CVS log for src/usr.bin/ssh/compat.h

Request diff between arbitrary revisions

Default branch: MAIN

Revision 1.62 / (download) - annotate - [select for diffs], Mon Mar 6 12:14:48 2023 UTC (14 months, 1 week ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, HEAD
Changes since 1.61: +2 -4 lines
Diff to previous 1.61 (colored)

Refactor creation of KEX proposal.

This adds kex_proposal_populate_entries (and corresponding free) which
populates the KEX proposal array with dynamically allocated strings.
This replaces the previous mix of static and dynamic that has been the
source of previous leaks and bugs.  Remove unused compat functions.
With & ok djm@.

Revision 1.61 / (download) - annotate - [select for diffs], Fri Feb 17 04:22:50 2023 UTC (14 months, 4 weeks ago) by dtucker
Branch: MAIN
Changes since 1.60: +2 -2 lines
Diff to previous 1.60 (colored)

Remove now-unused compat bit SSH_BUG_RSASIGMD5.  The code to set this
was removed in OpenSSH 7.7 when support for SSH implementations dating
back to before RFC standardization were removed.  "burn it all" djm@

Revision 1.60 / (download) - annotate - [select for diffs], Fri Feb 17 03:06:18 2023 UTC (14 months, 4 weeks ago) by dtucker
Branch: MAIN
Changes since 1.59: +2 -2 lines
Diff to previous 1.59 (colored)

Remove now-unused compat bit SSH_BUG_BIGENDIANAES.  This was
previously set for OpenSSH 2.3 (released in 2000) but this check
was removed in OpenSSH 7.7 (2018).  ok djm@ deraadt@

Revision 1.59 / (download) - annotate - [select for diffs], Thu Feb 16 10:10:00 2023 UTC (14 months, 4 weeks ago) by dtucker
Branch: MAIN
Changes since 1.58: +2 -2 lines
Diff to previous 1.58 (colored)

Remove SSH_BUG_PASSWORDPAD compat bit since it's no longer used.
ok markus@

Revision 1.58 / (download) - annotate - [select for diffs], Thu Feb 16 07:55:15 2023 UTC (14 months, 4 weeks ago) by dtucker
Branch: MAIN
Changes since 1.57: +2 -2 lines
Diff to previous 1.57 (colored)

Remove SSH_BUG_IGNOREMSG compat flag since it's only applicable to SSH1
and thus no longer used.  ok markus@ "kill it with fire" djm@

Revision 1.57 / (download) - annotate - [select for diffs], Sun Jun 6 03:40:39 2021 UTC (2 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0
Changes since 1.56: +2 -2 lines
Diff to previous 1.56 (colored)

Client-side workaround for a bug in OpenSSH 7.4: this release allows
RSA/SHA2 signatures for public key authentication but fails to advertise
this correctly via SSH2_MSG_EXT_INFO. This causes clients of these
server to incorrectly match PubkeyAcceptedAlgorithms and potentially
refuse to offer valid keys.

Reported by and based on patch from Gordon Messmer via bz3213, thanks
also for additional analysis by Jakub Jelen. ok dtucker

Revision 1.56 / (download) - annotate - [select for diffs], Wed Jan 27 09:26:54 2021 UTC (3 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.55: +6 -6 lines
Diff to previous 1.55 (colored)

remove global variable used to stash compat flags and use the
purpose-built ssh->compat variable instead; feedback/ok markus@

Revision 1.55 / (download) - annotate - [select for diffs], Mon Jun 1 07:11:38 2020 UTC (3 years, 11 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.54: +1 -7 lines
Diff to previous 1.54 (colored)

Remove now-unused proto_spec and associated definitions.  ok djm@

Revision 1.54 / (download) - annotate - [select for diffs], Mon Aug 13 02:41:05 2018 UTC (5 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.53: +3 -9 lines
Diff to previous 1.53 (colored)

revert compat.[ch] section of the following change. It causes
double-free under some circumstances.

--

date: 2018/07/31 03:07:24;  author: djm;  state: Exp;  lines: +33 -18;  commitid: f7g4UI8eeOXReTPh;
fix some memory leaks spotted by Coverity via Jakub Jelen in bz#2366
feedback and ok dtucker@

Revision 1.53 / (download) - annotate - [select for diffs], Tue Jul 31 03:07:24 2018 UTC (5 years, 9 months ago) by djm
Branch: MAIN
Changes since 1.52: +10 -4 lines
Diff to previous 1.52 (colored)

fix some memory leaks spotted by Coverity via Jakub Jelen in bz#2366
feedback and ok dtucker@

Revision 1.52 / (download) - annotate - [select for diffs], Tue Jul 3 11:39:54 2018 UTC (5 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.51: +2 -2 lines
Diff to previous 1.51 (colored)

Improve strictness and control over RSA-SHA2 signature types:

In ssh, when an agent fails to return a RSA-SHA2 signature when
requested and falls back to RSA-SHA1 instead, retry the signature to
ensure that the public key algorithm sent in the SSH_MSG_USERAUTH
matches the one in the signature itself.

In sshd, strictly enforce that the public key algorithm sent in the
SSH_MSG_USERAUTH message matches what appears in the signature.

Make the sshd_config PubkeyAcceptedKeyTypes and
HostbasedAcceptedKeyTypes options control accepted signature algorithms
(previously they selected supported key types). This allows these
options to ban RSA-SHA1 in favour of RSA-SHA2.

Add new signature algorithms "rsa-sha2-256-cert-v01@openssh.com" and
"rsa-sha2-512-cert-v01@openssh.com" to force use of RSA-SHA2 signatures
with certificate keys.

feedback and ok markus@

Revision 1.51 / (download) - annotate - [select for diffs], Fri Feb 16 04:43:11 2018 UTC (6 years, 3 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.50: +2 -2 lines
Diff to previous 1.50 (colored)

Don't send IUTF8 to servers that don't like them.

Some SSH servers eg "ConfD" drop the connection if the client sends the
new IUTF8 (RFC8160) terminal mode even if it's not set.  Add a bug bit
for such servers and avoid sending IUTF8 to them.  ok djm@

Revision 1.50 / (download) - annotate - [select for diffs], Tue Jan 23 05:27:21 2018 UTC (6 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.49: +14 -14 lines
Diff to previous 1.49 (colored)

Drop compatibility hacks for some ancient SSH implementations, including
ssh.com <=2.* and OpenSSH <= 3.*.

These versions were all released in or before 2001 and predate the
final SSH RFCs. The hacks in question aren't necessary for RFC-
compliant SSH implementations.

ok markus@

Revision 1.49 / (download) - annotate - [select for diffs], Sun Apr 30 23:13:25 2017 UTC (7 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.48: +1 -5 lines
Diff to previous 1.48 (colored)

remove compat20/compat13/compat15 variables

ok markus@

Revision 1.48 / (download) - annotate - [select for diffs], Tue May 26 23:23:40 2015 UTC (8 years, 11 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1, OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.47: +2 -1 lines
Diff to previous 1.47 (colored)

Cap DH-GEX group size at 4kbits for Cisco implementations.  Some of them
will choke when asked for preferred sizes >4k instead of returning the 4k
group that they do have.  bz#2209, ok djm@

Revision 1.47 / (download) - annotate - [select for diffs], Fri Apr 10 05:16:50 2015 UTC (9 years, 1 month ago) by dtucker
Branch: MAIN
Changes since 1.46: +2 -1 lines
Diff to previous 1.46 (colored)

Don't send hostkey advertisments (hostkeys-00@openssh.com) to current
versions of Tera Term as they can't handle them.  Newer versions should
be OK.  Patch from Bryan Drewery and IWAMOTO Kouichi, ok djm@

Revision 1.46 / (download) - annotate - [select for diffs], Mon Jan 19 20:20:20 2015 UTC (9 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.45: +2 -2 lines
Diff to previous 1.45 (colored)

store compat flags in struct ssh; ok djm@

Revision 1.44.4.1 / (download) - annotate - [select for diffs], Mon Apr 21 00:30:48 2014 UTC (10 years ago) by djm
Branch: OPENBSD_5_5
Changes since 1.44: +3 -1 lines
Diff to previous 1.44 (colored) next main 1.45 (colored)

MFC:

reliability fix for OpenSSH using curve25519-sha256@libssh.org key
exchange method.

revision 1.71
date: 2014/04/18 23:52:25;  author: djm;  state: Exp;  lines: +2 -2;
OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections
using the curve25519-sha256@libssh.org KEX exchange method to fail
when connecting with something that implements the spec properly.

Disable this KEX method when speaking to one of the affected
versions.

revision 1.57
date: 2014/04/16 23:22:45;  author: djm;  state: Exp;  lines: +4 -1;
skip leading zero bytes in buffer_put_bignum2_from_string();
reported by jan AT mojzis.com; ok markus@

Revision 1.45 / (download) - annotate - [select for diffs], Fri Apr 18 23:52:25 2014 UTC (10 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.44: +3 -1 lines
Diff to previous 1.44 (colored)

OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections
using the curve25519-sha256@libssh.org KEX exchange method to fail
when connecting with something that implements the spec properly.

Disable this KEX method when speaking to one of the affected
versions.

reported by Aris Adamantiadis; ok markus@

Revision 1.44 / (download) - annotate - [select for diffs], Mon Dec 30 23:52:27 2013 UTC (10 years, 4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE
Branch point for: OPENBSD_5_5
Changes since 1.43: +2 -1 lines
Diff to previous 1.43 (colored)

refuse RSA keys from old proprietary clients/servers that use the
obsolete RSA+MD5 signature scheme. it will still be possible to connect
with these clients/servers but only DSA keys will be accepted, and we'll
deprecate them entirely in a future release. ok markus@

Revision 1.43 / (download) - annotate - [select for diffs], Fri Sep 23 07:45:05 2011 UTC (12 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4, OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1
Changes since 1.42: +2 -1 lines
Diff to previous 1.42 (colored)

unbreak remote portforwarding with dynamic allocated listen ports:
1) send the actual listen port in the open message (instead of 0).
   this allows multiple forwardings with a dynamic listen port
2) update the matching permit-open entry, so we can identify where
   to connect to
report: den at skbkontur.ru and P. Szczygielski
feedback and ok djm@

Revision 1.42 / (download) - annotate - [select for diffs], Thu Sep 11 14:22:37 2008 UTC (15 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9, OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5
Changes since 1.41: +2 -1 lines
Diff to previous 1.41 (colored)

only send eow and no-more-sessions requests to openssh 5 and newer;
fixes interop problems with broken ssh v2 implementations; ok djm@

Revision 1.41 / (download) - annotate - [select for diffs], Tue Dec 12 03:58:42 2006 UTC (17 years, 5 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE, OPENBSD_4_4, OPENBSD_4_3_BASE, OPENBSD_4_3, OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1
Changes since 1.40: +2 -1 lines
Diff to previous 1.40 (colored)

bz #1019: some ssh.com versions apparently can't cope with the remote port
forwarding bind_address being a hostname, so send them an address for cases
where they are not explicitly specified (wildcard or localhost bind).
reported by daveroth AT acm.org; ok dtucker@ deraadt@

Revision 1.39.4.1 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:32 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.39: +1 -1 lines
Diff to previous 1.39 (colored) next main 1.40 (colored)

upgrade to OpenSSH 4.4

Revision 1.39.6.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:50 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.39: +1 -1 lines
Diff to previous 1.39 (colored) next main 1.40 (colored)

upgrade to OpenSSH 4.4

Revision 1.40 / (download) - annotate - [select for diffs], Sat Mar 25 22:22:43 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.39: +1 -1 lines
Diff to previous 1.39 (colored)

standardise spacing in $OpenBSD$ tags; requested by deraadt@

Revision 1.37.2.2 / (download) - annotate - [select for diffs], Thu Mar 10 17:15:04 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.37.2.1: +2 -1 lines
Diff to previous 1.37.2.1 (colored) to branchpoint 1.37 (colored) next main 1.38 (colored)

upgrade to OpenSSH 4.0

Revision 1.38.2.1 / (download) - annotate - [select for diffs], Thu Mar 10 16:28:27 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.38: +2 -1 lines
Diff to previous 1.38 (colored) next main 1.39 (colored)

upgrade to OpenSSH 4.0

Revision 1.39 / (download) - annotate - [select for diffs], Tue Mar 1 10:09:52 2005 UTC (19 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_8_BASE, OPENBSD_3_7_BASE, OPENBSD_3_7
Branch point for: OPENBSD_3_9, OPENBSD_3_8
Changes since 1.38: +2 -1 lines
Diff to previous 1.38 (colored)

bz#413: allow optional specification of bind address for port forwardings.
Patch originally by Dan Astorian, but worked on by several people
Adds GatewayPorts=clientspecified option on server to allow remote forwards
to bind to client-specified ports.

ok markus@

Revision 1.36.2.2 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:31 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.36.2.1: +2 -2 lines
Diff to previous 1.36.2.1 (colored) to branchpoint 1.36 (colored) next main 1.37 (colored)

upgrade to OpenSSH 3.9

Revision 1.37.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:26 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.37: +2 -2 lines
Diff to previous 1.37 (colored)

upgrade to OpenSSH 3.9

Revision 1.38 / (download) - annotate - [select for diffs], Sun Jul 11 17:48:47 2004 UTC (19 years, 10 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_6
Changes since 1.37: +2 -2 lines
Diff to previous 1.37 (colored)

spaces

Revision 1.33.4.3 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:15 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.33.4.2: +1 -2 lines
Diff to previous 1.33.4.2 (colored) to branchpoint 1.33 (colored) next main 1.34 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.36.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:33 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.36: +1 -2 lines
Diff to previous 1.36 (colored)

upgrade to OpenSSH 3.8

Revision 1.37 / (download) - annotate - [select for diffs], Sun Nov 2 11:01:03 2003 UTC (20 years, 6 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_5
Changes since 1.36: +1 -2 lines
Diff to previous 1.36 (colored)

remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk

Revision 1.33.2.2 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:25 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.33.2.1: +4 -4 lines
Diff to previous 1.33.2.1 (colored) to branchpoint 1.33 (colored) next main 1.34 (colored)

upgrade to OpenSSH 3.7

Revision 1.33.4.2 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:43 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.33.4.1: +4 -4 lines
Diff to previous 1.33.4.1 (colored) to branchpoint 1.33 (colored)

upgrade to OpenSSH 3.7

Revision 1.36 / (download) - annotate - [select for diffs], Fri Aug 29 10:03:15 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.35: +4 -5 lines
Diff to previous 1.35 (colored)

SSH_BUG_K5USER is unused; ok henning@

Revision 1.35 / (download) - annotate - [select for diffs], Fri Aug 22 10:56:09 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.34: +2 -1 lines
Diff to previous 1.34 (colored)

support GSS API user authentication; patches from Simon Wilkinson,
stripped down and tested by Jakob and myself.

Revision 1.33.4.1 / (download) - annotate - [select for diffs], Sun May 11 12:01:52 2003 UTC (21 years ago) by margarida
Branch: OPENBSD_3_3
Changes since 1.33: +2 -1 lines
Diff to previous 1.33 (colored)

Update OpenSSH to version 3.6.1

Revision 1.33.2.1 / (download) - annotate - [select for diffs], Thu Apr 3 23:27:12 2003 UTC (21 years, 1 month ago) by margarida
Branch: OPENBSD_3_2
Changes since 1.33: +2 -1 lines
Diff to previous 1.33 (colored)

Update to OpenSSH 3.6.1

Revision 1.32.2.2 / (download) - annotate - [select for diffs], Thu Apr 3 22:35:17 2003 UTC (21 years, 1 month ago) by miod
Branch: OPENBSD_3_1
Changes since 1.32.2.1: +2 -1 lines
Diff to previous 1.32.2.1 (colored) to branchpoint 1.32 (colored) next main 1.33 (colored)

Merge OpenSSH 3.6.1

Revision 1.34 / (download) - annotate - [select for diffs], Tue Apr 1 10:31:26 2003 UTC (21 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.33: +2 -1 lines
Diff to previous 1.33 (colored)

bugfix causes stalled connections for ssh.com < 3.0; noticed by ho@; tested by ho@ and myself

Revision 1.29.2.3 / (download) - annotate - [select for diffs], Fri Oct 11 14:53:06 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.29.2.2: +2 -1 lines
Diff to previous 1.29.2.2 (colored) to branchpoint 1.29 (colored) next main 1.30 (colored)

Update to OpenSSH 3.5

Revision 1.32.2.1 / (download) - annotate - [select for diffs], Fri Oct 11 14:51:52 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_1
Changes since 1.32: +2 -1 lines
Diff to previous 1.32 (colored)

Update to OpenSSH 3.5

Revision 1.33 / (download) - annotate - [select for diffs], Fri Sep 27 10:42:09 2002 UTC (21 years, 7 months ago) by mickey
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_3, OPENBSD_3_2
Changes since 1.32: +2 -1 lines
Diff to previous 1.32 (colored)

add a generic match for a prober, such as sie big brother; idea from stevesk@; markus@ ok

Revision 1.23.2.3 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:10 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.23.2.2: +3 -1 lines
Diff to previous 1.23.2.2 (colored) to branchpoint 1.23 (colored) next main 1.24 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.29.2.2 / (download) - annotate - [select for diffs], Fri May 17 00:03:23 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.29.2.1: +3 -1 lines
Diff to previous 1.29.2.1 (colored) to branchpoint 1.29 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.32 / (download) - annotate - [select for diffs], Wed Apr 10 08:21:47 2002 UTC (22 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.31: +2 -1 lines
Diff to previous 1.31 (colored)

strip '@' from username only for KerbV and known broken clients, bug #204

Revision 1.31 / (download) - annotate - [select for diffs], Mon Mar 25 21:13:51 2002 UTC (22 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.30: +2 -1 lines
Diff to previous 1.30 (colored)

don't send stderr data after EOF, accept this from older known (broken)
sshd servers only, fixes http://bugzilla.mindrot.org/show_bug.cgi?id=179

Revision 1.23.2.2 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:44 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.23.2.1: +2 -1 lines
Diff to previous 1.23.2.1 (colored) to branchpoint 1.23 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.11.2.6 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:42 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.11.2.5: +2 -1 lines
Diff to previous 1.11.2.5 (colored) to branchpoint 1.11 (colored) next main 1.12 (colored)

Merge OpenSSH 3.1.

Revision 1.29.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:46 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.29: +2 -1 lines
Diff to previous 1.29 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.30 / (download) - annotate - [select for diffs], Mon Mar 4 17:27:39 2002 UTC (22 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.29: +2 -1 lines
Diff to previous 1.29 (colored)

$OpenBSD$ and RCSID() cleanup: don't use RCSID() in .h files; add
missing RCSID() to .c files and remove dup /*$OpenBSD$*/ from .c
files.  ok markus@

Revision 1.23.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:54 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.23: +28 -24 lines
Diff to previous 1.23 (colored)

Pull in OpenSSH-2.9.9

Revision 1.11.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:41 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.11.2.4: +28 -24 lines
Diff to previous 1.11.2.4 (colored) to branchpoint 1.11 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.29 / (download) - annotate - [select for diffs], Thu Sep 20 13:50:40 2001 UTC (22 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.28: +2 -1 lines
Diff to previous 1.28 (colored)

bug compat: request a dummy channel for -N (no shell) sessions + cleanup; vinschen@redhat.com

Revision 1.28 / (download) - annotate - [select for diffs], Tue Jun 26 17:27:23 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.27: +6 -5 lines
Diff to previous 1.27 (colored)

remove comments from .h, since they are cut&paste from the .c files
and out of sync

Revision 1.27 / (download) - annotate - [select for diffs], Tue Jun 26 06:32:50 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.26: +4 -4 lines
Diff to previous 1.26 (colored)

prototype pedant.  not very creative...
- () -> (void)
- no variable names

Revision 1.26 / (download) - annotate - [select for diffs], Mon Jun 25 08:25:37 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.25: +2 -2 lines
Diff to previous 1.25 (colored)

update copyright for 2001

Revision 1.11.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:28 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.11.2.3: +7 -1 lines
Diff to previous 1.11.2.3 (colored) to branchpoint 1.11 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.25 / (download) - annotate - [select for diffs], Mon Apr 30 15:50:46 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.24: +2 -1 lines
Diff to previous 1.24 (colored)

allow interop with weaker key generation used by ssh-2.0.x, x < 10

Revision 1.24 / (download) - annotate - [select for diffs], Sun Apr 29 19:16:52 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.23: +19 -18 lines
Diff to previous 1.23 (colored)

more ssh.com-2.0.x bug-compat; from per@appgate.com

Revision 1.23 / (download) - annotate - [select for diffs], Thu Apr 12 19:15:24 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.22: +2 -1 lines
Diff to previous 1.22 (colored)

implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
similar to RhostRSAAuthentication unless you enable (the experimental)
HostbasedUsesNameFromPacketOnly option.  please test. :)

Revision 1.22 / (download) - annotate - [select for diffs], Thu Apr 5 11:09:17 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.21: +2 -1 lines
Diff to previous 1.21 (colored)

add SSH_BUG_NOREKEY and detect broken (=all old) openssh versions.

Revision 1.21 / (download) - annotate - [select for diffs], Tue Mar 27 17:46:49 2001 UTC (23 years, 1 month ago) by provos
Branch: MAIN
Changes since 1.20: +2 -1 lines
Diff to previous 1.20 (colored)

make dh group exchange more flexible, allow min and max group size,
okay markus@, deraadt@

Revision 1.20 / (download) - annotate - [select for diffs], Tue Mar 27 10:57:00 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.19: +2 -1 lines
Diff to previous 1.19 (colored)

some older systems use NID_md5 instead of NID_sha1 for RSASSA-PKCS1-v1_5
signatures in SSH protocol 2, ok djm@

Revision 1.19 / (download) - annotate - [select for diffs], Fri Mar 23 11:04:06 2001 UTC (23 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.18: +3 -1 lines
Diff to previous 1.18 (colored)

Compat for OpenSSH with broken Rijndael/AES. ok markus@

Revision 1.11.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:24 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.11.2.2: +4 -1 lines
Diff to previous 1.11.2.2 (colored) to branchpoint 1.11 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.7.2.4 / (download) - annotate - [select for diffs], Wed Mar 21 18:52:42 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.7.2.3: +4 -1 lines
Diff to previous 1.7.2.3 (colored) to branchpoint 1.7 (colored) next main 1.8 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.18 / (download) - annotate - [select for diffs], Sun Mar 18 23:30:55 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.17: +2 -1 lines
Diff to previous 1.17 (colored)

specifically version match on ssh scanners.  do not log scan information
to the console, because clueless users freak out when people do completely
legal probes.  instead, generate a detailed log file entry and use british
humour to relax their sphincters a little bit.

Revision 1.7.2.3 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:09 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.7.2.2: +10 -6 lines
Diff to previous 1.7.2.2 (colored) to branchpoint 1.7 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.17 / (download) - annotate - [select for diffs], Sat Mar 10 15:31:00 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.16: +2 -1 lines
Diff to previous 1.16 (colored)

all known netscreen ssh versions, and older versions of OSU ssh cannot
handle password padding (newer OSU is fixed)

Revision 1.16 / (download) - annotate - [select for diffs], Thu Mar 8 21:42:32 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.15: +2 -1 lines
Diff to previous 1.15 (colored)

implement client side of SSH2_MSG_USERAUTH_PK_OK (test public key ->
no need to do enter passphrase or do expensive sign operations if the
server does not accept key).

Revision 1.11.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:18:50 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.11.2.1: +10 -9 lines
Diff to previous 1.11.2.1 (colored) to branchpoint 1.11 (colored)

Pull in OpenSSH-2.5.1

Revision 1.15 / (download) - annotate - [select for diffs], Mon Feb 19 09:53:31 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.14: +10 -9 lines
Diff to previous 1.14 (colored)

ssh-1.2.{18-22} has broken handling of ignore messages; report from itojun@

Revision 1.11.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:12:59 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.11: +5 -2 lines
Diff to previous 1.11 (colored)

Pull in OpenSSH 2.5.0

Revision 1.14 / (download) - annotate - [select for diffs], Mon Jan 8 22:29:05 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.13: +2 -1 lines
Diff to previous 1.13 (colored)

implement option 'Banner /etc/issue.net' for ssh2, move version to
2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
is enabled).

Revision 1.13 / (download) - annotate - [select for diffs], Wed Dec 6 22:58:15 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.12: +2 -1 lines
Diff to previous 1.12 (colored)

disable debug messages for ssh.com/f-secure 2.0.1x, 2.1.0

Revision 1.12 / (download) - annotate - [select for diffs], Sun Dec 3 11:15:03 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.11: +3 -2 lines
Diff to previous 1.11 (colored)

support f-secure/ssh.com 2.0.12; ok niels@

Revision 1.7.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 21:30:39 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.7.2.1: +2 -7 lines
Diff to previous 1.7.2.1 (colored) to branchpoint 1.7 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.11 / (download) - annotate - [select for diffs], Sat Oct 14 12:16:56 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (colored)

OpenSSH_2.3; note that is is not complete, but the version number needs to be changed for interoperability reasons

Revision 1.10 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:50 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.9: +1 -6 lines
Diff to previous 1.9 (colored)

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.7.2.1 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:19 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.7: +2 -1 lines
Diff to previous 1.7 (colored)

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.9 / (download) - annotate - [select for diffs], Tue Jun 20 01:39:40 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.8: +1 -1 lines
Diff to previous 1.8 (colored)

OpenBSD tag

Revision 1.8 / (download) - annotate - [select for diffs], Mon Jun 19 00:50:11 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.7: +2 -1 lines
Diff to previous 1.7 (colored)

make userauth+pubkey interop with ssh.com-2.2.0

Revision 1.7 / (download) - annotate - [select for diffs], Mon May 8 17:42:24 2000 UTC (24 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.6: +6 -1 lines
Diff to previous 1.6 (colored)

bug compat w/ ssh-2.0.13 x11, split out bugs

Revision 1.6 / (download) - annotate - [select for diffs], Wed Apr 12 07:45:44 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.5: +8 -1 lines
Diff to previous 1.5 (colored)

add Cipher and Protocol options to ssh/sshd, e.g.:
ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers arcfour,3des-cbc'

Revision 1.5 / (download) - annotate - [select for diffs], Mon Apr 3 07:07:15 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.4: +5 -1 lines
Diff to previous 1.4 (colored)

channel layer support for ssh2

Revision 1.4 / (download) - annotate - [select for diffs], Wed Nov 24 16:15:24 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.3: +29 -1 lines
Diff to previous 1.3 (colored)

missing copyright

Revision 1.3 / (download) - annotate - [select for diffs], Wed Nov 24 00:26:01 1999 UTC (24 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (colored)

much more KNF

Revision 1.2 / (download) - annotate - [select for diffs], Sat Oct 16 22:29:01 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.1: +2 -0 lines
Diff to previous 1.1 (colored)

add CVS tags, fix comments and whitespace

Revision 1.1 / (download) - annotate - [select for diffs], Sat Oct 16 20:47:13 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN

support for SSH protocol 1.5 which is poorly documented, the RFC.troff lies.
interops (x11,agent,etc) with 1.2.27 and protocol 1.3

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

Diffs between
and

Preferred Diff type:
View only Branch:
Sort log by: