#
d6f0ef90 |
| 26-Jul-2023 |
christos <christos@NetBSD.org> |
Merge changes between OpenSSH-9.1 and OpenSSH-9.3
|
#
84f89c72 |
| 23-Feb-2022 |
christos <christos@NetBSD.org> |
Merge differences between openssh-8.8 and openssh-8.9
|
#
3a5a5cde |
| 06-Sep-2021 |
ryoon <ryoon@NetBSD.org> |
Make no diff to upstream
|
#
0fdc3905 |
| 04-Sep-2021 |
ryoon <ryoon@NetBSD.org> |
Fix inverted logic in OpenSSH SSHFP DNS record verification
|
#
19a1dfed |
| 02-Sep-2021 |
christos <christos@NetBSD.org> |
Merge our changes from OpenSSH-8.6 to OpenSSH-8.7
|
#
c305e046 |
| 05-Mar-2021 |
christos <christos@NetBSD.org> |
merge local changes between openssh 8.4 and 8.5
|
#
cc17ee2e |
| 27-Jan-2019 |
pgoyette <pgoyette@NetBSD.org> |
Merge the [pgoyette-compat] branch
|
#
e1a26310 |
| 06-Apr-2018 |
christos <christos@NetBSD.org> |
merge conflicts
|
#
45a1cd19 |
| 07-Oct-2017 |
christos <christos@NetBSD.org> |
merge conflicts.
|
#
314ef785 |
| 18-Apr-2017 |
christos <christos@NetBSD.org> |
merge conflicts
|
#
225f1de6 |
| 25-Dec-2016 |
christos <christos@NetBSD.org> |
merge conflicts
|
#
8879ae4a |
| 21-Aug-2015 |
christos <christos@NetBSD.org> |
merge conflicts
|
#
51acf88e |
| 03-Apr-2015 |
christos <christos@NetBSD.org> |
Merge conflicts
|
#
e8f89eeb |
| 19-Oct-2014 |
christos <christos@NetBSD.org> |
merge openssh-6.7
|
#
4ec0b1fc |
| 08-Nov-2013 |
christos <christos@NetBSD.org> |
merge conflicts.
|
#
5543bf18 |
| 28-Aug-2013 |
riastradh <riastradh@NetBSD.org> |
Publish explicit_memset and consttime_memequal in userland libc.
Remove the double-underscore from the userland versions, and do the weak alias dance instead, now that these are public parts of libc
Publish explicit_memset and consttime_memequal in userland libc.
Remove the double-underscore from the userland versions, and do the weak alias dance instead, now that these are public parts of libc.
As discussed on tech-userlevel:
https://mail-index.netbsd.org/tech-userlevel/2013/06/24/msg007843.html (option 3)
show more ...
|
#
bb1d12db |
| 28-Aug-2013 |
riastradh <riastradh@NetBSD.org> |
Fix sense of consttime_memequal and update all callers.
Now it returns true (nonzero) to mean equal and false (zero) to mean inequal, as the name suggests.
As promised on tech-userlevel back in Jun
Fix sense of consttime_memequal and update all callers.
Now it returns true (nonzero) to mean equal and false (zero) to mean inequal, as the name suggests.
As promised on tech-userlevel back in June:
https://mail-index.netbsd.org/tech-userlevel/2013/06/24/msg007843.html
show more ...
|
#
adfdcceb |
| 24-Jun-2013 |
riastradh <riastradh@NetBSD.org> |
Replace consttime_bcmp/explicit_bzero by consttime_memequal/explicit_memset.
consttime_memequal is the same as the old consttime_bcmp. explicit_memset is to memset as explicit_bzero was to bcmp.
Pa
Replace consttime_bcmp/explicit_bzero by consttime_memequal/explicit_memset.
consttime_memequal is the same as the old consttime_bcmp. explicit_memset is to memset as explicit_bzero was to bcmp.
Passes amd64 release and i386/ALL, but I'm sure I missed some spots, so please let me know.
show more ...
|
#
b008b464 |
| 12-Dec-2012 |
christos <christos@NetBSD.org> |
update to 6.1
This is primarily a bugfix release.
Features:
* sshd(8): This release turns on pre-auth sandboxing sshd by default for new installs, by setting UsePrivilegeSeparation=sandbox in
update to 6.1
This is primarily a bugfix release.
Features:
* sshd(8): This release turns on pre-auth sandboxing sshd by default for new installs, by setting UsePrivilegeSeparation=sandbox in sshd_config. * ssh-keygen(1): Add options to specify starting line number and number of lines to process when screening moduli candidates, allowing processing of different parts of a candidate moduli file in parallel * sshd(8): The Match directive now supports matching on the local (listen) address and port upon which the incoming connection was received via LocalAddress and LocalPort clauses. * sshd(8): Extend sshd_config Match directive to allow setting AcceptEnv and {Allow,Deny}{Users,Groups} * Add support for RFC6594 SSHFP DNS records for ECDSA key types. bz#1978 * ssh-keygen(1): Allow conversion of RSA1 keys to public PEM and PKCS8 * sshd(8): Allow the sshd_config PermitOpen directive to accept "none" as an argument to refuse all port-forwarding requests. * sshd(8): Support "none" as an argument for AuthorizedPrincipalsFile * ssh-keyscan(1): Look for ECDSA keys by default. bz#1971 * sshd(8): Add "VersionAddendum" to sshd_config to allow server operators to append some arbitrary text to the server SSH protocol banner.
Bugfixes:
* ssh(1)/sshd(8): Don't spin in accept() in situations of file descriptor exhaustion. Instead back off for a while. * ssh(1)/sshd(8): Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs as they were removed from the specification. bz#2023, * sshd(8): Handle long comments in config files better. bz#2025 * ssh(1): Delay setting tty_flag so RequestTTY options are correctly picked up. bz#1995 * sshd(8): Fix handling of /etc/nologin incorrectly being applied to root on platforms that use login_cap.
show more ...
|
#
8983daf9 |
| 25-Jul-2011 |
christos <christos@NetBSD.org> |
- Merge conflicts - WARNS=5
|
#
34b27b53 |
| 21-Nov-2010 |
adam <adam@NetBSD.org> |
Resolve conflicts
|
#
313c6c94 |
| 07-Jun-2009 |
christos <christos@NetBSD.org> |
Merge in our changes: - conditionalize login_cap - conditionalize bsd_auth - bring in pam from portable - restore krb5, krb4, afs, skey - bring in hpn patches, disable mt aes cipher, keep speedups an
Merge in our changes: - conditionalize login_cap - conditionalize bsd_auth - bring in pam from portable - restore krb5, krb4, afs, skey - bring in hpn patches, disable mt aes cipher, keep speedups and cipher none - add ignore root rhosts option - fix ctype macro arguments - umac is broken, disable it - better ~homedir handling - netbsd style tunnels - urandom, xhome, chrootdir, rescuedir NetBSD handling - utmp/utmpx handling - handle tty posix_vdisable properly - handle setuid and unsetuid the posix way instead of setresuid() - add all missing functions - add new moduli - add build glue
show more ...
|
#
ca32bd8d |
| 07-Jun-2009 |
christos <christos@NetBSD.org> |
import 5.2 from ftp.openbsd.org
|