OpenBSD CVS

CVS log for src/usr.bin/ssh/compat.c


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.126 / (download) - annotate - [select for diffs], Mon Mar 6 12:14:48 2023 UTC (14 months, 1 week ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, HEAD
Changes since 1.125: +2 -17 lines
Diff to previous 1.125 (colored)

Refactor creation of KEX proposal.

This adds kex_proposal_populate_entries (and corresponding free) which
populates the KEX proposal array with dynamically allocated strings.
This replaces the previous mix of static and dynamic that has been the
source of previous leaks and bugs.  Remove unused compat functions.
With & ok djm@.

Revision 1.125 / (download) - annotate - [select for diffs], Fri Feb 17 04:22:50 2023 UTC (14 months, 4 weeks ago) by dtucker
Branch: MAIN
Changes since 1.124: +2 -10 lines
Diff to previous 1.124 (colored)

Remove now-unused compat bit SSH_BUG_RSASIGMD5.  The code to set this
was removed in OpenSSH 7.7 when support for SSH implementations dating
back to before RFC standardization were removed.  "burn it all" djm@

Revision 1.124 / (download) - annotate - [select for diffs], Fri Feb 17 03:06:18 2023 UTC (14 months, 4 weeks ago) by dtucker
Branch: MAIN
Changes since 1.123: +2 -10 lines
Diff to previous 1.123 (colored)

Remove now-unused compat bit SSH_BUG_BIGENDIANAES.  This was
previously set for OpenSSH 2.3 (released in 2000) but this check
was removed in OpenSSH 7.7 (2018).  ok djm@ deraadt@

Revision 1.123 / (download) - annotate - [select for diffs], Thu Feb 16 10:10:00 2023 UTC (14 months, 4 weeks ago) by dtucker
Branch: MAIN
Changes since 1.122: +1 -12 lines
Diff to previous 1.122 (colored)

Remove SSH_BUG_PASSWORDPAD compat bit since it's no longer used.
ok markus@

Revision 1.122 / (download) - annotate - [select for diffs], Thu Feb 16 07:55:15 2023 UTC (14 months, 4 weeks ago) by dtucker
Branch: MAIN
Changes since 1.121: +1 -8 lines
Diff to previous 1.121 (colored)

Remove SSH_BUG_IGNOREMSG compat flag since it's only applicable to SSH1
and thus no longer used.  ok markus@ "kill it with fire" djm@

Revision 1.120.4.1 / (download) - annotate - [select for diffs], Thu Feb 2 12:13:20 2023 UTC (15 months, 1 week ago) by bluhm
Branch: OPENBSD_7_2
Changes since 1.120: +8 -8 lines
Diff to previous 1.120 (colored) next main 1.121 (colored)

fix double-free caused by compat_kex_proposal(); bz3522
from djm@; by dtucker@; ok djm@

Revision 1.121 / (download) - annotate - [select for diffs], Thu Feb 2 12:10:05 2023 UTC (15 months, 1 week ago) by djm
Branch: MAIN
Changes since 1.120: +8 -8 lines
Diff to previous 1.120 (colored)

fix double-free caused by compat_kex_proposal(); bz3522
by dtucker@, ok me

Revision 1.120 / (download) - annotate - [select for diffs], Fri Jul 1 03:35:45 2022 UTC (22 months, 2 weeks ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE
Branch point for: OPENBSD_7_2
Changes since 1.119: +11 -4 lines
Diff to previous 1.119 (colored)

Always return allocated strings from the kex filtering so that we
can free them later.  Fix one leak in compat_kex_proposal.  Based
on github PR#324 from ZoltanFridrich with some simplications by me.
ok djm@

Revision 1.119 / (download) - annotate - [select for diffs], Fri Sep 10 05:46:09 2021 UTC (2 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0
Changes since 1.118: +1 -2 lines
Diff to previous 1.118 (colored)

openssh-7.4 was incorrectly listed twice; spotted by Dmitry
Belyavskiy, ok dtucker@

Revision 1.118 / (download) - annotate - [select for diffs], Sun Jun 6 03:40:39 2021 UTC (2 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.117: +3 -1 lines
Diff to previous 1.117 (colored)

Client-side workaround for a bug in OpenSSH 7.4: this release allows
RSA/SHA2 signatures for public key authentication but fails to advertise
this correctly via SSH2_MSG_EXT_INFO. This causes clients of these
server to incorrectly match PubkeyAcceptedAlgorithms and potentially
refuse to offer valid keys.

Reported by and based on patch from Gordon Messmer via bz3213, thanks
also for additional analysis by Jakub Jelen. ok dtucker

Revision 1.117 / (download) - annotate - [select for diffs], Wed Jan 27 09:26:54 2021 UTC (3 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.116: +17 -19 lines
Diff to previous 1.116 (colored)

remove global variable used to stash compat flags and use the
purpose-built ssh->compat variable instead; feedback/ok markus@

Revision 1.116 / (download) - annotate - [select for diffs], Sun Oct 18 11:32:01 2020 UTC (3 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.115: +7 -7 lines
Diff to previous 1.115 (colored)

use the new variant log macros instead of prepending __func__ and
appending ssh_err(r) manually; ok markus@

Revision 1.115 / (download) - annotate - [select for diffs], Sun Jul 5 23:59:45 2020 UTC (3 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.114: +9 -9 lines
Diff to previous 1.114 (colored)

some language improvements; ok markus

Revision 1.114 / (download) - annotate - [select for diffs], Mon Jun 1 07:11:38 2020 UTC (3 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.113: +1 -27 lines
Diff to previous 1.113 (colored)

Remove now-unused proto_spec and associated definitions.  ok djm@

Revision 1.113 / (download) - annotate - [select for diffs], Mon Aug 13 02:41:05 2018 UTC (5 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.112: +17 -32 lines
Diff to previous 1.112 (colored)

revert compat.[ch] section of the following change. It causes
double-free under some circumstances.

--

date: 2018/07/31 03:07:24;  author: djm;  state: Exp;  lines: +33 -18;  commitid: f7g4UI8eeOXReTPh;
fix some memory leaks spotted by Coverity via Jakub Jelen in bz#2366
feedback and ok dtucker@

Revision 1.112 / (download) - annotate - [select for diffs], Tue Jul 31 03:07:24 2018 UTC (5 years, 9 months ago) by djm
Branch: MAIN
Changes since 1.111: +33 -18 lines
Diff to previous 1.111 (colored)

fix some memory leaks spotted by Coverity via Jakub Jelen in bz#2366
feedback and ok dtucker@

Revision 1.111 / (download) - annotate - [select for diffs], Mon Jul 9 21:03:30 2018 UTC (5 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.110: +1 -2 lines
Diff to previous 1.110 (colored)

client: switch to sshbuf API; ok djm@

Revision 1.110 / (download) - annotate - [select for diffs], Wed Jul 4 13:49:31 2018 UTC (5 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.109: +9 -9 lines
Diff to previous 1.109 (colored)

repair PubkeyAcceptedKeyTypes (and friends) after RSA signature work -
returns ability to add/remove/specify algorithms by wildcard.

Algorithm lists are now fully expanded when the server/client configs
are finalised, so errors are reported early and the config dumps
(e.g. "ssh -G ...") now list the actual algorithms selected.

Clarify that, while wildcards are accepted in algorithm lists, they
aren't full pattern-lists that support negation.

(lots of) feedback, ok markus@

Revision 1.109 / (download) - annotate - [select for diffs], Tue Jul 3 11:42:12 2018 UTC (5 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.108: +3 -2 lines
Diff to previous 1.108 (colored)

crank version number to 7.8; needed for new compat flag for prior
version; part of RSA-SHA2 strictification, ok markus@

Revision 1.108 / (download) - annotate - [select for diffs], Tue Jul 3 11:39:54 2018 UTC (5 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.107: +19 -8 lines
Diff to previous 1.107 (colored)

Improve strictness and control over RSA-SHA2 signature types:

In ssh, when an agent fails to return a RSA-SHA2 signature when
requested and falls back to RSA-SHA1 instead, retry the signature to
ensure that the public key algorithm sent in the SSH_MSG_USERAUTH
matches the one in the signature itself.

In sshd, strictly enforce that the public key algorithm sent in the
SSH_MSG_USERAUTH message matches what appears in the signature.

Make the sshd_config PubkeyAcceptedKeyTypes and
HostbasedAcceptedKeyTypes options control accepted signature algorithms
(previously they selected supported key types). This allows these
options to ban RSA-SHA1 in favour of RSA-SHA2.

Add new signature algorithms "rsa-sha2-256-cert-v01@openssh.com" and
"rsa-sha2-512-cert-v01@openssh.com" to force use of RSA-SHA2 signatures
with certificate keys.

feedback and ok markus@

Revision 1.107 / (download) - annotate - [select for diffs], Mon Apr 16 22:50:44 2018 UTC (6 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.106: +3 -1 lines
Diff to previous 1.106 (colored)

Disable SSH2_MSG_DEBUG messages for Twisted Conch clients without
version numbers since they choke on them under some circumstances.
https://twistedmatrix.com/trac/ticket/9422 via Colin Watson

Newer Conch versions have a version number in their ident string and
handle debug messages okay. https://twistedmatrix.com/trac/ticket/9424

Revision 1.106 / (download) - annotate - [select for diffs], Fri Feb 16 04:43:11 2018 UTC (6 years, 3 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.105: +3 -1 lines
Diff to previous 1.105 (colored)

Don't send IUTF8 to servers that don't like them.

Some SSH servers eg "ConfD" drop the connection if the client sends the
new IUTF8 (RFC8160) terminal mode even if it's not set.  Add a bug bit
for such servers and avoid sending IUTF8 to them.  ok djm@

Revision 1.105 / (download) - annotate - [select for diffs], Tue Jan 23 05:27:21 2018 UTC (6 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.104: +4 -67 lines
Diff to previous 1.104 (colored)

Drop compatibility hacks for some ancient SSH implementations, including
ssh.com <=2.* and OpenSSH <= 3.*.

These versions were all released in or before 2001 and predate the
final SSH RFCs. The hacks in question aren't necessary for RFC-
compliant SSH implementations.

ok markus@

Revision 1.104 / (download) - annotate - [select for diffs], Tue Jul 25 09:22:25 2017 UTC (6 years, 9 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.103: +7 -4 lines
Diff to previous 1.103 (colored)

Make WinSCP patterns for SSH_OLD_DHGEX more specific to exclude WinSCP
5.10.x and up.  bz#2748, from martin at winscp.net, ok djm@

Revision 1.103 / (download) - annotate - [select for diffs], Sun Apr 30 23:13:25 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.102: +1 -17 lines
Diff to previous 1.102 (colored)

remove compat20/compat13/compat15 variables

ok markus@

Revision 1.102 / (download) - annotate - [select for diffs], Sun Apr 30 23:11:45 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.101: +1 -3 lines
Diff to previous 1.101 (colored)

remove options.protocol and client Protocol configuration knob

ok markus@

Revision 1.101 / (download) - annotate - [select for diffs], Sun Apr 30 23:10:43 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.100: +1 -6 lines
Diff to previous 1.100 (colored)

unifdef WITH_SSH1
ok markus@

Revision 1.100 / (download) - annotate - [select for diffs], Fri Feb 3 23:01:19 2017 UTC (7 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.99: +13 -35 lines
Diff to previous 1.99 (colored)

support =- for removing methods from algorithms lists, e.g.
Ciphers=-*cbc; suggested by Cristian Ionescu-Idbohrn in bz#2671
"I like it" markus@

Revision 1.99 / (download) - annotate - [select for diffs], Tue May 24 02:31:57 2016 UTC (7 years, 11 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.98: +1 -2 lines
Diff to previous 1.98 (colored)

Back out 'plug memleak'.

Revision 1.98 / (download) - annotate - [select for diffs], Mon May 23 00:17:27 2016 UTC (7 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.97: +3 -2 lines
Diff to previous 1.97 (colored)

Plug mem leak in filter_proposal.  ok djm@

Revision 1.97 / (download) - annotate - [select for diffs], Wed Aug 19 23:21:42 2015 UTC (8 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.96: +13 -2 lines
Diff to previous 1.96 (colored)

Better compat matching for WinSCP, add compat matching for
FuTTY (fork of PuTTY); ok markus@ deraadt@

Revision 1.96 / (download) - annotate - [select for diffs], Tue Jul 28 23:20:42 2015 UTC (8 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.95: +3 -2 lines
Diff to previous 1.95 (colored)

add Cisco to the list of clients that choke on the hostkeys update
extension. Pointed out by Howard Kash

Revision 1.95 / (download) - annotate - [select for diffs], Mon Jul 13 04:57:14 2015 UTC (8 years, 10 months ago) by dtucker
Branch: MAIN
Changes since 1.94: +3 -2 lines
Diff to previous 1.94 (colored)

Add "PuTTY_Local:" to the clients to which we do not offer DH-GEX.
This was the string that was used for development versions prior to
September 2014 and they don't do RFC4419 DH-GEX, but unfortunately there
are some extant products based on those versions.  bx2424 from Jay Rouman,
ok markus@ djm@

Revision 1.94 / (download) - annotate - [select for diffs], Tue May 26 23:23:40 2015 UTC (8 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.93: +2 -1 lines
Diff to previous 1.93 (colored)

Cap DH-GEX group size at 4kbits for Cisco implementations.  Some of them
will choke when asked for preferred sizes >4k instead of returning the 4k
group that they do have.  bz#2209, ok djm@

Revision 1.93 / (download) - annotate - [select for diffs], Wed May 6 04:07:18 2015 UTC (9 years ago) by dtucker
Branch: MAIN
Changes since 1.92: +9 -2 lines
Diff to previous 1.92 (colored)

Blacklist DH-GEX for specific PuTTY versions known to send non-RFC4419
DH-GEX messages rather than all versions of PuTTY.  According to Simon
Tatham, 0.65 and newer versions will send RFC4419 DH-GEX messages.  ok djm@

Revision 1.92 / (download) - annotate - [select for diffs], Tue May 5 10:17:49 2015 UTC (9 years ago) by dtucker
Branch: MAIN
Changes since 1.91: +2 -1 lines
Diff to previous 1.91 (colored)

WinSCP doesn't implement RFC4419 DH-GEX so flag it so we don't offer that
KEX method.  ok markus@

Revision 1.91 / (download) - annotate - [select for diffs], Mon May 4 06:10:48 2015 UTC (9 years ago) by djm
Branch: MAIN
Changes since 1.90: +3 -4 lines
Diff to previous 1.90 (colored)

Remove pattern length argument from match_pattern_list(),
we only ever use it for strlen(pattern).

Prompted by hanno AT hboeck.de pointing an out-of-bound read
error caused by an incorrect pattern length found using AFL
and his own tools.

ok markus@

Revision 1.90 / (download) - annotate - [select for diffs], Mon Apr 13 02:04:08 2015 UTC (9 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.89: +15 -9 lines
Diff to previous 1.89 (colored)

deprecate ancient, pre-RFC4419 and undocumented
SSH2_MSG_KEX_DH_GEX_REQUEST_OLD message;
ok markus@ deraadt@ "seems reasonable" dtucker@

Revision 1.89 / (download) - annotate - [select for diffs], Fri Apr 10 05:16:50 2015 UTC (9 years, 1 month ago) by dtucker
Branch: MAIN
Changes since 1.88: +12 -1 lines
Diff to previous 1.88 (colored)

Don't send hostkey advertisments (hostkeys-00@openssh.com) to current
versions of Tera Term as they can't handle them.  Newer versions should
be OK.  Patch from Bryan Drewery and IWAMOTO Kouichi, ok djm@

Revision 1.88 / (download) - annotate - [select for diffs], Tue Apr 7 23:00:42 2015 UTC (9 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.87: +3 -1 lines
Diff to previous 1.87 (colored)

treat Protocol=1,2|2,1 as Protocol=2 when compiled without SSH1
support; ok dtucker@ millert@

Revision 1.87 / (download) - annotate - [select for diffs], Mon Jan 19 20:20:20 2015 UTC (9 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.86: +9 -6 lines
Diff to previous 1.86 (colored)

store compat flags in struct ssh; ok djm@

Revision 1.86 / (download) - annotate - [select for diffs], Wed Oct 8 22:15:27 2014 UTC (9 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.85: +2 -2 lines
Diff to previous 1.85 (colored)

another -Wpointer-sign from clang

Revision 1.82.4.1 / (download) - annotate - [select for diffs], Mon Apr 21 00:30:48 2014 UTC (10 years ago) by djm
Branch: OPENBSD_5_5
Changes since 1.82: +17 -2 lines
Diff to previous 1.82 (colored) next main 1.83 (colored)

MFC:

reliability fix for OpenSSH using curve25519-sha256@libssh.org key
exchange method.

revision 1.71
date: 2014/04/18 23:52:25;  author: djm;  state: Exp;  lines: +2 -2;
OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections
using the curve25519-sha256@libssh.org KEX exchange method to fail
when connecting with something that implements the spec properly.

Disable this KEX method when speaking to one of the affected
versions.

revision 1.57
date: 2014/04/16 23:22:45;  author: djm;  state: Exp;  lines: +4 -1;
skip leading zero bytes in buffer_put_bignum2_from_string();
reported by jan AT mojzis.com; ok markus@

Revision 1.85 / (download) - annotate - [select for diffs], Sun Apr 20 02:49:32 2014 UTC (10 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.84: +2 -1 lines
Diff to previous 1.84 (colored)

add a canonical 6.6 + curve25519 bignum fix fake version that I can
recommend people use ahead of the openssh-6.7 release

Revision 1.84 / (download) - annotate - [select for diffs], Sat Apr 19 05:54:59 2014 UTC (10 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.83: +2 -2 lines
Diff to previous 1.83 (colored)

missing wildcard; pointed out by naddy@

Revision 1.83 / (download) - annotate - [select for diffs], Fri Apr 18 23:52:25 2014 UTC (10 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.82: +16 -2 lines
Diff to previous 1.82 (colored)

OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections
using the curve25519-sha256@libssh.org KEX exchange method to fail
when connecting with something that implements the spec properly.

Disable this KEX method when speaking to one of the affected
versions.

reported by Aris Adamantiadis; ok markus@

Revision 1.82 / (download) - annotate - [select for diffs], Mon Dec 30 23:52:27 2013 UTC (10 years, 4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE
Branch point for: OPENBSD_5_5
Changes since 1.81: +44 -17 lines
Diff to previous 1.81 (colored)

refuse RSA keys from old proprietary clients/servers that use the
obsolete RSA+MD5 signature scheme. it will still be possible to connect
with these clients/servers but only DSA keys will be accepted, and we'll
deprecate them entirely in a future release. ok markus@

Revision 1.81 / (download) - annotate - [select for diffs], Fri May 17 00:13:13 2013 UTC (11 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.80: +3 -3 lines
Diff to previous 1.80 (colored)

bye, bye xfree(); ok markus@

Revision 1.80 / (download) - annotate - [select for diffs], Fri Aug 17 01:30:00 2012 UTC (11 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.79: +3 -1 lines
Diff to previous 1.79 (colored)

Send client banner immediately, rather than waiting for the server to
move first for SSH protocol 2 connections (the default). Patch based on
one in bz#1999 by tls AT panix.com, feedback dtucker@ ok markus@

Revision 1.79 / (download) - annotate - [select for diffs], Fri Sep 23 07:45:05 2011 UTC (12 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1
Changes since 1.78: +2 -1 lines
Diff to previous 1.78 (colored)

unbreak remote portforwarding with dynamic allocated listen ports:
1) send the actual listen port in the open message (instead of 0).
   this allows multiple forwardings with a dynamic listen port
2) update the matching permit-open entry, so we can identify where
   to connect to
report: den at skbkontur.ru and P. Szczygielski
feedback and ok djm@

Revision 1.78 / (download) - annotate - [select for diffs], Thu Sep 11 14:22:37 2008 UTC (15 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9, OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5
Changes since 1.77: +3 -2 lines
Diff to previous 1.77 (colored)

only send eow and no-more-sessions requests to openssh 5 and newer;
fixes interop problems with broken ssh v2 implementations; ok djm@

Revision 1.77 / (download) - annotate - [select for diffs], Tue Dec 12 03:58:42 2006 UTC (17 years, 5 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE, OPENBSD_4_4, OPENBSD_4_3_BASE, OPENBSD_4_3, OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1
Changes since 1.76: +3 -2 lines
Diff to previous 1.76 (colored)

bz #1019: some ssh.com versions apparently can't cope with the remote port
forwarding bind_address being a hostname, so send them an address for cases
where they are not explicitly specified (wildcard or localhost bind).
reported by daveroth AT acm.org; ok dtucker@ deraadt@

Revision 1.71.4.1 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:32 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.71: +7 -3 lines
Diff to previous 1.71 (colored) next main 1.72 (colored)

upgrade to OpenSSH 4.4

Revision 1.71.6.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:50 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.71: +7 -3 lines
Diff to previous 1.71 (colored) next main 1.72 (colored)

upgrade to OpenSSH 4.4

Revision 1.76 / (download) - annotate - [select for diffs], Thu Aug 3 03:34:42 2006 UTC (17 years, 9 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.75: +4 -3 lines
Diff to previous 1.75 (colored)

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

Revision 1.75 / (download) - annotate - [select for diffs], Wed Jul 26 13:57:17 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.74: +2 -1 lines
Diff to previous 1.74 (colored)

move #include <stdlib.h> out of includes.h

Revision 1.74 / (download) - annotate - [select for diffs], Sat Jul 22 20:48:23 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.73: +3 -1 lines
Diff to previous 1.73 (colored)

move #include <string.h> out of includes.h

Revision 1.73 / (download) - annotate - [select for diffs], Sat Mar 25 13:17:01 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.72: +1 -0 lines
Diff to previous 1.72 (colored)

Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
Theo nuked - our scripts to sync -portable need them in the files

Revision 1.72 / (download) - annotate - [select for diffs], Sun Mar 19 18:51:18 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.71: +0 -1 lines
Diff to previous 1.71 (colored)

RCSID() can die

Revision 1.70.2.1 / (download) - annotate - [select for diffs], Thu Mar 10 17:15:04 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.70: +12 -8 lines
Diff to previous 1.70 (colored) next main 1.71 (colored)

upgrade to OpenSSH 4.0

Revision 1.70.4.1 / (download) - annotate - [select for diffs], Thu Mar 10 16:28:27 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.70: +12 -8 lines
Diff to previous 1.70 (colored) next main 1.71 (colored)

upgrade to OpenSSH 4.0

Revision 1.71 / (download) - annotate - [select for diffs], Tue Mar 1 10:09:52 2005 UTC (19 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_8_BASE, OPENBSD_3_7_BASE, OPENBSD_3_7
Branch point for: OPENBSD_3_9, OPENBSD_3_8
Changes since 1.70: +12 -8 lines
Diff to previous 1.70 (colored)

bz#413: allow optional specification of bind address for port forwardings.
Patch originally by Dan Astorian, but worked on by several people
Adds GatewayPorts=clientspecified option on server to allow remote forwards
to bind to client-specified ports.

ok markus@

Revision 1.65.4.3 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:15 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.65.4.2: +2 -6 lines
Diff to previous 1.65.4.2 (colored) to branchpoint 1.65 (colored) next main 1.66 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.69.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:33 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.69: +2 -6 lines
Diff to previous 1.69 (colored) next main 1.70 (colored)

upgrade to OpenSSH 3.8

Revision 1.70 / (download) - annotate - [select for diffs], Sun Nov 2 11:01:03 2003 UTC (20 years, 6 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE, OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_6, OPENBSD_3_5
Changes since 1.69: +2 -6 lines
Diff to previous 1.69 (colored)

remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk

Revision 1.65.2.2 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:25 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.65.2.1: +9 -8 lines
Diff to previous 1.65.2.1 (colored) to branchpoint 1.65 (colored) next main 1.66 (colored)

upgrade to OpenSSH 3.7

Revision 1.65.4.2 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:43 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.65.4.1: +9 -8 lines
Diff to previous 1.65.4.1 (colored) to branchpoint 1.65 (colored)

upgrade to OpenSSH 3.7

Revision 1.69 / (download) - annotate - [select for diffs], Fri Aug 29 10:03:15 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.68: +3 -6 lines
Diff to previous 1.68 (colored)

SSH_BUG_K5USER is unused; ok henning@

Revision 1.68 / (download) - annotate - [select for diffs], Fri Aug 22 10:56:09 2003 UTC (20 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.67: +6 -2 lines
Diff to previous 1.67 (colored)

support GSS API user authentication; patches from Simon Wilkinson,
stripped down and tested by Jakob and myself.

Revision 1.65.4.1 / (download) - annotate - [select for diffs], Sun May 11 12:01:52 2003 UTC (21 years ago) by margarida
Branch: OPENBSD_3_3
Changes since 1.65: +13 -9 lines
Diff to previous 1.65 (colored)

Update OpenSSH to version 3.6.1

Revision 1.67 / (download) - annotate - [select for diffs], Tue Apr 8 20:21:28 2003 UTC (21 years, 1 month ago) by itojun
Branch: MAIN
Changes since 1.66: +2 -2 lines
Diff to previous 1.66 (colored)

rename log() into logit() to avoid name conflict.  markus ok, from netbsd

Revision 1.65.2.1 / (download) - annotate - [select for diffs], Thu Apr 3 23:27:12 2003 UTC (21 years, 1 month ago) by margarida
Branch: OPENBSD_3_2
Changes since 1.65: +13 -9 lines
Diff to previous 1.65 (colored)

Update to OpenSSH 3.6.1

Revision 1.63.2.2 / (download) - annotate - [select for diffs], Thu Apr 3 22:35:17 2003 UTC (21 years, 1 month ago) by miod
Branch: OPENBSD_3_1
Changes since 1.63.2.1: +13 -9 lines
Diff to previous 1.63.2.1 (colored) to branchpoint 1.63 (colored) next main 1.64 (colored)

Merge OpenSSH 3.6.1

Revision 1.66 / (download) - annotate - [select for diffs], Tue Apr 1 10:31:26 2003 UTC (21 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.65: +13 -9 lines
Diff to previous 1.65 (colored)

bugfix causes stalled connections for ssh.com < 3.0; noticed by ho@; tested by ho@ and myself

Revision 1.53.2.3 / (download) - annotate - [select for diffs], Fri Oct 11 14:53:06 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.53.2.2: +5 -3 lines
Diff to previous 1.53.2.2 (colored) to branchpoint 1.53 (colored) next main 1.54 (colored)

Update to OpenSSH 3.5

Revision 1.63.2.1 / (download) - annotate - [select for diffs], Fri Oct 11 14:51:52 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_1
Changes since 1.63: +5 -3 lines
Diff to previous 1.63 (colored)

Update to OpenSSH 3.5

Revision 1.65 / (download) - annotate - [select for diffs], Fri Sep 27 10:42:09 2002 UTC (21 years, 7 months ago) by mickey
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_3, OPENBSD_3_2
Changes since 1.64: +3 -1 lines
Diff to previous 1.64 (colored)

add a generic match for a prober, such as sie big brother; idea from stevesk@; markus@ ok

Revision 1.64 / (download) - annotate - [select for diffs], Thu Sep 19 14:53:14 2002 UTC (21 years, 8 months ago) by stevesk
Branch: MAIN
Changes since 1.63: +3 -3 lines
Diff to previous 1.63 (colored)

relegate some verbose() to debug(); ok markus@

Revision 1.47.2.3 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:10 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.47.2.2: +20 -10 lines
Diff to previous 1.47.2.2 (colored) to branchpoint 1.47 (colored) next main 1.48 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.53.2.2 / (download) - annotate - [select for diffs], Fri May 17 00:03:23 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.53.2.1: +20 -10 lines
Diff to previous 1.53.2.1 (colored) to branchpoint 1.53 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.63 / (download) - annotate - [select for diffs], Wed Apr 10 08:21:47 2002 UTC (22 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.62: +7 -3 lines
Diff to previous 1.62 (colored)

strip '@' from username only for KerbV and known broken clients, bug #204

Revision 1.62 / (download) - annotate - [select for diffs], Mon Mar 25 21:13:51 2002 UTC (22 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.61: +14 -8 lines
Diff to previous 1.61 (colored)

don't send stderr data after EOF, accept this from older known (broken)
sshd servers only, fixes http://bugzilla.mindrot.org/show_bug.cgi?id=179

Revision 1.47.2.2 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:44 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.47.2.1: +71 -59 lines
Diff to previous 1.47.2.1 (colored) to branchpoint 1.47 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.27.2.6 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:42 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.27.2.5: +71 -59 lines
Diff to previous 1.27.2.5 (colored) to branchpoint 1.27 (colored) next main 1.28 (colored)

Merge OpenSSH 3.1.

Revision 1.53.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:46 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.53: +71 -59 lines
Diff to previous 1.53 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.61 / (download) - annotate - [select for diffs], Wed Mar 6 00:24:39 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.60: +4 -4 lines
Diff to previous 1.60 (colored)

compat.c

Revision 1.60 / (download) - annotate - [select for diffs], Wed Mar 6 00:23:27 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.59: +2 -2 lines
Diff to previous 1.59 (colored)

undo

Revision 1.59 / (download) - annotate - [select for diffs], Wed Mar 6 00:20:54 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.58: +3 -3 lines
Diff to previous 1.58 (colored)

compat.c

Revision 1.58 / (download) - annotate - [select for diffs], Mon Jan 21 22:30:12 2002 UTC (22 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.57: +2 -2 lines
Diff to previous 1.57 (colored)

remove "rijndael-*", just use "aes-" since this how rijndael is called
in the drafts; ok stevesk@

Revision 1.57 / (download) - annotate - [select for diffs], Sun Jan 13 17:57:37 2002 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.56: +10 -8 lines
Diff to previous 1.56 (colored)

use buffer API and avoid static strings of fixed size; ok provos@/mouring@

Revision 1.56 / (download) - annotate - [select for diffs], Wed Dec 19 07:18:56 2001 UTC (22 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.55: +9 -9 lines
Diff to previous 1.55 (colored)

basic KNF done while i was looking for something else

Revision 1.55 / (download) - annotate - [select for diffs], Wed Dec 5 16:54:51 2001 UTC (22 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.54: +57 -47 lines
Diff to previous 1.54 (colored)

make theo and djm happy: bye bye regexp

Revision 1.54 / (download) - annotate - [select for diffs], Wed Dec 5 10:06:12 2001 UTC (22 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.53: +3 -3 lines
Diff to previous 1.53 (colored)

minor KNF

Revision 1.47.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:54 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.47: +16 -6 lines
Diff to previous 1.47 (colored)

Pull in OpenSSH-2.9.9

Revision 1.27.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:41 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.27.2.4: +16 -6 lines
Diff to previous 1.27.2.4 (colored) to branchpoint 1.27 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.53 / (download) - annotate - [select for diffs], Thu Sep 20 13:50:40 2001 UTC (22 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.52: +6 -4 lines
Diff to previous 1.52 (colored)

bug compat: request a dummy channel for -N (no shell) sessions + cleanup; vinschen@redhat.com

Revision 1.52 / (download) - annotate - [select for diffs], Mon Sep 17 21:09:47 2001 UTC (22 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.51: +6 -4 lines
Diff to previous 1.51 (colored)

more versions suffering the SSH_BUG_DEBUG bug;
3.0.x reported by dbutts@maddog.storability.com

Revision 1.51 / (download) - annotate - [select for diffs], Mon Jun 25 08:25:37 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.50: +2 -2 lines
Diff to previous 1.50 (colored)

update copyright for 2001

Revision 1.27.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:28 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.27.2.3: +55 -8 lines
Diff to previous 1.27.2.3 (colored) to branchpoint 1.27 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.50 / (download) - annotate - [select for diffs], Mon Apr 30 16:02:49 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.49: +2 -2 lines
Diff to previous 1.49 (colored)

ssh-2.0.10 has the weak-key-bug, too.

Revision 1.49 / (download) - annotate - [select for diffs], Mon Apr 30 15:50:46 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.48: +8 -2 lines
Diff to previous 1.48 (colored)

allow interop with weaker key generation used by ssh-2.0.x, x < 10

Revision 1.48 / (download) - annotate - [select for diffs], Sun Apr 29 19:16:52 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.47: +3 -3 lines
Diff to previous 1.47 (colored)

more ssh.com-2.0.x bug-compat; from per@appgate.com

Revision 1.47 / (download) - annotate - [select for diffs], Wed Apr 18 23:43:25 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.46: +3 -2 lines
Diff to previous 1.46 (colored)

more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works now
(however the 2.1.0 server seems to work only if debug is enabled...)

Revision 1.46 / (download) - annotate - [select for diffs], Thu Apr 12 19:15:24 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.45: +3 -3 lines
Diff to previous 1.45 (colored)

implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
similar to RhostRSAAuthentication unless you enable (the experimental)
HostbasedUsesNameFromPacketOnly option.  please test. :)

Revision 1.45 / (download) - annotate - [select for diffs], Thu Apr 5 11:09:16 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.44: +10 -6 lines
Diff to previous 1.44 (colored)

add SSH_BUG_NOREKEY and detect broken (=all old) openssh versions.

Revision 1.44 / (download) - annotate - [select for diffs], Thu Apr 5 10:00:06 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.43: +2 -1 lines
Diff to previous 1.43 (colored)

2.3.x does old  GEX, too; report jakob@

Revision 1.43 / (download) - annotate - [select for diffs], Wed Apr 4 15:50:55 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.42: +2 -1 lines
Diff to previous 1.42 (colored)

f-secure 1.3.2 does not handle IGNORE; from milliondl@ornl.gov

Revision 1.42 / (download) - annotate - [select for diffs], Tue Mar 27 17:46:49 2001 UTC (23 years, 1 month ago) by provos
Branch: MAIN
Changes since 1.41: +8 -4 lines
Diff to previous 1.41 (colored)

make dh group exchange more flexible, allow min and max group size,
okay markus@, deraadt@

Revision 1.41 / (download) - annotate - [select for diffs], Tue Mar 27 10:57:00 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.40: +10 -6 lines
Diff to previous 1.40 (colored)

some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5
signatures in SSH protocol 2, ok djm@

Revision 1.40 / (download) - annotate - [select for diffs], Fri Mar 23 11:04:06 2001 UTC (23 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.39: +34 -2 lines
Diff to previous 1.39 (colored)

Compat for OpenSSH with broken Rijndael/AES. ok markus@

Revision 1.27.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:24 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.27.2.2: +20 -9 lines
Diff to previous 1.27.2.2 (colored) to branchpoint 1.27 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.13.2.5 / (download) - annotate - [select for diffs], Wed Mar 21 18:52:42 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.13.2.4: +20 -9 lines
Diff to previous 1.13.2.4 (colored) to branchpoint 1.13 (colored) next main 1.14 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.39 / (download) - annotate - [select for diffs], Sun Mar 18 23:30:55 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.38: +3 -1 lines
Diff to previous 1.38 (colored)

specifically version match on ssh scanners.  do not log scan information
to the console, because clueless users freak out when people do completely
legal probes.  instead, generate a detailed log file entry and use british
humour to relax their sphincters a little bit.

Revision 1.13.2.4 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:09 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.13.2.3: +20 -11 lines
Diff to previous 1.13.2.3 (colored) to branchpoint 1.13 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.38 / (download) - annotate - [select for diffs], Sat Mar 10 15:31:00 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.37: +13 -7 lines
Diff to previous 1.37 (colored)

all known netscreen ssh versions, and older versions of OSU ssh cannot
handle password padding (newer OSU is fixed)

Revision 1.37 / (download) - annotate - [select for diffs], Thu Mar 8 21:42:31 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.36: +4 -3 lines
Diff to previous 1.36 (colored)

implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->
no need to do enter passphrase or do expensive sign operations if the
server does not accept key).

Revision 1.36 / (download) - annotate - [select for diffs], Tue Feb 27 11:00:11 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.35: +3 -1 lines
Diff to previous 1.35 (colored)

support SSH-2.0-2.1 ; from Christophe_Moret@hp.com

Revision 1.27.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:18:49 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.27.2.1: +3 -1 lines
Diff to previous 1.27.2.1 (colored) to branchpoint 1.27 (colored)

Pull in OpenSSH-2.5.1

Revision 1.35 / (download) - annotate - [select for diffs], Mon Feb 19 09:53:31 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.34: +3 -1 lines
Diff to previous 1.34 (colored)

ssh-1.2.{18-22} has broken handling of ignore messages; report from itojun@

Revision 1.27.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:12:59 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.27: +18 -11 lines
Diff to previous 1.27 (colored)

Pull in OpenSSH 2.5.0

Revision 1.34 / (download) - annotate - [select for diffs], Sun Jan 21 19:05:48 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.33: +4 -3 lines
Diff to previous 1.33 (colored)

split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.
rename util.[ch] -> misc.[ch]

Revision 1.33 / (download) - annotate - [select for diffs], Mon Jan 8 22:29:05 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.32: +5 -2 lines
Diff to previous 1.32 (colored)

implement option 'Banner /etc/issue.net' for ssh2, move version to
2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
is enabled).

Revision 1.32 / (download) - annotate - [select for diffs], Sat Dec 9 23:51:11 2000 UTC (23 years, 5 months ago) by provos
Branch: MAIN
Changes since 1.31: +2 -2 lines
Diff to previous 1.31 (colored)

remove unnecessary '\n'

Revision 1.31 / (download) - annotate - [select for diffs], Wed Dec 6 22:58:14 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.30: +6 -5 lines
Diff to previous 1.30 (colored)

disable debug messages for ssh.com/f-secure 2.0.1x, 2.1.0

Revision 1.30 / (download) - annotate - [select for diffs], Sun Dec 3 11:29:04 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.29: +1 -2 lines
Diff to previous 1.29 (colored)

remove fallback to SSH_BUG_HMAC now that the drafts are updated

Revision 1.29 / (download) - annotate - [select for diffs], Sun Dec 3 11:27:55 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.28: +3 -3 lines
Diff to previous 1.28 (colored)

correctly match "2.1.0.pl2 SSH" etc; from pekkas@netcore.fi/bugzilla.redhat

Revision 1.28 / (download) - annotate - [select for diffs], Sun Dec 3 11:15:03 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.27: +6 -3 lines
Diff to previous 1.27 (colored)

support f-secure/ssh.com 2.0.12; ok niels@

Revision 1.13.2.3 / (download) - annotate - [select for diffs], Wed Nov 8 21:30:38 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.13.2.2: +35 -20 lines
Diff to previous 1.13.2.2 (colored) to branchpoint 1.13 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.27 / (download) - annotate - [select for diffs], Tue Oct 31 09:31:58 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.26: +2 -3 lines
Diff to previous 1.26 (colored)

handle all old openssh versions

Revision 1.26 / (download) - annotate - [select for diffs], Thu Oct 26 18:38:28 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.25: +5 -2 lines
Diff to previous 1.25 (colored)

add older vandyke products

Revision 1.25 / (download) - annotate - [select for diffs], Sat Oct 14 12:16:56 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.24: +13 -8 lines
Diff to previous 1.24 (colored)

OpenSSH_2.3; note that is is not complete, but the version number needs to be changed for interoperability reasons

Revision 1.24 / (download) - annotate - [select for diffs], Tue Oct 10 20:20:45 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.23: +27 -14 lines
Diff to previous 1.23 (colored)

use rexexp for version string matching

Revision 1.23 / (download) - annotate - [select for diffs], Thu Sep 7 21:13:37 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.22: +2 -2 lines
Diff to previous 1.22 (colored)

some more Copyright fixes

Revision 1.22 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:50 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.21: +1 -6 lines
Diff to previous 1.21 (colored)

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.13.2.2 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:19 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.13.2.1: +6 -4 lines
Diff to previous 1.13.2.1 (colored) to branchpoint 1.13 (colored)

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.21 / (download) - annotate - [select for diffs], Sun Aug 27 18:18:04 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.20: +3 -3 lines
Diff to previous 1.20 (colored)

compatibility with future ssh.com versions

Revision 1.20 / (download) - annotate - [select for diffs], Sat Aug 26 10:33:43 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.19: +2 -1 lines
Diff to previous 1.19 (colored)

ssh.com-2.3.0

Revision 1.19 / (download) - annotate - [select for diffs], Sun Jul 9 01:27:32 2000 UTC (23 years, 10 months ago) by ho
Branch: MAIN
Changes since 1.18: +2 -2 lines
Diff to previous 1.18 (colored)

Better conditions for strsep() ending.

Revision 1.18 / (download) - annotate - [select for diffs], Sat Jul 8 23:17:31 2000 UTC (23 years, 10 months ago) by provos
Branch: MAIN
Changes since 1.17: +4 -4 lines
Diff to previous 1.17 (colored)

replace strtok with strsep; from David Young <dyoung@onthejob.net>

Revision 1.17 / (download) - annotate - [select for diffs], Tue Jun 20 01:39:40 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.16: +1 -1 lines
Diff to previous 1.16 (colored)

OpenBSD tag

Revision 1.16 / (download) - annotate - [select for diffs], Mon Jun 19 00:50:11 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.15: +2 -2 lines
Diff to previous 1.15 (colored)

make userauth+pubkey interop with ssh.com-2.2.0

Revision 1.15 / (download) - annotate - [select for diffs], Sun Jun 18 03:00:27 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.14: +2 -1 lines
Diff to previous 1.14 (colored)

initial support for ssh.com's 2.2.0

Revision 1.13.2.1 / (download) - annotate - [select for diffs], Mon Jun 12 02:37:33 2000 UTC (23 years, 11 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.13: +5 -3 lines
Diff to previous 1.13 (colored)

lovin' CVS... update patch branch to OpenSSH-2.1.1

Revision 1.14 / (download) - annotate - [select for diffs], Mon May 22 18:42:01 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.13: +5 -3 lines
Diff to previous 1.13 (colored)

check strtok() != NULL; ok niels@

Revision 1.13 / (download) - annotate - [select for diffs], Mon May 8 17:42:24 2000 UTC (24 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.12: +12 -9 lines
Diff to previous 1.12 (colored)

bug compat w/ ssh-2.0.13 x11, split out bugs

Revision 1.12 / (download) - annotate - [select for diffs], Wed Apr 26 20:56:29 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.11: +1 -2 lines
Diff to previous 1.11 (colored)

add DSA pubkey auth and other SSH2 fixes.  use ssh-keygen -[xX]
for trading keys with the real and the original SSH, directly from the
people who invented the SSH protocol.

Revision 1.11 / (download) - annotate - [select for diffs], Fri Apr 14 10:30:31 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.10: +3 -3 lines
Diff to previous 1.10 (colored)

whitespace cleanup

Revision 1.10 / (download) - annotate - [select for diffs], Wed Apr 12 07:45:43 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.9: +30 -1 lines
Diff to previous 1.9 (colored)

add Cipher and Protocol options to ssh/sshd, e.g.:
ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers arcfour,3des-cbc'

Revision 1.9 / (download) - annotate - [select for diffs], Wed Apr 12 06:37:02 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.8: +2 -2 lines
Diff to previous 1.8 (colored)

less debugging output

Revision 1.8 / (download) - annotate - [select for diffs], Fri Apr 7 09:17:39 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.7: +2 -4 lines
Diff to previous 1.7 (colored)

interop w/ latest ssh.com windows client.

Revision 1.7 / (download) - annotate - [select for diffs], Tue Apr 4 15:19:42 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.6: +4 -2 lines
Diff to previous 1.6 (colored)

ssh2 client implementation, interops w/ ssh.com and lsh servers.

Revision 1.6 / (download) - annotate - [select for diffs], Mon Apr 3 07:07:15 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.5: +32 -1 lines
Diff to previous 1.5 (colored)

channel layer support for ssh2

Revision 1.5 / (download) - annotate - [select for diffs], Wed Nov 24 16:15:24 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.4: +30 -1 lines
Diff to previous 1.4 (colored)

missing copyright

Revision 1.4 / (download) - annotate - [select for diffs], Tue Nov 23 22:25:53 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.3: +7 -4 lines
Diff to previous 1.3 (colored)

KNF part 1

Revision 1.3 / (download) - annotate - [select for diffs], Mon Nov 22 21:02:38 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (colored)

syslog changes:
* Unified Logmessage for all auth-types, for success and for failed
* Standard connections get only ONE line in the LOG when level==LOG:
  Auth-attempts are logged only, if authentication is:
        a) successfull or
        b) with passwd or
        c) we had more than AUTH_FAIL_LOG failues
* many log() became verbose()
* old behaviour with level=VERBOSE

Revision 1.2 / (download) - annotate - [select for diffs], Sat Oct 16 22:29:01 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.1: +2 -0 lines
Diff to previous 1.1 (colored)

add CVS tags, fix comments and whitespace

Revision 1.1 / (download) - annotate - [select for diffs], Sat Oct 16 20:47:13 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN

support for SSH protocol 1.5 which is poorly documented, the RFC.troff lies.
interops (x11,agent,etc) with 1.2.27 and protocol 1.3

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.