OpenBSD CVS

CVS log for src/usr.bin/ssh/packet.h


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.97 / (download) - annotate - [select for diffs], Fri May 17 00:30:24 2024 UTC (111 minutes, 22 seconds ago) by djm
Branch: MAIN
CVS Tags: HEAD
Changes since 1.96: +2 -1 lines
Diff to previous 1.96 (colored)

Start the process of splitting sshd into separate binaries. This step
splits sshd into a listener and a session binary. More splits are
planned.

After this changes, the listener binary will validate the configuration,
load the hostkeys, listen on port 22 and manage MaxStartups only. All
session handling will be performed by a new sshd-session binary that the
listener fork+execs.

This reduces the listener process to the minimum necessary and sets us
up for future work on the sshd-session binary.

feedback/ok markus@ deraadt@

NB. if you're updating via source, please restart sshd after installing,
otherwise you run the risk of locking yourself out.

Revision 1.94.8.1 / (download) - annotate - [select for diffs], Mon Dec 18 14:57:43 2023 UTC (4 months, 4 weeks ago) by bluhm
Branch: OPENBSD_7_3
Changes since 1.94: +1 -2 lines
Diff to previous 1.94 (colored) next main 1.95 (colored)

implement "strict key exchange" in ssh and sshd

This adds a protocol extension to improve the integrity of the SSH
transport protocol, particular in and around the initial key exchange
(KEX) phase.

Full details of the extension are in the PROTOCOL file.

from djm@; with markus@

this is errata/7.3/024_ssh.patch.sig

Revision 1.95.2.1 / (download) - annotate - [select for diffs], Mon Dec 18 14:56:35 2023 UTC (4 months, 4 weeks ago) by bluhm
Branch: OPENBSD_7_4
Changes since 1.95: +1 -2 lines
Diff to previous 1.95 (colored) next main 1.96 (colored)

implement "strict key exchange" in ssh and sshd

This adds a protocol extension to improve the integrity of the SSH
transport protocol, particular in and around the initial key exchange
(KEX) phase.

Full details of the extension are in the PROTOCOL file.

from djm@; with markus@

this is errata/7.4/011_ssh.patch.sig

Revision 1.96 / (download) - annotate - [select for diffs], Mon Dec 18 14:45:17 2023 UTC (4 months, 4 weeks ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5
Changes since 1.95: +1 -2 lines
Diff to previous 1.95 (colored)


implement "strict key exchange" in ssh and sshd

This adds a protocol extension to improve the integrity of the SSH
transport protocol, particular in and around the initial key exchange
(KEX) phase.

Full details of the extension are in the PROTOCOL file.

with markus@

Revision 1.95 / (download) - annotate - [select for diffs], Mon Aug 28 03:31:16 2023 UTC (8 months, 2 weeks ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_4_BASE
Branch point for: OPENBSD_7_4
Changes since 1.94: +2 -1 lines
Diff to previous 1.94 (colored)

Add keystroke timing obfuscation to the client.

This attempts to hide inter-keystroke timings by sending interactive
traffic at fixed intervals (default: every 20ms) when there is only a
small amount of data being sent. It also sends fake "chaff" keystrokes
for a random interval after the last real keystroke. These are
controlled by a new ssh_config ObscureKeystrokeTiming keyword/

feedback/ok markus@

Revision 1.94 / (download) - annotate - [select for diffs], Sat Jan 22 00:49:34 2022 UTC (2 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1
Branch point for: OPENBSD_7_3
Changes since 1.93: +2 -1 lines
Diff to previous 1.93 (colored)

add a ssh_packet_process_read() function that reads from a fd
directly into the transport input buffer.

Use this in the client and server mainloops to avoid unnecessary
copying. It also lets us use a more greedy read size without penalty.

Yields a 2-3% performance gain on cipher-speed.sh (in a fairly
unscientific test tbf)

feedback dtucker@ ok markus@

Revision 1.93 / (download) - annotate - [select for diffs], Fri Jul 16 09:00:23 2021 UTC (2 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0
Changes since 1.92: +2 -1 lines
Diff to previous 1.92 (colored)

Explicitly check for and start time-based rekeying in the client
and server mainloops.

Previously the rekey timeout could expire but rekeying would not start
until a packet was sent or received. This could cause us to spin in
select() on the rekey timeout if the connection was quiet.

ok markus@

Revision 1.92 / (download) - annotate - [select for diffs], Fri Mar 6 18:11:10 2020 UTC (4 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.91: +3 -2 lines
Diff to previous 1.91 (colored)

sshpkt_fatal() does not return; ok djm

Revision 1.91 / (download) - annotate - [select for diffs], Fri Sep 6 05:23:55 2019 UTC (4 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.90: +11 -3 lines
Diff to previous 1.90 (colored)

fixes for !WITH_OPENSSL compilation; ok dtucker@

Revision 1.90 / (download) - annotate - [select for diffs], Mon Jan 21 10:35:09 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.89: +2 -1 lines
Diff to previous 1.89 (colored)

pass values used in KEX hash computation as sshbuf rather than
pointer+len

suggested by me; implemented by markus@ ok me

Revision 1.89 / (download) - annotate - [select for diffs], Mon Jan 21 09:54:11 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.88: +2 -2 lines
Diff to previous 1.88 (colored)

Make sshpkt_get_bignum2() allocate the bignum it is parsing rather
than make the caller do it. Saves a lot of boilerplate code.

from markus@ ok djm@

Revision 1.88 / (download) - annotate - [select for diffs], Sat Jan 19 21:33:14 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.87: +3 -2 lines
Diff to previous 1.87 (colored)

allow sshpkt_fatal() to take a varargs format; we'll use this to give
packet-related fatal error messages more context (esp. the remote endpoint)
ok markus@

Revision 1.87 / (download) - annotate - [select for diffs], Sat Jan 19 21:31:32 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.86: +1 -5 lines
Diff to previous 1.86 (colored)

begin landing remaining refactoring of packet parsing API, started
almost exactly six years ago.

This change stops including the old packet_* API by default and makes
each file that requires the old API include it explicitly. We will
commit file-by-file refactoring to remove the old API in consistent
steps.

with & ok markus@

Revision 1.86 / (download) - annotate - [select for diffs], Mon Jul 9 21:20:26 2018 UTC (5 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.85: +3 -3 lines
Diff to previous 1.85 (colored)

ttymodes: switch to sshbuf API; ok djm@

Revision 1.85 / (download) - annotate - [select for diffs], Fri Jul 6 09:03:02 2018 UTC (5 years, 10 months ago) by sf
Branch: MAIN
Changes since 1.84: +1 -2 lines
Diff to previous 1.84 (colored)

Remove unused ssh_packet_start_compression()

ok markus@

Revision 1.84 / (download) - annotate - [select for diffs], Sun Dec 10 05:55:29 2017 UTC (6 years, 5 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.83: +2 -1 lines
Diff to previous 1.83 (colored)

Put remote client info back into the ClientAlive connection termination
message.  Based in part on diff from  lars.nooden at gmail, ok djm

Revision 1.83 / (download) - annotate - [select for diffs], Wed Oct 25 00:17:08 2017 UTC (6 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.82: +3 -1 lines
Diff to previous 1.82 (colored)

add sshd_config RDomain keyword to place sshd and the subsequent
user session (including the shell and any TCP/IP forwardings) into
the specified rdomain(4)

ok markus@

Revision 1.82 / (download) - annotate - [select for diffs], Tue Sep 12 06:32:07 2017 UTC (6 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.81: +6 -2 lines
Diff to previous 1.81 (colored)

refactor channels.c

Move static state to a "struct ssh_channels" that is allocated at
runtime and tracked as a member of struct ssh.

Explicitly pass "struct ssh" to all channels functions.

Replace use of the legacy packet APIs in channels.c.

Rework sshd_config PermitOpen handling: previously the configuration
parser would call directly into the channels layer. After the refactor
this is not possible, as the channels structures are allocated at
connection time and aren't available when the configuration is parsed.
The server config parser now tracks PermitOpen itself and explicitly
configures the channels code later.

ok markus@

Revision 1.81 / (download) - annotate - [select for diffs], Wed May 31 08:09:45 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.80: +3 -1 lines
Diff to previous 1.80 (colored)

clear session keys from memory; ok djm@

Revision 1.80 / (download) - annotate - [select for diffs], Tue May 30 14:18:15 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.79: +4 -1 lines
Diff to previous 1.79 (colored)

sshd: pass struct ssh to auth functions; ok djm@

Revision 1.79 / (download) - annotate - [select for diffs], Wed May 3 21:08:09 2017 UTC (7 years ago) by naddy
Branch: MAIN
Changes since 1.78: +1 -2 lines
Diff to previous 1.78 (colored)

remove miscellaneous SSH1 leftovers; ok markus@

Revision 1.78 / (download) - annotate - [select for diffs], Sun Apr 30 23:23:54 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.77: +1 -4 lines
Diff to previous 1.77 (colored)

remove SSHv1 support from packet and buffer APIs

ok markus@

Revision 1.77 / (download) - annotate - [select for diffs], Sun Apr 30 23:13:25 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.76: +1 -2 lines
Diff to previous 1.76 (colored)

remove compat20/compat13/compat15 variables

ok markus@

Revision 1.76 / (download) - annotate - [select for diffs], Fri Feb 3 23:03:33 2017 UTC (7 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.75: +6 -1 lines
Diff to previous 1.75 (colored)

add ssh_packet_set_log_preamble() to allow inclusion of a preamble
string in disconnect messages; ok markus@

Revision 1.75 / (download) - annotate - [select for diffs], Fri Feb 3 02:56:00 2017 UTC (7 years, 3 months ago) by dtucker
Branch: MAIN
Changes since 1.74: +2 -2 lines
Diff to previous 1.74 (colored)

Make ssh_packet_set_rekey_limits take u32 for the number of seconds
until rekeying (negative values are rejected at config parse time).
This allows the removal of some casts and a signed vs unsigned
comparison warning.

rekey_time is cast to int64 for the comparison which is a no-op
on OpenBSD, but should also do the right thing in -portable on
anything still using 32bit time_t (until the system time actually
wraps, anyway).

some early guidance deraadt@, ok djm@

Revision 1.74 / (download) - annotate - [select for diffs], Tue Oct 11 21:47:45 2016 UTC (7 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.73: +6 -1 lines
Diff to previous 1.73 (colored)

Add a per-packet input hook that is called with the decrypted packet
contents. This will be used for fuzzing; ok markus@

Revision 1.73 / (download) - annotate - [select for diffs], Fri Sep 30 09:19:13 2016 UTC (7 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.72: +5 -1 lines
Diff to previous 1.72 (colored)

ssh proxy mux mode (-O proxy; idea from Simon Tatham):
- mux client speaks the ssh-packet protocol directly over unix-domain socket.
- mux server acts as a proxy, translates channel IDs and relays to the server.
- no filedescriptor passing necessary.
- combined with unix-domain forwarding it's even possible to run mux client
  and server on different machines.
feedback & ok djm@

Revision 1.72 / (download) - annotate - [select for diffs], Wed Sep 28 16:33:07 2016 UTC (7 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.71: +1 -6 lines
Diff to previous 1.71 (colored)

Remove support for pre-authentication compression. Doing compression
early in the protocol probably seemed reasonable in the 1990s, but
today it's clearly a bad idea in terms of both cryptography (cf.
multiple compression oracle attacks in TLS) and attack surface.

Moreover, to support it across privilege-separation zlib needed
the assistance of a complex shared-memory manager that made the
required attack surface considerably larger.

Prompted by Guido Vranken pointing out a compiler-elided security
check in the shared memory manager found by Stack
(http://css.csail.mit.edu/stack/); ok deraadt@ markus@

NB. pre-auth authentication has been disabled by default in sshd
for >10 years.

Revision 1.71 / (download) - annotate - [select for diffs], Mon Mar 7 19:02:43 2016 UTC (8 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.70: +6 -2 lines
Diff to previous 1.70 (colored)

refactor canohost.c: move functions that cache results closer to the
places that use them (authn and session code). After this, no state is
cached in canohost.c

feedback and ok markus@

Revision 1.70 / (download) - annotate - [select for diffs], Mon Feb 8 10:57:07 2016 UTC (8 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.69: +2 -2 lines
Diff to previous 1.69 (colored)

refactor activation of rekeying

This makes automatic rekeying internal to the packet code (previously
the server and client loops needed to assist). In doing to it makes
application of rekey limits more accurate by accounting for packets
about to be sent as well as packets queued during rekeying events
themselves.

Based on a patch from dtucker@ which was in turn based on a patch
Aleksander Adamowski in bz#2521; ok markus@

Revision 1.69 / (download) - annotate - [select for diffs], Fri Jan 29 02:54:45 2016 UTC (8 years, 3 months ago) by dtucker
Branch: MAIN
Changes since 1.68: +2 -2 lines
Diff to previous 1.68 (colored)

Allow RekeyLimits in excess of 4G up to 2**63 bits (limited by the return
type of scan_scaled).  Part of bz#2521, ok djm.

Revision 1.68 / (download) - annotate - [select for diffs], Thu Jan 14 16:17:40 2016 UTC (8 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.67: +1 -5 lines
Diff to previous 1.67 (colored)

remove roaming support; ok djm@

Revision 1.67 / (download) - annotate - [select for diffs], Fri Dec 11 03:24:25 2015 UTC (8 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.66: +2 -1 lines
Diff to previous 1.66 (colored)

include remote port number in a few more messages; makes tying log
messages together into a session a bit easier; bz#2503 ok dtucker@

Revision 1.66 / (download) - annotate - [select for diffs], Fri Jan 30 01:13:33 2015 UTC (9 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8, OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.65: +7 -5 lines
Diff to previous 1.65 (colored)

avoid more fatal/exit in the packet.c paths that ssh-keyscan
uses; feedback and "looks good" markus@

Revision 1.65 / (download) - annotate - [select for diffs], Wed Jan 28 21:15:47 2015 UTC (9 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.64: +2 -2 lines
Diff to previous 1.64 (colored)

avoid fatal() calls in packet code
makes ssh-keyscan more reliable against server failures
ok dtucker@ markus@

Revision 1.64 / (download) - annotate - [select for diffs], Mon Jan 19 20:30:23 2015 UTC (9 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.63: +13 -1 lines
Diff to previous 1.63 (colored)

add experimental api for packet layer; ok djm@

Revision 1.63 / (download) - annotate - [select for diffs], Mon Jan 19 20:07:45 2015 UTC (9 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.62: +8 -1 lines
Diff to previous 1.62 (colored)

move dispatch to struct ssh; ok djm@

Revision 1.62 / (download) - annotate - [select for diffs], Mon Jan 19 19:52:16 2015 UTC (9 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.61: +132 -94 lines
Diff to previous 1.61 (colored)

update packet.c & isolate, introduce struct ssh
a) switch packet.c to buffer api and isolate per-connection info into struct ssh
b) (de)serialization of the state is moved from monitor to packet.c
c) the old packet.c API is implemented in opacket.[ch]
d) compress.c/h is removed and integrated into packet.c
with and ok djm@

Revision 1.61 / (download) - annotate - [select for diffs], Sat May 3 17:20:34 2014 UTC (10 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.60: +2 -1 lines
Diff to previous 1.60 (colored)

unbreak compression, by re-init-ing the compression code in the
post-auth child. the new buffer code is more strict, and requires
buffer_init() while the old code was happy after a bzero();
originally from djm@

Revision 1.60 / (download) - annotate - [select for diffs], Mon Apr 28 03:09:18 2014 UTC (10 years ago) by djm
Branch: MAIN
Changes since 1.59: +2 -2 lines
Diff to previous 1.59 (colored)

buffer_get_string_ptr's return should be const to remind
callers that futzing with it will futz with the actual buffer
contents

Revision 1.59 / (download) - annotate - [select for diffs], Fri Jul 12 00:19:59 2013 UTC (10 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5, OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.58: +2 -2 lines
Diff to previous 1.58 (colored)

fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@

Revision 1.58 / (download) - annotate - [select for diffs], Thu May 16 02:00:34 2013 UTC (11 years ago) by dtucker
Branch: MAIN
Changes since 1.57: +3 -2 lines
Diff to previous 1.57 (colored)

Add an optional second argument to RekeyLimit in the client to allow
rekeying based on elapsed time in addition to amount of traffic.
with djm@ jmc@, ok djm

Revision 1.57 / (download) - annotate - [select for diffs], Wed Jan 25 19:40:09 2012 UTC (12 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1
Changes since 1.56: +1 -2 lines
Diff to previous 1.56 (colored)

packet_read_poll() is not used anymore.

Revision 1.56 / (download) - annotate - [select for diffs], Fri May 6 21:14:05 2011 UTC (13 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.55: +1 -2 lines
Diff to previous 1.55 (colored)

set traffic class for IPv6 traffic as we do for IPv4 TOS;
patch from lionel AT mamane.lu via Colin Watson in bz#1855;
ok markus@

Revision 1.55 / (download) - annotate - [select for diffs], Sat Nov 13 23:27:50 2010 UTC (13 years, 6 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.54: +2 -2 lines
Diff to previous 1.54 (colored)

allow ssh and sshd to set arbitrary TOS/DSCP/QoS values instead of
hardcoding lowdelay/throughput.

bz#1733 patch from philipp AT redfish-solutions.com; ok markus@ deraadt@

Revision 1.54 / (download) - annotate - [select for diffs], Tue Aug 31 11:54:45 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.53: +4 -1 lines
Diff to previous 1.53 (colored)

Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and
host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer
better performance than plain DH and DSA at the same equivalent symmetric
key length, as well as much shorter keys.

Only the mandatory sections of RFC5656 are implemented, specifically the
three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and
ECDSA. Point compression (optional in RFC5656 is NOT implemented).

Certificate host and user keys using the new ECDSA key types are supported.

Note that this code has not been tested for interoperability and may be
subject to change.

feedback and ok markus@

Revision 1.53 / (download) - annotate - [select for diffs], Tue Aug 31 09:58:37 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.52: +2 -1 lines
Diff to previous 1.52 (colored)

Add buffer_get_cstring() and related functions that verify that the
string extracted from the buffer contains no embedded \0 characters*
This prevents random (possibly malicious) crap from being appended to
strings where it would not be noticed if the string is used with
a string(3) function.

Use the new API in a few sensitive places.

* actually, we allow a single one at the end of the string for now because
we don't know how many deployed implementations get this wrong, but don't
count on this to remain indefinitely.

Revision 1.52 / (download) - annotate - [select for diffs], Sat Jun 27 09:29:06 2009 UTC (14 years, 10 months ago) by andreas
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6
Changes since 1.51: +4 -1 lines
Diff to previous 1.51 (colored)

packet_bacup_state() and packet_restore_state() will be used to
temporarily save the current state ren resuming a suspended connection.
ok markus@

Revision 1.51 / (download) - annotate - [select for diffs], Wed May 27 06:36:07 2009 UTC (14 years, 11 months ago) by andreas
Branch: MAIN
Changes since 1.50: +3 -1 lines
Diff to previous 1.50 (colored)

Add packet_put_int64() and packet_get_int64(), part of a larger change
from Martin Forssen.
ok markus@

Revision 1.50 / (download) - annotate - [select for diffs], Mon May 25 06:48:01 2009 UTC (14 years, 11 months ago) by andreas
Branch: MAIN
Changes since 1.49: +8 -4 lines
Diff to previous 1.49 (colored)

Put the globals in packet.c into a struct and don't access it directly
from other files. No functional changes.
ok markus@ djm@

Revision 1.49 / (download) - annotate - [select for diffs], Thu Jul 10 18:08:11 2008 UTC (15 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.48: +3 -3 lines
Diff to previous 1.48 (colored)

sync v1 and v2 traffic accounting; add it to sshd, too; ok djm@, dtucker@

Revision 1.48 / (download) - annotate - [select for diffs], Thu Jun 12 20:38:28 2008 UTC (15 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.47: +2 -1 lines
Diff to previous 1.47 (colored)

Make keepalive timeouts apply while waiting for a packet, particularly during
key renegotiation (bz #1363).  With djm and Matt Day, ok djm@

Revision 1.47 / (download) - annotate - [select for diffs], Thu May 8 06:59:01 2008 UTC (16 years ago) by markus
Branch: MAIN
Changes since 1.46: +2 -1 lines
Diff to previous 1.46 (colored)

avoid extra malloc/copy/free when receiving data over the net;
~10% speedup for localhost-scp; ok djm@

Revision 1.46 / (download) - annotate - [select for diffs], Fri Feb 22 20:44:02 2008 UTC (16 years, 2 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.45: +2 -1 lines
Diff to previous 1.45 (colored)

Allow all SSH2 packet types, including UNIMPLEMENTED to reset the
keepalive timer (bz #1307).  ok markus@

Revision 1.43.2.1 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:33 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.43: +3 -1 lines
Diff to previous 1.43 (colored) next main 1.44 (colored)

upgrade to OpenSSH 4.4

Revision 1.44.2.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:50 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.44: +1 -1 lines
Diff to previous 1.44 (colored) next main 1.45 (colored)

upgrade to OpenSSH 4.4

Revision 1.45 / (download) - annotate - [select for diffs], Sat Mar 25 22:22:43 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.44: +1 -1 lines
Diff to previous 1.44 (colored)

standardise spacing in $OpenBSD$ tags; requested by deraadt@

Revision 1.44 / (download) - annotate - [select for diffs], Tue Feb 7 01:42:00 2006 UTC (18 years, 3 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE
Branch point for: OPENBSD_3_9
Changes since 1.43: +3 -1 lines
Diff to previous 1.43 (colored)

move #include <termios.h> out of includes.h; ok markus@

Revision 1.41.4.1 / (download) - annotate - [select for diffs], Sun Sep 4 18:40:02 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.41: +4 -2 lines
Diff to previous 1.41 (colored) next main 1.42 (colored)

upgrade to OpenSSH 4.2

Revision 1.41.2.1 / (download) - annotate - [select for diffs], Fri Sep 2 03:45:00 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.41: +4 -2 lines
Diff to previous 1.41 (colored) next main 1.42 (colored)

upgrade to OpenSSH 4.2

Revision 1.43 / (download) - annotate - [select for diffs], Mon Jul 25 11:59:40 2005 UTC (18 years, 9 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE
Branch point for: OPENBSD_3_8
Changes since 1.42: +3 -1 lines
Diff to previous 1.42 (colored)

add a new compression method that delays compression until the user
has been authenticated successfully and set compression to 'delayed'
for sshd.

this breaks older openssh clients (< 3.5) if they insist on
compression, so you have to re-enable compression in sshd_config.
ok djm@

Revision 1.42 / (download) - annotate - [select for diffs], Fri Jun 17 02:44:33 2005 UTC (18 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.41: +2 -2 lines
Diff to previous 1.41 (colored)

make this -Wsign-compare clean; ok avsm@ markus@

Revision 1.40.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:31 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.40: +2 -2 lines
Diff to previous 1.40 (colored) next main 1.41 (colored)

upgrade to OpenSSH 3.9

Revision 1.40.4.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:26 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.40: +2 -2 lines
Diff to previous 1.40 (colored) next main 1.41 (colored)

upgrade to OpenSSH 3.9

Revision 1.41 / (download) - annotate - [select for diffs], Tue May 11 19:01:43 2004 UTC (20 years ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE, OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_7, OPENBSD_3_6
Changes since 1.40: +2 -2 lines
Diff to previous 1.40 (colored)

improve some code lint did not like; djm millert ok

Revision 1.35.4.2 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:16 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.35.4.1: +0 -0 lines
Diff to previous 1.35.4.1 (colored) to branchpoint 1.35 (colored) next main 1.36 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.35.2.1 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:26 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.35: +9 -6 lines
Diff to previous 1.35 (colored) next main 1.36 (colored)

upgrade to OpenSSH 3.7

Revision 1.35.4.1 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:43 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.35: +9 -6 lines
Diff to previous 1.35 (colored)

upgrade to OpenSSH 3.7

Revision 1.40 / (download) - annotate - [select for diffs], Tue Jun 24 08:23:46 2003 UTC (20 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE, OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_5, OPENBSD_3_4
Changes since 1.39: +3 -3 lines
Diff to previous 1.39 (colored)

int -> u_int; ok djm@, deraadt@, mouring@

Revision 1.39 / (download) - annotate - [select for diffs], Tue Apr 8 20:21:29 2003 UTC (21 years, 1 month ago) by itojun
Branch: MAIN
Changes since 1.38: +2 -2 lines
Diff to previous 1.38 (colored)

rename log() into logit() to avoid name conflict.  markus ok, from netbsd

Revision 1.38 / (download) - annotate - [select for diffs], Wed Apr 2 09:48:07 2003 UTC (21 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.37: +6 -3 lines
Diff to previous 1.37 (colored)

reapply rekeying chage, tested by henning@, ok djm@

Revision 1.37 / (download) - annotate - [select for diffs], Tue Apr 1 10:22:21 2003 UTC (21 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.36: +3 -6 lines
Diff to previous 1.36 (colored)

backout rekeying changes (for 3.6.1)

Revision 1.36 / (download) - annotate - [select for diffs], Tue Apr 1 10:10:23 2003 UTC (21 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.35: +6 -3 lines
Diff to previous 1.35 (colored)

rekeying bugfixes and automatic rekeying:

* both client and server rekey _automatically_
      (a) after 2^31 packets, because after 2^32 packets
          the sequence number for packets wraps
      (b) after 2^(blocksize_in_bits/4) blocks
  (see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt)
  (a) and (b) are _enabled_ by default, and only disabled for known
  openssh versions, that don't support rekeying properly.
* client option 'RekeyLimit'
* do not reply to requests during rekeying

Revision 1.34.2.1 / (download) - annotate - [select for diffs], Wed Jun 26 15:30:38 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.34: +2 -1 lines
Diff to previous 1.34 (colored) next main 1.35 (colored)

Pull in OpenSSH-3.4

Revision 1.25.2.4 / (download) - annotate - [select for diffs], Sat Jun 22 07:23:17 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.25.2.3: +2 -1 lines
Diff to previous 1.25.2.3 (colored) to branchpoint 1.25 (colored) next main 1.26 (colored)

Update OpenSSH to version 3.3 (with local changes, configuration files still
living in /etc and privsep user being nobody).

Revision 1.35 / (download) - annotate - [select for diffs], Wed Jun 19 18:01:00 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_3, OPENBSD_3_2
Changes since 1.34: +2 -1 lines
Diff to previous 1.34 (colored)

make the monitor sync the transfer ssh1 session key;
transfer keycontext only for RC4 (this is still depends on EVP
implementation details and is broken).

Revision 1.22.2.4 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:10 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.22.2.3: +11 -1 lines
Diff to previous 1.22.2.3 (colored) to branchpoint 1.22 (colored) next main 1.23 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.25.2.3 / (download) - annotate - [select for diffs], Fri May 17 00:03:23 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.25.2.2: +11 -1 lines
Diff to previous 1.25.2.2 (colored) to branchpoint 1.25 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.34 / (download) - annotate - [select for diffs], Mon Mar 18 17:16:38 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.33: +11 -1 lines
Diff to previous 1.33 (colored)

export/import cipher state, iv and ssh2 seqnr; needed by ssh-privsep

Revision 1.22.2.3 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:44 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.22.2.2: +15 -22 lines
Diff to previous 1.22.2.2 (colored) to branchpoint 1.22 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.17.2.7 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:42 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.17.2.6: +15 -22 lines
Diff to previous 1.17.2.6 (colored) to branchpoint 1.17 (colored) next main 1.18 (colored)

Merge OpenSSH 3.1.

Revision 1.25.2.2 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:46 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.25.2.1: +15 -22 lines
Diff to previous 1.25.2.1 (colored) to branchpoint 1.25 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.33 / (download) - annotate - [select for diffs], Mon Mar 4 17:27:39 2002 UTC (22 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.32: +2 -2 lines
Diff to previous 1.32 (colored)

$OpenBSD$ and RCSID() cleanup: don't use RCSID() in .h files; add
missing RCSID() to .c files and remove dup /*$OpenBSD$*/ from .c
files.  ok markus@

Revision 1.32 / (download) - annotate - [select for diffs], Fri Dec 28 14:50:54 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.31: +6 -6 lines
Diff to previous 1.31 (colored)

packet_read* no longer return the packet length, since it's not used.

Revision 1.31 / (download) - annotate - [select for diffs], Fri Dec 28 13:57:33 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.30: +3 -3 lines
Diff to previous 1.30 (colored)

packet_get_bignum* no longer returns a size

Revision 1.30 / (download) - annotate - [select for diffs], Fri Dec 28 12:14:27 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.29: +3 -2 lines
Diff to previous 1.29 (colored)

s/packet_done/packet_check_eom/ (end-of-message); ok djm@

Revision 1.29 / (download) - annotate - [select for diffs], Thu Dec 27 20:39:58 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.28: +1 -11 lines
Diff to previous 1.28 (colored)

get rid of packet_integrity_check, use packet_done() instead.

Revision 1.28 / (download) - annotate - [select for diffs], Thu Dec 20 22:50:24 2001 UTC (22 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.27: +3 -1 lines
Diff to previous 1.27 (colored)

Conformance fix: we should send failing packet sequence number when
responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by
yakk@yakk.dot.net; ok markus@

Revision 1.27 / (download) - annotate - [select for diffs], Wed Dec 19 17:16:13 2001 UTC (22 years, 5 months ago) by stevesk
Branch: MAIN
Changes since 1.26: +5 -5 lines
Diff to previous 1.26 (colored)

change the buffer/packet interface to use void* vs. char*; ok markus@

Revision 1.22.2.2 / (download) - annotate - [select for diffs], Thu Nov 15 22:51:15 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.22.2.1: +2 -2 lines
Diff to previous 1.22.2.1 (colored) to branchpoint 1.22 (colored)

Merge OpenSSH 3.0.1.

Revision 1.17.2.6 / (download) - annotate - [select for diffs], Thu Nov 15 22:50:30 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.17.2.5: +2 -2 lines
Diff to previous 1.17.2.5 (colored) to branchpoint 1.17 (colored)

Merge OpenSSH 3.0.1.

This is likely to be the last commit to the 2.8-STABLE branch.

Revision 1.25.2.1 / (download) - annotate - [select for diffs], Wed Nov 14 03:24:38 2001 UTC (22 years, 6 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.25: +2 -2 lines
Diff to previous 1.25 (colored)

Pull in patches from current (Errata 002):
Update to OpenSSH-3.0.1 via errata patch (Instead of using release tarball)

Revision 1.26 / (download) - annotate - [select for diffs], Wed Nov 7 16:03:17 2001 UTC (22 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.25: +2 -2 lines
Diff to previous 1.25 (colored)

pad using the padding field from the ssh2 packet instead of sending
extra ignore messages. tested against several other ssh servers.

Revision 1.22.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:54 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.22: +56 -184 lines
Diff to previous 1.22 (colored)

Pull in OpenSSH-2.9.9

Revision 1.17.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:42 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.17.2.4: +56 -184 lines
Diff to previous 1.17.2.4 (colored) to branchpoint 1.17 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.25 / (download) - annotate - [select for diffs], Tue Jun 26 17:27:24 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.24: +56 -180 lines
Diff to previous 1.24 (colored)

remove comments from .h, since they are cut&paste from the .c files
and out of sync

Revision 1.24 / (download) - annotate - [select for diffs], Tue Jun 26 06:32:57 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.23: +12 -13 lines
Diff to previous 1.23 (colored)

prototype pedant.  not very creative...
- () -> (void)
- no variable names

Revision 1.23 / (download) - annotate - [select for diffs], Mon May 28 23:58:35 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.22: +2 -5 lines
Diff to previous 1.22 (colored)

remove some lines, simplify.

Revision 1.17.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:32 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.17.2.3: +3 -3 lines
Diff to previous 1.17.2.3 (colored) to branchpoint 1.17 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.22 / (download) - annotate - [select for diffs], Sat Apr 14 16:33:20 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.21: +3 -3 lines
Diff to previous 1.21 (colored)

protocol 2 tty modes support; ok markus@

Revision 1.17.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:27 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.17.2.2: +7 -1 lines
Diff to previous 1.17.2.2 (colored) to branchpoint 1.17 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.15.2.4 / (download) - annotate - [select for diffs], Wed Mar 21 18:52:55 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.15.2.3: +7 -1 lines
Diff to previous 1.15.2.3 (colored) to branchpoint 1.15 (colored) next main 1.16 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.15.2.3 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:12 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.15.2.2: +12 -12 lines
Diff to previous 1.15.2.2 (colored) to branchpoint 1.15 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.21 / (download) - annotate - [select for diffs], Wed Feb 28 21:27:47 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.20: +4 -1 lines
Diff to previous 1.20 (colored)

use ignore message to simulate a SSH2_MSG_CHANNEL_DATA message
use random content in ignore messages.

Revision 1.20 / (download) - annotate - [select for diffs], Wed Feb 28 09:57:07 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.19: +4 -1 lines
Diff to previous 1.19 (colored)

in ssh protocol v2 use ignore messages for padding (instead of trailing \0).

Revision 1.17.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:10 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.17.2.1: +0 -0 lines
Diff to previous 1.17.2.1 (colored) to branchpoint 1.17 (colored)

Pull in OpenSSH-2.5.1

Revision 1.17.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:09 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.17: +12 -12 lines
Diff to previous 1.17 (colored)

Pull in OpenSSH 2.5.0

Revision 1.19 / (download) - annotate - [select for diffs], Sat Jan 13 18:32:50 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.18: +2 -2 lines
Diff to previous 1.18 (colored)

split out keepalive from packet_interactive (from dale@accentre.com)
set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too.

Revision 1.18 / (download) - annotate - [select for diffs], Tue Dec 19 23:17:57 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.17: +11 -11 lines
Diff to previous 1.17 (colored)

replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'
with u_char.

Revision 1.15.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 21:31:03 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.15.2.1: +6 -8 lines
Diff to previous 1.15.2.1 (colored) to branchpoint 1.15 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.17 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:52 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.16: +6 -8 lines
Diff to previous 1.16 (colored)

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.15.2.1 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:21 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.15: +1 -1 lines
Diff to previous 1.15 (colored)

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.16 / (download) - annotate - [select for diffs], Tue Jun 20 01:39:43 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.15: +1 -1 lines
Diff to previous 1.15 (colored)

OpenBSD tag

Revision 1.15 / (download) - annotate - [select for diffs], Fri Apr 14 10:30:32 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.14: +8 -8 lines
Diff to previous 1.14 (colored)

whitespace cleanup

Revision 1.14 / (download) - annotate - [select for diffs], Fri Apr 14 10:09:15 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.13: +14 -1 lines
Diff to previous 1.13 (colored)

check payload for (illegal) extra data

Revision 1.13 / (download) - annotate - [select for diffs], Wed Apr 12 09:39:10 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (colored)

#include <ssl/foo.h> -> <openssh/foo.h>

Revision 1.12 / (download) - annotate - [select for diffs], Mon Apr 3 20:12:55 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.11: +5 -2 lines
Diff to previous 1.11 (colored)

ssh2 packet format

Revision 1.11 / (download) - annotate - [select for diffs], Mon Apr 3 07:07:15 2000 UTC (24 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.10: +6 -1 lines
Diff to previous 1.10 (colored)

channel layer support for ssh2

Revision 1.10 / (download) - annotate - [select for diffs], Thu Mar 16 20:56:14 2000 UTC (24 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.9: +3 -3 lines
Diff to previous 1.9 (colored)

-pedantic: signed vs. unsigned, void*-arithm, etc

Revision 1.9 / (download) - annotate - [select for diffs], Tue Jan 4 16:54:58 2000 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.8: +3 -2 lines
Diff to previous 1.8 (colored)

allow auth-kerberos for IPv4 only

Revision 1.8 / (download) - annotate - [select for diffs], Tue Jan 4 00:07:59 2000 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.7: +4 -1 lines
Diff to previous 1.7 (colored)

ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new features:
sshd allows multiple ListenAddress and Port options.  note that libwrap is
not IPv6-ready. (based on patches from <kick@kyoto.wide.ad.jp> and
fujiwara@rcac.tdi.co.jp)

Revision 1.7 / (download) - annotate - [select for diffs], Mon Dec 27 10:46:11 1999 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.6: +3 -3 lines
Diff to previous 1.6 (colored)

check format string for packet_disconnect and packet_send_debug, too

Revision 1.6 / (download) - annotate - [select for diffs], Wed Nov 24 19:53:48 1999 UTC (24 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.5: +70 -48 lines
Diff to previous 1.5 (colored)

KNF, final part 3

Revision 1.5 / (download) - annotate - [select for diffs], Wed Nov 24 00:26:02 1999 UTC (24 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.4: +51 -50 lines
Diff to previous 1.4 (colored)

much more KNF

Revision 1.4 / (download) - annotate - [select for diffs], Fri Nov 19 19:58:18 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.3: +6 -1 lines
Diff to previous 1.3 (colored)

SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
[hope this time my ISP stays alive during commit]

Revision 1.3 / (download) - annotate - [select for diffs], Mon Nov 15 21:38:54 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (colored)

remove support for cipher RC4

Revision 1.2 / (download) - annotate - [select for diffs], Tue Sep 28 04:45:36 1999 UTC (24 years, 7 months ago) by provos
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.1: +4 -5 lines
Diff to previous 1.1 (colored)

convert all uses of gmp to SSL bignum
convert all used of rsa to SSL rsa functions
remove all use of randomstate to OpenBSD arc4random() and arc4_stir()
all this done at a long long night in Canada.

Revision 1.1 / (download) - annotate - [select for diffs], Sun Sep 26 20:53:36 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN

i bet a lot of people didn't know what ssh 1.2.16 had a nice license.
well, except for the patent issues.  someone in sweden (forget their
name at the moment) cleaned out most of the patented code, and now
this code removes rsa code.  when this is done, it will link against
libssl, but the work isn't completely done yet.  then we need to bring
this up to modern days, featurewise.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.