Commit Graph

  • ff763e4005 - Get rid of decryptreadbuf, just decrypt in-place with readbuf - Share make_mac function for both packet creation and validation - Split recv/trans parts of key_context into their own structures Matt Johnston 2009-03-01 16:15:57 +00:00
  • 8e72bbaa9d Encrypt in-place, avoid an extra malloc Matt Johnston 2009-03-01 14:38:25 +00:00
  • 4b37932ba1 merge of 'e1c100e6366c5d607af08f4abdbb0f4281df4fa9' and 'fe8161b0698c9816b98f79e3cab2b9d59f2be71b' Matt Johnston 2009-02-26 13:21:14 +00:00
  • d1bfb6bfb7 disapproval of revision 'a101cbd046507cf723e6362a49196dbd4b924042' Matt Johnston 2009-02-26 13:20:53 +00:00
  • 35f3d2ff90 merge of 'a101cbd046507cf723e6362a49196dbd4b924042' and 'c8e1b84cfe874887ad7df0dd95a00de46dbc0136' Matt Johnston 2009-02-26 12:18:34 +00:00
  • a60cb7dbaa - Try to write out as much as we can Matt Johnston 2009-02-26 12:18:11 +00:00
  • cca4e1a080 - Don't be dumb and encrypt/decrypt in a while() loop - why did I do this?? Matt Johnston 2009-02-25 14:04:02 +00:00
  • c04cc62ebf - Allow building with neither server nor client specified Matt Johnston 2008-11-18 12:53:39 +00:00
  • 8158e952b9 - Use the right variable notation Matt Johnston 2008-11-18 12:53:02 +00:00
  • b717efb577 Only use -lcrypt for Dropbear server binary Matt Johnston 2008-11-17 14:04:14 +00:00
  • 3dbc707820 - Add a date for the release DROPBEAR_0.52 Matt Johnston 2008-11-12 13:13:00 +00:00
  • 5a2dde814d PAM shouldn't be on by default Matt Johnston 2008-11-11 14:15:54 +00:00
  • 4fc5a52850 - Bump to 0.52 - Clarify that hosts are resolved on the remote end for multihop Matt Johnston 2008-11-11 14:08:48 +00:00
  • d005aa139e - Document idle_timeout Matt Johnston 2008-11-11 13:51:55 +00:00
  • 5efdd391eb Mention DSS and DSA being the same thing Matt Johnston 2008-11-09 10:59:19 +00:00
  • adc4d0194f Idle timeout patch from Farrell Aultman. Needs testing, unsure if server code works Matt Johnston 2008-11-07 14:11:06 +00:00
  • 1912439526 Update nocrypto branch to current head Matt Johnston 2008-11-06 13:33:06 +00:00
  • 800810a181 propagate from branch 'au.asn.ucc.matt.dropbear' (head cdcc3c729e29544e8b98a408e2dc60e4483dfd2a) to branch 'au.asn.ucc.matt.dropbear.insecure-nocrypto' (head 0ca38a1cf349f7426ac9de34ebe4c3e3735effab) Matt Johnston 2008-11-06 13:16:55 +00:00
  • e80f8e8c09 - Update manuals, include section on authorized_keys - Change default PATH to /usr/bin:/bin - Mention DEBUG_TRACE in -v help text Matt Johnston 2008-11-05 14:14:40 +00:00
  • 1fdfa2ecfd LICENSE - Update copyright to 2008 cli-runopts.c - mention that -v is for DEBUG_TRACE, add multihop syntax dbclient.1 - document some new features Matt Johnston 2008-11-05 13:53:14 +00:00
  • 51dcfc06dc - Set a default path, since bash won't export one otherwise (though it will set one, leading to mysterious problems) - Rearrange some options Matt Johnston 2008-11-05 13:30:23 +00:00
  • 8edc0c2afc Give a umask argument to open() in loginrec Matt Johnston 2008-11-05 13:14:38 +00:00
  • ebc3a3ac74 - use vfork()/_exit() for uclinux Matt Johnston 2008-11-02 13:34:02 +00:00
  • 5cd6995fb5 Report errors if a remote request fails Matt Johnston 2008-11-02 12:25:08 +00:00
  • ed79abed76 Don't use // style comments Matt Johnston 2008-11-02 12:01:39 +00:00
  • c2bd79131a - Get rid of blowfish and twofish CTR since they weren't likely to be that useful Matt Johnston 2008-09-29 14:30:47 +00:00
  • 511f6555c9 - Add Counter Mode support Matt Johnston 2008-09-29 13:53:31 +00:00
  • 049fcf1ac5 Add support for zlib@openssh.com delayed compression. Are still advertising 'zlib' for the server, need to allow delayed-only as an option Matt Johnston 2008-09-29 02:23:04 +00:00
  • e674c73ee6 propagate from branch 'au.asn.ucc.matt.dropbear' (head 4fb35083f0f46ea667e7043e7d4314aecd3df46c) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head 833d0adef6cdbf43ea75283524c665e70b0ee1ee) Matt Johnston 2008-09-23 16:05:04 +00:00
  • 90f8c1fd51 Split options.h out into sysoptions.h for options that aren't usually user-changed Matt Johnston 2008-09-23 16:02:51 +00:00
  • 729aa017d3 merge of '6fd2597077a4e2421bf45388e058d15606f6dd74' and 'c7b916e6c522f16f06fe1bd52815ba13aa88b90b' Matt Johnston 2008-09-23 15:57:32 +00:00
  • efe45cddbe - Enable -s for specifying a subsystem (such as sftp) Matt Johnston 2008-09-23 15:57:26 +00:00
  • 6fe6393acb propagate from branch 'au.asn.ucc.matt.dropbear.pubkey-options' (head 537a6ebebb46424b967ffe787f0f8560e5f447e8) to branch 'au.asn.ucc.matt.dropbear' (head 10b2f286b9886364db39dfbb4f8f46e49e345d87) Matt Johnston 2008-09-23 13:16:22 +00:00
  • b98d13effb Don't send anything in response to a SSH_MSG_CHANNEL_REQUEST if we have already sent a SSH_MSG_CHANNEL_CLOSE. This fixes a bug triggered by more recent versions of putty with tcp fowarding and window adjustment request messages. Matt Johnston 2008-09-23 12:03:01 +00:00
  • 299d26dab7 - Work around rsync and scp parsing and modifying the user@host argument, which break's dbclient's multihop syntax Matt Johnston 2008-09-22 15:47:35 +00:00
  • 643626d546 Replace calls to strtoul() with a helper m_str_to_uint() Matt Johnston 2008-09-22 14:13:44 +00:00
  • e1a8bf0240 Remove an unused variable Matt Johnston 2008-09-22 14:13:14 +00:00
  • d54f38caf2 - Improve DNS failure message to include lookup host Matt Johnston 2008-09-18 16:34:18 +00:00
  • d981ff2c8d - Allow specifying a port with host/port. - Rearrange multihop hostname parsing Matt Johnston 2008-09-18 16:01:59 +00:00
  • bece6ddcc2 Print "Login for user@host" for keyboard interactive, since it probably isn't clear from the remote host's prompt Matt Johnston 2008-09-18 16:01:02 +00:00
  • f4aacaa74c Add multihop 'onion-forwarding' mode. Needs refinement, works. Matt Johnston 2008-09-18 14:47:02 +00:00
  • 66e2f59c7b propagate from branch 'au.asn.ucc.matt.dropbear.dbclient-netcat-alike' (head b02ba6628cf2095017c60d202ac630f231e6b553) to branch 'au.asn.ucc.matt.dropbear' (head 636506b73e973b004cc058b07e6f36a25ff902f8) Matt Johnston 2008-09-17 14:49:12 +00:00
  • af00c78e21 Rework netcat-alike to be a proper mode, with -B argument. Matt Johnston 2008-09-17 14:36:49 +00:00
  • c7bd9ccd85 Don't capture stderr from spawned processes in proxycommand mode Matt Johnston 2008-09-17 14:35:36 +00:00
  • e44aa503f0 - "-J 'nc localhost 22'" kind of works, needs fixing hostkeys, ptys etc. Matt Johnston 2008-09-15 14:40:30 +00:00
  • 12929e8cf0 - Add run_shell_command() function to run a "sh -c" command, handling lots of the work that exechild did (and can be shared by client -J option) Matt Johnston 2008-09-15 14:04:55 +00:00
  • 7ac24b10b9 - Generalise spawn_command function Matt Johnston 2008-09-15 13:41:18 +00:00
  • d7c1e58217 - Get rid of some ugly #defines Matt Johnston 2008-09-15 13:06:40 +00:00
  • b619e88f54 - Split main socket var into ses.sock_in/ses.sock_out in preparation for -J proxy_cmd option (and some prelim options for that) Matt Johnston 2008-09-15 12:51:50 +00:00
  • 1c72a35ddb propagate from branch 'au.asn.ucc.matt.dropbear' (head f21045c791002d81fc6b8dde6537ea481e513eb2) to branch 'au.asn.ucc.matt.dropbear.dbclient-netcat-alike' (head d1f69334581dc4c35f9ca16aa5355074c9dd315d) Matt Johnston 2008-09-14 06:47:51 +00:00
  • 460bf43822 Remove workaround forcing rsa mpint to exactly a 8 bits multiple for putty (see http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/rsa-non8mult-verify-fail.html , was fixed in 2004) Matt Johnston 2008-09-12 17:48:33 +00:00
  • 31fa5e605b - Rework pubkey options to be more careful about buffer lengths. Needs review. Matt Johnston 2008-09-12 17:23:56 +00:00
  • c0ce2a6a97 * Patch from Frédéric Moulins adding options to authorized_keys. Needs review. Matt Johnston 2008-09-08 15:14:02 +00:00
  • f90f64b5c1 fill_passwd() doesn't have a return value Matt Johnston 2008-07-12 17:00:30 +00:00
  • 96bda2af8e Forgot to bump actual version number DROPBEAR_0.51 Matt Johnston 2008-03-27 13:34:34 +00:00
  • a97603d003 Add SSH_ASKPASS and DROPBEAR_PASSWORD to the dbclient manpage Matt Johnston 2008-03-27 13:25:02 +00:00
  • 77892be79c 0.51 Matt Johnston 2008-03-27 13:17:08 +00:00
  • 3e29368cbc merge of '9879f7138f243bb2077a06e4c9ea925fa34abe2b' and 'e28650f207028a45182fc2de545b7bd218d13077' Matt Johnston 2008-03-27 10:19:36 +00:00
  • b91874cedc Update to debian 0.50-4 diff Matt Johnston 2008-03-27 10:19:28 +00:00
  • acd18ce243 Mention 0.51-test2 changes Matt Johnston 2008-03-01 02:01:35 +00:00
  • 6c9d2abc75 Don't return until the shell has quit. This will ensure that an exit status is always returned. Matt Johnston 2008-02-21 14:46:15 +00:00
  • e277059339 fix up after merge Matt Johnston 2008-01-13 04:02:08 +00:00
  • a3b5d3c8b3 merge of '295b11312e327fe6c4f33512674ea4a1a9790344' and '426d7aeea950d007ed7ef9f03f9f40b138a769cb' Matt Johnston 2008-01-13 04:01:46 +00:00
  • bb0548b3b0 Make a copy of passwd fields since getpwnam()'s retval isn't safe to keep Matt Johnston 2008-01-13 03:55:59 +00:00
  • bb84e33d99 propagate from branch 'au.asn.ucc.matt.dropbear' (head fb7080ca6e254faaf7cfaee93b0ab6ab6de4ed59) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head 78d02301ae8310efa2639f15da0ea62dea110e4b) Matt Johnston 2007-11-29 11:38:06 +00:00
  • b2ac4eb29b Actually use ~/.hushlogin rather than ~/hushlogin to ignore motd. Matt Johnston 2007-11-02 15:03:16 +00:00
  • 25554bc331 Fix to allow building from a separate directory, patch from Ricardo Martins Matt Johnston 2007-10-18 12:18:44 +00:00
  • a018260fe9 Add support for SSH_ASKPASS_ALWAYS env variable for dbclient. If it (and also SSH_ASKPASS) is set then dbclient will use an external askpass program regardless of whether DISPLAY is set or stdin is a TTY. Suggested by Davyd Madeley for handheld devices. Matt Johnston 2007-09-14 00:19:44 +00:00
  • 9a2cdc299f Make sure declarations of variables are at the top of function, pointed out by Alexey Rusakov. Matt Johnston 2007-09-11 12:00:18 +00:00
  • e41452afeb propagate from branch 'au.asn.ucc.matt.dropbear' (head 8a7db1e2fdc5636abb338adb636babc32f465739) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head d82c25da2f7e4fb6da510d806c64344e80bb270d) Matt Johnston 2007-08-16 13:34:37 +00:00
  • 58296a95f1 Make dropbearkey only generate 1024 bit keys DROPBEAR_0.50 Matt Johnston 2007-08-08 15:57:50 +00:00
  • ddb61adcc9 Fix delayed packet queue handling Matt Johnston 2007-08-08 15:48:52 +00:00
  • 790cdadace Prepare for 0.50 release Matt Johnston 2007-08-08 15:27:41 +00:00
  • 75ec4d6510 - Add -K keepalive flag for dropbear and dbclient - Try to reduce the frequency of select() timeouts - Add a max receive window size of 1MB Matt Johnston 2007-08-08 15:12:06 +00:00
  • a7649c250f Stop scp passing arguments that dbclient doesn't understand Matt Johnston 2007-07-28 08:59:24 +00:00
  • 57ae0bfedf Prevent invalid packets being sent during key-exchange, instead queue them until afterwards. This could sometimes terminate connections after 8 hours if (for example) a new TCP forwarded connection was sent at the KEX timeout. Matt Johnston 2007-07-27 17:13:42 +00:00
  • 993f58900d Add default argument for receive window Matt Johnston 2007-07-25 16:20:57 +00:00
  • 876e7b99d4 Use the -W <windowsize> argument in startup scripts, with a default of 64kB Matt Johnston 2007-07-25 15:44:50 +00:00
  • e3e4445dc1 Add -W <windowsize> argument and document it. Matt Johnston 2007-07-25 15:44:25 +00:00
  • 2d4d9627a2 Rearrange the channel buffer sizes into three neat use-editable values in options.h. Increasing RECV_MAX_WINDOW gives big network performance increases - even with the present buffers (which haven't changed) it performs a lot better. Next step is to make the window size a cmdline option. Matt Johnston 2007-07-24 15:40:23 +00:00
  • 762e9973ff Patch from Nicolai Ehemann to try binding before going to the background, so that if it exits early (because something's already listening etc) then it will return an exitcode of 1. Matt Johnston 2007-07-19 15:54:18 +00:00
  • b04e2d14ef Just use /dev/urandom since that's what everyone ends up using anyway. Make -u a nop. Matt Johnston 2007-07-19 15:47:32 +00:00
  • 456b500902 "backgrounding" is more user-understandable than "forking" Matt Johnston 2007-07-19 14:08:24 +00:00
  • 0b72cf1ed2 uClinux ifdef was accidentally inverted Matt Johnston 2007-07-19 14:08:01 +00:00
  • 4639844208 Fix spelling typo Matt Johnston 2007-07-19 14:07:41 +00:00
  • 77c33e7750 Add -u option to specify /dev/urandom instead Matt Johnston 2007-04-16 13:39:50 +00:00
  • a4130263bd Allow reading dbclient password from an environment var Matt Johnston 2007-03-17 06:30:11 +00:00
  • 0ffc17e481 Remove a newline from the kex prompt question, from FreeWRT Matt Johnston 2007-02-25 09:48:13 +00:00
  • 62d792fbdc Fix a stupid bug s/readfd/errfd/ affecting channel close on child exit DROPBEAR_0.49 Matt Johnston 2007-02-22 16:17:09 +00:00
  • 7aefd496f1 Document -p [address:]port Matt Johnston 2007-02-22 15:51:15 +00:00
  • 70a2281823 0.49 probably done Matt Johnston 2007-02-22 15:46:57 +00:00
  • c077f22fb4 Improve known_hosts checking. Matt Johnston 2007-02-22 15:29:32 +00:00
  • b01a74a9d7 merge of 'a9b0496634cdd25647b65e585cc3240f3fa699ee' and 'c22be8b8f570b48e9662dac32c7b3e7148a42206' Matt Johnston 2007-02-22 14:53:49 +00:00
  • 66643fa5c7 Add -p [address:]port option for binding to addresses, patch from Max-Gerd Retzlaff Matt Johnston 2007-02-22 14:52:46 +00:00
  • 7f12251fbb Fix for -pedantic -ansi compilation, change // to /**/, plus some signedness and trailing-comma-in-array issues Matt Johnston 2007-02-16 14:42:08 +00:00
  • 41fd735d4b Make sure the #includes for pam only get hit if PAM is enabled. Matt Johnston 2007-02-13 10:30:02 +00:00
  • 4941c43429 Quote some message in configure Matt Johnston 2007-02-12 15:50:21 +00:00
  • f5e9b12b60 Changes for 0.49test1 Matt Johnston 2007-02-12 15:02:48 +00:00
  • 6c081b4e7c propagate from branch 'au.asn.ucc.matt.dropbear' (head 6cb7793493d92968e09b5dea21d71ded5811d21f) to branch 'au.asn.ucc.matt.dropbear.channel-fix' (head 275bf5c6b71ca286c29733b9e38bac40eeb06a40) Matt Johnston 2007-02-12 13:38:18 +00:00
  • 769076f2ae Turn off DEBUG_TRACE Matt Johnston 2007-02-12 13:37:58 +00:00