Matt Johnston
8c53621c24
update for 2016.73
2016-03-18 22:44:36 +08:00
Matt Johnston
fdc61f3ab2
Get rid of group15, move group16 to sha512.
...
New groups are disabled by default pending
draft-ietf-curdle-ssh-kex-sha2-02 being finalised
2016-03-12 16:21:13 +08:00
Matt Johnston
97dff151ae
2016.72
2016-03-09 22:54:15 +08:00
Matt Johnston
5b2e57aa2f
2015.71
2015-12-03 21:23:54 +08:00
Matt Johnston
722944f307
2015.70
2015-11-26 23:04:13 +08:00
Matt Johnston
9e4e562cfb
2015.69
2015-11-25 23:07:47 +08:00
Matt Johnston
a461298109
Increase channel limit to 1000
2015-11-19 23:53:06 +08:00
Matt Johnston
84e18f72ae
changelog and version 2015.68
2015-08-08 20:35:28 +08:00
Matt Johnston
387ebccf36
increase MAX_CMD_LEN to 9000
2015-08-03 21:17:23 +08:00
Matt Johnston
2a431cab03
separate client/server fastopen options
2015-05-29 23:19:11 +08:00
Matt Johnston
31e379c300
merge from default
...
--HG--
branch : fastopen
2015-02-28 09:06:40 +08:00
Matt Johnston
21bed0d21a
Free memory before exiting. Based on patch from Thorsten Horstmann.
...
Client side is not complete.
2015-02-24 22:01:33 +08:00
Matt Johnston
f04a3a2cfa
Fixes for backwards compatibility
...
--HG--
branch : fastopen
2015-02-20 23:38:05 +08:00
Matt Johnston
19b3f01477
bump version
2015-01-28 22:57:33 +08:00
Matt Johnston
c890a0c133
changelog, version number bump
2014-10-23 21:43:00 +08:00
Matt Johnston
5e606a964b
increae MAX_STRING_LEN for sun ssh
2014-10-23 20:50:06 +08:00
Matt Johnston
6d2d3669f3
Make keepalive handling more robust, this should now match what OpenSSH does
2014-08-19 23:08:56 +08:00
Matt Johnston
cce29ba38c
2014.64
2014-08-08 21:40:42 +08:00
Matt Johnston
83511fecc0
Version 2014.64
2014-07-27 22:25:18 +08:00
Matt Johnston
ca86726f9f
Improve handling lots of concurrent forwarded connections. Increase
...
connection backlog, avoid check_close() for channels that haven't had IO
2014-06-25 23:42:39 +08:00
Matt Johnston
162fcab347
2014.63
2014-02-19 22:04:35 +08:00
Matt Johnston
5e4dc71907
CHANGES for 2014.63
2014-02-19 22:01:01 +08:00
Matt Johnston
2bc9f35052
Back out accidentally committed files
2014-01-23 22:29:04 +08:00
Matt Johnston
55a0c5068f
requirenext doesn't need two values
2014-01-23 22:25:52 +08:00
Matt Johnston
8081b0e033
Forgot to save the change
2014-01-17 21:42:32 +08:00
Matt Johnston
61cecbb337
DROPBEAR_CLI_AUTH_IMMEDIATE fixed, now enabled by default
2014-01-17 21:39:27 +08:00
Matt Johnston
511be4acc6
2013.62
2013-12-03 21:39:06 +08:00
Matt Johnston
4f6f651b7d
Only define LTM_DESC if it isn't already
2013-12-02 22:15:17 +08:00
Matt Johnston
aa029ed991
2013.61test
2013-11-14 22:24:10 +08:00
Matt Johnston
a65f84db38
- Some fixes for old compilers like tru64 v4 from Daniel Richard G.
...
- Don't warn about blocking random device for prngd
2013-11-14 21:36:45 +08:00
Matt Johnston
1e00d0b926
- Make curve25519 work after fixing a typo, interoperates with OpenSSH
...
- comment on ecc binary size effects
--HG--
branch : ecc
2013-11-09 00:02:26 +08:00
Matt Johnston
58fe1c2d2a
Add '-R' for delayed hostkey option
...
--HG--
branch : keyondemand
2013-11-07 23:49:37 +08:00
Matt Johnston
88ac2da7c2
A few small fixes for ECC compilation
...
--HG--
branch : ecc
2013-10-21 22:46:12 +08:00
Matt Johnston
45bd0edae5
Merge in changes from the past couple of releases
...
--HG--
branch : ecc
2013-10-18 21:38:01 +08:00
Matt Johnston
253cd3b66b
- 2013.60, update CHANGES
...
- Add CVE references to CHANGES
2013-10-16 22:32:31 +08:00
Matt Johnston
459d259185
Version 2013.59
2013-10-04 21:41:19 +08:00
Matt Johnston
04518e9e80
merge in HEAD
...
--HG--
branch : ecc
2013-05-21 12:09:35 +08:00
Matt Johnston
95a21c8fd7
ecdsa is working
...
--HG--
branch : ecc
2013-05-03 23:07:48 +08:00
Matt Johnston
79660f2eb1
more ecdsa signkey work, not correct
...
--HG--
branch : ecc
2013-04-28 23:17:43 +08:00
Matt Johnston
6da90b34fe
2013.58
2013-04-18 22:57:47 +08:00
Matt Johnston
43769b5bb3
Don't enable CLI_IMMEDIATE_AUTH by default, it breaks blank password logins
2013-04-18 21:47:38 +08:00
Matt Johnston
b4cdfcb506
bump version to 2013.57
2013-04-15 21:56:04 +08:00
Matt Johnston
7f091e7019
start on ecdsa keys
...
--HG--
branch : ecc
2013-04-09 00:36:04 +08:00
Matt Johnston
c797c1750c
- Fix various hardcoded uses of SHA1
...
- rename curves to nistp256 etc
- fix svr-auth.c TRACE problem
--HG--
branch : ecc
2013-04-08 00:10:57 +08:00
Matt Johnston
c6bdc810ab
ecc kind of works, needs fixing/testing
...
--HG--
branch : ecc
2013-04-07 01:36:42 +08:00
Matt Johnston
cbd3d5e3a5
Put some #ifdef options around first-follows options in case they
...
need to be disabled
--HG--
branch : kexguess
2013-04-03 00:43:31 +08:00
Matt Johnston
78fbed8c3e
Don't usually need to recalculate dh_e for the repeated kexdh_init packet
...
--HG--
branch : kexguess
2013-04-03 00:32:55 +08:00
Matt Johnston
484516da51
Send an auth packet straight away, save another roundtrip
...
This needs a bit of testing to make sure it doesn't have side-effects.
2013-03-31 23:48:25 +08:00
Matt Johnston
b4bcc60657
More changes for KEX and ECDH. Set up hash descriptors, make ECC code work,
...
ses.hash and ses.session_id are now buffers (doesn't compile)
--HG--
branch : ecc
2013-03-29 00:28:09 +08:00
Matt Johnston
74cad1612f
more bits on ecc branch
...
--HG--
branch : ecc
2013-03-27 00:38:03 +08:00
Matt Johnston
73e22c115c
refactor kexdh code a bit, start working on ecdh etc
...
--HG--
branch : ecc
2013-03-26 01:35:22 +08:00
Matt Johnston
5996c3824c
Add ~. and ~^Z handling to exit/suspend dbclient
2013-03-23 23:16:06 +08:00
Matt Johnston
fcaaa7b4c2
2013.56 changelog
2013-03-21 23:19:06 +08:00
Matt Johnston
024d268d8c
Make hmac-sha2-256 and hmac-sha2-512 work
2013-03-21 22:55:12 +08:00
Matt Johnston
d37dcc636f
Merge "none" cipher/MAC branch. Also adds sha256 and sha512
2013-03-20 22:41:07 +08:00
Matt Johnston
d5ccc32b4d
Improve RNG seeding.
...
Try to read from /dev/urandom multiple times, take input from extra sources,
and use /dev/random when generating private keys
2012-06-29 23:19:43 +08:00
Matt Johnston
c62e53807f
- Add hmac-sha2-256 and hmac-sha2-512. Needs debugging, seems to be
...
getting keyed incorrectly
--HG--
branch : sha2
2012-05-10 08:38:37 +08:00
Andrey Mazo
d4a14fcb3d
Fixed compilation with unset ENABLE_{SVR,CLI}_AGENTFWD.
...
Got rid of ENABLE_AGENTFWD macro.
2012-03-26 16:17:16 +04:00
Matt Johnston
49b79fa02d
Rename HAVE_FORK to USE_VFORK
...
It makes it a bit more obvious why there's a test there since HAVE_FORK
is the normal case.
2012-04-09 20:35:13 +08:00
Matt Johnston
4dda424f74
2012.55
2012-02-22 22:12:15 +08:00
Matt Johnston
eb45ce0e8a
Changelog and version bump for 2011.54
2011-11-08 20:48:15 +08:00
Matt Johnston
8a545a0d04
Update changelog for 0.53.1
...
--HG--
extra : convert_revision : c7f6c45c46a2f8e2394756c68ae825d6e4dc7489
2011-03-02 13:23:27 +00:00
Matt Johnston
0993e44b4f
merge of '8a608f0ed5e4b491dba4bf330e560636ec7376fd'
...
and 'b31879a384d3bf8cbcbe2ed731d7d79d49799b1d'
--HG--
extra : convert_revision : dfa0557e6070859d23ff096789f339e51a870177
2011-02-28 13:51:34 +00:00
Matt Johnston
d634b502cf
- Don't allow setting memLevel since that doesn't work properly
...
- Better handling of the case where compressing makes the data
larger (possibly only happens when memLevel is adjusted, but better
to be safe)
--HG--
extra : convert_revision : b31879a384d3bf8cbcbe2ed731d7d79d49799b1d
2011-02-28 13:51:27 +00:00
Matt Johnston
53fc7eaf03
Compile fix for when both client and server agent forwarding is disabled
...
--HG--
extra : convert_revision : 8a608f0ed5e4b491dba4bf330e560636ec7376fd
2011-02-28 13:39:18 +00:00
Matt Johnston
3c42c5407c
Refer to RFCs rather than drafts, update some section references
...
--HG--
extra : convert_revision : b5c5c88e702f427b9d5e8c592e2b7e1bda204ff3
2011-02-27 13:57:32 +00:00
Matt Johnston
977c43fffb
Changelog for 0.53, bump version
...
--HG--
extra : convert_revision : 5369d8c2cbcbc07a86fce6a1b66ebd4979866a2d
2011-02-24 14:19:36 +00:00
Matt Johnston
0ffdf2bba9
Add diffie-hellman-group14-sha1 KEX method
...
--HG--
extra : convert_revision : 5b9c394ad43745e48c42d671cefac7a5c346082f
2011-02-24 12:42:42 +00:00
Matt Johnston
c6582dbe37
Make it compile, update for changes in channel structure.
...
--HG--
branch : agent-client
extra : convert_revision : 84676a98a0848224078a716b1292744a34e9d80c
2009-07-01 04:53:17 +00:00
Matt Johnston
c04cc62ebf
- Allow building with neither server nor client specified
...
--HG--
extra : convert_revision : d9a8b717bf65021efa4c61c34faf24d050d95da4
2008-11-18 12:53:39 +00:00
Matt Johnston
4fc5a52850
- Bump to 0.52
...
- Clarify that hosts are resolved on the remote end for multihop
--HG--
extra : convert_revision : acde944b3ea0b8f673c276d2921c6bb3ede8ddde
2008-11-11 14:08:48 +00:00
Matt Johnston
511f6555c9
- Add Counter Mode support
...
--HG--
extra : convert_revision : 5225162bdf32d70b58b6d3ae375a290326c59f3a
2008-09-29 13:53:31 +00:00
Matt Johnston
049fcf1ac5
Add support for zlib@openssh.com delayed compression.
...
Are still advertising 'zlib' for the server, need to allow
delayed-only as an option
--HG--
extra : convert_revision : 319df675cc3c9b35a10b7d8357c94f33fdab1a46
2008-09-29 02:23:04 +00:00
Matt Johnston
90f8c1fd51
Split options.h out into sysoptions.h for options that aren't usually
...
user-changed
--HG--
extra : convert_revision : 4fb35083f0f46ea667e7043e7d4314aecd3df46c
2008-09-23 16:02:51 +00:00