Matt Johnston
4058574cfa
add curve25519-sha256 without @libssh.org
2018-02-20 19:35:26 +08:00
stellarpower
d17dedfa4f
Added the -G option to allow logins only for users that are members of a certain group. This allows finer control of an instance on who can and cannot login over a certain instance (e.g. password and not key). Needs double-checking and ensuring it meets platform requirements.
2018-02-20 02:11:55 +00:00
Matt Johnston
4768351e89
Remove bad merged libtommmath "clean" rule and leftover makefile.include
2018-02-19 23:04:46 +08:00
Matt Johnston
3f3f399231
- Fix dependencies and remove old default_options.h from version control
...
- Rename default_options.h.in -> default_options.h, and
default_options.h -> default_options_guard.h
- Fix newlines in default_options.h
2018-02-19 22:16:50 +08:00
Matt Johnston
316c923188
draft CHANGES
2018-02-18 23:48:32 +08:00
Matt Johnston
8fdaf0268d
missed regenerating
2018-02-18 23:48:24 +08:00
Matt Johnston
f2d86ae7d3
group14-sha256 should be higher than group14-sha1
2018-02-18 22:47:51 +08:00
Matt Johnston
34ee326075
clean up some default options
...
- move hmac-sha2-512, hmac-md5, twofish_ctr to sysoptions.h, off by default
- try and improve text for KEX methods
2018-02-18 22:27:51 +08:00
Matt Johnston
1656db9e58
Add dbclient '-J &fd' option for a file descriptor
...
Based on patch by Harald Becker
2018-02-18 15:12:15 +08:00
Matt Johnston
802dace05e
include config.h for options.h. don't need to include options.h when
...
includes.h brings it in
2018-02-18 11:22:13 +08:00
Matt Johnston
c2f2f2b817
rename some options and move some to sysoptions.h
2018-02-18 00:29:17 +08:00
Matt Johnston
dcb41e91eb
limit rsa->e size to 64 bits
...
--HG--
branch : fuzz
2018-02-17 19:41:44 +08:00
Matt Johnston
67111efdad
limit rsa->e size to 64 bits
2018-02-17 19:41:44 +08:00
Matt Johnston
5fd677af76
12 years is too old for a TODO list
2018-02-20 19:30:34 +08:00
Matt Johnston
b080f5a047
rename default_options.h.in in docs too
2018-02-20 19:29:55 +08:00
Matt Johnston
7e8094d53a
merge from main
...
--HG--
branch : fuzz
2018-02-17 19:29:51 +08:00
Matt Johnston
c8d852caf6
loginrec close fd on error path
2018-02-17 12:16:18 +08:00
François Perrad
f042eb41ab
more linting ( #55 )
...
* dropbear_exit: remove priority parameter
confusion with dropbear_log()
* const parameter
2018-02-17 11:27:37 +08:00
Loganaden Velvindron
017e2f07a7
Add Spectre v2 mitigations for GCC ( #54 )
2018-02-16 23:35:32 +08:00
Matt Johnston
3a923b72a4
Merge branch 'master' of github.com:mkj/dropbear
2018-02-16 23:33:46 +08:00
Francois Perrad
5bf1214859
use NULL instead of 0
2018-02-16 23:32:11 +08:00
Francois Perrad
2ef1ab0753
fix indentation
2018-02-16 23:31:58 +08:00
Matt Johnston
c218af6ea7
merge
2018-02-16 23:17:48 +08:00
Matt Johnston
e0748b1970
Remove accidentally committed DROPBEAR_FUZZ
2018-02-16 23:17:15 +08:00
Michael Witten
3ee685ad1c
options: Complete the transition to numeric toggles (`#if')
...
For the sake of review, this commit alters only the code; the affiliated
comments within the source files also need to be updated, but doing so
now would obscure the operational changes that have been made here.
* All on/off options have been switched to the numeric `#if' variant;
that is the only way to make this `default_options.h.in' thing work
in a reasonable manner.
* There is now some very minor compile-time checking of the user's
choice of options.
* NO_FAST_EXPTMOD doesn't seem to be used, so it has been removed.
* ENABLE_USER_ALGO_LIST was supposed to be renamed DROPBEAR_USER_ALGO_LIST,
and this commit completes that work.
* DROPBEAR_FUZZ seems to be a relatively new, as-yet undocumented option,
which was added by the following commit:
commit 6e0b539e9c
Author: Matt Johnston <matt@ucc.asn.au>
Date: Tue May 23 22:29:21 2017 +0800
split out checkpubkey_line() separately
It has now been added to `sysoptions.h' and defined as `0' by default.
* The configuration option `DROPBEAR_PASSWORD_ENV' is no longer listed in
`default_options.h.in'; it is no longer meant to be set by the user, and
is instead left to be defined in `sysoptions.h' (where it was already being
defined) as merely the name of the environment variable in question:
DROPBEAR_PASSWORD
To enable or disable use of that environment variable, the user must now
toggle `DROPBEAR_USE_DROPBEAR_PASSWORD'.
* The sFTP support is now toggled by setting `DROPBEAR_SFTPSERVER', and the
path of the sFTP server program is set independently through the usual
SFTPSERVER_PATH.
2018-02-16 23:13:47 +08:00
Matt Johnston
17be46e229
disallow inetd -v
2018-02-15 23:30:54 +08:00
Matt Johnston
370d4c7cd5
fix unused variable from merge
2018-02-14 23:09:40 +08:00
Matt Johnston
1700987bfc
fix compile warnings
2018-02-14 23:09:28 +08:00
Matt Johnston
a1aa161527
make signal flags volatile, simplify handling
2018-02-14 23:06:01 +08:00
Matt Johnston
9a7972dcb8
Move DEBUG_TRACE to default_options
2018-02-14 00:24:44 +08:00
Matt Johnston
191f22e11a
Update build instructions for localoptions, and tidy
2018-02-14 00:24:32 +08:00
Matt Johnston
93632660bb
update some dependencies
2018-02-14 00:17:30 +08:00
Matt Johnston
84d415fb66
update default_options.h
2018-02-14 00:17:22 +08:00
Michael Witten
ad9db51434
build: Remove unused constructs: space' and
AC_PROG_MAKE_SET'
...
The makefile variable `space' is never used.
The autoconf output variable `SET_MAKE' is never used, so the
autoconf macro `AC_PROG_MAKE_SET' has been removed.
2018-02-11 23:43:19 +08:00
Matt Johnston
1a37d7aa48
Removed commented out code
2018-02-11 23:03:31 +08:00
Matt Johnston
22eb197d6c
Fix building default_options.h
2018-02-11 10:53:59 +08:00
Matt Johnston
3953018c2d
simplify error handling, check mp_copy return value
2018-02-10 19:25:00 +08:00
Matt Johnston
cfe99a79bd
limit travis branches
2018-02-10 19:06:30 +08:00
Matt Johnston
ee812daf69
Use an explicit matrix instead, avoid bad clang combinations etc
2018-02-10 18:57:44 +08:00
Matt Johnston
df66daa26a
use parent $CC etc
2018-02-10 18:57:20 +08:00
Matt Johnston
8013009880
pass CFLAGS to LTC_CFLAGS
2018-02-10 00:12:31 +08:00
Matt Johnston
95b99cc86a
cast m_burn argument away from volatile
2018-02-10 00:12:22 +08:00
Matt Johnston
6a713ad834
exclude clang rather than osx for unbundled libtom
2018-02-10 00:09:02 +08:00
Matt Johnston
c81e530d3c
missed saving a file removing none cipher
2018-02-09 23:58:13 +08:00
Matt Johnston
4b021ae6f0
Remove none cipher
2018-02-09 23:40:23 +08:00
Matt Johnston
a36f182b36
Put Dropbear config in a separate file
...
Patch out MECC DER
2018-02-09 23:35:07 +08:00
Matt Johnston
d8bb6a7816
Fix commenting out
2018-02-09 23:34:48 +08:00
Matt Johnston
57d474e183
add $srcdir as needed
2018-02-09 23:34:03 +08:00
Matt Johnston
d7e12aadbe
generate list of libtomcrypt directories automatically
2018-02-09 23:33:41 +08:00
Matt Johnston
c0df3902b7
Update Makefile.in
2018-02-09 22:19:42 +08:00