Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | replace verbose and overflow-prone Linebuf code with read_keyfile_line() | 2010-06-22 | 1 | -129/+36 | |
| | | | | based on patch from joachim AT joachimschipper.nl; bz#1565; ok dtucker@ | ||||
* | Remove RoutingDomain from ssh since it's now not needed. It can be replaced | 2010-01-09 | 1 | -15/+4 | |
| | | | | | | | | | | | | | with "route exec" or "nc -V" as a proxycommand. "route exec" also ensures that trafic such as DNS lookups stays withing the specified routingdomain. For example (from reyk): # route -T 2 exec /usr/sbin/sshd or inherited from the parent process $ route -T 2 exec sh $ ssh 10.1.2.3 ok deraadt@ markus@ stevesk@ reyk@ | ||||
* | validate routing domain is in range 0-RT_TABLEID_MAX. | 2009-12-25 | 1 | -4/+6 | |
| | | | | 'Looks right' deraadt@ | ||||
* | Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan. | 2009-10-28 | 1 | -4/+13 | |
| | | | | ok markus@ | ||||
* | make a2port() return -1 when it encounters an invalid port number | 2009-01-22 | 1 | -2/+2 | |
| | | | | | | | | | | | rather than 0, which it will now treat as valid (needed for future work) adjust current consumers of a2port() to check its return value is <= 0, which in turn required some things to be converted from u_short => int make use of int vs. u_short consistent in some other places too feedback & ok markus@ | ||||
* | the ellipsis is not an optional argument; while here, improve spacing. | 2008-11-01 | 1 | -3/+4 | |
| | |||||
* | default to rsa (protocol 2) keys, instead of rsa1 keys; spotted by | 2008-04-30 | 1 | -2/+2 | |
| | | | | larsnooden AT openoffice.org | ||||
* | Add a small helper function to consistently handle the EAI_SYSTEM error | 2007-12-27 | 1 | -2/+2 | |
| | | | | | code of getaddrinfo. Prompted by vgiffin at apple com via bz #1417. ok markus@ stevesk@ | ||||
* | sys/resource.h needs sys/time.h; prompted by brad@ | 2006-10-06 | 1 | -2/+2 | |
| | |||||
* | almost entirely get rid of the culture of ".h files that include .h files" | 2006-08-03 | 1 | -5/+4 | |
| | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
* | move #include <stdio.h> out of includes.h | 2006-08-01 | 1 | -1/+2 | |
| | |||||
* | move #include <stdlib.h> out of includes.h | 2006-07-26 | 1 | -1/+2 | |
| | |||||
* | move #include <sys/time.h> out of includes.h | 2006-07-25 | 1 | -1/+2 | |
| | |||||
* | move #include <string.h> out of includes.h | 2006-07-22 | 1 | -3/+4 | |
| | |||||
* | move #include <unistd.h> out of includes.h | 2006-07-17 | 1 | -1/+2 | |
| | |||||
* | move #include <netdb.h> out of includes.h; ok djm@ | 2006-07-12 | 1 | -1/+2 | |
| | |||||
* | move #include <stdarg.h> out of includes.h; ok markus@ | 2006-07-10 | 1 | -1/+2 | |
| | |||||
* | move #include <sys/socket.h> out of includes.h | 2006-07-08 | 1 | -1/+3 | |
| | |||||
* | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | 2006-03-25 | 1 | -0/+1 | |
| | | | | Theo nuked - our scripts to sync -portable need them in the files | ||||
* | introduce xcalloc() and xasprintf() failure-checked allocations functions | 2006-03-25 | 1 | -10/+8 | |
| | | | | | | | | | | and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@ | ||||
* | please lint | 2006-03-19 | 1 | -2/+1 | |
| | |||||
* | RCSID() can die | 2006-03-19 | 1 | -1/+0 | |
| | |||||
* | Implement the diffie-hellman-group-exchange-sha256 key exchange method | 2006-03-07 | 1 | -1/+2 | |
| | | | | | using the SHA256 code in libc (and wrapper to make it into an OpenSSL EVP), interop tested against CVS PuTTY | ||||
* | move #include <sys/resource.h> out of includes.h; ok markus@ | 2006-02-08 | 1 | -1/+2 | |
| | |||||
* | move #include <sys/queue.h> out of includes.h; ok markus@ | 2006-02-07 | 1 | -2/+3 | |
| | |||||
* | make ssh-keygen discard junk from server before SSH- ident, spotted by | 2005-10-30 | 1 | -7/+13 | |
| | | | | dave AT cirt.net; ok dtucker@ | ||||
* | ensure that stdio fds are attached; ok deraadt@ | 2005-09-13 | 1 | -1/+4 | |
| | |||||
* | make this -Wsign-compare clean; ok avsm@ markus@ | 2005-06-17 | 1 | -6/+6 | |
| | |||||
* | Switch atomicio to use a simpler interface; it now returns a size_t | 2005-05-24 | 1 | -12/+15 | |
| | | | | | | | | | | | (containing number of bytes read/written), and indicates error by returning 0. EOF is signalled by errno==EPIPE. Typical use now becomes: if (atomicio(read, ..., len) != len) err(1,"read"); ok deraadt@, cloder@, djm@ | ||||
* | add snprintf checks. ok djm@ markus@ | 2005-04-28 | 1 | -1/+6 | |
| | |||||
* | sort options and sync usage(); | 2005-03-01 | 1 | -2/+2 | |
| | |||||
* | option to hash hostnames output by ssh-keyscan; ok markus@ deraadt@ | 2005-03-01 | 1 | -4/+14 | |
| | |||||
* | use atomicio instead of homegrown equivalents or read/write. | 2004-08-11 | 1 | -3/+3 | |
| | | | | markus@ ok | ||||
* | set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@ | 2004-06-14 | 1 | -3/+3 | |
| | |||||
* | implement diffie-hellman-group14-sha1 kex method (trivial extension to | 2004-06-13 | 1 | -1/+2 | |
| | | | | existing diffie-hellman-group1-sha1); ok markus@ | ||||
* | explicitly initialise remote_major and remote_minor. | 2004-03-08 | 1 | -2/+2 | |
| | | | | from cjwatson AT debian.org; ok markus@ | ||||
* | from portable - use sysconf to detect fd limit; ok markus@ | 2003-11-23 | 1 | -2/+2 | |
| | |||||
* | avoid fatal_cleanup, just call exit(); ok deraadt | 2003-09-19 | 1 | -2/+2 | |
| | |||||
* | deal with typing of write vs read in atomicio | 2003-06-28 | 1 | -2/+2 | |
| | |||||
* | -t in usage(); rogier@quaak.org | 2003-04-26 | 1 | -2/+2 | |
| | |||||
* | avoid hardcoded SOCK_xx; with itojun@; should allow ssh over SCTP | 2003-04-14 | 1 | -2/+2 | |
| | |||||
* | split kex into client and server code, no need to link | 2003-02-16 | 1 | -1/+3 | |
| | | | | server code into the client; ok provos@ | ||||
* | unused variable | 2002-07-06 | 1 | -2/+1 | |
| | |||||
* | KNF, realloc fix, and clean usage | 2002-07-06 | 1 | -20/+20 | |
| | |||||
* | use convtime(); ok markus@ | 2002-06-27 | 1 | -3/+5 | |
| | |||||
* | more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@ | 2002-06-27 | 1 | -2/+3 | |
| | |||||
* | use TAILQ_xx macro. from lukem@netbsd. markus ok | 2002-06-16 | 1 | -4/+4 | |
| | |||||
* | handle connection close during read of protocol version string. | 2002-03-04 | 1 | -1/+6 | |
| | | | | fixes erroneous "bad greeting". ok markus@ | ||||
* | overwrite fatal() in ssh-keyscan.c; fixes pr 2354; ok provos@ | 2002-02-22 | 1 | -7/+12 | |
| | |||||
* | check that server supports v1 for -t rsa1, report from wirth@dfki.de | 2001-12-10 | 1 | -10/+12 | |
| |