aboutsummaryrefslogtreecommitdiff
path: root/crypto/openssh
Commit message (Collapse)AuthorAgeFilesLines
* Update to OpenSSH 2.3.0 with FreeBSD modifications. OpenSSH 2.3.0Brian Feldman2000-12-0534-861/+2289
| | | | | | | | | | | | | | | | | | | | new features description elided in favor of checking out their website. Important new FreeBSD-version stuff: PAM support has been worked in, partially from the "Unix" OpenSSH version, and a lot due to the work of Eivind Eklend, too. This requires at least the following in pam.conf: sshd auth sufficient pam_skey.so sshd auth required pam_unix.so try_first_pass sshd session required pam_permit.so Parts by: Eivind Eklend <eivind@FreeBSD.org> Notes: svn path=/head/; revision=69591
* Forgot to remove the old line in the last commit.Brian Feldman2000-12-051-1/+0
| | | | Notes: svn path=/head/; revision=69590
* This commit was generated by cvs2svn to compensate for changes in r69587,Brian Feldman2000-12-0545-648/+2407
|\ | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=69588
| * Import of OpenSSH 2.3.0 (virgin OpenBSD source release).Brian Feldman2000-12-0572-1442/+3643
| | | | | | | | Notes: svn path=/vendor-crypto/openssh/dist/; revision=69587
* | Remove duplicate lineBrian Somers2000-12-041-1/+0
| | | | | | | | | | | | | | Not responded to by: kris, then green Notes: svn path=/head/; revision=69584
* | In env_destroy(), it is a bad idea to env_swap(self, 0) to switchBrian Feldman2000-11-251-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | back to the original environ unconditionally. The setting of the variable to save the previous environ is conditional; it happens when ENV.e_committed is set. Therefore, don't try to swap the env back unless the previous env has been initialized. PR: bin/22670 Submitted by: Takanori Saneto <sanewo@ba2.so-net.ne.jp> Notes: svn path=/head/; revision=69130
* | Correct an arguement to ssh_add_identity, this matches what is currentlyBill Fumerola2000-11-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | in ports/security/openssh/files/pam_ssh.c PR: 22164 Submitted by: Takanori Saneto <sanewo@ba2.so-net.ne.jp> Reviewed by: green Approved by: green Notes: svn path=/head/; revision=69129
* | Add login_cap and login_access support. Previously, these FreeBSD-localBrian Feldman2000-11-141-0/+37
| | | | | | | | | | | | | | checks were only made when using the 1.x protocol. Notes: svn path=/head/; revision=68704
* | This commit was generated by cvs2svn to compensate for changes in r68700,Brian Feldman2000-11-141-4/+8
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=68701
| * Import a security fix: the client would allow a server to use itsBrian Feldman2000-11-141-4/+8
| | | | | | | | | | | | | | | | | | | | | | ssh-agent or X11 forwarding even if it was disabled. This is the vendor fix provided, not an actual revision of clientloop.c. Submitted by: Markus Friedl <markus@OpenBSD.org> via kris Notes: svn path=/vendor-crypto/openssh/dist/; revision=68700
* | Fix a few style oddities.Brian Feldman2000-09-101-6/+6
| | | | | | | | Notes: svn path=/head/; revision=65700
* | Fix a goof in timevaldiff.Brian Feldman2000-09-101-1/+1
| | | | | | | | Notes: svn path=/head/; revision=65699
* | Remove files no longer present in OpenSSH 2.2.0 and beyondKris Kennaway2000-09-105-256/+0
| | | | | | | | Notes: svn path=/head/; revision=65676
* | Resolve conflicts and update for OpenSSH 2.2.0Kris Kennaway2000-09-1037-1659/+2394
| | | | | | | | | | | | | | Reviewed by: gshapiro, peter, green Notes: svn path=/head/; revision=65674
* | This commit was generated by cvs2svn to compensate for changes in r65668,Kris Kennaway2000-09-1080-806/+3146
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=65669
| * Initial import of OpenSSH post-2.2.0 snapshot dated 2000-09-09Kris Kennaway2000-09-10118-2247/+5359
| | | | | | | | Notes: svn path=/vendor-crypto/openssh/dist/; revision=65668
* | Nuke RSAREF support from orbit.Kris Kennaway2000-09-101-6/+0
| | | | | | | | | | | | | | It's the only way to be sure. Notes: svn path=/head/; revision=65653
* | ttyname was not being passed into do_login(), so we were erroneously pickingKris Kennaway2000-09-041-3/+3
| | | | | | | | | | | | | | | | | | up the function definition from unistd.h instead. Use s->tty instead. Submitted by: peter Notes: svn path=/head/; revision=65433
* | bzero() the struct timeval for paranoiaKris Kennaway2000-09-031-0/+1
| | | | | | | | | | | | | | Submitted by: gshapiro Notes: svn path=/head/; revision=65398
* | Err, we weren't even compiling auth1.c with LOGIN_CAP at all. Guess nobodyKris Kennaway2000-09-022-1/+1
| | | | | | | | | | | | | | was using this feature. Notes: svn path=/head/; revision=65361
* | Repair a broken conflict resolution in r1.2 which had the effect of nullifyingKris Kennaway2000-09-021-23/+23
| | | | | | | | | | | | | | | | | | | | | | the login_cap and login.access checks for whether a user/host is allowed access to the system for users other than root. But since we currently don't have a similar check in the ssh2 code path anyway, it's um, "okay". Submitted by: gshapiro Notes: svn path=/head/; revision=65360
* | Repair my dyslexia: s/opt/otp/ in the OPIE challenge. D'oh!Kris Kennaway2000-09-021-2/+2
| | | | | | | | | | | | | | Submitted by: gshapiro Notes: svn path=/head/; revision=65359
* | Re-add missing "break" which was lost during a previous patchKris Kennaway2000-09-021-0/+1
| | | | | | | | | | | | | | | | | | integration. This currently has no effect. Submitted by: gshapiro Notes: svn path=/head/; revision=65358
* | Turn on X11Forwarding by default on the server. Any risk is to the client,Kris Kennaway2000-09-022-2/+2
| | | | | | | | | | | | | | | | | | where it is already disabled by default. Reminded by: peter Notes: svn path=/head/; revision=65357
* | Increase the default value of LoginGraceTime from 60 seconds to 120Kris Kennaway2000-08-233-3/+3
| | | | | | | | | | | | | | | | | | | | seconds. PR: 20488 Submitted by: rwatson Notes: svn path=/head/; revision=65022
* | Respect X11BASE to derive the location of xauth(1)Kris Kennaway2000-08-231-0/+2
| | | | | | | | | | | | | | | | PR: 17818 Submitted by: Bjoern Fischer <bfischer@Techfak.Uni-Bielefeld.DE> Notes: svn path=/head/; revision=65020
* | Chalk up another phkmalloc victim.Jeroen Ruigrok van der Werven2000-08-011-2/+3
| | | | | | | | | | | | | | | | | | | | | | It seems as if uninitialised memory was the culprit. We may want to contribute this back to the OpenSSH project. Submitted by: Alexander Leidinger <Alexander@Leidinger.net> on -current. Notes: svn path=/head/; revision=64098
* | Fix a weird typo, is -> are.Jeroen Ruigrok van der Werven2000-07-271-1/+1
| | | | | | | | | | | | | | | | | | | | The OpenSSH maintainer probably want to contribute this back to the real OpenSSH guys. Submitted by: Jon Perkin <sketchy@netcraft.com> Notes: svn path=/head/; revision=63919
* | Fixed a minor typo in the header.Mark Ovens2000-07-271-1/+1
| | | | | | | | | | | | | | Pointed out by: asmodai Notes: svn path=/head/; revision=63915
* | Committed, Thanks!!Mark Ovens2000-07-251-1/+1
| | | | | | | | | | | | | | | | PR: 20108 Submitted by: Doug Lee Notes: svn path=/head/; revision=63849
* | Sync sshd_config with sshd and manapage internal defaults (Checkmail = yes)Peter Wemm2000-07-112-2/+2
| | | | | | | | Notes: svn path=/head/; revision=62944
* | Sync LoginGraceTime with sshd_config = 60 seconds by default, not 600.Peter Wemm2000-07-112-2/+2
| | | | | | | | Notes: svn path=/head/; revision=62943
* | Fix out-of-sync defaults. PermitRootLogin is supposed to be 'no' butPeter Wemm2000-07-112-2/+2
| | | | | | | | | | | | | | | | | | | | sshd's internal default was 'yes'. (if some cracker managed to trash /etc/ssh/sshd_config, then root logins could be reactivated) Approved by: kris Notes: svn path=/head/; revision=62942
* | Make FallBackToRsh off by default. Falling back to rsh by default isPeter Wemm2000-07-112-2/+2
| | | | | | | | | | | | | | | | | | silly in this day and age. Approved by: kris Notes: svn path=/head/; revision=62940
* | Allow restarting on SIGHUP when the full path was not given as argv[0].Brian Feldman2000-07-041-0/+1
| | | | | | | | | | | | | | We do have /proc/curproc/file :) Notes: svn path=/head/; revision=62567
* | So /this/ is what has made OpenSSH's SSHv2 support never work right!Brian Feldman2000-06-272-0/+6
| | | | | | | | | | | | | | | | | | In some cases, limits did not get set to the proper class, but instead always to "default", because not all passwd copies were done to completion. Notes: svn path=/head/; revision=62179
* | Also make sure to close the socket that exceeds your rate limit.Brian Feldman2000-06-261-0/+1
| | | | | | | | Notes: svn path=/head/; revision=62144
* | Make rate limiting work per-listening-socket. Log better messages thanBrian Feldman2000-06-263-30/+68
| | | | | | | | | | | | | | | | | | | | before for this, requiring a new function (get_ipaddr()). canohost.c receives a $FreeBSD$ line. Suggested by: Niels Provos <niels@OpenBSD.org> Notes: svn path=/head/; revision=62101
* | Fix syntax error in previous commit.Kris Kennaway2000-06-111-2/+3
| | | | | | | | | | | | | | Submitted by: Udo Schweigert <ust@cert.siemens.de> Notes: svn path=/head/; revision=61563
* | Fix security botch in "UseLogin Yes" case: commands are executed withKris Kennaway2000-06-101-0/+4
| | | | | | | | | | | | | | | | | | uid 0. Obtained from: OpenBSD Notes: svn path=/head/; revision=61529
* | Make `ssh-agent -k' work for csh(1)-like shells.Ruslan Ermilov2000-06-101-1/+1
| | | | | | | | Notes: svn path=/head/; revision=61498
* | Allow "DenyUsers" to function.Brian Feldman2000-06-061-0/+1
| | | | | | | | Notes: svn path=/head/; revision=61320
* | Resolve conflictsKris Kennaway2000-06-035-80/+33
| | | | | | | | Notes: svn path=/head/; revision=61212
* | This commit was generated by cvs2svn to compensate for changes in r61209,Kris Kennaway2000-06-038-159/+204
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=61210
| * Initial import of OpenSSH snapshot from 2000/05/30Kris Kennaway2000-06-0313-239/+237
| | | | | | | | | | | | | | Obtained from: OpenBSD Notes: svn path=/vendor-crypto/openssh/dist/; revision=61209
* | Resolve conflictsKris Kennaway2000-06-031-1/+7
| | | | | | | | Notes: svn path=/head/; revision=61208
* | This commit was generated by cvs2svn to compensate for changes in r61206,Kris Kennaway2000-06-031-0/+36
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=61207
| * Import from vendor repository.Kris Kennaway2000-06-032-1/+43
| | | | | | | | | | | | | | Obtained from: OpenBSD Notes: svn path=/vendor-crypto/openssh/dist/; revision=61206
* | Bring vendor patches onto the main branch, and resolve conflicts.Kris Kennaway2000-06-035-30/+72
| | | | | | | | Notes: svn path=/head/; revision=61203
* | This commit was generated by cvs2svn to compensate for changes in r61201,Kris Kennaway2000-06-031-2/+2
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=61202