Teach Match how handle config directives that are used before authentication.
This allows configurations such as permitting password authentication from
the local net only while requiring pubkey from

Teach Match how handle config directives that are used before authentication.
This allows configurations such as permitting password authentication from
the local net only while requiring pubkey from offsite. ok djm@, man page
bits ok jmc@

show more ...

correctly check for bad signatures in the monitor, otherwise the monitor and
the unpriv process can get out of sync. with dtucker@, ok djm@, dtucker@

Revert previous include file ordering change, for ssh to compile under gcc2
(or until openssl include files are cleaned of parameter names in function
prototypes)

"zlib.h" can be <zlib.h>; ok djm@ markus@

spaces

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

move #include <stdlib.h> out of includes.h

move #include <sys/param.h> out of includes.h

move #include <string.h> out of includes.h

move #include <errno.h> out of includes.h; ok markus@

move #include <fcntl.h> out of includes.h

missed these from last commit:
move #include <sys/socket.h> out of includes.h

move #include <pwd.h> out of includes.h; ok markus@

Prevent duplicate log messages when privsep=yes; ok djm@

Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
Theo nuked - our scripts to sync -portable need them in the files

introduce xcalloc() and xasprintf() failure-checked allocations functions
and use them throughout openssh

xcalloc is particularly important because malloc(nmemb * size) is a
dangerous idiom (subject

introduce xcalloc() and xasprintf() failure-checked allocations functions
and use them throughout openssh

xcalloc is particularly important because malloc(nmemb * size) is a
dangerous idiom (subject to integer overflow) and it is time for it to
die

feedback and ok deraadt@

show more ...

spacing

annoying spacing fixes getting in the way of real diffs

memory leaks detected by Coverity via elad AT netbsd.org;
deraadt@ ok

that should be all of them now

spacing

RCSID() can die

Implement the diffie-hellman-group-exchange-sha256 key exchange method
using the SHA256 code in libc (and wrapper to make it into an OpenSSL
EVP), interop tested against CVS PuTTY

move #include <signal.h> out of includes.h; ok markus@

move #include <sys/wait.h> out of includes.h; ok markus@

small KNF