8556dff80c
remove KRB4 and AFS support. sync w/ openssh main tree
2003-07-23 03:52:16 +00:00
a9503412ba
license clarification (UCB 3-clause, and progressmeter)
2003-07-23 03:51:27 +00:00
46471dc1e9
cast for signed/unsigned mixup
2003-07-14 18:27:48 +00:00
1bffbcd4a1
correct ^@ incorrectly committed
2003-07-14 18:26:05 +00:00
a157f97782
unifdef VMS/WIN16/WIN32 in public headers, at least
2003-07-14 14:06:14 +00:00
c187ba994b
use bounded string op (only one sprintf remains - still no clue)
2003-07-14 13:24:00 +00:00
a395b35ba2
delint
2003-07-14 13:07:05 +00:00
848c8ac0ef
use bounded string ops (especially libraries)
2003-07-14 13:05:19 +00:00
afdee9affa
__RCSID. add missing copyright in *.y and *.l (sync w/kame)
2003-07-12 09:37:09 +00:00
03eefe2ecf
sync w/ latest racoon
2003-07-12 09:02:24 +00:00
dc30725eaf
kame racoon 2003/7/12. lots of lots of stability fixes.
2003-07-12 08:45:39 +00:00
b1395375fd
add __RCSID("$NetBSD$"), because it's hard to track our changes in a
...
binary when we only have the vendor's RCSID.
2003-07-10 01:09:41 +00:00
fc3229a199
Undo unintended commit.
2003-07-04 21:57:16 +00:00
ee8924aa2e
Fix off-by-one. From William Allen Simpson in PR 22012.
2003-07-04 21:56:48 +00:00
f9cc3a858b
Bump date for recent changes.
2003-07-04 12:33:11 +00:00
de2728383c
Punctuation fixes.
2003-07-04 12:31:33 +00:00
d9fb607438
Quote punctuation so it gets marked up.
2003-06-30 11:52:01 +00:00
ed9861f855
Remove dot from middle of sentence.
2003-06-27 23:10:37 +00:00
554f6e9041
Quote question mark; punctuation fix; new sentence, new line.
2003-06-27 22:37:13 +00:00
a4fd08f60c
Quote question mark.
2003-06-27 22:35:48 +00:00
5e88ad0f63
Remove superfluous macro calls, add newline where missing, and
...
use \&[ (and similar) instead of \*(lB, since it works with both old and new groff.
2003-06-27 22:31:29 +00:00
bb64da9790
Drop trailing spaces; fix punctuation problems;
...
put Nd argument in double quotes since it contains more than 9 words; spell out month.
2003-06-27 14:46:55 +00:00
e6ecde23a1
Be consistent in how we call .rhosts authentication.
2003-06-27 09:14:56 +00:00
7e3682db3e
Sort sections; replace man macro with mdoc macro;
...
sort SEE ALSO; empty line -> .Pp.
2003-06-26 10:03:39 +00:00
9bdcb47acd
add missing #ifdef __RCSID
...
(these files are compiled as host tools)
from Nicolas Ollinger, fixes PR#21892
2003-06-23 20:02:53 +00:00
1430af815a
discourage the use of aggressive mode
2003-06-16 08:40:11 +00:00
9d1e759d63
typo: get correct counters; introduced during rekeying change. (openbsd rev 1.26)
2003-05-26 07:57:38 +00:00
49838f37b9
adapt to heimdal 0.6
2003-05-25 22:07:56 +00:00
3f62dc6d24
strlcpy
2003-05-17 18:19:20 +00:00
93851338f2
sscanf overrun
2003-05-17 01:12:28 +00:00
b224fef26e
Fix up rcsid lossage
2003-05-15 21:36:30 +00:00
f80f84e684
no longer used
2003-05-15 20:56:45 +00:00
28d69ea823
merge in heimdal 0.6
2003-05-15 20:44:06 +00:00
245a590853
import of heimdal 0.6
2003-05-15 20:28:38 +00:00
dec326ca84
64bit issue; reported by Havard Eidnes and Juergen Hannken-Illjes, sync w/
...
openssh master tree
2003-05-15 14:10:24 +00:00
56d0ea03cf
>implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@
...
>server interops with commercial client; ok jakob@ djm@
markus@openbsd
2003-05-14 18:22:07 +00:00
d6fa2807d4
markus@openbsd, for PR 20550
...
>change key_load_public to try to read a public from:
>rsa1 private or rsa1 public and ssh2 keys.
>this makes ssh-keygen -e fail for ssh1 keys more gracefully
>for example; report from itojun (netbsd pr 20550).
2003-05-14 18:17:02 +00:00
5e9a67bb93
OpenSSH 3.6.1 as of 20030514 - krb5 over ssh2
2003-05-14 18:12:50 +00:00
d75f1336b3
Uppercase URL.
2003-05-14 14:30:59 +00:00
5b3e029874
setup -> set up.
2003-05-14 13:10:57 +00:00
bb2f5dbc31
setup -> set up.
2003-05-14 12:06:11 +00:00
0230a54dfb
plug memory leak. jgraessley at apple.com
2003-05-09 05:32:36 +00:00
a59c37eb75
parse EOS before performing #include. Joshua Graessley of apple (via kame)
2003-05-08 07:58:54 +00:00
c42e1fac66
Management, not managment. Mostly from jmc@openbsd.
2003-04-26 22:07:12 +00:00
5116f9caae
fix "round up to 8" code. from kame
2003-04-24 02:22:26 +00:00
bf3ca3dcee
do not assume 32bit (%d fits into 12 chars); sumikawa@freebsd
2003-04-17 07:37:05 +00:00
3fd1d09240
Fix typo, and break overly long line.
2003-04-16 13:10:40 +00:00
670e872d62
10 char is not sufficient here. sync w/ kame
2003-04-15 07:31:23 +00:00
5a6a4446f8
avoid hardcoded SOCK_xx; with markus; should allow ssh over SCTP
2003-04-14 14:36:47 +00:00
6605cddb45
new copyright notice (w/ TNF copyright). thanks millert
2003-04-08 01:19:08 +00:00
07d13217f3
Some e.g. cleanup: replace "eg" with "e.g.,". From Igor Sobrado in PR 19692.
2003-04-07 06:56:38 +00:00
2b75215a67
IPsec, not IPSEC. From Igor Sobrado in PR 19691.
2003-04-06 20:24:35 +00:00
fcb31fad16
sync w/ 3.6.1 (remove files that are removed on openssh repo)
2003-04-03 06:33:42 +00:00
e7e7c84a6a
sync w/ 3.6.1
2003-04-03 06:21:31 +00:00
f9930e137b
OpenSSH 3.6.1 as of 2003/4/3
...
* The 'kex guesses' bugfix from OpenSSH 3.6 triggers a bug
in a few other SSH v2 implementations and causes connections to
stall. OpenSSH 3.6.1 disables this bugfix when interoperating
with these implementations.
* RSA blinding is now used by ssh(1), sshd(8) and ssh-agent(1).
in order to avoid potential timing attacks against the RSA keys.
Older versions of OpenSSH have been using RSA blinding in
ssh-keysign(1) only.
* ssh-agent(1) optionally requires user confirmation if a key gets
used, see '-c' in ssh-add(1).
* sshd(8) now handles PermitRootLogin correctly when UsePrivilegeSeparation
is enabled.
* sshd(8) now removes X11 cookies when a session gets closed.
* ssh-keysign(8) is disabled by default and only enabled if the
new EnableSSHKeysign option is set in the global ssh_config(5)
file.
* ssh(1) and sshd(8) now handle 'kex guesses' correctly (key exchange
guesses).
* ssh(1) no longer overwrites SIG_IGN. This matches behaviour from
rsh(1) and is used by backup tools.
* setting ProxyCommand to 'none' disables the proxy feature, see
ssh_config(5).
* scp(1) supports add -1 and -2.
* scp(1) supports bandwidth limiting.
* sftp(1) displays a progressmeter.
* sftp(1) has improved error handling for scripting.
2003-04-03 05:57:11 +00:00
6012957147
Don't build crypt() on NetBSD either.
2003-04-02 20:28:00 +00:00
0ac531f887
beeing->being from Igor Sobrado, PR misc/19814
2003-03-31 18:54:15 +00:00
0fe9c931b1
authenication->authentication, Instititute->Institute
...
from Igor Sobrado, PR misc/19814
2003-03-31 18:52:13 +00:00
5ffdabb8bc
kefile->keyfile (Igor Sobrado, PR misc/19909)
2003-03-31 16:54:47 +00:00
6653459566
principal, not pricipal.
2003-03-31 09:34:09 +00:00
7287c6007d
crential->credential princial->principal (Igor Sobrado, PR misc/19700)
2003-03-31 02:30:50 +00:00
9ef7047603
spelling fixes, one from PR misc/20753 (Igor Sobrado) + others
2003-03-31 00:04:03 +00:00
3ba55178f8
encype->enctype, from PR misc/20754 by Igor Sobrado
2003-03-30 23:57:54 +00:00
0acfa3bb9e
Consistently spell occurrence with two rs.
2003-03-29 22:48:37 +00:00
d544e20194
Support populating the environment from login.conf(5)'s "setenv"
...
capability, using a variation of setuserenv() from login_cap.c.
From Jim Bernard <jbernard@mines.edu>.
2003-03-26 11:16:13 +00:00
fe8a628004
Add missing
...
hp = strtok(NULL, ",");
to end of while loop which parses "host.allow" from login.conf(5).
Otherwise, sshd(8) would just infinite loop unless there was a
(positive or negative) match in the first word of the "host.allow" list...
2003-03-24 18:31:39 +00:00
829c77a0ca
* Add log messages for password or account expiry; it makes it much easier
...
to debug (on the server) why a login failed with this information.
* If _PASSWORD_CHGNOW is defined (it's -1 in NetBSD), check that pw_change
is not set to that before testing if the password has expired.
Still prevent the login, but log a different failure message in this case.
XXX: we need to decide if we let interactive logins occur in this case,
but force a password change, a la login(1).
2003-03-24 18:25:21 +00:00
6e22da944c
Fix Kerberos 4 procotocol problem mentioned in
...
[MIT krb5 Security Advisory 2003-004]/[heimdal-0.5.2 release notes]
by disable support for it.
2003-03-20 19:20:59 +00:00
359e4b88f5
OpenSSL Security Advisory [19 March 2003]
...
Klima-Pokorny-Rosa attack on RSA in SSL/TLS
2003-03-19 23:06:33 +00:00
9e2d007f93
enable RSA blinding by defualt. from bugtraq posting <3E758B85.6090300@algroup.co.uk>
2003-03-17 14:33:50 +00:00
990562bfef
.Nm does not need a dummy argument ("") before punctuation or
...
for correct formatting of the SYNOPSIS any longer.
2003-02-25 10:34:36 +00:00
658b9c6d28
In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked
...
via timing by performing a MAC computation even if incorrect
block cipher padding has been found. This is a countermeasure
against active attacks where the attacker has to distinguish
between bad padding and a MAC verification error. (CAN-2003-0078)
2003-02-20 07:39:17 +00:00
8a49ec08e4
"Utilize" has exactly the same meaning as "use," but it is more
...
difficult to read and understand. Most manuals of English style
therefore say that you should use "use".
2003-02-04 23:07:28 +00:00
86932ac56e
allocate, not alocate. Noted by mjl, not mjll.
2003-01-28 22:26:33 +00:00
bcc72a236b
The last change I made was a little aggressive in changing the paths of
...
the includes and broke cross builds from non-NetBSD arches. In this I
revert the problem section. (pointed out by uwe.)
2003-01-27 06:19:40 +00:00
0e936e5ed7
Fix password return values.
...
Addresses PR: lib/20074
2003-01-27 03:33:36 +00:00
3e20adf4a8
Prepend krb5/ to include paths that live in /usr/include/krb5/ so that
...
we can deprecate the requirement of -I/usr/include/krb5 when building
kerberos apps.
2003-01-26 22:06:39 +00:00
e218521496
Forgot one include file from the last change.
2003-01-26 21:59:49 +00:00
ebf72d8cce
Update script to modify include file paths to start the process of
...
deprecating the need to -I/usr/include/krb5.
2003-01-26 20:51:58 +00:00
5832481e3d
posesses -> possesses
...
Noted by Igor Sobrado in PR misc/19641
2003-01-03 04:20:09 +00:00
addd3c9aaa
Use standard section headers.
2003-01-02 13:00:49 +00:00
a04a0d4f28
Use standard section headers; sort sections.
2003-01-02 13:00:16 +00:00
cbe71a4b1a
Use standard section headers; space before punctuation in macro arguments.
2003-01-02 12:59:59 +00:00
1b6cc917f0
Use standard section headers.
2003-01-02 12:59:31 +00:00
0f34826bec
Sort sections.
2003-01-02 12:58:56 +00:00
a366ee7021
Fix Xref section, use standard section headers.
2003-01-02 12:57:31 +00:00
65e190048a
Add RCS Id.
2003-01-02 12:57:03 +00:00
432d470724
Fix typos pointed out by Igor Sobrado in PR misc/19621.
2003-01-02 00:22:29 +00:00
ec3682baa1
interal -> internal
...
equvalent -> equivalent
Pointed out by Igor Sobrado in PR misc/19629
2003-01-01 22:06:27 +00:00
50526e4837
It is not valid C++ to have a semicolon after
...
extern "C" {}
so remove it from __END_DECLS.
Noted by Andrew Pinski.
2002-12-31 02:13:20 +00:00
4027f3ad48
compatibility, not compatability; from Adrian Mrva.
2002-12-21 13:22:20 +00:00
7023f7abe2
described, not decribed.
2002-12-21 13:21:38 +00:00
d83bca180e
Two typos from Adrian Mrva.
2002-12-21 13:20:09 +00:00
1b706e9293
charcted probably means character.
2002-12-21 13:17:23 +00:00
c511c34d7c
securely, not securly. From Adrian Mrva.
2002-12-21 13:16:09 +00:00
8f9e9a2299
Correct misspellings of authentication and available. From Adrian Mrva.
2002-12-21 12:22:12 +00:00
5e3e5e1ae9
ther -> their, from Adrian Mrva.
2002-12-21 12:19:33 +00:00
b33be07056
Avoid conflict with reserved identifier "log".
2002-12-06 03:39:06 +00:00
5da0736e3a
Avoid strict alias warning.
2002-12-06 01:27:10 +00:00
512a461832
Change all functions that call gssapi_krb5_init() to call one of
...
two macros GSSAPI_KRB5_INIT() or GSSAPI_KRB5_INIT_MS() which call
the former, check its return code and bail on error.
Addresses PR lib/19191
Given a quick look by joda@.
2002-11-28 11:21:16 +00:00
itojun