summaryrefslogtreecommitdiff
path: root/readconf.c
Commit message (Collapse)AuthorAgeFilesLines
* - djm@cvs.openbsd.org 2005/06/08 11:25:09djm2005-06-161-2/+22
| | | | | | [clientloop.c readconf.c readconf.h ssh.c ssh_config.5] add ControlMaster=auto/autoask options to support opportunistic multiplexing; tested avsm@ and jakob@, ok markus@
* - markus@cvs.openbsd.org 2005/05/16 15:30:51djm2005-05-261-1/+4
| | | | | [readconf.c servconf.c] check return value from strdelim() for NULL (AddressFamily); mpech
* - deraadt@cvs.openbsd.org 2005/03/10 22:01:05dtucker2005-03-141-2/+2
| | | | | | | [misc.c ssh-keygen.c servconf.c clientloop.c auth-options.c ssh-add.c monitor.c sftp-client.c bufaux.h hostfile.c ssh.c sshconnect.c channels.c readconf.c bufaux.c sftp.c] spacing
* - dtucker@cvs.openbsd.org 2005/03/10 10:15:02dtucker2005-03-141-3/+5
| | | | | | [readconf.c] Check listen addresses for null, prevents xfree from dying during ClearAllForwardings (bz #996). From Craig Leres, ok markus@
* - djm@cvs.openbsd.org 2005/03/04 08:48:06djm2005-03-051-1/+3
| | | | | [readconf.c] fix SendEnv config parsing bug found by Roumen Petrov; ok dtucker@
* - djm@cvs.openbsd.org 2005/03/01 10:40:27djm2005-03-011-2/+10
| | | | | | | | [hostfile.c hostfile.h readconf.c readconf.h ssh.1 ssh_config.5] [sshconnect.c sshd.8] add support for hashing host names and addresses added to known_hosts files, to improve privacy of which hosts user have been visiting; ok markus@ deraadt@
* - djm@cvs.openbsd.org 2005/03/01 10:09:52djm2005-03-011-38/+119
| | | | | | | | | | [auth-options.c channels.c channels.h clientloop.c compat.c compat.h] [misc.c misc.h readconf.c readconf.h servconf.c ssh.1 ssh.c ssh_config.5] [sshd_config.5] bz#413: allow optional specification of bind address for port forwardings. Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports.
* - deraadt@cvs.openbsd.org 2004/07/11 17:48:47dtucker2004-07-171-3/+3
| | | | | | | | [channels.c cipher.c clientloop.c clientloop.h compat.h moduli.c readconf.c nchan.c pathnames.h progressmeter.c readconf.h servconf.c session.c sftp-client.c sftp.c ssh-agent.1 ssh-keygen.c ssh.c ssh1.h sshd.c ttymodes.h] spaces
* - djm@cvs.openbsd.org 2004/06/17 15:10:14djm2004-06-171-2/+2
| | | | | | [clientloop.c misc.h readconf.c readpass.c ssh.c ssh_config.5] Add option for confirmation (ControlMaster=ask) via ssh-askpass before opening shared connections; ok markus@
* - djm@cvs.openbsd.org 2004/06/13 15:03:02djm2004-06-151-2/+16
| | | | | | | [channels.c channels.h clientloop.c clientloop.h includes.h readconf.c] [readconf.h scp.1 sftp.1 ssh.1 ssh.c ssh_config.5] implement session multiplexing in the client (the server has supported this since 2.0); ok markus@
* - dtucker@cvs.openbsd.org 2004/05/27 00:50:13djm2004-06-151-8/+3
| | | | | [readconf.c] Kill dead code after fatal(); ok djm@
* - djm@cvs.openbsd.org 2004/04/27 09:46:37dtucker2004-05-021-1/+17
| | | | | | | [readconf.c readconf.h servconf.c servconf.h session.c session.h ssh.c ssh_config.5 sshd_config.5] bz #815: implement ability to pass specified environment variables from the client to the server; ok markus@
* - djm@cvs.openbsd.org 2004/04/18 23:10:26djm2004-04-201-4/+19
| | | | | | | [readconf.c readconf.h ssh-keysign.c ssh.c] perform strict ownership and modes checks for ~/.ssh/config files, as these can be used to execute arbitrary programs; ok markus@ NB. ssh will now exit when it detects a config with poor permissions
* - markus@cvs.openbsd.org 2004/03/05 10:53:58djm2004-03-081-2/+10
| | | | | [readconf.c readconf.h scp.1 sftp.1 ssh.1 ssh_config.5 sshconnect2.c] add IdentitiesOnly; ok djm@, pb@
* - markus@cvs.openbsd.org 2003/12/16 15:49:51djm2003-12-171-2/+19
| | | | | | | | [clientloop.c clientloop.h readconf.c readconf.h scp.1 sftp.1 ssh.1] [ssh.c ssh_config.5] application layer keep alive (ServerAliveInterval ServerAliveCountMax) for ssh(1), similar to the sshd(8) option; ok beck@; with help from jmc and dtucker@
* - markus@cvs.openbsd.org 2003/12/09 21:53:37djm2003-12-171-9/+10
| | | | | | | [readconf.c readconf.h scp.1 servconf.c servconf.h sftp.1 ssh.1] [ssh_config.5 sshconnect.c sshd.c sshd_config.5] rename keepalive to tcpkeepalive; the old name causes too much confusion; ok djm, dtucker; with help from jmc@
* - jakob@cvs.openbsd.org 2003/11/12 16:39:58djm2003-11-171-2/+3
| | | | | [dns.c dns.h readconf.c ssh_config.5 sshconnect.c] update SSHFP validation. ok markus@
* - jakob@cvs.openbsd.org 2003/10/14 19:42:10dtucker2003-10-151-5/+1
| | | | | [dns.c dns.h readconf.c ssh-keygen.c sshconnect.c] include SSHFP lookup code (not enabled by default). ok markus@
* - markus@cvs.openbsd.org 2003/10/11 08:24:08dtucker2003-10-151-2/+10
| | | | | | | [readconf.c readconf.h ssh.1 ssh.c ssh_config.5] remote x11 clients are now untrusted by default, uses xauth(8) to generate untrusted cookies; ForwardX11Trusted=yes restores old behaviour. ok deraadt; feedback and ok djm/fries
* - markus@cvs.openbsd.org 2003/10/08 15:21:24dtucker2003-10-151-2/+2
| | | | | [readconf.c ssh_config.5] default GSS API to no in client, too; ok jakob, deraadt@
* - markus@cvs.openbsd.org 2003/09/01 18:15:50djm2003-09-021-16/+1
| | | | | [readconf.c readconf.h servconf.c servconf.h ssh.c] remove unused kerberos code; ok henning@
* - markus@cvs.openbsd.org 2003/09/01 12:50:46djm2003-09-021-2/+1
| | | | | [readconf.c] rm gssapidelegatecreds alias; never supported before
* - markus@cvs.openbsd.org 2003/08/28 12:54:34djm2003-09-021-6/+1
| | | | | | | | [auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c] [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5] [sshconnect1.c sshd.c sshd_config sshd_config.5] remove kerberos support from ssh1, since it has been replaced with GSSAPI; but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
* - markus@cvs.openbsd.org 2003/08/22 10:56:09dtucker2003-08-261-2/+24
| | | | | | | | | [auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c session.h ssh-gss.h ssh_config.5 sshconnect2.c sshd_config sshd_config.5] support GSS API user authentication; patches from Simon Wilkinson, stripped down and tested by Jakob and myself.
* - markus@cvs.openbsd.org 2003/08/13 09:07:10dtucker2003-08-131-2/+2
| | | | | [readconf.c ssh.c] socks4->socks, since with support both 4 and 5; dtucker@zip.com.au
* - markus@cvs.openbsd.org 2003/08/13 08:46:31dtucker2003-08-131-12/+3
| | | | | | | [auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5] remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@, fgsch@, miod@, henning@, jakob@ and others
* - (dtucker) OpenBSD CVS SyncPOST_KRB4_REMOVALdtucker2003-08-021-14/+3
| | | | | | | | | | | | | - markus@cvs.openbsd.org 2003/07/22 13:35:22 [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h] remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henning@ - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support. - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files. I hope I got this right....
* - djm@cvs.openbsd.org 2003/07/03 08:09:06dtucker2003-07-031-5/+10
| | | | | | [readconf.c readconf.h ssh-keysign.c ssh.c] fix AddressFamily option in config file, from brent@graveland.net; ok markus@
* - markus@cvs.openbsd.org 2003/06/26 20:08:33dtucker2003-06-281-1/+3
| | | | | [readconf.c] do not dump core for 'ssh -o proxycommand host'; ok deraadt@
* - djm@cvs.openbsd.org 2003/05/16 03:27:12djm2003-05-181-1/+16
| | | | | | [readconf.c ssh_config ssh_config.5 ssh-keysign.c] add AddressFamily option to ssh_config (like -4, -6 on commandline). Portable bug #534; ok markus@
* - djm@cvs.openbsd.org 2003/05/15 14:55:25djm2003-05-161-2/+18
| | | | | | [readconf.c readconf.h ssh_config ssh_config.5 sshconnect.c] add a ConnectTimeout option to ssh, based on patch from Jean-Charles Longuet (jclonguet at free.fr); portable #207 ok markus@
* - jakob@cvs.openbsd.org 2003/05/15 14:02:47djm2003-05-161-14/+24
| | | | | [readconf.c servconf.c] warn for unsupported config option. ok markus@
* - jakob@cvs.openbsd.org 2003/05/15 04:08:44djm2003-05-151-1/+13
| | | | | [readconf.c servconf.c] disable kerberos when not supported. ok markus@
* - jakob@cvs.openbsd.org 2003/05/15 01:48:10djm2003-05-151-34/+6
| | | | | | [readconf.c readconf.h servconf.c servconf.h] always parse kerberos options. ok djm@ markus@ - (djm) Always parse UsePAM
* - jakob@cvs.openbsd.org 2003/05/14 18:16:20djm2003-05-151-2/+10
| | | | | | | | [key.c key.h readconf.c readconf.h ssh_config.5 sshconnect.c] [dns.c dns.h README.dns ssh-keygen.1 ssh-keygen.c] add experimental support for verifying hos keys using DNS as described in draft-ietf-secsh-dns-xx.txt. more information in README.dns. ok markus@ and henning@
* - (djm) OpenBSD CVS Syncdjm2003-05-141-1/+8
| | | | | | | - djm@cvs.openbsd.org 2003/04/09 12:00:37 [readconf.c] strip trailing whitespace from config lines before parsing. Fixes bz 528; ok markus@
* - (djm) OpenBSD CVS Syncdjm2003-04-091-2/+31
| | | | | | | - markus@cvs.openbsd.org 2003/04/02 09:48:07 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c] [readconf.h serverloop.c sshconnect2.c] reapply rekeying chage, tested by henning@, ok djm@
* - markus@cvs.openbsd.org 2003/04/01 10:10:23djm2003-04-011-1/+1
| | | | | | | | | | | | | | | | | | | [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c] [readconf.h serverloop.c sshconnect2.c] rekeying bugfixes and automatic rekeying: * both client and server rekey _automatically_ (a) after 2^31 packets, because after 2^32 packets the sequence number for packets wraps (b) after 2^(blocksize_in_bits/4) blocks (see: draft-ietf-secsh-newmodes-00.txt) (a) and (b) are _enabled_ by default, and only disabled for known openssh versions, that don't support rekeying properly. * client option 'RekeyLimit' * do not reply to requests during rekeying - markus@cvs.openbsd.org 2003/04/01 10:22:21 [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c] [readconf.h serverloop.c sshconnect2.c] backout rekeying changes (for 3.6.1)
* - markus@cvs.openbsd.org 2003/02/05 09:02:28djm2003-02-241-11/+6
| | | | | [readconf.c] simplify ProxyCommand parsing, remove strcat/xrealloc; ok henning@, djm@
* - markus@cvs.openbsd.org 2002/11/07 22:08:07mouring2002-11-091-1/+10
| | | | | | | | | [readconf.c readconf.h ssh-keysign.8 ssh-keysign.c] we cannot use HostbasedAuthentication for enabling ssh-keysign(8), because HostbasedAuthentication might be enabled based on the target host and ssh-keysign(8) does not know the remote hostname and not trust ssh(1) about the hostname, so we add a new option EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
* - (bal) NO_IPPORT_RESERVED_CONCEPT used instead of CYGWIN so other platformsmouring2002-07-091-1/+1
| | | | lacking that concept can share it. Patch by vinschen@redhat.com
* - deraadt@cvs.openbsd.org 2002/06/19 00:27:55mouring2002-06-211-2/+2
| | | | | | | | | [auth-bsdauth.c auth-skey.c auth1.c auth2-chall.c auth2-none.c authfd.c authfd.h monitor_wrap.c msg.c nchan.c radix.c readconf.c scp.c sftp.1 ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh-keysign.c ssh.1 sshconnect.c sshconnect.h sshconnect2.c ttymodes.c xmalloc.h] KNF done automatically while reading....
* - stevesk@cvs.openbsd.org 2002/06/10 17:45:20mouring2002-06-111-3/+3
| | | | | | [readconf.c ssh.1] change RhostsRSAAuthentication and RhostsAuthentication default to no since ssh is no longer setuid root by default; ok markus@
* - markus@cvs.openbsd.org 2002/06/08 12:46:14mouring2002-06-091-3/+3
| | | | | | [readconf.c] silently ignore deprecated options, since FallBackToRsh might be passed by remote scp commands.
* - markus@cvs.openbsd.org 2002/06/08 05:40:01mouring2002-06-091-2/+2
| | | | | [readconf.c] just warn about Deprecated options for now
* - markus@cvs.openbsd.org 2002/06/08 05:17:01mouring2002-06-091-23/+13
| | | | | [readconf.c readconf.h ssh.1 ssh.c] deprecate FallBackToRsh and UseRsh; patch from djm@
* - markus@cvs.openbsd.org 2002/02/04 12:15:25djm2002-02-051-5/+5
| | | | | | [log.c log.h readconf.c servconf.c] add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1, fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@
* - stevesk@cvs.openbsd.org 2002/01/04 17:59:17djm2002-01-221-3/+1
| | | | | [readconf.c servconf.c] remove #ifdef _PATH_XAUTH/#endif; ok markus@
* - deraadt@cvs.openbsd.org 2001/12/19 07:18:56djm2001-12-211-16/+16
| | | | | | | | | | | | [auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h] [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c] [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c] [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c] [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c] [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c] [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config] [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c] basic KNF done while i was looking for something else
* - stevesk@cvs.openbsd.org 2001/11/17 19:14:34mouring2001-12-061-2/+2
| | | | | [auth2.c auth.c readconf.c servconf.c ssh-agent.c ssh-keygen.c] enum/int type cleanup where it made sense to do so; ok markus@
View Lorry Controller Status