8a49ec08e4
"Utilize" has exactly the same meaning as "use," but it is more
...
difficult to read and understand. Most manuals of English style
therefore say that you should use "use".
2003-02-04 23:07:28 +00:00
86932ac56e
allocate, not alocate. Noted by mjl, not mjll.
2003-01-28 22:26:33 +00:00
bcc72a236b
The last change I made was a little aggressive in changing the paths of
...
the includes and broke cross builds from non-NetBSD arches. In this I
revert the problem section. (pointed out by uwe.)
2003-01-27 06:19:40 +00:00
0e936e5ed7
Fix password return values.
...
Addresses PR: lib/20074
2003-01-27 03:33:36 +00:00
3e20adf4a8
Prepend krb5/ to include paths that live in /usr/include/krb5/ so that
...
we can deprecate the requirement of -I/usr/include/krb5 when building
kerberos apps.
2003-01-26 22:06:39 +00:00
e218521496
Forgot one include file from the last change.
2003-01-26 21:59:49 +00:00
ebf72d8cce
Update script to modify include file paths to start the process of
...
deprecating the need to -I/usr/include/krb5.
2003-01-26 20:51:58 +00:00
5832481e3d
posesses -> possesses
...
Noted by Igor Sobrado in PR misc/19641
2003-01-03 04:20:09 +00:00
addd3c9aaa
Use standard section headers.
2003-01-02 13:00:49 +00:00
a04a0d4f28
Use standard section headers; sort sections.
2003-01-02 13:00:16 +00:00
cbe71a4b1a
Use standard section headers; space before punctuation in macro arguments.
2003-01-02 12:59:59 +00:00
1b6cc917f0
Use standard section headers.
2003-01-02 12:59:31 +00:00
0f34826bec
Sort sections.
2003-01-02 12:58:56 +00:00
a366ee7021
Fix Xref section, use standard section headers.
2003-01-02 12:57:31 +00:00
65e190048a
Add RCS Id.
2003-01-02 12:57:03 +00:00
432d470724
Fix typos pointed out by Igor Sobrado in PR misc/19621.
2003-01-02 00:22:29 +00:00
ec3682baa1
interal -> internal
...
equvalent -> equivalent
Pointed out by Igor Sobrado in PR misc/19629
2003-01-01 22:06:27 +00:00
50526e4837
It is not valid C++ to have a semicolon after
...
extern "C" {}
so remove it from __END_DECLS.
Noted by Andrew Pinski.
2002-12-31 02:13:20 +00:00
4027f3ad48
compatibility, not compatability; from Adrian Mrva.
2002-12-21 13:22:20 +00:00
7023f7abe2
described, not decribed.
2002-12-21 13:21:38 +00:00
d83bca180e
Two typos from Adrian Mrva.
2002-12-21 13:20:09 +00:00
1b706e9293
charcted probably means character.
2002-12-21 13:17:23 +00:00
c511c34d7c
securely, not securly. From Adrian Mrva.
2002-12-21 13:16:09 +00:00
8f9e9a2299
Correct misspellings of authentication and available. From Adrian Mrva.
2002-12-21 12:22:12 +00:00
5e3e5e1ae9
ther -> their, from Adrian Mrva.
2002-12-21 12:19:33 +00:00
b33be07056
Avoid conflict with reserved identifier "log".
2002-12-06 03:39:06 +00:00
5da0736e3a
Avoid strict alias warning.
2002-12-06 01:27:10 +00:00
512a461832
Change all functions that call gssapi_krb5_init() to call one of
...
two macros GSSAPI_KRB5_INIT() or GSSAPI_KRB5_INIT_MS() which call
the former, check its return code and bail on error.
Addresses PR lib/19191
Given a quick look by joda@.
2002-11-28 11:21:16 +00:00
8084625896
racoon.conf can be found in /etc/racoon, not /etc
2002-11-27 09:51:50 +00:00
a426f44395
sync w/ kame source from 2002/11/20.
...
- plug some memory leaks
- correct phase 2 proposal reqid handling
- check for fd_set overrun
2002-11-20 03:35:57 +00:00
7285409e64
KAME racoon as of 2002/11/20
2002-11-20 03:30:18 +00:00
314a4f35b5
correct panic() condition - it was backwards. remove kame-local diff
...
which was committed by mistake.
From: Rafal Boni <rafal@attbi.com>
2002-11-18 23:36:18 +00:00
bc13d2aefa
don't blindly trust rlen; from Heimdal 0.5.1
2002-10-21 19:39:51 +00:00
32b88027c7
use readlink with bufsize - 1; approved thorpej.
2002-10-19 20:33:17 +00:00
df884fac23
revert previous. need more time to think.
2002-10-18 23:51:07 +00:00
8201174690
condition to panic() was backwards. sync w/kame
...
From: Rafal Boni <rafal@attbi.com>
2002-10-18 23:44:58 +00:00
4752a4465b
discourage the use of aggressive mode for identity disclosure.
2002-10-18 14:34:04 +00:00
a2e26d6e11
back out the previous change. We really don't want to enable login on a
...
mode 666 tty.
In order to use sshd logins with a read-only /dev, the administrator has to
make the tty mode 600 root/wheel before the partition gets read-only.
2002-10-15 15:33:04 +00:00
9dc3c4ee08
Re-allow connection when /dev is read-only, and the tty is owned by the
...
user or owned by root.
2002-10-15 15:19:02 +00:00
173446ddd0
use cast to unsigned long long, instead of PRIu64
...
(to make it easier to move the change back to main openssh distribution)
2002-10-04 02:22:05 +00:00
31b9b01a31
use PRIu64 for u_int64_t.
2002-10-03 07:41:10 +00:00
f07ce00ec5
Turn on strict alignment #define's, because racoon reliably core
...
dumps on machines which require strict alignment such as sparc64.
2002-10-02 17:53:11 +00:00
ef7d24574a
upgrade to openssh 3.5. major changes include:
...
- krb4/5 support for privsep (krb5 diff was already applied)
includes fake implementaation of getpeereid() from openssh-portable, which
does nothing useful - need improvement.
2002-10-01 14:07:26 +00:00
604e45f4cd
OpenSSH 3.5 as of Oct 1, 2002
2002-10-01 13:39:55 +00:00
75bc91b4e4
Changed documentation of the default setting for PermitRootLogin
...
to ``no'', to match our actual default setting.
Addresses PR: bin/18445
2002-09-28 15:07:33 +00:00
5431e7941f
tweak the example $HOME/.ssh/rc script to not show on any cmdline the
...
sensitive data it handles. This fixes bug # 402 as reported by
kolya@mit.edu (Nickolai Zeldovich).
2002-09-25 03:43:19 +00:00
1268ff2729
select() -> poll()
2002-09-20 22:16:02 +00:00
c83fcd876c
select() -> poll()
2002-09-20 22:05:59 +00:00
016f903642
select() -> poll()
2002-09-20 21:48:58 +00:00
ee48615074
select() -> poll()
2002-09-20 21:34:31 +00:00
ee1dfded94
change unconfigured error code back to ENXIO
2002-09-19 19:48:33 +00:00
7417b5942f
de-__P and comment out all parameter names
2002-09-19 19:22:53 +00:00
17e856961c
don't quit while creating X11 listening socket.
...
address (first) problem described in
http://mail-index.netbsd.org/current-users/2002/09/16/0005.html
2002-09-17 06:26:18 +00:00
f603ddfaad
__RCSID is not a portable macro to be using in a host tool (which
...
these files are). As a short-term work-around, only use it if it
is defined. A better solution will be worked out with the Heimdal
folks later.
Fixes building these host tools on Solaris 8.
2002-09-13 19:09:00 +00:00
72be5e0769
invert detach flag to match previous NetBSD behaviour
2002-09-12 17:16:38 +00:00
cae4f88ee0
kill some warnings
2002-09-12 15:35:02 +00:00
2c3a59b23a
krb5_socklen_t and krb5_ssize_t should not go here
2002-09-12 14:52:33 +00:00
91f0927074
make this actually do something
2002-09-12 14:12:18 +00:00
58cc4c1950
alias dns functions so we don't have to bump major
2002-09-12 14:10:25 +00:00
da086653ff
resolve import conflicts
2002-09-12 13:18:49 +00:00
0444766465
import heimdal 0.5
2002-09-12 12:41:31 +00:00
5146dc79e7
import helper
2002-09-12 12:35:03 +00:00
3cc6c8c775
resolve import conflicts
2002-09-12 12:33:10 +00:00
cfa4cd31bb
import krb4 1.2
2002-09-12 12:22:01 +00:00
32e004f92a
kerberos support w/ privsep. confirmed to work by lha@stacken.kth.se
2002-09-09 06:45:17 +00:00
42ebaa698b
don't touch free'ed memory. From: wang.zhong3@zte.com.cn, sync w/kame
2002-09-03 14:38:13 +00:00
2b9b8f5bd3
reduce #ifdef related to OPENSSLDIR - we want it be static
2002-09-01 11:38:34 +00:00
50d422c24f
e_os.h is not part of exported openssl interface, so don't install it into
...
/usr/include/openssl (e_os.h has an explicit comment about it). it obviously
is a bug in openssl 0.9.6 Makefile.
based on openssl 0.9.7 snapshot.
2002-08-31 10:46:36 +00:00
e1754c22c2
if () statement error. From: Krister Walfridsson <cato@df.lth.se>
...
(not compiled) sync w/kame
2002-08-31 07:56:14 +00:00
7049b3bdab
blank commit to force rebuild of krb.h
2002-08-29 14:34:11 +00:00
f613969b8a
somehow main trunk was not in sync with 0.9.6f for this file. noted by havard.
2002-08-28 23:10:30 +00:00
bcb0cf6929
tighten isakmp header length validation. from kame
2002-08-28 04:44:04 +00:00
b57bfa3f73
Drop superfluous Ns, sort sections.
2002-08-20 16:05:46 +00:00
4f40f42275
Remove superfluous Ns, drop trailing whitespace, fix a Xr, don't let lines
...
get longer than 80 characters.
2002-08-20 16:04:13 +00:00
2610a5c4d8
Remove superfluous Ns; while here, remove trailing whitespace and fix a
...
punctuation problem.
2002-08-20 15:59:37 +00:00
158398c921
Fix Ns abuse.
2002-08-20 15:32:12 +00:00
9bf08abfd4
Remove some unnecessary .Ns and trailing whitespace.
2002-08-20 15:24:38 +00:00
a6315c15ad
utmpx.ut_id is required.
...
PR 17998 with slight modification (deal with ttyname shorter than 4)
2002-08-20 07:42:53 +00:00
1146a80999
more NO_xx cleanup. can't catch these by openssl-unifdef.pl
2002-08-17 21:41:59 +00:00
08597903ce
sync with 0.9.6g
2002-08-09 15:58:46 +00:00
5eb341dcb6
openssl 0.9.6g, build framework fixes
2002-08-09 15:45:08 +00:00
182c0b6e08
sync with 0.9.6f. prevents DoS attack and regen of manpages.
2002-08-08 23:47:34 +00:00
f5e63fe4c2
openssl 0.9.6f, with security fixes
2002-08-08 23:14:54 +00:00
7bab20a582
bitmask operation audit (s/&&/&/). from openbsd
2002-08-08 15:12:09 +00:00
e8859ea868
remove files mistakenly shipped with openssl 0.9.6e.
...
(it won't affect the build)
2002-08-05 11:21:29 +00:00
85c4496982
http://marc.theaimsgroup.com/?l=openssl-cvs&m=102831422608153&w=2
...
*) Fix ASN1 checks. Check for overflow by comparing with LONG_MAX
and get fix the header length calculation.
[Florian Weimer <Weimer@CERT.Uni-Stuttgart.DE>,
Alon Kantor <alonk@checkpoint.com> (and others),
Steve Henson]
(critical)
2002-08-03 12:56:23 +00:00
e7f66af2b2
fix incorrect overrun check.
...
http://marc.theaimsgroup.com/?l=openssl-cvs&m=102831516309127&w=2
(thank todd!)
2002-08-02 23:09:03 +00:00
d103e0b575
plug memory leak. from ebisawa@iij. sync w/kame
2002-07-31 07:01:26 +00:00
ef920a0913
sync with 0.9.6e.
2002-07-31 01:29:37 +00:00
25e766824a
OpenSSL 0.9.6e. includes major security fixes (already applied)
2002-07-30 23:57:34 +00:00
e9316c8858
apply patch supplied with OpenSSL Security Advisory [30 July 2002]
...
advisory 1: four potentially remotely-exploitable vulnerability in
SSL2/SSL3 code
advisory 2: ASN1 parser vulnerability (all SSL/TLS apps affected)
2002-07-30 12:55:08 +00:00
3fd219f644
add utmpx support.
2002-07-28 23:43:33 +00:00
6742cb1812
sweep of errx/warnx, remove unnecessary trailing \n
2002-07-20 08:36:17 +00:00
24ef72afbf
print connect failure on debugging mode. sync w/openbsd
2002-07-12 13:28:36 +00:00
4b20971f01
Spell acquire with a 'c'.
2002-07-10 23:16:32 +00:00
bdfa549223
bark if all connection attemp fails. sync w/openbsd
2002-07-10 10:28:00 +00:00
92b7524e7d
silently connect(2) to next address. sync w/openbsd
2002-07-09 12:04:10 +00:00
a2a47b15ce
don't warn even if reverse lookup fails. sync w/openbsd
2002-07-09 12:03:54 +00:00
9a2478a3b0
/var/empty -> /var/chroot/sshd. PR 17519
2002-07-08 14:39:53 +00:00
968294e218
>make ssh-keysign read /etc/ssh/ssh_config
...
>and exit if HostbasedAuthentication is disabled globally. based on discussions
>with deraadt, itojun and sommerfeld; ok itojun@
sync w/openbsd
2002-07-03 14:23:13 +00:00
92ea28e291
>for compression=yes, we fallback to no-compression if the server does
...
>not support compression, vice versa for compression=no. ok mouring@
sync w/openbsd
2002-07-03 10:07:48 +00:00
673c1a7ac1
>use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
...
>in order to avoid a possible Kocher timing attack pointed out by Charles
>Hannum; ok provos@
2002-07-03 10:06:39 +00:00
c28e7ac1f6
correct signed/unsigned mixup; openbsd
2002-07-03 10:05:58 +00:00
8d3378688a
pednatic check on command line args. correct signed/unsigned mixup.
...
sync w/ openbsd
2002-07-01 06:17:11 +00:00
84559971ee
make use of xfree() consistent. from openbsd
2002-07-01 05:56:45 +00:00
11792b93b1
don't use freed memory. sync w/openbsd
2002-07-01 05:54:03 +00:00
5bdd56b128
sync with 3.4
2002-06-26 14:08:29 +00:00
b8f8e01057
OpenSSH 3.4 around 2002/6/26.
...
most significant change:
>make sure # of response matches # of queries, fixes int overflow; from ISS
as we have already enabled privsep by default, we should have been safe.
2002-06-26 14:02:54 +00:00
603dca2ed2
sync whitespace w/ openbsd tree
2002-06-24 15:47:25 +00:00
bc7b65a647
don't lose information while we cast
2002-06-24 15:46:34 +00:00
7d6a7caf6a
Cast arguments so that this file will compile on less forgiving architectures
...
like arm32.
2002-06-24 15:32:58 +00:00
3ea946f134
sync with openssh 3.3.
...
local mods included to make it compile with openssl 0.9.6d.
2002-06-24 05:48:24 +00:00
3dfc6702ef
clean ssh-keysign build dir before import.
2002-06-24 05:45:17 +00:00
9486e6fd01
it shouldn't be imported
2002-06-24 05:28:32 +00:00
b5222aff66
OpenSSH 3.3 as of June 24, 2002.
...
- ssh is no longer seruid root. ssh-keyscan is added to read secret host keys.
protocol version 1 rsh-like authentication is gone.
- FallBackToRsh is deprecated.
2002-06-24 05:25:39 +00:00
c650ef5756
Remove (commented out) krb_equiv(3) reference, suggested by joda.
2002-06-13 11:19:48 +00:00
d844f0d7b1
Fix Xrefs.
2002-06-13 00:15:09 +00:00
78c59017cc
Remove photurisd reference.
2002-06-13 00:14:26 +00:00
8def406232
Comment out Xref to krb_equiv(3), which does not exist.
2002-06-13 00:09:06 +00:00
b745604c00
sync sockaddr_ntop with latest openssh (minor change)
2002-06-09 22:22:55 +00:00
7c75b5ec2f
sync with 0.9.6d. shlib minor for libssl and libcrypto
...
is cranked for additional functions.
2002-06-09 16:12:52 +00:00
7720435b28
openssl 0.9.6d
2002-06-09 15:21:32 +00:00
f0231f96aa
do not propose IDEA cipher on SSL connection, as our default installation
...
does not handle IDEA.
TODO: dynamically enable IDEA if libcrypto_idea is linked
2002-06-09 02:16:18 +00:00
be5f1d082c
use getnameinfo on diag printing. sync w/openssh in openbsd
2002-06-08 21:17:57 +00:00
e67961b545
check sshd uid/chroot dir on UsePrivilegeSeparation mode, and die if they
...
do not exist. sync w/openssh
2002-05-29 23:54:29 +00:00
a5c3041a1b
bump date for rhosts auth fix
2002-05-27 13:45:40 +00:00
b274d69ad0
correct rhosts authentication. should fix PR 17023
2002-05-27 13:45:17 +00:00
a46557038c
now arc4random is in libc, we don't need to supply local version
2002-05-25 00:29:52 +00:00
a0da78395e
correct sha2 interoperability. From: "JuanJo Ciarlante" <jjo@mendoza.gov.ar>
2002-05-20 13:12:45 +00:00
e26b1052bb
use /var/chroot/sshd instead of /var/empty. suggested by christos
2002-05-16 20:59:35 +00:00
f47caddaf3
turn on privilege separation, as 3.2.1 default do.
...
requires sshd uid/gid as well as /var/empty directory.
2002-05-14 23:33:07 +00:00
ca89359407
sync with 3.2.1 as of 5/13.
...
NOTE: privilege separation is turned off by default
as it seems there still are issues with setsid().
2002-05-13 02:58:17 +00:00
24255a6a60
OpenSSH 3.2.1 as of 2002/5/13
2002-05-13 02:28:40 +00:00
c68a2428ba
correct handling of "unique" policy. bump version to 20020507
...
(corresponds to filename in ftp://ftp.kame.net/pub/kame).
2002-05-13 02:10:34 +00:00
c0fa39f338
correct plogv().
2002-05-07 08:58:32 +00:00
244b762de1
Complete the conversion back to the OpenSSH default configuration files of
...
"/etc/ssh/ssh_config" (from "/etc/ssh/ssh.conf") for ssh(1) and other
userland tools, and "/etc/ssh/sshd_config (from "/etc/ssh/sshd.conf")
for sshd(8).
etc/postinstall will detect this, and if "fix" is given, rename the files.
2002-04-29 08:23:34 +00:00
812e154ef2
netbsd uses EXIT STATUS, not RETURN VALUES, for commands
2002-04-26 02:48:54 +00:00
77e1048dc4
Whitespace fixes, use standard headers, RCS police.
2002-04-26 02:33:00 +00:00
8366b5d7de
Sort sections and SEE ALSO, add NetBSD tag.
2002-04-26 02:31:10 +00:00
cd1e16de59
upgrade to KAME racoon as of 2002/4/26.
...
file descriptor leak fix.
null encryption algorithm key length fix (should use 0).
couple of null-pointer reference fixes.
set port # to 500 in ID payload (possible interop issue - spec is unclear).
correctly match address pair on informational exchange
2002-04-26 02:25:13 +00:00
b4df5a033c
KAME racoon as of 2002/4/26
2002-04-26 02:16:38 +00:00
936168b29d
correct afs/kerberos token-passing. notified by markus@openbsd
2002-04-24 01:48:04 +00:00
34b40b030e
sync with openssh 3.2 as of 2002/4/22.
...
- privilege separation
- afs/kerberos auth security issue fixed
2002-04-22 07:59:35 +00:00
ff10d69ea5
OpenSSH 3.2 as of 2002/4/22. bring in sys/sys/tree.h
2002-04-22 07:47:47 +00:00
f597d4ec88
OpenSSH 3.2 as of 2002/4/22. fixes issues with AFS/kerberos auth
2002-04-22 07:35:39 +00:00
f7136b499f
Remove .cvsignore files.
...
<URL:http://www.netbsd.org/developers/cvs-repos/notes.html#cvsignore >
2002-04-04 17:07:06 +00:00
abe35ee7d1
correct initial contact payload handling. PR 15949. sync with kame
2002-03-29 01:18:08 +00:00
16bd2c3983
handle RTM_NEWADDR correctly. PR 15693. sync w/kame
2002-03-22 03:58:43 +00:00
1c9c09e3be
Simple file static function had wrong function definition :
...
-find_etype(hdb_entry *princ, unsigned *etypes, unsigned len,
+find_etype(hdb_entry *princ, krb5_enctype *etypes, unsigned len,
In the Acorn32 port an enum doesn't have to be unsigned (!) int's ... but
can also be a byte/char sized var.
2002-03-21 21:02:16 +00:00
24460e83d2
Actually use the 8003 patch joda applied upstream, rather than the one I sent
...
him (oops).
2002-03-18 19:16:04 +00:00
perry