openssh - openssh

	Commit message (Collapse)	Author	Age	Files	Lines
*	- djm@cvs.openbsd.org 2003/07/03 08:09:06	Darren Tucker	2003-07-03	1	-2/+1
\| \| \| \| \| \|	[readconf.c readconf.h ssh-keysign.c ssh.c] fix AddressFamily option in config file, from brent@graveland.net; ok markus@
*	- djm@cvs.openbsd.org 2003/05/16 03:27:12	Damien Miller	2003-05-18	1	-2/+4
\| \| \| \| \| \|	[readconf.c ssh_config ssh_config.5 ssh-keysign.c] add AddressFamily option to ssh_config (like -4, -6 on commandline). Portable bug #534; ok markus@
*	- markus@cvs.openbsd.org 2003/04/02 14:36:26	Damien Miller	2003-04-09	1	-2/+2
\| \| \| \| \|	[ssh-keysign.c] potential segfault if KEY_UNSPEC; cjwatson@debian.org; bug #526
*	- (djm) OpenBSD CVS Sync	Damien Miller	2003-03-15	1	-8/+1
\| \| \| \| \| \|	- markus@cvs.openbsd.org 2003/03/13 11:42:19 [authfile.c ssh-keysign.c] move RSA_blinding_on to generic key load method
*	- (bal) [msg.c msg.h scp.c ssh-keysign.c sshconnect2.c] Resync CVS IDs since	Ben Lindstrom	2002-12-23	1	-1/+1
\| \| \| \|	we already did s/msg_send/ssh_msg_send/
*	- markus@cvs.openbsd.org 2002/11/07 22:08:07	Ben Lindstrom	2002-11-09	1	-3/+3
\| \| \| \| \| \| \| \| \|	[readconf.c readconf.h ssh-keysign.8 ssh-keysign.c] we cannot use HostbasedAuthentication for enabling ssh-keysign(8), because HostbasedAuthentication might be enabled based on the target host and ssh-keysign(8) does not know the remote hostname and not trust ssh(1) about the hostname, so we add a new option EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
*	- (djm) Bug #406: s/msg_send/ssh_msg_send/ for Mac OS X 1.2	Damien Miller	2002-10-04	1	-3/+3
\|
*	- markus@cvs.openbsd.org 2002/07/03 14:21:05	Ben Lindstrom	2002-07-04	1	-1/+15
\| \| \| \| \| \| \| \|	[ssh-keysign.8 ssh-keysign.c ssh.c ssh_config] re-enable ssh-keysign's sbit, but make ssh-keysign read /etc/ssh/ssh_config and exit if HostbasedAuthentication is disabled globally. based on discussions with deraadt, itojun and sommerfeld; ok itojun@
*	- markus@cvs.openbsd.org 2002/07/03 09:55:38	Ben Lindstrom	2002-07-04	1	-1/+14
\| \| \| \| \| \| \|	[ssh-keysign.c] use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld) in order to avoid a possible Kocher timing attack pointed out by Charles Hannum; ok provos@
*	- markus@cvs.openbsd.org 2002/06/26 22:27:32	Ben Lindstrom	2002-06-27	1	-2/+2
\| \| \| \| \|	[ssh-keysign.c] bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu
*	- deraadt@cvs.openbsd.org 2002/06/19 00:27:55	Ben Lindstrom	2002-06-21	1	-8/+8
\| \| \| \| \| \| \| \| \|	[auth-bsdauth.c auth-skey.c auth1.c auth2-chall.c auth2-none.c authfd.c authfd.h monitor_wrap.c msg.c nchan.c radix.c readconf.c scp.c sftp.1 ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh-keysign.c ssh.1 sshconnect.c sshconnect.h sshconnect2.c ttymodes.c xmalloc.h] KNF done automatically while reading....
*	- markus@cvs.openbsd.org 2002/06/08 05:07:09	Ben Lindstrom	2002-06-09	1	-3/+7
\| \| \| \| \|	[ssh-keysign.c] only accept 20 byte session ids
*	unexpand	Ben Lindstrom	2002-06-09	1	-3/+3
\|
*	- (bal) Missed __progname in ssh-keysign.c patch by dtucker@zip.com.au	Ben Lindstrom	2002-06-07	1	-0/+6
\|
*	- (bal) ssh-keysign should build and install correctly now. Phase two	Ben Lindstrom	2002-06-07	1	-0/+4
\| \| \| \|	would be to clean out any dead wood and disable ssh setuid on install.
*	- markus@cvs.openbsd.org 2002/05/23 19:24:30	Ben Lindstrom	2002-06-06	1	-0/+204
	[authfile.c authfile.h pathnames.h ssh.c sshconnect.c sshconnect.h sshconnect1.c sshconnect2.c ssh-keysign.8 ssh-keysign.c Makefile.in] add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentication in protocol v2 (needs to access the hostkeys). Note: Makefile.in untested. Will test after merge is finished.