summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Revert "Add CI build with more options enabled"Matt Johnston2022-11-101-16/+0
| | | | | | This reverts commit e85f329e5cc1b2e4a8a1b69b0520101a4039f4ed. I'd forgotten there's already the automatic "nondefault options"
* Avoid hitting dropbear_lint.shMatt Johnston2022-11-101-1/+1
|
* Add CI build with more options enabledMatt Johnston2022-11-101-0/+16
|
* Fix accientally removed variable for DSSMatt Johnston2022-11-101-0/+1
|
* Force DROPBEAR_DSS when fuzzingMatt Johnston2022-11-101-0/+6
|
* Enable DSS in CI so the tests still workMatt Johnston2022-11-101-0/+3
|
* Fix warnings when DROPBEAR_DSS is disabledMatt Johnston2022-11-101-5/+5
|
* Add DROPBEAR_RSA_SHA1 as a visible config optionMatt Johnston2022-11-101-0/+5
|
* Disable DSS by defaultMatt Johnston2022-11-102-9/+9
|
* Fix dropbearkey to disallow 512 bit keysMatt Johnston2022-11-101-2/+2
| | | | The key loading code rejected <1024 bit keys already
* Add manpage entry for -z, change help textMatt Johnston2022-11-104-2/+8
| | | | Fixes #193 on github (with previous patch)
* Make IP Type-Of-Service feature optionalPetr Štetiar2022-11-104-0/+13
| | | | | | | | Add new -z commandline option which when set, disables new IP TOS feature. References: https://github.com/openwrt/openwrt/issues/10405 Signed-off-by: Petr Štetiar <ynezz@true.cz>
* Use faster primality testing in libtomcryptMatt Johnston2022-11-102-0/+13
| | | | This can only be used if DSS is disabled
* Update github builders to ubuntu 22.04 defaultMatt Johnston2022-11-102-2/+2
|
* Update github action to macos-12Matt Johnston2022-11-101-2/+2
| | | | 10.15 is being removed on github soon
* Move ./configure CFLAGS to the end of the listMatt Johnston2022-11-102-18/+18
| | | | | This allows overriding configure-script provided arguments such as -Wundef with the user provided CFLAGS
* Just disable -Wundef for macos runners insteadMatt Johnston2022-11-102-13/+4
| | | | | The previous change to set TARGET_OS_EMBEDDED=0 didn't work for libtommath which doesn't include Dropbear headers
* Work around macos broken TARGET_OS_EMBEDDEDMatt Johnston2022-11-101-0/+9
| | | | | | | Their headers test TARGET_OS_EMBEDDED without testing if it's defined which breaks Wundef. Might be fixed in more recent macos, but it broke the github action.
* Update autoconf workflow to Ubuntu 22.04Matt Johnston2022-11-101-1/+1
| | | | This should let it succeed with autoconf 2.71
* Add -Wundef and fix missing definitionsMatt Johnston2022-11-105-2493/+3712
|
* Fix typo in DROPEAR_DSSMatt Johnston2022-11-101-1/+1
| | | | Fixes #195 issue in github
* Fix missing end quote in comment exampleMatt Johnston2022-11-101-1/+1
|
* Allow overriding shells for compat getusershell()Matt Johnston2022-11-092-2/+10
|
* Merge pull request #160 from Jackkal/two-factor-authenticationMatt Johnston2022-11-096-18/+66
|\ | | | | | | Two-factor authentication support (pubkey and password)
| * Add check for -t -s clashMatt Johnston2022-11-091-0/+4
| | | | | | | | multiauthmethod with noauthpass isn't allowed
| * make comments consistent and fix typoJackkal2022-06-213-3/+5
| |
| * Two-factor auth - Fix missing includeJackkal2022-04-291-0/+1
| |
| * Two-factor authentication support (pubkey and password)Jackkal2022-04-296-18/+59
| |
* | Ignore all-zero ed25519 keys in fuzzer-verifyMatt Johnston2022-11-091-0/+16
| |
* | Merge egor-duda:sk-authkey-optionsMatt Johnston2022-11-099-10/+60
|\ \ | | | | | | | | | Github pull request #172
| * | Implement no-touch-required and verify-requred for authorized_keys fileEgor Duda2022-06-119-10/+57
| | |
* | | Fix plugin argumentMatt Johnston2022-11-093-16/+20
| | | | | | | | | | | | | | | | | | | | | This broke in the re-exec changes, it was altering the argv argument in-place, but argv was re-used later. Fixes #194 github issue
* | | Merge remote-tracking branch 'refs/remotes/origin/master'Matt Johnston2022-10-319-44/+141
|\ \ \
| * \ \ Merge pull request #190 from mgiacomoli/fix-dbclient-keyboard-interactive-loginMatt Johnston2022-10-271-12/+12
| |\ \ \ | | | | | | | | | | Dbclient: keyboard_interactive login method never used
| | * | | Resort cli auth method triesMichele Giacomoli2022-09-191-12/+12
| | | | |
| * | | | Merge pull request #189 from mgiacomoli/utx-typoMatt Johnston2022-10-251-1/+1
| |\ \ \ \ | | | | | | | | | | | | Fix utx var typo
| | * | | | Fix utx var typoMichele Giacomoli2022-09-191-1/+1
| | |/ / /
| * | | | Merge pull request #191 from mgiacomoli/ask-fingerprint-flush-stdinMatt Johnston2022-10-251-0/+2
| |\ \ \ \ | | | | | | | | | | | | Dbclient: Flush stdin after fingerprint confirmation
| | * | | | Fix comment styleMichele Giacomoli2022-09-191-1/+1
| | | | | |
| | * | | | Flush stdin after fingerprint confirmationMichele Giacomoli2022-09-191-0/+2
| | |/ / /
| * | | | Merge pull request #182 from tuoha/permitopen_authorized_keysMatt Johnston2022-10-254-0/+107
| |\ \ \ \ | | | | | | | | | | | | Added permitopen option to authorized_keys
| | * | | | Added permitopen option to authorized_keysTuomas Haikarainen2022-07-124-0/+107
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is now possible to limit local port forwarding to specified destination(s) by using the permitopen option in authorized_keys. Resolves #181
| * | | | | Fix decompression size checkMatt Johnston2022-10-251-30/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Dropbear's decompression could erroneously exit with "bad packet, oversized decompressed" for a valid 32768 byte decompressed payload (an off-by-one error). It could be triggered particularly with larger SSH window sizes. This change also simplifies the function by allocating a single 32kB buffer rather than incrementally increasing the size.
| * | | | | Add flags so libtommath builds with -O3Matt Johnston2022-10-251-1/+1
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was the default prior to 2022.82 and makes a significant difference to performance. Perhaps at a later time this could be made more configurable. Discussion in https://github.com/mkj/dropbear/issues/174
* | | | | dropbear_lint.sh: Use grep --Matt Johnston2022-10-241-1/+1
|/ / / /
* | | | Link to dropbear.nl in READMEMatt Johnston2022-08-041-0/+2
| | | |
* | | | Merge pull request #184 from wulei-student/patch-1Matt Johnston2022-07-221-1/+1
|\ \ \ \ | | | | | | | | | | Update dropbear.init
| * | | | Update dropbear.initlwu2022-07-221-1/+1
|/ / / / | | | | | | | | need \ ,at the end of the line.
* | | | Re-add missing setsid(), missed #ifdef conversionMatt Johnston2022-07-181-1/+1
| | | | | | | | | | | | | | | | | | | | Fixes: 2a81289 ("Make DEBUG_NOFORK a #if not #ifdef") Fixes #180 github issue
* | | | Remove unused MAX_IP_LENMatt Johnston2022-06-271-2/+1
|/ / /