Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
126,424 Commits 606 Branches 0 Tags 3.1 GiB
1466f8c9d9
Commit Graph

636 Commits

Author SHA1 Message Date
itojun
f13cb0c7b2 bzero() 2nd arg mistake. found by openbsd guys. from kame 2003-09-04 00:12:56 +00:00
itojun
ca14877c77 reject rc5/idea/mdc2 commands if OPENSSL_NO_xx is specified 2003-08-27 21:05:02 +00:00
wiz
31fd31ccf7 Make getlastlogx have the pathname to the lastlogx database as first 
argument, to be consistent with updlastlogx.

Approved by christos, reviewed by kleink.

[The lastlogxname function should not be used any longer.]
 2003-08-26 16:48:32 +00:00
itojun
d9c46578d1 update racoon to 2003/8/26 version. mostly minor bugfixes. 2003-08-26 03:31:50 +00:00
itojun
2cfb643fda KAME racoon, as of 2003/08/26 2003-08-26 03:27:01 +00:00
itojun
b5f8b9a7c0 KAME libipsec/libpfkey, 2003/08/26 2003-08-26 03:25:29 +00:00
itojun
eb24db53ab style; total size of buf is (num + 3) 2003-08-13 01:29:41 +00:00
simonb
658a8c458e Fix bad use of "sizeof(pointer)" where the length of a buffer was the 
intention.  Fixes problems with least ssh's known_hosts file and factor.

Patch from Berndt Josef Wulf's PR lib/22347.
 2003-08-12 03:25:24 +00:00
agc
dc4f8c2e1a Move UCB-licensed code from 4-clause to 3-clause licence. 
Patches provided by Joel Baker in PR 22252, verified by myself.
 2003-08-07 09:15:17 +00:00
itojun
5de5abdd3d consistently use new DES API, re-enable des regression test 2003-07-31 08:53:58 +00:00
itojun
965395c9f3 re-enable __RCSID, sys/cdefs_elf.h rev 1.15 fixed the problem 2003-07-30 00:34:16 +00:00
itojun
f33c57af22 disable __RCSID for now, somehow it puts some of integer variables 
into .text region
 2003-07-29 23:17:39 +00:00
itojun
308bb7eb39 remove unused macro. PR 21150 2003-07-29 04:45:39 +00:00
itojun
4c43ef4ce1 xx_keylen has to return bits, not bytes. KAME-PR-488 2003-07-29 04:30:54 +00:00
jwise
3514116803 Apply patch from lha@, via OpenBSD portable SSH's revision 1.11 of this file: 
mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
  otherwise the kerberos credentinal is stored in a memory cache
  in the privileged sshd.

Presumably, this will also come in as part of a later OpenSSH release via
`cvs import', but this is worth having now.
 2003-07-28 15:50:17 +00:00
cjep
c6912d0211 remove duplicate manual 2003-07-26 15:11:43 +00:00
itojun
08a1c4bcd3 empty commit, just to update timestamp and force rebuild of krb.h. 2003-07-26 01:07:35 +00:00
itojun
805c102737 fix compilation on sparc64. reported by Juergen Hannken-Illjes 2003-07-25 09:06:02 +00:00
itojun
e8876f361f avoid "unsigned u_int32_t" 2003-07-25 02:02:43 +00:00
itojun
88ec7d3792 bring back krb4 support, just to suppress unwanted noise from other developers. 
note that official openssh distribution have already dropped kerberosIV support,
therefore maintenance cost needs to be paid by us.  and have no intent to help.
 2003-07-24 15:31:52 +00:00
itojun
f4401cd869 upgrade openssl to 0.9.7b. (AES is now supported) 
alter des.h to be friendly with openssl/des.h (you can include both in the
same file)
make libkrb to depend on libdes.  bump major.
massage various portioin of heimdal to be friendly with openssl 0.9.7b.
 2003-07-24 14:16:30 +00:00
itojun
2836295a36 OpenSSL 0.9.7b, major API changes included 2003-07-24 08:25:41 +00:00
itojun
0f3017142e use snprintf (actually, "addr" can be supplied from outside, and if "addr" 
points to shorter-than-24 buffer we will overrun buffer.  bad API)
 2003-07-24 04:41:13 +00:00
itojun
7b7c18c4c5 the block is just for krb4 (not for krb5) so should be removed. lha 2003-07-23 21:25:08 +00:00
itojun
c55f89ad19 typo on #if condition converesion 2003-07-23 21:03:03 +00:00
itojun
0091553542 define symbols even when !KRB4, to simplify shlib management. lha 2003-07-23 20:48:34 +00:00
itojun
8556dff80c remove KRB4 and AFS support. sync w/ openssh main tree 2003-07-23 03:52:16 +00:00
itojun
a9503412ba license clarification (UCB 3-clause, and progressmeter) 2003-07-23 03:51:27 +00:00
itojun
46471dc1e9 cast for signed/unsigned mixup 2003-07-14 18:27:48 +00:00
itojun
1bffbcd4a1 correct ^@ incorrectly committed 2003-07-14 18:26:05 +00:00
itojun
a157f97782 unifdef VMS/WIN16/WIN32 in public headers, at least 2003-07-14 14:06:14 +00:00
itojun
c187ba994b use bounded string op (only one sprintf remains - still no clue) 2003-07-14 13:24:00 +00:00
itojun
a395b35ba2 delint 2003-07-14 13:07:05 +00:00
itojun
848c8ac0ef use bounded string ops (especially libraries) 2003-07-14 13:05:19 +00:00
itojun
afdee9affa __RCSID. add missing copyright in *.y and *.l (sync w/kame) 2003-07-12 09:37:09 +00:00
itojun
03eefe2ecf sync w/ latest racoon 2003-07-12 09:02:24 +00:00
itojun
dc30725eaf kame racoon 2003/7/12. lots of lots of stability fixes. 2003-07-12 08:45:39 +00:00
lukem
b1395375fd add __RCSID("$NetBSD$"), because it's hard to track our changes in a 
binary when we only have the vendor's RCSID.
 2003-07-10 01:09:41 +00:00
wiz
fc3229a199 Undo unintended commit. 2003-07-04 21:57:16 +00:00
wiz
ee8924aa2e Fix off-by-one. From William Allen Simpson in PR 22012. 2003-07-04 21:56:48 +00:00
wiz
f9cc3a858b Bump date for recent changes. 2003-07-04 12:33:11 +00:00
wiz
de2728383c Punctuation fixes. 2003-07-04 12:31:33 +00:00
wiz
d9fb607438 Quote punctuation so it gets marked up. 2003-06-30 11:52:01 +00:00
wiz
ed9861f855 Remove dot from middle of sentence. 2003-06-27 23:10:37 +00:00
wiz
554f6e9041 Quote question mark; punctuation fix; new sentence, new line. 2003-06-27 22:37:13 +00:00
wiz
a4fd08f60c Quote question mark. 2003-06-27 22:35:48 +00:00
wiz
5e88ad0f63 Remove superfluous macro calls, add newline where missing, and 
use \&[ (and similar) instead of \*(lB, since it works with both old and new groff.
 2003-06-27 22:31:29 +00:00
wiz
bb64da9790 Drop trailing spaces; fix punctuation problems; 
put Nd argument in double quotes since it contains more than 9 words; spell out month.
 2003-06-27 14:46:55 +00:00
wiz
e6ecde23a1 Be consistent in how we call .rhosts authentication. 2003-06-27 09:14:56 +00:00
wiz
7e3682db3e Sort sections; replace man macro with mdoc macro; 
sort SEE ALSO; empty line -> .Pp.
 2003-06-26 10:03:39 +00:00
aymeric
9bdcb47acd add missing #ifdef __RCSID 
(these files are compiled as host tools)
from Nicolas Ollinger, fixes PR#21892
 2003-06-23 20:02:53 +00:00
itojun
1430af815a discourage the use of aggressive mode 2003-06-16 08:40:11 +00:00
itojun
9d1e759d63 typo: get correct counters; introduced during rekeying change. (openbsd rev 1.26) 2003-05-26 07:57:38 +00:00
lha
49838f37b9 adapt to heimdal 0.6 2003-05-25 22:07:56 +00:00
itojun
3f62dc6d24 strlcpy 2003-05-17 18:19:20 +00:00
itojun
93851338f2 sscanf overrun 2003-05-17 01:12:28 +00:00
lha
b224fef26e Fix up rcsid lossage 2003-05-15 21:36:30 +00:00
lha
f80f84e684 no longer used 2003-05-15 20:56:45 +00:00
lha
28d69ea823 merge in heimdal 0.6 2003-05-15 20:44:06 +00:00
lha
245a590853 import of heimdal 0.6 2003-05-15 20:28:38 +00:00
itojun
dec326ca84 64bit issue; reported by Havard Eidnes and Juergen Hannken-Illjes, sync w/ 
openssh master tree
 2003-05-15 14:10:24 +00:00
itojun
56d0ea03cf >implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@ 
>server interops with commercial client; ok jakob@ djm@

markus@openbsd
 2003-05-14 18:22:07 +00:00
itojun
d6fa2807d4 markus@openbsd, for PR 20550 
>change key_load_public to try to read a public from:
>rsa1 private or rsa1 public and ssh2 keys.
>this makes ssh-keygen -e fail for ssh1 keys more gracefully
>for example; report from itojun (netbsd pr 20550).
 2003-05-14 18:17:02 +00:00
itojun
5e9a67bb93 OpenSSH 3.6.1 as of 20030514 - krb5 over ssh2 2003-05-14 18:12:50 +00:00
wiz
d75f1336b3 Uppercase URL. 2003-05-14 14:30:59 +00:00
wiz
5b3e029874 setup -> set up. 2003-05-14 13:10:57 +00:00
wiz
bb2f5dbc31 setup -> set up. 2003-05-14 12:06:11 +00:00
itojun
0230a54dfb plug memory leak. jgraessley at apple.com 2003-05-09 05:32:36 +00:00
itojun
a59c37eb75 parse EOS before performing #include. Joshua Graessley of apple (via kame) 2003-05-08 07:58:54 +00:00
wiz
c42e1fac66 Management, not managment. Mostly from jmc@openbsd. 2003-04-26 22:07:12 +00:00
itojun
5116f9caae fix "round up to 8" code. from kame 2003-04-24 02:22:26 +00:00
itojun
bf3ca3dcee do not assume 32bit (%d fits into 12 chars); sumikawa@freebsd 2003-04-17 07:37:05 +00:00
wiz
3fd1d09240 Fix typo, and break overly long line. 2003-04-16 13:10:40 +00:00
itojun
670e872d62 10 char is not sufficient here. sync w/ kame 2003-04-15 07:31:23 +00:00
itojun
5a6a4446f8 avoid hardcoded SOCK_xx; with markus; should allow ssh over SCTP 2003-04-14 14:36:47 +00:00
itojun
6605cddb45 new copyright notice (w/ TNF copyright). thanks millert 2003-04-08 01:19:08 +00:00
wiz
07d13217f3 Some e.g. cleanup: replace "eg" with "e.g.,". From Igor Sobrado in PR 19692. 2003-04-07 06:56:38 +00:00
wiz
2b75215a67 IPsec, not IPSEC. From Igor Sobrado in PR 19691. 2003-04-06 20:24:35 +00:00
itojun
fcb31fad16 sync w/ 3.6.1 (remove files that are removed on openssh repo) 2003-04-03 06:33:42 +00:00
itojun
e7e7c84a6a sync w/ 3.6.1 2003-04-03 06:21:31 +00:00
itojun
f9930e137b OpenSSH 3.6.1 as of 2003/4/3 
* The 'kex guesses' bugfix from OpenSSH 3.6 triggers a bug
  in a few other SSH v2 implementations and causes connections to
  stall.  OpenSSH 3.6.1 disables this bugfix when interoperating
  with these implementations.
* RSA blinding is now used by ssh(1), sshd(8) and ssh-agent(1).
  in order to avoid potential timing attacks against the RSA keys.
  Older versions of OpenSSH have been using RSA blinding in
  ssh-keysign(1) only.
* ssh-agent(1) optionally requires user confirmation if a key gets
  used, see '-c' in ssh-add(1).
* sshd(8) now handles PermitRootLogin correctly when UsePrivilegeSeparation
  is enabled.
* sshd(8) now removes X11 cookies when a session gets closed.
* ssh-keysign(8) is disabled by default and only enabled if the
  new EnableSSHKeysign option is set in the global ssh_config(5)
  file.
* ssh(1) and sshd(8) now handle 'kex guesses' correctly (key exchange
  guesses).
* ssh(1) no longer overwrites SIG_IGN.  This matches behaviour from
  rsh(1) and is used by backup tools.
* setting ProxyCommand to 'none' disables the proxy feature, see
  ssh_config(5).
* scp(1) supports add -1 and -2.
* scp(1) supports bandwidth limiting.
* sftp(1) displays a progressmeter.
* sftp(1) has improved error handling for scripting.
 2003-04-03 05:57:11 +00:00
mycroft
6012957147 Don't build crypt() on NetBSD either. 2003-04-02 20:28:00 +00:00
perry
0ac531f887 beeing->being from Igor Sobrado, PR misc/19814 2003-03-31 18:54:15 +00:00
perry
0fe9c931b1 authenication->authentication, Instititute->Institute 
from Igor Sobrado, PR misc/19814
 2003-03-31 18:52:13 +00:00
perry
5ffdabb8bc kefile->keyfile (Igor Sobrado, PR misc/19909) 2003-03-31 16:54:47 +00:00
wiz
6653459566 principal, not pricipal. 2003-03-31 09:34:09 +00:00
perry
7287c6007d crential->credential princial->principal (Igor Sobrado, PR misc/19700) 2003-03-31 02:30:50 +00:00
perry
9ef7047603 spelling fixes, one from PR misc/20753 (Igor Sobrado) + others 2003-03-31 00:04:03 +00:00
perry
3ba55178f8 encype->enctype, from PR misc/20754 by Igor Sobrado 2003-03-30 23:57:54 +00:00
wiz
0acfa3bb9e Consistently spell occurrence with two rs. 2003-03-29 22:48:37 +00:00
lukem
d544e20194 Support populating the environment from login.conf(5)'s "setenv" 
capability, using a variation of setuserenv() from login_cap.c.
From Jim Bernard <jbernard@mines.edu>.
 2003-03-26 11:16:13 +00:00
lukem
fe8a628004 Add missing 
hp = strtok(NULL, ",");
to end of while loop which parses "host.allow" from login.conf(5).
Otherwise, sshd(8) would just infinite loop unless there was a
(positive or negative) match in the first word of the "host.allow" list...
 2003-03-24 18:31:39 +00:00
lukem
829c77a0ca * Add log messages for password or account expiry; it makes it much easier 
to debug (on the server) why a login failed with this information.

* If _PASSWORD_CHGNOW is defined (it's -1 in NetBSD), check that pw_change
  is not set to that before testing if the password has expired.
  Still prevent the login, but log a different failure message in this case.
  XXX:	we need to decide if we let interactive logins occur in this case,
	but force a password change, a la login(1).
 2003-03-24 18:25:21 +00:00
lha
6e22da944c Fix Kerberos 4 procotocol problem mentioned in 
[MIT krb5 Security Advisory 2003-004]/[heimdal-0.5.2 release notes]
by disable support for it.
 2003-03-20 19:20:59 +00:00
itojun
359e4b88f5 OpenSSL Security Advisory [19 March 2003] 
Klima-Pokorny-Rosa attack on RSA in SSL/TLS
 2003-03-19 23:06:33 +00:00
itojun
9e2d007f93 enable RSA blinding by defualt. from bugtraq posting <3E758B85.6090300@algroup.co.uk> 2003-03-17 14:33:50 +00:00
wiz
990562bfef .Nm does not need a dummy argument ("") before punctuation or 
for correct formatting of the SYNOPSIS any longer.
 2003-02-25 10:34:36 +00:00
wiz
658b9c6d28 In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked 
via timing by performing a MAC computation even if incorrect
block cipher padding has been found.  This is a countermeasure
against active attacks where the attacker has to distinguish
between bad padding and a MAC verification error. (CAN-2003-0078)
 2003-02-20 07:39:17 +00:00
perry
8a49ec08e4 "Utilize" has exactly the same meaning as "use," but it is more 
difficult to read and understand. Most manuals of English style
therefore say that you should use "use".
 2003-02-04 23:07:28 +00:00
wiz
86932ac56e allocate, not alocate. Noted by mjl, not mjll. 2003-01-28 22:26:33 +00:00