summaryrefslogtreecommitdiffstats
path: root/crypto/openssh
Commit message (Collapse)AuthorAgeFilesLines
* /Really/ deprecate ConnectionsPerPeriod, ripping out the code for itgreen2001-01-134-102/+2
| | | | and giving a dire error to its lingering users.
* Fix a long-standing bug that resulted in a dropped session sometimesgreen2001-01-061-0/+1
| | | | | | when an X11-forwarded client was closed. For some reason, sshd didn't disable the SIGPIPE exit handler and died a horrible death (well, okay, a silent death really). Set SIGPIPE's handler to SIG_IGN.
* Update to OpenSSH 2.3.0 with FreeBSD modifications. OpenSSH 2.3.0green2000-12-0534-861/+2289
| | | | | | | | | | | | | | | | | new features description elided in favor of checking out their website. Important new FreeBSD-version stuff: PAM support has been worked in, partially from the "Unix" OpenSSH version, and a lot due to the work of Eivind Eklend, too. This requires at least the following in pam.conf: sshd auth sufficient pam_skey.so sshd auth required pam_unix.so try_first_pass sshd session required pam_permit.so Parts by: Eivind Eklend <eivind@FreeBSD.org>
* Forgot to remove the old line in the last commit.green2000-12-051-1/+0
|
* This commit was generated by cvs2svn to compensate for changes in r69587,green2000-12-0545-648/+2407
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Import of OpenSSH 2.3.0 (virgin OpenBSD source release).green2000-12-0572-1442/+3643
| |
* | Remove duplicate linebrian2000-12-041-1/+0
| | | | | | | | Not responded to by: kris, then green
* | In env_destroy(), it is a bad idea to env_swap(self, 0) to switchgreen2000-11-251-0/+2
| | | | | | | | | | | | | | | | | | | | back to the original environ unconditionally. The setting of the variable to save the previous environ is conditional; it happens when ENV.e_committed is set. Therefore, don't try to swap the env back unless the previous env has been initialized. PR: bin/22670 Submitted by: Takanori Saneto <sanewo@ba2.so-net.ne.jp>
* | Correct an arguement to ssh_add_identity, this matches what is currentlybillf2000-11-251-1/+1
| | | | | | | | | | | | | | | | | | in ports/security/openssh/files/pam_ssh.c PR: 22164 Submitted by: Takanori Saneto <sanewo@ba2.so-net.ne.jp> Reviewed by: green Approved by: green
* | Add login_cap and login_access support. Previously, these FreeBSD-localgreen2000-11-141-0/+37
| | | | | | | | checks were only made when using the 1.x protocol.
* | This commit was generated by cvs2svn to compensate for changes in r68700,green2000-11-141-4/+8
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Import a security fix: the client would allow a server to use itsgreen2000-11-141-4/+8
| | | | | | | | | | | | | | | | ssh-agent or X11 forwarding even if it was disabled. This is the vendor fix provided, not an actual revision of clientloop.c. Submitted by: Markus Friedl <markus@OpenBSD.org> via kris
* | Fix a few style oddities.green2000-09-101-6/+6
| |
* | Fix a goof in timevaldiff.green2000-09-101-1/+1
| |
* | Remove files no longer present in OpenSSH 2.2.0 and beyondkris2000-09-105-256/+0
| |
* | Resolve conflicts and update for OpenSSH 2.2.0kris2000-09-1037-1659/+2394
| | | | | | | | Reviewed by: gshapiro, peter, green
* | This commit was generated by cvs2svn to compensate for changes in r65668,kris2000-09-1080-806/+3146
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Initial import of OpenSSH post-2.2.0 snapshot dated 2000-09-09kris2000-09-10118-2247/+5359
| |
* | Nuke RSAREF support from orbit.kris2000-09-101-6/+0
| | | | | | | | It's the only way to be sure.
* | ttyname was not being passed into do_login(), so we were erroneously pickingkris2000-09-041-3/+3
| | | | | | | | | | | | up the function definition from unistd.h instead. Use s->tty instead. Submitted by: peter
* | bzero() the struct timeval for paranoiakris2000-09-031-0/+1
| | | | | | | | Submitted by: gshapiro
* | Err, we weren't even compiling auth1.c with LOGIN_CAP at all. Guess nobodykris2000-09-022-1/+1
| | | | | | | | was using this feature.
* | Repair a broken conflict resolution in r1.2 which had the effect of nullifyingkris2000-09-021-23/+23
| | | | | | | | | | | | | | | | the login_cap and login.access checks for whether a user/host is allowed access to the system for users other than root. But since we currently don't have a similar check in the ssh2 code path anyway, it's um, "okay". Submitted by: gshapiro
* | Repair my dyslexia: s/opt/otp/ in the OPIE challenge. D'oh!kris2000-09-021-2/+2
| | | | | | | | Submitted by: gshapiro
* | Re-add missing "break" which was lost during a previous patchkris2000-09-021-0/+1
| | | | | | | | | | | | integration. This currently has no effect. Submitted by: gshapiro
* | Turn on X11Forwarding by default on the server. Any risk is to the client,kris2000-09-022-2/+2
| | | | | | | | | | | | where it is already disabled by default. Reminded by: peter
* | Increase the default value of LoginGraceTime from 60 seconds to 120kris2000-08-233-3/+3
| | | | | | | | | | | | | | seconds. PR: 20488 Submitted by: rwatson
* | Respect X11BASE to derive the location of xauth(1)kris2000-08-231-0/+2
| | | | | | | | | | PR: 17818 Submitted by: Bjoern Fischer <bfischer@Techfak.Uni-Bielefeld.DE>
* | Chalk up another phkmalloc victim.asmodai2000-08-011-2/+3
| | | | | | | | | | | | | | | | It seems as if uninitialised memory was the culprit. We may want to contribute this back to the OpenSSH project. Submitted by: Alexander Leidinger <Alexander@Leidinger.net> on -current.
* | Fix a weird typo, is -> are.asmodai2000-07-271-1/+1
| | | | | | | | | | | | | | The OpenSSH maintainer probably want to contribute this back to the real OpenSSH guys. Submitted by: Jon Perkin <sketchy@netcraft.com>
* | Fixed a minor typo in the header.marko2000-07-271-1/+1
| | | | | | | | Pointed out by: asmodai
* | Committed, Thanks!!marko2000-07-251-1/+1
| | | | | | | | | | PR: 20108 Submitted by: Doug Lee
* | Sync sshd_config with sshd and manapage internal defaults (Checkmail = yes)peter2000-07-112-2/+2
| |
* | Sync LoginGraceTime with sshd_config = 60 seconds by default, not 600.peter2000-07-112-2/+2
| |
* | Fix out-of-sync defaults. PermitRootLogin is supposed to be 'no' butpeter2000-07-112-2/+2
| | | | | | | | | | | | | | sshd's internal default was 'yes'. (if some cracker managed to trash /etc/ssh/sshd_config, then root logins could be reactivated) Approved by: kris
* | Make FallBackToRsh off by default. Falling back to rsh by default ispeter2000-07-112-2/+2
| | | | | | | | | | | | silly in this day and age. Approved by: kris
* | Allow restarting on SIGHUP when the full path was not given as argv[0].green2000-07-041-0/+1
| | | | | | | | We do have /proc/curproc/file :)
* | So /this/ is what has made OpenSSH's SSHv2 support never work right!green2000-06-272-0/+6
| | | | | | | | | | | | In some cases, limits did not get set to the proper class, but instead always to "default", because not all passwd copies were done to completion.
* | Also make sure to close the socket that exceeds your rate limit.green2000-06-261-0/+1
| |
* | Make rate limiting work per-listening-socket. Log better messages thangreen2000-06-263-30/+68
| | | | | | | | | | | | | | before for this, requiring a new function (get_ipaddr()). canohost.c receives a $FreeBSD$ line. Suggested by: Niels Provos <niels@OpenBSD.org>
* | Fix syntax error in previous commit.kris2000-06-111-2/+3
| | | | | | | | Submitted by: Udo Schweigert <ust@cert.siemens.de>
* | Fix security botch in "UseLogin Yes" case: commands are executed withkris2000-06-101-0/+4
| | | | | | | | | | | | uid 0. Obtained from: OpenBSD
* | Make `ssh-agent -k' work for csh(1)-like shells.ru2000-06-101-1/+1
| |
* | Allow "DenyUsers" to function.green2000-06-061-0/+1
| |
* | Resolve conflictskris2000-06-035-80/+33
| |
* | This commit was generated by cvs2svn to compensate for changes in r61209,kris2000-06-038-159/+204
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Initial import of OpenSSH snapshot from 2000/05/30kris2000-06-0313-239/+237
| | | | | | | | Obtained from: OpenBSD
* | Resolve conflictskris2000-06-031-1/+7
| |
* | This commit was generated by cvs2svn to compensate for changes in r61206,kris2000-06-031-0/+36
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Import from vendor repository.kris2000-06-032-1/+43
| | | | | | | | Obtained from: OpenBSD
OpenPOWER on IntegriCloud