bc7b65a647
don't lose information while we cast
2002-06-24 15:46:34 +00:00
7d6a7caf6a
Cast arguments so that this file will compile on less forgiving architectures
...
like arm32.
2002-06-24 15:32:58 +00:00
3ea946f134
sync with openssh 3.3.
...
local mods included to make it compile with openssl 0.9.6d.
2002-06-24 05:48:24 +00:00
3dfc6702ef
clean ssh-keysign build dir before import.
2002-06-24 05:45:17 +00:00
9486e6fd01
it shouldn't be imported
2002-06-24 05:28:32 +00:00
b5222aff66
OpenSSH 3.3 as of June 24, 2002.
...
- ssh is no longer seruid root. ssh-keyscan is added to read secret host keys.
protocol version 1 rsh-like authentication is gone.
- FallBackToRsh is deprecated.
2002-06-24 05:25:39 +00:00
c650ef5756
Remove (commented out) krb_equiv(3) reference, suggested by joda.
2002-06-13 11:19:48 +00:00
d844f0d7b1
Fix Xrefs.
2002-06-13 00:15:09 +00:00
78c59017cc
Remove photurisd reference.
2002-06-13 00:14:26 +00:00
8def406232
Comment out Xref to krb_equiv(3), which does not exist.
2002-06-13 00:09:06 +00:00
b745604c00
sync sockaddr_ntop with latest openssh (minor change)
2002-06-09 22:22:55 +00:00
7c75b5ec2f
sync with 0.9.6d. shlib minor for libssl and libcrypto
...
is cranked for additional functions.
2002-06-09 16:12:52 +00:00
7720435b28
openssl 0.9.6d
2002-06-09 15:21:32 +00:00
f0231f96aa
do not propose IDEA cipher on SSL connection, as our default installation
...
does not handle IDEA.
TODO: dynamically enable IDEA if libcrypto_idea is linked
2002-06-09 02:16:18 +00:00
be5f1d082c
use getnameinfo on diag printing. sync w/openssh in openbsd
2002-06-08 21:17:57 +00:00
e67961b545
check sshd uid/chroot dir on UsePrivilegeSeparation mode, and die if they
...
do not exist. sync w/openssh
2002-05-29 23:54:29 +00:00
a5c3041a1b
bump date for rhosts auth fix
2002-05-27 13:45:40 +00:00
b274d69ad0
correct rhosts authentication. should fix PR 17023
2002-05-27 13:45:17 +00:00
a46557038c
now arc4random is in libc, we don't need to supply local version
2002-05-25 00:29:52 +00:00
a0da78395e
correct sha2 interoperability. From: "JuanJo Ciarlante" <jjo@mendoza.gov.ar>
2002-05-20 13:12:45 +00:00
e26b1052bb
use /var/chroot/sshd instead of /var/empty. suggested by christos
2002-05-16 20:59:35 +00:00
f47caddaf3
turn on privilege separation, as 3.2.1 default do.
...
requires sshd uid/gid as well as /var/empty directory.
2002-05-14 23:33:07 +00:00
ca89359407
sync with 3.2.1 as of 5/13.
...
NOTE: privilege separation is turned off by default
as it seems there still are issues with setsid().
2002-05-13 02:58:17 +00:00
24255a6a60
OpenSSH 3.2.1 as of 2002/5/13
2002-05-13 02:28:40 +00:00
c68a2428ba
correct handling of "unique" policy. bump version to 20020507
...
(corresponds to filename in ftp://ftp.kame.net/pub/kame).
2002-05-13 02:10:34 +00:00
c0fa39f338
correct plogv().
2002-05-07 08:58:32 +00:00
244b762de1
Complete the conversion back to the OpenSSH default configuration files of
...
"/etc/ssh/ssh_config" (from "/etc/ssh/ssh.conf") for ssh(1) and other
userland tools, and "/etc/ssh/sshd_config (from "/etc/ssh/sshd.conf")
for sshd(8).
etc/postinstall will detect this, and if "fix" is given, rename the files.
2002-04-29 08:23:34 +00:00
812e154ef2
netbsd uses EXIT STATUS, not RETURN VALUES, for commands
2002-04-26 02:48:54 +00:00
77e1048dc4
Whitespace fixes, use standard headers, RCS police.
2002-04-26 02:33:00 +00:00
8366b5d7de
Sort sections and SEE ALSO, add NetBSD tag.
2002-04-26 02:31:10 +00:00
cd1e16de59
upgrade to KAME racoon as of 2002/4/26.
...
file descriptor leak fix.
null encryption algorithm key length fix (should use 0).
couple of null-pointer reference fixes.
set port # to 500 in ID payload (possible interop issue - spec is unclear).
correctly match address pair on informational exchange
2002-04-26 02:25:13 +00:00
b4df5a033c
KAME racoon as of 2002/4/26
2002-04-26 02:16:38 +00:00
936168b29d
correct afs/kerberos token-passing. notified by markus@openbsd
2002-04-24 01:48:04 +00:00
34b40b030e
sync with openssh 3.2 as of 2002/4/22.
...
- privilege separation
- afs/kerberos auth security issue fixed
2002-04-22 07:59:35 +00:00
ff10d69ea5
OpenSSH 3.2 as of 2002/4/22. bring in sys/sys/tree.h
2002-04-22 07:47:47 +00:00
f597d4ec88
OpenSSH 3.2 as of 2002/4/22. fixes issues with AFS/kerberos auth
2002-04-22 07:35:39 +00:00
f7136b499f
Remove .cvsignore files.
...
<URL:http://www.netbsd.org/developers/cvs-repos/notes.html#cvsignore >
2002-04-04 17:07:06 +00:00
abe35ee7d1
correct initial contact payload handling. PR 15949. sync with kame
2002-03-29 01:18:08 +00:00
16bd2c3983
handle RTM_NEWADDR correctly. PR 15693. sync w/kame
2002-03-22 03:58:43 +00:00
1c9c09e3be
Simple file static function had wrong function definition :
...
-find_etype(hdb_entry *princ, unsigned *etypes, unsigned len,
+find_etype(hdb_entry *princ, krb5_enctype *etypes, unsigned len,
In the Acorn32 port an enum doesn't have to be unsigned (!) int's ... but
can also be a byte/char sized var.
2002-03-21 21:02:16 +00:00
24460e83d2
Actually use the 8003 patch joda applied upstream, rather than the one I sent
...
him (oops).
2002-03-18 19:16:04 +00:00
4284d720b1
CKSUMTYPE needs to include 0x8003, since some things use that.
...
Approved by joda and committed upstream.
2002-03-18 19:07:49 +00:00
0a2445c3b6
move sshd config files to /etc/ssh
2002-03-11 04:57:55 +00:00
68c304f103
Fix several LL128 format string mismatches with a chainsaw.
...
%llu is "unsigned long long", not "uint64_t"; the former can be 128
bits on LP64 systems.
2002-03-09 15:03:33 +00:00
9d597e40f3
printf type mismatch.
2002-03-08 06:03:21 +00:00
295a85a1c9
sync better with reality (LoginGraceTime)
2002-03-08 02:18:11 +00:00
af34a358ff
sync w/ 3.1 as of 2002/3/8. configuration file directory is still /etc
...
(openbsd usr.bin/ssh is using /etc/ssh)
2002-03-08 02:00:50 +00:00
797a097779
OpenSSH 3.1 as of 2002/3/8. plugs off-by-one security hole
2002-03-08 01:20:24 +00:00
9097d36b33
Fix off by one error described in "PINE-CERT-20020301" advisory.
2002-03-07 16:02:22 +00:00
a50cd7c5cd
Add SYNOPSIS.
2002-03-06 14:25:42 +00:00
e4446468a6
s/IPSec/IPsec/.
2002-03-06 00:21:36 +00:00
a8d19a98fc
don't try to use the krb5 context if the init fails; should fix
...
bin/15585
2002-02-26 11:16:08 +00:00
4845a9458f
Rather than assuming that -1 is a valid value for a LogLevel or LogFacility,
...
explicitly declare SYSLOG_LEVEL_NOT_SET and SYSLOG_FACILITY_NOT_SET and use
those instead.
This is necessary for -fshort-enums platforms, and corresponds to the
following OpenBSD revisions:
log.c 1.21
log.h 1.5
readconf.c 1.95
servconf.c 1.53
2002-02-10 16:23:33 +00:00
57a0815fae
Clean up the distinction between krb5_enctype and int, and between
...
krb5_key_usage and unsigned. These patches are necessary for
platforms with short enums, and should already be in Heimdal CVS.
2002-02-10 15:31:18 +00:00
8dd8e58e76
import heimdal rev 1.42: we have to create our own param struct before
...
marshaling (fixes bin/15520)
2002-02-08 18:35:30 +00:00
f6d51843ea
Mirror 32-bit alignment change in crypto/dist/heimdal/lib/roken/resolve.c.
2002-01-08 03:27:59 +00:00
5f9568a12e
Make sure the state array passed to initstate(3) is 32-bit aligned,
...
as that is how it is accessed within the random(3) suite of routines.
2002-01-08 02:15:24 +00:00
19a95cad9c
Fix warnings generated by gcc 3.1.
2001-12-31 20:09:53 +00:00
ad08960f5c
When calling krb5_verify_user(), we must restore root's uid, since it will need to read /etc/krb5.keytab.
2001-12-19 10:28:47 +00:00
a18ce029f6
Deal with lossage caused by the addition of the netbsd-1-5 branch tag
...
to these files.
Apparently, the "magic" which causes the latest version on the
vendor branch to appear at the head in the repository broke when
the netbsd-1-5 tag was added. Thus, merge in the lost revisions from
the vendor tag to work around this.
2001-12-13 15:53:54 +00:00
e2970b134f
sync with openbsd/remove variable name from prototype
2001-12-12 17:24:46 +00:00
684138909c
fix constness difference in prototype and func def.
2001-12-12 17:16:16 +00:00
718900f830
sync with 3.0.2
2001-12-06 03:54:04 +00:00
d97f5d9481
OpenSSH 3.0.2 as of 2001/12/06. fixes environment variable passing in UseLogin=yes
2001-12-06 03:46:04 +00:00
b4371d47f5
Replace some misuses of "then" with "than".
2001-12-04 17:56:30 +00:00
cce3152281
Deal with an LP64 printf format issue.
2001-11-30 00:46:36 +00:00
d4b3b8bf82
update version date to 20011127
2001-11-27 04:16:08 +00:00
f7146cb367
resolve one more conflict
2001-11-27 04:11:23 +00:00
ce0e2b2976
resolve conflicts on 3.0.1 import
2001-11-27 04:10:22 +00:00
c0c77d470a
OpenSSH 3.0.1 as of 2001/11/27. minor bugfixes only.
2001-11-27 04:03:44 +00:00
8c1a59d37e
Drop .Os argument, and sort sections.
2001-11-23 08:20:48 +00:00
1ea6bbe92f
- include LIBRARY section
...
- reference the correct location of the header file
- remove irrelevant BUGS section
- spelling fixes
Note: this man page only documents the Kerberos 4 interface; the
krb5 interface remains undocumented.
2001-11-23 07:35:19 +00:00
1510317819
Spelling fix.
2001-11-21 20:30:09 +00:00
1fd7eeefcd
"than" instead of "then".
2001-11-21 19:14:19 +00:00
a984ffbe34
less than, not then, and re-established, not re-estabished
2001-11-21 19:11:44 +00:00
1f1e26bd6d
Presence looks better with a 'c' instead of an 's'.
2001-11-21 19:01:31 +00:00
78ade3c6d9
Use standard headers, and a whitespace nit.
2001-11-21 10:46:23 +00:00
04a019cf46
Use standard headers.
2001-11-21 10:45:02 +00:00
6beeed91dd
Fix pasto.
2001-11-21 06:11:35 +00:00
13b12e76bb
Add documentation.
2001-11-21 05:39:49 +00:00
4b5703f57d
Include the full path to the other header files so they get found.
2001-11-21 05:38:40 +00:00
289e069e67
Clean up terminology and clarify a few things. Add a simple example.
2001-11-21 05:36:33 +00:00
6ececc36b4
openssh 3.0 krb5 auth problem has been plugged,
...
sync up version number to 3.0.1 so that we can identify it.
2001-11-19 07:39:57 +00:00
1eb2191d4f
fix auth_krb5() error case behavior. found by jhawk, sync with openbsd tree
2001-11-12 05:45:29 +00:00
0b47c7a3f0
Improve markup in two places, and fix a typo.
2001-11-10 08:16:45 +00:00
54c913f1cb
Add compile_et(1).
2001-11-10 07:50:16 +00:00
73322f1e45
Drop an unnecessary empty line.
2001-11-08 20:40:44 +00:00
7be1bf7993
Drop 'HEIMDAL' from Os, fix punctuation in one place, and sort SEE ALSO.
2001-11-08 20:21:07 +00:00
440da35ad1
Sort SEE ALSO.
2001-11-08 20:20:29 +00:00
c214b605c7
Fix Dd, and two punctuation nits.
2001-11-08 20:20:01 +00:00
e704cca5ec
Drop unnecessary empty lines.
2001-11-08 20:18:57 +00:00
43ac9b6569
Fix Xrefs.
2001-11-08 20:18:10 +00:00
f7b5c3a4df
Uppercase Dt argument.
2001-11-08 20:17:09 +00:00
f243ad4c28
Customise documentation for NetBSD:
...
- introduce krb5.3 as an entry-point to libkrb5 documentation
- add LIBRARY sections
- reference the real headers in <krb5/krb5.h>
2001-11-08 19:47:37 +00:00
29574d25c5
sync with 3.0 as of 2001/11/7.
2001-11-07 06:26:47 +00:00
29c34cbb94
OpenSSH 3.0 as of 2001/11/7
2001-11-07 06:20:12 +00:00
9de5bfcf8f
Turn on TCP_NODELAY over loopback
2001-10-18 19:46:12 +00:00
880aff49c4
buffix from openbsd tree: users config should overwrite system config.
2001-10-02 00:39:14 +00:00
ba613513e8
sync with openssh 2.9.9 around 9/27.
2001-09-27 03:24:01 +00:00
bcdc367f57
OpenSSH 2.9.9 as of 2001/9/27
2001-09-27 02:00:33 +00:00
00489c2412
apply the following advisory. 2.9.9 will be imported soon.
...
Subject: OpenSSH Security Advisory (adv.option)
From: Markus Friedl <markus@openbsd.org>
Message-ID: <20010926231823.A15229@folly>
2001-09-27 00:12:42 +00:00
4c99916337
va_{start,end} audit:
...
Make sure that each va_start has one and only one matching va_end,
especially in error cases.
If the va_list is used multiple times, do multiple va_starts/va_ends.
If a function gets va_list as argument, don't let it use va_end (since
it's the callers responsibility).
Improved by comments from enami and christos -- thanks!
Heimdal/krb4/KAME changes already fed back, rest to follow.
Inspired by, but not not based on, OpenBSD.
2001-09-24 13:22:25 +00:00
f6f3964e5e
Remove formatted man pages. Ok'd by joda.
2001-09-24 12:37:41 +00:00
7b980ee03e
remove files that were not part of last import
2001-09-23 05:03:52 +00:00
ea130a2327
removed not-used files
...
noticed by Bernd Ernesti <netbsd@veego.de>
2001-09-21 14:40:30 +00:00
123c0ecfea
Printf formats on LP64.
2001-09-18 03:11:22 +00:00
c6cbe4853a
fix merge-o's
2001-09-17 15:06:48 +00:00
5b9616a3e3
merge heimdal 0.4e
2001-09-17 12:32:33 +00:00
e4d8a8f3dd
import of heimdal 0.4e
2001-09-17 12:24:30 +00:00
d318b56bd0
merge krb4-1.1
2001-09-17 12:21:41 +00:00
1877630d24
import krb4-1.1
2001-09-17 12:09:38 +00:00
d814de63b5
For consistency, make permit_root_login default to PERMIT_NO if not specified
...
in the config file. Thanks to itojun for pointing this out.
2001-09-03 04:23:10 +00:00
8d327e93bf
Include <string.h> for memcpy() prototype.
2001-09-02 08:45:22 +00:00
ee42f09d5b
upgrade to KAME 2001/8/31.
2001-08-31 10:36:08 +00:00
9e9f5f3086
KAME as of 2001/8/31
2001-08-31 09:59:03 +00:00
da09d12c1e
Document that PermitRootLogin's default is now "no".
2001-08-31 09:00:29 +00:00
894936aa50
Do not permit direct root logins. This makes ssh consistent with
...
NetBSD's default security policy in this area: if you are not on
a secure terminal, you must be able to authenticate as a user in
the "wheel" group before you may attempt to authenticate as root
using the root password.
2001-08-31 08:16:24 +00:00
e99543f805
validate certs correctly. sync with kame
2001-08-06 08:17:40 +00:00
0f6cbd66d3
need string.h for alpha. from chuck
2001-08-06 05:48:50 +00:00
d4d587fb31
(should) fix build on alpha. From: Chuck Silvers <chuq@chuq.com>
2001-08-05 18:52:13 +00:00
7c0934f7f5
While writing sushi's support for sshd.conf, I found out that the manpage
...
lies wrt to MaxStartups. Make the manpage match the code.
2001-08-03 02:29:07 +00:00
5abda287b4
Get rid of "Os KAME".
2001-08-02 12:19:45 +00:00
366bd307b0
sync with 2001/8/2 KAME racoon/libipsec.
2001-08-02 12:15:00 +00:00
7295c743a4
bring in latest racoon/libipsec from KAME. lots of lots of stability fixes.
2001-08-02 12:06:08 +00:00
3f1d5c2789
sshd is now able to log in an user if the filesystem is readonly and the tty
...
owned by root. Note that the tty still must be mode 620, and sshd does not
check which group owns the tty (more problems here?).
This closes NetBSD PR bin/13499
The fix has been commited to OpenSSH CVS. See OpenBSD's PR user/1946.
2001-07-27 23:34:27 +00:00
76371341d1
remove a (potentially) double free
2001-07-18 21:54:56 +00:00
7fc834dc03
upgrade to 0.9.6b. no shlib major/minor bump is necessary.
2001-07-11 06:50:53 +00:00
0eb42056bd
OpenSSL 0.9.6b
2001-07-11 03:54:20 +00:00
a549080f85
OpenSSL 0.9.6b
2001-07-11 03:53:32 +00:00
c1f85780da
Remove another one, noted by Love <lha@stacken.kth.se>, confirmed by thorpej.
2001-07-10 21:52:46 +00:00
7d076b538c
fix PRNG weakness. the workaround presented on bugtraq posting.
2001-07-10 14:01:26 +00:00
eed063b542
Remove some items that have been done, and improve description on some
...
others.
2001-07-09 21:01:31 +00:00
7615e78c24
Remove formatted man pages.
2001-07-08 19:20:55 +00:00
f5bb393643
add missing .El
2001-07-05 20:47:31 +00:00
d8ec602681
Note: just because our macros/groff/whatever terminates .Bl internall for a
...
new .Sh doesn't mean the ending .El should be omitted
2001-06-26 00:52:59 +00:00
d91e447e6b
PRevent one of these:
...
List open at EOF -- A .Bl directive has no matching .El
2001-06-25 23:37:27 +00:00
419e44fdc2
Mostly formatting fixes.
2001-06-24 17:44:11 +00:00
7b726945ac
There is no photurisd(8).
2001-06-24 17:29:43 +00:00
f9feddfb52
add string.h, noted by Staffan Thomen <duck@multi.fi>
2001-06-23 22:42:43 +00:00
69d60502fe
upgrade to openssh 2.9, around 2001/6/24 (from openbsd usr.bin/ssh).
...
- authorized_keys2 and known_hosts2 are obsoleted, and integrated
into those without "2".
- file name change, /etc/primes -> /etc/moduli
- cleanups
2001-06-23 19:37:38 +00:00
0d521994cf
OpenBSD 2001/6/24
2001-06-23 19:09:44 +00:00
6cc43ed622
OpenSSH 2.9 as of 2001/6/24
2001-06-23 16:36:22 +00:00
5324608adc
reject expired password/account. warn if interactive && about to expire.
...
ala login(1). From: Brian Poole <raj@cerias.purdue.edu>
XXX code duplicate with login(1) - should be solved by BSD AUTH code integration
2001-06-23 08:08:04 +00:00
fed4515da9
bump netbsd-local version number to identify X11 "cookies" fix
2001-06-20 07:49:45 +00:00
4b1c7f1857
update generated heimdal include files for 0.3f
...
update Makefile infrastructure for 0.3f
bump shared library versions
fix some merge problems
2001-06-20 02:01:18 +00:00
df54fb31c9
merge in conflicts after 0.3f import
2001-06-19 22:39:52 +00:00
c6c55d41cd
import of heimdal 0.3f
2001-06-19 22:08:08 +00:00
f9ab899fe6
import of heimdal 0.3f
2001-06-19 22:07:32 +00:00
ab32b074ec
If UseLogin is enabled, disable X11Forwarding (since xauth passing doesn't
...
work in this case, so X11Forwarding is effectively useless). Document this.
Resolves my pr [security/13172].
2001-06-18 10:26:33 +00:00
b6449b85de
Add RCS Id, adapt to NetBSD, fix punctuation and whitespace.
2001-06-15 12:50:44 +00:00
0cc24e9a9f
On note by kleink: Add primes.5 to crypto/dist/ssh instead of share/man/man5.
...
Import state of 2001-06-14.
2001-06-15 12:47:39 +00:00
82b8462ccf
apply ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/006_sshcookie.patch.
...
sshd(8) allows users to delete arbitrary files named "cookies"
if X11 forwarding is enabled. X11 forwarding is disabled by
default.
2001-06-14 02:45:30 +00:00
f7528da67e
make it compile with KRB4 and not with KRB5. from IIJ SEIL team
2001-06-14 02:42:31 +00:00
71a78ab6ea
Note that HEIMDAL should be removed after '.Os' in man pages on import.
2001-06-05 17:08:07 +00:00
8f12cb2799
not yet operational Heimdal import script
2001-06-05 17:04:24 +00:00
5e80b5d2de
Remove trailing dot in Nd.
2001-06-05 12:19:35 +00:00
4abaa1bb50
No argument for .Os.
2001-06-05 11:11:07 +00:00
04065ff226
No argument for .Os.
2001-06-05 10:13:54 +00:00
48a36de9c0
Don't give .Os an argument, not even 'NetBSD' (default includes version).
2001-06-05 10:08:03 +00:00
59dea86dc0
disable DNSSEC build, for two reasons. (1) restrictive license
...
(2) due to protocol changes BIND8 DNSSEC code is not really useful
2001-05-27 04:39:40 +00:00
de1e278afa
$NetBSD$
2001-05-26 23:26:59 +00:00
c01f1862d6
prime table for OpenSSH, from OpenBSD etc/primes
2001-05-26 23:24:21 +00:00
900d6f1790
BIND 8.2.4
2001-05-17 20:45:58 +00:00
5bb235dbab
recover $NetBSD$
2001-05-15 16:00:32 +00:00
f4532f2487
upgrade to openssh (openbsd usr.bin/ssh) 2.9, around 5/15/2001.
2001-05-15 15:26:07 +00:00
72af75e4ce
OpenSSH 2.9 as of 2001/5/15
2001-05-15 15:02:20 +00:00
d9f67f8672
reduce amount of diff with openbsd usr.bin/ssh (for -Wall -Werror clean)
...
so that we can get rid of local changes.
openssh side do not like static functions so put prototypes into each files
rather than making function static.
2001-05-15 14:50:49 +00:00
c85f9c433b
Do not discard input data from client for channels waiting for connection
...
establishment.
2001-05-08 03:02:35 +00:00
ba3d920481
fix argument number test
2001-05-04 13:09:43 +00:00
cbf5d74c87
fix argument count check after getarg change; spotted by Mark Davies
...
in bin/12696
2001-04-19 07:30:04 +00:00
b7ab24621c
do not attempt to pass null pointer to krb5 library. PR 12683
2001-04-17 12:27:37 +00:00
517c969698
Fix possible core dump in "ssh-add". Patch supplied by Wolfgang Rupprecht
...
in PR pkg/12669.
2001-04-16 03:10:14 +00:00
aae394a457
make it compile on macppc (or, platforms where char = unsigned char)
...
From: Dave Huang <khym@azeotrope.org>
2001-04-14 08:36:12 +00:00
08f45e7850
fix unterminated L<>.
2001-04-12 09:42:45 +00:00
974c617dfe
sync better with 0.9.6a.
2001-04-12 07:57:56 +00:00
35a07da1df
use openssl 0.9.6a. shlib major # is bumped for libcrypto, libssl and
...
all kerberos libraries.
2001-04-12 07:48:03 +00:00
75902e8d9b
OpenSSL 0.9.6a
2001-04-12 03:10:36 +00:00
3095531005
OpenSSL 0.9.6a
2001-04-12 03:08:43 +00:00
b9e8ac0f0f
OpenSSL 0.9.6a
2001-04-12 03:06:03 +00:00
374141fb16
duplicated calls to login_getclass.
...
From: Jim Bernard <jbernard@mines.edu>
2001-04-11 23:39:46 +00:00
00daa6e0e2
Fix date.
2001-04-11 19:37:45 +00:00
51e75c4dd0
add section to xref
2001-04-11 19:28:27 +00:00
f3e777112c
Fix date.
2001-04-11 18:23:42 +00:00
9e3025d914
des_cblock_print_file() does not really exist.
2001-04-11 10:13:28 +00:00
8acc6b96b1
refer ~/.ssh/id_rsa{.pub,}. sync with openbsd usr.bin/ssh.
2001-04-10 09:15:49 +00:00
235b9f0c2f
upgrade to openssh 2.5.4 (2001/4/10).
...
major behavior changes: (made in openssh master tree - openbsd usr.bin/ssh)
- ssh(1) now defaults to ssh protocol version 2.
if you want version 1 to take precedence, use /etc/ssh.conf to override.
- config change: ~/.ssh/id_rsa[12] is now ~/.ssh/id_rsa (changed 4/3)
- forced client rekey for protocol version 2 (~R)
- swap gid when uid swaps.
- ListenAddress syntax can take [foo]:port for IPv6 numerics.
- "ssh -D 1080" allows us to use ssh tunnel as SOCKS4 proxy.
2001-04-10 08:07:54 +00:00
d5fbc62ac3
OpenSSH 2.5.4 as of 2001/04/10
2001-04-10 07:13:48 +00:00
8626516b97
Prefer logical mark-up in one place.
2001-04-09 13:01:11 +00:00
18a4938209
Fix date.
2001-04-09 12:49:14 +00:00
f1e8ff0ae6
Fix date.
2001-04-09 12:42:35 +00:00
dfaae5d853
Fix markup bug accidentally un-done in 0.3e merge fixup.
2001-04-07 22:20:33 +00:00
f4872dded4
Reduce diffs with 0.3e (mostly, complete the merge).
2001-04-07 21:29:20 +00:00
9ad709dc65
More mishaps from the 0.3e merge.
2001-04-07 21:03:51 +00:00
14dbdf5518
Negative exit code cleanup: Replace exit(-x) with exit(x).
...
As seen on tech-userlevel.
2001-04-06 11:13:45 +00:00
01692d62bf
0.3e import leftover. heimdal experts, please check.
2001-04-06 10:10:21 +00:00
500c4f040b
sync HEAD with v0-3e tag. it seems that it was left behind when heimdal
...
0.3e is imported. without this change, lib/libhdb does not compile.
PR12560
2001-04-06 08:32:35 +00:00
6158847f3d
Prevent a NULL-pointer deref when making a TGS_REP for a ticket
...
renewal.
Patch from Assar via private mail.
2001-04-06 04:39:31 +00:00
d545f30495
Merge April 4, 2001 racoon/libipsec.
2001-04-04 19:36:39 +00:00
089a40db4b
Import racoon/libipsec as of April 4, 2001.
2001-04-04 19:33:00 +00:00
6b5ab77765
fo -> for
2001-04-02 18:25:34 +00:00
7d378dde0d
It's vs. Its.
2001-04-02 17:28:29 +00:00
315c0a92f9
if debugging (i.e, -v), use options.level instead of SYSLOG_LEVEL_INFO
...
to the first call to log_init(), otherwise debug messages from config
file parsing won't appear. (this seems to have been broken in recent
versions of openssh)
2001-04-02 03:53:36 +00:00
6fe37483a3
Set the KRB5CCNAME envrironment variable in the child if we received
...
forwarded Kerberos 5 credentials, so that the process that needs them
can actually find them.
2001-03-28 03:31:52 +00:00
8ab184566c
When we receive forwarded Kerberos credentials, stuff them into
...
a file credential cache (rather than a memory credential cache)
so that they're useful.
2001-03-28 03:17:23 +00:00
2651b336ba
Somewhat crude hack to make Kerberos 5 credential forwarding work.
2001-03-28 03:02:51 +00:00
2f7b0c6c27
Print useful Kerberos error messages.
2001-03-27 03:58:02 +00:00
0265b9e0c2
redo 1.1 -> 1.2. on RAND_file_name(), return /dev/urandom by default.
...
RAND_{load,write}_file() takes care of device file case. from openbsd.
2001-03-26 18:08:25 +00:00
522ac04d08
backout 1.1 -> 1.2 (use /dev/urandom if no value can be found),
...
/dev/urandom is not a normal file - there'll be no EOF.
noticed by Manuel Bouyer.
2001-03-21 19:49:50 +00:00
08e4590096
Cast to (long long) when using "%lld" in a printf format.
2001-03-21 00:11:06 +00:00
37da3c3c3c
sync with openssh 2.5.2 (from openbsd usr.bin/ssh, not from portable).
2001-03-19 20:03:24 +00:00
7617bcad07
OpenSSH 2.5.2 as of 3/19/2001, from openbsd usr.bin/ssh
2001-03-19 19:42:00 +00:00
9ab0878e2a
If we get a KRB5KRB_AP_ERR_BAD_INTEGRITY on a TGS req with
...
a key usage of KRB5_KU_TGS_REQ_AUTH, then try again with a
key usage of KRB5_KU_AP_REQ_AUTH. This addresses an interop
issue between new kinit(1) (0.3e) and older KDCs (such as 0.3a).
Patch from assar@netbsd.org ; see discussion on current-users.
2001-03-12 19:25:51 +00:00
bee147163e
simplify the krb5 code somewhat
2001-03-12 17:56:36 +00:00
3fba4682aa
Fix LP64 problem in Kerberos 5 TGT passing.
2001-03-09 06:28:30 +00:00
ca0ffe95fb
Merge 2002/03/08 racoon import.
2001-03-08 22:27:52 +00:00
29f3673b42
KAME racoon as of 2001/03/08.
2001-03-08 22:18:05 +00:00
ac356314da
Document:
...
- forwardable ([libdefaults] and [realms])
- proxiable ([libdefaults] and [realms])
- date_format ([libdefaults])
- srv_lookup ([libdefaults])
- srv_try_txt ([libdefaults])
- scan_interfaces ([libdefaults])
- fcache_version ([libdefaults])
2001-03-08 17:53:46 +00:00
bda8951f6b
Plug some memory leaks.
2001-03-08 04:12:08 +00:00
e625c71295
add krb5 support to ssh/sshd. based on code initially from Daniel Kouril <kouril@informatics.muni.cz> and Björn Grönvall <bg@sics.se>
2001-03-04 00:41:27 +00:00
bacb2758e0
Change keymatlen to size_t to match prototype for str2val.
2001-02-25 03:50:05 +00:00
96863758b7
remove WARNS=0. from enami
2001-02-22 03:11:24 +00:00
82ff942844
document complex_bundle. sync with kame
2001-02-22 02:42:43 +00:00
a5316a5fa5
sync with 2/22 code. -B and -Z,
...
bundle proposal interpretation, and some other fixes.
XXX WARNS?=0 in racoon/Makefile is necessary to compile yacc-generated files
(static function, generated by yacc, is never used).
2001-02-22 02:33:06 +00:00
98857d7198
KAME racoon as of 2001/2/22
2001-02-22 02:21:12 +00:00
1317273fae
sync up with 2.5.1.
...
this fixes backward compatibility breakage against 1.2.18 - 1.2.22.
2001-02-19 12:13:04 +00:00
10400c1d11
OpenSSH 2.5.1 as of 2001/2/19
2001-02-19 12:09:12 +00:00
c83dc32a4c
sync up with 2.5.0. simulate echobacks, X11 display name check, sftp upgrdes.
2001-02-16 15:48:34 +00:00
f02c06e047
OpenSSH 2.5.0 as of 2001/2/17
2001-02-16 15:41:22 +00:00
ce75fa5829
removed in 0.3e
2001-02-16 15:34:39 +00:00
72b00a4178
take the safest side, mandate rnd(4).
2001-02-14 04:46:58 +00:00
788df94479
update import date.
2001-02-14 01:22:02 +00:00
531a3ed838
sync with 2/14.
...
openssh changes:
- SIGWINCH propagated correctly
- mitigate SSH1 traffic analysis
- sprintf -> snprintf and lots of other cleanups
netbsd local changes:
- include OpenBSD RCSID into binary again, which helps us diagnose later.
2001-02-14 01:06:48 +00:00
da62f78331
OpenSSH 2.3.2 as of 2001/2/14
2001-02-14 00:53:01 +00:00
43c24b8340
undef ECHO to avoid a warning from the lex-generated code
2001-02-11 17:59:15 +00:00
7a01412798
fix merg-up
2001-02-11 17:58:27 +00:00
657da009a2
fix texinfo mark-up bug
2001-02-11 17:56:09 +00:00
465ad8fda9
fix merge-ups
2001-02-11 16:08:41 +00:00
be890e9bcf
fix merge conflicts
2001-02-11 14:13:07 +00:00
7a16662ba0
import of heimdal 0.3e
2001-02-11 13:51:06 +00:00
a7b1b8e49c
make sure to zero-fill malloced region. sync with openbsd/usr.bin/ssh
2001-02-09 14:39:47 +00:00
19fb6ccf8d
comment: function are named "arc4"foo just for easy porting.
2001-02-09 00:44:35 +00:00
e3045c89d8
sync with 2.3.2.
2001-02-08 19:02:14 +00:00
e5eae0162b
OpenSSH 2.3.2 as of 2001/2/9
2001-02-08 18:55:32 +00:00
7f8fa38080
authentication mistake in SSHv2 + pubkey, from markus.
...
REBUILD AND RESTART SSHD NOW.
(vulnerability window for netbsd-current - < 48hours)
2001-02-08 18:17:24 +00:00
fbfaba7e44
%30s is too short for IPv6 addrssses.
2001-02-08 10:08:53 +00:00
54bdd08634
fix size_t -> int cast. need checking with alpha...
2001-02-07 18:05:23 +00:00
3614dcc87c
unsigned long long -> %llu, not %qd
2001-02-07 18:01:30 +00:00
31c0f02be2
update date string
2001-02-07 17:07:07 +00:00
1f5cfca3e6
sync crypto/dist/ssh with re-importorted tree. try to minimize diffs
...
with openssh tree to ease future upgrade. re-do local changes, including:
- prototype pedants
- IgnoreRootRhosts
- login.conf user validation
some of the local changes that weren't used are omitted for now. we may
need to revisit those afterwards.
it adds "sftp".
2001-02-07 17:05:31 +00:00
9d3aa44a65
OpenSSH 2.3.1 as of 2001/2/8
2001-02-07 16:46:40 +00:00
a132b86864
remove redundant declarations
2001-02-04 22:55:26 +00:00
78463fc818
Remove the pid file upon exit.
2001-02-04 20:15:52 +00:00
c9b3202d16
remove/avoid redundand declarations.
2001-02-04 18:04:03 +00:00
ef5d120e44
remove redundant decls.
2001-02-04 18:03:03 +00:00
e745af3d91
remove redundant declarations.
2001-02-04 18:02:30 +00:00
9b24735fd3
ifdef out redundant declaration of crypt(3); we don't need it.
2001-02-04 18:01:48 +00:00
28473bf6be
remove redundant prototypes.
2001-02-04 18:00:31 +00:00
848d04a86c
Merge the notsnap20010129 import.
2001-01-30 02:08:54 +00:00
05d9e5e0e0
Update racoon from today's KAME sources. Includes memory leak
...
fixes in the GSSAPI support code.
2001-01-30 02:04:39 +00:00
2d889f0dc5
have safeputchar() for tcpdump/packet-isakmp.c. reported by bernd,
...
sync with kame.
2001-01-28 17:17:56 +00:00
21ecf40da9
BIND 8.2.3
2001-01-27 08:07:35 +00:00
b6abea6f2b
Merge notsnap20010126 import.
2001-01-26 23:56:18 +00:00
034d969067
Bring in latest racoon/libipsec from KAME (not part of a snap
...
kit). Includes a few bugfixes from, including a re-key problem
and memory leak when doing GSSAPI authentication for Phase 1.
Also some better config file documentation.
2001-01-26 23:53:26 +00:00
f17efc018b
complete the paragraph about HostKey directive, reword slighly
2001-01-24 22:59:11 +00:00
16915b1818
Merge conflicts from notsnap20010124 import.
2001-01-24 18:18:32 +00:00
1e7bdbcad4
Bring in latest racoon/libipsec from KAME (not part of a snap
...
kit). Includes several racoon bugfixes, including ones that
fix coredumps when using GSSAPI authentication for Phase 1.
2001-01-24 18:10:22 +00:00
6530b069f5
fix to PR 11320 (ssh-askpass gets invoked forever if we don't have
...
control terminal). from markus@openbsd
2001-01-21 02:44:05 +00:00
cbd751b376
Sync with localsrc: The default is "ForwardX11 no".
2001-01-20 03:38:19 +00:00
096913193b
disable s/key authentication request (from client) by default, to prevent
...
confusing fake s/key challenge to show up.
per recent discussion on tech-userlevel.
2001-01-18 13:37:17 +00:00
f08806ada3
fix printf format for u_int64_t
2001-01-17 11:35:38 +00:00
3cc4829557
Fix printf format with sizeof().
2001-01-16 02:20:19 +00:00
a230982a45
Catch up with sshd config file entry changes.
...
Now we need to explicitly set DSA key location to use protocol version 2.
2001-01-15 06:13:08 +00:00
a98ee796df
$NetBSD$
2001-01-14 05:28:01 +00:00
a0f7a7d829
crypto/dist/ssh: resolve conflicts with 2.3.0/20010105.
...
usr.bin/ssh: add ssh-keyscan and sftp-server into SUBDIR.
2001-01-14 05:22:31 +00:00
bfbf0e0d31
NetBSD Secure Shell, based on OpenSSH 2.3.0 around 1/5/2001
2001-01-14 04:49:51 +00:00
286bcc01a3
don't use LOG_CONS
2001-01-11 02:58:05 +00:00
339f061e38
remove redundant decls
2001-01-07 23:21:44 +00:00
feb89c799a
Add a COMPATIBILITY section, mentioning the lossage with IDEA-encrypted keys.
2001-01-07 20:48:06 +00:00
6b02df2bb5
remove redundant decl.
2001-01-07 05:44:03 +00:00
1473c569f5
eliminated redundant decl.
2001-01-07 00:01:16 +00:00
2c1245f292
eliminate redundant declarations.
2001-01-06 23:30:57 +00:00
cbf1717a72
do not allow outsider from injecting syslog entry anonymously.
...
log peer's ip address instead.
openbsd PR 1600.
2001-01-05 06:33:36 +00:00
b1375d5035
do not look at environment variables if issetugid() == 0.
...
use random number device file as the default value.
from openbsd.
2001-01-05 06:22:32 +00:00
f819878ce7
use more standard %ll_ in favour of %q_
2001-01-04 15:39:50 +00:00
650239ad74
fix error return (0 -> -1). sync with kame.
2001-01-04 06:16:38 +00:00
f2b75fc51d
sync with kame: NULL != 0
2001-01-02 05:08:43 +00:00
5a3fc2bdaa
PR 11715
...
- kerberos is in chapter 8, not 7
- ftp(1) is not kerberized.
2000-12-31 07:45:50 +00:00
3a0975845b
Enable TCP_NODELAY socket option also for interactive IPv6 connections.
...
TCP_NODELAY isn't IPv4 only.
2000-12-30 14:54:38 +00:00
1a9f8a405b
change pathname to netbsd-oriented
2000-12-29 03:12:59 +00:00
492d9092b5
merge fix-ups
2000-12-29 02:52:35 +00:00
69fd2e0f90
location of manpage
2000-12-29 02:32:42 +00:00
57ebd1b3c8
KAME racoon, 2000/12/29
2000-12-29 02:25:05 +00:00
349ac51600
KAME libipsec/libpfkey, 2000/12/29
2000-12-29 02:24:40 +00:00
8905d28796
was removed in krb4-1.0.5
2000-12-29 02:07:25 +00:00
a842a70c3c
merge
2000-12-29 01:52:14 +00:00
2d80b20be2
import krb4-1.0.5
2000-12-29 01:42:08 +00:00
be812c01d9
Remove redundant forward declaration of krb5_cache_data struct.
2000-12-24 12:17:21 +00:00
5389a2b390
cope with embedded KAME scopeid. getifaddrs() expose kernel internal format
...
to the userland.
2000-12-21 03:58:52 +00:00
1cc86f8ba4
Check the return value of krb5_init_context(), and bail out if it failed.
...
Also, when failing, don't try to use the non-initialized context value
to determine the error text.
This avoids dumping core in the following programs when /etc/krb5.conf is
missing or broken: klist, kdestroy, kpasswd, kadmin, kadmind, ktutil, kdc.
XXX Better error reporting in this failure case would be nice.
2000-12-19 21:31:11 +00:00
2eabd5aae0
(tf_create): remove the overwriting of the old ticket file
2000-12-09 00:53:52 +00:00
itojun