OpenBSD CVS

CVS log for src/usr.bin/ssh/match.h


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.20 / (download) - annotate - [select for diffs], Sun Jul 5 23:59:45 2020 UTC (3 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, HEAD
Changes since 1.19: +3 -3 lines
Diff to previous 1.19 (colored)

some language improvements; ok markus

Revision 1.19 / (download) - annotate - [select for diffs], Wed Mar 6 22:14:23 2019 UTC (5 years, 2 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.18: +2 -1 lines
Diff to previous 1.18 (colored)

Move checks for lists of users or groups into their own function.
This is a no-op on OpenBSD but will make things easier in -portable,
eg on systems where these checks should be case-insensitive.  ok djm@

Revision 1.18 / (download) - annotate - [select for diffs], Wed Jul 4 13:49:31 2018 UTC (5 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.17: +3 -2 lines
Diff to previous 1.17 (colored)

repair PubkeyAcceptedKeyTypes (and friends) after RSA signature work -
returns ability to add/remove/specify algorithms by wildcard.

Algorithm lists are now fully expanded when the server/client configs
are finalised, so errors are reported early and the config dumps
(e.g. "ssh -G ...") now list the actual algorithms selected.

Clarify that, while wildcards are accepted in algorithm lists, they
aren't full pattern-lists that support negation.

(lots of) feedback, ok markus@

Revision 1.17 / (download) - annotate - [select for diffs], Fri Feb 3 23:01:19 2017 UTC (7 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3, OPENBSD_6_2_BASE, OPENBSD_6_2, OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.16: +2 -1 lines
Diff to previous 1.16 (colored)

support =- for removing methods from algorithms lists, e.g.
Ciphers=-*cbc; suggested by Cristian Ionescu-Idbohrn in bz#2671
"I like it" markus@

Revision 1.16 / (download) - annotate - [select for diffs], Mon May 4 06:10:48 2015 UTC (9 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.15: +3 -3 lines
Diff to previous 1.15 (colored)

Remove pattern length argument from match_pattern_list(),
we only ever use it for strlen(pattern).

Prompted by hanno AT hboeck.de pointing an out-of-bound read
error caused by an incorrect pattern length found using AFL
and his own tools.

ok markus@

Revision 1.15 / (download) - annotate - [select for diffs], Fri Feb 26 20:29:54 2010 UTC (14 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7, OPENBSD_5_6_BASE, OPENBSD_5_6, OPENBSD_5_5_BASE, OPENBSD_5_5, OPENBSD_5_4_BASE, OPENBSD_5_4, OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9, OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.14: +2 -2 lines
Diff to previous 1.14 (colored)

Add support for certificate key types for users and hosts.

OpenSSH certificate key types are not X.509 certificates, but a much
simpler format that encodes a public key, identity information and
some validity constraints and signs it with a CA key. CA keys are
regular SSH keys. This certificate style avoids the attack surface
of X.509 certificates and is very easy to deploy.

Certified host keys allow automatic acceptance of new host keys
when a CA certificate is marked as trusted in ~/.ssh/known_hosts.
see VERIFYING HOST KEYS in ssh(1) for details.

Certified user keys allow authentication of users when the signing
CA key is marked as trusted in authorized_keys. See "AUTHORIZED_KEYS
FILE FORMAT" in sshd(8) for details.

Certificates are minted using ssh-keygen(1), documentation is in
the "CERTIFICATES" section of that manpage.

Documentation on the format of certificates is in the file
PROTOCOL.certkeys

feedback and ok markus@

Revision 1.14 / (download) - annotate - [select for diffs], Tue Jun 10 03:57:27 2008 UTC (15 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.13: +4 -1 lines
Diff to previous 1.13 (colored)

support CIDR address matching in sshd_config "Match address" blocks, with
full support for negation and fall-back to classic wildcard matching.
For example:

Match address 192.0.2.0/24,3ffe:ffff::/32,!10.*
    PasswordAuthentication yes

addrmatch.c code mostly lifted from flowd's addr.c

feedback and ok dtucker@

Revision 1.12.16.1 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:32 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.12: +1 -1 lines
Diff to previous 1.12 (colored) next main 1.13 (colored)

upgrade to OpenSSH 4.4

Revision 1.12.18.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:50 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.12: +1 -1 lines
Diff to previous 1.12 (colored) next main 1.13 (colored)

upgrade to OpenSSH 4.4

Revision 1.13 / (download) - annotate - [select for diffs], Sat Mar 25 22:22:43 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3, OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.12: +1 -1 lines
Diff to previous 1.12 (colored)

standardise spacing in $OpenBSD$ tags; requested by deraadt@

Revision 1.7.2.2 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:44 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.7.2.1: +4 -3 lines
Diff to previous 1.7.2.1 (colored) to branchpoint 1.7 (colored) next main 1.8 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.4.2.6 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:42 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.4.2.5: +4 -3 lines
Diff to previous 1.4.2.5 (colored) to branchpoint 1.4 (colored) next main 1.5 (colored)

Merge OpenSSH 3.1.

Revision 1.9.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:46 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.9: +4 -3 lines
Diff to previous 1.9 (colored) next main 1.10 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.12 / (download) - annotate - [select for diffs], Fri Mar 1 13:12:10 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_8_BASE, OPENBSD_3_7_BASE, OPENBSD_3_7, OPENBSD_3_6_BASE, OPENBSD_3_6, OPENBSD_3_5_BASE, OPENBSD_3_5, OPENBSD_3_4_BASE, OPENBSD_3_4, OPENBSD_3_3_BASE, OPENBSD_3_3, OPENBSD_3_2_BASE, OPENBSD_3_2, OPENBSD_3_1_BASE, OPENBSD_3_1
Branch point for: OPENBSD_3_9, OPENBSD_3_8
Changes since 1.11: +1 -1 lines
Diff to previous 1.11 (colored)

undo the 'delay hostname lookup' change
match.c must not use compress.c (via canonhost.c/packet.c)
thanks to wilfried@

Revision 1.11 / (download) - annotate - [select for diffs], Thu Feb 28 19:36:28 2002 UTC (22 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (colored)

delay hostname lookup until we see a ``@'' in DenyUsers and AllowUsers
for sshd -u0; ok markus@

Revision 1.10 / (download) - annotate - [select for diffs], Wed Dec 5 16:54:51 2001 UTC (22 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.9: +4 -3 lines
Diff to previous 1.9 (colored)

make theo and djm happy: bye bye regexp

Revision 1.7.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:54 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.7: +6 -22 lines
Diff to previous 1.7 (colored)

Pull in OpenSSH-2.9.9

Revision 1.4.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:42 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.4.2.4: +6 -22 lines
Diff to previous 1.4.2.4 (colored) to branchpoint 1.4 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.9 / (download) - annotate - [select for diffs], Tue Jun 26 06:32:56 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.8: +6 -6 lines
Diff to previous 1.8 (colored)

prototype pedant.  not very creative...
- () -> (void)
- no variable names

Revision 1.8 / (download) - annotate - [select for diffs], Sun Jun 24 05:25:10 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.7: +5 -21 lines
Diff to previous 1.7 (colored)

move ip+hostname check to match.c

Revision 1.4.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:31 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.4.2.3: +0 -0 lines
Diff to previous 1.4.2.3 (colored) to branchpoint 1.4 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.4.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:26 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.4.2.2: +7 -1 lines
Diff to previous 1.4.2.2 (colored) to branchpoint 1.4 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.1.2.4 / (download) - annotate - [select for diffs], Wed Mar 21 18:52:52 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.1.2.3: +7 -1 lines
Diff to previous 1.1.2.3 (colored) to branchpoint 1.1 (colored) next main 1.2 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.1.2.3 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:12 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.1.2.2: +3 -1 lines
Diff to previous 1.1.2.2 (colored) to branchpoint 1.1 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.7 / (download) - annotate - [select for diffs], Sat Mar 10 17:51:04 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.6: +7 -1 lines
Diff to previous 1.6 (colored)

add PreferredAuthentications

Revision 1.4.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:06 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.4.2.1: +0 -0 lines
Diff to previous 1.4.2.1 (colored) to branchpoint 1.4 (colored)

Pull in OpenSSH-2.5.1

Revision 1.4.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:06 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.4: +3 -1 lines
Diff to previous 1.4 (colored)

Pull in OpenSSH 2.5.0

Revision 1.6 / (download) - annotate - [select for diffs], Mon Jan 29 01:58:17 2001 UTC (23 years, 3 months ago) by niklas
Branch: MAIN
Changes since 1.5: +2 -0 lines
Diff to previous 1.5 (colored)

$OpenBSD$

Revision 1.5 / (download) - annotate - [select for diffs], Tue Dec 19 23:17:57 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.4: +1 -1 lines
Diff to previous 1.4 (colored)

replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'
with u_char.

Revision 1.1.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 21:30:57 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.1.2.1: +13 -0 lines
Diff to previous 1.1.2.1 (colored) to branchpoint 1.1 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.4 / (download) - annotate - [select for diffs], Thu Sep 7 21:13:37 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.3: +10 -20 lines
Diff to previous 1.3 (colored)

some more Copyright fixes

Revision 1.3 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:52 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +23 -0 lines
Diff to previous 1.2 (colored)

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.1.2.1 / (download) - annotate - [select for diffs], Mon Jun 12 02:37:34 2000 UTC (23 years, 11 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.1: +2 -2 lines
Diff to previous 1.1 (colored)

lovin' CVS... update patch branch to OpenSSH-2.1.1

Revision 1.2 / (download) - annotate - [select for diffs], Tue Jun 6 19:32:14 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.1: +2 -2 lines
Diff to previous 1.1 (colored)

fix match_hostname() logic for auth-rsa: deny access if we have a negative match or no match at all

Revision 1.1 / (download) - annotate - [select for diffs], Thu Mar 23 22:15:33 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7

initial support for DSA keys. ok deraadt@, niels@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.