ae91503b5d
from openbsd:
...
Correct some off-by-ones. They currently don't matter, but this
is for future safety and consistency.
OK krw@, markus@
2003-10-02 02:25:05 +00:00
0a7cc0d7d1
Apply security fix: http://www.openssl.org/news/secadv_20030930.txt
...
Changelog from: http://cvs.openssl.org/chngview?cn=11471
2003-09-30 15:59:53 +00:00
5749c53775
Fix what is obviously a bug: valloc() -> vmalloc(). Now racoon(8) doesn't core
...
dump all the time.
2003-09-25 01:00:32 +00:00
34439bf0c9
off-by-one. from openbsd
2003-09-22 22:12:05 +00:00
28c3d43114
typo. markus@openbsd
2003-09-18 12:42:33 +00:00
841f7944e5
protect against double free; #660 ; zardoz at users.sf.net
...
from openbsd
2003-09-18 08:16:40 +00:00
c2011dbc01
missing buffer_free(&encrypted); #662 ; zardoz at users.sf.net
...
from openbsd
2003-09-18 08:16:15 +00:00
898af9fa6c
make sure we init nalloc.
2003-09-18 01:41:56 +00:00
3171afa413
fix problem in previous patch
2003-09-18 01:35:07 +00:00
d4d840dd36
More buffer size adjusted before allocation succeeded fixes. Bump to 20030917.
...
From FreeBSD (with an additional one from me).
2003-09-17 23:19:02 +00:00
51b1a61a2d
dammit, don't apply patches blindly.
2003-09-16 23:18:24 +00:00
08d244b791
bring more fixes from 3.7.1
2003-09-16 23:16:59 +00:00
5de000c8d7
crank __NETBSDSSH_VERSION for buffer.c fix
2003-09-16 17:39:32 +00:00
325fccf53f
Do not record expanded size before attempting to reallocate the associated
...
memory. From OpenBSD, via FreeBSD.
2003-09-16 13:22:57 +00:00
249c9d88ea
use sysctl to dump SAs if possible (not really tested)
2003-09-12 08:44:34 +00:00
efbe374b9f
SKEY and BSDAUTH #ifdef mixup
2003-09-08 21:00:41 +00:00
f13cb0c7b2
bzero() 2nd arg mistake. found by openbsd guys. from kame
2003-09-04 00:12:56 +00:00
ca14877c77
reject rc5/idea/mdc2 commands if OPENSSL_NO_xx is specified
2003-08-27 21:05:02 +00:00
31fd31ccf7
Make getlastlogx have the pathname to the lastlogx database as first
...
argument, to be consistent with updlastlogx.
Approved by christos, reviewed by kleink.
[The lastlogxname function should not be used any longer.]
2003-08-26 16:48:32 +00:00
d9c46578d1
update racoon to 2003/8/26 version. mostly minor bugfixes.
2003-08-26 03:31:50 +00:00
2cfb643fda
KAME racoon, as of 2003/08/26
2003-08-26 03:27:01 +00:00
b5f8b9a7c0
KAME libipsec/libpfkey, 2003/08/26
2003-08-26 03:25:29 +00:00
eb24db53ab
style; total size of buf is (num + 3)
2003-08-13 01:29:41 +00:00
658a8c458e
Fix bad use of "sizeof(pointer)" where the length of a buffer was the
...
intention. Fixes problems with least ssh's known_hosts file and factor.
Patch from Berndt Josef Wulf's PR lib/22347.
2003-08-12 03:25:24 +00:00
dc4f8c2e1a
Move UCB-licensed code from 4-clause to 3-clause licence.
...
Patches provided by Joel Baker in PR 22252, verified by myself.
2003-08-07 09:15:17 +00:00
5de5abdd3d
consistently use new DES API, re-enable des regression test
2003-07-31 08:53:58 +00:00
965395c9f3
re-enable __RCSID, sys/cdefs_elf.h rev 1.15 fixed the problem
2003-07-30 00:34:16 +00:00
f33c57af22
disable __RCSID for now, somehow it puts some of integer variables
...
into .text region
2003-07-29 23:17:39 +00:00
308bb7eb39
remove unused macro. PR 21150
2003-07-29 04:45:39 +00:00
4c43ef4ce1
xx_keylen has to return bits, not bytes. KAME-PR-488
2003-07-29 04:30:54 +00:00
3514116803
Apply patch from lha@, via OpenBSD portable SSH's revision 1.11 of this file:
...
mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
otherwise the kerberos credentinal is stored in a memory cache
in the privileged sshd.
Presumably, this will also come in as part of a later OpenSSH release via
`cvs import', but this is worth having now.
2003-07-28 15:50:17 +00:00
c6912d0211
remove duplicate manual
2003-07-26 15:11:43 +00:00
08a1c4bcd3
empty commit, just to update timestamp and force rebuild of krb.h.
2003-07-26 01:07:35 +00:00
805c102737
fix compilation on sparc64. reported by Juergen Hannken-Illjes
2003-07-25 09:06:02 +00:00
e8876f361f
avoid "unsigned u_int32_t"
2003-07-25 02:02:43 +00:00
88ec7d3792
bring back krb4 support, just to suppress unwanted noise from other developers.
...
note that official openssh distribution have already dropped kerberosIV support,
therefore maintenance cost needs to be paid by us. and have no intent to help.
2003-07-24 15:31:52 +00:00
f4401cd869
upgrade openssl to 0.9.7b. (AES is now supported)
...
alter des.h to be friendly with openssl/des.h (you can include both in the
same file)
make libkrb to depend on libdes. bump major.
massage various portioin of heimdal to be friendly with openssl 0.9.7b.
2003-07-24 14:16:30 +00:00
2836295a36
OpenSSL 0.9.7b, major API changes included
2003-07-24 08:25:41 +00:00
0f3017142e
use snprintf (actually, "addr" can be supplied from outside, and if "addr"
...
points to shorter-than-24 buffer we will overrun buffer. bad API)
2003-07-24 04:41:13 +00:00
7b7c18c4c5
the block is just for krb4 (not for krb5) so should be removed. lha
2003-07-23 21:25:08 +00:00
c55f89ad19
typo on #if condition converesion
2003-07-23 21:03:03 +00:00
0091553542
define symbols even when !KRB4, to simplify shlib management. lha
2003-07-23 20:48:34 +00:00
8556dff80c
remove KRB4 and AFS support. sync w/ openssh main tree
2003-07-23 03:52:16 +00:00
a9503412ba
license clarification (UCB 3-clause, and progressmeter)
2003-07-23 03:51:27 +00:00
46471dc1e9
cast for signed/unsigned mixup
2003-07-14 18:27:48 +00:00
1bffbcd4a1
correct ^@ incorrectly committed
2003-07-14 18:26:05 +00:00
a157f97782
unifdef VMS/WIN16/WIN32 in public headers, at least
2003-07-14 14:06:14 +00:00
c187ba994b
use bounded string op (only one sprintf remains - still no clue)
2003-07-14 13:24:00 +00:00
a395b35ba2
delint
2003-07-14 13:07:05 +00:00
848c8ac0ef
use bounded string ops (especially libraries)
2003-07-14 13:05:19 +00:00
afdee9affa
__RCSID. add missing copyright in *.y and *.l (sync w/kame)
2003-07-12 09:37:09 +00:00
03eefe2ecf
sync w/ latest racoon
2003-07-12 09:02:24 +00:00
dc30725eaf
kame racoon 2003/7/12. lots of lots of stability fixes.
2003-07-12 08:45:39 +00:00
b1395375fd
add __RCSID("$NetBSD$"), because it's hard to track our changes in a
...
binary when we only have the vendor's RCSID.
2003-07-10 01:09:41 +00:00
fc3229a199
Undo unintended commit.
2003-07-04 21:57:16 +00:00
ee8924aa2e
Fix off-by-one. From William Allen Simpson in PR 22012.
2003-07-04 21:56:48 +00:00
f9cc3a858b
Bump date for recent changes.
2003-07-04 12:33:11 +00:00
de2728383c
Punctuation fixes.
2003-07-04 12:31:33 +00:00
d9fb607438
Quote punctuation so it gets marked up.
2003-06-30 11:52:01 +00:00
ed9861f855
Remove dot from middle of sentence.
2003-06-27 23:10:37 +00:00
554f6e9041
Quote question mark; punctuation fix; new sentence, new line.
2003-06-27 22:37:13 +00:00
a4fd08f60c
Quote question mark.
2003-06-27 22:35:48 +00:00
5e88ad0f63
Remove superfluous macro calls, add newline where missing, and
...
use \&[ (and similar) instead of \*(lB, since it works with both old and new groff.
2003-06-27 22:31:29 +00:00
bb64da9790
Drop trailing spaces; fix punctuation problems;
...
put Nd argument in double quotes since it contains more than 9 words; spell out month.
2003-06-27 14:46:55 +00:00
e6ecde23a1
Be consistent in how we call .rhosts authentication.
2003-06-27 09:14:56 +00:00
7e3682db3e
Sort sections; replace man macro with mdoc macro;
...
sort SEE ALSO; empty line -> .Pp.
2003-06-26 10:03:39 +00:00
9bdcb47acd
add missing #ifdef __RCSID
...
(these files are compiled as host tools)
from Nicolas Ollinger, fixes PR#21892
2003-06-23 20:02:53 +00:00
1430af815a
discourage the use of aggressive mode
2003-06-16 08:40:11 +00:00
9d1e759d63
typo: get correct counters; introduced during rekeying change. (openbsd rev 1.26)
2003-05-26 07:57:38 +00:00
49838f37b9
adapt to heimdal 0.6
2003-05-25 22:07:56 +00:00
3f62dc6d24
strlcpy
2003-05-17 18:19:20 +00:00
93851338f2
sscanf overrun
2003-05-17 01:12:28 +00:00
b224fef26e
Fix up rcsid lossage
2003-05-15 21:36:30 +00:00
f80f84e684
no longer used
2003-05-15 20:56:45 +00:00
28d69ea823
merge in heimdal 0.6
2003-05-15 20:44:06 +00:00
245a590853
import of heimdal 0.6
2003-05-15 20:28:38 +00:00
dec326ca84
64bit issue; reported by Havard Eidnes and Juergen Hannken-Illjes, sync w/
...
openssh master tree
2003-05-15 14:10:24 +00:00
56d0ea03cf
>implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@
...
>server interops with commercial client; ok jakob@ djm@
markus@openbsd
2003-05-14 18:22:07 +00:00
d6fa2807d4
markus@openbsd, for PR 20550
...
>change key_load_public to try to read a public from:
>rsa1 private or rsa1 public and ssh2 keys.
>this makes ssh-keygen -e fail for ssh1 keys more gracefully
>for example; report from itojun (netbsd pr 20550).
2003-05-14 18:17:02 +00:00
5e9a67bb93
OpenSSH 3.6.1 as of 20030514 - krb5 over ssh2
2003-05-14 18:12:50 +00:00
d75f1336b3
Uppercase URL.
2003-05-14 14:30:59 +00:00
5b3e029874
setup -> set up.
2003-05-14 13:10:57 +00:00
bb2f5dbc31
setup -> set up.
2003-05-14 12:06:11 +00:00
0230a54dfb
plug memory leak. jgraessley at apple.com
2003-05-09 05:32:36 +00:00
a59c37eb75
parse EOS before performing #include. Joshua Graessley of apple (via kame)
2003-05-08 07:58:54 +00:00
c42e1fac66
Management, not managment. Mostly from jmc@openbsd.
2003-04-26 22:07:12 +00:00
5116f9caae
fix "round up to 8" code. from kame
2003-04-24 02:22:26 +00:00
bf3ca3dcee
do not assume 32bit (%d fits into 12 chars); sumikawa@freebsd
2003-04-17 07:37:05 +00:00
3fd1d09240
Fix typo, and break overly long line.
2003-04-16 13:10:40 +00:00
670e872d62
10 char is not sufficient here. sync w/ kame
2003-04-15 07:31:23 +00:00
5a6a4446f8
avoid hardcoded SOCK_xx; with markus; should allow ssh over SCTP
2003-04-14 14:36:47 +00:00
6605cddb45
new copyright notice (w/ TNF copyright). thanks millert
2003-04-08 01:19:08 +00:00
07d13217f3
Some e.g. cleanup: replace "eg" with "e.g.,". From Igor Sobrado in PR 19692.
2003-04-07 06:56:38 +00:00
2b75215a67
IPsec, not IPSEC. From Igor Sobrado in PR 19691.
2003-04-06 20:24:35 +00:00
fcb31fad16
sync w/ 3.6.1 (remove files that are removed on openssh repo)
2003-04-03 06:33:42 +00:00
e7e7c84a6a
sync w/ 3.6.1
2003-04-03 06:21:31 +00:00
f9930e137b
OpenSSH 3.6.1 as of 2003/4/3
...
* The 'kex guesses' bugfix from OpenSSH 3.6 triggers a bug
in a few other SSH v2 implementations and causes connections to
stall. OpenSSH 3.6.1 disables this bugfix when interoperating
with these implementations.
* RSA blinding is now used by ssh(1), sshd(8) and ssh-agent(1).
in order to avoid potential timing attacks against the RSA keys.
Older versions of OpenSSH have been using RSA blinding in
ssh-keysign(1) only.
* ssh-agent(1) optionally requires user confirmation if a key gets
used, see '-c' in ssh-add(1).
* sshd(8) now handles PermitRootLogin correctly when UsePrivilegeSeparation
is enabled.
* sshd(8) now removes X11 cookies when a session gets closed.
* ssh-keysign(8) is disabled by default and only enabled if the
new EnableSSHKeysign option is set in the global ssh_config(5)
file.
* ssh(1) and sshd(8) now handle 'kex guesses' correctly (key exchange
guesses).
* ssh(1) no longer overwrites SIG_IGN. This matches behaviour from
rsh(1) and is used by backup tools.
* setting ProxyCommand to 'none' disables the proxy feature, see
ssh_config(5).
* scp(1) supports add -1 and -2.
* scp(1) supports bandwidth limiting.
* sftp(1) displays a progressmeter.
* sftp(1) has improved error handling for scripting.
2003-04-03 05:57:11 +00:00
6012957147
Don't build crypt() on NetBSD either.
2003-04-02 20:28:00 +00:00
0ac531f887
beeing->being from Igor Sobrado, PR misc/19814
2003-03-31 18:54:15 +00:00
0fe9c931b1
authenication->authentication, Instititute->Institute
...
from Igor Sobrado, PR misc/19814
2003-03-31 18:52:13 +00:00
itojun