comparison CHANGES @ 1141:63ac2261e1b0

couple more changelog items
author Matt Johnston <matt@ucc.asn.au>
date Mon, 03 Aug 2015 23:17:50 +0800
parents 7cb1f49d89a8
children 809feaa9408f
comparison
equal deleted inserted replaced
1140:f6d3a16ecc71 1141:63ac2261e1b0
6 Needs a recent Linux kernel and possibly "sysctl -w net.ipv4.tcp_fastopen=3" 6 Needs a recent Linux kernel and possibly "sysctl -w net.ipv4.tcp_fastopen=3"
7 Client side is disabled by default pending further compatibility testing 7 Client side is disabled by default pending further compatibility testing
8 with networks and systems. 8 with networks and systems.
9 9
10 - Forwarded TCP ports connect asynchronously and retry with other available 10 - Forwarded TCP ports connect asynchronously and retry with other available
11 addresses (IPv4 or IPv6, round robin IPs) 11 addresses (IPv4 versus IPv6, round robin IPs)
12 12
13 - Free memory before exiting, patch from Thorsten Horstmann. Useful for 13 - Free memory before exiting, patch from Thorsten Horstmann. Useful for
14 Dropbear ports to embedded systems and for checking memory leaks 14 Dropbear ports to embedded systems and for checking memory leaks
15 with valgrind. Only partially implemented for client side. 15 with valgrind. Only partially implemented for client side.
16 16
20 warnings) 20 warnings)
21 21
22 - Fix small ECC memory leaks 22 - Fix small ECC memory leaks
23 23
24 - Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of 24 - Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of
25 Matt Consulting. Odds of bad values are around 2**-512 -- improbable. 25 Matta Consulting. Odds of bad values are around 2**-512 -- improbable.
26 26
27 - Twofish-ctr cipher is supported though disabled by default 27 - Twofish-ctr cipher is supported though disabled by default
28 28
29 - Fix pre-authentication timeout when waiting for client SSH-2.0 banner, thanks
30 to CL Ouyang
31
32 - Increase maximum command size to 9000 bytes
33
34 - DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends home directory unless
35 there is a leading slash (~ isn't treated specially)
29 36
30 2015.67 - Wednesday 28 January 2015 37 2015.67 - Wednesday 28 January 2015
31 38
32 - Call fsync() after generating private keys to ensure they aren't lost if a 39 - Call fsync() after generating private keys to ensure they aren't lost if a
33 reboot occurs. Thanks to Peter Korsgaard 40 reboot occurs. Thanks to Peter Korsgaard