91f0927074
make this actually do something
2002-09-12 14:12:18 +00:00
58cc4c1950
alias dns functions so we don't have to bump major
2002-09-12 14:10:25 +00:00
da086653ff
resolve import conflicts
2002-09-12 13:18:49 +00:00
0444766465
import heimdal 0.5
2002-09-12 12:41:31 +00:00
5146dc79e7
import helper
2002-09-12 12:35:03 +00:00
3cc6c8c775
resolve import conflicts
2002-09-12 12:33:10 +00:00
cfa4cd31bb
import krb4 1.2
2002-09-12 12:22:01 +00:00
32e004f92a
kerberos support w/ privsep. confirmed to work by lha@stacken.kth.se
2002-09-09 06:45:17 +00:00
42ebaa698b
don't touch free'ed memory. From: wang.zhong3@zte.com.cn, sync w/kame
2002-09-03 14:38:13 +00:00
2b9b8f5bd3
reduce #ifdef related to OPENSSLDIR - we want it be static
2002-09-01 11:38:34 +00:00
50d422c24f
e_os.h is not part of exported openssl interface, so don't install it into
...
/usr/include/openssl (e_os.h has an explicit comment about it). it obviously
is a bug in openssl 0.9.6 Makefile.
based on openssl 0.9.7 snapshot.
2002-08-31 10:46:36 +00:00
e1754c22c2
if () statement error. From: Krister Walfridsson <cato@df.lth.se>
...
(not compiled) sync w/kame
2002-08-31 07:56:14 +00:00
7049b3bdab
blank commit to force rebuild of krb.h
2002-08-29 14:34:11 +00:00
f613969b8a
somehow main trunk was not in sync with 0.9.6f for this file. noted by havard.
2002-08-28 23:10:30 +00:00
bcb0cf6929
tighten isakmp header length validation. from kame
2002-08-28 04:44:04 +00:00
b57bfa3f73
Drop superfluous Ns, sort sections.
2002-08-20 16:05:46 +00:00
4f40f42275
Remove superfluous Ns, drop trailing whitespace, fix a Xr, don't let lines
...
get longer than 80 characters.
2002-08-20 16:04:13 +00:00
2610a5c4d8
Remove superfluous Ns; while here, remove trailing whitespace and fix a
...
punctuation problem.
2002-08-20 15:59:37 +00:00
158398c921
Fix Ns abuse.
2002-08-20 15:32:12 +00:00
9bf08abfd4
Remove some unnecessary .Ns and trailing whitespace.
2002-08-20 15:24:38 +00:00
a6315c15ad
utmpx.ut_id is required.
...
PR 17998 with slight modification (deal with ttyname shorter than 4)
2002-08-20 07:42:53 +00:00
1146a80999
more NO_xx cleanup. can't catch these by openssl-unifdef.pl
2002-08-17 21:41:59 +00:00
08597903ce
sync with 0.9.6g
2002-08-09 15:58:46 +00:00
5eb341dcb6
openssl 0.9.6g, build framework fixes
2002-08-09 15:45:08 +00:00
182c0b6e08
sync with 0.9.6f. prevents DoS attack and regen of manpages.
2002-08-08 23:47:34 +00:00
f5e63fe4c2
openssl 0.9.6f, with security fixes
2002-08-08 23:14:54 +00:00
7bab20a582
bitmask operation audit (s/&&/&/). from openbsd
2002-08-08 15:12:09 +00:00
e8859ea868
remove files mistakenly shipped with openssl 0.9.6e.
...
(it won't affect the build)
2002-08-05 11:21:29 +00:00
85c4496982
http://marc.theaimsgroup.com/?l=openssl-cvs&m=102831422608153&w=2
...
*) Fix ASN1 checks. Check for overflow by comparing with LONG_MAX
and get fix the header length calculation.
[Florian Weimer <Weimer@CERT.Uni-Stuttgart.DE>,
Alon Kantor <alonk@checkpoint.com> (and others),
Steve Henson]
(critical)
2002-08-03 12:56:23 +00:00
e7f66af2b2
fix incorrect overrun check.
...
http://marc.theaimsgroup.com/?l=openssl-cvs&m=102831516309127&w=2
(thank todd!)
2002-08-02 23:09:03 +00:00
d103e0b575
plug memory leak. from ebisawa@iij. sync w/kame
2002-07-31 07:01:26 +00:00
ef920a0913
sync with 0.9.6e.
2002-07-31 01:29:37 +00:00
25e766824a
OpenSSL 0.9.6e. includes major security fixes (already applied)
2002-07-30 23:57:34 +00:00
e9316c8858
apply patch supplied with OpenSSL Security Advisory [30 July 2002]
...
advisory 1: four potentially remotely-exploitable vulnerability in
SSL2/SSL3 code
advisory 2: ASN1 parser vulnerability (all SSL/TLS apps affected)
2002-07-30 12:55:08 +00:00
3fd219f644
add utmpx support.
2002-07-28 23:43:33 +00:00
6742cb1812
sweep of errx/warnx, remove unnecessary trailing \n
2002-07-20 08:36:17 +00:00
24ef72afbf
print connect failure on debugging mode. sync w/openbsd
2002-07-12 13:28:36 +00:00
4b20971f01
Spell acquire with a 'c'.
2002-07-10 23:16:32 +00:00
bdfa549223
bark if all connection attemp fails. sync w/openbsd
2002-07-10 10:28:00 +00:00
92b7524e7d
silently connect(2) to next address. sync w/openbsd
2002-07-09 12:04:10 +00:00
a2a47b15ce
don't warn even if reverse lookup fails. sync w/openbsd
2002-07-09 12:03:54 +00:00
9a2478a3b0
/var/empty -> /var/chroot/sshd. PR 17519
2002-07-08 14:39:53 +00:00
968294e218
>make ssh-keysign read /etc/ssh/ssh_config
...
>and exit if HostbasedAuthentication is disabled globally. based on discussions
>with deraadt, itojun and sommerfeld; ok itojun@
sync w/openbsd
2002-07-03 14:23:13 +00:00
92ea28e291
>for compression=yes, we fallback to no-compression if the server does
...
>not support compression, vice versa for compression=no. ok mouring@
sync w/openbsd
2002-07-03 10:07:48 +00:00
673c1a7ac1
>use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
...
>in order to avoid a possible Kocher timing attack pointed out by Charles
>Hannum; ok provos@
2002-07-03 10:06:39 +00:00
c28e7ac1f6
correct signed/unsigned mixup; openbsd
2002-07-03 10:05:58 +00:00
8d3378688a
pednatic check on command line args. correct signed/unsigned mixup.
...
sync w/ openbsd
2002-07-01 06:17:11 +00:00
84559971ee
make use of xfree() consistent. from openbsd
2002-07-01 05:56:45 +00:00
11792b93b1
don't use freed memory. sync w/openbsd
2002-07-01 05:54:03 +00:00
5bdd56b128
sync with 3.4
2002-06-26 14:08:29 +00:00
b8f8e01057
OpenSSH 3.4 around 2002/6/26.
...
most significant change:
>make sure # of response matches # of queries, fixes int overflow; from ISS
as we have already enabled privsep by default, we should have been safe.
2002-06-26 14:02:54 +00:00
603dca2ed2
sync whitespace w/ openbsd tree
2002-06-24 15:47:25 +00:00
bc7b65a647
don't lose information while we cast
2002-06-24 15:46:34 +00:00
7d6a7caf6a
Cast arguments so that this file will compile on less forgiving architectures
...
like arm32.
2002-06-24 15:32:58 +00:00
3ea946f134
sync with openssh 3.3.
...
local mods included to make it compile with openssl 0.9.6d.
2002-06-24 05:48:24 +00:00
3dfc6702ef
clean ssh-keysign build dir before import.
2002-06-24 05:45:17 +00:00
9486e6fd01
it shouldn't be imported
2002-06-24 05:28:32 +00:00
b5222aff66
OpenSSH 3.3 as of June 24, 2002.
...
- ssh is no longer seruid root. ssh-keyscan is added to read secret host keys.
protocol version 1 rsh-like authentication is gone.
- FallBackToRsh is deprecated.
2002-06-24 05:25:39 +00:00
c650ef5756
Remove (commented out) krb_equiv(3) reference, suggested by joda.
2002-06-13 11:19:48 +00:00
d844f0d7b1
Fix Xrefs.
2002-06-13 00:15:09 +00:00
78c59017cc
Remove photurisd reference.
2002-06-13 00:14:26 +00:00
8def406232
Comment out Xref to krb_equiv(3), which does not exist.
2002-06-13 00:09:06 +00:00
b745604c00
sync sockaddr_ntop with latest openssh (minor change)
2002-06-09 22:22:55 +00:00
7c75b5ec2f
sync with 0.9.6d. shlib minor for libssl and libcrypto
...
is cranked for additional functions.
2002-06-09 16:12:52 +00:00
7720435b28
openssl 0.9.6d
2002-06-09 15:21:32 +00:00
f0231f96aa
do not propose IDEA cipher on SSL connection, as our default installation
...
does not handle IDEA.
TODO: dynamically enable IDEA if libcrypto_idea is linked
2002-06-09 02:16:18 +00:00
be5f1d082c
use getnameinfo on diag printing. sync w/openssh in openbsd
2002-06-08 21:17:57 +00:00
e67961b545
check sshd uid/chroot dir on UsePrivilegeSeparation mode, and die if they
...
do not exist. sync w/openssh
2002-05-29 23:54:29 +00:00
a5c3041a1b
bump date for rhosts auth fix
2002-05-27 13:45:40 +00:00
b274d69ad0
correct rhosts authentication. should fix PR 17023
2002-05-27 13:45:17 +00:00
a46557038c
now arc4random is in libc, we don't need to supply local version
2002-05-25 00:29:52 +00:00
a0da78395e
correct sha2 interoperability. From: "JuanJo Ciarlante" <jjo@mendoza.gov.ar>
2002-05-20 13:12:45 +00:00
e26b1052bb
use /var/chroot/sshd instead of /var/empty. suggested by christos
2002-05-16 20:59:35 +00:00
f47caddaf3
turn on privilege separation, as 3.2.1 default do.
...
requires sshd uid/gid as well as /var/empty directory.
2002-05-14 23:33:07 +00:00
ca89359407
sync with 3.2.1 as of 5/13.
...
NOTE: privilege separation is turned off by default
as it seems there still are issues with setsid().
2002-05-13 02:58:17 +00:00
24255a6a60
OpenSSH 3.2.1 as of 2002/5/13
2002-05-13 02:28:40 +00:00
c68a2428ba
correct handling of "unique" policy. bump version to 20020507
...
(corresponds to filename in ftp://ftp.kame.net/pub/kame).
2002-05-13 02:10:34 +00:00
c0fa39f338
correct plogv().
2002-05-07 08:58:32 +00:00
244b762de1
Complete the conversion back to the OpenSSH default configuration files of
...
"/etc/ssh/ssh_config" (from "/etc/ssh/ssh.conf") for ssh(1) and other
userland tools, and "/etc/ssh/sshd_config (from "/etc/ssh/sshd.conf")
for sshd(8).
etc/postinstall will detect this, and if "fix" is given, rename the files.
2002-04-29 08:23:34 +00:00
812e154ef2
netbsd uses EXIT STATUS, not RETURN VALUES, for commands
2002-04-26 02:48:54 +00:00
77e1048dc4
Whitespace fixes, use standard headers, RCS police.
2002-04-26 02:33:00 +00:00
8366b5d7de
Sort sections and SEE ALSO, add NetBSD tag.
2002-04-26 02:31:10 +00:00
cd1e16de59
upgrade to KAME racoon as of 2002/4/26.
...
file descriptor leak fix.
null encryption algorithm key length fix (should use 0).
couple of null-pointer reference fixes.
set port # to 500 in ID payload (possible interop issue - spec is unclear).
correctly match address pair on informational exchange
2002-04-26 02:25:13 +00:00
b4df5a033c
KAME racoon as of 2002/4/26
2002-04-26 02:16:38 +00:00
936168b29d
correct afs/kerberos token-passing. notified by markus@openbsd
2002-04-24 01:48:04 +00:00
34b40b030e
sync with openssh 3.2 as of 2002/4/22.
...
- privilege separation
- afs/kerberos auth security issue fixed
2002-04-22 07:59:35 +00:00
ff10d69ea5
OpenSSH 3.2 as of 2002/4/22. bring in sys/sys/tree.h
2002-04-22 07:47:47 +00:00
f597d4ec88
OpenSSH 3.2 as of 2002/4/22. fixes issues with AFS/kerberos auth
2002-04-22 07:35:39 +00:00
f7136b499f
Remove .cvsignore files.
...
<URL:http://www.netbsd.org/developers/cvs-repos/notes.html#cvsignore >
2002-04-04 17:07:06 +00:00
abe35ee7d1
correct initial contact payload handling. PR 15949. sync with kame
2002-03-29 01:18:08 +00:00
16bd2c3983
handle RTM_NEWADDR correctly. PR 15693. sync w/kame
2002-03-22 03:58:43 +00:00
1c9c09e3be
Simple file static function had wrong function definition :
...
-find_etype(hdb_entry *princ, unsigned *etypes, unsigned len,
+find_etype(hdb_entry *princ, krb5_enctype *etypes, unsigned len,
In the Acorn32 port an enum doesn't have to be unsigned (!) int's ... but
can also be a byte/char sized var.
2002-03-21 21:02:16 +00:00
24460e83d2
Actually use the 8003 patch joda applied upstream, rather than the one I sent
...
him (oops).
2002-03-18 19:16:04 +00:00
4284d720b1
CKSUMTYPE needs to include 0x8003, since some things use that.
...
Approved by joda and committed upstream.
2002-03-18 19:07:49 +00:00
0a2445c3b6
move sshd config files to /etc/ssh
2002-03-11 04:57:55 +00:00
68c304f103
Fix several LL128 format string mismatches with a chainsaw.
...
%llu is "unsigned long long", not "uint64_t"; the former can be 128
bits on LP64 systems.
2002-03-09 15:03:33 +00:00
9d597e40f3
printf type mismatch.
2002-03-08 06:03:21 +00:00
295a85a1c9
sync better with reality (LoginGraceTime)
2002-03-08 02:18:11 +00:00
af34a358ff
sync w/ 3.1 as of 2002/3/8. configuration file directory is still /etc
...
(openbsd usr.bin/ssh is using /etc/ssh)
2002-03-08 02:00:50 +00:00
797a097779
OpenSSH 3.1 as of 2002/3/8. plugs off-by-one security hole
2002-03-08 01:20:24 +00:00
joda