120100410 2 - (dtucker) [configure.ac] Put the check for the existence of getaddrinfo 3 back so we disable the IPv6 tests if we don't have it. 4 520100409 6 - (dtucker) [contrib/cygwin/Makefile] Don't overwrite files with the wrong 7 ones. Based on a patch from Roumen Petrov. 8 - (dtucker) [configure.ac] Bug #1744: use pkg-config for libedit flags if we 9 have it and the path is not provided to --with-libedit. Based on a patch 10 from Iain Morgan. 11 - (dtucker) [configure.ac defines.h loginrec.c logintest.c] Bug #1732: enable 12 utmpx support on FreeBSD where possible. Patch from Ed Schouten, ok djm@ 13 1420100326 15 - (djm) [openbsd-compat/bsd-arc4random.c] Fix preprocessor detection 16 for arc4random_buf() and arc4random_uniform(); from Josh Gilkerson 17 - (dtucker) [configure.ac] Bug #1741: Add section for Haiku, patch originally 18 by Ingo Weinhold via Scott McCreary, ok djm@ 19 - (djm) OpenBSD CVS Sync 20 - djm@cvs.openbsd.org 2010/03/25 23:38:28 21 [servconf.c] 22 from portable: getcwd(NULL, 0) doesn't work on all platforms, so 23 use a stack buffer; ok dtucker@ 24 - djm@cvs.openbsd.org 2010/03/26 00:26:58 25 [ssh.1] 26 mention that -S none disables connection sharing; from Colin Watson 27 - (djm) [session.c] Allow ChrootDirectory to work on SELinux platforms - 28 set up SELinux execution context before chroot() call. From Russell 29 Coker via Colin watson; bz#1726 ok dtucker@ 30 - (djm) [channels.c] Check for EPFNOSUPPORT as a socket() errno; bz#1721 31 ok dtucker@ 32 - (dtucker) Bug #1725: explicitly link libX11 into gnome-ssh-askpass2 using 33 pkg-config, patch from Colin Watson. Needed for newer linkers (ie gold). 34 - (djm) [contrib/ssh-copy-id] Don't blow up when the agent has no keys; 35 bz#1723 patch from Adeodato Simóvia Colin Watson; ok dtucker@ 36 - (dtucker) OpenBSD CVS Sync 37 - dtucker@cvs.openbsd.org 2010/03/26 01:06:13 38 [ssh_config.5] 39 Reformat default value of PreferredAuthentications entry (current 40 formatting implies ", " is acceptable as a separator, which it's not. 41 ok djm@ 42 4320100324 44 - (dtucker) [contrib/cygwin/ssh-host-config] Mount the Windows directory 45 containing the services file explicitely case-insensitive. This allows to 46 tweak the Windows services file reliably. Patch from vinschen at redhat. 47 4820100321 49 - (djm) OpenBSD CVS Sync 50 - jmc@cvs.openbsd.org 2010/03/08 09:41:27 51 [ssh-keygen.1] 52 sort the list of constraints (to -O); ok djm 53 - jmc@cvs.openbsd.org 2010/03/10 07:40:35 54 [ssh-keygen.1] 55 typos; from Ross Richardson 56 closes prs 6334 and 6335 57 - djm@cvs.openbsd.org 2010/03/10 23:27:17 58 [auth2-pubkey.c] 59 correct certificate logging and make it more consistent between 60 authorized_keys and TrustedCAKeys; ok markus@ 61 - djm@cvs.openbsd.org 2010/03/12 01:06:25 62 [servconf.c] 63 unbreak AuthorizedKeys option with a $HOME-relative path; reported by 64 vinschen AT redhat.com, ok dtucker@ 65 - markus@cvs.openbsd.org 2010/03/12 11:37:40 66 [servconf.c] 67 do not prepend AuthorizedKeysFile with getcwd(), unbreaks relative paths 68 free() (not xfree()) the buffer returned by getcwd() 69 - djm@cvs.openbsd.org 2010/03/13 21:10:38 70 [clientloop.c] 71 protocol conformance fix: send language tag when disconnecting normally; 72 spotted by 1.41421 AT gmail.com, ok markus@ deraadt@ 73 - djm@cvs.openbsd.org 2010/03/13 21:45:46 74 [ssh-keygen.1] 75 Certificates are named *-cert.pub, not *_cert.pub; committing a diff 76 from stevesk@ ok me 77 - jmc@cvs.openbsd.org 2010/03/13 23:38:13 78 [ssh-keygen.1] 79 fix a formatting error (args need quoted); noted by stevesk 80 - stevesk@cvs.openbsd.org 2010/03/15 19:40:02 81 [key.c key.h ssh-keygen.c] 82 also print certificate type (user or host) for ssh-keygen -L 83 ok djm kettenis 84 - stevesk@cvs.openbsd.org 2010/03/16 15:46:52 85 [auth-options.c] 86 spelling in error message. ok djm kettenis 87 - djm@cvs.openbsd.org 2010/03/16 16:36:49 88 [version.h] 89 crank version to openssh-5.5 since we have a few fixes since 5.4; 90 requested deraadt@ kettenis@ 91 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 92 [contrib/suse/openssh.spec] Crank version numbers 93 9420100314 95 - (djm) [ssh-pkcs11-helper.c] Move #ifdef to after #defines to fix 96 compilation failure when !HAVE_DLOPEN. Reported by felix-mindrot 97 AT fefe.de 98 - (djm) [Makefile.in] Respecify -lssh after -lopenbsd-compat for 99 ssh-pkcs11-helper to repair static builds (we do the same for 100 ssh-keyscan). Reported by felix-mindrot AT fefe.de 101 10220100312 103 - (tim) [Makefile.in] Now that scard is gone, no need to make $(datadir) 104 - (tim) [Makefile.in] Add missing $(EXEEXT) to install targets. 105 Patch from Corinna Vinschen. 106 - (tim) [contrib/cygwin/Makefile] Fix list of documentation files to install 107 on a Cygwin installation. Patch from Corinna Vinschen. 108 10920100311 110 - (tim) [contrib/suse/openssh.spec] crank version number here too. 111 report by imorgan AT nas.nasa.gov 112 11320100309 114 - (dtucker) [configure.ac] Use a proper AC_CHECK_DECL for BROKEN_GETADDRINFO 115 so setting it in CFLAGS correctly skips IPv6 tests. 116 11720100428 118 - (djm) OpenBSD CVS Sync 119 - djm@cvs.openbsd.org 2010/03/07 22:16:01 120 [ssh-keygen.c] 121 make internal strptime string match strftime format; 122 suggested by vinschen AT redhat.com and markus@ 123 - djm@cvs.openbsd.org 2010/03/08 00:28:55 124 [ssh-keygen.1] 125 document permit-agent-forwarding certificate constraint; patch from 126 stevesk@ 127 - djm@cvs.openbsd.org 2010/03/07 22:01:32 128 [version.h] 129 openssh-5.4 130 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 131 crank version numbers 132 - (djm) Release OpenSSH-5.4p1 133 13420100307 135 - (dtucker) [auth.c] Bug #1710: call setauthdb on AIX before getpwuid so that 136 it gets the passwd struct from the LAM that knows about the user which is 137 not necessarily the default. Patch from Alexandre Letourneau. 138 - (dtucker) [session.c] Bug #1567: move setpcred call to before chroot and 139 do not set real uid, since that's needed for the chroot, and will be set 140 by permanently_set_uid. 141 - (dtucker) [session.c] Also initialize creds to NULL for handing to 142 setpcred. 143 - (dtucker) OpenBSD CVS Sync 144 - dtucker@cvs.openbsd.org 2010/03/07 11:57:13 145 [auth-rhosts.c monitor.c monitor_wrap.c session.c auth-options.c sshd.c] 146 Hold authentication debug messages until after successful authentication. 147 Fixes an info leak of environment variables specified in authorized_keys, 148 reported by Jacob Appelbaum. ok djm@ 149 15020100305 151 - OpenBSD CVS Sync 152 - jmc@cvs.openbsd.org 2010/03/04 12:51:25 153 [ssh.1 sshd_config.5] 154 tweak previous; 155 - djm@cvs.openbsd.org 2010/03/04 20:35:08 156 [ssh-keygen.1 ssh-keygen.c] 157 Add a -L flag to print the contents of a certificate; ok markus@ 158 - jmc@cvs.openbsd.org 2010/03/04 22:52:40 159 [ssh-keygen.1] 160 fix Bk/Ek; 161 - djm@cvs.openbsd.org 2010/03/04 23:17:25 162 [sshd_config.5] 163 missing word; spotted by jmc@ 164 - djm@cvs.openbsd.org 2010/03/04 23:19:29 165 [ssh.1 sshd.8] 166 move section on CA and revoked keys from ssh.1 to sshd.8's known hosts 167 format section and rework it a bit; requested by jmc@ 168 - djm@cvs.openbsd.org 2010/03/04 23:27:25 169 [auth-options.c ssh-keygen.c] 170 "force-command" is not spelled "forced-command"; spotted by 171 imorgan AT nas.nasa.gov 172 - djm@cvs.openbsd.org 2010/03/05 02:58:11 173 [auth.c] 174 make the warning for a revoked key louder and more noticable 175 - jmc@cvs.openbsd.org 2010/03/05 06:50:35 176 [ssh.1 sshd.8] 177 tweak previous; 178 - jmc@cvs.openbsd.org 2010/03/05 08:31:20 179 [ssh.1] 180 document certificate authentication; help/ok djm 181 - djm@cvs.openbsd.org 2010/03/05 10:28:21 182 [ssh-add.1 ssh.1 ssh_config.5] 183 mention loading of certificate files from [private]-cert.pub when 184 they are present; feedback and ok jmc@ 185 - (tim) [ssh-pkcs11.c] Fix "non-constant initializer" errors in older 186 compilers. OK djm@ 187 - (djm) [ssh-rand-helper.c] declare optind, avoiding compilation failure 188 on some platforms 189 - (djm) [configure.ac] set -fno-strict-aliasing for gcc4; ok dtucker@ 190 19120100304 192 - (djm) [ssh-keygen.c] Use correct local variable, instead of 193 maybe-undefined global "optarg" 194 - (djm) [contrib/redhat/openssh.spec] Replace obsolete BuildPreReq 195 on XFree86-devel with neutral /usr/include/X11/Xlib.h; 196 imorgan AT nas.nasa.gov in bz#1731 197 - (djm) [.cvsignore] Ignore ssh-pkcs11-helper 198 - (djm) [regress/Makefile] Cleanup sshd_proxy_orig 199 - OpenBSD CVS Sync 200 - djm@cvs.openbsd.org 2010/03/03 01:44:36 201 [auth-options.c key.c] 202 reject strings with embedded ASCII nul chars in certificate key IDs, 203 principal names and constraints 204 - djm@cvs.openbsd.org 2010/03/03 22:49:50 205 [sshd.8] 206 the authorized_keys option for CA keys is "cert-authority", not 207 "from=cert-authority". spotted by imorgan AT nas.nasa.gov 208 - djm@cvs.openbsd.org 2010/03/03 22:50:40 209 [PROTOCOL.certkeys] 210 s/similar same/similar/; from imorgan AT nas.nasa.gov 211 - djm@cvs.openbsd.org 2010/03/04 01:44:57 212 [key.c] 213 use buffer_get_string_ptr_ret() where we are checking the return 214 value explicitly instead of the fatal()-causing buffer_get_string_ptr() 215 - djm@cvs.openbsd.org 2010/03/04 10:36:03 216 [auth-rh-rsa.c auth-rsa.c auth.c auth.h auth2-hostbased.c auth2-pubkey.c] 217 [authfile.c authfile.h hostfile.c hostfile.h servconf.c servconf.h] 218 [ssh-keygen.c ssh.1 sshconnect.c sshd_config.5] 219 Add a TrustedUserCAKeys option to sshd_config to specify CA keys that 220 are trusted to authenticate users (in addition than doing it per-user 221 in authorized_keys). 222 223 Add a RevokedKeys option to sshd_config and a @revoked marker to 224 known_hosts to allow keys to me revoked and banned for user or host 225 authentication. 226 227 feedback and ok markus@ 228 - djm@cvs.openbsd.org 2010/03/03 00:47:23 229 [regress/cert-hostkey.sh regress/cert-userkey.sh] 230 add an extra test to ensure that authentication with the wrong 231 certificate fails as it should (and it does) 232 - djm@cvs.openbsd.org 2010/03/04 10:38:23 233 [regress/cert-hostkey.sh regress/cert-userkey.sh] 234 additional regression tests for revoked keys and TrustedUserCAKeys 235 23620100303 237 - (djm) [PROTOCOL.certkeys] Add RCS Ident 238 - OpenBSD CVS Sync 239 - jmc@cvs.openbsd.org 2010/02/26 22:09:28 240 [ssh-keygen.1 ssh.1 sshd.8] 241 tweak previous; 242 - otto@cvs.openbsd.org 2010/03/01 11:07:06 243 [ssh-add.c] 244 zap what seems to be a left-over debug message; ok markus@ 245 - djm@cvs.openbsd.org 2010/03/02 23:20:57 246 [ssh-keygen.c] 247 POSIX strptime is stricter than OpenBSD's so do a little dance to 248 appease it. 249 - (djm) [regress/cert-userkey.sh] s/echo -n/echon/ here too 250 25120100302 252 - (tim) [config.guess config.sub] Bug 1722: Update to latest versions from 253 http://git.savannah.gnu.org/gitweb/ (2009-12-30 and 2010-01-22 254 respectively). 255 25620100301 257 - (dtucker) [regress/{cert-hostkey,cfgmatch,cipher-speed}.sh} Replace 258 "echo -n" with "echon" for portability. 259 - (dtucker) [openbsd-compat/port-linux.c] Make failure to write to the OOM 260 adjust log at verbose only, since according to cjwatson in bug #1470 261 some virtualization platforms don't allow writes. 262 26320100228 264 - (djm) [auth.c] On Cygwin, refuse usernames that have differences in 265 case from that matched in the system password database. On this 266 platform, passwords are stored case-insensitively, but sshd requires 267 exact case matching for Match blocks in sshd_config(5). Based on 268 a patch from vinschen AT redhat.com. 269 - (tim) [ssh-pkcs11-helper.c] Move declarations before calling functions 270 to make older compilers (gcc 2.95) happy. 271 27220100227 273 - (djm) [ssh-pkcs11-helper.c ] Ensure RNG is initialised and seeded 274 - (djm) [openbsd-compat/bsd-cygwin_util.c] Reduce the set of environment 275 variables copied into sshd child processes. From vinschen AT redhat.com 276 27720100226 278 - OpenBSD CVS Sync 279 - djm@cvs.openbsd.org 2010/02/26 20:29:54 280 [PROTOCOL PROTOCOL.agent PROTOCOL.certkeys addrmatch.c auth-options.c] 281 [auth-options.h auth.h auth2-pubkey.c authfd.c dns.c dns.h hostfile.c] 282 [hostfile.h kex.h kexdhs.c kexgexs.c key.c key.h match.h monitor.c] 283 [myproposal.h servconf.c servconf.h ssh-add.c ssh-agent.c ssh-dss.c] 284 [ssh-keygen.1 ssh-keygen.c ssh-rsa.c ssh.1 ssh.c ssh2.h sshconnect.c] 285 [sshconnect2.c sshd.8 sshd.c sshd_config.5] 286 Add support for certificate key types for users and hosts. 287 288 OpenSSH certificate key types are not X.509 certificates, but a much 289 simpler format that encodes a public key, identity information and 290 some validity constraints and signs it with a CA key. CA keys are 291 regular SSH keys. This certificate style avoids the attack surface 292 of X.509 certificates and is very easy to deploy. 293 294 Certified host keys allow automatic acceptance of new host keys 295 when a CA certificate is marked as trusted in ~/.ssh/known_hosts. 296 see VERIFYING HOST KEYS in ssh(1) for details. 297 298 Certified user keys allow authentication of users when the signing 299 CA key is marked as trusted in authorized_keys. See "AUTHORIZED_KEYS 300 FILE FORMAT" in sshd(8) for details. 301 302 Certificates are minted using ssh-keygen(1), documentation is in 303 the "CERTIFICATES" section of that manpage. 304 305 Documentation on the format of certificates is in the file 306 PROTOCOL.certkeys 307 308 feedback and ok markus@ 309 - djm@cvs.openbsd.org 2010/02/26 20:33:21 310 [Makefile regress/cert-hostkey.sh regress/cert-userkey.sh] 311 regression tests for certified keys 312 31320100224 314 - (djm) [pkcs11.h ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c] 315 [ssh-pkcs11.h] Add $OpenBSD$ RCS idents so we can sync portable 316 - (djm) OpenBSD CVS Sync 317 - djm@cvs.openbsd.org 2010/02/11 20:37:47 318 [pathnames.h] 319 correct comment 320 - dtucker@cvs.openbsd.org 2009/11/09 04:20:04 321 [regress/Makefile] 322 add regression test for ssh-keygen pubkey conversions 323 - dtucker@cvs.openbsd.org 2010/01/11 02:53:44 324 [regress/forwarding.sh] 325 regress test for stdio forwarding 326 - djm@cvs.openbsd.org 2010/02/09 04:57:36 327 [regress/addrmatch.sh] 328 clean up droppings 329 - djm@cvs.openbsd.org 2010/02/09 06:29:02 330 [regress/Makefile] 331 turn on all the malloc(3) checking options when running regression 332 tests. this has caught a few bugs for me in the past; ok dtucker@ 333 - djm@cvs.openbsd.org 2010/02/24 06:21:56 334 [regress/test-exec.sh] 335 wait for sshd to fully stop in cleanup() function; avoids races in tests 336 that do multiple start_sshd/cleanup cycles; "I hate pidfiles" deraadt@ 337 - markus@cvs.openbsd.org 2010/02/08 10:52:47 338 [regress/agent-pkcs11.sh] 339 test for PKCS#11 support (currently disabled) 340 - (djm) [Makefile.in ssh-pkcs11-helper.8] Add manpage for PKCS#11 helper 341 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 342 [contrib/suse/openssh.spec] Add PKCS#11 helper binary and manpage 343 34420100212 345 - (djm) OpenBSD CVS Sync 346 - djm@cvs.openbsd.org 2010/02/02 22:49:34 347 [bufaux.c] 348 make buffer_get_string_ret() really non-fatal in all cases (it was 349 using buffer_get_int(), which could fatal() on buffer empty); 350 ok markus dtucker 351 - markus@cvs.openbsd.org 2010/02/08 10:50:20 352 [pathnames.h readconf.c readconf.h scp.1 sftp.1 ssh-add.1 ssh-add.c] 353 [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config.5] 354 replace our obsolete smartcard code with PKCS#11. 355 ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf 356 ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 357 provider (shared library) while ssh-agent(1) delegates PKCS#11 to 358 a forked a ssh-pkcs11-helper process. 359 PKCS#11 is currently a compile time option. 360 feedback and ok djm@; inspired by patches from Alon Bar-Lev 361 - jmc@cvs.openbsd.org 2010/02/08 22:03:05 362 [ssh-add.1 ssh-keygen.1 ssh.1 ssh.c] 363 tweak previous; ok markus 364 - djm@cvs.openbsd.org 2010/02/09 00:50:36 365 [ssh-agent.c] 366 fallout from PKCS#11: unbreak -D 367 - djm@cvs.openbsd.org 2010/02/09 00:50:59 368 [ssh-keygen.c] 369 fix -Wall 370 - djm@cvs.openbsd.org 2010/02/09 03:56:28 371 [buffer.c buffer.h] 372 constify the arguments to buffer_len, buffer_ptr and buffer_dump 373 - djm@cvs.openbsd.org 2010/02/09 06:18:46 374 [auth.c] 375 unbreak ChrootDirectory+internal-sftp by skipping check for executable 376 shell when chrooting; reported by danh AT wzrd.com; ok dtucker@ 377 - markus@cvs.openbsd.org 2010/02/10 23:20:38 378 [ssh-add.1 ssh-keygen.1 ssh.1 ssh_config.5] 379 pkcs#11 is no longer optional; improve wording; ok jmc@ 380 - jmc@cvs.openbsd.org 2010/02/11 13:23:29 381 [ssh.1] 382 libarary -> library; 383 - (djm) [INSTALL Makefile.in README.smartcard configure.ac scard-opensc.c] 384 [scard.c scard.h pkcs11.h scard/Makefile.in scard/Ssh.bin.uu scard/Ssh.java] 385 Remove obsolete smartcard support 386 - (djm) [ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c] 387 Make it compile on OSX 388 - (djm) [ssh-pkcs11-client.c ssh-pkcs11-helper.c ssh-pkcs11.c] 389 Use ssh_get_progname to fill __progname 390 - (djm) [configure.ac] Enable PKCS#11 support only when we find a working 391 dlopen() 392 39320100210 394 - (djm) add -lselinux to LIBS before calling AC_CHECK_FUNCS for 395 getseuserbyname; patch from calebcase AT gmail.com via 396 cjwatson AT debian.org 397 39820100202 399 - (djm) OpenBSD CVS Sync 400 - djm@cvs.openbsd.org 2010/01/30 21:08:33 401 [sshd.8] 402 debug output goes to stderr, not "the system log"; ok markus dtucker 403 - djm@cvs.openbsd.org 2010/01/30 21:12:08 404 [channels.c] 405 fake local addr:port when stdio fowarding as some servers (Tectia at 406 least) validate that they are well-formed; 407 reported by imorgan AT nas.nasa.gov 408 ok dtucker 409 41020100130 411 - (djm) OpenBSD CVS Sync 412 - djm@cvs.openbsd.org 2010/01/28 00:21:18 413 [clientloop.c] 414 downgrade an error() to a debug() - this particular case can be hit in 415 normal operation for certain sequences of mux slave vs session closure 416 and is harmless 417 - djm@cvs.openbsd.org 2010/01/29 00:20:41 418 [sshd.c] 419 set FD_CLOEXEC on sock_in/sock_out; bz#1706 from jchadima AT redhat.com 420 ok dtucker@ 421 - djm@cvs.openbsd.org 2010/01/29 20:16:17 422 [mux.c] 423 kill correct channel (was killing already-dead mux channel, not 424 its session channel) 425 - djm@cvs.openbsd.org 2010/01/30 02:54:53 426 [mux.c] 427 don't mark channel as read failed if it is already closing; suppresses 428 harmless error messages when connecting to SSH.COM Tectia server 429 report by imorgan AT nas.nasa.gov 430 43120100129 432 - (dtucker) [openbsd-compat/openssl-compat.c] Bug #1707: Call OPENSSL_config() 433 after registering the hardware engines, which causes the openssl.cnf file to 434 be processed. See OpenSSL's man page for OPENSSL_config(3) for details. 435 Patch from Solomon Peachy, ok djm@. 436 43720100128 438 - (djm) OpenBSD CVS Sync 439 - djm@cvs.openbsd.org 2010/01/26 02:15:20 440 [mux.c] 441 -Wuninitialized and remove a // comment; from portable 442 (Id sync only) 443 - djm@cvs.openbsd.org 2010/01/27 13:26:17 444 [mux.c] 445 fix bug introduced in mux rewrite: 446 447 In a mux master, when a socket to a mux slave closes before its server 448 session (as may occur when the slave has been signalled), gracefully 449 close the server session rather than deleting its channel immediately. 450 A server may have more messages on that channel to send (e.g. an exit 451 message) that will fatal() the client if they are sent to a channel that 452 has been prematurely deleted. 453 454 spotted by imorgan AT nas.nasa.gov 455 - djm@cvs.openbsd.org 2010/01/27 19:21:39 456 [sftp.c] 457 add missing "p" flag to getopt optstring; 458 bz#1704 from imorgan AT nas.nasa.gov 459 46020100126 461 - (djm) OpenBSD CVS Sync 462 - tedu@cvs.openbsd.org 2010/01/17 21:49:09 463 [ssh-agent.1] 464 Correct and clarify ssh-add's password asking behavior. 465 Improved text dtucker and ok jmc 466 - dtucker@cvs.openbsd.org 2010/01/18 01:50:27 467 [roaming_client.c] 468 s/long long unsigned/unsigned long long/, from tim via portable 469 (Id sync only, change already in portable) 470 - djm@cvs.openbsd.org 2010/01/26 01:28:35 471 [channels.c channels.h clientloop.c clientloop.h mux.c nchan.c ssh.c] 472 rewrite ssh(1) multiplexing code to a more sensible protocol. 473 474 The new multiplexing code uses channels for the listener and 475 accepted control sockets to make the mux master non-blocking, so 476 no stalls when processing messages from a slave. 477 478 avoid use of fatal() in mux master protocol parsing so an errant slave 479 process cannot take down a running master. 480 481 implement requesting of port-forwards over multiplexed sessions. Any 482 port forwards requested by the slave are added to those the master has 483 established. 484 485 add support for stdio forwarding ("ssh -W host:port ...") in mux slaves. 486 487 document master/slave mux protocol so that other tools can use it to 488 control a running ssh(1). Note: there are no guarantees that this 489 protocol won't be incompatibly changed (though it is versioned). 490 491 feedback Salvador Fandino, dtucker@ 492 channel changes ok markus@ 493 49420100122 495 - (tim) [configure.ac] Due to constraints in Windows Sockets in terms of 496 socket inheritance, reduce the default SO_RCVBUF/SO_SNDBUF buffer size 497 in Cygwin to 65535. Patch from Corinna Vinschen. 498 49920100117 500 - (tim) [configure.ac] OpenServer 5 needs BROKEN_GETADDRINFO too. 501 - (tim) [configure.ac] On SVR5 systems, use the C99-conforming functions 502 snprintf() and vsnprintf() named _xsnprintf() and _xvsnprintf(). 503 50420100116 505 - (dtucker) [openbsd-compat/pwcache.c] Pull in includes.h and thus defines.h 506 so we correctly detect whether or not we have a native user_from_uid. 507 - (dtucker) [openbsd-compat/openbsd-compat.h] Prototypes for user_from_uid 508 and group_from_gid. 509 - (dtucker) [openbsd-compat/openbsd-compat.h] Fix prototypes, spotted by 510 Tim. 511 - (dtucker) OpenBSD CVS Sync 512 - markus@cvs.openbsd.org 2010/01/15 09:24:23 513 [sftp-common.c] 514 unused 515 - (dtucker) [openbsd-compat/pwcache.c] Shrink ifdef area to prevent unused 516 variable warnings. 517 - (dtucker) [openbsd-compat/openbsd-compat.h] Typo. 518 - (tim) [regress/portnum.sh] Shell portability fix. 519 - (tim) [configure.ac] Define BROKEN_GETADDRINFO on SVR5 systems. The native 520 getaddrinfo() is too old and limited for addr_pton() in addrmatch.c. 521 - (tim) [roaming_client.c] Use of <sys/queue.h> is not really portable so we 522 use "openbsd-compat/sys-queue.h". s/long long unsigned/unsigned long long/ 523 to keep USL compilers happy. 524 52520100115 526 - (dtucker) OpenBSD CVS Sync 527 - jmc@cvs.openbsd.org 2010/01/13 12:48:34 528 [sftp.1 sftp.c] 529 sftp.1: put ls -h in the right place 530 sftp.c: as above, plus add -p to get/put, and shorten their arg names 531 to keep the help usage nicely aligned 532 ok djm 533 - djm@cvs.openbsd.org 2010/01/13 23:47:26 534 [auth.c] 535 when using ChrootDirectory, make sure we test for the existence of the 536 user's shell inside the chroot; bz #1679, patch from alex AT rtfs.hu; 537 ok dtucker 538 - dtucker@cvs.openbsd.org 2010/01/14 23:41:49 539 [sftp-common.c] 540 use user_from{uid,gid} to lookup up ids since it keeps a small cache. 541 ok djm 542 - guenther@cvs.openbsd.org 2010/01/15 00:05:22 543 [sftp.c] 544 Reset SIGTERM to SIG_DFL before executing ssh, so that even if sftp 545 inherited SIGTERM as ignored it will still be able to kill the ssh it 546 starts. 547 ok dtucker@ 548 - (dtucker) [openbsd-compat/pwcache.c] Pull in pwcache.c from OpenBSD (no 549 changes yet but there will be some to come). 550 - (dtucker) [configure.ac openbsd-compat/{Makefile.in,pwcache.c} Portability 551 for pwcache. Also, added caching of negative hits. 552 55320100114 554 - (djm) [platform.h] Add missing prototype for 555 platform_krb5_get_principal_name 556 55720100113 558 - (dtucker) [monitor_fdpass.c] Wrap poll.h include in ifdefs. 559 - (dtucker) [openbsd-compat/readpassphrase.c] Resync against OpenBSD's r1.18: 560 missing restore of SIGTTOU and some whitespace. 561 - (dtucker) [openbsd-compat/readpassphrase.c] Update to OpenBSD's r1.21. 562 - (dtucker) [openbsd-compat/readpassphrase.c] Update to OpenBSD's r1.22. 563 Fixes bz #1590, where sometimes you could not interrupt a connection while 564 ssh was prompting for a passphrase or password. 565 - (dtucker) OpenBSD CVS Sync 566 - dtucker@cvs.openbsd.org 2010/01/13 00:19:04 567 [sshconnect.c auth.c] 568 Fix a couple of typos/mispellings in comments 569 - dtucker@cvs.openbsd.org 2010/01/13 01:10:56 570 [key.c] 571 Ignore and log any Protocol 1 keys where the claimed size is not equal to 572 the actual size. Noted by Derek Martin, ok djm@ 573 - dtucker@cvs.openbsd.org 2010/01/13 01:20:20 574 [canohost.c ssh-keysign.c sshconnect2.c] 575 Make HostBased authentication work with a ProxyCommand. bz #1569, patch 576 from imorgan at nas nasa gov, ok djm@ 577 - djm@cvs.openbsd.org 2010/01/13 01:40:16 578 [sftp.c sftp-server.c sftp.1 sftp-common.c sftp-common.h] 579 support '-h' (human-readable units) for sftp's ls command, just like 580 ls(1); ok dtucker@ 581 - djm@cvs.openbsd.org 2010/01/13 03:48:13 582 [servconf.c servconf.h sshd.c] 583 avoid run-time failures when specifying hostkeys via a relative 584 path by prepending the cwd in these cases; bz#1290; ok dtucker@ 585 - djm@cvs.openbsd.org 2010/01/13 04:10:50 586 [sftp.c] 587 don't append a space after inserting a completion of a directory (i.e. 588 a path ending in '/') for a slightly better user experience; ok dtucker@ 589 - (dtucker) [sftp-common.c] Wrap include of util.h in an ifdef. 590 - (tim) [defines.h] openbsd-compat/readpassphrase.c now needs _NSIG. 591 feedback and ok dtucker@ 592 59320100112 594 - (dtucker) OpenBSD CVS Sync 595 - dtucker@cvs.openbsd.org 2010/01/11 01:39:46 596 [ssh_config channels.c ssh.1 channels.h ssh.c] 597 Add a 'netcat mode' (ssh -W). This connects stdio on the client to a 598 single port forward on the server. This allows, for example, using ssh as 599 a ProxyCommand to route connections via intermediate servers. 600 bz #1618, man page help from jmc@, ok markus@ 601 - dtucker@cvs.openbsd.org 2010/01/11 04:46:45 602 [authfile.c sshconnect2.c] 603 Do not prompt for a passphrase if we fail to open a keyfile, and log the 604 reason the open failed to debug. 605 bz #1693, found by tj AT castaglia org, ok djm@ 606 - djm@cvs.openbsd.org 2010/01/11 10:51:07 607 [ssh-keygen.c] 608 when converting keys, truncate key comments at 72 chars as per RFC4716; 609 bz#1630 reported by tj AT castaglia.org; ok markus@ 610 - dtucker@cvs.openbsd.org 2010/01/12 00:16:47 611 [authfile.c] 612 Fix bug introduced in r1.78 (incorrect brace location) that broke key auth. 613 Patch from joachim joachimschipper nl. 614 - djm@cvs.openbsd.org 2010/01/12 00:58:25 615 [monitor_fdpass.c] 616 avoid spinning when fd passing on nonblocking sockets by calling poll() 617 in the EINTR/EAGAIN path, much like we do in atomicio; ok dtucker@ 618 - djm@cvs.openbsd.org 2010/01/12 00:59:29 619 [roaming_common.c] 620 delete with extreme prejudice a debug() that fired with every keypress; 621 ok dtucker deraadt 622 - dtucker@cvs.openbsd.org 2010/01/12 01:31:05 623 [session.c] 624 Do not allow logins if /etc/nologin exists but is not readable by the user 625 logging in. Noted by Jan.Pechanec at Sun, ok djm@ deraadt@ 626 - djm@cvs.openbsd.org 2010/01/12 01:36:08 627 [buffer.h bufaux.c] 628 add a buffer_get_string_ptr_ret() that does the same as 629 buffer_get_string_ptr() but does not fatal() on error; ok dtucker@ 630 - dtucker@cvs.openbsd.org 2010/01/12 08:33:17 631 [session.c] 632 Add explicit stat so we reliably detect nologin with bad perms. 633 ok djm markus 634 63520100110 636 - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] 637 Remove hacks add for RoutingDomain in preparation for its removal. 638 - (dtucker) OpenBSD CVS Sync 639 - dtucker@cvs.openbsd.org 2010/01/09 23:04:13 640 [channels.c ssh.1 servconf.c sshd_config.5 sshd.c channels.h servconf.h 641 ssh-keyscan.1 ssh-keyscan.c readconf.c sshconnect.c misc.c ssh.c 642 readconf.h scp.1 sftp.1 ssh_config.5 misc.h] 643 Remove RoutingDomain from ssh since it's now not needed. It can be 644 replaced with "route exec" or "nc -V" as a proxycommand. "route exec" 645 also ensures that trafic such as DNS lookups stays withing the specified 646 routingdomain. For example (from reyk): 647 # route -T 2 exec /usr/sbin/sshd 648 or inherited from the parent process 649 $ route -T 2 exec sh 650 $ ssh 10.1.2.3 651 ok deraadt@ markus@ stevesk@ reyk@ 652 - dtucker@cvs.openbsd.org 2010/01/10 03:51:17 653 [servconf.c] 654 Add ChrootDirectory to sshd.c test-mode output 655 - dtucker@cvs.openbsd.org 2010/01/10 07:15:56 656 [auth.c] 657 Output a debug if we can't open an existing keyfile. bz#1694, ok djm@ 658 65920100109 660 - (dtucker) Wrap use of IPPROTO_IPV6 in an ifdef for platforms that don't 661 have it. 662 - (dtucker) [defines.h] define PRIu64 for platforms that don't have it. 663 - (dtucker) [roaming_client.c] Wrap inttypes.h in an ifdef. 664 - (dtucker) [loginrec.c] Use the SUSv3 specified name for the user name 665 when using utmpx. Patch from Ed Schouten. 666 - (dtucker) OpenBSD CVS Sync 667 - djm@cvs.openbsd.org 2010/01/09 00:20:26 668 [sftp-server.c sftp-server.8] 669 add a 'read-only' mode to sftp-server(8) that disables open in write mode 670 and all other fs-modifying protocol methods. bz#430 ok dtucker@ 671 - djm@cvs.openbsd.org 2010/01/09 00:57:10 672 [PROTOCOL] 673 tweak language 674 - jmc@cvs.openbsd.org 2010/01/09 03:36:00 675 [sftp-server.8] 676 bad place to forget a comma... 677 - djm@cvs.openbsd.org 2010/01/09 05:04:24 678 [mux.c sshpty.h clientloop.c sshtty.c] 679 quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we 680 usually don't actually have a tty to read/set; bz#1686 ok dtucker@ 681 - dtucker@cvs.openbsd.org 2010/01/09 05:17:00 682 [roaming_client.c] 683 Remove a PRIu64 format string that snuck in with roaming. ok djm@ 684 - dtucker@cvs.openbsd.org 2010/01/09 11:13:02 685 [sftp.c] 686 Prevent sftp from derefing a null pointer when given a "-" without a 687 command. Also, allow whitespace to follow a "-". bz#1691, path from 688 Colin Watson via Debian. ok djm@ deraadt@ 689 - dtucker@cvs.openbsd.org 2010/01/09 11:17:56 690 [sshd.c] 691 Afer sshd receives a SIGHUP, ignore subsequent HUPs while sshd re-execs 692 itself. Prevents two HUPs in quick succession from resulting in sshd 693 dying. bz#1692, patch from Colin Watson via Ubuntu. 694 - (dtucker) [defines.h] Remove now-undeeded PRIu64 define. 695 69620100108 697 - (dtucker) OpenBSD CVS Sync 698 - andreas@cvs.openbsd.org 2009/10/24 11:11:58 699 [roaming.h] 700 Declarations needed for upcoming changes. 701 ok markus@ 702 - andreas@cvs.openbsd.org 2009/10/24 11:13:54 703 [sshconnect2.c kex.h kex.c] 704 Let the client detect if the server supports roaming by looking 705 for the resume@appgate.com kex algorithm. 706 ok markus@ 707 - andreas@cvs.openbsd.org 2009/10/24 11:15:29 708 [clientloop.c] 709 client_loop() must detect if the session has been suspended and resumed, 710 and take appropriate action in that case. 711 From Martin Forssen, maf at appgate dot com 712 - andreas@cvs.openbsd.org 2009/10/24 11:19:17 713 [ssh2.h] 714 Define the KEX messages used when resuming a suspended connection. 715 ok markus@ 716 - andreas@cvs.openbsd.org 2009/10/24 11:22:37 717 [roaming_common.c] 718 Do the actual suspend/resume in the client. This won't be useful until 719 the server side supports roaming. 720 Most code from Martin Forssen, maf at appgate dot com. Some changes by 721 me and markus@ 722 ok markus@ 723 - andreas@cvs.openbsd.org 2009/10/24 11:23:42 724 [ssh.c] 725 Request roaming to be enabled if UseRoaming is true and the server 726 supports it. 727 ok markus@ 728 - reyk@cvs.openbsd.org 2009/10/28 16:38:18 729 [ssh_config.5 sshd.c misc.h ssh-keyscan.1 readconf.h sshconnect.c 730 channels.c channels.h servconf.h servconf.c ssh.1 ssh-keyscan.c scp.1 731 sftp.1 sshd_config.5 readconf.c ssh.c misc.c] 732 Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan. 733 ok markus@ 734 - jmc@cvs.openbsd.org 2009/10/28 21:45:08 735 [sshd_config.5 sftp.1] 736 tweak previous; 737 - djm@cvs.openbsd.org 2009/11/10 02:56:22 738 [ssh_config.5] 739 explain the constraints on LocalCommand some more so people don't 740 try to abuse it. 741 - djm@cvs.openbsd.org 2009/11/10 02:58:56 742 [sshd_config.5] 743 clarify that StrictModes does not apply to ChrootDirectory. Permissions 744 and ownership are always checked when chrooting. bz#1532 745 - dtucker@cvs.openbsd.org 2009/11/10 04:30:45 746 [sshconnect2.c channels.c sshconnect.c] 747 Set close-on-exec on various descriptors so they don't get leaked to 748 child processes. bz #1643, patch from jchadima at redhat, ok deraadt. 749 - markus@cvs.openbsd.org 2009/11/11 21:37:03 750 [channels.c channels.h] 751 fix race condition in x11/agent channel allocation: don't read after 752 the end of the select read/write fdset and make sure a reused FD 753 is not touched before the pre-handlers are called. 754 with and ok djm@ 755 - djm@cvs.openbsd.org 2009/11/17 05:31:44 756 [clientloop.c] 757 fix incorrect exit status when multiplexing and channel ID 0 is recycled 758 bz#1570 reported by peter.oliver AT eon-is.co.uk; ok dtucker 759 - djm@cvs.openbsd.org 2009/11/19 23:39:50 760 [session.c] 761 bz#1606: error when an attempt is made to connect to a server 762 with ForceCommand=internal-sftp with a shell session (i.e. not a 763 subsystem session). Avoids stuck client when attempting to ssh to such a 764 service. ok dtucker@ 765 - dtucker@cvs.openbsd.org 2009/11/20 00:15:41 766 [session.c] 767 Warn but do not fail if stat()ing the subsystem binary fails. This helps 768 with chrootdirectory+forcecommand=sftp-server and restricted shells. 769 bz #1599, ok djm. 770 - djm@cvs.openbsd.org 2009/11/20 00:54:01 771 [sftp.c] 772 bz#1588 change "Connecting to host..." message to "Connected to host." 773 and delay it until after the sftp protocol connection has been established. 774 Avoids confusing sequence of messages when the underlying ssh connection 775 experiences problems. ok dtucker@ 776 - dtucker@cvs.openbsd.org 2009/11/20 00:59:36 777 [sshconnect2.c] 778 Use the HostKeyAlias when prompting for passwords. bz#1039, ok djm@ 779 - djm@cvs.openbsd.org 2009/11/20 03:24:07 780 [misc.c] 781 correct off-by-one in percent_expand(): we would fatal() when trying 782 to expand EXPAND_MAX_KEYS, allowing only EXPAND_MAX_KEYS-1 to actually 783 work. Note that nothing in OpenSSH actually uses close to this limit at 784 present. bz#1607 from Jan.Pechanec AT Sun.COM 785 - halex@cvs.openbsd.org 2009/11/22 13:18:00 786 [sftp.c] 787 make passing of zero-length arguments to ssh safe by 788 passing "-<switch>" "<value>" rather than "-<switch><value>" 789 ok dtucker@, guenther@, djm@ 790 - dtucker@cvs.openbsd.org 2009/12/06 23:41:15 791 [sshconnect2.c] 792 zap unused variable and strlen; from Steve McClellan, ok djm 793 - djm@cvs.openbsd.org 2009/12/06 23:53:45 794 [roaming_common.c] 795 use socklen_t for getsockopt optlen parameter; reported by 796 Steve.McClellan AT radisys.com, ok dtucker@ 797 - dtucker@cvs.openbsd.org 2009/12/06 23:53:54 798 [sftp.c] 799 fix potential divide-by-zero in sftp's "df" output when talking to a server 800 that reports zero files on the filesystem (Unix filesystems always have at 801 least the root inode). From Steve McClellan at radisys, ok djm@ 802 - markus@cvs.openbsd.org 2009/12/11 18:16:33 803 [key.c] 804 switch from 35 to the more common value of RSA_F4 == (2**16)+1 == 65537 805 for the RSA public exponent; discussed with provos; ok djm@ 806 - guenther@cvs.openbsd.org 2009/12/20 07:28:36 807 [ssh.c sftp.c scp.c] 808 When passing user-controlled options with arguments to other programs, 809 pass the option and option argument as separate argv entries and 810 not smashed into one (e.g., as -l foo and not -lfoo). Also, always 811 pass a "--" argument to stop option parsing, so that a positional 812 argument that starts with a '-' isn't treated as an option. This 813 fixes some error cases as well as the handling of hostnames and 814 filenames that start with a '-'. 815 Based on a diff by halex@ 816 ok halex@ djm@ deraadt@ 817 - djm@cvs.openbsd.org 2009/12/20 23:20:40 818 [PROTOCOL] 819 fix an incorrect magic number and typo in PROTOCOL; bz#1688 820 report and fix from ueno AT unixuser.org 821 - stevesk@cvs.openbsd.org 2009/12/25 19:40:21 822 [readconf.c servconf.c misc.h ssh-keyscan.c misc.c] 823 validate routing domain is in range 0-RT_TABLEID_MAX. 824 'Looks right' deraadt@ 825 - stevesk@cvs.openbsd.org 2009/12/29 16:38:41 826 [sshd_config.5 readconf.c ssh_config.5 scp.1 servconf.c sftp.1 ssh.1] 827 Rename RDomain config option to RoutingDomain to be more clear and 828 consistent with other options. 829 NOTE: if you currently use RDomain in the ssh client or server config, 830 or ssh/sshd -o, you must update to use RoutingDomain. 831 ok markus@ djm@ 832 - jmc@cvs.openbsd.org 2009/12/29 18:03:32 833 [sshd_config.5 ssh_config.5] 834 sort previous; 835 - dtucker@cvs.openbsd.org 2010/01/04 01:45:30 836 [sshconnect2.c] 837 Don't escape backslashes in the SSH2 banner. bz#1533, patch from 838 Michal Gorny via Gentoo. 839 - djm@cvs.openbsd.org 2010/01/04 02:03:57 840 [sftp.c] 841 Implement tab-completion of commands, local and remote filenames for sftp. 842 Hacked on and off for some time by myself, mouring, Carlos Silva (via 2009 843 Google Summer of Code) and polished to a fine sheen by myself again. 844 It should deal more-or-less correctly with the ikky corner-cases presented 845 by quoted filenames, but the UI could still be slightly improved. 846 In particular, it is quite slow for remote completion on large directories. 847 bz#200; ok markus@ 848 - djm@cvs.openbsd.org 2010/01/04 02:25:15 849 [sftp-server.c] 850 bz#1566 don't unnecessarily dup() in and out fds for sftp-server; 851 ok markus@ 852 - dtucker@cvs.openbsd.org 2010/01/08 21:50:49 853 [sftp.c] 854 Fix two warnings: possibly used unitialized and use a nul byte instead of 855 NULL pointer. ok djm@ 856 - (dtucker) [Makefile.in added roaming_client.c roaming_serv.c] Import new 857 files for roaming and add to Makefile. 858 - (dtucker) [Makefile.in] .c files do not belong in the OBJ lines. 859 - (dtucker) [sftp.c] ifdef out the sftp completion bits for platforms that 860 don't have libedit. 861 - (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c] Make 862 RoutingDomain an unsupported option on platforms that don't have it. 863 - (dtucker) [sftp.c] Expand ifdef for libedit to cover complete_is_remote 864 too. 865 - (dtucker) [misc.c] Move the routingdomain ifdef to allow the socket to 866 be created. 867 - (dtucker] [misc.c] Shrink the area covered by USE_ROUTINGDOMAIN more 868 to eliminate an unused variable warning. 869 - (dtucker) [roaming_serv.c] Include includes.h for u_intXX_t types. 870 87120091226 872 - (tim) [contrib/cygwin/Makefile] Install ssh-copy-id and ssh-copy-id.1 873 Gzip all man pages. Patch from Corinna Vinschen. 874 87520091221 876 - (dtucker) [auth-krb5.c platform.{c,h} openbsd-compat/port-aix.{c,h}] 877 Bug #1583: Use system's kerberos principal name on AIX if it's available. 878 Based on a patch from and tested by Miguel Sanders 879 88020091208 881 - (dtucker) Bug #1470: Disable OOM-killing of the listening sshd on Linux, 882 based on a patch from Vaclav Ovsik and Colin Watson. ok djm. 883 88420091207 885 - (dtucker) Bug #1160: use pkg-config for opensc config if it's available. 886 Tested by Martin Paljak. 887 - (dtucker) Bug #1677: add conditionals around the source for ssh-askpass. 888 88920091121 890 - (tim) [opensshd.init.in] If PidFile is set in sshd_config, use it. 891 Bug 1628. OK dtucker@ 892 89320091120 894 - (djm) [ssh-rand-helper.c] Print error and usage() when passed command- 895 line arguments as none are supported. Exit when passed unrecognised 896 commandline flags. bz#1568 from gson AT araneus.fi 897 89820091118 899 - (djm) [channels.c misc.c misc.h sshd.c] add missing setsockopt() to 900 set IPV6_V6ONLY for local forwarding with GatwayPorts=yes. Unify 901 setting IPV6_V6ONLY behind a new function misc.c:sock_set_v6only() 902 bz#1648, report and fix from jan.kratochvil AT redhat.com 903 - (djm) [contrib/gnome-ssh-askpass2.c] Make askpass dialog desktop-modal. 904 bz#1645, patch from jchadima AT redhat.com 905 90620091107 907 - (dtucker) [authfile.c] Fall back to 3DES for the encryption of private 908 keys when built with OpenSSL versions that don't do AES. 909 91020091105 911 - (dtucker) [authfile.c] Add OpenSSL compat header so this still builds with 912 older versions of OpenSSL. 913 91420091024 915 - (dtucker) OpenBSD CVS Sync 916 - djm@cvs.openbsd.org 2009/10/11 23:03:15 917 [hostfile.c] 918 mention the host name that we are looking for in check_host_in_hostfile() 919 - sobrado@cvs.openbsd.org 2009/10/17 12:10:39 920 [sftp-server.c] 921 sort flags. 922 - sobrado@cvs.openbsd.org 2009/10/22 12:35:53 923 [ssh.1 ssh-agent.1 ssh-add.1] 924 use the UNIX-related macros (.At and .Ux) where appropriate. 925 ok jmc@ 926 - sobrado@cvs.openbsd.org 2009/10/22 15:02:12 927 [ssh-agent.1 ssh-add.1 ssh.1] 928 write UNIX-domain in a more consistent way; while here, replace a 929 few remaining ".Tn UNIX" macros with ".Ux" ones. 930 pointed out by ratchov@, thanks! 931 ok jmc@ 932 - djm@cvs.openbsd.org 2009/10/22 22:26:13 933 [authfile.c] 934 switch from 3DES to AES-128 for encryption of passphrase-protected 935 SSH protocol 2 private keys; ok several 936 - djm@cvs.openbsd.org 2009/10/23 01:57:11 937 [sshconnect2.c] 938 disallow a hostile server from checking jpake auth by sending an 939 out-of-sequence success message. (doesn't affect code enabled by default) 940 - dtucker@cvs.openbsd.org 2009/10/24 00:48:34 941 [ssh-keygen.1] 942 ssh-keygen now uses AES-128 for private keys 943 - (dtucker) [mdoc2man.awk] Teach it to understand the .Ux macro. 944 - (dtucker) [session.c openbsd-compat/port-linux.{c,h}] Bug #1637: if selinux 945 is enabled set the security context to "sftpd_t" before running the 946 internal sftp server Based on a patch from jchadima at redhat. 947 94820091011 949 - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for 950 dirent d_type and DTTOIF as we've switched OpenBSD to the more portable 951 lstat. 952 - (dtucker) OpenBSD CVS Sync 953 - markus@cvs.openbsd.org 2009/10/08 14:03:41 954 [sshd_config readconf.c ssh_config.5 servconf.c sshd_config.5] 955 disable protocol 1 by default (after a transition period of about 10 years) 956 ok deraadt 957 - jmc@cvs.openbsd.org 2009/10/08 20:42:12 958 [sshd_config.5 ssh_config.5 sshd.8 ssh.1] 959 some tweaks now that protocol 1 is not offered by default; ok markus 960 - dtucker@cvs.openbsd.org 2009/10/11 10:41:26 961 [sftp-client.c] 962 d_type isn't portable so use lstat to get dirent modes. Suggested by and 963 "looks sane" deraadt@ 964 - markus@cvs.openbsd.org 2009/10/08 18:04:27 965 [regress/test-exec.sh] 966 re-enable protocol v1 for the tests. 967 96820091007 969 - (dtucker) OpenBSD CVS Sync 970 - djm@cvs.openbsd.org 2009/08/12 00:13:00 971 [sftp.c sftp.1] 972 support most of scp(1)'s commandline arguments in sftp(1), as a first 973 step towards making sftp(1) a drop-in replacement for scp(1). 974 One conflicting option (-P) has not been changed, pending further 975 discussion. 976 Patch from carlosvsilvapt@gmail.com as part of his work in the 977 Google Summer of Code 978 - jmc@cvs.openbsd.org 2009/08/12 06:31:42 979 [sftp.1] 980 sort options; 981 - djm@cvs.openbsd.org 2009/08/13 01:11:19 982 [sftp.1 sftp.c] 983 Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path", 984 add "-P port" to match scp(1). Fortunately, the -P option is only really 985 used by our regression scripts. 986 part of larger patch from carlosvsilvapt@gmail.com for his Google Summer 987 of Code work; ok deraadt markus 988 - jmc@cvs.openbsd.org 2009/08/13 13:39:54 989 [sftp.1 sftp.c] 990 sync synopsis and usage(); 991 - djm@cvs.openbsd.org 2009/08/14 18:17:49 992 [sftp-client.c] 993 make the "get_handle: ..." error messages vaguely useful by allowing 994 callers to specify their own error message strings. 995 - fgsch@cvs.openbsd.org 2009/08/15 18:56:34 996 [auth.h] 997 remove unused define. markus@ ok. 998 (Id sync only, Portable still uses this.) 999 - dtucker@cvs.openbsd.org 2009/08/16 23:29:26 1000 [sshd_config.5] 1001 Add PubkeyAuthentication to the list allowed in a Match block (bz #1577) 1002 - djm@cvs.openbsd.org 2009/08/18 18:36:21 1003 [sftp-client.h sftp.1 sftp-client.c sftp.c] 1004 recursive transfer support for get/put and on the commandline 1005 work mostly by carlosvsilvapt@gmail.com for the Google Summer of Code 1006 with some tweaks by me; "go for it" deraadt@ 1007 - djm@cvs.openbsd.org 2009/08/18 21:15:59 1008 [sftp.1] 1009 fix "get" command usage, spotted by jmc@ 1010 - jmc@cvs.openbsd.org 2009/08/19 04:56:03 1011 [sftp.1] 1012 ether -> either; 1013 - dtucker@cvs.openbsd.org 2009/08/20 23:54:28 1014 [mux.c] 1015 subsystem_flag is defined in ssh.c so it's extern; ok djm 1016 - djm@cvs.openbsd.org 2009/08/27 17:28:52 1017 [sftp-server.c] 1018 allow setting an explicit umask on the commandline to override whatever 1019 default the user has. bz#1229; ok dtucker@ deraadt@ markus@ 1020 - djm@cvs.openbsd.org 2009/08/27 17:33:49 1021 [ssh-keygen.c] 1022 force use of correct hash function for random-art signature display 1023 as it was inheriting the wrong one when bubblebabble signatures were 1024 activated; bz#1611 report and patch from fwojcik+openssh AT besh.com; 1025 ok markus@ 1026 - djm@cvs.openbsd.org 2009/08/27 17:43:00 1027 [sftp-server.8] 1028 allow setting an explicit umask on the commandline to override whatever 1029 default the user has. bz#1229; ok dtucker@ deraadt@ markus@ 1030 - djm@cvs.openbsd.org 2009/08/27 17:44:52 1031 [authfd.c ssh-add.c authfd.h] 1032 Do not fall back to adding keys without contraints (ssh-add -c / -t ...) 1033 when the agent refuses the constrained add request. This was a useful 1034 migration measure back in 2002 when constraints were new, but just 1035 adds risk now. 1036 bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@ 1037 - djm@cvs.openbsd.org 2009/08/31 20:56:02 1038 [sftp-server.c] 1039 check correct variable for error message, spotted by martynas@ 1040 - djm@cvs.openbsd.org 2009/08/31 21:01:29 1041 [sftp-server.8] 1042 document -e and -h; prodded by jmc@ 1043 - djm@cvs.openbsd.org 2009/09/01 14:43:17 1044 [ssh-agent.c] 1045 fix a race condition in ssh-agent that could result in a wedged or 1046 spinning agent: don't read off the end of the allocated fd_sets, and 1047 don't issue blocking read/write on agent sockets - just fall back to 1048 select() on retriable read/write errors. bz#1633 reported and tested 1049 by "noodle10000 AT googlemail.com"; ok dtucker@ markus@ 1050 - grunk@cvs.openbsd.org 2009/10/01 11:37:33 1051 [dh.c] 1052 fix a cast 1053 ok djm@ markus@ 1054 - djm@cvs.openbsd.org 2009/10/06 04:46:40 1055 [session.c] 1056 bz#1596: fflush(NULL) before exec() to ensure that everying (motd 1057 in particular) has made it out before the streams go away. 1058 - djm@cvs.openbsd.org 2008/12/07 22:17:48 1059 [regress/addrmatch.sh] 1060 match string "passwordauthentication" only at start of line, not anywhere 1061 in sshd -T output 1062 - dtucker@cvs.openbsd.org 2009/05/05 07:51:36 1063 [regress/multiplex.sh] 1064 Always specify ssh_config for multiplex tests: prevents breakage caused 1065 by options in ~/.ssh/config. From Dan Peterson. 1066 - djm@cvs.openbsd.org 2009/08/13 00:57:17 1067 [regress/Makefile] 1068 regression test for port number parsing. written as part of the a2port 1069 change that went into 5.2 but I forgot to commit it at the time... 1070 - djm@cvs.openbsd.org 2009/08/13 01:11:55 1071 [regress/sftp-batch.sh regress/sftp-badcmds.sh regress/sftp.sh 1072 regress/sftp-cmds.sh regres/sftp-glob.sh] 1073 date: 2009/08/13 01:11:19; author: djm; state: Exp; lines: +10 -7 1074 Swizzle options: "-P sftp_server_path" moves to "-D sftp_server_path", 1075 add "-P port" to match scp(1). Fortunately, the -P option is only really 1076 used by our regression scripts. 1077 part of larger patch from carlosvsilvapt@gmail.com for his Google Summer 1078 of Code work; ok deraadt markus 1079 - djm@cvs.openbsd.org 2009/08/20 18:43:07 1080 [regress/ssh-com-sftp.sh] 1081 fix one sftp -D ... => sftp -P ... conversion that I missed; from Carlos 1082 Silva for Google Summer of Code 1083 - dtucker@cvs.openbsd.org 2009/10/06 23:51:49 1084 [regress/ssh2putty.sh] 1085 Add OpenBSD tag to make syncs easier 1086 - (dtucker) [regress/portnum.sh] Import new test. 1087 - (dtucker) [configure.ac sftp-client.c] DTOTIF is in fs/ffs/dir.h on at 1088 least dragonflybsd. 1089 - (dtucker) d_type is not mandated by POSIX, so add fallback code using 1090 stat(), needed on at least cygwin. 1091 109220091002 1093 - (djm) [Makefile.in] Mention readconf.o in ssh-keysign's make deps. 1094 spotted by des AT des.no 1095 109620090926 1097 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 1098 [contrib/suse/openssh.spec] Update for release 1099 - (djm) [README] update relnotes URL 1100 - (djm) [packet.c] Restore EWOULDBLOCK handling that got lost somewhere 1101 - (djm) Release 5.3p1 1102 110320090911 1104 - (dtucker) [configure.ac] Change the -lresolv check so it works on Mac OS X 1105 10.6 (which doesn't have BIND8_COMPAT and thus uses res_9_query). Patch 1106 from jbasney at ncsa uiuc edu. 1107 110820090908 1109 - (djm) [serverloop.c] Fix test for server-assigned remote forwarding port 1110 (-R 0:...); bz#1578, spotted and fix by gavin AT emf.net; ok dtucker@ 1111 111220090901 1113 - (dtucker) [configure.ac] Bug #1639: use AC_PATH_PROG to search the path for 1114 krb5-config if it's not in the location specified by --with-kerberos5. 1115 Patch from jchadima at redhat. 1116 111720090829 1118 - (dtucker) [README.platform] Add text about development packages, based on 1119 text from Chris Pepper in bug #1631. 1120 112120090828 1122 - dtucker [auth-sia.c] Roll back the change for bug #1241 as it apparently 1123 causes problems in some Tru64 configurations. 1124 - (djm) [sshd_config.5] downgrade mention of login.conf to be an example 1125 and mention PAM as another provider for ChallengeResponseAuthentication; 1126 bz#1408; ok dtucker@ 1127 - (djm) [sftp-server.c] bz#1535: accept ENOSYS as a fallback error when 1128 attempting atomic rename(); ok dtucker@ 1129 - (djm) [Makefile.in] bz#1505: Solaris make(1) doesn't accept make variables 1130 in argv, so pass them in the environment; ok dtucker@ 1131 - (dtucker) [channels.c configure.ac] Bug #1528: skip the tcgetattr call on 1132 the pty master on Solaris, since it never succeeds and can hang if large 1133 amounts of data is sent to the slave (eg a copy-paste). Based on a patch 1134 originally from Doke Scott, ok djm@ 1135 - (dtucker) [clientloop.c configure.ac defines.h] Make the client's IO buffer 1136 size a compile-time option and set it to 64k on Cygwin, since Corinna 1137 reports that it makes a significant difference to performance. ok djm@ 1138 - (dtucker) [configure.ac] Fix the syntax of the Solaris tcgetattr entry. 1139 114020090820 1141 - (dtucker) [includes.h] Bug #1634: do not include system glob.h if we're not 1142 using it since the type conflicts can cause problems on FreeBSD. Patch 1143 from Jonathan Chen. 1144 - (dtucker) [session.c openbsd-compat/port-aix.h] Bugs #1249 and #1567: move 1145 the setpcred call on AIX to immediately before the permanently_set_uid(). 1146 Ensures that we still have privileges when we call chroot and 1147 pam_open_sesson. Based on a patch from David Leonard. 1148 114920090817 1150 - (dtucker) [configure.ac] Check for headers before libraries for openssl an 1151 zlib, which should make the errors slightly more meaningful on platforms 1152 where there's separate "-devel" packages for those. 1153 - (dtucker) [sshlogin.c openbsd-compat/port-aix.{c,h}] Bug #1595: make 1154 PrintLastLog work on AIX. Based in part on a patch from Miguel Sanders. 1155 115620090729 1157 - (tim) [contrib/cygwin/ssh-user-config] Change script to call correct error 1158 function. Patch from Corinna Vinschen. 1159 116020090713 1161 - (dtucker) [openbsd-compat/getrrsetbyname.c] Reduce answer buffer size so it 1162 fits into 16 bits to work around a bug in glibc's resolver where it masks 1163 off the buffer size at 16 bits. Patch from Hauke Lampe, ok djm jakob. 1164 116520090712 1166 - (dtucker) [configure.ac] Include sys/param.h for the sys/mount.h test, 1167 prevents configure complaining on older BSDs. 1168 - (dtucker [contrib/cygwin/ssh-{host,user}-config] Add license text. Patch 1169 from Corinna Vinschen. 1170 - (dtucker) [auth-pam.c] Bug #1534: move the deletion of PAM credentials on 1171 logout to after the session close. Patch from Anicka Bernathova, 1172 originally from Andreas Schwab via Novelll ok djm. 1173 117420090707 1175 - (dtucker) [contrib/cygwin/ssh-host-config] better support for automated 1176 scripts and fix usage of eval. Patch from Corinna Vinschen. 1177 117820090705 1179 - (dtucker) OpenBSD CVS Sync 1180 - andreas@cvs.openbsd.org 2009/06/27 09:29:06 1181 [packet.h packet.c] 1182 packet_bacup_state() and packet_restore_state() will be used to 1183 temporarily save the current state ren resuming a suspended connection. 1184 ok markus@ 1185 - andreas@cvs.openbsd.org 2009/06/27 09:32:43 1186 [roaming_common.c roaming.h] 1187 It may be necessary to retransmit some data when resuming, so add it 1188 to a buffer when roaming is enabled. 1189 Most of this code was written by Martin Forssen, maf at appgate dot com. 1190 ok markus@ 1191 - andreas@cvs.openbsd.org 2009/06/27 09:35:06 1192 [readconf.h readconf.c] 1193 Add client option UseRoaming. It doesn't do anything yet but will 1194 control whether the client tries to use roaming if enabled on the 1195 server. From Martin Forssen. 1196 ok markus@ 1197 - markus@cvs.openbsd.org 2009/06/30 14:54:40 1198 [version.h] 1199 crank version; ok deraadt 1200 - dtucker@cvs.openbsd.org 2009/07/02 02:11:47 1201 [ssh.c] 1202 allow for long home dir paths (bz #1615). ok deraadt 1203 (based in part on a patch from jchadima at redhat) 1204 - stevesk@cvs.openbsd.org 2009/07/05 19:28:33 1205 [clientloop.c] 1206 only send SSH2_MSG_DISCONNECT if we're in compat20; from dtucker@ 1207 ok deraadt@ markus@ 1208 120920090622 1210 - (dtucker) OpenBSD CVS Sync 1211 - dtucker@cvs.openbsd.org 2009/06/22 05:39:28 1212 [monitor_wrap.c monitor_mm.c ssh-keygen.c auth2.c gss-genr.c sftp-client.c] 1213 alphabetize includes; reduces diff vs portable and style(9). 1214 ok stevesk djm 1215 (Id sync only; these were already in order in -portable) 1216 121720090621 1218 - (dtucker) OpenBSD CVS Sync 1219 - markus@cvs.openbsd.org 2009/03/17 21:37:00 1220 [ssh.c] 1221 pass correct argv[0] to openlog(); ok djm@ 1222 - jmc@cvs.openbsd.org 2009/03/19 15:15:09 1223 [ssh.1] 1224 for "Ciphers", just point the reader to the keyword in ssh_config(5), just 1225 as we do for "MACs": this stops us getting out of sync when the lists 1226 change; 1227 fixes documentation/6102, submitted by Peter J. Philipp 1228 alternative fix proposed by djm 1229 ok markus 1230 - tobias@cvs.openbsd.org 2009/03/23 08:31:19 1231 [ssh-agent.c] 1232 Fixed a possible out-of-bounds memory access if the environment variable 1233 SHELL is shorter than 3 characters. 1234 with input by and ok dtucker 1235 - tobias@cvs.openbsd.org 2009/03/23 19:38:04 1236 [ssh-agent.c] 1237 My previous commit didn't fix the problem at all, so stick at my first 1238 version of the fix presented to dtucker. 1239 Issue notified by Matthias Barkhoff (matthias dot barkhoff at gmx dot de). 1240 ok dtucker 1241 - sobrado@cvs.openbsd.org 2009/03/26 08:38:39 1242 [sftp-server.8 sshd.8 ssh-agent.1] 1243 fix a few typographical errors found by spell(1). 1244 ok dtucker@, jmc@ 1245 - stevesk@cvs.openbsd.org 2009/04/13 19:07:44 1246 [sshd_config.5] 1247 fix possessive; ok djm@ 1248 - stevesk@cvs.openbsd.org 2009/04/14 16:33:42 1249 [sftp-server.c] 1250 remove unused option character from getopt() optstring; ok markus@ 1251 - jj@cvs.openbsd.org 2009/04/14 21:10:54 1252 [servconf.c] 1253 Fixed a few the-the misspellings in comments. Skipped a bunch in 1254 binutils,gcc and so on. ok jmc@ 1255 - stevesk@cvs.openbsd.org 2009/04/17 19:23:06 1256 [session.c] 1257 use INTERNAL_SFTP_NAME for setproctitle() of in-process sftp-server; 1258 ok djm@ markus@ 1259 - stevesk@cvs.openbsd.org 2009/04/17 19:40:17 1260 [sshd_config.5] 1261 clarify that even internal-sftp needs /dev/log for logging to work; ok 1262 markus@ 1263 - jmc@cvs.openbsd.org 2009/04/18 18:39:10 1264 [sshd_config.5] 1265 tweak previous; ok stevesk 1266 - stevesk@cvs.openbsd.org 2009/04/21 15:13:17 1267 [sshd_config.5] 1268 clarify we cd to user's home after chroot; ok markus@ on 1269 earlier version; tweaks and ok jmc@ 1270 - andreas@cvs.openbsd.org 2009/05/25 06:48:01 1271 [channels.c packet.c clientloop.c packet.h serverloop.c monitor_wrap.c 1272 monitor.c] 1273 Put the globals in packet.c into a struct and don't access it directly 1274 from other files. No functional changes. 1275 ok markus@ djm@ 1276 - andreas@cvs.openbsd.org 2009/05/27 06:31:25 1277 [canohost.h canohost.c] 1278 Add clear_cached_addr(), needed for upcoming changes allowing the peer 1279 address to change. 1280 ok markus@ 1281 - andreas@cvs.openbsd.org 2009/05/27 06:33:39 1282 [clientloop.c] 1283 Send SSH2_MSG_DISCONNECT when the client disconnects. From a larger 1284 change from Martin Forssen, maf at appgate dot com. 1285 ok markus@ 1286 - andreas@cvs.openbsd.org 2009/05/27 06:34:36 1287 [kex.c kex.h] 1288 Move the KEX_COOKIE_LEN define to kex.h 1289 ok markus@ 1290 - andreas@cvs.openbsd.org 2009/05/27 06:36:07 1291 [packet.h packet.c] 1292 Add packet_put_int64() and packet_get_int64(), part of a larger change 1293 from Martin Forssen. 1294 ok markus@ 1295 - andreas@cvs.openbsd.org 2009/05/27 06:38:16 1296 [sshconnect.h sshconnect.c] 1297 Un-static ssh_exchange_identification(), part of a larger change from 1298 Martin Forssen and needed for upcoming changes. 1299 ok markus@ 1300 - andreas@cvs.openbsd.org 2009/05/28 16:50:16 1301 [sshd.c packet.c serverloop.c monitor_wrap.c clientloop.c sshconnect.c 1302 monitor.c Added roaming.h roaming_common.c roaming_dummy.c] 1303 Keep track of number of bytes read and written. Needed for upcoming 1304 changes. Most code from Martin Forssen, maf at appgate dot com. 1305 ok markus@ 1306 Also, applied appropriate changes to Makefile.in 1307 - andreas@cvs.openbsd.org 2009/06/12 20:43:22 1308 [monitor.c packet.c] 1309 Fix warnings found by chl@ and djm@ and change roaming_atomicio's 1310 return type to match atomicio's 1311 Diff from djm@, ok markus@ 1312 - andreas@cvs.openbsd.org 2009/06/12 20:58:32 1313 [packet.c] 1314 Move some more statics into session_state 1315 ok markus@ djm@ 1316 - dtucker@cvs.openbsd.org 2009/06/21 07:37:15 1317 [kexdhs.c kexgexs.c] 1318 abort if key_sign fails, preventing possible null deref. Based on report 1319 from Paolo Ganci, ok markus@ djm@ 1320 - dtucker@cvs.openbsd.org 2009/06/21 09:04:03 1321 [roaming.h roaming_common.c roaming_dummy.c] 1322 Add tags for the benefit of the sync scripts 1323 Also: pull in the changes for 1.1->1.2 missed in the previous sync. 1324 - (dtucker) [auth2-jpake.c auth2.c canohost.h session.c] Whitespace and 1325 header-order changes to reduce diff vs OpenBSD. 1326 - (dtucker) [servconf.c sshd.c] More whitespace sync. 1327 - (dtucker) [roaming_common.c roaming_dummy.c] Wrap #include <inttypes.h> in 1328 ifdef. 1329 133020090616 1331 - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t 1332 is a struct with a __val member. Fixes build on, eg, Redhat 6.2. 1333 133420090504 1335 - (dtucker) [sshlogin.c] Move the NO_SSH_LASTLOG #ifndef line to include 1336 variable declarations. Should prevent unused warnings anywhere it's set 1337 (only Crays as far as I can tell) and be a no-op everywhere else. 1338 133920090318 1340 - (tim) [configure.ac] Remove setting IP_TOS_IS_BROKEN for Cygwin. The problem 1341 that setsockopt(IP_TOS) doesn't work on Cygwin has been fixed since 2005. 1342 Based on patch from vinschen at redhat com. 1343 134420090308 1345 - (dtucker) [auth-passwd.c auth1.c auth2-kbdint.c auth2-none.c auth2-passwd.c 1346 auth2-pubkey.c session.c openbsd-compat/bsd-cygwin_util.{c,h} 1347 openbsd-compat/daemon.c] Remove support for Windows 95/98/ME and very old 1348 version of Cygwin. Patch from vinschen at redhat com. 1349 135020090307 1351 - (dtucker) [contrib/aix/buildbff.sh] Only try to rename ssh_prng_cmds if it 1352 exists (it's not created if OpenSSL's PRNG is self-seeded, eg if the OS 1353 has a /dev/random). 1354 - (dtucker) [schnorr.c openbsd-compat/openssl-compat.{c,h}] Add 1355 EVP_DigestUpdate to the OLD_EVP compatibility functions and tell schnorr.c 1356 to use them. Allows building with older OpenSSL versions. 1357 - (dtucker) [configure.ac defines.h] Check for in_port_t and typedef if needed. 1358 - (dtucker) [configure.ac] Missing comma in type list. 1359 - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] 1360 EVP_DigestUpdate does not exactly match the other OLD_EVP functions (eg 1361 in openssl 0.9.6) so add an explicit test for it. 1362 136320090306 1364 - (djm) OpenBSD CVS Sync 1365 - djm@cvs.openbsd.org 2009/03/05 07:18:19 1366 [auth2-jpake.c jpake.c jpake.h monitor_wrap.c monitor_wrap.h schnorr.c] 1367 [sshconnect2.c] 1368 refactor the (disabled) Schnorr proof code to make it a little more 1369 generally useful 1370 - djm@cvs.openbsd.org 2009/03/05 11:30:50 1371 [uuencode.c] 1372 document what these functions do so I don't ever have to recuse into 1373 b64_pton/ntop to remember their return values 1374 137520090223 1376 - (djm) OpenBSD CVS Sync 1377 - djm@cvs.openbsd.org 2009/02/22 23:50:57 1378 [ssh_config.5 sshd_config.5] 1379 don't advertise experimental options 1380 - djm@cvs.openbsd.org 2009/02/22 23:59:25 1381 [sshd_config.5] 1382 missing period 1383 - djm@cvs.openbsd.org 2009/02/23 00:06:15 1384 [version.h] 1385 openssh-5.2 1386 - (djm) [README] update for 5.2 1387 - (djm) Release openssh-5.2p1 1388 138920090222 1390 - (djm) OpenBSD CVS Sync 1391 - tobias@cvs.openbsd.org 2009/02/21 19:32:04 1392 [misc.c sftp-server-main.c ssh-keygen.c] 1393 Added missing newlines in error messages. 1394 ok dtucker 1395 139620090221 1397 - (djm) OpenBSD CVS Sync 1398 - djm@cvs.openbsd.org 2009/02/17 01:28:32 1399 [ssh_config] 1400 sync with revised default ciphers; pointed out by dkrause@ 1401 - djm@cvs.openbsd.org 2009/02/18 04:31:21 1402 [schnorr.c] 1403 signature should hash over the entire group, not just the generator 1404 (this is still disabled code) 1405 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 1406 [contrib/suse/openssh.spec] Prepare for 5.2p1 1407 140820090216 1409 - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh] 1410 [regress/putty-kex.sh regress/putty-transfer.sh] Downgrade disabled 1411 interop tests from FATAL error to a warning. Allows some interop 1412 tests to proceed if others are missing necessary prerequisites. 1413 - (djm) [configure.ac] support GNU/kFreeBSD and GNU/kOpensolaris 1414 systems; patch from Aurelien Jarno via rmh AT aybabtu.com 1415 141620090214 1417 - (djm) OpenBSD CVS Sync 1418 - dtucker@cvs.openbsd.org 2009/02/02 11:15:14 1419 [sftp.c] 1420 Initialize a few variables to prevent spurious "may be used 1421 uninitialized" warnings from newer gcc's. ok djm@ 1422 - djm@cvs.openbsd.org 2009/02/12 03:00:56 1423 [canohost.c canohost.h channels.c channels.h clientloop.c readconf.c] 1424 [readconf.h serverloop.c ssh.c] 1425 support remote port forwarding with a zero listen port (-R0:...) to 1426 dyamically allocate a listen port at runtime (this is actually 1427 specified in rfc4254); bz#1003 ok markus@ 1428 - djm@cvs.openbsd.org 2009/02/12 03:16:01 1429 [serverloop.c] 1430 tighten check for -R0:... forwarding: only allow dynamic allocation 1431 if want_reply is set in the packet 1432 - djm@cvs.openbsd.org 2009/02/12 03:26:22 1433 [monitor.c] 1434 some paranoia: check that the serialised key is really KEY_RSA before 1435 diddling its internals 1436 - djm@cvs.openbsd.org 2009/02/12 03:42:09 1437 [ssh.1] 1438 document -R0:... usage 1439 - djm@cvs.openbsd.org 2009/02/12 03:44:25 1440 [ssh.1] 1441 consistency: Dq => Ql 1442 - djm@cvs.openbsd.org 2009/02/12 03:46:17 1443 [ssh_config.5] 1444 document RemoteForward usage with 0 listen port 1445 - jmc@cvs.openbsd.org 2009/02/12 07:34:20 1446 [ssh_config.5] 1447 kill trailing whitespace; 1448 - markus@cvs.openbsd.org 2009/02/13 11:50:21 1449 [packet.c] 1450 check for enc !=NULL in packet_start_discard 1451 - djm@cvs.openbsd.org 2009/02/14 06:35:49 1452 [PROTOCOL] 1453 mention that eow and no-more-sessions extensions are sent only to 1454 OpenSSH peers 1455 145620090212 1457 - (djm) [sshpty.c] bz#1419: OSX uses cloning ptys that automagically 1458 set ownership and modes, so avoid explicitly setting them 1459 - (djm) [configure.ac loginrec.c] bz#1421: fix lastlog support for OSX. 1460 OSX provides a getlastlogxbyname function that automates the reading of 1461 a lastlog file. Also, the pututxline function will update lastlog so 1462 there is no need for loginrec.c to do it explicitly. Collapse some 1463 overly verbose code while I'm in there. 1464 146520090201 1466 - (dtucker) [defines.h sshconnect.c] INET6_ADDRSTRLEN is now needed in 1467 channels.c too, so move the definition for non-IP6 platforms to defines.h 1468 where it can be shared. 1469 147020090129 1471 - (tim) [contrib/cygwin/ssh-host-config] Patch from Corinna Vinschen. 1472 If the CYGWIN environment variable is empty, the installer script 1473 should not install the service with an empty CYGWIN variable, but 1474 rather without setting CYGWNI entirely. 1475 - (tim) [contrib/cygwin/ssh-host-config] Whitespace cleanup. No code changes. 1476 147720090128 1478 - (tim) [contrib/cygwin/ssh-host-config] Patch from Corinna Vinschen. 1479 Changes to work on Cygwin 1.5.x as well as on the new Cygwin 1.7.x. 1480 The information given for the setting of the CYGWIN environment variable 1481 is wrong for both releases so I just removed it, together with the 1482 unnecessary (Cygwin 1.5.x) or wrong (Cygwin 1.7.x) default setting. 1483 148420081228 1485 - (djm) OpenBSD CVS Sync 1486 - stevesk@cvs.openbsd.org 2008/12/09 03:20:42 1487 [channels.c servconf.c] 1488 channel_print_adm_permitted_opens() should deal with all the printing 1489 for that config option. suggested by markus@; ok markus@ djm@ 1490 dtucker@ 1491 - djm@cvs.openbsd.org 2008/12/09 04:32:22 1492 [auth2-chall.c] 1493 replace by-hand string building with xasprinf(); ok deraadt@ 1494 - sobrado@cvs.openbsd.org 2008/12/09 15:35:00 1495 [sftp.1 sftp.c] 1496 update for the synopses displayed by the 'help' command, there are a 1497 few missing flags; add 'bye' to the output of 'help'; sorting and spacing. 1498 jmc@ suggested replacing .Oo/.Oc with a single .Op macro. 1499 ok jmc@ 1500 - stevesk@cvs.openbsd.org 2008/12/09 22:37:33 1501 [clientloop.c] 1502 fix typo in error message 1503 - stevesk@cvs.openbsd.org 2008/12/10 03:55:20 1504 [addrmatch.c] 1505 o cannot be NULL here but use xfree() to be consistent; ok djm@ 1506 - stevesk@cvs.openbsd.org 2008/12/29 01:12:36 1507 [ssh-keyscan.1] 1508 fix example, default key type is rsa for 3+ years; from 1509 frederic.perrin@resel.fr 1510 - stevesk@cvs.openbsd.org 2008/12/29 02:23:26 1511 [pathnames.h] 1512 no need to escape single quotes in comments 1513 - okan@cvs.openbsd.org 2008/12/30 00:46:56 1514 [sshd_config.5] 1515 add AllowAgentForwarding to available Match keywords list 1516 ok djm 1517 - djm@cvs.openbsd.org 2009/01/01 21:14:35 1518 [channels.c] 1519 call channel destroy callbacks on receipt of open failure messages. 1520 fixes client hangs when connecting to a server that has MaxSessions=0 1521 set spotted by imorgan AT nas.nasa.gov; ok markus@ 1522 - djm@cvs.openbsd.org 2009/01/01 21:17:36 1523 [kexgexs.c] 1524 fix hash calculation for KEXGEX: hash over the original client-supplied 1525 values and not the sanity checked versions that we acutally use; 1526 bz#1540 reported by john.smith AT arrows.demon.co.uk 1527 ok markus@ 1528 - djm@cvs.openbsd.org 2009/01/14 01:38:06 1529 [channels.c] 1530 support SOCKS4A protocol, from dwmw2 AT infradead.org via bz#1482; 1531 "looks ok" markus@ 1532 - stevesk@cvs.openbsd.org 2009/01/15 17:38:43 1533 [readconf.c] 1534 1) use obsolete instead of alias for consistency 1535 2) oUserKnownHostsFile not obsolete but oGlobalKnownHostsFile2 is 1536 so move the comment. 1537 3) reorder so like options are together 1538 ok djm@ 1539 - djm@cvs.openbsd.org 2009/01/22 09:46:01 1540 [channels.c channels.h session.c] 1541 make Channel->path an allocated string, saving a few bytes here and 1542 there and fixing bz#1380 in the process; ok markus@ 1543 - djm@cvs.openbsd.org 2009/01/22 09:49:57 1544 [channels.c] 1545 oops! I committed the wrong version of the Channel->path diff, 1546 it was missing some tweaks suggested by stevesk@ 1547 - djm@cvs.openbsd.org 2009/01/22 10:02:34 1548 [clientloop.c misc.c readconf.c readconf.h servconf.c servconf.h] 1549 [serverloop.c ssh-keyscan.c ssh.c sshd.c] 1550 make a2port() return -1 when it encounters an invalid port number 1551 rather than 0, which it will now treat as valid (needed for future work) 1552 adjust current consumers of a2port() to check its return value is <= 0, 1553 which in turn required some things to be converted from u_short => int 1554 make use of int vs. u_short consistent in some other places too 1555 feedback & ok markus@ 1556 - djm@cvs.openbsd.org 2009/01/22 10:09:16 1557 [auth-options.c] 1558 another chunk of a2port() diff that got away. wtfdjm?? 1559 - djm@cvs.openbsd.org 2009/01/23 07:58:11 1560 [myproposal.h] 1561 prefer CTR modes and revised arcfour (i.e w/ discard) modes to CBC 1562 modes; ok markus@ 1563 - naddy@cvs.openbsd.org 2009/01/24 17:10:22 1564 [ssh_config.5 sshd_config.5] 1565 sync list of preferred ciphers; ok djm@ 1566 - markus@cvs.openbsd.org 2009/01/26 09:58:15 1567 [cipher.c cipher.h packet.c] 1568 Work around the CPNI-957037 Plaintext Recovery Attack by always 1569 reading 256K of data on packet size or HMAC errors (in CBC mode only). 1570 Help, feedback and ok djm@ 1571 Feedback from Martin Albrecht and Paterson Kenny 1572 157320090107 1574 - (djm) [uidswap.c] bz#1412: Support >16 supplemental groups in OS X. 1575 Patch based on one from vgiffin AT apple.com; ok dtucker@ 1576 - (djm) [channels.c] bz#1419: support "on demand" X11 forwarding via 1577 launchd on OS X; patch from vgiffin AT apple.com, slightly tweaked; 1578 ok dtucker@ 1579 - (djm) [contrib/ssh-copy-id.1 contrib/ssh-copy-id] bz#1492: Make 1580 ssh-copy-id copy id_rsa.pub by default (instead of the legacy "identity" 1581 key). Patch from cjwatson AT debian.org 1582 158320090107 1584 - (tim) [configure.ac defines.h openbsd-compat/port-uw.c 1585 openbsd-compat/xcrypt.c] Add SECUREWARE support to OpenServer 6 SVR5 ABI. 1586 OK djm@ dtucker@ 1587 - (tim) [configure.ac] Move check_for_libcrypt_later=1 in *-*-sysv5*) section. 1588 OpenServer 6 doesn't need libcrypt. 1589 159020081209 1591 - (djm) OpenBSD CVS Sync 1592 - djm@cvs.openbsd.org 2008/12/09 02:38:18 1593 [clientloop.c] 1594 The ~C escape handler does not work correctly for multiplexed sessions - 1595 it opens a commandline on the master session, instead of on the slave 1596 that requested it. Disable it on slave sessions until such time as it 1597 is fixed; bz#1543 report from Adrian Bridgett via Colin Watson 1598 ok markus@ 1599 - djm@cvs.openbsd.org 2008/12/09 02:39:59 1600 [sftp.c] 1601 Deal correctly with failures in remote stat() operation in sftp, 1602 correcting fail-on-error behaviour in batchmode. bz#1541 report and 1603 fix from anedvedicky AT gmail.com; ok markus@ 1604 - djm@cvs.openbsd.org 2008/12/09 02:58:16 1605 [readconf.c] 1606 don't leave junk (free'd) pointers around in Forward *fwd argument on 1607 failure; avoids double-free in ~C -L handler when given an invalid 1608 forwarding specification; bz#1539 report from adejong AT debian.org 1609 via Colin Watson; ok markus@ dtucker@ 1610 - djm@cvs.openbsd.org 2008/12/09 03:02:37 1611 [sftp.1 sftp.c] 1612 correct sftp(1) and corresponding usage syntax; 1613 bz#1518 patch from imorgan AT nas.nasa.gov; ok deraadt@ improved diff jmc@ 1614 161520081208 1616 - (djm) [configure.ac] bz#1538: better test for ProPolice/SSP: actually 1617 use some stack in main(). 1618 Report and suggested fix from vapier AT gentoo.org 1619 - (djm) OpenBSD CVS Sync 1620 - markus@cvs.openbsd.org 2008/12/02 19:01:07 1621 [clientloop.c] 1622 we have to use the recipient's channel number (RFC 4254) for 1623 SSH2_MSG_CHANNEL_SUCCESS/SSH2_MSG_CHANNEL_FAILURE messages, 1624 otherwise we trigger 'Non-public channel' error messages on sshd 1625 systems with clientkeepalive enabled; noticed by sturm; ok djm; 1626 - markus@cvs.openbsd.org 2008/12/02 19:08:59 1627 [serverloop.c] 1628 backout 1.149, since it's not necessary and openssh clients send 1629 broken CHANNEL_FAILURE/SUCCESS messages since about 2004; ok djm@ 1630 - markus@cvs.openbsd.org 2008/12/02 19:09:38 1631 [channels.c] 1632 s/remote_id/id/ to be more consistent with other code; ok djm@ 1633 163420081201 1635 - (dtucker) [contrib/cygwin/{Makefile,ssh-host-config}] Add new doc files 1636 and tweak the is-sshd-running check in ssh-host-config. Patch from 1637 vinschen at redhat com. 1638 - (dtucker) OpenBSD CVS Sync 1639 - markus@cvs.openbsd.org 2008/11/21 15:47:38 1640 [packet.c] 1641 packet_disconnect() on padding error, too. should reduce the success 1642 probability for the CPNI-957037 Plaintext Recovery Attack to 2^-18 1643 ok djm@ 1644 - dtucker@cvs.openbsd.org 2008/11/30 11:59:26 1645 [monitor_fdpass.c] 1646 Retry sendmsg/recvmsg on EAGAIN and EINTR; ok djm@ 1647 164820081123 1649 - (dtucker) [monitor_fdpass.c] Reduce diff vs OpenBSD by moving some 1650 declarations, removing an unnecessary union member and adding whitespace. 1651 cmsgbuf.tmp thing spotted by des at des no, ok djm some time ago. 1652 165320081118 1654 - (tim) [addrmatch.c configure.ac] Some platforms do not have sin6_scope_id 1655 member of sockaddr_in6. Also reported in Bug 1491 by David Leonard. OK and 1656 feedback by djm@ 1657 165820081111 1659 - (dtucker) OpenBSD CVS Sync 1660 - jmc@cvs.openbsd.org 2008/11/05 11:22:54 1661 [servconf.c] 1662 passord -> password; 1663 fixes user/5975 from Rene Maroufi 1664 - stevesk@cvs.openbsd.org 2008/11/07 00:42:12 1665 [ssh-keygen.c] 1666 spelling/typo in comment 1667 - stevesk@cvs.openbsd.org 2008/11/07 18:50:18 1668 [nchan.c] 1669 add space to some log/debug messages for readability; ok djm@ markus@ 1670 - dtucker@cvs.openbsd.org 2008/11/07 23:34:48 1671 [auth2-jpake.c] 1672 Move JPAKE define to make life easier for portable. ok djm@ 1673 - tobias@cvs.openbsd.org 2008/11/09 12:34:47 1674 [session.c ssh.1] 1675 typo fixed (overriden -> overridden) 1676 ok espie, jmc 1677 - stevesk@cvs.openbsd.org 2008/11/11 02:58:09 1678 [servconf.c] 1679 USE_AFS not referenced so remove #ifdef. fixes sshd -T not printing 1680 kerberosgetafstoken. ok dtucker@ 1681 (Id sync only, we still want the ifdef in portable) 1682 - stevesk@cvs.openbsd.org 2008/11/11 03:55:11 1683 [channels.c] 1684 for sshd -T print 'permitopen any' vs. 'permitopen' for case of no 1685 permitopen's; ok and input dtucker@ 1686 - djm@cvs.openbsd.org 2008/11/10 02:06:35 1687 [regress/putty-ciphers.sh] 1688 PuTTY supports AES CTR modes, so interop test against them too 1689 169020081105 1691 - OpenBSD CVS Sync 1692 - djm@cvs.openbsd.org 2008/11/03 08:59:41 1693 [servconf.c] 1694 include MaxSessions in sshd -T output; patch from imorgan AT nas.nasa.gov 1695 - djm@cvs.openbsd.org 2008/11/04 07:58:09 1696 [auth.c] 1697 need unistd.h for close() prototype 1698 (ID sync only) 1699 - djm@cvs.openbsd.org 2008/11/04 08:22:13 1700 [auth.h auth2.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h] 1701 [readconf.c readconf.h servconf.c servconf.h ssh2.h ssh_config.5] 1702 [sshconnect2.c sshd_config.5 jpake.c jpake.h schnorr.c auth2-jpake.c] 1703 [Makefile.in] 1704 Add support for an experimental zero-knowledge password authentication 1705 method using the J-PAKE protocol described in F. Hao, P. Ryan, 1706 "Password Authenticated Key Exchange by Juggling", 16th Workshop on 1707 Security Protocols, Cambridge, April 2008. 1708 1709 This method allows password-based authentication without exposing 1710 the password to the server. Instead, the client and server exchange 1711 cryptographic proofs to demonstrate of knowledge of the password while 1712 revealing nothing useful to an attacker or compromised endpoint. 1713 1714 This is experimental, work-in-progress code and is presently 1715 compiled-time disabled (turn on -DJPAKE in Makefile.inc). 1716 1717 "just commit it. It isn't too intrusive." deraadt@ 1718 - stevesk@cvs.openbsd.org 2008/11/04 19:18:00 1719 [readconf.c] 1720 because parse_forward() is now used to parse all forward types (DLR), 1721 and it malloc's space for host variables, we don't need to malloc 1722 here. fixes small memory leaks. 1723 1724 previously dynamic forwards were not parsed in parse_forward() and 1725 space was not malloc'd in that case. 1726 1727 ok djm@ 1728 - stevesk@cvs.openbsd.org 2008/11/05 03:23:09 1729 [clientloop.c ssh.1] 1730 add dynamic forward escape command line; ok djm@ 1731 173220081103 1733 - OpenBSD CVS Sync 1734 - sthen@cvs.openbsd.org 2008/07/24 23:55:30 1735 [ssh-keygen.1] 1736 Add "ssh-keygen -F -l" to synopsis (displays fingerprint from 1737 known_hosts). ok djm@ 1738 - grunk@cvs.openbsd.org 2008/07/25 06:56:35 1739 [ssh_config] 1740 Add VisualHostKey to example file, ok djm@ 1741 - grunk@cvs.openbsd.org 2008/07/25 07:05:16 1742 [key.c] 1743 In random art visualization, make sure to use the end marker only at the 1744 end. Initial diff by Dirk Loss, tweaks and ok djm@ 1745 - markus@cvs.openbsd.org 2008/07/31 14:48:28 1746 [sshconnect2.c] 1747 don't allocate space for empty banners; report t8m at centrum.cz; 1748 ok deraadt 1749 - krw@cvs.openbsd.org 2008/08/02 04:29:51 1750 [ssh_config.5] 1751 whitepsace -> whitespace. From Matthew Clarke via bugs@. 1752 - djm@cvs.openbsd.org 2008/08/21 04:09:57 1753 [session.c] 1754 allow ForceCommand internal-sftp with arguments. based on patch from 1755 michael.barabanov AT gmail.com; ok markus@ 1756 - djm@cvs.openbsd.org 2008/09/06 12:24:13 1757 [kex.c] 1758 OpenSSL 0.9.8h supplies a real EVP_sha256 so we do not need our 1759 replacement anymore 1760 (ID sync only for portable - we still need this) 1761 - markus@cvs.openbsd.org 2008/09/11 14:22:37 1762 [compat.c compat.h nchan.c ssh.c] 1763 only send eow and no-more-sessions requests to openssh 5 and newer; 1764 fixes interop problems with broken ssh v2 implementations; ok djm@ 1765 - millert@cvs.openbsd.org 2008/10/02 14:39:35 1766 [session.c] 1767 Convert an unchecked strdup to xstrdup. OK deraadt@ 1768 - jmc@cvs.openbsd.org 2008/10/03 13:08:12 1769 [sshd.8] 1770 do not give an example of how to chmod files: we can presume the user 1771 knows that. removes an ambiguity in the permission of authorized_keys; 1772 ok deraadt 1773 - deraadt@cvs.openbsd.org 2008/10/03 23:56:28 1774 [sshconnect2.c] 1775 Repair strnvis() buffersize of 4*n+1, with termination gauranteed by the 1776 function. 1777 spotted by des@freebsd, who commited an incorrect fix to the freebsd tree 1778 and (as is fairly typical) did not report the problem to us. But this fix 1779 is correct. 1780 ok djm 1781 - djm@cvs.openbsd.org 2008/10/08 23:34:03 1782 [ssh.1 ssh.c] 1783 Add -y option to force logging via syslog rather than stderr. 1784 Useful for daemonised ssh connection (ssh -f). Patch originally from 1785 and ok'd by markus@ 1786 - djm@cvs.openbsd.org 2008/10/09 03:50:54 1787 [servconf.c sshd_config.5] 1788 support setting PermitEmptyPasswords in a Match block 1789 requested in PR3891; ok dtucker@ 1790 - jmc@cvs.openbsd.org 2008/10/09 06:54:22 1791 [ssh.c] 1792 add -y to usage(); 1793 - stevesk@cvs.openbsd.org 2008/10/10 04:55:16 1794 [scp.c] 1795 spelling in comment; ok djm@ 1796 - stevesk@cvs.openbsd.org 2008/10/10 05:00:12 1797 [key.c] 1798 typo in error message; ok djm@ 1799 - stevesk@cvs.openbsd.org 2008/10/10 16:43:27 1800 [ssh_config.5] 1801 use 'Privileged ports can be forwarded only when logging in as root on 1802 the remote machine.' for RemoteForward just like ssh.1 -R. 1803 ok djm@ jmc@ 1804 - stevesk@cvs.openbsd.org 2008/10/14 18:11:33 1805 [sshconnect.c] 1806 use #define ROQUIET here; no binary change. ok dtucker@ 1807 - stevesk@cvs.openbsd.org 2008/10/17 18:36:24 1808 [ssh_config.5] 1809 correct and clarify VisualHostKey; ok jmc@ 1810 - stevesk@cvs.openbsd.org 2008/10/30 19:31:16 1811 [clientloop.c sshd.c] 1812 don't need to #include "monitor_fdpass.h" 1813 - stevesk@cvs.openbsd.org 2008/10/31 15:05:34 1814 [dispatch.c] 1815 remove unused #define DISPATCH_MIN; ok markus@ 1816 - djm@cvs.openbsd.org 2008/11/01 04:50:08 1817 [sshconnect2.c] 1818 sprinkle ARGSUSED on dispatch handlers 1819 nuke stale unusued prototype 1820 - stevesk@cvs.openbsd.org 2008/11/01 06:43:33 1821 [channels.c] 1822 fix some typos in log messages; ok djm@ 1823 - sobrado@cvs.openbsd.org 2008/11/01 11:14:36 1824 [ssh-keyscan.1 ssh-keyscan.c] 1825 the ellipsis is not an optional argument; while here, improve spacing. 1826 - stevesk@cvs.openbsd.org 2008/11/01 17:40:33 1827 [clientloop.c readconf.c readconf.h ssh.c] 1828 merge dynamic forward parsing into parse_forward(); 1829 'i think this is OK' djm@ 1830 - stevesk@cvs.openbsd.org 2008/11/02 00:16:16 1831 [ttymodes.c] 1832 protocol 2 tty modes support is now 7.5 years old so remove these 1833 debug3()s; ok deraadt@ 1834 - stevesk@cvs.openbsd.org 2008/11/03 01:07:02 1835 [readconf.c] 1836 remove valueless comment 1837 - stevesk@cvs.openbsd.org 2008/11/03 02:44:41 1838 [readconf.c] 1839 fix comment 1840 - (djm) [contrib/caldera/ssh-host-keygen contrib/suse/rc.sshd] 1841 Make example scripts generate keys with default sizes rather than fixed, 1842 non-default 1024 bits; patch from imorgan AT nas.nasa.gov 1843 - (djm) [contrib/sshd.pam.generic contrib/caldera/sshd.pam] 1844 [contrib/redhat/sshd.pam] Move pam_nologin to account group from 1845 incorrect auth group in example files; 1846 patch from imorgan AT nas.nasa.gov 1847 184820080906 1849 - (dtucker) [config.guess config.sub] Update to latest versions from 1850 http://git.savannah.gnu.org/gitweb/ (2008-04-14 and 2008-06-16 1851 respectively). 1852 185320080830 1854 - (dtucker) [openbsd-compat/bsd-poll.c] correctly check for number of FDs 1855 larger than FD_SETSIZE (OpenSSH only ever uses poll with one fd). Patch 1856 from Nicholas Marriott. 1857 185820080721 1859 - (djm) OpenBSD CVS Sync 1860 - djm@cvs.openbsd.org 2008/07/23 07:36:55 1861 [servconf.c] 1862 do not try to print options that have been compile-time disabled 1863 in config test mode (sshd -T); report from nix-corp AT esperi.org.uk 1864 ok dtucker@ 1865 - (djm) [servconf.c] Print UsePAM option in config test mode (when it 1866 has been compiled in); report from nix-corp AT esperi.org.uk 1867 ok dtucker@ 1868 186920080721 1870 - (djm) OpenBSD CVS Sync 1871 - jmc@cvs.openbsd.org 2008/07/18 22:51:01 1872 [sftp-server.8] 1873 no need for .Pp before or after .Sh; 1874 - djm@cvs.openbsd.org 2008/07/21 08:19:07 1875 [version.h] 1876 openssh-5.1 1877 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 1878 [contrib/suse/openssh.spec] Update version number in README and RPM specs 1879 - (djm) Release OpenSSH-5.1 1880 188120080717 1882 - (djm) OpenBSD CVS Sync 1883 - djm@cvs.openbsd.org 2008/07/17 08:48:00 1884 [sshconnect2.c] 1885 strnvis preauth banner; pointed out by mpf@ ok markus@ 1886 - djm@cvs.openbsd.org 2008/07/17 08:51:07 1887 [auth2-hostbased.c] 1888 strip trailing '.' from hostname when HostbasedUsesNameFromPacketOnly=yes 1889 report and patch from res AT qoxp.net (bz#1200); ok markus@ 1890 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Remove long-unneeded compat 1891 code, replace with equivalent cygwin library call. Patch from vinschen 1892 at redhat.com, ok djm@. 1893 - (djm) [sshconnect2.c] vis.h isn't available everywhere 1894 189520080716 1896 - OpenBSD CVS Sync 1897 - djm@cvs.openbsd.org 2008/07/15 02:23:14 1898 [sftp.1] 1899 number of pipelined requests is now 64; 1900 prodded by Iain.Morgan AT nasa.gov 1901 - djm@cvs.openbsd.org 2008/07/16 11:51:14 1902 [clientloop.c] 1903 rename variable first_gc -> last_gc (since it is actually the last 1904 in the list). 1905 - djm@cvs.openbsd.org 2008/07/16 11:52:19 1906 [channels.c] 1907 this loop index should be automatic, not static 1908 190920080714 1910 - (djm) OpenBSD CVS Sync 1911 - sthen@cvs.openbsd.org 2008/07/13 21:22:52 1912 [ssh-keygen.c] 1913 Change "ssh-keygen -F [host] -l" to not display random art unless 1914 -v is also specified, making it consistent with the manual and other 1915 uses of -l. 1916 ok grunk@ 1917 - djm@cvs.openbsd.org 2008/07/13 22:13:07 1918 [channels.c] 1919 use struct sockaddr_storage instead of struct sockaddr for accept(2) 1920 address argument. from visibilis AT yahoo.com in bz#1485; ok markus@ 1921 - djm@cvs.openbsd.org 2008/07/13 22:16:03 1922 [sftp.c] 1923 increase number of piplelined requests so they properly fill the 1924 (recently increased) channel window. prompted by rapier AT psc.edu; 1925 ok markus@ 1926 - djm@cvs.openbsd.org 2008/07/14 01:55:56 1927 [sftp-server.8] 1928 mention requirement for /dev/log inside chroot when using sftp-server 1929 with ChrootDirectory 1930 - (djm) [openbsd-compat/bindresvport.c] Rename variables s/sin/in/ to 1931 avoid clash with sin(3) function; reported by 1932 cristian.ionescu-idbohrn AT axis.com 1933 - (djm) [openbsd-compat/rresvport.c] Add unistd.h for missing close() 1934 prototype; reported by cristian.ionescu-idbohrn AT axis.com 1935 - (djm) [umac.c] Rename variable s/buffer_ptr/bufp/ to avoid clash; 1936 reported by cristian.ionescu-idbohrn AT axis.com 1937 - (djm) [contrib/cygwin/Makefile contrib/cygwin/ssh-host-config] 1938 [contrib/cygwin/ssh-user-config contrib/cygwin/sshd-inetd] 1939 Revamped and simplified Cygwin ssh-host-config script that uses 1940 unified csih configuration tool. Requires recent Cygwin. 1941 Patch from vinschen AT redhat.com 1942 194320080712 1944 - (djm) OpenBSD CVS Sync 1945 - djm@cvs.openbsd.org 2008/07/12 04:52:50 1946 [channels.c] 1947 unbreak; move clearing of cctx struct to before first use 1948 reported by dkrause@ 1949 - djm@cvs.openbsd.org 2008/07/12 05:33:41 1950 [scp.1] 1951 better description for -i flag: 1952 s/RSA authentication/public key authentication/ 1953 - (djm) [openbsd-compat/fake-rfc2553.c openbsd-compat/fake-rfc2553.h] 1954 return EAI_FAMILY when trying to lookup unsupported address family; 1955 from vinschen AT redhat.com 1956 195720080711 1958 - (djm) OpenBSD CVS Sync 1959 - stevesk@cvs.openbsd.org 2008/07/07 00:31:41 1960 [ttymodes.c] 1961 we don't need arg after the debug3() was removed. from lint. 1962 ok djm@ 1963 - stevesk@cvs.openbsd.org 2008/07/07 23:32:51 1964 [key.c] 1965 /*NOTREACHED*/ for lint warning: 1966 warning: function key_equal falls off bottom without returning value 1967 ok djm@ 1968 - markus@cvs.openbsd.org 2008/07/10 18:05:58 1969 [channels.c] 1970 missing bzero; from mickey; ok djm@ 1971 - markus@cvs.openbsd.org 2008/07/10 18:08:11 1972 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h sshd.c] 1973 sync v1 and v2 traffic accounting; add it to sshd, too; 1974 ok djm@, dtucker@ 1975 197620080709 1977 - (djm) [Makefile.in] Print "all tests passed" when all regress tests pass 1978 - (djm) [auth1.c] Fix format string vulnerability in protocol 1 PAM 1979 account check failure path. The vulnerable format buffer is supplied 1980 from PAM and should not contain attacker-supplied data. 1981 - (djm) [auth.c] Missing unistd.h for close() 1982 - (djm) [configure.ac] Add -Wformat-security to CFLAGS for gcc 3.x and 4.x 1983 198420080705 1985 - (djm) [auth.c] Fixed test for locked account on HP/UX with shadowed 1986 passwords disabled. bz#1083 report & patch from senthilkumar_sen AT 1987 hotpop.com, w/ dtucker@ 1988 - (djm) [atomicio.c configure.ac] Disable poll() fallback in atomiciov for 1989 Tru64. readv doesn't seem to be a comparable object there. 1990 bz#1386, patch from dtucker@ ok me 1991 - (djm) [Makefile.in] Pass though pass to conch for interop tests 1992 - (djm) [configure.ac] unbreak: remove extra closing brace 1993 - (djm) OpenBSD CVS Sync 1994 - djm@cvs.openbsd.org 2008/07/04 23:08:25 1995 [packet.c] 1996 handle EINTR in packet_write_poll()l ok dtucker@ 1997 - djm@cvs.openbsd.org 2008/07/04 23:30:16 1998 [auth1.c auth2.c] 1999 Make protocol 1 MaxAuthTries logic match protocol 2's. 2000 Do not treat the first protocol 2 authentication attempt as 2001 a failure IFF it is for method "none". 2002 Makes MaxAuthTries' user-visible behaviour identical for 2003 protocol 1 vs 2. 2004 ok dtucker@ 2005 - djm@cvs.openbsd.org 2008/07/05 05:16:01 2006 [PROTOCOL] 2007 grammar 2008 200920080704 2010 - (dtucker) OpenBSD CVS Sync 2011 - djm@cvs.openbsd.org 2008/07/02 13:30:34 2012 [auth2.c] 2013 really really remove the freebie "none" auth try for protocol 2 2014 - djm@cvs.openbsd.org 2008/07/02 13:47:39 2015 [ssh.1 ssh.c] 2016 When forking after authentication ("ssh -f") with ExitOnForwardFailure 2017 enabled, delay the fork until after replies for any -R forwards have 2018 been seen. Allows for robust detection of -R forward failure when 2019 using -f (similar to bz#92); ok dtucker@ 2020 - otto@cvs.openbsd.org 2008/07/03 21:46:58 2021 [auth2-pubkey.c] 2022 avoid nasty double free; ok dtucker@ djm@ 2023 - djm@cvs.openbsd.org 2008/07/04 03:44:59 2024 [servconf.c groupaccess.h groupaccess.c] 2025 support negation of groups in "Match group" block (bz#1315); ok dtucker@ 2026 - dtucker@cvs.openbsd.org 2008/07/04 03:47:02 2027 [monitor.c] 2028 Make debug a little clearer. ok djm@ 2029 - djm@cvs.openbsd.org 2008/06/30 08:07:34 2030 [regress/key-options.sh] 2031 shell portability: use "=" instead of "==" in test(1) expressions, 2032 double-quote string with backslash escaped / 2033 - djm@cvs.openbsd.org 2008/06/30 10:31:11 2034 [regress/{putty-transfer,putty-kex,putty-ciphers}.sh] 2035 remove "set -e" left over from debugging 2036 - djm@cvs.openbsd.org 2008/06/30 10:43:03 2037 [regress/conch-ciphers.sh] 2038 explicitly disable conch options that could interfere with the test 2039 - (dtucker) [sftp-server.c] Bug #1447: fall back to racy rename if link 2040 returns EXDEV. Patch from Mike Garrison, ok djm@ 2041 - (djm) [atomicio.c channels.c clientloop.c defines.h includes.h] 2042 [packet.c scp.c serverloop.c sftp-client.c ssh-agent.c ssh-keyscan.c] 2043 [sshd.c] Explicitly handle EWOULDBLOCK wherever we handle EAGAIN, on 2044 some platforms (HP nonstop) it is a distinct errno; 2045 bz#1467 reported by sconeu AT yahoo.com; ok dtucker@ 2046 204720080702 2048 - (dtucker) OpenBSD CVS Sync 2049 - djm@cvs.openbsd.org 2008/06/30 08:05:59 2050 [PROTOCOL.agent] 2051 typo: s/constraint_date/constraint_data/ 2052 - djm@cvs.openbsd.org 2008/06/30 12:15:39 2053 [serverloop.c] 2054 only pass channel requests on session channels through to the session 2055 channel handler, avoiding spurious log messages; ok! markus@ 2056 - djm@cvs.openbsd.org 2008/06/30 12:16:02 2057 [nchan.c] 2058 only send eow@openssh.com notifications for session channels; ok! markus@ 2059 - djm@cvs.openbsd.org 2008/06/30 12:18:34 2060 [PROTOCOL] 2061 clarify that eow@openssh.com is only sent on session channels 2062 - dtucker@cvs.openbsd.org 2008/07/01 07:20:52 2063 [sshconnect.c] 2064 Check ExitOnForwardFailure if forwardings are disabled due to a failed 2065 host key check. ok djm@ 2066 - dtucker@cvs.openbsd.org 2008/07/01 07:24:22 2067 [sshconnect.c sshd.c] 2068 Send CR LF during protocol banner exchanges, but only for Protocol 2 only, 2069 in order to comply with RFC 4253. bz #1443, ok djm@ 2070 - stevesk@cvs.openbsd.org 2008/07/01 23:12:47 2071 [PROTOCOL.agent] 2072 fix some typos; ok djm@ 2073 - djm@cvs.openbsd.org 2008/07/02 02:24:18 2074 [sshd_config sshd_config.5 sshd.8 servconf.c] 2075 increase default size of ssh protocol 1 ephemeral key from 768 to 1024 2076 bits; prodded by & ok dtucker@ ok deraadt@ 2077 - dtucker@cvs.openbsd.org 2008/07/02 12:03:51 2078 [auth-rsa.c auth.c auth2-pubkey.c auth.h] 2079 Merge duplicate host key file checks, based in part on a patch from Rob 2080 Holland via bz #1348 . Also checks for non-regular files during protocol 2081 1 RSA auth. ok djm@ 2082 - djm@cvs.openbsd.org 2008/07/02 12:36:39 2083 [auth2-none.c auth2.c] 2084 Make protocol 2 MaxAuthTries behaviour a little more sensible: 2085 Check whether client has exceeded MaxAuthTries before running 2086 an authentication method and skip it if they have, previously it 2087 would always allow one try (for "none" auth). 2088 Preincrement failure count before post-auth test - previously this 2089 checked and postincremented, also to allow one "none" try. 2090 Together, these two changes always count the "none" auth method 2091 which could be skipped by a malicious client (e.g. an SSH worm) 2092 to get an extra attempt at a real auth method. They also make 2093 MaxAuthTries=0 a useful way to block users entirely (esp. in a 2094 sshd_config Match block). 2095 Also, move sending of any preauth banner from "none" auth method 2096 to the first call to input_userauth_request(), so worms that skip 2097 the "none" method get to see it too. 2098 209920080630 2100 - (djm) OpenBSD CVS Sync 2101 - dtucker@cvs.openbsd.org 2008/06/10 23:13:43 2102 [regress/Makefile regress/key-options.sh] 2103 Add regress test for key options. ok djm@ 2104 - dtucker@cvs.openbsd.org 2008/06/11 23:11:40 2105 [regress/Makefile] 2106 Don't run cipher-speed test by default; mistakenly enabled by me 2107 - djm@cvs.openbsd.org 2008/06/28 13:57:25 2108 [regress/Makefile regress/test-exec.sh regress/conch-ciphers.sh] 2109 very basic regress test against Twisted Conch in "make interop" 2110 target (conch is available in ports/devel/py-twisted/conch); 2111 ok markus@ 2112 - (djm) [regress/Makefile] search for conch by path, like we do putty 2113 211420080629 2115 - (djm) OpenBSD CVS Sync 2116 - martynas@cvs.openbsd.org 2008/06/21 07:46:46 2117 [sftp.c] 2118 use optopt to get invalid flag, instead of return value of getopt, 2119 which is always '?'; ok djm@ 2120 - otto@cvs.openbsd.org 2008/06/25 11:13:43 2121 [key.c] 2122 add key length to visual fingerprint; zap magical constants; 2123 ok grunk@ djm@ 2124 - djm@cvs.openbsd.org 2008/06/26 06:10:09 2125 [sftp-client.c sftp-server.c] 2126 allow the sftp chmod(2)-equivalent operation to set set[ug]id/sticky 2127 bits. Note that this only affects explicit setting of modes (e.g. via 2128 sftp(1)'s chmod command) and not file transfers. (bz#1310) 2129 ok deraadt@ at c2k8 2130 - djm@cvs.openbsd.org 2008/06/26 09:19:40 2131 [dh.c dh.h moduli.c] 2132 when loading moduli from /etc/moduli in sshd(8), check that they 2133 are of the expected "safe prime" structure and have had 2134 appropriate primality tests performed; 2135 feedback and ok dtucker@ 2136 - grunk@cvs.openbsd.org 2008/06/26 11:46:31 2137 [readconf.c readconf.h ssh.1 ssh_config.5 sshconnect.c] 2138 Move SSH Fingerprint Visualization away from sharing the config option 2139 CheckHostIP to an own config option named VisualHostKey. 2140 While there, fix the behaviour that ssh would draw a random art picture 2141 on every newly seen host even when the option was not enabled. 2142 prodded by deraadt@, discussions, 2143 help and ok markus@ djm@ dtucker@ 2144 - jmc@cvs.openbsd.org 2008/06/26 21:11:46 2145 [ssh.1] 2146 add VisualHostKey to the list of options listed in -o; 2147 - djm@cvs.openbsd.org 2008/06/28 07:25:07 2148 [PROTOCOL] 2149 spelling fixes 2150 - djm@cvs.openbsd.org 2008/06/28 13:58:23 2151 [ssh-agent.c] 2152 refuse to add a key that has unknown constraints specified; 2153 ok markus 2154 - djm@cvs.openbsd.org 2008/06/28 14:05:15 2155 [ssh-agent.c] 2156 reset global compat flag after processing a protocol 2 signature 2157 request with the legacy DSA encoding flag set; ok markus 2158 - djm@cvs.openbsd.org 2008/06/28 14:08:30 2159 [PROTOCOL PROTOCOL.agent] 2160 document the protocol used by ssh-agent; "looks ok" markus@ 2161 216220080628 2163 - (djm) [RFC.nroff contrib/cygwin/Makefile contrib/suse/openssh.spec] 2164 RFC.nroff lacks a license, remove it (it is long gone in OpenBSD). 2165 216620080626 2167 - (djm) [Makefile.in moduli.5] Include moduli(5) manpage from OpenBSD. 2168 (bz#1372) 2169 - (djm) [ contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 2170 [contrib/suse/openssh.spec] Include moduli.5 in RPM spec files. 2171 217220080616 2173 - (dtucker) OpenBSD CVS Sync 2174 - dtucker@cvs.openbsd.org 2008/06/16 13:22:53 2175 [session.c channels.c] 2176 Rename the isatty argument to is_tty so we don't shadow 2177 isatty(3). ok markus@ 2178 - (dtucker) [channels.c] isatty -> is_tty here too. 2179 218020080615 2181 - (dtucker) [configure.ac] Enable -fno-builtin-memset when using gcc. 2182 - OpenBSD CVS Sync 2183 - dtucker@cvs.openbsd.org 2008/06/14 15:49:48 2184 [sshd.c] 2185 wrap long line at 80 chars 2186 - dtucker@cvs.openbsd.org 2008/06/14 17:07:11 2187 [sshd.c] 2188 ensure default umask disallows at least group and world write; ok djm@ 2189 - djm@cvs.openbsd.org 2008/06/14 18:33:43 2190 [session.c] 2191 suppress the warning message from chdir(homedir) failures 2192 when chrooted (bz#1461); ok dtucker 2193 - dtucker@cvs.openbsd.org 2008/06/14 19:42:10 2194 [scp.1] 2195 Mention that scp follows symlinks during -r. bz #1466, 2196 from nectar at apple 2197 - dtucker@cvs.openbsd.org 2008/06/15 16:55:38 2198 [sshd_config.5] 2199 MaxSessions is allowed in a Match block too 2200 - dtucker@cvs.openbsd.org 2008/06/15 16:58:40 2201 [servconf.c sshd_config.5] 2202 Allow MaxAuthTries within a Match block. ok djm@ 2203 - djm@cvs.openbsd.org 2008/06/15 20:06:26 2204 [channels.c channels.h session.c] 2205 don't call isatty() on a pty master, instead pass a flag down to 2206 channel_set_fds() indicating that te fds refer to a tty. Fixes a 2207 hang on exit on Solaris (bz#1463) in portable but is actually 2208 a generic bug; ok dtucker deraadt markus 2209 221020080614 2211 - (djm) [openbsd-compat/sigact.c] Avoid NULL derefs in ancient sigaction 2212 replacement code; patch from ighighi AT gmail.com in bz#1240; 2213 ok dtucker 2214 221520080613 2216 - (dtucker) OpenBSD CVS Sync 2217 - deraadt@cvs.openbsd.org 2008/06/13 09:44:36 2218 [packet.c] 2219 compile on older gcc; no decl after code 2220 - dtucker@cvs.openbsd.org 2008/06/13 13:56:59 2221 [monitor.c] 2222 Clear key options in the monitor on failed authentication, prevents 2223 applying additional restrictions to non-pubkey authentications in 2224 the case where pubkey fails but another method subsequently succeeds. 2225 bz #1472, found by Colin Watson, ok markus@ djm@ 2226 - dtucker@cvs.openbsd.org 2008/06/13 14:18:51 2227 [auth2-pubkey.c auth-rhosts.c] 2228 Include unistd.h for close(), prevents warnings in -portable 2229 - dtucker@cvs.openbsd.org 2008/06/13 17:21:20 2230 [mux.c] 2231 Friendlier error messages for mux fallback. ok djm@ 2232 - dtucker@cvs.openbsd.org 2008/06/13 18:55:22 2233 [scp.c] 2234 Prevent -Wsign-compare warnings on LP64 systems. bz #1192, ok deraadt@ 2235 - grunk@cvs.openbsd.org 2008/06/13 20:13:26 2236 [ssh.1] 2237 Explain the use of SSH fpr visualization using random art, and cite the 2238 original scientific paper inspiring that technique. 2239 Much help with English and nroff by jmc@, thanks. 2240 - (dtucker) [configure.ac] Bug #1276: avoid linking against libgssapi, which 2241 despite its name doesn't seem to implement all of GSSAPI. Patch from 2242 Jan Engelhardt, sanity checked by Simon Wilkinson. 2243 224420080612 2245 - (dtucker) OpenBSD CVS Sync 2246 - jmc@cvs.openbsd.org 2008/06/11 07:30:37 2247 [sshd.8] 2248 kill trailing whitespace; 2249 - grunk@cvs.openbsd.org 2008/06/11 21:01:35 2250 [ssh_config.5 key.h readconf.c readconf.h ssh-keygen.1 ssh-keygen.c key.c 2251 sshconnect.c] 2252 Introduce SSH Fingerprint ASCII Visualization, a technique inspired by the 2253 graphical hash visualization schemes known as "random art", and by 2254 Dan Kaminsky's musings on the subject during a BlackOp talk at the 2255 23C3 in Berlin. 2256 Scientific publication (original paper): 2257 "Hash Visualization: a New Technique to improve Real-World Security", 2258 Perrig A. and Song D., 1999, International Workshop on Cryptographic 2259 Techniques and E-Commerce (CrypTEC '99) 2260 http://sparrow.ece.cmu.edu/~adrian/projects/validation/validation.pdf 2261 The algorithm used here is a worm crawling over a discrete plane, 2262 leaving a trace (augmenting the field) everywhere it goes. 2263 Movement is taken from dgst_raw 2bit-wise. Bumping into walls 2264 makes the respective movement vector be ignored for this turn, 2265 thus switching to the other color of the chessboard. 2266 Graphs are not unambiguous for now, because circles in graphs can be 2267 walked in either direction. 2268 discussions with several people, 2269 help, corrections and ok markus@ djm@ 2270 - grunk@cvs.openbsd.org 2008/06/11 21:38:25 2271 [ssh-keygen.c] 2272 ssh-keygen -lv -f /etc/ssh/ssh_host_rsa_key.pub 2273 would not display you the random art as intended, spotted by canacar@ 2274 - grunk@cvs.openbsd.org 2008/06/11 22:20:46 2275 [ssh-keygen.c ssh-keygen.1] 2276 ssh-keygen would write fingerprints to STDOUT, and random art to STDERR, 2277 that is not how it was envisioned. 2278 Also correct manpage saying that -v is needed along with -l for it to work. 2279 spotted by naddy@ 2280 - otto@cvs.openbsd.org 2008/06/11 23:02:22 2281 [key.c] 2282 simpler way of computing the augmentations; ok grunk@ 2283 - grunk@cvs.openbsd.org 2008/06/11 23:03:56 2284 [ssh_config.5] 2285 CheckHostIP set to ``fingerprint'' will display both hex and random art 2286 spotted by naddy@ 2287 - grunk@cvs.openbsd.org 2008/06/11 23:51:57 2288 [key.c] 2289 #define statements that are not atoms need braces around them, else they 2290 will cause trouble in some cases. 2291 Also do a computation of -1 once, and not in a loop several times. 2292 spotted by otto@ 2293 - dtucker@cvs.openbsd.org 2008/06/12 00:03:49 2294 [dns.c canohost.c sshconnect.c] 2295 Do not pass "0" strings as ports to getaddrinfo because the lookups 2296 can slow things down and we never use the service info anyway. bz 2297 #859, patch from YOSHIFUJI Hideaki and John Devitofranceschi. ok 2298 deraadt@ djm@ 2299 djm belives that the reason for the "0" strings is to ensure that 2300 it's not possible to call getaddrinfo with both host and port being 2301 NULL. In the case of canohost.c host is a local array. In the 2302 case of sshconnect.c, it's checked for null immediately before use. 2303 In dns.c it ultimately comes from ssh.c:main() and is guaranteed to 2304 be non-null but it's not obvious, so I added a warning message in 2305 case it is ever passed a null. 2306 - grunk@cvs.openbsd.org 2008/06/12 00:13:55 2307 [sshconnect.c] 2308 Make ssh print the random art also when ssh'ing to a host using IP only. 2309 spotted by naddy@, ok and help djm@ dtucker@ 2310 - otto@cvs.openbsd.org 2008/06/12 00:13:13 2311 [key.c] 2312 use an odd number of rows and columns and a separate start marker, looks 2313 better; ok grunk@ 2314 - djm@cvs.openbsd.org 2008/06/12 03:40:52 2315 [clientloop.h mux.c channels.c clientloop.c channels.h] 2316 Enable ~ escapes for multiplex slave sessions; give each channel 2317 its own escape state and hook the escape filters up to muxed 2318 channels. bz #1331 2319 Mux slaves do not currently support the ~^Z and ~& escapes. 2320 NB. this change cranks the mux protocol version, so a new ssh 2321 mux client will not be able to connect to a running old ssh 2322 mux master. 2323 ok dtucker@ 2324 - djm@cvs.openbsd.org 2008/06/12 04:06:00 2325 [clientloop.h ssh.c clientloop.c] 2326 maintain an ordered queue of outstanding global requests that we 2327 expect replies to, similar to the per-channel confirmation queue. 2328 Use this queue to verify success or failure for remote forward 2329 establishment in a race free way. 2330 ok dtucker@ 2331 - djm@cvs.openbsd.org 2008/06/12 04:17:47 2332 [clientloop.c] 2333 thall shalt not code past the eightieth column 2334 - djm@cvs.openbsd.org 2008/06/12 04:24:06 2335 [ssh.c] 2336 thal shalt not code past the eightieth column 2337 - djm@cvs.openbsd.org 2008/06/12 05:15:41 2338 [PROTOCOL] 2339 document tun@openssh.com forwarding method 2340 - djm@cvs.openbsd.org 2008/06/12 05:32:30 2341 [mux.c] 2342 some more TODO for me 2343 - grunk@cvs.openbsd.org 2008/06/12 05:42:46 2344 [key.c] 2345 supply the key type (rsa1, rsa, dsa) as a caption in the frame of the 2346 random art. while there, stress the fact that the field base should at 2347 least be 8 characters for the pictures to make sense. 2348 comment and ok djm@ 2349 - grunk@cvs.openbsd.org 2008/06/12 06:32:59 2350 [key.c] 2351 We already mark the start of the worm, now also mark the end of the worm 2352 in our random art drawings. 2353 ok djm@ 2354 - djm@cvs.openbsd.org 2008/06/12 15:19:17 2355 [clientloop.h channels.h clientloop.c channels.c mux.c] 2356 The multiplexing escape char handler commit last night introduced a 2357 small memory leak per session; plug it. 2358 - dtucker@cvs.openbsd.org 2008/06/12 16:35:31 2359 [ssh_config.5 ssh.c] 2360 keyword expansion for localcommand. ok djm@ 2361 - jmc@cvs.openbsd.org 2008/06/12 19:10:09 2362 [ssh_config.5 ssh-keygen.1] 2363 tweak the ascii art text; ok grunk 2364 - dtucker@cvs.openbsd.org 2008/06/12 20:38:28 2365 [sshd.c sshconnect.c packet.h misc.c misc.h packet.c] 2366 Make keepalive timeouts apply while waiting for a packet, particularly 2367 during key renegotiation (bz #1363). With djm and Matt Day, ok djm@ 2368 - djm@cvs.openbsd.org 2008/06/12 20:47:04 2369 [sftp-client.c] 2370 print extension revisions for extensions that we understand 2371 - djm@cvs.openbsd.org 2008/06/12 21:06:25 2372 [clientloop.c] 2373 I was coalescing expected global request confirmation replies at 2374 the wrong end of the queue - fix; prompted by markus@ 2375 - grunk@cvs.openbsd.org 2008/06/12 21:14:46 2376 [ssh-keygen.c] 2377 make ssh-keygen -lf show the key type just as ssh-add -l would do it 2378 ok djm@ markus@ 2379 - grunk@cvs.openbsd.org 2008/06/12 22:03:36 2380 [key.c] 2381 add my copyright, ok djm@ 2382 - ian@cvs.openbsd.org 2008/06/12 23:24:58 2383 [sshconnect.c] 2384 tweak wording in message, ok deraadt@ jmc@ 2385 - dtucker@cvs.openbsd.org 2008/06/13 00:12:02 2386 [sftp.h log.h] 2387 replace __dead with __attribute__((noreturn)), makes things 2388 a little easier to port. Also, add it to sigdie(). ok djm@ 2389 - djm@cvs.openbsd.org 2008/06/13 00:16:49 2390 [mux.c] 2391 fall back to creating a new TCP connection on most multiplexing errors 2392 (socket connect fail, invalid version, refused permittion, corrupted 2393 messages, etc.); bz #1329 ok dtucker@ 2394 - dtucker@cvs.openbsd.org 2008/06/13 00:47:53 2395 [mux.c] 2396 upcast size_t to u_long to match format arg; ok djm@ 2397 - dtucker@cvs.openbsd.org 2008/06/13 00:51:47 2398 [mac.c] 2399 upcast another size_t to u_long to match format 2400 - dtucker@cvs.openbsd.org 2008/06/13 01:38:23 2401 [misc.c] 2402 upcast uid to long with matching %ld, prevents warnings in portable 2403 - djm@cvs.openbsd.org 2008/06/13 04:40:22 2404 [auth2-pubkey.c auth-rhosts.c] 2405 refuse to read ~/.shosts or ~/.ssh/authorized_keys that are not 2406 regular files; report from Solar Designer via Colin Watson in bz#1471 2407 ok dtucker@ deraadt 2408 - (dtucker) [clientloop.c serverloop.c] channel_register_filter now 2409 takes 2 more args. with djm@ 2410 - (dtucker) [defines.h] Bug #1112: __dead is, well dead. Based on a patch 2411 from Todd Vierling. 2412 - (dtucker) [auth-sia.c] Bug #1241: support password expiry on Tru64 SIA 2413 systems. Patch from R. Scott Bailey. 2414 - (dtucker) [umac.c] STORE_UINT32_REVERSED and endian_convert are never used 2415 on big endian machines, so ifdef them for little-endian only to prevent 2416 unused function warnings on big-endians. 2417 - (dtucker) [openbsd-compat/setenv.c] Make offsets size_t to prevent 2418 compiler warnings on some platforms. Based on a discussion with otto@ 2419 242020080611 2421 - (djm) [channels.c configure.ac] 2422 Do not set SO_REUSEADDR on wildcard X11 listeners (X11UseLocalhost=no) 2423 bz#1464; ok dtucker 2424 242520080610 2426 - (dtucker) OpenBSD CVS Sync 2427 - djm@cvs.openbsd.org 2008/06/10 03:57:27 2428 [servconf.c match.h sshd_config.5] 2429 support CIDR address matching in sshd_config "Match address" blocks, with 2430 full support for negation and fall-back to classic wildcard matching. 2431 For example: 2432 Match address 192.0.2.0/24,3ffe:ffff::/32,!10.* 2433 PasswordAuthentication yes 2434 addrmatch.c code mostly lifted from flowd's addr.c 2435 feedback and ok dtucker@ 2436 - djm@cvs.openbsd.org 2008/06/10 04:17:46 2437 [sshd_config.5] 2438 better reference for pattern-list 2439 - dtucker@cvs.openbsd.org 2008/06/10 04:50:25 2440 [sshd.c channels.h channels.c log.c servconf.c log.h servconf.h sshd.8] 2441 Add extended test mode (-T) and connection parameters for test mode (-C). 2442 -T causes sshd to write its effective configuration to stdout and exit. 2443 -C causes any relevant Match rules to be applied before output. The 2444 combination allows tesing of the parser and config files. ok deraadt djm 2445 - jmc@cvs.openbsd.org 2008/06/10 07:12:00 2446 [sshd_config.5] 2447 tweak previous; 2448 - jmc@cvs.openbsd.org 2008/06/10 08:17:40 2449 [sshd.8 sshd.c] 2450 - update usage() 2451 - fix SYNOPSIS, and sort options 2452 - some minor additional fixes 2453 - dtucker@cvs.openbsd.org 2008/06/09 18:06:32 2454 [regress/test-exec.sh] 2455 Don't generate putty keys if we're not going to use them. ok djm 2456 - dtucker@cvs.openbsd.org 2008/06/10 05:23:32 2457 [regress/addrmatch.sh regress/Makefile] 2458 Regress test for Match CIDR rules. ok djm@ 2459 - dtucker@cvs.openbsd.org 2008/06/10 15:21:41 2460 [test-exec.sh] 2461 Use a more portable construct for checking if we're running a putty test 2462 - dtucker@cvs.openbsd.org 2008/06/10 15:28:49 2463 [test-exec.sh] 2464 Add quotes 2465 - dtucker@cvs.openbsd.org 2008/06/10 18:21:24 2466 [ssh_config.5] 2467 clarify that Host patterns are space-separated. ok deraadt 2468 - djm@cvs.openbsd.org 2008/06/10 22:15:23 2469 [PROTOCOL ssh.c serverloop.c] 2470 Add a no-more-sessions@openssh.com global request extension that the 2471 client sends when it knows that it will never request another session 2472 (i.e. when session multiplexing is disabled). This allows a server to 2473 disallow further session requests and terminate the session. 2474 Why would a non-multiplexing client ever issue additional session 2475 requests? It could have been attacked with something like SSH'jack: 2476 http://www.storm.net.nz/projects/7 2477 feedback & ok markus 2478 - djm@cvs.openbsd.org 2008/06/10 23:06:19 2479 [auth-options.c match.c servconf.c addrmatch.c sshd.8] 2480 support CIDR address matching in .ssh/authorized_keys from="..." stanzas 2481 ok and extensive testing dtucker@ 2482 - dtucker@cvs.openbsd.org 2008/06/10 23:21:34 2483 [bufaux.c] 2484 Use '\0' for a nul byte rather than unadorned 0. ok djm@ 2485 - dtucker@cvs.openbsd.org 2008/06/10 23:13:43 2486 [Makefile regress/key-options.sh] 2487 Add regress test for key options. ok djm@ 2488 - (dtucker) [openbsd-compat/fake-rfc2553.h] Add sin6_scope_id to sockaddr_in6 2489 since the new CIDR code in addmatch.c references it. 2490 - (dtucker) [Makefile.in configure.ac regress/addrmatch.sh] Skip IPv6 2491 specific tests on platforms that don't do IPv6. 2492 - (dtucker) [Makefile.in] Define TEST_SSH_IPV6 in make's arguments as well 2493 as environment. 2494 - (dtucker) [Makefile.in] Move addrmatch.o to libssh.a where it's needed now. 2495 249620080609 2497 - (dtucker) OpenBSD CVS Sync 2498 - dtucker@cvs.openbsd.org 2008/06/08 17:04:41 2499 [sftp-server.c] 2500 Add case for ENOSYS in errno_to_portable; ok deraadt 2501 - dtucker@cvs.openbsd.org 2008/06/08 20:15:29 2502 [sftp.c sftp-client.c sftp-client.h] 2503 Have the sftp client store the statvfs replies in wire format, 2504 which prevents problems when the server's native sizes exceed the 2505 client's. 2506 Also extends the sizes of the remaining 32bit wire format to 64bit, 2507 they're specified as unsigned long in the standard. 2508 - dtucker@cvs.openbsd.org 2008/06/09 13:02:39 2509 [sftp-server.c] 2510 Extend 32bit -> 64bit values for statvfs extension missed in previous 2511 commit. 2512 - dtucker@cvs.openbsd.org 2008/06/09 13:38:46 2513 [PROTOCOL] 2514 Use a $OpenBSD tag so our scripts will sync changes. 2515 251620080608 2517 - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c 2518 openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h 2519 openbsd-compat/bsd-statvfs.{c,h}] Add a null implementation of statvfs and 2520 fstatvfs and remove #defines around statvfs code. ok djm@ 2521 - (dtucker) [configure.ac defines.h sftp-client.c M sftp-server.c] Add a 2522 macro to convert fsid to unsigned long for platforms where fsid is a 2523 2-member array. 2524 252520080607 2526 - (dtucker) [mux.c] Include paths.h inside ifdef HAVE_PATHS_H. 2527 - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c] 2528 Do not enable statvfs extensions on platforms that do not have statvfs. 2529 - (dtucker) OpenBSD CVS Sync 2530 - djm@cvs.openbsd.org 2008/05/19 06:14:02 2531 [packet.c] unbreak protocol keepalive timeouts bz#1465; ok dtucker@ 2532 - djm@cvs.openbsd.org 2008/05/19 15:45:07 2533 [sshtty.c ttymodes.c sshpty.h] 2534 Fix sending tty modes when stdin is not a tty (bz#1199). Previously 2535 we would send the modes corresponding to a zeroed struct termios, 2536 whereas we should have been sending an empty list of modes. 2537 Based on patch from daniel.ritz AT alcatel.ch; ok dtucker@ markus@ 2538 - djm@cvs.openbsd.org 2008/05/19 15:46:31 2539 [ssh-keygen.c] 2540 support -l (print fingerprint) in combination with -F (find host) to 2541 search for a host in ~/.ssh/known_hosts and display its fingerprint; 2542 ok markus@ 2543 - djm@cvs.openbsd.org 2008/05/19 20:53:52 2544 [clientloop.c] 2545 unbreak tree by committing this bit that I missed from: 2546 Fix sending tty modes when stdin is not a tty (bz#1199). Previously 2547 we would send the modes corresponding to a zeroed struct termios, 2548 whereas we should have been sending an empty list of modes. 2549 Based on patch from daniel.ritz AT alcatel.ch; ok dtucker@ markus@ 2550 255120080604 2552 - (djm) [openbsd-compat/bsd-arc4random.c] Fix math bug that caused bias 2553 in arc4random_uniform with upper_bound in (2^30,2*31). Note that 2554 OpenSSH did not make requests with upper bounds in this range. 2555 255620080519 2557 - (djm) [configure.ac mux.c sftp.c openbsd-compat/Makefile.in] 2558 [openbsd-compat/fmt_scaled.c openbsd-compat/openbsd-compat.h] 2559 Fix compilation on Linux, including pulling in fmt_scaled(3) 2560 implementation from OpenBSD's libutil. 2561 256220080518 2563 - (djm) OpenBSD CVS Sync 2564 - djm@cvs.openbsd.org 2008/04/04 05:14:38 2565 [sshd_config.5] 2566 ChrootDirectory is supported in Match blocks (in fact, it is most useful 2567 there). Spotted by Minstrel AT minstrel.org.uk 2568 - djm@cvs.openbsd.org 2008/04/04 06:44:26 2569 [sshd_config.5] 2570 oops, some unrelated stuff crept into that commit - backout. 2571 spotted by jmc@ 2572 - djm@cvs.openbsd.org 2008/04/05 02:46:02 2573 [sshd_config.5] 2574 HostbasedAuthentication is supported under Match too 2575 - (djm) [openbsd-compat/bsd-arc4random.c openbsd-compat/openbsd-compat.c] 2576 [configure.ac] Implement arc4random_buf(), import implementation of 2577 arc4random_uniform() from OpenBSD 2578 - (djm) [openbsd-compat/bsd-arc4random.c] Warning fixes 2579 - (djm) [openbsd-compat/port-tun.c] needs sys/queue.h 2580 - (djm) OpenBSD CVS Sync 2581 - djm@cvs.openbsd.org 2008/04/13 00:22:17 2582 [dh.c sshd.c] 2583 Use arc4random_buf() when requesting more than a single word of output 2584 Use arc4random_uniform() when the desired random number upper bound 2585 is not a power of two 2586 ok deraadt@ millert@ 2587 - djm@cvs.openbsd.org 2008/04/18 12:32:11 2588 [sftp-client.c sftp-client.h sftp-server.c sftp.1 sftp.c sftp.h] 2589 introduce sftp extension methods statvfs@openssh.com and 2590 fstatvfs@openssh.com that implement statvfs(2)-like operations, 2591 based on a patch from miklos AT szeredi.hu (bz#1399) 2592 also add a "df" command to the sftp client that uses the 2593 statvfs@openssh.com to produce a df(1)-like display of filesystem 2594 space and inode utilisation 2595 ok markus@ 2596 - jmc@cvs.openbsd.org 2008/04/18 17:15:47 2597 [sftp.1] 2598 macro fixage; 2599 - djm@cvs.openbsd.org 2008/04/18 22:01:33 2600 [session.c] 2601 remove unneccessary parentheses 2602 - otto@cvs.openbsd.org 2008/04/29 11:20:31 2603 [monitor_mm.h] 2604 garbage collect two unused fields in struct mm_master; ok markus@ 2605 - djm@cvs.openbsd.org 2008/04/30 10:14:03 2606 [ssh-keyscan.1 ssh-keyscan.c] 2607 default to rsa (protocol 2) keys, instead of rsa1 keys; spotted by 2608 larsnooden AT openoffice.org 2609 - pyr@cvs.openbsd.org 2008/05/07 05:49:37 2610 [servconf.c servconf.h session.c sshd_config.5] 2611 Enable the AllowAgentForwarding option in sshd_config (global and match 2612 context), to specify if agents should be permitted on the server. 2613 As the man page states: 2614 ``Note that disabling Agent forwarding does not improve security 2615 unless users are also denied shell access, as they can always install 2616 their own forwarders.'' 2617 ok djm@, ok and a mild frown markus@ 2618 - pyr@cvs.openbsd.org 2008/05/07 06:43:35 2619 [sshd_config] 2620 push the sshd_config bits in, spotted by ajacoutot@ 2621 - jmc@cvs.openbsd.org 2008/05/07 08:00:14 2622 [sshd_config.5] 2623 sort; 2624 - markus@cvs.openbsd.org 2008/05/08 06:59:01 2625 [bufaux.c buffer.h channels.c packet.c packet.h] 2626 avoid extra malloc/copy/free when receiving data over the net; 2627 ~10% speedup for localhost-scp; ok djm@ 2628 - djm@cvs.openbsd.org 2008/05/08 12:02:23 2629 [auth-options.c auth1.c channels.c channels.h clientloop.c gss-serv.c] 2630 [monitor.c monitor_wrap.c nchan.c servconf.c serverloop.c session.c] 2631 [ssh.c sshd.c] 2632 Implement a channel success/failure status confirmation callback 2633 mechanism. Each channel maintains a queue of callbacks, which will 2634 be drained in order (RFC4253 guarantees confirm messages are not 2635 reordered within an channel). 2636 Also includes a abandonment callback to clean up if a channel is 2637 closed without sending confirmation messages. This probably 2638 shouldn't happen in compliant implementations, but it could be 2639 abused to leak memory. 2640 ok markus@ (as part of a larger diff) 2641 - djm@cvs.openbsd.org 2008/05/08 12:21:16 2642 [monitor.c monitor_wrap.c session.h servconf.c servconf.h session.c] 2643 [sshd_config sshd_config.5] 2644 Make the maximum number of sessions run-time controllable via 2645 a sshd_config MaxSessions knob. This is useful for disabling 2646 login/shell/subsystem access while leaving port-forwarding working 2647 (MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or 2648 simply increasing the number of allows multiplexed sessions. 2649 Because some bozos are sure to configure MaxSessions in excess of the 2650 number of available file descriptors in sshd (which, at peak, might be 2651 as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak fds 2652 on error paths, and make it fail gracefully on out-of-fd conditions - 2653 sending channel errors instead of than exiting with fatal(). 2654 bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com 2655 ok markus@ 2656 - djm@cvs.openbsd.org 2008/05/08 13:06:11 2657 [clientloop.c clientloop.h ssh.c] 2658 Use new channel status confirmation callback system to properly deal 2659 with "important" channel requests that fail, in particular command exec, 2660 shell and subsystem requests. Previously we would optimistically assume 2661 that the requests would always succeed, which could cause hangs if they 2662 did not (e.g. when the server runs out of fds) or were unimplemented by 2663 the server (bz #1384) 2664 Also, properly report failing multiplex channel requests via the mux 2665 client stderr (subject to LogLevel in the mux master) - better than 2666 silently failing. 2667 most bits ok markus@ (as part of a larger diff) 2668 - djm@cvs.openbsd.org 2008/05/09 04:55:56 2669 [channels.c channels.h clientloop.c serverloop.c] 2670 Try additional addresses when connecting to a port forward destination 2671 whose DNS name resolves to more than one address. The previous behaviour 2672 was to try the first address and give up. 2673 Reported by stig AT venaas.com in bz#343 2674 great feedback and ok markus@ 2675 - djm@cvs.openbsd.org 2008/05/09 14:18:44 2676 [clientloop.c clientloop.h ssh.c mux.c] 2677 tidy up session multiplexing code, moving it into its own file and 2678 making the function names more consistent - making ssh.c and 2679 clientloop.c a fair bit more readable. 2680 ok markus@ 2681 - djm@cvs.openbsd.org 2008/05/09 14:26:08 2682 [ssh.c] 2683 dingo stole my diff hunk 2684 - markus@cvs.openbsd.org 2008/05/09 16:16:06 2685 [session.c] 2686 re-add the USE_PIPES code and enable it. 2687 without pipes shutdown-read from the sshd does not trigger 2688 a SIGPIPE when the forked program does a write. 2689 ok djm@ 2690 (Id sync only, USE_PIPES never left portable OpenSSH) 2691 - markus@cvs.openbsd.org 2008/05/09 16:17:51 2692 [channels.c] 2693 error-fd race: don't enable the error fd in the select bitmask 2694 for channels with both in- and output closed, since the channel 2695 will go away before we call select(); 2696 report, lots of debugging help and ok djm@ 2697 - markus@cvs.openbsd.org 2008/05/09 16:21:13 2698 [channels.h clientloop.c nchan.c serverloop.c] 2699 unbreak 2700 ssh -2 localhost od /bin/ls | true 2701 ignoring SIGPIPE by adding a new channel message (EOW) that signals 2702 the peer that we're not interested in any data it might send. 2703 fixes bz #85; discussion, debugging and ok djm@ 2704 - pvalchev@cvs.openbsd.org 2008/05/12 20:52:20 2705 [umac.c] 2706 Ensure nh_result lies on a 64-bit boundary (fixes warnings observed 2707 on Itanium on Linux); from Dale Talcott (bug #1462); ok djm@ 2708 - djm@cvs.openbsd.org 2008/05/15 23:52:24 2709 [nchan2.ms] 2710 document eow message in ssh protocol 2 channel state machine; 2711 feedback and ok markus@ 2712 - djm@cvs.openbsd.org 2008/05/18 21:29:05 2713 [sftp-server.c] 2714 comment extension announcement 2715 - djm@cvs.openbsd.org 2008/05/16 08:30:42 2716 [PROTOCOL] 2717 document our protocol extensions and deviations; ok markus@ 2718 - djm@cvs.openbsd.org 2008/05/17 01:31:56 2719 [PROTOCOL] 2720 grammar and correctness fixes from stevesk@ 2721 272220080403 2723 - (djm) [openbsd-compat/bsd-poll.c] Include stdlib.h to avoid compile- 2724 time warnings on LynxOS. Patch from ops AT iki.fi 2725 - (djm) Force string arguments to replacement setproctitle() though 2726 strnvis first. Ok dtucker@ 2727 272820080403 2729 - (djm) OpenBSD CVS sync: 2730 - markus@cvs.openbsd.org 2008/04/02 15:36:51 2731 [channels.c] 2732 avoid possible hijacking of x11-forwarded connections (back out 1.183) 2733 CVE-2008-1483; ok djm@ 2734 - jmc@cvs.openbsd.org 2008/03/27 22:37:57 2735 [sshd.8] 2736 remove trailing whitespace; 2737 - djm@cvs.openbsd.org 2008/04/03 09:50:14 2738 [version.h] 2739 openssh-5.0 2740 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 2741 [contrib/suse/openssh.spec] Crank version numbers in RPM spec files 2742 - (djm) [README] Update link to release notes 2743 - (djm) Release 5.0p1 2744