2013-04-10 |
Matt Johnston |
reset terminal modes before printing a message
|
2013-04-09 |
Matt Johnston |
A bit of debugging output
ecc
|
2013-04-09 |
Matt Johnston |
Be safer with how we handle ltc_ecc_sets[] (particularly with
ecc
|
2013-04-08 |
Matt Johnston |
start on ecdsa keys
ecc
|
2013-04-08 |
Matt Johnston |
- Rename buf_put_ecc_pubkey_string() to buf_put_ecc_raw_pubkey_string()
ecc
|
2013-04-08 |
Matt Johnston |
add printmpint() for debugging
ecc
|
2013-04-08 |
Matt Johnston |
ecdh works against OpenSSH
ecc
|
2013-04-07 |
Matt Johnston |
- Fix various hardcoded uses of SHA1
ecc
|
2013-04-06 |
Matt Johnston |
ecc kind of works, needs fixing/testing
ecc
|
2013-04-06 |
Matt Johnston |
Make _sign and _verify functions take a buffer* rather than void* and int
ecc
|
2013-03-28 |
Matt Johnston |
More changes for KEX and ECDH. Set up hash descriptors, make ECC code work,
ecc
|
2013-03-28 |
Matt Johnston |
Set LTC_SOURCE for proper ltm_desc etc
ecc
|
2013-03-27 |
Matt Johnston |
ecc key import function
ecc
|
2013-03-26 |
Matt Johnston |
more bits on ecc branch
ecc
|
2013-03-25 |
Matt Johnston |
refactor kexdh code a bit, start working on ecdh etc
ecc
|
2013-04-03 |
Matt Johnston |
setup tcp after requesting a channel - might hide some DNS latency
|
2013-04-03 |
Matt Johnston |
Take transmit and receive keys into use separately
|
2013-04-03 |
Matt Johnston |
Fix MAC bug which would prevent asymmetric hashes
|
2013-04-03 |
Matt Johnston |
Just put the version string on the queue, don't use atomicio
|
2013-04-02 |
Matt Johnston |
fix leftover kexguess debugging
|
2013-04-02 |
Matt Johnston |
Fix a few options and headers
|
2013-04-02 |
Matt Johnston |
merge
|
2013-04-02 |
Matt Johnston |
merge kexguess branch
|
2013-04-02 |
Matt Johnston |
Put some #ifdef options around first-follows options in case they
kexguess
|
2013-04-02 |
Matt Johnston |
Don't usually need to recalculate dh_e for the repeated kexdh_init packet
kexguess
|
2013-04-02 |
Matt Johnston |
Add sentinel attribute
kexguess
|
2013-03-31 |
Matt Johnston |
merge from head roundtrip changes
kexguess
|
2013-03-30 |
Matt Johnston |
merge
kexguess
|
2013-03-30 |
Matt Johnston |
Get rid of client/server specific buf_match_algo, use single
kexguess
|
2013-03-29 |
Matt Johnston |
Add kexguess2 behaviour
kexguess
|
2013-03-29 |
Matt Johnston |
first_kex_packet_follows working, needs tidying
kexguess
|
2013-04-02 |
Matt Johnston |
add IUTF8
|
2013-04-02 |
Matt Johnston |
fix tabs
|
2013-04-02 |
Matt Johnston |
merge
|
2013-04-02 |
Matt Johnston |
Fix segfault when /dev/urandom isn't writable
|
2013-04-01 |
Matt Johnston |
Be a bit more careful about when we want to use CLI_AUTH_IMMEDIATE
|
2013-04-01 |
Matt Johnston |
Run the cleanup handler also when we close due to TCP connection being closed
|
2013-04-01 |
Matt Johnston |
Try password before interactive - bit of a hack
|
2013-03-31 |
Matt Johnston |
Move the more verbose TRACE() statements into TRACE2()
|
2013-03-31 |
Matt Johnston |
Send an auth packet straight away, save another roundtrip
|
2013-03-31 |
Matt Johnston |
Fix incorrect logic for USE_VFORK and calling arg_setup()
|
2013-03-31 |
Matt Johnston |
Try using writev() for writing packets out to tcp
|
2013-03-31 |
Matt Johnston |
Don't bother waiting for a ssh-connection service reply - the server
|
2013-03-30 |
Matt Johnston |
send out our kexinit packet before blocking to read the SSH version string
|
2013-03-23 |
Matt Johnston |
Define _GNU_SOURCE for vasprintf
|
2013-03-23 |
Mike Frysinger |
rename configure.in -> configure.ac
|
2013-03-23 |
Matt Johnston |
Fix a few compile warnings
|
2013-03-23 |
Matt Johnston |
Add ~. and ~^Z handling to exit/suspend dbclient
|
2013-03-21 |
Matt Johnston |
Added signature for changeset 9b80981212fe
|
2013-03-21 |
Matt Johnston |
Added tag DROPBEAR_2013.56 for changeset 1b8b2b9d6e94
|
2013-03-21 |
Matt Johnston |
Forgot date in CHANGES
DROPBEAR_2013.56
|
2013-03-21 |
Matt Johnston |
2013.56 changelog
|
2013-03-21 |
Matt Johnston |
update text about authorized_keys options
|
2013-03-21 |
Matt Johnston |
Add URL to usage text
|
2013-03-21 |
Matt Johnston |
Make hmac-sha2-256 and hmac-sha2-512 work
|
2013-03-21 |
Matt Johnston |
Make sure "struct timeval" is initialised on OS X to avoid valgrind warnings
|
2013-03-20 |
Matt Johnston |
Fix "-c none" so that it allows aes during authentication
|
2013-03-20 |
Matt Johnston |
Fix "-m none" case and ugly typo
|
2013-03-20 |
Matt Johnston |
Fix "-m none" case where an entire packet fits in a block and can be
|
2013-03-20 |
Matt Johnston |
Merge "none" cipher/MAC branch. Also adds sha256 and sha512
|
2013-03-20 |
Matt Johnston |
use an empty writebuf rather than a NULL one
|
2013-03-19 |
Matt Johnston |
document a few more changes
|
2013-03-19 |
Matt Johnston |
Fix memory leak when direct TCP connections time out on connection.
|
2013-03-19 |
Matt Johnston |
Allow specifying server "-p" options with ipv6 bracket notation,
|
2013-03-19 |
Matt Johnston |
Android returns NULL for pw_crypt, set it to something else
|
2013-03-19 |
Matt Johnston |
ignore I_PUSH if it isn't defined, for Android from Reimar Döffinger
|
2013-03-19 |
Matt Johnston |
Fix compat basename() to handle paths with no slashes. Thanks to Frank Teo
|
2013-03-19 |
Matt Johnston |
Include /proc/vmstat as another random source
|
2013-03-19 |
Matt Johnston |
link to Dropbear webpage
|
2013-03-19 |
Matt Johnston |
Removed tag t:ltc-0.95-db-merge1
|
2013-03-19 |
Matt Johnston |
Removed tag t:ltc-0.95-orig
|
2013-03-11 |
Matt Johnston |
fix signedness error in prototype
|
2013-03-03 |
Matt Johnston |
improve subsystem/sftp documentation, and multi-hop manual formatting
|
2013-02-23 |
Matt Johnston |
fix typo
|
2013-02-23 |
Matt Johnston |
DSS_PROTOK is not necessary now that private keys are included
|
2013-02-23 |
Matt Johnston |
add loadavg and entropy_avail as sources
|
2012-06-29 |
Matt Johnston |
increase MAX_MAC_LEN for sha2
sha2
|
2013-02-12 |
Paul Eggleton |
Allow configuring "allow blank password option" at runtime
|
2013-02-22 |
Matt Johnston |
Some changes since 2012.55
|
2013-02-22 |
Matt Johnston |
Document "-m" and "-c"
|
2012-07-19 |
Matt Johnston |
/dev/random blocks on busy servers too.
|
2012-06-30 |
Matt Johnston |
Add a few more files in /proc for Linux
|
2012-06-29 |
Matt Johnston |
Improve RNG seeding.
|
2012-05-17 |
Matt Johnston |
- Only request "none" cipher after auth has succeeded
insecure-nocrypto
|
2012-05-17 |
Matt Johnston |
Add ALLOW_NONE_PASSWORD_AUTH option
insecure-nocrypto
|
2012-05-17 |
Matt Johnston |
Merge in "-m"/"-c" code
insecure-nocrypto
|
2012-05-16 |
Matt Johnston |
ENABLE_USER_ALGO_LIST should work for the client
|
2012-05-16 |
Matt Johnston |
Add rough support for choosing ciphers/hashes with "-c" or "-m"
|
2012-05-16 |
Matt Johnston |
Update insecure-nocrypto to current head
insecure-nocrypto
|
2012-05-16 |
Matt Johnston |
Disable SHA256 and SHA512 by default in options.h
sha2
|
2012-05-10 |
Matt Johnston |
- Add hmac-sha2-256 and hmac-sha2-512. Needs debugging, seems to be
sha2
|
2012-05-09 |
Matt Johnston |
Don't TRACE() the pw_passwd
|
2012-05-09 |
Matt Johnston |
Fix empty password immediate login
|
2012-05-09 |
Matt Johnston |
Return immediate success for blank passwords if allowed
|
2012-05-09 |
Matt Johnston |
Server shouldn't return "localhost" in response to -R forward connections
|
2012-05-09 |
Matt Johnston |
Initialise agent_fd to -1 so we don't end up closing stdin (fd 0)
|
2012-05-09 |
Matt Johnston |
- Don't sent SSH_MSG_UNIMPLEMENTED if we don't have ENABLE_SVR_REMOTETCPFWD
|
2012-04-24 |
Matt Johnston |
Ignore -q if SCP_PROGRESS isn't set
|
2012-04-12 |
Matt Johnston |
Split listening port argument at the rightmost colon, allows binding to
|
2012-04-12 |
Matt Johnston |
Improve comment about sha1-96
|
2012-04-09 |
Matt Johnston |
Slight formatting change for ENABLE_CLI_AGENTFWD if statement
|
2012-03-26 |
Andrey Mazo |
Fixed compilation with unset ENABLE_{SVR,CLI}_AGENTFWD.
|
2012-04-09 |
Matt Johnston |
Rename HAVE_FORK to USE_VFORK
|
2012-04-08 |
Mike Frysinger |
check for fork() and not __uClinux__
|
2012-04-08 |
Mike Frysinger |
fix out-of-tree cleaning
|
2012-02-23 |
Matt Johnston |
Added signature for changeset 85f835f2fe0a
|
2012-02-23 |
Matt Johnston |
Added tag DROPBEAR_2012.55 for changeset d354464b2aa6
|
2012-02-23 |
Matt Johnston |
- Improve CHANGES description
DROPBEAR_2012.55
|
2012-02-22 |
Matt Johnston |
2012.55
|
2012-02-22 |
Matt Johnston |
- Fix minor leak
|
2012-02-22 |
Matt Johnston |
Fix accidentally committed change
|
2011-12-03 |
Matt Johnston |
- Initialise sa_mask properly
|
2012-02-21 |
Matt Johnston |
- Merge
|
2012-02-21 |
Matt Johnston |
- Make sure sa_mask is set
|
2012-02-21 |
Matt Johnston |
- Burn buffers to 0x00 instead
|
2011-12-03 |
Matt Johnston |
- Fix use-after-free if multiple command requests were sent. Move
|
2011-12-03 |
Matt Johnston |
- Remove unused variable/code
|
2011-12-03 |
Matt Johnston |
- Make sure we don't use channel-specific data after it has been freed
|
2011-12-03 |
Matt Johnston |
- Fix some format strings in TRACE()s
|
2011-12-03 |
Matt Johnston |
- We don't need to test for NULL before free()
|
2012-02-10 |
Matt Johnston |
Merge
|
2012-02-10 |
Matt Johnston |
Clear a few buffers when possible
|
2011-11-30 |
Matt Johnston |
- Fix constraints so we don't get warned about uninitialised
dropbear-tfm
|
2011-11-30 |
Matt Johnston |
- More asm constraint fixes. Now seems to build OK on 32-bit OS X.
dropbear-tfm
|
2011-11-30 |
Matt Johnston |
- Work around broken asm constraint behaviour on 32bit x86 OS X
dropbear-tfm
|
2011-11-23 |
Matt Johnston |
Somehow Makefile.in went missing
dropbear-tfm tomsfastmath
|
2011-11-23 |
Matt Johnston |
Add tomsfastmath from git rev bfa4582842bc3bab42e4be4aed5703437049502a
dropbear-tfm
|
2011-11-22 |
Matt Johnston |
A few build fixes
dropbear-tfm
|
2011-11-21 |
Matt Johnston |
- Update tfm changes to current default tip
dropbear-tfm
|
2011-11-21 |
Matt Johnston |
- Bring in original tomsfastmath patch against 0.52 from Peter Turczak
dropbear-tfm
|
2011-11-10 |
Matt Johnston |
Put better #if guards around IPv6 socket options for IPV6_TCLASS and
|
2011-11-08 |
Matt Johnston |
Added signature for changeset 3f12086c2ef2
|
2011-11-08 |
Matt Johnston |
Added tag DROPBEAR_2011.54 for changeset 3f12086c2ef2
|
2011-11-08 |
Matt Johnston |
Changelog and version bump for 2011.54
DROPBEAR_2011.54
|
2011-11-08 |
Matt Johnston |
Fix symlink target created by installdropbearmulti
|
2011-11-07 |
Matt Johnston |
Added signature for changeset aa2f51a6b81d
|
2011-11-07 |
Matt Johnston |
Use "uint64_t" instead of "u_int64_t" since the Solaris doesn't have the
|
2011-11-06 |
Matt Johnston |
Fix crash with -R forwarding
|
2011-11-05 |
Matt Johnston |
Print the server allocated port when using dbclient -R 0:....
|
2011-11-03 |
convert-repo |
update tags
|
2011-10-26 |
Matt Johnston |
Set IPTOS_LOWDELAY for IPv6 too
|
2011-10-26 |
Matt Johnston |
- Add ALLOW_BLANK_PASSWORD option
|
2011-10-20 |
Matt Johnston |
Try bind IPV6_V6ONLY
|
2011-07-05 |
Matt Johnston |
list.c also has no trailing newline
|
2011-07-05 |
Matt Johnston |
Fix lost ending newline
|
2011-06-30 |
Matt Johnston |
Hopefully fix -lcrypt problem
|
2011-06-07 |
Matt Johnston |
Fix case where "-K 1" would cause a SSH_MSG_IGNORE packet to be sent
|
2011-06-07 |
Matt Johnston |
Mention that the value is in seconds
|
2011-04-07 |
Matt Johnston |
Clean up leaked FD if getnameinfo fails. From Klocwork
|
2011-04-07 |
Matt Johnston |
Fix crash when remote forwarding was requested
|
2011-04-07 |
Matt Johnston |
Fix leak found by Klocwork
|
2011-04-07 |
Matt Johnston |
Properly fix the bug found years ago by Klocwork, refound again.
|
2011-04-07 |
Matt Johnston |
Clean up fd on failure. Found by Klocwork
|
2011-04-07 |
Matt Johnston |
Define LTC_NO_FILE to avoid hmac_file() etc
|
2011-04-07 |
Matt Johnston |
Fix FD leak if connect() fails, found by Klocwork
|
2011-04-07 |
Matt Johnston |
Add noreturn and format attribute hints for some functions.
|
2011-04-07 |
Matt Johnston |
Fix memory leak found by Klocwork
|
2011-04-07 |
Matt Johnston |
Tidy error handling and get rid of some commented out code
|
2011-04-07 |
Matt Johnston |
Change comparison to be more paranoid (and perhaps avoid Klocwork false
|
2011-04-07 |
Matt Johnston |
Fix check of wrong variable found by Klocwork
|
2011-03-31 |
Matt Johnston |
Avoid segfault when handling childpid race
|
2011-03-18 |
Matt Johnston |
Use mp_init_size() to avoid some mp_grow()s
|
2011-03-02 |
Matt Johnston |
Update changelog for 0.53.1
DROPBEAR_0.53.1
|
2011-02-28 |
Matt Johnston |
merge of '8a608f0ed5e4b491dba4bf330e560636ec7376fd'
|
2011-02-28 |
Matt Johnston |
- Don't allow setting memLevel since that doesn't work properly
|
2011-02-28 |
Matt Johnston |
Compile fix for when both client and server agent forwarding is disabled
|
2011-02-27 |
Matt Johnston |
Refer to RFCs rather than drafts, update some section references
|
2011-02-27 |
Matt Johnston |
- Fix DROPBEAR_PRNGD_SOCKET since it doesn't need to call connect()
|
2011-02-25 |
Matt Johnston |
Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53
|
2011-02-25 |
Matt Johnston |
-lcrypt needs to be before object files when static linking
|
2011-02-24 |
Matt Johnston |
- Set debian version to 0.53
DROPBEAR_0.53
|
2011-02-24 |
Matt Johnston |
Changelog for 0.53, bump version
|
2011-02-24 |
Matt Johnston |
Mention -L/-R listenaddress argument in manpage
|
2011-02-24 |
Matt Johnston |
It happened to sony
|
2011-02-24 |
Matt Johnston |
Add diffie-hellman-group14-sha1 KEX method
|
2011-02-23 |
Matt Johnston |
Improve capitalisation for all logged strings
|
2011-02-23 |
Matt Johnston |
merge of '8849ec659cb45b924158cc3322390a1d3d48daef'
|
2011-02-23 |
Matt Johnston |
Don't reset last_packet_time when we're transmitting SSH_MSG_IGNORE packets
|
2010-07-21 |
Matt Johnston |
remove unused variable
|
2010-07-21 |
Matt Johnston |
merge of '4b90e96a8a8afcc9feafc59cb47592a4a6d1cc30'
|
2010-07-21 |
Matt Johnston |
- Update fake-rfc2553.{c,h} from OpenSSH 5.5p1
|
2010-07-21 |
Matt Johnston |
Fix bug in primality testing, see
|
2010-07-21 |
Matt Johnston |
Work properly again with bundled libtom*. autoconf is a hassle.
|
2010-07-21 |
Matt Johnston |
Rename rsa_key to dropbear_rsa_key (and same for dss too) so
|
2010-07-21 |
Matt Johnston |
Use system libtomcrypt/libtommath if available. Doesn't currently
|
2010-07-20 |
Matt Johnston |
Comment public/private parts
|
2010-03-21 |
Matt Johnston |
merge of '0adbc6745a5ada0b6780b0683209f5b26b1a335d'
|
2010-03-21 |
Matt Johnston |
- make structure static
|
2010-03-04 |
Matt Johnston |
don't #include "utmp.h"
|
2010-02-27 |
Matt Johnston |
- fixes for listenaddr
|
2010-02-27 |
Matt Johnston |
merge of '48fdaa8706d1acda35e9d564adc9a1fbc96c18c8'
|
2010-02-27 |
Matt Johnston |
- tcpfwd bindaddr support against trunk. needs merging.
|
2010-02-24 |
Matt Johnston |
- Progress for allowing specifying a listenaddr for tcp forwards
|
2009-09-13 |
Matt Johnston |
Mention -p's address argument in manpage synopsis
|
2009-09-11 |
Matt Johnston |
- Disable compression for non-final multihops
|
2009-09-10 |
Matt Johnston |
Remove extraneous semicolon
|
2009-09-08 |
Matt Johnston |
- Test for pam_fail_delay() function in configure
|
2009-09-05 |
Matt Johnston |
Move remotehost into svr_ses structure since we can't look it up
|
2009-09-02 |
Matt Johnston |
- Remove options that dbclient won't know about
|
2009-09-02 |
Matt Johnston |
- scp progressbar needs strlcat(), so add compat.o
|
2009-09-02 |
Matt Johnston |
- Set $SSH_CONNECTION
|
2009-09-01 |
Matt Johnston |
Rearrange getaddrstring() etc
|
2009-08-31 |
Matt Johnston |
- set $SSH_TTY environment variable
|
2009-08-26 |
Matt Johnston |
- set $SSH_ORIGINAL_COMMAND if a command is forced, and log it
|
2009-08-25 |
Matt Johnston |
merge of '0d7a9127af37d6e74efc5ec031a7001ce63d334d'
|
2009-08-25 |
Matt Johnston |
- Move netcat struct to where it stays in scope.
|
2009-08-13 |
Matt Johnston |
- Don't print warning if SSH_AUTH_SOCK is unset
|
2009-07-31 |
Matt Johnston |
- Handle failure to connect to forwarding socket
|
2009-07-30 |
Matt Johnston |
propagate from branch 'au.asn.ucc.matt.dropbear.cli-agent' (head eb0dae4b62e243ba37a897beb7ba81a4f637d8b3)
|
2009-07-30 |
Matt Johnston |
Agent forwarding works
agent-client
|
2009-07-29 |
Matt Johnston |
propagate from branch 'au.asn.ucc.matt.dropbear' (head bbe4e11695a7b22bd89a722600eb4a4020b6fdf3)
agent-client
|
2009-07-28 |
Matt Johnston |
Use /usr/bin/X11/xauth default path instead
|
2009-07-26 |
Matt Johnston |
Turn off DEBUG_TRACE accidentally committed
|
2009-07-26 |
Matt Johnston |
- Payload length doesn't include macsize.
|
2009-07-26 |
Matt Johnston |
- Add option to change zlib windowBits/memLevel
|
2009-07-24 |
Matt Johnston |
Disable Blowfish by default, it has inefficient key memory use
|
2009-07-09 |
Matt Johnston |
- For uclinux, only cleanup on exit for the main process. This avoids
|
2009-07-06 |
Matt Johnston |
- Client auth using an agent's key works. Still need to implement client
agent-client
|
2009-07-06 |
Matt Johnston |
New standard linked list to use, rather than adhoc SignKeyList or TCPFwdList
agent-client
|
2009-07-01 |
Matt Johnston |
Talking to the agent works now. Can't interpret the pubkeys.
agent-client
|
2009-07-01 |
Matt Johnston |
merge of '3450609f92928775614418f40dd44ed5393d9de4'
maemo
|
2009-07-01 |
Matt Johnston |
Some uncommitted changes
maemo
|
2009-07-01 |
Matt Johnston |
Make it compile, update for changes in channel structure.
agent-client
|
2009-07-01 |
Matt Johnston |
propagate from branch 'au.asn.ucc.matt.dropbear' (head 899a8851a5edf840b2f7925bcc26ffe99dcac54d)
agent-client
|
2009-06-16 |
Matt Johnston |
- Print banner to stderr. Probably the right way, and avoids
|
2009-06-12 |
Matt Johnston |
- Make -i and -W pass through multihop arguments
|
2009-06-09 |
Matt Johnston |
- Don't memcpy() in place with void_encrypt
|
2009-06-08 |
Matt Johnston |
Wrap proxycmd function in ENABLE_CLI_PROXYCMD #ifdef
|
2009-06-08 |
Matt Johnston |
disapproval of revision '6d6160b277bfc7c2db6888a2ac91ac618cef6de3'
|
2009-06-08 |
Matt Johnston |
Wrap proxycmd function in ENABLE_CLI_PROXYCMD #ifdef
|
2009-06-08 |
Matt Johnston |
use memset() rather than bzero()
|
2009-03-17 |
Matt Johnston |
merge of '0a8dfaa3e5365a2004db2b55895e11f65b5cefcc'
|
2009-03-17 |
Matt Johnston |
- Add the signal pipe to maxfd
|
2009-03-03 |
Matt Johnston |
- Turn DROPBEAR_SMALL_CODE off by default
|
2009-03-03 |
Matt Johnston |
Remove extraneous debugging
|
2009-03-01 |
Matt Johnston |
- Get rid of decryptreadbuf, just decrypt in-place with readbuf
|
2009-03-01 |
Matt Johnston |
Encrypt in-place, avoid an extra malloc
|
2009-02-26 |
Matt Johnston |
merge of 'e1c100e6366c5d607af08f4abdbb0f4281df4fa9'
|
2009-02-26 |
Matt Johnston |
disapproval of revision 'a101cbd046507cf723e6362a49196dbd4b924042'
|
2009-02-26 |
Matt Johnston |
merge of 'a101cbd046507cf723e6362a49196dbd4b924042'
|