changeset | 4528afefe45d |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Fix IPv6 address parsing for dbclient -b Now can correctly handle '-b [ipv6address]:port' Code is shared with dropbear -p, though they handle colon-less arguments differently |
files |
changeset | bfd0f3248df3 |
---|---|
branch | |
bookmark | |
tag | |
user | HansH111 <hans@atbas.org> |
description | added quiet variable in cli_opts |
files |
changeset | 2b3a8026a6ce |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Add re-exec for server This allows ASLR to re-randomize the address space for every connection, preventing some vulnerabilities from being exploitable by repeated probing. Overhead (memory and time) is yet to be confirmed. At present this is only enabled on Linux. Other BSD platforms with fexecve() would probably also work though have not been tested. |
files |
changeset | 94dc11094e26 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@codeconstruct.com.au> |
description | Increase max window size to 10MB, fallback rather than exiting if an invalid value is given. |
files |
changeset | df8d8ec1801c |
---|---|
branch | |
bookmark | |
tag | |
user | Manfred Kaiser <37737811+manfred-kaiser@users.noreply.github.com> |
description | added option to disable trivial auth methods (#128) * added option to disable trivial auth methods * rename argument to match with other ssh clients * fixed trivial auth detection for pubkeys |
files |
changeset | 5120e22882de |
---|---|
branch | |
bookmark | |
tag | |
user | Roland Vollgraf <30869947+rvollgraf@users.noreply.github.com> |
description | pass on sever process environment to child processes (option -e) (#118) |
files |
changeset | cc0fc5131c5c |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Rename EPKA -> Plugin |
files |
changeset | 76189c9ffea2 |
---|---|
branch | |
bookmark | |
tag | |
user | fabriziobertocci <fabriziobertocci@gmail.com> |
description | External Public-Key Authentication API (#72) * Implemented dynamic loading of an external plug-in shared library to delegate public key authentication * Moved conditional compilation of the plugin infrastructure into the configure.ac script to be able to add -ldl to dropbear build only when the flag is enabled * Added tags file to the ignore list * Updated API to have the constructor to return function pointers in the pliugin instance. Added support for passing user name to the checkpubkey function. Added options to the session returned by the plugin and have dropbear to parse and process them * Added -rdynamic to the linker flags when EPKA is enabled * Changed the API to pass a previously created session to the checkPubKey function (created during preauth) * Added documentation to the API * Added parameter addrstring to plugin creation function * Modified the API to retrieve the auth options. Instead of having them as field of the EPKASession struct, they are stored internally (plugin-dependent) in the plugin/session and retrieved through a pointer to a function (in the session) * Changed option string to be a simple char * instead of unsigned char * |
files |
changeset | 21dabe66f2c8 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | fix constness build error |
files |
changeset | 61a793b6e471 |
---|---|
branch | fuzz |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | merge from main |
files |
changeset | 1acbdf64088e |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | add guard HAVE_GETGROUPLIST |
files |
changeset | bb8eaa26bc93 |
---|---|
branch | fuzz |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | merge from main |
files |
changeset | 6a83b1944432 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Fix restricted group code for BSDs, move to separate function |
files |
changeset | ed930fd6f60f |
---|---|
branch | |
bookmark | |
tag | |
user | stellarpower <stellarpower@googlemail.com> |
description | Added the -G option to allow logins only for users that are members of a certain group. This allows finer control of an instance on who can and cannot login over a certain instance (e.g. password and not key). Needs double-checking and ensuring it meets platform requirements. |
files |
changeset | 5916af64acd4 |
---|---|
branch | fuzz |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | merge from main |
files |
changeset | 2d450c1056e3 |
---|---|
branch | |
bookmark | |
tag | |
user | Michael Witten <mfwitten@gmail.com> |
description | options: Complete the transition to numeric toggles (`#if') For the sake of review, this commit alters only the code; the affiliated comments within the source files also need to be updated, but doing so now would obscure the operational changes that have been made here. * All on/off options have been switched to the numeric `#if' variant; that is the only way to make this `default_options.h.in' thing work in a reasonable manner. * There is now some very minor compile-time checking of the user's choice of options. * NO_FAST_EXPTMOD doesn't seem to be used, so it has been removed. * ENABLE_USER_ALGO_LIST was supposed to be renamed DROPBEAR_USER_ALGO_LIST, and this commit completes that work. * DROPBEAR_FUZZ seems to be a relatively new, as-yet undocumented option, which was added by the following commit: commit 6e0b539e9ca0b5628c6c5a3d118ad6a2e79e8039 Author: Matt Johnston <matt@ucc.asn.au> Date: Tue May 23 22:29:21 2017 +0800 split out checkpubkey_line() separately It has now been added to `sysoptions.h' and defined as `0' by default. * The configuration option `DROPBEAR_PASSWORD_ENV' is no longer listed in `default_options.h.in'; it is no longer meant to be set by the user, and is instead left to be defined in `sysoptions.h' (where it was already being defined) as merely the name of the environment variable in question: DROPBEAR_PASSWORD To enable or disable use of that environment variable, the user must now toggle `DROPBEAR_USE_DROPBEAR_PASSWORD'. * The sFTP support is now toggled by setting `DROPBEAR_SFTPSERVER', and the path of the sFTP server program is set independently through the usual SFTPSERVER_PATH. |
files |
changeset | f787f60f8e45 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | bind to port as well with -b |
files |
changeset | f7a53832501d |
---|---|
branch | |
bookmark | |
tag | |
user | houseofkodai <karthik@houseofkodai.in> |
description | cli_bind_address_connect * replaces -b dummy option in dbclient to be similar with openssh -b option * useful in multi-wan connections |
files |
changeset | 4afde04f0607 |
---|---|
branch | fuzz |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | merge up to date |
files |
changeset | 517c67cbcd31 |
---|---|
branch | |
bookmark | |
tag | |
user | Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> |
description | dropbear server: support -T max auth tries Add support for '-T n' for a run-time specification for maximum number of authentication attempts where 'n' is between 1 and compile time option MAX_AUTH_TRIES. A default number of tries can be specified at compile time using 'DEFAULT_AUTH_TRIES' which itself defaults to MAX_AUTH_TRIES for backwards compatibility. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> |
files |
changeset | 3fdd8c5a0195 |
---|---|
branch | fuzz |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | merge main to fuzz |
files |
changeset | 5c2899e35b63 |
---|---|
branch | fuzz |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | fuzz harness |
files |
changeset | b28624698130 |
---|---|
branch | fuzz |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | copy over some fuzzing code from AFL branch |
files |
changeset | 750ec4ec4cbe |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Convert #ifdef to #if, other build changes |
files |
changeset | a23386821e9f |
---|---|
branch | |
bookmark | |
tag | |
user | Jeremy Kerr <jk@ozlabs.org> |
description | Add -c <command> option to force a specific command This change adds a -c option to dropbear, to force the session to use a specific command, in a similar fashion to OpenSSH's ForceCommand configuration option. This is useful to provide a simple fixed service over ssh, without requiring an authorized key file for the per-key forced_command option. This setting takes precedence over the channel session's provided command, and the per-key forced_command setting. Signed-off-by: Jeremy Kerr <jk@ozlabs.org> |
files |
changeset | 9169e4e7cbee |
---|---|
branch | |
bookmark | |
tag | |
user | Francois Perrad <francois.perrad@gadz.org> |
description | fix empty C prototypes |
files |
changeset | 64a50eac1030 |
---|---|
branch | |
bookmark | |
tag | |
user | Konstantin Tokarev <ktokarev@smartlabs.tv> |
description | Moved usingsyslog from svr_runopts to runopts. |
files |
changeset | 81063d78fe69 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Merge pull request #16 from annulen/openssh_options Implemented ExitOnForwardFailure option for local and remote forwarding. |
files |
changeset | 2907c658fa76 |
---|---|
branch | |
bookmark | |
tag | |
user | Konstantin Tokarev <ktokarev@smartlabs.tv> |
description | Implemented ExitOnForwardFailure option for local and remote forwarding. |
files |
changeset | 86a9e0204c03 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | ports and addresses must be malloced to avoid segfault on exit |
files |
changeset | 089b8e91472b |
---|---|
branch | |
bookmark | |
tag | |
user | Konstantin Tokarev <ktokarev@smartlabs.tv> |
description | Fixed build when ENABLE_CLI_REMOTETCPFWD is the only allowed TCP forwarding. |
files |
changeset | deed0571cacc |
---|---|
branch | |
bookmark | |
tag | |
user | Thorsten Horstmann <thorsten.horstmann@web.de> |
description | DROPBEAR_ prefix for include guards to avoid collisions |
files |
changeset | 47643024fc90 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Disable non-delayed zlib for server |
files |
changeset | f92eb625c48d |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | - Don't use multichar constants since recent gcc complains - Add release script - Simplify print_version |
files |
changeset | 17d874ae93a1 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Add '-V' for version -h should exit with success Update manpages |
files |
changeset | a0819ecfee0b |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Make -K keepalive behave like OpenSSH's ServerAliveInterval |
files |
changeset | f4bb964c8678 |
---|---|
branch | keyondemand |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Add '-R' for delayed hostkey option |
files |
changeset | d4ce5269a439 |
---|---|
branch | ecc |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Fix specifying a keysize for key generation, fix key name arguments |
files |
changeset | 7dcb46da72d9 |
---|---|
branch | ecc |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | merge in HEAD |
files |
changeset | 7f604f9b3756 |
---|---|
branch | ecc |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | ecdsa is working |
files |
changeset | 7fc0aeada79c |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | -y -y to disable hostkey checking fix missing trailing space when passing arguments for multihop mode From Hans Harder |
files |
changeset | c58a15983808 |
---|---|
branch | |
bookmark | |
tag | |
user | Paul Eggleton <paul.eggleton@linux.intel.com> |
description | Allow configuring "allow blank password option" at runtime Changes this from a compile-time switch to a command-line option. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> |
files |
changeset | 4edea9f363d0 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Add rough support for choosing ciphers/hashes with "-c" or "-m" |
files |
changeset | f9b5dc0cba61 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | - Disable compression for non-final multihops |
files |
changeset | 005530560594 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Rearrange getaddrstring() etc |
files |
changeset | de3653483ac0 |
---|---|
branch | agent-client |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | - Client auth using an agent's key works. Still need to implement client agent forwarding. |
files |
changeset | c3f2ec71e3d4 |
---|---|
branch | agent-client |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | New standard linked list to use, rather than adhoc SignKeyList or TCPFwdList |
files |
changeset | 568638be7203 |
---|---|
branch | agent-client |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | propagate from branch 'au.asn.ucc.matt.dropbear' (head 899a8851a5edf840b2f7925bcc26ffe99dcac54d) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head 6bbab8364de17bd9ecb1dee5ffb796e48c0380d2) |
files |
changeset | a3748e54273c |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Idle timeout patch from Farrell Aultman. Needs testing, unsure if server code works |
files |
changeset | d588e3ea557a |
---|---|
branch | agent-client |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | propagate from branch 'au.asn.ucc.matt.dropbear' (head 4fb35083f0f46ea667e7043e7d4314aecd3df46c) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head 833d0adef6cdbf43ea75283524c665e70b0ee1ee) |
files |
changeset | ae600f1eef81 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | - Enable -s for specifying a subsystem (such as sftp) |
files |
changeset | 6cd2152aae0b |
---|---|
branch | idle-timeout |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Idle-timeout patch from Farrell Aultman, need to figure whether to only account DATA packets and whether server->client data makes sense too. |
files |
changeset | b956d6151600 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Replace calls to strtoul() with a helper m_str_to_uint() |
files |
changeset | d59f628e7baa |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | propagate from branch 'au.asn.ucc.matt.dropbear.dbclient-netcat-alike' (head b02ba6628cf2095017c60d202ac630f231e6b553) to branch 'au.asn.ucc.matt.dropbear' (head 636506b73e973b004cc058b07e6f36a25ff902f8) |
files |
changeset | 12d845ab7b5f |
---|---|
branch | dbclient-netcat-alike |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Rework netcat-alike to be a proper mode, with -B argument. |
files |
changeset | 738313e73b1c |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | - "-J 'nc localhost 22'" kind of works, needs fixing hostkeys, ptys etc. |
files |
changeset | e3db1f7a2e43 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | - Split main socket var into ses.sock_in/ses.sock_out in preparation for -J proxy_cmd option (and some prelim options for that) |
files |
changeset | c1e9c81d1d27 |
---|---|
branch | agent-client |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | propagate from branch 'au.asn.ucc.matt.dropbear' (head 8a7db1e2fdc5636abb338adb636babc32f465739) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head d82c25da2f7e4fb6da510d806c64344e80bb270d) |
files |
changeset | 7e43f5e473b9 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | - Add -K keepalive flag for dropbear and dbclient - Try to reduce the frequency of select() timeouts - Add a max receive window size of 1MB |
files |
changeset | 3e6c536bc023 |
---|---|
branch | |
bookmark | |
tag | |
user | Matt Johnston <matt@ucc.asn.au> |
description | Add -W <windowsize> argument and document it. |
files |