Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | more details and clarity for tun(4) device forwarding; ok and help | 2006-07-02 | 1 | -2/+2 | ||
| | | | | jmc@ | |||||
* | Prevent ssh from trying to open private keys with bad permissions more than | 2006-04-25 | 1 | -4/+4 | ||
| | | | | | once or prompting for their passphrases (which it subsequently ignores anyway), similar to a previous change in ssh-add. bz #1186, ok djm@ | |||||
* | add percent escape chars to the IdentityFile option, bz #1159 based | 2006-03-30 | 1 | -6/+16 | ||
| | | | | on a patch by imaging AT math.ualberta.ca; feedback and ok dtucker@ | |||||
* | spacing | 2006-03-28 | 1 | -2/+2 | ||
| | ||||||
* | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | 2006-03-25 | 1 | -0/+1 | ||
| | | | | Theo nuked - our scripts to sync -portable need them in the files | |||||
* | introduce xcalloc() and xasprintf() failure-checked allocations functions | 2006-03-25 | 1 | -2/+3 | ||
| | | | | | | | | | | and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@ | |||||
* | be strict with tolower() casting | 2006-03-20 | 1 | -1/+1 | ||
| | ||||||
* | annoying spacing fixes getting in the way of real diffs | 2006-03-20 | 1 | -2/+2 | ||
| | ||||||
* | sprinkle u_int throughout pty subsystem, ok markus | 2006-03-20 | 1 | -4/+4 | ||
| | ||||||
* | spacing | 2006-03-19 | 1 | -14/+14 | ||
| | ||||||
* | RCSID() can die | 2006-03-19 | 1 | -1/+0 | ||
| | ||||||
* | knf nit | 2006-03-12 | 1 | -2/+2 | ||
| | ||||||
* | move #include <ctype.h> out of includes.h; ok djm@ | 2006-02-22 | 1 | -1/+2 | ||
| | ||||||
* | move #include <sys/stat.h> out of includes.h; ok markus@ | 2006-02-20 | 1 | -1/+2 | ||
| | ||||||
* | move #include <signal.h> out of includes.h; ok markus@ | 2006-02-20 | 1 | -1/+2 | ||
| | ||||||
* | move #include <sys/un.h> out of includes.h; ok djm@ | 2006-02-20 | 1 | -1/+3 | ||
| | ||||||
* | add a %l expansion code to the ControlPath, which is filled in with the | 2006-02-12 | 1 | -2/+6 | ||
| | | | | | local hostname at runtime. Requested by henning@ to avoid some problems with /home on NFS; ok dtucker@ | |||||
* | move #include <sys/ioctl.h> out of includes.h; ok markus@ | 2006-02-10 | 1 | -1/+2 | ||
| | ||||||
* | move #include <sys/resource.h> out of includes.h; ok markus@ | 2006-02-08 | 1 | -1/+3 | ||
| | ||||||
* | move #include <paths.h> out of includes.h; ok markus@ | 2006-02-08 | 1 | -1/+3 | ||
| | ||||||
* | exit(255) on error to match description in ssh(1); bz #1137; ok deraadt@ | 2005-12-20 | 1 | -14/+14 | ||
| | ||||||
* | two changes to the new ssh tunnel support. this breaks compatibility | 2005-12-08 | 1 | -5/+8 | ||
| | | | | | | | | | | | | with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@ | |||||
* | Add support for tun(4) forwarding over OpenSSH, based on an idea and | 2005-12-06 | 1 | -3/+36 | ||
| | | | | | | | | | | | | initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others | |||||
* | no need to escape single quotes in comments, no binary change | 2005-10-30 | 1 | -3/+3 | ||
| | ||||||
* | fix misleading debug message; ok dtucker@ | 2005-10-30 | 1 | -3/+2 | ||
| | ||||||
* | no trailing "\n" for log functions; ok djm@ | 2005-10-14 | 1 | -4/+4 | ||
| | ||||||
* | update -D usage here too; | 2005-09-19 | 1 | -2/+2 | ||
| | ||||||
* | ensure that stdio fds are attached; ok deraadt@ | 2005-09-13 | 1 | -1/+4 | ||
| | ||||||
* | fix -D listen_host initialisation, so it picks up gateway_ports setting | 2005-07-30 | 1 | -2/+2 | ||
| | | | | correctly | |||||
* | spacing | 2005-07-16 | 1 | -6/+6 | ||
| | ||||||
* | implement support for X11 and agent forwarding over multiplex slave | 2005-07-04 | 1 | -8/+11 | ||
| | | | | | | | | connections. Because of protocol limitations, the slave connections inherit the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding their own. ok dtucker@ "put it in" deraadt@ | |||||
* | do the default port filling code a few lines earlier, so it really does fix %p | 2005-06-25 | 1 | -7/+7 | ||
| | ||||||
* | allow ControlPath=none, patch from dwmw2 AT infradead.org; ok dtucker@ | 2005-06-18 | 1 | -1/+4 | ||
| | ||||||
* | Fix ControlPath's %p expanding to "0" for a default port, | 2005-06-17 | 1 | -1/+8 | ||
| | | | | spotted dwmw2 AT infradead.org; ok markus@ | |||||
* | move x11_get_proto from ssh.c to clientloop.c, to make muliplexed xfwd easier | 2005-06-16 | 1 | -112/+14 | ||
| | | | | later; ok deraadt@ | |||||
* | add ControlMaster=auto/autoask options to support opportunistic multiplexing; | 2005-06-08 | 1 | -8/+24 | ||
| | | | | tested avsm@ and jakob@, ok markus@ | |||||
* | introduce a generic %foo expansion function. replace existing % expansion and | 2005-06-06 | 1 | -3/+7 | ||
| | | | | add expansion to ControlPath; ok markus@ | |||||
* | fix -O for cases where no ControlPath has been specified or socket at | 2005-05-27 | 1 | -3/+12 | ||
| | | | | ControlPath is not contactable; spotted by and ok avsm@ | |||||
* | report real errors on fallback from ControlMaster=no to normal connect | 2005-05-10 | 1 | -2/+7 | ||
| | ||||||
* | print nice error message for EADDRINUSE as well | 2005-05-10 | 1 | -2/+2 | ||
| | ||||||
* | fallback gracefully if client cannot connect to ControlPath. ok djm@ | 2005-04-26 | 1 | -14/+17 | ||
| | ||||||
* | don't allocate a pty when -n flag (/dev/null stdin) is set, patch from | 2005-04-21 | 1 | -2/+2 | ||
| | | | | ignasi.roca AT fujitsu-siemens.com (bz #829); ok dtucker@ | |||||
* | Fix debug call for port forwards; patch from pete at seebeyond.com, ok djm@ | 2005-04-06 | 1 | -1/+3 | ||
| | ||||||
* | spacing | 2005-03-10 | 1 | -4/+4 | ||
| | ||||||
* | sync usage() w/ man SYNOPSIS; | 2005-03-01 | 1 | -4/+4 | ||
| | | | | ok markus@ | |||||
* | bz#413: allow optional specification of bind address for port forwardings. | 2005-03-01 | 1 | -45/+65 | ||
| | | | | | | | | Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports. ok markus@ | |||||
* | Better diagnostic if an identity file is not accesible. ok markus@ djm@ | 2005-02-16 | 1 | -2/+3 | ||
| | ||||||
* | usage(): | 2004-11-07 | 1 | -4/+5 | ||
| | | | | | | - add -O - sync -S w/ manpage - remove -h | |||||
* | add basic control of a running multiplex master connection; including the | 2004-11-07 | 1 | -14/+52 | ||
| | | | | ability to check its status and request it to exit; ok markus@ | |||||
* | correctly honour -n in multiplex client mode; spotted by sturm@ ok markus@ | 2004-09-23 | 1 | -2/+11 | ||
| |