summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* - djm@cvs.openbsd.org 2013/05/19 02:38:28dtucker2013-06-012-8/+35
| | | | | | [auth2-pubkey.c] fix failure to recognise cert-authority keys if a key of a different type appeared in authorized_keys before it; ok markus@
* - djm@cvs.openbsd.org 2013/05/17 00:13:13dtucker2013-06-0183-1103/+987
| | | | | | | | | | | | | | | | | | [xmalloc.h cipher.c sftp-glob.c ssh-keyscan.c ssh.c sftp-common.c ssh-ecdsa.c auth2-chall.c compat.c readconf.c kexgexs.c monitor.c gss-genr.c cipher-3des1.c kex.c monitor_wrap.c ssh-pkcs11-client.c auth-options.c rsa.c auth2-pubkey.c sftp.c hostfile.c auth2.c servconf.c auth.c authfile.c xmalloc.c uuencode.c sftp-client.c auth2-gss.c sftp-server.c bufaux.c mac.c session.c jpake.c kexgexc.c sshconnect.c auth-chall.c auth2-passwd.c sshconnect1.c buffer.c kexecdhs.c kexdhs.c ssh-rsa.c auth1.c ssh-pkcs11.c auth2-kbdint.c kexdhc.c sshd.c umac.c ssh-dss.c auth2-jpake.c bufbn.c clientloop.c monitor_mm.c scp.c roaming_client.c serverloop.c key.c auth-rsa.c ssh-pkcs11-helper.c ssh-keysign.c ssh-keygen.c match.c channels.c sshconnect2.c addrmatch.c mux.c canohost.c kexecdhc.c schnorr.c ssh-add.c misc.c auth2-hostbased.c ssh-agent.c bufec.c groupaccess.c dns.c packet.c readpass.c authfd.c moduli.c] bye, bye xfree(); ok markus@
* - (dtucker) [configure.ac defines.h] Test for fd_mask, howmany and NFDBITSdtucker2013-06-013-19/+47
| | | | | rather than trying to enumerate the plaforms that don't have them. Based on a patch from Nathan Osman, with help from tim@.
* - (dtucker) [configure.ac openbsd-compat/xcrypt.c] bz#2112: fall back todtucker2013-06-013-4/+16
| | | | | using openssl's DES_crpyt function on platorms that don't have a native one, eg Android. Based on a patch from Nathan Osman.
* - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] bz#2087: Add a nulldtucker2013-05-293-3/+12
| | | | | implementation of endgrent for platforms that don't have it (eg Android). Loosely based on a patch from Nathan Osman, ok djm
* - dtucker@cvs.openbsd.org 2013/05/17 10:35:43dtucker2013-05-172-1/+5
| | | | | | [regress/scp.sh] use a file extention that's not special on some platforms. from portable (id sync only)
* - dtucker@cvs.openbsd.org 2013/05/17 10:34:30dtucker2013-05-172-1/+4
| | | | | [regress/portnum.sh] use a more portable negated if structure. from portable (id sync only)
* - dtucker@cvs.openbsd.org 2013/05/17 10:33:09dtucker2013-05-172-1/+4
| | | | | [regress/agent-getpeereid.sh] don't redirect stdout from sudo. from portable (id sync only)
* - dtucker@cvs.openbsd.org 2013/05/17 10:30:07dtucker2013-05-172-1/+5
| | | | | | [regress/test-exec.sh] wait a bit longer for startup and use case for absolute path. from portable (id sync only)
* - dtucker@cvs.openbsd.org 2013/05/17 10:28:11dtucker2013-05-172-1/+4
| | | | | [regress/sftp.sh] only compare copied data if sftp succeeds. from portable (id sync only)
* - dtucker@cvs.openbsd.org 2013/05/17 10:26:26dtucker2013-05-172-2/+5
| | | | | [regress/sftp-badcmds.sh] remove unused BATCH variable. (id sync only)
* - dtucker@cvs.openbsd.org 2013/05/17 10:24:48dtucker2013-05-172-1/+4
| | | | | [localcommand.sh] use backticks for portability. (id sync only)
* - dtucker@cvs.openbsd.org 2013/05/17 10:23:52dtucker2013-05-174-3/+8
| | | | | | | [regress/login-timeout.sh regress/reexec.sh regress/test-exec.sh] Use SUDO when cat'ing pid files and running the sshd log wrapper so that it works with a restrictive umask and the pid files are not world readable. Changes from -portable. (id sync only)
* - dtucker@cvs.openbsd.org 2013/05/17 10:16:26dtucker2013-05-172-1/+5
| | | | | | [regress/try-ciphers.sh] use expr for math to keep diffs vs portable down (id sync only)
* - (dtucker) [regress/cfgmatch.sh] Remove unneeded sleep renderd obsolete bydtucker2013-05-172-1/+2
| | | | rev 1.6 which calls wait.
* - (dtucker) [regress/runtests.sh] Remove obsolete test driver script.dtucker2013-05-172-13/+1
|
* - (dtucker) [regress/stderr-after-eof.sh regress/test-exec.sh] Move the md5dtucker2013-05-173-13/+17
| | | | helper function to the portable part of test-exec.sh.
* - (dtucker) [regress/test-exec.sh] Move the portable-specific functionsdtucker2013-05-172-11/+15
| | | | together and add a couple of missing lines from openbsd.
* - (dtucker) [regress/integrity.sh regress/krl.sh regress/test-exec.sh]dtucker2013-05-174-8/+8
| | | | Move the jot helper function to portable-specific part of test-exec.sh.
* - (dtucker) [regress/agent-getpeereid.sh] Resync spaces with openbsd.dtucker2013-05-172-1/+1
|
* - (dtucker) [regress/cfgmatch.sh] Resync config file setup with openbsd.dtucker2013-05-172-4/+5
|
* - (dtucker) [openbsd-compat/getopt.h] Remove unneeded bits.dtucker2013-05-172-4/+1
|
* - dtucker@cvs.openbsd.org 2013/05/17 04:29:14dtucker2013-05-1723-85/+47
| | | | | | | | | | | | [regress/sftp.sh regress/putty-ciphers.sh regress/cipher-speed.sh regress/test-exec.sh regress/sftp-batch.sh regress/dynamic-forward.sh regress/putty-transfer.sh regress/conch-ciphers.sh regress/sftp-cmds.sh regress/scp.sh regress/ssh-com-sftp.sh regress/rekey.sh regress/putty-kex.sh regress/stderr-data.sh regress/stderr-after-eof.sh regress/sftp-badcmds.sh regress/reexec.sh regress/ssh-com-client.sh regress/sftp-chroot.sh regress/forwarding.sh regress/transfer.sh regress/multiplex.sh] Move the setting of DATA and COPY into test-exec.sh
* - dtucker@cvs.openbsd.org 2013/05/17 01:32:11dtucker2013-05-172-2/+5
| | | | | [regress/integrity.sh] don't print output from ssh before getting it (it's available in ssh.log)
* - dtucker@cvs.openbsd.org 2013/05/17 01:16:09dtucker2013-05-172-1/+7
| | | | | | | | [regress/agent-timeout.sh] Pull back some portability changes from -portable: - TIMEOUT is a read-only variable in some shells - not all greps have -q so redirect to /dev/null instead. (ID sync only)
* sync missing IDdtucker2013-05-171-1/+1
|
* - dtucker@cvs.openbsd.org 2013/05/17 00:37:40dtucker2013-05-1711-60/+55
| | | | | | | | | [regress/agent.sh regress/keytype.sh regress/cfgmatch.sh regress/forcecommand.sh regress/proto-version.sh regress/test-exec.sh regress/cipher-speed.sh regress/cert-hostkey.sh regress/cert-userkey.sh regress/ssh-com.sh] replace 'echo -n' with 'printf' since it's more portable also remove "echon" hack.
* - (dtucker) [regress/integrity.sh]. Force fixed Diffie-Hellman key exchangedtucker2013-05-172-0/+10
| | | | | | | methods. When the openssl version doesn't support ECDH then next one on the list is DH group exchange, but that causes a bit more traffic which can mean that the tests flip bits in the initial exchange rather than the MACed traffic and we get different errors to what the tests look for.
* - (dtucker) [regress/bsd.regress.mk] Remove unused file. We've never used itdtucker2013-05-172-79/+2
| | | | in portable and it's long gone in openbsd.
* - dtucker@cvs.openbsd.org 2013/05/16 05:48:31dtucker2013-05-162-2/+36
| | | | | [regress/rekey.sh] add tests for RekeyLimit parsing
* - dtucker@cvs.openbsd.org 2013/05/16 04:26:10dtucker2013-05-162-4/+23
| | | | | [regress/rekey.sh] add server-side rekey test
* - dtucker@cvs.openbsd.org 2013/05/16 03:33:30dtucker2013-05-162-7/+26
| | | | | [regress/rekey.sh] test rekeying when there's no data being transferred
* - dtucker@cvs.openbsd.org 2013/05/16 02:10:35dtucker2013-05-162-2/+24
| | | | | [rekey.sh] Add test for time-based rekeying
* - djm@cvs.openbsd.org 2013/05/10 03:46:14dtucker2013-05-162-1/+4
| | | | | [modpipe.c] sync some portability changes from portable OpenSSH (id sync only)
* - dtucker@cvs.openbsd.org 2013/04/22 07:28:53dtucker2013-05-162-2/+23
| | | | | [multiplex.sh] Add tests for -Oforward and -Ocancel for local and remote forwards
* - dtucker@cvs.openbsd.org 2013/04/22 07:23:08dtucker2013-05-162-9/+16
| | | | | [multiplex.sh] Write mux master logs to regress.log instead of ssh.log to keep separate
* - djm@cvs.openbsd.org 2013/04/18 02:46:12dtucker2013-05-163-1/+34
| | | | | [Makefile regress/sftp-chroot.sh] test sshd ChrootDirectory+internal-sftp; feedback & ok dtucker@
* - dtucker@cvs.openbsd.org 2013/04/07 02:16:03dtucker2013-05-167-23/+59
| | | | | | | | | [regress/Makefile regress/rekey.sh regress/integrity.sh regress/sshd-log-wrapper.sh regress/forwarding.sh regress/test-exec.sh] use -E option for ssh and sshd to write debuging logs to ssh{,d}.log and save the output from any failing tests. If a test fails the debug output from ssh and sshd for the failing tests (and only the failing tests) should be available in failed-ssh{,d}.log.
* - dtucker@cvs.openbsd.org 2013/04/06 06:00:22dtucker2013-05-167-27/+48
| | | | | | | | [regress/rekey.sh regress/test-exec.sh regress/integrity.sh regress/multiplex.sh Makefile regress/cfgmatch.sh] Split the regress log into 3 parts: the debug output from ssh, the debug log from sshd and the output from the client command (ssh, scp or sftp). Somewhat functional now, will become more useful when ssh/sshd -E is added.
* - dtucker@cvs.openbsd.org 2013/03/23 11:09:43dtucker2013-05-162-4/+11
| | | | | | | [test-exec.sh] Only regenerate host keys if they don't exist or if ssh-keygen has changed since they were. Reduces test runtime by 5-30% depending on machine speed.
* - djm@cvs.openbsd.org 2013/03/07 00:20:34dtucker2013-05-162-1/+15
| | | | | [regress/proxy-connect.sh] repeat test with a style appended to the username
* - dtucker@cvs.openbsd.org 2013/05/16 10:44:06dtucker2013-05-162-2/+5
| | | | | [servconf.c] remove another now-unused variable
* - dtucker@cvs.openbsd.org 2013/05/16 10:43:34dtucker2013-05-163-6/+9
| | | | | [servconf.c readconf.c] remove now-unused variables
* - (dtucker) [configure.ac readconf.c servconf.cdtucker2013-05-165-4/+15
| | | | openbsd-compat/openbsd-compat.h] Add compat bits for scan_scaled.
* - dtucker@cvs.openbsd.org 2013/05/16 09:12:31dtucker2013-05-163-56/+17
| | | | | [readconf.c servconf.c] switch RekeyLimit traffic volume parsing to scan_scaled. ok djm@
* - dtucker@cvs.openbsd.org 2013/05/16 09:08:41dtucker2013-05-167-15/+22
| | | | | | [log.c scp.c sshd.c serverloop.c schnorr.c sftp.c] Fix some "unused result" warnings found via clang and -portable. ok markus@
* - jmc@cvs.openbsd.org 2013/05/16 06:30:06dtucker2013-05-162-3/+5
| | | | | [sshd_config.5] oops! avoid Xr to self;
* - jmc@cvs.openbsd.org 2013/05/16 06:28:45dtucker2013-05-162-12/+15
| | | | | [ssh_config.5] put IgnoreUnknown in the right place;
* - djm@cvs.openbsd.org 2013/05/16 04:27:50dtucker2013-05-164-11/+45
| | | | | | [ssh_config.5 readconf.h readconf.c] add the ability to ignore specific unrecognised ssh_config options; bz#866; ok markus@
* - dtucker@cvs.openbsd.org 2013/05/16 04:09:14dtucker2013-05-169-17/+135
| | | | | | | [sshd_config.5 servconf.c servconf.h packet.c serverloop.c monitor.c sshd_config sshd.c] Add RekeyLimit to sshd with the same syntax as the client allowing rekeying based on traffic volume or time. ok djm@, help & ok jmc@ for the man page.