over the net; ~10% speedup for ...
[TXT] cipher-3des1.c (in the Attic) [Hide]  1.6   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] cipher-bf1.c (in the Attic) [Hide]  1.5   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] cipher-ctr.c (in the Attic) [Hide]  1.10   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] compress.c (in the Attic) [Hide]  1.25   17 years  stevesk   "zlib.h" can be <zlib.h>; ok djm@ markus@
[TXT] compress.h (in the Attic) [Hide]  1.12   18 years  djm   standardise spacing in $OpenBSD$ tags; requested by deraadt@
[TXT] crc32.c (in the Attic) [Hide]  1.11   18 years  stevesk   remove extra spaces
[TXT] crc32.h (in the Attic) [Hide]  1.15   18 years  djm   standardise spacing in $OpenBSD$ tags; requested by deraadt@
[TXT] deattack.c (in the Attic) [Hide]  1.30   17 years  djm   limit maximum work performed by the CRC compensation attack detector, problem re...
[TXT] deattack.h (in the Attic) [Hide]  1.10   17 years  djm   limit maximum work performed by the CRC compensation attack detector, problem re...
[TXT] jpake.c (in the Attic) [Hide]  1.1   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] jpake.h (in the Attic) [Hide]  1.1   15 years  djm   Add support for an experimental zero-knowledge password authentication method us...
[TXT] kexdhc.c (in the Attic) [Hide]  1.11   17 years  markus   add missing checks for openssl return codes; with & ok djm@
[TXT] kexdhs.c (in the Attic) [Hide]  1.9   17 years  markus   add missing checks for openssl return codes; with & ok djm@
[TXT] key.c (in the Attic) [Hide]  1.80   15 years  stevesk   typo in error message; ok djm@
[TXT] key.h (in the Attic) [Hide]  1.27   15 years  grunk   Introduce SSH Fingerprint ASCII Visualization, a technique inspired by the graph...
[TXT] monitor_mm.c (in the Attic) [Hide]  1.15   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] monitor_mm.h (in the Attic) [Hide]  1.5   16 years  otto   garbage collect two unused fields in struct mm_master; ok markus@
[TXT] rsa.c (in the Attic) [Hide]  1.29   17 years  markus   add missing checks for openssl return codes; with & ok djm@
[TXT] rsa.h (in the Attic) [Hide]  1.16   18 years  djm   standardise spacing in $OpenBSD$ tags; requested by deraadt@
[TXT] scard.c (in the Attic) [Hide]  1.36   17 years  markus   add missing checks for openssl return codes; with & ok djm@
[TXT] scard.h (in the Attic) [Hide]  1.14   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] schnorr.c (in the Attic) [Hide]  1.2   15 years  djm   signature should hash over the entire group, not just the generator (this is sti...
[TXT] ssh1.h (in the Attic) [Hide]  1.6   18 years  djm   standardise spacing in $OpenBSD$ tags; requested by deraadt@
[TXT] sshconnect1.c (in the Attic) [Hide]  1.70   17 years  markus   add missing checks for openssl return codes; with & ok djm@
[TXT] uuencode.c (in the Attic) [Hide]  1.24   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...
[TXT] uuencode.h (in the Attic) [Hide]  1.13   17 years  deraadt   almost entirely get rid of the culture of ".h files that include .h files" ok dj...