summaryrefslogtreecommitdiffstats
path: root/crypto
Commit message (Collapse)AuthorAgeFilesLines
* Fix keyboard-interactive authentication for ssh1. The problem was twofold:des2003-01-312-0/+21
| | | | | | | | | | | | | | | | - The PAM kbdint device sometimes doesn't know authentication succeeded until you re-query it. The ssh1 kbdint code would never re-query the device, so authentication would always fail. This patch has been submitted to the OpenSSH developers. - The monitor code for PAM sometimes forgot to tell the monitor that authentication had succeeded. This caused the monitor to veto the privsep child's decision to allow the connection. These patches have been tested with OpenSSH clients on -STABLE, NetBSD and Linux, and with ssh.com's ssh1 on Solaris. Sponsored by: DARPA, NAI Labs
* Background:nectar2003-01-2910-494/+18
| | | | | | | | | | | | | | | | | | | | | When libdes was replaced with OpenSSL's libcrypto, there were a few interfaces that the former implemented but the latter did not. Because some software in the base system still depended upon these interfaces, we simply included them in our libcrypto (rnd_keys.c). Now, finally get around to removing the dependencies on these interfaces. There were basically two cases: des_new_random_key -- This is just a wrapper for des_random_key, and these calls were replaced. des_init_random_number_generator et. al. -- A few functions were used by the application to seed libdes's PRNG. These are not necessary when using libcrypto, as OpenSSL internally seeds the PRNG from /dev/random. These calls were simply removed. Again, some of the Kerberos 4 files have been taken off the vendor branch. I do not expect there to be future imports of KTH Kerberos 4.
* This commit was generated by cvs2svn to compensate for changes in r110018,nectar2003-01-295-29/+33
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * = Fix a bug in UI_UTIL_read_pw's error handling that causednectar2003-01-295-29/+33
| | | | | | | | | | | | | | | | | | | | des_read_pw_string to break (and thus rather mysteriously breaking utilities such as kinit). = Enable the BSD /dev/crypto interface. (These changes are being imported on the vendor branch, as they have already been accepted and committed to the OpenSSL CVS repository.)
* | Merge conflicts.markm2003-01-2829-1117/+1762
| | | | | | | | This is cunning doublespeak for "use vendor code".
* | Remove files no longer on OpenSSL 0.9.7. crypto/des/rnd_keys.c ismarkm2003-01-2849-6676/+0
| | | | | | | | retained as it is still used.
* | This commit was generated by cvs2svn to compensate for changes in r109998,markm2003-01-28943-19752/+102078
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor import of OpenSSL release 0.9.7. This release includesmarkm2003-01-28965-20829/+103840
| | | | | | | | support for AES and OpenBSD's hardware crypto.
* | Make the Kerberos 4 bits build against OpenSSL 0.9.7. This requirednectar2003-01-2820-13/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | two basic changes (both of which should be no-ops until OpenSSL 0.9.7 is imported): = Define OPENSSL_DES_LIBDES_COMPATIBILITY wherever we include openssl/des.h. = Spell `struct des_ks_struct []' using the existing `des_key_schedule' typedef. When OpenSSL 0.9.7 is imported, `des_key_schedule' (among other things) will be a macro invocation instead of a typedef, and things should `just work'. Yes, this commit does take several files off the vendor branch. I do not expect there to be future imports of KTH Kerberos 4.
* | Force early initialization of the resolver library, since the resolverdes2003-01-221-0/+15
| | | | | | | | | | | | | | | | configuration files will no longer be available once sshd is chrooted. PR: 39953, 40894 Submitted by: dinoex MFC after: 3 days
* | This commit was generated by cvs2svn to compensate for changes in r109641,nectar2003-01-211-1/+2
|\ \ | | | | | | | | | which included commits to RCS files with non-trunk default branches.
| * | Add a missing include, needed to get a prototype for `des_read_pw_string'.nectar2003-01-211-1/+2
| | | | | | | | | | | | | | | | | | This is particularly important for OpenSSL 0.9.7, as `des_read_pw_string' is a macro there. (This fix brought in on the vendor branch, because I already committed it to Heimdal's CVS.)
* | | add more RFC defined telnet optionsbillf2003-01-181-3/+8
| | | | | | | | | | | | Reviewed by: ps
* | | The previous commit contained a stupid mistake: ctxt->pam_[cp]sock wasdes2002-12-211-2/+2
| | | | | | | | | | | | | | | | | | initialized after the call to pthread_create() instead of before. It just happened to work with threads enabled because ctxt is shared, but of course it doesn't work when we use a child process instead of threads.
* | | If possible, use pthreads instead of a child process for PAM.des2002-12-142-65/+334
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reimplement the necessary bits from auth_pam.c and auth2_pam.c so that they share the PAM context used by the keyboard-interactive thread. If a child process is used instead, they will (necessarily) use a separate context. Constify do_pam_account() and do_pam_session(). Sponsored by: DARPA, NAI Labs
* | | Add a missing #include "canohost.h".des2002-12-141-0/+1
| | |
* | | Remove code related to the PAMAuthenticationViaKbdInt option (which we'vedes2002-12-141-4/+1
| | | | | | | | | | | | disabled). This removes the only reference to auth2_pam().
* | | Back out a lastlog-related change which is no longer relevant.des2002-12-141-1/+1
| | |
* | | Fix a rounding error in the block size calculation.des2002-12-141-2/+2
| | | | | | | | | | | | Submitted by: tjr
* | | Since OpenSSH drops privileges before calling pam_open_session(3),des2002-12-032-170/+202
| | | | | | | | | | | | | | | | | | pam_lastlog(8) can't possibly work, so let OpenSSH handle lastlog. Approved by: re (rwatson)
* | | Merge argument parsing changes into this copy of telnet.eric2002-11-271-2/+6
| | | | | | | | | | | | | | | Submitted by: markm Approved by: bmah
* | | This commit was generated by cvs2svn to compensate for changes in r107207,nectar2002-11-24110-1442/+1246
|\ \ \ | |/ / | | | | | | which included commits to RCS files with non-trunk default branches.
| * | Import of Heimdal 0.5.1.nectar2002-11-24110-1442/+1246
| | | | | | | | | | | | Approved by: re
* | | Add caveats regarding the effect of PAM on PasswordAuthentication anddes2002-11-061-0/+23
| | | | | | | | | | | | | | | | | | | | | PermitRootLogin. PR: docs/43776 MFC after: 1 week
* | | Document the current default for VersionAddendum.des2002-11-051-0/+2
| | |
* | | Accurately reflect our local changes and additions.des2002-11-051-11/+9
| | |
* | | Document the current default value for VersionAddendum.des2002-11-052-2/+2
| | |
* | | Switch to two-clause license, with NAI's permission.des2002-11-021-3/+0
| | |
* | | Resolve conflicts.des2002-10-2957-526/+1253
| | |
* | | Protect against tag expansion + fix some brainos.des2002-10-291-6/+6
| | |
* | | Some tricks I use when I upgrade.des2002-10-291-0/+20
| | |
* | | Correct shell code to expand globs in FREEBSD-Xlistdes2002-10-291-1/+1
| | |
* | | More cruft.des2002-10-291-0/+2
| | |
* | | This commit was generated by cvs2svn to compensate for changes in r106121,des2002-10-2978-1597/+3674
|\ \ \ | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches.
| * | | Vendor import of OpenSSH-portable 3.5p1.des2002-10-29133-2117/+4911
| | | |
* | | | This commit was generated by cvs2svn to compensate for changes in r105765,assar2002-10-231-2/+11
|\ \ \ \ | | | | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches.
| * | | | import 1.29 to fix buffer overflow:assar2002-10-231-2/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | check the length of the authenticator and rlen Obtained from: Heimdal CVS
* | | | | This commit was generated by cvs2svn to compensate for changes in r105672,assar2002-10-221-1/+8
|\ \ \ \ \ | | |_|/ / | |/| | | | | | | | which included commits to RCS files with non-trunk default branches.
| * | | | import 1.27 to fix buffer overflow:assar2002-10-221-1/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | check size of rlen Obtained from: Heimdal CVS
* | | | | Permit the argument to the -s option to be a hostname. I see nodd2002-10-021-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | reason to restrict this to a numeric address. PR: 41841 Submitted by: Dmitry Pryanishnikov <dmitry@atlantis.dp.ua>, Maxim Maximov <mcsi@agava.com>
* | | | | This commit was generated by cvs2svn to compensate for changes in r104204,nectar2002-09-301-2/+2
|\ \ \ \ \ | |/ / / / | | | | | | | | | | which included commits to RCS files with non-trunk default branches.
| * | | | Fix an annoying bug that causes a spurious error message when changingnectar2002-09-301-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | passwords, even when the operation actually succeeded. % k5passwd luser@REA.LM's Password: ************** New password: ************** Verifying password - New password: ************** k5passwd: krb5_change_password: unable to reach any changepw server in realm REA.LM [In reality, the password was changed.] Obtained from: Heimdal CVS
* | | | | Catch up with "base" telnet.markm2002-09-251-3/+3
| | | | | | | | | | | | | | | | | | | | s/FALL THROUGH/FALLTHROUGH/ for lint(1).
* | | | | Catch up with "base" telnet.markm2002-09-253-12/+8
| | | | | | | | | | | | | | | | | | | | | | | | | s/FALL THROUGH/FALLTHROUGH/ for lint(1). s/Usage/usage/ for consistency.
* | | | | From the requestor:markm2002-09-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "Could you do me a favor and fix sys_bsd.c to get the howmany() macro from <sys/param.h>, instead of <sys/types.h>? This will save me from having to worry about the unsync'd bits before making the change." Requested by: mike
* | | | | These RFCs and internet-drafts are not really needed in the basenectar2002-09-1860-103705/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | system, and I've not been importing them lately. cvs rm them now so they can be cleaned out of the attic later. Requested by: obrien
* | | | | Resolve conflicts.nectar2002-09-167-77/+29
| | | | |
* | | | | This commit was generated by cvs2svn to compensate for changes in r103423,nectar2002-09-16101-3883/+6985
|\ \ \ \ \ | |/ / / / | | | | | | | | | | which included commits to RCS files with non-trunk default branches.
| * | | | Import of Heimdal Kerberos from KTH repository circa 2002/09/16.nectar2002-09-16112-4046/+7133
| | | | |
* | | | | sshd didn't handle actual size of struct sockaddr correctly,ume2002-09-094-12/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and did copy it as long as just size of struct sockaddr. So, If connection is via IPv6, sshd didn't log hostname into utmp correctly. This problem occured only under FreeBSD because of our hack. However, this is potential problem of OpenSSH-portable, and they agreed to fix this. Though, there is no fixed version of OpenSSH-portable available yet, since this problem is serious for IPv6 users, I commit the fix. Reported by: many people Reviewed by: current@ and stable@ (no objection) MFC after: 3 days
OpenPOWER on IntegriCloud