summaryrefslogtreecommitdiffstats
path: root/lib/libskey (follow)
Commit message (Collapse)AuthorAgeFilesLines
* some fixes from varik valefor;jmc2020-10-241-5/+5
|
* I am retiring my old email address; replace it with my OpenBSD one.millert2019-01-255-12/+12
|
* use freezero()deraadt2017-04-171-3/+2
|
* Generate the bogus challenge using arc4random_buf(3) instead of readingtb2017-03-202-37/+8
| | | | | | | directly from /var/db/host.random and falling back to ctime. Remove the _SKEY_RAND_FILE_PATH_ since it's no longer needed. ok millert, mestre
* use explicit_bzero. one from Ricardo Mestre plus two more.tedu2017-03-201-4/+4
|
* for some time now mandoc has not required MLINKS to functionjmc2016-03-301-10/+1
| | | | | | | | | | | | correctly - logically complete that now by removing MLINKS from base; authors need only to ensure there is an entry in NAME for any function/ util being added. MLINKS will still work, and remain for perl to ease upgrades; ok nicm (curses) bcook (ssl) ok schwarze, who provided a lot of feedback and assistance ok tb natano jung
* 'miliseconds' -> 'milliseconds' in comments.krw2016-03-171-2/+2
| | | | if_atu.c noted by Michal Mazurek.
* update NAME section to include all documented functions,jmc2015-11-101-3/+3
| | | | | | or otherwise change Dt to reflect the name of an existing function; feedback/ok schwarze
* Don't burden keycrunch_{md5,sha1,rmd160}() with identical code to prepare atim2015-10-061-98/+30
| | | | | | | buffer based on whether they are called by keycrunch() or f(). Instead let keycrunch() and f() take care of this themselves. OK millert@
* use .In rather than .Fd #includeschwarze2015-09-101-3/+3
|
* Convert many atoi() calls to strtonum(), adding range checks and failurederaadt2015-04-181-2/+5
| | | | | handling along the way. Reviews by Brendan MacDonell, Jeremy Devenport, florian, doug, millert
* Move to the <limits.h> universe.deraadt2015-01-161-2/+2
| | | | review by millert, binary checking process with doug, concept with guenther
* remove .Tn; from Jan Stary <hans at stare dot cz>schwarze2015-01-151-4/+3
|
* Fix two bugs introduced after MD4 removal: Change the default algorithmlteo2014-03-251-7/+7
| | | | | | | | | back to md5 (as documented on the man pages), and do not let skey_set_algorithm() cause a segfault if an unsupported algorithm is specified. earlier version ok tedu@ help/ok millert@, ok naddy@
* Remove the (non-default) MD4 hash algorithm from S/Key.naddy2014-03-203-51/+6
| | | | ok millert, man pages ok jmc@
* fairly simple unsigned char casts for ctypederaadt2013-11-293-13/+14
| | | | ok krw
* Switch time_t, ino_t, clock_t, and struct kevent's ident and dataguenther2013-08-131-2/+2
| | | | | | | | | | | | | | | | | | | | members to 64bit types. Assign new syscall numbers for (almost all) the syscalls that involve the affected types, including anything with time_t, timeval, itimerval, timespec, rusage, dirent, stat, or kevent arguments. Add a d_off member to struct dirent and replace getdirentries() with getdents(), thus immensely simplifying and accelerating telldir/seekdir. Build perl with -DBIG_TIME. Bump the major on every single base library: the compat bits included here are only good enough to make the transition; the T32 compat option will be burned as soon as we've reached the new world are are happy with the snapshots for all architectures. DANGER: ABI incompatibility. Updating to this kernel requires extra work or you won't be able to login: install a snapshot instead. Much assistance in fixing userland issues from deraadt@ and tedu@ and build assistance from todd@ and otto@
* remove leftover NOLINT, WANTLINT, LINTFLAGS, LOBJ vars and lint targets.okan2012-08-021-2/+1
| | | | ok guenther@
* convert to new .Dd format;jmc2007-05-312-4/+4
|
* Check fgets return value, from Charles Longeau.ray2007-05-171-3/+5
| | | | OK millert@.
* remove some bogus *p tests from charles longeautedu2007-03-201-2/+2
| | | | ok deraadt millert
* minimal cleanups lint begs forderaadt2006-04-102-30/+29
|
* use WANTLINT= (on all architectures)deraadt2005-11-241-1/+2
|
* remove MLINK for skeyzero.3: the function was removed in -r1.5;jmc2005-10-121-2/+2
|
* Add skeychallenge2() which is like skeychallenge() but takes anmillert2004-08-055-43/+67
| | | | | | already open fd. Will be used to make separate challenge/response invocations of login_skey keep the record locked. Also properly escape minus signs in man page. OK henning@ jmc@
* Use SHA1Pad() instead of relying on unspecified behavior.millert2004-07-281-2/+2
|
* errno changes, lib major version bumps, and general flag daymarc2004-07-131-1/+1
| | | | | | | To build you must: cd /usr/src && make obj && make includes cd lib/libc && make depend && make && NOMAN=1 sudo make install cd /usr/src && make build
* convert tgetline() from select(2) -> poll(2)millert2003-09-211-23/+12
|
* simple protosderaadt2003-06-261-2/+2
|
* Sync with share/misc/license.template and add missing DARPA creditmillert2003-06-172-16/+20
| | | | where applicable.
* Use an ISC-tyle license for all my code; it is simpler and more permissive.millert2003-06-032-44/+22
|
* - section reorderjmc2003-06-021-6/+6
| | | | - kill whitespace at EOL
* - typos;jmc2003-05-241-28/+28
| | | | | - new sentence, new line; - whitespace at EOL
* fix skeygetnext()millert2003-04-281-8/+23
|
* Use snprintf() and strlcpy() throughout.millert2003-04-033-133/+65
|
* document the number of bytes required for btoa8millert2003-03-191-2/+3
|
* typos;jmc2003-01-231-2/+2
| | | | ok millert@
* Crank all library major numbers. Needed due to the fact that wemillert2002-12-031-1/+1
| | | | | | | | now build libraries with propolice enabled. Without this, existing binaries (such as ports/packages) that link with any system library other than libc will fail with an undefined symbol of "___guard" (__guard on ELF). Pointed out by markus@ and discussed with deraadt@
* Zero out struct skey early in skeylookup() so callers can reliably checkmillert2002-11-161-3/+3
| | | | for keyfile == NULL and not get a garbage value.
* Add a missing check for NULL keyfile in skeychallenge() thatmillert2002-11-161-3/+5
| | | | | caused a user w/o an S/Key to just get "permission denied" from login_skey instead of a fake challenge.
* use strtok_r() instead of strtok(); millert okderaadt2002-06-222-15/+16
|
* strlcat boundsderaadt2002-05-291-5/+5
|
* replace strcpy with strlcpyderaadt2002-05-241-5/+5
|
* enforce SKEY_MAX_CHALLENGE using snprintf()deraadt2002-05-241-12/+9
|
* doc that skeychallenge() buffer is at least SKEY_MAX_CHALLENGE longderaadt2002-05-241-2/+3
|
* Remove skeyzero(), it is no longer needed.millert2002-05-172-45/+3
|
* Add skey(5)millert2002-05-162-2/+97
|
* Check for disabled /etc/skey directory (mode 0000). This is neededmillert2002-05-161-3/+11
| | | | | because some things (such as login) run as uid 0 and directory modes won't restrict root.
* Change S/Key stuff from using a flat file (/etc/skeykeys) to a directorymillert2002-05-164-359/+237
| | | | | | | | | where each user gets their own file, which is owned by that user. An old S/Key database may be converted by running "skeyinit -C" as root. Programs that need to access the S/Key database no longer need to be setuid root. They must now be setgid auth instead.
* Initial cleanup:mpech2002-04-301-3/+3
| | | | | | | | | | | | o) remove extra space in the end of line; o) remove extra blank lines in the end of file; o) remove .Pp before .Ss; o) CAVEAT -> CAVEATS; o) fix usage of .Fa; o) <blank-line> -> .Pp; o) wrap long lines; millert@ ok