Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
159,719 Commits 606 Branches 0 Tags 3.1 GiB
a87d1d52f9
Commit Graph

1088 Commits

Author SHA1 Message Date
gendalia
decff3d730 Add a preprocessor symbol so we can distinguish fixed openssl 
from the vanilla openssl.  Thanks <jlam>.
 2005-10-11 21:17:17 +00:00
gendalia
ed304be38e fix openssl 2.0 rollback, CAN-2005-2969 
approved by: agc
 2005-10-11 18:07:40 +00:00
rpaulo
e3886d37ea Add "openssl_" to man page references if they are available. 
Fixes part of PR security/13953. Fixing the rest of the PR requires
adding more man pages.
 2005-10-05 23:47:30 +00:00
manu
c557aaf18f Fix bug when using hybrid auth in client mode 
make xauth_login work again
add safety checks
 2005-09-26 16:24:57 +00:00
christos
e83e36d896 fix spelling from Liam Foy. 2005-09-24 22:45:51 +00:00
christos
b9301b48d0 fix typos. 2005-09-24 17:34:17 +00:00
christos
2192079ea8 use get*_r() 2005-09-24 14:40:59 +00:00
christos
54a773e9d7 Can we please stop using caddr_t? 2005-09-24 14:40:39 +00:00
wiz
e904ea2e97 Drop trailing whitespace. 2005-09-23 19:58:28 +00:00
manu
7e2e2c16ff Correctly initialize NAT-T VID to avoid freeing unallocated space 2005-09-23 14:22:27 +00:00
tron
3cc3e3c7a3 Correct documentation about Mode Config. It now works without XAuth, too. 
Patch supplied by Emmanuel Dreyfus on the "ipsec-tools" mailing list.
 2005-09-21 15:06:22 +00:00
tron
dc5127a31e Make "Mode Config" work if XAuth is not used. 2005-09-21 12:46:08 +00:00
christos
a6040f634b PR/13738: Johan Danielsson: ssh doesn't look at $HOME 2005-09-18 18:39:05 +00:00
christos
5391e24af6 Make -D behave like -L (obey GatewayPorts). Before it defaulted to listen 
to wildcard which is not secure.
 2005-09-18 18:27:28 +00:00
christos
218a95c0f2 Document that -D takes bind_address. 2005-09-18 16:22:35 +00:00
wiz
e6f32f6f02 Drop trailing whitespace. 2005-09-15 08:42:09 +00:00
christos
5db1262f0e PR/31261: Mark Davies: ssh invokes xauth with bogus argument 2005-09-09 12:24:37 +00:00
christos
453555bc8b PR/31243: Mark Davies: sshd uses pipes rather than socketpairs, making bash 
not execute .bashrc. Since socketpairs work on all NetBSD systems, make it
the default.
 2005-09-09 12:20:12 +00:00
elad
8f1a245ebd Use default_md = sha1 in ``req'' section too, so we don't fallback to MD5. 
Noted by smb@.
 2005-09-01 21:35:25 +00:00
elad
98e0d8f19f SHA1 is a better default than MD5. 
Discussed with Steven M. Bellovin.
Closes PR/30395.
 2005-08-27 12:32:15 +00:00
manu
0b97cbeb71 Update to ipsec-tools 0.6.1 2005-08-20 00:57:06 +00:00
manu
96ae7759c9 Import ipsec-tools 0.6.1 2005-08-20 00:40:43 +00:00
wiz
c8f5575b45 End sentence with a dot. 2005-08-14 09:25:08 +00:00
wiz
c91d1d213a Drop trailing whitespace. 2005-08-07 11:19:35 +00:00
manu
111c13fe24 Resolve conflicts caused by recent ipsec-tools-0.6.1rc1 import by prefering 
the newer software. Some useful local change might have been overwritten,
we'll take care of this soon.
 2005-08-07 09:38:45 +00:00
manu
df08b9e74a Update ipsec-tools to 0.6.1rc1 
Most of the changes since 0.6b4 have already been committed to the NetBSD
tree. This upgrade fixes some IPcomp and NAT-T related problems that were
left unadressed in the NetBSD tree.
 2005-08-07 08:46:11 +00:00
christos
1a191ad79e PR/29862: Denis Lagno: sshd segfaults with long keys 
The problem was that the rsa fips validation code did not allocate long
enough buffers, so it was trashing the stack.
 2005-07-30 00:38:40 +00:00
he
182dc837b5 Move a variable declaration to the variable declaration section of 
the enclosing block from within the middle of active code, so that
this compiles with older gcc.  Fixes build problem for vax.
 2005-07-14 11:26:57 +00:00
manu
b0602a2f44 Add safety checks for informational messages 2005-07-12 21:33:01 +00:00
tron
50c09443b0 Backout botched patch, approved by Emmanuel Dreyfus. 2005-07-12 19:17:37 +00:00
manu
132d72e25b Add SHA2 support 2005-07-12 16:49:52 +00:00
manu
7736ad81cf Add comments on how to use the hook scripts without NAT-T 2005-07-12 16:33:27 +00:00
manu
ecb971f5f8 Don't wipe out IKE ports for SA update as it breaks things: the SA is taken 
from an existing SA and already has matching IKE ports.
 2005-07-12 16:24:29 +00:00
manu
91b9c188b3 Add support for alrogithms with non OpenSSL default key sizes 2005-07-12 14:51:07 +00:00
manu
e0dd78cfbd Don't use adminport when it is disabled 2005-07-12 14:15:39 +00:00
manu
4c94bccce3 Set IKE ports to 0 in SA when NAT-T is not in use. This fixes problems 
when NAT-T is disabled
 2005-07-12 14:14:46 +00:00
manu
929f80643d Safety checks on informational messages 2005-07-12 14:13:10 +00:00
manu
8bc1e3c0ac pkcs7 support 2005-07-12 14:12:20 +00:00
tron
d3544c4e45 Document that "aes" can be used for IKE and ESP encryption. 2005-07-07 12:34:17 +00:00
christos
eb8e3b9ad4 Add proper casts. Fix a problem where (uint32_t < ~0). Cast both ~0's to 
u_int, since this is what the author intended.
 2005-06-28 16:12:41 +00:00
christos
ca496ece2e - Add lint comments 
- Fix bad casts.
- Comment out unused variables.
 2005-06-28 16:04:54 +00:00
christos
a1625e9ee8 Fix an error I introduced in the previous commit. The length could be 0. 
Also parenthesize an expression properly.
 2005-06-28 16:03:09 +00:00
christos
444efb36db deal with casting/caddr_t stupidity. It is not 1980 anymore and people should 
start using void *, instead of caddr_t.
 2005-06-27 03:19:45 +00:00
christos
983e538712 Collect externs into one file instead of duplicating them everywhere. 2005-06-26 23:49:31 +00:00
christos
dd8cdde018 Fix compiler warnings. 2005-06-26 23:34:26 +00:00
christos
fba8d9ce60 Fix some of the pointer abuse, and add some const. Not done yet. 2005-06-26 21:14:08 +00:00
manu
dd3259cec0 NAT-T fix: We treat null ports in SPD as wildcard so that IKE ports 
are used instead. This was done on phase 2 initiation from the kernel
(acquire message), but not on phase 2 initiation retries when the
phase 2 had been queued  for a phase 1.
 2005-06-22 21:28:18 +00:00
manu
13ca728372 Consume NAT-T packets that have already been seen through MSG_PEEK 2005-06-15 07:29:20 +00:00
chs
7bbdd188e1 appease gcc -Wuninitialized on hp700. 2005-06-05 19:08:28 +00:00
manu
6ec5a5a9b7 Fix Xauth login with PAM authentication 2005-06-04 22:09:27 +00:00
manu
2c39301c40 Endianness bug fix 2005-06-04 21:55:05 +00:00
manu
311dff8be0 Missing 0th element in rm_idtype2doi array 2005-06-03 22:27:06 +00:00
lukem
d687f4502c appease gcc -Wuninitialized 2005-06-02 04:59:17 +00:00
lukem
936a4cd73f Don't attempt to close a random file descriptor upon error. 
Detected with gcc -Wuninitialized.
 2005-06-02 04:57:33 +00:00
lukem
08ef6270ca appease gcc -Wuninitialized 2005-06-02 04:56:14 +00:00
lukem
89f4d29f7d Appease gcc -Wuninitialized, in a similar method used elsewhere in the 
same function.
 2005-06-02 04:43:45 +00:00
lukem
6e3cdc676d appease gcc -Wuninitialized 2005-06-01 12:07:00 +00:00
wiz
8bf012821a Drop trailing whitespace. 2005-05-25 16:57:39 +00:00
wiz
bf77c4e4b3 Drop trailing whitespace and a grammar fix. 2005-05-25 10:09:36 +00:00
manu
bd592e6e99 Really delete phase 1 on Xauth failure 2005-05-20 07:34:47 +00:00
manu
48fade8581 Fix NAT-T plus IPcomp 2005-05-20 01:28:13 +00:00
manu
c6660c31c6 Fix parse bug in IPsec policies 2005-05-20 00:57:33 +00:00
manu
2e090d4afb When altering the lifetime, don't modify to configured proposal, duplicate 
it instead.
 2005-05-20 00:54:55 +00:00
christos
137ea645ec PR/30198: Lubomir Sedlacik: The forwarding listening host is optional; don't 
try to free it.
 2005-05-18 16:11:11 +00:00
manu
6add206c2f - Fix a double free 
- For acquire messages, when NAT-T is in use, consider null port as a
  wildcard and use IKE port
 2005-05-13 14:09:44 +00:00
manu
a5a80e2b4d Update sample config file to higher security settings 2005-05-10 10:22:03 +00:00
manu
aed94b2d22 Add two Cisco extensions for pushing PFS group and save password 
setting throug ISAKMP mode config
 2005-05-10 09:54:43 +00:00
manu
db7c068992 proposal_check fixes: 
- fix claim behavior in phase 1
- also check lifebyte
 2005-05-10 09:23:36 +00:00
lukem
56b6919254 Remove a stale #endif, and add one missing at EOF. 
Noticed by code inspection and confirming by diffing against the vendor source.
The previous code compiled, but it certainly wouldn't have DTRT ...
 2005-05-08 23:30:46 +00:00
christos
0a3fafc305 Update PAM from the "portable openssh" 4.0p1 2005-05-08 21:15:04 +00:00
he
8d29e11e90 Add a prototype for getph2bysaddr(), fixes build problem for isakmp.c. 2005-05-08 14:14:18 +00:00
manu
873e8e21a9 More NAT-T fixes for the situation where racoon acts as a VPN client 
Flush SA and generated SP on DPD timeout and deletion payloads
 2005-05-08 08:57:26 +00:00
manu
63a609062e From Manisha Malla <mmanisha@novell.com>: 
fix unsigned int checked for being negative
 2005-05-04 17:23:10 +00:00
manu
8bf053b3f3 on phase 2 acquire, lookup phase 2 by (src, dst, policy id) so that 
multiple SA can be used in transport mode

While I'm there, patch ipsec-tools ChangeLog to reflect the changes we
took from ipsec-tools-0_6-branch
 2005-05-03 21:08:47 +00:00
uwe
f3b48582e5 return statements in void functions make lint very confused. 2005-04-27 22:38:56 +00:00
manu
10802677c9 Bug fixes from the ipsec-tools 0.6 branch: 
- Fix NAT-T problems that prevented multiple peers behind the same NAT
  to talk to the same machine outside the NAT. This also require kernel
  fixes (already committed eralier)
- Fix a LP64 bug
- Fix NAT-T RFC conformance bugs (missing non ESP marker in packets)
- Add a -p option to setkey to display ports that could be used for ESP
  over UDP when printing policies
 2005-04-27 05:19:49 +00:00
matt
d627c3edde Don't emit struct units [] anymore. emit a struct units * const foo and 
in the C file initialize that to the static list.
 2005-04-25 17:20:51 +00:00
matt
5ac7f26c22 Emit headers with #include <parse_units.h> so that struct units is defined 
so that extern struct units <foo> will not cause errors with gcc4.x
 2005-04-25 01:25:25 +00:00
kleink
14fc3b7ba8 Fix printf format/argument mismatch. 2005-04-24 13:31:01 +00:00
christos
a8090b3963 add back moduli 2005-04-23 21:12:47 +00:00
christos
31ed567522 resolve conflicts. 2005-04-23 19:31:14 +00:00
christos
ed314b4eb0 from www.openssl.org 2005-04-23 19:10:56 +00:00
christos
0df7655544 bring back files that this update removed. 2005-04-23 16:55:03 +00:00
christos
8471a3b7da resolve conflicts. 2005-04-23 16:53:28 +00:00
christos
70917d9a4b Import OpenSSH 4.0 from ftp.openbsd.org 2005-04-23 16:28:01 +00:00
manu
6845962b31 Fix simple DES support (security problems for racoon to racoon setups) 
Fix broken generated policies flush
 2005-04-19 19:42:08 +00:00
christos
97b2d3b1c8 check for pwd != NULL in getpwnam_r. From John Nemeth. 2005-04-19 12:55:31 +00:00
manu
d3e5d568cd Fix SA lifebyte check 2005-04-18 11:15:01 +00:00
wiz
e35111eeee Some more minor changes, ok manu@. 2005-04-17 01:03:46 +00:00
wiz
1390e25dcf Some more English improvements after feedback from manu@; more formatting. 2005-04-15 13:23:58 +00:00
wiz
6e35cd769e Improve English in comments. 2005-04-15 11:10:32 +00:00
wiz
0f822df19c Improve english, improve formatting, sort options. 2005-04-15 10:58:11 +00:00
wiz
c0259e4629 Grammar fixes & improvements. 2005-04-14 11:47:26 +00:00
wiz
57066c3ab7 Grammar improvements. 2005-04-14 11:41:53 +00:00
wiz
097b641d74 kerberos -> Kerberos. 2005-04-14 11:35:08 +00:00
wiz
1b303684c3 Fix typo. 2005-04-14 11:34:37 +00:00
wiz
6b53ca1794 all SA -> all SAs. 2005-04-14 10:31:35 +00:00
wiz
6e903fbf59 New sentence, new line; some other dot fixes found during line breaking. 2005-04-14 10:30:28 +00:00
wiz
1131da3fb1 Use capitalized spelling of NetBSD. 2005-04-14 10:26:40 +00:00
wiz
6e8a3f159a Add LIBRARY section. 2005-04-14 10:25:58 +00:00
wiz
863b095e57 Punctuation nits. 2005-04-14 10:24:43 +00:00
wiz
0fb9995f39 Use Bq instead of []. 2005-04-14 10:24:18 +00:00
wiz
75b3bff7ae Punctuation nits. 2005-04-14 10:23:38 +00:00
wiz
dd317f6217 Use .In for header files. 2005-04-14 10:22:11 +00:00
wiz
9e8d46e23b No dot at end of SEE ALSO; Xr fixes. 2005-04-14 10:21:22 +00:00
wiz
9582558bf7 Mostly punctuation nits; break line after Xr arguments. 2005-04-14 10:20:01 +00:00
wiz
954b6abb72 Fix Dd and Dt arguments; fix two more typos; add comma in SEE ALSO; 
format author with An/Aq.
 2005-04-14 10:15:58 +00:00
wiz
2299aab679 We want .Os without argument. 2005-04-14 10:13:10 +00:00
wiz
f6b271af05 Add missing .Os. 2005-04-14 10:13:03 +00:00
wiz
472d87499c Uncomment xref to racoonctl. 2005-04-14 10:11:32 +00:00
wiz
acc79b78a6 hexa-decimal -> hexadecimal. 2005-04-14 10:07:35 +00:00
wiz
db0843b173 Add an article, and 2nd -> second. 2005-04-14 10:07:10 +00:00
wiz
f7c1b62f03 Use Xr for chroot. 2005-04-14 10:06:32 +00:00
wiz
d0e3ae6a43 oakley -> Oakley. 2005-04-14 10:05:45 +00:00
wiz
caf942511e aspell 2005-04-14 10:04:17 +00:00
wiz
2ea3f3fa43 Drop trailing whitespace. 2005-04-14 09:47:12 +00:00
wiz
03a7a7234a New sentence, new line. Remove Os argument (we are not KAME). 
NetBSD -> Nx. Use Sx for section cross-references.
 2005-04-13 23:12:01 +00:00
wiz
6cd6ff42d8 Drop trailing whitespace. 2005-04-13 23:09:35 +00:00
manu
5a6c417352 Resurrect TCP-MD5 support. This fixes bin/29915 2005-04-10 21:20:55 +00:00
manu
09a5230af6 Fix a buffer overrun in ISAKMP mode config SET handler 2005-04-04 21:43:26 +00:00
christos
55ef051c47 s/u_int32_t/uint32_t/ 
kill the rest of u32,u16,u8
 2005-03-26 03:48:44 +00:00
christos
9b98d82f76 s/u32/u_int32_t/ 2005-03-26 02:23:06 +00:00
christos
c6a84da3bd Don't define FIPS_selftest_failed locally. 2005-03-26 02:22:42 +00:00
christos
514fe26b5c The last broken merge. 2005-03-25 23:03:47 +00:00
christos
2674f87be1 Fix merge issue. 2005-03-25 21:54:20 +00:00
christos
db19fc60e2 Missed 2 #ifdef OPENSSL_FIPS... 2005-03-25 20:19:51 +00:00
christos
684dfceb07 Resolve conflicts. 2005-03-25 20:14:24 +00:00
christos
e72fb54032 import openssl-0.9.7f from ftp.openssl.org 2005-03-25 19:05:51 +00:00
kleink
ac37001e7f As observed in other modules, pull in <sys/queue.h> explicitly rather 
than relying on namespace pollution to do so.
 2005-03-17 20:40:42 +00:00
manu
d658ac5976 Updated ipsec-tools: 
2005-03-16  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{cftoken.l|localconf.h|privsep.c|racoon.conf.5}
          src/racoon/remoteconf.c: When running in privsep mode, check that
          private key and script paths match those given in the path section.

2005-03-15  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{isakmp_cfg|isakmp_cfg.h|isakmp_xauth.c}: initialize
          RADIUS accounting at startup
        * src/racoon/privsep.c: fix minor bug in PAM cleanup
        * src/racoon/isakmp_cfg.c: only call cleanup_pam if PAM is used

2005-03-14  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac: handle correctly dynamic libradius
        * src/racoon/cfparse.y: correctly initialize address pool
 2005-03-16 23:53:12 +00:00
manu
8a98c83667 Updated ipsec-tools: 
2005-03-16  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{cftoken.l|localconf.h|privsep.c|racoon.conf.5}
          src/racoon/remoteconf.c: When running in privsep mode, check that
          private key and script paths match those given in the path section.

2005-03-15  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{isakmp_cfg|isakmp_cfg.h|isakmp_xauth.c}: initialize
          RADIUS accounting at startup
        * src/racoon/privsep.c: fix minor bug in PAM cleanup
        * src/racoon/isakmp_cfg.c: only call cleanup_pam if PAM is used

2005-03-14  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac: handle correctly dynamic libradius
        * src/racoon/cfparse.y: correctly initialize address pool
 2005-03-16 23:52:42 +00:00
manu
e4563075a5 Updated ipsec-tools: 
2005-03-16  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{cftoken.l|localconf.h|privsep.c|racoon.conf.5}
          src/racoon/remoteconf.c: When running in privsep mode, check that
          private key and script paths match those given in the path section.

2005-03-15  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{isakmp_cfg|isakmp_cfg.h|isakmp_xauth.c}: initialize
          RADIUS accounting at startup
        * src/racoon/privsep.c: fix minor bug in PAM cleanup
        * src/racoon/isakmp_cfg.c: only call cleanup_pam if PAM is used

2005-03-14  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac: handle correctly dynamic libradius
        * src/racoon/cfparse.y: correctly initialize address pool
 2005-03-16 23:51:44 +00:00
manu
e298dc4582 Import ipsec-tools ipsec-tools-0_6-20050314 2005-03-14 08:14:24 +00:00
christos
daee9fbceb Add UsePam yes 2005-02-28 02:35:10 +00:00
manu
519aeb19a0 Resolve conflict 2005-02-24 20:59:24 +00:00
manu
6159f46a8d Import ipsec-tools ipsec-tools-0_6-20050224 2005-02-24 20:52:25 +00:00
manu
88856e235d Resolve conficts and remove autoconf files that were committed by mistake 2005-02-23 15:17:50 +00:00
manu
8006965b1b Import ipsec-tools 0.6 branch as of 2005/02/23. News from last imported version 
according to ipsec-tools' ChangeLog:

2005-02-23  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac, src/racoon/{Makefile.am|crypto_openssl.c}: optionnal
          support for patented algorithms: IDEA and RC5.
        * src/racoon/{isakmp_xauth.c|main.c}: don't initialize RADIUS if it
          is not required in the configuration
        * src/racoon/isakmp.c: do not reject addresses for which kernel
          refused UDP encapsulation, they can still be used for non NAT-T
          traffic (eg: NAT-T enabled racoon on non NAT-T enabled kernel)

2005-02-18  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{main.c|eaytest.c|plairsa-gen.c}
          src/setkey/setkey.c: don't use fuzzy paths for package_version.h

2005-02-18  Yvan Vanhullebus  <vanhu@free.fr>

        * src/racoon/isakmp_inf.c: Purge generated SPDs when getting a
          related DELETE_SA
        * src/racoon/pfkey.c: do NOT unbindph12() when SA acquire

2005-02-17  Emmanuel Dreyfus <manu@netbsd.org>

        From Fred Senault <fred.letter@lacave.net>
        * src/racoon/remoteconf.c: Fix a bug in script init

2005-02-17  Yvan Vanhullebus  <vanhu@free.fr>

        * src/racoon/ipsec_doi.c: Workaround for phase1 lifetime checks

2005-02-15  Michal Ludvig  <michal@logix.cz>

        * configure.ac: Changed --enable-natt_NN to --enable-natt-versions=NN,NN
 2005-02-23 14:53:33 +00:00
elric
3e9f769ad6 Turn protocol 1 krb5 support back on. 2005-02-22 02:29:32 +00:00
wiz
0e4368712b Fix Xref. 2005-02-20 21:10:54 +00:00
wiz
54c5fce210 Sort sections, whitespace nit, use .In. 2005-02-20 21:10:04 +00:00
manu
a7d348371a Remove KAME racoon distribution, which is not used anymore 2005-02-20 15:50:02 +00:00
onoe
9bd25f488a re-enable smime encrypt. fix from openssl-0.9.7e 2005-02-20 03:33:47 +00:00
thorpej
3029ac0bc4 Use __inline instead of inline. 2005-02-19 22:02:59 +00:00
christos
c4362dc746 Move duplicate block for pam to the 1.5 dispatch block where it belongs. 
Restore KRB4 and KRB5 blocks to the 1.5 dispatch block.
XXX: Should we remove the KRB4 block from the 2.0 dispatch block?
 2005-02-19 03:08:23 +00:00
thorpej
2a7ae5ee05 Fix package_version.h include path so it has a chance of working in 
our source tree.
 2005-02-18 06:28:52 +00:00
thorpej
b4668e17e3 Alter the include path for package_version.h so that it has a chance 
of working in our source tree.
 2005-02-18 06:24:38 +00:00
elric
48f369dafd Put Kerberos configuration options back into client config parsing 
routines.
 2005-02-16 05:04:05 +00:00
he
e4afa5eb28 A sig_atomic_t isn't necessarily compatible with a %d printf format; 
on evbsh5 sig_atomic_t is an __int64_t.  Since this only stores a
signal number, cast to int before printing.
 2005-02-15 16:22:12 +00:00
christos
0b6f3b5222 add moduli from openssh-3.9p1 2005-02-13 19:34:24 +00:00
christos
d6e447b0f6 Add PAM hooks from portable OpenSSH. 2005-02-13 18:14:04 +00:00
christos
b3a1b19bc5 Make this compile. 2005-02-13 18:13:34 +00:00
christos
cb2bba8c62 Add pam files from portable openssh 3.9p1 2005-02-13 18:11:30 +00:00
christos
ea7d905559 Bring back files we need from the dead. 2005-02-13 06:01:36 +00:00
christos
43dbbb7ed8 Merge conflicts. 2005-02-13 06:01:14 +00:00
christos
8b8ab8547b Resolve conflicts. 2005-02-13 05:57:25 +00:00
christos
797648d563 Change the order of the set{e,}{u,g}id calls. NetBSD is stricter and needs 
to keep the euid until the end. Add a bit of debugging.
 2005-02-13 05:54:27 +00:00
christos
cad419c94d from ftp.openbsd.org 2005-02-13 00:52:40 +00:00
manu
1cbaff0bc3 Remove .cvsignore files commtted by mistake 2005-02-12 15:52:36 +00:00
manu
a8f0ad3c37 Import ipsec-tools (tag ipsec-tools-0_6-base in ipsec-tools CVS) 
ipsec-tools is a fork from KAME racoon/libipsec/setkey, with many
enhancements.
 2005-02-12 11:11:11 +00:00
simonb
9cbc979889 Bring closer to reality. 2005-02-07 12:26:56 +00:00
christos
83da2f6968 don't throw const away for no reason. 2004-12-11 06:58:20 +00:00
christos
fbed044c7e Grr, this was not updating lastlogx! 2004-11-11 22:08:39 +00:00
thorpej
b454543f45 Apply patches as discussed on: 
http://mail-index.netbsd.org/tech-net/2004/11/05/0004.html

Slightly modified to differentiate the version string from a stock racoon.

	* auth_gssapi.h (GSSAPI_DEF_NAME): Change from "ike" to "host".
	(gssapi_get_default_id): Rename to gssapi_get_id.
	(gssapi_get_default_gss_id): New prototype.
	* cfparse.y (GSSAPI_ID): Rename to GSS_ID.
	(GSS_ID_ENC, GSS_ID_ENCTYPE): New tokens.
	(gssenc_statement): New statement.
	(isakmpproposal_spec): Use GSS_ID token.
	(expand_isakmpspec): Fill in gssid in the new proposal only
	if authmethod is OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB.  If the
	GSS ID is not provided, call gssapi_get_default_gss_id() to
	place the default ID in the proposal.
	* cftoken.l (S_GSSENC): New start condition.
	(<S_RMTP>gss_id): New, return the GSS_ID token.
	(<S_RMTP>gssapi_id): Return the GSS_ID token.
	(<S_INI>gss_id_enc, <S_GSSENC>latin1, <S_GSSENC>utf-16le)
	(<S_GSSENC>{semi}): New, tokenize the "gss_id_enc enctype;"
	statement.
	* gssapi.c: Include <unistd.h>.
	(gssapi_get_default_gss_id): New function.
	(gssapi_init): Disable a broken debugging message.  Make
	printf formats consistent in their handling of non-NUL-terminated
	strings.
	(gssapi_get_default_id): Rename to...
	(gssapi_get_id): ...this.  If the proposal has a gssid, vdup()
	that and return it.  Disable a broken debugging message.  Make
	printf formats consistent in their handling of non-NUL-terminated
	strings.
	* ipsec_doi.c: Include <iconv.h>.
	(get_ph1approval): Make printf formats consistent in their handling
	of non-NUL-terminated strings.  Call gssapi_get_id() instead of
	gssapi_get_default_id(), and remove some complexity that has been
	pushed into that function.
	(t2isakmpsa): When parsing the OAKLEY_ATTR_GSS_ID attribute,
	check convert the attribute from UTF-16LE to ISO-Latin-1, unless
	we are configured to assume the attribute is already ISO-Latin-1
	encoded.
	(setph1attr): When setting the OAKLEY_ATTR_GSS_ID attribute,
	convert the attribute from ISO-Latin-1 to UTF-16LE, unless we
	are configured to encode the attribute in ISO-Latin-1.
	* localconf.c (setdefault): Set the default GSS ID encoding type
	to UTF-16LE.
	* localconf.h (LC_GSSENC_UTF16LE, LC_GSSENC_LATIN1)
	(LC_GSSENC_MAX): New constants.
	(struct localconf): Add gss_id_enc member.
	* main.c (RACOON_VERSION): Append " - NetBSD 20041110" to the
	version string.
	* racoon.conf.5: Document changes to GSS ID encoding and default
	GSS ID computation.  Document "gss_id_enc enctype;" statement.
	* samples/racoon.conf.sample-gssapi: Update and add comments to
	provide more information.
 2004-11-10 20:23:28 +00:00
christos
d08f4201ee For ptys of the form /dev/pts/n, print foo@pts/n instead of foo@n. Check 
that strrchr() returns non null before using it.
 2004-11-10 16:55:55 +00:00
dsl
1869f0e146 Add (unsigned char) cast to ctype functions 2004-11-05 21:56:01 +00:00
dsl
3d446c0f42 Add (unsigned char) cast to ctype functions 2004-11-03 21:01:45 +00:00
dsl
e2f49bd9e2 Add (unsigned char) cast to ctype functions 2004-10-30 15:15:37 +00:00
dsl
8668419e38 Add (unsigned char) cast to ctype functions 2004-10-30 08:34:24 +00:00
lha
2c875217bb Merge in changes between 0.6.2 and 0.6.3 2004-09-14 08:08:19 +00:00
lha
ac5d4384ae remove generated files 2004-09-14 07:50:24 +00:00
lha
a53f6df83e Import heimdal 0.6.3 
Changes in release 0.6.3

 * fix vulnerabilities in ftpd
 * support for linux AFS /proc "syscalls"
 * support for RFC3244 (Windows 2000 Kerberos Change/Set Password) in
   kpasswdd
 * fix possible KDC denial of service
 * bug fixes
 2004-09-14 07:45:53 +00:00
mycroft
6e317e9e72 Disable the "may kill you" message, because: 
1) It's not documented anywhere.
2) The problem it's attempting to warn about is not documented anywhere.
3) There are no example configs (or any I found with Google) that use the
   "listen" directive.
4) In any event, it's poorly worded and unclear what it's talking about.
 2004-08-06 13:57:05 +00:00
drochner
14c8904f79 rename local pow10 function to avoid conflicts with the C99 libm one; 
while not implemented in NetBSD yet is is considered reserved by gcc-3.4
 2004-08-05 16:55:34 +00:00
wiz
e8e1e9c2fe Sync with Heimdal: krb5_set_password.3,v 1.7 (except for a reference to 
a man page we don't have yet):
Document krb5_set_password_using_ccache and krb5_passwd_result_to_string.
Ok'd by lha.
 2004-07-18 15:08:50 +00:00
wiz
258b1bfb2e Remove superfluous comma; grammar fixes; split sentence 
in two for better understanding.
XXX: krb5_set_password_using_ccache not described.
 2004-07-14 09:21:59 +00:00
jonathan
8045e967b9 Fix typo (space added at beginning of line in an editor window under 
the shell where I retested the Makefile changes, sigh...)
 2004-07-14 07:12:25 +00:00
jonathan
f17171cf5d Restore Heimdal Id as $Heimdal:, add NetBSD ID. 2004-07-14 07:06:44 +00:00
jonathan
98b92eb4a5 Commit manpage for krb5_set_password(3), based on Heimdal-20040606, 
with small revisions by myself, reviewed/approved by Love.
 2004-07-14 07:02:07 +00:00
he
8416ac87c6 Print ssize_t-typed variables using %zd format, not just %d. 
Fixes build problem observed when compiling for hpcarm.
 2004-07-13 14:15:17 +00:00
jonathan
e5f57f3a70 Commit changes from Heimdal-current, as per discussion with Love 
(lha@NetBSD.ORG), to incorporate contemporary (last-year-ish)
set-password and change-password extensions derived RFC-3244
(Microsoft set-password/change-password extensions), and the
subsequent MIT-KRB5 APIs for changing and setting passwords.

Required for compatibility with recent (2002/2003-ish) open-source
code which uses the MIT KRB5 APIs for setting passwords, or for
joining Microsoft domains as a  "computer account".

Modified files (for pullup tracking purposes):
	lib/libasn1/Makefile
	crypto/dist/heimdal/lib/asn1/k5.asn1
 	crypto/dist/heimdal/lib/krb5/changepw.c
 	crypto/dist/heimdal/lib/krb5/krb5-protos.h
 	crypto/dist/heimdal/lib/krb5/krb5.h
 2004-07-12 20:44:56 +00:00
christos
763b8e76a6 Now that we have addrlen, use it. 2004-07-06 02:59:55 +00:00
drochner
c62dff1bf7 fix a const'ification inconsistency, noticed by gcc-3.4 2004-07-01 21:27:42 +00:00
drochner
5e420ba772 restore behaviour before the 0.9.7d import: fall back to /dev/urandom 
if ~/.rnd is not present.
(This code is with #ifdef __OpenBSD__ in openssl now; this change just
generalizes it.)
(approved by tls)
 2004-06-21 15:14:16 +00:00
itojun
166adfa9e5 sync w/ 20040617. 2004-06-17 03:42:55 +00:00
itojun
f7968a3c82 version 20040617a, includes important fix about cert handling 2004-06-17 03:38:44 +00:00
lha
76164d845a Now that we have res_nsearch, use it. Thanks christos for adding it. 2004-05-25 11:15:43 +00:00
lha
bba70dc29c Merge changes between Heimdal 0.6.1 and 0.6.2 2004-05-08 13:27:58 +00:00
lha
0575824546 Import of Heimdal release 0.6.2 
* Fix possible buffer overrun in v4 kadmin (which now defaults to off)
 2004-05-08 13:15:02 +00:00
jonb
e0bc90b23e Set LoginGraceTime back to 600 like it used to be. This should 
help slow machines with long keys to still work like they did with
NetBSD 1.6 and before.
 2004-05-01 06:06:33 +00:00
itojun
b4a3a9e6c1 properly validate phase 1 signature. 
http://www.vuxml.org/freebsd/d8769838-8814-11d8-90d1-0020ed76ef5a.html
 2004-04-12 03:34:05 +00:00
itojun
604a0b444a KAME racoon as of 2004/4/12 2004-04-12 03:26:57 +00:00
lha
e4e583e45c From Heimdal, cast size_t to unsigned long for LP64 platforms. 2004-04-02 20:58:36 +00:00
lha
8aa367e8da more text how to do imports 2004-04-02 15:11:21 +00:00
lha
4d21efe5f7 Merge changes between heimdal-0.6 and heimdal-0.6.1 2004-04-02 14:59:46 +00:00
lha
a08e247c98 Import heimdal-0.6.1 
Changes in release 0.6.1
 * Fixed ARCFOUR suppport
 * Cross realm vulnerability
 * kdc: fix denial of service attack
 * kdc: stop clients from renewing kerberos 4 tickets into the future
 * bug fixes
 2004-04-02 14:47:00 +00:00
itojun
7fba5a69cf reject packet with too big isakmp message length field. 2004-03-31 07:19:27 +00:00
groo
4b32eb44a7 Resolve conflicts. In particular, prefer OpenSSL's BIO_strl* and 
BIO_strncpy over ours.
 2004-03-20 04:32:34 +00:00
groo
5a374ad0ce Import OpenSSL 0.9.7d to address: 
1. Null-pointer assignment during SSL handshake
	2. Out-of-bounds read affects Kerberos ciphersuites
 2004-03-20 04:22:06 +00:00
groo
0684427439 Import OpenSSL 0.9.7d to address: 
1. Null-pointer assignment during SSL handshake
	2. Out-of-bounds read affects Kerberos ciphersuites
 2004-03-20 04:22:04 +00:00
wiz
eec56f3b12 Bump date for previous. 2004-03-06 23:38:40 +00:00
itojun
da6bd485cd add missing description of "EnableSshKeysign". 2004-03-06 14:33:08 +00:00
itojun
c6a556a5b6 endian mismatch. from iij seil team 2004-01-16 02:25:14 +00:00
itojun
3c3791b847 validate hash on info exchange. bugtraq <20040113213940.GA1727@hzeroseven.org> 2004-01-14 09:17:42 +00:00
dyoung
4758291178 Fix the checkflist for builds without Kerberos 4 (MKKERBEROS4=no) 
and without Kerberos 4 & 5 (MKKERBEROS=no). Previously checkflist
complained of missing files.

* move kerberos- and kerberos 4-only files into new flists,
  distrib/sets/lists/*/krb.*

* make the flist generators grok MKKERBEROS{,4} variables

* fix Makefiles which treat MKKERBEROS=no as MKKERBEROS5=no.
  9 out of 10 experts agree that it is ludicrous to build w/
  KERBEROS4 and w/o KERBEROS5.

* fix header files, also, which treat MKKERBEROS=no as MKKERBEROS5=no.

* omit some Kerberos-only subdirectories from the build as
  MKKERBEROS{,4} indicate

(I acknowledge the sentiment that flists are the wrong way to go,
and that the makefiles should produce the metalog directly.  That
sounds to me like the right way to go, but I am not prepared to do
revamp all the makefiles.  While my approach is expedient, it fits
painlessly within the current build architecture until we are
delivered from flist purgatory, and it does not postpone our
delivery. Fair enough?)
 2003-12-11 09:46:26 +00:00
itojun
2a85abd333 avoid memory leak. hint from Andrew Lunn 2003-11-23 08:33:13 +00:00
itojun
5451f8a14e do not malloc(0). Andrew Lunn 2003-11-23 08:23:02 +00:00
jonathan
dedf78268d Patch OpenSSL to use opencrypto (aka /dev/crypto), if configured and 
(per kernel policy) for crypto transforms for which hardware
acceleration is available. Affects:

   crypto/dist/openssl/crypto/engine/eng_all.c
   crypto/dist/openssl/crypto/engine/hw_cryptodev.c
   crypto/dist/openssl/crypto/evp/c_all.c

as posted to tech-crypto for review/comment on 2003-08-21.
 2003-11-20 00:55:51 +00:00
wiz
4bbfee09ca Various typo fixes from Jonathon Gray via jmc@openbsd. 2003-11-17 11:16:10 +00:00
itojun
6de72ce0f8 typo. minoura 2003-11-13 10:35:40 +00:00
yamt
1356e8977e pfkey_dump_sadb: when it get an error using sysctl, 
mimic an error msg from keysock so that caller can process it correctly.

PR/23122.
 2003-11-09 15:37:24 +00:00
itojun
aec01dda91 sync w/ openssl 0.9.7c. shlib minor bump for libcrypto. 
(ERR_release_err_state_table() added)
 2003-11-04 23:54:26 +00:00
itojun
385718bc5c more unifdef 2003-11-04 23:45:56 +00:00
itojun
6b4e6697c9 openssl 0.9.7c. security changes are already in place 2003-11-04 23:25:09 +00:00
itojun
746d6bb953 bring in kame rev 1.32. PR 23122 2003-11-04 04:30:38 +00:00
thorpej
1244cc6c62 Fix NULL vs 0 mixup. 2003-10-25 20:48:10 +00:00
itojun
f90a2e28b1 do not build "null ESP and no AUTH" proposal. (racoon 174) by Tom Lendacky 2003-10-23 07:23:50 +00:00
fvdl
6a6c3ca82f Don't assign NULL as an integer. 2003-10-21 03:06:55 +00:00
fvdl
73d47a4f07 Don't return NULL as an integer. 2003-10-21 03:03:39 +00:00
thorpej
eb3570747f Make sure HAVE_OPENSSL is undefined, to avoid depending on both 
libcrypto and libdes.  Patch by lha@, posted to tech-userlevel.
 2003-10-09 04:31:17 +00:00
itojun
ac0a546d0d realloc error check failure; Greg Troxel, sync w/kame 2003-10-03 21:53:32 +00:00
itojun
48b0bfaad0 support policy w/o selector. 2003-10-02 19:53:01 +00:00
itojun
3c068c5948 correct unsafe realloc(). 2003-10-02 19:52:43 +00:00
itojun
b3cd345741 more fixes from 0.9.7c, from openbsd 2003-10-02 02:26:17 +00:00
itojun
ae91503b5d from openbsd: 
Correct some off-by-ones.  They currently don't matter, but this
is for future safety and consistency.
OK krw@, markus@
 2003-10-02 02:25:05 +00:00
christos
0a7cc0d7d1 Apply security fix: http://www.openssl.org/news/secadv_20030930.txt 
Changelog from: http://cvs.openssl.org/chngview?cn=11471
 2003-09-30 15:59:53 +00:00
mycroft
5749c53775 Fix what is obviously a bug: valloc() -> vmalloc(). Now racoon(8) doesn't core 
dump all the time.
 2003-09-25 01:00:32 +00:00
itojun
34439bf0c9 off-by-one. from openbsd 2003-09-22 22:12:05 +00:00
itojun
28c3d43114 typo. markus@openbsd 2003-09-18 12:42:33 +00:00
itojun
841f7944e5 protect against double free; #660; zardoz at users.sf.net 
from openbsd
 2003-09-18 08:16:40 +00:00
itojun
c2011dbc01 missing buffer_free(&encrypted); #662; zardoz at users.sf.net 
from openbsd
 2003-09-18 08:16:15 +00:00
christos
898af9fa6c make sure we init nalloc. 2003-09-18 01:41:56 +00:00
christos
3171afa413 fix problem in previous patch 2003-09-18 01:35:07 +00:00
christos
d4d840dd36 More buffer size adjusted before allocation succeeded fixes. Bump to 20030917. 
From FreeBSD (with an additional one from me).
 2003-09-17 23:19:02 +00:00
christos
51b1a61a2d dammit, don't apply patches blindly. 2003-09-16 23:18:24 +00:00
christos
08d244b791 bring more fixes from 3.7.1 2003-09-16 23:16:59 +00:00
lukem
5de000c8d7 crank __NETBSDSSH_VERSION for buffer.c fix 2003-09-16 17:39:32 +00:00
christos
325fccf53f Do not record expanded size before attempting to reallocate the associated 
memory. From OpenBSD, via FreeBSD.
 2003-09-16 13:22:57 +00:00
itojun
249c9d88ea use sysctl to dump SAs if possible (not really tested) 2003-09-12 08:44:34 +00:00
itojun
efbe374b9f SKEY and BSDAUTH #ifdef mixup 2003-09-08 21:00:41 +00:00
itojun
f13cb0c7b2 bzero() 2nd arg mistake. found by openbsd guys. from kame 2003-09-04 00:12:56 +00:00
itojun
ca14877c77 reject rc5/idea/mdc2 commands if OPENSSL_NO_xx is specified 2003-08-27 21:05:02 +00:00
wiz
31fd31ccf7 Make getlastlogx have the pathname to the lastlogx database as first 
argument, to be consistent with updlastlogx.

Approved by christos, reviewed by kleink.

[The lastlogxname function should not be used any longer.]
 2003-08-26 16:48:32 +00:00
itojun
d9c46578d1 update racoon to 2003/8/26 version. mostly minor bugfixes. 2003-08-26 03:31:50 +00:00
itojun
2cfb643fda KAME racoon, as of 2003/08/26 2003-08-26 03:27:01 +00:00
itojun
b5f8b9a7c0 KAME libipsec/libpfkey, 2003/08/26 2003-08-26 03:25:29 +00:00
itojun
eb24db53ab style; total size of buf is (num + 3) 2003-08-13 01:29:41 +00:00
simonb
658a8c458e Fix bad use of "sizeof(pointer)" where the length of a buffer was the 
intention.  Fixes problems with least ssh's known_hosts file and factor.

Patch from Berndt Josef Wulf's PR lib/22347.
 2003-08-12 03:25:24 +00:00
agc
dc4f8c2e1a Move UCB-licensed code from 4-clause to 3-clause licence. 
Patches provided by Joel Baker in PR 22252, verified by myself.
 2003-08-07 09:15:17 +00:00
itojun
5de5abdd3d consistently use new DES API, re-enable des regression test 2003-07-31 08:53:58 +00:00
itojun
965395c9f3 re-enable __RCSID, sys/cdefs_elf.h rev 1.15 fixed the problem 2003-07-30 00:34:16 +00:00
itojun
f33c57af22 disable __RCSID for now, somehow it puts some of integer variables 
into .text region
 2003-07-29 23:17:39 +00:00
itojun
308bb7eb39 remove unused macro. PR 21150 2003-07-29 04:45:39 +00:00
itojun
4c43ef4ce1 xx_keylen has to return bits, not bytes. KAME-PR-488 2003-07-29 04:30:54 +00:00
jwise
3514116803 Apply patch from lha@, via OpenBSD portable SSH's revision 1.11 of this file: 
mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
  otherwise the kerberos credentinal is stored in a memory cache
  in the privileged sshd.

Presumably, this will also come in as part of a later OpenSSH release via
`cvs import', but this is worth having now.
 2003-07-28 15:50:17 +00:00
cjep
c6912d0211 remove duplicate manual 2003-07-26 15:11:43 +00:00
itojun
08a1c4bcd3 empty commit, just to update timestamp and force rebuild of krb.h. 2003-07-26 01:07:35 +00:00
itojun
805c102737 fix compilation on sparc64. reported by Juergen Hannken-Illjes 2003-07-25 09:06:02 +00:00
itojun
e8876f361f avoid "unsigned u_int32_t" 2003-07-25 02:02:43 +00:00
itojun
88ec7d3792 bring back krb4 support, just to suppress unwanted noise from other developers. 
note that official openssh distribution have already dropped kerberosIV support,
therefore maintenance cost needs to be paid by us.  and have no intent to help.
 2003-07-24 15:31:52 +00:00
itojun
f4401cd869 upgrade openssl to 0.9.7b. (AES is now supported) 
alter des.h to be friendly with openssl/des.h (you can include both in the
same file)
make libkrb to depend on libdes.  bump major.
massage various portioin of heimdal to be friendly with openssl 0.9.7b.
 2003-07-24 14:16:30 +00:00
itojun
2836295a36 OpenSSL 0.9.7b, major API changes included 2003-07-24 08:25:41 +00:00
itojun
0f3017142e use snprintf (actually, "addr" can be supplied from outside, and if "addr" 
points to shorter-than-24 buffer we will overrun buffer.  bad API)
 2003-07-24 04:41:13 +00:00
itojun
7b7c18c4c5 the block is just for krb4 (not for krb5) so should be removed. lha 2003-07-23 21:25:08 +00:00
itojun
c55f89ad19 typo on #if condition converesion 2003-07-23 21:03:03 +00:00
itojun
0091553542 define symbols even when !KRB4, to simplify shlib management. lha 2003-07-23 20:48:34 +00:00
itojun
8556dff80c remove KRB4 and AFS support. sync w/ openssh main tree 2003-07-23 03:52:16 +00:00
itojun
a9503412ba license clarification (UCB 3-clause, and progressmeter) 2003-07-23 03:51:27 +00:00
itojun
46471dc1e9 cast for signed/unsigned mixup 2003-07-14 18:27:48 +00:00
itojun
1bffbcd4a1 correct ^@ incorrectly committed 2003-07-14 18:26:05 +00:00
itojun
a157f97782 unifdef VMS/WIN16/WIN32 in public headers, at least 2003-07-14 14:06:14 +00:00
itojun
c187ba994b use bounded string op (only one sprintf remains - still no clue) 2003-07-14 13:24:00 +00:00
itojun
a395b35ba2 delint 2003-07-14 13:07:05 +00:00
itojun
848c8ac0ef use bounded string ops (especially libraries) 2003-07-14 13:05:19 +00:00
itojun
afdee9affa __RCSID. add missing copyright in *.y and *.l (sync w/kame) 2003-07-12 09:37:09 +00:00
itojun
03eefe2ecf sync w/ latest racoon 2003-07-12 09:02:24 +00:00
itojun
dc30725eaf kame racoon 2003/7/12. lots of lots of stability fixes. 2003-07-12 08:45:39 +00:00
lukem
b1395375fd add __RCSID("$NetBSD$"), because it's hard to track our changes in a 
binary when we only have the vendor's RCSID.
 2003-07-10 01:09:41 +00:00
wiz
fc3229a199 Undo unintended commit. 2003-07-04 21:57:16 +00:00
wiz
ee8924aa2e Fix off-by-one. From William Allen Simpson in PR 22012. 2003-07-04 21:56:48 +00:00
wiz
f9cc3a858b Bump date for recent changes. 2003-07-04 12:33:11 +00:00
wiz
de2728383c Punctuation fixes. 2003-07-04 12:31:33 +00:00
wiz
d9fb607438 Quote punctuation so it gets marked up. 2003-06-30 11:52:01 +00:00
wiz
ed9861f855 Remove dot from middle of sentence. 2003-06-27 23:10:37 +00:00
wiz
554f6e9041 Quote question mark; punctuation fix; new sentence, new line. 2003-06-27 22:37:13 +00:00
wiz
a4fd08f60c Quote question mark. 2003-06-27 22:35:48 +00:00
wiz
5e88ad0f63 Remove superfluous macro calls, add newline where missing, and 
use \&[ (and similar) instead of \*(lB, since it works with both old and new groff.
 2003-06-27 22:31:29 +00:00
wiz
bb64da9790 Drop trailing spaces; fix punctuation problems; 
put Nd argument in double quotes since it contains more than 9 words; spell out month.
 2003-06-27 14:46:55 +00:00
wiz
e6ecde23a1 Be consistent in how we call .rhosts authentication. 2003-06-27 09:14:56 +00:00
wiz
7e3682db3e Sort sections; replace man macro with mdoc macro; 
sort SEE ALSO; empty line -> .Pp.
 2003-06-26 10:03:39 +00:00
aymeric
9bdcb47acd add missing #ifdef __RCSID 
(these files are compiled as host tools)
from Nicolas Ollinger, fixes PR#21892
 2003-06-23 20:02:53 +00:00
itojun
1430af815a discourage the use of aggressive mode 2003-06-16 08:40:11 +00:00
itojun
9d1e759d63 typo: get correct counters; introduced during rekeying change. (openbsd rev 1.26) 2003-05-26 07:57:38 +00:00
lha
49838f37b9 adapt to heimdal 0.6 2003-05-25 22:07:56 +00:00
itojun
3f62dc6d24 strlcpy 2003-05-17 18:19:20 +00:00
itojun
93851338f2 sscanf overrun 2003-05-17 01:12:28 +00:00
lha
b224fef26e Fix up rcsid lossage 2003-05-15 21:36:30 +00:00
lha
f80f84e684 no longer used 2003-05-15 20:56:45 +00:00
lha
28d69ea823 merge in heimdal 0.6 2003-05-15 20:44:06 +00:00
lha
245a590853 import of heimdal 0.6 2003-05-15 20:28:38 +00:00