summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* upstream commitmillert@openbsd.org2014-12-052-5/+5
| | | | | Prefer setvbuf() to setlinebuf() for portability; ok deraadt@
* upstream commitjsg@openbsd.org2014-11-261-1/+7
| | | | | | | Fix crashes in the handling of the sshd config file found with the afl fuzzer. ok deraadt@ djm@
* Avoid Cygwin ssh-host-config reading /etc/groupDamien Miller2014-11-261-4/+1
| | | | Patch from Corinna Vinschen
* allow custom service name for sshd on CygwinDamien Miller2014-11-261-6/+13
| | | | | | Permits the use of multiple sshd running with different service names. Patch by Florian Friesdorf via Corinna Vinschen
* upstream commitjmc@openbsd.org2014-11-241-4/+5
| | | | | restore word zapped in previous, and remove some useless "No" macros;
* upstream commitderaadt@openbsd.org2014-11-241-4/+2
| | | | | | | /dev/random has created the same effect as /dev/arandom (and /dev/urandom) for quite some time. Mop up the last few, by using /dev/random where we actually want it, or not even mentioning arandom where it is irrelevant.
* upstream commitdjm@openbsd.org2014-11-241-3/+7
| | | | | | fix NULL pointer dereference crash on invalid timestamp found using Michal Zalewski's afl fuzzer
* upstream commitmikeb@openbsd.org2014-11-241-198/+101
| | | | | | | | | | Sync AES code to the one shipped in OpenSSL/LibreSSL. This includes a commit made by Andy Polyakov <appro at openssl ! org> to the OpenSSL source tree on Wed, 28 Jun 2006 with the following message: "Mitigate cache-collision timing attack on last round." OK naddy, miod, djm
* upstream commitkrw@openbsd.org2014-11-242-2/+2
| | | | | | Nuke more obvious #include duplications. ok deraadt@ millert@ tedu@
* upstream commitdjm@openbsd.org2014-11-191-2/+8
| | | | | | | | | | | | | fix KRL generation when multiple CAs are in use We would generate an invalid KRL when revoking certs by serial number for multiple CA keys due to a section being written out twice. Also extend the regress test to catch this case by having it produce a multi-CA KRL. Reported by peter AT pean.org
* upstream commitdjm@openbsd.org2014-11-181-5/+3
| | | | | | fix NULL pointer dereference crash in key loading found by Michal Zalewski's AFL fuzzer
* upstream commitdjm@openbsd.org2014-11-171-1/+2
| | | | | | | | | | | | | fix KRL generation when multiple CAs are in use We would generate an invalid KRL when revoking certs by serial number for multiple CA keys due to a section being written out twice. Also extend the regress test to catch this case by having it produce a multi-CA KRL. Reported by peter AT pean.org
* upstream commitbentley@openbsd.org2014-11-171-6/+6
| | | | | | | | | | | | | | Reduce instances of `` '' in manuals. troff displays these as typographic quotes, but nroff implementations almost always print them literally, which rarely has the intended effect with modern fonts, even in stock xterm. These uses of `` '' can be replaced either with more semantic alternatives or with Dq, which prints typographic quotes in a UTF-8 locale (but will automatically fall back to `` '' in an ASCII locale). improvements and ok schwarze@
* upstream commitdjm@openbsd.org2014-11-111-4/+7
| | | | | | | | mux-related manual tweaks mention ControlPersist=0 is the same as ControlPersist=yes recommend that ControlPath sockets be placed in a og-w directory
* Prepare scripts for next Cygwin releaseDamien Miller2014-11-052-22/+11
| | | | | | | | | Makes the Cygwin-specific ssh-user-config script independent of the existence of /etc/passwd. The next Cygwin release will allow to generate passwd and group entries from the Windows account DBs, so the scripts have to adapt. from Corinna Vinschen
* include version number in OpenSSL-too-old errorDamien Miller2014-10-301-1/+1
|
* upstream commitlteo@openbsd.org2014-10-274-4/+4
| | | | | | | | | Remove unnecessary include: netinet/in_systm.h is not needed by these programs. NB. skipped for portable ok deraadt@ millert@
* upstream commitdjm@openbsd.org2014-10-201-3/+3
| | | | whitespace
* upstream commitdaniel@openbsd.org2014-10-201-3/+5
| | | | | | plug a memory leak; from Maxime Villard. ok djm@
* upstream commitjmc@openbsd.org2014-10-203-8/+8
| | | | tweak previous;
* upstream commitdjm@openbsd.org2014-10-131-2/+2
| | | | whitespace
* upstream commitdjm@openbsd.org2014-10-136-109/+504
| | | | | | | | | | | | | | | | | | Tweak config reparsing with host canonicalisation Make the second pass through the config files always run when hostname canonicalisation is enabled. Add a "Match canonical" criteria that allows ssh_config Match blocks to trigger only in the second config pass. Add a -G option to ssh that causes it to parse its configuration and dump the result to stdout, similar to "sshd -T" Allow ssh_config Port options set in the second config parse phase to be applied (they were being ignored). bz#2267 bz#2286; ok markus
* upstream commitdjm@openbsd.org2014-10-131-2/+2
| | | | another -Wpointer-sign from clang
* upstream commitdjm@openbsd.org2014-10-131-5/+5
| | | | fix a few -Wpointer-sign warnings from clang
* upstream commitdjm@openbsd.org2014-10-131-51/+47
| | | | | parse cert sections using nested buffers to reduce copies; ok markus
* upstream commitdjm@openbsd.org2014-10-131-6/+6
| | | | correct options in usage(); from mancha1 AT zoho.com
* upstream commitdjm@openbsd.org2014-10-131-2/+6
| | | | | mention permissions on tun(4) devices in PermitTunnel documentation; bz#2273
* upstream commitdjm@openbsd.org2014-10-131-8/+3
| | | | | tighten permissions on pty when the "tty" group does not exist; pointed out by Corinna Vinschen; ok markus
* upstream commitsobrado@openbsd.org2014-10-131-3/+3
| | | | typo.
* upstream commitsobrado@openbsd.org2014-10-137-28/+28
| | | | | | | improve capitalization for the Ed25519 public-key signature system. ok djm@
* upstream commitdoug@openbsd.org2014-10-132-2/+5
| | | | | | Free resources on error in mkstemp and fdopen ok djm@
* upstream commitderaadt@openbsd.org2014-10-131-2/+2
| | | | djm how did you make a typo like that...
* upstream commitdjm@openbsd.org2014-10-131-6/+6
| | | | | When dumping the server configuration (sshd -T), print correct KEX, MAC and cipher defaults. Spotted by Iain Morgan
* upstream commitdjm@openbsd.org2014-10-131-1/+4
| | | | ~-expand lcd paths
* remove duplicated KEX_DH1 entryDamien Miller2014-10-121-1/+0
|
* remove ChangeLog fileDamien Miller2014-10-091-3818/+0
| | | | Commit logs will be generated from git at release time.
* delete contrib/caldera directoryDamien Miller2014-10-074-534/+0
|
* test commitDamien Miller2014-10-071-0/+1
|
* - (djm) Release OpenSSH-6.7Damien Miller2014-10-071-0/+3
|
* - (djm) [sshd_config.5] typo; from Iain MorganDamien Miller2014-10-032-1/+4
|
* - (djm) [openbsd-compat/Makefile.in openbsd-compat/kludge-fd_set.c]Damien Miller2014-10-014-3/+53
| | | | | | [openbsd-compat/openbsd-compat.h] Kludge around bad glibc _FORTIFY_SOURCE check that doesn't grok heap-allocated fd_sets; ok dtucker@
* - (djm) [sandbox-seccomp-filter.c] Allow mremap and exit for DietLibc;Damien Miller2014-09-102-0/+8
| | | | patch from Felix von Leitner; ok dtucker
* 20140908Darren Tucker2014-09-092-4/+7
| | | | - (dtucker) [INSTALL] Update info about egd. ok djm@
* - (djm) [openbsd-compat/arc4random.c] Zero seed after keying PRNGDamien Miller2014-09-042-1/+4
|
* - (djm) [contrib/cygwin/ssh-host-config] Fix old code leading toDamien Miller2014-09-032-32/+2
| | | | permissions/ACLs; from Corinna Vinschen
* - (djm) [defines.h sshbuf.c] Move __predict_true|false to defines.h andDamien Miller2014-09-033-11/+16
| | | | conditionalise to avoid duplicate definition.
* - (djm) [Makefile.in] Make TEST_SHELL a variable; "good idea" tim@Damien Miller2014-08-302-3/+4
|
* - (djm) [openbsd-compat/openssl-compat.h] add include guardDamien Miller2014-08-302-5/+10
|
* - (djm) [misc.c] Missing newline between functionsDamien Miller2014-08-302-0/+2
|
* - (djm) [openbsd-compat/openssl-compat.h] addDamien Miller2014-08-302-2/+13
| | | | OPENSSL_[RD]SA_MAX_MODULUS_BITS defines for OpenSSL that lacks them
View Lorry Controller Status