OpenBSD CVS

CVS log for src/usr.bin/ssh/ssh-keyscan.c


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.157 / (download) - annotate - [select for diffs], Mon May 6 19:26:17 2024 UTC (10 days, 6 hours ago) by tobias
Branch: MAIN
CVS Tags: HEAD
Changes since 1.156: +4 -48 lines
Diff to previous 1.156 (colored)

remove SSH1 leftovers

Authored with Space Meyer <git at the-space dot agency>

ok djm

Revision 1.156 / (download) - annotate - [select for diffs], Tue Apr 30 15:40:43 2024 UTC (2 weeks, 2 days ago) by tobias
Branch: MAIN
Changes since 1.155: +7 -4 lines
Diff to previous 1.155 (colored)

never close stdin

The sanitise_stdfd call makes sure that standard file descriptors are
open (if they were closed, they are connected with /dev/null).

Do not close stdin in any case to prevent error messages when stdin is
read multiple times and to prevent later usage of fd 0 for connections,
e.g.

echo localhost | ssh-keyscan -f - -f -

While at it, make stdin-related error messages nicer.

Authored with Max Kunzelmann <maxdev at posteo dot de>

ok djm

Revision 1.155 / (download) - annotate - [select for diffs], Thu Jan 11 01:45:36 2024 UTC (4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5
Changes since 1.154: +3 -1 lines
Diff to previous 1.154 (colored)

make DSA key support compile-time optional, defaulting to on

ok markus@

Revision 1.154 / (download) - annotate - [select for diffs], Wed Dec 20 00:06:25 2023 UTC (4 months, 3 weeks ago) by jsg
Branch: MAIN
Changes since 1.153: +3 -3 lines
Diff to previous 1.153 (colored)

spelling; ok markus@

Revision 1.153 / (download) - annotate - [select for diffs], Wed Jun 21 05:06:04 2023 UTC (10 months, 3 weeks ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_4_BASE, OPENBSD_7_4
Changes since 1.152: +5 -4 lines
Diff to previous 1.152 (colored)

handle rlimits > INT_MAX (rlim_t is u64); ok dtucker
bz3581

Revision 1.152 / (download) - annotate - [select for diffs], Fri Mar 31 04:21:56 2023 UTC (13 months, 2 weeks ago) by djm
Branch: MAIN
Changes since 1.151: +5 -4 lines
Diff to previous 1.151 (colored)

don't print key if printing hostname failed; with/ok dtucker@

Revision 1.151 / (download) - annotate - [select for diffs], Fri Feb 10 06:41:53 2023 UTC (15 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE, OPENBSD_7_3
Changes since 1.150: +3 -3 lines
Diff to previous 1.150 (colored)

space between macro and punctuation;
sort usage();

Revision 1.150 / (download) - annotate - [select for diffs], Fri Feb 10 04:56:30 2023 UTC (15 months ago) by djm
Branch: MAIN
Changes since 1.149: +16 -6 lines
Diff to previous 1.149 (colored)

let ssh-keygen and ssh-keyscan accept -Ohashalg=sha1|sha256 when
outputting SSHFP fingerprints to allow algorithm selection.
bz3493 ok dtucker@

Revision 1.149 / (download) - annotate - [select for diffs], Mon Dec 26 19:16:03 2022 UTC (16 months, 2 weeks ago) by jmc
Branch: MAIN
Changes since 1.148: +2 -2 lines
Diff to previous 1.148 (colored)

spelling fixes; from paul tagliamonte
amendments to his diff are noted on tech

Revision 1.148 / (download) - annotate - [select for diffs], Sun Dec 4 23:50:49 2022 UTC (17 months, 1 week ago) by cheloha
Branch: MAIN
Changes since 1.147: +1 -2 lines
Diff to previous 1.147 (colored)

userspace: remove vestigial '?' cases from top-level getopt(3) loops

getopt(3) returns '?' when it encounters a flag not present in the in
the optstring or if a flag is missing its option argument.  We can
handle this case with the "default" failure case with no loss of
legibility.  Hence, remove all the redundant "case '?':" lines.

Prompted by dlg@.  With help from dlg@ and millert@.

Link: https://marc.info/?l=openbsd-tech&m=167011979726449&w=2

ok naddy@ millert@ dlg@

Revision 1.147 / (download) - annotate - [select for diffs], Fri Oct 28 02:29:34 2022 UTC (18 months, 2 weeks ago) by djm
Branch: MAIN
Changes since 1.146: +40 -3 lines
Diff to previous 1.146 (colored)

allow ssh-keyscan(1) to accept CIDR address ranges, e.g.
ssh-keyscan 192.168.0.0/24

If a CIDR range is passed, then it will be expanded to all possible
addresses in the range including the all-0s and all-1s addresses.

bz#976 feedback/ok markus@

Revision 1.146 / (download) - annotate - [select for diffs], Fri Aug 19 04:02:46 2022 UTC (20 months, 4 weeks ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2
Changes since 1.145: +15 -1 lines
Diff to previous 1.145 (colored)

Strictly enforce the maximum allowed SSH2 banner size in ssh-keyscan
and prevent a one-byte buffer overflow.  Patch from Qualys, ok djm@

Revision 1.145 / (download) - annotate - [select for diffs], Fri Jan 21 00:53:40 2022 UTC (2 years, 3 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE, OPENBSD_7_1
Changes since 1.144: +6 -4 lines
Diff to previous 1.144 (colored)

When poll(2) returns -1, for some error conditions pfd[].revents is
not cleared.  There are subtle errors in various programs.
In this particular case, the program should error out.
ok djm millert

Revision 1.144 / (download) - annotate - [select for diffs], Thu Dec 2 23:45:36 2021 UTC (2 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.143: +2 -2 lines
Diff to previous 1.143 (colored)

hash full host:port when asked to hash output, fixes hashes for non-
default ports. bz3367 ok dtucker@

Revision 1.143 / (download) - annotate - [select for diffs], Thu Nov 18 03:31:44 2021 UTC (2 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.142: +2 -2 lines
Diff to previous 1.142 (colored)

check for POLLHUP wherever we check for POLLIN

Revision 1.142 / (download) - annotate - [select for diffs], Fri Nov 12 05:23:49 2021 UTC (2 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.141: +3 -1 lines
Diff to previous 1.141 (colored)

aggressively pre-fill the pollfd array with fd=-1

Revision 1.141 / (download) - annotate - [select for diffs], Thu Nov 11 15:32:32 2021 UTC (2 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.140: +22 -31 lines
Diff to previous 1.140 (colored)

Convert from select() to ppoll().  Along the way, I observed that the
select() code was using exceptfds incorrectly..
ok millert

Revision 1.140 / (download) - annotate - [select for diffs], Sat Oct 2 03:17:01 2021 UTC (2 years, 7 months ago) by dtucker
Branch: MAIN
Changes since 1.139: +4 -3 lines
Diff to previous 1.139 (colored)

Dynamically allocate encoded HashKnownHosts and free as appropriate.
Saves 1k of static storage and prevents snprintf "possible truncation"
warnings from newer compilers (although in this case it's false positive
since the actual sizes are limited by the output size of the SHA1).
ok djm@

Revision 1.139 / (download) - annotate - [select for diffs], Wed Jan 27 09:26:54 2021 UTC (3 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.138: +3 -4 lines
Diff to previous 1.138 (colored)

remove global variable used to stash compat flags and use the
purpose-built ssh->compat variable instead; feedback/ok markus@

Revision 1.138 / (download) - annotate - [select for diffs], Tue Dec 29 00:59:15 2020 UTC (3 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.137: +2 -2 lines
Diff to previous 1.137 (colored)

Update/replace the experimental post-quantim hybrid key exchange
method based on Streamlined NTRU Prime (coupled with X25519).

The previous sntrup4591761x25519-sha512@tinyssh.org method is
replaced with sntrup761x25519-sha512@openssh.com. Per the authors,
sntrup4591761 was replaced almost two years ago by sntrup761.

The sntrup761 implementaion, like sntrup4591761 before it, is public
domain code extracted from the SUPERCOP cryptography benchmark
suite (https://bench.cr.yp.to/supercop.html).

Thanks for Daniel J Bernstein for guidance on algorithm selection.
Patch from Tobias Heider; feedback & ok markus@ and myself

(note this both the updated method and the one that it replaced are
disabled by default)

Revision 1.137 / (download) - annotate - [select for diffs], Mon Oct 19 08:07:08 2020 UTC (3 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.136: +2 -2 lines
Diff to previous 1.136 (colored)

fix SEGV on fatal() errors spotted by dtucker@

Revision 1.136 / (download) - annotate - [select for diffs], Sun Oct 18 11:32:02 2020 UTC (3 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.135: +5 -7 lines
Diff to previous 1.135 (colored)

use the new variant log macros instead of prepending __func__ and
appending ssh_err(r) manually; ok markus@

Revision 1.135 / (download) - annotate - [select for diffs], Sun Oct 18 11:21:59 2020 UTC (3 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.134: +3 -3 lines
Diff to previous 1.134 (colored)

variants of the log methods that append a ssherr.h string from
a supplied error code; ok markus@

Revision 1.134 / (download) - annotate - [select for diffs], Sat Oct 17 01:28:20 2020 UTC (3 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.133: +4 -4 lines
Diff to previous 1.133 (colored)

make the log functions that exit (sshlogdie(), sshfatal(), etc) have
identical signatures. Makes things a bit more consistent...

Revision 1.133 / (download) - annotate - [select for diffs], Fri Oct 16 13:24:45 2020 UTC (3 years, 7 months ago) by djm
Branch: MAIN
Changes since 1.132: +5 -4 lines
Diff to previous 1.132 (colored)

revised log infrastructure for OpenSSH

log functions receive function, filename and line number of caller.
We can use this to selectively enable logging via pattern-lists.

ok markus@

Revision 1.132 / (download) - annotate - [select for diffs], Wed Aug 12 01:23:45 2020 UTC (3 years, 9 months ago) by cheloha
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.131: +5 -13 lines
Diff to previous 1.131 (colored)

ssh-keyscan(1): simplify conloop() with timercmp(3), timersub(3); ok djm@

Revision 1.131 / (download) - annotate - [select for diffs], Sun Dec 15 19:47:10 2019 UTC (4 years, 5 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.130: +21 -3 lines
Diff to previous 1.130 (colored)

allow ssh-keyscan to find security key hostkeys

Revision 1.130 / (download) - annotate - [select for diffs], Fri Sep 6 05:23:55 2019 UTC (4 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.129: +3 -1 lines
Diff to previous 1.129 (colored)

fixes for !WITH_OPENSSL compilation; ok dtucker@

Revision 1.129 / (download) - annotate - [select for diffs], Fri Jul 12 04:08:39 2019 UTC (4 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.128: +7 -2 lines
Diff to previous 1.128 (colored)

include SHA2-variant RSA key algorithms in KEX proposal; allows
ssh-keyscan to harvest keys from servers that disable olde SHA1
ssh-rsa. bz#3029 from Jakub Jelen

Revision 1.128 / (download) - annotate - [select for diffs], Fri Jun 28 13:35:04 2019 UTC (4 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.127: +6 -6 lines
Diff to previous 1.127 (colored)

When system calls indicate an error they return -1, not some arbitrary
value < 0.  errno is only updated in this case.  Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

Revision 1.127 / (download) - annotate - [select for diffs], Thu Jun 6 05:13:13 2019 UTC (4 years, 11 months ago) by otto
Branch: MAIN
Changes since 1.126: +1 -2 lines
Diff to previous 1.126 (colored)

Replace calls to ssh_malloc_init() by a static init of malloc_options.
Prepares for changes in the way malloc is initialized.  ok guenther@ dtucker@

Revision 1.126 / (download) - annotate - [select for diffs], Sat Jan 26 22:35:01 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.125: +6 -2 lines
Diff to previous 1.125 (colored)

make ssh-keyscan return a non-zero exit status if it finds no keys.
bz#2903

Revision 1.125 / (download) - annotate - [select for diffs], Mon Jan 21 10:38:54 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.124: +9 -9 lines
Diff to previous 1.124 (colored)

merge kexkem[cs] into kexgen

from markus@ ok djm@

Revision 1.124 / (download) - annotate - [select for diffs], Mon Jan 21 10:29:56 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.123: +2 -2 lines
Diff to previous 1.123 (colored)

use KEM API for vanilla ECDH

from markus@ ok djm@

Revision 1.123 / (download) - annotate - [select for diffs], Mon Jan 21 10:28:02 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.122: +6 -6 lines
Diff to previous 1.122 (colored)

use KEM API for vanilla DH KEX

from markus@ ok djm@

Revision 1.122 / (download) - annotate - [select for diffs], Mon Jan 21 10:24:09 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.121: +2 -2 lines
Diff to previous 1.121 (colored)

use KEM API for vanilla c25519 KEX

Revision 1.121 / (download) - annotate - [select for diffs], Mon Jan 21 10:20:12 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.120: +2 -1 lines
Diff to previous 1.120 (colored)

Add support for a PQC KEX/KEM: sntrup4591761x25519-sha512@tinyssh.org
using the Streamlined NTRU Prime 4591^761 implementation from SUPERCOP
coupled with X25519 as a stop-loss. Not enabled by default.

introduce KEM API; a simplified framework for DH-ish KEX methods.

from markus@ feedback & ok djm@

Revision 1.120 / (download) - annotate - [select for diffs], Wed Jun 6 18:29:18 2018 UTC (5 years, 11 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.119: +5 -7 lines
Diff to previous 1.119 (colored)

switch config file parsing to getline(3) as this avoids static limits
noted by gerhard@; ok dtucker@, djm@

Revision 1.119 / (download) - annotate - [select for diffs], Fri Mar 2 21:40:15 2018 UTC (6 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.118: +2 -2 lines
Diff to previous 1.118 (colored)

apply a lick of paint; tweaks/ok dtucker

Revision 1.118 / (download) - annotate - [select for diffs], Fri Feb 23 15:58:38 2018 UTC (6 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.117: +10 -2 lines
Diff to previous 1.117 (colored)

Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures)
The code is not compiled in by default (see WITH_XMSS in Makefile.inc)
Joint work with stefan-lukas_gazdag at genua.eu
See https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-12
ok djm@

Revision 1.117 / (download) - annotate - [select for diffs], Fri Feb 23 05:14:05 2018 UTC (6 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.116: +16 -4 lines
Diff to previous 1.116 (colored)

Add ssh-keyscan -D option to make it print its results in SSHFP format
bz#2821, ok dtucker@

Revision 1.116 / (download) - annotate - [select for diffs], Sat Nov 25 06:46:22 2017 UTC (6 years, 5 months ago) by dtucker
Branch: MAIN
Changes since 1.115: +4 -4 lines
Diff to previous 1.115 (colored)

Add monotime_ts and monotime_tv that return monotonic timespec and
timeval respectively.  Replace calls to gettimeofday() in packet timing
with monotime_tv so that the callers will work over a clock step.
Should prevent integer overflow during clock steps reported by wangle6
at huawei.com. "I like" markus@

Revision 1.115 / (download) - annotate - [select for diffs], Fri Jun 30 04:17:23 2017 UTC (6 years, 10 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.114: +3 -3 lines
Diff to previous 1.114 (colored)

Only call close once in confree().  ssh_packet_close will close the FD
so only explicitly close non-SSH channels.  bz#2734, from
bagajjal at microsoft.com, ok djm@

Revision 1.114 / (download) - annotate - [select for diffs], Wed May 31 07:00:13 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.113: +2 -2 lines
Diff to previous 1.113 (colored)

remove now obsolete ctx from ssh_dispatch_run; ok djm@

Revision 1.113 / (download) - annotate - [select for diffs], Sun Apr 30 23:28:42 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.112: +1 -2 lines
Diff to previous 1.112 (colored)

obliterate ssh1.h and some dead code that used it

ok markus@

Revision 1.112 / (download) - annotate - [select for diffs], Sun Apr 30 23:18:44 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.111: +28 -36 lines
Diff to previous 1.111 (colored)

remove KEY_RSA1

ok markus@

Revision 1.111 / (download) - annotate - [select for diffs], Sun Apr 30 23:13:25 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.110: +1 -2 lines
Diff to previous 1.110 (colored)

remove compat20/compat13/compat15 variables

ok markus@

Revision 1.110 / (download) - annotate - [select for diffs], Sun Apr 30 23:10:43 2017 UTC (7 years ago) by djm
Branch: MAIN
Changes since 1.109: +1 -58 lines
Diff to previous 1.109 (colored)

unifdef WITH_SSH1
ok markus@

Revision 1.109 / (download) - annotate - [select for diffs], Fri Mar 10 04:26:06 2017 UTC (7 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.108: +2 -1 lines
Diff to previous 1.108 (colored)

ensure hostname is lower-case before hashing it; bz#2591 reported by
Griff Miller II; ok dtucker@

Revision 1.108 / (download) - annotate - [select for diffs], Fri Mar 10 03:18:24 2017 UTC (7 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.107: +7 -6 lines
Diff to previous 1.107 (colored)

correctly hash hosts with a port number. Reported by Josh Powers in
bz#2692; ok dtucker@

Revision 1.107 / (download) - annotate - [select for diffs], Fri Jan 6 03:41:58 2017 UTC (7 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.106: +6 -2 lines
Diff to previous 1.106 (colored)

Avoid confusing error message when attempting to use ssh-keyscan built
without SSH protocol v.1 to scan for v.1 keys; bz#2583

Revision 1.106 / (download) - annotate - [select for diffs], Mon May 2 10:26:04 2016 UTC (8 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.105: +4 -1 lines
Diff to previous 1.105 (colored)

add support for additional fixed DH groups from
draft-ietf-curdle-ssh-kex-sha2-03

diffie-hellman-group14-sha256 (2K group)
diffie-hellman-group16-sha512 (4K group)
diffie-hellman-group18-sha512 (8K group)

based on patch from Mark D. Baushke and Darren Tucker
ok markus@

Revision 1.105 / (download) - annotate - [select for diffs], Mon Feb 15 09:47:49 2016 UTC (8 years, 3 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.104: +2 -1 lines
Diff to previous 1.104 (colored)

Add a function to enable security-related malloc_options.  With and ok
deraadt@, something similar has been in the snaps for a while.

Revision 1.104 / (download) - annotate - [select for diffs], Sun Nov 8 23:24:03 2015 UTC (8 years, 6 months ago) by jmc
Branch: MAIN
Changes since 1.103: +2 -2 lines
Diff to previous 1.103 (colored)

-c before -H, in SYNOPSIS and usage();

Revision 1.103 / (download) - annotate - [select for diffs], Sun Nov 8 22:30:20 2015 UTC (8 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.102: +37 -10 lines
Diff to previous 1.102 (colored)

Add "ssh-keyscan -c ..." flag to allow fetching certificates instead
of plain keys; ok markus@

Revision 1.102 / (download) - annotate - [select for diffs], Sat Oct 24 22:56:19 2015 UTC (8 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.101: +21 -6 lines
Diff to previous 1.101 (colored)

fix keyscan output for multiple hosts/addrs on one line when
host hashing or a non standard port is in use; bz#2479 ok dtucker@

Revision 1.101 / (download) - annotate - [select for diffs], Fri Apr 10 00:08:55 2015 UTC (9 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.100: +6 -3 lines
Diff to previous 1.100 (colored)

include port number if a non-default one has been specified;
based on patch from Michael Handler

Revision 1.100 / (download) - annotate - [select for diffs], Sun Apr 5 15:43:43 2015 UTC (9 years, 1 month ago) by miod
Branch: MAIN
Changes since 1.99: +2 -2 lines
Diff to previous 1.99 (colored)

Do not use int for sig_atomic_t; spotted by christos@netbsd; ok markus@

Revision 1.99 / (download) - annotate - [select for diffs], Fri Jan 30 10:44:49 2015 UTC (9 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.98: +2 -1 lines
Diff to previous 1.98 (colored)

set a timeout to prevent hangs when talking to busted servers;
ok markus@

Revision 1.98 / (download) - annotate - [select for diffs], Fri Jan 30 01:13:33 2015 UTC (9 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.97: +3 -2 lines
Diff to previous 1.97 (colored)

avoid more fatal/exit in the packet.c paths that ssh-keyscan
uses; feedback and "looks good" markus@

Revision 1.97 / (download) - annotate - [select for diffs], Wed Jan 28 21:15:47 2015 UTC (9 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.96: +5 -3 lines
Diff to previous 1.96 (colored)

avoid fatal() calls in packet code
makes ssh-keyscan more reliable against server failures
ok dtucker@ markus@

Revision 1.96 / (download) - annotate - [select for diffs], Tue Jan 20 23:14:00 2015 UTC (9 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.95: +1 -2 lines
Diff to previous 1.95 (colored)

Reduce use of <sys/param.h> and transition to <limits.h> throughout.
ok djm markus

Revision 1.95 / (download) - annotate - [select for diffs], Mon Jan 19 20:32:39 2015 UTC (9 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.94: +81 -68 lines
Diff to previous 1.94 (colored)

switch ssh-keyscan from setjmp to multiple ssh transport layer instances
ok djm@

Revision 1.94 / (download) - annotate - [select for diffs], Mon Jan 19 20:16:15 2015 UTC (9 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.93: +8 -6 lines
Diff to previous 1.93 (colored)

adapt kex to sshbuf and struct ssh; ok djm@

Revision 1.93 / (download) - annotate - [select for diffs], Thu Dec 11 08:20:09 2014 UTC (9 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.92: +2 -1 lines
Diff to previous 1.92 (colored)

explicitly include sys/param.h in files that use the howmany() macro;
from portable

Revision 1.92 / (download) - annotate - [select for diffs], Tue Apr 29 18:01:49 2014 UTC (10 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.91: +7 -1 lines
Diff to previous 1.91 (colored)

make compiling against OpenSSL optional (make OPENSSL=no);
reduces algorithms to curve25519, aes-ctr, chacha, ed25519;
allows us to explore further options; with and ok djm

Revision 1.91 / (download) - annotate - [select for diffs], Thu Mar 27 23:01:27 2014 UTC (10 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.90: +2 -1 lines
Diff to previous 1.90 (colored)

disable weak proposals in sshd, but keep them in ssh; ok djm@

Revision 1.90 / (download) - annotate - [select for diffs], Wed Mar 12 04:44:58 2014 UTC (10 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.89: +2 -2 lines
Diff to previous 1.89 (colored)

scan for Ed25519 keys by default too

Revision 1.89 / (download) - annotate - [select for diffs], Fri Dec 6 13:39:49 2013 UTC (10 years, 5 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.88: +11 -5 lines
Diff to previous 1.88 (colored)

support ed25519 keys (hostkeys and user identities) using the public domain
ed25519 reference code from SUPERCOP, see http://ed25519.cr.yp.to/software.html
feedback, help & ok djm@

Revision 1.88 / (download) - annotate - [select for diffs], Sat Nov 2 21:59:15 2013 UTC (10 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.87: +2 -1 lines
Diff to previous 1.87 (colored)

use curve25519 for default key exchange (curve25519-sha256@libssh.org);
initial patch from Aris Adamantiadis; ok djm@

Revision 1.87 / (download) - annotate - [select for diffs], Fri May 17 00:13:14 2013 UTC (11 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.86: +8 -8 lines
Diff to previous 1.86 (colored)

bye, bye xfree(); ok markus@

Revision 1.86 / (download) - annotate - [select for diffs], Wed Apr 11 13:34:17 2012 UTC (12 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2
Changes since 1.85: +2 -2 lines
Diff to previous 1.85 (colored)

now that sshd defaults to offering ECDSA keys, ssh-keyscan should also
look for them by default; bz#1971

Revision 1.85 / (download) - annotate - [select for diffs], Tue Mar 15 10:36:02 2011 UTC (13 years, 2 months ago) by okan
Branch: MAIN
CVS Tags: OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.84: +2 -2 lines
Diff to previous 1.84 (colored)

use timerclear macro

ok djm@

Revision 1.84 / (download) - annotate - [select for diffs], Tue Jan 4 20:44:13 2011 UTC (13 years, 4 months ago) by otto
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.83: +4 -3 lines
Diff to previous 1.83 (colored)

handle ecdsa-sha2 with various key lengths; hint and ok djm@

Revision 1.83 / (download) - annotate - [select for diffs], Tue Aug 31 11:54:45 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.82: +9 -4 lines
Diff to previous 1.82 (colored)

Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and
host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer
better performance than plain DH and DSA at the same equivalent symmetric
key length, as well as much shorter keys.

Only the mandatory sections of RFC5656 are implemented, specifically the
three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and
ECDSA. Point compression (optional in RFC5656 is NOT implemented).

Certificate host and user keys using the new ECDSA key types are supported.

Note that this code has not been tested for interoperability and may be
subject to change.

feedback and ok markus@

Revision 1.82 / (download) - annotate - [select for diffs], Tue Jun 22 04:54:30 2010 UTC (13 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.81: +37 -130 lines
Diff to previous 1.81 (colored)

replace verbose and overflow-prone Linebuf code with read_keyfile_line()
based on patch from joachim AT joachimschipper.nl; bz#1565; ok dtucker@

Revision 1.81 / (download) - annotate - [select for diffs], Sat Jan 9 23:04:13 2010 UTC (14 years, 4 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.80: +4 -15 lines
Diff to previous 1.80 (colored)

Remove RoutingDomain from ssh since it's now not needed.  It can be replaced
with "route exec" or "nc -V" as a proxycommand.  "route exec" also ensures
that trafic such as DNS lookups stays withing the specified routingdomain.

For example (from reyk):
# route -T 2 exec /usr/sbin/sshd
or inherited from the parent process
$ route -T 2 exec sh
$ ssh 10.1.2.3

ok deraadt@ markus@ stevesk@ reyk@

Revision 1.80 / (download) - annotate - [select for diffs], Fri Dec 25 19:40:21 2009 UTC (14 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.79: +6 -4 lines
Diff to previous 1.79 (colored)

validate routing domain is in range 0-RT_TABLEID_MAX.
'Looks right' deraadt@

Revision 1.79 / (download) - annotate - [select for diffs], Wed Oct 28 16:38:18 2009 UTC (14 years, 6 months ago) by reyk
Branch: MAIN
Changes since 1.78: +13 -4 lines
Diff to previous 1.78 (colored)

Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan.

ok markus@

Revision 1.78 / (download) - annotate - [select for diffs], Thu Jan 22 10:02:34 2009 UTC (15 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5
Changes since 1.77: +2 -2 lines
Diff to previous 1.77 (colored)

make a2port() return -1 when it encounters an invalid port number
rather than 0, which it will now treat as valid (needed for future work)

adjust current consumers of a2port() to check its return value is <= 0,
which in turn required some things to be converted from u_short => int

make use of int vs. u_short consistent in some other places too

feedback & ok markus@

Revision 1.77 / (download) - annotate - [select for diffs], Sat Nov 1 11:14:36 2008 UTC (15 years, 6 months ago) by sobrado
Branch: MAIN
Changes since 1.76: +4 -3 lines
Diff to previous 1.76 (colored)

the ellipsis is not an optional argument; while here, improve spacing.

Revision 1.76 / (download) - annotate - [select for diffs], Wed Apr 30 10:14:03 2008 UTC (16 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.75: +2 -2 lines
Diff to previous 1.75 (colored)

default to rsa (protocol 2) keys, instead of rsa1 keys; spotted by
larsnooden AT openoffice.org

Revision 1.75 / (download) - annotate - [select for diffs], Thu Dec 27 14:22:08 2007 UTC (16 years, 4 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.74: +2 -2 lines
Diff to previous 1.74 (colored)

Add a small helper function to consistently handle the EAI_SYSTEM error
code of getaddrinfo.  Prompted by vgiffin at apple com via bz #1417.
ok markus@ stevesk@

Revision 1.55.2.3 / (download) - annotate - [select for diffs], Wed Nov 8 00:44:05 2006 UTC (17 years, 6 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.55.2.2: +1 -1 lines
Diff to previous 1.55.2.2 (colored) to branchpoint 1.55 (colored) next main 1.56 (colored)

upgrade to OpenSSH 4.5

Revision 1.73.4.1 / (download) - annotate - [select for diffs], Wed Nov 8 00:42:11 2006 UTC (17 years, 6 months ago) by brad
Branch: OPENBSD_4_0
Changes since 1.73: +2 -2 lines
Diff to previous 1.73 (colored) next main 1.74 (colored)

upgrade to OpenSSH 4.5

Revision 1.59.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 00:17:14 2006 UTC (17 years, 6 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.59.2.1: +2 -2 lines
Diff to previous 1.59.2.1 (colored) to branchpoint 1.59 (colored) next main 1.60 (colored)

upgrade to OpenSSH 4.5

Revision 1.55.2.2 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:33 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.55.2.1: +26 -18 lines
Diff to previous 1.55.2.1 (colored) to branchpoint 1.55 (colored)

upgrade to OpenSSH 4.4

Revision 1.74 / (download) - annotate - [select for diffs], Fri Oct 6 02:29:19 2006 UTC (17 years, 7 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1
Changes since 1.73: +2 -2 lines
Diff to previous 1.73 (colored)

sys/resource.h needs sys/time.h; prompted by brad@

Revision 1.59.2.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:51 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.59: +25 -19 lines
Diff to previous 1.59 (colored)

upgrade to OpenSSH 4.4

Revision 1.73 / (download) - annotate - [select for diffs], Thu Aug 3 03:34:42 2006 UTC (17 years, 9 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_0_BASE
Branch point for: OPENBSD_4_0
Changes since 1.72: +4 -5 lines
Diff to previous 1.72 (colored)

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

Revision 1.72 / (download) - annotate - [select for diffs], Tue Aug 1 23:22:47 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.71: +2 -1 lines
Diff to previous 1.71 (colored)

move #include <stdio.h> out of includes.h

Revision 1.71 / (download) - annotate - [select for diffs], Wed Jul 26 13:57:17 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.70: +2 -1 lines
Diff to previous 1.70 (colored)

move #include <stdlib.h> out of includes.h

Revision 1.70 / (download) - annotate - [select for diffs], Tue Jul 25 02:59:21 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.69: +2 -1 lines
Diff to previous 1.69 (colored)

move #include <sys/time.h> out of includes.h

Revision 1.69 / (download) - annotate - [select for diffs], Sat Jul 22 20:48:23 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.68: +4 -3 lines
Diff to previous 1.68 (colored)

move #include <string.h> out of includes.h

Revision 1.68 / (download) - annotate - [select for diffs], Mon Jul 17 01:31:10 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.67: +2 -1 lines
Diff to previous 1.67 (colored)

move #include <unistd.h> out of includes.h

Revision 1.67 / (download) - annotate - [select for diffs], Wed Jul 12 22:28:52 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.66: +2 -1 lines
Diff to previous 1.66 (colored)

move #include <netdb.h> out of includes.h; ok djm@

Revision 1.66 / (download) - annotate - [select for diffs], Mon Jul 10 16:37:36 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.65: +2 -1 lines
Diff to previous 1.65 (colored)

move #include <stdarg.h> out of includes.h; ok markus@

Revision 1.65 / (download) - annotate - [select for diffs], Sat Jul 8 21:47:12 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.64: +3 -1 lines
Diff to previous 1.64 (colored)

move #include <sys/socket.h> out of includes.h

Revision 1.64 / (download) - annotate - [select for diffs], Sat Mar 25 13:17:02 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.63: +1 -0 lines
Diff to previous 1.63 (colored)

Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
Theo nuked - our scripts to sync -portable need them in the files

Revision 1.63 / (download) - annotate - [select for diffs], Sat Mar 25 00:05:41 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.62: +8 -10 lines
Diff to previous 1.62 (colored)

introduce xcalloc() and xasprintf() failure-checked allocations functions
and use them throughout openssh

xcalloc is particularly important because malloc(nmemb * size) is a
dangerous idiom (subject to integer overflow) and it is time for it to
die

feedback and ok deraadt@

Revision 1.62 / (download) - annotate - [select for diffs], Sun Mar 19 18:59:49 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.61: +1 -2 lines
Diff to previous 1.61 (colored)

please lint

Revision 1.61 / (download) - annotate - [select for diffs], Sun Mar 19 18:51:18 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.60: +0 -1 lines
Diff to previous 1.60 (colored)

RCSID() can die

Revision 1.60 / (download) - annotate - [select for diffs], Tue Mar 7 09:07:40 2006 UTC (18 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.59: +2 -1 lines
Diff to previous 1.59 (colored)

Implement the diffie-hellman-group-exchange-sha256 key exchange method
using the SHA256 code in libc (and wrapper to make it into an OpenSSL
EVP), interop tested against CVS PuTTY

Revision 1.59 / (download) - annotate - [select for diffs], Wed Feb 8 14:31:30 2006 UTC (18 years, 3 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE
Branch point for: OPENBSD_3_9
Changes since 1.58: +2 -1 lines
Diff to previous 1.58 (colored)

move #include <sys/resource.h> out of includes.h; ok markus@

Revision 1.58 / (download) - annotate - [select for diffs], Tue Feb 7 01:18:09 2006 UTC (18 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.57: +3 -2 lines
Diff to previous 1.57 (colored)

move #include <sys/queue.h> out of includes.h; ok markus@

Revision 1.55.2.1 / (download) - annotate - [select for diffs], Fri Feb 3 03:01:57 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.55: +16 -7 lines
Diff to previous 1.55 (colored)

upgrade to OpenSSH 4.3

Revision 1.52.2.2 / (download) - annotate - [select for diffs], Fri Feb 3 02:53:45 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.52.2.1: +16 -7 lines
Diff to previous 1.52.2.1 (colored) to branchpoint 1.52 (colored) next main 1.53 (colored)

upgrade to OpenSSH 4.3

Revision 1.57 / (download) - annotate - [select for diffs], Sun Oct 30 04:01:03 2005 UTC (18 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.56: +13 -7 lines
Diff to previous 1.56 (colored)

make ssh-keygen discard junk from server before SSH- ident, spotted by
dave AT cirt.net; ok dtucker@

Revision 1.56 / (download) - annotate - [select for diffs], Tue Sep 13 23:40:07 2005 UTC (18 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.55: +4 -1 lines
Diff to previous 1.55 (colored)

ensure that stdio fds are attached; ok deraadt@

Revision 1.52.2.1 / (download) - annotate - [select for diffs], Sun Sep 4 18:40:10 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.52: +21 -13 lines
Diff to previous 1.52 (colored)

upgrade to OpenSSH 4.2

Revision 1.50.2.2 / (download) - annotate - [select for diffs], Fri Sep 2 03:45:01 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.50.2.1: +21 -13 lines
Diff to previous 1.50.2.1 (colored) to branchpoint 1.50 (colored) next main 1.51 (colored)

upgrade to OpenSSH 4.2

Revision 1.55 / (download) - annotate - [select for diffs], Fri Jun 17 02:44:33 2005 UTC (18 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE
Branch point for: OPENBSD_3_8
Changes since 1.54: +6 -6 lines
Diff to previous 1.54 (colored)

make this -Wsign-compare clean; ok avsm@ markus@

Revision 1.54 / (download) - annotate - [select for diffs], Tue May 24 17:32:44 2005 UTC (18 years, 11 months ago) by avsm
Branch: MAIN
Changes since 1.53: +15 -12 lines
Diff to previous 1.53 (colored)

Switch atomicio to use a simpler interface; it now returns a size_t
(containing number of bytes read/written), and indicates error by
returning 0.  EOF is signalled by errno==EPIPE.
Typical use now becomes:

if (atomicio(read, ..., len) != len)
        err(1,"read");

ok deraadt@, cloder@, djm@

Revision 1.53 / (download) - annotate - [select for diffs], Thu Apr 28 10:17:56 2005 UTC (19 years ago) by moritz
Branch: MAIN
Changes since 1.52: +6 -1 lines
Diff to previous 1.52 (colored)

add snprintf checks. ok djm@ markus@

Revision 1.47.2.2 / (download) - annotate - [select for diffs], Thu Mar 10 17:15:05 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.47.2.1: +14 -4 lines
Diff to previous 1.47.2.1 (colored) to branchpoint 1.47 (colored) next main 1.48 (colored)

upgrade to OpenSSH 4.0

Revision 1.50.2.1 / (download) - annotate - [select for diffs], Thu Mar 10 16:28:28 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.50: +14 -4 lines
Diff to previous 1.50 (colored)

upgrade to OpenSSH 4.0

Revision 1.52 / (download) - annotate - [select for diffs], Tue Mar 1 15:47:14 2005 UTC (19 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE
Branch point for: OPENBSD_3_7
Changes since 1.51: +2 -2 lines
Diff to previous 1.51 (colored)

sort options and sync usage();

Revision 1.51 / (download) - annotate - [select for diffs], Tue Mar 1 10:41:28 2005 UTC (19 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.50: +14 -4 lines
Diff to previous 1.50 (colored)

option to hash hostnames output by ssh-keyscan; ok markus@ deraadt@

Revision 1.44.2.2 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:32 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.44.2.1: +7 -6 lines
Diff to previous 1.44.2.1 (colored) to branchpoint 1.44 (colored) next main 1.45 (colored)

upgrade to OpenSSH 3.9

Revision 1.47.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:27 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.47: +6 -5 lines
Diff to previous 1.47 (colored)

upgrade to OpenSSH 3.9

Revision 1.50 / (download) - annotate - [select for diffs], Wed Aug 11 21:44:32 2004 UTC (19 years, 9 months ago) by avsm
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_6
Changes since 1.49: +3 -3 lines
Diff to previous 1.49 (colored)

use atomicio instead of homegrown equivalents or read/write.
markus@ ok

Revision 1.49 / (download) - annotate - [select for diffs], Mon Jun 14 01:44:39 2004 UTC (19 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.48: +3 -3 lines
Diff to previous 1.48 (colored)

set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@

Revision 1.48 / (download) - annotate - [select for diffs], Sun Jun 13 12:53:24 2004 UTC (19 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.47: +2 -1 lines
Diff to previous 1.47 (colored)

implement diffie-hellman-group14-sha1 kex method (trivial extension to
existing diffie-hellman-group1-sha1); ok markus@

Revision 1.47 / (download) - annotate - [select for diffs], Mon Mar 8 09:38:05 2004 UTC (20 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_5
Changes since 1.46: +2 -2 lines
Diff to previous 1.46 (colored)

explicitly initialise remote_major and remote_minor.
from cjwatson AT debian.org; ok markus@

Revision 1.41.2.2 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:16 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.41.2.1: +3 -3 lines
Diff to previous 1.41.2.1 (colored) to branchpoint 1.41 (colored) next main 1.42 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.44.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:34 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.44: +3 -3 lines
Diff to previous 1.44 (colored)

upgrade to OpenSSH 3.8

Revision 1.46 / (download) - annotate - [select for diffs], Sun Nov 23 23:17:34 2003 UTC (20 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.45: +2 -2 lines
Diff to previous 1.45 (colored)

from portable - use sysconf to detect fd limit; ok markus@

Revision 1.45 / (download) - annotate - [select for diffs], Fri Sep 19 11:30:39 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.44: +2 -2 lines
Diff to previous 1.44 (colored)

avoid fatal_cleanup, just call exit(); ok deraadt

Revision 1.40.2.2 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:28 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.40.2.1: +4 -4 lines
Diff to previous 1.40.2.1 (colored) to branchpoint 1.40 (colored) next main 1.41 (colored)

upgrade to OpenSSH 3.7

Revision 1.41.2.1 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:44 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.41: +4 -4 lines
Diff to previous 1.41 (colored)

upgrade to OpenSSH 3.7

Revision 1.44 / (download) - annotate - [select for diffs], Sat Jun 28 16:23:06 2003 UTC (20 years, 10 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.43: +2 -2 lines
Diff to previous 1.43 (colored)

deal with typing of write vs read in atomicio

Revision 1.43 / (download) - annotate - [select for diffs], Sat Apr 26 04:29:49 2003 UTC (21 years ago) by deraadt
Branch: MAIN
Changes since 1.42: +2 -2 lines
Diff to previous 1.42 (colored)

-t in usage(); rogier@quaak.org

Revision 1.42 / (download) - annotate - [select for diffs], Mon Apr 14 14:17:50 2003 UTC (21 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.41: +2 -2 lines
Diff to previous 1.41 (colored)

avoid hardcoded SOCK_xx; with itojun@; should allow ssh over SCTP

Revision 1.35.2.3 / (download) - annotate - [select for diffs], Thu Apr 3 22:35:18 2003 UTC (21 years, 1 month ago) by miod
Branch: OPENBSD_3_1
Changes since 1.35.2.2: +3 -1 lines
Diff to previous 1.35.2.2 (colored) to branchpoint 1.35 (colored) next main 1.36 (colored)

Merge OpenSSH 3.6.1

Revision 1.40.2.1 / (download) - annotate - [select for diffs], Tue Apr 1 00:12:14 2003 UTC (21 years, 1 month ago) by margarida
Branch: OPENBSD_3_2
Changes since 1.40: +3 -1 lines
Diff to previous 1.40 (colored)

Update to OpenSSH 3.6

Revision 1.41 / (download) - annotate - [select for diffs], Sun Feb 16 17:09:57 2003 UTC (21 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE
Branch point for: OPENBSD_3_3
Changes since 1.40: +3 -1 lines
Diff to previous 1.40 (colored)

split kex into client and server code, no need to link
server code into the client; ok provos@

Revision 1.30.2.3 / (download) - annotate - [select for diffs], Fri Oct 11 14:53:07 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.30.2.2: +25 -23 lines
Diff to previous 1.30.2.2 (colored) to branchpoint 1.30 (colored) next main 1.31 (colored)

Update to OpenSSH 3.5

Revision 1.35.2.2 / (download) - annotate - [select for diffs], Fri Oct 11 14:51:53 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_1
Changes since 1.35.2.1: +25 -23 lines
Diff to previous 1.35.2.1 (colored) to branchpoint 1.35 (colored)

Update to OpenSSH 3.5

Revision 1.40 / (download) - annotate - [select for diffs], Sat Jul 6 17:47:58 2002 UTC (21 years, 10 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_2
Changes since 1.39: +1 -2 lines
Diff to previous 1.39 (colored)

unused variable

Revision 1.39 / (download) - annotate - [select for diffs], Sat Jul 6 01:01:26 2002 UTC (21 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.38: +20 -20 lines
Diff to previous 1.38 (colored)

KNF, realloc fix, and clean usage

Revision 1.38 / (download) - annotate - [select for diffs], Thu Jun 27 19:49:08 2002 UTC (21 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.37: +5 -3 lines
Diff to previous 1.37 (colored)

use convtime(); ok markus@

Revision 1.37 / (download) - annotate - [select for diffs], Thu Jun 27 08:49:44 2002 UTC (21 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.36: +3 -2 lines
Diff to previous 1.36 (colored)

more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@

Revision 1.35.2.1 / (download) - annotate - [select for diffs], Wed Jun 26 15:30:39 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.35: +4 -4 lines
Diff to previous 1.35 (colored)

Pull in OpenSSH-3.4

Revision 1.30.2.2 / (download) - annotate - [select for diffs], Sat Jun 22 07:23:18 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.30.2.1: +4 -4 lines
Diff to previous 1.30.2.1 (colored) to branchpoint 1.30 (colored)

Update OpenSSH to version 3.3 (with local changes, configuration files still
living in /etc and privsep user being nobody).

Revision 1.36 / (download) - annotate - [select for diffs], Sun Jun 16 21:30:58 2002 UTC (21 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.35: +4 -4 lines
Diff to previous 1.35 (colored)

use TAILQ_xx macro.  from lukem@netbsd.  markus ok

Revision 1.22.4.3 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:45 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.22.4.2: +31 -17 lines
Diff to previous 1.22.4.2 (colored) to branchpoint 1.22 (colored) next main 1.23 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.16.2.7 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:43 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.16.2.6: +31 -17 lines
Diff to previous 1.16.2.6 (colored) next main 1.17 (colored)

Merge OpenSSH 3.1.

Revision 1.30.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:47 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.30: +31 -17 lines
Diff to previous 1.30 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.35 / (download) - annotate - [select for diffs], Mon Mar 4 18:30:23 2002 UTC (22 years, 2 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.34: +6 -1 lines
Diff to previous 1.34 (colored)

handle connection close during read of protocol version string.
fixes erroneous "bad greeting".  ok markus@

Revision 1.34 / (download) - annotate - [select for diffs], Fri Feb 22 12:20:34 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.33: +12 -7 lines
Diff to previous 1.33 (colored)

overwrite fatal() in ssh-keyscan.c; fixes pr 2354; ok provos@

Revision 1.33 / (download) - annotate - [select for diffs], Mon Dec 10 20:34:31 2001 UTC (22 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.32: +12 -10 lines
Diff to previous 1.32 (colored)

check that server supports v1 for -t rsa1, report from wirth@dfki.de

Revision 1.32 / (download) - annotate - [select for diffs], Thu Nov 22 05:27:29 2001 UTC (22 years, 5 months ago) by stevesk
Branch: MAIN
Changes since 1.31: +2 -2 lines
Diff to previous 1.31 (colored)

don't use "\n" in fatal()

Revision 1.31 / (download) - annotate - [select for diffs], Fri Nov 16 12:46:13 2001 UTC (22 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.30: +3 -1 lines
Diff to previous 1.30 (colored)

handle empty lines instead of dumping core; report from sha@sha-1.net

Revision 1.22.4.2 / (download) - annotate - [select for diffs], Thu Nov 15 00:15:19 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.22.4.1: +1 -5 lines
Diff to previous 1.22.4.1 (colored) to branchpoint 1.22 (colored)

Merge OpenSSH 3.0

Revision 1.16.2.6 / (download) - annotate - [select for diffs], Thu Nov 15 00:15:00 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.16.2.5: +1 -5 lines
Diff to previous 1.16.2.5 (colored)

Merge OpenSSH 3.0

Revision 1.30 / (download) - annotate - [select for diffs], Mon Oct 8 19:05:05 2001 UTC (22 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.29: +1 -5 lines
Diff to previous 1.29 (colored)

some more IPv4or6 cleanup

Revision 1.22.4.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:55 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.22: +264 -107 lines
Diff to previous 1.22 (colored)

Pull in OpenSSH-2.9.9

Revision 1.16.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:42 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.16.2.4: +264 -107 lines
Diff to previous 1.16.2.4 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.29 / (download) - annotate - [select for diffs], Thu Aug 30 22:22:32 2001 UTC (22 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.28: +5 -5 lines
Diff to previous 1.28 (colored)

do not pass pointers to longjmp; fix from wayne@blorf.net

Revision 1.28 / (download) - annotate - [select for diffs], Mon Aug 27 22:02:13 2001 UTC (22 years, 8 months ago) by danh
Branch: MAIN
Changes since 1.27: +3 -1 lines
Diff to previous 1.27 (colored)

fix memory fault if non-existent filename is given to the -f option

ok markus@

Revision 1.27 / (download) - annotate - [select for diffs], Sun Aug 5 23:29:58 2001 UTC (22 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.26: +6 -3 lines
Diff to previous 1.26 (colored)

make -t dsa work with commercial servers, too

Revision 1.26 / (download) - annotate - [select for diffs], Sun Aug 5 23:18:20 2001 UTC (22 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.25: +232 -85 lines
Diff to previous 1.25 (colored)

ssh 2 support; from wayned@users.sourceforge.net

Revision 1.25 / (download) - annotate - [select for diffs], Fri Aug 3 10:31:30 2001 UTC (22 years, 9 months ago) by jakob
Branch: MAIN
Changes since 1.24: +7 -3 lines
Diff to previous 1.24 (colored)

improve usage(). ok markus@

Revision 1.24 / (download) - annotate - [select for diffs], Sat Jun 23 15:12:20 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.23: +23 -21 lines
Diff to previous 1.23 (colored)

more strict prototypes.  raise warning level in Makefile.inc.  markus ok'ed
TODO; cleanup headers

Revision 1.23 / (download) - annotate - [select for diffs], Tue Jun 5 05:05:39 2001 UTC (22 years, 11 months ago) by pvalchev
Branch: MAIN
Changes since 1.22: +2 -3 lines
Diff to previous 1.22 (colored)

License clarification from David Mazieres, ok deraadt@

Revision 1.16.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:36 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.16.2.3: +0 -0 lines
Diff to previous 1.16.2.3 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.16.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:30 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.16.2.2: +62 -39 lines
Diff to previous 1.16.2.2 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.22.2.2 / (download) - annotate - [select for diffs], Wed Mar 21 18:53:10 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.22.2.1: +62 -39 lines
Diff to previous 1.22.2.1 (colored) to branchpoint 1.22 (colored) next main 1.23 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.22.2.1 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:16 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.22: +39 -62 lines
Diff to previous 1.22 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.22 / (download) - annotate - [select for diffs], Tue Mar 6 06:11:18 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9, OPENBSD_2_7
Changes since 1.21: +2 -2 lines
Diff to previous 1.21 (colored)

appease gcc

Revision 1.21 / (download) - annotate - [select for diffs], Tue Mar 6 01:06:03 2001 UTC (23 years, 2 months ago) by millert
Branch: MAIN
Changes since 1.20: +9 -5 lines
Diff to previous 1.20 (colored)

Don't assume we wil get the version string all in one read().
deraadt@ OK'd

Revision 1.20 / (download) - annotate - [select for diffs], Mon Mar 5 15:37:27 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.19: +10 -10 lines
Diff to previous 1.19 (colored)

skip inlining, why bother

Revision 1.19 / (download) - annotate - [select for diffs], Sat Mar 3 21:19:41 2001 UTC (23 years, 2 months ago) by millert
Branch: MAIN
Changes since 1.18: +20 -9 lines
Diff to previous 1.18 (colored)

Dynamically allocate read_wait and its copies.  Since maxfd is
baed on resource limits it is often (usually?) larger than FD_SETSIZE.

Revision 1.18 / (download) - annotate - [select for diffs], Sat Mar 3 06:53:12 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.17: +18 -14 lines
Diff to previous 1.17 (colored)

standard theo sweep

Revision 1.17 / (download) - annotate - [select for diffs], Wed Feb 21 07:37:04 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.16: +14 -10 lines
Diff to previous 1.16 (colored)

inline -> __inline__, and some indent

Revision 1.16.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:31 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.16.2.1: +0 -0 lines
Diff to previous 1.16.2.1 (colored)

Pull in OpenSSH-2.5.1

Revision 1.16.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:19 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.16: +1 -1 lines
Diff to previous 1.16 (colored)

Pull in OpenSSH 2.5.0

Revision 1.16 / (download) - annotate - [select for diffs], Mon Feb 12 22:56:10 2001 UTC (23 years, 3 months ago) by deraadt
Branch: MAIN
Branch point for: OPENBSD_2_8
Changes since 1.15: +5 -2 lines
Diff to previous 1.15 (colored)

deal with EAGAIN/EINTR selects which were skipped

Revision 1.15 / (download) - annotate - [select for diffs], Fri Feb 9 09:04:59 2001 UTC (23 years, 3 months ago) by itojun
Branch: MAIN
Changes since 1.14: +2 -1 lines
Diff to previous 1.14 (colored)

do not assume malloc() returns zero-filled region.  found by malloc.conf=AJ.

Revision 1.14 / (download) - annotate - [select for diffs], Wed Feb 7 22:43:16 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.13: +3 -3 lines
Diff to previous 1.13 (colored)

s/getline/Linebuf_getline/; from roumen.petrov@skalasoft.com

Revision 1.13 / (download) - annotate - [select for diffs], Wed Feb 7 18:04:50 2001 UTC (23 years, 3 months ago) by itojun
Branch: MAIN
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (colored)

fix size_t -> int cast (use u_long).  markus ok

Revision 1.12 / (download) - annotate - [select for diffs], Sun Feb 4 15:32:26 2001 UTC (23 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.11: +2 -2 lines
Diff to previous 1.11 (colored)

unexpand and remove end-of-line whitespace; ok markus@

Revision 1.11 / (download) - annotate - [select for diffs], Sun Jan 21 19:05:57 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.10: +2 -3 lines
Diff to previous 1.10 (colored)

split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.
rename util.[ch] -> misc.[ch]

Revision 1.10 / (download) - annotate - [select for diffs], Fri Jan 19 15:55:11 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.9: +2 -1 lines
Diff to previous 1.9 (colored)

move ssh1 definitions to ssh1.h, pathnames to pathnames.h

Revision 1.9 / (download) - annotate - [select for diffs], Sat Jan 13 18:12:47 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.8: +12 -12 lines
Diff to previous 1.8 (colored)

free() -> xfree(); fix memory leak; from stevesk@pobox.com

Revision 1.8 / (download) - annotate - [select for diffs], Sat Jan 13 18:06:54 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.7: +2 -3 lines
Diff to previous 1.7 (colored)

use SSH_DEFAULT_PORT; from stevesk@pobox.com

Revision 1.7 / (download) - annotate - [select for diffs], Mon Jan 8 22:03:23 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

O_NDELAY -> O_NONBLOCK; thanks stevesk@pobox.com

Revision 1.6 / (download) - annotate - [select for diffs], Tue Dec 19 23:17:58 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.5: +3 -3 lines
Diff to previous 1.5 (colored)

replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'
with u_char.

Revision 1.5 / (download) - annotate - [select for diffs], Tue Dec 19 22:48:08 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.4: +4 -4 lines
Diff to previous 1.4 (colored)

replace <ssl/x.h> with <openssl/x.h>

Revision 1.4 / (download) - annotate - [select for diffs], Wed Dec 13 23:26:53 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.3: +8 -8 lines
Diff to previous 1.3 (colored)

fatal already adds \n; from stevesk@pobox.com

Revision 1.3 / (download) - annotate - [select for diffs], Tue Dec 12 22:30:01 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.2: +5 -10 lines
Diff to previous 1.2 (colored)

consistently use __progname; from stevesk@pobox.com

Revision 1.2 / (download) - annotate - [select for diffs], Wed Dec 6 19:57:48 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.1: +2 -3 lines
Diff to previous 1.1 (colored)

err(3) -> internal error(), from stevesk@sweden.hp.com

Revision 1.1 / (download) - annotate - [select for diffs], Mon Dec 4 19:24:02 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN

David Maziere's ssh-keyscan, ok niels@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.