OpenBSD CVS

CVS log for src/usr.bin/ssh/misc.h


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.108 / (download) - annotate - [select for diffs], Fri May 17 00:30:24 2024 UTC (3 hours, 34 minutes ago) by djm
Branch: MAIN
CVS Tags: HEAD
Changes since 1.107: +9 -1 lines
Diff to previous 1.107 (colored)

Start the process of splitting sshd into separate binaries. This step
splits sshd into a listener and a session binary. More splits are
planned.

After this changes, the listener binary will validate the configuration,
load the hostkeys, listen on port 22 and manage MaxStartups only. All
session handling will be performed by a new sshd-session binary that the
listener fork+execs.

This reduces the listener process to the minimum necessary and sets us
up for future work on the sshd-session binary.

feedback/ok markus@ deraadt@

NB. if you're updating via source, please restart sshd after installing,
otherwise you run the risk of locking yourself out.

Revision 1.107 / (download) - annotate - [select for diffs], Mon Mar 4 02:16:11 2024 UTC (2 months, 1 week ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5
Changes since 1.106: +2 -1 lines
Diff to previous 1.106 (colored)

Separate parsing of string array options from applying them to the
active configuration. This fixes the config parser from erroneously
rejecting cases like:

AuthenticationMethods password
Match User ivy
  AuthenticationMethods any

bz3657 ok markus@

Revision 1.106 / (download) - annotate - [select for diffs], Wed Oct 11 22:42:26 2023 UTC (7 months ago) by djm
Branch: MAIN
Changes since 1.105: +2 -1 lines
Diff to previous 1.105 (colored)

add ChannelTimeout support to the client, mirroring the same option
in the server. ok markus@

Revision 1.105 / (download) - annotate - [select for diffs], Mon Aug 28 03:31:16 2023 UTC (8 months, 2 weeks ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_4_BASE, OPENBSD_7_4
Changes since 1.104: +2 -1 lines
Diff to previous 1.104 (colored)

Add keystroke timing obfuscation to the client.

This attempts to hide inter-keystroke timings by sending interactive
traffic at fixed intervals (default: every 20ms) when there is only a
small amount of data being sent. It also sends fake "chaff" keystrokes
for a random interval after the last real keystroke. These are
controlled by a new ssh_config ObscureKeystrokeTiming keyword/

feedback/ok markus@

Revision 1.104 / (download) - annotate - [select for diffs], Fri Aug 18 01:37:41 2023 UTC (8 months, 4 weeks ago) by djm
Branch: MAIN
Changes since 1.103: +3 -2 lines
Diff to previous 1.103 (colored)

fix regression in OpenSSH 9.4 (mux.c r1.99) that caused multiplexed
sessions to ignore SIGINT under some circumstances. Reported by /
feedback naddy@, ok dtucker@

Revision 1.103 / (download) - annotate - [select for diffs], Wed Jul 19 14:02:27 2023 UTC (9 months, 4 weeks ago) by djm
Branch: MAIN
Changes since 1.102: +2 -1 lines
Diff to previous 1.102 (colored)

Ensure FIDO/PKCS11 libraries contain expected symbols

This checks via nlist(3) that candidate provider libraries contain one
of the symbols that we will require prior to dlopen(), which can cause
a number of side effects, including execution of constructors.

Feedback deraadt; ok markus

Revision 1.102 / (download) - annotate - [select for diffs], Fri Mar 3 02:37:58 2023 UTC (14 months, 2 weeks ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE, OPENBSD_7_3
Changes since 1.101: +4 -1 lines
Diff to previous 1.101 (colored)

Use time_t for x11_refuse_time timeout.  We need SSH_TIME_T_MAX for
this, so move from misc.c to misc.h so it's available.  Fixes a Coverity
warning for 64bit time_t safety, ok djm@

Revision 1.101 / (download) - annotate - [select for diffs], Fri Jan 6 02:37:04 2023 UTC (16 months, 1 week ago) by djm
Branch: MAIN
Changes since 1.100: +10 -1 lines
Diff to previous 1.100 (colored)

add ptimeout API for keeping track of poll/ppoll timeouts;
ok dtucker markus

Revision 1.100 / (download) - annotate - [select for diffs], Fri Jun 3 04:30:47 2022 UTC (23 months, 2 weeks ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2
Changes since 1.99: +3 -1 lines
Diff to previous 1.99 (colored)

Make SetEnv directives first-match-wins in both sshd_config and
sshd_config; previously if the same name was reused then the last
would win (which is the opposite to how the config is supposed to
work).

While there, make the ssh_config parsing more like sshd_config.

bz3438, ok dtucker

Revision 1.99 / (download) - annotate - [select for diffs], Sat Nov 13 21:14:13 2021 UTC (2 years, 6 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE, OPENBSD_7_1
Changes since 1.98: +2 -2 lines
Diff to previous 1.98 (colored)

replace select() with ppoll(), including converting timeval's to timespec's
to make things easier.
back and forth and ok; djm

Revision 1.98 / (download) - annotate - [select for diffs], Mon Aug 9 23:47:44 2021 UTC (2 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0
Changes since 1.97: +2 -1 lines
Diff to previous 1.97 (colored)

SFTP protocol extension to allow the server to expand ~-prefixed
paths, in particular ~user ones. Allows scp in sftp mode to accept
these paths, like scp in rcp mode does.

prompted by and much discussion deraadt@
ok markus@

Revision 1.97 / (download) - annotate - [select for diffs], Tue Jun 8 06:54:40 2021 UTC (2 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.96: +7 -2 lines
Diff to previous 1.96 (colored)

Allow argv_split() to optionally terminate tokenisation when it
encounters an unquoted comment.

Add some additional utility function for working with argument
vectors, since we'll be switching to using them to parse
ssh/sshd_config shortly.

ok markus@ as part of a larger diff; tested in snaps

Revision 1.96 / (download) - annotate - [select for diffs], Fri Jun 4 05:02:40 2021 UTC (2 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.95: +3 -1 lines
Diff to previous 1.95 (colored)

allow ssh_config SetEnv to override $TERM, which is otherwise handled
specially by the protocol. Useful in ~/.ssh/config to set TERM to
something generic (e.g. "xterm" instead of "xterm-256color") for
destinations that lack terminfo entries. feedback and ok dtucker@

Revision 1.95 / (download) - annotate - [select for diffs], Sat Apr 3 06:18:40 2021 UTC (3 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.94: +6 -6 lines
Diff to previous 1.94 (colored)

highly polished whitespace, mostly fixing spaces-for-tab and bad
indentation on continuation lines. Prompted by GHPR#185

Revision 1.94 / (download) - annotate - [select for diffs], Wed Mar 3 08:42:52 2021 UTC (3 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.93: +2 -1 lines
Diff to previous 1.93 (colored)

needs FILE*; from Mike Frysinger

Revision 1.93 / (download) - annotate - [select for diffs], Mon Feb 15 20:36:35 2021 UTC (3 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.92: +9 -1 lines
Diff to previous 1.92 (colored)

factor out opt_array_append; ok djm@

Revision 1.92 / (download) - annotate - [select for diffs], Mon Jan 11 02:12:57 2021 UTC (3 years, 4 months ago) by dtucker
Branch: MAIN
Changes since 1.91: +2 -2 lines
Diff to previous 1.91 (colored)

Change convtime() from returning long to returning int.  On platforms
where sizeof(int) != sizeof(long), convtime could accept values
>MAX_INT which subsequently truncate when stored in an int during
config parsing.  bz#3250, ok djm@

Revision 1.91 / (download) - annotate - [select for diffs], Tue Dec 22 00:12:22 2020 UTC (3 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.90: +11 -1 lines
Diff to previous 1.90 (colored)

move subprocess() from auth.c to misc.c

make privilege dropping optional but allow it via callbacks (to avoid
need to link uidswap.c everywhere)

add some other flags (keep environment, disable strict path safety check)
that make this more useful for client-side use.

feedback & ok markus@

Revision 1.90 / (download) - annotate - [select for diffs], Fri Nov 27 00:49:58 2020 UTC (3 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.89: +3 -1 lines
Diff to previous 1.89 (colored)

Set the specified TOS/DSCP for interactive use prior to TCP connect.
The connection phase of the SSH session is time-sensitive (due to
server side login grace periods) and is frequently interactive (e.g.
entering passwords). The ultimate interactive/bulk TOS/DSCP will be
set after authentication completes.

ok dtucker@

Revision 1.89 / (download) - annotate - [select for diffs], Sun Nov 8 22:37:24 2020 UTC (3 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.88: +3 -2 lines
Diff to previous 1.88 (colored)

when requesting a security key touch on stderr, inform the user once
the touch has been recorded; requested by claudio@ ok markus@

Revision 1.88 / (download) - annotate - [select for diffs], Sat Oct 3 09:22:26 2020 UTC (3 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.87: +2 -1 lines
Diff to previous 1.87 (colored)

There are lots of place where we want to redirect stdin, stdout
and/or stderr to /dev/null. Factor all these out to a single
stdfd_devnull() function that allows selection of which of these
to redirect. ok markus@

Revision 1.87 / (download) - annotate - [select for diffs], Fri May 29 11:17:56 2020 UTC (3 years, 11 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.86: +2 -2 lines
Diff to previous 1.86 (colored)

Make dollar_expand variadic and pass a real va_list to vdollar_percent_expand.
Fixes build error on arm64 spotted by otto@.

Revision 1.86 / (download) - annotate - [select for diffs], Fri May 29 04:25:40 2020 UTC (3 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.85: +4 -1 lines
Diff to previous 1.85 (colored)

Allow some keywords to expand shell-style ${ENV} environment
variables on the client side.  The supported keywords are
CertificateFile, ControlPath, IdentityAgent and IdentityFile, plus
LocalForward and RemoteForward when used for Unix domain socket
paths.  This would for example allow forwarding of Unix domain
socket paths that change at runtime.  bz#3140, ok djm@

Revision 1.85 / (download) - annotate - [select for diffs], Tue May 26 01:06:52 2020 UTC (3 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.84: +2 -1 lines
Diff to previous 1.84 (colored)

add fmt_timeframe() (from bgpd) to format a time interval in a human-
friendly format. Switch copyright for this file from BSD to MIT to
make it easier to add Henning's copyright for this function.
ok markus@

Revision 1.84 / (download) - annotate - [select for diffs], Fri Jan 24 23:54:40 2020 UTC (4 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.83: +3 -1 lines
Diff to previous 1.83 (colored)

add xextendf() to extend a string with a format (reallocating as
necessary). ok aja@ as part of a larger diff

Revision 1.83 / (download) - annotate - [select for diffs], Thu Jan 23 07:10:22 2020 UTC (4 years, 3 months ago) by dtucker
Branch: MAIN
Changes since 1.82: +3 -1 lines
Diff to previous 1.82 (colored)

Replace all calls to signal(2) with a wrapper around sigaction(2).
This wrapper blocks all other signals during the handler preventing
races between handlers, and sets SA_RESTART which should reduce the
potential for short read/write operations.

Revision 1.82 / (download) - annotate - [select for diffs], Tue Nov 12 22:34:20 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.81: +6 -1 lines
Diff to previous 1.81 (colored)

dd API for performing one-shot notifications via tty or SSH_ASKPASS

Revision 1.81 / (download) - annotate - [select for diffs], Tue Sep 3 08:32:11 2019 UTC (4 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.80: +6 -1 lines
Diff to previous 1.80 (colored)

move authorized_keys option parsing helpsers to misc.c and make
them public; ok markus@

Revision 1.80 / (download) - annotate - [select for diffs], Tue Sep 3 08:29:58 2019 UTC (4 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.79: +2 -1 lines
Diff to previous 1.79 (colored)

move skip_space() to misc.c and make it public; ok markus@

Revision 1.79 / (download) - annotate - [select for diffs], Wed Jan 23 21:50:56 2019 UTC (5 years, 3 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.78: +2 -1 lines
Diff to previous 1.78 (colored)

Remove support for obsolete host/port syntax.

host/port was added in 2001 as an alternative to host:port syntax for
the benefit of IPv6 users.  These days there are establised standards
for this like [::1]:22 and the slash syntax is easily mistaken for CIDR
notation, which OpenSSH now supports for some things.  Remove the slash
notation from ListenAddress and PermitOpen.  bz#2335, patch from jjelen
at redhat.com, ok markus@

Revision 1.78 / (download) - annotate - [select for diffs], Thu Dec 27 03:25:25 2018 UTC (5 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.77: +4 -1 lines
Diff to previous 1.77 (colored)

move client/server SSH-* banners to buffers under ssh->kex and factor
out the banner exchange. This eliminates some common code from the
client and server.

Also be more strict about handling \r characters - these should only
be accepted immediately before \n (pointed out by Jann Horn).

Inspired by a patch from Markus Schmidt.
(lots of) feedback and ok markus@

Revision 1.77 / (download) - annotate - [select for diffs], Fri Dec 7 04:36:09 2018 UTC (5 years, 5 months ago) by dtucker
Branch: MAIN
Changes since 1.76: +4 -2 lines
Diff to previous 1.76 (colored)

Fix calculation of initial bandwidth limits.
Account for written bytes before the initial timer check so that the first
buffer written is accounted.  Set the threshold after which the timer is
checked such that the limit starts being computed as soon as possible, ie
after the second buffer is written.  This prevents an initial burst of
traffic and provides a more accurate bandwidth limit.  bz#2927, ok djm.

Revision 1.76 / (download) - annotate - [select for diffs], Fri Nov 16 03:26:01 2018 UTC (5 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.75: +2 -1 lines
Diff to previous 1.75 (colored)

use path_absolute() for pathname checks; from Manoj Ampalam

Revision 1.75 / (download) - annotate - [select for diffs], Wed Oct 3 06:38:35 2018 UTC (5 years, 7 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.74: +2 -1 lines
Diff to previous 1.74 (colored)

Allow ssh_config IdentityAgent directive to accept environment variable
names as well as explicit paths. ok dtucker@

Revision 1.74 / (download) - annotate - [select for diffs], Fri Jul 27 05:13:02 2018 UTC (5 years, 9 months ago) by dtucker
Branch: MAIN
Changes since 1.73: +1 -2 lines
Diff to previous 1.73 (colored)

Remove uid checks from low port binds.  Now that ssh cannot be
setuid and sshd always has privsep on, we can remove the uid checks
for low port binds and just let the system do the check. We leave
a sanity check for the !privsep case so long as the code is stil
there.  with & ok djm@

Revision 1.73 / (download) - annotate - [select for diffs], Sat Jun 9 03:01:12 2018 UTC (5 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.72: +2 -1 lines
Diff to previous 1.72 (colored)

add a SetEnv directive to ssh_config that allows setting environment
variables for the remote session (subject to the server accepting them)

refactor SendEnv to remove the arbitrary limit of variable names.

ok markus@

Revision 1.72 / (download) - annotate - [select for diffs], Wed Jun 6 18:29:18 2018 UTC (5 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.71: +1 -2 lines
Diff to previous 1.71 (colored)

switch config file parsing to getline(3) as this avoids static limits
noted by gerhard@; ok dtucker@, djm@

Revision 1.71 / (download) - annotate - [select for diffs], Mon Mar 12 00:52:01 2018 UTC (6 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.70: +3 -1 lines
Diff to previous 1.70 (colored)

add valid-before="[time]" authorized_keys option. A simple way of
giving a key an expiry date. ok markus@

Revision 1.70 / (download) - annotate - [select for diffs], Mon Jan 8 15:21:49 2018 UTC (6 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.69: +1 -7 lines
Diff to previous 1.69 (colored)

move subprocess() so scp/sftp do not need uidswap.o; ok djm@

Revision 1.69 / (download) - annotate - [select for diffs], Tue Dec 5 23:59:47 2017 UTC (6 years, 5 months ago) by dtucker
Branch: MAIN
Changes since 1.68: +2 -1 lines
Diff to previous 1.68 (colored)

Replace atoi and strtol conversions for integer arguments to config
keywords with a checking wrapper around strtonum.  This will prevent
and flag invalid and negative arguments to these keywords.  ok djm@

Revision 1.68 / (download) - annotate - [select for diffs], Sat Nov 25 06:46:22 2017 UTC (6 years, 5 months ago) by dtucker
Branch: MAIN
Changes since 1.67: +3 -1 lines
Diff to previous 1.67 (colored)

Add monotime_ts and monotime_tv that return monotonic timespec and
timeval respectively.  Replace calls to gettimeofday() in packet timing
with monotime_tv so that the callers will work over a clock step.
Should prevent integer overflow during clock steps reported by wangle6
at huawei.com. "I like" markus@

Revision 1.67 / (download) - annotate - [select for diffs], Wed Oct 25 00:17:08 2017 UTC (6 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.66: +2 -1 lines
Diff to previous 1.66 (colored)

add sshd_config RDomain keyword to place sshd and the subsequent
user session (including the shell and any TCP/IP forwardings) into
the specified rdomain(4)

ok markus@

Revision 1.66 / (download) - annotate - [select for diffs], Wed Oct 25 00:15:35 2017 UTC (6 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.65: +3 -1 lines
Diff to previous 1.65 (colored)

Add optional rdomain qualifier to sshd_config's ListenAddress option
to allow listening on a different rdomain(4), e.g.

ListenAddress 0.0.0.0 rdomain 4

Revision 1.65 / (download) - annotate - [select for diffs], Mon Oct 23 05:08:00 2017 UTC (6 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.64: +2 -2 lines
Diff to previous 1.64 (colored)

Expose devices allocated for tun/tap forwarding.

At the client, the device may be obtained from a new %T expansion
for LocalCommand.

At the server, the allocated devices will be listed in a
SSH_TUNNEL variable exposed to the environment of any user sessions
started after the tunnel forwarding was established.

ok markus

Revision 1.64 / (download) - annotate - [select for diffs], Sat Oct 21 23:06:24 2017 UTC (6 years, 6 months ago) by millert
Branch: MAIN
Changes since 1.63: +4 -1 lines
Diff to previous 1.63 (colored)

Add URI support to ssh, sftp and scp.  For example ssh://user@host
or sftp://user@host/path.  The connection parameters described in
draft-ietf-secsh-scp-sftp-ssh-uri-04 are not implemented since the
ssh fingerprint format in the draft uses md5 with no way to specify
the hash function type.  OK djm@

Revision 1.63 / (download) - annotate - [select for diffs], Fri Aug 18 05:48:04 2017 UTC (6 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.62: +2 -2 lines
Diff to previous 1.62 (colored)

add a "quiet" flag to exited_cleanly() that supresses errors about
exit status (failure due to signal is still reported)

Revision 1.62 / (download) - annotate - [select for diffs], Fri Aug 18 05:36:45 2017 UTC (6 years, 9 months ago) by djm
Branch: MAIN
Changes since 1.61: +21 -1 lines
Diff to previous 1.61 (colored)

Move several subprocess-related functions from various locations to
misc.c. Extend subprocess() to offer a little more control over stdio
disposition.

feedback & ok dtucker@

Revision 1.61 / (download) - annotate - [select for diffs], Wed Nov 30 00:28:31 2016 UTC (7 years, 5 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.60: +2 -1 lines
Diff to previous 1.60 (colored)

On startup, check to see if sshd is already daemonized and if so,
skip the call to daemon() and do not rewrite the PidFile.  This
means that when sshd re-execs itself on SIGHUP the process ID will
no longer change.  Should address bz#2641.  ok djm@ markus@.

Revision 1.60 / (download) - annotate - [select for diffs], Sun Oct 23 22:04:05 2016 UTC (7 years, 6 months ago) by dtucker
Branch: MAIN
Changes since 1.59: +2 -1 lines
Diff to previous 1.59 (colored)

Factor out "can bind to low ports" check into its own function.  This will make
it easier for Portable to support platforms with permissions models other than
uid==0 (eg bz#2625).  ok djm@, "doesn't offend me too much" deraadt@.

Revision 1.59 / (download) - annotate - [select for diffs], Mon Sep 12 01:22:38 2016 UTC (7 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.58: +5 -1 lines
Diff to previous 1.58 (colored)

Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitions
rather than pulling <sys/param.h> and unknown namespace pollution.
ok djm markus dtucker

Revision 1.58 / (download) - annotate - [select for diffs], Sat Aug 27 04:05:12 2016 UTC (7 years, 8 months ago) by guenther
Branch: MAIN
Changes since 1.57: +3 -1 lines
Diff to previous 1.57 (colored)

Pull in <sys/time.h> for struct timeval

ok deraadt@

Revision 1.57 / (download) - annotate - [select for diffs], Fri Jul 15 00:24:30 2016 UTC (7 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.56: +2 -1 lines
Diff to previous 1.56 (colored)

Add a ProxyJump ssh_config(5) option and corresponding -J ssh(1)
command-line flag to allow simplified indirection through a
SSH bastion or "jump host".

These options construct a proxy command that connects to the
specified jump host(s) (more than one may be specified) and uses
port-forwarding to establish a connection to the next destination.

This codifies the safest way of indirecting connections through SSH
servers and makes it easy to use.

ok markus@

Revision 1.56 / (download) - annotate - [select for diffs], Wed Apr 6 06:42:17 2016 UTC (8 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.55: +3 -1 lines
Diff to previous 1.55 (colored)

don't record duplicate LocalForward and RemoteForward entries;
fixes failure with ExitOnForwardFailure+hostname canonicalisation
where the same forwards are added on the second pass through
the configuration file. bz#2562; ok dtucker@

Revision 1.55 / (download) - annotate - [select for diffs], Wed Mar 2 22:42:40 2016 UTC (8 years, 2 months ago) by dtucker
Branch: MAIN
Changes since 1.54: +2 -1 lines
Diff to previous 1.54 (colored)

Improve precision of progressmeter for sftp and scp by storing sub-second
timestamps.  Pointed out by mmcc@, ok deraadt@ markus@

Revision 1.54 / (download) - annotate - [select for diffs], Tue Jul 15 15:54:14 2014 UTC (9 years, 10 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8, OPENBSD_5_7_BASE, OPENBSD_5_7, OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.53: +24 -1 lines
Diff to previous 1.53 (colored)

Add support for Unix domain socket forwarding.  A remote TCP port
may be forwarded to a local Unix domain socket and vice versa or
both ends may be a Unix domain socket.  This is a reimplementation
of the streamlocal patches by William Ahern from:
    http://www.25thandclement.com/~william/projects/streamlocal.html
OK djm@ markus@

Revision 1.53 / (download) - annotate - [select for diffs], Fri May 2 03:27:54 2014 UTC (10 years ago) by djm
Branch: MAIN
Changes since 1.52: +9 -9 lines
Diff to previous 1.52 (colored)

revert __bounded change; it causes way more problems for portable than
it solves; pointed out by dtucker@

Revision 1.52 / (download) - annotate - [select for diffs], Sun Apr 20 02:30:25 2014 UTC (10 years ago) by djm
Branch: MAIN
Changes since 1.51: +7 -1 lines
Diff to previous 1.51 (colored)

use get/put_u32 to load values rather than *((UINT32 *)p) that breaks on
strict-alignment architectures; reported by and ok stsp@

Revision 1.51 / (download) - annotate - [select for diffs], Wed Mar 26 04:55:35 2014 UTC (10 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.50: +7 -7 lines
Diff to previous 1.50 (colored)

use __bounded(...) attribute recently added to sys/cdefs.h instead of
longform __attribute__(__bounded(...));

for brevity and a warning free compilation with llvm/clan

Revision 1.50 / (download) - annotate - [select for diffs], Mon Oct 14 23:28:23 2013 UTC (10 years, 7 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.49: +2 -1 lines
Diff to previous 1.49 (colored)

refactor client config code a little:

add multistate option partsing to readconf.c, similar to servconf.c's
existing code.

move checking of options that accept "none" as an argument to readconf.c

add a lowercase() function and use it instead of explicit tolower() in
loops

part of a larger diff that was ok markus@

Revision 1.49 / (download) - annotate - [select for diffs], Sat Jun 1 13:15:52 2013 UTC (10 years, 11 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.48: +2 -1 lines
Diff to previous 1.48 (colored)

Use clock_gettime(CLOCK_MONOTONIC ...) for ssh timers so that things like
keepalives and rekeying will work properly over clock steps.  Suggested by
markus@, "looks good" djm@.

Revision 1.48 / (download) - annotate - [select for diffs], Tue Mar 29 18:54:17 2011 UTC (13 years, 1 month ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.47: +2 -1 lines
Diff to previous 1.47 (colored)

print ipqos friendly string for sshd -T; ok markus

# sshd -Tf sshd_config|grep ipqos
ipqos lowdelay throughput

Revision 1.47 / (download) - annotate - [select for diffs], Sun Nov 21 01:01:13 2010 UTC (13 years, 5 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.46: +2 -1 lines
Diff to previous 1.46 (colored)

honour $TMPDIR for client xauth and ssh-agent temporary directories;
feedback and ok markus@

Revision 1.46 / (download) - annotate - [select for diffs], Sat Nov 13 23:27:50 2010 UTC (13 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.45: +2 -1 lines
Diff to previous 1.45 (colored)

allow ssh and sshd to set arbitrary TOS/DSCP/QoS values instead of
hardcoding lowdelay/throughput.

bz#1733 patch from philipp AT redfish-solutions.com; ok markus@ deraadt@

Revision 1.45 / (download) - annotate - [select for diffs], Fri Sep 24 13:33:00 2010 UTC (13 years, 7 months ago) by matthew
Branch: MAIN
Changes since 1.44: +1 -2 lines
Diff to previous 1.44 (colored)

Add timingsafe_bcmp(3) to libc, mention that it's already in the
kernel in kern(9), and remove it from OpenSSH.

ok deraadt@, djm@

Revision 1.44 / (download) - annotate - [select for diffs], Wed Sep 22 22:58:51 2010 UTC (13 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.43: +10 -1 lines
Diff to previous 1.43 (colored)

add an option per-read/write callback to atomicio

factor out bandwidth limiting code from scp(1) into a generic bandwidth
limiter that can be attached using the atomicio callback mechanism

add a bandwidth limit option to sftp(1) using the above

"very nice" markus@

Revision 1.43 / (download) - annotate - [select for diffs], Tue Jul 13 23:13:16 2010 UTC (13 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.42: +2 -2 lines
Diff to previous 1.42 (colored)

s/timing_safe_cmp/timingsafe_bcmp/g

Revision 1.42 / (download) - annotate - [select for diffs], Tue Jul 13 11:52:06 2010 UTC (13 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.41: +2 -1 lines
Diff to previous 1.41 (colored)

implement a timing_safe_cmp() function to compare memory without leaking
timing information by short-circuiting like memcmp() and use it for
some of the more sensitive comparisons (though nothing high-value was
readily attackable anyway); "looks ok" markus@

Revision 1.41 / (download) - annotate - [select for diffs], Sat Jan 9 23:04:13 2010 UTC (14 years, 4 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.40: +1 -4 lines
Diff to previous 1.40 (colored)

Remove RoutingDomain from ssh since it's now not needed.  It can be replaced
with "route exec" or "nc -V" as a proxycommand.  "route exec" also ensures
that trafic such as DNS lookups stays withing the specified routingdomain.

For example (from reyk):
# route -T 2 exec /usr/sbin/sshd
or inherited from the parent process
$ route -T 2 exec sh
$ ssh 10.1.2.3

ok deraadt@ markus@ stevesk@ reyk@

Revision 1.40 / (download) - annotate - [select for diffs], Fri Dec 25 19:40:21 2009 UTC (14 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.39: +2 -1 lines
Diff to previous 1.39 (colored)

validate routing domain is in range 0-RT_TABLEID_MAX.
'Looks right' deraadt@

Revision 1.39 / (download) - annotate - [select for diffs], Wed Oct 28 16:38:18 2009 UTC (14 years, 6 months ago) by reyk
Branch: MAIN
Changes since 1.38: +3 -1 lines
Diff to previous 1.38 (colored)

Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan.

ok markus@

Revision 1.38 / (download) - annotate - [select for diffs], Thu Jun 12 20:38:28 2008 UTC (15 years, 11 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.37: +3 -1 lines
Diff to previous 1.37 (colored)

Make keepalive timeouts apply while waiting for a packet, particularly during
key renegotiation (bz #1363).  With djm and Matt Day, ok djm@

Revision 1.37 / (download) - annotate - [select for diffs], Thu Dec 27 14:22:08 2007 UTC (16 years, 4 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.36: +2 -1 lines
Diff to previous 1.36 (colored)

Add a small helper function to consistently handle the EAI_SYSTEM error
code of getaddrinfo.  Prompted by vgiffin at apple com via bz #1417.
ok markus@ stevesk@

Revision 1.25.2.2 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:32 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.25.2.1: +34 -13 lines
Diff to previous 1.25.2.1 (colored) to branchpoint 1.25 (colored) next main 1.26 (colored)

upgrade to OpenSSH 4.4

Revision 1.29.2.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:50 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.29: +34 -13 lines
Diff to previous 1.29 (colored) next main 1.30 (colored)

upgrade to OpenSSH 4.4

Revision 1.36 / (download) - annotate - [select for diffs], Fri Aug 18 10:27:16 2006 UTC (17 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.35: +13 -13 lines
Diff to previous 1.35 (colored)

reorder so prototypes are sorted by the files they refer to; no
binary change

Revision 1.35 / (download) - annotate - [select for diffs], Thu Aug 3 03:34:42 2006 UTC (17 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.34: +1 -6 lines
Diff to previous 1.34 (colored)

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

Revision 1.34 / (download) - annotate - [select for diffs], Tue Aug 1 23:22:47 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.33: +2 -1 lines
Diff to previous 1.33 (colored)

move #include <stdio.h> out of includes.h

Revision 1.33 / (download) - annotate - [select for diffs], Mon Jul 10 12:46:51 2006 UTC (17 years, 10 months ago) by dtucker
Branch: MAIN
Changes since 1.32: +2 -1 lines
Diff to previous 1.32 (colored)

Add port identifier to known_hosts for non-default ports, based originally
on a patch from Devin Nate in bz#910.

For any connection using the default port or using a HostKeyAlias the
format is unchanged, otherwise the host name or address is enclosed
within square brackets in the same format as sshd's ListenAddress.

Tested by many, ok markus@.

Revision 1.32 / (download) - annotate - [select for diffs], Thu Jul 6 16:03:53 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.31: +5 -1 lines
Diff to previous 1.31 (colored)

move #include <pwd.h> out of includes.h; ok markus@

Revision 1.31 / (download) - annotate - [select for diffs], Thu Mar 30 09:58:15 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.30: +22 -2 lines
Diff to previous 1.30 (colored)

replace {GET,PUT}_XXBIT macros with functionally similar functions,
silencing a heap of lint warnings. also allows them to use
__bounded__ checking which can't be applied to macros; requested
by and feedback from deraadt@

Revision 1.30 / (download) - annotate - [select for diffs], Sat Mar 25 22:22:43 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.29: +1 -1 lines
Diff to previous 1.29 (colored)

standardise spacing in $OpenBSD$ tags; requested by deraadt@

Revision 1.25.2.1 / (download) - annotate - [select for diffs], Fri Feb 3 03:01:56 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.25: +21 -2 lines
Diff to previous 1.25 (colored)

upgrade to OpenSSH 4.3

Revision 1.21.2.2 / (download) - annotate - [select for diffs], Fri Feb 3 02:53:44 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.21.2.1: +21 -2 lines
Diff to previous 1.21.2.1 (colored) to branchpoint 1.21 (colored) next main 1.22 (colored)

upgrade to OpenSSH 4.3

Revision 1.29 / (download) - annotate - [select for diffs], Tue Jan 31 10:19:02 2006 UTC (18 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE
Branch point for: OPENBSD_3_9
Changes since 1.28: +6 -2 lines
Diff to previous 1.28 (colored)

fix local arbitrary command execution vulnerability on local/local and
remote/remote copies (CVE-2006-0225, bz #1094), patch by
t8m AT centrum.cz, polished by dtucker@ and myself; ok markus@

Revision 1.28 / (download) - annotate - [select for diffs], Thu Dec 8 18:34:11 2005 UTC (18 years, 5 months ago) by reyk
Branch: MAIN
Changes since 1.27: +14 -2 lines
Diff to previous 1.27 (colored)

two changes to the new ssh tunnel support. this breaks compatibility
with the initial commit but is required for a portable approach.
- make the tunnel id u_int and platform friendly, use predefined types.
- support configuration of layer 2 (ethernet) or layer 3
(point-to-point, default) modes. configuration is done using the
Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and
restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option
in sshd_config(5).

ok djm@, man page bits by jmc@

Revision 1.27 / (download) - annotate - [select for diffs], Tue Dec 6 22:38:27 2005 UTC (18 years, 5 months ago) by reyk
Branch: MAIN
Changes since 1.26: +3 -1 lines
Diff to previous 1.26 (colored)

Add support for tun(4) forwarding over OpenSSH, based on an idea and
initial channel code bits by markus@. This is a simple and easy way to
use OpenSSH for ad hoc virtual private network connections, e.g.
administrative tunnels or secure wireless access. It's based on a new
ssh channel and works similar to the existing TCP forwarding support,
except that it depends on the tun(4) network interface on both ends of
the connection for layer 2 or layer 3 tunneling. This diff also adds
support for LocalCommand in the ssh(1) client.

ok djm@, markus@, jmc@ (manpages), tested and discussed with others

Revision 1.26 / (download) - annotate - [select for diffs], Tue Sep 13 23:40:07 2005 UTC (18 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.25: +2 -1 lines
Diff to previous 1.25 (colored)

ensure that stdio fds are attached; ok deraadt@

Revision 1.21.2.1 / (download) - annotate - [select for diffs], Sun Sep 4 18:40:02 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.21: +4 -5 lines
Diff to previous 1.21 (colored)

upgrade to OpenSSH 4.2

Revision 1.17.2.2 / (download) - annotate - [select for diffs], Fri Sep 2 03:45:00 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.17.2.1: +4 -5 lines
Diff to previous 1.17.2.1 (colored) to branchpoint 1.17 (colored) next main 1.18 (colored)

upgrade to OpenSSH 4.2

Revision 1.25 / (download) - annotate - [select for diffs], Thu Jul 14 04:00:43 2005 UTC (18 years, 10 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE
Branch point for: OPENBSD_3_8
Changes since 1.24: +2 -2 lines
Diff to previous 1.24 (colored)

use __sentinel__ attribute; ok deraadt@ djm@ markus@

Revision 1.24 / (download) - annotate - [select for diffs], Mon Jul 4 00:58:43 2005 UTC (18 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.23: +2 -1 lines
Diff to previous 1.23 (colored)

implement support for X11 and agent forwarding over multiplex slave
connections. Because of protocol limitations, the slave connections inherit
the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding
their own.

ok dtucker@ "put it in" deraadt@

Revision 1.23 / (download) - annotate - [select for diffs], Mon Jun 6 11:20:36 2005 UTC (18 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.22: +2 -1 lines
Diff to previous 1.22 (colored)

introduce a generic %foo expansion function. replace existing % expansion and
add expansion to ControlPath; ok markus@

Revision 1.22 / (download) - annotate - [select for diffs], Sat Apr 9 04:32:54 2005 UTC (19 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.21: +2 -5 lines
Diff to previous 1.21 (colored)

replace tilde_expand_filename with a simpler implementation, ahead of more
whacking; ok deraadt@

Revision 1.12.10.2 / (download) - annotate - [select for diffs], Thu Mar 10 17:15:04 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.12.10.1: +4 -1 lines
Diff to previous 1.12.10.1 (colored) to branchpoint 1.12 (colored) next main 1.13 (colored)

upgrade to OpenSSH 4.0

Revision 1.17.2.1 / (download) - annotate - [select for diffs], Thu Mar 10 16:28:27 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.17: +4 -1 lines
Diff to previous 1.17 (colored)

upgrade to OpenSSH 4.0

Revision 1.21 / (download) - annotate - [select for diffs], Tue Mar 1 10:09:52 2005 UTC (19 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE
Branch point for: OPENBSD_3_7
Changes since 1.20: +2 -1 lines
Diff to previous 1.20 (colored)

bz#413: allow optional specification of bind address for port forwardings.
Patch originally by Dan Astorian, but worked on by several people
Adds GatewayPorts=clientspecified option on server to allow remote forwards
to bind to client-specified ports.

ok markus@

Revision 1.20 / (download) - annotate - [select for diffs], Sat Dec 11 01:48:56 2004 UTC (19 years, 5 months ago) by dtucker
Branch: MAIN
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored)

Fix debug call in error path of authorized_keys processing and fix related
warnings; ok djm@

Revision 1.19 / (download) - annotate - [select for diffs], Mon Dec 6 11:41:03 2004 UTC (19 years, 5 months ago) by dtucker
Branch: MAIN
Changes since 1.18: +2 -1 lines
Diff to previous 1.18 (colored)

Discard over-length authorized_keys entries rather than complaining when
they don't decode.  bz #884, with & ok djm@

Revision 1.18 / (download) - annotate - [select for diffs], Fri Oct 29 22:53:56 2004 UTC (19 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.17: +2 -1 lines
Diff to previous 1.17 (colored)

factor out common permission-asking code to separate function; ok markus@

Revision 1.12.8.1 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:31 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.12: +20 -5 lines
Diff to previous 1.12 (colored) next main 1.13 (colored)

upgrade to OpenSSH 3.9

Revision 1.12.10.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:26 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.12: +20 -5 lines
Diff to previous 1.12 (colored)

upgrade to OpenSSH 3.9

Revision 1.17 / (download) - annotate - [select for diffs], Wed Aug 11 21:43:05 2004 UTC (19 years, 9 months ago) by avsm
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_6
Changes since 1.16: +3 -3 lines
Diff to previous 1.16 (colored)

some signed/unsigned int comparison cleanups; markus@ ok

Revision 1.16 / (download) - annotate - [select for diffs], Thu Jun 17 15:10:14 2004 UTC (19 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.15: +2 -1 lines
Diff to previous 1.15 (colored)

Add option for confirmation (ControlMaster=ask) via ssh-askpass before opening
shared connections; ok markus@

Revision 1.15 / (download) - annotate - [select for diffs], Mon Jun 14 01:44:39 2004 UTC (19 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.14: +3 -3 lines
Diff to previous 1.14 (colored)

set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@

Revision 1.14 / (download) - annotate - [select for diffs], Sat May 8 00:21:31 2004 UTC (20 years ago) by djm
Branch: MAIN
Changes since 1.13: +13 -1 lines
Diff to previous 1.13 (colored)

kill a tiny header; ok deraadt@

Revision 1.13 / (download) - annotate - [select for diffs], Sat May 8 00:01:37 2004 UTC (20 years ago) by deraadt
Branch: MAIN
Changes since 1.12: +3 -1 lines
Diff to previous 1.12 (colored)

make two tiny header files go away; djm ok

Revision 1.4.2.3 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:10 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.4.2.2: +4 -4 lines
Diff to previous 1.4.2.2 (colored) to branchpoint 1.4 (colored) next main 1.5 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.10.2.2 / (download) - annotate - [select for diffs], Fri May 17 00:03:23 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.10.2.1: +4 -4 lines
Diff to previous 1.10.2.1 (colored) to branchpoint 1.10 (colored) next main 1.11 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.12 / (download) - annotate - [select for diffs], Tue Mar 19 10:49:35 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE, OPENBSD_3_4_BASE, OPENBSD_3_3_BASE, OPENBSD_3_3, OPENBSD_3_2_BASE, OPENBSD_3_2, OPENBSD_3_1_BASE, OPENBSD_3_1
Branch point for: OPENBSD_3_5, OPENBSD_3_4
Changes since 1.11: +4 -4 lines
Diff to previous 1.11 (colored)

KNF whitespace

Revision 1.4.2.2 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:44 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.4.2.1: +2 -1 lines
Diff to previous 1.4.2.1 (colored) to branchpoint 1.4 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.2.2.6 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:42 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.2.2.5: +2 -1 lines
Diff to previous 1.2.2.5 (colored) next main 1.3 (colored)

Merge OpenSSH 3.1.

Revision 1.10.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:46 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.10: +2 -1 lines
Diff to previous 1.10 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.11 / (download) - annotate - [select for diffs], Thu Jan 24 21:09:25 2002 UTC (22 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.10: +2 -1 lines
Diff to previous 1.10 (colored)

add set_nodelay() to set TCP_NODELAY on a socket (prep for nagle tuning).
no nagle changes just yet; ok djm@ markus@

Revision 1.4.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:54 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.4: +17 -15 lines
Diff to previous 1.4 (colored)

Pull in OpenSSH-2.9.9

Revision 1.2.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:42 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.2.2.4: +17 -15 lines
Diff to previous 1.2.2.4 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.10 / (download) - annotate - [select for diffs], Tue Jun 26 17:27:24 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.9: +10 -47 lines
Diff to previous 1.9 (colored)

remove comments from .h, since they are cut&paste from the .c files
and out of sync

Revision 1.9 / (download) - annotate - [select for diffs], Tue Jun 26 06:32:56 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.8: +11 -11 lines
Diff to previous 1.8 (colored)

prototype pedant.  not very creative...
- () -> (void)
- no variable names

Revision 1.8 / (download) - annotate - [select for diffs], Sat May 19 19:43:57 2001 UTC (23 years ago) by stevesk
Branch: MAIN
Changes since 1.7: +25 -1 lines
Diff to previous 1.7 (colored)

sshd command-line arguments and configuration file options that
specify time may be expressed using a sequence of the form:
time[qualifier], where time is a positive integer value and qualifier
is one of the following:
    <none>,s,m,h,d,w
Examples:
    600     600 seconds (10 minutes)
    10m     10 minutes
    1h30m   1 hour 30 minutes (90 minutes)
ok markus@

Revision 1.7 / (download) - annotate - [select for diffs], Fri May 11 14:59:56 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.6: +3 -2 lines
Diff to previous 1.6 (colored)

add unset_nonblock for stdout/err flushing in client_loop().

Revision 1.6 / (download) - annotate - [select for diffs], Tue May 8 19:45:24 2001 UTC (23 years ago) by mouring
Branch: MAIN
Changes since 1.5: +11 -1 lines
Diff to previous 1.5 (colored)

Use addargs() in sftp plus some clean up of addargs().  OK Markus

Revision 1.2.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:31 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.2.2.3: +8 -1 lines
Diff to previous 1.2.2.3 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.5 / (download) - annotate - [select for diffs], Thu May 3 23:09:52 2001 UTC (23 years ago) by mouring
Branch: MAIN
Changes since 1.4: +5 -1 lines
Diff to previous 1.4 (colored)

Move colon() and cleanhost() to misc.c where I should I have put it in
the first place

Revision 1.4 / (download) - annotate - [select for diffs], Thu Apr 12 20:09:36 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.3: +8 -1 lines
Diff to previous 1.3 (colored)

robust port validation; ok markus@ jakob@

Revision 1.2.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:26 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.2.2.2: +3 -1 lines
Diff to previous 1.2.2.2 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.3.2.2 / (download) - annotate - [select for diffs], Wed Mar 21 18:52:52 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.3.2.1: +3 -1 lines
Diff to previous 1.3.2.1 (colored) next main 1.4 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.3.2.1 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:12 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.3: +0 -2 lines
Diff to previous 1.3 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.3 / (download) - annotate - [select for diffs], Thu Feb 22 21:59:44 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Branch point for: OPENBSD_2_7
Changes since 1.2: +3 -1 lines
Diff to previous 1.2 (colored)

use pwcopy in ssh.c, too

Revision 1.2.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:07 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.2.2.1: +0 -0 lines
Diff to previous 1.2.2.1 (colored)

Pull in OpenSSH-2.5.1

Revision 1.2.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:07 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.2: +1 -1 lines
Diff to previous 1.2 (colored)

Pull in OpenSSH 2.5.0

Revision 1.2 / (download) - annotate - [select for diffs], Mon Jan 29 01:58:17 2001 UTC (23 years, 3 months ago) by niklas
Branch: MAIN
Branch point for: OPENBSD_2_8
Changes since 1.1: +2 -0 lines
Diff to previous 1.1 (colored)

$OpenBSD$

Revision 1.1 / (download) - annotate - [select for diffs], Sun Jan 21 19:05:52 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN

split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.
rename util.[ch] -> misc.[ch]

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.